@go-to-k/cdkd 0.260.0 → 0.260.2

package/dist/cli.js

@@ -43,7 +43,7 @@ import readline from "node:readline/promises";
 import { writeFileSync as writeFileSync$1 } from "fs";
 import * as zlib from "node:zlib";
 import { ApplicationAutoScalingClient, DeleteScalingPolicyCommand, DeregisterScalableTargetCommand, DescribeScalableTargetsCommand, DescribeScalingPoliciesCommand, PutScalingPolicyCommand, RegisterScalableTargetCommand } from "@aws-sdk/client-application-auto-scaling";
-import { ApiGatewayV2Client, CreateApiCommand, CreateAuthorizerCommand as CreateAuthorizerCommand$1, CreateIntegrationCommand, CreateRouteCommand as CreateRouteCommand$1, CreateStageCommand as CreateStageCommand$1, DeleteApiCommand, DeleteAuthorizerCommand as DeleteAuthorizerCommand$1, DeleteIntegrationCommand, DeleteRouteCommand as DeleteRouteCommand$1, DeleteStageCommand as DeleteStageCommand$1, GetApiCommand, GetAuthorizerCommand as GetAuthorizerCommand$1, GetIntegrationCommand, GetRouteCommand, GetStageCommand as GetStageCommand$1, NotFoundException as NotFoundException$3, UpdateApiCommand, UpdateAuthorizerCommand as UpdateAuthorizerCommand$1, UpdateIntegrationCommand, UpdateRouteCommand, UpdateStageCommand as UpdateStageCommand$1 } from "@aws-sdk/client-apigatewayv2";
+import { ApiGatewayV2Client, CreateApiCommand, CreateAuthorizerCommand as CreateAuthorizerCommand$1, CreateIntegrationCommand, CreateRouteCommand as CreateRouteCommand$1, CreateStageCommand as CreateStageCommand$1, DeleteApiCommand, DeleteAuthorizerCommand as DeleteAuthorizerCommand$1, DeleteCorsConfigurationCommand, DeleteIntegrationCommand, DeleteRouteCommand as DeleteRouteCommand$1, DeleteStageCommand as DeleteStageCommand$1, GetApiCommand, GetAuthorizerCommand as GetAuthorizerCommand$1, GetIntegrationCommand, GetRouteCommand, GetStageCommand as GetStageCommand$1, NotFoundException as NotFoundException$3, UpdateApiCommand, UpdateAuthorizerCommand as UpdateAuthorizerCommand$1, UpdateIntegrationCommand, UpdateRouteCommand, UpdateStageCommand as UpdateStageCommand$1 } from "@aws-sdk/client-apigatewayv2";
 import { CreateStateMachineCommand, DeleteStateMachineCommand, DescribeStateMachineCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$11, SFNClient, StateMachineDoesNotExist, TagResourceCommand as TagResourceCommand$13, UntagResourceCommand as UntagResourceCommand$13, UpdateStateMachineCommand } from "@aws-sdk/client-sfn";
 import { CreateClusterCommand, CreateServiceCommand, DeleteClusterCommand, DeleteServiceCommand, DeregisterTaskDefinitionCommand, DescribeClustersCommand, DescribeServicesCommand, DescribeTaskDefinitionCommand, ECSClient, PutClusterCapacityProvidersCommand, RegisterTaskDefinitionCommand, TagResourceCommand as TagResourceCommand$14, UntagResourceCommand as UntagResourceCommand$14, UpdateClusterCommand, UpdateServiceCommand } from "@aws-sdk/client-ecs";
 import { AddTagsToResourceCommand as AddTagsToResourceCommand$3, CreateDBClusterCommand as CreateDBClusterCommand$1, CreateDBInstanceCommand as CreateDBInstanceCommand$1, CreateDBSubnetGroupCommand as CreateDBSubnetGroupCommand$1, DeleteDBClusterCommand as DeleteDBClusterCommand$1, DeleteDBInstanceCommand as DeleteDBInstanceCommand$1, DeleteDBSubnetGroupCommand as DeleteDBSubnetGroupCommand$1, DescribeDBClustersCommand as DescribeDBClustersCommand$1, DescribeDBInstancesCommand as DescribeDBInstancesCommand$1, DescribeDBSubnetGroupsCommand as DescribeDBSubnetGroupsCommand$1, DocDBClient, ListTagsForResourceCommand as ListTagsForResourceCommand$12, ModifyDBClusterCommand as ModifyDBClusterCommand$1, ModifyDBInstanceCommand as ModifyDBInstanceCommand$1, ModifyDBSubnetGroupCommand as ModifyDBSubnetGroupCommand$1, RemoveTagsFromResourceCommand as RemoveTagsFromResourceCommand$3 } from "@aws-sdk/client-docdb";
@@ -1901,7 +1901,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.260.0";
+	return "0.260.2";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -8519,7 +8519,7 @@ var LambdaFunctionProvider = class {
 					Timeout: this.clearOnUpdateRemoval(properties["Timeout"], previousProperties["Timeout"], 3),
 					MemorySize: this.clearOnUpdateRemoval(properties["MemorySize"], previousProperties["MemorySize"], 128),
