@go-to-k/cdkd 0.117.1 → 0.117.2

package/dist/cli.js

@@ -7901,11 +7901,12 @@ var DynamoDBTableProvider = class {
 *    is surfaced for BOTH the LOCAL replica AND cross-region replicas
 *    via per-region SDK clients (cached in `regionalClientCache` for
 *    the deploy run). Issue #389 lifted the v1 LOCAL-only limitation.
-*  - Cross-region replica Tags propagation (Issue #389): when the
-*    update path detects a Tags-only diff on a non-local replica,
-*    cdkd resolves the replica's table ARN by swapping the region
-*    segment of the local ARN and issues `TagResource` /
-*    `UntagResource` against a per-region client.
+*  - Cross-region replica Tags propagation (Issue #389 / #441):
+*    BOTH `create()` and `update()` resolve each non-local replica's
+*    table ARN by swapping the region segment of the local ARN and
+*    issue `TagResource` / `UntagResource` against a per-region
+*    client. The shared helper `applyCrossRegionReplicaTagsDiff`
+*    centralizes the diff + best-effort WARN-on-failure contract.
 */
 var DynamoDBGlobalTableProvider = class {
 	dynamoDBClient;
@@ -8114,6 +8115,13 @@ var DynamoDBGlobalTableProvider = class {
 				if (!region || region === currentRegion) continue;
 				await this.addReplica(tableName, replica, region, logicalId);
 			}
+			for (const replica of replicas) {
+				const region = replica["Region"];
+				if (!region || region === currentRegion) continue;
+				const replicaTags = replica["Tags"];
+				if (!replicaTags || replicaTags.length === 0) continue;
+				await this.applyCrossRegionReplicaTagsDiff(tableInfo.tableArn, region, void 0, replicaTags, tableName);
+			}
 			if (properties["TimeToLiveSpecification"]) {
 				const ttl = properties["TimeToLiveSpecification"];
 				const attributeName = ttl["AttributeName"];
@@ -8299,6 +8307,8 @@ var DynamoDBGlobalTableProvider = class {
 				const region = replica["Region"];
 				if (!region || region === currentRegion) continue;
 				await this.addReplica(physicalId, replica, region, logicalId);
+				const newReplicaTags = replica["Tags"];
+				await this.applyCrossRegionReplicaTagsDiff(tableArn, region, void 0, newReplicaTags, physicalId);
 				const newReadAutoScaling = (replica["ReadProvisionedThroughputSettings"] ?? {})["ReadCapacityAutoScalingSettings"];
 				if (newBilling === "PROVISIONED" && newReadAutoScaling) {
 					const regionalAutoScalingClient = this.getRegionalAutoScalingClient(region);
@@ -8311,16 +8321,7 @@ var DynamoDBGlobalTableProvider = class {
 				const oldReplica = (previousProperties["Replicas"] ?? []).find((r) => r["Region"] === region);
 				const oldReplicaTags = oldReplica?.["Tags"];
 				const newReplicaTags = replica["Tags"];
-				if (!deepEqual$1(oldReplicaTags, newReplicaTags)) if (tableArn) {
-					const replicaArn = this.replicaArnForRegion(tableArn, region);
-					if (replicaArn) try {
-						const regionalClient = this.getRegionalClient(region);
-						await this.applyTagDiffOnClient(regionalClient, replicaArn, oldReplicaTags, newReplicaTags);
-					} catch (tagErr) {
-						this.logger.warn(`Could not apply Tags diff to cross-region replica ${region} of ${physicalId}: ${tagErr instanceof Error ? tagErr.message : String(tagErr)}. The replica's Tags state will surface as drift until the next successful deploy.`);
-					}
-					else this.logger.warn(`Could not derive replica ARN for region ${region} from ${tableArn} — skipping Tags propagation for ${physicalId}`);
-				} else this.logger.warn(`Local DescribeTable returned no TableArn — cannot propagate Tags to cross-region replica ${region} of ${physicalId}`);
+				await this.applyCrossRegionReplicaTagsDiff(tableArn, region, oldReplicaTags, newReplicaTags, physicalId);
 				const oldReadAutoScaling = (oldReplica?.["ReadProvisionedThroughputSettings"] ?? {})["ReadCapacityAutoScalingSettings"];
 				const newReadAutoScaling = (replica["ReadProvisionedThroughputSettings"] ?? {})["ReadCapacityAutoScalingSettings"];
 				const effectiveNewReadAutoScaling = newBilling === "PAY_PER_REQUEST" ? void 0 : newReadAutoScaling;
@@ -8439,10 +8440,49 @@ var DynamoDBGlobalTableProvider = class {
 		await this.applyTagDiffOnClient(this.dynamoDBClient, tableArn, oldTagsRaw, newTagsRaw);
 	}
 	/**
+	* Propagate a per-replica Tags diff to ONE cross-region replica via a
+	* per-region client (Issue #389 / #441 — closes the create-side gap).
