@go-to-k/cdkd 0.101.0 → 0.101.2

package/dist/cli.js

@@ -11,7 +11,7 @@ import { AssumeRoleCommand, GetCallerIdentityCommand, STSClient } from "@aws-sdk
 import { AssociateRouteTableCommand, AttachInternetGatewayCommand, AuthorizeSecurityGroupEgressCommand, AuthorizeSecurityGroupIngressCommand, CreateInternetGatewayCommand, CreateNatGatewayCommand, CreateNetworkAclCommand, CreateNetworkAclEntryCommand, CreateRouteCommand, CreateRouteTableCommand, CreateSecurityGroupCommand, CreateSubnetCommand, CreateTagsCommand, CreateVpcCommand, DeleteInternetGatewayCommand, DeleteNatGatewayCommand, DeleteNetworkAclCommand, DeleteNetworkAclEntryCommand, DeleteNetworkInterfaceCommand, DeleteRouteCommand, DeleteRouteTableCommand, DeleteSecurityGroupCommand, DeleteSubnetCommand, DeleteTagsCommand, DeleteVpcCommand, DescribeAvailabilityZonesCommand, DescribeInstanceAttributeCommand, DescribeInstancesCommand, DescribeInternetGatewaysCommand, DescribeNatGatewaysCommand, DescribeNetworkAclsCommand, DescribeNetworkInterfacesCommand, DescribeRouteTablesCommand, DescribeSecurityGroupsCommand, DescribeSubnetsCommand, DescribeVolumesCommand, DescribeVpcAttributeCommand, DescribeVpcsCommand, DetachInternetGatewayCommand, DisassociateRouteTableCommand, EC2Client, ModifyInstanceAttributeCommand, ModifySubnetAttributeCommand, ModifyVpcAttributeCommand, ReplaceNetworkAclAssociationCommand, RevokeSecurityGroupEgressCommand, RevokeSecurityGroupIngressCommand, RunInstancesCommand, TerminateInstancesCommand, waitUntilInstanceRunning, waitUntilInstanceTerminated, waitUntilNatGatewayAvailable, waitUntilNatGatewayDeleted } from "@aws-sdk/client-ec2";
 import { CreateTableCommand, DeleteTableCommand, DescribeTableCommand, DynamoDBClient, ListTablesCommand, ListTagsOfResourceCommand, ResourceNotFoundException as ResourceNotFoundException$1, TagResourceCommand as TagResourceCommand$2, UntagResourceCommand as UntagResourceCommand$2, UpdateTableCommand } from "@aws-sdk/client-dynamodb";
 import { CloudFormationClient, CreateChangeSetCommand, DeleteChangeSetCommand, DeleteStackCommand, DescribeChangeSetCommand, DescribeStackEventsCommand, DescribeStackResourcesCommand, DescribeStacksCommand, DescribeTypeCommand, ExecuteChangeSetCommand, GetTemplateCommand, UpdateStackCommand, waitUntilChangeSetCreateComplete, waitUntilStackDeleteComplete, waitUntilStackImportComplete, waitUntilStackUpdateComplete } from "@aws-sdk/client-cloudformation";
-import { APIGatewayClient, CreateAuthorizerCommand, CreateDeploymentCommand, CreateResourceCommand, CreateStageCommand, DeleteAuthorizerCommand, DeleteDeploymentCommand, DeleteMethodCommand, DeleteResourceCommand, DeleteStageCommand, GetAccountCommand, GetAuthorizerCommand, GetDeploymentCommand, GetMethodCommand, GetResourceCommand, GetStageCommand, NotFoundException as NotFoundException$1, PutIntegrationCommand, PutMethodCommand, PutMethodResponseCommand, TagResourceCommand as TagResourceCommand$3, UntagResourceCommand as UntagResourceCommand$3, UpdateAccountCommand, UpdateAuthorizerCommand, UpdateMethodCommand, UpdateStageCommand } from "@aws-sdk/client-api-gateway";
+import { APIGatewayClient, CreateAuthorizerCommand, CreateDeploymentCommand, CreateResourceCommand, CreateStageCommand, DeleteAuthorizerCommand, DeleteDeploymentCommand, DeleteMethodCommand, DeleteResourceCommand, DeleteStageCommand, GetAccountCommand, GetAuthorizerCommand, GetDeploymentCommand, GetMethodCommand, GetResourceCommand, GetStageCommand, NotFoundException as NotFoundException$1, PutIntegrationCommand, PutIntegrationResponseCommand, PutMethodCommand, PutMethodResponseCommand, TagResourceCommand as TagResourceCommand$3, UntagResourceCommand as UntagResourceCommand$3, UpdateAccountCommand, UpdateAuthorizerCommand, UpdateMethodCommand, UpdateStageCommand } from "@aws-sdk/client-api-gateway";
