@composurecdk/cloudfront 0.7.0 → 0.8.0

package/dist/commonjs/distribution-builder.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDistributionBuilder = createDistributionBuilder;
+const aws_cloudfront_1 = require("aws-cdk-lib/aws-cloudfront");
+const aws_s3_1 = require("aws-cdk-lib/aws-s3");
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const core_1 = require("@composurecdk/core");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+const s3_1 = require("@composurecdk/s3");
+const defaults_js_1 = require("./defaults.js");
+const resolve_behaviors_js_1 = require("./resolve-behaviors.js");
+const behavior_function_alarms_js_1 = require("./behavior-function-alarms.js");
+const cloudfront_alarm_builder_js_1 = require("./cloudfront-alarm-builder.js");
+class DistributionBuilder {
+    props = {};
+    #origin;
+    #additionalBehaviors = new Map();
+    #behaviorSlugs = new Map();
+    #customAlarms = [];
+    addAlarm(key, configure) {
+        this.#customAlarms.push(configure(new cloudwatch_1.AlarmDefinitionBuilder(key)));
+        return this;
+    }
+    /**
+     * Sets the default origin for the distribution.
+     *
+     * Accepts a concrete {@link IOrigin} or a {@link Ref} that resolves to one
+     * at build time — enabling cross-component wiring with S3 buckets.
+     *
+     * @param origin - The origin or a Ref to one.
+     * @returns This builder for chaining.
+     */
+    origin(origin) {
+        this.#origin = origin;
+        return this;
+    }
+    /**
+     * Adds an additional cache behavior for a path pattern. The behavior's
+     * origin is required (concrete or Resolvable). Any inline functions are
+     * created by the builder and receive per-behavior alarms scoped to the
+     * path pattern.
+     *
+     * @throws If a behavior for the same path pattern has already been added.
+     */
+    behavior(pathPattern, config) {
+        if (this.#additionalBehaviors.has(pathPattern)) {
+            throw new Error(`DistributionBuilder: behavior for path pattern "${pathPattern}" is already defined.`);
+        }
+        // Alarm keys and Function construct ids are derived from a PascalCase slug
+        // of the path pattern. Patterns that differ only by stripped characters
+        // (e.g. `/*.html` vs `*.html`) would collide downstream at createAlarms() —
+        // surface the collision here with the patterns named.
+        const slug = (0, behavior_function_alarms_js_1.pathPatternSlug)(pathPattern);
+        const existingPattern = this.#behaviorSlugs.get(slug);
+        if (existingPattern !== undefined) {
+            throw new Error(`DistributionBuilder: path pattern "${pathPattern}" produces the same alarm/construct ` +
+                `slug ("${slug}") as "${existingPattern}". Pick distinct patterns.`);
+        }
+        this.#behaviorSlugs.set(slug, pathPattern);
+        this.#additionalBehaviors.set(pathPattern, config);
+        return this;
+    }
+    /** @internal — see ADR-0005. */
+    [core_1.COPY_STATE](target) {
+        target.#origin = this.#origin;
+        for (const [k, v] of this.#additionalBehaviors)
+            target.#additionalBehaviors.set(k, v);
+        for (const [k, v] of this.#behaviorSlugs)
+            target.#behaviorSlugs.set(k, v);
+        target.#customAlarms.push(...this.#customAlarms);
+    }
+    build(scope, id, context) {
+        const resolvedOrigin = this.#origin ? (0, core_1.resolve)(this.#origin, context ?? {}) : undefined;
+        if (!resolvedOrigin) {
+            throw new Error(`DistributionBuilder "${id}" requires an origin. ` +
+                `Call .origin() with an IOrigin or a Ref to one.`);
+        }
+        const { accessLogs, certificate, defaultBehavior: userBehavior, recommendedAlarms: alarmConfig, ...distProps } = this.props;
+        const resolvedCertificate = certificate ? (0, core_1.resolve)(certificate, context ?? {}) : undefined;
+        const { accessLogs: defaultAccessLogs, defaultBehavior: defaultBehaviorDefaults, ...cdkDefaults } = defaults_js_1.DISTRIBUTION_DEFAULTS;
+        const cfg = accessLogs ?? defaultAccessLogs;
+        const { accessLogsBucket, accessLogProps } = resolveAccessLogs(scope, id, cfg);
+        const behaviors = (0, resolve_behaviors_js_1.resolveBehaviors)({
+            scope,
+            id,
