@go-to-k/cdkd 0.270.0 → 0.271.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as WorkGraph, A as slowCcOperationTimeoutMs, At as warnDeprecatedNoPrefixCliFlag, B as applyRoleArnIfSet, Bt as resolveBucketRegion, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as uploadCfnTemplate, G as DagBuilder, H as describeTypeWithThrottleRetry, Ht as getAwsClients, I as WAFv2WebACLProvider, It as expectedOwnerParam, J as S3StateBackend, K as TemplateParser, Kt as CdkdError, L as normalizeAwsTagsToCfn, Lt as AssemblyReader, M as isTerminationProtectionPropagationError, Mt as CFN_TEMPLATE_URL_LIMIT, N as IntrinsicFunctionResolver, Nt as MIGRATE_TMP_PREFIX, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as findLargeInlineResources, Q as stringifyValue, Qt as LocalStartServiceError, R as resolveExplicitPhysicalId, Rt as processStackMessages, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as resetAwsClients, V as DiffCalculator, Vt as AwsClients, W as isRetryableTransientError, Wt as setAwsClients, X as shouldRetainResource, Xt as LocalInvokeBuildError$1, Y as rebuildClientForBucketRegion, Yt as DeployCancelledError, Z as AssetPublisher, Zt as LocalMigrateError, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as ResourceUpdateNotSupportedError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dt as buildDockerImage, en as MissingCdkCliError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, fn as normalizeAwsError, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as ResourceTimeoutError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_BODY_LIMIT, k as CloudControlProvider, kt as stateBucketExistenceConfirmed, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as PartialFailureError, nt as loadPublishableAssetManifest, o as planFailedOps, on as StackHasActiveImportsError, ot as ensureAssetStorage, p as extractDeploymentEventError, pn as withErrorHandling, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ProvisioningError, rt as rewriteTemplateAssetReferences, s as planRollback, sn as StackTerminationProtectionError, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as NestedStackChildDirectDestroyError, tt as createAssetRedirectResolver, u as withResourceDeadline, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch } from "./deploy-engine-D3tkYlnl.js";
+import { $ as WorkGraph, A as slowCcOperationTimeoutMs, At as warnDeprecatedNoPrefixCliFlag, B as applyRoleArnIfSet, Bt as resolveBucketRegion, C as yellow, Ct as resolveAutoAssetStorage, D as ProviderRegistry, Dt as resolveStateBucketWithDefaultAndSource, E as clearOnUpdateRemoval, Et as resolveStateBucketWithDefault, F as refStateLookupFromResource, Ft as uploadCfnTemplate, G as DagBuilder, H as describeTypeWithThrottleRetry, Ht as getAwsClients, I as WAFv2WebACLProvider, It as expectedOwnerParam, J as S3StateBackend, K as TemplateParser, Kt as CdkdError, L as normalizeAwsTagsToCfn, Lt as AssemblyReader, M as isTerminationProtectionPropagationError, Mt as CFN_TEMPLATE_URL_LIMIT, N as IntrinsicFunctionResolver, Nt as MIGRATE_TMP_PREFIX, O as findActionableSilentDrops, Ot as resolveUseCdkBootstrapAssets, P as cfnRefValueFromPhysicalId, Pt as findLargeInlineResources, Q as stringifyValue, Qt as LocalStartServiceError, R as resolveExplicitPhysicalId, Rt as processStackMessages, S as red, St as resolveApp, T as collectInlinePolicyNamesManagedBySiblings, Tt as resolveSkipPrefix, U as withRetry, Ut as resetAwsClients, V as DiffCalculator, Vt as AwsClients, W as isRetryableTransientError, Wt as setAwsClients, X as shouldRetainResource, Xt as LocalInvokeBuildError$1, Y as rebuildClientForBucketRegion, Yt as DeployCancelledError, Z as AssetPublisher, Zt as LocalMigrateError, _ as formatResourceLine, _t as getDockerImageBySourceHash, a as DeploymentEventsStore, an as ResourceUpdateNotSupportedError, at as BOOTSTRAP_MARKER_PREFIX, b