@fjall/generator 2.15.0 → 2.17.0

package/dist/.minified

@@ -1 +1 @@
-138 files minified at 2026-06-12T02:44:59.912Z
+139 files minified at 2026-06-15T10:18:04.720Z

package/dist/src/ast/astDatabaseParser.js

@@ -1 +1 @@
-import*as c from"typescript";import{constIncludes as R}from"../schemas/constants.js";import{asBoolean as p,asNumber as u,asString as o,asStringArray as x,captureExtraProperties as I,collectFromAst as A,extractVariableName as S,isCallRef as b,isFactoryBuildCall as h,isFactoryMethodCall as E,omitUndefined as D,parseObjectLiteral as w,parseOptionalConfig as d,parseBooleanOrConfig as g,resolveTemplateLiteral as N,typed as l}from"./astCommonParser.js";import{extractDynamoDBFields as v}from"./astDynamoDBParser.js";import{extractClickHouseFields as C}from"./astClickHouseParser.js";import{convertDynamoDBResources as H}from"./astDynamoDBParser.js";import{convertClickHouseResources as K}from"./astClickHouseParser.js";function P(r){const e=o(r.databaseEngine);if(e==="postgresql"||e==="mysql")return e;const i=r.engine;if(b(i)){const t=String(i.__call);if(t.includes("postgres")||t.includes("auroraPostgres"))return"postgresql";if(t.includes("mysql")||t.includes("auroraMysql"))return"mysql"}}function W(r){const e=r.engine;if(b(e))return String(e.__call)}const F=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function T(r,e,i){if(i.arguments.length<2)return null;const t=i.arguments[0],a=i.arguments[1];if(!c.isStringLiteral(t)&&!c.isTemplateExpression(t))return null;const s=c.isStringLiteral(t)?t.text:N(r,t);if(!c.isObjectLiteralExpression(a))return null;const n=w(a),m={resourceName:s,type:o(n.type)??"",databaseName:o(n.databaseName)??"",databaseEngine:P(n),engineExpression:W(n),port:u(n.port),deletionProtection:p(n.deletionProtection),instanceType:o(n.instanceType),multiAz:p(n.multiAz),publiclyAccessible:p(n.publiclyAccessible),enableSecretRotation:p(n.enableSecretRotation),encryption:d(n.encryption,l()),databaseInsights:g(n.databaseInsights,l()),proxy:g(n.proxy,l()),readReplica:g(n.readReplica,l()),credentials:d(n.credentials,l()),writer:d(n.writer,l()),readers:g(n.readers,l()),backupRetention:u(n.backupRetention),preferredMaintenanceWindow:o(n.preferredMaintenanceWindow),primaryRegion:o(n.primaryRegion),secondaryRegions:x(n.secondaryRegions),globalClusterIdentifier:o(n.globalClusterIdentifier),enableGlobalWriteForwarding:p(n.enableGlobalWriteForwarding),allocatedStorage:u(n.allocatedStorage),monitoringInterval:u(n.monitoringInterval),snapshotIdentifier:o(n.snapshotIdentifier),snapshotUsername:o(n.snapshotUsername),node:e},y=S(e);y&&(m.variableName=y);const f=I(n,F);return f.length>0&&(m.extraProperties=f),m}function G(r){return A(r,e=>{if(!c.isCallExpression(e)||!E(e,"addDatabase"))return null;const i=e.arguments[0];return h(i,"DatabaseFactory")?T(r,e,i):null})}function L(r){const e=[],i=[],t=[];for(const a of r)if(a.type==="DynamoDB"){const s=v(a);s&&i.push(s)}else if(a.type==="ClickHouse"){const s=C(a);s&&t.push(s)}else e.push(a);return{databases:e,dynamodb:i,clickhouse:t}}const k=["Instance","Aurora","GlobalAurora"];function z(r){return r.filter(e=>e.type!=="DynamoDB").map(e=>({name:e.resourceName,type:R(k,e.type)?e.type:"Instance",databaseName:e.databaseName,...D({port:e.port,deletionProtection:e.deletionProtection,instanceType:e.instanceType,multiAz:e.multiAz,publiclyAccessible:e.publiclyAccessible,enableSecretRotation:e.enableSecretRotation,encryption:e.encryption,databaseInsights:e.databaseInsights,proxy:e.proxy,readReplica:e.readReplica,credentials:e.credentials,writer:e.writer,readers:e.readers,backupRetention:e.backupRetention,preferredMaintenanceWindow:e.preferredMaintenanceWindow,primaryRegion:e.primaryRegion,secondaryRegions:e.secondaryRegions,globalClusterIdentifier:e.globalClusterIdentifier,enableGlobalWriteForwarding:e.enableGlobalWriteForwarding,allocatedStorage:e.allocatedStorage,monitoringInterval:e.monitoringInterval,variableName:e.variableName,databaseEngine:e.databaseEngine,engineExpression:e.engineExpression,extraProperties:e.extraProperties})}))}export{K as convertClickHouseResources,z as convertDatabaseResources,H as convertDynamoDBResources,G as findDatabaseResources,L as splitDatabaseResources};
+import*as c from"typescript";import{constIncludes as b,DATABASE_ENGINES as x}from"../schemas/constants.js";import{asBoolean as p,asNumber as u,asString as o,asStringArray as A,captureExtraProperties as I,collectFromAst as E,extractVariableName as S,isCallRef as R,isFactoryBuildCall as h,isFactoryMethodCall as D,omitUndefined as N,parseObjectLiteral as w,parseOptionalConfig as d,parseBooleanOrConfig as g,resolveTemplateLiteral as v,typed as l}from"./astCommonParser.js";import{extractDynamoDBFields as C}from"./astDynamoDBParser.js";import{extractClickHouseFields as P}from"./astClickHouseParser.js";import{convertDynamoDBResources as j}from"./astDynamoDBParser.js";import{convertClickHouseResources as V}from"./astClickHouseParser.js";function T(r){const e=o(r.databaseEngine);if(e!==void 0&&b(x,e))return e;const i=r.engine;if(R(i)){const t=String(i.__call);if(t.includes("postgres")||t.includes("auroraPostgres"))return"postgresql";if(t.includes("mysql")||t.includes("auroraMysql"))return"mysql"}}function W(r){const e=r.engine;if(R(e))return String(e.__call)}const B=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function F(r,e,i){if(i.arguments.length<2)return null;const t=i.arguments[0],a=i.arguments[1];if(!c.isStringLiteral(t)&&!c.isTemplateExpression(t))return null;const s=c.isStringLiteral(t)?t.text:v(r,t);if(!c.isObjectLiteralExpression(a))return null;const n=w(a),m={resourceName:s,type:o(n.type)??"",databaseName:o(n.databaseName)??"",databaseEngine:T(n),engineExpression:W(n),port:u(n.port),deletionProtection:p(n.deletionProtection),instanceType:o(n.instanceType),multiAz:p(n.multiAz),publiclyAccessible:p(n.publiclyAccessible),enableSecretRotation:p(n.enableSecretRotation),encryption:d(n.encryption,l()),databaseInsights:g(n.databaseInsights,l()),proxy:g(n.proxy,l()),readReplica:g(n.readReplica,l()),credentials:d(n.credentials,l()),writer:d(n.writer,l()),readers:g(n.readers,l()),backupRetention:u(n.backupRetention),preferredMaintenanceWindow:o(n.preferredMaintenanceWindow),primaryRegion:o(n.primaryRegion),secondaryRegions:A(n.secondaryRegions),globalClusterIdentifier:o(n.globalClusterIdentifier),enableGlobalWriteForwarding:p(n.enableGlobalWriteForwarding),allocatedStorage:u(n.allocatedStorage),monitoringInterval:u(n.monitoringInterval),snapshotIdentifier:o(n.snapshotIdentifier),snapshotUsername:o(n.snapshotUsername),node:e},f=S(e);f&&(m.variableName=f);const y=I(n,B);return y.length>0&&(m.extraProperties=y),m}function z(r){return E(r,e=>{if(!c.isCallExpression(e)||!D(e,"addDatabase"))return null;const i=e.arguments[0];return h(i,"DatabaseFactory")?F(r,e,i):null})}function O(r){const e=[],i=[],t=[];for(const a of r)if(a.type==="DynamoDB"){const s=C(a);s&&i.push(s)}else if(a.type==="ClickHouse"){const s=P(a);s&&t.push(s)}else e.push(a);return{databases:e,dynamodb:i,clickhouse:t}}const k=["Instance","Aurora","GlobalAurora"];function q(r){return r.filter(e=>e.type!=="DynamoDB").map(e=>({name:e.resourceName,type:b(k,e.type)?e.type:"Instance",databaseName:e.databaseName,...N({port:e.port,deletionProtection:e.deletionProtection,instanceType:e.instanceType,multiAz:e.multiAz,publiclyAccessible:e.publiclyAccessible,enableSecretRotation:e.enableSecretRotation,encryption:e.encryption,databaseInsights:e.databaseInsights,proxy:e.proxy,readReplica:e.readReplica,credentials:e.credentials,writer:e.writer,readers:e.readers,backupRetention:e.backupRetention,preferredMaintenanceWindow:e.preferredMaintenanceWindow,primaryRegion:e.primaryRegion,secondaryRegions:e.secondaryRegions,globalClusterIdentifier:e.globalClusterIdentifier,enableGlobalWriteForwarding:e.enableGlobalWriteForwarding,allocatedStorage:e.allocatedStorage,monitoringInterval:e.monitoringInterval,variableName:e.variableName,databaseEngine:e.databaseEngine,engineExpression:e.engineExpression,extraProperties:e.extraProperties})}))}export{V as convertClickHouseResources,q as convertDatabaseResources,j as convertDynamoDBResources,z as findDatabaseResources,O as splitDatabaseResources};

package/dist/src/ast/astDomainParser.d.ts

@@ -1,5 +1,6 @@
 import * as ts from "typescript";
 import { type Result } from "../types/Result.js";
+import { type DnsRecordType } from "../dns/types.js";
 /** One-of match for a single `new Domain(...)` call in an infrastructure file. */
 export interface DomainCallMatch {
     readonly callExpression: ts.NewExpression;
@@ -45,7 +46,7 @@ export type ParsedFjallTarget = {
 };
 export interface ParsedStandardRecord {
     readonly kind: "standard";
-    readonly type: "A" | "AAAA" | "CNAME" | "MX" | "TXT" | "NS" | "SRV" | "CAA";
+    readonly type: DnsRecordType;
     readonly name: string;
     readonly value: string | string[];
     readonly ttl?: number;

