alchemy 2.0.0-beta.cli-platform-split → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/Website/Router.d.ts

@@ -0,0 +1,54 @@
+import * as Effect from "effect/Effect";
+import type { Input } from "../../Input.ts";
+import * as Output from "../../Output.ts";
+import { Stack } from "../../Stack.ts";
+import { Stage } from "../../Stage.ts";
+import { Certificate } from "../ACM/Certificate.ts";
+import { Distribution } from "../CloudFront/Distribution.ts";
+import { Invalidation } from "../CloudFront/Invalidation.ts";
+import { Record as Route53Record } from "../Route53/Record.ts";
+import type { RouterProps } from "./shared.ts";
+/**
+ * Shared CloudFront front door with KV-based dynamic routing.
+ *
+ * `Router` owns a single CloudFront distribution with a placeholder origin.
+ * Routes are registered lazily via KV entries. A CloudFront Function reads the
+ * KV store at the edge and dynamically sets the origin using
+ * `cf.updateRequestOrigin()`.
+ *
+ * Sites register themselves by writing their file manifest and metadata into
+ * the Router's KV store. The Router's CF function matches incoming requests to
+ * routes by host pattern and path prefix, then delegates to `routeSite()` for
+ * static site routing or directly sets URL/S3 origins.
+ *
+ * @section Creating Routers
+ * @example Basic Router
+ * ```typescript
+ * const router = yield* Router("WebsiteRouter", {
+ *   domain: { name: "example.com", hostedZoneId },
+ * });
+ * ```
+ *
+ * @section Inline Routes
+ * @example URL And Bucket Routes
+ * ```typescript
+ * const router = yield* Router("WebsiteRouter", {
+ *   routes: {
+ *     "/*": { url: api.functionUrl },
+ *   },
+ * });
+ * ```
+ */
+export declare const Router: (id: string, props: RouterProps) => Effect.Effect<{
+    certificate: Certificate | {
+        certificateArn: Input<string>;
+    } | undefined;
+    distribution: Distribution;
+    records: Route53Record[];
+    invalidation: Invalidation | undefined;
+    kvStoreArn: Input<string>;
+    kvNamespace: string;
+    distributionId: Input<string>;
+    url: Output.Output<string, unknown>;
+}, never, Stage | Stack | import("../Providers.ts").Providers>;
+//# sourceMappingURL=Router.d.ts.map

package/lib/AWS/Website/Router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Router.d.ts","sourceRoot":"","sources":["../../../src/AWS/Website/Router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,EAEb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAK7D,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAK/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,MAAM;;;;;;;gBA0NyB,KAAK,CAAC,MAAM,CAAC;;oBAEN,KAAK,CAAC,MAAM,CAAC;;8DAK9D,CAAC"}

package/lib/AWS/Website/Router.js

@@ -0,0 +1,324 @@
+import * as Effect from "effect/Effect";
+import { createHash } from "node:crypto";
+import * as Construct from "../../Construct.js";
+import { toPath } from "../../FQN.js";
+import * as Namespace from "../../Namespace.js";
+import * as Output from "../../Output.js";
+import { Stack } from "../../Stack.js";
+import { Stage } from "../../Stage.js";
+import { Certificate } from "../ACM/Certificate.js";
+import { Distribution, } from "../CloudFront/Distribution.js";
+import { Function as CloudFrontFunction } from "../CloudFront/Function.js";
+import { Invalidation } from "../CloudFront/Invalidation.js";
+import { KeyValueStore } from "../CloudFront/KeyValueStore.js";
+import { KvEntries } from "../CloudFront/KvEntries.js";
+import { KvRoutesUpdate } from "../CloudFront/KvRoutesUpdate.js";
+import { MANAGED_CACHING_OPTIMIZED_POLICY_ID } from "../CloudFront/ManagedPolicies.js";
+import { Record as Route53Record } from "../Route53/Record.js";
+import { CF_BLOCK_CLOUDFRONT_URL_INJECTION, CF_ROUTER_INJECTION, } from "./cfcode.js";
+/**
+ * Shared CloudFront front door with KV-based dynamic routing.
+ *
+ * `Router` owns a single CloudFront distribution with a placeholder origin.
