@go-to-k/cdkd 0.54.0 → 0.56.0

package/dist/cli.js

@@ -24059,18 +24059,23 @@ import {
   ApiGatewayV2Client,
   CreateApiCommand,
   DeleteApiCommand,
+  UpdateApiCommand,
   CreateStageCommand as CreateStageCommand2,
   DeleteStageCommand as DeleteStageCommand2,
   GetStageCommand as GetStageCommand2,
+  UpdateStageCommand as UpdateStageCommand2,
   CreateIntegrationCommand,
   DeleteIntegrationCommand,
   GetIntegrationCommand,
+  UpdateIntegrationCommand,
   CreateRouteCommand as CreateRouteCommand2,
   DeleteRouteCommand as DeleteRouteCommand2,
   GetRouteCommand,
+  UpdateRouteCommand,
   CreateAuthorizerCommand as CreateAuthorizerCommand2,
   DeleteAuthorizerCommand as DeleteAuthorizerCommand2,
   GetAuthorizerCommand as GetAuthorizerCommand2,
+  UpdateAuthorizerCommand as UpdateAuthorizerCommand2,
   GetApiCommand,
   GetApisCommand,
   NotFoundException as NotFoundException4
@@ -24145,22 +24150,59 @@ var ApiGatewayV2Provider = class {
     }
   }
   /**
-   * HTTP API resources are treated as immutable by cdkd: the deploy engine
-   * recreates them on property changes via the immutable-property
-   * replacement path. AWS does expose `UpdateApi` / `UpdateRoute` /
-   * `UpdateIntegration` / `UpdateStage` / `UpdateAuthorizer`, but cdkd
-   * does not yet plumb them through. `cdkd drift --revert` surfaces a
-   * clear "use --replace or re-deploy" message instead of silently
-   * no-op'ing the revert.
+   * AWS API Gateway V2 supports in-place updates for every type cdkd
+   * provisions via the matching `Update*Command`. Each command takes the
+   * full Update input shape (NOT JSON Patch — that's the v1 surface);
+   * cdkd builds the input by selecting only the fields that differ
+   * between `previousProperties` and `properties`, so unchanged fields
+   * are not echoed back. The few immutable identifiers (`ProtocolType`
+   * on Api; `StageName` on Stage) are not part of the Update input shape
+   * and are handled by the deploy engine's immutable-property
+   * replacement path.
    */
-  update(logicalId, _physicalId, resourceType, _properties, _previousProperties) {
-    return Promise.reject(
-      new ResourceUpdateNotSupportedError(
-        resourceType,
-        logicalId,
-        "API Gateway V2 (HTTP API) resources are recreated on property changes; re-deploy with cdkd deploy --replace, or destroy + redeploy the stack"
-      )
-    );
+  async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+    switch (resourceType) {
+      case "AWS::ApiGatewayV2::Api":
+        return this.updateApi(logicalId, physicalId, resourceType, properties, previousProperties);
+      case "AWS::ApiGatewayV2::Stage":
+        return this.updateStage(
+          logicalId,
+          physicalId,
+          resourceType,
+          properties,
+          previousProperties
+        );
+      case "AWS::ApiGatewayV2::Integration":
+        return this.updateIntegration(
+          logicalId,
+          physicalId,
+          resourceType,
+          properties,
+          previousProperties
+        );
+      case "AWS::ApiGatewayV2::Route":
+        return this.updateRoute(
+          logicalId,
+          physicalId,
+          resourceType,
+          properties,
+          previousProperties
+        );
+      case "AWS::ApiGatewayV2::Authorizer":
+        return this.updateAuthorizer(
+          logicalId,
+          physicalId,
+          resourceType,
+          properties,
+          previousProperties
+        );
+      default:
+        throw new ResourceUpdateNotSupportedError(
+          resourceType,
+          logicalId,
+          "unsupported API Gateway V2 resource type for in-place update; re-deploy with cdkd deploy --replace, or destroy + redeploy the stack"
+        );
+    }
   }
   async delete(logicalId, physicalId, resourceType, properties, context) {
     switch (resourceType) {
@@ -24811,6 +24853,312 @@ var ApiGatewayV2Provider = class {
     } while (nextToken);
     return null;
   }
+  // ─── Update implementations ───────────────────────────────────────
+  /**
+   * `UpdateApi` accepts the full Update input shape (not JSON Patch).
