@go-to-k/cdkd 0.230.32 → 0.231.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceName, C as StackHasActiveImportsError, F as getLiveRenderer, H as withSkipPrefix, I as PATTERN_B_NAME_OPTIONS, L as PATTERN_B_NAME_PROPERTIES, M as getLogger, P as runStackBuffered, R as PATTERN_B_RESOURCE_TYPES, S as ResourceUpdateNotSupportedError, U as withStackName, V as generateResourceNameWithFallback, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError } from "./import-helpers-DayvBD4T.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as resolveStateBucketWithDefaultAndSource, A as TemplateParser, B as getDockerCmd, C as findActionableSilentDrops, D as applyRoleArnIfSet, E as cfnRefValueFromPhysicalId, F as AssetPublisher, G as Synthesizer, H as runDockerStreaming, I as stringifyValue, J as getLegacyStateBucketName, K as synthesisStatusMessage, L as WorkGraph, M as S3StateBackend, N as rebuildClientForBucketRegion, O as DiffCalculator, P as shouldRetainResource, Q as resolveStateBucketWithDefault, R as buildDockerImage, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as AssetManifestLoader, V as runDockerForeground, W as getDockerImageBySourceHash, X as resolveCaptureObservedState, Y as resolveApp, Z as resolveSkipPrefix, _ as green, a as withRetry, at as uploadCfnTemplate, b as IAMRoleProvider, c as computeImplicitDeleteEdges, ct as resolveBucketRegion, d as isStatefulRecreateTargetSync, et as warnDeprecatedNoPrefixCliFlag, f as renderStatefulReason, g as gray, h as cyan, i as withResourceDeadline, it as findLargeInlineResources, j as LockManager, k as DagBuilder, l as extractDeploymentEventError, m as bold, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as CFN_TEMPLATE_URL_LIMIT, o as isRetryableTransientError, ot as AssemblyReader, p as formatResourceLine, q as getDefaultStateBucketName, r as DeployEngine, rt as MIGRATE_TMP_PREFIX, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as CFN_TEMPLATE_BODY_LIMIT, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, v as red, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, z as formatDockerLoginError } from "./deploy-engine-EV5BfAvn.js";
+import { $ as resolveStateBucketWithDefaultAndSource, A as TemplateParser, B as getDockerCmd, C as findActionableSilentDrops, D as applyRoleArnIfSet, E as cfnRefValueFromPhysicalId, F as AssetPublisher, G as Synthesizer, H as runDockerStreaming, I as stringifyValue, J as getLegacyStateBucketName, K as synthesisStatusMessage, L as WorkGraph, M as S3StateBackend, N as rebuildClientForBucketRegion, O as DiffCalculator, P as shouldRetainResource, Q as resolveStateBucketWithDefault, R as buildDockerImage, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as AssetManifestLoader, V as runDockerForeground, W as getDockerImageBySourceHash, X as resolveCaptureObservedState, Y as resolveApp, Z as resolveSkipPrefix, _ as green, a as withRetry, at as uploadCfnTemplate, b as IAMRoleProvider, c as computeImplicitDeleteEdges, ct as resolveBucketRegion, d as isStatefulRecreateTargetSync, et as warnDeprecatedNoPrefixCliFlag, f as renderStatefulReason, g as gray, h as cyan, i as withResourceDeadline, it as findLargeInlineResources, j as LockManager, k as DagBuilder, l as extractDeploymentEventError, m as bold, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as CFN_TEMPLATE_URL_LIMIT, o as isRetryableTransientError, ot as AssemblyReader, p as formatResourceLine, q as getDefaultStateBucketName, r as DeployEngine, rt as MIGRATE_TMP_PREFIX, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as CFN_TEMPLATE_BODY_LIMIT, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, v as red, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, z as formatDockerLoginError } from "./deploy-engine-IqXCHYxE.js";
