@codedrifters/constructs 0.0.59 → 0.0.61

package/lib/index.d.mts

@@ -2,6 +2,8 @@ import { Bucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { Construct } from 'constructs';
 import { StackProps } from 'aws-cdk-lib';
 import { HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
+import { HostingMode } from './static-hosting.viewer-request-handler.mjs';
+import 'aws-lambda';
 
 interface PrivateBucketProps extends BucketProps {
 }
@@ -95,6 +97,23 @@ interface StaticHostingProps extends StackProps {
      * Props to pass to the private S3 bucket.
      */
     readonly privateBucketProps?: PrivateBucketProps;
+    /**
+     * Selects how path-like URIs are rewritten by the viewer-request
+     * Lambda@Edge handler.
+     *
+     * - `spa` (default): path-like URIs rewrite to `/index.html` so a
+     *   single-page app can serve its one root index and let the client-side
+     *   router handle the path.
+     * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →
+     *   `/docs/index.html`) so multi-page static sites can serve distinct
+     *   HTML per path.
+     *
+     * Multi-tenant domain-folder prepending runs after the rewrite in both
+     * modes and is unaffected by this prop.
+     *
+     * @default "spa"
+     */
+    readonly hostingMode?: HostingMode;
 }
 declare class StaticHosting extends Construct {
     /**

package/lib/index.d.ts

@@ -3,6 +3,18 @@ import { Construct } from 'constructs';
 import { StackProps } from 'aws-cdk-lib';
 import { HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
 
+/**
+ * Hosting mode controls how path-like URIs get a default document.
+ *
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+
 interface PrivateBucketProps extends BucketProps {
 }
 declare class PrivateBucket extends Bucket {
@@ -95,6 +107,23 @@ interface StaticHostingProps extends StackProps {
      * Props to pass to the private S3 bucket.
      */
     readonly privateBucketProps?: PrivateBucketProps;
+    /**
+     * Selects how path-like URIs are rewritten by the viewer-request
+     * Lambda@Edge handler.
+     *
+     * - `spa` (default): path-like URIs rewrite to `/index.html` so a
+     *   single-page app can serve its one root index and let the client-side
+     *   router handle the path.
+     * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →
+     *   `/docs/index.html`) so multi-page static sites can serve distinct
+     *   HTML per path.
+     *
+     * Multi-tenant domain-folder prepending runs after the rewrite in both
+     * modes and is unaffected by this prop.
+     *
+     * @default "spa"
+     */
+    readonly hostingMode?: HostingMode;
 }
 declare class StaticHosting extends Construct {
     /**

package/lib/index.js

@@ -260,11 +260,13 @@ var StaticHosting = class extends import_constructs2.Construct {
       distributionDomainParamName,
       distributionIDParamName,
       staticDomainProps,
-      privateBucketProps
+      privateBucketProps,
+      hostingMode
     } = {
       bucketArnParamName: "/STATIC_WEBSITE/BUCKET_ARN",
       distributionDomainParamName: "/STATIC_WEBSITE/DISTRIBUTION_DOMAIN",
       distributionIDParamName: "/STATIC_WEBSITE/DISTRIBUTION_ID",
+      hostingMode: "spa",
       ...props
     };
     const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};
@@ -301,6 +303,7 @@ var StaticHosting = class extends import_constructs2.Construct {
     const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;
     const handler = new import_aws_lambda_nodejs.NodejsFunction(this, "viewer-request-handler", {
       entry: handlerEntry,
+      handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
       memorySize: 128,
       runtime: import_aws_lambda.Runtime.NODEJS_24_X,
       logGroup: new import_aws_logs.LogGroup(this, "viewer-request-handler-log-group", {

