stacktape 3.3.0 → 3.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stacktape",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "description": "PaaS 2.0 that deploys to your own AWS account.",
   "author": "Stacktape team <support@stacktape.com>",
   "license": "MIT",

package/plain.d.ts

@@ -33,6 +33,7 @@ export type StacktapeResourceDefinition =
   | NextjsWeb
   | OpenSearchDomain
   | EfsFilesystem
+  | KinesisStream
   | LambdaFunction
   | EdgeLambdaFunction;
 export type HttpMethod = "*" | "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
@@ -1738,7 +1739,10 @@ export interface StpBuildpackCwImagePackagingProps {
     | EsLanguageSpecificConfig
     | PyLanguageSpecificConfig
     | JavaLanguageSpecificConfig
-    | GoLanguageSpecificConfig;
+    | PhpLanguageSpecificConfig
+    | DotnetLanguageSpecificConfig
+    | GoLanguageSpecificConfig
+    | RubyLanguageSpecificConfig;
   /**
    * #### Builds the image with support for glibc-based binaries.
    *
@@ -1872,10 +1876,10 @@ export interface PyLanguageSpecificConfig {
    *
    * ---
    *
-   * Stacktape will automatically detect the package manager based on the files in your project.
-   * You only need to set this if you are using a non-standard file name for your dependencies.
+   * Stacktape uses `uv` for dependency resolution and installation. This option is kept
+   * for compatibility and must be set to `uv` if provided.
    */
-  packageManager?: "pip" | "pipenv" | "poetry";
+  packageManager?: "uv";
   /**
    * #### The version of Python to use.
    */
@@ -1921,7 +1925,29 @@ export interface JavaLanguageSpecificConfig {
    */
   javaVersion?: 11 | 17 | 19 | 8;
 }
+export interface PhpLanguageSpecificConfig {
+  /**
+   * #### The version of PHP to use.
+   */
+  phpVersion?: 8.2 | 8.3;
+}
+export interface DotnetLanguageSpecificConfig {
+  /**
+   * #### The path to your .NET project file (.csproj).
+   */
+  projectFile?: string;
+  /**
+   * #### The version of .NET to use.
+   */
+  dotnetVersion?: 6 | 8;
+}
 export interface GoLanguageSpecificConfig {}
+export interface RubyLanguageSpecificConfig {
+  /**
+   * #### The version of Ruby to use.
+   */
+  rubyVersion?: 3.2 | 3.3;
+}
 /**
  * #### Builds a container image using an external buildpack.
  *
@@ -2818,7 +2844,10 @@ export interface StpBuildpackBjImagePackagingProps {
     | EsLanguageSpecificConfig
     | PyLanguageSpecificConfig
     | JavaLanguageSpecificConfig
-    | GoLanguageSpecificConfig;
+    | PhpLanguageSpecificConfig
+    | DotnetLanguageSpecificConfig
+    | GoLanguageSpecificConfig
+    | RubyLanguageSpecificConfig;
   /**
    * #### Builds the image with support for glibc-based binaries.
    *
@@ -3345,9 +3374,22 @@ export interface KinesisIntegration {
    */
   properties: {
     /**
-     * #### The ARN of the Kinesis stream to consume records from.
+     * #### The name of a Kinesis stream defined in your stack's resources.
+     *
+     * ---
+     *
+     * You must specify either `kinesisStreamName` or `streamArn`.
      */
-    streamArn: string;
+    kinesisStreamName?: string;
+    /**
+     * #### The ARN of an existing Kinesis stream to consume records from.
+     *
+     * ---
+     *
+     * Use this to consume from a stream that is not managed by your stack.
+     * You must specify either `kinesisStreamName` or `streamArn`.
+     */
+    streamArn?: string;
     /**
      * #### The ARN of a specific stream consumer to use.
      *
@@ -9707,6 +9749,7 @@ export interface UserAuthPoolProps {
    * Stacktape does this by creating a `WebACLAssociation` between the user pool and the referenced firewall.
    */
   useFirewall?: string;
+  customDomain?: UserPoolCustomDomainConfiguration;
   /**
    * #### Generate a client secret
    *
@@ -10130,6 +10173,49 @@ export interface IdentityProvider {
