@go-to-k/cdkd 0.224.0 → 0.226.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceNameWithFallback, C as StackHasActiveImportsError, F as getLiveRenderer, H as withStackName, I as PATTERN_B_NAME_PROPERTIES, L as PATTERN_B_RESOURCE_TYPES, M as getLogger, P as runStackBuffered, S as ResourceUpdateNotSupportedError, V as withSkipPrefix, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError, z as generateResourceName } from "./import-helpers-wLipXr5g.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-DZGYMsjN.js";
+import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-DM557Qjg.js";
 import { t as ASGProvider } from "./asg-provider-B_hrCxRx.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -50,7 +50,7 @@ import { AddTagsToResourceCommand as AddTagsToResourceCommand$3, CreateDBCluster
 import { AddTagsToResourceCommand as AddTagsToResourceCommand$4, CreateDBClusterCommand as CreateDBClusterCommand$2, CreateDBInstanceCommand as CreateDBInstanceCommand$2, CreateDBSubnetGroupCommand as CreateDBSubnetGroupCommand$2, DeleteDBClusterCommand as DeleteDBClusterCommand$2, DeleteDBInstanceCommand as DeleteDBInstanceCommand$2, DeleteDBSubnetGroupCommand as DeleteDBSubnetGroupCommand$2, DescribeDBClustersCommand as DescribeDBClustersCommand$2, DescribeDBInstancesCommand as DescribeDBInstancesCommand$2, DescribeDBSubnetGroupsCommand as DescribeDBSubnetGroupsCommand$2, ListTagsForResourceCommand as ListTagsForResourceCommand$13, ModifyDBClusterCommand as ModifyDBClusterCommand$2, ModifyDBInstanceCommand as ModifyDBInstanceCommand$2, ModifyDBSubnetGroupCommand as ModifyDBSubnetGroupCommand$2, NeptuneClient, RemoveTagsFromResourceCommand as RemoveTagsFromResourceCommand$4 } from "@aws-sdk/client-neptune";
 import { CreateWebACLCommand, DeleteWebACLCommand, GetWebACLCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$14, ListWebACLsCommand, TagResourceCommand as TagResourceCommand$13, UntagResourceCommand as UntagResourceCommand$12, UpdateWebACLCommand, WAFNonexistentItemException, WAFV2Client } from "@aws-sdk/client-wafv2";
 import { CognitoIdentityProviderClient, CreateUserPoolCommand, DeleteUserPoolCommand, DescribeUserPoolCommand, GetUserPoolMfaConfigCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$15, ListUserPoolsCommand, ResourceNotFoundException as ResourceNotFoundException$7, SetUserPoolMfaConfigCommand, UpdateUserPoolCommand } from "@aws-sdk/client-cognito-identity-provider";
-import { CreatePrivateDnsNamespaceCommand, CreateServiceCommand as CreateServiceCommand$1, DeleteNamespaceCommand, DeleteServiceCommand as DeleteServiceCommand$1, GetNamespaceCommand, GetOperationCommand, GetServiceCommand, ListNamespacesCommand, ListServicesCommand as ListServicesCommand$1, ListTagsForResourceCommand as ListTagsForResourceCommand$16, NamespaceNotFound, ServiceDiscoveryClient, ServiceNotFound, UpdatePrivateDnsNamespaceCommand, UpdateServiceCommand as UpdateServiceCommand$1 } from "@aws-sdk/client-servicediscovery";
+import { CreatePrivateDnsNamespaceCommand, CreateServiceCommand as CreateServiceCommand$1, DeleteNamespaceCommand, DeleteServiceAttributesCommand, DeleteServiceCommand as DeleteServiceCommand$1, GetNamespaceCommand, GetOperationCommand, GetServiceAttributesCommand, GetServiceCommand, ListNamespacesCommand, ListServicesCommand as ListServicesCommand$1, ListTagsForResourceCommand as ListTagsForResourceCommand$16, NamespaceNotFound, ServiceDiscoveryClient, ServiceNotFound, UpdatePrivateDnsNamespaceCommand, UpdateServiceAttributesCommand, UpdateServiceCommand as UpdateServiceCommand$1 } from "@aws-sdk/client-servicediscovery";
