@composurecdk/bedrock 0.10.1

package/dist/commonjs/model-alarm-builder.d.ts

@@ -0,0 +1,67 @@
+import type { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { ModelAlarmConfig } from "./model-alarm-config.js";
+import { type ModelAlarmTarget, type ModelMetrics } from "./model-alarms.js";
+/** Configuration properties for {@link createModelAlarmBuilder}. */
+export interface ModelAlarmBuilderProps {
+    /** The foundation model or inference profile to alarm on. Required. */
+    model: Resolvable<ModelAlarmTarget>;
+    /**
+     * Configuration for the recommended alarms. Throttle, server-error and
+     * client-error alarms are created by default; latency, time-to-first-token
+     * and quota alarms are opt-in. Set to `false` to disable them; alarms added
+     * with `addAlarm()` are unaffected.
+     *
+     * No alarm actions are configured. Use `alarmActionsPolicy` or an
+     * `afterBuild` hook to route them.
+     */
+    recommendedAlarms?: ModelAlarmConfig | false;
+}
+/** The build output of an {@link IModelAlarmBuilder}. */
+export interface ModelAlarmBuilderResult {
+    /** The CloudWatch alarms created, keyed by alarm key. */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for CloudWatch alarms on an Amazon Bedrock model.
+ *
+ * @see {@link createModelAlarmBuilder}
+ */
+export type IModelAlarmBuilder = ITaggedBuilder<ModelAlarmBuilderProps, ModelAlarmBuilder>;
+declare class ModelAlarmBuilder implements Lifecycle<ModelAlarmBuilderResult> {
+    #private;
+    props: Partial<ModelAlarmBuilderProps>;
+    /**
+     * Adds a custom alarm. The metric factory receives the model's
+     * {@link ModelMetrics}, e.g.
+     * `(a) => a.metric((m) => m.metric("OutputTokenCount", { statistic: "Sum" })).threshold(1e6)`.
+     */
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<ModelMetrics>) => AlarmDefinitionBuilder<ModelMetrics>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: ModelAlarmBuilder): void;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): ModelAlarmBuilderResult;
+}
+/**
+ * Creates CloudWatch alarms on an Amazon Bedrock model's `AWS/Bedrock`
+ * metrics.
+ *
+ * The metrics are per model per account and Region, whichever principal
+ * invokes it, so build one per model in each Region that invokes it rather
+ * than one per caller. For a cross-Region profile, the metrics are emitted
+ * in the source Region.
+ *
+ * @example
+ * ```ts
+ * createModelAlarmBuilder()
+ *   .model(haiku)
+ *   .recommendedAlarms({ invocationLatency: { threshold: 10_000 } });
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export declare function createModelAlarmBuilder(): IModelAlarmBuilder;
+export {};
+//# sourceMappingURL=model-alarm-builder.d.ts.map

package/dist/commonjs/model-alarm-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-builder.d.ts","sourceRoot":"","sources":["../../src/model-alarm-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAgB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAGlB,MAAM,mBAAmB,CAAC;AAE3B,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,KAAK,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;CAC9C;AAED,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE3F,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAG5C;;;;OAIG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAI7C,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,uBAAuB;CAa3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAE5D"}

