@composurecdk/bedrock 0.10.1

package/dist/esm/inference-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-profile.d.ts","sourceRoot":"","sources":["../../src/inference-profile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,qDAAsD,CAAC;AAEjG,2EAA2E;AAC3E,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAIvF;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,yBAAyB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9D,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,GAAG,sBAAsB,CAAC;AAEnF,uDAAuD;AACvD,MAAM,MAAM,iCAAiC,GAAG,IAAI,CAClD,0BAA0B,EAC1B,OAAO,GAAG,WAAW,GAAG,gBAAgB,CACzC,CAAC;AA4CF,iBAAS,UAAU,CAAC,OAAO,EAAE,iCAAiC,GAAG,0BAA0B,CAiB1F;AAED,iBAAS,MAAM,CAAC,KAAK,EAAE,yBAAyB,GAAG,sBAAsB,CAGxE;AAaD,iBAAS,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAAC;AAC1D,iBAAS,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAkBvF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB;IAC3B,8CAA8C;;IAE9C,4DAA4D;;IAE5D;;;;OAIG;;CAEJ,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,yBAAyB,CAE/E"}

package/dist/esm/inference-profile.js

@@ -0,0 +1,121 @@
+import { Token } from "aws-cdk-lib";
+import { FoundationModelIdentifier } from "aws-cdk-lib/aws-bedrock";
+/**
+ * Geography prefixes of Amazon Bedrock's system-defined cross-Region inference
+ * profiles, e.g. the `eu` in `eu.anthropic.claude-haiku-4-5-20251001-v1:0`.
+ *
+ * {@link inferenceProfile.parse} recognises a profile id by one of these
+ * prefixes. {@link inferenceProfile.geographic} also accepts a geography not
+ * yet listed here.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html
+ */
+export const INFERENCE_PROFILE_GEOGRAPHIES = ["us", "eu", "apac", "jp", "au", "us-gov"];
+const GLOBAL_PREFIX = "global";
+const GEOGRAPHY_PATTERN = /^[a-z]+(-[a-z]+)*$/;
+const REGION_PATTERN = /^[a-z]{2}(-[a-z]+)+-\d+$/;
+function isProfilePrefix(prefix) {
+    return (prefix === GLOBAL_PREFIX ||
+        INFERENCE_PROFILE_GEOGRAPHIES.includes(prefix));
+}
+function prefixOf(id) {
+    const dot = id.indexOf(".");
+    return dot > 0 ? id.slice(0, dot) : undefined;
+}
+function assertModel(model) {
+    const { modelId } = model;
+    if (Token.isUnresolved(modelId) || modelId === "") {
+        throw new Error("Inference profile model id must be a non-empty literal string.");
+    }
+    const prefix = prefixOf(modelId);
+    if (prefix !== undefined && isProfilePrefix(prefix)) {
+        throw new Error(`"${modelId}" is an inference profile id, not a foundation model id. ` +
+            `Use inferenceProfile.parse("${modelId}", …) instead.`);
+    }
+}
+function assertRoutingRegions(profileId, regions) {
+    if (regions.length === 0) {
+        throw new Error(`Inference profile "${profileId}": routingRegions must not be empty.`);
+    }
+    for (const region of regions) {
+        if (Token.isUnresolved(region) || !REGION_PATTERN.test(region)) {
+            throw new Error(`Inference profile "${profileId}": "${region}" is not a literal AWS Region code.`);
+        }
+    }
+}
+function geographic(options) {
+    const { model, geography } = options;
+    assertModel(model);
+    if (geography === GLOBAL_PREFIX || !GEOGRAPHY_PATTERN.test(geography)) {
+        throw new Error(`"${geography}" is not a geography prefix. Use inferenceProfile.global() for a global profile.`);
+    }
+    const profileId = `${geography}.${model.modelId}`;
+    assertRoutingRegions(profileId, options.routingRegions);
+    return Object.freeze({
+        kind: "geographic",
+        geography,
+        model,
+        profileId,
+        routingRegions: Object.freeze([...new Set(options.routingRegions)]),
+    });
+}
+function global(model) {
+    assertModel(model);
+    return Object.freeze({ kind: "global", model, profileId: `${GLOBAL_PREFIX}.${model.modelId}` });
+}
+function splitProfileId(profileId) {
+    const prefix = prefixOf(profileId);
+    if (prefix === undefined || !isProfilePrefix(prefix)) {
+        throw new Error(`"${profileId}" is not a system-defined inference profile id. Expected one of the ` +
