@go-to-k/cdkd 0.101.1 → 0.102.0

package/README.md

@@ -673,7 +673,19 @@ new cdk.CfnOutput(this, 'BucketArn', {
 });
 ```
 
-After deployment, outputs are resolved and saved to the S3 state file:
+After deployment, outputs are resolved and printed at the end of `cdkd deploy` (matching CDK CLI's format) and saved to the S3 state file:
+
+```text
+Deployment Summary:
+  Stack: MyStack
+  ...
+  Duration: 21.25s
+
+Outputs:
+  MyStack.BucketArn = arn:aws:s3:::actual-bucket-name-xyz
+
+✓ Deployment completed successfully
+```
 
 ```json
 {
@@ -687,6 +699,7 @@ After deployment, outputs are resolved and saved to the S3 state file:
 
 - CloudFormation: Outputs accessible via `aws cloudformation describe-stacks`
 - cdkd: Outputs saved in S3 state file (e.g., `s3://bucket/cdkd/MyStack/us-east-1/state.json`)
+- Both print outputs to stdout after a successful deploy
 - Both resolve intrinsic functions (Ref, Fn::GetAtt, etc.) to actual values
 
 ## Exit codes

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-CuHRHcyW.js";
-import { A as resolveApp, B as CdkdError, C as AssetPublisher, D as Synthesizer, E as buildDockerImage, F as warnDeprecatedNoPrefixCliFlag, G as PartialFailureError, I as AssemblyReader, J as ResourceUpdateNotSupportedError, K as ProvisioningError, M as resolveSkipPrefix, N as resolveStateBucketWithDefault, O as getDefaultStateBucketName, P as resolveStateBucketWithDefaultAndSource, R as resolveBucketRegion, S as shouldRetainResource, T as WorkGraph, U as LocalInvokeBuildError, X as StackHasActiveImportsError, Y as RouteDiscoveryError, Z as StackTerminationProtectionError, _ as DiffCalculator, a as withRetry, at as getLogger, b as LockManager, c as collectInlinePolicyNamesManagedBySiblings, ct as getLiveRenderer, d as normalizeAwsTagsToCfn, dt as generateResourceName, f as resolveExplicitPhysicalId, ft as generateResourceNameWithFallback, g as IntrinsicFunctionResolver, h as assertRegionMatch, i as withResourceDeadline, j as resolveCaptureObservedState, k as getLegacyStateBucketName, l as CDK_PATH_TAG, lt as PATTERN_B_NAME_PROPERTIES, m as CloudControlProvider, mt as withStackName, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as normalizeAwsError, o as IMPLICIT_DELETE_DEPENDENCIES, p as ProviderRegistry, pt as withSkipPrefix, q as ResourceTimeoutError, r as DeployEngine, rt as withErrorHandling, s as IAMRoleProvider, st as runStackBuffered, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as matchesCdkPath, ut as PATTERN_B_RESOURCE_TYPES, v as DagBuilder, w as stringifyValue, x as S3StateBackend, y as TemplateParser } from "./deploy-engine-BzsWm3DG.js";
+import { A as resolveApp, B as CdkdError, C as AssetPublisher, D as Synthesizer, E as buildDockerImage, F as warnDeprecatedNoPrefixCliFlag, G as PartialFailureError, I as AssemblyReader, J as ResourceUpdateNotSupportedError, K as ProvisioningError, M as resolveSkipPrefix, N as resolveStateBucketWithDefault, O as getDefaultStateBucketName, P as resolveStateBucketWithDefaultAndSource, R as resolveBucketRegion, S as shouldRetainResource, T as WorkGraph, U as LocalInvokeBuildError, X as StackHasActiveImportsError, Y as RouteDiscoveryError, Z as StackTerminationProtectionError, _ as DiffCalculator, a as withRetry, at as getLogger, b as LockManager, c as collectInlinePolicyNamesManagedBySiblings, ct as getLiveRenderer, d as normalizeAwsTagsToCfn, dt as generateResourceName, f as resolveExplicitPhysicalId, ft