+            context: context ?? {},
+            defaultOrigin: resolvedOrigin,
+            defaultBehavior: userBehavior,
+            defaultBehaviorDefaults: defaultBehaviorDefaults ?? {},
+            additionalBehaviors: this.#additionalBehaviors,
+        });
+        const mergedProps = {
+            ...cdkDefaults,
+            ...accessLogProps,
+            ...distProps,
+            ...(resolvedCertificate ? { certificate: resolvedCertificate } : {}),
+            defaultBehavior: behaviors.defaultBehavior,
+            ...(Object.keys(behaviors.additionalBehaviors).length > 0
+                ? { additionalBehaviors: behaviors.additionalBehaviors }
+                : {}),
+        };
+        const distribution = new aws_cloudfront_1.Distribution(scope, id, mergedProps);
+        // Ensure CloudFront is deleted before the access logs bucket during stack teardown.
+        // Without this, CloudFront may still be writing logs while the bucket is being emptied/deleted.
+        if (accessLogsBucket) {
+            distribution.node.addDependency(accessLogsBucket);
+        }
+        const alarms = (0, cloudfront_alarm_builder_js_1.buildCloudFrontAlarms)(scope, id, { distribution, functions: behaviors.functions }, { recommendedAlarms: alarmConfig, customAlarms: this.#customAlarms });
+        return {
+            distribution,
+            accessLogsBucket,
+            functions: behaviors.functions,
+            alarms,
+        };
+    }
+}
+/**
+ * Creates a new {@link IDistributionBuilder} for configuring a CloudFront distribution.
+ *
+ * This is the entry point for defining a CloudFront distribution component.
+ * The returned builder exposes every {@link DistributionBuilderProps} property
+ * as a fluent setter/getter, plus {@link IDistributionBuilder.origin | origin()}
+ * for setting the default origin with Ref support and
+ * {@link IDistributionBuilder.behavior | behavior()} for path-pattern behaviors.
+ * It implements {@link Lifecycle} for use with {@link compose}.
+ *
+ * @returns A fluent builder for a CloudFront distribution.
+ *
+ * @example
+ * ```ts
+ * const cdn = createDistributionBuilder()
+ *   .origin(ref<BucketBuilderResult>("site", (r) =>
+ *     S3BucketOrigin.withOriginAccessControl(r.bucket)))
+ *   .defaultBehavior({
+ *     functions: [{
+ *       eventType: FunctionEventType.VIEWER_REQUEST,
+ *       code: FunctionCode.fromFile({ filePath: "src/edge/rewrite.js" }),
+ *     }],
+ *   })
+ *   .behavior("/api/*", {
+ *     origin: apiOrigin,
+ *     cachePolicy: CachePolicy.CACHING_DISABLED,
+ *   });
+ * ```
+ */
+function createDistributionBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(DistributionBuilder);
+}
+function resolveAccessLogs(scope, id, cfg) {
+    if (cfg === false || cfg === undefined) {
+        return { accessLogProps: {} };
+    }
+    const extras = {
+        ...(cfg.prefix !== undefined ? { logFilePrefix: cfg.prefix } : {}),
+        ...(cfg.includeCookies !== undefined ? { logIncludesCookies: cfg.includeCookies } : {}),
+    };
+    if (cfg.destination !== undefined) {
+        if (cfg.configure !== undefined) {
+            throw new Error("accessLogs: 'configure' cannot be combined with 'destination' — " +
+                "the destination bucket is user-managed and not built by this builder.");
+        }
+        return {
+            accessLogProps: {
+                enableLogging: true,
+                logBucket: cfg.destination,
+                ...extras,
+            },
+        };
+    }
+    let subBuilder = (0, s3_1.createBucketBuilder)()
+        .serverAccessLogs(false)
+        .versioned(false)
+        // CloudFront standard logging writes via ACLs, which requires BucketOwnerPreferred.
+        .objectOwnership(aws_s3_1.ObjectOwnership.BUCKET_OWNER_PREFERRED)
+        .removalPolicy(aws_cdk_lib_1.RemovalPolicy.RETAIN)
+        .lifecycleRules(s3_1.DEFAULT_ACCESS_LOG_BUCKET_LIFECYCLE_RULES);
+    if (cfg.configure) {
+        subBuilder = cfg.configure(subBuilder);
+    }
+    const accessLogsBucket = subBuilder.build(scope, `${id}AccessLogs`).bucket;
+    return {
+        accessLogsBucket,
+        accessLogProps: {
+            enableLogging: true,
+            logBucket: accessLogsBucket,
+            ...extras,
+        },
+    };
+}
+//# sourceMappingURL=distribution-builder.js.map

