@go-to-k/cdkd 0.100.1 → 0.100.2

package/README.md

@@ -358,7 +358,11 @@ state.json remains the canonical source of truth, and strong-reference
 safety checks scan it directly rather than trusting the index.
 
 See **[docs/cross-stack-references.md](docs/cross-stack-references.md)**
-for the full design (schema v4, lifecycle, locking, failure modes).
+for the full design (`Fn::ImportValue` strong-reference rules added in
+state schema v4, lifecycle, locking, failure modes). State schema is at
+v5 since v0.100.0; `DeletionPolicy` / `UpdateReplacePolicy` changes
+between deploys are now detected and surfaced (see
+[docs/state-management.md](docs/state-management.md)).
 
 ## Rollback behavior
 

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-CuHRHcyW.js";
-import { A as resolveCaptureObservedState, C as stringifyValue, D as getDefaultStateBucketName, E as Synthesizer, F as AssemblyReader, G as ProvisioningError, H as LocalInvokeBuildError, J as RouteDiscoveryError, K as ResourceTimeoutError, L as resolveBucketRegion, M as resolveStateBucketWithDefault, N as resolveStateBucketWithDefaultAndSource, O as getLegacyStateBucketName, P as warnDeprecatedNoPrefixCliFlag, S as AssetPublisher, T as buildDockerImage, W as PartialFailureError, X as StackTerminationProtectionError, Y as StackHasActiveImportsError, _ as DiffCalculator, a as withRetry, b as LockManager, c as collectInlinePolicyNamesManagedBySiblings, ct as PATTERN_B_NAME_PROPERTIES, d as normalizeAwsTagsToCfn, dt as generateResourceNameWithFallback, f as resolveExplicitPhysicalId, ft as withSkipPrefix, g as IntrinsicFunctionResolver, h as assertRegionMatch, i as withResourceDeadline, it as getLogger, j as resolveSkipPrefix, k as resolveApp, l as CDK_PATH_TAG, lt as PATTERN_B_RESOURCE_TYPES, m as CloudControlProvider, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as withErrorHandling, o as IMPLICIT_DELETE_DEPENDENCIES, ot as runStackBuffered, p as ProviderRegistry, pt as withStackName, q as ResourceUpdateNotSupportedError, r as DeployEngine, s as IAMRoleProvider, st as getLiveRenderer, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as normalizeAwsError, u as matchesCdkPath, ut as generateResourceName, v as DagBuilder, w as WorkGraph, x as S3StateBackend, y as TemplateParser, z as CdkdError } from "./deploy-engine-CYrZgRDF.js";
+import { A as resolveCaptureObservedState, C as stringifyValue, D as getDefaultStateBucketName, E as Synthesizer, F as AssemblyReader, G as ProvisioningError, H as LocalInvokeBuildError, J as RouteDiscoveryError, K as ResourceTimeoutError, L as resolveBucketRegion, M as resolveStateBucketWithDefault, N as resolveStateBucketWithDefaultAndSource, O as getLegacyStateBucketName, P as warnDeprecatedNoPrefixCliFlag, S as AssetPublisher, T as buildDockerImage, W as PartialFailureError, X as StackTerminationProtectionError, Y as StackHasActiveImportsError, _ as DiffCalculator, a as withRetry, b as LockManager, c as collectInlinePolicyNamesManagedBySiblings, ct as PATTERN_B_NAME_PROPERTIES, d as normalizeAwsTagsToCfn, dt as generateResourceNameWithFallback, f as resolveExplicitPhysicalId, ft as withSkipPrefix, g as IntrinsicFunctionResolver, h as assertRegionMatch, i as withResourceDeadline, it as getLogger, j as resolveSkipPrefix, k as resolveApp, l as CDK_PATH_TAG, lt as PATTERN_B_RESOURCE_TYPES, m as CloudControlProvider, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as withErrorHandling, o as IMPLICIT_DELETE_DEPENDENCIES, ot as runStackBuffered, p as ProviderRegistry, pt as withStackName, q as ResourceUpdateNotSupportedError, r as DeployEngine, s as IAMRoleProvider, st as getLiveRenderer, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as normalizeAwsError, u as matchesCdkPath, ut as generateResourceName, v as DagBuilder, w as WorkGraph, x as S3StateBackend, y as TemplateParser, z as CdkdError } from "./deploy-engine-H3Nughua.js";
 import { createHash, createPublicKey, createVerify, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListBucketsCommand, ListDirectoryBucketsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachUserPolicyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachUserPolicyCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListInstanceProfilesCommand, ListUserPoliciesCommand, ListUserTagsCommand, ListUsersCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagUserCommand, UntagUserCommand, UpdateLoginProfileCommand } from "@aws-sdk/client-iam";
@@ -42609,7 +42609,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.100.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.100.1");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());