as generateResourceNameWithFallback, g as IntrinsicFunctionResolver, h as assertRegionMatch, i as withResourceDeadline, j as resolveCaptureObservedState, k as getLegacyStateBucketName, l as CDK_PATH_TAG, lt as PATTERN_B_NAME_PROPERTIES, m as CloudControlProvider, mt as withStackName, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as normalizeAwsError, o as IMPLICIT_DELETE_DEPENDENCIES, p as ProviderRegistry, pt as withSkipPrefix, q as ResourceTimeoutError, r as DeployEngine, rt as withErrorHandling, s as IAMRoleProvider, st as runStackBuffered, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as matchesCdkPath, ut as PATTERN_B_RESOURCE_TYPES, v as DagBuilder, w as stringifyValue, x as S3StateBackend, y as TemplateParser } from "./deploy-engine-D4t--jpp.js";
 import { createHash, createPublicKey, createVerify, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListBucketsCommand, ListDirectoryBucketsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachUserPolicyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachUserPolicyCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListInstanceProfilesCommand, ListUserPoliciesCommand, ListUserTagsCommand, ListUsersCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagUserCommand, UntagUserCommand, UpdateLoginProfileCommand } from "@aws-sdk/client-iam";
@@ -11,7 +11,7 @@ import { AssumeRoleCommand, GetCallerIdentityCommand, STSClient } from "@aws-sdk
 import { AssociateRouteTableCommand, AttachInternetGatewayCommand, AuthorizeSecurityGroupEgressCommand, AuthorizeSecurityGroupIngressCommand, CreateInternetGatewayCommand, CreateNatGatewayCommand, CreateNetworkAclCommand, CreateNetworkAclEntryCommand, CreateRouteCommand, CreateRouteTableCommand, CreateSecurityGroupCommand, CreateSubnetCommand, CreateTagsCommand, CreateVpcCommand, DeleteInternetGatewayCommand, DeleteNatGatewayCommand, DeleteNetworkAclCommand, DeleteNetworkAclEntryCommand, DeleteNetworkInterfaceCommand, DeleteRouteCommand, DeleteRouteTableCommand, DeleteSecurityGroupCommand, DeleteSubnetCommand, DeleteTagsCommand, DeleteVpcCommand, DescribeAvailabilityZonesCommand, DescribeInstanceAttributeCommand, DescribeInstancesCommand, DescribeInternetGatewaysCommand, DescribeNatGatewaysCommand, DescribeNetworkAclsCommand, DescribeNetworkInterfacesCommand, DescribeRouteTablesCommand, DescribeSecurityGroupsCommand, DescribeSubnetsCommand, DescribeVolumesCommand, DescribeVpcAttributeCommand, DescribeVpcsCommand, DetachInternetGatewayCommand, DisassociateRouteTableCommand, EC2Client, ModifyInstanceAttributeCommand, ModifySubnetAttributeCommand, ModifyVpcAttributeCommand, ReplaceNetworkAclAssociationCommand, RevokeSecurityGroupEgressCommand, RevokeSecurityGroupIngressCommand, RunInstancesCommand, TerminateInstancesCommand, waitUntilInstanceRunning, waitUntilInstanceTerminated, waitUntilNatGatewayAvailable, waitUntilNatGatewayDeleted } from "@aws-sdk/client-ec2";
 import { CreateTableCommand, DeleteTableCommand, DescribeTableCommand, DynamoDBClient, ListTablesCommand, ListTagsOfResourceCommand, ResourceNotFoundException as ResourceNotFoundException$1, TagResourceCommand as TagResourceCommand$2, UntagResourceCommand as UntagResourceCommand$2, UpdateTableCommand } from "@aws-sdk/client-dynamodb";
