@aws-cdk/toolkit-lib 1.29.0 → 1.30.0

package/lib/toolkit/private/validation-report.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.obtainUnifiedValidationReport = obtainUnifiedValidationReport;
+exports.combineConclusions = combineConclusions;
+exports.throwIfValidationFailures = throwIfValidationFailures;
+const path = require("path");
+const cloud_assembly_schema_1 = require("@aws-cdk/cloud-assembly-schema");
+const fs = require("fs-extra");
+const collect_annotation_report_1 = require("./collect-annotation-report");
+const validate_formatting_1 = require("../../api/validate/validate-formatting");
+const toolkit_error_1 = require("../toolkit-error");
+const VALIDATION_REPORT_FILE = 'validation-report.json';
+/**
+ * The name of the plugin that emits construct annotations into the validation report.
+ *
+ * @see https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/private/annotation-plugin.ts
+ */
+const CONSTRUCT_ANNOTATIONS_PLUGINNAME = 'Construct Annotations';
+/**
+ * Return a validation report that contains the validation report that the CDK app has written, as well as any Construct Metadata annotations in the manifest.
+ *
+ * This function takes into account the CDK app can already have written the
+ * construct annotations into the validation report, or not, depending on the
+ * setting of a deprecated feature flag. If the annotations are already in the report,
+ * they are not copied.
+ *
+ * Afterwards, the list of violations is filtered to only include those that are relevant to the stacks selected for validation.
+ *
+ * Returns whether an explicit report file was found or not.
+ */
+async function obtainUnifiedValidationReport(assembly, stacks) {
+    const ret = [];
+    const reportPath = path.join(assembly.directory, VALIDATION_REPORT_FILE);
+    if (await fs.pathExists(reportPath)) {
+        const selectedStackIds = new Set(stacks.hierarchicalIds);
+        const report = cloud_assembly_schema_1.Manifest.loadValidationReport(reportPath);
+        // Filter the report to only include violations for the selected stacks
+        const filteredReports = filterReportsByStacks(report.pluginReports, selectedStackIds);
+        ret.push(...filteredReports);
+    }
+    const alreadyHasAnnotations = ret.some((r) => r.pluginName === CONSTRUCT_ANNOTATIONS_PLUGINNAME);
+    if (!alreadyHasAnnotations) {
+        const annotationReport = (0, collect_annotation_report_1.collectAnnotationReport)(stacks);
+        if (annotationReport.violations.length > 0 || annotationReport.conclusion === 'failure') {
+            ret.push(annotationReport);
+        }
+    }
+    // Remove all inconsequential reports
+    return ret;
+}
+/**
+ * Return a success/failure conclusion from the given report
+ */
+function combineConclusions(reports) {
+    const reportHasFailures = reports.some((r) => r.conclusion === 'failure');
+    return reportHasFailures ? 'failure' : 'success';
+}
+/**
+ * For operations that are NOT `cdk validate`, read the validation report and produce a failure if validation failed.
+ *
+ * Validation failed if there are any plugin reports with a failure conclusion, or if there are any warnings and the assembly is in strict mode.
+ */
+async function throwIfValidationFailures(assembly, stacks, failAt, ioHelper) {
+    const pluginReports = await obtainUnifiedValidationReport(assembly, stacks);
+    if (pluginReports.length === 0) {
+        return;
+    }
+    const conclusion = combineConclusions(pluginReports);
+    const result = { conclusion, pluginReports };
+    await ioHelper.notify((0, validate_formatting_1.hostMessageFromValidation)(process.cwd(), result));
+    switch (failAt) {
+        case 'error':
+            if (conclusion === 'failure') {
+                const error = toolkit_error_1.AssemblyError.withStacks('Synthesis finished with errors', stacks.stackArtifacts);
+                error.attachSynthesisErrorCode('AnnotationErrors');
+                throw error;
+            }
+            break;
+        case 'warn':
+            // if we're failing at 'warn', then both warnings and errors cause failure, so the initial conclusion is correct
+            if (conclusion === 'failure' || hasWarnings(pluginReports)) {
+                const error = toolkit_error_1.AssemblyError.withStacks('Synthesis finished with warnings (--strict mode)', stacks.stackArtifacts);
+                error.attachSynthesisErrorCode('StrictAnnotationWarnings');
+                throw error;
+            }
+            break;
+        case 'none':
+            // if we're not failing at all, then the conclusion is always success
+            break;
+    }
+}
+function hasWarnings(reports) {
+    return reports.some((r) => r.violations.some((v) => v.severity === 'warning'));
+}
+/**
+ * Remove violations that aren't in onde of the given stacks
+ */
+function filterReportsByStacks(reports, selectedStackIds) {
+    return reports.map((report) => {
+        const filteredViolations = report.violations.filter((violation) => {
+            if (violation.violatingConstructs.length === 0)
+                return true;
+            return violation.violatingConstructs.some((c) => selectedStackIds.has(c.constructPath?.split('/')[0] ?? ''));
+        }).map((violation) => {
+            if (violation.violatingConstructs.length === 0)
+                return violation;
+            return {
+                ...violation,
+                violatingConstructs: violation.violatingConstructs.filter((c) => selectedStackIds.has(c.constructPath?.split('/')[0] ?? '')),
+            };
+        });
+        return {
+            ...report,
+            violations: filteredViolations,
+            conclusion: filteredViolations.length > 0 ? report.conclusion : 'success',
+        };
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/toolkit/toolkit.d.ts

@@ -1,6 +1,6 @@
 import '../private/dispose-polyfill';
 import type { TemplateDiff } from '@aws-cdk/cloudformation-diff';
-import type { DeployResult, DestroyResult, FeatureFlag, RollbackResult } from './types';
+import type { DeployResult, DestroyResult, FeatureFlag, MinimumSeverity, RollbackResult } from './types';
 import type { BootstrapEnvironments, BootstrapOptions, BootstrapResult } from '../actions/bootstrap';
 import { type DeployOptions } from '../actions/deploy';
 import { type DestroyOptions } from '../actions/destroy';
@@ -53,11 +53,11 @@ export interface ToolkitOptions {
      */
     readonly toolkitStackName?: string;
     /**
-     * Fail Cloud Assemblies
+     * Fail Cloud Assembly operations with an error if there are validation errors in the assembly with at least the indicated severity.
      *
      * @default "error"
      */
-    readonly assemblyFailureAt?: 'error' | 'warn' | 'none';
+    readonly assemblyFailureAt?: MinimumSeverity;
     /**
      * The plugin host to use for loading and querying plugins
      *
@@ -103,6 +103,7 @@ export declare class Toolkit extends CloudAssemblySourceBuilder {
     private sdkProviderCache?;
     private baseCredentials;
     private readonly unstableFeatures;
+    private readonly assemblyFailureAt;
     constructor(props?: ToolkitOptions);
     /**
      * Bootstrap Action
@@ -205,10 +206,6 @@ export declare class Toolkit extends CloudAssemblySourceBuilder {
      * Helper to allow destroy being called as part of the deploy action.
      */
     private _destroy;
-    /**
-     * Validate the stacks for errors and warnings according to the CLI's current settings
-     */
-    private validateStacksMetadata;
     /**
      * Create a deployments class
      */