as gray, bt as getDefaultStateBucketName, c as replayFailedOperations, ct as parseBootstrapMarker, d as IMPLICIT_DELETE_DEPENDENCIES, dt as buildDockerImage, en as MissingCdkCliError, et as buildAssetRedirectMap, f as computeImplicitDeleteEdges, fn as normalizeAwsError, ft as formatDockerLoginError, g as renderStatefulReason, gt as AssetManifestLoader, h as isStatefulRecreateTargetSync, ht as runDockerStreaming, i as DeploymentEventsReader, in as ResourceTimeoutError, it as AssetModeResolver, j as disableInstanceApiTermination, jt as CFN_TEMPLATE_BODY_LIMIT, k as CloudControlProvider, kt as stateBucketExistenceConfirmed, l as replayRollback, lt as validateAssetBucketName, m as MULTI_REGION_RECREATE_BLOCKED_TYPES, mt as runDockerForeground, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as PartialFailureError, nt as loadPublishableAssetManifest, o as planFailedOps, on as StackHasActiveImportsError, ot as ensureAssetStorage, p as extractDeploymentEventError, pn as withErrorHandling, pt as getDockerCmd, q as LockManager, r as DeployEngine, rn as ProvisioningError, rt as rewriteTemplateAssetReferences, s as planRollback, sn as StackTerminationProtectionError, st as getBootstrapMarkerKey, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as NestedStackChildDirectDestroyError, tt as createAssetRedirectResolver, u as withResourceDeadline, ut as validateContainerRepoName, v as bold, vt as Synthesizer, w as IAMRoleProvider, wt as resolveCaptureObservedState, x as green, xt as getLegacyStateBucketName, y as cyan, yt as synthesisStatusMessage, z as assertRegionMatch } from "./deploy-engine-DlTH1ou6.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-D3Ioxi3j.js";
+import { t as ASGProvider } from "./asg-provider-CpHXw10b.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -347,32 +347,41 @@ function ensureWarnAfter(opts) {
 	return opts.resourceWarnAfter;
 }
 /**
-* Skip waiting for async-stabilization resources (CloudFront, RDS,
-* ElastiCache, NAT Gateway, EC2 Instance, ELBv2 LoadBalancer, Lambda
-* MicroVM Image) on deploy. Setting the flag mutates
+* Skip waiting for async-stabilization resources (RDS, ElastiCache,
+* NAT Gateway, EC2 Instance, ELBv2 LoadBalancer, Lambda MicroVM Image)
+* on deploy. Setting the flag mutates
 * `process.env.CDKD_NO_WAIT='true'`; provider code checks that env
 * var, not the parsed CLI option (this lets nested call paths — e.g.
 * asset publish, lifecycle hooks — see the same setting without
 * threading the flag through every function signature).
 *
+* CloudFront Distribution left this list with issue #1282: its
+* `Deployed` wait is skipped by DEFAULT now, so under `--no-wait` it
+* simply behaves the same as the default (`--full-wait` opts back in).
+*
 * Deploy-only. NAT Gateway destroy always waits regardless (a
 * still-`deleting` gateway blocks downstream Subnet / IGW / VPC
-* delete with DependencyViolation), and CloudFront / RDS / ElastiCache
-* destroy paths don't wait to begin with — so `destroy --no-wait`
-* would be a no-op flag.
+* delete with DependencyViolation), RDS / ElastiCache destroy paths
+* don't wait to begin with, and CloudFront's destroy-side
+* disable-then-wait is an API requirement no flag may skip — so
+* `destroy --no-wait` would be a no-op flag.
 */
-const noWaitOption = new Option("--no-wait", "Skip waiting for async resources to stabilize (CloudFront, RDS, ElastiCache, NAT Gateway, EC2 Instance, ELBv2 LoadBalancer, Lambda MicroVM Image)");
+const noWaitOption = new Option("--no-wait", "Skip waiting for async resources to stabilize (RDS, ElastiCache, NAT Gateway, EC2 Instance, ELBv2 LoadBalancer, Lambda MicroVM Image)");
 /**
-* Opt in to the stabilization waits cdkd deliberately SKIPS by default:
-* the ones where CloudFormation waits and Terraform does not. Today that
-* is ECS Service steady state (create and update).
