@fjall/generator 24.0.0 → 26.0.0

package/dist/.build-source-hash

@@ -9,15 +9,15 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "f7719f98cd378ddbe28b4db7318ab783f99247be7b80208b9152ecacbdc9a9e1",
+  "hash": "838f93077e6d69fbadcb66b9158206390b27a1460db3456647ff0310f524df63",
   "files": {
     "src/ast/astTestHelpers.ts": "026cac849eb88bdb",
-    "src/ast/domain/astDomainParser.ts": "a88b990396db0a46",
+    "src/ast/domain/astDomainParser.ts": "12107a9864c6670c",
     "src/ast/index.ts": "48c73220502e5201",
     "src/ast/mutation/astCodeInjection.ts": "c1ebf483fb1e2332",
     "src/ast/mutation/astExpressionEvaluator.ts": "6082789268b91212",
     "src/ast/mutation/astSurgicalModification.ts": "9c512e11e8239c4d",
-    "src/ast/parsers/common/astCommonParser.ts": "d4c19453e9a75cac",
+    "src/ast/parsers/common/astCommonParser.ts": "9f0f4c1a061aa8bd",
     "src/ast/parsers/common/astStatementClassifier.ts": "d5cfd1f8d5e35132",
     "src/ast/parsers/common/astStatementQueries.ts": "e40e31e0fcdc15e3",
     "src/ast/parsers/orchestrator/astInfrastructureParser.ts": "07fd7a94796ebf5f",
@@ -31,7 +31,7 @@
     "src/ast/parsers/resources/astDynamoDBParser.ts": "809c2c633447b388",
     "src/ast/parsers/resources/astMessagingParser.ts": "b185ec22e6b96943",
     "src/ast/parsers/resources/astNetworkParser.ts": "8697dccb454eac7d",
-    "src/ast/parsers/resources/astPatternParser.ts": "09c624247eaf0786",
+    "src/ast/parsers/resources/astPatternParser.ts": "490afd32a307eeb8",
     "src/ast/parsers/resources/astScheduleParser.ts": "dbdac640c75b8bd3",
     "src/ast/parsers/resources/astStorageParser.ts": "309bc3257f46cfdf",
     "src/aws/regions.ts": "a028bcb92b0e41d9",
@@ -115,9 +115,9 @@
     "src/dns/bindParser.ts": "2b463c4dd1395ae5",
     "src/dns/bindWriter.ts": "c296911ce5aef77c",
     "src/dns/domainFileGenerator.ts": "f2d0ba8cca5ab1c9",
-    "src/dns/domainRecords.ts": "8bdfcb0b3b32a000",
+    "src/dns/domainRecords.ts": "27b4cbabbf600d4f",
     "src/dns/index.ts": "5a0173ea07707af3",
-    "src/dns/tsEmitter.ts": "8e56a893773c1c07",
+    "src/dns/tsEmitter.ts": "381ef9f38758c025",
     "src/dns/types.ts": "82d6db9d7d26dbc2",
     "src/generation/common.ts": "50bbd875b9dd737e",
     "src/generation/compute.ts": "068f6fa241838b25",
@@ -127,7 +127,7 @@
     "src/generation/compute/shared.ts": "3724d4bfe92cfcb7",
     "src/generation/connectionWiring.ts": "9afb0227f2584ab2",
     "src/generation/database.ts": "c28a0dbabf91b6a3",
-    "src/generation/generatePatternCode.ts": "afed698418d90aee",
+    "src/generation/generatePatternCode.ts": "342a227d461804c0",
     "src/generation/index.ts": "915500e352c2bab6",
     "src/generation/infrastructure.ts": "0ac7c1954a02b2cc",
     "src/generation/messagingConnections.ts": "09e70af97e055712",
@@ -143,7 +143,7 @@
     "src/planning/resourceAddition.ts": "7d0320620a74fdcd",
     "src/planning/resourceConnections.ts": "a6b7db8f733e560f",
     "src/planning/resourcePlanning.ts": "d6bb9fa8e1419908",
-    "src/planning/staticSitePlanning.ts": "ee0b100e081061be",
+    "src/planning/staticSitePlanning.ts": "4440e71a2eac5efc",
     "src/presets/clickhouseTierPreset.ts": "1758d991c81d769a",
     "src/presets/index.ts": "8332c0198b2a6fe9",
     "src/presets/patternTierPresets.ts": "f4fc368fc623aae4",
@@ -171,7 +171,7 @@
     "src/schemas/messagingSchemas.ts": "2c1975fac903fd1b",
     "src/schemas/networkSchemas.ts": "c3a5f30e440dd2f8",
     "src/schemas/organisationSchemas.ts": "50d793aa7ff7f749",
-    "src/schemas/patternSchemas.ts": "8b48dfb02852a7ba",
+    "src/schemas/patternSchemas.ts": "72059b2d20a34a87",
     "src/schemas/resourceSchemas.ts": "cd050813242ea213",
     "src/schemas/securityBoundary.ts": "54d216807103bab8",
     "src/schemas/sharedTypes.ts": "45210e600bea393e",
@@ -181,11 +181,11 @@
     "src/validation/patterns.ts": "f9629eafdad7ac3e",
     "src/validation/validationMessages.ts": "b03413b3953c3e79",
     "src/validation/validationPatterns.ts": "865f3d688975b7c8",
-    "src/version.ts": "628659b85d1e2c43",
+    "src/version.ts": "db284a53a6aef9fe",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "097bea1fa43d11c5",
+    "package.json": "95e3ad266d0b7bd3",
     "tsconfig.json": "1929cf3f99fe9b1e"
   },
-  "outputHash": "b758bb39fed2cbf694ae9e1df71412a218866466be0c834122143536d0d13cf3",
+  "outputHash": "43d7d5c449d6ec8670987ae8b33326f9ba7ee7758fe31ff6d1b67dc57b7a529d",
   "outputFileCount": 343
 }

package/dist/.minified

@@ -1 +1 @@
-171 files minified at 2026-08-30T07:28:36.308Z
+171 files minified at 2026-08-31T04:05:27.741Z

package/dist/src/ast/astTestHelpers.d.ts

@@ -346,8 +346,15 @@ export declare function parseAndConvert(code: string): {
         security?: {
             headers?: boolean | undefined;
             contentSecurityPolicy?: string | undefined;
+            hsts?: false | {
+                maxAgeDays?: number | undefined;
+                includeSubdomains?: boolean | undefined;
+                preload?: boolean | undefined;
+            } | undefined;
         } | undefined;
         domain?: string | undefined;
+        zoneName?: string | undefined;
+        hostedZoneId?: string | undefined;
         forms?: {
             to: string;
             from?: string | undefined;
@@ -356,6 +363,13 @@ export declare function parseAndConvert(code: string): {
         } | undefined;
         cdn?: {
             behaviours?: unknown[] | undefined;
+            priceClass?: "PriceClass_100" | "PriceClass_200" | "PriceClass_All" | undefined;
+            invalidateOnDeploy?: boolean | undefined;
+        } | undefined;
+        accessGate?: {
+            type: "basic-auth";
+            username: string;
+            password: string;
         } | undefined;
     } | {
         type: "payload";

package/dist/src/ast/domain/astDomainParser.d.ts

@@ -1,6 +1,7 @@
 import * as ts from "typescript";
 import { type Result } from "../../types/Result.js";
 import { type DnsRecordType } from "../../dns/types.js";
+import { type TypedFjallTarget } from "../../dns/domainRecords.js";
 /** One-of match for a single `new Domain(...)` call in an infrastructure file. */
 export interface DomainCallMatch {
     readonly callExpression: ts.NewExpression;
@@ -23,24 +24,18 @@ export interface DomainCallMatch {
     /** The `id` argument — second arg — as a string literal if resolvable. */
     readonly constructIdLiteral: string | undefined;
 }
-/** Parsed target expression for a single `AliasRecord.target`. */
-export type ParsedFjallTarget = {
-    readonly kind: "ecs";
-    readonly appName: string;
-    /** Second `fjallApp` argument — present only for a multi-ALB app. */
-    readonly computeName?: string;
-} | {
-    readonly kind: "cdn";
-    readonly appName: string;
-} | {
-    readonly kind: "bucket";
-    readonly appName: string;
-    readonly bucketName: string;
-} | {
-    readonly kind: "custom";
-    readonly dnsName: string;
-    readonly hostedZoneId: string;
-} | {
+/**
+ * Parsed target expression for a single `AliasRecord.target`: every variant
+ * the eject schema accepts, plus the two the parser alone can produce for a
+ * call it cannot turn into one.
+ *
+ * The resolvable half is DERIVED from `TypedFjallTargetSchema`, not
+ * redeclared. Both sites describe the same domain concept and must move
+ * together — a variant or qualifier added to the schema and not here would
+ * compile cleanly on both sides while `parseTarget` silently stopped being
+ * able to produce it, and nothing in the round trip would fail.
+ */
+export type ParsedFjallTarget = TypedFjallTarget | {
     readonly kind: "unresolved";
     readonly sourceText: string;
 } | {

