@composurecdk/cloudwatch 0.7.0 → 0.8.1

package/dist/commonjs/policies/alarm-actions-policy.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alarmActionsPolicy = alarmActionsPolicy;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const policy_matcher_js_1 = require("./policy-matcher.js");
+function isL2AlarmLike(node) {
+    if (node === undefined)
+        return false;
+    const candidate = node;
+    return (typeof candidate.addAlarmAction === "function" &&
+        typeof candidate.addOkAction === "function" &&
+        typeof candidate.addInsufficientDataAction === "function");
+}
+function isAlreadyConfigured(cfn) {
+    // `cfn.alarmActions` is always a Lazy-wrapped array at aspect-visit time,
+    // even when empty. Resolve it against the owning Stack to inspect real contents.
+    const actions = cfn.alarmActions;
+    if (actions === undefined)
+        return false;
+    const resolved = aws_cdk_lib_1.Stack.of(cfn).resolve(actions);
+    if (resolved === undefined || resolved === null)
+        return false;
+    if (Array.isArray(resolved))
+        return resolved.length > 0;
+    return true;
+}
+function dedupe(items) {
+    const seen = new Set();
+    const result = [];
+    for (const item of items) {
+        if (!seen.has(item)) {
+            seen.add(item);
+            result.push(item);
+        }
+    }
+    return result;
+}
+function visitAlarms(scope, visit) {
+    aws_cdk_lib_1.Aspects.of(scope).add({
+        visit(node) {
+            const isAlarm = (0, policy_matcher_js_1.isCfnAlarm)(node);
+            const isComposite = (0, policy_matcher_js_1.isCfnCompositeAlarm)(node);
+            if (!isAlarm && !isComposite)
+                return;
+            const parent = node.node.scope;
+            const l2 = isL2AlarmLike(parent) ? parent : undefined;
+            visit(node, l2, isComposite);
+        },
+    });
+}
+/**
+ * Registers a CDK {@link https://docs.aws.amazon.com/cdk/v2/guide/aspects.html | Aspect}
+ * on `scope` that attaches CloudWatch alarm actions to every `Alarm` and
+ * `CompositeAlarm` (L2) construct in the subtree at synth time. Call once
+ * with any scope — an `App`, a `Stack`, or the scope passed to `.build()`
+ * for a composed system; alarms added after the call still pick up the
+ * policy, so call ordering is irrelevant as
+ * long as it happens before `app.synth()`. In particular, there is no need
+ * to wrap this call in `afterBuild` — the Aspect runs after the construct
+ * tree is finalised, not at call time. The only temporal constraint is that
+ * any `IAlarmAction` instances in `config` (e.g. `new SnsAction(topic)`)
+ * must reference constructs that already exist when the policy is called.
+ *
+ * Detection uses the version-portable `isCfnAlarm` / `isCfnCompositeAlarm`
+ * guards (`CfnResource.isCfnResource` + `cfnResourceType`, so they work below
+ * aws-cdk-lib 2.231.0) on the L1 resource; the L2 parent is found via
+ * duck-typing on `addAlarmAction`. Actions are attached through
+ * the L2 so that `IAlarmAction.bind()` runs and permissions are wired
+ * correctly. Bare `CfnAlarm` nodes (created without an L2 wrapper) are
+ * detected but silently skipped.
+ *
+ * `defaults` apply to every matched alarm; `rules` append additional actions.
+ * A rule matches if any of its `match` entries matches. Set
+ * `replaceDefaults: true` on a rule to suppress defaults for its matched
+ * alarms.
+ *
+ * @example
+ * ```ts
+ * alarmActionsPolicy(app, {
+ *   defaults: { alarmActions: [new SnsAction(standardTopic)] },
+ *   rules: [
+ *     { match: "HighSev", alarmActions: [new SnsAction(pagerTopic)] },
+ *   ],
+ * });
+ * ```
+ */
+function alarmActionsPolicy(scope, config) {
+    const { defaults, rules = [], skipIfAlreadyConfigured = false } = config;
+    const processed = new WeakSet();
+    visitAlarms(scope, (cfn, alarm, isComposite) => {
+        if (alarm === undefined)
+            return;
+        if (processed.has(alarm))
+            return;
+        if (skipIfAlreadyConfigured && isAlreadyConfigured(cfn))
+            return;
+        const ctx = {
+            alarm: alarm,
+            cfn,
+            id: alarm.node.id,
+            path: alarm.node.path,
+            isComposite,
+        };
+        const matched = rules.filter((r) => (0, policy_matcher_js_1.ruleMatches)(r, ctx));
+        const replaceDefaults = matched.some((r) => r.replaceDefaults === true);
+        const alarmActions = [];
+        const okActions = [];
+        const insufficientDataActions = [];
+        if (defaults !== undefined && !replaceDefaults) {
+            if (defaults.alarmActions !== undefined)
+                alarmActions.push(...defaults.alarmActions);
+            if (defaults.okActions !== undefined)
+                okActions.push(...defaults.okActions);
+            if (defaults.insufficientDataActions !== undefined) {
+                insufficientDataActions.push(...defaults.insufficientDataActions);
+            }
+        }
+        for (const rule of matched) {
+            if (rule.alarmActions !== undefined)
+                alarmActions.push(...rule.alarmActions);
+            if (rule.okActions !== undefined)
+                okActions.push(...rule.okActions);
+            if (rule.insufficientDataActions !== undefined) {
+                insufficientDataActions.push(...rule.insufficientDataActions);
+            }
+        }
+        const uniqueAlarm = dedupe(alarmActions);
+        const uniqueOk = dedupe(okActions);
+        const uniqueInsufficient = dedupe(insufficientDataActions);
+        if (uniqueAlarm.length > 0)
+            alarm.addAlarmAction(...uniqueAlarm);
+        if (uniqueOk.length > 0)
+            alarm.addOkAction(...uniqueOk);
+        if (uniqueInsufficient.length > 0)
+            alarm.addInsufficientDataAction(...uniqueInsufficient);
+        processed.add(alarm);
+    });
+}
+//# sourceMappingURL=alarm-actions-policy.js.map

