alchemy 2.0.0-beta.2 → 2.0.0-beta.21

package/lib/AWS/CloudFront/PublicKey.js

@@ -0,0 +1,137 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { extractValue } from "./common.js";
+/**
+ * A CloudFront public key.
+ *
+ * Public keys are uploaded ahead of being grouped into a {@link KeyGroup} and
+ * used by Distributions for signed URL or signed cookie verification.
+ *
+ * The key body is immutable after creation — changing `encodedKey` triggers
+ * a replacement (CloudFront returns no API to rotate a key in place).
+ *
+ * @section Creating Public Keys
+ * @example PEM-encoded RSA public key
+ * ```typescript
+ * const key = yield* PublicKey("SignedUrlKey", {
+ *   encodedKey: Redacted.make(yield* fs.readFileString("./public_key.pem")),
+ *   comment: "RSA-2048 signed URL key for /private",
+ * });
+ * ```
+ */
+export const PublicKey = Resource("AWS.CloudFront.PublicKey");
+export const PublicKeyProvider = () => Provider.effect(PublicKey, Effect.gen(function* () {
+    const getById = Effect.fn(function* (id) {
+        const config = yield* cloudfront
+            .getPublicKeyConfig({ Id: id })
+            .pipe(Effect.catchTag("NoSuchPublicKey", () => Effect.succeed(undefined)));
+        if (!config?.PublicKeyConfig)
+            return undefined;
+        return { config: config.PublicKeyConfig, etag: config.ETag };
+    });
+    const getByName = Effect.fn(function* (name) {
+        const listed = yield* cloudfront.listPublicKeys({});
+        const summary = listed.PublicKeyList?.Items?.find((item) => item.Name === name);
+        if (!summary?.Id)
+            return undefined;
+        return yield* getById(summary.Id).pipe(Effect.map((found) => found ? { id: summary.Id, ...found } : undefined));
+    });
+    const buildConfig = (name, callerReference, props) => ({
+        Name: name,
+        CallerReference: callerReference,
+        EncodedKey: extractValue(props.encodedKey),
+        Comment: props.comment,
+    });
+    const toAttrs = (id, config, etag) => ({
+        publicKeyId: id,
+        name: config.Name,
+        encodedKey: config.EncodedKey,
+        callerReference: config.CallerReference,
+        etag,
+        comment: config.Comment,
+    });
+    return {
+        stables: ["publicKeyId", "callerReference"],
+        diff: Effect.fn(function* ({ id, news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if ((yield* createName(id, olds ?? {})) !==
+                (yield* createName(id, news))) {
+                return { action: "replace" };
+            }
+            if (isResolved(olds.encodedKey) &&
+                extractValue(olds.encodedKey) !== extractValue(news.encodedKey)) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.publicKeyId) {
+                const found = yield* getById(output.publicKeyId);
+                if (found)
+                    return toAttrs(output.publicKeyId, found.config, found.etag);
+            }
+            const name = yield* createName(id, olds ?? {});
+            const found = yield* getByName(name);
+            if (!found)
+                return undefined;
+            return toAttrs(found.id, found.config, found.etag);
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* createName(id, news);
+            const callerReference = name;
+            const created = yield* cloudfront
+                .createPublicKey({
+                PublicKeyConfig: buildConfig(name, callerReference, news),
+            })
+                .pipe(Effect.catchTag("PublicKeyAlreadyExists", () => getByName(name).pipe(Effect.flatMap((existing) => existing
+                ? Effect.succeed({
+                    PublicKey: {
+                        Id: existing.id,
+                        CreatedTime: new Date(),
+                        PublicKeyConfig: existing.config,
+                    },
+                    ETag: existing.etag,
+                    Location: undefined,
+                })
+                : Effect.fail(new Error(`Public key '${name}' already exists but could not be recovered`))))));
+            if (!created.PublicKey?.Id) {
+                return yield* Effect.fail(new Error("createPublicKey returned no identifier"));
+            }
+            yield* session.note(created.PublicKey.Id);
+            return toAttrs(created.PublicKey.Id, created.PublicKey.PublicKeyConfig, created.ETag);
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            const current = yield* getById(output.publicKeyId);
+            const updated = yield* cloudfront.updatePublicKey({
+                Id: output.publicKeyId,
+                IfMatch: current?.etag ?? output.etag,
+                PublicKeyConfig: buildConfig(output.name, output.callerReference, news),
+            });
+            if (!updated.PublicKey?.Id) {
+                return yield* Effect.fail(new Error("updatePublicKey returned no identifier"));
+            }
+            yield* session.note(output.publicKeyId);
+            return toAttrs(updated.PublicKey.Id, updated.PublicKey.PublicKeyConfig, updated.ETag);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const current = yield* getById(output.publicKeyId);
+            if (!current)
+                return;
+            yield* cloudfront
+                .deletePublicKey({
+                Id: output.publicKeyId,
+                IfMatch: current.etag,
+            })
+                .pipe(Effect.catchTag("NoSuchPublicKey", () => Effect.void));
+        }),
+    };
+}));
+const createName = (id, props) => props.name
+    ? Effect.succeed(props.name)
+    : createPhysicalName({ id, maxLength: 128, lowercase: true });
+//# sourceMappingURL=PublicKey.js.map

