@go-to-k/cdkd 0.184.0 → 0.185.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { _ as withSkipPrefix, a as runDockerStreaming, c as getLogger, d as getLiveRenderer, f as PATTERN_B_NAME_PROPERTIES, g as generateResourceNameWithFallback, h as generateResourceName, i as runDockerForeground, n as formatDockerLoginError, p as PATTERN_B_RESOURCE_TYPES, r as getDockerCmd, u as runStackBuffered, v as withStackName } from "./docker-cmd-iDMcWcre.js";
-import { A as S3StateBackend, B as resolveCaptureObservedState, C as assertRegionMatch, D as DagBuilder, E as DiffCalculator, F as buildDockerImage, G as CFN_TEMPLATE_BODY_LIMIT, H as resolveStateBucketWithDefault, I as Synthesizer, J as findLargeInlineResources, K as CFN_TEMPLATE_URL_LIMIT, L as getDefaultStateBucketName, M as AssetPublisher, N as stringifyValue, O as TemplateParser, P as WorkGraph, Q as resolveBucketRegion, R as getLegacyStateBucketName, S as CloudControlProvider, T as applyRoleArnIfSet, U as resolveStateBucketWithDefaultAndSource, V as resolveSkipPrefix, W as warnDeprecatedNoPrefixCliFlag, X as AssemblyReader, Y as uploadCfnTemplate, _ as matchesCdkPath, a as withRetry, at as LocalStartServiceError, b as ProviderRegistry, bt as withErrorHandling, c as bold, ct as NestedStackChildDirectDestroyError, d as green, dt as ResourceTimeoutError, et as CdkdError, f as red, ft as ResourceUpdateNotSupportedError, g as CDK_PATH_TAG, h as collectInlinePolicyNamesManagedBySiblings, i as withResourceDeadline, it as LocalMigrateError, j as shouldRetainResource, k as LockManager, l as cyan, lt as PartialFailureError, m as IAMRoleProvider, mt as StackTerminationProtectionError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as IMPLICIT_DELETE_DEPENDENCIES, p as yellow, pt as StackHasActiveImportsError, q as MIGRATE_TMP_PREFIX, r as DeployEngine, rt as LocalInvokeBuildError$1, s as formatResourceLine, st as MissingCdkCliError, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as gray, ut as ProvisioningError, v as normalizeAwsTagsToCfn, w as IntrinsicFunctionResolver, x as findActionableSilentDrops, y as resolveExplicitPhysicalId, yt as normalizeAwsError, z as resolveApp } from "./deploy-engine-J_495u9C.js";
+import { A as S3StateBackend, B as resolveCaptureObservedState, C as assertRegionMatch, D as DagBuilder, E as DiffCalculator, F as buildDockerImage, G as CFN_TEMPLATE_BODY_LIMIT, H as resolveStateBucketWithDefault, I as Synthesizer, J as findLargeInlineResources, K as CFN_TEMPLATE_URL_LIMIT, L as getDefaultStateBucketName, M as AssetPublisher, N as stringifyValue, O as TemplateParser, P as WorkGraph, Q as resolveBucketRegion, R as getLegacyStateBucketName, S as CloudControlProvider, T as applyRoleArnIfSet, U as resolveStateBucketWithDefaultAndSource, V as resolveSkipPrefix, W as warnDeprecatedNoPrefixCliFlag, X as AssemblyReader, Y as uploadCfnTemplate, _ as matchesCdkPath, a as withRetry, at as LocalStartServiceError, b as ProviderRegistry, bt as withErrorHandling, c as bold, ct as NestedStackChildDirectDestroyError, d as green, dt as ResourceTimeoutError, et as CdkdError, f as red, ft as ResourceUpdateNotSupportedError, g as CDK_PATH_TAG, h as collectInlinePolicyNamesManagedBySiblings, i as withResourceDeadline, it as LocalMigrateError, j as shouldRetainResource, k as LockManager, l as cyan, lt as PartialFailureError, m as IAMRoleProvider, mt as StackTerminationProtectionError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as IMPLICIT_DELETE_DEPENDENCIES, p as yellow, pt as StackHasActiveImportsError, q as MIGRATE_TMP_PREFIX, r as DeployEngine, rt as LocalInvokeBuildError$1, s as formatResourceLine, st as MissingCdkCliError, t as DEFAULT_RESOURCE_TIMEOUT_MS, u as gray, ut as ProvisioningError, v as normalizeAwsTagsToCfn, w as IntrinsicFunctionResolver, x as findActionableSilentDrops, y as resolveExplicitPhysicalId, yt as normalizeAwsError, z as resolveApp } from "./deploy-engine-D2zFFHWI.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-B15NAPbL.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -7809,7 +7809,8 @@ var LambdaPermissionProvider = class {
 		"SourceAccount",
 		"PrincipalOrgID",
 		"EventSourceToken",
-		"FunctionUrlAuthType"
+		"FunctionUrlAuthType",
+		"InvokedViaFunctionUrl"
 	])]]);
 	constructor() {
 		const awsClients = getAwsClients();
@@ -7845,6 +7846,7 @@ var LambdaPermissionProvider = class {
 			if (properties["PrincipalOrgID"]) addParams.PrincipalOrgID = properties["PrincipalOrgID"];
 			if (properties["EventSourceToken"]) addParams.EventSourceToken = properties["EventSourceToken"];
 			if (properties["FunctionUrlAuthType"]) addParams.FunctionUrlAuthType = properties["FunctionUrlAuthType"];
+			if (properties["InvokedViaFunctionUrl"] !== void 0) addParams.InvokedViaFunctionUrl = properties["InvokedViaFunctionUrl"];
 			await this.lambdaClient.send(new AddPermissionCommand(addParams));
 			this.logger.debug(`Successfully created Lambda permission ${logicalId}: ${statementId}`);
 			return {
@@ -7934,6 +7936,14 @@ var LambdaPermissionProvider = class {
 	*   - `Condition.ArnLike.AWS:SourceArn` → `SourceArn`.
 	*   - `Condition.StringEquals.AWS:SourceAccount` → `SourceAccount`.
 	*   - `Condition.StringEquals.aws:PrincipalOrgID` → `PrincipalOrgID`.
+	*   - `Condition.Bool.lambda:InvokedViaFunctionUrl == "true"` →
+	*     `InvokedViaFunctionUrl: true` (AWS encodes the CFn boolean by
+	*     injecting a `Bool` condition keyed on the `lambda:InvokedViaFunctionUrl`
+	*     IAM context key; the value comes back as the IAM-canonical string
+	*     `"true"`, not a JSON boolean — verified empirically against the live
+	*     us-east-1 endpoint, 2026-05-29). Explicit `false` is a no-op at AWS:
+	*     no Condition is injected and readback omits the key, which round-trips
+	*     to "absent" matching CFn's default.
 	*   - `Condition.ArnLike.AWS:SourceAccount` is left alone — drift on the
 	*     condition operator key would be confusing here.
 	*/
@@ -7975,6 +7985,7 @@ var LambdaPermissionProvider = class {
 			if (sourceAccount !== void 0) result["SourceAccount"] = Array.isArray(sourceAccount) ? sourceAccount[0] : sourceAccount;
 			const orgId = condition["StringEquals"]?.["aws:PrincipalOrgID"];
 			if (orgId !== void 0) result["PrincipalOrgID"] = Array.isArray(orgId) ? orgId[0] : orgId;
+			if (condition["Bool"]?.["lambda:InvokedViaFunctionUrl"] === "true") result["InvokedViaFunctionUrl"] = true;
 		}
 		return result;
 	}
@@ -51536,7 +51547,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.184.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.185.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());