+            `prefixes: ${[GLOBAL_PREFIX, ...INFERENCE_PROFILE_GEOGRAPHIES].join(", ")}.`);
+    }
+    return { prefix, modelId: profileId.slice(prefix.length + 1) };
+}
+function parse(profileId, routingRegions) {
+    const { prefix, modelId } = splitProfileId(profileId);
+    const model = new FoundationModelIdentifier(modelId);
+    if (prefix === GLOBAL_PREFIX) {
+        if (routingRegions !== undefined) {
+            throw new Error(`Inference profile "${profileId}" is global and routes to every supported Region; omit routingRegions.`);
+        }
+        return global(model);
+    }
+    if (routingRegions === undefined) {
+        throw new Error(`Inference profile "${profileId}" is geographic and needs its routingRegions.`);
+    }
+    return geographic({ model, geography: prefix, routingRegions });
+}
+/**
+ * Factories for {@link InferenceProfile} values.
+ *
+ * @example
+ * ```ts
+ * const haiku = inferenceProfile.geographic({
+ *   model: FoundationModelIdentifier.ANTHROPIC_CLAUDE_HAIKU_4_5_20251001_V1_0,
+ *   geography: "eu",
+ *   routingRegions: ["eu-central-1", "eu-north-1", "eu-south-1", "eu-south-2", "eu-west-1", "eu-west-3"],
+ * });
+ * haiku.profileId; // "eu.anthropic.claude-haiku-4-5-20251001-v1:0"
+ * ```
+ */
+export const inferenceProfile = {
+    /** A profile routing within one geography. */
+    geographic,
+    /** A profile routing to any supported commercial Region. */
+    global,
+    /**
+     * Reads a profile id such as `eu.anthropic.claude-haiku-4-5-20251001-v1:0`.
+     * Throws unless the id starts with a known geography or `global`. A
+     * geographic id needs its `routingRegions`; a global id takes none.
+     */
+    parse,
+};
+/**
+ * The foundation model a system-defined inference profile serves:
+ * `eu.anthropic.x` → `anthropic.x`. Throws unless the id starts with a known
+ * geography or `global`.
+ */
+export function foundationModelFor(profileId) {
+    return new FoundationModelIdentifier(splitProfileId(profileId).modelId);
+}
+//# sourceMappingURL=inference-profile.js.map

package/dist/esm/inference-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-profile.js","sourceRoot":"","sources":["../../src/inference-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAU,CAAC;AAKjG,MAAM,aAAa,GAAG,QAAQ,CAAC;AA8C/B,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAElD,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,CACL,MAAM,KAAK,aAAa;QACvB,6BAAmD,CAAC,QAAQ,CAAC,MAAM,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAgC;IACnD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,IAAI,OAAO,2DAA2D;YACpE,+BAA+B,OAAO,gBAAgB,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB,EAAE,OAA0B;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,sCAAsC,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,OAAO,MAAM,qCAAqC,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAA0C;IAC5D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACrC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,SAAS,KAAK,aAAa,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,IAAI,SAAS,kFAAkF,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;IAClD,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,YAAY;QAClB,SAAS;QACT,KAAK;QACL,SAAS;QACT,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAgC;IAC9C,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,aAAa,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,IAAI,SAAS,sEAAsE;YACjF,aAAa,CAAC,aAAa,EAAE,GAAG,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAID,SAAS,KAAK,CAAC,SAAiB,EAAE,cAAkC;IAClE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,wEAAwE,CACxG,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,+CAA+C,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,8CAA8C;IAC9C,UAAU;IACV,4DAA4D;IAC5D,MAAM;IACN;;;;OAIG;IACH,KAAK;CACN,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,IAAI,yBAAyB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/esm/inference-target.d.ts