package/dist/src/ast/astDomainParser.js

@@ -1 +1 @@
-import*as l from"typescript";import{parseObjectLiteral as x,asString as c,asStringUnion as A,asStringArray as k,asBoolean as y,asNumber as N,isCallRef as $,isParsedObject as g}from"./astCommonParser.js";import{success as a,failure as u}from"../types/Result.js";const h=["route53","external-delegated","external-records"],T=["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"],I=["A","AAAA"];function J(e){const n=[],t=i=>{if(l.isNewExpression(i)&&E(i.expression)){const d=j(i);d!==void 0&&n.push(d)}l.forEachChild(i,t)};if(t(e),n.length===0)return a(void 0);if(n.length>1)return u(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${n.length}`));const r=n[0];return r?a(r):a(void 0)}function E(e){return l.isIdentifier(e)&&e.text==="Domain"}function j(e){const n=e.arguments;if(!n||n.length<3)return;const t=n[0],r=n[1],i=n[2];if(!t||!r||!i||!l.isObjectLiteralExpression(i))return;const d=v(e);if(d===void 0)return;const o=R(e),s=l.isStringLiteral(r)?r.text:void 0;return{callExpression:e,containingStatement:d,propsObjectLiteral:i,domainVarId:o,scopeArgumentText:t.getText(),constructIdLiteral:s}}function v(e){let n=e;for(;n!==void 0;){if(l.isExpressionStatement(n)||l.isVariableStatement(n))return n;n=n.parent}}function R(e){let n=e.parent;for(;n!==void 0;){if(l.isVariableDeclaration(n)&&l.isIdentifier(n.name)&&n.initializer===e)return n.name.text;n=n.parent}}function D(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${h.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`}}function B(e){const n=x(e),t=A(n.registrar,h);if(t===void 0){const s=n.registrar;if(s===void 0)return u({kind:"registrar_required"});const f=typeof s=="string"?s:p(s);return u({kind:"registrar_unsupported",value:f})}const r=c(n.zoneName);if(r===void 0)return u({kind:"missing_field",field:"zoneName"});const i=L(n.records);if(!i.success)return i;const d=z(n.certificates);if(!d.success)return d;const o={zoneName:r,description:c(n.description),costAllocationEnvironment:c(n.costAllocationEnvironment),tags:M(n.tags),records:i.data,certificates:d.data};switch(t){case"route53":{const s=S(n.delegations);return s.success?a({...o,registrar:t,hostedZoneId:c(n.hostedZoneId),delegations:s.data}):s}case"external-delegated":{const s=c(n.delegatedSubdomain);if(s===void 0)return u({kind:"missing_field",field:"delegatedSubdomain"});const f=S(n.delegations);return f.success?a({...o,registrar:t,delegatedSubdomain:s,delegations:f.data}):f}case"external-records":return a({...o,registrar:t})}}function X(e){return D(e)}function L(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"records",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(!g(r))return u({kind:"invalid_literal",field:`records[${t}]`,reason:"must be an object literal"});const i=O(r,t);if(!i.success)return i;n.push(i.data)}return a(n)}function O(e,n){const t=c(e.type),r=c(e.name);if(t===void 0)return u({kind:"missing_field",field:`records[${n}].type`});if(r===void 0)return u({kind:"missing_field",field:`records[${n}].name`});if(e.target!==void 0){if(!I.some(f=>f===t))return u({kind:"invalid_literal",field:`records[${n}]`,reason:`alias records must have type 'A' or 'AAAA', got '${t}'`});const s=V(e.target);return a({kind:"alias",type:t,name:r,target:s})}if(!T.some(s=>s===t))return u({kind:"invalid_literal",field:`records[${n}]`,reason:`unsupported record type '${t}'`});const i=C(e.value);if(i===void 0)return u({kind:"invalid_literal",field:`records[${n}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});const d=N(e.ttl),o={kind:"standard",type:t,name:r,value:i,...d!==void 0?{ttl:d}:{}};return a(o)}function C(e){if(e===void 0)return;if(typeof e=="string")return e;const n=k(e);if(n!==void 0)return n}function V(e){if($(e))return Z(e);if(g(e)){const n=A(e.kind,["ecs","cdn","bucket","custom"]);if(n==="ecs"||n==="cdn"){const t=c(e.appName);if(t!==void 0)return{kind:n,appName:t}}if(n==="bucket"){const t=c(e.bucketName);if(t!==void 0)return{kind:n,bucketName:t}}if(n==="custom"){const t=c(e.dnsName),r=c(e.hostedZoneId);if(t!==void 0&&r!==void 0)return{kind:n,dnsName:t,hostedZoneId:r}}}return{kind:"unresolved",sourceText:p(e)}}function Z(e){const n=e.__call.trim(),t=n.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!t)return{kind:"unresolved",sourceText:n};const r=t[1],i=t[2]??"",d=_(i);switch(r){case"fjallApp":{const o=m(d,0);return o===void 0?{kind:"dynamic",sourceText:n}:{kind:"ecs",appName:o}}case"fjallCdn":{const o=m(d,0);return o===void 0?{kind:"dynamic",sourceText:n}:{kind:"cdn",appName:o}}case"fjallBucket":{const o=m(d,0);return o===void 0?{kind:"dynamic",sourceText:n}:{kind:"bucket",bucketName:o}}case"aliasTo":{if(d.length>=2){const o=m(d,0),s=m(d,1);return o!==void 0&&s!==void 0?{kind:"custom",dnsName:o,hostedZoneId:s}:{kind:"dynamic",sourceText:n}}if(d.length===1){const o=d[0]?.trim()??"",s=b(o,"dnsName"),f=b(o,"hostedZoneId");return s!==void 0&&f!==void 0?{kind:"custom",dnsName:s,hostedZoneId:f}:{kind:"dynamic",sourceText:n}}return{kind:"unresolved",sourceText:n}}default:return{kind:"unresolved",sourceText:n}}}function _(e){const n=[];let t=0,r=null,i="";for(let o=0;o<e.length;o++){const s=e[o];if(r!==null){if(i+=s,s==="\\"&&o+1<e.length){const f=e[o+1];f!==void 0&&(i+=f,o+=1);continue}s===r&&(r=null);continue}if(s==='"'||s==="'"||s==="`"){r=s,i+=s;continue}if(s==="("||s==="{"||s==="["){t+=1,i+=s;continue}if(s===")"||s==="}"||s==="]"){t-=1,i+=s;continue}if(s===","&&t===0){n.push(i.trim()),i="";continue}i+=s}const d=i.trim();return d.length>0&&n.push(d),n}function m(e,n){const t=e[n];if(t===void 0)return;const r=t.trim();if(r.length<2)return;const i=r[0],d=r[r.length-1];if(i===d&&!(i!=='"'&&i!=="'"&&i!=="`"))return r.slice(1,-1)}function b(e,n){const t=e.trim().replace(/^\{|\}$/g,""),r=_(t);for(const i of r){const d=i.indexOf(":");if(d<0||i.slice(0,d).trim().replace(/["'`]/g,"")!==n)continue;const s=i.slice(d+1).trim();return m([s],0)}}function z(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"certificates",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(typeof r=="string"){n.push({domainName:r});continue}if(!g(r))return u({kind:"invalid_literal",field:`certificates[${t}]`,reason:"must be a string or object literal"});const i=c(r.domainName);if(i===void 0)return u({kind:"missing_field",field:`certificates[${t}].domainName`});const d=k(r.subjectAlternativeNames),o=y(r.transparencyLogging);n.push({domainName:i,...d!==void 0?{subjectAlternativeNames:d}:{},...o!==void 0?{transparencyLogging:o}:{}})}return a(n)}function S(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"delegations",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(!g(r))return u({kind:"invalid_literal",field:`delegations[${t}]`,reason:"must be an object literal"});const i=c(r.subdomain),d=c(r.toAccount);if(i===void 0)return u({kind:"missing_field",field:`delegations[${t}].subdomain`});if(d===void 0)return u({kind:"missing_field",field:`delegations[${t}].toAccount`});const o=y(r.auto);n.push({subdomain:i,toAccount:d,...o!==void 0?{auto:o}:{}})}return a(n)}function M(e){if(e===void 0||!g(e))return;const n={};for(const[t,r]of Object.entries(e)){const i=c(r);i!==void 0&&(n[t]=i)}return Object.keys(n).length===0?void 0:n}function p(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(n=>p(n)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}export{J as findDomainConstructCall,X as parseDomainErrorMessage,B as parseDomainProps,_ as splitTopLevelArgs};
+import*as l from"typescript";import{parseObjectLiteral as x,asString as c,asStringUnion as y,asStringArray as k,asBoolean as h,asNumber as N,isCallRef as T,isParsedObject as g}from"./astCommonParser.js";import{success as a,failure as u}from"../types/Result.js";import{DnsRecordTypeSchema as $}from"../dns/types.js";import{DomainRegistrarSchema as I,AliasRecordTypeSchema as D,TYPED_FJALL_TARGET_KINDS as R}from"../dns/domainRecords.js";const _=I.options,E=$.options,L=D.options;function U(e){const n=[],t=i=>{if(l.isNewExpression(i)&&j(i.expression)){const o=v(i);o!==void 0&&n.push(o)}l.forEachChild(i,t)};if(t(e),n.length===0)return a(void 0);if(n.length>1)return u(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${n.length}`));const r=n[0];return r?a(r):a(void 0)}function j(e){return l.isIdentifier(e)&&e.text==="Domain"}function v(e){const n=e.arguments;if(!n||n.length<3)return;const t=n[0],r=n[1],i=n[2];if(!t||!r||!i||!l.isObjectLiteralExpression(i))return;const o=O(e);if(o===void 0)return;const d=C(e),s=l.isStringLiteral(r)?r.text:void 0;return{callExpression:e,containingStatement:o,propsObjectLiteral:i,domainVarId:d,scopeArgumentText:t.getText(),constructIdLiteral:s}}function O(e){let n=e;for(;n!==void 0;){if(l.isExpressionStatement(n)||l.isVariableStatement(n))return n;n=n.parent}}function C(e){let n=e.parent;for(;n!==void 0;){if(l.isVariableDeclaration(n)&&l.isIdentifier(n.name)&&n.initializer===e)return n.name.text;n=n.parent}}function Z(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${_.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`}}function H(e){const n=x(e),t=y(n.registrar,_);if(t===void 0){const s=n.registrar;if(s===void 0)return u({kind:"registrar_required"});const f=typeof s=="string"?s:p(s);return u({kind:"registrar_unsupported",value:f})}const r=c(n.zoneName);if(r===void 0)return u({kind:"missing_field",field:"zoneName"});const i=V(n.records);if(!i.success)return i;const o=M(n.certificates);if(!o.success)return o;const d={zoneName:r,description:c(n.description),costAllocationEnvironment:c(n.costAllocationEnvironment),tags:Y(n.tags),records:i.data,certificates:o.data};switch(t){case"route53":{const s=S(n.delegations);return s.success?a({...d,registrar:t,hostedZoneId:c(n.hostedZoneId),delegations:s.data}):s}case"external-delegated":{const s=c(n.delegatedSubdomain);if(s===void 0)return u({kind:"missing_field",field:"delegatedSubdomain"});const f=S(n.delegations);return f.success?a({...d,registrar:t,delegatedSubdomain:s,delegations:f.data}):f}case"external-records":return a({...d,registrar:t})}}function Q(e){return Z(e)}function V(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"records",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(!g(r))return u({kind:"invalid_literal",field:`records[${t}]`,reason:"must be an object literal"});const i=P(r,t);if(!i.success)return i;n.push(i.data)}return a(n)}function P(e,n){const t=c(e.type),r=c(e.name);if(t===void 0)return u({kind:"missing_field",field:`records[${n}].type`});if(r===void 0)return u({kind:"missing_field",field:`records[${n}].name`});if(e.target!==void 0){if(!L.some(f=>f===t))return u({kind:"invalid_literal",field:`records[${n}]`,reason:`alias records must have type 'A' or 'AAAA', got '${t}'`});const s=q(e.target);return a({kind:"alias",type:t,name:r,target:s})}if(!E.some(s=>s===t))return u({kind:"invalid_literal",field:`records[${n}]`,reason:`unsupported record type '${t}'`});const i=z(e.value);if(i===void 0)return u({kind:"invalid_literal",field:`records[${n}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});const o=N(e.ttl),d={kind:"standard",type:t,name:r,value:i,...o!==void 0?{ttl:o}:{}};return a(d)}function z(e){if(e===void 0)return;if(typeof e=="string")return e;const n=k(e);if(n!==void 0)return n}function q(e){if(T(e))return J(e);if(g(e)){const n=y(e.kind,R);if(n==="ecs"||n==="cdn"){const t=c(e.appName);if(t!==void 0)return{kind:n,appName:t}}if(n==="bucket"){const t=c(e.bucketName);if(t!==void 0)return{kind:n,bucketName:t}}if(n==="custom"){const t=c(e.dnsName),r=c(e.hostedZoneId);if(t!==void 0&&r!==void 0)return{kind:n,dnsName:t,hostedZoneId:r}}}return{kind:"unresolved",sourceText:p(e)}}function J(e){const n=e.__call.trim(),t=n.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!t)return{kind:"unresolved",sourceText:n};const r=t[1],i=t[2]??"",o=A(i);switch(r){case"fjallApp":{const d=m(o,0);return d===void 0?{kind:"dynamic",sourceText:n}:{kind:"ecs",appName:d}}case"fjallCdn":{const d=m(o,0);return d===void 0?{kind:"dynamic",sourceText:n}:{kind:"cdn",appName:d}}case"fjallBucket":{const d=m(o,0);return d===void 0?{kind:"dynamic",sourceText:n}:{kind:"bucket",bucketName:d}}case"aliasTo":{if(o.length>=2){const d=m(o,0),s=m(o,1);return d!==void 0&&s!==void 0?{kind:"custom",dnsName:d,hostedZoneId:s}:{kind:"dynamic",sourceText:n}}if(o.length===1){const d=o[0]?.trim()??"",s=b(d,"dnsName"),f=b(d,"hostedZoneId");return s!==void 0&&f!==void 0?{kind:"custom",dnsName:s,hostedZoneId:f}:{kind:"dynamic",sourceText:n}}return{kind:"unresolved",sourceText:n}}default:return{kind:"unresolved",sourceText:n}}}function A(e){const n=[];let t=0,r=null,i="";for(let d=0;d<e.length;d++){const s=e[d];if(r!==null){if(i+=s,s==="\\"&&d+1<e.length){const f=e[d+1];f!==void 0&&(i+=f,d+=1);continue}s===r&&(r=null);continue}if(s==='"'||s==="'"||s==="`"){r=s,i+=s;continue}if(s==="("||s==="{"||s==="["){t+=1,i+=s;continue}if(s===")"||s==="}"||s==="]"){t-=1,i+=s;continue}if(s===","&&t===0){n.push(i.trim()),i="";continue}i+=s}const o=i.trim();return o.length>0&&n.push(o),n}function m(e,n){const t=e[n];if(t===void 0)return;const r=t.trim();if(r.length<2)return;const i=r[0],o=r[r.length-1];if(i===o&&!(i!=='"'&&i!=="'"&&i!=="`"))return r.slice(1,-1)}function b(e,n){const t=e.trim().replace(/^\{|\}$/g,""),r=A(t);for(const i of r){const o=i.indexOf(":");if(o<0||i.slice(0,o).trim().replace(/["'`]/g,"")!==n)continue;const s=i.slice(o+1).trim();return m([s],0)}}function M(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"certificates",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(typeof r=="string"){n.push({domainName:r});continue}if(!g(r))return u({kind:"invalid_literal",field:`certificates[${t}]`,reason:"must be a string or object literal"});const i=c(r.domainName);if(i===void 0)return u({kind:"missing_field",field:`certificates[${t}].domainName`});const o=k(r.subjectAlternativeNames),d=h(r.transparencyLogging);n.push({domainName:i,...o!==void 0?{subjectAlternativeNames:o}:{},...d!==void 0?{transparencyLogging:d}:{}})}return a(n)}function S(e){if(e===void 0)return a([]);if(!Array.isArray(e))return u({kind:"invalid_literal",field:"delegations",reason:"must be an array"});const n=[];for(let t=0;t<e.length;t++){const r=e[t];if(!g(r))return u({kind:"invalid_literal",field:`delegations[${t}]`,reason:"must be an object literal"});const i=c(r.subdomain),o=c(r.toAccount);if(i===void 0)return u({kind:"missing_field",field:`delegations[${t}].subdomain`});if(o===void 0)return u({kind:"missing_field",field:`delegations[${t}].toAccount`});const d=h(r.auto);n.push({subdomain:i,toAccount:o,...d!==void 0?{auto:d}:{}})}return a(n)}function Y(e){if(e===void 0||!g(e))return;const n={};for(const[t,r]of Object.entries(e)){const i=c(r);i!==void 0&&(n[t]=i)}return Object.keys(n).length===0?void 0:n}function p(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(n=>p(n)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}export{U as findDomainConstructCall,Q as parseDomainErrorMessage,H as parseDomainProps,A as splitTopLevelArgs};