+* Opt in to the stabilization waits cdkd deliberately SKIPS by default.
+* Today that is ECS Service steady state (create and update; a
+* "CloudFormation waits, Terraform does not" disagree-case) and
+* CloudFront Distribution `Deployed` (create and update; both engines
+* wait, but the wait has no in-deploy consumer and no failure signal —
+* the fast-side clause, issue #1282).
 *
 * `--no-wait`, the default, and `--full-wait` are three points on one
 * axis, from least to most waiting:
 *
 * - `--no-wait`      skip the stabilization waits cdkd performs by default
-* - (default)        wait where CloudFormation and Terraform agree
-* - `--full-wait`    also wait where only CloudFormation waits
+* - (default)        wait where the wait is load-bearing (in-deploy
+*                    consumers / failure detection)
+* - `--full-wait`    also wait everywhere CloudFormation waits
 *
 * Which one is right depends on whether anything downstream needs the
 * resource to actually be serving, NOT on where the deploy runs: cutting
@@ -390,7 +399,7 @@ const noWaitOption = new Option("--no-wait", "Skip waiting for async resources t
 *
 * Deploy-only, like `--no-wait`.
 */
-const fullWaitOption = new Option("--full-wait", "Also wait for stabilizations cdkd skips by default, matching CloudFormation (ECS Service steady state)");
+const fullWaitOption = new Option("--full-wait", "Also wait for stabilizations cdkd skips by default, matching CloudFormation (ECS Service steady state, CloudFront Distribution Deployed)");
 /**
 * Reject `--no-wait --full-wait`. They sit at opposite ends of one axis,
 * so a combination has no coherent meaning: the user is asking to both
@@ -20604,6 +20613,32 @@ var CloudFrontOACProvider = class {
 	}
 };
 
+//#endregion
+//#region src/provisioning/resource-timeout-registry.ts
+let resolved;
+/**
+* Seed the registry with the validated `--resource-timeout` input. Call once
+* per CLI invocation, right after `validateResourceTimeouts`. Passing
+* `undefined` (flag not supplied) clears the registry, so consumers fall back
+* to their own compile-time floors.
+*/
+function setResolvedResourceTimeouts(opt) {
+	resolved = opt;
+}
+/**
+* The user's resolved timeout for `resourceType` in milliseconds, or
+* `undefined` when the user supplied nothing applicable. Resolution matches
+* the outer-deadline sites: per-type override wins, else the explicit global
+* value. The compile-time default (`DEFAULT_RESOURCE_TIMEOUT_MS`) is
+* deliberately NOT applied here — an inner waiter's own floor (e.g. ECS 600s)
+* must only be raised by an EXPLICIT user value, never by the generic 30m
+* default silently multiplying every `--full-wait` failure by 3x.
+*/
+function resolvedResourceTimeoutMs(resourceType) {
+	if (!resolved) return void 0;
+	return resolved.perTypeMs?.[resourceType] ?? resolved.globalMs;
+}
+
 //#endregion
 //#region src/provisioning/providers/cloudfront-distribution-provider.ts
 /**
@@ -20676,10 +20711,7 @@ var CloudFrontDistributionProvider = class {
 			const distributionId = distribution.Id;
 			const domainName = distribution.DomainName;
 			this.logger.debug(`Created CloudFront Distribution: ${distributionId} (${domainName})`);
-			if (process.env["CDKD_NO_WAIT"] !== "true") {
-				this.logger.debug(`Waiting for Distribution ${distributionId} to reach Deployed status...`);
-				await this.waitForDistributionStable(distributionId);
-			}
+			await this.settleDistribution(logicalId, distributionId);
 			return {
 				physicalId: distributionId,
 				attributes: {
@@ -20719,6 +20751,7 @@ var CloudFrontDistributionProvider = class {
 			const domainName = getResponse.Distribution?.DomainName ?? "";
 			const arn = getResponse.Distribution?.ARN;
 			await this.applyTagDiff(arn, previousProperties["Tags"], properties["Tags"], physicalId, logicalId, resourceType);
+			await this.settleDistribution(logicalId, physicalId);
 			this.logger.debug(`Updated CloudFront Distribution ${physicalId}`);
 			return {
 				physicalId,
@@ -20769,7 +20802,7 @@ var CloudFrontDistributionProvider = class {
 					IfMatch: etag,
 					DistributionConfig: config
 				}))).ETag;
-				await this.waitForDistributionStable(physicalId, false);
+				if (!await this.waitForDistributionStable(physicalId, false)) this.logger.warn(`Distribution ${physicalId} disable did not settle (Deployed + disabled) within the wait budget; attempting delete anyway. If it fails with DistributionNotDisabled, retry the destroy or raise the budget with --resource-timeout AWS::CloudFront::Distribution=<duration>.`);
 				etag = (await this.cloudFrontClient.send(new GetDistributionConfigCommand({ Id: physicalId }))).ETag;
 			}
 			await this.cloudFrontClient.send(new DeleteDistributionCommand({
@@ -20869,17 +20902,39 @@ var CloudFrontDistributionProvider = class {
 		throw new Error(`Unsupported attribute: ${attributeName} for AWS::CloudFront::Distribution`);
 	}
 	/**
-	* Wait for a distribution to reach a stable state.