 					Description: this.clearOnUpdateRemoval(properties["Description"], previousProperties["Description"], ""),
-					Environment: this.clearOnUpdateRemoval(properties["Environment"], previousProperties["Environment"], { Variables: {} }),
+					Environment: this.clearOnUpdateRemoval(this.normalizeEnvironmentForUpdate(properties["Environment"]), previousProperties["Environment"], { Variables: {} }),
 					Layers: this.clearOnUpdateRemoval(properties["Layers"], previousProperties["Layers"], []),
 					TracingConfig: this.clearOnUpdateRemoval(properties["TracingConfig"], previousProperties["TracingConfig"], { Mode: "PassThrough" }),
 					EphemeralStorage: this.clearOnUpdateRemoval(properties["EphemeralStorage"], previousProperties["EphemeralStorage"], { Size: 512 }),
@@ -8690,6 +8690,25 @@ var LambdaFunctionProvider = class {
 		if (previousValue !== void 0) return clearValue;
 	}
 	/**
+	* Normalize a template `Environment` block for UpdateFunctionConfiguration.
+	*
+	* `Environment: {}` (present, but no `Variables` key — a hand-written L1 /
+	* imported-template shape CDK never emits) passed through verbatim does NOT
+	* clear the live env vars: the API keeps the old `Variables` when the input
+	* `Environment` carries none (live-verified 2026-07-22, issue #1158). The
+	* template's declarative meaning is "no env vars", so a Variables-less
+	* block is rewritten to the explicit-clear `{Variables: {}}`. A present
+	* `Variables` map (even empty) and an absent `Environment` pass through
+	* unchanged — removal handling stays with `clearOnUpdateRemoval`. A `null`
+	* block (hand-written JSON) is treated like absent rather than crashing on
+	* the property read.
+	*/
+	normalizeEnvironmentForUpdate(environment) {
+		if (environment == null) return void 0;
+		if (environment.Variables === void 0) return { Variables: {} };
+		return environment;
+	}
+	/**
 	* Determine whether the function actually attaches to a VPC, i.e. has at
 	* least one Subnet ID. A bare VpcConfig with empty arrays does not create
 	* any ENIs, so we skip the wait in that case.
@@ -19332,35 +19351,51 @@ var ApiGatewayV2Provider = class {
 			input.Name = properties["Name"];
 			changed = true;
 		}
-		if (properties["Description"] !== void 0 && properties["Description"] !== previousProperties["Description"]) {
-			input.Description = properties["Description"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["Description"], previousProperties["Description"], "");
+			if (r.changed) {
+				input.Description = r.value;
+				changed = true;
+			}
 		}
 		if (properties["CorsConfiguration"] !== void 0 && !this.deepEqual(properties["CorsConfiguration"], previousProperties["CorsConfiguration"])) {
 			input.CorsConfiguration = properties["CorsConfiguration"];
 			changed = true;
 		}
-		if (properties["DisableExecuteApiEndpoint"] !== void 0 && properties["DisableExecuteApiEndpoint"] !== previousProperties["DisableExecuteApiEndpoint"]) {
-			input.DisableExecuteApiEndpoint = properties["DisableExecuteApiEndpoint"];
-			changed = true;
+		const corsRemoved = properties["CorsConfiguration"] === void 0 && previousProperties["CorsConfiguration"] !== void 0;
+		{
+			const r = this.clearableUpdate(properties["DisableExecuteApiEndpoint"], previousProperties["DisableExecuteApiEndpoint"], false);
+			if (r.changed) {
+				input.DisableExecuteApiEndpoint = r.value;
+				changed = true;
+			}
 		}
-		if (properties["Version"] !== void 0 && properties["Version"] !== previousProperties["Version"]) {
-			input.Version = properties["Version"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["Version"], previousProperties["Version"], "");
+			if (r.changed) {
+				input.Version = r.value;
+				changed = true;
+			}
 		}
 		if (properties["RouteSelectionExpression"] !== void 0 && properties["RouteSelectionExpression"] !== previousProperties["RouteSelectionExpression"]) {
 			input.RouteSelectionExpression = properties["RouteSelectionExpression"];
 			changed = true;
 		}
-		if (properties["ApiKeySelectionExpression"] !== void 0 && properties["ApiKeySelectionExpression"] !== previousProperties["ApiKeySelectionExpression"]) {
