sst 2.41.5 → 2.43.0

package/constructs/SolidStartSite.d.ts

@@ -72,6 +72,9 @@ export declare class SolidStartSite extends SsrSite {
             allowedHeaders?: string[] | undefined;
         } | undefined;
         buildId?: string | undefined;
+        warmer?: {
+            function: string;
+        } | undefined;
     };
     getConstructMetadata(): {
         data: {

package/constructs/SsrFunction.d.ts

@@ -1,7 +1,7 @@
 import { Construct } from "constructs";
 import { IGrantable } from "aws-cdk-lib/aws-iam";
 import { RetentionDays } from "aws-cdk-lib/aws-logs";
-import { FunctionOptions, Function as CdkFunction, FunctionUrlOptions } from "aws-cdk-lib/aws-lambda";
+import { FunctionOptions, Function as CdkFunction, FunctionUrlOptions, FunctionUrl } from "aws-cdk-lib/aws-lambda";
 import { NodeJSProps, FunctionCopyFilesProps } from "./Function.js";
 import { SSTConstruct } from "./Construct.js";
 import { BindingResource } from "./util/binding.js";
@@ -29,6 +29,7 @@ export declare class SsrFunction extends Construct implements SSTConstruct {
     /** @internal */
     readonly _doNotAllowOthersToBind = true;
     function: CdkFunction;
+    private functionUrl?;
     private assetReplacer;
     private assetReplacerPolicy;
     private missingSourcemap?;
@@ -37,8 +38,9 @@ export declare class SsrFunction extends Construct implements SSTConstruct {
     get role(): import("aws-cdk-lib/aws-iam").IRole | undefined;
     get functionArn(): string;
     get functionName(): string;
+    get url(): string | undefined;
     addEnvironment(key: string, value: string): CdkFunction;
-    addFunctionUrl(props?: FunctionUrlOptions): import("aws-cdk-lib/aws-lambda").FunctionUrl;
+    addFunctionUrl(props?: FunctionUrlOptions): FunctionUrl;
     grantInvoke(grantee: IGrantable): import("aws-cdk-lib/aws-iam").Grant;
     attachPermissions(permissions: Permissions): void;
     _overrideMissingSourcemap(): void;

package/constructs/SsrFunction.js

@@ -29,6 +29,7 @@ export class SsrFunction extends Construct {
     /** @internal */
     _doNotAllowOthersToBind = true;
     function;
+    functionUrl;
     assetReplacer;
     assetReplacerPolicy;
     missingSourcemap;
@@ -80,11 +81,15 @@ export class SsrFunction extends Construct {
     get functionName() {
         return this.function.functionName;
     }
+    get url() {
+        return this.functionUrl?.url;
+    }
     addEnvironment(key, value) {
         return this.function.addEnvironment(key, value);
     }
     addFunctionUrl(props) {
-        return this.function.addFunctionUrl(props);
+        this.functionUrl = this.function.addFunctionUrl(props);
+        return this.functionUrl;
     }
     grantInvoke(grantee) {
         return this.function.grantInvoke(grantee);

