@fjall/generator 23.0.0 → 25.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "19b345119eb917e0377fe84ebb7731c95085d6cfaa991d807331c079fc33835a",
+  "hash": "6d81781923e177038bb9a5337333169cbfefbf92333371e66e09ee752fb67d19",
   "files": {
     "src/ast/astTestHelpers.ts": "026cac849eb88bdb",
     "src/ast/domain/astDomainParser.ts": "a88b990396db0a46",
@@ -31,7 +31,7 @@
     "src/ast/parsers/resources/astDynamoDBParser.ts": "809c2c633447b388",
     "src/ast/parsers/resources/astMessagingParser.ts": "b185ec22e6b96943",
     "src/ast/parsers/resources/astNetworkParser.ts": "8697dccb454eac7d",
-    "src/ast/parsers/resources/astPatternParser.ts": "09c624247eaf0786",
+    "src/ast/parsers/resources/astPatternParser.ts": "b9c8cbfd593d8fa6",
     "src/ast/parsers/resources/astScheduleParser.ts": "dbdac640c75b8bd3",
     "src/ast/parsers/resources/astStorageParser.ts": "309bc3257f46cfdf",
     "src/aws/regions.ts": "a028bcb92b0e41d9",
@@ -127,7 +127,7 @@
     "src/generation/compute/shared.ts": "3724d4bfe92cfcb7",
     "src/generation/connectionWiring.ts": "9afb0227f2584ab2",
     "src/generation/database.ts": "c28a0dbabf91b6a3",
-    "src/generation/generatePatternCode.ts": "afed698418d90aee",
+    "src/generation/generatePatternCode.ts": "342a227d461804c0",
     "src/generation/index.ts": "915500e352c2bab6",
     "src/generation/infrastructure.ts": "0ac7c1954a02b2cc",
     "src/generation/messagingConnections.ts": "09e70af97e055712",
@@ -143,7 +143,7 @@
     "src/planning/resourceAddition.ts": "7d0320620a74fdcd",
     "src/planning/resourceConnections.ts": "a6b7db8f733e560f",
     "src/planning/resourcePlanning.ts": "d6bb9fa8e1419908",
-    "src/planning/staticSitePlanning.ts": "ee0b100e081061be",
+    "src/planning/staticSitePlanning.ts": "4440e71a2eac5efc",
     "src/presets/clickhouseTierPreset.ts": "1758d991c81d769a",
     "src/presets/index.ts": "8332c0198b2a6fe9",
     "src/presets/patternTierPresets.ts": "f4fc368fc623aae4",
@@ -171,7 +171,7 @@
     "src/schemas/messagingSchemas.ts": "2c1975fac903fd1b",
     "src/schemas/networkSchemas.ts": "c3a5f30e440dd2f8",
     "src/schemas/organisationSchemas.ts": "50d793aa7ff7f749",
-    "src/schemas/patternSchemas.ts": "8b48dfb02852a7ba",
+    "src/schemas/patternSchemas.ts": "8f9de91fca0571d3",
     "src/schemas/resourceSchemas.ts": "cd050813242ea213",
     "src/schemas/securityBoundary.ts": "54d216807103bab8",
     "src/schemas/sharedTypes.ts": "45210e600bea393e",
@@ -181,11 +181,11 @@
     "src/validation/patterns.ts": "f9629eafdad7ac3e",
     "src/validation/validationMessages.ts": "b03413b3953c3e79",
     "src/validation/validationPatterns.ts": "865f3d688975b7c8",
-    "src/version.ts": "015088b6ef4cbedd",
+    "src/version.ts": "02f8fccc72ba033d",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "3de28ee21a5c3ad7",
+    "package.json": "9de423232f97e01c",
     "tsconfig.json": "1929cf3f99fe9b1e"
   },
-  "outputHash": "208627559db4c045bfda8ce4fac13eedddbfc17b43bbefcf5d092a98ba22a944",
+  "outputHash": "369bcc2b8a51df82c5d654f8a08c0510549639868f801918f269d7995b72c54a",
   "outputFileCount": 343
 }

package/dist/.minified

@@ -1 +1 @@
-171 files minified at 2026-08-30T05:34:06.382Z
+171 files minified at 2026-08-31T01:55:55.929Z

package/dist/src/ast/astTestHelpers.d.ts

@@ -348,6 +348,8 @@ export declare function parseAndConvert(code: string): {
             contentSecurityPolicy?: string | undefined;
         } | undefined;
         domain?: string | undefined;
+        zoneName?: string | undefined;
+        hostedZoneId?: string | undefined;
         forms?: {
             to: string;
             from?: string | undefined;
@@ -356,6 +358,13 @@ export declare function parseAndConvert(code: string): {
         } | undefined;
         cdn?: {
             behaviours?: unknown[] | undefined;
+            priceClass?: "PriceClass_100" | "PriceClass_200" | "PriceClass_All" | undefined;
+            invalidateOnDeploy?: boolean | undefined;
+        } | undefined;
+        accessGate?: {
+            type: "basic-auth";
+            username: string;
+            password: string;
         } | undefined;
     } | {
         type: "payload";

package/dist/src/ast/parsers/resources/astPatternParser.d.ts

@@ -6,7 +6,7 @@
  */
 import * as ts from "typescript";
 import type { ApplicationResourcePlan } from "../../../schemas/resourceSchemas.js";
-import { type StaticSiteRouting } from "@fjall/util";
+import { type CloudFrontPriceClass, type StaticSiteRouting } from "@fjall/util";
 /** Parsed Lambda function configuration */
 export interface ParsedLambdaConfig {
     memorySize?: number;
@@ -105,6 +105,8 @@ export interface ParsedStaticSitePatternConfig {
         contentSecurityPolicy?: string;
     };
     domain?: string;
+    zoneName?: string;
+    hostedZoneId?: string;
     forms?: {
         to?: string;
         from?: string;
@@ -113,6 +115,13 @@ export interface ParsedStaticSitePatternConfig {
     };
     cdn?: {
         behaviours?: unknown[];
+        priceClass?: CloudFrontPriceClass;
+        invalidateOnDeploy?: boolean;
+    };
+    accessGate?: {
+        type?: "basic-auth";
+        username?: string;
+        password?: string;
     };
     /**
      * Field paths that were PRESENT in the literal but resolved to a const

