@go-to-k/cdkd 0.267.14 → 0.267.16

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as WorkGraph, $t as NestedStackChildDirectDestroyError, A as slowCcOperationTimeoutMs, At as CFN_TEMPLATE_BODY_LIMIT, B as applyRoleArnIfSet, Bt as AwsClients, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as expectedOwnerParam, G as DagBuilder, Gt as CdkdError, H as describeTypeWithThrottleRetry, Ht as resetAwsClients, I as WAFv2WebACLProvider, It as AssemblyReader, J as S3StateBackend, Jt as LocalInvokeBuildError$1, K as TemplateParser, L as normalizeAwsTagsToCfn, Lt as processStackMessages, M as isTerminationProtectionPropagationError, Mt as MIGRATE_TMP_PREFIX, N as IntrinsicFunctionResolver, Nt as findLargeInlineResources, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as uploadCfnTemplate, Q as stringifyValue, Qt as MissingCdkCliError, R as resolveExplicitPhysicalId, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as setAwsClients, V as DiffCalculator, Vt as getAwsClients, W as isRetryableTransientError, X as shouldRetainResource, Xt as LocalStartServiceError, Y as rebuildClientForBucketRegion, Yt as LocalMigrateError, Z as AssetPublisher, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as StackTerminationProtectionError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dn as withErrorHandling, dt as buildDockerImage, en as PartialFailureError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as StackHasActiveImportsError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_URL_LIMIT, k as CloudControlProvider, kt as warnDeprecatedNoPrefixCliFlag, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as ResourceTimeoutError, nt as loadPublishableAssetManifest, o as planFailedOps, ot as ensureAssetStorage, p as extractDeploymentEventError, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ResourceUpdateNotSupportedError, rt as rewriteTemplateAssetReferences, s as planRollback, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as ProvisioningError, tt as createAssetRedirectResolver, u as withResourceDeadline, un as normalizeAwsError, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch, zt as resolveBucketRegion } from "./deploy-engine-BbcBkfds.js";
+import { $ as WorkGraph, $t as NestedStackChildDirectDestroyError, A as slowCcOperationTimeoutMs, At as CFN_TEMPLATE_BODY_LIMIT, B as applyRoleArnIfSet, Bt as AwsClients, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as expectedOwnerParam, G as DagBuilder, Gt as CdkdError, H as describeTypeWithThrottleRetry, Ht as resetAwsClients, I as WAFv2WebACLProvider, It as AssemblyReader, J as S3StateBackend, Jt as LocalInvokeBuildError$1, K as TemplateParser, L as normalizeAwsTagsToCfn, Lt as processStackMessages, M as isTerminationProtectionPropagationError, Mt as MIGRATE_TMP_PREFIX, N as IntrinsicFunctionResolver, Nt as findLargeInlineResources, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as uploadCfnTemplate, Q as stringifyValue, Qt as MissingCdkCliError, R as resolveExplicitPhysicalId, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as setAwsClients, V as DiffCalculator, Vt as getAwsClients, W as isRetryableTransientError, X as shouldRetainResource, Xt as LocalStartServiceError, Y as rebuildClientForBucketRegion, Yt as LocalMigrateError, Z as AssetPublisher, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as StackTerminationProtectionError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dn as withErrorHandling, dt as buildDockerImage, en as PartialFailureError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as StackHasActiveImportsError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_URL_LIMIT, k as CloudControlProvider, kt as warnDeprecatedNoPrefixCliFlag, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as ResourceTimeoutError, nt as loadPublishableAssetManifest, o as planFailedOps, ot as ensureAssetStorage, p as extractDeploymentEventError, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ResourceUpdateNotSupportedError, rt as rewriteTemplateAssetReferences, s as planRollback, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as ProvisioningError, tt as createAssetRedirectResolver, u as withResourceDeadline, un as normalizeAwsError, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch, zt as resolveBucketRegion } from "./deploy-engine-BjGr3po1.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-dQRoK5OE.js";
+import { t as ASGProvider } from "./asg-provider-Ge0MCN5U.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -7020,8 +7020,28 @@ var SNSTopicProvider = class {
 	*
 	* SNS topics have limited mutable properties (DisplayName, KmsMasterKeyId, etc.).
