@aws-blocks/core 0.1.18 → 0.3.0

package/dist/secret-naming.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-naming.test.d.ts","sourceRoot":"","sources":["../src/secret-naming.test.ts"],"names":[],"mappings":""}

package/dist/secret-naming.test.js

@@ -0,0 +1,40 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import assert from 'node:assert';
+import { describe, it } from 'node:test';
+import { secretStoreLocator } from '@aws-blocks/hosting';
+import { BLOCKS_CONFIG_PARAMETER_PREFIX, BLOCKS_SECRET_PARAMETER_PREFIX, blocksConfigParameterName, blocksConfigPrefix, blocksSecretParameterName, blocksSecretPrefix, blocksStoreConfig, } from './secret-naming.js';
+// These run with no `.blocks/config.json` in cwd, so they exercise the UNSCOPED
+// fallback. A real Blocks app has the file, so it gets the `stackId`-scoped path
+// (covered by the explicit-stackId cases below).
+void describe('Blocks value namespaces — fallback (no .blocks/config.json)', () => {
+    void it('falls back to the unscoped /blocks/secrets and /blocks/config bases', () => {
+        assert.strictEqual(BLOCKS_SECRET_PARAMETER_PREFIX, '/blocks/secrets');
+        assert.strictEqual(BLOCKS_CONFIG_PARAMETER_PREFIX, '/blocks/config');
+        // Secrets Manager names are slash-free at the root; SSM keeps the leading slash.
+        assert.strictEqual(blocksSecretParameterName('STRIPE_KEY'), 'blocks/secrets/STRIPE_KEY');
+        assert.strictEqual(blocksConfigParameterName('FEATURE_FLAGS'), '/blocks/config/FEATURE_FLAGS');
+        assert.deepStrictEqual(blocksStoreConfig(), {
+            secretStore: { prefix: '/blocks/secrets' },
+            configStore: { prefix: '/blocks/config' },
+        });
+    });
+    void it('matches the store locator the CLI/grant/runtime actually use (no divergent name)', () => {
+        assert.strictEqual(blocksSecretParameterName('K'), secretStoreLocator('K', { prefix: BLOCKS_SECRET_PARAMETER_PREFIX, store: 'secrets-manager' }));
+        assert.strictEqual(blocksConfigParameterName('K'), secretStoreLocator('K', { prefix: BLOCKS_CONFIG_PARAMETER_PREFIX, store: 'ssm' }));
+    });
+});
+void describe('Blocks value namespaces — stackId-scoped (B5)', () => {
+    void it('scopes the prefix by stackId so two apps in one account never collide', () => {
+        assert.strictEqual(blocksSecretPrefix('myapp'), '/blocks/myapp/secrets');
+        assert.strictEqual(blocksConfigPrefix('myapp'), '/blocks/myapp/config');
+        assert.deepStrictEqual(blocksStoreConfig('myapp'), {
+            secretStore: { prefix: '/blocks/myapp/secrets' },
+            configStore: { prefix: '/blocks/myapp/config' },
+        });
+    });
+    void it('scoped store names match secretStoreLocator (SM slash-free, SSM leading-slash)', () => {
+        assert.strictEqual(blocksSecretParameterName('STRIPE_KEY', 'myapp'), 'blocks/myapp/secrets/STRIPE_KEY');
+        assert.strictEqual(blocksConfigParameterName('FEATURE_FLAGS', 'myapp'), '/blocks/myapp/config/FEATURE_FLAGS');
+    });
+});

package/dist/telemetry/environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/telemetry/environment.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,QAAQ,IAAI,OAAO,GAAG,QAAQ,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,IAAI,IAAI,OAAO,CAc9B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzD;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAiBhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IACpC,EAAE,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAwBA"}
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/telemetry/environment.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,QAAQ,IAAI,OAAO,GAAG,QAAQ,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,IAAI,IAAI,OAAO,CAgB9B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzD;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAiBhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IACpC,EAAE,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAwBA"}

package/dist/telemetry/environment.js

@@ -25,7 +25,9 @@ export function isCI() {
         process.env.JENKINS_URL ||
         process.env.TF_BUILD ||
         process.env.BITBUCKET_BUILD_NUMBER ||
-        process.env.BUILDKITE);
+        process.env.BUILDKITE ||
+        process.env.RENDER ||
+        process.env.TASKCLUSTER_ROOT_URL);
 }
 /**
  * Detect the package manager from npm_config_user_agent.

