@go-to-k/cdkd 0.280.15 → 0.280.16

package/dist/{deploy-engine-CJPLgh5z.js → deploy-engine-1eZqhWKB.js}

@@ -7358,6 +7358,34 @@ var DagBuilder = class {
 * are in-place `UpdateTable` operations, matching CloudFormation's "No interruption"
 * update behavior for this property.
 */
+/**
+* Conditional-replacement predicate for `AWS::Lambda::Function.DurableConfig`.
+*
+* Returns true only when the block's PRESENCE toggles — added to a function
+* that had none, or dropped from one that had it. A change with the block
+* present on both sides (e.g. `ExecutionTimeout` 3600 -> 7200) is an in-place
+* `UpdateFunctionConfiguration`.
+*
+* Both toggle directions were established by live probe (us-east-1,
+* 2026-08-11), and neither is expressible as an in-place update:
+*
+*  - ADD: AWS rejects it outright — "You cannot add a durable configuration to
+*    a function that was originally created with no durable configuration"
+*    (`InvalidParameterValueException`). Classifying this in-place would make
+*    the deploy fail rather than converge.
+*  - REMOVE: `UpdateFunctionConfiguration` treats the omitted member as "no
+*    change" and KEEPS the live config, and there is no reset payload (the
+*    required `ExecutionTimeout` rejects an empty object). Classifying this
+*    in-place would report success while the function keeps a durable config
+*    the template no longer declares — the #1160 silent-drop class.
+*
+* A non-object on either side (an unresolved intrinsic) is compared on
+* presence alone, which is the conservative direction: it can over-report a
+* replacement, never silently skip a required one.
+*/
+function durableConfigPresenceToggled(oldValue, newValue) {
+	return oldValue == null !== (newValue == null);
+}
 function attributeTypeChangedForSharedAttribute(oldValue, newValue) {
 	const toTypeMap = (value) => {
 		const map = /* @__PURE__ */ new Map();
@@ -7471,7 +7499,7 @@ var ReplacementRulesRegistry = class {
 			])
 		});
 		this.rules.set("AWS::Lambda::Function", {
-			replacementProperties: /* @__PURE__ */ new Set(["FunctionName"]),
+			replacementProperties: /* @__PURE__ */ new Set(["FunctionName", "TenancyConfig"]),
 			updateableProperties: /* @__PURE__ */ new Set([
 				"Code",
 				"Handler",
@@ -7487,8 +7515,11 @@ var ReplacementRulesRegistry = class {
 				"TracingConfig",
 				"Layers",
 				"FileSystemConfigs",
-				"Architectures"
-			])
+				"Architectures",
+				"CodeSigningConfigArn",
+				"RuntimeManagementConfig"
+			]),
+			conditionalReplacements: /* @__PURE__ */ new Map([["DurableConfig", durableConfigPresenceToggled]])
 		});
 		this.rules.set("AWS::Lambda::LayerVersion", { replacementProperties: /* @__PURE__ */ new Set([
 			"Content",
@@ -12796,7 +12827,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-BRvHsDmu.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-4pPwAL_v.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -15654,8 +15685,10 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 		handled: /* @__PURE__ */ new Set([
 			"Architectures",
 			"Code",
+			"CodeSigningConfigArn",
 			"DeadLetterConfig",
 			"Description",
+			"DurableConfig",
 			"Environment",
 			"EphemeralStorage",
 			"FileSystemConfigs",
@@ -15671,20 +15704,18 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ReservedConcurrentExecutions",
 			"Role",
 			"Runtime",
+			"RuntimeManagementConfig",
 			"SnapStart",
 			"Tags",
+			"TenancyConfig",
 			"Timeout",
 			"TracingConfig",
 			"VpcConfig"
 		]),
 		silentDrop: /* @__PURE__ */ new Map([
 			["CapacityProviderConfig", "not yet implemented by cdkd"],
-			["CodeSigningConfigArn", "not yet implemented by cdkd"],
-			["DurableConfig", "not yet implemented by cdkd"],
 			["FunctionScalingConfig", "not yet implemented by cdkd"],
-			["PublishToLatestPublished", "not yet implemented by cdkd"],
-			["RuntimeManagementConfig", "not yet implemented by cdkd"],
-			["TenancyConfig", "not yet implemented by cdkd"]
+			["PublishToLatestPublished", "CloudFormation-only version-publishing directive with no AWS SDK equivalent"]
 		])
 	}],
 	["AWS::Lambda::LayerVersion", {
@@ -19285,7 +19316,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.280.15";
+	return "0.280.16";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -21397,4 +21428,4 @@ var DeployEngine = class {
 
