@go-to-k/cdkd 0.111.0 → 0.111.2

package/dist/cli.js

@@ -8074,9 +8074,7 @@ var DynamoDBGlobalTableProvider = class {
 			if (sse["SSEType"]) sseInput.SSEType = sse["SSEType"];
 			createParams.SSESpecification = sseInput;
 		}
-		const dpePerReplica = replicas.find((r) => r["Region"] === currentRegion)?.["DeletionProtectionEnabled"];
-		const dpeTopLevel = properties["DeletionProtectionEnabled"];
-		const dpeResolved = typeof dpePerReplica === "boolean" ? dpePerReplica : typeof dpeTopLevel === "boolean" ? dpeTopLevel : void 0;
+		const dpeResolved = extractLocalDeletionProtection(properties, currentRegion);
 		if (dpeResolved !== void 0) createParams.DeletionProtectionEnabled = dpeResolved;
 		if (properties["TableClass"]) createParams.TableClass = properties["TableClass"];
 		const wodts = properties["WriteOnDemandThroughputSettings"];
@@ -8202,22 +8200,19 @@ var DynamoDBGlobalTableProvider = class {
 		const currentRegion = await this.dynamoDBClient.config.region() ?? "";
 		try {
 			await this.waitForTableActiveAfterUpdate(physicalId, logicalId);
-			const tableArn = (await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }))).Table?.TableArn;
+			const describeResp = await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }));
+			const tableArn = describeResp.Table?.TableArn;
 			const extractLocalTags = (props) => {
 				return (props["Replicas"] ?? []).find((r) => r["Region"] === currentRegion)?.["Tags"];
 			};
 			if (tableArn) await this.applyTagDiff(tableArn, extractLocalTags(previousProperties), extractLocalTags(properties));
-			const extractLocalDP = (props) => {
-				const perReplica = (props["Replicas"] ?? []).find((r) => r["Region"] === currentRegion)?.["DeletionProtectionEnabled"];
-				if (typeof perReplica === "boolean") return perReplica;
-				const topLevel = props["DeletionProtectionEnabled"];
-				return typeof topLevel === "boolean" ? topLevel : void 0;
-			};
-			const newDpe = extractLocalDP(properties);
-			const oldDpe = extractLocalDP(previousProperties);
+			const newDpe = extractLocalDeletionProtection(properties, currentRegion);
+			const oldDpe = extractLocalDeletionProtection(previousProperties, currentRegion);
+			const awsDpe = describeResp.Table?.DeletionProtectionEnabled;
 			const flatUpdate = { TableName: physicalId };
 			let flatChanged = false;
-			if (newDpe !== oldDpe) {
+			if (newDpe !== oldDpe || newDpe !== void 0 && typeof awsDpe === "boolean" && Boolean(newDpe) !== awsDpe) {
+				if ((oldDpe === true || awsDpe === true) && Boolean(newDpe ?? false) === false && !(newDpe !== void 0)) this.logger.warn(`Auto-disabling DeletionProtectionEnabled on ${physicalId}: the property was removed from the CDK code. AWS will accept DeleteTable on this resource after this deploy. If you meant to keep protection on, restore 'deletionProtection: true' in your CDK code; if you meant to disable it explicitly, set 'deletionProtection: false' to silence this warning.`);
 				flatUpdate.DeletionProtectionEnabled = Boolean(newDpe ?? false);
 				flatChanged = true;
 			}
@@ -8368,8 +8363,17 @@ var DynamoDBGlobalTableProvider = class {
 				await this.waitForTableActiveAfterUpdate(physicalId, logicalId);
 			}
 			if (!deepEqual$1(properties["TimeToLiveSpecification"], previousProperties["TimeToLiveSpecification"])) {
+				const sendTtl = async (cmd) => {
+					try {
+						await this.dynamoDBClient.send(cmd);
+					} catch (ttlErr) {
+						const msg = ttlErr instanceof Error ? ttlErr.message : String(ttlErr);
+						if (msg.includes("Time to live has been modified multiple times")) throw new ProvisioningError(`AWS rejected TimeToLive update on ${physicalId}: ${msg}. AWS enforces a ~4-hour rate limit on TTL changes per table; wait and redeploy, or keep the previous TTL state in this deploy.`, resourceType, logicalId, physicalId, ttlErr instanceof Error ? ttlErr : void 0);
+						throw ttlErr;
+					}
+				};
 				const ttl = properties["TimeToLiveSpecification"];
-				if (ttl?.["AttributeName"]) await this.dynamoDBClient.send(new UpdateTimeToLiveCommand({
+				if (ttl?.["AttributeName"]) await sendTtl(new UpdateTimeToLiveCommand({
 					TableName: physicalId,
 					TimeToLiveSpecification: {
 						Enabled: ttl["Enabled"] !== void 0 ? Boolean(ttl["Enabled"]) : true,
@@ -8378,7 +8382,7 @@ var DynamoDBGlobalTableProvider = class {
 				}));
 				else if (previousProperties["TimeToLiveSpecification"]) {
 					const prevTtl = previousProperties["TimeToLiveSpecification"];
-					if (prevTtl["AttributeName"]) await this.dynamoDBClient.send(new UpdateTimeToLiveCommand({
+					if (prevTtl["AttributeName"]) await sendTtl(new UpdateTimeToLiveCommand({
 						TableName: physicalId,
 						TimeToLiveSpecification: {
 							Enabled: false,
@@ -9098,6 +9102,26 @@ var DynamoDBGlobalTableProvider = class {
 *    (per-replica, the deploy region's setting). Same literal-vs-auto-
 *    scaling-vs-default-5 precedence.
