@go-to-k/cdkd 0.284.52 → 0.284.54

package/dist/index.d.ts

@@ -764,6 +764,11 @@ declare class S3StateBackend {
   putRawObject(key: string, body: string, contentType?: string): Promise<void>;
   getRawObject(key: string): Promise<string | null>;
   listRawKeys(keyPrefix: string): Promise<string[]>;
+  listRawObjects(keyPrefix: string): Promise<Array<{
+    key: string;
+    lastModified: Date;
+    size: number;
+  }>>;
   deleteRawObjects(keys: string[]): Promise<void>;
   loadRollbackJournal(stackName: string, region: string): Promise<RollbackJournal | null>;
   appendRollbackJournalSegment(stackName: string, region: string, segment: RollbackJournalSegment): Promise<void>;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAuGY;UAyBK;EAEf;EAMA;EAEA;;UAsBe;EAEf;EAMA;EAEA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EAgBA;EAcA;EAYA;EAGA;;UAMe;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EAyBA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UAiFe;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KCuhEU,gBAAgB;;;UC/iFX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAKf,sBAAsB;;UAMP,6BAA6B;EAE5C;EAEA,aAAa;;UAOL,iCAAiC;EAEzC;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;KA4ClD;WAGG;;WAYA;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UA8CC,sBAAsB;EAmBrC;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EASA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UCzjC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCzCf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UA2CA;EAcR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cCnNrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAsOC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBA8avB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UAwEX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCp2BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cA6BS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MA0CR;MAyBA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UChqBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA4Da;;;UChKC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UC1SN;EACf;EACA;IACE;IACA;IACA;;;;;UCZa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCLe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC7SO;KAGA;KAcA;KAqCA;UAkBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EASA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAWF;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cCwBE,gCAAgC;UACnC;UACA;UACA;mBAGS;mBAEA;mBAEA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EAqER,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAoJL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAyMJ;EA2CR,iBACJ,sBACA,qBACC,QAAQ;UA0BG;UAoHN;UA8BM;UAiCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAiDL,OAAO,OAAO,sBAAsB,QAAQ;;;;KCzlExC;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;;UAUH;EACf;EACA,aAAa;EACb,gBAAgB;;UAQD;EACf;EACA;EACA;;cAuDW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EAWpC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UAmGpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EAqEJ,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UChMY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCxGE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;;UAWE;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KC7VZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCvDK;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAmBW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EA+C7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAsExC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EAyFG,YAAY,mBAAmB,iBAAiB;EAwDhD,cAAc,QAAQ;EA2EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAmChC,iBAAiB,iBAAiB;EA8BlC,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAuB9D,sBAAsB,mBAAmB,iBAAiB;UAuBlD;UAuBA;UAuBA;UASA;UAgDN;;;;UCh4BO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC5DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UClHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UChQK;EAEf;EASA;;cA+FW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UAwIW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EAmFR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UA+HA;UA2BN;EAaF,iBAAiB,mBAAmB,6BAA6B;UAoDzD;UAsBN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cClnCQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAYlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EAgJR,YAAY,UAAU,kBAAkB;EA2BxC,YAAY,UAAU,kBAAkB;EA2BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KCjXA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCxbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EAoBF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,2BACxB,QAAQ,YAAY;UAmRf;UAoJA;iBAkGO;UAsED;UAgCN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cCv+BlD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UC/5BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAwBG,WAAW,oBAAoB,OAAO,mBAAmB;EAYzD,YAAY,mBAAmB,yBAAyB;UAUhD;EAaR,WAAW;UAcH;UAWA;UAyCA;UAkBA;UAyBA;UAqDA;UA0CN;UAsBM;UAQA;UAkBA;UAYA;UA+BN;UAMA;;;;UCzfO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EA4BF,wBAAwB,mBAAmB,OAAO,2BAA2B;EAuB7E,0BAA0B;EAmB1B,gCAAgC;EAmBhC,gBAAgB;EAkBhB;EASA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAoOW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAWA;UAOA;