@go-to-k/cdkd 0.159.3 → 0.161.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { _ as withSkipPrefix, a as runDockerStreaming, c as getLogger, d as getLiveRenderer, f as PATTERN_B_NAME_PROPERTIES, g as generateResourceNameWithFallback, h as generateResourceName, i as runDockerForeground, n as formatDockerLoginError, p as PATTERN_B_RESOURCE_TYPES, r as getDockerCmd, u as runStackBuffered, v as withStackName } from "./docker-cmd-iDMcWcre.js";
-import { $ as CdkdError, A as shouldRetainResource, B as resolveSkipPrefix, C as IntrinsicFunctionResolver, D as TemplateParser, E as DagBuilder, F as Synthesizer, G as CFN_TEMPLATE_URL_LIMIT, H as resolveStateBucketWithDefaultAndSource, I as getDefaultStateBucketName, J as uploadCfnTemplate, K as MIGRATE_TMP_PREFIX, L as getLegacyStateBucketName, M as stringifyValue, N as WorkGraph, O as LockManager, P as buildDockerImage, R as resolveApp, S as assertRegionMatch, T as DiffCalculator, U as warnDeprecatedNoPrefixCliFlag, V as resolveStateBucketWithDefault, W as CFN_TEMPLATE_BODY_LIMIT, Y as AssemblyReader, Z as resolveBucketRegion, _ as matchesCdkPath, a as withRetry, b as ProviderRegistry, bt as withErrorHandling, c as bold, ct as PartialFailureError, d as green, dt as ResourceUpdateNotSupportedError, f as red, ft as RouteDiscoveryError, g as CDK_PATH_TAG, h as collectInlinePolicyNamesManagedBySiblings, i as withResourceDeadline, it as LocalStartServiceError, j as AssetPublisher, k as S3StateBackend, l as cyan, lt as ProvisioningError, m as IAMRoleProvider, mt as StackTerminationProtectionError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as LocalInvokeBuildError, o as IMPLICIT_DELETE_DEPENDENCIES, ot as MissingCdkCliError, p as yellow, pt as StackHasActiveImportsError, q as findLargeInlineResources, r as DeployEngine, rt as LocalMigrateError, s as formatResourceLine, st as NestedStackChildDirectDestroyError, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as gray, ut as ResourceTimeoutError, v as normalizeAwsTagsToCfn, w as applyRoleArnIfSet, x as CloudControlProvider, y as resolveExplicitPhysicalId, yt as normalizeAwsError, z as resolveCaptureObservedState } from "./deploy-engine-BzrECC3i.js";
+import { A as S3StateBackend, B as resolveCaptureObservedState, C as assertRegionMatch, D as DagBuilder, E as DiffCalculator, F as buildDockerImage, G as CFN_TEMPLATE_BODY_LIMIT, H as resolveStateBucketWithDefault, I as Synthesizer, J as findLargeInlineResources, K as CFN_TEMPLATE_URL_LIMIT, L as getDefaultStateBucketName, M as AssetPublisher, N as stringifyValue, O as TemplateParser, P as WorkGraph, Q as resolveBucketRegion, R as getLegacyStateBucketName, S as CloudControlProvider, T as applyRoleArnIfSet, U as resolveStateBucketWithDefaultAndSource, V as resolveSkipPrefix, W as warnDeprecatedNoPrefixCliFlag, X as AssemblyReader, Y as uploadCfnTemplate, _ as matchesCdkPath, a as withRetry, at as LocalStartServiceError, b as ProviderRegistry, bt as normalizeAwsError, c as bold, ct as NestedStackChildDirectDestroyError, d as green, dt as ResourceTimeoutError, et as CdkdError, f as red, ft as ResourceUpdateNotSupportedError, g as CDK_PATH_TAG, h as collectInlinePolicyNamesManagedBySiblings, ht as StackTerminationProtectionError, i as withResourceDeadline, it as LocalMigrateError, j as shouldRetainResource, k as LockManager, l as cyan, lt as PartialFailureError, m as IAMRoleProvider, mt as StackHasActiveImportsError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as IMPLICIT_DELETE_DEPENDENCIES, p as yellow, pt as RouteDiscoveryError, q as MIGRATE_TMP_PREFIX, r as DeployEngine, rt as LocalInvokeBuildError, s as formatResourceLine, st as MissingCdkCliError, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as gray, ut as ProvisioningError, v as normalizeAwsTagsToCfn, w as IntrinsicFunctionResolver, x as findActionableSilentDrops, xt as withErrorHandling, y as resolveExplicitPhysicalId, z as resolveApp } from "./deploy-engine-BC1Z7ABm.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-B15NAPbL.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, createHmac, createPublicKey, createVerify, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -32190,7 +32190,10 @@ async function runDestroyForStack(stackName, state, ctx) {