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","export * from \"./s3\";\nexport * from \"./static-hosting\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKa,IAAAA,SAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,IAAAA,SAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,IAAAA,SAAA,uBAAuBA,SAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,QAAA,eAAA;AAQO,QAAMC,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,IAAAC,SAAA,gBAAaD;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,IAAAC,SAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,QAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,IAAAC,SAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,IAAAA,SAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAAC,QAAA;AACA,iBAAA,qBAAAA,QAAA;AACA,iBAAA,wBAAAA,QAAA;;;;;ACFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA8B;AAC9B,oBAKO;AAKA,IAAM,gBAAN,cAA4B,qBAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,iCAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,iCAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,gCAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,8BAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,IAAAC,iBAAuB;AACvB,+BAAyC;AACzC,qBAAgC;AAChC,yBAA0B;AAC1B,wBAA0B;AAqDnB,IAAM,gBAAN,cAA4B,4BAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,KAAC,8BAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,+BAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAS,sBAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,gCAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,0CAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,SAAoB;AACpB,WAAsB;AACtB,IAAAC,sBAAqC;AACrC,oCAGO;AACP,4BAYO;AACP,oCAA+B;AAC/B,wBAAwB;AACxB,+BAA+B;AAC/B,sBAAwC;AACxC,yBAMO;AACP,iCAAiC;AACjC,IAAAC,kBAAgC;AAChC,IAAAC,qBAA0B;AAiDnB,IAAM,gBAAN,cAA4B,6BAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,8BAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,0CAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,oDAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,wCAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,YAAY;AAAA,MACZ,SAAS,0BAAQ;AAAA,MACjB,UAAU,IAAI,yBAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,8BAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,kCAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,6BAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,6BAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,6BAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,qBAAqB,+CAAyB,KAAK;AAAA,MACnD,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,4CAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,8BAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,6CAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,kCAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,mCAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,2CAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,qCAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,0CAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,2BAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,2BAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAI,gCAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["exports","findGitBranch","exports","exports","exports","import_aws_s3","import_aws_cdk_lib","import_aws_ssm","import_constructs"]}
+{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","export * from \"./s3\";\nexport * from \"./static-hosting\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport type { HostingMode } from \"./static-hosting.viewer-request-handler\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n\n  /**\n   * Selects how path-like URIs are rewritten by the viewer-request\n   * Lambda@Edge handler.\n   *\n   * - `spa` (default): path-like URIs rewrite to `/index.html` so a\n   *   single-page app can serve its one root index and let the client-side\n   *   router handle the path.\n   * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →\n   *   `/docs/index.html`) so multi-page static sites can serve distinct\n   *   HTML per path.\n   *\n   * Multi-tenant domain-folder prepending runs after the rewrite in both\n   * modes and is unaffected by this prop.\n   *\n   * @default \"spa\"\n   */\n  readonly hostingMode?: HostingMode;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n      hostingMode,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      hostingMode: \"spa\" as HostingMode,\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      handler: hostingMode === \"static\" ? \"staticHandler\" : \"spaHandler\",\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKa,IAAAA,SAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,IAAAA,SAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,IAAAA,SAAA,uBAAuBA,SAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,QAAA,eAAA;AAQO,QAAMC,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,IAAAC,SAAA,gBAAaD;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,IAAAC,SAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,QAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,IAAAC,SAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,IAAAA,SAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAAC,QAAA;AACA,iBAAA,qBAAAA,QAAA;AACA,iBAAA,wBAAAA,QAAA;;;;;ACFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA8B;AAC9B,oBAKO;AAKA,IAAM,gBAAN,cAA4B,qBAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,iCAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,iCAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,gCAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,8BAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,IAAAC,iBAAuB;AACvB,+BAAyC;AACzC,qBAAgC;AAChC,yBAA0B;AAC1B,wBAA0B;AAqDnB,IAAM,gBAAN,cAA4B,4BAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,KAAC,8BAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,+BAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAS,sBAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,gCAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,0CAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,SAAoB;AACpB,WAAsB;AACtB,IAAAC,sBAAqC;AACrC,oCAGO;AACP,4BAYO;AACP,oCAA+B;AAC/B,wBAAwB;AACxB,+BAA+B;AAC/B,sBAAwC;AACxC,yBAMO;AACP,iCAAiC;AACjC,IAAAC,kBAAgC;AAChC,IAAAC,qBAA0B;AAoEnB,IAAM,gBAAN,cAA4B,6BAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,aAAa;AAAA,MACb,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,8BAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,0CAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,oDAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,wCAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,SAAS,gBAAgB,WAAW,kBAAkB;AAAA,MACtD,YAAY;AAAA,MACZ,SAAS,0BAAQ;AAAA,MACjB,UAAU,IAAI,yBAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,8BAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,kCAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,6BAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,6BAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,6BAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,qBAAqB,+CAAyB,KAAK;AAAA,MACnD,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,4CAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,8BAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,6CAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,kCAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,mCAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,2CAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,qCAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,0CAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,2BAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,2BAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAI,gCAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["exports","findGitBranch","exports","exports","exports","import_aws_s3","import_aws_cdk_lib","import_aws_ssm","import_constructs"]}