UASA;UAWA;UAQA;UASA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UA8BnE;UAiDA;UA8DA;UA8BA;UAkDA;UA2BA;UAkCM;UAgDA;UAsGN;UAqEM;UAkqBA;UAokBA;UA4EA;UA2BA;UA+BA;UAuCN;UA+BM;UA4CA;UAqSN;UAaA;UAmBA;UAwBA;UAyCM;UA0CA;UAkKA;UAusCN;UA8BA;UA4BA;UAkCA;UAgCA;UAOA;UAoCA;UA4EA;UA4BM;UA6BN;UAiCA;UAmBA;UAgBA;UAuCM;UAmRN"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAuGY;UAyBK;EAEf;EAMA;EAEA;;UAsBe;EAEf;EAMA;EAEA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EAgBA;EAcA;EAYA;EAGA;;UAMe;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EAyBA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UAiFe;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KCuhEU,gBAAgB;;;UC/iFX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAKf,sBAAsB;;UAMP,6BAA6B;EAE5C;EAEA,aAAa;;UAOL,iCAAiC;EAEzC;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;KA4ClD;WAGG;;WAYA;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UA8CC,sBAAsB;EAmBrC;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EASA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UCzjC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCzCf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UA2CA;EAcR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cCnNrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAsOC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBAgbvB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UAwEX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCt2BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cA6BS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MA0CR;MAyBA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UChqBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA4Da;;;UChKC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UC1SN;EACf;EACA;IACE;IACA;IACA;;;;;UCZa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCLe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC7SO;KAGA;KAcA;KAqCA;UAkBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EASA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAWF;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cCwBE,gCAAgC;UACnC;UACA;UACA;mBAGS;mBAEA;mBAEA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EAqER,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAoJL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAyMJ;EA2CR,iBACJ,sBACA,qBACC,QAAQ;UA0BG;UAoHN;UA8BM;UAiCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAiDL,OAAO,OAAO,sBAAsB,QAAQ;;;;KCzlExC;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;;UAUH;EACf;EACA,aAAa;EACb,gBAAgB;;UAQD;EACf;EACA;EACA;;cAuDW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EAWpC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UAmGpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EAqEJ,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UChMY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCxGE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;;UAWE;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KC7VZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCvDK;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAmBW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EA+C7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAsExC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EAyFG,YAAY,mBAAmB,iBAAiB;EAwDhD,cAAc,QAAQ;EA2EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAqChC,eACJ,oBACC,QAAQ;IAAQ;IAAa,cAAc;IAAM;;EAsC9C,iBAAiB,iBAAiB;EA8BlC,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAuB9D,sBAAsB,mBAAmB,iBAAiB;UAuBlD;UAuBA;UAuBA;UASA;UAgDN;;;;UC16BO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC5DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UClHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UChQK;EAEf;EASA;;cA+FW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UAwIW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EAmFR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UA+HA;UA2BN;EAaF,iBAAiB,mBAAmB,6BAA6B;UAoDzD;UAsBN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cClnCQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAYlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EAgJR,YAAY,UAAU,kBAAkB;EA2BxC,YAAY,UAAU,kBAAkB;EA2BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KCjXA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCxbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EAoBF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,2BACxB,QAAQ,YAAY;UAmRf;UAoJA;iBAkGO;UAsED;UAgCN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cCv+BlD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UC/5BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAwBG,WAAW,oBAAoB,OAAO,mBAAmB;EAYzD,YAAY,mBAAmB,yBAAyB;UAUhD;EAaR,WAAW;UAcH;UAWA;UAyCA;UAkBA;UAyBA;UAqDA;UA0CN;UAsBM;UAQA;UAkBA;UAYA;UA+BN;UAMA;;;;UCzfO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EA4BF,wBAAwB,mBAAmB,OAAO,2BAA2B;EAuB7E,0BAA0B;EAmB1B,gCAAgC;EAmBhC,gBAAgB;EAkBhB;EASA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAoOW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAWA;UAOA;UASA;UAWA;UAQA;UASA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UA8BnE;UAiDA;UA8DA;UA8BA;UAkDA;UA2BA;UAkCM;UAgDA;UAsGN;UAqEM;UAkqBA;UAokBA;UA4EA;UA2BA;UA+BA;UAuCN;UA+BM;UA4CA;UAqSN;UAaA;UAmBA;UAwBA;UAyCM;UA0CA;UAkKA;UAgtCN;UA8BA;UA4BA;UAkCA;UAgCA;UAOA;UAoCA;UA4EA;UA4BM;UA6BN;UAiCA;UAmBA;UAgBA;UAwCM;UAmRN"}