package/dist/commonjs/model-alarm-builder.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createModelAlarmBuilder = createModelAlarmBuilder;
+const core_1 = require("@composurecdk/core");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const model_alarms_js_1 = require("./model-alarms.js");
+class ModelAlarmBuilder {
+    props = {};
+    #customAlarms = [];
+    /**
+     * Adds a custom alarm. The metric factory receives the model's
+     * {@link ModelMetrics}, e.g.
+     * `(a) => a.metric((m) => m.metric("OutputTokenCount", { statistic: "Sum" })).threshold(1e6)`.
+     */
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new cloudwatch_1.AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    /** @internal — see ADR-0005. */
+    [core_1.COPY_STATE](target) {
+        target.#customAlarms.push(...this.#customAlarms);
+    }
+    build(scope, id, context = {}) {
+        if (this.props.model === undefined) {
+            throw new Error(`ModelAlarmBuilder "${id}" requires a model. Call .model().`);
+        }
+        const metrics = (0, model_alarms_js_1.modelMetrics)((0, core_1.resolve)(this.props.model, context));
+        const { recommendedAlarms } = this.props;
+        const recommended = recommendedAlarms === false
+            ? []
+            : (0, model_alarms_js_1.resolveModelAlarmDefinitions)(scope, metrics, recommendedAlarms);
+        const custom = this.#customAlarms.map((b) => b.resolve(metrics));
+        return { alarms: (0, cloudwatch_1.createAlarms)(scope, id, [...recommended, ...custom]) };
+    }
+}
+/**
+ * Creates CloudWatch alarms on an Amazon Bedrock model's `AWS/Bedrock`
+ * metrics.
+ *
+ * The metrics are per model per account and Region, whichever principal
+ * invokes it, so build one per model in each Region that invokes it rather
+ * than one per caller. For a cross-Region profile, the metrics are emitted
+ * in the source Region.
+ *
+ * @example
+ * ```ts
+ * createModelAlarmBuilder()
+ *   .model(haiku)
+ *   .recommendedAlarms({ invocationLatency: { threshold: 10_000 } });
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+function createModelAlarmBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(ModelAlarmBuilder);
+}
+//# sourceMappingURL=model-alarm-builder.js.map

package/dist/commonjs/model-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-builder.js","sourceRoot":"","sources":["../../src/model-alarm-builder.ts"],"names":[],"mappings":";;AAwGA,0DAEC;AAxGD,6CAA0F;AAC1F,iEAAkF;AAClF,yDAAgF;AAEhF,uDAK2B;AAgC3B,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IACnC,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;OAIG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,mCAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,iBAAU,CAAC,CAAC,MAAyB;QACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,8BAAY,EAAC,IAAA,cAAO,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACzC,MAAM,WAAW,GACf,iBAAiB,KAAK,KAAK;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAA,8CAA4B,EAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,IAAA,yBAAY,EAAC,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,uBAAuB;IACrC,OAAO,IAAA,8BAAa,EAA4C,iBAAiB,CAAC,CAAC;AACrF,CAAC"}

package/dist/commonjs/model-alarm-config.d.ts

@@ -0,0 +1,83 @@
+import type { AlarmConfig } from "@composurecdk/cloudwatch";
+/**
+ * Configuration for an alarm whose threshold is a fraction of a quota the
+ * caller supplies.
+ */
+export type QuotaAlarmConfig = Omit<AlarmConfig, "threshold"> & {
+    /** The applied quota, in the metric's unit. Required when enabling the alarm. */
+    quota: number;
+    /** Threshold as a fraction of {@link quota}, in (0, 1]. */
+    thresholdPercent?: number;
+};
+/**
+ * Controls which recommended alarms are created for a model. Set an alarm to
+ * `false` to disable it, or provide a config to enable it (if opt-in) or tune
+ * it.
+ *
+ * Every alarm uses the `AWS/Bedrock` namespace, the `ModelId` dimension and a
+ * 1-minute period. Bedrock metrics aggregate every caller of the model in the
+ * account and Region.
+ *
+ * AWS publishes no recommended thresholds for Bedrock. The Well-Architected
+ * Generative AI Lens names which signals to alarm on; the thresholds are this
+ * library's.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/monitoring-runtime-metrics.html
+ */
+export interface ModelAlarmConfig {
+    /**
+     * Master switch: set to `false` to disable all recommended alarms.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when requests are throttled. Throttled requests are not counted in
+     * `Invocations`, and SDK retries mean a count here was already retried.
+     *
+     * Metric: `InvocationThrottles`, statistic Sum. On by default.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp03.html
+     */
+    invocationThrottles?: AlarmConfig | false;
+    /**
+     * Alarm on server-side (5xx) invocation errors.
+     *
+     * Metric: `InvocationServerErrors`, statistic Sum. On by default.
+     */
+    invocationServerErrors?: AlarmConfig | false;
+    /**
+     * Alarm on client-side (4xx) invocation errors, including `AccessDenied`
+     * from a Region missing from a cross-Region grant and validation errors
+     * such as a prompt over the context window.
+     *
+     * Metric: `InvocationClientErrors`, statistic Sum. On by default.
+     */
+    invocationClientErrors?: AlarmConfig | false;
+    /**
+     * Alarm when invocation latency, in milliseconds to the last token, exceeds
+     * the threshold. Latency depends on the model and output length, so there
+     * is no default threshold.
+     *
+     * Metric: `InvocationLatency`, statistic p90. Opt-in; threshold required.
+     */
+    invocationLatency?: AlarmConfig | false;
+    /**
+     * Alarm when time to first token, in milliseconds, exceeds the threshold.
+     * Emitted for streaming APIs only.
+     *
+     * Metric: `TimeToFirstToken`, statistic p90. Opt-in; threshold required.
+     */
+    timeToFirstToken?: AlarmConfig | false;
+    /**
+     * Alarm when estimated tokens-per-minute usage approaches the applied
+     * quota. AWS advises against relying on this metric alone for quota use.
+     *
+     * Metric: `EstimatedTPMQuotaUsage`, statistic Maximum. Opt-in; `quota`
+     * required.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genrel01-bp01.html
+     */
+    estimatedTpmQuotaUsage?: QuotaAlarmConfig | false;
+}
+//# sourceMappingURL=model-alarm-config.d.ts.map

