@aws-cdk/toolkit-lib 1.29.1 → 1.31.0

package/lib/api/diagnosing/investigate-ecs-service.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.investigateEcsService = investigateEcsService;
+const format_utils_1 = require("./format-utils");
+const resource_identifiers_1 = require("./resource-identifiers");
+/** Fallback look-back when no failure timestamp is available. */
+const FALLBACK_LOG_WINDOW_MS = 30 * 60 * 1000;
+async function investigateEcsService(err, sdk, debug, options) {
+    const physicalId = err.physicalId;
+    if (!physicalId) {
+        await debug('ECS investigation: no physical ID available');
+        return [];
+    }
+    const { cluster, serviceName } = (0, resource_identifiers_1.parseEcsServiceIdentifier)(physicalId);
+    if (!serviceName) {
+        await debug(`ECS investigation: could not parse service identifier from "${physicalId}"`);
+        return [];
+    }
+    const region = sdk.currentRegion;
+    const ecs = sdk.ecs();
+    const cwl = sdk.cloudWatchLogs();
+    const service = await describeService(ecs, cluster, serviceName, debug);
+    if (!service) {
+        // The service is gone. The most common reason is that CloudFormation rolled the
+        // deployment back and deleted it, taking the task/runtime detail with it. If rollback
+        // was enabled, point the user at the flag that would have retained that detail.
+        if (options.rollbackEnabled) {
+            return [{
+                    source: 'ECS Service',
+                    messages: [
+                        'The service and its tasks were removed during rollback, so container-level failure detail is unavailable.',
+                        'Re-run the deployment with `--no-rollback` to retain the failed tasks and see why they stopped.',
+                    ],
+                }];
+        }
+        return [];
+    }
+    const results = [];
+    const stoppedTaskResult = await getStoppedTaskReasons(ecs, cluster, serviceName, region, service, debug);
+    if (stoppedTaskResult.context) {
+        results.push(stoppedTaskResult.context);
+    }
+    const taskDefinitionArn = service.taskDefinition;
+    if (!taskDefinitionArn) {
+        return results;
+    }
+    const taskDefInfo = await getTaskDefinitionInfo(ecs, taskDefinitionArn, debug);
+    if (!taskDefInfo) {
+        return results;
+    }
+    const logConfigs = taskDefInfo.logConfigs;
+    if (logConfigs.length === 0) {
+        results.push({
+            source: 'CloudWatch Logs',
+            messages: [
+                'No CloudWatch Logs configuration found. Enable logging to see container output on failure.',
+                'Example:',
+                '  taskDefinition.addContainer("app", {',
+                '    // ...',
+                '    logging: ecs.LogDrivers.awsLogs({ streamPrefix: "my-service" }),',
+                '  });',
+            ],
+        });
+        return results;
+    }
+    // `logConfigs` has one entry per container in the task definition that uses the awslogs
+    // driver — a handful at most — so this fan-out is bounded by the task shape and needs no
+    // explicit concurrency limit.
+    // eslint-disable-next-line @cdklabs/promiseall-no-unbounded-parallelism
+    const logResults = await Promise.all(logConfigs.map(cfg => fetchRecentLogs(cwl, cfg, region, stoppedTaskResult.taskIds, debug)));
+    const logContexts = logResults.filter((c) => c !== undefined);
+    results.push(...logContexts);
+    if (logContexts.length === 0) {
+        results.push({
+            source: 'CloudWatch Logs',
+            messages: ['No CloudWatch Logs found.'],
+        });
+    }
+    return results;
+}
+async function describeService(ecs, cluster, serviceName, debug) {
+    try {
+        const resp = await ecs.describeServices({ cluster, services: [serviceName] });
+        const service = resp.services?.[0];
+        if (!service) {
+            await debug(`ECS investigation: service "${serviceName}" not found`);
+        }
+        return service;
+    }
+    catch (e) {
+        await debug(`ECS investigation: failed to describe service: ${e.message}`);
+        return undefined;
+    }
+}
+async function getStoppedTaskReasons(ecs, cluster, serviceName, region, service, debug) {
+    try {
+        // Ask ECS for the service's stopped tasks. The IDs we need live in "has started 1 tasks: (task <id>)" events
+        const taskIds = await listStoppedTaskIds(ecs, cluster, serviceName, debug);
+        const messages = [];
+        if (taskIds.length > 0) {
+            // Show details from the most recently stopped task only.
+            const tasksResp = await ecs.describeTasks({ cluster, tasks: [taskIds[0]] });
+            const task = tasksResp.tasks?.[0];
+            if (task) {
+                if (task.stoppedReason) {
+                    messages.push(`Task stopped: ${task.stoppedReason}`);
+                }
+                for (const container of task.containers ?? []) {
+                    if (container.reason) {
+                        messages.push(`Container "${container.name}": ${container.reason}`);
+                    }
+                    if (container.exitCode != null && container.exitCode !== 0) {
+                        messages.push(`Container "${container.name}" exited with code ${container.exitCode}`);
+                    }
+                }
+            }
+            if (messages.length > 0 && taskIds.length > 1) {
+                messages.push(`(${taskIds.length - 1} other failed task(s) not shown)`);
+            }
+        }
+        // Fall back to the most relevant service event if we couldn't get a task-level reason
