@go-to-k/cdkd 0.152.1 → 0.153.0

package/dist/{deploy-engine-CpPWAdiO.js → deploy-engine-9Ct1Z9oH.js}

@@ -5423,6 +5423,69 @@ async function applyRoleArnIfSet(opts) {
 * This is used for conditional property omission in CloudFormation templates.
 */
 const AWS_NO_VALUE = Symbol("AWS::NoValue");
+/**
+* Intrinsic-function keys the resolver knows how to handle.
+*
+* A CloudFormation intrinsic is ALWAYS a single-key object — `{ "Ref": ... }`
+* or `{ "Fn::X": ... }`. When `resolveValue` encounters a single-key object
+* whose key is `Ref` or starts with `Fn::` but is NOT in this set, it throws
+* (rather than silently passing the broken value through to the provider).
+*
+* `Fn::Transform` (CloudFormation macros) is intentionally treated as handled:
+* it is expanded server-side at the SYNTHESIS layer (see
+* `src/synthesis/macro-expander.ts`, routed via `Synthesizer`) BEFORE the
+* resolver ever runs, so by resolution time it should already be gone. Listing
+* it here keeps a stray (already-expanded) occurrence from hard-erroring.
+*/
+const HANDLED_INTRINSIC_KEYS = new Set([
+	"Ref",
+	"Fn::GetAtt",
+	"Fn::Join",
+	"Fn::Sub",
+	"Fn::Select",
+	"Fn::Split",
+	"Fn::If",
+	"Fn::Equals",
+	"Fn::And",
+	"Fn::Or",
+	"Fn::Not",
+	"Fn::ImportValue",
+	"Fn::GetStackOutput",
+	"Fn::FindInMap",
+	"Fn::Base64",
+	"Fn::GetAZs",
+	"Fn::Cidr",
+	"Fn::Transform"
+]);
+/**
+* Detect an unresolved / unknown CloudFormation intrinsic function.
+*
+* A CloudFormation intrinsic is ALWAYS a single-key object whose key is `Ref`
+* or starts with `Fn::`. Requiring EXACTLY ONE key avoids false positives on a
+* real resource property that happens to be literally named `Ref` or
+* `Fn::Something` (those would be multi-key objects, or sit alongside sibling
+* keys), so only a genuine lone intrinsic node is flagged.
+*
+* @returns the unknown intrinsic key (e.g. `Fn::ToJsonString`) or `undefined`
+*   when the object is not an unknown single-key intrinsic.
+*/
+function detectUnknownIntrinsicKey(obj) {
+	const keys = Object.keys(obj);
+	if (keys.length !== 1) return;
+	const key = keys[0];
+	if (key !== "Ref" && !key.startsWith("Fn::")) return;
+	if (HANDLED_INTRINSIC_KEYS.has(key)) return;
+	return key;
+}
+/**
+* Build a clear, English error message for an unsupported intrinsic, including
+* a one-click pre-filled GitHub issue link so users can request support.
+*/
+function buildUnknownIntrinsicError(key) {
+	const title = `Support intrinsic ${key}`;
+	const issueUrl = `https://github.com/go-to-k/cdkd/issues/new?title=${encodeURIComponent(title)}&labels=intrinsic-support`;
+	return /* @__PURE__ */ new Error(`Unsupported CloudFormation intrinsic function "${key}": cdkd does not support resolving it yet. Deploying this template would produce a broken value. Please request support by opening an issue: ${issueUrl}`);
+}
 let cachedAccountInfo = null;
 /**
 * Cache for availability zones per region
@@ -5588,6 +5651,8 @@ var IntrinsicFunctionResolver = class {
 		if ("Fn::Base64" in obj) return await this.resolveBase64(obj["Fn::Base64"], context);
 		if ("Fn::GetAZs" in obj) return await this.resolveGetAZs(obj["Fn::GetAZs"], context);
 		if ("Fn::Cidr" in obj) return await this.resolveCidr(obj["Fn::Cidr"], context);
+		const unknownIntrinsicKey = detectUnknownIntrinsicKey(obj);
+		if (unknownIntrinsicKey !== void 0) throw buildUnknownIntrinsicError(unknownIntrinsicKey);
 		const resolved = {};
 		for (const [key, val] of Object.entries(obj)) {
 			const resolvedVal = await this.resolveValue(val, context);
@@ -8530,6 +8595,32 @@ const cyan = (s) => `${codes.cyan}${s}${codes.reset}`;
 const gray = (s) => `${codes.gray}${s}${codes.reset}`;
 const bold = (s) => `${codes.bright}${s}${codes.reset}`;
 
+//#endregion
+//#region src/utils/resource-line.ts
+/**
+* Format the per-resource status line printed by `cdkd deploy` / `cdkd destroy`.