@@ -0,0 +1,41 @@
+import type { FoundationModelIdentifier, IModel } from "aws-cdk-lib/aws-bedrock";
+import { type IConstruct } from "constructs";
+import type { InferenceProfile } from "./inference-profile.js";
+/**
+ * Anything a caller can invoke: an in-Region foundation model, a
+ * system-defined inference profile, or any {@link IModel} (a provisioned
+ * model, or `{ modelArn }` for a model ARN from elsewhere).
+ */
+export type InferenceTarget = FoundationModelIdentifier | InferenceProfile | IModel;
+/** @internal */
+export declare function isInferenceProfile(target: InferenceTarget): target is InferenceProfile;
+/** One IAM statement's resources and conditions for invoking a target. @internal */
+export interface InvocationStatement {
+    readonly resourceArns: string[];
+    readonly conditions?: Record<string, Record<string, unknown>>;
+}
+/**
+ * The statements the Bedrock user guide prescribes for invoking `target` from
+ * the Region `scope` deploys to.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html#geographic-cris-iam-setup
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/global-cross-region-inference.html#global-cris-iam-setup
+ * @internal
+ */
+export declare function invocationStatements(target: InferenceTarget, scope?: IConstruct): InvocationStatement[];
+/**
+ * Every resource ARN a caller in `scope`'s Region must be allowed to invoke to
+ * use `target`. For a cross-Region profile that is the profile plus the
+ * foundation model in the source Region and in each Region it routes to.
+ *
+ * {@link modelGrants.invoke} applies these with the conditions the Bedrock
+ * user guide prescribes; use this list where you write a policy yourself,
+ * such as a service control policy.
+ *
+ * @param scope - Resolves partition, Region and account from its stack. Omit
+ *   for the `AWS::` pseudo-parameters.
+ */
+export declare function invocationArns(target: InferenceTarget, scope?: IConstruct): string[];
+/** @internal */
+export declare function scopeOf(principal: unknown): IConstruct | undefined;
+//# sourceMappingURL=inference-target.d.ts.map

package/dist/esm/inference-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-target.d.ts","sourceRoot":"","sources":["../../src/inference-target.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,yBAAyB,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAEpF,gBAAgB;AAChB,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,IAAI,gBAAgB,CAEtF;AAMD,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC/D;AA4BD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,KAAK,CAAC,EAAE,UAAU,GACjB,mBAAmB,EAAE,CAuDvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,CAEpF;AAED,gBAAgB;AAChB,wBAAgB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAElE"}

