@go-to-k/cdkd 0.276.3 → 0.276.5

package/dist/{deploy-engine-gQzltBso.js → deploy-engine-BwPdeLbJ.js}

@@ -12090,7 +12090,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DFSI7iBe.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-Wm3Q60jN.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -17122,12 +17122,45 @@ const ATOMIC_FINAL_SNAPSHOT_TYPES = /* @__PURE__ */ new Set([
 * `AWS::Redshift::Cluster` (`CreateClusterSnapshot`, issue #1353), and
 * `AWS::ElastiCache::ReplicationGroup` (ElastiCache `CreateSnapshot`
 * against the replication group, issue #1353).
+*
+* The two sets are DISJOINT by construction and must stay that way:
+* {@link finalSnapshotMechanism} tests the atomic set first, so a type in
+* both would silently take the atomic arm and never be snapshotted here.
+* Pinned by `final-snapshot.test.ts`.
 */
 const PRE_DELETE_SNAPSHOT_TYPES = /* @__PURE__ */ new Set([
 	"AWS::EC2::Volume",
 	"AWS::Redshift::Cluster",
 	"AWS::ElastiCache::ReplicationGroup"
 ]);
+/**
+* The mechanism matrix as a PURE function of (type, route) — issue #1366.
+*
+* Extracted so the executor that ACTS on it and the plan preview that
+* DESCRIBES it read one source: the preview used to promise "final snapshot,
+* then delete" for every Snapshot-policy resource, including the shapes the
+* replay was about to refuse. Deciding this in the CLI's label layer rather
+* than in the pure classifier is deliberate — whether a refusal actually
+* happens ALSO depends on `--skip-final-snapshot`, a flag the classifier
+* cannot see, and the label functions take it.
+*
+* `provisionedBy` must be the route the DELETE will take (state record first,
+* journaled op as the legacy fallback), not merely the op's recorded one —
+* a gate judging a different route than the delete uses is worse than none.
+*/
+function finalSnapshotMechanism(resourceType, provisionedBy) {
+	if (ATOMIC_FINAL_SNAPSHOT_TYPES.has(resourceType)) return provisionedBy === "cc-api" ? "refuse-cc-routed" : "atomic-delete-parameter";
+	if (PRE_DELETE_SNAPSHOT_TYPES.has(resourceType)) return "pre-delete-snapshot";
+	return "refuse-unsupported-type";
+}
+/**
+* Will a `Snapshot`-policy delete of this (type, route) be REFUSED rather
+* than carried out? The plan preview's question (issue #1366).
+*/
+function refusesFinalSnapshot(resourceType, provisionedBy) {
+	const mechanism = finalSnapshotMechanism(resourceType, provisionedBy);
+	return mechanism === "refuse-cc-routed" || mechanism === "refuse-unsupported-type";
+}
 /** Sanitize a physical id into the snapshot-identifier charset (shared by the
 * identifier builder and the pre-delete reuse-probe prefix match). */
 function sanitizeSnapshotBase(physicalId) {
@@ -17811,15 +17844,14 @@ function rollbackFinalSnapshotId(resourceType, record, fallbackProvisionedBy) {
 async function prepareCreateRollbackFinalSnapshot(op, provisionedBy, ctx) {
 	const { logicalId, resourceType } = op;
 	const physicalId = op.physicalId;
-	if (ATOMIC_FINAL_SNAPSHOT_TYPES.has(resourceType)) {
-		if (provisionedBy === "cc-api") throw ccRoutedFinalSnapshotError(logicalId, resourceType, SKIP_FINAL_SNAPSHOT_FLAG);
-		return buildFinalSnapshotIdentifier(physicalId, resourceType);
-	}
-	if (PRE_DELETE_SNAPSHOT_TYPES.has(resourceType)) {
-		await createPreDeleteFinalSnapshot(resourceType, physicalId, logicalId, ctx.finalSnapshotClients ?? getAwsClients(), ctx.logger);
-		return;
+	switch (finalSnapshotMechanism(resourceType, provisionedBy)) {
+		case "atomic-delete-parameter": return buildFinalSnapshotIdentifier(physicalId, resourceType);
+		case "pre-delete-snapshot":
+			await createPreDeleteFinalSnapshot(resourceType, physicalId, logicalId, ctx.finalSnapshotClients ?? getAwsClients(), ctx.logger);
+			return;
+		case "refuse-cc-routed": throw ccRoutedFinalSnapshotError(logicalId, resourceType, SKIP_FINAL_SNAPSHOT_FLAG);