package/dist/src/ast/parsers/resources/astPatternParser.js

@@ -1 +1 @@
-var v=Object.defineProperty;var o=(t,e)=>v(t,"name",{value:e,configurable:!0});import*as h from"typescript";import{STATIC_SITE_ROUTING_VALUES as I}from"@fjall/util";import{asBoolean as g,asNumber as c,asString as s,asStringArray as _,asStringUnion as S,asObjectOrFalse as y,collectFromAst as C,extractSubConfig as d,extractVariableName as F,isFactoryBuildCall as D,isFactoryMethodCall as E,isParsedObject as A,isPlainObject as L,parseObjectLiteral as N,parseOptionalConfig as m,typed as x}from"../common/astCommonParser.js";import{parseDeadLetterQueueConfig as z}from"./astMessagingParser.js";const R=["Instance","Aurora"],T=["postgresql","mysql"];function b(t){if(!A(t))return;const e={...t.memorySize!==void 0&&{memorySize:c(t.memorySize)},...t.timeout!==void 0&&{timeout:c(t.timeout)},...t.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:c(t.ephemeralStorageSize)}};return Object.keys(e).length>0?e:void 0}o(b,"parseLambdaConfig");function k(t){return d(t,"database",e=>({type:S(e.type,R),databaseName:s(e.databaseName),databaseEngine:S(e.databaseEngine,T),deletionProtection:g(e.deletionProtection),backupRetention:c(e.backupRetention),port:c(e.port),publiclyAccessible:g(e.publiclyAccessible),allowedIpCidr:s(e.allowedIpCidr),instanceType:s(e.instanceType),allocatedStorage:c(e.allocatedStorage),multiAz:g(e.multiAz),allowVpcAccess:g(e.allowVpcAccess),monitoringInterval:c(e.monitoringInterval),preferredMaintenanceWindow:s(e.preferredMaintenanceWindow),snapshotIdentifier:s(e.snapshotIdentifier),snapshotUsername:s(e.snapshotUsername),readReplica:y(e.readReplica),writer:m(e.writer,x()),readers:y(e.readers),databaseInsights:y(e.databaseInsights),proxy:y(e.proxy),credentials:m(e.credentials,x()),encryption:m(e.encryption,x())}))}o(k,"extractPatternDatabaseConfig");function j(t){return d(t,"compute",e=>({server:m(e.server,b),imageOptimisation:m(e.imageOptimisation,b),revalidation:m(e.revalidation,b)}))}o(j,"extractPatternComputeConfig");function U(t){const e=o(n=>({versioned:g(n.versioned)}),"parseVersionedConfig");return d(t,"storage",n=>({assets:m(n.assets,e),cache:m(n.cache,e),media:m(n.media,e)}))}o(U,"extractPatternStorageConfig");function V(t){return d(t,"messaging",e=>({revalidationQueue:m(e.revalidationQueue,n=>({visibilityTimeout:c(n.visibilityTimeout),messageRetentionPeriod:c(n.messageRetentionPeriod),maxMessageSize:c(n.maxMessageSize),deadLetterQueue:z(n.deadLetterQueue)}))}))}o(V,"extractPatternMessagingConfig");function M(t){return d(t,"cdn",e=>({domainNames:_(e.domainNames),certificateArn:s(e.certificateArn)}))}o(M,"extractPatternCdnConfig");function B(t){return d(t,"environment",e=>{const n=Object.fromEntries(Object.entries(e).filter(r=>typeof r[1]=="string"));return Object.keys(n).length>0?n:void 0})}o(B,"extractPatternEnvironmentConfig");function Q(t,e){const n=$(t);return{name:e,source:s(t.source),build:d(t,"build",r=>({command:s(r.command),outputDir:s(r.outputDir)})),routing:S(t.routing,I),security:d(t,"security",r=>({headers:g(r.headers),contentSecurityPolicy:s(r.contentSecurityPolicy)})),domain:s(t.domain),forms:d(t,"forms",r=>({to:s(r.to),from:s(r.from),corsOrigin:s(r.corsOrigin),maxConcurrency:c(r.maxConcurrency)})),cdn:d(t,"cdn",r=>({behaviours:Array.isArray(r.behaviours)?r.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}o(Q,"extractStaticSiteConfig");function P(t){return L(t)&&("__identifier"in t||"__expression"in t||"__call"in t||"__unknown"in t)}o(P,"isUnreadableRef");function $(t){const e=[],n=o((i,a)=>{P(i)&&e.push(a)},"check");n(t.source,"source"),n(t.routing,"routing"),n(t.domain,"domain");const r=[[t.build,"build",["command","outputDir"]],[t.security,"security",["headers","contentSecurityPolicy"]],[t.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[t.cdn,"cdn",["behaviours"]]];for(const[i,a,u]of r)if(P(i))e.push(a);else if(A(i))for(const l of u)n(i[l],`${a}.${l}`);return e}o($,"collectUnreadableStaticSiteFields");function p(t){return t!==void 0&&t!==""}o(p,"isReadable");function O(t,e){return new Error(`Static-site pattern '${t}' in infrastructure.ts: Fjall could not read ${e.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}o(O,"unreadableStaticSiteFields");function w(t,e){const n=e.to;if(!p(n))throw O(t,["forms.to"]);return{to:n,...e.from!