cdk-nextjs 0.6.2 → 0.7.0

package/lib/lambdas/redeploy-stage/redeploy-stage.lambda.d.ts

@@ -0,0 +1,20 @@
+import type { EventBridgeHandler } from "aws-lambda";
+/**
+ * The `detail` of a "CloudFormation Stack Status Change" event, as documented
+ * in the CloudFormation User Guide ("Stack Status Change event detail").
+ */
+interface StackStatusChangeDetail {
+    readonly "stack-id": string;
+    readonly "status-details": {
+        readonly status: string;
+        readonly "status-reason"?: string;
+    };
+}
+/**
+ * Invoked by `NextjsApi`'s EventBridge rule when its stack finishes an update;
+ * see {@link redeployStage}. The API and stage come from the environment rather
+ * than the event: the rule only matches this stack, and the event names the
+ * stack, not the API.
+ */
+export declare const handler: EventBridgeHandler<"CloudFormation Stack Status Change", StackStatusChangeDetail, void>;
+export {};

package/lib/lambdas/redeploy-stage/redeploy-stage.lambda.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const redeploy_stage_1 = require("./redeploy-stage");
+/**
+ * Invoked by `NextjsApi`'s EventBridge rule when its stack finishes an update;
+ * see {@link redeployStage}. The API and stage come from the environment rather
+ * than the event: the rule only matches this stack, and the event names the
+ * stack, not the API.
+ */
+const handler = async (event) => {
+    const restApiId = process.env.REST_API_ID;
+    const stageName = process.env.STAGE_NAME;
+    if (!restApiId || !stageName) {
+        throw new Error("REST_API_ID and STAGE_NAME must be set.");
+    }
+    await (0, redeploy_stage_1.redeployStage)({
+        restApiId,
+        stageName,
+        stackStatus: event.detail["status-details"].status,
+    });
+};
+exports.handler = handler;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/lambdas/redeploy-stage/redeploy-stage.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/lambdas/redeploy-stage/redeploy-stage.test.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/* eslint-disable import/no-extraneous-dependencies */
+// Only the client is mocked; the command classes stay real so assertions can
+// read `command.input`. `send` goes through the holder because the module
+// constructs its client at import time.
+jest.mock("@aws-sdk/client-api-gateway", () => ({
+    ...jest.requireActual("@aws-sdk/client-api-gateway"),
+    APIGatewayClient: jest.fn(() => ({
+        send: (...args) => holder.send(...args),
+    })),
+}));
+const client_api_gateway_1 = require("@aws-sdk/client-api-gateway");
+const redeploy_stage_1 = require("./redeploy-stage");
+const holder = { send: jest.fn() };
+const input = {
+    restApiId: "api1",
+    stageName: "prod",
+    stackStatus: "UPDATE_COMPLETE",
+};
+/** The API as it is: its deployments (pages of them) and its stages. */
+function stubApi(pages, stages) {
+    holder.send.mockImplementation((command) => {
+        if (command instanceof client_api_gateway_1.CreateDeploymentCommand) {
+            return Promise.resolve({ id: "new" });
+        }
+        if (command instanceof client_api_gateway_1.GetStagesCommand) {
+            return Promise.resolve({ item: stages });
+        }
+        if (command instanceof client_api_gateway_1.GetDeploymentsCommand) {
+            const index = Number(command.input.position ?? 0);
+            return Promise.resolve({
+                items: pages[index],
+                position: index + 1 < pages.length ? String(index + 1) : undefined,
+            });
+        }
+        return Promise.resolve({});
+    });
+}
+function sent(type) {
+    return holder.send.mock.calls
+        .map(([command]) => command)
+        .filter((command) => command instanceof type);
+}
+beforeEach(() => holder.send.mockReset());
+it("deploys the stage from the live API", async () => {
+    stubApi([[]], [{ stageName: "prod", deploymentId: "new" }]);
+    await expect((0, redeploy_stage_1.redeployStage)(input)).resolves.toBe("new");
+    expect(sent(client_api_gateway_1.CreateDeploymentCommand).map((c) => c.input)).toEqual([
+        {
+            restApiId: "api1",
+            stageName: "prod",
+            description: `${redeploy_stage_1.REDEPLOY_DESCRIPTION_PREFIX} UPDATE_COMPLETE`,
+        },
+    ]);
+});
+it("deletes only its own earlier deployments no stage references", async () => {
+    const ours = (id) => ({
+        id,
+        description: `${redeploy_stage_1.REDEPLOY_DESCRIPTION_PREFIX} UPDATE_COMPLETE`,
+    });
+    stubApi([
+        // CloudFormation's own, its previous run's, and the new one.
+        [
+            {
+                id: "cfn",
+                description: "Automatically created by the RestApi construct",
+            },
+            ours("prev"),
+        ],
+        // A run whose deployment another stage still serves, on a second page.
+        [ours("pinned"), ours("new")],
+    ], [
+        { stageName: "prod", deploymentId: "new" },
+        { stageName: "canary", deploymentId: "pinned" },
+    ]);
+    await (0, redeploy_stage_1.redeployStage)(input);
+    expect(sent(client_api_gateway_1.DeleteDeploymentCommand).map((c) => c.input)).toEqual([
+        { restApiId: "api1", deploymentId: "prev" },
+    ]);
+});
+it("does not fail the run when a prune is rejected", async () => {
+    stubApi([[{ id: "prev", description: `${redeploy_stage_1.REDEPLOY_DESCRIPTION_PREFIX} x` }]], []);
+    const warn = jest.spyOn(console, "warn").mockImplementation(() => { });
+    const send = holder.send.getMockImplementation();
+    holder.send.mockImplementation((command) => command instanceof client_api_gateway_1.DeleteDeploymentCommand
+        ? Promise.reject(new Error("BadRequestException"))
+        : send(command));
+    await expect((0, redeploy_stage_1.redeployStage)(input)).resolves.toBe("new");
+    expect(warn).toHaveBeenCalled();
+    warn.mockRestore();
+});
+//# sourceMappingURL=data:application/json;base64,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