+	* Settle a CloudFront Distribution according to the run's wait mode.
 	*
-	* "Stable" means Status === 'Deployed'. When `expectedEnabled` is provided,
-	* we additionally require DistributionConfig.Enabled === expectedEnabled —
-	* this guards against CloudFront's eventually-consistent reads that can
-	* briefly return the pre-update snapshot after UpdateDistribution returns.
+	* cdkd does NOT wait for `Deployed` by default (issue #1282). Both
+	* CloudFormation and Terraform (`wait_for_deployment`, default `true`) wait
+	* here, so this is a deliberate divergence under the wait-semantics policy's
+	* fast-side clause: every `Fn::GetAtt` (Id / DomainName) is final in the
+	* Create/Update response so nothing in-deploy consumes `Deployed`, the wait
+	* carries no failure signal (a distribution deploy cannot fail — a long
+	* wait means slow edge propagation, not brokenness), and Terraform's
+	* `wait_for_deployment` toggle keeps the benchmark comparison measurable in
+	* both modes. `--full-wait` opts back into the CloudFormation behavior.
+	*/
+	async settleDistribution(logicalId, distributionId) {
+		if (process.env["CDKD_FULL_WAIT"] === "true") {
+			this.logger.debug(`Waiting for Distribution ${distributionId} to reach Deployed status...`);
+			if (!await this.waitForDistributionStable(distributionId)) this.logger.warn(`CloudFront Distribution ${logicalId} (${distributionId}) did not reach Deployed within the wait budget; continuing (propagation finishes in the background). To wait manually: aws cloudfront wait distribution-deployed --id ${distributionId}. Raise the budget with --resource-timeout AWS::CloudFront::Distribution=<duration>.`);
+			return;
+		}
+		const fullWaitHint = process.env["CDKD_WAIT_FLAGS_AVAILABLE"] === "true" ? "; pass --full-wait to wait" : "";
+		this.logger.info(`CloudFront Distribution ${logicalId} accepted (not waiting for Deployed${fullWaitHint}). To wait manually: aws cloudfront wait distribution-deployed --id ${distributionId}`);
+	}
+	/**
+	* Poll until the distribution reports `Status: Deployed` (and, when
+	* `expectedEnabled` is given, the matching `Enabled` value — the delete
+	* path's disable-then-delete requirement).
 	*
-	* Uses exponential backoff polling.
+	* Returns `true` when the stable state was observed (or the wait was
+	* interrupted by SIGINT — the caller is shutting down, so no timeout
+	* warning applies), `false` on budget exhaustion.