==void 0&&{from:e.from},...e.corsOrigin!==void 0&&{corsOrigin:e.corsOrigin},...e.maxConcurrency!==void 0&&{maxConcurrency:e.maxConcurrency}}}o(w,"readStaticSiteForms");function G(t,e){if(t.arguments.length<2)return null;const n=t.arguments[0],r=t.arguments[1];if(!h.isStringLiteral(n)||!h.isObjectLiteralExpression(r))return null;const i=n.text,a=N(r),u=a.type,l=F(e),f=s(a.name);return f?u==="payload"||u==="nextjs"?{variableName:l,constructId:i,type:u,config:{name:f,domain:s(a.domain),database:k(a),compute:j(a),storage:U(a),messaging:V(a),cdn:M(a),environment:B(a)},node:t}:u==="staticsite"?{variableName:l,constructId:i,type:"staticsite",config:Q(a,f),node:t}:null:null}o(G,"extractPatternResource");function J(t){return C(t,e=>{if(!h.isCallExpression(e)||!E(e,"addPattern"))return null;const n=e.arguments[0];return D(n,"PatternFactory")?G(n,e):null})}o(J,"findPatternResources");function X(t,e){if(!e||e.length===0)return;const n=e[0];if(t.pattern=n.type,n.type==="staticsite"){const{config:i}=n,a=i.source,u=i.build?.command,l=i.build?.outputDir;if(i.unreadableFields!==void 0)throw O(i.name,i.unreadableFields);if(!p(a)||!p(u)||!p(l)){const f=[];throw p(a)||f.push("source"),p(u)||f.push("build.command"),p(l)||f.push("build.outputDir"),O(i.name,f)}t.patternConfig={type:"staticsite",name:i.name,source:a,build:{command:u,outputDir:l},routing:i.routing,security:i.security,domain:i.domain,...i.forms!==void 0&&{forms:w(i.name,i.forms)},cdn:i.cdn};return}const{config:r}=n;t.patternConfig={type:n.type,name:r.name,domain:r.domain,database:r.database,compute:r.compute,storage:r.storage,messaging:r.messaging,cdn:r.cdn,environment:r.environment}}o(X,"applyPatternConfig");export{X as applyPatternConfig,J as findPatternResources};
+var v=Object.defineProperty;var s=(t,e)=>v(t,"name",{value:e,configurable:!0});import*as x from"typescript";import{CLOUDFRONT_PRICE_CLASS_VALUES as P,STATIC_SITE_ROUTING_VALUES as _}from"@fjall/util";import{asBoolean as y,asNumber as c,asString as a,asStringArray as N,asStringUnion as g,asObjectOrFalse as h,collectFromAst as z,extractSubConfig as u,extractVariableName as D,isFactoryBuildCall as L,isFactoryMethodCall as E,isParsedObject as A,isPlainObject as F,parseObjectLiteral as G,parseOptionalConfig as m,typed as b}from"../common/astCommonParser.js";import{parseDeadLetterQueueConfig as C}from"./astMessagingParser.js";const R=["Instance","Aurora"],T=["postgresql","mysql"];function O(t){if(!A(t))return;const e={...t.memorySize!==void 0&&{memorySize:c(t.memorySize)},...t.timeout!==void 0&&{timeout:c(t.timeout)},...t.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:c(t.ephemeralStorageSize)}};return Object.keys(e).length>0?e:void 0}s(O,"parseLambdaConfig");function U(t){return u(t,"database",e=>({type:g(e.type,R),databaseName:a(e.databaseName),databaseEngine:g(e.databaseEngine,T),deletionProtection:y(e.deletionProtection),backupRetention:c(e.backupRetention),port:c(e.port),publiclyAccessible:y(e.publiclyAccessible),allowedIpCidr:a(e.allowedIpCidr),instanceType:a(e.instanceType),allocatedStorage:c(e.allocatedStorage),multiAz:y(e.multiAz),allowVpcAccess:y(e.allowVpcAccess),monitoringInterval:c(e.monitoringInterval),preferredMaintenanceWindow:a(e.preferredMaintenanceWindow),snapshotIdentifier:a(e.snapshotIdentifier),snapshotUsername:a(e.snapshotUsername),readReplica:h(e.readReplica),writer:m(e.writer,b()),readers:h(e.readers),databaseInsights:h(e.databaseInsights),proxy:h(e.proxy),credentials:m(e.credentials,b()),encryption:m(e.encryption,b())}))}s(U,"extractPatternDatabaseConfig");function k(t){return u(t,"compute",e=>({server:m(e.server,O),imageOptimisation:m(e.imageOptimisation,O),revalidation:m(e.revalidation,O)}))}s(k,"extractPatternComputeConfig");function V(t){const e=s(n=>({versioned:y(n.versioned)}),"parseVersionedConfig");return u(t,"storage",n=>({assets:m(n.assets,e),cache:m(n.cache,e),media:m(n.media,e)}))}s(V,"extractPatternStorageConfig");function j(t){return u(t,"messaging",e=>({revalidationQueue:m(e.revalidationQueue,n=>({visibilityTimeout:c(n.visibilityTimeout),messageRetentionPeriod:c(n.messageRetentionPeriod),maxMessageSize:c(n.maxMessageSize),deadLetterQueue:C(n.deadLetterQueue)}))}))}s(j,"extractPatternMessagingConfig");function w(t){return