package/dist/src/ast/domain/astDomainParser.js

@@ -1 +1 @@
-var T=Object.defineProperty;var u=(n,e)=>T(n,"name",{value:e,configurable:!0});import*as m from"typescript";import{parseObjectLiteral as E,asString as f,asStringUnion as h,asStringArray as k,asBoolean as N,asNumber as L,isCallRef as j,isParsedObject as S}from"../parsers/common/astCommonParser.js";import{success as l,failure as a}from"../../types/Result.js";import{DnsRecordTypeSchema as O}from"../../dns/types.js";import{DomainRegistrarSchema as C,DomainDeployPhaseSchema as Z,AliasRecordTypeSchema as F,RecordConstructIdSchema as V,RecordIdsModeSchema as P,TYPED_FJALL_TARGET_KINDS as z}from"../../dns/domainRecords.js";const x=C.options,D=Z.options,I=P.options,M=O.options,q=F.options;function B(n){const e=[],t=u(r=>{if(m.isNewExpression(r)&&J(r.expression)){const d=U(r);d!==void 0&&e.push(d)}m.forEachChild(r,t)},"visit");if(t(n),e.length===0)return l(void 0);if(e.length>1)return a(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${e.length}`));const i=e[0];return i?l(i):l(void 0)}u(B,"findDomainConstructCall");function J(n){return m.isIdentifier(n)&&n.text==="Domain"}u(J,"isDomainIdentifier");function U(n){const e=n.arguments;if(!e||e.length<3)return;const t=e[0],i=e[1],r=e[2];if(!t||!i||!r||!m.isObjectLiteralExpression(r))return;const d=G(n);if(d===void 0)return;const o=Y(n),s=m.isStringLiteral(i)?i.text:void 0;return{callExpression:n,containingStatement:d,propsObjectLiteral:r,domainVarId:o,scopeArgumentText:t.getText(),constructIdLiteral:s}}u(U,"buildMatch");function G(n){let e=n;for(;e!==void 0;){if(m.isExpressionStatement(e)||m.isVariableStatement(e))return e;e=e.parent}}u(G,"findContainingTopLevelStatement");function Y(n){let e=n.parent;for(;e!==void 0;){if(m.isVariableDeclaration(e)&&m.isIdentifier(e.name)&&e.initializer===n)return e.name.text;e=e.parent}}u(Y,"extractDomainVarId");function w(n){switch(n.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${x.join(", ")}, got ${JSON.stringify(n.value)}`;case"missing_field":return`'${n.field}' property is required`;case"invalid_literal":return`'${n.field}' ${n.reason}`;case"removed_field":return`'${n.field}' was removed from the Domain API \u2014 ${n.cure}`}}u(w,"errorMessage");const K="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function H(n){const e=E(n),t=h(e.registrar,x);if(t===void 0){const c=e.registrar;if(c===void 0)return a({kind:"registrar_required"});const p=typeof c=="string"?c:y(c);return a({kind:"registrar_unsupported",value:p})}const i=f(e.zoneName);if(i===void 0)return a({kind:"missing_field",field:"zoneName"});const r=h(e.recordIds,I);if(e.recordIds!==void 0&&r===void 0)return a({kind:"invalid_literal",field:"recordIds",reason:`must be one of ${I.map(c=>`'${c}'`).join(", ")}`});const d=Q(e.records);if(!d.success)return d;const o=te(e.certificates);if(!o.success)return o;if(e.delegations!==void 0)return a({kind:"removed_field",field:"delegations",cure:K});const s={zoneName:i,recordIds:r,description:f(e.description),costAllocationEnvironment:f(e.costAllocationEnvironment),tags:re(e.tags),records:d.data,certificates:o.data};switch(t){case"route53":return l({...s,registrar:t,hostedZoneId:f(e.hostedZoneId)});case"external-delegated":{const c=f(e.delegatedSubdomain);if(c===void 0)return a({kind:"missing_field",field:"delegatedSubdomain"});const p=f(e.hostedZoneId);if(e.hostedZoneId!==void 0&&p===void 0)return a({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});const _=k(e.adoptedNameServers);if(e.adoptedNameServers!==void 0&&_===void 0)return a({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(p===void 0!=(_===void 0))return a({kind:"invalid_literal",field:p===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});const A=f(e.parentDelegationRoleArn);if(e.parentDelegationRoleArn!==void 0&&A===void 0)return a({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});const b=h(e.phase,D);return e.phase!==void 0&&b===void 0?a({kind:"invalid_literal",field:"phase",reason:`must be one of ${D.map($=>`'${$}'`).join(", ")}`}):l({...s,registrar:t,delegatedSubdomain:c,hostedZoneId:p,adoptedNameServers:_,parentDelegationRoleArn:A,phase:b})}case"external-records":return l({...s,registrar:t})}}u(H,"parseDomainProps");function ue(n){return w(n)}u(ue,"parseDomainErrorMessage");function ce(n,e,t){const i=m.createSourceFile(e,n,m.ScriptTarget.Latest,!0,m.ScriptKind.TS),r=B(i);if(!r.success)return a(new Error(r.error.message));if(r.data===void 0)return a(new Error(`Domain '${t}': no 'new Domain(...)' call found in ${e} \u2014 the file is not a Fjall domain component.`));const d=H(r.data.propsObjectLiteral);return d.success?l(d.data):a(new Error(`Domain '${t}': infrastructure.ts could not be parsed (${d.error.kind}).`))}u(ce,"parseDomainInfrastructureSource");function Q(n){if(n===void 0)return l([]);if(!Array.isArray(n))return a({kind:"invalid_literal",field:"records",reason:"must be an array"});const e=[];for(let t=0;t<n.length;t++){const i=n[t];if(!S(i))return a({kind:"invalid_literal",field:`records[${t}]`,reason:"must be an object literal"});const r=W(i,t);if(!r.success)return r;e.push(r.data)}return l(e)}u(Q,"parseRecordsArray");function W(n,e){const t=f(n.type),i=f(n.name);if(t===void 0)return a({kind:"missing_field",field:`records[${e}].type`});if(i===void 0)return a({kind:"missing_field",field:`records[${e}].name`});const r=f(n.id);if(n.id!==void 0&&(r===void 0||!V.safeParse(r).success))return a({kind:"invalid_literal",field:`records[${e}].id`,reason:"must be a literal alphanumeric string starting with a letter \u2014 it becomes a CloudFormation logical-ID segment"});if(n.target!==void 0){if(!q.some(p=>p===t))return a({kind:"invalid_literal",field:`records[${e}]`,reason:`alias records must have type 'A' or 'AAAA', got '${t}'`});const c=ee(n.target);return l({kind:"alias",type:t,name:i,target:c,...r!==void 0?{id:r}:{}})}if(!M.some(c=>c===t))return a({kind:"invalid_literal",field:`records[${e}]`,reason:`unsupported record type '${t}'`});const d=X(n.value);if(d===void 0)return a({kind:"invalid_literal",field:`records[${e}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(n.value)})`});const o=L(n.ttl),s={kind:"standard",type:t,name:i,value:d,...o!==void 0?{ttl:o}:{},...r!==void 0?{id:r}:{}};return l(s)}u(W,"parseRecord");function X(n){if(n===void 0)return;if(typeof n=="string")return n;const e=k(n);if(e!==void 0)return e}u(X,"parseRecordValue");function ee(n){if(j(n))return ne(n);if(S(n)){const e=h(n.kind,z);if(e==="ecs"||e==="cdn"){const t=f(n.appName);if(t!==void 0)return{kind:e,appName:t}}if(e==="bucket"){const t=f(n.appName),i=f(n.bucketName);if(t!==void 0&&i!==void 0)return{kind:e,appName:t,bucketName:i}}if(e==="custom"){const t=f(n.dnsName),i=f(n.hostedZoneId);if(t!==void 0&&i!==void 0)return{kind:e,dnsName:t,hostedZoneId:i}}}return{kind:"unresolved",sourceText:y(n)}}u(ee,"parseTarget");function ne(n){const e=n.__call.trim(),t=e.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!t)return{kind:"unresolved",sourceText:e};const i=t[1],r=t[2]??"",d=v(r);switch(i){case"fjallApp":{const o=g(d,0);if(o===void 0)return{kind:"dynamic",sourceText:e};if(d.length<2)return{kind:"ecs",appName:o};const s=g(d,1);return s===void 0?{kind:"dynamic",sourceText:e}:{kind:"ecs",appName:o,computeName:s}}case"fjallCdn":{const o=g(d,0);return o===void 0?{kind:"dynamic",sourceText:e}:{kind:"cdn",appName:o}}case"fjallBucket":{if(d.length<2)return{kind:"unresolved",sourceText:e};const o=g(d,0),s=g(d,1);return o===void 0||s===void 0?{kind:"dynamic",sourceText:e}:{kind:"bucket",appName:o,bucketName:s}}case"aliasTo":{if(d.length>=2){const o=g(d,0),s=g(d,1);return o!==void 0&&s!==void 0?{kind:"custom",dnsName:o,hostedZoneId:s}:{kind:"dynamic",sourceText:e}}if(d.length===1){const o=d[0]?.trim()??"",s=R(o,"dnsName"),c=R(o,"hostedZoneId");return s!==void 0&&c!==void 0?{kind:"custom",dnsName:s,hostedZoneId:c}:{kind:"dynamic",sourceText:e}}return{kind:"unresolved",sourceText:e}}default:return{kind:"unresolved",sourceText:e}}}u(ne,"resolveCallRefTarget");function v(n){const e=[];let t=0,i=null,r="";for(let o=0;o<n.length;o++){const s=n[o];if(i!==null){if(r+=s,s==="\\"&&o+1<n.length){const c=n[o+1];c!==void 0&&(r+=c,o+=1);continue}s===i&&(i=null);continue}if(s==='"'||s==="'"||s==="`"){i=s,r+=s;continue}if(s==="("||s==="{"||s==="["){t+=1,r+=s;continue}if(s===")"||s==="}"||s==="]"){t-=1,r+=s;continue}if(s===","&&t===0){e.push(r.trim()),r="";continue}r+=s}const d=r.trim();return d.length>0&&e.push(d),e}u(v,"splitTopLevelArgs");function g(n,e){const t=n[e];if(t===void 0)return;const i=t.trim();if(i.length<2)return;const r=i[0],d=i[i.length-1];if(r===d&&!(r!=='"'&&r!=="'"&&r!=="`"))return i.slice(1,-1)}u(g,"extractStringLiteralArg");function R(n,e){const t=n.trim().replace(/^\{|\}$/g,""),i=v(t);for(const r of i){const d=r.indexOf(":");if(d<0||r.slice(0,d).trim().replace(/["'`]/g,"")!==e)continue;const s=r.slice(d+1).trim();return g([s],0)}}u(R,"extractObjectFieldString");function te(n){if(n===void 0)return l([]);if(!Array.isArray(n))return a({kind:"invalid_literal",field:"certificates",reason:"must be an array"});const e=[];for(let t=0;t<n.length;t++){const i=n[t];if(typeof i=="string"){e.push({domainName:i});continue}if(!S(i))return a({kind:"invalid_literal",field:`certificates[${t}]`,reason:"must be a string or object literal"});const r=f(i.domainName);if(r===void 0)return a({kind:"missing_field",field:`certificates[${t}].domainName`});const d=k(i.subjectAlternativeNames),o=N(i.transparencyLogging),s=N(i.cloudFront);if(i.cloudFront!==void 0&&s===void 0)return a({kind:"invalid_literal",field:`certificates[${t}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});e.push({domainName:r,...d!==void 0?{subjectAlternativeNames:d}:{},...o!==void 0?{transparencyLogging:o}:{},...s!==void 0?{cloudFront:s}:{}})}return l(e)}u(te,"parseCertificatesArray");function re(n){if(n===void 0||!S(n))return;const e={};for(const[t,i]of Object.entries(n)){const r=f(i);r!==void 0&&(e[t]=r)}return Object.keys(e).length===0?void 0:e}u(re,"parseStringRecord");function y(n){if(n===void 0)return"undefined";if(n===null)return"null";if(typeof n=="string")return JSON.stringify(n);if(typeof n=="number"||typeof n=="boolean")return String(n);if(Array.isArray(n))return`[${n.map(e=>y(e)).join(", ")}]`;if(typeof n=="object"){if("__call"in n)return String(n.__call);if("__identifier"in n)return String(n.__identifier);if("__expression"in n)return String(n.__expression);if("__unknown"in n)return String(n.__unknown)}return String(n)}u(y,"stringifyParsedValue");export{B as findDomainConstructCall,ue as parseDomainErrorMessage,ce as parseDomainInfrastructureSource,H as parseDomainProps,v as splitTopLevelArgs};
+var T=Object.defineProperty;var u=(n,e)=>T(n,"name",{value:e,configurable:!0});import*as m from"typescript";import{parseObjectLiteral as E,asString as f,asStringUnion as h,asStringArray as _,asBoolean as N,asNumber as L,isCallRef as j,isParsedObject as k}from"../parsers/common/astCommonParser.js";import{success as l,failure as a}from"../../types/Result.js";import{DnsRecordTypeSchema as O}from"../../dns/types.js";import{DomainRegistrarSchema as C,DomainDeployPhaseSchema as Z,AliasRecordTypeSchema as F,RecordConstructIdSchema as V,RecordIdsModeSchema as P,TYPED_FJALL_TARGET_KINDS as z}from"../../dns/domainRecords.js";const x=C.options,D=Z.options,I=P.options,M=O.options,q=F.options;function B(n){const e=[],t=u(r=>{if(m.isNewExpression(r)&&J(r.expression)){const d=U(r);d!==void 0&&e.push(d)}m.forEachChild(r,t)},"visit");if(t(n),e.length===0)return l(void 0);if(e.length>1)return a(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${e.length}`));const i=e[0];return i?l(i):l(void 0)}u(B,"findDomainConstructCall");function J(n){return m.isIdentifier(n)&&n.text==="Domain"}u(J,"isDomainIdentifier");function U(n){const e=n.arguments;if(!e||e.length<3)return;const t=e[0],i=e[1],r=e[2];if(!t||!i||!r||!m.isObjectLiteralExpression(r))return;const d=G(n);if(d===void 0)return;const o=Y(n),s=m.isStringLiteral(i)?i.text:void 0;return{callExpression:n,containingStatement:d,propsObjectLiteral:r,domainVarId:o,scopeArgumentText:t.getText(),constructIdLiteral:s}}u(U,"buildMatch");function G(n){let e=n;for(;e!==void 0;){if(m.isExpressionStatement(e)||m.isVariableStatement(e))return e;e=e.parent}}u(G,"findContainingTopLevelStatement");function Y(n){let e=n.parent;for(;e!==void 0;){if(m.isVariableDeclaration(e)&&m.isIdentifier(e.name)&&e.initializer===n)return e.name.text;e=e.parent}}u(Y,"extractDomainVarId");function w(n){switch(n.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${x.join(", ")}, got ${JSON.stringify(n.value)}`;case"missing_field":return`'${n.field}' property is required`;case"invalid_literal":return`'${n.field}' ${n.reason}`;case"removed_field":return`'${n.field}' was removed from the Domain API \u2014 ${n.cure}`}}u(w,"errorMessage");const K="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function H(n){const e=E(n),t=h(e.registrar,x);if(t===void 0){const c=e.registrar;if(c===void 0)return a({kind:"registrar_required"});const g=typeof c=="string"?c:y(c);return a({kind:"registrar_unsupported",value:g})}const i=f(e.zoneName);if(i===void 0)return a({kind:"missing_field",field:"zoneName"});const r=h(e.recordIds,I);if(e.recordIds!==void 0&&r===void 0)return a({kind:"invalid_literal",field:"recordIds",reason:`must be one of ${I.map(c=>`'${c}'`).join(", ")}`});const d=Q(e.records);if(!d.success)return d;const o=te(e.certificates);if(!o.success)return o;if(e.delegations!==void 0)return a({kind:"removed_field",field:"delegations",cure:K});const s={zoneName:i,recordIds:r,description:f(e.description),costAllocationEnvironment:f(e.costAllocationEnvironment),tags:re(e.tags),records:d.data,certificates:o.data};switch(t){case"route53":return l({...s,registrar:t,hostedZoneId:f(e.hostedZoneId)});case"external-delegated":{const c=f(e.delegatedSubdomain);if(c===void 0)return a({kind:"missing_field",field:"delegatedSubdomain"});const g=f(e.hostedZoneId);if(e.hostedZoneId!==void 0&&g===void 0)return a({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});const S=_(e.adoptedNameServers);if(e.adoptedNameServers!==void 0&&S===void 0)return a({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(g===void 0!=(S===void 0))return a({kind:"invalid_literal",field:g===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});const A=f(e.parentDelegationRoleArn);if(e.parentDelegationRoleArn!==void 0&&A===void 0)return a({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});const b=h(e.phase,D);return e.phase!==void 0&&b===void 0?a({kind:"invalid_literal",field:"phase",reason:`must be one of ${D.map($=>`'${$}'`).join(", ")}`}):l({...s,registrar:t,delegatedSubdomain:c,hostedZoneId:g,adoptedNameServers:S,parentDelegationRoleArn:A,phase:b})}case"external-records":return l({...s,registrar:t})}}u(H,"parseDomainProps");function ue(n){return w(n)}u(ue,"parseDomainErrorMessage");function ce(n,e,t){const i=m.createSourceFile(e,n,m.ScriptTarget.Latest,!0,m.ScriptKind.TS),r=B(i);if(!r.success)return a(new Error(r.error.message));if(r.data===void 0)return a(new Error(`Domain '${t}': no 'new Domain(...)' call found in ${e} \u2014 the file is not a Fjall domain component.`));const d=H(r.data.propsObjectLiteral);return d.success?l(d.data):a(new Error(`Domain '${t}': infrastructure.ts could not be parsed (${d.error.kind}).`))}u(ce,"parseDomainInfrastructureSource");function Q(n){if(n===void 0)return l([]);if(!Array.isArray(n))return a({kind:"invalid_literal",field:"records",reason:"must be an array"});const e=[];for(let t=0;t<n.length;t++){const i=n[t];if(!k(i))return a({kind:"invalid_literal",field:`records[${t}]`,reason:"must be an object literal"});const r=W(i,t);if(!r.success)return r;e.push(r.data)}return l(e)}u(Q,"parseRecordsArray");function W(n,e){const t=f(n.type),i=f(n.name);if(t===void 0)return a({kind:"missing_field",field:`records[${e}].type`});if(i===void 0)return a({kind:"missing_field",field:`records[${e}].name`});const r=f(n.id);if(n.id!==void 0&&(r===void 0||!V.safeParse(r).success))return a({kind:"invalid_literal",field:`records[${e}].id`,reason:"must be a literal alphanumeric string starting with a letter \u2014 it becomes a CloudFormation logical-ID segment"});if(n.target!==void 0){if(!q.some(g=>g===t))return a({kind:"invalid_literal",field:`records[${e}]`,reason:`alias records must have type 'A' or 'AAAA', got '${t}'`});const c=ee(n.target);return l({kind:"alias",type:t,name:i,target:c,...r!==void 0?{id:r}:{}})}if(!M.some(c=>c===t))return a({kind:"invalid_literal",field:`records[${e}]`,reason:`unsupported record type '${t}'`});const d=X(n.value);if(d===void 0)return a({kind:"invalid_literal",field:`records[${e}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(n.value)})`});const o=L(n.ttl),s={kind:"standard",type:t,name:i,value:d,...o!==void 0?{ttl:o}:{},...r!==void 0?{id:r}:{}};return l(s)}u(W,"parseRecord");function X(n){if(n===void 0)return;if(typeof n=="string")return n;const e=_(n);if(e!==void 0)return e}u(X,"parseRecordValue");function ee(n){if(j(n))return ne(n);if(k(n)){const e=h(n.kind,z);if(e==="ecs"||e==="cdn"){const t=f(n.appName);if(t!==void 0)return{kind:e,appName:t}}if(e==="bucket"){const t=f(n.appName),i=f(n.bucketName);if(t!==void 0&&i!==void 0)return{kind:e,appName:t,bucketName:i}}if(e==="custom"){const t=f(n.dnsName),i=f(n.hostedZoneId);if(t!==void 0&&i!==void 0)return{kind:e,dnsName:t,hostedZoneId:i}}}return{kind:"unresolved",sourceText:y(n)}}u(ee,"parseTarget");function ne(n){const e=n.__call.trim(),t=e.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!t)return{kind:"unresolved",sourceText:e};const i=t[1],r=t[2]??"",d=v(r);switch(i){case"fjallApp":{const o=p(d,0);if(o===void 0)return{kind:"dynamic",sourceText:e};if(d.length<2)return{kind:"ecs",appName:o};const s=p(d,1);return s===void 0?{kind:"dynamic",sourceText:e}:{kind:"ecs",appName:o,computeName:s}}case"fjallCdn":{const o=p(d,0);if(o===void 0)return{kind:"dynamic",sourceText:e};if(d.length<2)return{kind:"cdn",appName:o};const s=p(d,1);return s===void 0?{kind:"dynamic",sourceText:e}:{kind:"cdn",appName:o,cdnName:s}}case"fjallBucket":{if(d.length<2)return{kind:"unresolved",sourceText:e};const o=p(d,0),s=p(d,1);return o===void 0||s===void 0?{kind:"dynamic",sourceText:e}:{kind:"bucket",appName:o,bucketName:s}}case"aliasTo":{if(d.length>=2){const o=p(d,0),s=p(d,1);return o!==void 0&&s!==void 0?{kind:"custom",dnsName:o,hostedZoneId:s}:{kind:"dynamic",sourceText:e}}if(d.length===1){const o=d[0]?.trim()??"",s=R(o,"dnsName"),c=R(o,"hostedZoneId");return s!==void 0&&c!==void 0?{kind:"custom",dnsName:s,hostedZoneId:c}:{kind:"dynamic",sourceText:e}}return{kind:"unresolved",sourceText:e}}default:return{kind:"unresolved",sourceText:e}}}u(ne,"resolveCallRefTarget");function v(n){const e=[];let t=0,i=null,r="";for(let o=0;o<n.length;o++){const s=n[o];if(i!==null){if(r+=s,s==="\\"&&o+1<n.length){const c=n[o+1];c!==void 0&&(r+=c,o+=1);continue}s===i&&(i=null);continue}if(s==='"'||s==="'"||s==="`"){i=s,r+=s;continue}if(s==="("||s==="{"||s==="["){t+=1,r+=s;continue}if(s===")"||s==="}"||s==="]"){t-=1,r+=s;continue}if(s===","&&t===0){e.push(r.trim()),r="";continue}r+=s}const d=r.trim();return d.length>0&&e.push(d),e}u(v,"splitTopLevelArgs");function p(n,e){const t=n[e];if(t===void 0)return;const i=t.trim();if(i.length<2)return;const r=i[0],d=i[i.length-1];if(r===d&&!(r!=='"'&&r!=="'"&&r!=="`"))return i.slice(1,-1)}u(p,"extractStringLiteralArg");function R(n,e){const t=n.trim().replace(/^\{|\}$/g,""),i=v(t);for(const r of i){const d=r.indexOf(":");if(d<0||r.slice(0,d).trim().replace(/["'`]/g,"")!==e)continue;const s=r.slice(d+1).trim();return p([s],0)}}u(R,"extractObjectFieldString");function te(n){if(n===void 0)return l([]);if(!Array.isArray(n))return a({kind:"invalid_literal",field:"certificates",reason:"must be an array"});const e=[];for(let t=0;t<n.length;t++){const i=n[t];if(typeof i=="string"){e.push({domainName:i});continue}if(!k(i))return a({kind:"invalid_literal",field:`certificates[${t}]`,reason:"must be a string or object literal"});const r=f(i.domainName);if(r===void 0)return a({kind:"missing_field",field:`certificates[${t}].domainName`});const d=_(i.subjectAlternativeNames),o=N(i.transparencyLogging),s=N(i.cloudFront);if(i.cloudFront!==void 0&&s===void 0)return a({kind:"invalid_literal",field:`certificates[${t}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});e.push({domainName:r,...d!==void 0?{subjectAlternativeNames:d}:{},...o!==void 0?{transparencyLogging:o}:{},...s!==void 0?{cloudFront:s}:{}})}return l(e)}u(te,"parseCertificatesArray");function re(n){if(n===void 0||!k(n))return;const e={};for(const[t,i]of Object.entries(n)){const r=f(i);r!==void 0&&(e[t]=r)}return Object.keys(e).length===0?void 0:e}u(re,"parseStringRecord");function y(n){if(n===void 0)return"undefined";if(n===null)return"null";if(typeof n=="string")return JSON.stringify(n);if(typeof n=="number"||typeof n=="boolean")return String(n);if(Array.isArray(n))return`[${n.map(e=>y(e)).join(", ")}]`;if(typeof n=="object"){if("__call"in n)return String(n.__call);if("__identifier"in n)return String(n.__identifier);if("__expression"in n)return String(n.__expression);if("__unknown"in n)return String(n.__unknown)}return String(n)}u(y,"stringifyParsedValue");export{B as findDomainConstructCall,ue as parseDomainErrorMessage,ce as parseDomainInfrastructureSource,H as parseDomainProps,v as splitTopLevelArgs};

