@codedrifters/constructs 0.0.60 → 0.0.62

package/README.md

@@ -1,457 +1,7 @@
 # @codedrifters/constructs
 
-A collection of reusable AWS CDK constructs frequently used in CodeDrifters projects. This package provides pre-configured, secure, and production-ready constructs for common AWS infrastructure patterns.
+A collection of reusable AWS CDK constructs for common infrastructure patterns. Pre-configured, secure, and production-ready building blocks for static hosting (`StaticHosting`, `StaticContent`), S3 (`PrivateBucket`), and more.
 
-## Table of Contents
+**Documentation:** See the [@codedrifters/constructs docs](../../../docs/src/content/docs/packages/@codedrifters/constructs/index.md) in the monorepo's Starlight site.
 
-- [What are AWS CDK Constructs?](#what-are-aws-cdk-constructs)
-- [Installation](#installation)
-- [Constructs](#constructs)
-  - [S3 Constructs](#s3-constructs)
-    - [PrivateBucket](#privatebucket)
-  - [Static Hosting Constructs](#static-hosting-constructs)
-    - [StaticHosting](#statichosting)
-    - [StaticContent](#staticcontent)
-- [Complete Example](#complete-example)
-- [API Reference](#api-reference)
-- [Further Documentation](#further-documentation)
-
-## What are AWS CDK Constructs?
-
-AWS CDK (Cloud Development Kit) constructs are reusable cloud components that encapsulate AWS resources and their configuration. Think of them as building blocks that combine multiple AWS services into higher-level abstractions.
-
-For example, instead of manually configuring an S3 bucket, CloudFront distribution, Route53 records, and SSL certificates separately, a construct can combine all of these into a single "StaticHosting" construct that you can use with just a few lines of code.
-
-**Key Benefits:**
-- **Reusability**: Write once, use everywhere
-- **Consistency**: Enforce best practices and security defaults
-- **Simplicity**: Complex infrastructure becomes simple API calls
-- **Type Safety**: Full TypeScript support with IntelliSense
-
-For more information about AWS CDK constructs, see the [AWS CDK Developer Guide](https://docs.aws.amazon.com/cdk/v2/guide/home.html).
-
-## Installation
-
-Add the package to your CDK project using Configulator/Projen configuration. This ensures consistent dependency management across your project.
-
-> **Note:** Always configure dependencies through Projen configuration files, never by manually running `npm install`, `pnpm add`, or `yarn add`. Manual installation will create conflicts with Projen-managed files.
-
-### In a Monorepo (Recommended)
-
-If you're using `@codedrifters/configulator` in a monorepo, add the package as a dependency in your sub-project configuration:
-
-```typescript
-import { TypeScriptProject } from '@codedrifters/configulator';
-import { MonorepoProject } from '@codedrifters/configulator';
-
-const myCdkProject = new TypeScriptProject({
-  name: 'my-cdk-project',
-  packageName: '@myorg/my-cdk-project',
-  outdir: 'packages/my-cdk-project',
-  parent: root, // Your MonorepoProject instance
-  
-  deps: [
-    '@codedrifters/constructs',
-  ],
-  
-  devDeps: [
-    'aws-cdk-lib@catalog:', // Catalog versions are pre-configured
-    'constructs@catalog:',
-  ],
-});
-```
-
-### In a Standalone CDK Project
-
-If you're using AWS CDK directly (not via Configulator), add the package to your `deps` array:
-
-```typescript
-import { awscdk } from 'projen';
-
-const project = new awscdk.AwsCdkTypeScriptApp({
-  name: 'my-cdk-app',
-  
-  deps: [
-    '@codedrifters/constructs',
-  ],
-  
-  devDeps: [
-    'aws-cdk-lib',
-    'constructs',
-  ],
-});
-```
-
-### After Adding to Configuration
-
-After updating your projenrc configuration file, run:
-
-```bash
-npx projen
-```
-
-This will update your `package.json` and install the dependencies.
-
-### Peer Dependencies
-
-This package requires the following peer dependencies:
-
-- `aws-cdk-lib` - AWS CDK construct library
-- `constructs` - Core constructs library
-
-These should be added as dev dependencies in your project configuration. If you're using `@codedrifters/configulator`, the catalog versions (`@catalog:`) are automatically configured in the root `MonorepoProject`.
-
-## Constructs
-
-### S3 Constructs
-
-#### PrivateBucket
-
-A secure S3 bucket with sensible security defaults. This construct extends AWS CDK's `Bucket` construct with security best practices applied by default.
-
-**Security Defaults:**
-- Public access is blocked (`BlockPublicAccess.BLOCK_ALL`)
-- SSL/TLS is enforced for all requests
-- Bucket owner enforced object ownership
-- Configurable removal policy (defaults to `RETAIN`)
-
-**Basic Usage:**
-
-```typescript
-import { PrivateBucket } from '@codedrifters/constructs';
-import { Stack } from 'aws-cdk-lib';
-import { Construct } from 'constructs';
-
-const stack = new Stack(app, 'MyStack');
-
-// Create a private bucket with default security settings
-const bucket = new PrivateBucket(stack, 'MyPrivateBucket');
-```
-
-**With Custom Properties:**
-
-```typescript
-import { RemovalPolicy } from 'aws-cdk-lib';
-import { PrivateBucket } from '@codedrifters/constructs';
-
-const bucket = new PrivateBucket(stack, 'MyPrivateBucket', {
-  removalPolicy: RemovalPolicy.DESTROY,
-  autoDeleteObjects: true,
-  versioned: true,
-});
-```
-
-**Note:** The security settings (public access blocked, SSL enforced, etc.) cannot be overridden - they are always applied to ensure bucket security.
-
-### Static Hosting Constructs
-
-#### StaticHosting
-
-A complete static website hosting solution that creates and configures:
-
-- **S3 Bucket**: Private bucket for storing static files (using `PrivateBucket`)
-- **CloudFront Distribution**: Global CDN for fast content delivery
-- **SSL Certificate**: Wildcard certificate via AWS Certificate Manager
-- **Route53 Records**: DNS entries for the domain and wildcard subdomains
-- **Lambda@Edge Function**: Viewer request handler for path rewriting
-- **SSM Parameters**: Stores bucket ARN, distribution domain, and distribution ID for later use
-
-**Features:**
-- Automatic wildcard SSL certificate generation
-- Support for custom domains with automatic DNS configuration
-- Lambda@Edge function for intelligent path rewriting
-- Conservative caching policy (60s default TTL)
-- Stores configuration in SSM Parameter Store for use by `StaticContent`
-
-**Basic Usage (CloudFront Domain Only):**
-
-```typescript
-import { StaticHosting } from '@codedrifters/constructs';
-import { Stack } from 'aws-cdk-lib';
-
-const hostingStack = new Stack(app, 'HostingStack', { env });
-
-const hosting = new StaticHosting(hostingStack, 'static-hosting', {
-  description: 'My static website',
-});
-```
-
-**With Custom Domain:**
-
-```typescript
-import { StaticHosting } from '@codedrifters/constructs';
-import { Stack, RemovalPolicy } from 'aws-cdk-lib';
-
-const hostingStack = new Stack(app, 'HostingStack', { env });
-
-const hosting = new StaticHosting(hostingStack, 'static-hosting', {
-  description: 'My static website',
-  staticDomainProps: {
-    baseDomain: 'example.com',
-    hostedZoneAttributes: {
-      hostedZoneId: 'Z1234567890ABC',
-      zoneName: 'example.com',
-    },
-  },
-  privateBucketProps: {
-    removalPolicy: RemovalPolicy.DESTROY,
-    autoDeleteObjects: true,
-  },
-});
-```
-
-**Properties:**
-
-| Property | Type | Default | Description |
-|----------|------|---------|-------------|
-| `description` | `string` | `undefined` | Short description for traceability |
-| `staticDomainProps` | `StaticDomainProps` | `undefined` | Domain configuration (optional) |
-| `bucketArnParamName` | `string` | `"/STATIC_WEBSITE/BUCKET_ARN"` | SSM parameter name for bucket ARN |
-| `distributionDomainParamName` | `string` | `"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN"` | SSM parameter name for distribution domain |
-| `distributionIDParamName` | `string` | `"/STATIC_WEBSITE/DISTRIBUTION_ID"` | SSM parameter name for distribution ID |
-| `privateBucketProps` | `PrivateBucketProps` | `undefined` | Props to pass to the S3 bucket |
-
-**StaticDomainProps:**
-
-| Property | Type | Description |
-|----------|------|-------------|
-| `baseDomain` | `string` | The base domain (e.g., `example.com`) |
-| `hostedZoneAttributes` | `HostedZoneAttributes` | Hosted zone ID and zone name |
-
-**Outputs:**
-
-The construct exposes:
-- `fullDomain: string` - The full domain name (custom domain if provided, otherwise CloudFront domain)
-
-**SSM Parameters Created:**
-
-The construct automatically creates SSM parameters that can be referenced by `StaticContent`:
-- Bucket ARN (default: `/STATIC_WEBSITE/BUCKET_ARN`)
-- CloudFront Distribution Domain (default: `/STATIC_WEBSITE/DISTRIBUTION_DOMAIN`)
-- CloudFront Distribution ID (default: `/STATIC_WEBSITE/DISTRIBUTION_ID`)
-
-#### StaticContent
-
-Deploys static content from a local directory to an S3 bucket. This construct is designed to work with `StaticHosting` and supports branch-based deployment paths for PR and feature branch previews.
-
-**Features:**
-- Deploys files from a local directory to S3
-- Supports branch-based path prefixes (e.g., `feature-123.example.com/`)
-- Automatically retrieves bucket ARN from SSM Parameter Store
-- Configurable destination directory within the bucket
-
-**How Branch-Based Deployment Works:**
-
-The construct uses the current git branch name to create unique deployment paths. This allows multiple branches to deploy to the same bucket without conflicts:
-
-```
-S3 Bucket Structure:
-├── example.com/              → Production/main branch
-├── feature-123.example.com/  → Feature branch
-├── pr-456.example.com/      → Pull request
-└── stage.example.com/       → Staging branch
-```
-
-**Basic Usage:**
-
-```typescript
-import { StaticContent, StaticHosting } from '@codedrifters/constructs';
-import { Stack } from 'aws-cdk-lib';
-
-// First, create the hosting infrastructure
-const hostingStack = new Stack(app, 'HostingStack', { env });
-const hosting = new StaticHosting(hostingStack, 'static-hosting', {
-  staticDomainProps: {
-    baseDomain: 'example.com',
-    hostedZoneAttributes: {
-      hostedZoneId: 'Z1234567890ABC',
-      zoneName: 'example.com',
-    },
-  },
-});
-
-// Then, deploy content in a separate stack
-const contentStack = new Stack(app, 'ContentStack', { env });
-contentStack.node.addDependency(hostingStack);
-
-new StaticContent(contentStack, 'static-content', {
-  contentSourceDirectory: 'dist', // Local directory with built files
-  contentDestinationDirectory: '/', // Deploy to root of bucket path
-  fullDomain: hosting.fullDomain, // Use domain from StaticHosting
-});
-```
-
-**With Custom Subdomain:**
-
-```typescript
-new StaticContent(contentStack, 'static-content', {
-  contentSourceDirectory: 'dist',
-  contentDestinationDirectory: '/',
-  fullDomain: hosting.fullDomain,
-  subDomain: 'staging', // Override git branch detection
-  bucketArnParamName: '/STATIC_WEBSITE/BUCKET_ARN', // Custom param name
-});
-```
-
-**Properties:**
-
-| Property | Type | Default | Description |
-|----------|------|---------|-------------|
-| `contentSourceDirectory` | `string` | **Required** | Absolute path to directory containing files to deploy |
-| `contentDestinationDirectory` | `string` | **Required** | Directory within bucket to place content (should start with `/`) |
-| `fullDomain` | `string` | **Required** | Full domain name (from `StaticHosting.fullDomain`) |
-| `subDomain` | `string` | Git branch name | Subdomain prefix (defaults to current git branch) |
-| `bucketArnParamName` | `string` | `"/STATIC_WEBSITE/BUCKET_ARN"` | SSM parameter name for bucket ARN |
-
-**Path Construction:**
-
-The construct creates a unique path prefix using: `{subDomain}.{fullDomain}`
-
-For example:
-- Branch: `feature-123`, Domain: `example.com` → Path: `feature-123.example.com/`
-- Branch: `main`, Domain: `example.com` → Path: `main.example.com/` (or just `example.com/` if subdomain is empty)
-
-## Complete Example
-
-Here's a complete example showing how to use `StaticHosting` and `StaticContent` together:
-
-```typescript
-import { StaticContent, StaticHosting } from '@codedrifters/constructs';
-import { App, RemovalPolicy, Stack } from 'aws-cdk-lib';
-
-const app = new App();
-
-const env = {
-  account: '123456789012',
-  region: 'us-east-1',
-};
-
-const baseDomain = 'example.com';
-
-/*******************************************************************************
- *
- * Step 1: Create the hosting infrastructure
- *
- * This creates the S3 bucket, CloudFront distribution, SSL certificate,
- * and DNS records.
- *
- ******************************************************************************/
-
-const hostingStack = new Stack(
-  app,
-  `static-hosting-dev-${env.account}-${env.region}`,
-  { env }
-);
-
-const hosting = new StaticHosting(hostingStack, 'static-hosting', {
-  description: 'My static website',
-  privateBucketProps: {
-    removalPolicy: RemovalPolicy.DESTROY,
-    autoDeleteObjects: true,
-  },
-  staticDomainProps: {
-    baseDomain,
-    hostedZoneAttributes: {
-      hostedZoneId: 'Z1234567890ABC',
-      zoneName: baseDomain,
-    },
-  },
-});
-
-/*******************************************************************************
- *
- * Step 2: Deploy static content
- *
- * This deploys files from a local directory to the S3 bucket created above.
- * The content stack must depend on the hosting stack to ensure the bucket
- * exists before deployment.
- *
- ******************************************************************************/
-
-const contentStack = new Stack(
-  app,
-  `static-content-dev-${env.account}-${env.region}`,
-  { env }
-);
-
-// Ensure hosting stack is created first
-contentStack.node.addDependency(hostingStack);
-
-new StaticContent(contentStack, 'static-content', {
-  contentSourceDirectory: 'src/website', // Path to your built website files
-  contentDestinationDirectory: '/', // Deploy to root
-  fullDomain: hosting.fullDomain, // Use the domain from StaticHosting
-});
-
-app.synth();
-```
-
-**Deployment Flow:**
-
-1. Deploy the hosting stack first: `cdk deploy static-hosting-dev-*`
-2. This creates the S3 bucket, CloudFront distribution, SSL certificate, and DNS records
-3. Deploy the content stack: `cdk deploy static-content-dev-*`
-4. This uploads your static files to the S3 bucket
-5. Your website is now live at your domain!
-
-**Branch-Based Deployments:**
-
-When deploying from different git branches, the `StaticContent` construct automatically uses the branch name as a subdomain prefix. This allows you to have:
-- `main` branch → `example.com`
-- `feature-123` branch → `feature-123.example.com`
-- `pr-456` branch → `pr-456.example.com`
-
-All using the same S3 bucket and CloudFront distribution!
-
-## API Reference
-
-### Exports
-
-The package exports the following:
-
-**Constructs:**
-- `PrivateBucket` - Secure S3 bucket
-- `StaticHosting` - Complete static hosting solution
-- `StaticContent` - Static content deployment
-
-### Type Definitions
-
-**PrivateBucketProps**
-- Extends `BucketProps` from `aws-cdk-lib/aws-s3`
-- All standard S3 bucket properties are supported
-- Security settings are enforced and cannot be overridden
-
-**StaticHostingProps**
-- Extends `StackProps` from `aws-cdk-lib`
-- See [StaticHosting](#statichosting) section for full property list
-
-**StaticContentProps**
-- See [StaticContent](#staticcontent) section for full property list
-
-**StaticDomainProps**
-- `baseDomain: string` - Base domain name
-- `hostedZoneAttributes: HostedZoneAttributes` - Route53 hosted zone attributes
-
-## Further Documentation
-
-### AWS CDK Resources
-
-- [AWS CDK Developer Guide](https://docs.aws.amazon.com/cdk/v2/guide/home.html) - Comprehensive guide to AWS CDK
-- [AWS CDK API Reference](https://docs.aws.amazon.com/cdk/api/v2/) - Complete API documentation
-- [AWS CDK Construct Library](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-construct-library.html) - All available constructs
-
-### AWS Service Documentation
-
-- [Amazon S3 Documentation](https://docs.aws.amazon.com/s3/) - S3 service documentation
-- [Amazon CloudFront Documentation](https://docs.aws.amazon.com/cloudfront/) - CloudFront CDN documentation
-- [AWS Certificate Manager](https://docs.aws.amazon.com/acm/) - SSL/TLS certificate management
-- [Amazon Route53](https://docs.aws.amazon.com/route53/) - DNS service documentation
-
-### Package Information
-
-- [NPM Package](https://www.npmjs.com/package/@codedrifters/constructs) - View on NPM
-- [GitHub Repository](https://github.com/codedrifters/packages) - Source code
-
----
-
-**Note:** This package is designed for use with AWS CDK v2. Make sure you're using compatible versions of `aws-cdk-lib` and `constructs`.
+**NPM:** [@codedrifters/constructs](https://www.npmjs.com/package/@codedrifters/constructs)

