alchemy 2.0.0-beta.cli-platform-split-2 → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/Website/StaticSite.js

@@ -0,0 +1,406 @@
+import * as Effect from "effect/Effect";
+import { createHash } from "node:crypto";
+import { readdirSync } from "node:fs";
+import path from "node:path";
+import { Command } from "../../Build/Command.js";
+import * as Construct from "../../Construct.js";
+import { toPath } from "../../FQN.js";
+import * as Namespace from "../../Namespace.js";
+import * as Output from "../../Output.js";
+import { Stack } from "../../Stack.js";
+import { Stage } from "../../Stage.js";
+import { Certificate } from "../ACM/Certificate.js";
+import { Distribution } from "../CloudFront/Distribution.js";
+import { Function as CloudFrontFunction } from "../CloudFront/Function.js";
+import { Invalidation } from "../CloudFront/Invalidation.js";
+import { KeyValueStore } from "../CloudFront/KeyValueStore.js";
+import { KvEntries } from "../CloudFront/KvEntries.js";
+import { KvRoutesUpdate } from "../CloudFront/KvRoutesUpdate.js";
+import { MANAGED_CACHING_OPTIMIZED_POLICY_ID } from "../CloudFront/ManagedPolicies.js";
+import { Record as Route53Record } from "../Route53/Record.js";
+import { Bucket } from "../S3/Bucket.js";
+import { AssetDeployment } from "./AssetDeployment.js";
+import { CF_BLOCK_CLOUDFRONT_URL_INJECTION, CF_ROUTER_INJECTION, } from "./cfcode.js";
+/**
+ * Deploy a static website to S3 and CloudFront using KV-based edge routing.
+ *
+ * `StaticSite` uploads site files to a private S3 bucket, creates a CloudFront
+ * KeyValueStore with a file manifest for edge routing, and optionally builds
+ * the site first. Supports standalone distribution or composition with
+ * `AWS.Website.Router`.
+ *
+ * @section Basic Sites
+ * @example Simple Static Site
+ * ```typescript
+ * const site = yield* StaticSite("Docs", {
+ *   path: "./site",
+ * });
+ * ```
+ *
+ * @section Built Sites
+ * @example Build A Vite App
+ * ```typescript
+ * const site = yield* StaticSite("Web", {
+ *   path: "./frontend",
+ *   build: {
+ *     command: "bun run build",
+ *     output: "dist",
+ *   },
+ *   environment: {
+ *     VITE_API_URL: api.url,
+ *   },
+ * });
+ * ```
+ *
+ * @section Router Composition
+ * @example Serve Through A Router
+ * ```typescript
+ * const site = yield* StaticSite("Docs", {
+ *   path: "./docs",
+ *   router: {
+ *     instance: router,
+ *     path: "/docs",
+ *   },
+ * });
+ * ```
+ */
+export const StaticSite = Construct.fn(function* (id, props) {
+    const domain = normalizeDomain(props.domain);
+    const sitePath = (props.path ?? ".");
+    const indexPage = props.indexPage ?? "index.html";
+    const assetPrefix = normalizePrefix(props.assets?.path);
+    const assetRoutes = [...(props.assets?.routes ?? [])]
+        .map((value) => value.trim())
+        .filter(Boolean)
+        .map(normalizeRoutePath);
+    const invalidationProps = props.invalidation !== undefined
+        ? props.invalidation
+        : { paths: "all", wait: false };
+    if (props.router && props.domain) {
+        return yield* Effect.die(`Cannot provide both "domain" and "router". Use the "domain" prop on the Router component.`);
+    }
+    if (props.router && props.edge) {
+        return yield* Effect.die(`Cannot provide both "edge" and "router". Use the "edge" prop on the Router component.`);
+    }
+    const build = props.build
+        ? yield* Command("Build", {
+            command: props.build.command,
+            cwd: sitePath,
+            memo: {
+                include: props.build.include,
+                exclude: props.build.exclude,
+                lockfile: props.build.lockfile,
+            },
+            outdir: props.build.output,
+            env: props.environment,
+        })
+        : undefined;
+    const uploadSourcePath = (build?.outdir ?? sitePath);
+    const providedBucket = props.assets?.bucket;
+    const bucket = providedBucket ??
