@go-to-k/cdkd 0.278.21 → 0.278.23

package/dist/{deploy-engine-dvS1K_ET.js → deploy-engine-D7KckQ5N.js}

@@ -12429,7 +12429,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-BN1QMZlz.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-ir7DmsIU.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -18368,6 +18368,39 @@ async function replayRollback(operations, stateResources, stackName, ctx, option
 	});
 	return result;
 }
+/**
+* `provider.update()` for a rollback arm, retried unless the provider opts out.
+*
+* Both rollback UPDATE arms need the same three things, and getting any of
+* them wrong is only visible on a recovery path (issue #1461):
+*
+*  - **Retry.** A provider `update()` can issue reads as well as writes (Glue
+*    does a pre-update `GetTable`), and the callers' best-effort catch counts
+*    a transient failure as a real one and moves on, leaving state unreverted.
+*    `deploy-engine.ts` and `drift.ts` have always wrapped their calls; these
+*    arms did not.
+*  - **`disableOuterRetry`.** `CustomResourceProvider` and
+*    `NestedStackProvider` set it AND implement `update()`. Re-invoking a
+*    Custom Resource derives a FRESH RequestId + pre-signed response URL, so
+*    the first attempt's response lands at an S3 key nobody polls — the exact
+*    hang the flag exists to prevent. Those providers retry internally.
+*  - **Interrupt.** `replayRollback` polls interrupts only BETWEEN ops, so an
+*    un-threaded `isInterrupted` leaves Ctrl-C dead for the length of the
+*    backoff schedule (~47s) per op.
+*/
+async function updateWithRollbackRetry(provider, args, logicalId, logger, isInterrupted) {
+	if (provider.disableOuterRetry) {
+		await provider.update(...args);
+		return;
+	}
+	await withRetry(() => provider.update(...args), logicalId, {
+		logger,
+		...isInterrupted && {
+			isInterrupted,
+			onInterrupted: () => /* @__PURE__ */ new Error("Rollback interrupted while retrying a resource update")
+		}
+	});
+}
 async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds, result, afterOp, isInterrupted) {
 	const action = classifyRollbackOp(op, stateResources, orphanLogicalIds);
 	const { logger } = ctx;
@@ -18583,6 +18616,7 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 					result.warnings++;
 					return;
 				}
+				const previousState = op.previousState;
 				const current = stateResources[op.logicalId];
 				if (!current) {
 					logger.warn(`  Rollback: Cannot restore ${op.logicalId} — resource not found in current state`);
@@ -18594,8 +18628,14 @@ async function replaySingle(op, stateResources, stackName, ctx, orphanLogicalIds
 					resourceType: op.resourceType,
 					provisionedBy: op.provisionedBy
 				});
-				await provider.update(op.logicalId, current.physicalId, op.resourceType, op.previousState.properties, current.properties);
-				stateResources[op.logicalId] = op.previousState;
+				await updateWithRollbackRetry(provider, [
+					op.logicalId,
+					current.physicalId,
+					op.resourceType,
+					previousState.properties,
+					current.properties
+				], op.logicalId, logger, isInterrupted);
+				stateResources[op.logicalId] = previousState;
 				logger.info(`  Rollback: ${op.logicalId} restored successfully`);
 				await afterOp?.(op.logicalId);
 				ctx.recordEvent?.({
@@ -18724,7 +18764,13 @@ async function replayFailedOperations(failedOps, stateResources, stackName, ctx,
 						resourceType: op.resourceType,
 						provisionedBy: op.provisionedBy ?? current.provisionedBy
 					});
-					await provider.update(op.logicalId, current.physicalId, op.resourceType, prev.properties, op.attemptedProperties ?? current.properties);
+					await updateWithRollbackRetry(provider, [
+						op.logicalId,
+						current.physicalId,
+						op.resourceType,
+						prev.properties,
+						op.attemptedProperties ?? current.properties
+					], op.logicalId, logger, options.isInterrupted);
 					stateResources[op.logicalId] = prev;
 					logger.info(`  Rollback: ${op.logicalId} reverted successfully`);
 					await options.afterOp?.(op.logicalId);
@@ -18851,7 +18897,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.278.21";
+	return "0.278.23";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -20963,4 +21009,4 @@ var DeployEngine = class {
 
