@aws-cdk/toolkit-lib 0.1.7 → 0.2.0

package/lib/api/shared-public.d.ts

@@ -2,180 +2,6 @@ import * as cxapi from '@aws-cdk/cx-api';
 import { CloudFormationStackArtifact } from '@aws-cdk/cx-api';
 import { StackEvent } from '@aws-sdk/client-cloudformation';
 
-/**
- * Which stacks should be selected from a cloud assembly
- */
-export declare enum StackSelectionStrategy {
-	/**
-	 * Returns all stacks in the app regardless of patterns,
-	 * including stacks inside nested assemblies.
-	 */
-	ALL_STACKS = "all-stacks",
-	/**
-	 * Returns all stacks in the main (top level) assembly only.
-	 */
-	MAIN_ASSEMBLY = "main-assembly",
-	/**
-	 * If the assembly includes a single stack, returns it.
-	 * Otherwise throws an exception.
-	 */
-	ONLY_SINGLE = "only-single",
-	/**
-	 * Return stacks matched by patterns.
-	 * If no stacks are found, execution is halted successfully.
-	 * Most likely you don't want to use this but `StackSelectionStrategy.MUST_MATCH_PATTERN`
-	 */
-	PATTERN_MATCH = "pattern-match",
-	/**
-	 * Return stacks matched by patterns.
-	 * Throws an exception if the patterns don't match at least one stack in the assembly.
-	 */
-	PATTERN_MUST_MATCH = "pattern-must-match",
-	/**
-	 * Returns if exactly one stack is matched by the pattern(s).
-	 * Throws an exception if no stack, or more than exactly one stack are matched.
-	 */
-	PATTERN_MUST_MATCH_SINGLE = "pattern-must-match-single"
-}
-/**
- * When selecting stacks, what other stacks to include because of dependencies
- */
-export declare enum ExpandStackSelection {
-	/**
-	 * Don't select any extra stacks
-	 */
-	NONE = "none",
-	/**
-	 * Include stacks that this stack depends on
-	 */
-	UPSTREAM = "upstream",
-	/**
-	 * Include stacks that depend on this stack
-	 */
-	DOWNSTREAM = "downstream"
-}
-/**
- * A specification of which stacks should be selected
- */
-export interface StackSelector {
-	/**
-	 * The behavior if if no selectors are provided.
-	 */
-	strategy: StackSelectionStrategy;
-	/**
-	 * A list of patterns to match the stack hierarchical ids
-	 * Only used with `PATTERN_*` selection strategies.
-	 */
-	patterns?: string[];
-	/**
-	 * Expand the selection to upstream/downstream stacks.
-	 * @default ExpandStackSelection.None only select the specified/matched stacks
-	 */
-	expand?: ExpandStackSelection;
-	/**
-	 * By default, we throw an exception if the assembly contains no stacks.
-	 * Set to `false`, to halt execution for empty assemblies without error.
-	 *
-	 * Note that actions can still throw if a stack selection result is empty,
-	 * but the assembly contains stacks in principle.
-	 *
-	 * @default true
-	 */
-	failOnEmpty?: boolean;
-}
-/**
- * The current action being performed by the CLI. 'none' represents the absence of an action.
- */
-export type ToolkitAction = "assembly" | "bootstrap" | "synth" | "list" | "diff" | "deploy" | "rollback" | "watch" | "destroy" | "doctor" | "gc" | "import" | "metadata" | "init" | "migrate";
-/**
- * The reporting level of the message.
- * All messages are always reported, it's up to the IoHost to decide what to log.
- */
-export type IoMessageLevel = "error" | "result" | "warn" | "info" | "debug" | "trace";
-/**
- * A valid message code.
- */
-export type IoMessageCode = `CDK_${string}_${"E" | "W" | "I"}${number}${number}${number}${number}`;
-/**
- * An IO message emitted.
- */
-export interface IoMessage<T> {
-	/**
-	 * The time the message was emitted.
-	 */
-	readonly time: Date;
-	/**
-	 * The recommended log level of the message.
-	 *
-	 * This is an indicative level and should not be used to explicitly match messages, instead match the `code`.
-	 * The level of a message may change without notice.
-	 */
-	readonly level: IoMessageLevel;
-	/**
-	 * The action that triggered the message.
-	 */
-	readonly action: ToolkitAction;
-	/**
-	 * A short message code uniquely identifying a message type using the format CDK_[CATEGORY]_[E/W/I][0000-9999].
-	 *
-	 * The level indicator follows these rules:
-	 * - 'E' for error level messages
-	 * - 'W' for warning level messages
-	 * - 'I' for info/debug/trace level messages
-	 *
-	 * Codes ending in 000 0 are generic messages, while codes ending in 0001-9999 are specific to a particular message.
-	 * The following are examples of valid and invalid message codes:
-	 * ```ts
-	 * 'CDK_ASSETS_I0000'       // valid: generic assets info message
-	 * 'CDK_TOOLKIT_E0002'      // valid: specific toolkit error message
-	 * 'CDK_SDK_W0023'          // valid: specific sdk warning message
-	 * ```
-	 *
-	 * @see https://github.com/aws/aws-cdk-cli/blob/main/packages/%40aws-cdk/toolkit-lib/CODE_REGISTRY.md
-	 */
-	readonly code: IoMessageCode;
-	/**
-	 * The message text.
-	 * This is safe to print to an end-user.
-	 */
-	readonly message: string;
-	/**
-	 * Identifies the message span, this message belongs to.
-	 *
-	 * A message span, groups multiple messages together that semantically related to the same operation.
-	 * This is an otherwise meaningless identifier.
-	 *
-	 * A message without a `spanId`, does not belong to a span.
-	 */
-	readonly span?: string;
-	/**
-	 * The data attached to the message.
-	 */
-	readonly data: T;
-}
-/**
- * An IO request emitted.
- */
-export interface IoRequest<T, U> extends IoMessage<T> {
-	/**
-	 * The default response that will be used if no data is returned.
-	 */
-	readonly defaultResponse: U;
-}
-export interface IIoHost {
-	/**
-	 * Notifies the host of a message.
-	 * The caller waits until the notification completes.
-	 */
-	notify(msg: IoMessage<unknown>): Promise<void>;
-	/**
-	 * Notifies the host of a message that requires a response.
-	 *
-	 * If the host does not return a response the suggested
-	 * default response from the input message will be used.