package/dist/src/ast/parsers/common/astCommonParser.js

@@ -1 +1 @@
-var x=Object.defineProperty;var r=(n,e)=>x(n,"name",{value:e,configurable:!0});import*as s from"typescript";import{constIncludes as d}from"../../../schemas/constants.js";function f(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}r(f,"isPlainObject");function a(n){return f(n)&&"__identifier"in n}r(a,"isIdentifierRef");function y(n){return f(n)&&"__expression"in n}r(y,"isExpressionRef");function l(n){return f(n)&&"__call"in n}r(l,"isCallRef");function p(n){return f(n)&&!("__identifier"in n)&&!("__expression"in n)&&!("__call"in n)&&!("__unknown"in n)}r(p,"isParsedObject");function m(n){return typeof n=="string"?n:void 0}r(m,"asString");function A(n){return typeof n=="number"?n:void 0}r(A,"asNumber");function g(n){return typeof n=="boolean"?n:void 0}r(g,"asBoolean");function h(n){if(!Array.isArray(n))return;const e=[];for(const t of n)typeof t=="string"&&e.push(t);return e.length>0?e:void 0}r(h,"asStringArray");function j(n,e){const t=m(n);if(t!==void 0)return d(e,t)?t:void 0}r(j,"asStringUnion");function O(n){const e={};for(const[t,i]of Object.entries(n))i!==void 0&&(e[t]=i);return e}r(O,"omitUndefined");function u(n){if(n===null)return"null";if(n===void 0)return"undefined";if(typeof n=="string")return JSON.stringify(n);if(typeof n=="number"||typeof n=="boolean")return String(n);if(Array.isArray(n))return`[${n.map(u).join(", ")}]`;if(!f(n))return String(n);if(a(n))return n.__identifier;if(y(n))return n.__expression;if(l(n))return n.__call;if("__unknown"in n&&typeof n.__unknown=="string")return n.__unknown;const e=Object.entries(n);return e.length===0?"{}":`{ ${e.map(([i,o])=>`${i}: ${u(o)}`).join(", ")} }`}r(u,"parsedValueToSourceText");function C(n,e){const t=[];for(const[i,o]of Object.entries(n))e.has(i)||o===void 0||t.push({key:i,sourceText:u(o)});return t}r(C,"captureExtraProperties");function E(n,e){return s.isPropertyAssignment(n)&&s.isIdentifier(n.name)&&n.name.text===e}r(E,"isNamedProperty");function P(n){return s.isCallExpression(n)&&s.isPropertyAccessExpression(n.expression)&&n.expression.name.text==="getApp"&&s.isIdentifier(n.expression.expression)&&n.expression.expression.text==="App"}r(P,"isAppGetAppCall");function S(n,e){const{expression:t}=n;return s.isPropertyAccessExpression(t)&&t.name.text===e&&n.arguments.length>0}r(S,"isFactoryMethodCall");function I(n,e){let t;const i=r(o=>{t===void 0&&(t=e(o),t===void 0&&s.forEachChild(o,i))},"visit");return i(n),t}r(I,"findFirstInAst");function k(n,e){const t=[],i=r(o=>{const c=e(o);c!==null&&t.push(c),s.forEachChild(o,i)},"visit");return i(n),t}r(k,"collectFromAst");function F(n,e){return s.isCallExpression(n)&&s.isPropertyAccessExpression(n.expression)&&n.expression.name.text==="build"&&s.isIdentifier(n.expression.expression)&&n.expression.expression.text===e}r(F,"isFactoryBuildCall");function V(n){const e=n.parent;if(s.isVariableDeclaration(e)&&s.isIdentifier(e.name))return e.name.text}r(V,"extractVariableName");const w=r(()=>n=>n,"typed");function N(n){if(n!=null){if(n===!1)return!1;if(typeof n=="object"&&!Array.isArray(n))return n}}r(N,"asObjectOrFalse");function T(n,e){return n===!1?!1:p(n)?e(n):void 0}r(T,"parseBooleanOrConfig");function $(n,e){return p(n)?e(n):void 0}r($,"parseOptionalConfig");function B(n,e,t){const i=n[e];return p(i)?t(i):void 0}r(B,"extractSubConfig");import{parseObjectLiteral as L,evaluateExpression as U,findVariableValue as G,findObjectDeclaration as J,evaluatePropertyAccess as M,resolveTemplateLiteral as q}from"../../mutation/astExpressionEvaluator.js";export{g as asBoolean,A as asNumber,N as asObjectOrFalse,m as asString,h as asStringArray,j as asStringUnion,C as captureExtraProperties,k as collectFromAst,U as evaluateExpression,M as evaluatePropertyAccess,B as extractSubConfig,V as extractVariableName,I as findFirstInAst,J as findObjectDeclaration,G as findVariableValue,P as isAppGetAppCall,l as isCallRef,y as isExpressionRef,F as isFactoryBuildCall,S as isFactoryMethodCall,a as isIdentifierRef,E as isNamedProperty,p as isParsedObject,f as isPlainObject,O as omitUndefined,T as parseBooleanOrConfig,L as parseObjectLiteral,$ as parseOptionalConfig,u as parsedValueToSourceText,q as resolveTemplateLiteral,w as typed};
+var x=Object.defineProperty;var r=(n,e)=>x(n,"name",{value:e,configurable:!0});import*as s from"typescript";import{constIncludes as d}from"../../../schemas/constants.js";function f(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}r(f,"isPlainObject");function a(n){return f(n)&&"__identifier"in n}r(a,"isIdentifierRef");function y(n){return f(n)&&"__expression"in n}r(y,"isExpressionRef");function l(n){return f(n)&&"__call"in n}r(l,"isCallRef");function p(n){return f(n)&&!("__identifier"in n)&&!("__expression"in n)&&!("__call"in n)&&!("__unknown"in n)}r(p,"isParsedObject");function m(n){return typeof n=="string"?n:void 0}r(m,"asString");function A(n){return typeof n=="number"?n:void 0}r(A,"asNumber");function g(n){return typeof n=="boolean"?n:void 0}r(g,"asBoolean");function h(n){if(!Array.isArray(n))return;const e=[];for(const t of n){if(typeof t!="string")return;e.push(t)}return e.length>0?e:void 0}r(h,"asStringArray");function j(n,e){const t=m(n);if(t!==void 0)return d(e,t)?t:void 0}r(j,"asStringUnion");function O(n){const e={};for(const[t,i]of Object.entries(n))i!==void 0&&(e[t]=i);return e}r(O,"omitUndefined");function u(n){if(n===null)return"null";if(n===void 0)return"undefined";if(typeof n=="string")return JSON.stringify(n);if(typeof n=="number"||typeof n=="boolean")return String(n);if(Array.isArray(n))return`[${n.map(u).join(", ")}]`;if(!f(n))return String(n);if(a(n))return n.__identifier;if(y(n))return n.__expression;if(l(n))return n.__call;if("__unknown"in n&&typeof n.__unknown=="string")return n.__unknown;const e=Object.entries(n);return e.length===0?"{}":`{ ${e.map(([i,o])=>`${i}: ${u(o)}`).join(", ")} }`}r(u,"parsedValueToSourceText");function C(n,e){const t=[];for(const[i,o]of Object.entries(n))e.has(i)||o===void 0||t.push({key:i,sourceText:u(o)});return t}r(C,"captureExtraProperties");function E(n,e){return s.isPropertyAssignment(n)&&s.isIdentifier(n.name)&&n.name.text===e}r(E,"isNamedProperty");function P(n){return s.isCallExpression(n)&&s.isPropertyAccessExpression(n.expression)&&n.expression.name.text==="getApp"&&s.isIdentifier(n.expression.expression)&&n.expression.expression.text==="App"}r(P,"isAppGetAppCall");function S(n,e){const{expression:t}=n;return s.isPropertyAccessExpression(t)&&t.name.text===e&&n.arguments.length>0}r(S,"isFactoryMethodCall");function I(n,e){let t;const i=r(o=>{t===void 0&&(t=e(o),t===void 0&&s.forEachChild(o,i))},"visit");return i(n),t}r(I,"findFirstInAst");function k(n,e){const t=[],i=r(o=>{const c=e(o);c!==null&&t.push(c),s.forEachChild(o,i)},"visit");return i(n),t}r(k,"collectFromAst");function F(n,e){return s.isCallExpression(n)&&s.isPropertyAccessExpression(n.expression)&&n.expression.name.text==="build"&&s.isIdentifier(n.expression.expression)&&n.expression.expression.text===e}r(F,"isFactoryBuildCall");function V(n){const e=n.parent;if(s.isVariableDeclaration(e)&&s.isIdentifier(e.name))return e.name.text}r(V,"extractVariableName");const w=r(()=>n=>n,"typed");function N(n){if(n!=null){if(n===!1)return!1;if(typeof n=="object"&&!Array.isArray(n))return n}}r(N,"asObjectOrFalse");function T(n,e){return n===!1?!1:p(n)?e(n):void 0}r(T,"parseBooleanOrConfig");function $(n,e){return p(n)?e(n):void 0}r($,"parseOptionalConfig");function B(n,e,t){const i=n[e];return p(i)?t(i):void 0}r(B,"extractSubConfig");import{parseObjectLiteral as L,evaluateExpression as U,findVariableValue as G,findObjectDeclaration as J,evaluatePropertyAccess as M,resolveTemplateLiteral as q}from"../../mutation/astExpressionEvaluator.js";export{g as asBoolean,A as asNumber,N as asObjectOrFalse,m as asString,h as asStringArray,j as asStringUnion,C as captureExtraProperties,k as collectFromAst,U as evaluateExpression,M as evaluatePropertyAccess,B as extractSubConfig,V as extractVariableName,I as findFirstInAst,J as findObjectDeclaration,G as findVariableValue,P as isAppGetAppCall,l as isCallRef,y as isExpressionRef,F as isFactoryBuildCall,S as isFactoryMethodCall,a as isIdentifierRef,E as isNamedProperty,p as isParsedObject,f as isPlainObject,O as omitUndefined,T as parseBooleanOrConfig,L as parseObjectLiteral,$ as parseOptionalConfig,u as parsedValueToSourceText,q as resolveTemplateLiteral,w as typed};

