@go-to-k/cdkd 0.267.10 → 0.267.12

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as WorkGraph, $t as NestedStackChildDirectDestroyError, A as slowCcOperationTimeoutMs, At as CFN_TEMPLATE_BODY_LIMIT, B as applyRoleArnIfSet, Bt as AwsClients, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as expectedOwnerParam, G as DagBuilder, Gt as CdkdError, H as describeTypeWithThrottleRetry, Ht as resetAwsClients, I as WAFv2WebACLProvider, It as AssemblyReader, J as S3StateBackend, Jt as LocalInvokeBuildError$1, K as TemplateParser, L as normalizeAwsTagsToCfn, Lt as processStackMessages, M as isTerminationProtectionPropagationError, Mt as MIGRATE_TMP_PREFIX, N as IntrinsicFunctionResolver, Nt as findLargeInlineResources, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as uploadCfnTemplate, Q as stringifyValue, Qt as MissingCdkCliError, R as resolveExplicitPhysicalId, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as setAwsClients, V as DiffCalculator, Vt as getAwsClients, W as isRetryableTransientError, X as shouldRetainResource, Xt as LocalStartServiceError, Y as rebuildClientForBucketRegion, Yt as LocalMigrateError, Z as AssetPublisher, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as StackTerminationProtectionError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dn as withErrorHandling, dt as buildDockerImage, en as PartialFailureError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as StackHasActiveImportsError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_URL_LIMIT, k as CloudControlProvider, kt as warnDeprecatedNoPrefixCliFlag, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as ResourceTimeoutError, nt as loadPublishableAssetManifest, o as planFailedOps, ot as ensureAssetStorage, p as extractDeploymentEventError, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ResourceUpdateNotSupportedError, rt as rewriteTemplateAssetReferences, s as planRollback, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as ProvisioningError, tt as createAssetRedirectResolver, u as withResourceDeadline, un as normalizeAwsError, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch, zt as resolveBucketRegion } from "./deploy-engine-CwYew49N.js";
+import { $ as WorkGraph, $t as NestedStackChildDirectDestroyError, A as slowCcOperationTimeoutMs, At as CFN_TEMPLATE_BODY_LIMIT, B as applyRoleArnIfSet, Bt as AwsClients, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as expectedOwnerParam, G as DagBuilder, Gt as CdkdError, H as describeTypeWithThrottleRetry, Ht as resetAwsClients, I as WAFv2WebACLProvider, It as AssemblyReader, J as S3StateBackend, Jt as LocalInvokeBuildError$1, K as TemplateParser, L as normalizeAwsTagsToCfn, Lt as processStackMessages, M as isTerminationProtectionPropagationError, Mt as MIGRATE_TMP_PREFIX, N as IntrinsicFunctionResolver, Nt as findLargeInlineResources, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as uploadCfnTemplate, Q as stringifyValue, Qt as MissingCdkCliError, R as resolveExplicitPhysicalId, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as setAwsClients, V as DiffCalculator, Vt as getAwsClients, W as isRetryableTransientError, X as shouldRetainResource, Xt as LocalStartServiceError, Y as rebuildClientForBucketRegion, Yt as LocalMigrateError, Z as AssetPublisher, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as StackTerminationProtectionError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dn as withErrorHandling, dt as buildDockerImage, en as PartialFailureError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as StackHasActiveImportsError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_URL_LIMIT, k as CloudControlProvider, kt as warnDeprecatedNoPrefixCliFlag, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as ResourceTimeoutError, nt as loadPublishableAssetManifest, o as planFailedOps, ot as ensureAssetStorage, p as extractDeploymentEventError, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ResourceUpdateNotSupportedError, rt as rewriteTemplateAssetReferences, s as planRollback, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as ProvisioningError, tt as createAssetRedirectResolver, u as withResourceDeadline, un as normalizeAwsError, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch, zt as resolveBucketRegion } from "./deploy-engine-CqnKG1Ta.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-1vYQwqgn.js";
