@go-to-k/cdkd 0.234.0 → 0.235.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceName, C as StackHasActiveImportsError, F as getLiveRenderer, H as withSkipPrefix, I as PATTERN_B_NAME_OPTIONS, L as PATTERN_B_NAME_PROPERTIES, M as getLogger, P as runStackBuffered, R as PATTERN_B_RESOURCE_TYPES, S as ResourceUpdateNotSupportedError, U as withStackName, V as generateResourceNameWithFallback, _ as MissingCdkCliError, a as normalizeAwsTagsToCfn, b as ProvisioningError, f as LocalInvokeBuildError$1, i as matchesCdkPath, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as isTerminationProtectionPropagationError, o as resolveExplicitPhysicalId, p as LocalMigrateError, r as CDK_PATH_TAG, s as assertRegionMatch, t as disableInstanceApiTermination, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError } from "./ec2-termination-protection-uvVnteGl.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as AssetManifestLoader, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as buildDockerImage, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as runDockerStreaming, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as getDockerCmd, Y as formatDockerLoginError, Z as runDockerForeground, _ as green, _t as AssemblyReader, a as withRetry, at as resolveApp, b as IAMRoleProvider, c as computeImplicitDeleteEdges, ct as resolveStateBucketWithDefault, d as isStatefulRecreateTargetSync, dt as warnDeprecatedNoPrefixCliFlag, et as getDockerImageBySourceHash, f as renderStatefulReason, ft as CFN_TEMPLATE_BODY_LIMIT, g as gray, gt as uploadCfnTemplate, h as cyan, ht as findLargeInlineResources, i as withResourceDeadline, it as getLegacyStateBucketName, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveStateBucketWithDefaultAndSource, m as bold, mt as MIGRATE_TMP_PREFIX, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as synthesisStatusMessage, o as isRetryableTransientError, ot as resolveCaptureObservedState, p as formatResourceLine, pt as CFN_TEMPLATE_URL_LIMIT, q as parseBootstrapMarker, r as DeployEngine, rt as getDefaultStateBucketName, s as IMPLICIT_DELETE_DEPENDENCIES, st as resolveSkipPrefix, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as Synthesizer, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveUseCdkBootstrapAssets, v as red, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, yt as resolveBucketRegion, z as WorkGraph } from "./deploy-engine-Dj9mXUQa.js";
+import { $ as AssetManifestLoader, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as buildDockerImage, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as runDockerStreaming, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as getDockerCmd, Y as formatDockerLoginError, Z as runDockerForeground, _ as green, _t as uploadCfnTemplate, a as withRetry, at as resolveApp, b as IAMRoleProvider, bt as resolveBucketRegion, c as computeImplicitDeleteEdges, ct as resolveSkipPrefix, d as isStatefulRecreateTargetSync, dt as resolveUseCdkBootstrapAssets, et as getDockerImageBySourceHash, f as renderStatefulReason, ft as warnDeprecatedNoPrefixCliFlag, g as gray, gt as findLargeInlineResources, h as cyan, ht as MIGRATE_TMP_PREFIX, i as withResourceDeadline, it as getLegacyStateBucketName, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveStateBucketWithDefault, m as bold, mt as CFN_TEMPLATE_URL_LIMIT, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as synthesisStatusMessage, o as isRetryableTransientError, ot as resolveAutoAssetStorage, p as formatResourceLine, pt as CFN_TEMPLATE_BODY_LIMIT, q as parseBootstrapMarker, r as DeployEngine, rt as getDefaultStateBucketName, s as IMPLICIT_DELETE_DEPENDENCIES, st as resolveCaptureObservedState, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as Synthesizer, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveStateBucketWithDefaultAndSource, v as red, vt as AssemblyReader, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, y as yellow, z as WorkGraph } from "./deploy-engine-Cbi5IzWV.js";
 import { t as ASGProvider } from "./asg-provider-Dd9Xze-T.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -508,6 +508,7 @@ const deployOptions = [
 	new Option("--dry-run", "Show changes without applying").default(false),
 	new Option("--skip-assets", "Skip asset publishing").default(false),
 	new Option("--no-rollback", "Skip rollback on deployment failure"),
+	new Option("--no-auto-asset-storage", "Do not auto-create cdkd-owned asset storage (asset bucket + container-asset ECR repo + marker) on the first deploy into a region not yet opted in via 'cdkd bootstrap'. Deploys into such regions stay in legacy mode (CDK bootstrap destinations). Per-app opt-out: cdk.json context.cdkd.autoAssetStorage: false."),
 	new Option("--no-capture-observed-state", "Skip capturing AWS-current properties after each create/update (adds a fire-and-forget readCurrentState per resource so cdkd drift can compare against the real deploy-time AWS snapshot instead of the template). On by default. Disable when deploy speed matters more than rich drift detection — falls back to comparing against template properties (the pre-v3 behavior)."),