  * In most cases you don't need to set this – Stacktape configures sensible defaults for common providers.
  */
 export interface RecordStringAny {}
+/**
+ * #### Custom Domain
+ *
+ * ---
+ *
+ * Configures a custom domain for the Cognito Hosted UI (e.g., `auth.example.com`).
+ *
+ * When configured, Cognito creates a CloudFront distribution to serve your custom domain.
+ * Stacktape automatically:
+ * - Configures the user pool domain with your custom domain and an ACM certificate from us-east-1
+ * - Creates a DNS record pointing to the CloudFront distribution
+ *
+ * The domain must be registered and verified in your Stacktape account with a valid ACM certificate in us-east-1.
+ */
+export interface UserPoolCustomDomainConfiguration {
+  /**
+   * #### Domain Name
+   *
+   * ---
+   *
+   * Fully qualified domain name for the Cognito Hosted UI (e.g., `auth.example.com`).
+   */
+  domainName: string;
+  /**
+   * #### Custom Certificate ARN
+   *
+   * ---
+   *
+   * ARN of an ACM certificate in **us-east-1** to use for this domain.
+   * By default, Stacktape uses the certificate associated with your domain in us-east-1.
+   *
+   * The certificate must be in us-east-1 because Cognito uses CloudFront for custom domains.
+   */
+  customCertificateArn?: string;
+  /**
+   * #### Disable DNS Record Creation
+   *
+   * ---
+   *
+   * If `true`, Stacktape will not create a DNS record for this domain.
+   */
+  disableDnsRecordCreation?: boolean;
+}
 /**
  * #### Event Bus
  *
@@ -11533,6 +11619,7 @@ export interface CustomResourceDefinitionProps {
   runtime?:
     | "dotnet6"
     | "dotnet7"
+    | "dotnet8"
     | "java11"
     | "java17"
     | "java8"
@@ -11549,7 +11636,7 @@ export interface CustomResourceDefinitionProps {
     | "python3.13"
     | "python3.8"
     | "python3.9"
-    | "ruby3.2";
+    | "ruby3.3";
   /**
    * #### The maximum execution time for the custom resource's Lambda function, in seconds.
    *
@@ -11658,7 +11745,7 @@ export interface CustomResourceDefinitionProps {
  *
  * The `stacktape-lambda-buildpack` automatically bundles your code and dependencies into an optimized Lambda deployment package.
  *
- * **Supported languages:** JavaScript, TypeScript, Python, Java, and Go.
+ * **Supported languages:** JavaScript, TypeScript, Python, Java, Go, Ruby, PHP, and .NET.
  *
  * For JS/TS, your code is bundled into a single file. Source maps are automatically generated.
  * Packages are cached based on a checksum, so unchanged code is not re-packaged.
@@ -11706,7 +11793,10 @@ export interface StpBuildpackLambdaPackagingProps {
     | EsLanguageSpecificConfig
     | PyLanguageSpecificConfig
     | JavaLanguageSpecificConfig
-    | GoLanguageSpecificConfig;
+    | PhpLanguageSpecificConfig
+    | DotnetLanguageSpecificConfig
+    | GoLanguageSpecificConfig
+    | RubyLanguageSpecificConfig;
 }
 /**
  * #### Uses a pre-built artifact for Lambda deployment.
@@ -11839,6 +11929,7 @@ export interface DeploymentScriptProps {
   runtime?:
     | "dotnet6"
     | "dotnet7"
+    | "dotnet8"
     | "java11"
     | "java17"
     | "java8"
@@ -11855,7 +11946,7 @@ export interface DeploymentScriptProps {
     | "python3.13"
     | "python3.8"
     | "python3.9"
-    | "ruby3.2";
+    | "ruby3.3";
   /**
    * #### A list of environment variables to inject into the script's execution environment.
    *
@@ -13930,6 +14021,116 @@ export interface EfsFilesystemProps {
    */
   provisionedThroughputInMibps?: number;
 }
+/**
+ * #### Kinesis Data Stream
+ *
+ * ---
+ *
+ * A fully managed, scalable, and durable real-time data streaming service that can continuously capture gigabytes of data per second from hundreds of thousands of sources.
+ *
+ * Kinesis Data Streams is commonly used for log and event data collection, real-time analytics, mobile data capture, and IoT data processing.
+ *