 				const baseLabel = `Deleting ${logicalId} (${resource.resourceType})`;
 				renderer.addTask(logicalId, baseLabel);
 				try {
-					const provider = destroyProviderRegistry.getProvider(resource.resourceType);
+					const provider = destroyProviderRegistry.getProviderFor({
+						resourceType: resource.resourceType,
+						provisionedBy: resource.provisionedBy
+					}).provider;
 					const providerMinTimeoutMs = provider.getMinResourceTimeoutMs?.() ?? 0;
 					const warnAfterMs = ctx.resourceWarnAfterByType?.[resource.resourceType] ?? ctx.resourceWarnAfterMs ?? 3e5;
 					const globalTimeoutMs = ctx.resourceTimeoutMs ?? 18e5;
@@ -34306,7 +34309,7 @@ async function loadStateOrEmpty(stackName, region, stateBackend) {
 		region,
 		resources: {},
 		outputs: {},
-		version: 6,
+		version: 7,
 		lastModified: Date.now()
 	};
 }
@@ -34357,6 +34360,7 @@ async function buildDiffTree(args) {
 		displayName,
 		region,
 		changes: await computeStackDiff(state, template, region, stackName, stateBackend, diffCalculator),
+		ccApiRoutes: collectCcApiRoutes(template, state),
 		children: []
 	};
 	if (!recursive) return node;
@@ -34400,6 +34404,7 @@ async function buildDeletedSubtree(stackName, region, stateBackend, diffCalculat
 		displayName: stackName,
 		region,
 		changes: await computeStackDiff(state, EMPTY_TEMPLATE, region, stackName, stateBackend, diffCalculator),
+		ccApiRoutes: /* @__PURE__ */ new Map(),
 		children: []
 	};
 	for (const [logicalId, resource] of Object.entries(state.resources)) {
@@ -34408,6 +34413,52 @@ async function buildDeletedSubtree(stackName, region, stateBackend, diffCalculat
 	}
 	return node;
 }
+const EMPTY_ALLOW_SET = /* @__PURE__ */ new Set();
+/**
+* Walk every resource in `template` and return the logicalId → annotation
+* source map that #614's auto-fallback would route via Cloud Control API.
+*
+* Two annotation sources are merged into one map so the diff renderer
+* matches the live-progress label and the design §8 statement that the
+* `[via CC API: ...]` tag "stays visible whenever the resource has the
+* `provisionedBy: 'cc-api'` state field set OR is being introduced via the
+* auto-route":
+*
+*  - **Fresh hits**: a resource whose template uses one or more
+*    silent-drop top-level CFn properties. Annotation value is the list
+*    of property names (e.g. `LoggingConfig`).
+*  - **Sticky hits**: a resource whose deployed state records
+*    `provisionedBy: 'cc-api'` (from a prior deploy) even when the
+*    current template's silent-drop set is empty. Annotation value is
+*    the single token `sticky` so the renderer prints `[via CC API:
+*    sticky]` — the routing decision is unchanged but the tag stays
+*    visible per #614's sticky-state semantics.
+*
+* When both sources fire on the same resource, the fresh-hit prop list
+* wins (more informative). Empty allow-set:
+* `--allow-unsupported-properties` is a deploy-only flag, so diff
+* renders every actionable drop as an auto-route hint.
+*
+* Excludes `AWS::CDK::Metadata` (filtered like the deploy pre-flight); also
+* excludes `AWS::CloudFormation::Stack` rows since nested-stack children
+* recurse through their own templates rather than carrying CC-routable
+* properties on the parent's row.