+        (yield* Bucket("Bucket", {
+            bucketName: props.bucketName,
+            forceDestroy: props.forceDestroy,
+            tags: props.tags,
+        }));
+    const routerAttachment = props.router;
+    const routerPathPrefix = routerAttachment?.path
+        ? "/" + routerAttachment.path.replace(/^\//, "").replace(/\/$/, "")
+        : undefined;
+    const files = yield* AssetDeployment("Files", {
+        bucket: bucket,
+        sourcePath: uploadSourcePath,
+        prefix: normalizeUploadPrefix(assetPrefix, routerPathPrefix),
+        purge: props.assets?.purge ?? true,
+        fileOptions: props.assets?.fileOptions,
+        textEncoding: props.assets?.textEncoding,
+    });
+    const stack = yield* Stack;
+    const stage = yield* Stage;
+    const ns = yield* Namespace.CurrentNamespace;
+    const fqn = ns ? toPath(ns).join("/") : id;
+    const kvNamespace = createHash("md5")
+        .update(`${stack.name}-${stage}-${fqn}`)
+        .digest("hex")
+        .substring(0, 4);
+    const kvEntries = buildKvEntries(uploadSourcePath, bucket, assetPrefix, assetRoutes, indexPage, props.errorPage, routerPathPrefix);
+    let distributionId;
+    let kvStoreArn;
+    let distribution;
+    let prodUrl;
+    if (routerAttachment) {
+        kvStoreArn = routerAttachment.instance.kvStoreArn;
+        distributionId = routerAttachment.instance.distributionId;
+        const hostPattern = routerAttachment.domain
+            ? routerAttachment.domain
+                .replace(/[.+?^${}()|[\]\\]/g, "\\$&")
+                .replace(/\*/g, ".*")
+            : undefined;
+        yield* KvRoutesUpdate("RoutesUpdate", {
+            store: kvStoreArn,
+            namespace: routerAttachment.instance.kvNamespace,
+            key: "routes",
+            entry: [
+                "site",
+                kvNamespace,
+                hostPattern ?? "",
+                routerPathPrefix ?? "/",
+            ].join(","),
+        });
+        prodUrl = routerAttachment.domain
+            ? `https://${routerAttachment.domain}${routerPathPrefix ?? ""}`
+            : Output.interpolate `${routerAttachment.instance.url}${routerPathPrefix ?? ""}`;
+    }
+    else {
+        if (domain &&
+            !domain.cert &&
+            !domain.hostedZoneId &&
+            domain.dns === false) {
+            return yield* Effect.die("StaticSite domain configuration with `dns: false` requires `cert`.");
+        }
+        const certificate = !domain || domain.cert
+            ? domain?.cert
+                ? { certificateArn: domain.cert }
+                : undefined
+            : yield* Certificate("Certificate", {
+                domainName: domain.name,
+                subjectAlternativeNames: [
+                    ...(domain.aliases ?? []),
+                    ...(domain.redirects ?? []),
+                ],
+                hostedZoneId: domain.hostedZoneId,
+                tags: props.tags,
+            });
+        const kvStore = yield* KeyValueStore("KvStore", {});
+        kvStoreArn = kvStore.keyValueStoreArn;
+        const viewerRequest = yield* CloudFrontFunction("ViewerRequest", {
+            comment: `${id} viewer request`,
+            code: buildRequestFunctionCode({
+                kvNamespace,
+                userInjection: props.edge?.viewerRequest?.injection,
+                blockCloudfrontUrl: !!domain,
+            }),
+            keyValueStoreArns: [kvStore.keyValueStoreArn],
+        });
+        const viewerResponse = props.edge?.viewerResponse
+            ? yield* CloudFrontFunction("ViewerResponse", {
+                comment: `${id} viewer response`,
+                code: buildResponseFunctionCode(props.edge.viewerResponse.injection),
+                keyValueStoreArns: props.edge.viewerResponse.keyValueStoreArn
+                    ? [props.edge.viewerResponse.keyValueStoreArn]
+                    : undefined,
+            })
+            : undefined;
+        const functionAssociations = [
+            {
+                eventType: "viewer-request",
+                functionArn: viewerRequest.functionArn,
+            },
+            ...(viewerResponse
+                ? [
+                    {
+                        eventType: "viewer-response",
+                        functionArn: viewerResponse.functionArn,
+                    },
+                ]
+                : []),
+        ];
+        const errorPage = "/" + (props.errorPage ?? indexPage).replace(/^\//, "");
+        const customErrorResponses = props.errorPage
+            ? [
+                {
+                    ErrorCode: 403,
+                    ResponseCode: "404",
+                    ResponsePagePath: errorPage,
+                    ErrorCachingMinTTL: 0,
+                },
+                {
+                    ErrorCode: 404,
+                    ResponseCode: "404",
+                    ResponsePagePath: errorPage,
+                    ErrorCachingMinTTL: 0,
+                },
+            ]
+            : undefined;
+        distribution = yield* Distribution("Distribution", {
+            aliases: domain
+                ? [domain.name, ...(domain.aliases ?? []), ...(domain.redirects ?? [])]
+                : undefined,
+            origins: [
+                {
+                    id: "default",
+                    domainName: "placeholder.alchemy.run",
