@go-to-k/cdkd 0.221.16 → 0.222.1

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { A as withErrorHandling, B as generateResourceNameWithFallback, C as StackHasActiveImportsError, F as getLiveRenderer, H as withStackName, I as PATTERN_B_NAME_PROPERTIES, L as PATTERN_B_RESOURCE_TYPES, M as getLogger, P as runStackBuffered, S as ResourceUpdateNotSupportedError, V as withSkipPrefix, _ as MissingCdkCliError, a as assertRegionMatch, b as ProvisioningError, f as LocalInvokeBuildError$1, i as resolveExplicitPhysicalId, k as normalizeAwsError, l as CdkdError, m as LocalStartServiceError, n as matchesCdkPath, o as disableInstanceApiTermination, p as LocalMigrateError, r as normalizeAwsTagsToCfn, s as isTerminationProtectionPropagationError, t as CDK_PATH_TAG, v as NestedStackChildDirectDestroyError, w as StackTerminationProtectionError, x as ResourceTimeoutError, y as PartialFailureError, z as generateResourceName } from "./import-helpers-wLipXr5g.js";
 import { a as setAwsClients, i as resetAwsClients, r as getAwsClients, t as AwsClients } from "./aws-clients-pjPwZz1r.js";
-import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-DsPQH0fw.js";
+import { $ as AssemblyReader, A as shouldRetainResource, B as getDefaultStateBucketName, C as applyRoleArnIfSet, D as LockManager, E as TemplateParser, F as formatDockerLoginError, G as resolveStateBucketWithDefault, H as resolveApp, I as getDockerCmd, J as CFN_TEMPLATE_BODY_LIMIT, K as resolveStateBucketWithDefaultAndSource, L as runDockerForeground, M as stringifyValue, N as WorkGraph, O as S3StateBackend, P as buildDockerImage, Q as uploadCfnTemplate, R as runDockerStreaming, S as IntrinsicFunctionResolver, T as DagBuilder, U as resolveCaptureObservedState, V as getLegacyStateBucketName, W as resolveSkipPrefix, X as MIGRATE_TMP_PREFIX, Y as CFN_TEMPLATE_URL_LIMIT, Z as findLargeInlineResources, _ as IAMRoleProvider, a as withRetry, b as findActionableSilentDrops, c as computeImplicitDeleteEdges, d as bold, f as cyan, g as yellow, h as red, i as withResourceDeadline, j as AssetPublisher, k as rebuildClientForBucketRegion, l as extractDeploymentEventError, m as green, n as DEFAULT_RESOURCE_WARN_AFTER_MS, o as isRetryableTransientError, p as gray, q as warnDeprecatedNoPrefixCliFlag, r as DeployEngine, s as IMPLICIT_DELETE_DEPENDENCIES, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as resolveBucketRegion, u as formatResourceLine, v as collectInlinePolicyNamesManagedBySiblings, w as DiffCalculator, x as CloudControlProvider, y as ProviderRegistry, z as Synthesizer } from "./deploy-engine-CmN65bEv.js";
 import { t as ASGProvider } from "./asg-provider-B_hrCxRx.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes, randomUUID } from "node:crypto";
@@ -53,7 +53,7 @@ import { CognitoIdentityProviderClient, CreateUserPoolCommand, DeleteUserPoolCom
 import { CreatePrivateDnsNamespaceCommand, CreateServiceCommand as CreateServiceCommand$1, DeleteNamespaceCommand, DeleteServiceCommand as DeleteServiceCommand$1, GetNamespaceCommand, GetOperationCommand, GetServiceCommand, ListNamespacesCommand, ListServicesCommand as ListServicesCommand$1, ListTagsForResourceCommand as ListTagsForResourceCommand$16, NamespaceNotFound, ServiceDiscoveryClient, ServiceNotFound, UpdatePrivateDnsNamespaceCommand, UpdateServiceCommand as UpdateServiceCommand$1 } from "@aws-sdk/client-servicediscovery";
