@go-to-k/cdkd 0.284.73 → 0.284.75

package/dist/{deploy-engine-DjcVPGO-.js → deploy-engine-B6xURS3W.js}

@@ -1,5 +1,5 @@
 import { d as generateResourceName, f as generateResourceNameWithFallback, g as withStackName, m as looksLikeCdkdGeneratedName, n as getLogger, o as getLiveRenderer, p as getCurrentStackName, u as applyDefaultNameForFallback } from "./logger-C9-E73FI.js";
-import { t as getCdkdVersion } from "./version-NRgaYAmx.js";
+import { t as getCdkdVersion } from "./version-B8O0NnWg.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -15679,6 +15679,48 @@ function collectReferencedParameterNames(template) {
 	return referenced;
 }
 /**
+* Is `name` a template Parameter this caller has left UNBOUND — declared, with
+* no `Default`, and with no value supplied?
+* (issue [#2285](https://github.com/go-to-k/cdkd/issues/2285))
+*
+* ONE predicate, consulted VERBATIM by the two sites that ask this same
+* question, rather than two spellings that agree until they do not:
+*
+*  - {@link IntrinsicFunctionResolver.resolveParameters} raises
+*    `Parameter <name> is required ...` for exactly this population. It is the
+*    UPFRONT validation, and it runs on every path that binds parameters at
+*    all (`deploy-engine`'s step 2.5, `diff-recursive`, `scrub`, `import`), so
+*    a plain `cdkd deploy` never reaches the resolver with this population at
+*    all -- it has already failed.
+*  - {@link IntrinsicFunctionResolver.subPlaceholderNamesADeclaredTemplateEntity}
+*    answers for the callers that CATCH that error and resolve anyway.
+*    `cdkd import --migrate-from-cloudformation` is the live one: it logs the
+*    parameter-resolution failure and continues with an EMPTY bag, on a context
+*    that is NOT `bestEffort`, so `${Stage}` used to be written verbatim into
+*    the imported resource's persisted properties -- and from there into the
+*    next deploy's desired bag, which is how the literal reaches AWS.
+*
+* A key PRESENT with an `undefined` value is not a binding: `resolveParameters`
+* falls through such a key to the `Default` check, so the predicate must too.
+* That single edge is the reason this is shared code and not a paraphrase.
+*
+* A `Default`-carrying parameter the caller never merged is DELIBERATELY not
+* in this population. `resolveParameters` merges every `Default` it sees, so
+* the only way to reach the resolver with one unbound is to have discarded the
+* whole bag -- and refusing there would newly hard-fail input cdkd accepts
+* today, for a parameter whose value the template itself declares.
+*/
+function isUnboundTemplateParameter(name, template, boundParameters) {
+	const declaredParameters = template?.Parameters;
+	if (declaredParameters === void 0 || declaredParameters === null || typeof declaredParameters !== "object") return false;
+	if (!Object.hasOwn(declaredParameters, name)) return false;
+	const definition = declaredParameters[name];
+	if (definition === void 0 || definition === null || typeof definition !== "object") return false;
+	if ("Default" in definition) return false;
+	if (boundParameters === void 0) return true;
+	return !(name in boundParameters) || boundParameters[name] === void 0;
+}
+/**
 * Does coercing to `type` risk destroying the plaintext cdkd redacts against?
 *
 * DERIVED from {@link coerceParameterTypedValue}, never enumerated beside it.
@@ -16206,6 +16248,7 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 		let referencedNames;
 		for (const [name, definition] of Object.entries(templateParameters)) {
 			const paramDef = definition;
+			if (isUnboundTemplateParameter(name, template, userParameters)) throw new Error(`Parameter ${name} is required but no value was provided and no default exists`);
 			if (userParameters && name in userParameters) {
 				const userValue = userParameters[name];
 				if (userValue !== void 0) {
@@ -16233,7 +16276,6 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 				this.logger.debug(`Parameter ${name}: using default value ${maskInherited(stringifyParameterForLog(paramDef, paramDef.Default))}`);
 				continue;
 			}
-			throw new Error(`Parameter ${name} is required but no value was provided and no default exists`);
 		}
 		return parameters;
 	}
@@ -17024,8 +17066,10 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 		return `Fn::Sub variable ${varName} could not be resolved (${error instanceof Error ? error.message : String(error)}), keeping placeholder`;
 	}
 	/**
-	* Does this `Fn::Sub` placeholder NAME a resource of this template
-	* (issue [#2270](https://github.com/go-to-k/cdkd/issues/2270))?