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $n as AwsClients, Bt as DiffCalculator, Cr as SynthesisError, Dn as Synthesizer, Er as normalizeAwsError, Gt as TemplateParser, Jt as S3StateBackend, Kt as LockManager, Qn as resolveBucketRegion, Sr as StateError, Tr as isCdkdError, W as IAMRoleProvider, Wt as DagBuilder, Yn as AssemblyReader, Zn as clearBucketRegionCache, _r as ProvisioningError, ar as ConfigError, en as AssetPublisher, er as getAwsClients, et as CloudControlProvider, ir as CdkdError, nr as setAwsClients, pr as LockError, q as ProviderRegistry, r as DeployEngine, rr as AssetError, sr as DependencyError, tr as resetAwsClients, wr as formatError } from "./deploy-engine-DxboGDr4.js";
+import { $n as clearBucketRegionCache, Dr as isCdkdError, Er as formatError, Ht as DiffCalculator, Jt as LockManager, Kt as DagBuilder, Or as normalizeAwsError, Tr as SynthesisError, W as IAMRoleProvider, Xt as S3StateBackend, Zn as AssemblyReader, ar as AssetError, er as resolveBucketRegion, hr as LockError, ir as setAwsClients, kn as Synthesizer, lr as DependencyError, nn as AssetPublisher, nr as getAwsClients, nt as CloudControlProvider, or as CdkdError, q as ProviderRegistry, qt as TemplateParser, r as DeployEngine, rr as resetAwsClients, sr as ConfigError, tr as AwsClients, wr as StateError, yr as ProvisioningError } from "./deploy-engine-B9SrF2-R.js";
 import { n as getLogger, r as setLogger, t as ConsoleLogger } from "./logger-zRrlbaQt.js";
 
 export { AssemblyReader, AssetError, AssetPublisher, AwsClients, CdkdError, CloudControlProvider, ConfigError, ConsoleLogger, DagBuilder, DependencyError, DeployEngine, DiffCalculator, IAMRoleProvider, LockError, LockManager, ProviderRegistry, ProvisioningError, S3StateBackend, StateError, SynthesisError, Synthesizer, TemplateParser, clearBucketRegionCache, formatError, getAwsClients, getLogger, isCdkdError, normalizeAwsError, resetAwsClients, resolveBucketRegion, setAwsClients, setLogger };

package/dist/{program-BJ8R04vD.js → program-Bpz-tAA5.js}

@@ -1,7 +1,7 @@
-import { $ as startInterruptWatch, $n as AwsClients, $t as shouldRetainResource, A as renderStatefulReason, An as getLegacyStateBucketName, Ar as isThrottlingError, At as redactSecretsForState, B as exportAliasCollisionScrubWarning, Bn as CFN_TEMPLATE_BODY_LIMIT, Bt as DiffCalculator, C as isFinalSnapshotError, Cn as runDockerForeground, Ct as TEMPLATE_SOURCED_RULES, D as extractDeploymentEventError, Dn as Synthesizer, Dr as withErrorHandling, Dt as isSingleDynamicReferenceToken, E as makeCanonicalizePropertiesFn, En as getDockerImageBySourceHash, Er as normalizeAwsError, Et as errorCauseChain, F as green, Fn as resolveStateBucketWithDefault, Ft as s3BucketDomainName, G as collectInlinePolicyNamesManagedBySiblings, Gn as expectedOwnerParam, Gt as TemplateParser, H as secretBearingStateKeyWarning, Hn as MIGRATE_TMP_PREFIX, Ht as describeTypeWithThrottleRetry, I as red, In as resolveStateBucketWithDefaultAndSource, It as s3BucketDualStackDomainName, J as findActionableSilentDrops, Jn as derivePartitionAndUrlSuffix, Jt as S3StateBackend, K as clearOnUpdateRemoval, Kn as PARTITION_TABLE, Kt as LockManager, L as yellow, Ln as resolveUseCdkBootstrapAssets, Lt as s3BucketRegionalDomainName, M as bold, Mn as resolveAutoAssetStorage, Mt as classifyReplaySecretRegion, N as cyan, Nn as resolveCaptureObservedState, Nt as producerRegionsFromState, O as MULTI_REGION_RECREATE_BLOCKED_TYPES, On as synthesisStatusMessage, Or as isMarkedNonRetryable, Ot as maskSecretsInError, P as gray, Pn as resolveSkipPrefix, Pt as s3BucketArn, Q as isInterruptedWaitError, Qn as resolveBucketRegion, Qt as importableOutputs, R as collectDeclaredOutputNames, Rn as stateBucketExistenceConfirmed, Rt as s3BucketWebsiteUrl, S as createPreDeleteFinalSnapshot, Sn as partitionSensitiveEnv, St as STATE_SOURCED_READBACK_RULES, T as unsupportedFinalSnapshotError, Tn as AssetManifestLoader, Tt as dynamicReferenceTokens, U as stateKeySecretExposure, Un as findLargeInlineResources, Ut as withRetry, V as isExportAliasCollision, Vn as CFN_TEMPLATE_URL_LIMIT, Vt as INTRINSIC_KEYS, W as IAMRoleProvider, Wn as uploadCfnTemplate, Wt as DagBuilder, X as beginCommandInterruptScope, Xn as processStackMessages, Xt as exportNamesCarriedFrom, Y as findSilentDropProperties, Yn as AssemblyReader, Yt as rebuildClientForBucketRegion, Z as endCommandInterruptScope, Zt as importableOutputKeys, _ as computeImplicitDeleteEdges, _n as buildDenyExternalAccessPolicy, _r as ProvisioningError, _t as replayWarn, a as DeploymentEventsStore, an as loadPublishableAssetManifest, at as carriesDynamicReference, b as buildFinalSnapshotIdentifier, bn as formatDockerLoginError, br as StackHasActiveImportsError, bt as requireConfigString, c as replayFailedOperations, cn as stripControlChars, cr as DeployCancelledError, ct as refStateLookupFromResource, d as updatePartialReason, dn as ensureAssetStorage, dr as LocalMigrateError, dt as resolveExplicitPhysicalId, en as AssetPublisher, er as getAwsClients, et as CloudControlProvider, f as UNSPECIFIED_SKIP_REASON, fn as getBootstrapMarkerKey, fr as LocalStartServiceError, ft as assertRegionMatch, g as IMPLICIT_DELETE_DEPENDENCIES, gn as validateContainerRepoName, gr as PartialFailureError, gt as readConfigString, h as maskingRetryLogger, hn as validateAssetBucketName, hr as NestedStackChildDirectDestroyError, ht