-			input.ApiKeySelectionExpression = properties["ApiKeySelectionExpression"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["ApiKeySelectionExpression"], previousProperties["ApiKeySelectionExpression"], "$request.header.x-api-key");
+			if (r.changed) {
+				input.ApiKeySelectionExpression = r.value;
+				changed = true;
+			}
 		}
-		if (properties["IpAddressType"] !== void 0 && properties["IpAddressType"] !== previousProperties["IpAddressType"]) {
-			input.IpAddressType = properties["IpAddressType"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["IpAddressType"], previousProperties["IpAddressType"], "ipv4");
+			if (r.changed) {
+				input.IpAddressType = r.value;
+				changed = true;
+			}
 		}
-		if (!changed) {
+		if (!changed && !corsRemoved) {
 			this.logger.debug(`No mutable Api fields changed for ${logicalId}; skipping UpdateApi`);
 			return {
 				physicalId,
@@ -19369,7 +19404,11 @@ var ApiGatewayV2Provider = class {
 		}
 		this.logger.debug(`Updating API Gateway V2 Api ${logicalId}: ${physicalId}`);
 		try {
-			await this.getClient().send(new UpdateApiCommand(input));
+			if (changed) await this.getClient().send(new UpdateApiCommand(input));
+			if (corsRemoved) {
+				this.logger.debug(`Clearing CORS configuration for Api ${logicalId}: ${physicalId}`);
+				await this.getClient().send(new DeleteCorsConfigurationCommand({ ApiId: physicalId }));
+			}
 			return {
 				physicalId,
 				wasReplaced: false
@@ -19396,17 +19435,23 @@ var ApiGatewayV2Provider = class {
 			StageName: physicalId
 		};
 		let changed = false;
-		if (properties["AutoDeploy"] !== void 0 && properties["AutoDeploy"] !== previousProperties["AutoDeploy"]) {
-			input.AutoDeploy = properties["AutoDeploy"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AutoDeploy"], previousProperties["AutoDeploy"], false);
+			if (r.changed) {
+				input.AutoDeploy = r.value;
+				changed = true;
+			}
 		}
 		if (properties["Description"] !== void 0 && properties["Description"] !== previousProperties["Description"]) {
 			input.Description = properties["Description"];
 			changed = true;
 		}
-		if (properties["StageVariables"] !== void 0 && !this.deepEqual(properties["StageVariables"], previousProperties["StageVariables"])) {
-			input.StageVariables = properties["StageVariables"];
-			changed = true;
+		{
+			const merged = this.mapWithRemovals(properties["StageVariables"], previousProperties["StageVariables"]);
+			if (merged !== void 0) {
+				input.StageVariables = merged;
+				changed = true;
+			}
 		}
 		if (properties["DefaultRouteSettings"] !== void 0 && !this.deepEqual(properties["DefaultRouteSettings"], previousProperties["DefaultRouteSettings"])) {
 			input.DefaultRouteSettings = properties["DefaultRouteSettings"];
@@ -19466,13 +19511,19 @@ var ApiGatewayV2Provider = class {
 			input.TimeoutInMillis = properties["TimeoutInMillis"];
 			changed = true;
 		}
-		if (properties["RequestParameters"] !== void 0 && !this.deepEqual(properties["RequestParameters"], previousProperties["RequestParameters"])) {
-			input.RequestParameters = properties["RequestParameters"];
-			changed = true;
+		{
+			const merged = this.mapWithRemovals(properties["RequestParameters"], previousProperties["RequestParameters"]);
+			if (merged !== void 0) {
+				input.RequestParameters = merged;
+				changed = true;
+			}
 		}
-		if (properties["Description"] !== void 0 && properties["Description"] !== previousProperties["Description"]) {
-			input.Description = properties["Description"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["Description"], previousProperties["Description"], "");
+			if (r.changed) {
+				input.Description = r.value;
+				changed = true;
+			}
 		}
 		if (!changed) {
 			this.logger.debug(`No mutable Integration fields changed for ${logicalId}; skipping UpdateIntegration`);
@@ -19515,21 +19566,33 @@ var ApiGatewayV2Provider = class {
 			input.Target = properties["Target"];
 			changed = true;
 		}
-		if (properties["AuthorizationType"] !== void 0 && properties["AuthorizationType"] !== previousProperties["AuthorizationType"]) {
-			input.AuthorizationType = properties["AuthorizationType"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizationType"], previousProperties["AuthorizationType"], "NONE");