+ * Routes are registered lazily via KV entries. A CloudFront Function reads the
+ * KV store at the edge and dynamically sets the origin using
+ * `cf.updateRequestOrigin()`.
+ *
+ * Sites register themselves by writing their file manifest and metadata into
+ * the Router's KV store. The Router's CF function matches incoming requests to
+ * routes by host pattern and path prefix, then delegates to `routeSite()` for
+ * static site routing or directly sets URL/S3 origins.
+ *
+ * @section Creating Routers
+ * @example Basic Router
+ * ```typescript
+ * const router = yield* Router("WebsiteRouter", {
+ *   domain: { name: "example.com", hostedZoneId },
+ * });
+ * ```
+ *
+ * @section Inline Routes
+ * @example URL And Bucket Routes
+ * ```typescript
+ * const router = yield* Router("WebsiteRouter", {
+ *   routes: {
+ *     "/*": { url: api.functionUrl },
+ *   },
+ * });
+ * ```
+ */
+export const Router = Construct.fn(function* (id, props) {
+    const domain = props.domain;
+    if (domain && domain.dns === false && !domain.cert) {
+        return yield* Effect.die("Router domain configuration with `dns: false` requires `cert`.");
+    }
+    const certificate = !domain || domain.cert
+        ? domain?.cert
+            ? { certificateArn: domain.cert }
+            : undefined
+        : yield* Certificate("Certificate", {
+            domainName: domain.name,
+            subjectAlternativeNames: [
+                ...(domain.aliases ?? []),
+                ...(domain.redirects ?? []),
+            ],
+            hostedZoneId: domain.hostedZoneId,
+            tags: props.tags,
+        });
+    const stack = yield* Stack;
+    const stage = yield* Stage;
+    const ns = yield* Namespace.CurrentNamespace;
+    const fqn = ns ? toPath(ns).join("/") : id;
+    const kvNamespace = createHash("md5")
+        .update(`${stack.name}-${stage}-${fqn}`)
+        .digest("hex")
+        .substring(0, 4);
+    const kvStore = yield* KeyValueStore("KvStore", {});
+    const viewerRequest = yield* CloudFrontFunction("ViewerRequest", {
+        comment: `${id} viewer request`,
+        code: buildRouterRequestFunctionCode({
+            kvNamespace,
+            userInjection: props.edge?.viewerRequest?.injection,
+            blockCloudfrontUrl: !!domain,
+        }),
+        keyValueStoreArns: [kvStore.keyValueStoreArn],
+    });
+    const viewerResponse = props.edge?.viewerResponse
+        ? yield* CloudFrontFunction("ViewerResponse", {
+            comment: `${id} viewer response`,
+            code: buildRouterResponseFunctionCode(props.edge.viewerResponse.injection),
+            keyValueStoreArns: props.edge.viewerResponse.keyValueStoreArn
+                ? [props.edge.viewerResponse.keyValueStoreArn]
+                : undefined,
+        })
+        : undefined;
+    const functionAssociations = [
+        {
+            eventType: "viewer-request",
+            functionArn: viewerRequest.functionArn,
+        },
+        ...(viewerResponse
+            ? [
+                {
+                    eventType: "viewer-response",
+                    functionArn: viewerResponse.functionArn,
+                },
+            ]
+            : []),
+    ];
+    const inlineRouteEntries = {};
+    if (props.routes) {
+        let routeIndex = 0;
+        for (const [pattern, route] of Object.entries(props.routes)) {
+            routeIndex++;
+            const routeNs = createHash("md5")
+                .update(`${stack.name}-${stage}-${fqn}:route:${routeIndex}`)
+                .digest("hex")
+                .substring(0, 4);
+            if (typeof route === "string" || "url" in route) {
+                const url = typeof route === "string" ? route : route.url;
+                const host = typeof url === "string" ? new URL(url).host : url;
+                inlineRouteEntries[`${routeNs}:metadata`] = stringifyResolvedString(host, (resolvedHost) => JSON.stringify({
+                    host: resolvedHost,
+                    origin: route.origin,
+                    rewrite: route.rewrite,