package/dist/commonjs/policies/alarm-actions-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-actions-policy.js","sourceRoot":"","sources":["../../../src/policies/alarm-actions-policy.ts"],"names":[],"mappings":";;AAkIA,gDAkDC;AApLD,6CAA6C;AAG7C,2DAM6B;AAiC7B,SAAS,aAAa,CAAC,IAA4B;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,IAA0C,CAAC;IAC7D,OAAO,CACL,OAAO,SAAS,CAAC,cAAc,KAAK,UAAU;QAC9C,OAAO,SAAS,CAAC,WAAW,KAAK,UAAU;QAC3C,OAAO,SAAS,CAAC,yBAAyB,KAAK,UAAU,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAiC;IAC5D,0EAA0E;IAC1E,iFAAiF;IACjF,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,QAAQ,GAAY,mBAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAI,KAAmB;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAK,CAAC;IAC1B,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,SAAS,WAAW,CAAC,KAAiB,EAAE,KAAmB;IACzD,qBAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QACpB,KAAK,CAAC,IAAgB;YACpB,MAAM,OAAO,GAAG,IAAA,8BAAU,EAAC,IAAI,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,IAAA,uCAAmB,EAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;gBAAE,OAAO;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAgB,kBAAkB,CAAC,KAAiB,EAAE,MAAgC;IACpF,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,EAAE,EAAE,uBAAuB,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,OAAO,EAAc,CAAC;IAE5C,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QAC7C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,uBAAuB,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhE,MAAM,GAAG,GAAsB;YAC7B,KAAK,EAAE,KAA0B;YACjC,GAAG;YACH,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,WAAW;SACZ,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,+BAAW,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;QAExE,MAAM,YAAY,GAAmB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,uBAAuB,GAAmB,EAAE,CAAC;QAEnD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC5E,IAAI,QAAQ,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBACnD,uBAAuB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBAC/C,uBAAuB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,kBAAkB,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAE3D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC;QACxD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,yBAAyB,CAAC,GAAG,kBAAkB,CAAC,CAAC;QAE1F,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commonjs/policies/alarm-name-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-name-policy.d.ts","sourceRoot":"","sources":["../../../src/policies/alarm-name-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,SAAS,EAA+B,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAIpB,MAAM,qBAAqB,CAAC;AAE7B,yDAAyD;AACzD,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,yBAAyB,KAAK,SAAS,CAAC;IAC1D,iGAAiG;IACjG,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,qBAAqB;IACpC,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACpD,4DAA4D;IAC5D,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAgDtF"}

