@mettlecast/domain-cdk-packer 0.2.0

package/README.md

@@ -0,0 +1,83 @@
+# @mettlecast/domain-cdk-packer
+
+AWS CDK L3 constructs that compile a `DomainRegistry` snapshot into CloudFormation. Takes the output of `mc-domain-module build` and generates type-safe infrastructure.
+
+## Install
+
+```bash
+npm install @mettlecast/domain-cdk-packer --save-dev
+```
+
+## Quick Start
+
+Pack a domain registry into a CDK stack:
+
+```typescript
+import { packDomain } from '@mettlecast/domain-cdk-packer';
+import * as cdk from 'aws-cdk-lib';
+import * as fs from 'fs';
+
+const app = new cdk.App();
+const registry = JSON.parse(
+  fs.readFileSync('.mc/domain-registry.json', 'utf-8')
+);
+
+packDomain(registry, app, {
+  env: { region: 'eu-north-1', account: '123456789' },
+});
+
+app.synth();
+```
+
+Or use `DomainStack` directly:
+
+```typescript
+import { DomainStack } from '@mettlecast/domain-cdk-packer';
+
+new DomainStack(app, 'PaymentsStack', {
+  registry,
+  env: { region: 'eu-north-1', account: '123456789' },
+});
+```
+
+## Constructs Generated
+
+For each handler in the registry, the packer provisions:
+
+| Handler Type | Generated Constructs |
+|---|---|
+| `defineApi()` | Lambda function, API Gateway route (method + path), EventBridge integration |
+| `defineWebhook()` | Lambda function, API Gateway webhook route, GitHub webhook validation |
+| `defineSubscriber()` | Lambda function, EventBridge rule (event filter), Lambda target |
+| `defineSchedule()` | Lambda function, EventBridge Scheduler rule (cron expression) |
+| `defineJob()` | Lambda function, SQS queue, Lambda event source mapping |
+| `defineAction()` | Lambda function, Function URL (for workspace invocation) |
+| `defineIntegration()` | Lambda function, SQS DLQ, error retry logic |
+
+All handlers use **esbuild** for bundling and **Drizzle ORM** for database access.
+
+## Advanced Features
+
+**StepFunctionsCodegen** — Convert domain actions into AWS Step Functions task states for TIB Flow Designer integration:
+
+```typescript
+import { StepFunctionsCodegen } from '@mettlecast/domain-cdk-packer';
+
+const sfnCodegen = new StepFunctionsCodegen(registry);
+const taskStates = sfnCodegen.generate();
+// taskStates: StepFunctionsTaskState[] — ready to be serialized to Flow Designer
+```
+
+## Peer Dependencies
+
+`@mettlecast/domain-cdk-packer` requires:
+
+- `aws-cdk-lib` (^2.0)
+- `constructs` (^10.0)
+
+And expects `@mettlecast/domain-runtime` to be installed in the same project (used for type reflection).
+
+## See Also
+
+- `@mettlecast/domain-runtime` — handler definitions
+- `@mettlecast/domain-cli` — local build and validation

package/dist/DomainStack.d.ts

@@ -0,0 +1,68 @@
+import * as cdk from 'aws-cdk-lib';
+import * as apigwv2 from 'aws-cdk-lib/aws-apigatewayv2';
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
+import { Construct } from 'constructs';
+import type { DomainRegistry } from './registry.js';
+/**
+ * Configuration properties for DomainStack.
+ */
+export interface DomainStackProps extends cdk.StackProps {
+    /** The compiled domain registry. */
+    registry: DomainRegistry;
+    /** ARN of the EventBridge event bus for event subscribers. */
+    eventBusArn: string;
+    /** Database connection URL passed from DataStorageStack. */
+    databaseUrl?: string;
+    /** ARN of the RDS secret for DB credentials — added to Lambda env as DB_SECRET_ARN. */
+    dbSecretArn?: string;
+    /** Cognito User Pool ARN — when provided, HTTP API routes are JWT-protected. */
+    userPoolArn?: string;
+    /** Cognito User Pool Client ID — required alongside userPoolArn for JWT authorizer. */
+    userPoolClientId?: string;
+    /** VPC to place domain Lambdas in — required for Aurora connectivity. */
+    vpc?: ec2.IVpc;
+    /** Security group for domain Lambdas — must allow egress to Aurora SG. */
+    lambdaSg?: ec2.ISecurityGroup;
+    /** Enable CMK encryption for DynamoDB, S3, SQS. */
+    enableCmk?: boolean;
+    /** Enable WAF WebACL on the domain API Gateway. */
+    enableWaf?: boolean;
+    /** Enable CloudWatch alarms and DLQ depth alarms. */
+    enableAlarms?: boolean;
+    /** SNS topic ARN for alarm notifications. Used when enableAlarms is true. */
+    alarmSnsTopicArn?: string;
+    /** Enable canary deployments with CodeDeploy and auto-rollback on alarm breach. */
+    enableCanaryDeploy?: boolean;
+    /** Reserved concurrency for all Lambdas in this domain. If omitted, no limit. */
+    reservedConcurrency?: number;
+    /** Log retention in days. Default: 30. */
+    logRetentionDays?: 30 | 90 | 365 | 2557;
+    /**
+     * Explicit CORS allowed origins for the HTTP API and Function URLs.
+     * When omitted, defaults to ['*'] (open — only appropriate during early dev).
+     * Set to the list of dashboard URLs + localhost for production workloads.
+     */
+    corsAllowedOrigins?: string[];
+    /**
+     * Allow CORS with credentials (Access-Control-Allow-Credentials: true).
+     * Requires corsAllowedOrigins to be a non-wildcard list.
+     */
+    allowCredentials?: boolean;
+}
+/**
+ * Top-level CDK Stack that composes all domain constructs from a single DomainRegistry input.
+ * Uses grouped Lambdas for each primitive type to reduce deployment artifact size.
+ */
+export declare class DomainStack extends cdk.Stack {
+    /** Shared HTTP API for routing API and webhook requests. */
+    readonly httpApi: apigwv2.HttpApi;
+    /** Map of primitive-type key to Lambda function ARN, used by FlowsStack for direct invocation. */
+    readonly lambdaArns: Record<string, string>;
+    /**
+     * Create a new DomainStack instance.
+     * @param scope - Parent CDK scope.
+     * @param id - Stack identifier.
+     * @param props - Stack properties including domain registry and event bus ARN.
+     */
+    constructor(scope: Construct, id: string, props: DomainStackProps);
+}