@ts-cloud/core 0.5.4 → 0.5.5

package/dist/index.js

@@ -45833,7 +45833,7 @@ function composeServerlessAppTemplate(opts) {
           ...app.assetDomain ? {
             Aliases: [app.assetDomain],
             ViewerCertificate: {
-              AcmCertificateArn: app.assetCertificateArn,
+              AcmCertificateArn: app.assetCertificateArn ?? Fn2.ref("AssetsCertificate"),
               SslSupportMethod: "sni-only",
               MinimumProtocolVersion: "TLSv1.2_2021"
             }
@@ -45842,8 +45842,20 @@ function composeServerlessAppTemplate(opts) {
       }
     };
     if (app.assetDomain) {
-      if (!app.assetCertificateArn)
-        throw new Error("serverless app: `assetDomain` requires `assetCertificateArn` (a us-east-1 ACM cert — CloudFront only accepts certs from us-east-1).");
+      if (!app.assetCertificateArn) {
+        if (!app.hostedZoneId)
+          throw new Error("serverless app: `assetDomain` requires either `assetCertificateArn` (a us-east-1 ACM cert) or `hostedZoneId` (to auto-issue + validate one). CloudFront only accepts certs from us-east-1.");
+        if (region !== "us-east-1")
+          throw new Error(`serverless app: auto-issuing an asset-domain cert needs a us-east-1 app (CloudFront certs must be us-east-1); this app is in ${region}. Supply a pre-issued us-east-1 \`assetCertificateArn\` instead.`);
+        resources.AssetsCertificate = {
+          Type: "AWS::CertificateManager::Certificate",
+          Properties: {
+            DomainName: app.assetDomain,
+            ValidationMethod: "DNS",
+            DomainValidationOptions: [{ DomainName: app.assetDomain, HostedZoneId: app.hostedZoneId }]
+          }
+        };
+      }
       if (app.hostedZoneId) {
         resources.AssetsDomainRecord = {
           Type: "AWS::Route53::RecordSet",

package/dist/types.d.ts

@@ -1692,10 +1692,16 @@ export interface ServerlessAppConfig {
     assets?: string;
     /**
      * Serve assets from a custom CDN host instead of the default CloudFront domain
-     * (Vapor `asset-domain`). Requires a us-east-1 ACM cert via assetCertificateArn.
+     * (Vapor `asset-domain`). CloudFront needs a us-east-1 ACM cert: supply one via
+     * {@link assetCertificateArn}, or give {@link hostedZoneId} and (for a us-east-1
+     * app) ts-cloud auto-issues + DNS-validates one.
      */
     assetDomain?: string;
-    /** us-east-1 ACM certificate ARN for {@link assetDomain} (CloudFront requirement). */
+    /**
+     * us-east-1 ACM certificate ARN for {@link assetDomain} (CloudFront requirement).
+     * Optional when {@link hostedZoneId} is set and the app is in us-east-1 — the
+     * cert is then auto-issued and DNS-validated.
+     */
     assetCertificateArn?: string;
     /** Include dotfiles when uploading assets (Vapor `dot-files-as-assets`). @default false */
     dotFilesAsAssets?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ts-cloud/core",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "type": "module",
   "description": "Core CloudFormation generation library for ts-cloud",
   "author": "Chris Breuer <chris@stacksjs.com>",
@@ -31,7 +31,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.5.4"
+    "@ts-cloud/aws-types": "0.5.5"
   },
   "devDependencies": {
     "typescript": "^5.9.3"