 import { CloudFormationClient, CreateChangeSetCommand, DeleteChangeSetCommand, DeleteStackCommand, DescribeChangeSetCommand, DescribeStackEventsCommand, DescribeStackResourcesCommand, DescribeStacksCommand, DescribeTypeCommand, ExecuteChangeSetCommand, GetTemplateCommand, UpdateStackCommand, waitUntilChangeSetCreateComplete, waitUntilStackDeleteComplete, waitUntilStackImportComplete, waitUntilStackUpdateComplete } from "@aws-sdk/client-cloudformation";
-import { APIGatewayClient, CreateAuthorizerCommand, CreateDeploymentCommand, CreateResourceCommand, CreateStageCommand, DeleteAuthorizerCommand, DeleteDeploymentCommand, DeleteMethodCommand, DeleteResourceCommand, DeleteStageCommand, GetAccountCommand, GetAuthorizerCommand, GetDeploymentCommand, GetMethodCommand, GetResourceCommand, GetStageCommand, NotFoundException as NotFoundException$1, PutIntegrationCommand, PutMethodCommand, PutMethodResponseCommand, TagResourceCommand as TagResourceCommand$3, UntagResourceCommand as UntagResourceCommand$3, UpdateAccountCommand, UpdateAuthorizerCommand, UpdateMethodCommand, UpdateStageCommand } from "@aws-sdk/client-api-gateway";
+import { APIGatewayClient, CreateAuthorizerCommand, CreateDeploymentCommand, CreateResourceCommand, CreateStageCommand, DeleteAuthorizerCommand, DeleteDeploymentCommand, DeleteMethodCommand, DeleteResourceCommand, DeleteStageCommand, GetAccountCommand, GetAuthorizerCommand, GetDeploymentCommand, GetMethodCommand, GetResourceCommand, GetStageCommand, NotFoundException as NotFoundException$1, PutIntegrationCommand, PutIntegrationResponseCommand, PutMethodCommand, PutMethodResponseCommand, TagResourceCommand as TagResourceCommand$3, UntagResourceCommand as UntagResourceCommand$3, UpdateAccountCommand, UpdateAuthorizerCommand, UpdateMethodCommand, UpdateStageCommand } from "@aws-sdk/client-api-gateway";
 import { CreateEventBusCommand, DeleteEventBusCommand, DeleteRuleCommand, DescribeEventBusCommand, DescribeRuleCommand, EventBridgeClient, ListEventBusesCommand, ListRulesCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$1, ListTargetsByRuleCommand, PutRuleCommand, PutTargetsCommand, RemoveTargetsCommand, ResourceNotFoundException as ResourceNotFoundException$2, TagResourceCommand as TagResourceCommand$4, UntagResourceCommand as UntagResourceCommand$4, UpdateEventBusCommand } from "@aws-sdk/client-eventbridge";
 import { CreateSecretCommand, DeleteSecretCommand, DescribeSecretCommand, GetSecretValueCommand, ListSecretsCommand, RemoveRegionsFromReplicationCommand, ReplicateSecretToRegionsCommand, ResourceNotFoundException as ResourceNotFoundException$3, SecretsManagerClient, TagResourceCommand as TagResourceCommand$5, UntagResourceCommand as UntagResourceCommand$5, UpdateSecretCommand } from "@aws-sdk/client-secrets-manager";
 import { AddTagsToResourceCommand, DeleteParameterCommand, DescribeParametersCommand, GetParameterCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$2, ParameterNotFound, PutParameterCommand, RemoveTagsFromResourceCommand, SSMClient } from "@aws-sdk/client-ssm";
@@ -11757,6 +11757,12 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 			"HttpMethod",
 			"AuthorizationType",
 			"AuthorizerId",
+			"ApiKeyRequired",
+			"OperationName",
+			"RequestParameters",
+			"RequestModels",
+			"RequestValidatorId",
+			"AuthorizationScopes",
 			"Integration",
 			"MethodResponses"
 		])]
@@ -12317,8 +12323,32 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 	/**
 	* Create an API Gateway Method
 	*
-	* Creates a method on a resource and optionally sets up the integration.