+ * For more information, see the [AWS documentation on Kinesis Data Streams](https://docs.aws.amazon.com/streams/latest/dev/introduction.html).
+ */
+export interface KinesisStream {
+  type: "kinesis-stream";
+  properties?: KinesisStreamProps;
+  /**
+   * #### Resource Overrides
+   *
+   * ---
+   *
+   * Overrides properties of the underlying CloudFormation resources that Stacktape creates.
+   *
+   * Child resources are identified by their CloudFormation logical ID (e.g., `MyBucketBucket`). You can find these IDs by running `stacktape stack:info --detailed`.
+   *
+   * For a list of properties that can be overridden, refer to the [AWS CloudFormation documentation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html).
+   */
+  overrides?: {
+    [k: string]: any;
+  };
+}
+export interface KinesisStreamProps {
+  /**
+   * #### Capacity Mode
+   *
+   * ---
+   *
+   * Determines how the stream's capacity is managed.
+   *
+   * - **`ON_DEMAND`**: The stream automatically scales to handle any amount of data. You pay per GB of data written and read. This is the simplest option and recommended for most use cases.
+   * - **`PROVISIONED`**: You specify the number of shards. Each shard provides 1 MB/sec write and 2 MB/sec read capacity. This offers more predictable costs for stable workloads.
+   */
+  capacityMode?: "ON_DEMAND" | "PROVISIONED";
+  /**
+   * #### Shard Count
+   *
+   * ---
+   *
+   * The number of shards for the stream. Only applicable when `capacityMode` is `PROVISIONED`.
+   *
+   * Each shard provides:
+   * - **Write:** 1 MB/sec or 1,000 records/sec
+   * - **Read:** 2 MB/sec or 5 transactions/sec (shared across all consumers)
+   *
+   * For on-demand streams, this property is ignored as AWS automatically manages shard capacity.
+   */
+  shardCount?: number;
+  /**
+   * #### Retention Period (Hours)
+   *
+   * ---
+   *
+   * The number of hours data records are retained in the stream.
+   *
+   * The minimum is 24 hours. The maximum is 8760 hours (365 days).
+   * Extended retention (beyond 24 hours) incurs additional costs.
+   */
+  retentionPeriodHours?: number;
+  encryption?: KinesisStreamEncryption;
+  /**
+   * #### Enable Enhanced Fan-Out
+   *
+   * ---
+   *
+   * If `true`, enables enhanced fan-out for the stream.
+   *
+   * Enhanced fan-out provides dedicated 2 MB/sec throughput per consumer per shard, instead of sharing the 2 MB/sec across all consumers.
+   * This is useful when you have multiple consumers that need to read from the stream simultaneously with low latency.
+   *
+   * Note: Enhanced fan-out consumers are created automatically when a Lambda function uses `autoCreateConsumer: true` in its Kinesis event integration.
+   */
+  enableEnhancedFanOut?: boolean;
+}
+/**
+ * #### Encryption
+ *
+ * ---
+ *
+ * Configures server-side encryption for the stream.
+ *
+ * When enabled, all data written to the stream is encrypted at rest using the specified KMS key.
+ */
+export interface KinesisStreamEncryption {
+  /**
+   * #### Enable Encryption
+   *
+   * ---
+   *
+   * If `true`, enables server-side encryption for the stream.
+   */
+  enabled: boolean;
+  /**
+   * #### KMS Key ARN
+   *
+   * ---
+   *
+   * The ARN of a customer-managed KMS key to use for encryption.
+   *
+   * If not specified, the AWS-managed key `alias/aws/kinesis` is used.
+   */
+  kmsKeyArn?: string;
+}
 /**
  * #### A serverless compute resource that runs your code in response to events.
  *
@@ -14015,6 +14216,7 @@ export interface LambdaFunctionProps {
   runtime?:
     | "dotnet6"
     | "dotnet7"
+    | "dotnet8"
     | "java11"
     | "java17"
     | "java8"
@@ -14031,7 +14233,7 @@ export interface LambdaFunctionProps {
     | "python3.13"
     | "python3.8"
     | "python3.9"
-    | "ruby3.2";
+    | "ruby3.3";
   /**
    * #### The processor architecture for the function.
    *