package/dist/esm/inference-target.js

@@ -0,0 +1,98 @@
+import { Arn, ArnFormat, Aws, Stack } from "aws-cdk-lib";
+import { Construct } from "constructs";
+/** @internal */
+export function isInferenceProfile(target) {
+    return "kind" in target;
+}
+function isModel(target) {
+    return "modelArn" in target;
+}
+function environmentOf(scope) {
+    return scope === undefined
+        ? { partition: Aws.PARTITION, region: Aws.REGION, account: Aws.ACCOUNT_ID }
+        : Stack.of(scope);
+}
+function bedrockArn(partition, resource, resourceName, region, account = "") {
+    return Arn.format({
+        partition,
+        service: "bedrock",
+        region,
+        account,
+        resource,
+        resourceName,
+        arnFormat: ArnFormat.SLASH_RESOURCE_NAME,
+    });
+}
+/**
+ * The statements the Bedrock user guide prescribes for invoking `target` from
+ * the Region `scope` deploys to.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html#geographic-cris-iam-setup
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/global-cross-region-inference.html#global-cris-iam-setup
+ * @internal
+ */
+export function invocationStatements(target, scope) {
+    if (isModel(target))
+        return [{ resourceArns: [target.modelArn] }];
+    const { partition, region: sourceRegion, account } = environmentOf(scope);
+    const modelArn = (modelId, region) => bedrockArn(partition, "foundation-model", modelId, region);
+    if (!isInferenceProfile(target)) {
+        return [{ resourceArns: [modelArn(target.modelId, sourceRegion)] }];
+    }
+    const profileArn = bedrockArn(partition, "inference-profile", target.profileId, sourceRegion, account);
+    const { modelId } = target.model;
+    if (target.kind === "geographic") {
+        const regions = [...new Set([sourceRegion, ...target.routingRegions])];
+        return [
+            { resourceArns: [profileArn] },
+            {
+                resourceArns: regions.map((region) => modelArn(modelId, region)),
+                conditions: { StringEquals: { "bedrock:InferenceProfileArn": profileArn } },
+            },
+        ];
+    }
+    return [
+        {
+            resourceArns: [profileArn],
+            conditions: { StringEquals: { "aws:RequestedRegion": sourceRegion } },
+        },
+        {
+            resourceArns: [modelArn(modelId, sourceRegion)],
+            conditions: {
+                StringEquals: {
+                    "aws:RequestedRegion": sourceRegion,
+                    "bedrock:InferenceProfileArn": profileArn,
+                },
+            },
+        },
+        {
+            resourceArns: [modelArn(modelId, "")],
+            conditions: {
+                StringEquals: {
+                    "aws:RequestedRegion": "unspecified",
+                    "bedrock:InferenceProfileArn": profileArn,
+                },
+            },
+        },
+    ];
+}
+/**
+ * Every resource ARN a caller in `scope`'s Region must be allowed to invoke to
+ * use `target`. For a cross-Region profile that is the profile plus the
+ * foundation model in the source Region and in each Region it routes to.
+ *
+ * {@link modelGrants.invoke} applies these with the conditions the Bedrock
+ * user guide prescribes; use this list where you write a policy yourself,
+ * such as a service control policy.
+ *
+ * @param scope - Resolves partition, Region and account from its stack. Omit
+ *   for the `AWS::` pseudo-parameters.
+ */
+export function invocationArns(target, scope) {
+    return invocationStatements(target, scope).flatMap((s) => s.resourceArns);
+}
+/** @internal */
+export function scopeOf(principal) {
+    return Construct.isConstruct(principal) ? principal : undefined;
+}
+//# sourceMappingURL=inference-target.js.map

package/dist/esm/inference-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-target.js","sourceRoot":"","sources":["../../src/inference-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAmB,MAAM,YAAY,CAAC;AAUxD,gBAAgB;AAChB,MAAM,UAAU,kBAAkB,CAAC,MAAuB;IACxD,OAAO,MAAM,IAAI,MAAM,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB;IACtC,OAAO,UAAU,IAAI,MAAM,CAAC;AAC9B,CAAC;AAUD,SAAS,aAAa,CAAC,KAA6B;IAClD,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE;QAC3E,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CACjB,SAAiB,EACjB,QAAgB,EAChB,YAAoB,EACpB,MAAc,EACd,OAAO,GAAG,EAAE;IAEZ,OAAO,GAAG,CAAC,MAAM,CAAC;QAChB,SAAS;QACT,OAAO,EAAE,SAAS;QAClB,MAAM;QACN,OAAO;QACP,QAAQ;QACR,YAAY;QACZ,SAAS,EAAE,SAAS,CAAC,mBAAmB;KACzC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,KAAkB;IAElB,IAAI,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAElE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CACnD,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAC3B,SAAS,EACT,mBAAmB,EACnB,MAAM,CAAC,SAAS,EAChB,YAAY,EACZ,OAAO,CACR,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IAEjC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO;YACL,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE;YAC9B;gBACE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChE,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,6BAA6B,EAAE,UAAU,EAAE,EAAE;aAC5E;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL;YACE,YAAY,EAAE,CAAC,UAAU,CAAC;YAC1B,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,qBAAqB,EAAE,YAAY,EAAE,EAAE;SACtE;QACD;YACE,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC/C,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,qBAAqB,EAAE,YAAY;oBACnC,6BAA6B,EAAE,UAAU;iBAC1C;aACF;SACF;QACD;YACE,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrC,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,qBAAqB,EAAE,aAAa;oBACpC,6BAA6B,EAAE,UAAU;iBAC1C;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,KAAkB;IACxE,OAAO,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAC5E,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,OAAO,CAAC,SAAkB;IACxC,OAAO,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC"}