+	* Centralizes the common shape used by BOTH `create()` (`oldTags`
+	* undefined → every new tag is an add) and `update()` (per-replica
+	* modify path's old-vs-new diff). Best-effort: a failure here logs at
+	* WARN naming the offending region + ARN + reason and the deploy
+	* continues — the cross-region Tags state will surface as drift on
+	* the next run (or `cdkd drift --revert`) rather than aborting the
+	* deploy mid-flight. Mirrors the autoscaling diff's failure contract
+	* (PR #393).
+	*
+	* `tableArn` is the LOCAL replica's table ARN (returned by the
+	* post-create `waitForTableActive` or the inline `DescribeTable` in
+	* `update()`); the helper swaps the region segment via
+	* `replicaArnForRegion` before issuing `TagResource` / `UntagResource`
+	* against the per-region client.
+	*
+	* No-op when `oldTags` deep-equals `newTags` — the caller is allowed
+	* to invoke unconditionally without first diffing.
+	*/
+	async applyCrossRegionReplicaTagsDiff(tableArn, region, oldTags, newTags, physicalIdForLogs) {
+		if (deepEqual$1(oldTags, newTags)) return;
+		if (!tableArn) {
+			this.logger.warn(`Local DescribeTable returned no TableArn — cannot propagate Tags to cross-region replica ${region} of ${physicalIdForLogs}`);
+			return;
+		}
+		const replicaArn = this.replicaArnForRegion(tableArn, region);
+		if (!replicaArn) {
+			this.logger.warn(`Could not derive replica ARN for region ${region} from ${tableArn} — skipping Tags propagation for ${physicalIdForLogs}`);
+			return;
+		}
+		try {
+			const regionalClient = this.getRegionalClient(region);
+			await this.applyTagDiffOnClient(regionalClient, replicaArn, oldTags, newTags);
+		} catch (tagErr) {
+			this.logger.warn(`Could not apply Tags diff to cross-region replica ${region} of ${physicalIdForLogs}: ${tagErr instanceof Error ? tagErr.message : String(tagErr)}. The replica's Tags state will surface as drift until the next successful deploy.`);
+		}
+	}
+	/**
 	* Apply a Tags diff against the given `DynamoDBClient` (which may be
 	* the local client or a per-region client returned by
 	* `getRegionalClient`). Used by the local-replica path AND the
-	* cross-region replica Tags propagation path (Issue #389).
+	* cross-region replica Tags propagation path (Issue #389 / #441).
 	*/
 	async applyTagDiffOnClient(client, tableArn, oldTagsRaw, newTagsRaw) {
 		const toMap = (tags) => {
@@ -8732,9 +8772,12 @@ var DynamoDBGlobalTableProvider = class {
 	*
 	* Per-replica sub-specifications (`ContributorInsightsSpecification` /
 	* `PointInTimeRecoverySpecification` / `KinesisStreamSpecification`)
-	* are surfaced only for the LOCAL replica. Cross-region replicas
-	* require per-region SDK clients (`new DynamoDBClient({region})`),
-	* deferred to a follow-up PR.
+	* are surfaced for BOTH the LOCAL replica AND cross-region replicas
+	* via per-region SDK clients cached in `regionalClientCache` (Issue
+	* #389 lifted the v1 LOCAL-only limitation; the per-replica reads
+	* happen in `readReplicaSubSpecs` below). Each cross-region call is
+	* best-effort — a permissions gap in one region omits the offending
+	* key rather than aborting the whole drift read.
 	*/
 	async readCurrentState(physicalId, _logicalId, _resourceType) {
 		try {
@@ -46031,7 +46074,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.117.1");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.117.2");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());