sst 2.0.0-rc.56 → 2.0.0-rc.57

package/constructs/AppSyncApi.d.ts

@@ -1,8 +1,7 @@
 export declare function weakImport(pkg: string): Promise<any>;
 import { Construct } from "constructs";
 import * as rds from "aws-cdk-lib/aws-rds";
-import * as cfnAppsync from "aws-cdk-lib/aws-appsync";
-import * as appsync from "@aws-cdk/aws-appsync-alpha";
+import * as appsync from "aws-cdk-lib/aws-appsync";
 import * as dynamodb from "aws-cdk-lib/aws-dynamodb";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
@@ -372,7 +371,7 @@ export declare class AppSyncApi extends Construct implements SSTConstruct {
     };
     private readonly props;
     private _customDomainUrl?;
-    _cfnDomainName?: cfnAppsync.CfnDomainName;
+    _cfnDomainName?: appsync.CfnDomainName;
     private readonly functionsByDsKey;
     private readonly dataSourcesByDsKey;
     private readonly dsKeysByResKey;

package/constructs/AppSyncApi.js

@@ -11,7 +11,7 @@ export async function weakImport(pkg) {
 const { print, buildSchema } = await weakImport("graphql");
 const { mergeTypeDefs } = await weakImport("@graphql-tools/merge");
 import { Construct } from "constructs";
-import * as appsync from "@aws-cdk/aws-appsync-alpha";
+import * as appsync from "aws-cdk-lib/aws-appsync";
 import * as appSyncApiDomain from "./util/appSyncApiDomain.js";
 import { getFunctionRef, isCDKConstruct } from "./Construct.js";
 import { Function as Fn, } from "./Function.js";
@@ -314,8 +314,8 @@ export class AppSyncApi extends Construct {
             if (domainData) {
                 this._cfnDomainName = this.cdk.graphqlApi.node.children.find((child) => child.cfnResourceType ===
                     "AWS::AppSync::DomainName");
-                const cfnDomainNameApiAssociation = this.cdk.graphqlApi.node.children.find((child) => child
-                    .cfnResourceType === "AWS::AppSync::DomainNameApiAssociation");
+                const cfnDomainNameApiAssociation = this.cdk.graphqlApi.node.children.find((child) => child.cfnResourceType ===
+                    "AWS::AppSync::DomainNameApiAssociation");
                 if (this._cfnDomainName && cfnDomainNameApiAssociation) {
                     cfnDomainNameApiAssociation.node.addDependency(this._cfnDomainName);
                 }

package/constructs/Auth.js

@@ -45,6 +45,16 @@ export class Auth extends Construct {
                 privatePath: getParameterPath(this, PRIVATE_KEY_PROP),
             },
         });
+        stack.customResourceHandler.role?.addToPrincipalPolicy(new PolicyStatement({
+            actions: [
+                "ssm:GetParameter",
+                "ssm:PutParameter",
+                "ssm:DeleteParameter",
+            ],
+            resources: [
+                `arn:${stack.partition}:ssm:${stack.region}:${stack.account}:parameter/*`,
+            ],
+        }));
     }
     /** @internal */
     getConstructMetadata() {

package/constructs/EdgeFunction.d.ts

@@ -32,11 +32,11 @@ export declare class EdgeFunction extends Construct {
     private createAsset;
     private createRole;
     private createFunction;
-    private createSingletonAwsCliLayer;
     private createLambdaCodeReplacer;
     private createSingletonBucketCR;
     private createFunctionCR;
     private createVersionCR;
+    private getLambdaContentReplaceValues;
     private updateVersionLogicalId;
     private trimFromStart;
     private calculateHash;

