@fjall/deploy-core 0.94.1 → 0.95.0

package/dist/src/services/infrastructure/CdkCommandRunner.js

@@ -1,244 +1,2 @@
-import { tmpdir } from "os";
-import { logger } from "@fjall/util/logger";
-import { success, failure } from "@fjall/generator";
-import { CdkError } from "../../types/errors/CdkError.js";
-import { DEFAULT_REGION } from "../../aws/utils/regions.js";
-import { isCdkError, formatInfrastructureError } from "./CdkErrorFormatter.js";
-import { hasCdkDifferences, parseDiffOutput } from "./CdkOutputParser.js";
-import { DEFAULT_DEPLOY_TIMEOUT_MS } from "./CdkEventMonitoring.js";
-import { analyseBootstrapError } from "./CdkOutputAnalyser.js";
-/** Synth is CPU-bound template generation — 5 minutes is generous */
-export const SYNTH_TIMEOUT_MS = 300_000;
-/** Bootstrap creates a single stack with a handful of resources */
-export const BOOTSTRAP_TIMEOUT_MS = 180_000;
-/** Import maps existing resources into CDK state — slower than deploy due to resource lookup */
-export const IMPORT_TIMEOUT_MS = 1_200_000;
-/** CDK flags used across multiple commands */
-const CDK_FLAGS = Object.freeze({
-    APP: "--app",
-    CI: "--ci",
-    REQUIRE_APPROVAL: "--require-approval",
-    APPROVAL_NEVER: "never",
-    VERBOSE: "--verbose",
-    NO_LOOKUPS: "--no-lookups",
-    ALL: "--all"
-});
-/**
- * Runs low-level CDK CLI commands (synth, deploy, destroy, diff, bootstrap, import).
- * Delegates process management to CdkProcessManager (or any ICdkProcessManager).
- */
-export class CdkCommandRunner {
-    processManager;
-    constructor(processManager) {
-        this.processManager = processManager;
-    }
-    dispose() {
-        this.processManager.dispose();
-    }
-    async checkDifferences(path, stackName, options) {
-        const args = ["diff"];
-        if (stackName) {
-            args.push(stackName);
-        }
-        else {
-            args.push(CDK_FLAGS.ALL);
-        }
-        // Add no-colour flag for cleaner parsing
-        args.push("--no-color");
-        if (options?.noLookups) {
-            args.push(CDK_FLAGS.NO_LOOKUPS);
-        }
-        const result = await this.processManager.runCdkCommand(path, args, {
-            ...options,
-            // Diff command returns non-zero if differences exist
-            ignoreExitCode: true,
-            // Diff output includes stderr (CDK writes errors there)
-            combineOutput: true
-        });
-        if (!result.success) {
-            return failure(new CdkError(formatInfrastructureError(result.error, path), "diff_failed", undefined, undefined, result.error, undefined, false));
-        }
-        const output = result.data.output || "";
-        // Check if the output indicates an error rather than a successful diff
-        if (isCdkError(output)) {
-            return failure(new CdkError(formatInfrastructureError(output, path), "diff_failed", undefined, undefined, output, undefined, false));
-        }
-        const hasDiffs = hasCdkDifferences(output);
-        const details = parseDiffOutput(output);
-        return success({
-            hasDifferences: hasDiffs,
-            output,
-            details
-        });
-    }
-    async deploy(path, stackName, options) {
-        const args = ["deploy"];
-        if (options?.appDir) {
-            args.push(CDK_FLAGS.APP, options.appDir);
-        }
-        else if (options?.useCdkOut) {
-            args.push(CDK_FLAGS.APP, "cdk.out");
-        }
-        if (stackName) {
-            args.push(stackName);
-        }
-        else {
-            args.push(CDK_FLAGS.ALL);
-        }
-        // Never require approval in programmatic mode
-        args.push(CDK_FLAGS.REQUIRE_APPROVAL, CDK_FLAGS.APPROVAL_NEVER);
-        args.push(CDK_FLAGS.CI);
-        // Disable version reporting and metadata for cleaner output
-        args.push("--no-version-reporting");
-        args.push("--no-path-metadata");
-        args.push("--no-asset-metadata");
-        if (options?.verbose) {
-            args.push(CDK_FLAGS.VERBOSE);
-        }
-        else {
-            args.push("--progress", "events");
-        }
-        const deployOptions = {
-            ...options,
-            timeout: options?.timeout || DEFAULT_DEPLOY_TIMEOUT_MS
-        };
-        if (options?.passThroughCDK) {
-            return this.processManager.runCdkCommandPassthrough(path, args, deployOptions);
-        }
-        return this.processManager.runCdkCommand(path, args, deployOptions);
-    }
-    async destroy(path, stackName, options) {
-        const args = ["destroy"];
-        if (options?.appDir) {
-            args.push(CDK_FLAGS.APP, options.appDir);
-        }
-        else if (options?.useCdkOut) {
-            args.push(CDK_FLAGS.APP, "cdk.out");
-        }
-        if (stackName) {
-            args.push(stackName);
-        }
-        else {
-            args.push(CDK_FLAGS.ALL);
-        }
-        args.push("--force");
-        if (options?.verbose) {
-            args.push(CDK_FLAGS.VERBOSE);
-        }
-        const destroyOptions = {
-            ...options,
-            timeout: options?.timeout || DEFAULT_DEPLOY_TIMEOUT_MS
-        };
-        return this.processManager.runCdkCommand(path, args, destroyOptions);
-    }
-    /**
-     * Import existing AWS resources into CDK stack
-     *
-     * NOTE: This method is fully functional but currently unreachable as import
-     * functionality is temporarily disabled at the AST layer (astCodeModification.ts).
