fjall 0.89.6 → 0.94.0

package/bin/assets/generators/organisation/files/platform/infrastructure.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+
+import { App, OrganisationFactory, getConfig } from "@fjall/components-infrastructure";
+
+const config = getConfig();
+
+if (config.environment === "platform") {
+  const app = App.getInstance();
+  const platform = OrganisationFactory.build("Platform", { type: "platform" })(app);
+<% if (security === "compliance" || security === "hardened") { -%>
+
+  platform.enableSecurityServicesAdmin({
+    services: ["guardduty", "securityhub", "config"]
+  });
+<% } -%>
+}

package/bin/assets/generators/organisation/generator.d.ts

@@ -0,0 +1,4 @@
+import { type Tree } from "@nx/devkit";
+import { type OrganisationGeneratorOptions } from "@fjall/generator";
+export declare function organisationGenerator(tree: Tree, options: OrganisationGeneratorOptions): Promise<void>;
+export default organisationGenerator;

package/bin/assets/generators/organisation/generator.js

@@ -0,0 +1,2 @@
+import{join as m}from"path";import{renderEjsTemplates as c}from"../utils/renderEjs.js";import{copySharedCdkFiles as p}from"../utils/copySharedFiles.js";import{getOrganisationComponentPath as g}from"../../src/util/pathHelpers.js";import{OrganisationGeneratorSchema as f,getZodErrorMessage as d}from"@fjall/generator";const l=import.meta.dirname;async function u(n,i){const e=f.safeParse(i);if(!e.success)throw new Error(`Invalid organisation generator options:
+${d(e.error)}`);const a=e.data,r={name:a.name,nameLowerCase:a.name.toLowerCase(),accountName:a.accountName||`${a.name.toLowerCase()}-main`,email:a.email,primaryRegion:a.primaryRegion||"us-east-1",secondaryRegions:a.secondaryRegions||[],security:a.security},s=[{name:"organisation",packageName:"infra-organisation"},{name:"platform",packageName:"infra-organisation"},{name:"account",packageName:"infra-app"}];for(const o of s){const t=g(o.name);c(n,m(l,"files",o.name),t,r),p(n,t,{...r,packageName:o.packageName})}}var C=u;export{C as default,u as organisationGenerator};

package/bin/assets/generators/organisation/index.d.ts

@@ -0,0 +1 @@
+export { organisationGenerator } from "./generator.js";

package/bin/assets/generators/organisation/index.js

@@ -0,0 +1 @@
+import{organisationGenerator as a}from"./generator.js";export{a as organisationGenerator};

package/bin/assets/generators/shared/files/cdk.context.json

@@ -0,0 +1,3 @@
+{
+  "acknowledged-issue-numbers": [32775, 34892, 34635]
+}

package/bin/assets/generators/shared/files/cdk.json

@@ -0,0 +1,55 @@
+{
+  "app": "npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",
+  "assetMetadata": false,
+  "pathMetadata": false,
+  "versionReporting": false,
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "yarn.lock",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk/core:checkSecretUsage": true,
+    "@aws-cdk/core:target-partitions": ["aws", "aws-cn"],
+    "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk/aws-iam:minimizePolicies": true,
+    "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+    "@aws-cdk/core:enablePartitionLiterals": true,
+    "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk/aws-route53-patters:useCertificate": true,
+    "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+    "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+    "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+    "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+    "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+    "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+    "@aws-cdk/aws-redshift:columnId": true,
+    "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+    "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+    "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+    "@aws-cdk/aws-kms:aliasNameRef": true,
+    "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+    "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+    "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true
+  }
+}

package/bin/assets/generators/shared/files/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "<%= packageName %>",
+  "version": "0.94.0",
+  "scripts": {},
+  "devDependencies": {
+    "@types/node": "20.4.9",
+    "ts-node": "^10.9.1",
+    "typescript": "~5.1.6"
+  },
+  "dependencies": {
+    "@fjall/components-infrastructure": "^0.94.0",
+    "aws-cdk-lib": "^2.239.0",
+    "constructs": "^10.0.0"
+  }
+}

package/bin/assets/generators/shared/files/tsconfig.json

@@ -0,0 +1,23 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["es2020", "dom"],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "typeRoots": ["./node_modules/@types"]
+  },
+  "exclude": ["node_modules", "cdk.out"]
+}

package/bin/assets/generators/storage/index.d.ts

@@ -0,0 +1 @@
+export { s3Generator } from "./s3/generator.js";

package/bin/assets/generators/storage/index.js

@@ -0,0 +1 @@
+import{s3Generator as o}from"./s3/generator.js";export{o as s3Generator};

package/bin/assets/generators/storage/s3/generator.d.ts

@@ -0,0 +1,4 @@
+import { type Tree } from "@nx/devkit";
+import { type S3GeneratorOptions } from "@fjall/generator";
+export declare function s3Generator(tree: Tree, options: S3GeneratorOptions): Promise<void>;
+export default s3Generator;

package/bin/assets/generators/storage/s3/generator.js

@@ -0,0 +1 @@
+import{assertResourceNameUnique as b}from"../../utils/resources/resourceDetection.js";import{pickDefined as k,withInfrastructurePlan as f}from"../../utils/planning/generatorHelpers.js";import{S3GeneratorSchema as S,toPascalCase as h,STORAGE_PRESETS as P}from"@fjall/generator";import{handleResourceConnections as g}from"../../utils/resources/connectionHelpers.js";async function N(n,c){await f(n,S,c,"S3",async({tree:a,validated:e,plan:t})=>{const o=h(e.bucketName);b(a,e.appName,o);const u=e.storagePreset??"standard",m=P[u],r=t.s3.length,i=r===0?"":`${r+1}`,p={name:o,bucketName:e.bucketName,variableName:`bucket${i}`,...m,...k(e,"publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors")},s={...t,s3:[...t.s3,p]};return await g(s,e,o,"storage",{singularPrompt:"Found an existing compute resource. Connect this bucket to it?",pluralPrompt:"Found {count} compute resources. Connect this bucket to them?"}),s})}var R=N;export{R as default,N as s3Generator};

