@mettlecast/domain-cdk-packer 0.2.38 → 0.2.39

package/dist/DomainStack.d.ts

@@ -28,9 +28,7 @@ export interface DomainStackProps extends cdk.StackProps {
     /** Security group for domain Lambdas — must allow egress to Aurora SG. */
     lambdaSg?: ec2.ISecurityGroup;
     /** Shared HTTP API Gateway — when provided, domain routes are added here instead of creating a separate API. */
-    httpApi?: apigwv2.IHttpApi;
-    /** Path to domain source root — required for dedicated Lambdas. Defaults to ../../domains/{domainId}. */
-    domainRoot?: string;
+    httpApi?: apigwv2.HttpApi;
     /** Enable CMK encryption for DynamoDB, S3, SQS. */
     enableCmk?: boolean;
     /** Enable WAF WebACL on the domain API Gateway. */
@@ -57,9 +55,13 @@ export interface DomainStackProps extends cdk.StackProps {
      */
     allowCredentials?: boolean;
 }
+/**
+ * Top-level CDK Stack that composes all domain constructs from a single DomainRegistry input.
+ * Uses grouped Lambdas for each primitive type to reduce deployment artifact size.
+ */
 export declare class DomainStack extends cdk.Stack {
     /** Shared HTTP API for routing API and webhook requests. */
-    readonly httpApi: apigwv2.IHttpApi;
+    readonly httpApi: apigwv2.HttpApi;
     /** Map of primitive-type key to Lambda function ARN, used by FlowsStack for direct invocation. */
     readonly lambdaArns: Record<string, string>;
     /**

package/dist/DomainStack.js

@@ -22,30 +22,6 @@ import { CanaryConstruct } from './constructs/canary-construct.js';
  * Top-level CDK Stack that composes all domain constructs from a single DomainRegistry input.
  * Uses grouped Lambdas for each primitive type to reduce deployment artifact size.
  */
-/** L1 helper: adds a route to an existing HTTP API using CfnRoute + CfnIntegration. */
-function addRouteToApi(scope, fn, path, methods, apiId, authType, authorizer) {
-    const id = path.replace(/[^a-zA-Z0-9]/g, '_').replace(/^_/, 'api');
-    const integ = new apigwv2.CfnIntegration(scope, 'Integ_' + id, {
-        apiId,
-        integrationType: 'AWS_PROXY',
-        integrationUri: fn.functionArn,
-        payloadFormatVersion: '2.0',
-    });
-    fn.addPermission('Perm_' + id, {
-        principal: new iam.ServicePrincipal('apigateway.amazonaws.com'),
-        sourceArn: 'arn:aws:execute-api:' + cdk.Aws.REGION + ':' + cdk.Aws.ACCOUNT_ID + ':' + apiId + '/*',
-    });
-    const routeKey = methods[0] === apigwv2.HttpMethod.GET ? 'GET ' + path : 'POST ' + path;
-    const route = new apigwv2.CfnRoute(scope, 'Route_' + id, {
-        apiId,
-        routeKey,
-        target: 'integrations/' + integ.ref,
-    });
-    if (authType === 'jwt' && authorizer) {
-        route.authorizationType = 'JWT';
-        route.authorizerId = authorizer.ref ?? authorizer.authorizerId ?? '';
-    }
-}
 export class DomainStack extends cdk.Stack {
     /** Shared HTTP API for routing API and webhook requests. */
     httpApi;
@@ -61,7 +37,6 @@ export class DomainStack extends cdk.Stack {
         super(scope, id, props);
         const { registry, eventBusArn, eventBusName, databaseUrl, dbSecretArn, userPoolArn, userPoolId, userPoolClientId, vpc, lambdaSg, httpApi, enableCmk, enableWaf, enableAlarms, alarmSnsTopicArn, enableCanaryDeploy, reservedConcurrency, logRetentionDays, corsAllowedOrigins, allowCredentials } = props;
         const domainId = registry.domain.id;
-        const domainRoot = props.domainRoot ?? "../../domains/" + domainId;
         const vpcProps = vpc ? { vpc, securityGroups: lambdaSg ? [lambdaSg] : undefined } : {};
         const allowedOrigins = corsAllowedOrigins ?? ['*'];
         this.httpApi = httpApi ?? new apigwv2.HttpApi(this, 'HttpApi', {
@@ -166,7 +141,6 @@ export class DomainStack extends cdk.Stack {
                 environment,
                 eventBusArn,
                 dedicated: true,
-                domainRoot,
                 reservedConcurrency,
                 logRetentionDays: logRetentionDays ?? 30,
                 ...vpcProps,
@@ -203,7 +177,7 @@ export class DomainStack extends cdk.Stack {
                 else {
                     apiRoute = apiRouteBase;
                 }
-                addRouteToApi(this, fn, api.path, [toHttpMethod(api.method)], this.httpApi.httpApiId, api.authType, jwtAuthorizer);
+                this.httpApi.addRoutes(apiRoute);
             }
         }
         // Deploy webhooks as grouped Lambdas
@@ -246,7 +220,11 @@ export class DomainStack extends cdk.Stack {
             // Add routes for each webhook entry
             for (const webhook of registry.webhooks) {
                 const fn = webhookLambdas[0]; // Grouped Lambda or first dedicated
-                addRouteToApi(this, fn, webhook.path, [apigwv2.HttpMethod.POST], this.httpApi.httpApiId);
+                this.httpApi.addRoutes({
+                    path: webhook.path,
+                    methods: [apigwv2.HttpMethod.POST],
+                    integration: new apigwv2integrations.HttpLambdaIntegration(`Webhooks${toPascalCase(webhook.id)}Integration`, fn),
+                });
             }
         }
         // Deploy event subscribers as grouped Lambdas
@@ -511,8 +489,16 @@ export class DomainStack extends cdk.Stack {
                 DB_SECRET_ARN: dbSecretArn ?? '',
             },
         });
-        addRouteToApi(this, healthConstruct.healthFn, '/_health', [apigwv2.HttpMethod.GET], this.httpApi.httpApiId);
-        addRouteToApi(this, healthConstruct.readyFn, '/_ready', [apigwv2.HttpMethod.GET], this.httpApi.httpApiId);
+        this.httpApi.addRoutes({
+            path: '/_health',
+            methods: [apigwv2.HttpMethod.GET],
+            integration: new apigwv2integrations.HttpLambdaIntegration('HealthIntegration', healthConstruct.healthFn),
+        });
+        this.httpApi.addRoutes({
+            path: '/_ready',
+            methods: [apigwv2.HttpMethod.GET],
+            integration: new apigwv2integrations.HttpLambdaIntegration('ReadyIntegration', healthConstruct.readyFn),
+        });
         // Create CloudWatch dashboard for all primitives
         const allEndpoints = [
             ...registry.apis.map(a => ({ id: a.id, primitiveClass: 'api' })),

package/dist/constructs/waf-construct.d.ts

@@ -3,7 +3,7 @@ import * as apigwv2 from 'aws-cdk-lib/aws-apigatewayv2';
 import { Construct } from 'constructs';
 export interface WafConstructProps {
     domainId: string;
-    httpApi: apigwv2.IHttpApi;
+    httpApi: apigwv2.HttpApi;
     /** Requests per 5-minute window per IP before blocking. Default: 2000. */
     rateLimit?: number;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mettlecast/domain-cdk-packer",
-  "version": "0.2.38",
+  "version": "0.2.39",
   "type": "module",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",