+                    customOriginConfig: {
+                        httpPort: 80,
+                        httpsPort: 443,
+                        originProtocolPolicy: "https-only",
+                        originReadTimeout: 20,
+                        originSslProtocols: ["TLSv1.2"],
+                    },
+                },
+            ],
+            defaultCacheBehavior: {
+                targetOriginId: "default",
+                viewerProtocolPolicy: "redirect-to-https",
+                allowedMethods: [
+                    "DELETE",
+                    "GET",
+                    "HEAD",
+                    "OPTIONS",
+                    "PATCH",
+                    "POST",
+                    "PUT",
+                ],
+                cachedMethods: ["GET", "HEAD"],
+                compress: true,
+                cachePolicyId: MANAGED_CACHING_OPTIMIZED_POLICY_ID,
+                functionAssociations,
+            },
+            customErrorResponses,
+            viewerCertificate: certificate
+                ? {
+                    acmCertificateArn: certificate.certificateArn,
+                    sslSupportMethod: "sni-only",
+                    minimumProtocolVersion: "TLSv1.2_2021",
+                }
+                : undefined,
+            tags: props.tags,
+        });
+        const dist = distribution;
+        distributionId = dist.distributionId;
+        if (domain?.hostedZoneId && domain.dns !== false) {
+            yield* Effect.forEach([domain.name, ...(domain.aliases ?? []), ...(domain.redirects ?? [])], (name, index) => Route53Record(`AliasRecord${index + 1}`, {
+                hostedZoneId: domain.hostedZoneId,
+                name,
+                type: "A",
+                aliasTarget: {
+                    hostedZoneId: dist.hostedZoneId,
+                    dnsName: dist.domainName,
+                },
+            }), { concurrency: "unbounded" });
+        }
+        prodUrl = domain
+            ? Output.interpolate `https://${domain.name}`
+            : Output.interpolate `https://${dist.domainName}`;
+    }
+    yield* KvEntries("KvEntries", {
+        store: kvStoreArn,
+        namespace: kvNamespace,
+        entries: kvEntries,
+        purge: props.assets?.purge ?? true,
+    });
+    const invalidation = invalidationProps === false
+        ? undefined
+        : yield* Invalidation("Invalidation", {
+            distributionId: distributionId,
+            version: files.version,
+            wait: invalidationProps?.wait,
+            paths: invalidationProps?.paths === "all" || !invalidationProps?.paths
+                ? ["/*"]
+                : invalidationProps.paths === "versioned"
+                    ? [`/${indexPage.replace(/^\/+/, "")}`]
+                    : invalidationProps.paths,
+        });
+    return {
+        bucket: bucket,
+        build,
+        files,
+        distribution,
+        invalidation,
+        kvNamespace,
+        url: prodUrl,
+    };
+});
+const buildKvEntries = (outputPath, bucket, assetPrefix, assetRoutes, indexPage, errorPage, routerPathPrefix) => {
+    const entries = {};
+    const dirs = [];
+    const expandDirs = [".well-known"];
+    const processDir = (childPath = "", level = 0) => {
+        let currentPath;
+        try {
+            currentPath = path.join(outputPath, childPath);
+        }
+        catch {
+            return;
+        }
+        let items;
+        try {
+            items = readdirSync(currentPath, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const item of items) {
+            const name = String(item.name);
+            if (item.isFile()) {
+                const filePath = path.posix.join("/", childPath, name);
+                entries[filePath] = "s3";
+            }
+            else if (item.isDirectory()) {
+                if (level === 0 && expandDirs.includes(name)) {
+                    processDir(path.join(childPath, name), level + 1);
+                }
+                else {
+                    dirs.push(path.posix.join("/", childPath, name));
+                }
+            }
+        }
+    };
+    processDir();
+    const errorPagePath = "/" + (errorPage ?? indexPage).replace(/^\//, "");
+    const bucketDomain = bucket.bucketRegionalDomainName;
+    const metadata = {
+        base: routerPathPrefix && routerPathPrefix !== "/"
+            ? routerPathPrefix
+            : undefined,
+        custom404: errorPage ? undefined : errorPagePath,
+        errorResponseCode: errorPage ? 404 : undefined,
+        s3: {
+            dir: assetPrefix ? "/" + assetPrefix : "",
+            routes: [...assetRoutes, ...dirs],
+        },
+    };
+    entries["metadata"] = stringifyResolvedString(bucketDomain, (domain) => JSON.stringify({
+        ...metadata,
+        s3: {
+            ...metadata.s3,
+            domain,
+        },
+    }));
+    return entries;
+};
+const stringifyResolvedString = (value, build) => typeof value === "string"
+    ? build(value)
+    : Effect.isEffect(value)
+        ? value.pipe(Effect.map((resolved) => build(resolved)))
+        : value.pipe(Output.map((resolved) => build(resolved)));
+const buildRequestFunctionCode = ({ kvNamespace, userInjection, blockCloudfrontUrl, }) => `import cf from "cloudfront";
+async function handler(event) {
+  ${userInjection ?? ""}
+  ${blockCloudfrontUrl ? CF_BLOCK_CLOUDFRONT_URL_INJECTION : ""}
