@go-to-k/cdkd 0.280.13 → 0.280.14

package/dist/{deploy-engine-CE-J9Vlu.js → deploy-engine-D4VaoTK7.js}

@@ -9286,7 +9286,7 @@ async function applyRoleArnIfSet(opts) {
 function readConfigString(container, key, fallback, containerPath, options) {
 	if (container === void 0 || container === null) return fallback;
 	if (!isPlainObject$1(container)) {
-		const detail = `(got ${describe(container)}) — check for an unresolved intrinsic or a mis-nested template value`;
+		const detail = malformedShapeDetail(container);
 		if (options?.onUnusable) {
 			const named = fallback === "" ? "" : ` (${fallback})`;
 			options.onUnusable(`${containerPath} must be an object ${detail}. Treating the block as empty, so ${containerPath}.${key} takes its default${named} here; the same value is REFUSED on a template-path create`);
@@ -9319,19 +9319,18 @@ function readConfigString(container, key, fallback, containerPath, options) {
 *   finite number under `coerceNumber`), unless `onUnusable` is supplied.
 */
 function requireConfigString(value, fallback, path, options) {
-	if (value === void 0) return fallback;
-	if (fallback === "" && typeof value === "string") return value;
-	if (options?.coerceNumber === true && typeof value === "number" && Number.isFinite(value)) return String(value);
-	if (typeof value !== "string" || value.trim() === "") {
-		const detail = `(got ${describe(value)}) — check for an unresolved intrinsic or a mis-nested template value`;
-		const named = fallback === "" ? "" : ` (${fallback})`;
-		if (options?.onUnusable) {
-			options.onUnusable(`${path} must be a non-empty string ${detail}. Ignoring it and using the default${named} here; the same value is REFUSED on a template-path create`);
-			return fallback;
-		}
-		throw new Error(`${path} must be a non-empty string ${detail}. Omit the field entirely to use the default` + named);
+	const refusal = configValueRefusal(value, fallback, path, options);
+	if (refusal === void 0) {
+		if (value === void 0) return fallback;
+		if (typeof value === "number") return String(value);
+		return value;
 	}
-	return value;
+	const named = fallback === "" ? "" : ` (${fallback})`;
+	if (options?.onUnusable) {
+		options.onUnusable(`${refusal}. Ignoring it and using the default${named} here; the same value is REFUSED on a template-path create`);
+		return fallback;
+	}
+	throw new Error(`${refusal}. Omit the field entirely to use the default${named}`);
 }
 /**
 * The CREATE-path counterpart of {@link ConfigStringOptions.onUnusable}.
@@ -9356,7 +9355,7 @@ function replayWarn(logger, context) {
 }
 function requireConfigArray(value, path, options) {
 	if (!Array.isArray(value)) {
-		const detail = `(got ${describe(value)}) — check for an unresolved intrinsic or a mis-nested template value`;
+		const detail = malformedShapeDetail(value);
 		if (options?.onUnusable) {
 			options.onUnusable(`${path} must be an array ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create`);
 			return;
@@ -9367,7 +9366,7 @@ function requireConfigArray(value, path, options) {
 }
 function requireConfigObject(value, path, options) {
 	if (!isPlainObject$1(value)) {
-		const detail = `(got ${describe(value)}) — check for an unresolved intrinsic or a mis-nested template value`;
+		const detail = malformedShapeDetail(value);
 		if (options?.onUnusable) {
 			options.onUnusable(`${path} must be an object ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create`);
 			return;
@@ -9377,6 +9376,47 @@ function requireConfigObject(value, path, options) {
 	return value;
 }
 /**
+* The refusal SENTENCE `readConfigString` / {@link requireConfigString} raise,
+* with no action clause attached — `undefined` when the read would succeed.
+*
+* This is the predicate {@link readConfigString} itself runs, exported so a
+* caller whose replay downgrade is a SKIP rather than the helper's
+* warn-and-DEFAULT can ask the question without taking the fallback (issue
+* #1595). Both halves are covered, in the same order and by the same tests:
+* the CONTAINER first, then the FIELD.
+*
+* Sharing the predicate is the point. A hand-written `typeof` twin would
+* disagree with the read it fronts on exactly the values that matter — a blank
+* string, an explicit `null`, a coerced number — which is the guard-mismatch
+* shape this module already exists to stop.
+*
+* @returns The refusal sentence (`<path> must be …`), or `undefined` when the
+*   value is usable — including the ABSENT container / ABSENT key cases, which
+*   legitimately take the fallback.
+*/
+function configStringRefusal(container, key, fallback, containerPath, options) {
+	if (container === void 0 || container === null) return void 0;
+	if (!isPlainObject$1(container)) return `${containerPath} must be an object ${malformedShapeDetail(container)}`;
+	return configValueRefusal(container[key], fallback, `${containerPath}.${key}`, options);
+}
+/** The FIELD half of {@link configStringRefusal}, shared with {@link requireConfigString}. */
+function configValueRefusal(value, fallback, path, options) {
+	if (value === void 0) return void 0;
+	if (fallback === "" && typeof value === "string") return void 0;
+	if (options?.coerceNumber === true && typeof value === "number" && Number.isFinite(value)) return;
+	if (typeof value !== "string" || value.trim() === "") return `${path} must be a non-empty string ${malformedShapeDetail(value)}`;
+}
+/**
+* The shared detail clause every refusal in this module ends with.