package/dist/src/ast/parsers/resources/astPatternParser.d.ts

@@ -6,7 +6,8 @@
  */
 import * as ts from "typescript";
 import type { ApplicationResourcePlan } from "../../../schemas/resourceSchemas.js";
-import { type StaticSiteRouting } from "@fjall/util";
+import type { StaticSiteHstsConfig } from "../../../schemas/patternSchemas.js";
+import { type CloudFrontPriceClass, type StaticSiteRouting } from "@fjall/util";
 /** Parsed Lambda function configuration */
 export interface ParsedLambdaConfig {
     memorySize?: number;
@@ -103,8 +104,11 @@ export interface ParsedStaticSitePatternConfig {
     security?: {
         headers?: boolean;
         contentSecurityPolicy?: string;
+        hsts?: false | StaticSiteHstsConfig;
     };
     domain?: string;
+    zoneName?: string;
+    hostedZoneId?: string;
     forms?: {
         to?: string;
         from?: string;
@@ -113,6 +117,13 @@ export interface ParsedStaticSitePatternConfig {
     };
     cdn?: {
         behaviours?: unknown[];
+        priceClass?: CloudFrontPriceClass;
+        invalidateOnDeploy?: boolean;
+    };
+    accessGate?: {
+        type?: "basic-auth";
+        username?: string;
+        password?: string;
     };
     /**
      * Field paths that were PRESENT in the literal but resolved to a const

package/dist/src/ast/parsers/resources/astPatternParser.js

@@ -1 +1 @@
-var v=Object.defineProperty;var o=(t,e)=>v(t,"name",{value:e,configurable:!0});import*as h from"typescript";import{STATIC_SITE_ROUTING_VALUES as I}from"@fjall/util";import{asBoolean as g,asNumber as c,asString as s,asStringArray as _,asStringUnion as S,asObjectOrFalse as y,collectFromAst as C,extractSubConfig as d,extractVariableName as F,isFactoryBuildCall as D,isFactoryMethodCall as E,isParsedObject as A,isPlainObject as L,parseObjectLiteral as N,parseOptionalConfig as m,typed as x}from"../common/astCommonParser.js";import{parseDeadLetterQueueConfig as z}from"./astMessagingParser.js";const R=["Instance","Aurora"],T=["postgresql","mysql"];function b(t){if(!A(t))return;const e={...t.memorySize!==void 0&&{memorySize:c(t.memorySize)},...t.timeout!==void 0&&{timeout:c(t.timeout)},...t.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:c(t.ephemeralStorageSize)}};return Object.keys(e).length>0?e:void 0}o(b,"parseLambdaConfig");function k(t){return d(t,"database",e=>({type:S(e.type,R),databaseName:s(e.databaseName),databaseEngine:S(e.databaseEngine,T),deletionProtection:g(e.deletionProtection),backupRetention:c(e.backupRetention),port:c(e.port),publiclyAccessible:g(e.publiclyAccessible),allowedIpCidr:s(e.allowedIpCidr),instanceType:s(e.instanceType),allocatedStorage:c(e.allocatedStorage),multiAz:g(e.multiAz),allowVpcAccess:g(e.allowVpcAccess),monitoringInterval:c(e.monitoringInterval),preferredMaintenanceWindow:s(e.preferredMaintenanceWindow),snapshotIdentifier:s(e.snapshotIdentifier),snapshotUsername:s(e.snapshotUsername),readReplica:y(e.readReplica),writer:m(e.writer,x()),readers:y(e.readers),databaseInsights:y(e.databaseInsights),proxy:y(e.proxy),credentials:m(e.credentials,x()),encryption:m(e.encryption,x())}))}o(k,"extractPatternDatabaseConfig");function j(t){return d(t,"compute",e=>({server:m(e.server,b),imageOptimisation:m(e.imageOptimisation,b),revalidation:m(e.revalidation,b)}))}o(j,"extractPatternComputeConfig");function U(t){const e=o(n=>({versioned:g(n.versioned)}),"parseVersionedConfig");return d(t,"storage",n=>({assets:m(n.assets,e),cache:m(n.cache,e),media:m(n.media,e)}))}o(U,"extractPatternStorageConfig");function V(t){return d(t,"messaging",e=>({revalidationQueue:m(e.revalidationQueue,n=>({visibilityTimeout:c(n.visibilityTimeout),messageRetentionPeriod:c(n.messageRetentionPeriod),maxMessageSize:c(n.maxMessageSize),deadLetterQueue:z(n.deadLetterQueue)}))}))}o(V,"extractPatternMessagingConfig");function M(t){return d(t,"cdn",e=>({domainNames:_(e.domainNames),certificateArn:s(e.certificateArn)}))}o(M,"extractPatternCdnConfig");function B(t){return d(t,"environment",e=>{const n=Object.fromEntries(Object.entries(e).filter(r=>typeof r[1]=="string"));return Object.keys(n).length>0?n:void 0})}o(B,"extractPatternEnvironmentConfig");function Q(t,e){const n=$(t);return{name:e,source:s(t.source),build:d(t,"build",r=>({command:s(r.command),outputDir:s(r.outputDir)})),routing:S(t.routing,I),security:d(t,"security",r=>({headers:g(r.headers),contentSecurityPolicy:s(r.contentSecurityPolicy)})),domain:s(t.domain),forms:d(t,"forms",r=>({to:s(r.to),from:s(r.from),corsOrigin:s(r.corsOrigin),maxConcurrency:c(r.maxConcurrency)})),cdn:d(t,"cdn",r=>({behaviours:Array.isArray(r.behaviours)?r.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}o(Q,"extractStaticSiteConfig");function P(t){return L(t)&&("__identifier"in t||"__expression"in t||"__call"in t||"__unknown"in t)}o(P,"isUnreadableRef");function $(t){const e=[],n=o((i,a)=>{P(i)&&e.push(a)},"check");n(t.source,"source"),n(t.routing,"routing"),n(t.domain,"domain");const r=[[t.build,"build",["command","outputDir"]],[t.security,"security",["headers","contentSecurityPolicy"]],[t.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[t.cdn,"cdn",["behaviours"]]];for(const[i,a,u]of r)if(P(i))e.push(a);else if(A(i))for(const l of u)n(i[l],`${a}.${l}`);return e}o($,"collectUnreadableStaticSiteFields");function p(t){return t!==void 0&&t!==""}o(p,"isReadable");function O(t,e){return new Error(`Static-site pattern '${t}' in infrastructure.ts: Fjall could not read ${e.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}o(O,"unreadableStaticSiteFields");function w(t,e){const n=e.to;if(!p(n))throw O(t,["forms.to"]);return{to:n,...e.from!==void 0&&{from:e.from},...e.corsOrigin!==void 0&&{corsOrigin:e.corsOrigin},...e.maxConcurrency!==void 0&&{maxConcurrency:e.maxConcurrency}}}o(w,"readStaticSiteForms");function G(t,e){if(t.arguments.length<2)return null;const n=t.arguments[0],r=t.arguments[1];if(!h.isStringLiteral(n)||!h.isObjectLiteralExpression(r))return null;const i=n.text,a=N(r),u=a.type,l=F(e),f=s(a.name);return f?u==="payload"||u==="nextjs"?{variableName:l,constructId:i,type:u,config:{name:f,domain:s(a.domain),database:k(a),compute:j(a),storage:U(a),messaging:V(a),cdn:M(a),environment:B(a)},node:t}:u==="staticsite"?{variableName:l,constructId:i,type:"staticsite",config:Q(a,f),node:t}:null:null}o(G,"extractPatternResource");function J(t){return C(t,e=>{if(!h.isCallExpression(e)||!E(e,"addPattern"))return null;const n=e.arguments[0];return D(n,"PatternFactory")?G(n,e):null})}o(J,"findPatternResources");function X(t,e){if(!e||e.length===0)return;const n=e[0];if(t.pattern=n.type,n.type==="staticsite"){const{config:i}=n,a=i.source,u=i.build?.command,l=i.build?.outputDir;if(i.unreadableFields!==void 0)throw O(i.name,i.unreadableFields);if(!p(a)||!p(u)||!p(l)){const f=[];throw p(a)||f.push("source"),p(u)||f.push("build.command"),p(l)||f.push("build.outputDir"),O(i.name,f)}t.patternConfig={type:"staticsite",name:i.name,source:a,build:{command:u,outputDir:l},routing:i.routing,security:i.security,domain:i.domain,...i.forms!==void 0&&{forms:w(i.name,i.forms)},cdn:i.cdn};return}const{config:r}=n;t.patternConfig={type:n.type,name:r.name,domain:r.domain,database:r.database,compute:r.compute,storage:r.storage,messaging:r.messaging,cdn:r.cdn,environment:r.environment}}o(X,"applyPatternConfig");export{X as applyPatternConfig,J as findPatternResources};
+var v=Object.defineProperty;var o=(t,e)=>v(t,"name",{value:e,configurable:!0});import*as b from"typescript";import{CLOUDFRONT_PRICE_CLASS_VALUES as P,STATIC_SITE_ROUTING_VALUES as _}from"@fjall/util";import{asBoolean as p,asNumber as u,asString as a,asStringArray as D,asStringUnion as g,asObjectOrFalse as h,collectFromAst as N,extractSubConfig as m,extractVariableName as z,isFactoryBuildCall as L,isFactoryMethodCall as E,isParsedObject as S,isPlainObject as F,parseBooleanOrConfig as G,parseObjectLiteral as C,parseOptionalConfig as l,typed as O}from"../common/astCommonParser.js";import{parseDeadLetterQueueConfig as R}from"./astMessagingParser.js";const T=["Instance","Aurora"],k=["postgresql","mysql"];function A(t){if(!S(t))return;const e={...t.memorySize!==void 0&&{memorySize:u(t.memorySize)},...t.timeout!==void 0&&{timeout:u(t.timeout)},...t.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:u(t.ephemeralStorageSize)}};return Object.keys(e).length>0?e:void 0}o(A,"parseLambdaConfig");function U(t){return m(t,"database",e=>({type:g(e.type,T),databaseName:a(e.databaseName),databaseEngine:g(e.databaseEngine,k),deletionProtection:p(e.deletionProtection),backupRetention:u(e.backupRetention),port:u(e.port),publiclyAccessible:p(e.publiclyAccessible),allowedIpCidr:a(e.allowedIpCidr),instanceType:a(e.instanceType),allocatedStorage:u(e.allocatedStorage),multiAz:p(e.multiAz),allowVpcAccess:p(e.allowVpcAccess),monitoringInterval:u(e.monitoringInterval),preferredMaintenanceWindow:a(e.preferredMaintenanceWindow),snapshotIdentifier:a(e.snapshotIdentifier),snapshotUsername:a(e.snapshotUsername),readReplica:h(e.readReplica),writer:l(e.writer,O()),readers:h(e.readers),databaseInsights:h(e.databaseInsights),proxy:h(e.proxy),credentials:l(e.credentials,O()),encryption:l(e.encryption,O())}))}o(U,"extractPatternDatabaseConfig");function V(t){return m(t,"compute",e=>({server:l(e.server,A),imageOptimisation:l(e.imageOptimisation,A),revalidation:l(e.revalidation,A)}))}o(V,"extractPatternComputeConfig");function j(t){const e=o(n=>({versioned:p(n.versioned)}),"parseVersionedConfig");return m(t,"storage",n=>({assets:l(n.assets,e),cache:l(n.cache,e),media:l(n.media,e)}))}o(j,"extractPatternStorageConfig");function B(t){return m(t,"messaging",e=>({revalidationQueue:l(e.revalidationQueue,n=>({visibilityTimeout:u(n.visibilityTimeout),messageRetentionPeriod:u(n.messageRetentionPeriod),maxMessageSize:u(n.maxMessageSize),deadLetterQueue:R(n.deadLetterQueue)}))}))}o(B,"extractPatternMessagingConfig");function M(t){return m(t,"cdn",e=>({domainNames:D(e.domainNames),certificateArn:a(e.certificateArn)}))}o(M,"extractPatternCdnConfig");function Z(t){return m(t,"environment",e=>{const n=Object.fromEntries(Object.entries(e).filter(i=>typeof i[1]=="string"));return Object.keys(n).length>0?n:void 0})}o(Z,"extractPatternEnvironmentConfig");function w(t,e){const n=Q(t);return{name:e,source:a(t.source),build:m(t,"build",i=>({command:a(i.command),outputDir:a(i.outputDir)})),routing:g(t.routing,_),security:m(t,"security",i=>({headers:p(i.headers),contentSecurityPolicy:a(i.contentSecurityPolicy),hsts:G(i.hsts,r=>({maxAgeDays:u(r.maxAgeDays),includeSubdomains:p(r.includeSubdomains),preload:p(r.preload)}))})),domain:a(t.domain),zoneName:a(t.zoneName),hostedZoneId:a(t.hostedZoneId),forms:m(t,"forms",i=>({to:a(i.to),from:a(i.from),corsOrigin:a(i.corsOrigin),maxConcurrency:u(i.maxConcurrency)})),cdn:m(t,"cdn",i=>({behaviours:Array.isArray(i.behaviours)?i.behaviours:void 0,priceClass:g(i.priceClass,P),invalidateOnDeploy:p(i.invalidateOnDeploy)})),accessGate:m(t,"accessGate",i=>({type:g(i.type,["basic-auth"]),username:a(i.username),password:a(i.password)})),...n.length>0&&{unreadableFields:n}}}o(w,"extractStaticSiteConfig");function I(t){return F(t)&&("__identifier"in t||"__expression"in t||"__call"in t||"__unknown"in t)}o(I,"isUnreadableRef");function Q(t){const e=[],n=o((s,c)=>{I(s)&&e.push(c)},"check");n(t.source,"source"),n(t.routing,"routing"),n(t.domain,"domain"),n(t.zoneName,"zoneName"),n(t.hostedZoneId,"hostedZoneId");const i=[[t.build,"build",["command","outputDir"]],[t.security,"security",["headers","contentSecurityPolicy","hsts"]],[t.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[t.cdn,"cdn",["behaviours","priceClass","invalidateOnDeploy"]],[t.accessGate,"accessGate",["type","username","password"]]];for(const[s,c,y]of i)if(I(s))e.push(c);else if(S(s))for(const d of y)n(s[d],`${c}.${d}`);const r=t.security;if(S(r)&&S(r.hsts)){const s=r.hsts;for(const c of["maxAgeDays","includeSubdomains","preload"])n(s[c],`security.hsts.${c}`)}return e}o(Q,"collectUnreadableStaticSiteFields");function f(t){return t!==void 0&&t!==""}o(f,"isReadable");function x(t,e){return new Error(`Static-site pattern '${t}' in infrastructure.ts: Fjall could not read ${e.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}o(x,"unreadableStaticSiteFields");function $(t,e){const n=e.to;if(!f(n))throw x(t,["forms.to"]);return{to:n,...e.from!==void 0&&{from:e.from},...e.corsOrigin!==void 0&&{corsOrigin:e.corsOrigin},...e.maxConcurrency!==void 0&&{maxConcurrency:e.maxConcurrency}}}o($,"readStaticSiteForms");function W(t,e){const n=[];if(e.type!=="basic-auth"&&n.push("accessGate.type"),f(e.username)||n.push("accessGate.username"),f(e.password)||n.push("accessGate.password"),n.length>0||e.username===void 0||e.password===void 0)throw x(t,n);return{type:"basic-auth",username:e.username,password:e.password}}o(W,"readStaticSiteAccessGate");function K(t,e){if(t.arguments.length<2)return null;const n=t.arguments[0],i=t.arguments[1];if(!b.isStringLiteral(n)||!b.isObjectLiteralExpression(i))return null;const r=n.text,s=C(i),c=s.type,y=z(e),d=a(s.name);return d?c==="payload"||c==="nextjs"?{variableName:y,constructId:r,type:c,config:{name:d,domain:a(s.domain),database:U(s),compute:V(s),storage:j(s),messaging:B(s),cdn:M(s),environment:Z(s)},node:t}:c==="staticsite"?{variableName:y,constructId:r,type:"staticsite",config:w(s,d),node:t}:null:null}o(K,"extractPatternResource");function q(t){return N(t,e=>{if(!b.isCallExpression(e)||!E(e,"addPattern"))return null;const n=e.arguments[0];return L(n,"PatternFactory")?K(n,e):null})}o(q,"findPatternResources");function ee(t,e){if(!e||e.length===0)return;const n=e[0];if(t.pattern=n.type,n.type==="staticsite"){const{config:r}=n,s=r.source,c=r.build?.command,y=r.build?.outputDir;if(r.unreadableFields!==void 0)throw x(r.name,r.unreadableFields);if(!f(s)||!f(c)||!f(y)){const d=[];throw f(s)||d.push("source"),f(c)||d.push("build.command"),f(y)||d.push("build.outputDir"),x(r.name,d)}t.patternConfig={type:"staticsite",name:r.name,source:s,build:{command:c,outputDir:y},routing:r.routing,security:r.security,domain:r.domain,zoneName:r.zoneName,hostedZoneId:r.hostedZoneId,...r.forms!==void 0&&{forms:$(r.name,r.forms)},cdn:r.cdn,...r.accessGate!==void 0&&{accessGate:W(r.name,r.accessGate)}};return}const{config:i}=n;t.patternConfig={type:n.type,name:i.name,domain:i.domain,database:i.database,compute:i.compute,storage:i.storage,messaging:i.messaging,cdn:i.cdn,environment:i.environment}}o(ee,"applyPatternConfig");export{ee as applyPatternConfig,q as findPatternResources};