package/lib/index.d.mts

@@ -2,6 +2,8 @@ import { Bucket, BucketProps } from 'aws-cdk-lib/aws-s3';
 import { Construct } from 'constructs';
 import { StackProps } from 'aws-cdk-lib';
 import { HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
+import { HostingMode } from './static-hosting.viewer-request-handler.mjs';
+import 'aws-lambda';
 
 interface PrivateBucketProps extends BucketProps {
 }
@@ -95,6 +97,23 @@ interface StaticHostingProps extends StackProps {
      * Props to pass to the private S3 bucket.
      */
     readonly privateBucketProps?: PrivateBucketProps;
+    /**
+     * Selects how path-like URIs are rewritten by the viewer-request
+     * Lambda@Edge handler.
+     *
+     * - `spa` (default): path-like URIs rewrite to `/index.html` so a
+     *   single-page app can serve its one root index and let the client-side
+     *   router handle the path.
+     * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →
+     *   `/docs/index.html`) so multi-page static sites can serve distinct
+     *   HTML per path.
+     *
+     * Multi-tenant domain-folder prepending runs after the rewrite in both
+     * modes and is unaffected by this prop.
+     *
+     * @default "spa"
+     */
+    readonly hostingMode?: HostingMode;
 }
 declare class StaticHosting extends Construct {
     /**

package/lib/index.d.ts

@@ -3,6 +3,18 @@ import { Construct } from 'constructs';
 import { StackProps } from 'aws-cdk-lib';
 import { HostedZoneAttributes } from 'aws-cdk-lib/aws-route53';
 