 	*/
 	async waitForDistributionStable(distributionId, expectedEnabled) {
-		const maxAttempts = 120;
+		const budgetMs = Math.max(1200 * 1e3, resolvedResourceTimeoutMs("AWS::CloudFront::Distribution") ?? 0);
+		const deadline = Date.now() + budgetMs;
 		let delay = 5e3;
 		const maxDelay = 1e4;
 		let interrupted = false;
@@ -20888,24 +20943,37 @@ var CloudFrontDistributionProvider = class {
 		};
 		process.on("SIGINT", sigintHandler);
 		try {
-			for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+			while (Date.now() < deadline) {
 				if (interrupted) {
 					this.logger.debug(`Distribution ${distributionId} wait interrupted by SIGINT, proceeding`);
-					return;
+					return true;
 				}
-				const response = await this.cloudFrontClient.send(new GetDistributionCommand({ Id: distributionId }));
-				const status = response.Distribution?.Status;
-				const enabled = response.Distribution?.DistributionConfig?.Enabled;
-				if (status === "Deployed" && (expectedEnabled === void 0 || enabled === expectedEnabled)) {
-					this.logger.debug(`Distribution ${distributionId} is stable (Status=Deployed, Enabled=${enabled})`);
-					return;
+				let response;
+				try {
+					response = await this.cloudFrontClient.send(new GetDistributionCommand({ Id: distributionId }));
+				} catch (error) {
+					if (error instanceof NoSuchDistribution) throw error;
+					this.logger.debug(`Distribution ${distributionId} status read failed (${error instanceof Error ? error.message : String(error)}); retrying`);
+				}
+				if (response) {
+					const status = response.Distribution?.Status;
+					const enabled = response.Distribution?.DistributionConfig?.Enabled;
+					if (status === "Deployed" && (expectedEnabled === void 0 || enabled === expectedEnabled)) {
+						this.logger.debug(`Distribution ${distributionId} is stable (Status=Deployed, Enabled=${enabled})`);
+						return true;
+					}
+					this.logger.debug(`Distribution ${distributionId} status: ${status}, enabled: ${enabled}` + (expectedEnabled === void 0 ? "" : ` (waiting for Enabled=${expectedEnabled})`));
 				}
-				this.logger.debug(`Distribution ${distributionId} status: ${status}, enabled: ${enabled}` + (expectedEnabled === void 0 ? "" : ` (waiting for Enabled=${expectedEnabled})`) + ` (attempt ${attempt}/${maxAttempts})`);
 				const sleepEnd = Date.now() + delay;
 				while (Date.now() < sleepEnd && !interrupted) await new Promise((resolve) => setTimeout(resolve, 1e3));
 				delay = Math.min(delay * 1.5, maxDelay);
 			}
+			if (interrupted) {
+				this.logger.debug(`Distribution ${distributionId} wait interrupted by SIGINT, proceeding`);
+				return true;
+			}
 			this.logger.debug(`Distribution ${distributionId} did not reach stable state within timeout, proceeding with next step`);
+			return false;
 		} finally {
 			process.removeListener("SIGINT", sigintHandler);
 		}
@@ -22531,32 +22599,6 @@ function wasMeaningfullyConfigured(value, discriminatorKey) {
 	return value[discriminatorKey] !== void 0;
 }
 
-//#endregion
-//#region src/provisioning/resource-timeout-registry.ts
-let resolved;
-/**
-* Seed the registry with the validated `--resource-timeout` input. Call once
-* per CLI invocation, right after `validateResourceTimeouts`. Passing
-* `undefined` (flag not supplied) clears the registry, so consumers fall back
-* to their own compile-time floors.
-*/
-function setResolvedResourceTimeouts(opt) {
-	resolved = opt;
-}
-/**
-* The user's resolved timeout for `resourceType` in milliseconds, or
-* `undefined` when the user supplied nothing applicable. Resolution matches
-* the outer-deadline sites: per-type override wins, else the explicit global
-* value. The compile-time default (`DEFAULT_RESOURCE_TIMEOUT_MS`) is
-* deliberately NOT applied here — an inner waiter's own floor (e.g. ECS 600s)
-* must only be raised by an EXPLICIT user value, never by the generic 30m
-* default silently multiplying every `--full-wait` failure by 3x.
-*/
-function resolvedResourceTimeoutMs(resourceType) {
-	if (!resolved) return void 0;
-	return resolved.perTypeMs?.[resourceType] ?? resolved.globalMs;
-}
-
 //#endregion
 //#region src/provisioning/providers/ecs-provider.ts
 /**
@@ -63162,7 +63204,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.270.0");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.271.0");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;