@go-to-k/cdkd 0.260.8 → 0.260.10

package/dist/{deploy-engine-Dg51mHCV.js → deploy-engine-DBNn0Aq7.js}

@@ -8738,6 +8738,7 @@ const REF_RETURNS_SEGMENT_AFTER_PIPE = /* @__PURE__ */ new Set([
 * type's own `describe-type` primaryIdentifier.
 */
 const REF_RETURNS_SEGMENT_BEFORE_FIRST_PIPE = /* @__PURE__ */ new Set([
+	"AWS::EC2::EIP",
 	"AWS::ApiGateway::Deployment",
 	"AWS::ApiGateway::DocumentationPart",
 	"AWS::ApiGatewayV2::Authorizer",
@@ -10620,21 +10621,32 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::AppMesh::VirtualService",
 	"AWS::AppStream::Fleet",
 	"AWS::AppSync::ApiCache",
+	"AWS::Artifact::Report",
+	"AWS::Athena::Session",
+	"AWS::AutoScaling::ScheduledAction",
 	"AWS::AutoScalingPlans::ScalingPlan",
+	"AWS::BackupSearch::SearchJob",
+	"AWS::BCMDataExports::Table",
 	"AWS::Bedrock::DefaultPromptRouter",
 	"AWS::Bedrock::ModelInvocationJob",
+	"AWS::BedrockAgentCore::BrowserProfile",
 	"AWS::BedrockAgentCore::TokenVault",
 	"AWS::Cloud9::EnvironmentEC2",
 	"AWS::CloudFormation::Macro",
+	"AWS::CloudFormation::ResourceScan",
 	"AWS::CloudFormation::WaitCondition",
 	"AWS::CloudFront::StreamingDistribution",
 	"AWS::CloudWatch::AnomalyDetector",
+	"AWS::CodeArtifact::Package",
 	"AWS::CodeBuild::ReportGroup",
+	"AWS::CodeBuild::Sandbox",
 	"AWS::CodeBuild::SourceCredential",
 	"AWS::CodeStar::GitHubRepository",
+	"AWS::CognitoSync::Dataset",
 	"AWS::Config::ConfigurationRecorder",
 	"AWS::Config::DeliveryChannel",
 	"AWS::Config::OrganizationConfigRule",
+	"AWS::ControlCatalog::Objective",
 	"AWS::DAX::Cluster",
 	"AWS::DAX::ParameterGroup",
 	"AWS::DAX::SubnetGroup",
@@ -10645,17 +10657,21 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::DMS::ReplicationSubnetGroup",
 	"AWS::DMS::ReplicationTask",
 	"AWS::DocDB::DBClusterParameterGroup",
-	"AWS::DocDB::EventSubscription",
+	"AWS::DynamoDB::Export",
 	"AWS::EC2::ClientVpnAuthorizationRule",
 	"AWS::EC2::ClientVpnEndpoint",
 	"AWS::EC2::ClientVpnRoute",
 	"AWS::EC2::ClientVpnTargetNetworkAssociation",
 	"AWS::EC2::NetworkInterfacePermission",
 	"AWS::EC2::VPNGatewayRoutePropagation",
+	"AWS::ElastiCache::ReservedCacheNode",
 	"AWS::ElastiCache::SecurityGroup",
 	"AWS::ElastiCache::SecurityGroupIngress",
 	"AWS::ElasticLoadBalancingV2::ListenerCertificate",
 	"AWS::Elasticsearch::Domain",
+	"AWS::EMR::NotebookExecution",
+	"AWS::Events::Replay",
+	"AWS::FIS::SafetyLever",
 	"AWS::FSx::Snapshot",
 	"AWS::FSx::StorageVirtualMachine",
 	"AWS::FSx::Volume",
@@ -10682,7 +10698,11 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::Greengrass::ResourceDefinitionVersion",
 	"AWS::Greengrass::SubscriptionDefinition",
 	"AWS::Greengrass::SubscriptionDefinitionVersion",
+	"AWS::GreengrassV2::Component",
+	"AWS::GreengrassV2::CoreDevice",
 	"AWS::IAM::AccessKey",
+	"AWS::ImageBuilder::AllWorkflowBuildVersions",
+	"AWS::ImageBuilder::WorkflowExecution",
 	"AWS::IoT::PolicyPrincipalAttachment",
 	"AWS::IoT::ThingPrincipalAttachment",
 	"AWS::IoTThingsGraph::FlowTemplate",
@@ -10703,7 +10723,11 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::MediaLive::Channel",
 	"AWS::MediaLive::Input",