package/constructs/SsrSite.d.ts

@@ -1,7 +1,7 @@
 import { Construct } from "constructs";
 import { Bucket, BucketProps, IBucket } from "aws-cdk-lib/aws-s3";
 import { Function as CdkFunction, FunctionProps as CdkFunctionProps } from "aws-cdk-lib/aws-lambda";
-import { ICachePolicy, IResponseHeadersPolicy, ViewerProtocolPolicy, AllowedMethods, CachePolicyProps, ErrorResponse } from "aws-cdk-lib/aws-cloudfront";
+import { ICachePolicy, IResponseHeadersPolicy, ViewerProtocolPolicy, AllowedMethods, ErrorResponse } from "aws-cdk-lib/aws-cloudfront";
 import { S3OriginProps } from "aws-cdk-lib/aws-cloudfront-origins";
 import { DistributionDomainProps } from "./Distribution.js";
 import { SSTConstruct } from "./Construct.js";
@@ -13,26 +13,27 @@ import { Size } from "./util/size.js";
 import { Duration } from "./util/duration.js";
 import { Permissions } from "./util/permission.js";
 import { BindingResource, BindingProps } from "./util/binding.js";
-type CloudFrontFunctionConfig = {
+export type CloudFrontFunctionConfig = {
     constructId: string;
     injections: string[];
 };
-type EdgeFunctionConfig = {
+export type EdgeFunctionConfig = {
     constructId: string;
     function: EdgeFunctionProps;
 };
-type FunctionOriginConfig = {
+export type FunctionOriginConfig = {
     type: "function";
     constructId: string;
     function: SsrFunctionProps;
     injections?: string[];
     streaming?: boolean;
+    warm?: number;
 };
-type ImageOptimizationFunctionOriginConfig = {
+export type ImageOptimizationFunctionOriginConfig = {
     type: "image-optimization-function";
     function: CdkFunctionProps;
 };
-type S3OriginConfig = {
+export type S3OriginConfig = {
     type: "s3";
     originPath?: string;
     copy: {
@@ -42,7 +43,7 @@ type S3OriginConfig = {
         versionedSubDir?: string;
     }[];
 };
-type OriginGroupConfig = {
+export type OriginGroupConfig = {
     type: "group";
     primaryOriginName: string;
     fallbackOriginName: string;
@@ -424,11 +425,12 @@ export declare abstract class SsrSite extends Construct implements SSTConstruct
     protected doNotDeploy: boolean;
     protected bucket: Bucket;
     protected serverFunction?: EdgeFunction | SsrFunction;
+    protected serverFunctions: SsrFunction[];
+    protected edgeFunctions: Record<string, EdgeFunction>;
     private serverFunctionForDev?;
     private edge?;
     private distribution;
     constructor(scope: Construct, id: string, rawProps?: SsrSiteProps);
-    protected static buildDefaultServerCachePolicyProps(allowedHeaders: string[]): CachePolicyProps;
     /**
      * The CloudFront URL of the website.
      */
@@ -495,6 +497,9 @@ export declare abstract class SsrSite extends Construct implements SSTConstruct
             allowedHeaders?: string[];
         };
         buildId?: string;
+        warmer?: {
+            function: string;
+        };
     }): {
         cloudFrontFunctions?: CloudFrontFunctions | undefined;
         edgeFunctions?: EdgeFunctions | undefined;
@@ -513,6 +518,9 @@ export declare abstract class SsrSite extends Construct implements SSTConstruct
             allowedHeaders?: string[] | undefined;
         } | undefined;
         buildId?: string | undefined;
+        warmer?: {
+            function: string;
+        } | undefined;
     };
 }
 export declare const useSites: () => {

