@go-to-k/cdkd 0.139.0 → 0.141.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { _ as withSkipPrefix, a as runDockerStreaming, c as getLogger, d as getLiveRenderer, f as PATTERN_B_NAME_PROPERTIES, g as generateResourceNameWithFallback, h as generateResourceName, i as runDockerForeground, n as formatDockerLoginError, p as PATTERN_B_RESOURCE_TYPES, r as getDockerCmd, u as runStackBuffered, v as withStackName } from "./docker-cmd-EtWSTAje.js";
-import { A as AssetPublisher, B as resolveStateBucketWithDefault, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as getDefaultStateBucketName, G as MIGRATE_TMP_PREFIX, H as warnDeprecatedNoPrefixCliFlag, I as getLegacyStateBucketName, J as AssemblyReader, K as findLargeInlineResources, L as resolveApp, M as WorkGraph, N as buildDockerImage, O as S3StateBackend, P as Synthesizer, Q as CdkdError, R as resolveCaptureObservedState, S as IntrinsicFunctionResolver, T as DagBuilder, U as CFN_TEMPLATE_BODY_LIMIT, V as resolveStateBucketWithDefaultAndSource, W as CFN_TEMPLATE_URL_LIMIT, X as resolveBucketRegion, _ as normalizeAwsTagsToCfn, _t as normalizeAwsError, a as withRetry, at as MissingCdkCliError, b as CloudControlProvider, c as cyan, ct as ResourceTimeoutError, d as red, dt as StackHasActiveImportsError, f as yellow, ft as StackTerminationProtectionError, g as matchesCdkPath, h as CDK_PATH_TAG, i as withResourceDeadline, j as stringifyValue, k as shouldRetainResource, l as gray, lt as ResourceUpdateNotSupportedError, m as collectInlinePolicyNamesManagedBySiblings, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as LocalMigrateError, o as IMPLICIT_DELETE_DEPENDENCIES, ot as PartialFailureError, p as IAMRoleProvider, q as uploadCfnTemplate, r as DeployEngine, rt as LocalStartServiceError, s as bold, st as ProvisioningError, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LocalInvokeBuildError, u as green, ut as RouteDiscoveryError, v as resolveExplicitPhysicalId, vt as withErrorHandling, w as DiffCalculator, x as assertRegionMatch, y as ProviderRegistry, z as resolveSkipPrefix } from "./deploy-engine-DZYchTh6.js";
+import { A as AssetPublisher, B as resolveStateBucketWithDefault, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as getDefaultStateBucketName, G as MIGRATE_TMP_PREFIX, H as warnDeprecatedNoPrefixCliFlag, I as getLegacyStateBucketName, J as AssemblyReader, K as findLargeInlineResources, L as resolveApp, M as WorkGraph, N as buildDockerImage, O as S3StateBackend, P as Synthesizer, Q as CdkdError, R as resolveCaptureObservedState, S as IntrinsicFunctionResolver, T as DagBuilder, U as CFN_TEMPLATE_BODY_LIMIT, V as resolveStateBucketWithDefaultAndSource, W as CFN_TEMPLATE_URL_LIMIT, X as resolveBucketRegion, _ as normalizeAwsTagsToCfn, _t as normalizeAwsError, a as withRetry, at as MissingCdkCliError, b as CloudControlProvider, c as cyan, ct as ResourceTimeoutError, d as red, dt as StackHasActiveImportsError, f as yellow, ft as StackTerminationProtectionError, g as matchesCdkPath, h as CDK_PATH_TAG, i as withResourceDeadline, j as stringifyValue, k as shouldRetainResource, l as gray, lt as ResourceUpdateNotSupportedError, m as collectInlinePolicyNamesManagedBySiblings, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as LocalMigrateError, o as IMPLICIT_DELETE_DEPENDENCIES, ot as PartialFailureError, p as IAMRoleProvider, q as uploadCfnTemplate, r as DeployEngine, rt as LocalStartServiceError, s as bold, st as ProvisioningError, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LocalInvokeBuildError, u as green, ut as RouteDiscoveryError, v as resolveExplicitPhysicalId, vt as withErrorHandling, w as DiffCalculator, x as assertRegionMatch, y as ProviderRegistry, z as resolveSkipPrefix } from "./deploy-engine-Dff3_JMn.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-BF03Alpe.js";
