@fjall/generator 14.2.0 → 15.0.0

package/dist/src/codemod/index.js

@@ -1 +1 @@
-import{addResource as o}from"./edits/addResource.js";import{removeResource as c}from"./edits/removeResource.js";import{modifyResource as m}from"./edits/modifyResource.js";import{appendAccountToStage as s}from"./edits/appendAccountToStage.js";import{setContainerSecrets as E}from"./edits/setContainerSecrets.js";import{connectResourceToCompute as l}from"./edits/connectResourceToCompute.js";import{addVpcPeer as f,modifyVpcPeer as u,removeVpcPeer as T}from"./edits/vpcPeer.js";import{addVpcPeerAccepter as x,modifyVpcPeerAccepter as P,removeVpcPeerAccepter as S}from"./edits/vpcPeerAccepter.js";import{addCrossPlanConnection as v,modifyCrossPlanConnection as C,removeCrossPlanConnection as N}from"./edits/crossPlanConnection.js";import{resolveDriftPolicy as b}from"./edits/driftPolicy.js";import{listResources as y}from"./listResources.js";import{resolveConstructByLiteralProperty as G}from"./semanticIndex/index.js";import{parse as I}from"./fileRewriter/parse.js";import{CrossPlanConnectionResourcePlanSchema as F,VpcPeerAccepterResourcePlanSchema as L,VpcPeerResourcePlanSchema as U}from"../schemas/index.js";import{detectDrift as k,mergeProperties as B,snapshotProperties as M}from"./drift/index.js";import{computeLinesDelta as K}from"./_internal.js";import{ResourceNameSchema as q,StatementTypeSchema as w}from"./types.js";import{REGISTERED_STATEMENT_TYPES as H,STATEMENT_REGISTRY as J}from"./registry.js";import{evaluateEmitGuard as W,UNRESOLVED as X}from"./emitGuard.js";import{projectionRefusals as $}from"./emitProjection.js";import{CODEMOD_ERROR_KINDS as re}from"./telemetry/errorKinds.js";import{buildEgressBlockedEvent as te,buildFiredEvent as ce,buildGateFailedEvent as pe,buildGatePassedEvent as me,buildRejectedEvent as ae,buildSucceededEvent as se,buildTimeoutEvent as ne,estimateCostUsd as Ee,FALLBACK_EVENTS as de,GATE_EVENTS as le,gateFallbackOutput as ie,PARSE_GATE as fe,RUNTIME_GATE as ue,runFallback as Te,shouldTryFallback as Re,UNATTRIBUTED_ORGANISATION as xe}from"./llmFallback/index.js";export{re as CODEMOD_ERROR_KINDS,F as CrossPlanConnectionResourcePlanSchema,de as FALLBACK_EVENTS,le as GATE_EVENTS,fe as PARSE_GATE,H as REGISTERED_STATEMENT_TYPES,ue as RUNTIME_GATE,q as ResourceNameSchema,J as STATEMENT_REGISTRY,w as StatementTypeSchema,xe as UNATTRIBUTED_ORGANISATION,X as UNRESOLVED,L as VpcPeerAccepterResourcePlanSchema,U as VpcPeerResourcePlanSchema,v as addCrossPlanConnection,o as addResource,f as addVpcPeer,x as addVpcPeerAccepter,s as appendAccountToStage,te as buildEgressBlockedEvent,ce as buildFiredEvent,pe as buildGateFailedEvent,me as buildGatePassedEvent,ae as buildRejectedEvent,se as buildSucceededEvent,ne as buildTimeoutEvent,K as computeLinesDelta,l as connectResourceToCompute,k as detectDrift,Ee as estimateCostUsd,W as evaluateEmitGuard,ie as gateFallbackOutput,y as listResources,B as mergeProperties,C as modifyCrossPlanConnection,m as modifyResource,u as modifyVpcPeer,P as modifyVpcPeerAccepter,I as parse,$ as projectionRefusals,N as removeCrossPlanConnection,c as removeResource,T as removeVpcPeer,S as removeVpcPeerAccepter,G as resolveConstructByLiteralProperty,b as resolveDriftPolicy,Te as runFallback,E as setContainerSecrets,Re as shouldTryFallback,M as snapshotProperties};
+import{addResource as o}from"./edits/addResource.js";import{removeResource as c}from"./edits/removeResource.js";import{modifyResource as a}from"./edits/modifyResource.js";import{appendAccountToStage as s}from"./edits/appendAccountToStage.js";import{setContainerSecrets as E}from"./edits/setContainerSecrets.js";import{connectResourceToCompute as d}from"./edits/connectResourceToCompute.js";import{addVpcPeer as u,modifyVpcPeer as f,removeVpcPeer as R}from"./edits/vpcPeer.js";import{addVpcPeerAccepter as T,modifyVpcPeerAccepter as P,removeVpcPeerAccepter as x}from"./edits/vpcPeerAccepter.js";import{addCrossPlanConnection as C,modifyCrossPlanConnection as v,removeCrossPlanConnection as N}from"./edits/crossPlanConnection.js";import{resolveDriftPolicy as V}from"./edits/driftPolicy.js";import{listResources as h}from"./listResources.js";import{resolveConstructByLiteralProperty as y}from"./semanticIndex/index.js";import{parse as G}from"./fileRewriter/parse.js";import{CrossPlanConnectionResourcePlanSchema as F,VpcPeerAccepterResourcePlanSchema as g,VpcPeerResourcePlanSchema as U}from"../schemas/index.js";import{detectDrift as L,mergeProperties as M,RESOURCE_SNAPSHOT_SCHEMA_VERSION as B,ResourceSnapshotSchema as j,snapshotProperties as H}from"./drift/index.js";import{computeLinesDelta as Y}from"./_internal.js";import{ResourceNameSchema as w,StatementTypeSchema as z}from"./types.js";import{REGISTERED_STATEMENT_TYPES as Q,STATEMENT_REGISTRY as W}from"./registry.js";import{evaluateEmitGuard as Z,UNRESOLVED as $}from"./emitGuard.js";import{projectionRefusals as re}from"./emitProjection.js";import{CODEMOD_ERROR_KINDS as te}from"./telemetry/errorKinds.js";import{buildEgressBlockedEvent as pe,buildFiredEvent as ae,buildGateFailedEvent as me,buildGatePassedEvent as se,buildRejectedEvent as ne,buildSucceededEvent as Ee,buildTimeoutEvent as le,estimateCostUsd as de,FALLBACK_EVENTS as ie,GATE_EVENTS as ue,gateFallbackOutput as fe,matchFallbackTrigger as Re,PARSE_GATE as Se,RUNTIME_GATE as Te,runFallback as Pe,shouldTryFallback as xe,UNATTRIBUTED_ORGANISATION as Ae}from"./llmFallback/index.js";export{te as CODEMOD_ERROR_KINDS,F as CrossPlanConnectionResourcePlanSchema,ie as FALLBACK_EVENTS,ue as GATE_EVENTS,Se as PARSE_GATE,Q as REGISTERED_STATEMENT_TYPES,B as RESOURCE_SNAPSHOT_SCHEMA_VERSION,Te as RUNTIME_GATE,w as ResourceNameSchema,j as ResourceSnapshotSchema,W as STATEMENT_REGISTRY,z as StatementTypeSchema,Ae as UNATTRIBUTED_ORGANISATION,$ as UNRESOLVED,g as VpcPeerAccepterResourcePlanSchema,U as VpcPeerResourcePlanSchema,C as addCrossPlanConnection,o as addResource,u as addVpcPeer,T as addVpcPeerAccepter,s as appendAccountToStage,pe as buildEgressBlockedEvent,ae as buildFiredEvent,me as buildGateFailedEvent,se as buildGatePassedEvent,ne as buildRejectedEvent,Ee as buildSucceededEvent,le as buildTimeoutEvent,Y as computeLinesDelta,d as connectResourceToCompute,L as detectDrift,de as estimateCostUsd,Z as evaluateEmitGuard,fe as gateFallbackOutput,h as listResources,Re as matchFallbackTrigger,M as mergeProperties,v as modifyCrossPlanConnection,a as modifyResource,f as modifyVpcPeer,P as modifyVpcPeerAccepter,G as parse,re as projectionRefusals,N as removeCrossPlanConnection,c as removeResource,R as removeVpcPeer,x as removeVpcPeerAccepter,y as resolveConstructByLiteralProperty,V as resolveDriftPolicy,Pe as runFallback,E as setContainerSecrets,xe as shouldTryFallback,H as snapshotProperties};

package/dist/src/codemod/llmFallback/index.d.ts

@@ -1,6 +1,6 @@
 export { runFallback, type FallbackClients, type RunFallbackInput, } from "./runFallback.js";
 export { gateFallbackOutput, type GateEventAction, type GateFallbackParams, } from "./gateFallbackOutput.js";
-export { shouldTryFallback, type FallbackDecision, type FallbackGuardConfig, } from "./shouldTryFallback.js";
+export { matchFallbackTrigger, shouldTryFallback, type FallbackDecision, type FallbackGuardConfig, } from "./shouldTryFallback.js";
 export { buildEgressBlockedEvent, buildFiredEvent, buildGateFailedEvent, buildGatePassedEvent, buildRejectedEvent, buildSucceededEvent, buildTimeoutEvent, estimateCostUsd, FALLBACK_EVENTS, GATE_EVENTS, UNATTRIBUTED_ORGANISATION, type FallbackEgressBlockedEvent, type FallbackFiredEvent, type FallbackRejectedEvent, type FallbackSucceededEvent, type FallbackTelemetryEvent, type FallbackTimeoutEvent, type GateFailedEvent, type GatePassedEvent, type TelemetrySource, } from "./telemetryEvents.js";
 export { PARSE_GATE, RUNTIME_GATE } from "./types.js";
 export type { AnthropicClientProvider, AnthropicContentBlock, AnthropicResponse, ApplyResult, EgressStage, FallbackInput, FallbackIntent, FallbackOp, FallbackOutput, FallbackTelemetry, MorphClientProvider, MorphResponse, StrReplaceOp, TriggerReason, } from "./types.js";