package/lib/index.mjs

@@ -248,11 +248,13 @@ var StaticHosting = class extends Construct2 {
       distributionDomainParamName,
       distributionIDParamName,
       staticDomainProps,
-      privateBucketProps
+      privateBucketProps,
+      hostingMode
     } = {
       bucketArnParamName: "/STATIC_WEBSITE/BUCKET_ARN",
       distributionDomainParamName: "/STATIC_WEBSITE/DISTRIBUTION_DOMAIN",
       distributionIDParamName: "/STATIC_WEBSITE/DISTRIBUTION_ID",
+      hostingMode: "spa",
       ...props
     };
     const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};
@@ -289,6 +291,7 @@ var StaticHosting = class extends Construct2 {
     const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;
     const handler = new NodejsFunction(this, "viewer-request-handler", {
       entry: handlerEntry,
+      handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
       memorySize: 128,
       runtime: Runtime.NODEJS_24_X,
       logGroup: new LogGroup(this, "viewer-request-handler-log-group", {

package/lib/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAKa,YAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,YAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,YAAA,uBAAuB,QAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,UAAA,eAAA;AAQO,QAAMA,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,YAAA,gBAAaA;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,YAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,UAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,YAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,YAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAA,OAAA;AACA,iBAAA,qBAAA,OAAA;AACA,iBAAA,wBAAA,OAAA;;;;;ACFA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAKA,IAAM,gBAAN,cAA4B,OAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,cAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,cAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,kBAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,gBAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,SAAS,UAAAC,eAAc;AACvB,SAAS,kBAAkB,cAAc;AACzC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB;AAC1B,SAAS,iBAAiB;AAqDnB,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,CAAC,UAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,gBAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAASA,QAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,iBAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,gBAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,UAAU,qBAAqB;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,aAAAC,kBAAiB;AAiDnB,IAAM,gBAAN,cAA4BC,WAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,WAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,YAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,sBAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,eAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,YAAY;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,UAAU,IAAI,SAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,cAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,YAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,SAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,SAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,SAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,qBAAqB,yBAAyB,KAAK;AAAA,MACnD,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,sBAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,QAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,eAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,YAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,aAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,qBAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,eAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,oBAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,QAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,QAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAIC,iBAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["findGitBranch","Bucket","StringParameter","Construct","Construct","StringParameter"]}
+{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport type { HostingMode } from \"./static-hosting.viewer-request-handler\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n\n  /**\n   * Selects how path-like URIs are rewritten by the viewer-request\n   * Lambda@Edge handler.\n   *\n   * - `spa` (default): path-like URIs rewrite to `/index.html` so a\n   *   single-page app can serve its one root index and let the client-side\n   *   router handle the path.\n   * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →\n   *   `/docs/index.html`) so multi-page static sites can serve distinct\n   *   HTML per path.\n   *\n   * Multi-tenant domain-folder prepending runs after the rewrite in both\n   * modes and is unaffected by this prop.\n   *\n   * @default \"spa\"\n   */\n  readonly hostingMode?: HostingMode;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n      hostingMode,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      hostingMode: \"spa\" as HostingMode,\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      handler: hostingMode === \"static\" ? \"staticHandler\" : \"spaHandler\",\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAKa,YAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,YAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,YAAA,uBAAuB,QAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,UAAA,eAAA;AAQO,QAAMA,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,YAAA,gBAAaA;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,YAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,UAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,YAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,YAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAA,OAAA;AACA,iBAAA,qBAAA,OAAA;AACA,iBAAA,wBAAA,OAAA;;;;;ACFA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAKA,IAAM,gBAAN,cAA4B,OAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,cAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,cAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,kBAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,gBAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,SAAS,UAAAC,eAAc;AACvB,SAAS,kBAAkB,cAAc;AACzC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB;AAC1B,SAAS,iBAAiB;AAqDnB,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,CAAC,UAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,gBAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAASA,QAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,iBAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,gBAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,UAAU,qBAAqB;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,aAAAC,kBAAiB;AAoEnB,IAAM,gBAAN,cAA4BC,WAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,aAAa;AAAA,MACb,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,WAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,YAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,sBAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,eAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,SAAS,gBAAgB,WAAW,kBAAkB;AAAA,MACtD,YAAY;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,UAAU,IAAI,SAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,cAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,YAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,SAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,SAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,SAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,qBAAqB,yBAAyB,KAAK;AAAA,MACnD,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,sBAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,QAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,eAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,YAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,aAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,qBAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,eAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,oBAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,QAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,QAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAIC,iBAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["findGitBranch","Bucket","StringParameter","Construct","Construct","StringParameter"]}

