@go-to-k/cdkd 0.230.19 → 0.230.20

package/README.md

@@ -23,6 +23,27 @@ Drop-in CDK CLI for existing CDK apps — faster deploys via AWS SDK instead of
 
 Numbers below are deploy-phase only (CDK app synthesis is identical between cdkd and AWS CDK — both run the same user code through `aws-cdk-lib`'s synthesizer — so synth time is excluded from the speedup calculation).
 
+### vs CloudFormation Express mode — faster than CloudFormation's own fast-deploy option
+
+CloudFormation's [Express mode](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-cloudformation-cdk/) is a fast-deploy option that skips resource stabilization waits, similar in spirit to cdkd's `--no-wait`. Even so, cdkd is faster than Express on nearly every stack, and with `--no-wait` it pulls dramatically ahead on stacks dominated by async resources.
+
+| Stack | Normal (CFn) | Express | cdkd | cdkd `--no-wait` |
+| --- | ---: | ---: | ---: | ---: |
+| VPC + Lambda + SQS + CloudFront | 562 | 366 | 197 | **40** |
+| DynamoDB | 34 | 34 | 19 | 15 |
+| DynamoDB + KMS | 71 | 55 | 27 | 27 |
+| EC2 | 44 | 31 | 27 | 26 |
+| Lambda | 55 | 34 | 23 | 22 |
+| S3 | 39 | 22 | 23 | 24 |
+| SQS | 83 | 22 | **9** | 9 |
+| SQS + CloudWatch | 87 | 44 | 30 | 31 |
+
+Best of 3 runs, deploy-phase only, seconds, `us-west-2`. The `VPC + Lambda + SQS + CloudFront` stack is 1 VPC (2 AZs, NAT Gateway, public + private subnets) + VPC Lambda + Lambda Function URL + CloudFront Distribution + SQS + EventSourceMapping + Consumer Lambda.
+
+- **~1.5–2x faster than Express on most stacks** — e.g. SQS finishes in 9s vs Express's 22s (~2.4x).
+- **Async-heavy stacks are where the gap explodes.** On the VPC + CloudFront stack, `cdkd --no-wait` finishes in 40s vs Express's 366s (~9x) — cdkd returns as soon as each create call returns, leaving CloudFront propagation and NAT Gateway stabilization to complete in the background.
+- **S3 is the one case where Express edges cdkd's default** (22s vs 23s). On a near-instant single-resource stack there is little left to parallelize, and `--no-wait` makes no difference there.
+
 ### SDK Provider path — **5.5x faster** (17.0s vs 94.4s)
 
 Stack: S3 Bucket, DynamoDB Table, SQS Queue, SNS Topic, SSM Parameter (5 independent resources, fully parallelized by cdkd's DAG scheduler).