package/dist/src/codemod/llmFallback/index.js

@@ -1 +1 @@
-import{runFallback as E}from"./runFallback.js";import{gateFallbackOutput as l}from"./gateFallbackOutput.js";import{shouldTryFallback as r}from"./shouldTryFallback.js";import{buildEgressBlockedEvent as a,buildFiredEvent as T,buildGateFailedEvent as i,buildGatePassedEvent as b,buildRejectedEvent as A,buildSucceededEvent as n,buildTimeoutEvent as s,estimateCostUsd as c,FALLBACK_EVENTS as m,GATE_EVENTS as v,UNATTRIBUTED_ORGANISATION as p}from"./telemetryEvents.js";import{PARSE_GATE as G,RUNTIME_GATE as N}from"./types.js";export{m as FALLBACK_EVENTS,v as GATE_EVENTS,G as PARSE_GATE,N as RUNTIME_GATE,p as UNATTRIBUTED_ORGANISATION,a as buildEgressBlockedEvent,T as buildFiredEvent,i as buildGateFailedEvent,b as buildGatePassedEvent,A as buildRejectedEvent,n as buildSucceededEvent,s as buildTimeoutEvent,c as estimateCostUsd,l as gateFallbackOutput,E as runFallback,r as shouldTryFallback};
+import{runFallback as l}from"./runFallback.js";import{gateFallbackOutput as d}from"./gateFallbackOutput.js";import{matchFallbackTrigger as a,shouldTryFallback as o}from"./shouldTryFallback.js";import{buildEgressBlockedEvent as T,buildFiredEvent as i,buildGateFailedEvent as b,buildGatePassedEvent as c,buildRejectedEvent as A,buildSucceededEvent as m,buildTimeoutEvent as n,estimateCostUsd as s,FALLBACK_EVENTS as v,GATE_EVENTS as F,UNATTRIBUTED_ORGANISATION as p}from"./telemetryEvents.js";import{PARSE_GATE as N,RUNTIME_GATE as f}from"./types.js";export{v as FALLBACK_EVENTS,F as GATE_EVENTS,N as PARSE_GATE,f as RUNTIME_GATE,p as UNATTRIBUTED_ORGANISATION,T as buildEgressBlockedEvent,i as buildFiredEvent,b as buildGateFailedEvent,c as buildGatePassedEvent,A as buildRejectedEvent,m as buildSucceededEvent,n as buildTimeoutEvent,s as estimateCostUsd,d as gateFallbackOutput,a as matchFallbackTrigger,l as runFallback,o as shouldTryFallback};

package/dist/src/codemod/llmFallback/shouldTryFallback.d.ts

@@ -11,3 +11,12 @@ export type FallbackDecision = {
     shouldTry: false;
 };
 export declare function shouldTryFallback(error: CodemodError, config: FallbackGuardConfig): FallbackDecision;
+/**
+ * The trigger kind a failure would fall back under, or undefined when no
+ * amount of enablement could make the fallback attempt it.
+ *
+ * Pure and local — no config, no I/O. Consumers whose enablement lookup costs
+ * something (the CLI reads org config over the network) ask this first, so a
+ * failure the fallback can never handle stays free.
+ */
+export declare function matchFallbackTrigger(error: CodemodError): TriggerReason | undefined;

package/dist/src/codemod/llmFallback/shouldTryFallback.js

@@ -1 +1 @@
-var o=Object.defineProperty;var n=(r,e)=>o(r,"name",{value:e,configurable:!0});const t={shouldTry:!1};function i(r,e){if(!e.envEnabled||!e.orgAllowsFallback)return t;const l=u(r);return l===void 0?t:{shouldTry:!0,trigger:l}}n(i,"shouldTryFallback");function u(r){switch(r.kind){case"TemplateLiteralNameError":return"template-literal-name";case"ResourceNotFoundError":return"resource-not-found";case"ControlFlowClassifierError":return r.reason==="anonymous-helper"?"control-flow-unclassifiable":void 0;case"DriftUnmergeableError":return"drift-unmergeable";default:return}}n(u,"matchTrigger");export{i as shouldTryFallback};
+var o=Object.defineProperty;var n=(r,e)=>o(r,"name",{value:e,configurable:!0});const t={shouldTry:!1};function i(r,e){if(!e.envEnabled||!e.orgAllowsFallback)return t;const l=a(r);return l===void 0?t:{shouldTry:!0,trigger:l}}n(i,"shouldTryFallback");function a(r){switch(r.kind){case"TemplateLiteralNameError":return"template-literal-name";case"ResourceNotFoundError":return"resource-not-found";case"ControlFlowClassifierError":return r.reason==="anonymous-helper"?"control-flow-unclassifiable":void 0;case"DriftUnmergeableError":return"drift-unmergeable";default:return}}n(a,"matchFallbackTrigger");export{a as matchFallbackTrigger,i as shouldTryFallback};

package/dist/src/codemod/types.d.ts

@@ -16,9 +16,9 @@ export declare const StatementTypeSchema: z.ZodEnum<{
     storage: "storage";
     database: "database";
     compute: "compute";
+    messaging: "messaging";
     pattern: "pattern";
     network: "network";
-    messaging: "messaging";
     cdn: "cdn";
     "vpc-peer": "vpc-peer";
     "vpc-peer-accepter": "vpc-peer-accepter";
@@ -41,9 +41,9 @@ export declare const AddOptionsSchema: z.ZodObject<{
         storage: "storage";
         database: "database";
         compute: "compute";
+        messaging: "messaging";
         pattern: "pattern";
         network: "network";
-        messaging: "messaging";
         cdn: "cdn";
         "vpc-peer": "vpc-peer";
         "vpc-peer-accepter": "vpc-peer-accepter";
@@ -66,9 +66,9 @@ export declare const RemoveOptionsSchema: z.ZodObject<{
         storage: "storage";
         database: "database";
         compute: "compute";
+        messaging: "messaging";
         pattern: "pattern";
         network: "network";
-        messaging: "messaging";
         cdn: "cdn";
         "vpc-peer": "vpc-peer";
         "vpc-peer-accepter": "vpc-peer-accepter";
@@ -87,9 +87,9 @@ export declare const ModifyOptionsSchema: z.ZodObject<{
         storage: "storage";
         database: "database";
         compute: "compute";
+        messaging: "messaging";
         pattern: "pattern";
         network: "network";
-        messaging: "messaging";
         cdn: "cdn";
         "vpc-peer": "vpc-peer";
         "vpc-peer-accepter": "vpc-peer-accepter";
@@ -123,9 +123,9 @@ export declare const ResourceListingEntrySchema: z.ZodObject<{
         storage: "storage";
         database: "database";
         compute: "compute";
+        messaging: "messaging";
         pattern: "pattern";
         network: "network";
-        messaging: "messaging";
         cdn: "cdn";
         "vpc-peer": "vpc-peer";
         "vpc-peer-accepter": "vpc-peer-accepter";
@@ -147,9 +147,9 @@ export declare const ResourceListingSchema: z.ZodObject<{
             storage: "storage";
             database: "database";
             compute: "compute";
+            messaging: "messaging";
             pattern: "pattern";
             network: "network";
-            messaging: "messaging";
             cdn: "cdn";
             "vpc-peer": "vpc-peer";
             "vpc-peer-accepter": "vpc-peer-accepter";

package/dist/src/dns/domainFileGenerator.js

@@ -1,4 +1,4 @@
-var p=Object.defineProperty;var o=(t,e)=>p(t,"name",{value:e,configurable:!0});import{getDomainStackName as g}from"@fjall/util";import{toPascalCase as w}from"../generation/common.js";import{GENERATOR_VERSION as d}from"../version.js";function I(t){const{domainName:e,hostedZoneId:r,records:n=[]}=t,a=t.basePath??`fjall/domains/${e}`;return[{path:`${a}/infrastructure.ts`,content:h({domainName:e,records:n,hostedZoneId:r})},{path:`${a}/package.json`,content:f(e)},{path:`${a}/tsconfig.json`,content:y},{path:`${a}/cdk.json`,content:N},{path:`${a}/cdk.context.json`,content:S},{path:`${a}/.gitignore`,content:k}]}o(I,"generateDomainFiles");function h(t){const{domainName:e,records:r,hostedZoneId:n}=t,a=w(e.split(".").join("")),i=g(e),c=r.map(s=>{const m=s.ttl!==void 0?`, ttl: ${s.ttl}`:"";return`    { type: ${JSON.stringify(s.type)}, name: ${JSON.stringify(s.name)}, value: ${JSON.stringify(s.value)}${m} },`}),l=c.length>0?`[
+var p=Object.defineProperty;var o=(t,e)=>p(t,"name",{value:e,configurable:!0});import{getDomainStackName as g}from"@fjall/util";import{toPascalCase as h}from"../generation/common.js";import{GENERATOR_VERSION as d}from"../version.js";function I(t){const{domainName:e,hostedZoneId:r,records:n=[]}=t,a=t.basePath??`fjall/domains/${e}`;return[{path:`${a}/infrastructure.ts`,content:w({domainName:e,records:n,hostedZoneId:r})},{path:`${a}/package.json`,content:f(e)},{path:`${a}/tsconfig.json`,content:y},{path:`${a}/cdk.json`,content:N},{path:`${a}/cdk.context.json`,content:S},{path:`${a}/.gitignore`,content:k}]}o(I,"generateDomainFiles");function w(t){const{domainName:e,records:r,hostedZoneId:n}=t,a=h(e.split(".").join("")),i=g(e),c=r.map(s=>{const m=s.ttl!==void 0?`, ttl: ${s.ttl}`:"";return`    { type: ${JSON.stringify(s.type)}, name: ${JSON.stringify(s.name)}, value: ${JSON.stringify(s.value)}${m} },`}),l=c.length>0?`[
 ${c.join(`
 `)}
   ]`:"[]",u=n?`  hostedZoneId: ${JSON.stringify(n)},
@@ -19,7 +19,12 @@ const stack = app.getStack(${JSON.stringify(i)}).getStack();
 new Domain(stack, ${JSON.stringify(a)}, {
   registrar: "route53",
   zoneName: ${JSON.stringify(e)},
-${u}  certificates: [
+${u}  // Position-independent record logical IDs (fresh-zone default): records
+  // can be inserted, removed, or reordered freely. Never remove this line
+  // once the zone has deployed \u2014 flipping the mode renames every record's
+  // logical ID (a deliberate two-deploy migration, never a casual edit).
+  recordIds: "stable",
+  certificates: [
     { domainName: ${JSON.stringify(e)} },
     // Serving this zone through CloudFront (staticsite/cdn)? Add a viewer
     // certificate with cloudFront: true \u2014 it is minted in us-east-1 (the
@@ -39,7 +44,7 @@ ${u}  certificates: [
 // and adoptedNameServers (both together) on the child Domain \u2014 the literals
 // feed the parent NS UPSERT because an imported zone exposes no name-server
 // attribute at synth.
-`}o(h,"generateDefaultInfrastructureTs");function f(t){return`{
+`}o(w,"generateDefaultInfrastructureTs");function f(t){return`{
   "name": ${JSON.stringify(`domain-${t}`)},
   "version": "${d}",
   "type": "module",

