@lambdaimg/alchemy 0.1.0

package/README.md

@@ -0,0 +1,26 @@
+# @lambdaimg/alchemy
+
+AWS Alchemy stack for LambdaImg.
+
+```ts
+import { ImagesStack } from "@lambdaimg/alchemy";
+import * as Alchemy from "alchemy";
+import * as AWS from "alchemy/AWS";
+import * as Effect from "effect/Effect";
+
+export default Alchemy.Stack(
+  "images",
+  {
+    providers: AWS.providers(),
+    state: AWS.state(),
+  },
+  Effect.gen(function* () {
+    return yield* ImagesStack("Images", {
+      domain: "images.example.com",
+      hostedZoneId: "Z0000000000000",
+    });
+  }),
+);
+```
+
+This package is AWS Lambda only. LambdaImg uses Sharp native binaries for WebP generation, so Cloudflare Workers are intentionally out of scope.

package/dist/images-bucket.d.ts

@@ -0,0 +1,5 @@
+import * as S3 from "alchemy/AWS/S3";
+import { Stack } from "alchemy/Stack";
+import * as Effect from "effect/Effect";
+export declare const imagesBucket: Effect.Effect<S3.Bucket, never, import("alchemy/AWS/Providers").Providers | Stack>;
+//# sourceMappingURL=images-bucket.d.ts.map

package/dist/images-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"images-bucket.d.ts","sourceRoot":"","sources":["../src/images-bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,eAAO,MAAM,YAAY,oFAYvB,CAAC"}

package/dist/images-bucket.js

@@ -0,0 +1,16 @@
+import * as S3 from "alchemy/AWS/S3";
+import { Stack } from "alchemy/Stack";
+import * as Effect from "effect/Effect";
+export const imagesBucket = Effect.gen(function* () {
+    const stack = yield* Stack;
+    return yield* S3.Bucket("ImagesBucket", {
+        forceDestroy: stack.stage === "dev",
+        publicAccessBlock: {
+            blockPublicAcls: true,
+            ignorePublicAcls: true,
+            blockPublicPolicy: true,
+            restrictPublicBuckets: true,
+        },
+    });
+});
+//# sourceMappingURL=images-bucket.js.map

package/dist/images-bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"images-bucket.js","sourceRoot":"","sources":["../src/images-bucket.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAE3B,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;QACtC,YAAY,EAAE,KAAK,CAAC,KAAK,KAAK,KAAK;QACnC,iBAAiB,EAAE;YACjB,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,iBAAiB,EAAE,IAAI;YACvB,qBAAqB,EAAE,IAAI;SAC5B;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { ImagesStack, type ImagesStackProps } from "./stack.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { ImagesStack } from "./stack.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAyB,MAAM,YAAY,CAAC"}

package/dist/resize-function.d.ts

@@ -0,0 +1,11 @@
+import * as AWS from "alchemy/AWS";
+import * as Effect from "effect/Effect";
+import { HttpServerRequest } from "effect/unstable/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+declare const ImagesResize_base: Effect.Effect<AWS.Lambda.Function & import("alchemy").Rpc<ImagesResize>, never, any> & import("alchemy").Named<"ImagesResize"> & (new (_: never) => {
+    fetch: Effect.Effect<HttpServerResponse.HttpServerResponse, never, HttpServerRequest>;
+} & import("alchemy").Named<"ImagesResize"> & import("alchemy/Named").Tag<"AWS.Lambda.Function">);
+export default class ImagesResize extends ImagesResize_base {
+}
+export {};
+//# sourceMappingURL=resize-function.d.ts.map

package/dist/resize-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resize-function.d.ts","sourceRoot":"","sources":["../src/resize-function.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAGnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,KAAK,kBAAkB,MAAM,yCAAyC,CAAC;;;;AAgB9E,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,iBAmGzC;CAAG"}