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceName, C as StackHasActiveImportsError, F as getLiveRenderer, H as withSkipPrefix, I as PATTERN_B_NAME_OPTIONS, L as PATTERN_B_NAME_PROPERTIES, M as getLogger, P as runStackBuffered, R as PATTERN_B_RESOURCE_TYPES, S as ResourceUpdateNotSupportedError, U as withStackName, V as generateResourceNameWithFallback, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError } from "./import-helpers-DayvBD4T.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as warnDeprecatedNoPrefixCliFlag, A as LockManager, B as runDockerForeground, C as findActionableSilentDrops, D as DiffCalculator, E as applyRoleArnIfSet, F as stringifyValue, G as synthesisStatusMessage, H as AssetManifestLoader, I as WorkGraph, J as resolveApp, K as getDefaultStateBucketName, L as buildDockerImage, M as rebuildClientForBucketRegion, N as shouldRetainResource, O as DagBuilder, P as AssetPublisher, Q as resolveStateBucketWithDefaultAndSource, R as formatDockerLoginError, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as getDockerImageBySourceHash, V as runDockerStreaming, W as Synthesizer, X as resolveSkipPrefix, Y as resolveCaptureObservedState, Z as resolveStateBucketWithDefault, _ as green, a as withRetry, at as AssemblyReader, b as IAMRoleProvider, c as computeImplicitDeleteEdges, d as isStatefulRecreateTargetSync, et as CFN_TEMPLATE_BODY_LIMIT, f as renderStatefulReason, g as gray, h as cyan, i as withResourceDeadline, it as uploadCfnTemplate, j as S3StateBackend, k as TemplateParser, l as extractDeploymentEventError, m as bold, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as MIGRATE_TMP_PREFIX, o as isRetryableTransientError, p as formatResourceLine, q as getLegacyStateBucketName, r as DeployEngine, rt as findLargeInlineResources, s as IMPLICIT_DELETE_DEPENDENCIES, st as resolveBucketRegion, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as CFN_TEMPLATE_URL_LIMIT, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, v as red, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, z as getDockerCmd } from "./deploy-engine-Bdy5xKSQ.js";
+import { $ as warnDeprecatedNoPrefixCliFlag, A as LockManager, B as runDockerForeground, C as findActionableSilentDrops, D as DiffCalculator, E as applyRoleArnIfSet, F as stringifyValue, G as synthesisStatusMessage, H as AssetManifestLoader, I as WorkGraph, J as resolveApp, K as getDefaultStateBucketName, L as buildDockerImage, M as rebuildClientForBucketRegion, N as shouldRetainResource, O as DagBuilder, P as AssetPublisher, Q as resolveStateBucketWithDefaultAndSource, R as formatDockerLoginError, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as getDockerImageBySourceHash, V as runDockerStreaming, W as Synthesizer, X as resolveSkipPrefix, Y as resolveCaptureObservedState, Z as resolveStateBucketWithDefault, _ as green, a as withRetry, at as AssemblyReader, b as IAMRoleProvider, c as computeImplicitDeleteEdges, d as isStatefulRecreateTargetSync, et as CFN_TEMPLATE_BODY_LIMIT, f as renderStatefulReason, g as gray, h as cyan, i as withResourceDeadline, it as uploadCfnTemplate, j as S3StateBackend, k as TemplateParser, l as extractDeploymentEventError, m as bold, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as MIGRATE_TMP_PREFIX, o as isRetryableTransientError, p as formatResourceLine, q as getLegacyStateBucketName, r as DeployEngine, rt as findLargeInlineResources, s as IMPLICIT_DELETE_DEPENDENCIES, st as resolveBucketRegion, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as CFN_TEMPLATE_URL_LIMIT, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, v as red, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, z as getDockerCmd } from "./deploy-engine-B0o5NN21.js";
 import { t as ASGProvider } from "./asg-provider-Dgj3loIG.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -1445,7 +1445,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.230.19";
+	return "0.230.20";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -55380,7 +55380,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.19");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.20");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());