+	* Does this `Fn::Sub` placeholder NAME an entity of this template -- a
+	* resource (issue [#2270](https://github.com/go-to-k/cdkd/issues/2270)) or
+	* an unbound parameter (issue
+	* [#2285](https://github.com/go-to-k/cdkd/issues/2285))?
 	*
 	* The discriminator `resolveSub`'s catch was missing. Two very different
 	* things reach that catch and it collapsed both into "keep the placeholder":
@@ -17065,37 +17109,48 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 	* intrinsic-sub-nested-stack-outputs.test.ts` drives each one in isolation
 	* (an empty `Resources` with a populated `resources`, and the reverse).
 	*
-	* PARAMETERS are deliberately NOT included, and the reason is NOT that
-	* parameters are somehow safer. `resolvePseudoParameter` and `resolveRef`
-	* already answer for every parameter that HAS a value, so the only thing a
-	* `template.Parameters` arm would newly refuse is a placeholder naming a
-	* DECLARED parameter with no bound value — and that includes a parameter
-	* carrying a `Default` which the caller never merged into
-	* `context.parameters`. Those deploys succeed today, and refusing them would
-	* be a hard-failure regression on working templates, so the arm stays out.
-	* The residual is real and is tracked separately: such a placeholder still
-	* ships `${Stage}` as literal text.
-	*
-	* An earlier revision justified the exclusion by "the routine `cdkd scrub`
-	* case (it takes no `--parameters`)". That reason was FALSE and is recorded
-	* here so it is not reintroduced: `scrub.ts`'s `resolverContext` factory sets
+	* PARAMETERS are included too, but only for the UNBOUND population
+	* {@link isUnboundTemplateParameter} defines -- declared, no `Default`, no
+	* bound value (issue
+	* [#2285](https://github.com/go-to-k/cdkd/issues/2285)). `resolveRef` and
+	* `resolvePseudoParameter` already answer for every parameter that HAS a
+	* value, so that population is the whole of what this arm newly refuses,
+	* and it is the one whose placeholder used to be persisted verbatim.
+	*
+	* The predicate is SHARED with `resolveParameters`, which raises
+	* `Parameter <name> is required ...` for exactly the same population up
+	* front -- so on a plain `cdkd deploy` this arm is unreachable by
+	* construction, and what it actually covers is the caller that CATCHES that
+	* error and resolves anyway (`cdkd import --migrate-from-cloudformation`,
+	* on a context that is not `bestEffort`).
+	*
+	* A parameter carrying a `Default` the caller never merged stays OUT, for
+	* the reason recorded on the shared predicate: refusing it would newly
+	* hard-fail input cdkd accepts today.
+	*
+	* An earlier revision excluded parameters WHOLESALE and justified that by
+	* "the routine `cdkd scrub` case (it takes no `--parameters`)". That reason
+	* was FALSE and is recorded here so it is not reintroduced: `scrub.ts`'s `resolverContext` factory sets
 	* `bestEffort: true` in the same object literal that binds `template` and
 	* `resources`, so scrub short-circuits in `rethrowStructuralSubFailure`
 	* before this predicate is consulted at all — it can neither benefit from
 	* nor be harmed by what this function includes.
