sst 2.16.1 → 2.16.3

package/cli/commands/diff.d.ts

@@ -14,4 +14,6 @@ export declare const diff: (program: Program) => import("yargs").Argv<{
     future: boolean | undefined;
 } & {
     dev: boolean | undefined;
+} & {
+    to: string | undefined;
 }>;

package/cli/commands/diff.js

@@ -1,7 +1,12 @@
 import { stackNameToId } from "../ui/stack.js";
-export const diff = (program) => program.command("diff", "Compare your app with what is deployed on AWS", (yargs) => yargs.option("dev", {
+export const diff = (program) => program.command("diff", "Compare your app with what is deployed on AWS", (yargs) => yargs
+    .option("dev", {
     type: "boolean",
     describe: "Compare in dev mode",
+})
+    .option("to", {
+    type: "string",
+    describe: "Output directory, defaults to .sst/dist",
 }), async (args) => {
     const { useProject } = await import("../../project.js");
     const { Stacks } = await import("../../stacks/index.js");
@@ -14,6 +19,7 @@ export const diff = (program) => program.command("diff", "Compare your app with
     const [_metafile, sstConfig] = await Stacks.load(project.paths.config);
     const assembly = await Stacks.synth({
         fn: sstConfig.stacks,
+        buildDir: args.to,
         mode: args.dev ? "dev" : "deploy",
     });
     // Diff each stack

package/cli/ui/deploy.js

@@ -111,10 +111,16 @@ function logicalIdToCdkPath(assembly, stack, logicalId) {
     return found.split("/").filter(Boolean).slice(1, -1).join("/");
 }
 function getHelper(error) {
-    return (getApiAccessLogPermissionsHelper(error) ||
+    return (getCloudFrontBehaviorLimitHelper(error) ||
+        getApiAccessLogPermissionsHelper(error) ||
         getAppSyncMultiResolverHelper(error) ||
         getApiLogRoleHelper(error));
 }
+function getCloudFrontBehaviorLimitHelper(error) {
+    if (error.indexOf("Your request contains more CacheBehaviors than are allowed per distribution.") > -1) {
+        return `This error often occurs when deploying a frontend with a large number of top-level files and folders in the assets directory. Check out this doc on how to resolve the issue - https://docs.sst.dev/known-issues#cloudfront-cachebehaviors-limit-exceeded`;
+    }
+}
 function getApiAccessLogPermissionsHelper(error) {
     // Can run into this issue when enabling access logs for API Gateway
     // note: this should be handled in SST as access log group names are now

package/constructs/Construct.js

@@ -8,7 +8,7 @@ export function getFunctionRef(fn) {
         return undefined;
     return {
         node: fn.node.addr,
-        stack: Stack.of(fn).node.id,
+        stack: Stack.of(fn).stackName,
     };
 }
 export function isConstruct(construct) {

package/constructs/NextjsSite.d.ts

@@ -58,12 +58,8 @@ export declare class NextjsSite extends SsrSite {
     private createWarmer;
     protected createCloudFrontDistributionForRegional(): Distribution;
     protected createCloudFrontDistributionForEdge(): Distribution;
-    private buildServerBehaviorForRegional;
-    private buildServerBehaviorForEdge;
     private buildImageBehavior;
     private buildStaticFileBehavior;
-    private buildDefaultNextjsBehaviorForRegional;
-    private buildDefaultNextjsBehaviorForEdge;
     protected generateBuildId(): string;
     getConstructMetadata(): {
         data: {

