@go-to-k/cdkd 0.268.1 → 0.268.3

package/dist/{deploy-engine-A2CeJkZr.js → deploy-engine-DEi5-8x-.js}

@@ -102,6 +102,24 @@ var SynthesisError = class SynthesisError extends CdkdError {
 	}
 };
 /**
+* Control-flow signal: the user declined a pre-provisioning confirmation
+* prompt, so the deploy must unwind WITHOUT being reported as a failure.
+*
+* Raised from `DeployEngineOptions.onCurrentStateLoaded` (the post-lock
+* gate the `--prefix-user-supplied-names` migration check runs in). The
+* engine does not catch it — it propagates out of `deploy()` through the
+* usual `finally`, which releases the lock and stops the renderer — and the
+* deploy CLI catches it and returns quietly instead of logging an error or
+* recording a FAILED run event. Nothing has been provisioned at that point.
+*/
+var DeployCancelledError = class DeployCancelledError extends CdkdError {
+	constructor(message = "Deployment cancelled by user") {
+		super(message, "DEPLOY_CANCELLED");
+		this.name = "DeployCancelledError";
+		Object.setPrototypeOf(this, DeployCancelledError.prototype);
+	}
+};
+/**
 * Asset errors
 */
 var AssetError = class AssetError extends CdkdError {
@@ -7946,6 +7964,7 @@ async function withRetry(operation, logicalId, opts = {}) {
 	const defaultSchedule = opts.maxRetries === void 0 && opts.initialDelayMs === void 0 && opts.maxDelayMs === void 0 && opts.isRetryable === void 0;
 	const attemptCeiling = defaultSchedule ? Math.max(maxRetries, 26) : maxRetries;
 	let lastError;
+	let sawPropagation = false;
 	for (let attempt = 0; attempt <= attemptCeiling; attempt++) try {
 		return await operation();
 	} catch (error) {
@@ -7953,7 +7972,8 @@ async function withRetry(operation, logicalId, opts = {}) {
 		const message = error instanceof Error ? error.message : String(error);
 		const retryable = opts.isRetryable ? opts.isRetryable(message, error) : isRetryableTransientError(error, message);
 		const propagation = defaultSchedule && isIamPropagationError(message);
-		const attemptLimit = propagation ? 26 : maxRetries;
+		if (propagation) sawPropagation = true;
+		const attemptLimit = sawPropagation ? 26 : maxRetries;
 		if (!retryable || attempt >= attemptLimit) throw error;
 		const delay = propagation ? Math.min(250 * Math.pow(2, attempt), IAM_PROPAGATION_MAX_DELAY_MS) : Math.min(initialDelayMs * Math.pow(2, attempt), maxDelayMs);
 		opts.logger?.debug(`  ⏳ Retrying ${logicalId} in ${delay / 1e3}s (attempt ${attempt + 1}/${attemptLimit}) - ${message}`);
@@ -8020,6 +8040,30 @@ function describeTypeWithThrottleRetry(resourceType, client) {
 		...describeTypeRetryDelays.sleep ? { sleep: describeTypeRetryDelays.sleep } : {}
 	});
 }
+/**
+* Resource types that have NO CloudFormation registry schema, so
+* `DescribeType` can only ever fail for them:
+*
+* - `Custom::<Name>` — the two-segment form the `TypeName` parameter
+*   rejects outright at validation time.
+* - `AWS::CloudFormation::CustomResource` — the generic custom-resource
+*   alias; replacement semantics are handler-driven, not schema-driven.
+* - `AWS::CDK::Metadata` — the CDK-injected construct-tree marker. It is a
+*   synth-only sentinel that cdkd never provisions (the deploy pre-flight,
+*   the diff, `synth`, `import` and `export` all filter it), yet the
+*   create-only schema PREFETCH iterated the raw template type set and so
+*   issued a guaranteed-to-fail `DescribeType` for it on EVERY deploy —
+*   burning one API call and emitting a "Grant cloudformation:DescribeType"
+*   warning that named a pseudo-resource the user cannot act on.
