@go-to-k/cdkd 0.238.1 → 0.238.3

package/dist/cli.js

@@ -2,7 +2,7 @@
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BzO-joNR.js";
 import { A as withErrorHandling, C as StackHasActiveImportsError, S as ResourceUpdateNotSupportedError, _ as MissingCdkCliError, a as normalizeAwsTagsToCfn, b as ProvisioningError, f as LocalInvokeBuildError$1, i as matchesCdkPath, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as isTerminationProtectionPropagationError, o as resolveExplicitPhysicalId, p as LocalMigrateError, r as CDK_PATH_TAG, s as assertRegionMatch, t as disableInstanceApiTermination, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError } from "./ec2-termination-protection-q-WGWgxa.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-B15NAPbL.js";
-import { $ as getDockerCmd, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, Ct as resolveBucketRegion, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as parseBootstrapMarker, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as formatDockerLoginError, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as validateContainerRepoName, Y as validateAssetBucketName, Z as buildDockerImage, _ as green, _t as CFN_TEMPLATE_URL_LIMIT, a as withRetry, at as synthesisStatusMessage, b as IAMRoleProvider, bt as uploadCfnTemplate, c as computeImplicitDeleteEdges, ct as resolveApp, d as isStatefulRecreateTargetSync, dt as resolveSkipPrefix, et as runDockerForeground, f as renderStatefulReason, ft as resolveStateBucketWithDefault, g as gray, gt as CFN_TEMPLATE_BODY_LIMIT, h as cyan, ht as warnDeprecatedNoPrefixCliFlag, i as withResourceDeadline, it as Synthesizer, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveAutoAssetStorage, m as bold, mt as resolveUseCdkBootstrapAssets, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as AssetManifestLoader, o as isRetryableTransientError, ot as getDefaultStateBucketName, p as formatResourceLine, pt as resolveStateBucketWithDefaultAndSource, q as getBootstrapMarkerKey, r as DeployEngine, rt as getDockerImageBySourceHash, s as IMPLICIT_DELETE_DEPENDENCIES, st as getLegacyStateBucketName, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as runDockerStreaming, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveCaptureObservedState, v as red, vt as MIGRATE_TMP_PREFIX, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, xt as AssemblyReader, y as yellow, yt as findLargeInlineResources, z as WorkGraph } from "./deploy-engine-BxEZXkWw.js";
+import { $ as getDockerCmd, A as DiffCalculator, B as buildAssetRedirectMap, C as findActionableSilentDrops, Ct as resolveBucketRegion, D as refStateLookupFromResource, E as cfnRefValueFromPhysicalId, F as rebuildClientForBucketRegion, G as BOOTSTRAP_MARKER_PREFIX, H as loadPublishableAssetManifest, I as shouldRetainResource, J as parseBootstrapMarker, K as ensureAssetStorage, L as AssetPublisher, M as TemplateParser, N as LockManager, O as WAFv2WebACLProvider, P as S3StateBackend, Q as formatDockerLoginError, R as stringifyValue, S as ProviderRegistry, T as IntrinsicFunctionResolver, U as rewriteTemplateAssetReferences, V as createAssetRedirectResolver, W as AssetModeResolver, X as validateContainerRepoName, Y as validateAssetBucketName, Z as buildDockerImage, _ as green, _t as CFN_TEMPLATE_URL_LIMIT, a as withRetry, at as synthesisStatusMessage, b as IAMRoleProvider, bt as uploadCfnTemplate, c as computeImplicitDeleteEdges, ct as resolveApp, d as isStatefulRecreateTargetSync, dt as resolveSkipPrefix, et as runDockerForeground, f as renderStatefulReason, ft as resolveStateBucketWithDefault, g as gray, gt as CFN_TEMPLATE_BODY_LIMIT, h as cyan, ht as warnDeprecatedNoPrefixCliFlag, i as withResourceDeadline, it as Synthesizer, j as DagBuilder, k as applyRoleArnIfSet, l as extractDeploymentEventError, lt as resolveAutoAssetStorage, m as bold, mt as resolveUseCdkBootstrapAssets, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as AssetManifestLoader, o as isRetryableTransientError, ot as getDefaultStateBucketName, p as formatResourceLine, pt as resolveStateBucketWithDefaultAndSource, q as getBootstrapMarkerKey, r as DeployEngine, rt as getDockerImageBySourceHash, s as IMPLICIT_DELETE_DEPENDENCIES, st as getLegacyStateBucketName, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as runDockerStreaming, u as MULTI_REGION_RECREATE_BLOCKED_TYPES, ut as resolveCaptureObservedState, v as red, vt as MIGRATE_TMP_PREFIX, w as CloudControlProvider, x as collectInlinePolicyNamesManagedBySiblings, xt as AssemblyReader, y as yellow, yt as findLargeInlineResources, z as WorkGraph } from "./deploy-engine-MEo926OW.js";
 import { t as expectedOwnerParam } from "./expected-bucket-owner-BjEfUnkA.js";
 import { t as ASGProvider } from "./asg-provider-Dbl1_mwT.js";
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -1885,7 +1885,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.238.1";
+	return "0.238.3";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -37371,6 +37371,86 @@ var NestedStackProvider = class {
 	}
 };
 