 import { CreateEventBusCommand, DeleteEventBusCommand, DeleteRuleCommand, DescribeEventBusCommand, DescribeRuleCommand, EventBridgeClient, ListEventBusesCommand, ListRulesCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$1, ListTargetsByRuleCommand, PutRuleCommand, PutTargetsCommand, RemoveTargetsCommand, ResourceNotFoundException as ResourceNotFoundException$2, TagResourceCommand as TagResourceCommand$4, UntagResourceCommand as UntagResourceCommand$4, UpdateEventBusCommand } from "@aws-sdk/client-eventbridge";
 import { CreateSecretCommand, DeleteSecretCommand, DescribeSecretCommand, GetSecretValueCommand, ListSecretsCommand, RemoveRegionsFromReplicationCommand, ReplicateSecretToRegionsCommand, ResourceNotFoundException as ResourceNotFoundException$3, SecretsManagerClient, TagResourceCommand as TagResourceCommand$5, UntagResourceCommand as UntagResourceCommand$5, UpdateSecretCommand } from "@aws-sdk/client-secrets-manager";
 import { AddTagsToResourceCommand, DeleteParameterCommand, DescribeParametersCommand, GetParameterCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$2, ParameterNotFound, PutParameterCommand, RemoveTagsFromResourceCommand, SSMClient } from "@aws-sdk/client-ssm";
@@ -11757,6 +11757,12 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 			"HttpMethod",
 			"AuthorizationType",
 			"AuthorizerId",
+			"ApiKeyRequired",
+			"OperationName",
+			"RequestParameters",
+			"RequestModels",
+			"RequestValidatorId",
+			"AuthorizationScopes",
 			"Integration",
 			"MethodResponses"
 		])]
@@ -12317,8 +12323,32 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 	/**
 	* Create an API Gateway Method
 	*
-	* Creates a method on a resource and optionally sets up the integration.
+	* Creates a method on a resource and optionally sets up the integration
+	* (and per-status-code integration responses) plus method responses.
 	* PhysicalId format: `{restApiId}|{resourceId}|{httpMethod}`
+	*
+	* All mutable Method-level fields supported by `PutMethodRequest` are
+	* forwarded (`ApiKeyRequired`, `OperationName`, `RequestParameters`,
+	* `RequestModels`, `RequestValidatorId`, `AuthorizationScopes`).
+	*
+	* All mutable Integration-level fields supported by
+	* `PutIntegrationRequest` are forwarded (`ConnectionType`,
+	* `ConnectionId`, `Credentials`, `RequestParameters`, `RequestTemplates`,
+	* `PassthroughBehavior`, `ContentHandling`, `TimeoutInMillis`,
+	* `CacheNamespace`, `CacheKeyParameters`, `TlsConfig`,
+	* `ResponseTransferMode`). Pre-fix only `Type` / `IntegrationHttpMethod`
+	* / `Uri` were forwarded — silently dropping every other field. This
+	* surfaced as e.g. `responseTransferMode: 'STREAM'` being lost,
+	* producing the AWS rejection
+	*   "Invalid ResponseTransferMode. Cannot use ResponseTransferMode
+	*    BUFFERED for Lambda functions invoked by InvokeWithResponseStream
+	*    for AWS_PROXY integrations."
+	* when CDK's `LambdaIntegration({ responseTransferMode: STREAM })` was
+	* used together with the streaming `response-streaming-invocations` URI.
+	*
+	* `IntegrationResponses` (the CFn array shape under `Integration`) is
+	* applied via per-entry `PutIntegrationResponseCommand` calls after the
+	* integration itself is put in place.