u(t,"cdn",e=>({domainNames:N(e.domainNames),certificateArn:a(e.certificateArn)}))}s(w,"extractPatternCdnConfig");function M(t){return u(t,"environment",e=>{const n=Object.fromEntries(Object.entries(e).filter(r=>typeof r[1]=="string"));return Object.keys(n).length>0?n:void 0})}s(M,"extractPatternEnvironmentConfig");function Z(t,e){const n=B(t);return{name:e,source:a(t.source),build:u(t,"build",r=>({command:a(r.command),outputDir:a(r.outputDir)})),routing:g(t.routing,_),security:u(t,"security",r=>({headers:y(r.headers),contentSecurityPolicy:a(r.contentSecurityPolicy)})),domain:a(t.domain),zoneName:a(t.zoneName),hostedZoneId:a(t.hostedZoneId),forms:u(t,"forms",r=>({to:a(r.to),from:a(r.from),corsOrigin:a(r.corsOrigin),maxConcurrency:c(r.maxConcurrency)})),cdn:u(t,"cdn",r=>({behaviours:Array.isArray(r.behaviours)?r.behaviours:void 0,priceClass:g(r.priceClass,P),invalidateOnDeploy:y(r.invalidateOnDeploy)})),accessGate:u(t,"accessGate",r=>({type:g(r.type,["basic-auth"]),username:a(r.username),password:a(r.password)})),...n.length>0&&{unreadableFields:n}}}s(Z,"extractStaticSiteConfig");function I(t){return F(t)&&("__identifier"in t||"__expression"in t||"__call"in t||"__unknown"in t)}s(I,"isUnreadableRef");function B(t){const e=[],n=s((i,o)=>{I(i)&&e.push(o)},"check");n(t.source,"source"),n(t.routing,"routing"),n(t.domain,"domain"),n(t.zoneName,"zoneName"),n(t.hostedZoneId,"hostedZoneId");const r=[[t.build,"build",["command","outputDir"]],[t.security,"security",["headers","contentSecurityPolicy"]],[t.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[t.cdn,"cdn",["behaviours","priceClass","invalidateOnDeploy"]],[t.accessGate,"accessGate",["type","username","password"]]];for(const[i,o,d]of r)if(I(i))e.push(o);else if(A(i))for(const l of d)n(i[l],`${o}.${l}`);return e}s(B,"collectUnreadableStaticSiteFields");function p(t){return t!==void 0&&t!==""}s(p,"isReadable");function S(t,e){return new Error(`Static-site pattern '${t}' in infrastructure.ts: Fjall could not read ${e.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}s(S,"unreadableStaticSiteFields");function Q(t,e){const n=e.to;if(!p(n))throw S(t,["forms.to"]);return{to:n,...e.from!==void 0&&{from:e.from},...e.corsOrigin!==void 0&&{corsOrigin:e.corsOrigin},...e.maxConcurrency!==void 0&&{maxConcurrency:e.maxConcurrency}}}s(Q,"readStaticSiteForms");function $(t,e){const n=[];if(e.type!=="basic-auth"&&n.push("accessGate.type"),p(e.username)||n.push("accessGate.username"),p(e.password)||n.push("accessGate.password"),n.length>0||e.username===void 0||e.password===void 0)throw S(t,n);return{type:"basic-auth",username:e.username,password:e.password}}s($,"readStaticSiteAccessGate");function W(t,e){if(t.arguments.length<2)return null;const n=t.arguments[0],r=t.arguments[1];if(!x.isStringLiteral(n)||!x.isObjectLiteralExpression(r))return null;const i=n.text,o=G(r),d=o.type,l=D(e),f=a(o.name);return f?d==="payload"||d==="nextjs"?{variableName:l,constructId:i,type:d,config:{name:f,domain:a(o.domain),database:U(o),compute:k(o),storage:V(o),messaging:j(o),cdn:w(o),environment:M(o)},node:t}:d==="staticsite"?{variableName:l,constructId:i,type:"staticsite",config:Z(o,f),node:t}:null:null}s(W,"extractPatternResource");function X(t){return z(t,e=>{if(!x.isCallExpression(e)||!E(e,"addPattern"))return null;const n=e.arguments[0];return L(n,"PatternFactory")?W(n,e):null})}s(X,"findPatternResources");function q(t,e){if(!e||e.length===0)return;const n=e[0];if(t.pattern=n.type,n.type==="staticsite"){const{config:i}=n,o=i.source,d=i.build?.command,l=i.build?.outputDir;if(i.unreadableFields!==void 0)throw S(i.name,i.unreadableFields);if(!p(o)||!p(d)||!p(l)){const f=[];throw p(o)||f.push("source"),p(d)||f.push("build.command"),p(l)||f.push("build.outputDir"),S(i.name,f)}t.patternConfig={type:"staticsite",name:i.name,source:o,build:{command:d,outputDir:l},routing:i.routing,security:i.security,domain:i.domain,zoneName:i.zoneName,hostedZoneId:i.hostedZoneId,...i.forms!==void 0&&{forms:Q(i.name,i.forms)},cdn:i.cdn,...i.accessGate!==void 0&&{accessGate:$(i.name,i.accessGate)}};return}const{config:r}=n;t.patternConfig={type:n.type,name:r.name,domain:r.domain,database:r.database,compute:r.compute,storage:r.storage,messaging:r.messaging,cdn:r.cdn,environment:r.environment}}s(q,"applyPatternConfig");export{q as applyPatternConfig,X as findPatternResources};