+/**
+ * Hosting mode controls how path-like URIs get a default document.
+ *
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+
 interface PrivateBucketProps extends BucketProps {
 }
 declare class PrivateBucket extends Bucket {
@@ -95,6 +107,23 @@ interface StaticHostingProps extends StackProps {
      * Props to pass to the private S3 bucket.
      */
     readonly privateBucketProps?: PrivateBucketProps;
+    /**
+     * Selects how path-like URIs are rewritten by the viewer-request
+     * Lambda@Edge handler.
+     *
+     * - `spa` (default): path-like URIs rewrite to `/index.html` so a
+     *   single-page app can serve its one root index and let the client-side
+     *   router handle the path.
+     * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →
+     *   `/docs/index.html`) so multi-page static sites can serve distinct
+     *   HTML per path.
+     *
+     * Multi-tenant domain-folder prepending runs after the rewrite in both
+     * modes and is unaffected by this prop.
+     *
+     * @default "spa"
+     */
+    readonly hostingMode?: HostingMode;
 }
 declare class StaticHosting extends Construct {
     /**

package/lib/index.js

@@ -260,11 +260,13 @@ var StaticHosting = class extends import_constructs2.Construct {
       distributionDomainParamName,
       distributionIDParamName,
       staticDomainProps,
-      privateBucketProps
+      privateBucketProps,
+      hostingMode
     } = {
       bucketArnParamName: "/STATIC_WEBSITE/BUCKET_ARN",
       distributionDomainParamName: "/STATIC_WEBSITE/DISTRIBUTION_DOMAIN",
       distributionIDParamName: "/STATIC_WEBSITE/DISTRIBUTION_ID",
+      hostingMode: "spa",
       ...props
     };
     const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};
@@ -301,6 +303,7 @@ var StaticHosting = class extends import_constructs2.Construct {
     const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;
     const handler = new import_aws_lambda_nodejs.NodejsFunction(this, "viewer-request-handler", {
       entry: handlerEntry,
+      handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
       memorySize: 128,
       runtime: import_aws_lambda.Runtime.NODEJS_24_X,
       logGroup: new import_aws_logs.LogGroup(this, "viewer-request-handler-log-group", {

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","export * from \"./s3\";\nexport * from \"./static-hosting\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKa,IAAAA,SAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,IAAAA,SAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,IAAAA,SAAA,uBAAuBA,SAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,QAAA,eAAA;AAQO,QAAMC,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,IAAAC,SAAA,gBAAaD;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,IAAAC,SAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,QAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,IAAAC,SAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,IAAAA,SAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAAC,QAAA;AACA,iBAAA,qBAAAA,QAAA;AACA,iBAAA,wBAAAA,QAAA;;;;;ACFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA8B;AAC9B,oBAKO;AAKA,IAAM,gBAAN,cAA4B,qBAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,iCAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,iCAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,gCAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,8BAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,IAAAC,iBAAuB;AACvB,+BAAyC;AACzC,qBAAgC;AAChC,yBAA0B;AAC1B,wBAA0B;AAqDnB,IAAM,gBAAN,cAA4B,4BAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,KAAC,8BAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,+BAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAS,sBAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,gCAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,0CAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,SAAoB;AACpB,WAAsB;AACtB,IAAAC,sBAAqC;AACrC,oCAGO;AACP,4BAYO;AACP,oCAA+B;AAC/B,wBAAwB;AACxB,+BAA+B;AAC/B,sBAAwC;AACxC,yBAMO;AACP,iCAAiC;AACjC,IAAAC,kBAAgC;AAChC,IAAAC,qBAA0B;AAiDnB,IAAM,gBAAN,cAA4B,6BAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,8BAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,0CAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,oDAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,wCAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,YAAY;AAAA,MACZ,SAAS,0BAAQ;AAAA,MACjB,UAAU,IAAI,yBAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,8BAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,kCAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,6BAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,6BAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,6BAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,qBAAqB,+CAAyB,KAAK;AAAA,MACnD,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,4CAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,8BAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,6CAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,kCAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,mCAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,2CAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,qCAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,0CAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,2BAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,2BAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAI,gCAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["exports","findGitBranch","exports","exports","exports","import_aws_s3","import_aws_cdk_lib","import_aws_ssm","import_constructs"]}
+{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","export * from \"./s3\";\nexport * from \"./static-hosting\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport type { HostingMode } from \"./static-hosting.viewer-request-handler\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n\n  /**\n   * Selects how path-like URIs are rewritten by the viewer-request\n   * Lambda@Edge handler.\n   *\n   * - `spa` (default): path-like URIs rewrite to `/index.html` so a\n   *   single-page app can serve its one root index and let the client-side\n   *   router handle the path.\n   * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →\n   *   `/docs/index.html`) so multi-page static sites can serve distinct\n   *   HTML per path.\n   *\n   * Multi-tenant domain-folder prepending runs after the rewrite in both\n   * modes and is unaffected by this prop.\n   *\n   * @default \"spa\"\n   */\n  readonly hostingMode?: HostingMode;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n      hostingMode,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      hostingMode: \"spa\" as HostingMode,\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      handler: hostingMode === \"static\" ? \"staticHandler\" : \"spaHandler\",\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKa,IAAAA,SAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,IAAAA,SAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,IAAAA,SAAA,uBAAuBA,SAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,QAAA,eAAA;AAQO,QAAMC,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,IAAAC,SAAA,gBAAaD;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,IAAAC,SAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,QAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,IAAAC,SAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,IAAAA,SAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAAC,QAAA;AACA,iBAAA,qBAAAA,QAAA;AACA,iBAAA,wBAAAA,QAAA;;;;;ACFA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA8B;AAC9B,oBAKO;AAKA,IAAM,gBAAN,cAA4B,qBAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,iCAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,iCAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,gCAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,8BAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,IAAAC,iBAAuB;AACvB,+BAAyC;AACzC,qBAAgC;AAChC,yBAA0B;AAC1B,wBAA0B;AAqDnB,IAAM,gBAAN,cAA4B,4BAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,KAAC,8BAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,+BAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAS,sBAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,gCAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,0CAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,SAAoB;AACpB,WAAsB;AACtB,IAAAC,sBAAqC;AACrC,oCAGO;AACP,4BAYO;AACP,oCAA+B;AAC/B,wBAAwB;AACxB,+BAA+B;AAC/B,sBAAwC;AACxC,yBAMO;AACP,iCAAiC;AACjC,IAAAC,kBAAgC;AAChC,IAAAC,qBAA0B;AAoEnB,IAAM,gBAAN,cAA4B,6BAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,aAAa;AAAA,MACb,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,8BAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,0CAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,oDAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,wCAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,SAAS,gBAAgB,WAAW,kBAAkB;AAAA,MACtD,YAAY;AAAA,MACZ,SAAS,0BAAQ;AAAA,MACjB,UAAU,IAAI,yBAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,8BAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,kCAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,6BAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,6BAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,6BAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,qBAAqB,+CAAyB,KAAK;AAAA,MACnD,gBAAgB,0CAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,4CAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,8BAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,6CAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,kCAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,mCAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,2CAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,qCAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,0CAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,2BAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,2BAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,gCAAa,UAAU,IAAI,4CAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAI,gCAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAI,gCAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["exports","findGitBranch","exports","exports","exports","import_aws_s3","import_aws_cdk_lib","import_aws_ssm","import_constructs"]}

package/lib/index.mjs

@@ -248,11 +248,13 @@ var StaticHosting = class extends Construct2 {
       distributionDomainParamName,
       distributionIDParamName,
       staticDomainProps,
-      privateBucketProps
+      privateBucketProps,
+      hostingMode
     } = {
       bucketArnParamName: "/STATIC_WEBSITE/BUCKET_ARN",
       distributionDomainParamName: "/STATIC_WEBSITE/DISTRIBUTION_DOMAIN",
       distributionIDParamName: "/STATIC_WEBSITE/DISTRIBUTION_ID",
+      hostingMode: "spa",
       ...props
     };
     const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};
@@ -289,6 +291,7 @@ var StaticHosting = class extends Construct2 {
     const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;
     const handler = new NodejsFunction(this, "viewer-request-handler", {
       entry: handlerEntry,
+      handler: hostingMode === "static" ? "staticHandler" : "spaHandler",
       memorySize: 128,
       runtime: Runtime.NODEJS_24_X,
       logGroup: new LogGroup(this, "viewer-request-handler-log-group", {