package/dist/commonjs/distribution-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-builder.js","sourceRoot":"","sources":["../../src/distribution-builder.ts"],"names":[],"mappings":";;AAwgBA,8DAEC;AA1gBD,+DAWoC;AAGpC,+CAAgF;AAChF,6CAA4C;AAE5C,6CAA0F;AAC1F,iEAAkF;AAClF,yDAAkE;AAClE,yCAI0B;AAE1B,+CAAsD;AACtD,iEAA0D;AAC1D,+EAAgE;AAChE,+EAAsE;AA4TtE,MAAM,mBAAmB;IACvB,KAAK,GAAsC,EAAE,CAAC;IAC9C,OAAO,CAAuB;IACrB,oBAAoB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACnE,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,aAAa,GAA2C,EAAE,CAAC;IAEpE,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,mCAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,MAA2B;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAmB,EAAE,MAAgC;QAC5D,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,mDAAmD,WAAW,uBAAuB,CACtF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,IAAI,GAAG,IAAA,6CAAe,EAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,sCAAsC,WAAW,sCAAsC;gBACrF,UAAU,IAAI,UAAU,eAAe,4BAA4B,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,iBAAU,CAAC,CAAC,MAA2B;QACtC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,oBAAoB;YAAE,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,wBAAwB;gBAChD,iDAAiD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EACJ,UAAU,EACV,WAAW,EACX,eAAe,EAAE,YAAY,EAC7B,iBAAiB,EAAE,WAAW,EAC9B,GAAG,SAAS,EACb,GAAG,IAAI,CAAC,KAAK,CAAC;QACf,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,eAAe,EAAE,uBAAuB,EACxC,GAAG,WAAW,EACf,GAAG,mCAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,IAAI,iBAAiB,CAAC;QAE5C,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAE/E,MAAM,SAAS,GAAG,IAAA,uCAAgB,EAAC;YACjC,KAAK;YACL,EAAE;YACF,OAAO,EAAE,OAAO,IAAI,EAAE;YACtB,aAAa,EAAE,cAAc;YAC7B,eAAe,EAAE,YAAY;YAC7B,uBAAuB,EAAE,uBAAuB,IAAI,EAAE;YACtD,mBAAmB,EAAE,IAAI,CAAC,oBAAoB;SAC/C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG;YAClB,GAAG,WAAW;YACd,GAAG,cAAc;YACjB,GAAG,SAAS;YACZ,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC;gBACvD,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACa,CAAC;QAEvB,MAAM,YAAY,GAAG,IAAI,6BAAY,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAE9D,oFAAoF;QACpF,gGAAgG;QAChG,IAAI,gBAAgB,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,mDAAqB,EAClC,KAAK,EACL,EAAE,EACF,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,EAChD,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CACrE,CAAC;QAEF,OAAO;YACL,YAAY;YACZ,gBAAgB;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAgB,yBAAyB;IACvC,OAAO,IAAA,8BAAa,EAAgD,mBAAmB,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAiB,EACjB,EAAU,EACV,GAAiC;IAOjC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;IAEF,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,kEAAkE;gBAChE,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,cAAc,EAAE;gBACd,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,GAAG,CAAC,WAAW;gBAC1B,GAAG,MAAM;aACV;SACF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,IAAA,wBAAmB,GAAE;SACnC,gBAAgB,CAAC,KAAK,CAAC;SACvB,SAAS,CAAC,KAAK,CAAC;QACjB,oFAAoF;SACnF,eAAe,CAAC,wBAAe,CAAC,sBAAsB,CAAC;SACvD,aAAa,CAAC,2BAAa,CAAC,MAAM,CAAC;SACnC,cAAc,CAAC,8CAAyC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC;IAE3E,OAAO;QACL,gBAAgB;QAChB,cAAc,EAAE;YACd,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,gBAAgB;YAC3B,GAAG,MAAM;SACV;KACF,CAAC;AACJ,CAAC"}

