@go-to-k/cdkd 0.285.12 → 0.285.13

package/dist/{deploy-engine-C3epVkTj.js → deploy-engine-DhMm2M33.js}

@@ -1,6 +1,6 @@
 import { _ as withStackName, d as applyDefaultNameForFallback, f as generateResourceName, h as looksLikeCdkdGeneratedName, m as getCurrentStackName, n as getLogger, p as generateResourceNameWithFallback, r as isStdoutReservedForPayload, s as getLiveRenderer } from "./logger-Dw-3y48G.js";
 import { t as awsClientDefaults } from "./aws-client-defaults-D-iYiIJ6.js";
-import { t as getCdkdVersion } from "./version-CS-eKBJA.js";
+import { t as getCdkdVersion } from "./version-FLW4rE5A.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -2705,7 +2705,10 @@ var AZContextProvider = class {
 	async resolve(props) {
 		const region = props["region"] || this.awsConfig?.region;
 		this.logger.debug(`Fetching availability zones for region: ${region}`);
-		const client = new EC2Client({ ...region && { region } });
+		const client = new EC2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const azs = ((await client.send(new DescribeAvailabilityZonesCommand({}))).AvailabilityZones ?? []).filter((az) => az.State === "available").map((az) => az.ZoneName).filter(Boolean).sort();
 			this.logger.debug(`Found ${azs.length} availability zones: ${azs.join(", ")}`);
@@ -2735,7 +2738,10 @@ var SSMContextProvider = class {
 		const parameterName = props["parameterName"];
 		if (!parameterName) throw new Error("SSM context provider requires parameterName property");
 		this.logger.debug(`Reading SSM parameter: ${parameterName} (region: ${region})`);
-		const client = new SSMClient({ ...region && { region } });
+		const client = new SSMClient({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const response = await client.send(new GetParameterCommand({ Name: parameterName }));
 			if (!response.Parameter || response.Parameter.Value === void 0) {
@@ -2774,7 +2780,10 @@ var HostedZoneContextProvider = class {
 		const vpcId = props["vpcId"];
 		if (!domainName) throw new Error("Hosted zone context provider requires domainName property");
 		this.logger.debug(`Looking up hosted zone: ${domainName} (private: ${privateZone})`);
-		const client = new Route53Client({ ...region && { region } });
+		const client = new Route53Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const zones = (await client.send(new ListHostedZonesByNameCommand({
 				DNSName: domainName,
@@ -2825,7 +2834,10 @@ var VpcContextProvider = class {
 		const subnetGroupNameTag = props["subnetGroupNameTag"] || "aws-cdk:subnet-name";
 		const returnVpnGateways = props["returnVpnGateways"];
 		this.logger.debug(`Looking up VPC (region: ${region}, filter: ${JSON.stringify(filter)})`);
-		const client = new EC2Client({ ...region && { region } });
+		const client = new EC2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const vpcFilters = filter ? Object.entries(filter).map(([name, value]) => ({
 				Name: name,
@@ -2988,7 +3000,10 @@ var CcApiContextProvider = class {
 		const ignoreErrorOnMissingContext = props["ignoreErrorOnMissingContext"];
 		if (!typeName) throw new Error("CC API context provider requires typeName property");
 		this.logger.debug(`CC API lookup: ${typeName}${exactIdentifier ? ` (id: ${exactIdentifier})` : ""} (region: ${region})`);
-		const client = new CloudControlClient({ ...region && { region } });
+		const client = new CloudControlClient({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			let resources;