 import { AppSyncClient, CreateApiKeyCommand, CreateDataSourceCommand, CreateGraphqlApiCommand, CreateResolverCommand, DeleteApiKeyCommand, DeleteDataSourceCommand, DeleteGraphqlApiCommand, DeleteResolverCommand, GetDataSourceCommand, GetGraphqlApiCommand, GetIntrospectionSchemaCommand, GetResolverCommand, ListApiKeysCommand, ListGraphqlApisCommand, NotFoundException as NotFoundException$4, StartSchemaCreationCommand, TagResourceCommand as TagResourceCommand$14, UntagResourceCommand as UntagResourceCommand$13, UpdateApiKeyCommand, UpdateDataSourceCommand, UpdateGraphqlApiCommand, UpdateResolverCommand } from "@aws-sdk/client-appsync";
 import { parse, print } from "graphql";
 import { CrawlerRunningException, CreateConnectionCommand, CreateCrawlerCommand, CreateDatabaseCommand, CreateJobCommand, CreateSecurityConfigurationCommand, CreateTableCommand as CreateTableCommand$1, CreateTriggerCommand, CreateWorkflowCommand, DeleteConnectionCommand, DeleteCrawlerCommand, DeleteDatabaseCommand, DeleteJobCommand, DeleteSecurityConfigurationCommand, DeleteTableCommand as DeleteTableCommand$1, DeleteTriggerCommand, DeleteWorkflowCommand, EntityNotFoundException, GetConnectionCommand, GetCrawlerCommand, GetDatabaseCommand, GetDatabasesCommand, GetJobCommand, GetSecurityConfigurationCommand, GetSecurityConfigurationsCommand, GetTableCommand, GetTablesCommand, GetTagsCommand, GetTriggerCommand, GetWorkflowCommand, GlueClient, ListWorkflowsCommand, StartCrawlerScheduleCommand, StartTriggerCommand, StopCrawlerCommand, StopCrawlerScheduleCommand, StopTriggerCommand, UpdateConnectionCommand, UpdateCrawlerCommand, UpdateDatabaseCommand, UpdateJobCommand, UpdateTableCommand as UpdateTableCommand$1, UpdateTriggerCommand, UpdateWorkflowCommand } from "@aws-sdk/client-glue";
@@ -1553,7 +1553,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.224.0";
+	return "0.226.0";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -17323,6 +17323,7 @@ var ApiGatewayV2Provider = class {
 			"IdentitySource",
 			"JwtConfiguration",
 			"AuthorizerUri",
+			"AuthorizerCredentialsArn",
 			"AuthorizerPayloadFormatVersion",
 			"AuthorizerResultTtlInSeconds",
 			"EnableSimpleResponses",
@@ -17618,6 +17619,7 @@ var ApiGatewayV2Provider = class {
 				IdentitySource: properties["IdentitySource"] ? typeof properties["IdentitySource"] === "string" ? [properties["IdentitySource"]] : properties["IdentitySource"] : void 0,
 				JwtConfiguration: properties["JwtConfiguration"],
 				AuthorizerUri: properties["AuthorizerUri"],
+				AuthorizerCredentialsArn: properties["AuthorizerCredentialsArn"],
 				AuthorizerPayloadFormatVersion: properties["AuthorizerPayloadFormatVersion"],
 				AuthorizerResultTtlInSeconds: properties["AuthorizerResultTtlInSeconds"],
 				EnableSimpleResponses: properties["EnableSimpleResponses"],
@@ -17775,6 +17777,7 @@ var ApiGatewayV2Provider = class {
 			else if (resp.AuthorizerType === "REQUEST") {
 				result["AuthorizerUri"] = resp.AuthorizerUri ?? "";
 				result["AuthorizerPayloadFormatVersion"] = resp.AuthorizerPayloadFormatVersion ?? "";
+				if (resp.AuthorizerCredentialsArn !== void 0) result["AuthorizerCredentialsArn"] = resp.AuthorizerCredentialsArn;
 				if (resp.AuthorizerResultTtlInSeconds !== void 0) result["AuthorizerResultTtlInSeconds"] = resp.AuthorizerResultTtlInSeconds;
 				if (resp.EnableSimpleResponses !== void 0) result["EnableSimpleResponses"] = resp.EnableSimpleResponses;
 				if (resp.IdentityValidationExpression !== void 0) result["IdentityValidationExpression"] = resp.IdentityValidationExpression;
@@ -18071,7 +18074,7 @@ var ApiGatewayV2Provider = class {
 	/**
 	* `UpdateAuthorizer` keys on `(ApiId, AuthorizerId)`. Mutable fields
 	* cdkd manages: `AuthorizerType` / `Name` / `IdentitySource` /
-	* `JwtConfiguration` / `AuthorizerUri` /
+	* `JwtConfiguration` / `AuthorizerUri` / `AuthorizerCredentialsArn` /
 	* `AuthorizerPayloadFormatVersion` / `AuthorizerResultTtlInSeconds` /
 	* `EnableSimpleResponses`.