package/dist/commonjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,KAAK,uBAAuB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/commonjs/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FUNCTION_ALARM_DEFAULTS = exports.DISTRIBUTION_ALARM_DEFAULTS = exports.INLINE_FUNCTION_DEFAULTS = exports.DISTRIBUTION_DEFAULTS = exports.createCloudFrontAlarmBuilder = exports.createDistributionBuilder = void 0;
+var distribution_builder_js_1 = require("./distribution-builder.js");
+Object.defineProperty(exports, "createDistributionBuilder", { enumerable: true, get: function () { return distribution_builder_js_1.createDistributionBuilder; } });
+var cloudfront_alarm_builder_js_1 = require("./cloudfront-alarm-builder.js");
+Object.defineProperty(exports, "createCloudFrontAlarmBuilder", { enumerable: true, get: function () { return cloudfront_alarm_builder_js_1.createCloudFrontAlarmBuilder; } });
+var defaults_js_1 = require("./defaults.js");
+Object.defineProperty(exports, "DISTRIBUTION_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.DISTRIBUTION_DEFAULTS; } });
+Object.defineProperty(exports, "INLINE_FUNCTION_DEFAULTS", { enumerable: true, get: function () { return defaults_js_1.INLINE_FUNCTION_DEFAULTS; } });
+var alarm_defaults_js_1 = require("./alarm-defaults.js");
+Object.defineProperty(exports, "DISTRIBUTION_ALARM_DEFAULTS", { enumerable: true, get: function () { return alarm_defaults_js_1.DISTRIBUTION_ALARM_DEFAULTS; } });
+Object.defineProperty(exports, "FUNCTION_ALARM_DEFAULTS", { enumerable: true, get: function () { return alarm_defaults_js_1.FUNCTION_ALARM_DEFAULTS; } });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,qEASmC;AARjC,oIAAA,yBAAyB,OAAA;AAS3B,6EAKuC;AAJrC,2IAAA,4BAA4B,OAAA;AAK9B,6CAAgF;AAAvE,oHAAA,qBAAqB,OAAA;AAAE,uHAAA,wBAAwB,OAAA;AAExD,yDAA2F;AAAlF,gIAAA,2BAA2B,OAAA;AAAE,4HAAA,uBAAuB,OAAA"}

package/dist/commonjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/commonjs/resolve-behaviors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-behaviors.d.ts","sourceRoot":"","sources":["../../src/resolve-behaviors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EAKpB,KAAK,OAAO,EACb,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQ7C,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EAEd,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,KAAK,EAAE,UAAU,CAAC;IAElB,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAC;IAEX,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IAEvB,gEAAgE;IAChE,eAAe,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAEnD,0EAA0E;IAC1E,uBAAuB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErD;;;OAGG;IACH,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,eAAe,EAAE,eAAe,CAAC;IAEjC,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErD;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1C;AAiDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CA0DrF"}