package/lib/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAKa,YAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,YAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,YAAA,uBAAuB,QAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,UAAA,eAAA;AAQO,QAAMA,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,YAAA,gBAAaA;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,YAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,UAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,YAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,YAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAA,OAAA;AACA,iBAAA,qBAAA,OAAA;AACA,iBAAA,wBAAA,OAAA;;;;;ACFA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAKA,IAAM,gBAAN,cAA4B,OAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,cAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,cAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,kBAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,gBAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,SAAS,UAAAC,eAAc;AACvB,SAAS,kBAAkB,cAAc;AACzC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB;AAC1B,SAAS,iBAAiB;AAqDnB,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,CAAC,UAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,gBAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAASA,QAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,iBAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,gBAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,UAAU,qBAAqB;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,aAAAC,kBAAiB;AAiDnB,IAAM,gBAAN,cAA4BC,WAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,WAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,YAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,sBAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,eAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,YAAY;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,UAAU,IAAI,SAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,cAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,YAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,SAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,SAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,SAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,qBAAqB,yBAAyB,KAAK;AAAA,MACnD,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,sBAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,QAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,eAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,YAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,aAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,qBAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,eAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,oBAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,QAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,QAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAIC,iBAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["findGitBranch","Bucket","StringParameter","Construct","Construct","StringParameter"]}
+{"version":3,"sources":["../../utils/src/aws/aws-types.ts","../../utils/src/git/git-utils.ts","../../utils/src/string/string-utils.ts","../../utils/src/index.ts","../src/s3/private-bucket.ts","../src/static-hosting/static-content.ts","../src/static-hosting/static-hosting.ts"],"sourcesContent":["/**\n * Stage Types\n *\n * What stage of deployment is this? Dev, staging, or prod?\n */\nexport const AWS_STAGE_TYPE = {\n  /**\n   * Development environment, typically used for testing and development.\n   */\n  DEV: \"dev\",\n\n  /**\n   * Staging environment, used for pre-production testing.\n   */\n  STAGE: \"stage\",\n\n  /**\n   * Production environment, used for live deployments.\n   */\n  PROD: \"prod\",\n} as const;\n\n/**\n * Above const as a type.\n */\nexport type AwsStageType = (typeof AWS_STAGE_TYPE)[keyof typeof AWS_STAGE_TYPE];\n\n/**\n * Deployment target role: whether an (account, region) is the primary or\n * secondary deployment target (e.g. primary vs replica region).\n */\nexport const DEPLOYMENT_TARGET_ROLE = {\n  /**\n   * Account and region that represents the primary region for this service.\n   * For example, the base DynamoDB Region for global tables.\n   */\n  PRIMARY: \"primary\",\n  /**\n   * Account and region that represents a secondary region for this service.\n   * For example, a replica region for a global DynamoDB table.\n   */\n  SECONDARY: \"secondary\",\n} as const;\n\n/**\n * Type for deployment target role values.\n */\nexport type DeploymentTargetRoleType =\n  (typeof DEPLOYMENT_TARGET_ROLE)[keyof typeof DEPLOYMENT_TARGET_ROLE];\n\n/**\n * Environment types (primary/secondary).\n *\n * @deprecated Use {@link DEPLOYMENT_TARGET_ROLE} instead. This constant is maintained for backward compatibility.\n */\nexport const AWS_ENVIRONMENT_TYPE = DEPLOYMENT_TARGET_ROLE;\n\n/**\n * Type for environment type values.\n *\n * @deprecated Use {@link DeploymentTargetRoleType} instead. This type is maintained for backward compatibility.\n */\nexport type AwsEnvironmentType = DeploymentTargetRoleType;\n","import { execSync } from \"node:child_process\";\n\n/**\n * Returns the current full git branch name\n *\n * ie: feature/1234 returns feature/1234\n *\n */\nexport const findGitBranch = (): string => {\n  return execSync(\"git rev-parse --abbrev-ref HEAD\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\");\n};\n\nexport const findGitRepoName = (): string => {\n  /**\n   * When running in github actions this will be populated.\n   */\n  if (process.env.GITHUB_REPOSITORY) {\n    return process.env.GITHUB_REPOSITORY;\n  }\n\n  /**\n   * locally, we need to extract the repo name from the git config.\n   */\n  const remote = execSync(\"git config --get remote.origin.url\")\n    .toString(\"utf8\")\n    .replace(/[\\n\\r\\s]+$/, \"\")\n    .trim();\n\n  const match = remote.match(/[:\\/]([^/]+\\/[^/]+?)(?:\\.git)?$/);\n  const repoName = match ? match[1] : \"error-repo-name\";\n\n  return repoName;\n};\n","import * as crypto from \"node:crypto\";\n\n/**\n *\n * @param inString string to hash\n * @param trimLength trim to this length (defaults to 999 chars)\n * @returns\n */\nexport const hashString = (inString: string, trimLength: number = 999) => {\n  return crypto\n    .createHash(\"sha256\")\n    .update(inString)\n    .digest(\"hex\")\n    .substring(0, trimLength);\n};\n\n/**\n *\n * @param inputString string to truncate\n * @param maxLength max length of this string\n * @returns trimmed string\n */\nexport const trimStringLength = (inputString: string, maxLength: number) => {\n  return inputString.length < maxLength\n    ? inputString\n    : inputString.substring(0, maxLength);\n};\n","export * from \"./aws/aws-types\";\nexport * from \"./git/git-utils\";\nexport * from \"./string/string-utils\";\n","import { RemovalPolicy } from \"aws-cdk-lib\";\nimport {\n  BlockPublicAccess,\n  Bucket,\n  BucketProps,\n  ObjectOwnership,\n} from \"aws-cdk-lib/aws-s3\";\nimport { Construct } from \"constructs\";\n\nexport interface PrivateBucketProps extends BucketProps {}\n\nexport class PrivateBucket extends Bucket {\n  constructor(scope: Construct, id: string, props: PrivateBucketProps = {}) {\n    const defaultProps = {\n      removalPolicy: props.removalPolicy ?? RemovalPolicy.RETAIN,\n      autoDeleteObjects: props.removalPolicy === RemovalPolicy.DESTROY,\n    };\n\n    const requiredProps = {\n      publicReadAccess: false,\n      blockPublicAccess: BlockPublicAccess.BLOCK_ALL,\n      enforceSSL: true,\n      objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,\n    };\n\n    super(scope, id, { ...defaultProps, ...props, ...requiredProps });\n  }\n}\n","// eslint-disable-next-line import/no-extraneous-dependencies\nimport { findGitBranch } from \"@codedrifters/utils\";\nimport { Bucket } from \"aws-cdk-lib/aws-s3\";\nimport { BucketDeployment, Source } from \"aws-cdk-lib/aws-s3-deployment\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { paramCase } from \"change-case\";\nimport { Construct } from \"constructs\";\n\n/*******************************************************************************\n *\n *  STATIC CONTENT UPLOADER\n *\n *  This construct uploads a directory of content from a local location into S3.\n *\n *  To support PR and branch specific builds, each S3 bucket can store content\n *  for multiple domains and builds, using the following format:\n *\n *  S3-bucket/domain/*\n *\n *  A bucket used to store content for stage.openhi.org might have the\n *  following directory structure (all in the same bucket).\n *\n *  /stage.openhi.org/* -> serves content to stage.openhi.org\n *  /feature-7.stage.openhi.org/* -> serves content to feature-7.stage.openhi.org\n *  /pr-123.stage.openhi.org/* -> serves content to pr-123.stage.openhi.org\n *\n ******************************************************************************/\n\nexport interface StaticContentProps {\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   *  Absolute path to directory containing content for the website.\n   */\n  readonly contentSourceDirectory: string;\n\n  /**\n   *  Directory to place content into. Should start with a slash.\n   *  Example: '/widget'\n   */\n  readonly contentDestinationDirectory: string;\n\n  /**\n   *  The sub domain prefix (ie: images)\n   *\n   * @default git branch name\n   */\n  readonly subDomain?: string;\n\n  /**\n   *  The full domain (ie: staging.codedrifters.com)\n   */\n  readonly fullDomain: string;\n}\n\nexport class StaticContent extends Construct {\n  constructor(scope: Construct, id: string, props: StaticContentProps) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      contentSourceDirectory,\n      contentDestinationDirectory,\n      subDomain,\n      fullDomain,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      subDomain: findGitBranch(),\n      ...props,\n    };\n\n    /***************************************************************************\n     *\n     * Import and build some values from Param Store during deployment.\n     *\n     **************************************************************************/\n\n    const keyPrefix = [paramCase(subDomain), fullDomain].join(\".\");\n\n    const bucketArn = StringParameter.valueForStringParameter(\n      this,\n      bucketArnParamName,\n    );\n    const bucket = Bucket.fromBucketArn(this, \"bucket\", bucketArn);\n\n    /***************************************************************************\n     *\n     * Gather the sources we'll be deploying. We need to have an empty source\n     * for tests since it will change all the time and bork up the test\n     * snapshots if we don't.\n     *\n     **************************************************************************/\n\n    const isTestEnv = process.env.VITEST === \"true\";\n    const sources = isTestEnv ? [] : [Source.asset(contentSourceDirectory)];\n\n    new BucketDeployment(this, \"deploy\", {\n      sources,\n      destinationBucket: bucket,\n      retainOnDelete: false,\n      destinationKeyPrefix: `${keyPrefix}${contentDestinationDirectory}`,\n    });\n  }\n}\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport { Duration, StackProps } from \"aws-cdk-lib\";\nimport {\n  Certificate,\n  CertificateValidation,\n} from \"aws-cdk-lib/aws-certificatemanager\";\nimport {\n  AccessLevel,\n  AllowedMethods,\n  CacheCookieBehavior,\n  CacheHeaderBehavior,\n  CachePolicy,\n  CacheQueryStringBehavior,\n  Distribution,\n  LambdaEdgeEventType,\n  S3OriginAccessControl,\n  Signing,\n  ViewerProtocolPolicy,\n} from \"aws-cdk-lib/aws-cloudfront\";\nimport { S3BucketOrigin } from \"aws-cdk-lib/aws-cloudfront-origins\";\nimport { Runtime } from \"aws-cdk-lib/aws-lambda\";\nimport { NodejsFunction } from \"aws-cdk-lib/aws-lambda-nodejs\";\nimport { LogGroup, RetentionDays } from \"aws-cdk-lib/aws-logs\";\nimport {\n  ARecord,\n  HostedZone,\n  HostedZoneAttributes,\n  IHostedZone,\n  RecordTarget,\n} from \"aws-cdk-lib/aws-route53\";\nimport { CloudFrontTarget } from \"aws-cdk-lib/aws-route53-targets\";\nimport { StringParameter } from \"aws-cdk-lib/aws-ssm\";\nimport { Construct } from \"constructs\";\nimport type { HostingMode } from \"./static-hosting.viewer-request-handler\";\nimport { PrivateBucket, PrivateBucketProps } from \"../s3/private-bucket\";\n\nexport interface StaticDomainProps {\n  /**\n   *  The base domain (ie: codedrifters.com)\n   */\n  readonly baseDomain: string;\n\n  /**\n   * Hosted zone ID for the base domain.\n   */\n  readonly hostedZoneAttributes: HostedZoneAttributes;\n}\n\nexport interface StaticHostingProps extends StackProps {\n  /**\n   * Short description used in various places for traceability.\n   */\n  readonly description?: string;\n\n  /**\n   * Values used to connect a domain name to the cloudfront distribution. If not\n   * supplied, cloudfront doesn't use a custom domain.\n   */\n  readonly staticDomainProps?: StaticDomainProps;\n\n  /**\n   * Parameter name to use when storing the static hosting bucket's ARN.\n   * This is needed in other later steps when deploying hosted content to S3.\n   */\n  readonly bucketArnParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution Domain Name.\n   */\n  readonly distributionDomainParamName?: string;\n\n  /**\n   * Parameter name to use when storing the CloudFront Distribution ID.