 	* TopicName is immutable and requires replacement (handled by deployment layer).
+	*
+	* Thin wrapper that maps any AWS SDK failure onto {@link ProvisioningError}
+	* the same way {@link create} and {@link delete} do, so an update failure
+	* carries cdkd's typed error formatting and exit-code handling instead of
+	* surfacing raw (issue #1267). This provider issues many separate `send`
+	* calls across attributes / policies / subscriptions, so the wrap lives at
+	* the boundary and the body stays in {@link applyUpdate}.
+	*
+	* A typed control-flow error is re-thrown untouched: the deploy engine
+	* matches those by class to decide its fallback, so swallowing one into a
+	* ProvisioningError would silently disable that path.
 	*/
-	async update(logicalId, physicalId, _resourceType, properties, previousProperties) {
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+		try {
+			return await this.applyUpdate(logicalId, physicalId, properties, previousProperties);
+		} catch (error) {
+			if (error instanceof CdkdError) throw error;
+			const cause = error instanceof Error ? error : void 0;
+			throw new ProvisioningError(`Failed to update SNS topic ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
+		}
+	}
+	async applyUpdate(logicalId, physicalId, properties, previousProperties) {
 		this.logger.debug(`Updating SNS topic ${logicalId}: ${physicalId}`);
 		for (const attr of [
 			{
@@ -9042,7 +9062,7 @@ var LambdaUrlProvider = class {
 	/**
 	* Update a Lambda Function URL
 	*/
-	async update(logicalId, physicalId, _resourceType, properties, previousProperties) {
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
 		this.logger.debug(`Updating Lambda URL ${logicalId}: ${physicalId}`);
 		const handled = this.handledProperties.get("AWS::Lambda::Url") ?? /* @__PURE__ */ new Set();
 		let changed = false;
@@ -9067,15 +9087,20 @@ var LambdaUrlProvider = class {
 		const prevCorsBuilt = prevCorsRaw ? this.buildCorsConfig(prevCorsRaw) : void 0;
 		const corsParam = clearOnUpdateRemoval(newCorsBuilt && Object.keys(newCorsBuilt).length > 0 ? newCorsBuilt : void 0, prevCorsBuilt && Object.keys(prevCorsBuilt).length > 0 ? prevCorsBuilt : void 0, {});
 		if (corsParam !== void 0) updateParams.Cors = corsParam;
-		const response = await this.lambdaClient.send(new UpdateFunctionUrlConfigCommand(updateParams));
-		return {
-			physicalId,
-			wasReplaced: false,
-			attributes: {
-				FunctionUrl: response.FunctionUrl,
-				FunctionArn: response.FunctionArn
-			}
-		};
+		try {
+			const response = await this.lambdaClient.send(new UpdateFunctionUrlConfigCommand(updateParams));
+			return {
+				physicalId,
+				wasReplaced: false,
+				attributes: {
+					FunctionUrl: response.FunctionUrl,
+					FunctionArn: response.FunctionArn
+				}
+			};
+		} catch (error) {
+			const cause = error instanceof Error ? error : void 0;
+			throw new ProvisioningError(`Failed to update Lambda URL ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
+		}
 	}
 	/**
 	* Delete a Lambda Function URL
@@ -9386,8 +9411,27 @@ var LambdaEventSourceMappingProvider = class {
 	}
 	/**
 	* Update a Lambda Event Source Mapping
+	*
+	* Thin wrapper that maps any AWS SDK failure onto {@link ProvisioningError}
+	* the same way {@link create} and {@link delete} do, so an update failure
+	* carries cdkd's typed error formatting and exit-code handling instead of
+	* surfacing raw (issue #1267). The body lives in {@link applyUpdate} so the
+	* wrap is a boundary concern rather than a large indentation change.
+	*
+	* A typed control-flow error is re-thrown untouched: the deploy engine
+	* matches those by class to decide its fallback, so swallowing one into a
+	* ProvisioningError would silently disable that path.
