@go-to-k/cdkd 0.290.19 → 0.290.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1181,6 +1181,9 @@ declare class DeployEngine {
1181
1181
  private refuseRedactedAttributeReads;
1182
1182
  private redactOperationsForJournal;
1183
1183
  private redactStateForPersist;
1184
+ private redactCrossStackReads;
1185
+ private crossStackReadKeyNormalizer;
1186
+ private allRecordedSecrets;
1184
1187
  private withParentInfo;
1185
1188
  private kickOffObservedCapture;
1186
1189
  private drainObservedCaptures;
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-noncurrent-version-purge.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAiJY;UAyBK;EAEf;EAMA;EAEA;;UAsBe;EAEf;EAMA;EAEA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EA0EA,iBAAiB;EAgBjB;EAcA;EAYA;EAwCA,UAAU;EAGV;;UASe;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EA0CA;EAwDA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UAwRe;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KCl7BU,uBAAuB;KA+yNvB,gBAAgB;;;UCl1NX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAYf,sBAAsB;;UA8CP;EAKf;EAWA;;UAMe,6BAA6B,2BAA2B;EAEvE;EAEA,aAAa;;UAOL,iCAAiC,2BAA2B;EAEpE;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;UAuB7C;WAQN;WAQA;;KA0DC;WAGG;WAKA,+BAA+B;;WAY/B,+BAA+B;WAU/B;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UAmDC,sBAAsB;EAmBrC;EAmCA;EAgCA;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EAkBA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UCnxC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCmEf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UAsFA;EAeR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cC1WrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAySC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBAsYvB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UA0GX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCj6BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cAoCS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MA0DR;MA4BA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UC1rBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA2Ea;;;UChLC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UCvSN;EACf;EACA;IACE;IACA;IACA;;;;;UCTa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCVe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC9SO;KAGA;KAcA;KAsEA;UAmBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EAoBA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAUF;EAyBA;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cC6YE,gCAAgC;UACnC;UACA;UACA;mBAMS;mBAGA;mBAEA;mBAEA;mBAqBA;mBAOA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EA4IR,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAsKL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UA8VJ;UAiIA;UA8LA;EA+GR,iBACJ,sBACA,qBACC,QAAQ;UAiDG;UAoRA;UAgHA;UA+CN;UAyCM;UAyCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAwJL,OAAO,OAAO,sBAAsB,QAAQ;UAoIpC;;;;KCpvHJ;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;EAiBlB;;UAUe;EACf;EACA,aAAa;EACb,gBAAgB;EAehB,qBAAqB;EAYrB;;UAQe;EACf;EACA;EACA;;cA8MW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EA2BpC,mCAAmC;EAQnC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UA2HpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;UAoOI;EAkDR,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UC3oBY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCwDE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;EAyCb;;UAWe;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KCriBZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCKK;EAOf;IAAkB;;EAQlB;EASA;IAAW,OAAO;IAAoB,SAAS;;EAqB/C;;;;UCnGe;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAkEW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EAgD7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAuGxC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EA0FG,YAAY,mBAAmB,iBAAiB;EA0GhD,kBAAkB,oBAAoB;EAiDtC,cAAc,QAAQ;EA2EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAqChC,eACJ,oBACC,QAAQ;IAAQ;IAAa,cAAc;IAAM;;EAqD9C,iBAAiB,iBAAiB;EAiDlC,wBACJ,gBACA,UAAS,KAAK,6DACb;EAkCG,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAmD9D,sBAAsB,mBAAmB,iBAAiB;UAqClD;UA2BN;UAIM;UA4EA;UAwBA;UAQA;UA2DN;;;;UCrzCO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC7DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UCjHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UC1PK;EAEf;EASA;;cA0IW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UAkLW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EA6GR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UAwJA;UA2BN;EAgBF,iBAAiB,mBAAmB,6BAA6B;UA2EzD;UA6FA;UAgDN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cCj5CQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAmBlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EA6JR,YAAY,UAAU,kBAAkB;EA8BxC,YAAY,UAAU,kBAAkB;EA8BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KC3YA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCpbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EA6BF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,0BACzB,+BAA+B,sBAC9B,QAAQ,YAAY;UAiYf;UAoJA;iBAkGO;UAsED;UA2CN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cC/mClD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UCz1BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAiDG,wBAAwB,QAAQ,oBAAoB;EA2BpD,WACJ,oBACA,OAAO,kBACP;IAWE;MAAiB;MAAuB;;MAEzC;EAYG,YAAY,mBAAmB,yBAAyB;UAUhD;EAgBR,WAAW;UAcH;UAmBA;UA8BA;UAwBA;UAkBA;UAyBA;UA8EA;UA0CN;UAsBM;UAgCA;UAkBA;UAqBA;UAkCN;UAMA;;;;UC5mBO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EAqEF,mBAAmB;EA2BnB,wBAAwB,mBAAmB,OAAO,2BAA2B;EAgE7E;IAEE;IACA,YAAY;;EAEd;IAEE;IAEA,UAAU;IAEV,gBAAgB;;EAoBlB,gBAAgB;EAkBhB;EAyBA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAmQW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAuBA;UAWA;UAeA;UAOA;UAUA;UAkBA;UAcA;UAYA;UAQA;UASA;UAkCA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UA6DnE;UAkJA;UA2EA;UA2CA;UAiBA;UAyGA;iBA6GO;UAgMP;UAoFA;UAyDA;UA+FA;UA2BA;UAkCM;UAiGA;UAsGN;UA0IM;UA09BA;UAsoBA;UA6FA;UAuDA;UAgCA;UA+BA;UAuCN;UA+BM;UA4CA;UA+UN;UAwBA;UAWA;UAkDA;UAmBA;UAwBA;UAyCM;UA0CA;UAyLA;UAwhEN;UA+CA;UA4DA;UA6FA;UA0IA;UAgCA;UAOA;UAoCA;UAgFA;UA4BM;UA6BN;UAiCA;UAmBA;UAgEA;UAiEM;UAkeN"}
1
