@go-to-k/cdkd 0.203.0 → 0.204.0

package/dist/cli.js

@@ -46647,7 +46647,7 @@ async function localStartApiCommand(target, options) {
 	let profileCredsFile;
 	const authorizerCache = createAuthorizerCache();
 	const jwksCache = createJwksCache();
-	const jwksWarnedUrls = /* @__PURE__ */ new Set();
+	const jwksWarnedAt = /* @__PURE__ */ new Map();
 	let sigV4CredentialsLoader;
 	const sigV4WarnedForeignIds = /* @__PURE__ */ new Set();
 	const fromCfnTipEmitted = { value: false };
@@ -46811,7 +46811,7 @@ async function localStartApiCommand(target, options) {
 			port: basePort === 0 ? 0 : nextPort,
 			authorizerCache,
 			jwksCache,
-			jwksWarnedUrls,
+			jwksWarnedAt,
 			sigV4CredentialsLoader,
 			sigV4WarnedForeignIds,
 			sigV4Strict: options.strictSigv4 === true,
@@ -46858,7 +46858,7 @@ async function localStartApiCommand(target, options) {
 			port: basePort === 0 ? 0 : nextPort,
 			authorizerCache,
 			jwksCache,
-			jwksWarnedUrls,
+			jwksWarnedAt,
 			sigV4WarnedForeignIds,
 			sigV4Strict: options.strictSigv4 === true,
 			preDispatch: async (req, res) => {
@@ -49153,9 +49153,13 @@ function createLocalRunTaskCommand() {
 * `cdkl start-service` strategy — name one or more ECS services and the engine
 * boots their replicas. There is no front-door listener (services are reached
 * directly via their published container ports). Mirrors `albStrategy` in
-* shape, with `frontDoor` omitted and `lbPortOverrides` empty.
+* shape, with `frontDoor` omitted and `lbPortOverrides` empty. No-arg to match
+* cdk-local's bundled `serviceStrategy()` signature exactly — start-service
+* has no per-invocation options that branch the strategy shape (unlike
+* `albStrategy(options)`, which threads `--lb-port` parses into
+* `lbPortOverrides`).
 */
-function serviceStrategy(_options) {
+function serviceStrategy() {
 	return {
 		pickEntries: (stacks) => listTargets(stacks).ecsServices,
 		pickerMessage: "Select one or more ECS services to run",
@@ -49182,7 +49186,7 @@ function serviceStrategy(_options) {
 */
 function createLocalStartServiceCommand() {
 	const cmd = new Command("start-service").description("Run one or more AWS::ECS::Service resources locally as a long-running emulator. Spins up DesiredCount task replicas per service (clamped by --max-tasks) using the same per-task docker network + metadata sidecar pattern as `cdkd local run-task`, then keeps each replica running and restarts it on exit per --restart-policy. ^C tears every replica + sidecar + network down. Each <target> accepts a CDK display path (MyStack/MyService) or stack-qualified logical ID (MyStack:MyServiceXYZ); single-stack apps may omit the stack prefix. When two or more <target>s are supplied, every service is booted into a shared Cloud Map / Service Connect registry so peer services discover each other via docker --add-host overlay (Issue #460). Omit <targets> in an interactive terminal to multi-select the ECS services from a list.").argument("[targets...]", "One or more CDK display paths or stack-qualified logical IDs of the AWS::ECS::Service resources to run (omit to multi-select interactively in a TTY)").addOption(new Option("--from-state", "Read cdkd's S3 state for the target stack and substitute Ref / Fn::GetAtt / Fn::Sub / Fn::ImportValue / Fn::GetStackOutput intrinsics in container images, environment variables, secrets, role ARNs, and volumes. Mutually exclusive with --from-cfn-stack.").default(false)).addOption(new Option("--state-bucket <bucket>", "S3 bucket for --from-state. Falls back to CDKD_STATE_BUCKET env or cdk.json context.cdkd.stateBucket.")).addOption(new Option("--state-prefix <prefix>", "S3 key prefix for --from-state state files.").default("cdkd")).action(withErrorHandling(async (targets, options) => {
-		await runEcsServiceEmulator(targets, options, serviceStrategy(options), cdkdExtraStateProviders);
+		await runEcsServiceEmulator(targets, options, serviceStrategy(), cdkdExtraStateProviders);
 	}));
 	addStartServiceSpecificOptions(cmd);
 	return addCommonEcsServiceOptions(cmd);
@@ -49392,7 +49396,7 @@ async function resolveInboundAuthorization(resolved, options) {
 		...authorizer.allowedClients && { allowedClients: authorizer.allowedClients },
 		...authorizer.allowedScopes && { allowedScopes: authorizer.allowedScopes },
 		...authorizer.customClaims && { customClaims: authorizer.customClaims }
-	}, header, createJwksCache(), { warned: /* @__PURE__ */ new Set() })).allow) throw new CdkdError(`Inbound JWT rejected by the runtime's customJwtAuthorizer (signature / issuer / expiry / audience check failed against ${authorizer.discoveryUrl}).`, "LOCAL_INVOKE_AGENTCORE_AUTH_DENIED");
+	}, header, createJwksCache(), { warnedAt: /* @__PURE__ */ new Map() })).allow) throw new CdkdError(`Inbound JWT rejected by the runtime's customJwtAuthorizer (signature / issuer / expiry / audience check failed against ${authorizer.discoveryUrl}).`, "LOCAL_INVOKE_AGENTCORE_AUTH_DENIED");
 	logger.info(`Inbound JWT verified against ${authorizer.discoveryUrl}.`);
 	return header;
 }
@@ -51927,7 +51931,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.203.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.204.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());