package/constructs/SsrSite.js

@@ -49,6 +49,8 @@ export class SsrSite extends Construct {
     doNotDeploy;
     bucket;
     serverFunction;
+    serverFunctions = [];
+    edgeFunctions = {};
     serverFunctionForDev;
     edge;
     distribution;
@@ -87,6 +89,7 @@ export class SsrSite extends Construct {
         }
         let s3DeployCRs = [];
         let ssrFunctions = [];
+        let warmConfig = [];
         let singletonUrlSigner;
         let singletonCachePolicy;
         let singletonOriginRequestPolicy;
@@ -107,6 +110,8 @@ export class SsrSite extends Construct {
         createWarmer();
         this.bucket = bucket;
         this.distribution = distribution;
+        this.serverFunctions = [...ssrFunctions];
+        this.edgeFunctions = { ...edgeFunctions };
         this.serverFunction = ssrFunctions[0] ?? Object.values(edgeFunctions)[0];
         this.edge = plan.edge;
         app.registerTypes(this);
@@ -213,27 +218,26 @@ export class SsrSite extends Construct {
             // note: Currently all sites have a single server function. When we add
             //       support for multiple server functions (ie. route splitting), we
             //       need to handle warming multiple functions.
-            if (!warm)
-                return;
-            if (warm && plan.edge) {
-                throw new VisibleError(`In the "${id}" Site, warming is currently supported only for the regional mode.`);
+            if (warm && ssrFunctions[0] instanceof SsrFunction) {
+                warmConfig.push({ concurrency: warm, function: ssrFunctions[0] });
             }
-            if (ssrFunctions.length === 0)
-                return;
+            const warmParams = warmConfig.map((config) => ({
+                concurrency: config.concurrency,
+                function: config.function.functionName,
+            }));
             // Create warmer function
             const warmer = new CdkFunction(self, "WarmerFunction", {
                 description: "SSR warmer",
-                code: Code.fromAsset(path.join(__dirname, "../support/ssr-warmer")),
+                code: Code.fromAsset(plan.warmer?.function ?? path.join(__dirname, "../support/ssr-warmer")),
                 runtime: Runtime.NODEJS_18_X,
                 handler: "index.handler",
                 timeout: CdkDuration.minutes(15),
                 memorySize: 128,
                 environment: {
-                    FUNCTION_NAME: ssrFunctions[0].functionName,
-                    CONCURRENCY: warm.toString(),
+                    WARM_PARAMS: JSON.stringify(warmParams),
                 },
             });
-            ssrFunctions[0].grantInvoke(warmer);
+            warmConfig.forEach((config) => config.function.grantInvoke(warmer));
             // Create cron job
             new Rule(self, "WarmerRule", {
                 schedule: Schedule.rate(CdkDuration.minutes(5)),
@@ -461,6 +465,9 @@ function handler(event) {
                 prefetchSecrets: regional?.prefetchSecrets,
             });
             ssrFunctions.push(fn);
+            if (props.warm) {
+                warmConfig.push({ concurrency: props.warm, function: fn });
+            }
             bucket.grantReadWrite(fn?.role);
             const fnUrl = fn.addFunctionUrl({
                 authType: regional?.enableServerUrlIamAuth
@@ -638,7 +645,19 @@ function handler(event) {
             const allowedHeaders = plan.serverCachePolicy?.allowedHeaders ?? [];
             singletonCachePolicy =
                 singletonCachePolicy ??
-                    new CachePolicy(self, "ServerCache", SsrSite.buildDefaultServerCachePolicyProps(allowedHeaders));
+                    new CachePolicy(self, "ServerCache", {
+                        queryStringBehavior: CacheQueryStringBehavior.all(),
+                        headerBehavior: allowedHeaders.length > 0
+                            ? CacheHeaderBehavior.allowList(...allowedHeaders)
+                            : CacheHeaderBehavior.none(),
+                        cookieBehavior: CacheCookieBehavior.none(),
+                        defaultTtl: CdkDuration.days(0),
+                        maxTtl: CdkDuration.days(365),
+                        minTtl: CdkDuration.days(0),
+                        enableAcceptEncodingBrotli: true,
+                        enableAcceptEncodingGzip: true,
+                        comment: "SST server response cache policy",
+                    });
             return singletonCachePolicy;
         }
         function useServerBehaviorOriginRequestPolicy() {
@@ -797,21 +816,6 @@ function handler(event) {
             });
         }
     }
-    static buildDefaultServerCachePolicyProps(allowedHeaders) {
-        return {
-            queryStringBehavior: CacheQueryStringBehavior.all(),
-            headerBehavior: allowedHeaders.length > 0
-                ? CacheHeaderBehavior.allowList(...allowedHeaders)
-                : CacheHeaderBehavior.none(),
-            cookieBehavior: CacheCookieBehavior.none(),
-            defaultTtl: CdkDuration.days(0),
-            maxTtl: CdkDuration.days(365),
-            minTtl: CdkDuration.days(0),
-            enableAcceptEncodingBrotli: true,
-            enableAcceptEncodingGzip: true,
-            comment: "SST server response cache policy",
-        };
-    }
     /**
      * The CloudFront URL of the website.
      */

package/constructs/SvelteKitSite.d.ts

@@ -103,6 +103,9 @@ export declare class SvelteKitSite extends SsrSite {
             allowedHeaders?: string[] | undefined;
         } | undefined;
         buildId?: string | undefined;
+        warmer?: {
+            function: string;
+        } | undefined;
     };
     getConstructMetadata(): {
         data: {

package/node/future/auth/adapter/apple.d.ts

@@ -1,9 +1,10 @@
+import { BaseClient } from "openid-client";
 import { OauthConfig } from "./oauth.js";
 export declare const AppleAdapter: (config: OauthConfig) => () => Promise<{
     type: "success";
     properties: {
         tokenset: import("openid-client").TokenSet;
-        client: import("openid-client").BaseClient;
+        client: BaseClient;
     };
 } | {
     type: "step";

package/node/future/auth/adapter/apple.js

@@ -8,7 +8,15 @@ import { useBody, useCookie, useDomainName, usePathParam, useResponse, } from ".
 // Also note that Apple's discover uri does not work for the OAuth flow, as the
 // userinfo_endpoint are not included in the response.
 // await Issuer.discover("https://appleid.apple.com/.well-known/openid-configuration/");
-const issuer = await Issuer.discover("https://appleid.apple.com/.well-known/openid-configuration");
+let realIssuer;
+const issuer = new Proxy({}, {
+    get: async function (target, prop) {
+        if (!realIssuer) {
+            realIssuer = await Issuer.discover("https://appleid.apple.com/.well-known/openid-configuration");
+        }
+        return realIssuer[prop];
+    },
+});
 export const AppleAdapter = 
 /* @__PURE__ */
 (config) => {