package/dist/commonjs/policies/alarm-name-policy.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alarmNamePolicy = alarmNamePolicy;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const alarm_name_js_1 = require("../alarm-name.js");
+const policy_matcher_js_1 = require("./policy-matcher.js");
+function decorate(current, prefix, suffix, sep) {
+    const parts = [];
+    if (prefix !== undefined && prefix.length > 0)
+        parts.push(prefix);
+    parts.push(current);
+    if (suffix !== undefined && suffix.length > 0)
+        parts.push(suffix);
+    return parts.join(sep);
+}
+function resolveAlarmName(cfn) {
+    const value = cfn.alarmName;
+    if (value === undefined)
+        return undefined;
+    const resolved = aws_cdk_lib_1.Stack.of(cfn).resolve(value);
+    return typeof resolved === "string" ? resolved : undefined;
+}
+/**
+ * Decorates CloudWatch alarm names across an entire scope.
+ *
+ * Installs a CDK
+ * {@link https://docs.aws.amazon.com/cdk/v2/guide/aspects.html | Aspect}
+ * that fires during the synth prepare phase. For every `AWS::CloudWatch::Alarm`
+ * (and `AWS::CloudWatch::CompositeAlarm`) found beneath `scope`:
+ *
+ * 1. The alarm's existing name is read (set by the library default or the
+ *    consumer's per-alarm override).
+ * 2. `defaults.prefix` / `defaults.suffix` decorate it, unless a matched
+ *    rule sets `replaceDefaults: true`.
+ * 3. Each matching rule contributes in declaration order — `transform`
+ *    replaces the current name; otherwise `prefix`/`suffix` decorate.
+ * 4. The final value is validated via {@link alarmName} and written back to
+ *    `cfn.alarmName`.
+ *
+ * Use cases: stage prefixing (`prod-…`), severity tagging (`…-critical`),
+ * team scoping. Composes with per-alarm `alarmName` overrides — those run
+ * first, the policy decorates the result.
+ *
+ * @example
+ * ```ts
+ * alarmNamePolicy(app, {
+ *   defaults: { prefix: "prod" },
+ *   rules: [
+ *     { match: /Errors$/, suffix: "critical" },
+ *     { match: "throttles", suffix: "warning" },
+ *   ],
+ * });
+ * ```
+ */
+function alarmNamePolicy(scope, config) {
+    const { defaults, rules = [], separator = "-" } = config;
+    const processed = new WeakSet();
+    aws_cdk_lib_1.Aspects.of(scope).add({
+        visit(node) {
+            const isAlarm = (0, policy_matcher_js_1.isCfnAlarm)(node);
+            const isComposite = (0, policy_matcher_js_1.isCfnCompositeAlarm)(node);
+            if (!isAlarm && !isComposite)
+                return;
+            const cfn = node;
+            if (processed.has(cfn))
+                return;
+            const original = resolveAlarmName(cfn);
+            if (original === undefined)
+                return;
+            const parent = cfn.node.scope;
+            const ctx = {
+                alarm: undefined,
+                cfn,
+                id: parent?.node.id ?? cfn.node.id,
+                path: parent?.node.path ?? cfn.node.path,
+                isComposite,
+            };
+            const matched = rules.filter((r) => (0, policy_matcher_js_1.ruleMatches)(r, ctx));
+            const replaceDefaults = matched.some((r) => r.replaceDefaults === true);
+            let current = original;
+            if (defaults !== undefined && !replaceDefaults) {
+                current = decorate(current, defaults.prefix, defaults.suffix, separator);
+            }
+            for (const rule of matched) {
+                if (rule.transform !== undefined) {
+                    current = rule.transform({ ...ctx, currentName: current });
+                    continue;
+                }
+                current = decorate(current, rule.prefix, rule.suffix, separator);
+            }
+            if (current === original)
+                return;
+            const validated = (0, alarm_name_js_1.alarmName)(current);
+            cfn.alarmName = validated;
+            processed.add(cfn);
+        },
+    });
+}
+//# sourceMappingURL=alarm-name-policy.js.map

