aws-cdk 2.1128.0 → 2.1129.0

package/build-info.json

@@ -1,4 +1,4 @@
 {
-  "comment": "Generated at 2026-06-17T23:25:49Z by generate.sh",
-  "commit": "7daa104"
+  "comment": "Generated at 2026-07-01T12:54:40Z by generate.sh",
+  "commit": "629ca49"
 }

package/docs/confirmation-prompts.md

@@ -0,0 +1,79 @@
+# Confirmation Prompts
+
+This document defines how the CLI must behave when a user declines a confirmation
+prompt (answers "no" to a question like "Are you sure you want to delete ...?",
+"Perform import?", or "Do you want to accept these changes?").
+
+This is a convention. Apply it to every command that asks for confirmation, so
+that declining behaves the same way everywhere.
+
+## The rule
+
+**Declining a confirmation exits non-zero and fails soft.**
+
+These are two independent decisions:
+
+1. **Exit code: non-zero.** The exit code answers a single question: did the
+   operation the user asked for happen? When the user declines, it did not, so
+   the command exits non-zero, the same as any other "the requested change did
+   not occur" outcome.
+2. **Presentation: soft.** A decline is an expected, user-initiated outcome, not
+   a defect. It must print a single clear line (no stack trace, no "internal
+   error" framing) and must not be counted as a crash or error in telemetry. It
+   is tagged as a user abort.
+
+In short: the exit code reflects "did the thing happen" (no, so non-zero); soft
+vs hard reflects "is this a bug" (no, so soft).
+
+## Why non-zero
+
+- **Post-condition.** The user asked to deploy, destroy, import, or apply. It did
+  not happen. The exit code should reflect the resulting state, not whose choice
+  caused it.
+- **Chaining safety.** Shell chains such as `cdk deploy && ./promote.sh` must not
+  continue when the deploy did not happen. This applies in interactive terminals
+  too, where developers routinely use `&&`. A non-zero exit short-circuits the
+  chain; exit 0 would let the next step run as if the operation succeeded.
+- **Ecosystem convention.** Comparable infrastructure tools do the same. For
+  example `terraform apply` answered "no" prints "Apply cancelled" and exits
+  non-zero, and `apt` answered "n" prints "Abort." and exits non-zero. Declining
+  a prompt is also equivalent to pressing Ctrl-C at the prompt, which is
+  non-zero.
+
+A confirmation prompt only appears in interactive use. In a non-interactive
+context the CLI cannot ask, so the prompt path is already an error (see below).
+That means the non-zero rule keeps the interactive decline consistent with the
+non-interactive case: in both, the operation did not happen.
+
+## How to implement it
+
+The `IoHost` does not decide whether to abort. `requestResponse` returns the
+user's answer (including `false` for a declined confirmation) and never throws on
+a decline. Each command owns the decline and reacts to a `false` answer by
+throwing an `AbortError`:
+
+```ts
+const confirmed = await ioHelper.requestResponse(IO.SOME_CONFIRMATION.req(question));
+if (!confirmed) {
+  throw new AbortError('SomethingAborted');
+}
+```
+
+`AbortError` is a dedicated `ToolkitError` subclass (`AbortError.isAbortError(x)`)
+that marks a user-initiated abort. It still carries a per-action error code (for
+example `DeployAborted`, `RollbackAborted`) so the reason stays clear in output
+and telemetry, while the marker gives the CLI one reliable way to detect a
+decline without matching on messages.
+
+The default message is `Operation cancelled`, a safe generic fallback. Prefer a
+specific message in the form `<Operation> cancelled` (sentence case, no trailing
+period), for example `Deployment cancelled` or `Import cancelled`, so the output
+names what was cancelled.
+
+The CLI's top-level error handler detects `AbortError` and applies the policy
+above: a non-zero exit, a soft presentation (the message only, no stack trace or
+"error" framing), and a user-abort telemetry tag rather than a crash.
+
+Do not let the `IoHost` throw an abort on the command's behalf, do not swallow a
+decline into an exit-0 return, and do not signal a decline with a plain
+`ToolkitError` that the handler cannot distinguish from a real failure.