package/dist/{deploy-engine-CYrZgRDF.js → deploy-engine-H3Nughua.js}

@@ -5417,6 +5417,95 @@ var IntrinsicFunctionResolver = class {
 			case "PolicyId": return;
 			default: return physicalId;
 		}
+		if (resourceType === "AWS::IAM::User") switch (attributeName) {
+			case "Arn": return `arn:${partition}:iam::${accountId}:user/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::IAM::Group") switch (attributeName) {
+			case "Arn": return `arn:${partition}:iam::${accountId}:group/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::IAM::InstanceProfile") switch (attributeName) {
+			case "Arn": return `arn:${partition}:iam::${accountId}:instance-profile/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::KMS::Key") switch (attributeName) {
+			case "Arn": return `arn:${partition}:kms:${region}:${accountId}:key/${physicalId}`;
+			case "KeyId": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::Cognito::UserPool") switch (attributeName) {
+			case "Arn": return `arn:${partition}:cognito-idp:${region}:${accountId}:userpool/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::Kinesis::Stream") switch (attributeName) {
+			case "Arn": return `arn:${partition}:kinesis:${region}:${accountId}:stream/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::Events::Rule") switch (attributeName) {
+			case "Arn": {
+				const busRaw = resource.properties?.["EventBusName"];
+				const bus = typeof busRaw === "string" && busRaw && busRaw !== "default" ? busRaw : "";
+				const busName = bus.startsWith("arn:") ? bus.split("/").pop() || "" : bus;
+				return busName ? `arn:${partition}:events:${region}:${accountId}:rule/${busName}/${physicalId}` : `arn:${partition}:events:${region}:${accountId}:rule/${physicalId}`;
+			}
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::Events::EventBus") switch (attributeName) {
+			case "Arn": return `arn:${partition}:events:${region}:${accountId}:event-bus/${physicalId}`;
+			case "Name": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::EFS::FileSystem") switch (attributeName) {
+			case "Arn": return `arn:${partition}:elasticfilesystem:${region}:${accountId}:file-system/${physicalId}`;
+			case "FileSystemId": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::KinesisFirehose::DeliveryStream") switch (attributeName) {
+			case "Arn": return `arn:${partition}:firehose:${region}:${accountId}:deliverystream/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::CodeBuild::Project") switch (attributeName) {
+			case "Arn": return `arn:${partition}:codebuild:${region}:${accountId}:project/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::CloudTrail::Trail") switch (attributeName) {
+			case "Arn": return `arn:${partition}:cloudtrail:${region}:${accountId}:trail/${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::AppSync::GraphQLApi") switch (attributeName) {
+			case "Arn": return `arn:${partition}:appsync:${region}:${accountId}:apis/${physicalId}`;
+			case "ApiId": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::ServiceDiscovery::PrivateDnsNamespace") switch (attributeName) {
+			case "Arn": return `arn:${partition}:servicediscovery:${region}:${accountId}:namespace/${physicalId}`;
+			case "Id": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::ServiceDiscovery::Service") switch (attributeName) {
+			case "Arn": return `arn:${partition}:servicediscovery:${region}:${accountId}:service/${physicalId}`;
+			case "Id": return physicalId;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::CloudWatch::Alarm") switch (attributeName) {
+			case "Arn": return `arn:${partition}:cloudwatch:${region}:${accountId}:alarm:${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::RDS::DBInstance" || resourceType === "AWS::DocDB::DBInstance" || resourceType === "AWS::Neptune::DBInstance") switch (attributeName) {
+			case "DBInstanceArn":
+			case "Arn": return `arn:${partition}:rds:${region}:${accountId}:db:${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::RDS::DBCluster" || resourceType === "AWS::DocDB::DBCluster" || resourceType === "AWS::Neptune::DBCluster") switch (attributeName) {
+			case "DBClusterArn":
+			case "Arn": return `arn:${partition}:rds:${region}:${accountId}:cluster:${physicalId}`;
+			default: return physicalId;
+		}
+		if (resourceType === "AWS::S3Express::DirectoryBucket") switch (attributeName) {
+			case "Arn": return `arn:${partition}:s3express:${region}:${accountId}:bucket/${physicalId}`;
+			default: return physicalId;
+		}
 		if (resourceType === "AWS::Lambda::Function") switch (attributeName) {
 			case "Arn": return `arn:${partition}:lambda:${region}:${accountId}:function:${physicalId}`;
 			default: return physicalId;
@@ -5456,10 +5545,6 @@ var IntrinsicFunctionResolver = class {
 			case "VpcId": return;
 			default: return physicalId;
 		}
-		if (resourceType === "AWS::EC2::VPC") switch (attributeName) {
-			case "VpcId": return physicalId;
-			default: return physicalId;
-		}
 		if (resourceType === "AWS::EC2::Subnet") switch (attributeName) {
 			case "SubnetId": return physicalId;
 			default: return physicalId;
@@ -9423,4 +9508,4 @@ var DeployEngine = class {
 