package/dist/commonjs/policies/alarm-name-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-name-policy.js","sourceRoot":"","sources":["../../../src/policies/alarm-name-policy.ts"],"names":[],"mappings":";;AA2GA,0CAgDC;AA3JD,6CAA6C;AAG7C,oDAA+E;AAC/E,2DAM6B;AA6C7B,SAAS,QAAQ,CACf,OAAe,EACf,MAA0B,EAC1B,MAA0B,EAC1B,GAAW;IAEX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAiC;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,QAAQ,GAAY,mBAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,SAAgB,eAAe,CAAC,KAAiB,EAAE,MAA6B;IAC9E,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAgC,CAAC;IAE9D,qBAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QACpB,KAAK,CAAC,IAAgB;YACpB,MAAM,OAAO,GAAG,IAAA,8BAAU,EAAC,IAAI,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,IAAA,uCAAmB,EAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW;gBAAE,OAAO;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC;YACjB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAE/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO;YAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9B,MAAM,GAAG,GAAsB;gBAC7B,KAAK,EAAE,SAAS;gBAChB,GAAG;gBACH,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE;gBAClC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI;gBACxC,WAAW;aACZ,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,+BAAW,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;YAExE,IAAI,OAAO,GAAG,QAAQ,CAAC;YAEvB,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC/C,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC3E,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3D,SAAS;gBACX,CAAC;gBACD,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO;YAEjC,MAAM,SAAS,GAAc,IAAA,yBAAc,EAAC,OAAO,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/{policies → commonjs/policies}/policy-matcher.d.ts

@@ -1,4 +1,18 @@
-import type { CfnAlarm, CfnCompositeAlarm, IAlarm } from "aws-cdk-lib/aws-cloudwatch";
+import { CfnAlarm, CfnCompositeAlarm, type IAlarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+/**
+ * Version-portable replacement for `CfnAlarm.isCfnAlarm`, which only exists in
+ * aws-cdk-lib >= 2.231.0 and throws `TypeError` on older versions inside our
+ * declared `^2.0.0` peer range (issue #146). Checks the foundational
+ * `CfnResource.isCfnResource` guard plus a `cfnResourceType` compare — exactly
+ * what the modern static does internally — so it works across the full range.
+ */
+export declare function isCfnAlarm(x: IConstruct): x is CfnAlarm;
+/**
+ * Version-portable replacement for `CfnCompositeAlarm.isCfnCompositeAlarm`.
+ * See {@link isCfnAlarm} for why this exists.
+ */
+export declare function isCfnCompositeAlarm(x: IConstruct): x is CfnCompositeAlarm;
 /**
  * Selects which alarms a rule applies to.
  *

package/dist/commonjs/policies/policy-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-matcher.d.ts","sourceRoot":"","sources":["../../../src/policies/policy-matcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,QAAQ,CAEvD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,iBAAiB,CAIzE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,iBAAiB,CAAC;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,GAAG,YAAY,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAIjF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAKjF"}

package/dist/commonjs/policies/policy-matcher.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCfnAlarm = isCfnAlarm;
+exports.isCfnCompositeAlarm = isCfnCompositeAlarm;
+exports.matchesOne = matchesOne;
+exports.ruleMatches = ruleMatches;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+/**
+ * Version-portable replacement for `CfnAlarm.isCfnAlarm`, which only exists in
+ * aws-cdk-lib >= 2.231.0 and throws `TypeError` on older versions inside our
+ * declared `^2.0.0` peer range (issue #146). Checks the foundational
+ * `CfnResource.isCfnResource` guard plus a `cfnResourceType` compare — exactly
+ * what the modern static does internally — so it works across the full range.
+ */
+function isCfnAlarm(x) {
+    return aws_cdk_lib_1.CfnResource.isCfnResource(x) && x.cfnResourceType === aws_cloudwatch_1.CfnAlarm.CFN_RESOURCE_TYPE_NAME;
+}
+/**
+ * Version-portable replacement for `CfnCompositeAlarm.isCfnCompositeAlarm`.
+ * See {@link isCfnAlarm} for why this exists.
+ */
+function isCfnCompositeAlarm(x) {
+    return (aws_cdk_lib_1.CfnResource.isCfnResource(x) && x.cfnResourceType === aws_cloudwatch_1.CfnCompositeAlarm.CFN_RESOURCE_TYPE_NAME);
+}
+function matchesOne(matcher, ctx) {
+    if (typeof matcher === "function")
+        return matcher(ctx);
+    if (matcher instanceof RegExp)
+        return matcher.test(ctx.path);
+    return ctx.id.includes(matcher) || ctx.path.includes(matcher);
+}
+function ruleMatches(rule, ctx) {
+    if (rule.singleOnly === true && ctx.isComposite)
+        return false;
+    if (rule.compositeOnly === true && !ctx.isComposite)
+        return false;
+    const matchers = Array.isArray(rule.match) ? rule.match : [rule.match];
+    return matchers.some((m) => matchesOne(m, ctx));
+}
+//# sourceMappingURL=policy-matcher.js.map