package/dist/commonjs/model-alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-config.d.ts","sourceRoot":"","sources":["../../src/model-alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG;IAC9D,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE1C;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE7C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE7C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAExC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAEvC;;;;;;;;OAQG;IACH,sBAAsB,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;CACnD"}

package/dist/commonjs/model-alarm-config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=model-alarm-config.js.map

package/dist/commonjs/model-alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-config.js","sourceRoot":"","sources":["../../src/model-alarm-config.ts"],"names":[],"mappings":""}

package/dist/commonjs/model-alarm-defaults.d.ts

@@ -0,0 +1,22 @@
+import type { AlarmConfigDefaults } from "@composurecdk/cloudwatch";
+interface ModelAlarmDefaults {
+    enabled: true;
+    invocationThrottles: AlarmConfigDefaults;
+    invocationServerErrors: AlarmConfigDefaults;
+    invocationClientErrors: AlarmConfigDefaults;
+    /** Applied to the opt-in alarms; their threshold comes from the caller. */
+    optIn: Omit<AlarmConfigDefaults, "threshold">;
+    estimatedTpmQuotaUsage: {
+        thresholdPercent: number;
+    };
+}
+/**
+ * Default alarm configuration for a Bedrock model. AWS publishes no Bedrock
+ * thresholds; these follow the shape of AWS's recommended Lambda `Errors` and
+ * `Throttles` alarms.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export declare const MODEL_ALARM_DEFAULTS: ModelAlarmDefaults;
+export {};
+//# sourceMappingURL=model-alarm-defaults.d.ts.map

package/dist/commonjs/model-alarm-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-defaults.d.ts","sourceRoot":"","sources":["../../src/model-alarm-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAYpE,UAAU,kBAAkB;IAC1B,OAAO,EAAE,IAAI,CAAC;IACd,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,sBAAsB,EAAE,mBAAmB,CAAC;IAC5C,sBAAsB,EAAE,mBAAmB,CAAC;IAC5C,2EAA2E;IAC3E,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC9C,sBAAsB,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,kBAQlC,CAAC"}

package/dist/commonjs/model-alarm-defaults.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MODEL_ALARM_DEFAULTS = void 0;
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+/**
+ * 3 breaching minutes out of 5: SDK retries absorb isolated throttles and
+ * transient errors, so a single datapoint is noise. No traffic emits no data.
+ */
+const SUSTAINED = {
+    evaluationPeriods: 5,
+    datapointsToAlarm: 3,
+    treatMissingData: aws_cloudwatch_1.TreatMissingData.NOT_BREACHING,
+};
+/**
+ * Default alarm configuration for a Bedrock model. AWS publishes no Bedrock
+ * thresholds; these follow the shape of AWS's recommended Lambda `Errors` and
+ * `Throttles` alarms.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+exports.MODEL_ALARM_DEFAULTS = {
+    enabled: true,
+    invocationThrottles: { threshold: 0, ...SUSTAINED },
+    invocationServerErrors: { threshold: 0, ...SUSTAINED },
+    invocationClientErrors: { threshold: 0, ...SUSTAINED },
+    optIn: SUSTAINED,
+    /** Leaves 20% headroom to act before requests are throttled. */
+    estimatedTpmQuotaUsage: { thresholdPercent: 0.8 },
+};
+//# sourceMappingURL=model-alarm-defaults.js.map