+		case "refuse-unsupported-type": throw unsupportedFinalSnapshotError(logicalId, resourceType, SKIP_FINAL_SNAPSHOT_FLAG);
 	}
-	throw unsupportedFinalSnapshotError(logicalId, resourceType, SKIP_FINAL_SNAPSHOT_FLAG);
 }
 /**
 * Retry schedule for a re-create that must wait out a name-release delay:
@@ -17915,7 +17947,8 @@ function classifyFailedOp(op, stateResources) {
 function planFailedOps(failedOps, stateResources) {
 	return failedOps.map((op) => ({
 		op,
-		action: classifyFailedOp(op, stateResources)
+		action: classifyFailedOp(op, stateResources),
+		effectiveProvisionedBy: effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy)
 	}));
 }
 /**
@@ -17928,7 +17961,8 @@ function planRollback(operations, stateResources, orphanLogicalIds = /* @__PURE_
 	return [...[...otherOps].reverse(), ...sortRollbackCreates(createOps, stateResources)].map((op) => ({
 		op,
 		action: classifyRollbackOp(op, stateResources, orphanLogicalIds),
-		replacement: isReplacementOp(op)
+		replacement: isReplacementOp(op),
+		effectiveProvisionedBy: effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy)
 	}));
 }
 function partitionOps(operations) {
@@ -17998,6 +18032,14 @@ async function replayRollback(operations, stateResources, stackName, ctx, option
 async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds, result, afterOp, isInterrupted) {
 	const action = classifyRollbackOp(op, stateResources, orphanLogicalIds);
 	const { logger } = ctx;
+	/**
+	* The route a CREATE-rollback arm resolved for this op (issue #1366) —
+	* hoisted so the shared catch's ROLLBACK_RESOURCE_FAILED reports the route
+	* the delete was going to take, which is the one a refusal is about. Stays
+	* `undefined` on the UPDATE / replacement arms, where the catch keeps the
+	* journaled value (those arms resolve their own routing separately).
+	*/
+	let createRollbackRoute;
 	try {
 		switch (action) {
 			case "unrecoverable-delete":
@@ -18017,6 +18059,8 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 				return;
 			case "orphan-flag":
 				if (op.changeType === "CREATE") {
+					const orphanFlagProvisionedBy = effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy);
+					createRollbackRoute = orphanFlagProvisionedBy;
 					delete stateResources[op.logicalId];
 					logger.info(`  Rollback: Orphaning created resource ${op.logicalId} (--orphan)`);
 					await afterOp?.(op.logicalId);
@@ -18026,11 +18070,13 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 						operation: "CREATE",
 						logicalId: op.logicalId,
 						resourceType: op.resourceType,
-						...op.provisionedBy && { provisionedBy: op.provisionedBy }
+						...orphanFlagProvisionedBy && { provisionedBy: orphanFlagProvisionedBy }
 					});
 				} else logger.info(`  Rollback: Leaving ${op.logicalId} at its new state (--orphan)`);
 				return;
-			case "orphan-retain":
+			case "orphan-retain": {
+				const orphanProvisionedBy = effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy);
+				createRollbackRoute = orphanProvisionedBy;
 				delete stateResources[op.logicalId];
 				logger.info(`  Rollback: Leaving ${op.logicalId} (${op.resourceType}) in AWS (DeletionPolicy: Retain) — removed from state`);
 				await afterOp?.(op.logicalId);
@@ -18040,9 +18086,10 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 					operation: "CREATE",
 					logicalId: op.logicalId,
 					resourceType: op.resourceType,
-					...op.provisionedBy && { provisionedBy: op.provisionedBy }
+					...orphanProvisionedBy && { provisionedBy: orphanProvisionedBy }
 				});
 				return;
+			}
 			case "delete":
 			case "delete-with-final-snapshot": {
 				if (!op.physicalId) {
@@ -18051,6 +18098,7 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 					return;
 				}
 				const deleteProvisionedBy = effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy);
+				createRollbackRoute = deleteProvisionedBy;
