@mettlecast/domain-cdk-packer 0.2.40 → 0.2.41

package/dist/DomainStack.d.ts

@@ -28,7 +28,7 @@ export interface DomainStackProps extends cdk.StackProps {
     /** Security group for domain Lambdas — must allow egress to Aurora SG. */
     lambdaSg?: ec2.ISecurityGroup;
     /** Shared HTTP API Gateway — when provided, domain routes are added here instead of creating a separate API. */
-    httpApi?: apigwv2.HttpApi;
+    httpApi?: apigwv2.IHttpApi;
     /** Enable CMK encryption for DynamoDB, S3, SQS. */
     enableCmk?: boolean;
     /** Enable WAF WebACL on the domain API Gateway. */
@@ -55,13 +55,9 @@ export interface DomainStackProps extends cdk.StackProps {
      */
     allowCredentials?: boolean;
 }
-/**
- * Top-level CDK Stack that composes all domain constructs from a single DomainRegistry input.
- * Uses grouped Lambdas for each primitive type to reduce deployment artifact size.
- */
 export declare class DomainStack extends cdk.Stack {
     /** Shared HTTP API for routing API and webhook requests. */
-    readonly httpApi: apigwv2.HttpApi;
+    readonly httpApi: apigwv2.IHttpApi;
     /** Map of primitive-type key to Lambda function ARN, used by FlowsStack for direct invocation. */
     readonly lambdaArns: Record<string, string>;
     /**

package/dist/DomainStack.js

@@ -22,6 +22,26 @@ import { CanaryConstruct } from './constructs/canary-construct.js';
  * Top-level CDK Stack that composes all domain constructs from a single DomainRegistry input.
  * Uses grouped Lambdas for each primitive type to reduce deployment artifact size.
  */
+/** L1 helper: adds a CfnRoute + CfnIntegration to an existing HTTP API. */
+function addRouteToApi(scope, fn, path, methods, apiId) {
+    const id = path.replace(/[^a-zA-Z0-9]/g, '_').replace(/^_/, 'api');
+    const integ = new apigwv2.CfnIntegration(scope, 'Integ_' + id, {
+        apiId,
+        integrationType: 'AWS_PROXY',
+        integrationUri: fn.functionArn,
+        payloadFormatVersion: '2.0',
+    });
+    fn.addPermission('Perm_' + id, {
+        principal: new iam.ServicePrincipal('apigateway.amazonaws.com'),
+        sourceArn: 'arn:aws:execute-api:' + cdk.Aws.REGION + ':' + cdk.Aws.ACCOUNT_ID + ':' + apiId + '/*',
+    });
+    const routeKey = methods[0] === apigwv2.HttpMethod.GET ? 'GET ' + path : 'POST ' + path;
+    new apigwv2.CfnRoute(scope, 'Route_' + id, {
+        apiId,
+        routeKey,
+        target: 'integrations/' + integ.ref,
+    });
+}
 export class DomainStack extends cdk.Stack {
     /** Shared HTTP API for routing API and webhook requests. */
     httpApi;
@@ -177,7 +197,7 @@ export class DomainStack extends cdk.Stack {
                 else {
                     apiRoute = apiRouteBase;
                 }
-                this.httpApi.addRoutes(apiRoute);
+                addRouteToApi(this, fn, api.path, [toHttpMethod(api.method)], this.httpApi.httpApiId);
             }
         }
         // Deploy webhooks as grouped Lambdas
@@ -220,11 +240,7 @@ export class DomainStack extends cdk.Stack {
             // Add routes for each webhook entry
             for (const webhook of registry.webhooks) {
                 const fn = webhookLambdas[0]; // Grouped Lambda or first dedicated
-                this.httpApi.addRoutes({
-                    path: webhook.path,
-                    methods: [apigwv2.HttpMethod.POST],
-                    integration: new apigwv2integrations.HttpLambdaIntegration(`Webhooks${toPascalCase(webhook.id)}Integration`, fn),
-                });
+                addRouteToApi(this, fn, webhook.path, [apigwv2.HttpMethod.POST], this.httpApi.httpApiId);
             }
         }
         // Deploy event subscribers as grouped Lambdas
@@ -489,16 +505,8 @@ export class DomainStack extends cdk.Stack {
                 DB_SECRET_ARN: dbSecretArn ?? '',
             },
         });
-        this.httpApi.addRoutes({
-            path: '/_health',
-            methods: [apigwv2.HttpMethod.GET],
-            integration: new apigwv2integrations.HttpLambdaIntegration('HealthIntegration', healthConstruct.healthFn),
-        });
-        this.httpApi.addRoutes({
-            path: '/_ready',
-            methods: [apigwv2.HttpMethod.GET],
-            integration: new apigwv2integrations.HttpLambdaIntegration('ReadyIntegration', healthConstruct.readyFn),
-        });
+        addRouteToApi(this, healthConstruct.healthFn, '/_health', [apigwv2.HttpMethod.GET], this.httpApi.httpApiId);
+        addRouteToApi(this, healthConstruct.readyFn, '/_ready', [apigwv2.HttpMethod.GET], this.httpApi.httpApiId);
         // Create CloudWatch dashboard for all primitives
         const allEndpoints = [
             ...registry.apis.map(a => ({ id: a.id, primitiveClass: 'api' })),

package/dist/constructs/waf-construct.d.ts

@@ -3,7 +3,7 @@ import * as apigwv2 from 'aws-cdk-lib/aws-apigatewayv2';
 import { Construct } from 'constructs';
 export interface WafConstructProps {
     domainId: string;
-    httpApi: apigwv2.HttpApi;
+    httpApi: apigwv2.IHttpApi;
     /** Requests per 5-minute window per IP before blocking. Default: 2000. */
     rateLimit?: number;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mettlecast/domain-cdk-packer",
-  "version": "0.2.40",
+  "version": "0.2.41",
   "type": "module",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",