package/constructs/EdgeFunction.js

@@ -6,7 +6,6 @@ import { Construct } from "constructs";
 import * as iam from "aws-cdk-lib/aws-iam";
 import * as lambda from "aws-cdk-lib/aws-lambda";
 import * as s3Assets from "aws-cdk-lib/aws-s3-assets";
-import { AwsCliLayer } from "aws-cdk-lib/lambda-layer-awscli";
 import { Lazy, Duration, CustomResource } from "aws-cdk-lib";
 import { Stack } from "./Stack.js";
 import { attachPermissionsToRole } from "./util/permission.js";
@@ -23,7 +22,7 @@ export class EdgeFunction extends Construct {
     constructor(scope, id, props) {
         super(scope, id);
         this.props = props;
-        const { format, scopeOverride } = props;
+        const { scopeOverride } = props;
         // Correct scope
         this.scope = scopeOverride || this;
         // Wrap function code
@@ -63,7 +62,7 @@ const handler = async (event) => {
     // replacer to inject the environment variables assigned to the
     // EdgeFunction construct.
     //
-    // "{{ _SST_EDGE_FUNCTION_ENVIRONMENT_ }}" will get replaced during
+    // "{{ _SST_FUNCTION_ENVIRONMENT_ }}" will get replaced during
     // deployment with an object of environment key-value pairs, ie.
     // const environment = {"API_URL": "https://api.example.com"};
     //
@@ -71,7 +70,7 @@ const handler = async (event) => {
     // support runtime environment variables. A downside of this approach
     // is that environment variables cannot be toggled after deployment,
     // each change to one requires a redeployment.
-    const environment = "{{ _SST_EDGE_FUNCTION_ENVIRONMENT_ }}";
+    const environment = "{{ _SST_FUNCTION_ENVIRONMENT_ }}";
     process.env = { ...process.env, ...environment };
   } catch (e) {
     console.log("Failed to set SST Lambda@Edge environment.");
@@ -132,67 +131,29 @@ ${exports}
         const versionId = versionCR.getAttString("Version");
         this.updateVersionLogicalId(functionCR, versionCR);
         // Deploy after the code is updated
-        const updaterCR = this.createLambdaCodeReplacer(name, asset);
+        const updaterCR = this.createLambdaCodeReplacer(asset);
         functionCR.node.addDependency(updaterCR);
         return { functionArn, versionId };
     }
-    createSingletonAwsCliLayer() {
-        // Do not recreate if exist
-        const resId = "AwsCliLayer";
-        const stack = Stack.of(this);
-        const existingResource = stack.node.tryFindChild(resId);
-        if (existingResource) {
-            return existingResource;
-        }
-        // Create custom resource
-        return new AwsCliLayer(stack, resId);
-    }
-    createLambdaCodeReplacer(name, asset) {
+    createLambdaCodeReplacer(asset) {
         // Note: Source code for the Lambda functions have "{{ ENV_KEY }}" in them.
         //       They need to be replaced with real values before the Lambda
         //       functions get deployed.
-        const { format } = this.props;
-        const providerId = "LambdaCodeReplacerProvider";
-        const resId = `${name}LambdaCodeReplacer`;
         const stack = Stack.of(this);
-        let provider = stack.node.tryFindChild(providerId);
-        // Create provider if not already created
-        if (!provider) {
-            provider = new lambda.Function(stack, providerId, {
-                code: lambda.Code.fromAsset(path.join(__dirname, "../support/edge-function-code-replacer")),
-                layers: [this.createSingletonAwsCliLayer()],
-                runtime: lambda.Runtime.PYTHON_3_7,
-                handler: "lambda-code-updater.handler",
-                timeout: Duration.minutes(15),
-                memorySize: 1024,
-            });
-        }
-        // Allow provider to perform search/replace on the asset
-        provider.role?.addToPrincipalPolicy(new iam.PolicyStatement({
-            effect: iam.Effect.ALLOW,
-            actions: ["s3:*"],
-            resources: [
-                `arn:${stack.partition}:s3:::${asset.s3BucketName}/${asset.s3ObjectKey}`,
-            ],
-        }));
-        // Create custom resource to replace the code
-        const resource = new CustomResource(this.scope, resId, {
-            serviceToken: provider.functionArn,
-            resourceType: "Custom::SSTLambdaCodeUpdater",
+        const resource = new CustomResource(this.scope, "AssetReplacer", {
+            serviceToken: stack.customResourceHandler.functionArn,
+            resourceType: "Custom::AssetReplacer",
             properties: {
-                Source: {
-                    BucketName: asset.s3BucketName,
-                    ObjectKey: asset.s3ObjectKey,
-                },
-                ReplaceValues: [
-                    {
-                        files: `index-wrapper.${format === "esm" ? "mjs" : "cjs"}`,
-                        search: '"{{ _SST_EDGE_FUNCTION_ENVIRONMENT_ }}"',
-                        replace: JSON.stringify(this.props.environment || {}),
-                    },
-                ],
+                bucket: asset.s3BucketName,
+                key: asset.s3ObjectKey,
+                replacements: this.getLambdaContentReplaceValues(),
             },
         });
+        stack.customResourceHandler.role?.addToPrincipalPolicy(new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ["s3:GetObject", "s3:PutObject"],
+            resources: [`arn:${stack.partition}:s3:::${asset.s3BucketName}/*`],
+        }));
         return resource;
     }
     createSingletonBucketCR() {
@@ -302,6 +263,32 @@ ${exports}
     /////////////////////
     // Internal Functions
     /////////////////////
+    getLambdaContentReplaceValues() {
+        const { format } = this.props;
+        const replaceValues = [];
+        Object.entries(this.props.environment || {}).forEach(([key, value]) => {
+            const token = `{{ ${key} }}`;
+            replaceValues.push({
+                files: "**/*.js",
+                search: token,
+                replace: value,
+            }, {
+                files: "**/*.cjs",
+                search: token,
+                replace: value,
+            }, {
+                files: "**/*.mjs",
+                search: token,
+                replace: value,
+            });
+        });
+        replaceValues.push({
+            files: `index-wrapper.${format === "esm" ? "mjs" : "cjs"}`,
+            search: '"{{ _SST_FUNCTION_ENVIRONMENT_ }}"',
+            replace: JSON.stringify(this.props.environment || {}),
+        });
+        return replaceValues;
+    }
     updateVersionLogicalId(functionCR, versionCR) {
         // Override the version's logical ID with a lazy string which includes the
         // hash of the function itself, so a new version resource is created when