+ {"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/state.ts","../src/deployment/secret-redaction.ts","../src/provisioning/region-check.ts","../src/types/resource.ts","../src/types/config.ts","../src/utils/logger.ts","../src/utils/error-handler.ts","../src/utils/aws-clients.ts","../src/utils/aws-region-resolver.ts","../src/types/assembly.ts","../src/synthesis/stack-messages.ts","../src/synthesis/assembly-reader.ts","../src/cli/upload-cfn-template.ts","../src/synthesis/macro-expander.ts","../src/synthesis/synthesizer.ts","../src/types/deployment-events.ts","../src/provisioning/cloud-control-provider.ts","../src/provisioning/provider-registry.ts","../src/provisioning/final-snapshot.ts","../src/deployment/rollback-executor.ts","../src/types/rollback-journal.ts","../src/state/s3-noncurrent-version-purge.ts","../src/state/s3-state-backend.ts","../src/assets/asset-redirect.ts","../src/deployment/work-graph.ts","../src/assets/asset-publisher.ts","../src/state/lock-manager.ts","../src/analyzer/template-parser.ts","../src/analyzer/dag-builder.ts","../src/analyzer/diff-calculator.ts","../src/provisioning/providers/iam-role-provider.ts","../src/state/export-index-store.ts","../src/deployment/deploy-engine.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;KAiJY;UAyBK;EAEf;EAMA;EAYA;;UAsBe;EAUf;EAMA;EAQA;;UAMe;EAKf,SAAS;EAGT;EAMA;EAGA,WAAW,eAAe;EAG1B,SAAS;EAUT,UAAU;EAoBV,cAAc;EAqBd;EA0EA,iBAAiB;EAgBjB;EAcA;EAYA;EAwCA,UAAU;EAGV;;UASe;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EA0CA;EAwDA;;UAMe;EAEf;EAGA;EAGA;EAGA;;KAMU;UAKK;EAEf;EAGA,YAAY;EAGZ;EAGA,oBAAoB;EAGpB,oBAAoB;EAGpB,kBAAkB;EAWlB,mBAAmB;;UAUJ;EAEf;EACA;EACA;;UAwRe;EAEf;EAGA;EAGA;EAGA;EAYA;;;;KC18BU,uBAAuB;KA+yNvB,gBAAgB;;;UCl1NX;EASf;EAyCA;EAwBA;EA0BA;;;;UClHe;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;EAMA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EAOA;EACA;IACE;;;UAgCa;EAYf,sBAAsB;;UA8CP;EAKf;EAWA;;UAMe,6BAA6B,2BAA2B;EAEvE;EAEA,aAAa;;UAOL,iCAAiC,2BAA2B;EAEpE;EAEA;EAEA,aAAa;;KAwCH;WAGG;WAMA;;WAOA;WAaA;;KAOH,uBAAuB,2BAA2B;UAuB7C;WAQN;WAQA;;KA0DC;WAGG;WAKA,+BAA+B;;WAY/B,+BAA+B;WAU/B;WAaA;;UAcE;EAEf;EAGA;EAGA;EAGA;EAGA,YAAY;EASZ;;UAUe;EAEf;EAEA,aAAa;;UAiEE;EA2Df,cAAc;;UAmDC,sBAAsB;EAmBrC;EAmCA;EAgCA;;UAkBe,sBAAsB;EA0DrC;;UAqCe;EAWf,WAAW;IAGP;IACA;IACA,YAAY;IACZ,aAAa;;;UAQF;EAWf,oBAAoB,oBAAoB;EAwBxC,oBAAoB,oBAAoB;EAUxC;EAkBA;EAkBA;EAkBA,8BACE,mBACA,sBACA,YAAY,0BACX;EAmBH,OACE,mBACA,sBACA,YAAY,yBACZ,UAAU,gBACT,QAAQ;EAgBX,OACE,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAqBX,OACE,mBACA,oBACA,sBACA,aAAa,yBACb,UAAU,gBACT,eAAe;EASlB,cAAc,oBAAoB,sBAAsB,wBAAwB;EAwChF,kBACE,oBACA,mBACA,sBACA,aAAa,yBACb,UAAU,0BACT,QAAQ;EAgCX,sBAAsB,sBAAsB,aAAa;EAiCzD,+BACE,sBACA,YAAY,0BACX;EAiDH,wBAAwB;EAuDxB,6BACE,sBACA,YAAY,0BACX;EA4BH,QAAQ,OAAO,sBAAsB,QAAQ;;;;UCnxC9B;EAEf;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;EAGA;;UAMe;EAEf;EAGA;EAGA,cAAc;EAGd;EAGA;EAGA;;UAMe;EAEf;EAGA;;KAMU;UAKK;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;;;;cCmEf,yBAAyB;UAC5B;UACA;EAER,YAAY,QAAO,UAAmB;UAK9B;UAOA;UAsFA;EAeR,MAAM,oBAAoB;EAM1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;EAS1B,SAAS,OAAO;EAIhB,YAAY;EASZ,MAAM,iBAAiB;;cAQnB,oBAAoB;mBACP;EAEjB,YAAY,gBAAgB;UAKpB;EAMC,MAAM,oBAAoB;EAK1B,KAAK,oBAAoB;EAMzB,KAAK,oBAAoB;EAMzB,MAAM,oBAAoB;;iBAerB,aAAa;iBAUb,UAAU,QAAQ;;;cC1WrB,kBAAkB;WACb;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAYxC,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cAU1B,kBAAkB;EAC7B,YAAY,iBAAiB,QAAQ;;cAU1B,uBAAuB;EAClC,YAAY,iBAAiB,QAAQ;;cA6B1B,mBAAmB;EAC9B,YAAY,iBAAiB,QAAQ;;cA6B1B,0BAA0B;WACrB;WACA;WACA;EAEhB,YACE,iBACA,sBACA,mBACA,qBACA,QAAQ;;cAySC,wBAAwB;EACnC,YAAY,iBAAiB,QAAQ;;cAU1B,oBAAoB;EAC/B,YAAY,iBAAiB,QAAQ;;iBAsYvB,YAAY,iBAAiB,SAAS;iBAOtC,YAAY;UA0GX;EACf;EACA;;iBA2Bc,kBAAkB,cAAc,UAAS,2BAAgC;;;UCj6BxE;EACf;EACA;EACA;IACE;IACA;IACA;;;cAoCS;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,SAAQ;cAsBR;MA0DR;MA4BA,oBAAoB,KAAK;EAkB7B,WAAW,iBAAiB;EAY5B,eAAe;EAmBf,yBAAyB;EAezB,gBAAgB;MAaZ,MAAM;MAON,gBAAgB;MAOhB,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,mBAAmB;MAYf,UAAU;EAOd,gBAAgB;MAYZ,OAAO;EAOX,gBAAgB;MAYZ,OAAO;EAOX,qBAAqB;MAYjB,YAAY;EAOhB,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,wBAAwB;MAYpB,eAAe;EAOnB,2BAA2B;MAYvB,kBAAkB;EAOtB,gBAAgB;MAYZ,OAAO;EAOX,uBAAuB;MAYnB,cAAc;EAWlB,gBAAgB;MAYZ,OAAO;EAaX,2BAA2B;MAYvB,kBAAkB;EAOtB,uBAAuB;MAYnB,cAAc;EAOlB,2BAA2B;MAYvB,kBAAkB;EAOtB,oCAAoC;MAYhC,2BAA2B;EAO/B,qBAAqB;MAYjB,YAAY;EAOhB,wBAAwB;MAYpB,eAAe;EAOnB;;iBAkCc,cAAc,SAAS,kBAAkB;iBAUzC,cAAc,SAAS;iBAOvB;;;UC1rBC;EACf;EACA;IACE;IACA;IACA;;EAEF;EAaA;;iBAgEoB,oBACpB,oBACA,OAAM,6BACL;iBA2Ea;;;UChLC;EAEf;EAGA,YAAY,eAAe;EAG3B,UAAU;EAGV,UAAU;;UAMK;EAEf,MAAM;EAGN;EAMA;EAGA,aAAa;EAGb;EAGA,WAAW,eAAe;EAQ1B;;KAMU;UA+CK;EAEf;EAGA;EAGA,OAAO;;UAMQ;EAEf;EAGA;EAGA;GAGC;;UAMc;EACf;EACA;EACA;;UAMe;EACf,YAAY;;;;KClHF;UAKK;EACf,OAAO;EAGP;EAEA;;;;UC5Be;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAGA;EAGA;EAGA;EAeA;EAiBA,kBAAkB;EAYlB,WAAW;;cAMA;UACH;EAKR,aAAa,sBAAsB;EAmBnC,aAAa,qBAAqB,UAAU,mBAAmB;EA8C/D,SAAS,qBAAqB,UAAU,kBAAkB,oBAAoB;EAgB9E,YACE,qBACA,UAAU,kBACV,oBACC;UAOK;UAuBA;EA4HR,UAAU,WAAW;;;;UCvSN;EACf;EACA;IACE;IACA;IACA;;;;;UCTa;EACf;EASA;EACA,YAAY;EACZ,eAAe;EASf;;;;UCVe;EAEf;EAGA;EAGA;EAGA;EAGA,UAAU;EAaV;EAQA,0BAA0B;EAe1B;;UAMe;EAEf,UAAU;EAGV;EAGA,QAAQ;;cAWG;UACH;UACA;UACA;UACA;EAYF,WAAW,SAAS,mBAAmB,QAAQ;EAyJ/C,WAAW,SAAS,mBAAmB;EA0BvC,sBACJ,QAAQ,aACR,SAAS,kBACT;IAAa;IAA4B;MACxC;;;;KC9SO;KAGA;KAcA;KAsEA;UAmBK;EAEf;EAEA;EAKA;EAEA;;UAQe;EAEf;EACA,WAAW;EAMX;EAEA,UAAU;EAEV;EAEA;EAEA,SAAS;EAET,YAAY;EAEZ;EAEA;EAoBA;EAEA;EAEA;EAEA;IACE;IACA;IACA;IACA;IAqBA;;EAUF;EAyBA;EAEA,QAAQ;;UAQO;EACf,OAAO,OAAO,KAAK;WAOV;;;;cC6YE,gCAAgC;UACnC;UACA;UACA;mBAMS;mBAGA;mBAEA;mBAEA;mBAqBA;mBAOA;EAEjB;EAQM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;UAuHG;EA4IR,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,yBACpB,UAAU,gBACT,QAAQ;EAsKL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UA8VJ;UAiIA;UA8LA;EA+GR,iBACJ,sBACA,qBACC,QAAQ;UAiDG;UAoRA;UAgHA;UA+CN;UAyCM;UAyCA;UAi0BA;UAiCN;UAsBM;UA+BN;UAwCA;SAUD,wBAAwB;EA6EzB,iBACJ,oBACA,oBACA,sBACA,cAAc,0BACb,QAAQ;EAwJL,OAAO,OAAO,sBAAsB,QAAQ;UAoIpC;;;;KCpvHJ;UAWK;EACf,UAAU;EACV,eAAe;EACf;IAAkB;;EAiBlB;;UAUe;EACf;EACA,aAAa;EACb,gBAAgB;EAehB,qBAAqB;EAYrB;;UAQe;EACf;EACA;EACA;;cA8MW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;EAER;EAYA,sBAAsB,eAAe;EAiBrC,2BAA2B,SAAS;EA2BpC,mCAAmC;EAQnC,gCAAgC;EAUhC,iBAAiB;EAWjB,SAAS,sBAAsB,UAAU;EAQzC,WAAW;EAeX,eAAe,OAAO,sBAAsB;UA2HpC;EAmCR,YAAY,uBAAuB;EAOnC,mBAAmB;EAOnB,YAAY;EAmBZ,2BAA2B;EAO3B;EASA,gBAAgB;EAuBhB,sBAAsB,eAAe;EA4DrC,2BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;EA2BJ,oCACE,WAAW;IACT;IACA;IACA,YAAY;;EAwChB,0BACE,WAAW;IACT