@go-to-k/cdkd 0.288.7 → 0.289.0

package/dist/index.d.ts

@@ -23,7 +23,7 @@ import { LambdaMicrovmsClient } from "@aws-sdk/client-lambda-microvms";
 import { ECRClient } from "@aws-sdk/client-ecr";
 import graphlib from "graphlib";
 //#region src/types/state.d.ts
-type StateSchemaVersion = 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9;
+type StateSchemaVersion = 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10;
 interface StateImportEntry {
   sourceStack: string;
   sourceRegion: string;
@@ -47,8 +47,14 @@ interface StackState {
   parentStack?: string;
   parentLogicalId?: string;
   parentRegion?: string;
+  orphans?: StackOrphanRecord[];
   lastModified: number;
 }
+interface StackOrphanRecord {
+  logicalId: string;
+  orphanedAt: number;
+  state: ResourceState;
+}
 interface ResourceState {
   physicalId: string;
   resourceType: string;
@@ -60,6 +66,7 @@ interface ResourceState {
   deletionPolicy?: 'Delete' | 'Retain' | 'Snapshot' | 'RetainExceptOnCreate' | undefined;
   updateReplacePolicy?: 'Delete' | 'Retain' | 'Snapshot' | 'RetainExceptOnCreate' | undefined;
   provisionedBy?: 'sdk' | 'cc-api' | undefined;
+  observedBaselineRefused?: true | undefined;
 }
 interface LockInfo {
   owner: string;
@@ -1147,6 +1154,7 @@ declare class DeployEngine {
   private perResourceSecrets;
   private noEchoAttributeResources;
   private perResourceTemplateProps;
+  private perResourceResolvedType;
   private outputSecrets;
   private outputsTemplateSource;
   private resolvedExportNames;
@@ -1174,6 +1182,7 @@ declare class DeployEngine {
   private doDeploy;
   private executeDeployment;
   private persistStateAfterOutputFailure;
+  private adoptRollbackOrphans;
   private performRollback;
   private deleteRollbackJournalBestEffort;
   private settleJournalAfterCleanRollback;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-noncurrent-version-purge.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAuGY;UAyBK;EAEf;EAMA;EAEA;;UAsBe;EAEf;EAMA;EAEA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EAyEA,iBAAiB;EAgBjB;EAcA;EAYA;EAGA;;UAMe;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EA0CA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UAgGe;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KC9lBU,uBAAuB;KAuyLvB,gBAAgB;;;UC10LX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAKf,sBAAsB;;UA8CP;EAKf;EAWA;;UAMe,6BAA6B,2BAA2B;EAEvE;EAEA,aAAa;;UAOL,iCAAiC,2BAA2B;EAEpE;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;UAuB7C;WAQN;WAQA;;KA0DC;WAGG;WAKA,+BAA+B;;WAY/B,+BAA+B;WAU/B;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UA8CC,sBAAsB;EAmBrC;EAgCA;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EASA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UC3tC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCkEf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UA0EA;EAeR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cC9VrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAmPC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBAsYvB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UAwEX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCx0BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cAoCS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MAwDR;MAyBA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UCrrBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA2Ea;;;UChLC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UCvSN;EACf;EACA;IACE;IACA;IACA;;;;;UCTa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCVe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC9SO;KAGA;KAcA;KAsEA;UAmBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EAoBA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAUF;EAyBA;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cC+FE,gCAAgC;UACnC;UACA;UACA;mBAMS;mBAGA;mBAEA;mBAEA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EAqER,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAsKL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UA2UJ;UAyHA;UA8LA;EA2CR,iBACJ,sBACA,qBACC,QAAQ;UA0BG;UAoHN;UA8BM;UAyCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAwJL,OAAO,OAAO,sBAAsB,QAAQ;UAoIpC;;;;KCn6FJ;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;EAiBlB;;UAUe;EACf;EACA,aAAa;EACb,gBAAgB;EAehB,qBAAqB;EAYrB;;UAQe;EACf;EACA;EACA;;cA8MW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EA2BpC,mCAAmC;EAQnC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UA2HpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;UAyKI;EAkDR,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UChlBY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCHE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;EAyCb;;UAWe;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KC3eZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCMK;EAOf;IAAkB;;EAQlB;EASA;IAAW,OAAO;IAAoB,SAAS;;EAqB/C;;;;UCnGe;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAkEW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EA+C7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAsExC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EAyFG,YAAY,mBAAmB,iBAAiB;EA0GhD,kBAAkB,oBAAoB;EAiDtC,cAAc,QAAQ;EA2EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAqChC,eACJ,oBACC,QAAQ;IAAQ;IAAa,cAAc;IAAM;;EAqD9C,iBAAiB,iBAAiB;EAiDlC,wBACJ,gBACA,UAAS,KAAK,6DACb;EAkCG,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAmD9D,sBAAsB,mBAAmB,iBAAiB;UAqClD;UA2BN;UAIM;UA4EA;UAwBA;UAQA;UAgDN;;;;UCvwCO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC7DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UCjHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UC3PK;EAEf;EASA;;cA2HW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UA4KW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EAmFR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UAwJA;UA2BN;EAgBF,iBAAiB,mBAAmB,6BAA6B;UA2EzD;UA6FA;UAgDN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cCj2CQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAmBlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EA6JR,YAAY,UAAU,kBAAkB;EA8BxC,YAAY,UAAU,kBAAkB;EA8BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KC3YA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCrbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EA6BF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,0BACzB,+BAA+B,sBAC9B,QAAQ,YAAY;UAqUf;UAoJA;iBAkGO;UAsED;UA2CN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cCljClD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UC11BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAiDG,wBAAwB,QAAQ,oBAAoB;EA2BpD,WACJ,oBACA,OAAO,kBACP;IAWE;MAAiB;MAAuB;;MAEzC;EAYG,YAAY,mBAAmB,yBAAyB;UAUhD;EAgBR,WAAW;UAcH;UAmBA;UA8BA;UAwBA;UAkBA;UAyBA;UAqDA;UA0CN;UAsBM;UAgCA;UAkBA;UAqBA;UAkCN;UAMA;;;;UCnpBO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EAqEF,mBAAmB;EA2BnB,wBAAwB,mBAAmB,OAAO,2BAA2B;EAgE7E;IAEE;IACA,YAAY;;EAEd;IAEE;IAEA,UAAU;IAEV,gBAAgB;;EAoBlB,gBAAgB;EAkBhB;EAyBA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAmQW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAuBA;UAWA;UAOA;UAkBA;UAcA;UAYA;UAQA;UASA;UAkCA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UAuDnE;UAkJA;UA8DA;UAcA;UAiGA;iBA6GO;UAgMP;UAoFA;UAyDA;UAkDA;UA2BA;UAkCM;UAkFA;UAsGN;UA0GM;UA4yBA;UAgnBA;UA6EA;UA2BA;UA+BA;UAuCN;UA+BM;UA4CA;UA+UN;UAwBA;UAWA;UAkDA;UAmBA;UAwBA;UAyCM;UA0CA;UAyLA;UAw8DN;UA+CA;UA4DA;UA6FA;UA0IA;UAgCA;UAOA;UAoCA;UA4EA;UA4BM;UA6BN;UAiCA;UAmBA;UA8DA;UAiEM;UAsgBN"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-noncurrent-version-purge.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAiJY;UAyBK;EAEf;EAMA;EAEA;;UAsBe;EAEf;EAMA;EAEA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EAyEA,iBAAiB;EAgBjB;EAcA;EAYA;EAwCA,UAAU;EAGV;;UASe;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EA0CA;EAwDA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UA+Ie;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KCxyBU,uBAAuB;KAi2LvB,gBAAgB;;;UCp4LX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAKf,sBAAsB;;UA8CP;EAKf;EAWA;;UAMe,6BAA6B,2BAA2B;EAEvE;EAEA,aAAa;;UAOL,iCAAiC,2BAA2B;EAEpE;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;UAuB7C;WAQN;WAQA;;KA0DC;WAGG;WAKA,+BAA+B;;WAY/B,+BAA+B;WAU/B;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UA8CC,sBAAsB;EAmBrC;EAgCA;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EASA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UC3tC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCkEf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UA0EA;EAeR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cC9VrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAmPC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBAsYvB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UAwEX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCx0BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cAoCS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MAwDR;MAyBA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UCrrBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA2Ea;;;UChLC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UCvSN;EACf;EACA;IACE;IACA;IACA;;;;;UCTa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCVe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC9SO;KAGA;KAcA;KAsEA;UAmBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EAoBA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAUF;EAyBA;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cC+FE,gCAAgC;UACnC;UACA;UACA;mBAMS;mBAGA;mBAEA;mBAEA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EAqER,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAsKL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UA2UJ;UAyHA;UA8LA;EA2CR,iBACJ,sBACA,qBACC,QAAQ;UA0BG;UAoHN;UA8BM;UAyCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAwJL,OAAO,OAAO,sBAAsB,QAAQ;UAoIpC;;;;KCn6FJ;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;EAiBlB;;UAUe;EACf;EACA,aAAa;EACb,gBAAgB;EAehB,qBAAqB;EAYrB;;UAQe;EACf;EACA;EACA;;cA8MW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EA2BpC,mCAAmC;EAQnC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UA2HpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;UAoOI;EAkDR,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UC3oBY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCHE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;EAyCb;;UAWe;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KC3eZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCMK;EAOf;IAAkB;;EAQlB;EASA;IAAW,OAAO;IAAoB,SAAS;;EAqB/C;;;;UCnGe;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAkEW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EA+C7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAsExC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EAyFG,YAAY,mBAAmB,iBAAiB;EA0GhD,kBAAkB,oBAAoB;EAiDtC,cAAc,QAAQ;EA2EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAqChC,eACJ,oBACC,QAAQ;IAAQ;IAAa,cAAc;IAAM;;EAqD9C,iBAAiB,iBAAiB;EAiDlC,wBACJ,gBACA,UAAS,KAAK,6DACb;EAkCG,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAmD9D,sBAAsB,mBAAmB,iBAAiB;UAqClD;UA2BN;UAIM;UA4EA;UAwBA;UAQA;UAgDN;;;;UCvwCO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC7DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UCjHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UC3PK;EAEf;EASA;;cA2HW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UA4KW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EAmFR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UAwJA;UA2BN;EAgBF,iBAAiB,mBAAmB,6BAA6B;UA2EzD;UA6FA;UAgDN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cCj2CQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAmBlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EA6JR,YAAY,UAAU,kBAAkB;EA8BxC,YAAY,UAAU,kBAAkB;EA8BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KC3YA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCrbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EA6BF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,0BACzB,+BAA+B,sBAC9B,QAAQ,YAAY;UAqUf;UAoJA;iBAkGO;UAsED;UA2CN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cCljClD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UC11BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAiDG,wBAAwB,QAAQ,oBAAoB;EA2BpD,WACJ,oBACA,OAAO,kBACP;IAWE;MAAiB;MAAuB;;MAEzC;EAYG,YAAY,mBAAmB,yBAAyB;UAUhD;EAgBR,WAAW;UAcH;UAmBA;UA8BA;UAwBA;UAkBA;UAyBA;UAqDA;UA0CN;UAsBM;UAgCA;UAkBA;UAqBA;UAkCN;UAMA;;;;UC1oBO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EAqEF,mBAAmB;EA2BnB,wBAAwB,mBAAmB,OAAO,2BAA2B;EAgE7E;IAEE;IACA,YAAY;;EAEd;IAEE;IAEA,UAAU;IAEV,gBAAgB;;EAoBlB,gBAAgB;EAkBhB;EAyBA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAmQW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAuBA;UAWA;UAeA;UAOA;UAkBA;UAcA;UAYA;UAQA;UASA;UAkCA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UA4DnE;UAkJA;UA8DA;UAcA;UAiGA;iBA6GO;UAgMP;UAoFA;UAyDA;UA+FA;UA2BA;UAkCM;UAiGA;UAsGN;UA0IM;UAo1BA;UA8nBA;UA6FA;UAuDA;UAgCA;UA+BA;UAuCN;UA+BM;UA4CA;UA+UN;UAwBA;UAWA;UAkDA;UAmBA;UAwBA;UAyCM;UA0CA;UAyLA;UA08DN;UA+CA;UA4DA;UA6FA;UA0IA;UAgCA;UAOA;UAoCA;UA4EA;UA4BM;UA6BN;UAiCA;UAmBA;UA8DA;UAiEM;UAsgBN"}

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as ProviderRegistry, Br as setAwsClients, Fr as clearBucketRegionCache, Gr as DependencyError, Gt as DiffCalculator, Hr as CdkdError, Ir as resolveBucketRegion, Lr as AwsClients, Nr as AssemblyReader, Qt as TemplateParser, Rr as getAwsClients, Ur as ConfigError, Vr as AssetError, X as IAMRoleProvider, Zr as LockError, Zt as DagBuilder, ai as StateError, ci as isCdkdError, ei as ProvisioningError, gn as S3StateBackend, hn as LockManager, kn as AssetPublisher, li as normalizeAwsError, lr as Synthesizer, lt as CloudControlProvider, oi as SynthesisError, r as DeployEngine, si as formatError, zr as resetAwsClients } from "./deploy-engine-BQUjVO_m.js";
-import { a as setLogger, n as getLogger, t as ConsoleLogger } from "./logger-Dw-3y48G.js";
+import { $t as DagBuilder, Br as resolveBucketRegion, Gr as AssetError, Hr as getAwsClients, Kr as CdkdError, Lr as AssemblyReader, Nn as AssetPublisher, Q as IAMRoleProvider, Ur as resetAwsClients, Vr as AwsClients, Wr as setAwsClients, Yr as DependencyError, _n as LockManager, di as formatError, dt as CloudControlProvider, en as TemplateParser, fi as isCdkdError, ii as ProvisioningError, li as StateError, pi as normalizeAwsError, pr as Synthesizer, qr as ConfigError, qt as DiffCalculator, r as DeployEngine, ti as LockError, tt as ProviderRegistry, ui as SynthesisError, vn as S3StateBackend, zr as clearBucketRegionCache } from "./deploy-engine-B6pEfNd9.js";
+import { a as setLogger, n as getLogger, t as ConsoleLogger } from "./logger-D2Md1kTq.js";
 
 export { AssemblyReader, AssetError, AssetPublisher, AwsClients, CdkdError, CloudControlProvider, ConfigError, ConsoleLogger, DagBuilder, DependencyError, DeployEngine, DiffCalculator, IAMRoleProvider, LockError, LockManager, ProviderRegistry, ProvisioningError, S3StateBackend, StateError, SynthesisError, Synthesizer, TemplateParser, clearBucketRegionCache, formatError, getAwsClients, getLogger, isCdkdError, normalizeAwsError, resetAwsClients, resolveBucketRegion, setAwsClients, setLogger };

package/dist/{logger-Dw-3y48G.js → logger-D2Md1kTq.js}

@@ -472,6 +472,81 @@ function applyDefaultNameForFallback(logicalId, resourceType, properties) {
 		[rule.nameProperty]: generatedName
 	};
 }
+/**
+* The template property that supplies an explicit physical name for
+* `resourceType`, or `undefined` when cdkd knows of none (issue #2934).
