@composurecdk/cloudfront 0.7.0 → 0.8.0

package/dist/esm/cloudfront-alarm-builder.d.ts

@@ -0,0 +1,136 @@
+import { type Distribution } from "aws-cdk-lib/aws-cloudfront";
+import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import { type IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import type { DistributionAlarmConfig } from "./alarm-config.js";
+import type { DistributionBuilderResult } from "./distribution-builder.js";
+/**
+ * Configuration properties for {@link createCloudFrontAlarmBuilder}.
+ *
+ * The standalone alarm builder mirrors the alarm surface that
+ * {@link createDistributionBuilder} creates by default. It exists so that
+ * alarms can be created in a different stack from the distribution itself —
+ * specifically a `us-east-1` stack, since CloudFront emits all metrics there
+ * regardless of the distribution's stack region.
+ */
+export interface CloudFrontAlarmBuilderProps {
+    /**
+     * Configuration for AWS-recommended CloudWatch alarms — distribution-level
+     * (5xx error rate, origin latency) and per-function (execution errors,
+     * validation errors, throttles).
+     *
+     * Mirrors {@link DistributionBuilderProps.recommendedAlarms}. Set to
+     * `false` to disable all recommended alarms; per-function alarms further
+     * respect each function's own {@link InlineFunctionDefinition.recommendedAlarms}
+     * value. Custom alarms added via {@link ICloudFrontAlarmBuilder.addAlarm}
+     * are unaffected.
+     *
+     * No alarm actions are configured by default. Use `alarmActionsPolicy` (or
+     * an `afterBuild` hook) to wire SNS or other actions onto the resulting
+     * alarms.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+     */
+    recommendedAlarms?: DistributionAlarmConfig | false;
+}
+/**
+ * The build output of an {@link ICloudFrontAlarmBuilder}.
+ */
+export interface CloudFrontAlarmBuilderResult {
+    /**
+     * The CloudWatch alarms created by this builder, keyed by alarm name. Uses
+     * the same key scheme as {@link DistributionBuilderResult.alarms}.
+     */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for CloudFront-related CloudWatch alarms, decoupled from
+ * the distribution itself. Use this when the distribution lives in a stack
+ * outside `us-east-1` — route this builder's component into a us-east-1
+ * stack via `compose().withStacks()` so the alarms land where CloudFront
+ * actually emits metrics.
+ *
+ * @see {@link createCloudFrontAlarmBuilder}
+ */
+export type ICloudFrontAlarmBuilder = ITaggedBuilder<CloudFrontAlarmBuilderProps, CloudFrontAlarmBuilder>;
+/**
+ * Shared alarm-assembly used by both {@link createDistributionBuilder} (in its
+ * own stack) and {@link createCloudFrontAlarmBuilder} (typically in a separate
+ * `us-east-1` stack). Materializes the recommended distribution-level alarms,
+ * the recommended per-function alarms, and any user-supplied custom alarms,
+ * emits the region warning if the resulting scope is not in `us-east-1`, and
+ * creates the alarm constructs.
+ *
+ * @internal
+ */
+export declare function buildCloudFrontAlarms(scope: IConstruct, id: string, target: Pick<DistributionBuilderResult, "distribution" | "functions">, options?: {
+    recommendedAlarms?: DistributionAlarmConfig | false;
+    customAlarms?: AlarmDefinitionBuilder<Distribution>[];
+}): Record<string, Alarm>;
+declare class CloudFrontAlarmBuilder implements Lifecycle<CloudFrontAlarmBuilderResult> {
+    #private;
+    props: Partial<CloudFrontAlarmBuilderProps>;
+    /**
+     * Sets the distribution to alarm on. Pass the result of
+     * {@link createDistributionBuilder} (or a {@link Ref} to it). The builder
+     * reads the distribution and any inline-function metadata from the result.
+     *
+     * Pair with `compose().withStacks()` to route this component into a
+     * `us-east-1` stack while the distribution itself lives elsewhere — set
+     * `crossRegionReferences: true` on both stacks so CDK can wire the
+     * `DistributionId` reference automatically.
+     */
+    distribution(distribution: Resolvable<DistributionBuilderResult>): this;
+    /**
+     * Adds a custom alarm against the distribution. The configure callback
+     * receives a fresh {@link AlarmDefinitionBuilder} pre-set with the alarm's
+     * key; configure metric, threshold, comparison and any other options.
+     *
+     * The created alarm is materialized in this builder's stack — useful for
+     * cross-region setups where you want all CloudFront alarms to live with the
+     * recommended ones.
+     */
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<Distribution>) => AlarmDefinitionBuilder<Distribution>): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: CloudFrontAlarmBuilder): void;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): CloudFrontAlarmBuilderResult;
+}
+/**
+ * Creates a new {@link ICloudFrontAlarmBuilder} for materializing CloudFront
+ * alarms in a stack separate from the distribution itself.
+ *
+ * The recommended use is multi-region deployments: the distribution lives in
+ * the site's stack (often outside `us-east-1` for latency or compliance
+ * reasons), and CloudFront alarms must live in a `us-east-1` stack so they
+ * can read the metrics CloudFront emits there.
+ *
+ * @example
+ * ```ts
+ * compose(
+ *   {
+ *     cdn: createDistributionBuilder()
+ *       .origin(...)
+ *       .defaultBehavior({ functions: [{ eventType, code }] })
+ *       .recommendedAlarms(false),           // suppress alarms in the dist's own stack
+ *
+ *     cdnAlarms: createCloudFrontAlarmBuilder()
+ *       .distribution(ref<DistributionBuilderResult>("cdn"))
+ *       .recommendedAlarms({ errorRate: { threshold: 2 } }),
+ *   },
+ *   { cdn: [], cdnAlarms: ["cdn"] },
+ * )
+ *   .withStacks({
+ *     cdn:       siteStack,    // eu-west-2
+ *     cdnAlarms: certStack,    // us-east-1 (existing ACM stack)
+ *   })
+ *   .build(app, "App");
+ * ```
+ *
+ * Set `crossRegionReferences: true` on both stacks so CDK can export the
+ * `DistributionId` from the site stack and import it in the alarm stack.
+ */
+export declare function createCloudFrontAlarmBuilder(): ICloudFrontAlarmBuilder;
+export {};
+//# sourceMappingURL=cloudfront-alarm-builder.d.ts.map