package/dist/src/dns/domainRecords.d.ts

@@ -6,6 +6,7 @@ export declare const TypedFjallTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObjec
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"cdn">;
     appName: z.ZodString;
+    cdnName: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"bucket">;
     appName: z.ZodString;
@@ -80,6 +81,7 @@ export declare const ParsedAliasRecordSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"cdn">;
         appName: z.ZodString;
+        cdnName: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"bucket">;
         appName: z.ZodString;
@@ -121,6 +123,7 @@ export declare const ParsedDnsRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"cdn">;
         appName: z.ZodString;
+        cdnName: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"bucket">;
         appName: z.ZodString;
@@ -199,6 +202,7 @@ export declare const ParsedDomainRecordsSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"cdn">;
             appName: z.ZodString;
+            cdnName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"bucket">;
             appName: z.ZodString;

package/dist/src/dns/domainRecords.js

@@ -1 +1 @@
-import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string(),computeName:e.string().min(1).optional()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),appName:e.string(),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),p=r.options.map(t=>t.shape.kind.value),n=e.enum(["A","AAAA"]),o=e.enum(["route53","external-delegated","external-records"]),u=e.enum(["zone","full"]),a=e.string().regex(/^[A-Za-z][A-Za-z0-9]*$/),i=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional(),id:a.optional()}).strict(),s=e.object({kind:e.literal("alias"),type:n,name:e.string(),target:r,id:a.optional()}).strict(),d=e.discriminatedUnion("kind",[i,s]),c=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional(),cloudFront:e.boolean().optional()}).strict(),l=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),m=e.enum(["indexed","stable"]),x=e.object({zoneName:e.string(),registrar:o,recordIds:m.optional(),hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),adoptedNameServers:e.array(e.string().min(1)).min(1).optional(),records:e.array(d),certificates:e.array(c),delegations:e.array(l)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"}).refine(t=>t.registrar==="external-delegated"||t.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(t=>t.registrar!=="external-delegated"||t.hostedZoneId===void 0==(t.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});export{n as AliasRecordTypeSchema,u as DomainDeployPhaseSchema,o as DomainRegistrarSchema,s as ParsedAliasRecordSchema,c as ParsedCertificateSchema,d as ParsedDnsRecordSchema,x as ParsedDomainRecordsSchema,i as ParsedStandardRecordSchema,l as ParsedSubdomainDelegationSchema,a as RecordConstructIdSchema,m as RecordIdsModeSchema,p as TYPED_FJALL_TARGET_KINDS,r as TypedFjallTargetSchema};
+import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string(),computeName:e.string().min(1).optional()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string(),cdnName:e.string().min(1).optional()}).strict(),e.object({kind:e.literal("bucket"),appName:e.string(),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),p=r.options.map(t=>t.shape.kind.value),n=e.enum(["A","AAAA"]),o=e.enum(["route53","external-delegated","external-records"]),u=e.enum(["zone","full"]),a=e.string().regex(/^[A-Za-z][A-Za-z0-9]*$/),i=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional(),id:a.optional()}).strict(),s=e.object({kind:e.literal("alias"),type:n,name:e.string(),target:r,id:a.optional()}).strict(),d=e.discriminatedUnion("kind",[i,s]),c=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional(),cloudFront:e.boolean().optional()}).strict(),l=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),m=e.enum(["indexed","stable"]),x=e.object({zoneName:e.string(),registrar:o,recordIds:m.optional(),hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),adoptedNameServers:e.array(e.string().min(1)).min(1).optional(),records:e.array(d),certificates:e.array(c),delegations:e.array(l)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"}).refine(t=>t.registrar==="external-delegated"||t.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(t=>t.registrar!=="external-delegated"||t.hostedZoneId===void 0==(t.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});export{n as AliasRecordTypeSchema,u as DomainDeployPhaseSchema,o as DomainRegistrarSchema,s as ParsedAliasRecordSchema,c as ParsedCertificateSchema,d as ParsedDnsRecordSchema,x as ParsedDomainRecordsSchema,i as ParsedStandardRecordSchema,l as ParsedSubdomainDelegationSchema,a as RecordConstructIdSchema,m as RecordIdsModeSchema,p as TYPED_FJALL_TARGET_KINDS,r as TypedFjallTargetSchema};