 			if (exactIdentifier) {
@@ -3115,7 +3130,10 @@ var AmiContextProvider = class {
 		const owners = props["owners"];
 		const filters = props["filters"];
 		this.logger.debug(`Looking up AMI (region: ${region})`);
-		const client = new EC2Client({ ...region && { region } });
+		const client = new EC2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const ec2Filters = filters ? Object.entries(filters).map(([name, values]) => ({
 				Name: name,
@@ -3155,7 +3173,10 @@ var SecurityGroupContextProvider = class {
 		const securityGroupName = props["securityGroupName"];
 		const vpcId = props["vpcId"];
 		this.logger.debug(`Looking up security group (id: ${securityGroupId}, name: ${securityGroupName}, region: ${region})`);
-		const client = new EC2Client({ ...region && { region } });
+		const client = new EC2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const filters = [];
 			if (securityGroupId) filters.push({
@@ -3206,7 +3227,10 @@ var LoadBalancerContextProvider = class {
 		const loadBalancerArn = props["loadBalancerArn"];
 		const loadBalancerType = props["loadBalancerType"];
 		this.logger.debug(`Looking up load balancer (arn: ${loadBalancerArn}, region: ${region})`);
-		const client = new ElasticLoadBalancingV2Client({ ...region && { region } });
+		const client = new ElasticLoadBalancingV2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			let lbs = (await client.send(new DescribeLoadBalancersCommand({ ...loadBalancerArn && { LoadBalancerArns: [loadBalancerArn] } }))).LoadBalancers ?? [];
 			if (loadBalancerType) lbs = lbs.filter((lb) => lb.Type === loadBalancerType);
@@ -3245,7 +3269,10 @@ var LoadBalancerListenerContextProvider = class {
 		const listenerPort = props["listenerPort"];
 		const listenerProtocol = props["listenerProtocol"];
 		this.logger.debug(`Looking up load balancer listener (arn: ${listenerArn}, lb: ${loadBalancerArn}, region: ${region})`);
-		const client = new ElasticLoadBalancingV2Client({ ...region && { region } });
+		const client = new ElasticLoadBalancingV2Client({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			let listeners = (await client.send(new DescribeListenersCommand({
 				...listenerArn && { ListenerArns: [listenerArn] },
@@ -3286,7 +3313,10 @@ var KeyContextProvider = class {
 		const aliasName = props["aliasName"];
 		if (!aliasName) throw new Error("Key context provider requires aliasName property");
 		this.logger.debug(`Looking up KMS key by alias: ${aliasName} (region: ${region})`);
-		const client = new KMSClient({ ...region && { region } });
+		const client = new KMSClient({
+			...awsClientDefaults(),
+			...region && { region }
+		});
 		try {
 			const normalizedAlias = aliasName.startsWith("alias/") ? aliasName : `alias/${aliasName}`;
 			let nextMarker;
@@ -4138,6 +4168,7 @@ async function uploadCfnTemplate(args) {
 		...s3ClientOpts?.credentials && { credentials: s3ClientOpts.credentials }
 	});
 	const s3 = new S3Client({
+		...awsClientDefaults({ profile: s3ClientOpts?.profile }),
 		region,
 		...s3ClientOpts?.profile && { profile: s3ClientOpts.profile },
 		...s3ClientOpts?.credentials && { credentials: s3ClientOpts.credentials }
@@ -4535,7 +4566,10 @@ async function expandMacrosAttempt(template, opts, logger) {
 		const serialized = JSON.stringify(template);
 		const parameters = buildParameterValues(template, logger);
 		ownsClient = opts.cfnClient === void 0;
-		cfn = opts.cfnClient ?? new CloudFormationClient({ region });
