@jaypie/constructs 1.2.33 → 1.2.35

package/dist/cjs/index.d.ts

@@ -18,6 +18,7 @@ export { JaypieGitHubDeployRole, JaypieGitHubDeployRoleProps, } from "./JaypieGi
 export { JaypieHostedZone, JaypieHostedZoneRecordProps, } from "./JaypieHostedZone";
 export { JaypieInfrastructureStack } from "./JaypieInfrastructureStack";
 export { JaypieLambda, JaypieLambdaProps } from "./JaypieLambda";
+export { JaypieMigration, JaypieMigrationProps } from "./JaypieMigration";
 export { JaypieMongoDbSecret } from "./JaypieMongoDbSecret";
 export { DomainNameConfig, JaypieNextJs, JaypieNextjsProps, } from "./JaypieNextJs";
 export { JaypieOpenAiSecret } from "./JaypieOpenAiSecret";

package/dist/esm/JaypieDynamoDb.d.ts

@@ -89,6 +89,7 @@ export declare class JaypieDynamoDb extends Construct implements dynamodb.ITable
     get tableRef(): dynamodb.TableReference;
     get tableStreamArn(): string | undefined;
     get encryptionKey(): import("aws-cdk-lib/aws-kms").IKey | undefined;
+    get grants(): dynamodb.TableGrants;
     applyRemovalPolicy(policy: RemovalPolicy): void;
     grant(grantee: import("aws-cdk-lib/aws-iam").IGrantable, ...actions: string[]): import("aws-cdk-lib/aws-iam").Grant;
     grantFullAccess(grantee: import("aws-cdk-lib/aws-iam").IGrantable): import("aws-cdk-lib/aws-iam").Grant;

package/dist/esm/JaypieMigration.d.ts

@@ -0,0 +1,21 @@
+import { Construct } from "constructs";
+import * as dynamodb from "aws-cdk-lib/aws-dynamodb";
+import * as lambda from "aws-cdk-lib/aws-lambda";
+import { JaypieLambda } from "./JaypieLambda";
+import type { SecretsArrayItem } from "./helpers/index.js";
+export interface JaypieMigrationProps {
+    /** Path to the bundled migration code (esbuild output directory) */
+    code: lambda.Code | string;
+    /** Constructs that must be created before the migration runs */
+    dependencies?: Construct[];
+    /** Lambda handler entry point */
+    handler?: string;
+    /** Secrets to make available to the migration Lambda */
+    secrets?: SecretsArrayItem[];
+    /** DynamoDB tables to grant read/write access */
+    tables?: dynamodb.ITable[];
+}
+export declare class JaypieMigration extends Construct {
+    readonly lambda: JaypieLambda;
+    constructor(scope: Construct, id: string, props: JaypieMigrationProps);
+}

package/dist/esm/__tests__/JaypieMigration.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/index.d.ts

@@ -18,6 +18,7 @@ export { JaypieGitHubDeployRole, JaypieGitHubDeployRoleProps, } from "./JaypieGi
 export { JaypieHostedZone, JaypieHostedZoneRecordProps, } from "./JaypieHostedZone";
 export { JaypieInfrastructureStack } from "./JaypieInfrastructureStack";
 export { JaypieLambda, JaypieLambdaProps } from "./JaypieLambda";
+export { JaypieMigration, JaypieMigrationProps } from "./JaypieMigration";
 export { JaypieMongoDbSecret } from "./JaypieMongoDbSecret";
 export { DomainNameConfig, JaypieNextJs, JaypieNextjsProps, } from "./JaypieNextJs";
 export { JaypieOpenAiSecret } from "./JaypieOpenAiSecret";