+  ${CF_ROUTER_INJECTION}
+
+  const kvNamespace = "${kvNamespace}";
+
+  let metadata;
+  try {
+    const v = await cf.kvs().get(kvNamespace + ":metadata");
+    metadata = JSON.parse(v);
+  } catch (e) {}
+
+  const response = await routeSite(kvNamespace, metadata);
+  return response || event.request;
+}`;
+const buildResponseFunctionCode = (userInjection) => `import cf from "cloudfront";
+async function handler(event) {
+  ${userInjection ?? ""}
+  return event.response;
+}`;
+const normalizePrefix = (prefix) => prefix ? prefix.replace(/^\/+|\/+$/g, "") : "";
+const normalizeUploadPrefix = (assetPrefix, routerPathPrefix) => {
+    const parts = [assetPrefix, routerPathPrefix?.replace(/^\//, "")].filter(Boolean);
+    return parts.join("/") || "";
+};
+const normalizeRoutePath = (value) => `/${value.replace(/^\/+|\/+$/g, "")}`;
+const normalizeDomain = (domain) => typeof domain === "string" ? { name: domain } : domain;
+//# sourceMappingURL=StaticSite.js.map

package/lib/AWS/Website/StaticSite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticSite.js","sourceRoot":"","sources":["../../../src/AWS/Website/StaticSite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACL,iCAAiC,EACjC,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAqFrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC9C,EAAU,EACV,KAAsB;IAEtB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAW,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC;IAClD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;SAClD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC3B,MAAM,iBAAiB,GACrB,KAAK,CAAC,YAAY,KAAK,SAAS;QAC9B,CAAC,CAAC,KAAK,CAAC,YAAY;QACpB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAE7C,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;QACvB,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;gBAC5B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;gBAC5B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;aAC/B;YACD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1B,GAAG,EAAE,KAAK,CAAC,WAAW;SACvB,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,QAAQ,CAAW,CAAC;IAE/D,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;IAC5C,MAAM,MAAM,GACV,cAAc;QACd,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;YACvB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,CAAC;IAEN,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC;IACtC,MAAM,gBAAgB,GAAG,gBAAgB,EAAE,IAAI;QAC7C,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,gBAAgB;QAC5B,MAAM,EAAE,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;QAClC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW;QACtC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY;KACzC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;IAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;SAClC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC;SACb,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAG,cAAc,CAC9B,gBAAgB,EAChB,MAAM,EACN,WAAW,EACX,WAAW,EACX,SAAS,EACT,KAAK,CAAC,SAAS,EACf,gBAAgB,CACjB,CAAC;IAEF,IAAI,cAA6B,CAAC;IAClC,IAAI,UAAyB,CAAC;IAC9B,IAAI,YAAsC,CAAC;IAC3C,IAAI,OAAkC,CAAC;IAEvC,IAAI,gBAAgB,EAAE,CAAC;QACrB,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC;QAClD,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM;YACzC,CAAC,CAAC,gBAAgB,CAAC,MAAM;iBACpB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;iBACrC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACzB,CAAC,CAAC,SAAS,CAAC;QACd,KAAK,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE;YACpC,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC,WAAkB;YACvD,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE;gBACL,MAAM;gBACN,WAAW;gBACX,WAAW,IAAI,EAAE;gBACjB,gBAAgB,IAAI,GAAG;aACxB,CAAC,IAAI,CAAC,GAAG,CAAC;SACZ,CAAC,CAAC;QACH,OAAO,GAAG,gBAAgB,CAAC,MAAM;YAC/B,CAAC,CAAC,WAAW,gBAAgB,CAAC,MAAM,GAAG,gBAAgB,IAAI,EAAE,EAAE;YAC/D,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,GAAG,gBAAgB,IAAI,EAAE,EAAE,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,IACE,MAAM;YACN,CAAC,MAAM,CAAC,IAAI;YACZ,CAAC,MAAM,CAAC,YAAY;YACpB,MAAM,CAAC,GAAG,KAAK,KAAK,EACpB,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI;YACpB,CAAC,CAAC,MAAM,EAAE,IAAI;gBACZ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE;gBACjC,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE;gBAChC,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,uBAAuB,EAAE;oBACvB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;iBAC5B;gBACD,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QAET,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACpD,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAEtC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;YAC/D,OAAO,EAAE,GAAG,EAAE,iBAAiB;YAC/B,IAAI,EAAE,wBAAwB,CAAC;gBAC7B,WAAW;gBACX,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS;gBACnD,kBAAkB,EAAE,CAAC,CAAC,MAAM;aAC7B,CAAC;YACF,iBAAiB,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,EAAE,cAAc;YAC/C,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;gBAC1C,OAAO,EAAE,GAAG,EAAE,kBAAkB;gBAChC,IAAI,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;gBACpE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB;oBAC3D,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC;oBAC9C,CAAC,CAAC,SAAS;aACd,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,oBAAoB,GAAG;YAC3B;gBACE,SAAS,EAAE,gBAAyB;gBACpC,WAAW,EAAE,aAAa,CAAC,WAAW;aACvC;YACD,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC;oBACE;wBACE,SAAS,EAAE,iBAA0B;wBACrC,WAAW,EAAE,cAAc,CAAC,WAAW;qBACxC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GAAG,KAAK,CAAC,SAAS;YAC1C,CAAC,CAAC;gBACE;oBACE,SAAS,EAAE,GAAG;oBACd,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,SAAS;oBAC3B,kBAAkB,EAAE,CAAC;iBACtB;gBACD;oBACE,SAAS,EAAE,GAAG;oBACd,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,SAAS;oBAC3B,kBAAkB,EAAE,CAAC;iBACtB;aACF;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE;YACjD,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBACvE,CAAC,CAAC,SAAS;YACb,OAAO,EAAE;gBACP;oBACE,EAAE,EAAE,SAAS;oBACb,UAAU,EAAE,yBAAyB;oBACrC,kBAAkB,EAAE;wBAClB,QAAQ,EAAE,EAAE;wBACZ,SAAS,EAAE,GAAG;wBACd,oBAAoB,EAAE,YAAY;wBAClC,iBAAiB,EAAE,EAAE;wBACrB,kBAAkB,EAAE,CAAC,SAAS,CAAC;qBAChC;iBACF;aACF;YACD,oBAAoB,EAAE;gBACpB,cAAc,EAAE,SAAS;gBACzB,oBAAoB,EAAE,mBAAmB;gBACzC,cAAc,EAAE;oBACd,QAAQ;oBACR,KAAK;oBACL,MAAM;oBACN,SAAS;oBACT,OAAO;oBACP,MAAM;oBACN,KAAK;iBACN;gBACD,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBAC9B,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,mCAAmC;gBAClD,oBAAoB;aACrB;YACD,oBAAoB;YACpB,iBAAiB,EAAE,WAAW;gBAC5B,CAAC,CAAC;oBACE,iBAAiB,EAAE,WAAW,CAAC,cAAc;oBAC7C,gBAAgB,EAAE,UAAU;oBAC5B,sBAAsB,EAAE,cAAc;iBACvC;gBACH,CAAC,CAAC,SAAS;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,YAAY,CAAC;QAC1B,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAErC,IAAI,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACjD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EACrE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,aAAa,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,EAAE;gBACvC,YAAY,EAAE,MAAM,CAAC,YAAa;gBAClC,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,WAAW,EAAE;oBACX,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,OAAO,EAAE,IAAI,CAAC,UAAU;iBACzB;aACF,CAAC,EACJ,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,MAAM;YACd,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,WAAW,MAAM,CAAC,IAAI,EAAE;YAC5C,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;QAC5B,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,WAAW;QACtB,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI;KACnC,CAAC,CAAC;IAEH,MAAM,YAAY,GAChB,iBAAiB,KAAK,KAAK;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE;YAClC,cAAc,EAAE,cAAc;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,iBAAiB,EAAE,IAAI;YAC7B,KAAK,EACH,iBAAiB,EAAE,KAAK,KAAK,KAAK,IAAI,CAAC,iBAAiB,EAAE,KAAK;gBAC7D,CAAC,CAAC,CAAC,IAAI,CAAC;gBACR,CAAC,CAAC,iBAAiB,CAAC,KAAK,KAAK,WAAW;oBACvC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;oBACvC,CAAC,CAAC,iBAAiB,CAAC,KAAK;SAChC,CAAC,CAAC;IAET,OAAO;QACL,MAAM,EAAE,MAAM;QACd,KAAK;QACL,KAAK;QACL,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,GAAG,EAAE,OAAO;KACb,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CACrB,UAAkB,EAClB,MAEC,EACD,WAAmB,EACnB,WAAqB,EACrB,SAAiB,EACjB,SAA6B,EAC7B,gBAAoC,EACL,EAAE;IACjC,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,CAAC,aAAa,CAAC,CAAC;IAEnC,MAAM,UAAU,GAAG,CAAC,SAAS,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE;QAC/C,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,KAAoE,CAAC;QACzE,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAQ,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;gBACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC3B,CAAC;iBAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9B,IAAI,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpD,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,UAAU,EAAE,CAAC;IAEb,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC;IACrD,MAAM,QAAQ,GAEV;QACF,IAAI,EACF,gBAAgB,IAAI,gBAAgB,KAAK,GAAG;YAC1C,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,SAAS;QACf,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;QAChD,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QAC9C,EAAE,EAAE;YACF,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE;YACzC,MAAM,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;SAClC;KACF,CAAC;IAEF,OAAO,CAAC,UAAU,CAAC,GAAG,uBAAuB,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACrE,IAAI,CAAC,SAAS,CAAC;QACb,GAAG,QAAQ;QACX,EAAE,EAAE;YACF,GAAG,QAAQ,CAAC,EAAE;YACd,MAAM;SACP;KACF,CAAC,CACH,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAaF,MAAM,uBAAuB,GAAG,CAC9B,KAAoB,EACpB,KAAmC,EACpB,EAAE,CACjB,OAAO,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACd,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAE9D,MAAM,wBAAwB,GAAG,CAAC,EAChC,WAAW,EACX,aAAa,EACb,kBAAkB,GAKnB,EAAE,EAAE,CAAC;;IAEF,aAAa,IAAI,EAAE;IACnB,kBAAkB,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE;IAC3D,mBAAmB;;yBAEE,WAAW;;;;;;;;;;EAUlC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAChC,aAAsB,EACtB,EAAE,CAAC;;IAED,aAAa,IAAI,EAAE;;EAErB,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,MAA0B,EAAE,EAAE,CACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAEjD,MAAM,qBAAqB,GAAG,CAC5B,WAAmB,EACnB,gBAAoC,EACpC,EAAE;IACF,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CACtE,OAAO,CACR,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,EAAE,CAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;AAExC,MAAM,eAAe,GAAG,CACtB,MAAiC,EACD,EAAE,CAClC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC"}

package/lib/AWS/Website/cfcode.d.ts

@@ -0,0 +1,7 @@
+/**
+ * CloudFront Function injection code ported from SST's Router component.
+ * These are JavaScript code strings that get injected into CloudFront Function handlers.