+		cfn = opts.cfnClient ?? new CloudFormationClient({
+			...awsClientDefaults(),
+			region
+		});
 		let templateInput;
 		if (serialized.length > 1048576) throw new MacroExpansionError(`Template is ${serialized.length} bytes, which exceeds CloudFormation's ${CFN_TEMPLATE_URL_LIMIT}-byte TemplateURL ceiling for macro expansion. Shrink inline payloads (move inline lambda.Code.ZipFile to lambda.Code.fromAsset, etc.) or split the stack before retrying.`);
 		if (serialized.length <= 51200) templateInput = { TemplateBody: serialized };
@@ -5143,7 +5177,10 @@ var Synthesizer = class {
 		const region = explicitRegion || await resolveSdkDefaultRegion(options.profile);
 		let accountId;
 		try {
-			const stsClient = new STSClient({ ...region && { region } });
+			const stsClient = new STSClient({
+				...awsClientDefaults(),
+				...region && { region }
+			});
 			accountId = (await stsClient.send(new GetCallerIdentityCommand({}))).Account;
 			stsClient.destroy();
 		} catch {
@@ -5235,7 +5272,10 @@ var Synthesizer = class {
 		if (!region) throw new SynthesisError(`Stack(s) [${stacksWithMacros.map((s) => s.stackName).join(", ")}] use CloudFormation macros (Transform / Fn::Transform) but cdkd could not resolve an AWS region for the expansion round-trip. Set AWS_REGION, pass --region <r>, or set env: { region: '<r>' } in your CDK Stack constructor.`);
 		let accountId = resolved?.accountId;
 		if (resolved === void 0 && !options.stateBucket) try {
-			const stsClient = new STSClient({ region });
+			const stsClient = new STSClient({
+				...awsClientDefaults(),
+				region
+			});
 			accountId = (await stsClient.send(new GetCallerIdentityCommand({}))).Account;
 			stsClient.destroy();
 		} catch {
@@ -5281,7 +5321,10 @@ var Synthesizer = class {
 async function resolveSdkDefaultRegion(profile) {
 	let client;
 	try {
-		client = new STSClient({ ...profile && { profile } });
+		client = new STSClient({
+			...awsClientDefaults({ profile }),
+			...profile && { profile }
+		});
 		return await client.config.region() || void 0;
 	} catch {
 		return;
@@ -5471,7 +5514,10 @@ var FileAssetPublisher = class {
 			const objectKey = this.resolvePlaceholders(dest.objectKey, accountId, region);
 			const destRegion = dest.region ? this.resolvePlaceholders(dest.region, accountId, region) : region;
 			this.logger.debug(`Publishing file asset ${asset.displayName || assetHash} → s3://${bucketName}/${objectKey}`);
-			const client = new S3Client({ region: destRegion });
+			const client = new S3Client({
+				...awsClientDefaults(),
+				region: destRegion
+			});
 			try {
 				if (await this.objectExists(client, bucketName, objectKey)) {
 					this.logger.debug(`Asset already exists, skipping: s3://${bucketName}/${objectKey}`);
@@ -6095,7 +6141,10 @@ var DockerAssetPublisher = class {
 			const destRegion = dest.region ? this.resolvePlaceholders(dest.region, accountId, region) : region;
 			const ecrUri = `${accountId}.dkr.ecr.${destRegion}.${ecrUrlSuffix(destRegion)}/${repositoryName}:${imageTag}`;
 			this.logger.debug(`Publishing Docker image ${asset.displayName || assetHash} → ${ecrUri}`);
-			const client = new ECRClient({ region: destRegion });
+			const client = new ECRClient({
+				...awsClientDefaults(),
+				region: destRegion
+			});
 			try {
 				if (await this.imageExists(client, repositoryName, imageTag)) {
 					this.logger.debug(`Image already exists, skipping: ${ecrUri}`);
