@fjall/components-infrastructure 2.29.0 → 2.30.3

package/dist/lib/patterns/aws/interfaces/pattern.d.ts

@@ -21,8 +21,10 @@ import { type RelationalDatabase, type DynamoDBDatabase, type ProxyConfig, type
 import { type LambdaCompute } from "../compute.js";
 import { type Storage } from "../storage.js";
 import { type QueueMessaging } from "../messaging.js";
-import { type Cdn, type SmartCdnBehaviour } from "../cdn.js";
+import { type Cdn, type SmartCdnBehaviour, type StaticSiteRouting } from "../cdn.js";
+import { type LambdaFunction } from "../../../resources/aws/compute/index.js";
 import type { ManagedDomainExports } from "../../../utils/domainTypes.js";
+import type { PatternType } from "@fjall/util";
 export type { ProxyConfig, ReadReplicaConfig, CredentialsConfig, EncryptionConfig, AuroraEncryptionConfig, AuroraWriterConfig, AuroraReadersConfig, DatabaseInsightsConfig };
 /**
  * Full database configuration for patterns.
@@ -339,15 +341,121 @@ export interface IPayloadProps {
     /** Additional environment variables for server Lambda */
     environment?: Record<string, string>;
 }
+/**
+ * Build configuration for a static site — the single source of truth read by
+ * both the CDK construct (`outputDir` is what BucketDeployment uploads) and the
+ * deploy-core builder (`command` runs in `source` before synth).
+ */
+export interface StaticSiteBuildConfig {
+    /** Build command run in `source` (e.g. "npm run build"). */
+    command: string;
+    /** Directory (relative to `source`) holding the built site (e.g. "out"). */
+    outputDir: string;
+}
+/**
+ * Security-header configuration for a static site.
+ */
+export interface StaticSiteSecurityConfig {
+    /** Ship the four safe headers (HSTS/nosniff/frame/referrer). */
+    headers?: boolean;
+    /** Opt-in Content-Security-Policy. Absent ⇒ no CSP header (a wrong policy
+     * silently breaks inline hydration, so it is never a shipped default). */
+    contentSecurityPolicy?: string;
+}
+/**
+ * Contact-form configuration for a static site. Requires a custom `domain`: SES
+ * sends only from a verified identity, and the site's domain is the identity
+ * this pattern verifies. The endpoint is `https://<domain>/api/contact`.
+ *
+ * `to` and `from` are separate axes. `to` is where submissions land and is
+ * unconstrained — a personal mailbox is the common case. `from` is the envelope
+ * sender and must sit at `domain`. The submitter's own address is put in
+ * Reply-To at send time, so replying from the inbox reaches them.
+ */
+export interface StaticSiteFormsConfig {
+    /** Where submissions are delivered. Any address — not an SES identity. */
+    to: string;
+    /** Envelope sender; must be an address at `domain`. Default `noreply@<domain>`. */
+    from?: string;
+    /**
+     * Origin allowed to POST the form — the browser CORS allow-origin and the
+     * server-side Origin gate. An exact origin (`https://example.com`, no path,
+     * no trailing slash). Default `https://<domain>`.
+     */
+    corsOrigin?: string;
+    /**
+     * Concurrent executions the endpoint may hold. The Function URL is public and
+     * unauthenticated, so this caps both the SES bill and the account-wide Lambda
+     * concurrency a flood can consume. Default 5.
+     */
+    maxConcurrency?: number;
+}
+/**
+ * CDN configuration for a static site — advanced per-path override passthrough.
+ */
+export interface StaticSiteCdnConfig {
+    /** Additional CDN behaviours (per-path overrides). */
+    behaviours?: SmartCdnBehaviour[];
+}
+/**
+ * Static-site pattern props.
+ *
+ * Serves a pre-built folder of files from a private S3 bucket behind CloudFront
+ * with OAC, clean URLs, security headers, an optional custom domain, and an
+ * optional contact-form endpoint (Lambda Function URL → SES, CloudFront-fronted).