-	 */
-	requestResponse<T, U>(msg: IoRequest<T, U>): Promise<U>;
-}
 interface BootstrapRole {
 	/**
 	 * The ARN of the IAM role created as part of bootrapping
@@ -558,32 +384,6 @@ type LogicalIdMetadataEntry = string;
 type StackTagsMetadataEntry = Tag[];
 type PrimitiveType = boolean | number | string;
 type MetadataEntryData = AssetMetadataEntry | LogMessageMetadataEntry | LogicalIdMetadataEntry | StackTagsMetadataEntry | PrimitiveType;
-declare enum ArtifactMetadataEntryType {
-	/**
-	 * Asset in metadata.
-	 */
-	ASSET = "aws:cdk:asset",
-	/**
-	 * Metadata key used to print INFO-level messages by the toolkit when an app is syntheized.
-	 */
-	INFO = "aws:cdk:info",
-	/**
-	 * Metadata key used to print WARNING-level messages by the toolkit when an app is syntheized.
-	 */
-	WARN = "aws:cdk:warning",
-	/**
-	 * Metadata key used to print ERROR-level messages by the toolkit when an app is syntheized.
-	 */
-	ERROR = "aws:cdk:error",
-	/**
-	 * Represents the CloudFormation logical ID of a resource at a certain path.
-	 */
-	LOGICAL_ID = "aws:cdk:logicalId",
-	/**
-	 * Represents tags of a stack.
-	 */
-	STACK_TAGS = "aws:cdk:stack-tags"
-}
 interface MetadataEntry {
 	/**
 	 * The type of the metadata entry.
@@ -871,15 +671,15 @@ interface KeyContextQuery extends ContextLookupRoleOptions {
 }
 interface CcApiContextQuery extends ContextLookupRoleOptions {
 	/**
-	 * The Cloudformation resource type.
+	 * The CloudFormation resource type.
 	 * See https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/supported-resources.html
 	 */
 	readonly typeName: string;
 	/**
 	 * Identifier of the resource to look up using `GetResource`.
 	 *
-	 * Specifying exactIdentifier will return exactly one result, or throw an error.
-	 *
+	 * Specifying exactIdentifier will return exactly one result, or throw an error
+	 * unless `ignoreErrorOnMissingContext` is set.
 	 *
 	 * @default - Either exactIdentifier or propertyMatch should be specified.
 	 */
@@ -887,7 +687,10 @@ interface CcApiContextQuery extends ContextLookupRoleOptions {
 	/**
 	 * Returns any resources matching these properties, using `ListResources`.
 	 *
-	 * Specifying propertyMatch will return 0 or more results.
+	 * By default, specifying propertyMatch will successfully return 0 or more
+	 * results. To throw an error if the number of results is unexpected (and
+	 * prevent the query results from being committed to context), specify
+	 * `expectedMatchCount`.
 	 *
 	 * ## Notes on property completeness
 	 *
@@ -921,6 +724,22 @@ interface CcApiContextQuery extends ContextLookupRoleOptions {
 	 * `GetResource` call for resources matched by `propertyMatch`.
 	 */
 	readonly propertiesToReturn: string[];
+	/**
+	 * Expected count of results if `propertyMatch` is specified.
+	 *
+	 * If the expected result count does not match the actual count,
+	 * by default an error is produced and the result is not committed to cached
+	 * context, and the user can correct the situation and try again without
+	 * having to manually clear out the context key using `cdk context --remove`
+	 *
+	 * If the value of * `ignoreErrorOnMissingContext` is `true`, the value of
+	 * `expectedMatchCount` is `at-least-one | exactly-one` and the number
+	 * of found resources is 0, `dummyValue` is returned and committed to context
+	 * instead.
+	 *
+	 * @default 'any'
+	 */
+	readonly expectedMatchCount?: "any" | "at-least-one" | "at-most-one" | "exactly-one";
 	/**
 	 * The value to return if the resource was not found and `ignoreErrorOnMissingContext` is true.
 	 *
@@ -939,8 +758,8 @@ interface CcApiContextQuery extends ContextLookupRoleOptions {
 	 *
 	 * - In case of an `exactIdentifier` lookup, return the `dummyValue` if the resource with
 	 *   that identifier was not found.
-	 * - In case of a `propertyMatch` lookup, this setting currently does not have any effect,
-	 *   as `propertyMatch` queries can legally return 0 resources.
+	 * - In case of a `propertyMatch` lookup, return the `dummyValue` if `expectedMatchCount`
+	 *   is `at-least-one | exactly-one` and the number of resources found was 0.
 	 *
 	 * if `ignoreErrorOnMissingContext` is set, `dummyValue` should be set and be an array.
 	 *
@@ -1039,7 +858,12 @@ interface ArtifactManifest {
 	 */
 	readonly properties?: ArtifactProperties;
 	/**
-	 * A string that represents this artifact. Should only be used in user interfaces.
+	 * A string that can be shown to a user to uniquely identify this artifact inside a cloud assembly tree
+	 *
+	 * Is used by the CLI to present a list of stacks to the user in a way that
+	 * makes sense to them. Even though the property name "display name" doesn't
+	 * imply it, this field is used to select stacks as well, so all stacks should
+	 * have a unique display name.
 	 *
 	 * @default - no display name
 	 */
@@ -1092,870 +916,291 @@ interface ICloudAssembly {
 	 */
 	readonly directory: string;
 }
-interface AwsDestination {
+interface LoadManifestOptions {
 	/**
-	 * The region where this asset will need to be published
+	 * Skip the version check
 	 *
-	 * @default - Current region
-	 */
-	readonly region?: string;
-	/**
-	 * The role that needs to be assumed while publishing this asset
+	 * This means you may read a newer cloud assembly than the CX API is designed
+	 * to support, and your application may not be aware of all features that in use
+	 * in the Cloud Assembly.
 	 *
-	 * @default - No role will be assumed
+	 * @default false
 	 */
-	readonly assumeRoleArn?: string;
+	readonly skipVersionCheck?: boolean;
 	/**
-	 * The ExternalId that needs to be supplied while assuming this role
+	 * Skip enum checks
 	 *
-	 * @default - No ExternalId will be supplied
+	 * This means you may read enum values you don't know about yet. Make sure to always
+	 * check the values of enums you encounter in the manifest.
+	 *
+	 * @default false
 	 */
-	readonly assumeRoleExternalId?: string;
+	readonly skipEnumCheck?: boolean;
 	/**
-	 * Additional options to pass to STS when assuming the role.
+	 * Topologically sort all artifacts
 	 *
-	 * - `RoleArn` should not be used. Use the dedicated `assumeRoleArn` property instead.