@@ -6131,7 +6180,10 @@ var DockerAssetPublisher = class {
 			const imageTag = this.resolvePlaceholders(dest.imageTag, accountId, region);
 			const destRegion = dest.region ? this.resolvePlaceholders(dest.region, accountId, region) : region;
 			const ecrUri = `${accountId}.dkr.ecr.${destRegion}.${ecrUrlSuffix(destRegion)}/${repositoryName}:${imageTag}`;
-			const client = new ECRClient({ region: destRegion });
+			const client = new ECRClient({
+				...awsClientDefaults(),
+				region: destRegion
+			});
 			try {
 				if (await this.imageExists(client, repositoryName, imageTag)) {
 					this.logger.debug(`Image already exists, skipping: ${ecrUri}`);
@@ -7427,6 +7479,7 @@ function createAssetRedirectResolver(opts) {
 		accountIdPromise ??= (async () => {
 			const { STSClient, GetCallerIdentityCommand } = await import("@aws-sdk/client-sts");
 			const stsClient = new STSClient({
+				...awsClientDefaults({ profile: opts.profile }),
 				region: opts.stsRegion,
 				...opts.profile && { profile: opts.profile }
 			});
@@ -7706,7 +7759,10 @@ var AssetPublisher = class {
 			let accountId = options.accountId;
 			if (!accountId) {
 				const { STSClient, GetCallerIdentityCommand } = await import("@aws-sdk/client-sts");
-				const stsClient = new STSClient({ region });
+				const stsClient = new STSClient({
+					...awsClientDefaults(),
+					region
+				});
 				accountId = (await stsClient.send(new GetCallerIdentityCommand({}))).Account;
 				stsClient.destroy();
 			}
@@ -15100,7 +15156,7 @@ async function assumeRoleForCrossAccountStateRead(roleArn) {
 	const promise = (async () => {
 		const logger = getLogger().child("role-arn");
 		logger.debug(`Assuming role for cross-account state read: ${roleArn}`);
-		const sts = new STSClient({});
+		const sts = new STSClient({ ...awsClientDefaults() });
 		try {
 			let response;
 			try {
@@ -15169,7 +15225,10 @@ async function applyRoleArnIfSet(opts) {
 	if (!roleArn) return;
 	const logger = getLogger().child("role-arn");
 	logger.debug(`Assuming role ${roleArn}...`);
-	const sts = new STSClient({ ...opts.region && { region: opts.region } });
+	const sts = new STSClient({
+		...awsClientDefaults(),
+		...opts.region && { region: opts.region }
+	});
 	try {
 		const response = await sts.send(new AssumeRoleCommand({
 			RoleArn: roleArn,
@@ -16470,7 +16529,10 @@ var WAFv2WebACLProvider = class {
 		"AssociationConfig"
 	])]]);
 	getClient() {
-		if (!this.wafv2Client) this.wafv2Client = new WAFV2Client(this.providerRegion ? { region: this.providerRegion } : {});
+		if (!this.wafv2Client) this.wafv2Client = new WAFV2Client({
+			...awsClientDefaults(),
+			...this.providerRegion ? { region: this.providerRegion } : {}
+		});
 		return this.wafv2Client;
 	}
 	/**
@@ -18240,6 +18302,7 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 		const building = (async () => {
 			const { ServiceDiscoveryClient } = await import("@aws-sdk/client-servicediscovery");
 			return new ServiceDiscoveryClient({
+				...awsClientDefaults({ profile: scoped.credentialConfig?.profile }),
 				...scoped.credentialConfig ?? {},
 				...region ? { region } : {}
 			});
@@ -20047,7 +20110,10 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 	getCfnClient(region) {
 		let client = this.cfnClients[region];
 		if (!client) {
-			client = new CloudFormationClient({ region });
+			client = new CloudFormationClient({
+				...awsClientDefaults(),
+				region
+			});