 	"AWS::MediaLive::InputSecurityGroup",
+	"AWS::MediaLive::Offering",
 	"AWS::MediaStore::Container",
+	"AWS::MemoryDB::MultiRegionParameterGroup",
+	"AWS::MemoryDB::ReservedNode",
+	"AWS::Omics::Reference",
 	"AWS::OpsWorks::App",
 	"AWS::OpsWorks::ElasticLoadBalancerAttachment",
 	"AWS::OpsWorks::Instance",
@@ -10711,6 +10735,8 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::OpsWorks::Stack",
 	"AWS::OpsWorks::UserProfile",
 	"AWS::OpsWorks::Volume",
+	"AWS::OSIS::PipelineBlueprint",
+	"AWS::Personalize::Recipe",
 	"AWS::Pinpoint::ADMChannel",
 	"AWS::Pinpoint::APNSChannel",
 	"AWS::Pinpoint::APNSSandboxChannel",
@@ -10738,6 +10764,7 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::RDS::DBSecurityGroupIngress",
 	"AWS::Redshift::ClusterSecurityGroup",
 	"AWS::Redshift::ClusterSecurityGroupIngress",
+	"AWS::RedshiftServerless::RecoveryPoint",
 	"AWS::Route53::RecordSetGroup",
 	"AWS::SageMaker::CodeRepository",
 	"AWS::SageMaker::EndpointConfig",
@@ -10752,6 +10779,12 @@ const NON_PROVISIONABLE_TYPES = /* @__PURE__ */ new Set([
 	"AWS::SES::ReceiptFilter",
 	"AWS::SES::ReceiptRule",
 	"AWS::SES::ReceiptRuleSet",
+	"AWS::Signer::SigningJob",
+	"AWS::SSM::Session",
+	"AWS::States::Execution",
+	"AWS::ThinClient::SoftwareSet",
+	"AWS::Transcribe::MedicalTranscriptionJob",
+	"AWS::UserNotifications::ManagedNotificationConfiguration",
 	"AWS::WAF::ByteMatchSet",
 	"AWS::WAF::IPSet",
 	"AWS::WAF::Rule",
@@ -11065,7 +11098,7 @@ var CloudControlProvider = class {
 		this.logger.debug(`Deleting resource ${logicalId} (${resourceType}), physical ID: ${physicalId}`);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-rcNqhfPS.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-CU5tyKkY.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -12964,6 +12997,20 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 		]),
 		silentDrop: /* @__PURE__ */ new Map([["ImportSourceSpecification", "S3 import uses the separate ImportTable API (not CreateTable) and is create-only with no readback; deferred to a dedicated import-from-S3 PR"]])
 	}],
+	["AWS::EC2::EIP", {
+		handled: /* @__PURE__ */ new Set([
+			"Domain",
+			"InstanceId",
+			"NetworkBorderGroup",
+			"PublicIpv4Pool",
+			"Tags"
+		]),
+		silentDrop: /* @__PURE__ */ new Map([
+			["Address", "Bring-your-own-IP: allocating a specific address you own is not yet supported; cdkd allocates an Amazon-owned address"],
+			["IpamPoolId", "Allocation from an IPAM pool is not yet supported"],
+			["TransferAddress", "Accepting a transferred Elastic IP is not yet supported (out-of-band EIP transfer flow)"]
+		])
+	}],
 	["AWS::EC2::Instance", {
 		handled: /* @__PURE__ */ new Set([
 			"BlockDeviceMappings",
@@ -15691,9 +15738,66 @@ function renderStatefulReason(reason) {
 var DagExecutor = class {
 	nodes = /* @__PURE__ */ new Map();
 	logger = getLogger().child("DagExecutor");
+	/**
+	* Per-node scheduling priority = number of transitive dependents (how many
+	* other registered nodes ultimately wait on this one). Computed once, lazily,
+	* on the first dispatch and cached for the run.