+*
+* Callers must short-circuit on this predicate rather than paying the round
+* trip plus the misleading warning. Kept next to
+* {@link describeTypeWithThrottleRetry} so every DescribeType-backed
+* resolver shares ONE list instead of re-deriving its own inline literal.
+*/
+function hasNoRegistrySchema(resourceType) {
+	return resourceType === "AWS::CDK::Metadata" || resourceType === "AWS::CloudFormation::CustomResource" || resourceType.startsWith("Custom::");
+}
 
 //#endregion
 //#region src/provisioning/create-only-properties.ts
@@ -8083,7 +8127,7 @@ const createOnlyPropertiesCache = /* @__PURE__ */ new Map();
 * (a transient throttle must not poison the deploy's replacement detection).
 */
 function getCreateOnlyPropertyPaths(resourceType) {
-	if (isCustomResourceType(resourceType)) return Promise.resolve([]);
+	if (hasNoRegistrySchema(resourceType)) return Promise.resolve([]);
 	const cached = createOnlyPropertiesCache.get(resourceType);
 	if (cached) return cached;
 	const entry = fetchCreateOnlyPropertyPaths(resourceType).catch((error) => {
@@ -8096,15 +8140,6 @@ function getCreateOnlyPropertyPaths(resourceType) {
 	return entry;
 }
 /**
-* True for the two custom-resource type shapes CloudFormation accepts:
-* `AWS::CloudFormation::CustomResource` and anything under the `Custom::`
-* prefix. Neither has a registry schema, so schema-driven lookups
-* (DescribeType) must be skipped for them.
-*/
-function isCustomResourceType(resourceType) {
-	return resourceType === "AWS::CloudFormation::CustomResource" || resourceType.startsWith("Custom::");
-}
-/**
 * Decide whether a change to top-level property `topLevelKey` requires
 * replacement per the schema's createOnly paths.
 *
@@ -11340,6 +11375,7 @@ const writeOnlyPropertiesCache = /* @__PURE__ */ new Map();
 * DescribeType (a transient throttle must not poison the deploy).
 */
 function getTopLevelWriteOnlyProperties(resourceType) {
+	if (hasNoRegistrySchema(resourceType)) return Promise.resolve(/* @__PURE__ */ new Set());
 	const cached = writeOnlyPropertiesCache.get(resourceType);
 	if (cached) return cached;
 	const entry = fetchTopLevelWriteOnlyProperties(resourceType).catch((error) => {
@@ -11905,7 +11941,7 @@ var CloudControlProvider = class {
 		this.logger.debug(`Deleting resource ${logicalId} (${resourceType}), physical ID: ${physicalId}`);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-_vnp1pfL.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-bxS6B6Ja.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -17617,7 +17653,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.268.1";
+	return "0.268.3";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -17721,11 +17757,33 @@ var DeploymentEventsStore = class {
 		}
 		if (this.events.length === 0) return;
 		await this.enqueueWrite(async () => {
+			const indexRead = this.readIndexRuns();
+			indexRead.catch(() => {});
 			await this.doFlush();
-			const keptRunIds = await this.updateIndex(result);
-			await this.pruneSupersededRunFiles(keptRunIds);
+			await this.writeIndexAndPrune(result, await indexRead);
 		});
 	}
+	/**
+	* Second half of {@link finalize}'s write: build + PUT the index, then
+	* delete the run streams that fell out of the retained window.
+	*
+	* The prune's LIST is issued concurrently with the index PUT — the cutoff
+	* is derived from `runs` (already known before the PUT), the LIST is
+	* read-only, and the DELETE still happens strictly AFTER the PUT resolves.
+	* So the on-S3 ordering is unchanged (a stream is only deleted once the
+	* index that dropped it is durable); only the round trip is overlapped.