package/bin/assets/generators/tunnel/generator.d.ts

@@ -0,0 +1,4 @@
+import { type Tree } from "@nx/devkit";
+import { type TunnelGeneratorOptions } from "@fjall/generator";
+export declare function tunnelGenerator(tree: Tree, options: TunnelGeneratorOptions): Promise<void>;
+export default tunnelGenerator;

package/bin/assets/generators/tunnel/generator.js

@@ -0,0 +1 @@
+import{withInfrastructurePlan as o}from"../utils/planning/generatorHelpers.js";import{TunnelGeneratorSchema as s}from"@fjall/generator";async function i(t,a){await o(t,s,a,"tunnel",({validated:n,plan:e})=>{if(e.tunnel&&typeof e.tunnel=="object")throw new Error("Tunnel is already enabled for this application");if(!(e.database.length>0))throw new Error("No databases found \u2014 tunnel requires at least one relational database");const r=n.instanceType?{instanceType:n.instanceType}:{};return{...e,tunnel:r}})}var f=i;export{f as default,i as tunnelGenerator};

package/bin/assets/generators/tunnel/index.d.ts

@@ -0,0 +1 @@
+export { tunnelGenerator } from "./generator.js";

package/bin/assets/generators/tunnel/index.js

@@ -0,0 +1 @@
+import{tunnelGenerator as n}from"./generator.js";export{n as tunnelGenerator};

package/bin/assets/generators/utils/ast/astCodeModification.d.ts

@@ -0,0 +1,23 @@
+import * as ts from "typescript";
+/**
+ * Replace a single top-level statement with zero or more new statements
+ * in-place. Returns the updated source file. If `oldStatement` is not a
+ * top-level statement of `sourceFile`, the source file is returned unchanged.
+ */
+export declare function replaceStatement(sourceFile: ts.SourceFile, oldStatement: ts.Statement, newStatements: readonly ts.Statement[]): ts.SourceFile;
+export interface ReplacementImportSpec {
+    readonly module: string;
+    readonly namespaceAlias?: string;
+    readonly namedImports?: readonly string[];
+}
+/**
+ * Remove the listed named imports from any `import { ... } from fromModule`
+ * statement. If the statement becomes empty (zero named imports, no default,
+ * no namespace alias), it is removed entirely.
+ *
+ * The `replacementImports` are appended at the top of the file (after any
+ * preserved `@fjall/*` or third-party imports), but only inserted if not
+ * already present — namespace aliases and named imports are reused if they
+ * already exist in an import statement for the same module.
+ */
+export declare function rewriteNamedImport(sourceFile: ts.SourceFile, fromModule: string, namesToRemove: readonly string[], replacementImports: readonly ReplacementImportSpec[]): ts.SourceFile;

package/bin/assets/generators/utils/ast/astCodeModification.js

@@ -0,0 +1 @@
+import*as u from"typescript";function D(e,n,i){const t=u.factory,r=e.statements.indexOf(n);if(r<0)return e;const a=[...e.statements];return a.splice(r,1,...i),t.updateSourceFile(e,a,e.isDeclarationFile,e.referencedFiles,e.typeReferenceDirectives,e.hasNoDefaultLib,e.libReferenceDirectives)}function S(e,n,i,t){const r=u.factory,a=new Set(i);let d=[];for(const m of e.statements){if(!u.isImportDeclaration(m)){d.push(m);continue}if(o(m)!==n){d.push(m);continue}const f=c(r,m,a);f!==void 0&&d.push(f)}return d=I(r,d,t),r.updateSourceFile(e,d,e.isDeclarationFile,e.referencedFiles,e.typeReferenceDirectives,e.hasNoDefaultLib,e.libReferenceDirectives)}function o(e){if(u.isStringLiteral(e.moduleSpecifier))return e.moduleSpecifier.text}function c(e,n,i){const t=n.importClause;if(t===void 0)return n;const r=t.namedBindings;let a=r;if(r!==void 0&&u.isNamedImports(r)){const s=r.elements.filter(f=>{const p=f.propertyName?.text??f.name.text;return!i.has(p)});s.length===0?a=void 0:s.length!==r.elements.length&&(a=e.createNamedImports(s))}if(!(!(t.name!==void 0)&&!(a!==void 0)))return e.updateImportDeclaration(n,n.modifiers,e.updateImportClause(t,t.isTypeOnly,t.name,a),n.moduleSpecifier,n.attributes)}function I(e,n,i){const t=h(n),r=[];for(const d of i){const m=t.get(d.module);if(m===void 0){r.push(l(e,d));continue}const s=g(e,m,d);if(s!==void 0){const f=n.indexOf(m);f>=0&&n.splice(f,1,s)}else N(m,d)||r.push(l(e,d))}let a=0;for(let d=0;d<n.length;d++){const m=n[d];if(m===void 0||!u.isImportDeclaration(m))break;a=d+1}return r.length>0&&n.splice(a,0,...r),n}function h(e){const n=new Map;for(const i of e){if(!u.isImportDeclaration(i))continue;const t=o(i);t!==void 0&&!n.has(t)&&n.set(t,i)}return n}function l(e,n){let i;if(n.namespaceAlias!==void 0)i=e.createImportClause(!1,void 0,e.createNamespaceImport(e.createIdentifier(n.namespaceAlias)));else if(n.namedImports!==void 0&&n.namedImports.length>0)i=e.createImportClause(!1,void 0,e.createNamedImports(n.namedImports.map(t=>e.createImportSpecifier(!1,void 0,e.createIdentifier(t)))));else return e.createImportDeclaration(void 0,void 0,e.createStringLiteral(n.module),void 0);return e.createImportDeclaration(void 0,i,e.createStringLiteral(n.module),void 0)}function g(e,n,i){const t=n.importClause;if(t===void 0||i.namespaceAlias!==void 0||i.namedImports===void 0||i.namedImports.length===0)return;const r=t.namedBindings;if(r===void 0||!u.isNamedImports(r))return;const a=new Set(r.elements.map(s=>s.name.text)),d=i.namedImports.filter(s=>!a.has(s));if(d.length===0)return;const m=[...r.elements,...d.map(s=>e.createImportSpecifier(!1,void 0,e.createIdentifier(s)))];return e.updateImportDeclaration(n,n.modifiers,e.updateImportClause(t,t.isTypeOnly,t.name,e.createNamedImports(m)),n.moduleSpecifier,n.attributes)}function N(e,n){const i=e.importClause;if(i===void 0)return!1;if(n.namespaceAlias!==void 0){const t=i.namedBindings;return t!==void 0&&u.isNamespaceImport(t)&&t.name.text===n.namespaceAlias}if(n.namedImports!==void 0&&n.namedImports.length>0){const t=i.namedBindings;if(t===void 0||!u.isNamedImports(t))return!1;const r=new Set(t.elements.map(a=>a.name.text));return n.namedImports.every(a=>r.has(a))}return!1}export{D as replaceStatement,S as rewriteNamedImport};

