@mettlecast/domain-cdk-packer 0.2.4 → 0.2.7

package/dist/DomainStack.d.ts

@@ -17,12 +17,16 @@ export interface DomainStackProps extends cdk.StackProps {
     dbSecretArn?: string;
     /** Cognito User Pool ARN — when provided, HTTP API routes are JWT-protected. */
     userPoolArn?: string;
+    /** Cognito User Pool ID — preferred over parsing userPoolArn for JWT authorizer issuer. */
+    userPoolId?: string;
     /** Cognito User Pool Client ID — required alongside userPoolArn for JWT authorizer. */
     userPoolClientId?: string;
     /** VPC to place domain Lambdas in — required for Aurora connectivity. */
     vpc?: ec2.IVpc;
     /** Security group for domain Lambdas — must allow egress to Aurora SG. */
     lambdaSg?: ec2.ISecurityGroup;
+    /** Shared HTTP API Gateway — when provided, domain routes are added here instead of creating a separate API. */
+    httpApi?: apigwv2.HttpApi;
     /** Enable CMK encryption for DynamoDB, S3, SQS. */
     enableCmk?: boolean;
     /** Enable WAF WebACL on the domain API Gateway. */

package/dist/DomainStack.js

@@ -35,11 +35,11 @@ export class DomainStack extends cdk.Stack {
      */
     constructor(scope, id, props) {
         super(scope, id, props);
-        const { registry, eventBusArn, databaseUrl, dbSecretArn, userPoolArn, userPoolClientId, vpc, lambdaSg, enableCmk, enableWaf, enableAlarms, alarmSnsTopicArn, enableCanaryDeploy, reservedConcurrency, logRetentionDays, corsAllowedOrigins, allowCredentials } = props;
+        const { registry, eventBusArn, databaseUrl, dbSecretArn, userPoolArn, userPoolId, userPoolClientId, vpc, lambdaSg, httpApi, enableCmk, enableWaf, enableAlarms, alarmSnsTopicArn, enableCanaryDeploy, reservedConcurrency, logRetentionDays, corsAllowedOrigins, allowCredentials } = props;
         const domainId = registry.domain.id;
         const vpcProps = vpc ? { vpc, securityGroups: lambdaSg ? [lambdaSg] : undefined } : {};
         const allowedOrigins = corsAllowedOrigins ?? ['*'];
-        this.httpApi = new apigwv2.HttpApi(this, 'HttpApi', {
+        this.httpApi = httpApi ?? new apigwv2.HttpApi(this, 'HttpApi', {
             apiName: `${domainId}-api`,
             corsPreflight: {
                 allowHeaders: ['Content-Type', 'Authorization'],
@@ -50,10 +50,10 @@ export class DomainStack extends cdk.Stack {
         });
         // Wire Cognito JWT authorizer when user pool is provided
         let jwtAuthorizer;
-        if (userPoolArn && userPoolClientId) {
+        if ((userPoolId || userPoolArn) && userPoolClientId) {
             const region = cdk.Stack.of(this).region;
-            const userPoolId = cdk.Fn.select(1, cdk.Fn.split('/', userPoolArn));
-            jwtAuthorizer = new apigwv2Authorizers.HttpJwtAuthorizer('CognitoAuthorizer', `https://cognito-idp.${region}.amazonaws.com/${userPoolId}`, {
+            const resolvedUserPoolId = userPoolId ?? cdk.Fn.select(1, cdk.Fn.split('/', userPoolArn));
+            jwtAuthorizer = new apigwv2Authorizers.HttpJwtAuthorizer('CognitoAuthorizer', `https://cognito-idp.${region}.amazonaws.com/${resolvedUserPoolId}`, {
                 jwtAudience: [userPoolClientId],
             });
         }

package/dist/pack-domain.d.ts

@@ -1,4 +1,5 @@
 import * as cdk from 'aws-cdk-lib';
+import * as apigwv2 from 'aws-cdk-lib/aws-apigatewayv2';
 import * as ec2 from 'aws-cdk-lib/aws-ec2';
 import { DomainStack } from './DomainStack.js';
 import type { DomainRegistry } from './registry.js';
@@ -12,8 +13,12 @@ export interface PackDomainOptions {
     vpc?: ec2.IVpc;
     /** Security group for domain Lambdas. */
     lambdaSg?: ec2.ISecurityGroup;
+    /** Shared HTTP API Gateway — when provided, domain routes use this instead of creating a separate API. */
+    httpApi?: apigwv2.HttpApi;
     /** Cognito User Pool ARN — when provided, HTTP API routes are JWT-protected. */
     userPoolArn?: string;
+    /** Cognito User Pool ID — preferred over parsing userPoolArn for JWT authorizer issuer. */
+    userPoolId?: string;
     /** Cognito User Pool Client ID — required alongside userPoolArn for JWT authorizer. */
     userPoolClientId?: string;
     /** Database connection URL. */

package/dist/pack-domain.js

@@ -15,7 +15,7 @@ export function packDomain(registry, app, stackId, eventBusArn, options) {
     // Check if options looks like a CDK Environment (has 'account' and/or 'region' props, not the full options interface)
     const opts = options && typeof options === 'object'
         && ('account' in options || 'region' in options)
-        && !('userPoolArn' in options || 'userPoolClientId' in options || 'databaseUrl' in options || 'dbSecretArn' in options)
+        && !('userPoolArn' in options || 'userPoolId' in options || 'userPoolClientId' in options || 'databaseUrl' in options || 'dbSecretArn' in options)
         ? { env: options }
         : options || {};
     return new DomainStack(app, stackId, {
@@ -24,7 +24,9 @@ export function packDomain(registry, app, stackId, eventBusArn, options) {
         env: opts.env,
         vpc: opts.vpc,
         lambdaSg: opts.lambdaSg,
+        httpApi: opts.httpApi,
         userPoolArn: opts.userPoolArn,
+        userPoolId: opts.userPoolId,
         userPoolClientId: opts.userPoolClientId,
         databaseUrl: opts.databaseUrl,
         dbSecretArn: opts.dbSecretArn,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mettlecast/domain-cdk-packer",
-  "version": "0.2.4",
+  "version": "0.2.7",
   "type": "module",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",