+	*/
+	async writeIndexAndPrune(result, existingRuns) {
+		const { key, file, runs } = this.buildIndexUpdate(result, existingRuns);
+		const keptRunIds = runs.map((r) => r.runId);
+		const willPrune = keptRunIds.length >= 20;
+		const dirPrefix = deploymentsDirPrefix(this.backend.prefix, this.stackName, this.region);
+		const staleKeysRead = willPrune ? this.backend.listRawKeys(dirPrefix) : void 0;
+		staleKeysRead?.catch(() => {});
+		await this.backend.putRawObject(key, JSON.stringify(file, null, 2));
+		if (!staleKeysRead) return;
+		await this.pruneSupersededRunFiles(keptRunIds, dirPrefix, await staleKeysRead);
+	}
 	/** Await any in-flight async flushes (used by tests). */
 	async drain() {
 		await this.writeChain;
@@ -17756,27 +17814,40 @@ var DeploymentEventsStore = class {
 		this.persistedCount = snapshotCount;
 	}
 	/**
-	* Prepend this run's summary to `deployments/index.json`, truncated to
-	* the last {@link DEPLOYMENT_EVENTS_MAX_INDEX_RUNS} runs. Read-modify-
-	* write WITHOUT optimistic locking — last-writer-wins (documented
-	* trade-off; the per-run `.jsonl` files are the source of truth).
+	* READ half of the index read-modify-write. Returns the currently indexed
+	* run summaries, or an empty list when the index is absent / corrupt /
+	* unreadable (in which case the write half rebuilds from this run alone —
+	* the .jsonl files remain readable directly via `cdkd events --run`).
 	*
-	* Returns the run ids retained in the index (newest-first), which the
-	* caller feeds to {@link pruneSupersededRunFiles} so the `.jsonl` files
-	* stay bounded to the same window as the index.
+	* Split out of the former single `updateIndex` so {@link finalize} can
+	* issue it CONCURRENTLY with the event-stream flush: the two touch
+	* different objects and the read does not depend on the flush.
 	*/
-	async updateIndex(result) {
+	async readIndexRuns() {
 		const key = deploymentEventsIndexKey(this.backend.prefix, this.stackName, this.region);
-		let existingRuns = [];
 		try {
 			const raw = await this.backend.getRawObject(key);
 			if (raw !== null) {
 				const parsed = JSON.parse(raw);
-				if (Array.isArray(parsed.runs)) existingRuns = parsed.runs;
+				if (Array.isArray(parsed.runs)) return parsed.runs;
 			}
 		} catch (err) {
 			this.logger.debug(`Deployment-events index unreadable, rewriting: ${err instanceof Error ? err.message : String(err)}`);
 		}
+		return [];
+	}
+	/**
+	* MODIFY half of the index read-modify-write (pure): prepend this run's
+	* summary to `existingRuns`, truncated to the last
+	* {@link DEPLOYMENT_EVENTS_MAX_INDEX_RUNS} runs. No optimistic locking —
+	* last-writer-wins (documented trade-off; the per-run `.jsonl` files are
+	* the source of truth).
+	*
+	* `runs` (newest-first) doubles as the retained-run window that
+	* {@link pruneSupersededRunFiles} bounds the `.jsonl` files to.
+	*/
+	buildIndexUpdate(result, existingRuns) {
+		const key = deploymentEventsIndexKey(this.backend.prefix, this.stackName, this.region);
 		const runs = [{
 			runId: this.runId,
 			command: this.command,
@@ -17786,15 +17857,17 @@ var DeploymentEventsStore = class {
 			result,
 			eventCount: this.persistedCount
 		}, ...existingRuns.filter((r) => r.runId !== this.runId)].slice(0, 20);
-		const file = {
-			indexVersion: 1,
-			stackName: this.stackName,
-			region: this.region,
-			runs,
-			lastModified: Date.now()
+		return {
+			key,
+			file: {
+				indexVersion: 1,
+				stackName: this.stackName,
+				region: this.region,
+				runs,
+				lastModified: Date.now()
+			},
+			runs
 		};
-		await this.backend.putRawObject(key, JSON.stringify(file, null, 2));
-		return runs.map((r) => r.runId);
 	}
 	/**
 	* Self-bounding prune (issue #885): delete `{runId}.jsonl` streams that
@@ -17811,12 +17884,15 @@ var DeploymentEventsStore = class {
 	* runs finalized while it ran — an extreme edge that self-heals anyway,
 	* since the whole JSONL body is re-PUT on that run's next flush / finalize
 	* (S3 has no append; each flush rewrites the full stream).
