@go-to-k/cdkd 0.290.25 → 0.290.26

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as isVersionOnlyInvocation, t as getCdkdVersion } from "./version-CduXA6UL.js";
+import { n as isVersionOnlyInvocation, t as getCdkdVersion } from "./version-yD49aCCv.js";
 
 //#region src/cli/pipe-close-handler.ts
 /**
@@ -74,7 +74,7 @@ async function main() {
 		console.log(getCdkdVersion());
 		return;
 	}
-	const { buildProgram } = await import("./program-babtsurS.js");
+	const { buildProgram } = await import("./program-BgDlhE-S.js");
 	const program = buildProgram();
 	const args = reorderArgs(process.argv);
 	await program.parseAsync(args);

package/dist/{deploy-engine-DtFiFMxh.js → deploy-engine-CbIc5Y73.js}

@@ -1,6 +1,6 @@
 import { C as displaySafe, S as displayIdent, b as STACK_REF_MAX_CODE_POINTS, d as applyDefaultNameForFallback, f as explicitNamePropertyFor, g as looksLikeCdkdGeneratedName, h as getCurrentStackName, m as generateResourceNameWithFallback, n as getLogger, p as generateResourceName, r as isStdoutReservedForPayload, s as getLiveRenderer, v as withStackName, w as truncateCodePoints, x as UNRENDERABLE, y as withoutGeneratedFallbackName } from "./logger-CkHVgzLx.js";
 import { a as setAssumedRoleCredentials, i as getPreAssumeEnvCredentials, n as awsClientDefaults, o as setPreAssumeEnvCredentials, r as getAssumedRoleCredentials, t as SECOND_ROLE_PUBLISH_REFUSAL } from "./aws-client-defaults-BoIxyCir.js";
-import { t as getCdkdVersion } from "./version-CduXA6UL.js";
+import { t as getCdkdVersion } from "./version-yD49aCCv.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetBucketReplicationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -22870,6 +22870,21 @@ var DiffCalculator = class DiffCalculator {
 * The three environment variables that carry a static AWS identity into a child
 * process or container. Spelled once here so a forwarding site and the fence
 * that watches it cannot disagree about the population.
+*
+* That claim is only true while the population is IMPORTED, and for one release
+* it was not: every `forwardAwsEnv` body hardcoded its own array and
+* `local-surface-env-identity.test.ts` hardcoded the quoted literal, so the
+* constant guaranteed nothing and a fourth key added here would have reached
+* neither (issue [#3250](https://github.com/go-to-k/cdkd/issues/3250) item 4).
+* Every forwarding site now spreads this array and the fence treats the
+* constant's NAME as one of its site shapes, with a floor per spelling — so a
+* site quietly going back to a local copy drops out of one shape's count while
+* the other stays green, which is the failure that floor exists to report.
+*
+* Derive the readers with
+* `grep -rn AWS_CREDENTIAL_ENV_KEYS src tests`, never from a list written here:
+* a list of call sites in a doc comment is the shape that went stale in the
+* first place.
 */
 const AWS_CREDENTIAL_ENV_KEYS = [
 	"AWS_ACCESS_KEY_ID",
@@ -22917,6 +22932,25 @@ function callerEnvCredentials() {
 	return getPreAssumeEnvCredentials();
 }
 /**
+* Is the credential triple currently in `process.env` cdkd's OWN `--role-arn`
+* assumed role rather than the caller's?
+*
+* For a site that has to EXPLAIN a `callerEnvCredentials()` miss, not for one
+* that has to act on it. `undefined` from that function is ambiguous to a USER
+* in exactly one direction: with a role assumed, `AWS_ACCESS_KEY_ID` is visibly
+* set — cdkd set it — so an error telling them to set it is advice they have
+* already followed, and the real reason is that cdkd refuses to act as the role
+* here (issue [#3250](https://github.com/go-to-k/cdkd/issues/3250) item 5).
+*
+* Do not branch BEHAVIOUR on this. The three-way decision belongs to
+* `callerEnvCredentials` / `applyCallerIdentityCredentials`, which distinguish
+* "no role assumed" from "a role assumed over a caller who had nothing" — a
+* distinction this boolean deliberately collapses.
+*/
+function envCredentialsAreAssumedRole() {
+	return getAssumedRoleCredentials() !== void 0;
+}
+/**
 * Correct an environment bag that was populated by copying `process.env`, so it
 * carries the CALLER's identity rather than a `--role-arn` assumed role's.
 *
@@ -32391,7 +32425,7 @@ var CloudControlProvider = class {
 		const indeterminateGuard = await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DL62n7uG.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-7KM2pV3Q.js").then((n) => n.n);
 			const asgProvider = new ASGProvider();
 			return withIndeterminateGuard(await asgProvider.delete(logicalId, physicalId, resourceType, _properties, context), indeterminateGuard);
 		}
@@ -45402,5 +45436,5 @@ var DeployEngine = class DeployEngine {
 };
 