package/dist/src/ast/astMessagingParser.d.ts

@@ -14,6 +14,7 @@ export interface ParsedSQSResource {
     visibilityTimeout?: number;
     retentionPeriod?: number;
     contentBasedDeduplication?: boolean;
+    removalPolicy?: string;
     extraProperties?: Array<{
         key: string;
         sourceText: string;

package/dist/src/ast/astMessagingParser.js

@@ -1 +1 @@
-import*as o from"typescript";import{asBoolean as d,asNumber as a,asString as l,captureExtraProperties as m,collectFromAst as p,extractVariableName as g,isFactoryBuildCall as x,isFactoryMethodCall as S,isParsedObject as y,omitUndefined as f,parseObjectLiteral as b}from"./astCommonParser.js";function N(t,e){if(e.arguments.length<2)return null;const i=e.arguments[0],s=e.arguments[1];if(!o.isStringLiteral(i)||!o.isObjectLiteralExpression(s))return null;const r=b(s),n={resourceName:i.text,queueType:l(r.queueType)??"standard",visibilityTimeout:a(r.visibilityTimeout),retentionPeriod:a(r.messageRetentionPeriod),contentBasedDeduplication:d(r.contentBasedDeduplication),node:t},c=g(t);c&&(n.variableName=c);const u=m(r,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication"]));return u.length>0&&(n.extraProperties=u),n}function v(t){if(t!=null){if(t===!1)return!1;if(y(t))return f({enabled:d(t.enabled),maxReceiveCount:a(t.maxReceiveCount)})}}function B(t){return p(t,e=>{if(!o.isCallExpression(e)||!S(e,"addMessaging"))return null;const i=e.arguments[0];return x(i,"MessagingFactory")?N(e,i):null})}function D(t){if(t.length!==0)return t.map(e=>({name:e.resourceName,queueType:e.queueType==="fifo"?"fifo":"standard",...f({visibilityTimeout:e.visibilityTimeout,retentionPeriod:e.retentionPeriod,contentBasedDeduplication:e.contentBasedDeduplication,variableName:e.variableName,extraProperties:e.extraProperties})}))}export{D as convertSQSResources,B as findSQSResources,v as parseDeadLetterQueueConfig};
+import*as o from"typescript";import{SqsRemovalPolicySchema as f}from"../schemas/messagingSchemas.js";import{asBoolean as u,asNumber as a,asString as m,captureExtraProperties as p,collectFromAst as S,extractVariableName as y,isFactoryBuildCall as g,isFactoryMethodCall as P,isParsedObject as x,omitUndefined as d,parseObjectLiteral as b}from"./astCommonParser.js";function v(e,t){if(t.arguments.length<2)return null;const n=t.arguments[0],s=t.arguments[1];if(!o.isStringLiteral(n)||!o.isObjectLiteralExpression(s))return null;const i=b(s),r={resourceName:n.text,queueType:m(i.queueType)??"standard",visibilityTimeout:a(i.visibilityTimeout),retentionPeriod:a(i.messageRetentionPeriod),contentBasedDeduplication:u(i.contentBasedDeduplication),removalPolicy:m(i.removalPolicy),node:e},c=y(e);c&&(r.variableName=c);const l=p(i,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication","removalPolicy"]));return l.length>0&&(r.extraProperties=l),r}function Q(e){if(e!=null){if(e===!1)return!1;if(x(e))return d({enabled:u(e.enabled),maxReceiveCount:a(e.maxReceiveCount)})}}function h(e){return S(e,t=>{if(!o.isCallExpression(t)||!P(t,"addMessaging"))return null;const n=t.arguments[0];return g(n,"MessagingFactory")?v(t,n):null})}function D(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,queueType:t.queueType==="fifo"?"fifo":"standard",...d({visibilityTimeout:t.visibilityTimeout,retentionPeriod:t.retentionPeriod,contentBasedDeduplication:t.contentBasedDeduplication,removalPolicy:T(t.removalPolicy),variableName:t.variableName,extraProperties:t.extraProperties})}))}const N=new Set(f.options);function R(e){return N.has(e)}function T(e){return e!==void 0&&R(e)?e:void 0}export{D as convertSQSResources,h as findSQSResources,Q as parseDeadLetterQueueConfig};

package/dist/src/ast/astNetworkParser.js

@@ -1 +1 @@
-import*as r from"typescript";import{constIncludes as L,BACKUP_VAULT_TIERS as z}from"../schemas/constants.js";import{asNumber as d,asString as p,collectFromAst as A,extractVariableName as N,findFirstInAst as a,isAppGetAppCall as u,isFactoryBuildCall as O,isFactoryMethodCall as k,isNamedProperty as f,isParsedObject as F,omitUndefined as l,parseObjectLiteral as c,parseBooleanOrConfig as m}from"./astCommonParser.js";const b=["cloudwatch","s3"];function T(n){if(n!==void 0)return b.includes(n)?n:void 0}function y(n){return{maxAzs:d(n.maxAzs),natGateways:m(n.natGateways,e=>({count:d(e.count)})),flowLogs:m(n.flowLogs,e=>({destination:p(e.destination),retentionDays:d(e.retentionDays)})),vpcEndpoints:F(n.vpcEndpoints)?n.vpcEndpoints:void 0}}function j(n,e){if(e.arguments.length<2)return null;const t=e.arguments[0],i=e.arguments[1];if(!r.isStringLiteral(t))return null;const o=t.text,s=r.isObjectLiteralExpression(i)?c(i):{},E=y(s),g={name:o,config:l({...E}),node:n},x=N(n);return x&&(g.variableName=x),g}function S(n){return a(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(f(i,"network")&&r.isObjectLiteralExpression(i.initializer)){for(const o of i.initializer.properties)if(f(o,"useExisting")&&r.isStringLiteral(o.initializer))return o.initializer.text}}})}function K(n){return a(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(f(i,"network")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return;if(r.isObjectLiteralExpression(i.initializer)&&!i.initializer.properties.some(s=>f(s,"useExisting"))){const s=c(i.initializer);return y(s)}}}})}function v(n){return a(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(f(i,"backup")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return!1;if(r.isObjectLiteralExpression(i.initializer)){const o=c(i.initializer),s=p(o.tier);if(s)return{tier:s}}}}})}function D(n){return a(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(f(i,"tunnel")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return!1;if(i.initializer.kind===r.SyntaxKind.TrueKeyword)return!0;if(r.isObjectLiteralExpression(i.initializer)){const o=c(i.initializer),s=p(o.instanceType);return s?{instanceType:s}:{}}}}})}function G(n){return A(n,e=>{if(!r.isCallExpression(e)||!k(e,"addNetwork"))return null;const t=e.arguments[0];return O(t,"NetworkFactory")?j(e,t):null})}function w(n){const e=n.flowLogs;return{...l({maxAzs:n.maxAzs,natGateways:n.natGateways,vpcEndpoints:n.vpcEndpoints}),...e!==void 0&&{flowLogs:e===!1?!1:l({destination:T(e.destination),retentionDays:e.retentionDays})}}}function I(n){if(n)return w(n)}function B(n){if(n===void 0)return;if(n===!1)return!1;const e=n.tier;if(L(z,e))return{tier:e}}function U(n){if(n===void 0)return;if(n===!1)return!1;if(n===!0)return{};const e={};return n.instanceType&&(e.instanceType=n.instanceType),e}function P(n){if(!(!n||n.length===0))return n.map(e=>({name:e.name,...w(e.config)}))}export{w as buildNetworkFields,P as convertAdditionalNetworks,B as convertBackupConfig,I as convertNetworkConfig,U as convertTunnelConfig,v as findBackupConfig,K as findNetworkConfig,G as findNetworkResources,D as findTunnelConfig,S as findVpcId};
+import*as r from"typescript";import{constIncludes as E,BACKUP_VAULT_TIERS as z}from"../schemas/constants.js";import{FlowLogDestinationSchema as A}from"../schemas/networkSchemas.js";import{asNumber as d,asString as p,collectFromAst as N,extractVariableName as O,findFirstInAst as f,isAppGetAppCall as u,isFactoryBuildCall as k,isFactoryMethodCall as F,isNamedProperty as a,isParsedObject as b,omitUndefined as l,parseObjectLiteral as c,parseBooleanOrConfig as x}from"./astCommonParser.js";const S=new Set(A.options);function T(n){if(n!==void 0)return S.has(n)?n:void 0}function w(n){return{maxAzs:d(n.maxAzs),natGateways:x(n.natGateways,e=>({count:d(e.count)})),flowLogs:x(n.flowLogs,e=>({destination:p(e.destination),retentionDays:d(e.retentionDays)})),vpcEndpoints:b(n.vpcEndpoints)?n.vpcEndpoints:void 0}}function h(n,e){if(e.arguments.length<2)return null;const t=e.arguments[0],i=e.arguments[1];if(!r.isStringLiteral(t))return null;const o=t.text,s=r.isObjectLiteralExpression(i)?c(i):{},L=w(s),g={name:o,config:l({...L}),node:n},m=O(n);return m&&(g.variableName=m),g}function v(n){return f(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(a(i,"network")&&r.isObjectLiteralExpression(i.initializer)){for(const o of i.initializer.properties)if(a(o,"useExisting")&&r.isStringLiteral(o.initializer))return o.initializer.text}}})}function D(n){return f(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(a(i,"network")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return;if(r.isObjectLiteralExpression(i.initializer)&&!i.initializer.properties.some(s=>a(s,"useExisting"))){const s=c(i.initializer);return w(s)}}}})}function G(n){return f(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(a(i,"backup")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return!1;if(r.isObjectLiteralExpression(i.initializer)){const o=c(i.initializer),s=p(o.tier);if(s)return{tier:s}}}}})}function I(n){return f(n,e=>{if(!u(e)||e.arguments.length<=1)return;const t=e.arguments[1];if(r.isObjectLiteralExpression(t)){for(const i of t.properties)if(a(i,"tunnel")){if(i.initializer.kind===r.SyntaxKind.FalseKeyword)return!1;if(i.initializer.kind===r.SyntaxKind.TrueKeyword)return!0;if(r.isObjectLiteralExpression(i.initializer)){const o=c(i.initializer),s=p(o.instanceType);return s?{instanceType:s}:{}}}}})}function B(n){return N(n,e=>{if(!r.isCallExpression(e)||!F(e,"addNetwork"))return null;const t=e.arguments[0];return k(t,"NetworkFactory")?h(e,t):null})}function y(n){const e=n.flowLogs;return{...l({maxAzs:n.maxAzs,natGateways:n.natGateways,vpcEndpoints:n.vpcEndpoints}),...e!==void 0&&{flowLogs:e===!1?!1:l({destination:T(e.destination),retentionDays:e.retentionDays})}}}function U(n){if(n)return y(n)}function P(n){if(n===void 0)return;if(n===!1)return!1;const e=n.tier;if(E(z,e))return{tier:e}}function _(n){if(n===void 0)return;if(n===!1)return!1;if(n===!0)return{};const e={};return n.instanceType&&(e.instanceType=n.instanceType),e}function V(n){if(!(!n||n.length===0))return n.map(e=>({name:e.name,...y(e.config)}))}export{y as buildNetworkFields,V as convertAdditionalNetworks,P as convertBackupConfig,U as convertNetworkConfig,_ as convertTunnelConfig,G as findBackupConfig,D as findNetworkConfig,B as findNetworkResources,I as findTunnelConfig,v as findVpcId};