package/dist/esm/index.js

@@ -27,6 +27,7 @@ import * as origins from 'aws-cdk-lib/aws-cloudfront-origins';
 import * as wafv2 from 'aws-cdk-lib/aws-wafv2';
 import * as dynamodb from 'aws-cdk-lib/aws-dynamodb';
 import { generateIndexName, DEFAULT_SORT_KEY } from '@jaypie/fabric';
+import * as cr from 'aws-cdk-lib/custom-resources';
 import { Nextjs } from 'cdk-nextjs-standalone';
 import * as path from 'path';
 import { CfnAnalyzer } from 'aws-cdk-lib/aws-accessanalyzer';
@@ -370,11 +371,16 @@ function envHostname({ component, domain, env, subdomain, } = {}) {
     if (!resolvedDomain) {
         throw new ConfigurationError("No hostname `domain` provided. Set CDK_ENV_DOMAIN or CDK_ENV_HOSTED_ZONE to use environment domain");
     }
+    const personal = process.env.CDK_ENV_PERSONAL;
     const resolvedComponent = component === "@" || component === "" ? undefined : component;
     const providedSubdomain = subdomain === "@" || subdomain === "" ? undefined : subdomain;
     const resolvedSubdomain = providedSubdomain || process.env.CDK_ENV_SUBDOMAIN;
     const resolvedEnv = env || process.env.PROJECT_ENV;
-    const filteredEnv = resolvedEnv === CDK$2.ENV.PRODUCTION ? undefined : resolvedEnv;
+    const filteredEnv = resolvedEnv === CDK$2.ENV.PRODUCTION
+        ? undefined
+        : personal && resolvedEnv === personal
+            ? undefined
+            : resolvedEnv;
     // Check if parts are already contained in the domain to avoid duplication
     const domainParts = resolvedDomain.split(".");
     const isPartInDomain = (part) => {
@@ -383,6 +389,7 @@ function envHostname({ component, domain, env, subdomain, } = {}) {
         return domainParts.includes(part);
     };
     const parts = [
+        personal && !isPartInDomain(personal) ? personal : undefined,
         isPartInDomain(resolvedComponent) ? undefined : resolvedComponent,
         isPartInDomain(resolvedSubdomain) ? undefined : resolvedSubdomain,
         isPartInDomain(filteredEnv) ? undefined : filteredEnv,
@@ -2667,7 +2674,6 @@ class JaypieDistribution extends Construct {
             if (wafLogBucketProp === true) {
                 // Create inline WAF logging bucket with Datadog forwarding
                 const createdBucket = new s3.Bucket(this, constructEnvName("WafLogBucket"), {
-                    autoDeleteObjects: true,
                     bucketName: `aws-waf-logs-${constructEnvName("waf").toLowerCase()}`,
                     lifecycleRules: [
                         {
@@ -2681,7 +2687,7 @@ class JaypieDistribution extends Construct {
                         },
                     ],
                     objectOwnership: s3.ObjectOwnership.OBJECT_WRITER,
-                    removalPolicy: RemovalPolicy.DESTROY,
+                    removalPolicy: RemovalPolicy.RETAIN,
                 });
                 Tags.of(createdBucket).add(CDK$2.TAG.ROLE, CDK$2.ROLE.MONITORING);
                 // Add Datadog forwarder notification
@@ -3024,6 +3030,9 @@ class JaypieDynamoDb extends Construct {
     get encryptionKey() {
         return this._table.encryptionKey;
     }
+    get grants() {
+        return this._table.grants;
+    }
     applyRemovalPolicy(policy) {
         this._table.applyRemovalPolicy(policy);
     }
@@ -3382,6 +3391,35 @@ class JaypieInfrastructureStack extends JaypieStack {
     }
 }
 
+class JaypieMigration extends Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const { code, dependencies = [], handler = "index.handler", secrets = [], tables = [], } = props;
+        // Migration Lambda — 5 minute timeout for long-running migrations
+        this.lambda = new JaypieLambda(this, "MigrationLambda", {
+            code,
+            description: "DynamoDB migration custom resource",
+            handler,
+            roleTag: CDK$2.ROLE.PROCESSING,
+            secrets,
+            tables,
+            timeout: cdk.Duration.minutes(5),
+        });
+        // Custom Resource provider wrapping the Lambda
+        const provider = new cr.Provider(this, "MigrationProvider", {
+            onEventHandler: this.lambda,
+        });
+        // Custom Resource that triggers on every deploy
+        const resource = new cdk.CustomResource(this, "MigrationResource", {
+            serviceToken: provider.serviceToken,
+        });
+        // Ensure dependencies are created before the migration runs
+        for (const dep of dependencies) {
+            resource.node.addDependency(dep);
+        }
+    }
+}
+
 class JaypieMongoDbSecret extends JaypieEnvSecret {
     constructor(scope, id = "MongoConnectionString", props) {
         const defaultProps = {
@@ -4731,5 +4769,5 @@ class JaypieWebSocketTable extends Construct {
     }
 }
 
-export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieCertificate, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDistribution, JaypieDnsRecord, JaypieDynamoDb, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieStaticWebBucket, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, JaypieWebSocket, JaypieWebSocketLambda, JaypieWebSocketTable, addDatadogLayers, clearAllCertificateCaches, clearAllSecretsCaches, clearCertificateCache, clearSecretsCache, constructEnvName, constructStackName, constructTagger, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveCertificate, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveEnvironment, resolveHostedZone, resolveParamsAndSecrets, resolveSecrets };
+export { CDK$2 as CDK, JaypieAccountLoggingBucket, JaypieApiGateway, JaypieAppStack, JaypieBucketQueuedLambda, JaypieCertificate, JaypieDatadogBucket, JaypieDatadogForwarder, JaypieDatadogSecret, JaypieDistribution, JaypieDnsRecord, JaypieDynamoDb, JaypieEnvSecret, JaypieEventsRule, JaypieExpressLambda, JaypieGitHubDeployRole, JaypieHostedZone, JaypieInfrastructureStack, JaypieLambda, JaypieMigration, JaypieMongoDbSecret, JaypieNextJs, JaypieOpenAiSecret, JaypieOrganizationTrail, JaypieQueuedLambda, JaypieSsoPermissions, JaypieSsoSyncApplication, JaypieStack, JaypieStaticWebBucket, JaypieTraceSigningKeySecret, JaypieWebDeploymentBucket, JaypieWebSocket, JaypieWebSocketLambda, JaypieWebSocketTable, addDatadogLayers, clearAllCertificateCaches, clearAllSecretsCaches, clearCertificateCache, clearSecretsCache, constructEnvName, constructStackName, constructTagger, envHostname, extendDatadogRole, isEnv, isProductionEnv, isSandboxEnv, isValidHostname$1 as isValidHostname, isValidSubdomain, jaypieLambdaEnv, mergeDomain, resolveCertificate, resolveDatadogForwarderFunction, resolveDatadogLayers, resolveDatadogLoggingDestination, resolveEnvironment, resolveHostedZone, resolveParamsAndSecrets, resolveSecrets };
 //# sourceMappingURL=index.js.map