\n   */\n  readonly distributionIDParamName?: string;\n\n  /**\n   * Props to pass to the private S3 bucket.\n   */\n  readonly privateBucketProps?: PrivateBucketProps;\n\n  /**\n   * Selects how path-like URIs are rewritten by the viewer-request\n   * Lambda@Edge handler.\n   *\n   * - `spa` (default): path-like URIs rewrite to `/index.html` so a\n   *   single-page app can serve its one root index and let the client-side\n   *   router handle the path.\n   * - `static`: path-like URIs append `/index.html` (e.g. `/docs` →\n   *   `/docs/index.html`) so multi-page static sites can serve distinct\n   *   HTML per path.\n   *\n   * Multi-tenant domain-folder prepending runs after the rewrite in both\n   * modes and is unaffected by this prop.\n   *\n   * @default \"spa\"\n   */\n  readonly hostingMode?: HostingMode;\n}\n\nexport class StaticHosting extends Construct {\n  /**\n   * Full domain name used as basis for hosting.\n   */\n  public readonly fullDomain: string;\n\n  constructor(scope: Construct, id: string, props: StaticHostingProps = {}) {\n    super(scope, id);\n\n    /***************************************************************************\n     *\n     * Initial Setup\n     *\n     * Set some defaults, build domain information.\n     *\n     **************************************************************************/\n\n    const {\n      bucketArnParamName,\n      distributionDomainParamName,\n      distributionIDParamName,\n      staticDomainProps,\n      privateBucketProps,\n      hostingMode,\n    } = {\n      bucketArnParamName: \"/STATIC_WEBSITE/BUCKET_ARN\",\n      distributionDomainParamName: \"/STATIC_WEBSITE/DISTRIBUTION_DOMAIN\",\n      distributionIDParamName: \"/STATIC_WEBSITE/DISTRIBUTION_ID\",\n      hostingMode: \"spa\" as HostingMode,\n      ...props,\n    };\n\n    const { baseDomain, hostedZoneAttributes } = staticDomainProps ?? {};\n\n    /***************************************************************************\n     *\n     * PRIVATE BUCKET\n     *\n     * A bucket to store the files within.\n     * Save ARN for later deploys.\n     *\n     **************************************************************************/\n\n    const bucket = new PrivateBucket(\n      this,\n      \"static-hosting-bucket\",\n      privateBucketProps,\n    );\n\n    /***************************************************************************\n     *\n     * DNS & Wildcard Certificate\n     *\n     * If a zone Id as passed in, find the hosted zone and create a wildcard\n     * certificate for the domain.\n     *\n     **************************************************************************/\n\n    let zone: IHostedZone | undefined;\n    let certificate: Certificate | undefined;\n\n    if (hostedZoneAttributes && baseDomain) {\n      zone = HostedZone.fromHostedZoneAttributes(\n        this,\n        \"zone\",\n        hostedZoneAttributes,\n      );\n      certificate = new Certificate(this, \"wildcard-certificate\", {\n        domainName: `*.${baseDomain}`,\n        subjectAlternativeNames: [baseDomain],\n        validation: CertificateValidation.fromDnsMultiZone({\n          [`*.${baseDomain}`]: zone,\n          [baseDomain]: zone,\n        }),\n      });\n    }\n\n    /******************************************************************************\n     *\n     * LAMBDA@EDGE FUNCTION\n     *\n     * This handles rewriting the path from domain name.\n     *\n     *****************************************************************************/\n\n    // Explicit entry required: when omitted, NodejsFunction infers the path from the\n    // call site (the built lib/index.js), so it looks for index.viewer-request-handler.js\n    // in the package. That file is only emitted if we add it as a separate tsup entry.\n    // Use .js when present (built package); fall back to .ts for tests running from source.\n    const handlerJs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.js\",\n    );\n    const handlerTs = path.join(\n      __dirname,\n      \"static-hosting.viewer-request-handler.ts\",\n    );\n    const handlerEntry = fs.existsSync(handlerJs) ? handlerJs : handlerTs;\n\n    const handler = new NodejsFunction(this, \"viewer-request-handler\", {\n      entry: handlerEntry,\n      handler: hostingMode === \"static\" ? \"staticHandler\" : \"spaHandler\",\n      memorySize: 128,\n      runtime: Runtime.NODEJS_24_X,\n      logGroup: new LogGroup(this, \"viewer-request-handler-log-group\", {\n        retention: RetentionDays.ONE_MONTH,\n      }),\n    });\n\n    /******************************************************************************\n     *\n     *  CLOUDFRONT CONFIG\n     *\n     *  Setup a CloudFront Distribution for the bucket.\n     *\n     *****************************************************************************/\n\n    const cachePolicy = new CachePolicy(this, \"cloudfront-policy\", {\n      comment: \"Relatively conservative TTL policy.\",\n      maxTtl: Duration.seconds(300),\n      minTtl: Duration.seconds(0),\n      defaultTtl: Duration.seconds(60),\n      headerBehavior: CacheHeaderBehavior.none(),\n      queryStringBehavior: CacheQueryStringBehavior.none(),\n      cookieBehavior: CacheCookieBehavior.none(),\n      enableAcceptEncodingGzip: true,\n      enableAcceptEncodingBrotli: true,\n    });\n\n    const oac = new S3OriginAccessControl(this, \"MyOAC\", {\n      signing: Signing.SIGV4_NO_OVERRIDE,\n    });\n    const origin = S3BucketOrigin.withOriginAccessControl(bucket, {\n      originAccessControl: oac,\n      originAccessLevels: [AccessLevel.READ],\n    });\n\n    const distribution = new Distribution(this, \"cloudfront-distribution\", {\n      comment: `Distribution for ${props.description ?? id}`,\n\n      /**\n       * Only if domain was supplied\n       */\n      ...(certificate && baseDomain\n        ? {\n            certificate,\n            domainNames: [baseDomain, `*.${baseDomain}`],\n          }\n        : {}),\n\n      defaultBehavior: {\n        origin,\n        viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,\n        cachePolicy,\n        allowedMethods: AllowedMethods.ALLOW_GET_HEAD_OPTIONS,\n        edgeLambdas: [\n          {\n            functionVersion: handler.currentVersion,\n            eventType: LambdaEdgeEventType.VIEWER_REQUEST,\n          },\n        ],\n      },\n      defaultRootObject: \"index.html\",\n    });\n\n    /**\n     * We finally have enough information to set the full domain.\n     */\n    this.fullDomain =\n      certificate && baseDomain ? baseDomain : distribution.domainName;\n\n    /***************************************************************************\n     *\n     *  DNS ENTRY\n     *\n     * Link cloudfront to both the root fulldomain and all possible subdomains.\n     *\n     **************************************************************************/\n\n    if (zone) {\n      new ARecord(this, \"root-dns-entry\", {\n        zone,\n        recordName: baseDomain ? baseDomain : \"\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n\n      new ARecord(this, \"wc-dns-entry\", {\n        zone,\n        recordName: baseDomain ? `*.${baseDomain}` : \"*\",\n        target: RecordTarget.fromAlias(new CloudFrontTarget(distribution)),\n      });\n    }\n\n    /***************************************************************************\n     *\n     * EXPORTS\n     *\n     * Used by content uploader later.\n     *\n     **************************************************************************/\n\n    new StringParameter(this, \"dist-domain\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionDomainParamName,\n      stringValue: distribution.domainName,\n    });\n\n    new StringParameter(this, \"dist-id\", {\n      description: `GENERATED DO NOT CHANGE - CloudFront Distribution Details (${props.description ?? id}).`,\n      parameterName: distributionIDParamName,\n      stringValue: distribution.distributionId,\n    });\n\n    new StringParameter(this, \"bucket-arn\", {\n      description: `GENERATED DO NOT CHANGE - S3 Bucket ARN for (${props.description ?? id}).`,\n      parameterName: bucketArnParamName,\n      stringValue: bucket.bucketArn,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAKa,YAAA,iBAAiB;;;;MAI5B,KAAK;;;;MAKL,OAAO;;;;MAKP,MAAM;;AAYK,YAAA,yBAAyB;;;;;MAKpC,SAAS;;;;;MAKT,WAAW;;AAcA,YAAA,uBAAuB,QAAA;;;;;;;;;;ACvDpC,QAAA,uBAAA,UAAA,eAAA;AAQO,QAAMA,iBAAgB,MAAa;AACxC,cAAO,GAAA,qBAAA,UAAS,iCAAiC,EAC9C,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE;IAC7B;AAJa,YAAA,gBAAaA;AAMnB,QAAM,kBAAkB,MAAa;AAI1C,UAAI,QAAQ,IAAI,mBAAmB;AACjC,eAAO,QAAQ,IAAI;MACrB;AAKA,YAAM,UAAS,GAAA,qBAAA,UAAS,oCAAoC,EACzD,SAAS,MAAM,EACf,QAAQ,cAAc,EAAE,EACxB,KAAI;AAEP,YAAM,QAAQ,OAAO,MAAM,iCAAiC;AAC5D,YAAM,WAAW,QAAQ,MAAM,CAAC,IAAI;AAEpC,aAAO;IACT;AApBa,YAAA,kBAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACd5B,QAAA,SAAA,aAAA,UAAA,QAAA,CAAA;AAQO,QAAM,aAAa,CAAC,UAAkB,aAAqB,QAAO;AACvE,aAAO,OACJ,WAAW,QAAQ,EACnB,OAAO,QAAQ,EACf,OAAO,KAAK,EACZ,UAAU,GAAG,UAAU;IAC5B;AANa,YAAA,aAAU;AAchB,QAAM,mBAAmB,CAAC,aAAqB,cAAqB;AACzE,aAAO,YAAY,SAAS,YACxB,cACA,YAAY,UAAU,GAAG,SAAS;IACxC;AAJa,YAAA,mBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;ACtB7B,iBAAA,qBAAA,OAAA;AACA,iBAAA,qBAAA,OAAA;AACA,iBAAA,wBAAA,OAAA;;;;;ACFA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAKA,IAAM,gBAAN,cAA4B,OAAO;AAAA,EACxC,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,eAAe;AAAA,MACnB,eAAe,MAAM,iBAAiB,cAAc;AAAA,MACpD,mBAAmB,MAAM,kBAAkB,cAAc;AAAA,IAC3D;AAEA,UAAM,gBAAgB;AAAA,MACpB,kBAAkB;AAAA,MAClB,mBAAmB,kBAAkB;AAAA,MACrC,YAAY;AAAA,MACZ,iBAAiB,gBAAgB;AAAA,IACnC;AAEA,UAAM,OAAO,IAAI,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAAC;AAAA,EAClE;AACF;;;AC1BA,mBAA8B;AAC9B,SAAS,UAAAC,eAAc;AACvB,SAAS,kBAAkB,cAAc;AACzC,SAAS,uBAAuB;AAChC,SAAS,iBAAiB;AAC1B,SAAS,iBAAiB;AAqDnB,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YAAY,OAAkB,IAAY,OAA2B;AACnE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,eAAW,4BAAc;AAAA,MACzB,GAAG;AAAA,IACL;AAQA,UAAM,YAAY,CAAC,UAAU,SAAS,GAAG,UAAU,EAAE,KAAK,GAAG;AAE7D,UAAM,YAAY,gBAAgB;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAASA,QAAO,cAAc,MAAM,UAAU,SAAS;AAU7D,UAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,UAAM,UAAU,YAAY,CAAC,IAAI,CAAC,OAAO,MAAM,sBAAsB,CAAC;AAEtE,QAAI,iBAAiB,MAAM,UAAU;AAAA,MACnC;AAAA,MACA,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,sBAAsB,GAAG,SAAS,GAAG,2BAA2B;AAAA,IAClE,CAAC;AAAA,EACH;AACF;;;ACnHA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,gBAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAC/B,SAAS,UAAU,qBAAqB;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,aAAAC,kBAAiB;AAoEnB,IAAM,gBAAN,cAA4BC,WAAU;AAAA,EAM3C,YAAY,OAAkB,IAAY,QAA4B,CAAC,GAAG;AACxE,UAAM,OAAO,EAAE;AAUf,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI;AAAA,MACF,oBAAoB;AAAA,MACpB,6BAA6B;AAAA,MAC7B,yBAAyB;AAAA,MACzB,aAAa;AAAA,MACb,GAAG;AAAA,IACL;AAEA,UAAM,EAAE,YAAY,qBAAqB,IAAI,qBAAqB,CAAC;AAWnE,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAWA,QAAI;AACJ,QAAI;AAEJ,QAAI,wBAAwB,YAAY;AACtC,aAAO,WAAW;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,oBAAc,IAAI,YAAY,MAAM,wBAAwB;AAAA,QAC1D,YAAY,KAAK,UAAU;AAAA,QAC3B,yBAAyB,CAAC,UAAU;AAAA,QACpC,YAAY,sBAAsB,iBAAiB;AAAA,UACjD,CAAC,KAAK,UAAU,EAAE,GAAG;AAAA,UACrB,CAAC,UAAU,GAAG;AAAA,QAChB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAcA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,YAAiB;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,UAAM,eAAkB,cAAW,SAAS,IAAI,YAAY;AAE5D,UAAM,UAAU,IAAI,eAAe,MAAM,0BAA0B;AAAA,MACjE,OAAO;AAAA,MACP,SAAS,gBAAgB,WAAW,kBAAkB;AAAA,MACtD,YAAY;AAAA,MACZ,SAAS,QAAQ;AAAA,MACjB,UAAU,IAAI,SAAS,MAAM,oCAAoC;AAAA,QAC/D,WAAW,cAAc;AAAA,MAC3B,CAAC;AAAA,IACH,CAAC;AAUD,UAAM,cAAc,IAAI,YAAY,MAAM,qBAAqB;AAAA,MAC7D,SAAS;AAAA,MACT,QAAQ,SAAS,QAAQ,GAAG;AAAA,MAC5B,QAAQ,SAAS,QAAQ,CAAC;AAAA,MAC1B,YAAY,SAAS,QAAQ,EAAE;AAAA,MAC/B,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,qBAAqB,yBAAyB,KAAK;AAAA,MACnD,gBAAgB,oBAAoB,KAAK;AAAA,MACzC,0BAA0B;AAAA,MAC1B,4BAA4B;AAAA,IAC9B,CAAC;AAED,UAAM,MAAM,IAAI,sBAAsB,MAAM,SAAS;AAAA,MACnD,SAAS,QAAQ;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,eAAe,wBAAwB,QAAQ;AAAA,MAC5D,qBAAqB;AAAA,MACrB,oBAAoB,CAAC,YAAY,IAAI;AAAA,IACvC,CAAC;AAED,UAAM,eAAe,IAAI,aAAa,MAAM,2BAA2B;AAAA,MACrE,SAAS,oBAAoB,MAAM,eAAe,EAAE;AAAA;AAAA;AAAA;AAAA,MAKpD,GAAI,eAAe,aACf;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,KAAK,UAAU,EAAE;AAAA,MAC7C,IACA,CAAC;AAAA,MAEL,iBAAiB;AAAA,QACf;AAAA,QACA,sBAAsB,qBAAqB;AAAA,QAC3C;AAAA,QACA,gBAAgB,eAAe;AAAA,QAC/B,aAAa;AAAA,UACX;AAAA,YACE,iBAAiB,QAAQ;AAAA,YACzB,WAAW,oBAAoB;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,IACrB,CAAC;AAKD,SAAK,aACH,eAAe,aAAa,aAAa,aAAa;AAUxD,QAAI,MAAM;AACR,UAAI,QAAQ,MAAM,kBAAkB;AAAA,QAClC;AAAA,QACA,YAAY,aAAa,aAAa;AAAA,QACtC,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAED,UAAI,QAAQ,MAAM,gBAAgB;AAAA,QAChC;AAAA,QACA,YAAY,aAAa,KAAK,UAAU,KAAK;AAAA,QAC7C,QAAQ,aAAa,UAAU,IAAI,iBAAiB,YAAY,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAUA,QAAIC,iBAAgB,MAAM,eAAe;AAAA,MACvC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,WAAW;AAAA,MACnC,aAAa,8DAA8D,MAAM,eAAe,EAAE;AAAA,MAClG,eAAe;AAAA,MACf,aAAa,aAAa;AAAA,IAC5B,CAAC;AAED,QAAIA,iBAAgB,MAAM,cAAc;AAAA,MACtC,aAAa,gDAAgD,MAAM,eAAe,EAAE;AAAA,MACpF,eAAe;AAAA,MACf,aAAa,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AACF;","names":["findGitBranch","Bucket","StringParameter","Construct","Construct","StringParameter"]}