 				const snapshotPolicy = action === "delete-with-final-snapshot";
 				const takeFinalSnapshot = snapshotPolicy && ctx.skipFinalSnapshot !== true;
 				let finalSnapshotIdentifier;
@@ -18073,7 +18121,7 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 					operation: "CREATE",
 					logicalId: op.logicalId,
 					resourceType: op.resourceType,
-					...op.provisionedBy && { provisionedBy: op.provisionedBy }
+					...deleteProvisionedBy && { provisionedBy: deleteProvisionedBy }
 				});
 				return;
 			}
@@ -18226,13 +18274,14 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 		logger.warn(`  Rollback failed for ${op.logicalId} (${op.changeType}): ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
 		logger.warn("  Continuing with remaining rollback operations...");
 		result.failures++;
+		const failedRoute = createRollbackRoute ?? op.provisionedBy;
 		ctx.recordEvent?.({
 			eventType: "ROLLBACK_RESOURCE_FAILED",
 			stackName,
 			operation: op.changeType,
 			logicalId: op.logicalId,
 			resourceType: op.resourceType,
-			...op.provisionedBy && { provisionedBy: op.provisionedBy },
+			...failedRoute && { provisionedBy: failedRoute },
 			error: extractDeploymentEventError(rollbackError)
 		});
 	}
@@ -18269,6 +18318,7 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 		}
 		const op = failedOps[i];
 		const action = classifyFailedOp(op, stateResources);
+		let createRollbackRoute;
 		try {
 			switch (action) {
 				case "skip-failed-noop":
@@ -18282,7 +18332,9 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 					logger.warn(`  Rollback: cannot revert failed UPDATE of ${op.logicalId} — no previous state available, skipping`);
 					result.warnings++;
 					break;
-				case "orphan-failed-create-retain":
+				case "orphan-failed-create-retain": {
+					const orphanProvisionedBy = effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy);
+					createRollbackRoute = orphanProvisionedBy;
 					delete stateResources[op.logicalId];
 					logger.info(`  Rollback: leaving partially-created ${op.logicalId} (${op.resourceType}) in AWS (DeletionPolicy: Retain) — removed from state`);
 					await options.afterOp?.(op.logicalId);
@@ -18292,12 +18344,14 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 						operation: "CREATE",
 						logicalId: op.logicalId,
 						resourceType: op.resourceType,
-						...op.provisionedBy && { provisionedBy: op.provisionedBy }
+						...orphanProvisionedBy && { provisionedBy: orphanProvisionedBy }
 					});
 					break;
+				}
 				case "delete-failed-create":
 				case "delete-failed-create-with-final-snapshot": {
 					const deleteProvisionedBy = effectiveProvisionedBy(stateResources[op.logicalId], op.provisionedBy);
+					createRollbackRoute = deleteProvisionedBy;
 					const snapshotPolicy = action === "delete-failed-create-with-final-snapshot";
 					const takeFinalSnapshot = snapshotPolicy && ctx.skipFinalSnapshot !== true;
 					let finalSnapshotIdentifier;
@@ -18319,7 +18373,7 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 						operation: "CREATE",
 						logicalId: op.logicalId,
 						resourceType: op.resourceType,
-						...op.provisionedBy && { provisionedBy: op.provisionedBy }
+						...deleteProvisionedBy && { provisionedBy: deleteProvisionedBy }
 					});
 					break;
 				}
@@ -18350,13 +18404,14 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 			logger.warn(`  Rollback failed for failed-op ${op.logicalId} (${op.changeType}): ${revertError instanceof Error ? revertError.message : String(revertError)}`);
 			result.failures++;
 			pending.add(op);
+			const failedRoute = createRollbackRoute ?? op.provisionedBy;
 			ctx.recordEvent?.({
 				eventType: "ROLLBACK_RESOURCE_FAILED",
 				stackName,
 				operation: op.changeType,
 				logicalId: op.logicalId,
 				resourceType: op.resourceType,