package/dist/src/generation/generatePatternCode.js

@@ -1,14 +1,14 @@
-var $=Object.defineProperty;var r=(n,e)=>$(n,"name",{value:e,configurable:!0});import{formatValue as l}from"./common.js";import{PATTERN_INVOCATION as y}from"./statementInvocation.js";import{patternConstructId as b}from"@fjall/util";const m=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function c(n,e,t){return e===void 0?"":`
-${t}${n}: ${e},`}r(c,"emitScalar");function s(n,e,t){return e===void 0?"":`
-${t}${n}: ${JSON.stringify(e)},`}r(s,"emitStringField");function d(n,e,t){return e===void 0?"":e===!1?`
+var $=Object.defineProperty;var r=(n,e)=>$(n,"name",{value:e,configurable:!0});import{formatValue as l}from"./common.js";import{PATTERN_INVOCATION as y}from"./statementInvocation.js";import{patternConstructId as b}from"@fjall/util";const s=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function c(n,e,t){return e===void 0?"":`
+${t}${n}: ${e},`}r(c,"emitScalar");function m(n,e,t){return e===void 0?"":`
+${t}${n}: ${JSON.stringify(e)},`}r(m,"emitStringField");function d(n,e,t){return e===void 0?"":e===!1?`
 ${t}${n}: false,`:`
 ${t}${n}: ${l(e,t)},`}r(d,"emitObjectOrFalse");function a(n,e,t){return e===void 0||Object.keys(e).length===0?"":`
-${t}${n}: ${l(e,t)},`}r(a,"emitObject");function g(n){const e=n??{},t="      ",o=e.type??m.database.type,u=e.backupRetention??m.database.backupRetention,p=e.deletionProtection??m.database.deletionProtection;let i=`
-${t}type: "${o}",`;return i+=s("databaseName",e.databaseName,t),i+=s("databaseEngine",e.databaseEngine,t),o==="Instance"&&e.instanceType!==void 0&&(i+=s("instanceType",e.instanceType,t)),i+=c("allocatedStorage",e.allocatedStorage,t),i+=c("port",e.port,t),i+=`
+${t}${n}: ${l(e,t)},`}r(a,"emitObject");function g(n){const e=n??{},t="      ",o=e.type??s.database.type,u=e.backupRetention??s.database.backupRetention,p=e.deletionProtection??s.database.deletionProtection;let i=`
+${t}type: "${o}",`;return i+=m("databaseName",e.databaseName,t),i+=m("databaseEngine",e.databaseEngine,t),o==="Instance"&&e.instanceType!==void 0&&(i+=m("instanceType",e.instanceType,t)),i+=c("allocatedStorage",e.allocatedStorage,t),i+=c("port",e.port,t),i+=`
 ${t}backupRetention: ${u},`,i+=`
-${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t),i+=s("allowedIpCidr",e.allowedIpCidr,t),i+=c("multiAz",e.multiAz,t),i+=c("allowVpcAccess",e.allowVpcAccess,t),i+=c("monitoringInterval",e.monitoringInterval,t),i+=s("preferredMaintenanceWindow",e.preferredMaintenanceWindow,t),i+=s("snapshotIdentifier",e.snapshotIdentifier,t),i+=s("snapshotUsername",e.snapshotUsername,t),i+=d("readReplica",e.readReplica,t),i+=a("writer",e.writer,t),i+=d("readers",e.readers,t),i+=d("databaseInsights",e.databaseInsights,t),i+=d("proxy",e.proxy,t),i+=a("credentials",e.credentials,t),i+=a("encryption",e.encryption,t),`
+${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t),i+=m("allowedIpCidr",e.allowedIpCidr,t),i+=c("multiAz",e.multiAz,t),i+=c("allowVpcAccess",e.allowVpcAccess,t),i+=c("monitoringInterval",e.monitoringInterval,t),i+=m("preferredMaintenanceWindow",e.preferredMaintenanceWindow,t),i+=m("snapshotIdentifier",e.snapshotIdentifier,t),i+=m("snapshotUsername",e.snapshotUsername,t),i+=d("readReplica",e.readReplica,t),i+=a("writer",e.writer,t),i+=d("readers",e.readers,t),i+=d("databaseInsights",e.databaseInsights,t),i+=d("proxy",e.proxy,t),i+=a("credentials",e.credentials,t),i+=a("encryption",e.encryption,t),`
     database: {${i}
-    },`}r(g,"emitDatabaseBlock");function S(n){const e=n??{},t=e.server?.memorySize??m.compute.server.memorySize,o=e.server?.timeout??m.compute.server.timeout,u=e.imageOptimisation?.memorySize??m.compute.imageOptimisation.memorySize,p=e.imageOptimisation?.timeout??m.compute.imageOptimisation.timeout,i=e.revalidation?.memorySize??m.compute.revalidation.memorySize,f=e.revalidation?.timeout??m.compute.revalidation.timeout;return`
+    },`}r(g,"emitDatabaseBlock");function S(n){const e=n??{},t=e.server?.memorySize??s.compute.server.memorySize,o=e.server?.timeout??s.compute.server.timeout,u=e.imageOptimisation?.memorySize??s.compute.imageOptimisation.memorySize,p=e.imageOptimisation?.timeout??s.compute.imageOptimisation.timeout,i=e.revalidation?.memorySize??s.compute.revalidation.memorySize,f=e.revalidation?.timeout??s.compute.revalidation.timeout;return`
     compute: {
       server: {
         memorySize: ${t},
@@ -22,13 +22,13 @@ ${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t)
         memorySize: ${i},
         timeout: ${f},
       },
-    },`}r(S,"emitComputeBlock");function v(n){return a("storage",n,"    ")}r(v,"emitStorageBlock");function O(n){return a("messaging",n,"    ")}r(O,"emitMessagingBlock");function z(n){return a("cdn",n,"    ")}r(z,"emitCdnBlock");function I(n){return a("environment",n,"    ")}r(I,"emitEnvironmentBlock");function T(n){const e="    ";let t="";return t+=s("source",n.source,e),t+=a("build",n.build,e),t+=s("routing",n.routing,e),t+=a("security",n.security,e),n.domain!==void 0&&n.domain!==""&&(t+=`
-${e}domain: ${JSON.stringify(n.domain)},`),t+=a("forms",n.forms,e),t+=a("cdn",n.cdn,e),t}r(T,"emitStaticSiteFields");function N(n){if(!n.patternConfig)return"";const e=n.patternConfig,t=b(e.name,e.type);let o=`app.${y.appMethod}(
+    },`}r(S,"emitComputeBlock");function v(n){return a("storage",n,"    ")}r(v,"emitStorageBlock");function z(n){return a("messaging",n,"    ")}r(z,"emitMessagingBlock");function I(n){return a("cdn",n,"    ")}r(I,"emitCdnBlock");function O(n){return a("environment",n,"    ")}r(O,"emitEnvironmentBlock");function T(n){const e="    ";let t="";return t+=m("source",n.source,e),t+=a("build",n.build,e),t+=m("routing",n.routing,e),t+=a("security",n.security,e),n.domain!==void 0&&n.domain!==""&&(t+=`
+${e}domain: ${JSON.stringify(n.domain)},`),t+=m("zoneName",n.zoneName,e),t+=m("hostedZoneId",n.hostedZoneId,e),t+=a("forms",n.forms,e),t+=a("cdn",n.cdn,e),t+=a("accessGate",n.accessGate,e),t}r(T,"emitStaticSiteFields");function A(n){if(!n.patternConfig)return"";const e=n.patternConfig,t=b(e.name,e.type);let o=`app.${y.appMethod}(
   ${y.factory}.build("${t}", {
     type: "${e.type}",
     name: "${e.name}",`;return e.type==="payload"||e.type==="nextjs"?(e.domain!==void 0&&e.domain!==""&&(o+=`
-    domain: "${e.domain}",`),o+=g(e.database),o+=S(e.compute),o+=v(e.storage),o+=O(e.messaging),o+=z(e.cdn),o+=I(e.environment)):o+=T(e),o+=`
+    domain: "${e.domain}",`),o+=g(e.database),o+=S(e.compute),o+=v(e.storage),o+=z(e.messaging),o+=I(e.cdn),o+=O(e.environment)):o+=T(e),o+=`
   })
 );
 