 import { AppSyncClient, CreateApiKeyCommand, CreateDataSourceCommand, CreateGraphqlApiCommand, CreateResolverCommand, DeleteApiKeyCommand, DeleteDataSourceCommand, DeleteGraphqlApiCommand, DeleteResolverCommand, GetDataSourceCommand, GetGraphqlApiCommand, GetIntrospectionSchemaCommand, GetResolverCommand, ListApiKeysCommand, ListGraphqlApisCommand, NotFoundException as NotFoundException$4, StartSchemaCreationCommand, TagResourceCommand as TagResourceCommand$14, UntagResourceCommand as UntagResourceCommand$13, UpdateApiKeyCommand, UpdateDataSourceCommand, UpdateGraphqlApiCommand, UpdateResolverCommand } from "@aws-sdk/client-appsync";
 import { parse, print } from "graphql";
-import { CreateConnectionCommand, CreateCrawlerCommand, CreateDatabaseCommand, CreateJobCommand, CreateSecurityConfigurationCommand, CreateTableCommand as CreateTableCommand$1, CreateTriggerCommand, CreateWorkflowCommand, DeleteConnectionCommand, DeleteCrawlerCommand, DeleteDatabaseCommand, DeleteJobCommand, DeleteSecurityConfigurationCommand, DeleteTableCommand as DeleteTableCommand$1, DeleteTriggerCommand, DeleteWorkflowCommand, EntityNotFoundException, GetConnectionCommand, GetCrawlerCommand, GetDatabaseCommand, GetDatabasesCommand, GetJobCommand, GetSecurityConfigurationCommand, GetSecurityConfigurationsCommand, GetTableCommand, GetTablesCommand, GetTagsCommand, GetTriggerCommand, GetWorkflowCommand, GlueClient, ListWorkflowsCommand, StartCrawlerScheduleCommand, StartTriggerCommand, StopCrawlerScheduleCommand, StopTriggerCommand, UpdateConnectionCommand, UpdateCrawlerCommand, UpdateDatabaseCommand, UpdateJobCommand, UpdateTableCommand as UpdateTableCommand$1, UpdateTriggerCommand, UpdateWorkflowCommand } from "@aws-sdk/client-glue";
+import { CrawlerRunningException, CreateConnectionCommand, CreateCrawlerCommand, CreateDatabaseCommand, CreateJobCommand, CreateSecurityConfigurationCommand, CreateTableCommand as CreateTableCommand$1, CreateTriggerCommand, CreateWorkflowCommand, DeleteConnectionCommand, DeleteCrawlerCommand, DeleteDatabaseCommand, DeleteJobCommand, DeleteSecurityConfigurationCommand, DeleteTableCommand as DeleteTableCommand$1, DeleteTriggerCommand, DeleteWorkflowCommand, EntityNotFoundException, GetConnectionCommand, GetCrawlerCommand, GetDatabaseCommand, GetDatabasesCommand, GetJobCommand, GetSecurityConfigurationCommand, GetSecurityConfigurationsCommand, GetTableCommand, GetTablesCommand, GetTagsCommand, GetTriggerCommand, GetWorkflowCommand, GlueClient, ListWorkflowsCommand, StartCrawlerScheduleCommand, StartTriggerCommand, StopCrawlerCommand, StopCrawlerScheduleCommand, StopTriggerCommand, UpdateConnectionCommand, UpdateCrawlerCommand, UpdateDatabaseCommand, UpdateJobCommand, UpdateTableCommand as UpdateTableCommand$1, UpdateTriggerCommand, UpdateWorkflowCommand } from "@aws-sdk/client-glue";
 import { AddTagsToStreamCommand, CreateStreamCommand, DecreaseStreamRetentionPeriodCommand, DeleteStreamCommand, DeregisterStreamConsumerCommand, DescribeStreamCommand, DescribeStreamConsumerCommand, IncreaseStreamRetentionPeriodCommand, KinesisClient, ListStreamsCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$17, ListTagsForStreamCommand, RegisterStreamConsumerCommand, RemoveTagsFromStreamCommand, ResourceNotFoundException as ResourceNotFoundException$8, StartStreamEncryptionCommand, StopStreamEncryptionCommand, TagResourceCommand as TagResourceCommand$15, UntagResourceCommand as UntagResourceCommand$14, UpdateShardCountCommand } from "@aws-sdk/client-kinesis";