+        // (e.g. tasks already aged out, or no stopped tasks retained).
+        if (messages.length === 0) {
+            const failureEvent = (service.events ?? [])
+                .find(e => e.message?.includes('stopped') || e.message?.includes('failed') || e.message?.includes('unhealthy'));
+            if (failureEvent?.message) {
+                messages.push(failureEvent.message);
+            }
+        }
+        if (messages.length === 0) {
+            return { taskIds };
+        }
+        return {
+            context: {
+                source: 'ECS Stopped Tasks',
+                messages,
+                link: (0, resource_identifiers_1.ecsStoppedTasksConsoleUrl)(region, cluster ?? 'default', serviceName),
+                linkLabel: 'Tasks',
+            },
+            taskIds,
+        };
+    }
+    catch (e) {
+        await debug(`ECS investigation: failed to get stopped task reasons: ${e.message}`);
+        return { taskIds: [] };
+    }
+}
+/**
+ * Maximum number of stopped task IDs to consider. We only render detail for the most
+ * recent one, but keep a few so we can report how many others failed.
+ */
+const MAX_STOPPED_TASKS = 3;
+/**
+ * List the bare task IDs of the service's stopped tasks, newest first.
+ *
+ * Prefers scoping by service name; if that yields nothing (some ECS API versions only
+ * apply the service filter to running tasks), falls back to listing the cluster's stopped
+ * tasks. Returns an empty array if none are retained (e.g. they aged out, or rollback
+ * already drained the cluster).
+ */
+async function listStoppedTaskIds(ecs, cluster, serviceName, debug) {
+    const toIds = (arns) => (arns ?? []).map(arn => arn.split('/').pop()).filter((id) => !!id);
+    let arns;
+    try {
+        const byService = await ecs.listTasks({ cluster, serviceName, desiredStatus: 'STOPPED' });
+        arns = byService.taskArns;
+        if (!arns || arns.length === 0) {
+            const byCluster = await ecs.listTasks({ cluster, desiredStatus: 'STOPPED' });
+            arns = byCluster.taskArns;
+        }
+    }
+    catch (e) {
+        await debug(`ECS investigation: failed to list stopped tasks: ${e.message}`);
+        return [];
+    }
+    return toIds(arns).slice(0, MAX_STOPPED_TASKS);
+}
+async function getTaskDefinitionInfo(ecs, taskDefinitionArn, debug) {
+    try {
+        const resp = await ecs.describeTaskDefinition({ taskDefinition: taskDefinitionArn });
+        const containers = resp.taskDefinition?.containerDefinitions ?? [];
+        const logConfigs = [];
+        for (const container of containers) {
+            const logConfig = container.logConfiguration;
+            if (logConfig?.logDriver === 'awslogs') {
+                const logGroup = logConfig.options?.['awslogs-group'];
+                if (logGroup) {
+                    logConfigs.push({
+                        logGroup,
+                        streamPrefix: logConfig.options?.['awslogs-stream-prefix'],
+                        containerName: container.name,
+                    });
+                }
+            }
+        }
+        return { logConfigs };
+    }
+    catch (e) {
+        await debug(`ECS investigation: failed to describe task definition: ${e.message}`);
+        return undefined;
+    }
+}
+async function fetchRecentLogs(cwl, logConfig, region, taskIds, debug) {
+    try {
+        // Target the most recently failed task's log stream for the most relevant output
+        const lastTaskId = taskIds[0];
+        const targetStream = (logConfig.streamPrefix && logConfig.containerName && lastTaskId)
+            ? `${logConfig.streamPrefix}/${logConfig.containerName}/${lastTaskId}`
+            : undefined;
+        const resp = await cwl.filterLogEvents({
+            logGroupName: logConfig.logGroup,
+            startTime: Date.now() - FALLBACK_LOG_WINDOW_MS,
+            limit: 1000,
+            ...(targetStream
+                ? { logStreamNames: [targetStream] }
+                : logConfig.streamPrefix ? { logStreamNamePrefix: logConfig.streamPrefix } : {}),
+        });
+        const events = resp.events ?? [];
+        if (events.length === 0) {
+            await debug(`ECS investigation: no recent log events in ${logConfig.logGroup}${targetStream ? ` (targeted stream: ${targetStream})` : ''}`);
+            return undefined;
+        }
+        const messages = (0, format_utils_1.trimToRecentLines)(events.map(e => e.message?.trimEnd()).filter((m) => m != null));
+        if (taskIds.length > 1) {
+            messages.push(`(showing logs from last failed task; ${taskIds.length - 1} other failed task(s) available in console)`);
+        }
+        const source = logConfig.containerName
+            ? `CloudWatch Logs: ${logConfig.logGroup} (container: ${logConfig.containerName})`
+            : `CloudWatch Logs: ${logConfig.logGroup}`;
+        return {
+            source,
+            messages,
+            link: (0, format_utils_1.cloudWatchLogsConsoleUrl)(region, logConfig.logGroup),
+            linkLabel: 'Logs',
+        };
+    }
+    catch (e) {
+        await debug(`ECS investigation: failed to fetch logs from ${logConfig.logGroup}: ${e.message}`);