package/dist/src/dns/domainRecords.d.ts

@@ -40,6 +40,14 @@ export declare const DomainDeployPhaseSchema: z.ZodEnum<{
     full: "full";
 }>;
 export type DomainDeployPhase = z.infer<typeof DomainDeployPhaseSchema>;
+/**
+ * Per-record construct-id override (`recordIds: "stable"` collision escape
+ * hatch) — mirrors `StandardRecord.id` / `AliasRecord.id` in
+ * @fjall/components-infrastructure, which validates the same shape (it
+ * becomes a CloudFormation logical-ID segment).
+ */
+export declare const RecordConstructIdSchema: z.ZodString;
+export type RecordConstructId = z.infer<typeof RecordConstructIdSchema>;
 export declare const ParsedStandardRecordSchema: z.ZodObject<{
     kind: z.ZodLiteral<"standard">;
     type: z.ZodEnum<{
@@ -55,6 +63,7 @@ export declare const ParsedStandardRecordSchema: z.ZodObject<{
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
     ttl: z.ZodOptional<z.ZodNumber>;
+    id: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export declare const ParsedAliasRecordSchema: z.ZodObject<{
     kind: z.ZodLiteral<"alias">;
@@ -78,6 +87,7 @@ export declare const ParsedAliasRecordSchema: z.ZodObject<{
         dnsName: z.ZodString;
         hostedZoneId: z.ZodString;
     }, z.core.$strict>], "kind">;
+    id: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export declare const ParsedDnsRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"standard">;
@@ -94,6 +104,7 @@ export declare const ParsedDnsRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
     ttl: z.ZodOptional<z.ZodNumber>;
+    id: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"alias">;
     type: z.ZodEnum<{
@@ -116,6 +127,7 @@ export declare const ParsedDnsRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         dnsName: z.ZodString;
         hostedZoneId: z.ZodString;
     }, z.core.$strict>], "kind">;
+    id: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>], "kind">;
 export declare const ParsedCertificateSchema: z.ZodObject<{
     domainName: z.ZodString;
@@ -128,6 +140,18 @@ export declare const ParsedSubdomainDelegationSchema: z.ZodObject<{
     toAccount: z.ZodString;
     auto: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
+/**
+ * Construct-id scheme for the records list — mirrors
+ * `DomainCommonProps.recordIds`. `"stable"` derives position-independent
+ * logical IDs (records can be inserted/removed/reordered freely);
+ * `"indexed"`/absent is the legacy position-coupled formula (append-only
+ * lists, byte-frozen for deployed stacks). Fresh imports emit `"stable"`.
+ */
+export declare const RecordIdsModeSchema: z.ZodEnum<{
+    stable: "stable";
+    indexed: "indexed";
+}>;
+export type RecordIdsMode = z.infer<typeof RecordIdsModeSchema>;
 export declare const ParsedDomainRecordsSchema: z.ZodObject<{
     zoneName: z.ZodString;
     registrar: z.ZodEnum<{
@@ -135,6 +159,10 @@ export declare const ParsedDomainRecordsSchema: z.ZodObject<{
         "external-delegated": "external-delegated";
         "external-records": "external-records";
     }>;
+    recordIds: z.ZodOptional<z.ZodEnum<{
+        stable: "stable";
+        indexed: "indexed";
+    }>>;
     hostedZoneId: z.ZodOptional<z.ZodString>;
     delegatedSubdomain: z.ZodOptional<z.ZodString>;
     adoptedNameServers: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -153,6 +181,7 @@ export declare const ParsedDomainRecordsSchema: z.ZodObject<{
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
         ttl: z.ZodOptional<z.ZodNumber>;
+        id: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"alias">;
         type: z.ZodEnum<{
@@ -175,6 +204,7 @@ export declare const ParsedDomainRecordsSchema: z.ZodObject<{
             dnsName: z.ZodString;
             hostedZoneId: z.ZodString;
         }, z.core.$strict>], "kind">;
+        id: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>], "kind">>;
     certificates: z.ZodArray<z.ZodObject<{
         domainName: z.ZodString;

package/dist/src/dns/domainRecords.js

@@ -1 +1 @@
-import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string(),computeName:e.string().min(1).optional()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),m=r.options.map(t=>t.shape.kind.value),a=e.enum(["A","AAAA"]),n=e.enum(["route53","external-delegated","external-records"]),g=e.enum(["zone","full"]),o=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional()}).strict(),i=e.object({kind:e.literal("alias"),type:a,name:e.string(),target:r}).strict(),s=e.discriminatedUnion("kind",[o,i]),d=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional(),cloudFront:e.boolean().optional()}).strict(),c=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),p=e.object({zoneName:e.string(),registrar:n,hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),adoptedNameServers:e.array(e.string().min(1)).min(1).optional(),records:e.array(s),certificates:e.array(d),delegations:e.array(c)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"}).refine(t=>t.registrar==="external-delegated"||t.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(t=>t.registrar!=="external-delegated"||t.hostedZoneId===void 0==(t.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});export{a as AliasRecordTypeSchema,g as DomainDeployPhaseSchema,n as DomainRegistrarSchema,i as ParsedAliasRecordSchema,d as ParsedCertificateSchema,s as ParsedDnsRecordSchema,p as ParsedDomainRecordsSchema,o as ParsedStandardRecordSchema,c as ParsedSubdomainDelegationSchema,m as TYPED_FJALL_TARGET_KINDS,r as TypedFjallTargetSchema};
+import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string(),computeName:e.string().min(1).optional()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),p=r.options.map(t=>t.shape.kind.value),n=e.enum(["A","AAAA"]),o=e.enum(["route53","external-delegated","external-records"]),u=e.enum(["zone","full"]),a=e.string().regex(/^[A-Za-z][A-Za-z0-9]*$/),i=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional(),id:a.optional()}).strict(),s=e.object({kind:e.literal("alias"),type:n,name:e.string(),target:r,id:a.optional()}).strict(),d=e.discriminatedUnion("kind",[i,s]),c=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional(),cloudFront:e.boolean().optional()}).strict(),l=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),m=e.enum(["indexed","stable"]),x=e.object({zoneName:e.string(),registrar:o,recordIds:m.optional(),hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),adoptedNameServers:e.array(e.string().min(1)).min(1).optional(),records:e.array(d),certificates:e.array(c),delegations:e.array(l)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"}).refine(t=>t.registrar==="external-delegated"||t.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(t=>t.registrar!=="external-delegated"||t.hostedZoneId===void 0==(t.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});export{n as AliasRecordTypeSchema,u as DomainDeployPhaseSchema,o as DomainRegistrarSchema,s as ParsedAliasRecordSchema,c as ParsedCertificateSchema,d as ParsedDnsRecordSchema,x as ParsedDomainRecordsSchema,i as ParsedStandardRecordSchema,l as ParsedSubdomainDelegationSchema,a as RecordConstructIdSchema,m as RecordIdsModeSchema,p as TYPED_FJALL_TARGET_KINDS,r as TypedFjallTargetSchema};

