@anthusai/papyrus 1.0.0-next.44 → 1.0.0-next.45

package/amplify/functions/content-actions/requirements.txt

@@ -1,5 +1,5 @@
 PyYAML>=6.0.2,<7
 citeproc-py>=0.8.2,<1
 anthus-markus==0.5.1
-Pillow>=10,<12
+Pillow>=11.3,<12
 awscrt>=0.23,<1

package/amplify/functions/content-actions/resource.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { pythonLambdaCode } from "../shared/python-bundle.js";
 const dirname = path.dirname(fileURLToPath(import.meta.url));
 const projectRoot = path.resolve(dirname, "../../..");
-export const contentActionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=10,<12", "awscrt>=0.23,<1"];
+export const contentActionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=11.3,<12", "awscrt>=0.23,<1"];
 function installCheckoutRequirements(outputDir) {
     const requirementsPath = path.join(projectRoot, "amplify/functions/content-actions/requirements.txt");
     execSync(`python3 -m pip install -r "${requirementsPath}" -t "${outputDir}" --no-cache-dir --platform manylinux2014_aarch64 --implementation cp --python-version 3.12 --only-binary=:all: --ignore-requires-python`, { cwd: projectRoot, stdio: "inherit" });

package/amplify/functions/content-actions/resource.ts

@@ -10,7 +10,7 @@ import { pythonLambdaCode, type SiteBundleFile } from "../shared/python-bundle";
 const dirname = path.dirname(fileURLToPath(import.meta.url));
 const projectRoot = path.resolve(dirname, "../../..");
 
-export const contentActionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=10,<12", "awscrt>=0.23,<1"];
+export const contentActionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=11.3,<12", "awscrt>=0.23,<1"];
 
 function installCheckoutRequirements(outputDir: string): void {
   const requirementsPath = path.join(projectRoot, "amplify/functions/content-actions/requirements.txt");

package/amplify/functions/renditions/handler.py

@@ -0,0 +1,94 @@
+from __future__ import annotations
+
+import json
+import os
+import time
+from pathlib import Path
+from typing import Any
+
+from papyrus_content.projection.runtime import SITE_BUCKET_ENV, SITE_STATIC_DIRECTORY_ENV
+from papyrus_content.renditions import (
+    RenditionSettings,
+    S3RenditionStore,
+    make_renditions,
+    meta_key,
+    settings_from_static_directory,
+    source_from_media_key,
+)
+
+_loaded: dict[str, Any] = {}
+
+
+def configured_settings() -> RenditionSettings | None:
+    if "settings" not in _loaded:
+        static_directory = (os.environ.get(SITE_STATIC_DIRECTORY_ENV) or "").strip()
+        _loaded["settings"] = settings_from_static_directory(Path(static_directory) if static_directory else None)
+    return _loaded["settings"]
+
+
+def site_store() -> S3RenditionStore:
+    if "store" not in _loaded:
+        _loaded["store"] = S3RenditionStore(os.environ[SITE_BUCKET_ENV])
+    return _loaded["store"]
+
+
+def s3_client():
+    if "s3" not in _loaded:
+        import boto3
+
+        _loaded["s3"] = boto3.client("s3")
+    return _loaded["s3"]
+
+
+def media_objects(event: dict) -> list[tuple[str, str]]:
+    if event.get("source") == "aws.s3" and "detail" in event:
+        detail = event["detail"]
+        return [(detail["bucket"]["name"], detail["object"]["key"])]
+    if "bucket" in event and "key" in event:
+        return [(event["bucket"], event["key"])]
+    raise ValueError("The event is neither an S3 object event nor a {bucket, key} request.")
+
+
+def render_media_object(
+    settings: RenditionSettings, bucket: str, key: str, *, skip_existing: bool = False, dry_run: bool = False
+) -> dict:
+    source = source_from_media_key(key)
+    if source is None:
+        return {"key": key, "action": "ignored", "reason": "not an image under media/"}
+    if skip_existing and site_store().get(meta_key(settings.pipeline, source)) is not None:
+        return {"key": key, "source": source, "action": "skipped-existing"}
+    if dry_run:
+        return {"key": key, "source": source, "action": "would-render"}
+    started = time.perf_counter()
+    data = s3_client().get_object(Bucket=bucket, Key=key)["Body"].read()
+    downloaded = time.perf_counter()
+    result = make_renditions(settings, site_store(), source, data)
+    finished = time.perf_counter()
+    return {
+        "key": key,
+        "source": source,
+        "action": "rendered",
+        "kind": result["kind"],
+        "written": result["written"],
+        "sourceBytes": len(data),
+        "downloadMilliseconds": round((downloaded - started) * 1000),
+        "renditionMilliseconds": round((finished - downloaded) * 1000),
+    }
+
+
+def handler(event, context):
+    settings = configured_settings()
+    if settings is None:
+        return {"ok": True, "results": [], "skipped": "this site has no images settings in projection.json"}
+    results = [
+        render_media_object(
+            settings,
+            bucket,
+            key,
+            skip_existing=event.get("skipExisting") is True,
+            dry_run=event.get("dryRun") is True,
+        )
+        for bucket, key in media_objects(event)
+    ]
+    print(json.dumps({"renditions": results}))
+    return {"ok": True, "results": results}