package/dist/src/dns/tsEmitter.js

@@ -1,6 +1,6 @@
-var A=Object.defineProperty;var o=(e,n)=>A(e,"name",{value:n,configurable:!0});import{getDomainStackName as k,toPascalCase as D}from"@fjall/util";const O=["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"],J=new Map(O.map((e,n)=>[e,n]));function b(e,n){return e==="@"&&n!=="@"?-1:e!=="@"&&n==="@"?1:e.localeCompare(n)}o(b,"compareName");function C(e,n){const t=Array.isArray(e)?e.join(`
+var A=Object.defineProperty;var o=(e,n)=>A(e,"name",{value:n,configurable:!0});import{getDomainStackName as k,toPascalCase as D}from"@fjall/util";const O=["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"],J=new Map(O.map((e,n)=>[e,n]));function C(e,n){return e==="@"&&n!=="@"?-1:e!=="@"&&n==="@"?1:e.localeCompare(n)}o(C,"compareName");function b(e,n){const t=Array.isArray(e)?e.join(`
 `):e,i=Array.isArray(n)?n.join(`
-`):n;return t.localeCompare(i)}o(C,"compareValue");function p(e){const n=e.kind==="standard"?0:1,t=J.get(e.type)??99;return[n,t,e.name]}o(p,"recordSortKey");function R(e){return[...e].sort((n,t)=>{const[i,c,f]=p(n),[s,d,m]=p(t);if(i!==s)return i-s;if(c!==d)return c-d;const u=b(f,m);return u!==0?u:n.kind==="standard"&&t.kind==="standard"?C(n.value,t.value):0})}o(R,"sortRecords");function I(e){return Array.isArray(e)?`[${e.map(t=>JSON.stringify(t)).join(", ")}]`:JSON.stringify(e)}o(I,"formatValue");function P(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`value: ${I(e.value)}`),e.ttl!==void 0&&n.push(`ttl: ${e.ttl}`),`{ ${n.join(", ")} }`}o(P,"emitStandardRecord");function v(e){switch(e.kind){case"ecs":return e.computeName===void 0?`fjallApp(${JSON.stringify(e.appName)})`:`fjallApp(${JSON.stringify(e.appName)}, ${JSON.stringify(e.computeName)})`;case"cdn":return`fjallCdn(${JSON.stringify(e.appName)})`;case"bucket":return`fjallBucket(${JSON.stringify(e.appName)}, ${JSON.stringify(e.bucketName)})`;case"custom":return`aliasTo(${JSON.stringify(e.dnsName)}, ${JSON.stringify(e.hostedZoneId)})`}}o(v,"emitAliasTarget");function x(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`target: ${v(e.target)}`),`{ ${n.join(", ")} }`}o(x,"emitAliasRecord");function T(e){return e.kind==="standard"?P(e):x(e)}o(T,"emitRecordObjectText");function w(e){return`    ${T(e)},`}o(w,"emitRecord");function z(e){const n=[`domainName: ${JSON.stringify(e.domainName)}`];if(e.subjectAlternativeNames&&e.subjectAlternativeNames.length>0){const t=e.subjectAlternativeNames.map(i=>JSON.stringify(i)).join(", ");n.push(`subjectAlternativeNames: [${t}]`)}return e.transparencyLogging!==void 0&&n.push(`transparencyLogging: ${e.transparencyLogging}`),e.cloudFront!==void 0&&n.push(`cloudFront: ${e.cloudFront}`),`    { ${n.join(", ")} },`}o(z,"emitCertificate");function B(e,n){if(n.length===0)return"";const t=["","// Delegations (D8 \u2014 child writes NS; no parent-side records here):"];for(const i of n)t.push(`//   ${i.subdomain}.${e} \u2192 deploy a Domain { registrar: "external-delegated",`,`//     zoneName: ${JSON.stringify(e)}, delegatedSubdomain: ${JSON.stringify(i.subdomain)} }`,`//     in account ${JSON.stringify(i.toAccount)}; the CLI injects parentDelegationRoleArn`,"//     (ManagedDomainBinding.delegationRoleArn) and the child UPSERTs its NS into this zone.");return t.join(`
+`):n;return t.localeCompare(i)}o(b,"compareValue");function p(e){const n=e.kind==="standard"?0:1,t=J.get(e.type)??99;return[n,t,e.name]}o(p,"recordSortKey");function R(e){return[...e].sort((n,t)=>{const[i,c,f]=p(n),[s,d,m]=p(t);if(i!==s)return i-s;if(c!==d)return c-d;const u=C(f,m);return u!==0?u:n.kind==="standard"&&t.kind==="standard"?b(n.value,t.value):0})}o(R,"sortRecords");function I(e){return Array.isArray(e)?`[${e.map(t=>JSON.stringify(t)).join(", ")}]`:JSON.stringify(e)}o(I,"formatValue");function P(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`value: ${I(e.value)}`),e.ttl!==void 0&&n.push(`ttl: ${e.ttl}`),`{ ${n.join(", ")} }`}o(P,"emitStandardRecord");function v(e){switch(e.kind){case"ecs":return e.computeName===void 0?`fjallApp(${JSON.stringify(e.appName)})`:`fjallApp(${JSON.stringify(e.appName)}, ${JSON.stringify(e.computeName)})`;case"cdn":return e.cdnName===void 0?`fjallCdn(${JSON.stringify(e.appName)})`:`fjallCdn(${JSON.stringify(e.appName)}, ${JSON.stringify(e.cdnName)})`;case"bucket":return`fjallBucket(${JSON.stringify(e.appName)}, ${JSON.stringify(e.bucketName)})`;case"custom":return`aliasTo(${JSON.stringify(e.dnsName)}, ${JSON.stringify(e.hostedZoneId)})`}}o(v,"emitAliasTarget");function x(e){const n=[`type: ${JSON.stringify(e.type)}`,`name: ${JSON.stringify(e.name)}`];return e.id!==void 0&&n.push(`id: ${JSON.stringify(e.id)}`),n.push(`target: ${v(e.target)}`),`{ ${n.join(", ")} }`}o(x,"emitAliasRecord");function T(e){return e.kind==="standard"?P(e):x(e)}o(T,"emitRecordObjectText");function w(e){return`    ${T(e)},`}o(w,"emitRecord");function z(e){const n=[`domainName: ${JSON.stringify(e.domainName)}`];if(e.subjectAlternativeNames&&e.subjectAlternativeNames.length>0){const t=e.subjectAlternativeNames.map(i=>JSON.stringify(i)).join(", ");n.push(`subjectAlternativeNames: [${t}]`)}return e.transparencyLogging!==void 0&&n.push(`transparencyLogging: ${e.transparencyLogging}`),e.cloudFront!==void 0&&n.push(`cloudFront: ${e.cloudFront}`),`    { ${n.join(", ")} },`}o(z,"emitCertificate");function B(e,n){if(n.length===0)return"";const t=["","// Delegations (D8 \u2014 child writes NS; no parent-side records here):"];for(const i of n)t.push(`//   ${i.subdomain}.${e} \u2192 deploy a Domain { registrar: "external-delegated",`,`//     zoneName: ${JSON.stringify(e)}, delegatedSubdomain: ${JSON.stringify(i.subdomain)} }`,`//     in account ${JSON.stringify(i.toAccount)}; the CLI injects parentDelegationRoleArn`,"//     (ManagedDomainBinding.delegationRoleArn) and the child UPSERTs its NS into this zone.");return t.join(`
 `)+`
 `}o(B,"emitDelegationGuidance");function F(e){const n={fjallApp:!1,fjallCdn:!1,fjallBucket:!1,aliasTo:!1};for(const t of e)if(t.kind==="alias")switch(t.target.kind){case"ecs":n.fjallApp=!0;break;case"cdn":n.fjallCdn=!0;break;case"bucket":n.fjallBucket=!0;break;case"custom":n.aliasTo=!0;break}return n}o(F,"computeUsedHelpers");function L(e){const n=["App","Domain"];return e.aliasTo&&n.push("aliasTo"),e.fjallApp&&n.push("fjallApp"),e.fjallBucket&&n.push("fjallBucket"),e.fjallCdn&&n.push("fjallCdn"),`import {
 ${n.map(i=>`  ${i},`).join(`
@@ -8,7 +8,7 @@ ${n.map(i=>`  ${i},`).join(`
 } from "@fjall/components-infrastructure";`}o(L,"emitImports");function E(e){return D(e.split(".").join(""))}o(E,"safeZoneName");function g(e,n){if(e==="@")return e;const t=e.endsWith(".")?e.slice(0,-1):e;return t===n?"@":t.endsWith(`.${n}`)?t.slice(0,-(n.length+1)):e}o(g,"toRelativeRecordName");function Z(e){return e.registrar==="external-delegated"&&e.delegatedSubdomain?`${e.delegatedSubdomain}.${e.zoneName}`:e.zoneName}o(Z,"effectiveZoneName");function y(e,n,t){if(n.length===0)return`  ${e}: [],`;const i=n.map(t).join(`
 `);return`  ${e}: [
 ${i}
-  ],`}o(y,"emitBlock");function K(e,n={}){const t=k(n.componentName??e.zoneName),i=E(n.componentName??e.zoneName),c=F(e.records),f=L(c),s=Z(e),d=e.records.map(a=>a.kind==="standard"?{...a,name:g(a.name,s)}:{...a,name:g(a.name,s)}),m=R(d),u=[...e.certificates].sort((a,l)=>a.domainName.localeCompare(l.domainName)),h=[...e.delegations].sort((a,l)=>a.subdomain.localeCompare(l.subdomain)),r=[];if(e.recordIds!==void 0&&r.push(`  recordIds: ${JSON.stringify(e.recordIds)},`),e.hostedZoneId&&r.push(`  hostedZoneId: ${JSON.stringify(e.hostedZoneId)},`),e.adoptedNameServers&&e.adoptedNameServers.length>0){const a=e.adoptedNameServers.map(l=>JSON.stringify(l)).join(", ");r.push(`  adoptedNameServers: [${a}],`)}e.delegatedSubdomain&&r.push(`  delegatedSubdomain: ${JSON.stringify(e.delegatedSubdomain)},`),e.registrar==="external-delegated"&&r.push("  // D8 child-writes delegation + two-phase deploy: both values arrive","  // via CDK context, injected by the Fjall CLI at deploy time (see the","  // reads above `new Domain`). Set a literal parentDelegationRoleArn","  // here only for out-of-band deploys.",'  ...(domainDeployPhase === "zone" || domainDeployPhase === "full"',"    ? { phase: domainDeployPhase }","    : {}),",'  ...(typeof parentDelegationRoleArn === "string" &&','  parentDelegationRoleArn !== ""',"    ? { parentDelegationRoleArn }","    : {}),");const N=y("certificates",u,z),S=y("records",m,w),$=e.registrar==="external-records"?"":B(e.zoneName,h),j=e.registrar==="external-delegated"?`
+  ],`}o(y,"emitBlock");function K(e,n={}){const t=k(n.componentName??e.zoneName),i=E(n.componentName??e.zoneName),c=F(e.records),f=L(c),s=Z(e),d=e.records.map(a=>a.kind==="standard"?{...a,name:g(a.name,s)}:{...a,name:g(a.name,s)}),m=R(d),u=[...e.certificates].sort((a,l)=>a.domainName.localeCompare(l.domainName)),N=[...e.delegations].sort((a,l)=>a.subdomain.localeCompare(l.subdomain)),r=[];if(e.recordIds!==void 0&&r.push(`  recordIds: ${JSON.stringify(e.recordIds)},`),e.hostedZoneId&&r.push(`  hostedZoneId: ${JSON.stringify(e.hostedZoneId)},`),e.adoptedNameServers&&e.adoptedNameServers.length>0){const a=e.adoptedNameServers.map(l=>JSON.stringify(l)).join(", ");r.push(`  adoptedNameServers: [${a}],`)}e.delegatedSubdomain&&r.push(`  delegatedSubdomain: ${JSON.stringify(e.delegatedSubdomain)},`),e.registrar==="external-delegated"&&r.push("  // D8 child-writes delegation + two-phase deploy: both values arrive","  // via CDK context, injected by the Fjall CLI at deploy time (see the","  // reads above `new Domain`). Set a literal parentDelegationRoleArn","  // here only for out-of-band deploys.",'  ...(domainDeployPhase === "zone" || domainDeployPhase === "full"',"    ? { phase: domainDeployPhase }","    : {}),",'  ...(typeof parentDelegationRoleArn === "string" &&','  parentDelegationRoleArn !== ""',"    ? { parentDelegationRoleArn }","    : {}),");const h=y("certificates",u,z),S=y("records",m,w),$=e.registrar==="external-records"?"":B(e.zoneName,N),j=e.registrar==="external-delegated"?`
 // Injected by the Fjall CLI at deploy time (D8) \u2014 do not set these by hand.
 const domainDeployPhase: unknown = app.node.tryGetContext(
   "fjall:domainDeployPhase"
@@ -40,7 +40,7 @@ new Domain(stack, ${JSON.stringify(i)}, {
   zoneName: ${JSON.stringify(e.zoneName)},
 ${r.length>0?r.join(`
 `)+`
-`:""}${N}
+`:""}${h}
 ${S}
 });
 ${$}`}o(K,"emitDomainTs");export{K as emitDomainTs,T as emitRecordObjectText};