package/dist/commonjs/resolve-behaviors.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBehaviors = resolveBehaviors;
+const aws_cloudfront_1 = require("aws-cdk-lib/aws-cloudfront");
+const core_1 = require("@composurecdk/core");
+const behavior_function_alarms_js_1 = require("./behavior-function-alarms.js");
+const defaults_js_1 = require("./defaults.js");
+function scopeLabel(pathPattern) {
+    return pathPattern === null ? "default behavior" : `behavior "${pathPattern}"`;
+}
+function behaviorIdScope(pathPattern) {
+    return pathPattern === null ? "DefaultBehavior" : `Behavior${(0, behavior_function_alarms_js_1.pathPatternSlug)(pathPattern)}`;
+}
+function assertUniqueEventTypes(functions, pathPattern) {
+    const seen = new Set();
+    for (const fn of functions) {
+        if (seen.has(fn.eventType)) {
+            throw new Error(`DistributionBuilder: ${scopeLabel(pathPattern)} has multiple functions for eventType "${fn.eventType}". ` +
+                `CloudFront allows at most one function per event type per behavior.`);
+        }
+        seen.add(fn.eventType);
+    }
+}
+function omit(obj, ...keys) {
+    const skip = new Set(keys);
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+        if (!skip.has(k))
+            out[k] = v;
+    }
+    return out;
+}
+function assertKeyValueStoreRuntime(def, pathPattern) {
+    if (!def.keyValueStore)
+        return;
+    const effectiveRuntime = def.runtime ?? defaults_js_1.INLINE_FUNCTION_DEFAULTS.runtime;
+    if (effectiveRuntime !== aws_cloudfront_1.FunctionRuntime.JS_2_0) {
+        throw new Error(`DistributionBuilder: ${scopeLabel(pathPattern)} function (${def.eventType}) uses a ` +
+            `keyValueStore, which requires FunctionRuntime.JS_2_0.`);
+    }
+}
+/**
+ * Materializes the default and additional cache behaviors into CDK-ready
+ * `BehaviorOptions`, creating any inline CloudFront Functions along the way
+ * and producing their path-scoped alarm definitions.
+ *
+ * Enforces CloudFront invariants at configure time: at most one function per
+ * event type per behavior, and `keyValueStore` requires `FunctionRuntime.JS_2_0`.
+ */
+function resolveBehaviors(input) {
+    const { scope, id, context, defaultOrigin, defaultBehavior, defaultBehaviorDefaults } = input;
+    const functions = {};
+    const buildInlineFunctions = (pathPattern, definitions) => {
+        if (!definitions || definitions.length === 0)
+            return [];
+        assertUniqueEventTypes(definitions, pathPattern);
+        const scopeId = behaviorIdScope(pathPattern);
+        const associations = [];
+        for (const def of definitions) {
+            assertKeyValueStoreRuntime(def, pathPattern);
+            const { eventType } = def;
+            const fnId = `${id}${scopeId}${(0, behavior_function_alarms_js_1.eventTypePascal)(eventType)}Fn`;
+            const fn = new aws_cloudfront_1.Function(scope, fnId, {
+                ...defaults_js_1.INLINE_FUNCTION_DEFAULTS,
+                ...omit(def, "eventType", "recommendedAlarms"),
+            });
+            functions[(0, behavior_function_alarms_js_1.behaviorFunctionKeyPrefix)(pathPattern, eventType)] = {
+                function: fn,
+                pathPattern,
+                eventType,
+                recommendedAlarms: def.recommendedAlarms,
+            };
+            associations.push({ function: fn, eventType });
+        }
+        return associations;
+    };
+    const defaultAssociations = buildInlineFunctions(null, defaultBehavior?.functions);
+    const userDefaultBehavior = omit(defaultBehavior ?? {}, "functions");
+    const resolvedDefaultBehavior = {
+        ...defaultBehaviorDefaults,
+        ...userDefaultBehavior,
+        ...(defaultAssociations.length > 0 ? { functionAssociations: defaultAssociations } : {}),
+        origin: defaultOrigin,
+    };
+    const resolvedAdditionalBehaviors = {};
+    for (const [pathPattern, config] of input.additionalBehaviors) {
+        const resolvedOrigin = (0, core_1.resolve)(config.origin, context);
+        const associations = buildInlineFunctions(pathPattern, config.functions);
+        resolvedAdditionalBehaviors[pathPattern] = {
+            ...omit(config, "functions", "origin"),
+            origin: resolvedOrigin,
+            ...(associations.length > 0 ? { functionAssociations: associations } : {}),
+        };
+    }
+    return {
+        defaultBehavior: resolvedDefaultBehavior,
+        additionalBehaviors: resolvedAdditionalBehaviors,
+        functions,
+    };
+}
+//# sourceMappingURL=resolve-behaviors.js.map