package/dist/src/dns/tsEmitter.js

@@ -1,14 +1,14 @@
-var A=Object.defineProperty;var o=(e,n)=>A(e,"name",{value:n,configurable:!0});import{getDomainStackName as k,toPascalCase as D}from"@fjall/util";const O=["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"],b=new Map(O.map((e,n)=>[e,n]));function C(e,n){return e==="@"&&n!=="@"?-1:e!=="@"&&n==="@"?1:e.localeCompare(n)}o(C,"compareName");function J(e,n){const t=Array.isArray(e)?e.join(`
-`):e,a=Array.isArray(n)?n.join(`
-`):n;return t.localeCompare(a)}o(J,"compareValue");function p(e){const n=e.kind==="standard"?0:1,t=b.get(e.type)??99;return[n,t,e.name]}o(p,"recordSortKey");function R(e){return[...e].sort((n,t)=>{const[a,c,m]=p(n),[s,d,f]=p(t);if(a!==s)return a-s;if(c!==d)return c-d;const u=C(m,f);return u!==0?u:n.kind==="standard"&&t.kind==="standard"?J(n.value,t.value):0})}o(R,"sortRecords");function P(e){return Array.isArray(e)?`[${e.map(t=>JSON.stringify(t)).join(", ")}]`:JSON.stringify(e)}o(P,"formatValue");function v(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`,`value: ${P(e.value)}`];return e.ttl!==void 0&&n.push(`ttl: ${e.ttl}`),`{ ${n.join(", ")} }`}o(v,"emitStandardRecord");function I(e){switch(e.kind){case"ecs":return e.computeName===void 0?`fjallApp(${JSON.stringify(e.appName)})`:`fjallApp(${JSON.stringify(e.appName)}, ${JSON.stringify(e.computeName)})`;case"cdn":return`fjallCdn(${JSON.stringify(e.appName)})`;case"bucket":return`fjallBucket(${JSON.stringify(e.bucketName)})`;case"custom":return`aliasTo(${JSON.stringify(e.dnsName)}, ${JSON.stringify(e.hostedZoneId)})`}}o(I,"emitAliasTarget");function x(e){return`{ ${[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`,`target: ${I(e.target)}`].join(", ")} }`}o(x,"emitAliasRecord");function T(e){return e.kind==="standard"?v(e):x(e)}o(T,"emitRecordObjectText");function w(e){return`    ${T(e)},`}o(w,"emitRecord");function z(e){const n=[`domainName: ${JSON.stringify(e.domainName)}`];if(e.subjectAlternativeNames&&e.subjectAlternativeNames.length>0){const t=e.subjectAlternativeNames.map(a=>JSON.stringify(a)).join(", ");n.push(`subjectAlternativeNames: [${t}]`)}return e.transparencyLogging!==void 0&&n.push(`transparencyLogging: ${e.transparencyLogging}`),e.cloudFront!==void 0&&n.push(`cloudFront: ${e.cloudFront}`),`    { ${n.join(", ")} },`}o(z,"emitCertificate");function B(e,n){if(n.length===0)return"";const t=["","// Delegations (D8 \u2014 child writes NS; no parent-side records here):"];for(const a of n)t.push(`//   ${a.subdomain}.${e} \u2192 deploy a Domain { registrar: "external-delegated",`,`//     zoneName: ${JSON.stringify(e)}, delegatedSubdomain: ${JSON.stringify(a.subdomain)} }`,`//     in account ${JSON.stringify(a.toAccount)}; the CLI injects parentDelegationRoleArn`,"//     (ManagedDomainBinding.delegationRoleArn) and the child UPSERTs its NS into this zone.");return t.join(`
+var A=Object.defineProperty;var o=(e,n)=>A(e,"name",{value:n,configurable:!0});import{getDomainStackName as k,toPascalCase as D}from"@fjall/util";const O=["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"],J=new Map(O.map((e,n)=>[e,n]));function b(e,n){return e==="@"&&n!=="@"?-1:e!=="@"&&n==="@"?1:e.localeCompare(n)}o(b,"compareName");function C(e,n){const t=Array.isArray(e)?e.join(`
+`):e,i=Array.isArray(n)?n.join(`
+`):n;return t.localeCompare(i)}o(C,"compareValue");function p(e){const n=e.kind==="standard"?0:1,t=J.get(e.type)??99;return[n,t,e.name]}o(p,"recordSortKey");function R(e){return[...e].sort((n,t)=>{const[i,c,f]=p(n),[s,d,m]=p(t);if(i!==s)return i-s;if(c!==d)return c-d;const u=b(f,m);return u!==0?u:n.kind==="standard"&&t.kind==="standard"?C(n.value,t.value):0})}o(R,"sortRecords");function I(e){return Array.isArray(e)?`[${e.map(t=>JSON.stringify(t)).join(", ")}]`:JSON.stringify(e)}o(I,"formatValue");function P(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`value: ${I(e.value)}`),e.ttl!==void 0&&n.push(`ttl: ${e.ttl}`),`{ ${n.join(", ")} }`}o(P,"emitStandardRecord");function v(e){switch(e.kind){case"ecs":return e.computeName===void 0?`fjallApp(${JSON.stringify(e.appName)})`:`fjallApp(${JSON.stringify(e.appName)}, ${JSON.stringify(e.computeName)})`;case"cdn":return`fjallCdn(${JSON.stringify(e.appName)})`;case"bucket":return`fjallBucket(${JSON.stringify(e.bucketName)})`;case"custom":return`aliasTo(${JSON.stringify(e.dnsName)}, ${JSON.stringify(e.hostedZoneId)})`}}o(v,"emitAliasTarget");function x(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`target: ${v(e.target)}`),`{ ${n.join(", ")} }`}o(x,"emitAliasRecord");function T(e){return e.kind==="standard"?P(e):x(e)}o(T,"emitRecordObjectText");function w(e){return`    ${T(e)},`}o(w,"emitRecord");function z(e){const n=[`domainName: ${JSON.stringify(e.domainName)}`];if(e.subjectAlternativeNames&&e.subjectAlternativeNames.length>0){const t=e.subjectAlternativeNames.map(i=>JSON.stringify(i)).join(", ");n.push(`subjectAlternativeNames: [${t}]`)}return e.transparencyLogging!==void 0&&n.push(`transparencyLogging: ${e.transparencyLogging}`),e.cloudFront!==void 0&&n.push(`cloudFront: ${e.cloudFront}`),`    { ${n.join(", ")} },`}o(z,"emitCertificate");function B(e,n){if(n.length===0)return"";const t=["","// Delegations (D8 \u2014 child writes NS; no parent-side records here):"];for(const i of n)t.push(`//   ${i.subdomain}.${e} \u2192 deploy a Domain { registrar: "external-delegated",`,`//     zoneName: ${JSON.stringify(e)}, delegatedSubdomain: ${JSON.stringify(i.subdomain)} }`,`//     in account ${JSON.stringify(i.toAccount)}; the CLI injects parentDelegationRoleArn`,"//     (ManagedDomainBinding.delegationRoleArn) and the child UPSERTs its NS into this zone.");return t.join(`
 `)+`
 `}o(B,"emitDelegationGuidance");function F(e){const n={fjallApp:!1,fjallCdn:!1,fjallBucket:!1,aliasTo:!1};for(const t of e)if(t.kind==="alias")switch(t.target.kind){case"ecs":n.fjallApp=!0;break;case"cdn":n.fjallCdn=!0;break;case"bucket":n.fjallBucket=!0;break;case"custom":n.aliasTo=!0;break}return n}o(F,"computeUsedHelpers");function L(e){const n=["App","Domain"];return e.aliasTo&&n.push("aliasTo"),e.fjallApp&&n.push("fjallApp"),e.fjallBucket&&n.push("fjallBucket"),e.fjallCdn&&n.push("fjallCdn"),`import {
-${n.map(a=>`  ${a},`).join(`
+${n.map(i=>`  ${i},`).join(`
 `)}
-} from "@fjall/components-infrastructure";`}o(L,"emitImports");function E(e){return D(e.split(".").join(""))}o(E,"safeZoneName");function g(e,n){if(e==="@")return e;const t=e.endsWith(".")?e.slice(0,-1):e;return t===n?"@":t.endsWith(`.${n}`)?t.slice(0,-(n.length+1)):e}o(g,"toRelativeRecordName");function Z(e){return e.registrar==="external-delegated"&&e.delegatedSubdomain?`${e.delegatedSubdomain}.${e.zoneName}`:e.zoneName}o(Z,"effectiveZoneName");function y(e,n,t){if(n.length===0)return`  ${e}: [],`;const a=n.map(t).join(`
+} from "@fjall/components-infrastructure";`}o(L,"emitImports");function E(e){return D(e.split(".").join(""))}o(E,"safeZoneName");function g(e,n){if(e==="@")return e;const t=e.endsWith(".")?e.slice(0,-1):e;return t===n?"@":t.endsWith(`.${n}`)?t.slice(0,-(n.length+1)):e}o(g,"toRelativeRecordName");function Z(e){return e.registrar==="external-delegated"&&e.delegatedSubdomain?`${e.delegatedSubdomain}.${e.zoneName}`:e.zoneName}o(Z,"effectiveZoneName");function y(e,n,t){if(n.length===0)return`  ${e}: [],`;const i=n.map(t).join(`
 `);return`  ${e}: [
-${a}
-  ],`}o(y,"emitBlock");function K(e,n={}){const t=k(n.componentName??e.zoneName),a=E(e.zoneName),c=F(e.records),m=L(c),s=Z(e),d=e.records.map(i=>i.kind==="standard"?{...i,name:g(i.name,s)}:{...i,name:g(i.name,s)}),f=R(d),u=[...e.certificates].sort((i,l)=>i.domainName.localeCompare(l.domainName)),h=[...e.delegations].sort((i,l)=>i.subdomain.localeCompare(l.subdomain)),r=[];if(e.hostedZoneId&&r.push(`  hostedZoneId: ${JSON.stringify(e.hostedZoneId)},`),e.adoptedNameServers&&e.adoptedNameServers.length>0){const i=e.adoptedNameServers.map(l=>JSON.stringify(l)).join(", ");r.push(`  adoptedNameServers: [${i}],`)}e.delegatedSubdomain&&r.push(`  delegatedSubdomain: ${JSON.stringify(e.delegatedSubdomain)},`),e.registrar==="external-delegated"&&r.push("  // D8 child-writes delegation + two-phase deploy: both values arrive","  // via CDK context, injected by the Fjall CLI at deploy time (see the","  // reads above `new Domain`). Set a literal parentDelegationRoleArn","  // here only for out-of-band deploys.",'  ...(domainDeployPhase === "zone" || domainDeployPhase === "full"',"    ? { phase: domainDeployPhase }","    : {}),",'  ...(typeof parentDelegationRoleArn === "string" &&','  parentDelegationRoleArn !== ""',"    ? { parentDelegationRoleArn }","    : {}),");const N=y("certificates",u,z),S=y("records",f,w),$=e.registrar==="external-records"?"":B(e.zoneName,h),j=e.registrar==="external-delegated"?`
+${i}
+  ],`}o(y,"emitBlock");function K(e,n={}){const t=k(n.componentName??e.zoneName),i=E(n.componentName??e.zoneName),c=F(e.records),f=L(c),s=Z(e),d=e.records.map(a=>a.kind==="standard"?{...a,name:g(a.name,s)}:{...a,name:g(a.name,s)}),m=R(d),u=[...e.certificates].sort((a,l)=>a.domainName.localeCompare(l.domainName)),h=[...e.delegations].sort((a,l)=>a.subdomain.localeCompare(l.subdomain)),r=[];if(e.recordIds!==void 0&&r.push(`  recordIds: ${JSON.stringify(e.recordIds)},`),e.hostedZoneId&&r.push(`  hostedZoneId: ${JSON.stringify(e.hostedZoneId)},`),e.adoptedNameServers&&e.adoptedNameServers.length>0){const a=e.adoptedNameServers.map(l=>JSON.stringify(l)).join(", ");r.push(`  adoptedNameServers: [${a}],`)}e.delegatedSubdomain&&r.push(`  delegatedSubdomain: ${JSON.stringify(e.delegatedSubdomain)},`),e.registrar==="external-delegated"&&r.push("  // D8 child-writes delegation + two-phase deploy: both values arrive","  // via CDK context, injected by the Fjall CLI at deploy time (see the","  // reads above `new Domain`). Set a literal parentDelegationRoleArn","  // here only for out-of-band deploys.",'  ...(domainDeployPhase === "zone" || domainDeployPhase === "full"',"    ? { phase: domainDeployPhase }","    : {}),",'  ...(typeof parentDelegationRoleArn === "string" &&','  parentDelegationRoleArn !== ""',"    ? { parentDelegationRoleArn }","    : {}),");const N=y("certificates",u,z),S=y("records",m,w),$=e.registrar==="external-records"?"":B(e.zoneName,h),j=e.registrar==="external-delegated"?`
 // Injected by the Fjall CLI at deploy time (D8) \u2014 do not set these by hand.
 const domainDeployPhase: unknown = app.node.tryGetContext(
   "fjall:domainDeployPhase"
@@ -25,7 +25,7 @@ if (
 const parentDelegationRoleArn: unknown = app.node.tryGetContext(
   "fjall:parentDelegationRoleArn"
 );
-`:"";return`${m}
+`:"";return`${f}
 
 // Fjall-managed domain \u2014 edit this file to add or change records. See https://docs.fjall.io/resources/networking/domain for the Domain construct API.
 
