@go-to-k/cdkd 0.278.13 → 0.278.15

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-BpbIYUuG.js";
+import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-Bb3aRJ2Y.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-QQOSO3LR.js";
+import { t as ASGProvider } from "./asg-provider-Dwf9PnS6.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -12558,7 +12558,13 @@ var DynamoDBGlobalTableProvider = class {
 				if (gsiHandledByBillingFlip.has(gsi.IndexName)) continue;
 				const billingFlipped = oldBilling !== newBilling;
 				const update = { IndexName: gsi.IndexName };
-				if (gsi.OnDemandThroughput) update.OnDemandThroughput = gsi.OnDemandThroughput;
+				const previousOnDemand = previousSdkByName.get(gsi.IndexName)?.OnDemandThroughput;
+				const onDemand = { ...gsi.OnDemandThroughput };
+				if (!billingFlipped && previousOnDemand) {
+					if (previousOnDemand.MaxReadRequestUnits !== void 0 && onDemand.MaxReadRequestUnits === void 0) onDemand.MaxReadRequestUnits = ON_DEMAND_LIMIT_RESET;
+					if (previousOnDemand.MaxWriteRequestUnits !== void 0 && onDemand.MaxWriteRequestUnits === void 0) onDemand.MaxWriteRequestUnits = ON_DEMAND_LIMIT_RESET;
+				}
+				if (Object.keys(onDemand).length > 0) update.OnDemandThroughput = onDemand;
 				if (!billingFlipped && gsi.ProvisionedThroughput) update.ProvisionedThroughput = gsi.ProvisionedThroughput;
 				const previousSdk = previousSdkByName.get(gsi.IndexName);
 				if (gsi.WarmThroughput !== void 0 && !deepEqual$1(gsi.WarmThroughput, previousSdk?.WarmThroughput)) update.WarmThroughput = gsi.WarmThroughput;
@@ -13377,6 +13383,15 @@ const DEFAULT_CAPACITY_UNITS = 5;
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
+/**
+* The sentinel DynamoDB accepts to CLEAR a per-GSI on-demand request-unit
+* ceiling (issue #1423). Live-verified against real AWS: `UpdateTable` with
+* `GlobalSecondaryIndexUpdates[].Update.OnDemandThroughput = {-1, -1}` is
+* accepted, and the member reads back ABSENT from `DescribeTable` afterwards —
+* so it is genuinely reset to unlimited rather than stored as -1. Any drift /
+* read-back comparison must therefore expect ABSENCE, not this value.
+*/
+const ON_DEMAND_LIMIT_RESET = -1;
 /** Coerce a CFn numeric (CFn is stringly-typed) to a finite number. */
 function toFiniteNumber(value) {
 	if (value === void 0 || value === null || value === "") return void 0;
@@ -41006,6 +41021,15 @@ var CodeBuildProvider = class {
 		if (!this.client) this.client = new CodeBuildClient(this.providerRegion ? { region: this.providerRegion } : {});
 		return this.client;
 	}
+	/**
+	* Return type is DECLARED on purpose. `new CreateProjectCommand(input)` takes
+	* a variable, so TypeScript's excess-property check never runs there and a
+	* misspelled SDK member (`gitSubModulesConfig`) would compile, be dropped by
+	* the serializer, and still pass every unit test — the tests read back the
+	* same key the mapper wrote, so they are tautological on spelling. A fresh
+	* object literal returned against a declared type IS excess-property checked,
+	* which turns each member name into a compile-time fact (issue #1386).