+ *
+ * @example
+ * app.addPattern(PatternFactory.build("LbexcSite", {
+ *   type: "staticsite",
+ *   name: "lbexc",
+ *   source: "../../lbexc-static-export",
+ *   build: { command: "npm run build", outputDir: "out" },
+ *   routing: "multipage",
+ *   security: { headers: true },
+ *   domain: "lbexc.com",
+ *   forms: { to: "hello@lbexc.com", corsOrigin: "https://lbexc.com" }
+ * }));
+ */
+export interface IStaticSiteProps {
+    /** Pattern type discriminator */
+    type: "staticsite";
+    /** Pattern name (used for resource naming) */
+    name: string;
+    /** Repo root the build runs in and assets are uploaded from. */
+    source: string;
+    /** Build command + output directory (single source of truth). */
+    build: StaticSiteBuildConfig;
+    /** "multipage" (clean-URL `.html` rewriting) or "spa". Default: "multipage". */
+    routing?: StaticSiteRouting;
+    /** Security-header configuration. */
+    security?: StaticSiteSecurityConfig;
+    /** Custom domain (same machinery as payload). Required when `forms` is set. */
+    domain?: string;
+    /** Import zone and cert from a managed domain stack instead of creating inline */
+    managedDomain?: ManagedDomainExports;
+    /** Optional contact-form endpoint (Lambda → SES). Requires `domain`. */
+    forms?: StaticSiteFormsConfig;
+    /** CDN configuration - for advanced per-path overrides. */
+    cdn?: StaticSiteCdnConfig;
+}
 /**
  * Union of all pattern props.
  * Extend this when adding new patterns (e.g., INextjsProps, IRemixProps).
  */
-export type IPatternProps = IPayloadProps;
+export type IPatternProps = IPayloadProps | IStaticSiteProps;
 /**
- * Pattern type discriminator.
+ * Pattern type discriminator. The vocabulary is owned by `@fjall/util` and
+ * shared with the generator, the deploy manifest and the CLI — see
+ * `PATTERN_REGISTRY` there, which is what forces a new pattern to declare its
+ * stack placement and construct id rather than inheriting whichever branch
+ * happened to be the `else`.
+ *
+ * Note the vocabulary is wider than `IPatternProps`: `nextjs` is declared in
+ * `PATTERN_REGISTRY` but has no construct, so it is deliberately absent from the
+ * union above and `PatternFactory.build` will not accept it — the omission here
+ * is the single enforcement of that gap.
  */
-export type PatternType = "payload";
+export type { PatternType };
 /**
  * Base pattern interface.
  * All patterns implement this interface.
@@ -391,15 +499,36 @@ export interface IPayload extends IPattern {
     /** Get the CloudFront distribution */
     getCdn(): Cdn;
 }
+/**
+ * Static-site pattern interface.
+ * Provides access to the underlying resources for escape hatches.
+ *
+ * @example
+ * site.getBucket().getBucket().addLifecycleRule({ ... });
+ * site.getCdn().getDistribution().addBehavior("/custom/*", customOrigin);
+ */
+export interface IStaticSite extends IPattern {
+    readonly patternType: "staticsite";
+    /** Get the private S3 origin bucket */
+    getBucket(): Storage;
+    /** Get the CloudFront distribution */
+    getCdn(): Cdn;
+    /** Get the contact-form Lambda (undefined when `forms` is not configured) */
+    getFormsFunction(): LambdaFunction | undefined;
+}
 /**
  * Union type representing any pattern interface.
  * Use with type guards for generic handling.
  */
-export type AnyPattern = IPayload;
+export type AnyPattern = IPayload | IStaticSite;
 /**
  * Type guard to check if a pattern is Payload.
  */
 export declare function isPayloadPattern(pattern: IPattern): pattern is IPayload;
+/**
+ * Type guard to check if a pattern is a static site.
+ */
+export declare function isStaticSitePattern(pattern: IPattern): pattern is IStaticSite;
 /**
  * Type guard to check if a resource is any pattern type.
  */