package/dist/esm/cloudfront-alarm-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront-alarm-builder.d.ts","sourceRoot":"","sources":["../../src/cloudfront-alarm-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAgB,MAAM,0BAA0B,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAGjE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;;;;;;;;;;;;;OAgBG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,GAAG,KAAK,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAAG,cAAc,CAClD,2BAA2B,EAC3B,sBAAsB,CACvB,CAAC;AAsBF;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,cAAc,GAAG,WAAW,CAAC,EACrE,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,uBAAuB,GAAG,KAAK,CAAC;IACpD,YAAY,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;CAClD,GACL,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAyBvB;AAED,cAAM,sBAAuB,YAAW,SAAS,CAAC,4BAA4B,CAAC;;IAC7E,KAAK,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAM;IAIjD;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,yBAAyB,CAAC,GAAG,IAAI;IAKvE;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAKlD,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,4BAA4B;CAehC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,4BAA4B,IAAI,uBAAuB,CAEtE"}

package/dist/esm/cloudfront-alarm-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront-alarm-builder.js","sourceRoot":"","sources":["../../src/cloudfront-alarm-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,UAAU,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,mCAAmC,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,uCAAuC,EAAE,MAAM,+BAA+B,CAAC;AA0DxF;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO;IACnC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAChC,uCAAuC,EACvC,+EAA+E;QAC7E,OAAO,MAAM,8DAA8D;QAC3E,wEAAwE;QACxE,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAiB,EACjB,EAAU,EACV,MAAqE,EACrE,UAGI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC9C,MAAM,eAAe,GACnB,WAAW,KAAK,KAAK,IAAI,WAAW,EAAE,OAAO,KAAK,KAAK;QACrD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,GAAG,mCAAmC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC;YACxE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,uCAAuC,CACrC,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,iBAAiB,CACxB,CACF;SACF,CAAC;IAER,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;IAE9D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,sBAAsB;IAC1B,KAAK,GAAyC,EAAE,CAAC;IACjD,aAAa,CAAyC;IAC7C,aAAa,GAA2C,EAAE,CAAC;IAEpE;;;;;;;;;OASG;IACH,YAAY,CAAC,YAAmD;QAC9D,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAA8B;QACzC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAC1C,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,2BAA2B,EAAE,6BAA6B;gBACxD,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,qBAAqB,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE;gBACrD,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;gBAC/C,YAAY,EAAE,IAAI,CAAC,aAAa;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,aAAa,CAAsD,sBAAsB,CAAC,CAAC;AACpG,CAAC"}

package/dist/esm/defaults.d.ts

@@ -0,0 +1,17 @@
+import type { DistributionBuilderProps, InlineFunctionDefinition } from "./distribution-builder.js";
+/**
+ * Secure, AWS-recommended defaults applied to every CloudFront distribution
+ * built with {@link createDistributionBuilder}. Each property can be individually
+ * overridden via the builder's fluent API.
+ *
+ * The `defaultBehavior` defaults (viewer protocol policy, response headers
+ * policy) are deep-merged with user-provided behavior options in `build()`,
+ * then the resolved origin is injected.
+ */
+export declare const DISTRIBUTION_DEFAULTS: Partial<DistributionBuilderProps>;
+/**
+ * Defaults applied to every inline CloudFront Function declared on a cache
+ * behavior. User-provided properties take precedence.
+ */
+export declare const INLINE_FUNCTION_DEFAULTS: Partial<InlineFunctionDefinition>;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/esm/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAEpG;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,wBAAwB,CAmDnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,CAOtE,CAAC"}