+//#endregion
+//#region src/provisioning/providers/wait-condition-handle-provider.ts
+/**
+* AWS::CloudFormation::WaitConditionHandle Provider (no-op placeholder).
+*
+* In CloudFormation this resource's physical id is a pre-signed S3 URL that
+* `cfn-signal` posts to, backed by CloudFormation's own internal signal
+* bucket. That URL cannot exist outside a CloudFormation deployment, so cdkd
+* provisions the handle as a pure no-op: no AWS API is called, and the
+* physical id is a synthesized opaque placeholder.
+*
+* This matches how the type is used in practice by CDK constructs — most
+* notably `cdk-multi-region-stack`, which emits a bare
+* `CfnWaitConditionHandle` only so a sibling stack never has zero resources
+* (CloudFormation rejects empty templates). Actual wait-condition signaling
+* (`AWS::CloudFormation::WaitCondition`, which blocks on signals sent to the
+* handle URL) remains unsupported — that semantic fundamentally requires
+* CloudFormation itself.
+*/
+var WaitConditionHandleProvider = class {
+	logger = getLogger().child("WaitConditionHandleProvider");
+	handledProperties = new Map([["AWS::CloudFormation::WaitConditionHandle", /* @__PURE__ */ new Set([])]]);
+	/**
+	* "Create" the handle: synthesize a unique placeholder physical id.
+	* `Ref` on the handle resolves to this id. It is deliberately NOT
+	* URL-shaped — a consumer that tries to `cfn-signal` it should fail
+	* loudly rather than post to a URL that nothing polls.
+	*/
+	async create(logicalId, _resourceType, _properties) {
+		const physicalId = `cdkd-wait-condition-handle-${logicalId}-${randomUUID()}`;
+		this.logger.debug(`Created no-op WaitConditionHandle placeholder ${logicalId} (${physicalId})`);
+		return {
+			physicalId,
+			attributes: {}
+		};
+	}
+	/**
+	* The type has no properties, so there is nothing to update — keep the
+	* existing physical id.
+	*/
+	async update(logicalId, physicalId, _resourceType, _properties, _previousProperties) {
+		this.logger.debug(`No-op update for WaitConditionHandle ${logicalId}`);
+		return {
+			physicalId,
+			wasReplaced: false,
+			attributes: {}
+		};
+	}
+	/** Nothing was created in AWS, so there is nothing to delete. */
+	async delete(logicalId, _physicalId, _resourceType) {
+		this.logger.debug(`No-op delete for WaitConditionHandle ${logicalId}`);
+	}
+	/**
+	* WaitConditionHandle is effectively `Ref`-only. Its CFn schema declares a
+	* single read-only property `Id` (the primary identifier); the deploy
+	* engine's resolver never calls this method for it (it resolves via the
+	* physicalId fallback), so a direct call — e.g. `cdkd orphan`'s live
+	* attribute fetch — fails loudly instead of fabricating a value.
+	*/
+	async getAttribute(physicalId, resourceType, attributeName) {
+		throw new ProvisioningError(`AWS::CloudFormation::WaitConditionHandle has no Fn::GetAtt attributes (requested: ${attributeName})`, resourceType, physicalId);
+	}
+	/** No managed properties → nothing can drift. */
+	async readCurrentState() {
+		return {};
+	}
+	/**
+	* Import: there is no AWS-queryable resource behind a handle, so accept a
+	* caller-supplied physical id verbatim (for `--migrate-from-cloudformation`
+	* this is CloudFormation's pre-signed-URL id from `DescribeStackResources`)
+	* and synthesize a placeholder otherwise.
+	*/
+	async import(input) {
+		return {
+			physicalId: input.knownPhysicalId ?? `cdkd-wait-condition-handle-${input.logicalId}-${randomUUID()}`,
+			attributes: {}
+		};
+	}
+};
+
 //#endregion
 //#region src/provisioning/providers/acm-certificate-provider.ts
 /**
@@ -37855,6 +37935,7 @@ function registerAllProviders(registry) {
 	registry.register("AWS::S3Tables::Namespace", s3TablesProvider);
 	registry.register("AWS::S3Tables::Table", s3TablesProvider);
 	registry.register("AWS::CloudFormation::Stack", new NestedStackProvider());
+	registry.register("AWS::CloudFormation::WaitConditionHandle", new WaitConditionHandleProvider());
 }
 