+*
+* Read by the orphan-adoption pre-pass, where it decides TWO things. It
+* answers whether THIS template hands the resource a name or lets cdkd generate
+* one — and, because an unknown type answers `undefined`, it is also the
+* pre-pass's ALLOW-LIST: a type absent from both tables is NOT adopted at all.
+*
+* That second role inverts what an earlier version of this doc described. It
+* said an unknown type reads as "cdkd names this" and adoption proceeds, whose
+* failure mode is a REPLACEMENT that destroys a resource `DeletionPolicy:
+* Retain` preserved — three review rounds each found one more type reaching it.
+* Now an absent type costs a missed adoption (go-to-k/cdkd#2916's diagnosis
+* still prints) rather than a deletion, so the tables may be incomplete in the
+* safe direction only.
+*
+* **An entry here ADMITS a type to adoption.** Before adding one, check the
+* three tests in `ADOPTION_REFUSED_TYPES` (`src/deployment/orphan-adoption.ts`)
+* — create mints a new resource instead of colliding, `update()` refuses, the
+* resulting replacement destroys the retained copy. A type meeting all three
+* belongs in THAT set even if it is named here; `AWS::Lambda::LayerVersion` is
+* exactly that shape and `AWS::ECS::TaskDefinition` is kept there as a belt
+* against a future `Family` entry.
+*/
+function explicitNamePropertyFor(resourceType) {
+	return FALLBACK_NAME_RULES[resourceType]?.nameProperty ?? ADOPTION_ONLY_NAME_PROPERTIES[resourceType];
+}
+/**
+* Name properties known to the ADOPTION guard but not to
+* {@link FALLBACK_NAME_RULES} (issue #2934).
+*
+* A separate table on purpose: `FALLBACK_NAME_RULES` decides what cdkd GENERATES
+* when an SDK provider falls back to Cloud Control, so adding an entry there
+* changes the name a resource is created under — a replacement for anyone
+* already deployed. This table answers a strictly narrower question, "does the
+* template hand this resource a name", and adding to it can only make the
+* adoption guard MORE conservative.
+*
+* Found by review: the SDK providers for the entries below generate a name
+* themselves. What that costs changed with the inversion described above, so
+* both halves are worth stating. An ABSENT type is refused outright — the
+* empty-`nameProperties` arm in `orphan-adoption.ts` runs BEFORE
+* `templateStillDeclares` — costing a missed adoption, with
+* go-to-k/cdkd#2916's diagnosis still printing. A WRONG entry is the live
+* hazard: a non-empty list clears the empty-list arm, `templateStillDeclares` then
+* looks for a property the template does not use, so an explicit name reads as
+* "no explicit name", the record is adopted, and the diff turns the create-only
+* name into a REPLACE that deletes the resource being rescued. Supplying a name
+* is the natural user move after that diagnosis, so this is a reachable path,
+* not a theoretical one.
+*
+* `AWS::Budgets::Budget` is deliberately absent rather than forgotten: its name
+* is NESTED (`Budget.BudgetName`, create-only), which neither this flat table
+* nor `templateStillDeclares`' top-level property read can express, so adoption
+* of that type is unguarded today — go-to-k/cdkd#2943 carries it.
+*
+* `AWS::ECS::TaskDefinition` was added here and REMOVED again, which is worth
+* recording: its physical id is the revision ARN rather than a
+* `generateResourceName` output, so the by-construction premise this whole
+* guard rests on is false for it and an entry here could never match. It is
+* refused by the adoption pre-pass instead — and the ALLOW-LIST gate is what
+* refuses it: absent from both tables here, it never reaches adoption at all.
+* `ADOPTION_REFUSED_TYPES` in `src/deployment/orphan-adoption.ts` carries it as
+* a BELT against a future entry here (named rather than `{@link}`-ed: this
+* module does not import it, so the link would render as dead text).
+*/
+const ADOPTION_ONLY_NAME_PROPERTIES = {
+	"AWS::AutoScaling::AutoScalingGroup": "AutoScalingGroupName",
+	"AWS::CodeCommit::Repository": "RepositoryName",
+	"AWS::DynamoDB::GlobalTable": "TableName",
+	"AWS::RDS::DBProxy": "DBProxyName",
+	"AWS::RDS::DBProxyEndpoint": "DBProxyEndpointName",
+	"AWS::Scheduler::Schedule": "Name"
+};
 
 //#endregion
 //#region src/utils/live-renderer.ts
@@ -997,5 +1072,5 @@ function setLogger(logger) {
 }
 
 //#endregion
-export { withStackName as _, setLogger as a, PATTERN_B_NAME_OPTIONS as c, applyDefaultNameForFallback as d, generateResourceName as f, withSkipPrefix as g, looksLikeCdkdGeneratedName as h, reserveStdoutForPayload as i, PATTERN_B_NAME_PROPERTIES as l, getCurrentStackName as m, getLogger as n, runStackBuffered as o, generateResourceNameWithFallback as p, isStdoutReservedForPayload as r, getLiveRenderer as s, ConsoleLogger as t, PATTERN_B_RESOURCE_TYPES as u };
-//# sourceMappingURL=logger-Dw-3y48G.js.map
+export { withSkipPrefix as _, setLogger as a, PATTERN_B_NAME_OPTIONS as c, applyDefaultNameForFallback as d, explicitNamePropertyFor as f, looksLikeCdkdGeneratedName as g, getCurrentStackName as h, reserveStdoutForPayload as i, PATTERN_B_NAME_PROPERTIES as l, generateResourceNameWithFallback as m, getLogger as n, runStackBuffered as o, generateResourceName as p, isStdoutReservedForPayload as r, getLiveRenderer as s, ConsoleLogger as t, PATTERN_B_RESOURCE_TYPES as u, withStackName as v };
+//# sourceMappingURL=logger-D2Md1kTq.js.map

package/dist/logger-D2Md1kTq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger-D2Md1kTq.js","names":[],"sources":["../src/provisioning/resource-name.ts","../src/utils/live-renderer.ts","../src/utils/stack-context.ts","../src/utils/logger.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks';\nimport { createHash } from 'node:crypto';\n\n/**\n * Per-async-context stack name. Resource-name generation reads this so that\n * concurrent deploys (`cdkd deploy --all` runs stacks in parallel up to\n * `--stack-concurrency`) don't fight over a single shared variable.\n *\n * History: this was `let currentStackName: string | undefined` until\n * 2026-05-01. Two parallel `deploy()` calls would each call\n * `setCurrentStackName(...)` and the second would overwrite the first;\n * any IAM Role / SQS Queue / etc. created by the first stack while the\n * second was active would get the second stack's prefix in its physical\n * name, then the second stack's own create attempt for the same logical\n * id would collide (\"Role with name X already exists\"). Switching to\n * `AsyncLocalStorage` scopes the value to each deploy's async chain.\n */\nconst stackNameStore = new AsyncLocalStorage<string>();\n\n/**\n * Run `fn` with `stackName` set as the stack name visible to\n * `generateResourceName` for the duration of the callback (and any\n * `await`s inside). Concurrent invocations each get an independent scope\n * — this is the safe API for parallel deploys.\n */\nexport function withStackName<T>(stackName: string, fn: () => Promise<T>): Promise<T>;\nexport function withStackName<T>(stackName: string, fn: () => T): T;\nexport function withStackName<T>(stackName: string, fn: () => T | Promise<T>): T | Promise<T> {\n  return stackNameStore.run(stackName, fn);\n}\n\n/**\n * Read the current async context's stack name, if any.\n *\n * Returns `undefined` outside any `withStackName` / `setCurrentStackName`\n * scope. Used by the live renderer to scope per-stack in-flight task\n * entries so concurrent deploys don't clobber each other's tasks (same\n * `logicalId` in two stacks would collide on the singleton renderer's\n * task Map without this).\n */\nexport function getCurrentStackName(): string | undefined {\n  return stackNameStore.getStore();\n}\n\n/**\n * Set the current async context's stack name.\n *\n * @deprecated Use {@link withStackName} for new code — it makes the scope\n *   obvious at the call site. This setter now uses\n *   `AsyncLocalStorage.enterWith` so it remains safe under\n *   `--stack-concurrency > 1` (each `deploy()` call has its own async\n *   resource, so the value does NOT leak across siblings), but\n *   `withStackName` is structurally clearer.\n */\nexport function setCurrentStackName(stackName: string): void {\n  stackNameStore.enterWith(stackName);\n}\n\n/**\n * Per-async-context \"skip the stack-name prefix on user-supplied physical\n * names\" flag. Read by `generateResourceName` when its caller passes\n * `userSupplied: true`; auto-generated-name paths\n * (`generateResourceName(logicalId, ...)`) ignore this flag.\n *\n * Scoped via AsyncLocalStorage so that `--stack-concurrency > 1` runs\n * cannot cross-contaminate — each deploy's body is wrapped in its own\n * `withSkipPrefix(...)` scope (the deploy CLI plumbs the resolved\n * `--no-prefix-user-supplied-names` value through here). Default\n * `false` preserves pre-PR behavior when the flag is not set.\n */\nconst skipPrefixStore = new AsyncLocalStorage<boolean>();\n\n/**\n * Run `fn` with the \"skip prefix on user-supplied names\" flag set to\n * `skip`. Mirrors {@link withStackName} — concurrent invocations each\n * get an independent scope so parallel deploys do not fight over a\n * single shared variable.\n *\n * Wrap this around `withStackName(...)` (innermost is `fn`) in the\n * deploy CLI: `withSkipPrefix(flag, () => withStackName(name, body))`.\n * Order does not matter — the two stores are independent — but\n * consistent ordering keeps the call sites readable.\n */\nexport function withSkipPrefix<T>(skip: boolean, fn: () => Promise<T>): Promise<T>;\nexport function withSkipPrefix<T>(skip: boolean, fn: () => T): T;\nexport function withSkipPrefix<T>(skip: boolean, fn: () => T | Promise<T>): T | Promise<T> {\n  return skipPrefixStore.run(skip, fn);\n}\n\n/**\n * Read the current async context's skip-prefix flag. Defaults to\n * `false` when no `withSkipPrefix` scope is active.