@aws-blocks/core 0.1.0

package/dist/index.cdk.d.ts

@@ -0,0 +1,13 @@
+export { ApiNamespace, type BlocksContext, type ApiHandler } from './api.js';
+export { BLOCKS_RPC_PREFIX, BLOCKS_AUTH_PREFIX } from './constants.js';
+export { ApiError, isBlocksError } from './errors.js';
+export { EventSourceMapping } from './lambda-handler.js';
+export { BlocksStackProps } from './common/index.js';
+export { registerSdkIdentifiers, getSdkIdentifiers, getAllSdkIdentifiers, _resetSdkRegistry } from './common/sdk-registry.js';
+export { getConfig, getConfigSync, preloadConfig, loadConfigToProcessEnv, _resetConfigCache } from './common/config.js';
+export { BlocksStack, Scope, SandboxDisableDeletionProtection, BlocksBackend, registerConfig, finalizeConfigRegistry, synthGuard, DEFAULT_NODE_RUNTIME, type BlocksBackendProps } from './cdk/index.js';
+export { Hosting, type HostingProps, type BlocksStackApi, type FrameworkType, type ComputeConfig, type HostingDomainConfig, type HostingWafConfig, } from './hosting.js';
+export { RawRoute, RawRouteErrors, type RawRouteOptions, type HttpMethod, } from './raw-route.cdk.js';
+export { registerRoute, matchRoute, getRegisteredRoutes, clearRouteRegistry, lockRouteRegistry, unlockRouteRegistry, type RegisteredRoute, } from './raw-route.js';
+export { Pipeline, DeployStage, type DeployStageProps, type BranchConfig, type PipelineProps, type PipelineSourceConfig, type PipelineSynthConfig, type PipelineStageConfig, } from './pipeline/index.js';
+//# sourceMappingURL=index.cdk.d.ts.map

package/dist/index.cdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cdk.d.ts","sourceRoot":"","sources":["../src/index.cdk.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9H,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,gCAAgC,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACxM,OAAO,EACL,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,QAAQ,EACR,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC"}

package/dist/index.cdk.js

@@ -0,0 +1,13 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+export { ApiNamespace } from './api.js';
+export { BLOCKS_RPC_PREFIX, BLOCKS_AUTH_PREFIX } from './constants.js';
+export { ApiError, isBlocksError } from './errors.js';
+export { EventSourceMapping } from './lambda-handler.js';
+export { registerSdkIdentifiers, getSdkIdentifiers, getAllSdkIdentifiers, _resetSdkRegistry } from './common/sdk-registry.js';
+export { getConfig, getConfigSync, preloadConfig, loadConfigToProcessEnv, _resetConfigCache } from './common/config.js';
+export { BlocksStack, Scope, SandboxDisableDeletionProtection, BlocksBackend, registerConfig, finalizeConfigRegistry, synthGuard, DEFAULT_NODE_RUNTIME } from './cdk/index.js';
+export { Hosting, } from './hosting.js';
+export { RawRoute, RawRouteErrors, } from './raw-route.cdk.js';
+export { registerRoute, matchRoute, getRegisteredRoutes, clearRouteRegistry, lockRouteRegistry, unlockRouteRegistry, } from './raw-route.js';
+export { Pipeline, DeployStage, } from './pipeline/index.js';