+	* Creates a method on a resource and optionally sets up the integration
+	* (and per-status-code integration responses) plus method responses.
 	* PhysicalId format: `{restApiId}|{resourceId}|{httpMethod}`
+	*
+	* All mutable Method-level fields supported by `PutMethodRequest` are
+	* forwarded (`ApiKeyRequired`, `OperationName`, `RequestParameters`,
+	* `RequestModels`, `RequestValidatorId`, `AuthorizationScopes`).
+	*
+	* All mutable Integration-level fields supported by
+	* `PutIntegrationRequest` are forwarded (`ConnectionType`,
+	* `ConnectionId`, `Credentials`, `RequestParameters`, `RequestTemplates`,
+	* `PassthroughBehavior`, `ContentHandling`, `TimeoutInMillis`,
+	* `CacheNamespace`, `CacheKeyParameters`, `TlsConfig`,
+	* `ResponseTransferMode`). Pre-fix only `Type` / `IntegrationHttpMethod`
+	* / `Uri` were forwarded — silently dropping every other field. This
+	* surfaced as e.g. `responseTransferMode: 'STREAM'` being lost,
+	* producing the AWS rejection
+	*   "Invalid ResponseTransferMode. Cannot use ResponseTransferMode
+	*    BUFFERED for Lambda functions invoked by InvokeWithResponseStream
+	*    for AWS_PROXY integrations."
+	* when CDK's `LambdaIntegration({ responseTransferMode: STREAM })` was
+	* used together with the streaming `response-streaming-invocations` URI.
+	*
+	* `IntegrationResponses` (the CFn array shape under `Integration`) is
+	* applied via per-entry `PutIntegrationResponseCommand` calls after the
+	* integration itself is put in place.
 	*/
 	async createMethod(logicalId, resourceType, properties) {
 		this.logger.debug(`Creating API Gateway Method ${logicalId}`);
@@ -12327,6 +12357,12 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 		const httpMethod = properties["HttpMethod"];
 		const authorizationType = properties["AuthorizationType"] ?? "NONE";
 		const authorizerId = properties["AuthorizerId"];
+		const apiKeyRequired = properties["ApiKeyRequired"];
+		const operationName = properties["OperationName"];
+		const methodRequestParameters = properties["RequestParameters"];
+		const requestModels = properties["RequestModels"];
+		const requestValidatorId = properties["RequestValidatorId"];
+		const authorizationScopes = properties["AuthorizationScopes"];
 		if (!restApiId || !resourceId || !httpMethod) throw new ProvisioningError(`RestApiId, ResourceId, and HttpMethod are required for API Gateway Method ${logicalId}`, resourceType, logicalId);
 		try {
 			await this.apiGatewayClient.send(new PutMethodCommand({
@@ -12334,17 +12370,51 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 				resourceId,
 				httpMethod,
 				authorizationType,
-				authorizerId
+				authorizerId,
+				apiKeyRequired,
+				operationName,
+				requestParameters: methodRequestParameters,
+				requestModels,
+				requestValidatorId,
+				authorizationScopes
 			}));
 			const integration = properties["Integration"];
-			if (integration) await this.apiGatewayClient.send(new PutIntegrationCommand({
-				restApiId,
-				resourceId,
-				httpMethod,
-				type: integration["Type"],
-				integrationHttpMethod: integration["IntegrationHttpMethod"],
-				uri: integration["Uri"]
-			}));
+			if (integration) {
+				await this.apiGatewayClient.send(new PutIntegrationCommand({
+					restApiId,
+					resourceId,
+					httpMethod,
+					type: integration["Type"],
+					integrationHttpMethod: integration["IntegrationHttpMethod"],
+					uri: integration["Uri"],
+					connectionType: integration["ConnectionType"],
+					connectionId: integration["ConnectionId"],
+					credentials: integration["Credentials"],