 //#endregion
 export { isThrottlingError as $, setAwsClients as $t, red as A, getLegacyStateBucketName as At, isTerminationProtectionPropagationError as B, CFN_TEMPLATE_BODY_LIMIT as Bt, isStatefulRecreateTargetSync as C, __exportAll as Cn, runDockerForeground as Ct, cyan as D, Synthesizer as Dt, bold as E, getDockerImageBySourceHash as Et, ProviderRegistry as F, resolveStateBucketWithDefault as Ft, normalizeAwsTagsToCfn as G, expectedOwnerParam as Gt, cfnRefValueFromPhysicalId as H, MIGRATE_TMP_PREFIX as Ht, findActionableSilentDrops as I, resolveStateBucketWithDefaultAndSource as It, applyRoleArnIfSet as J, clearBucketRegionCache as Jt, resolveExplicitPhysicalId as K, AssemblyReader as Kt, CloudControlProvider as L, resolveUseCdkBootstrapAssets as Lt, IAMRoleProvider as M, resolveAutoAssetStorage as Mt, collectInlinePolicyNamesManagedBySiblings as N, resolveCaptureObservedState as Nt, gray as O, synthesisStatusMessage as Ot, clearOnUpdateRemoval as P, resolveSkipPrefix as Pt, isRetryableTransientError as Q, resetAwsClients as Qt, slowCcOperationTimeoutMs as R, stateBucketExistenceConfirmed as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, withErrorHandling as Sn, getDockerCmd as St, formatResourceLine as T, AssetManifestLoader as Tt, refStateLookupFromResource as U, findLargeInlineResources as Ut, IntrinsicFunctionResolver as V, CFN_TEMPLATE_URL_LIMIT as Vt, WAFv2WebACLProvider as W, uploadCfnTemplate as Wt, describeTypeWithThrottleRetry as X, AwsClients as Xt, DiffCalculator as Y, resolveBucketRegion as Yt, withRetry as Z, getAwsClients as Zt, createPreDeleteFinalSnapshot as _, StateError as _n, parseBootstrapMarker as _t, DeploymentEventsStore as a, LocalInvokeBuildError as an, shouldRetainResource as at, unsupportedFinalSnapshotError as b, isCdkdError as bn, buildDockerImage as bt, replayFailedOperations as c, LockError as cn, WorkGraph as ct, IMPLICIT_DELETE_DEPENDENCIES as d, PartialFailureError as dn, loadPublishableAssetManifest as dt, AssetError as en, DagBuilder as et, computeImplicitDeleteEdges as f, ProvisioningError as fn, rewriteTemplateAssetReferences as ft, ccRoutedFinalSnapshotError as g, StackTerminationProtectionError as gn, getBootstrapMarkerKey as gt, buildFinalSnapshotIdentifier as h, StackHasActiveImportsError as hn, ensureAssetStorage as ht, DeploymentEventsReader as i, DeployCancelledError as in, rebuildClientForBucketRegion as it, yellow as j, resolveApp as jt, green as k, getDefaultStateBucketName as kt, replayRollback as l, MissingCdkCliError as ln, buildAssetRedirectMap as lt, PRE_DELETE_SNAPSHOT_TYPES as m, ResourceUpdateNotSupportedError as mn, BOOTSTRAP_MARKER_PREFIX as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, ConfigError as nn, LockManager as nt, planFailedOps as o, LocalMigrateError as on, AssetPublisher as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, ResourceTimeoutError as pn, AssetModeResolver as pt, assertRegionMatch as q, processStackMessages as qt, DeployEngine as r, DependencyError as rn, S3StateBackend as rt, planRollback as s, LocalStartServiceError as sn, stringifyValue as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, CdkdError as tn, TemplateParser as tt, withResourceDeadline as u, NestedStackChildDirectDestroyError as un, createAssetRedirectResolver as ut, isFinalSnapshotError as v, SynthesisError as vn, validateAssetBucketName as vt, renderStatefulReason as w, runDockerStreaming as wt, extractDeploymentEventError as x, normalizeAwsError as xn, formatDockerLoginError as xt, refusesFinalSnapshot as y, formatError as yn, validateContainerRepoName as yt, disableInstanceApiTermination as z, warnDeprecatedNoPrefixCliFlag as zt };
-//# sourceMappingURL=deploy-engine-dvS1K_ET.js.map
+//# sourceMappingURL=deploy-engine-D7KckQ5N.js.map