-     * When import is re-enabled, this method will work without changes.
-     */
-    async runImport(path, resourceMappingFile, options) {
-        const args = ["import"];
-        if (options?.stacks && options.stacks.length > 0) {
-            args.push(...options.stacks);
-        }
-        if (resourceMappingFile) {
-            args.push("--resource-mapping", resourceMappingFile);
-        }
-        args.push(CDK_FLAGS.REQUIRE_APPROVAL, CDK_FLAGS.APPROVAL_NEVER);
-        args.push(CDK_FLAGS.CI);
-        if (options?.noLookups) {
-            args.push(CDK_FLAGS.NO_LOOKUPS);
-        }
-        if (options?.verbose) {
-            args.push(CDK_FLAGS.VERBOSE);
-            args.push("--trace");
-            args.push("--debug");
-        }
-        const importOptions = {
-            ...options,
-            timeout: options?.timeout || IMPORT_TIMEOUT_MS
-        };
-        if (options?.passThroughCDK) {
-            return this.processManager.runCdkCommandPassthrough(path, args, importOptions);
-        }
-        return this.processManager.runCdkCommand(path, args, importOptions);
-    }
-    async synth(path, options) {
-        options?.outputCallback?.("Synthesising CloudFormation template...\n");
-        const lookupArgs = options?.noLookups
-            ? [CDK_FLAGS.NO_LOOKUPS]
-            : [];
-        const outputArgs = options?.outputDir
-            ? ["--output", options.outputDir]
-            : [];
-        const region = options?.context?.region || DEFAULT_REGION;
-        const result = await this.processManager.runCdkCommand(path, ["synth", ...lookupArgs, ...outputArgs, CDK_FLAGS.CI, "--quiet"], {
-            ...options,
-            context: { ...options?.context, region },
-            timeout: options?.timeout || SYNTH_TIMEOUT_MS
-        });
-        if (!result.success) {
-            const formatted = result.error
-                ? formatInfrastructureError(result.error, path)
-                : "Failed to synthesise CloudFormation template";
-            return failure(formatted);
-        }
-        return result;
-    }
-    async bootstrap(accountId, region, options) {
-        const bootstrapPath = tmpdir();
-        logger.debug("CdkService", "Starting CDK bootstrap", {
-            accountId,
-            region,
-            bootstrapPath,
-            target: `aws://${accountId}/${region}`
-        });
-        const result = await this.processManager.runCdkCommand(bootstrapPath, [
-            "bootstrap",
-            `aws://${accountId}/${region}`,
-            "--cloudformation-execution-policies",
-            "arn:aws:iam::aws:policy/AdministratorAccess",
-            "-c",
-            `accountId=${accountId}`,
-            CDK_FLAGS.REQUIRE_APPROVAL,
-            CDK_FLAGS.APPROVAL_NEVER,
-            CDK_FLAGS.CI,
-            "--quiet",
-            "--force"
-        ], {
-            ...options,
-            timeout: options?.timeout || BOOTSTRAP_TIMEOUT_MS,
-            context: { region, accountId },
-            credentials: options?.credentials,
-            skipProjectCheck: true,
-            extraEnv: {
-                TERM: "dumb",
-                CDK_DISABLE_NOTICES: "true",
-                CDK_DISABLE_PROGRESS_BAR: "true"
-            }
-        });
-        logger.debug("CdkService", result.success
-            ? "Bootstrap completed successfully"
-            : "Bootstrap exited with non-zero code", {
-            accountId,
-            region,
-            exitCode: result.success ? result.data.exitCode : undefined,
-            output: result.success
-                ? result.data.output?.trim() || "(empty)"
-                : "(empty)",
-            error: result.success ? "(empty)" : result.error.trim() || "(empty)"
-        });
-        if (!result.success) {
-            if (result.error.includes("already bootstrapped")) {
-                return success({
-                    output: "Environment is already bootstrapped",
-                    exitCode: 0
-                });
-            }
-            return failure(analyseBootstrapError(result.error));
-        }
-        return success({ output: "AWS environment bootstrapped", exitCode: 0 });
-    }
-}
