@go-to-k/cdkd 0.234.0 → 0.234.1

package/dist/{deploy-engine-Dj9mXUQa.js → deploy-engine-CdAkyW9k.js}

@@ -3166,14 +3166,18 @@ async function ensureAssetStorage(options) {
 * are cached per region for the process lifetime (the marker read is one
 * GetObject against a bucket every deploy already reads — design §4.1).
 *
-* In legacy mode, one `logger.info` line per invocation mentions the
-* `cdk gc` hazard and the `cdkd bootstrap` opt-in (info, not warn — existing
-* users are not doing anything wrong; design §12.2).
+* In legacy mode, one `logger.info` line per legacy region per invocation
+* mentions the `cdk gc` hazard and the exact `cdkd bootstrap --region <r>`
+* opt-in command (info, not warn — existing users are not doing anything
+* wrong; design §12.2). Per-region because opt-in is keyed by each stack's
+* deploy region: a multi-region app can be opted in for one region and
+* legacy for another, and a region-less notice reads as a false negative to
+* a user who just bootstrapped a different region.
 */
 var AssetModeResolver = class {
 	logger = getLogger().child("AssetMode");
 	cache = /* @__PURE__ */ new Map();
-	legacyNoticeShown = false;
+	legacyNoticeShownRegions = /* @__PURE__ */ new Set();
 	stateBackend;
 	accountId;
 	profile;
@@ -3205,9 +3209,9 @@ var AssetModeResolver = class {
 		const markerKey = getBootstrapMarkerKey(region);
 		const body = await this.stateBackend.getRawObject(markerKey);
 		if (body === null) {
-			if (!this.legacyNoticeShown && !this.suppressLegacyNotice) {
-				this.legacyNoticeShown = true;
-				this.logger.info("Assets are published to the CDK bootstrap bucket/repo, which 'cdk gc' may garbage-collect (cdkd-deployed stacks have no CloudFormation stack for gc to scan). Run 'cdkd bootstrap' to create cdkd-owned asset storage that 'cdk gc' never touches.");
+			if (!this.legacyNoticeShownRegions.has(region) && !this.suppressLegacyNotice) {
+				this.legacyNoticeShownRegions.add(region);
+				this.logger.info(`Assets for region '${region}' are published to the CDK bootstrap bucket/repo, which 'cdk gc' may garbage-collect (cdkd-deployed stacks have no CloudFormation stack for gc to scan). Run 'cdkd bootstrap --region ${region}' to create cdkd-owned asset storage that 'cdk gc' never touches.`);
 			}
 			return { mode: "legacy" };
 		}
@@ -7497,6 +7501,27 @@ async function getAccountInfo(overrideRegion) {
 		return cachedAccountInfo;
 	}
 }
+/**
+* Collect every name referenced (Ref / Fn::Sub placeholder / other intrinsic
+* argument) by the sections cdkd actually evaluates: Resources, Outputs, and
+* Conditions. Deliberately excludes `Rules` (assertion-only, never evaluated
+* by cdkd — CloudFormation evaluates them pre-deployment, cdkd has no
+* equivalent gate) and `Metadata`. Used to avoid resolving template
+* parameters nothing consumes.
+*/
+function collectReferencedParameterNames(template) {
+	const parser = new TemplateParser();
+	const referenced = /* @__PURE__ */ new Set();
+	for (const section of [
+		template.Resources,
+		template.Outputs,
+		template.Conditions
+	]) {
+		if (!section || typeof section !== "object") continue;
+		for (const name of parser.extractReferences(section)) referenced.add(name);
+	}
+	return referenced;
+}
 var IntrinsicFunctionResolver = class {
 	logger = getLogger().child("IntrinsicFunctionResolver");
 	resolverRegion;
@@ -7517,6 +7542,7 @@ var IntrinsicFunctionResolver = class {
 		const parameters = {};
 		const templateParameters = template.Parameters;
 		if (!templateParameters || typeof templateParameters !== "object") return parameters;
+		let referencedNames;
 		for (const [name, definition] of Object.entries(templateParameters)) {
 			const paramDef = definition;
 			if (userParameters && name in userParameters) {
@@ -7529,6 +7555,11 @@ var IntrinsicFunctionResolver = class {
 			}
 			if ("Default" in paramDef) {
 				if (paramDef.Type.startsWith("AWS::SSM::Parameter::Value")) {
+					referencedNames ??= collectReferencedParameterNames(template);
+					if (!referencedNames.has(name)) {
+						this.logger.debug(`Parameter ${name}: skipping SSM resolution (not referenced by Resources/Outputs/Conditions)`);
+						continue;
+					}
 					const ssmPath = String(paramDef.Default);
 					this.logger.debug(`Parameter ${name}: resolving SSM parameter path ${ssmPath}`);
 					const resolved = await this.resolveSSMParameter(ssmPath);
@@ -15737,4 +15768,4 @@ var DeployEngine = class {
 
 //#endregion
 export { AssetManifestLoader as $, DiffCalculator as A, buildAssetRedirectMap as B, findActionableSilentDrops as C, refStateLookupFromResource as D, cfnRefValueFromPhysicalId as E, rebuildClientForBucketRegion as F, BOOTSTRAP_MARKER_PREFIX as G, loadPublishableAssetManifest as H, shouldRetainResource as I, buildDockerImage as J, ensureAssetStorage as K, AssetPublisher as L, TemplateParser as M, LockManager as N, WAFv2WebACLProvider as O, S3StateBackend as P, runDockerStreaming as Q, stringifyValue as R, ProviderRegistry as S, IntrinsicFunctionResolver as T, rewriteTemplateAssetReferences as U, createAssetRedirectResolver as V, AssetModeResolver as W, getDockerCmd as X, formatDockerLoginError as Y, runDockerForeground as Z, green as _, AssemblyReader as _t, withRetry as a, resolveApp as at, IAMRoleProvider as b, computeImplicitDeleteEdges as c, resolveStateBucketWithDefault as ct, isStatefulRecreateTargetSync as d, warnDeprecatedNoPrefixCliFlag as dt, getDockerImageBySourceHash as et, renderStatefulReason as f, CFN_TEMPLATE_BODY_LIMIT as ft, gray as g, uploadCfnTemplate as gt, cyan as h, findLargeInlineResources as ht, withResourceDeadline as i, getLegacyStateBucketName as it, DagBuilder as j, applyRoleArnIfSet as k, extractDeploymentEventError as l, resolveStateBucketWithDefaultAndSource as lt, bold as m, MIGRATE_TMP_PREFIX as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, synthesisStatusMessage as nt, isRetryableTransientError as o, resolveCaptureObservedState as ot, formatResourceLine as p, CFN_TEMPLATE_URL_LIMIT as pt, parseBootstrapMarker as q, DeployEngine as r, getDefaultStateBucketName as rt, IMPLICIT_DELETE_DEPENDENCIES as s, resolveSkipPrefix as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, Synthesizer as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, resolveUseCdkBootstrapAssets as ut, red as v, clearBucketRegionCache as vt, CloudControlProvider as w, collectInlinePolicyNamesManagedBySiblings as x, yellow as y, resolveBucketRegion as yt, WorkGraph as z };
-//# sourceMappingURL=deploy-engine-Dj9mXUQa.js.map
+//# sourceMappingURL=deploy-engine-CdAkyW9k.js.map