+*
+* One source rather than five: the sentence is identical at each guard, and a
+* copy that drifts changes the wording of a user-facing error for one shape
+* only, which is invisible in review.
+*/
+function malformedShapeDetail(value) {
+	return `(got ${describe(value)}) — check for an unresolved intrinsic or a mis-nested template value`;
+}
+/**
 * A plain object, i.e. something a CFn config block can legitimately be.
 * Arrays are excluded on purpose: an array where an object belongs is one of
 * the malformed shapes this module exists to catch, and `typeof [] === 'object'`
@@ -12756,7 +12796,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DJSCLI9C.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-DIMKyE07.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -19245,7 +19285,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.280.13";
+	return "0.280.14";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -21356,5 +21396,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { applyRoleArnIfSet as $, clearBucketRegionCache as $t, red as A, AssetManifestLoader as At, isTerminationProtectionPropagationError as B, resolveStateBucketWithDefault as Bt, isStatefulRecreateTargetSync as C, SynthesisError as Cn, validateAssetBucketName as Ct, cyan as D, withErrorHandling as Dn, getDockerCmd as Dt, bold as E, normalizeAwsError as En, formatDockerLoginError as Et, ProviderRegistry as F, getLegacyStateBucketName as Ft, normalizeAwsTagsToCfn as G, CFN_TEMPLATE_BODY_LIMIT as Gt, cfnRefValueFromPhysicalId as H, resolveUseCdkBootstrapAssets as Ht, findActionableSilentDrops as I, resolveApp as It, readConfigString as J, findLargeInlineResources as Jt, resolveExplicitPhysicalId as K, CFN_TEMPLATE_URL_LIMIT as Kt, CloudControlProvider as L, resolveAutoAssetStorage as Lt, IAMRoleProvider as M, Synthesizer as Mt, collectInlinePolicyNamesManagedBySiblings as N, synthesisStatusMessage as Nt, gray as O, __exportAll as On, runDockerForeground as Ot, clearOnUpdateRemoval as P, getDefaultStateBucketName as Pt, requireConfigString as Q, processStackMessages as Qt, slowCcOperationTimeoutMs as R, resolveCaptureObservedState as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, StateError as Sn, parseBootstrapMarker as St, formatResourceLine as T, isCdkdError as Tn, buildDockerImage as Tt, refStateLookupFromResource as U, stateBucketExistenceConfirmed as Ut, IntrinsicFunctionResolver as V, resolveStateBucketWithDefaultAndSource as Vt, WAFv2WebACLProvider as W, warnDeprecatedNoPrefixCliFlag as Wt, requireConfigArray as X, expectedOwnerParam as Xt, replayWarn as Y, uploadCfnTemplate as Yt, requireConfigObject as Z, AssemblyReader as Zt, createPreDeleteFinalSnapshot as _, ProvisioningError as _n, rewriteTemplateAssetReferences as _t, DeploymentEventsStore as a, AssetError as an, DagBuilder as at, unsupportedFinalSnapshotError as b, StackHasActiveImportsError as bn, ensureAssetStorage as bt, replayFailedOperations as c, DependencyError as cn, S3StateBackend as ct, IMPLICIT_DELETE_DEPENDENCIES as d, LocalMigrateError as dn, AssetPublisher as dt, resolveBucketRegion as en, DiffCalculator as et, computeImplicitDeleteEdges as f, LocalStartServiceError as fn, stringifyValue as ft, ccRoutedFinalSnapshotError as g, PartialFailureError as gn, loadPublishableAssetManifest as gt, buildFinalSnapshotIdentifier as h, NestedStackChildDirectDestroyError as hn, createAssetRedirectResolver as ht, DeploymentEventsReader as i, setAwsClients as in, isThrottlingError as it, yellow as j, getDockerImageBySourceHash as jt, green as k, runDockerStreaming as kt, replayRollback as l, DeployCancelledError as ln, rebuildClientForBucketRegion as lt, PRE_DELETE_SNAPSHOT_TYPES as m, MissingCdkCliError as mn, buildAssetRedirectMap as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, getAwsClients as nn, withRetry as nt, planFailedOps as o, CdkdError as on, TemplateParser as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, LockError as pn, WorkGraph as pt, assertRegionMatch as q, MIGRATE_TMP_PREFIX as qt, DeployEngine as r, resetAwsClients as rn, isRetryableTransientError as rt, planRollback as s, ConfigError as sn, LockManager as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, AwsClients as tn, describeTypeWithThrottleRetry as tt, withResourceDeadline as u, LocalInvokeBuildError as un, shouldRetainResource as ut, isFinalSnapshotError as v, ResourceTimeoutError as vn, AssetModeResolver as vt, renderStatefulReason as w, formatError as wn, validateContainerRepoName as wt, extractDeploymentEventError as x, StackTerminationProtectionError as xn, getBootstrapMarkerKey as xt, refusesFinalSnapshot as y, ResourceUpdateNotSupportedError as yn, BOOTSTRAP_MARKER_PREFIX as yt, disableInstanceApiTermination as z, resolveSkipPrefix as zt };