+ */
+export declare const CF_BLOCK_CLOUDFRONT_URL_INJECTION = "\nif (event.request.headers.host.value.includes('cloudfront.net')) {\n  return {\n    statusCode: 403,\n    statusDescription: 'Forbidden',\n    body: {\n      encoding: \"text\",\n      data: '<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>'\n    }\n  };\n}";
+export declare const CF_ROUTER_INJECTION = "\nasync function routeSite(kvNamespace, metadata) {\n  var baselessUri = metadata.base\n    ? event.request.uri.replace(metadata.base, \"\")\n    : event.request.uri;\n\n  try {\n    var u = decodeURIComponent(baselessUri);\n    var postfixes = u.endsWith(\"/\")\n      ? [\"index.html\"]\n      : [\"\", \".html\", \"/index.html\"];\n    var v = await Promise.any(postfixes.map(function(p) { return cf.kvs().get(kvNamespace + \":\" + u + p).then(function() { return p; }); }));\n    event.request.uri = metadata.s3.dir + event.request.uri + v;\n    setS3Origin(metadata.s3.domain);\n    return;\n  } catch (e) {}\n\n  if (metadata.s3 && metadata.s3.routes) {\n    for (var i=0, l=metadata.s3.routes.length; i<l; i++) {\n      var route = metadata.s3.routes[i];\n      if (baselessUri.startsWith(route)) {\n        event.request.uri = metadata.s3.dir + event.request.uri;\n        if (event.request.uri.endsWith(\"/\")) {\n          event.request.uri += \"index.html\";\n        } else if (!event.request.uri.split(\"/\").pop().includes(\".\")) {\n          event.request.uri += \"/index.html\";\n        }\n        setS3Origin(metadata.s3.domain);\n        return;\n      }\n    }\n  }\n\n  if (metadata.custom404 && !metadata.errorResponseCode) {\n    event.request.uri = metadata.s3.dir + (metadata.base ? metadata.base : \"\") + metadata.custom404;\n    setS3Origin(metadata.s3.domain);\n    return;\n  }\n\n  if (metadata.s3 && !metadata.servers) {\n    event.request.uri = metadata.s3.dir + event.request.uri;\n    setS3Origin(metadata.s3.domain);\n    return;\n  }\n\n  if (metadata.image && baselessUri.startsWith(metadata.image.route)) {\n    setForwardedHost();\n    if (isRequestHeaderTooLarge()) return buildOversizedHeadersResponse();\n    setUrlOrigin(metadata.image.host, metadata.image.originAccessControlConfig ? { originAccessControlConfig: metadata.image.originAccessControlConfig } : undefined);\n    return;\n  }\n\n  if (metadata.servers) {\n    setForwardedHost();\n    for (var key in event.request.querystring) {\n      if (key.includes(\"/\")) {\n        event.request.querystring[encodeURIComponent(key)] = event.request.querystring[key];\n        delete event.request.querystring[key];\n      }\n    }\n    if (isRequestHeaderTooLarge()) return buildOversizedHeadersResponse();\n    setUrlOrigin(findNearestServer(metadata.servers), metadata.origin);\n  }\n\n  function findNearestServer(servers) {\n    if (servers.length === 1) return servers[0][0];\n    var h = event.request.headers;\n    var lat = h[\"cloudfront-viewer-latitude\"] && h[\"cloudfront-viewer-latitude\"].value;\n    var lon = h[\"cloudfront-viewer-longitude\"] && h[\"cloudfront-viewer-longitude\"].value;\n    if (!lat || !lon) return servers[0][0];\n    return servers.map(function(s) { return { distance: haversineDistance(lat, lon, s[1], s[2]), host: s[0] }; }).sort(function(a,b) { return a.distance - b.distance; })[0].host;\n  }\n\n  function haversineDistance(lat1, lon1, lat2, lon2) {\n    var toRad = function(a) { return a * Math.PI / 180; };\n    var dLat = toRad(lat2 - lat1);\n    var dLon = toRad(lon2 - lon1);\n    var a = Math.sin(dLat/2)*Math.sin(dLat/2) + Math.cos(toRad(lat1))*Math.cos(toRad(lat2))*Math.sin(dLon/2)*Math.sin(dLon/2);\n    return 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));\n  }\n\n  function isRequestHeaderTooLarge() {\n    return getRequestHeaderSize() > 9728;\n  }\n\n  function buildOversizedHeadersResponse() {\n    return {\n      statusCode: 431,\n      statusDescription: \"Request Header Fields Too Large\",\n      headers: { \"cache-control\": { value: \"no-store\" }, \"content-type\": { value: \"text/plain; charset=utf-8\" } },\n      body: { encoding: \"text\", data: \"Request headers are too large. Reduce cookie size and try again.