package/dist/commonjs/model-alarm-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-defaults.js","sourceRoot":"","sources":["../../src/model-alarm-defaults.ts"],"names":[],"mappings":";;;AAAA,+DAA8D;AAG9D;;;GAGG;AACH,MAAM,SAAS,GAAG;IAChB,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,EAAE,iCAAgB,CAAC,aAAa;CACjD,CAAC;AAYF;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAuB;IACtD,OAAO,EAAE,IAAI;IACb,mBAAmB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACnD,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACtD,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACtD,KAAK,EAAE,SAAS;IAChB,gEAAgE;IAChE,sBAAsB,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE;CAClD,CAAC"}

package/dist/commonjs/model-alarms.d.ts

@@ -0,0 +1,20 @@
+import type { FoundationModelIdentifier } from "aws-cdk-lib/aws-bedrock";
+import { Metric, type MetricOptions } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+import type { AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { InferenceProfile } from "./inference-profile.js";
+import type { ModelAlarmConfig } from "./model-alarm-config.js";
+/** A model whose `AWS/Bedrock` metrics an alarm can read. */
+export type ModelAlarmTarget = FoundationModelIdentifier | InferenceProfile;
+/** `AWS/Bedrock` metrics for one model, for alarms added with `addAlarm()`. */
+export interface ModelMetrics {
+    /** The `ModelId` dimension value: the model or inference profile id invoked. */
+    readonly modelId: string;
+    /** An `AWS/Bedrock` metric dimensioned by {@link modelId}. */
+    metric(metricName: string, options?: MetricOptions): Metric;
+}
+/** Returns the `AWS/Bedrock` metrics for `target`. */
+export declare function modelMetrics(target: ModelAlarmTarget): ModelMetrics;
+/** Resolves the recommended alarm configuration for a model's metrics. */
+export declare function resolveModelAlarmDefinitions(scope: IConstruct, metrics: ModelMetrics, config: ModelAlarmConfig | undefined): AlarmDefinition[];
+//# sourceMappingURL=model-alarms.d.ts.map

package/dist/commonjs/model-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarms.d.ts","sourceRoot":"","sources":["../../src/model-alarms.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAsB,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,yBAAyB,GAAG,gBAAgB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CAC7D;AAID,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,CAanE;AA6GD,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,eAAe,EAAE,CA6BnB"}