package/constructs/NextjsSite.js

@@ -1,13 +1,12 @@
 import fs from "fs";
 import url from "url";
 import path from "path";
-import spawn from "cross-spawn";
 import { Fn, Duration, RemovalPolicy } from "aws-cdk-lib";
 import * as logs from "aws-cdk-lib/aws-logs";
 import * as lambda from "aws-cdk-lib/aws-lambda";
 import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
 import * as origins from "aws-cdk-lib/aws-cloudfront-origins";
-import { useProject } from "../project.js";
+import { SsrFunction } from "./SsrFunction.js";
 import { EdgeFunction } from "./EdgeFunction.js";
 import { SsrSite } from "./SsrSite.js";
 const __dirname = url.fileURLToPath(new URL(".", import.meta.url));
@@ -38,36 +37,16 @@ export class NextjsSite extends SsrSite {
     }
     createFunctionForRegional() {
         const { defaults, environment } = this.props;
-        // Note: cannot point the bundlePath to the `.open-next/server-function`
-        //       b/c the folder contains node_modules. And pnpm node_modules
-        //       contains symlinks. CDK cannot zip symlinks correctly.
-        //       https://github.com/aws/aws-cdk/issues/9251
-        //       We will zip the folder ourselves.
-        const zipOutDir = path.resolve(path.join(useProject().paths.artifacts, `Site-${this.node.id}-${this.node.addr}`));
-        const script = path.resolve(__dirname, "../support/ssr-site-function-archiver.mjs");
-        const result = spawn.sync("node", [
-            script,
-            path.join(this.props.path, ".open-next", "server-function"),
-            path.join(zipOutDir, "server-function.zip"),
-        ], {
-            stdio: "inherit",
-        });
-        if (result.status !== 0) {
-            throw new Error(`There was a problem generating the assets package.`);
-        }
-        return new lambda.Function(this, `ServerFunction`, {
+        const ssrFn = new SsrFunction(this, `ServerFunction`, {
             description: "Server handler for Next.js",
+            bundlePath: path.join(this.props.path, ".open-next", "server-function"),
             handler: "index.handler",
-            currentVersionOptions: {
-                removalPolicy: RemovalPolicy.DESTROY,
-            },
-            logRetention: logs.RetentionDays.THREE_DAYS,
-            code: lambda.Code.fromAsset(path.join(zipOutDir, "server-function.zip")),
-            runtime: lambda.Runtime.NODEJS_18_X,
-            memorySize: defaults?.function?.memorySize || 512,
-            timeout: Duration.seconds(defaults?.function?.timeout || 10),
+            timeout: defaults?.function?.timeout,
+            memory: defaults?.function?.memorySize,
+            permissions: defaults?.function?.permissions,
             environment,
         });
+        return ssrFn.function;
     }
     createImageOptimizationFunctionForRegional() {
         const { defaults, path: sitePath } = this.props;