 	*/
-	subPlaceholderNamesADeclaredResource(varName, context) {
+	subPlaceholderNamesADeclaredTemplateEntity(varName, context) {
 		const firstDot = varName.indexOf(".");
 		const head = firstDot >= 0 ? varName.slice(0, firstDot) : varName;
 		if (head === "") return false;
 		if (Object.hasOwn(context.resources, head)) return true;
 		const declared = context.template?.Resources;
-		if (declared === void 0 || declared === null || typeof declared !== "object") return false;
-		return Object.hasOwn(declared, head);
+		if (declared !== void 0 && declared !== null && typeof declared === "object") {
+			if (Object.hasOwn(declared, head)) return true;
+		}
+		return isUnboundTemplateParameter(head, context.template, context.parameters);
 	}
 	/**
 	* Refuse to launder a STRUCTURAL `Fn::Sub` failure into a literal
-	* (issue [#2270](https://github.com/go-to-k/cdkd/issues/2270)).
+	* (issues [#2270](https://github.com/go-to-k/cdkd/issues/2270) and
+	* [#2285](https://github.com/go-to-k/cdkd/issues/2285)).
 	*
 	* Called from both arms of `resolveSub`'s catch — the dotted (GetAtt) one
 	* and the bare (Ref) one — after the
@@ -17123,7 +17178,7 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 	*/
 	rethrowStructuralSubFailure(varName, error, context) {
 		if (context.bestEffort) return;
-		if (!this.subPlaceholderNamesADeclaredResource(varName, context)) return;
+		if (!this.subPlaceholderNamesADeclaredTemplateEntity(varName, context)) return;
 		throw error;
 	}
 	/**
@@ -19459,7 +19514,7 @@ var CloudControlProvider = class {
 		await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-xXB0aei5.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-DdsyGm69.js").then((n) => n.n);
 			return await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context);
 		}
 		const isProtectedEc2Instance = context?.removeProtection === true && resourceType === "AWS::EC2::Instance";
@@ -31343,5 +31398,5 @@ var DeployEngine = class {
 };
 
 //#endregion
-export { maskerOrIdentity as $, findLargeInlineResources as $n, scrubResourceRecord as $t, renderStatefulReason as A, formatDockerLoginError as An, StackHasActiveImportsError as Ar, producerRegionsFromState as At, exportAliasCollisionScrubWarning as B, getLegacyStateBucketName as Bn, isThrottlingError as Br, withRetry as Bt, isFinalSnapshotError as C, parseBootstrapMarker as Cn, LockError as Cr, configStringRefusal as Ct, extractDeploymentEventError as D, buildDenyExternalAccessPolicy as Dn, ProvisioningError as Dr, requireConfigObject as Dt, makeCanonicalizePropertiesFn as E, validateContainerRepoName as En, PartialFailureError as Er, requireConfigArray as Et, green as F, AssetManifestLoader as Fn, isCdkdError as Fr, s3BucketWebsiteUrl as Ft, IAMRoleProvider as G, resolveStateBucketWithDefault as Gn, TEMPLATE_SOURCED_RULES as Gt, secretBearingStateKeyWarning as H, resolveAutoAssetStorage as Hn, __exportAll as Hr, TemplateParser as Ht, red as I, getDockerImageBySourceHash as In, normalizeAwsError as Ir, applyRoleArnIfSet as It, ProviderRegistry as J, stateBucketExistenceConfirmed as Jn, errorCauseChain as Jt, collectInlinePolicyNamesManagedBySiblings as K, resolveStateBucketWithDefaultAndSource as Kn, createSecretMasker as Kt, yellow as L, Synthesizer as Ln, withErrorHandling as Lr, DiffCalculator as Lt, bold as M, partitionSensitiveEnv as Mn, StateError as Mr, s3BucketDomainName as Mt, cyan as N, runDockerForeground as