@go-to-k/cdkd 0.278.24 → 0.278.26

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as isThrottlingError, $t as setAwsClients, A as red, At as getLegacyStateBucketName, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_BODY_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerForeground, D as cyan, Dt as Synthesizer, E as bold, Et as getDockerImageBySourceHash, F as ProviderRegistry, Ft as resolveStateBucketWithDefault, G as normalizeAwsTagsToCfn, Gt as expectedOwnerParam, H as cfnRefValueFromPhysicalId, Ht as MIGRATE_TMP_PREFIX, I as findActionableSilentDrops, It as resolveStateBucketWithDefaultAndSource, J as applyRoleArnIfSet, K as resolveExplicitPhysicalId, Kt as AssemblyReader, L as CloudControlProvider, Lt as resolveUseCdkBootstrapAssets, M as IAMRoleProvider, Mt as resolveAutoAssetStorage, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveCaptureObservedState, O as gray, Ot as synthesisStatusMessage, P as clearOnUpdateRemoval, Pt as resolveSkipPrefix, Q as isRetryableTransientError, Qt as resetAwsClients, R as slowCcOperationTimeoutMs, Rt as stateBucketExistenceConfirmed, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, Sn as withErrorHandling, St as getDockerCmd, T as formatResourceLine, Tt as AssetManifestLoader, U as refStateLookupFromResource, Ut as findLargeInlineResources, V as IntrinsicFunctionResolver, Vt as CFN_TEMPLATE_URL_LIMIT, W as WAFv2WebACLProvider, Wt as uploadCfnTemplate, X as describeTypeWithThrottleRetry, Xt as AwsClients, Y as DiffCalculator, Yt as resolveBucketRegion, Z as withRetry, Zt as getAwsClients, _ as createPreDeleteFinalSnapshot, _t as parseBootstrapMarker, a as DeploymentEventsStore, an as LocalInvokeBuildError$1, at as shouldRetainResource, b as unsupportedFinalSnapshotError, bt as buildDockerImage, c as replayFailedOperations, ct as WorkGraph, d as IMPLICIT_DELETE_DEPENDENCIES, dn as PartialFailureError, dt as loadPublishableAssetManifest, et as DagBuilder, f as computeImplicitDeleteEdges, fn as ProvisioningError, ft as rewriteTemplateAssetReferences, g as ccRoutedFinalSnapshotError, gn as StackTerminationProtectionError, gt as getBootstrapMarkerKey, h as buildFinalSnapshotIdentifier, hn as StackHasActiveImportsError, ht as ensureAssetStorage, i as DeploymentEventsReader, in as DeployCancelledError, it as rebuildClientForBucketRegion, j as yellow, jt as resolveApp, k as green, kt as getDefaultStateBucketName, l as replayRollback, ln as MissingCdkCliError, lt as buildAssetRedirectMap, m as PRE_DELETE_SNAPSHOT_TYPES, mn as ResourceUpdateNotSupportedError, mt as BOOTSTRAP_MARKER_PREFIX, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as LockManager, o as planFailedOps, on as LocalMigrateError, ot as AssetPublisher, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceTimeoutError, pt as AssetModeResolver, q as assertRegionMatch, qt as processStackMessages, r as DeployEngine, rt as S3StateBackend, s as planRollback, sn as LocalStartServiceError, st as stringifyValue, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as CdkdError, tt as TemplateParser, u as withResourceDeadline, un as NestedStackChildDirectDestroyError, ut as createAssetRedirectResolver, v as isFinalSnapshotError, vt as validateAssetBucketName, w as renderStatefulReason, wt as runDockerStreaming, x as extractDeploymentEventError, xn as normalizeAwsError, xt as formatDockerLoginError, y as refusesFinalSnapshot, yt as validateContainerRepoName, z as disableInstanceApiTermination, zt as warnDeprecatedNoPrefixCliFlag } from "./deploy-engine-DlLaOrHh.js";