package/dist/commonjs/model-alarms.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.modelMetrics = modelMetrics;
+exports.resolveModelAlarmDefinitions = resolveModelAlarmDefinitions;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const inference_target_js_1 = require("./inference-target.js");
+const model_alarm_defaults_js_1 = require("./model-alarm-defaults.js");
+const PERIOD = aws_cdk_lib_1.Duration.minutes(1);
+/** Returns the `AWS/Bedrock` metrics for `target`. */
+function modelMetrics(target) {
+    const modelId = (0, inference_target_js_1.isInferenceProfile)(target) ? target.profileId : target.modelId;
+    return {
+        modelId,
+        metric: (metricName, options) => new aws_cloudwatch_1.Metric({
+            namespace: "AWS/Bedrock",
+            metricName,
+            dimensionsMap: { ModelId: modelId },
+            period: PERIOD,
+            ...options,
+        }),
+    };
+}
+const THRESHOLD_ALARMS = {
+    invocationThrottles: {
+        metricName: "InvocationThrottles",
+        statistic: "Sum",
+        defaults: model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.invocationThrottles,
+        describe: (id, t) => `Bedrock is throttling requests to ${id}; the account's quota for the model is exhausted. ` +
+            `Threshold: > ${String(t)} per minute.`,
+    },
+    invocationServerErrors: {
+        metricName: "InvocationServerErrors",
+        statistic: "Sum",
+        defaults: model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.invocationServerErrors,
+        describe: (id, t) => `Bedrock is returning server errors for ${id}. Threshold: > ${String(t)} per minute.`,
+    },
+    invocationClientErrors: {
+        metricName: "InvocationClientErrors",
+        statistic: "Sum",
+        defaults: model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.invocationClientErrors,
+        describe: (id, t) => `Requests to ${id} are failing with client errors, such as AccessDenied or validation ` +
+            `errors. Threshold: > ${String(t)} per minute.`,
+    },
+    invocationLatency: {
+        metricName: "InvocationLatency",
+        statistic: "p90",
+        describe: (id, t) => `p90 invocation latency for ${id} exceeds ${String(t)} ms.`,
+    },
+    timeToFirstToken: {
+        metricName: "TimeToFirstToken",
+        statistic: "p90",
+        describe: (id, t) => `p90 time to first token for ${id} exceeds ${String(t)} ms.`,
+    },
+};
+function toDefinition(key, metric, cfg, description) {
+    return {
+        key,
+        alarmName: cfg.alarmName,
+        metric,
+        threshold: cfg.threshold,
+        comparisonOperator: aws_cloudwatch_1.ComparisonOperator.GREATER_THAN_THRESHOLD,
+        evaluationPeriods: cfg.evaluationPeriods,
+        datapointsToAlarm: cfg.datapointsToAlarm,
+        treatMissingData: cfg.treatMissingData,
+        description,
+    };
+}
+function quotaAlarm(scope, metrics, config) {
+    if (!config)
+        return [];
+    const quota = (0, cloudwatch_1.resolveAlarmThresholdBasis)({
+        scope,
+        value: config.quota,
+        resolve: (q) => q,
+        warningId: "@composurecdk/bedrock:token-tpm-quota-alarm",
+        alarmLabel: "Bedrock estimated TPM quota usage",
+        suppressHint: "recommendedAlarms({ estimatedTpmQuotaUsage: false })",
+    });
+    if (quota === undefined)
+        return [];
+    const percent = config.thresholdPercent ?? model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.estimatedTpmQuotaUsage.thresholdPercent;
+    if (!(quota > 0)) {
+        throw new Error(`estimatedTpmQuotaUsage: quota must be a positive number, got ${String(quota)}.`);
+    }
+    if (!(percent > 0 && percent <= 1)) {
+        throw new Error(`estimatedTpmQuotaUsage: thresholdPercent must be in (0, 1], got ${String(percent)}.`);
+    }
+    const cfg = (0, cloudwatch_1.resolveAlarmConfig)({ ...config, threshold: Math.floor(quota * percent) }, { ...model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.optIn, threshold: 0 });
+    return [
+        toDefinition("estimatedTpmQuotaUsage", metrics.metric("EstimatedTPMQuotaUsage", { statistic: "Maximum" }), cfg, `Estimated token usage for ${metrics.modelId} exceeds ${String(percent * 100)}% of the ` +
+            `${String(quota)} tokens-per-minute quota.`),
+    ];
+}
+/** Resolves the recommended alarm configuration for a model's metrics. */
+function resolveModelAlarmDefinitions(scope, metrics, config) {
+    if (config?.enabled === false)
+        return [];
+    const definitions = Object.entries(THRESHOLD_ALARMS).flatMap(([key, spec]) => {
+        const userConfig = config?.[key];
+        if (userConfig === false || (userConfig === undefined && !spec.defaults))
+            return [];
+        if (!spec.defaults && userConfig?.threshold === undefined) {
+            throw new Error(`The "${key}" alarm has no default threshold. Supply one, e.g. ` +
+                `recommendedAlarms({ ${key}: { threshold: … } }).`);
+        }
+        const cfg = (0, cloudwatch_1.resolveAlarmConfig)(userConfig, spec.defaults ?? { ...model_alarm_defaults_js_1.MODEL_ALARM_DEFAULTS.optIn, threshold: 0 });
+        return [
+            toDefinition(key, metrics.metric(spec.metricName, { statistic: spec.statistic }), cfg, spec.describe(metrics.modelId, cfg.threshold)),
+        ];
+    });
+    return [...definitions, ...quotaAlarm(scope, metrics, config?.estimatedTpmQuotaUsage)];
+}
+//# sourceMappingURL=model-alarms.js.map