package/dist/esm/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsC;IACtE;;;;;;OAMG;IACH,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;IAE/B;;;;OAIG;IACH,UAAU,EAAE,UAAU,CAAC,eAAe;IAEtC;;;;OAIG;IACH,WAAW,EAAE,WAAW,CAAC,WAAW;IAEpC;;;OAGG;IACH,iBAAiB,EAAE,YAAY;IAE/B;;;;OAIG;IACH,sBAAsB,EAAE,sBAAsB,CAAC,aAAa;IAE5D,eAAe,EAAE;QACf;;;WAGG;QACH,oBAAoB,EAAE,oBAAoB,CAAC,iBAAiB;QAE5D;;;;WAIG;QACH,qBAAqB,EAAE,qBAAqB,CAAC,gBAAgB;KAC9D;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsC;IACzE;;;;OAIG;IACH,OAAO,EAAE,eAAe,CAAC,MAAM;CAChC,CAAC"}

package/dist/esm/distribution-alarms.d.ts

@@ -0,0 +1,9 @@
+import type { Distribution } from "aws-cdk-lib/aws-cloudfront";
+import type { AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { DistributionAlarmConfig } from "./alarm-config.js";
+/**
+ * Resolves the recommended alarm configuration into fully-resolved
+ * {@link AlarmDefinition}s for a CloudFront distribution.
+ */
+export declare function resolveDistributionAlarmDefinitions(distribution: Distribution, config: DistributionAlarmConfig | undefined): AlarmDefinition[];
+//# sourceMappingURL=distribution-alarms.d.ts.map

package/dist/esm/distribution-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-alarms.d.ts","sourceRoot":"","sources":["../../src/distribution-alarms.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AA2BjE;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,uBAAuB,GAAG,SAAS,GAC1C,eAAe,EAAE,CAuCnB"}

package/dist/esm/distribution-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-alarms.js","sourceRoot":"","sources":["../../src/distribution-alarms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAElE,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1C,MAAM,mBAAmB,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC;AAE1E;;;GAGG;AACH,SAAS,kBAAkB,CACzB,YAA0B,EAC1B,UAAkB,EAClB,SAAiB;IAEjB,OAAO,IAAI,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB;QAC3B,UAAU;QACV,aAAa,EAAE;YACb,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,MAAM,EAAE,QAAQ;SACjB;QACD,SAAS;QACT,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,YAA0B,EAC1B,MAA2C;IAE3C,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,IAAI,MAAM,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;QACzF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,WAAW;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,kBAAkB,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC;YACvE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,sBAAsB;YAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,oEAAoE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,mBAAmB,GAAG;SACrI,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,kBAAkB,CAC5B,MAAM,EAAE,aAAa,EACrB,2BAA2B,CAAC,aAAa,CAC1C,CAAC;QACF,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,kBAAkB,CAAC,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/E,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,kBAAkB,EAAE,kBAAkB,CAAC,sBAAsB;YAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,WAAW,EAAE,uDAAuD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,mBAAmB,GAAG;SAC7H,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/esm/distribution-builder.d.ts

