npm install dose not install dev dependencies

[djakielski]

Description

During nodejs Lambda function deployment using the Terraform AWS Lambda module, the packaging step fails because devDependencies are never installed. The npm_requirements: true setting appears to trigger an install of production dependencies only, omitting build tools like typescript and tsup. As a result, build commands (e.g. npm run build:tsup) cannot find required modules, aborting the archive creation with errors such as “Cannot find module ‘typescript’” and exit code 1. Item-Locker is shown as an example, but any Node.js Lambda relying on devDependencies for compilation or bundling is affected.

Versions

• Module version [Required]: 7.21.1

• Terraform version:

Terraform v1.12.1
on darwin_arm64
+ provider registry.terraform.io/hashicorp/aws v6.6.0
+ provider registry.terraform.io/hashicorp/external v2.3.5
+ provider registry.terraform.io/hashicorp/local v2.5.3
+ provider registry.terraform.io/hashicorp/null v3.2.4

• Provider version(s):

Providers required by configuration:
.
├── provider[registry.terraform.io/hashicorp/aws] 6.6.0
├── module.websocket-gateway
│   ├── provider[registry.terraform.io/hashicorp/aws] >= 5.96.0
│   └── module.acm
│       └── provider[registry.terraform.io/hashicorp/aws] >= 4.40.0
├── module.item-locker
│   ├── provider[registry.terraform.io/hashicorp/null] >= 2.0.0
│   ├── provider[registry.terraform.io/hashicorp/aws] >= 5.79.0
│   ├── provider[registry.terraform.io/hashicorp/external] >= 1.0.0
│   └── provider[registry.terraform.io/hashicorp/local] >= 1.0.0
└── module.item-locks
    └── provider[registry.terraform.io/hashicorp/aws] >= 5.98.0

Reproduction Code [Required]

module "item-locker" {
  allowed_triggers = {
    apigateway = {
      service    = "apigateway"
      source_arn = "${module.websocket-gateway.api_execution_arn}/*/*"
    }
  }
  attach_policy_statements = true
  environment_variables = {
    TABLE_NAME = "item-locks"
  }
  function_name = "item-locker"
  handler       = "handler.onEvent"
  memory_size   = 128
  policy_statements = [
    {
      actions = [
        "dynamodb:scan",
        "dynamodb:GetItem",
        "dynamodb:Query",
        "dynamodb:PutItem",
        "dynamodb:UpdateItem",
        "dynamodb:DeleteItem",
      ]
      resources = [
        "${module.item-locks.dynamodb_table_arn}",
        "${module.item-locks.dynamodb_table_arn}/*",
      ]
      effect = "Allow"
    },
    {
      actions = [
        "execute-api:ManageConnections",
      ]
      resources = [
        "arn:aws:execute-api:${data.aws_region.region.name}:${data.aws_caller_identity.caller.account_id}:*/staging/POST/@connections/*",
      ]
      effect = "Allow"
    },
    {
      actions = [
        "execute-api:Invoke",
      ]
      effect = "Allow"
      resources = [
        "arn:aws:execute-api:${data.aws_region.region.name}:${data.aws_caller_identity.caller.account_id}:*/staging/POST/*",
      ]
    },
  ]
  publish                  = true
  recreate_missing_package = true
  runtime                  = "nodejs22.x"
  s3_bucket                = "${data.aws_caller_identity.caller.account_id}-lambda-builds"
  source_path = [
    {
      path             = "item-locker"
      npm_requirements = true
      commands = [
        "npm run build:tsup",
        ":zip dist",
      ]
    },
  ]
  store_on_s3                  = true
  timeout                      = 130
  trigger_on_package_timestamp = true
  source                       = "terraform-aws-modules/lambda/aws"
  version                      = "~> 7.0"
}

Steps to reproduce the behavior:

• clear node_modules
• terraform apply

Expected behavior

• execute npm i
• node_modules also contains dev dependencies

Actual behavior

• node_modules only contains production dependencies

Terminal Output Screenshot(s)

╷
│ Error: local-exec provisioner error
│ 
│   with module.item-locker.null_resource.archive[0],
│   on .terraform/modules/item-locker/package.tf line 67, in resource "null_resource" "archive":
│   67:   provisioner "local-exec" {
│ 
│ Error running command 'builds/1216d7d1ac3bb01244794afa4d94740f28b82a4f060d6322571c711d56f09943.plan.json': exit status 1. Output: zip: creating 'builds/1216d7d1ac3bb01244794afa4d94740f28b82a4f060d6322571c711d56f09943.zip'
│ archive
│ zip: Error during zip archive creation
│ Traceback (most recent call last):
│   File "/Users/dominik.jakielski/WebstormProjects/urlaubsguru/uniqversum/backend-galaxy/socket-service/aws-style/cdktf.out/stacks/websocket/.terraform/modules/item-locker/package.py", line 1721, in build_command
│     bpm.execute(build_plan, zs, query)
│     ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^
│   File "/Users/dominik.jakielski/WebstormProjects/urlaubsguru/uniqversum/backend-galaxy/socket-service/aws-style/cdktf.out/stacks/websocket/.terraform/modules/item-locker/package.py", line 1015, in execute
│     raise RuntimeError(
│     ...<5 lines>...
│     )
│ RuntimeError: Script did not run successfully, exit code 1: > item-locker@1.0.0 build:tsup
│ > npx tsup --config tsup.config.ts - Error: Cannot find module 'typescript'
│ Require stack:
│ - /Users/dominik.jakielski/.npm/_npx/7d72304e626f8399/node_modules/tsup/dist/index.js
│ - /Users/dominik.jakielski/.npm/_npx/7d72304e626f8399/node_modules/tsup/dist/chunk-2YH5KWEM.js
│ - /Users/dominik.jakielski/.npm/_npx/7d72304e626f8399/node_modules/tsup/dist/cli-default.js
│     at Function._resolveFilename (node:internal/modules/cjs/loader:1244:15)
│     at Function._load (node:internal/modules/cjs/loader:1070:27)
│     at TracingChannel.traceSync (node:diagnostics_channel:322:14)
│     at wrapModuleLoad (node:internal/modules/cjs/loader:217:24)
│     at Module.require (node:internal/modules/cjs/loader:1335:12)
│     at require (node:internal/modules/helpers:136:16)
│     at Object.<anonymous> (/Users/dominik.jakielski/.npm/_npx/7d72304e626f8399/node_modules/tsup/dist/index.js:1027:19)
│     at Module._compile (node:internal/modules/cjs/loader:1562:14)
│     at Object..js (node:internal/modules/cjs/loader:1699:10)
│     at Module.load (node:internal/modules/cjs/loader:1313:32)

Additional context

• In my setup, i use cdktf, but converted to hcl for simplicity