@go-to-k/cdkd 0.238.0 → 0.238.2

package/dist/cli.js

@@ -2,7 +2,7 @@
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BzO-joNR.js";
 import { A as withErrorHandling, C as StackHasActiveImportsError, S as ResourceUpdateNotSupportedError, _ as MissingCdkCliError, a as normalizeAwsTagsToCfn, b as ProvisioningError, f as LocalInvokeBuildError$1, i as matchesCdkPath, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as isTerminationProtectionPropagationError, o as resolveExplicitPhysicalId, p as LocalMigrateError, r as CDK_PATH_TAG, s as assertRegionMatch, t as disableInstanceApiTermination, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError } from "./ec2-termination-protection-q-WGWgxa.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-B15NAPbL.js";
-import { $ as getDockerCmd, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, Ct as resolveBucketRegion, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as parseBootstrapMarker, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as formatDockerLoginError, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as validateContainerRepoName, Y as validateAssetBucketName, Z as buildDockerImage, _ as green, _t as CFN_TEMPLATE_URL_LIMIT, a as withRetry, at as synthesisStatusMessage, b as IAMRoleProvider, bt as uploadCfnTemplate, c as computeImplicitDeleteEdges, ct as resolveApp, d as isStatefulRecreateTargetSync, dt as resolveSkipPrefix, et as runDockerForeground, f as renderStatefulReason, ft as resolveStateBucketWithDefault, g as gray, gt as CFN_TEMPLATE_BODY_LIMIT, h as cyan, ht as warnDeprecatedNoPrefixCliFlag, i as withResourceDeadline, it as Synthesizer, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveAutoAssetStorage, m as bold, mt as resolveUseCdkBootstrapAssets, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as AssetManifestLoader, o as isRetryableTransientError, ot as getDefaultStateBucketName, p as formatResourceLine, pt as resolveStateBucketWithDefaultAndSource, q as getBootstrapMarkerKey, r as DeployEngine, rt as getDockerImageBySourceHash, s as IMPLICIT_DELETE_DEPENDENCIES, st as getLegacyStateBucketName, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as runDockerStreaming, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveCaptureObservedState, v as red, vt as MIGRATE_TMP_PREFIX, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, xt as AssemblyReader, y as yellow, yt as findLargeInlineResources, z as WorkGraph } from "./deploy-engine-CX6s1TcX.js";
+import { $ as getDockerCmd, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, Ct as resolveBucketRegion, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as parseBootstrapMarker, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as formatDockerLoginError, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as validateContainerRepoName, Y as validateAssetBucketName, Z as buildDockerImage, _ as green, _t as CFN_TEMPLATE_URL_LIMIT, a as withRetry, at as synthesisStatusMessage, b as IAMRoleProvider, bt as uploadCfnTemplate, c as computeImplicitDeleteEdges, ct as resolveApp, d as isStatefulRecreateTargetSync, dt as resolveSkipPrefix, et as runDockerForeground, f as renderStatefulReason, ft as resolveStateBucketWithDefault, g as gray, gt as CFN_TEMPLATE_BODY_LIMIT, h as cyan, ht as warnDeprecatedNoPrefixCliFlag, i as withResourceDeadline, it as Synthesizer, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveAutoAssetStorage, m as bold, mt as resolveUseCdkBootstrapAssets, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as AssetManifestLoader, o as isRetryableTransientError, ot as getDefaultStateBucketName, p as formatResourceLine, pt as resolveStateBucketWithDefaultAndSource, q as getBootstrapMarkerKey, r as DeployEngine, rt as getDockerImageBySourceHash, s as IMPLICIT_DELETE_DEPENDENCIES, st as getLegacyStateBucketName, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as runDockerStreaming, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveCaptureObservedState, v as red, vt as MIGRATE_TMP_PREFIX, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, xt as AssemblyReader, y as yellow, yt as findLargeInlineResources, z as WorkGraph } from "./deploy-engine-iPBf_Lk2.js";
 import { t as expectedOwnerParam } from "./expected-bucket-owner-BjEfUnkA.js";
 import { t as ASGProvider } from "./asg-provider-Dbl1_mwT.js";
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -1885,7 +1885,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.238.0";
+	return "0.238.2";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -37371,6 +37371,86 @@ var NestedStackProvider = class {
 	}
 };
 
+//#endregion
+//#region src/provisioning/providers/wait-condition-handle-provider.ts
+/**
+* AWS::CloudFormation::WaitConditionHandle Provider (no-op placeholder).
