@go-to-k/cdkd 0.284.28 → 0.284.30

package/dist/{deploy-engine-DP_MejgP.js → deploy-engine-BFgi0RJr.js}

@@ -11476,6 +11476,12 @@ const ERROR_CAUSE_MASK_MAX_DEPTH = 20;
 * The `cause` chain of `root`, root first, stopping at the first non-`Error`
 * link, at a link already visited (so a cycle terminates instead of hanging),
 * or at {@link ERROR_CAUSE_MASK_MAX_DEPTH}.
+*
+* EXPORTED so a caller that RENDERS a chain walks exactly the links
+* {@link maskSecretsInError} masked — the two sets must be the same one. A
+* renderer with its own walk would eventually print a link past the depth cap,
+* which by that function's contract still carries its ORIGINAL, unmasked
+* message. `cdkd scrub`'s `--all` loop is the first such caller.
 */
 function errorCauseChain(root) {
 	const chain = [];
@@ -16873,7 +16879,7 @@ var CloudControlProvider = class {
 		if (context?.finalSnapshotIdentifier !== void 0) throw new ProvisioningError(`${logicalId} (${resourceType}) requires a final snapshot (DeletionPolicy: Snapshot), but the Cloud Control API delete route has no final-snapshot parameter. Re-run with --skip-final-snapshot after snapshotting manually, or retain the resource.`, resourceType, logicalId, physicalId);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DWL4tZYx.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-qMgJEhCM.js").then((n) => n.n);
 			return await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 		}
 		const isProtectedEc2Instance = context?.removeProtection === true && resourceType === "AWS::EC2::Instance";
@@ -25786,7 +25792,7 @@ const FLUSH_INTERVAL_MS = 2e3;
 const FLUSH_EVENT_THRESHOLD = 50;
 /** Build-time cdkd version, with a dev fallback for non-built contexts. */
 function getCdkdVersion() {
-	return "0.284.28";
+	return "0.284.30";
 }
 /**
 * Generate a time-sortable unique run id, e.g.
@@ -28406,5 +28412,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { endCommandInterruptScope as $, LocalInvokeBuildError as $n, rewriteTemplateAssetReferences as $t, MULTI_REGION_RECREATE_BLOCKED_TYPES as A, warnDeprecatedNoPrefixCliFlag as An, scrubResourceRecord as At, collectDeclaredOutputNames as B, AssemblyReader as Bn, withRetry as Bt, ccRoutedFinalSnapshotError as C, resolveAutoAssetStorage as Cn, STATE_SOURCED_READBACK_RULES as Ct, unsupportedFinalSnapshotError as D, resolveStateBucketWithDefaultAndSource as Dn, isSingleDynamicReferenceToken as Dt, refusesFinalSnapshot as E, resolveStateBucketWithDefault as En, dynamicReferenceTokens as Et, cyan as F, uploadCfnTemplate as Fn, s3BucketWebsiteUrl as Ft, stateKeySecretExposure as G, getAwsClients as Gn, rebuildClientForBucketRegion as Gt, exportAliasCollisionScrubWarning as H, clearBucketRegionCache as Hn, TemplateParser as Ht, gray as I, expectedOwnerParam as In, applyRoleArnIfSet as It, clearOnUpdateRemoval as J, AssetError as Jn, stringifyValue as Jt, IAMRoleProvider as K, resetAwsClients as Kn, shouldRetainResource as Kt, green as L, PARTITION_TABLE as Ln, DiffCalculator as Lt, renderStatefulReason as M, CFN_TEMPLATE_URL_LIMIT as Mn, s3BucketDomainName as Mt, formatResourceLine as N, MIGRATE_TMP_PREFIX as Nn, s3BucketDualStackDomainName as Nt, makeCanonicalizePropertiesFn as O, resolveUseCdkBootstrapAssets as On, maskSecretsInText as Ot, bold as P, findLargeInlineResources as Pn, s3BucketRegionalDomainName as Pt, beginCommandInterruptScope as Q, DeployCancelledError as Qn, loadPublishableAssetManifest as Qt, red as R, canonicalizeRegion as Rn, INTRINSIC_KEYS as Rt, buildFinalSnapshotIdentifier as S, resolveApp as Sn, STATE_SOURCED_CROSS_GENERATION_RULES as St, isFinalSnapshotError as T, resolveSkipPrefix as Tn, createSecretMasker as Tt, isExportAliasCollision as U, resolveBucketRegion as Un, LockManager as Ut, collectPublishedOutputNames as V, processStackMessages as Vn, DagBuilder as Vt, secretBearingStateKeyWarning as W, AwsClients as Wn, S3StateBackend as Wt, findActionableSilentDrops as X, ConfigError as Xn, buildAssetRedirectMap as Xt, ProviderRegistry as Y, CdkdError as Yn, WorkGraph as Yt, findSilentDropProperties as Z, DependencyError as Zn, createAssetRedirectResolver