+import { t as ASGProvider } from "./asg-provider-BSt-wWnn.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -25569,7 +25569,7 @@ var DocDBProvider = class {
 			const sendSubnetIds = subnetIds !== void 0 && subnetIds.length > 0;
 			const modifyInput = {
 				DBSubnetGroupName: physicalId,
-				DBSubnetGroupDescription: properties["DBSubnetGroupDescription"],
+				DBSubnetGroupDescription: clearOnUpdateRemoval(properties["DBSubnetGroupDescription"], previousProperties["DBSubnetGroupDescription"], `Subnet group for ${logicalId}`),
 				...sendSubnetIds && { SubnetIds: subnetIds }
 			};
 			await this.getClient().send(new ModifyDBSubnetGroupCommand$1(modifyInput));
@@ -25654,8 +25654,8 @@ var DocDBProvider = class {
 			await this.getClient().send(new ModifyDBClusterCommand$1({
 				DBClusterIdentifier: physicalId,
 				EngineVersion: properties["EngineVersion"],
-				DeletionProtection: properties["DeletionProtection"],
-				BackupRetentionPeriod: properties["BackupRetentionPeriod"] != null ? Number(properties["BackupRetentionPeriod"]) : void 0,
+				DeletionProtection: clearOnUpdateRemoval(properties["DeletionProtection"], previousProperties["DeletionProtection"], false),
+				BackupRetentionPeriod: clearOnUpdateRemoval(properties["BackupRetentionPeriod"] != null ? Number(properties["BackupRetentionPeriod"]) : void 0, previousProperties["BackupRetentionPeriod"] != null ? Number(previousProperties["BackupRetentionPeriod"]) : void 0, 1),
 				PreferredBackupWindow: properties["PreferredBackupWindow"],
 				PreferredMaintenanceWindow: properties["PreferredMaintenanceWindow"],
 				DBClusterParameterGroupName: properties["DBClusterParameterGroupName"],
@@ -26197,7 +26197,7 @@ var NeptuneProvider = class {
 			const sendSubnetIds = subnetIds !== void 0 && subnetIds.length > 0;
 			const modifyInput = {
 				DBSubnetGroupName: physicalId,
-				DBSubnetGroupDescription: properties["DBSubnetGroupDescription"],
+				DBSubnetGroupDescription: clearOnUpdateRemoval(properties["DBSubnetGroupDescription"], previousProperties["DBSubnetGroupDescription"], `Subnet group for ${logicalId}`),
 				...sendSubnetIds && { SubnetIds: subnetIds }
 			};
 			await this.getClient().send(new ModifyDBSubnetGroupCommand$2(modifyInput));
@@ -26280,12 +26280,12 @@ var NeptuneProvider = class {
 			await this.getClient().send(new ModifyDBClusterCommand$2({
 				DBClusterIdentifier: physicalId,
 				EngineVersion: properties["EngineVersion"],
-				DeletionProtection: properties["DeletionProtection"],
-				BackupRetentionPeriod: properties["BackupRetentionPeriod"] != null ? Number(properties["BackupRetentionPeriod"]) : void 0,
+				DeletionProtection: clearOnUpdateRemoval(properties["DeletionProtection"], previousProperties["DeletionProtection"], false),
+				BackupRetentionPeriod: clearOnUpdateRemoval(properties["BackupRetentionPeriod"] != null ? Number(properties["BackupRetentionPeriod"]) : void 0, previousProperties["BackupRetentionPeriod"] != null ? Number(previousProperties["BackupRetentionPeriod"]) : void 0, 1),
 				PreferredBackupWindow: properties["PreferredBackupWindow"],
 				PreferredMaintenanceWindow: properties["PreferredMaintenanceWindow"],
 				DBClusterParameterGroupName: properties["DBClusterParameterGroupName"],
-				EnableIAMDatabaseAuthentication: properties["IamAuthEnabled"],