Nn, SynthesisError as Nr, s3BucketDualStackDomainName as Nt, MULTI_REGION_RECREATE_BLOCKED_TYPES as O, buildDockerImage as On, ResourceTimeoutError as Or, requireConfigString as Ot, gray as P, runDockerStreaming as Pn, formatError as Pr, s3BucketRegionalDomainName as Pt, maskDeep as Q, MIGRATE_TMP_PREFIX as Qn, redactSecretsForState as Qt, collectDeclaredOutputNames as R, synthesisStatusMessage as Rn, isMarkedNonRetryable as Rr, INTRINSIC_KEYS as Rt, createPreDeleteFinalSnapshot as S, isCrossRegionRedirect as Sn, LocalStartServiceError as Sr, configBooleanRefusal as St, unsupportedFinalSnapshotError as T, validateAssetBucketName as Tn, NestedStackChildDirectDestroyError as Tr, replayWarn as Tt, stateKeySecretExposure as U, resolveCaptureObservedState as Un, STATE_SOURCED_CROSS_GENERATION_RULES as Ut, isExportAliasCollision as V, resolveApp as Vn, markNonRetryable as Vr, DagBuilder as Vt, getCurrentResourceSecrets as W, resolveSkipPrefix as Wn, STATE_SOURCED_READBACK_RULES as Wt, findSilentDropProperties as X, CFN_TEMPLATE_BODY_LIMIT as Xn, maskSecretsInError as Xt, findActionableSilentDrops as Y, warnDeprecatedNoPrefixCliFlag as Yn, isSingleDynamicReferenceToken as Yt, createMaskedRetryLogger as Z, CFN_TEMPLATE_URL_LIMIT as Zn, maskSecretsInText as Zt, computeImplicitDeleteEdges as _, AssetModeResolver as _n, DependencyError as _r, WAFv2WebACLProvider as _t, DeploymentEventsStore as a, importableOutputKeys as an, AssemblyReader as ar, isInterruptedWaitError as at, buildFinalSnapshotIdentifier as b, ensureAssetStorage as bn, LocalInvokeBuildError as br, assertRegionMatch as bt, replayFailedOperations as c, AssetPublisher as cn, resolveBucketRegion as cr, slowCcOperationTimeoutMs as ct, updatePartialReason as d, buildAssetRedirectMap as dn, resetAwsClients as dr, IntrinsicFunctionResolver as dt, LockManager as en, uploadCfnTemplate as er, CUSTOM_RESOURCE_RESPONSE_PREFIX as et, UNSPECIFIED_SKIP_REASON as f, createAssetRedirectResolver as fn, setAwsClients as fr, carriesDynamicReference as ft, IMPLICIT_DELETE_DEPENDENCIES as g, stripControlChars as gn, CrossAccountSecretRefusalError as gr, refStateLookupFromResource as gt, maskingRetryLogger as h, escapeRegExp$1 as hn, ConfigError as hr, parameterTypeMayLoseSecretIdentity as ht, DeploymentEventsReader as i, exportNamesCarriedFrom as in, derivePartitionAndUrlSuffix as ir, interruptWatchListenerCount as it, formatResourceLine as j, getDockerCmd as jn, StackTerminationProtectionError as jr, s3BucketArn as jt, isStatefulRecreateTargetSync as k, dockerSpawnEnvWithSensitive as kn, ResourceUpdateNotSupportedError as kr, classifyReplaySecretRegion as kt, replayRollback as l, stringifyValue as ln, AwsClients as lr, disableInstanceApiTermination as lt, withResourceDeadline as m, rewriteTemplateAssetReferences as mn, CdkdError as mr, getAccountInfo as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, S3StateBackend as nn, PARTITION_TABLE as nr, beginCommandInterruptScope as nt, planFailedOps as o, importableOutputs as on, processStackMessages as or, startInterruptWatch as ot, deleteSkipReason as p, loadPublishableAssetManifest as pn, AssetError as pr, cfnRefValueFromPhysicalId as pt, clearOnUpdateRemoval as q, resolveUseCdkBootstrapAssets as qn, dynamicReferenceTokens as qt, DeployEngine as r, rebuildClientForBucketRegion as rn, canonicalizeRegion as rr, endCommandInterruptScope as rt, planRollback as s, shouldRetainResource as