package/lib/static-hosting.viewer-request-handler.d.mts

@@ -1,29 +1,51 @@
 import { CloudFrontRequest, CloudFrontRequestEvent } from 'aws-lambda';
 
-declare const handler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Hosting mode controls how path-like URIs get a default document.
  *
- * Adds default document to request URI if needed. For SPA (single-page app)
- * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten
- * to /index.html so the one root index is served and the client-side router
- * can handle the path. Only URIs whose last segment looks like a static file
- * (contains a dot) are left unchanged.
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+/**
+ * Viewer Request Handler for SPA mode.
  *
- * @param request
- * @returns
+ * - Logs the request
+ * - Rewrites path-like URIs to `/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
  */
-declare const addDefaultDocument: (request: CloudFrontRequest) => CloudFrontRequest;
+declare const spaHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Viewer Request Handler for static (non-SPA) mode.
  *
- * Adds domain folder to request URI.
+ * - Logs the request
+ * - Rewrites path-like URIs to `<path>/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
+ */
+declare const staticHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
+/**
+ * Adds a default document to the request URI based on the hosting mode.
  *
- * @param request
- * @returns
+ * In both modes:
+ * - `/` and `/index.html` become `/index.html`
+ * - URIs whose last segment contains a dot are treated as static files and
+ *   left unchanged.
+ *
+ * In `spa` mode, all other path-like URIs rewrite to `/index.html`.
+ * In `static` mode, path-like URIs append `/index.html` (trailing slash
+ * preserved as a single slash): `/docs` and `/docs/` both become
+ * `/docs/index.html`.
+ */
+declare const addDefaultDocument: (request: CloudFrontRequest, mode: HostingMode) => CloudFrontRequest;
+/**
+ * Prepends the Host header as a folder to the request URI. Used for
+ * multi-tenant routing where each domain maps to a folder in the S3
+ * bucket (e.g. `example.com/foo` → `/example.com/foo`).
  */
 declare const addDomainFolder: (request: CloudFrontRequest) => CloudFrontRequest;
 