package/dist/src/ast/astTestHelpers.d.ts

@@ -109,6 +109,14 @@ export declare function parseAndConvert(code: string): {
             } | undefined;
         } | undefined;
         retain?: boolean | undefined;
+        resourcePolicyStatements?: {
+            effect: "Allow" | "Deny";
+            principals: string[];
+            actions: string[];
+            sid?: string | undefined;
+            resources?: string[] | undefined;
+            conditions?: Record<string, Record<string, string | string[]>> | undefined;
+        }[] | undefined;
         stackPlacement?: "storage" | "compute" | "cdn" | undefined;
         variableName?: string | undefined;
         extraProperties?: {
@@ -624,6 +632,7 @@ export declare function parseAndConvert(code: string): {
         visibilityTimeout?: number | undefined;
         retentionPeriod?: number | undefined;
         contentBasedDeduplication?: boolean | undefined;
+        removalPolicy?: "DESTROY" | "RETAIN" | undefined;
         variableName?: string | undefined;
         extraProperties?: {
             key: string;

package/dist/src/aws/regions.d.ts

@@ -1,5 +1,5 @@
 import { type RegionInfo } from "@fjall/util";
-export { AWS_REGIONS_METADATA, DEFAULT_REGION, getRegionInfo, regions, suggestRegionForTimezone, type RegionCode, type RegionInfo, } from "@fjall/util";
+export { AWS_REGIONS_METADATA, DEFAULT_REGION, getRegionInfo, OPT_IN_REGION_CODES, optInRegionWarning, regions, suggestRegionForTimezone, type RegionCode, type RegionInfo, } from "@fjall/util";
 export declare const topRegions: readonly RegionInfo[];
 export declare const commonRegions: readonly ["us-east-2", "us-west-2", "us-east-1", "eu-west-1", "ap-southeast-1"];
 export declare function parseRegionList(value: string): string[];

package/dist/src/aws/regions.js

@@ -1 +1 @@
-import{AWS_REGIONS_METADATA as s,getRegionInfo as f,regions as c}from"@fjall/util";import{AWS_REGIONS_METADATA as y,DEFAULT_REGION as S,getRegionInfo as $,regions as z,suggestRegionForTimezone as D}from"@fjall/util";const g=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],O=Object.freeze(g.flatMap(t=>{const e=f(t);return e?[e]:[]})),u=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function a(t){return t?t.split(",").map(e=>e.trim()).filter(Boolean):[]}function p(t){return c.includes(t)}function l(t){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(t)}function R(t){if(!t)return u.slice(0,3);const e=t.toLowerCase().split("-"),n=e[0],o=e.length>1?e[1]:"";let r=[];return n&&o&&(r=c.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=c.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):u.slice(0,3)}function d(t){if(p(t))return!0;const e=R(t);return l(t)?`Unknown region. Try: ${e.join(", ")}`:`Invalid format. Try: ${e.join(", ")}`}function A(t){if(!t||t.trim()==="")return!0;const e=a(t);for(const n of e){const o=d(n);if(o!==!0)return o}return!0}function x(t,e){return t.filter(n=>n!==e)}function E(){return s.map(t=>({label:t.city,value:t.code,description:t.code}))}function T(t){return s.filter(e=>e.code!==t).map(e=>({label:e.city,value:e.code,description:e.code}))}function h(t){const e=s.find(n=>n.code===t);return e?e.city:t}function I(t){return e=>{const n=a(e);return x(n,t)}}export{y as AWS_REGIONS_METADATA,S as DEFAULT_REGION,u as commonRegions,I as createRegionFormatter,x as filterDuplicateRegions,$ as getRegionInfo,h as getRegionName,E as getRegionOptions,T as getRegionOptionsExcluding,R as getSuggestions,p as isValidRegion,l as isValidRegionFormat,a as parseRegionList,z as regions,D as suggestRegionForTimezone,O as topRegions,d as validateRegion,A as validateRegionList};
+import{AWS_REGIONS_METADATA as s,getRegionInfo as f,regions as u}from"@fjall/util";import{AWS_REGIONS_METADATA as $,DEFAULT_REGION as w,getRegionInfo as D,OPT_IN_REGION_CODES as y,optInRegionWarning as z,regions as G,suggestRegionForTimezone as L}from"@fjall/util";const p=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],E=Object.freeze(p.flatMap(t=>{const e=f(t);return e?[e]:[]})),c=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function g(t){return t?t.split(",").map(e=>e.trim()).filter(Boolean):[]}function l(t){return u.includes(t)}function R(t){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(t)}function x(t){if(!t)return c.slice(0,3);const e=t.toLowerCase().split("-"),n=e[0],o=e.length>1?e[1]:"";let r=[];return n&&o&&(r=u.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=u.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):c.slice(0,3)}function d(t){if(l(t))return!0;const e=x(t);return R(t)?`Unknown region. Try: ${e.join(", ")}`:`Invalid format. Try: ${e.join(", ")}`}function I(t){if(!t||t.trim()==="")return!0;const e=g(t);for(const n of e){const o=d(n);if(o!==!0)return o}return!0}function m(t,e){return t.filter(n=>n!==e)}function a(t){return{label:t.city,value:t.code,description:t.optIn?`${t.code} \u2014 opt-in required`:t.code}}function T(){return s.map(a)}function _(t){return s.filter(e=>e.code!==t).map(a)}function A(t){const e=s.find(n=>n.code===t);return e?e.city:t}function h(t){return e=>{const n=g(e);return m(n,t)}}export{$ as AWS_REGIONS_METADATA,w as DEFAULT_REGION,y as OPT_IN_REGION_CODES,c as commonRegions,h as createRegionFormatter,m as filterDuplicateRegions,D as getRegionInfo,A as getRegionName,T as getRegionOptions,_ as getRegionOptionsExcluding,x as getSuggestions,l as isValidRegion,R as isValidRegionFormat,z as optInRegionWarning,g as parseRegionList,G as regions,L as suggestRegionForTimezone,E as topRegions,d as validateRegion,I as validateRegionList};

package/dist/src/codemod/index.d.ts

@@ -7,6 +7,7 @@ export { addVpcPeerAccepter, modifyVpcPeerAccepter, removeVpcPeerAccepter, type
 export { addCrossPlanConnection, modifyCrossPlanConnection, removeCrossPlanConnection, type CrossPlanConnectionAddOptions, type CrossPlanConnectionModifyOptions, type CrossPlanConnectionOrchestratorSuccess, type CrossPlanConnectionRemoveOptions, } from "./edits/crossPlanConnection.js";
 export { resolveDriftPolicy, type DriftAction, type DriftDecision, } from "./edits/driftPolicy.js";
 export { listResources, type ListResourcesError } from "./listResources.js";
+export { resolveConstructByLiteralProperty, type ConstructResolution, type ConstructResolutionFailureReason, type ResolveConstructQuery, type ResolvedConstruct, } from "./semanticIndex/index.js";
 export { parse } from "./fileRewriter/parse.js";
 export { CrossPlanConnectionResourcePlanSchema, VpcPeerAccepterResourcePlanSchema, VpcPeerResourcePlanSchema, } from "../schemas/index.js";
 export type { CrossPlanConnectionResourcePlan, VpcPeerAccepterResourcePlan, VpcPeerResourcePlan, } from "../schemas/index.js";

package/dist/src/codemod/index.js

@@ -1 +1 @@
-import{addResource as o}from"./edits/addResource.js";import{removeResource as c}from"./edits/removeResource.js";import{modifyResource as m}from"./edits/modifyResource.js";import{appendAccountToStage as a}from"./edits/appendAccountToStage.js";import{addVpcPeer as d,modifyVpcPeer as i,removeVpcPeer as l}from"./edits/vpcPeer.js";import{addVpcPeerAccepter as u,modifyVpcPeerAccepter as P,removeVpcPeerAccepter as E}from"./edits/vpcPeerAccepter.js";import{addCrossPlanConnection as R,modifyCrossPlanConnection as v,removeCrossPlanConnection as S}from"./edits/crossPlanConnection.js";import{resolveDriftPolicy as C}from"./edits/driftPolicy.js";import{listResources as V}from"./listResources.js";import{parse as h}from"./fileRewriter/parse.js";import{CrossPlanConnectionResourcePlanSchema as D,VpcPeerAccepterResourcePlanSchema as _,VpcPeerResourcePlanSchema as F}from"../schemas/index.js";import{detectDrift as N,mergeProperties as g,snapshotProperties as k}from"./drift/index.js";import{computeLinesDelta as O}from"./_internal.js";import{ResourceNameSchema as I,StatementTypeSchema as K}from"./types.js";import{CODEMOD_ERROR_KINDS as U}from"./telemetry/errorKinds.js";import{buildEgressBlockedEvent as q,buildFiredEvent as w,buildGateFailedEvent as z,buildGatePassedEvent as H,buildRejectedEvent as J,buildSucceededEvent as Q,buildTimeoutEvent as W,estimateCostUsd as X,FALLBACK_EVENTS as Y,GATE_EVENTS as Z,PARSE_GATE as $,RUNTIME_GATE as ee,runFallback as re,shouldTryFallback as oe}from"./llmFallback/index.js";export{U as CODEMOD_ERROR_KINDS,D as CrossPlanConnectionResourcePlanSchema,Y as FALLBACK_EVENTS,Z as GATE_EVENTS,$ as PARSE_GATE,ee as RUNTIME_GATE,I as ResourceNameSchema,K as StatementTypeSchema,_ as VpcPeerAccepterResourcePlanSchema,F as VpcPeerResourcePlanSchema,R as addCrossPlanConnection,o as addResource,d as addVpcPeer,u as addVpcPeerAccepter,a as appendAccountToStage,q as buildEgressBlockedEvent,w as buildFiredEvent,z as buildGateFailedEvent,H as buildGatePassedEvent,J as buildRejectedEvent,Q as buildSucceededEvent,W as buildTimeoutEvent,O as computeLinesDelta,N as detectDrift,X as estimateCostUsd,V as listResources,g as mergeProperties,v as modifyCrossPlanConnection,m as modifyResource,i as modifyVpcPeer,P as modifyVpcPeerAccepter,h as parse,S as removeCrossPlanConnection,c as removeResource,l as removeVpcPeer,E as removeVpcPeerAccepter,C as resolveDriftPolicy,re as runFallback,oe as shouldTryFallback,k as snapshotProperties};
+import{addResource as o}from"./edits/addResource.js";import{removeResource as c}from"./edits/removeResource.js";import{modifyResource as m}from"./edits/modifyResource.js";import{appendAccountToStage as a}from"./edits/appendAccountToStage.js";import{addVpcPeer as d,modifyVpcPeer as i,removeVpcPeer as l}from"./edits/vpcPeer.js";import{addVpcPeerAccepter as u,modifyVpcPeerAccepter as P,removeVpcPeerAccepter as E}from"./edits/vpcPeerAccepter.js";import{addCrossPlanConnection as R,modifyCrossPlanConnection as v,removeCrossPlanConnection as C}from"./edits/crossPlanConnection.js";import{resolveDriftPolicy as A}from"./edits/driftPolicy.js";import{listResources as V}from"./listResources.js";import{resolveConstructByLiteralProperty as y}from"./semanticIndex/index.js";import{parse as D}from"./fileRewriter/parse.js";import{CrossPlanConnectionResourcePlanSchema as F,VpcPeerAccepterResourcePlanSchema as G,VpcPeerResourcePlanSchema as N}from"../schemas/index.js";import{detectDrift as g,mergeProperties as k,snapshotProperties as B}from"./drift/index.js";import{computeLinesDelta as I}from"./_internal.js";import{ResourceNameSchema as M,StatementTypeSchema as U}from"./types.js";import{CODEMOD_ERROR_KINDS as q}from"./telemetry/errorKinds.js";import{buildEgressBlockedEvent as z,buildFiredEvent as H,buildGateFailedEvent as J,buildGatePassedEvent as Q,buildRejectedEvent as W,buildSucceededEvent as X,buildTimeoutEvent as Y,estimateCostUsd as Z,FALLBACK_EVENTS as $,GATE_EVENTS as ee,PARSE_GATE as re,RUNTIME_GATE as oe,runFallback as te,shouldTryFallback as ce}from"./llmFallback/index.js";export{q as CODEMOD_ERROR_KINDS,F as CrossPlanConnectionResourcePlanSchema,$ as FALLBACK_EVENTS,ee as GATE_EVENTS,re as PARSE_GATE,oe as RUNTIME_GATE,M as ResourceNameSchema,U as StatementTypeSchema,G as VpcPeerAccepterResourcePlanSchema,N as VpcPeerResourcePlanSchema,R as addCrossPlanConnection,o as addResource,d as addVpcPeer,u as addVpcPeerAccepter,a as appendAccountToStage,z as buildEgressBlockedEvent,H as buildFiredEvent,J as buildGateFailedEvent,Q as buildGatePassedEvent,W as buildRejectedEvent,X as buildSucceededEvent,Y as buildTimeoutEvent,I as computeLinesDelta,g as detectDrift,Z as estimateCostUsd,V as listResources,k as mergeProperties,v as modifyCrossPlanConnection,m as modifyResource,i as modifyVpcPeer,P as modifyVpcPeerAccepter,D as parse,C as removeCrossPlanConnection,c as removeResource,l as removeVpcPeer,E as removeVpcPeerAccepter,y as resolveConstructByLiteralProperty,A as resolveDriftPolicy,te as runFallback,ce as shouldTryFallback,B as snapshotProperties};

