raindancers-cloudfront 0.0.43 → 0.0.45

package/lib/cloudfront/edgeAssetHash.d.ts

@@ -2,15 +2,15 @@
  * Compute a deterministic content hash for a Lambda@Edge asset bundle.
  *
  * Why this exists: `cloudfront.experimental.EdgeFunction` publishes a new
- * `AWS::Lambda::Version` whenever the asset hash changes. When the asset is
- * created via `lambda.Code.fromAsset(dir, { bundling })` WITHOUT an explicit
- * `assetHash`, CDK falls back to hashing the bundling OUTPUT — and the local
- * bundler here copies files with `fs.cpSync`, which does not reproduce a
- * byte-identical tree across synths (mtimes/ordering drift). The result is a
- * fresh edge-Lambda version on EVERY deploy even when the code is unchanged,
- * each of which forces a global CloudFront re-association + propagation and
- * locks the prior version from deletion (it also slowly fills the regional
- * Lambda storage quota).
+ * `AWS::Lambda::Version` whenever the asset hash changes. Passing a stable
+ * `assetHash` with `assetHashType: AssetHashType.CUSTOM` pins the SOURCE
+ * identity so unchanged inputs yield an unchanged hash and no new version.
+ *
+ * NOTE: a CUSTOM assetHash alone is not sufficient for determinism — CDK also
+ * folds `JSON.stringify(bundling)` into the final hash (see aws-cdk-lib
+ * `AssetStaging.calculateHash`), so any non-deterministic value inside the
+ * `bundling` options (e.g. a random `volumes[].hostPath`) still churns the
+ * hash. See {@link deterministicConfigDir}, which keeps that path stable.
  *
  * This helper produces a hash from the actual INPUTS — the source directory
  * contents, the generated config, and the optional pre-bundled deps directory —
@@ -21,3 +21,21 @@
  * excluded because it is not shipped in the bundle (the bundler skips it).
  */
 export declare function computeEdgeAssetHash(sourceDir: string, generatedConfig: string, bundledDepsDir?: string): string;
+/**
+ * Create a DETERMINISTIC temp directory holding the generated `config_generated.py`,
+ * and return its path. Used as the `hostPath` of the Docker-fallback bundling
+ * volume for a Lambda@Edge function.
+ *
+ * Why this must be deterministic: CDK derives an asset's final hash even under
+ * `assetHashType: CUSTOM` by folding `JSON.stringify(bundling)` into the custom
+ * hash (see aws-cdk-lib `AssetStaging.calculateHash`). `bundling.volumes[].hostPath`
+ * is therefore part of the hash. A random `fs.mkdtempSync(...)` path changes on
+ * every synth, so the asset hash — and thus the published S3 key — changes every
+ * synth for byte-identical code, publishing a fresh `AWS::Lambda::Version` and
+ * forcing a global CloudFront distribution update on EVERY deploy (and orphaning
+ * the prior replicated edge version, which cannot be deleted for hours).
+ *
+ * Keying the directory on `key` (a per-function id) plus the config content keeps
+ * it stable for unchanged inputs while staying unique per function.
+ */
+export declare function deterministicConfigDir(key: string, configPy: string): string;

package/lib/cloudfront/edgeAssetHash.js

@@ -34,22 +34,24 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeEdgeAssetHash = computeEdgeAssetHash;
+exports.deterministicConfigDir = deterministicConfigDir;
 const crypto = __importStar(require("crypto"));
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 /**
  * Compute a deterministic content hash for a Lambda@Edge asset bundle.
  *
  * Why this exists: `cloudfront.experimental.EdgeFunction` publishes a new
- * `AWS::Lambda::Version` whenever the asset hash changes. When the asset is
- * created via `lambda.Code.fromAsset(dir, { bundling })` WITHOUT an explicit
- * `assetHash`, CDK falls back to hashing the bundling OUTPUT — and the local
- * bundler here copies files with `fs.cpSync`, which does not reproduce a
- * byte-identical tree across synths (mtimes/ordering drift). The result is a
- * fresh edge-Lambda version on EVERY deploy even when the code is unchanged,
- * each of which forces a global CloudFront re-association + propagation and
- * locks the prior version from deletion (it also slowly fills the regional
- * Lambda storage quota).
+ * `AWS::Lambda::Version` whenever the asset hash changes. Passing a stable
+ * `assetHash` with `assetHashType: AssetHashType.CUSTOM` pins the SOURCE
+ * identity so unchanged inputs yield an unchanged hash and no new version.
+ *
+ * NOTE: a CUSTOM assetHash alone is not sufficient for determinism — CDK also
+ * folds `JSON.stringify(bundling)` into the final hash (see aws-cdk-lib
+ * `AssetStaging.calculateHash`), so any non-deterministic value inside the
+ * `bundling` options (e.g. a random `volumes[].hostPath`) still churns the
+ * hash. See {@link deterministicConfigDir}, which keeps that path stable.
  *
  * This helper produces a hash from the actual INPUTS — the source directory
  * contents, the generated config, and the optional pre-bundled deps directory —
@@ -69,6 +71,36 @@ function computeEdgeAssetHash(sourceDir, generatedConfig, bundledDepsDir) {
     }
     return hash.digest('hex');
 }
+/**
+ * Create a DETERMINISTIC temp directory holding the generated `config_generated.py`,
+ * and return its path. Used as the `hostPath` of the Docker-fallback bundling
+ * volume for a Lambda@Edge function.
+ *
+ * Why this must be deterministic: CDK derives an asset's final hash even under
+ * `assetHashType: CUSTOM` by folding `JSON.stringify(bundling)` into the custom
+ * hash (see aws-cdk-lib `AssetStaging.calculateHash`). `bundling.volumes[].hostPath`
+ * is therefore part of the hash. A random `fs.mkdtempSync(...)` path changes on
+ * every synth, so the asset hash — and thus the published S3 key — changes every
+ * synth for byte-identical code, publishing a fresh `AWS::Lambda::Version` and
+ * forcing a global CloudFront distribution update on EVERY deploy (and orphaning
+ * the prior replicated edge version, which cannot be deleted for hours).
+ *
+ * Keying the directory on `key` (a per-function id) plus the config content keeps
+ * it stable for unchanged inputs while staying unique per function.
+ */
+function deterministicConfigDir(key, configPy) {
+    const digest = crypto
+        .createHash('sha256')
+        .update(`${key}\0`)
+        .update(configPy)
+        .digest('hex')
+        .slice(0, 16);
+    const dir = path.join(os.tmpdir(), `raindancers-edge-config-${digest}`);
+    fs.mkdirSync(dir, { recursive: true });
+    const configPyPath = path.join(dir, 'config_generated.py');
+    fs.writeFileSync(configPyPath, configPy);
+    return configPyPath;
+}
 /**
  * Fold every regular file under `dir` (recursively, sorted) into `hash`. Each
  * file contributes its relative path and its bytes under a namespace prefix so
@@ -94,4 +126,4 @@ function hashDir(hash, dir, namespace, skip) {
     };
     walk(dir, '');
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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