-//# sourceMappingURL=deploy-engine-CE-J9Vlu.js.map
+export { requireConfigString as $, processStackMessages as $t, red as A, runDockerStreaming as At, isTerminationProtectionPropagationError as B, resolveSkipPrefix as Bt, isStatefulRecreateTargetSync as C, StateError as Cn, parseBootstrapMarker as Ct, cyan as D, normalizeAwsError as Dn, formatDockerLoginError as Dt, bold as E, isCdkdError as En, buildDockerImage as Et, ProviderRegistry as F, getDefaultStateBucketName as Ft, normalizeAwsTagsToCfn as G, warnDeprecatedNoPrefixCliFlag as Gt, cfnRefValueFromPhysicalId as H, resolveStateBucketWithDefaultAndSource as Ht, findActionableSilentDrops as I, getLegacyStateBucketName as It, configStringRefusal as J, MIGRATE_TMP_PREFIX as Jt, resolveExplicitPhysicalId as K, CFN_TEMPLATE_BODY_LIMIT as Kt, CloudControlProvider as L, resolveApp as Lt, IAMRoleProvider as M, getDockerImageBySourceHash as Mt, collectInlinePolicyNamesManagedBySiblings as N, Synthesizer as Nt, gray as O, withErrorHandling as On, getDockerCmd as Ot, clearOnUpdateRemoval as P, synthesisStatusMessage as Pt, requireConfigObject as Q, AssemblyReader as Qt, slowCcOperationTimeoutMs as R, resolveAutoAssetStorage as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, StackTerminationProtectionError as Sn, getBootstrapMarkerKey as St, formatResourceLine as T, formatError as Tn, validateContainerRepoName as Tt, refStateLookupFromResource as U, resolveUseCdkBootstrapAssets as Ut, IntrinsicFunctionResolver as V, resolveStateBucketWithDefault as Vt, WAFv2WebACLProvider as W, stateBucketExistenceConfirmed as Wt, replayWarn as X, uploadCfnTemplate as Xt, readConfigString as Y, findLargeInlineResources as Yt, requireConfigArray as Z, expectedOwnerParam as Zt, createPreDeleteFinalSnapshot as _, PartialFailureError as _n, loadPublishableAssetManifest as _t, DeploymentEventsStore as a, setAwsClients as an, isThrottlingError as at, unsupportedFinalSnapshotError as b, ResourceUpdateNotSupportedError as bn, BOOTSTRAP_MARKER_PREFIX as bt, replayFailedOperations as c, ConfigError as cn, LockManager as ct, IMPLICIT_DELETE_DEPENDENCIES as d, LocalInvokeBuildError as dn, shouldRetainResource as dt, clearBucketRegionCache as en, applyRoleArnIfSet as et, computeImplicitDeleteEdges as f, LocalMigrateError as fn, AssetPublisher as ft, ccRoutedFinalSnapshotError as g, NestedStackChildDirectDestroyError as gn, createAssetRedirectResolver as gt, buildFinalSnapshotIdentifier as h, MissingCdkCliError as hn, buildAssetRedirectMap as ht, DeploymentEventsReader as i, resetAwsClients as in, isRetryableTransientError as it, yellow as j, AssetManifestLoader as jt, green as k, __exportAll as kn, runDockerForeground as kt, replayRollback as l, DependencyError as ln, S3StateBackend as lt, PRE_DELETE_SNAPSHOT_TYPES as m, LockError as mn, WorkGraph as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, AwsClients as nn, describeTypeWithThrottleRetry as nt, planFailedOps as o, AssetError as on, DagBuilder as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, LocalStartServiceError as pn, stringifyValue as pt, assertRegionMatch as q, CFN_TEMPLATE_URL_LIMIT as qt, DeployEngine as r, getAwsClients as rn, withRetry as rt, planRollback as s, CdkdError as sn, TemplateParser as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, resolveBucketRegion as tn, DiffCalculator as tt, withResourceDeadline as u, DeployCancelledError as un, rebuildClientForBucketRegion as ut, isFinalSnapshotError as v, ProvisioningError as vn, rewriteTemplateAssetReferences as vt, renderStatefulReason as w, SynthesisError as wn, validateAssetBucketName as wt, extractDeploymentEventError as x, StackHasActiveImportsError as xn, ensureAssetStorage as xt, refusesFinalSnapshot as y, ResourceTimeoutError as yn, AssetModeResolver as yt, disableInstanceApiTermination as z, resolveCaptureObservedState as zt };
+//# sourceMappingURL=deploy-engine-D4VaoTK7.js.map