@go-to-k/cdkd 0.267.0 → 0.267.2

package/dist/{deploy-engine-BXgD8s_k.js → deploy-engine-DTNj0ag6.js}

@@ -11354,7 +11354,7 @@ var CloudControlProvider = class {
 		this.logger.debug(`Deleting resource ${logicalId} (${resourceType}), physical ID: ${physicalId}`);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-CBMy7ibk.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-zMwVyLi6.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -15275,6 +15275,32 @@ function isCustomResource(resourceType) {
 	return resourceType.startsWith("Custom::") || resourceType === "AWS::CloudFormation::CustomResource";
 }
 
+//#endregion
+//#region src/provisioning/update-removal.ts
+/**
+* Shared clear-on-removal resolver for merge-semantics update APIs
+* (issue #1160 — the absent-field removal silent-drop bug class; reference
+* fix `LambdaFunctionProvider`, #1157; extracted from the per-provider
+* copies in #1223).
+*
+* CloudFormation resets a property REMOVED from the template to its default,
+* while most AWS `Update*` / `Modify*` APIs treat an absent input field as
+* "no change" (merge semantics). A provider `update()` that passes template
+* properties straight into the SDK input therefore silently keeps the old
+* live value on removal. Route every optional mutable field of a
+* merge-semantics API through this helper, with `clearValue` set to the
+* property's CFn default or the SDK-documented clear sentinel — see
+* docs/provider-development.md §2a for the per-field checklist.
+*
+* Returns `newValue` when present, the `clearValue` when the field was
+* present before and is now absent (removal), and `undefined` when it was
+* never present (so a genuinely-absent field stays absent = no change).
+*/
+function clearOnUpdateRemoval(newValue, previousValue, clearValue) {
+	if (newValue !== void 0) return newValue;
+	if (previousValue !== void 0) return clearValue;
+}
+
 //#endregion
 //#region src/provisioning/providers/iam-role-provider.ts
 /**
@@ -15397,8 +15423,10 @@ var IAMRoleProvider = class {
 		}
 		try {
 			const updateParams = { RoleName: physicalId };
-			if (properties["Description"] !== void 0) updateParams.Description = properties["Description"];
-			if (properties["MaxSessionDuration"] !== void 0) updateParams.MaxSessionDuration = properties["MaxSessionDuration"];
+			const descriptionInput = clearOnUpdateRemoval(properties["Description"], previousProperties["Description"], "");
+			if (descriptionInput !== void 0) updateParams.Description = descriptionInput;
+			const maxSessionDurationInput = clearOnUpdateRemoval(properties["MaxSessionDuration"], previousProperties["MaxSessionDuration"], 3600);
+			if (maxSessionDurationInput !== void 0) updateParams.MaxSessionDuration = maxSessionDurationInput;
 			await this.iamClient.send(new UpdateRoleCommand(updateParams));
 			const newAssumePolicy = properties["AssumeRolePolicyDocument"];
 			const oldAssumePolicy = previousProperties["AssumeRolePolicyDocument"];
@@ -17237,7 +17265,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.267.0";
+	return "0.267.2";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -19224,5 +19252,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { createAssetRedirectResolver as $, ProvisioningError as $t, CloudControlProvider as A, MIGRATE_TMP_PREFIX as At, assertRegionMatch as B, resetAwsClients as Bt, green as C, resolveSkipPrefix as Ct, collectInlinePolicyNamesManagedBySiblings as D, warnDeprecatedNoPrefixCliFlag as Dt, IAMRoleProvider as E, resolveUseCdkBootstrapAssets as Et, cfnRefValueFromPhysicalId as F, processStackMessages as Ft, LockManager as G, DependencyError as Gt, DiffCalculator as H, AssetError as Ht, refStateLookupFromResource as I, clearBucketRegionCache as It, shouldRetainResource as J, LocalStartServiceError as Jt, S3StateBackend as K, LocalInvokeBuildError as Kt, WAFv2WebACLProvider as L, resolveBucketRegion as Lt, disableInstanceApiTermination as M, uploadCfnTemplate as Mt, isTerminationProtectionPropagationError as N, expectedOwnerParam as Nt, ProviderRegistry as O, CFN_TEMPLATE_BODY_LIMIT as Ot, IntrinsicFunctionResolver as P, AssemblyReader as Pt, buildAssetRedirectMap as Q, PartialFailureError as Qt, normalizeAwsTagsToCfn as R, AwsClients as Rt, gray as S, resolveCaptureObservedState as St, yellow as T, resolveStateBucketWithDefaultAndSource as Tt, DagBuilder as U, CdkdError as Ut, applyRoleArnIfSet as V, setAwsClients as Vt, TemplateParser as W, ConfigError as Wt, stringifyValue as X, MissingCdkCliError as Xt, AssetPublisher as Y, LockError as Yt, WorkGraph as Z, NestedStackChildDirectDestroyError as Zt, isStatefulRecreateTargetSync as _, synthesisStatusMessage as _t, DeploymentEventsStore as a, SynthesisError as an, getBootstrapMarkerKey as at, bold as b, resolveApp as bt, replayFailedOperations as c, normalizeAwsError as cn, validateContainerRepoName as ct, withRetry