+import{tmpdir as C}from"os";import{logger as d}from"@fjall/util/logger";import{success as p,failure as n}from"@fjall/generator";import{CdkError as m}from"../../types/errors/CdkError.js";import{DEFAULT_REGION as l}from"../../aws/utils/regions.js";import{isCdkError as E,formatInfrastructureError as c}from"./CdkErrorFormatter.js";import{hasCdkDifferences as O,parseDiffOutput as P}from"./CdkOutputParser.js";import{DEFAULT_DEPLOY_TIMEOUT_MS as f}from"./CdkEventMonitoring.js";import{analyseBootstrapError as A}from"./CdkOutputAnalyser.js";const _=3e5,R=18e4,g=12e5,u=Object.freeze({APP:"--app",CI:"--ci",REQUIRE_APPROVAL:"--require-approval",APPROVAL_NEVER:"never",VERBOSE:"--verbose",NO_LOOKUPS:"--no-lookups",ALL:"--all"});class V{processManager;constructor(o){this.processManager=o}dispose(){this.processManager.dispose()}async checkDifferences(o,s,r){const e=["diff"];s?e.push(s):e.push(u.ALL),e.push("--no-color"),r?.noLookups&&e.push(u.NO_LOOKUPS);const t=await this.processManager.runCdkCommand(o,e,{...r,ignoreExitCode:!0,combineOutput:!0});if(!t.success)return n(new m(c(t.error,o),"diff_failed",void 0,void 0,t.error,void 0,!1));const a=t.data.output||"";if(E(a))return n(new m(c(a,o),"diff_failed",void 0,void 0,a,void 0,!1));const i=O(a),h=P(a);return p({hasDifferences:i,output:a,details:h})}async deploy(o,s,r){const e=["deploy"];r?.appDir?e.push(u.APP,r.appDir):r?.useCdkOut&&e.push(u.APP,"cdk.out"),s?e.push(s):e.push(u.ALL),e.push(u.REQUIRE_APPROVAL,u.APPROVAL_NEVER),e.push(u.CI),e.push("--no-version-reporting"),e.push("--no-path-metadata"),e.push("--no-asset-metadata"),r?.verbose?e.push(u.VERBOSE):e.push("--progress","events");const t={...r,timeout:r?.timeout||f};return r?.passThroughCDK?this.processManager.runCdkCommandPassthrough(o,e,t):this.processManager.runCdkCommand(o,e,t)}async destroy(o,s,r){const e=["destroy"];r?.appDir?e.push(u.APP,r.appDir):r?.useCdkOut&&e.push(u.APP,"cdk.out"),s?e.push(s):e.push(u.ALL),e.push("--force"),r?.verbose&&e.push(u.VERBOSE);const t={...r,timeout:r?.timeout||f};return this.processManager.runCdkCommand(o,e,t)}async runImport(o,s,r){const e=["import"];r?.stacks&&r.stacks.length>0&&e.push(...r.stacks),s&&e.push("--resource-mapping",s),e.push(u.REQUIRE_APPROVAL,u.APPROVAL_NEVER),e.push(u.CI),r?.noLookups&&e.push(u.NO_LOOKUPS),r?.verbose&&(e.push(u.VERBOSE),e.push("--trace"),e.push("--debug"));const t={...r,timeout:r?.timeout||g};return r?.passThroughCDK?this.processManager.runCdkCommandPassthrough(o,e,t):this.processManager.runCdkCommand(o,e,t)}async synth(o,s){s?.outputCallback?.(`Synthesising CloudFormation template...
+`);const r=s?.noLookups?[u.NO_LOOKUPS]:[],e=s?.outputDir?["--output",s.outputDir]:[],t=s?.context?.region||l,a=await this.processManager.runCdkCommand(o,["synth",...r,...e,u.CI,"--quiet"],{...s,context:{...s?.context,region:t},timeout:s?.timeout||_});if(!a.success){const i=a.error?c(a.error,o):"Failed to synthesise CloudFormation template";return n(i)}return a}async bootstrap(o,s,r){const e=C();d.debug("CdkService","Starting CDK bootstrap",{accountId:o,region:s,bootstrapPath:e,target:`aws://${o}/${s}`});const t=await this.processManager.runCdkCommand(e,["bootstrap",`aws://${o}/${s}`,"--cloudformation-execution-policies","arn:aws:iam::aws:policy/AdministratorAccess","-c",`accountId=${o}`,u.REQUIRE_APPROVAL,u.APPROVAL_NEVER,u.CI,"--quiet","--force"],{...r,timeout:r?.timeout||R,context:{region:s,accountId:o},credentials:r?.credentials,skipProjectCheck:!0,extraEnv:{TERM:"dumb",CDK_DISABLE_NOTICES:"true",CDK_DISABLE_PROGRESS_BAR:"true"}});return d.debug("CdkService",t.success?"Bootstrap completed successfully":"Bootstrap exited with non-zero code",{accountId:o,region:s,exitCode:t.success?t.data.exitCode:void 0,output:t.success&&t.data.output?.trim()||"(empty)",error:t.success?"(empty)":t.error.trim()||"(empty)"}),t.success?p({output:"AWS environment bootstrapped",exitCode:0}):t.error.includes("already bootstrapped")?p({output:"Environment is already bootstrapped",exitCode:0}):n(A(t.error))}}export{R as BOOTSTRAP_TIMEOUT_MS,V as CdkCommandRunner,g as IMPORT_TIMEOUT_MS,_ as SYNTH_TIMEOUT_MS};

package/dist/src/services/infrastructure/CdkOutputAnalyser.js

@@ -1,125 +1 @@
-import { logger } from "@fjall/util/logger";
-import { STACK_NOT_FOUND_PATTERN, CDK_NO_STACKS_MATCH } from "../../aws/utils/cloudformationEvents.js";
-import { success, failure } from "@fjall/generator";
-import { formatInfrastructureError } from "./CdkErrorFormatter.js";
-import { startStackMonitoring } from "./CdkEventMonitoring.js";
-/**
- * Analyse CDK deploy output and classify the result as success/skip/failure.
