@go-to-k/cdkd 0.21.0 → 0.22.0

package/dist/cli.js

@@ -7749,6 +7749,27 @@ var CustomResourceProvider = class _CustomResourceProvider {
   sleep(ms) {
     return new Promise((resolve4) => setTimeout(resolve4, ms));
   }
+  /**
+   * Adopt an existing custom resource into cdkd state.
+   *
+   * **Explicit override only.** A custom resource's identity is the
+   * `PhysicalResourceId` returned by its user-supplied Lambda handler at
+   * Create time — there is no AWS-side resource cdkd can introspect, no
+   * tag API, and no `aws:cdk:path` to look up by. cdkd cannot rediscover
+   * a custom resource without invoking the handler, which would mutate
+   * state.
+   *
+   * Users adopting an existing custom resource should pass
+   * `--resource <logicalId>=<physicalResourceId>` — the same value the
+   * handler returned originally.
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/provider-registry.ts
@@ -11372,6 +11393,25 @@ var S3BucketPolicyProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing S3 bucket policy into cdkd state.
+   *
+   * **Explicit override only.** An `S3::BucketPolicy` is a policy document
+   * attached to a bucket via `PutBucketPolicy` — it has no standalone
+   * identity and is not independently taggable. There is no `aws:cdk:path`
+   * tag to look up by; only the bucket itself is taggable.
+   *
+   * Users adopting an existing bucket policy should pass
+   * `--resource <logicalId>=<bucketName>` (matching the physical id
+   * format returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/sqs-queue-provider.ts
@@ -11808,6 +11848,25 @@ var SQSQueuePolicyProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing SQS queue policy into cdkd state.
+   *
+   * **Explicit override only.** A `QueuePolicy` is an attachment applied to
+   * a queue via `SetQueueAttributes(Policy=...)` — it has no standalone
+   * identity and is not independently taggable. There is no `aws:cdk:path`
+   * tag to look up by; only the queue itself is taggable.
+   *
+   * Users adopting an existing queue policy should pass
+   * `--resource <logicalId>=<queueUrl>` (matching the physical id format
+   * returned by `create()`, which uses the first queue URL).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/sns-topic-provider.ts
@@ -12300,6 +12359,25 @@ var SNSSubscriptionProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing SNS subscription into cdkd state.
+   *
+   * **Explicit override only.** SNS subscriptions are attached to a parent
+   * topic and identified by their `SubscriptionArn`, but the SubscribeAPI
+   * does not accept tags and the AWS tag APIs do not cover subscriptions
+   * (only Topics are taggable). There is therefore no `aws:cdk:path` tag
+   * we could use for auto-lookup.
+   *
+   * Users adopting an existing subscription should pass
+   * `--resource <logicalId>=<subscriptionArn>`.
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/sns-topic-policy-provider.ts
@@ -12439,6 +12517,26 @@ var SNSTopicPolicyProvider = class {
     }
     this.logger.debug(`Successfully deleted SNS topic policy ${logicalId}`);
   }
+  /**
+   * Adopt an existing SNS topic policy into cdkd state.
+   *
+   * **Explicit override only.** A `TopicPolicy` is an attachment to one or
+   * more SNS topics applied via `SetTopicAttributes(AttributeName=Policy)` —
+   * it has no standalone identity and is not independently taggable. There
+   * is no `aws:cdk:path` tag to look up by, and the policy has no name/ARN
+   * of its own.
+   *
+   * Users adopting an existing topic policy should pass
+   * `--resource <logicalId>=<comma-joined-topic-ARNs>` (matching the
+   * physical id format returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
   /**
    * Set the policy on a single SNS topic
    */
@@ -13294,6 +13392,26 @@ var LambdaPermissionProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing Lambda permission into cdkd state.
+   *
+   * **Explicit override only.** A `Lambda::Permission` is a single statement
+   * within a function's resource-based policy added via `AddPermission`. It
+   * has no independent ARN, no taggable identity, and the only way to find
+   * it is to call `GetPolicy` on the parent function and parse the JSON
+   * statements — which the user knows by `StatementId` already.
+   *