package/bin/assets/generators/utils/ast/astDomainRewriter.d.ts

@@ -0,0 +1,65 @@
+import * as ts from "typescript";
+/**
+ * Rewrite `<domainVar>.<prop>` property accesses in the source file after the
+ * `new Domain(...)` declaration has been replaced by the eject template.
+ *
+ * The `Domain` pattern exposes a closed set of public readonly fields
+ * (`hostedZone`, `certificates`, `nameServers`, `manualRecords`, `exportNames`,
+ * `registrar`, `zoneName`, inherited `node`). Each maps to a vanilla CDK
+ * equivalent created by the template. The rewriter preserves any user-attached
+ * custom L2 constructs (Layer 2 of the portability model) by mechanical
+ * substitution.
+ *
+ * Accesses that cannot be resolved (e.g. `<domainVar>.hostedZone` in
+ * external-records mode, or accesses to fields outside the closed set) are
+ * left untouched and reported as warnings — the user must fix them by hand.
+ */
+export interface DomainRewriteContext {
+    /** The variable name bound to `new Domain(...)`. */
+    readonly domainVar: string;
+    /** Which registrar template was emitted. */
+    readonly registrar: "route53" | "external-delegated" | "external-records";
+    /** True when the emitted template produced a `hostedZone` identifier. */
+    readonly hasHostedZone: boolean;
+    /** True when the emitted template produced any `cert{i}` identifiers. */
+    readonly hasCertificates: boolean;
+    /** True when the emitted template produced an apex delegation role. */
+    readonly hasDelegationRole: boolean;
+    /**
+     * Cert keys in declaration order. `<domainVar>.certificates.get("<key>")`
+     * rewrites to the matching `cert{i}` identifier; unknown keys are warned on.
+     * Keys are the literal `cert.domainName` strings.
+     */
+    readonly certKeys: readonly string[];
+    /** Effective zone name (delegated: `sub.example.com`; else: `zoneName`). */
+    readonly effectiveZoneName: string;
+    /** The top-level `registrar` string — literal to inline. */
+    readonly registrarValue: string;
+    /** Export-name shape (mirrors `getDomainExportNames`). */
+    readonly exportNames: {
+        readonly hostedZoneId: string;
+        readonly certificateArn: string;
+        readonly delegationRoleArn: string;
+    };
+}
+export interface DomainRewriteResult {
+    readonly sourceFile: ts.SourceFile;
+    /**
+     * `true` when any `<domainVar>.certificates` or `<domainVar>.certificates.get(...)`
+     * access was encountered. The caller prepends a `const certificates = new
+     * Map(...)` binding right after the emitted template when this is set.
+     */
+    readonly needsCertificateMap: boolean;
+    /** Human-readable warnings for unresolvable or deliberately-skipped accesses. */
+    readonly warnings: readonly string[];
+}
+/**
+ * Walk the source file and rewrite every `<domainVar>.<prop>` (and nested
+ * call expressions for `certificates.get(...)`) to the vanilla-CDK equivalent.
+ */
+export declare function rewriteDomainPropertyAccess(sourceFile: ts.SourceFile, context: DomainRewriteContext): DomainRewriteResult;
+/**
+ * Build `const certificates = new Map<string, acm.Certificate>([["<key0>", cert0], ...]);`
+ * for prepending to the emitted template when the rewriter needed it.
+ */
+export declare function buildCertificateMapStatement(certKeys: readonly string[]): ts.VariableStatement;