package/dist/commonjs/policies/policy-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-matcher.js","sourceRoot":"","sources":["../../../src/policies/policy-matcher.ts"],"names":[],"mappings":";;AAWA,gCAEC;AAMD,kDAIC;AAgCD,gCAIC;AAED,kCAKC;AAlED,6CAA0C;AAC1C,+DAAsF;AAGtF;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,CAAa;IACtC,OAAO,yBAAW,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,yBAAQ,CAAC,sBAAsB,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,CAAa;IAC/C,OAAO,CACL,yBAAW,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,kCAAiB,CAAC,sBAAsB,CAC/F,CAAC;AACJ,CAAC;AAgCD,SAAgB,UAAU,CAAC,OAAqB,EAAE,GAAsB;IACtE,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,OAAO,YAAY,MAAM;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,WAAW,CAAC,IAAoB,EAAE,GAAsB;IACtE,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/commonjs/resolve-alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-alarm-config.d.ts","sourceRoot":"","sources":["../../src/resolve-alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,WAAW,GAAG,SAAS,EACnC,QAAQ,EAAE,mBAAmB,GAC5B,mBAAmB,CAQrB"}

package/dist/commonjs/resolve-alarm-config.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAlarmConfig = resolveAlarmConfig;
+/**
+ * Resolves an absolute-threshold alarm config by layering user overrides
+ * onto the defaults. `alarmName` is propagated from user config only;
+ * defaults intentionally do not specify a name.
+ */
+function resolveAlarmConfig(userConfig, defaults) {
+    return {
+        alarmName: userConfig?.alarmName,
+        threshold: userConfig?.threshold ?? defaults.threshold,
+        evaluationPeriods: userConfig?.evaluationPeriods ?? defaults.evaluationPeriods,
+        datapointsToAlarm: userConfig?.datapointsToAlarm ?? defaults.datapointsToAlarm,
+        treatMissingData: userConfig?.treatMissingData ?? defaults.treatMissingData,
+    };
+}
+//# sourceMappingURL=resolve-alarm-config.js.map

package/dist/commonjs/resolve-alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-alarm-config.js","sourceRoot":"","sources":["../../src/resolve-alarm-config.ts"],"names":[],"mappings":";;AAyBA,gDAWC;AAhBD;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,UAAmC,EACnC,QAA6B;IAE7B,OAAO;QACL,SAAS,EAAE,UAAU,EAAE,SAAS;QAChC,SAAS,EAAE,UAAU,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;QACtD,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;QAC9E,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;QAC9E,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;KAC5E,CAAC;AACJ,CAAC"}

package/dist/esm/alarm-config.d.ts

@@ -0,0 +1,31 @@
+import type { TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import type { AlarmName } from "./alarm-name.js";
+/**
+ * Configuration for a single recommended CloudWatch alarm.
+ * Every field has a documented default; users override individual
+ * fields to tune thresholds without replacing the entire alarm.
+ */
+export interface AlarmConfig {
+    /**
+     * Explicit CloudWatch alarm name. When omitted, the library derives a
+     * readable default from the stack name, builder id, and alarm key.
+     *
+     * Construct via the {@link alarmName} helper to opt into the same
+     * validation the library applies to its own auto-generated names.
+     */
+    alarmName?: AlarmName;
+    /** Alarm threshold. Default varies per alarm type. */
+    threshold?: number;
+    /** Number of evaluation periods before triggering. @default 1 */
+    evaluationPeriods?: number;
+    /** Datapoints within evaluation periods required to trigger. @default 1 */
+    datapointsToAlarm?: number;
+    /** How to treat missing data points. @default TreatMissingData.NOT_BREACHING */
+    treatMissingData?: TreatMissingData;
+}
+/**
+ * Type for per-package `*_ALARM_DEFAULTS` constants. Defaults set every
+ * tunable field but never `alarmName` — names are derived per-instance.
+ */
+export type AlarmConfigDefaults = Required<Omit<AlarmConfig, "alarmName">>;
+//# sourceMappingURL=alarm-config.d.ts.map