+			if (r.changed) {
+				input.AuthorizationType = r.value;
+				changed = true;
+			}
 		}
-		if (properties["AuthorizerId"] !== void 0 && properties["AuthorizerId"] !== previousProperties["AuthorizerId"]) {
-			input.AuthorizerId = properties["AuthorizerId"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizerId"], previousProperties["AuthorizerId"], "");
+			if (r.changed) {
+				input.AuthorizerId = r.value;
+				changed = true;
+			}
 		}
-		if (properties["AuthorizationScopes"] !== void 0 && !this.deepEqual(properties["AuthorizationScopes"], previousProperties["AuthorizationScopes"])) {
-			input.AuthorizationScopes = properties["AuthorizationScopes"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizationScopes"], previousProperties["AuthorizationScopes"], []);
+			if (r.changed) {
+				input.AuthorizationScopes = r.value;
+				changed = true;
+			}
 		}
-		if (properties["OperationName"] !== void 0 && properties["OperationName"] !== previousProperties["OperationName"]) {
-			input.OperationName = properties["OperationName"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["OperationName"], previousProperties["OperationName"], "");
+			if (r.changed) {
+				input.OperationName = r.value;
+				changed = true;
+			}
 		}
 		if (!changed) {
 			this.logger.debug(`No mutable Route fields changed for ${logicalId}; skipping UpdateRoute`);
@@ -19590,25 +19653,37 @@ var ApiGatewayV2Provider = class {
 			input.AuthorizerUri = properties["AuthorizerUri"];
 			changed = true;
 		}
-		if (properties["AuthorizerCredentialsArn"] !== void 0 && properties["AuthorizerCredentialsArn"] !== previousProperties["AuthorizerCredentialsArn"]) {
-			input.AuthorizerCredentialsArn = properties["AuthorizerCredentialsArn"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizerCredentialsArn"], previousProperties["AuthorizerCredentialsArn"], "");
+			if (r.changed) {
+				input.AuthorizerCredentialsArn = r.value;
+				changed = true;
+			}
 		}
-		if (properties["AuthorizerPayloadFormatVersion"] !== void 0 && properties["AuthorizerPayloadFormatVersion"] !== previousProperties["AuthorizerPayloadFormatVersion"]) {
-			input.AuthorizerPayloadFormatVersion = properties["AuthorizerPayloadFormatVersion"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizerPayloadFormatVersion"], previousProperties["AuthorizerPayloadFormatVersion"], "");
+			if (r.changed) {
+				input.AuthorizerPayloadFormatVersion = r.value;
+				changed = true;
+			}
 		}
-		if (properties["AuthorizerResultTtlInSeconds"] !== void 0 && properties["AuthorizerResultTtlInSeconds"] !== previousProperties["AuthorizerResultTtlInSeconds"]) {
-			input.AuthorizerResultTtlInSeconds = properties["AuthorizerResultTtlInSeconds"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["AuthorizerResultTtlInSeconds"], previousProperties["AuthorizerResultTtlInSeconds"], 0);
+			if (r.changed) {
+				input.AuthorizerResultTtlInSeconds = r.value;
+				changed = true;
+			}
 		}
 		if (properties["EnableSimpleResponses"] !== void 0 && properties["EnableSimpleResponses"] !== previousProperties["EnableSimpleResponses"]) {
 			input.EnableSimpleResponses = properties["EnableSimpleResponses"];
 			changed = true;
 		}
-		if (properties["IdentityValidationExpression"] !== void 0 && properties["IdentityValidationExpression"] !== previousProperties["IdentityValidationExpression"]) {
-			input.IdentityValidationExpression = properties["IdentityValidationExpression"];
-			changed = true;
+		{
+			const r = this.clearableUpdate(properties["IdentityValidationExpression"], previousProperties["IdentityValidationExpression"], "");
+			if (r.changed) {
+				input.IdentityValidationExpression = r.value;
+				changed = true;
+			}
 		}
 		if (!changed) {
 			this.logger.debug(`No mutable Authorizer fields changed for ${logicalId}; skipping UpdateAuthorizer`);
@@ -19630,6 +19705,65 @@ var ApiGatewayV2Provider = class {
 		}
 	}
 	/**
+	* Resolve an optional update field so that a property REMOVED from the
+	* template is reset to its CloudFormation default instead of silently
+	* retaining the old live value (issue #1160 — the absent-field removal
+	* silent-drop bug class; reference fix `LambdaFunctionProvider`, #1157).