package/lib/AWS/CloudFront/PublicKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicKey.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/PublicKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwD3C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAY,0BAA0B,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,QAAQ,CAAC,MAAM,CACb,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU;aAC7B,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;aAC9B,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACpE,CAAC;QACJ,IAAI,CAAC,MAAM,EAAE,eAAe;YAAE,OAAO,SAAS,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAC7B,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,EAAE;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACjD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,eAAuB,EACvB,KAAqB,EACO,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI;QACV,eAAe,EAAE,eAAe;QAChC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CACd,EAAU,EACV,MAAkC,EAClC,IAAwB,EACxB,EAAE,CAAC,CAAC;QACJ,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAC/D,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,KAAK;oBACP,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,eAAe,GAAG,IAAI,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU;iBAC9B,eAAe,CAAC;gBACf,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC;aAC1D,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ;gBACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACb,SAAS,EAAE;wBACT,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,WAAW,EAAE,IAAI,IAAI,EAAE;wBACvB,eAAe,EAAE,QAAQ,CAAC,MAAM;qBACjC;oBACD,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,SAAS;iBACpB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,eAAe,IAAI,6CAA6C,CACjE,CACF,CACN,CACF,CACF,CACF,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS,CAAC,EAAE,EACpB,OAAO,CAAC,SAAS,CAAC,eAAe,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC;gBAChD,EAAE,EAAE,MAAM,CAAC,WAAW;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACrC,eAAe,EAAE,WAAW,CAC1B,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,eAAe,EACtB,IAAI,CACL;aACF,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS,CAAC,EAAE,EACpB,OAAO,CAAC,SAAS,CAAC,eAAe,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,CAAC,UAAU;iBACd,eAAe,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC,WAAW;gBACtB,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAqB,EAAE,EAAE,CACvD,KAAK,CAAC,IAAI;IACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/lib/AWS/CloudFront/ResponseHeadersPolicy.d.ts

