@go-to-k/cdkd 0.284.53 → 0.284.55

package/dist/{deploy-engine-DOP4V6eK.js → deploy-engine-B1tSPv8F.js}

@@ -1,5 +1,5 @@
 import { a as getLiveRenderer, d as generateResourceNameWithFallback, f as getCurrentStackName, h as withStackName, l as applyDefaultNameForFallback, n as getLogger, p as looksLikeCdkdGeneratedName, u as generateResourceName } from "./logger-zRrlbaQt.js";
-import { t as getCdkdVersion } from "./version-CaIqvSUG.js";
+import { t as getCdkdVersion } from "./version-DD5yHFTJ.js";
 import { randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { CloudControlClient, CreateResourceCommand, DeleteResourceCommand, GetResourceCommand, GetResourceRequestStatusCommand, ListResourcesCommand, UpdateResourceCommand } from "@aws-sdk/client-cloudcontrol";
@@ -7672,6 +7672,45 @@ var S3StateBackend = class {
 		return keys;
 	}
 	/**
+	* Raw sidecar-object listing WITH metadata under the state bucket.
+	*
+	* {@link listRawKeys}'s twin, and it exists because an age-guarded sweep
+	* needs `LastModified` and the reclaim plan needs `Size` — neither of which a
+	* key list carries. Used by `cdkd gc`'s custom-resource-response sweep
+	* (issue #2052), where the age is the only thing separating an abandoned
+	* placeholder from one a concurrent run is about to write to.
+	*
+	* `LastModified` / `Size` are omitted from the response only for a key S3
+	* did not return metadata for, which does not happen for `ListObjectsV2`
+	* `Contents` entries; an entry missing either is DROPPED rather than
+	* defaulted, because defaulting the date would either exempt an object from
+	* the age guard forever or expose it immediately, and both are wrong in a
+	* direction the caller cannot see.
+	*/
+	async listRawObjects(keyPrefix) {
+		await this.ensureClientForBucket();
+		const objects = [];
+		let continuationToken;
+		do {
+			const response = await this.s3Client.send(new ListObjectsV2Command({
+				Bucket: this.config.bucket,
+				...await this.ownerParam(),
+				Prefix: keyPrefix,
+				...continuationToken && { ContinuationToken: continuationToken }
+			}));
+			for (const obj of response.Contents ?? []) {
+				if (obj.Key === void 0 || obj.LastModified === void 0 || obj.Size === void 0) continue;
+				objects.push({
+					key: obj.Key,
+					lastModified: obj.LastModified,
+					size: obj.Size
+				});
+			}
+			continuationToken = response.IsTruncated ? response.NextContinuationToken : void 0;
+		} while (continuationToken);
+		return objects;
+	}
+	/**
 	* Raw sidecar-object batch delete under the state bucket. Used by the
 	* deployment-events pruner (issue #885) to drop superseded `{runId}.jsonl`
 	* streams + their index. Chunked to the 1,000-key `DeleteObjects` ceiling.
@@ -18451,7 +18490,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-Ciurx_UV.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-nddX-RVm.js").then((n) => n.n);
 			return await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 		}
 		const isProtectedEc2Instance = context?.removeProtection === true && resourceType === "AWS::EC2::Instance";
@@ -19194,13 +19233,28 @@ var CloudControlProvider = class {
 *
 * 4. **The handler force-quits when it is the LAST listener.** Property 3 gets
 *    the watch armed only under a command with a shutdown path, but that path
-*    is not live for the command's whole duration: `destroy.ts` registers no
-*    SIGINT handler of its own, and `destroy-runner.ts` removes its one in a
-*    `finally` — so between two stacks of a multi-stack destroy the shared
-*    handler is the ONLY listener. Merely latching there SWALLOWS the Ctrl-C:
-*    the process does not exit, `draining` is never set, `result.interrupted`
-*    stays false, and the loop proceeds to delete the NEXT stack after the user
-*    asked to stop — this file's own headline failure, one layer out.
+*    is not live for the command's whole duration. The case that motivated it:
+*    `destroy.ts` registered no SIGINT handler of its own, and
+*    `destroy-runner.ts` removes its one in a `finally` — so between two stacks
+*    of a multi-stack destroy the shared handler was the ONLY listener. Merely
+*    latching there SWALLOWS the Ctrl-C: the process does not exit, `draining`
+*    is never set, `result.interrupted` stays false, and the loop proceeds to
+*    delete the NEXT stack after the user asked to stop — this file's own
+*    headline failure, one layer out.