package/lib/nextjs-api.d.ts

@@ -1,15 +1,22 @@
 import { RestApi, MethodOptions, RestApiProps, AwsIntegrationProps, LambdaIntegrationOptions } from "aws-cdk-lib/aws-apigateway";
 import { IVpc } from "aws-cdk-lib/aws-ec2";
-import { IFunction } from "aws-cdk-lib/aws-lambda";
+import { Rule } from "aws-cdk-lib/aws-events";
+import { Function as LambdaFunction, IFunction } from "aws-cdk-lib/aws-lambda";
 import { IBucket } from "aws-cdk-lib/aws-s3";
 import { Construct } from "constructs";
-import { PublicDirEntry } from "./nextjs-build/nextjs-build";
+import { OptionalFunctionProps } from "./generated-structs/OptionalFunctionProps";
+import { NextjsFunctionGroupBehavior, PublicDirEntry } from "./nextjs-build/nextjs-build";
 export interface NextjsApiOverrides {
     readonly restApiProps?: RestApiProps;
     readonly staticIntegrationProps?: AwsIntegrationProps;
     readonly s3MethodOptions?: MethodOptions;
     readonly dynamicIntegrationProps?: LambdaIntegrationOptions;
-    readonly imageIntegrationProps?: LambdaIntegrationOptions;
+    /**
+     * Props for the function that deploys the stage again after each stack
+     * update.
+     * @see NextjsApiProps.redeployAfterUpdate
+     */
+    readonly redeployFunctionProps?: OptionalFunctionProps;
 }
 export interface NextjsApiProps {
     /**
@@ -29,19 +36,6 @@ export interface NextjsApiProps {
      * Required if `NextjsRegionalFunctions`. The Lambda function for server-side rendering
      */
     readonly serverFunction?: IFunction;
-    /**
-     * Dedicated image optimization Lambda for the `_next/image` route. When
-     * omitted, no `_next/image` resource is created and those requests fall
-     * through to `serverFunction` via the `{proxy+}` catch-all.
-     *
-     * When provided, it is assumed to support Lambda response streaming (as the
-     * dedicated image Lambda this package builds does) and is invoked with
-     * `ResponseTransferMode.STREAM` accordingly. If you supply a custom
-     * `imageFunction` that doesn't support streaming, override
-     * `responseTransferMode` to `BUFFERED` via `overrides.imageIntegrationProps`,
-     * otherwise API Gateway returns a 502.
-     */
-    readonly imageFunction?: IFunction;
     /**
      * The S3 bucket containing static assets
      */
@@ -61,6 +55,40 @@ export interface NextjsApiProps {
      * [Future] Required if `NextjsRegionalContainers`. VPC to create VPC Link and ECS Service Discovery
      */
     readonly vpc?: IVpc;
+    /**
+     * The non-`default` function groups, the Lambdas
+     * {@link functionGroupBehaviors} route to.
+     * @default - no splitting; `{proxy+}` serves every dynamic route
+     */
+    readonly functionGroups?: NextjsApiFunctionGroup[];
+    /**
+     * `NextjsBuild.functionGroupBehaviors`: each distinct `route` becomes a
+     * resource subtree integrated with its group, so the routes each group was
+     * packaged with reach it rather than {@link serverFunction}.
+     * @default - none
+     */
+    readonly functionGroupBehaviors?: NextjsFunctionGroupBehavior[];
+    /**
+     * Deploy the stage again once each stack update has finished, so it serves
+     * the API as it is after the update.
+     *
+     * CloudFormation snapshots the API into a new deployment while resources
+     * removed from the template still exist — it deletes them only during
+     * cleanup — so the stage keeps serving them. After removing a function
+     * group, its routes then point at a deleted Lambda and answer 500 until the
+     * next deployment. An EventBridge rule on this stack's `UPDATE_COMPLETE`
+     * (and `UPDATE_ROLLBACK_COMPLETE`) invokes a small function that deploys the
+     * stage from the live API and deletes the deployments its earlier runs made.
+     *
+     * Ignored when `overrides.restApiProps.deploy` is `false`: there is no stage.
+     * @default true
+     */
+    readonly redeployAfterUpdate?: boolean;
+}
