@go-to-k/cdkd 0.230.6 → 0.230.8

package/dist/{deploy-engine-DP5yW4f5.js → deploy-engine-CT3wqDMn.js}

@@ -5629,7 +5629,11 @@ const AWS_NO_VALUE = Symbol("AWS::NoValue");
 * trailing `<ref>` component:
 *   - AWS::ApiGateway::Model            `<restApiId>|<modelName>`     -> model name
 *   - AWS::ApiGateway::RequestValidator `<restApiId>|<validatorId>`   -> validator id
-*   - AWS::Cognito::UserPoolClient      `<userPoolId>|<clientId>`     -> client id
+*   - AWS::Cognito::UserPoolClient           `<userPoolId>|<clientId>`       -> client id
+*   - AWS::Cognito::UserPoolResourceServer   `<userPoolId>|<identifier>`     -> resource-server identifier
+*   - AWS::Cognito::UserPoolGroup            `<userPoolId>|<groupName>`      -> group name
+*   - AWS::Cognito::UserPoolIdentityProvider `<userPoolId>|<providerName>`   -> provider name
+*   - AWS::Cognito::UserPoolDomain           `<userPoolId>|<domain>`         -> domain
 *   - AWS::AppConfig::Environment            `<appId>|<envId>`               -> environment id
 *   - AWS::AppConfig::ConfigurationProfile   `<appId>|<profileId>`           -> profile id
 *   - AWS::AppConfig::HostedConfigurationVersion `<appId>|<profileId>|<ver>` -> version number
@@ -5640,11 +5644,30 @@ const AWS_NO_VALUE = Symbol("AWS::NoValue");
 * 2-segment (`<parent>|<ref>`) and 3-segment AppConfig compounds; for the
 * 2-segment types it is identical to after-first-pipe. AppConfig::Application
 * and ::DeploymentStrategy are NOT here — their Ref is a simple, pipe-free id.
+*
+* MAINTENANCE — when you add a type here, AUDIT THE WHOLE SERVICE FAMILY, not
+* just the one type a bug surfaced. CC compound-id types cluster by service (the
+* Cognito UserPool family alone needed 5 entries; AppConfig needed 4) because a
+* service's child resources share the `<parentId>|<childKey>` id convention. For
+* each sibling child type:
+*   1. `aws cloudformation describe-type --type RESOURCE --type-name AWS::<Svc>::<T>`
+*      -> `Schema.primaryIdentifier` confirms it is compound + the segment order.
+*   2. Read the type's AWS-docs "Return values / Ref" — add it ONLY if `Ref`
+*      returns the trailing `<child>` segment.
+*   3. EXCLUDE types whose `Ref` returns a synthetic / prefixed string rather
+*      than a bare id segment — e.g. Cognito::UserPoolRiskConfigurationAttachment
+*      / ::UserPoolUICustomizationAttachment return
+*      `<TypeName>-<UserPoolId>-<ClientId>`, NOT the after-pipe segment.
+*   4. Pin each addition with a unit test in intrinsic-functions.test.ts.
 */
 const REF_RETURNS_SEGMENT_AFTER_PIPE = new Set([
 	"AWS::ApiGateway::Model",
 	"AWS::ApiGateway::RequestValidator",
 	"AWS::Cognito::UserPoolClient",
+	"AWS::Cognito::UserPoolResourceServer",
+	"AWS::Cognito::UserPoolGroup",
+	"AWS::Cognito::UserPoolIdentityProvider",
+	"AWS::Cognito::UserPoolDomain",
 	"AWS::AppConfig::Environment",
 	"AWS::AppConfig::ConfigurationProfile",
 	"AWS::AppConfig::HostedConfigurationVersion",
@@ -13784,4 +13807,4 @@ var DeployEngine = class {
 
 //#endregion
 export { CFN_TEMPLATE_BODY_LIMIT as $, LockManager as A, runDockerForeground as B, findActionableSilentDrops as C, DiffCalculator as D, applyRoleArnIfSet as E, stringifyValue as F, getDefaultStateBucketName as G, AssetManifestLoader as H, WorkGraph as I, resolveCaptureObservedState as J, getLegacyStateBucketName as K, buildDockerImage as L, rebuildClientForBucketRegion as M, shouldRetainResource as N, DagBuilder as O, AssetPublisher as P, warnDeprecatedNoPrefixCliFlag as Q, formatDockerLoginError as R, ProviderRegistry as S, IntrinsicFunctionResolver as T, getDockerImageBySourceHash as U, runDockerStreaming as V, Synthesizer as W, resolveStateBucketWithDefault as X, resolveSkipPrefix as Y, resolveStateBucketWithDefaultAndSource as Z, green as _, withRetry as a, clearBucketRegionCache as at, IAMRoleProvider as b, computeImplicitDeleteEdges as c, isStatefulRecreateTargetSync as d, CFN_TEMPLATE_URL_LIMIT as et, renderStatefulReason as f, gray as g, cyan as h, withResourceDeadline as i, AssemblyReader as it, S3StateBackend as j, TemplateParser as k, extractDeploymentEventError as l, bold as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, findLargeInlineResources as nt, isRetryableTransientError as o, resolveBucketRegion as ot, formatResourceLine as p, resolveApp as q, DeployEngine as r, uploadCfnTemplate as rt, IMPLICIT_DELETE_DEPENDENCIES as s, DEFAULT_RESOURCE_TIMEOUT_MS as t, MIGRATE_TMP_PREFIX as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, red as v, CloudControlProvider as w, collectInlinePolicyNamesManagedBySiblings as x, yellow as y, getDockerCmd as z };
-//# sourceMappingURL=deploy-engine-DP5yW4f5.js.map
+//# sourceMappingURL=deploy-engine-CT3wqDMn.js.map