+import { $ as isThrottlingError, $t as setAwsClients, A as red, At as getLegacyStateBucketName, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_BODY_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerForeground, D as cyan, Dt as Synthesizer, E as bold, Et as getDockerImageBySourceHash, F as ProviderRegistry, Ft as resolveStateBucketWithDefault, G as normalizeAwsTagsToCfn, Gt as expectedOwnerParam, H as cfnRefValueFromPhysicalId, Ht as MIGRATE_TMP_PREFIX, I as findActionableSilentDrops, It as resolveStateBucketWithDefaultAndSource, J as applyRoleArnIfSet, K as resolveExplicitPhysicalId, Kt as AssemblyReader, L as CloudControlProvider, Lt as resolveUseCdkBootstrapAssets, M as IAMRoleProvider, Mt as resolveAutoAssetStorage, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveCaptureObservedState, O as gray, Ot as synthesisStatusMessage, P as clearOnUpdateRemoval, Pt as resolveSkipPrefix, Q as isRetryableTransientError, Qt as resetAwsClients, R as slowCcOperationTimeoutMs, Rt as stateBucketExistenceConfirmed, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, Sn as withErrorHandling, St as getDockerCmd, T as formatResourceLine, Tt as AssetManifestLoader, U as refStateLookupFromResource, Ut as findLargeInlineResources, V as IntrinsicFunctionResolver, Vt as CFN_TEMPLATE_URL_LIMIT, W as WAFv2WebACLProvider, Wt as uploadCfnTemplate, X as describeTypeWithThrottleRetry, Xt as AwsClients, Y as DiffCalculator, Yt as resolveBucketRegion, Z as withRetry, Zt as getAwsClients, _ as createPreDeleteFinalSnapshot, _t as parseBootstrapMarker, a as DeploymentEventsStore, an as LocalInvokeBuildError$1, at as shouldRetainResource, b as unsupportedFinalSnapshotError, bt as buildDockerImage, c as replayFailedOperations, ct as WorkGraph, d as IMPLICIT_DELETE_DEPENDENCIES, dn as PartialFailureError, dt as loadPublishableAssetManifest, et as DagBuilder, f as computeImplicitDeleteEdges, fn as ProvisioningError, ft as rewriteTemplateAssetReferences, g as ccRoutedFinalSnapshotError, gn as StackTerminationProtectionError, gt as getBootstrapMarkerKey, h as buildFinalSnapshotIdentifier, hn as StackHasActiveImportsError, ht as ensureAssetStorage, i as DeploymentEventsReader, in as DeployCancelledError, it as rebuildClientForBucketRegion, j as yellow, jt as resolveApp, k as green, kt as getDefaultStateBucketName, l as replayRollback, ln as MissingCdkCliError, lt as buildAssetRedirectMap, m as PRE_DELETE_SNAPSHOT_TYPES, mn as ResourceUpdateNotSupportedError, mt as BOOTSTRAP_MARKER_PREFIX, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as LockManager, o as planFailedOps, on as LocalMigrateError, ot as AssetPublisher, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceTimeoutError, pt as AssetModeResolver, q as assertRegionMatch, qt as processStackMessages, r as DeployEngine, rt as S3StateBackend, s as planRollback, sn as LocalStartServiceError, st as stringifyValue, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as CdkdError, tt as TemplateParser, u as withResourceDeadline, un as NestedStackChildDirectDestroyError, ut as createAssetRedirectResolver, v as isFinalSnapshotError, vt as validateAssetBucketName, w as renderStatefulReason, wt as runDockerStreaming, x as extractDeploymentEventError, xn as normalizeAwsError, xt as formatDockerLoginError, y as refusesFinalSnapshot, yt as validateContainerRepoName, z as disableInstanceApiTermination, zt as warnDeprecatedNoPrefixCliFlag } from "./deploy-engine-BsHkBRtK.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-cNZXiMc7.js";
+import { t as ASGProvider } from "./asg-provider-DLScqiT2.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -29490,6 +29490,17 @@ var NeptuneProvider = class {
 //#endregion
 //#region src/provisioning/providers/route53-provider.ts
 /**
+* True when Route 53 refused a zone mutation because the zone's
+* AcceleratedRecoveryStatus is mid-transition — the
+* "HostedZone <id> is marked disabled for mutation" rejection (issue #1467).
