@go-to-k/cdkd 0.278.7 → 0.278.8

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-DQxqNiZR.js";
+import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-HAlYSktR.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-Cqw9Gzck.js";
+import { t as ASGProvider } from "./asg-provider-De5hpQWP.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -32268,7 +32268,7 @@ var GlueProvider = class {
 				CatalogId: catalogId,
 				DatabaseName: databaseName,
 				TableInput: this.buildTableInput(tableInput, tableName),
-				...openTableFormatInput !== void 0 && { OpenTableFormatInput: openTableFormatInput }
+				...openTableFormatInput !== void 0 && { OpenTableFormatInput: toSdkOpenTableFormatInput(openTableFormatInput) }
 			}));
 			const physicalId = `${databaseName}|${tableName}`;
 			this.logger.debug(`Successfully created Glue Table ${logicalId}: ${physicalId}`);
@@ -32843,6 +32843,34 @@ function sleep$1(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
 /**
+* Convert the CFn `AWS::Glue::Table.OpenTableFormatInput` blob to the SDK
+* `OpenTableFormatInput` shape.
+*
+* Every key matches the SDK model except one: CFn's
+* `IcebergInput.IcebergTableInput` is the SDK's
+* `IcebergInput.CreateIcebergTableInput` (@aws-sdk/client-glue `models_1.d.ts`
+* `IcebergInput`). The AWS SDK v3 serializer drops unknown members, so leaving
+* the CFn spelling in place silently discarded the ENTIRE Iceberg table spec
+* (`Location` / `Schema` / `PartitionSpec` / `WriteOrder` / `Properties`) while
+* `CreateTable` still reported success. The renamed object's own members match
+* CFn 1:1, so this is a single key rename.
+*
+* Non-object inputs (an unresolved intrinsic) pass through untouched so AWS
+* surfaces the real validation error.
+*/
+function toSdkOpenTableFormatInput(input) {
+	const iceberg = input["IcebergInput"];
+	if (typeof iceberg !== "object" || iceberg === null || Array.isArray(iceberg) || !("IcebergTableInput" in iceberg)) return input;
+	const { IcebergTableInput: icebergTableInput, ...rest } = iceberg;
+	return {
+		...input,
+		IcebergInput: {
+			...rest,
+			CreateIcebergTableInput: icebergTableInput
+		}
+	};
+}
+/**
 * Build the SDK `EncryptionConfiguration` from the CFn-shape input
 * (`AWS::Glue::SecurityConfiguration.EncryptionConfiguration`). Each
 * sub-config (`S3Encryptions[]` / `CloudWatchEncryption` /
@@ -33298,7 +33326,7 @@ var GlueCrawlerProvider = class {
 			await this.getClient().send(new CreateCrawlerCommand({
 				Name: name,
 				Role: role,
-				Targets: targets,
+				Targets: toSdkCrawlerTargets(targets),
 				...buildCrawlerCommonFields(properties),
 				...tags && { Tags: tags }
 			}));
@@ -33318,7 +33346,7 @@ var GlueCrawlerProvider = class {
 			const updateInput = {
 				Name: physicalId,
 				...properties["Role"] !== void 0 && { Role: properties["Role"] },
-				...properties["Targets"] !== void 0 && { Targets: properties["Targets"] },
+				...properties["Targets"] !== void 0 && { Targets: toSdkCrawlerTargets(properties["Targets"]) },
 				...buildCrawlerCommonFields(properties)
 			};
 			try {
@@ -33400,7 +33428,7 @@ var GlueCrawlerProvider = class {
 		const result = {
 			Name: crawler.Name ?? physicalId,
 			Role: crawler.Role ?? "",
-			Targets: crawler.Targets ? pickDefined(crawler.Targets) : {},
+			Targets: crawler.Targets ? toCfnCrawlerTargets(pickDefined(crawler.Targets)) : {},
 			DatabaseName: crawler.DatabaseName ?? "",
 			Description: crawler.Description ?? "",
 			Schedule: crawler.Schedule?.ScheduleExpression ? { ScheduleExpression: crawler.Schedule.ScheduleExpression } : {},
@@ -33488,6 +33516,93 @@ function buildCrawlerCommonFields(p) {
 	return r;
 }
 /**
+* CFn -> SDK key renames for `Targets.DynamoDBTargets[]`.