as configStringRefusal, i as DeploymentEventsReader, in as createAssetRedirectResolver, ir as CdkdError, it as IntrinsicFunctionResolver, j as formatResourceLine, jn as resolveApp, jr as markNonRetryable, jt as scrubResourceRecord, k as isStatefulRecreateTargetSync, kn as getDefaultStateBucketName, kr as isRetryableTransientError, kt as maskSecretsInText, l as replayRollback, ln as AssetModeResolver, lr as DynamicReferenceRegionAmbiguousError, lt as WAFv2WebACLProvider, m as withResourceDeadline, mn as readBootstrapMarkerBody, mr as MissingCdkCliError, mt as configBooleanRefusal, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as WorkGraph, nr as setAwsClients, nt as disableInstanceApiTermination, o as planFailedOps, on as rewriteTemplateAssetReferences, or as CrossAccountSecretRefusalError, ot as cfnRefValueFromPhysicalId, p as deleteSkipReason, pn as parseBootstrapMarker, pt as coerceCfnBoolean, q as ProviderRegistry, qn as canonicalizeRegion, qt as displaySafe, r as DeployEngine, rn as buildAssetRedirectMap, rt as isTerminationProtectionPropagationError, s as planRollback, sn as escapeRegExp, st as getAccountInfo, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as stringifyValue, tr as resetAwsClients, tt as slowCcOperationTimeoutMs, u as updatePartialMessage, un as BOOTSTRAP_MARKER_PREFIX, ur as LocalInvokeBuildError$1, ut as normalizeAwsTagsToCfn, v as ATOMIC_FINAL_SNAPSHOT_TYPES, vn as buildDockerImage, vr as ResourceTimeoutError, vt as requireConfigArray, w as refusesFinalSnapshot, wn as runDockerStreaming, wt as createSecretMasker, x as ccRoutedFinalSnapshotError, xn as getDockerCmd, xr as StackTerminationProtectionError, xt as STATE_SOURCED_CROSS_GENERATION_RULES, y as PRE_DELETE_SNAPSHOT_TYPES, yn as dockerSpawnEnvWithSensitive, yr as ResourceUpdateNotSupportedError, yt as requireConfigObject, z as collectPublishedOutputNames, zn as warnDeprecatedNoPrefixCliFlag, zt as applyRoleArnIfSet } from "./deploy-engine-DxboGDr4.js";
+import { $ as endCommandInterruptScope, $t as importableOutputKeys, A as renderStatefulReason, An as synthesisStatusMessage, Ar as isMarkedNonRetryable, At as maskSecretsInError, B as exportAliasCollisionScrubWarning, Bn as stateBucketExistenceConfirmed, Bt as s3BucketWebsiteUrl, C as isFinalSnapshotError, Cn as getDockerCmd, Cr as StackTerminationProtectionError, Ct as STATE_SOURCED_CROSS_GENERATION_RULES, D as extractDeploymentEventError, Dn as AssetManifestLoader, Dt as dynamicReferenceTokens, E as makeCanonicalizePropertiesFn, En as runDockerStreaming, Et as createSecretMasker, F as green, Fn as resolveCaptureObservedState, Ft as producerRegionsFromState, G as collectInlinePolicyNamesManagedBySiblings, Gn as findLargeInlineResources, Gt as withRetry, H as secretBearingStateKeyWarning, Hn as CFN_TEMPLATE_BODY_LIMIT, Ht as DiffCalculator, I as red, In as resolveSkipPrefix, It as s3BucketArn, J as findActionableSilentDrops, Jn as PARTITION_TABLE, Jt as LockManager, K as clearOnUpdateRemoval, Kn as uploadCfnTemplate, Kt as DagBuilder, L as yellow, Ln as resolveStateBucketWithDefault, Lt as s3BucketDomainName, M as bold, Mn as getLegacyStateBucketName, Mr as isThrottlingError, Mt as redactSecretsForState, N as cyan, Nn as resolveApp, Nr as markNonRetryable, Nt as scrubResourceRecord, O as MULTI_REGION_RECREATE_BLOCKED_TYPES, On as getDockerImageBySourceHash, Or as normalizeAwsError, Ot as errorCauseChain, P as gray, Pn as resolveAutoAssetStorage, Pt as classifyReplaySecretRegion, Q as beginCommandInterruptScope, Qn as processStackMessages, Qt as exportNamesCarriedFrom, R as collectDeclaredOutputNames, Rn as resolveStateBucketWithDefaultAndSource, Rt as s3BucketDualStackDomainName, S as createPreDeleteFinalSnapshot, Sn as formatDockerLoginError, Sr as StackHasActiveImportsError, St as requireConfigString, T as unsupportedFinalSnapshotError, Tn as runDockerForeground, Tt as TEMPLATE_SOURCED_RULES, U as stateKeySecretExposure, Un as CFN_TEMPLATE_URL_LIMIT, Ut as INTRINSIC_KEYS, V as isExportAliasCollision, Vn as warnDeprecatedNoPrefixCliFlag, Vt as applyRoleArnIfSet, W as IAMRoleProvider, Wn as MIGRATE_TMP_PREFIX, Wt as describeTypeWithThrottleRetry, X as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xn as derivePartitionAndUrlSuffix, Xt as S3StateBackend, Y as findSilentDropProperties, Yn as canonicalizeRegion, Yt as displaySafe, Z as DEFAULT_STATE_PREFIX, Zn as AssemblyReader, Zt as rebuildClientForBucketRegion, _ as computeImplicitDeleteEdges, _n as validateAssetBucketName, _r as NestedStackChildDirectDestroyError, _t as configStringRefusal, a as DeploymentEventsStore, an as buildAssetRedirectMap, at as isTerminationProtectionPropagationError, b as buildFinalSnapshotIdentifier, bn as buildDockerImage, br as ResourceTimeoutError, bt as requireConfigArray, c as replayFailedOperations, cn as rewriteTemplateAssetReferences, cr as CrossAccountSecretRefusalError, ct as cfnRefValueFromPhysicalId, d as updatePartialReason, dn as AssetModeResolver, dr as DynamicReferenceRegionAmbiguousError, dt as WAFv2WebACLProvider, en as importableOutputs, er as resolveBucketRegion, et as isInterruptedWaitError, f as UNSPECIFIED_SKIP_REASON, fn as BOOTSTRAP_MARKER_PREFIX, fr as LocalInvokeBuildError$1, ft as normalizeAwsTagsToCfn, g as IMPLICIT_DELETE_DEPENDENCIES, gn as readBootstrapMarkerBody, gr as MissingCdkCliError, gt as