@@ -0,0 +1,114 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface ResponseHeadersPolicyProps {
+    /**
+     * Name of the response headers policy. If omitted, a deterministic name is
+     * generated. Names must be unique per AWS account. Changing the name
+     * triggers a replacement.
+     */
+    name?: string;
+    /**
+     * Optional comment describing the policy.
+     */
+    comment?: string;
+    /**
+     * CORS configuration applied to viewer responses.
+     */
+    corsConfig?: cloudfront.ResponseHeadersPolicyCorsConfig;
+    /**
+     * Standard security headers (HSTS, X-Frame-Options, etc.) added to
+     * viewer responses.
+     */
+    securityHeadersConfig?: cloudfront.ResponseHeadersPolicySecurityHeadersConfig;
+    /**
+     * Server-Timing header configuration for measuring CloudFront performance.
+     */
+    serverTimingHeadersConfig?: cloudfront.ResponseHeadersPolicyServerTimingHeadersConfig;
+    /**
+     * Custom headers to add to viewer responses.
+     */
+    customHeadersConfig?: cloudfront.ResponseHeadersPolicyCustomHeadersConfig;
+    /**
+     * Headers to remove from viewer responses.
+     */
+    removeHeadersConfig?: cloudfront.ResponseHeadersPolicyRemoveHeadersConfig;
+}
+export interface ResponseHeadersPolicy extends Resource<"AWS.CloudFront.ResponseHeadersPolicy", ResponseHeadersPolicyProps, {
+    /**
+     * CloudFront-assigned response headers policy identifier.
+     */
+    responseHeadersPolicyId: string;
+    /**
+     * Name of the response headers policy.
+     */
+    name: string;
+    /**
+     * Most recent entity tag for update/delete operations.
+     */
+    etag: string | undefined;
+    /**
+     * Current comment on the policy.
+     */
+    comment: string | undefined;
+    /**
+     * Current CORS configuration.
+     */
+    corsConfig: cloudfront.ResponseHeadersPolicyCorsConfig | undefined;
+    /**
+     * Current security headers configuration.
+     */
+    securityHeadersConfig: cloudfront.ResponseHeadersPolicySecurityHeadersConfig | undefined;
+    /**
+     * Current Server-Timing configuration.
+     */
+    serverTimingHeadersConfig: cloudfront.ResponseHeadersPolicyServerTimingHeadersConfig | undefined;
+    /**
+     * Current custom headers configuration.
+     */
+    customHeadersConfig: cloudfront.ResponseHeadersPolicyCustomHeadersConfig | undefined;
+    /**
+     * Current remove-headers configuration.
+     */
+    removeHeadersConfig: cloudfront.ResponseHeadersPolicyRemoveHeadersConfig | undefined;
+}, never, Providers> {
+}
+/**
+ * A CloudFront response headers policy.
+ *
+ * Response headers policies add or remove headers in viewer responses,
+ * including CORS, standard security headers (HSTS, X-Frame-Options,
+ * X-Content-Type-Options, Referrer-Policy, etc.), Server-Timing, custom
+ * headers and explicit header removal. They are referenced by ID on a
+ * Distribution's default behavior or per-path cache behaviors.
+ *
+ * @section Creating Response Headers Policies
+ * @example Standard security + CORS
+ * ```typescript
+ * const responseHeadersPolicy = yield* ResponseHeadersPolicy("AppResponseHeaders", {
+ *   comment: "Default app security + CORS",
+ *   corsConfig: {
+ *     AccessControlAllowOrigins: { Quantity: 1, Items: ["https://app.example.com"] },
+ *     AccessControlAllowMethods: { Quantity: 2, Items: ["GET", "OPTIONS"] },
+ *     AccessControlAllowHeaders: { Quantity: 1, Items: ["Authorization"] },
+ *     AccessControlAllowCredentials: false,
+ *     OriginOverride: true,
+ *   },
+ *   securityHeadersConfig: {
+ *     StrictTransportSecurity: {
+ *       AccessControlMaxAgeSec: 31536000,
+ *       IncludeSubdomains: true,
+ *       Preload: true,
+ *       Override: true,
+ *     },
+ *     ContentTypeOptions: { Override: true },
+ *     FrameOptions: { FrameOption: "DENY", Override: true },
+ *     ReferrerPolicy: { ReferrerPolicy: "no-referrer", Override: true },
+ *   },
+ * });
+ * ```
+ */
+export declare const ResponseHeadersPolicy: import("../../Resource.ts").ResourceClass<ResponseHeadersPolicy>;
+export declare const ResponseHeadersPolicyProvider: () => import("effect/Layer").Layer<Provider.Provider<ResponseHeadersPolicy>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=ResponseHeadersPolicy.d.ts.map