 	*/
-	async update(logicalId, physicalId, _resourceType, properties, previousProperties) {
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+		try {
+			return await this.applyUpdate(logicalId, physicalId, properties, previousProperties);
+		} catch (error) {
+			if (error instanceof CdkdError) throw error;
+			const cause = error instanceof Error ? error : void 0;
+			throw new ProvisioningError(`Failed to update event source mapping ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
+		}
+	}
+	async applyUpdate(logicalId, physicalId, properties, previousProperties) {
 		this.logger.debug(`Updating event source mapping ${logicalId}: ${physicalId}`);
 		const updateParams = {
 			UUID: physicalId,
@@ -12851,8 +12895,28 @@ var LogsLogGroupProvider = class {
 	* class after creation), so a class change throws
 	* {@link ResourceUpdateNotSupportedError} instead of being silently
 	* dropped; `--replace` recreates the log group under the new class.
+	*
+	* Thin wrapper that maps any AWS SDK failure onto {@link ProvisioningError}
+	* the same way {@link create} and {@link delete} do, so an update failure
+	* carries cdkd's typed error formatting and exit-code handling instead of
+	* surfacing raw (issue #1267). The body lives in {@link applyUpdate} so the
+	* wrap is a boundary concern rather than a large indentation change.
+	*
+	* The {@link ResourceUpdateNotSupportedError} thrown by the LogGroupClass
+	* guard is re-thrown untouched: the deploy engine matches it by class to
+	* fall back to replacement, so swallowing it into a ProvisioningError would
+	* turn a recoverable class change into a hard failure.
 	*/
-	async update(logicalId, physicalId, _resourceType, properties, previousProperties) {
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+		try {
+			return await this.applyUpdate(logicalId, physicalId, properties, previousProperties);
+		} catch (error) {
+			if (error instanceof CdkdError) throw error;
+			const cause = error instanceof Error ? error : void 0;
+			throw new ProvisioningError(`Failed to update log group ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
+		}
+	}
+	async applyUpdate(logicalId, physicalId, properties, previousProperties) {
 		this.logger.debug(`Updating log group ${logicalId}: ${physicalId}`);
 		const normalizeClass = (v) => typeof v === "string" && v.length > 0 ? v : "STANDARD";
 		const prevClass = normalizeClass(previousProperties["LogGroupClass"]);
@@ -14417,8 +14481,30 @@ var EventBridgeBusProvider = class {
 			throw new ProvisioningError(`Failed to create EventBus ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, void 0, cause);
 		}
 	}
-	async update(_logicalId, physicalId, _resourceType, properties, previousProperties) {
-		this.logger.debug(`Updating EventBus ${_logicalId}: ${physicalId}`);
+	/**
+	* Update an EventBus.
+	*
+	* Thin wrapper that maps any AWS SDK failure onto {@link ProvisioningError}
+	* the same way {@link create} and {@link delete} do, so an update failure
+	* carries cdkd's typed error formatting and exit-code handling instead of
+	* surfacing raw (issue #1267). The body lives in {@link applyUpdate} so the
+	* wrap is a boundary concern rather than a 70-line indentation change.
+	*
+	* A typed control-flow error is re-thrown untouched: the deploy engine
+	* matches those by class to decide its fallback, so swallowing one into a
+	* ProvisioningError would silently disable that path.
+	*/
+	async update(logicalId, physicalId, resourceType, properties, previousProperties) {
+		try {
+			return await this.applyUpdate(logicalId, physicalId, properties, previousProperties);
+		} catch (error) {
+			if (error instanceof CdkdError) throw error;
+			const cause = error instanceof Error ? error : void 0;
+			throw new ProvisioningError(`Failed to update EventBus ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
+		}
+	}
+	async applyUpdate(logicalId, physicalId, properties, previousProperties) {
+		this.logger.debug(`Updating EventBus ${logicalId}: ${physicalId}`);
 		const descChanged = properties["Description"] !== previousProperties["Description"];
 		const kmsChanged = properties["KmsKeyIdentifier"] !== previousProperties["KmsKeyIdentifier"];
 		const dlcChanged = JSON.stringify(properties["DeadLetterConfig"]) !== JSON.stringify(previousProperties["DeadLetterConfig"]);
@@ -62081,7 +62167,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.267.14");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.267.16");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;