package/amplify/functions/renditions/requirements.txt

@@ -0,0 +1,4 @@
+PyYAML>=6.0.2,<7
+citeproc-py>=0.8.2,<1
+anthus-markus==0.5.1
+Pillow>=11.3,<12

package/amplify/publication/renditions-function.js

@@ -0,0 +1,74 @@
+import { Duration, Size } from "aws-cdk-lib";
+import * as events from "aws-cdk-lib/aws-events";
+import * as targets from "aws-cdk-lib/aws-events-targets";
+import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
+import { Architecture, Function as LambdaFunction, Runtime } from "aws-cdk-lib/aws-lambda";
+import * as sqs from "aws-cdk-lib/aws-sqs";
+import { execSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { pythonLambdaCode } from "../functions/shared/python-bundle.js";
+import { RENDITIONS_EPHEMERAL_STORAGE_MB, RENDITIONS_MEDIA_PREFIX, RENDITIONS_MEMORY_MB, RENDITIONS_TIMEOUT_SECONDS, renditionsEnvironment, renditionsEventPattern, } from "./renditions-settings.js";
+const dirname = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(dirname, "../..");
+export const renditionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=11.3,<12"];
+function installCheckoutRequirements(outputDir) {
+    const requirementsPath = path.join(projectRoot, "amplify/functions/renditions/requirements.txt");
+    execSync(`python3 -m pip install -r "${requirementsPath}" -t "${outputDir}" --no-cache-dir --platform manylinux2014_aarch64 --implementation cp --python-version 3.12 --only-binary=:all: --ignore-requires-python`, { cwd: projectRoot, stdio: "inherit" });
+}
+export function addRenditionsFunction(scope, props) {
+    const deadLetterQueue = new sqs.Queue(scope, "RenditionsDeadLetterQueue", {
+        encryption: sqs.QueueEncryption.SQS_MANAGED,
+        retentionPeriod: Duration.days(14),
+        enforceSSL: true,
+    });
+    const renditions = new LambdaFunction(scope, "RenditionsFunction", {
+        runtime: Runtime.PYTHON_3_12,
+        architecture: Architecture.ARM_64,
+        handler: "handler.handler",
+        timeout: Duration.seconds(RENDITIONS_TIMEOUT_SECONDS),
+        memorySize: RENDITIONS_MEMORY_MB,
+        ephemeralStorageSize: Size.mebibytes(RENDITIONS_EPHEMERAL_STORAGE_MB),
+        retryAttempts: 2,
+        deadLetterQueue,
+        environment: renditionsEnvironment(props.siteBucket.bucketName),
+        code: props.code ?? pythonLambdaCode({
+            functionDir: "renditions",
+            modules: ["papyrus_content"],
+            requirements: renditionsRequirements,
+            noDeps: true,
+            checkoutExtras: installCheckoutRequirements,
+            siteFiles: props.siteFiles,
+        }, [
+            "bash",
+            "-c",
+            [
+                "set -euo pipefail",
+                "mkdir -p /asset-output/papyrus_content",
+                "cp amplify/functions/renditions/handler.py /asset-output/handler.py",
+                "cp -R src/papyrus_content/. /asset-output/papyrus_content/",
+                "python3 -m pip install -r amplify/functions/renditions/requirements.txt -t /asset-output --no-cache-dir",
+            ].join(" && "),
+        ]),
+    });
+    renditions.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["s3:GetObject"],
+        resources: [props.mediaBucket.arnForObjects(`${RENDITIONS_MEDIA_PREFIX}*`)],
+    }));
+    renditions.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["s3:PutObject", "s3:GetObject"],
+        resources: [props.siteBucket.arnForObjects("*")],
+    }));
+    renditions.addToRolePolicy(new PolicyStatement({
+        effect: Effect.ALLOW,
+        actions: ["s3:ListBucket"],
+        resources: [props.siteBucket.bucketArn],
+    }));
+    const rule = new events.Rule(scope, "MediaObjectCreatedRule", {
+        eventPattern: renditionsEventPattern(props.mediaBucket.bucketName),
+    });
+    rule.addTarget(new targets.LambdaFunction(renditions, { retryAttempts: 2 }));
+    return { function: renditions, rule, deadLetterQueue };
+}