package/dist/telemetry/telemetry.test.js

@@ -117,6 +117,8 @@ describe('telemetry/environment', () => {
             delete process.env.TF_BUILD;
             delete process.env.BITBUCKET_BUILD_NUMBER;
             delete process.env.BUILDKITE;
+            delete process.env.RENDER;
+            delete process.env.TASKCLUSTER_ROOT_URL;
         });
         it('returns false when no CI env vars set', () => {
             assert.strictEqual(isCI(), false);
@@ -133,6 +135,14 @@ describe('telemetry/environment', () => {
             process.env.CODEBUILD_BUILD_ID = 'build-123';
             assert.strictEqual(isCI(), true);
         });
+        it('returns true when RENDER is set', () => {
+            process.env.RENDER = 'true';
+            assert.strictEqual(isCI(), true);
+        });
+        it('returns true when TASKCLUSTER_ROOT_URL is set', () => {
+            process.env.TASKCLUSTER_ROOT_URL = 'https://tc.example.com';
+            assert.strictEqual(isCI(), true);
+        });
     });
     it('detectOS returns a valid platform', () => {
         const os = detectOS();

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CORE_VERSION = "0.1.18";
+export declare const CORE_VERSION = "0.3.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,WAAW,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,UAAU,CAAC"}

package/dist/version.js

@@ -1,2 +1,2 @@
 // Auto-generated by scripts/generate-version.mjs — do not edit manually
-export const CORE_VERSION = '0.1.18';
+export const CORE_VERSION = '0.3.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-blocks/core",
-  "version": "0.1.18",
+  "version": "0.3.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/aws-devtools-labs/aws-blocks.git",
@@ -32,6 +32,10 @@
       "types": "./dist/index.cdk.js",
       "default": "./dist/index.cdk.js"
     },
+    "./cdk/internal": {
+      "types": "./dist/cdk/internal.d.ts",
+      "default": "./dist/cdk/internal.js"
+    },
     "./client": "./dist/client/index.js",
     "./lambda-handler": "./dist/lambda-handler.js",
     "./bb-utils": {
@@ -67,6 +71,7 @@
     "@types/cross-spawn": "^6.0.6",
     "@types/http-proxy": "^1.17.16",
     "@types/node": "^20.0.0",
+    "esbuild": "^0.27.0",
     "typescript": "^5.3.0",
     "unctx": "^2.0.0"
   },
@@ -75,6 +80,7 @@
     "@aws-blocks/pipeline": "*",
     "@aws-sdk/client-s3": "^3.700.0",
     "@aws-sdk/client-ssm": "^3.700.0",
+    "@aws-sdk/client-sts": "^3.700.0",
     "cross-spawn": "^7.0.6",
     "http-proxy": "^1.18.1"
   },

package/src/cdk/__fixtures__/import-meta-handler.ts

@@ -0,0 +1,16 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+// Repro fixture for the "handler bundles to CJS but uses import.meta.url" bug.
+//
+// The handler is bundled to CJS by NodejsFunction. In a CJS bundle `import.meta`
+// is empty, so this top-level `fileURLToPath(import.meta.url)` would become
+// `fileURLToPath(undefined)` and throw at Lambda load. blocksNodejsBundling shims
+// `import.meta.url` to a CommonJS equivalent, so the bundle loads and resolves a
+// real path instead of crashing — see bundling.test.ts.
+import { fileURLToPath } from 'node:url';
+
+export const moduleDir = fileURLToPath(import.meta.url);
+
+// Reference moduleDir so esbuild can't tree-shake the import.meta.url usage away.
+export const handler = async () => ({ statusCode: 200, body: JSON.stringify({ moduleDir }) });