 //#endregion
 export { requireConfigString as $, processStackMessages as $t, red as A, runDockerStreaming as At, isTerminationProtectionPropagationError as B, resolveSkipPrefix as Bt, isStatefulRecreateTargetSync as C, StateError as Cn, parseBootstrapMarker as Ct, cyan as D, normalizeAwsError as Dn, formatDockerLoginError as Dt, bold as E, isCdkdError as En, buildDockerImage as Et, ProviderRegistry as F, getDefaultStateBucketName as Ft, normalizeAwsTagsToCfn as G, warnDeprecatedNoPrefixCliFlag as Gt, cfnRefValueFromPhysicalId as H, resolveStateBucketWithDefaultAndSource as Ht, findActionableSilentDrops as I, getLegacyStateBucketName as It, configStringRefusal as J, MIGRATE_TMP_PREFIX as Jt, resolveExplicitPhysicalId as K, CFN_TEMPLATE_BODY_LIMIT as Kt, CloudControlProvider as L, resolveApp as Lt, IAMRoleProvider as M, getDockerImageBySourceHash as Mt, collectInlinePolicyNamesManagedBySiblings as N, Synthesizer as Nt, gray as O, withErrorHandling as On, getDockerCmd as Ot, clearOnUpdateRemoval as P, synthesisStatusMessage as Pt, requireConfigObject as Q, AssemblyReader as Qt, slowCcOperationTimeoutMs as R, resolveAutoAssetStorage as Rt, MULTI_REGION_RECREATE_BLOCKED_TYPES as S, StackTerminationProtectionError as Sn, getBootstrapMarkerKey as St, formatResourceLine as T, formatError as Tn, validateContainerRepoName as Tt, refStateLookupFromResource as U, resolveUseCdkBootstrapAssets as Ut, IntrinsicFunctionResolver as V, resolveStateBucketWithDefault as Vt, WAFv2WebACLProvider as W, stateBucketExistenceConfirmed as Wt, replayWarn as X, uploadCfnTemplate as Xt, readConfigString as Y, findLargeInlineResources as Yt, requireConfigArray as Z, expectedOwnerParam as Zt, createPreDeleteFinalSnapshot as _, PartialFailureError as _n, loadPublishableAssetManifest as _t, DeploymentEventsStore as a, setAwsClients as an, isThrottlingError as at, unsupportedFinalSnapshotError as b, ResourceUpdateNotSupportedError as bn, BOOTSTRAP_MARKER_PREFIX as bt, replayFailedOperations as c, ConfigError as cn, LockManager as ct, IMPLICIT_DELETE_DEPENDENCIES as d, LocalInvokeBuildError as dn, shouldRetainResource as dt, clearBucketRegionCache as en, applyRoleArnIfSet as et, computeImplicitDeleteEdges as f, LocalMigrateError as fn, AssetPublisher as ft, ccRoutedFinalSnapshotError as g, NestedStackChildDirectDestroyError as gn, createAssetRedirectResolver as gt, buildFinalSnapshotIdentifier as h, MissingCdkCliError as hn, buildAssetRedirectMap as ht, DeploymentEventsReader as i, resetAwsClients as in, isRetryableTransientError as it, yellow as j, AssetManifestLoader as jt, green as k, __exportAll as kn, runDockerForeground as kt, replayRollback as l, DependencyError as ln, S3StateBackend as lt, PRE_DELETE_SNAPSHOT_TYPES as m, LockError as mn, WorkGraph as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, AwsClients as nn, describeTypeWithThrottleRetry as nt, planFailedOps as o, AssetError as on, DagBuilder as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, LocalStartServiceError as pn, stringifyValue as pt, assertRegionMatch as q, CFN_TEMPLATE_URL_LIMIT as qt, DeployEngine as r, getAwsClients as rn, withRetry as rt, planRollback as s, CdkdError as sn, TemplateParser as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, resolveBucketRegion as tn, DiffCalculator as tt, withResourceDeadline as u, DeployCancelledError as un, rebuildClientForBucketRegion as ut, isFinalSnapshotError as v, ProvisioningError as vn, rewriteTemplateAssetReferences as vt, renderStatefulReason as w, SynthesisError as wn, validateAssetBucketName as wt, extractDeploymentEventError as x, StackHasActiveImportsError as xn, ensureAssetStorage as xt, refusesFinalSnapshot as y, ResourceTimeoutError as yn, AssetModeResolver as yt, disableInstanceApiTermination as z, resolveCaptureObservedState as zt };
-//# sourceMappingURL=deploy-engine-CJPLgh5z.js.map
+//# sourceMappingURL=deploy-engine-1eZqhWKB.js.map