@go-to-k/cdkd 0.283.6 → 0.283.7

package/dist/{deploy-engine-DaEsg4mn.js → deploy-engine-CKpBSlde.js}

@@ -9850,6 +9850,40 @@ function s3BucketWebsiteUrl(bucketName, region) {
 * but a downstream refusal can still leave earlier sub-config PUTs applied —
 * the same exposure the pre-existing `applyOwnershipControls` throw has, and
 * still strictly better than a silent wrong-direction PUT.
+*
+* ## Every `onUnusable` message is a SENTENCE, and describes the READ only
+*
+* Issue #1735. Callers compose these as `${message} <their sentence>` — the
+* `.claude/rules/providers.md` per-site clause ("keep the PREVIOUS value" /
+* "SKIP the block" / "SUPPRESS the diff") is prescribed, so the appending set
+* GROWS. Two defects lived in that seam, and both are fixed HERE rather than
+* at the callers, so a future appender inherits the fix instead of repeating
+* the bug:
+*
+* 1. **Terminal punctuation.** Every message ended bare, so the composition
+*    ran two sentences together (`...template-path create The mode this
+*    update...`). Each `onUnusable` message now ends with a period. The
+*    `throw` arms deliberately do NOT — nothing composes onto those.
+* 2. **The message must not claim an OUTCOME the caller overrides.**
+*    `requireConfigString` said "Ignoring it and using the default
+*    (PROVISIONED)" while `DynamoDBTableProvider`'s clause said the compared
+*    mode (PAY_PER_REQUEST) "is kept" — both true of different things (what
+*    the HELPER returned vs what the provider SENDS), but read as one sentence
+*    the user could not tell which value reached AWS, which is the only
+*    question the warning exists to answer. The helper now describes its own
+*    READ ("This read falls back to the default (X)") and leaves the outcome
+*    entirely to the caller. For a caller that appends NOTHING the read IS the
+*    outcome, so nothing is lost there.
+*
+* `requireConfigArray` / `requireConfigObject` take (1) but NOT (2): they
+* return `undefined` and every caller SKIPS, so "Leaving this configuration
+* unapplied" is what actually happens on all of them and no caller's clause
+* contradicts it.
+*
+* Every existing assertion in this family uses `stringContaining`, so none of
+* them ever rendered the COMPOSED sentence — which is why a live run was what
+* surfaced this. `config-shape.test.ts` carries a composition block that
+* asserts the joined string directly.
 */
 /**
 * Read an optional string field out of a nested CFn config block, refusing a
@@ -9881,7 +9915,7 @@ function readConfigString(container, key, fallback, containerPath, options) {
 		const detail = malformedShapeDetail(container);
 		if (options?.onUnusable) {
 			const named = fallback === "" ? "" : ` (${fallback})`;
-			options.onUnusable(`${containerPath} must be an object ${detail}. Treating the block as empty, so ${containerPath}.${key} takes its default${named} here; the same value is REFUSED on a template-path create`);
+			options.onUnusable(`${containerPath} must be an object ${detail}. Treating the block as empty, so this read of ${containerPath}.${key} falls back to its default${named}; the same value is REFUSED on a template-path create.`);
 			return fallback;
 		}
 		throw new Error(`${containerPath} must be an object ${detail}`);
@@ -9919,7 +9953,7 @@ function requireConfigString(value, fallback, path, options) {
 	}
 	const named = fallback === "" ? "" : ` (${fallback})`;
 	if (options?.onUnusable) {
-		options.onUnusable(`${refusal}. Ignoring it and using the default${named} here; the same value is REFUSED on a template-path create`);
+		options.onUnusable(`${refusal}. This read falls back to the default${named}; the same value is REFUSED on a template-path create.`);
 		return fallback;
 	}
 	throw new Error(`${refusal}. Omit the field entirely to use the default${named}`);
@@ -9949,7 +9983,7 @@ function requireConfigArray(value, path, options) {
 	if (!Array.isArray(value)) {
 		const detail = malformedShapeDetail(value);
 		if (options?.onUnusable) {
-			options.onUnusable(`${path} must be an array ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create`);
+			options.onUnusable(`${path} must be an array ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create.`);
 			return;
 		}
 		throw new Error(`${path} must be an array ${detail}`);
@@ -9960,7 +9994,7 @@ function requireConfigObject(value, path, options) {
 	if (!isPlainObject$1(value)) {
 		const detail = malformedShapeDetail(value);
 		if (options?.onUnusable) {
-			options.onUnusable(`${path} must be an object ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create`);
+			options.onUnusable(`${path} must be an object ${detail}. Leaving this configuration unapplied here; the same value is REFUSED on a template-path create.`);
 			return;
 		}
 		throw new Error(`${path} must be an object ${detail}`);
@@ -13937,7 +13971,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-BA2wc324.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-o7QsopaI.js").then((n) => n.n);
 			return await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 		}
 		const isProtectedEc2Instance = context?.removeProtection === true && resourceType === "AWS::EC2::Instance";
@@ -20901,7 +20935,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.283.6";
+	return "0.283.7";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -23070,4 +23104,4 @@ var DeployEngine = class {
 