package/dist/esm/alarm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-config.d.ts","sourceRoot":"","sources":["../../src/alarm-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IAEtB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC"}

package/dist/esm/alarm-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-config.js","sourceRoot":"","sources":["../../src/alarm-config.ts"],"names":[],"mappings":""}

package/dist/esm/alarm-definition-builder.d.ts

@@ -0,0 +1,40 @@
+import { TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import type { AlarmDefinition, AlarmMetric } from "./alarm-definition.js";
+import type { AlarmName } from "./alarm-name.js";
+/**
+ * Fluent builder for constructing deferred {@link AlarmDefinition}s.
+ *
+ * Stores a metric factory `(construct: T) => AlarmMetric` at configuration time
+ * (a `Metric` or a `MathExpression`). Call {@link resolve} during build to
+ * invoke the factory and produce a complete {@link AlarmDefinition}.
+ *
+ * @typeParam TConstruct - The construct type the metric factory receives.
+ */
+export declare class AlarmDefinitionBuilder<TConstruct> {
+    #private;
+    constructor(key: string);
+    metric(factory: (construct: TConstruct) => AlarmMetric): this;
+    /**
+     * Sets an explicit CloudWatch alarm name. When unset, {@link createAlarms}
+     * derives a default from the stack name, builder id, and alarm key. Use
+     * the {@link alarmName} helper to construct branded values.
+     */
+    alarmName(name: AlarmName): this;
+    threshold(value: number): this;
+    greaterThan(): this;
+    greaterThanOrEqual(): this;
+    lessThan(): this;
+    lessThanOrEqual(): this;
+    evaluationPeriods(n: number): this;
+    datapointsToAlarm(n: number): this;
+    treatMissingData(treatment: TreatMissingData): this;
+    description(text: string | ((definition: AlarmDefinition) => string)): this;
+    /**
+     * Resolves the deferred metric factory against a construct and
+     * returns a complete {@link AlarmDefinition}.
+     *
+     * @throws If {@link metric} was not called before resolve.
+     */
+    resolve(construct: TConstruct): AlarmDefinition;
+}
+//# sourceMappingURL=alarm-definition-builder.d.ts.map

package/dist/esm/alarm-definition-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition-builder.d.ts","sourceRoot":"","sources":["../../src/alarm-definition-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;GAQG;AACH,qBAAa,sBAAsB,CAAC,UAAU;;gBAWhC,GAAG,EAAE,MAAM;IAIvB,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,WAAW,GAAG,IAAI;IAK7D;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAKhC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK9B,WAAW,IAAI,IAAI;IAKnB,kBAAkB,IAAI,IAAI;IAK1B,QAAQ,IAAI,IAAI;IAKhB,eAAe,IAAI,IAAI;IAKvB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAKlC,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI;IAKlC,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI;IAKnD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,eAAe,KAAK,MAAM,CAAC,GAAG,IAAI;IAK3E;;;;;OAKG;IACH,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,eAAe;CAwBhD"}

package/dist/{alarm-definition-builder.js → esm/alarm-definition-builder.js}

@@ -2,9 +2,9 @@ import { ComparisonOperator, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch
 /**
  * Fluent builder for constructing deferred {@link AlarmDefinition}s.
  *
- * Stores a metric factory `(construct: T) => Metric` at configuration time.
- * Call {@link resolve} during build to invoke the factory and produce a
- * complete {@link AlarmDefinition}.
+ * Stores a metric factory `(construct: T) => AlarmMetric` at configuration time
+ * (a `Metric` or a `MathExpression`). Call {@link resolve} during build to
+ * invoke the factory and produce a complete {@link AlarmDefinition}.
  *
  * @typeParam TConstruct - The construct type the metric factory receives.
  */