package/lib/static-hosting.viewer-request-handler.d.mts

@@ -1,29 +1,51 @@
 import { CloudFrontRequest, CloudFrontRequestEvent } from 'aws-lambda';
 
-declare const handler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Hosting mode controls how path-like URIs get a default document.
  *
- * Adds default document to request URI if needed. For SPA (single-page app)
- * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten
- * to /index.html so the one root index is served and the client-side router
- * can handle the path. Only URIs whose last segment looks like a static file
- * (contains a dot) are left unchanged.
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+/**
+ * Viewer Request Handler for SPA mode.
  *
- * @param request
- * @returns
+ * - Logs the request
+ * - Rewrites path-like URIs to `/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
  */
-declare const addDefaultDocument: (request: CloudFrontRequest) => CloudFrontRequest;
+declare const spaHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Viewer Request Handler for static (non-SPA) mode.
  *
- * Adds domain folder to request URI.
+ * - Logs the request
+ * - Rewrites path-like URIs to `<path>/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
+ */
+declare const staticHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
+/**
+ * Adds a default document to the request URI based on the hosting mode.
  *
- * @param request
- * @returns
+ * In both modes:
+ * - `/` and `/index.html` become `/index.html`
+ * - URIs whose last segment contains a dot are treated as static files and
+ *   left unchanged.
+ *
+ * In `spa` mode, all other path-like URIs rewrite to `/index.html`.
+ * In `static` mode, path-like URIs append `/index.html` (trailing slash
+ * preserved as a single slash): `/docs` and `/docs/` both become
+ * `/docs/index.html`.
+ */
+declare const addDefaultDocument: (request: CloudFrontRequest, mode: HostingMode) => CloudFrontRequest;
+/**
+ * Prepends the Host header as a folder to the request URI. Used for
+ * multi-tenant routing where each domain maps to a folder in the S3
+ * bucket (e.g. `example.com/foo` → `/example.com/foo`).
  */
 declare const addDomainFolder: (request: CloudFrontRequest) => CloudFrontRequest;
 