+*
+* The SDK's `DynamoDBTarget` is a lowercase island in an otherwise-PascalCase
+* model: `Path` is PascalCase but the scan-tuning members are `scanAll` /
+* `scanRate` (@aws-sdk/client-glue `models_0.d.ts` `DynamoDBTarget`), while CFn
+* spells them `ScanAll` / `ScanRate`. The AWS SDK v3 serializer drops unknown
+* members, so forwarding the CFn spelling silently loses the scan tuning while
+* the target itself (matched by `Path`) still reaches AWS. Every other
+* `CrawlerTargets` sub-type (`S3Target` / `JdbcTarget` / `MongoDBTarget` —
+* whose own `ScanAll` IS PascalCase — `CatalogTarget` / `DeltaTarget` /
+* `IcebergTarget` / `HudiTarget`) spells every member exactly as CFn does.
+*/
+const CFN_TO_SDK_DYNAMODB_TARGET_KEYS = {
+	ScanAll: "scanAll",
+	ScanRate: "scanRate"
+};
+/**
+* CFn is stringly typed, so a template (or an unresolved-then-resolved
+* intrinsic) can carry `ScanRate: "0.9"`. The SDK models it as a double and the
+* serializer forwards a string verbatim, so the value has to be coerced HERE —
+* this converter is the wire boundary for `Targets` now that it re-shapes the
+* blob. Non-numeric input passes through so AWS surfaces the real validation
+* error rather than cdkd mangling it.
+*/
+const SDK_DYNAMODB_TARGET_NUMERIC_KEYS = ["scanRate"];
+/**
+* Same stringly-typed-CFn reasoning as {@link SDK_DYNAMODB_TARGET_NUMERIC_KEYS},
+* for the boolean member: a hand-written `ScanAll: "false"` would otherwise
+* forward the STRING `"false"` — which is truthy — to a boolean member.
+*/
+const SDK_DYNAMODB_TARGET_BOOLEAN_KEYS = ["scanAll"];
+/** CFn booleans arrive as `true` / `false` or as the strings `"true"` / `"false"`. */
+function coerceBoolean(value) {
+	if (typeof value === "string") {
+		if (value === "true") return true;
+		if (value === "false") return false;
+	}
+	return value;
+}
+const SDK_TO_CFN_DYNAMODB_TARGET_KEYS = {
+	scanAll: "ScanAll",
+	scanRate: "ScanRate"
+};
+/**
+* Shallow-rename an object's keys per `renames`, leaving unlisted keys — and
+* non-object values (an unresolved intrinsic) — untouched.
+*/
+function renameRecordKeys(entry, renames, numericKeys = [], booleanKeys = []) {
+	if (typeof entry !== "object" || entry === null || Array.isArray(entry)) return entry;
+	const out = {};
+	for (const [k, v] of Object.entries(entry)) {
+		const key = renames[k] ?? k;
+		if (numericKeys.includes(key)) out[key] = coerceNumber(v);
+		else if (booleanKeys.includes(key)) out[key] = coerceBoolean(v);
+		else out[key] = v;
+	}
+	return out;
+}
+/**
+* Apply `renames` to every element of `targets[key]` when that entry is an
+* array, returning the original object untouched otherwise so a non-array value
+* reaches AWS verbatim and surfaces the real validation error.
+*/
+function renameCrawlerTargetList(targets, key, renames, numericKeys = [], booleanKeys = []) {
+	const list = targets[key];
+	if (!Array.isArray(list)) return targets;
+	return {
+		...targets,
+		[key]: list.map((entry) => renameRecordKeys(entry, renames, numericKeys, booleanKeys))
+	};
+}
+/**
+* Convert the CFn `AWS::Glue::Crawler.Targets` blob to the SDK `CrawlerTargets`
+* shape — see {@link CFN_TO_SDK_DYNAMODB_TARGET_KEYS} for the one divergence.
+*/
+function toSdkCrawlerTargets(targets) {
+	return renameCrawlerTargetList(targets, "DynamoDBTargets", CFN_TO_SDK_DYNAMODB_TARGET_KEYS, SDK_DYNAMODB_TARGET_NUMERIC_KEYS, SDK_DYNAMODB_TARGET_BOOLEAN_KEYS);
+}
+/**
+* Inverse of {@link toSdkCrawlerTargets}: re-shape a `GetCrawler` `Targets`
+* blob back into the CFn spelling so `cdkd drift` compares like with like
+* instead of reporting a phantom `ScanRate` removal + `scanRate` addition.
+*/
+function toCfnCrawlerTargets(targets) {
+	return renameCrawlerTargetList(targets, "DynamoDBTargets", SDK_TO_CFN_DYNAMODB_TARGET_KEYS);
+}
+/**
 * SDK Provider for `AWS::Glue::Connection`.
 *
 * `physicalId` is the connection name. `ConnectionInput.ConnectionProperties`
@@ -64454,7 +64569,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.7");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.8");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;