\n *\n * Public for unit tests; `generateResourceName` consumes this\n * internally.\n */\nexport function getCurrentSkipPrefix(): boolean {\n  return skipPrefixStore.getStore() ?? false;\n}\n\n/**\n * Resource types whose pre-PR #297 code path ran user-supplied\n * physical names through `generateResourceName` (= got the stack-name\n * prefix). These are the only types affected by\n * `--no-prefix-user-supplied-names`; flipping the flag against an\n * existing stack proposes REPLACEMENT on every state resource of\n * one of these types whose `physicalId` is still prefixed.\n *\n * Pattern A providers (Lambda, S3, SNS, SQS, DynamoDB, Logs LogGroup,\n * Events Rule, etc.) historically short-circuited user-supplied names\n * **out** of `generateResourceName` entirely — those types never got\n * the prefix regardless of the flag, so they are NOT included here.\n *\n * Used by the deploy-time pre-flight migration check in\n * `src/cli/commands/prefix-migration-check.ts`. Keep in sync with the\n * Pattern B provider call sites that consume\n * `generateResourceNameWithFallback(...)`.\n */\nexport const PATTERN_B_RESOURCE_TYPES: readonly string[] = [\n  'AWS::IAM::Role',\n  'AWS::IAM::User',\n  'AWS::IAM::Group',\n  'AWS::IAM::InstanceProfile',\n  'AWS::IAM::ManagedPolicy',\n  'AWS::ElasticLoadBalancingV2::LoadBalancer',\n  'AWS::ElasticLoadBalancingV2::TargetGroup',\n] as const;\n\n/**\n * For each Pattern B resource type, the CFn template `Properties` field\n * the user sets to supply a physical name (`new iam.Role(this, 'X',\n * { roleName: 'my-role' })` → `Properties.RoleName: 'my-role'`).\n *\n * Used by the prefix-migration check to distinguish user-supplied\n * physical names (which the v0.94.0 default flip would actually\n * REPLACE on next deploy) from auto-generated logical-id-fallback\n * names (which keep the prefix in BOTH old and new default — no\n * REPLACE pending). Without this discriminator, the migration\n * check naively flags every prefix-style physicalId regardless of\n * its origin, surfacing a false-positive WARNING on auto-generated\n * names that won't actually be touched.\n *\n * Keep in sync with `PATTERN_B_RESOURCE_TYPES` and with each\n * provider's `Properties[<NameField>]` lookup in\n * `src/provisioning/providers/`.\n */\nexport const PATTERN_B_NAME_PROPERTIES: Readonly<Record<string, string>> = {\n  'AWS::IAM::Role': 'RoleName',\n  'AWS::IAM::User': 'UserName',\n  'AWS::IAM::Group': 'GroupName',\n  'AWS::IAM::InstanceProfile': 'InstanceProfileName',\n  'AWS::IAM::ManagedPolicy': 'ManagedPolicyName',\n  'AWS::ElasticLoadBalancingV2::LoadBalancer': 'Name',\n  'AWS::ElasticLoadBalancingV2::TargetGroup': 'Name',\n};\n\n/**\n * For each Pattern B resource type, the `generateResourceName` options each\n * provider passes at its name call site (maxLength + any lowercase /\n * allowedPattern). Keep in sync with the provider call sites\n * (`generateResourceNameWithFallback(...)` in\n * `src/provisioning/providers/`).\n *\n * Used by the prefix-migration check to recompute BOTH the legacy\n * (prefixed) and the post-v0.94 (unprefixed) physical name for a recorded\n * user-supplied name through the SAME sanitize / truncate pipeline the\n * provider used — so a name that needed sanitization (`my_role` ->\n * `my-role`) or hash-suffix truncation (> maxLength) is compared exactly,\n * not via a naive prefix concat / strip.\n */\nexport const PATTERN_B_NAME_OPTIONS: Readonly<Record<string, ResourceNameOptions>> = {\n  'AWS::IAM::Role': { maxLength: 64 },\n  'AWS::IAM::User': { maxLength: 64 },\n  'AWS::IAM::Group': { maxLength: 128 },\n  'AWS::IAM::InstanceProfile': { maxLength: 128 },\n  'AWS::IAM::ManagedPolicy': { maxLength: 128 },\n  'AWS::ElasticLoadBalancingV2::LoadBalancer': { maxLength: 32 },\n  'AWS::ElasticLoadBalancingV2::TargetGroup': { maxLength: 32 },\n};\n\n/**\n * Options for generating a resource name.\n */\nexport interface ResourceNameOptions {\n  /** Maximum length for the name (e.g., 32 for ALB/TG, 64 for IAM, 63 for S3) */\n  maxLength: number;\n  /** Whether to force lowercase (e.g., S3 buckets) */\n  lowercase?: boolean;\n  /** Allowed character regex pattern. Characters not matching will be removed.\n   *  Default: /[^a-zA-Z0-9-]/ (alphanumeric + hyphen) */\n  allowedPattern?: RegExp;\n  /**\n   * `true` when the caller is passing a name the user explicitly\n   * declared in their CDK code (e.g. `new iam.Role(this, 'X', {\n   *   roleName: 'my-role' })`). `false` (default) when the caller is\n   * passing the logical-id fallback or any other cdkd-generated value.\n   *\n   * Combined with the per-deploy `withSkipPrefix(true)` flag, a\n   * `userSupplied: true` call skips the stack-name prefix and returns\n   * the user's declared name verbatim (after the same sanitize /\n   * truncate pipeline). When `userSupplied` is `false` OR\n   * `withSkipPrefix` is unset / `false`, the stack-name prefix is\n   * applied (pre-PR behavior).\n   *\n   * This split is load-bearing: cdkd's stack-scoping concern (prefix\n   * for cross-stack uniqueness on auto-generated names) must stay\n   * coupled to the auto-generated path, NOT to user-declared names —\n   * those belong to the user.\n   */\n  userSupplied?: boolean;\n}\n\n/**\n * Generate a unique resource name from the logical ID.\n *\n * Generates names in CloudFormation-compatible format:\n * `{StackName}-{LogicalId}-{Hash}` (truncated to maxLength).\n *\n * @param name The raw name (from properties or logicalId fallback)\n * @param options Length and character constraints\n * @returns A sanitized, truncated name that fits the constraints\n */\nexport function generateResourceName(name: string, options: ResourceNameOptions): string {\n  const {\n    maxLength,\n    lowercase = false,\n    allowedPattern = /[^a-zA-Z0-9-]/g,\n    userSupplied = false,\n  } = options;\n\n  // Include stack name for uniqueness (like CloudFormation does).\n  //\n  // The prefix is suppressed when the caller marked the name as\n  // user-supplied AND the per-deploy `withSkipPrefix(true)` flag is\n  // active — the user owns that name and cdkd should not rewrite it.\n  // Every other path (logical-id fallback, no withSkipPrefix scope,\n  // flag set to false) keeps the prefix for cross-stack uniqueness.\n  const currentStackName = stackNameStore.getStore();\n  const shouldPrefix = currentStackName && !(userSupplied && getCurrentSkipPrefix());\n  const fullName = shouldPrefix ? `${currentStackName}-${name}` : name;\n\n  // Apply lowercase BEFORE pattern matching (so A-Z aren't removed by /[^a-z0-9.-]/)\n  let sanitized = lowercase ? fullName.toLowerCase() : fullName;\n  sanitized = sanitized.replace(allowedPattern, '-');\n\n  // Collapse consecutive hyphens and remove leading/trailing\n  sanitized = sanitized.replace(/-{2,}/g, '-').replace(/^-+|-+$/g, '');\n\n  if (sanitized.length <= maxLength) {\n    return sanitized;\n  }\n\n  // Truncate with hash suffix for uniqueness\n  const hash = createHash('sha256').update(fullName).digest('hex').substring(0, 8);\n  const maxPrefixLength = maxLength - hash.length - 1; // -1 for separator\n  const prefix = sanitized.substring(0, maxPrefixLength).replace(/-+$/, '');\n\n  return `${prefix}-${hash}`;\n}\n\n/**\n * Best-effort: was this physical name GENERATED by cdkd from the logical id,\n * rather than declared in the user's template? (issue #1636)\n *\n * The replacement-collision refusals in `deploy-engine.ts` used to assert\n * \"the resource has a user-supplied physical name\" for EVERY colliding\n * resource, and then prescribe \"rename the resource in your CDK code\". For a\n * resource the template never named that is false in both halves: the name is\n * cdkd's own `{stackName}-{logicalId}` — which has no random component, so the\n * create-first attempt lands on the name the old resource still holds exactly\n * as it would for a user-named one — and \"rename\" would mean renaming the\n * CONSTRUCT (changing the logical id), a far more disruptive action than the\n * message implies. A user who reads \"user-supplied physical name\" and finds\n * none in their template cannot connect the message to their code at all.\n *\n * The test is the naming scheme run backwards: {@link generateResourceName}\n * with `userSupplied: false` always builds from `{stackName}-{logicalId}`,\n * while a template-supplied name builds from `{stackName}-{userName}` (or the\n * bare user name under `--no-prefix-user-supplied-names`). So the two differ\n * unless the declared name happens to EQUAL the logical id.\n *\n * **Deliberately approximate, and biased toward the safe answer.** The\n * per-type `maxLength` / `lowercase` / `allowedPattern` options live in the\n * providers, and the engine does not know which type maps to which — so this\n * compares case-insensitively on the alphanumeric skeleton and accepts the\n * truncated `…-<8 hex>` form by prefix. Every unresolved case answers `false`:\n * a `false` merely keeps the pre-#1636 wording, which is correct for the\n * template-named resource that is the likelier reading of an unrecognized\n * name, whereas a wrong `true` would tell a user who DID name their resource\n * to go looking for a name they never wrote.\n *\n * @param physicalId the name AWS currently holds for the existing resource\n * @param logicalId the template logical id of the resource being replaced\n * @param stackName the deploying stack's name (absent = unresolvable, `false`)\n */\nexport function looksLikeCdkdGeneratedName(\n  physicalId: string,\n  logicalId: string,\n  stackName: string | undefined\n): boolean {\n  if (!physicalId || !logicalId || !stackName) return false;\n  // The skeleton drops every separator the per-type `allowedPattern` could\n  // have rewritten (a hyphen, an underscore, a dot) so an S3-style\n  // lowercase-and-dot name still matches its own derivation.