+	*
+	* `dirPrefix` + `keys` are supplied by the caller so the LIST can be
+	* overlapped with the index PUT (see {@link writeIndexAndPrune}); the
+	* DELETE this method issues still runs strictly after that PUT.
 	*/
-	async pruneSupersededRunFiles(keptRunIds) {
+	async pruneSupersededRunFiles(keptRunIds, dirPrefix, keys) {
 		if (keptRunIds.length < 20) return;
 		const cutoff = keptRunIds.reduce((min, id) => id < min ? id : min, keptRunIds[0]);
-		const dirPrefix = deploymentsDirPrefix(this.backend.prefix, this.stackName, this.region);
-		const stale = (await this.backend.listRawKeys(dirPrefix)).filter((k) => {
+		const stale = keys.filter((k) => {
 			const runId = runIdFromJsonlKey(k, dirPrefix);
 			return runId !== null && runId < cutoff;
 		});
@@ -18426,7 +18502,7 @@ var DeployEngine = class {
 	async doDeploy(stackName, template) {
 		const startTime = Date.now();
 		this.logger.debug(`Starting deployment for stack: ${stackName}`);
-		for (const type of new Set(Object.values(template.Resources).map((r) => r.Type))) getCreateOnlyPropertyPaths(type).catch(() => {});
+		for (const type of new Set(Object.values(template.Resources).map((r) => r.Type).filter((type) => !hasNoRegistrySchema(type)))) getCreateOnlyPropertyPaths(type).catch(() => {});
 		await this.lockManager.acquireLockWithRetry(stackName, this.stackRegion, void 0, "deploy");
 		const renderer = getLiveRenderer();
 		renderer.start();
@@ -18453,6 +18529,7 @@ var DeployEngine = class {
 			const currentEtag = currentStateData?.etag;
 			const migrationPending = currentStateData?.migrationPending ?? false;
 			this.logger.debug(`Loaded current state: ${Object.keys(currentState.resources).length} resources`);
+			if (this.options.onCurrentStateLoaded) await this.options.onCurrentStateLoaded(stackName, currentStateData?.state);
 			try {
 				const journal = await this.stateBackend.loadRollbackJournal(stackName, this.stackRegion);
 				if (journal && journal.segments.length > 0) {
@@ -18566,8 +18643,7 @@ var DeployEngine = class {
 			await this.drainObservedCaptures(newState.resources);
 			const newEtag = await this.stateBackend.saveState(stackName, this.stackRegion, this.withParentInfo(newState));
 			this.logger.debug(`State saved (ETag: ${newEtag})`);
-			await this.deleteRollbackJournalBestEffort(stackName);
-			if (this.exportIndexStore) await this.exportIndexStore.updateForStack(stackName, this.stackRegion, newState.outputs ?? {});
+			await Promise.all([this.deleteRollbackJournalBestEffort(stackName), this.exportIndexStore ? this.exportIndexStore.updateForStack(stackName, this.stackRegion, newState.outputs ?? {}) : Promise.resolve()]);
 			const durationMs = Date.now() - startTime;
 			const unchangedCount = this.diffCalculator.filterByType(changes, "NO_CHANGE").length + actualCounts.skipped;
 			return {