package/constructs/NextjsSite.js

@@ -4,8 +4,8 @@ import { Fn, Duration as CdkDuration, RemovalPolicy, CustomResource, } from "aws
 import { Effect, Policy, PolicyStatement } from "aws-cdk-lib/aws-iam";
 import { RetentionDays } from "aws-cdk-lib/aws-logs";
 import { Function as CdkFunction, Code, Runtime, Architecture, FunctionUrlAuthType, } from "aws-cdk-lib/aws-lambda";
-import { Distribution, ViewerProtocolPolicy, AllowedMethods, LambdaEdgeEventType, CachedMethods, CachePolicy, } from "aws-cdk-lib/aws-cloudfront";
-import { S3Origin, HttpOrigin, OriginGroup, } from "aws-cdk-lib/aws-cloudfront-origins";
+import { Distribution, ViewerProtocolPolicy, AllowedMethods, CachedMethods, CachePolicy, } from "aws-cdk-lib/aws-cloudfront";
+import { S3Origin, HttpOrigin } from "aws-cdk-lib/aws-cloudfront-origins";
 import { Rule, Schedule } from "aws-cdk-lib/aws-events";
 import { LambdaFunction } from "aws-cdk-lib/aws-events-targets";
 import { Queue } from "aws-cdk-lib/aws-sqs";
@@ -15,7 +15,6 @@ import { SsrFunction } from "./SsrFunction.js";
 import { EdgeFunction } from "./EdgeFunction.js";
 import { SsrSite } from "./SsrSite.js";
 import { toCdkSize } from "./util/size.js";
-import { toCdkDuration } from "./util/duration.js";
 /**
  * The `NextjsSite` construct is a higher level CDK construct that makes it easy to create a Next.js app.
  * @example
@@ -239,19 +238,11 @@ export class NextjsSite extends SsrSite {
          *    - Cache-Control: public, max-age=0, must-revalidate
          *    - x-vercel-cache: MISS
          */
-        const { timeout, cdk } = this.props;
+        const { cdk } = this.props;
         const cfDistributionProps = cdk?.distribution || {};
         const s3Origin = new S3Origin(this.cdk.bucket, {
             originPath: "/" + this.buildConfig.clientBuildS3KeyPrefix,
         });
-        const serverFnUrl = this.serverLambdaForRegional.addFunctionUrl({
-            authType: FunctionUrlAuthType.NONE,
-        });
-        const serverOrigin = new HttpOrigin(Fn.parseDomainName(serverFnUrl.url), {
-            readTimeout: typeof timeout === "string"
-                ? toCdkDuration(timeout)
-                : CdkDuration.seconds(timeout),
-        });
         const cachePolicy = cdk?.serverCachePolicy ??
             this.buildServerCachePolicy([
                 "accept",
@@ -259,8 +250,7 @@ export class NextjsSite extends SsrSite {
                 "next-router-prefetch",
                 "next-router-state-tree",
             ]);
-        const originRequestPolicy = this.buildServerOriginRequestPolicy();
-        const serverBehavior = this.buildServerBehaviorForRegional(serverOrigin, cachePolicy, originRequestPolicy);
+        const serverBehavior = this.buildDefaultBehaviorForRegional(cachePolicy);
         return new Distribution(this, "Distribution", {
             // these values can be overwritten by cfDistributionProps
             defaultRootObject: "",
@@ -269,12 +259,13 @@ export class NextjsSite extends SsrSite {
             // these values can NOT be overwritten by cfDistributionProps
             domainNames: this.buildDistributionDomainNames(),
             certificate: this.cdk.certificate,
-            defaultBehavior: this.buildDefaultNextjsBehaviorForRegional(serverOrigin, s3Origin, cachePolicy, originRequestPolicy),
+            defaultBehavior: serverBehavior,
             additionalBehaviors: {
                 "api/*": serverBehavior,
                 "_next/data/*": serverBehavior,
                 "_next/image*": this.buildImageBehavior(cachePolicy),
                 "_next/*": this.buildStaticFileBehavior(s3Origin),
+                ...this.buildStaticFileBehaviors(s3Origin),
                 ...(cfDistributionProps.additionalBehaviors || {}),
             },
         });
@@ -292,9 +283,7 @@ export class NextjsSite extends SsrSite {
                 "next-router-prefetch",
                 "next-router-state-tree",
             ]);
-        const originRequestPolicy = this.buildServerOriginRequestPolicy();
-        const functionVersion = this.serverLambdaForEdge.currentVersion;
-        const serverBehavior = this.buildServerBehaviorForEdge(functionVersion, s3Origin, cachePolicy, originRequestPolicy);
+        const serverBehavior = this.buildDefaultBehaviorForEdge(s3Origin, cachePolicy);
         return new Distribution(this, "Distribution", {
             // these values can be overwritten by cfDistributionProps
             defaultRootObject: "",
@@ -303,51 +292,17 @@ export class NextjsSite extends SsrSite {
             // these values can NOT be overwritten by cfDistributionProps
             domainNames: this.buildDistributionDomainNames(),