+*
+*    Issue #2117 closed THAT instance from the command side: `destroy.ts` and
+*    `state.ts` now hold a command-scoped handler for their whole run
+*    (`watchCommandInterrupt`, `src/utils/interrupt-signals.ts`), so this
+*    handler is no longer last during a destroy and no longer fires there.
+*    That is the improvement rather than a loss — the force-quit exited 130
+*    with the lock stranded and without stopping the loop gracefully. Note the
+*    dependency runs BOTH ways: because this handler is a latch rather than a
+*    graceful owner, that watch must NOT treat its presence as "someone else
+*    will handle this" (it subtracts `interruptWatchListenerCount()` for
+*    exactly that reason), or the swallow above returns one window inward.
+*    The remaining population here is the commands that register no handler at
+*    all — `import` / `export` / `scrub` / `orphan` / `drift` /
+*    `state refresh-observed`.
 *
 *    So when no other listener remains, the handler restores exactly what Node
 *    would have done with no listener at all. That is deliberately not a second
@@ -19275,7 +19329,10 @@ let sigintLatched = false;
 * Production never assigns either, and neither condition may be weakened to
 * accommodate tests: a command without a shutdown path really must keep Node's
 * default terminate, and a swallowed Ctrl-C in a multi-stack destroy really is
-* a blocker. `cdkd drift --revert` and `cdkd destroy` are the live instances.
+* a blocker. `cdkd drift --revert` is the live instance of the first. The second
+* was `cdkd destroy`, until issue #2117 gave both destroy commands a
+* command-scoped handler of their own; the force-quit's remaining population is
+* the commands that register none at all (see property 4).
 *
 * `commandOwnsInterrupts` exists because a provider suite never runs a COMMAND,
 * so every interrupt test would otherwise exercise the UNARMED path while
@@ -19395,6 +19452,51 @@ function endCommandInterruptScope() {
 	}
 	resetInterruptWatchLatch();
 }
+/**
+* How many process SIGINT listeners this module owns: 0 before arming, 1 after.
+*
+* Exported so a test can pin both polarities of property 3 without reaching
+* into module state or counting listeners it does not own.
+*/
+function interruptWatchListenerCount() {
+	return sharedSigintHandler === void 0 ? 0 : 1;
+}
+
+//#endregion
+//#region src/state/state-prefix.ts
+/**
+* The default S3 key prefix for cdkd state.
+*
+* Homed in the STATE layer rather than in `src/cli/commands/state-file-keys.ts`
+* (which re-exports it, so its four existing importers are unchanged) because
+* `src/state/lock-contention-message.ts` needs it to decide whether a recovery
+* hint should spell `--state-prefix` at all, and a `src/state/**` module
+* importing from `src/cli/commands/**` inverts the layering — the CLI sits
+* ABOVE the state layer in the 7-layer architecture, not below it.
+*
+* Note this is only the DEFAULT. Other commands accept `--state-prefix`, so
+* whole-bucket listings deliberately do not scope to it.
+*/
+const DEFAULT_STATE_PREFIX = "cdkd";
+/**
+* The state-bucket prefix `CustomResourceProvider` PUTs its response
+* placeholders under, one object per invocation
+* (`custom-resource-responses/{requestId}.json`).
+*
+* Homed here for the same layering reason as {@link DEFAULT_STATE_PREFIX}: the
+* PRODUCER is `src/provisioning/providers/custom-resource-provider.ts` and the
+* COLLECTOR is `src/cli/commands/gc.ts`, so a copy in either would be a copy
+* the other could drift from — and the two spellings would then disagree about
+* which objects exist, which is the only way a sweeper can miss the family it
+* was written for (issue #2052). `src/cli/commands/state-file-keys.ts`
+* re-exports it so gc reads it alongside the other state-key constants.
+*
+* Note this is only the DEFAULT: `ProviderRegistry` can be configured with a
+* different `responsePrefix`, so a sweep scoped to this value is a sweep of the
+* default layout. gc has no access to a non-default one — nothing persists it —
+* which is stated at the sweep's own call site rather than implied here.
