@go-to-k/cdkd 0.229.1 → 0.229.3

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceNameWithFallback, C as StackHasActiveImportsError, F as getLiveRenderer, H as withStackName, I as PATTERN_B_NAME_PROPERTIES, L as PATTERN_B_RESOURCE_TYPES, M as getLogger, P as runStackBuffered, S as ResourceUpdateNotSupportedError, V as withSkipPrefix, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError, z as generateResourceName } from "./import-helpers-wLipXr5g.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as findLargeInlineResources, A as shouldRetainResource, B as getDockerImageBySourceHash, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveCaptureObservedState, H as getDefaultStateBucketName, I as getDockerCmd, J as resolveStateBucketWithDefaultAndSource, K as resolveSkipPrefix, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as MIGRATE_TMP_PREFIX, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as getLegacyStateBucketName, V as Synthesizer, W as resolveApp, X as CFN_TEMPLATE_BODY_LIMIT, Y as warnDeprecatedNoPrefixCliFlag, Z as CFN_TEMPLATE_URL_LIMIT, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, et as uploadCfnTemplate, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as resolveStateBucketWithDefault, r as DeployEngine, rt as resolveBucketRegion, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as AssemblyReader, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as AssetManifestLoader } from "./deploy-engine-BRZdKXDs.js";
+import { $ as findLargeInlineResources, A as shouldRetainResource, B as getDockerImageBySourceHash, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveCaptureObservedState, H as getDefaultStateBucketName, I as getDockerCmd, J as resolveStateBucketWithDefaultAndSource, K as resolveSkipPrefix, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as MIGRATE_TMP_PREFIX, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as getLegacyStateBucketName, V as Synthesizer, W as resolveApp, X as CFN_TEMPLATE_BODY_LIMIT, Y as warnDeprecatedNoPrefixCliFlag, Z as CFN_TEMPLATE_URL_LIMIT, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, et as uploadCfnTemplate, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as resolveStateBucketWithDefault, r as DeployEngine, rt as resolveBucketRegion, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as AssemblyReader, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as AssetManifestLoader } from "./deploy-engine-gl_fTFek.js";
 import { t as ASGProvider } from "./asg-provider-B_hrCxRx.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -1556,7 +1556,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.229.1";
+	return "0.229.3";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -55004,7 +55004,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.229.1");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.229.3");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());