-export { addDefaultDocument, addDomainFolder, handler };
+export { type HostingMode, addDefaultDocument, addDomainFolder, spaHandler, staticHandler };

package/lib/static-hosting.viewer-request-handler.d.ts

@@ -1,29 +1,51 @@
 import { CloudFrontRequest, CloudFrontRequestEvent } from 'aws-lambda';
 
-declare const handler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Hosting mode controls how path-like URIs get a default document.
  *
- * Adds default document to request URI if needed. For SPA (single-page app)
- * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten
- * to /index.html so the one root index is served and the client-side router
- * can handle the path. Only URIs whose last segment looks like a static file
- * (contains a dot) are left unchanged.
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+/**
+ * Viewer Request Handler for SPA mode.
  *
- * @param request
- * @returns
+ * - Logs the request
+ * - Rewrites path-like URIs to `/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
  */
-declare const addDefaultDocument: (request: CloudFrontRequest) => CloudFrontRequest;
+declare const spaHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Viewer Request Handler for static (non-SPA) mode.
  *
- * Adds domain folder to request URI.
+ * - Logs the request
+ * - Rewrites path-like URIs to `<path>/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
+ */
+declare const staticHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
+/**
+ * Adds a default document to the request URI based on the hosting mode.
  *
- * @param request
- * @returns
+ * In both modes:
+ * - `/` and `/index.html` become `/index.html`
+ * - URIs whose last segment contains a dot are treated as static files and
+ *   left unchanged.
+ *
+ * In `spa` mode, all other path-like URIs rewrite to `/index.html`.
+ * In `static` mode, path-like URIs append `/index.html` (trailing slash
+ * preserved as a single slash): `/docs` and `/docs/` both become
+ * `/docs/index.html`.
+ */
+declare const addDefaultDocument: (request: CloudFrontRequest, mode: HostingMode) => CloudFrontRequest;
+/**
+ * Prepends the Host header as a folder to the request URI. Used for
+ * multi-tenant routing where each domain maps to a folder in the S3
+ * bucket (e.g. `example.com/foo` → `/example.com/foo`).
  */
 declare const addDomainFolder: (request: CloudFrontRequest) => CloudFrontRequest;
 
-export { addDefaultDocument, addDomainFolder, handler };
+export { type HostingMode, addDefaultDocument, addDomainFolder, spaHandler, staticHandler };

package/lib/static-hosting.viewer-request-handler.js

@@ -22,23 +22,30 @@ var static_hosting_viewer_request_handler_exports = {};
 __export(static_hosting_viewer_request_handler_exports, {
   addDefaultDocument: () => addDefaultDocument,
   addDomainFolder: () => addDomainFolder,
-  handler: () => handler
+  spaHandler: () => spaHandler,
+  staticHandler: () => staticHandler
 });
 module.exports = __toCommonJS(static_hosting_viewer_request_handler_exports);
 var isTestEnv = process.env.VITEST === "true";
-var handler = async (event) => {
+var spaHandler = async (event) => {
+  return runHandler(event, "spa");
+};
+var staticHandler = async (event) => {
+  return runHandler(event, "static");
+};
+var runHandler = async (event, mode) => {
   if (!isTestEnv) {
     console.log("Request Event: ", JSON.stringify(event, null, 2));
   }
   let request = event.Records[0].cf.request;
-  request = addDefaultDocument(request);
+  request = addDefaultDocument(request, mode);
   request = addDomainFolder(request);
   if (!isTestEnv) {
     console.log("Resulting Request: ", JSON.stringify(request, null, 2));
   }
   return request;
 };
-var addDefaultDocument = (request) => {
+var addDefaultDocument = (request, mode) => {
   if (request.uri === "/" || request.uri === "/index.html") {
     request.uri = "/index.html";
     return request;
@@ -49,7 +56,12 @@ var addDefaultDocument = (request) => {
   if (looksLikeStaticFile) {
     return request;
   }
-  request.uri = "/index.html";
+  if (mode === "spa") {
+    request.uri = "/index.html";
+    return request;
+  }
+  const normalized = request.uri.endsWith("/") ? request.uri.slice(0, -1) : request.uri;
+  request.uri = `${normalized}/index.html`;
   return request;
 };
 var addDomainFolder = (request) => {
@@ -61,6 +73,7 @@ var addDomainFolder = (request) => {
 0 && (module.exports = {
   addDefaultDocument,
   addDomainFolder,
-  handler
+  spaHandler,
+  staticHandler
 });
 //# sourceMappingURL=static-hosting.viewer-request-handler.js.map

