@go-to-k/cdkd 0.223.4 → 0.225.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceNameWithFallback, C as StackHasActiveImportsError, F as getLiveRenderer, H as withStackName, I as PATTERN_B_NAME_PROPERTIES, L as PATTERN_B_RESOURCE_TYPES, M as getLogger, P as runStackBuffered, S as ResourceUpdateNotSupportedError, V as withSkipPrefix, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError, z as generateResourceName } from "./import-helpers-wLipXr5g.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-D3oZBU4l.js";
+import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-D0CE-sUC.js";
 import { t as ASGProvider } from "./asg-provider-B_hrCxRx.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -30,7 +30,7 @@ import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { execFile, spawn } from "node:child_process";
 import { tmpdir } from "node:os";
 import { AssociateVPCWithHostedZoneCommand, ChangeResourceRecordSetsCommand, ChangeTagsForResourceCommand, CreateHostedZoneCommand, CreateQueryLoggingConfigCommand, DeleteHostedZoneCommand, DeleteQueryLoggingConfigCommand, DisassociateVPCFromHostedZoneCommand, GetHostedZoneCommand, ListHostedZonesByNameCommand, ListHostedZonesCommand, ListQueryLoggingConfigsCommand, ListResourceRecordSetsCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$6, Route53Client, UpdateHostedZoneCommentCommand, UpdateHostedZoneFeaturesCommand } from "@aws-sdk/client-route-53";
-import { AddTagsCommand, CreateListenerCommand, CreateLoadBalancerCommand, CreateTargetGroupCommand, DeleteListenerCommand, DeleteLoadBalancerCommand, DeleteTargetGroupCommand, DescribeListenersCommand, DescribeLoadBalancerAttributesCommand, DescribeLoadBalancersCommand, DescribeTagsCommand, DescribeTargetGroupsCommand, ElasticLoadBalancingV2Client, ModifyListenerCommand, ModifyLoadBalancerAttributesCommand, ModifyTargetGroupCommand, RemoveTagsCommand, SetIpAddressTypeCommand, SetSecurityGroupsCommand, SetSubnetsCommand } from "@aws-sdk/client-elastic-load-balancing-v2";
+import { AddTagsCommand, CreateListenerCommand, CreateLoadBalancerCommand, CreateTargetGroupCommand, DeleteListenerCommand, DeleteLoadBalancerCommand, DeleteTargetGroupCommand, DescribeListenerAttributesCommand, DescribeListenersCommand, DescribeLoadBalancerAttributesCommand, DescribeLoadBalancersCommand, DescribeTagsCommand, DescribeTargetGroupsCommand, ElasticLoadBalancingV2Client, ModifyListenerAttributesCommand, ModifyListenerCommand, ModifyLoadBalancerAttributesCommand, ModifyTargetGroupCommand, RemoveTagsCommand, SetIpAddressTypeCommand, SetSecurityGroupsCommand, SetSubnetsCommand } from "@aws-sdk/client-elastic-load-balancing-v2";
 import { CreateAliasCommand, CreateKeyCommand, DeleteAliasCommand, DescribeKeyCommand, DisableKeyCommand, DisableKeyRotationCommand, EnableKeyCommand, EnableKeyRotationCommand, GetKeyPolicyCommand, GetKeyRotationStatusCommand, KMSClient, ListAliasesCommand, ListKeysCommand, ListResourceTagsCommand, NotFoundException as NotFoundException$2, PutKeyPolicyCommand, ScheduleKeyDeletionCommand, TagResourceCommand as TagResourceCommand$9, UntagResourceCommand as UntagResourceCommand$9, UpdateAliasCommand, UpdateKeyDescriptionCommand } from "@aws-sdk/client-kms";
 import { CreateRepositoryCommand, DeleteLifecyclePolicyCommand, DeleteRepositoryCommand, DeleteRepositoryPolicyCommand, DescribeRepositoriesCommand, ECRClient, GetAuthorizationTokenCommand, GetLifecyclePolicyCommand, LifecyclePolicyNotFoundException, ListTagsForResourceCommand as ListTagsForResourceCommand$7, PutImageScanningConfigurationCommand, PutImageTagMutabilityCommand, PutLifecyclePolicyCommand, RepositoryNotFoundException, SetRepositoryPolicyCommand, TagResourceCommand as TagResourceCommand$10 } from "@aws-sdk/client-ecr";
 import graphlib from "graphlib";
@@ -1553,7 +1553,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.223.4";
+	return "0.225.0";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -17323,6 +17323,7 @@ var ApiGatewayV2Provider = class {
 			"IdentitySource",
 			"JwtConfiguration",
 			"AuthorizerUri",
+			"AuthorizerCredentialsArn",
 			"AuthorizerPayloadFormatVersion",