             certificate: this.cdk.certificate,
-            defaultBehavior: this.buildDefaultNextjsBehaviorForEdge(functionVersion, s3Origin, cachePolicy, originRequestPolicy),
+            defaultBehavior: serverBehavior,
             additionalBehaviors: {
                 "api/*": serverBehavior,
                 "_next/data/*": serverBehavior,
                 "_next/image*": this.buildImageBehavior(cachePolicy),
                 "_next/*": this.buildStaticFileBehavior(s3Origin),
+                ...this.buildStaticFileBehaviors(s3Origin),
                 ...(cfDistributionProps.additionalBehaviors || {}),
             },
         });
     }
-    buildServerBehaviorForRegional(serverOrigin, cachePolicy, originRequestPolicy) {
-        const { cdk } = this.props;
-        return {
-            viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
-            functionAssociations: this.buildBehaviorFunctionAssociations(),
-            origin: serverOrigin,
-            allowedMethods: AllowedMethods.ALLOW_ALL,
-            cachedMethods: CachedMethods.CACHE_GET_HEAD_OPTIONS,
-            compress: true,
-            cachePolicy,
-            responseHeadersPolicy: cdk?.responseHeadersPolicy,
-            originRequestPolicy,
-        };
-    }
-    buildServerBehaviorForEdge(functionVersion, s3Origin, cachePolicy, originRequestPolicy) {
-        const { cdk } = this.props;
-        return {
-            viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
-            functionAssociations: this.buildBehaviorFunctionAssociations(),
-            origin: s3Origin,
-            allowedMethods: AllowedMethods.ALLOW_ALL,
-            cachedMethods: CachedMethods.CACHE_GET_HEAD_OPTIONS,
-            compress: true,
-            cachePolicy,
-            responseHeadersPolicy: cdk?.responseHeadersPolicy,
-            originRequestPolicy,
-            edgeLambdas: [
-                {
-                    includeBody: true,
-                    eventType: LambdaEdgeEventType.ORIGIN_REQUEST,
-                    functionVersion,
-                },
-            ],
-        };
-    }
     buildImageBehavior(cachePolicy) {
         const { cdk } = this.props;
         const imageFn = this.createImageOptimizationFunction();
@@ -376,53 +331,6 @@ export class NextjsSite extends SsrSite {
             responseHeadersPolicy: cdk?.responseHeadersPolicy,
         };
     }
-    buildDefaultNextjsBehaviorForRegional(serverOrigin, s3Origin, cachePolicy, originRequestPolicy) {
-        // Create default behavior
-        // default handler for requests that don't match any other path:
-        //   - try lambda handler first
-        //   - if failed, fall back to S3
-        const { cdk } = this.props;
-        const cfDistributionProps = cdk?.distribution || {};
-        const fallbackOriginGroup = new OriginGroup({
-            primaryOrigin: serverOrigin,
-            fallbackOrigin: s3Origin,
-            fallbackStatusCodes: [503],
-        });
-        return {
-            origin: fallbackOriginGroup,
-            viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
-            functionAssociations: this.buildBehaviorFunctionAssociations(),
-            compress: true,
-            cachePolicy,
-            responseHeadersPolicy: cdk?.responseHeadersPolicy,
-            originRequestPolicy,
-            ...(cfDistributionProps.defaultBehavior || {}),
-        };
-    }
-    buildDefaultNextjsBehaviorForEdge(functionVersion, s3Origin, cachePolicy, originRequestPolicy) {
-        const { cdk } = this.props;
-        const cfDistributionProps = cdk?.distribution || {};
-        return {
-            viewerProtocolPolicy: ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
-            functionAssociations: this.buildBehaviorFunctionAssociations(),
-            origin: s3Origin,
-            allowedMethods: AllowedMethods.ALLOW_ALL,
-            cachedMethods: CachedMethods.CACHE_GET_HEAD_OPTIONS,
-            compress: true,
-            cachePolicy,
-            responseHeadersPolicy: cdk?.responseHeadersPolicy,
-            originRequestPolicy,
-            ...(cfDistributionProps.defaultBehavior || {}),
-            edgeLambdas: [
-                {
-                    includeBody: true,
-                    eventType: LambdaEdgeEventType.ORIGIN_REQUEST,
-                    functionVersion,
-                },
-                ...(cfDistributionProps.defaultBehavior?.edgeLambdas || []),
-            ],
-        };
-    }
     generateBuildId() {
         const filePath = path.join(this.props.path, ".next/BUILD_ID");
         return fs.readFileSync(filePath).toString();