package/lib/static-hosting.viewer-request-handler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n *\n * Viewer Request Handler\n *\n * Handles requests at the CloudFront viewer request stage.\n *\n * - Logs the request\n * - Adds default document if needed\n * - Prepends folder with domain\n *\n * @param event CloudFrontRequestEvent\n * @returns CloudFrontRequest\n */\nconst isTestEnv = process.env.VITEST === \"true\";\n\nexport const handler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  // log request\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  // return body\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds default document to request URI if needed. For SPA (single-page app)\n * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten\n * to /index.html so the one root index is served and the client-side router\n * can handle the path. Only URIs whose last segment looks like a static file\n * (contains a dot) are left unchanged.\n *\n * @param request\n * @returns\n */\nexport const addDefaultDocument = (request: CloudFrontRequest) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  request.uri = \"/index.html\";\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds domain folder to request URI.\n *\n * @param request\n * @returns\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,IAAM,YAAY,QAAQ,IAAI,WAAW;AAElC,IAAM,UAAU,OACrB,UAC+B;AAE/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,OAAO;AAGpC,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAGA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAAC,YAA+B;AAChE,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,UAAQ,MAAM;AACd,SAAO;AACT;AAWO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n * Hosting mode controls how path-like URIs get a default document.\n *\n * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to\n *   `/index.html` so the single-page app's root index is served and the\n *   client-side router handles the path.\n * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes\n *   `/docs/index.html`) so multi-page static sites can serve distinct\n *   HTML per path.\n */\nexport type HostingMode = \"spa\" | \"static\";\n\nconst isTestEnv = process.env.VITEST === \"true\";\n\n/**\n * Viewer Request Handler for SPA mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const spaHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"spa\");\n};\n\n/**\n * Viewer Request Handler for static (non-SPA) mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `<path>/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const staticHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"static\");\n};\n\nconst runHandler = async (\n  event: CloudFrontRequestEvent,\n  mode: HostingMode,\n): Promise<CloudFrontRequest> => {\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request, mode);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  return request;\n};\n\n/**\n * Adds a default document to the request URI based on the hosting mode.\n *\n * In both modes:\n * - `/` and `/index.html` become `/index.html`\n * - URIs whose last segment contains a dot are treated as static files and\n *   left unchanged.\n *\n * In `spa` mode, all other path-like URIs rewrite to `/index.html`.\n * In `static` mode, path-like URIs append `/index.html` (trailing slash\n * preserved as a single slash): `/docs` and `/docs/` both become\n * `/docs/index.html`.\n */\nexport const addDefaultDocument = (\n  request: CloudFrontRequest,\n  mode: HostingMode,\n) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  if (mode === \"spa\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  // static mode: append /index.html to the path, collapsing any trailing slash\n  const normalized = request.uri.endsWith(\"/\")\n    ? request.uri.slice(0, -1)\n    : request.uri;\n  request.uri = `${normalized}/index.html`;\n  return request;\n};\n\n/**\n * Prepends the Host header as a folder to the request URI. Used for\n * multi-tenant routing where each domain maps to a folder in the S3\n * bucket (e.g. `example.com/foo` → `/example.com/foo`).\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,IAAM,YAAY,QAAQ,IAAI,WAAW;AASlC,IAAM,aAAa,OACxB,UAC+B;AAC/B,SAAO,WAAW,OAAO,KAAK;AAChC;AASO,IAAM,gBAAgB,OAC3B,UAC+B;AAC/B,SAAO,WAAW,OAAO,QAAQ;AACnC;AAEA,IAAM,aAAa,OACjB,OACA,SAC+B;AAC/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,SAAS,IAAI;AAG1C,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAChC,SACA,SACG;AACH,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,OAAO;AAClB,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,QAAQ,IAAI,SAAS,GAAG,IACvC,QAAQ,IAAI,MAAM,GAAG,EAAE,IACvB,QAAQ;AACZ,UAAQ,MAAM,GAAG,UAAU;AAC3B,SAAO;AACT;AAOO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}