\" },\n    };\n  }\n\n  function getRequestHeaderSize() {\n    var size = 0;\n    for (var key in event.request.headers) {\n      var header = event.request.headers[key];\n      if (header.multiValue) {\n        for (var i=0; i<header.multiValue.length; i++) size += key.length + header.multiValue[i].value.length + 4;\n      } else if (header.value) {\n        size += key.length + header.value.length + 4;\n      }\n    }\n    var cookies = [];\n    for (var key in event.request.cookies) {\n      var cookie = event.request.cookies[key];\n      if (cookie.multiValue) {\n        for (var i=0; i<cookie.multiValue.length; i++) cookies.push(key + \"=\" + cookie.multiValue[i].value);\n      } else {\n        cookies.push(key + \"=\" + cookie.value);\n      }\n    }\n    if (cookies.length) size += 10 + cookies.join(\"; \").length;\n    return size;\n  }\n}\n\nfunction setForwardedHost() {\n  event.request.headers[\"x-forwarded-host\"] = event.request.headers.host;\n}\n\nfunction setUrlOrigin(urlHost, override) {\n  setForwardedHost();\n  var origin = {\n    domainName: urlHost,\n    customOriginConfig: {\n      port: 443,\n      protocol: \"https\",\n      sslProtocols: [\"TLSv1.2\"],\n    },\n    originAccessControlConfig: {\n      enabled: false,\n    }\n  };\n  override = override || {};\n  if (override.protocol === \"http\") delete origin.customOriginConfig;\n  if (override.connectionAttempts) origin.connectionAttempts = override.connectionAttempts;\n  if (override.timeouts) origin.timeouts = override.timeouts;\n  if (override.originAccessControlConfig) origin.originAccessControlConfig = override.originAccessControlConfig;\n  cf.updateRequestOrigin(origin);\n}\n\nfunction setS3Origin(s3Domain, override) {\n  delete event.request.headers[\"Cookies\"];\n  delete event.request.headers[\"cookies\"];\n  delete event.request.cookies;\n  var origin = {\n    domainName: s3Domain,\n    originAccessControlConfig: {\n      enabled: true,\n      signingBehavior: \"always\",\n      signingProtocol: \"sigv4\",\n      originType: \"s3\",\n    }\n  };\n  override = override || {};\n  if (override.connectionAttempts) origin.connectionAttempts = override.connectionAttempts;\n  if (override.timeouts) origin.timeouts = override.timeouts;\n  cf.updateRequestOrigin(origin);\n}";
+//# sourceMappingURL=cfcode.d.ts.map

package/lib/AWS/Website/cfcode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cfcode.d.ts","sourceRoot":"","sources":["../../../src/AWS/Website/cfcode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iCAAiC,kUAU5C,CAAC;AAIH,eAAO,MAAM,mBAAmB,m8LAgK9B,CAAC"}

package/lib/AWS/Website/cfcode.js

@@ -0,0 +1,178 @@
+/**
+ * CloudFront Function injection code ported from SST's Router component.
+ * These are JavaScript code strings that get injected into CloudFront Function handlers.
+ */
+export const CF_BLOCK_CLOUDFRONT_URL_INJECTION = `
+if (event.request.headers.host.value.includes('cloudfront.net')) {
+  return {
+    statusCode: 403,
+    statusDescription: 'Forbidden',
+    body: {
+      encoding: "text",
+      data: '<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>'
+    }
+  };
+}`;
+const CLOUDFRONT_FUNCTION_SAFE_HEADER_LIMIT = 10240 - 512;
+export const CF_ROUTER_INJECTION = `
+async function routeSite(kvNamespace, metadata) {
+  var baselessUri = metadata.base
+    ? event.request.uri.replace(metadata.base, "")
+    : event.request.uri;
+
+  try {
+    var u = decodeURIComponent(baselessUri);
+    var postfixes = u.endsWith("/")
+      ? ["index.html"]
+      : ["", ".html", "/index.html"];
+    var v = await Promise.any(postfixes.map(function(p) { return cf.kvs().get(kvNamespace + ":" + u + p).then(function() { return p; }); }));
+    event.request.uri = metadata.s3.dir + event.request.uri + v;
+    setS3Origin(metadata.s3.domain);
+    return;
+  } catch (e) {}
+
+  if (metadata.s3 && metadata.s3.routes) {
+    for (var i=0, l=metadata.s3.routes.length; i<l; i++) {
+      var route = metadata.s3.routes[i];
+      if (baselessUri.startsWith(route)) {
+        event.request.uri = metadata.s3.dir + event.request.uri;
+        if (event.request.uri.endsWith("/")) {
+          event.request.uri += "index.html";
+        } else if (!event.request.uri.split("/").pop().includes(".")) {
+          event.request.uri += "/index.html";
+        }
+        setS3Origin(metadata.s3.domain);
+        return;
+      }
+    }
+  }
+
+  if (metadata.custom404 && !metadata.errorResponseCode) {
+    event.request.uri = metadata.s3.dir + (metadata.base ? metadata.base : "") + metadata.custom404;
+    setS3Origin(metadata.s3.domain);
+    return;
+  }
+
+  if (metadata.s3 && !metadata.servers) {
+    event.request.uri = metadata.s3.dir + event.request.uri;
+    setS3Origin(metadata.s3.domain);
+    return;
+  }
+
+  if (metadata.image && baselessUri.startsWith(metadata.image.route)) {
+    setForwardedHost();
+    if (isRequestHeaderTooLarge()) return buildOversizedHeadersResponse();
+    setUrlOrigin(metadata.image.host, metadata.image.originAccessControlConfig ? { originAccessControlConfig: metadata.image.originAccessControlConfig } : undefined);
+    return;
+  }
+
+  if (metadata.servers) {
+    setForwardedHost();
+    for (var key in event.request.querystring) {
+      if (key.includes("/")) {
+        event.request.querystring[encodeURIComponent(key)] = event.request.querystring[key];
+        delete event.request.querystring[key];
+      }
+    }
+    if (isRequestHeaderTooLarge()) return buildOversizedHeadersResponse();
+    setUrlOrigin(findNearestServer(metadata.servers), metadata.origin);
+  }
+