 			this.cfnClients[region] = client;
 		}
 		return client;
@@ -20231,6 +20297,7 @@ var IntrinsicFunctionResolver = class IntrinsicFunctionResolver {
 		const { bucket, region: bucketRegion } = await resolveCrossAccountStateBucket(parsed.accountId, credentials);
 		const prefix = context.stateBackend?.prefix ?? "cdkd";
 		return new S3StateBackend(new S3Client({
+			...awsClientDefaults(),
 			region: bucketRegion,
 			credentials: {
 				accessKeyId: credentials.accessKeyId,
@@ -21836,7 +21903,7 @@ var CloudControlProvider = class {
 		const indeterminateGuard = await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-CXkE2U3z.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-DcFgnQQO.js").then((n) => n.n);
 			return withIndeterminateGuard(await new ASGProvider().delete(logicalId, physicalId, resourceType, _properties, context), indeterminateGuard);
 		}
 		const isProtectedEc2Instance = context?.removeProtection === true && resourceType === "AWS::EC2::Instance";
@@ -22209,7 +22276,7 @@ var CloudControlProvider = class {
 				break;
 			case "AWS::RDS::DBCluster":
 				try {
-					const cluster = (await new RDSClient({}).send(new DescribeDBClustersCommand({ DBClusterIdentifier: physicalId }))).DBClusters?.[0];
+					const cluster = (await new RDSClient({ ...awsClientDefaults() }).send(new DescribeDBClustersCommand({ DBClusterIdentifier: physicalId }))).DBClusters?.[0];
 					if (cluster) {
 						if (cluster.Endpoint) enriched["Endpoint.Address"] = cluster.Endpoint;
 						if (cluster.Port !== void 0) enriched["Endpoint.Port"] = String(cluster.Port);
@@ -22224,7 +22291,7 @@ var CloudControlProvider = class {
 				break;
 			case "AWS::RDS::DBInstance":
 				try {
-					const inst = (await new RDSClient({}).send(new DescribeDBInstancesCommand({ DBInstanceIdentifier: physicalId }))).DBInstances?.[0];
+					const inst = (await new RDSClient({ ...awsClientDefaults() }).send(new DescribeDBInstancesCommand({ DBInstanceIdentifier: physicalId }))).DBInstances?.[0];
 					if (inst) {
 						if (inst.Endpoint?.Address) enriched["Endpoint.Address"] = inst.Endpoint.Address;
 						if (inst.Endpoint?.Port !== void 0) enriched["Endpoint.Port"] = String(inst.Endpoint.Port);
@@ -22378,7 +22445,7 @@ var CloudControlProvider = class {
 				break;
 			case "AWS::ElastiCache::ReplicationGroup":
 				try {
-					const rg = (await new ElastiCacheClient({}).send(new DescribeReplicationGroupsCommand({ ReplicationGroupId: physicalId }))).ReplicationGroups?.[0];
+					const rg = (await new ElastiCacheClient({ ...awsClientDefaults() }).send(new DescribeReplicationGroupsCommand({ ReplicationGroupId: physicalId }))).ReplicationGroups?.[0];
 					if (rg) {
 						const primaryNode = rg.NodeGroups?.[0];
 						if (primaryNode?.PrimaryEndpoint?.Address) enriched["PrimaryEndPoint.Address"] = primaryNode.PrimaryEndpoint.Address;
@@ -22400,7 +22467,7 @@ var CloudControlProvider = class {
 				break;
 			case "AWS::Redshift::Cluster":
 				try {
-					const cluster = (await new RedshiftClient({}).send(new DescribeClustersCommand({ ClusterIdentifier: physicalId }))).Clusters?.[0];
+					const cluster = (await new RedshiftClient({ ...awsClientDefaults() }).send(new DescribeClustersCommand({ ClusterIdentifier: physicalId }))).Clusters?.[0];
 					if (cluster?.Endpoint) {
 						if (cluster.Endpoint.Address) enriched["Endpoint.Address"] = cluster.Endpoint.Address;
 						if (cluster.Endpoint.Port !== void 0) enriched["Endpoint.Port"] = String(cluster.Endpoint.Port);
