@go-to-k/cdkd 0.110.0 → 0.111.1

package/dist/cli.js

@@ -8074,7 +8074,8 @@ var DynamoDBGlobalTableProvider = class {
 			if (sse["SSEType"]) sseInput.SSEType = sse["SSEType"];
 			createParams.SSESpecification = sseInput;
 		}
-		if (properties["DeletionProtectionEnabled"] !== void 0) createParams.DeletionProtectionEnabled = properties["DeletionProtectionEnabled"];
+		const dpeResolved = extractLocalDeletionProtection(properties, currentRegion);
+		if (dpeResolved !== void 0) createParams.DeletionProtectionEnabled = dpeResolved;
 		if (properties["TableClass"]) createParams.TableClass = properties["TableClass"];
 		const wodts = properties["WriteOnDemandThroughputSettings"];
 		if (wodts?.["MaxWriteRequestUnits"] !== void 0) createParams.OnDemandThroughput = { MaxWriteRequestUnits: Number(wodts["MaxWriteRequestUnits"]) };
@@ -8199,15 +8200,19 @@ var DynamoDBGlobalTableProvider = class {
 		const currentRegion = await this.dynamoDBClient.config.region() ?? "";
 		try {
 			await this.waitForTableActiveAfterUpdate(physicalId, logicalId);
-			const tableArn = (await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }))).Table?.TableArn;
+			const describeResp = await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }));
+			const tableArn = describeResp.Table?.TableArn;
 			const extractLocalTags = (props) => {
 				return (props["Replicas"] ?? []).find((r) => r["Region"] === currentRegion)?.["Tags"];
 			};
 			if (tableArn) await this.applyTagDiff(tableArn, extractLocalTags(previousProperties), extractLocalTags(properties));
+			const newDpe = extractLocalDeletionProtection(properties, currentRegion);
+			const oldDpe = extractLocalDeletionProtection(previousProperties, currentRegion);
+			const awsDpe = describeResp.Table?.DeletionProtectionEnabled;
 			const flatUpdate = { TableName: physicalId };
 			let flatChanged = false;
-			if (properties["DeletionProtectionEnabled"] !== previousProperties["DeletionProtectionEnabled"]) {
-				flatUpdate.DeletionProtectionEnabled = Boolean(properties["DeletionProtectionEnabled"] ?? false);
+			if (newDpe !== oldDpe || newDpe !== void 0 && typeof awsDpe === "boolean" && Boolean(newDpe) !== awsDpe) {
+				flatUpdate.DeletionProtectionEnabled = Boolean(newDpe ?? false);
 				flatChanged = true;
 			}
 			if (properties["TableClass"] !== void 0 && properties["TableClass"] !== previousProperties["TableClass"]) {
@@ -8357,8 +8362,17 @@ var DynamoDBGlobalTableProvider = class {
 				await this.waitForTableActiveAfterUpdate(physicalId, logicalId);
 			}
 			if (!deepEqual$1(properties["TimeToLiveSpecification"], previousProperties["TimeToLiveSpecification"])) {
+				const sendTtl = async (cmd) => {
+					try {
+						await this.dynamoDBClient.send(cmd);
+					} catch (ttlErr) {
+						const msg = ttlErr instanceof Error ? ttlErr.message : String(ttlErr);
+						if (msg.includes("Time to live has been modified multiple times")) throw new ProvisioningError(`AWS rejected TimeToLive update on ${physicalId}: ${msg}. AWS enforces a ~4-hour rate limit on TTL changes per table; wait and redeploy, or keep the previous TTL state in this deploy.`, resourceType, logicalId, physicalId, ttlErr instanceof Error ? ttlErr : void 0);
+						throw ttlErr;
+					}
+				};
 				const ttl = properties["TimeToLiveSpecification"];
-				if (ttl?.["AttributeName"]) await this.dynamoDBClient.send(new UpdateTimeToLiveCommand({
+				if (ttl?.["AttributeName"]) await sendTtl(new UpdateTimeToLiveCommand({
 					TableName: physicalId,
 					TimeToLiveSpecification: {
 						Enabled: ttl["Enabled"] !== void 0 ? Boolean(ttl["Enabled"]) : true,
@@ -8367,7 +8381,7 @@ var DynamoDBGlobalTableProvider = class {
 				}));
 				else if (previousProperties["TimeToLiveSpecification"]) {
 					const prevTtl = previousProperties["TimeToLiveSpecification"];
-					if (prevTtl["AttributeName"]) await this.dynamoDBClient.send(new UpdateTimeToLiveCommand({
+					if (prevTtl["AttributeName"]) await sendTtl(new UpdateTimeToLiveCommand({
 						TableName: physicalId,
 						TimeToLiveSpecification: {
 							Enabled: false,
@@ -9087,6 +9101,26 @@ var DynamoDBGlobalTableProvider = class {
 *    (per-replica, the deploy region's setting). Same literal-vs-auto-
 *    scaling-vs-default-5 precedence.
 */
+/**
+* Extract the local replica's `DeletionProtectionEnabled` from a CFn
+* properties shape. The `AWS::DynamoDB::GlobalTable` CFn schema places
+* the field inside `Replicas[?Region==<region>].DeletionProtectionEnabled`;
+* CDK 2.x's `deletionProtection: true` synthesizes there. Falls back
+* to the top-level `DeletionProtectionEnabled` for legacy or
+* hand-authored templates (the property doesn't formally exist at
+* the top level in the CFn schema, but cdkd tolerates it as a
+* pass-through to avoid breaking older state files).
+*
+* Returns `undefined` when neither shape carries a boolean — the
+* caller treats that as "unset" and does not include the field in
+* the SDK call.
+*/
+function extractLocalDeletionProtection(props, region) {
+	const perReplica = (props["Replicas"] ?? []).find((r) => r["Region"] === region)?.["DeletionProtectionEnabled"];
+	if (typeof perReplica === "boolean") return perReplica;
+	const topLevel = props["DeletionProtectionEnabled"];
+	return typeof topLevel === "boolean" ? topLevel : void 0;
+}
 function derivePerCallProvisionedThroughput(properties, region) {
 	const wps = properties["WriteProvisionedThroughputSettings"];
 	const writeAutoScaling = wps?.["WriteCapacityAutoScalingSettings"];
@@ -45246,7 +45280,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.110.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.111.1");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());