+	*
+	* The ready set is ordered by this priority (descending) so bottleneck-feeding
+	* resources on the critical path start as early as their deps allow, instead
+	* of in template logical-id (node insertion) order.
+	*
+	* Motivation: a zero-dependency `AWS::EC2::EIP` was starting 28th of 43 in a
+	* VPC deploy because it sorts late by logical id, which pushed its dependent
+	* NAT Gateway (a ~2 min AWS-side create) to the tail of the run. Front-loading
+	* by transitive-dependent count starts the EIP -> NAT chain immediately so the
+	* long NAT wait overlaps the rest of the stack — the effect CloudFormation's
+	* parallel walk already achieves. Ties keep insertion order (stable sort).
+	*/
+	priorityById = null;
 	add(node) {
 		this.nodes.set(node.id, node);
 	}
+	/**
+	* Compute the transitive-dependent count for every node, once. A node's
+	* dependents are the registered nodes that list it in their `dependencies`;
+	* the transitive count is the size of the union of its direct dependents and
+	* all of theirs. Memoized per node; a cycle guard keeps a malformed graph
+	* from recursing forever (the executor itself rejects on deadlock later).
+	*/
+	computePriorities() {
+		if (this.priorityById) return this.priorityById;
+		const dependentsOf = /* @__PURE__ */ new Map();
+		for (const node of this.nodes.values()) for (const depId of node.dependencies) {
+			if (!this.nodes.has(depId)) continue;
+			let set = dependentsOf.get(depId);
+			if (!set) {
+				set = /* @__PURE__ */ new Set();
+				dependentsOf.set(depId, set);
+			}
+			set.add(node.id);
+		}
+		const memo = /* @__PURE__ */ new Map();
+		const visiting = /* @__PURE__ */ new Set();
+		const collect = (id) => {
+			const cached = memo.get(id);
+			if (cached) return cached;
+			const acc = /* @__PURE__ */ new Set();
+			if (visiting.has(id)) return acc;
+			visiting.add(id);
+			for (const dependent of dependentsOf.get(id) ?? []) {
+				acc.add(dependent);
+				for (const t of collect(dependent)) acc.add(t);
+			}
+			visiting.delete(id);
+			memo.set(id, acc);
+			return acc;
+		};
+		const priorities = /* @__PURE__ */ new Map();
+		for (const id of this.nodes.keys()) priorities.set(id, collect(id).size);
+		this.priorityById = priorities;
+		return priorities;
+	}
 	has(id) {
 		return this.nodes.has(id);
 	}
@@ -15706,6 +15810,7 @@ var DagExecutor = class {
 	async execute(concurrency, fn, cancelled = () => false) {
 		let active = 0;
 		const errors = [];
+		const priority = this.computePriorities();
 		return new Promise((resolve, reject) => {
 			const dispatch = () => {
 				let changed = true;
@@ -15731,6 +15836,7 @@ var DagExecutor = class {
 						return !dep || dep.state === "completed";
 					})) ready.push(node);
 				}
+				ready.sort((a, b) => (priority.get(b.id) ?? 0) - (priority.get(a.id) ?? 0));
 				if (!cancelled()) for (const node of ready) {
 					if (active >= concurrency) break;
 					node.state = "running";
@@ -17732,4 +17838,4 @@ var DeployEngine = class {
 
 //#endregion