@@ -22412,7 +22479,7 @@ var CloudControlProvider = class {
 				break;
 			case "AWS::OpenSearchService::Domain":
 				try {
-					const domain = (await new OpenSearchClient({}).send(new DescribeDomainCommand({ DomainName: physicalId }))).DomainStatus;
+					const domain = (await new OpenSearchClient({ ...awsClientDefaults() }).send(new DescribeDomainCommand({ DomainName: physicalId }))).DomainStatus;
 					if (domain) {
 						const endpoint = domain.Endpoint ?? domain.Endpoints?.["vpc"];
 						if (endpoint) enriched["DomainEndpoint"] = endpoint;
@@ -33962,4 +34029,4 @@ var DeployEngine = class {
 
 //#endregion
 export { DEFAULT_STATE_PREFIX as $, resolveUseCdkBootstrapAssets as $n, __exportAll as $r, isSingleDynamicReferenceToken as $t, bold as A, validateAssetBucketName as An, LocalStartServiceError as Ar, requireConfigObject as At, secretBearingStateKeyWarning as B, runDockerStreaming as Bn, StateError as Br, DiffCalculator as Bt, unsupportedFinalSnapshotError as C, BOOTSTRAP_MARKER_PREFIX as Cn, ConfigError as Cr, assertRegionMatch as Ct, isStatefulRecreateTargetSync as D, isCrossRegionRedirect as Dn, DynamicReferenceRegionAmbiguousError as Dr, readConfigString as Dt, MULTI_REGION_RECREATE_BLOCKED_TYPES as E, getBootstrapMarkerKey as En, DeployCancelledError as Er, configStringRefusal as Et, yellow as F, dockerSpawnEnvWithSensitive as Fn, ProvisioningError as Fr, s3BucketDomainName as Ft, clearOnUpdateRemoval as G, getDefaultStateBucketName as Gn, withErrorHandling as Gr, TemplateParser as Gt, getCurrentResourceSecrets as H, getDockerImageBySourceHash as Hn, formatError as Hr, describeTypeWithThrottleRetry as Ht, collectDeclaredOutputNames as I, formatDockerLoginError as In, ResourceTimeoutError as Ir, s3BucketDualStackDomainName as It, findSilentDropProperties as J, resolveAutoAssetStorage as Jn, isThrottlingError as Jr, TEMPLATE_SOURCED_RULES as Jt, ProviderRegistry as K, getLegacyStateBucketName as Kn, isMarkedNonRetryable as Kr, STATE_SOURCED_CROSS_GENERATION_RULES as Kt, collectPublishedOutputNames as L, getDockerCmd as Ln, ResourceUpdateNotSupportedError as Lr, s3BucketRegionalDomainName as Lt, gray as M, buildDenyExternalAccessPolicy as Mn, MissingCdkCliError as Mr, classifyReplaySecretRegion as Mt, green as N, describeAwsFailure as Nn, NestedStackChildDirectDestroyError as Nr, producerRegionsFromState as Nt, renderStatefulReason as O, parseBootstrapMarker as On, LocalInvokeBuildError as Or, replayWarn as Ot, red as P, buildDockerImage as Pn, PartialFailureError as Pr, s3BucketArn as Pt, CUSTOM_RESOURCE_RESPONSE_PREFIX as Q, resolveStateBucketWithDefaultAndSource as Qn, retryClassificationText as Qr, errorCauseChain as Qt, exportAliasCollisionScrubWarning as R, partitionSensitiveEnv as Rn, StackHasActiveImportsError as Rr, s3BucketWebsiteUrl as Rt, refusesFinalSnapshot as S, AssetModeResolver as Sn, CdkdError as Sr, resolveExplicitPhysicalId as St, extractDeploymentEventError as T, ensureAssetStorage as Tn, DependencyError as Tr, configBooleanRefusal as Tt, IAMRoleProvider as U, Synthesizer as Un, isCdkdError as Ur, withRetry as Ut, stateKeySecretExposure as V, AssetManifestLoader as Vn, SynthesisError as Vr, INTRINSIC_KEYS as Vt, collectInlinePolicyNamesManagedBySiblings as W, synthesisStatusMessage as Wn, normalizeAwsError as Wr, DagBuilder as Wt, maskDeep as X, resolveSkipPrefix as Xn, markNonRetryable as Xr, createSecretMasker as