 import { AccessPointNotFound, CreateAccessPointCommand, CreateFileSystemCommand, CreateMountTargetCommand, DeleteAccessPointCommand, DeleteFileSystemCommand, DeleteMountTargetCommand, DescribeAccessPointsCommand, DescribeBackupPolicyCommand, DescribeFileSystemPolicyCommand, DescribeFileSystemsCommand, DescribeLifecycleConfigurationCommand, DescribeMountTargetSecurityGroupsCommand, DescribeMountTargetsCommand, EFSClient, FileSystemNotFound, ModifyMountTargetSecurityGroupsCommand, MountTargetNotFound, PutBackupPolicyCommand, PutFileSystemPolicyCommand, PutLifecycleConfigurationCommand, UpdateFileSystemCommand, UpdateFileSystemProtectionCommand } from "@aws-sdk/client-efs";
 import { CreateDeliveryStreamCommand, DeleteDeliveryStreamCommand, DescribeDeliveryStreamCommand, FirehoseClient, ListDeliveryStreamsCommand, ListTagsForDeliveryStreamCommand, ResourceNotFoundException as ResourceNotFoundException$9, TagDeliveryStreamCommand, UntagDeliveryStreamCommand, UpdateDestinationCommand } from "@aws-sdk/client-firehose";
@@ -1553,7 +1553,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.221.16";
+	return "0.222.1";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -28173,12 +28173,13 @@ var GlueWorkflowProvider = class {
 		const name = properties["Name"];
 		if (!name) throw new ProvisioningError(`Name is required for Glue Workflow ${logicalId}`, resourceType, logicalId);
 		try {
-			const tags = workflowTagsForCreate(properties["Tags"]);
+			const tagsMap = cfnTagsToMap(properties["Tags"]);
+			const tags = tagsMap && Object.keys(tagsMap).length > 0 ? tagsMap : void 0;
 			await this.getClient().send(new CreateWorkflowCommand({
 				Name: name,
 				...properties["Description"] !== void 0 && { Description: properties["Description"] },
 				...properties["DefaultRunProperties"] !== void 0 && { DefaultRunProperties: properties["DefaultRunProperties"] },
-				...properties["MaxConcurrentRuns"] !== void 0 && { MaxConcurrentRuns: properties["MaxConcurrentRuns"] },
+				...properties["MaxConcurrentRuns"] !== void 0 && { MaxConcurrentRuns: coerceNumber(properties["MaxConcurrentRuns"]) },
 				...tags && { Tags: tags }
 			}));
 			this.logger.debug(`Successfully created Glue Workflow ${logicalId}: ${name}`);
@@ -28198,7 +28199,7 @@ var GlueWorkflowProvider = class {
 				Name: physicalId,
 				...properties["Description"] !== void 0 && { Description: properties["Description"] },
 				...properties["DefaultRunProperties"] !== void 0 && { DefaultRunProperties: properties["DefaultRunProperties"] },
-				...properties["MaxConcurrentRuns"] !== void 0 && { MaxConcurrentRuns: properties["MaxConcurrentRuns"] }
+				...properties["MaxConcurrentRuns"] !== void 0 && { MaxConcurrentRuns: coerceNumber(properties["MaxConcurrentRuns"]) }
 			}));
 			this.logger.debug(`Successfully updated Glue Workflow ${logicalId}`);
 			return {
@@ -28432,22 +28433,17 @@ var GlueSecurityConfigurationProvider = class {
 		return null;
 	}
 };
-/**
-* Normalize the CFn `Tags` shape (`Array<{Key,Value}>`) into the SDK's
-* `TagsMap` (`Record<string,string>`) for `CreateWorkflow`. Returns
-* `undefined` when no tags — the caller drops the key.