- */
-export function analyseDeployOutput(cdkOutput, result, stackName) {
-    const stackSpecificNoResourcesPattern = new RegExp(`${stackName}[:\\s|]*.*?(?:stack has no resources|skipping deployment)`, "i");
-    const hasEmptyStack = stackSpecificNoResourcesPattern.test(cdkOutput);
-    const hasNoChanges = cdkOutput.includes("no changes") ||
-        cdkOutput.includes("Stack is up to date") ||
-        cdkOutput.includes("No changes to deploy");
-    const noStacksMatch = cdkOutput.includes(CDK_NO_STACKS_MATCH) ||
-        (!result.success && result.error.includes(CDK_NO_STACKS_MATCH));
-    if (result.success) {
-        return success({
-            message: hasEmptyStack
-                ? "Stack has no resources, skipped"
-                : hasNoChanges
-                    ? "Infrastructure already up to date"
-                    : "Deployment successful",
-            status: hasNoChanges ? "NO_CHANGES" : undefined,
-            details: { output: cdkOutput, skipped: hasEmptyStack }
-        });
-    }
-    if (noStacksMatch) {
-        return success({
-            message: "Stack not defined, skipped",
-            status: "SKIPPED",
-            details: { output: cdkOutput, skipped: true }
-        });
-    }
-    let errorMessage = result.error || "Deployment failed";
-    if (cdkOutput.includes("failed:")) {
-        const errorMatch = cdkOutput.match(/failed: .*?: (.*?)(?:\n|$)/);
-        if (errorMatch) {
-            errorMessage = errorMatch[1];
-        }
-    }
-    logger.error("CdkService", "CDK deployment returned failure", {
-        errorMessage
-    });
-    return failure(errorMessage);
-}
-/**
- * Classify a bootstrap error into a user-friendly message.
- */
-export function analyseBootstrapError(errorInfo) {
-    if (errorInfo.includes("Access Denied") ||
-        errorInfo.includes("AccessDenied")) {
-        return "Access denied. Check your AWS credentials and permissions";
-    }
-    if (errorInfo.includes("ExpiredToken")) {
-        return "AWS credentials have expired. Please refresh your credentials";
-    }
-    if (errorInfo.includes("ENOTFOUND") || errorInfo.includes("ECONNREFUSED")) {
-        return "Network error. Please check your internet connection and try again";
-    }
-    if (errorInfo.includes("timeout")) {
-        return "Bootstrap operation timed out";
-    }
-    return formatInfrastructureError(errorInfo);
-}
-/**
- * Analyse CDK destroy result and classify it.
- */
-export function analyseDestroyResult(result) {
-    if (!result.success) {
-        const stackDoesNotExist = result.error.includes(STACK_NOT_FOUND_PATTERN) ||
-            result.error.includes(CDK_NO_STACKS_MATCH);
-        if (stackDoesNotExist) {
-            return success({
-                message: "Stack already deleted or does not exist",
-                details: { skipped: true }
-            });
-        }
-        return failure(result.error || "Destroy failed");
-    }
-    return success({ message: "Stack destroyed successfully" });
-}
-/**
- * Try to detect the actual CloudFormation stack name from a CDK output chunk.
- * CDK outputs the stack name in several formats during deployment.
- */
-export function detectStackNameFromChunk(chunk) {
-    // Pattern 1: "Deploying stack <name>"
-    const deployMatch = chunk.match(/Deploying stack\s+([^\s]+)/);
-    if (deployMatch) {
-        return { detected: true, stackName: deployMatch[1] };
-    }
-    // Pattern 2: "<stack-name> | <number>/<number> |"
-    const progressMatch = chunk.match(/^([^\s|]+)\s*\|\s*\d+\/\d+/m);
-    if (progressMatch) {
-        return { detected: true, stackName: progressMatch[1] };
-    }
-    // Pattern 3: "Stack ARN:" line contains the stack name
-    const arnMatch = chunk.match(/arn:aws:cloudformation:[^:]+:[^:]+:stack\/([^/]+)\//);
-    if (arnMatch) {
-        return { detected: true, stackName: arnMatch[1] };
-    }
-    return { detected: false };
-}
-/**
- * Create an enhanced output callback that detects the actual stack name from CDK output
- * and starts CloudFormation monitoring once detected.