+                }));
+                yield* KvRoutesUpdate(`Route${routeIndex}`, {
+                    store: kvStore.keyValueStoreArn,
+                    namespace: kvNamespace,
+                    key: "routes",
+                    entry: `url,${routeNs},,${normalizePattern(pattern)}`,
+                });
+            }
+            else {
+                const bucketRoute = route;
+                const bucketDomain = typeof bucketRoute.bucket === "string"
+                    ? bucketRoute.bucket
+                    : bucketRoute.bucket.bucketRegionalDomainName;
+                inlineRouteEntries[`${routeNs}:metadata`] = stringifyResolvedString(bucketDomain, (resolvedDomain) => JSON.stringify({
+                    domain: resolvedDomain,
+                    origin: bucketRoute.origin,
+                    rewrite: bucketRoute.rewrite,
+                }));
+                yield* KvRoutesUpdate(`Route${routeIndex}`, {
+                    store: kvStore.keyValueStoreArn,
+                    namespace: kvNamespace,
+                    key: "routes",
+                    entry: `bucket,${routeNs},,${normalizePattern(pattern)}`,
+                });
+            }
+        }
+    }
+    if (Object.keys(inlineRouteEntries).length > 0) {
+        yield* KvEntries("InlineRouteEntries", {
+            store: kvStore.keyValueStoreArn,
+            namespace: kvNamespace,
+            entries: inlineRouteEntries,
+        });
+    }
+    const distribution = yield* Distribution("Distribution", {
+        aliases: domain
+            ? [domain.name, ...(domain.aliases ?? []), ...(domain.redirects ?? [])]
+            : undefined,
+        origins: [
+            {
+                id: "default",
+                domainName: "placeholder.sst.dev",
+                customOriginConfig: {
+                    httpPort: 80,
+                    httpsPort: 443,
+                    originProtocolPolicy: "https-only",
+                    originReadTimeout: 20,
+                    originSslProtocols: ["TLSv1.2"],
+                },
+            },
+        ],
+        defaultCacheBehavior: {
+            targetOriginId: "default",
+            viewerProtocolPolicy: "redirect-to-https",
+            allowedMethods: [
+                "DELETE",
+                "GET",
+                "HEAD",
+                "OPTIONS",
+                "PATCH",
+                "POST",
+                "PUT",
+            ],
+            cachedMethods: ["GET", "HEAD"],
+            compress: true,
+            cachePolicyId: MANAGED_CACHING_OPTIMIZED_POLICY_ID,
+            functionAssociations,
+        },
+        viewerCertificate: certificate
+            ? {
+                acmCertificateArn: certificate.certificateArn,
+                sslSupportMethod: "sni-only",
+                minimumProtocolVersion: "TLSv1.2_2021",
+            }
+            : undefined,
+        tags: props.tags,
+    });
+    const records = domain?.hostedZoneId && domain.dns !== false
+        ? yield* Effect.forEach([domain.name, ...(domain.aliases ?? []), ...(domain.redirects ?? [])], (name, index) => Route53Record(`AliasRecord${index + 1}`, {
+            hostedZoneId: domain.hostedZoneId,
+            name,
+            type: "A",
+            aliasTarget: {
+                hostedZoneId: distribution.hostedZoneId,
+                dnsName: distribution.domainName,
+            },
+        }), { concurrency: "unbounded" })
+        : [];
+    const invalidation = props.invalidation === false || !props.invalidation
+        ? undefined
+        : yield* Invalidation("Invalidation", {
+            distributionId: distribution.distributionId,
+            version: createHash("sha256")
+                .update(JSON.stringify(inlineRouteEntries))
+                .digest("hex"),
+            wait: props.invalidation.wait,
+            paths: props.invalidation.paths === "all" || !props.invalidation.paths
+                ? ["/*"]
+                : Array.isArray(props.invalidation.paths)