;IACA;IACA,YAAY;IACZ;;UAoOI;EAkDR,kBACE,WAAW;IACT;IACA;IACA,YAAY;OAEb;;;;UC3oBY;EACf,KAAK;EACL,UAAU;EACV,aAAa;;;;UCwDE;EAEf;EAEA;EAEA;EAQA;EAEA,gBAAgB;EAEhB;EAEA,aAAa;EAyCb;;UAWe;EAEf;EAEA;EAEA;EAEA;EAEA,gBAAgB;EAEhB;EAOA,sBAAsB;;;;KCriBZ;UAkBK;EAMf;EAEA;EACA,QAAQ;EAMR;EAEA;EAEA;EAEA,YAAY;EAQZ,mBAAmB;;UAIJ;EACf;EACA;EACA;EACA,UAAU;;;;UCMK;EAOf;IAAkB;;EAQlB;EASA;IAAW,OAAO;IAAoB,SAAS;;EAqB/C;;;;UCnGe;EACf;EAEA;;UAwBe;EACf;EACA;EACA;IACE;IACA;IACA;;;UAOa;EAgBf;;cAkEW;UACH;UACA;UACA;UACA;UACA;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,aAAY;EAyBxE;MAII;UAOI;UAQA;UAWA;UAmBM;UAiDA;EAIR,mBAAmB,UAAS,4BAAiC;EAgD7D,YAAY,mBAAmB,iBAAiB;EA0BhD,SACJ,mBACA,iBACC;IAAU,OAAO;IAAY;IAAc;;EAuGxC,UACJ,mBACA,gBACA,OAAO,YACP;IAAW;IAAuB;MACjC;EA0FG,YAAY,mBAAmB,iBAAiB;EA0GhD,kBAAkB,oBAAoB;EAiDtC,cAAc,QAAQ;EA6EtB,aAAa,aAAa,cAAc,uBAAmC;EAkB3E,aAAa,cAAc;EAwB3B,YAAY,oBAAoB;EAwChC,eACJ,oBACC,QAAQ;IAAQ;IAAa,cAAc;IAAM;;EA8D9C,iBAAiB,iBAAiB;EAiDlC,wBACJ,gBACA,UAAS,KAAK,6DACb;EAkCG,oBAAoB,mBAAmB,iBAAiB,QAAQ;EAYhE,6BACJ,mBACA,gBACA,SAAS,yBACR;EA2BG,mCACJ,mBACA,gBACA,WAAW,oBACV;EAiBG,0BAA0B,mBAAmB,iBAAiB;EAmD9D,sBAAsB,mBAAmB,iBAAiB;UAqClD;UA2BN;UAIM;UA4EA;UAwBA;UAQA;UA2DN;;;;UCp0CO;EAEf;EAEA;;UAYe;EAEf,SAAS;EAET,OAAO;EAEP,SAAS;EAET;EACA;EACA;;;;KC7DU;KAKA;UAKK;EACf;EACA,MAAM;EACN,cAAc;EACd,OAAO;EAEP;;UAMe;EACf;EACA;EACA;;cAoBW;UACH;UACA;EAER,QAAQ,MAAM;EAOR,QACJ,aAAa,sBACb,KAAK,MAAM,aAAa,gBACvB;EAqGH,WAAW,OAAO;;;;UCjHH;EAEf;EAGA;EAGA;EAGA;EAGA;EASA,WAAW;;cAUA;UACH;UACA;UACA;EAMR,iBACE,OAAO,WACP,sBACA;IACE;IACA;IACA;IACA;IACA,WAAW;;EA4FT,YAAY,MAAM,WAAW;EAwB7B,oBACJ,sBACA,UAAS,wBACR;EAwDH,UAAU;;;;UC1PK;EAEf;EASA;;cA0IW;UACH;UACA;UACA;mBACS;mBACA;mBACA;mBAEA;UACT;UACA;EAER,YAAY,UAAU,UAAU,QAAQ,oBAAoB,UAAU;UA2CxD;UAIA;UA4CN;UAUA;UAcA;UAeA;EAmBF,YACJ,mBACA,gBACA,gBACA,qBACC;UAkLW;EA2BR,YAAY,mBAAmB,6BAA6B,QAAQ;UAa5D;EA6GR,SAAS,mBAAmB,6BAA6B;EAkCzD,YAAY,mBAAmB,iBAAiB;UAuBxC;UAwJA;UA2BN;EAgBF,iBAAiB,mBAAmB,6BAA6B;UA2EzD;UA6FA;UAgDN;UAiDA;UASA;UAiBA;UAWM;UA4GA;UA6BN;UAgBA;UAkBA;UAiBA;EAiBF,qBACJ,mBACA,gBACA,gBACA,oBACA,qBACA,sBACC;;;;cCj5CQ;UACH;EAKR,eAAe,UAAU;EAOzB,YAAY,UAAU,wBAAwB,oBAAoB;EAmBlE,oBAAoB,UAAU,mBAAmB;EAwCjD,kBAAkB,iBAAiB;UAS3B;EA6JR,YAAY,UAAU,kBAAkB;EA8BxC,YAAY,UAAU,kBAAkB;EA8BxC,iBAAiB,oBAAoB,YAAY;EAwCjD,mBACE,UAAU,wBACV,uBACC,YAAY;EAef,eAAe,UAAU;EAoCzB,2BACE,UAAU,wBACV,YAAY,0BACX;;;;KC3YA,YAAY,SAAS;UAQT;EAMf;;cASW;UACH;UACA;UACA;EAER,YAAY,UAAS;EAWrB,WAAW,UAAU,yBAAyB;EA+G9C,mBAAmB,OAAO;UAmDlB;EA6CR,mBAAmB,OAAO,WAAW,oBAAoB;EAoBzD,iBAAiB,OAAO,WAAW,oBAAoB;EAoBvD,sBAAsB,OAAO,WAAW;EAOxC,oBAAoB,OAAO,WAAW;EAOtC,UAAU,OAAO,WAAW,mBAAmB;UAWvC;UA4DA;UAyBA;UASA;UAwBA;UAwBA;;;;KCpbE,sBAAsB,mBAAmB;KA8CzC,4BACV,sBACA,YAAY,4BACT;cAiCQ;UACH;UACA;UACA;EA6BF,cACJ,cAAc,YACd,iBAAiB,wBACjB,YAAY,oBACZ,yBAAyB,0BACzB,+BAA+B,sBAC9B,QAAQ,YAAY;UAgYf;UAoJA;iBAkGO;UAsED;UA2CN;UA4BM;0BAqFU;iBAOT;UA0CP;EA2ER,WAAW,SAAS,YAAY;IAC9B;IACA;IACA;IACA;IACA;;EAiCF,aAAa,SAAS,YAAY,iBAAiB,MAAM,aAAa;EAOtE,WAAW,SAAS,YAAY;EAOhC,sBAAsB,SAAS,YAAY,kBAAkB;;;;cC9mClD,2BAA2B;UAC9B;UACA;EACR,mBAAiB,YAAA;EAiBjB;EASM,OACJ,mBACA,sBACA,YAAY,0BACX,QAAQ;EA6JL,OACJ,mBACA,oBACA,sBACA,YAAY,yBACZ,oBAAoB,0BACnB,QAAQ;EAsNL,OACJ,mBACA,oBACA,sBACA,cAAc,yBACd,UAAU,gBACT,eAAe;UAmDJ;UAiDA;UA6CA;UAmDA;UAsCA;UAuCA;EAuDR,aACJ,oBACA,uBACA,wBACC;EA0DG,iBACJ,oBACA,oBACA,uBACA,aAAa,yBACb,UADa,0BAEZ,QAAQ;EA0KL,OAAO,OAAO,sBAAsB,QAAQ;;;;UCz1BnC;EAEf;EAEA;EAGA;;UAUe;EAEf;EAEA;EAEA;;cASW;UACH;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UAcA;UAEA;UACA;EAER,YACE,UAAU,UACV,gBACA,gBACA,gBACA,cAAc,gBACd,OAAM;UAWA;UAiCM;UAIA;EAuCR,OAAO,qBAAqB,QAAQ;EAuBpC,eACJ,mBACA,wBACA,SAAS,0BACR;EAiDG,wBAAwB,QAAQ,oBAAoB;EA2BpD,WACJ,oBACA,OAAO,kBACP;IAWE;MAAiB;MAAuB;;MAEzC;EAYG,YAAY,mBAAmB,yBAAyB;UAUhD;EAgBR,WAAW;UAcH;UAmBA;UA8BA;UAwBA;UAkBA;UAyBA;UA8EA;UA0CN;UAsBM;UAgCA;UAkBA;UAqBA;UAkCN;UAMA;;;;UCzmBO;EAEf;EAEA;EAEA;EAEA,aAAa;EAEb;EAOA;EAWA;EASA;EAOA,0BAA0B;EAM1B,wBAAwB;EAaxB;EAaA,gBAAgB;EAgBhB;IACE;IACA;IACA;;EAqEF,mBAAmB;EA2BnB,wBAAwB,mBAAmB,OAAO,2BAA2B;EAgE7E;IAEE;IACA,YAAY;;EAEd;IAEE;IAEA,UAAU;IAEV,gBAAgB;;EAoBlB,gBAAgB;EAkBhB;EAyBA;EAWA;EAWA;EAaA;EAYA,uBAAuB;;UAkER;EAEf;EAEA;EAEA;EAEA;EAwBA;EAQA;EAEA;EAEA;EAMA,UAAU;EAcV;;cAiSW;UACH;UACA;UACA;UAOA;UAaA;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UAUA;UAMA;UAQA;UAiBA;UAuBA;UAWA;UAeA;UAOA;UAUA;UAkBA;UAcA;UAYA;UAQA;UASA;UAkCA;UAOA;EAER,YACE,cAAc,gBACd,aAAa,aACb,YAAY,YACZ,gBAAgB,gBAChB,kBAAkB,kBAClB,SAAS,iCACT,qBACA,mBAAmB;EA+Bf,OAAO,mBAAmB,UAAU,yBAAyB,QAAQ;UA6DnE;UAkJA;UA2EA;UAiDA;UAiBA;UAyGA;iBA6GO;UAgMP;UAoFA;UAyDA;UAoIA;UAiDA;UAmCA;UAwBA;UA2BA;UAkCM;UAiGA;UAsGN;UA0IM;UA2+BA;UA0oBA;UA8FA;UAuDA;UAgCA;UA+BA;UAuCN;UAoCM;UA4CA;UA+UN;UAwBA;UAWA;UAkDA;UAmBA;UAwBA;UAyCM;UA0CA;UAyLA;UAwhEN;UA+CA;UA4DA;UA6FA;UA0IA;UAgCA;UAOA;UAoCA;UAgFA;UA4BM;UA6BN;UAiCA;UAmBA;UAgEA;UAiEM;UAkeN"}
package/dist/index.js CHANGED
@@ -1,4 +1,4 @@
1
- import { $n as S3StateBackend, Ci as AwsClients, Di as AssetError, Ei as setAwsClients, Ji as formatError, Ki as StateError, Li as LockError, Nn as DagBuilder, Oi as CdkdError, Pn as TemplateParser, Qn as LockManager, Si as resolveBucketRegion, Ti as resetAwsClients, Vi as ProvisioningError, Xi as normalizeAwsError, Xr as Synthesizer, Yi as isCdkdError, gr as AssetPublisher, gt as CloudControlProvider, ji as DependencyError, ki as ConfigError, ot as ProviderRegistry, qi as SynthesisError, r as DeployEngine, rt as IAMRoleProvider, sn as DiffCalculator, wi as getAwsClients, xi as clearBucketRegionCache, yi as AssemblyReader } from "./deploy-engine-D7mwWwGs.js";
1
+ import { $n as LockManager, Ai as CdkdError, Ci as clearBucketRegionCache, Di as resetAwsClients, Ei as getAwsClients, Fn as TemplateParser, Ji as StateError, Ni as DependencyError, Oi as setAwsClients, Pn as DagBuilder, Qi as normalizeAwsError, Ti as AwsClients, Ui as ProvisioningError, Xi as formatError, Yi as SynthesisError, Zi as isCdkdError, Zr as Synthesizer, _r as AssetPublisher, er as S3StateBackend, gt as CloudControlProvider, ji as ConfigError, ki as AssetError, ot as ProviderRegistry, r as DeployEngine, rt as IAMRoleProvider, sn as DiffCalculator, wi as resolveBucketRegion, xi as AssemblyReader, zi as LockError } from "./deploy-engine-KnCjibgq.js";
2
2
  import { a as setLogger, n as getLogger, t as ConsoleLogger } from "./logger-C17H06QA.js";
3
3
 
4
4