package/bin/assets/generators/utils/ast/astDomainRewriter.js

@@ -0,0 +1 @@
+import*as s from"typescript";function I(a,e){const c=[];let o=!1;const i=s.factory;function f(r){const t=r.getStart(a,!1);return a.getLineAndCharacterOfPosition(t).line+1}function n(r,t){c.push(`line ${f(r)}: ${t}`)}function u(r){return s.isIdentifier(r)&&r.text===e.domainVar}function h(r){const t=r.expression;if(!s.isPropertyAccessExpression(t)||t.name.text!=="get")return;const d=t.expression;if(!s.isPropertyAccessExpression(d)||d.name.text!=="certificates"||!u(d.expression))return;const m=r.arguments[0];if(m===void 0||!s.isStringLiteral(m)){n(r,`'${e.domainVar}.certificates.get(...)' with non-string-literal key cannot be statically rewritten. Replace with a direct reference to the emitted certificate variable.`);return}if(e.registrar==="external-records"){n(r,`'${e.domainVar}.certificates.get(...)' on an external-records domain: no certificate map is emitted. Reference the emitted 'cert{i}' variable directly.`);return}const p=m.text,g=e.certKeys.indexOf(p);if(g<0){n(r,`'${e.domainVar}.certificates.get("${p}")': no certificate with domainName "${p}" was declared on the domain. Accesses remain unrewritten.`);return}return i.createIdentifier(`cert${g}`)}function y(r){if(!u(r.expression))return;const t=r.name.text;switch(t){case"hostedZone":{if(!e.hasHostedZone){n(r,`'${e.domainVar}.hostedZone' is undefined in '${e.registrar}' mode (no hosted zone is created). Remove the access or switch registrars.`);return}return i.createIdentifier("hostedZone")}case"certificates":{if(e.registrar==="external-records"){n(r,`'${e.domainVar}.certificates' on external-records is not exposed as a Map. Reference 'cert{i}' variables directly.`);return}if(!e.hasCertificates){n(r,`'${e.domainVar}.certificates' referenced but no certificates were declared on the domain. Access remains unrewritten.`);return}return o=!0,i.createIdentifier("certificates")}case"nameServers":{if(!e.hasHostedZone){n(r,`'${e.domainVar}.nameServers' is undefined in '${e.registrar}' mode (no hosted zone is created).`);return}return i.createPropertyAccessExpression(i.createIdentifier("hostedZone"),i.createIdentifier("hostedZoneNameServers"))}case"manualRecords":{if(e.registrar!=="external-records"){n(r,`'${e.domainVar}.manualRecords' is only populated on external-records; on '${e.registrar}' it is always empty. Access remains unrewritten.`);return}n(r,`'${e.domainVar}.manualRecords' has no direct vanilla-CDK equivalent \u2014 the emitted CfnOutputs carry the equivalent data per-entry. Access remains unrewritten.`);return}case"registrar":return i.createStringLiteral(e.registrarValue);case"zoneName":return i.createStringLiteral(e.effectiveZoneName);case"node":return i.createPropertyAccessExpression(i.createIdentifier("domainScope"),i.createIdentifier("node"));case"exportNames":return w(e);default:{n(r,`'${e.domainVar}.${t}' is not a public readonly property of the Domain construct and cannot be ejected. Access remains unrewritten.`);return}}}function A(r){const t=r.expression;if(!s.isPropertyAccessExpression(t)||t.name.text!=="exportNames"||!u(t.expression))return;const d=r.name.text;switch(d){case"hostedZoneId":{if(!e.hasHostedZone){n(r,`'${e.domainVar}.exportNames.hostedZoneId' is not emitted in '${e.registrar}' mode.`);return}return i.createStringLiteral(e.exportNames.hostedZoneId)}case"certificateArn":{if(!e.hasCertificates){n(r,`'${e.domainVar}.exportNames.certificateArn' is not emitted (no certificates declared).`);return}return i.createStringLiteral(e.exportNames.certificateArn)}case"delegationRoleArn":{if(!e.hasDelegationRole){n(r,`'${e.domainVar}.exportNames.delegationRoleArn' is not emitted (no apex delegation role created).`);return}return i.createStringLiteral(e.exportNames.delegationRoleArn)}default:{n(r,`'${e.domainVar}.exportNames.${d}' is not a known export name.`);return}}}function l(r){if(s.isPropertyAccessExpression(r)){const t=A(r);if(t!==void 0)return t}if(s.isCallExpression(r)){const t=h(r);if(t!==void 0)return t}if(s.isPropertyAccessExpression(r)){const t=y(r);if(t!==void 0)return t}return s.visitEachChild(r,l,void 0)}const $=a.statements.map(r=>l(r));return{sourceFile:i.updateSourceFile(a,$,a.isDeclarationFile,a.referencedFiles,a.typeReferenceDirectives,a.hasNoDefaultLib,a.libReferenceDirectives),needsCertificateMap:o,warnings:c}}function w(a){const e=s.factory,c=[];return c.push(e.createPropertyAssignment(e.createIdentifier("hostedZoneId"),e.createStringLiteral(a.exportNames.hostedZoneId))),c.push(e.createPropertyAssignment(e.createIdentifier("certificateArn"),e.createStringLiteral(a.exportNames.certificateArn))),c.push(e.createPropertyAssignment(e.createIdentifier("delegationRoleArn"),e.createStringLiteral(a.exportNames.delegationRoleArn))),e.createObjectLiteralExpression(c,!0)}function R(a){const e=s.factory,c=a.map((f,n)=>e.createArrayLiteralExpression([e.createStringLiteral(f),e.createIdentifier(`cert${n}`)],!1)),o=[e.createTypeReferenceNode("string",void 0),e.createTypeReferenceNode("acm.Certificate",void 0)],i=e.createNewExpression(e.createIdentifier("Map"),o,[e.createArrayLiteralExpression(c,!0)]);return e.createVariableStatement(void 0,e.createVariableDeclarationList([e.createVariableDeclaration(e.createIdentifier("certificates"),void 0,void 0,i)],s.NodeFlags.Const))}export{R as buildCertificateMapStatement,I as rewriteDomainPropertyAccess};

package/bin/assets/generators/utils/ast/astSurgicalModification.d.ts

@@ -0,0 +1,2 @@
+import type { SurgicalModificationResult } from "@fjall/generator";
+export declare function createBackup(filePath: string): SurgicalModificationResult;

package/bin/assets/generators/utils/ast/astSurgicalModification.js

@@ -0,0 +1 @@
+import*as s from"node:fs";import{getErrorMessage as u}from"@fjall/generator";const a=1e4;function f(r){return r instanceof Error&&"code"in r}function p(r){try{const t=s.readFileSync(r,"utf-8"),n=`${r}.bak`;let e=n;for(let c=1;c<=a;c+=1)try{return s.writeFileSync(e,t,{flag:"wx"}),{content:e,success:!0}}catch(o){if(!f(o)||o.code!=="EEXIST")throw o;e=`${n}.${c}`}return{content:"",success:!1,error:`Failed to create backup of ${r}: exhausted ${String(a)} suffix attempts`}}catch(t){return{content:"",success:!1,error:`Failed to create backup of ${r}: ${u(t)}`}}}export{p as createBackup};