-	 * - `ExternalId` should not be used. Use the dedicated `assumeRoleExternalId` instead.
+	 * This parameter is only respected by the constructor of `CloudAssembly`. The
+	 * property lives here for backwards compatibility reasons.
 	 *
-	 * @see https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/STS.html#assumeRole-property
-	 * @default - No additional options.
+	 * @default true
 	 */
-	readonly assumeRoleAdditionalOptions?: {
-		[key: string]: any;
-	};
+	readonly topoSort?: boolean;
 }
-interface DockerImageAsset {
+/**
+ * Represents a general toolkit error in the AWS CDK Toolkit.
+ */
+export declare class ToolkitError extends Error {
 	/**
-	 * A display name for this asset
-	 *
-	 * @default - The identifier will be used as the display name
+	 * Determines if a given error is an instance of ToolkitError.
 	 */
-	readonly displayName?: string;
+	static isToolkitError(x: any): x is ToolkitError;
 	/**
-	 * Source description for container assets
+	 * Determines if a given error is an instance of AuthenticationError.
 	 */
-	readonly source: DockerImageSource;
+	static isAuthenticationError(x: any): x is AuthenticationError;
 	/**
-	 * Destinations for this container asset
+	 * Determines if a given error is an instance of AssemblyError.
 	 */
-	readonly destinations: {
-		[id: string]: DockerImageDestination;
-	};
-}
-interface DockerImageSource {
+	static isAssemblyError(x: any): x is AssemblyError;
 	/**
-	 * The directory containing the Docker image build instructions.
-	 *
-	 * This path is relative to the asset manifest location.
-	 *
-	 * @default - Exactly one of `directory` and `executable` is required
+	 * Determines if a given error is an instance of AssemblyError.
 	 */
-	readonly directory?: string;
+	static isContextProviderError(x: any): x is ContextProviderError;
 	/**
-	 * A command-line executable that returns the name of a local
-	 * Docker image on stdout after being run.
-	 *
-	 * @default - Exactly one of `directory` and `executable` is required
+	 * An AssemblyError with an original error as cause
 	 */
-	readonly executable?: string[];
+	static withCause(message: string, error: unknown): ToolkitError;
 	/**
-	 * The name of the file with build instructions
-	 *
-	 * Only allowed when `directory` is set.
-	 *
-	 * @default "Dockerfile"
+	 * The type of the error, defaults to "toolkit".
 	 */
-	readonly dockerFile?: string;
+	readonly type: string;
 	/**
-	 * Target build stage in a Dockerfile with multiple build stages
-	 *
-	 * Only allowed when `directory` is set.
-	 *
-	 * @default - The last stage in the Dockerfile
+	 * Denotes the source of the error as the toolkit.
 	 */
-	readonly dockerBuildTarget?: string;
+	readonly source: "toolkit" | "user";
 	/**
-	 * Additional build arguments
-	 *
-	 * Only allowed when `directory` is set.
-	 *
-	 * @default - No additional build arguments
-	 */
-	readonly dockerBuildArgs?: {
-		[name: string]: string;
-	};
-	/**
-	 * SSH agent socket or keys
-	 *
-	 * Requires building with docker buildkit.
-	 *
-	 * @default - No ssh flag is set
-	 */
-	readonly dockerBuildSsh?: string;
-	/**
-	 * Additional build secrets
-	 *
-	 * Only allowed when `directory` is set.
-	 *
-	 * @default - No additional build secrets
-	 */
-	readonly dockerBuildSecrets?: {
-		[name: string]: string;
-	};
-	/**
-	 * Networking mode for the RUN commands during build. _Requires Docker Engine API v1.25+_.
-	 *
-	 * Specify this property to build images on a specific networking mode.
-	 *
-	 * @default - no networking mode specified
-	 */
-	readonly networkMode?: string;
-	/**
-	 * Platform to build for. _Requires Docker Buildx_.
-	 *
-	 * Specify this property to build images on a specific platform/architecture.
-	 *
-	 * @default - current machine platform
-	 */
-	readonly platform?: string;
-	/**
-	 * Outputs
-	 *
-	 * @default - no outputs are passed to the build command (default outputs are used)
-	 * @see https://docs.docker.com/engine/reference/commandline/build/#custom-build-outputs
-	 */
-	readonly dockerOutputs?: string[];
-	/**
-	 * Cache from options to pass to the `docker build` command.
-	 *
-	 * @default - no cache from options are passed to the build command
-	 * @see https://docs.docker.com/build/cache/backends/
-	 */
-	readonly cacheFrom?: DockerCacheOption[];
-	/**
-	 * Cache to options to pass to the `docker build` command.
-	 *
-	 * @default - no cache to options are passed to the build command
-	 * @see https://docs.docker.com/build/cache/backends/
-	 */
-	readonly cacheTo?: DockerCacheOption;
-	/**
-	 * Disable the cache and pass `--no-cache` to the `docker build` command.
-	 *
-	 * @default - cache is used
-	 */
-	readonly cacheDisabled?: boolean;
-}
-interface DockerImageDestination extends AwsDestination {
-	/**
-	 * Name of the ECR repository to publish to
-	 */
-	readonly repositoryName: string;
-	/**
-	 * Tag of the image to publish
-	 */
-	readonly imageTag: string;
-}
-interface DockerCacheOption {
-	/**
-	 * The type of cache to use.
-	 * Refer to https://docs.docker.com/build/cache/backends/ for full list of backends.
-	 * @default - unspecified
-	 *
-	 * @example 'registry'
-	 */
-	readonly type: string;
-	/**
-	 * Any parameters to pass into the docker cache backend configuration.
-	 * Refer to https://docs.docker.com/build/cache/backends/ for cache backend configuration.
-	 * @default {} No options provided
-	 *
-	 * @example
-	 * declare const branch: string;
-	 *
-	 * const params = {
-	 *   ref: `12345678.dkr.ecr.us-west-2.amazonaws.com/cache:${branch}`,
-	 *   mode: "max",
-	 * };
-	 */
-	readonly params?: {
-		[key: string]: string;
-	};
-}
-interface FileAsset {
-	/**
-	 * A display name for this asset
-	 *
-	 * @default - The identifier will be used as the display name
-	 */
-	readonly displayName?: string;
-	/**
-	 * Source description for file assets
-	 */
-	readonly source: FileSource;
-	/**
-	 * Destinations for this file asset
-	 */
-	readonly destinations: {
-		[id: string]: FileDestination;
-	};
-}
-declare enum FileAssetPackaging {
-	/**
-	 * Upload the given path as a file
-	 */
-	FILE = "file",
-	/**
-	 * The given path is a directory, zip it and upload
-	 */
-	ZIP_DIRECTORY = "zip"
-}
-interface FileSource {
-	/**
-	 * External command which will produce the file asset to upload.