-export { addDefaultDocument, addDomainFolder, handler };
+export { type HostingMode, addDefaultDocument, addDomainFolder, spaHandler, staticHandler };

package/lib/static-hosting.viewer-request-handler.d.ts

@@ -1,29 +1,51 @@
 import { CloudFrontRequest, CloudFrontRequestEvent } from 'aws-lambda';
 
-declare const handler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Hosting mode controls how path-like URIs get a default document.
  *
- * Adds default document to request URI if needed. For SPA (single-page app)
- * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten
- * to /index.html so the one root index is served and the client-side router
- * can handle the path. Only URIs whose last segment looks like a static file
- * (contains a dot) are left unchanged.
+ * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to
+ *   `/index.html` so the single-page app's root index is served and the
+ *   client-side router handles the path.
+ * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes
+ *   `/docs/index.html`) so multi-page static sites can serve distinct
+ *   HTML per path.
+ */
+type HostingMode = "spa" | "static";
+/**
+ * Viewer Request Handler for SPA mode.
  *
- * @param request
- * @returns
+ * - Logs the request
+ * - Rewrites path-like URIs to `/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
  */
-declare const addDefaultDocument: (request: CloudFrontRequest) => CloudFrontRequest;
+declare const spaHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
 /**
- * This is a helper used in the main handler. It's split into it's own export
- * to make testing easier.
+ * Viewer Request Handler for static (non-SPA) mode.
  *
- * Adds domain folder to request URI.
+ * - Logs the request
+ * - Rewrites path-like URIs to `<path>/index.html`
+ * - Prepends the Host header as a folder for multi-tenant routing
+ */
+declare const staticHandler: (event: CloudFrontRequestEvent) => Promise<CloudFrontRequest>;
+/**
+ * Adds a default document to the request URI based on the hosting mode.
  *
- * @param request
- * @returns
+ * In both modes:
+ * - `/` and `/index.html` become `/index.html`
+ * - URIs whose last segment contains a dot are treated as static files and
+ *   left unchanged.
+ *
+ * In `spa` mode, all other path-like URIs rewrite to `/index.html`.
+ * In `static` mode, path-like URIs append `/index.html` (trailing slash
+ * preserved as a single slash): `/docs` and `/docs/` both become
+ * `/docs/index.html`.
+ */
+declare const addDefaultDocument: (request: CloudFrontRequest, mode: HostingMode) => CloudFrontRequest;
+/**
+ * Prepends the Host header as a folder to the request URI. Used for
+ * multi-tenant routing where each domain maps to a folder in the S3
+ * bucket (e.g. `example.com/foo` → `/example.com/foo`).
  */
 declare const addDomainFolder: (request: CloudFrontRequest) => CloudFrontRequest;
 
-export { addDefaultDocument, addDomainFolder, handler };
+export { type HostingMode, addDefaultDocument, addDomainFolder, spaHandler, staticHandler };

package/lib/static-hosting.viewer-request-handler.js

@@ -22,23 +22,30 @@ var static_hosting_viewer_request_handler_exports = {};
 __export(static_hosting_viewer_request_handler_exports, {
   addDefaultDocument: () => addDefaultDocument,
   addDomainFolder: () => addDomainFolder,
-  handler: () => handler
+  spaHandler: () => spaHandler,
+  staticHandler: () => staticHandler
 });
 module.exports = __toCommonJS(static_hosting_viewer_request_handler_exports);
 var isTestEnv = process.env.VITEST === "true";
-var handler = async (event) => {
+var spaHandler = async (event) => {
+  return runHandler(event, "spa");
+};
+var staticHandler = async (event) => {
+  return runHandler(event, "static");
+};
+var runHandler = async (event, mode) => {
   if (!isTestEnv) {
     console.log("Request Event: ", JSON.stringify(event, null, 2));
   }
   let request = event.Records[0].cf.request;
-  request = addDefaultDocument(request);
+  request = addDefaultDocument(request, mode);
   request = addDomainFolder(request);
   if (!isTestEnv) {
     console.log("Resulting Request: ", JSON.stringify(request, null, 2));
   }
   return request;
 };
-var addDefaultDocument = (request) => {
+var addDefaultDocument = (request, mode) => {
   if (request.uri === "/" || request.uri === "/index.html") {
     request.uri = "/index.html";
     return request;
@@ -49,7 +56,12 @@ var addDefaultDocument = (request) => {
   if (looksLikeStaticFile) {
     return request;
   }
-  request.uri = "/index.html";
+  if (mode === "spa") {
+    request.uri = "/index.html";
+    return request;
+  }
+  const normalized = request.uri.endsWith("/") ? request.uri.slice(0, -1) : request.uri;
+  request.uri = `${normalized}/index.html`;
   return request;
 };
 var addDomainFolder = (request) => {
@@ -61,6 +73,7 @@ var addDomainFolder = (request) => {
 0 && (module.exports = {
   addDefaultDocument,
   addDomainFolder,
-  handler
+  spaHandler,
+  staticHandler
 });
 //# sourceMappingURL=static-hosting.viewer-request-handler.js.map

package/lib/static-hosting.viewer-request-handler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n *\n * Viewer Request Handler\n *\n * Handles requests at the CloudFront viewer request stage.\n *\n * - Logs the request\n * - Adds default document if needed\n * - Prepends folder with domain\n *\n * @param event CloudFrontRequestEvent\n * @returns CloudFrontRequest\n */\nconst isTestEnv = process.env.VITEST === \"true\";\n\nexport const handler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  // log request\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  // return body\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds default document to request URI if needed. For SPA (single-page app)\n * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten\n * to /index.html so the one root index is served and the client-side router\n * can handle the path. Only URIs whose last segment looks like a static file\n * (contains a dot) are left unchanged.\n *\n * @param request\n * @returns\n */\nexport const addDefaultDocument = (request: CloudFrontRequest) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  request.uri = \"/index.html\";\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds domain folder to request URI.\n *\n * @param request\n * @returns\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,IAAM,YAAY,QAAQ,IAAI,WAAW;AAElC,IAAM,UAAU,OACrB,UAC+B;AAE/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,OAAO;AAGpC,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAGA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAAC,YAA+B;AAChE,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,UAAQ,MAAM;AACd,SAAO;AACT;AAWO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n * Hosting mode controls how path-like URIs get a default document.\n *\n * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to\n *   `/index.html` so the single-page app's root index is served and the\n *   client-side router handles the path.\n * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes\n *   `/docs/index.html`) so multi-page static sites can serve distinct\n *   HTML per path.\n */\nexport type HostingMode = \"spa\" | \"static\";\n\nconst isTestEnv = process.env.VITEST === \"true\";\n\n/**\n * Viewer Request Handler for SPA mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const spaHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"spa\");\n};\n\n/**\n * Viewer Request Handler for static (non-SPA) mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `<path>/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const staticHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"static\");\n};\n\nconst runHandler = async (\n  event: CloudFrontRequestEvent,\n  mode: HostingMode,\n): Promise<CloudFrontRequest> => {\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request, mode);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  return request;\n};\n\n/**\n * Adds a default document to the request URI based on the hosting mode.\n *\n * In both modes:\n * - `/` and `/index.html` become `/index.html`\n * - URIs whose last segment contains a dot are treated as static files and\n *   left unchanged.\n *\n * In `spa` mode, all other path-like URIs rewrite to `/index.html`.\n * In `static` mode, path-like URIs append `/index.html` (trailing slash\n * preserved as a single slash): `/docs` and `/docs/` both become\n * `/docs/index.html`.\n */\nexport const addDefaultDocument = (\n  request: CloudFrontRequest,\n  mode: HostingMode,\n) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  if (mode === \"spa\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  // static mode: append /index.html to the path, collapsing any trailing slash\n  const normalized = request.uri.endsWith(\"/\")\n    ? request.uri.slice(0, -1)\n    : request.uri;\n  request.uri = `${normalized}/index.html`;\n  return request;\n};\n\n/**\n * Prepends the Host header as a folder to the request URI. Used for\n * multi-tenant routing where each domain maps to a folder in the S3\n * bucket (e.g. `example.com/foo` → `/example.com/foo`).\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,IAAM,YAAY,QAAQ,IAAI,WAAW;AASlC,IAAM,aAAa,OACxB,UAC+B;AAC/B,SAAO,WAAW,OAAO,KAAK;AAChC;AASO,IAAM,gBAAgB,OAC3B,UAC+B;AAC/B,SAAO,WAAW,OAAO,QAAQ;AACnC;AAEA,IAAM,aAAa,OACjB,OACA,SAC+B;AAC/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,SAAS,IAAI;AAG1C,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAChC,SACA,SACG;AACH,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,OAAO;AAClB,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,QAAQ,IAAI,SAAS,GAAG,IACvC,QAAQ,IAAI,MAAM,GAAG,EAAE,IACvB,QAAQ;AACZ,UAAQ,MAAM,GAAG,UAAU;AAC3B,SAAO;AACT;AAOO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}

package/lib/static-hosting.viewer-request-handler.mjs

@@ -2,19 +2,25 @@ import "./chunk-LZOMFHX3.mjs";
 