@@ -35,7 +35,7 @@ const app = App.getApp(${JSON.stringify(t)});
 // CloudFormation stack name. Do not rename it.
 const stack = app.getStack(${JSON.stringify(t)}).getStack();
 ${j}
-new Domain(stack, ${JSON.stringify(a)}, {
+new Domain(stack, ${JSON.stringify(i)}, {
   registrar: ${JSON.stringify(e.registrar)},
   zoneName: ${JSON.stringify(e.zoneName)},
 ${r.length>0?r.join(`

package/dist/src/generation/common.d.ts

@@ -3,7 +3,6 @@
  *
  * Shared helper functions used across all generation modules.
  */
-import type { ProjectedProp } from "../projection/types.js";
 import type { IdentifierValue, ExpressionValue, CallValue, SpecialValue } from "../schemas/resourceSchemas.js";
 export type { IdentifierValue, ExpressionValue, CallValue, SpecialValue };
 export { toPascalCase, toKebab, toValidDatabaseName } from "@fjall/util";
@@ -92,12 +91,6 @@ export declare function resolveResourceVariable(plan: {
  * Simple objects (few primitive values) are kept on one line.
  */
 export declare function formatValue(value: unknown, baseIndent?: string): string;
-/**
- * Render projected construct props as the body of an object literal —
- * `\n<indent>key: value` per prop, comma-separated, no trailing comma. The
- * caller supplies the surrounding braces and whatever it appends after.
- */
-export declare function emitProjectedProps(props: ReadonlyArray<ProjectedProp>, indent?: string): string;
 type PropertyFormat = "raw" | "string" | "object" | "boolean-or-object";
 /**
  * Build a property string for code generation.

package/dist/src/generation/common.js

@@ -1,8 +1,7 @@
-var p=Object.defineProperty;var n=(e,t)=>p(e,"name",{value:t,configurable:!0});import{toPascalCase as T,toKebab as V,toValidDatabaseName as C}from"@fjall/util";function c(e){return JSON.stringify(e)}n(c,"escapeStringLiteral");function g(e){return e.map(c).join(", ")}n(g,"formatStringArray");const d="import:SharedAlarmTopicArn";function _(e="    "){return`
-${e}...(getConfig().environment === "production" ? { alertsTopic: ${c(d)} } : {}),`}n(_,"emitProductionAlertsTopicSpread");function $(e){return e===0?"":`_${String(e+1)}`}n($,"connectionEnvSuffix");function x(e,t){if(e===t)return 1;if(!e.startsWith(`${t}_`))return;const r=e.slice(t.length+1);return/^\d+$/.test(r)?parseInt(r,10):void 0}n(x,"connectionKeyOrdinal");function l(e){if(typeof e!="object"||e===null)return!1;const t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}n(l,"isSpecialValue");function u(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,r)=>r===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}n(u,"toVariableName");function j(e){return e.variableName??u(e.name)}n(j,"getVariableName");function S(e,t){for(const r of e.database)if(r.name===t&&r.variableName)return r.variableName;for(const r of e.s3)if(r.name===t&&r.variableName)return r.variableName;for(const r of e.compute)if(r.name===t&&r.variableName)return r.variableName;for(const r of e.dynamodb??[])if(r.name===t&&r.variableName)return r.variableName;for(const r of e.sqs??[])if(r.name===t&&r.variableName)return r.variableName;return u(t)}n(S,"resolveResourceVariable");function b(e){const t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,r])=>typeof r=="string"||typeof r=="number"||typeof r=="boolean"||r===null)}n(b,"isSimpleObject");function f(e,t="    "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(l(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(r=>f(r,t)).join(", ")}]`;if(typeof e=="object"){const r=Object.entries(e).filter(([,a])=>a!==void 0);if(b(e)){const a=r.map(([s,m])=>`${s}: ${f(m,t)}`).join(", ");return a?`{ ${a} }`:"{}"}const i=t+"  ",o=r.map(([a,s])=>`${i}${a}: ${f(s,i)}`).join(`,
-`);return o?`{
-${o}
-${t}}`:"{}"}return JSON.stringify(e)}n(f,"formatValue");function h(e,t="    "){return e.map(i=>{const o=r(i);return`
-${t}${i.key}: ${o}`}).join(",");function r(i){switch(i.value.kind){case"expression":return i.value.source;case"structured":throw new Error(`emitProjectedProps cannot render the structured value for "${i.key}" \u2014 structured expressions are emitted by the codemod's AST serialiser only.`);case"literal":return f(i.value.value,t)}}}n(h,"emitProjectedProps");function N(e,t,r,i="raw"){if(!e)return"";let o;switch(i){case"string":o=c(String(r));break;case"object":o=f(r);break;case"boolean-or-object":o=r===!1?"false":f(r);break;default:o=String(r)}return`
-    ${t}: ${o},`}n(N,"buildProperty");function A(e,t="    "){return e?.length?e.map(r=>`
-${t}${r.key}: ${r.sourceText},`).join(""):""}n(A,"emitExtraProperties");export{d as PRODUCTION_ALERTS_TOPIC_IMPORT,N as buildProperty,$ as connectionEnvSuffix,x as connectionKeyOrdinal,A as emitExtraProperties,_ as emitProductionAlertsTopicSpread,h as emitProjectedProps,c as escapeStringLiteral,g as formatStringArray,f as formatValue,j as getVariableName,l as isSpecialValue,S as resolveResourceVariable,V as toKebab,T as toPascalCase,C as toValidDatabaseName,u as toVariableName};
+var m=Object.defineProperty;var n=(t,e)=>m(t,"name",{value:e,configurable:!0});import{toPascalCase as T,toKebab as V,toValidDatabaseName as C}from"@fjall/util";function c(t){return JSON.stringify(t)}n(c,"escapeStringLiteral");function _(t){return t.map(c).join(", ")}n(_,"formatStringArray");const b="import:SharedAlarmTopicArn";function y(t="    "){return`
+${t}...(getConfig().environment === "production" ? { alertsTopic: ${c(b)} } : {}),`}n(y,"emitProductionAlertsTopicSpread");function $(t){return t===0?"":`_${String(t+1)}`}n($,"connectionEnvSuffix");function x(t,e){if(t===e)return 1;if(!t.startsWith(`${e}_`))return;const r=t.slice(e.length+1);return/^\d+$/.test(r)?parseInt(r,10):void 0}n(x,"connectionKeyOrdinal");function l(t){if(typeof t!="object"||t===null)return!1;const e=t;return typeof e.__identifier=="string"||typeof e.__expression=="string"||typeof e.__call=="string"}n(l,"isSpecialValue");function p(t){return t.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((e,r)=>r===0?e.charAt(0).toLowerCase()+e.slice(1):e.charAt(0).toUpperCase()+e.slice(1)).join("")}n(p,"toVariableName");function S(t){return t.variableName??p(t.name)}n(S,"getVariableName");function j(t,e){for(const r of t.database)if(r.name===e&&r.variableName)return r.variableName;for(const r of t.s3)if(r.name===e&&r.variableName)return r.variableName;for(const r of t.compute)if(r.name===e&&r.variableName)return r.variableName;for(const r of t.dynamodb??[])if(r.name===e&&r.variableName)return r.variableName;for(const r of t.sqs??[])if(r.name===e&&r.variableName)return r.variableName;return p(e)}n(j,"resolveResourceVariable");function d(t){const e=Object.entries(t);return e.length===0?!0:e.length>1?!1:e.every(([,r])=>typeof r=="string"||typeof r=="number"||typeof r=="boolean"||r===null)}n(d,"isSimpleObject");function f(t,e="    "){if(t==null)return"undefined";if(typeof t=="string")return JSON.stringify(t);if(typeof t=="number"||typeof t=="boolean")return String(t);if(l(t)){if("__identifier"in t)return t.__identifier;if("__expression"in t)return t.__expression;if("__call"in t)return t.__call}if(Array.isArray(t))return`[${t.map(r=>f(r,e)).join(", ")}]`;if(typeof t=="object"){const r=Object.entries(t).filter(([,o])=>o!==void 0);if(d(t)){const o=r.map(([s,u])=>`${s}: ${f(u,e)}`).join(", ");return o?`{ ${o} }`:"{}"}const a=e+"  ",i=r.map(([o,s])=>`${a}${o}: ${f(s,a)}`).join(`,
+`);return i?`{
+${i}
+${e}}`:"{}"}return JSON.stringify(t)}n(f,"formatValue");function N(t,e,r,a="raw"){if(!t)return"";let i;switch(a){case"string":i=c(String(r));break;case"object":i=f(r);break;case"boolean-or-object":i=r===!1?"false":f(r);break;default:i=String(r)}return`
+    ${e}: ${i},`}n(N,"buildProperty");function O(t,e="    "){return t?.length?t.map(r=>`
+${e}${r.key}: ${r.sourceText},`).join(""):""}n(O,"emitExtraProperties");export{b as PRODUCTION_ALERTS_TOPIC_IMPORT,N as buildProperty,$ as connectionEnvSuffix,x as connectionKeyOrdinal,O as emitExtraProperties,y as emitProductionAlertsTopicSpread,c as escapeStringLiteral,_ as formatStringArray,f as formatValue,S as getVariableName,l as isSpecialValue,j as resolveResourceVariable,V as toKebab,T as toPascalCase,C as toValidDatabaseName,p as toVariableName};