 	*/
@@ -18108,6 +18111,10 @@ var ApiGatewayV2Provider = class {
 			input.AuthorizerUri = properties["AuthorizerUri"];
 			changed = true;
 		}
+		if (properties["AuthorizerCredentialsArn"] !== void 0 && properties["AuthorizerCredentialsArn"] !== previousProperties["AuthorizerCredentialsArn"]) {
+			input.AuthorizerCredentialsArn = properties["AuthorizerCredentialsArn"];
+			changed = true;
+		}
 		if (properties["AuthorizerPayloadFormatVersion"] !== void 0 && properties["AuthorizerPayloadFormatVersion"] !== previousProperties["AuthorizerPayloadFormatVersion"]) {
 			input.AuthorizerPayloadFormatVersion = properties["AuthorizerPayloadFormatVersion"];
 			changed = true;
@@ -26693,7 +26700,8 @@ var ServiceDiscoveryProvider = class {
 		"Description",
 		"HealthCheckConfig",
 		"Tags",
-		"Type"
+		"Type",
+		"ServiceAttributes"
 	])]]);
 	getClient() {
 		if (!this.client) this.client = new ServiceDiscoveryClient(this.providerRegion ? { region: this.providerRegion } : {});
@@ -26846,11 +26854,30 @@ var ServiceDiscoveryProvider = class {
 				...type && { Type: type }
 			}))).Service;
 			if (!service || !service.Id) throw new Error("CreateService did not return Service ID");
-			this.logger.debug(`Successfully created service discovery service ${logicalId}: ${service.Id}`);
+			const serviceId = service.Id;
+			this.logger.debug(`Successfully created service discovery service ${logicalId}: ${serviceId}`);
+			try {
+				const attrs = this.normalizeServiceAttributes(properties["ServiceAttributes"]);
+				if (Object.keys(attrs).length > 0) {
+					await withRetry(() => client.send(new UpdateServiceAttributesCommand({
+						ServiceId: serviceId,
+						Attributes: attrs
+					})), logicalId, { logger: this.logger });
+					this.logger.debug(`Applied ${Object.keys(attrs).length} ServiceAttribute(s) for ${logicalId}`);
+				}
+			} catch (innerError) {
+				try {
+					await client.send(new DeleteServiceCommand$1({ Id: serviceId }));
+					this.logger.debug(`Cleaned up partially-created ServiceDiscovery Service ${logicalId} (${serviceId}) after ServiceAttributes wiring failure`);
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up partially-created ServiceDiscovery Service ${logicalId} (${serviceId}) after ServiceAttributes wiring failure: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}. Manual deletion may be required before the next deploy: aws servicediscovery delete-service --id ${serviceId}`);
+				}
+				throw innerError;
+			}
 			return {
-				physicalId: service.Id,
+				physicalId: serviceId,
 				attributes: {
-					Id: service.Id,
+					Id: serviceId,
 					Arn: service.Arn || "",
 					Name: service.Name || name || ""
 				}
@@ -26877,7 +26904,7 @@ var ServiceDiscoveryProvider = class {
 	* full AWS-current snapshot as `properties`, so the round-trip is
 	* value-preserving.