package/constructs/SsrFunction.d.ts

@@ -0,0 +1,21 @@
+import { Construct } from "constructs";
+import * as lambda from "aws-cdk-lib/aws-lambda";
+import { Permissions } from "./util/permission.js";
+export interface SsrFunctionProps {
+    description?: string;
+    bundlePath: string;
+    handler: string;
+    timeout?: number;
+    memory?: number;
+    permissions?: Permissions;
+    environment?: Record<string, string>;
+}
+export declare class SsrFunction extends Construct {
+    function: lambda.Function;
+    private props;
+    constructor(scope: Construct, id: string, props: SsrFunctionProps);
+    attachPermissions(permissions: Permissions): void;
+    private createFunction;
+    private createLambdaCodeReplacer;
+    private getLambdaContentReplaceValues;
+}

package/constructs/SsrFunction.js

@@ -0,0 +1,107 @@
+import url from "url";
+import path from "path";
+import spawn from "cross-spawn";
+import { Construct } from "constructs";
+import * as iam from "aws-cdk-lib/aws-iam";
+import * as logs from "aws-cdk-lib/aws-logs";
+import * as lambda from "aws-cdk-lib/aws-lambda";
+import * as s3Assets from "aws-cdk-lib/aws-s3-assets";
+import { Duration, CustomResource } from "aws-cdk-lib";
+import { Stack } from "./Stack.js";
+import { useProject } from "../project.js";
+import { attachPermissionsToRole } from "./util/permission.js";
+const __dirname = path.dirname(url.fileURLToPath(import.meta.url));
+/////////////////////
+// Construct
+/////////////////////
+export class SsrFunction extends Construct {
+    function;
+    props;
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.props = props;
+        const { permissions } = props;
+        this.function = this.createFunction();
+        this.attachPermissions(permissions || []);
+    }
+    attachPermissions(permissions) {
+        attachPermissionsToRole(this.function.role, permissions);
+    }
+    createFunction() {
+        const { timeout, memory, handler, bundlePath, environment } = this.props;
+        // Note: cannot point the bundlePath to the `.open-next/server-function`
+        //       b/c the folder contains node_modules. And pnpm node_modules
+        //       contains symlinks. CDK cannot zip symlinks correctly.
+        //       https://github.com/aws/aws-cdk/issues/9251
+        //       We will zip the folder ourselves.
+        const zipOutDir = path.resolve(useProject().paths.artifacts, `Site-${this.node.id}-${this.node.addr}`);
+        const script = path.resolve(__dirname, "../support/ssr-site-function-archiver.mjs");
+        const result = spawn.sync("node", [
+            script,
+            path.join(bundlePath),
+            path.join(zipOutDir, "server-function.zip"),
+        ], { stdio: "inherit" });
+        if (result.status !== 0) {
+            throw new Error(`There was a problem generating the assets package.`);
+        }
+        // Create asset
+        const asset = new s3Assets.Asset(this, "Asset", {
+            path: path.join(zipOutDir, "server-function.zip"),
+        });
+        // Deploy after the code is updated
+        const replacer = this.createLambdaCodeReplacer(asset);
+        const fn = new lambda.Function(this, `ServerFunction`, {
+            description: this.props.description,
+            handler,
+            logRetention: logs.RetentionDays.THREE_DAYS,
+            code: lambda.Code.fromBucket(asset.bucket, asset.s3ObjectKey),
+            runtime: lambda.Runtime.NODEJS_18_X,
+            memorySize: memory || 512,
+            timeout: Duration.seconds(timeout || 10),
+            environment,
+        });
+        fn.node.addDependency(replacer);
+        return fn;
+    }
+    createLambdaCodeReplacer(asset) {
+        // Note: Source code for the Lambda functions have "{{ ENV_KEY }}" in them.
+        //       They need to be replaced with real values before the Lambda
+        //       functions get deployed.
+        const stack = Stack.of(this);
+        const resource = new CustomResource(this, "AssetReplacer", {
+            serviceToken: stack.customResourceHandler.functionArn,
+            resourceType: "Custom::AssetReplacer",
+            properties: {
+                bucket: asset.s3BucketName,
+                key: asset.s3ObjectKey,
+                replacements: this.getLambdaContentReplaceValues(),
+            },
+        });
+        stack.customResourceHandler.role?.addToPrincipalPolicy(new iam.PolicyStatement({
+            effect: iam.Effect.ALLOW,
+            actions: ["s3:GetObject", "s3:PutObject"],
+            resources: [`arn:${stack.partition}:s3:::${asset.s3BucketName}/*`],
+        }));
+        return resource;
+    }
+    getLambdaContentReplaceValues() {
+        const replaceValues = [];
+        Object.entries(this.props.environment || {}).forEach(([key, value]) => {
+            const token = `{{ ${key} }}`;
+            replaceValues.push({
+                files: "**/*.js",
+                search: token,
+                replace: value,
+            }, {
+                files: "**/*.cjs",
+                search: token,
+                replace: value,
+            }, {
+                files: "**/*.mjs",
+                search: token,
+                replace: value,
+            });
+        });
+        return replaceValues;
+    }
+}