+   * Mutable fields cdkd manages: `Name` / `Description` /
+   * `CorsConfiguration`. `ProtocolType` is immutable — the deploy
+   * engine handles changes via the replacement path; we surface a
+   * `ResourceUpdateNotSupportedError` if it ever reaches us anyway.
+   */
+  async updateApi(logicalId, physicalId, resourceType, properties, previousProperties) {
+    if (properties["ProtocolType"] !== void 0 && previousProperties["ProtocolType"] !== void 0 && properties["ProtocolType"] !== previousProperties["ProtocolType"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "ProtocolType is immutable on AWS::ApiGatewayV2::Api; re-deploy with cdkd deploy --replace"
+      );
+    }
+    const input = { ApiId: physicalId };
+    let changed = false;
+    if (properties["Name"] !== void 0 && properties["Name"] !== previousProperties["Name"]) {
+      input.Name = properties["Name"];
+      changed = true;
+    }
+    if (properties["Description"] !== void 0 && properties["Description"] !== previousProperties["Description"]) {
+      input.Description = properties["Description"];
+      changed = true;
+    }
+    if (properties["CorsConfiguration"] !== void 0 && !this.deepEqual(properties["CorsConfiguration"], previousProperties["CorsConfiguration"])) {
+      input.CorsConfiguration = properties["CorsConfiguration"];
+      changed = true;
+    }
+    if (!changed) {
+      this.logger.debug(`No mutable Api fields changed for ${logicalId}; skipping UpdateApi`);
+      return { physicalId, wasReplaced: false };
+    }
+    this.logger.debug(`Updating API Gateway V2 Api ${logicalId}: ${physicalId}`);
+    try {
+      await this.getClient().send(new UpdateApiCommand(input));
+      return { physicalId, wasReplaced: false };
+    } catch (error) {
+      const cause = error instanceof Error ? error : void 0;
+      throw new ProvisioningError(
+        `Failed to update API Gateway V2 Api ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,
+        resourceType,
+        logicalId,
+        physicalId,
+        cause
+      );
+    }
+  }
+  /**
+   * `UpdateStage` keys on `(ApiId, StageName)` — `StageName` is the
+   * physicalId and immutable. Mutable fields cdkd manages:
+   * `AutoDeploy` / `Description`. `ApiId` is also immutable (a stage
+   * cannot be moved between APIs).
+   */
+  async updateStage(logicalId, physicalId, resourceType, properties, previousProperties) {
+    const apiId = properties["ApiId"] ?? previousProperties["ApiId"];
+    if (!apiId) {
+      throw new ProvisioningError(
+        `ApiId is required to update Stage ${logicalId}`,
+        resourceType,
+        logicalId,
+        physicalId
+      );
+    }
+    if (properties["ApiId"] !== void 0 && previousProperties["ApiId"] !== void 0 && properties["ApiId"] !== previousProperties["ApiId"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "ApiId is immutable on AWS::ApiGatewayV2::Stage; re-deploy with cdkd deploy --replace"
+      );
+    }
+    if (properties["StageName"] !== void 0 && previousProperties["StageName"] !== void 0 && properties["StageName"] !== previousProperties["StageName"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "StageName is immutable on AWS::ApiGatewayV2::Stage; re-deploy with cdkd deploy --replace"
+      );
+    }
+    const input = { ApiId: apiId, StageName: physicalId };
+    let changed = false;
+    if (properties["AutoDeploy"] !== void 0 && properties["AutoDeploy"] !== previousProperties["AutoDeploy"]) {
+      input.AutoDeploy = properties["AutoDeploy"];
+      changed = true;
+    }
+    if (properties["Description"] !== void 0 && properties["Description"] !== previousProperties["Description"]) {
+      input.Description = properties["Description"];
+      changed = true;
+    }
+    if (!changed) {
+      this.logger.debug(`No mutable Stage fields changed for ${logicalId}; skipping UpdateStage`);
+      return { physicalId, wasReplaced: false };
+    }
+    this.logger.debug(`Updating API Gateway V2 Stage ${logicalId}: ${physicalId}`);
+    try {
+      await this.getClient().send(new UpdateStageCommand2(input));
+      return { physicalId, wasReplaced: false };
+    } catch (error) {
+      const cause = error instanceof Error ? error : void 0;
+      throw new ProvisioningError(
+        `Failed to update API Gateway V2 Stage ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,
+        resourceType,
+        logicalId,
+        physicalId,
+        cause
+      );
+    }
+  }
+  /**
+   * `UpdateIntegration` keys on `(ApiId, IntegrationId)`. Mutable
+   * fields cdkd manages: `IntegrationType` / `IntegrationUri` /
+   * `IntegrationMethod` / `PayloadFormatVersion`.