package/constructs/SsrSite.d.ts

@@ -4,6 +4,7 @@ import { Function as CdkFunction, IFunction as ICdkFunction, FunctionProps } fro
 import { IHostedZone } from "aws-cdk-lib/aws-route53";
 import { Distribution, ICachePolicy, IResponseHeadersPolicy, BehaviorOptions, CachePolicy, Function as CfFunction, FunctionEventType as CfFunctionEventType } from "aws-cdk-lib/aws-cloudfront";
 import { ICertificate } from "aws-cdk-lib/aws-certificatemanager";
+import { S3Origin } from "aws-cdk-lib/aws-cloudfront-origins";
 import { SSTConstruct } from "./Construct.js";
 import { NodeJSProps } from "./Function.js";
 import { EdgeFunction } from "./EdgeFunction.js";
@@ -287,13 +288,13 @@ export declare abstract class SsrSite extends Construct implements SSTConstruct
     protected createCloudFrontDistributionForRegional(): Distribution;
     protected createCloudFrontDistributionForEdge(): Distribution;
     protected buildDistributionDomainNames(): string[];
-    protected buildDefaultBehaviorForRegional(): BehaviorOptions;
-    private buildDefaultBehaviorForEdge;
+    protected buildDefaultBehaviorForRegional(cachePolicy: ICachePolicy): BehaviorOptions;
+    protected buildDefaultBehaviorForEdge(origin: S3Origin, cachePolicy: ICachePolicy): BehaviorOptions;
     protected buildBehaviorFunctionAssociations(): {
         eventType: CfFunctionEventType;
         function: CfFunction;
     }[];
-    private buildStaticFileBehaviors;
+    protected buildStaticFileBehaviors(origin: S3Origin): Record<string, BehaviorOptions>;
     protected buildServerCachePolicy(allowedHeaders?: string[]): CachePolicy;
     protected buildServerOriginRequestPolicy(): import("aws-cdk-lib/aws-cloudfront").IOriginRequestPolicy;
     private createCloudFrontInvalidation;

package/constructs/SsrSite.js

@@ -504,6 +504,7 @@ function handler(event) {
         const { cdk } = this.props;
         const cfDistributionProps = cdk?.distribution || {};
         const s3Origin = new S3Origin(this.bucket);
+        const cachePolicy = cdk?.serverCachePolicy ?? this.buildServerCachePolicy();
         return new Distribution(this, "Distribution", {
             // these values can be overwritten by cfDistributionProps
             defaultRootObject: "",
@@ -512,7 +513,7 @@ function handler(event) {
             // these values can NOT be overwritten by cfDistributionProps
             domainNames: this.buildDistributionDomainNames(),
             certificate: this.certificate,
-            defaultBehavior: this.buildDefaultBehaviorForRegional(),
+            defaultBehavior: this.buildDefaultBehaviorForRegional(cachePolicy),
             additionalBehaviors: {
                 ...this.buildStaticFileBehaviors(s3Origin),
                 ...(cfDistributionProps.additionalBehaviors || {}),
@@ -523,6 +524,7 @@ function handler(event) {
         const { cdk } = this.props;
         const cfDistributionProps = cdk?.distribution || {};
         const s3Origin = new S3Origin(this.bucket);
+        const cachePolicy = cdk?.serverCachePolicy ?? this.buildServerCachePolicy();
         return new Distribution(this, "Distribution", {
             // these values can be overwritten by cfDistributionProps
             defaultRootObject: "",
@@ -531,7 +533,7 @@ function handler(event) {
             // these values can NOT be overwritten by cfDistributionProps
             domainNames: this.buildDistributionDomainNames(),
             certificate: this.certificate,
-            defaultBehavior: this.buildDefaultBehaviorForEdge(s3Origin),
+            defaultBehavior: this.buildDefaultBehaviorForEdge(s3Origin, cachePolicy),
             additionalBehaviors: {
                 ...this.buildStaticFileBehaviors(s3Origin),
                 ...(cfDistributionProps.additionalBehaviors || {}),
@@ -557,7 +559,7 @@ function handler(event) {
         }
         return domainNames;
     }
-    buildDefaultBehaviorForRegional() {
+    buildDefaultBehaviorForRegional(cachePolicy) {
         const { timeout, cdk } = this.props;
         const cfDistributionProps = cdk?.distribution || {};
         const fnUrl = this.serverLambdaForRegional.addFunctionUrl({
@@ -573,7 +575,7 @@ function handler(event) {
             allowedMethods: AllowedMethods.ALLOW_ALL,
             cachedMethods: CachedMethods.CACHE_GET_HEAD_OPTIONS,
             compress: true,
-            cachePolicy: cdk?.serverCachePolicy ?? this.buildServerCachePolicy(),
+            cachePolicy,
             responseHeadersPolicy: cdk?.responseHeadersPolicy,
             originRequestPolicy: this.buildServerOriginRequestPolicy(),
             ...(cfDistributionProps.defaultBehavior || {}),
@@ -583,7 +585,7 @@ function handler(event) {
             ],
         };
     }
-    buildDefaultBehaviorForEdge(origin) {
+    buildDefaultBehaviorForEdge(origin, cachePolicy) {
         const { cdk } = this.props;
         const cfDistributionProps = cdk?.distribution || {};
         return {
@@ -592,7 +594,7 @@ function handler(event) {
             allowedMethods: AllowedMethods.ALLOW_ALL,
             cachedMethods: CachedMethods.CACHE_GET_HEAD_OPTIONS,
             compress: true,
-            cachePolicy: cdk?.serverCachePolicy ?? this.buildServerCachePolicy(),
+            cachePolicy,
             responseHeadersPolicy: cdk?.responseHeadersPolicy,
             originRequestPolicy: this.buildServerOriginRequestPolicy(),
             ...(cfDistributionProps.defaultBehavior || {}),