package/dist/lib/patterns/aws/interfaces/pattern.js

@@ -20,6 +20,12 @@
 export function isPayloadPattern(pattern) {
     return pattern.patternType === "payload";
 }
+/**
+ * Type guard to check if a pattern is a static site.
+ */
+export function isStaticSitePattern(pattern) {
+    return pattern.patternType === "staticsite";
+}
 /**
  * Type guard to check if a resource is any pattern type.
  */

package/dist/lib/patterns/aws/managedAccount.d.ts

@@ -0,0 +1,9 @@
+import { Stack, type StackProps } from "aws-cdk-lib";
+import { type Construct } from "constructs";
+export interface ManagedAccountProps extends StackProps {
+    accountId: string;
+    region: string;
+}
+export declare class ManagedAccount extends Stack {
+    constructor(scope: Construct, id: string, props: ManagedAccountProps);
+}

package/dist/lib/patterns/aws/managedAccount.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedAccount = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_1 = require("../../config/aws");
+const cloudTrail_1 = require("../../config/aws/cloudTrail");
+const getConfig_1 = require("../../utils/getConfig");
+const disasterRecovery_1 = require("../../config/aws/disasterRecovery");
+const util_1 = require("@fjall/util");
+class ManagedAccount extends aws_cdk_lib_1.Stack {
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        const organisation = new aws_1.OrganisationId(this, "OrganisationId");
+        const account = new aws_1.AccountId(this, "AccountId");
+        const eventBus = new aws_1.DefaultEventBus(this, "EventBus");
+        if (id === "ManagedAccount") {
+            new aws_1.IpamPoolId(this, "IpamPoolId", {
+                accountId: props.accountId,
+                region: props.region,
+                ownerId: organisation.organisationAccountArn.value.split(":")[4]
+            });
+        }
+        new cloudTrail_1.ManagementEventsTrail(this, "CloudTrail", {
+            accountId: account.accountId.value,
+            region: props.region
+        });
+        new aws_1.EcrDefaultImage(this, "EcrDefaultImage", {
+            region: props.region,
+            accountId: account.accountId.value,
+            eventBusArn: eventBus.defaultEventBusArn.value
+        });
+        const config = (0, getConfig_1.getConfig)();
+        const environment = config.environment || "unknown";
+        const _fjallConfig = util_1.Config.loadConfig();
+        const isComplianceAccount = environment === "compliance";
+        const isReplicationRegion = config.disasterRecoveryRegion &&
+            props.region === config.disasterRecoveryRegion;
+        if (environment === "production" ||
+            isComplianceAccount ||
+            isReplicationRegion) {
+            new disasterRecovery_1.DisasterRecovery(this, "DisasterRecovery", {
+                region: props.region,
+                accountId: props.accountId
+            });
+        }
+        new aws_cdk_lib_1.CfnOutput(this, "Environment", {
+            key: "Environment",
+            value: environment,
+            exportName: "Environment",
+            description: "Environment type for this account (e.g., production, staging, development)"
+        });
+    }
+}
+exports.ManagedAccount = ManagedAccount;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/patterns/aws/managedIdentityCenter.d.ts

@@ -0,0 +1,4 @@
+import { Stack } from "aws-cdk-lib";
+export declare class ManagedIdentityCenter extends Stack {
+    constructor(id: string);
+}

package/dist/lib/patterns/aws/managedIdentityCenter.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedIdentityCenter = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const fs = require("fs");
+const app_1 = require("../../app");
+const identityCenterGroupMembership_1 = require("../../config/aws/identityCenterGroupMembership");
+class ManagedIdentityCenter extends aws_cdk_lib_1.Stack {
+    constructor(id) {
+        super(app_1.default.getInstance(), id);
+        const configFile = fs.readFileSync("../identity-center-config.json", {
+            encoding: "utf8"
+        });
+        const identityCenterConfig = JSON.parse(configFile);
+        identityCenterConfig.forEach((config) => {
+            new identityCenterGroupMembership_1.IdentityCenterGroupMembership(this, `Managed${config.group}Group`, {
+                groupName: config.group,
+                groupMembers: config.members
+            });
+        });
+    }
+}
+exports.ManagedIdentityCenter = ManagedIdentityCenter;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/patterns/aws/managedOrganisation.d.ts

@@ -0,0 +1,36 @@
+import { type Environment, Stack, type StackProps } from "aws-cdk-lib";
+import { type ICostAllocationTags } from "../../config/aws/costAllocationTags";
+import { type Account } from "@aws-sdk/client-organizations";
+type ExtendedStackProps = Omit<StackProps, "env"> & {
+    env: Required<Pick<Environment, "region" | "account">> & Partial<Omit<Environment, "region" | "account">>;
+};
+type AccountsConfig = {
+    readonly [key: string]: readonly string[] | string;
+};
+interface ManagedOrganisationProps extends ExtendedStackProps {
+    organisationName: string;
+    accounts: AccountsConfig;
+    orgEmail: string;
+    existingAccounts?: Account[];
+    costAllocationTags: ICostAllocationTags[];
+    identityCenter?: boolean;
+    backupSettings?: {
+        enableCrossAccountBackup?: boolean;
+        enableDelegatedAdministrator?: boolean;
+        enableMpa?: boolean;
+    };
+}
+export declare class ManagedOrganisation extends Stack {
+    private organisation;
+    constructor(id: string, props: ManagedOrganisationProps);
+    private createOrganisation;
+    private setupOrganisationFeatures;
+    private getPlatformAccountId;
+    private setupIpamDelegation;
+    private enableRamSharing;
+    private enableTrustedAccess;
+    private enableCostAllocationTags;
+    private setupIdentityCenter;
+    private setupBackupGlobalSettings;
+}
+export {};