package/amplify/publication/renditions-function.ts

@@ -0,0 +1,112 @@
+import { Duration, Size } from "aws-cdk-lib";
+import * as events from "aws-cdk-lib/aws-events";
+import * as targets from "aws-cdk-lib/aws-events-targets";
+import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
+import { Architecture, type Code, Function as LambdaFunction, Runtime } from "aws-cdk-lib/aws-lambda";
+import * as s3 from "aws-cdk-lib/aws-s3";
+import * as sqs from "aws-cdk-lib/aws-sqs";
+import type { Construct } from "constructs";
+import { execSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { pythonLambdaCode, type SiteBundleFile } from "../functions/shared/python-bundle";
+import {
+  RENDITIONS_EPHEMERAL_STORAGE_MB,
+  RENDITIONS_MEDIA_PREFIX,
+  RENDITIONS_MEMORY_MB,
+  RENDITIONS_TIMEOUT_SECONDS,
+  renditionsEnvironment,
+  renditionsEventPattern,
+} from "./renditions-settings";
+
+const dirname = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(dirname, "../..");
+
+export const renditionsRequirements = ["PyYAML>=6.0.2,<7", "citeproc-py>=0.8.2,<1", "anthus-markus==0.5.1", "Pillow>=11.3,<12"];
+
+export type RenditionsFunctionProps = {
+  siteBucket: s3.IBucket;
+  mediaBucket: s3.IBucket;
+  siteFiles: SiteBundleFile[];
+  code?: Code;
+};
+
+export type RenditionsFunction = {
+  function: LambdaFunction;
+  rule: events.Rule;
+  deadLetterQueue: sqs.Queue;
+};
+
+function installCheckoutRequirements(outputDir: string): void {
+  const requirementsPath = path.join(projectRoot, "amplify/functions/renditions/requirements.txt");
+  execSync(
+    `python3 -m pip install -r "${requirementsPath}" -t "${outputDir}" --no-cache-dir --platform manylinux2014_aarch64 --implementation cp --python-version 3.12 --only-binary=:all: --ignore-requires-python`,
+    { cwd: projectRoot, stdio: "inherit" },
+  );
+}
+
+export function addRenditionsFunction(scope: Construct, props: RenditionsFunctionProps): RenditionsFunction {
+  const deadLetterQueue = new sqs.Queue(scope, "RenditionsDeadLetterQueue", {
+    encryption: sqs.QueueEncryption.SQS_MANAGED,
+    retentionPeriod: Duration.days(14),
+    enforceSSL: true,
+  });
+  const renditions = new LambdaFunction(scope, "RenditionsFunction", {
+    runtime: Runtime.PYTHON_3_12,
+    architecture: Architecture.ARM_64,
+    handler: "handler.handler",
+    timeout: Duration.seconds(RENDITIONS_TIMEOUT_SECONDS),
+    memorySize: RENDITIONS_MEMORY_MB,
+    ephemeralStorageSize: Size.mebibytes(RENDITIONS_EPHEMERAL_STORAGE_MB),
+    retryAttempts: 2,
+    deadLetterQueue,
+    environment: renditionsEnvironment(props.siteBucket.bucketName),
+    code: props.code ?? pythonLambdaCode(
+      {
+        functionDir: "renditions",
+        modules: ["papyrus_content"],
+        requirements: renditionsRequirements,
+        noDeps: true,
+        checkoutExtras: installCheckoutRequirements,
+        siteFiles: props.siteFiles,
+      },
+      [
+        "bash",
+        "-c",
+        [
+          "set -euo pipefail",
+          "mkdir -p /asset-output/papyrus_content",
+          "cp amplify/functions/renditions/handler.py /asset-output/handler.py",
+          "cp -R src/papyrus_content/. /asset-output/papyrus_content/",
+          "python3 -m pip install -r amplify/functions/renditions/requirements.txt -t /asset-output --no-cache-dir",
+        ].join(" && "),
+      ],
+    ),
+  });
+  renditions.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: ["s3:GetObject"],
+      resources: [props.mediaBucket.arnForObjects(`${RENDITIONS_MEDIA_PREFIX}*`)],
+    }),
+  );
+  renditions.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: ["s3:PutObject", "s3:GetObject"],
+      resources: [props.siteBucket.arnForObjects("*")],
+    }),
+  );
+  renditions.addToRolePolicy(
+    new PolicyStatement({
+      effect: Effect.ALLOW,
+      actions: ["s3:ListBucket"],
+      resources: [props.siteBucket.bucketArn],
+    }),
+  );
+  const rule = new events.Rule(scope, "MediaObjectCreatedRule", {
+    eventPattern: renditionsEventPattern(props.mediaBucket.bucketName),
+  });
+  rule.addTarget(new targets.LambdaFunction(renditions, { retryAttempts: 2 }));
+  return { function: renditions, rule, deadLetterQueue };
+}