+	*/
 	mapSource(source) {
 		if (!source) return { type: "NO_SOURCE" };
 		let buildspec;
@@ -41013,13 +41037,26 @@ var CodeBuildProvider = class {
 			const bs = source["BuildSpec"];
 			buildspec = typeof bs === "object" ? JSON.stringify(bs) : bs;
 		}
+		const cfnAuth = source["Auth"];
+		const cfnGitSubmodules = source["GitSubmodulesConfig"];
+		const cfnBuildStatus = source["BuildStatusConfig"];
 		return {
 			type: source["Type"] ?? "NO_SOURCE",
 			buildspec,
 			location: source["Location"],
 			gitCloneDepth: source["GitCloneDepth"],
 			insecureSsl: source["InsecureSsl"],
-			reportBuildStatus: source["ReportBuildStatus"]
+			reportBuildStatus: source["ReportBuildStatus"],
+			sourceIdentifier: source["SourceIdentifier"],
+			auth: cfnAuth ? {
+				type: cfnAuth["Type"],
+				resource: cfnAuth["Resource"]
+			} : void 0,
+			gitSubmodulesConfig: cfnGitSubmodules ? { fetchSubmodules: cfnGitSubmodules["FetchSubmodules"] } : void 0,
+			buildStatusConfig: cfnBuildStatus ? {
+				context: cfnBuildStatus["Context"],
+				targetUrl: cfnBuildStatus["TargetUrl"]
+			} : void 0
 		};
 	}
 	mapArtifacts(artifacts) {
@@ -41036,6 +41073,7 @@ var CodeBuildProvider = class {
 			artifactIdentifier: artifacts["ArtifactIdentifier"]
 		};
 	}
+	/** Declared return type for the same excess-property reason as {@link mapSource}. */
 	mapProperties(logicalId, properties) {
 		const name = properties["Name"] ?? logicalId;
 		const source = properties["Source"];
@@ -41048,11 +41086,14 @@ var CodeBuildProvider = class {
 		const artifacts = properties["Artifacts"];
 		const tags = properties["Tags"];
 		const envVars = environment?.["EnvironmentVariables"];
+		const cfnFleet = environment?.["Fleet"];
+		const cfnDockerServer = environment?.["DockerServer"];
 		const cfnCache = properties["Cache"];
 		const cache = cfnCache ? {
 			type: cfnCache["Type"],
 			location: cfnCache["Location"],
-			modes: cfnCache["Modes"]
+			modes: cfnCache["Modes"],
+			cacheNamespace: cfnCache["CacheNamespace"]
 		} : void 0;
 		const cfnVpcConfig = properties["VpcConfig"];
 		const vpcConfig = cfnVpcConfig ? {
@@ -41103,6 +41144,7 @@ var CodeBuildProvider = class {
 				serviceRole: cfnBuildBatchConfig["ServiceRole"],
 				combineArtifacts: cfnBuildBatchConfig["CombineArtifacts"],
 				timeoutInMins: cfnBuildBatchConfig["TimeoutInMins"],
+				batchReportMode: cfnBuildBatchConfig["BatchReportMode"],
 				restrictions: restrictions ? {
 					maximumBuildsAllowed: restrictions["MaximumBuildsAllowed"],
 					computeTypesAllowed: restrictions["ComputeTypesAllowed"]
@@ -41124,6 +41166,11 @@ var CodeBuildProvider = class {
 				privilegedMode: environment?.["PrivilegedMode"],
 				certificate: environment?.["Certificate"],
 				imagePullCredentialsType: environment?.["ImagePullCredentialsType"],
+				fleet: cfnFleet ? { fleetArn: cfnFleet["FleetArn"] } : void 0,
+				dockerServer: cfnDockerServer ? {
+					computeType: cfnDockerServer["ComputeType"],
+					securityGroupIds: cfnDockerServer["SecurityGroupIds"]
+				} : void 0,
 				registryCredential: environment?.["RegistryCredential"] ? {
 					credential: environment["RegistryCredential"]["Credential"],
 					credentialProvider: environment["RegistryCredential"]["CredentialProvider"]
@@ -41270,6 +41317,14 @@ var CodeBuildProvider = class {
 			if (project.source?.gitCloneDepth !== void 0) src["GitCloneDepth"] = project.source.gitCloneDepth;
 			if (project.source?.insecureSsl !== void 0) src["InsecureSsl"] = project.source.insecureSsl;
 			if (project.source?.reportBuildStatus !== void 0) src["ReportBuildStatus"] = project.source.reportBuildStatus;