 import { createHash, createHmac, createPublicKey, createVerify, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListBucketsCommand, ListDirectoryBucketsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -50,7 +50,7 @@ import { parse, print } from "graphql";
 import { CreateConnectionCommand, CreateCrawlerCommand, CreateDatabaseCommand, CreateJobCommand, CreateSecurityConfigurationCommand, CreateTableCommand as CreateTableCommand$1, CreateTriggerCommand, CreateWorkflowCommand, DeleteConnectionCommand, DeleteCrawlerCommand, DeleteDatabaseCommand, DeleteJobCommand, DeleteSecurityConfigurationCommand, DeleteTableCommand as DeleteTableCommand$1, DeleteTriggerCommand, DeleteWorkflowCommand, EntityNotFoundException, GetConnectionCommand, GetCrawlerCommand, GetDatabaseCommand, GetDatabasesCommand, GetJobCommand, GetSecurityConfigurationCommand, GetSecurityConfigurationsCommand, GetTableCommand, GetTablesCommand, GetTagsCommand, GetTriggerCommand, GetWorkflowCommand, GlueClient, ListWorkflowsCommand, StartCrawlerScheduleCommand, StartTriggerCommand, StopCrawlerScheduleCommand, StopTriggerCommand, UpdateConnectionCommand, UpdateCrawlerCommand, UpdateDatabaseCommand, UpdateJobCommand, UpdateTableCommand as UpdateTableCommand$1, UpdateTriggerCommand, UpdateWorkflowCommand } from "@aws-sdk/client-glue";
 import { AddTagsToStreamCommand, CreateStreamCommand, DecreaseStreamRetentionPeriodCommand, DeleteStreamCommand, DeregisterStreamConsumerCommand, DescribeStreamCommand, DescribeStreamConsumerCommand, IncreaseStreamRetentionPeriodCommand, KinesisClient, ListStreamsCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$17, ListTagsForStreamCommand, RegisterStreamConsumerCommand, RemoveTagsFromStreamCommand, ResourceNotFoundException as ResourceNotFoundException$7, StartStreamEncryptionCommand, StopStreamEncryptionCommand, TagResourceCommand as TagResourceCommand$14, UntagResourceCommand as UntagResourceCommand$13, UpdateShardCountCommand } from "@aws-sdk/client-kinesis";
 import { AccessPointNotFound, CreateAccessPointCommand, CreateFileSystemCommand, CreateMountTargetCommand, DeleteAccessPointCommand, DeleteFileSystemCommand, DeleteMountTargetCommand, DescribeAccessPointsCommand, DescribeBackupPolicyCommand, DescribeFileSystemsCommand, DescribeLifecycleConfigurationCommand, DescribeMountTargetSecurityGroupsCommand, DescribeMountTargetsCommand, EFSClient, FileSystemNotFound, ModifyMountTargetSecurityGroupsCommand, MountTargetNotFound, UpdateFileSystemCommand } from "@aws-sdk/client-efs";
-import { CreateDeliveryStreamCommand, DeleteDeliveryStreamCommand, DescribeDeliveryStreamCommand, FirehoseClient, ListDeliveryStreamsCommand, ListTagsForDeliveryStreamCommand, ResourceNotFoundException as ResourceNotFoundException$8 } from "@aws-sdk/client-firehose";