package/dist/commonjs/resolve-behaviors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-behaviors.js","sourceRoot":"","sources":["../../src/resolve-behaviors.ts"],"names":[],"mappings":";;AAoIA,4CA0DC;AA9LD,+DAQoC;AAEpC,6CAA6C;AAC7C,+EAIuC;AACvC,+CAAyD;AA6DzD,SAAS,UAAU,CAAC,WAA0B;IAC5C,OAAO,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,WAAW,GAAG,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,WAA0B;IACjD,OAAO,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,IAAA,6CAAe,EAAC,WAAW,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,sBAAsB,CAC7B,SAAqC,EACrC,WAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,CAAC,WAAW,CAAC,0CAA0C,EAAE,CAAC,SAAS,KAAK;gBACxG,qEAAqE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAsC,GAAM,EAAE,GAAG,IAAS;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAc,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAiC,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CACjC,GAA6B,EAC7B,WAA0B;IAE1B,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO;IAC/B,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,IAAI,sCAAwB,CAAC,OAAO,CAAC;IACzE,IAAI,gBAAgB,KAAK,gCAAe,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,CAAC,WAAW,CAAC,cAAc,GAAG,CAAC,SAAS,WAAW;YACnF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,uBAAuB,EAAE,GAAG,KAAK,CAAC;IAE9F,MAAM,SAAS,GAAkC,EAAE,CAAC;IAEpD,MAAM,oBAAoB,GAAG,CAC3B,WAA0B,EAC1B,WAAmD,EAC5B,EAAE;QACzB,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACxD,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,YAAY,GAA0B,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,0BAA0B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO,GAAG,IAAA,6CAAe,EAAC,SAAS,CAAC,IAAI,CAAC;YAC9D,MAAM,EAAE,GAAG,IAAI,yBAAU,CAAC,KAAK,EAAE,IAAI,EAAE;gBACrC,GAAG,sCAAwB;gBAC3B,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,mBAAmB,CAAC;aAC/C,CAAC,CAAC;YACH,SAAS,CAAC,IAAA,uDAAyB,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC,GAAG;gBAC7D,QAAQ,EAAE,EAAE;gBACZ,WAAW;gBACX,SAAS;gBACT,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC,CAAC;YACF,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACnF,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IAErE,MAAM,uBAAuB,GAAoB;QAC/C,GAAG,uBAAuB;QAC1B,GAAG,mBAAmB;QACtB,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,EAAE,aAAa;KACtB,CAAC;IAEF,MAAM,2BAA2B,GAAoC,EAAE,CAAC;IACxE,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,IAAA,cAAO,EAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,2BAA2B,CAAC,WAAW,CAAC,GAAG;YACzC,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;YACtC,MAAM,EAAE,cAAc;YACtB,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,eAAe,EAAE,uBAAuB;QACxC,mBAAmB,EAAE,2BAA2B;QAChD,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/esm/alarm-config.d.ts

@@ -0,0 +1,98 @@
+import type { AlarmConfig } from "@composurecdk/cloudwatch";
+/**
+ * Controls which recommended alarms are created for a CloudFront distribution.
+ * All applicable alarms are enabled by default with AWS-recommended thresholds.
+ * Set individual alarms to `false` to disable them, or provide an
+ * {@link AlarmConfig} to tune thresholds.
+ *
+ * Function-level alarms are created automatically for every inline function
+ * declared on a behavior — see {@link FunctionAlarmConfig} to tune them.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+ */
+export interface DistributionAlarmConfig {
+    /**
+     * Master switch: set to `false` to disable all recommended alarms.
+     * Individual alarms can also be disabled via their own entry.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when the distribution's 5xx error rate is elevated.
+     *
+     * Metric: `AWS/CloudFront 5xxErrorRate`, statistic Average, period 1 minute.
+     * Default threshold: > 5 (5% error rate).
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+     */
+    errorRate?: AlarmConfig | false;
+    /**
+     * Alarm when origin response latency is elevated.
+     *
+     * Metric: `AWS/CloudFront OriginLatency`, statistic p90, period 1 minute.
+     * Default threshold: > 5000ms (5 seconds).
+     *
+     * Requires [additional CloudFront metrics](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/viewing-cloudfront-metrics.html#monitoring-console.distributions-additional)
+     * to be enabled on the distribution for this alarm to receive data.
+     * With the default `treatMissingData: NOT_BREACHING`, the alarm will
+     * not fire when additional metrics are not enabled.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+     */
+    originLatency?: AlarmConfig | false;
+}
+/**
+ * Controls which recommended alarms are created for a CloudFront Function
+ * declared inline on a cache behavior. All alarms are enabled by default
+ * with AWS-recommended thresholds. Set individual alarms to `false` to
+ * disable them, or provide an {@link AlarmConfig} to tune thresholds.
+ *
+ * CloudFront Function metrics are emitted in the `us-east-1` region only
+ * (CloudFront is a global service). The alarms live in the stack's region —
+ * if that is not `us-east-1`, the alarms will not receive data.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/monitoring-functions.html
+ */
+export interface FunctionAlarmConfig {
+    /**
+     * Per-function switch: set to `false` to disable all recommended alarms
+     * for this one function. Individual alarms can also be disabled via their
+     * own entry. The global kill switch is
+     * {@link DistributionBuilderProps.recommendedAlarms} `: false` on the
+     * surrounding distribution builder, which suppresses every recommended
+     * alarm regardless of per-function settings.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when the function raises runtime exceptions while processing a
+     * viewer request or response.
+     *
+     * Metric: `AWS/CloudFront FunctionExecutionErrors`, statistic Sum,
+     * period 1 minute. Default threshold: > 0 errors.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/monitoring-functions.html
+     */
+    executionErrors?: AlarmConfig | false;
+    /**
+     * Alarm when the function returns an event object that fails validation
+     * (e.g. malformed headers, unsupported response shape).
+     *
+     * Metric: `AWS/CloudFront FunctionValidationErrors`, statistic Sum,
+     * period 1 minute. Default threshold: > 0 errors.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/monitoring-functions.html
+     */
+    validationErrors?: AlarmConfig | false;
+    /**
+     * Alarm when the function is throttled — typically because it exceeded
+     * the 1ms compute-utilization budget.
+     *
+     * Metric: `AWS/CloudFront FunctionThrottles`, statistic Sum,
+     * period 1 minute. Default threshold: > 0 throttles.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-function-restrictions.html
+     */
+    throttles?: AlarmConfig | false;
+}
+//# sourceMappingURL=alarm-config.d.ts.map