 	new Option("--prefix-user-supplied-names", "Opt in to LEGACY behavior: prepend the stack name to physical names the user explicitly supplied in their CDK code (e.g. `new iam.Role(this, \"X\", { roleName: \"my-role\" })` → AWS resource named `MyStack-my-role` instead of `my-role`). Since v0.94.0 the default is to NOT prefix user-supplied names — this flag restores the pre-v0.94.0 behavior on Pattern B providers (IAM Role / User / Group / InstanceProfile / ELBv2 LoadBalancer / TargetGroup). Enable via this flag, CDKD_PREFIX_USER_SUPPLIED_NAMES=true, or cdk.json context.cdkd.prefixUserSuppliedNames=true. Applies to `cdkd deploy` only.").default(false),
 	noWaitOption,
@@ -645,10 +646,12 @@ async function bootstrapCommand(options) {
 		bucketName = getDefaultStateBucketName(accountId);
 		logger.info(`Using default state bucket: ${bucketName}`);
 	}
+	const rebuiltStateBucketClient = await rebuildClientForBucketRegion(s3Client, bucketName, { ...options.profile && { profile: options.profile } });
+	const stateBucketS3 = rebuiltStateBucketClient ?? s3Client;
 	try {
 		let bucketExists = false;
 		try {
-			await s3Client.send(new HeadBucketCommand({ Bucket: bucketName }));
+			await stateBucketS3.send(new HeadBucketCommand({ Bucket: bucketName }));
 			bucketExists = true;
 			logger.info(`Bucket ${bucketName} already exists`);
 		} catch (error) {
@@ -672,18 +675,18 @@ async function bootstrapCommand(options) {
 			logger.info(`Creating S3 bucket: ${bucketName} in region ${region}`);
 			const createBucketParams = { Bucket: bucketName };
 			if (region !== "us-east-1") createBucketParams.CreateBucketConfiguration = { LocationConstraint: region };
-			await s3Client.send(new CreateBucketCommand(createBucketParams));
+			await stateBucketS3.send(new CreateBucketCommand(createBucketParams));
 			logger.info(`✓ Created S3 bucket: ${bucketName}`);
 		}
 		if (!skipStateBucketConfig) {
 			logger.debug("Enabling bucket versioning...");
-			await s3Client.send(new PutBucketVersioningCommand({
+			await stateBucketS3.send(new PutBucketVersioningCommand({
 				Bucket: bucketName,
 				VersioningConfiguration: { Status: "Enabled" }
 			}));
 			logger.info("✓ Enabled bucket versioning");
 			logger.debug("Enabling bucket encryption...");
-			await s3Client.send(new PutBucketEncryptionCommand({
+			await stateBucketS3.send(new PutBucketEncryptionCommand({
 				Bucket: bucketName,
 				ServerSideEncryptionConfiguration: { Rules: [{
 					ApplyServerSideEncryptionByDefault: { SSEAlgorithm: "AES256" },
@@ -703,7 +706,7 @@ async function bootstrapCommand(options) {
 					Condition: { StringNotEquals: { "aws:PrincipalAccount": accountId } }
 				}]
 			};
-			await s3Client.send(new PutBucketPolicyCommand({
+			await stateBucketS3.send(new PutBucketPolicyCommand({
 				Bucket: bucketName,
 				Policy: JSON.stringify(bucketPolicy)
 			}));
@@ -753,6 +756,7 @@ async function bootstrapCommand(options) {
 		logger.info(`  --state-bucket ${bucketName}`);
 		logger.info(`  --region ${region}`);
 	} finally {
+		rebuiltStateBucketClient?.destroy();
 		awsClients.destroy();
 	}
 }
@@ -1460,6 +1464,28 @@ async function promptRecreateConfirm(input) {
 	}
 }
 
+//#endregion
+//#region src/cli/commands/confirm-prompt.ts
+/**
+* Default-YES confirmation prompt (`[Y/n]`, empty input = yes). Used by the
+* issue #1007 asset-storage auto-create on interactive TTY deploys without
+* `--yes`. Kept in its own module (mirrors `recreate-confirm-prompt.ts`) so
+* the accept/decline parsing is unit-testable without importing the whole
+* deploy command.
+*/
+async function promptYesNo(prompt) {
+	const rl = readline.createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	try {
+		const ans = await rl.question(`${prompt} [Y/n] `);
+		return /^(y(es)?)?$/i.test(ans.trim());
+	} finally {
+		rl.close();
+	}
+}
+
 //#endregion
 //#region src/state/deployment-events-store.ts
 /**
@@ -1500,7 +1526,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.234.0";
+	return "0.235.0";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -37706,9 +37732,18 @@ async function deployCommand(stacks, options) {
 		stsClient.destroy();
 		const assetPublisher = new AssetPublisher();
 		const useCdkBootstrapAssets = resolveUseCdkBootstrapAssets(options.useCdkBootstrapAssets);
+		const autoAssetStorage = resolveAutoAssetStorage(options.autoAssetStorage);
+		const confirmAutoAssetStorage = async (assetRegion) => {
+			if (options.yes || !process.stdin.isTTY) {
+				logger.info(`Creating cdkd asset storage for region '${assetRegion}' (first deploy into this region; opt out with --no-auto-asset-storage).`);
+				return true;
+			}
+			return promptYesNo(`Region '${assetRegion}' has no cdkd asset storage yet. Create it now (S3 bucket cdkd-assets-${accountId}-${assetRegion} + container-asset ECR repo, out of 'cdk gc' reach)?`);
+		};
 		const assetModeResolver = new AssetModeResolver(preflightStateBackend, accountId, {
 			...options.profile && { profile: options.profile },
-			...useCdkBootstrapAssets && { useCdkBootstrapAssets: true }
+			...useCdkBootstrapAssets && { useCdkBootstrapAssets: true },
+			...autoAssetStorage && !options.dryRun && !options.skipAssets && { autoCreate: { confirm: confirmAutoAssetStorage } }
 		});
 		const stateConfig = {
 			bucket: stateBucket,
@@ -56011,7 +56046,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.234.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.235.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());