package/dist/esm/alarm-definition-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition-builder.js","sourceRoot":"","sources":["../../src/alarm-definition-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAIlF;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IACxB,IAAI,CAAS;IACtB,UAAU,CAAa;IACvB,cAAc,CAA0C;IACxD,UAAU,GAAG,CAAC,CAAC;IACf,mBAAmB,GAAG,kBAAkB,CAAC,sBAAsB,CAAC;IAChE,kBAAkB,GAAG,CAAC,CAAC;IACvB,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,gBAAgB,CAAC,aAAa,CAAC;IACnD,YAAY,GAAuD,EAAE,CAAC;IAEtE,YAAY,GAAW;QACrB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,OAA+C;QACpD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAe;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW;QACT,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC,sBAAsB,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC,kCAAkC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC,mBAAmB,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;QACb,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC,+BAA+B,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iBAAiB,CAAC,CAAS;QACzB,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iBAAiB,CAAC,CAAS;QACzB,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,SAA2B;QAC1C,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,IAAwD;QAClE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,SAAqB;QAC3B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,IAAI,6CAA6C,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAoB;YAClC,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YACtC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,WAAW,EAAE,EAAE;SAChB,CAAC;QAEF,UAAU,CAAC,WAAW;YACpB,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QAE9F,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/esm/alarm-definition.d.ts

@@ -0,0 +1,31 @@
+import type { ComparisonOperator, MathExpression, Metric, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import type { AlarmName } from "./alarm-name.js";
+/**
+ * A metric an alarm can be created from: either a single {@link Metric} or a
+ * {@link MathExpression} (e.g. a rate/ratio like `errors / invocations`).
+ *
+ * Both classes carry `createAlarm(...)` — it is declared on the concrete
+ * classes, not on `IMetric` — so this union is exactly what {@link createAlarms}
+ * needs to call. When using a `MathExpression`, set its `period` explicitly:
+ * the expression overrides the period of every metric in `usingMetrics`.
+ */
+export type AlarmMetric = Metric | MathExpression;
+/**
+ * A fully-resolved alarm descriptor. All fields are required —
+ * this is the canonical form consumed by {@link createAlarms}.
+ *
+ * `alarmName` is the only optional field: when omitted, {@link createAlarms}
+ * derives a default via `defaultAlarmName(scope, id, key)`.
+ */
+export interface AlarmDefinition {
+    key: string;
+    alarmName?: AlarmName;
+    metric: AlarmMetric;
+    threshold: number;
+    comparisonOperator: ComparisonOperator;
+    evaluationPeriods: number;
+    datapointsToAlarm: number;
+    treatMissingData: TreatMissingData;
+    description: string;
+}
+//# sourceMappingURL=alarm-definition.d.ts.map

package/dist/esm/alarm-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition.d.ts","sourceRoot":"","sources":["../../src/alarm-definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACd,MAAM,EACN,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,cAAc,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/esm/alarm-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition.js","sourceRoot":"","sources":["../../src/alarm-definition.ts"],"names":[],"mappings":""}

package/dist/esm/alarm-name.d.ts

@@ -0,0 +1,32 @@
+declare const alarmNameBrand: unique symbol;
+/**
+ * A validated CloudWatch alarm name. Construct via {@link alarmName} or
+ * {@link joinAlarmName}; the brand prevents bare strings from being passed
+ * where an `AlarmName` is required.
+ */
+export type AlarmName = string & {
+    readonly [alarmNameBrand]: true;
+};
+/**
+ * Validates and brands a string as an {@link AlarmName}. The string is used
+ * verbatim — no sanitisation — so what the caller writes is exactly what
+ * appears in CloudWatch.
+ *
+ * @throws If the input is empty, exceeds 255 chars, or contains characters
+ * outside CloudWatch's allowed set: `[A-Za-z0-9-_./#:()+ =@]`.
+ */
+export declare function alarmName(input: string): AlarmName;
+/**
+ * Builds an {@link AlarmName} by kebab-casing each segment and joining with
+ * `sep`. Empty segments after kebab-casing are dropped, so callers can pass
+ * e.g. `Stack.of(scope).stackName` without worrying about token-resolution
+ * artefacts.
+ */
+export declare function joinAlarmName(segments: readonly string[], sep?: string): AlarmName;
+/**
+ * Lower-cases and hyphenates a string: splits camelCase / PascalCase /
+ * snake_case / dotted boundaries into hyphen-separated lowercase words.
+ */
+export declare function kebab(input: string): string;
+export {};
+//# sourceMappingURL=alarm-name.d.ts.map

package/dist/esm/alarm-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-name.d.ts","sourceRoot":"","sources":["../../src/alarm-name.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAE5C;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAKrE;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAclD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,SAAM,GAAG,SAAS,CAG/E;AAED;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQ3C"}

package/dist/esm/alarm-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-name.js","sourceRoot":"","sources":["../../src/alarm-name.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,YAAY,OAAO,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,+FAA+F,OAAO,GAAG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,OAAoB,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAA2B,EAAE,GAAG,GAAG,GAAG;IAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC;SACzC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,WAAW,EAAE,CAAC;AACnB,CAAC"}