package/amplify/publication/renditions-settings.js

@@ -0,0 +1,43 @@
+/**
+ * Pure planning for the upload-time renditions function of an s3-projection
+ * site (no CDK imports, so it can be tested without synthesizing).
+ *
+ * The function exists only for a site whose `projection.json` carries an
+ * `images` section: that section is the one place the image pipeline settings
+ * live, shared by the renditions function and the projector.
+ */
+import fs from "node:fs";
+import path from "node:path";
+export const RENDITIONS_MEMORY_MB = 3008;
+export const RENDITIONS_TIMEOUT_SECONDS = 300;
+export const RENDITIONS_EPHEMERAL_STORAGE_MB = 2048;
+export const RENDITIONS_STATIC_DIRECTORY = "/var/task/site_static";
+export const RENDITIONS_MEDIA_PREFIX = "media/";
+export const RENDITIONS_FUNCTION_NAME_ENV = "PAPYRUS_RENDITIONS_FUNCTION_NAME";
+export function projectionSettingsHaveImages(settingsPath) {
+    if (!fs.existsSync(settingsPath))
+        return false;
+    const parsed = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
+    return typeof parsed.images === "object" && parsed.images !== null;
+}
+export function planRenditions(publication, workingDirectory) {
+    if (publication?.staticDir === undefined)
+        return { enabled: false, siteFiles: [] };
+    const settingsFile = path.join(publication.staticDir, "projection.json");
+    if (!projectionSettingsHaveImages(path.resolve(workingDirectory, settingsFile)))
+        return { enabled: false, siteFiles: [] };
+    return { enabled: true, siteFiles: [{ from: settingsFile, to: "site_static/projection.json" }] };
+}
+export function renditionsEventPattern(mediaBucketName) {
+    return {
+        source: ["aws.s3"],
+        detailType: ["Object Created"],
+        detail: { bucket: { name: [mediaBucketName] }, object: { key: [{ prefix: RENDITIONS_MEDIA_PREFIX }] } },
+    };
+}
+export function renditionsEnvironment(siteBucketName) {
+    return {
+        PAPYRUS_SITE_BUCKET: siteBucketName,
+        PAPYRUS_SITE_STATIC_DIR: RENDITIONS_STATIC_DIRECTORY,
+    };
+}