+	*
+	* Every API Gateway V2 `Update*` API uses PATCH / merge semantics: an
+	* ABSENT input field means "no change", so passing `undefined` for a
+	* field the user just dropped leaves the old value live on AWS while
+	* CloudFormation resets it to the property default. For each removable
+	* field we therefore send its explicit reset value (`resetValue`) when
+	* it was present before and is now absent.
+	*
+	* The reset values below were live-probed against real AWS (2026-07-22):
+	* string fields clear on `''`, boolean/enum fields on their CFn default,
+	* `AuthorizationScopes` on `[]`, `AuthorizerResultTtlInSeconds` on `0`.
+	* `CorsConfiguration` is the ONE exception — an empty `Cors` in
+	* `UpdateApi` does NOT clear it, so removal is handled out-of-band via
+	* `DeleteCorsConfiguration` (see `updateApi`). Fields that are required
+	* per protocol/authorizer type (`Name`, `RouteKey`, `Target`,
+	* `RouteSelectionExpression`, `IntegrationType`/`Uri`/`Method`,
+	* `PayloadFormatVersion`, `IdentitySource`, `JwtConfiguration`,
+	* `EnableSimpleResponses`) are NOT cleared: the underlying API rejects a
+	* reset value for them, so CloudFormation faces the same constraint and
+	* cdkd leaving them matches CFn. `Stage.Description` /
+	* `DefaultRouteSettings` are likewise left alone — the API silently
+	* ignores an empty-string / empty-object reset for them.
+	*
+	* Returns `{ changed, value }`: `changed` is true only when the resolved
+	* value actually differs from the previous one (so a no-op field never
+	* forces an Update call), and `value` is the value to place in the input.
+	*/
+	clearableUpdate(next, previous, resetValue) {
+		const resolved = next !== void 0 ? next : previous !== void 0 ? resetValue : void 0;
+		return {
+			changed: resolved !== void 0 && !this.deepEqual(resolved, previous),
+			value: resolved
+		};
+	}
+	/**
+	* Resolve a `Record<string, string>` update field (`StageVariables`,
+	* Integration `RequestParameters`) with per-key removal awareness.
+	*
+	* These maps also merge on the AWS side: sending `{}` (or a map missing
+	* a previously-present key) does NOT delete the dropped key — it is kept
+	* live. Live-probed 2026-07-22: a key is cleared only by sending it with
+	* an empty-string value. So the resolved map is `next` plus every key
+	* present in `previous` but absent from `next`, set to `''`. Whole-block
+	* removal (next `undefined`, previous populated) therefore sends every
+	* old key as `''`. Returns `undefined` when nothing changed.
+	*/
+	mapWithRemovals(next, previous) {
+		if (this.deepEqual(next, previous)) return void 0;
+		const nextMap = next ?? {};
+		const prevMap = previous ?? {};
+		const merged = { ...nextMap };
+		for (const key of Object.keys(prevMap)) if (!(key in nextMap)) merged[key] = "";
+		return merged;
+	}
+	/**
 	* Convert CloudFormation Tags (Array<{Key, Value}>) to SDK Tags (Record<string, string>).
 	*/
 	cfnTagsToRecord(tags) {
@@ -61349,7 +61483,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.260.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.260.2");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());