@go-to-k/cdkd 0.32.0 → 0.33.0

package/README.md

@@ -25,7 +25,7 @@
 - **S3-based state management**: No DynamoDB required, uses S3 conditional writes for locking
 - **DAG-based parallelization**: Analyze `Ref`/`Fn::GetAtt` dependencies and execute in parallel
 - **`--no-wait` for async resources**: Skip the multi-minute wait on CloudFront / RDS / ElastiCache / NAT Gateway and return as soon as the create call returns (CloudFormation always blocks)
-- **`--aggressive-vpc-parallel`**: Drop CDK-injected defensive `DependsOn` edges from VPC Lambdas onto private-subnet routes so `CloudFront::Distribution` and `Lambda::Url` start their ~3-min propagation in parallel with NAT Gateway stabilization (~50% faster on VPC + Lambda + CloudFront stacks)
+- **VPC route DependsOn relaxation (on by default)**: Drop CDK-injected defensive `DependsOn` edges from VPC Lambdas onto private-subnet routes so `CloudFront::Distribution` and `Lambda::Url` start their ~3-min propagation in parallel with NAT Gateway stabilization (~50% faster on VPC + Lambda + CloudFront stacks). Pass `--no-aggressive-vpc-parallel` to opt out.
 
 > **Note**: Resource types not covered by either SDK Providers or Cloud Control API cannot be deployed with cdkd. If you encounter an unsupported resource type, deployment will fail with a clear error message.
 
@@ -406,7 +406,7 @@ ElastiCache) don't apply to destroy either — their providers are
 already non-blocking on delete because they're leaves in the destroy
 DAG.
 
-## `--aggressive-vpc-parallel`: relax CDK-defensive VPC route DependsOn
+## VPC route DependsOn relaxation (on by default)
 
 CDK synth eagerly injects `DependsOn` from VPC Lambdas (and adjacent
 IAM Role / Policy / Lambda::Url / EventSourceMapping resources) onto
@@ -418,35 +418,35 @@ route), but it is NOT required at *deploy time* — `CreateFunction` /
 `CreateFunctionUrlConfig` / `AddPermission` /
 `CreateEventSourceMapping` all accept a function in `Pending` state.
 
-For VPC + Lambda + CloudFront stacks this turns into a serial
-critical path:
+For VPC + Lambda + CloudFront stacks the strict-CDK-ordering chain is serial:
 
 ```text
 NAT GW (~2-3 min) → DefaultRoute → Lambda → Lambda::Url → Distribution propagation (~3 min)
 ```
 
-Pass `--aggressive-vpc-parallel` to drop the route DependsOn so
-Distribution + Lambda::Url dispatch right after IAM Role / Subnet are
-ready and propagate in parallel with NAT stabilization:
+cdkd drops the route DependsOn by default so Distribution + Lambda::Url
+dispatch right after IAM Role / Subnet are ready and propagate in
+parallel with NAT stabilization:
+
+| Mode | Critical path | Total |
+| --- | --- | --- |
+| `--no-aggressive-vpc-parallel` (opt-out) | NAT → Lambda → CF (serial) | ~6 min |
+| **default** | max(NAT, CF) | **~3 min** |
+
+Measured **−54.6%** on `tests/integration/bench-cdk-sample` (398.59s
+with `--no-aggressive-vpc-parallel` → 181.03s default).
+
+To opt out (e.g. for a stack with a Custom Resource that synchronously
+invokes a VPC Lambda outside cdkd's Lambda-ServiceToken Active wait):
 
 ```bash
-cdkd deploy --aggressive-vpc-parallel
+cdkd deploy --no-aggressive-vpc-parallel
 ```
 
-| Mode | Critical path | Total |
-| --- | --- | --- |
-| Default | NAT → Lambda → CF (serial) | ~6 min |
-| `--aggressive-vpc-parallel` | max(NAT, CF) | ~3 min |
-
-Measured **−45.6%** on `tests/integration/bench-cdk-sample` (387s
-baseline → 211s relaxed).
-
-Off by default for v1: opt-in is the conservative play because
-CloudFront `Create` / `Delete` are each ~5 min, so a Lambda-side
-async failure incurs a high rollback cost. Deploy-only —
-`cdkd destroy` doesn't accept it (the route DependsOn doesn't
-constrain delete-time correctness; Lambda hyperplane ENI release
-is the actual destroy bottleneck).
+Deploy-only — the relaxation has no effect on destroy ordering (the
+route DependsOn doesn't constrain delete-time correctness; Lambda
+hyperplane ENI release is the actual destroy bottleneck and is handled
+separately by `lambda-vpc-deps.ts`).
 
 See [docs/cli-reference.md](docs/cli-reference.md) for the full
 type-pair allowlist, implementation pointers, and trade-off notes.

package/dist/cli.js

@@ -611,9 +611,9 @@ var noWaitOption = new Option(
   "Skip waiting for async resources to stabilize (CloudFront, RDS, ElastiCache, NAT Gateway)"
 );
 var aggressiveVpcParallelOption = new Option(
-  "--aggressive-vpc-parallel",
-  "Relax CDK-injected VPC route DependsOn to let CloudFront/Lambda::Url create in parallel with NAT GW stabilization"
-).default(false);
+  "--no-aggressive-vpc-parallel",
+  "Disable the default relaxation of CDK-injected VPC route DependsOn (on by default; opt out to keep the strict CDK ordering)"
+);
 var deployOptions = [
   new Option("--concurrency <number>", "Maximum concurrent resource operations").default(10).argParser((value) => parseInt(value, 10)),
   new Option("--stack-concurrency <number>", "Maximum concurrent stack deployments").default(4).argParser((value) => parseInt(value, 10)),
@@ -4800,7 +4800,7 @@ var DagBuilder = class {
         if (skip?.has(depId)) {
           relaxedEdgeCount++;
           this.logger.debug(
-            `Skipped CDK-defensive DependsOn edge: ${depId} -> ${logicalId} (--aggressive-vpc-parallel)`
+            `Skipped CDK-defensive DependsOn edge: ${depId} -> ${logicalId} (default; opt out with --no-aggressive-vpc-parallel)`
           );
           continue;
         }
@@ -4817,7 +4817,7 @@ var DagBuilder = class {
     }
     if (relaxedEdgeCount > 0) {
       this.logger.info(
-        `[DagBuilder] Relaxed ${relaxedEdgeCount} CDK-defensive DependsOn edge(s) (--aggressive-vpc-parallel)`
+        `[DagBuilder] Relaxed ${relaxedEdgeCount} CDK-defensive DependsOn edge(s) (default; opt out with --no-aggressive-vpc-parallel)`
       );
     }
     this.logger.debug(`Dependency graph built: ${resourceIds.length} nodes, ${edgeCount} edges`);
@@ -36436,7 +36436,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command13();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.32.0");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.33.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());