+*
+* All three operations share the layout `<glyph> <id> (<type>) <verb>`; callers
+* prepend their own prefix (a two-space indent, or a `[current/total] ` counter).
+*
+* Every successful op uses a green/colored check (✓), NOT a cross (✗): the op
+* succeeded, and a red ✗ reads as a failure — which is exactly what the separate
+* "✗ Failed to delete" error path prints. The op is distinguished by COLOR, not
+* glyph: green = created, yellow = updated, green-check-with-red-verb = deleted
+* (the verb stays red to keep the destructive nature of the delete visible).
+*
+* `verbOverride` replaces the default verb word (e.g. `'updated (metadata)'` for
+* a metadata-only update) while keeping the op's glyph and color.
+*/
+function formatResourceLine(op, logicalId, resourceType, verbOverride) {
+	const body = `${bold(logicalId)} ${gray(`(${resourceType})`)}`;
+	switch (op) {
+		case "created": return `${green("✓")} ${body} ${green(verbOverride ?? "created")}`;
+		case "updated": return `${yellow("✓")} ${body} ${yellow(verbOverride ?? "updated")}`;
+		case "deleted": return `${green("✓")} ${body} ${red(verbOverride ?? "deleted")}`;
+	}
+}
+
 //#endregion
 //#region src/deployment/dag-executor.ts
 /**
@@ -9635,7 +9726,7 @@ var DeployEngine = class {
 				if (progress) progress.current++;
 				const createPrefix = progress ? `[${progress.current}/${progress.total}] ` : "  ";
 				renderer.removeTask(logicalId);
-				this.logger.info(`${createPrefix}${green("✓")} ${bold(logicalId)} ${gray(`(${resourceType})`)} ${green("created")}`);
+				this.logger.info(`${createPrefix}${formatResourceLine("created", logicalId, resourceType)}`);
 				break;
 			}
 			case "UPDATE": {
@@ -9662,7 +9753,7 @@ var DeployEngine = class {
 						if (progress) progress.current++;
 						const attrPrefix = progress ? `[${progress.current}/${progress.total}] ` : "  ";
 						renderer.removeTask(logicalId);
-						this.logger.info(`${attrPrefix}${yellow("~")} ${bold(logicalId)} ${gray(`(${resourceType})`)} ${yellow("updated (metadata)")}`);
+						this.logger.info(`${attrPrefix}${formatResourceLine("updated", logicalId, resourceType, "updated (metadata)")}`);
 						break;
 					}
 					this.logger.debug(`Skipping ${logicalId}: no actual changes after intrinsic function resolution`);
@@ -9741,7 +9832,7 @@ var DeployEngine = class {
 					if (progress) progress.current++;
 					const updatePrefix = progress ? `[${progress.current}/${progress.total}] ` : "  ";
 					renderer.removeTask(logicalId);
-					this.logger.info(`${updatePrefix}${yellow("~")} ${bold(logicalId)} ${gray(`(${resourceType})`)} ${yellow("updated")}`);
+					this.logger.info(`${updatePrefix}${formatResourceLine("updated", logicalId, resourceType)}`);
 				}
 				break;
 			}
@@ -9767,7 +9858,7 @@ var DeployEngine = class {
 				if (progress) progress.current++;
 				const deletePrefix = progress ? `[${progress.current}/${progress.total}] ` : "  ";
 				renderer.removeTask(logicalId);
-				this.logger.info(`${deletePrefix}${red("✗")} ${bold(logicalId)} ${gray(`(${resourceType})`)} ${red("deleted")}`);
+				this.logger.info(`${deletePrefix}${formatResourceLine("deleted", logicalId, resourceType)}`);
 				break;
 			}
 		}