package/dist/lib/patterns/aws/managedOrganisation.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedOrganisation = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const app_1 = require("../../app");
+const backupGlobalSettings_1 = require("../../config/aws/backupGlobalSettings");
+const identityCenter_1 = require("../../config/aws/identityCenter");
+const ipamDelegateAdmin_1 = require("../../config/aws/ipamDelegateAdmin");
+const ramSharing_1 = require("../../config/aws/ramSharing");
+const costAllocationTags_1 = require("../../config/aws/costAllocationTags");
+const organisation_1 = require("../../config/aws/organisation");
+const organisationsAccess_1 = require("../../config/aws/organisationsAccess");
+class ManagedOrganisation extends aws_cdk_lib_1.Stack {
+    constructor(id, props) {
+        super(app_1.default.getInstance(), id, props);
+        this.createOrganisation(props);
+        this.setupOrganisationFeatures({
+            ...props,
+            identityCenter: props.identityCenter ?? true
+        });
+    }
+    createOrganisation(props) {
+        this.organisation = new organisation_1.default(this, "ManagedOrganisation", {
+            organisationName: props.organisationName,
+            accounts: props.accounts,
+            orgEmail: props.orgEmail,
+            env: props.env,
+            existingAccounts: props.existingAccounts
+        });
+    }
+    setupOrganisationFeatures(props) {
+        const orgAccounts = this.organisation.getAccounts();
+        const platformAccountId = this.getPlatformAccountId(orgAccounts, props);
+        this.setupIpamDelegation(platformAccountId);
+        this.enableRamSharing();
+        this.enableTrustedAccess(props);
+        this.enableCostAllocationTags(props);
+        this.setupIdentityCenter(orgAccounts, props);
+        this.setupBackupGlobalSettings(props);
+    }
+    getPlatformAccountId(orgAccounts, props) {
+        const platformEntry = Object.entries(props.accounts).find(([key]) => key.toLowerCase() === "platform");
+        if (!platformEntry) {
+            throw new Error('No platform account found. Please include a "platform" key in your accounts configuration.');
+        }
+        const account = platformEntry[1];
+        const platformAccount = Array.isArray(account) ? account[0] : account;
+        const platformAccountId = orgAccounts[platformAccount];
+        if (!platformAccountId) {
+            throw new Error(`Platform account ID not found for account name: ${platformAccount}`);
+        }
+        return platformAccountId;
+    }
+    setupIpamDelegation(platformAccountId) {
+        new ipamDelegateAdmin_1.IpamDelegateAdmin(this, "IpamDelegateAdmin", {
+            accountId: platformAccountId
+        });
+    }
+    enableRamSharing() {
+        new ramSharing_1.RamSharing(this, "RamSharing");
+    }
+    enableTrustedAccess(props) {
+        new organisationsAccess_1.ActivateOrganisationsAccess(this, "ActivateOrganisationsAccess", {
+            account: props.env.account,
+            region: props.env.region
+        });
+    }
+    enableCostAllocationTags(props) {
+        if (props.costAllocationTags.length > 0) {
+            new costAllocationTags_1.CostAllocationTags(this, "CostAllocationTags", {
+                costAllocationTags: props.costAllocationTags
+            });
+        }
+    }
+    setupIdentityCenter(orgAccounts, props) {
+        if (props.identityCenter) {
+            new identityCenter_1.IdentityCenter(this, "IdentityCenter", {
+                accounts: orgAccounts
+            });
+        }
+    }
+    setupBackupGlobalSettings(props) {
+        const defaultSettings = {
+            enableCrossAccountBackup: true,
+            enableDelegatedAdministrator: true,
+            enableMpa: false
+        };
+        const settings = { ...defaultSettings, ...props.backupSettings };
+        new backupGlobalSettings_1.BackupGlobalSettings(this, "BackupGlobalSettings", {
+            account: props.env.account,
+            region: props.env.region,
+            ...settings
+        });
+    }
+}
+exports.ManagedOrganisation = ManagedOrganisation;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/patterns/aws/managedPlatform.d.ts