package/dist/src/codemod/semanticIndex/index.d.ts

@@ -1,4 +1,5 @@
-export { locateByShape, locateAllShapes, type NodeLocation, type StatementType, type LocateByShapeError, } from "./locateByShape.js";
+export { locateByShape, locateAllShapes, forEachFactoryMatch, type FactoryCallMatch, type NodeLocation, type StatementType, type LocateByShapeError, } from "./locateByShape.js";
+export { resolveConstructByLiteralProperty, type ConstructResolution, type ConstructResolutionFailureReason, type ResolveConstructQuery, type ResolvedConstruct, } from "./resolveConstructByLiteralProperty.js";
 export { findReferences, type ReferenceLocation, type FindReferencesError, } from "./findReferences.js";
 export { getProject, resetProjectForTest } from "./projectCache.js";
 export { listImports, type ImportInfo, type ListImportsError, } from "./listImports.js";

package/dist/src/codemod/semanticIndex/index.js

@@ -1 +1 @@
-import{locateByShape as r,locateAllShapes as t}from"./locateByShape.js";import{findReferences as f}from"./findReferences.js";import{getProject as c,resetProjectForTest as l}from"./projectCache.js";import{listImports as a}from"./listImports.js";export{f as findReferences,c as getProject,a as listImports,t as locateAllShapes,r as locateByShape,l as resetProjectForTest};
+import{locateByShape as o,locateAllShapes as t,forEachFactoryMatch as c}from"./locateByShape.js";import{resolveConstructByLiteralProperty as a}from"./resolveConstructByLiteralProperty.js";import{findReferences as s}from"./findReferences.js";import{getProject as m,resetProjectForTest as x}from"./projectCache.js";import{listImports as y}from"./listImports.js";export{s as findReferences,c as forEachFactoryMatch,m as getProject,y as listImports,t as locateAllShapes,o as locateByShape,x as resetProjectForTest,a as resolveConstructByLiteralProperty};

package/dist/src/codemod/semanticIndex/locateByShape.d.ts

@@ -1,3 +1,4 @@
+import { type CallExpression } from "ts-morph";
 import { type Result } from "../../types/Result.js";
 import type { NodeLocation, StatementType, TemplateLiteralNameError, SemanticQueryError } from "../types.js";
 export type { NodeLocation, StatementType } from "../types.js";
@@ -13,6 +14,16 @@ export declare function locateByShape(content: string, query: {
     type: StatementType;
     name: string;
 }, filePath?: string): Result<NodeLocation | undefined, LocateByShapeError>;
+/**
+ * A `XFactory.build("Name", ...)` call whose name is a plain string
+ * literal. `nameStart`/`nameLength` anchor the name token (ADR §4(a)).
+ */
+export interface FactoryCallMatch {
+    type: StatementType;
+    name: string;
+    nameStart: number;
+    nameLength: number;
+}
 /**
  * Walks every call expression in the source and returns a
  * `NodeLocation & { type }` for each `XFactory.build("Name", ...)`
@@ -26,3 +37,15 @@ export declare function locateByShape(content: string, query: {
 export declare function locateAllShapes(content: string, filePath?: string): Result<Array<NodeLocation & {
     type: StatementType;
 }>, LocateByShapeError>;
+/**
+ * Shared walk over every `XFactory.build("Name", ...)` call with a
+ * plain string-literal name. Invokes `onMatch(match, call)` for each —
+ * `match` carries the resolved name + token span, while `call` is the
+ * live ts-morph node so callers can read further arguments (e.g. the
+ * second-argument config object literal).
+ *
+ * Binding-pattern and type-space calls are skipped (parity with the
+ * `locateByShape` contract); the first template-literal name aborts the
+ * walk as a `TemplateLiteralNameError` failure.
+ */
+export declare function forEachFactoryMatch(content: string, filePath: string, onMatch: (match: FactoryCallMatch, call: CallExpression) => void): Result<void, LocateByShapeError>;

package/dist/src/codemod/semanticIndex/locateByShape.js

@@ -1 +1 @@
-import{Node as s,SyntaxKind as a}from"ts-morph";import{failure as c,success as l}from"../../types/Result.js";import{DEFAULT_FILE_PATH as u}from"../_internal.js";import{findTypeByIdentifier as p}from"../registry.js";import{getProject as m}from"./projectCache.js";function b(n,t,e=u){const o=g(n,e);if(!o.success)return o;const r=o.data.find(i=>i.type===t.type&&i.symbolName===t.name);return l(r)}function g(n,t=u){let e;try{e=m().createSourceFile(t,n,{overwrite:!0})}catch(r){return c({kind:"SemanticQueryError",reason:"Failed to create source file",cause:r})}const o=[];try{e.forEachDescendant(r=>{if(!s.isCallExpression(r))return;const i=y(r);if(i!=="not-factory-call"&&i.kind!=="binding-pattern-declared"){if(i.kind==="template-literal-name")throw new f(r,i.type);o.push({filePath:t,start:i.nameStart,length:i.nameLength,symbolName:i.name,type:i.type})}})}catch(r){return r instanceof f?c(r.toError(t)):c({kind:"SemanticQueryError",reason:"forEachDescendant traversal failed",cause:r})}return l(o)}function y(n){const t=n.getExpression();if(!s.isPropertyAccessExpression(t))return"not-factory-call";const e=h(t);if(e===void 0||E(n))return"not-factory-call";if(S(n))return{kind:"binding-pattern-declared"};const r=n.getArguments()[0];return r===void 0?"not-factory-call":s.isTemplateExpression(r)||s.isNoSubstitutionTemplateLiteral(r)?{kind:"template-literal-name",type:e}:s.isStringLiteral(r)?{kind:"match",type:e,name:r.getLiteralValue(),nameStart:r.getStart(),nameLength:r.getWidth()}:"not-factory-call"}function h(n){const t=n.getExpression();if(s.isIdentifier(t)&&n.getName()==="build")return p(t.getText())}function E(n){let t=n.getParent();for(;t!==void 0;){const e=t.getKind();if(e===a.TypeReference||e===a.TypeQuery||e===a.TypeLiteral||e===a.TypeAliasDeclaration||e===a.InterfaceDeclaration||e===a.TypeParameter||e===a.PropertySignature||e===a.MethodSignature||e===a.JsxOpeningElement||e===a.JsxClosingElement||e===a.JsxSelfClosingElement||e===a.JsxAttribute)return!0;t=t.getParent()}return!1}function S(n){const t=n.getFirstAncestorByKind(a.VariableDeclaration);if(t===void 0)return!1;const o=t.getNameNode().getKind();return o===a.ObjectBindingPattern||o===a.ArrayBindingPattern}class f extends Error{call;type;constructor(t,e){super("Template-literal factory name detected"),this.call=t,this.type=e,this.name="TemplateLiteralMarker"}toError(t){const o=this.call.getArguments()[0]?.getStart()??this.call.getStart(),r=this.call.getSourceFile(),{line:i,column:d}=r.getLineAndColumnAtPos(o);return{kind:"TemplateLiteralNameError",file:t,line:i,column:d,suggestion:"Replace the template literal with a plain string literal so the resource name can be resolved statically."}}}export{g as locateAllShapes,b as locateByShape};
+import{Node as s,SyntaxKind as i}from"ts-morph";import{failure as c,success as l}from"../../types/Result.js";import{DEFAULT_FILE_PATH as u}from"../_internal.js";import{findTypeByIdentifier as d}from"../registry.js";import{getProject as m}from"./projectCache.js";function b(n,r,t=u){const a=g(n,t);if(!a.success)return a;const e=a.data.find(o=>o.type===r.type&&o.symbolName===r.name);return l(e)}function g(n,r=u){const t=[],a=y(n,r,e=>{t.push({filePath:r,start:e.nameStart,length:e.nameLength,symbolName:e.name,type:e.type})});return a.success?l(t):a}function y(n,r,t){let a;try{a=m().createSourceFile(r,n,{overwrite:!0})}catch(e){return c({kind:"SemanticQueryError",reason:"Failed to create source file",cause:e})}try{a.forEachDescendant(e=>{if(!s.isCallExpression(e))return;const o=h(e);if(o!=="not-factory-call"&&o.kind!=="binding-pattern-declared"){if(o.kind==="template-literal-name")throw new f(e,o.type);t({type:o.type,name:o.name,nameStart:o.nameStart,nameLength:o.nameLength},e)}})}catch(e){return e instanceof f?c(e.toError(r)):c({kind:"SemanticQueryError",reason:"forEachDescendant traversal failed",cause:e})}return l(void 0)}function h(n){const r=n.getExpression();if(!s.isPropertyAccessExpression(r))return"not-factory-call";const t=S(r);if(t===void 0||E(n))return"not-factory-call";if(T(n))return{kind:"binding-pattern-declared"};const e=n.getArguments()[0];return e===void 0?"not-factory-call":s.isTemplateExpression(e)||s.isNoSubstitutionTemplateLiteral(e)?{kind:"template-literal-name",type:t}:s.isStringLiteral(e)?{kind:"match",type:t,name:e.getLiteralValue(),nameStart:e.getStart(),nameLength:e.getWidth()}:"not-factory-call"}function S(n){const r=n.getExpression();if(s.isIdentifier(r)&&n.getName()==="build")return d(r.getText())}function E(n){let r=n.getParent();for(;r!==void 0;){const t=r.getKind();if(t===i.TypeReference||t===i.TypeQuery||t===i.TypeLiteral||t===i.TypeAliasDeclaration||t===i.InterfaceDeclaration||t===i.TypeParameter||t===i.PropertySignature||t===i.MethodSignature||t===i.JsxOpeningElement||t===i.JsxClosingElement||t===i.JsxSelfClosingElement||t===i.JsxAttribute)return!0;r=r.getParent()}return!1}function T(n){const r=n.getFirstAncestorByKind(i.VariableDeclaration);if(r===void 0)return!1;const a=r.getNameNode().getKind();return a===i.ObjectBindingPattern||a===i.ArrayBindingPattern}class f extends Error{call;type;constructor(r,t){super("Template-literal factory name detected"),this.call=r,this.type=t,this.name="TemplateLiteralMarker"}toError(r){const a=this.call.getArguments()[0]?.getStart()??this.call.getStart(),e=this.call.getSourceFile(),{line:o,column:p}=e.getLineAndColumnAtPos(a);return{kind:"TemplateLiteralNameError",file:r,line:o,column:p,suggestion:"Replace the template literal with a plain string literal so the resource name can be resolved statically."}}}export{y as forEachFactoryMatch,g as locateAllShapes,b as locateByShape};

package/dist/src/codemod/semanticIndex/resolveConstructByLiteralProperty.d.ts

@@ -0,0 +1,48 @@
+import { type Result } from "../../types/Result.js";
+import type { StatementType } from "../types.js";
+import { type LocateByShapeError } from "./locateByShape.js";
+export type { LocateByShapeError } from "./locateByShape.js";
+/**
+ * A `XFactory.build("constructId", …)` construct of a given statement type.
+ */
+export interface ResolvedConstruct {
+    type: StatementType;
+    constructId: string;
+    filePath: string;
+}
+/**
+ * Why a literal-property resolution did not yield a single construct.
+ *  - `no-literal-match`: no construct of the queried type carries the property
+ *    as a string literal equal to `value`. `candidates` lists every construct
+ *    of that type so the caller can report what it did find.
+ *  - `ambiguous`: more than one construct's literal property equalled `value`.
+ *    `candidates` lists the colliding constructs.
+ */
+export type ConstructResolutionFailureReason = "no-literal-match" | "ambiguous";
+export type ConstructResolution = {
+    resolved: true;
+    construct: ResolvedConstruct;
+} | {
+    resolved: false;
+    reason: ConstructResolutionFailureReason;
+    candidates: ResolvedConstruct[];
+};
+export interface ResolveConstructQuery {
+    /** Restrict the search to constructs of this factory statement type. */
+    type: StatementType;
+    /** Config-object property whose literal value to match (e.g. `bucketName`). */
+    property: string;
+    /** The physical value to match against (e.g. the quarantined bucket name). */
+    value: string;
+}
+/**
+ * Resolves the construct id whose factory-call config object sets
+ * `query.property` to the string literal `query.value`.
+ *
+ * Returns `failure(...)` only for a genuine parse / semantic-query error or a
+ * template-literal factory name (the engine cannot statically locate those).
+ * A clean run that simply finds no unique match returns
+ * `success({ resolved: false, … })` — the caller decides whether to degrade to
+ * report-only.
+ */
+export declare function resolveConstructByLiteralProperty(content: string, query: ResolveConstructQuery, filePath?: string): Result<ConstructResolution, LocateByShapeError>;