+* Exported for the delete-path retry in this provider and for tests; the
+* same substring is also in `RETRYABLE_ERROR_MESSAGE_PATTERNS` so the
+* generic retry net covers the create/update paths.
+*/
+function isZoneDisabledForMutationError(error) {
+	return error instanceof Error && error.message.includes("is marked disabled for mutation");
+}
+/**
 * AWS Route 53 Provider
 *
 * Implements resource provisioning for Route 53 resources:
@@ -29831,13 +29842,21 @@ var Route53Provider = class {
 		if (!properties) throw new ProvisioningError(`Properties required to delete record set ${logicalId}`, resourceType, logicalId, physicalId);
 		try {
 			const resourceRecordSet = this.buildResourceRecordSet(properties);
-			await this.getClient().send(new ChangeResourceRecordSetsCommand({
+			const sendDelete = () => this.getClient().send(new ChangeResourceRecordSetsCommand({
 				HostedZoneId: hostedZoneId,
 				ChangeBatch: { Changes: [{
 					Action: "DELETE",
 					ResourceRecordSet: resourceRecordSet
 				}] }
 			}));
+			try {
+				await sendDelete();
+			} catch (error) {
+				if (!isZoneDisabledForMutationError(error)) throw error;
+				this.logger.info(`Hosted zone ${hostedZoneId} is mid AcceleratedRecovery transition (marked disabled for mutation); waiting for it to settle before retrying delete of record set ${logicalId}`);
+				await this.waitForAcceleratedRecoveryMutable(hostedZoneId, logicalId, resourceType);
+				await sendDelete();
+			}
 			this.logger.debug(`Successfully deleted record set ${logicalId}`);
 		} catch (error) {
 			if (error instanceof Error && (error.name === "InvalidChangeBatch" || error.message.includes("it was not found"))) {
@@ -29849,11 +29868,56 @@ var Route53Provider = class {
 				this.logger.debug(`Hosted zone for record set ${physicalId} does not exist, skipping deletion`);
 				return;
 			}
+			if (error instanceof ProvisioningError) throw error;
 			const cause = error instanceof Error ? error : void 0;
 			throw new ProvisioningError(`Failed to delete record set ${logicalId}: ${error instanceof Error ? error.message : String(error)}`, resourceType, logicalId, physicalId, cause);
 		}
 	}
 	/**
+	* Wait until the hosted zone's AcceleratedRecoveryStatus reaches a state
+	* that ALLOWS mutations again (issue #1467).
+	*
+	* While the feature is transitioning (ENABLING / DISABLING /
+	* *_HOSTED_ZONE_LOCKED) Route 53 marks the zone "disabled for mutation" and
+	* refuses `ChangeResourceRecordSets`. Unlike the zone-delete guard
+	* (`ensureAcceleratedRecoveryDisabledForDelete`) this helper does NOT
+	* disable the feature — a record-set mutation is legal on an ENABLED zone,
+	* and flipping a zone-level setting from a record delete would be a side
+	* effect the template never asked for. It only polls until the status is
+	* terminal-stable (ENABLED / DISABLED / zone gone), throwing on the
+	* `*_FAILED` operator-recovery states and on timeout. Same env-overridable
+	* poll knobs as the zone guard.