  export { AssemblyReader, AssetError, AssetPublisher, AwsClients, CdkdError, CloudControlProvider, ConfigError, ConsoleLogger, DagBuilder, DependencyError, DeployEngine, DiffCalculator, IAMRoleProvider, LockError, LockManager, ProviderRegistry, ProvisioningError, S3StateBackend, StateError, SynthesisError, Synthesizer, TemplateParser, clearBucketRegionCache, formatError, getAwsClients, getLogger, isCdkdError, normalizeAwsError, resetAwsClients, resolveBucketRegion, setAwsClients, setLogger };
@@ -1,8 +1,8 @@
1
- import { $ as secretBearing, $i as isRetryableTransientError, $n as S3StateBackend, $r as getLegacyStateBucketName, $t as s3BucketArn, A as extractDeploymentEventError, Ai as CrossAccountSecretRefusalError, An as findSilentDropProperties, Ar as readBootstrapMarkerBody, At as isImpossibleEmptyStoredAttribute, B as toCfnInteger, Bi as PartialFailureError, Bn as createSecretMasker, Br as formatDockerLoginError, Bt as coerceCfnBoolean, C as buildFinalSnapshotIdentifier, Ci as AwsClients, Cn as refuseMalformedOutputs, Cr as AssetModeResolver, Ct as isTerminationProtectionPropagationError, D as refusesFinalSnapshot, Dn as repairMalformedResourcePropertiesForReadOnly, Dr as getBootstrapMarkerKey, Dt as cfnRefValueFromPhysicalId, E as isFinalSnapshotError, Ei as setAwsClients, En as repairMalformedOutputsForReadOnly, Er as ensureAssetStorage, Et as carriesFetchableDynamicReference, F as isStatefulRecreateTargetSync, Fi as LocalInvokeBuildError$1, Fn as STATE_SOURCED_BASELINE_RULES, Fr as buildDockerImage, Ft as isSettledInstanceState, G as gray, Gi as StackTerminationProtectionError, Gn as markSameGenerationBag, Gr as runDockerStreaming, Gt as readConfigString, H as formatResourceLine, Hi as ResourceTimeoutError, Hn as errorCauseChain, Hr as partitionSensitiveEnv, Ht as configBooleanRefusal, I as renderStatefulReason, Ii as LocalStartServiceError, In as STATE_SOURCED_CROSS_GENERATION_RULES, Ir as describeDockerCapturedOutput, It as WAFv2WebACLProvider, J as yellow, Jn as recordMaskOnlyValue, Jr as AssetManifestLoader, Jt as requireConfigObject, K as green, Kn as maskSecretsInError, Kr as escapeRegExp, Kt as replayWarn, L as WARM_THROUGHPUT_MEMBERS, Ln as STATE_SOURCED_READBACK_RULES, Lr as describeDockerExecFailure, Lt as normalizeAwsTagsToCfn, M as planOrphanAdoption, Mi as DeployCancelledError, Mn as withRetry, Mr as validateContainerRepoName, Mt as isUnboundTemplateParameter, N as MULTI_REGION_RECREATE_BLOCKED_TYPES, Ni as DynamicReferenceRegionAmbiguousError, Nn as DagBuilder, Nr as buildDenyExternalAccessPolicy, Nt as parameterTypeMayLoseSecretIdentity, O as unsupportedFinalSnapshotError, Oi as CdkdError, On as repairMalformedResourcesForReadOnly, Or as isCrossRegionRedirect, Ot as coerceParameterTypedValue, P as isStatefulRecreateTargetForReplace, Pi as IntrinsicResolutionRefusalError, Pn as TemplateParser, Pr as describeAwsFailure, Pt as refStateLookupFromResource, Q as isExportAliasCollision, Qi as isMarkedNonRetryable, Qn as LockManager, Qr as getDefaultStateBucketName, Qt as withSharedDrainBudget, R as coerceWarmThroughput$1, Ri as MalformedProducerRecordRefusalError, Rn as TEMPLATE_SOURCED_RULES, Rr as describeDockerFailure, Rt as resolveExplicitPhysicalId, S as PRE_DELETE_SNAPSHOT_TYPES, Si as resolveBucketRegion, Sn as refuseMalformedNestedChildOutputs, Sr as rewriteTemplateAssetReferences, St as disableInstanceApiTermination, T as createPreDeleteFinalSnapshot, Ti as resetAwsClients, Tn as refuseMalformedState, Tr as assertAssetBucketRegion, Tt as carriesDynamicReference, U as bold, Ui as ResourceUpdateNotSupportedError, Un as identityKeyFor, Ur as redactDockerArgvValues, Ut as configIntegerRefusal, V as toFiniteNumber, Vi as ProvisioningError, Vn as dynamicReferenceTokens, Vr as getDockerCmd, Vt as coerceCfnInteger, W as cyan, Wi as StackHasActiveImportsError, Wn as isSingleDynamicReferenceToken, Wr as runDockerForeground, Wt as configStringRefusal, X as collectPublishedOutputNames, Xi as normalizeAwsError, Xn as redactSecretsForState, Xr as Synthesizer, Xt as classifyReplaySecretRegion, Y as collectDeclaredOutputNames, Yn as recoverMaskedOutput, Yr as getDockerImageBySourceHash, Yt as requireConfigString, Z as exportAliasCollisionScrubWarning, Zi as withErrorHandling, Zn as scrubResourceRecord, Zr as synthesisStatusMessage, Zt as producerRegionsFromState, _ as isSecretBearingReferenceString, _i as canonicalizeRegion, _n as malformedRenderedContainersWarning, _r as stringifyValue, _t as isWaitAbandonedError, a as DeploymentEventsStore, ai as resolveStateBucketWithDefaultAndSource, an as applyCallerIdentityCredentials, ar as shellQuote, at as clearOnUpdateRemoval, b as bindingSkippedOutputs, bi as processStackMessages, bn as malformedStateRefusalMessage, br as createAssetRedirectResolver, bt as deleteIndeterminateGuards, c as replayFailedOperations, ci as warnDeprecatedNoPrefixCliFlag, cn as INTRINSIC_KEYS, cr as exportNamesCarriedFrom, ct as createMaskedRetryLogger, d as updatePartialReason, di as MIGRATE_TMP_PREFIX, dn as hasReadableResources, dr as importableOutputs, dt as beginCommandInterruptScope, ea as isThrottlingError, ei as resolveApp, en as s3BucketDomainName, er as rebuildClientForBucketRegion, et as secretBearingStateKeyWarning, f as withResourceDeadline, fi as findLargeInlineResources, fn as malformedExportNamesWarning, fr as isReadableBag, ft as endCommandInterruptScope, g as bagHoldsSecretExpression, gi as PARTITION_TABLE, gn as malformedOutputsWarning, gr as AssetPublisher, gt as CloudControlProvider, h as computeImplicitDeleteEdges, hi as expectedOwnerParam, hn as malformedOutputsRefusalMessage, hr as shouldRetainResource, ht as startInterruptWatch, i as DeploymentEventsReader, ia as retryClassificationText, ii as resolveStateBucketWithDefault, in as applyRoleArnIfSet, ir as formatLockExpiry, it as collectInlinePolicyNamesManagedBySiblings, j as makeSiblingClaimReader, jn as describeTypeWithThrottleRetry, jr as validateAssetBucketName, jt as isNamelessDynamicReferenceError, k as makeCanonicalizePropertiesFn, kn as findActionableSilentDrops, kr as parseBootstrapMarker, kt as getAccountInfo, l as replayRollback, li as CFN_TEMPLATE_BODY_LIMIT, ln as STATE_RESOURCES_MALFORMED, lr as hasReadableExportSet, lt as maskDeep, m as IMPLICIT_DELETE_DEPENDENCIES, mi as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, mn as malformedLocalOutputsWarning, mr as orphansCarriedFrom, mt as isInterruptedWaitError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, na as markNonRetryable, ni as resolveCaptureObservedState, nn as s3BucketRegionalDomainName, nr as buildLockContentionMessage, nt as getCurrentResourceSecrets, o