as Zt, maskingRetryLogger as _, getDockerImageBySourceHash as _n, isMarkedNonRetryable as _r, readConfigString as _t, DeploymentEventsStore as a, getBootstrapMarkerKey as an, PartialFailureError as ar, isTerminationProtectionPropagationError as at, ATOMIC_FINAL_SNAPSHOT_TYPES as b, getDefaultStateBucketName as bn, markNonRetryable as br, requireConfigObject as bt, planRollback as c, validateAssetBucketName as cn, ResourceUpdateNotSupportedError as cr, getAccountInfo as ct, replayRollback as d, buildDockerImage as dn, StateError as dr, normalizeAwsTagsToCfn as dt, escapeRegExp$1 as en, LocalMigrateError as er, isInterruptedWaitError as et, updatePartialMessage as f, formatDockerLoginError as fn, SynthesisError as fr, resolveExplicitPhysicalId as ft, withResourceDeadline as g, AssetManifestLoader as gn, withErrorHandling as gr, configStringRefusal as gt, deleteSkipReason as h, runDockerStreaming as hn, normalizeAwsError as hr, configBooleanRefusal as ht, DeploymentEventsReader as i, ensureAssetStorage as in, NestedStackChildDirectDestroyError as ir, disableInstanceApiTermination as it, isStatefulRecreateTargetSync as j, CFN_TEMPLATE_BODY_LIMIT as jn, s3BucketArn as jt, extractDeploymentEventError as k, stateBucketExistenceConfirmed as kn, redactSecretsForState as kt, producerRegionsFromState as l, validateContainerRepoName as ln, StackHasActiveImportsError as lr, refStateLookupFromResource as lt, UNSPECIFIED_SKIP_REASON as m, runDockerForeground as mn, isCdkdError as mr, coerceCfnBoolean as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, AssetModeResolver as nn, LockError as nr, CloudControlProvider as nt, classifyReplaySecretRegion as o, parseBootstrapMarker as on, ProvisioningError as or, IntrinsicFunctionResolver as ot, updatePartialReason as p, getDockerCmd as pn, formatError as pr, assertRegionMatch as pt, collectInlinePolicyNamesManagedBySiblings as q, setAwsClients as qn, AssetPublisher as qt, DeployEngine as r, BOOTSTRAP_MARKER_PREFIX as rn, MissingCdkCliError as rr, slowCcOperationTimeoutMs as rt, planFailedOps as s, readBootstrapMarkerBody as sn, ResourceTimeoutError as sr, cfnRefValueFromPhysicalId as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, stripControlChars as tn, LocalStartServiceError as tr, startInterruptWatch as tt, replayFailedOperations as u, buildDenyExternalAccessPolicy as un, StackTerminationProtectionError as ur, WAFv2WebACLProvider as ut, IMPLICIT_DELETE_DEPENDENCIES as v, Synthesizer as vn, isRetryableTransientError as vr, replayWarn as vt, createPreDeleteFinalSnapshot as w, resolveCaptureObservedState as wn, TEMPLATE_SOURCED_RULES as wt, PRE_DELETE_SNAPSHOT_TYPES as x, getLegacyStateBucketName as xn, __exportAll as xr, requireConfigString as xt, computeImplicitDeleteEdges as y, synthesisStatusMessage as yn, isThrottlingError as yr, requireConfigArray as yt, yellow as z, derivePartitionAndUrlSuffix as zn, describeTypeWithThrottleRetry as zt };
-//# sourceMappingURL=deploy-engine-DP_MejgP.js.map
+export { endCommandInterruptScope as $, DependencyError as $n, createAssetRedirectResolver as $t, MULTI_REGION_RECREATE_BLOCKED_TYPES as A, resolveUseCdkBootstrapAssets as An, maskSecretsInText as At, collectDeclaredOutputNames as B, canonicalizeRegion as Bn, INTRINSIC_KEYS as Bt, ccRoutedFinalSnapshotError as C, getLegacyStateBucketName as Cn, __exportAll as Cr, STATE_SOURCED_READBACK_RULES as Ct, unsupportedFinalSnapshotError as D, resolveSkipPrefix as Dn, errorCauseChain as Dt, refusesFinalSnapshot as E, resolveCaptureObservedState as En, dynamicReferenceTokens as Et, cyan as F, MIGRATE_TMP_PREFIX as Fn, s3BucketDualStackDomainName as Ft, stateKeySecretExposure as G, resolveBucketRegion as Gn, LockManager as Gt, exportAliasCollisionScrubWarning as H, AssemblyReader as Hn, withRetry as Ht, gray as I, findLargeInlineResources as In, s3BucketRegionalDomainName as It, clearOnUpdateRemoval as J, resetAwsClients as Jn, shouldRetainResource as Jt, IAMRoleProvider as K, AwsClients as Kn, S3StateBackend as Kt, green as L, uploadCfnTemplate as Ln, s3BucketWebsiteUrl as Lt, renderStatefulReason as M, warnDeprecatedNoPrefixCliFlag