package/constructs/SsrSite.d.ts

@@ -7,7 +7,7 @@ import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import * as origins from "aws-cdk-lib/aws-cloudfront-origins";
 import { SSTConstruct } from "./Construct.js";
 import { EdgeFunction } from "./EdgeFunction.js";
-import { BaseSiteDomainProps, BaseSiteCdkDistributionProps } from "./BaseSite.js";
+import { BaseSiteDomainProps, BaseSiteReplaceProps, BaseSiteCdkDistributionProps } from "./BaseSite.js";
 import { Permissions } from "./util/permission.js";
 import { FunctionBindingProps } from "./util/functionBinding.js";
 export type SsrBuildConfig = {
@@ -17,6 +17,8 @@ export type SsrBuildConfig = {
 };
 export interface SsrDomainProps extends BaseSiteDomainProps {
 }
+export interface SsrSiteReplaceProps extends BaseSiteReplaceProps {
+}
 export interface SsrCdkDistributionProps extends BaseSiteCdkDistributionProps {
 }
 export interface SsrSiteProps {
@@ -155,9 +157,6 @@ export declare class SsrSite extends Construct implements SSTConstruct {
         path: string;
     };
     private doNotDeploy;
-    /**
-     * The root SST directory used for builds.
-     */
     protected buildConfig: SsrBuildConfig;
     private serverLambdaForEdge?;
     protected serverLambdaForRegional?: lambda.Function;
@@ -229,6 +228,7 @@ export declare class SsrSite extends Construct implements SSTConstruct {
     protected lookupHostedZone(): route53.IHostedZone | undefined;
     private createCertificate;
     protected createRoute53Records(): void;
+    private getS3ContentReplaceValues;
     private validateSiteExists;
     private registerSiteEnvironment;
     protected generateBuildId(): string;

package/constructs/SsrSite.js

@@ -6,7 +6,7 @@ import crypto from "crypto";
 import spawn from "cross-spawn";
 import { execSync } from "child_process";
 import { Construct } from "constructs";
-import { Fn, Duration, CfnOutput, RemovalPolicy, CustomResource, } from "aws-cdk-lib";
+import { Fn, Token, Duration, CfnOutput, RemovalPolicy, CustomResource, } from "aws-cdk-lib";
 import * as s3 from "aws-cdk-lib/aws-s3";
 import * as iam from "aws-cdk-lib/aws-iam";
 import * as lambda from "aws-cdk-lib/aws-lambda";
@@ -43,9 +43,6 @@ export class SsrSite extends Construct {
     id;
     props;
     doNotDeploy;
-    /**
-     * The root SST directory used for builds.
-     */
     buildConfig;
     serverLambdaForEdge;
     serverLambdaForRegional;
@@ -384,6 +381,7 @@ export class SsrSite extends Construct {
                         cacheControl,
                     ];
                 }),
+                ReplaceValues: this.getS3ContentReplaceValues(),
             },
         });
     }
@@ -704,6 +702,24 @@ export class SsrSite extends Construct {
     /////////////////////
     // Helper Functions
     /////////////////////
+    getS3ContentReplaceValues() {
+        const replaceValues = [];
+        Object.entries(this.props.environment || {})
+            .filter(([, value]) => Token.isUnresolved(value))
+            .forEach(([key, value]) => {
+            const token = `{{ ${key} }}`;
+            replaceValues.push({
+                files: "**/*.html",
+                search: token,
+                replace: value,
+            }, {
+                files: "**/*.js",
+                search: token,
+                replace: value,
+            });
+        });
+        return replaceValues;
+    }
     validateSiteExists() {
         const { path: sitePath } = this.props;
         if (!fs.existsSync(sitePath)) {