-`,o}r(N,"generatePatternCodeWithComments");export{m as OPENNEXT_DEFAULTS,N as generatePatternCodeWithComments};
+`,o}r(A,"generatePatternCodeWithComments");export{s as OPENNEXT_DEFAULTS,A as generatePatternCodeWithComments};

package/dist/src/planning/staticSitePlanning.d.ts

@@ -4,10 +4,17 @@ import { type StaticSiteBuildConfig, type StaticSiteCdnConfig, type StaticSiteFo
 /**
  * Options for planning a static-site application.
  *
- * A static site is a networkless app (design §13) — it has no tier, database,
- * compute or VPC, so none of the OpenNext tier-preset machinery applies. The
- * plan carries only the pattern config; the CDK `StaticSite` construct owns the
- * private-S3 + CloudFront/OAC topology.
+ * A static site is a networkless app — it has no tier, database, compute or
+ * VPC, so none of the OpenNext tier-preset machinery applies (deliberate:
+ * the pattern's controls are orthogonal knobs, not correlated sizing, so a
+ * tier axis has nothing to bundle). The plan carries only the pattern
+ * config; the CDK `StaticSite` construct owns the private-S3 +
+ * CloudFront/OAC topology.
+ *
+ * This is the CREATE-flow subset of `StaticSitePatternConfigSchema`:
+ * authored-only fields with no create flag (`zoneName`, `hostedZoneId`,
+ * `accessGate`, `cdn.priceClass`, …) enter by editing infrastructure.ts,
+ * not here.
  */
 export interface StaticSiteResourceOptions {
     /** Repo root the build runs in and assets are uploaded from. */

package/dist/src/schemas/applicationSchemas.d.ts

@@ -279,6 +279,8 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
             contentSecurityPolicy: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         domain: z.ZodOptional<z.ZodString>;
+        zoneName: z.ZodOptional<z.ZodString>;
+        hostedZoneId: z.ZodOptional<z.ZodString>;
         forms: z.ZodOptional<z.ZodObject<{
             to: z.ZodString;
             from: z.ZodOptional<z.ZodString>;
@@ -287,6 +289,17 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
         }, z.core.$strict>>;
         cdn: z.ZodOptional<z.ZodObject<{
             behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+            priceClass: z.ZodOptional<z.ZodEnum<{
+                PriceClass_100: "PriceClass_100";
+                PriceClass_200: "PriceClass_200";
+                PriceClass_All: "PriceClass_All";
+            }>>;
+            invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        accessGate: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"basic-auth">;
+            username: z.ZodString;
+            password: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>], "type">>;
     owner: z.ZodOptional<z.ZodString>;

package/dist/src/schemas/patternSchemas.d.ts

@@ -467,8 +467,26 @@ export type StaticSiteFormsConfig = z.infer<typeof StaticSiteFormsConfigSchema>;
  */
 export declare const StaticSiteCdnConfigSchema: z.ZodObject<{
     behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    priceClass: z.ZodOptional<z.ZodEnum<{
+        PriceClass_100: "PriceClass_100";
+        PriceClass_200: "PriceClass_200";
+        PriceClass_All: "PriceClass_All";
+    }>>;
+    invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
 export type StaticSiteCdnConfig = z.infer<typeof StaticSiteCdnConfigSchema>;
+/**
+ * Basic-auth access gate for a static site — an edge-side obscurity gate for
+ * staging sign-off (keeps an unlaunched site out of casual view and search
+ * indexes), NOT a security boundary: the credentials sit in plain text in
+ * infrastructure.ts and in the distribution's viewer-function code.
+ */
+export declare const StaticSiteAccessGateConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"basic-auth">;
+    username: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strict>;
+export type StaticSiteAccessGateConfig = z.infer<typeof StaticSiteAccessGateConfigSchema>;
 /**
  * Static-site pattern configuration.
  *
@@ -493,6 +511,8 @@ export declare const StaticSitePatternConfigSchema: z.ZodObject<{
         contentSecurityPolicy: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     domain: z.ZodOptional<z.ZodString>;
+    zoneName: z.ZodOptional<z.ZodString>;
+    hostedZoneId: z.ZodOptional<z.ZodString>;
     forms: z.ZodOptional<z.ZodObject<{
         to: z.ZodString;
         from: z.ZodOptional<z.ZodString>;
@@ -501,6 +521,17 @@ export declare const StaticSitePatternConfigSchema: z.ZodObject<{
     }, z.core.$strict>>;
     cdn: z.ZodOptional<z.ZodObject<{
         behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        priceClass: z.ZodOptional<z.ZodEnum<{
+            PriceClass_100: "PriceClass_100";
+            PriceClass_200: "PriceClass_200";
+            PriceClass_All: "PriceClass_All";
+        }>>;
+        invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    accessGate: z.ZodOptional<z.ZodObject<{
+        type: z.ZodLiteral<"basic-auth">;
+        username: z.ZodString;
+        password: z.ZodString;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type StaticSitePatternConfig = z.infer<typeof StaticSitePatternConfigSchema>;
@@ -768,6 +799,8 @@ export declare const PatternConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         contentSecurityPolicy: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     domain: z.ZodOptional<z.ZodString>;
+    zoneName: z.ZodOptional<z.ZodString>;
+    hostedZoneId: z.ZodOptional<z.ZodString>;
     forms: z.ZodOptional<z.ZodObject<{
         to: z.ZodString;
         from: z.ZodOptional<z.ZodString>;
@@ -776,6 +809,17 @@ export declare const PatternConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>>;
     cdn: z.ZodOptional<z.ZodObject<{
         behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        priceClass: z.ZodOptional<z.ZodEnum<{
+            PriceClass_100: "PriceClass_100";
+            PriceClass_200: "PriceClass_200";
+            PriceClass_All: "PriceClass_All";
+        }>>;
+        invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    accessGate: z.ZodOptional<z.ZodObject<{
+        type: z.ZodLiteral<"basic-auth">;
+        username: z.ZodString;
+        password: z.ZodString;
     }, z.core.$strict>>;
 }, z.core.$strict>], "type">;
 /**