+*/
+function collectCcApiRoutes(template, state) {
+	const hits = /* @__PURE__ */ new Map();
+	for (const [logicalId, resource] of Object.entries(template.Resources ?? {})) {
+		if (!resource) continue;
+		if (resource.Type === "AWS::CDK::Metadata") continue;
+		if (resource.Type === "AWS::CloudFormation::Stack") continue;
+		const drops = findActionableSilentDrops(resource.Type, resource.Properties, EMPTY_ALLOW_SET);
+		if (drops.length > 0) {
+			hits.set(logicalId, drops.map((d) => d.property));
+			continue;
+		}
+		if (state.resources[logicalId]?.provisionedBy === "cc-api") hits.set(logicalId, ["sticky"]);
+	}
+	return hits;
+}
 /** True when this node has at least one real (non-`NO_CHANGE`) change. */
 function nodeHasChanges(node) {
 	for (const change of node.changes.values()) if (change.changeType !== "NO_CHANGE") return true;
@@ -34428,12 +34479,14 @@ function diffTreeToJson(node) {
 	const changes = [];
 	for (const change of node.changes.values()) {
 		if (change.changeType === "NO_CHANGE") continue;
+		const ccApi = node.ccApiRoutes.get(change.logicalId);
 		changes.push({
 			logicalId: change.logicalId,
 			changeType: change.changeType,
 			resourceType: change.resourceType,
 			...change.propertyChanges && change.propertyChanges.length > 0 ? { propertyChanges: change.propertyChanges } : {},
-			...change.attributeChanges && change.attributeChanges.length > 0 ? { attributeChanges: change.attributeChanges } : {}
+			...change.attributeChanges && change.attributeChanges.length > 0 ? { attributeChanges: change.attributeChanges } : {},
+			...ccApi && ccApi.length > 0 ? { ccApi } : {}
 		});
 	}
 	return {
@@ -34497,19 +34550,30 @@ function stripUnchangedValues(value, other) {
 * Render one resource-change map into human-readable diff lines via `logFn`,
 * returning the per-type counts. Shared by the root stack block and every
 * nested-stack block.
+*
+* When `ccApiRoutes` is supplied, every CREATE / UPDATE line whose logical ID
+* appears in the map gets a `[via CC API: <props>]` suffix so the user sees
+* #614's auto-fallback decision at plan time. DELETE lines are not annotated
+* — the delete routing is recorded on each resource's `provisionedBy` state
+* field rather than re-derived from the template.
 */
-function renderChangeLines(changes, logFn) {
+function renderChangeLines(changes, logFn, ccApiRoutes) {
 	let createCount = 0;
 	let updateCount = 0;
 	let deleteCount = 0;
+	const annotateRouting = (logicalId) => {
+		const props = ccApiRoutes?.get(logicalId);
+		if (!props || props.length === 0) return "";
+		return ` [via CC API: ${props.join(", ")}]`;
+	};
 	for (const [logicalId, change] of changes.entries()) switch (change.changeType) {
 		case "CREATE":
 			createCount++;
-			logFn(`  [+] ${logicalId} (${change.resourceType})`);
+			logFn(`  [+] ${logicalId} (${change.resourceType})${annotateRouting(logicalId)}`);
 			break;
 		case "UPDATE":
 			updateCount++;
-			logFn(`  [~] ${logicalId} (${change.resourceType})`);
+			logFn(`  [~] ${logicalId} (${change.resourceType})${annotateRouting(logicalId)}`);
 			if (change.propertyChanges && change.propertyChanges.length > 0) for (const propChange of change.propertyChanges) {
 				const requiresReplace = propChange.requiresReplacement ? " [requires replacement]" : "";
 				const oldFiltered = stripUnchangedValues(propChange.oldValue, propChange.newValue);
@@ -34549,7 +34613,7 @@ function renderChangeLines(changes, logFn) {
 function renderDiffTree(node, isRoot, logFn) {
 	if (nodeHasChanges(node)) {
 		logFn(isRoot ? `\nStack ${node.stackName}:` : `\nNested stack: ${node.displayName}`);
-		const { create, update, delete: del } = renderChangeLines(node.changes, logFn);
+		const { create, update, delete: del } = renderChangeLines(node.changes, logFn, node.ccApiRoutes);
 		logFn(`\n${create} to create, ${update} to update, ${del} to delete`);
 	}
 	for (const child of node.children) renderDiffTree(child, false, logFn);
@@ -35078,7 +35142,10 @@ async function runDriftForStack(stackName, region, stateBackend, providerRegistr
 			}
 			let provider;