 import { t as ASGProvider } from "./asg-provider-Dgj3loIG.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -1446,7 +1446,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.230.32";
+	return "0.231.0";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -16603,7 +16603,8 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 			"Description",
 			"Tags",
 			"TracingEnabled",
-			"Variables"
+			"Variables",
+			"MethodSettings"
 		])],
 		["AWS::ApiGateway::Method", new Set([
 			"RestApiId",
@@ -17096,6 +17097,25 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 				variables: properties["Variables"],
 				tags: this.cfnTagsToRecord(properties["Tags"])
 			}));
+			const methodSettings = properties["MethodSettings"];
+			const methodSettingsOps = buildMethodSettingsPatchOps(void 0, methodSettings);
+			if (methodSettingsOps.length > 0) try {
+				await this.apiGatewayClient.send(new UpdateStageCommand({
+					restApiId,
+					stageName,
+					patchOperations: methodSettingsOps
+				}));
+			} catch (patchError) {
+				try {
+					await this.apiGatewayClient.send(new DeleteStageCommand({
+						restApiId,
+						stageName
+					}));
+				} catch (cleanupError) {
+					this.logger.warn(`Failed to clean up stage ${stageName} after a MethodSettings patch failure: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
+				}
+				throw patchError;
+			}
 			this.logger.debug(`Successfully created API Gateway Stage ${logicalId}: ${stageName}`);
 			return {
 				physicalId: stageName,
@@ -17146,6 +17166,7 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 			op: "remove",
 			path: `/variables/${key}`
 		});
+		patchOperations.push(...buildMethodSettingsPatchOps(previousProperties["MethodSettings"], properties["MethodSettings"]));
 		try {
 			if (patchOperations.length > 0) await this.apiGatewayClient.send(new UpdateStageCommand({
 				restApiId,
@@ -17650,6 +17671,15 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 			result["Description"] = resp.description ?? "";
 			if (resp.tracingEnabled !== void 0) result["TracingEnabled"] = resp.tracingEnabled;
 			if (resp.variables !== void 0) result["Variables"] = resp.variables;
+			const stateMethodSettings = properties?.["MethodSettings"];
+			if (stateMethodSettings && stateMethodSettings.length > 0) result["MethodSettings"] = stateMethodSettings.map((stateEntry) => {
+				const awsEntry = (resp.methodSettings ?? {})[methodSettingKey(stateEntry)];
+				const entry = {};
+				if (stateEntry.ResourcePath !== void 0) entry["ResourcePath"] = stateEntry.ResourcePath;
+				if (stateEntry.HttpMethod !== void 0) entry["HttpMethod"] = stateEntry.HttpMethod;
+				for (const { cfnKey, responseKey } of METHOD_SETTING_PATCH_FIELDS) if (stateEntry[cfnKey] !== void 0 && awsEntry?.[responseKey] !== void 0) entry[cfnKey] = awsEntry[responseKey];
+				return entry;
+			});
 			return result;
 		} catch (err) {
 			if (err instanceof NotFoundException$1) return void 0;
@@ -17720,6 +17750,122 @@ var ApiGatewayProvider = class ApiGatewayProvider {
 	}
 };
 /**
+* CFn MethodSetting field → UpdateStage patch-path suffix under
+* `/{method_setting_key}/`. The get-stage response field for each is the
+* camelCase of the CFn name (used by the drift readback).