@@ -0,0 +1,345 @@
+import { Distribution, type DistributionProps, type IOrigin, type AddBehaviorOptions, type BehaviorOptions, type Function as CfFunction, type FunctionCode, type FunctionEventType, type FunctionRuntime, type IKeyValueStore } from "aws-cdk-lib/aws-cloudfront";
+import { type ICertificate } from "aws-cdk-lib/aws-certificatemanager";
+import { type Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import { type Bucket, type IBucket } from "aws-cdk-lib/aws-s3";
+import { type IConstruct } from "constructs";
+import { COPY_STATE, type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import { AlarmDefinitionBuilder } from "@composurecdk/cloudwatch";
+import { type IBucketBuilder } from "@composurecdk/s3";
+import type { DistributionAlarmConfig, FunctionAlarmConfig } from "./alarm-config.js";
+/**
+ * Per-function metadata exposed on {@link DistributionBuilderResult.functions}.
+ * Bundles the CDK construct with the behavior context the builder used to
+ * create it. Consumers (notably {@link createCloudFrontAlarmBuilder}) use the
+ * `pathPattern`, `eventType`, and `recommendedAlarms` fields to reproduce the
+ * same recommended alarms in a different stack.
+ */
+export interface FunctionEntry {
+    /** The CloudFront Function created by the distribution builder. */
+    function: CfFunction;
+    /**
+     * The behavior the function is attached to. `null` for the default behavior;
+     * otherwise the path pattern (e.g. `"/api/*"`).
+     */
+    pathPattern: string | null;
+    /** The viewer event the function handles. */
+    eventType: FunctionEventType;
+    /**
+     * The {@link InlineFunctionDefinition.recommendedAlarms} value the user
+     * supplied for this function. Omitted entirely when the user did not
+     * provide one — consumers should treat that as "use defaults".
+     */
+    recommendedAlarms?: FunctionAlarmConfig | false;
+}
+/**
+ * A CloudFront Function declared inline on a cache behavior. The distribution
+ * builder creates the underlying {@link CfFunction} construct and wires it
+ * into the behavior's function associations. Recommended alarms for the
+ * function are emitted automatically, scoped to the behavior's path pattern.
+ *
+ * Only inline declarations are supported — there is no "bring your own
+ * function" escape hatch, because the whole point of owning the function is
+ * to emit path-scoped `FunctionExecutionErrors` / `FunctionValidationErrors`
+ * / `FunctionThrottles` alarms that couldn't be emitted from an external
+ * `IFunctionRef` (which exposes only an ARN, not a function name).
+ *
+ * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html
+ */
+export interface InlineFunctionDefinition {
+    /** The viewer event that should invoke the function. */
+    eventType: FunctionEventType;
+    /** The source for the function — `FunctionCode.fromInline()` or `.fromFile()`. */
+    code: FunctionCode;
+    /**
+     * Explicit physical name for the function. Useful when operators search
+     * CloudWatch logs or metrics by function name rather than by ARN. If omitted,
+     * CDK generates a name derived from the construct path.
+     */
+    functionName?: string;
+    /**
+     * JavaScript runtime.
+     * @default FunctionRuntime.JS_2_0
+     */
+    runtime?: FunctionRuntime;
+    /** Optional comment stored on the function resource. */
+    comment?: string;
+    /**
+     * Key-value store to associate with the function. Only supported on the
+     * `cloudfront-js-2.0` runtime.
+     */
+    keyValueStore?: IKeyValueStore;
+    /**
+     * Per-function alarm configuration. Defaults to the three AWS-recommended
+     * alarms (execution errors, validation errors, throttles) each with
+     * threshold 0. Set to `false` to disable all alarms for this function, or
+     * override individual alarms via their config entry.
+     *
+     * **Region requirement:** CloudFront metrics are emitted in `us-east-1`
+     * only. CloudWatch alarms are regional, so these alarms will only fire if
+     * the containing stack is deployed in `us-east-1`. The builder emits a
+     * synth-time warning if this isn't the case.
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/monitoring-functions.html
+     */
+    recommendedAlarms?: FunctionAlarmConfig | false;
+}
+/**
+ * Configuration for the distribution's default cache behavior.
+ *
+ * The origin is set separately via {@link IDistributionBuilder.origin}. The
+ * `functionAssociations` field from {@link AddBehaviorOptions} is replaced by
+ * {@link functions}, which takes {@link InlineFunctionDefinition}s — the
+ * builder owns the CloudFront Function constructs so it can emit alarms for
+ * them.
+ */
+export interface DefaultBehaviorConfig extends Omit<AddBehaviorOptions, "functionAssociations"> {
+    /**
+     * CloudFront Functions to associate with the default behavior. At most one
+     * function per {@link FunctionEventType} is allowed.
+     */
+    functions?: InlineFunctionDefinition[];
+}
+/**
+ * Configuration for a path-pattern cache behavior attached to the distribution
+ * via {@link IDistributionBuilder.behavior}.
+ *
+ * Unlike {@link DefaultBehaviorConfig}, `origin` is required. It may be a
+ * concrete {@link IOrigin} or a {@link Resolvable} (typically a {@link ref})
+ * for cross-component wiring.
+ */
+export interface AdditionalBehaviorConfig extends Omit<BehaviorOptions, "origin" | "functionAssociations"> {
+    /** The origin for this behavior, concrete or resolved at build time. */
+    origin: Resolvable<IOrigin>;
+    /**
+     * CloudFront Functions to associate with this behavior. At most one
+     * function per {@link FunctionEventType} is allowed.
+     */
+    functions?: InlineFunctionDefinition[];
+}
+/**
+ * Configures how CloudFront standard access logs are handled. Pass `false`
+ * to disable logging; pass an object to wire a destination, prefix,
+ * include cookies, or customize the auto-created sub-builder.
+ *
+ * `configure` cannot be combined with `destination` — a user-managed
+ * destination is not built by this builder.
+ */
+export type AccessLogsConfig = false | {
+    destination?: IBucket;
+    prefix?: string;
+    includeCookies?: boolean;
+    /**
+     * Customize the auto-created logging sub-builder. Receives a builder
+     * pre-seeded with `versioned: false`, `objectOwnership:
+     * BUCKET_OWNER_PREFERRED`, `removalPolicy: RETAIN`, and recursive
+     * S3 server access logging disabled.
+     */
+    configure?: (b: IBucketBuilder) => IBucketBuilder;
+};
+/**
+ * Configuration properties for the CloudFront distribution builder.
+ *
+ * Extends the CDK {@link DistributionProps} with additional builder-specific
+ * options. `defaultBehavior` accepts a {@link DefaultBehaviorConfig} with
+ * inline function definitions; additional behaviors are added via the
+ * {@link IDistributionBuilder.behavior} method rather than the raw
+ * `additionalBehaviors` record.
+ *
+ * The CDK `enableLogging`, `logBucket`, `logFilePrefix`, and
+ * `logIncludesCookies` props are replaced by {@link accessLogs}, which
+ * auto-creates a logging bucket with secure defaults by default.
+ */
+export interface DistributionBuilderProps extends Omit<DistributionProps, "defaultBehavior" | "additionalBehaviors" | "enableLogging" | "logBucket" | "logFilePrefix" | "logIncludesCookies" | "certificate"> {
+    /** See {@link AccessLogsConfig}. Defaults to `{ prefix: "logs/" }`. */
+    accessLogs?: AccessLogsConfig;
+    /**
+     * The ACM certificate to associate with the distribution for HTTPS.
+     *
+     * Accepts a concrete {@link ICertificate} or a {@link Resolvable} —
+     * typically a {@link Ref} produced by a composed `@composurecdk/acm`
+     * certificate builder. The certificate must be issued in `us-east-1`.
+     */
+    certificate?: Resolvable<ICertificate>;
+    /**
+     * Configuration for the default cache behavior. The origin is set via
+     * {@link IDistributionBuilder.origin}. Inline CloudFront Functions declared
+     * in `functions` are created by the builder and receive path-scoped alarms