package/constructs/StaticSite.d.ts

@@ -10,6 +10,7 @@ export interface StaticSiteFileOptions {
     exclude: string | string[];
     include: string | string[];
     cacheControl: string;
+    contentType?: string;
 }
 export interface StaticSiteProps {
     /**

package/constructs/StaticSite.js

@@ -358,18 +358,19 @@ interface ImportMeta {
                     BucketName: filenamesAsset.s3BucketName,
                     ObjectKey: filenamesAsset.s3ObjectKey,
                 },
-                FileOptions: (fileOptions || []).map(({ exclude, include, cacheControl }) => {
+                FileOptions: (fileOptions || []).map(({ exclude, include, cacheControl, contentType }) => {
                     if (typeof exclude === "string") {
                         exclude = [exclude];
                     }
                     if (typeof include === "string") {
                         include = [include];
                     }
-                    const options = [];
-                    exclude.forEach((per) => options.push("--exclude", per));
-                    include.forEach((per) => options.push("--include", per));
-                    options.push("--cache-control", cacheControl);
-                    return options;
+                    return [
+                        ...exclude.map((per) => ["--exclude", per]),
+                        ...include.map((per) => ["--include", per]),
+                        ["--cache-control", cacheControl],
+                        contentType ? ["--content-type", contentType] : [],
+                    ].flat();
                 }),
                 ReplaceValues: this.getS3ContentReplaceValues(),
             },
@@ -482,6 +483,10 @@ function handler(event) {
   var request = event.request;
   var uri = request.uri;
   
+  if (uri.startsWith("/.well-known/")) {
+    return request;
+  }
+
   if (uri.endsWith("/")) {
     request.uri += "index.html";
   } else if (!uri.split("/").pop().includes(".")) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "sideEffects": false,
   "name": "sst",
-  "version": "2.16.1",
+  "version": "2.16.3",
   "bin": {
     "sst": "cli/sst.js"
   },

package/runtime/handlers/python.js

@@ -95,6 +95,7 @@ export const usePythonHandler = Context.memo(async () => {
                 installCommands: input.props.python?.installCommands,
                 entry: src,
                 runtime: RUNTIME_MAP[input.props.runtime],
+                architecture: input.props.architecture,
                 outputPathSuffix: ".",
                 out: input.out,
             });

package/runtime/handlers/pythonBundling.d.ts

@@ -1,4 +1,5 @@
 import { Runtime } from "aws-cdk-lib/aws-lambda";
+import { FunctionProps } from "../../constructs/Function.js";
 import { AssetHashType } from "aws-cdk-lib/core";
 /**
  * Dependency files to exclude from the asset hash.
@@ -20,6 +21,10 @@ export interface BundlingOptions {
      * The runtime of the lambda function
      */
     readonly runtime: Runtime;
+    /**
+     * Architecture used by the lambda function
+     */
+    readonly architecture: FunctionProps["architecture"];
     /**
      * Output path suffix ('python' for a layer, '.' otherwise)
      */

