@go-to-k/cdkd 0.116.0 → 0.116.1

package/dist/cli.js

@@ -6434,11 +6434,14 @@ var LambdaFunctionProvider = class {
 	* etc.) are filtered at compare time — we still avoid serializing them on
 	* the wire.
 	*
-	* `Code` is intentionally omitted: `GetFunction` returns a pre-signed S3
-	* URL for the deployed code, not the asset hash cdkd state holds, so they
-	* could never match. Lambda code drift is best detected separately (the
-	* function's `CodeSha256` does live in `GetFunction` but is not what
-	* cdkd's `Code: { S3Bucket, S3Key }` state property carries).
+	* `Code.S3Bucket` / `Code.S3Key` / `Code.S3ObjectVersion` / `Code.ZipFile`
+	* are not surfaced: `GetFunction` returns a pre-signed S3 URL for the
+	* deployed code, not the asset hash cdkd state holds, so they could
+	* never match. Those keys are declared via `getDriftUnknownPaths` so
+	* the drift comparator skips them. `Code.ImageUri` IS surfaced for
+	* container Lambdas (`PackageType: 'Image'`) — AWS returns it on the
+	* `GetFunction.Code.ImageUri` field, so a console-side image swap is
+	* detectable as drift.
 	*
 	* `Tags` is surfaced from the `Tags` map on the same `GetFunction`
 	* response. CDK's auto-injected `aws:cdk:*` tags (which AWS happily
@@ -6467,6 +6470,7 @@ var LambdaFunctionProvider = class {
 			result["Layers"] = (cfg.Layers ?? []).map((l) => l.Arn).filter((arn) => !!arn);
 			result["Architectures"] = cfg.Architectures ? [...cfg.Architectures] : [];
 			if (cfg.PackageType !== void 0) result["PackageType"] = cfg.PackageType;
+			if (resp.Code?.ImageUri !== void 0) result["Code"] = { ImageUri: resp.Code.ImageUri };
 			result["TracingConfig"] = { Mode: cfg.TracingConfig?.Mode ?? "PassThrough" };
 			if (cfg.EphemeralStorage?.Size !== void 0) result["EphemeralStorage"] = { Size: cfg.EphemeralStorage.Size };
 			result["VpcConfig"] = {
@@ -6482,15 +6486,30 @@ var LambdaFunctionProvider = class {
 		}
 	}
 	/**
-	* `Code: { S3Bucket, S3Key }` is set on create / update but `GetFunction`
-	* only returns a pre-signed URL for the deployed code, never the original
-	* asset key — so a state-recorded `Code` value can never match an
-	* AWS-current snapshot. Tell the drift comparator to skip the whole
-	* `Code` subtree to avoid the guaranteed false-positive that would fire
-	* on every clean run.
+	* Lambda ZIP-package `Code` sub-paths AWS does not return on read.
+	*
+	* `GetFunction` returns a pre-signed S3 URL for ZIP-deployed code
+	* (`Code.Location`), not the original `S3Bucket` / `S3Key` cdkd state
+	* holds. `ZipFile` is inline source that AWS never echoes back. These
+	* three fields are write-only via the GetFunction API (Category 1).
+	*
+	* `Code.ImageUri` IS recoverable — `GetFunction.Code.ImageUri` returns
+	* the templated image URI for container Lambdas — so it is surfaced by
+	* `readCurrentState` and NOT declared drift-unknown. `Code.SourceKMSKeyArn`
+	* is also write-only on the FunctionCodeLocation read shape.
+	*
+	* Pre-PR this method returned the whole `['Code']` subtree as
+	* drift-unknown, which also hid `Code.ImageUri` drift on container
+	* Lambdas. Narrowing the skip-list re-enables that detection.
 	*/
 	getDriftUnknownPaths() {
-		return ["Code"];
+		return [
+			"Code.S3Bucket",
+			"Code.S3Key",
+			"Code.S3ObjectVersion",
+			"Code.ZipFile",
+			"Code.SourceKMSKeyArn"
+		];
 	}
 	/**
 	* Adopt an existing Lambda function into cdkd state.
@@ -45623,7 +45642,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.116.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.116.1");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());