+import { CreateDeliveryStreamCommand, DeleteDeliveryStreamCommand, DescribeDeliveryStreamCommand, FirehoseClient, ListDeliveryStreamsCommand, ListTagsForDeliveryStreamCommand, ResourceNotFoundException as ResourceNotFoundException$8, TagDeliveryStreamCommand, UntagDeliveryStreamCommand, UpdateDestinationCommand } from "@aws-sdk/client-firehose";
 import { AddTagsCommand as AddTagsCommand$1, CloudTrailClient, CreateTrailCommand, DeleteTrailCommand, GetEventSelectorsCommand, GetInsightSelectorsCommand, GetTrailCommand, GetTrailStatusCommand, ListTagsCommand as ListTagsCommand$1, ListTrailsCommand, PutEventSelectorsCommand, PutInsightSelectorsCommand, RemoveTagsCommand as RemoveTagsCommand$1, StartLoggingCommand, StopLoggingCommand, TrailNotFoundException, UpdateTrailCommand } from "@aws-sdk/client-cloudtrail";
 import { BatchGetProjectsCommand, CodeBuildClient, CreateProjectCommand, DeleteProjectCommand, ListProjectsCommand, ResourceNotFoundException as ResourceNotFoundException$9, UpdateProjectCommand } from "@aws-sdk/client-codebuild";
 import { CreateVectorBucketCommand, DeleteIndexCommand, DeleteVectorBucketCommand, GetVectorBucketCommand, ListIndexesCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$18, ListVectorBucketsCommand, S3VectorsClient } from "@aws-sdk/client-s3vectors";
@@ -27575,19 +27575,133 @@ var FirehoseProvider = class {
 		}
 	}
 	/**
-	* Firehose delivery streams are treated as immutable by cdkd. AWS DOES
-	* provide an `UpdateDestination` API, but the per-destination shape
-	* matrix (Extended S3 / Redshift / OpenSearch / Splunk / HttpEndpoint /
-	* Iceberg / etc.) is deep enough that the deploy engine's immutable-
-	* property replacement path covers the common cases more reliably.
-	* Treating the type as fully immutable for `cdkd drift --revert` is
-	* the conservative choice; users who want in-place destination updates
-	* should re-deploy with `cdkd deploy --replace` so the new shape is
-	* applied via a fresh `CreateDeliveryStream`. Tracked as a follow-up
-	* to issue (#443).
+	* Apply in-place updates to a Firehose delivery stream via the per-shape
+	* AWS APIs (#477):
+	*
+	*   - **Tags** (`TagDeliveryStream` / `UntagDeliveryStream`) — always
+	*     supported; runs first since it is destination-independent.
+	*   - **`ExtendedS3DestinationConfiguration`** (`UpdateDestination` with
+	*     an `ExtendedS3DestinationUpdate` payload) — recovers
+	*     `CurrentDeliveryStreamVersionId` + `DestinationId` from a
+	*     `DescribeDeliveryStream` call, then applies the diff. Only fires
+	*     when the destination shape actually differs.
+	*
+	* Other destination types (`S3DestinationConfiguration`,
+	* `HttpEndpointDestinationConfiguration`, `RedshiftDestinationConfiguration`,
+	* `ElasticsearchDestinationConfiguration`,
+	* `AmazonopensearchserviceDestinationConfiguration`,
+	* `SplunkDestinationConfiguration`,
+	* `AmazonOpenSearchServerlessDestinationConfiguration`) stay rejected
+	* with a tightened error message naming the AWS API. Each one is a
+	* follow-up to (#477) — AWS provides `UpdateDestination` for them too,
+	* but the per-shape reverse-mappers are deep and each warrants its own
+	* focused PR. Re-deploy with `cdkd deploy --replace` until they land.
+	*
+	* Destination-type SWITCHES (e.g. ExtendedS3 → Redshift) are immutable
+	* on AWS; cdkd surfaces `ResourceUpdateNotSupportedError` so the caller
+	* can `cdkd deploy --replace`.