package/dist/esm/model-alarm-builder.d.ts

@@ -0,0 +1,67 @@
+import type { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { ModelAlarmConfig } from "./model-alarm-config.js";
+import { type ModelAlarmTarget, type ModelMetrics } from "./model-alarms.js";
+/** Configuration properties for {@link createModelAlarmBuilder}. */
+export interface ModelAlarmBuilderProps {
+    /** The foundation model or inference profile to alarm on. Required. */
+    model: Resolvable<ModelAlarmTarget>;
+    /**
+     * Configuration for the recommended alarms. Throttle, server-error and
+     * client-error alarms are created by default; latency, time-to-first-token
+     * and quota alarms are opt-in. Set to `false` to disable them; alarms added
+     * with `addAlarm()` are unaffected.
+     *
+     * No alarm actions are configured. Use `alarmActionsPolicy` or an
+     * `afterBuild` hook to route them.
+     */
+    recommendedAlarms?: ModelAlarmConfig | false;
+}
+/** The build output of an {@link IModelAlarmBuilder}. */
+export interface ModelAlarmBuilderResult {
+    /** The CloudWatch alarms created, keyed by alarm key. */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for CloudWatch alarms on an Amazon Bedrock model.
+ *
+ * @see {@link createModelAlarmBuilder}
+ */
+export type IModelAlarmBuilder = ITaggedBuilder<ModelAlarmBuilderProps, ModelAlarmBuilder>;
+declare class ModelAlarmBuilder implements Lifecycle<ModelAlarmBuilderResult> {
+    #private;
+    props: Partial<ModelAlarmBuilderProps>;
+    /**
+     * Adds a custom alarm. The metric factory receives the model's
+     * {@link ModelMetrics}, e.g.
+     * `(a) => a.metric((m) => m.metric("OutputTokenCount", { statistic: "Sum" })).threshold(1e6)`.
+     */
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<ModelMetrics>) => AlarmDefinitionBuilder<ModelMetrics>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: ModelAlarmBuilder): void;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): ModelAlarmBuilderResult;
+}
+/**
+ * Creates CloudWatch alarms on an Amazon Bedrock model's `AWS/Bedrock`
+ * metrics.
+ *
+ * The metrics are per model per account and Region, whichever principal
+ * invokes it, so build one per model in each Region that invokes it rather
+ * than one per caller. For a cross-Region profile, the metrics are emitted
+ * in the source Region.
+ *
+ * @example
+ * ```ts
+ * createModelAlarmBuilder()
+ *   .model(haiku)
+ *   .recommendedAlarms({ invocationLatency: { threshold: 10_000 } });
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export declare function createModelAlarmBuilder(): IModelAlarmBuilder;
+export {};
+//# sourceMappingURL=model-alarm-builder.d.ts.map

package/dist/esm/model-alarm-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-builder.d.ts","sourceRoot":"","sources":["../../src/model-alarm-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAgB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAGlB,MAAM,mBAAmB,CAAC;AAE3B,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,KAAK,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;CAC9C;AAED,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE3F,cAAM,iBAAkB,YAAW,SAAS,CAAC,uBAAuB,CAAC;;IACnE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAM;IAG5C;;;;OAIG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAI7C,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,uBAAuB;CAa3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,IAAI,kBAAkB,CAE5D"}