package/dist/commonjs/model-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarms.js","sourceRoot":"","sources":["../../src/model-alarms.ts"],"names":[],"mappings":";;AA6BA,oCAaC;AA8GD,oEAiCC;AAzLD,6CAAuC;AAEvC,+DAA4F;AAO5F,yDAA0F;AAE1F,+DAA2D;AAE3D,uEAAiE;AAajE,MAAM,MAAM,GAAG,sBAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEnC,sDAAsD;AACtD,SAAgB,YAAY,CAAC,MAAwB;IACnD,MAAM,OAAO,GAAG,IAAA,wCAAkB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/E,OAAO;QACL,OAAO;QACP,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAC9B,IAAI,uBAAM,CAAC;YACT,SAAS,EAAE,aAAa;YACxB,UAAU;YACV,aAAa,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,GAAG,OAAO;SACX,CAAC;KACL,CAAC;AACJ,CAAC;AAYD,MAAM,gBAAgB,GAAyC;IAC7D,mBAAmB,EAAE;QACnB,UAAU,EAAE,qBAAqB;QACjC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,8CAAoB,CAAC,mBAAmB;QAClD,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAClB,qCAAqC,EAAE,oDAAoD;YAC3F,gBAAgB,MAAM,CAAC,CAAC,CAAC,cAAc;KAC1C;IACD,sBAAsB,EAAE;QACtB,UAAU,EAAE,wBAAwB;QACpC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,8CAAoB,CAAC,sBAAsB;QACrD,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAClB,0CAA0C,EAAE,kBAAkB,MAAM,CAAC,CAAC,CAAC,cAAc;KACxF;IACD,sBAAsB,EAAE;QACtB,UAAU,EAAE,wBAAwB;QACpC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,8CAAoB,CAAC,sBAAsB;QACrD,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAClB,eAAe,EAAE,sEAAsE;YACvF,wBAAwB,MAAM,CAAC,CAAC,CAAC,cAAc;KAClD;IACD,iBAAiB,EAAE;QACjB,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,8BAA8B,EAAE,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM;KACjF;IACD,gBAAgB,EAAE;QAChB,UAAU,EAAE,kBAAkB;QAC9B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,+BAA+B,EAAE,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM;KAClF;CACF,CAAC;AAEF,SAAS,YAAY,CACnB,GAAW,EACX,MAAc,EACd,GAAwB,EACxB,WAAmB;IAEnB,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM;QACN,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,kBAAkB,EAAE,mCAAkB,CAAC,sBAAsB;QAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAiB,EACjB,OAAqB,EACrB,MAAkD;IAElD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAA,uCAA0B,EAAC;QACvC,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjB,SAAS,EAAE,6CAA6C;QACxD,UAAU,EAAE,mCAAmC;QAC/C,YAAY,EAAE,sDAAsD;KACrE,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GACX,MAAM,CAAC,gBAAgB,IAAI,8CAAoB,CAAC,sBAAsB,CAAC,gBAAgB,CAAC;IAC1F,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,gEAAgE,MAAM,CAAC,KAAK,CAAC,GAAG,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,mEAAmE,MAAM,CAAC,OAAO,CAAC,GAAG,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,+BAAkB,EAC5B,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,EAAE,EACrD,EAAE,GAAG,8CAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAChD,CAAC;IACF,OAAO;QACL,YAAY,CACV,wBAAwB,EACxB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAClE,GAAG,EACH,6BAA6B,OAAO,CAAC,OAAO,YAAY,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW;YACtF,GAAG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC9C;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAgB,4BAA4B,CAC1C,KAAiB,EACjB,OAAqB,EACrB,MAAoC;IAEpC,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,WAAW,GACf,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAChC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,qDAAqD;gBAC9D,uBAAuB,GAAG,wBAAwB,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,+BAAkB,EAC5B,UAAU,EACV,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,8CAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CACjE,CAAC;QACF,OAAO;YACL,YAAY,CACV,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAC9D,GAAG,EACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAC9C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/commonjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/esm/grants.d.ts

@@ -0,0 +1,27 @@
+import { type IGrantable } from "aws-cdk-lib/aws-iam";
+import { type Grant, type Resolvable } from "@composurecdk/core";
+import { type InferenceTarget } from "./inference-target.js";
+/**
+ * Consumer-side grant helpers for invoking Amazon Bedrock models. Pass one to
+ * a grantee builder's `grant(...)` — e.g.
+ * `createFunctionBuilder().grant(modelGrants.invoke(profile))`.
+ *
+ * A model is not a construct, so there is no native `grant*` method to
+ * delegate to; the statements are those the Bedrock user guide prescribes
+ * (ADR-0013 addendum).
+ */
+export declare const modelGrants: {
+    /**
+     * Invoke the target through `InvokeModel`, `Converse` or their streaming
+     * variants.
+     *
+     * For a cross-Region profile this also grants the foundation model in the
+     * source Region and every Region the profile routes to, conditioned on
+     * `bedrock:InferenceProfileArn` so those models are reachable only through
+     * the profile.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html
+     */
+    invoke: (target: Resolvable<InferenceTarget>) => Grant<IGrantable>;
+};
+//# sourceMappingURL=grants.d.ts.map