+   * Users adopting an existing permission should pass
+   * `--resource <logicalId>=<statementId>` (matching the physical id
+   * format returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: { Id: input.knownPhysicalId } };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/lambda-url-provider.ts
@@ -13427,6 +13545,26 @@ var LambdaUrlProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing Lambda Function URL into cdkd state.
+   *
+   * **Explicit override only.** A `Lambda::Url` is a configuration attached
+   * to a Lambda function — it has no standalone identity (the natural
+   * physical id is the parent function's ARN/name) and `FunctionUrlConfig`
+   * is not independently taggable. There is no `aws:cdk:path` tag to look
+   * up by; only the parent function carries the CDK path tag.
+   *
+   * Users adopting an existing function URL should pass
+   * `--resource <logicalId>=<functionArnOrName>` (matching the physical id
+   * format returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: {} };
+    }
+    return null;
+  }
   /**
    * Build CORS configuration from CDK properties
    */
@@ -13669,6 +13807,27 @@ var LambdaEventSourceMappingProvider = class {
       );
     }
   }
+  /**
+   * Adopt an existing Lambda event source mapping into cdkd state.
+   *
+   * **Explicit override only.** Event source mappings are identified by a
+   * UUID returned at create time. While Lambda event source mappings ARE
+   * taggable since 2020, CDK does NOT propagate the `aws:cdk:path` tag to
+   * them by default (the `Tags` property must be explicitly opted into),
+   * and the natural lookup is by `(FunctionName, EventSourceArn)` — which
+   * the user already knows.
+   *
+   * Users adopting an existing event source mapping should pass
+   * `--resource <logicalId>=<UUID>` (matching the physical id format
+   * returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: { Id: input.knownPhysicalId } };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/lambda-layer-provider.ts
@@ -19792,6 +19951,25 @@ var CloudFrontOAIProvider = class {
       `Unsupported attribute: ${attributeName} for AWS::CloudFront::CloudFrontOriginAccessIdentity`
     );
   }
+  /**
+   * Adopt an existing CloudFront Origin Access Identity into cdkd state.
+   *
+   * **Explicit override only.** OAIs do not support tags — their identity
+   * is the `CallerReference` set at create time, plus the auto-generated
+   * `Id`. There is no `aws:cdk:path` tag API to look up by; CloudFront's
+   * `ListCloudFrontOriginAccessIdentities` returns Id/Comment/CallerReference
+   * but no tags.
+   *
+   * Users adopting an existing OAI should pass
+   * `--resource <logicalId>=<oaiId>` (e.g. `E1ABCDEF123456`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return { physicalId: input.knownPhysicalId, attributes: { Id: input.knownPhysicalId } };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/cloudfront-distribution-provider.ts
@@ -20515,6 +20693,27 @@ var AgentCoreRuntimeProvider = class {
     }
     throw new Error(`Unsupported attribute: ${attributeName} for AWS::BedrockAgentCore::Runtime`);
   }
+  /**
+   * Adopt an existing BedrockAgentCore Runtime into cdkd state.
+   *
+   * **Explicit override only (for now).** The BedrockAgentCore SDK does
+   * expose `ListTagsForResource`, so a future PR could add full tag-based
+   * auto-lookup. For this batch we keep it override-only to ship
+   * consistently with the other batch-5 attachment-style providers; users
+   * adopting an existing runtime should pass
+   * `--resource <logicalId>=<agentRuntimeId>` (e.g. `runtime-12345`,
+   * matching the physical id format returned by `create()`).
+   */
+  // eslint-disable-next-line @typescript-eslint/require-await -- explicit-override-only intentionally has no AWS calls
+  async import(input) {
+    if (input.knownPhysicalId) {
+      return {
+        physicalId: input.knownPhysicalId,
+        attributes: { AgentRuntimeId: input.knownPhysicalId }
+      };
+    }
+    return null;
+  }
 };
 
 // src/provisioning/providers/stepfunctions-provider.ts
@@ -34148,7 +34347,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command13();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.21.0");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.22.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());