package/lib/AWS/CloudFront/ResponseHeadersPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseHeadersPolicy.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/ResponseHeadersPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAI9D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC,+BAA+B,CAAC;IACxD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC,0CAA0C,CAAC;IAC9E;;OAEG;IACH,yBAAyB,CAAC,EAAE,UAAU,CAAC,8CAA8C,CAAC;IACtF;;OAEG;IACH,mBAAmB,CAAC,EAAE,UAAU,CAAC,wCAAwC,CAAC;IAC1E;;OAEG;IACH,mBAAmB,CAAC,EAAE,UAAU,CAAC,wCAAwC,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,sCAAsC,EACtC,0BAA0B,EAC1B;IACE;;OAEG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,UAAU,EAAE,UAAU,CAAC,+BAA+B,GAAG,SAAS,CAAC;IACnE;;OAEG;IACH,qBAAqB,EACjB,UAAU,CAAC,0CAA0C,GACrD,SAAS,CAAC;IACd;;OAEG;IACH,yBAAyB,EACrB,UAAU,CAAC,8CAA8C,GACzD,SAAS,CAAC;IACd;;OAEG;IACH,mBAAmB,EACf,UAAU,CAAC,wCAAwC,GACnD,SAAS,CAAC;IACd;;OAEG;IACH,mBAAmB,EACf,UAAU,CAAC,wCAAwC,GACnD,SAAS,CAAC;CACf,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,qTAwKvC,CAAC"}