package/dist/resize-function.js

@@ -0,0 +1,94 @@
+import { NOT_FOUND_CACHE_CONTROL, RESIZED_CACHE_CONTROL, WEBP_CONTENT_TYPE, parseResizedPath, } from "@lambdaimg/core";
+import * as AWS from "alchemy/AWS";
+import * as S3 from "alchemy/AWS/S3";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { HttpServerRequest } from "effect/unstable/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/unstable/http/HttpServerResponse";
+import { imagesBucket } from "./images-bucket.js";
+import { resizeToWebp } from "./resize.js";
+function collectBodyBytes(chunks) {
+    const parts = Array.from(chunks);
+    const total = parts.reduce((sum, chunk) => sum + chunk.length, 0);
+    const output = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of parts) {
+        output.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return output;
+}
+export default class ImagesResize extends AWS.Lambda.Function()("ImagesResize", {
+    main: import.meta.filename,
+    url: { authType: "AWS_IAM" },
+    timeout: Duration.seconds(30),
+    runtime: "nodejs24.x",
+    architecture: "arm64",
+    memorySize: 2048,
+    build: {
+        install: ["sharp", "heic-convert"],
+    },
+}, Effect.gen(function* () {
+    const bucket = yield* imagesBucket;
+    const getObject = yield* S3.GetObject.bind(bucket);
+    const putObject = yield* S3.PutObject.bind(bucket);
+    return {
+        fetch: Effect.gen(function* () {
+            const request = yield* HttpServerRequest;
+            const parsed = parseResizedPath(new URL(request.originalUrl).pathname);
+            if (!parsed) {
+                return HttpServerResponse.text("Not Found", {
+                    status: 404,
+                    headers: { "cache-control": NOT_FOUND_CACHE_CONTROL },
+                });
+            }
+            const cached = yield* getObject({ Key: parsed.resizedKey }).pipe(Effect.catchTag("NoSuchKey", () => Effect.succeed(undefined)));
+            if (cached?.Body) {
+                const cachedBytes = yield* Stream.runCollect(cached.Body).pipe(Effect.map(collectBodyBytes));
+                return HttpServerResponse.uint8Array(cachedBytes, {
+                    headers: {
+                        "content-type": WEBP_CONTENT_TYPE,
+                        "cache-control": RESIZED_CACHE_CONTROL,
+                    },
+                });
+            }
+            const object = yield* getObject({ Key: parsed.originalKey }).pipe(Effect.catchTag("NoSuchKey", () => Effect.succeed(undefined)));
+            if (!object?.Body) {
+                return HttpServerResponse.text("Not Found", {
+                    status: 404,
+                    headers: { "cache-control": NOT_FOUND_CACHE_CONTROL },
+                });
+            }
+            const sourceBytes = yield* Stream.runCollect(object.Body).pipe(Effect.map(collectBodyBytes));
+            const resizeResult = yield* Effect.tryPromise({
+                try: () => resizeToWebp(sourceBytes, parsed.width, {
+                    originalKey: parsed.originalKey,
+                }),
+                catch: (cause) => cause,
+            }).pipe(Effect.match({
+                onFailure: () => ({ ok: false }),
+                onSuccess: (webp) => ({ ok: true, webp }),
+            }));
+            if (!resizeResult.ok) {
+                return HttpServerResponse.text("Bad Request", { status: 400 });
+            }
+            const { webp } = resizeResult;
+            yield* putObject({
+                Key: parsed.resizedKey,
+                Body: webp,
+                ContentType: WEBP_CONTENT_TYPE,
+                CacheControl: RESIZED_CACHE_CONTROL,
+            });
+            return HttpServerResponse.uint8Array(webp, {
+                headers: {
+                    "content-type": WEBP_CONTENT_TYPE,
+                    "cache-control": RESIZED_CACHE_CONTROL,
+                },
+            });
+        }).pipe(Effect.catchCause(() => Effect.succeed(HttpServerResponse.text("Internal Server Error", { status: 500 })))),
+    };
+}).pipe(Effect.provide(Layer.mergeAll(S3.GetObjectLive, S3.PutObjectLive)))) {
+}
+//# sourceMappingURL=resize-function.js.map

