@go-to-k/cdkd 0.51.7 → 0.51.8

package/dist/cli.js

@@ -35729,9 +35729,18 @@ var FirehoseProvider = class {
    *
    * Non-S3 destination types
    * (`Redshift`/`Elasticsearch`/`Amazonopensearchservice`/`Splunk`/`HttpEndpoint`/`AmazonOpenSearchServerless`)
-   * stay drift-unknown — declared via `getDriftUnknownPaths()` until
-   * per-destination reverse-map lands. `DeliveryStreamEncryptionConfigurationInput`
-   * also drift-unknown.
+   * are reverse-mapped via `mapRedshiftDescriptionToCfn` /
+   * `mapHttpEndpointDescriptionToCfn` / `mapNonS3DestinationToCfn`. The
+   * SDK reuses field names between Description and Configuration for
+   * these destinations, so a `pickDefinedDeep` pass-through produces a
+   * CFn-compatible shape. AWS-managed read-only `VpcId` is stripped
+   * from `VpcConfigurationDescription`. Write-only fields AWS strips
+   * from descriptions (`RedshiftDestinationConfiguration.Password`,
+   * `HttpEndpointDestinationConfiguration.EndpointConfiguration.AccessKey`)
+   * stay drift-unknown via `getDriftUnknownPaths`.
+   * `DeliveryStreamEncryptionConfigurationInput` is also still
+   * drift-unknown (separate `Get*` call needed for the read-side
+   * `DeliveryStreamEncryptionConfiguration`).
    *
    * Tags are surfaced via a follow-up `ListTagsForDeliveryStream` call
    * with `aws:*` filtered out and always emitted as `[]` placeholder when
@@ -35780,6 +35789,30 @@ var FirehoseProvider = class {
       result["S3DestinationConfiguration"] = mapS3DescriptionToCfn(
         dest.S3DestinationDescription
       );
+    } else if (dest?.RedshiftDestinationDescription) {
+      result["RedshiftDestinationConfiguration"] = mapRedshiftDescriptionToCfn(
+        dest.RedshiftDestinationDescription
+      );
+    } else if (dest?.ElasticsearchDestinationDescription) {
+      result["ElasticsearchDestinationConfiguration"] = mapNonS3DestinationToCfn(
+        dest.ElasticsearchDestinationDescription
+      );
+    } else if (dest?.AmazonopensearchserviceDestinationDescription) {
+      result["AmazonopensearchserviceDestinationConfiguration"] = mapNonS3DestinationToCfn(
+        dest.AmazonopensearchserviceDestinationDescription
+      );
+    } else if (dest?.AmazonOpenSearchServerlessDestinationDescription) {
+      result["AmazonOpenSearchServerlessDestinationConfiguration"] = mapNonS3DestinationToCfn(
+        dest.AmazonOpenSearchServerlessDestinationDescription
+      );
+    } else if (dest?.SplunkDestinationDescription) {
+      result["SplunkDestinationConfiguration"] = mapNonS3DestinationToCfn(
+        dest.SplunkDestinationDescription
+      );
+    } else if (dest?.HttpEndpointDestinationDescription) {
+      result["HttpEndpointDestinationConfiguration"] = mapHttpEndpointDescriptionToCfn(
+        dest.HttpEndpointDestinationDescription
+      );
     }
     try {
       const tagsResp = await this.getClient().send(
@@ -35804,30 +35837,28 @@ var FirehoseProvider = class {
    * docstring for the full rationale per category.
    *
    * Categories:
-   *  - Non-S3 destination types: shape divergence at scale (Description
-   *    vs Configuration field naming, write-only redacted fields like
-   *    Redshift `Password`); reverse-mapping is feasible per-destination
-   *    but deferred until per-shape user demand emerges.
+   *  - Write-only fields AWS strips from descriptions: Redshift
+   *    `Password`, HttpEndpoint `EndpointConfiguration.AccessKey`. State
+   *    that carries these fires drift on every run otherwise; declaring
+   *    them as drift-unknown is the cleanest fix.
    *  - `DeliveryStreamEncryptionConfigurationInput`: input-only shape
    *    (`KeyARN` + `KeyType`) vs. read-side `DeliveryStreamEncryptionConfiguration`
    *    (extra status / failure fields); not yet round-tripped.