@@ -19622,5 +19698,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { WorkGraph as $, MissingCdkCliError as $t, slowCcOperationTimeoutMs as A, warnDeprecatedNoPrefixCliFlag as At, applyRoleArnIfSet as B, resolveBucketRegion as Bt, yellow as C, resolveAutoAssetStorage as Ct, ProviderRegistry as D, resolveStateBucketWithDefaultAndSource as Dt, clearOnUpdateRemoval as E, resolveStateBucketWithDefault as Et, refStateLookupFromResource as F, uploadCfnTemplate as Ft, DagBuilder as G, AssetError as Gt, describeTypeWithThrottleRetry as H, getAwsClients as Ht, WAFv2WebACLProvider as I, expectedOwnerParam as It, S3StateBackend as J, DependencyError as Jt, TemplateParser as K, CdkdError as Kt, normalizeAwsTagsToCfn as L, AssemblyReader as Lt, isTerminationProtectionPropagationError as M, CFN_TEMPLATE_URL_LIMIT as Mt, IntrinsicFunctionResolver as N, MIGRATE_TMP_PREFIX as Nt, findActionableSilentDrops as O, resolveUseCdkBootstrapAssets as Ot, cfnRefValueFromPhysicalId as P, findLargeInlineResources as Pt, stringifyValue as Q, LockError as Qt, resolveExplicitPhysicalId as R, processStackMessages as Rt, red as S, resolveApp as St, collectInlinePolicyNamesManagedBySiblings as T, resolveSkipPrefix as Tt, withRetry as U, resetAwsClients as Ut, DiffCalculator as V, AwsClients as Vt, isRetryableTransientError as W, setAwsClients as Wt, shouldRetainResource as X, LocalMigrateError as Xt, rebuildClientForBucketRegion as Y, LocalInvokeBuildError as Yt, AssetPublisher as Z, LocalStartServiceError as Zt, formatResourceLine as _, getDockerImageBySourceHash as _t, DeploymentEventsStore as a, StackHasActiveImportsError as an, BOOTSTRAP_MARKER_PREFIX as at, gray as b, getDefaultStateBucketName as bt, replayFailedOperations as c, SynthesisError as cn, parseBootstrapMarker as ct, IMPLICIT_DELETE_DEPENDENCIES as d, normalizeAwsError as dn, buildDockerImage as dt, NestedStackChildDirectDestroyError as en, buildAssetRedirectMap as et, computeImplicitDeleteEdges as f, withErrorHandling as fn, formatDockerLoginError as ft, renderStatefulReason as g, AssetManifestLoader as gt, isStatefulRecreateTargetSync as h, runDockerStreaming as ht, DeploymentEventsReader as i, ResourceUpdateNotSupportedError as in, AssetModeResolver as it, disableInstanceApiTermination as j, CFN_TEMPLATE_BODY_LIMIT as jt, CloudControlProvider as k, stateBucketExistenceConfirmed as kt, replayRollback as l, formatError as ln, validateAssetBucketName as lt, MULTI_REGION_RECREATE_BLOCKED_TYPES as m, runDockerForeground as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, ProvisioningError as nn, loadPublishableAssetManifest as nt, planFailedOps as o, StackTerminationProtectionError as on, ensureAssetStorage as ot, extractDeploymentEventError as p, __exportAll as pn, getDockerCmd as pt, LockManager as q, ConfigError as qt, DeployEngine as r, ResourceTimeoutError as rn, rewriteTemplateAssetReferences as rt, planRollback as s, StateError as sn, getBootstrapMarkerKey as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, PartialFailureError as tn, createAssetRedirectResolver as tt, withResourceDeadline as u, isCdkdError as un, validateContainerRepoName as ut, bold as v, Synthesizer as vt, IAMRoleProvider as w, resolveCaptureObservedState as wt, green as x, getLegacyStateBucketName as xt, cyan as y, synthesisStatusMessage as yt, assertRegionMatch as z, clearBucketRegionCache as zt };
-//# sourceMappingURL=deploy-engine-A2CeJkZr.js.map