package/dist/src/schemas/patternSchemas.js

@@ -1 +1 @@
-import{z as t}from"zod";import{VALIDATION_MESSAGES as o,VALIDATION_PATTERNS as n}from"../validation/patterns.js";import{BackupRetentionSchema as c,MonitoringIntervalSchema as T,DatabasePortSchema as u,ProxyConfigOrFalseSchema as R,ReadReplicaConfigOrFalseSchema as M,AuroraWriterConfigSchema as b,AuroraReadersConfigOrFalseSchema as f,DatabaseInsightsConfigOrFalseSchema as h,CredentialsConfigSchema as N,EncryptionConfigSchema as C}from"./databaseSchemas.js";import{LambdaMemorySchema as l}from"./computeSchemas.js";import{PATTERN_DATABASE_TYPES as p,DATABASE_ENGINES as O}from"./constants.js";import{STATIC_SITE_ROUTING_VALUES as _,isAddressAtDomain as x}from"@fjall/util";const a=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:t.number().int(o.EPHEMERAL_STORAGE.INTEGER).min(512,o.EPHEMERAL_STORAGE.MIN).max(10240,o.EPHEMERAL_STORAGE.MAX).optional()}).strict(),E=t.object({type:t.enum(p).optional(),databaseName:t.string().optional(),databaseEngine:t.enum(O).optional(),deletionProtection:t.boolean().optional(),backupRetention:c.optional(),port:u.optional(),publiclyAccessible:t.boolean().optional(),allowedIpCidr:t.string().optional(),instanceType:t.string().optional(),allocatedStorage:t.number().int(o.ALLOCATED_STORAGE.INTEGER).min(20,o.ALLOCATED_STORAGE.MIN).max(65536,o.ALLOCATED_STORAGE.MAX).optional(),multiAz:t.boolean().optional(),readReplica:M.optional(),writer:b.optional(),readers:f.optional(),allowVpcAccess:t.boolean().optional(),monitoringInterval:T.optional(),preferredMaintenanceWindow:t.string().optional(),databaseInsights:h.optional(),proxy:R.optional(),credentials:N.optional(),encryption:C.optional(),snapshotIdentifier:t.string().optional(),snapshotUsername:t.string().optional()}).strict(),S=t.object({server:a.optional(),imageOptimisation:a.optional(),revalidation:a.optional()}).strict(),r=t.object({versioned:t.boolean().optional()}).strict(),d=t.object({assets:r.optional(),cache:r.optional(),media:r.optional()}).strict(),y=t.object({visibilityTimeout:t.number().int(o.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,o.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,o.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:t.number().int(o.SQS.RETENTION_PERIOD.INTEGER).min(60,o.SQS.RETENTION_PERIOD.MIN).max(1209600,o.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:t.number().int(o.MAX_MESSAGE_SIZE.INTEGER).min(1024,o.MAX_MESSAGE_SIZE.MIN).max(262144,o.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:t.union([t.literal(!1),t.object({enabled:t.boolean().optional(),maxReceiveCount:t.number().int(o.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,o.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,o.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),A=t.object({revalidationQueue:y.optional()}).strict(),I=t.object({domainNames:t.array(t.string()).optional(),certificateArn:t.string().optional()}).strict(),g=t.record(t.string().regex(n.ENV_VAR_NAME,o.ENV_VAR_NAME),t.string()).optional(),P=t.object({type:t.literal("payload"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:I.optional(),environment:g}).strict(),D=t.object({type:t.literal("nextjs"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:I.optional(),environment:g}).strict(),L=t.enum(_),U=t.object({command:t.string().min(1,o.REQUIRED.BUILD_COMMAND),outputDir:t.string().min(1,o.REQUIRED.OUTPUT_DIR)}).strict(),G=t.object({headers:t.boolean().optional(),contentSecurityPolicy:t.string().optional()}).strict(),j=t.object({to:t.string().min(1,o.REQUIRED.FORMS_TO).regex(n.EMAIL,o.EMAIL),from:t.string().regex(n.EMAIL,o.EMAIL).optional(),corsOrigin:t.string().regex(n.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:t.number().int().min(1).max(100).optional()}).strict(),Q=t.object({behaviours:t.array(t.unknown()).optional()}).strict(),v=t.object({type:t.literal("staticsite"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),source:t.string().min(1,o.REQUIRED.SOURCE),build:U,routing:L.optional(),security:G.optional(),domain:t.string().optional(),forms:j.optional(),cdn:Q.optional()}).strict().superRefine((i,s)=>{if(i.forms===void 0)return;const e=i.domain;if(e===void 0||e===""){s.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}const m=i.forms.from;m!==void 0&&!x(m,e)&&s.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${e} (the verified SES identity) \u2014 for example noreply@${e}. Use forms.to for the recipient.`})}),k=t.discriminatedUnion("type",[P,D,v]),H=t.enum(["lightweight","standard","resilient","custom"]),Y=t.object({type:t.enum(p),instanceType:t.string().optional(),backupRetention:c.optional(),deletionProtection:t.boolean().optional(),encryption:t.union([t.object({useCMK:t.literal(!0)}).strict(),t.literal(!1)]).optional()}).strict(),Z=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional()}).strict();export{Z as CustomPatternComputeSchema,Y as CustomPatternDatabaseSchema,D as NextJSPatternConfigSchema,k as PatternConfigSchema,a as PatternLambdaConfigSchema,y as PatternQueueConfigSchema,r as PatternStorageBucketConfigSchema,H as PatternTierSchema,I as PayloadCdnConfigSchema,S as PayloadComputeConfigSchema,E as PayloadDatabaseConfigSchema,A as PayloadMessagingConfigSchema,P as PayloadPatternConfigSchema,d as PayloadStorageConfigSchema,U as StaticSiteBuildConfigSchema,Q as StaticSiteCdnConfigSchema,j as StaticSiteFormsConfigSchema,v as StaticSitePatternConfigSchema,L as StaticSiteRoutingSchema,G as StaticSiteSecurityConfigSchema};