package/dist/resize-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resize-function.js","sourceRoot":"","sources":["../src/resize-function.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,KAAK,kBAAkB,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,SAAS,gBAAgB,CAAC,MAA4B;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAgB,CAC3E,cAAc,EACd;IACE,IAAI,EAAE,OAAO,IAAI,CAAC,QAAQ;IAC1B,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;IAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,OAAO,EAAE,YAAY;IACrB,YAAY,EAAE,OAAO;IACrB,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;KACnC;CACF,EACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE;oBAC1C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,eAAe,EAAE,uBAAuB,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC9D,CAAC;YAEF,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAC7B,CAAC;gBACF,OAAO,kBAAkB,CAAC,UAAU,CAAC,WAAW,EAAE;oBAChD,OAAO,EAAE;wBACP,cAAc,EAAE,iBAAiB;wBACjC,eAAe,EAAE,qBAAqB;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC9D,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;gBAClB,OAAO,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE;oBAC1C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,eAAe,EAAE,uBAAuB,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAC7B,CAAC;YAEF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC5C,GAAG,EAAE,GAAG,EAAE,CACR,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE;oBACtC,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC;gBACJ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;aACxB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;gBACX,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,CAAC;gBACzC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,CAAC;aACnD,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC;YAE9B,KAAK,CAAC,CAAC,SAAS,CAAC;gBACf,GAAG,EAAE,MAAM,CAAC,UAAU;gBACtB,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,iBAAiB;gBAC9B,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;YAEH,OAAO,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE;gBACzC,OAAO,EAAE;oBACP,cAAc,EAAE,iBAAiB;oBACjC,eAAe,EAAE,qBAAqB;iBACvC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CACrB,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAClF,CACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAC5E;CAAG"}

package/dist/resize.d.ts

@@ -0,0 +1,5 @@
+export interface ResizeToWebpOptions {
+    originalKey?: string;
+}
+export declare function resizeToWebp(input: Uint8Array | Buffer, width: number, options?: ResizeToWebpOptions): Promise<Uint8Array>;
+//# sourceMappingURL=resize.d.ts.map

package/dist/resize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resize.d.ts","sourceRoot":"","sources":["../src/resize.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,UAAU,GAAG,MAAM,EAC1B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/resize.js

@@ -0,0 +1,29 @@
+import { createRequire } from "node:module";
+import sharp from "sharp";
+const HEIC_EXTENSION_RE = /\.(?:heic|heif)$/i;
+const require = createRequire(import.meta.url);
+const heicConvert = require("heic-convert");
+export async function resizeToWebp(input, width, options = {}) {
+    try {
+        return await resizeSharpInputToWebp(input, width);
+    }
+    catch (error) {
+        if (!options.originalKey || !HEIC_EXTENSION_RE.test(options.originalKey)) {
+            throw error;
+        }
+        const png = await heicConvert({
+            buffer: Buffer.from(input),
+            format: "PNG",
+        });
+        return await resizeSharpInputToWebp(Buffer.from(png), width);
+    }
+}
+async function resizeSharpInputToWebp(input, width) {
+    const output = await sharp(input)
+        .rotate()
+        .resize({ width, withoutEnlargement: true })
+        .webp()
+        .toBuffer();
+    return new Uint8Array(output);
+}
+//# sourceMappingURL=resize.js.map

package/dist/resize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resize.js","sourceRoot":"","sources":["../src/resize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAGrB,CAAC;AAMtB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAA0B,EAC1B,KAAa,EACb,OAAO,GAAwB,EAAE;IAEjC,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO,MAAM,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAA0B,EAC1B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;SAC9B,MAAM,EAAE;SACR,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;SAC3C,IAAI,EAAE;SACN,QAAQ,EAAE,CAAC;IACd,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/stack.d.ts