package/dist/esm/alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-config.d.ts","sourceRoot":"","sources":["../../src/alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAEhC;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACrC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAEtC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAEvC;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACjC"}

package/dist/esm/alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-config.js","sourceRoot":"","sources":["../../src/alarm-config.ts"],"names":[],"mappings":""}

package/dist/esm/alarm-defaults.d.ts

@@ -0,0 +1,28 @@
+import type { AlarmConfigDefaults } from "@composurecdk/cloudwatch";
+interface DistributionAlarmDefaults {
+    enabled: true;
+    errorRate: AlarmConfigDefaults;
+    originLatency: AlarmConfigDefaults;
+}
+interface FunctionAlarmDefaults {
+    enabled: true;
+    executionErrors: AlarmConfigDefaults;
+    validationErrors: AlarmConfigDefaults;
+    throttles: AlarmConfigDefaults;
+}
+/**
+ * AWS-recommended default alarm configuration for CloudFront distributions.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+ */
+export declare const DISTRIBUTION_ALARM_DEFAULTS: DistributionAlarmDefaults;
+/**
+ * Default alarm configuration for CloudFront Functions declared inline on
+ * a cache behavior. Any non-zero count of errors or throttles is worth
+ * investigating since a function executes on every viewer request/response.
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/monitoring-functions.html
+ */
+export declare const FUNCTION_ALARM_DEFAULTS: FunctionAlarmDefaults;
+export {};
+//# sourceMappingURL=alarm-defaults.d.ts.map

package/dist/esm/alarm-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-defaults.d.ts","sourceRoot":"","sources":["../../src/alarm-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,yBAAyB;IACjC,OAAO,EAAE,IAAI,CAAC;IACd,SAAS,EAAE,mBAAmB,CAAC;IAC/B,aAAa,EAAE,mBAAmB,CAAC;CACpC;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,IAAI,CAAC;IACd,eAAe,EAAE,mBAAmB,CAAC;IACrC,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,SAAS,EAAE,mBAAmB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,yBAyBzC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,qBA0BrC,CAAC"}

package/dist/esm/alarm-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-defaults.js","sourceRoot":"","sources":["../../src/alarm-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAgB9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA8B;IACpE,OAAO,EAAE,IAAI;IAEb;;;OAGG;IACH,SAAS,EAAE;QACT,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;KACjD;IAED;;;;OAIG;IACH,aAAa,EAAE;QACb,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;KACjD;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA0B;IAC5D,OAAO,EAAE,IAAI;IAEb,8EAA8E;IAC9E,eAAe,EAAE;QACf,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;KACjD;IAED,qFAAqF;IACrF,gBAAgB,EAAE;QAChB,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;KACjD;IAED,wFAAwF;IACxF,SAAS,EAAE;QACT,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,gBAAgB,CAAC,aAAa;KACjD;CACF,CAAC"}

