@awsless/cli 0.0.43 → 0.0.45

package/dist/bin.js

@@ -1666,6 +1666,7 @@ var RouterDefaultSchema = z21.record(
   z21.object({
     domain: ResourceIdSchema.describe("The domain id to link your Router.").optional(),
     subDomain: z21.string().optional(),
+    redirectWww: z21.boolean().default(false).describe("Redirect all www subdomain requests to your root domain."),
     waf: WafSettingsSchema.optional(),
     geoRestrictions: z21.array(z21.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked."),
     errors: z21.object({
@@ -1754,6 +1755,21 @@ var RouterDefaultSchema = z21.record(
     }).optional().describe(
       "Specifies the cookies, headers, and query values that CloudFront includes in the cache key."
     )
+  }).superRefine((props, ctx) => {
+    if (props.redirectWww && !props.domain) {
+      ctx.addIssue({
+        code: z21.ZodIssueCode.custom,
+        path: ["redirectWww"],
+        message: "The redirectWww option requires a domain to be set."
+      });
+    }
+    if (props.redirectWww && props.subDomain) {
+      ctx.addIssue({
+        code: z21.ZodIssueCode.custom,
+        path: ["redirectWww"],
+        message: `The redirectWww option can't be combined with a subDomain, because the domain certificate only covers single level subdomains.`
+      });
+    }
   })
 ).optional().describe(`Define the global Router. Backed by AWS CloudFront.`);
 
@@ -9165,6 +9181,7 @@ import { camelCase as camelCase9, constantCase as constantCase16, kebabCase as k
 var getViewerRequestFunctionCode = (props) => {
   return CODE([
     props.blockDirectAccess ? BLOCK_DIRECT_ACCESS_TO_CLOUDFRONT : "",
+    props.redirectWww ? REDIRECT_WWW : "",
     props.passwordAuth ?? props.basicAuth ? AUTH_WRAPPER(
       [
         //
@@ -9181,6 +9198,38 @@ if (headers.host && headers.host.value.includes('cloudfront.net')) {
 		statusDescription: 'Forbidden'
 	};
 }`;
+var REDIRECT_WWW = `
+if (headers.host && headers.host.value.startsWith('www.')) {
+	let location = 'https://' + headers.host.value.slice(4) + request.uri;
+	const query = [];
+
+	for(const key in request.querystring) {
+		const item = request.querystring[key];
+
+		if(item.multiValue) {
+			for(const i in item.multiValue) {
+				query.push(key + '=' + item.multiValue[i].value);
+			}
+		} else if(item.value === '') {
+			query.push(key);
+		} else {
+			query.push(key + '=' + item.value);
+		}
+	}
+
+	if(query.length > 0) {
+		location += '?' + query.join('&');
+	}
+
+	return {
+		statusCode: 301,
+		statusDescription: 'Moved Permanently',
+		headers: {
+			'location': { value: location },
+			'strict-transport-security': { value: 'max-age=31536000; includeSubdomains; preload' }
+		}
+	};
+}`;
 var BASIC_AUTH_CHECK = (username, password) => `
 authMethods.push('Basic realm="Protected"');
 
@@ -9286,14 +9335,37 @@ async function findRoute(path, method) {
 	const keys = getPossibleRouteKeys(path);
 
 	for(const i in keys) {
+		const key = keys[i];
+		let value;
+
 		try {
-			const value = await store.get(keys[i], { format: 'json' });
-			const result = matchRoute(value, path, method);
+			value = await store.get(key, { format: 'json' });
+		} catch (e) {
+			continue;
+		}
 
-			if(result) {
-				return result;
+		// Route lists that are too big for a single key value pair
+		// are sharded over multiple entries behind a route index.
+		if(value && value.list) {
+			for(let n = 0; n < value.list; n++) {
+				try {
+					const route = await store.get(key + '#' + n, { format: 'json' });
+					const result = matchRoute(route, path, method);
+
+					if(result) {
+						return result;
+					}
+				} catch (e) {}
 			}
-		} catch (e) {}
+
+			continue;
+		}
+
+		const result = matchRoute(value, path, method);
+
+		if(result) {
+			return result;
+		}
 	}
 }
 