package/bin/assets/generators/utils/ast/index.d.ts

@@ -0,0 +1,3 @@
+export { createBackup } from "./astSurgicalModification.js";
+export { replaceStatement, rewriteNamedImport, type ReplacementImportSpec } from "./astCodeModification.js";
+export { buildCertificateMapStatement, rewriteDomainPropertyAccess, type DomainRewriteContext, type DomainRewriteResult } from "./astDomainRewriter.js";

package/bin/assets/generators/utils/ast/index.js

@@ -0,0 +1 @@
+import{createBackup as t}from"./astSurgicalModification.js";import{replaceStatement as o,rewriteNamedImport as m}from"./astCodeModification.js";import{buildCertificateMapStatement as c,rewriteDomainPropertyAccess as i}from"./astDomainRewriter.js";export{c as buildCertificateMapStatement,t as createBackup,o as replaceStatement,i as rewriteDomainPropertyAccess,m as rewriteNamedImport};

package/bin/assets/generators/utils/copySharedFiles.d.ts

@@ -0,0 +1,10 @@
+import { type Tree } from "@nx/devkit";
+/**
+ * Copies shared CDK configuration files to the target directory
+ * @param tree - Nx workspace tree
+ * @param targetPath - Target directory path. Can be:
+ *   - App name only (e.g., "myapp") - will be prefixed with "fjall/"
+ *   - Full path (e.g., "fjall/account") - will be used as-is
+ * @param templateVariables - Variables for EJS template rendering
+ */
+export declare function copySharedCdkFiles(tree: Tree, targetPath: string, templateVariables: Record<string, unknown>): void;

package/bin/assets/generators/utils/copySharedFiles.js

@@ -0,0 +1 @@
+import{join as n}from"path";import{renderEjsTemplates as s}from"./renderEjs.js";import{getAppPath as p}from"../../src/util/pathHelpers.js";const t=import.meta.dirname;function f(o,e,i){const r=n(t,"..","shared","files"),m=e.includes("/")?e:p(e);s(o,r,m,i)}export{f as copySharedCdkFiles};

package/bin/assets/generators/utils/index.d.ts

@@ -0,0 +1,8 @@
+export * from "@fjall/generator";
+export * from "./ast/index.js";
+export * from "./planning/index.js";
+export * from "./resources/index.js";
+export { promptForConnection, selectResources } from "./prompts.js";
+export { renderEjsTemplates, renderEjsString, copyTemplateFile } from "./renderEjs.js";
+export { copySharedCdkFiles } from "./copySharedFiles.js";
+export { FileSystemTree } from "./tree.js";

package/bin/assets/generators/utils/index.js

@@ -0,0 +1 @@
+export*from"@fjall/generator";export*from"./ast/index.js";export*from"./planning/index.js";export*from"./resources/index.js";import{promptForConnection as f,selectResources as s}from"./prompts.js";import{renderEjsTemplates as l,renderEjsString as n,copyTemplateFile as c}from"./renderEjs.js";import{copySharedCdkFiles as d}from"./copySharedFiles.js";import{FileSystemTree as a}from"./tree.js";export{a as FileSystemTree,d as copySharedCdkFiles,c as copyTemplateFile,f as promptForConnection,n as renderEjsString,l as renderEjsTemplates,s as selectResources};

package/bin/assets/generators/utils/integrationTestUtils.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Integration Test Utilities
+ *
+ * Shared utilities for integration tests that run CDK synth operations.
+ * Optimises test performance by using shared node_modules instead of
+ * running npm install for each test.
+ *
+ * @see aiDocs/architecture/TESTING_STRATEGY.md
+ */
+export declare const CLI_ROOT: string;
+export declare const TEST_APPS_DIR: string;
+export declare const COMPONENTS_DIR: string;
+export declare const TEST_FIXTURES_DIR: string;
+export declare const SHARED_NODE_MODULES: string;
+export declare const MOCK_ACCOUNT = "123456789012";
+export declare const MOCK_REGION = "ap-southeast-2";
+export interface CfnResource {
+    Type: string;
+    Properties: Record<string, unknown>;
+    [key: string]: unknown;
+}
+export interface CfnTemplate {
+    Resources: Record<string, CfnResource>;
+    [key: string]: unknown;
+}
+/**
+ * ECS Container definition structure from CloudFormation.
+ */
+export interface EcsContainerDefinition {
+    Name?: string;
+    Image?: string;
+    Essential?: boolean;
+    PortMappings?: Array<{
+        ContainerPort?: number;
+        Protocol?: string;
+    }>;
+    Environment?: Array<{
+        Name: string;
+        Value: string;
+    }>;
+    Secrets?: Array<{
+        Name: string;
+        ValueFrom: unknown;
+    }>;
+    Command?: string[];
+    EntryPoint?: string[];
+    [key: string]: unknown;
+}
+/**
+ * Common CloudFormation resource properties accessed in tests.
+ * Provides type safety for frequently accessed properties while
+ * allowing access to any other property via index signature.
+ */
+export interface CfnResourceProperties {
+    GroupDescription?: string;
+    SecurityGroupIngress?: Array<{
+        CidrIp?: string;
+        FromPort?: number;
+        ToPort?: number;
+        IpProtocol?: string;
+        SourceSecurityGroupId?: unknown;
+    }>;
+    Conditions?: Array<{
+        Field?: string;
+        PathPatternConfig?: {
+            Values?: string[];
+        };
+        HostHeaderConfig?: {
+            Values?: string[];
+        };
+        Values?: string[];
+    }>;
+    ContainerDefinitions?: EcsContainerDefinition[];
+    RequiresCompatibilities?: string[];
+    GenerateSecretString?: {
+        SecretStringTemplate?: string;
+        GenerateStringKey?: string;
+        ExcludeCharacters?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * A CloudFormation resource entry with typed common properties.
+ */
+export interface ResourceEntry {
+    logicalId: string;
+    properties: CfnResourceProperties;
+}
+export interface CdkSynthResult {
+    success: boolean;
+    output: string;
+}
+/**
+ * Run CDK synth on a test app.
+ * Uses shared node_modules when available, falls back to npm install.
+ */
+export declare function runCdkSynth(appName: string, options?: {
+    context?: Record<string, unknown>;
+}): CdkSynthResult;
+/**
+ * Clean up a test app directory.
+ * Handles symlinked node_modules properly.
+ */
+export declare function cleanupTestApp(appName: string): void;
+/**
+ * Read a CloudFormation template from cdk.out.
+ */
+export declare function readCfnTemplate(appName: string, stackSuffix: string): CfnTemplate;
+/**
+ * Get infrastructure.ts content for a test app.
+ */
+export declare function getInfrastructureContent(appName: string): string;
+/**
+ * Find resources by type in a CloudFormation template.
+ */
+export declare function findResourcesByType(template: CfnTemplate, resourceType: string): ResourceEntry[];
+/**
+ * Find a security group by description substring.
+ * Commonly used to find database or ALB security groups.
+ */
+export declare function findSecurityGroupByDescription(securityGroups: ResourceEntry[], descriptionSubstring: string): ResourceEntry | undefined;
+/**
+ * Extract values from ALB listener rule conditions by field type.
+ */
+export declare function extractConditionValues(listenerRules: ResourceEntry[], fieldType: "path-pattern" | "host-header"): string[];
+/**
+ * Ensure components-infrastructure is built.
+ */
+export declare function ensureComponentsBuilt(): void;

