@go-to-k/cdkd 0.147.0 → 0.147.2

package/dist/{deploy-engine-DjnWyAAc.js → deploy-engine-CRxNgcqJ.js}

@@ -287,6 +287,51 @@ var StackTerminationProtectionError = class StackTerminationProtectionError exte
 	}
 };
 /**
+* `cdkd destroy <child>` refused because the named stack is a nested
+* child of another stack. Mirrors CloudFormation's `you can't directly
+* destroy a nested stack` semantic — destroying the child without
+* touching the parent would leave the parent's `AWS::CloudFormation::Stack`
+* record pointing at non-existent resources, and the parent's next
+* deploy would silently try to re-create them.
+*
+* Detected by reading the loaded state's v6 `parentStack` field — only
+* state files written by `NestedStackProvider.create` (or by the
+* recursive `cdkd import --migrate-from-cloudformation` walk) carry
+* this field; top-level stacks have `parentStack: undefined` and pass
+* the guard unchanged.
+*
+* Fires from `cdkd destroy` AFTER state load but BEFORE lock
+* acquisition or any per-resource delete, so the refusal is cheap.
+* Surfaced as a per-stack failure (wrapped in {@link PartialFailureError},
+* exit code 2) in multi-stack runs — siblings continue.
+*
+* Bypass paths (both intentional escape hatches):
+*
+*  1. `cdkd destroy <parent>` — the normal cascading-destroy path; the
+*     parent's reverse-DAG walks into the child via
+*     `NestedStackProvider.delete` and removes both layers atomically.
+*  2. `cdkd state destroy <child>` — state-only destroy with no parent
+*     coupling check. The state-driven entry point intentionally
+*     bypasses this guard for the same reason `cdkd state destroy`
+*     bypasses `terminationProtection`: it's the "I know what I'm
+*     doing" path for cleaning up state when synth is unavailable or
+*     the user accepts leaving the parent's reference dangling.
+*/
+var NestedStackChildDirectDestroyError = class NestedStackChildDirectDestroyError extends CdkdError {
+	stackName;
+	parentStack;
+	parentLogicalId;
+	constructor(stackName, parentStack, parentLogicalId, cause) {
+		const logicalIdSuffix = parentLogicalId ? ` (parent's logical id: ${parentLogicalId})` : "";
+		super(`Stack '${stackName}' is a nested child of '${parentStack}'${logicalIdSuffix}; directly destroying a nested stack is not supported. Either run 'cdkd destroy ${parentStack}' to cascade-delete this child along with its parent, or run 'cdkd state destroy ${stackName}' if you intentionally want to leave the parent's reference dangling (the state-only escape hatch).`, "NESTED_STACK_CHILD_DIRECT_DESTROY", cause);
+		this.stackName = stackName;
+		this.parentStack = parentStack;
+		if (parentLogicalId !== void 0) this.parentLogicalId = parentLogicalId;
+		this.name = "NestedStackChildDirectDestroyError";
+		Object.setPrototypeOf(this, NestedStackChildDirectDestroyError.prototype);
+	}
+};
+/**
 * `cdkd destroy <producer>` refused because at least one consumer stack
 * still records an `Fn::ImportValue` reference to one of the producer's
 * outputs. This matches CloudFormation's strong-reference semantics —
@@ -9924,5 +9969,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { ConfigError as $, AssetPublisher as A, resolveStateBucketWithDefault as B, applyRoleArnIfSet as C, LockManager as D, TemplateParser as E, getDefaultStateBucketName as F, MIGRATE_TMP_PREFIX as G, warnDeprecatedNoPrefixCliFlag as H, getLegacyStateBucketName as I, AssemblyReader as J, findLargeInlineResources as K, resolveApp as L, WorkGraph as M, buildDockerImage as N, S3StateBackend as O, Synthesizer as P, CdkdError as Q, resolveCaptureObservedState as R, IntrinsicFunctionResolver as S, DagBuilder as T, CFN_TEMPLATE_BODY_LIMIT as U, resolveStateBucketWithDefaultAndSource as V, CFN_TEMPLATE_URL_LIMIT as W, resolveBucketRegion as X, clearBucketRegionCache as Y, AssetError as Z, normalizeAwsTagsToCfn as _, normalizeAwsError as _t, withRetry as a, MissingCdkCliError as at, CloudControlProvider as b, cyan as c, ResourceTimeoutError as ct, red as d, StackHasActiveImportsError as dt, DependencyError as et, yellow as f, StackTerminationProtectionError as ft, matchesCdkPath as g, isCdkdError as gt, CDK_PATH_TAG as h, formatError as ht, withResourceDeadline as i, LockError as it, stringifyValue as j, shouldRetainResource as k, gray as l, ResourceUpdateNotSupportedError as lt, collectInlinePolicyNamesManagedBySiblings as m, SynthesisError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, LocalMigrateError as nt, IMPLICIT_DELETE_DEPENDENCIES as o, PartialFailureError as ot, IAMRoleProvider as p, StateError as pt, uploadCfnTemplate as q, DeployEngine as r, LocalStartServiceError as rt, bold as s, ProvisioningError as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, LocalInvokeBuildError as tt, green as u, RouteDiscoveryError as ut, resolveExplicitPhysicalId as v, withErrorHandling as vt, DiffCalculator as w, assertRegionMatch as x, ProviderRegistry as y, resolveSkipPrefix as z };
-//# sourceMappingURL=deploy-engine-DjnWyAAc.js.map
+export { ConfigError as $, AssetPublisher as A, resolveStateBucketWithDefault as B, applyRoleArnIfSet as C, LockManager as D, TemplateParser as E, getDefaultStateBucketName as F, MIGRATE_TMP_PREFIX as G, warnDeprecatedNoPrefixCliFlag as H, getLegacyStateBucketName as I, AssemblyReader as J, findLargeInlineResources as K, resolveApp as L, WorkGraph as M, buildDockerImage as N, S3StateBackend as O, Synthesizer as P, CdkdError as Q, resolveCaptureObservedState as R, IntrinsicFunctionResolver as S, DagBuilder as T, CFN_TEMPLATE_BODY_LIMIT as U, resolveStateBucketWithDefaultAndSource as V, CFN_TEMPLATE_URL_LIMIT as W, resolveBucketRegion as X, clearBucketRegionCache as Y, AssetError as Z, normalizeAwsTagsToCfn as _, isCdkdError as _t, withRetry as a, MissingCdkCliError as at, CloudControlProvider as b, cyan as c, ProvisioningError as ct, red as d, RouteDiscoveryError as dt, DependencyError as et, yellow as f, StackHasActiveImportsError as ft, matchesCdkPath as g, formatError as gt, CDK_PATH_TAG as h, SynthesisError as ht, withResourceDeadline as i, LockError as it, stringifyValue as j, shouldRetainResource as k, gray as l, ResourceTimeoutError as lt, collectInlinePolicyNamesManagedBySiblings as m, StateError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, LocalMigrateError as nt, IMPLICIT_DELETE_DEPENDENCIES as o, NestedStackChildDirectDestroyError as ot, IAMRoleProvider as p, StackTerminationProtectionError as pt, uploadCfnTemplate as q, DeployEngine as r, LocalStartServiceError as rt, bold as s, PartialFailureError as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, LocalInvokeBuildError as tt, green as u, ResourceUpdateNotSupportedError as ut, resolveExplicitPhysicalId as v, normalizeAwsError as vt, DiffCalculator as w, assertRegionMatch as x, ProviderRegistry as y, withErrorHandling as yt, resolveSkipPrefix as z };
+//# sourceMappingURL=deploy-engine-CRxNgcqJ.js.map