+                    ? props.invalidation.paths
+                    : ["/*"],
+        });
+    return {
+        certificate,
+        distribution,
+        records,
+        invalidation,
+        kvStoreArn: kvStore.keyValueStoreArn,
+        kvNamespace,
+        distributionId: distribution.distributionId,
+        url: domain
+            ? Output.interpolate `https://${domain.name}`
+            : Output.interpolate `https://${distribution.domainName}`,
+    };
+});
+const buildRouterRequestFunctionCode = ({ kvNamespace, userInjection, blockCloudfrontUrl, }) => `import cf from "cloudfront";
+async function handler(event) {
+  ${userInjection ?? ""}
+  ${blockCloudfrontUrl ? CF_BLOCK_CLOUDFRONT_URL_INJECTION : ""}
+  ${CF_ROUTER_INJECTION}
+
+  async function getRoutes() {
+    var routerNS = "${kvNamespace}";
+    var routes = [];
+    try {
+      var v = await cf.kvs().get(routerNS + ":routes");
+      routes = JSON.parse(v);
+      if (routes.parts) {
+        var chunkPromises = [];
+        for (var i = 0; i < routes.parts; i++) {
+          chunkPromises.push(cf.kvs().get(routerNS + ":routes:" + i));
+        }
+        var chunks = await Promise.all(chunkPromises);
+        routes = JSON.parse(chunks.join(""));
+      }
+    } catch (e) {}
+    return routes;
+  }
+
+  async function matchRoute(routes) {
+    var requestHost = event.request.headers.host.value;
+    var requestHostWithEscapedDots = requestHost.replace(/\\./g, "\\\\.");
+    var requestHostRegexPattern = "^" + requestHost + "$";
+    var match;
+    routes.forEach(function(r) {
+      var parts = r.split(",");
+      var type = parts[0];
+      var routeNs = parts[1];
+      var host = parts[2];
+      var hostLength = host.length;
+      var path = parts[3];
+      var pathLength = path.length;
+      if (match && (hostLength < match.hostLength || (hostLength === match.hostLength && pathLength < match.pathLength))) return;
+      var hostMatches = host === "" || host === requestHostWithEscapedDots || (host.includes("*") && new RegExp(host).test(requestHostRegexPattern));
+      if (!hostMatches) return;
+      var pathMatches = event.request.uri.startsWith(path) && (event.request.uri === path || path.endsWith('/') || event.request.uri[path.length] === '/' || path === '/');
+      if (!pathMatches) return;
+      match = { type: type, routeNs: routeNs, host: host, hostLength: hostLength, path: path, pathLength: pathLength };
+    });
+    if (match) {
+      try {
+        var type = match.type;
+        var routeNs = match.routeNs;
+        var v = await cf.kvs().get(routeNs + ":metadata");
+        return { type: type, routeNs: routeNs, metadata: JSON.parse(v) };
+      } catch (e) {}
+    }
+  }
+
+  var routes = await getRoutes();
+  var route = await matchRoute(routes);
+  if (!route) return event.request;
+  if (route.metadata.rewrite) {
+    var rw = route.metadata.rewrite;
+    event.request.uri = event.request.uri.replace(new RegExp(rw.regex), rw.to);
+  }
+  if (route.type === "url") setUrlOrigin(route.metadata.host, route.metadata.origin);
+  if (route.type === "bucket") setS3Origin(route.metadata.domain, route.metadata.origin);
+  if (route.type === "site") {
+    var response = await routeSite(route.routeNs, route.metadata);
+    return response || event.request;
+  }
+  return event.request;
+}`;
+const buildRouterResponseFunctionCode = (userInjection) => `import cf from "cloudfront";
+async function handler(event) {
+  ${userInjection ?? ""}
+  return event.response;
+}`;
+const normalizePattern = (pattern) => {
+    if (pattern === "/" || pattern === "/*")
+        return "/";
+    return pattern.replace(/\/?\*$/, "");
+};
+const stringifyResolvedString = (value, build) => typeof value === "string"
+    ? build(value)
+    : Effect.isEffect(value)
+        ? value.pipe(Effect.map((resolved) => build(resolved)))
+        : value.pipe(Output.map((resolved) => build(resolved)));
+//# sourceMappingURL=Router.js.map