package/lib/AWS/CloudFront/ResponseHeadersPolicy.js

@@ -0,0 +1,162 @@
+import * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * A CloudFront response headers policy.
+ *
+ * Response headers policies add or remove headers in viewer responses,
+ * including CORS, standard security headers (HSTS, X-Frame-Options,
+ * X-Content-Type-Options, Referrer-Policy, etc.), Server-Timing, custom
+ * headers and explicit header removal. They are referenced by ID on a
+ * Distribution's default behavior or per-path cache behaviors.
+ *
+ * @section Creating Response Headers Policies
+ * @example Standard security + CORS
+ * ```typescript
+ * const responseHeadersPolicy = yield* ResponseHeadersPolicy("AppResponseHeaders", {
+ *   comment: "Default app security + CORS",
+ *   corsConfig: {
+ *     AccessControlAllowOrigins: { Quantity: 1, Items: ["https://app.example.com"] },
+ *     AccessControlAllowMethods: { Quantity: 2, Items: ["GET", "OPTIONS"] },
+ *     AccessControlAllowHeaders: { Quantity: 1, Items: ["Authorization"] },
+ *     AccessControlAllowCredentials: false,
+ *     OriginOverride: true,
+ *   },
+ *   securityHeadersConfig: {
+ *     StrictTransportSecurity: {
+ *       AccessControlMaxAgeSec: 31536000,
+ *       IncludeSubdomains: true,
+ *       Preload: true,
+ *       Override: true,
+ *     },
+ *     ContentTypeOptions: { Override: true },
+ *     FrameOptions: { FrameOption: "DENY", Override: true },
+ *     ReferrerPolicy: { ReferrerPolicy: "no-referrer", Override: true },
+ *   },
+ * });
+ * ```
+ */
+export const ResponseHeadersPolicy = Resource("AWS.CloudFront.ResponseHeadersPolicy");
+export const ResponseHeadersPolicyProvider = () => Provider.effect(ResponseHeadersPolicy, Effect.gen(function* () {
+    const getById = Effect.fn(function* (id) {
+        const config = yield* cloudfront
+            .getResponseHeadersPolicyConfig({ Id: id })
+            .pipe(Effect.catchTag("NoSuchResponseHeadersPolicy", () => Effect.succeed(undefined)));
+        if (!config?.ResponseHeadersPolicyConfig)
+            return undefined;
+        return {
+            config: config.ResponseHeadersPolicyConfig,
+            etag: config.ETag,
+        };
+    });
+    const getByName = Effect.fn(function* (name) {
+        const listed = yield* cloudfront.listResponseHeadersPolicies({
+            Type: "custom",
+        });
+        const summary = listed.ResponseHeadersPolicyList?.Items?.find((item) => item.ResponseHeadersPolicy?.ResponseHeadersPolicyConfig?.Name ===
+            name);
+        if (!summary?.ResponseHeadersPolicy?.Id)
+            return undefined;
+        return yield* getById(summary.ResponseHeadersPolicy.Id).pipe(Effect.map((found) => found
+            ? { id: summary.ResponseHeadersPolicy.Id, ...found }
+            : undefined));
+    });
+    const buildConfig = (name, props) => ({
+        Name: name,
+        Comment: props.comment,
+        CorsConfig: props.corsConfig,
+        SecurityHeadersConfig: props.securityHeadersConfig,
+        ServerTimingHeadersConfig: props.serverTimingHeadersConfig,
+        CustomHeadersConfig: props.customHeadersConfig,
+        RemoveHeadersConfig: props.removeHeadersConfig,
+    });
+    const toAttrs = (id, config, etag) => ({
+        responseHeadersPolicyId: id,
+        name: config.Name,
+        etag,
+        comment: config.Comment,
+        corsConfig: config.CorsConfig,
+        securityHeadersConfig: config.SecurityHeadersConfig,
+        serverTimingHeadersConfig: config.ServerTimingHeadersConfig,
+        customHeadersConfig: config.CustomHeadersConfig,
+        removeHeadersConfig: config.RemoveHeadersConfig,
+    });
+    return {
+        stables: ["responseHeadersPolicyId"],
+        diff: Effect.fn(function* ({ id, news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if ((yield* createName(id, olds ?? {})) !==
+                (yield* createName(id, news))) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.responseHeadersPolicyId) {
+                const found = yield* getById(output.responseHeadersPolicyId);
+                if (found) {
+                    return toAttrs(output.responseHeadersPolicyId, found.config, found.etag);
+                }
+            }
+            const name = yield* createName(id, olds ?? {});
+            const found = yield* getByName(name);
+            if (!found)
+                return undefined;
+            return toAttrs(found.id, found.config, found.etag);
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* createName(id, news);
+            const created = yield* cloudfront
+                .createResponseHeadersPolicy({
+                ResponseHeadersPolicyConfig: buildConfig(name, news),
+            })
+                .pipe(Effect.catchTag("ResponseHeadersPolicyAlreadyExists", () => getByName(name).pipe(Effect.flatMap((existing) => existing
+                ? Effect.succeed({
+                    ResponseHeadersPolicy: {
+                        Id: existing.id,
+                        LastModifiedTime: new Date(),
+                        ResponseHeadersPolicyConfig: existing.config,
+                    },
+                    ETag: existing.etag,
+                    Location: undefined,
+                })
+                : Effect.fail(new Error(`Response headers policy '${name}' already exists but could not be recovered`))))));
+            if (!created.ResponseHeadersPolicy?.Id) {
+                return yield* Effect.fail(new Error("createResponseHeadersPolicy returned no identifier"));
+            }
+            yield* session.note(created.ResponseHeadersPolicy.Id);
+            return toAttrs(created.ResponseHeadersPolicy.Id, created.ResponseHeadersPolicy.ResponseHeadersPolicyConfig, created.ETag);
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            const current = yield* getById(output.responseHeadersPolicyId);
+            const updated = yield* cloudfront.updateResponseHeadersPolicy({
+                Id: output.responseHeadersPolicyId,
+                IfMatch: current?.etag ?? output.etag,
+                ResponseHeadersPolicyConfig: buildConfig(output.name, news),
+            });
+            if (!updated.ResponseHeadersPolicy?.Id) {
+                return yield* Effect.fail(new Error("updateResponseHeadersPolicy returned no identifier"));
+            }
+            yield* session.note(output.responseHeadersPolicyId);
+            return toAttrs(updated.ResponseHeadersPolicy.Id, updated.ResponseHeadersPolicy.ResponseHeadersPolicyConfig, updated.ETag);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const current = yield* getById(output.responseHeadersPolicyId);
+            if (!current)
+                return;
+            yield* cloudfront
+                .deleteResponseHeadersPolicy({
+                Id: output.responseHeadersPolicyId,
+                IfMatch: current.etag,
+            })
+                .pipe(Effect.catchTag("NoSuchResponseHeadersPolicy", () => Effect.void));
+        }),
+    };
+}));
+const createName = (id, props) => props.name
+    ? Effect.succeed(props.name)
+    : createPhysicalName({ id, maxLength: 128, lowercase: true });
+//# sourceMappingURL=ResponseHeadersPolicy.js.map