configBooleanRefusal, h as maskingRetryLogger, hn as parseBootstrapMarker, ht as coerceCfnBoolean, i as DeploymentEventsReader, in as WorkGraph, ir as setAwsClients, it as disableInstanceApiTermination, j as formatResourceLine, jn as getDefaultStateBucketName, jr as isRetryableTransientError, jt as maskSecretsInText, k as isStatefulRecreateTargetSync, kn as Synthesizer, kr as withErrorHandling, kt as isSingleDynamicReferenceToken, l as replayRollback, ln as escapeRegExp, lt as getAccountInfo, m as withResourceDeadline, mn as getBootstrapMarkerKey, mr as LocalStartServiceError, mt as assertRegionMatch, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nn as AssetPublisher, nr as getAwsClients, nt as CloudControlProvider, o as planFailedOps, on as createAssetRedirectResolver, or as CdkdError, ot as IntrinsicFunctionResolver, p as deleteSkipReason, pn as ensureAssetStorage, pr as LocalMigrateError, pt as resolveExplicitPhysicalId, q as ProviderRegistry, qn as expectedOwnerParam, qt as TemplateParser, r as DeployEngine, rn as stringifyValue, rr as resetAwsClients, rt as slowCcOperationTimeoutMs, s as planRollback, sn as loadPublishableAssetManifest, st as carriesDynamicReference, t as DEFAULT_RESOURCE_TIMEOUT_MS, tn as shouldRetainResource, tr as AwsClients, tt as startInterruptWatch, u as updatePartialMessage, un as stripControlChars, ur as DeployCancelledError, ut as refStateLookupFromResource, v as ATOMIC_FINAL_SNAPSHOT_TYPES, vn as validateContainerRepoName, vr as PartialFailureError, vt as readConfigString, w as refusesFinalSnapshot, wn as partitionSensitiveEnv, wt as STATE_SOURCED_READBACK_RULES, x as ccRoutedFinalSnapshotError, xn as dockerSpawnEnvWithSensitive, xr as ResourceUpdateNotSupportedError, xt as requireConfigObject, y as PRE_DELETE_SNAPSHOT_TYPES, yn as buildDenyExternalAccessPolicy, yr as ProvisioningError, yt as replayWarn, z as collectPublishedOutputNames, zn as resolveUseCdkBootstrapAssets, zt as s3BucketRegionalDomainName } from "./deploy-engine-B9SrF2-R.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as getCurrentStackName, h as withStackName, i as runStackBuffered, m as withSkipPrefix, n as getLogger, o as PATTERN_B_NAME_OPTIONS, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-zRrlbaQt.js";
-import { t as getCdkdVersion } from "./version-BXmUXkY2.js";
-import { t as ASGProvider } from "./asg-provider-DYnIz-Gy.js";
+import { t as getCdkdVersion } from "./version-DLRgymoe.js";
+import { t as ASGProvider } from "./asg-provider-BaNTIjU4.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -77,23 +77,6 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { WebSocketServer } from "ws";
 
-//#region src/state/state-prefix.ts
-/**
-* The default S3 key prefix for cdkd state.
-*
-* Homed in the STATE layer rather than in `src/cli/commands/state-file-keys.ts`
-* (which re-exports it, so its four existing importers are unchanged) because
-* `src/state/lock-contention-message.ts` needs it to decide whether a recovery
-* hint should spell `--state-prefix` at all, and a `src/state/**` module
-* importing from `src/cli/commands/**` inverts the layering — the CLI sits
-* ABOVE the state layer in the 7-layer architecture, not below it.
-*
-* Note this is only the DEFAULT. Other commands accept `--state-prefix`, so
-* whole-bucket listings deliberately do not scope to it.
-*/
-const DEFAULT_STATE_PREFIX = "cdkd";
-
-//#endregion
 //#region src/cli/commands/state-file-keys.ts
 /**
 * Shared helpers for enumerating and describing cdkd state-bucket keys.
@@ -74705,9 +74688,19 @@ function looksLikeEcrHostWithForeignSuffix(imageUri) {
 *
 * - Names come from the region's bootstrap marker, never recomputed from
 *   the naming convention (custom-name compatibility, issue #1011). No
-*   marker → the region is not opted in; friendly no-op. CDK bootstrap
+*   marker → no ASSET storage in scope; since issue #2052 the run continues
+*   to the state-bucket placeholder sweep rather than ending, and is a
+*   friendly no-op only when neither side has anything. CDK bootstrap
 *   storage (`cdk-hnb659fds-*`) is never touched — that stays `cdk gc`'s
 *   job.
+* - Abandoned `custom-resource-responses/{requestId}.json` placeholders in
+*   the STATE bucket are collected too (issue #2052). Two things make that
+*   the one arm needing its own guard: it is gc's only DESTRUCTIVE call
+*   against the state bucket, and it is ACCOUNT-scoped where every other arm
+*   is region-scoped (the keys carry no region). It matches the producer's
+*   own key shape rather than sweeping the prefix by age alone, so a stack
+*   deployed with a colliding `--state-prefix` cannot have its `state.json`
+*   collected.
 * - The reference scan lists EVERY state file in the WHOLE state bucket
 *   (any `--state-prefix`), and a state file that fails to JSON-parse
 *   aborts the whole run — deleting on partial knowledge is how a live
@@ -75162,12 +75155,98 @@ async function listS3Candidates(s3Client, bucket, accountId, refs, cutoffMs, log
 	return candidates;
 }
 /**
-* Describe the container repo's images (paginated) and pick the deletion
-* candidates: an image is REFERENCED when any of its tags OR its digest is
-* in the referenced set; candidates are unreferenced AND strictly older
-* than the cutoff. Images with no `imagePushedAt` are kept (treated as
-* new). A missing repo is an idempotent skip.