 //#endregion
 export { formatError as $, resolveCaptureObservedState as A, ConfigError as B, stringifyValue as C, getDefaultStateBucketName as D, Synthesizer as E, AssemblyReader as F, ProvisioningError as G, LocalInvokeBuildError as H, clearBucketRegionCache as I, RouteDiscoveryError as J, ResourceTimeoutError as K, resolveBucketRegion as L, resolveStateBucketWithDefault as M, resolveStateBucketWithDefaultAndSource as N, getLegacyStateBucketName as O, warnDeprecatedNoPrefixCliFlag as P, SynthesisError as Q, AssetError as R, AssetPublisher as S, buildDockerImage as T, LockError as U, DependencyError as V, PartialFailureError as W, StackTerminationProtectionError as X, StackHasActiveImportsError as Y, StateError as Z, DiffCalculator as _, withRetry as a, setLogger as at, LockManager as b, collectInlinePolicyNamesManagedBySiblings as c, PATTERN_B_NAME_PROPERTIES as ct, normalizeAwsTagsToCfn as d, generateResourceNameWithFallback as dt, isCdkdError as et, resolveExplicitPhysicalId as f, withSkipPrefix as ft, IntrinsicFunctionResolver as g, assertRegionMatch as h, withResourceDeadline as i, getLogger as it, resolveSkipPrefix as j, resolveApp as k, CDK_PATH_TAG as l, PATTERN_B_RESOURCE_TYPES as lt, CloudControlProvider as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, withErrorHandling as nt, IMPLICIT_DELETE_DEPENDENCIES as o, runStackBuffered as ot, ProviderRegistry as p, withStackName as pt, ResourceUpdateNotSupportedError as q, DeployEngine as r, ConsoleLogger as rt, IAMRoleProvider as s, getLiveRenderer as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, normalizeAwsError as tt, matchesCdkPath as u, generateResourceName as ut, DagBuilder as v, WorkGraph as w, S3StateBackend as x, TemplateParser as y, CdkdError as z };
-//# sourceMappingURL=deploy-engine-CYrZgRDF.js.map
+//# sourceMappingURL=deploy-engine-H3Nughua.js.map