 	*/
-	async updateService(logicalId, physicalId, resourceType, properties, _previousProperties) {
+	async updateService(logicalId, physicalId, resourceType, properties, previousProperties) {
 		this.logger.debug(`Updating service discovery service ${logicalId}: ${physicalId}`);
 		const client = this.getClient();
 		const serviceChange = {};
@@ -26885,7 +26912,15 @@ var ServiceDiscoveryProvider = class {
 		const dnsConfig = properties["DnsConfig"];
 		if (dnsConfig?.DnsRecords !== void 0) serviceChange.DnsConfig = { DnsRecords: dnsConfig.DnsRecords };
 		if (properties["HealthCheckConfig"] !== void 0) serviceChange.HealthCheckConfig = properties["HealthCheckConfig"];
-		if (Object.keys(serviceChange).length === 0) {
+		const newAttrs = this.normalizeServiceAttributes(properties["ServiceAttributes"]);
+		const oldAttrs = this.normalizeServiceAttributes(previousProperties["ServiceAttributes"]);
+		const upsertAttrs = {};
+		for (const [k, v] of Object.entries(newAttrs)) if (oldAttrs[k] !== v) upsertAttrs[k] = v;
+		const removedAttrKeys = Object.keys(oldAttrs).filter((k) => !(k in newAttrs));
+		const hasServiceChange = Object.keys(serviceChange).length > 0;
+		const hasAttrUpsert = Object.keys(upsertAttrs).length > 0;
+		const hasAttrRemove = removedAttrKeys.length > 0;
+		if (!hasServiceChange && !hasAttrUpsert && !hasAttrRemove) {
 			this.logger.debug(`No mutable diff for ServiceDiscovery Service ${logicalId}, skipping update`);
 			return {
 				physicalId,
@@ -26893,11 +26928,27 @@ var ServiceDiscoveryProvider = class {
 			};
 		}
 		try {
-			const operationId = (await client.send(new UpdateServiceCommand$1({
-				Id: physicalId,
-				Service: serviceChange
-			}))).OperationId;
-			if (operationId) await this.pollOperation(operationId, logicalId, resourceType);
+			if (hasServiceChange) {
+				const operationId = (await client.send(new UpdateServiceCommand$1({
+					Id: physicalId,
+					Service: serviceChange
+				}))).OperationId;
+				if (operationId) await this.pollOperation(operationId, logicalId, resourceType);
+			}
+			if (hasAttrUpsert) {
+				await withRetry(() => client.send(new UpdateServiceAttributesCommand({
+					ServiceId: physicalId,
+					Attributes: upsertAttrs
+				})), logicalId, { logger: this.logger });
+				this.logger.debug(`Applied ${Object.keys(upsertAttrs).length} ServiceAttribute change(s) for ${logicalId}`);
+			}
+			if (hasAttrRemove) {
+				await withRetry(() => client.send(new DeleteServiceAttributesCommand({
+					ServiceId: physicalId,
+					Attributes: removedAttrKeys
+				})), logicalId, { logger: this.logger });
+				this.logger.debug(`Removed ${removedAttrKeys.length} ServiceAttribute(s) for ${logicalId}`);
+			}
 			this.logger.debug(`Successfully updated service discovery service ${logicalId}`);
 			return {
 				physicalId,
@@ -27037,9 +27088,31 @@ var ServiceDiscoveryProvider = class {
 		if (svc.DnsConfig) result["DnsConfig"] = svc.DnsConfig;
 		if (svc.HealthCheckConfig) result["HealthCheckConfig"] = svc.HealthCheckConfig;
 		if (svc.HealthCheckCustomConfig) result["HealthCheckCustomConfig"] = svc.HealthCheckCustomConfig;
+		try {
+			result["ServiceAttributes"] = (await this.getClient().send(new GetServiceAttributesCommand({ ServiceId: physicalId }))).ServiceAttributes?.Attributes ?? {};
+		} catch (err) {
+			this.logger.debug(`ServiceDiscovery GetServiceAttributes(${physicalId}) failed: ${err instanceof Error ? err.message : String(err)}`);
+		}
 		if (svc.Arn) await this.attachTags(result, svc.Arn);
 		return result;
 	}
+	/**
+	* Normalize a CFn `ServiceAttributes` value (a bare key→value JSON map) into
+	* the SDK's `Attributes` shape (`Record<string,string>`). Only string /
+	* number / boolean values are coerced via `String()`; a non-scalar value is
+	* malformed input and is dropped rather than stringified to `[object
+	* Object]`. A non-object input (absent / null / array) yields `{}` so callers
+	* can branch on `Object.keys(...).length`.
+	*/
+	normalizeServiceAttributes(raw) {
+		if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return {};
+		const out = {};
+		for (const [k, v] of Object.entries(raw)) {
+			if (v === void 0 || v === null) continue;
+			if (typeof v === "string" || typeof v === "number" || typeof v === "boolean") out[k] = String(v);
+		}
+		return out;
+	}
 	/** Best-effort tag fetch via `ListTagsForResource(ResourceARN)`. */
 	async attachTags(result, arn) {
 		try {
@@ -54608,7 +54681,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.224.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.226.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());