\n  const skeleton = (value: string): string => value.toLowerCase().replace(/[^a-z0-9]/g, '');\n  const derived = skeleton(`${stackName}-${logicalId}`);\n  const actual = skeleton(physicalId);\n  if (actual === derived) return true;\n  // Truncated form: `{prefix}-{8 hex}` where prefix is a cut of the same\n  // derivation. Require BOTH halves — a bare prefix match would accept a\n  // template-supplied name that merely starts the same way.\n  const truncated = /^(.*)-([0-9a-f]{8})$/.exec(physicalId.toLowerCase());\n  if (!truncated) return false;\n  const prefix = skeleton(truncated[1]!);\n  return prefix.length > 0 && derived.startsWith(prefix);\n}\n\n/**\n * Generate a resource name from a user-declared physical name OR\n * fall back to the logical id.\n *\n * Wraps {@link generateResourceName} to express the Pattern B call-site\n * shape (`generateResourceName((properties['Name'] as string | undefined)\n * || logicalId, opts)`) as a single typed helper. The user-supplied\n * branch passes `userSupplied: true`, which makes the per-deploy\n * `withSkipPrefix(true)` flag drop the stack-name prefix on that name.\n * The fallback (logical-id) branch is `userSupplied: false` and keeps\n * the prefix regardless of the flag — auto-generated names rely on\n * the prefix for cross-stack uniqueness.\n *\n * Use at every Pattern B provider call site (currently IAM Role, IAM\n * User, IAM Group, IAM InstanceProfile, ELBv2 LoadBalancer, ELBv2\n * TargetGroup) so the `--no-prefix-user-supplied-names` flag controls\n * those types consistently. Pattern A providers (Lambda, S3, SNS,\n * SQS, DynamoDB, etc.) do NOT need this helper — they already\n * short-circuit the user-supplied name out of the\n * `generateResourceName` call entirely, so the prefix is never\n * applied to user-supplied names regardless of the flag.\n */\nexport function generateResourceNameWithFallback(\n  userSuppliedName: string | undefined,\n  logicalId: string,\n  options: Omit<ResourceNameOptions, 'userSupplied'>\n): string {\n  if (userSuppliedName !== undefined && userSuppliedName !== '') {\n    return generateResourceName(userSuppliedName, { ...options, userSupplied: true });\n  }\n  return generateResourceName(logicalId, { ...options, userSupplied: false });\n}\n\n/**\n * Default name generation rules for CC API fallback.\n *\n * When an SDK provider falls back to CC API, the resource may need a\n * default name that the SDK provider would have generated. This map\n * defines the name property and generation options for each resource type.\n *\n * Format: resourceType → { nameProperty, options, postProcess? }\n */\nconst FALLBACK_NAME_RULES: Record<\n  string,\n  {\n    nameProperty: string;\n    options: ResourceNameOptions;\n  }\n> = {\n  'AWS::S3::Bucket': { nameProperty: 'BucketName', options: { maxLength: 63, lowercase: true } },\n  'AWS::SQS::Queue': { nameProperty: 'QueueName', options: { maxLength: 80 } },\n  'AWS::SNS::Topic': { nameProperty: 'TopicName', options: { maxLength: 256 } },\n  'AWS::Lambda::Function': { nameProperty: 'FunctionName', options: { maxLength: 64 } },\n  'AWS::Lambda::LayerVersion': { nameProperty: 'LayerName', options: { maxLength: 64 } },\n  'AWS::IAM::Role': { nameProperty: 'RoleName', options: { maxLength: 64 } },\n  'AWS::IAM::Policy': { nameProperty: 'PolicyName', options: { maxLength: 64 } },\n  'AWS::IAM::ManagedPolicy': {\n    nameProperty: 'ManagedPolicyName',\n    options: { maxLength: 128 },\n  },\n  'AWS::IAM::User': { nameProperty: 'UserName', options: { maxLength: 64 } },\n  'AWS::IAM::Group': { nameProperty: 'GroupName', options: { maxLength: 128 } },\n  'AWS::IAM::InstanceProfile': {\n    nameProperty: 'InstanceProfileName',\n    options: { maxLength: 128 },\n  },\n  'AWS::DynamoDB::Table': { nameProperty: 'TableName', options: { maxLength: 255 } },\n  'AWS::ECR::Repository': {\n    nameProperty: 'RepositoryName',\n    options: { maxLength: 256, lowercase: true },\n  },\n  'AWS::ECS::Cluster': { nameProperty: 'ClusterName', options: { maxLength: 255 } },\n  'AWS::ECS::Service': { nameProperty: 'ServiceName', options: { maxLength: 255 } },\n  'AWS::Logs::LogGroup': { nameProperty: 'LogGroupName', options: { maxLength: 512 } },\n  'AWS::CloudWatch::Alarm': { nameProperty: 'AlarmName', options: { maxLength: 256 } },\n  'AWS::Events::Rule': { nameProperty: 'Name', options: { maxLength: 64 } },\n  'AWS::Events::EventBus': { nameProperty: 'Name', options: { maxLength: 256 } },\n  'AWS::Kinesis::Stream': { nameProperty: 'Name', options: { maxLength: 128 } },\n  'AWS::StepFunctions::StateMachine': {\n    nameProperty: 'StateMachineName',\n    options: { maxLength: 80 },\n  },\n  'AWS::SecretsManager::Secret': {\n    nameProperty: 'Name',\n    options: { maxLength: 512, allowedPattern: /[^a-zA-Z0-9-/_]/g },\n  },\n  'AWS::SSM::Parameter': { nameProperty: 'Name', options: { maxLength: 2048 } },\n  'AWS::Cognito::UserPool': { nameProperty: 'UserPoolName', options: { maxLength: 128 } },\n  'AWS::ElastiCache::SubnetGroup': {\n    nameProperty: 'CacheSubnetGroupName',\n    options: { maxLength: 255, lowercase: true },\n  },\n  'AWS::ElastiCache::CacheCluster': {\n    nameProperty: 'ClusterName',\n    options: { maxLength: 40, lowercase: true },\n  },\n  'AWS::RDS::DBSubnetGroup': {\n    nameProperty: 'DBSubnetGroupName',\n    options: { maxLength: 255, lowercase: true },\n  },\n  'AWS::RDS::DBCluster': {\n    nameProperty: 'DBClusterIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  'AWS::RDS::DBInstance': {\n    nameProperty: 'DBInstanceIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  // DocumentDB — RDS-shaped API; same name constraints.\n  'AWS::DocDB::DBSubnetGroup': {\n    nameProperty: 'DBSubnetGroupName',\n    options: { maxLength: 255, lowercase: true },\n  },\n  'AWS::DocDB::DBCluster': {\n    nameProperty: 'DBClusterIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  'AWS::DocDB::DBInstance': {\n    nameProperty: 'DBInstanceIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  // Neptune — RDS-shaped API; same name constraints.\n  'AWS::Neptune::DBSubnetGroup': {\n    nameProperty: 'DBSubnetGroupName',\n    options: { maxLength: 255, lowercase: true },\n  },\n  'AWS::Neptune::DBCluster': {\n    nameProperty: 'DBClusterIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  'AWS::Neptune::DBInstance': {\n    nameProperty: 'DBInstanceIdentifier',\n    options: { maxLength: 63, lowercase: true },\n  },\n  'AWS::ElasticLoadBalancingV2::LoadBalancer': {\n    nameProperty: 'Name',\n    options: { maxLength: 32 },\n  },\n  'AWS::ElasticLoadBalancingV2::TargetGroup': {\n    nameProperty: 'Name',\n    options: { maxLength: 32 },\n  },\n  'AWS::WAFv2::WebACL': { nameProperty: 'Name', options: { maxLength: 128 } },\n  'AWS::CodeBuild::Project': { nameProperty: 'Name', options: { maxLength: 255 } },\n  'AWS::S3Express::DirectoryBucket': {\n    nameProperty: 'BucketName',\n    options: { maxLength: 63, lowercase: true },\n  },\n};\n\n/**\n * Apply default name generation for CC API fallback.\n *\n * When a resource doesn't have an explicit name property set,\n * generates the same default name that the SDK provider would have created.\n * This ensures consistent naming regardless of whether SDK or CC API handles the resource.\n *\n * @param logicalId Logical ID from the template\n * @param resourceType CloudFormation resource type\n * @param properties Resource properties (will not be mutated)\n * @returns Properties with default name applied if needed, or original properties if no rule exists\n */\nexport function applyDefaultNameForFallback(\n  logicalId: string,\n  resourceType: string,\n  properties: Record<string, unknown>\n): Record<string, unknown> {\n  const rule = FALLBACK_NAME_RULES[resourceType];\n  if (!rule) return properties;\n\n  // If the name property is already set, no need to generate\n  if (properties[rule.nameProperty]) return properties;\n\n  const generatedName = generateResourceName(logicalId, rule.options);\n\n  return {\n    ...properties,\n    [rule.nameProperty]: generatedName,\n  };\n}\n\n/**\n * The template property that supplies an explicit physical name for\n * `resourceType`, or `undefined` when cdkd knows of none (issue #2934).\n *\n * Read by the orphan-adoption pre-pass, where it decides TWO things. It\n * answers whether THIS template hands the resource a name or lets cdkd generate\n * one — and, because an unknown type answers `undefined`, it is also the\n * pre-pass's ALLOW-LIST: a type absent from both tables is NOT adopted at all.\n *\n * That second role inverts what an earlier version of this doc described. It\n * said an unknown type reads as \"cdkd names this\" and adoption proceeds, whose\n * failure mode is a REPLACEMENT that destroys a resource `DeletionPolicy:\n * Retain` preserved — three review rounds each found one more type reaching it.\n * Now an absent type costs a missed adoption (go-to-k/cdkd#2916's diagnosis\n * still prints) rather than a deletion, so the tables may be incomplete in the\n * safe direction only.\n *\n * **An entry here ADMITS a type to adoption.** Before adding one, check the\n * three tests in `ADOPTION_REFUSED_TYPES` (`src/deployment/orphan-adoption.ts`)\n * — create mints a new resource instead of colliding, `update()` refuses, the\n * resulting replacement destroys the retained copy. A type meeting all three\n * belongs in THAT set even if it is named here; `AWS::Lambda::LayerVersion` is\n * exactly that shape and `AWS::ECS::TaskDefinition` is kept there as a belt\n * against a future `Family` entry.