+	*/
+	async waitForAcceleratedRecoveryMutable(zoneId, logicalId, resourceType) {
+		const client = this.getClient();
+		const parsedInterval = Number.parseInt(process.env["CDKD_R53_ACCEL_RECOVERY_POLL_INTERVAL_MS"] ?? "15000", 10);
+		const pollIntervalMs = Number.isFinite(parsedInterval) && parsedInterval > 0 ? parsedInterval : 15e3;
+		const parsedTimeout = Number.parseInt(process.env["CDKD_R53_ACCEL_RECOVERY_POLL_TIMEOUT_MS"] ?? "600000", 10);
+		const timeoutMs = Number.isFinite(parsedTimeout) && parsedTimeout > 0 ? parsedTimeout : 6e5;
+		const deadline = Date.now() + timeoutMs;
+		const TERMINAL_FAILED = /* @__PURE__ */ new Set(["ENABLE_FAILED", "DISABLE_FAILED"]);
+		const MUTABLE = /* @__PURE__ */ new Set(["ENABLED", "DISABLED"]);
+		while (Date.now() < deadline) {
+			let status;
+			try {
+				status = (await client.send(new GetHostedZoneCommand({ Id: zoneId }))).HostedZone?.Features?.AcceleratedRecoveryStatus;
+			} catch (err) {
+				if (err instanceof Error && err.name === "NoSuchHostedZone") return;
+				throw err;
+			}
+			if (status === void 0 || MUTABLE.has(status)) return;
+			if (TERMINAL_FAILED.has(status)) throw new ProvisioningError(`Cannot mutate hosted zone ${zoneId}: AcceleratedRecoveryStatus is '${status}' — operator must resolve before the record set ${logicalId} can be deleted`, resourceType, logicalId, zoneId);
+			this.logger.debug(`Polling AcceleratedRecoveryStatus for ${zoneId}: ${status} (waiting for a mutable state, will re-poll in ~${pollIntervalMs}ms)`);
+			const sliceEnd = Math.min(Date.now() + pollIntervalMs, deadline);
+			while (Date.now() < sliceEnd) {
+				const tick = Math.min(1e3, sliceEnd - Date.now());
+				if (tick <= 0) break;
+				await new Promise((resolve) => setTimeout(resolve, tick));
+			}
+		}
+		throw new ProvisioningError(`Timed out after ${timeoutMs}ms waiting for AcceleratedRecoveryStatus to reach a mutable state on hosted zone ${zoneId} (record set ${logicalId}); re-run the destroy once the transition settles`, resourceType, logicalId, zoneId);
+	}
+	/**
 	* Build a ResourceRecordSet object from CDK properties.
 	*
 	* Handles conversion of CDK-style ResourceRecords (array of strings)
@@ -48710,6 +48774,82 @@ async function runAccept(reports, stateBackend, stateConfig, awsClients, options
 * parent path — so `path.split('.', 1)` is always safe to extract the
 * top-level key.
 */
+/**
+* The AWS-authored property paths a `--revert` is about to DROP, for a
+* resource whose state predates observed-capture (issue #1478).
+*
+* The mechanism, and why this is not a Glue fix: `runRevert` picks the revert
+* baseline as `observedProperties ?? properties`. When `observedProperties` is
+* absent, the desired side is the raw TEMPLATE while the previous side is the
+* AWS-CURRENT snapshot — so {@link buildRevertNewProperties}, which overwrites
+* each drifted top-level key with the desired sub-shape wholesale, replaces
+* every AWS-authored key inside that subtree with the template's version. For
+* a Glue Iceberg table that silently wipes `table_type` /
+* `metadata_location`, the same outcome as issue #1461 reached by a different
+* trigger. The exposure is general: ANY resource where AWS writes into a bag
+* the template does not fully declare, on state written before
+* observed-capture.
+*
+* The user DID ask to push state over AWS, so this is not silent-wrong the way
+* #1461 was — but it is almost certainly not what they meant, and nothing told
+* them. So the chosen semantic is **warn and proceed**: it is the cheapest
+* honest step, preserves today's behavior, and does not foreclose the stricter
+* options (refuse outright, or treat "no observedProperties" as "previous is
+* unknown" so the merge preserves).