+   */
+  async updateIntegration(logicalId, physicalId, resourceType, properties, previousProperties) {
+    const apiId = properties["ApiId"] ?? previousProperties["ApiId"];
+    if (!apiId) {
+      throw new ProvisioningError(
+        `ApiId is required to update Integration ${logicalId}`,
+        resourceType,
+        logicalId,
+        physicalId
+      );
+    }
+    if (properties["ApiId"] !== void 0 && previousProperties["ApiId"] !== void 0 && properties["ApiId"] !== previousProperties["ApiId"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "ApiId is immutable on AWS::ApiGatewayV2::Integration; re-deploy with cdkd deploy --replace"
+      );
+    }
+    const input = { ApiId: apiId, IntegrationId: physicalId };
+    let changed = false;
+    if (properties["IntegrationType"] !== void 0 && properties["IntegrationType"] !== previousProperties["IntegrationType"]) {
+      input.IntegrationType = properties["IntegrationType"];
+      changed = true;
+    }
+    if (properties["IntegrationUri"] !== void 0 && properties["IntegrationUri"] !== previousProperties["IntegrationUri"]) {
+      input.IntegrationUri = properties["IntegrationUri"];
+      changed = true;
+    }
+    if (properties["IntegrationMethod"] !== void 0 && properties["IntegrationMethod"] !== previousProperties["IntegrationMethod"]) {
+      input.IntegrationMethod = properties["IntegrationMethod"];
+      changed = true;
+    }
+    if (properties["PayloadFormatVersion"] !== void 0 && properties["PayloadFormatVersion"] !== previousProperties["PayloadFormatVersion"]) {
+      input.PayloadFormatVersion = properties["PayloadFormatVersion"];
+      changed = true;
+    }
+    if (!changed) {
+      this.logger.debug(
+        `No mutable Integration fields changed for ${logicalId}; skipping UpdateIntegration`
+      );
+      return { physicalId, wasReplaced: false };
+    }
+    this.logger.debug(`Updating API Gateway V2 Integration ${logicalId}: ${physicalId}`);
+    try {
+      await this.getClient().send(new UpdateIntegrationCommand(input));
+      return { physicalId, wasReplaced: false };
+    } catch (error) {
+      const cause = error instanceof Error ? error : void 0;
+      throw new ProvisioningError(
+        `Failed to update API Gateway V2 Integration ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,
+        resourceType,
+        logicalId,
+        physicalId,
+        cause
+      );
+    }
+  }
+  /**
+   * `UpdateRoute` keys on `(ApiId, RouteId)`. Mutable fields cdkd
+   * manages: `RouteKey` / `Target` / `AuthorizationType` /
+   * `AuthorizerId` / `AuthorizationScopes`.