\n */\nexport function explicitNamePropertyFor(resourceType: string): string | undefined {\n  return (\n    FALLBACK_NAME_RULES[resourceType]?.nameProperty ?? ADOPTION_ONLY_NAME_PROPERTIES[resourceType]\n  );\n}\n\n/**\n * Name properties known to the ADOPTION guard but not to\n * {@link FALLBACK_NAME_RULES} (issue #2934).\n *\n * A separate table on purpose: `FALLBACK_NAME_RULES` decides what cdkd GENERATES\n * when an SDK provider falls back to Cloud Control, so adding an entry there\n * changes the name a resource is created under — a replacement for anyone\n * already deployed. This table answers a strictly narrower question, \"does the\n * template hand this resource a name\", and adding to it can only make the\n * adoption guard MORE conservative.\n *\n * Found by review: the SDK providers for the entries below generate a name\n * themselves. What that costs changed with the inversion described above, so\n * both halves are worth stating. An ABSENT type is refused outright — the\n * empty-`nameProperties` arm in `orphan-adoption.ts` runs BEFORE\n * `templateStillDeclares` — costing a missed adoption, with\n * go-to-k/cdkd#2916's diagnosis still printing. A WRONG entry is the live\n * hazard: a non-empty list clears the empty-list arm, `templateStillDeclares` then\n * looks for a property the template does not use, so an explicit name reads as\n * \"no explicit name\", the record is adopted, and the diff turns the create-only\n * name into a REPLACE that deletes the resource being rescued. Supplying a name\n * is the natural user move after that diagnosis, so this is a reachable path,\n * not a theoretical one.\n *\n * `AWS::Budgets::Budget` is deliberately absent rather than forgotten: its name\n * is NESTED (`Budget.BudgetName`, create-only), which neither this flat table\n * nor `templateStillDeclares`' top-level property read can express, so adoption\n * of that type is unguarded today — go-to-k/cdkd#2943 carries it.\n *\n * `AWS::ECS::TaskDefinition` was added here and REMOVED again, which is worth\n * recording: its physical id is the revision ARN rather than a\n * `generateResourceName` output, so the by-construction premise this whole\n * guard rests on is false for it and an entry here could never match. It is\n * refused by the adoption pre-pass instead — and the ALLOW-LIST gate is what\n * refuses it: absent from both tables here, it never reaches adoption at all.\n * `ADOPTION_REFUSED_TYPES` in `src/deployment/orphan-adoption.ts` carries it as\n * a BELT against a future entry here (named rather than `{@link}`-ed: this\n * module does not import it, so the link would render as dead text).\n */\nconst ADOPTION_ONLY_NAME_PROPERTIES: Record<string, string> = {\n  'AWS::AutoScaling::AutoScalingGroup': 'AutoScalingGroupName',\n  'AWS::CodeCommit::Repository': 'RepositoryName',\n  'AWS::DynamoDB::GlobalTable': 'TableName',\n  'AWS::RDS::DBProxy': 'DBProxyName',\n  'AWS::RDS::DBProxyEndpoint': 'DBProxyEndpointName',\n  'AWS::Scheduler::Schedule': 'Name',\n};\n","/**\n * Live multi-line progress renderer for the bottom of the terminal.\n *\n * Maintains a \"live area\" listing in-flight tasks (Creating MyBucket...),\n * redrawn on a spinner timer. Other log output is routed through\n * {@link LiveRenderer.printAbove} so it appears above the live area without\n * disturbing the currently-displayed in-flight tasks.\n *\n * Design notes:\n * - Multiple resources can be in flight concurrently (cdkd uses parallel DAG\n *   dispatch), so a single in-place line overwrite is not enough — each\n *   in-flight resource is its own line in the live area.\n * - On non-TTY (CI/log-collection), the renderer stays inactive and\n *   {@link LiveRenderer.printAbove} falls through to a direct write, so output\n *   matches the previous append-only behavior.\n * - In verbose mode (debug level) the caller should not start the renderer:\n *   debug logs would interleave too aggressively with the live area.\n */\n\nimport { getCurrentStackName } from '../provisioning/resource-name.js';\n\nconst SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];\nconst FRAME_INTERVAL_MS = 80;\nconst ESC = '\\x1b[';\n\ninterface Task {\n  label: string;\n  startedAt: number;\n  /** Stack the task belongs to (from `withStackName` AsyncLocalStorage),\n   *  or `undefined` when addTask was called outside any stack scope.\n   *  Captured at addTask time because the spinner re-draw runs on a\n   *  setInterval timer with no inherited async context. */\n  stackName: string | undefined;\n}\n\n/**\n * Scope a task `id` to its calling stack so two stacks running in\n * parallel — `cdkd deploy --all` with `--stack-concurrency > 1` — don't\n * collide on the same `logicalId` in the renderer's task Map. Without\n * this, stack B's `addTask('MyQueue', ...)` would overwrite stack A's\n * entry, and stack A's later `removeTask('MyQueue')` would erase\n * stack B's.\n */\nfunction scopedKey(id: string, stackName: string | undefined): string {\n  return stackName ? `${stackName}:${id}` : id;\n}\n\nexport class LiveRenderer {\n  private tasks = new Map<string, Task>();\n  private active = false;\n  private spinnerIndex = 0;\n  private interval: NodeJS.Timeout | null = null;\n  private linesDrawn = 0;\n  private cursorHidden = false;\n  private exitListener: (() => void) | null = null;\n  private readonly stream: NodeJS.WriteStream;\n\n  constructor(stream: NodeJS.WriteStream = process.stdout) {\n    this.stream = stream;\n  }\n\n  isActive(): boolean {\n    return this.active;\n  }\n\n  /**\n   * Enable the live renderer. No-op if stdout is not a TTY or if\n   * `CDKD_NO_LIVE=1`. Returns true if successfully enabled.\n   */\n  start(): boolean {\n    if (this.active) return true;\n    if (!this.stream.isTTY) return false;\n    if (process.env['CDKD_NO_LIVE'] === '1') return false;\n\n    this.active = true;\n    this.hideCursor();\n    // Restore the cursor on abrupt process exit (e.g., uncaught exception\n    // before stop() runs). Removed in stop() to avoid leaking listeners\n    // across renderer instances.\n    if (!this.exitListener) {\n      this.exitListener = () => this.showCursor();\n      process.on('exit', this.exitListener);\n    }\n    this.interval = setInterval(() => this.draw(), FRAME_INTERVAL_MS);\n    if (typeof this.interval.unref === 'function') this.interval.unref();\n    return true;\n  }\n\n  stop(): void {\n    if (!this.active) return;\n    if (this.interval) {\n      clearInterval(this.interval);\n      this.interval = null;\n    }\n    this.clear();\n    this.showCursor();\n    if (this.exitListener) {\n      process.removeListener('exit', this.exitListener);\n      this.exitListener = null;\n    }\n    this.tasks.clear();\n    this.active = false;\n  }\n\n  addTask(id: string, label: string): void {\n    const stackName = getCurrentStackName();\n    this.tasks.set(scopedKey(id, stackName), { label, startedAt: Date.now(), stackName });\n    if (this.active) this.draw();\n  }\n\n  removeTask(id: string): void {\n    const stackName = getCurrentStackName();\n    if (!this.tasks.delete(scopedKey(id, stackName))) return;\n    if (this.active) this.draw();\n  }\n\n  /**\n   * Replace the label of a previously-added task in place. No-op if the\n   * task is not currently tracked (e.g. it already finished). Used by the\n   * per-resource deadline wrapper to surface a \"[taking longer than\n   * expected, Nm+]\" suffix without disturbing the elapsed-time counter\n   * the renderer tracks via `startedAt`.\n   */\n  updateTaskLabel(id: string, label: string): void {\n    const stackName = getCurrentStackName();\n    const task = this.tasks.get(scopedKey(id, stackName));\n    if (!task) return;\n    task.label = label;\n    if (this.active) this.draw();\n  }\n\n  /**\n   * Print content above the live area. Clears the live area, runs the writer,\n   * then redraws the live area. When the renderer is inactive, the writer\n   * runs directly so callers can use this unconditionally.\n   */\n  printAbove(write: () => void): void {\n    if (!this.active) {\n      write();\n      return;\n    }\n    this.clear();\n    write();\n    this.draw();\n  }\n\n  private clear(): void {\n    if (this.linesDrawn === 0) return;\n    this.stream.write('\\r');\n    for (let i = 0; i < this.linesDrawn; i++) {\n      this.stream.write(`${ESC}1A${ESC}2K`);\n    }\n    this.linesDrawn = 0;\n  }\n\n  private draw(): void {\n    if (!this.active) return;\n    this.clear();\n    if (this.tasks.size === 0) return;\n\n    const frame = SPINNER_FRAMES[this.spinnerIndex % SPINNER_FRAMES.length]!;\n    this.spinnerIndex++;\n\n    // When tasks from more than one stack are in flight at the same time,\n    // prefix each line with the stack name so the user can tell them\n    // apart. In single-stack runs, omit the prefix to keep the area\n    // visually clean. (Detection is per-frame: as soon as a second\n    // stack adds its first task, the prefix appears on every row;\n    // when the second stack's tasks all complete and only one stack\n    // remains, the prefix disappears.)\n    const distinctStacks = new Set<string | undefined>();\n    for (const task of this.tasks.values()) distinctStacks.add(task.stackName);\n    const showStackPrefix = distinctStacks.size > 1;\n\n    // Truncate to terminal width so a long label does not wrap and confuse\n    // the line-up clear logic. Default to 80 if columns is unavailable.\n    const cols = this.stream.columns ?? 