 //#endregion
@@ -39176,6 +39257,7 @@ async function confirmPrompt$6(prompt) {
 
 //#endregion
 //#region src/cli/commands/diff-recursive.ts
+const logger = getLogger().child("DiffRecursive");
 /** Empty template used to diff a removed nested child's state → all DELETE. */
 const EMPTY_TEMPLATE = { Resources: {} };
 /**
@@ -39258,15 +39340,45 @@ async function loadStateOrEmpty(stackName, region, stateBackend) {
 */
 async function computeStackDiff(currentState, template, region, stackName, stateBackend, diffCalculator, parameters) {
 	const intrinsicResolver = new IntrinsicFunctionResolver(region);
+	let mergedParameters = parameters;
+	let parametersBound = false;
+	try {
+		const userParameters = {};
+		for (const [name, value] of Object.entries(parameters ?? {})) if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") userParameters[name] = String(value);
+		const templateParameters = await intrinsicResolver.resolveParameters(template, userParameters);
+		mergedParameters = {
+			...parameters,
+			...templateParameters
+		};
+		parametersBound = true;
+	} catch (error) {
+		logger.debug(`Diff parameter binding for stack ${stackName} is partial: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	let effectiveTemplate = template;
+	let conditions;
+	if (parametersBound) try {
+		conditions = await intrinsicResolver.evaluateConditions({
+			template,
+			resources: currentState.resources,
+			stateBackend,
+			stackName,
+			bestEffort: true,
+			...mergedParameters && { parameters: mergedParameters }
+		});
+		effectiveTemplate = new TemplateParser().filterResourcesByCondition(template, conditions);
+	} catch (error) {
+		logger.debug(`Diff condition evaluation for stack ${stackName} skipped: ${error instanceof Error ? error.message : String(error)}`);
+	}
 	const resolveFn = (value) => intrinsicResolver.resolve(value, {
-		template,
+		template: effectiveTemplate,
 		resources: currentState.resources,
 		stateBackend,
 		stackName,
 		bestEffort: true,
-		...parameters && { parameters }
+		...mergedParameters && { parameters: mergedParameters },
+		...conditions && { conditions }
 	});
-	return diffCalculator.calculateDiff(currentState, template, resolveFn);
+	return diffCalculator.calculateDiff(currentState, effectiveTemplate, resolveFn);
 }
 /**
 * Resolve a nested-stack child's input `Parameters` (declared on the parent's
@@ -56945,7 +57057,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.238.1");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.238.3");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());