-	 *
-	 * @default - Exactly one of `executable` and `path` is required.
-	 */
-	readonly executable?: string[];
-	/**
-	 * The filesystem object to upload
-	 *
-	 * This path is relative to the asset manifest location.
-	 *
-	 * @default - Exactly one of `executable` and `path` is required.
-	 */
-	readonly path?: string;
-	/**
-	 * Packaging method
-	 *
-	 * Only allowed when `path` is specified.
-	 *
-	 * @default FILE
-	 */
-	readonly packaging?: FileAssetPackaging;
-}
-interface FileDestination extends AwsDestination {
-	/**
-	 * The name of the bucket
-	 */
-	readonly bucketName: string;
-	/**
-	 * The destination object key
-	 */
-	readonly objectKey: string;
-}
-interface AssetManifest {
-	/**
-	 * Version of the manifest
-	 */
-	readonly version: string;
-	/**
-	 * The file assets in this manifest
-	 *
-	 * @default - No files
-	 */
-	readonly files?: {
-		[id: string]: FileAsset;
-	};
-	/**
-	 * The Docker image assets in this manifest
-	 *
-	 * @default - No Docker images
-	 */
-	readonly dockerImages?: {
-		[id: string]: DockerImageAsset;
-	};
-}
-declare enum RequireApproval {
-	/**
-	 * Never ask for approval
-	 */
-	NEVER = "never",
-	/**
-	 * Prompt for approval for any type of change to the stack
-	 */
-	ANYCHANGE = "any-change",
-	/**
-	 * Only prompt for approval if there are security related changes
-	 */
-	BROADENING = "broadening"
-}
-interface DefaultCdkOptions {
-	/**
-	 * List of stacks to deploy
-	 *
-	 * Requried if `all` is not set
-	 *
-	 * @default - []
-	 */
-	readonly stacks?: string[];
-	/**
-	 * Deploy all stacks
-	 *
-	 * Requried if `stacks` is not set
-	 *
-	 * @default - false
-	 */
-	readonly all?: boolean;
-	/**
-	 * command-line for executing your app or a cloud assembly directory
-	 * e.g. "node bin/my-app.js"
-	 * or
-	 * "cdk.out"
-	 *
-	 * @default - read from cdk.json
-	 */
-	readonly app?: string;
-	/**
-	 * Role to pass to CloudFormation for deployment
-	 *
-	 * @default - use the bootstrap cfn-exec role
-	 */
-	readonly roleArn?: string;
-	/**
-	 * Additional context
-	 *
-	 * @default - no additional context
-	 */
-	readonly context?: {
-		[name: string]: string;
-	};
-	/**
-	 * Print trace for stack warnings
-	 *
-	 * @default false
-	 */
-	readonly trace?: boolean;
-	/**
-	 * Do not construct stacks with warnings
-	 *
-	 * @default false
-	 */
-	readonly strict?: boolean;
-	/**
-	 * Perform context lookups.
-	 *
-	 * Synthesis fails if this is disabled and context lookups need
-	 * to be performed
-	 *
-	 * @default true
-	 */
-	readonly lookups?: boolean;
-	/**
-	 * Ignores synthesis errors, which will likely produce an invalid output
-	 *
-	 * @default false
-	 */
-	readonly ignoreErrors?: boolean;
-	/**
-	 * Use JSON output instead of YAML when templates are printed
-	 * to STDOUT
-	 *
-	 * @default false
-	 */
-	readonly json?: boolean;
-	/**
-	 * show debug logs
-	 *
-	 * @default false
-	 */
-	readonly verbose?: boolean;
-	/**
-	 * enable emission of additional debugging information, such as creation stack
-	 * traces of tokens
-	 *
-	 * @default false
-	 */
-	readonly debug?: boolean;
-	/**
-	 * Use the indicated AWS profile as the default environment
-	 *
-	 * @default - no profile is used
-	 */
-	readonly profile?: string;
-	/**
-	 * Use the indicated proxy. Will read from
-	 * HTTPS_PROXY environment if specified
-	 *
-	 * @default - no proxy
-	 */
-	readonly proxy?: string;
-	/**
-	 * Path to CA certificate to use when validating HTTPS
-	 * requests.
-	 *
-	 * @default - read from AWS_CA_BUNDLE environment variable
-	 */
-	readonly caBundlePath?: string;
-	/**
-	 * Force trying to fetch EC2 instance credentials
-	 *
-	 * @default - guess EC2 instance status
-	 */
-	readonly ec2Creds?: boolean;
-	/**
-	 * Include "AWS::CDK::Metadata" resource in synthesized templates
-	 *
-	 * @default true
-	 */
-	readonly versionReporting?: boolean;
-	/**
-	 * Include "aws:cdk:path" CloudFormation metadata for each resource
-	 *
-	 * @default true
-	 */
-	readonly pathMetadata?: boolean;
-	/**
-	 * Include "aws:asset:*" CloudFormation metadata for resources that use assets
-	 *
-	 * @default true
-	 */
-	readonly assetMetadata?: boolean;
-	/**
-	 * Copy assets to the output directory
-	 *
-	 * Needed for local debugging the source files with SAM CLI
-	 *
-	 * @default false
-	 */
-	readonly staging?: boolean;
-	/**
-	 * Emits the synthesized cloud assembly into a directory
-	 *
-	 * @default cdk.out
-	 */
-	readonly output?: string;
-	/**
-	 * Show relevant notices
-	 *
-	 * @default true
-	 */
-	readonly notices?: boolean;
-	/**
-	 * Show colors and other style from console output
-	 *
-	 * @default true
-	 */
-	readonly color?: boolean;
-}
-interface DeployOptions extends DefaultCdkOptions {
-	/**
-	 * Only perform action on the given stack
-	 *
-	 * @default false
-	 */
-	readonly exclusively?: boolean;
-	/**
-	 * Name of the toolkit stack to use/deploy
-	 *
-	 * @default CDKToolkit
-	 */
-	readonly toolkitStackName?: string;
-	/**
-	 * Reuse the assets with the given asset IDs
-	 *
-	 * @default - do not reuse assets
-	 */
-	readonly reuseAssets?: string[];
-	/**
-	 * Optional name to use for the CloudFormation change set.