 // src/static-hosting/static-hosting.viewer-request-handler.ts
 var isTestEnv = process.env.VITEST === "true";
-var handler = async (event) => {
+var spaHandler = async (event) => {
+  return runHandler(event, "spa");
+};
+var staticHandler = async (event) => {
+  return runHandler(event, "static");
+};
+var runHandler = async (event, mode) => {
   if (!isTestEnv) {
     console.log("Request Event: ", JSON.stringify(event, null, 2));
   }
   let request = event.Records[0].cf.request;
-  request = addDefaultDocument(request);
+  request = addDefaultDocument(request, mode);
   request = addDomainFolder(request);
   if (!isTestEnv) {
     console.log("Resulting Request: ", JSON.stringify(request, null, 2));
   }
   return request;
 };
-var addDefaultDocument = (request) => {
+var addDefaultDocument = (request, mode) => {
   if (request.uri === "/" || request.uri === "/index.html") {
     request.uri = "/index.html";
     return request;
@@ -25,7 +31,12 @@ var addDefaultDocument = (request) => {
   if (looksLikeStaticFile) {
     return request;
   }
-  request.uri = "/index.html";
+  if (mode === "spa") {
+    request.uri = "/index.html";
+    return request;
+  }
+  const normalized = request.uri.endsWith("/") ? request.uri.slice(0, -1) : request.uri;
+  request.uri = `${normalized}/index.html`;
   return request;
 };
 var addDomainFolder = (request) => {
@@ -36,6 +47,7 @@ var addDomainFolder = (request) => {
 export {
   addDefaultDocument,
   addDomainFolder,
-  handler
+  spaHandler,
+  staticHandler
 };
 //# sourceMappingURL=static-hosting.viewer-request-handler.mjs.map

package/lib/static-hosting.viewer-request-handler.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n *\n * Viewer Request Handler\n *\n * Handles requests at the CloudFront viewer request stage.\n *\n * - Logs the request\n * - Adds default document if needed\n * - Prepends folder with domain\n *\n * @param event CloudFrontRequestEvent\n * @returns CloudFrontRequest\n */\nconst isTestEnv = process.env.VITEST === \"true\";\n\nexport const handler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  // log request\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  // return body\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds default document to request URI if needed. For SPA (single-page app)\n * deployments, path-like URIs (e.g. /dashboard, /patients/123) are rewritten\n * to /index.html so the one root index is served and the client-side router\n * can handle the path. Only URIs whose last segment looks like a static file\n * (contains a dot) are left unchanged.\n *\n * @param request\n * @returns\n */\nexport const addDefaultDocument = (request: CloudFrontRequest) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  request.uri = \"/index.html\";\n  return request;\n};\n\n/**\n * This is a helper used in the main handler. It's split into it's own export\n * to make testing easier.\n *\n * Adds domain folder to request URI.\n *\n * @param request\n * @returns\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;AAeA,IAAM,YAAY,QAAQ,IAAI,WAAW;AAElC,IAAM,UAAU,OACrB,UAC+B;AAE/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,OAAO;AAGpC,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAGA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAAC,YAA+B;AAChE,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,UAAQ,MAAM;AACd,SAAO;AACT;AAWO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/static-hosting/static-hosting.viewer-request-handler.ts"],"sourcesContent":["import { CloudFrontRequest, CloudFrontRequestEvent } from \"aws-lambda\";\n\n/**\n * Hosting mode controls how path-like URIs get a default document.\n *\n * - `spa`: path-like URIs (e.g. `/dashboard`, `/patients/123`) rewrite to\n *   `/index.html` so the single-page app's root index is served and the\n *   client-side router handles the path.\n * - `static`: path-like URIs append `/index.html` (e.g. `/docs` becomes\n *   `/docs/index.html`) so multi-page static sites can serve distinct\n *   HTML per path.\n */\nexport type HostingMode = \"spa\" | \"static\";\n\nconst isTestEnv = process.env.VITEST === \"true\";\n\n/**\n * Viewer Request Handler for SPA mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const spaHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"spa\");\n};\n\n/**\n * Viewer Request Handler for static (non-SPA) mode.\n *\n * - Logs the request\n * - Rewrites path-like URIs to `<path>/index.html`\n * - Prepends the Host header as a folder for multi-tenant routing\n */\nexport const staticHandler = async (\n  event: CloudFrontRequestEvent,\n): Promise<CloudFrontRequest> => {\n  return runHandler(event, \"static\");\n};\n\nconst runHandler = async (\n  event: CloudFrontRequestEvent,\n  mode: HostingMode,\n): Promise<CloudFrontRequest> => {\n  if (!isTestEnv) {\n    console.log(\"Request Event: \", JSON.stringify(event, null, 2));\n  }\n\n  let request = event.Records[0].cf.request;\n\n  // add index if needed\n  request = addDefaultDocument(request, mode);\n\n  // prepend folder with domain\n  request = addDomainFolder(request);\n\n  if (!isTestEnv) {\n    console.log(\"Resulting Request: \", JSON.stringify(request, null, 2));\n  }\n\n  return request;\n};\n\n/**\n * Adds a default document to the request URI based on the hosting mode.\n *\n * In both modes:\n * - `/` and `/index.html` become `/index.html`\n * - URIs whose last segment contains a dot are treated as static files and\n *   left unchanged.\n *\n * In `spa` mode, all other path-like URIs rewrite to `/index.html`.\n * In `static` mode, path-like URIs append `/index.html` (trailing slash\n * preserved as a single slash): `/docs` and `/docs/` both become\n * `/docs/index.html`.\n */\nexport const addDefaultDocument = (\n  request: CloudFrontRequest,\n  mode: HostingMode,\n) => {\n  if (request.uri === \"/\" || request.uri === \"/index.html\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  const segments = request.uri.split(\"/\").filter(Boolean);\n  const lastSegment = segments[segments.length - 1] ?? \"\";\n  const looksLikeStaticFile = lastSegment.includes(\".\");\n\n  if (looksLikeStaticFile) {\n    return request;\n  }\n\n  if (mode === \"spa\") {\n    request.uri = \"/index.html\";\n    return request;\n  }\n\n  // static mode: append /index.html to the path, collapsing any trailing slash\n  const normalized = request.uri.endsWith(\"/\")\n    ? request.uri.slice(0, -1)\n    : request.uri;\n  request.uri = `${normalized}/index.html`;\n  return request;\n};\n\n/**\n * Prepends the Host header as a folder to the request URI. Used for\n * multi-tenant routing where each domain maps to a folder in the S3\n * bucket (e.g. `example.com/foo` → `/example.com/foo`).\n */\nexport const addDomainFolder = (request: CloudFrontRequest) => {\n  const hostHeader = request.headers.host[0].value;\n  request.uri = `/${hostHeader}${request.uri}`;\n  return request;\n};\n"],"mappings":";;;AAcA,IAAM,YAAY,QAAQ,IAAI,WAAW;AASlC,IAAM,aAAa,OACxB,UAC+B;AAC/B,SAAO,WAAW,OAAO,KAAK;AAChC;AASO,IAAM,gBAAgB,OAC3B,UAC+B;AAC/B,SAAO,WAAW,OAAO,QAAQ;AACnC;AAEA,IAAM,aAAa,OACjB,OACA,SAC+B;AAC/B,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,mBAAmB,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC/D;AAEA,MAAI,UAAU,MAAM,QAAQ,CAAC,EAAE,GAAG;AAGlC,YAAU,mBAAmB,SAAS,IAAI;AAG1C,YAAU,gBAAgB,OAAO;AAEjC,MAAI,CAAC,WAAW;AACd,YAAQ,IAAI,uBAAuB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA,EACrE;AAEA,SAAO;AACT;AAeO,IAAM,qBAAqB,CAChC,SACA,SACG;AACH,MAAI,QAAQ,QAAQ,OAAO,QAAQ,QAAQ,eAAe;AACxD,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AACtD,QAAM,cAAc,SAAS,SAAS,SAAS,CAAC,KAAK;AACrD,QAAM,sBAAsB,YAAY,SAAS,GAAG;AAEpD,MAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,OAAO;AAClB,YAAQ,MAAM;AACd,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,QAAQ,IAAI,SAAS,GAAG,IACvC,QAAQ,IAAI,MAAM,GAAG,EAAE,IACvB,QAAQ;AACZ,UAAQ,MAAM,GAAG,UAAU;AAC3B,SAAO;AACT;AAOO,IAAM,kBAAkB,CAAC,YAA+B;AAC7D,QAAM,aAAa,QAAQ,QAAQ,KAAK,CAAC,EAAE;AAC3C,UAAQ,MAAM,IAAI,UAAU,GAAG,QAAQ,GAAG;AAC1C,SAAO;AACT;","names":[]}

package/package.json

@@ -23,7 +23,7 @@
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-prettier": "^5.5.5",
     "prettier": "^3.8.3",
-    "rollup": "^4.60.1",
+    "rollup": "^4.60.2",
     "rollup-plugin-dts": "^6.4.1",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
@@ -48,7 +48,7 @@
   },
   "main": "lib/index.js",
   "license": "MIT",
-  "version": "0.0.60",
+  "version": "0.0.62",
   "types": "lib/index.d.ts",
   "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"pnpm exec projen\".",
   "scripts": {