sn, clearBucketRegionCache as sr, CloudControlProvider as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, displaySafe as tn, expectedOwnerParam as tr, DEFAULT_STATE_PREFIX as tt, updatePartialMessage as u, WorkGraph as un, getAwsClients as ur, isTerminationProtectionPropagationError as ut, ATOMIC_FINAL_SNAPSHOT_TYPES as v, BOOTSTRAP_MARKER_PREFIX as vn, DeployCancelledError as vr, normalizeAwsTagsToCfn as vt, refusesFinalSnapshot as w, readBootstrapMarkerBody as wn, MissingCdkCliError as wr, readConfigString as wt, ccRoutedFinalSnapshotError as x, getBootstrapMarkerKey as xn, LocalMigrateError as xr, coerceCfnBoolean as xt, PRE_DELETE_SNAPSHOT_TYPES as y, assertAssetBucketRegion as yn, DynamicReferenceRegionAmbiguousError as yr, resolveExplicitPhysicalId as yt, collectPublishedOutputNames as z, getDefaultStateBucketName as zn, isRetryableTransientError as zr, describeTypeWithThrottleRetry as zt };
-//# sourceMappingURL=deploy-engine-DjcVPGO-.js.map
+export { maskerOrIdentity as $, MIGRATE_TMP_PREFIX as $n, redactSecretsForState as $t, renderStatefulReason as A, dockerSpawnEnvWithSensitive as An, ResourceUpdateNotSupportedError as Ar, classifyReplaySecretRegion as At, exportAliasCollisionScrubWarning as B, getDefaultStateBucketName as Bn, isRetryableTransientError as Br, describeTypeWithThrottleRetry as Bt, isFinalSnapshotError as C, isCrossRegionRedirect as Cn, LocalStartServiceError as Cr, configBooleanRefusal as Ct, extractDeploymentEventError as D, validateContainerRepoName as Dn, PartialFailureError as Dr, requireConfigArray as Dt, makeCanonicalizePropertiesFn as E, validateAssetBucketName as En, NestedStackChildDirectDestroyError as Er, replayWarn as Et, green as F, runDockerStreaming as Fn, formatError as Fr, s3BucketRegionalDomainName as Ft, IAMRoleProvider as G, resolveSkipPrefix as Gn, STATE_SOURCED_READBACK_RULES as Gt, secretBearingStateKeyWarning as H, resolveApp as Hn, markNonRetryable as Hr, DagBuilder as Ht, red as I, AssetManifestLoader as In, isCdkdError as Ir, s3BucketWebsiteUrl as It, ProviderRegistry as J, resolveUseCdkBootstrapAssets as Jn, dynamicReferenceTokens as Jt, collectInlinePolicyNamesManagedBySiblings as K, resolveStateBucketWithDefault as Kn, TEMPLATE_SOURCED_RULES as Kt, yellow as L, getDockerImageBySourceHash as Ln, normalizeAwsError as Lr, applyRoleArnIfSet as Lt, bold as M, getDockerCmd as Mn, StackTerminationProtectionError as Mr, s3BucketArn as Mt, cyan as N, partitionSensitiveEnv as Nn, StateError as Nr, s3BucketDomainName as Nt, MULTI_REGION_RECREATE_BLOCKED_TYPES as O, buildDenyExternalAccessPolicy as On, ProvisioningError as Or, requireConfigObject as Ot, gray as P, runDockerForeground as Pn, SynthesisError as Pr, s3BucketDualStackDomainName as Pt, maskDeep as Q, CFN_TEMPLATE_URL_LIMIT as Qn, maskSecretsInText as Qt, collectDeclaredOutputNames as R, Synthesizer as Rn, withErrorHandling as Rr, DiffCalculator as Rt, createPreDeleteFinalSnapshot as S, getBootstrapMarkerKey as Sn, LocalMigrateError as Sr, coerceCfnBoolean as St, unsupportedFinalSnapshotError as T, readBootstrapMarkerBody as Tn, MissingCdkCliError as Tr, readConfigString as Tt, stateKeySecretExposure as U, resolveAutoAssetStorage as Un, __exportAll as Ur, TemplateParser as Ut, isExportAliasCollision as V, getLegacyStateBucketName as Vn, isThrottlingError as Vr, withRetry as Vt, getCurrentResourceSecrets as W, resolveCaptureObservedState as