package/constructs/Stack.js

@@ -174,7 +174,7 @@ export class Stack extends cdk.Stack {
     createCustomResourceHandler() {
         return new lambda.Function(this, "CustomResourceHandler", {
             code: lambda.Code.fromAsset(path.join(__dirname, "../support/custom-resources/"), {
-                assetHash: this.stackName + "-custom-resources-v1",
+                assetHash: this.stackName + "-custom-resources-20230130",
             }),
             handler: "index.handler",
             runtime: lambda.Runtime.NODEJS_16_X,

package/constructs/deprecated/NextjsSite.js

@@ -265,7 +265,7 @@ export class NextjsSite extends Construct {
             throw new Error(`No build output found at "${siteOutputPath}" for the "${this.node.id}" NextjsSite.`);
         }
         // create zip files
-        const script = path.join(__dirname, "../../support/base-site-archiver.cjs");
+        const script = path.join(__dirname, "../../support/base-site-archiver.mjs");
         const zipPath = path.resolve(path.join(this.sstBuildDir, `NextjsSite-${this.node.id}-${this.node.addr}`));
         // clear zip path to ensure no partX.zip remain from previous build
         fs.rmSync(zipPath, {
@@ -461,7 +461,7 @@ export class NextjsSite extends Construct {
         // Create provider if not already created
         if (!provider) {
             provider = new lambda.Function(stack, providerId, {
-                code: lambda.Code.fromAsset(path.join(__dirname, "../../support/edge-function-code-replacer")),
+                code: lambda.Code.fromAsset(path.join(__dirname, "../../support/sls-nextjs-site-function-code-replacer")),
                 layers: [this.awsCliLayer],
                 runtime: lambda.Runtime.PYTHON_3_7,
                 handler: "lambda-code-updater.handler",

package/constructs/util/appSyncApiDomain.d.ts

@@ -1,5 +1,5 @@
 import * as route53 from "aws-cdk-lib/aws-route53";
-import * as appsync from "@aws-cdk/aws-appsync-alpha";
+import * as appsync from "aws-cdk-lib/aws-appsync";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import { AppSyncApi } from "../AppSyncApi.js";
 export interface CustomDomainProps {