+     * automatically.
+     */
+    defaultBehavior?: DefaultBehaviorConfig;
+    /**
+     * Configuration for AWS-recommended CloudWatch alarms at the **distribution**
+     * level (5xx error rate, origin latency).
+     *
+     * Per-function alarm shapes (`FunctionExecutionErrors`,
+     * `FunctionValidationErrors`, `FunctionThrottles`) are configured per
+     * function via {@link InlineFunctionDefinition.recommendedAlarms}, because
+     * their correct disposition depends on the behavior the function is
+     * attached to. The kill switch below (`recommendedAlarms: false`) still
+     * applies to function alarms — see below.
+     *
+     * **Region requirement:** CloudFront metrics are emitted in `us-east-1`
+     * only. CloudWatch alarms are regional, so every alarm created by this
+     * builder will only fire if the containing stack is deployed in
+     * `us-east-1`. The builder emits a synth-time warning if this isn't the
+     * case. For multi-region deployments, set `recommendedAlarms: false` here
+     * and use {@link createCloudFrontAlarmBuilder} routed to a `us-east-1`
+     * stack via `compose().withStacks()`.
+     *
+     * Set to `false` to disable all recommended alarms (both distribution-level
+     * and per-function). Custom alarms added via
+     * {@link IDistributionBuilder.addAlarm} are unaffected. To disable a single
+     * function's alarms, set `recommendedAlarms: false` on the corresponding
+     * {@link InlineFunctionDefinition}.
+     *
+     * No alarm actions are configured by default since notification methods
+     * are user-specific. Access alarms from the build result or use an
+     * `afterBuild` hook to apply actions.
+     *
+     * @example Tighter dist-level threshold; function alarms unchanged.
+     * ```ts
+     * createDistributionBuilder()
+     *   .origin(siteOrigin)
+     *   .recommendedAlarms({ errorRate: { threshold: 2 } });
+     * ```
+     *
+     * @example Multi-region setup — suppress all alarms here, recreate them in
+     * a `us-east-1` stack via {@link createCloudFrontAlarmBuilder}.
+     * ```ts
+     * createDistributionBuilder()
+     *   .origin(siteOrigin)
+     *   .recommendedAlarms(false);
+     * ```
+     *
+     * @see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Best_Practice_Recommended_Alarms_AWS_Services.html#CloudFront
+     */
+    recommendedAlarms?: DistributionAlarmConfig | false;
+}
+/**
+ * The build output of an {@link IDistributionBuilder}. Contains the CDK
+ * constructs created during {@link Lifecycle.build}, keyed by role.
+ */
+export interface DistributionBuilderResult {
+    /** The CloudFront distribution construct created by the builder. */
+    distribution: Distribution;
+    /**
+     * The S3 bucket created for access logging, or `undefined` if access
+     * logging was disabled or the user provided their own bucket.
+     */
+    accessLogsBucket?: Bucket;
+    /**
+     * CloudFront Functions created by the builder for inline function
+     * definitions, keyed by `<behaviorScope><EventType>` —
+     * e.g. `defaultBehaviorViewerRequest`, `behaviorApiStarViewerRequest`.
+     * Each entry bundles the {@link CfFunction} with the behavior context
+     * (`pathPattern`, `eventType`) and the per-function `recommendedAlarms`
+     * config the user supplied. Empty if no inline functions were declared.
+     */
+    functions: Record<string, FunctionEntry>;
+    /**
+     * CloudWatch alarms created for the distribution and its inline functions,
+     * keyed by alarm name. Distribution-level keys: `errorRate`, `originLatency`.
+     * Function-level keys are prefixed by behavior scope and event type —
+     * e.g. `defaultBehaviorViewerRequestExecutionErrors`.
+     *
+     * Includes both recommended alarms and custom alarms added via
+     * {@link IDistributionBuilder.addAlarm}. Empty when `recommendedAlarms` is
+     * `false` and no custom alarms were added. No alarm actions are configured.
+     */
+    alarms: Record<string, Alarm>;
+}
+/**
+ * A fluent builder for configuring and creating a CloudFront distribution.
+ *
+ * Properties from CDK {@link DistributionProps} are exposed as overloaded
+ * getter/setter methods. The origin is set via {@link origin}, which accepts
+ * a concrete {@link IOrigin} or a {@link Ref} for cross-component wiring.
+ * Additional cache behaviors are added via {@link behavior}, which takes a
+ * path pattern and a config including its own origin and inline functions.
+ *
+ * The builder implements {@link Lifecycle}, so it can be used directly as a
+ * component in a {@link compose | composed system}. When built, it creates a
+ * CloudFront distribution, any inline CloudFront Functions declared on its
+ * behaviors, and AWS-recommended alarms scoped per-behavior.
+ *
+ * @example
+ * ```ts
+ * const cdn = createDistributionBuilder()
+ *   .origin(siteOrigin)
+ *   .defaultBehavior({
+ *     functions: [{
+ *       eventType: FunctionEventType.VIEWER_REQUEST,
+ *       code: FunctionCode.fromFile({ filePath: "src/edge/rewrite.js" }),
+ *     }],
+ *   })
+ *   .behavior("/api/*", {
+ *     origin: apiOrigin,
+ *     cachePolicy: CachePolicy.CACHING_DISABLED,
+ *     functions: [{
+ *       eventType: FunctionEventType.VIEWER_REQUEST,
+ *       code: FunctionCode.fromFile({ filePath: "src/edge/api-auth.js" }),
+ *     }],
+ *   });
+ * ```
+ */
+export type IDistributionBuilder = ITaggedBuilder<DistributionBuilderProps, DistributionBuilder>;
+declare class DistributionBuilder implements Lifecycle<DistributionBuilderResult> {
+    #private;
+    props: Partial<DistributionBuilderProps>;
+    addAlarm(key: string, configure: (alarm: AlarmDefinitionBuilder<Distribution>) => AlarmDefinitionBuilder<Distribution>): this;
+    /**
+     * Sets the default origin for the distribution.
+     *
+     * Accepts a concrete {@link IOrigin} or a {@link Ref} that resolves to one
+     * at build time — enabling cross-component wiring with S3 buckets.
+     *
+     * @param origin - The origin or a Ref to one.
+     * @returns This builder for chaining.
+     */
+    origin(origin: Resolvable<IOrigin>): this;
+    /**
+     * Adds an additional cache behavior for a path pattern. The behavior's
+     * origin is required (concrete or Resolvable). Any inline functions are
+     * created by the builder and receive per-behavior alarms scoped to the
+     * path pattern.
+     *
+     * @throws If a behavior for the same path pattern has already been added.
+     */
+    behavior(pathPattern: string, config: AdditionalBehaviorConfig): this;
+    /** @internal — see ADR-0005. */
+    [COPY_STATE](target: DistributionBuilder): void;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): DistributionBuilderResult;
+}
+/**
+ * Creates a new {@link IDistributionBuilder} for configuring a CloudFront distribution.
+ *
+ * This is the entry point for defining a CloudFront distribution component.
+ * The returned builder exposes every {@link DistributionBuilderProps} property
+ * as a fluent setter/getter, plus {@link IDistributionBuilder.origin | origin()}
+ * for setting the default origin with Ref support and
+ * {@link IDistributionBuilder.behavior | behavior()} for path-pattern behaviors.
+ * It implements {@link Lifecycle} for use with {@link compose}.
+ *
+ * @returns A fluent builder for a CloudFront distribution.
+ *
+ * @example
+ * ```ts
+ * const cdn = createDistributionBuilder()
+ *   .origin(ref<BucketBuilderResult>("site", (r) =>
+ *     S3BucketOrigin.withOriginAccessControl(r.bucket)))
+ *   .defaultBehavior({
+ *     functions: [{
+ *       eventType: FunctionEventType.VIEWER_REQUEST,
+ *       code: FunctionCode.fromFile({ filePath: "src/edge/rewrite.js" }),
+ *     }],
+ *   })
+ *   .behavior("/api/*", {
+ *     origin: apiOrigin,
+ *     cachePolicy: CachePolicy.CACHING_DISABLED,
+ *   });
+ * ```
+ */
+export declare function createDistributionBuilder(): IDistributionBuilder;
+export {};
+//# sourceMappingURL=distribution-builder.d.ts.map