package/bin/assets/generators/utils/integrationTestUtils.js

@@ -0,0 +1,2 @@
+import r from"fs";import o from"path";import{execFileSync as p}from"child_process";import{normaliseError as S}from"../../src/util/errorUtils.js";const a=o.resolve(import.meta.dirname,"../.."),c=o.join(a,"fjall"),d=o.resolve(a,"../components/infrastructure"),y=o.join(a,"test-fixtures"),l=o.join(y,"node_modules"),f="123456789012",s="ap-southeast-2";function O(n,e){const t=o.join(c,n);return x(t),_(t,e?.context),m(t)?b(t):{success:!1,output:"Failed to set up node_modules"}}function m(n){const e=o.join(n,"node_modules");if(r.existsSync(l))try{return r.existsSync(e)&&(r.lstatSync(e).isSymbolicLink()?r.unlinkSync(e):r.rmSync(e,{recursive:!0,force:!0})),r.symlinkSync(l,e,"junction"),!0}catch{}if(!r.existsSync(e))try{p("npm",["install"],{cwd:n,encoding:"utf-8",timeout:12e4})}catch{return!1}return!0}function b(n){try{const e=o.join(n,"node_modules",".bin","cdk");return{success:!0,output:p(e,["synth"],{cwd:n,encoding:"utf-8",timeout:12e4,stdio:["pipe","pipe","pipe"],env:{...process.env,AWS_REGION:s,AWS_DEFAULT_REGION:s,CDK_DEFAULT_ACCOUNT:f,CDK_DEFAULT_REGION:s}})}}catch(e){const t=S(e),i="stdout"in t&&typeof t.stdout=="string"?t.stdout:void 0,u="stderr"in t&&typeof t.stderr=="string"?t.stderr:void 0;return{success:!1,output:i||u||t.message||"Unknown error"}}}function x(n){const e=o.join(n,"package.json"),t=JSON.parse(r.readFileSync(e,"utf-8"));t.dependencies["@fjall/components-infrastructure"]=`file:${d}`,r.writeFileSync(e,JSON.stringify(t,null,2))}function _(n,e){const t={app:"./node_modules/.bin/ts-node infrastructure.ts",context:{"aws:cdk:bundling-stacks":[],[`availability-zones:account=${f}:region=${s}`]:[`${s}a`,`${s}b`,`${s}c`],[`vpc-provider:account=${f}:filter.isDefault=true:region=${s}:returnAsymmetricSubnets=true`]:{vpcId:"vpc-12345678",vpcCidrBlock:"10.0.0.0/16",availabilityZones:[`${s}a`,`${s}b`],publicSubnetIds:["subnet-pub1","subnet-pub2"],publicSubnetRouteTableIds:["rtb-pub1","rtb-pub2"],privateSubnetIds:["subnet-priv1","subnet-priv2"],privateSubnetRouteTableIds:["rtb-priv1","rtb-priv2"]},...e}};r.writeFileSync(o.join(n,"cdk.json"),JSON.stringify(t,null,2))}function E(n){const e=o.join(c,n);if(!r.existsSync(e))return;const t=o.join(e,"node_modules");r.existsSync(t)&&r.lstatSync(t).isSymbolicLink()&&r.unlinkSync(t),r.rmSync(e,{recursive:!0,force:!0})}function C(n){return n.replace(/[-_](.)/g,(e,t)=>t.toUpperCase()).replace(/^./,e=>e.toUpperCase())}function T(n,e){const t=o.join(c,n,"cdk.out",`${C(n)}${e}.template.json`);if(!r.existsSync(t))throw new Error(`Template not found: ${t}`);return JSON.parse(r.readFileSync(t,"utf-8"))}function h(n){const e=o.join(c,n,"infrastructure.ts");if(!r.existsSync(e))throw new Error(`Infrastructure file not found: ${e}`);return r.readFileSync(e,"utf-8")}function I(n,e){return Object.entries(n.Resources).filter(([,t])=>t.Type===e).map(([t,i])=>({logicalId:t,properties:i.Properties}))}function D(n,e){return n.find(t=>t.properties.GroupDescription?.includes(e))}function N(n,e){const t=e==="path-pattern"?"PathPatternConfig":"HostHeaderConfig";return n.flatMap(i=>i.properties.Conditions?.filter(u=>u.Field===e).flatMap(u=>u[t]?.Values??u.Values??[])).filter(i=>i!==void 0)}function R(){r.existsSync(o.join(d,"dist"))||(process.stdout.write(`Building components-infrastructure...
+`),p("npm",["run","build"],{cwd:d,stdio:"inherit"}))}export{a as CLI_ROOT,d as COMPONENTS_DIR,f as MOCK_ACCOUNT,s as MOCK_REGION,l as SHARED_NODE_MODULES,c as TEST_APPS_DIR,y as TEST_FIXTURES_DIR,E as cleanupTestApp,R as ensureComponentsBuilt,N as extractConditionValues,I as findResourcesByType,D as findSecurityGroupByDescription,h as getInfrastructureContent,T as readCfnTemplate,O as runCdkSynth};