@@ -0,0 +1,14 @@
+import * as Output from "alchemy/Output";
+import * as Effect from "effect/Effect";
+export interface ImagesStackProps {
+    domain: string;
+    hostedZoneId: string;
+}
+export declare const ImagesStack: (id: string, props: ImagesStackProps) => Effect.Effect<{
+    domain: string;
+    url: Output.Output<string, unknown>;
+    distributionDomain: Output.Output<string, never>;
+    resizeFunctionUrl: Output.Output<string | undefined, never>;
+    bucketName: Output.Output<string, never>;
+}, never, any>;
+//# sourceMappingURL=stack.d.ts.map

package/dist/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AA2BxC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,WAAW,OAAQ,MAAM,SAAS,gBAAgB;;;;;;cA0J3D,CAAC"}

package/dist/stack.js

@@ -0,0 +1,170 @@
+import { ALLOWED_IMAGE_WIDTHS } from "@lambdaimg/core";
+import * as AWS from "alchemy/AWS";
+import * as Output from "alchemy/Output";
+import * as Effect from "effect/Effect";
+import { imagesBucket } from "./images-bucket.js";
+import ImagesResize from "./resize-function.js";
+const CLOUDFRONT_ORIGIN_DEFAULTS = {
+    originPath: "",
+    customHeaders: {},
+    originShield: { enabled: false },
+    connectionAttempts: 3,
+    connectionTimeout: 10,
+};
+// CloudFront update calls require fully materialized origin/behavior blocks.
+// These values mirror CloudFront defaults so Alchemy updates remain stable.
+const CLOUDFRONT_BEHAVIOR_DEFAULTS = {
+    smoothStreaming: false,
+    fieldLevelEncryptionId: "",
+    trustedSigners: [],
+    trustedKeyGroups: [],
+    functionAssociations: [],
+    lambdaFunctionAssociations: [],
+};
+export const ImagesStack = (id, props) => Effect.gen(function* () {
+    const bucket = yield* imagesBucket;
+    const { accountId } = yield* AWS.AWSEnvironment.current;
+    const s3Oac = yield* AWS.CloudFront.OriginAccessControl(`${id}S3Oac`, {
+        originType: "s3",
+        description: "Images bucket origin access control",
+    });
+    const lambdaOac = yield* AWS.CloudFront.OriginAccessControl(`${id}LambdaOac`, {
+        originType: "lambda",
+        description: "Images resize Lambda function URL origin access control",
+    });
+    const resize = yield* ImagesResize;
+    const certificate = yield* AWS.ACM.Certificate(`${id}Cert`, {
+        domainName: props.domain,
+        hostedZoneId: props.hostedZoneId,
+    });
+    const longTtlCachePolicy = yield* AWS.CloudFront.CachePolicy(`${id}LongTtlCache`, {
+        name: `${id}-long-ttl`,
+        minTTL: 31536000,
+        defaultTTL: 31536000,
+        maxTTL: 31536000,
+        parametersInCacheKeyAndForwardedToOrigin: {
+            CookiesConfig: { CookieBehavior: "none" },
+            HeadersConfig: { HeaderBehavior: "none" },
+            QueryStringsConfig: { QueryStringBehavior: "none" },
+            EnableAcceptEncodingGzip: true,
+            EnableAcceptEncodingBrotli: true,
+        },
+    });
+    const lambdaOriginDomain = Output.map(resize.functionUrl, (functionUrl) => {
+        if (!functionUrl) {
+            throw new Error("ImagesResize function URL is required");
+        }
+        return new URL(functionUrl).hostname;
+    });
+    const distribution = yield* AWS.CloudFront.Distribution(`${id}Cdn`, {
+        aliases: [props.domain],
+        priceClass: "PriceClass_All",
+        httpVersion: "http2and3",
+        logging: { enabled: false },
+        defaultRootObject: "",
+        webAclId: "",
+        originGroups: [
+            {
+                id: "resized",
+                members: ["s3", "lambda"],
+                failoverStatusCodes: [403, 404],
+            },
+        ],
+        staging: false,
+        origins: [
+            {