-	 * If not provided, a name will be generated automatically.
-	 *
-	 * @default - auto generate a name
-	 */
-	readonly changeSetName?: string;
-	/**
-	 * Always deploy, even if templates are identical.
-	 * @default false
-	 */
-	readonly force?: boolean;
-	/**
-	 * Rollback failed deployments
-	 *
-	 * @default true
-	 */
-	readonly rollback?: boolean;
-	/**
-	 * ARNs of SNS topics that CloudFormation will notify with stack related events
-	 *
-	 * @default - no notifications
-	 */
-	readonly notificationArns?: string[];
-	/**
-	 * What kind of security changes require approval
-	 *
-	 * @default RequireApproval.NEVER
-	 */
-	readonly requireApproval?: RequireApproval;
-	/**
-	 * Whether to execute the ChangeSet
-	 * Not providing `execute` parameter will result in execution of ChangeSet
-	 * @default true
-	 */
-	readonly execute?: boolean;
-	/**
-	 * Additional parameters for CloudFormation at deploy time
-	 * @default {}
-	 */
-	readonly parameters?: {
-		[name: string]: string;
-	};
-	/**
-	 * Use previous values for unspecified parameters
-	 *
-	 * If not set, all parameters must be specified for every deployment.
-	 *
-	 * @default true
-	 */
-	readonly usePreviousParameters?: boolean;
-	/**
-	 * Path to file where stack outputs will be written after a successful deploy as JSON
-	 * @default - Outputs are not written to any file
-	 */
-	readonly outputsFile?: string;
-	/**
-	 * Whether we are on a CI system
-	 *
-	 * @default false
-	 */
-	readonly ci?: boolean;
-	/**
-	 * Deploy multiple stacks in parallel
-	 *
-	 * @default 1
+	 * The specific original cause of the error, if available
 	 */
-	readonly concurrency?: number;
+	readonly cause?: unknown;
+	constructor(message: string, type?: string, cause?: unknown);
 }
-interface DestroyOptions extends DefaultCdkOptions {
-	/**
-	 * Do not ask for permission before destroying stacks
-	 *
-	 * @default false
-	 */
-	readonly force?: boolean;
+/**
+ * Represents an authentication-specific error in the AWS CDK Toolkit.
+ */
+export declare class AuthenticationError extends ToolkitError {
 	/**
-	 * Only destroy the given stack
-	 *
-	 * @default false
+	 * Denotes the source of the error as user.
 	 */
-	readonly exclusively?: boolean;
+	readonly source = "user";
+	constructor(message: string);
 }
-interface TestOptions {
-	/**
-	 * Run update workflow on this test case
-	 * This should only be set to false to test scenarios
-	 * that are not possible to test as part of the update workflow
-	 *
-	 * @default true
-	 */
-	readonly stackUpdateWorkflow?: boolean;
-	/**
-	 * Additional options to use for each CDK command
-	 *
-	 * @default - runner default options
-	 */
-	readonly cdkCommandOptions?: CdkCommands;
+/**
+ * Represents an error causes by cloud assembly synthesis
+ *
+ * This includes errors thrown during app execution, as well as failing annotations.
+ */
+export declare class AssemblyError extends ToolkitError {
 	/**
-	 * Additional commands to run at predefined points in the test workflow
-	 *
-	 * e.g. { postDeploy: ['yarn', 'test'] }
-	 *
-	 * @default - no hooks
+	 * An AssemblyError with an original error as cause
 	 */
-	readonly hooks?: Hooks;
+	static withCause(message: string, error: unknown): AssemblyError;
 	/**
-	 * Whether or not to include asset hashes in the diff
-	 * Asset hashes can introduces a lot of unneccessary noise into tests,
-	 * but there are some cases where asset hashes _should_ be included. For example
-	 * any tests involving custom resources or bundling
-	 *
-	 * @default false
+	 * An AssemblyError with a list of stacks as cause
 	 */
-	readonly diffAssets?: boolean;
+	static withStacks(message: string, stacks?: cxapi.CloudFormationStackArtifact[]): AssemblyError;
 	/**
-	 * List of CloudFormation resource types in this stack that can
-	 * be destroyed as part of an update without failing the test.
-	 *
-	 * This list should only include resources that for this specific
-	 * integration test we are sure will not cause errors or an outage if
-	 * destroyed. For example, maybe we know that a new resource will be created
-	 * first before the old resource is destroyed which prevents any outage.
-	 *
-	 * e.g. ['AWS::IAM::Role']
-	 *
-	 * @default - do not allow destruction of any resources on update
+	 * Denotes the source of the error as user.
 	 */
-	readonly allowDestroy?: string[];
+	readonly source = "user";
 	/**
-	 * Limit deployment to these regions
+	 * The stacks that caused the error, if available
 	 *
-	 * @default - can run in any region
+	 * The `messages` property of each `cxapi.CloudFormationStackArtifact` will contain the respective errors.
+	 * Absence indicates synthesis didn't fully complete.
 	 */
-	readonly regions?: string[];
+	readonly stacks?: cxapi.CloudFormationStackArtifact[];
+	private constructor();
 }
-interface TestCase extends TestOptions {
-	/**
-	 * Stacks that should be tested as part of this test case
-	 * The stackNames will be passed as args to the cdk commands
-	 * so dependent stacks will be automatically deployed unless
-	 * `exclusively` is passed
-	 */
-	readonly stacks: string[];
+declare class ContextProviderError extends ToolkitError {
 	/**
-	 * The node id of the stack that contains assertions.
-	 * This is the value that can be used to deploy the stack with the CDK CLI
-	 *
-	 * @default - no assertion stack
-	 */
-	readonly assertionStack?: string;
-	/**
-	 * The name of the stack that contains assertions
-	 *
-	 * @default - no assertion stack
+	 * Denotes the source of the error as user.
 	 */
-	readonly assertionStackName?: string;
+	readonly source = "user";
+	constructor(message: string);
 }
-interface Hooks {
-	/**
-	 * Commands to run prior to deploying the cdk stacks
-	 * in the integration test
-	 *
-	 * @default - no commands
-	 */
-	readonly preDeploy?: string[];
-	/**
-	 * Commands to run prior after deploying the cdk stacks
-	 * in the integration test
-	 *
-	 * @default - no commands
-	 */
-	readonly postDeploy?: string[];
+/**
+ * Which stacks should be selected from a cloud assembly
+ */
+export declare enum StackSelectionStrategy {
 	/**
-	 * Commands to run prior to destroying the cdk stacks
-	 * in the integration test
-	 *
-	 * @default - no commands
+	 * Returns all stacks in the app regardless of patterns,
+	 * including stacks inside nested assemblies.