package/bin/assets/generators/utils/mockTree.d.ts

@@ -0,0 +1,30 @@
+import type { Tree } from "@nx/devkit";
+/**
+ * Lightweight mock Tree implementation for generator unit tests.
+ * Use this instead of duplicating MockTree in each test file.
+ *
+ * For integration tests that need real file system behaviour, use FileSystemTree instead.
+ */
+export declare class MockTree {
+    private files;
+    private changes;
+    constructor(initialFiles?: Record<string, string>);
+    read(path: string): Buffer | null;
+    write(path: string, content: string): void;
+    exists(path: string): boolean;
+    getChanges(): Array<{
+        path: string;
+        content: string;
+    }>;
+    getFileContent(path: string): string | undefined;
+}
+/**
+ * Type helper: cast MockTree as Tree for generator functions that expect the NX Tree interface.
+ *
+ * @example
+ * ```ts
+ * const tree = new MockTree({ "apps/myapp/infrastructure/main.ts": code });
+ * const result = myGenerator(tree as unknown as Tree, options);
+ * ```
+ */
+export type { Tree };

package/bin/assets/generators/utils/mockTree.js

@@ -0,0 +1 @@
+class r{files=new Map;changes=[];constructor(e={}){for(const[t,s]of Object.entries(e))this.files.set(t,s)}read(e){const t=this.files.get(e);return t?Buffer.from(t):null}write(e,t){this.files.set(e,t),this.changes.push({path:e,content:t})}exists(e){return this.files.has(e)}getChanges(){return this.changes}getFileContent(e){return this.files.get(e)}}export{r as MockTree};

package/bin/assets/generators/utils/planning/generatorHelpers.d.ts

@@ -0,0 +1,35 @@
+import { type Tree } from "@nx/devkit";
+import { type Result } from "../../../src/types/Result.js";
+import { type ParsedInfrastructure, type ApplicationResourcePlan } from "@fjall/generator";
+import { type z } from "zod";
+export declare function createInfrastructureBackup(tree: Tree, infrastructurePath: string, originalContent: string): Result<void, Error>;
+export declare function pickDefined<T extends Record<string, unknown>>(source: T, ...keys: Array<keyof T>): Partial<Pick<T, (typeof keys)[number]>>;
+export interface ParseAndBuildResult {
+    parsed: ParsedInfrastructure;
+    plan: ApplicationResourcePlan;
+}
+export declare function parseAndBuildPlan(content: string, appName: string): Result<ParseAndBuildResult, Error>;
+export declare function parseAndBuildPlanOrThrow(content: string, appName: string): ParseAndBuildResult;
+export declare function validateGeneratorOptions<T>(schema: z.ZodType<T>, options: unknown, generatorName: string): T;
+export declare function readInfrastructureOrThrow(tree: Tree, appName: string): {
+    path: string;
+    content: string;
+};
+export interface WithInfrastructurePlanContext<T> {
+    tree: Tree;
+    validated: T;
+    plan: ApplicationResourcePlan;
+    infrastructurePath: string;
+    content: string;
+}
+/**
+ * Orchestrates the common generator pattern: validate options, read existing
+ * infrastructure, parse into a plan, run custom logic, then write back.
+ *
+ * The callback receives the parsed plan and validated options, and must return
+ * the updated plan to be written.
+ */
+export declare function withInfrastructurePlan<T extends {
+    appName: string;
+}>(tree: Tree, schema: z.ZodType<T>, options: unknown, generatorName: string, buildPlan: (ctx: WithInfrastructurePlanContext<T>) => ApplicationResourcePlan | Promise<ApplicationResourcePlan>): Promise<void>;
+export declare function generateAndWriteInfrastructure(tree: Tree, infrastructurePath: string, originalContent: string, plan: ApplicationResourcePlan): Result<void, Error>;

package/bin/assets/generators/utils/planning/generatorHelpers.js

@@ -0,0 +1,2 @@
+import*as p from"fs";import*as w from"path";import{logger as g}from"../../../src/util/logger/index.js";import{normaliseError as d}from"../../../src/util/errorUtils.js";import{success as u,failure as a}from"../../../src/types/Result.js";import{parseInfrastructure as h,convertToResourcePlan as k,getZodErrorMessage as x,generateInfrastructureFromPlan as E}from"@fjall/generator";import{getInfrastructurePath as I}from"../../../src/util/pathHelpers.js";function P(t,o,r){const e=t.root?w.join(t.root,o):o;try{return p.existsSync(e)&&p.writeFileSync(`${e}.bak`,r),u(void 0)}catch(s){const n=d(s);return g.warn("Generator",`Failed to create backup of ${o}`,{error:n.message}),a(n)}}function S(t,...o){const r={};for(const e of o)t[e]!==void 0&&(r[e]=t[e]);return r}function $(t,o){try{const r=h(t,{extractCustomCode:!0}),e=k(r,o,{skipValidation:!0});return r.customCodeBlocks?.length&&(e.customCodeBlocks=r.customCodeBlocks),u({parsed:r,plan:e})}catch(r){return a(d(r))}}function y(t,o){const r=$(t,o);if(!r.success)throw new Error(`Failed to parse infrastructure: ${r.error.message}`);return r.data}function B(t,o,r){const e=t.safeParse(o);if(!e.success)throw new Error(`Invalid ${r} generator options:
+${x(e.error)}`);return e.data}function b(t,o){const r=I(o),e=t.read(r)?.toString();if(!e)throw new Error(`App '${o}' not found. Expected infrastructure.ts at: ${r}`);return{path:r,content:e}}async function T(t,o,r,e,s){const n=B(o,r,e),{path:i,content:c}=b(t,n.appName),{plan:l}=y(c,n.appName),m=await s({tree:t,validated:n,plan:l,infrastructurePath:i,content:c}),f=C(t,i,c,m);if(!f.success)throw new Error(f.error.message)}function C(t,o,r,e){const s=E(e);if(!s.success)return a(s.error);const n=P(t,o,r);return n.success?(t.write(o,s.data),u(void 0)):a(new Error(`Failed to create backup: ${n.error.message}`))}export{P as createInfrastructureBackup,C as generateAndWriteInfrastructure,$ as parseAndBuildPlan,y as parseAndBuildPlanOrThrow,S as pickDefined,b as readInfrastructureOrThrow,B as validateGeneratorOptions,T as withInfrastructurePlan};