package/dist/{deploy-engine-Bdy5xKSQ.js → deploy-engine-B0o5NN21.js}

@@ -12535,6 +12535,7 @@ const RETRYABLE_ERROR_MESSAGE_PATTERNS = [
 	"Invalid value for the parameter Policy",
 	"required permissions for: ENHANCED_MONITORING",
 	"Caught ServiceAccessDeniedException",
+	"permissions required to assume the role",
 	"conflicting conditional operation",
 	"scheduled for deletion",
 	"Cannot access stream",
@@ -12742,32 +12743,9 @@ const DEFAULT_RESOURCE_WARN_AFTER_MS = 300 * 1e3;
 * explicitly because the Custom Resource provider's polling cap is 1h.
 */
 const DEFAULT_RESOURCE_TIMEOUT_MS = 1800 * 1e3;
-/**
-* Deploy engine orchestrates the entire deployment process
-*
-* Responsibilities:
-* 1. Acquire stack lock
-* 2. Load current state
-* 3. Calculate diff
-* 4. Validate resource types
-* 5. Execute deployment in DAG order
-* 6. Save new state
-* 7. Release lock
-*
-* Rollback mechanism:
-* - Tracks completed operations during deployment
-* - On failure, rolls back in reverse order (best-effort)
-* - Supports --no-rollback flag to skip rollback (saves partial state and fails)
-* - CREATE → delete the newly created resource
-* - UPDATE → restore previous properties
-* - DELETE → cannot rollback (log warning)
-*/
-/**
-* Error thrown when deployment is interrupted by SIGINT
-*/
 var InterruptedError = class extends Error {
-	constructor() {
-		super("Deployment interrupted by user (Ctrl+C)");
+	constructor(reason = "user") {
+		super(reason === "user" ? "Deployment interrupted by user (Ctrl+C)" : "Deployment aborted after another resource failed");
 		this.name = "InterruptedError";
 	}
 };
@@ -12836,6 +12814,13 @@ var DeployEngine = class {
 	resolver;
 	interrupted = false;
 	/**
+	* Why `interrupted` was set — first cause wins. `'user'` = SIGINT;
+	* `'sibling-failure'` = a resource failed and the remaining work is being
+	* cancelled. Drives the {@link InterruptedError} message so cancelled
+	* siblings don't misreport a Ctrl+C nobody pressed.
+	*/
+	interruptCause = null;
+	/**
 	* In-flight `provider.readCurrentState` promises kicked off after a
 	* successful CREATE / UPDATE. The deploy critical path does NOT
 	* `await` these; instead they're drained at the end of `doDeploy`
@@ -13126,11 +13111,13 @@ var DeployEngine = class {
 		const renderer = getLiveRenderer();
 		renderer.start();
 		this.interrupted = false;
+		this.interruptCause = null;
 		const sigintHandler = () => {
 			renderer.printAbove(() => {
 				process.stderr.write("\nInterrupted — saving partial state after current operations complete...\n");
 			});
 			this.interrupted = true;
+			this.interruptCause ??= "user";
 		};
 		process.on("SIGINT", sigintHandler);
 		try {
@@ -13350,6 +13337,7 @@ var DeployEngine = class {
 							await this.provisionResource(logicalId, change, newResources, stackName, template, parameterValues, conditions, actualCounts, progress);
 						} catch (provisionError) {
 							this.interrupted = true;
+							this.interruptCause ??= "sibling-failure";
 							throw provisionError;
 						}
 						completedOperations.push({
@@ -13366,7 +13354,7 @@ var DeployEngine = class {
 				} finally {
 					await saveChain;
 				}
-				if (this.interrupted && this.hasPending(createUpdateExecutor)) throw new InterruptedError();
+				if (this.interrupted && this.hasPending(createUpdateExecutor)) throw new InterruptedError(this.interruptCause ?? "user");
 			}
 			if (deleteChanges.size > 0) {
 				this.logger.info(`${red("Deleting")} ${red(deleteChanges.size)} resource(s)`);
@@ -13387,6 +13375,7 @@ var DeployEngine = class {
 							await this.provisionResource(logicalId, change, newResources, stackName, template, parameterValues, conditions, actualCounts, progress);
 						} catch (provisionError) {
 							this.interrupted = true;
+							this.interruptCause ??= "sibling-failure";
 							throw provisionError;
 						}
 						completedOperations.push({
@@ -13401,7 +13390,7 @@ var DeployEngine = class {
 				} finally {
 					await saveChain;
 				}
-				if (this.interrupted && this.hasPending(deleteExecutor)) throw new InterruptedError();
+				if (this.interrupted && this.hasPending(deleteExecutor)) throw new InterruptedError(this.interruptCause ?? "user");
 			}
 		} catch (error) {
 			try {
@@ -14145,7 +14134,7 @@ var DeployEngine = class {
 			...initialDelayMs !== void 0 && { initialDelayMs },
 			logger: this.logger,
 			isInterrupted: () => this.interrupted,
-			onInterrupted: () => new InterruptedError()
+			onInterrupted: () => new InterruptedError(this.interruptCause ?? "user")
 		});
 	}
 	/**
@@ -14188,4 +14177,4 @@ var DeployEngine = class {
 
 //#endregion
 export { warnDeprecatedNoPrefixCliFlag as $, LockManager as A, runDockerForeground as B, findActionableSilentDrops as C, DiffCalculator as D, applyRoleArnIfSet as E, stringifyValue as F, synthesisStatusMessage as G, AssetManifestLoader as H, WorkGraph as I, resolveApp as J, getDefaultStateBucketName as K, buildDockerImage as L, rebuildClientForBucketRegion as M, shouldRetainResource as N, DagBuilder as O, AssetPublisher as P, resolveStateBucketWithDefaultAndSource as Q, formatDockerLoginError as R, ProviderRegistry as S, IntrinsicFunctionResolver as T, getDockerImageBySourceHash as U, runDockerStreaming as V, Synthesizer as W, resolveSkipPrefix as X, resolveCaptureObservedState as Y, resolveStateBucketWithDefault as Z, green as _, withRetry as a, AssemblyReader as at, IAMRoleProvider as b, computeImplicitDeleteEdges as c, isStatefulRecreateTargetSync as d, CFN_TEMPLATE_BODY_LIMIT as et, renderStatefulReason as f, gray as g, cyan as h, withResourceDeadline as i, uploadCfnTemplate as it, S3StateBackend as j, TemplateParser as k, extractDeploymentEventError as l, bold as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, MIGRATE_TMP_PREFIX as nt, isRetryableTransientError as o, clearBucketRegionCache as ot, formatResourceLine as p, getLegacyStateBucketName as q, DeployEngine as r, findLargeInlineResources as rt, IMPLICIT_DELETE_DEPENDENCIES as s, resolveBucketRegion as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, CFN_TEMPLATE_URL_LIMIT as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, red as v, CloudControlProvider as w, collectInlinePolicyNamesManagedBySiblings as x, yellow as y, getDockerCmd as z };
-//# sourceMappingURL=deploy-engine-Bdy5xKSQ.js.map
+//# sourceMappingURL=deploy-engine-B0o5NN21.js.map