@go-to-k/cdkd 0.280.26 → 0.280.27

package/dist/{deploy-engine-Sb8KbTlA.js → deploy-engine-Cz2xWrzZ.js}

@@ -7985,9 +7985,43 @@ function isIamPropagationError(message) {
 * and the rollback executor's reverse-replacement) — everywhere else it is a
 * genuine conflict that must fail fast. Shared by those sites' collision
 * detection + retry filters so a signature extension lands in one place.
+*
+* The optional `s` is load-bearing, not defensive spelling (issue #1625):
+* Lambda's `CreateFunction` raises `ResourceConflictException: Function
+* already exist: <name>` — SINGULAR — so the `already exists` form missed it
+* entirely and NO Lambda function could take the collision path. The
+* consequence was not a cosmetic message: a property-driven replacement of a
+* Lambda (dropping `DurableConfig`, changing `TenancyConfig`) create-firsts
+* into its own still-live name, the raw `ResourceConflictException` escaped
+* instead of the actionable `NAMED_REPLACEMENT_COLLISION` error, and
+* `cdkd deploy --replace`'s delete-first fallback never fired — so the
+* replacement was unperformable by any flag. Verified against real AWS
+* (us-east-1, 2026-08-12) by creating one function name twice.
+*
+* Two fences keep the widened arm from crediting a NON-collision, which
+* matters because the sites that consult it react DESTRUCTIVELY (the
+* `--replace` delete-first fallback deletes the old resource):
+*  - `\b` after `exists?` rejects a participle ("already existed as a draft");
+*  - the lookbehind rejects a NEGATED or MODAL phrase — "the bucket does NOT
+*    already exist", "the destination bucket MUST already exist" — which the
+*    bare pattern matched. The modal form is the one that bites: a create
+*    rejected for a missing PREREQUISITE would be reported to the user as a
+*    name collision pointing at `--replace`, and following that advice
+*    deletes the live old resource before the re-create fails again for the
+*    same reason, leaving it absent from AWS with state still recording it.
+* The error-CODE arm stays exact (`AlreadyExists`): the singular
+* `AlreadyExist` is not an AWS code spelling, and loosening it would match
+* inside unrelated identifiers.
+*
+* Classification stays MESSAGE-based rather than moving to the exception
+* NAME, and that is load-bearing here rather than inherited: Lambda raises
+* `ResourceConflictException` for a function in a PENDING state too (see
+* `lambda-function-provider.ts`), so keying on the name would classify a
+* transient state conflict as a collision and delete a live function under
+* `--replace`.
 */
 function isNameCollisionError(message) {
-	return /already exists/i.test(message) || message.includes("AlreadyExists");
+	return /(?<!\b(?:must|not|should|may|cannot)\s)already exists?\b/i.test(message) || message.includes("AlreadyExists");
 }
 /**
 * Match the SQS same-name re-creation cooldown: after `DeleteQueue`, creating
@@ -12836,7 +12870,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-BJsjMRaA.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-BFeeVgCN.js").then((n) => n.n);
 			await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 			return;
 		}
@@ -19352,7 +19386,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.280.26";
+	return "0.280.27";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -21485,4 +21519,4 @@ var DeployEngine = class {
 