as Mn, scrubResourceRecord as Mt, formatResourceLine as N, CFN_TEMPLATE_BODY_LIMIT as Nn, s3BucketArn as Nt, makeCanonicalizePropertiesFn as O, resolveStateBucketWithDefault as On, isSingleDynamicReferenceToken as Ot, bold as P, CFN_TEMPLATE_URL_LIMIT as Pn, s3BucketDomainName as Pt, beginCommandInterruptScope as Q, ConfigError as Qn, buildAssetRedirectMap as Qt, red as R, expectedOwnerParam as Rn, applyRoleArnIfSet as Rt, buildFinalSnapshotIdentifier as S, getDefaultStateBucketName as Sn, markNonRetryable as Sr, STATE_SOURCED_CROSS_GENERATION_RULES as St, isFinalSnapshotError as T, resolveAutoAssetStorage as Tn, createSecretMasker as Tt, isExportAliasCollision as U, processStackMessages as Un, DagBuilder as Ut, collectPublishedOutputNames as V, derivePartitionAndUrlSuffix as Vn, describeTypeWithThrottleRetry as Vt, secretBearingStateKeyWarning as W, clearBucketRegionCache as Wn, TemplateParser as Wt, findActionableSilentDrops as X, AssetError as Xn, stringifyValue as Xt, ProviderRegistry as Y, setAwsClients as Yn, AssetPublisher as Yt, findSilentDropProperties as Z, CdkdError as Zn, WorkGraph as Zt, maskingRetryLogger as _, runDockerStreaming as _n, normalizeAwsError as _r, readConfigString as _t, DeploymentEventsStore as a, BOOTSTRAP_MARKER_PREFIX as an, MissingCdkCliError as ar, isTerminationProtectionPropagationError as at, ATOMIC_FINAL_SNAPSHOT_TYPES as b, Synthesizer as bn, isRetryableTransientError as br, requireConfigObject as bt, planRollback as c, parseBootstrapMarker as cn, ProvisioningError as cr, getAccountInfo as ct, replayRollback as d, validateContainerRepoName as dn, StackHasActiveImportsError as dr, normalizeAwsTagsToCfn as dt, loadPublishableAssetManifest as en, DeployCancelledError as er, isInterruptedWaitError as et, updatePartialMessage as f, buildDenyExternalAccessPolicy as fn, StackTerminationProtectionError as fr, resolveExplicitPhysicalId as ft, withResourceDeadline as g, runDockerForeground as gn, isCdkdError as gr, configStringRefusal as gt, deleteSkipReason as h, getDockerCmd as hn, formatError as hr, configBooleanRefusal as ht, DeploymentEventsReader as i, AssetModeResolver as in, LockError as ir, disableInstanceApiTermination as it, isStatefulRecreateTargetSync as j, stateBucketExistenceConfirmed as jn, redactSecretsForState as jt, extractDeploymentEventError as k, resolveStateBucketWithDefaultAndSource as kn, maskSecretsInError as kt, producerRegionsFromState as l, readBootstrapMarkerBody as ln, ResourceTimeoutError as lr, refStateLookupFromResource as lt, UNSPECIFIED_SKIP_REASON as m, formatDockerLoginError as mn, SynthesisError as mr, coerceCfnBoolean as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, escapeRegExp$1 as nn, LocalMigrateError as nr, CloudControlProvider as nt, classifyReplaySecretRegion as o, ensureAssetStorage as on, NestedStackChildDirectDestroyError as or, IntrinsicFunctionResolver as ot, updatePartialReason as p, buildDockerImage as pn, StateError as pr, assertRegionMatch as pt, collectInlinePolicyNamesManagedBySiblings as q, getAwsClients as qn, rebuildClientForBucketRegion as qt, DeployEngine as r, stripControlChars as rn, LocalStartServiceError as rr, slowCcOperationTimeoutMs as rt, planFailedOps as s, getBootstrapMarkerKey as sn, PartialFailureError as sr, cfnRefValueFromPhysicalId as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, rewriteTemplateAssetReferences as tn, LocalInvokeBuildError as tr, startInterruptWatch as tt, replayFailedOperations as u, validateAssetBucketName as un, ResourceUpdateNotSupportedError as ur, WAFv2WebACLProvider as ut, IMPLICIT_DELETE_DEPENDENCIES as v, AssetManifestLoader as vn, withErrorHandling as vr, replayWarn as vt, createPreDeleteFinalSnapshot as w, resolveApp as wn, TEMPLATE_SOURCED_RULES as wt, PRE_DELETE_SNAPSHOT_TYPES as x, synthesisStatusMessage as xn, isThrottlingError as xr, requireConfigString as xt, computeImplicitDeleteEdges as y, getDockerImageBySourceHash as yn, isMarkedNonRetryable as yr, requireConfigArray as yt, yellow as z, PARTITION_TABLE as zn, DiffCalculator as zt };
+//# sourceMappingURL=deploy-engine-BFgi0RJr.js.map