 	*/
 	async createMethod(logicalId, resourceType, properties) {
 		this.logger.debug(`Creating API Gateway Method ${logicalId}`);
@@ -12327,6 +12357,12 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 		const httpMethod = properties["HttpMethod"];
 		const authorizationType = properties["AuthorizationType"] ?? "NONE";
 		const authorizerId = properties["AuthorizerId"];
+		const apiKeyRequired = properties["ApiKeyRequired"];
+		const operationName = properties["OperationName"];
+		const methodRequestParameters = properties["RequestParameters"];
+		const requestModels = properties["RequestModels"];
+		const requestValidatorId = properties["RequestValidatorId"];
+		const authorizationScopes = properties["AuthorizationScopes"];
 		if (!restApiId || !resourceId || !httpMethod) throw new ProvisioningError(`RestApiId, ResourceId, and HttpMethod are required for API Gateway Method ${logicalId}`, resourceType, logicalId);
 		try {
 			await this.apiGatewayClient.send(new PutMethodCommand({
@@ -12334,17 +12370,51 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 				resourceId,
 				httpMethod,
 				authorizationType,
-				authorizerId
+				authorizerId,
+				apiKeyRequired,
+				operationName,
+				requestParameters: methodRequestParameters,
+				requestModels,
+				requestValidatorId,
+				authorizationScopes
 			}));
 			const integration = properties["Integration"];
-			if (integration) await this.apiGatewayClient.send(new PutIntegrationCommand({
-				restApiId,
-				resourceId,
-				httpMethod,
-				type: integration["Type"],
-				integrationHttpMethod: integration["IntegrationHttpMethod"],
-				uri: integration["Uri"]
-			}));
+			if (integration) {
+				await this.apiGatewayClient.send(new PutIntegrationCommand({
+					restApiId,
+					resourceId,
+					httpMethod,
+					type: integration["Type"],
+					integrationHttpMethod: integration["IntegrationHttpMethod"],
+					uri: integration["Uri"],
+					connectionType: integration["ConnectionType"],
+					connectionId: integration["ConnectionId"],
+					credentials: integration["Credentials"],
+					requestParameters: integration["RequestParameters"],
+					requestTemplates: integration["RequestTemplates"],
+					passthroughBehavior: integration["PassthroughBehavior"],
+					contentHandling: integration["ContentHandling"],
+					timeoutInMillis: integration["TimeoutInMillis"],
+					cacheNamespace: integration["CacheNamespace"],
+					cacheKeyParameters: integration["CacheKeyParameters"],
+					tlsConfig: integration["TlsConfig"] ? { insecureSkipVerification: integration["TlsConfig"]["InsecureSkipVerification"] } : void 0,
+					responseTransferMode: integration["ResponseTransferMode"]
+				}));
+				const integrationResponses = integration["IntegrationResponses"];
+				if (integrationResponses) for (const ir of integrationResponses) {
+					const statusCode = String(ir["StatusCode"]);
+					await this.apiGatewayClient.send(new PutIntegrationResponseCommand({
+						restApiId,
+						resourceId,
+						httpMethod,
+						statusCode,
+						selectionPattern: ir["SelectionPattern"],
+						responseParameters: ir["ResponseParameters"],
+						responseTemplates: ir["ResponseTemplates"],
+						contentHandling: ir["ContentHandling"]
+					}));
+				}
+			}
 			const methodResponses = properties["MethodResponses"];
 			if (methodResponses) for (const resp of methodResponses) {
 				const statusCode = String(resp["StatusCode"]);
@@ -12381,6 +12451,10 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 	*   `/requestParameters/method.request.querystring.foo`
 	*   `/requestModels/application~1json` (slashes escaped per RFC 6901).
 	*
+	* `AuthorizationScopes` is an array — AWS accepts a comma-joined
+	* `replace /authorizationScopes` op (same pattern as Authorizer's
+	* `ProviderARNs`).
+	*
 	* `HttpMethod`, `ResourceId`, `RestApiId` are immutable (replacement
 	* layer handles them via DELETE + CREATE).
 	*
@@ -12436,6 +12510,13 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 		}
 		appendMapPatchOps(patchOperations, "/requestParameters", properties["RequestParameters"] ?? {}, previousProperties["RequestParameters"] ?? {});
 		appendMapPatchOps(patchOperations, "/requestModels", properties["RequestModels"] ?? {}, previousProperties["RequestModels"] ?? {});
+		const newScopes = properties["AuthorizationScopes"];
+		const prevScopes = previousProperties["AuthorizationScopes"];
+		if ((newScopes?.length ?? 0) !== (prevScopes?.length ?? 0) || (newScopes ?? []).some((s, i) => s !== prevScopes?.[i])) patchOperations.push({
+			op: "replace",
+			path: "/authorizationScopes",
+			value: (newScopes ?? []).join(",")
+		});
 		if (patchOperations.length === 0) {
 			this.logger.debug(`No changes detected for API Gateway Method ${logicalId}`);
 			return {
@@ -42616,7 +42697,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.101.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.101.2");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());