80;\n    const lines: string[] = [];\n    for (const task of this.tasks.values()) {\n      const elapsed = ((Date.now() - task.startedAt) / 1000).toFixed(1);\n      const prefix = showStackPrefix && task.stackName ? `[${task.stackName}] ` : '';\n      const raw = `  ${frame} ${prefix}${task.label} (${elapsed}s)`;\n      lines.push(this.truncate(raw, cols));\n    }\n    this.stream.write(lines.join('\\n') + '\\n');\n    this.linesDrawn = lines.length;\n  }\n\n  private truncate(s: string, maxLen: number): string {\n    if (s.length <= maxLen) return s;\n    if (maxLen <= 1) return '…';\n    return s.substring(0, maxLen - 1) + '…';\n  }\n\n  private hideCursor(): void {\n    if (this.cursorHidden) return;\n    this.stream.write(`${ESC}?25l`);\n    this.cursorHidden = true;\n  }\n\n  private showCursor(): void {\n    if (!this.cursorHidden) return;\n    this.stream.write(`${ESC}?25h`);\n    this.cursorHidden = false;\n  }\n}\n\nlet globalRenderer: LiveRenderer | null = null;\n\nexport function getLiveRenderer(): LiveRenderer {\n  if (!globalRenderer) globalRenderer = new LiveRenderer();\n  return globalRenderer;\n}\n\n/**\n * Reset the singleton (for tests).\n */\nexport function resetLiveRenderer(): void {\n  if (globalRenderer) globalRenderer.stop();\n  globalRenderer = null;\n}\n","import { AsyncLocalStorage } from 'node:async_hooks';\n\n/**\n * Per-stack log buffer for parallel multi-stack deploys.\n *\n * Without buffering, two concurrent `deploy()` calls interleave their\n * `logger.info(...)` lines: stack A's \"Changes: 4 to create\" appears in\n * the middle of stack B's `[N/N] ✅ ...` progress, and stack B's\n * \"Deployment completed\" lands after stack A's late progress lines. With\n * buffering, each stack's log output is captured into its own buffer\n * for the duration of the deploy and flushed atomically when the deploy\n * finishes — so the user sees one clean per-stack block.\n *\n * Single-stack deploys do NOT enable buffering (the caller checks\n * `stacks.length > 1`); real-time output is preferred when there is no\n * interleaving risk.\n */\nexport interface StackOutputBuffer {\n  lines: string[];\n}\n\nconst outputBufferStore = new AsyncLocalStorage<StackOutputBuffer>();\n\n/**\n * Run `fn` with a fresh log buffer scoped to its async chain. Any\n * `logger.info / debug / warn / error` calls inside `fn` (and any\n * `await`s) push into the buffer instead of writing to stdout/stderr.\n * Returns the buffered lines (and either `result` or `error`) so the\n * caller can flush them in one block.\n */\nexport async function runStackBuffered<T>(\n  fn: () => Promise<T>\n): Promise<{ lines: string[] } & ({ ok: true; result: T } | { ok: false; error: unknown })> {\n  const buffer: StackOutputBuffer = { lines: [] };\n  return outputBufferStore.run(buffer, async () => {\n    try {\n      const result = await fn();\n      return { ok: true, result, lines: buffer.lines };\n    } catch (error) {\n      return { ok: false, error, lines: buffer.lines };\n    }\n  });\n}\n\n/**\n * Get the current async context's stack output buffer, or `undefined`\n * if no `runStackBuffered` is active. The logger consults this on every\n * call: present → push to buffer; absent → fall through to live\n * renderer / console.\n */\nexport function getCurrentStackOutputBuffer(): StackOutputBuffer | undefined {\n  return outputBufferStore.getStore();\n}\n","import type { Logger, LogLevel } from '../types/config.js';\nimport { getLiveRenderer } from './live-renderer.js';\nimport { getCurrentStackOutputBuffer } from './stack-context.js';\n\n/**\n * ANSI color codes\n *\n * Kept internal — `ConsoleLogger.formatMessage` references these for the\n * verbose/compact mode level prefixes. For inline color wrapping in\n * production code, import from `./colors.js` instead (which lives in a\n * separate module so unit tests that mock `logger.ts` don't strip color\n * helpers as a side effect).\n */\nconst colors = {\n  reset: '\\x1b[0m',\n  bright: '\\x1b[1m',\n  dim: '\\x1b[2m',\n  red: '\\x1b[31m',\n  green: '\\x1b[32m',\n  yellow: '\\x1b[33m',\n  blue: '\\x1b[34m',\n  cyan: '\\x1b[36m',\n  gray: '\\x1b[90m',\n} as const;\n\n/**\n * Whether stdout has been claimed by a machine-readable payload.\n *\n * Issue [#2230](https://github.com/go-to-k/cdkd/issues/2230). `info` and\n * `debug` resolve to `console.info` / `console.debug`, which write to\n * STDOUT — the same stream a `--json` command prints its payload on. A\n * command whose remediation path logs a status line therefore hands a pipe\n * consumer prose wrapped around the document, and the failure is silent in\n * the worst direction: the human sees correct-looking output while the\n * parser sees a syntax error, or succeeds against a truncated read.\n *\n * MODULE-LEVEL rather than an instance field on purpose. The decision is a\n * property of the PROCESS's stdout, not of one logger object: `child()`\n * hands out fresh {@link ChildLogger} instances (`role-arn`, the state\n * backend, ...) that would each need the flag set individually, and those\n * are exactly the loggers a command cannot reach from its own file.\n *\n * OPT-IN, and deliberately not derived from a `--json` flag inside the\n * logger: nothing changes for a command that does not call\n * {@link reserveStdoutForPayload}. Every `--json` surface keeps its payload\n * stream clean one way or the other, but NOT all by this mechanism, and the\n * count is easy to state one short: SEVEN call this — `cdkd drift`'s original\n * call, plus the six issue\n * [#2280](https://github.com/go-to-k/cdkd/issues/2280) added to it (`cdkd\n * list`, `cdkd events`, and the four `cdkd state {list,resources,show,info}`\n * subcommands) — while `cdkd diff` predates the mechanism and demotes the\n * logger to `warn` instead, which SUPPRESSES its info-level lines rather than\n * moving them. Do not read \"every `--json` surface\" as \"every `--json`\n * surface calls this\". Of those seven, TWO no longer consult `--json` at all\n * — see the next paragraph, which owns them.\n *\n * A `--json` flag is NOT what makes a stream a payload stream, though, and\n * issue [#2410](https://github.com/go-to-k/cdkd/issues/2410) plus issue\n * [#2435](https://github.com/go-to-k/cdkd/issues/2435) are the FIVE commands\n * where it is not involved at all: `cdkd synth` (the template), `cdkd list`\n * in EVERY mode (the YAML and the one-id-per-line spellings, not just\n * `--json`), `cdkd state list` in EVERY mode (the one-`Stack (region)`-\n * per-line spelling as much as `--json`; `--long` / `--tree` are formatted\n * views swept along, since the reservation is taken before the mode is\n * known), `cdkd local invoke` (the function response) and `cdkd local\n * invoke-agentcore` (the agent response). NOTE `cdkd list` AND `cdkd state\n * list` each appear in BOTH paragraphs and are ONE call site apiece, not two:\n * go-to-k/cdkd#2280 added both under `--json`, and go-to-k/cdkd#2410 /\n * go-to-k/cdkd#2435 respectively made those same calls unconditional. Ten\n * commands call this in total, not twelve. Those five call it\n * UNCONDITIONALLY at command entry, so for them the DEFAULT human output\n * contract is the one that moved — deliberately, and documented per command\n * in `docs/cli-reference.md`. The OTHER three `cdkd state` subcommands keep\n * the `--json` gate on the discriminator that page states: their flagless\n * output is a formatted human VIEW with no record-set mode behind it, not a\n * line-oriented RECORD SET. What has NOT changed is that the decision stays\n * with the command: a command whose stdout is a human surface (`cdkd deploy`,\n * `cdkd local start-api`, `cdkd local run-task`) still never calls this.\n */\nlet stdoutReservedForPayload = false;\n\n/**\n * Claim stdout for a machine-readable payload: `info` / `debug` lines route\n * to stderr for the rest of the process.\n *\n * The lines are MOVED, not dropped. An operator watching a terminal still\n * sees every status line; only the byte stream a pipe reads changes.\n */\nexport function reserveStdoutForPayload(): void {\n  stdoutReservedForPayload = true;\n}\n\n/**\n * Hand stdout back. Exists for tests — the CLI runs one command per process\n * and never releases the reservation.\n */\nexport function releaseStdoutForPayload(): void {\n  stdoutReservedForPayload = false;\n}\n\n/**\n * Whether {@link reserveStdoutForPayload} is in effect.\n *\n * Production callers exist, and the carve-out is narrow enough to state: a\n * writer that does NOT go through {@link ConsoleLogger} and therefore cannot\n * be routed by {@link ConsoleLogger.emit}. Today both live in\n * `src/utils/docker-cmd.ts` — `spawnStreaming`, which mirrors a child's\n * stdout live under `--verbose`, and `spawnForeground`, which hands the\n * child our fd 1 outright. Issue\n * [#2410](https://github.com/go-to-k/cdkd/issues/2410) routed both to stderr\n * while a command holds the reservation.\n *\n * The class is NOT closed, and saying so is the point: `streamLogs` in\n * `src/local/docker-runner.ts` is a third member — it pipes the CONTAINER's\n * stdout into ours on `cdkd local invoke` — and is deliberately NOT\n * converted, because unlike docker's own diagnostics a container's stdout\n * may BE what the user wants on that stream. That needs a per-caller\n * contract decision and a real-Docker integ round, tracked as\n * [#2419](https://github.com/go-to-k/cdkd/issues/2419).\n *\n * That is the ONLY shape this predicate is for. A COMMAND must never branch\n * on it — a command's own prose already flows through the logger, so\n * consulting this would be a second copy of a decision `emit` already makes,\n * and the two would drift. If you are reaching for it from a `commands/`\n * file, the answer is `reserveStdoutForPayload()` instead.