package/lib/AWS/Website/Router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Router.js","sourceRoot":"","sources":["../../../src/AWS/Website/Router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,YAAY,GAEb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EACL,iCAAiC,EACjC,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAU,EAAE,KAAkB;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAE5B,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI;QACpB,CAAC,CAAC,MAAM,EAAE,IAAI;YACZ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE;YACjC,CAAC,CAAC,SAAS;QACb,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE;YAChC,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,uBAAuB,EAAE;gBACvB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;aAC5B;YACD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;IAET,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;IAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;SAClC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC;SACb,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEpD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;QAC/D,OAAO,EAAE,GAAG,EAAE,iBAAiB;QAC/B,IAAI,EAAE,8BAA8B,CAAC;YACnC,WAAW;YACX,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS;YACnD,kBAAkB,EAAE,CAAC,CAAC,MAAM;SAC7B,CAAC;QACF,iBAAiB,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;KAC9C,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,EAAE,cAAc;QAC/C,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;YAC1C,OAAO,EAAE,GAAG,EAAE,kBAAkB;YAChC,IAAI,EAAE,+BAA+B,CACnC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CACpC;YACD,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB;gBAC3D,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAuB,CAAC;gBACrD,CAAC,CAAC,SAAS;SACd,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,oBAAoB,GAAiD;QACzE;YACE,SAAS,EAAE,gBAAyB;YACpC,WAAW,EAAE,aAAa,CAAC,WAAkB;SAC9C;QACD,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE;oBACE,SAAS,EAAE,iBAA0B;oBACrC,WAAW,EAAE,cAAc,CAAC,WAAkB;iBAC/C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,kBAAkB,GAAkC,EAAE,CAAC;IAE7D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,UAAU,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC;iBAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,GAAG,UAAU,UAAU,EAAE,CAAC;iBAC3D,MAAM,CAAC,KAAK,CAAC;iBACb,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEnB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAK,KAAa,EAAE,CAAC;gBACzD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAAa,CAAC,GAAG,CAAC;gBACnE,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC/D,kBAAkB,CAAC,GAAG,OAAO,WAAW,CAAC,GAAG,uBAAuB,CACjE,IAAI,EACJ,CAAC,YAAY,EAAE,EAAE,CACf,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAG,KAAa,CAAC,MAAM;oBAC7B,OAAO,EAAG,KAAa,CAAC,OAAO;iBAChC,CAAC,CACL,CAAC;gBACF,KAAK,CAAC,CAAC,cAAc,CAAC,QAAQ,UAAU,EAAE,EAAE;oBAC1C,KAAK,EAAE,OAAO,CAAC,gBAAuB;oBACtC,SAAS,EAAE,WAAW;oBACtB,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,OAAO,OAAO,KAAK,gBAAgB,CAAC,OAAO,CAAC,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,KAAY,CAAC;gBACjC,MAAM,YAAY,GAChB,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ;oBACpC,CAAC,CAAC,WAAW,CAAC,MAAM;oBACpB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC;gBAClD,kBAAkB,CAAC,GAAG,OAAO,WAAW,CAAC,GAAG,uBAAuB,CACjE,YAAY,EACZ,CAAC,cAAc,EAAE,EAAE,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;iBAC7B,CAAC,CACL,CAAC;gBACF,KAAK,CAAC,CAAC,cAAc,CAAC,QAAQ,UAAU,EAAE,EAAE;oBAC1C,KAAK,EAAE,OAAO,CAAC,gBAAuB;oBACtC,SAAS,EAAE,WAAW;oBACtB,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,UAAU,OAAO,KAAK,gBAAgB,CAAC,OAAO,CAAC,EAAE;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,CAAC,SAAS,CAAC,oBAAoB,EAAE;YACrC,KAAK,EAAE,OAAO,CAAC,gBAAuB;YACtC,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,kBAAkB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE;QACvD,OAAO,EAAE,MAAM;YACb,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC,CAAC,SAAS;QACb,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,qBAAqB;gBACjC,kBAAkB,EAAE;oBAClB,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE,GAAG;oBACd,oBAAoB,EAAE,YAAY;oBAClC,iBAAiB,EAAE,EAAE;oBACrB,kBAAkB,EAAE,CAAC,SAAS,CAAC;iBAChC;aACF;SACF;QACD,oBAAoB,EAAE;YACpB,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,mBAAmB;YACzC,cAAc,EAAE;gBACd,QAAQ;gBACR,KAAK;gBACL,MAAM;gBACN,SAAS;gBACT,OAAO;gBACP,MAAM;gBACN,KAAK;aACN;YACD,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YAC9B,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,mCAAmC;YAClD,oBAAoB;SACrB;QACD,iBAAiB,EAAE,WAAW;YAC5B,CAAC,CAAC;gBACE,iBAAiB,EAAG,WAAmB,CAAC,cAAc;gBACtD,gBAAgB,EAAE,UAAU;gBAC5B,sBAAsB,EAAE,cAAc;aACvC;YACH,CAAC,CAAC,SAAS;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GACX,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK;QAC1C,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EACrE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,aAAa,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,EAAE;YACvC,YAAY,EAAE,MAAM,CAAC,YAAa;YAClC,IAAI;YACJ,IAAI,EAAE,GAAG;YACT,WAAW,EAAE;gBACX,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,OAAO,EAAE,YAAY,CAAC,UAAU;aACjC;SACF,CAAC,EACJ,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B;QACH,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,YAAY,GAChB,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY;QACjD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE;YAClC,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;iBAC1C,MAAM,CAAC,KAAK,CAAC;YAChB,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI;YAC7B,KAAK,EACH,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK;gBAC7D,CAAC,CAAC,CAAC,IAAI,CAAC;gBACR,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;oBACvC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK;oBAC1B,CAAC,CAAC,CAAC,IAAI,CAAC;SACf,CAAC,CAAC;IAET,OAAO;QACL,WAAW;QACX,YAAY;QACZ,OAAO;QACP,YAAY;QACZ,UAAU,EAAE,OAAO,CAAC,gBAAiC;QACrD,WAAW;QACX,cAAc,EAAE,YAAY,CAAC,cAA+B;QAC5D,GAAG,EAAE,MAAM;YACT,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,WAAW,MAAM,CAAC,IAAI,EAAE;YAC5C,CAAC,CAAC,MAAM,CAAC,WAAW,CAAA,WAAW,YAAY,CAAC,UAAU,EAAE;KAC3D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,CAAC,EACtC,WAAW,EACX,aAAa,EACb,kBAAkB,GAKnB,EAAE,EAAE,CAAC;;IAEF,aAAa,IAAI,EAAE;IACnB,kBAAkB,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE;IAC3D,mBAAmB;;;sBAGD,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6D/B,CAAC;AAEH,MAAM,+BAA+B,GAAG,CAAC,aAAsB,EAAE,EAAE,CACjE;;IAEE,aAAa,IAAI,EAAE;;EAErB,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,EAAE;IAC3C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACpD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,KAAoB,EACpB,KAAmC,EACpB,EAAE,CACjB,OAAO,KAAK,KAAK,QAAQ;IACvB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACd,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC"}

package/lib/AWS/Website/SsrSite.d.ts

@@ -0,0 +1,143 @@
+import type * as cloudfront from "@distilled.cloud/aws/cloudfront";
+import * as Effect from "effect/Effect";
+import type { Input } from "../../Input.ts";
+import * as Output from "../../Output.ts";
+import { Certificate } from "../ACM/Certificate.ts";
+import { Distribution } from "../CloudFront/Distribution.ts";
+import { Invalidation } from "../CloudFront/Invalidation.ts";
+import { OriginAccessControl } from "../CloudFront/OriginAccessControl.ts";
+import type { Service } from "../ECS/Service.ts";
+import { Function } from "../Lambda/Function.ts";
+import { Record as Route53Record } from "../Route53/Record.ts";
+import { Bucket } from "../S3/Bucket.ts";
+import type { AssetFileOption } from "./AssetDeployment.ts";
+import { AssetDeployment } from "./AssetDeployment.ts";
+import type { SsrSiteRouteTargets, WebsiteDomainProps, WebsiteInvalidationProps } from "./shared.ts";
+export type SsrSiteServerOrigin = {
+    type: "lambda";
+    function: Function;
+    originProtocolPolicy?: "https-only";
+} | {
+    type: "ecs";
+    service: Service;
+    originProtocolPolicy?: "http-only" | "https-only" | "match-viewer";
+} | {
+    type: "url";
+    url: Input<string>;
+    originProtocolPolicy?: cloudfront.OriginProtocolPolicy;
+};
+export interface SsrSiteProps {
+    /**
+     * Dynamic server origin behind CloudFront.
+     */
+    server: SsrSiteServerOrigin;
+    /**
+     * Optional custom domain managed through Route 53.
+     */
+    domain?: WebsiteDomainProps;
+    /**
+     * Optional static asset bundle to serve from S3.
+     */
+    assets?: {
+        /**
+         * Local build output directory to upload.
+         */
+        sourcePath: Input<string>;
+        /**
+         * Optional deterministic S3 bucket name.
+         */
+        bucketName?: string;
+        /**
+         * Optional asset key prefix.
+         */
+        prefix?: string;
+        /**
+         * Path pattern that should be served from the asset bucket.
+         * @default "/_assets/*"
+         */
+        pathPattern?: string;
+        /**
+         * Remove stale files under the prefix.
+         * @default false
+         */
+        purge?: boolean;
+        /**
+         * Optional file overrides.
+         */
+        fileOptions?: AssetFileOption[];
+    };
+    /**
+     * CloudFront cache policy ID for the dynamic server route.
+     * @default CloudFront managed CachingDisabled
+     */
+    cachePolicyId?: Input<string>;
+    /**
+     * Cache invalidation behavior for asset updates.
+     * @default false
+     */
+    invalidate?: false | WebsiteInvalidationProps;
+    /**
+     * Whether to create a standalone CloudFront distribution for the site.
+     * Set this to `false` when the site should be routed through `AWS.Website.Router`.
+     * @default true
+     */
+    cdn?: boolean;
+    /**
+     * User-defined tags applied to created resources.
+     */
+    tags?: Record<string, string>;
+}
+/**
+ * A server-rendered website behind CloudFront.
+ *
+ * `SsrSite` serves a dynamic origin behind CloudFront and can optionally split
+ * immutable static assets into a private S3 bucket origin.
+ *
+ * @section Creating SSR Sites
+ * @example Lambda URL Origin
+ * ```typescript
+ * const site = yield* SsrSite("App", {
+ *   server: {
+ *     type: "lambda",
+ *     function: appFunction,
+ *   },
+ * });
+ * ```
+ *
+ * @example SSR With Static Assets
+ * ```typescript
+ * const site = yield* SsrSite("App", {
+ *   server: {
+ *     type: "lambda",
+ *     function: appFunction,
+ *   },
+ *   assets: {
+ *     sourcePath: "./dist/client",
+ *   },
+ * });
+ * ```
+ */
+export declare const SsrSite: (id: string, props: SsrSiteProps) => Effect.Effect<{
+    assetBucket: Bucket | undefined;
+    assetFiles: AssetDeployment | undefined;
+    assetOriginAccessControl: OriginAccessControl | undefined;
+    certificate: undefined;
+    distribution: undefined;
+    records: never[];
+    invalidation: undefined;
+    routeTargets: SsrSiteRouteTargets;
+    url: undefined;
+} | {
+    assetBucket: Bucket | undefined;
+    assetFiles: AssetDeployment | undefined;
+    assetOriginAccessControl: OriginAccessControl | undefined;
+    certificate: Certificate | {
+        certificateArn: Input<string>;
+    } | undefined;
+    distribution: Distribution;
+    records: Route53Record[];
+    invalidation: Invalidation | undefined;
+    routeTargets: SsrSiteRouteTargets;
+    url: Output.Output<string, unknown>;
+}, Error, import("../Providers.ts").Providers>;
+//# sourceMappingURL=SsrSite.d.ts.map

package/lib/AWS/Website/SsrSite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsrSite.d.ts","sourceRoot":"","sources":["../../../src/AWS/Website/SsrSite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAM7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,oBAAoB,CAAC,EAAE,YAAY,CAAC;CACrC,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,cAAc,CAAC;CACpE,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnB,oBAAoB,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC;CACxD,CAAC;AAEN,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,MAAM,EAAE,mBAAmB,CAAC;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE;QACP;;WAEG;QACH,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B;;WAEG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;WAEG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;WAGG;QACH,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB;;WAEG;QACH,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;KACjC,CAAC;IACF;;;OAGG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,wBAAwB,CAAC;IAC9C;;;;OAIG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;8CAkOlB,CAAC"}