 	 */
-	readonly preDestroy?: string[];
+	ALL_STACKS = "all-stacks",
 	/**
-	 * Commands to run after destroying the cdk stacks
-	 * in the integration test
-	 *
-	 * @default - no commands
+	 * Returns all stacks in the main (top level) assembly only.
 	 */
-	readonly postDestroy?: string[];
-}
-interface CdkCommand {
+	MAIN_ASSEMBLY = "main-assembly",
 	/**
-	 * Whether or not to run this command as part of the workflow
-	 * This can be used if you only want to test some of the workflow
-	 * for example enable `synth` and disable `deploy` & `destroy` in order
-	 * to limit the test to synthesis
-	 *
-	 * @default true
+	 * If the assembly includes a single stack, returns it.
+	 * Otherwise throws an exception.
 	 */
-	readonly enabled?: boolean;
+	ONLY_SINGLE = "only-single",
 	/**
-	 * If the runner should expect this command to fail
-	 *
-	 * @default false
+	 * Return stacks matched by patterns.
+	 * If no stacks are found, execution is halted successfully.
+	 * Most likely you don't want to use this but `StackSelectionStrategy.MUST_MATCH_PATTERN`
 	 */
-	readonly expectError?: boolean;
+	PATTERN_MATCH = "pattern-match",
 	/**
-	 * This can be used in combination with `expectedError`
-	 * to validate that a specific message is returned.
-	 *
-	 * @default - do not validate message
+	 * Return stacks matched by patterns.
+	 * Throws an exception if the patterns don't match at least one stack in the assembly.
 	 */
-	readonly expectedMessage?: string;
-}
-interface DeployCommand extends CdkCommand {
+	PATTERN_MUST_MATCH = "pattern-must-match",
 	/**
-	 * Additional arguments to pass to the command
-	 * This can be used to test specific CLI functionality
-	 *
-	 * @default - only default args are used
+	 * Returns if exactly one stack is matched by the pattern(s).
+	 * Throws an exception if no stack, or more than exactly one stack are matched.
 	 */
-	readonly args?: DeployOptions;
+	PATTERN_MUST_MATCH_SINGLE = "pattern-must-match-single"
 }
-interface DestroyCommand extends CdkCommand {
+/**
+ * When selecting stacks, what other stacks to include because of dependencies
+ */
+export declare enum ExpandStackSelection {
 	/**
-	 * Additional arguments to pass to the command
-	 * This can be used to test specific CLI functionality
-	 *
-	 * @default - only default args are used
+	 * Don't select any extra stacks
 	 */
-	readonly args?: DestroyOptions;
-}
-interface CdkCommands {
+	NONE = "none",
 	/**
-	 * Options to for the cdk deploy command
-	 *
-	 * @default - default deploy options
+	 * Include stacks that this stack depends on
 	 */
-	readonly deploy?: DeployCommand;
+	UPSTREAM = "upstream",
 	/**
-	 * Options to for the cdk destroy command
-	 *
-	 * @default - default destroy options
+	 * Include stacks that depend on this stack
 	 */
-	readonly destroy?: DestroyCommand;
+	DOWNSTREAM = "downstream"
 }
-interface IntegManifest {
-	/**
-	 * Version of the manifest
-	 */
-	readonly version: string;
-	/**
-	 * Enable lookups for this test. If lookups are enabled
-	 * then `stackUpdateWorkflow` must be set to false.
-	 * Lookups should only be enabled when you are explicitely testing
-	 * lookups.
-	 *
-	 * @default false
-	 */
-	readonly enableLookups?: boolean;
-	/**
-	 * Additional context to use when performing
-	 * a synth. Any context provided here will override
-	 * any default context
-	 *
-	 * @default - no additional context
-	 */
-	readonly synthContext?: {
-		[name: string]: string;
-	};
+/**
+ * A specification of which stacks should be selected
+ */
+export interface StackSelector {
 	/**
-	 * test cases
+	 * The behavior if if no selectors are provided.
 	 */
-	readonly testCases: {
-		[testName: string]: TestCase;
-	};
-}
-declare const VERSION_MISMATCH: string;
-interface LoadManifestOptions {
+	strategy: StackSelectionStrategy;
 	/**
-	 * Skip the version check
-	 *
-	 * This means you may read a newer cloud assembly than the CX API is designed
-	 * to support, and your application may not be aware of all features that in use
-	 * in the Cloud Assembly.
-	 *
-	 * @default false
+	 * A list of patterns to match the stack hierarchical ids
+	 * Only used with `PATTERN_*` selection strategies.
 	 */
-	readonly skipVersionCheck?: boolean;
+	patterns?: string[];
 	/**
-	 * Skip enum checks
-	 *
-	 * This means you may read enum values you don't know about yet. Make sure to always
-	 * check the values of enums you encounter in the manifest.
-	 *
-	 * @default false
+	 * Expand the selection to upstream/downstream stacks.
+	 * @default ExpandStackSelection.None only select the specified/matched stacks
 	 */
-	readonly skipEnumCheck?: boolean;
+	expand?: ExpandStackSelection;
 	/**
-	 * Topologically sort all artifacts
+	 * By default, we throw an exception if the assembly contains no stacks.
+	 * Set to `false`, to halt execution for empty assemblies without error.
 	 *
-	 * This parameter is only respected by the constructor of `CloudAssembly`. The
-	 * property lives here for backwards compatibility reasons.
+	 * Note that actions can still throw if a stack selection result is empty,
+	 * but the assembly contains stacks in principle.
 	 *
 	 * @default true
 	 */
-	readonly topoSort?: boolean;
+	failOnEmpty?: boolean;
 }
-declare class Manifest {
+/**
+ * The current action being performed by the CLI. 'none' represents the absence of an action.
+ */
+export type ToolkitAction = "assembly" | "bootstrap" | "synth" | "list" | "diff" | "deploy" | "rollback" | "watch" | "destroy" | "doctor" | "gc" | "import" | "metadata" | "init" | "migrate";
+/**
+ * The reporting level of the message.
+ * All messages are always reported, it's up to the IoHost to decide what to log.
+ */
+export type IoMessageLevel = "error" | "result" | "warn" | "info" | "debug" | "trace";
+/**
+ * A valid message code.
+ */
+export type IoMessageCode = `CDK_${string}_${"E" | "W" | "I"}${number}${number}${number}${number}`;
+/**
+ * An IO message emitted.