+					requestParameters: integration["RequestParameters"],
+					requestTemplates: integration["RequestTemplates"],
+					passthroughBehavior: integration["PassthroughBehavior"],
+					contentHandling: integration["ContentHandling"],
+					timeoutInMillis: integration["TimeoutInMillis"],
+					cacheNamespace: integration["CacheNamespace"],
+					cacheKeyParameters: integration["CacheKeyParameters"],
+					tlsConfig: integration["TlsConfig"] ? { insecureSkipVerification: integration["TlsConfig"]["InsecureSkipVerification"] } : void 0,
+					responseTransferMode: integration["ResponseTransferMode"]
+				}));
+				const integrationResponses = integration["IntegrationResponses"];
+				if (integrationResponses) for (const ir of integrationResponses) {
+					const statusCode = String(ir["StatusCode"]);
+					await this.apiGatewayClient.send(new PutIntegrationResponseCommand({
+						restApiId,
+						resourceId,
+						httpMethod,
+						statusCode,
+						selectionPattern: ir["SelectionPattern"],
+						responseParameters: ir["ResponseParameters"],
+						responseTemplates: ir["ResponseTemplates"],
+						contentHandling: ir["ContentHandling"]
+					}));
+				}
+			}
 			const methodResponses = properties["MethodResponses"];
 			if (methodResponses) for (const resp of methodResponses) {
 				const statusCode = String(resp["StatusCode"]);
@@ -12381,6 +12451,10 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 	*   `/requestParameters/method.request.querystring.foo`
 	*   `/requestModels/application~1json` (slashes escaped per RFC 6901).
 	*
+	* `AuthorizationScopes` is an array — AWS accepts a comma-joined
+	* `replace /authorizationScopes` op (same pattern as Authorizer's
+	* `ProviderARNs`).
+	*
 	* `HttpMethod`, `ResourceId`, `RestApiId` are immutable (replacement
 	* layer handles them via DELETE + CREATE).
 	*
@@ -12436,6 +12510,13 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 		}
 		appendMapPatchOps(patchOperations, "/requestParameters", properties["RequestParameters"] ?? {}, previousProperties["RequestParameters"] ?? {});
 		appendMapPatchOps(patchOperations, "/requestModels", properties["RequestModels"] ?? {}, previousProperties["RequestModels"] ?? {});
+		const newScopes = properties["AuthorizationScopes"];
+		const prevScopes = previousProperties["AuthorizationScopes"];
+		if ((newScopes?.length ?? 0) !== (prevScopes?.length ?? 0) || (newScopes ?? []).some((s, i) => s !== prevScopes?.[i])) patchOperations.push({
+			op: "replace",
+			path: "/authorizationScopes",
+			value: (newScopes ?? []).join(",")
+		});
 		if (patchOperations.length === 0) {
 			this.logger.debug(`No changes detected for API Gateway Method ${logicalId}`);
 			return {
@@ -27988,6 +28069,10 @@ async function deployCommand(stacks, options) {
 				logger.info(`  Deleted: ${deployResult.deleted}`);
 				logger.info(`  Unchanged: ${deployResult.unchanged}`);
 				logger.info(`  Duration: ${(deployResult.durationMs / 1e3).toFixed(2)}s`);
+				if (deployResult.outputs && Object.keys(deployResult.outputs).length > 0) {
+					logger.info("\nOutputs:");
+					for (const [key, value] of Object.entries(deployResult.outputs)) logger.info(`  ${deployResult.stackName}.${key} = ${String(value)}`);
+				}
 				if (options.dryRun) logger.info("\n✓ Dry run completed - no actual changes made");
 				else logger.info("\n✓ Deployment completed successfully");
 			} finally {
@@ -42616,7 +42701,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.101.1");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.102.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());