package/dist/esm/distribution-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-builder.d.ts","sourceRoot":"","sources":["../../src/distribution-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,QAAQ,IAAI,UAAU,EAC3B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAMtF;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,QAAQ,EAAE,UAAU,CAAC;IAErB;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,6CAA6C;IAC7C,SAAS,EAAE,iBAAiB,CAAC;IAE7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;CACjD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACvC,wDAAwD;IACxD,SAAS,EAAE,iBAAiB,CAAC;IAE7B,kFAAkF;IAClF,IAAI,EAAE,YAAY,CAAC;IAEnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAE1B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAE/B;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;CACjD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IAC7F;;;OAGG;IACH,SAAS,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CACpD,eAAe,EACf,QAAQ,GAAG,sBAAsB,CAClC;IACC,wEAAwE;IACxE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAE5B;;;OAGG;IACH,SAAS,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL;IACE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,cAAc,CAAC;CACnD,CAAC;AAEN;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CACpD,iBAAiB,EACf,iBAAiB,GACjB,qBAAqB,GACrB,eAAe,GACf,WAAW,GACX,eAAe,GACf,oBAAoB,GACpB,aAAa,CAChB;IACC,uEAAuE;IACvE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAC;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,GAAG,KAAK,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,oEAAoE;IACpE,YAAY,EAAE,YAAY,CAAC;IAE3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzC;;;;;;;;;OASG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,oBAAoB,GAAG,cAAc,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AAEjG,cAAM,mBAAoB,YAAW,SAAS,CAAC,yBAAyB,CAAC;;IACvE,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAM;IAM9C,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,CACT,KAAK,EAAE,sBAAsB,CAAC,YAAY,CAAC,KACxC,sBAAsB,CAAC,YAAY,CAAC,GACxC,IAAI;IAKP;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI;IAKzC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,IAAI;IAuBrE,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI;IAO/C,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,yBAAyB;CAsE7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,yBAAyB,IAAI,oBAAoB,CAEhE"}

