@go-to-k/cdkd 0.230.8 → 0.230.9

package/dist/cli.js

@@ -1445,7 +1445,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.230.8";
+	return "0.230.9";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -10057,7 +10057,10 @@ var DynamoDBTableProvider = class {
 			}
 			if (JSON.stringify(properties["GlobalSecondaryIndexes"]) !== JSON.stringify(previousProperties["GlobalSecondaryIndexes"])) await this.applyGsiUpdates(physicalId, resourceType, logicalId, previousProperties["GlobalSecondaryIndexes"], properties["GlobalSecondaryIndexes"], properties["AttributeDefinitions"]);
 			if (JSON.stringify(properties["PointInTimeRecoverySpecification"]) !== JSON.stringify(previousProperties["PointInTimeRecoverySpecification"])) await this.applyPointInTimeRecovery(physicalId, properties["PointInTimeRecoverySpecification"], previousProperties["PointInTimeRecoverySpecification"]);
-			if (JSON.stringify(properties["TimeToLiveSpecification"]) !== JSON.stringify(previousProperties["TimeToLiveSpecification"])) await this.applyTimeToLive(physicalId, properties["TimeToLiveSpecification"], previousProperties["TimeToLiveSpecification"]);
+			if (JSON.stringify(properties["TimeToLiveSpecification"]) !== JSON.stringify(previousProperties["TimeToLiveSpecification"])) {
+				this.assertNoActiveTtlAttributeNameChange(logicalId, resourceType, physicalId, properties["TimeToLiveSpecification"], previousProperties["TimeToLiveSpecification"]);
+				await this.applyTimeToLive(physicalId, properties["TimeToLiveSpecification"], previousProperties["TimeToLiveSpecification"]);
+			}
 			if (JSON.stringify(properties["ResourcePolicy"]) !== JSON.stringify(previousProperties["ResourcePolicy"])) {
 				if (!table?.TableArn) throw new ProvisioningError(`Cannot apply ResourcePolicy change for DynamoDB table ${logicalId}: DescribeTable returned no TableArn`, resourceType, logicalId, physicalId);
 				await this.applyResourcePolicy(table.TableArn, properties["ResourcePolicy"], previousProperties["ResourcePolicy"]);
@@ -10075,6 +10078,7 @@ var DynamoDBTableProvider = class {
 				}
 			};
 		} catch (error) {
+			if (error instanceof ProvisioningError) throw error;
 			const cause = error instanceof Error ? error : void 0;
 			throw new ProvisioningError(`Failed to update DynamoDB table ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
 		}
@@ -10208,12 +10212,48 @@ var DynamoDBTableProvider = class {
 	* block but it was present before — we disable TTL using the PREVIOUS
 	* `AttributeName` (AWS requires the attribute name even to disable TTL).
 	*/
+	/**
+	* Pre-emptively reject a TTL `AttributeName` change between two enabled
+	* specs with a clear, actionable message.
+	*
+	* AWS allows TTL on only ONE attribute per table, so enabling TTL on a new
+	* attribute while TTL is still active on the old one fails with the opaque
+	* `TimeToLive is active on a different AttributeName: <old>`; and because
+	* DynamoDB rate-limits `UpdateTimeToLive` to one modification per table per
+	* ~1 hour, the user cannot disable-then-re-enable within a single deploy
+	* either. CloudFormation hits the same wall (UPDATE_ROLLBACK). Surfacing the
+	* two-deploy remediation up front beats letting the raw AWS error bubble.
+	*
+	* Only fires when BOTH the old and new specs are present and enabled with a
+	* DIFFERENT `AttributeName`. Enable-from-disabled, disable, and same-name
+	* Enabled toggles all pass through to {@link applyTimeToLive}.
+	*/
+	assertNoActiveTtlAttributeNameChange(logicalId, resourceType, physicalId, spec, previousSpec) {
+		const cur = this.readTtlSpec(spec);
+		const prev = this.readTtlSpec(previousSpec);
+		if (cur.enabled && prev.enabled && cur.attributeName !== void 0 && prev.attributeName !== void 0 && cur.attributeName !== prev.attributeName) throw new ProvisioningError(`DynamoDB table ${logicalId}: cannot change the TimeToLive AttributeName from '${prev.attributeName}' to '${cur.attributeName}' in a single deploy. AWS allows TTL on only one attribute and rejects enabling it on a new attribute while TTL is still active on '${prev.attributeName}' ("TimeToLive is active on a different AttributeName"); DynamoDB also limits UpdateTimeToLive to one change per table per ~1 hour. To change the TTL attribute, do it in two deploys: (1) remove TimeToLiveSpecification (or set Enabled: false) to disable TTL on '${prev.attributeName}', then (2) after the disable settles (~1h), deploy again enabling TTL on '${cur.attributeName}'.`, resourceType, logicalId, physicalId);
+	}
+	/**
+	* Normalize a `TimeToLiveSpecification` value into `{ enabled, attributeName }`.
+	* Mirrors {@link applyTimeToLive}'s default (`Enabled` absent => true).
+	*/
+	readTtlSpec(spec) {
+		if (spec === void 0 || spec === null) return {
+			enabled: false,
+			attributeName: void 0
+		};
+		const s = spec;
+		const attributeName = s["AttributeName"];
+		const rawEnabled = s["Enabled"];
+		return {
+			enabled: rawEnabled === void 0 ? true : typeof rawEnabled === "string" ? rawEnabled.toLowerCase() === "true" : Boolean(rawEnabled),
+			attributeName
+		};
+	}
 	async applyTimeToLive(tableName, spec, previousSpec) {
 		if (spec !== void 0 && spec !== null) {
-			const s = spec;
-			const attributeName = s["AttributeName"];
+			const { enabled, attributeName } = this.readTtlSpec(spec);
 			if (!attributeName) return;
-			const enabled = s["Enabled"] !== void 0 ? Boolean(s["Enabled"]) : true;
 			await this.retryOnTransientControlPlane(() => this.dynamoDBClient.send(new UpdateTimeToLiveCommand({
 				TableName: tableName,
 				TimeToLiveSpecification: {
@@ -55314,7 +55354,7 @@ function reorderArgs(argv) {
 async function main() {
 	installPipeCloseHandler();
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.8");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.230.9");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());