package/dist/{deploy-engine-BRZdKXDs.js → deploy-engine-gl_fTFek.js}

@@ -5597,6 +5597,22 @@ async function applyRoleArnIfSet(opts) {
 */
 const AWS_NO_VALUE = Symbol("AWS::NoValue");
 /**
+* Resource types whose CloudFormation `Ref` returns the segment AFTER the pipe
+* in cdkd's compound Cloud Control physical id `<parent>|<ref>` (rather than the
+* whole physical id). These are Cloud-Control-provisioned types whose CC
+* primaryIdentifier is compound `<parentId>|<ref>` while CFn's `Ref` returns
+* only the trailing `<ref>` component:
+*   - AWS::ApiGateway::Model            `<restApiId>|<modelName>`     -> model name
+*   - AWS::ApiGateway::RequestValidator `<restApiId>|<validatorId>`   -> validator id
+*   - AWS::Cognito::UserPoolClient      `<userPoolId>|<clientId>`     -> client id
+* See {@link IntrinsicFunctionResolver.resolveRefValue}.
+*/
+const REF_RETURNS_SEGMENT_AFTER_PIPE = new Set([
+	"AWS::ApiGateway::Model",
+	"AWS::ApiGateway::RequestValidator",
+	"AWS::Cognito::UserPoolClient"
+]);
+/**
 * Intrinsic-function keys the resolver knows how to handle.
 *
 * A CloudFormation intrinsic is ALWAYS a single-key object — `{ "Ref": ... }`
@@ -5878,8 +5894,9 @@ var IntrinsicFunctionResolver = class {
 	async resolveRef(logicalId, context) {
 		const resource = context.resources[logicalId];
 		if (resource) {
-			this.logger.debug(`Resolved Ref to resource: ${logicalId} -> ${resource.physicalId}`);
-			return resource.physicalId;
+			const refValue = this.resolveRefValue(resource);
+			this.logger.debug(`Resolved Ref to resource: ${logicalId} -> ${refValue}`);
+			return refValue;
 		}
 		if (context.parameters && logicalId in context.parameters) {
 			const value = context.parameters[logicalId];
@@ -5896,6 +5913,42 @@ var IntrinsicFunctionResolver = class {
 		throw new Error(`Ref ${logicalId} not found`);
 	}
 	/**
+	* Resolve the value a CloudFormation `Ref` returns for a resource.
+	*
+	* For most resource types `Ref` returns the physical id, which is what cdkd
+	* stores. But for a few types CFn's `Ref` returns a sub-component of the
+	* physical id, and returning the raw physical id breaks downstream consumers.
+	*
+	* The {@link REF_RETURNS_SEGMENT_AFTER_PIPE} types are provisioned via Cloud
+	* Control (no SDK provider), whose primary identifier — and thus cdkd's
+	* physical id — is the compound `<parentId>|<ref>`, while CFn's `Ref` returns
+	* only the trailing `<ref>` segment:
+	*   - `AWS::ApiGateway::Model` → Ref is the model NAME; physical id is
+	*     `<restApiId>|<modelName>`. A method wiring
+	*     `RequestModels: { "application/json": { "Ref": <Model> } }` would
+	*     otherwise get the compound id and API Gateway rejects it with
+	*     "Invalid model identifier specified".
+	*   - `AWS::ApiGateway::RequestValidator` → Ref is the RequestValidatorId;
+	*     physical id is `<restApiId>|<requestValidatorId>`. A method wiring
+	*     `RequestValidatorId: { "Ref": <Validator> }` would otherwise get the
+	*     compound id and API Gateway rejects it with
+	*     "Invalid Request Validator identifier specified".
+	*   - `AWS::Cognito::UserPoolClient` → Ref is the client id; physical id is
+	*     `<userPoolId>|<clientId>`. Any consumer of the client id (a CfnOutput,
+	*     a Lambda env var, `cognito-idp` API calls) would otherwise get the
+	*     compound id, which fails the `[\w+]+` client-id validation.
+	* In every case the `Ref` value is the segment after the pipe (the parent id
+	* is the first identifier component).
+	*/
+	resolveRefValue(resource) {
+		const physicalId = resource.physicalId;
+		if (REF_RETURNS_SEGMENT_AFTER_PIPE.has(resource.resourceType)) {
+			const pipeIdx = physicalId.indexOf("|");
+			if (pipeIdx >= 0) return physicalId.substring(pipeIdx + 1);
+		}
+		return physicalId;
+	}
+	/**
 	* Resolve Fn::GetAtt intrinsic function
 	*/
 	async resolveGetAtt(getAtt, context) {
@@ -13442,4 +13495,4 @@ var DeployEngine = class {
 
 //#endregion
 export { findLargeInlineResources as $, shouldRetainResource as A, getDockerImageBySourceHash as B, applyRoleArnIfSet as C, LockManager as D, TemplateParser as E, formatDockerLoginError as F, resolveCaptureObservedState as G, getDefaultStateBucketName as H, getDockerCmd as I, resolveStateBucketWithDefaultAndSource as J, resolveSkipPrefix as K, runDockerForeground as L, stringifyValue as M, WorkGraph as N, S3StateBackend as O, buildDockerImage as P, MIGRATE_TMP_PREFIX as Q, runDockerStreaming as R, IntrinsicFunctionResolver as S, DagBuilder as T, getLegacyStateBucketName as U, Synthesizer as V, resolveApp as W, CFN_TEMPLATE_BODY_LIMIT as X, warnDeprecatedNoPrefixCliFlag as Y, CFN_TEMPLATE_URL_LIMIT as Z, IAMRoleProvider as _, withRetry as a, findActionableSilentDrops as b, computeImplicitDeleteEdges as c, bold as d, uploadCfnTemplate as et, cyan as f, yellow as g, red as h, withResourceDeadline as i, AssetPublisher as j, rebuildClientForBucketRegion as k, extractDeploymentEventError as l, green as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, clearBucketRegionCache as nt, isRetryableTransientError as o, gray as p, resolveStateBucketWithDefault as q, DeployEngine as r, resolveBucketRegion as rt, IMPLICIT_DELETE_DEPENDENCIES as s, DEFAULT_RESOURCE_TIMEOUT_MS as t, AssemblyReader as tt, formatResourceLine as u, collectInlinePolicyNamesManagedBySiblings as v, DiffCalculator as w, CloudControlProvider as x, ProviderRegistry as y, AssetManifestLoader as z };
-//# sourceMappingURL=deploy-engine-BRZdKXDs.js.map
+//# sourceMappingURL=deploy-engine-gl_fTFek.js.map