package/dist/src/codemod/semanticIndex/resolveConstructByLiteralProperty.js

@@ -0,0 +1 @@
+import{Node as s}from"ts-morph";import{success as u}from"../../types/Result.js";import{DEFAULT_FILE_PATH as p}from"../_internal.js";import{forEachFactoryMatch as g}from"./locateByShape.js";function A(i,n,t=p){const r=[],e=[],c=g(i,t,(o,l)=>{if(o.type!==n.type)return;const a={type:o.type,constructId:o.name,filePath:t};r.push(a);const f=m(l,n.property);f!==void 0&&f===n.value&&e.push(a)});if(!c.success)return c;const[d]=e;return e.length===1&&d!==void 0?u({resolved:!0,construct:d}):e.length===0?u({resolved:!1,reason:"no-literal-match",candidates:r}):u({resolved:!1,reason:"ambiguous",candidates:e})}function m(i,n){const t=i.getArguments()[1];if(t===void 0||!s.isObjectLiteralExpression(t))return;const r=t.getProperty(n);if(r===void 0||!s.isPropertyAssignment(r))return;const e=r.getInitializer();if(!(e===void 0||!s.isStringLiteral(e)))return e.getLiteralValue()}export{A as resolveConstructByLiteralProperty};

package/dist/src/dns/domainRecords.d.ts

@@ -13,6 +13,18 @@ export declare const TypedFjallTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
     dnsName: z.ZodString;
     hostedZoneId: z.ZodString;
 }, z.core.$strict>], "kind">;
+export declare const TYPED_FJALL_TARGET_KINDS: ("custom" | "ecs" | "cdn" | "bucket")[];
+export declare const AliasRecordTypeSchema: z.ZodEnum<{
+    A: "A";
+    AAAA: "AAAA";
+}>;
+export type AliasRecordType = z.infer<typeof AliasRecordTypeSchema>;
+export declare const DomainRegistrarSchema: z.ZodEnum<{
+    route53: "route53";
+    "external-delegated": "external-delegated";
+    "external-records": "external-records";
+}>;
+export type DomainRegistrar = z.infer<typeof DomainRegistrarSchema>;
 export declare const ParsedStandardRecordSchema: z.ZodObject<{
     kind: z.ZodLiteral<"standard">;
     type: z.ZodEnum<{

package/dist/src/dns/domainRecords.js

@@ -1 +1 @@
-import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),a=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional()}).strict(),n=e.object({kind:e.literal("alias"),type:e.enum(["A","AAAA"]),name:e.string(),target:r}).strict(),i=e.discriminatedUnion("kind",[a,n]),o=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional()}).strict(),s=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),c=e.object({zoneName:e.string(),registrar:e.enum(["route53","external-delegated","external-records"]),hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),records:e.array(i),certificates:e.array(o),delegations:e.array(s)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"});export{n as ParsedAliasRecordSchema,o as ParsedCertificateSchema,i as ParsedDnsRecordSchema,c as ParsedDomainRecordsSchema,a as ParsedStandardRecordSchema,s as ParsedSubdomainDelegationSchema,r as TypedFjallTargetSchema};
+import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),g=r.options.map(t=>t.shape.kind.value),a=e.enum(["A","AAAA"]),n=e.enum(["route53","external-delegated","external-records"]),i=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional()}).strict(),o=e.object({kind:e.literal("alias"),type:a,name:e.string(),target:r}).strict(),s=e.discriminatedUnion("kind",[i,o]),d=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional()}).strict(),c=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),m=e.object({zoneName:e.string(),registrar:n,hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),records:e.array(s),certificates:e.array(d),delegations:e.array(c)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"});export{a as AliasRecordTypeSchema,n as DomainRegistrarSchema,o as ParsedAliasRecordSchema,d as ParsedCertificateSchema,s as ParsedDnsRecordSchema,m as ParsedDomainRecordsSchema,i as ParsedStandardRecordSchema,c as ParsedSubdomainDelegationSchema,g as TYPED_FJALL_TARGET_KINDS,r as TypedFjallTargetSchema};

package/dist/src/generation/storage.js

@@ -1,9 +1,9 @@
-import{buildProperty as o,getVariableName as c,emitExtraProperties as u,escapeStringLiteral as r}from"./common.js";function p(e){let t="";return t+=o(e.bucketName!==void 0,"bucketName",e.bucketName,"string"),t+=o(e.stackPlacement!==void 0&&e.stackPlacement!=="storage","stackPlacement",e.stackPlacement,"string"),t+=o(e.publicReadAccess===!0,"publicReadAccess",!0),t+=o(e.websiteHosting!==void 0,"websiteHosting",e.websiteHosting,"object"),t+=o(e.backupVaultTier!==void 0,"backupVaultTier",e.backupVaultTier,"string"),t+=o(e.versioned!==void 0,"versioned",e.versioned),t+=o(e.encryption!==void 0,"encryption",e.encryption,"string"),t+=o(e.kmsKeyArn!==void 0,"kmsKeyArn",e.kmsKeyArn,"string"),t+=o(e.cors!==void 0&&e.cors.length>0,"cors",e.cors,"object"),t+=o(e.deployment!==void 0,"deployment",e.deployment,"object"),t+=o(e.retain===!0,"retain",!0),t}function g(e,t){return!!(t.compute.some(i=>i.connectedStorage?.includes(e.name))||t.cdn&&(t.cdn.defaultOriginRef===e.name||t.cdn.behaviours?.some(i=>i.originRef===e.name)))}function x(e){if(e.s3.length===0)return"";let t="";for(let n=0;n<e.s3.length;n++){const i=e.s3[n],s=c(i),a=g(i,e),m=e.database.length>0||n>0?`
-`:"",l=p(i),y=a?`const ${s} = `:"",f=u(i.extraProperties);l||f?t+=`${m}${y}app.addStorage(
-  StorageFactory.build(${r(i.name)}, {${l}${f}
+import{buildProperty as o,getVariableName as c,emitExtraProperties as u,escapeStringLiteral as r}from"./common.js";function p(e){let t="";return t+=o(e.bucketName!==void 0,"bucketName",e.bucketName,"string"),t+=o(e.stackPlacement!==void 0&&e.stackPlacement!=="storage","stackPlacement",e.stackPlacement,"string"),t+=o(e.publicReadAccess===!0,"publicReadAccess",!0),t+=o(e.websiteHosting!==void 0,"websiteHosting",e.websiteHosting,"object"),t+=o(e.backupVaultTier!==void 0,"backupVaultTier",e.backupVaultTier,"string"),t+=o(e.versioned!==void 0,"versioned",e.versioned),t+=o(e.encryption!==void 0,"encryption",e.encryption,"string"),t+=o(e.kmsKeyArn!==void 0,"kmsKeyArn",e.kmsKeyArn,"string"),t+=o(e.cors!==void 0&&e.cors.length>0,"cors",e.cors,"object"),t+=o(e.deployment!==void 0,"deployment",e.deployment,"object"),t+=o(e.retain===!0,"retain",!0),t}function g(e,t){return!!(t.compute.some(i=>i.connectedStorage?.includes(e.name))||t.cdn&&(t.cdn.defaultOriginRef===e.name||t.cdn.behaviours?.some(i=>i.originRef===e.name)))}function x(e){if(e.s3.length===0)return"";let t="";for(let n=0;n<e.s3.length;n++){const i=e.s3[n],s=c(i),a=g(i,e),l=e.database.length>0||n>0?`
+`:"",m=p(i),y=a?`const ${s} = `:"",f=u(i.extraProperties);m||f?t+=`${l}${y}app.addStorage(
+  StorageFactory.build(${r(i.name)}, {${m}${f}
   })
 );
-`:t+=`${m}${y}app.addStorage(
+`:t+=`${l}${y}app.addStorage(
   StorageFactory.build(${r(i.name)}, {})
 );
 `}return t}function K(e){if(!e.dynamodb||e.dynamodb.length===0)return"";let t="";for(const n of e.dynamodb){const i=c(n);if(t+=`
@@ -36,14 +36,15 @@ const ${i} = app.addDatabase(
     stream: true`),t+=u(n.extraProperties),t+=`
   })
 );
-`}return t}function $(e,t){return t.compute.some(n=>n.connectedMessaging?.includes(e.name))}function S(e){if(!e.sqs||e.sqs.length===0)return"";let t="";for(const n of e.sqs){const i=c(n),a=$(n,e)?`const ${i} = `:"";t+=`
+`}return t}function $(e,t){return t.compute.some(n=>n.connectedMessaging?.includes(e.name))}function P(e){if(!e.sqs||e.sqs.length===0)return"";let t="";for(const n of e.sqs){const i=c(n),a=$(n,e)?`const ${i} = `:"";t+=`
 ${a}app.addMessaging(
   MessagingFactory.build(${r(n.name)}, {
     type: "queue",
     queueType: ${r(n.queueType)}`,n.visibilityTimeout!==void 0&&(t+=`,
     visibilityTimeout: ${n.visibilityTimeout}`),n.retentionPeriod!==void 0&&(t+=`,
     messageRetentionPeriod: ${n.retentionPeriod}`),n.contentBasedDeduplication&&(t+=`,
-    contentBasedDeduplication: true`),t+=u(n.extraProperties),t+=`
+    contentBasedDeduplication: true`),n.removalPolicy!==void 0&&(t+=`,
+    removalPolicy: ${r(n.removalPolicy)}`),t+=u(n.extraProperties),t+=`
   })
 );
-`}return t}export{K as generateDynamoDBCode,x as generateS3Code,S as generateSQSCode,g as s3NeedsVariable,$ as sqsNeedsVariable};
+`}return t}export{K as generateDynamoDBCode,x as generateS3Code,P as generateSQSCode,g as s3NeedsVariable,$ as sqsNeedsVariable};

package/dist/src/index.d.ts

@@ -1,7 +1,7 @@
 export { normaliseError, getErrorMessage } from "./util/errorUtils.js";
 export { type Result, isSuccess, isFailure, success, failure, tryAsync, trySync, } from "./types/Result.js";
 export { VALIDATION_PATTERNS, VALIDATION_MESSAGES, parseRateExpression, type ValidationPatternKey, type ValidationMessageKey, } from "./validation/patterns.js";
-export { type RegionCode, type RegionInfo, DEFAULT_REGION, regions, AWS_REGIONS_METADATA, getRegionInfo, suggestRegionForTimezone, topRegions, commonRegions, parseRegionList, isValidRegion, isValidRegionFormat, getSuggestions, validateRegion, validateRegionList, filterDuplicateRegions, getRegionOptions, getRegionOptionsExcluding, getRegionName, createRegionFormatter, } from "./aws/regions.js";
+export { type RegionCode, type RegionInfo, DEFAULT_REGION, regions, AWS_REGIONS_METADATA, getRegionInfo, OPT_IN_REGION_CODES, optInRegionWarning, suggestRegionForTimezone, topRegions, commonRegions, parseRegionList, isValidRegion, isValidRegionFormat, getSuggestions, validateRegion, validateRegionList, filterDuplicateRegions, getRegionOptions, getRegionOptionsExcluding, getRegionName, createRegionFormatter, } from "./aws/regions.js";
 export { GENERATOR_VERSION } from "./version.js";
 export * from "./schemas/index.js";
 export * from "./generation/index.js";