-*/
+* List abandoned custom-resource response placeholders (issue #2052).
+*
+* `CustomResourceProvider` PUTs an empty object at
+* `custom-resource-responses/{requestId}.json` before each invocation so the
+* handler has a pre-signed URL to write to. The happy paths clean up after
+* themselves — the issue #2033 replay path via `cleanupResponseObject`, and the
+* FAILED-response arm via `getCustomResourceResponse` / `pollS3Response` — but
+* three shapes leave the key behind and NOTHING collected them:
+*
+*  - an interrupted deploy (Ctrl-C / SIGTERM / a cancelled CI job) between the
+*    PUT and any cleanup;
+*  - any throw on a path that does not reach a cleanup call;
+*  - a LATE handler PUT, landing after cdkd stopped polling. This is the only
+*    one with CONTENT: an empty body is a storage leak, but a real
+*    CloudFormation `Data` payload sitting at a key nothing collects is also a
+*    data-retention question.
+*
+* ## Why age alone is a sufficient staleness rule here
+*
+* The requirement is that a key belonging to an IN-FLIGHT concurrent run is
+* never collected, and two independent things already guarantee it:
+*
+*  1. gc refuses outright while ANY stack holds a lock (the lock guard in
+*     `gcCommand`), and every deploy that can write one of these keys holds
+*     one for its whole duration. A concurrent run does not get this far.
+*  2. `--older-than` (default 30d) is applied to each object's own
+*     `LastModified`, which for a placeholder is the moment of the PUT that
+*     opened the invocation.
+*
+* So this deliberately adds no clock of its own. The two are not ranked, and an
+* earlier version of this note wrongly said (1) was the one that mattered: for
+* a deploy that STARTS between the lock scan and this listing, (1) has already
+* run and only (2) covers it. They close different windows.
+*
+* ## What this widens, stated rather than implied
+*
+* This is gc's first DESTRUCTIVE call against the state bucket — until now it
+* only ever read from it. And unlike every other arm of this command it is
+* ACCOUNT-scoped, not region-scoped: placeholder keys carry no region, so
+* `cdkd gc --region us-east-1` collects ones written by deploys into any
+* region. Both are deliberate (the objects are cdkd's own transient scratch,
+* and a region-scoped sweep could never reach most of them), and both are why
+* the key-shape filter below is not optional.
+*
+* ## Scope
+*
+* Only the DEFAULT prefix. `ProviderRegistry` can be configured with another
+* `responsePrefix`, and nothing persists which one a past deploy used, so gc
+* cannot discover a non-default layout — under-collecting, which is the safe
+* direction, and the reason the constant is shared with the producer rather
+* than re-spelled here.
+*/
+/**
+* The only key shape `CustomResourceProvider` can mint under the prefix.
+*
+* `getResponseKey` builds `{prefix}/{requestId}.json` from
+* `cdkd-${Date.now()}-${Math.random().toString(36).substring(7)}`.
+*
+* The trailing group is `*`, NOT `+`, and that is a measurement rather than
+* caution: `substring(7)` returns the EMPTY string whenever the base-36
+* rendering is shorter than eight characters (`(0.5).toString(36)` is `'0.i'`),
+* so `cdkd-1756180000000-.json` is a real key this provider writes. A `+` here
+* would skip exactly those and the sweep would silently under-collect — a
+* shape filter defeating the sweep it is meant to protect.
+*
+* Why filter at all: `--state-prefix` is free-form and unvalidated, so a stack
+* deployed with `--state-prefix custom-resource-responses` puts its
+* `state.json`, `lock.json`, `rollback-journal.json` and `deployments/*` INSIDE
+* this prefix. gc builds its own backend on `DEFAULT_STATE_PREFIX` and cannot
+* see that collision, so an age-only sweep would delete live state and orphan
+* every resource in the stack. Matching the producer's own shape is what keeps
+* this command's "bias every ambiguity toward NOT deleting" posture true on the
+* one path that deletes from the STATE bucket.