package/dist/src/generation/compute/ec2.d.ts

@@ -1,2 +1,9 @@
 import type { ComputeResourcePlan } from "../../schemas/resourceSchemas.js";
+/**
+ * The EC2's plan fragment for `projectPlanToConstructProps("compute", …)`.
+ * Inclusion policy stays here; the shared table owns the names and shapes
+ * (`enableSSH` → `ssh: {}` / `ssh: false`; `keyName`/`userData`/
+ * `securityGroups` are plan-only and never emitted).
+ */
+export declare function buildEc2ProjectionFragment(compute: ComputeResourcePlan): Record<string, unknown>;
 export declare function generateEc2Code(compute: ComputeResourcePlan): string;

package/dist/src/generation/compute/ec2.js

@@ -1,4 +1,2 @@
-var i=Object.defineProperty;var r=(e,n)=>i(e,"name",{value:n,configurable:!0});import{emitExtraProperties as t,escapeStringLiteral as a}from"../common.js";function l(e){let n="";return e.instanceType&&(n+=`
-    instanceType: ${a(e.instanceType)},`),e.enableSSH!==void 0&&(n+=e.enableSSH?`
-    ssh: {},`:`
-    ssh: false,`),n+=t(e.extraProperties),n}r(l,"generateEc2Code");export{l as generateEc2Code};
+var i=Object.defineProperty;var o=(e,r)=>i(e,"name",{value:r,configurable:!0});import{projectPlanToConstructProps as p}from"../../projection/index.js";import{emitExtraProperties as a}from"../common.js";import{renderProjectedValueSource as c}from"../structuredSource.js";function s(e){return{...e.instanceType&&{instanceType:e.instanceType},...e.enableSSH!==void 0&&{enableSSH:e.enableSSH}}}o(s,"buildEc2ProjectionFragment");function u(e){const{props:r}=p("compute",s(e));let n="";for(const t of r)n+=`
+    ${t.key}: ${c(t,{indent:"    "})},`;return n+=a(e.extraProperties),n}o(u,"generateEc2Code");export{s as buildEc2ProjectionFragment,u as generateEc2Code};