+*
+* In CloudFormation this resource's physical id is a pre-signed S3 URL that
+* `cfn-signal` posts to, backed by CloudFormation's own internal signal
+* bucket. That URL cannot exist outside a CloudFormation deployment, so cdkd
+* provisions the handle as a pure no-op: no AWS API is called, and the
+* physical id is a synthesized opaque placeholder.
+*
+* This matches how the type is used in practice by CDK constructs — most
+* notably `cdk-multi-region-stack`, which emits a bare
+* `CfnWaitConditionHandle` only so a sibling stack never has zero resources
+* (CloudFormation rejects empty templates). Actual wait-condition signaling
+* (`AWS::CloudFormation::WaitCondition`, which blocks on signals sent to the
+* handle URL) remains unsupported — that semantic fundamentally requires
+* CloudFormation itself.
+*/
+var WaitConditionHandleProvider = class {
+	logger = getLogger().child("WaitConditionHandleProvider");
+	handledProperties = new Map([["AWS::CloudFormation::WaitConditionHandle", /* @__PURE__ */ new Set([])]]);
+	/**
+	* "Create" the handle: synthesize a unique placeholder physical id.
+	* `Ref` on the handle resolves to this id. It is deliberately NOT
+	* URL-shaped — a consumer that tries to `cfn-signal` it should fail
+	* loudly rather than post to a URL that nothing polls.
+	*/
+	async create(logicalId, _resourceType, _properties) {
+		const physicalId = `cdkd-wait-condition-handle-${logicalId}-${randomUUID()}`;
+		this.logger.debug(`Created no-op WaitConditionHandle placeholder ${logicalId} (${physicalId})`);
+		return {
+			physicalId,
+			attributes: {}
+		};
+	}
+	/**
+	* The type has no properties, so there is nothing to update — keep the
+	* existing physical id.
+	*/
+	async update(logicalId, physicalId, _resourceType, _properties, _previousProperties) {
+		this.logger.debug(`No-op update for WaitConditionHandle ${logicalId}`);
+		return {
+			physicalId,
+			wasReplaced: false,
+			attributes: {}
+		};
+	}
+	/** Nothing was created in AWS, so there is nothing to delete. */
+	async delete(logicalId, _physicalId, _resourceType) {
+		this.logger.debug(`No-op delete for WaitConditionHandle ${logicalId}`);
+	}
+	/**
+	* WaitConditionHandle is effectively `Ref`-only. Its CFn schema declares a
+	* single read-only property `Id` (the primary identifier); the deploy
+	* engine's resolver never calls this method for it (it resolves via the
+	* physicalId fallback), so a direct call — e.g. `cdkd orphan`'s live
+	* attribute fetch — fails loudly instead of fabricating a value.
+	*/
+	async getAttribute(physicalId, resourceType, attributeName) {
+		throw new ProvisioningError(`AWS::CloudFormation::WaitConditionHandle has no Fn::GetAtt attributes (requested: ${attributeName})`, resourceType, physicalId);
+	}
+	/** No managed properties → nothing can drift. */
+	async readCurrentState() {
+		return {};
+	}
+	/**
+	* Import: there is no AWS-queryable resource behind a handle, so accept a
+	* caller-supplied physical id verbatim (for `--migrate-from-cloudformation`
+	* this is CloudFormation's pre-signed-URL id from `DescribeStackResources`)
+	* and synthesize a placeholder otherwise.