package/amplify/publication/renditions-settings.ts

@@ -0,0 +1,50 @@
+/**
+ * Pure planning for the upload-time renditions function of an s3-projection
+ * site (no CDK imports, so it can be tested without synthesizing).
+ *
+ * The function exists only for a site whose `projection.json` carries an
+ * `images` section: that section is the one place the image pipeline settings
+ * live, shared by the renditions function and the projector.
+ */
+import fs from "node:fs";
+import path from "node:path";
+
+export const RENDITIONS_MEMORY_MB = 3008;
+export const RENDITIONS_TIMEOUT_SECONDS = 300;
+export const RENDITIONS_EPHEMERAL_STORAGE_MB = 2048;
+export const RENDITIONS_STATIC_DIRECTORY = "/var/task/site_static";
+export const RENDITIONS_MEDIA_PREFIX = "media/";
+export const RENDITIONS_FUNCTION_NAME_ENV = "PAPYRUS_RENDITIONS_FUNCTION_NAME";
+
+export type RenditionsPlan = {
+  enabled: boolean;
+  siteFiles: Array<{ from: string; to: string }>;
+};
+
+export function projectionSettingsHaveImages(settingsPath: string): boolean {
+  if (!fs.existsSync(settingsPath)) return false;
+  const parsed = JSON.parse(fs.readFileSync(settingsPath, "utf8")) as Record<string, unknown>;
+  return typeof parsed.images === "object" && parsed.images !== null;
+}
+
+export function planRenditions(publication: { staticDir?: string } | undefined, workingDirectory: string): RenditionsPlan {
+  if (publication?.staticDir === undefined) return { enabled: false, siteFiles: [] };
+  const settingsFile = path.join(publication.staticDir, "projection.json");
+  if (!projectionSettingsHaveImages(path.resolve(workingDirectory, settingsFile))) return { enabled: false, siteFiles: [] };
+  return { enabled: true, siteFiles: [{ from: settingsFile, to: "site_static/projection.json" }] };
+}
+
+export function renditionsEventPattern(mediaBucketName: string): Record<string, unknown> {
+  return {
+    source: ["aws.s3"],
+    detailType: ["Object Created"],
+    detail: { bucket: { name: [mediaBucketName] }, object: { key: [{ prefix: RENDITIONS_MEDIA_PREFIX }] } },
+  };
+}
+
+export function renditionsEnvironment(siteBucketName: string): Record<string, string> {
+  return {
+    PAPYRUS_SITE_BUCKET: siteBucketName,
+    PAPYRUS_SITE_STATIC_DIR: RENDITIONS_STATIC_DIRECTORY,
+  };
+}

package/amplify/publication/s3-projection.js

@@ -9,6 +9,8 @@ import * as sqs from "aws-cdk-lib/aws-sqs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { assertValidPublicationConfig } from "../site-backend-config.js";
+import { addRenditionsFunction } from "./renditions-function.js";
+import { RENDITIONS_FUNCTION_NAME_ENV } from "./renditions-settings.js";
 import { s3ProjectionEnvironment, s3ProjectionPolicyStatements } from "./s3-projection-settings.js";
 const redirectFunctionSourcePath = resolve(dirname(fileURLToPath(import.meta.url)), "redirect-and-index.js");
 function createSiteBucket(scope, retainBucketOnDelete) {
@@ -60,7 +62,7 @@ function createDistribution(scope, props, bucket, redirectFunction) {
         ],
     });
 }
-export function addS3ProjectionPublication(scope, props) {
+export function addS3ProjectionPublication(scope, props, media) {
     assertValidPublicationConfig({ kind: "s3-projection", ...props });
     const bucket = createSiteBucket(scope, props.retainBucketOnDelete !== false);
     const keyValueStore = new cloudfront.KeyValueStore(scope, "RedirectsKeyValueStore");
@@ -90,6 +92,9 @@ export function addS3ProjectionPublication(scope, props) {
             conditions: { StringEquals: { "aws:SourceArn": props.edgeDistributionArn } },
         }));
     }
+    const renditions = media?.renditions.enabled === true
+        ? addRenditionsFunction(scope, { siteBucket: bucket, mediaBucket: media.mediaBucket, siteFiles: media.renditions.siteFiles, code: media.renditionsCode })
+        : undefined;
     const settingsInput = {
         bucketName: bucket.bucketName,
         bucketArn: bucket.bucketArn,
@@ -111,7 +116,11 @@ export function addS3ProjectionPublication(scope, props) {
         deadLetterQueue,
         distribution,
         distributionId: distribution?.distributionId,
-        environment: s3ProjectionEnvironment(settingsInput),
+        renditions,
+        environment: {
+            ...s3ProjectionEnvironment(settingsInput),
+            ...(renditions !== undefined ? { [RENDITIONS_FUNCTION_NAME_ENV]: renditions.function.functionName } : {}),
+        },
         policyStatements: s3ProjectionPolicyStatements(settingsInput).map((statement) => new PolicyStatement({ effect: Effect.ALLOW, actions: statement.actions, resources: statement.resources })),
     };
 }