- */
-export function createEnhancedOutputCallback(state, originalOutputCallback, cfnMonitor, onResourceProgress) {
-    return (chunk) => {
-        state.cdkOutput += chunk;
-        originalOutputCallback?.(chunk);
-        if (!state.stackDetected) {
-            const detection = detectStackNameFromChunk(chunk);
-            if (detection.detected && detection.stackName) {
-                state.actualStackName = detection.stackName;
-                state.stackDetected = true;
-            }
-            // Start monitoring once we detect the actual stack name
-            if (state.stackDetected && cfnMonitor && !state.monitoringPromise) {
-                state.monitoringPromise = startStackMonitoring(cfnMonitor, state.actualStackName, onResourceProgress);
-            }
-        }
-    };
-}
+import{logger as m}from"@fjall/util/logger";import{STACK_NOT_FOUND_PATTERN as p,CDK_NO_STACKS_MATCH as i}from"../../aws/utils/cloudformationEvents.js";import{success as n,failure as u}from"@fjall/generator";import{formatInfrastructureError as f}from"./CdkErrorFormatter.js";import{startStackMonitoring as k}from"./CdkEventMonitoring.js";function E(e,t,s){const r=new RegExp(`${s}[:\\s|]*.*?(?:stack has no resources|skipping deployment)`,"i").test(e),c=e.includes("no changes")||e.includes("Stack is up to date")||e.includes("No changes to deploy"),l=e.includes(i)||!t.success&&t.error.includes(i);if(t.success)return n({message:r?"Stack has no resources, skipped":c?"Infrastructure already up to date":"Deployment successful",status:c?"NO_CHANGES":void 0,details:{output:e,skipped:r}});if(l)return n({message:"Stack not defined, skipped",status:"SKIPPED",details:{output:e,skipped:!0}});let o=t.error||"Deployment failed";if(e.includes("failed:")){const d=e.match(/failed: .*?: (.*?)(?:\n|$)/);d&&(o=d[1])}return m.error("CdkService","CDK deployment returned failure",{errorMessage:o}),u(o)}function C(e){return e.includes("Access Denied")||e.includes("AccessDenied")?"Access denied. Check your AWS credentials and permissions":e.includes("ExpiredToken")?"AWS credentials have expired. Please refresh your credentials":e.includes("ENOTFOUND")||e.includes("ECONNREFUSED")?"Network error. Please check your internet connection and try again":e.includes("timeout")?"Bootstrap operation timed out":f(e)}function x(e){return e.success?n({message:"Stack destroyed successfully"}):e.error.includes(p)||e.error.includes(i)?n({message:"Stack already deleted or does not exist",details:{skipped:!0}}):u(e.error||"Destroy failed")}function N(e){const t=e.match(/Deploying stack\s+([^\s]+)/);if(t)return{detected:!0,stackName:t[1]};const s=e.match(/^([^\s|]+)\s*\|\s*\d+\/\d+/m);if(s)return{detected:!0,stackName:s[1]};const a=e.match(/arn:aws:cloudformation:[^:]+:[^:]+:stack\/([^/]+)\//);return a?{detected:!0,stackName:a[1]}:{detected:!1}}function A(e,t,s,a){return r=>{if(e.cdkOutput+=r,t?.(r),!e.stackDetected){const c=N(r);c.detected&&c.stackName&&(e.actualStackName=c.stackName,e.stackDetected=!0),e.stackDetected&&s&&!e.monitoringPromise&&(e.monitoringPromise=k(s,e.actualStackName,a))}}}export{C as analyseBootstrapError,E as analyseDeployOutput,x as analyseDestroyResult,A as createEnhancedOutputCallback,N as detectStackNameFromChunk};

package/dist/src/services/infrastructure/CdkProcessManager.js

@@ -1,278 +1,3 @@
-import { spawn } from "child_process";
-import { existsSync } from "fs";
-import { join } from "path";
-import { createRequire } from "module";
-import { logger } from "@fjall/util/logger";
-import { filterDangerousEnvVars, maskSensitiveOutput } from "@fjall/util";
-import { success, failure } from "@fjall/generator";
-import { getErrorMessage } from "@fjall/util";
-/**
- * Resolve CDK binary path from the caller's node_modules.
- * Falls back to "npx cdk" only if resolution fails (should never happen
- * since aws-cdk is a direct dependency of the calling package).