package/dist/esm/model-alarm-builder.js

@@ -0,0 +1,55 @@
+import { COPY_STATE, resolve } from "@composurecdk/core";
+import { taggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder, createAlarms } from "@composurecdk/cloudwatch";
+import { modelMetrics, resolveModelAlarmDefinitions, } from "./model-alarms.js";
+class ModelAlarmBuilder {
+    props = {};
+    #customAlarms = [];
+    /**
+     * Adds a custom alarm. The metric factory receives the model's
+     * {@link ModelMetrics}, e.g.
+     * `(a) => a.metric((m) => m.metric("OutputTokenCount", { statistic: "Sum" })).threshold(1e6)`.
+     */
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target) {
+        target.#customAlarms.push(...this.#customAlarms);
+    }
+    build(scope, id, context = {}) {
+        if (this.props.model === undefined) {
+            throw new Error(`ModelAlarmBuilder "${id}" requires a model. Call .model().`);
+        }
+        const metrics = modelMetrics(resolve(this.props.model, context));
+        const { recommendedAlarms } = this.props;
+        const recommended = recommendedAlarms === false
+            ? []
+            : resolveModelAlarmDefinitions(scope, metrics, recommendedAlarms);
+        const custom = this.#customAlarms.map((b) => b.resolve(metrics));
+        return { alarms: createAlarms(scope, id, [...recommended, ...custom]) };
+    }
+}
+/**
+ * Creates CloudWatch alarms on an Amazon Bedrock model's `AWS/Bedrock`
+ * metrics.
+ *
+ * The metrics are per model per account and Region, whichever principal
+ * invokes it, so build one per model in each Region that invokes it rather
+ * than one per caller. For a cross-Region profile, the metrics are emitted
+ * in the source Region.
+ *
+ * @example
+ * ```ts
+ * createModelAlarmBuilder()
+ *   .model(haiku)
+ *   .recommendedAlarms({ invocationLatency: { threshold: 10_000 } });
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export function createModelAlarmBuilder() {
+    return taggedBuilder(ModelAlarmBuilder);
+}
+//# sourceMappingURL=model-alarm-builder.js.map

package/dist/esm/model-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-builder.js","sourceRoot":"","sources":["../../src/model-alarm-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAGL,YAAY,EACZ,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAgC3B,MAAM,iBAAiB;IACrB,KAAK,GAAoC,EAAE,CAAC;IACnC,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;OAIG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAyB;QACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACzC,MAAM,WAAW,GACf,iBAAiB,KAAK,KAAK;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,aAAa,CAA4C,iBAAiB,CAAC,CAAC;AACrF,CAAC"}