+  function findNearestServer(servers) {
+    if (servers.length === 1) return servers[0][0];
+    var h = event.request.headers;
+    var lat = h["cloudfront-viewer-latitude"] && h["cloudfront-viewer-latitude"].value;
+    var lon = h["cloudfront-viewer-longitude"] && h["cloudfront-viewer-longitude"].value;
+    if (!lat || !lon) return servers[0][0];
+    return servers.map(function(s) { return { distance: haversineDistance(lat, lon, s[1], s[2]), host: s[0] }; }).sort(function(a,b) { return a.distance - b.distance; })[0].host;
+  }
+
+  function haversineDistance(lat1, lon1, lat2, lon2) {
+    var toRad = function(a) { return a * Math.PI / 180; };
+    var dLat = toRad(lat2 - lat1);
+    var dLon = toRad(lon2 - lon1);
+    var a = Math.sin(dLat/2)*Math.sin(dLat/2) + Math.cos(toRad(lat1))*Math.cos(toRad(lat2))*Math.sin(dLon/2)*Math.sin(dLon/2);
+    return 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));
+  }
+
+  function isRequestHeaderTooLarge() {
+    return getRequestHeaderSize() > ${CLOUDFRONT_FUNCTION_SAFE_HEADER_LIMIT};
+  }
+
+  function buildOversizedHeadersResponse() {
+    return {
+      statusCode: 431,
+      statusDescription: "Request Header Fields Too Large",
+      headers: { "cache-control": { value: "no-store" }, "content-type": { value: "text/plain; charset=utf-8" } },
+      body: { encoding: "text", data: "Request headers are too large. Reduce cookie size and try again." },
+    };
+  }
+
+  function getRequestHeaderSize() {
+    var size = 0;
+    for (var key in event.request.headers) {
+      var header = event.request.headers[key];
+      if (header.multiValue) {
+        for (var i=0; i<header.multiValue.length; i++) size += key.length + header.multiValue[i].value.length + 4;
+      } else if (header.value) {
+        size += key.length + header.value.length + 4;
+      }
+    }
+    var cookies = [];
+    for (var key in event.request.cookies) {
+      var cookie = event.request.cookies[key];
+      if (cookie.multiValue) {
+        for (var i=0; i<cookie.multiValue.length; i++) cookies.push(key + "=" + cookie.multiValue[i].value);
+      } else {
+        cookies.push(key + "=" + cookie.value);
+      }
+    }
+    if (cookies.length) size += 10 + cookies.join("; ").length;
+    return size;
+  }
+}
+
+function setForwardedHost() {
+  event.request.headers["x-forwarded-host"] = event.request.headers.host;
+}
+
+function setUrlOrigin(urlHost, override) {
+  setForwardedHost();
+  var origin = {
+    domainName: urlHost,
+    customOriginConfig: {
+      port: 443,
+      protocol: "https",
+      sslProtocols: ["TLSv1.2"],
+    },
+    originAccessControlConfig: {
+      enabled: false,
+    }
+  };
+  override = override || {};
+  if (override.protocol === "http") delete origin.customOriginConfig;
+  if (override.connectionAttempts) origin.connectionAttempts = override.connectionAttempts;
+  if (override.timeouts) origin.timeouts = override.timeouts;
+  if (override.originAccessControlConfig) origin.originAccessControlConfig = override.originAccessControlConfig;
+  cf.updateRequestOrigin(origin);
+}
+
+function setS3Origin(s3Domain, override) {
+  delete event.request.headers["Cookies"];
+  delete event.request.headers["cookies"];
+  delete event.request.cookies;
+  var origin = {
+    domainName: s3Domain,
+    originAccessControlConfig: {
+      enabled: true,
+      signingBehavior: "always",
+      signingProtocol: "sigv4",
+      originType: "s3",
+    }
+  };
+  override = override || {};
+  if (override.connectionAttempts) origin.connectionAttempts = override.connectionAttempts;
+  if (override.timeouts) origin.timeouts = override.timeouts;
+  cf.updateRequestOrigin(origin);
+}`;
+//# sourceMappingURL=cfcode.js.map

package/lib/AWS/Website/cfcode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cfcode.js","sourceRoot":"","sources":["../../../src/AWS/Website/cfcode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;;;EAU/C,CAAC;AAEH,MAAM,qCAAqC,GAAG,KAAK,GAAG,GAAG,CAAC;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAkFG,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8EzE,CAAC"}

package/lib/AWS/Website/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./AssetDeployment.ts";
+export * from "./Router.ts";
+export * from "./shared.ts";
+export * from "./SsrSite.ts";
+export * from "./StaticSite.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/AWS/Website/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/Website/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/lib/AWS/Website/index.js

@@ -0,0 +1,6 @@
+export * from "./AssetDeployment.js";
+export * from "./Router.js";
+export * from "./shared.js";
+export * from "./SsrSite.js";
+export * from "./StaticSite.js";
+//# sourceMappingURL=index.js.map

package/lib/AWS/Website/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/Website/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}