-				...op.provisionedBy && { provisionedBy: op.provisionedBy },
+				...failedRoute && { provisionedBy: failedRoute },
 				error: extractDeploymentEventError(revertError)
 			});
 		}
@@ -18457,7 +18512,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.276.3";
+	return "0.276.5";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -20568,5 +20623,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { TemplateParser as $, CdkdError as $t, yellow as A, resolveAutoAssetStorage as At, IntrinsicFunctionResolver as B, MIGRATE_TMP_PREFIX as Bt, renderStatefulReason as C, AssetManifestLoader as Ct, gray as D, getDefaultStateBucketName as Dt, cyan as E, synthesisStatusMessage as Et, findActionableSilentDrops as F, resolveUseCdkBootstrapAssets as Ft, resolveExplicitPhysicalId as G, processStackMessages as Gt, refStateLookupFromResource as H, uploadCfnTemplate as Ht, CloudControlProvider as I, stateBucketExistenceConfirmed as It, DiffCalculator as J, AwsClients as Jt, assertRegionMatch as K, clearBucketRegionCache as Kt, slowCcOperationTimeoutMs as L, warnDeprecatedNoPrefixCliFlag as Lt, collectInlinePolicyNamesManagedBySiblings as M, resolveSkipPrefix as Mt, clearOnUpdateRemoval as N, resolveStateBucketWithDefault as Nt, green as O, getLegacyStateBucketName as Ot, ProviderRegistry as P, resolveStateBucketWithDefaultAndSource as Pt, DagBuilder as Q, AssetError as Qt, disableInstanceApiTermination as R, CFN_TEMPLATE_BODY_LIMIT as Rt, isStatefulRecreateTargetSync as S, runDockerStreaming as St, bold as T, Synthesizer as Tt, WAFv2WebACLProvider as U, expectedOwnerParam as Ut, cfnRefValueFromPhysicalId as V, findLargeInlineResources as Vt, normalizeAwsTagsToCfn as W, AssemblyReader as Wt, withRetry as X, resetAwsClients as Xt, describeTypeWithThrottleRetry as Y, getAwsClients as Yt, isRetryableTransientError as Z, setAwsClients as Zt, createPreDeleteFinalSnapshot as _, formatError as _n, validateContainerRepoName as _t, DeploymentEventsStore as a, LocalStartServiceError as an, stringifyValue as at, extractDeploymentEventError as b, withErrorHandling as bn, getDockerCmd as bt, replayFailedOperations as c, NestedStackChildDirectDestroyError as cn, createAssetRedirectResolver as ct, IMPLICIT_DELETE_DEPENDENCIES as d, ResourceTimeoutError as dn, AssetModeResolver as dt, ConfigError as en, LockManager as et, computeImplicitDeleteEdges as f, ResourceUpdateNotSupportedError as fn, BOOTSTRAP_MARKER_PREFIX as ft, ccRoutedFinalSnapshotError as g, SynthesisError as gn, validateAssetBucketName as gt, buildFinalSnapshotIdentifier as h, StateError as hn, parseBootstrapMarker as ht, DeploymentEventsReader as i, LocalMigrateError as in, AssetPublisher as it, IAMRoleProvider as j, resolveCaptureObservedState as jt, red as k, resolveApp as kt, replayRollback as l, PartialFailureError as ln, loadPublishableAssetManifest as lt, PRE_DELETE_SNAPSHOT_TYPES as m, StackTerminationProtectionError as mn, getBootstrapMarkerKey as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, DeployCancelledError as nn, rebuildClientForBucketRegion as nt, planFailedOps as o, LockError as on, WorkGraph as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, StackHasActiveImportsError as pn, ensureAssetStorage as pt, applyRoleArnIfSet as q, resolveBucketRegion as qt, DeployEngine as r, LocalInvokeBuildError as rn, shouldRetainResource as rt, planRollback as s, MissingCdkCliError as sn, buildAssetRedirectMap as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, DependencyError as tn, S3StateBackend as tt, withResourceDeadline as u, ProvisioningError as un, rewriteTemplateAssetReferences as ut, isFinalSnapshotError as v, isCdkdError as vn, buildDockerImage as vt, formatResourceLine as w, getDockerImageBySourceHash as wt, MULTI_REGION_RECREATE_BLOCKED_TYPES as x, __exportAll as xn, runDockerForeground as xt, unsupportedFinalSnapshotError as y, normalizeAwsError as yn, formatDockerLoginError as yt, isTerminationProtectionPropagationError as z, CFN_TEMPLATE_URL_LIMIT as zt };