package/constructs/util/permission.js

@@ -1,7 +1,6 @@
 /* eslint-disable @typescript-eslint/ban-ts-comment*/
 import * as iam from "aws-cdk-lib/aws-iam";
 import { isCDKConstruct, isCDKConstructOf } from "../Construct.js";
-import { Logger } from "../../logger.js";
 import { Api } from "../Api.js";
 import { ApiGatewayV1Api } from "../ApiGatewayV1Api.js";
 import { Stack } from "../Stack.js";
@@ -212,7 +211,6 @@ function permissionsToStatementsAndGrants(permissions) {
             grants.push(permission);
         }
         else {
-            Logger.debug("permission object", permission);
             throw new Error(`The specified permissions are not supported.`);
         }
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sst",
-  "version": "2.0.0-rc.56",
+  "version": "2.0.0-rc.57",
   "bin": {
     "sst": "cli/sst.js"
   },
@@ -22,14 +22,13 @@
   },
   "homepage": "https://sst.dev",
   "dependencies": {
-    "@aws-cdk/aws-apigatewayv2-alpha": "^2.55.0-alpha.0",
-    "@aws-cdk/aws-apigatewayv2-authorizers-alpha": "^2.55.0-alpha.0",
-    "@aws-cdk/aws-apigatewayv2-integrations-alpha": "^2.55.0-alpha.0",
-    "@aws-cdk/aws-appsync-alpha": "^2.55.0-alpha.0",
-    "@aws-cdk/cloud-assembly-schema": "2.55.0",
-    "@aws-cdk/cloudformation-diff": "2.55.0",
-    "@aws-cdk/cx-api": "2.55.0",
-    "@aws-cdk/region-info": "2.55.0",
+    "@aws-cdk/aws-apigatewayv2-alpha": "^2.62.2-alpha.0",
+    "@aws-cdk/aws-apigatewayv2-authorizers-alpha": "^2.62.2-alpha.0",
+    "@aws-cdk/aws-apigatewayv2-integrations-alpha": "^2.62.2-alpha.0",
+    "@aws-cdk/cloud-assembly-schema": "2.62.2",
+    "@aws-cdk/cloudformation-diff": "2.62.2",
+    "@aws-cdk/cx-api": "2.62.2",
+    "@aws-cdk/region-info": "2.62.2",
     "@aws-sdk/client-cloudformation": "3.208.0",
     "@aws-sdk/client-iot": "3.208.0",
     "@aws-sdk/client-iot-data-plane": "3.208.0",
@@ -47,13 +46,14 @@
     "@babel/core": "^7.0.0-0",
     "@babel/generator": "^7.20.5",
     "@trpc/server": "9.16.0",
+    "adm-zip": "^0.5.10",
     "archiver": "^5.3.1",
-    "aws-cdk": "2.55.0",
-    "aws-cdk-lib": "2.55.0",
+    "aws-cdk": "2.62.2",
+    "aws-cdk-lib": "2.62.2",
     "aws-iot-device-sdk": "^2.2.12",
     "aws-sdk": "2.1252.0",
     "builtin-modules": "3.2.0",
-    "cdk-assets": "2.55.0",
+    "cdk-assets": "2.62.2",
     "chalk": "^4.1.2",
     "chokidar": "^3.5.3",
     "ci-info": "^3.7.0",
@@ -76,6 +76,7 @@
     "kysely": "^0.23.3",
     "kysely-codegen": "^0.9.0",
     "kysely-data-api": "^0.1.4",
+    "minimatch": "^6.1.6",
     "openid-client": "^5.1.8",
     "ora": "^6.1.2",
     "promptly": "^3.2.0",
@@ -93,6 +94,7 @@
     "@aws-sdk/types": "^3.208.0",
     "@sls-next/lambda-at-edge": "^3.7.0",
     "@tsconfig/node16": "^1.0.3",
+    "@types/adm-zip": "^0.5.0",
     "@types/aws-iot-device-sdk": "^2.2.4",
     "@types/aws-lambda": "^8.10.108",
     "@types/babel__core": "^7.1.20",
@@ -127,6 +129,7 @@
   "author": "",
   "scripts": {
     "build": "node build.mjs && tsc",
+    "test": "vitest run",
     "dev": "tsc -w"
   }
 }

package/runtime/handlers.js

@@ -19,7 +19,7 @@ export const useRuntimeHandlers = Context.memo(() => {
         for: (runtime) => {
             const result = handlers.find((x) => x.canHandle(runtime));
             if (!result)
-                throw new Error(`No handler found for runtime ${runtime}`);
+                throw new Error(`${runtime} runtime is unsupported`);
             return result;
         },
         async build(functionID, mode) {

package/sst.mjs

@@ -1344,7 +1344,8 @@ async function monitor(stack) {
       ]);
       Logger.debug("Stack description", describe);
       if (lastEvent) {
-        for (const event of events.StackEvents ?? []) {
+        const eventsReversed = [...events.StackEvents ?? []].reverse();
+        for (const event of eventsReversed) {
           if (!event.Timestamp)
             continue;
           if (event.Timestamp.getTime() > lastEvent.getTime()) {
@@ -2861,7 +2862,7 @@ var init_handlers = __esm({
         for: (runtime) => {
           const result2 = handlers.find((x) => x.canHandle(runtime));
           if (!result2)
-            throw new Error(`No handler found for runtime ${runtime}`);
+            throw new Error(`${runtime} runtime is unsupported`);
           return result2;
         },
         async build(functionID, mode) {