+export { WorkGraph as $, LockError as $t, slowCcOperationTimeoutMs as A, warnDeprecatedNoPrefixCliFlag as At, applyRoleArnIfSet as B, resolveBucketRegion as Bt, yellow as C, resolveAutoAssetStorage as Ct, ProviderRegistry as D, resolveStateBucketWithDefaultAndSource as Dt, clearOnUpdateRemoval as E, resolveStateBucketWithDefault as Et, refStateLookupFromResource as F, uploadCfnTemplate as Ft, DagBuilder as G, AssetError as Gt, describeTypeWithThrottleRetry as H, getAwsClients as Ht, WAFv2WebACLProvider as I, expectedOwnerParam as It, S3StateBackend as J, DependencyError as Jt, TemplateParser as K, CdkdError as Kt, normalizeAwsTagsToCfn as L, AssemblyReader as Lt, isTerminationProtectionPropagationError as M, CFN_TEMPLATE_URL_LIMIT as Mt, IntrinsicFunctionResolver as N, MIGRATE_TMP_PREFIX as Nt, findActionableSilentDrops as O, resolveUseCdkBootstrapAssets as Ot, cfnRefValueFromPhysicalId as P, findLargeInlineResources as Pt, stringifyValue as Q, LocalStartServiceError as Qt, resolveExplicitPhysicalId as R, processStackMessages as Rt, red as S, resolveApp as St, collectInlinePolicyNamesManagedBySiblings as T, resolveSkipPrefix as Tt, withRetry as U, resetAwsClients as Ut, DiffCalculator as V, AwsClients as Vt, isRetryableTransientError as W, setAwsClients as Wt, shouldRetainResource as X, LocalInvokeBuildError as Xt, rebuildClientForBucketRegion as Y, DeployCancelledError as Yt, AssetPublisher as Z, LocalMigrateError as Zt, formatResourceLine as _, getDockerImageBySourceHash as _t, DeploymentEventsStore as a, ResourceUpdateNotSupportedError as an, BOOTSTRAP_MARKER_PREFIX as at, gray as b, getDefaultStateBucketName as bt, replayFailedOperations as c, StateError as cn, parseBootstrapMarker as ct, IMPLICIT_DELETE_DEPENDENCIES as d, isCdkdError as dn, buildDockerImage as dt, MissingCdkCliError as en, buildAssetRedirectMap as et, computeImplicitDeleteEdges as f, normalizeAwsError as fn, formatDockerLoginError as ft, renderStatefulReason as g, AssetManifestLoader as gt, isStatefulRecreateTargetSync as h, runDockerStreaming as ht, DeploymentEventsReader as i, ResourceTimeoutError as in, AssetModeResolver as it, disableInstanceApiTermination as j, CFN_TEMPLATE_BODY_LIMIT as jt, CloudControlProvider as k, stateBucketExistenceConfirmed as kt, replayRollback as l, SynthesisError as ln, validateAssetBucketName as lt, MULTI_REGION_RECREATE_BLOCKED_TYPES as m, __exportAll as mn, runDockerForeground as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, PartialFailureError as nn, loadPublishableAssetManifest as nt, planFailedOps as o, StackHasActiveImportsError as on, ensureAssetStorage as ot, extractDeploymentEventError as p, withErrorHandling as pn, getDockerCmd as pt, LockManager as q, ConfigError as qt, DeployEngine as r, ProvisioningError as rn, rewriteTemplateAssetReferences as rt, planRollback as s, StackTerminationProtectionError as sn, getBootstrapMarkerKey as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, NestedStackChildDirectDestroyError as tn, createAssetRedirectResolver as tt, withResourceDeadline as u, formatError as un, validateContainerRepoName as ut, bold as v, Synthesizer as vt, IAMRoleProvider as w, resolveCaptureObservedState as wt, green as x, getLegacyStateBucketName as xt, cyan as y, synthesisStatusMessage as yt, assertRegionMatch as z, clearBucketRegionCache as zt };
+//# sourceMappingURL=deploy-engine-DEi5-8x-.js.map