+   */
+  async updateRoute(logicalId, physicalId, resourceType, properties, previousProperties) {
+    const apiId = properties["ApiId"] ?? previousProperties["ApiId"];
+    if (!apiId) {
+      throw new ProvisioningError(
+        `ApiId is required to update Route ${logicalId}`,
+        resourceType,
+        logicalId,
+        physicalId
+      );
+    }
+    if (properties["ApiId"] !== void 0 && previousProperties["ApiId"] !== void 0 && properties["ApiId"] !== previousProperties["ApiId"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "ApiId is immutable on AWS::ApiGatewayV2::Route; re-deploy with cdkd deploy --replace"
+      );
+    }
+    const input = { ApiId: apiId, RouteId: physicalId };
+    let changed = false;
+    if (properties["RouteKey"] !== void 0 && properties["RouteKey"] !== previousProperties["RouteKey"]) {
+      input.RouteKey = properties["RouteKey"];
+      changed = true;
+    }
+    if (properties["Target"] !== void 0 && properties["Target"] !== previousProperties["Target"]) {
+      input.Target = properties["Target"];
+      changed = true;
+    }
+    if (properties["AuthorizationType"] !== void 0 && properties["AuthorizationType"] !== previousProperties["AuthorizationType"]) {
+      input.AuthorizationType = properties["AuthorizationType"];
+      changed = true;
+    }
+    if (properties["AuthorizerId"] !== void 0 && properties["AuthorizerId"] !== previousProperties["AuthorizerId"]) {
+      input.AuthorizerId = properties["AuthorizerId"];
+      changed = true;
+    }
+    if (properties["AuthorizationScopes"] !== void 0 && !this.deepEqual(properties["AuthorizationScopes"], previousProperties["AuthorizationScopes"])) {
+      input.AuthorizationScopes = properties["AuthorizationScopes"];
+      changed = true;
+    }
+    if (!changed) {
+      this.logger.debug(`No mutable Route fields changed for ${logicalId}; skipping UpdateRoute`);
+      return { physicalId, wasReplaced: false };
+    }
+    this.logger.debug(`Updating API Gateway V2 Route ${logicalId}: ${physicalId}`);
+    try {
+      await this.getClient().send(new UpdateRouteCommand(input));
+      return { physicalId, wasReplaced: false };
+    } catch (error) {
+      const cause = error instanceof Error ? error : void 0;
+      throw new ProvisioningError(
+        `Failed to update API Gateway V2 Route ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,
+        resourceType,
+        logicalId,
+        physicalId,
+        cause
+      );
+    }
+  }
+  /**
+   * `UpdateAuthorizer` keys on `(ApiId, AuthorizerId)`. Mutable fields
+   * cdkd manages: `AuthorizerType` / `Name` / `IdentitySource` /
+   * `JwtConfiguration` / `AuthorizerUri` /
+   * `AuthorizerPayloadFormatVersion`.
+   */
+  async updateAuthorizer(logicalId, physicalId, resourceType, properties, previousProperties) {
+    const apiId = properties["ApiId"] ?? previousProperties["ApiId"];
+    if (!apiId) {
+      throw new ProvisioningError(
+        `ApiId is required to update Authorizer ${logicalId}`,
+        resourceType,
+        logicalId,
+        physicalId
+      );
+    }
+    if (properties["ApiId"] !== void 0 && previousProperties["ApiId"] !== void 0 && properties["ApiId"] !== previousProperties["ApiId"]) {
+      throw new ResourceUpdateNotSupportedError(
+        resourceType,
+        logicalId,
+        "ApiId is immutable on AWS::ApiGatewayV2::Authorizer; re-deploy with cdkd deploy --replace"
+      );
+    }
+    const input = { ApiId: apiId, AuthorizerId: physicalId };
+    let changed = false;
+    if (properties["AuthorizerType"] !== void 0 && properties["AuthorizerType"] !== previousProperties["AuthorizerType"]) {
+      input.AuthorizerType = properties["AuthorizerType"];
+      changed = true;
+    }
+    if (properties["Name"] !== void 0 && properties["Name"] !== previousProperties["Name"]) {
+      input.Name = properties["Name"];
+      changed = true;
+    }
+    if (properties["IdentitySource"] !== void 0) {
+      const next = Array.isArray(properties["IdentitySource"]) ? properties["IdentitySource"] : [properties["IdentitySource"]];
+      const prev = Array.isArray(previousProperties["IdentitySource"]) ? previousProperties["IdentitySource"] : previousProperties["IdentitySource"] !== void 0 ? [previousProperties["IdentitySource"]] : void 0;