+*/
+const RESPONSE_PLACEHOLDER_KEY = /^cdkd-\d+-[0-9a-z]*\.json$/;
+async function listResponsePlaceholderCandidates(stateBackend, cutoffMs, logger) {
+	const objects = await stateBackend.listRawObjects(`${CUSTOM_RESOURCE_RESPONSE_PREFIX}/`);
+	const candidates = [];
+	for (const obj of objects) {
+		const leaf = obj.key.slice(`${CUSTOM_RESOURCE_RESPONSE_PREFIX}/`.length);
+		if (!RESPONSE_PLACEHOLDER_KEY.test(leaf)) {
+			logger.debug(`gc: keeping ${obj.key} — not a cdkd response placeholder`);
+			continue;
+		}
+		if (obj.lastModified.getTime() >= cutoffMs) {
+			logger.debug(`gc: keeping ${obj.key} — newer than the --older-than cutoff`);
+			continue;
+		}
+		candidates.push(obj);
+	}
+	return candidates;
+}
 async function listEcrCandidates(ecrClient, repositoryName, refs, cutoffMs, logger) {
 	const candidates = [];
 	let nextToken;
@@ -75235,7 +75314,7 @@ function formatAge(date) {
 async function promptGcConfirm(input) {
 	const logger = getLogger();
 	logger.warn("");
-	logger.warn(`cdkd gc will delete the following unreferenced assets in ${input.region}:`);
+	logger.warn(`cdkd gc will delete the following (region: ${input.region}):`);
 	for (const line of input.planLines) logger.warn(`  - ${line}`);
 	if (input.yes) return true;
 	if (process.stdin.isTTY !== true) throw new CdkdError("The gc confirmation prompt cannot run in a non-interactive environment. Pass --yes / -y to confirm the deletion, or run the command from a real terminal.", "NON_INTERACTIVE_CONFIRM");
@@ -75351,32 +75430,47 @@ async function gcCommand(options) {
 			}
 			throw error;
 		}
-		if (markerBody === null) {
-			const probed = rawMarkerKey === markerKey ? markerKey : `${markerKey}, ${rawMarkerKey}`;
-			logger.info(`No bootstrap marker for region '${region}' (${probed}) — the region is not opted in to cdkd asset storage; nothing to garbage-collect. (CDK bootstrap storage is 'cdk gc' territory.)`);
-			return;
-		}
-		const marker = parseBootstrapMarker(markerBody, resolvedMarkerKey);
 		const lockKeys = await listAllLockKeys(stateBackend);
 		if (lockKeys.length > 0) {
 			const listing = lockKeys.map((k) => `  - ${describeStateKey(k, LOCK_FILE_SUFFIX, DEFAULT_STATE_PREFIX)}  [${k}]`).join("\n");
 			throw new CdkdError(`Refusing to gc while ${lockKeys.length} stack(s) hold an active lock (a deploy in flight may have published assets whose state write has not landed yet):\n${listing}\nWait for the operation(s) to finish — or clear a stale lock with 'cdkd force-unlock <stack>' — then re-run 'cdkd gc'.`, "GC_LOCKED");
 		}
-		const refs = await scanReferencedAssets(stateBackend, marker, logger);
 		const cutoffMs = Date.now() - options.olderThan;
-		const s3Candidates = await listS3Candidates(awsClients.s3, marker.assetBucket, accountId, refs, cutoffMs, logger);
-		const ecrCandidates = await listEcrCandidates(ecrClient, marker.containerRepo, refs, cutoffMs, logger);
-		if (s3Candidates.length === 0 && ecrCandidates.length === 0) {
-			logger.info(`Nothing to garbage-collect in region '${region}': every object in ${marker.assetBucket} / image in ${marker.containerRepo} is either referenced by a deployed stack or newer than the --older-than cutoff.`);
+		const responseCandidates = await listResponsePlaceholderCandidates(stateBackend, cutoffMs, logger);
+		if (markerBody === null) {
+			const probed = rawMarkerKey === markerKey ? markerKey : `${markerKey}, ${rawMarkerKey}`;
+			if (responseCandidates.length === 0) {
+				logger.info(`No bootstrap marker for region '${region}' (${probed}) — the region is not opted in to cdkd asset storage; nothing to garbage-collect. (CDK bootstrap storage is 'cdk gc' territory.)`);
+				return;
+			}
+			logger.info(`No bootstrap marker for region '${region}' (${probed}) — the region is not opted in to cdkd asset storage, so no assets are in scope. (CDK bootstrap storage is 'cdk gc' territory.) Continuing with the state bucket's abandoned custom-resource response placeholders.`);
+		}
+		const marker = markerBody === null ? null : parseBootstrapMarker(markerBody, resolvedMarkerKey);
+		let s3Candidates = [];
+		let ecrCandidates = [];
+		if (marker !== null) {
+			const refs = await scanReferencedAssets(stateBackend, marker, logger);
+			s3Candidates = await listS3Candidates(awsClients.s3, marker.assetBucket, accountId, refs, cutoffMs, logger);
+			ecrCandidates = await listEcrCandidates(ecrClient, marker.containerRepo, refs, cutoffMs, logger);
+		}
+		if (marker !== null && s3Candidates.length === 0 && ecrCandidates.length === 0 && responseCandidates.length === 0) {
+			logger.info(`Nothing to garbage-collect in region '${region}': every object in ${marker.assetBucket} / image in ${marker.containerRepo} is either referenced by a deployed stack or newer than the --older-than cutoff, and no abandoned custom-resource response placeholder is older than it either.`);
 			return;
 		}
 		const s3Bytes = s3Candidates.reduce((sum, c) => sum + c.size, 0);
 		const ecrBytes = ecrCandidates.reduce((sum, c) => sum + c.size, 0);
-		const planLines = [...s3Candidates.map((c) => `s3://${marker.assetBucket}/${c.key} (${formatBytes(c.size)}, ${formatAge(c.lastModified)})`), ...ecrCandidates.map((c) => `${marker.containerRepo}${c.tags.length > 0 ? `:${c.tags.join(",")}` : ""}@${c.digest} (${formatBytes(c.size)}, ${formatAge(c.pushedAt)})`)];
-		const totals = `Total: ${s3Candidates.length} S3 object(s) (${formatBytes(s3Bytes)}) + ${ecrCandidates.length} ECR image(s) (${formatBytes(ecrBytes)}) = ${formatBytes(s3Bytes + ecrBytes)} reclaimable`;