package/dist/esm/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,KAAK,KAAK,EAAY,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,KAAK,eAAe,EAAiC,MAAM,uBAAuB,CAAC;AAU5F;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW;IACtB;;;;;;;;;;OAUG;qBACc,UAAU,CAAC,eAAe,CAAC,KAAG,KAAK,CAAC,UAAU,CAAC;CAOjE,CAAC"}

package/dist/esm/grants.js

@@ -0,0 +1,39 @@
+import { Grant as IamGrant } from "aws-cdk-lib/aws-iam";
+import { grantVia } from "@composurecdk/core";
+import { invocationStatements, scopeOf } from "./inference-target.js";
+/**
+ * Streaming operations (`InvokeModelWithResponseStream`, `ConverseStream`)
+ * require both actions.
+ *
+ * @see https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html
+ */
+const INVOKE_ACTIONS = ["bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream"];
+/**
+ * Consumer-side grant helpers for invoking Amazon Bedrock models. Pass one to
+ * a grantee builder's `grant(...)` — e.g.
+ * `createFunctionBuilder().grant(modelGrants.invoke(profile))`.
+ *
+ * A model is not a construct, so there is no native `grant*` method to
+ * delegate to; the statements are those the Bedrock user guide prescribes
+ * (ADR-0013 addendum).
+ */
+export const modelGrants = {
+    /**
+     * Invoke the target through `InvokeModel`, `Converse` or their streaming
+     * variants.
+     *
+     * For a cross-Region profile this also grants the foundation model in the
+     * source Region and every Region the profile routes to, conditioned on
+     * `bedrock:InferenceProfileArn` so those models are reachable only through
+     * the profile.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html
+     */
+    invoke: (target) => grantVia(target, (resolved, grantee) => {
+        const statements = invocationStatements(resolved, scopeOf(grantee.grantPrincipal));
+        for (const { resourceArns, conditions } of statements) {
+            IamGrant.addToPrincipal({ grantee, actions: INVOKE_ACTIONS, resourceArns, conditions });
+        }
+    }),
+};
+//# sourceMappingURL=grants.js.map

package/dist/esm/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAmB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAc,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAwB,oBAAoB,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;;;;;;;;;OAUG;IACH,MAAM,EAAE,CAAC,MAAmC,EAAqB,EAAE,CACjE,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAmB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC;YACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;CACL,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,8 @@
+export { foundationModelFor, type GeographicInferenceProfile, type GeographicInferenceProfileOptions, type GlobalInferenceProfile, INFERENCE_PROFILE_GEOGRAPHIES, type InferenceProfile, type InferenceProfileGeography, inferenceProfile, } from "./inference-profile.js";
+export { type InferenceTarget, invocationArns } from "./inference-target.js";
+export { modelGrants } from "./grants.js";
+export { createModelAlarmBuilder, type IModelAlarmBuilder, type ModelAlarmBuilderProps, type ModelAlarmBuilderResult, } from "./model-alarm-builder.js";
+export { type ModelAlarmConfig, type QuotaAlarmConfig } from "./model-alarm-config.js";
+export { MODEL_ALARM_DEFAULTS } from "./model-alarm-defaults.js";
+export { type ModelAlarmTarget, type ModelMetrics, modelMetrics } from "./model-alarms.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,6BAA6B,EAC7B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,7 @@
+export { foundationModelFor, INFERENCE_PROFILE_GEOGRAPHIES, inferenceProfile, } from "./inference-profile.js";
+export { invocationArns } from "./inference-target.js";
+export { modelGrants } from "./grants.js";
+export { createModelAlarmBuilder, } from "./model-alarm-builder.js";
+export { MODEL_ALARM_DEFAULTS } from "./model-alarm-defaults.js";
+export { modelMetrics } from "./model-alarms.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAIlB,6BAA6B,EAG7B,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAwB,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAA4C,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/esm/inference-profile.d.ts