+				EnableIAMDatabaseAuthentication: clearOnUpdateRemoval(properties["IamAuthEnabled"], previousProperties["IamAuthEnabled"], false),
 				...sendVpcSgIds && { VpcSecurityGroupIds: vpcSgIds },
 				Port: properties["DBPort"] != null ? Number(properties["DBPort"]) : properties["Port"] != null ? Number(properties["Port"]) : void 0,
 				ApplyImmediately: true
@@ -26382,8 +26382,8 @@ var NeptuneProvider = class {
 				DBInstanceClass: properties["DBInstanceClass"],
 				DBParameterGroupName: properties["DBParameterGroupName"],
 				PreferredMaintenanceWindow: properties["PreferredMaintenanceWindow"],
-				AutoMinorVersionUpgrade: properties["AutoMinorVersionUpgrade"],
-				DeletionProtection: properties["DeletionProtection"],
+				AutoMinorVersionUpgrade: clearOnUpdateRemoval(properties["AutoMinorVersionUpgrade"], previousProperties["AutoMinorVersionUpgrade"], true),
+				DeletionProtection: clearOnUpdateRemoval(properties["DeletionProtection"], previousProperties["DeletionProtection"], false),
 				ApplyImmediately: true
 			}));
 			this.logger.debug(`Successfully updated Neptune DBInstance ${logicalId}`);
@@ -28060,7 +28060,7 @@ var ElastiCacheProvider = class {
 	}
 	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
 		switch (resourceType) {
-			case "AWS::ElastiCache::SubnetGroup": return this.updateSubnetGroup(logicalId, physicalId, resourceType, properties);
+			case "AWS::ElastiCache::SubnetGroup": return this.updateSubnetGroup(logicalId, physicalId, resourceType, properties, previousProperties);
 			case "AWS::ElastiCache::CacheCluster": return this.updateCacheCluster(logicalId, physicalId, resourceType, properties, previousProperties);
 			default: throw new ProvisioningError(`Unsupported resource type: ${resourceType}`, resourceType, logicalId, physicalId);
 		}
@@ -28094,12 +28094,12 @@ var ElastiCacheProvider = class {
 			throw new ProvisioningError(`Failed to create CacheSubnetGroup ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, cacheSubnetGroupName, cause);
 		}
 	}
-	async updateSubnetGroup(logicalId, physicalId, resourceType, properties) {
+	async updateSubnetGroup(logicalId, physicalId, resourceType, properties, previousProperties) {
 		this.logger.debug(`Updating CacheSubnetGroup ${logicalId}: ${physicalId}`);
 		try {
 			await this.getClient().send(new ModifyCacheSubnetGroupCommand({
 				CacheSubnetGroupName: physicalId,
-				CacheSubnetGroupDescription: properties["Description"] ?? properties["CacheSubnetGroupDescription"],
+				CacheSubnetGroupDescription: clearOnUpdateRemoval(properties["Description"] ?? properties["CacheSubnetGroupDescription"], previousProperties["Description"] ?? previousProperties["CacheSubnetGroupDescription"], `Subnet group for ${logicalId}`),
 				SubnetIds: properties["SubnetIds"]
 			}));
 			this.logger.debug(`Successfully updated CacheSubnetGroup ${logicalId}`);
@@ -28189,6 +28189,8 @@ var ElastiCacheProvider = class {
 		try {
 			const rawSgIds = properties["VpcSecurityGroupIds"];
 			const sgIds = rawSgIds && rawSgIds.length > 0 ? rawSgIds : void 0;
+			const notificationTopicArn = properties["NotificationTopicArn"];
+			const notificationRemoved = notificationTopicArn === void 0 && previousProperties["NotificationTopicArn"] != null;
 			await this.getClient().send(new ModifyCacheClusterCommand({
 				CacheClusterId: physicalId,
 				NumCacheNodes: properties["NumCacheNodes"] != null ? Number(properties["NumCacheNodes"]) : void 0,
@@ -28196,11 +28198,13 @@ var ElastiCacheProvider = class {
 				CacheParameterGroupName: properties["CacheParameterGroupName"],
 				EngineVersion: properties["EngineVersion"],
 				PreferredMaintenanceWindow: properties["PreferredMaintenanceWindow"],
-				SnapshotRetentionLimit: properties["SnapshotRetentionLimit"] != null ? Number(properties["SnapshotRetentionLimit"]) : void 0,