package/dist/src/index.js

@@ -1 +1 @@
-import{normaliseError as r,getErrorMessage as i}from"./util/errorUtils.js";import{isSuccess as s,isFailure as g,success as n,failure as R,tryAsync as a,trySync as m}from"./types/Result.js";import{VALIDATION_PATTERNS as f,VALIDATION_MESSAGES as E,parseRateExpression as x}from"./validation/patterns.js";import{DEFAULT_REGION as c,regions as l,AWS_REGIONS_METADATA as S,getRegionInfo as T,suggestRegionForTimezone as u,topRegions as I,commonRegions as N,parseRegionList as O,isValidRegion as _,isValidRegionFormat as d,getSuggestions as D,validateRegion as F,validateRegionList as L,filterDuplicateRegions as V,getRegionOptions as y,getRegionOptionsExcluding as G,getRegionName as M,createRegionFormatter as v}from"./aws/regions.js";import{GENERATOR_VERSION as P}from"./version.js";export*from"./schemas/index.js";export*from"./generation/index.js";export*from"./presets/index.js";export*from"./ast/index.js";export*from"./planning/index.js";export*from"./dns/index.js";export{S as AWS_REGIONS_METADATA,c as DEFAULT_REGION,P as GENERATOR_VERSION,E as VALIDATION_MESSAGES,f as VALIDATION_PATTERNS,N as commonRegions,v as createRegionFormatter,R as failure,V as filterDuplicateRegions,i as getErrorMessage,T as getRegionInfo,M as getRegionName,y as getRegionOptions,G as getRegionOptionsExcluding,D as getSuggestions,g as isFailure,s as isSuccess,_ as isValidRegion,d as isValidRegionFormat,r as normaliseError,x as parseRateExpression,O as parseRegionList,l as regions,n as success,u as suggestRegionForTimezone,I as topRegions,a as tryAsync,m as trySync,F as validateRegion,L as validateRegionList};
+import{normaliseError as r,getErrorMessage as i}from"./util/errorUtils.js";import{isSuccess as n,isFailure as g,success as s,failure as R,tryAsync as a,trySync as p}from"./types/Result.js";import{VALIDATION_PATTERNS as E,VALIDATION_MESSAGES as f,parseRateExpression as x}from"./validation/patterns.js";import{DEFAULT_REGION as I,regions as O,AWS_REGIONS_METADATA as S,getRegionInfo as c,OPT_IN_REGION_CODES as l,optInRegionWarning as N,suggestRegionForTimezone as T,topRegions as _,commonRegions as u,parseRegionList as D,isValidRegion as d,isValidRegionFormat as F,getSuggestions as G,validateRegion as L,validateRegionList as V,filterDuplicateRegions as y,getRegionOptions as M,getRegionOptionsExcluding as v,getRegionName as P,createRegionFormatter as W}from"./aws/regions.js";import{GENERATOR_VERSION as C}from"./version.js";export*from"./schemas/index.js";export*from"./generation/index.js";export*from"./presets/index.js";export*from"./ast/index.js";export*from"./planning/index.js";export*from"./dns/index.js";export{S as AWS_REGIONS_METADATA,I as DEFAULT_REGION,C as GENERATOR_VERSION,l as OPT_IN_REGION_CODES,f as VALIDATION_MESSAGES,E as VALIDATION_PATTERNS,u as commonRegions,W as createRegionFormatter,R as failure,y as filterDuplicateRegions,i as getErrorMessage,c as getRegionInfo,P as getRegionName,M as getRegionOptions,v as getRegionOptionsExcluding,G as getSuggestions,g as isFailure,n as isSuccess,d as isValidRegion,F as isValidRegionFormat,r as normaliseError,N as optInRegionWarning,x as parseRateExpression,D as parseRegionList,O as regions,s as success,T as suggestRegionForTimezone,_ as topRegions,a as tryAsync,p as trySync,L as validateRegion,V as validateRegionList};

package/dist/src/schemas/applicationSchemas.d.ts

@@ -465,6 +465,17 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
             }, z.core.$strict>>;
         }, z.core.$strict>>;
         retain: z.ZodOptional<z.ZodBoolean>;
+        resourcePolicyStatements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            sid: z.ZodOptional<z.ZodString>;
+            effect: z.ZodEnum<{
+                Allow: "Allow";
+                Deny: "Deny";
+            }>;
+            principals: z.ZodArray<z.ZodString>;
+            actions: z.ZodArray<z.ZodString>;
+            resources: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>>;
+        }, z.core.$strict>>>;
         stackPlacement: z.ZodOptional<z.ZodEnum<{
             storage: "storage";
             compute: "compute";
@@ -748,6 +759,10 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
         visibilityTimeout: z.ZodOptional<z.ZodNumber>;
         retentionPeriod: z.ZodOptional<z.ZodNumber>;
         contentBasedDeduplication: z.ZodOptional<z.ZodBoolean>;
+        removalPolicy: z.ZodOptional<z.ZodEnum<{
+            DESTROY: "DESTROY";
+            RETAIN: "RETAIN";
+        }>>;
         variableName: z.ZodOptional<z.ZodString>;
         extraProperties: z.ZodOptional<z.ZodArray<z.ZodObject<{
             key: z.ZodString;

package/dist/src/schemas/messagingSchemas.d.ts

@@ -1,4 +1,15 @@
 import { z } from "zod";
+/**
+ * Removal policy for a generated SQS queue. Unset, the SQSQueue wrapper applies
+ * DESTROY (a queue is a transient work medium); RETAIN is the opt-in for a
+ * durable queue whose contents are irreplaceable and must survive stack
+ * deletion. The parser derives its accept-set from this schema's `.options`.
+ */
+export declare const SqsRemovalPolicySchema: z.ZodEnum<{
+    DESTROY: "DESTROY";
+    RETAIN: "RETAIN";
+}>;
+export type SqsRemovalPolicy = z.infer<typeof SqsRemovalPolicySchema>;
 /**
  * SQS queue resource plan schema (for OpenNext patterns)
  */
@@ -11,6 +22,10 @@ export declare const SQSResourcePlanSchema: z.ZodObject<{
     visibilityTimeout: z.ZodOptional<z.ZodNumber>;
     retentionPeriod: z.ZodOptional<z.ZodNumber>;
     contentBasedDeduplication: z.ZodOptional<z.ZodBoolean>;
+    removalPolicy: z.ZodOptional<z.ZodEnum<{
+        DESTROY: "DESTROY";
+        RETAIN: "RETAIN";
+    }>>;
     variableName: z.ZodOptional<z.ZodString>;
     extraProperties: z.ZodOptional<z.ZodArray<z.ZodObject<{
         key: z.ZodString;

package/dist/src/schemas/messagingSchemas.js

@@ -1 +1 @@
-import{z as e}from"zod";import{VALIDATION_MESSAGES as o}from"../validation/patterns.js";import{ResourceNameSchema as t,ExtraPropertySchema as a}from"./baseSchemas.js";const n=e.object({name:t,queueType:e.enum(["standard","fifo"]).default("standard"),visibilityTimeout:e.number().int(o.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,o.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,o.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:e.number().int(o.SQS.RETENTION_PERIOD.INTEGER).min(60,o.SQS.RETENTION_PERIOD.MIN).max(1209600,o.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:e.boolean().optional(),variableName:e.string().optional(),extraProperties:e.array(a).optional()}).strict();export{n as SQSResourcePlanSchema};
+import{z as o}from"zod";import{VALIDATION_MESSAGES as e}from"../validation/patterns.js";import{ResourceNameSchema as t,ExtraPropertySchema as a}from"./baseSchemas.js";const i=o.enum(["DESTROY","RETAIN"]),S=o.object({name:t,queueType:o.enum(["standard","fifo"]).default("standard"),visibilityTimeout:o.number().int(e.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,e.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,e.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:o.number().int(e.SQS.RETENTION_PERIOD.INTEGER).min(60,e.SQS.RETENTION_PERIOD.MIN).max(1209600,e.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:o.boolean().optional(),removalPolicy:i.optional(),variableName:o.string().optional(),extraProperties:o.array(a).optional()}).strict();export{S as SQSResourcePlanSchema,i as SqsRemovalPolicySchema};

package/dist/src/schemas/networkSchemas.d.ts

@@ -5,6 +5,11 @@ export declare const NatConfigSchema: z.ZodObject<{
 export declare const NatConfigOrFalseSchema: z.ZodUnion<[z.ZodLiteral<false>, z.ZodObject<{
     count: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>]>;
+export declare const FlowLogDestinationSchema: z.ZodEnum<{
+    s3: "s3";
+    cloudwatch: "cloudwatch";
+}>;
+export type FlowLogDestination = z.infer<typeof FlowLogDestinationSchema>;
 export declare const FlowLogConfigSchema: z.ZodObject<{
     destination: z.ZodOptional<z.ZodEnum<{
         s3: "s3";

package/dist/src/schemas/networkSchemas.js

@@ -1 +1 @@
-import{z as o}from"zod";import{VALIDATION_PATTERNS as t,VALIDATION_MESSAGES as e}from"../validation/patterns.js";import{optionalOrDisabled as n,AppNameSchema as l,ResourceNameSchema as a,PortSchema as m}from"./baseSchemas.js";const R=o.object({count:o.number().int(e.NAT_GATEWAY.INTEGER).min(0,e.NAT_GATEWAY.MIN).max(3,e.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),i=n(R),A=o.object({destination:o.enum(["cloudwatch","s3"]).optional(),retentionDays:o.number().int(e.RETENTION_DAYS.INTEGER).min(1,e.RETENTION_DAYS.MIN).max(365,e.RETENTION_DAYS.MAX).optional(),trafficType:o.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),c=n(A),N=o.object({s3:o.boolean().optional(),dynamodb:o.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),S=n(N),C=o.object({ecr:o.boolean().optional(),secretsManager:o.boolean().optional(),kms:o.boolean().optional(),cloudwatchLogs:o.boolean().optional(),ssm:o.boolean().optional(),sts:o.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),_=n(C),I=o.object({gateway:S.optional(),interface:_.optional()}).strict().describe("VPC endpoints configuration"),s=n(I),p=o.object({maxAzs:o.number().int(e.MAX_AZS.INTEGER).min(1,e.MAX_AZS.MIN).max(3,e.MAX_AZS.MAX).optional(),natGateways:i.optional(),flowLogs:c.optional(),vpcEndpoints:s.optional(),cidrMask:o.number().int(e.CIDR_MASK.INTEGER).min(16,e.CIDR_MASK.MIN).max(28,e.CIDR_MASK.MAX).optional()}).strict(),E=o.string().min(1,e.REQUIRED.NETWORK_NAME).max(50,e.MAX_LENGTH.NETWORK_NAME).regex(t.RESOURCE_NAME,e.RESOURCE_NAME),D=p.extend({name:E}).strict(),h=n(p),O=o.object({appName:l,networkName:E.optional(),maxAzs:o.number().int(e.MAX_AZS.INTEGER).min(1,e.MAX_AZS.MIN).max(3,e.MAX_AZS.MAX).optional(),natGateways:i.optional(),flowLogs:c.optional(),vpcEndpoints:s.optional()}).strict(),d=t.CIDR,r=o.string().regex(d,e.CIDR),g=o.object({kind:o.literal("database"),resource:o.string().min(1,e.REQUIRED.RESOURCE_REFERENCE),name:a,allowedFromCidrs:o.array(r),access:o.enum(["read","write","readWrite"]).optional()}).strict(),x=o.object({kind:o.literal("ecsService"),resource:o.string().min(1,e.REQUIRED.RESOURCE_REFERENCE),serviceName:o.string().min(1,e.REQUIRED.SERVICE_NAME),name:a,allowedFromCidrs:o.array(r),port:m.optional()}).strict(),T=o.discriminatedUnion("kind",[g,x]),f=o.object({name:a,peerAppName:o.string().min(1,e.REQUIRED.APP_NAME),peerAccountId:o.string().regex(t.AWS_ACCOUNT_ID,e.AWS_ACCOUNT_ID),peerRegion:o.string().min(1,e.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:o.string().regex(t.VPC_ID,e.VPC_ID).optional(),peerVpcCidr:r.optional(),peerRoleArn:o.string().regex(t.ROLE_ARN,e.ROLE_ARN).optional(),peerRouteTableIds:o.array(o.string().min(1,e.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:o.string().min(1,e.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:o.boolean().optional()}).strict(),w=o.object({name:a,requesterAccountIds:o.array(o.string().regex(t.AWS_ACCOUNT_ID,e.AWS_ACCOUNT_ID)).min(1,e.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:o.string().min(1,e.REQUIRED.NETWORK_NAME).optional(),publishToSsm:o.boolean().optional(),exposedResources:o.array(T).optional()}).strict();export{D as AdditionalNetworkResourcePlanSchema,d as CIDR_REGEX,r as CidrStringSchema,g as DatabaseExposedResourceSchema,x as EcsServiceExposedResourceSchema,T as ExposedResourceSchema,c as FlowLogConfigOrFalseSchema,A as FlowLogConfigSchema,S as GatewayEndpointsConfigOrFalseSchema,N as GatewayEndpointsConfigSchema,_ as InterfaceEndpointsConfigOrFalseSchema,C as InterfaceEndpointsConfigSchema,i as NatConfigOrFalseSchema,R as NatConfigSchema,h as NetworkConfigSchema,O as NetworkGeneratorSchema,E as NetworkNameSchema,p as NetworkResourcePlanSchema,s as VpcEndpointsConfigOrFalseSchema,I as VpcEndpointsConfigSchema,w as VpcPeerAccepterResourcePlanSchema,f as VpcPeerResourcePlanSchema};
+import{z as o}from"zod";import{VALIDATION_PATTERNS as t,VALIDATION_MESSAGES as e}from"../validation/patterns.js";import{optionalOrDisabled as n,AppNameSchema as l,ResourceNameSchema as a,PortSchema as m}from"./baseSchemas.js";const R=o.object({count:o.number().int(e.NAT_GATEWAY.INTEGER).min(0,e.NAT_GATEWAY.MIN).max(3,e.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),i=n(R),A=o.enum(["cloudwatch","s3"]),N=o.object({destination:A.optional(),retentionDays:o.number().int(e.RETENTION_DAYS.INTEGER).min(1,e.RETENTION_DAYS.MIN).max(365,e.RETENTION_DAYS.MAX).optional(),trafficType:o.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),c=n(N),S=o.object({s3:o.boolean().optional(),dynamodb:o.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),C=n(S),_=o.object({ecr:o.boolean().optional(),secretsManager:o.boolean().optional(),kms:o.boolean().optional(),cloudwatchLogs:o.boolean().optional(),ssm:o.boolean().optional(),sts:o.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),I=n(_),d=o.object({gateway:C.optional(),interface:I.optional()}).strict().describe("VPC endpoints configuration"),s=n(d),p=o.object({maxAzs:o.number().int(e.MAX_AZS.INTEGER).min(1,e.MAX_AZS.MIN).max(3,e.MAX_AZS.MAX).optional(),natGateways:i.optional(),flowLogs:c.optional(),vpcEndpoints:s.optional(),cidrMask:o.number().int(e.CIDR_MASK.INTEGER).min(16,e.CIDR_MASK.MIN).max(28,e.CIDR_MASK.MAX).optional()}).strict(),E=o.string().min(1,e.REQUIRED.NETWORK_NAME).max(50,e.MAX_LENGTH.NETWORK_NAME).regex(t.RESOURCE_NAME,e.RESOURCE_NAME),h=p.extend({name:E}).strict(),O=n(p),f=o.object({appName:l,networkName:E.optional(),maxAzs:o.number().int(e.MAX_AZS.INTEGER).min(1,e.MAX_AZS.MIN).max(3,e.MAX_AZS.MAX).optional(),natGateways:i.optional(),flowLogs:c.optional(),vpcEndpoints:s.optional()}).strict(),g=t.CIDR,r=o.string().regex(g,e.CIDR),x=o.object({kind:o.literal("database"),resource:o.string().min(1,e.REQUIRED.RESOURCE_REFERENCE),name:a,allowedFromCidrs:o.array(r),access:o.enum(["read","write","readWrite"]).optional()}).strict(),T=o.object({kind:o.literal("ecsService"),resource:o.string().min(1,e.REQUIRED.RESOURCE_REFERENCE),serviceName:o.string().min(1,e.REQUIRED.SERVICE_NAME),name:a,allowedFromCidrs:o.array(r),port:m.optional()}).strict(),b=o.discriminatedUnion("kind",[x,T]),w=o.object({name:a,peerAppName:o.string().min(1,e.REQUIRED.APP_NAME),peerAccountId:o.string().regex(t.AWS_ACCOUNT_ID,e.AWS_ACCOUNT_ID),peerRegion:o.string().min(1,e.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:o.string().regex(t.VPC_ID,e.VPC_ID).optional(),peerVpcCidr:r.optional(),peerRoleArn:o.string().regex(t.ROLE_ARN,e.ROLE_ARN).optional(),peerRouteTableIds:o.array(o.string().min(1,e.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:o.string().min(1,e.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:o.boolean().optional()}).strict(),P=o.object({name:a,requesterAccountIds:o.array(o.string().regex(t.AWS_ACCOUNT_ID,e.AWS_ACCOUNT_ID)).min(1,e.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:o.string().min(1,e.REQUIRED.NETWORK_NAME).optional(),publishToSsm:o.boolean().optional(),exposedResources:o.array(b).optional()}).strict();export{h as AdditionalNetworkResourcePlanSchema,g as CIDR_REGEX,r as CidrStringSchema,x as DatabaseExposedResourceSchema,T as EcsServiceExposedResourceSchema,b as ExposedResourceSchema,c as FlowLogConfigOrFalseSchema,N as FlowLogConfigSchema,A as FlowLogDestinationSchema,C as GatewayEndpointsConfigOrFalseSchema,S as GatewayEndpointsConfigSchema,I as InterfaceEndpointsConfigOrFalseSchema,_ as InterfaceEndpointsConfigSchema,i as NatConfigOrFalseSchema,R as NatConfigSchema,O as NetworkConfigSchema,f as NetworkGeneratorSchema,E as NetworkNameSchema,p as NetworkResourcePlanSchema,s as VpcEndpointsConfigOrFalseSchema,d as VpcEndpointsConfigSchema,P as VpcPeerAccepterResourcePlanSchema,w as VpcPeerResourcePlanSchema};

