@go-to-k/cdkd 0.278.49 → 0.278.50

package/dist/{deploy-engine-BgLg1tet.js → deploy-engine-D2mbS9va.js}

@@ -9249,13 +9249,31 @@ async function applyRoleArnIfSet(opts) {
 * @param containerPath CFn path of the CONTAINER, used to build both error
 *   messages, e.g. `AWS::S3::Bucket VersioningConfiguration` (the field is
 *   reported as `<containerPath>.<key>`).
+* @param options Per-site relaxations — see {@link ConfigStringOptions}. They
+*   apply to BOTH refusals this helper can raise: a malformed CONTAINER under
+*   `onUnusable` warns and behaves as `{}` (field absent, so the fallback is
+*   returned — the same thing an empty block already means), and the FIELD
+*   half threads the options into {@link requireConfigString} unchanged. The
+*   downgrade exists for the same state-replay reason as
+*   {@link replayWarn}: a nested block recorded malformed by an older binary
+*   (`StreamSpecification: ''`) would otherwise make a reverse-replacement
+*   create un-rollbackable (issue #1544).
 * @throws Error when the container is present but not a plain object, or the
-*   key is present but not a non-blank string.
+*   key is present but not a non-blank string, unless `onUnusable` is
+*   supplied.
 */
-function readConfigString(container, key, fallback, containerPath) {
+function readConfigString(container, key, fallback, containerPath, options) {
 	if (container === void 0 || container === null) return fallback;
-	if (!isPlainObject$1(container)) throw new Error(`${containerPath} must be an object (got ${describe(container)}) — check for an unresolved intrinsic or a mis-nested template value`);
-	return requireConfigString(container[key], fallback, `${containerPath}.${key}`);
+	if (!isPlainObject$1(container)) {
+		const detail = `(got ${describe(container)}) — check for an unresolved intrinsic or a mis-nested template value`;
+		if (options?.onUnusable) {
+			const named = fallback === "" ? "" : ` (${fallback})`;
+			options.onUnusable(`${containerPath} must be an object ${detail}. Treating the block as empty, so ${containerPath}.${key} takes its default${named} here; the same value is REFUSED on a template-path create`);
+			return fallback;
+		}
+		throw new Error(`${containerPath} must be an object ${detail}`);
+	}
+	return requireConfigString(container[key], fallback, `${containerPath}.${key}`, options);
 }
 /**
 * The value-level half of {@link readConfigString}, for a value the caller has
@@ -9856,10 +9874,10 @@ var WAFv2WebACLProvider = class {
 	/**
 	* Create a WAFv2 WebACL
 	*/
-	async create(logicalId, resourceType, properties) {
+	async create(logicalId, resourceType, properties, context) {
 		this.logger.debug(`Creating WAFv2 WebACL ${logicalId}`);
 		const name = properties["Name"] || generateResourceName(logicalId, { maxLength: 128 });
-		const scope = requireConfigString(properties["Scope"], "REGIONAL", "AWS::WAFv2::WebACL Scope");
+		const scope = requireConfigString(properties["Scope"], "REGIONAL", "AWS::WAFv2::WebACL Scope", replayWarn(this.logger, context));
 		this.warnOnSdkUnsupportedRuleKeys(logicalId, properties["Rules"]);
 		try {
 			const tags = [];
@@ -12715,7 +12733,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-t9dJL0zs.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-C217C6UE.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -19212,7 +19230,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.278.49";
+	return "0.278.50";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -21324,4 +21342,4 @@ var DeployEngine = class {
 
