cdk-local 0.15.0 → 0.16.0

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { M as createLocalInvokeCommand, a as createLocalStartApiCommand, i as createLocalRunTaskCommand, t as createLocalStartServiceCommand } from "./local-start-service-DtFvSHSK.js";
+import { M as createLocalInvokeCommand, a as createLocalStartApiCommand, i as createLocalRunTaskCommand, t as createLocalStartServiceCommand } from "./local-start-service-DwK7mB45.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.15.0");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.16.0");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalStartApiCommand());
 program.addCommand(createLocalRunTaskCommand());

package/dist/index.js

@@ -1,3 +1,3 @@
-import { A as pickRefLogicalId, B as resolveCfnStackName, C as applyAuthorizerOverlay, D as discoverWebSocketApisOrThrow, E as discoverWebSocketApis, F as createLocalStateProvider, I as isCfnFlagPresent, L as rejectExplicitCfnStackWithMultipleStacks, M as createLocalInvokeCommand, N as resolveEnvVars, O as parseSelectionExpressionPath, P as LocalStateSourceError, R as resolveCfnFallbackRegion, S as translateLambdaResponse, T as buildRestV1Event, V as CfnLocalStateProvider, _ as computeRequestIdentityHash, a as createLocalStartApiCommand, b as invokeTokenAuthorizer, c as buildStageMap, d as buildCognitoJwksUrl, f as buildJwksUrlFromIssuer, g as buildMethodArn, h as verifyJwtAuthorizer, i as createLocalRunTaskCommand, j as resolveLambdaArnIntrinsic, k as discoverRoutes, l as resolveSelectionExpression, m as verifyCognitoJwt, n as CloudMapRegistry, o as createAuthorizerCache, p as createJwksCache, r as getContainerNetworkIp, s as attachStageContext, t as createLocalStartServiceCommand, u as resolveServiceIntegrationParameters, v as evaluateCachedLambdaPolicy, w as buildHttpApiV2Event, x as matchRoute, y as invokeRequestAuthorizer, z as resolveCfnRegion } from "./local-start-service-DtFvSHSK.js";
+import { A as pickRefLogicalId, B as resolveCfnStackName, C as applyAuthorizerOverlay, D as discoverWebSocketApisOrThrow, E as discoverWebSocketApis, F as createLocalStateProvider, I as isCfnFlagPresent, L as rejectExplicitCfnStackWithMultipleStacks, M as createLocalInvokeCommand, N as resolveEnvVars, O as parseSelectionExpressionPath, P as LocalStateSourceError, R as resolveCfnFallbackRegion, S as translateLambdaResponse, T as buildRestV1Event, V as CfnLocalStateProvider, _ as computeRequestIdentityHash, a as createLocalStartApiCommand, b as invokeTokenAuthorizer, c as buildStageMap, d as buildCognitoJwksUrl, f as buildJwksUrlFromIssuer, g as buildMethodArn, h as verifyJwtAuthorizer, i as createLocalRunTaskCommand, j as resolveLambdaArnIntrinsic, k as discoverRoutes, l as resolveSelectionExpression, m as verifyCognitoJwt, n as CloudMapRegistry, o as createAuthorizerCache, p as createJwksCache, r as getContainerNetworkIp, s as attachStageContext, t as createLocalStartServiceCommand, u as resolveServiceIntegrationParameters, v as evaluateCachedLambdaPolicy, w as buildHttpApiV2Event, x as matchRoute, y as invokeRequestAuthorizer, z as resolveCfnRegion } from "./local-start-service-DwK7mB45.js";
 
 export { CfnLocalStateProvider, CloudMapRegistry, LocalStateSourceError, applyAuthorizerOverlay, attachStageContext, buildCognitoJwksUrl, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMethodArn, buildRestV1Event, buildStageMap, computeRequestIdentityHash, createAuthorizerCache, createJwksCache, createLocalInvokeCommand, createLocalRunTaskCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, evaluateCachedLambdaPolicy, getContainerNetworkIp, invokeRequestAuthorizer, invokeTokenAuthorizer, isCfnFlagPresent, matchRoute, parseSelectionExpressionPath, pickRefLogicalId, rejectExplicitCfnStackWithMultipleStacks, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveEnvVars, resolveLambdaArnIntrinsic, resolveSelectionExpression, resolveServiceIntegrationParameters, translateLambdaResponse, verifyCognitoJwt, verifyJwtAuthorizer };