+		const responseBytes = responseCandidates.reduce((sum, c) => sum + c.size, 0);
+		const assetBucket = marker !== null ? marker.assetBucket : "";
+		const containerRepo = marker !== null ? marker.containerRepo : "";
+		const planLines = [
+			...s3Candidates.map((c) => `s3://${assetBucket}/${c.key} (${formatBytes(c.size)}, ${formatAge(c.lastModified)})`),
+			...ecrCandidates.map((c) => `${containerRepo}${c.tags.length > 0 ? `:${c.tags.join(",")}` : ""}@${c.digest} (${formatBytes(c.size)}, ${formatAge(c.pushedAt)})`),
+			...responseCandidates.map((c) => `s3://${bucketName}/${c.key} (${formatBytes(c.size)}, ${formatAge(c.lastModified)}) [abandoned custom-resource response]`)
+		];
+		const totals = `Total: ${s3Candidates.length} S3 object(s) (${formatBytes(s3Bytes)}) + ${ecrCandidates.length} ECR image(s) (${formatBytes(ecrBytes)}) + ${responseCandidates.length} custom-resource response placeholder(s) (${formatBytes(responseBytes)}) = ${formatBytes(s3Bytes + ecrBytes + responseBytes)} reclaimable`;
 		if (options.dryRun) {
 			logger.info("");
-			logger.info(`Dry run — the following unreferenced assets in ${region} would be deleted:`);
+			logger.info(`Dry run — the following would be deleted in ${region}:`);
 			for (const line of planLines) logger.info(`  - ${line}`);
 			logger.info(totals);
 			logger.info("Dry run: nothing deleted. Re-run without --dry-run to delete.");
@@ -75390,15 +75484,23 @@ async function gcCommand(options) {
 			logger.info("gc cancelled — nothing deleted.");
 			return;
 		}
-		if (s3Candidates.length > 0) {
+		if (marker !== null && s3Candidates.length > 0) {
 			await deleteS3Candidates(awsClients.s3, marker.assetBucket, accountId, s3Candidates);
 			logger.info(`✓ Deleted ${s3Candidates.length} object(s) (${formatBytes(s3Bytes)}) from ${marker.assetBucket}`);
 		}
-		if (ecrCandidates.length > 0) {
+		if (marker !== null && ecrCandidates.length > 0) {
 			await deleteEcrCandidates(ecrClient, marker.containerRepo, ecrCandidates);
 			logger.info(`✓ Deleted ${ecrCandidates.length} image(s) (${formatBytes(ecrBytes)}) from ${marker.containerRepo}`);
 		}
-		logger.info(`\n✓ gc completed: ${formatBytes(s3Bytes + ecrBytes)} reclaimed`);
+		if (responseCandidates.length > 0) {
+			try {
+				await stateBackend.deleteRawObjects(responseCandidates.map((c) => c.key));
+			} catch (deleteError) {
+				throw new CdkdError(`Failed to delete ${responseCandidates.length} abandoned custom-resource response placeholder(s) from ${bucketName}: ${deleteError instanceof Error ? deleteError.message : String(deleteError)}`, "GC_DELETE_FAILED");
+			}
+			logger.info(`✓ Deleted ${responseCandidates.length} abandoned custom-resource response placeholder(s) (${formatBytes(responseBytes)}) from ${bucketName}`);
+		}
+		logger.info(`\n✓ gc completed: ${formatBytes(s3Bytes + ecrBytes + responseBytes)} reclaimed`);
 	} finally {
 		ecrClient.destroy();
 		markerS3Client.destroy();
@@ -75409,7 +75511,7 @@ async function gcCommand(options) {
 * Create the `cdkd gc` command (upstream `cdk gc` parity naming).
 */
 function createGcCommand() {
-	const cmd = new Command("gc").description("Garbage-collect unreferenced objects / images from ONE region's cdkd-owned asset storage (asset bucket + container-asset ECR repo). References are collected from every cdkd state file; CDK bootstrap storage is never touched (use cdk gc for that).").option("--state-bucket <bucket>", "S3 bucket holding cdkd state (default: cdkd-state-{accountId})").addOption(new Option("--older-than <duration>", "Never delete an object / image newer than this age, even when unreferenced (protects in-flight publishes and recent rollback targets). Accepts <n>d / <n>h.").default(DEFAULT_OLDER_THAN_MS, "30d").argParser(parseOlderThan)).option("--dry-run", "Print the reclaim plan (per-item list + totals) without deleting", false).addOption(new Option("--region <region>", "Region whose cdkd asset storage to garbage-collect (defaults to AWS_REGION, then AWS_DEFAULT_REGION, then your AWS profile's region, then us-east-1)")).action(withErrorHandling(async (options) => {
+	const cmd = new Command("gc").description("Garbage-collect unreferenced objects / images from ONE region's cdkd-owned asset storage (asset bucket + container-asset ECR repo), plus abandoned custom-resource response placeholders in the state bucket (account-wide). References are collected from every cdkd state file; CDK bootstrap storage is never touched (use cdk gc).").option("--state-bucket <bucket>", "S3 bucket holding cdkd state (default: cdkd-state-{accountId})").addOption(new Option("--older-than <duration>", "Never delete an object / image newer than this age, even when unreferenced (protects in-flight publishes and recent rollback targets). Accepts <n>d / <n>h.").default(DEFAULT_OLDER_THAN_MS, "30d").argParser(parseOlderThan)).option("--dry-run", "Print the reclaim plan (per-item list + totals) without deleting", false).addOption(new Option("--region <region>", "Region whose cdkd asset storage to garbage-collect (defaults to AWS_REGION, then AWS_DEFAULT_REGION, then your AWS profile's region, then us-east-1)")).action(withErrorHandling(async (options) => {
 		await gcCommand(options);
 	}));
 	commonOptions.forEach((opt) => cmd.addOption(opt));
@@ -87262,4 +87364,4 @@ function buildProgram() {
 
 //#endregion
 export { buildProgram };
-//# sourceMappingURL=program-BJ8R04vD.js.map
+//# sourceMappingURL=program-Bpz-tAA5.js.map