- */
-function getCdkBinaryPath() {
-    try {
-        const require = createRequire(import.meta.url);
-        const cdkEntry = require.resolve("aws-cdk/bin/cdk");
-        return { command: process.execPath, prefixArgs: [cdkEntry] };
-    }
-    catch (err) {
-        logger.debug("CdkService", "Failed to resolve aws-cdk binary, falling back to npx", { error: err instanceof Error ? err.message : String(err) });
-        return { command: "npx", prefixArgs: ["cdk"] };
-    }
-}
-const cdkBin = getCdkBinaryPath();
-/** Grace period before escalating from SIGTERM to SIGKILL on a stuck CDK process */
-const SIGKILL_GRACE_PERIOD_MS = 5_000;
-export class CdkProcessManager {
-    runningProcesses = new Map();
-    processCounter = 0;
-    argBuilder;
-    exitHandler;
-    sigintHandler;
-    sigtermHandler;
-    constructor(argBuilder) {
-        this.argBuilder = argBuilder;
-        // Register cleanup handlers (stored for deregistration)
-        this.exitHandler = () => this.cleanup();
-        this.sigintHandler = () => {
-            this.cleanup();
-            process.exit(130);
-        };
-        this.sigtermHandler = () => {
-            this.cleanup();
-            process.exit(143);
-        };
-        process.on("exit", this.exitHandler);
-        process.on("SIGINT", this.sigintHandler);
-        process.on("SIGTERM", this.sigtermHandler);
-    }
-    forceKillProcess(child) {
-        child.stdout?.destroy();
-        child.stderr?.destroy();
-        child.kill("SIGTERM");
-        const killTimer = setTimeout(() => {
-            if (child.exitCode === null) {
-                child.kill("SIGKILL");
-            }
-        }, SIGKILL_GRACE_PERIOD_MS);
-        killTimer.unref();
-        child.once("exit", () => clearTimeout(killTimer));
-    }
-    cleanup() {
-        for (const [_name, child] of this.runningProcesses) {
-            if (!child.killed) {
-                child.stdout?.destroy();
-                child.stderr?.destroy();
-                child.kill("SIGTERM");
-            }
-        }
-        this.runningProcesses.clear();
-    }
-    dispose() {
-        this.cleanup();
-        process.removeListener("exit", this.exitHandler);
-        process.removeListener("SIGINT", this.sigintHandler);
-        process.removeListener("SIGTERM", this.sigtermHandler);
-    }
-    async runCdkCommandPassthrough(workingDir, args, options) {
-        return new Promise((resolve) => {
-            if (!existsSync(workingDir)) {
-                resolve(failure(`Directory not found: ${workingDir}`));
-                return;
-            }
-            // Check for cdk.json in the working directory
-            const cdkJsonPath = join(workingDir, "cdk.json");
-            if (!existsSync(cdkJsonPath)) {
-                resolve(failure(`No CDK project found in ${workingDir}`));
-                return;
-            }
-            const contextArgs = this.argBuilder.buildContextArgs(options?.context);
-            const fullArgs = [...cdkBin.prefixArgs, ...args, ...contextArgs];
-            const env = this.argBuilder.buildCdkEnv(options);
-            // Run CDK with stdio: 'inherit' for direct terminal output
-            const child = spawn(cdkBin.command, fullArgs, {
-                cwd: workingDir,
-                env,
-                stdio: "inherit", // Pass through to terminal directly
-                shell: false,
-                detached: false
-            });
-            if (!child.pid) {
-                child.on("error", (err) => {
-                    logger.debug("CdkProcess", "Spawn error on failed child process", {
-                        error: err.message
-                    });
-                });
-                resolve(failure(`Failed to spawn CDK process - no PID. cwd=${workingDir}, args=${fullArgs.join(" ")}`));
-                return;
-            }
-            // Track process for cleanup
-            const processId = `cdk-passthrough-${++this.processCounter}`;
-            this.runningProcesses.set(processId, child);
-            let processKilled = false;
-            let settled = false;
-            // Timeout to prevent indefinite hangs (default 30 minutes, matching deploy)
-            const timeoutMs = options?.timeout ?? 30 * 60 * 1000;
-            const timeoutHandle = setTimeout(() => {
-                if (!child.killed) {
-                    processKilled = true;
-                    this.forceKillProcess(child);
-                }
-            }, timeoutMs);
-            child.on("close", (code) => {
-                clearTimeout(timeoutHandle);
-                this.runningProcesses.delete(processId);
-                if (settled)
-                    return;
-                settled = true;
-                if (processKilled) {
-                    resolve(failure("CDK command timed out"));
-                    return;
-                }
-                if (code === 0 || options?.ignoreExitCode) {
-                    resolve(success({ exitCode: code || 0 }));
-                }
-                else {
-                    resolve(failure(`CDK command failed with exit code ${code}`));
-                }
-            });
-            child.on("error", (err) => {
-                clearTimeout(timeoutHandle);
-                this.runningProcesses.delete(processId);
-                if (settled || processKilled)
-                    return;
-                settled = true;