-*/
-function workflowTagsForCreate(tags) {
-	if (!Array.isArray(tags) || tags.length === 0) return void 0;
-	const out = {};
-	for (const t of tags) {
-		const obj = t;
-		const k = typeof obj["Key"] === "string" ? obj["Key"] : void 0;
-		const v = typeof obj["Value"] === "string" ? obj["Value"] : "";
-		if (!k) continue;
-		out[k] = v;
-	}
-	return Object.keys(out).length > 0 ? out : void 0;
+/** Max GetCrawler polls while waiting for a stopped crawler to settle. */
+const CRAWLER_STOP_MAX_ATTEMPTS = 30;
+/** Delay between GetCrawler polls while waiting for a crawler to stop. */
+const CRAWLER_STOP_POLL_INTERVAL_MS = 2e3;
+/** Max GetTrigger polls while waiting for a trigger to reach DEACTIVATED. */
+const TRIGGER_DEACTIVATE_MAX_ATTEMPTS = 30;
+/** Delay between GetTrigger polls while waiting for a trigger to deactivate. */
+const TRIGGER_DEACTIVATE_POLL_INTERVAL_MS = 1e3;
+/** Promise-based sleep used by the crawler / trigger state-machine waiters. */
+function sleep$1(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 /**
 * Build the SDK `EncryptionConfiguration` from the CFn-shape input
@@ -28768,24 +28764,51 @@ function buildJobCommonFields(p) {
 		"LogUri",
 		"DefaultArguments",
 		"NonOverridableArguments",
-		"MaxRetries",
-		"AllocatedCapacity",
-		"Timeout",
-		"MaxCapacity",
 		"WorkerType",
-		"NumberOfWorkers",
 		"SecurityConfiguration",
 		"GlueVersion",
 		"ExecutionClass",
 		"MaintenanceWindow"
 	]) if (p[k] !== void 0) r[k] = p[k];
-	if (p["ExecutionProperty"] !== void 0) r.ExecutionProperty = p["ExecutionProperty"];
+	for (const k of [
+		"MaxRetries",
+		"AllocatedCapacity",
+		"Timeout",
+		"MaxCapacity",
+		"NumberOfWorkers"
+	]) {
+		const v = p[k];
+		if (v !== void 0) r[k] = coerceNumber(v);
+	}
+	if (p["ExecutionProperty"] !== void 0) {
+		const ep = { ...p["ExecutionProperty"] };
+		if (ep["MaxConcurrentRuns"] !== void 0) ep["MaxConcurrentRuns"] = coerceNumber(ep["MaxConcurrentRuns"]);
+		r.ExecutionProperty = ep;
+	}
 	if (p["Connections"] !== void 0) r.Connections = { Connections: p["Connections"]["Connections"] ?? [] };
-	if (p["NotificationProperty"] !== void 0) r.NotificationProperty = p["NotificationProperty"];
+	if (p["NotificationProperty"] !== void 0) {
+		const np = { ...p["NotificationProperty"] };
+		if (np["NotifyDelayAfter"] !== void 0) np["NotifyDelayAfter"] = coerceNumber(np["NotifyDelayAfter"]);
+		r.NotificationProperty = np;
+	}
 	if (p["SourceControlDetails"] !== void 0) r.SourceControlDetails = p["SourceControlDetails"];
 	return r;
 }
 /**
+* Coerce a CFn-delivered numeric property (often a string like `"10"`) to a
+* JS number at the SDK wire boundary. Non-finite / unparseable inputs are
+* returned unchanged so AWS surfaces a clear validation error rather than
+* silently sending `NaN`.
