@go-to-k/cdkd 0.57.1 → 0.58.0

package/README.md

@@ -487,6 +487,33 @@ Two `orphan` variants at different granularities:
 Both `cdkd destroy` (synth-driven) and `cdkd state destroy`
 (state-driven, no synth) delete AWS resources + state.
 
+## Stack termination protection
+
+CDK's `new Stack(app, 'X', { terminationProtection: true })` is
+honored by `cdkd destroy` and `cdkd destroy --all`. A protected
+stack is refused before the lock is acquired and before any
+per-resource delete runs; in `--all` runs sibling unprotected
+stacks still destroy and the protected ones contribute to the
+partial-failure exit code 2.
+
+Bypass workflow:
+
+1. Edit the CDK code to set `terminationProtection: false`.
+2. Redeploy: `cdkd deploy MyStack`.
+3. Retry: `cdkd destroy MyStack`.
+
+`cdkd state destroy` (state-only, no synth) does **not** honor
+`terminationProtection` — the flag is a CDK property surfaced via
+synth and is not stored in cdkd's state.json. Use `cdkd destroy`
+when synth is available, or accept that `state destroy` is the
+explicit "I know what I'm doing, ignore CDK guards" escape hatch.
+
+A future `--remove-protection` flag (separate scope) will provide
+an explicit one-shot bypass without editing CDK code.
+
+`cdkd diff` (read-only) and `cdkd deploy` (forward-only) are
+unaffected — only destroy is gated.
+
 ## `publish-assets`: synth + build + publish, no deploy
 
 `cdkd publish-assets` runs the asset half of the deploy pipeline

package/dist/cli.js

@@ -1207,6 +1207,18 @@ var ResourceUpdateNotSupportedError = class _ResourceUpdateNotSupportedError ext
   }
   exitCode = 2;
 };
+var StackTerminationProtectionError = class _StackTerminationProtectionError extends CdkdError {
+  constructor(stackName, cause) {
+    super(
+      `Stack '${stackName}' has terminationProtection: true and cannot be destroyed. Set terminationProtection: false in the CDK code, redeploy, then retry 'cdkd destroy ${stackName}'.`,
+      "STACK_TERMINATION_PROTECTION",
+      cause
+    );
+    this.stackName = stackName;
+    this.name = "StackTerminationProtectionError";
+    Object.setPrototypeOf(this, _StackTerminationProtectionError.prototype);
+  }
+};
 function isCdkdError(error) {
   return error instanceof CdkdError;
 }
@@ -1915,7 +1927,10 @@ var AssemblyReader = class {
       assetManifestPath,
       dependencyNames,
       region: env?.region !== "unknown-region" ? env?.region : void 0,
-      account: env?.account !== "unknown-account" ? env?.account : void 0
+      account: env?.account !== "unknown-account" ? env?.account : void 0,
+      ...props?.terminationProtection !== void 0 && {
+        terminationProtection: props.terminationProtection
+      }
     };
   }
   /**
@@ -43237,7 +43252,10 @@ async function destroyCommand(stackArgs, options) {
         appStacks = result.stacks.map((s) => ({
           stackName: s.stackName,
           displayName: s.displayName,
-          ...s.region && { region: s.region }
+          ...s.region && { region: s.region },
+          ...s.terminationProtection !== void 0 && {
+            terminationProtection: s.terminationProtection
+          }
         }));
       } catch {
         logger.debug("Could not synthesize app, falling back to state-based stack list");
@@ -43296,6 +43314,12 @@ Preparing to destroy stack: ${stackName}`);
       const refs = stateRefsByName.get(stackName) ?? [];
       const synthStack = appStacks.find((s) => s.stackName === stackName);
       const synthRegion = synthStack?.region;
+      if (synthStack?.terminationProtection === true) {
+        const err = new StackTerminationProtectionError(stackName);
+        logger.error(`  \u2717 ${err.message}`);
+        totalErrors++;
+        continue;
+      }
       let stackTargetRegion;
       if (refs.length === 0) {
         logger.warn(`No state found for stack ${stackName}, skipping`);
@@ -46334,7 +46358,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command14();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.57.1");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.58.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());