as planFailedOps, oi as resolveUseCdkBootstrapAssets, on as callerEnvCredentials, or as CUSTOM_RESOURCE_RESPONSE_PREFIX, ot as ProviderRegistry, p as maskingRetryLogger, pi as uploadCfnTemplate, pn as malformedExportSourceWarning, pr as orphansAfterRollback, pt as interruptWatchListenerCount, q as red, qn as maskSecretsInText, qr as stripControlChars, qt as requireConfigArray, r as DeployEngine, ra as markRedactedCause, ri as resolveSkipPrefix, rn as s3BucketWebsiteUrl, rr as forceQuitRecoveryClause, rt as IAMRoleProvider, s as planRollback, si as stateBucketExistenceConfirmed, sn as DiffCalculator, sr as DEFAULT_STATE_PREFIX, st as wouldReturnToSdkProvider, t as DEFAULT_RESOURCE_TIMEOUT_MS, ta as isTransientServerError, ti as resolveAutoAssetStorage, tn as s3BucketDualStackDomainName, tr as buildForceUnlockCommand, tt as secretSafeKeyDisplay, u as updatePartialMessage, ui as CFN_TEMPLATE_URL_LIMIT, un as hasReadableOutputs, ur as importableOutputKeys, ut as maskerOrIdentity, v as keptWholeReasonText, vi as derivePartitionAndUrlSuffix, vn as malformedResourcePropertiesWarning, vr as WorkGraph, vt as slowCcOperationTimeoutMs, w as ccRoutedFinalSnapshotError, wi as getAwsClients, wn as refuseMalformedOutputsForDestroy, wr as BOOTSTRAP_MARKER_PREFIX, wt as IntrinsicFunctionResolver, x as ATOMIC_FINAL_SNAPSHOT_TYPES, xn as producerRecordKey, xr as loadPublishableAssetManifest, xt as deleteSkipReason, y as mergeNoChangeOutputs, yi as AssemblyReader, yn as malformedResourcesWarning, yr as buildAssetRedirectMap, yt as UNSPECIFIED_SKIP_REASON, z as isWarmThroughputDecrease, zi as NestedStackChildDirectDestroyError, zn as carriesSecretMask, zr as dockerSpawnEnvWithSensitive, zt as assertRegionMatch } from "./deploy-engine-D7mwWwGs.js";
1
+ import { $ as secretBearing, $i as withErrorHandling, $n as LockManager, $r as getDefaultStateBucketName, $t as s3BucketArn, A as extractDeploymentEventError, Ai as CdkdError, An as findActionableSilentDrops, Ar as parseBootstrapMarker, At as isImpossibleEmptyStoredAttribute, B as toCfnInteger, Bi as MalformedProducerRecordRefusalError, Bn as carriesSecretMask, Br as dockerSpawnEnvWithSensitive, Bt as coerceCfnBoolean, C as buildFinalSnapshotIdentifier, Cn as refuseMalformedOutputs, Cr as rewriteTemplateAssetReferences, Ct as isTerminationProtectionPropagationError, D as refusesFinalSnapshot, Di as resetAwsClients, Dn as repairMalformedOutputsForReadOnly, Dr as ensureAssetStorage, Dt as cfnRefValueFromPhysicalId, E as isFinalSnapshotError, Ei as getAwsClients, En as refuseMalformedState, Er as assertAssetBucketRegion, Et as carriesFetchableDynamicReference, F as isStatefulRecreateTargetSync, Fi as DynamicReferenceRegionAmbiguousError, Fn as TemplateParser, Fr as describeAwsFailure, Ft as isSettledInstanceState, G as gray, Gi as ResourceUpdateNotSupportedError, Gn as isSingleDynamicReferenceToken, Gr as runDockerForeground, Gt as readConfigString, H as formatResourceLine, Hi as PartialFailureError, Hn as dynamicReferenceTokens, Hr as getDockerCmd, Ht as configBooleanRefusal, I as renderStatefulReason, Ii as IntrinsicResolutionRefusalError, In as STATE_SOURCED_BASELINE_RULES, Ir as buildDockerImage, It as WAFv2WebACLProvider, J as yellow, Jn as maskSecretsInText, Jr as stripControlChars, Jt as requireConfigObject, K as green, Ki as StackHasActiveImportsError, Kn as markSameGenerationBag, Kr as runDockerStreaming, Kt as replayWarn, L as WARM_THROUGHPUT_MEMBERS, Li as LocalInvokeBuildError$1, Ln as STATE_SOURCED_CROSS_GENERATION_RULES, Lr as describeDockerCapturedOutput, Lt as normalizeAwsTagsToCfn, M as planOrphanAdoption, Mi as CrossAccountSecretRefusalError, Mn as describeTypeWithThrottleRetry, Mr as validateAssetBucketName, Mt as isUnboundTemplateParameter, N as MULTI_REGION_RECREATE_BLOCKED_TYPES, Nn as withRetry, Nr as validateContainerRepoName, Nt as parameterTypeMayLoseSecretIdentity, O as unsupportedFinalSnapshotError, Oi as setAwsClients, On as repairMalformedResourcePropertiesForReadOnly, Or as getBootstrapMarkerKey, Ot as coerceParameterTypedValue, P as isStatefulRecreateTargetForReplace, Pi as DeployCancelledError, Pn as DagBuilder, Pr as buildDenyExternalAccessPolicy, Pt as refStateLookupFromResource, Q as isExportAliasCollision, Qi as normalizeAwsError, Qn as scrubResourceRecord, Qr as synthesisStatusMessage, Qt as withSharedDrainBudget, R as coerceWarmThroughput$1, Ri as LocalStartServiceError, Rn as STATE_SOURCED_READBACK_RULES, Rr as describeDockerExecFailure, Rt as resolveExplicitPhysicalId, S as PRE_DELETE_SNAPSHOT_TYPES, Si as processStackMessages, Sn as refuseMalformedNestedChildOutputs, Sr as loadPublishableAssetManifest, St as disableInstanceApiTermination, T as createPreDeleteFinalSnapshot, Ti as AwsClients, Tn as refuseMalformedResourcesForDestroy, Tr as BOOTSTRAP_MARKER_PREFIX, Tt as carriesDynamicReference, U as bold, Ui as ProvisioningError, Un as errorCauseChain, Ur as partitionSensitiveEnv, Ut as configIntegerRefusal, V as toFiniteNumber, Vi as NestedStackChildDirectDestroyError, Vn as createSecretMasker, Vr as formatDockerLoginError, Vt as coerceCfnInteger, W as cyan, Wi as ResourceTimeoutError, Wn as identityKeyFor, Wr as redactDockerArgvValues, Wt as configStringRefusal, X as collectPublishedOutputNames, Xn as recoverMaskedOutput, Xr as getDockerImageBySourceHash, Xt as classifyReplaySecretRegion, Y as collectDeclaredOutputNames, Yn as recordMaskOnlyValue, Yr as AssetManifestLoader, Yt as requireConfigString, Z as exportAliasCollisionScrubWarning, Zn as redactSecretsForState, Zr as Synthesizer, Zt as producerRegionsFromState, _ as isSecretBearingReferenceString, _i as expectedOwnerParam, _n as malformedRenderedContainersWarning, _r as AssetPublisher, _t as isWaitAbandonedError, a as DeploymentEventsStore, aa as markRedactedCause, ai as resolveStateBucketWithDefault, an as applyCallerIdentityCredentials, ar as formatLockExpiry, at as clearOnUpdateRemoval, b as bindingSkippedOutputs, bi as derivePartitionAndUrlSuffix, bn as malformedStateRefusalMessage, br as buildAssetRedirectMap, bt as deleteIndeterminateGuards, c as replayFailedOperations, ci as stateBucketExistenceConfirmed, cn as INTRINSIC_KEYS, cr as DEFAULT_STATE_PREFIX, ct as createMaskedRetryLogger, d as updatePartialReason, di as CFN_TEMPLATE_URL_LIMIT, dn as hasReadableResources, dr as importableOutputKeys, dt as beginCommandInterruptScope, ea as isMarkedNonRetryable, ei as getLegacyStateBucketName, en