+*
+* Scoped deliberately:
+*
+* - **Only drifted top-level keys.** Non-drifted keys keep their AWS-current
+*   value in `buildRevertNewProperties`, so nothing under them is dropped.
+* - **Only when `observedProperties` is absent.** With it present the desired
+*   side is the deploy-time AWS snapshot, which already carries AWS-authored
+*   fields — dropping one there is a legitimate revert of a real console
+*   change, and warning about it would be noise on every run.
+* - **Only keys that vanish.** A key present on both sides with a different
+*   VALUE is the drift the user asked to revert, not a silent loss.
+*
+* @returns dotted paths, sorted, e.g. `['Parameters.metadata_location']`.
+*/
+function findRevertDroppedAwsKeys(drifts, desiredProperties, awsProperties) {
+	const dropped = /* @__PURE__ */ new Set();
+	const driftedTopLevelKeys = /* @__PURE__ */ new Set();
+	for (const d of drifts) {
+		const topLevelKey = d.path.split(".", 1)[0];
+		if (topLevelKey) driftedTopLevelKeys.add(topLevelKey);
+	}
+	for (const key of driftedTopLevelKeys) {
+		if (!(key in desiredProperties)) continue;
+		collectMissingPaths(awsProperties[key], desiredProperties[key], key, dropped);
+	}
+	return [...dropped].sort();
+}
+/**
+* Walk the AWS-side value against the desired-side value, recording every path
+* present on the AWS side and absent on the desired side.
+*
+* Only plain objects are descended into. An ARRAY is compared wholesale — the
+* drift comparator itself treats arrays as single values (its paths never
+* carry an index), so an element-wise walk here would report positions the
+* rest of the revert path cannot reason about.
+*/
+function collectMissingPaths(awsValue, desiredValue, path, out) {
+	if (!isPlainRecord(awsValue)) return;
+	if (!isPlainRecord(desiredValue)) {
+		if (desiredValue === void 0) out.add(path);
+		return;
+	}
+	for (const [key, value] of Object.entries(awsValue)) {
+		const childPath = `${path}.${key}`;
+		if (!(key in desiredValue)) {
+			out.add(childPath);
+			continue;
+		}
+		collectMissingPaths(value, desiredValue[key], childPath, out);
+	}
+}
+function isPlainRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 function buildRevertNewProperties(drifts, desiredProperties, awsProperties) {
 	const result = { ...awsProperties };
 	for (const d of drifts) {
@@ -48837,6 +48977,16 @@ function printRevertPlan(reports) {
 			const word = o.changes.length === 1 ? "property path" : "property paths";
 			process.stdout.write(`  → provider.update on ${o.logicalId} (${o.resourceType}): revert ${o.changes.length} ${word}\n`);
 			for (const change of o.changes) process.stdout.write(`    ${change.path}: ${formatScalar(change.awsValue)} -> ${formatScalar(change.stateValue)}\n`);
+			const stateResource = report.state.resources[o.logicalId];
+			if (stateResource && stateResource.observedProperties === void 0) {
+				const dropped = findRevertDroppedAwsKeys(o.changes, stateResource.properties ?? {}, o.awsProperties);
+				if (dropped.length > 0) {
+					const word = dropped.length === 1 ? "value" : "values";
+					process.stdout.write(`    ! this resource has no observed-capture baseline, so the revert pushes the raw TEMPLATE and will DROP ${dropped.length} AWS-authored ${word}:\n`);
+					for (const path of dropped) process.stdout.write(`        ${path}\n`);
+					process.stdout.write("      Re-deploy the stack first to populate observedProperties if you want these preserved.\n");
+				}
+			}
 		}
 	}
 }
@@ -65786,7 +65936,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.24");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.26");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;