 			"AuthorizerResultTtlInSeconds",
 			"EnableSimpleResponses",
@@ -17618,6 +17619,7 @@ var ApiGatewayV2Provider = class {
 				IdentitySource: properties["IdentitySource"] ? typeof properties["IdentitySource"] === "string" ? [properties["IdentitySource"]] : properties["IdentitySource"] : void 0,
 				JwtConfiguration: properties["JwtConfiguration"],
 				AuthorizerUri: properties["AuthorizerUri"],
+				AuthorizerCredentialsArn: properties["AuthorizerCredentialsArn"],
 				AuthorizerPayloadFormatVersion: properties["AuthorizerPayloadFormatVersion"],
 				AuthorizerResultTtlInSeconds: properties["AuthorizerResultTtlInSeconds"],
 				EnableSimpleResponses: properties["EnableSimpleResponses"],
@@ -17775,6 +17777,7 @@ var ApiGatewayV2Provider = class {
 			else if (resp.AuthorizerType === "REQUEST") {
 				result["AuthorizerUri"] = resp.AuthorizerUri ?? "";
 				result["AuthorizerPayloadFormatVersion"] = resp.AuthorizerPayloadFormatVersion ?? "";
+				if (resp.AuthorizerCredentialsArn !== void 0) result["AuthorizerCredentialsArn"] = resp.AuthorizerCredentialsArn;
 				if (resp.AuthorizerResultTtlInSeconds !== void 0) result["AuthorizerResultTtlInSeconds"] = resp.AuthorizerResultTtlInSeconds;
 				if (resp.EnableSimpleResponses !== void 0) result["EnableSimpleResponses"] = resp.EnableSimpleResponses;
 				if (resp.IdentityValidationExpression !== void 0) result["IdentityValidationExpression"] = resp.IdentityValidationExpression;
@@ -18071,7 +18074,7 @@ var ApiGatewayV2Provider = class {
 	/**
 	* `UpdateAuthorizer` keys on `(ApiId, AuthorizerId)`. Mutable fields
 	* cdkd manages: `AuthorizerType` / `Name` / `IdentitySource` /
-	* `JwtConfiguration` / `AuthorizerUri` /
+	* `JwtConfiguration` / `AuthorizerUri` / `AuthorizerCredentialsArn` /
 	* `AuthorizerPayloadFormatVersion` / `AuthorizerResultTtlInSeconds` /
 	* `EnableSimpleResponses`.
 	*/
@@ -18108,6 +18111,10 @@ var ApiGatewayV2Provider = class {
 			input.AuthorizerUri = properties["AuthorizerUri"];
 			changed = true;
 		}
+		if (properties["AuthorizerCredentialsArn"] !== void 0 && properties["AuthorizerCredentialsArn"] !== previousProperties["AuthorizerCredentialsArn"]) {
+			input.AuthorizerCredentialsArn = properties["AuthorizerCredentialsArn"];
+			changed = true;
+		}
 		if (properties["AuthorizerPayloadFormatVersion"] !== void 0 && properties["AuthorizerPayloadFormatVersion"] !== previousProperties["AuthorizerPayloadFormatVersion"]) {
 			input.AuthorizerPayloadFormatVersion = properties["AuthorizerPayloadFormatVersion"];
 			changed = true;
@@ -20743,7 +20750,8 @@ var ELBv2Provider = class {
 			"Protocol",
 			"SslPolicy",
 			"AlpnPolicy",
-			"MutualAuthentication"
+			"MutualAuthentication",
+			"ListenerAttributes"
 		])]
 	]);
 	getClient() {
@@ -21035,10 +21043,29 @@ var ELBv2Provider = class {
 				...tags.length > 0 && { Tags: tags }
 			}))).Listeners?.[0];
 			if (!listener || !listener.ListenerArn) throw new Error("CreateListener did not return Listener ARN");
-			this.logger.debug(`Successfully created Listener ${logicalId}: ${listener.ListenerArn}`);
+			const listenerArn = listener.ListenerArn;
+			this.logger.debug(`Successfully created Listener ${logicalId}: ${listenerArn}`);
+			try {
+				const listenerAttributes = this.normalizeAttributes(properties["ListenerAttributes"]);
+				if (listenerAttributes.length > 0) {
+					await withRetry(() => this.getClient().send(new ModifyListenerAttributesCommand({
+						ListenerArn: listenerArn,
+						Attributes: listenerAttributes
+					})), logicalId, { logger: this.logger });
+					this.logger.debug(`Applied ${listenerAttributes.length} ListenerAttribute(s) for ${logicalId}`);
+				}
+			} catch (innerError) {
+				try {
+					await this.getClient().send(new DeleteListenerCommand({ ListenerArn: listenerArn }));
+					this.logger.debug(`Cleaned up partially-created Listener ${logicalId} (${listenerArn}) after attributes-wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created Listener ${logicalId} (${listenerArn}): ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws elbv2 delete-listener --listener-arn ${listenerArn}`);
+				}
+				throw innerError;
+			}
 			return {