-                resolve(failure(`Failed to run CDK command: ${err.message}`));
-            });
-        });
-    }
-    async runCdkCommand(workingDir, args, options) {
-        return new Promise((resolve) => {
-            if (!existsSync(workingDir)) {
-                resolve(failure(`Directory not found: ${workingDir}`));
-                return;
-            }
-            // Check for cdk.json unless caller explicitly skips (e.g., bootstrap runs from tmpdir)
-            if (!options?.skipProjectCheck) {
-                const cdkJsonPath = join(workingDir, "cdk.json");
-                if (!existsSync(cdkJsonPath)) {
-                    resolve(failure(`No CDK project found in ${workingDir}`));
-                    return;
-                }
-            }
-            let output = "";
-            let errorOutput = "";
-            let processKilled = false;
-            const contextArgs = this.argBuilder.buildContextArgs(options?.context);
-            const fullArgs = [...cdkBin.prefixArgs, ...args, ...contextArgs];
-            const env = {
-                ...this.argBuilder.buildCdkEnv(options),
-                NO_COLOR: "1",
-                ...(options?.extraEnv ? filterDangerousEnvVars(options.extraEnv) : {})
-            };
-            // Try to spawn the CDK process
-            logger.debug("CdkService", "Spawning CDK process", {
-                command: `${cdkBin.command} ${fullArgs.join(" ")}`,
-                workingDir
-            });
-            const child = spawn(cdkBin.command, fullArgs, {
-                cwd: workingDir,
-                env,
-                stdio: ["ignore", "pipe", "pipe"],
-                shell: false,
-                detached: false
-            });
-            // Check if spawn was successful
-            if (!child.pid) {
-                const spawnError = `Failed to spawn CDK process - no PID. cwd=${workingDir}, args=${fullArgs.join(" ")}`;
-                // CRITICAL: Attach error handler to prevent uncaught exception
-                // Node.js emits an async 'error' event on the child process even after spawn fails
-                // If we don't handle it, it becomes an uncaught exception and crashes the app
-                child.on("error", (err) => {
-                    logger.debug("CdkProcess", "Deferred spawn error on failed child process", {
-                        error: err.message
-                    });
-                });
-                resolve(failure(spawnError));
-                return;
-            }
-            // Track process for cleanup
-            const processId = `cdk-${++this.processCounter}`;
-            this.runningProcesses.set(processId, child);
-            let settled = false;
-            const timeoutMs = options?.timeout ?? 30 * 60 * 1000;
-            const timeoutHandle = setTimeout(() => {
-                if (!child.killed) {
-                    processKilled = true;
-                    this.forceKillProcess(child);
-                }
-            }, timeoutMs);
-            child.stdout?.on("data", (data) => {
-                const chunk = data.toString();
-                output += chunk;
-                if (options?.outputCallback) {
-                    options.outputCallback(maskSensitiveOutput(chunk));
-                }
-                options?.cdkOutputLogger?.writeCdkOutput("stdout", maskSensitiveOutput(chunk));
-            });
-            child.stderr?.on("data", (data) => {
-                const chunk = data.toString();
-                options?.cdkOutputLogger?.writeCdkOutput("stderr", maskSensitiveOutput(chunk));
-                // Filter out non-critical warnings from the in-memory error buffer
-                if (!chunk.includes("deprecated") &&
-                    !chunk.includes("npm WARN") &&
-                    !chunk.includes("ENOENT")) {
-                    errorOutput += chunk;
-                }
-                // Always send to callback for visibility
-                if (options?.errorCallback) {
-                    options.errorCallback(maskSensitiveOutput(chunk));
-                }
-            });
-            child.on("error", (error) => {
-                clearTimeout(timeoutHandle);
-                this.runningProcesses.delete(processId);
-                if (settled || processKilled)
-                    return;
-                settled = true;
-                resolve(failure(getErrorMessage(error)));
-            });
-            child.on("close", (code) => {
-                clearTimeout(timeoutHandle);
-                this.runningProcesses.delete(processId);
-                if (settled)
-                    return;
-                settled = true;
-                if (processKilled) {
-                    resolve(failure("CDK command timed out"));
-                    return;
-                }
-                const exitedClean = code === 0 || (options?.ignoreExitCode === true && code === 1);
-                // For diff command, we need to include stderr in output since CDK outputs errors there
-                const combinedOutput = output + (errorOutput ? `\n${errorOutput}` : "");
-                if (exitedClean) {
-                    const rawOutput = options?.combineOutput ? combinedOutput : output;
-                    resolve(success({
-                        output: maskSensitiveOutput(rawOutput),
-                        exitCode: code || 0