+*/
+const CUSTOM_RESOURCE_RESPONSE_PREFIX = "custom-resource-responses";
 
 //#endregion
 //#region src/provisioning/providers/custom-resource-provider.ts
@@ -29796,5 +29898,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { startInterruptWatch as $, AwsClients as $n, shouldRetainResource as $t, renderStatefulReason as A, getLegacyStateBucketName as An, isThrottlingError as Ar, redactSecretsForState as At, exportAliasCollisionScrubWarning as B, CFN_TEMPLATE_BODY_LIMIT as Bn, DiffCalculator as Bt, isFinalSnapshotError as C, runDockerForeground as Cn, SynthesisError as Cr, TEMPLATE_SOURCED_RULES as Ct, extractDeploymentEventError as D, Synthesizer as Dn, withErrorHandling as Dr, isSingleDynamicReferenceToken as Dt, makeCanonicalizePropertiesFn as E, getDockerImageBySourceHash as En, normalizeAwsError as Er, errorCauseChain as Et, green as F, resolveStateBucketWithDefault as Fn, s3BucketDomainName as Ft, collectInlinePolicyNamesManagedBySiblings as G, expectedOwnerParam as Gn, TemplateParser as Gt, secretBearingStateKeyWarning as H, MIGRATE_TMP_PREFIX as Hn, describeTypeWithThrottleRetry as Ht, red as I, resolveStateBucketWithDefaultAndSource as In, s3BucketDualStackDomainName as It, findActionableSilentDrops as J, derivePartitionAndUrlSuffix as Jn, S3StateBackend as Jt, clearOnUpdateRemoval as K, PARTITION_TABLE as Kn, LockManager as Kt, yellow as L, resolveUseCdkBootstrapAssets as Ln, s3BucketRegionalDomainName as Lt, bold as M, resolveAutoAssetStorage as Mn, __exportAll as Mr, classifyReplaySecretRegion as Mt, cyan as N, resolveCaptureObservedState as Nn, producerRegionsFromState as Nt, MULTI_REGION_RECREATE_BLOCKED_TYPES as O, synthesisStatusMessage as On, isMarkedNonRetryable as Or, maskSecretsInError as Ot, gray as P, resolveSkipPrefix as Pn, s3BucketArn as Pt, isInterruptedWaitError as Q, resolveBucketRegion as Qn, importableOutputs as Qt, collectDeclaredOutputNames as R, stateBucketExistenceConfirmed as Rn, s3BucketWebsiteUrl as Rt, createPreDeleteFinalSnapshot as S, partitionSensitiveEnv as Sn, StateError as Sr, STATE_SOURCED_READBACK_RULES as St, unsupportedFinalSnapshotError as T, AssetManifestLoader as Tn, isCdkdError as Tr, dynamicReferenceTokens as Tt, stateKeySecretExposure as U, findLargeInlineResources as Un, withRetry as Ut, isExportAliasCollision as V, CFN_TEMPLATE_URL_LIMIT as Vn, INTRINSIC_KEYS as Vt, IAMRoleProvider as W, uploadCfnTemplate as Wn, DagBuilder as Wt, beginCommandInterruptScope as X, processStackMessages as Xn, exportNamesCarriedFrom as Xt, findSilentDropProperties as Y, AssemblyReader as Yn, rebuildClientForBucketRegion as Yt, endCommandInterruptScope as Z, clearBucketRegionCache as Zn, importableOutputKeys as Zt, computeImplicitDeleteEdges as _, buildDenyExternalAccessPolicy as _n, ProvisioningError as _r, replayWarn as _t, DeploymentEventsStore as a, loadPublishableAssetManifest as an, ConfigError as ar, carriesDynamicReference as at, buildFinalSnapshotIdentifier as b, formatDockerLoginError as bn, StackHasActiveImportsError as br, requireConfigString as bt, replayFailedOperations as c, stripControlChars as cn, DeployCancelledError as cr, refStateLookupFromResource as ct, updatePartialReason as d, ensureAssetStorage as dn, LocalMigrateError as dr, resolveExplicitPhysicalId as dt, AssetPublisher as en, getAwsClients as er, CloudControlProvider as et, UNSPECIFIED_SKIP_REASON as f, getBootstrapMarkerKey as fn, LocalStartServiceError as fr, assertRegionMatch as ft, IMPLICIT_DELETE_DEPENDENCIES as g, validateContainerRepoName as gn, PartialFailureError as gr, readConfigString as gt, maskingRetryLogger as h, validateAssetBucketName as hn, NestedStackChildDirectDestroyError as hr, configStringRefusal as ht, DeploymentEventsReader as i, createAssetRedirectResolver as in, CdkdError as