package/lib/static-hosting.viewer-request-handler.mjs

@@ -2,19 +2,25 @@ import "./chunk-LZOMFHX3.mjs";
 
 // src/static-hosting/static-hosting.viewer-request-handler.ts
 var isTestEnv = process.env.VITEST === "true";
-var handler = async (event) => {
+var spaHandler = async (event) => {
+  return runHandler(event, "spa");
+};
+var staticHandler = async (event) => {
+  return runHandler(event, "static");
+};
+var runHandler = async (event, mode) => {
   if (!isTestEnv) {
     console.log("Request Event: ", JSON.stringify(event, null, 2));
   }
   let request = event.Records[0].cf.request;
-  request = addDefaultDocument(request);
+  request = addDefaultDocument(request, mode);
   request = addDomainFolder(request);
   if (!isTestEnv) {
     console.log("Resulting Request: ", JSON.stringify(request, null, 2));
   }
   return request;
 };
-var addDefaultDocument = (request) => {
+var addDefaultDocument = (request, mode) => {
   if (request.uri === "/" || request.uri === "/index.html") {
     request.uri = "/index.html";
     return request;
@@ -25,7 +31,12 @@ var addDefaultDocument = (request) => {
   if (looksLikeStaticFile) {
     return request;
   }
-  request.uri = "/index.html";
+  if (mode === "spa") {
+    request.uri = "/index.html";
+    return request;
+  }
+  const normalized = request.uri.endsWith("/") ? request.uri.slice(0, -1) : request.uri;
+  request.uri = `${normalized}/index.html`;
   return request;
 };
 var addDomainFolder = (request) => {
@@ -36,6 +47,7 @@ var addDomainFolder = (request) => {
 export {
   addDefaultDocument,
   addDomainFolder,
-  handler
+  spaHandler,
+  staticHandler
 };
 //# sourceMappingURL=static-hosting.viewer-request-handler.mjs.map