package/dist/src/generation/generatePatternCode.js

@@ -1,14 +1,14 @@
-var $=Object.defineProperty;var r=(n,e)=>$(n,"name",{value:e,configurable:!0});import{formatValue as l}from"./common.js";import{PATTERN_INVOCATION as y}from"./statementInvocation.js";import{patternConstructId as b}from"@fjall/util";const m=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function c(n,e,t){return e===void 0?"":`
-${t}${n}: ${e},`}r(c,"emitScalar");function s(n,e,t){return e===void 0?"":`
-${t}${n}: ${JSON.stringify(e)},`}r(s,"emitStringField");function d(n,e,t){return e===void 0?"":e===!1?`
+var $=Object.defineProperty;var r=(n,e)=>$(n,"name",{value:e,configurable:!0});import{formatValue as l}from"./common.js";import{PATTERN_INVOCATION as y}from"./statementInvocation.js";import{patternConstructId as b}from"@fjall/util";const s=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function c(n,e,t){return e===void 0?"":`
+${t}${n}: ${e},`}r(c,"emitScalar");function m(n,e,t){return e===void 0?"":`
+${t}${n}: ${JSON.stringify(e)},`}r(m,"emitStringField");function d(n,e,t){return e===void 0?"":e===!1?`
 ${t}${n}: false,`:`
 ${t}${n}: ${l(e,t)},`}r(d,"emitObjectOrFalse");function a(n,e,t){return e===void 0||Object.keys(e).length===0?"":`
-${t}${n}: ${l(e,t)},`}r(a,"emitObject");function g(n){const e=n??{},t="      ",o=e.type??m.database.type,u=e.backupRetention??m.database.backupRetention,p=e.deletionProtection??m.database.deletionProtection;let i=`
-${t}type: "${o}",`;return i+=s("databaseName",e.databaseName,t),i+=s("databaseEngine",e.databaseEngine,t),o==="Instance"&&e.instanceType!==void 0&&(i+=s("instanceType",e.instanceType,t)),i+=c("allocatedStorage",e.allocatedStorage,t),i+=c("port",e.port,t),i+=`
+${t}${n}: ${l(e,t)},`}r(a,"emitObject");function g(n){const e=n??{},t="      ",o=e.type??s.database.type,u=e.backupRetention??s.database.backupRetention,p=e.deletionProtection??s.database.deletionProtection;let i=`
+${t}type: "${o}",`;return i+=m("databaseName",e.databaseName,t),i+=m("databaseEngine",e.databaseEngine,t),o==="Instance"&&e.instanceType!==void 0&&(i+=m("instanceType",e.instanceType,t)),i+=c("allocatedStorage",e.allocatedStorage,t),i+=c("port",e.port,t),i+=`
 ${t}backupRetention: ${u},`,i+=`
-${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t),i+=s("allowedIpCidr",e.allowedIpCidr,t),i+=c("multiAz",e.multiAz,t),i+=c("allowVpcAccess",e.allowVpcAccess,t),i+=c("monitoringInterval",e.monitoringInterval,t),i+=s("preferredMaintenanceWindow",e.preferredMaintenanceWindow,t),i+=s("snapshotIdentifier",e.snapshotIdentifier,t),i+=s("snapshotUsername",e.snapshotUsername,t),i+=d("readReplica",e.readReplica,t),i+=a("writer",e.writer,t),i+=d("readers",e.readers,t),i+=d("databaseInsights",e.databaseInsights,t),i+=d("proxy",e.proxy,t),i+=a("credentials",e.credentials,t),i+=a("encryption",e.encryption,t),`
+${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t),i+=m("allowedIpCidr",e.allowedIpCidr,t),i+=c("multiAz",e.multiAz,t),i+=c("allowVpcAccess",e.allowVpcAccess,t),i+=c("monitoringInterval",e.monitoringInterval,t),i+=m("preferredMaintenanceWindow",e.preferredMaintenanceWindow,t),i+=m("snapshotIdentifier",e.snapshotIdentifier,t),i+=m("snapshotUsername",e.snapshotUsername,t),i+=d("readReplica",e.readReplica,t),i+=a("writer",e.writer,t),i+=d("readers",e.readers,t),i+=d("databaseInsights",e.databaseInsights,t),i+=d("proxy",e.proxy,t),i+=a("credentials",e.credentials,t),i+=a("encryption",e.encryption,t),`
     database: {${i}
-    },`}r(g,"emitDatabaseBlock");function S(n){const e=n??{},t=e.server?.memorySize??m.compute.server.memorySize,o=e.server?.timeout??m.compute.server.timeout,u=e.imageOptimisation?.memorySize??m.compute.imageOptimisation.memorySize,p=e.imageOptimisation?.timeout??m.compute.imageOptimisation.timeout,i=e.revalidation?.memorySize??m.compute.revalidation.memorySize,f=e.revalidation?.timeout??m.compute.revalidation.timeout;return`
+    },`}r(g,"emitDatabaseBlock");function S(n){const e=n??{},t=e.server?.memorySize??s.compute.server.memorySize,o=e.server?.timeout??s.compute.server.timeout,u=e.imageOptimisation?.memorySize??s.compute.imageOptimisation.memorySize,p=e.imageOptimisation?.timeout??s.compute.imageOptimisation.timeout,i=e.revalidation?.memorySize??s.compute.revalidation.memorySize,f=e.revalidation?.timeout??s.compute.revalidation.timeout;return`
     compute: {
       server: {
         memorySize: ${t},
@@ -22,13 +22,13 @@ ${t}deletionProtection: ${p},`,i+=c("publiclyAccessible",e.publiclyAccessible,t)
         memorySize: ${i},
         timeout: ${f},
       },
-    },`}r(S,"emitComputeBlock");function v(n){return a("storage",n,"    ")}r(v,"emitStorageBlock");function O(n){return a("messaging",n,"    ")}r(O,"emitMessagingBlock");function z(n){return a("cdn",n,"    ")}r(z,"emitCdnBlock");function I(n){return a("environment",n,"    ")}r(I,"emitEnvironmentBlock");function T(n){const e="    ";let t="";return t+=s("source",n.source,e),t+=a("build",n.build,e),t+=s("routing",n.routing,e),t+=a("security",n.security,e),n.domain!==void 0&&n.domain!==""&&(t+=`
-${e}domain: ${JSON.stringify(n.domain)},`),t+=a("forms",n.forms,e),t+=a("cdn",n.cdn,e),t}r(T,"emitStaticSiteFields");function N(n){if(!n.patternConfig)return"";const e=n.patternConfig,t=b(e.name,e.type);let o=`app.${y.appMethod}(
+    },`}r(S,"emitComputeBlock");function v(n){return a("storage",n,"    ")}r(v,"emitStorageBlock");function z(n){return a("messaging",n,"    ")}r(z,"emitMessagingBlock");function I(n){return a("cdn",n,"    ")}r(I,"emitCdnBlock");function O(n){return a("environment",n,"    ")}r(O,"emitEnvironmentBlock");function T(n){const e="    ";let t="";return t+=m("source",n.source,e),t+=a("build",n.build,e),t+=m("routing",n.routing,e),t+=a("security",n.security,e),n.domain!==void 0&&n.domain!==""&&(t+=`
+${e}domain: ${JSON.stringify(n.domain)},`),t+=m("zoneName",n.zoneName,e),t+=m("hostedZoneId",n.hostedZoneId,e),t+=a("forms",n.forms,e),t+=a("cdn",n.cdn,e),t+=a("accessGate",n.accessGate,e),t}r(T,"emitStaticSiteFields");function A(n){if(!n.patternConfig)return"";const e=n.patternConfig,t=b(e.name,e.type);let o=`app.${y.appMethod}(
   ${y.factory}.build("${t}", {
     type: "${e.type}",
     name: "${e.name}",`;return e.type==="payload"||e.type==="nextjs"?(e.domain!==void 0&&e.domain!==""&&(o+=`
-    domain: "${e.domain}",`),o+=g(e.database),o+=S(e.compute),o+=v(e.storage),o+=O(e.messaging),o+=z(e.cdn),o+=I(e.environment)):o+=T(e),o+=`
+    domain: "${e.domain}",`),o+=g(e.database),o+=S(e.compute),o+=v(e.storage),o+=z(e.messaging),o+=I(e.cdn),o+=O(e.environment)):o+=T(e),o+=`
   })
 );
 
-`,o}r(N,"generatePatternCodeWithComments");export{m as OPENNEXT_DEFAULTS,N as generatePatternCodeWithComments};
+`,o}r(A,"generatePatternCodeWithComments");export{s as OPENNEXT_DEFAULTS,A as generatePatternCodeWithComments};

package/dist/src/planning/staticSitePlanning.d.ts

@@ -4,10 +4,17 @@ import { type StaticSiteBuildConfig, type StaticSiteCdnConfig, type StaticSiteFo
 /**
  * Options for planning a static-site application.
  *
- * A static site is a networkless app (design §13) — it has no tier, database,
- * compute or VPC, so none of the OpenNext tier-preset machinery applies. The
- * plan carries only the pattern config; the CDK `StaticSite` construct owns the
- * private-S3 + CloudFront/OAC topology.
+ * A static site is a networkless app — it has no tier, database, compute or
+ * VPC, so none of the OpenNext tier-preset machinery applies (deliberate:
+ * the pattern's controls are orthogonal knobs, not correlated sizing, so a
+ * tier axis has nothing to bundle). The plan carries only the pattern
+ * config; the CDK `StaticSite` construct owns the private-S3 +
+ * CloudFront/OAC topology.
+ *
+ * This is the CREATE-flow subset of `StaticSitePatternConfigSchema`:
+ * authored-only fields with no create flag (`zoneName`, `hostedZoneId`,
+ * `accessGate`, `cdn.priceClass`, …) enter by editing infrastructure.ts,
+ * not here.
  */
 export interface StaticSiteResourceOptions {
     /** Repo root the build runs in and assets are uploaded from. */

package/dist/src/schemas/applicationSchemas.d.ts

@@ -277,8 +277,15 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
         security: z.ZodOptional<z.ZodObject<{
             headers: z.ZodOptional<z.ZodBoolean>;
             contentSecurityPolicy: z.ZodOptional<z.ZodString>;
+            hsts: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+                maxAgeDays: z.ZodOptional<z.ZodNumber>;
+                includeSubdomains: z.ZodOptional<z.ZodBoolean>;
+                preload: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>]>>;
         }, z.core.$strict>>;
         domain: z.ZodOptional<z.ZodString>;
+        zoneName: z.ZodOptional<z.ZodString>;
+        hostedZoneId: z.ZodOptional<z.ZodString>;
         forms: z.ZodOptional<z.ZodObject<{
             to: z.ZodString;
             from: z.ZodOptional<z.ZodString>;
@@ -287,6 +294,17 @@ export declare const ApplicationResourcePlanSchema: z.ZodObject<{
         }, z.core.$strict>>;
         cdn: z.ZodOptional<z.ZodObject<{
             behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+            priceClass: z.ZodOptional<z.ZodEnum<{
+                PriceClass_100: "PriceClass_100";
+                PriceClass_200: "PriceClass_200";
+                PriceClass_All: "PriceClass_All";
+            }>>;
+            invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        accessGate: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"basic-auth">;
+            username: z.ZodString;
+            password: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>], "type">>;
     owner: z.ZodOptional<z.ZodString>;

package/dist/src/schemas/patternSchemas.d.ts

@@ -434,12 +434,28 @@ export declare const StaticSiteBuildConfigSchema: z.ZodObject<{
     outputDir: z.ZodString;
 }, z.core.$strict>;
 export type StaticSiteBuildConfig = z.infer<typeof StaticSiteBuildConfigSchema>;
+/**
+ * HSTS directives a static site may set. Not exported as a schema — only the
+ * inferred type leaves this module, so the union below stays the single place
+ * the shape is spelled out.
+ */
+declare const StaticSiteHstsConfigSchema: z.ZodObject<{
+    maxAgeDays: z.ZodOptional<z.ZodNumber>;
+    includeSubdomains: z.ZodOptional<z.ZodBoolean>;
+    preload: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type StaticSiteHstsConfig = z.infer<typeof StaticSiteHstsConfigSchema>;
 /**
  * Security-header configuration for a static site.
  */
 export declare const StaticSiteSecurityConfigSchema: z.ZodObject<{
     headers: z.ZodOptional<z.ZodBoolean>;
     contentSecurityPolicy: z.ZodOptional<z.ZodString>;
+    hsts: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        includeSubdomains: z.ZodOptional<z.ZodBoolean>;
+        preload: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>]>>;
 }, z.core.$strict>;
 export type StaticSiteSecurityConfig = z.infer<typeof StaticSiteSecurityConfigSchema>;
 /**
@@ -467,8 +483,26 @@ export type StaticSiteFormsConfig = z.infer<typeof StaticSiteFormsConfigSchema>;
  */
 export declare const StaticSiteCdnConfigSchema: z.ZodObject<{
     behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+    priceClass: z.ZodOptional<z.ZodEnum<{
+        PriceClass_100: "PriceClass_100";
+        PriceClass_200: "PriceClass_200";
+        PriceClass_All: "PriceClass_All";
+    }>>;
+    invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
 export type StaticSiteCdnConfig = z.infer<typeof StaticSiteCdnConfigSchema>;
+/**
+ * Basic-auth access gate for a static site — an edge-side obscurity gate for
+ * staging sign-off (keeps an unlaunched site out of casual view and search
+ * indexes), NOT a security boundary: the credentials sit in plain text in
+ * infrastructure.ts and in the distribution's viewer-function code.
+ */
+export declare const StaticSiteAccessGateConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"basic-auth">;
+    username: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strict>;
+export type StaticSiteAccessGateConfig = z.infer<typeof StaticSiteAccessGateConfigSchema>;
 /**
  * Static-site pattern configuration.
  *
@@ -491,8 +525,15 @@ export declare const StaticSitePatternConfigSchema: z.ZodObject<{
     security: z.ZodOptional<z.ZodObject<{
         headers: z.ZodOptional<z.ZodBoolean>;
         contentSecurityPolicy: z.ZodOptional<z.ZodString>;
+        hsts: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            includeSubdomains: z.ZodOptional<z.ZodBoolean>;
+            preload: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>]>>;
     }, z.core.$strict>>;
     domain: z.ZodOptional<z.ZodString>;
+    zoneName: z.ZodOptional<z.ZodString>;
+    hostedZoneId: z.ZodOptional<z.ZodString>;
     forms: z.ZodOptional<z.ZodObject<{
         to: z.ZodString;
         from: z.ZodOptional<z.ZodString>;
@@ -501,6 +542,17 @@ export declare const StaticSitePatternConfigSchema: z.ZodObject<{
     }, z.core.$strict>>;
     cdn: z.ZodOptional<z.ZodObject<{
         behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        priceClass: z.ZodOptional<z.ZodEnum<{
+            PriceClass_100: "PriceClass_100";
+            PriceClass_200: "PriceClass_200";
+            PriceClass_All: "PriceClass_All";
+        }>>;
+        invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    accessGate: z.ZodOptional<z.ZodObject<{
+        type: z.ZodLiteral<"basic-auth">;
+        username: z.ZodString;
+        password: z.ZodString;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type StaticSitePatternConfig = z.infer<typeof StaticSitePatternConfigSchema>;
@@ -766,8 +818,15 @@ export declare const PatternConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     security: z.ZodOptional<z.ZodObject<{
         headers: z.ZodOptional<z.ZodBoolean>;
         contentSecurityPolicy: z.ZodOptional<z.ZodString>;
+        hsts: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+            maxAgeDays: z.ZodOptional<z.ZodNumber>;
+            includeSubdomains: z.ZodOptional<z.ZodBoolean>;
+            preload: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>]>>;
     }, z.core.$strict>>;
     domain: z.ZodOptional<z.ZodString>;
+    zoneName: z.ZodOptional<z.ZodString>;
+    hostedZoneId: z.ZodOptional<z.ZodString>;
     forms: z.ZodOptional<z.ZodObject<{
         to: z.ZodString;
         from: z.ZodOptional<z.ZodString>;
@@ -776,6 +835,17 @@ export declare const PatternConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>>;
     cdn: z.ZodOptional<z.ZodObject<{
         behaviours: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+        priceClass: z.ZodOptional<z.ZodEnum<{
+            PriceClass_100: "PriceClass_100";
+            PriceClass_200: "PriceClass_200";
+            PriceClass_All: "PriceClass_All";
+        }>>;
+        invalidateOnDeploy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    accessGate: z.ZodOptional<z.ZodObject<{
+        type: z.ZodLiteral<"basic-auth">;
+        username: z.ZodString;
+        password: z.ZodString;
     }, z.core.$strict>>;
 }, z.core.$strict>], "type">;
 /**
@@ -826,3 +896,4 @@ export type PayloadCdnConfig = z.infer<typeof PayloadCdnConfigSchema>;
 export type PayloadPatternConfig = z.infer<typeof PayloadPatternConfigSchema>;
 export type NextJSPatternConfig = z.infer<typeof NextJSPatternConfigSchema>;
 export type PatternConfig = z.infer<typeof PatternConfigSchema>;
+export {};