as s3BucketDomainName, er as S3StateBackend, et as secretBearingStateKeyWarning, f as withResourceDeadline, fi as MIGRATE_TMP_PREFIX, fn as malformedExportNamesWarning, fr as importableOutputs, ft as endCommandInterruptScope, g as bagHoldsSecretExpression, gi as decodeListingKey, gn as malformedOutputsWarning, gr as shouldRetainResource, gt as CloudControlProvider, h as computeImplicitDeleteEdges, hi as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, hn as malformedOutputsRefusalMessage, hr as orphansCarriedFrom, ht as startInterruptWatch, i as DeploymentEventsReader, ia as markNonRetryable, ii as resolveSkipPrefix, in as applyRoleArnIfSet, ir as forceQuitRecoveryClause, it as collectInlinePolicyNamesManagedBySiblings, j as makeSiblingClaimReader, jn as findSilentDropProperties, jr as readBootstrapMarkerBody, jt as isNamelessDynamicReferenceError, k as makeCanonicalizePropertiesFn, kn as repairMalformedResourcesForReadOnly, kr as isCrossRegionRedirect, kt as getAccountInfo, l as replayRollback, li as warnDeprecatedNoPrefixCliFlag, ln as STATE_RESOURCES_MALFORMED, lr as exportNamesCarriedFrom, lt as maskDeep, m as IMPLICIT_DELETE_DEPENDENCIES, mi as uploadCfnTemplate, mn as malformedLocalOutputsWarning, mr as orphansAfterRollback, mt as isInterruptedWaitError, n as DEFAULT_RESOURCE_WARN_AFTER_MS, na as isThrottlingError, ni as resolveAutoAssetStorage, nn as s3BucketRegionalDomainName, nr as buildForceUnlockCommand, nt as getCurrentResourceSecrets, o as planFailedOps, oa as retryClassificationText, oi as resolveStateBucketWithDefaultAndSource, on as callerEnvCredentials, or as shellQuote, ot as ProviderRegistry, p as maskingRetryLogger, pi as findLargeInlineResources, pn as malformedExportSourceWarning, pr as isReadableBag, pt as interruptWatchListenerCount, q as red, qi as StackTerminationProtectionError, qn as maskSecretsInError, qr as escapeRegExp, qt as requireConfigArray, r as DeployEngine, ra as isTransientServerError, ri as resolveCaptureObservedState, rn as s3BucketWebsiteUrl, rr as buildLockContentionMessage, rt as IAMRoleProvider, s as planRollback, si as resolveUseCdkBootstrapAssets, sn as DiffCalculator, sr as CUSTOM_RESOURCE_RESPONSE_PREFIX, st as wouldReturnToSdkProvider, t as DEFAULT_RESOURCE_TIMEOUT_MS, ta as isRetryableTransientError, ti as resolveApp, tn as s3BucketDualStackDomainName, tr as rebuildClientForBucketRegion, tt as secretSafeKeyDisplay, u as updatePartialMessage, ui as CFN_TEMPLATE_BODY_LIMIT, un as hasReadableOutputs, ur as hasReadableExportSet, ut as maskerOrIdentity, v as keptWholeReasonText, vi as PARTITION_TABLE, vn as malformedResourcePropertiesWarning, vr as stringifyValue, vt as slowCcOperationTimeoutMs, w as ccRoutedFinalSnapshotError, wi as resolveBucketRegion, wn as refuseMalformedOutputsForDestroy, wr as AssetModeResolver, wt as IntrinsicFunctionResolver, x as ATOMIC_FINAL_SNAPSHOT_TYPES, xi as AssemblyReader, xn as producerRecordKey, xr as createAssetRedirectResolver, xt as deleteSkipReason, y as mergeNoChangeOutputs, yi as canonicalizeRegion, yn as malformedResourcesWarning, yr as WorkGraph, yt as UNSPECIFIED_SKIP_REASON, z as isWarmThroughputDecrease, zn as TEMPLATE_SOURCED_RULES, zr as describeDockerFailure, zt as assertRegionMatch } from "./deploy-engine-KnCjibgq.js";
2
2
  import { C as displaySafe, S as displayIdent, _ as withSkipPrefix, b as STACK_REF_MAX_CODE_POINTS, c as PATTERN_B_NAME_OPTIONS, f as explicitNamePropertyFor, h as getCurrentStackName, i as reserveStdoutForPayload, l as PATTERN_B_NAME_PROPERTIES, m as generateResourceNameWithFallback, n as getLogger, o as runStackBuffered, p as generateResourceName, s as getLiveRenderer, u as PATTERN_B_RESOURCE_TYPES, v as withStackName, w as truncateCodePoints, x as UNRENDERABLE } from "./logger-C17H06QA.js";
3
3
  import { n as awsClientDefaults } from "./aws-client-defaults-BoIxyCir.js";
4
- import { t as getCdkdVersion } from "./version-BOnyvRN8.js";
5
- import { a as renderDisableCommand, i as protectedReplacementAdvice, r as UNNAMEABLE_ID_CLAUSE, t as ASGProvider } from "./asg-provider-ac412LEP.js";
4
+ import { t as getCdkdVersion } from "./version-CGcB3KHZ.js";
5
+ import { a as renderDisableCommand, i as protectedReplacementAdvice, r as UNNAMEABLE_ID_CLAUSE, t as ASGProvider } from "./asg-provider-B8GAVns4.js";
6
6
  import { AsyncLocalStorage } from "node:async_hooks";
7
7
  import { createHash, randomBytes, randomUUID } from "node:crypto";
8
8
  import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -1583,12 +1583,16 @@ async function emptyAndDeleteBucket(s3Client, bucket, accountId, label, logger,
1583
1583
  let versionIdMarker;
1584
1584
  do {
1585
1585
  const page = await s3Client.send(new ListObjectVersionsCommand({
1586
+ EncodingType: "url",
1586
1587
  Bucket: bucket,
1587
1588
  ExpectedBucketOwner: accountId,
1588
1589
  ...keyMarker && { KeyMarker: keyMarker },
1589
1590
  ...versionIdMarker && { VersionIdMarker: versionIdMarker }
1590
1591
  }));
1591
- const entries = [...page.Versions ?? [], ...page.DeleteMarkers ?? []].filter((v) => v.Key).map((v) => ({
1592
+ const entries = [...page.Versions ?? [], ...page.DeleteMarkers ?? []].map((v) => ({
1593
+ ...v,
1594
+ Key: decodeListingKey(v.Key)
1595
+ })).filter((v) => v.Key).map((v) => ({
1592
1596
  Key: v.Key,
1593
1597
  ...v.VersionId && { VersionId: v.VersionId }
1594
1598
  }));
@@ -1603,7 +1607,7 @@ async function emptyAndDeleteBucket(s3Client, bucket, accountId, label, logger,
1603
1607
  }))).Errors ?? []).map((e) => `${e.Key ?? "<unknown>"} (${e.Code ?? "Error"}: ${e.Message ?? ""})`);
1604
1608
  if (failures.length > 0) throw new CdkdError(`Failed to delete ${failures.length} object(s) from ${label.toLowerCase()} '${bucket}': ${failures.join("; ")}`, "BUCKET_EMPTY_FAILED");
1605
1609
  }
1606
- keyMarker = page.IsTruncated ? page.NextKeyMarker : void 0;
1610
+ keyMarker = page.IsTruncated ? decodeListingKey(page.NextKeyMarker) : void 0;
1607
1611
  versionIdMarker = page.IsTruncated ? page.NextVersionIdMarker : void 0;
1608
1612
  } while (keyMarker || versionIdMarker);
1609
1613
  await s3Client.send(new DeleteBucketCommand({
@@ -3191,6 +3195,26 @@ async function probeAndRevalidateStateful(input) {
3191
3195
  //#endregion
3192
3196
  //#region src/cli/commands/recreate-downstream-consumers.ts
3193
3197
  /**
3198
+ * Does this persisted producer name carry something that cannot be compared to
3199
+ * a live stack name?