\n *\n * Also used by tests, alongside {@link releaseStdoutForPayload}.\n */\nexport function isStdoutReservedForPayload(): boolean {\n  return stdoutReservedForPayload;\n}\n\n/**\n * Format timestamp\n */\nfunction formatTimestamp(): string {\n  const now = new Date();\n  return now.toISOString();\n}\n\n/**\n * Console logger implementation\n *\n * Supports two output modes:\n * - verbose (debug level): timestamps, module prefixes, all details\n * - compact (info level): clean output without timestamps or prefixes\n */\nexport class ConsoleLogger implements Logger {\n  private level: LogLevel;\n  private useColors: boolean;\n\n  constructor(level: LogLevel = 'info', useColors: boolean = true) {\n    this.level = level;\n    this.useColors = useColors;\n  }\n\n  private shouldLog(level: LogLevel): boolean {\n    const levels: LogLevel[] = ['debug', 'info', 'warn', 'error'];\n    const currentLevelIndex = levels.indexOf(this.level);\n    const messageLevelIndex = levels.indexOf(level);\n    return messageLevelIndex >= currentLevelIndex;\n  }\n\n  private formatMessage(level: LogLevel, message: string, ...args: unknown[]): string {\n    const formattedArgs = args.length > 0 ? ' ' + args.map((a) => JSON.stringify(a)).join(' ') : '';\n\n    // Verbose mode: full timestamps and level\n    if (this.level === 'debug') {\n      const timestamp = formatTimestamp();\n      const levelStr = level.toUpperCase().padEnd(5);\n\n      if (this.useColors) {\n        const levelColor = {\n          debug: colors.gray,\n          info: colors.blue,\n          warn: colors.yellow,\n          error: colors.red,\n        }[level];\n\n        return `${colors.dim}${timestamp}${colors.reset} ${levelColor}${levelStr}${colors.reset} ${message}${formattedArgs}`;\n      }\n\n      return `${timestamp} ${levelStr} ${message}${formattedArgs}`;\n    }\n\n    // Compact mode: clean output\n    if (this.useColors) {\n      if (level === 'error') {\n        return `${colors.red}${message}${formattedArgs}${colors.reset}`;\n      }\n      if (level === 'warn') {\n        return `${colors.yellow}${message}${formattedArgs}${colors.reset}`;\n      }\n      return `${message}${formattedArgs}`;\n    }\n\n    return `${message}${formattedArgs}`;\n  }\n\n  /**\n   * Route a formatted log line. When a per-stack output buffer is active in\n   * the current async context (parallel multi-stack deploy), capture the\n   * line into the buffer so it can be flushed as one atomic block when the\n   * stack finishes. Otherwise fall through to the live renderer / console\n   * as before.\n   *\n   * `warn` / `error` already go to stderr via `console.warn` / `console.error`.\n   * `info` / `debug` go to stdout — and JOIN them on stderr while\n   * {@link stdoutReservedForPayload} is set, so the reserving command's payload\n   * is the only thing on stdout.\n   *\n   * KNOWN GAP, latent and deliberately not restructured (issues\n   * [#2230](https://github.com/go-to-k/cdkd/issues/2230) and\n   * [#2410](https://github.com/go-to-k/cdkd/issues/2410)): the stack-output\n   * buffer short-circuits ABOVE the reservation check, so a line captured under\n   * `runStackBuffered` is replayed by whatever flushes the buffer and never\n   * consults the reservation at all. Unreachable today — `deploy.ts`'s\n   * `runStackBuffered` call is the only thing that opens a buffer, and `deploy`\n   * reserves nothing (its stdout is a human surface). A bare line number here\n   * would go stale on the next edit to that file with nothing noticing, so it\n   * is named by symbol instead. Because the path is unreachable, a fix would\n   * be untestable and would have to guess where the flush should route.\n   *\n   * That rationale survives #2410 unchanged, and it is worth restating WHY,\n   * because #2410 widened the reserving population from a `--json`-only set to\n   * one that includes commands with no flag at all. The four it added —\n   * `cdkd synth`, `cdkd list`, `cdkd local invoke`,\n   * `cdkd local invoke-agentcore` — and the fifth issue\n   * [#2435](https://github.com/go-to-k/cdkd/issues/2435) then added,\n   * `cdkd state list`, run NO work inside `runStackBuffered`:\n   * buffering exists for the parallel multi-stack deploy path, which none of\n   * them enters. So the gap stays latent, and the condition for it becoming\n   * REAL is unchanged in substance but wider in reach: it is no longer \"a\n   * `--json` command runs work inside `runStackBuffered`\" but \"ANY reserving\n   * command does\". Whoever does that must route the flush, not just call\n   * {@link reserveStdoutForPayload}.\n   */\n  private emit(level: LogLevel, formatted: string): void {\n    const buffer = getCurrentStackOutputBuffer();\n    if (buffer) {\n      buffer.lines.push(formatted);\n      return;\n    }\n    getLiveRenderer().printAbove(() => {\n      if (level === 'error') console.error(formatted);\n      else if (level === 'warn') console.warn(formatted);\n      else if (stdoutReservedForPayload) console.error(formatted);\n      else if (level === 'info') console.info(formatted);\n      else console.debug(formatted);\n    });\n  }\n\n  debug(message: string, ...args: unknown[]): void {\n    if (this.shouldLog('debug')) {\n      this.emit('debug', this.formatMessage('debug', message, ...args));\n    }\n  }\n\n  info(message: string, ...args: unknown[]): void {\n    if (this.shouldLog('info')) {\n      this.emit('info', this.formatMessage('info', message, ...args));\n    }\n  }\n\n  warn(message: string, ...args: unknown[]): void {\n    if (this.shouldLog('warn')) {\n      this.emit('warn', this.formatMessage('warn', message, ...args));\n    }\n  }\n\n  error(message: string, ...args: unknown[]): void {\n    if (this.shouldLog('error')) {\n      this.emit('error', this.formatMessage('error', message, ...args));\n    }\n  }\n\n  /**\n   * Set log level\n   */\n  setLevel(level: LogLevel): void {\n    this.level = level;\n  }\n\n  getLevel(): LogLevel {\n    return this.level;\n  }\n\n  /**\n   * Create a child logger with a prefix\n   *\n   * In verbose mode, prefix is shown as [Prefix]. In compact mode, prefix is hidden.\n   */\n  child(prefix: string): ChildLogger {\n    return new ChildLogger(prefix, this.useColors);\n  }\n}\n\n/**\n * Child logger that always syncs level from global logger\n */\nclass ChildLogger extends ConsoleLogger {\n  private readonly prefix: string;\n\n  constructor(prefix: string, useColors: boolean) {\n    super('info', useColors);\n    this.prefix = prefix;\n  }\n\n  private syncLevel(): void {\n    if (globalLogger) {\n      this.setLevel(globalLogger.getLevel());\n    }\n  }\n\n  override debug(message: string, ...args: unknown[]): void {\n    this.syncLevel();\n    super.debug(`[${this.prefix}] ${message}`, ...args);\n  }\n\n  override info(message: string, ...args: unknown[]): void {\n    this.syncLevel();\n    const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n    super.info(msg, ...args);\n  }\n\n  override warn(message: string, ...args: unknown[]): void {\n    this.syncLevel();\n    const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n    super.warn(msg, ...args);\n  }\n\n  override error(message: string, ...args: unknown[]): void {\n    this.syncLevel();\n    const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n    super.error(msg, ...args);\n  }\n}\n\n/**\n * Global logger instance\n */\nlet globalLogger: ConsoleLogger | null = null;\n\n/**\n * Get or create global logger\n */\nexport function getLogger(): ConsoleLogger {\n  if (!globalLogger) {\n    globalLogger = new ConsoleLogger();\n  }\n  return globalLogger;\n}\n\n/**\n * Set global logger instance\n */\nexport function setLogger(logger: ConsoleLogger): void {\n  globalLogger = logger;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiBA,MAAM,iBAAiB,IAAI,kBAA0B;AAUrD,SAAgB,cAAiB,WAAmB,IAA0C;CAC5F,OAAO,eAAe,IAAI,WAAW,EAAE;AACzC;;;;;;;;;;AAWA,SAAgB,sBAA0C;CACxD,OAAO,eAAe,SAAS;AACjC;;;;;;;;;;;;;AA4BA,MAAM,kBAAkB,IAAI,kBAA2B;AAevD,SAAgB,eAAkB,MAAe,IAA0C;CACzF,OAAO,gBAAgB,IAAI,MAAM,EAAE;AACrC;;;;;;;;AASA,SAAgB,uBAAgC;CAC9C,OAAO,gBAAgB,SAAS,KAAK;AACvC;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,2BAA8C;CACzD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,4BAA8D;CACzE,kBAAkB;CAClB,kBAAkB;CAClB,mBAAmB;CACnB,6BAA6B;CAC7B,2BAA2B;CAC3B,6CAA6C;CAC7C,4CAA4C;AAC9C;;;;;;;;;;;;;;;AAgBA,MAAa,yBAAwE;CACnF,kBAAkB,EAAE,WAAW,GAAG;CAClC,kBAAkB,EAAE,WAAW,GAAG;CAClC,mBAAmB,EAAE,WAAW,IAAI;CACpC,6BAA6B,EAAE,WAAW,IAAI;CAC9C,2BAA2B,EAAE,WAAW,IAAI;CAC5C,6CAA6C,EAAE,WAAW,GAAG;CAC7D,4CAA4C,EAAE,WAAW,GAAG;AAC9D;;;;;;;;;;;AA4CA,SAAgB,qBAAqB,MAAc,SAAsC;CACvF,MAAM,EACJ,WACA,YAAY,OACZ,iBAAiB,kBACjB,eAAe,UACb;CASJ,MAAM,mBAAmB,eAAe,SAAS;CAEjD,MAAM,WADe,oBAAoB,EAAE,gBAAgB,qBAAqB,KAChD,GAAG,iBAAiB,GAAG,SAAS;CAGhE,IAAI,YAAY,YAAY,SAAS,YAAY,IAAI;CACrD,YAAY,UAAU,QAAQ,gBAAgB,GAAG;CAGjD,YAAY,UAAU,QAAQ,UAAU,GAAG,CAAC,CAAC,QAAQ,YAAY,EAAE;CAEnE,IAAI,UAAU,UAAU,WACtB,OAAO;CAIT,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC;CAC/E,MAAM,kBAAkB,YAAY,KAAK,SAAS;CAGlD,OAAO,GAFQ,UAAU,UAAU,GAAG,eAAe,CAAC,CAAC,QAAQ,OAAO,EAEvD,EAAE,GAAG;AACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,SAAgB,2BACd,YACA,WACA,WACS;CACT,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,OAAO;CAIpD,MAAM,YAAY,UAA0B,MAAM,YAAY,CAAC,CAAC,QAAQ,cAAc,EAAE;CACxF,MAAM,UAAU,SAAS,GAAG,UAAU,GAAG,WAAW;CAEpD,IADe,SAAS,UACf,MAAM,SAAS,OAAO;CAI/B,MAAM,YAAY,uBAAuB,KAAK,WAAW,YAAY,CAAC;CACtE,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,SAAS,SAAS,UAAU,EAAG;CACrC,OAAO,OAAO,SAAS,KAAK,QAAQ,WAAW,MAAM;AACvD;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,iCACd,kBACA,WACA,SACQ;CACR,IAAI,qBAAqB,UAAa,qBAAqB,IACzD,OAAO,qBAAqB,kBAAkB;EAAE,GAAG;EAAS,cAAc;CAAK,CAAC;