 //#endregion
 export { DiffCalculator as $, resolveBucketRegion as $t, red as A, getDockerImageBySourceHash as At, isTerminationProtectionPropagationError as B, resolveStateBucketWithDefaultAndSource as Bt, isStatefulRecreateTargetSync as C, formatError as Cn, validateContainerRepoName as Ct, cyan as D, __exportAll as Dn, runDockerForeground as Dt, bold as E, withErrorHandling as En, getDockerCmd as Et, ProviderRegistry as F, resolveApp as Ft, normalizeAwsTagsToCfn as G, CFN_TEMPLATE_URL_LIMIT as Gt, cfnRefValueFromPhysicalId as H, stateBucketExistenceConfirmed as Ht, findActionableSilentDrops as I, resolveAutoAssetStorage as It, readConfigString as J, uploadCfnTemplate as Jt, resolveExplicitPhysicalId as K, MIGRATE_TMP_PREFIX as Kt, CloudControlProvider as L, resolveCaptureObservedState as Lt, IAMRoleProvider as M, synthesisStatusMessage as Mt, collectInlinePolicyNamesManagedBySiblings as N, getDefaultStateBucketName as Nt, gray as O, runDockerStreaming as Ot, clearOnUpdateRemoval as P, getLegacyStateBucketName as Pt, applyRoleArnIfSet as Q, clearBucketRegionCache as Qt, slowCcOperationTimeoutMs as R, resolveSkipPrefix as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, SynthesisError as Sn, validateAssetBucketName as St, formatResourceLine as T, normalizeAwsError as Tn, formatDockerLoginError as Tt, refStateLookupFromResource as U, warnDeprecatedNoPrefixCliFlag as Ut, IntrinsicFunctionResolver as V, resolveUseCdkBootstrapAssets as Vt, WAFv2WebACLProvider as W, CFN_TEMPLATE_BODY_LIMIT as Wt, requireConfigArray as X, AssemblyReader as Xt, replayWarn as Y, expectedOwnerParam as Yt, requireConfigString as Z, processStackMessages as Zt, createPreDeleteFinalSnapshot as _, ResourceTimeoutError as _n, AssetModeResolver as _t, DeploymentEventsStore as a, CdkdError as an, TemplateParser as at, unsupportedFinalSnapshotError as b, StackTerminationProtectionError as bn, getBootstrapMarkerKey as bt, replayFailedOperations as c, DeployCancelledError as cn, rebuildClientForBucketRegion as ct, IMPLICIT_DELETE_DEPENDENCIES as d, LocalStartServiceError as dn, stringifyValue as dt, AwsClients as en, describeTypeWithThrottleRetry as et, computeImplicitDeleteEdges as f, LockError as fn, WorkGraph as ft, ccRoutedFinalSnapshotError as g, ProvisioningError as gn, rewriteTemplateAssetReferences as gt, buildFinalSnapshotIdentifier as h, PartialFailureError as hn, loadPublishableAssetManifest as ht, DeploymentEventsReader as i, AssetError as in, DagBuilder as it, yellow as j, Synthesizer as jt, green as k, AssetManifestLoader as kt, replayRollback as l, LocalInvokeBuildError as ln, shouldRetainResource as lt, PRE_DELETE_SNAPSHOT_TYPES as m, NestedStackChildDirectDestroyError as mn, createAssetRedirectResolver as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, resetAwsClients as nn, isRetryableTransientError as nt, planFailedOps as o, ConfigError as on, LockManager as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, MissingCdkCliError as pn, buildAssetRedirectMap as pt, assertRegionMatch as q, findLargeInlineResources as qt, DeployEngine as r, setAwsClients as rn, isThrottlingError as rt, planRollback as s, DependencyError as sn, S3StateBackend as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, getAwsClients as tn, withRetry as tt, withResourceDeadline as u, LocalMigrateError as un, AssetPublisher as ut, isFinalSnapshotError as v, ResourceUpdateNotSupportedError as vn, BOOTSTRAP_MARKER_PREFIX as vt, renderStatefulReason as w, isCdkdError as wn, buildDockerImage as wt, extractDeploymentEventError as x, StateError as xn, parseBootstrapMarker as xt, refusesFinalSnapshot as y, StackHasActiveImportsError as yn, ensureAssetStorage as yt, disableInstanceApiTermination as z, resolveStateBucketWithDefault as zt };
-//# sourceMappingURL=deploy-engine-BgLg1tet.js.map
+//# sourceMappingURL=deploy-engine-D2mbS9va.js.map