 			try {
-				provider = providerRegistry.getProvider(resource.resourceType);
+				provider = providerRegistry.getProviderFor({
+					resourceType: resource.resourceType,
+					provisionedBy: resource.provisionedBy
+				}).provider;
 			} catch {
 				outcomes.push({
 					kind: "unsupported",
@@ -35355,7 +35422,10 @@ async function runRevert(reports, providerRegistry, stateConfig, awsClients, opt
 					logger.error(`  ✗ ${report.stackName}/${outcome.logicalId} (${outcome.resourceType}): resource missing from state; skipped.`);
 					return;
 				}
-				const provider = providerRegistry.getProvider(outcome.resourceType);
+				const provider = providerRegistry.getProviderFor({
+					resourceType: outcome.resourceType,
+					provisionedBy: stateResource.provisionedBy
+				}).provider;
 				const desiredProperties = stateResource.observedProperties ?? stateResource.properties ?? {};
 				const newProperties = buildRevertNewProperties(outcome.changes, desiredProperties, outcome.awsProperties);
 				try {
@@ -35871,7 +35941,10 @@ var AttributeFetcher = class {
 		};
 		let provider;
 		try {
-			provider = this.providerRegistry.getProvider(orphan.resourceType);
+			provider = this.providerRegistry.getProviderFor({
+				resourceType: orphan.resourceType,
+				provisionedBy: orphan.provisionedBy
+			}).provider;
 		} catch (err) {
 			return {
 				ok: false,
@@ -39741,6 +39814,8 @@ function renderStateBlock(state, lockInfo) {
 		lines.push(logicalId);
 		lines.push(`  Type: ${resource.resourceType}`);
 		lines.push(`  PhysicalID: ${resource.physicalId}`);
+		const provisionedBy = resource.provisionedBy ?? "(sdk, legacy default)";
+		lines.push(`  ProvisionedBy: ${provisionedBy}`);
 		const deps = resource.dependencies ?? [];
 		lines.push(`  Dependencies: ${deps.length > 0 ? deps.join(", ") : "(none)"}`);
 		const attrEntries = Object.entries(resource.attributes ?? {});
@@ -40371,7 +40446,10 @@ async function refreshObservedForStack(stackName, region, stateBackend, lockMana
 		for (const [, resource] of entries) {
 			let provider;
 			try {
-				provider = providerRegistry.getProvider(resource.resourceType);
+				provider = providerRegistry.getProviderFor({
+					resourceType: resource.resourceType,
+					provisionedBy: resource.provisionedBy
+				}).provider;
 			} catch {
 				wouldUnsupported++;
 				continue;
@@ -40400,7 +40478,10 @@ async function refreshObservedForStack(stackName, region, stateBackend, lockMana
 				}
 				let provider;
 				try {
-					provider = providerRegistry.getProvider(resource.resourceType);
+					provider = providerRegistry.getProviderFor({
+						resourceType: resource.resourceType,
+						provisionedBy: resource.provisionedBy
+					}).provider;
 				} catch {
 					unsupported++;
 					return;
@@ -40939,11 +41020,12 @@ function buildStackState(stackName, region, rows, templateParser, template, exis
 			resourceType: row.resourceType,
 			properties: tmplResource.Properties ?? {},
 			attributes: {},
-			dependencies: [...deps]
+			dependencies: [...deps],
+			provisionedBy: "sdk"
 		};
 	}
 	return {
-		version: 6,
+		version: 7,
 		stackName,
 		region,
 		resources,
@@ -41136,7 +41218,10 @@ async function captureObservedForImportedResources(stackState, providerRegistry,
 	if (entries.length === 0) return;
 	await Promise.all(entries.map(async ([logicalId, resource]) => {
 		try {
-			const provider = providerRegistry.getProvider(resource.resourceType);
+			const provider = providerRegistry.getProviderFor({
+				resourceType: resource.resourceType,
+				provisionedBy: resource.provisionedBy
+			}).provider;
 			if (!provider.readCurrentState) return;
 			const observed = await provider.readCurrentState(resource.physicalId, logicalId, resource.resourceType, resource.properties ?? {}, buildReadCurrentStateContext(stackState, logicalId));
 			if (observed !== void 0) resource.observedProperties = observed;
@@ -59513,7 +59598,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.159.3");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.161.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());