+                ...CLOUDFRONT_ORIGIN_DEFAULTS,
+                id: "s3",
+                domainName: bucket.bucketRegionalDomainName,
+                s3Origin: true,
+                originAccessControlId: s3Oac.originAccessControlId,
+            },
+            {
+                ...CLOUDFRONT_ORIGIN_DEFAULTS,
+                id: "lambda",
+                domainName: lambdaOriginDomain,
+                originAccessControlId: lambdaOac.originAccessControlId,
+                customOriginConfig: {
+                    originProtocolPolicy: "https-only",
+                    originReadTimeout: 30,
+                    originKeepaliveTimeout: 5,
+                },
+            },
+        ],
+        defaultCacheBehavior: {
+            ...CLOUDFRONT_BEHAVIOR_DEFAULTS,
+            targetOriginId: "s3",
+            viewerProtocolPolicy: "redirect-to-https",
+            compress: true,
+            allowedMethods: ["GET", "HEAD"],
+            cachedMethods: ["GET", "HEAD"],
+            cachePolicyId: longTtlCachePolicy.cachePolicyId,
+        },
+        orderedCacheBehaviors: ALLOWED_IMAGE_WIDTHS.map((width) => ({
+            ...CLOUDFRONT_BEHAVIOR_DEFAULTS,
+            pathPattern: `/_/w${width}/*`,
+            targetOriginId: "resized",
+            viewerProtocolPolicy: "redirect-to-https",
+            compress: true,
+            allowedMethods: ["GET", "HEAD"],
+            cachedMethods: ["GET", "HEAD"],
+            cachePolicyId: longTtlCachePolicy.cachePolicyId,
+        })),
+        customErrorResponses: [],
+        viewerCertificate: {
+            acmCertificateArn: certificate.certificateArn,
+            sslSupportMethod: "sni-only",
+            minimumProtocolVersion: "TLSv1.2_2021",
+        },
+    });
+    yield* AWS.Lambda.Permission(`${id}ResizeCloudFront`, {
+        action: "lambda:InvokeFunctionUrl",
+        functionName: resize.functionArn,
+        principal: "cloudfront.amazonaws.com",
+        sourceArn: distribution.distributionArn,
+        functionUrlAuthType: "AWS_IAM",
+    });
+    yield* AWS.Lambda.Permission(`${id}ResizeCloudFrontInvokeFunction`, {
+        action: "lambda:InvokeFunction",
+        functionName: resize.functionArn,
+        principal: "cloudfront.amazonaws.com",
+        sourceArn: distribution.distributionArn,
+        invokedViaFunctionUrl: true,
+    });
+    // Avoid a Bucket -> Distribution -> Lambda -> Bucket dependency cycle by
+    // scoping OAC access to CloudFront distributions in the same AWS account.
+    yield* bucket.bind `AWS.S3.Policy(${bucket})`({
+        policyStatements: [
+            {
+                Effect: "Allow",
+                Principal: {
+                    Service: "cloudfront.amazonaws.com",
+                },
+                Action: ["s3:GetObject"],
+                Resource: [Output.interpolate `${bucket.bucketArn}/*`],
+                Condition: {
+                    ArnLike: {
+                        "AWS:SourceArn": `arn:aws:cloudfront::${accountId}:distribution/*`,
+                    },
+                },
+            },
+        ],
+    });
+    yield* AWS.Route53.Record(`${id}Alias`, {
+        hostedZoneId: props.hostedZoneId,
+        name: props.domain,
+        type: "A",
+        aliasTarget: {
+            hostedZoneId: distribution.hostedZoneId,
+            dnsName: distribution.domainName,
+        },
+    });
+    return {
+        domain: props.domain,
+        url: Output.interpolate `https://${props.domain}`,
+        distributionDomain: distribution.domainName,
+        resizeFunctionUrl: resize.functionUrl,
+        bucketName: bucket.bucketName,
+    };
+});
+//# sourceMappingURL=stack.js.map