package/lib/AWS/CloudFront/ResponseHeadersPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseHeadersPolicy.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/ResponseHeadersPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA0F7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,sCAAsC,CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,MAAM,CACb,qBAAqB,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU;aAC7B,8BAA8B,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;aAC1C,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACJ,IAAI,CAAC,MAAM,EAAE,2BAA2B;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,2BAA2B;YAC1C,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAC3D,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,yBAAyB,EAAE,KAAK,EAAE,IAAI,CAC3D,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,IAAI;YAC7D,IAAI,CACP,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK;YACH,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE;YACpD,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,KAAiC,EACO,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CACd,EAAU,EACV,MAA8C,EAC9C,IAAwB,EACxB,EAAE,CAAC,CAAC;QACJ,uBAAuB,EAAE,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;KAChD,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAC7B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC7D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,OAAO,CACZ,MAAM,CAAC,uBAAuB,EAC9B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,IAAI,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU;iBAC9B,2BAA2B,CAAC;gBAC3B,2BAA2B,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;aACrD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE,CACzD,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ;gBACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACb,qBAAqB,EAAE;wBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,gBAAgB,EAAE,IAAI,IAAI,EAAE;wBAC5B,2BAA2B,EAAE,QAAQ,CAAC,MAAM;qBAC7C;oBACD,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,SAAS;iBACpB,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,4BAA4B,IAAI,6CAA6C,CAC9E,CACF,CACN,CACF,CACF,CACF,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAChE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,OAAO,CACZ,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAChC,OAAO,CAAC,qBAAqB,CAAC,2BAA2B,EACzD,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,2BAA2B,CAAC;gBAC5D,EAAE,EAAE,MAAM,CAAC,uBAAuB;gBAClC,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACrC,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;aAC5D,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAChE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACpD,OAAO,OAAO,CACZ,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAChC,OAAO,CAAC,qBAAqB,CAAC,2BAA2B,EACzD,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,CAAC,CAAC,UAAU;iBACd,2BAA2B,CAAC;gBAC3B,EAAE,EAAE,MAAM,CAAC,uBAAuB;gBAClC,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAClE,CAAC;QACN,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAiC,EAAE,EAAE,CACnE,KAAK,CAAC,IAAI;IACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/lib/AWS/CloudFront/common.d.ts

@@ -0,0 +1,12 @@
+import { Region as AwsRegion } from "@distilled.cloud/aws/Region";
+import * as kvs from "@distilled.cloud/aws/cloudfront-keyvaluestore";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+export declare const KVS_REGION: "us-east-1";
+export declare const extractValue: (v: string | Redacted.Redacted<string>) => string;
+export declare const withKvsRegion: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, AwsRegion>>;
+export declare const withKvsRegionFn: <Args extends any[], A, E, R>(fn: (...args: Args) => Effect.Effect<A, E, R>) => (...args: Args) => Effect.Effect<A, E, Exclude<R, AwsRegion>>;
+export declare const retryForKvsReadiness: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+export declare const getKvsEtag: (store: string) => Effect.Effect<string, kvs.DescribeKeyValueStoreError, import("effect/unstable/http/HttpClient").HttpClient | AwsRegion | import("@distilled.cloud/aws/Credentials").Credentials>;
+export declare const isKvsPreconditionFailed: (err: kvs.ValidationException) => boolean;
+//# sourceMappingURL=common.d.ts.map

package/lib/AWS/CloudFront/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AAErE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,eAAO,MAAM,UAAU,EAAG,WAAoB,CAAC;AAE/C,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MACtB,CAAC;AAEhD,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,+CACH,CAAC;AAEnE,eAAO,MAAM,eAAe,GACzB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAC1B,IAAI,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAE9C,GAAG,MAAM,IAAI,+CACc,CAAC;AAgB/B,eAAO,MAAM,oBAAoB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,2BAMzE,CAAC;AAEJ,eAAO,MAAM,UAAU,qMAGrB,CAAC;AAEH,eAAO,MAAM,uBAAuB,GAAI,KAAK,GAAG,CAAC,mBAAmB,YAGtB,CAAC"}