package/dist/{local-start-service-DtFvSHSK.js → local-start-service-DwK7mB45.js}

@@ -16901,6 +16901,28 @@ function groupSecretsByContainer(resolved) {
 	return out;
 }
 /**
+* Resolve the HOST port to publish a container port on.
+*
+* On macOS, Docker Desktop binds host ports below 1024 through a
+* privileged helper (`com.docker.vmnetd`) that prompts for an admin
+* password — and fails outright when that helper isn't running. A
+* container that declares e.g. port 80 would otherwise force that prompt
+* on every `run-task` / `start-service`. To keep the local run
+* password-free, remap a privileged host port to a non-privileged one by
+* adding 8000 (80 -> 8080, 443 -> 8443). The container port is unchanged
+* — only the host side moves — and the caller logs where to reach it.
+*
+* Only macOS is affected: on Linux the Docker daemon runs as root and
+* binds privileged ports directly, so the host port is left as-is to
+* preserve the `host == container` mapping users expect.
+*
+* Exported for unit testing with an explicit `platform`.
+*/
+function resolvePublishHostPort(hostPort, platform) {
+	if (platform === "darwin" && hostPort < 1024) return hostPort + 8e3;
+	return hostPort;
+}
+/**
 * Build the full `docker run -d` argument list for one container.
 * Exported (no-leading-underscore) so the unit tests can assert against
 * the shape directly without spawning a process.
@@ -16923,7 +16945,9 @@ function buildDockerRunArgs(opts) {
 	else if (task.runtimePlatform) args.push("--platform", task.runtimePlatform.cpuArchitecture === "ARM64" ? "linux/arm64" : "linux/amd64");
 	if (!opts.skipHostPortPublish) for (const pm of container.portMappings) {
 		const hostPort = pm.hostPort ?? pm.containerPort;
-		args.push("-p", `${containerHost}:${hostPort}:${pm.containerPort}/${pm.protocol}`);
+		const publishHostPort = resolvePublishHostPort(hostPort, process.platform);
+		if (publishHostPort !== hostPort) getLogger().child("ecs").info(`Container '${container.name}' container port ${pm.containerPort} published on ${containerHost}:${publishHostPort} (remapped from privileged host port ${hostPort}; macOS Docker Desktop needs an admin helper to bind ports < 1024). Reach it at ${containerHost}:${publishHostPort}.`);
+		args.push("-p", `${containerHost}:${publishHostPort}:${pm.containerPort}/${pm.protocol}`);
 	}
 	if (opts.profileCredentialsFile) args.push("-v", `${opts.profileCredentialsFile.hostPath}:${opts.profileCredentialsFile.containerPath}:ro`);
 	for (const mp of container.mountPoints) {
@@ -18704,4 +18728,4 @@ function createLocalStartServiceCommand(opts = {}) {
 
 //#endregion
 export { pickRefLogicalId as A, resolveCfnStackName as B, applyAuthorizerOverlay as C, discoverWebSocketApisOrThrow as D, discoverWebSocketApis as E, createLocalStateProvider as F, isCfnFlagPresent as I, rejectExplicitCfnStackWithMultipleStacks as L, createLocalInvokeCommand as M, resolveEnvVars as N, parseSelectionExpressionPath as O, LocalStateSourceError as P, resolveCfnFallbackRegion as R, translateLambdaResponse as S, buildRestV1Event as T, CfnLocalStateProvider as V, computeRequestIdentityHash as _, createLocalStartApiCommand as a, invokeTokenAuthorizer as b, buildStageMap as c, buildCognitoJwksUrl as d, buildJwksUrlFromIssuer as f, buildMethodArn as g, verifyJwtAuthorizer as h, createLocalRunTaskCommand as i, resolveLambdaArnIntrinsic as j, discoverRoutes as k, resolveSelectionExpression as l, verifyCognitoJwt as m, CloudMapRegistry as n, createAuthorizerCache as o, createJwksCache as p, getContainerNetworkIp as r, attachStageContext as s, createLocalStartServiceCommand as t, resolveServiceIntegrationParameters as u, evaluateCachedLambdaPolicy as v, buildHttpApiV2Event as w, matchRoute as x, invokeRequestAuthorizer as y, resolveCfnRegion as z };
-//# sourceMappingURL=local-start-service-DtFvSHSK.js.map
+//# sourceMappingURL=local-start-service-DwK7mB45.js.map