+			if (project.source?.sourceIdentifier !== void 0) src["SourceIdentifier"] = project.source.sourceIdentifier;
+			if (project.source?.gitSubmodulesConfig !== void 0) src["GitSubmodulesConfig"] = { FetchSubmodules: project.source.gitSubmodulesConfig.fetchSubmodules };
+			if (project.source?.buildStatusConfig !== void 0) {
+				const bsc = {};
+				if (project.source.buildStatusConfig.context !== void 0) bsc["Context"] = project.source.buildStatusConfig.context;
+				if (project.source.buildStatusConfig.targetUrl !== void 0) bsc["TargetUrl"] = project.source.buildStatusConfig.targetUrl;
+				src["BuildStatusConfig"] = bsc;
+			}
 			result["Source"] = src;
 		}
 		{
@@ -41293,6 +41348,17 @@ var CodeBuildProvider = class {
 			if (project.environment?.privilegedMode !== void 0) env["PrivilegedMode"] = project.environment.privilegedMode;
 			if (project.environment?.imagePullCredentialsType !== void 0) env["ImagePullCredentialsType"] = project.environment.imagePullCredentialsType;
 			if (project.environment?.certificate !== void 0) env["Certificate"] = project.environment.certificate;
+			if (project.environment?.fleet !== void 0) {
+				const fleet = {};
+				if (project.environment.fleet.fleetArn !== void 0) fleet["FleetArn"] = project.environment.fleet.fleetArn;
+				env["Fleet"] = fleet;
+			}
+			if (project.environment?.dockerServer !== void 0) {
+				const ds = {};
+				if (project.environment.dockerServer.computeType !== void 0) ds["ComputeType"] = project.environment.dockerServer.computeType;
+				if (project.environment.dockerServer.securityGroupIds !== void 0) ds["SecurityGroupIds"] = project.environment.dockerServer.securityGroupIds;
+				env["DockerServer"] = ds;
+			}
 			env["EnvironmentVariables"] = (project.environment?.environmentVariables ?? []).map((ev) => {
 				const out = {};
 				if (ev.name !== void 0) out["Name"] = ev.name;
@@ -41325,6 +41391,7 @@ var CodeBuildProvider = class {
 			const cache = { Type: project.cache?.type ?? "NO_CACHE" };
 			if (project.cache?.location !== void 0) cache["Location"] = project.cache.location;
 			if (project.cache?.modes !== void 0) cache["Modes"] = project.cache.modes;
+			if (project.cache?.cacheNamespace !== void 0) cache["CacheNamespace"] = project.cache.cacheNamespace;
 			result["Cache"] = cache;
 		}
 		result["SecondarySources"] = (project.secondarySources ?? []).map((s) => {
@@ -41336,6 +41403,13 @@ var CodeBuildProvider = class {
 			if (s.insecureSsl !== void 0) out["InsecureSsl"] = s.insecureSsl;
 			if (s.reportBuildStatus !== void 0) out["ReportBuildStatus"] = s.reportBuildStatus;
 			if (s.sourceIdentifier !== void 0) out["SourceIdentifier"] = s.sourceIdentifier;
+			if (s.gitSubmodulesConfig !== void 0) out["GitSubmodulesConfig"] = { FetchSubmodules: s.gitSubmodulesConfig.fetchSubmodules };
+			if (s.buildStatusConfig !== void 0) {
+				const bsc = {};
+				if (s.buildStatusConfig.context !== void 0) bsc["Context"] = s.buildStatusConfig.context;
+				if (s.buildStatusConfig.targetUrl !== void 0) bsc["TargetUrl"] = s.buildStatusConfig.targetUrl;
+				out["BuildStatusConfig"] = bsc;
+			}
 			return out;
 		});
 		result["SecondaryArtifacts"] = (project.secondaryArtifacts ?? []).map((a) => {
@@ -41384,6 +41458,9 @@ var CodeBuildProvider = class {
 		result["Tags"] = normalizeAwsTagsToCfn(project.tags);
 		return result;
 	}
+	getDriftUnknownPaths() {
+		return ["Source.Auth"];
+	}
 	async import(input) {
 		const explicit = resolveExplicitPhysicalId(input, "Name");
 		if (explicit) try {
@@ -64906,7 +64983,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.13");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.15");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;