package/lib/AWS/CloudFront/common.js

@@ -0,0 +1,31 @@
+import { Region as AwsRegion } from "@distilled.cloud/aws/Region";
+import * as kvs from "@distilled.cloud/aws/cloudfront-keyvaluestore";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
+// CloudFront KeyValueStore APIs are only available from us-east-1, even when
+// the distribution using the store lives elsewhere.
+export const KVS_REGION = "us-east-1";
+export const extractValue = (v) => typeof v === "string" ? v : Redacted.value(v);
+export const withKvsRegion = (effect) => effect.pipe(Effect.provideService(AwsRegion, KVS_REGION));
+export const withKvsRegionFn = (fn) => (...args) => withKvsRegion(fn(...args));
+const isKvsNotReady = (error) => {
+    const tag = error._tag;
+    return tag === "ResourceNotFoundException" || tag === "ConflictException";
+};
+const cappedKvsRetrySchedule = Schedule.exponential("100 millis").pipe(Schedule.both(Schedule.recurs(24)), Schedule.map(([duration]) => Duration.isGreaterThan(duration, Duration.seconds(2))
+    ? Duration.seconds(2)
+    : duration));
+export const retryForKvsReadiness = (effect) => effect.pipe(Effect.retry({
+    while: isKvsNotReady,
+    schedule: cappedKvsRetrySchedule,
+}));
+export const getKvsEtag = Effect.fn(function* (store) {
+    const response = yield* kvs.describeKeyValueStore({ KvsARN: store });
+    return response.ETag;
+});
+export const isKvsPreconditionFailed = (err) => "Message" in err &&
+    typeof err.Message === "string" &&
+    err.Message.includes("Pre-Condition failed");
+//# sourceMappingURL=common.js.map

package/lib/AWS/CloudFront/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,6EAA6E;AAC7E,oDAAoD;AACpD,MAAM,CAAC,MAAM,UAAU,GAAG,WAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAqC,EAAU,EAAE,CAC5E,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAU,MAA8B,EAAE,EAAE,CACvE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,UAAiB,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,eAAe,GAC1B,CACE,EAA6C,EAC7C,EAAE,CACJ,CAAC,GAAG,IAAU,EAAE,EAAE,CAChB,aAAa,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE/B,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAE;IACvC,MAAM,GAAG,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC9C,OAAO,GAAG,KAAK,2BAA2B,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CACpE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAC1B,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,QAAQ,CACb,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC9E,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,sBAAsB;CACjC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAA4B,EAAE,EAAE,CACtE,SAAS,IAAI,GAAG;IAChB,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;IAC/B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC"}

package/lib/AWS/CloudFront/index.d.ts

@@ -0,0 +1,14 @@
+export { CachePolicy, CachePolicyProvider } from "./CachePolicy.ts";
+export { Distribution, DistributionProvider } from "./Distribution.ts";
+export { Function, FunctionProvider } from "./Function.ts";
+export { Invalidation, InvalidationProvider } from "./Invalidation.ts";
+export { KeyGroup, KeyGroupProvider } from "./KeyGroup.ts";
+export { KeyValueStore, KeyValueStoreProvider } from "./KeyValueStore.ts";
+export { KvEntries, KvEntriesProvider } from "./KvEntries.ts";
+export { KvRoutesUpdate, KvRoutesUpdateProvider } from "./KvRoutesUpdate.ts";
+export { MANAGED_ALL_VIEWER_EXCEPT_HOST_HEADER_POLICY_ID, MANAGED_CACHING_DISABLED_POLICY_ID, MANAGED_CACHING_OPTIMIZED_POLICY_ID, } from "./ManagedPolicies.ts";
+export { OriginAccessControl, OriginAccessControlProvider, } from "./OriginAccessControl.ts";
+export { OriginRequestPolicy, OriginRequestPolicyProvider, } from "./OriginRequestPolicy.ts";
+export { PublicKey, PublicKeyProvider } from "./PublicKey.ts";
+export { ResponseHeadersPolicy, ResponseHeadersPolicyProvider, } from "./ResponseHeadersPolicy.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/AWS/CloudFront/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/lib/AWS/CloudFront/index.js