CAElF,OAAO,qBAAqB,WAAW;EAAE,GAAG;EAAS,cAAc;CAAM,CAAC;AAC5E;;;;;;;;;;AAWA,MAAM,sBAMF;CACF,mBAAmB;EAAE,cAAc;EAAc,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAAE;CAC7F,mBAAmB;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,GAAG;CAAE;CAC3E,mBAAmB;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,IAAI;CAAE;CAC5E,yBAAyB;EAAE,cAAc;EAAgB,SAAS,EAAE,WAAW,GAAG;CAAE;CACpF,6BAA6B;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,GAAG;CAAE;CACrF,kBAAkB;EAAE,cAAc;EAAY,SAAS,EAAE,WAAW,GAAG;CAAE;CACzE,oBAAoB;EAAE,cAAc;EAAc,SAAS,EAAE,WAAW,GAAG;CAAE;CAC7E,2BAA2B;EACzB,cAAc;EACd,SAAS,EAAE,WAAW,IAAI;CAC5B;CACA,kBAAkB;EAAE,cAAc;EAAY,SAAS,EAAE,WAAW,GAAG;CAAE;CACzE,mBAAmB;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,IAAI;CAAE;CAC5E,6BAA6B;EAC3B,cAAc;EACd,SAAS,EAAE,WAAW,IAAI;CAC5B;CACA,wBAAwB;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,IAAI;CAAE;CACjF,wBAAwB;EACtB,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,WAAW;EAAK;CAC7C;CACA,qBAAqB;EAAE,cAAc;EAAe,SAAS,EAAE,WAAW,IAAI;CAAE;CAChF,qBAAqB;EAAE,cAAc;EAAe,SAAS,EAAE,WAAW,IAAI;CAAE;CAChF,uBAAuB;EAAE,cAAc;EAAgB,SAAS,EAAE,WAAW,IAAI;CAAE;CACnF,0BAA0B;EAAE,cAAc;EAAa,SAAS,EAAE,WAAW,IAAI;CAAE;CACnF,qBAAqB;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,GAAG;CAAE;CACxE,yBAAyB;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,IAAI;CAAE;CAC7E,wBAAwB;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,IAAI;CAAE;CAC5E,oCAAoC;EAClC,cAAc;EACd,SAAS,EAAE,WAAW,GAAG;CAC3B;CACA,+BAA+B;EAC7B,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,gBAAgB;EAAmB;CAChE;CACA,uBAAuB;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,KAAK;CAAE;CAC5E,0BAA0B;EAAE,cAAc;EAAgB,SAAS,EAAE,WAAW,IAAI;CAAE;CACtF,iCAAiC;EAC/B,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,WAAW;EAAK;CAC7C;CACA,kCAAkC;EAChC,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CACA,2BAA2B;EACzB,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,WAAW;EAAK;CAC7C;CACA,uBAAuB;EACrB,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CACA,wBAAwB;EACtB,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CAEA,6BAA6B;EAC3B,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,WAAW;EAAK;CAC7C;CACA,yBAAyB;EACvB,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CACA,0BAA0B;EACxB,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CAEA,+BAA+B;EAC7B,cAAc;EACd,SAAS;GAAE,WAAW;GAAK,WAAW;EAAK;CAC7C;CACA,2BAA2B;EACzB,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CACA,4BAA4B;EAC1B,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;CACA,6CAA6C;EAC3C,cAAc;EACd,SAAS,EAAE,WAAW,GAAG;CAC3B;CACA,4CAA4C;EAC1C,cAAc;EACd,SAAS,EAAE,WAAW,GAAG;CAC3B;CACA,sBAAsB;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,IAAI;CAAE;CAC1E,2BAA2B;EAAE,cAAc;EAAQ,SAAS,EAAE,WAAW,IAAI;CAAE;CAC/E,mCAAmC;EACjC,cAAc;EACd,SAAS;GAAE,WAAW;GAAI,WAAW;EAAK;CAC5C;AACF;;;;;;;;;;;;;AAcA,SAAgB,4BACd,WACA,cACA,YACyB;CACzB,MAAM,OAAO,oBAAoB;CACjC,IAAI,CAAC,MAAM,OAAO;CAGlB,IAAI,WAAW,KAAK,eAAe,OAAO;CAE1C,MAAM,gBAAgB,qBAAqB,WAAW,KAAK,OAAO;CAElE,OAAO;EACL,GAAG;GACF,KAAK,eAAe;CACvB;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,wBAAwB,cAA0C;CAChF,OACE,oBAAoB,aAAa,EAAE,gBAAgB,8BAA8B;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,MAAM,gCAAwD;CAC5D,sCAAsC;CACtC,+BAA+B;CAC/B,8BAA8B;CAC9B,qBAAqB;CACrB,6BAA6B;CAC7B,4BAA4B;AAC9B;;;;;;;;;;;;;;;;;;;;;;AC1iBA,MAAM,iBAAiB;CAAC;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;CAAK;AAAG;AACxE,MAAM,oBAAoB;AAC1B,MAAM,MAAM;;;;;;;;;AAoBZ,SAAS,UAAU,IAAY,WAAuC;CACpE,OAAO,YAAY,GAAG,UAAU,GAAG,OAAO;AAC5C;AAEA,IAAa,eAAb,MAA0B;CACxB,AAAQ,wBAAQ,IAAI,IAAkB;CACtC,AAAQ,SAAS;CACjB,AAAQ,eAAe;CACvB,AAAQ,WAAkC;CAC1C,AAAQ,aAAa;CACrB,AAAQ,eAAe;CACvB,AAAQ,eAAoC;CAC5C,AAAiB;CAEjB,YAAY,SAA6B,QAAQ,QAAQ;EACvD,KAAK,SAAS;CAChB;CAEA,WAAoB;EAClB,OAAO,KAAK;CACd;;;;;CAMA,QAAiB;EACf,IAAI,KAAK,QAAQ,OAAO;EACxB,IAAI,CAAC,KAAK,OAAO,OAAO,OAAO;EAC/B,IAAI,QAAQ,IAAI,oBAAoB,KAAK,OAAO;EAEhD,KAAK,SAAS;EACd,KAAK,WAAW;EAIhB,IAAI,CAAC,KAAK,cAAc;GACtB,KAAK,qBAAqB,KAAK,WAAW;GAC1C,QAAQ,GAAG,QAAQ,KAAK,YAAY;EACtC;EACA,KAAK,WAAW,kBAAkB,KAAK,KAAK,GAAG,iBAAiB;EAChE,IAAI,OAAO,KAAK,SAAS,UAAU,YAAY,KAAK,SAAS,MAAM;EACnE,OAAO;CACT;CAEA,OAAa;EACX,IAAI,CAAC,KAAK,QAAQ;EAClB,IAAI,KAAK,UAAU;GACjB,cAAc,KAAK,QAAQ;GAC3B,KAAK,WAAW;EAClB;EACA,KAAK,MAAM;EACX,KAAK,WAAW;EAChB,IAAI,KAAK,cAAc;GACrB,QAAQ,eAAe,QAAQ,KAAK,YAAY;GAChD,KAAK,eAAe;EACtB;EACA,KAAK,MAAM,MAAM;EACjB,KAAK,SAAS;CAChB;CAEA,QAAQ,IAAY,OAAqB;EACvC,MAAM,YAAY,oBAAoB;EACtC,KAAK,MAAM,IAAI,UAAU,IAAI,SAAS,GAAG;GAAE;GAAO,WAAW,KAAK,IAAI;GAAG;EAAU,CAAC;EACpF,IAAI,KAAK,QAAQ,KAAK,KAAK;CAC7B;CAEA,WAAW,IAAkB;EAC3B,MAAM,YAAY,oBAAoB;EACtC,IAAI,CAAC,KAAK,MAAM,OAAO,UAAU,IAAI,SAAS,CAAC,GAAG;EAClD,IAAI,KAAK,QAAQ,KAAK,KAAK;CAC7B;;;;;;;;CASA,gBAAgB,IAAY,OAAqB;EAC/C,MAAM,YAAY,oBAAoB;EACtC,MAAM,OAAO,KAAK,MAAM,IAAI,UAAU,IAAI,SAAS,CAAC;EACpD,IAAI,CAAC,MAAM;EACX,KAAK,QAAQ;EACb,IAAI,KAAK,QAAQ,KAAK,KAAK;CAC7B;;;;;;CAOA,WAAW,OAAyB;EAClC,IAAI,CAAC,KAAK,QAAQ;GAChB,MAAM;GACN;EACF;EACA,KAAK,MAAM;EACX,MAAM;EACN,KAAK,KAAK;CACZ;CAEA,AAAQ,QAAc;EACpB,IAAI,KAAK,eAAe,GAAG;EAC3B,KAAK,OAAO,MAAM,IAAI;EACtB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,YAAY,KACnC,KAAK,OAAO,MAAM,GAAG,IAAI,IAAI,IAAI,GAAG;EAEtC,KAAK,aAAa;CACpB;CAEA,AAAQ,OAAa;EACnB,IAAI,CAAC,KAAK,QAAQ;EAClB,KAAK,MAAM;EACX,IAAI,KAAK,MAAM,SAAS,GAAG;EAE3B,MAAM,QAAQ,eAAe,KAAK,eAAe,eAAe;EAChE,KAAK;EASL,MAAM,iCAAiB,IAAI,IAAwB;EACnD,KAAK,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG,eAAe,IAAI,KAAK,SAAS;EACzE,MAAM,kBAAkB,eAAe,OAAO;EAI9C,MAAM,OAAO,KAAK,OAAO,WAAW;EACpC,MAAM,QAAkB,CAAC;EACzB,KAAK,MAAM,QAAQ,KAAK,MAAM,OAAO,GAAG;GACtC,MAAM,YAAY,KAAK,IAAI,IAAI,KAAK,aAAa,IAAI,CAAE,QAAQ,CAAC;GAEhE,MAAM,MAAM,KAAK,MAAM,GADR,mBAAmB,KAAK,YAAY,IAAI,KAAK,UAAU,MAAM,KACzC,KAAK,MAAM,IAAI,QAAQ;GAC1D,MAAM,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC;EACrC;EACA,KAAK,OAAO,MAAM,MAAM,KAAK,IAAI,IAAI,IAAI;EACzC,KAAK,aAAa,MAAM;CAC1B;CAEA,AAAQ,SAAS,GAAW,QAAwB;EAClD,IAAI,EAAE,UAAU,QAAQ,OAAO;EAC/B,IAAI,UAAU,GAAG,OAAO;EACxB,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC,IAAI;CACtC;CAEA,AAAQ,aAAmB;EACzB,IAAI,KAAK,cAAc;EACvB,KAAK,OAAO,MAAM,GAAG,IAAI,KAAK;EAC9B,KAAK,eAAe;CACtB;CAEA,AAAQ,aAAmB;EACzB,IAAI,CAAC,KAAK,cAAc;EACxB,KAAK,OAAO,MAAM,GAAG,IAAI,KAAK;EAC9B,KAAK,eAAe;CACtB;AACF;AAEA,IAAI,iBAAsC;AAE1C,SAAgB,kBAAgC;CAC9C,IAAI,CAAC,gBAAgB,iBAAiB,IAAI,aAAa;CACvD,OAAO;AACT;;;;AC/LA,MAAM,oBAAoB,IAAI,kBAAqC;;;;;;;;AASnE,eAAsB,iBACpB,IAC0F;CAC1F,MAAM,SAA4B,EAAE,OAAO,CAAC,EAAE;CAC9C,OAAO,kBAAkB,IAAI,QAAQ,YAAY;EAC/C,IAAI;GAEF,OAAO;IAAE,IAAI;IAAM,cADE,GAAG;IACG,OAAO,OAAO;GAAM;EACjD,SAAS,OAAO;GACd,OAAO;IAAE,IAAI;IAAO;IAAO,OAAO,OAAO;GAAM;EACjD;CACF,CAAC;AACH;;;;;;;AAQA,SAAgB,8BAA6D;CAC3E,OAAO,kBAAkB,SAAS;AACpC;;;;;;;;;;;;;ACvCA,MAAM,SAAS;CACb,OAAO;CACP,QAAQ;CACR,KAAK;CACL,KAAK;CACL,OAAO;CACP,QAAQ;CACR,MAAM;CACN,MAAM;CACN,MAAM;AACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,IAAI,2BAA2B;;;;;;;;AAS/B,SAAgB,0BAAgC;CAC9C,2BAA2B;AAC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,6BAAsC;CACpD,OAAO;AACT;;;;AAKA,SAAS,kBAA0B;CAEjC,wBAAO,IADS,KACP,EAAC,CAAC,YAAY;AACzB;;;;;;;;AASA,IAAa,gBAAb,MAA6C;CAC3C,AAAQ;CACR,AAAQ;CAER,YAAY,QAAkB,QAAQ,YAAqB,MAAM;EAC/D,KAAK,QAAQ;EACb,KAAK,YAAY;CACnB;CAEA,AAAQ,UAAU,OAA0B;EAC1C,MAAM,SAAqB;GAAC;GAAS;GAAQ;GAAQ;EAAO;EAC5D,MAAM,oBAAoB,OAAO,QAAQ,KAAK,KAAK;EAEnD,OAD0B,OAAO,QAAQ,KAClB,KAAK;CAC9B;CAEA,AAAQ,cAAc,OAAiB,SAAiB,GAAG,MAAyB;EAClF,MAAM,gBAAgB,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI;EAG7F,IAAI,KAAK,UAAU,SAAS;GAC1B,MAAM,YAAY,gBAAgB;GAClC,MAAM,WAAW,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC;GAE7C,IAAI,KAAK,WAAW;IAClB,MAAM,aAAa;KACjB,OAAO,OAAO;KACd,MAAM,OAAO;KACb,MAAM,OAAO;KACb,OAAO,OAAO;IAChB,EAAE;IAEF,OAAO,GAAG,OAAO,MAAM,YAAY,OAAO,MAAM,GAAG,aAAa,WAAW,OAAO,MAAM,GAAG,UAAU;GACvG;GAEA,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU;EAC/C;EAGA,IAAI,KAAK,WAAW;GAClB,IAAI,UAAU,SACZ,OAAO,GAAG,OAAO,MAAM,UAAU,gBAAgB,OAAO;GAE1D,IAAI,UAAU,QACZ,OAAO,GAAG,OAAO,SAAS,UAAU,gBAAgB,OAAO;GAE7D,OAAO,GAAG,UAAU;EACtB;EAEA,OAAO,GAAG,UAAU;CACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCA,AAAQ,KAAK,OAAiB,WAAyB;EACrD,MAAM,SAAS,4BAA4B;EAC3C,IAAI,QAAQ;GACV,OAAO,MAAM,KAAK,SAAS;GAC3B;EACF;EACA,gBAAgB,CAAC,CAAC,iBAAiB;GACjC,IAAI,UAAU,SAAS,QAAQ,MAAM,SAAS;QACzC,IAAI,UAAU,QAAQ,QAAQ,KAAK,SAAS;QAC5C,IAAI,0BAA0B,QAAQ,MAAM,SAAS;QACrD,IAAI,UAAU,QAAQ,QAAQ,KAAK,SAAS;QAC5C,QAAQ,MAAM,SAAS;EAC9B,CAAC;CACH;CAEA,MAAM,SAAiB,GAAG,MAAuB;EAC/C,IAAI,KAAK,UAAU,OAAO,GACxB,KAAK,KAAK,SAAS,KAAK,cAAc,SAAS,SAAS,GAAG,IAAI,CAAC;CAEpE;CAEA,KAAK,SAAiB,GAAG,MAAuB;EAC9C,IAAI,KAAK,UAAU,MAAM,GACvB,KAAK,KAAK,QAAQ,KAAK,cAAc,QAAQ,SAAS,GAAG,IAAI,CAAC;CAElE;CAEA,KAAK,SAAiB,GAAG,MAAuB;EAC9C,IAAI,KAAK,UAAU,MAAM,GACvB,KAAK,KAAK,QAAQ,KAAK,cAAc,QAAQ,SAAS,GAAG,IAAI,CAAC;CAElE;CAEA,MAAM,SAAiB,GAAG,MAAuB;EAC/C,IAAI,KAAK,UAAU,OAAO,GACxB,KAAK,KAAK,SAAS,KAAK,cAAc,SAAS,SAAS,GAAG,IAAI,CAAC;CAEpE;;;;CAKA,SAAS,OAAuB;EAC9B,KAAK,QAAQ;CACf;CAEA,WAAqB;EACnB,OAAO,KAAK;CACd;;;;;;CAOA,MAAM,QAA6B;EACjC,OAAO,IAAI,YAAY,QAAQ,KAAK,SAAS;CAC/C;AACF;;;;AAKA,IAAM,cAAN,cAA0B,cAAc;CACtC,AAAiB;CAEjB,YAAY,QAAgB,WAAoB;EAC9C,MAAM,QAAQ,SAAS;EACvB,KAAK,SAAS;CAChB;CAEA,AAAQ,YAAkB;EACxB,IAAI,cACF,KAAK,SAAS,aAAa,SAAS,CAAC;CAEzC;CAEA,AAAS,MAAM,SAAiB,GAAG,MAAuB;EACxD,KAAK,UAAU;EACf,MAAM,MAAM,IAAI,KAAK,OAAO,IAAI,WAAW,GAAG,IAAI;CACpD;CAEA,AAAS,KAAK,SAAiB,GAAG,MAAuB;EACvD,KAAK,UAAU;EACf,MAAM,MAAM,KAAK,SAAS,MAAM,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,KAAK,KAAK,GAAG,IAAI;CACzB;CAEA,AAAS,KAAK,SAAiB,GAAG,MAAuB;EACvD,KAAK,UAAU;EACf,MAAM,MAAM,KAAK,SAAS,MAAM,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,KAAK,KAAK,GAAG,IAAI;CACzB;CAEA,AAAS,MAAM,SAAiB,GAAG,MAAuB;EACxD,KAAK,UAAU;EACf,MAAM,MAAM,KAAK,SAAS,MAAM,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,MAAM,KAAK,GAAG,IAAI;CAC1B;AACF;;;;AAKA,IAAI,eAAqC;;;;AAKzC,SAAgB,YAA2B;CACzC,IAAI,CAAC,cACH,eAAe,IAAI,cAAc;CAEnC,OAAO;AACT;;;;AAKA,SAAgB,UAAU,QAA6B;CACrD,eAAe;AACjB"}