package/dist/src/schemas/patternSchemas.js

@@ -1 +1 @@
-import{z as t}from"zod";import{VALIDATION_MESSAGES as o,VALIDATION_PATTERNS as n}from"../validation/patterns.js";import{BackupRetentionSchema as c,MonitoringIntervalSchema as T,DatabasePortSchema as u,ProxyConfigOrFalseSchema as R,ReadReplicaConfigOrFalseSchema as M,AuroraWriterConfigSchema as b,AuroraReadersConfigOrFalseSchema as f,DatabaseInsightsConfigOrFalseSchema as h,CredentialsConfigSchema as N,EncryptionConfigSchema as C}from"./databaseSchemas.js";import{LambdaMemorySchema as l}from"./computeSchemas.js";import{PATTERN_DATABASE_TYPES as p,DATABASE_ENGINES as O}from"./constants.js";import{STATIC_SITE_ROUTING_VALUES as _,isAddressAtDomain as x}from"@fjall/util";const a=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:t.number().int(o.EPHEMERAL_STORAGE.INTEGER).min(512,o.EPHEMERAL_STORAGE.MIN).max(10240,o.EPHEMERAL_STORAGE.MAX).optional()}).strict(),E=t.object({type:t.enum(p).optional(),databaseName:t.string().optional(),databaseEngine:t.enum(O).optional(),deletionProtection:t.boolean().optional(),backupRetention:c.optional(),port:u.optional(),publiclyAccessible:t.boolean().optional(),allowedIpCidr:t.string().optional(),instanceType:t.string().optional(),allocatedStorage:t.number().int(o.ALLOCATED_STORAGE.INTEGER).min(20,o.ALLOCATED_STORAGE.MIN).max(65536,o.ALLOCATED_STORAGE.MAX).optional(),multiAz:t.boolean().optional(),readReplica:M.optional(),writer:b.optional(),readers:f.optional(),allowVpcAccess:t.boolean().optional(),monitoringInterval:T.optional(),preferredMaintenanceWindow:t.string().optional(),databaseInsights:h.optional(),proxy:R.optional(),credentials:N.optional(),encryption:C.optional(),snapshotIdentifier:t.string().optional(),snapshotUsername:t.string().optional()}).strict(),S=t.object({server:a.optional(),imageOptimisation:a.optional(),revalidation:a.optional()}).strict(),r=t.object({versioned:t.boolean().optional()}).strict(),d=t.object({assets:r.optional(),cache:r.optional(),media:r.optional()}).strict(),y=t.object({visibilityTimeout:t.number().int(o.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,o.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,o.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:t.number().int(o.SQS.RETENTION_PERIOD.INTEGER).min(60,o.SQS.RETENTION_PERIOD.MIN).max(1209600,o.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:t.number().int(o.MAX_MESSAGE_SIZE.INTEGER).min(1024,o.MAX_MESSAGE_SIZE.MIN).max(262144,o.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:t.union([t.literal(!1),t.object({enabled:t.boolean().optional(),maxReceiveCount:t.number().int(o.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,o.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,o.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),A=t.object({revalidationQueue:y.optional()}).strict(),I=t.object({domainNames:t.array(t.string()).optional(),certificateArn:t.string().optional()}).strict(),g=t.record(t.string().regex(n.ENV_VAR_NAME,o.ENV_VAR_NAME),t.string()).optional(),P=t.object({type:t.literal("payload"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:I.optional(),environment:g}).strict(),D=t.object({type:t.literal("nextjs"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:I.optional(),environment:g}).strict(),L=t.enum(_),U=t.object({command:t.string().min(1,o.REQUIRED.BUILD_COMMAND),outputDir:t.string().min(1,o.REQUIRED.OUTPUT_DIR)}).strict(),G=t.object({headers:t.boolean().optional(),contentSecurityPolicy:t.string().optional()}).strict(),j=t.object({to:t.string().min(1,o.REQUIRED.FORMS_TO).regex(n.EMAIL,o.EMAIL),from:t.string().regex(n.EMAIL,o.EMAIL).optional(),corsOrigin:t.string().regex(n.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:t.number().int().min(1).max(100).optional()}).strict(),Q=t.object({behaviours:t.array(t.unknown()).optional()}).strict(),v=t.object({type:t.literal("staticsite"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),source:t.string().min(1,o.REQUIRED.SOURCE),build:U,routing:L.optional(),security:G.optional(),domain:t.string().optional(),forms:j.optional(),cdn:Q.optional()}).strict().superRefine((i,s)=>{if(i.forms===void 0)return;const e=i.domain;if(e===void 0||e===""){s.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}const m=i.forms.from;m!==void 0&&!x(m,e)&&s.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${e} (the verified SES identity) \u2014 for example noreply@${e}. Use forms.to for the recipient.`})}),k=t.discriminatedUnion("type",[P,D,v]),H=t.enum(["lightweight","standard","resilient","custom"]),Y=t.object({type:t.enum(p),instanceType:t.string().optional(),backupRetention:c.optional(),deletionProtection:t.boolean().optional(),encryption:t.union([t.object({useCMK:t.literal(!0)}).strict(),t.literal(!1)]).optional()}).strict(),Z=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional()}).strict();export{Z as CustomPatternComputeSchema,Y as CustomPatternDatabaseSchema,D as NextJSPatternConfigSchema,k as PatternConfigSchema,a as PatternLambdaConfigSchema,y as PatternQueueConfigSchema,r as PatternStorageBucketConfigSchema,H as PatternTierSchema,I as PayloadCdnConfigSchema,S as PayloadComputeConfigSchema,E as PayloadDatabaseConfigSchema,A as PayloadMessagingConfigSchema,P as PayloadPatternConfigSchema,d as PayloadStorageConfigSchema,U as StaticSiteBuildConfigSchema,Q as StaticSiteCdnConfigSchema,j as StaticSiteFormsConfigSchema,v as StaticSitePatternConfigSchema,L as StaticSiteRoutingSchema,G as StaticSiteSecurityConfigSchema};
+import{z as t}from"zod";import{VALIDATION_MESSAGES as o,VALIDATION_PATTERNS as n}from"../validation/patterns.js";import{BackupRetentionSchema as m,MonitoringIntervalSchema as u,DatabasePortSchema as T,ProxyConfigOrFalseSchema as b,ReadReplicaConfigOrFalseSchema as R,AuroraWriterConfigSchema as M,AuroraReadersConfigOrFalseSchema as f,DatabaseInsightsConfigOrFalseSchema as h,CredentialsConfigSchema as C,EncryptionConfigSchema as N}from"./databaseSchemas.js";import{LambdaMemorySchema as l}from"./computeSchemas.js";import{PATTERN_DATABASE_TYPES as p,DATABASE_ENGINES as O}from"./constants.js";import{CLOUDFRONT_PRICE_CLASS_VALUES as _,STATIC_SITE_ROUTING_VALUES as x,isAddressAtDomain as y}from"@fjall/util";const a=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:t.number().int(o.EPHEMERAL_STORAGE.INTEGER).min(512,o.EPHEMERAL_STORAGE.MIN).max(10240,o.EPHEMERAL_STORAGE.MAX).optional()}).strict(),E=t.object({type:t.enum(p).optional(),databaseName:t.string().optional(),databaseEngine:t.enum(O).optional(),deletionProtection:t.boolean().optional(),backupRetention:m.optional(),port:T.optional(),publiclyAccessible:t.boolean().optional(),allowedIpCidr:t.string().optional(),instanceType:t.string().optional(),allocatedStorage:t.number().int(o.ALLOCATED_STORAGE.INTEGER).min(20,o.ALLOCATED_STORAGE.MIN).max(65536,o.ALLOCATED_STORAGE.MAX).optional(),multiAz:t.boolean().optional(),readReplica:R.optional(),writer:M.optional(),readers:f.optional(),allowVpcAccess:t.boolean().optional(),monitoringInterval:u.optional(),preferredMaintenanceWindow:t.string().optional(),databaseInsights:h.optional(),proxy:b.optional(),credentials:C.optional(),encryption:N.optional(),snapshotIdentifier:t.string().optional(),snapshotUsername:t.string().optional()}).strict(),S=t.object({server:a.optional(),imageOptimisation:a.optional(),revalidation:a.optional()}).strict(),r=t.object({versioned:t.boolean().optional()}).strict(),d=t.object({assets:r.optional(),cache:r.optional(),media:r.optional()}).strict(),D=t.object({visibilityTimeout:t.number().int(o.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,o.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,o.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:t.number().int(o.SQS.RETENTION_PERIOD.INTEGER).min(60,o.SQS.RETENTION_PERIOD.MIN).max(1209600,o.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:t.number().int(o.MAX_MESSAGE_SIZE.INTEGER).min(1024,o.MAX_MESSAGE_SIZE.MIN).max(262144,o.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:t.union([t.literal(!1),t.object({enabled:t.boolean().optional(),maxReceiveCount:t.number().int(o.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,o.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,o.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),A=t.object({revalidationQueue:D.optional()}).strict(),g=t.object({domainNames:t.array(t.string()).optional(),certificateArn:t.string().optional()}).strict(),I=t.record(t.string().regex(n.ENV_VAR_NAME,o.ENV_VAR_NAME),t.string()).optional(),P=t.object({type:t.literal("payload"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:g.optional(),environment:I}).strict(),L=t.object({type:t.literal("nextjs"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),domain:t.string().optional(),database:E.optional(),compute:S.optional(),storage:d.optional(),messaging:A.optional(),cdn:g.optional(),environment:I}).strict(),U=t.enum(x),G=t.object({command:t.string().min(1,o.REQUIRED.BUILD_COMMAND),outputDir:t.string().min(1,o.REQUIRED.OUTPUT_DIR)}).strict(),j=t.object({maxAgeDays:t.number().optional(),includeSubdomains:t.boolean().optional(),preload:t.boolean().optional()}).strict(),Q=t.object({headers:t.boolean().optional(),contentSecurityPolicy:t.string().optional(),hsts:t.union([t.literal(!1),j]).optional()}).strict(),v=t.object({to:t.string().min(1,o.REQUIRED.FORMS_TO).regex(n.EMAIL,o.EMAIL),from:t.string().regex(n.EMAIL,o.EMAIL).optional(),corsOrigin:t.string().regex(n.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:t.number().int().min(1).max(100).optional()}).strict(),B=t.object({behaviours:t.array(t.unknown()).optional(),priceClass:t.enum(_).optional(),invalidateOnDeploy:t.boolean().optional()}).strict(),V=t.object({type:t.literal("basic-auth"),username:t.string().min(1,"accessGate.username must not be empty"),password:t.string().min(1,"accessGate.password must not be empty")}).strict(),X=t.object({type:t.literal("staticsite"),name:t.string().min(1,o.REQUIRED.PATTERN_NAME),source:t.string().min(1,o.REQUIRED.SOURCE),build:G,routing:U.optional(),security:Q.optional(),domain:t.string().optional(),zoneName:t.string().optional(),hostedZoneId:t.string().optional(),forms:v.optional(),cdn:B.optional(),accessGate:V.optional()}).strict().superRefine((i,s)=>{if(i.forms===void 0)return;const e=i.domain;if(e===void 0||e===""){s.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}const c=i.forms.from;c!==void 0&&!y(c,e)&&s.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${e} (the verified SES identity) \u2014 for example noreply@${e}. Use forms.to for the recipient.`})}),Z=t.discriminatedUnion("type",[P,L,X]),W=t.enum(["lightweight","standard","resilient","custom"]),$=t.object({type:t.enum(p),instanceType:t.string().optional(),backupRetention:m.optional(),deletionProtection:t.boolean().optional(),encryption:t.union([t.object({useCMK:t.literal(!0)}).strict(),t.literal(!1)]).optional()}).strict(),q=t.object({memorySize:l.optional(),timeout:t.number().int(o.LAMBDA.TIMEOUT.INTEGER).min(1,o.LAMBDA.TIMEOUT.MIN).max(900,o.LAMBDA.TIMEOUT.MAX).optional()}).strict();export{q as CustomPatternComputeSchema,$ as CustomPatternDatabaseSchema,L as NextJSPatternConfigSchema,Z as PatternConfigSchema,a as PatternLambdaConfigSchema,D as PatternQueueConfigSchema,r as PatternStorageBucketConfigSchema,W as PatternTierSchema,g as PayloadCdnConfigSchema,S as PayloadComputeConfigSchema,E as PayloadDatabaseConfigSchema,A as PayloadMessagingConfigSchema,P as PayloadPatternConfigSchema,d as PayloadStorageConfigSchema,V as StaticSiteAccessGateConfigSchema,G as StaticSiteBuildConfigSchema,B as StaticSiteCdnConfigSchema,v as StaticSiteFormsConfigSchema,X as StaticSitePatternConfigSchema,U as StaticSiteRoutingSchema,Q as StaticSiteSecurityConfigSchema};

package/dist/src/version.d.ts

@@ -1 +1 @@
-export declare const GENERATOR_VERSION = "24.0.0";
+export declare const GENERATOR_VERSION = "26.0.0";

package/dist/src/version.js

@@ -1 +1 @@
-const E="24.0.0";export{E as GENERATOR_VERSION};
+const E="26.0.0";export{E as GENERATOR_VERSION};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/generator",
-  "version": "24.0.0",
+  "version": "26.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -58,7 +58,7 @@
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
     "@babel/parser": "^7.29.8",
-    "@fjall/util": "^24.0.0",
+    "@fjall/util": "^26.0.0",
     "ast-types": "^0.16.1",
     "recast": "^0.23.12",
     "ts-morph": "^28.0.0",
@@ -66,12 +66,11 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
     "@types/node": "^26.1.2",
+    "@typescript-eslint/parser": "^8.65.0",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^10.8.0",
     "fast-check": "^4.9.0",
-    "typescript-eslint": "^8.65.0",
     "vitest": "^4.1.10"
   }
 }