+ */
+export interface IoMessage<T> {
 	/**
-	 * Validates and saves the cloud assembly manifest to file.
-	 *
-	 * @param manifest - manifest.
-	 * @param filePath - output file path.
+	 * The time the message was emitted.
 	 */
-	static saveAssemblyManifest(manifest: AssemblyManifest, filePath: string): void;
+	readonly time: Date;
 	/**
-	 * Load and validates the cloud assembly manifest from file.
+	 * The recommended log level of the message.
 	 *
-	 * @param filePath - path to the manifest file.
+	 * This is an indicative level and should not be used to explicitly match messages, instead match the `code`.
+	 * The level of a message may change without notice.
 	 */
-	static loadAssemblyManifest(filePath: string, options?: LoadManifestOptions): AssemblyManifest;
+	readonly level: IoMessageLevel;
 	/**
-	 * Validates and saves the asset manifest to file.
-	 *
-	 * @param manifest - manifest.
-	 * @param filePath - output file path.
+	 * The action that triggered the message.
 	 */
-	static saveAssetManifest(manifest: AssetManifest, filePath: string): void;
+	readonly action: ToolkitAction;
 	/**
-	 * Load and validates the asset manifest from file.
+	 * A short message code uniquely identifying a message type using the format CDK_[CATEGORY]_[E/W/I][0000-9999].
 	 *
-	 * @param filePath - path to the manifest file.
-	 */
-	static loadAssetManifest(filePath: string): AssetManifest;
-	/**
-	 * Validates and saves the integ manifest to file.
+	 * The level indicator follows these rules:
+	 * - 'E' for error level messages
+	 * - 'W' for warning level messages
+	 * - 'I' for info/debug/trace level messages
 	 *
-	 * @param manifest - manifest.
-	 * @param filePath - output file path.
-	 */
-	static saveIntegManifest(manifest: IntegManifest, filePath: string): void;
-	/**
-	 * Load and validates the integ manifest from file.
+	 * Codes ending in 000 0 are generic messages, while codes ending in 0001-9999 are specific to a particular message.
+	 * The following are examples of valid and invalid message codes:
+	 * ```ts
+	 * 'CDK_ASSETS_I0000'       // valid: generic assets info message
+	 * 'CDK_TOOLKIT_E0002'      // valid: specific toolkit error message
+	 * 'CDK_SDK_W0023'          // valid: specific sdk warning message
+	 * ```
 	 *
-	 * @param filePath - path to the manifest file.
-	 */
-	static loadIntegManifest(filePath: string): IntegManifest;
-	/**
-	 * Fetch the current schema version number.
+	 * @see https://github.com/aws/aws-cdk-cli/blob/main/packages/%40aws-cdk/toolkit-lib/CODE_REGISTRY.md
 	 */
-	static version(): string;
+	readonly code: IoMessageCode;
 	/**
-	 * Return the CLI version that supports this Cloud Assembly Schema version
+	 * The message text.
+	 * This is safe to print to an end-user.
 	 */
-	static cliVersion(): string | undefined;
+	readonly message: string;
 	/**
-	 * Deprecated
-	 * @deprecated use `saveAssemblyManifest()`
+	 * Identifies the message span, this message belongs to.
+	 *
+	 * A message span, groups multiple messages together that semantically related to the same operation.
+	 * This is an otherwise meaningless identifier.
+	 *
+	 * A message without a `spanId`, does not belong to a span.
 	 */
-	static save(manifest: AssemblyManifest, filePath: string): void;
+	readonly span?: string;
 	/**
-	 * Deprecated
-	 * @deprecated use `loadAssemblyManifest()`
+	 * The data attached to the message.
 	 */
-	static load(filePath: string): AssemblyManifest;
-	private static validate;
-	private static saveManifest;
-	private static loadManifest;
+	readonly data: T;
+}
+/**
+ * An IO request emitted.
+ */
+export interface IoRequest<T, U> extends IoMessage<T> {
 	/**
-	 * This requires some explaining...
-	 *
-	 * We previously used `{ Key, Value }` for the object that represents a stack tag. (Notice the casing)
-	 * @link https://github.com/aws/aws-cdk/blob/v1.27.0/packages/aws-cdk/lib/api/cxapp/stacks.ts#L427.
-	 *
-	 * When that object moved to this package, it had to be JSII compliant, which meant the property
-	 * names must be `camelCased`, and not `PascalCased`. This meant it no longer matches the structure in the `manifest.json` file.
-	 * In order to support current manifest files, we have to translate the `PascalCased` representation to the new `camelCased` one.
-	 *
-	 * Note that the serialization itself still writes `PascalCased` because it relates to how CloudFormation expects it.
-	 *
-	 * Ideally, we would start writing the `camelCased` and translate to how CloudFormation expects it when needed. But this requires nasty
-	 * backwards-compatibility code and it just doesn't seem to be worth the effort.
+	 * The default response that will be used if no data is returned.
 	 */
-	private static patchStackTagsOnRead;
+	readonly defaultResponse: U;
+}
+export interface IIoHost {
 	/**
-	 * Validates that `assumeRoleAdditionalOptions` doesn't contain nor `ExternalId` neither `RoleArn`, as they
-	 * should have dedicated properties preceding this (e.g `assumeRoleArn` and `assumeRoleExternalId`).
+	 * Notifies the host of a message.
+	 * The caller waits until the notification completes.
 	 */
-	private static validateAssumeRoleAdditionalOptions;
+	notify(msg: IoMessage<unknown>): Promise<void>;
 	/**
-	 * See explanation on `patchStackTagsOnRead`
+	 * Notifies the host of a message that requires a response.
 	 *
-	 * Translate stack tags metadata if it has the "right" casing.
-	 */
-	private static patchStackTagsOnWrite;
-	/**
-	 * Recursively replace stack tags in the stack metadata
+	 * If the host does not return a response the suggested
+	 * default response from the input message will be used.
 	 */
-	private static replaceStackTags;
-	private constructor();
+	requestResponse<T, U>(msg: IoRequest<T, U>): Promise<U>;
 }
 export interface BootstrapEnvironmentProgress {
 	/**
@@ -2022,23 +1267,6 @@ declare class DestinationIdentifier {
 	 */
 	toString(): string;
 }
-/**
- * Different types of permission related changes in a diff
- */
-export declare enum PermissionChangeType {
-	/**
-	 * No permission changes
-	 */
-	NONE = "none",
-	/**
-	 * Permissions are broadening
-	 */
-	BROADENING = "broadening",
-	/**
-	 * Permissions are changed but not broadening
-	 */
-	NON_BROADENING = "non-broadening"
-}
 /**
  * Assembly data returned in the payload of an IO Message.