+        return undefined;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW52ZXN0aWdhdGUtZWNzLXNlcnZpY2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbnZlc3RpZ2F0ZS1lY3Mtc2VydmljZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQXlCQSxzREF5RkM7QUFsSEQsaURBQTZFO0FBQzdFLGlFQUE4RjtBQUs5RixpRUFBaUU7QUFDakUsTUFBTSxzQkFBc0IsR0FBRyxFQUFFLEdBQUcsRUFBRSxHQUFHLElBQUksQ0FBQztBQWtCdkMsS0FBSyxVQUFVLHFCQUFxQixDQUN6QyxHQUFrQixFQUNsQixHQUFRLEVBQ1IsS0FBcUMsRUFDckMsT0FBMkI7SUFFM0IsTUFBTSxVQUFVLEdBQUcsR0FBRyxDQUFDLFVBQVUsQ0FBQztJQUNsQyxJQUFJLENBQUMsVUFBVSxFQUFFLENBQUM7UUFDaEIsTUFBTSxLQUFLLENBQUMsNkNBQTZDLENBQUMsQ0FBQztRQUMzRCxPQUFPLEVBQUUsQ0FBQztJQUNaLENBQUM7SUFFRCxNQUFNLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxHQUFHLElBQUEsZ0RBQXlCLEVBQUMsVUFBVSxDQUFDLENBQUM7SUFDdkUsSUFBSSxDQUFDLFdBQVcsRUFBRSxDQUFDO1FBQ2pCLE1BQU0sS0FBSyxDQUFDLCtEQUErRCxVQUFVLEdBQUcsQ0FBQyxDQUFDO1FBQzFGLE9BQU8sRUFBRSxDQUFDO0lBQ1osQ0FBQztJQUVELE1BQU0sTUFBTSxHQUFHLEdBQUcsQ0FBQyxhQUFhLENBQUM7SUFDakMsTUFBTSxHQUFHLEdBQUcsR0FBRyxDQUFDLEdBQUcsRUFBRSxDQUFDO0lBQ3RCLE1BQU0sR0FBRyxHQUFHLEdBQUcsQ0FBQyxjQUFjLEVBQUUsQ0FBQztJQUVqQyxNQUFNLE9BQU8sR0FBRyxNQUFNLGVBQWUsQ0FBQyxHQUFHLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxLQUFLLENBQUMsQ0FBQztJQUN4RSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDYixnRkFBZ0Y7UUFDaEYsc0ZBQXNGO1FBQ3RGLGdGQUFnRjtRQUNoRixJQUFJLE9BQU8sQ0FBQyxlQUFlLEVBQUUsQ0FBQztZQUM1QixPQUFPLENBQUM7b0JBQ04sTUFBTSxFQUFFLGFBQWE7b0JBQ3JCLFFBQVEsRUFBRTt3QkFDUiwyR0FBMkc7d0JBQzNHLGlHQUFpRztxQkFDbEc7aUJBQ0YsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztRQUNELE9BQU8sRUFBRSxDQUFDO0lBQ1osQ0FBQztJQUVELE1BQU0sT0FBTyxHQUFrQyxFQUFFLENBQUM7SUFFbEQsTUFBTSxpQkFBaUIsR0FBRyxNQUFNLHFCQUFxQixDQUFDLEdBQUcsRUFBRSxPQUFPLEVBQUUsV0FBVyxFQUFFLE1BQU0sRUFBRSxPQUFPLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDekcsSUFBSSxpQkFBaUIsQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUM5QixPQUFPLENBQUMsSUFBSSxDQUFDLGlCQUFpQixDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQzFDLENBQUM7SUFFRCxNQUFNLGlCQUFpQixHQUFHLE9BQU8sQ0FBQyxjQUFjLENBQUM7SUFDakQsSUFBSSxDQUFDLGlCQUFpQixFQUFFLENBQUM7UUFDdkIsT0FBTyxPQUFPLENBQUM7SUFDakIsQ0FBQztJQUVELE1BQU0sV0FBVyxHQUFHLE1BQU0scUJBQXFCLENBQUMsR0FBRyxFQUFFLGlCQUFpQixFQUFFLEtBQUssQ0FBQyxDQUFDO0lBQy9FLElBQUksQ0FBQyxXQUFXLEVBQUUsQ0FBQztRQUNqQixPQUFPLE9BQU8sQ0FBQztJQUNqQixDQUFDO0lBRUQsTUFBTSxVQUFVLEdBQUcsV0FBVyxDQUFDLFVBQVUsQ0FBQztJQUUxQyxJQUFJLFVBQVUsQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7UUFDNUIsT0FBTyxDQUFDLElBQUksQ0FBQztZQUNYLE1BQU0sRUFBRSxpQkFBaUI7WUFDekIsUUFBUSxFQUFFO2dCQUNSLDRGQUE0RjtnQkFDNUYsVUFBVTtnQkFDVix3Q0FBd0M7Z0JBQ3hDLFlBQVk7Z0JBQ1osc0VBQXNFO2dCQUN0RSxPQUFPO2FBQ1I7U0FDRixDQUFDLENBQUM7UUFDSCxPQUFPLE9BQU8sQ0FBQztJQUNqQixDQUFDO0lBRUQsd0ZBQXdGO0lBQ3hGLHlGQUF5RjtJQUN6Riw4QkFBOEI7SUFDOUIsd0VBQXdFO0lBQ3hFLE1BQU0sVUFBVSxHQUFHLE1BQU0sT0FBTyxDQUFDLEdBQUcsQ0FBQyxVQUFVLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsZUFBZSxDQUFDLEdBQUcsRUFBRSxHQUFHLEVBQUUsTUFBTSxFQUFFLGlCQUFpQixDQUFDLE9BQU8sRUFBRSxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDakksTUFBTSxXQUFXLEdBQUcsVUFBVSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsRUFBb0MsRUFBRSxDQUFDLENBQUMsS0FBSyxTQUFTLENBQUMsQ0FBQztJQUVoRyxPQUFPLENBQUMsSUFBSSxDQUFDLEdBQUcsV0FBVyxDQUFDLENBQUM7SUFDN0IsSUFBSSxXQUFXLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQzdCLE9BQU8sQ0FBQyxJQUFJLENBQUM7WUFDWCxNQUFNLEVBQUUsaUJBQWlCO1lBQ3pCLFFBQVEsRUFBRSxDQUFDLDJCQUEyQixDQUFDO1NBQ3hDLENBQUMsQ0FBQztJQUNMLENBQUM7SUFFRCxPQUFPLE9BQU8sQ0FBQztBQUNqQixDQUFDO0FBRUQsS0FBSyxVQUFVLGVBQWUsQ0FDNUIsR0FBZSxFQUNmLE9BQTJCLEVBQzNCLFdBQW1CLEVBQ25CLEtBQXFDO0lBRXJDLElBQUksQ0FBQztRQUNILE1BQU0sSUFBSSxHQUFHLE1BQU0sR0FBRyxDQUFDLGdCQUFnQixDQUFDLEVBQUUsT0FBTyxFQUFFLFFBQVEsRUFBRSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQztRQUM5RSxNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsUUFBUSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDbkMsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO1lBQ2IsTUFBTSxLQUFLLENBQUMsK0JBQStCLFdBQVcsYUFBYSxDQUFDLENBQUM7UUFDdkUsQ0FBQztRQUNELE9BQU8sT0FBTyxDQUFDO0lBQ2pCLENBQUM7SUFBQyxPQUFPLENBQU0sRUFBRSxDQUFDO1FBQ2hCLE1BQU0sS0FBSyxDQUFDLGtEQUFrRCxDQUFDLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQztRQUMzRSxPQUFPLFNBQVMsQ0FBQztJQUNuQixDQUFDO0FBQ0gsQ0FBQztBQU9ELEtBQUssVUFBVSxxQkFBcUIsQ0FDbEMsR0FBZSxFQUNmLE9BQTJCLEVBQzNCLFdBQW1CLEVBQ25CLE1BQWMsRUFDZCxPQUFxRSxFQUNyRSxLQUFxQztJQUVyQyxJQUFJLENBQUM7UUFDSCw2R0FBNkc7UUFDN0csTUFBTSxPQUFPLEdBQUcsTUFBTSxrQkFBa0IsQ0FBQyxHQUFHLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxLQUFLLENBQUMsQ0FBQztRQUUzRSxNQUFNLFFBQVEsR0FBYSxFQUFFLENBQUM7UUFFOUIsSUFBSSxPQUFPLENBQUMsTUFBTSxHQUFHLENBQUMsRUFBRSxDQUFDO1lBQ3ZCLHlEQUF5RDtZQUN6RCxNQUFNLFNBQVMsR0FBRyxNQUFNLEdBQUcsQ0FBQyxhQUFhLENBQUMsRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQzVFLE1BQU0sSUFBSSxHQUFHLFNBQVMsQ0FBQyxLQUFLLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztZQUNsQyxJQUFJLElBQUksRUFBRSxDQUFDO2dCQUNULElBQUksSUFBSSxDQUFDLGFBQWEsRUFBRSxDQUFDO29CQUN2QixRQUFRLENBQUMsSUFBSSxDQUFDLGlCQUFpQixJQUFJLENBQUMsYUFBYSxFQUFFLENBQUMsQ0FBQztnQkFDdkQsQ0FBQztnQkFDRCxLQUFLLE1BQU0sU0FBUyxJQUFJLElBQUksQ0FBQyxVQUFVLElBQUksRUFBRSxFQUFFLENBQUM7b0JBQzlDLElBQUksU0FBUyxDQUFDLE1BQU0sRUFBRSxDQUFDO3dCQUNyQixRQUFRLENBQUMsSUFBSSxDQUFDLGNBQWMsU0FBUyxDQUFDLElBQUksTUFBTSxTQUFTLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQztvQkFDdEUsQ0FBQztvQkFDRCxJQUFJLFNBQVMsQ0FBQyxRQUFRLElBQUksSUFBSSxJQUFJLFNBQVMsQ0FBQyxRQUFRLEtBQUssQ0FBQyxFQUFFLENBQUM7d0JBQzNELFFBQVEsQ0FBQyxJQUFJLENBQUMsY0FBYyxTQUFTLENBQUMsSUFBSSxzQkFBc0IsU0FBUyxDQUFDLFFBQVEsRUFBRSxDQUFDLENBQUM7b0JBQ3hGLENBQUM7Z0JBQ0gsQ0FBQztZQUNILENBQUM7WUFDRCxJQUFJLFFBQVEsQ0FBQyxNQUFNLEdBQUcsQ0FBQyxJQUFJLE9BQU8sQ0FBQyxNQUFNLEdBQUcsQ0FBQyxFQUFFLENBQUM7Z0JBQzlDLFFBQVEsQ0FBQyxJQUFJLENBQUMsSUFBSSxPQUFPLENBQUMsTUFBTSxHQUFHLENBQUMsa0NBQWtDLENBQUMsQ0FBQztZQUMxRSxDQUFDO1FBQ0gsQ0FBQztRQUVELHNGQUFzRjtRQUN0RiwrREFBK0Q7UUFDL0QsSUFBSSxRQUFRLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQzFCLE1BQU0sWUFBWSxHQUFHLENBQUMsT0FBTyxDQUFDLE1BQU0sSUFBSSxFQUFFLENBQUM7aUJBQ3hDLElBQUksQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLEVBQUUsUUFBUSxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUM7WUFDbEgsSUFBSSxZQUFZLEVBQUUsT0FBTyxFQUFFLENBQUM7Z0JBQzFCLFFBQVEsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQ3RDLENBQUM7UUFDSCxDQUFDO1FBRUQsSUFBSSxRQUFRLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQzFCLE9BQU8sRUFBRSxPQUFPLEVBQUUsQ0FBQztRQUNyQixDQUFDO1FBRUQsT0FBTztZQUNMLE9BQU8sRUFBRTtnQkFDUCxNQUFNLEVBQUUsbUJBQW1CO2dCQUMzQixRQUFRO2dCQUNSLElBQUksRUFBRSxJQUFBLGdEQUF5QixFQUFDLE1BQU0sRUFBRSxPQUFPLElBQUksU0FBUyxFQUFFLFdBQVcsQ0FBQztnQkFDMUUsU0FBUyxFQUFFLE9BQU87YUFDbkI7WUFDRCxPQUFPO1NBQ1IsQ0FBQztJQUNKLENBQUM7SUFBQyxPQUFPLENBQU0sRUFBRSxDQUFDO1FBQ2hCLE1BQU0sS0FBSyxDQUFDLDBEQUEwRCxDQUFDLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQztRQUNuRixPQUFPLEVBQUUsT0FBTyxFQUFFLEVBQUUsRUFBRSxDQUFDO0lBQ3pCLENBQUM7QUFDSCxDQUFDO0FBRUQ7OztHQUdHO0FBQ0gsTUFBTSxpQkFBaUIsR0FBRyxDQUFDLENBQUM7QUFFNUI7Ozs7Ozs7R0FPRztBQUNILEtBQUssVUFBVSxrQkFBa0IsQ0FDL0IsR0FBZSxFQUNmLE9BQTJCLEVBQzNCLFdBQW1CLEVBQ25CLEtBQXFDO0lBRXJDLE1BQU0sS0FBSyxHQUFHLENBQUMsSUFBMEIsRUFBRSxFQUFFLENBQUMsQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxDQUFDLEVBQUUsRUFBZ0IsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQztJQUUvSCxJQUFJLElBQTBCLENBQUM7SUFDL0IsSUFBSSxDQUFDO1FBQ0gsTUFBTSxTQUFTLEdBQUcsTUFBTSxHQUFHLENBQUMsU0FBUyxDQUFDLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxhQUFhLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQztRQUMxRixJQUFJLEdBQUcsU0FBUyxDQUFDLFFBQVEsQ0FBQztRQUMxQixJQUFJLENBQUMsSUFBSSxJQUFJLElBQUksQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDL0IsTUFBTSxTQUFTLEdBQUcsTUFBTSxHQUFHLENBQUMsU0FBUyxDQUFDLEVBQUUsT0FBTyxFQUFFLGFBQWEsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDO1lBQzdFLElBQUksR0FBRyxTQUFTLENBQUMsUUFBUSxDQUFDO1FBQzVCLENBQUM7SUFDSCxDQUFDO0lBQUMsT0FBTyxDQUFNLEVBQUUsQ0FBQztRQUNoQixNQUFNLEtBQUssQ0FBQyxvREFBb0QsQ0FBQyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7UUFDN0UsT0FBTyxFQUFFLENBQUM7SUFDWixDQUFDO0lBRUQsT0FBTyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxpQkFBaUIsQ0FBQyxDQUFDO0FBQ2pELENBQUM7QUFZRCxLQUFLLFVBQVUscUJBQXFCLENBQ2xDLEdBQWUsRUFDZixpQkFBeUIsRUFDekIsS0FBcUM7SUFFckMsSUFBSSxDQUFDO1FBQ0gsTUFBTSxJQUFJLEdBQUcsTUFBTSxHQUFHLENBQUMsc0JBQXNCLENBQUMsRUFBRSxjQUFjLEVBQUUsaUJBQWlCLEVBQUUsQ0FBQyxDQUFDO1FBQ3JGLE1BQU0sVUFBVSxHQUFHLElBQUksQ0FBQyxjQUFjLEVBQUUsb0JBQW9CLElBQUksRUFBRSxDQUFDO1FBQ25FLE1BQU0sVUFBVSxHQUFvQixFQUFFLENBQUM7UUFDdkMsS0FBSyxNQUFNLFNBQVMsSUFBSSxVQUFVLEVBQUUsQ0FBQztZQUNuQyxNQUFNLFNBQVMsR0FBRyxTQUFTLENBQUMsZ0JBQWdCLENBQUM7WUFDN0MsSUFBSSxTQUFTLEVBQUUsU0FBUyxLQUFLLFNBQVMsRUFBRSxDQUFDO2dCQUN2QyxNQUFNLFFBQVEsR0FBRyxTQUFTLENBQUMsT0FBTyxFQUFFLENBQUMsZUFBZSxDQUFDLENBQUM7Z0JBQ3RELElBQUksUUFBUSxFQUFFLENBQUM7b0JBQ2IsVUFBVSxDQUFDLElBQUksQ0FBQzt3QkFDZCxRQUFRO3dCQUNSLFlBQVksRUFBRSxTQUFTLENBQUMsT0FBTyxFQUFFLENBQUMsdUJBQXVCLENBQUM7d0JBQzFELGFBQWEsRUFBRSxTQUFTLENBQUMsSUFBSTtxQkFDOUIsQ0FBQyxDQUFDO2dCQUNMLENBQUM7WUFDSCxDQUFDO1FBQ0gsQ0FBQztRQUNELE9BQU8sRUFBRSxVQUFVLEVBQUUsQ0FBQztJQUN4QixDQUFDO0lBQUMsT0FBTyxDQUFNLEVBQUUsQ0FBQztRQUNoQixNQUFNLEtBQUssQ0FBQywwREFBMEQsQ0FBQyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7UUFDbkYsT0FBTyxTQUFTLENBQUM7SUFDbkIsQ0FBQztBQUNILENBQUM7QUFFRCxLQUFLLFVBQVUsZUFBZSxDQUM1QixHQUEwQixFQUMxQixTQUF3QixFQUN4QixNQUFjLEVBQ2QsT0FBaUIsRUFDakIsS0FBcUM7SUFFckMsSUFBSSxDQUFDO1FBQ0gsaUZBQWlGO1FBQ2pGLE1BQU0sVUFBVSxHQUFHLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUM5QixNQUFNLFlBQVksR0FBRyxDQUFDLFNBQVMsQ0FBQyxZQUFZLElBQUksU0FBUyxDQUFDLGFBQWEsSUFBSSxVQUFVLENBQUM7WUFDcEYsQ0FBQyxDQUFDLEdBQUcsU0FBUyxDQUFDLFlBQVksSUFBSSxTQUFTLENBQUMsYUFBYSxJQUFJLFVBQVUsRUFBRTtZQUN0RSxDQUFDLENBQUMsU0FBUyxDQUFDO1FBRWQsTUFBTSxJQUFJLEdBQUcsTUFBTSxHQUFHLENBQUMsZUFBZSxDQUFDO1lBQ3JDLFlBQVksRUFBRSxTQUFTLENBQUMsUUFBUTtZQUNoQyxTQUFTLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxHQUFHLHNCQUFzQjtZQUM5QyxLQUFLLEVBQUUsSUFBSTtZQUNYLEdBQUcsQ0FBQyxZQUFZO2dCQUNkLENBQUMsQ0FBQyxFQUFFLGNBQWMsRUFBRSxDQUFDLFlBQVksQ0FBQyxFQUFFO2dCQUNwQyxDQUFDLENBQUMsU0FBUyxDQUFDLFlBQVksQ0FBQyxDQUFDLENBQUMsRUFBRSxtQkFBbUIsRUFBRSxTQUFTLENBQUMsWUFBWSxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztTQUNuRixDQUFDLENBQUM7UUFFSCxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsTUFBTSxJQUFJLEVBQUUsQ0FBQztRQUNqQyxJQUFJLE1BQU0sQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDeEIsTUFBTSxLQUFLLENBQUMsOENBQThDLFNBQVMsQ0FBQyxRQUFRLEdBQUcsWUFBWSxDQUFDLENBQUMsQ0FBQyxzQkFBc0IsWUFBWSxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7WUFDNUksT0FBTyxTQUFTLENBQUM7UUFDbkIsQ0FBQztRQUVELE1BQU0sUUFBUSxHQUFHLElBQUEsZ0NBQWlCLEVBQ2hDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsT0FBTyxFQUFFLE9BQU8sRUFBRSxDQUFDLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFlLEVBQUUsQ0FBQyxDQUFDLElBQUksSUFBSSxDQUFDLENBQzVFLENBQUM7UUFFRixJQUFJLE9BQU8sQ0FBQyxNQUFNLEdBQUcsQ0FBQyxFQUFFLENBQUM7WUFDdkIsUUFBUSxDQUFDLElBQUksQ0FBQyx3Q0FBd0MsT0FBTyxDQUFDLE1BQU0sR0FBRyxDQUFDLDZDQUE2QyxDQUFDLENBQUM7UUFDekgsQ0FBQztRQUVELE1BQU0sTUFBTSxHQUFHLFNBQVMsQ0FBQyxhQUFhO1lBQ3BDLENBQUMsQ0FBQyxvQkFBb0IsU0FBUyxDQUFDLFFBQVEsZ0JBQWdCLFNBQVMsQ0FBQyxhQUFhLEdBQUc7WUFDbEYsQ0FBQyxDQUFDLG9CQUFvQixTQUFTLENBQUMsUUFBUSxFQUFFLENBQUM7UUFFN0MsT0FBTztZQUNMLE1BQU07WUFDTixRQUFRO1lBQ1IsSUFBSSxFQUFFLElBQUEsdUNBQXdCLEVBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxRQUFRLENBQUM7WUFDMUQsU0FBUyxFQUFFLE1BQU07U0FDbEIsQ0FBQztJQUNKLENBQUM7SUFBQyxPQUFPLENBQU0sRUFBRSxDQUFDO1FBQ2hCLE1BQU0sS0FBSyxDQUFDLGdEQUFnRCxTQUFTLENBQUMsUUFBUSxLQUFLLENBQUMsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1FBQ2hHLE9BQU8sU0FBUyxDQUFDO0lBQ25CLENBQUM7QUFDSCxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgdHJpbVRvUmVjZW50TGluZXMsIGNsb3VkV2F0Y2hMb2dzQ29uc