package/amplify/publication/s3-projection.ts

@@ -1,6 +1,7 @@
 import { Duration, RemovalPolicy } from "aws-cdk-lib";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
+import type { Code } from "aws-cdk-lib/aws-lambda";
 import * as origins from "aws-cdk-lib/aws-cloudfront-origins";
 import { Effect, PolicyStatement, ServicePrincipal } from "aws-cdk-lib/aws-iam";
 import * as route53 from "aws-cdk-lib/aws-route53";
@@ -10,12 +11,20 @@ import type { Construct } from "constructs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { assertValidPublicationConfig, type PapyrusPublicationConfig } from "../site-backend-config";
+import { addRenditionsFunction, type RenditionsFunction } from "./renditions-function";
+import { RENDITIONS_FUNCTION_NAME_ENV, type RenditionsPlan } from "./renditions-settings";
 import { s3ProjectionEnvironment, s3ProjectionPolicyStatements } from "./s3-projection-settings";
 
 const redirectFunctionSourcePath = resolve(dirname(fileURLToPath(import.meta.url)), "redirect-and-index.js");
 
 export type S3ProjectionPublicationProps = Omit<PapyrusPublicationConfig, "kind"> & { kind?: "s3-projection" };
 
+export type S3ProjectionMedia = {
+  mediaBucket: s3.IBucket;
+  renditions: RenditionsPlan;
+  renditionsCode?: Code;
+};
+
 export type S3ProjectionPublication = {
   bucket: s3.Bucket;
   keyValueStore: cloudfront.KeyValueStore;
@@ -23,6 +32,7 @@ export type S3ProjectionPublication = {
   deadLetterQueue: sqs.Queue;
   distribution?: cloudfront.Distribution;
   distributionId?: string;
+  renditions?: RenditionsFunction;
   environment: Record<string, string>;
   policyStatements: PolicyStatement[];
 };
@@ -88,7 +98,11 @@ function createDistribution(
   });
 }
 
-export function addS3ProjectionPublication(scope: Construct, props: S3ProjectionPublicationProps): S3ProjectionPublication {
+export function addS3ProjectionPublication(
+  scope: Construct,
+  props: S3ProjectionPublicationProps,
+  media?: S3ProjectionMedia,
+): S3ProjectionPublication {
   assertValidPublicationConfig({ kind: "s3-projection", ...props });
   const bucket = createSiteBucket(scope, props.retainBucketOnDelete !== false);
 
@@ -123,6 +137,10 @@ export function addS3ProjectionPublication(scope: Construct, props: S3Projection
     );
   }
 
+  const renditions = media?.renditions.enabled === true
+    ? addRenditionsFunction(scope, { siteBucket: bucket, mediaBucket: media.mediaBucket, siteFiles: media.renditions.siteFiles, code: media.renditionsCode })
+    : undefined;
+
   const settingsInput = {
     bucketName: bucket.bucketName,
     bucketArn: bucket.bucketArn,
@@ -144,7 +162,11 @@ export function addS3ProjectionPublication(scope: Construct, props: S3Projection
     deadLetterQueue,
     distribution,
     distributionId: distribution?.distributionId,
-    environment: s3ProjectionEnvironment(settingsInput),
+    renditions,
+    environment: {
+      ...s3ProjectionEnvironment(settingsInput),
+      ...(renditions !== undefined ? { [RENDITIONS_FUNCTION_NAME_ENV]: renditions.function.functionName } : {}),
+    },
     policyStatements: s3ProjectionPolicyStatements(settingsInput).map(
       (statement) => new PolicyStatement({ effect: Effect.ALLOW, actions: statement.actions, resources: statement.resources }),
     ),