@@ -0,0 +1,12 @@
+import { type Construct } from "constructs";
+import { ManagedAccount, type ManagedAccountProps } from "./managedAccount";
+type AccountsConfig = {
+    readonly [key: string]: readonly string[] | string;
+};
+interface ManagedPlatformProps extends ManagedAccountProps {
+    accounts: AccountsConfig;
+}
+export declare class ManagedPlatform extends ManagedAccount {
+    constructor(scope: Construct, id: string, props: ManagedPlatformProps);
+}
+export {};

package/dist/lib/patterns/aws/managedPlatform.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedPlatform = void 0;
+const ipam_1 = require("../../config/aws/ipam");
+const ipamPool_1 = require("../../resources/aws/networking/ipamPool");
+const managedAccount_1 = require("./managedAccount");
+const getConfig_1 = require("../../utils/getConfig");
+class ManagedPlatform extends managedAccount_1.ManagedAccount {
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        // Get all configured regions
+        const config = (0, getConfig_1.getConfig)();
+        const allRegions = config.allRegions.length > 0 ? config.allRegions : [props.region]; // Fallback to at least the deployment region
+        // Create IPAM with all regions configured
+        const ipam = new ipam_1.Ipam(this, "Ipam", {
+            regions: allRegions
+        });
+        // Convert accounts to flat array for IpamPool
+        const orgAccounts = Object.values(props.accounts).flatMap((account) => Array.isArray(account) ? account : [account]);
+        // Create IPAM pool hierarchy for all regions
+        new ipamPool_1.IpamPool(this, "IpamPool", {
+            orgAccounts,
+            regions: allRegions,
+            ipamScope: ipam.privateDefaultScopeId
+        });
+    }
+}
+exports.ManagedPlatform = ManagedPlatform;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/patterns/aws/pattern.d.ts

@@ -31,9 +31,19 @@
  * payload.getServer().getLambdaFunction().addEnvironment("CUSTOM", "value");
  */
 import { type Construct } from "constructs";
+import { type PatternStackPlacement } from "@fjall/util";
 import type App from "../../app.js";
 import { Payload } from "./payload.js";
-import { type IPayloadProps, type IPatternProps, type AnyPattern } from "./interfaces/pattern.js";
+import { StaticSite } from "./staticSite.js";
+import { type IPayloadProps, type IStaticSiteProps, type IPatternProps, type AnyPattern } from "./interfaces/pattern.js";
+/**
+ * A pattern factory thunk. Carries a `stackPlacement` so `addPattern` can route
+ * the pattern node to the CDN stack (static site — no VPC or compute) rather
+ * than the compute stack (payload). Mirrors `StorageFactoryFn`.
+ */
+export type PatternFactoryFn<T extends AnyPattern = AnyPattern> = ((app: App, scope: Construct) => T) & {
+    stackPlacement?: PatternStackPlacement;
+};
 /**
  * Factory for creating high-level infrastructure patterns.
  *
@@ -56,12 +66,17 @@ export declare class PatternFactory {
      * @param props - Payload pattern configuration
      * @returns Factory function to create the pattern
      */
-    static build(id: string, props: IPayloadProps): (app: App, scope: Construct) => Payload;
+    static build(id: string, props: IPayloadProps): PatternFactoryFn<Payload>;
+    /**
+     * Build a static-site pattern (private S3 + CloudFront/OAC, optional forms).
+     */
+    static build(id: string, props: IStaticSiteProps): PatternFactoryFn<StaticSite>;
     /**
      * Generic build method (implementation signature).
      */
-    static build(id: string, props: IPatternProps): (app: App, scope: Construct) => AnyPattern;
+    static build(id: string, props: IPatternProps): PatternFactoryFn;
 }
 export { Payload };
-export type { IPayloadProps, IPatternProps, AnyPattern, IPayload, PayloadDatabaseConfig, PayloadComputeConfig, PayloadCdnConfig } from "./interfaces/pattern.js";
-export { isPayloadPattern, isPattern } from "./interfaces/pattern.js";
+export { StaticSite };
+export type { IPayloadProps, IStaticSiteProps, IPatternProps, PatternType, AnyPattern, IPayload, IStaticSite, PayloadDatabaseConfig, PayloadComputeConfig, PayloadCdnConfig, StaticSiteBuildConfig, StaticSiteSecurityConfig, StaticSiteFormsConfig, StaticSiteCdnConfig } from "./interfaces/pattern.js";
+export { isPayloadPattern, isStaticSitePattern, isPattern } from "./interfaces/pattern.js";