+      if (!this.deepEqual(next, prev)) {
+        input.IdentitySource = next;
+        changed = true;
+      }
+    }
+    if (properties["JwtConfiguration"] !== void 0 && !this.deepEqual(properties["JwtConfiguration"], previousProperties["JwtConfiguration"])) {
+      input.JwtConfiguration = properties["JwtConfiguration"];
+      changed = true;
+    }
+    if (properties["AuthorizerUri"] !== void 0 && properties["AuthorizerUri"] !== previousProperties["AuthorizerUri"]) {
+      input.AuthorizerUri = properties["AuthorizerUri"];
+      changed = true;
+    }
+    if (properties["AuthorizerPayloadFormatVersion"] !== void 0 && properties["AuthorizerPayloadFormatVersion"] !== previousProperties["AuthorizerPayloadFormatVersion"]) {
+      input.AuthorizerPayloadFormatVersion = properties["AuthorizerPayloadFormatVersion"];
+      changed = true;
+    }
+    if (!changed) {
+      this.logger.debug(
+        `No mutable Authorizer fields changed for ${logicalId}; skipping UpdateAuthorizer`
+      );
+      return { physicalId, wasReplaced: false };
+    }
+    this.logger.debug(`Updating API Gateway V2 Authorizer ${logicalId}: ${physicalId}`);
+    try {
+      await this.getClient().send(new UpdateAuthorizerCommand2(input));
+      return { physicalId, wasReplaced: false };
+    } catch (error) {
+      const cause = error instanceof Error ? error : void 0;
+      throw new ProvisioningError(
+        `Failed to update API Gateway V2 Authorizer ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,
+        resourceType,
+        logicalId,
+        physicalId,
+        cause
+      );
+    }
+  }
   // ─── Helpers ──────────────────────────────────────────────────────
   /**
    * Convert CloudFormation Tags (Array<{Key, Value}>) to SDK Tags (Record<string, string>).
@@ -24824,6 +25172,24 @@ var ApiGatewayV2Provider = class {
     }
     return result;
   }
+  /**
+   * Structural equality used to skip Update calls when an object /
+   * array property is unchanged. Stable JSON serialization is fine
+   * here because the API Gateway V2 sub-shapes (`CorsConfiguration`,
+   * `JwtConfiguration`, scope arrays, identity-source arrays) are
+   * small primitive maps with no key-order semantics on the AWS side.
+   */
+  deepEqual(a, b) {
+    if (a === b)
+      return true;
+    if (a === void 0 || b === void 0)
+      return false;
+    try {
+      return JSON.stringify(a) === JSON.stringify(b);
+    } catch {
+      return false;
+    }
+  }
 };
 
 // src/provisioning/providers/cloudfront-oai-provider.ts
@@ -26389,6 +26755,7 @@ import {
   DeleteClusterCommand,
   DescribeClustersCommand,
   PutClusterCapacityProvidersCommand,
+  UpdateClusterCommand,
   RegisterTaskDefinitionCommand,
   DeregisterTaskDefinitionCommand,
   DescribeTaskDefinitionCommand,
@@ -26607,6 +26974,26 @@ var ECSProvider = class {
         );
         this.logger.debug(`Updated capacity providers for ECS cluster ${physicalId}`);
       }
+      const settingsChanged = JSON.stringify(previousProperties["ClusterSettings"] ?? null) !== JSON.stringify(properties["ClusterSettings"] ?? null);
+      const configChanged = JSON.stringify(previousProperties["Configuration"] ?? null) !== JSON.stringify(properties["Configuration"] ?? null);
+      if (settingsChanged || configChanged) {
+        const settingsInput = settingsChanged ? (properties["ClusterSettings"] ?? []).map((s) => ({
+          name: s["Name"] || s["name"],
+          value: (s["Value"] || s["value"]) ?? void 0
+        })) : void 0;
+        await client.send(
+          new UpdateClusterCommand({
+            cluster: physicalId,
+            ...settingsChanged && { settings: settingsInput },
+            ...configChanged && {
+              configuration: properties["Configuration"]
+            }
+          })
+        );
+        this.logger.debug(
+          `Updated ECS cluster ${physicalId} (settings=${settingsChanged}, config=${configChanged})`
+        );
+      }
       const describeResponse = await client.send(
         new DescribeClustersCommand({ clusters: [physicalId] })
       );
@@ -45789,7 +46176,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command14();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.54.0");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.56.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());