+*/
+function coerceNumber(value) {
+	if (typeof value === "number") return value;
+	if (typeof value === "string" && value.trim() !== "") {
+		const n = Number(value);
+		if (Number.isFinite(n)) return n;
+	}
+	return value;
+}
+/**
 * Convert CFn `Tags: [{Key,Value}]` (or a tag map) to AWS Glue's
 * `Record<string,string>` shape used by Create commands and TagResource. Returns
 * `undefined` when the input is undefined so callers can elide the key.
@@ -28894,12 +28917,21 @@ var GlueCrawlerProvider = class {
 	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
 		this.logger.debug(`Updating Glue Crawler ${logicalId}: ${physicalId}`);
 		try {
-			await this.getClient().send(new UpdateCrawlerCommand({
+			const updateInput = {
 				Name: physicalId,
 				...properties["Role"] !== void 0 && { Role: properties["Role"] },
 				...properties["Targets"] !== void 0 && { Targets: properties["Targets"] },
 				...buildCrawlerCommonFields(properties)
-			}));
+			};
+			try {
+				await this.getClient().send(new UpdateCrawlerCommand(updateInput));
+			} catch (err) {
+				if (err instanceof CrawlerRunningException) {
+					this.logger.debug(`Glue Crawler ${physicalId} is running; stopping before update and retrying`);
+					await this.stopCrawlerAndWait(physicalId);
+					await this.getClient().send(new UpdateCrawlerCommand(updateInput));
+				} else throw err;
+			}
 			const oldTags = cfnTagsToMap(previousProperties["Tags"]) ?? {};
 			const newTags = cfnTagsToMap(properties["Tags"]) ?? {};
 			await this.applyTagDiff(physicalId, oldTags, newTags);
@@ -28922,10 +28954,39 @@ var GlueCrawlerProvider = class {
 				this.logger.debug(`Glue Crawler ${physicalId} does not exist, skipping deletion`);
 				return;
 			}
+			if (error instanceof CrawlerRunningException) {
+				this.logger.debug(`Glue Crawler ${physicalId} is running; stopping before delete and retrying`);
+				await this.stopCrawlerAndWait(physicalId);
+				await this.getClient().send(new DeleteCrawlerCommand({ Name: physicalId }));
+				return;
+			}
 			const cause = error instanceof Error ? error : void 0;
 			throw new ProvisioningError(`Failed to delete Glue Crawler ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
 		}
 	}
+	/**
+	* Stop a running crawler and poll until it leaves the RUNNING / STOPPING
+	* state (or until {@link CRAWLER_STOP_MAX_ATTEMPTS} is exhausted). Tolerates a
+	* CrawlerStoppingException / "not running" race (the crawler may have just
+	* finished on its own) so callers can unconditionally retry their delete /
+	* update afterwards.
+	*/
+	async stopCrawlerAndWait(physicalId) {
+		try {
+			await this.getClient().send(new StopCrawlerCommand({ Name: physicalId }));
+		} catch (err) {
+			this.logger.debug(`StopCrawler for ${physicalId} returned ${err instanceof Error ? err.name : String(err)}; continuing to wait`);
+		}
+		for (let attempt = 0; attempt < CRAWLER_STOP_MAX_ATTEMPTS; attempt++) {
+			try {
+				const state = (await this.getClient().send(new GetCrawlerCommand({ Name: physicalId }))).Crawler?.State;
+				if (state !== "RUNNING" && state !== "STOPPING") return;
+			} catch (err) {
+				if (err instanceof EntityNotFoundException) return;
+			}
+			await sleep$1(CRAWLER_STOP_POLL_INTERVAL_MS);
+		}
+	}
 	async getAttribute(physicalId, _resourceType, attributeName) {
 		if (attributeName === "Id" || attributeName === "Ref" || attributeName === "Name") return physicalId;
 	}
@@ -29248,6 +29309,7 @@ var GlueTriggerProvider = class {
 				if ((await this.getClient().send(new GetTriggerCommand({ Name: physicalId }))).Trigger?.State === "ACTIVATED") {