package/types.d.ts

@@ -50,6 +50,7 @@ import type {
   AwsEventsEventbus,
   AwsIamInstanceprofile,
   AwsIamRole,
+  AwsKinesisStream,
   AwsLambdaAlias,
   AwsLambdaEventinvokeconfig,
   AwsLambdaFunction,
@@ -124,6 +125,7 @@ export type {
   UpstashRedisProps,
   SqsQueueProps,
   SnsTopicProps,
+  KinesisStreamProps,
   WebAppFirewallProps,
   OpenSearchDomainProps,
   EfsFilesystemProps,
@@ -367,15 +369,15 @@ export declare class BaseResource {
 // ==========================================
 
 // ConnectTo type aliases
-type WebServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | PrivateService | GlobalAwsServiceConstant;
-type PrivateServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
-type WorkerServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
-type MultiContainerWorkloadConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
-type LambdaFunctionConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
-type BatchJobConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
+type WebServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | PrivateService | GlobalAwsServiceConstant;
+type PrivateServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
+type WorkerServiceConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
+type MultiContainerWorkloadConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
+type LambdaFunctionConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
+type BatchJobConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | GlobalAwsServiceConstant;
 type StateMachineConnectTo = Function | BatchJob | GlobalAwsServiceConstant;
-type NextjsWebConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
-type ScriptConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
+type NextjsWebConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
+type ScriptConnectTo = RelationalDatabase | Bucket | HostingBucket | DynamoDbTable | EventBus | RedisCluster | MongoDbAtlasCluster | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | OpenSearchDomain | EfsFilesystem | PrivateService | WebService | LambdaFunction | BatchJob | UserAuthPool | GlobalAwsServiceConstant;
 
 // Augmented container types with object-style environment
 /**
@@ -820,6 +822,20 @@ export type SnsTopicPropsWithOverrides = import('./plain').SnsTopicProps & {
   transforms?: SnsTopicTransforms;
 };
 
+export type KinesisStreamPropsWithOverrides = import('./plain').KinesisStreamProps & {
+  /**
+   * Override properties of underlying CloudFormation resources.
+   * Allows fine-grained control over the generated infrastructure.
+   */
+  overrides?: KinesisStreamOverrides;
+  /**
+   * Transform functions for underlying CloudFormation resources.
+   * Each function receives the current properties and returns modified properties.
+   * Unlike overrides, transforms allow dynamic modification based on existing values.
+   */
+  transforms?: KinesisStreamTransforms;
+};
+
 export type WebAppFirewallPropsWithOverrides = import('./plain').WebAppFirewallProps & {
   /**
    * Override properties of underlying CloudFormation resources.
@@ -1197,6 +1213,12 @@ export type SnsTopicOverrides = {
   [key: string]: Record<string, unknown> | undefined;
 };
 
+export type KinesisStreamOverrides = {
+  kinesisStream?: Partial<AwsKinesisStream>;
+  /** Index signature for dynamic CloudFormation resource names */
+  [key: string]: Record<string, unknown> | undefined;
+};
+
 export type WebAppFirewallOverrides = {
   webAppFirewallCustomResource?: Partial<AwsCloudformationCustomresource>;
   /** Index signature for dynamic CloudFormation resource names */
@@ -1578,6 +1600,12 @@ export type SnsTopicTransforms = {
   [key: string]: ((props: Record<string, unknown>) => Record<string, unknown>) | undefined;
 };
 