29sZVVybCB9IGZyb20gJy4vZm9ybWF0LXV0aWxzJztcbmltcG9ydCB7IHBhcnNlRWNzU2VydmljZUlkZW50aWZpZXIsIGVjc1N0b3BwZWRUYXNrc0NvbnNvbGVVcmwgfSBmcm9tICcuL3Jlc291cmNlLWlkZW50aWZpZXJzJztcbmltcG9ydCB0eXBlIHsgQWRkaXRpb25hbERpYWdub3N0aWNDb250ZXh0IH0gZnJvbSAnLi4vLi4vYWN0aW9ucy9kaWFnbm9zZSc7XG5pbXBvcnQgdHlwZSB7IElDbG91ZFdhdGNoTG9nc0NsaWVudCwgSUVDU0NsaWVudCwgU0RLIH0gZnJvbSAnLi4vYXdzLWF1dGgvc2RrJztcbmltcG9ydCB0eXBlIHsgUmVzb3VyY2VFcnJvciB9IGZyb20gJy4uL3N0YWNrLWV2ZW50cy9yZXNvdXJjZS1lcnJvcnMnO1xuXG4vKiogRmFsbGJhY2sgbG9vay1iYWNrIHdoZW4gbm8gZmFpbHVyZSB0aW1lc3RhbXAgaXMgYXZhaWxhYmxlLiAqL1xuY29uc3QgRkFMTEJBQ0tfTE9HX1dJTkRPV19NUyA9IDMwICogNjAgKiAxMDAwO1xuXG4vKipcbiAqIE9wdGlvbnMgdGhhdCBpbmZsdWVuY2UgaG93IGEgcmVzb3VyY2UgaXMgaW52ZXN0aWdhdGVkLlxuICovXG5leHBvcnQgaW50ZXJmYWNlIEludmVzdGlnYXRlT3B0aW9ucyB7XG4gIC8qKlxuICAgKiBXaGV0aGVyIENsb3VkRm9ybWF0aW9uIHJvbGxiYWNrIGlzIGVuYWJsZWQgZm9yIHRoaXMgZGVwbG95bWVudC5cbiAgICpcbiAgICogV2hlbiByb2xsYmFjayBpcyBlbmFibGVkLCBhIGZhaWxlZCByZXNvdXJjZSBpcyB0b3JuIGRvd24gYmVmb3JlIHdlIGNhblxuICAgKiBpbnNwZWN0IGl0cyBydW50aW1lIHN0YXRlLCBzbyB3ZSBtYXkgc3VnZ2VzdCByZS1ydW5uaW5nIHdpdGggYC0tbm8tcm9sbGJhY2tgXG4gICAqIHRvIHJldGFpbiB0aGF0IGRldGFpbC5cbiAgICpcbiAgICogQGRlZmF1bHQgdHJ1ZVxuICAgKi9cbiAgcmVhZG9ubHkgcm9sbGJhY2tFbmFibGVkPzogYm9vbGVhbjtcbn1cblxuZXhwb3J0IGFzeW5jIGZ1bmN0aW9uIGludmVzdGlnYXRlRWNzU2VydmljZShcbiAgZXJyOiBSZXNvdXJjZUVycm9yLFxuICBzZGs6IFNESyxcbiAgZGVidWc6IChtc2c6IHN0cmluZykgPT4gUHJvbWlzZTx2b2lkPixcbiAgb3B0aW9uczogSW52ZXN0aWdhdGVPcHRpb25zLFxuKTogUHJvbWlzZTxBZGRpdGlvbmFsRGlhZ25vc3RpY0NvbnRleHRbXT4ge1xuICBjb25zdCBwaHlzaWNhbElkID0gZXJyLnBoeXNpY2FsSWQ7XG4gIGlmICghcGh5c2ljYWxJZCkge1xuICAgIGF3YWl0IGRlYnVnKCdFQ1MgaW52ZXN0aWdhdGlvbjogbm8gcGh5c2ljYWwgSUQgYXZhaWxhYmxlJyk7XG4gICAgcmV0dXJuIFtdO1xuICB9XG5cbiAgY29uc3QgeyBjbHVzdGVyLCBzZXJ2aWNlTmFtZSB9ID0gcGFyc2VFY3NTZXJ2aWNlSWRlbnRpZmllcihwaHlzaWNhbElkKTtcbiAgaWYgKCFzZXJ2aWNlTmFtZSkge1xuICAgIGF3YWl0IGRlYnVnKGBFQ1MgaW52ZXN0aWdhdGlvbjogY291bGQgbm90IHBhcnNlIHNlcnZpY2UgaWRlbnRpZmllciBmcm9tIFwiJHtwaHlzaWNhbElkfVwiYCk7XG4gICAgcmV0dXJuIFtdO1xuICB9XG5cbiAgY29uc3QgcmVnaW9uID0gc2RrLmN1cnJlbnRSZWdpb247XG4gIGNvbnN0IGVjcyA9IHNkay5lY3MoKTtcbiAgY29uc3QgY3dsID0gc2RrLmNsb3VkV2F0Y2hMb2dzKCk7XG5cbiAgY29uc3Qgc2VydmljZSA9IGF3YWl0IGRlc2NyaWJlU2VydmljZShlY3MsIGNsdXN0ZXIsIHNlcnZpY2VOYW1lLCBkZWJ1Zyk7XG4gIGlmICghc2VydmljZSkge1xuICAgIC8vIFRoZSBzZXJ2aWNlIGlzIGdvbmUuIFRoZSBtb3N0IGNvbW1vbiByZWFzb24gaXMgdGhhdCBDbG91ZEZvcm1hdGlvbiByb2xsZWQgdGhlXG4gICAgLy8gZGVwbG95bWVudCBiYWNrIGFuZCBkZWxldGVkIGl0LCB0YWtpbmcgdGhlIHRhc2svcnVudGltZSBkZXRhaWwgd2l0aCBpdC4gSWYgcm9sbGJhY2tcbiAgICAvLyB3YXMgZW5hYmxlZCwgcG9pbnQgdGhlIHVzZXIgYXQgdGhlIGZsYWcgdGhhdCB3b3VsZCBoYXZlIHJldGFpbmVkIHRoYXQgZGV0YWlsLlxuICAgIGlmIChvcHRpb25zLnJvbGxiYWNrRW5hYmxlZCkge1xuICAgICAgcmV0dXJuIFt7XG4gICAgICAgIHNvdXJjZTogJ0VDUyBTZXJ2aWNlJyxcbiAgICAgICAgbWVzc2FnZXM6IFtcbiAgICAgICAgICAnVGhlIHNlcnZpY2UgYW5kIGl0cyB0YXNrcyB3ZXJlIHJlbW92ZWQgZHVyaW5nIHJvbGxiYWNrLCBzbyBjb250YWluZXItbGV2ZWwgZmFpbHVyZSBkZXRhaWwgaXMgdW5hdmFpbGFibGUuJyxcbiAgICAgICAgICAnUmUtcnVuIHRoZSBkZXBsb3ltZW50IHdpdGggYC0tbm8tcm9sbGJhY2tgIHRvIHJldGFpbiB0aGUgZmFpbGVkIHRhc2tzIGFuZCBzZWUgd2h5IHRoZXkgc3RvcHBlZC4nLFxuICAgICAgICBdLFxuICAgICAgfV07XG4gICAgfVxuICAgIHJldHVybiBbXTtcbiAgfVxuXG4gIGNvbnN0IHJlc3VsdHM6IEFkZGl0aW9uYWxEaWFnbm9zdGljQ29udGV4dFtdID0gW107XG5cbiAgY29uc3Qgc3RvcHBlZFRhc2tSZXN1bHQgPSBhd2FpdCBnZXRTdG9wcGVkVGFza1JlYXNvbnMoZWNzLCBjbHVzdGVyLCBzZXJ2aWNlTmFtZSwgcmVnaW9uLCBzZXJ2aWNlLCBkZWJ1Zyk7XG4gIGlmIChzdG9wcGVkVGFza1Jlc3VsdC5jb250ZXh0KSB7XG4gICAgcmVzdWx0cy5wdXNoKHN0b3BwZWRUYXNrUmVzdWx0LmNvbnRleHQpO1xuICB9XG5cbiAgY29uc3QgdGFza0RlZmluaXRpb25Bcm4gPSBzZXJ2aWNlLnRhc2tEZWZpbml0aW9uO1xuICBpZiAoIXRhc2tEZWZpbml0aW9uQXJuKSB7XG4gICAgcmV0dXJuIHJlc3VsdHM7XG4gIH1cblxuICBjb25zdCB0YXNrRGVmSW5mbyA9IGF3YWl0IGdldFRhc2tEZWZpbml0aW9uSW5mbyhlY3MsIHRhc2tEZWZpbml0aW9uQXJuLCBkZWJ1Zyk7XG4gIGlmICghdGFza0RlZkluZm8pIHtcbiAgICByZXR1cm4gcmVzdWx0cztcbiAgfVxuXG4gIGNvbnN0IGxvZ0NvbmZpZ3MgPSB0YXNrRGVmSW5mby5sb2dDb25maWdzO1xuXG4gIGlmIChsb2dDb25maWdzLmxlbmd0aCA9PT0gMCkge1xuICAgIHJlc3VsdHMucHVzaCh7XG4gICAgICBzb3VyY2U6ICdDbG91ZFdhdGNoIExvZ3MnLFxuICAgICAgbWVzc2FnZXM6IFtcbiAgICAgICAgJ05vIENsb3VkV2F0Y2ggTG9ncyBjb25maWd1cmF0aW9uIGZvdW5kLiBFbmFibGUgbG9nZ2luZyB0byBzZWUgY29udGFpbmVyIG91dHB1dCBvbiBmYWlsdXJlLicsXG4gICAgICAgICdFeGFtcGxlOicsXG4gICAgICAgICcgIHRhc2tEZWZpbml0aW9uLmFkZENvbnRhaW5lcihcImFwcFwiLCB7JyxcbiAgICAgICAgJyAgICAvLyAuLi4nLFxuICAgICAgICAnICAgIGxvZ2dpbmc6IGVjcy5Mb2dEcml2ZXJzLmF3c0xvZ3MoeyBzdHJlYW1QcmVmaXg6IFwibXktc2VydmljZVwiIH0pLCcsXG4gICAgICAgICcgIH0pOycsXG4gICAgICBdLFxuICAgIH0pO1xuICAgIHJldHVybiByZXN1bHRzO1xuICB9XG5cbiAgLy8gYGxvZ0NvbmZpZ3NgIGhhcyBvbmUgZW50cnkgcGVyIGNvbnRhaW5lciBpbiB0aGUgdGFzayBkZWZpbml0aW9uIHRoYXQgdXNlcyB0aGUgYXdzbG9nc1xuICAvLyBkcml2ZXIg4oCUIGEgaGFuZGZ1bCBhdCBtb3N0IOKAlCBzbyB0aGlzIGZhbi1vdXQgaXMgYm91bmRlZCBieSB0aGUgdGFzayBzaGFwZSBhbmQgbmVlZHMgbm9cbiAgLy8gZXhwbGljaXQgY29uY3VycmVuY3kgbGltaXQuXG4gIC8vIGVzbGludC1kaXNhYmxlLW5leHQtbGluZSBAY2RrbGFicy9wcm9taXNlYWxsLW5vLXVuYm91bmRlZC1wYXJhbGxlbGlzbVxuICBjb25zdCBsb2dSZXN1bHRzID0gYXdhaXQgUHJvbWlzZS5hbGwobG9nQ29uZmlncy5tYXAoY2ZnID0+IGZldGNoUmVjZW50TG9ncyhjd2wsIGNmZywgcmVnaW9uLCBzdG9wcGVkVGFza1Jlc3VsdC50YXNrSWRzLCBkZWJ1ZykpKTtcbiAgY29uc3QgbG9nQ29udGV4dHMgPSBsb2dSZXN1bHRzLmZpbHRlcigoYyk6IGMgaXMgQWRkaXRpb25hbERpYWdub3N0aWNDb250ZXh0ID0+IGMgIT09IHVuZGVmaW5lZCk7XG5cbiAgcmVzdWx0cy5wdXNoKC4uLmxvZ0NvbnRleHRzKTtcbiAgaWYgKGxvZ0NvbnRleHRzLmxlbmd0aCA9PT0gMCkge1xuICAgIHJlc3VsdHMucHVzaCh7XG4gICAgICBzb3VyY2U6ICdDbG91ZFdhdGNoIExvZ3MnLFxuICAgICAgbWVzc2FnZXM6IFsnTm8gQ2xvdWRXYXRjaCBMb2dzIGZvdW5kLiddLFxuICAgIH0pO1xuICB9XG5cbiAgcmV0dXJuIHJlc3VsdHM7XG59XG5cbmFzeW5jIGZ1bmN0aW9uIGRlc2NyaWJlU2VydmljZShcbiAgZWNzOiBJRUNTQ2xpZW50LFxuICBjbHVzdGVyOiBzdHJpbmcgfCB1bmRlZmluZWQsXG4gIHNlcnZpY2VOYW1lOiBzdHJpbmcsXG4gIGRlYnVnOiAobXNnOiBzdHJpbmcpID0+IFByb21pc2U8dm9pZD4sXG4pIHtcbiAgdHJ5IHtcbiAgICBjb25zdCByZXNwID0gYXdhaXQgZWNzLmRlc2NyaWJlU2VydmljZXMoeyBjbHVzdGVyLCBzZXJ2aWNlczogW3NlcnZpY2VOYW1lXSB9KTtcbiAgICBjb25zdCBzZXJ2aWNlID0gcmVzcC5zZXJ2aWNlcz8uWzBdO1xuICAgIGlmICghc2VydmljZSkge1xuICAgICAgYXdhaXQgZGVidWcoYEVDUyBpbnZlc3RpZ2F0aW9uOiBzZXJ2aWNlIFwiJHtzZXJ2aWNlTmFtZX1cIiBub3QgZm91bmRgKTtcbiAgICB9XG4gICAgcmV0dXJuIHNlcnZpY2U7XG4gIH0gY2F0Y2ggKGU6IGFueSkge1xuICAgIGF3YWl0IGRlYnVnKGBFQ1MgaW52ZXN0aWdhdGlvbjogZmFpbGVkIHRvIGRlc2NyaWJlIHNlcnZpY2U6ICR7ZS5tZXNzYWdlfWApO1xuICAgIHJldHVybiB1bmRlZmluZWQ7XG4gIH1cbn1cblxuaW50ZXJmYWNlIFN0b3BwZWRUYXNrUmVzdWx0IHtcbiAgY29udGV4dD86IEFkZGl0aW9uYWxEaWFnbm9zdGljQ29udGV4dDtcbiAgdGFza0lkczogc3RyaW5nW107XG59XG5cbmFzeW5jIGZ1bmN0aW9uIGdldFN0b3BwZWRUYXNrUmVhc29ucyhcbiAgZWNzOiBJRUNTQ2xpZW50LFxuICBjbHVzdGVyOiBzdHJpbmcgfCB1bmRlZmluZWQsXG4gIHNlcnZpY2VOYW1lOiBzdHJpbmcsXG4gIHJlZ2lvbjogc3RyaW5nLFxuICBzZXJ2aWNlOiB7IGV2ZW50cz86IEFycmF5PHsgbWVzc2FnZT86IHN0cmluZyB9PjsgW2tleTogc3RyaW5nXTogYW55IH0sXG4gIGRlYnVnOiAobXNnOiBzdHJpbmcpID0+IFByb21pc2U8dm9pZD4sXG4pOiBQcm9taXNlPFN0b3BwZWRUYXNrUmVzdWx0PiB7XG4gIHRyeSB7XG4gICAgLy8gQXNrIEVDUyBmb3IgdGhlIHNlcnZpY2UncyBzdG9wcGVkIHRhc2tzLiBUaGUgSURzIHdlIG5lZWQgbGl2ZSBpbiBcImhhcyBzdGFydGVkIDEgdGFza3M6ICh0YXNrIDxpZD4pXCIgZXZlbnRzXG4gICAgY29uc3QgdGFza0lkcyA9IGF3YWl0IGxpc3RTdG9wcGVkVGFza0lkcyhlY3MsIGNsdXN0ZXIsIHNlcnZpY2VOYW1lLCBkZWJ1Zyk7XG5cbiAgICBjb25zdCBtZXNzYWdlczogc3RyaW5nW10gPSBbXTtcblxuICAgIGlmICh0YXNrSWRzLmxlbmd0aCA+IDApIHtcbiAgICAgIC8vIFNob3cgZGV0YWlscyBmcm9tIHRoZSBtb3N0IHJlY2VudGx5IHN0b3BwZWQgdGFzayBvbmx5LlxuICAgICAgY29uc3QgdGFza3NSZXNwID0gYXdhaXQgZWNzLmRlc2NyaWJlVGFza3MoeyBjbHVzdGVyLCB0YXNrczogW3Rhc2tJZHNbMF1dIH0pO1xuICAgICAgY29uc3QgdGFzayA9IHRhc2tzUmVzcC50YXNrcz8uWzBdO1xuICAgICAgaWYgKHRhc2spIHtcbiAgICAgICAgaWYgKHRhc2suc3RvcHBlZFJlYXNvbikge1xuICAgICAgICAgIG1lc3NhZ2VzLnB1c2goYFRhc2sgc3RvcHBlZDogJHt0YXNrLnN0b3BwZWRSZWFzb259YCk7XG4gICAgICAgIH1cbiAgICAgICAgZm9yIChjb25zdCBjb250YWluZXIgb2YgdGFzay5jb250YWluZXJzID8/IFtdKSB7XG4gICAgICAgICAgaWYgKGNvbnRhaW5lci5yZWFzb24pIHtcbiAgICAgICAgICAgIG1lc3NhZ2VzLnB1c2goYENvbnRhaW5lciBcIiR7Y29udGFpbmVyLm5hbWV9XCI6ICR7Y29udGFpbmVyLnJlYXNvbn1gKTtcbiAgICAgICAgICB9XG4gICAgICAgICAgaWYgKGNvbnRhaW5lci5leGl0Q29kZSAhPSBudWxsICYmIGNvbnRhaW5lci5leGl0Q29kZSAhPT0gMCkge1xuICAgICAgICAgICAgbWVzc2FnZXMucHVzaChgQ29udGFpbmVyIFwiJHtjb250YWluZXIubmFtZX1cIiBleGl0ZWQgd2l0aCBjb2RlICR7Y29udGFpbmVyLmV4aXRDb2RlfWApO1xuICAgICAgICAgIH1cbiAgICAgICAgfVxuICAgICAgfVxuICAgICAgaWYgKG1lc3NhZ2VzLmxlbmd0aCA+IDAgJiYgdGFza0lkcy5sZW5ndGggPiAxKSB7XG4gICAgICAgIG1lc3NhZ2VzLnB1c2goYCgke3Rhc2tJZHMubGVuZ3RoIC0gMX0gb3RoZXIgZmFpbGVkIHRhc2socykgbm90IHNob3duKWApO1xuICAgICAgfVxuICAgIH1cblxuICAgIC8vIEZhbGwgYmFjayB0byB0aGUgbW9zdCByZWxldmFudCBzZXJ2aWNlIGV2ZW50IGlmIHdlIGNvdWxkbid0IGdldCBhIHRhc2stbGV2ZWwgcmVhc29uXG4gICAgLy8gKGUuZy4gdGFza3MgYWxyZWFkeSBhZ2VkIG91dCwgb3Igbm8gc3RvcHBlZCB0YXNrcyByZXRhaW5lZCkuXG4gICAgaWYgKG1lc3NhZ2VzLmxlbmd0aCA9PT0gMCkge1xuICAgICAgY29uc3QgZmFpbHVyZUV2ZW50ID0gKHNlcnZpY2UuZXZlbnRzID8/IFtdKVxuICAgICAgICAuZmluZChlID0+IGUubWVzc2FnZT8uaW5jbHVkZXMoJ3N0b3BwZWQnKSB8fCBlLm1lc3NhZ2U/LmluY2x1ZGVzKCdmYWlsZWQnKSB8fCBlLm1lc3NhZ2U/LmluY2x1ZGVzKCd1bmhlYWx0aHknKSk7XG4gICAgICBpZiAoZmFpbHVyZUV2ZW50Py5tZXNzYWdlKSB7XG4gICAgICAgIG1lc3NhZ2VzLnB1c2goZmFpbHVyZUV2ZW50Lm1lc3NhZ2UpO1xuICAgICAgfVxuICAgIH1cblxuICAgIGlmIChtZXNzYWdlcy5sZW5ndGggPT09IDApIHtcbiAgICAgIHJldHVybiB7IHRhc2tJZHMgfTtcbiAgICB9XG5cbiAgICByZXR1cm4ge1xuICAgICAgY29udGV4dDoge1xuICAgICAgICBzb3VyY2U6ICdFQ1MgU3RvcHBlZCBUYXNrcycsXG4gICAgICAgIG1lc3NhZ2VzLFxuICAgICAgICBsaW5rOiBlY3NTdG9wcGVkVGFza3NDb25zb2xlVXJsKHJlZ2lvbiwgY2x1c3RlciA/PyAnZGVmYXVsdCcsIHNlcnZpY2VOYW1lKSxcbiAgICAgICAgbGlua0xhYmVsOiAnVGFza3MnLFxuICAgICAgfSxcbiAgICAgIHRhc2tJZHMsXG4gICAgfTtcbiAgfSBjYXRjaCAoZTogYW55KSB7XG4gICAgYXdhaXQgZGVidWcoYEVDUyBpbnZlc3RpZ2F0aW9uOiBmYWlsZWQgdG8gZ2V0IHN0b3BwZWQgdGFzayByZWFzb25zOiAke2UubWVzc2FnZX1gKTtcbiAgICByZXR1cm4geyB0YXNrSWRzOiBbXSB9O1xuICB9XG59XG5cbi8qKlxuICogTWF4aW11bSBudW1iZXIgb2Ygc3RvcHBlZCB0YXNrIElEcyB0byBjb25zaWRlci4gV2Ugb25seSByZW5kZXIgZGV0YWlsIGZvciB0aGUgbW9zdFxuICogcmVjZW50IG9uZSwgYnV0IGtlZXAgYSBmZXcgc28gd2UgY2FuIHJlcG9ydCBob3cgbWFueSBvdGhlcnMgZmFpbGVkLlxuICovXG5jb25zdCBNQVhfU1RPUFBFRF9UQVNLUyA9IDM7XG5cbi8qKlxuICogTGlzdCB0aGUgYmFyZSB0YXNrIElEcyBvZiB0aGUgc2VydmljZSdzIHN0b3BwZWQgdGFza3MsIG5ld2VzdCBmaXJzdC5cbiAqXG4gKiBQcmVmZXJzIHNjb3BpbmcgYnkgc2VydmljZSBuYW1lOyBpZiB0aGF0IHlpZWxkcyBub3RoaW5nIChzb21lIEVDUyBBUEkgdmVyc2lvbnMgb25seVxuICogYXBwbHkgdGhlIHNlcnZpY2UgZmlsdGVyIHRvIHJ1bm5pbmcgdGFza3MpLCBmYWxscyBiYWNrIHRvIGxpc3RpbmcgdGhlIGNsdXN0ZXIncyBzdG9wcGVkXG4gKiB0YXNrcy4gUmV0dXJucyBhbiBlbXB0eSBhcnJheSBpZiBub25lIGFyZSByZXRhaW5lZCAoZS5nLiB0aGV5IGFnZWQgb3V0LCBvciByb2xsYmFja1xuICogYWxyZWFkeSBkcmFpbmVkIHRoZSBjbHVzdGVyKS5cbiAqL1xuYXN5bmMgZnVuY3Rpb24gbGlzdFN0b3BwZWRUYXNrSWRzKFxuICBlY3M6IElFQ1NDbGllbnQsXG4gIGNsdXN0ZXI6IHN0cmluZyB8IHVuZGVmaW5lZCxcbiAgc2VydmljZU5hbWU6IHN0cmluZyxcbiAgZGVidWc6IChtc2c6IHN0cmluZykgPT4gUHJvbWlzZTx2b2lkPixcbik6IFByb21pc2U8c3RyaW5nW10+IHtcbiAgY29uc3QgdG9JZHMgPSAoYXJuczogc3RyaW5nW10gfCB1bmRlZmluZWQpID0+IChhcm5zID8/IFtdKS5tYXAoYXJuID0+IGFybi5zcGxpdCgnLycpLnBvcCgpKS5maWx0ZXIoKGlkKTogaWQgaXMgc3RyaW5nID0+ICEhaWQpO1xuXG4gIGxldCBhcm5zOiBzdHJpbmdbXSB8IHVuZGVmaW5lZDtcbiAgdHJ5IHtcbiAgICBjb25zdCBieVNlcnZpY2UgPSBhd2FpdCBlY3MubGlzdFRhc2tzKHsgY2x1c3Rlciwgc2VydmljZU5hbWUsIGRlc2lyZWRTdGF0dXM6ICdTVE9QUEVEJyB9KTtcbiAgICBhcm5zID0gYnlTZXJ2aWNlLnRhc2tBcm5zO1xuICAgIGlmICghYXJucyB8fCBhcm5zLmxlbmd0aCA9PT0gMCkge1xuICAgICAgY29uc3QgYnlDbHVzdGVyID0gYXdhaXQgZWNzLmxpc3RUYXNrcyh7IGNsdXN0ZXIsIGRlc2lyZWRTdGF0dXM6ICdTVE9QUEVEJyB9KTtcbiAgICAgIGFybnMgPSBieUNsdXN0ZXIudGFza0FybnM7XG4gICAgfVxuICB9IGNhdGNoIChlOiBhbnkpIHtcbiAgICBhd2FpdCBkZWJ1ZyhgRUNTIGludmVzdGlnYXRpb246IGZhaWxlZCB0byBsaXN0IHN0b3BwZWQgdGFza3M6ICR7ZS5tZXNzYWdlfWApO1xuICAgIHJldHVybiBbXTtcbiAgfVxuXG4gIHJldHVybiB0b0lkcyhhcm5zKS5zbGljZSgwLCBNQVhfU1RPUFBFRF9UQVNLUyk7XG59XG5cbmludGVyZmFjZSBBd3NMb2dzQ29uZmlnIHtcbiAgbG9nR3JvdXA6IHN0cmluZztcbiAgc3RyZWFtUHJlZml4Pzogc3RyaW5nO1xuICBjb250YWluZXJOYW1lPzogc3RyaW5nO1xufVxuXG5pbnRlcmZhY2UgVGFza0RlZmluaXRpb25JbmZvIHtcbiAgbG9nQ29uZmlnczogQXdzTG9nc0NvbmZpZ1tdO1xufVxuXG5hc3luYyBmdW5jdGlvbiBnZXRUYXNrRGVmaW5pdGlvbkluZm8oXG4gIGVjczogSUVDU0NsaWVudCxcbiAgdGFza0RlZmluaXRpb25Bcm46IHN0cmluZyxcbiAgZGVidWc6IChtc2c6IHN0cmluZykgPT4gUHJvbWlzZTx2b2lkPixcbik6IFByb21pc2U8VGFza0RlZmluaXRpb25JbmZvIHwgdW5kZWZpbmVkPiB7XG4gIHRyeSB7XG4gICAgY29uc3QgcmVzcCA9IGF3YWl0IGVjcy5kZXNjcmliZVRhc2tEZWZpbml0aW9uKHsgdGFza0RlZmluaXRpb246IHRhc2tEZWZpbml0aW9uQXJuIH0pO1xuICAgIGNvbnN0IGNvbnRhaW5lcnMgPSByZXNwLnRhc2tEZWZpbml0aW9uPy5jb250YWluZXJEZWZpbml0aW9ucyA/PyBbXTtcbiAgICBjb25zdCBsb2dDb25maWdzOiBBd3NMb2dzQ29uZmlnW10gPSBbXTtcbiAgICBmb3IgKGNvbnN0IGNvbnRhaW5lciBvZiBjb250YWluZXJzKSB7XG4gICAgICBjb25zdCBsb2dDb25maWcgPSBjb250YWluZXIubG9nQ29uZmlndXJhdGlvbjtcbiAgICAgIGlmIChsb2dDb25maWc/LmxvZ0RyaXZlciA9PT0gJ2F3c2xvZ3MnKSB7XG4gICAgICAgIGNvbnN0IGxvZ0dyb3VwID0gbG9nQ29uZmlnLm9wdGlvbnM/LlsnYXdzbG9ncy1ncm91cCddO1xuICAgICAgICBpZiAobG9nR3JvdXApIHtcbiAgICAgICAgICBsb2dDb25maWdzLnB1c2goe1xuICAgICAgICAgICAgbG9nR3JvdXAsXG4gICAgICAgICAgICBzdHJlYW1QcmVmaXg6IGxvZ0NvbmZpZy5vcHRpb25zPy5bJ2F3c2xvZ3Mtc3RyZWFtLXByZWZpeCddLFxuICAgICAgICAgICAgY29udGFpbmVyTmFtZTogY29udGFpbmVyLm5hbWUsXG4gICAgICAgICAgfSk7XG4gICAgICAgIH1cbiAgICAgIH1cbiAgICB9XG4gICAgcmV0dXJuIHsgbG9nQ29uZmlncyB9O1xuICB9IGNhdGNoIChlOiBhbnkpIHtcbiAgICBhd2FpdCBkZWJ1ZyhgRUNTIGludmVzdGlnYXRpb246IGZhaWxlZCB0byBkZXNjcmliZSB0YXNrIGRlZmluaXRpb246ICR7ZS5tZXNzYWdlfWApO1xuICAgIHJldHVybiB1bmRlZmluZWQ7XG4gIH1cbn1cblxuYXN5bmMgZnVuY3Rpb24gZmV0Y2hSZWNlbnRMb2dzKFxuICBjd2w6IElDbG91ZFdhdGNoTG9nc0NsaWVudCxcbiAgbG9nQ29uZmlnOiBBd3NMb2dzQ29uZmlnLFxuICByZWdpb246IHN0cmluZyxcbiAgdGFza0lkczogc3RyaW5nW10sXG4gIGRlYnVnOiAobXNnOiBzdHJpbmcpID0+IFByb21pc2U8dm9pZD4sXG4pOiBQcm9taXNlPEFkZGl0aW9uYWxEaWFnbm9zdGljQ29udGV4dCB8IHVuZGVmaW5lZD4ge1xuICB0cnkge1xuICAgIC8vIFRhcmdldCB0aGUgbW9zdCByZWNlbnRseSBmYWlsZWQgdGFzaydzIGxvZyBzdHJlYW0gZm9yIHRoZSBtb3N0IHJlbGV2YW50IG91dHB1dFxuICAgIGNvbnN0IGxhc3RUYXNrSWQgPSB0YXNrSWRzWzBdO1xuICAgIGNvbnN0IHRhcmdldFN0cmVhbSA9IChsb2dDb25maWcuc3RyZWFtUHJlZml4ICYmIGxvZ0NvbmZpZy5jb250YWluZXJOYW1lICYmIGxhc3RUYXNrSWQpXG4gICAgICA/IGAke2xvZ0NvbmZpZy5zdHJlYW1QcmVmaXh9LyR7bG9nQ29uZmlnLmNvbnRhaW5lck5hbWV9LyR7bGFzdFRhc2tJZH1gXG4gICAgICA6IHVuZGVmaW5lZDtcblxuICAgIGNvbnN0IHJlc3AgPSBhd2FpdCBjd2wuZmlsdGVyTG9nRXZlbnRzKHtcbiAgICAgIGxvZ0dyb3VwTmFtZTogbG9nQ29uZmlnLmxvZ0dyb3VwLFxuICAgICAgc3RhcnRUaW1lOiBEYXRlLm5vdygpIC0gRkFMTEJBQ0tfTE9HX1dJTkRPV19NUyxcbiAgICAgIGxpbWl0OiAxMDAwLFxuICAgICAgLi4uKHRhcmdldFN0cmVhbVxuICAgICAgICA/IHsgbG9nU3RyZWFtTmFtZXM6IFt0YXJnZXRTdHJlYW1dIH1cbiAgICAgICAgOiBsb2dDb25maWcuc3RyZWFtUHJlZml4ID8geyBsb2dTdHJlYW1OYW1lUHJlZml4OiBsb2dDb25maWcuc3RyZWFtUHJlZml4IH0gOiB7fSksXG4gICAgfSk7XG5cbiAgICBjb25zdCBldmVudHMgPSByZXNwLmV2ZW50cyA/PyBbXTtcbiAgICBpZiAoZXZlbnRzLmxlbmd0aCA9PT0gMCkge1xuICAgICAgYXdhaXQgZGVidWcoYEVDUyBpbnZlc3RpZ2F0aW9uOiBubyByZWNlbnQgbG9nIGV2ZW50cyBpbiAke2xvZ0NvbmZpZy5sb2dHcm91cH0ke3RhcmdldFN0cmVhbSA/IGAgKHRhcmdldGVkIHN0cmVhbTogJHt0YXJnZXRTdHJlYW19KWAgOiAnJ31gKTtcbiAgICAgIHJldHVybiB1bmRlZmluZWQ7XG4gICAgfVxuXG4gICAgY29uc3QgbWVzc2FnZXMgPSB0cmltVG9SZWNlbnRMaW5lcyhcbiAgICAgIGV2ZW50cy5tYXAoZSA9PiBlLm1lc3NhZ2U/LnRyaW1FbmQoKSkuZmlsdGVyKChtKTogbSBpcyBzdHJpbmcgPT4gbSAhPSBudWxsKSxcbiAgICApO1xuXG4gICAgaWYgKHRhc2tJZHMubGVuZ3RoID4gMSkge1xuICAgICAgbWVzc2FnZXMucHVzaChgKHNob3dpbmcgbG9ncyBmcm9tIGxhc3QgZmFpbGVkIHRhc2s7ICR7dGFza0lkcy5sZW5ndGggLSAxfSBvdGhlciBmYWlsZWQgdGFzayhzKSBhdmFpbGFibGUgaW4gY29uc29sZSlgKTtcbiAgICB9XG5cbiAgICBjb25zdCBzb3VyY2UgPSBsb2dDb25maWcuY29udGFpbmVyTmFtZVxuICAgICAgPyBgQ2xvdWRXYXRjaCBMb2dzOiAke2xvZ0NvbmZpZy5sb2dHcm91cH0gKGNvbnRhaW5lcjogJHtsb2dDb25maWcuY29udGFpbmVyTmFtZX0pYFxuICAgICAgOiBgQ2xvdWRXYXRjaCBMb2dzOiAke2xvZ0NvbmZpZy5sb2dHcm91cH1gO1xuXG4gICAgcmV0dXJuIHtcbiAgICAgIHNvdXJjZSxcbiAgICAgIG1lc3NhZ2VzLFxuICAgICAgbGluazogY2xvdWRXYXRjaExvZ3NDb25zb2xlVXJsKHJlZ2lvbiwgbG9nQ29uZmlnLmxvZ0dyb3VwKSxcbiAgICAgIGxpbmtMYWJlbDogJ0xvZ3MnLFxuICAgIH07XG4gIH0gY2F0Y2ggKGU6IGFueSkge1xuICAgIGF3YWl0IGRlYnVnKGBFQ1MgaW52ZXN0aWdhdGlvbjogZmFpbGVkIHRvIGZldGNoIGxvZ3MgZnJvbSAke2xvZ0NvbmZpZy5sb2dHcm91cH06ICR7ZS5tZXNzYWdlfWApO1xuICAgIHJldHVybiB1bmRlZmluZWQ7XG4gIH1cbn1cbiJdfQ==

package/lib/api/diagnosing/resource-identifiers.d.ts

@@ -0,0 +1,39 @@
+/** Pure parsers for resource identifiers used during failure diagnosis. */
+/**
+ * Parse an ECS service physical resource ID into cluster and service identifiers.
+ *
+ * The cluster portion is a name (not an ARN) — `describeServices`/`describeTasks`
+ * accept either form for their `cluster` parameter, so this is fine downstream.
+ *
+ * Recognized formats:
+ * - Long ARN: `arn:aws:ecs:region:account:service/cluster-name/service-name` (current default)
+ * - Path: `cluster-name/service-name`
+ * - Bare service name (uses the default cluster)
+ */
+export declare function parseEcsServiceIdentifier(physicalId: string): {
+    cluster?: string;
+    serviceName?: string;
+};
+/**
+ * If a ServiceToken is an `Fn::GetAtt` or `Ref` intrinsic, return the referenced logical ID.
+ */
+export declare function serviceTokenReferencedLogicalId(serviceToken: any): string | undefined;
+/**
+ * Extract a Lambda function name from a function ARN or a bare name.
+ *
+ * Returns `undefined` for non-Lambda ARNs (e.g. an SNS-topic ServiceToken).
+ */
+export declare function functionNameFromArnOrName(arnOrName: string): string | undefined;
+/**
+ * Extract the log stream name out of a cfn-response failure reason
+ * ("See the details in CloudWatch Log Stream: <name>").