package/amplify/site-backend.js

@@ -8,6 +8,7 @@ import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_RESOLVER_WAVE_SIZE, orderModelStacksInWaves } from "./resolver-waves.js";
 import { addS3ProjectionPublication } from "./publication/s3-projection.js";
+import { planRenditions } from "./publication/renditions-settings.js";
 import { contentActionsPublicationWiring, planS3ProjectionBackend } from "./publication/s3-projection-settings.js";
 import { rebuildTriggerSettings } from "./rebuild-trigger-settings.js";
 import { assertValidPublicationConfig } from "./site-backend-config.js";
@@ -68,6 +69,7 @@ export function defineSiteBackend(papyrusSite) {
     if (site.publication !== undefined)
         assertValidPublicationConfig(site.publication);
     const publicationPlan = planS3ProjectionBackend(site.publication);
+    const renditionsPlan = planRenditions(site.publication, process.cwd());
     setSiteFilesForContentActionsBundle(publicationPlan.enabled ? publicationPlan.siteFiles : undefined);
     const backend = defineBackend({
         assignmentAction,
@@ -224,8 +226,8 @@ export function defineSiteBackend(papyrusSite) {
     let storageBackupPlan;
     let storageBackupVault;
     const storageBucketCfn = storageBucket.node.defaultChild;
-    if ((enableStorageBackups || enableInboundEmail) && storageBucketCfn) {
-        // Backups and inbound-email intake both rely on S3 → EventBridge notifications.
+    if ((enableStorageBackups || enableInboundEmail || renditionsPlan.enabled) && storageBucketCfn) {
+        // Backups, inbound-email intake and upload-time renditions all rely on S3 → EventBridge notifications.
         storageBucketCfn.addPropertyOverride("NotificationConfiguration.EventBridgeConfiguration.EventBridgeEnabled", true);
     }
     if (enableStorageBackups) {
@@ -311,7 +313,10 @@ export function defineSiteBackend(papyrusSite) {
     }
     let s3ProjectionPublication;
     if (site.publication !== undefined) {
-        s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication);
+        s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication, {
+            mediaBucket: storageBucket,
+            renditions: renditionsPlan,
+        });
         contentActionsLambda.node.defaultChild.memorySize = publicationPlan.contentActionsMemorySize;
     }
     const publicationWiring = contentActionsPublicationWiring(s3ProjectionPublication);

package/amplify/site-backend.ts

@@ -11,6 +11,7 @@ import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_RESOLVER_WAVE_SIZE, orderModelStacksInWaves } from "./resolver-waves";
 import { addS3ProjectionPublication, type S3ProjectionPublication } from "./publication/s3-projection";
+import { planRenditions } from "./publication/renditions-settings";
 import { contentActionsPublicationWiring, planS3ProjectionBackend } from "./publication/s3-projection-settings";
 import { rebuildTriggerSettings } from "./rebuild-trigger-settings";
 import { assertValidPublicationConfig } from "./site-backend-config";
@@ -85,6 +86,7 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   };
   if (site.publication !== undefined) assertValidPublicationConfig(site.publication);
   const publicationPlan = planS3ProjectionBackend(site.publication);
+  const renditionsPlan = planRenditions(site.publication, process.cwd());
   setSiteFilesForContentActionsBundle(publicationPlan.enabled ? publicationPlan.siteFiles : undefined);
   const backend = defineBackend({
     assignmentAction,
@@ -285,8 +287,8 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   let storageBackupVault: backup.BackupVault | undefined;
 
   const storageBucketCfn = storageBucket.node.defaultChild as s3.CfnBucket | undefined;
-  if ((enableStorageBackups || enableInboundEmail) && storageBucketCfn) {
-    // Backups and inbound-email intake both rely on S3 → EventBridge notifications.
+  if ((enableStorageBackups || enableInboundEmail || renditionsPlan.enabled) && storageBucketCfn) {
+    // Backups, inbound-email intake and upload-time renditions all rely on S3 → EventBridge notifications.
     storageBucketCfn.addPropertyOverride(
       "NotificationConfiguration.EventBridgeConfiguration.EventBridgeEnabled",
       true,
@@ -396,7 +398,10 @@ export function defineSiteBackend(papyrusSite: PapyrusSite) {
   }
   let s3ProjectionPublication: S3ProjectionPublication | undefined;
   if (site.publication !== undefined) {
-    s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication);
+    s3ProjectionPublication = addS3ProjectionPublication(backend.createStack("s3-projection"), site.publication, {
+      mediaBucket: storageBucket,
+      renditions: renditionsPlan,
+    });
     (contentActionsLambda.node.defaultChild as CfnFunction).memorySize = publicationPlan.contentActionsMemorySize;
   }
   const publicationWiring = contentActionsPublicationWiring(s3ProjectionPublication);

package/package.json

@@ -302,7 +302,7 @@
       "optional": true
     }
   },
-  "version": "1.0.0-next.44",
+  "version": "1.0.0-next.45",
   "dependencies": {
     "@aws-amplify/adapter-nextjs": "^1.7.3",
     "@aws-sdk/client-cognito-identity-provider": "3.1045.0",

package/routes.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0-next.44",
+  "version": "1.0.0-next.45",
   "routes": [
     {
       "file": "app/%5F_preview/[[...path]]/route.ts",