package/dist/esm/distribution-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-builder.js","sourceRoot":"","sources":["../../src/distribution-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAUb,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAA6B,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAkB,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAuB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EACL,yCAAyC,EACzC,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AA4TtE,MAAM,mBAAmB;IACvB,KAAK,GAAsC,EAAE,CAAC;IAC9C,OAAO,CAAuB;IACrB,oBAAoB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACnE,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,aAAa,GAA2C,EAAE,CAAC;IAEpE,QAAQ,CACN,GAAW,EACX,SAEyC;QAEzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAe,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,MAA2B;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAmB,EAAE,MAAgC;QAC5D,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,mDAAmD,WAAW,uBAAuB,CACtF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,sCAAsC,WAAW,sCAAsC;gBACrF,UAAU,IAAI,UAAU,eAAe,4BAA4B,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,CAAC,UAAU,CAAC,CAAC,MAA2B;QACtC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,oBAAoB;YAAE,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,OAAgC;QAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,wBAAwB;gBAChD,iDAAiD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EACJ,UAAU,EACV,WAAW,EACX,eAAe,EAAE,YAAY,EAC7B,iBAAiB,EAAE,WAAW,EAC9B,GAAG,SAAS,EACb,GAAG,IAAI,CAAC,KAAK,CAAC;QACf,MAAM,mBAAmB,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,eAAe,EAAE,uBAAuB,EACxC,GAAG,WAAW,EACf,GAAG,qBAAqB,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,IAAI,iBAAiB,CAAC;QAE5C,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAE/E,MAAM,SAAS,GAAG,gBAAgB,CAAC;YACjC,KAAK;YACL,EAAE;YACF,OAAO,EAAE,OAAO,IAAI,EAAE;YACtB,aAAa,EAAE,cAAc;YAC7B,eAAe,EAAE,YAAY;YAC7B,uBAAuB,EAAE,uBAAuB,IAAI,EAAE;YACtD,mBAAmB,EAAE,IAAI,CAAC,oBAAoB;SAC/C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG;YAClB,GAAG,WAAW;YACd,GAAG,cAAc;YACjB,GAAG,SAAS;YACZ,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC;gBACvD,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACa,CAAC;QAEvB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAE9D,oFAAoF;QACpF,gGAAgG;QAChG,IAAI,gBAAgB,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAClC,KAAK,EACL,EAAE,EACF,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,EAChD,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CACrE,CAAC;QAEF,OAAO;YACL,YAAY;YACZ,gBAAgB;YAChB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,aAAa,CAAgD,mBAAmB,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAiB,EACjB,EAAU,EACV,GAAiC;IAOjC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;IAEF,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,kEAAkE;gBAChE,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,cAAc,EAAE;gBACd,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,GAAG,CAAC,WAAW;gBAC1B,GAAG,MAAM;aACV;SACF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,mBAAmB,EAAE;SACnC,gBAAgB,CAAC,KAAK,CAAC;SACvB,SAAS,CAAC,KAAK,CAAC;QACjB,oFAAoF;SACnF,eAAe,CAAC,eAAe,CAAC,sBAAsB,CAAC;SACvD,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC;SACnC,cAAc,CAAC,yCAAyC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC;IAE3E,OAAO;QACL,gBAAgB;QAChB,cAAc,EAAE;YACd,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,gBAAgB;YAC3B,GAAG,MAAM;SACV;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,6 @@
+export { createDistributionBuilder, type AccessLogsConfig, type DistributionBuilderProps, type DistributionBuilderResult, type IDistributionBuilder, type DefaultBehaviorConfig, type AdditionalBehaviorConfig, type InlineFunctionDefinition, } from "./distribution-builder.js";
+export { createCloudFrontAlarmBuilder, type CloudFrontAlarmBuilderProps, type CloudFrontAlarmBuilderResult, type ICloudFrontAlarmBuilder, } from "./cloudfront-alarm-builder.js";
+export { DISTRIBUTION_DEFAULTS, INLINE_FUNCTION_DEFAULTS } from "./defaults.js";
+export { type DistributionAlarmConfig, type FunctionAlarmConfig } from "./alarm-config.js";
+export { DISTRIBUTION_ALARM_DEFAULTS, FUNCTION_ALARM_DEFAULTS } from "./alarm-defaults.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,KAAK,uBAAuB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAQ1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,GAI7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/dist/esm/resolve-behaviors.d.ts