 */
+/**
+* Extract the local replica's `DeletionProtectionEnabled` from a CFn
+* properties shape. The `AWS::DynamoDB::GlobalTable` CFn schema places
+* the field inside `Replicas[?Region==<region>].DeletionProtectionEnabled`;
+* CDK 2.x's `deletionProtection: true` synthesizes there. Falls back
+* to the top-level `DeletionProtectionEnabled` for legacy or
+* hand-authored templates (the property doesn't formally exist at
+* the top level in the CFn schema, but cdkd tolerates it as a
+* pass-through to avoid breaking older state files).
+*
+* Returns `undefined` when neither shape carries a boolean — the
+* caller treats that as "unset" and does not include the field in
+* the SDK call.
+*/
+function extractLocalDeletionProtection(props, region) {
+	const perReplica = (props["Replicas"] ?? []).find((r) => r["Region"] === region)?.["DeletionProtectionEnabled"];
+	if (typeof perReplica === "boolean") return perReplica;
+	const topLevel = props["DeletionProtectionEnabled"];
+	return typeof topLevel === "boolean" ? topLevel : void 0;
+}
 function derivePerCallProvisionedThroughput(properties, region) {
 	const wps = properties["WriteProvisionedThroughputSettings"];
 	const writeAutoScaling = wps?.["WriteCapacityAutoScalingSettings"];
@@ -14426,6 +14450,25 @@ var ApiGatewayV2Provider = class {
 			"AuthorizerPayloadFormatVersion"
 		])]
 	]);
+	/**
+	* Properties this provider deliberately does NOT wire through to the SDK
+	* call, with a one-line rationale per entry. Consumed by the development-
+	* time coverage check (`tests/unit/provisioning/property-coverage.test.ts`,
+	* issue #391) — see `ResourceProvider.unhandledByDesign` doc.
+	*
+	* The five OpenAPI-import fields on `AWS::ApiGatewayV2::Api` trigger an
+	* entirely separate `ImportApi` AWS API code path (inline OpenAPI spec or
+	* S3-hosted), not the field-by-field `CreateApi` cdkd already supports.
+	* Wiring them would require parsing OpenAPI semantics + a different
+	* mutation surface and is out of scope for the SDK-Provider safety net.
+	*/
+	unhandledByDesign = new Map([["AWS::ApiGatewayV2::Api", new Map([
+		["Body", "OpenAPI/Swagger inline spec; routed through ImportApi, not the field-by-field CreateApi path."],
+		["BodyS3Location", "OpenAPI/Swagger spec on S3; routed through ImportApi, not the field-by-field CreateApi path."],
+		["FailOnWarnings", "OpenAPI-import-only flag; meaningful only on the ImportApi code path."],
+		["DisableSchemaValidation", "Schema-validation toggle on CreateApi/UpdateApi that AWS docs scope to WebSocket APIs using AWS::ApiGatewayV2::Model — that resource type is not yet registered in cdkd, so the toggle has no effect to wire."],
+		["BasePath", "OpenAPI-import-only basePath override; meaningful only on the ImportApi code path."]
+	])]]);
 	getClient() {
 		if (!this.client) this.client = new ApiGatewayV2Client(this.providerRegion ? { region: this.providerRegion } : {});
 		return this.client;
@@ -45257,7 +45300,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.111.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.111.2");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());