 //#endregion
 export { requireConfigObject as $, AssemblyReader as $t, green as A, __exportAll as An, runDockerForeground as At, disableInstanceApiTermination as B, resolveCaptureObservedState as Bt, MULTI_REGION_RECREATE_BLOCKED_TYPES as C, StackTerminationProtectionError as Cn, getBootstrapMarkerKey as Ct, bold as D, isCdkdError as Dn, buildDockerImage as Dt, formatResourceLine as E, formatError as En, validateContainerRepoName as Et, clearOnUpdateRemoval as F, synthesisStatusMessage as Ft, WAFv2WebACLProvider as G, stateBucketExistenceConfirmed as Gt, IntrinsicFunctionResolver as H, resolveStateBucketWithDefault as Ht, ProviderRegistry as I, getDefaultStateBucketName as It, assertRegionMatch as J, CFN_TEMPLATE_URL_LIMIT as Jt, normalizeAwsTagsToCfn as K, warnDeprecatedNoPrefixCliFlag as Kt, findActionableSilentDrops as L, getLegacyStateBucketName as Lt, yellow as M, AssetManifestLoader as Mt, IAMRoleProvider as N, getDockerImageBySourceHash as Nt, cyan as O, normalizeAwsError as On, formatDockerLoginError as Ot, collectInlinePolicyNamesManagedBySiblings as P, Synthesizer as Pt, requireConfigArray as Q, expectedOwnerParam as Qt, CloudControlProvider as R, resolveApp as Rt, extractDeploymentEventError as S, StackHasActiveImportsError as Sn, ensureAssetStorage as St, renderStatefulReason as T, SynthesisError as Tn, validateAssetBucketName as Tt, cfnRefValueFromPhysicalId as U, resolveStateBucketWithDefaultAndSource as Ut, isTerminationProtectionPropagationError as V, resolveSkipPrefix as Vt, refStateLookupFromResource as W, resolveUseCdkBootstrapAssets as Wt, readConfigString as X, findLargeInlineResources as Xt, configStringRefusal as Y, MIGRATE_TMP_PREFIX as Yt, replayWarn as Z, uploadCfnTemplate as Zt, createPreDeleteFinalSnapshot as _, NestedStackChildDirectDestroyError as _n, createAssetRedirectResolver as _t, DeploymentEventsStore as a, resetAwsClients as an, isRetryableTransientError as at, unsupportedFinalSnapshotError as b, ResourceTimeoutError as bn, AssetModeResolver as bt, replayFailedOperations as c, CdkdError as cn, TemplateParser as ct, IMPLICIT_DELETE_DEPENDENCIES as d, DeployCancelledError as dn, rebuildClientForBucketRegion as dt, processStackMessages as en, requireConfigString as et, computeImplicitDeleteEdges as f, LocalInvokeBuildError as fn, shouldRetainResource as ft, ccRoutedFinalSnapshotError as g, MissingCdkCliError as gn, buildAssetRedirectMap as gt, buildFinalSnapshotIdentifier as h, LockError as hn, WorkGraph as ht, DeploymentEventsReader as i, getAwsClients as in, withRetry as it, red as j, runDockerStreaming as jt, gray as k, withErrorHandling as kn, getDockerCmd as kt, replayRollback as l, ConfigError as ln, LockManager as lt, PRE_DELETE_SNAPSHOT_TYPES as m, LocalStartServiceError as mn, stringifyValue as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, resolveBucketRegion as nn, DiffCalculator as nt, planFailedOps as o, setAwsClients as on, isThrottlingError as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, LocalMigrateError as pn, AssetPublisher as pt, resolveExplicitPhysicalId as q, CFN_TEMPLATE_BODY_LIMIT as qt, DeployEngine as r, AwsClients as rn, describeTypeWithThrottleRetry as rt, planRollback as s, AssetError as sn, DagBuilder as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, clearBucketRegionCache as tn, applyRoleArnIfSet as tt, withResourceDeadline as u, DependencyError as un, S3StateBackend as ut, isFinalSnapshotError as v, PartialFailureError as vn, loadPublishableAssetManifest as vt, isStatefulRecreateTargetSync as w, StateError as wn, parseBootstrapMarker as wt, makeCanonicalizePropertiesFn as x, ResourceUpdateNotSupportedError as xn, BOOTSTRAP_MARKER_PREFIX as xt, refusesFinalSnapshot as y, ProvisioningError as yn, rewriteTemplateAssetReferences as yt, slowCcOperationTimeoutMs as z, resolveAutoAssetStorage as zt };
-//# sourceMappingURL=deploy-engine-Sb8KbTlA.js.map
+//# sourceMappingURL=deploy-engine-Cz2xWrzZ.js.map