@@ -9447,6 +9519,32 @@ async function handler(event) {
 
 // src/feature/router/index.ts
 import { createHash as createHash8 } from "crypto";
+
+// src/feature/router/route.ts
+var MAX_VALUE_SIZE = 1e3;
+var createRouteStoreEntries = (routes) => {
+  const entries = [];
+  for (const [key, value] of Object.entries(routes)) {
+    const json = JSON.stringify(value);
+    if (Array.isArray(value) && Buffer.byteLength(json, "utf8") > MAX_VALUE_SIZE) {
+      entries.push({
+        key,
+        value: JSON.stringify({ list: value.length })
+      });
+      value.forEach((route, index) => {
+        entries.push({
+          key: `${key}#${index}`,
+          value: JSON.stringify(route)
+        });
+      });
+    } else {
+      entries.push({ key, value: json });
+    }
+  }
+  return entries;
+};
+
+// src/feature/router/index.ts
 var routerFeature = defineFeature({
   name: "router",
   onApp(ctx) {
@@ -9476,9 +9574,7 @@ var routerFeature = defineFeature({
           {
             kvsArn: routeStore.arn,
             keys: $resolve([routes], (routes2) => {
-              return Object.entries(routes2).map(([key, value]) => {
-                return { key, value: JSON.stringify(value) };
-              });
+              return createRouteStoreEntries(routes2);
             })
           },
           {
@@ -9584,6 +9680,7 @@ var routerFeature = defineFeature({
         keyValueStoreAssociations: [routeStore.arn],
         code: getViewerRequestFunctionCode({
           blockDirectAccess: !!props.domain,
+          redirectWww: !!props.domain && props.redirectWww,
           basicAuth: props.basicAuth,
           passwordAuth: props.passwordAuth
         })
@@ -9813,6 +9910,7 @@ var routerFeature = defineFeature({
       });
       if (props.domain) {
         const domainName = formatFullDomainName(ctx.appConfig, props.domain, props.subDomain);
+        const wwwDomainName = props.redirectWww ? `www.${domainName}` : void 0;
         const certificateArn = ctx.shared.entry("domain", `global-certificate-arn`, props.domain);
         const zoneId = ctx.shared.entry("domain", "zone-id", props.domain);
         const connectionGroup = new aws32.cloudfront.ConnectionGroup(group, "connection-group", {
@@ -9823,7 +9921,11 @@ var routerFeature = defineFeature({
           enabled: true,
           distributionId: distribution.id,
           connectionGroupId: connectionGroup.id,
-          domain: [{ domain: domainName }],
+          domain: [
+            //
+            { domain: domainName },
+            ...wwwDomainName ? [{ domain: wwwDomainName }] : []
+          ],
           customizations: [{ certificate: [{ arn: certificateArn }] }]
         });
         new aws32.route53.Record(group, `record`, {
@@ -9836,6 +9938,18 @@ var routerFeature = defineFeature({
             evaluateTargetHealth: false
           }
         });
+        if (wwwDomainName) {
+          new aws32.route53.Record(group, `www-record`, {
+            zoneId,
+            type: "A",
+            name: wwwDomainName,
+            alias: {
+              name: connectionGroup.routingEndpoint,
+              zoneId: "Z2FDTNDATAQYW2",
+              evaluateTargetHealth: false
+            }
+          });
+        }
         ctx.bind(`ROUTER_${constantCase16(id)}_ENDPOINT`, domainName);
       }
     }

package/dist/build-json-schema.js

@@ -724,6 +724,7 @@ var RouterDefaultSchema = z17.record(
   z17.object({
     domain: ResourceIdSchema.describe("The domain id to link your Router.").optional(),
     subDomain: z17.string().optional(),
+    redirectWww: z17.boolean().default(false).describe("Redirect all www subdomain requests to your root domain."),
     waf: WafSettingsSchema.optional(),
     geoRestrictions: z17.array(z17.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked."),
     errors: z17.object({
@@ -812,6 +813,21 @@ var RouterDefaultSchema = z17.record(
     }).optional().describe(
       "Specifies the cookies, headers, and query values that CloudFront includes in the cache key."
     )
+  }).superRefine((props, ctx) => {
+    if (props.redirectWww && !props.domain) {
+      ctx.addIssue({
+        code: z17.ZodIssueCode.custom,
+        path: ["redirectWww"],
+        message: "The redirectWww option requires a domain to be set."
+      });
+    }
+    if (props.redirectWww && props.subDomain) {
+      ctx.addIssue({
+        code: z17.ZodIssueCode.custom,
+        path: ["redirectWww"],
+        message: `The redirectWww option can't be combined with a subDomain, because the domain certificate only covers single level subdomains.`
+      });
+    }
   })
 ).optional().describe(`Define the global Router. Backed by AWS CloudFront.`);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awsless/cli",
-  "version": "0.0.43",
+  "version": "0.0.45",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
@@ -89,23 +89,23 @@
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.24.3",
     "@awsless/big-float": "^0.1.7",
-    "@awsless/duration": "^0.0.4",
     "@awsless/dynamodb": "^0.3.22",
-    "@awsless/cloudwatch": "^0.0.1",
+    "@awsless/lambda": "^0.0.44",
+    "@awsless/redis": "^0.1.13",
+    "@awsless/clui": "^0.0.8",
+    "@awsless/duration": "^0.0.4",
+    "@awsless/iot": "^0.0.5",
+    "@awsless/s3": "^0.0.21",
     "@awsless/json": "^0.0.11",
     "@awsless/size": "^0.0.2",
-    "@awsless/s3": "^0.0.21",
-    "@awsless/scheduler": "^0.0.4",
-    "@awsless/lambda": "^0.0.44",
     "@awsless/sns": "^0.0.10",
-    "@awsless/clui": "^0.0.8",
     "@awsless/validate": "^0.1.7",
     "@awsless/weak-cache": "^0.0.1",
-    "@awsless/redis": "^0.1.13",
-    "awsless": "^0.0.14",
-    "@awsless/iot": "^0.0.5",
+    "@awsless/cloudwatch": "^0.0.1",
+    "@awsless/scheduler": "^0.0.4",
     "@awsless/ts-file-cache": "^0.0.16",
-    "@awsless/sqs": "^0.0.24"
+    "@awsless/sqs": "^0.0.24",
+    "awsless": "^0.0.14"
   },
   "devDependencies": {
     "@hono/node-server": "1.19.9",