package/dist/src/generation/compute/ecs.js

@@ -1,43 +1,43 @@
-var O=Object.defineProperty;var u=(e,n)=>O(e,"name",{value:n,configurable:!0});import{formatValue as S,emitExtraProperties as E,escapeStringLiteral as o,formatStringArray as k,emitProductionAlertsTopicSpread as R}from"../common.js";import{DATABASE_ENV_VARS as y,getConnectedDatabases as D,buildDatabaseEnvVars as N}from"../database.js";import{STORAGE_ENV_VARS as B,getConnectedStorage as j,buildStorageEnvVars as L,formatAllConnectionsCode as _}from"../storageConnections.js";import{MESSAGING_ENV_VARS as C,getConnectedMessaging as H,buildMessagingEnvVars as w}from"../messagingConnections.js";import{BASE_ENVIRONMENT_VARS as I,computeHasConnections as G,computeHasDatabaseConnections as P,computeHasMessagingConnections as M,computeHasStorageConnections as V,formatCompactOrExpandedObject as $,formatEnvBlock as x}from"./shared.js";function J(e){const n=[];if(e.instanceType!==void 0&&n.push(`instanceType: ${o(e.instanceType)}`),e.amiHardwareType!==void 0&&n.push(`amiHardwareType: ${o(e.amiHardwareType)}`),e.minCapacity!==void 0&&n.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&n.push(`maxCapacity: ${e.maxCapacity}`),e.memoryLimitMiB!==void 0&&n.push(`memoryLimitMiB: ${e.memoryLimitMiB}`),e.warmPool!==void 0&&n.push(`warmPool: ${S(e.warmPool,"      ")}`),e.extraProperties?.length)for(const t of e.extraProperties)n.push(`${t.key}: ${t.sourceText}`);return`
-      ec2Config: ${$(n,"      ","        ")},`}u(J,"generateEcsServiceEc2ConfigCode");function K(e){if(!e.cluster)return"";const n=[];if(e.cluster.directAccess&&n.push("directAccess: true"),e.cluster.domain&&n.push(`domain: ${o(e.cluster.domain)}`),e.cluster.loadBalancer!==void 0&&n.push(e.cluster.loadBalancer===!1?"loadBalancer: false":`loadBalancer: ${o(e.cluster.loadBalancer)}`),e.cluster.extraProperties?.length)for(const t of e.cluster.extraProperties)n.push(`${t.key}: ${t.sourceText}`);return`
-    cluster: ${$(n,"    ","      ")},`}u(K,"generateEcsClusterCode");function U(e,n,t,l,p,h){let i="";e.name&&(i+=`
+var O=Object.defineProperty;var m=(e,n)=>O(e,"name",{value:n,configurable:!0});import{scalingTypeBinding as k}from"../../projection/compute.js";import{formatValue as v,emitExtraProperties as E,escapeStringLiteral as o,formatStringArray as N,emitProductionAlertsTopicSpread as R}from"../common.js";import{renderStructuredValueSource as B}from"../structuredSource.js";import{DATABASE_ENV_VARS as y,getConnectedDatabases as D,buildDatabaseEnvVars as j}from"../database.js";import{STORAGE_ENV_VARS as L,getConnectedStorage as _,buildStorageEnvVars as w,formatAllConnectionsCode as H}from"../storageConnections.js";import{MESSAGING_ENV_VARS as C,getConnectedMessaging as I,buildMessagingEnvVars as G}from"../messagingConnections.js";import{BASE_ENVIRONMENT_VARS as J,computeHasConnections as K,computeHasDatabaseConnections as P,computeHasMessagingConnections as T,computeHasStorageConnections as V,formatCompactOrExpandedObject as $,formatEnvBlock as M}from"./shared.js";function U(e){const n=[];if(e.instanceType!==void 0&&n.push(`instanceType: ${o(e.instanceType)}`),e.amiHardwareType!==void 0&&n.push(`amiHardwareType: ${o(e.amiHardwareType)}`),e.minCapacity!==void 0&&n.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&n.push(`maxCapacity: ${e.maxCapacity}`),e.memoryLimitMiB!==void 0&&n.push(`memoryLimitMiB: ${e.memoryLimitMiB}`),e.warmPool!==void 0&&n.push(`warmPool: ${v(e.warmPool,"      ")}`),e.extraProperties?.length)for(const s of e.extraProperties)n.push(`${s.key}: ${s.sourceText}`);return`
+      ec2Config: ${$(n,"      ","        ")},`}m(U,"generateEcsServiceEc2ConfigCode");function W(e){if(!e.cluster)return"";const n=[];if(e.cluster.directAccess&&n.push("directAccess: true"),e.cluster.domain&&n.push(`domain: ${o(e.cluster.domain)}`),e.cluster.loadBalancer!==void 0&&n.push(e.cluster.loadBalancer===!1?"loadBalancer: false":`loadBalancer: ${o(e.cluster.loadBalancer)}`),e.cluster.extraProperties?.length)for(const s of e.cluster.extraProperties)n.push(`${s.key}: ${s.sourceText}`);return`
+    cluster: ${$(n,"    ","      ")},`}m(W,"generateEcsClusterCode");function z(e,n,s,f,l,h){let i="";e.name&&(i+=`
         name: ${o(e.name)},`),e.image&&(i+=`
         image: ${o(e.image)},`),e.port!==void 0&&(i+=`
         port: ${e.port},`),e.essential!==void 0&&(i+=`
         essential: ${e.essential},`),e.command?.length&&(i+=`
         command: ${JSON.stringify(e.command)},`),e.entryPoint?.length&&(i+=`
-        entryPoint: ${JSON.stringify(e.entryPoint)},`);const c=[y.HOST,y.PORT,y.NAME,y.SSL,y.USERNAME,y.PASSWORD,B.NAME,C.URL,C.ARN],r=u(a=>{if(!a)return a;const d={};for(const[m,g]of Object.entries(a))c.some(v=>m===v||m.startsWith(`${v}_`))||(d[m]=g);return Object.keys(d).length>0?d:void 0},"stripConnectionEnv"),f=n?{...h,...t.env,...l.env,...p.env,...e.environment}:{...h,...r(e.environment)},s=n?{...t.secrets,...e.secretsImport}:r(e.secretsImport);return f&&Object.keys(f).length>0&&(i+=`
+        entryPoint: ${JSON.stringify(e.entryPoint)},`);const c=[y.HOST,y.PORT,y.NAME,y.SSL,y.USERNAME,y.PASSWORD,L.NAME,C.URL,C.ARN],r=m(a=>{if(!a)return a;const d={};for(const[p,g]of Object.entries(a))c.some(S=>p===S||p.startsWith(`${S}_`))||(d[p]=g);return Object.keys(d).length>0?d:void 0},"stripConnectionEnv"),u=n?{...h,...s.env,...f.env,...l.env,...e.environment}:{...h,...r(e.environment)},t=n?{...s.secrets,...e.secretsImport}:r(e.secretsImport);return u&&Object.keys(u).length>0&&(i+=`
         environment: {
-${x(f,"          ")}
-        },`),s&&Object.keys(s).length>0&&(i+=`
+${M(u,"          ")}
+        },`),t&&Object.keys(t).length>0&&(i+=`
         secretsImport: {
-${x(s,"          ")}
+${M(t,"          ")}
         },`),e.ssmSecrets&&e.ssmSecrets.length>0&&(i+=`
-        secrets: [${k(e.ssmSecrets)}],`),e.healthCheck&&(i+=`
-        healthCheck: ${S(e.healthCheck,"        ")},`),i+=E(e.extraProperties,"        "),i}u(U,"generateEcsContainerCode");function A(e,n){const t=[];return e.path&&t.push(`path: ${o(e.path)}`),e.host&&t.push(`host: ${o(e.host)}`),e.priority!==void 0&&t.push(`priority: ${e.priority}`),e.healthCheckPath&&t.push(`healthCheckPath: ${o(e.healthCheckPath)}`),$(t,n,`${n}  `)}u(A,"formatRoutingRule");function W(e){const n=Array.isArray(e)?e:[e];return n.length===1?`
-      routing: ${A(n[0],"      ")},`:`
+        secrets: [${N(e.ssmSecrets)}],`),e.healthCheck&&(i+=`
+        healthCheck: ${v(e.healthCheck,"        ")},`),i+=E(e.extraProperties,"        "),i}m(z,"generateEcsContainerCode");function x(e,n){const s=[];return e.path&&s.push(`path: ${o(e.path)}`),e.host&&s.push(`host: ${o(e.host)}`),e.priority!==void 0&&s.push(`priority: ${e.priority}`),e.healthCheckPath&&s.push(`healthCheckPath: ${o(e.healthCheckPath)}`),$(s,n,`${n}  `)}m(x,"formatRoutingRule");function Y(e){const n=Array.isArray(e)?e:[e];return n.length===1?`
+      routing: ${x(n[0],"      ")},`:`
       routing: [
-        ${n.map(l=>A(l,"        ")).join(`,
+        ${n.map(f=>x(f,"        ")).join(`,
         `)},
-      ],`}u(W,"generateEcsServiceRoutingCode");function q(e){if(e===!1)return`
-      scaling: false,`;if(typeof e!="object"||!(e.minCapacity!==void 0||e.maxCapacity!==void 0||e.desiredCount!==void 0||e.scalingType!==void 0))return"";const t=[];return e.minCapacity!==void 0&&t.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&t.push(`maxCapacity: ${e.maxCapacity}`),e.desiredCount!==void 0&&t.push(`desiredCount: ${e.desiredCount}`),e.scalingType&&t.push(`scalingType: ${o(e.scalingType)}`),`
-      scaling: ${$(t,"      ","        ")},`}u(q,"generateEcsServiceScalingCode");function z(e,n,t){return{needsDb:e.needsDatabaseConnection!==void 0?e.needsDatabaseConnection:n&&P(t),needsStorage:e.needsStorageConnection!==void 0?e.needsStorageConnection:n&&V(t),needsMessaging:e.needsMessagingConnection!==void 0?e.needsMessagingConnection:n&&M(t)}}u(z,"deriveServiceConnectionNeeds");function F(e){const{service:n,isFirstService:t,hasConnections:l,dbEnvVars:p,storageEnvVars:h,messagingEnvVars:i,baseEnvVars:c,plan:r,compute:f}=e;let s=`
-      name: ${o(n.name)},`;s+=`
-      capacityProvider: ${o(n.capacityProvider)},`,n.serviceType!==void 0&&(s+=`
-      serviceType: ${o(n.serviceType)},`),n.ec2Config&&(s+=J(n.ec2Config)),n.docker&&(s+=`
-      docker: ${S(n.docker,"      ")},`),n.image&&(s+=`
-      image: ${o(n.image)},`),n.ssmSecretsPath&&(s+=`
-      ssmSecretsPath: ${o(n.ssmSecretsPath)},`);const a=z(n,t,f);if(n.containers?.length){s+=`
-      containers: [{`;for(let d=0;d<n.containers.length;d++){const m=n.containers[d];if(!m)continue;const g=d===0&&(a.needsDb||a.needsStorage||a.needsMessaging)&&l,b=a.needsDb?p:{env:{},secrets:{}},v=a.needsStorage?h:{env:{},secrets:{}},T=a.needsMessaging?i:{env:{},secrets:{}};d>0&&(s+=`
-      }, {`),s+=U(m,g,b,v,T,c)}s+=`
-      }],`}if(n.routing&&(s+=W(n.routing)),n.cpu!==void 0&&(s+=`
-      cpu: ${n.cpu},`),n.memoryLimitMiB!==void 0&&(s+=`
-      memoryLimitMiB: ${n.memoryLimitMiB},`),n.desiredCount!==void 0&&(s+=`
-      desiredCount: ${n.desiredCount},`),n.scaling!==void 0&&(s+=q(n.scaling)),n.alarms===!1?s+=`
-      alarms: false,`:typeof n.alarms=="object"&&(s+=`
-      alarms: ${S(n.alarms,"      ")},`),s+=E(n.extraProperties,"      "),a.needsDb||a.needsStorage||a.needsMessaging){const d=a.needsDb?D(r,f):[],m=a.needsStorage?j(r,f):[],g=a.needsMessaging?H(r,f):[];(d.length>0||m.length>0||g.length>0)&&(s+=`
-      ${_(d,m,g)}`)}return s}u(F,"generateEcsServiceCode");function te(e,n){const t=G(e),l={...I},p={env:{},secrets:{}};if(P(e)){const r=N(n,e);Object.assign(p.env,r.env),Object.assign(p.secrets,r.secrets)}const h={env:{},secrets:{}};if(V(e)){const r=L(n,e);Object.assign(h.env,r.env)}const i={env:{},secrets:{}};if(M(e)){const r=w(n,e);Object.assign(i.env,r.env)}let c=`
-    ecrRepository: app.getDefaultContainerRegistry(),`;if(c+=K(e),e.services?.length){c+=`
-    services: [{`;for(let r=0;r<e.services.length;r++){const f=e.services[r];f&&(r>0&&(c+=`
-    }, {`),c+=F({service:f,isFirstService:r===0,hasConnections:t,dbEnvVars:p,storageEnvVars:h,messagingEnvVars:i,baseEnvVars:l,plan:n,compute:e}))}c+=`
-    }],`}return c+=E(e.extraProperties),c+=R(),c}u(te,"generateEcsCode");export{te as generateEcsCode};
+      ],`}m(Y,"generateEcsServiceRoutingCode");function q(e){if(e===!1)return`
+      scaling: false,`;if(typeof e!="object"||!(e.minCapacity!==void 0||e.maxCapacity!==void 0||e.desiredCount!==void 0||e.scalingType!==void 0))return"";const s=[];if(e.minCapacity!==void 0&&s.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&s.push(`maxCapacity: ${e.maxCapacity}`),e.desiredCount!==void 0&&s.push(`desiredCount: ${e.desiredCount}`),e.scalingType){const f=k(e.scalingType);if(f===void 0)throw new Error(`services[].scaling.scalingType \`${e.scalingType}\` is not a ScalingType member name \u2014 the schema gate (z.enum(SCALING_TYPES)) should have refused this plan.`);s.push(`scalingType: ${B("scalingType",f.expression)}`)}return`
+      scaling: ${$(s,"      ","        ")},`}m(q,"generateEcsServiceScalingCode");function F(e,n,s){return{needsDb:e.needsDatabaseConnection!==void 0?e.needsDatabaseConnection:n&&P(s),needsStorage:e.needsStorageConnection!==void 0?e.needsStorageConnection:n&&V(s),needsMessaging:e.needsMessagingConnection!==void 0?e.needsMessagingConnection:n&&T(s)}}m(F,"deriveServiceConnectionNeeds");function Q(e){const{service:n,isFirstService:s,hasConnections:f,dbEnvVars:l,storageEnvVars:h,messagingEnvVars:i,baseEnvVars:c,plan:r,compute:u}=e;let t=`
+      name: ${o(n.name)},`;t+=`
+      capacityProvider: ${o(n.capacityProvider)},`,n.serviceType!==void 0&&(t+=`
+      serviceType: ${o(n.serviceType)},`),n.ec2Config&&(t+=U(n.ec2Config)),n.docker&&(t+=`
+      docker: ${v(n.docker,"      ")},`),n.image&&(t+=`
+      image: ${o(n.image)},`),n.ssmSecretsPath&&(t+=`
+      ssmSecretsPath: ${o(n.ssmSecretsPath)},`);const a=F(n,s,u);if(n.containers?.length){t+=`
+      containers: [{`;for(let d=0;d<n.containers.length;d++){const p=n.containers[d];if(!p)continue;const g=d===0&&(a.needsDb||a.needsStorage||a.needsMessaging)&&f,b=a.needsDb?l:{env:{},secrets:{}},S=a.needsStorage?h:{env:{},secrets:{}},A=a.needsMessaging?i:{env:{},secrets:{}};d>0&&(t+=`
+      }, {`),t+=z(p,g,b,S,A,c)}t+=`
+      }],`}if(n.routing&&(t+=Y(n.routing)),n.cpu!==void 0&&(t+=`
+      cpu: ${n.cpu},`),n.memoryLimitMiB!==void 0&&(t+=`
+      memoryLimitMiB: ${n.memoryLimitMiB},`),n.desiredCount!==void 0&&(t+=`
+      desiredCount: ${n.desiredCount},`),n.scaling!==void 0&&(t+=q(n.scaling)),n.alarms===!1?t+=`
+      alarms: false,`:typeof n.alarms=="object"&&(t+=`
+      alarms: ${v(n.alarms,"      ")},`),t+=E(n.extraProperties,"      "),a.needsDb||a.needsStorage||a.needsMessaging){const d=a.needsDb?D(r,u):[],p=a.needsStorage?_(r,u):[],g=a.needsMessaging?I(r,u):[];(d.length>0||p.length>0||g.length>0)&&(t+=`
+      ${H(d,p,g)}`)}return t}m(Q,"generateEcsServiceCode");function ae(e,n){const s=K(e),f={...J},l={env:{},secrets:{}};if(P(e)){const r=j(n,e);Object.assign(l.env,r.env),Object.assign(l.secrets,r.secrets)}const h={env:{},secrets:{}};if(V(e)){const r=w(n,e);Object.assign(h.env,r.env)}const i={env:{},secrets:{}};if(T(e)){const r=G(n,e);Object.assign(i.env,r.env)}let c=`
+    ecrRepository: app.getDefaultContainerRegistry(),`;if(c+=W(e),e.services?.length){c+=`
+    services: [{`;for(let r=0;r<e.services.length;r++){const u=e.services[r];u&&(r>0&&(c+=`
+    }, {`),c+=Q({service:u,isFirstService:r===0,hasConnections:s,dbEnvVars:l,storageEnvVars:h,messagingEnvVars:i,baseEnvVars:f,plan:n,compute:e}))}c+=`
+    }],`}return c+=E(e.extraProperties),c+=R(),c}m(ae,"generateEcsCode");export{ae as generateEcsCode};