    *
-   * S3 / ExtendedS3 inner nested fields (`EncryptionConfiguration` /
-   * `CloudWatchLoggingOptions` / `ProcessingConfiguration` /
-   * `DataFormatConversionConfiguration` / `DynamicPartitioningConfiguration` /
-   * `S3BackupConfiguration`) are now surfaced via `mapS3DescriptionToCfn`
-   * / `mapExtendedS3DescriptionToCfn` and no longer drift-unknown.
+   * S3 / ExtendedS3 inner nested fields and non-S3 destination types
+   * (Redshift / Elasticsearch / Amazonopensearchservice / Splunk /
+   * HttpEndpoint / AmazonOpenSearchServerless) are now reverse-mapped
+   * via `mapS3DescriptionToCfn` / `mapExtendedS3DescriptionToCfn` /
+   * `mapNonS3DestinationToCfn` / `mapRedshiftDescriptionToCfn` /
+   * `mapHttpEndpointDescriptionToCfn` and no longer drift-unknown at the
+   * top level.
    */
   getDriftUnknownPaths() {
     return [
-      // Non-S3 destinations (drift-unknown until per-destination reverse-map lands)
-      "RedshiftDestinationConfiguration",
-      "ElasticsearchDestinationConfiguration",
-      "AmazonopensearchserviceDestinationConfiguration",
-      "SplunkDestinationConfiguration",
-      "HttpEndpointDestinationConfiguration",
-      "AmazonOpenSearchServerlessDestinationConfiguration",
-      // Encryption input shape (deferred)
+      // Write-only fields AWS does not return on read.
+      "RedshiftDestinationConfiguration.Password",
+      "HttpEndpointDestinationConfiguration.EndpointConfiguration.AccessKey",
+      // Encryption input shape (deferred — separate Get* call needed).
       "DeliveryStreamEncryptionConfigurationInput"
     ];
   }
@@ -35956,6 +35987,70 @@ function mapExtendedS3DescriptionToCfn(desc) {
   }
   return out;
 }
+function mapNonS3DestinationToCfn(desc) {
+  const cleaned = pickDefinedDeep(desc);
+  if (!cleaned)
+    return {};
+  if (cleaned["VpcConfigurationDescription"]) {
+    const vpc = { ...cleaned["VpcConfigurationDescription"] };
+    delete vpc["VpcId"];
+    delete cleaned["VpcConfigurationDescription"];
+    if (Object.keys(vpc).length > 0)
+      cleaned["VpcConfiguration"] = vpc;
+  }
+  return cleaned;
+}
+function mapRedshiftDescriptionToCfn(desc) {
+  const out = {};
+  for (const k of [
+    "RoleARN",
+    "ClusterJDBCURL",
+    "CopyCommand",
+    "Username",
+    "RetryOptions",
+    "ProcessingConfiguration",
+    "S3BackupMode",
+    "CloudWatchLoggingOptions",
+    "SecretsManagerConfiguration"
+  ]) {
+    const v = pickDefinedDeep(desc[k]);
+    if (v !== void 0)
+      out[k] = v;
+  }
+  if (desc["S3DestinationDescription"]) {
+    out["S3Configuration"] = mapS3DescriptionToCfn(
+      desc["S3DestinationDescription"]
+    );
+  }
+  if (desc["S3BackupDescription"]) {
+    out["S3BackupConfiguration"] = mapS3DescriptionToCfn(
+      desc["S3BackupDescription"]
+    );
+  }
+  return out;
+}
+function mapHttpEndpointDescriptionToCfn(desc) {
+  const out = {};
+  for (const k of [
+    "BufferingHints",
+    "CloudWatchLoggingOptions",
+    "RequestConfiguration",
+    "ProcessingConfiguration",
+    "RoleARN",
+    "RetryOptions",
+    "SecretsManagerConfiguration"
+  ]) {
+    const v = pickDefinedDeep(desc[k]);
+    if (v !== void 0)
+      out[k] = v;
+  }
+  if (desc["EndpointConfiguration"]) {
+    const endpoint = pickDefinedDeep(desc["EndpointConfiguration"]);
+    if (endpoint !== void 0)
+      out["EndpointConfiguration"] = endpoint;
+  }
+  return out;
+}
 
 // src/provisioning/providers/cloudtrail-provider.ts
 import {
@@ -45093,7 +45188,7 @@ function reorderArgs(argv) {
 }
 async function main() {
   const program = new Command14();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.51.7");
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.51.8");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());