package/lib/static-hosting.viewer-request-handler.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n *\n * Viewer Request Handler\n *\n * Handles requests at the CloudFront viewer request stage.\n *\n * - Logs the request\n * - Adds default document if needed\n * - Prepends folder with domain\n *\n * @param event CloudFrontRequestEvent\n * @returns CloudFrontRequest\n */\nconst isTestEnv = process.env.VITEST === \"true\";\n\nexport const handler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  // log request\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  // return body\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds default document to request URI if needed. For SPA (single-page app)\n * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten\n * to /index.html so the one root index is served and the client-side router\n * can handle the path. Only URIs whose last segment looks like a static file\n * (contains a dot) are left unchanged.\n *\n * @param request\n * @returns\n */\nexport const addDefaultDocument = (request: CloudFrontRequest) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  request.uri = \"/index.html\";\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds domain folder to request URI.\n *\n * @param request\n * @returns\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;AAeA,IAAM,YAAY,QAAQ,IAAI,WAAW;AAElC,IAAM,UAAU,OACrB,UAC+B;AAE/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,OAAO;AAGpC,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAGA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAAC,YAA+B;AAChE,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,UAAQ,MAAM;AACd,SAAO;AACT;AAWO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n * Hosting mode controls how path-like URIs get a default document.\n *\n * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to\n *   `/index.html` so the single-page app's root index is served and the\n *   client-side router handles the path.\n * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes\n *   `/docs/index.html`) so multi-page static sites can serve distinct\n *   HTML per path.\n */\nexport type HostingMode = \"spa\" | \"static\";\n\nconst isTestEnv = process.env.VITEST === \"true\";\n\n/**\n * Viewer Request Handler for SPA mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const spaHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"spa\");\n};\n\n/**\n * Viewer Request Handler for static (non-SPA) mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `<path>/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const staticHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"static\");\n};\n\nconst runHandler = async (\n  event: CloudFrontRequestEvent,\n  mode: HostingMode,\n): Promise<CloudFrontRequest> => {\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request, mode);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  return request;\n};\n\n/**\n * Adds a default document to the request URI based on the hosting mode.\n *\n * In both modes:\n * - `/` and `/index.html` become `/index.html`\n * - URIs whose last segment contains a dot are treated as static files and\n *   left unchanged.\n *\n * In `spa` mode, all other path-like URIs rewrite to `/index.html`.\n * In `static` mode, path-like URIs append `/index.html` (trailing slash\n * preserved as a single slash): `/docs` and `/docs/` both become\n * `/docs/index.html`.\n */\nexport const addDefaultDocument = (\n  request: CloudFrontRequest,\n  mode: HostingMode,\n) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  if (mode === \"spa\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  // static mode: append /index.html to the path, collapsing any trailing slash\n  const normalized = request.uri.endsWith(\"/\")\n    ? request.uri.slice(0, -1)\n    : request.uri;\n  request.uri = `${normalized}/index.html`;\n  return request;\n};\n\n/**\n * Prepends the Host header as a folder to the request URI. Used for\n * multi-tenant routing where each domain maps to a folder in the S3\n * bucket (e.g. `example.com/foo` → `/example.com/foo`).\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;AAcA,IAAM,YAAY,QAAQ,IAAI,WAAW;AASlC,IAAM,aAAa,OACxB,UAC+B;AAC/B,SAAO,WAAW,OAAO,KAAK;AAChC;AASO,IAAM,gBAAgB,OAC3B,UAC+B;AAC/B,SAAO,WAAW,OAAO,QAAQ;AACnC;AAEA,IAAM,aAAa,OACjB,OACA,SAC+B;AAC/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,SAAS,IAAI;AAG1C,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAChC,SACA,SACG;AACH,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,OAAO;AAClB,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,QAAQ,IAAI,SAAS,GAAG,IACvC,QAAQ,IAAI,MAAM,GAAG,EAAE,IACvB,QAAQ;AACZ,UAAQ,MAAM,GAAG,UAAU;AAC3B,SAAO;AACT;AAOO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}

package/package.json

@@ -14,7 +14,7 @@
     "@typescript-eslint/eslint-plugin": "^8",
     "@typescript-eslint/parser": "^8",
     "@vitest/coverage-v8": "3.2.4",
-    "aws-cdk-lib": "2.248.0",
+    "aws-cdk-lib": "2.250.0",
     "commit-and-tag-version": "^12",
     "constructs": "10.6.0",
     "eslint": "^9",
@@ -22,7 +22,7 @@
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-prettier": "^5.5.5",
-    "prettier": "^3.8.2",
+    "prettier": "^3.8.3",
     "rollup": "^4.60.1",
     "rollup-plugin-dts": "^6.4.1",
     "tsup": "^8.5.1",
@@ -31,7 +31,7 @@
     "@codedrifters/utils": "0.0.0"
   },
   "peerDependencies": {
-    "aws-cdk-lib": "2.248.0",
+    "aws-cdk-lib": "2.250.0",
     "constructs": "10.6.0"
   },
   "dependencies": {
@@ -48,7 +48,7 @@
   },
   "main": "lib/index.js",
   "license": "MIT",
-  "version": "0.0.59",
+  "version": "0.0.61",
   "types": "lib/index.d.ts",
   "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"pnpm exec projen\".",
   "scripts": {