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { ApiNamespace, type BlocksContext, type ApiHandler } from './api.js';
+export { BLOCKS_RPC_PREFIX, BLOCKS_AUTH_PREFIX } from './constants.js';
+export { ApiError, isBlocksError } from './errors.js';
+export { Scope, type ScopeOptions, type ScopeParent, type BuildingBlockMeta } from './common/index.js';
+export { registerSdkIdentifiers, getSdkIdentifiers, getAllSdkIdentifiers, _resetSdkRegistry } from './common/sdk-registry.js';
+export { getConfig, getConfigSync, preloadConfig, loadConfigToProcessEnv, _resetConfigCache } from './common/config.js';
+export { registerRoute, matchRoute, getRegisteredRoutes, clearRouteRegistry, lockRouteRegistry, unlockRouteRegistry, RawRouteErrors, type RawRouteOptions, type HttpMethod, type RegisteredRoute, } from './raw-route.js';
+export { RawRoute } from './raw-route.mock.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9H,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EACL,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+export { ApiNamespace } from './api.js';
+export { BLOCKS_RPC_PREFIX, BLOCKS_AUTH_PREFIX } from './constants.js';
+export { ApiError, isBlocksError } from './errors.js';
+export { Scope } from './common/index.js';
+export { registerSdkIdentifiers, getSdkIdentifiers, getAllSdkIdentifiers, _resetSdkRegistry } from './common/sdk-registry.js';
+export { getConfig, getConfigSync, preloadConfig, loadConfigToProcessEnv, _resetConfigCache } from './common/config.js';
+export { registerRoute, matchRoute, getRegisteredRoutes, clearRouteRegistry, lockRouteRegistry, unlockRouteRegistry, RawRouteErrors, } from './raw-route.js';
+export { RawRoute } from './raw-route.mock.js';