package/dist/esm/model-alarm-config.d.ts

@@ -0,0 +1,83 @@
+import type { AlarmConfig } from "@composurecdk/cloudwatch";
+/**
+ * Configuration for an alarm whose threshold is a fraction of a quota the
+ * caller supplies.
+ */
+export type QuotaAlarmConfig = Omit<AlarmConfig, "threshold"> & {
+    /** The applied quota, in the metric's unit. Required when enabling the alarm. */
+    quota: number;
+    /** Threshold as a fraction of {@link quota}, in (0, 1]. */
+    thresholdPercent?: number;
+};
+/**
+ * Controls which recommended alarms are created for a model. Set an alarm to
+ * `false` to disable it, or provide a config to enable it (if opt-in) or tune
+ * it.
+ *
+ * Every alarm uses the `AWS/Bedrock` namespace, the `ModelId` dimension and a
+ * 1-minute period. Bedrock metrics aggregate every caller of the model in the
+ * account and Region.
+ *
+ * AWS publishes no recommended thresholds for Bedrock. The Well-Architected
+ * Generative AI Lens names which signals to alarm on; the thresholds are this
+ * library's.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/monitoring-runtime-metrics.html
+ */
+export interface ModelAlarmConfig {
+    /**
+     * Master switch: set to `false` to disable all recommended alarms.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when requests are throttled. Throttled requests are not counted in
+     * `Invocations`, and SDK retries mean a count here was already retried.
+     *
+     * Metric: `InvocationThrottles`, statistic Sum. On by default.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp03.html
+     */
+    invocationThrottles?: AlarmConfig | false;
+    /**
+     * Alarm on server-side (5xx) invocation errors.
+     *
+     * Metric: `InvocationServerErrors`, statistic Sum. On by default.
+     */
+    invocationServerErrors?: AlarmConfig | false;
+    /**
+     * Alarm on client-side (4xx) invocation errors, including `AccessDenied`
+     * from a Region missing from a cross-Region grant and validation errors
+     * such as a prompt over the context window.
+     *
+     * Metric: `InvocationClientErrors`, statistic Sum. On by default.
+     */
+    invocationClientErrors?: AlarmConfig | false;
+    /**
+     * Alarm when invocation latency, in milliseconds to the last token, exceeds
+     * the threshold. Latency depends on the model and output length, so there
+     * is no default threshold.
+     *
+     * Metric: `InvocationLatency`, statistic p90. Opt-in; threshold required.
+     */
+    invocationLatency?: AlarmConfig | false;
+    /**
+     * Alarm when time to first token, in milliseconds, exceeds the threshold.
+     * Emitted for streaming APIs only.
+     *
+     * Metric: `TimeToFirstToken`, statistic p90. Opt-in; threshold required.
+     */
+    timeToFirstToken?: AlarmConfig | false;
+    /**
+     * Alarm when estimated tokens-per-minute usage approaches the applied
+     * quota. AWS advises against relying on this metric alone for quota use.
+     *
+     * Metric: `EstimatedTPMQuotaUsage`, statistic Maximum. Opt-in; `quota`
+     * required.
+     *
+     * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genrel01-bp01.html
+     */
+    estimatedTpmQuotaUsage?: QuotaAlarmConfig | false;
+}
+//# sourceMappingURL=model-alarm-config.d.ts.map

package/dist/esm/model-alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-config.d.ts","sourceRoot":"","sources":["../../src/model-alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG;IAC9D,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE1C;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE7C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE7C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAExC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAEvC;;;;;;;;OAQG;IACH,sBAAsB,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;CACnD"}

package/dist/esm/model-alarm-config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model-alarm-config.js.map

package/dist/esm/model-alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-config.js","sourceRoot":"","sources":["../../src/model-alarm-config.ts"],"names":[],"mappings":""}

package/dist/esm/model-alarm-defaults.d.ts

@@ -0,0 +1,22 @@
+import type { AlarmConfigDefaults } from "@composurecdk/cloudwatch";
+interface ModelAlarmDefaults {
+    enabled: true;
+    invocationThrottles: AlarmConfigDefaults;
+    invocationServerErrors: AlarmConfigDefaults;
+    invocationClientErrors: AlarmConfigDefaults;
+    /** Applied to the opt-in alarms; their threshold comes from the caller. */
+    optIn: Omit<AlarmConfigDefaults, "threshold">;
+    estimatedTpmQuotaUsage: {
+        thresholdPercent: number;
+    };
+}
+/**
+ * Default alarm configuration for a Bedrock model. AWS publishes no Bedrock
+ * thresholds; these follow the shape of AWS's recommended Lambda `Errors` and
+ * `Throttles` alarms.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export declare const MODEL_ALARM_DEFAULTS: ModelAlarmDefaults;
+export {};
+//# sourceMappingURL=model-alarm-defaults.d.ts.map