@@ -9973,5 +10064,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { ConfigError as $, AssetPublisher as A, resolveStateBucketWithDefault as B, applyRoleArnIfSet as C, LockManager as D, TemplateParser as E, getDefaultStateBucketName as F, MIGRATE_TMP_PREFIX as G, warnDeprecatedNoPrefixCliFlag as H, getLegacyStateBucketName as I, AssemblyReader as J, findLargeInlineResources as K, resolveApp as L, WorkGraph as M, buildDockerImage as N, S3StateBackend as O, Synthesizer as P, CdkdError as Q, resolveCaptureObservedState as R, IntrinsicFunctionResolver as S, DagBuilder as T, CFN_TEMPLATE_BODY_LIMIT as U, resolveStateBucketWithDefaultAndSource as V, CFN_TEMPLATE_URL_LIMIT as W, resolveBucketRegion as X, clearBucketRegionCache as Y, AssetError as Z, normalizeAwsTagsToCfn as _, isCdkdError as _t, withRetry as a, MissingCdkCliError as at, CloudControlProvider as b, cyan as c, ProvisioningError as ct, red as d, RouteDiscoveryError as dt, DependencyError as et, yellow as f, StackHasActiveImportsError as ft, matchesCdkPath as g, formatError as gt, CDK_PATH_TAG as h, SynthesisError as ht, withResourceDeadline as i, LockError as it, stringifyValue as j, shouldRetainResource as k, gray as l, ResourceTimeoutError as lt, collectInlinePolicyNamesManagedBySiblings as m, StateError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, LocalMigrateError as nt, IMPLICIT_DELETE_DEPENDENCIES as o, NestedStackChildDirectDestroyError as ot, IAMRoleProvider as p, StackTerminationProtectionError as pt, uploadCfnTemplate as q, DeployEngine as r, LocalStartServiceError as rt, bold as s, PartialFailureError as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, LocalInvokeBuildError as tt, green as u, ResourceUpdateNotSupportedError as ut, resolveExplicitPhysicalId as v, normalizeAwsError as vt, DiffCalculator as w, assertRegionMatch as x, ProviderRegistry as y, withErrorHandling as yt, resolveSkipPrefix as z };
-//# sourceMappingURL=deploy-engine-CpPWAdiO.js.map
+export { CdkdError as $, shouldRetainResource as A, resolveSkipPrefix as B, IntrinsicFunctionResolver as C, TemplateParser as D, DagBuilder as E, Synthesizer as F, CFN_TEMPLATE_URL_LIMIT as G, resolveStateBucketWithDefaultAndSource as H, getDefaultStateBucketName as I, uploadCfnTemplate as J, MIGRATE_TMP_PREFIX as K, getLegacyStateBucketName as L, stringifyValue as M, WorkGraph as N, LockManager as O, buildDockerImage as P, AssetError as Q, resolveApp as R, assertRegionMatch as S, DiffCalculator as T, warnDeprecatedNoPrefixCliFlag as U, resolveStateBucketWithDefault as V, CFN_TEMPLATE_BODY_LIMIT as W, clearBucketRegionCache as X, AssemblyReader as Y, resolveBucketRegion as Z, matchesCdkPath as _, formatError as _t, withRetry as a, LockError as at, ProviderRegistry as b, withErrorHandling as bt, bold as c, PartialFailureError as ct, green as d, ResourceUpdateNotSupportedError as dt, ConfigError as et, red as f, RouteDiscoveryError as ft, CDK_PATH_TAG as g, SynthesisError as gt, collectInlinePolicyNamesManagedBySiblings as h, StateError as ht, withResourceDeadline as i, LocalStartServiceError as it, AssetPublisher as j, S3StateBackend as k, cyan as l, ProvisioningError as lt, IAMRoleProvider as m, StackTerminationProtectionError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, LocalInvokeBuildError as nt, IMPLICIT_DELETE_DEPENDENCIES as o, MissingCdkCliError as ot, yellow as p, StackHasActiveImportsError as pt, findLargeInlineResources as q, DeployEngine as r, LocalMigrateError as rt, formatResourceLine as s, NestedStackChildDirectDestroyError as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, DependencyError as tt, gray as u, ResourceTimeoutError as ut, normalizeAwsTagsToCfn as v, isCdkdError as vt, applyRoleArnIfSet as w, CloudControlProvider as x, resolveExplicitPhysicalId as y, normalizeAwsError as yt, resolveCaptureObservedState as z };
+//# sourceMappingURL=deploy-engine-9Ct1Z9oH.js.map