package/dist/lambda-handler.d.ts

@@ -0,0 +1,131 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+export { parseCorsPatterns, _resetCorsPatterns } from './cors.js';
+/**
+ * AsyncLocalStorage that carries the inbound HTTP request cookies through
+ * the call stack. SSR frameworks (Next.js Server Components) can read this
+ * via `requestCookies.getStore()` to forward auth cookies when calling the
+ * Blocks API server-side.
+ *
+ * Also registered on `globalThis.__BLOCKS_REQUEST_COOKIES_STORE__` so the
+ * client bundle can access it without importing node:async_hooks.
+ */
+export declare const requestCookies: AsyncLocalStorage<string>;
+/**
+ * Event source mapping identifiers used by AWS when pushing records to Lambda.
+ * Building Blocks use these constants with `Scope.registerLambdaEventHandler()`.
+ */
+export declare const EventSourceMapping: {
+    readonly SQS: "aws:sqs";
+};
+/**
+ * Whether an `X-Forwarded-Host` value points at the local loopback interface.
+ *
+ * The gate matters because the deployed Lambda sits directly behind API Gateway
+ * with no trusted proxy to strip this attacker-controllable header — in sandbox
+ * *and* production. Honoring it unconditionally would let any client spoof the
+ * host the backend builds absolute URLs from (e.g. an OIDC `redirect_uri`). Only
+ * loopback is trusted: it's the one case the sandbox dev-server needs, and a
+ * forged non-loopback value is ignored.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function isLoopbackForwardedHost(forwardedHost: string | undefined): boolean;
+/**
+ * Reconstruct the absolute request URL from an API Gateway Lambda event.
+ *
+ * - Path comes from `event.path` (API Gateway v1) or `event.requestContext.http.path` (v2).
+ * - Query string from `event.multiValueQueryStringParameters` when present (preserves duplicates),
+ *   falling back to `event.queryStringParameters`, then `event.rawQueryString` (v2).
+ * - When a trusted loopback `X-Forwarded-Host` is present (the sandbox dev-server
+ *   front door), the URL is rebuilt as the browser-visible origin: that host,
+ *   plain `http`, and **no** API Gateway stage prefix. Otherwise host comes from
+ *   `Host`/`host`, protocol from `x-forwarded-proto` (default `https`), and the
+ *   stage prefix is prepended. See {@link isLoopbackForwardedHost} for the gate.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function buildEventUrl(event: any): URL;
+/**
+ * Classified event source type for Lambda invocations.
+ *
+ * - `'http'`: API Gateway REST (v1) or HTTP (v2) request
+ * - `'websocket'`: API Gateway WebSocket (CONNECT/DISCONNECT/MESSAGE)
+ * - `'records'`: Event source mapping (SQS, Kinesis, DDB Streams)
+ * - `'direct'`: Direct invoke with Blocks-controlled payload (EventBridge Scheduler)
+ */
+export type EventClass = 'http' | 'websocket' | 'records' | 'direct';
+/**
+ * Classify a Lambda event into its source type.
+ *
+ * Used by both the timeout guard (to decide whether to apply the HTTP deadline)
+ * and the dispatcher (to route to the correct handler). Single source of truth
+ * prevents drift when new async event types are added.
+ *
+ * Returns `'http'` only when positive HTTP indicators are present (`httpMethod`
+ * or `requestContext.http.method`). Events that don't match any classification
+ * also fall to `'http'` via the dispatcher, but `isApiGatewayHttpEvent` gates
+ * the timeout guard to only fire when `classifyEvent` returns `'http'`.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function classifyEvent(event: any): EventClass;
+/**
+ * Detect whether a Lambda event originates from API Gateway (HTTP).
+ *
+ * API Gateway v1 (REST): has `httpMethod` at top level.
+ * API Gateway v2 (HTTP): has `requestContext.http.method`.
+ *
+ * Events that are NOT API Gateway HTTP:
+ * - SQS/Kinesis/DDB Streams → `event.Records[0].eventSource`
+ * - EventBridge Scheduler → `event.source` starts with 'blocks.'
+ * - WebSocket → `event.requestContext.eventType` in CONNECT/DISCONNECT/MESSAGE
+ *
+ * @internal Exported for testing only.
+ */
+export declare function isApiGatewayHttpEvent(event: any): boolean;
+/**
+ * Compute the HTTP deadline in milliseconds.
+ *
+ * Uses the minimum of:
+ * - `APIGW_TIMEOUT_MS` (28s fixed guard)
+ * - `context.getRemainingTimeInMillis() - REMAINING_TIME_BUFFER_MS` (actual remaining Lambda time)
+ *
+ * This handles the edge case where a warm Lambda has less than 29s remaining.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function computeHttpDeadlineMs(context?: LambdaContext): number;
+/**
+ * Minimal Lambda context interface for the fields we use.
+ * @internal Exported for testing only.
+ */
+export interface LambdaContext {
+    getRemainingTimeInMillis(): number;
+}
+/**
+ * Create a Lambda handler for the Blocks backend.
+ *
+ * Uses the lazy factory pattern with a dynamic import:
+ * ```ts
+ * export const handler = createLambdaHandler(() => import('./index.js'));
+ * ```
+ *
+ * Why: Building Blocks read config from process.env at import time.
+ * The factory pattern loads S3 config into process.env BEFORE your
+ * backend module is imported.
+ *
+ * Cold start: First invocation fetches config from S3 (~50-200ms),
+ * then imports the backend. Subsequent invocations use cached config.
+ *
+ * Local dev: No S3 access — config comes from process.env directly.
+ *
+ * For API Gateway (HTTP) events, a self-termination guard races the handler
+ * against a 28s deadline. If the handler wedges, the Lambda returns a 504
+ * instead of billing for the full 15-minute timeout while the client already
+ * received a 504 from API Gateway. Async event sources (SQS, EventBridge,
+ * WebSocket) are not subject to this guard.
+ *
+ * @param backendFactory - Async function returning the backend module (typically `() => import('./index.js')`)
+ */
+export declare function createLambdaHandler(backendFactory: () => Promise<any>): (event: any, context?: LambdaContext) => Promise<any>;
+//# sourceMappingURL=lambda-handler.d.ts.map

package/dist/lambda-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-handler.d.ts","sourceRoot":"","sources":["../src/lambda-handler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAerD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAElE;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,2BAAkC,CAAC;AAG9D;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;CAErB,CAAC;AAoDX;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAWlF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAwD7C;AAiBD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,GAAG,UAAU,CAWpD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAIrE;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,wBAAwB,IAAI,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,IA0BtD,OAAO,GAAG,EAAE,UAAU,aAAa,kBAkElD"}