package/dist/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,YAAY,MAAM,sBAAsB,CAAC;AAEhD,MAAM,0BAA0B,GAAG;IACjC,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,EAA4B;IAC3C,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;IAChC,kBAAkB,EAAE,CAAC;IACrB,iBAAiB,EAAE,EAAE;CACtB,CAAC;AAEF,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,4BAA4B,GAAG;IACnC,eAAe,EAAE,KAAK;IACtB,sBAAsB,EAAE,EAAE;IAC1B,cAAc,EAAE,EAAc;IAC9B,gBAAgB,EAAE,EAAc;IAChC,oBAAoB,EAAE,EAAkD;IACxE,0BAA0B,EAAE,EAIzB;CACJ,CAAC;AAOF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,KAAuB,EAAE,EAAE,CACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE;QACpE,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,qCAAqC;KACnD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE;QAC5E,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,yDAAyD;KACvE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IAEnC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE;QAC1D,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE;QAChF,IAAI,EAAE,GAAG,EAAE,WAAW;QACtB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,QAAQ;QAChB,wCAAwC,EAAE;YACxC,aAAa,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;YACzC,aAAa,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;YACzC,kBAAkB,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE;YACnD,wBAAwB,EAAE,IAAI;YAC9B,0BAA0B,EAAE,IAAI;SACjC;KACF,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE;QAClE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QAC3B,iBAAiB,EAAE,EAAE;QACrB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACzB,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;aAChC;SACF;QACD,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP;gBACE,GAAG,0BAA0B;gBAC7B,EAAE,EAAE,IAAI;gBACR,UAAU,EAAE,MAAM,CAAC,wBAAwB;gBAC3C,QAAQ,EAAE,IAAI;gBACd,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;aACnD;YACD;gBACE,GAAG,0BAA0B;gBAC7B,EAAE,EAAE,QAAQ;gBACZ,UAAU,EAAE,kBAAkB;gBAC9B,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;gBACtD,kBAAkB,EAAE;oBAClB,oBAAoB,EAAE,YAAY;oBAClC,iBAAiB,EAAE,EAAE;oBACrB,sBAAsB,EAAE,CAAC;iBAC1B;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,GAAG,4BAA4B;YAC/B,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,mBAAmB;YACzC,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YAC/B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YAC9B,aAAa,EAAE,kBAAkB,CAAC,aAAa;SAChD;QACD,qBAAqB,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG,4BAA4B;YAC/B,WAAW,EAAE,OAAO,KAAK,IAAI;YAC7B,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,mBAA4B;YAClD,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAU;YACxC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAU;YACvC,aAAa,EAAE,kBAAkB,CAAC,aAAa;SAChD,CAAC,CAAC;QACH,oBAAoB,EAAE,EAAE;QACxB,iBAAiB,EAAE;YACjB,iBAAiB,EAAE,WAAW,CAAC,cAAc;YAC7C,gBAAgB,EAAE,UAAU;YAC5B,sBAAsB,EAAE,cAAc;SACvC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE;QACpD,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,YAAY,CAAC,eAAe;QACvC,mBAAmB,EAAE,SAAS;KAC/B,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,gCAAgC,EAAE;QAClE,MAAM,EAAE,uBAAuB;QAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,YAAY,CAAC,eAAe;QACvC,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;IAEH,yEAAyE;IACzE,0EAA0E;IAC1E,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA,iBAAiB,MAAM,GAAG,CAAC;QAC3C,gBAAgB,EAAE;YAChB;gBACE,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE;oBACT,OAAO,EAAE,0BAA0B;iBACpC;gBACD,MAAM,EAAE,CAAC,cAAc,CAAC;gBACxB,QAAQ,EAAE,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC;gBACrD,SAAS,EAAE;oBACT,OAAO,EAAE;wBACP,eAAe,EAAE,uBAAuB,SAAS,iBAAiB;qBACnE;iBACF;aACF;SACF;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE;YACX,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,OAAO,EAAE,YAAY,CAAC,UAAU;SACjC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,KAAK,CAAC,MAAM,EAAE;QAChD,kBAAkB,EAAE,YAAY,CAAC,UAAU;QAC3C,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@lambdaimg/alchemy",
+  "version": "0.1.0",
+  "description": "AWS Alchemy stack and Lambda runtime for LambdaImg.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jperezrealini/lambdaimg.git",
+    "directory": "packages/alchemy"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "default": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "oxlint && oxfmt --check && tsc --noEmit -p tsconfig.json",
+    "fix": "oxlint --fix && oxfmt",
+    "test": "bun test"
+  },
+  "dependencies": {
+    "@lambdaimg/core": "workspace:*",
+    "alchemy": "2.0.0-beta.58",
+    "effect": "4.0.0-beta.90",
+    "heic-convert": "^2.1.0",
+    "sharp": "^0.34.5"
+  },
+  "devDependencies": {
+    "@types/bun": "catalog:",
+    "@types/node": "catalog:"
+  }
+}