@@ -0,0 +1,14 @@
+export { CachePolicy, CachePolicyProvider } from "./CachePolicy.js";
+export { Distribution, DistributionProvider } from "./Distribution.js";
+export { Function, FunctionProvider } from "./Function.js";
+export { Invalidation, InvalidationProvider } from "./Invalidation.js";
+export { KeyGroup, KeyGroupProvider } from "./KeyGroup.js";
+export { KeyValueStore, KeyValueStoreProvider } from "./KeyValueStore.js";
+export { KvEntries, KvEntriesProvider } from "./KvEntries.js";
+export { KvRoutesUpdate, KvRoutesUpdateProvider } from "./KvRoutesUpdate.js";
+export { MANAGED_ALL_VIEWER_EXCEPT_HOST_HEADER_POLICY_ID, MANAGED_CACHING_DISABLED_POLICY_ID, MANAGED_CACHING_OPTIMIZED_POLICY_ID, } from "./ManagedPolicies.js";
+export { OriginAccessControl, OriginAccessControlProvider, } from "./OriginAccessControl.js";
+export { OriginRequestPolicy, OriginRequestPolicyProvider, } from "./OriginRequestPolicy.js";
+export { PublicKey, PublicKeyProvider } from "./PublicKey.js";
+export { ResponseHeadersPolicy, ResponseHeadersPolicyProvider, } from "./ResponseHeadersPolicy.js";
+//# sourceMappingURL=index.js.map

package/lib/AWS/CloudFront/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC"}

package/lib/AWS/CloudWatch/Alarm.d.ts

@@ -0,0 +1,49 @@
+import { Region } from "@distilled.cloud/aws/Region";
+import * as cloudwatch from "@distilled.cloud/aws/cloudwatch";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import { AWSEnvironment, type AccountID } from "../Environment.ts";
+import type { RegionID } from "../Region.ts";
+export type AlarmName = string;
+export type AlarmArn = `arn:aws:cloudwatch:${RegionID}:${AccountID}:alarm:${string}`;
+export type AlarmStateValue = cloudwatch.StateValue;
+export interface AlarmProps extends Omit<cloudwatch.PutMetricAlarmInput, "AlarmName" | "Tags"> {
+    /**
+     * Name of the alarm. If omitted, a unique name is generated.
+     */
+    name?: AlarmName;
+    /**
+     * Optional tags to apply to the alarm.
+     */
+    tags?: Record<string, string>;
+}
+export interface Alarm extends Resource<"AWS.CloudWatch.Alarm", AlarmProps, {
+    alarmName: AlarmName;
+    alarmArn: AlarmArn;
+    stateValue: AlarmStateValue | undefined;
+    stateReason: string | undefined;
+    metricAlarm: cloudwatch.MetricAlarm;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * A CloudWatch metric alarm.
+ *
+ * @section Creating Alarms
+ * @example Threshold Alarm
+ * ```typescript
+ * const alarm = yield* Alarm("HighErrors", {
+ *   MetricName: "Errors",
+ *   Namespace: "AWS/Lambda",
+ *   Statistic: "Sum",
+ *   Period: 60,
+ *   EvaluationPeriods: 1,
+ *   Threshold: 1,
+ *   ComparisonOperator: "GreaterThanOrEqualToThreshold",
+ * });
+ * ```
+ */
+export declare const Alarm: import("../../Resource.ts").ResourceClass<Alarm>;
+export declare const AlarmProvider: () => import("effect/Layer").Layer<Provider.Provider<Alarm>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Region | import("@distilled.cloud/aws/Credentials").Credentials | AWSEnvironment>;
+//# sourceMappingURL=Alarm.d.ts.map

package/lib/AWS/CloudWatch/Alarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Alarm.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudWatch/Alarm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAG9D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAS7C,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,MAAM,MAAM,QAAQ,GAClB,sBAAsB,QAAQ,IAAI,SAAS,UAAU,MAAM,EAAE,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC;AAEpD,MAAM,WAAW,UAAW,SAAQ,IAAI,CACtC,UAAU,CAAC,mBAAmB,EAC9B,WAAW,GAAG,MAAM,CACrB;IACC;;OAEG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,KAAM,SAAQ,QAAQ,CACrC,sBAAsB,EACtB,UAAU,EACV;IACE,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,KAAK,kDAA0C,CAAC;AAE7D,eAAO,MAAM,aAAa,gRAoIvB,CAAC"}