package/dist/esm/behavior-function-alarms.d.ts

@@ -0,0 +1,44 @@
+import type { Function as CfFunction, FunctionEventType } from "aws-cdk-lib/aws-cloudfront";
+import type { AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { FunctionAlarmConfig } from "./alarm-config.js";
+/**
+ * Converts a CloudFront cache-behavior path pattern into a PascalCase slug
+ * suitable for alarm keys and CDK construct ids. A single leading `/` is
+ * dropped (the common case), interior `/` becomes `Slash` so sibling patterns
+ * don't collide, `*` becomes `Star`, and `?` becomes `Q`. Other
+ * non-alphanumeric characters are stripped.
+ *
+ * Examples:
+ * - `/api/*` → `ApiSlashStar`
+ * - `/api*`  → `ApiStar` (distinct from `/api/*`)
+ * - `*.html` → `StarHtml`
+ * - `images/*` → `ImagesSlashStar`
+ *
+ * @internal
+ */
+export declare function pathPatternSlug(pattern: string): string;
+/**
+ * Converts a {@link FunctionEventType} value (e.g. `"viewer-request"`) into
+ * PascalCase (e.g. `"ViewerRequest"`) for use in alarm keys and construct ids.
+ *
+ * @internal
+ */
+export declare function eventTypePascal(eventType: FunctionEventType): string;
+/**
+ * Builds the prefix used for every alarm key produced for a given inline
+ * function — e.g. `defaultBehaviorViewerRequest` or `behaviorApiStarViewerRequest`.
+ * Pass `null` for the default behavior.
+ *
+ * @internal
+ */
+export declare function behaviorFunctionKeyPrefix(pathPattern: string | null, eventType: FunctionEventType): string;
+/**
+ * Produces fully-resolved {@link AlarmDefinition}s for the three AWS-recommended
+ * CloudFront Function alarms — execution errors, validation errors, throttles —
+ * scoped to a single behavior + event type so the keys and descriptions stay
+ * actionable when the same underlying function is used on multiple behaviors.
+ *
+ * @internal
+ */
+export declare function resolveBehaviorFunctionAlarmDefinitions(pathPattern: string | null, eventType: FunctionEventType, fn: CfFunction, config: FunctionAlarmConfig | false | undefined): AlarmDefinition[];
+//# sourceMappingURL=behavior-function-alarms.d.ts.map

package/dist/esm/behavior-function-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-function-alarms.d.ts","sourceRoot":"","sources":["../../src/behavior-function-alarms.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,IAAI,UAAU,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AA0B7D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAKpE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,iBAAiB,GAC3B,MAAM,CAIR;AAUD;;;;;;;GAOG;AACH,wBAAgB,uCAAuC,CACrD,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,iBAAiB,EAC5B,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,mBAAmB,GAAG,KAAK,GAAG,SAAS,GAC9C,eAAe,EAAE,CA4DnB"}

package/dist/esm/behavior-function-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-function-alarms.js","sourceRoot":"","sources":["../../src/behavior-function-alarms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1C,MAAM,mBAAmB,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC;AAE1E;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,EAAc,EAAE,UAAkB;IACxD,OAAO,IAAI,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB;QAC3B,UAAU;QACV,aAAa,EAAE;YACb,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,MAAM,EAAE,QAAQ;SACjB;QACD,SAAS,EAAE,KAAK,CAAC,GAAG;QACpB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,OAAO,QAAQ;SACZ,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;SACzB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACzE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA4B;IAC1D,OAAO,SAAS;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACzE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,WAA0B,EAC1B,SAA4B;IAE5B,MAAM,KAAK,GACT,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;IACvF,OAAO,GAAG,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,0BAA0B,CACjC,WAA0B,EAC1B,SAA4B;IAE5B,MAAM,KAAK,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,WAAW,GAAG,CAAC;IACtF,OAAO,GAAG,KAAK,KAAK,SAAS,GAAG,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CACrD,WAA0B,EAC1B,SAA4B,EAC5B,EAAc,EACd,MAA+C;IAE/C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,yBAAyB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,IAAI,MAAM,EAAE,eAAe,KAAK,KAAK,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,kBAAkB,CAC5B,MAAM,EAAE,eAAe,EACvB,uBAAuB,CAAC,eAAe,CACxC,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,GAAG,SAAS,iBAAiB;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,yBAAyB,CAAC;YACrD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,sBAAsB;YAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,0BAA0B,UAAU,8CAA8C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,mBAAmB,GAAG;SACzJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,EAAE,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,kBAAkB,CAC5B,MAAM,EAAE,gBAAgB,EACxB,uBAAuB,CAAC,gBAAgB,CACzC,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,GAAG,SAAS,kBAAkB;YACnC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,0BAA0B,CAAC;YACtD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,sBAAsB;YAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,0BAA0B,UAAU,iDAAiD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,mBAAmB,GAAG;SAC5J,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACrF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,GAAG,SAAS,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;YAC/C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,sBAAsB;YAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,0BAA0B,UAAU,+EAA+E,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,mBAAmB,GAAG;SAC7L,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}