+	*/
+	async import(input) {
+		return {
+			physicalId: input.knownPhysicalId ?? `cdkd-wait-condition-handle-${input.logicalId}-${randomUUID()}`,
+			attributes: {}
+		};
+	}
+};
+
 //#endregion
 //#region src/provisioning/providers/acm-certificate-provider.ts
 /**
@@ -37855,6 +37935,7 @@ function registerAllProviders(registry) {
 	registry.register("AWS::S3Tables::Namespace", s3TablesProvider);
 	registry.register("AWS::S3Tables::Table", s3TablesProvider);
 	registry.register("AWS::CloudFormation::Stack", new NestedStackProvider());
+	registry.register("AWS::CloudFormation::WaitConditionHandle", new WaitConditionHandleProvider());
 }
 
 //#endregion
@@ -39263,6 +39344,7 @@ async function computeStackDiff(currentState, template, region, stackName, state
 		resources: currentState.resources,
 		stateBackend,
 		stackName,
+		bestEffort: true,
 		...parameters && { parameters }
 	});
 	return diffCalculator.calculateDiff(currentState, template, resolveFn);
@@ -39299,6 +39381,7 @@ async function resolveChildStackParameters(parentStackRow, parentTemplate, paren
 			resources: parentState.resources,
 			stateBackend,
 			stackName: parentStackName,
+			bestEffort: true,
 			...parentParameters && { parameters: parentParameters }
 		});
 	} catch {}
@@ -39523,6 +39606,27 @@ function stripUnchangedValues(value, other) {
 	return Object.keys(result).length > 0 ? result : value;
 }
 /**
+* Render one side of a property change for the diff output.
+*
+* A side whose WHOLE value is still a raw intrinsic could not be resolved
+* against current state — most commonly a `Ref` / `Fn::GetAtt` to a resource
+* this same deploy will CREATE (the CDK logical-id-churn dance: an
+* `AWS::ApiGateway::Deployment` hash rotation, a `fn.currentVersion` Lambda
+* Version). Rendering that via {@link stripUnchangedValues} collapsed it to
+* the literal string `undefined`, which reads as "this property is being
+* removed" (issue #1017). Instead, render the raw intrinsic compactly and —
+* on the NEW side — annotate that the value only exists after the deploy.
+* Everything else keeps the existing strip-unchanged rendering.
+*/
+function renderDiffValue(own, opposite, indent, isNewSide) {
+	if (isIntrinsic(own)) {
+		const suffix = isNewSide ? " (known after deploy)" : "";
+		return `${JSON.stringify(own)}${suffix}`;
+	}
+	const filtered = stripUnchangedValues(own, opposite);
+	return (JSON.stringify(filtered, null, 2) ?? "undefined").replace(/\n/g, `\n${indent}`);
+}
+/**
 * Render one resource-change map into human-readable diff lines via `logFn`,
 * returning the per-type counts. Shared by the root stack block and every
 * nested-stack block.
@@ -39553,11 +39657,9 @@ function renderChangeLines(changes, logFn, ccApiRoutes) {
 			if (change.propertyChanges && change.propertyChanges.length > 0) for (const propChange of change.propertyChanges) {
 				const requiresReplace = propChange.requiresReplacement ? " [requires replacement]" : "";
 				const propagated = propChange.replacementPropagated ? " [replacement propagated]" : "";
-				const oldFiltered = stripUnchangedValues(propChange.oldValue, propChange.newValue);
-				const newFiltered = stripUnchangedValues(propChange.newValue, propChange.oldValue);
 				const indent = "              ";
-				const oldStr = (JSON.stringify(oldFiltered, null, 2) ?? "undefined").replace(/\n/g, `\n${indent}`);
-				const newStr = (JSON.stringify(newFiltered, null, 2) ?? "undefined").replace(/\n/g, `\n${indent}`);
+				const oldStr = renderDiffValue(propChange.oldValue, propChange.newValue, indent, false);
+				const newStr = renderDiffValue(propChange.newValue, propChange.oldValue, indent, true);
 				logFn(`      - ${propChange.path}:${requiresReplace}${propagated}`);
 				logFn(`          old: ${oldStr}`);
 				logFn(`          new: ${newStr}`);
@@ -56924,7 +57026,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.238.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.238.2");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());