package/bin/assets/generators/utils/planning/index.d.ts

@@ -0,0 +1 @@
+export { createInfrastructureBackup, pickDefined, type ParseAndBuildResult, parseAndBuildPlan, parseAndBuildPlanOrThrow, validateGeneratorOptions, readInfrastructureOrThrow, generateAndWriteInfrastructure, withInfrastructurePlan, type WithInfrastructurePlanContext } from "./generatorHelpers.js";

package/bin/assets/generators/utils/planning/index.js

@@ -0,0 +1 @@
+import{createInfrastructureBackup as a,pickDefined as t,parseAndBuildPlan as n,parseAndBuildPlanOrThrow as u,validateGeneratorOptions as d,readInfrastructureOrThrow as i,generateAndWriteInfrastructure as c,withInfrastructurePlan as s}from"./generatorHelpers.js";export{a as createInfrastructureBackup,c as generateAndWriteInfrastructure,n as parseAndBuildPlan,u as parseAndBuildPlanOrThrow,t as pickDefined,i as readInfrastructureOrThrow,d as validateGeneratorOptions,s as withInfrastructurePlan};

package/bin/assets/generators/utils/prompts.d.ts

@@ -0,0 +1,4 @@
+export declare function promptForConnection(resourceCount: number, resourceType: string, singularMessage?: string, pluralMessage?: string): Promise<boolean>;
+export declare function selectResources<T extends {
+    name: string;
+}>(resources: T[], message: string, getDescription?: (r: T) => string): Promise<string[]>;

package/bin/assets/generators/utils/prompts.js

@@ -0,0 +1,6 @@
+import i from"prompts";async function p(e,s,o,t){const c=`Connect to existing ${s}?`,n=`Found ${e} ${s}s. Configure connections?`,a=e===1?o??c:t?.replace("{count}",String(e))??n,l=await i([{type:"confirm",name:"shouldConnect",message:a,initial:!0}]);return l?l.shouldConnect:!1}async function u(e,s,o){if(e.length===1)return process.stdout.write(`
+  Auto-selected: ${e[0].name}
+`),[e[0].name];let t=[];for(;t.length===0;)t=(await i([{type:"multiselect",name:"selected",message:s,choices:e.map(n=>({title:n.name,value:n.name,description:o?.(n),selected:!1}))}]))?.selected||[],t.length===0&&process.stdout.write(`
+  Please select at least one resource
+
+`);return t}export{p as promptForConnection,u as selectResources};

package/bin/assets/generators/utils/renderEjs.d.ts

@@ -0,0 +1,24 @@
+import { type Tree } from "@nx/devkit";
+/**
+ * Renders EJS templates and generates files using Tree
+ * @param tree - Tree for file operations
+ * @param templatePath - Path to the template files
+ * @param targetPath - Target path for generated files
+ * @param substitutions - Object containing template variables
+ */
+export declare function renderEjsTemplates(tree: Tree, templatePath: string, targetPath: string, substitutions: Record<string, unknown>): void;
+/**
+ * Renders a single EJS template string
+ * @param template - EJS template string
+ * @param data - Template data
+ * @returns Rendered template string
+ */
+export declare function renderEjsString(template: string, data: Record<string, unknown>): string;
+/**
+ * Copies a template file with EJS substitutions
+ * @param tree - Tree for file operations
+ * @param from - Source template path
+ * @param to - Destination path
+ * @param substitutions - Template variables
+ */
+export declare function copyTemplateFile(tree: Tree, from: string, to: string, substitutions: Record<string, unknown>): void;

package/bin/assets/generators/utils/renderEjs.js

@@ -0,0 +1 @@
+import S from"ejs";import r from"fs";import a from"path";function w(t,e,i,s){function n(o,u=""){const y=r.readdirSync(o);for(const d of y){const c=a.join(o,d),m=a.join(u,d),p=r.statSync(c);if(p.isDirectory())n(c,m);else if(p.isFile()){const f=r.readFileSync(c,"utf-8"),j=a.join(i,m),F=f.includes("<%")?l(f,s):f;t.write(j,F)}}}n(e)}function l(t,e){return S.render(t,e)}function D(t,e,i,s){const n=r.readFileSync(e,"utf-8"),o=l(n,s);t.write(i,o)}export{D as copyTemplateFile,l as renderEjsString,w as renderEjsTemplates};

package/bin/assets/generators/utils/resources/connectionHelpers.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Interactive resource connection handler (CLI-only — uses prompts).
+ * Pure connection logic (applyComputeConnections, applyServiceConnections)
+ * lives in @fjall/generator for shared use by CLI and webapp.
+ */
+import { type ApplicationResourcePlan, type ConnectionType } from "@fjall/generator";
+interface ConnectionPrompts {
+    readonly singularPrompt: string;
+    readonly pluralPrompt: string;
+}
+interface ConnectionHandlerOptions {
+    readonly connectionConfig?: {
+        readonly connectToCompute?: string[];
+        readonly connectToServices?: string[];
+    };
+    readonly nameProvidedByFlag?: boolean;
+}
+export declare function handleResourceConnections(currentPlan: ApplicationResourcePlan, options: ConnectionHandlerOptions, resourceName: string, type: ConnectionType, prompts: ConnectionPrompts): Promise<void>;
+export {};