Wn, STATE_SOURCED_CROSS_GENERATION_RULES as Wt, findSilentDropProperties as X, warnDeprecatedNoPrefixCliFlag as Xn, isSingleDynamicReferenceToken as Xt, findActionableSilentDrops as Y, stateBucketExistenceConfirmed as Yn, errorCauseChain as Yt, createMaskedRetryLogger as Z, CFN_TEMPLATE_BODY_LIMIT as Zn, maskSecretsInError as Zt, computeImplicitDeleteEdges as _, stripControlChars as _n, CrossAccountSecretRefusalError as _r, refStateLookupFromResource as _t, DeploymentEventsStore as a, exportNamesCarriedFrom as an, derivePartitionAndUrlSuffix as ar, isInterruptedWaitError as at, buildFinalSnapshotIdentifier as b, assertAssetBucketRegion as bn, DynamicReferenceRegionAmbiguousError as br, resolveExplicitPhysicalId as bt, replayFailedOperations as c, shouldRetainResource as cn, clearBucketRegionCache as cr, slowCcOperationTimeoutMs as ct, updatePartialReason as d, WorkGraph as dn, getAwsClients as dr, IntrinsicFunctionResolver as dt, scrubResourceRecord as en, findLargeInlineResources as er, CUSTOM_RESOURCE_RESPONSE_PREFIX as et, UNSPECIFIED_SKIP_REASON as f, buildAssetRedirectMap as fn, resetAwsClients as fr, carriesDynamicReference as ft, IMPLICIT_DELETE_DEPENDENCIES as g, escapeRegExp$1 as gn, ConfigError as gr, parameterTypeMayLoseSecretIdentity as gt, maskingRetryLogger as h, rewriteTemplateAssetReferences as hn, CdkdError as hr, isUnboundTemplateParameter as ht, DeploymentEventsReader as i, rebuildClientForBucketRegion as in, canonicalizeRegion as ir, interruptWatchListenerCount as it, formatResourceLine as j, formatDockerLoginError as jn, StackHasActiveImportsError as jr, producerRegionsFromState as jt, isStatefulRecreateTargetSync as k, buildDockerImage as kn, ResourceTimeoutError as kr, requireConfigString as kt, replayRollback as l, AssetPublisher as ln, resolveBucketRegion as lr, disableInstanceApiTermination as lt, withResourceDeadline as m, loadPublishableAssetManifest as mn, AssetError as mr, getAccountInfo as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, displaySafe as nn, expectedOwnerParam as nr, beginCommandInterruptScope as nt, planFailedOps as o, importableOutputKeys as on, AssemblyReader as or, startInterruptWatch as ot, deleteSkipReason as p, createAssetRedirectResolver as pn, setAwsClients as pr, cfnRefValueFromPhysicalId as pt, clearOnUpdateRemoval as q, resolveStateBucketWithDefaultAndSource as qn, createSecretMasker as qt, DeployEngine as r, S3StateBackend as rn, PARTITION_TABLE as rr, endCommandInterruptScope as rt, planRollback as s, importableOutputs as sn, processStackMessages as sr, CloudControlProvider as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, LockManager as tn, uploadCfnTemplate as tr, DEFAULT_STATE_PREFIX as tt, updatePartialMessage as u, stringifyValue as un, AwsClients as ur, isTerminationProtectionPropagationError as ut, ATOMIC_FINAL_SNAPSHOT_TYPES as v, AssetModeResolver as vn, DependencyError as vr, WAFv2WebACLProvider as vt, refusesFinalSnapshot as w, parseBootstrapMarker as wn, LockError as wr, configStringRefusal as wt, ccRoutedFinalSnapshotError as x, ensureAssetStorage as xn, LocalInvokeBuildError as xr, assertRegionMatch as xt, PRE_DELETE_SNAPSHOT_TYPES as y, BOOTSTRAP_MARKER_PREFIX as yn, DeployCancelledError as yr, normalizeAwsTagsToCfn as yt, collectPublishedOutputNames as z, synthesisStatusMessage as zn, isMarkedNonRetryable as zr, INTRINSIC_KEYS as zt };
+//# sourceMappingURL=deploy-engine-B6xURS3W.js.map