package/runtime/handlers/pythonBundling.js

@@ -18,7 +18,7 @@ export const BUNDLER_DEPENDENCIES_CACHE = "/var/dependencies";
  * Produce bundled Lambda asset code
  */
 export function bundle(options) {
-    const { entry, runtime, outputPathSuffix, installCommands } = options;
+    const { entry, runtime, architecture, outputPathSuffix, installCommands } = options;
     const stagedir = FileSystem.mkdtemp("python-bundling-");
     const hasDeps = stageDependencies(entry, stagedir);
     const hasInstallCommands = stageInstallCommands(installCommands || [], stagedir);
@@ -35,7 +35,9 @@ export function bundle(options) {
     fs.copyFileSync(path.join(__dirname, "../../support/python-runtime", dockerfile), path.join(stagedir, dockerfile));
     const image = DockerImage.fromBuild(stagedir, {
         buildArgs: {
-            IMAGE: runtime.bundlingImage.image,
+            IMAGE: runtime.bundlingImage.image +
+                // the default x86_64 doesn't need to be set explicitly
+                (architecture == "arm_64" ? ":latest-arm64" : ""),
         },
         file: dockerfile,
     });

package/sst.mjs

@@ -4815,7 +4815,7 @@ import url5 from "url";
 import path11 from "path";
 import { DockerImage, FileSystem } from "aws-cdk-lib/core";
 function bundle(options) {
-  const { entry, runtime, outputPathSuffix, installCommands } = options;
+  const { entry, runtime, architecture, outputPathSuffix, installCommands } = options;
   const stagedir = FileSystem.mkdtemp("python-bundling-");
   const hasDeps = stageDependencies(entry, stagedir);
   const hasInstallCommands = stageInstallCommands(
@@ -4829,7 +4829,7 @@ function bundle(options) {
   );
   const image = DockerImage.fromBuild(stagedir, {
     buildArgs: {
-      IMAGE: runtime.bundlingImage.image
+      IMAGE: runtime.bundlingImage.image + (architecture == "arm_64" ? ":latest-arm64" : "")
     },
     file: dockerfile
   });
@@ -4985,6 +4985,7 @@ var init_python = __esm({
             installCommands: input.props.python?.installCommands,
             entry: src,
             runtime: RUNTIME_MAP[input.props.runtime],
+            architecture: input.props.architecture,
             outputPathSuffix: ".",
             out: input.out
           });
@@ -6221,7 +6222,14 @@ function logicalIdToCdkPath(assembly, stack, logicalId) {
   return found.split("/").filter(Boolean).slice(1, -1).join("/");
 }
 function getHelper(error2) {
-  return getApiAccessLogPermissionsHelper(error2) || getAppSyncMultiResolverHelper(error2) || getApiLogRoleHelper(error2);
+  return getCloudFrontBehaviorLimitHelper(error2) || getApiAccessLogPermissionsHelper(error2) || getAppSyncMultiResolverHelper(error2) || getApiLogRoleHelper(error2);
+}
+function getCloudFrontBehaviorLimitHelper(error2) {
+  if (error2.indexOf(
+    "Your request contains more CacheBehaviors than are allowed per distribution."
+  ) > -1) {
+    return `This error often occurs when deploying a frontend with a large number of top-level files and folders in the assets directory. Check out this doc on how to resolve the issue - https://docs.sst.dev/known-issues#cloudfront-cachebehaviors-limit-exceeded`;
+  }
 }
 function getApiAccessLogPermissionsHelper(error2) {
   if (error2.indexOf("Insufficient permissions to enable logging") > -1) {
@@ -8297,6 +8305,9 @@ var diff2 = (program2) => program2.command(
   (yargs2) => yargs2.option("dev", {
     type: "boolean",
     describe: "Compare in dev mode"
+  }).option("to", {
+    type: "string",
+    describe: "Output directory, defaults to .sst/dist"
   }),
   async (args) => {
     const { useProject: useProject2 } = await Promise.resolve().then(() => (init_project(), project_exports));
@@ -8309,6 +8320,7 @@ var diff2 = (program2) => program2.command(
     const [_metafile, sstConfig] = await Stacks.load(project.paths.config);
     const assembly = await Stacks.synth({
       fn: sstConfig.stacks,
+      buildDir: args.to,
       mode: args.dev ? "dev" : "deploy"
     });
     let changesAcc = 0;