 					restart = true;
 					await this.getClient().send(new StopTriggerCommand({ Name: physicalId }));
+					await this.waitForTriggerDeactivated(physicalId);
 				}
 			} catch (err) {
 				if (!(err instanceof EntityNotFoundException)) this.logger.debug(`GetTrigger pre-check failed for ${physicalId}; continuing anyway: ${err instanceof Error ? err.message : String(err)}`);
@@ -29259,11 +29321,22 @@ var GlueTriggerProvider = class {
 				...properties["Predicate"] !== void 0 && { Predicate: properties["Predicate"] },
 				...properties["EventBatchingCondition"] !== void 0 && { EventBatchingCondition: properties["EventBatchingCondition"] }
 			};
-			await this.getClient().send(new UpdateTriggerCommand({
-				Name: physicalId,
-				TriggerUpdate: update
-			}));
-			if (restart) await this.getClient().send(new StartTriggerCommand({ Name: physicalId }));
+			let updateError;
+			try {
+				await this.getClient().send(new UpdateTriggerCommand({
+					Name: physicalId,
+					TriggerUpdate: update
+				}));
+			} catch (err) {
+				updateError = err;
+			}
+			if (restart) try {
+				await this.getClient().send(new StartTriggerCommand({ Name: physicalId }));
+			} catch (restartError) {
+				if (updateError === void 0) throw restartError;
+				this.logger.warn(`Failed to re-activate Glue Trigger ${physicalId} after a failed update: ${restartError.message}`);
+			}
+			if (updateError !== void 0) throw updateError;
 			const oldTags = cfnTagsToMap(previousProperties["Tags"]) ?? {};
 			const newTags = cfnTagsToMap(properties["Tags"]) ?? {};
 			await this.applyTagDiff(physicalId, oldTags, newTags);
@@ -29276,9 +29349,34 @@ var GlueTriggerProvider = class {
 			throw new ProvisioningError(`Failed to update Glue Trigger ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
 		}
 	}
+	/**
+	* Poll GetTrigger until the trigger leaves the ACTIVATED / ACTIVATING state
+	* (StopTrigger is async). Returns once DEACTIVATED (or any non-active state)
+	* is observed, the trigger is gone, or the attempt budget is exhausted —
+	* callers then proceed with UpdateTrigger / DeleteTrigger.
+	*/
+	async waitForTriggerDeactivated(physicalId) {
+		for (let attempt = 0; attempt < TRIGGER_DEACTIVATE_MAX_ATTEMPTS; attempt++) {
+			try {
+				const state = (await this.getClient().send(new GetTriggerCommand({ Name: physicalId }))).Trigger?.State;
+				if (state !== "ACTIVATED" && state !== "ACTIVATING") return;
+			} catch (err) {
+				if (err instanceof EntityNotFoundException) return;
+			}
+			await sleep$1(TRIGGER_DEACTIVATE_POLL_INTERVAL_MS);
+		}
+	}
 	async delete(logicalId, physicalId, resourceType, _properties, context) {
 		this.logger.debug(`Deleting Glue Trigger ${logicalId}: ${physicalId}`);
 		try {
+			try {
+				if ((await this.getClient().send(new GetTriggerCommand({ Name: physicalId }))).Trigger?.State === "ACTIVATED") {
+					await this.getClient().send(new StopTriggerCommand({ Name: physicalId }));
+					await this.waitForTriggerDeactivated(physicalId);
+				}
+			} catch (err) {
+				if (!(err instanceof EntityNotFoundException)) this.logger.debug(`GetTrigger pre-delete check failed for ${physicalId}; continuing: ${err instanceof Error ? err.message : String(err)}`);
+			}
 			await this.getClient().send(new DeleteTriggerCommand({ Name: physicalId }));
 		} catch (error) {
 			if (error instanceof EntityNotFoundException) {
@@ -54100,7 +54198,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.221.16");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.222.1");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());