3200
+ *
3201
+ * TWO spellings, not one. A redaction usually writes the unresolved expression
3202
+ * back, so `{{resolve:` is the common case — tested by CONTAINMENT rather than
3203
+ * by shape, because the name can EMBED one (`prod-{{resolve:...}}`), which is
3204
+ * exactly the `Fn::Sub` case that made it secret-bearing.
3205
+ *
3206
+ * But the MASK-ONLY needle class has no expression behind it: a Lambda-backed
3207
+ * custom resource declaring its response `Data` sensitive records
3208
+ * `plaintext -> SECRET_MASK`, so `redactSecretsForState`'s whole-value arm
3209
+ * writes `***`. An earlier version of this predicate tested `{{resolve:`
3210
+ * alone, and a `***` name then failed BOTH the literal match and this test —
3211
+ * reinstating the silent drop the reporting arm exists to remove, in the one
3212
+ * shape where the operator has least chance of noticing.
3213
+ */
3214
+ function producerNameIsUnresolved(sourceStack) {
3215
+ return sourceStack.includes("{{resolve:") || sourceStack.includes("***");
3216
+ }
3217
+ /**
3194
3218
  * Walk every stack in the cdkd state bucket and find consumers whose
3195
3219
  * `imports[]` reference the producer `(producerStack, producerRegion)`.
3196
3220
  *
@@ -3227,8 +3251,18 @@ async function findDownstreamConsumers(input) {
3227
3251
  });
3228
3252
  }
3229
3253
  const outputReads = got.state.outputReads;
3230
- if (outputReads && outputReads.length > 0) {
3231
- for (const entry of outputReads) if (entry.sourceStack === input.producerStack && entry.sourceRegion === input.producerRegion) out.push({
3254
+ if (outputReads && outputReads.length > 0) for (const entry of outputReads) {
3255
+ if (entry.sourceRegion === input.producerRegion && producerNameIsUnresolved(entry.sourceStack)) {
3256
+ out.push({
3257
+ consumerStack: ref.stackName,
3258
+ consumerRegion: region,
3259
+ exportName: entry.outputName,
3260
+ intrinsic: "GetStackOutput",
3261
+ producerUnresolvable: true
3262
+ });
3263
+ continue;
3264
+ }
3265
+ if (entry.sourceStack === input.producerStack && entry.sourceRegion === input.producerRegion) out.push({
3232
3266
  consumerStack: ref.stackName,
3233
3267
  consumerRegion: region,
3234
3268
  exportName: entry.outputName,
@@ -3257,7 +3291,13 @@ async function findDownstreamConsumers(input) {
3257
3291
  function renderDownstreamConsumers(producerStack, consumers) {
3258
3292
  if (consumers.length === 0) return null;
3259
3293
  const lines = [` Downstream consumers of ${producerStack}'s outputs (will need re-deploy after this run):`];
3260
- for (const c of consumers) lines.push(` - ${c.consumerStack} (${c.consumerRegion}) reads ${c.exportName} via Fn::${c.intrinsic}`);
3294
+ for (const c of consumers) {
3295
+ if (c.producerUnresolvable === true) {
3296
+ lines.push(` - ${c.consumerStack} (${c.consumerRegion}) reads ${c.exportName} via Fn::${c.intrinsic} from a producer cdkd CANNOT NAME: that stack name carried a secret, so it is stored redacted and cannot be compared to a live stack name. It may or may not be this stack.`);
3297
+ continue;
3298
+ }
3299
+ lines.push(` - ${c.consumerStack} (${c.consumerRegion}) reads ${c.exportName} via Fn::${c.intrinsic}`);
3300
+ }
3261
3301
  return lines.join("\n");
3262
3302
  }
3263
3303
 
@@ -11017,20 +11057,27 @@ var S3BucketProvider = class S3BucketProvider {
11017
11057
  let versionIdMarker;
11018
11058
  while (true) {
11019
11059
  const listResp = await this.s3Client.send(new ListObjectVersionsCommand({
11060
+ EncodingType: "url",
11020
11061
  Bucket: bucketName,
11021
11062
  MaxKeys: 1e3,
11022
11063
  ...keyMarker && { KeyMarker: keyMarker },
11023
11064
  ...versionIdMarker && { VersionIdMarker: versionIdMarker }
11024
11065
  }));
11025
11066
  const objects = [];
11026
- for (const v of listResp.Versions || []) if (v.Key && v.VersionId) objects.push({
11027
- Key: v.Key,
11028
- VersionId: v.VersionId
11029
- });
11030
- for (const d of listResp.DeleteMarkers || []) if (d.Key && d.VersionId) objects.push({
11031
- Key: d.Key,
11032
- VersionId: d.VersionId
11033
- });
11067
+ for (const v of listResp.Versions || []) {
11068
+ const vKey = decodeListingKey(v.Key);
11069
+ if (vKey && v.VersionId) objects.push({
11070
+ Key: vKey,
11071
+ VersionId: v.VersionId
11072
+ });
11073
+ }
11074
+ for (const d of listResp.DeleteMarkers || []) {
11075
+ const dKey = decodeListingKey(d.Key);
11076
+ if (dKey && d.VersionId) objects.push({
11077
+ Key: dKey,
11078
+ VersionId: d.VersionId
11079
+ });
11080
+ }
11034
11081
  if (objects.length > 0) {
11035
11082
  await this.s3Client.send(new DeleteObjectsCommand({
11036
11083
  Bucket: bucketName,
@@ -11042,7 +11089,7 @@ var S3BucketProvider = class S3BucketProvider {
11042
11089
  this.logger.debug(`Emptied ${objects.length} objects from ${bucketName}`);
11043
11090
  }
11044
11091
  if (!listResp.IsTruncated) break;
11045
- keyMarker = listResp.NextKeyMarker;
11092
+ keyMarker = decodeListingKey(listResp.NextKeyMarker);
11046
11093
  versionIdMarker = listResp.NextVersionIdMarker;
11047
11094
  }
11048
11095
  }
@@ -60690,6 +60737,7 @@ var S3DirectoryBucketProvider = class {
60690
60737
  let continuationToken;
60691
60738
  do {
60692
60739
  const listResponse = await this.s3Client.send(new ListObjectsV2Command({
60740
+ EncodingType: "url",
60693
60741
  Bucket: bucketName,
60694
60742
  MaxKeys: 1e3,
60695
60743
  ContinuationToken: continuationToken
@@ -60699,7 +60747,7 @@ var S3DirectoryBucketProvider = class {
60699
60747
  await this.s3Client.send(new DeleteObjectsCommand({
60700
60748
  Bucket: bucketName,
60701
60749
  Delete: {
60702
- Objects: objects.map((obj) => ({ Key: obj.Key })),
60750
+ Objects: objects.map((obj) => ({ Key: decodeListingKey(obj.Key) })),
60703
60751
  Quiet: true
60704
60752
  }
60705
60753
  }));
@@ -62153,9 +62201,10 @@ async function runDestroyForStack(stackName, state, ctx) {
62153
62201
  interrupted: false
62154
62202
  };
62155
62203
  const guardIndeterminateTargets = /* @__PURE__ */ new Set();
62204
+ const regionForState = state.region ?? ctx.baseRegion;
62205
+ refuseMalformedResourcesForDestroy(state, stackName, regionForState);
62156
62206
  const resourceCount = Object.keys(state.resources).length;
62157
62207
  const orphanCount = (state.orphans ?? []).length;
62158
- const regionForState = state.region ?? ctx.baseRegion;
62159
62208
  refuseMalformedOutputsForDestroy(state, stackName, regionForState);
62160
62209