-				physicalId: listener.ListenerArn,
-				attributes: { ListenerArn: listener.ListenerArn }
+				physicalId: listenerArn,
+				attributes: { ListenerArn: listenerArn }
 			};
 		} catch (error) {
 			const cause = error instanceof Error ? error : void 0;
@@ -21062,6 +21089,26 @@ var ELBv2Provider = class {
 				...alpnPolicy && alpnPolicy.length > 0 && { AlpnPolicy: alpnPolicy },
 				...mutualAuth !== void 0 && { MutualAuthentication: mutualAuth }
 			}));
+			const newAttrs = this.normalizeAttributes(properties["ListenerAttributes"]);
+			const oldAttrs = this.normalizeAttributes(previousProperties["ListenerAttributes"]);
+			const newAttrMap = new Map(newAttrs.map((a) => [a.Key, a.Value]));
+			const oldAttrMap = new Map(oldAttrs.map((a) => [a.Key, a.Value]));
+			const submittedAttrs = [];
+			for (const [k, v] of newAttrMap) if (oldAttrMap.get(k) !== v) submittedAttrs.push({
+				Key: k,
+				Value: v
+			});
+			for (const [k] of oldAttrMap) if (!newAttrMap.has(k)) submittedAttrs.push({
+				Key: k,
+				Value: ""
+			});
+			if (submittedAttrs.length > 0) {
+				await withRetry(() => this.getClient().send(new ModifyListenerAttributesCommand({
+					ListenerArn: physicalId,
+					Attributes: submittedAttrs
+				})), logicalId, { logger: this.logger });
+				this.logger.debug(`Applied ${submittedAttrs.length} ListenerAttributes change(s) for ${logicalId}`);
+			}
 			await this.applyTagDiff(physicalId, previousProperties["Tags"], properties["Tags"]);
 			this.logger.debug(`Successfully updated Listener ${logicalId}`);
 			return {
@@ -21098,6 +21145,38 @@ var ELBv2Provider = class {
 		return properties["Tags"];
 	}
 	/**
+	* Normalize a CFn `ListenerAttributes` value (an array of `{ Key, Value }`
+	* objects) into the SDK's `Attributes` shape. CFn emits the `Value` as a
+	* string (e.g. `"3600"`, `"false"`) — pass it through verbatim; the
+	* `ModifyListenerAttributes` API takes string Key/Value pairs. Entries
+	* missing a `Key` are dropped (an empty `Value` is a valid "clear the
+	* override" signal, so only `Key` is required). Returns `[]` for an
+	* absent / non-array value so callers can branch on `.length`.
+	*
+	* Values are coerced only from `string` / `number` / `boolean` — never
+	* `String()`-coerced from an arbitrary object (which would yield
+	* `[object Object]`); CFn emits these as strings already, so a non-scalar
+	* value is malformed input and is dropped rather than silently stringified.
+	*/
+	normalizeAttributes(raw) {
+		if (!Array.isArray(raw)) return [];
+		const out = [];
+		for (const entry of raw) {
+			if (entry === null || typeof entry !== "object") continue;
+			const e = entry;
+			if (typeof e.Key !== "string") continue;
+			let value;
+			if (e.Value === void 0 || e.Value === null) value = "";
+			else if (typeof e.Value === "string" || typeof e.Value === "number" || typeof e.Value === "boolean") value = String(e.Value);
+			else continue;
+			out.push({
+				Key: e.Key,
+				Value: value
+			});
+		}
+		return out;
+	}
+	/**
 	* Apply a diff between old and new CFn-shape Tags arrays via ELBv2's
 	* `AddTags` / `RemoveTags` APIs. Both accept `ResourceArns: [arn]`
 	* (single ARN), `Tags: [{Key, Value}]` for AddTags, and
@@ -21260,6 +21339,14 @@ var ELBv2Provider = class {
 		result["DefaultActions"] = (listener.DefaultActions ?? []).map((a) => a);
 		result["AlpnPolicy"] = listener.AlpnPolicy ?? [];
 		result["MutualAuthentication"] = listener.MutualAuthentication ?? {};
+		try {
+			result["ListenerAttributes"] = ((await this.getClient().send(new DescribeListenerAttributesCommand({ ListenerArn: physicalId }))).Attributes ?? []).filter((a) => typeof a.Key === "string" && typeof a.Value === "string").map((a) => ({
+				Key: a.Key,
+				Value: a.Value
+			})).sort((a, b) => a.Key.localeCompare(b.Key));
+		} catch (err) {
+			if (this.isNotFoundError(err)) return void 0;
+		}
 		await this.attachTags(result, physicalId);
 		return result;
 	}
@@ -54528,7 +54615,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.223.4");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.225.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());