package/node/future/auth/adapter/google.d.ts

@@ -1,3 +1,4 @@
+import { BaseClient } from "openid-client";
 import { OidcBasicConfig } from "./oidc.js";
 import { OauthBasicConfig } from "./oauth.js";
 type GooglePrompt = "none" | "consent" | "select_account";
@@ -14,7 +15,7 @@ export declare function GoogleAdapter(config: GoogleConfig): (() => Promise<{
     type: "success";
     properties: {
         tokenset: import("openid-client").TokenSet;
-        client: import("openid-client").BaseClient;
+        client: BaseClient;
     };
 } | {
     type: "step";
@@ -28,7 +29,7 @@ export declare function GoogleAdapter(config: GoogleConfig): (() => Promise<{
     type: "success";
     properties: {
         tokenset: import("openid-client").TokenSet;
-        client: import("openid-client").BaseClient;
+        client: BaseClient;
     };
 } | {
     type: "step";

package/node/future/auth/adapter/google.js

@@ -1,12 +1,20 @@
 import { Issuer } from "openid-client";
 import { OidcAdapter } from "./oidc.js";
 import { OauthAdapter } from "./oauth.js";
-const issuer = await Issuer.discover("https://accounts.google.com");
+let realIssuer;
+const issuer = new Proxy({}, {
+    get: async function (target, prop) {
+        if (!realIssuer) {
+            realIssuer = await Issuer.discover("https://accounts.google.com");
+        }
+        return realIssuer[prop];
+    },
+});
 export function GoogleAdapter(config) {
     /* @__PURE__ */
     if (config.mode === "oauth") {
         return OauthAdapter({
-            issuer,
+            issuer: issuer,
             ...config,
             params: {
                 ...(config.accessType && { access_type: config.accessType }),
@@ -15,7 +23,7 @@ export function GoogleAdapter(config) {
         });
     }
     return OidcAdapter({
-        issuer,
+        issuer: issuer,
         scope: "openid email profile",
         ...config,
     });

package/package.json

@@ -1,7 +1,7 @@
 {
   "sideEffects": false,
   "name": "sst",
-  "version": "2.41.5",
+  "version": "2.43.0",
   "bin": {
     "sst": "cli/sst.js"
   },
@@ -25,10 +25,10 @@
   },
   "homepage": "https://sst.dev",
   "dependencies": {
-    "@aws-cdk/aws-lambda-python-alpha": "2.132.1-alpha.0",
-    "@aws-cdk/cloud-assembly-schema": "2.132.1",
-    "@aws-cdk/cloudformation-diff": "2.132.1",
-    "@aws-cdk/cx-api": "2.132.1",
+    "@aws-cdk/aws-lambda-python-alpha": "2.142.1-alpha.0",
+    "@aws-cdk/cloud-assembly-schema": "2.142.1",
+    "@aws-cdk/cloudformation-diff": "2.142.1",
+    "@aws-cdk/cx-api": "2.142.1",
     "@aws-crypto/sha256-js": "^5.2.0",
     "@aws-sdk/client-cloudformation": "^3.454.0",
     "@aws-sdk/client-ecs": "^3.454.0",
@@ -53,11 +53,11 @@
     "@smithy/signature-v4": "^2.0.16",
     "@trpc/server": "9.16.0",
     "adm-zip": "^0.5.10",
-    "aws-cdk-lib": "2.132.1",
+    "aws-cdk-lib": "2.142.1",
     "aws-iot-device-sdk": "^2.2.13",
     "aws-sdk": "^2.1501.0",
     "builtin-modules": "3.2.0",
-    "cdk-assets": "2.132.1",
+    "cdk-assets": "2.142.1",
     "chalk": "^5.2.0",
     "chokidar": "^3.5.3",
     "ci-info": "^3.7.0",
@@ -85,7 +85,7 @@
     "ora": "^6.1.2",
     "react": "^18.0.0",
     "remeda": "^1.3.0",
-    "sst-aws-cdk": "2.132.1",
+    "sst-aws-cdk": "2.142.1",
     "tree-kill": "^1.2.2",
     "undici": "^5.12.0",
     "uuid": "^9.0.0",
@@ -118,7 +118,7 @@
     "@types/ws": "^8.5.3",
     "@types/yargs": "^17.0.13",
     "archiver": "^5.3.1",
-    "astro-sst": "2.41.5",
+    "astro-sst": "2.43.0",
     "async": "^3.2.4",
     "tsx": "^3.12.1",
     "typescript": "^5.2.2",