+*/
+const METHOD_SETTING_PATCH_FIELDS = [
+	{
+		cfnKey: "ThrottlingRateLimit",
+		patchSuffix: "throttling/rateLimit",
+		responseKey: "throttlingRateLimit"
+	},
+	{
+		cfnKey: "ThrottlingBurstLimit",
+		patchSuffix: "throttling/burstLimit",
+		responseKey: "throttlingBurstLimit"
+	},
+	{
+		cfnKey: "MetricsEnabled",
+		patchSuffix: "metrics/enabled",
+		responseKey: "metricsEnabled"
+	},
+	{
+		cfnKey: "LoggingLevel",
+		patchSuffix: "logging/loglevel",
+		responseKey: "loggingLevel"
+	},
+	{
+		cfnKey: "DataTraceEnabled",
+		patchSuffix: "logging/dataTrace",
+		responseKey: "dataTraceEnabled"
+	},
+	{
+		cfnKey: "CachingEnabled",
+		patchSuffix: "caching/enabled",
+		responseKey: "cachingEnabled"
+	},
+	{
+		cfnKey: "CacheTtlInSeconds",
+		patchSuffix: "caching/ttlInSeconds",
+		responseKey: "cacheTtlInSeconds"
+	},
+	{
+		cfnKey: "CacheDataEncrypted",
+		patchSuffix: "caching/dataEncrypted",
+		responseKey: "cacheDataEncrypted"
+	},
+	{
+		cfnKey: "RequireAuthorizationForCacheControl",
+		patchSuffix: "caching/requireAuthorizationForCacheControl",
+		responseKey: "requireAuthorizationForCacheControl"
+	},
+	{
+		cfnKey: "UnauthorizedCacheControlHeaderStrategy",
+		patchSuffix: "caching/unauthorizedCacheControlHeaderStrategy",
+		responseKey: "unauthorizedCacheControlHeaderStrategy"
+	}
+];
+/**
+* The `{method_setting_key}` API Gateway keys a stage's method settings by:
+* `{resource_path}/{http_method}` with the resource path's leading slash
+* stripped — CDK's stage-level `deployOptions` (`ResourcePath: '/*',
+* HttpMethod: '*'`) keys as the star-slash-star wildcard (the get-stage
+* `methodSettings` map key and the UpdateStage patch-path segment are the
+* same string).
+*/
+function methodSettingKey(setting) {
+	const resourcePath = setting.ResourcePath ?? "/*";
+	const httpMethod = setting.HttpMethod ?? "*";
+	return `${resourcePath === "/" ? "~1" : resourcePath.replace(/^\//, "")}/${httpMethod}`;
+}
+/**
+* Build the UpdateStage patch operations that take a stage's method settings
+* from `previous` to `next` (both in the CFn `MethodSettings` list shape):
+*   - an entry present only in `next`: `replace` each specified field
+*     (`replace` both adds and changes a method-setting override)
+*   - an entry present in both with NO fields dropped: `replace` only the
+*     changed fields
+*   - an entry present in both with a field DROPPED: `remove /{key}` then
+*     `replace` every remaining specified field — API Gateway REJECTS a
+*     field-level `remove` (`remove <key>/throttling/rateLimit` fails with
+*     "Cannot remove method setting ... because there is no method setting
+*     for this method"), while whole-key remove followed by field replaces
+*     in the SAME UpdateStage call applies sequentially (both verified live
+*     2026-07-03), so the dropped field reverts to its default (CFn
+*     absent-field semantics)
+*   - an entry present only in `previous`: `remove /{key}` — drops every
+*     override for that method path at once (CFn absent-entry semantics)
+* Values are rendered as strings (the UpdateStage wire format).
+*/
+function buildMethodSettingsPatchOps(previous, next) {
+	const ops = [];
+	const prevByKey = new Map((previous ?? []).map((s) => [methodSettingKey(s), s]));
+	const nextByKey = new Map((next ?? []).map((s) => [methodSettingKey(s), s]));
+	for (const key of prevByKey.keys()) if (!nextByKey.has(key)) ops.push({
+		op: "remove",
+		path: `/${key}`
+	});
+	for (const [key, setting] of nextByKey) {
+		const prevSetting = prevByKey.get(key);
+		const fieldDropped = prevSetting !== void 0 && METHOD_SETTING_PATCH_FIELDS.some(({ cfnKey }) => prevSetting[cfnKey] !== void 0 && setting[cfnKey] === void 0);
+		if (fieldDropped) ops.push({
+			op: "remove",
+			path: `/${key}`
+		});
+		for (const { cfnKey, patchSuffix } of METHOD_SETTING_PATCH_FIELDS) {
+			const nextValue = setting[cfnKey];
+			const prevValue = fieldDropped ? void 0 : prevSetting?.[cfnKey];
+			if (nextValue !== void 0 && String(nextValue) !== String(prevValue ?? "")) ops.push({
+				op: "replace",
+				path: `/${key}/${patchSuffix}`,
+				value: String(nextValue)
+			});
+		}
+	}
+	return ops;
+}
+/**
 * Append RFC 6902 patch operations describing the diff between two map-shaped
 * properties (e.g. API Gateway Method `RequestParameters` /
 * `RequestModels`). For each key:
@@ -55650,7 +55796,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.32");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.231.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());