ir, IntrinsicFunctionResolver as it, formatResourceLine as j, resolveApp as jn, markNonRetryable as jr, scrubResourceRecord as jt, isStatefulRecreateTargetSync as k, getDefaultStateBucketName as kn, isRetryableTransientError as kr, maskSecretsInText as kt, replayRollback as l, AssetModeResolver as ln, DynamicReferenceRegionAmbiguousError as lr, WAFv2WebACLProvider as lt, withResourceDeadline as m, readBootstrapMarkerBody as mn, MissingCdkCliError as mr, configBooleanRefusal as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, WorkGraph as nn, setAwsClients as nr, disableInstanceApiTermination as nt, planFailedOps as o, rewriteTemplateAssetReferences as on, CrossAccountSecretRefusalError as or, cfnRefValueFromPhysicalId as ot, deleteSkipReason as p, parseBootstrapMarker as pn, LockError as pr, coerceCfnBoolean as pt, ProviderRegistry as q, canonicalizeRegion as qn, displaySafe as qt, DeployEngine as r, buildAssetRedirectMap as rn, AssetError as rr, isTerminationProtectionPropagationError as rt, planRollback as s, escapeRegExp$1 as sn, DependencyError as sr, getAccountInfo as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, stringifyValue as tn, resetAwsClients as tr, slowCcOperationTimeoutMs as tt, updatePartialMessage as u, BOOTSTRAP_MARKER_PREFIX as un, LocalInvokeBuildError as ur, normalizeAwsTagsToCfn as ut, ATOMIC_FINAL_SNAPSHOT_TYPES as v, buildDockerImage as vn, ResourceTimeoutError as vr, requireConfigArray as vt, refusesFinalSnapshot as w, runDockerStreaming as wn, formatError as wr, createSecretMasker as wt, ccRoutedFinalSnapshotError as x, getDockerCmd as xn, StackTerminationProtectionError as xr, STATE_SOURCED_CROSS_GENERATION_RULES as xt, PRE_DELETE_SNAPSHOT_TYPES as y, dockerSpawnEnvWithSensitive as yn, ResourceUpdateNotSupportedError as yr, requireConfigObject as yt, collectPublishedOutputNames as z, warnDeprecatedNoPrefixCliFlag as zn, applyRoleArnIfSet as zt };
-//# sourceMappingURL=deploy-engine-DOP4V6eK.js.map
+export { endCommandInterruptScope as $, processStackMessages as $n, exportNamesCarriedFrom as $t, renderStatefulReason as A, Synthesizer as An, withErrorHandling as Ar, isSingleDynamicReferenceToken as At, exportAliasCollisionScrubWarning as B, resolveUseCdkBootstrapAssets as Bn, s3BucketRegionalDomainName as Bt, isFinalSnapshotError as C, formatDockerLoginError as Cn, StackHasActiveImportsError as Cr, requireConfigString as Ct, extractDeploymentEventError as D, runDockerStreaming as Dn, formatError as Dr, createSecretMasker as Dt, makeCanonicalizePropertiesFn as E, runDockerForeground as En, SynthesisError as Er, TEMPLATE_SOURCED_RULES as Et, green as F, resolveAutoAssetStorage as Fn, __exportAll as Fr, classifyReplaySecretRegion as Ft, collectInlinePolicyNamesManagedBySiblings as G, MIGRATE_TMP_PREFIX as Gn, describeTypeWithThrottleRetry as Gt, secretBearingStateKeyWarning as H, warnDeprecatedNoPrefixCliFlag as Hn, applyRoleArnIfSet as Ht, red as I, resolveCaptureObservedState as In, producerRegionsFromState as It, findActionableSilentDrops as J, expectedOwnerParam as Jn, TemplateParser as Jt, clearOnUpdateRemoval as K, findLargeInlineResources as Kn, withRetry as Kt, yellow as L, resolveSkipPrefix as Ln, s3BucketArn as Lt, bold as M, getDefaultStateBucketName as Mn, isRetryableTransientError as Mr, maskSecretsInText as Mt, cyan as N, getLegacyStateBucketName as Nn, isThrottlingError as Nr, redactSecretsForState as Nt, MULTI_REGION_RECREATE_BLOCKED_TYPES as O, AssetManifestLoader as On, isCdkdError as Or, dynamicReferenceTokens as Ot, gray as P, resolveApp as Pn, markNonRetryable as Pr, scrubResourceRecord as Pt, beginCommandInterruptScope as Q, AssemblyReader as Qn, rebuildClientForBucketRegion as Qt, collectDeclaredOutputNames as R, resolveStateBucketWithDefault as Rn, s3BucketDomainName as