as d, getDockerCmd as dt, ResourceTimeoutError as en, loadPublishableAssetManifest as et, isRetryableTransientError as f, runDockerForeground as ft, MULTI_REGION_RECREATE_BLOCKED_TYPES as g, Synthesizer as gt, extractDeploymentEventError as h, getDockerImageBySourceHash as ht, DeploymentEventsReader as i, StateError as in, ensureAssetStorage as it, slowCcOperationTimeoutMs as j, findLargeInlineResources as jt, findActionableSilentDrops as k, CFN_TEMPLATE_URL_LIMIT as kt, replayRollback as l, withErrorHandling as ln, buildDockerImage as lt, computeImplicitDeleteEdges as m, AssetManifestLoader as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, StackHasActiveImportsError as nn, AssetModeResolver as nt, planFailedOps as o, formatError as on, parseBootstrapMarker as ot, IMPLICIT_DELETE_DEPENDENCIES as p, runDockerStreaming as pt, rebuildClientForBucketRegion as q, LocalMigrateError as qt, DeployEngine as r, StackTerminationProtectionError as rn, BOOTSTRAP_MARKER_PREFIX as rt, planRollback as s, isCdkdError as sn, validateAssetBucketName as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, ResourceUpdateNotSupportedError as tn, rewriteTemplateAssetReferences as tt, withResourceDeadline as u, __exportAll as un, formatDockerLoginError as ut, renderStatefulReason as v, getDefaultStateBucketName as vt, red as w, resolveStateBucketWithDefault as wt, cyan as x, resolveAutoAssetStorage as xt, formatResourceLine as y, getLegacyStateBucketName as yt, resolveExplicitPhysicalId as z, getAwsClients as zt };
-//# sourceMappingURL=deploy-engine-BXgD8s_k.js.map
+export { buildAssetRedirectMap as $, PartialFailureError as $t, findActionableSilentDrops as A, CFN_TEMPLATE_URL_LIMIT as At, resolveExplicitPhysicalId as B, getAwsClients as Bt, green as C, resolveCaptureObservedState as Ct, collectInlinePolicyNamesManagedBySiblings as D, resolveUseCdkBootstrapAssets as Dt, IAMRoleProvider as E, resolveStateBucketWithDefaultAndSource as Et, IntrinsicFunctionResolver as F, AssemblyReader as Ft, TemplateParser as G, ConfigError as Gt, applyRoleArnIfSet as H, setAwsClients as Ht, cfnRefValueFromPhysicalId as I, processStackMessages as It, rebuildClientForBucketRegion as J, LocalMigrateError as Jt, LockManager as K, DependencyError as Kt, refStateLookupFromResource as L, clearBucketRegionCache as Lt, slowCcOperationTimeoutMs as M, findLargeInlineResources as Mt, disableInstanceApiTermination as N, uploadCfnTemplate as Nt, clearOnUpdateRemoval as O, warnDeprecatedNoPrefixCliFlag as Ot, isTerminationProtectionPropagationError as P, expectedOwnerParam as Pt, WorkGraph as Q, NestedStackChildDirectDestroyError as Qt, WAFv2WebACLProvider as R, resolveBucketRegion as Rt, gray as S, resolveAutoAssetStorage as St, yellow as T, resolveStateBucketWithDefault as Tt, DiffCalculator as U, AssetError as Ut, assertRegionMatch as V, resetAwsClients as Vt, DagBuilder as W, CdkdError as Wt, AssetPublisher as X, LockError as Xt, shouldRetainResource as Y, LocalStartServiceError as Yt, stringifyValue as Z, MissingCdkCliError as Zt, isStatefulRecreateTargetSync as _, Synthesizer as _t, DeploymentEventsStore as a, StateError as an, ensureAssetStorage as at, bold as b, getLegacyStateBucketName as bt, replayFailedOperations as c, isCdkdError as cn, validateAssetBucketName as ct, withRetry as d, __exportAll as dn, formatDockerLoginError as dt, ProvisioningError as en, createAssetRedirectResolver as et, isRetryableTransientError as f, getDockerCmd as ft, MULTI_REGION_RECREATE_BLOCKED_TYPES as g, getDockerImageBySourceHash as gt, extractDeploymentEventError as h, AssetManifestLoader as ht, DeploymentEventsReader as i, StackTerminationProtectionError as in, BOOTSTRAP_MARKER_PREFIX as it, CloudControlProvider as j, MIGRATE_TMP_PREFIX as jt, ProviderRegistry as k, CFN_TEMPLATE_BODY_LIMIT as kt, replayRollback as l, normalizeAwsError as ln, validateContainerRepoName as lt, computeImplicitDeleteEdges as m, runDockerStreaming as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, ResourceUpdateNotSupportedError as nn, rewriteTemplateAssetReferences as nt, planFailedOps as o, SynthesisError as on, getBootstrapMarkerKey as ot, IMPLICIT_DELETE_DEPENDENCIES as p, runDockerForeground as pt, S3StateBackend as q, LocalInvokeBuildError as qt, DeployEngine as r, StackHasActiveImportsError as rn, AssetModeResolver as rt, planRollback as s, formatError as sn, parseBootstrapMarker as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, ResourceTimeoutError as tn, loadPublishableAssetManifest as tt, withResourceDeadline as u, withErrorHandling as un, buildDockerImage as ut, renderStatefulReason as v, synthesisStatusMessage as vt, red as w, resolveSkipPrefix as wt, cyan as x, resolveApp as xt, formatResourceLine as y, getDefaultStateBucketName as yt, normalizeAwsTagsToCfn as z, AwsClients as zt };
+//# sourceMappingURL=deploy-engine-DTNj0ag6.js.map