  if (resourceCount === 0 && orphanCount === 0) {
62161
62210
  logger.info(`Stack ${stackName} has no resources, cleaning up state...`);
@@ -62203,6 +62252,7 @@ async function runDestroyForStack(stackName, state, ctx) {
62203
62252
  emptyLockHeld = true;
62204
62253
  try {
62205
62254
  const recheck = await ctx.stateBackend.getState(stackName, regionForState);
62255
+ if (recheck) refuseMalformedResourcesForDestroy(recheck.state, stackName, regionForState);
62206
62256
  const recheckResources = recheck ? Object.keys(recheck.state.resources).length : 0;
62207
62257
  const recheckOrphans = recheck ? (recheck.state.orphans ?? []).length : 0;
62208
62258
  if (!(!recheck || recheckResources === 0 && recheckOrphans === 0)) throw new Error(`Stack '${stackName}' (${regionForState}) was empty when this run started but now has ${recheckResources} resource(s) and ${recheckOrphans} rollback-orphaned resource(s) — another cdkd process wrote to it. Re-run the destroy to act on the current state.`);
@@ -62936,6 +62986,7 @@ var NestedStackProvider = class {
62936
62986
  this.logger.debug(`Nested stack ${childStackName} has no state — treating delete as idempotent success.`);
62937
62987
  return;
62938
62988
  }
62989
+ refuseMalformedResourcesForDestroy(childStateData.state, childStackName, childRegion);
62939
62990
  const resourceCount = Object.keys(childStateData.state.resources).length;
62940
62991
  this.logger.info(`Destroying nested stack ${childStackName} (logicalId=${logicalId}, ${resourceCount} resource(s))`);
62941
62992
  const childCtx = {
@@ -74471,16 +74522,17 @@ async function stateMigrateCommand(options) {
74471
74522
  try {
74472
74523
  let copied = 0;
74473
74524
  for (const obj of sourceObjects) {
74474
- if (!obj.Key) continue;
74525
+ const objKey = decodeListingKey(obj.Key);
74526
+ if (!objKey) continue;
74475
74527
  await newS3.send(new CopyObjectCommand({
74476
74528
  Bucket: newBucket,
74477
- Key: obj.Key,
74529
+ Key: objKey,
74478
74530
  ...await expectedOwnerParam(newS3),
74479
74531
  ExpectedSourceBucketOwner: accountId,
74480
- CopySource: encodeURIComponent(`${legacyBucket}/${obj.Key}`)
74532
+ CopySource: encodeURIComponent(`${legacyBucket}/${objKey}`)
74481
74533
  }));
74482
74534
  copied++;
74483
- logger.debug(` copied ${obj.Key}`);
74535
+ logger.debug(` copied ${objKey}`);
74484
74536
  }
74485
74537
  logger.info(`✓ Copied ${copied} object(s) to ${newBucket}`);
74486
74538
  const destObjects = await listAllObjects(newS3, newBucket);
@@ -74527,6 +74579,7 @@ async function listAllObjects(s3, bucket) {
74527
74579
  let continuationToken;
74528
74580
  do {
74529
74581
  const resp = await s3.send(new ListObjectsV2Command({
74582
+ EncodingType: "url",
74530
74583
  Bucket: bucket,
74531
74584
  ...await expectedOwnerParam(s3),
74532
74585
  ...continuationToken && { ContinuationToken: continuationToken }
@@ -74542,7 +74595,7 @@ async function listAllObjects(s3, bucket) {
74542
74595
  * mid-flight would race the in-progress write.
74543
74596
  */
74544
74597
  async function assertNoActiveLocks(s3, bucket) {
74545
- const locks = (await listAllObjects(s3, bucket)).map((o) => o.Key).filter((k) => typeof k === "string" && k.endsWith("/lock.json"));
74598
+ const locks = (await listAllObjects(s3, bucket)).map((o) => decodeListingKey(o.Key)).filter((k) => typeof k === "string" && k.endsWith("/lock.json"));
74546
74599
  if (locks.length > 0) {
74547
74600
  const sample = locks.slice(0, 3).join(", ");
74548
74601
  const more = locks.length > 3 ? ` (+${locks.length - 3} more)` : "";
@@ -74609,20 +74662,27 @@ async function emptyBucketAllVersions(s3, bucket) {
74609
74662
  let versionIdMarker;
74610
74663
  do {
74611
74664
  const resp = await s3.send(new ListObjectVersionsCommand({
74665
+ EncodingType: "url",
74612
74666
  Bucket: bucket,
74613
74667
  ...await expectedOwnerParam(s3),
74614
74668
  ...keyMarker && { KeyMarker: keyMarker },
74615
74669
  ...versionIdMarker && { VersionIdMarker: versionIdMarker }
74616
74670
  }));
74617
74671
  const ids = [];
74618
- for (const v of resp.Versions ?? []) if (v.Key && v.VersionId) ids.push({
74619
- Key: v.Key,
74620
- VersionId: v.VersionId
74621
- });
74622
- for (const dm of resp.DeleteMarkers ?? []) if (dm.Key && dm.VersionId) ids.push({
74623
- Key: dm.Key,
74624
- VersionId: dm.VersionId
74625
- });
74672
+ for (const v of resp.Versions ?? []) {
74673
+ const vKey = decodeListingKey(v.Key);
74674
+ if (vKey && v.VersionId) ids.push({
74675
+ Key: vKey,
74676
+ VersionId: v.VersionId
74677
+ });
74678
+ }
74679
+ for (const dm of resp.DeleteMarkers ?? []) {
74680
+ const dmKey = decodeListingKey(dm.Key);
74681
+ if (dmKey && dm.VersionId) ids.push({
74682
+ Key: dmKey,
74683
+ VersionId: dm.VersionId
74684
+ });
74685
+ }
74626
74686
  for (let i = 0; i < ids.length; i += 1e3) {
74627
74687
  const batch = ids.slice(i, i + 1e3);
74628
74688
  await s3.send(new DeleteObjectsCommand({
@@ -74634,7 +74694,7 @@ async function emptyBucketAllVersions(s3, bucket) {
74634
74694
  }
74635
74695
  }));
74636
74696
  }
74637
- keyMarker = resp.NextKeyMarker;
74697
+ keyMarker = decodeListingKey(resp.NextKeyMarker);
74638
74698
  versionIdMarker = resp.NextVersionIdMarker;
74639
74699
  } while (keyMarker || versionIdMarker);
74640
74700
  }
@@ -82021,16 +82081,18 @@ async function listS3Candidates(s3Client, bucket, accountId, refs, cutoffMs, log
82021
82081
  try {
82022
82082
  do {
82023
82083
  const response = await s3Client.send(new ListObjectsV2Command({
82084
+ EncodingType: "url",
82024
82085
  Bucket: bucket,
82025
82086
  ExpectedBucketOwner: accountId,
82026
82087
  ...continuationToken && { ContinuationToken: continuationToken }
82027
82088
  }));
82028
82089
  for (const obj of response.Contents ?? []) {
82029
- if (!obj.Key) continue;
82030
- if (refs.s3Keys.has(obj.Key)) continue;
82090
+ const objKey = decodeListingKey(obj.Key);
82091
+ if (!objKey) continue;
82092
+ if (refs.s3Keys.has(objKey)) continue;
82031
82093
  if (!obj.LastModified || obj.LastModified.getTime() >= cutoffMs) continue;
82032
82094
  candidates.push({
82033
- key: obj.Key,
82095
+ key: objKey,
82034
82096
  size: obj.Size ?? 0,
82035
82097
  lastModified: obj.LastModified
82036
82098
  });
@@ -94329,4 +94391,4 @@ function buildProgram() {
94329
94391
 
94330
94392
  //#endregion
94331
94393
  export { buildProgram };
94332
- //# sourceMappingURL=program-BOAEIjF5.js.map
94394
+ //# sourceMappingURL=program-BLyj1ijG.js.map