-//# sourceMappingURL=deploy-engine-gQzltBso.js.map
+export { DagBuilder as $, AssetError as $t, red as A, resolveApp as At, isTerminationProtectionPropagationError as B, CFN_TEMPLATE_URL_LIMIT as Bt, isStatefulRecreateTargetSync as C, runDockerStreaming as Ct, cyan as D, synthesisStatusMessage as Dt, bold as E, Synthesizer as Et, ProviderRegistry as F, resolveStateBucketWithDefaultAndSource as Ft, normalizeAwsTagsToCfn as G, AssemblyReader as Gt, cfnRefValueFromPhysicalId as H, findLargeInlineResources as Ht, findActionableSilentDrops as I, resolveUseCdkBootstrapAssets as It, applyRoleArnIfSet as J, resolveBucketRegion as Jt, resolveExplicitPhysicalId as K, processStackMessages as Kt, CloudControlProvider as L, stateBucketExistenceConfirmed as Lt, IAMRoleProvider as M, resolveCaptureObservedState as Mt, collectInlinePolicyNamesManagedBySiblings as N, resolveSkipPrefix as Nt, gray as O, getDefaultStateBucketName as Ot, clearOnUpdateRemoval as P, resolveStateBucketWithDefault as Pt, isRetryableTransientError as Q, setAwsClients as Qt, slowCcOperationTimeoutMs as R, warnDeprecatedNoPrefixCliFlag as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, __exportAll as Sn, runDockerForeground as St, formatResourceLine as T, getDockerImageBySourceHash as Tt, refStateLookupFromResource as U, uploadCfnTemplate as Ut, IntrinsicFunctionResolver as V, MIGRATE_TMP_PREFIX as Vt, WAFv2WebACLProvider as W, expectedOwnerParam as Wt, describeTypeWithThrottleRetry as X, getAwsClients as Xt, DiffCalculator as Y, AwsClients as Yt, withRetry as Z, resetAwsClients as Zt, createPreDeleteFinalSnapshot as _, SynthesisError as _n, validateAssetBucketName as _t, DeploymentEventsStore as a, LocalMigrateError as an, AssetPublisher as at, unsupportedFinalSnapshotError as b, normalizeAwsError as bn, formatDockerLoginError as bt, replayFailedOperations as c, MissingCdkCliError as cn, buildAssetRedirectMap as ct, IMPLICIT_DELETE_DEPENDENCIES as d, ProvisioningError as dn, rewriteTemplateAssetReferences as dt, CdkdError as en, TemplateParser as et, computeImplicitDeleteEdges as f, ResourceTimeoutError as fn, AssetModeResolver as ft, ccRoutedFinalSnapshotError as g, StateError as gn, parseBootstrapMarker as gt, buildFinalSnapshotIdentifier as h, StackTerminationProtectionError as hn, getBootstrapMarkerKey as ht, DeploymentEventsReader as i, LocalInvokeBuildError as in, shouldRetainResource as it, yellow as j, resolveAutoAssetStorage as jt, green as k, getLegacyStateBucketName as kt, replayRollback as l, NestedStackChildDirectDestroyError as ln, createAssetRedirectResolver as lt, PRE_DELETE_SNAPSHOT_TYPES as m, StackHasActiveImportsError as mn, ensureAssetStorage as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, DependencyError as nn, S3StateBackend as nt, planFailedOps as o, LocalStartServiceError as on, stringifyValue as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, ResourceUpdateNotSupportedError as pn, BOOTSTRAP_MARKER_PREFIX as pt, assertRegionMatch as q, clearBucketRegionCache as qt, DeployEngine as r, DeployCancelledError as rn, rebuildClientForBucketRegion as rt, planRollback as s, LockError as sn, WorkGraph as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, ConfigError as tn, LockManager as tt, withResourceDeadline as u, PartialFailureError as un, loadPublishableAssetManifest as ut, isFinalSnapshotError as v, formatError as vn, validateContainerRepoName as vt, renderStatefulReason as w, AssetManifestLoader as wt, extractDeploymentEventError as x, withErrorHandling as xn, getDockerCmd as xt, refusesFinalSnapshot as y, isCdkdError as yn, buildDockerImage as yt, disableInstanceApiTermination as z, CFN_TEMPLATE_BODY_LIMIT as zt };
+//# sourceMappingURL=deploy-engine-BwPdeLbJ.js.map