 	*/
-	update(logicalId, _physicalId, resourceType, _properties, _previousProperties) {
-		return Promise.reject(new ResourceUpdateNotSupportedError(resourceType, logicalId, "AWS::KinesisFirehose::DeliveryStream in-place update is not implemented in cdkd; AWS provides UpdateDestination but the per-destination shape matrix is large. Re-deploy with cdkd deploy --replace, or destroy + redeploy the stack."));
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+		this.logger.debug(`Updating Firehose delivery stream ${logicalId}: ${physicalId}`);
+		const destKey = this.findDestinationKey(properties);
+		const prevDestKey = this.findDestinationKey(previousProperties);
+		if (destKey && prevDestKey && destKey !== prevDestKey) throw new ResourceUpdateNotSupportedError(resourceType, logicalId, `Switching Firehose destination type from '${prevDestKey}' to '${destKey}' is not supported in-place — AWS UpdateDestination requires the same destination type as the original CreateDeliveryStream. Re-deploy with cdkd deploy --replace.`);
+		const activeDest = destKey ?? prevDestKey;
+		if (activeDest && activeDest !== "ExtendedS3DestinationConfiguration") {
+			const nextDest = properties[activeDest] ?? {};
+			const prevDest = previousProperties[activeDest] ?? {};
+			if (JSON.stringify(nextDest) !== JSON.stringify(prevDest)) throw new ResourceUpdateNotSupportedError(resourceType, logicalId, `In-place update for '${activeDest}' on AWS::KinesisFirehose::DeliveryStream is not yet implemented in cdkd (AWS exposes UpdateDestination for it; the per-shape reverse-mapper is a follow-up to #477). Re-deploy with cdkd deploy --replace.`);
+		}
+		await this.applyTagsDiff(physicalId, properties["Tags"], previousProperties["Tags"]);
+		if (activeDest === "ExtendedS3DestinationConfiguration") {
+			const nextDest = properties[activeDest] ?? {};
+			const prevDest = previousProperties[activeDest] ?? {};
+			if (JSON.stringify(nextDest) !== JSON.stringify(prevDest)) await this.applyExtendedS3DestinationUpdate(physicalId, nextDest);
+		}
+		const desc = (await this.getClient().send(new DescribeDeliveryStreamCommand({ DeliveryStreamName: physicalId }))).DeliveryStreamDescription;
+		return {
+			physicalId,
+			wasReplaced: false,
+			attributes: { ...desc?.DeliveryStreamARN !== void 0 && { Arn: desc.DeliveryStreamARN } }
+		};
+	}
+	/**
+	* Recover `CurrentDeliveryStreamVersionId` + `DestinationId` from
+	* `DescribeDeliveryStream` and issue `UpdateDestination` with the new
+	* ExtendedS3 shape. The reverse-mapper at
+	* {@link mapExtendedS3ConfigToUpdate} produces the
+	* `ExtendedS3DestinationUpdate` payload (CFn property names →
+	* SDK camelCase, omitting `Prefix` / `BufferingHints` / etc. when the
+	* source is undefined so an empty diff doesn't clear AWS-side fields).
+	*/
+	async applyExtendedS3DestinationUpdate(physicalId, nextConfig) {
+		const desc = (await this.getClient().send(new DescribeDeliveryStreamCommand({ DeliveryStreamName: physicalId }))).DeliveryStreamDescription;
+		const currentVersionId = desc?.VersionId;
+		const destinationId = (desc?.Destinations?.[0])?.DestinationId;
+		if (!currentVersionId || !destinationId) throw new ProvisioningError(`DescribeDeliveryStream for ${physicalId} did not return VersionId or DestinationId; UpdateDestination cannot proceed.`, "AWS::KinesisFirehose::DeliveryStream", physicalId);
+		await this.getClient().send(new UpdateDestinationCommand({
+			DeliveryStreamName: physicalId,
+			CurrentDeliveryStreamVersionId: currentVersionId,
+			DestinationId: destinationId,
+			ExtendedS3DestinationUpdate: this.mapExtendedS3ConfigToUpdate(nextConfig)
+		}));
+	}
+	/**
+	* Diff and apply changes to a Firehose delivery stream's Tags via the
+	* `TagDeliveryStream` / `UntagDeliveryStream` AWS APIs.