 export { getBootstrapMarkerKey as $, formatError as $t, refStateLookupFromResource as A, resolveBucketRegion as At, S3StateBackend as B, LocalMigrateError as Bt, findActionableSilentDrops as C, CFN_TEMPLATE_URL_LIMIT as Ct, isTerminationProtectionPropagationError as D, expectedOwnerParam as Dt, disableInstanceApiTermination as E, uploadCfnTemplate as Et, applyRoleArnIfSet as F, AssetError as Ft, WorkGraph as G, PartialFailureError as Gt, shouldRetainResource as H, LockError as Ht, DiffCalculator as I, CdkdError as It, loadPublishableAssetManifest as J, ResourceUpdateNotSupportedError as Jt, buildAssetRedirectMap as K, ProvisioningError as Kt, DagBuilder as L, ConfigError as Lt, normalizeAwsTagsToCfn as M, getAwsClients as Mt, resolveExplicitPhysicalId as N, resetAwsClients as Nt, IntrinsicFunctionResolver as O, AssemblyReader as Ot, assertRegionMatch as P, setAwsClients as Pt, ensureAssetStorage as Q, SynthesisError as Qt, TemplateParser as R, DependencyError as Rt, ProviderRegistry as S, CFN_TEMPLATE_BODY_LIMIT as St, slowCcOperationTimeoutMs as T, findLargeInlineResources as Tt, AssetPublisher as U, MissingCdkCliError as Ut, rebuildClientForBucketRegion as V, LocalStartServiceError as Vt, stringifyValue as W, NestedStackChildDirectDestroyError as Wt, AssetModeResolver as X, StackTerminationProtectionError as Xt, rewriteTemplateAssetReferences as Y, StackHasActiveImportsError as Yt, BOOTSTRAP_MARKER_PREFIX as Z, StateError as Zt, green as _, resolveSkipPrefix as _t, withRetry as a, getDockerCmd as at, IAMRoleProvider as b, resolveUseCdkBootstrapAssets as bt, computeImplicitDeleteEdges as c, AssetManifestLoader as ct, isStatefulRecreateTargetSync as d, synthesisStatusMessage as dt, isCdkdError as en, parseBootstrapMarker as et, renderStatefulReason as f, getDefaultStateBucketName as ft, gray as g, resolveCaptureObservedState as gt, cyan as h, resolveAutoAssetStorage as ht, withResourceDeadline as i, formatDockerLoginError as it, WAFv2WebACLProvider as j, AwsClients as jt, cfnRefValueFromPhysicalId as k, clearBucketRegionCache as kt, extractDeploymentEventError as l, getDockerImageBySourceHash as lt, bold as m, resolveApp as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, withErrorHandling as nn, validateContainerRepoName as nt, isRetryableTransientError as o, runDockerForeground as ot, formatResourceLine as p, getLegacyStateBucketName as pt, createAssetRedirectResolver as q, ResourceTimeoutError as qt, DeployEngine as r, __exportAll as rn, buildDockerImage as rt, IMPLICIT_DELETE_DEPENDENCIES as s, runDockerStreaming as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, normalizeAwsError as tn, validateAssetBucketName as tt, MULTI_REGION_RECREATE_BLOCKED_TYPES as u, Synthesizer as ut, red as v, resolveStateBucketWithDefault as vt, CloudControlProvider as w, MIGRATE_TMP_PREFIX as wt, collectInlinePolicyNamesManagedBySiblings as x, warnDeprecatedNoPrefixCliFlag as xt, yellow as y, resolveStateBucketWithDefaultAndSource as yt, LockManager as z, LocalInvokeBuildError as zt };
-//# sourceMappingURL=deploy-engine-Dg51mHCV.js.map
+//# sourceMappingURL=deploy-engine-DBNn0Aq7.js.map