  */
@@ -2134,31 +1362,35 @@ export interface ContextProviderMessageSource {
 	 */
 	readonly provider: string;
 }
-export interface StackDeployProgress {
+/**
+ * Different types of permission related changes in a diff
+ */
+export declare enum PermissionChangeType {
 	/**
-	 * The total number of stacks being deployed
+	 * No permission changes
 	 */
-	readonly total: number;
+	NONE = "none",
 	/**
-	 * The count of the stack currently attempted to be deployed
-	 *
-	 * This is counting value, not an identifier.
+	 * Permissions are broadening
 	 */
-	readonly current: number;
+	BROADENING = "broadening",
 	/**
-	 * The stack that's currently being deployed
+	 * Permissions are changed but not broadening
 	 */
-	readonly stack: CloudFormationStackArtifact;
+	NON_BROADENING = "non-broadening"
 }
 /**
- * Payload for a yes/no confirmation in deploy. Includes information on
- * what kind of change is being made.
+ * Output of the diff command
  */
-export interface DeployConfirmationRequest extends ConfirmationRequest {
+export interface DiffResult extends Duration {
 	/**
-	 * The type of change being made to the IAM permissions.
+	 * Stack diff formatted as a string
 	 */
-	readonly permissionChangeType: PermissionChangeType;
+	readonly formattedStackDiff: string;
+	/**
+	 * Security diff formatted as a string
+	 */
+	readonly formattedSecurityDiff: string;
 }
 export type DeployStackResult = SuccessfulDeployStackResult | NeedRollbackFirstDeployStackResult | ReplacementRequiresRollbackStackResult;
 /** Successfully deployed a stack */
@@ -2206,6 +1438,32 @@ export interface DeployConfirmationRequest extends ConfirmationRequest {
 	 */
 	readonly permissionChangeType: PermissionChangeType;
 }
+export interface StackDeployProgress {
+	/**
+	 * The total number of stacks being deployed
+	 */
+	readonly total: number;
+	/**
+	 * The count of the stack currently attempted to be deployed
+	 *
+	 * This is counting value, not an identifier.
+	 */
+	readonly current: number;
+	/**
+	 * The stack that's currently being deployed
+	 */
+	readonly stack: CloudFormationStackArtifact;
+}
+/**
+ * Payload for a yes/no confirmation in deploy. Includes information on
+ * what kind of change is being made.
+ */
+export interface DeployConfirmationRequest extends ConfirmationRequest {
+	/**
+	 * The type of change being made to the IAM permissions.
+	 */
+	readonly permissionChangeType: PermissionChangeType;
+}
 export interface BuildAsset {
 	/**
 	 * The asset that is build
@@ -2257,7 +1515,7 @@ export interface StackDetails {
 	dependencies: StackDependency[];
 }
 export interface StackDetailsPayload {
-	stacks: StackDetails[];
+	readonly stacks: StackDetails[];
 }
 /**
  * An SDK logging trace.
@@ -2710,112 +1968,9 @@ export interface HotswapResult extends Duration, HotswapDeploymentDetails {
 	 */
 	readonly hotswapped: boolean;
 }
-/**
- * Represents a general toolkit error in the AWS CDK Toolkit.
- */
-export declare class ToolkitError extends Error {
-	/**
-	 * Determines if a given error is an instance of ToolkitError.
-	 */
-	static isToolkitError(x: any): x is ToolkitError;
-	/**
-	 * Determines if a given error is an instance of AuthenticationError.
-	 */
-	static isAuthenticationError(x: any): x is AuthenticationError;
-	/**
-	 * Determines if a given error is an instance of AssemblyError.
-	 */
-	static isAssemblyError(x: any): x is AssemblyError;
-	/**
-	 * Determines if a given error is an instance of AssemblyError.
-	 */
-	static isContextProviderError(x: any): x is ContextProviderError;
-	/**
-	 * An AssemblyError with an original error as cause
-	 */
-	static withCause(message: string, error: unknown): ToolkitError;
-	/**
-	 * The type of the error, defaults to "toolkit".
-	 */
-	readonly type: string;
-	/**
-	 * Denotes the source of the error as the toolkit.
-	 */
-	readonly source: "toolkit" | "user";
-	/**
-	 * The specific original cause of the error, if available
-	 */
-	readonly cause?: unknown;
-	constructor(message: string, type?: string, cause?: unknown);
-}
-/**
- * Represents an authentication-specific error in the AWS CDK Toolkit.
- */
-export declare class AuthenticationError extends ToolkitError {
-	/**
-	 * Denotes the source of the error as user.
-	 */
-	readonly source = "user";
-	constructor(message: string);
-}
-/**
- * Represents an error causes by cloud assembly synthesis
- *
- * This includes errors thrown during app execution, as well as failing annotations.
- */
-export declare class AssemblyError extends ToolkitError {
-	/**
-	 * An AssemblyError with an original error as cause
-	 */
-	static withCause(message: string, error: unknown): AssemblyError;
-	/**
-	 * An AssemblyError with a list of stacks as cause
-	 */
-	static withStacks(message: string, stacks?: cxapi.CloudFormationStackArtifact[]): AssemblyError;
-	/**
-	 * Denotes the source of the error as user.
-	 */
-	readonly source = "user";
-	/**
-	 * The stacks that caused the error, if available
-	 *
-	 * The `messages` property of each `cxapi.CloudFormationStackArtifact` will contain the respective errors.
-	 * Absence indicates synthesis didn't fully complete.
-	 */
-	readonly stacks?: cxapi.CloudFormationStackArtifact[];
-	private constructor();
-}
-/**
- * Represents an error originating from a Context Provider
- */
-export declare class ContextProviderError extends ToolkitError {
-	/**
-	 * Denotes the source of the error as user.
-	 */
-	readonly source = "user";
-	constructor(message: string);
-}
-/**
- * @deprecated
- */
-declare enum RequireApproval$1 {
-	/**
-	 * Never require any security approvals
-	 */
-	NEVER = "never",
-	/**
-	 * Any security changes require an approval
-	 */
-	ANY_CHANGE = "any-change",
-	/**
-	 * Require approval only for changes that are access broadening
-	 */
-	BROADENING = "broadening"
-}
 
 export {
 	MissingContext$1 as MissingContext,
-	RequireApproval$1 as RequireApproval,
 };
 
 export {};