@@ -0,0 +1,56 @@
+import { type AddBehaviorOptions, type BehaviorOptions, type IOrigin } from "aws-cdk-lib/aws-cloudfront";
+import type { IConstruct } from "constructs";
+import type { AdditionalBehaviorConfig, DefaultBehaviorConfig, FunctionEntry } from "./distribution-builder.js";
+/**
+ * Input required to resolve the default behavior, all additional behaviors,
+ * and any inline CloudFront Functions into concrete CDK objects.
+ */
+export interface ResolveBehaviorsInput {
+    /** The construct scope under which functions and behaviors are created. */
+    scope: IConstruct;
+    /** The distribution's construct id — used as a prefix for Function ids. */
+    id: string;
+    /** Compose context forwarded to {@link resolve}. Empty record if unused. */
+    context: Record<string, object>;
+    /** The already-resolved default origin. */
+    defaultOrigin: IOrigin;
+    /** User-provided default-behavior config (may be undefined). */
+    defaultBehavior: DefaultBehaviorConfig | undefined;
+    /** The builder's default-behavior defaults, applied before user props. */
+    defaultBehaviorDefaults: Partial<AddBehaviorOptions>;
+    /**
+     * Ordered map of path-pattern → config for additional behaviors. Origins
+     * are resolved here via {@link resolve}.
+     */
+    additionalBehaviors: Map<string, AdditionalBehaviorConfig>;
+}
+/**
+ * Output of {@link resolveBehaviors}: concrete behavior options ready to pass
+ * to the CDK `Distribution` constructor, plus any owned {@link CfFunction}
+ * instances and their alarm definitions.
+ */
+export interface ResolveBehaviorsResult {
+    /** Concrete `BehaviorOptions` for the default cache behavior. */
+    defaultBehavior: BehaviorOptions;
+    /** Concrete `BehaviorOptions` keyed by path pattern, in insertion order. */
+    additionalBehaviors: Record<string, BehaviorOptions>;
+    /**
+     * Owned inline CloudFront Functions plus the behavior context the builder
+     * used to create each one, keyed by `<behaviorScope><EventType>` —
+     * e.g. `defaultBehaviorViewerRequest`. Consumed by the alarm-creation code
+     * path (in {@link DistributionBuilder} and
+     * {@link createCloudFrontAlarmBuilder}) to materialize per-function
+     * recommended alarms.
+     */
+    functions: Record<string, FunctionEntry>;
+}
+/**
+ * Materializes the default and additional cache behaviors into CDK-ready
+ * `BehaviorOptions`, creating any inline CloudFront Functions along the way
+ * and producing their path-scoped alarm definitions.
+ *
+ * Enforces CloudFront invariants at configure time: at most one function per
+ * event type per behavior, and `keyValueStore` requires `FunctionRuntime.JS_2_0`.
+ */
+export declare function resolveBehaviors(input: ResolveBehaviorsInput): ResolveBehaviorsResult;
+//# sourceMappingURL=resolve-behaviors.d.ts.map

package/dist/esm/resolve-behaviors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-behaviors.d.ts","sourceRoot":"","sources":["../../src/resolve-behaviors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EAKpB,KAAK,OAAO,EACb,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQ7C,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EAEd,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,KAAK,EAAE,UAAU,CAAC;IAElB,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAC;IAEX,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IAEvB,gEAAgE;IAChE,eAAe,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAEnD,0EAA0E;IAC1E,uBAAuB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAErD;;;OAGG;IACH,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,eAAe,EAAE,eAAe,CAAC;IAEjC,4EAA4E;IAC5E,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErD;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC1C;AAiDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CA0DrF"}