+/** A non-default function group and the Lambda its routes must reach. */
+export interface NextjsApiFunctionGroup {
+    readonly name: string;
+    readonly function: IFunction;
 }
 /**
  * Creates an API Gateway REST API for Next.js applications
@@ -80,11 +108,31 @@ export declare class NextjsApi extends Construct {
      * mapping added that way won't show up here.
      */
     get url(): string;
+    /**
+     * Deploys the stage again after each stack update.
+     * @see NextjsApiProps.redeployAfterUpdate
+     */
+    readonly redeployFunction?: LambdaFunction;
+    /**
+     * Matches this stack's `UPDATE_COMPLETE` and `UPDATE_ROLLBACK_COMPLETE` and
+     * invokes {@link redeployFunction}.
+     */
+    readonly redeployRule?: Rule;
     private readonly baseResource;
     private readonly nextResource;
+    /**
+     * Resources created only as parents of a group route, and their paths. API
+     * Gateway answers a request for a resource with no method itself — 403
+     * "Missing Authentication Token" — rather than falling back to a `{proxy+}`
+     * higher up, so each needs one. Without it a `/api/reports/**` group turned
+     * `/api/reports` and `/api` into 403s.
+     */
+    private readonly groupParentResources;
     private readonly props;
     private staticIntegrationRole;
     constructor(scope: Construct, id: string, props: NextjsApiProps);
+    /** @see NextjsApiProps.redeployAfterUpdate */
+    private createRedeploy;
     private validateProps;
     private createRestApi;
     /**
@@ -111,9 +159,45 @@ export declare class NextjsApi extends Construct {
     private createS3Integration;
     private getStaticMethodOptions;
     /**
-     * Create Lambda Proxy integration for the `_next/image` route.
+     * One resource subtree per function group pattern.
+     *
+     * Unlike CloudFront this needs no ordering: API Gateway matches on a resource
+     * *tree*, so `/api/reports/{proxy+}` beats `/api/{proxy+}` beats `/{proxy+}`
+     * structurally, and "longest pattern wins" comes for free. What does need care
+     * is not creating the same path twice — two groups under `/api` share the `api`
+     * resource — so every segment goes through {@link resourceFor}.
+     */
+    private createFunctionGroupIntegrations;
+    /**
+     * The group pattern validation accepts every character a CloudFront path
+     * pattern can hold, and API Gateway's path parts hold fewer: `~`, `@`, `+`,
+     * `&` and quotes pass it and then fail `addResource` with an error that names
+     * neither the group nor the pattern. Say which, and what to do instead.
+     */
+    private assertRoutable;
+    /**
+     * Refuse a group route that shares a resource with a `public/` entry.
+     *
+     * A public directory `docs` is `docs/{proxy+}` with a `GET` to S3. `/docs/**`
+     * adds `ANY` to that same resource, and API Gateway prefers the `GET`, so
+     * every page load under the group went to S3; `/docs/guide/**` is a more
+     * specific resource instead, and takes `/docs/guide/…` away from the public
+     * files. A public file `pricing` and an exact `/pricing` are the same
+     * resource the same way. `NextjsDistribution` rejects the CloudFront
+     * equivalents.
+     */
+    private assertNoPublicCollision;
+    /**
+     * Resource paths, as segment arrays, for one group pattern.
+     *
+     * A subtree gets `{proxy+}` as its last segment and so owns everything *under*
+     * the path but not the path itself, matching both the CloudFront translation and
+     * `assignRoutesToGroups`. An exact path gets no proxy segment, which leaves its
+     * children falling through to the root `{proxy+}` — also the CloudFront result.
      */
-    private createImageIntegration;
+    private resourcePathsFor;
+    /** Walk or create a resource path, reusing whatever already exists. */
+    private resourceFor;
     /**
      * Create Lambda Proxy integration for all other routes
      */