package/dist/esm/create-alarms.d.ts

@@ -0,0 +1,19 @@
+import { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IConstruct } from "constructs";
+import type { AlarmDefinition } from "./alarm-definition.js";
+/**
+ * Creates CDK {@link Alarm} constructs from fully-resolved {@link AlarmDefinition}s.
+ *
+ * Validates that all definition keys are unique before creating alarms. Each
+ * alarm's `AlarmName` is taken verbatim from `def.alarmName` when supplied;
+ * otherwise it is derived from the scope, `id`, and `def.key` via
+ * {@link defaultAlarmName}.
+ *
+ * @param scope - CDK construct scope.
+ * @param id - Base identifier; each alarm's construct id is `${id}${Capitalize(key)}Alarm`.
+ * @param definitions - Fully-resolved alarm definitions.
+ * @returns A record mapping each definition's key to its created Alarm.
+ * @throws If duplicate keys are found in the definitions.
+ */
+export declare function createAlarms(scope: IConstruct, id: string, definitions: AlarmDefinition[]): Record<string, Alarm>;
+//# sourceMappingURL=create-alarms.d.ts.map

package/dist/esm/create-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-alarms.d.ts","sourceRoot":"","sources":["../../src/create-alarms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAO7D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,eAAe,EAAE,GAC7B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAsBvB"}

package/dist/esm/create-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-alarms.js","sourceRoot":"","sources":["../../src/create-alarms.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAiB,EACjB,EAAU,EACV,WAA8B;IAE9B,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,CAAC,GAAG,mEAAmE;gBAChG,8DAA8D,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;YAClF,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC;YAChE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,gBAAgB,EAAE,GAAG,CAAC,WAAW;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/default-alarm-name.d.ts

@@ -0,0 +1,14 @@
+import type { IConstruct } from "constructs";
+import { type AlarmName } from "./alarm-name.js";
+/**
+ * Builds a human-readable, stack-scoped {@link AlarmName} from the alarm's
+ * scope, base id, and key.
+ *
+ * Format: `${stackName}/${kebab(id)}/${kebab(key)}`. Slashes are valid in
+ * CloudWatch alarm names and render hierarchy clearly in the console.
+ *
+ * Used by {@link createAlarms} as the fallback whenever an explicit
+ * `alarmName` is not supplied on the {@link AlarmDefinition}.
+ */
+export declare function defaultAlarmName(scope: IConstruct, id: string, key: string): AlarmName;
+//# sourceMappingURL=default-alarm-name.d.ts.map

package/dist/esm/default-alarm-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-alarm-name.d.ts","sourceRoot":"","sources":["../../src/default-alarm-name.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,iBAAiB,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAGtF"}

package/dist/esm/default-alarm-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-alarm-name.js","sourceRoot":"","sources":["../../src/default-alarm-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAkB,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,EAAU,EAAE,GAAW;IACzE,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC;IAC5C,OAAO,aAAa,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,11 @@
+export type { AlarmConfig, AlarmConfigDefaults } from "./alarm-config.js";
+export type { AlarmDefinition, AlarmMetric } from "./alarm-definition.js";
+export { AlarmDefinitionBuilder } from "./alarm-definition-builder.js";
+export { type AlarmName, alarmName } from "./alarm-name.js";
+export { defaultAlarmName } from "./default-alarm-name.js";
+export { createAlarms } from "./create-alarms.js";
+export { resolveAlarmConfig, type ResolvedAlarmConfig } from "./resolve-alarm-config.js";
+export { alarmActionsPolicy } from "./policies/alarm-actions-policy.js";
+export type { AlarmActionsPolicyConfig, AlarmMatchContext, AlarmMatcher, } from "./policies/alarm-actions-policy.js";
+export { alarmNamePolicy, type AlarmNamePolicyConfig, type AlarmNameRule, type AlarmNameTransformContext, } from "./policies/alarm-name-policy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,YAAY,EACV,wBAAwB,EACxB,iBAAiB,EACjB,YAAY,GACb,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,yBAAyB,GAC/B,MAAM,iCAAiC,CAAC"}

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAkB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAA4B,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAMxE,OAAO,EACL,eAAe,GAIhB,MAAM,iCAAiC,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}