package/lib/api-private.d.ts

@@ -2,8 +2,10 @@ export { deployStack } from '../../@aws-cdk/toolkit-lib/lib/api/deployments/depl
 export type { DeployStackOptions as DeployStackApiOptions, DestroyStackResult } from '../../@aws-cdk/toolkit-lib/lib/api/deployments/deploy-stack';
 export * as cfnApi from '../../@aws-cdk/toolkit-lib/lib/api/deployments/cfn-api';
 export { createIgnoreMatcher } from '../../@aws-cdk/toolkit-lib/lib/util/glob-matcher';
+export { formatExpressStabilizationWarning } from '../../@aws-cdk/toolkit-lib/lib/util/cfn-express';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/io/private';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/tags/private';
 export * from '../../@aws-cdk/toolkit-lib/lib/private/activity-printer';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/cloud-assembly/private/borrowed-assembly';
 export * from '../../@aws-cdk/toolkit-lib/lib/toolkit/private/count-assembly-results';
+export { throwIfValidationFailures } from '../../@aws-cdk/toolkit-lib/lib/toolkit/private/validation-report';

package/lib/api-private.js

@@ -10,20 +10,46 @@ var __createBinding = (this && this.__createBinding) || (Object.create ? (functi
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
 }));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createIgnoreMatcher = exports.cfnApi = exports.deployStack = void 0;
+exports.throwIfValidationFailures = exports.formatExpressStabilizationWarning = exports.createIgnoreMatcher = exports.cfnApi = exports.deployStack = void 0;
 /* eslint-disable import/no-relative-packages */
 var deploy_stack_1 = require("../../@aws-cdk/toolkit-lib/lib/api/deployments/deploy-stack");
 Object.defineProperty(exports, "deployStack", { enumerable: true, get: function () { return deploy_stack_1.deployStack; } });
-exports.cfnApi = require("../../@aws-cdk/toolkit-lib/lib/api/deployments/cfn-api");
+exports.cfnApi = __importStar(require("../../@aws-cdk/toolkit-lib/lib/api/deployments/cfn-api"));
 var glob_matcher_1 = require("../../@aws-cdk/toolkit-lib/lib/util/glob-matcher");
 Object.defineProperty(exports, "createIgnoreMatcher", { enumerable: true, get: function () { return glob_matcher_1.createIgnoreMatcher; } });
+var cfn_express_1 = require("../../@aws-cdk/toolkit-lib/lib/util/cfn-express");
+Object.defineProperty(exports, "formatExpressStabilizationWarning", { enumerable: true, get: function () { return cfn_express_1.formatExpressStabilizationWarning; } });
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/io/private"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/tags/private"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/private/activity-printer"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/cloud-assembly/private/borrowed-assembly"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/toolkit/private/count-assembly-results"), exports);
-//# sourceMappingURL=data:application/json;base64,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
+var validation_report_1 = require("../../@aws-cdk/toolkit-lib/lib/toolkit/private/validation-report");
+Object.defineProperty(exports, "throwIfValidationFailures", { enumerable: true, get: function () { return validation_report_1.throwIfValidationFailures; } });
+//# sourceMappingURL=data:application/json;base64,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

package/lib/cli/cdk-toolkit.d.ts

@@ -166,7 +166,6 @@ export declare class CdkToolkit {
     private selectStacksForList;
     private selectStacksForDeploy;
     private selectStacksForDiff;
-    private selectStacksForDestroy;
     /**
      * Validate the stacks for errors and warnings according to the CLI's current settings
      */
@@ -444,6 +443,10 @@ export interface DeployOptions extends CfnDeployOptions, WatchOptions {
      * @default false
      */
     readonly ignoreNoStacks?: boolean;
+    /**
+     * Whether to use CloudFormation express mode for the current deployment
+     */
+    readonly express?: boolean;
 }
 export interface RollbackOptions {
     /**
@@ -537,6 +540,10 @@ export interface DestroyOptions {
      * Maximum number of simultaneous destroys (dependency permitting) to execute.
      */
     concurrency?: number;
+    /**
+     * Whether to use CloudFormation express mode to delete the stack(s)
+     */
+    express?: boolean;
 }
 /**
  * Options for the garbage collection