package/dist/esm/model-alarm-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-defaults.d.ts","sourceRoot":"","sources":["../../src/model-alarm-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAYpE,UAAU,kBAAkB;IAC1B,OAAO,EAAE,IAAI,CAAC;IACd,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,sBAAsB,EAAE,mBAAmB,CAAC;IAC5C,sBAAsB,EAAE,mBAAmB,CAAC;IAC5C,2EAA2E;IAC3E,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;IAC9C,sBAAsB,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,kBAQlC,CAAC"}

package/dist/esm/model-alarm-defaults.js

@@ -0,0 +1,27 @@
+import { TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+/**
+ * 3 breaching minutes out of 5: SDK retries absorb isolated throttles and
+ * transient errors, so a single datapoint is noise. No traffic emits no data.
+ */
+const SUSTAINED = {
+    evaluationPeriods: 5,
+    datapointsToAlarm: 3,
+    treatMissingData: TreatMissingData.NOT_BREACHING,
+};
+/**
+ * Default alarm configuration for a Bedrock model. AWS publishes no Bedrock
+ * thresholds; these follow the shape of AWS's recommended Lambda `Errors` and
+ * `Throttles` alarms.
+ *
+ * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/genops02-bp02.html
+ */
+export const MODEL_ALARM_DEFAULTS = {
+    enabled: true,
+    invocationThrottles: { threshold: 0, ...SUSTAINED },
+    invocationServerErrors: { threshold: 0, ...SUSTAINED },
+    invocationClientErrors: { threshold: 0, ...SUSTAINED },
+    optIn: SUSTAINED,
+    /** Leaves 20% headroom to act before requests are throttled. */
+    estimatedTpmQuotaUsage: { thresholdPercent: 0.8 },
+};
+//# sourceMappingURL=model-alarm-defaults.js.map

package/dist/esm/model-alarm-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarm-defaults.js","sourceRoot":"","sources":["../../src/model-alarm-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D;;;GAGG;AACH,MAAM,SAAS,GAAG;IAChB,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;CACjD,CAAC;AAYF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,OAAO,EAAE,IAAI;IACb,mBAAmB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACnD,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACtD,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE;IACtD,KAAK,EAAE,SAAS;IAChB,gEAAgE;IAChE,sBAAsB,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE;CAClD,CAAC"}

package/dist/esm/model-alarms.d.ts

@@ -0,0 +1,20 @@
+import type { FoundationModelIdentifier } from "aws-cdk-lib/aws-bedrock";
+import { Metric, type MetricOptions } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+import type { AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { InferenceProfile } from "./inference-profile.js";
+import type { ModelAlarmConfig } from "./model-alarm-config.js";
+/** A model whose `AWS/Bedrock` metrics an alarm can read. */
+export type ModelAlarmTarget = FoundationModelIdentifier | InferenceProfile;
+/** `AWS/Bedrock` metrics for one model, for alarms added with `addAlarm()`. */
+export interface ModelMetrics {
+    /** The `ModelId` dimension value: the model or inference profile id invoked. */
+    readonly modelId: string;
+    /** An `AWS/Bedrock` metric dimensioned by {@link modelId}. */
+    metric(metricName: string, options?: MetricOptions): Metric;
+}
+/** Returns the `AWS/Bedrock` metrics for `target`. */
+export declare function modelMetrics(target: ModelAlarmTarget): ModelMetrics;
+/** Resolves the recommended alarm configuration for a model's metrics. */
+export declare function resolveModelAlarmDefinitions(scope: IConstruct, metrics: ModelMetrics, config: ModelAlarmConfig | undefined): AlarmDefinition[];
+//# sourceMappingURL=model-alarms.d.ts.map

package/dist/esm/model-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-alarms.d.ts","sourceRoot":"","sources":["../../src/model-alarms.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAsB,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,yBAAyB,GAAG,gBAAgB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CAC7D;AAID,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,CAanE;AA6GD,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,eAAe,EAAE,CA6BnB"}