package/dist/lib/patterns/aws/pattern.js

@@ -30,7 +30,9 @@
  * payload.getDatabase().grantConnect(otherLambda);
  * payload.getServer().getLambdaFunction().addEnvironment("CUSTOM", "value");
  */
+import { PATTERN_REGISTRY } from "@fjall/util";
 import { Payload } from "./payload.js";
+import { StaticSite } from "./staticSite.js";
 /**
  * Factory for creating high-level infrastructure patterns.
  *
@@ -43,21 +45,25 @@ export class PatternFactory {
      * Routes to specific pattern implementations based on type discriminator.
      */
     static build(id, props) {
-        return (app, scope) => {
-            const { type } = props;
-            switch (type) {
+        const fn = (app, scope) => {
+            switch (props.type) {
                 case "payload":
                     return new Payload(scope, id, app, props);
+                case "staticsite":
+                    return new StaticSite(scope, id, app, props);
                 default: {
                     // Exhaustive check ensures all pattern types are handled
-                    const _exhaustive = type;
-                    throw new Error(`Unsupported pattern type: ${String(_exhaustive)}`);
+                    const _exhaustive = props;
+                    throw new Error(`Unsupported pattern type: ${String(_exhaustive.type)}`);
                 }
             }
         };
+        fn.stackPlacement = PATTERN_REGISTRY[props.type].stackPlacement;
+        return fn;
     }
 }
 // Re-export types for convenience
 export { Payload };
+export { StaticSite };
 // Re-export type guards
-export { isPayloadPattern, isPattern } from "./interfaces/pattern.js";
+export { isPayloadPattern, isStaticSitePattern, isPattern } from "./interfaces/pattern.js";

package/dist/lib/patterns/aws/staticSite.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Static-site Pattern.
+ *
+ * Serves a pre-built folder of files from a private S3 bucket behind CloudFront
+ * (OAC), with clean URLs, security headers, an optional custom domain, and an
+ * optional contact-form endpoint (Lambda Function URL → SES, CloudFront-fronted).
+ *
+ * Resources created:
+ * - Private S3 bucket + BucketDeployment (asset upload)
+ * - CloudFront distribution (OAC, clean-URL function, security-headers policy)
+ * - ACM certificate + Route53 alias record (when `domain` is set)
+ * - Contact-form Lambda + Function URL (when `forms` is set)
+ *
+ * @example
+ * const site = app.addPattern(PatternFactory.build("LbexcSite", {
+ *   type: "staticsite",
+ *   name: "lbexc",
+ *   source: "../../lbexc-static-export",
+ *   build: { command: "npm run build", outputDir: "out" },
+ *   routing: "multipage",
+ *   security: { headers: true },
+ *   domain: "lbexc.com",
+ *   forms: { to: "hello@lbexc.com", corsOrigin: "https://lbexc.com" }
+ * }));
+ */
+import { Construct } from "constructs";
+import type App from "../../app.js";
+import { type IStaticSiteProps, type IStaticSite } from "./interfaces/pattern.js";
+import { type Storage } from "./storage.js";
+import { type Cdn } from "./cdn.js";
+import { LambdaFunction } from "../../resources/aws/compute/index.js";
+/**
+ * Static-site pattern implementation.
+ */
+export declare class StaticSite extends Construct implements IStaticSite {
+    readonly patternType: "staticsite";
+    private readonly app;
+    private readonly props;
+    private readonly pascalName;
+    private _bucket;
+    private _cdn;
+    private _formsFunction?;
+    private _headersPolicy?;
+    private _resolvedDomain;
+    constructor(scope: Construct, id: string, app: App, props: IStaticSiteProps);
+    private registerManifest;
+    private validateProps;
+    private createBucketAndDeployment;
+    private createFormsEndpoint;
+    private createCdn;
+    private buildBehaviours;
+    private resolveDomainConfig;
+    private resolveSimpleDomain;
+    private createDnsRecord;
+    private exportPatternOutputs;
+    getBucket(): Storage;
+    getCdn(): Cdn;
+    getFormsFunction(): LambdaFunction | undefined;
+}