+	*
+	* Tags shape is `[{Key, Value}]`. Removed keys go through
+	* `UntagDeliveryStream` (key-only); added / modified entries go through
+	* `TagDeliveryStream` (full {Key, Value}). No-op when before/after JSON
+	* is identical.
+	*/
+	async applyTagsDiff(physicalId, next, prev) {
+		if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;
+		const nextEntries = Array.isArray(next) ? next : [];
+		const prevEntries = Array.isArray(prev) ? prev : [];
+		const nextByKey = /* @__PURE__ */ new Map();
+		for (const t of nextEntries) if (t.Key) nextByKey.set(t.Key, t);
+		const prevByKey = /* @__PURE__ */ new Map();
+		for (const t of prevEntries) if (t.Key) prevByKey.set(t.Key, t);
+		const tagKeysToRemove = [];
+		for (const key of prevByKey.keys()) if (!nextByKey.has(key)) tagKeysToRemove.push(key);
+		if (tagKeysToRemove.length > 0) await this.getClient().send(new UntagDeliveryStreamCommand({
+			DeliveryStreamName: physicalId,
+			TagKeys: tagKeysToRemove
+		}));
+		const tagsToUpsert = [];
+		for (const [key, tag] of nextByKey) {
+			const before = prevByKey.get(key);
+			if (JSON.stringify(before) === JSON.stringify(tag)) continue;
+			tagsToUpsert.push(tag);
+		}
+		if (tagsToUpsert.length > 0) await this.getClient().send(new TagDeliveryStreamCommand({
+			DeliveryStreamName: physicalId,
+			Tags: tagsToUpsert.map((t) => ({
+				Key: t.Key,
+				...t.Value !== void 0 && { Value: t.Value }
+			}))
+		}));
+	}
+	/**
+	* Return the key of the destination property present on a properties
+	* record, or `undefined` if none is present. AWS allows exactly one
+	* destination configuration per delivery stream, so the first match is
+	* authoritative; the ordering walks the most-common types first.
+	*/
+	findDestinationKey(properties) {
+		for (const key of [
+			"ExtendedS3DestinationConfiguration",
+			"S3DestinationConfiguration",
+			"HttpEndpointDestinationConfiguration",
+			"RedshiftDestinationConfiguration",
+			"ElasticsearchDestinationConfiguration",
+			"AmazonopensearchserviceDestinationConfiguration",
+			"SplunkDestinationConfiguration",
+			"AmazonOpenSearchServerlessDestinationConfiguration",
+			"IcebergDestinationConfiguration",
+			"SnowflakeDestinationConfiguration"
+		]) if (properties[key] !== void 0) return key;
 	}
 	/**
 	* Delete a Firehose delivery stream
@@ -27662,6 +27776,67 @@ var FirehoseProvider = class {
 		return result;
 	}
 	/**
+	* Map CFn `ExtendedS3DestinationConfiguration` to the
+	* `ExtendedS3DestinationUpdate` shape expected by AWS
+	* `UpdateDestinationCommand` (#477). Shape is structurally identical
+	* to `ExtendedS3DestinationConfiguration` but every field is optional
+	* — only the fields present in `config` are forwarded so undefined
+	* keys do not clobber AWS-side state.
+	*
+	* `S3BackupConfiguration` is mapped through {@link mapS3ConfigToUpdate}
+	* so its own optional fields likewise round-trip cleanly.