-                    }));
-                    return;
-                }
-                // Parse error output for meaningful messages (match on raw before masking)
-                let errorMessage = errorOutput;
-                if (output) {
-                    const errorMatch = output.match(/❌.*?Error:(.*)$/m);
-                    if (errorMatch) {
-                        errorMessage = errorMatch[1]?.trim() ?? "";
-                    }
-                }
-                // Include stdout in the error string so callers can pattern-match on combined output
-                const errorText = errorMessage || `CDK command failed with exit code ${code}`;
-                const fullError = output ? `${errorText}\n${output}` : errorText;
-                resolve(failure(maskSensitiveOutput(fullError)));
-            });
-        });
-    }
-}
+import{spawn as K}from"child_process";import{existsSync as E}from"fs";import{join as T}from"path";import{createRequire as A}from"module";import{logger as $}from"@fjall/util/logger";import{filterDangerousEnvVars as M,maskSensitiveOutput as g}from"@fjall/util";import{success as H,failure as i}from"@fjall/generator";import{getErrorMessage as w}from"@fjall/util";function L(){try{const e=A(import.meta.url).resolve("aws-cdk/bin/cdk");return{command:process.execPath,prefixArgs:[e]}}catch(h){return $.debug("CdkService","Failed to resolve aws-cdk binary, falling back to npx",{error:h instanceof Error?h.message:String(h)}),{command:"npx",prefixArgs:["cdk"]}}}const x=L(),j=5e3;class v{runningProcesses=new Map;processCounter=0;argBuilder;exitHandler;sigintHandler;sigtermHandler;constructor(e){this.argBuilder=e,this.exitHandler=()=>this.cleanup(),this.sigintHandler=()=>{this.cleanup(),process.exit(130)},this.sigtermHandler=()=>{this.cleanup(),process.exit(143)},process.on("exit",this.exitHandler),process.on("SIGINT",this.sigintHandler),process.on("SIGTERM",this.sigtermHandler)}forceKillProcess(e){e.stdout?.destroy(),e.stderr?.destroy(),e.kill("SIGTERM");const c=setTimeout(()=>{e.exitCode===null&&e.kill("SIGKILL")},j);c.unref(),e.once("exit",()=>clearTimeout(c))}cleanup(){for(const[e,c]of this.runningProcesses)c.killed||(c.stdout?.destroy(),c.stderr?.destroy(),c.kill("SIGTERM"));this.runningProcesses.clear()}dispose(){this.cleanup(),process.removeListener("exit",this.exitHandler),process.removeListener("SIGINT",this.sigintHandler),process.removeListener("SIGTERM",this.sigtermHandler)}async runCdkCommandPassthrough(e,c,r){return new Promise(t=>{if(!E(e)){t(i(`Directory not found: ${e}`));return}const a=T(e,"cdk.json");if(!E(a)){t(i(`No CDK project found in ${e}`));return}const m=this.argBuilder.buildContextArgs(r?.context),f=[...x.prefixArgs,...c,...m],S=this.argBuilder.buildCdkEnv(r),d=K(x.command,f,{cwd:e,env:S,stdio:"inherit",shell:!1,detached:!1});if(!d.pid){d.on("error",u=>{$.debug("CdkProcess","Spawn error on failed child process",{error:u.message})}),t(i(`Failed to spawn CDK process - no PID. cwd=${e}, args=${f.join(" ")}`));return}const C=`cdk-passthrough-${++this.processCounter}`;this.runningProcesses.set(C,d);let o=!1,l=!1;const p=r?.timeout??30*60*1e3,k=setTimeout(()=>{d.killed||(o=!0,this.forceKillProcess(d))},p);d.on("close",u=>{if(clearTimeout(k),this.runningProcesses.delete(C),!l){if(l=!0,o){t(i("CDK command timed out"));return}u===0||r?.ignoreExitCode?t(H({exitCode:u||0})):t(i(`CDK command failed with exit code ${u}`))}}),d.on("error",u=>{clearTimeout(k),this.runningProcesses.delete(C),!(l||o)&&(l=!0,t(i(`Failed to run CDK command: ${u.message}`)))})})}async runCdkCommand(e,c,r){return new Promise(t=>{if(!E(e)){t(i(`Directory not found: ${e}`));return}if(!r?.skipProjectCheck){const s=T(e,"cdk.json");if(!E(s)){t(i(`No CDK project found in ${e}`));return}}let a="",m="",f=!1;const S=this.argBuilder.buildContextArgs(r?.context),d=[...x.prefixArgs,...c,...S],C={...this.argBuilder.buildCdkEnv(r),NO_COLOR:"1",...r?.extraEnv?M(r.extraEnv):{}};$.debug("CdkService","Spawning CDK process",{command:`${x.command} ${d.join(" ")}`,workingDir:e});const o=K(x.command,d,{cwd:e,env:C,stdio:["ignore","pipe","pipe"],shell:!1,detached:!1});if(!o.pid){const s=`Failed to spawn CDK process - no PID. cwd=${e}, args=${d.join(" ")}`;o.on("error",n=>{$.debug("CdkProcess","Deferred spawn error on failed child process",{error:n.message})}),t(i(s));return}const l=`cdk-${++this.processCounter}`;this.runningProcesses.set(l,o);let p=!1;const k=r?.timeout??30*60*1e3,u=setTimeout(()=>{o.killed||(f=!0,this.forceKillProcess(o))},k);o.stdout?.on("data",s=>{const n=s.toString();a+=n,r?.outputCallback&&r.outputCallback(g(n)),r?.cdkOutputLogger?.writeCdkOutput("stdout",g(n))}),o.stderr?.on("data",s=>{const n=s.toString();r?.cdkOutputLogger?.writeCdkOutput("stderr",g(n)),!n.includes("deprecated")&&!n.includes("npm WARN")&&!n.includes("ENOENT")&&(m+=n),r?.errorCallback&&r.errorCallback(g(n))}),o.on("error",s=>{clearTimeout(u),this.runningProcesses.delete(l),!(p||f)&&(p=!0,t(i(w(s))))}),o.on("close",s=>{if(clearTimeout(u),this.runningProcesses.delete(l),p)return;if(p=!0,f){t(i("CDK command timed out"));return}const n=s===0||r?.ignoreExitCode===!0&&s===1,O=a+(m?`
+${m}`:"");if(n){const P=r?.combineOutput?O:a;t(H({output:g(P),exitCode:s||0}));return}let b=m;if(a){const P=a.match(/❌.*?Error:(.*)$/m);P&&(b=P[1]?.trim()??"")}const I=b||`CDK command failed with exit code ${s}`,y=a?`${I}
+${a}`:I;t(i(g(y)))})})}}export{v as CdkProcessManager};