package/dist/src/schemas/storageSchemas.d.ts

@@ -6,6 +6,25 @@ import { z } from "zod";
  * - "compute": Created in Compute stack for Lambda-consumed buckets
  */
 export declare const S3_STACK_PLACEMENTS: readonly ["storage", "cdn", "compute"];
+/**
+ * A declarative bucket-policy statement. Mirrors the `ResourcePolicyStatement`
+ * interface on the `S3Bucket` construct in `@fjall/components-infrastructure` —
+ * the two shapes must move together. The codemod sets this as a typed prop on an
+ * existing `StorageFactory.build("Name", { … })` call; the construct turns each
+ * entry into an `addToResourcePolicy` call at synth.
+ */
+export declare const ResourcePolicyStatementSchema: z.ZodObject<{
+    sid: z.ZodOptional<z.ZodString>;
+    effect: z.ZodEnum<{
+        Allow: "Allow";
+        Deny: "Deny";
+    }>;
+    principals: z.ZodArray<z.ZodString>;
+    actions: z.ZodArray<z.ZodString>;
+    resources: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>>;
+}, z.core.$strict>;
+export type ResourcePolicyStatement = z.infer<typeof ResourcePolicyStatementSchema>;
 export declare const S3ResourcePlanSchema: z.ZodObject<{
     name: z.ZodString;
     bucketName: z.ZodOptional<z.ZodString>;
@@ -41,6 +60,17 @@ export declare const S3ResourcePlanSchema: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     retain: z.ZodOptional<z.ZodBoolean>;
+    resourcePolicyStatements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sid: z.ZodOptional<z.ZodString>;
+        effect: z.ZodEnum<{
+            Allow: "Allow";
+            Deny: "Deny";
+        }>;
+        principals: z.ZodArray<z.ZodString>;
+        actions: z.ZodArray<z.ZodString>;
+        resources: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>>;
+    }, z.core.$strict>>>;
     stackPlacement: z.ZodOptional<z.ZodEnum<{
         storage: "storage";
         compute: "compute";

package/dist/src/schemas/storageSchemas.js

@@ -1 +1 @@
-import{z as o}from"zod";import{VALIDATION_MESSAGES as t}from"../validation/patterns.js";import{BACKUP_VAULT_TIERS as n,S3_ENCRYPTION_TYPES as a,STORAGE_PRESET_TYPES as r}from"./constants.js";import{ResourceNameSchema as i,BucketNameSchema as s,AppNameSchema as l,ExtraPropertySchema as p}from"./baseSchemas.js";const c=["storage","cdn","compute"],y=o.object({name:i,bucketName:o.string().optional(),publicReadAccess:o.boolean().optional(),websiteHosting:o.object({indexDocument:o.string(),errorDocument:o.string().optional()}).strict().optional(),backupVaultTier:o.enum(n).optional(),versioned:o.boolean().optional(),encryption:o.enum(a).optional(),kmsKeyArn:o.string().optional(),cors:o.array(o.object({allowedOrigins:o.array(o.string()),allowedMethods:o.array(o.string()),allowedHeaders:o.array(o.string()).optional(),exposedHeaders:o.array(o.string()).optional(),maxAge:o.number().optional()}).strict()).optional(),deployment:o.object({source:o.string(),prune:o.boolean().optional(),cacheControl:o.object({maxAge:o.number().optional(),immutable:o.boolean().optional()}).strict().optional()}).strict().optional(),retain:o.boolean().optional(),stackPlacement:o.enum(c).optional(),variableName:o.string().optional(),extraProperties:o.array(p).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:t.KMS.KEY_REQUIRED}),S=o.object({appName:l,bucketName:s,nameProvidedByFlag:o.boolean().optional(),storagePreset:o.enum(r).optional(),publicReadAccess:o.boolean().optional(),websiteHosting:o.object({indexDocument:o.string(),errorDocument:o.string().optional()}).strict().optional(),backupVaultTier:o.enum(n).optional(),versioned:o.boolean().optional(),encryption:o.enum(a).optional(),kmsKeyArn:o.string().optional(),cors:o.array(o.object({allowedOrigins:o.array(o.string()),allowedMethods:o.array(o.string()),allowedHeaders:o.array(o.string()).optional(),exposedHeaders:o.array(o.string()).optional(),maxAge:o.number().optional()}).strict()).optional(),connectionConfig:o.object({connectToCompute:o.array(o.string()).optional(),connectToServices:o.array(o.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:t.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});export{S as S3GeneratorSchema,y as S3ResourcePlanSchema,c as S3_STACK_PLACEMENTS};
+import{z as o}from"zod";import{VALIDATION_MESSAGES as t}from"../validation/patterns.js";import{BACKUP_VAULT_TIERS as r,S3_ENCRYPTION_TYPES as n,STORAGE_PRESET_TYPES as a}from"./constants.js";import{ResourceNameSchema as i,BucketNameSchema as s,AppNameSchema as c,ExtraPropertySchema as l}from"./baseSchemas.js";const p=["storage","cdn","compute"],m=o.object({sid:o.string().optional(),effect:o.enum(["Allow","Deny"]),principals:o.array(o.string()),actions:o.array(o.string()),resources:o.array(o.string()).optional(),conditions:o.record(o.string(),o.record(o.string(),o.union([o.string(),o.array(o.string())]))).optional()}).strict(),S=o.object({name:i,bucketName:o.string().optional(),publicReadAccess:o.boolean().optional(),websiteHosting:o.object({indexDocument:o.string(),errorDocument:o.string().optional()}).strict().optional(),backupVaultTier:o.enum(r).optional(),versioned:o.boolean().optional(),encryption:o.enum(n).optional(),kmsKeyArn:o.string().optional(),cors:o.array(o.object({allowedOrigins:o.array(o.string()),allowedMethods:o.array(o.string()),allowedHeaders:o.array(o.string()).optional(),exposedHeaders:o.array(o.string()).optional(),maxAge:o.number().optional()}).strict()).optional(),deployment:o.object({source:o.string(),prune:o.boolean().optional(),cacheControl:o.object({maxAge:o.number().optional(),immutable:o.boolean().optional()}).strict().optional()}).strict().optional(),retain:o.boolean().optional(),resourcePolicyStatements:o.array(m).optional(),stackPlacement:o.enum(p).optional(),variableName:o.string().optional(),extraProperties:o.array(l).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:t.KMS.KEY_REQUIRED}),d=o.object({appName:c,bucketName:s,nameProvidedByFlag:o.boolean().optional(),storagePreset:o.enum(a).optional(),publicReadAccess:o.boolean().optional(),websiteHosting:o.object({indexDocument:o.string(),errorDocument:o.string().optional()}).strict().optional(),backupVaultTier:o.enum(r).optional(),versioned:o.boolean().optional(),encryption:o.enum(n).optional(),kmsKeyArn:o.string().optional(),cors:o.array(o.object({allowedOrigins:o.array(o.string()),allowedMethods:o.array(o.string()),allowedHeaders:o.array(o.string()).optional(),exposedHeaders:o.array(o.string()).optional(),maxAge:o.number().optional()}).strict()).optional(),connectionConfig:o.object({connectToCompute:o.array(o.string()).optional(),connectToServices:o.array(o.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:t.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});export{m as ResourcePolicyStatementSchema,d as S3GeneratorSchema,S as S3ResourcePlanSchema,p as S3_STACK_PLACEMENTS};

package/dist/src/version.d.ts

@@ -1 +1 @@
-export declare const GENERATOR_VERSION = "2.14.0";
+export declare const GENERATOR_VERSION = "2.16.0";

package/dist/src/version.js

@@ -1 +1 @@
-const E="2.14.0";export{E as GENERATOR_VERSION};
+const E="2.16.0";export{E as GENERATOR_VERSION};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/generator",
-  "version": "2.15.0",
+  "version": "2.17.0",
   "description": "Pure infrastructure generation logic for Fjall",
   "type": "module",
   "main": "dist/src/index.js",
@@ -43,7 +43,7 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@fjall/util": "^2.15.0",
+    "@fjall/util": "^2.17.0",
     "ast-types": "^0.16.1",
     "recast": "^0.23.11",
     "ts-morph": "^28.0.0",
@@ -59,5 +59,5 @@
     "typescript-eslint": "^8.59.1",
     "vitest": "^4.1.5"
   },
-  "gitHead": "b2223855907cb6d467e47df073b2a5b28c684ede"
+  "gitHead": "21cfe1aae339e12183af2813ec81f581b9b77d49"
 }