@go-to-k/cdkd 0.230.29 → 0.230.30

package/dist/{deploy-engine-pdCBIFCK.js → deploy-engine-ByCHAN3p.js}

@@ -7807,7 +7807,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::CloudFormation::WaitConditionHandle",
 	"AWS::CloudFront::StreamingDistribution",
 	"AWS::CloudWatch::AnomalyDetector",
-	"AWS::CloudWatch::InsightRule",
 	"AWS::CodeBuild::ReportGroup",
 	"AWS::CodeBuild::SourceCredential",
 	"AWS::CodeCommit::Repository",
@@ -7815,7 +7814,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::Config::ConfigurationRecorder",
 	"AWS::Config::DeliveryChannel",
 	"AWS::Config::OrganizationConfigRule",
-	"AWS::Config::RemediationConfiguration",
 	"AWS::DAX::Cluster",
 	"AWS::DAX::ParameterGroup",
 	"AWS::DAX::SubnetGroup",
@@ -7848,7 +7846,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::FSx::Volume",
 	"AWS::Glue::Classifier",
 	"AWS::Glue::CustomEntityType",
-	"AWS::Glue::DataCatalogEncryptionSettings",
 	"AWS::Glue::DataQualityRuleset",
 	"AWS::Glue::DevEndpoint",
 	"AWS::Glue::MLTransform",
@@ -7870,7 +7867,6 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::Greengrass::ResourceDefinitionVersion",
 	"AWS::Greengrass::SubscriptionDefinition",
 	"AWS::Greengrass::SubscriptionDefinitionVersion",
-	"AWS::GuardDuty::ThreatEntitySet",
 	"AWS::IAM::AccessKey",
 	"AWS::IoT::PolicyPrincipalAttachment",
 	"AWS::IoT::ThingPrincipalAttachment",
@@ -7930,6 +7926,7 @@ const NON_PROVISIONABLE_TYPES = new Set([
 	"AWS::Route53::RecordSetGroup",
 	"AWS::SageMaker::CodeRepository",
 	"AWS::SageMaker::EndpointConfig",
+	"AWS::SageMaker::ModelCardExportJob",
 	"AWS::SageMaker::NotebookInstance",
 	"AWS::SageMaker::NotebookInstanceLifecycleConfig",
 	"AWS::SageMaker::Workteam",
@@ -11075,6 +11072,22 @@ const PROPERTY_COVERAGE_BY_TYPE = new Map([
 		]),
 		silentDrop: /* @__PURE__ */ new Map()
 	}],
+	["AWS::Scheduler::Schedule", {
+		handled: new Set([
+			"Description",
+			"EndDate",
+			"FlexibleTimeWindow",
+			"GroupName",
+			"KmsKeyArn",
+			"Name",
+			"ScheduleExpression",
+			"ScheduleExpressionTimezone",
+			"StartDate",
+			"State",
+			"Target"
+		]),
+		silentDrop: /* @__PURE__ */ new Map()
+	}],
 	["AWS::SecretsManager::Secret", {
 		handled: new Set([
 			"Description",
@@ -11328,6 +11341,28 @@ function findActionableSilentDrops(resourceType, templateProperties, allowedKeys
 * Tier 1 types whose SDK Provider declares `handledProperties` and where
 * Cloud Control is guaranteed to be a viable alternative.
 */
+/**
+* Types exempt from the sticky `provisionedBy: 'cc-api'` routing rule.
+*
+* The sticky rule exists to avoid physical-ID churn when an SDK provider is
+* backfilled for a type Cloud Control was already managing fine. These types
+* are different: their CLOUD CONTROL ROUTING IS BROKEN, so keeping existing
+* state pinned to cc-api would keep the bug alive for every pre-existing
+* resource. Only add a type here when BOTH hold:
+*
+* 1. the CC handler cannot correctly manage the resource (not a perf choice),
+* 2. the SDK provider uses the SAME physicalId the CC path stored, so the
+*    re-route is churn-free and the record flips to `provisionedBy: 'sdk'`
+*    transparently on its next state write.
+*
+* - AWS::Scheduler::Schedule (issue #961): a schedule in a custom
+*   ScheduleGroup is unaddressable via CC (the handlers resolve the bare-Name
+*   identifier against the DEFAULT group) — CC UPDATE fails NotFound and CC
+*   DELETE silently no-ops, orphaning a live schedule. Both paths stored the
+*   bare schedule name as physicalId, and the state properties carry
+*   GroupName, so the SDK provider addresses existing records correctly.
+*/
+const STICKY_CC_MIGRATION_EXEMPT = new Set(["AWS::Scheduler::Schedule"]);
 var ProviderRegistry = class {
 	logger = getLogger().child("ProviderRegistry");
 	providers = /* @__PURE__ */ new Map();
@@ -11422,7 +11457,7 @@ var ProviderRegistry = class {
 				provisionedBy: "sdk"
 			};
 		}
-		if (provisionedBy === "cc-api") {
+		if (provisionedBy === "cc-api" && !STICKY_CC_MIGRATION_EXEMPT.has(resourceType)) {
 			this.logger.debug(`Routing ${resourceType} via Cloud Control (state-recorded provisionedBy=cc-api)`);
 			return {
 				provider: this.cloudControlProvider,
@@ -14365,4 +14400,4 @@ var DeployEngine = class {
 
 //#endregion
 export { resolveStateBucketWithDefaultAndSource as $, TemplateParser as A, getDockerCmd as B, findActionableSilentDrops as C, applyRoleArnIfSet as D, cfnRefValueFromPhysicalId as E, AssetPublisher as F, Synthesizer as G, runDockerStreaming as H, stringifyValue as I, getLegacyStateBucketName as J, synthesisStatusMessage as K, WorkGraph as L, S3StateBackend as M, rebuildClientForBucketRegion as N, DiffCalculator as O, shouldRetainResource as P, resolveStateBucketWithDefault as Q, buildDockerImage as R, ProviderRegistry as S, IntrinsicFunctionResolver as T, AssetManifestLoader as U, runDockerForeground as V, getDockerImageBySourceHash as W, resolveCaptureObservedState as X, resolveApp as Y, resolveSkipPrefix as Z, green as _, withRetry as a, uploadCfnTemplate as at, IAMRoleProvider as b, computeImplicitDeleteEdges as c, resolveBucketRegion as ct, isStatefulRecreateTargetSync as d, warnDeprecatedNoPrefixCliFlag as et, renderStatefulReason as f, gray as g, cyan as h, withResourceDeadline as i, findLargeInlineResources as it, LockManager as j, DagBuilder as k, extractDeploymentEventError as l, bold as m, DEFAULT_RESOURCE_WARN_AFTER_MS as n, CFN_TEMPLATE_URL_LIMIT as nt, isRetryableTransientError as o, AssemblyReader as ot, formatResourceLine as p, getDefaultStateBucketName as q, DeployEngine as r, MIGRATE_TMP_PREFIX as rt, IMPLICIT_DELETE_DEPENDENCIES as s, clearBucketRegionCache as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, CFN_TEMPLATE_BODY_LIMIT as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, red as v, CloudControlProvider as w, collectInlinePolicyNamesManagedBySiblings as x, yellow as y, formatDockerLoginError as z };
-//# sourceMappingURL=deploy-engine-pdCBIFCK.js.map
+//# sourceMappingURL=deploy-engine-ByCHAN3p.js.map