@@ -0,0 +1,88 @@
+import { FoundationModelIdentifier } from "aws-cdk-lib/aws-bedrock";
+/**
+ * Geography prefixes of Amazon Bedrock's system-defined cross-Region inference
+ * profiles, e.g. the `eu` in `eu.anthropic.claude-haiku-4-5-20251001-v1:0`.
+ *
+ * {@link inferenceProfile.parse} recognises a profile id by one of these
+ * prefixes. {@link inferenceProfile.geographic} also accepts a geography not
+ * yet listed here.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html
+ */
+export declare const INFERENCE_PROFILE_GEOGRAPHIES: readonly ["us", "eu", "apac", "jp", "au", "us-gov"];
+/** A known geography prefix. See {@link INFERENCE_PROFILE_GEOGRAPHIES}. */
+export type InferenceProfileGeography = (typeof INFERENCE_PROFILE_GEOGRAPHIES)[number];
+/**
+ * A system-defined inference profile that routes requests to Regions within
+ * one geography.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html
+ */
+export interface GeographicInferenceProfile {
+    readonly kind: "geographic";
+    readonly geography: InferenceProfileGeography | (string & {});
+    /** The foundation model the profile serves. */
+    readonly model: FoundationModelIdentifier;
+    /** The id to invoke, e.g. `eu.anthropic.claude-haiku-4-5-20251001-v1:0`. */
+    readonly profileId: string;
+    /**
+     * Every Region the profile may route to from the source Region, as listed
+     * by `aws bedrock get-inference-profile` or the model's page in the Bedrock
+     * user guide. The source Region is always granted, listed or not.
+     */
+    readonly routingRegions: readonly string[];
+}
+/**
+ * A system-defined inference profile that routes requests to any supported
+ * commercial Region.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/global-cross-region-inference.html
+ */
+export interface GlobalInferenceProfile {
+    readonly kind: "global";
+    /** The foundation model the profile serves. */
+    readonly model: FoundationModelIdentifier;
+    /** The id to invoke, e.g. `global.anthropic.claude-haiku-4-5-20251001-v1:0`. */
+    readonly profileId: string;
+}
+/** A system-defined cross-Region inference profile. */
+export type InferenceProfile = GeographicInferenceProfile | GlobalInferenceProfile;
+/** Options for {@link inferenceProfile.geographic}. */
+export type GeographicInferenceProfileOptions = Pick<GeographicInferenceProfile, "model" | "geography" | "routingRegions">;
+declare function geographic(options: GeographicInferenceProfileOptions): GeographicInferenceProfile;
+declare function global(model: FoundationModelIdentifier): GlobalInferenceProfile;
+declare function parse(profileId: string): GlobalInferenceProfile;
+declare function parse(profileId: string, routingRegions: readonly string[]): InferenceProfile;
+/**
+ * Factories for {@link InferenceProfile} values.
+ *
+ * @example
+ * ```ts
+ * const haiku = inferenceProfile.geographic({
+ *   model: FoundationModelIdentifier.ANTHROPIC_CLAUDE_HAIKU_4_5_20251001_V1_0,
+ *   geography: "eu",
+ *   routingRegions: ["eu-central-1", "eu-north-1", "eu-south-1", "eu-south-2", "eu-west-1", "eu-west-3"],
+ * });
+ * haiku.profileId; // "eu.anthropic.claude-haiku-4-5-20251001-v1:0"
+ * ```
+ */
+export declare const inferenceProfile: {
+    /** A profile routing within one geography. */
+    geographic: typeof geographic;
+    /** A profile routing to any supported commercial Region. */
+    global: typeof global;
+    /**
+     * Reads a profile id such as `eu.anthropic.claude-haiku-4-5-20251001-v1:0`.
+     * Throws unless the id starts with a known geography or `global`. A
+     * geographic id needs its `routingRegions`; a global id takes none.
+     */
+    parse: typeof parse;
+};
+/**
+ * The foundation model a system-defined inference profile serves:
+ * `eu.anthropic.x` → `anthropic.x`. Throws unless the id starts with a known
+ * geography or `global`.
+ */
+export declare function foundationModelFor(profileId: string): FoundationModelIdentifier;
+export {};
+//# sourceMappingURL=inference-profile.d.ts.map