@go-to-k/cdkd 0.230.0 → 0.230.1

package/dist/cli.js

@@ -1445,7 +1445,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.230.0";
+	return "0.230.1";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -35093,6 +35093,32 @@ var ECRProvider = class {
 		return this.client;
 	}
 	/**
+	* Map CFn `ImageScanningConfiguration` (PascalCase `{ ScanOnPush }`) to the
+	* SDK shape (camelCase `{ scanOnPush }`). The SDK input keys are camelCase;
+	* forwarding the CFn-cased object verbatim makes the SDK ignore the unknown
+	* `ScanOnPush` key and silently default `scanOnPush` to `false` — so
+	* `imageScanOnPush: true` never reached AWS. Returns `undefined` for an
+	* absent config so the caller can omit the field.
+	*/
+	toSdkScanningConfig(cfn) {
+		if (!cfn) return void 0;
+		return { scanOnPush: Boolean(cfn["ScanOnPush"]) };
+	}
+	/**
+	* Map CFn `EncryptionConfiguration` (PascalCase `{ EncryptionType, KmsKey }`)
+	* to the SDK shape (camelCase `{ encryptionType, kmsKey }`). Same casing trap
+	* as scanning config — a KMS repo's `KmsKey` would be silently dropped (and
+	* the type would fall back to AES256) without this mapping.
+	*/
+	toSdkEncryptionConfig(cfn) {
+		if (!cfn) return void 0;
+		const encryptionType = cfn["EncryptionType"];
+		if (!encryptionType) return void 0;
+		const out = { encryptionType };
+		if (encryptionType === "KMS" && cfn["KmsKey"]) out.kmsKey = cfn["KmsKey"];
+		return out;
+	}
+	/**
 	* Create an ECR Repository
 	*/
 	async create(logicalId, resourceType, properties) {
@@ -35100,11 +35126,13 @@ var ECRProvider = class {
 		const repositoryName = properties["RepositoryName"] || generateResourceName(logicalId, { maxLength: 256 }).toLowerCase();
 		try {
 			const tags = properties["Tags"];
+			const scanningConfig = this.toSdkScanningConfig(properties["ImageScanningConfiguration"]);
+			const encryptionConfig = this.toSdkEncryptionConfig(properties["EncryptionConfiguration"]);
 			const repo = (await this.getClient().send(new CreateRepositoryCommand({
 				repositoryName,
-				...properties["ImageScanningConfiguration"] ? { imageScanningConfiguration: properties["ImageScanningConfiguration"] } : {},
+				...scanningConfig ? { imageScanningConfiguration: scanningConfig } : {},
 				...properties["ImageTagMutability"] ? { imageTagMutability: properties["ImageTagMutability"] } : {},
-				...properties["EncryptionConfiguration"] ? { encryptionConfiguration: properties["EncryptionConfiguration"] } : {},
+				...encryptionConfig ? { encryptionConfiguration: encryptionConfig } : {},
 				...tags ? { tags } : {}
 			}))).repository;
 			if (!repo?.repositoryName) throw new Error("CreateRepository did not return repository name");
@@ -35155,7 +35183,7 @@ var ECRProvider = class {
 			if (JSON.stringify(newScanConfig) !== JSON.stringify(oldScanConfig)) {
 				await this.getClient().send(new PutImageScanningConfigurationCommand({
 					repositoryName: physicalId,
-					imageScanningConfiguration: newScanConfig ?? { scanOnPush: false }
+					imageScanningConfiguration: this.toSdkScanningConfig(newScanConfig) ?? { scanOnPush: false }
 				}));
 				this.logger.debug(`Updated image scanning configuration for ${physicalId}`);
 			}
@@ -54962,7 +54990,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.1");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());