Xt, createMaskedRetryLogger as Y, resolveCaptureObservedState as Yn, isTransientServerError as Yr, carriesSecretMask as Yt, maskerOrIdentity as Z, resolveStateBucketWithDefault as Zn, markRedactedCause as Zr, dynamicReferenceTokens as Zt, PRE_DELETE_SNAPSHOT_TYPES as _, createAssetRedirectResolver as _n, AwsClients as _r, isUnboundTemplateParameter as _t, DeploymentEventsStore as a, scrubResourceRecord as an, findLargeInlineResources as ar, CloudControlProvider as at, createPreDeleteFinalSnapshot as b, escapeRegExp$1 as bn, setAwsClients as br, WAFv2WebACLProvider as bt, replayFailedOperations as c, rebuildClientForBucketRegion as cn, displaySafe as cr, deleteIndeterminateGuards as ct, updatePartialReason as d, importableOutputs as dn, canonicalizeRegion as dr, isTerminationProtectionPropagationError as dt, maskSecretsInError as en, stateBucketExistenceConfirmed as er, beginCommandInterruptScope as et, withResourceDeadline as f, shouldRetainResource as fn, derivePartitionAndUrlSuffix as fr, IntrinsicFunctionResolver as ft, ATOMIC_FINAL_SNAPSHOT_TYPES as g, buildAssetRedirectMap as gn, resolveBucketRegion as gr, getAccountInfo as gt, computeImplicitDeleteEdges as h, WorkGraph as hn, clearBucketRegionCache as hr, coerceParameterTypedValue as ht, DeploymentEventsReader as i, redactSecretsForState as in, MIGRATE_TMP_PREFIX as ir, startInterruptWatch as it, cyan as j, validateContainerRepoName as jn, LockError as jr, requireConfigString as jt, formatResourceLine as k, readBootstrapMarkerBody as kn, LocalMigrateError as kr, requireConfigArray as kt, replayRollback as l, exportNamesCarriedFrom as ln, expectedOwnerParam as lr, deleteSkipReason as lt, IMPLICIT_DELETE_DEPENDENCIES as m, stringifyValue as mn, processStackMessages as mr, cfnRefValueFromPhysicalId as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, recordMaskOnlyValue as nn, CFN_TEMPLATE_BODY_LIMIT as nr, interruptWatchListenerCount as nt, planFailedOps as o, LockManager as on, uploadCfnTemplate as or, slowCcOperationTimeoutMs as ot, maskingRetryLogger as p, AssetPublisher as pn, AssemblyReader as pr, carriesDynamicReference as pt, findActionableSilentDrops as q, resolveApp as qn, isRetryableTransientError as qr, STATE_SOURCED_READBACK_RULES as qt, DeployEngine as r, recoverMaskedOutput as rn, CFN_TEMPLATE_URL_LIMIT as rr, isInterruptedWaitError as rt, planRollback as s, S3StateBackend as sn, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as sr, UNSPECIFIED_SKIP_REASON as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, maskSecretsInText as tn, warnDeprecatedNoPrefixCliFlag as tr, endCommandInterruptScope as tt, updatePartialMessage as u, importableOutputKeys as un, PARTITION_TABLE as ur, disableInstanceApiTermination as ut, buildFinalSnapshotIdentifier as v, loadPublishableAssetManifest as vn, getAwsClients as vr, parameterTypeMayLoseSecretIdentity as vt, makeCanonicalizePropertiesFn as w, assertAssetBucketRegion as wn, CrossAccountSecretRefusalError as wr, coerceCfnBoolean as wt, isFinalSnapshotError as x, stripControlChars as xn, AssetError as xr, normalizeAwsTagsToCfn as xt, ccRoutedFinalSnapshotError as y, rewriteTemplateAssetReferences as yn, resetAwsClients as yr, refStateLookupFromResource as yt, isExportAliasCollision as z, runDockerForeground as zn, StackTerminationProtectionError as zr, applyRoleArnIfSet as zt };
-//# sourceMappingURL=deploy-engine-C3epVkTj.js.map
+//# sourceMappingURL=deploy-engine-DhMm2M33.js.map