+	*/
+	mapExtendedS3ConfigToUpdate(config) {
+		const result = {};
+		const bucketArn = config["BucketArn"] ?? config["BucketARN"];
+		if (bucketArn !== void 0) result.BucketARN = bucketArn;
+		const roleArn = config["RoleArn"] ?? config["RoleARN"];
+		if (roleArn !== void 0) result.RoleARN = roleArn;
+		if (config["Prefix"] !== void 0) result.Prefix = config["Prefix"];
+		if (config["ErrorOutputPrefix"] !== void 0) result.ErrorOutputPrefix = config["ErrorOutputPrefix"];
+		if (config["CompressionFormat"] !== void 0) result.CompressionFormat = config["CompressionFormat"];
+		if (config["BufferingHints"] !== void 0) {
+			const hints = config["BufferingHints"];
+			result.BufferingHints = {
+				...hints["SizeInMBs"] !== void 0 && { SizeInMBs: hints["SizeInMBs"] },
+				...hints["IntervalInSeconds"] !== void 0 && { IntervalInSeconds: hints["IntervalInSeconds"] }
+			};
+		}
+		if (config["EncryptionConfiguration"] !== void 0) result.EncryptionConfiguration = config["EncryptionConfiguration"];
+		if (config["CloudWatchLoggingOptions"] !== void 0) result.CloudWatchLoggingOptions = config["CloudWatchLoggingOptions"];
+		if (config["ProcessingConfiguration"] !== void 0) result.ProcessingConfiguration = config["ProcessingConfiguration"];
+		if (config["S3BackupMode"] !== void 0) result.S3BackupMode = config["S3BackupMode"];
+		if (config["S3BackupConfiguration"] !== void 0) result.S3BackupUpdate = this.mapS3ConfigToUpdate(config["S3BackupConfiguration"]);
+		if (config["DataFormatConversionConfiguration"] !== void 0) result.DataFormatConversionConfiguration = config["DataFormatConversionConfiguration"];
+		return result;
+	}
+	/**
+	* Map CFn `S3DestinationConfiguration` to the `S3DestinationUpdate`
+	* shape used by AWS `UpdateDestinationCommand` (#477; consumed by
+	* {@link mapExtendedS3ConfigToUpdate} for the `S3BackupUpdate` field).
+	* Every field optional — only present keys are forwarded.
+	*/
+	mapS3ConfigToUpdate(config) {
+		const result = {};
+		const bucketArn = config["BucketArn"] ?? config["BucketARN"];
+		if (bucketArn !== void 0) result.BucketARN = bucketArn;
+		const roleArn = config["RoleArn"] ?? config["RoleARN"];
+		if (roleArn !== void 0) result.RoleARN = roleArn;
+		if (config["Prefix"] !== void 0) result.Prefix = config["Prefix"];
+		if (config["ErrorOutputPrefix"] !== void 0) result.ErrorOutputPrefix = config["ErrorOutputPrefix"];
+		if (config["CompressionFormat"] !== void 0) result.CompressionFormat = config["CompressionFormat"];
+		if (config["BufferingHints"] !== void 0) {
+			const hints = config["BufferingHints"];
+			result.BufferingHints = {
+				...hints["SizeInMBs"] !== void 0 && { SizeInMBs: hints["SizeInMBs"] },
+				...hints["IntervalInSeconds"] !== void 0 && { IntervalInSeconds: hints["IntervalInSeconds"] }
+			};
+		}
+		if (config["EncryptionConfiguration"] !== void 0) result.EncryptionConfiguration = config["EncryptionConfiguration"];
+		if (config["CloudWatchLoggingOptions"] !== void 0) result.CloudWatchLoggingOptions = config["CloudWatchLoggingOptions"];
+		return result;
+	}
+	/**
 	* Adopt an existing Kinesis Firehose delivery stream into cdkd state.
 	*
 	* Lookup order:
@@ -31261,7 +31436,7 @@ async function diffCommand(stacks, options) {
 				region: stackRegion,
 				resources: {},
 				outputs: {},
-				version: 5,
+				version: 6,
 				lastModified: Date.now()
 			};
 			if (!stateResult) logger.debug(`No existing state for ${stackInfo.stackName} (${stackRegion})`);
@@ -35839,7 +36014,7 @@ function buildStackState(stackName, region, rows, templateParser, template, exis
 		};
 	}
 	return {
-		version: 5,
+		version: 6,
 		stackName,
 		region,
 		resources,
@@ -54959,7 +55134,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.139.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.141.0");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());