+export type KinesisStreamTransforms = {
+  kinesisStream?: (props: Partial<AwsKinesisStream>) => Partial<AwsKinesisStream>;
+  /** Index signature for dynamic CloudFormation resource names */
+  [key: string]: ((props: Record<string, unknown>) => Record<string, unknown>) | undefined;
+};
+
 export type WebAppFirewallTransforms = {
   webAppFirewallCustomResource?: (props: Partial<AwsCloudformationCustomresource>) => Partial<AwsCloudformationCustomresource>;
   /** Index signature for dynamic CloudFormation resource names */
@@ -2001,6 +2029,21 @@ export declare class SnsTopic extends BaseResource {
   /** Topic name */
   readonly name: string;
 }
+export declare class KinesisStream extends BaseResource {
+  /**
+   * #### Kinesis Data Stream
+   * 
+   * ---
+   * 
+   * A fully managed, scalable, and durable real-time data streaming service that can continuously capture gigabytes of data per second from hundreds of thousands of sources.
+   * 
+   * Kinesis Data Streams is commonly used for log and event data collection, real-time analytics, mobile data capture, and IoT data processing.
+   * 
+   * For more information, see the [AWS documentation on Kinesis Data Streams](https://docs.aws.amazon.com/streams/latest/dev/introduction.html).
+   */
+  constructor(properties: KinesisStreamPropsWithOverrides);
+  constructor(name: string, properties: KinesisStreamPropsWithOverrides);
+}
 export declare class WebAppFirewall extends BaseResource {
   /**
    * #### Web Application Firewall
@@ -2326,7 +2369,7 @@ export declare class StacktapeLambdaBuildpackPackaging extends BaseTypePropertie
    * 
    * The `stacktape-lambda-buildpack` automatically bundles your code and dependencies into an optimized Lambda deployment package.
    * 
-   * **Supported languages:** JavaScript, TypeScript, Python, Java, and Go.
+   * **Supported languages:** JavaScript, TypeScript, Python, Java, Go, Ruby, PHP, and .NET.
    * 
    * For JS/TS, your code is bundled into a single file. Source maps are automatically generated.
    * Packages are cached based on a checksum, so unchanged code is not re-packaged.
@@ -3023,7 +3066,7 @@ export type CloudFormationTemplate = {
 };
 
 export type StacktapeConfig = Omit<import('./plain').StacktapeConfig, 'resources' | 'cloudformationResources' | 'scripts'> & {
-  resources: { [resourceName: string]: RelationalDatabase | WebService | PrivateService | WorkerService | MultiContainerWorkload | LambdaFunction | BatchJob | Bucket | HostingBucket | DynamoDbTable | EventBus | HttpApiGateway | ApplicationLoadBalancer | NetworkLoadBalancer | RedisCluster | MongoDbAtlasCluster | StateMachine | UserAuthPool | UpstashRedis | SqsQueue | SnsTopic | WebAppFirewall | OpenSearchDomain | EfsFilesystem | NextjsWeb | Bastion | StacktapeResourceDefinition };
+  resources: { [resourceName: string]: RelationalDatabase | WebService | PrivateService | WorkerService | MultiContainerWorkload | LambdaFunction | BatchJob | Bucket | HostingBucket | DynamoDbTable | EventBus | HttpApiGateway | ApplicationLoadBalancer | NetworkLoadBalancer | RedisCluster | MongoDbAtlasCluster | StateMachine | UserAuthPool | UpstashRedis | SqsQueue | SnsTopic | KinesisStream | WebAppFirewall | OpenSearchDomain | EfsFilesystem | NextjsWeb | Bastion | StacktapeResourceDefinition };
   /**
    * #### Scripts that can be executed using the `stacktape script:run` command.
    *