+ */
+export declare function extractLogStreamName(message: string | undefined): string | undefined;
+/**
+ * cfn-response defaults the physical ID to the log stream name. Use it only when it looks
+ * like a Lambda log stream (`YYYY/MM/DD/...`), so a user-provided physical ID isn't mistaken
+ * for one.
+ */
+export declare function logStreamNameFromPhysicalId(physicalId: string | undefined): string | undefined;
+export declare function ecsStoppedTasksConsoleUrl(region: string, cluster: string, serviceName: string): string;
+//# sourceMappingURL=resource-identifiers.d.ts.map

package/lib/api/diagnosing/resource-identifiers.js

@@ -0,0 +1,90 @@
+"use strict";
+/** Pure parsers for resource identifiers used during failure diagnosis. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseEcsServiceIdentifier = parseEcsServiceIdentifier;
+exports.serviceTokenReferencedLogicalId = serviceTokenReferencedLogicalId;
+exports.functionNameFromArnOrName = functionNameFromArnOrName;
+exports.extractLogStreamName = extractLogStreamName;
+exports.logStreamNameFromPhysicalId = logStreamNameFromPhysicalId;
+exports.ecsStoppedTasksConsoleUrl = ecsStoppedTasksConsoleUrl;
+/**
+ * Parse an ECS service physical resource ID into cluster and service identifiers.
+ *
+ * The cluster portion is a name (not an ARN) — `describeServices`/`describeTasks`
+ * accept either form for their `cluster` parameter, so this is fine downstream.
+ *
+ * Recognized formats:
+ * - Long ARN: `arn:aws:ecs:region:account:service/cluster-name/service-name` (current default)
+ * - Path: `cluster-name/service-name`
+ * - Bare service name (uses the default cluster)
+ */
+function parseEcsServiceIdentifier(physicalId) {
+    const arnMatch = physicalId.match(/^arn:[^:]+:ecs:[^:]*:[^:]*:service\/([^/]+)\/([^/]+)$/);
+    if (arnMatch) {
+        return { cluster: arnMatch[1], serviceName: arnMatch[2] };
+    }
+    const parts = physicalId.split('/');
+    if (parts.length === 2 && parts[0] && parts[1]) {
+        return { cluster: parts[0], serviceName: parts[1] };
+    }
+    if (parts.length === 1 && parts[0]) {
+        return { serviceName: parts[0] };
+    }
+    return {};
+}
+/**
+ * If a ServiceToken is an `Fn::GetAtt` or `Ref` intrinsic, return the referenced logical ID.
+ */
+function serviceTokenReferencedLogicalId(serviceToken) {
+    if (!serviceToken || typeof serviceToken !== 'object') {
+        return undefined;
+    }
+    const getAtt = serviceToken['Fn::GetAtt'];
+    // Array form (JSON / CDK output): ["LogicalId", "Arn"].
+    if (Array.isArray(getAtt) && typeof getAtt[0] === 'string') {
+        return getAtt[0];
+    }
+    // String short-form (how YAML `!GetAtt LogicalId.Arn` deserializes): "LogicalId.Attr".
+    if (typeof getAtt === 'string') {
+        return getAtt.split('.')[0] || undefined;
+    }
+    if (typeof serviceToken.Ref === 'string') {
+        return serviceToken.Ref;
+    }
+    return undefined;
+}
+/**
+ * Extract a Lambda function name from a function ARN or a bare name.
+ *
+ * Returns `undefined` for non-Lambda ARNs (e.g. an SNS-topic ServiceToken).
+ */
+function functionNameFromArnOrName(arnOrName) {
+    const arnMatch = arnOrName.match(/^arn:[^:]+:lambda:[^:]*:[^:]*:function:([^:]+)/);
+    if (arnMatch) {
+        return arnMatch[1];
+    }
+    if (arnOrName.startsWith('arn:')) {
+        return undefined;
+    }
+    return arnOrName || undefined;
+}
+/**
+ * Extract the log stream name out of a cfn-response failure reason
+ * ("See the details in CloudWatch Log Stream: <name>").
+ */
+function extractLogStreamName(message) {
+    const match = message?.match(/CloudWatch Log Stream:\s*(\S+)/);
+    return match ? match[1] : undefined;
+}
+/**
+ * cfn-response defaults the physical ID to the log stream name. Use it only when it looks
+ * like a Lambda log stream (`YYYY/MM/DD/...`), so a user-provided physical ID isn't mistaken
+ * for one.
+ */
+function logStreamNameFromPhysicalId(physicalId) {
+    return physicalId && /^\d{4}\/\d{2}\/\d{2}\/.+/.test(physicalId) ? physicalId : undefined;
+}
+function ecsStoppedTasksConsoleUrl(region, cluster, serviceName) {
+    return `https://${region}.console.aws.amazon.com/ecs/v2/clusters/${cluster}/services/${serviceName}/tasks?status=STOPPED&region=${region}`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/api/diagnosing/resource-investigation.d.ts

@@ -0,0 +1,13 @@
+import { type InvestigateOptions } from './investigate-ecs-service';
+import type { AdditionalDiagnosticContext } from '../../actions/diagnose';
+import type { SDK } from '../aws-auth/sdk';
+import type { ResourceError } from '../stack-events/resource-errors';
+export type { InvestigateOptions };
+/**
+ * Investigate a failed resource using AWS service APIs to gather additional root cause context.
+ *
+ * Returns additional diagnostic context (e.g. log lines) or an empty array if
+ * investigation is not possible or yields no results for this resource type.
+ */
+export declare function investigateResource(err: ResourceError, sdk: SDK, debug: (msg: string) => Promise<void>, options?: InvestigateOptions): Promise<AdditionalDiagnosticContext[]>;
+//# sourceMappingURL=resource-investigation.d.ts.map

package/lib/api/diagnosing/resource-investigation.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.investigateResource = investigateResource;
+const investigate_custom_resource_1 = require("./investigate-custom-resource");
+const investigate_ecs_service_1 = require("./investigate-ecs-service");
+/**
+ * Investigate a failed resource using AWS service APIs to gather additional root cause context.
+ *
+ * Returns additional diagnostic context (e.g. log lines) or an empty array if
+ * investigation is not possible or yields no results for this resource type.
+ */
+async function investigateResource(err, sdk, debug, options = {}) {
+    const resourceType = err.resourceType ?? '';
+    if (resourceType === 'AWS::ECS::Service') {
+        return (0, investigate_ecs_service_1.investigateEcsService)(err, sdk, debug, options);
+    }
+    if (resourceType === 'AWS::CloudFormation::CustomResource' || resourceType.startsWith('Custom::')) {
+        return (0, investigate_custom_resource_1.investigateCustomResource)(err, sdk, debug);
+    }
+    return [];
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/api/diagnosing/stack-diagnoser.d.ts

@@ -11,7 +11,21 @@ export interface CloudFormationStackDiagnoserProps {
     readonly sourceTracer: ISourceTracer;
     readonly ioHelper: IoHelper;
     readonly topLevelStackHierarchicalId: string;
+    /**
+     * Optionally: a function to return an SDK that can be used for additional
+     * (readonly) exploratory calls.
+     *
+     * Typically, this should be an SDK that is primed with the "lookup" role, or similar.
+     *
+     * This is necessary because the "deploy" role will not typically have permissions to
+     * do very much.
+     *
+     * Regardless, if lookups of additional information fail, they are emitted at debug
+     * level and their information is simply not added to the output.
+     */
+    readonly additionalExplorationSdkProvider?: SdkProvider;
 }
+export type SdkProvider = () => Promise<SDK>;
 /**
  * Diagnose a stack's failed state
  *
@@ -25,10 +39,27 @@ export interface CloudFormationStackDiagnoserProps {
  * This class works at the CloudFormation level, and does not deal with tracing
  * CloudFormation errors to construct code sources yet.
  */
+/**
+ * Options that affect how a diagnosis is performed.
+ */
+export interface DiagnoseOptions {
+    /**
+     * Whether CloudFormation rollback is enabled for this deployment.
+     *
+     * When rollback is enabled, failed resources are torn down before we can
+     * inspect their runtime state (e.g. ECS tasks), so the investigation degrades
+     * to durable sources and may suggest re-running with `--no-rollback`.
+     *
+     * @default true
+     */
+    readonly rollbackEnabled?: boolean;
+}
 export declare class CloudFormationStackDiagnoser {
     private readonly props;
     private readonly cfn;
     private parentStackLogicalIds;
+    private _additionalExplorationSdkPromise?;
+    private rollbackEnabled;
     constructor(props: CloudFormationStackDiagnoserProps);
     /**
      * Diagnose a stack's root cause given no pre-existing state
@@ -41,7 +72,7 @@ export declare class CloudFormationStackDiagnoser {
     /**
      * Diagnose potential problems with the change set
      */
-    diagnoseFromErrorCollection(errors: ResourceErrors, stack: Stack): Promise<StackDiagnosis>;
+    diagnoseFromErrorCollection(errors: ResourceErrors, stack: Stack, allowFallback?: boolean, options?: DiagnoseOptions): Promise<StackDiagnosis>;
     /**
      * Diagnose a deployment failure via stack events
      *
@@ -65,8 +96,9 @@ export declare class CloudFormationStackDiagnoser {
      * error.
      */
     private _reportChangeSetFailureFromEvents;
-    private addErrorTraces;
-    private addErrorTrace;
+    private enhanceErrors;
+    private enhanceError;
+    private investigateResourceBestEffort;
     /**
      * Build a generic stack error from the given change set information
      *
@@ -94,6 +126,10 @@ export declare class CloudFormationStackDiagnoser {
      * ```
      */
     private _tryDetectFailedAutoImport;
+    /**
+     * Return the additional exploration SDK, if available.
+     */
+    private additionalExplorationSdk;
 }
 /**
  * Return true if the given change set has no changes