Rt, createPreDeleteFinalSnapshot as S, dockerSpawnEnvWithSensitive as Sn, ResourceUpdateNotSupportedError as Sr, requireConfigObject as St, unsupportedFinalSnapshotError as T, partitionSensitiveEnv as Tn, StateError as Tr, STATE_SOURCED_READBACK_RULES as Tt, stateKeySecretExposure as U, CFN_TEMPLATE_BODY_LIMIT as Un, DiffCalculator as Ut, isExportAliasCollision as V, stateBucketExistenceConfirmed as Vn, s3BucketWebsiteUrl as Vt, IAMRoleProvider as W, CFN_TEMPLATE_URL_LIMIT as Wn, INTRINSIC_KEYS as Wt, CUSTOM_RESOURCE_RESPONSE_PREFIX as X, canonicalizeRegion as Xn, displaySafe as Xt, findSilentDropProperties as Y, PARTITION_TABLE as Yn, LockManager as Yt, DEFAULT_STATE_PREFIX as Z, derivePartitionAndUrlSuffix as Zn, S3StateBackend as Zt, computeImplicitDeleteEdges as _, readBootstrapMarkerBody as _n, MissingCdkCliError as _r, configBooleanRefusal as _t, DeploymentEventsStore as a, WorkGraph as an, setAwsClients as ar, disableInstanceApiTermination as at, buildFinalSnapshotIdentifier as b, buildDenyExternalAccessPolicy as bn, ProvisioningError as br, replayWarn as bt, replayFailedOperations as c, loadPublishableAssetManifest as cn, ConfigError as cr, carriesDynamicReference as ct, updatePartialReason as d, stripControlChars as dn, DeployCancelledError as dr, refStateLookupFromResource as dt, importableOutputKeys as en, clearBucketRegionCache as er, interruptWatchListenerCount as et, UNSPECIFIED_SKIP_REASON as f, AssetModeResolver as fn, DynamicReferenceRegionAmbiguousError as fr, WAFv2WebACLProvider as ft, IMPLICIT_DELETE_DEPENDENCIES as g, parseBootstrapMarker as gn, LockError as gr, coerceCfnBoolean as gt, maskingRetryLogger as h, getBootstrapMarkerKey as hn, LocalStartServiceError as hr, assertRegionMatch as ht, DeploymentEventsReader as i, stringifyValue as in, resetAwsClients as ir, slowCcOperationTimeoutMs as it, formatResourceLine as j, synthesisStatusMessage as jn, isMarkedNonRetryable as jr, maskSecretsInError as jt, isStatefulRecreateTargetSync as k, getDockerImageBySourceHash as kn, normalizeAwsError as kr, errorCauseChain as kt, replayRollback as l, rewriteTemplateAssetReferences as ln, CrossAccountSecretRefusalError as lr, cfnRefValueFromPhysicalId as lt, withResourceDeadline as m, ensureAssetStorage as mn, LocalMigrateError as mr, resolveExplicitPhysicalId as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, shouldRetainResource as nn, AwsClients as nr, startInterruptWatch as nt, planFailedOps as o, buildAssetRedirectMap as on, AssetError as or, isTerminationProtectionPropagationError as ot, deleteSkipReason as p, BOOTSTRAP_MARKER_PREFIX as pn, LocalInvokeBuildError as pr, normalizeAwsTagsToCfn as pt, ProviderRegistry as q, uploadCfnTemplate as qn, DagBuilder as qt, DeployEngine as r, AssetPublisher as rn, getAwsClients as rr, CloudControlProvider as rt, planRollback as s, createAssetRedirectResolver as sn, CdkdError as sr, IntrinsicFunctionResolver as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, importableOutputs as tn, resolveBucketRegion as tr, isInterruptedWaitError as tt, updatePartialMessage as u, escapeRegExp$1 as un, DependencyError as ur, getAccountInfo as ut, ATOMIC_FINAL_SNAPSHOT_TYPES as v, validateAssetBucketName as vn, NestedStackChildDirectDestroyError as vr, configStringRefusal as vt, refusesFinalSnapshot as w, getDockerCmd as wn, StackTerminationProtectionError as wr, STATE_SOURCED_CROSS_GENERATION_RULES as wt, ccRoutedFinalSnapshotError as x, buildDockerImage as xn, ResourceTimeoutError as xr, requireConfigArray as xt, PRE_DELETE_SNAPSHOT_TYPES as y, validateContainerRepoName as yn, PartialFailureError as yr, readConfigString as yt, collectPublishedOutputNames as z, resolveStateBucketWithDefaultAndSource as zn, s3BucketDualStackDomainName as zt };
+//# sourceMappingURL=deploy-engine-B1tSPv8F.js.map