package/runtime/handlers/container.js

@@ -231,8 +231,9 @@ export const useContainerHandler = () => {
                                         `type=${input.props.container?.cacheTo.type}`,
                                         ...(input.props.container?.cacheTo?.params
                                             ? Object.entries(input.props.container?.cacheTo?.params).map(([pk, pv]) => `${pk}=${pv}`)
-                                            : []).join(","),
-                                    ],
+                                            : []),
+                                    ].join(","),
+                                ,
                             ]
                             : []),
                         `.`,
@@ -279,8 +280,9 @@ export const useContainerHandler = () => {
                                         `type=${input.props.container?.cacheTo.type}`,
                                         ...(input.props.container?.cacheTo?.params
                                             ? Object.entries(input.props.container?.cacheTo?.params).map(([pk, pv]) => `${pk}=${pv}`)
-                                            : []).join(","),
-                                    ],
+                                            : []),
+                                    ].join(","),
+                                ,
                             ]
                             : []),
                         `--platform ${platform}`,

package/support/ssr-warmer/index.mjs

@@ -30914,62 +30914,65 @@ var require_dist_cjs59 = __commonJS({
 // support/ssr-warmer/index.ts
 var import_client_lambda = __toESM(require_dist_cjs59(), 1);
 var lambda = new import_client_lambda.LambdaClient({});
-var FUNCTION_NAME = process.env.FUNCTION_NAME;
-var CONCURRENCY = parseInt(process.env.CONCURRENCY);
+var warmParams = JSON.parse(process.env.WARM_PARAMS);
 function generateUniqueId() {
   return Math.random().toString(36).slice(2, 8);
 }
 async function handler(_event, context) {
   const warmerId = `warmer-${generateUniqueId()}`;
-  console.log({
-    event: "warmer invoked",
-    functionName: FUNCTION_NAME,
-    concurrency: CONCURRENCY,
-    warmerId
-  });
-  const ret = await Promise.all(
-    Array.from({ length: CONCURRENCY }, (_v, i) => i).map((i) => {
-      try {
-        return lambda.send(
-          new import_client_lambda.InvokeCommand({
-            FunctionName: FUNCTION_NAME,
-            InvocationType: "RequestResponse",
-            Payload: JSON.stringify({
-              type: "warmer",
-              warmerId,
-              index: i,
-              concurrency: CONCURRENCY,
-              delay: 75
+  for (const warmParam of warmParams) {
+    const { concurrency: CONCURRENCY, function: FUNCTION_NAME } = warmParam;
+    console.log({
+      event: "warmer invoked",
+      functionName: FUNCTION_NAME,
+      concurrency: CONCURRENCY,
+      warmerId
+    });
+    const ret = await Promise.all(
+      Array.from({ length: CONCURRENCY }, (_v, i) => i).map((i) => {
+        try {
+          return lambda.send(
+            new import_client_lambda.InvokeCommand({
+              FunctionName: FUNCTION_NAME,
+              InvocationType: "RequestResponse",
+              Payload: JSON.stringify({
+                type: "warmer",
+                warmerId,
+                index: i,
+                concurrency: CONCURRENCY,
+                delay: 75
+              })
             })
-          })
+          );
+        } catch (e) {
+          console.error(`failed to warm up #${i}`, e);
+        }
+      })
+    );
+    const warmedServerIds = [];
+    ret.forEach((r, i) => {
+      if (r?.StatusCode !== 200 || !r?.Payload) {
+        console.error(`failed to warm up #${i}:`, r?.Payload?.toString());
+        return;
+      }
+      const payloadString = r.Payload.transformToString();
+      if (payloadString) {
+        const payload = JSON.parse(
+          r.Payload.transformToString()
         );
-      } catch (e) {
-        console.error(`failed to warm up #${i}`, e);
-      }
-    })
-  );
-  const warmedServerIds = [];
-  ret.forEach((r, i) => {
-    if (r?.StatusCode !== 200 || !r?.Payload) {
-      console.error(`failed to warm up #${i}:`, r?.Payload?.toString());
-      return;
-    }
-    const payloadString = r.Payload.transformToString();
-    if (payloadString) {
-      const payload = JSON.parse(
-        r.Payload.transformToString()
-      );
-      warmedServerIds.push(payload.serverId);
-    } else {
-      warmedServerIds.push("unknown");
-    }
-  });
-  console.log({
-    event: "warmer result",
-    sent: CONCURRENCY,
-    success: warmedServerIds.length,
-    uniqueServersWarmed: [...new Set(warmedServerIds)].length
-  });
+        warmedServerIds.push(payload.serverId);
+      } else {
+        warmedServerIds.push("unknown");
+      }
+    });
+    console.log({
+      event: "warmer result",
+      sent: CONCURRENCY,
+      name: FUNCTION_NAME,
+      success: warmedServerIds.length,
+      uniqueServersWarmed: [...new Set(warmedServerIds)].length
+    });
+  }
 }
 export {
   handler