+import{z as t}from"zod";import{VALIDATION_MESSAGES as o,VALIDATION_PATTERNS as n}from"../validation/patterns.js";import{BackupRetentionSchema as c,MonitoringIntervalSchema as u,DatabasePortSchema as T,ProxyConfigOrFalseSchema as R,ReadReplicaConfigOrFalseSchema as b,AuroraWriterConfigSchema as M,AuroraReadersConfigOrFalseSchema as f,DatabaseInsightsConfigOrFalseSchema as h,CredentialsConfigSchema as C,EncryptionConfigSchema as N}from"./databaseSchemas.js";import{LambdaMemorySchema as p}from"./computeSchemas.js";import{PATTERN_DATABASE_TYPES as l,DATABASE_ENGINES as O}from"./constants.js";import{CLOUDFRONT_PRICE_CLASS_VALUES as _,STATIC_SITE_ROUTING_VALUES as x,isAddressAtDomain as y}from"@fjall/util";const a=t.object({memorySize:p.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:t.number().int(o.EPHEMERAL_STORAGE.INTEGER).min(512,o.EPHEMERAL_STORAGE.MIN).max(10240,o.EPHEMERAL_STORAGE.MAX).optional()}).strict(),E=t.object({type:t.enum(l).optional(),databaseName:t.string().optional(),databaseEngine:t.enum(O).optional(),deletionProtection:t.boolean().optional(),backupRetention:c.optional(),port:T.optional(),publiclyAccessible:t.boolean().optional(),allowedIpCidr:t.string().optional(),instanceType:t.string().optional(),allocatedStorage:t.number().int(o.ALLOCATED_STORAGE.INTEGER).min(20,o.ALLOCATED_STORAGE.MIN).max(65536,o.ALLOCATED_STORAGE.MAX).optional(),multiAz:t.boolean().optional(),readReplica:b.optional(),writer:M.optional(),readers:f.optional(),allowVpcAccess:t.boolean().optional(),monitoringInterval:u.optional(),preferredMaintenanceWindow:t.string().optional(),databaseInsights:h.optional(),proxy:R.optional(),credentials:C.optional(),encryption:N.optional(),snapshotIdentifier:t.string().optional(),snapshotUsername:t.string().optional()}).strict(),S=t.object({server:a.optional(),imageOptimisation:a.optional(),revalidation:a.optional()}).strict(),r=t.object({versioned:t.boolean().optional()}).strict(),d=t.object({assets:r.optional(),cache:r.optional(),media:r.optional()}).strict(),P=t.object({visibilityTimeout:t.number().int(o.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,o.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,o.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:t.number().int(o.SQS.RETENTION_PERIOD.INTEGER).min(60,o.SQS.RETENTION_PERIOD.MIN).max(1209600,o.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:t.number().int(o.MAX_MESSAGE_SIZE.INTEGER).min(1024,o.MAX_MESSAGE_SIZE.MIN).max(262144,o.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:t.union([t.literal(!1),t.object({enabled:t.boolean().optional(),maxReceiveCount:t.number().int(o.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,o.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,o.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),A=t.object({revalidationQueue:P.optional()}).strict(),g=t.object({domainNames:t.array(t.string()).optional(),certificateArn:t.string().optional()}).strict(),I=t.record(t.string().regex(n.ENV_VAR_NAME,o.ENV_VAR_NAME),t.string()).optional(),D=t.object({type:t.literal("payload"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:g.optional(),environment:I}).strict(),L=t.object({type:t.literal("nextjs"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:g.optional(),environment:I}).strict(),U=t.enum(x),G=t.object({command:t.string().min(1,o.REQUIRED.BUILD_COMMAND),outputDir:t.string().min(1,o.REQUIRED.OUTPUT_DIR)}).strict(),j=t.object({headers:t.boolean().optional(),contentSecurityPolicy:t.string().optional()}).strict(),Q=t.object({to:t.string().min(1,o.REQUIRED.FORMS_TO).regex(n.EMAIL,o.EMAIL),from:t.string().regex(n.EMAIL,o.EMAIL).optional(),corsOrigin:t.string().regex(n.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:t.number().int().min(1).max(100).optional()}).strict(),v=t.object({behaviours:t.array(t.unknown()).optional(),priceClass:t.enum(_).optional(),invalidateOnDeploy:t.boolean().optional()}).strict(),B=t.object({type:t.literal("basic-auth"),username:t.string().min(1,"accessGate.username must not be empty"),password:t.string().min(1,"accessGate.password must not be empty")}).strict(),V=t.object({type:t.literal("staticsite"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),source:t.string().min(1,o.REQUIRED.SOURCE),build:G,routing:U.optional(),security:j.optional(),domain:t.string().optional(),zoneName:t.string().optional(),hostedZoneId:t.string().optional(),forms:Q.optional(),cdn:v.optional(),accessGate:B.optional()}).strict().superRefine((i,s)=>{if(i.forms===void 0)return;const e=i.domain;if(e===void 0||e===""){s.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}const m=i.forms.from;m!==void 0&&!y(m,e)&&s.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${e} (the verified SES identity) \u2014 for example noreply@${e}. Use forms.to for the recipient.`})}),Y=t.discriminatedUnion("type",[D,L,V]),Z=t.enum(["lightweight","standard","resilient","custom"]),W=t.object({type:t.enum(l),instanceType:t.string().optional(),backupRetention:c.optional(),deletionProtection:t.boolean().optional(),encryption:t.union([t.object({useCMK:t.literal(!0)}).strict(),t.literal(!1)]).optional()}).strict(),$=t.object({memorySize:p.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional()}).strict();export{$ as CustomPatternComputeSchema,W as CustomPatternDatabaseSchema,L as NextJSPatternConfigSchema,Y as PatternConfigSchema,a as PatternLambdaConfigSchema,P as PatternQueueConfigSchema,r as PatternStorageBucketConfigSchema,Z as PatternTierSchema,g as PayloadCdnConfigSchema,S as PayloadComputeConfigSchema,E as PayloadDatabaseConfigSchema,A as PayloadMessagingConfigSchema,D as PayloadPatternConfigSchema,d as PayloadStorageConfigSchema,B as StaticSiteAccessGateConfigSchema,G as StaticSiteBuildConfigSchema,v as StaticSiteCdnConfigSchema,Q as StaticSiteFormsConfigSchema,V as StaticSitePatternConfigSchema,U as StaticSiteRoutingSchema,j as StaticSiteSecurityConfigSchema};

package/dist/src/version.d.ts

@@ -1 +1 @@
-export declare const GENERATOR_VERSION = "23.0.0";
+export declare const GENERATOR_VERSION = "25.0.0";

package/dist/src/version.js

@@ -1 +1 @@
-const E="23.0.0";export{E as GENERATOR_VERSION};
+const E="25.0.0";export{E as GENERATOR_VERSION};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/generator",
-  "version": "23.0.0",
+  "version": "25.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -58,7 +58,7 @@
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
     "@babel/parser": "^7.29.8",
-    "@fjall/util": "^23.0.0",
+    "@fjall/util": "^25.0.0",
     "ast-types": "^0.16.1",
     "recast": "^0.23.12",
     "ts-morph": "^28.0.0",
@@ -68,6 +68,7 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/node": "^26.1.2",
+    "@typescript-eslint/parser": "^8.65.0",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^10.8.0",
     "fast-check": "^4.9.0",