 //#endregion
 export { configStringRefusal as $, resolveSkipPrefix as $t, green as A, LockError as An, rewriteTemplateAssetReferences as At, slowCcOperationTimeoutMs as B, SynthesisError as Bn, formatDockerLoginError as Bt, MULTI_REGION_RECREATE_BLOCKED_TYPES as C, CdkdError as Cn, shouldRetainResource as Ct, bold as D, LocalInvokeBuildError as Dn, buildAssetRedirectMap as Dt, formatResourceLine as E, DeployCancelledError as En, WorkGraph as Et, clearOnUpdateRemoval as F, ResourceTimeoutError as Fn, parseBootstrapMarker as Ft, getAccountInfo as G, __exportAll as Gn, getDockerImageBySourceHash as Gt, isTerminationProtectionPropagationError as H, isCdkdError as Hn, runDockerForeground as Ht, ProviderRegistry as I, ResourceUpdateNotSupportedError as In, validateAssetBucketName as It, normalizeAwsTagsToCfn as J, getDefaultStateBucketName as Jt, refStateLookupFromResource as K, Synthesizer as Kt, findActionableSilentDrops as L, StackHasActiveImportsError as Ln, validateContainerRepoName as Lt, yellow as M, NestedStackChildDirectDestroyError as Mn, BOOTSTRAP_MARKER_PREFIX as Mt, IAMRoleProvider as N, PartialFailureError as Nn, ensureAssetStorage as Nt, cyan as O, LocalMigrateError as On, createAssetRedirectResolver as Ot, collectInlinePolicyNamesManagedBySiblings as P, ProvisioningError as Pn, getBootstrapMarkerKey as Pt, configBooleanRefusal as Q, resolveCaptureObservedState as Qt, findSilentDropProperties as R, StackTerminationProtectionError as Rn, buildDenyExternalAccessPolicy as Rt, extractDeploymentEventError as S, AssetError as Sn, rebuildClientForBucketRegion as St, renderStatefulReason as T, DependencyError as Tn, stringifyValue as Tt, IntrinsicFunctionResolver as U, normalizeAwsError as Un, runDockerStreaming as Ut, disableInstanceApiTermination as V, formatError as Vn, getDockerCmd as Vt, cfnRefValueFromPhysicalId as W, withErrorHandling as Wn, AssetManifestLoader as Wt, assertRegionMatch as X, resolveApp as Xt, resolveExplicitPhysicalId as Y, getLegacyStateBucketName as Yt, coerceCfnBoolean as Z, resolveAutoAssetStorage as Zt, createPreDeleteFinalSnapshot as _, resolveBucketRegion as _n, markNonRetryable as _t, DeploymentEventsStore as a, CFN_TEMPLATE_BODY_LIMIT as an, s3BucketArn as at, unsupportedFinalSnapshotError as b, resetAwsClients as bn, LockManager as bt, replayFailedOperations as c, findLargeInlineResources as cn, s3BucketRegionalDomainName as ct, IMPLICIT_DELETE_DEPENDENCIES as d, PARTITION_TABLE as dn, DiffCalculator as dt, resolveStateBucketWithDefault as en, readConfigString as et, computeImplicitDeleteEdges as f, canonicalizeRegion as fn, describeTypeWithThrottleRetry as ft, ccRoutedFinalSnapshotError as g, clearBucketRegionCache as gn, isThrottlingError as gt, buildFinalSnapshotIdentifier as h, processStackMessages as hn, isRetryableTransientError as ht, DeploymentEventsReader as i, warnDeprecatedNoPrefixCliFlag as in, requireConfigString as it, red as j, MissingCdkCliError as jn, AssetModeResolver as jt, gray as k, LocalStartServiceError as kn, loadPublishableAssetManifest as kt, replayRollback as l, uploadCfnTemplate as ln, s3BucketWebsiteUrl as lt, PRE_DELETE_SNAPSHOT_TYPES as m, AssemblyReader as mn, isMarkedNonRetryable as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, resolveUseCdkBootstrapAssets as nn, requireConfigArray as nt, planFailedOps as o, CFN_TEMPLATE_URL_LIMIT as on, s3BucketDomainName as ot, ATOMIC_FINAL_SNAPSHOT_TYPES as p, derivePartitionAndUrlSuffix as pn, withRetry as pt, WAFv2WebACLProvider as q, synthesisStatusMessage as qt, DeployEngine as r, stateBucketExistenceConfirmed as rn, requireConfigObject as rt, planRollback as s, MIGRATE_TMP_PREFIX as sn, s3BucketDualStackDomainName as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, resolveStateBucketWithDefaultAndSource as tn, replayWarn as tt, withResourceDeadline as u, expectedOwnerParam as un, applyRoleArnIfSet as ut, isFinalSnapshotError as v, AwsClients as vn, DagBuilder as vt, isStatefulRecreateTargetSync as w, ConfigError as wn, AssetPublisher as wt, makeCanonicalizePropertiesFn as x, setAwsClients as xn, S3StateBackend as xt, refusesFinalSnapshot as y, getAwsClients as yn, TemplateParser as yt, CloudControlProvider as z, StateError as zn, buildDockerImage as zt };
-//# sourceMappingURL=deploy-engine-DaEsg4mn.js.map
+//# sourceMappingURL=deploy-engine-CKpBSlde.js.map