package/dist/src/generation/compute/lambda.d.ts

@@ -1,3 +1,30 @@
 import type { ApplicationResourcePlan, ComputeResourcePlan } from "../../schemas/resourceSchemas.js";
+import type { ProjectedProp } from "../../projection/types.js";
+/**
+ * The Lambda's plan fragment for `projectPlanToConstructProps("compute", …)`,
+ * in the scaffold's emission order (the projection preserves fragment-key
+ * order, so this IS the prop order). Inclusion policy stays here — which keys
+ * are present, dispatch on deployment mode, the container-default
+ * architecture — while every NAME and construct value shape comes from the
+ * shared projection table: `memory`→`memorySize`, `ssmSecrets`→`secrets`,
+ * `description` stays `description` (never the inert `lambdaDescription`),
+ * `functionName` is plan-only and drops, `codePath`/`runtime`/`architecture`/
+ * `functionUrl` become their CDK member expressions.
+ *
+ * `environment` and the connection keys are deliberately ABSENT: the env
+ * block carries the scaffold-only `ENVIRONMENT` base var and the connection
+ * wiring is a structural block — both stay scaffold-rendered this increment.
+ */
+export declare function buildLambdaProjectionFragment(compute: ComputeResourcePlan): Record<string, unknown>;
+/**
+ * The Lambda's projected construct props. Plan-only unprojectables are
+ * IGNORED here — the scaffold consumes those keys through its own paths, so
+ * `functionName` simply does not come back. `unresolved-binding`
+ * unprojectables (a structured rule refusing the value) are NOT this
+ * function's to judge: `findComputeProjectionRefusal` (generation/compute.ts)
+ * refuses the whole plan pre-write through `generateInfrastructureFromPlan`'s
+ * failure channel, matching the codemod's refusal posture.
+ */
+export declare function projectLambdaProps(compute: ComputeResourcePlan): ProjectedProp[];
 export declare function generateLambdaCode(compute: ComputeResourcePlan): string;
 export declare function generateLambdaConnectionsCode(compute: ComputeResourcePlan, plan: ApplicationResourcePlan): string;

package/dist/src/generation/compute/lambda.js

@@ -1,26 +1,13 @@
-var $=Object.defineProperty;var h=(e,n)=>$(e,"name",{value:n,configurable:!0});import{formatValue as C,emitExtraProperties as v,escapeStringLiteral as a,formatStringArray as b}from"../common.js";import{getConnectedDatabases as D,generateDatabaseEnvVarEntries as O,toDatabaseEnvVarValue as T}from"../database.js";import{getConnectedStorage as A,generateStorageEnvVarEntries as N,formatAllConnectionsCode as _}from"../storageConnections.js";import{getConnectedMessaging as k,generateMessagingEnvVarEntries as x}from"../messagingConnections.js";import{DEPLOYMENT_TYPE as l,DEFAULT_COMPUTE_ARCHITECTURE as P}from"../../schemas/constants.js";import{BASE_ENVIRONMENT_VARS as E,computeHasConnections as V,computeHasDatabaseConnections as R,computeHasMessagingConnections as M,computeHasStorageConnections as U,formatEnvBlock as j}from"./shared.js";function Y(e){let n="";if(e.deployment===l.CODE&&e.codePath?(n+=`
-    deployment: "${l.CODE}",
-    code: Code.fromAsset(${a(e.codePath)}),`,e.handler&&(n+=`
-    handler: ${a(e.handler)},`),e.runtime&&(n+=`
-    runtime: Runtime.${e.runtime},`)):n+=`
-    deployment: "${l.CONTAINER}",
-    ecrRepository: app.getDefaultContainerRegistry(),`,e.timeout!==void 0&&(n+=`
-    timeout: ${e.timeout},`),e.memory!==void 0&&(n+=`
-    memorySize: ${e.memory},`),e.functionUrl&&(n+=`
-    functionUrl: { authType: FunctionUrlAuthType.${e.functionUrl.authType} },`),e.description&&(n+=`
-    lambdaDescription: ${a(e.description)},`),e.architecture||e.deployment===l.CONTAINER){const i=e.architecture??P;n+=`
-    architecture: Architecture.${i},`}if(e.ephemeralStorageSize!==void 0&&(n+=`
-    ephemeralStorageSize: ${e.ephemeralStorageSize},`),e.functionName&&(n+=`
-    functionName: ${a(e.functionName)},`),e.ssmSecretsPath&&(n+=`
-    ssmSecretsPath: ${a(e.ssmSecretsPath)},`),e.ssmSecrets&&e.ssmSecrets.length>0&&(n+=`
-    secrets: [${b(e.ssmSecrets)}],`),!V(e)){const i={...E,...e.environment};n+=`
+var b=Object.defineProperty;var a=(e,n)=>b(e,"name",{value:n,configurable:!0});import{projectPlanToConstructProps as v}from"../../projection/index.js";import{formatValue as C,emitExtraProperties as P}from"../common.js";import{renderProjectedValueSource as k}from"../structuredSource.js";import{getConnectedDatabases as x,generateDatabaseEnvVarEntries as D,toDatabaseEnvVarValue as u}from"../database.js";import{getConnectedStorage as O,generateStorageEnvVarEntries as V,formatAllConnectionsCode as _}from"../storageConnections.js";import{getConnectedMessaging as j,generateMessagingEnvVarEntries as p}from"../messagingConnections.js";import{DEPLOYMENT_TYPE as g,DEFAULT_COMPUTE_ARCHITECTURE as M}from"../../schemas/constants.js";import{BASE_ENVIRONMENT_VARS as y,computeHasConnections as N,computeHasDatabaseConnections as T,computeHasMessagingConnections as $,computeHasStorageConnections as R,formatEnvBlock as A}from"./shared.js";function E(e){return e.deployment===g.CODE&&!!e.codePath}a(E,"isCodeDeployment");function L(e){const n=E(e);return{deployment:n?g.CODE:g.CONTAINER,...n&&{codePath:e.codePath},...n&&e.handler&&{handler:e.handler},...n&&e.runtime&&{runtime:e.runtime},...e.timeout!==void 0&&{timeout:e.timeout},...e.memory!==void 0&&{memory:e.memory},...e.functionUrl&&{functionUrl:e.functionUrl},...e.description&&{description:e.description},...(e.architecture!==void 0||!n)&&{architecture:e.architecture??M},...e.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:e.ephemeralStorageSize},...e.functionName&&{functionName:e.functionName},...e.ssmSecretsPath&&{ssmSecretsPath:e.ssmSecretsPath},...e.ssmSecrets&&e.ssmSecrets.length>0&&{ssmSecrets:e.ssmSecrets}}}a(L,"buildLambdaProjectionFragment");function U(e){const{props:n}=v("compute",L(e));return n}a(U,"projectLambdaProps");function J(e){let n="";for(const o of U(e))n+=`
+    ${o.key}: ${k(o,{indent:"    "})},`,o.key==="deployment"&&!E(e)&&(n+=`
+    ecrRepository: app.getDefaultContainerRegistry(),`);if(!N(e)){const o={...y,...e.environment};n+=`
     environment: {
-${j(i,"      ")}
-    },`}return n+=v(e.extraProperties),n}h(Y,"generateLambdaCode");function p(e,n){const i=R(e),y=U(e),m=M(e);if(!i&&!y&&!m)return"";const f=i?D(n,e):[],c=y?A(n,e):[],g=m?k(n,e):[];if(f.length===0&&c.length===0&&g.length===0)return"";const o={...E},d={};if(f.length>0){const r=O(f);for(const t of r){const S=T(t);t.isSecret?d[t.key]={__expression:t.expression}:o[t.key]=S}}if(c.length>0){const r=N(c);for(const t of r)o[t.key]={__expression:t.expression}}if(g.length>0){const r=x(g);for(const t of r)o[t.key]={__expression:t.expression}}if(e.environment)for(const[r,t]of Object.entries(e.environment))o[r]=t;let s="";if(Object.keys(d).length>0){s+=`
-    containerSecretsImport: {`;for(const[r,t]of Object.entries(d))s+=`
+${A(o,"      ")}
+    },`}return n+=P(e.extraProperties),n}a(J,"generateLambdaCode");function K(e,n){const o=T(e),m=R(e),h=$(e);if(!o&&!m&&!h)return"";const c=o?x(n,e):[],f=m?O(n,e):[],d=h?j(n,e):[];if(c.length===0&&f.length===0&&d.length===0)return"";const i={...y},l={};if(c.length>0){const r=D(c);for(const t of r){const S=u(t);t.isSecret?l[t.key]={__expression:t.expression}:i[t.key]=S}}if(f.length>0){const r=V(f);for(const t of r)i[t.key]={__expression:t.expression}}if(d.length>0){const r=p(d);for(const t of r)i[t.key]={__expression:t.expression}}if(e.environment)for(const[r,t]of Object.entries(e.environment))i[r]=t;let s="";if(Object.keys(l).length>0){s+=`
+    secretsImport: {`;for(const[r,t]of Object.entries(l))s+=`
       ${r}: ${C(t)},`;s+=`
-    },`}if(Object.keys(o).length>0){s+=`
-    environment: {`;for(const[r,t]of Object.entries(o))s+=`
+    },`}if(Object.keys(i).length>0){s+=`
+    environment: {`;for(const[r,t]of Object.entries(i))s+=`
       ${r}: ${C(t)},`;s+=`
     },`}return s+=`
-    ${_(f,c,g)}`,s}h(p,"generateLambdaConnectionsCode");export{Y as generateLambdaCode,p as generateLambdaConnectionsCode};
+    ${_(c,f,d)}`,s}a(K,"generateLambdaConnectionsCode");export{L as buildLambdaProjectionFragment,J as generateLambdaCode,K as generateLambdaConnectionsCode,U as projectLambdaProps};