+				SnapshotRetentionLimit: clearOnUpdateRemoval(properties["SnapshotRetentionLimit"] != null ? Number(properties["SnapshotRetentionLimit"]) : void 0, previousProperties["SnapshotRetentionLimit"] != null ? Number(previousProperties["SnapshotRetentionLimit"]) : void 0, 0),
 				SnapshotWindow: properties["SnapshotWindow"],
-				AutoMinorVersionUpgrade: properties["AutoMinorVersionUpgrade"],
-				NotificationTopicArn: properties["NotificationTopicArn"],
-				LogDeliveryConfigurations: properties["LogDeliveryConfigurations"],
+				AutoMinorVersionUpgrade: clearOnUpdateRemoval(properties["AutoMinorVersionUpgrade"], previousProperties["AutoMinorVersionUpgrade"], true),
+				NotificationTopicArn: notificationTopicArn,
+				...notificationRemoved && { NotificationTopicStatus: "inactive" },
+				...notificationTopicArn !== void 0 && { NotificationTopicStatus: "active" },
+				LogDeliveryConfigurations: this.buildLogDeliveryConfigurationsForUpdate(properties["LogDeliveryConfigurations"], previousProperties["LogDeliveryConfigurations"]),
 				IpDiscovery: properties["IpDiscovery"],
 				ApplyImmediately: true
 			}));
@@ -28246,6 +28250,30 @@ var ElastiCacheProvider = class {
 		}
 	}
 	/**
+	* Build the `LogDeliveryConfigurations` input for ModifyCacheCluster so a
+	* log type REMOVED from the template is explicitly disabled (issue #1160).
+	*
+	* ModifyCacheCluster applies each request entry to ONLY its own LogType
+	* (per-entry merge semantics), so both a whole-property removal and a
+	* per-entry removal would silently keep the live delivery config. The
+	* documented disable sentinel is `{ LogType, Enabled: false }`
+	* (LogDeliveryConfigurationRequest doc: "Specify if log delivery is
+	* enabled. Default true."). Kept / added entries pass through unchanged;
+	* previously-configured log types missing from the new template get a
+	* disable entry appended. Returns `undefined` when there is nothing to
+	* send (no change).
+	*/
+	buildLogDeliveryConfigurationsForUpdate(newConfigs, previousConfigs) {
+		const kept = newConfigs ?? [];
+		const keptLogTypes = new Set(kept.map((c) => c.LogType).filter((t) => t !== void 0));
+		const disables = (previousConfigs ?? []).filter((c) => c.LogType !== void 0 && !keptLogTypes.has(c.LogType)).map((c) => ({
+			LogType: c.LogType,
+			Enabled: false
+		}));
+		const merged = [...kept, ...disables];
+		return merged.length > 0 ? merged : void 0;
+	}
+	/**
 	* Apply a diff between old and new CFn-shape Tags arrays via ElastiCache's
 	* `AddTagsToResource` / `RemoveTagsFromResource` APIs (keyed by
 	* `ResourceName=arn`).
@@ -28389,7 +28417,7 @@ var ElastiCacheProvider = class {
 		if (cluster.SnapshotRetentionLimit !== void 0) result["SnapshotRetentionLimit"] = cluster.SnapshotRetentionLimit;
 		if (cluster.SnapshotWindow !== void 0) result["SnapshotWindow"] = cluster.SnapshotWindow;
 		if (cluster.AutoMinorVersionUpgrade !== void 0) result["AutoMinorVersionUpgrade"] = cluster.AutoMinorVersionUpgrade;
-		if (cluster.NotificationConfiguration?.TopicArn !== void 0) result["NotificationTopicArn"] = cluster.NotificationConfiguration.TopicArn;
+		if (cluster.NotificationConfiguration?.TopicArn !== void 0 && cluster.NotificationConfiguration.TopicStatus !== "inactive") result["NotificationTopicArn"] = cluster.NotificationConfiguration.TopicArn;
 		if (cluster.IpDiscovery !== void 0) result["IpDiscovery"] = cluster.IpDiscovery;
 		if (cluster.NetworkType !== void 0) result["NetworkType"] = cluster.NetworkType;
 		if (cluster.Engine === "redis" && cluster.TransitEncryptionEnabled !== void 0) result["TransitEncryptionEnabled"] = cluster.TransitEncryptionEnabled;
@@ -61986,7 +62014,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.267.10");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.267.12");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;