 //#endregion
-export { secretBearing as $, normalizeAwsError as $i, redactSecretsForState as $n, synthesisStatusMessage as $r, s3BucketArn as $t, extractDeploymentEventError as A, AssetError as Ai, repairMalformedResourcePropertiesForReadOnly as An, getBootstrapMarkerKey as Ar, isImpossibleEmptyStoredAttribute as At, toCfnInteger as B, LockError as Bi, STATE_SOURCED_READBACK_RULES as Bn, describeDockerFailure as Br, coerceCfnBoolean as Bt, buildFinalSnapshotIdentifier as C, processStackMessages as Ci, refuseMalformedNestedChildOutputs as Cn, createAssetRedirectResolver as Cr, isTerminationProtectionPropagationError as Ct, refusesFinalSnapshot as D, getAwsClients as Di, refuseMalformedResourcesForDestroy as Dn, BOOTSTRAP_MARKER_PREFIX as Dr, cfnRefValueFromPhysicalId as Dt, isFinalSnapshotError as E, AwsClients as Ei, refuseMalformedResourcePropertiesForOrphan as En, AssetModeResolver as Er, carriesFetchableDynamicReference as Et, isStatefulRecreateTargetSync as F, DeployCancelledError as Fi, withRetry as Fn, validateContainerRepoName as Fr, isSettledInstanceState as Ft, gray as G, ResourceTimeoutError as Gi, errorCauseChain as Gn, redactDockerArgvValues as Gr, readConfigString as Gt, formatResourceLine as H, NestedStackChildDirectDestroyError as Hi, carriesSecretMask as Hn, formatDockerLoginError as Hr, configBooleanRefusal as Ht, renderStatefulReason as I, DynamicReferenceRegionAmbiguousError as Ii, DagBuilder as In, buildDenyExternalAccessPolicy as Ir, WAFv2WebACLProvider as It, yellow as J, StackTerminationProtectionError as Ji, markSameGenerationBag as Jn, escapeRegExp$1 as Jr, requireConfigObject as Jt, green as K, ResourceUpdateNotSupportedError as Ki, identityKeyFor as Kn, runDockerForeground as Kr, replayWarn as Kt, WARM_THROUGHPUT_MEMBERS as L, IntrinsicResolutionRefusalError as Li, TemplateParser as Ln, buildDockerImage as Lr, normalizeAwsTagsToCfn as Lt, planOrphanAdoption as M, ConfigError as Mi, findActionableSilentDrops as Mn, parseBootstrapMarker as Mr, isUnboundTemplateParameter as Mt, MULTI_REGION_RECREATE_BLOCKED_TYPES as N, CrossAccountSecretRefusalError as Ni, findSilentDropProperties as Nn, readBootstrapMarkerBody as Nr, parameterTypeMayLoseSecretIdentity as Nt, unsupportedFinalSnapshotError as O, resetAwsClients as Oi, refuseMalformedState as On, assertAssetBucketRegion as Or, coerceParameterTypedValue as Ot, isStatefulRecreateTargetForReplace as P, DependencyError as Pi, describeTypeWithThrottleRetry as Pn, validateAssetBucketName as Pr, refStateLookupFromResource as Pt, isExportAliasCollision as Q, isCdkdError as Qi, recoverMaskedOutput as Qn, Synthesizer as Qr, withSharedDrainBudget as Qt, coerceWarmThroughput as R, LocalInvokeBuildError as Ri, STATE_SOURCED_BASELINE_RULES as Rn, describeDockerCapturedOutput as Rr, resolveExplicitPhysicalId as Rt, PRE_DELETE_SNAPSHOT_TYPES as S, AssemblyReader as Si, refuseDivergentRecordRegionForDestroy as Sn, buildAssetRedirectMap as Sr, disableInstanceApiTermination as St, createPreDeleteFinalSnapshot as T, resolveBucketRegion as Ti, refuseMalformedOutputsForDestroy as Tn, rewriteTemplateAssetReferences as Tr, carriesDynamicReference as Tt, bold as U, PartialFailureError as Ui, createSecretMasker as Un, getDockerCmd as Ur, configIntegerRefusal as Ut, toFiniteNumber as V, MalformedProducerRecordRefusalError as Vi, TEMPLATE_SOURCED_RULES as Vn, dockerSpawnEnvWithSensitive as Vr, coerceCfnInteger as Vt, cyan as W, ProvisioningError as Wi, dynamicReferenceTokens as Wn, partitionSensitiveEnv as Wr, configStringRefusal as Wt, collectPublishedOutputNames as X, SynthesisError as Xi, maskSecretsInText as Xn, AssetManifestLoader as Xr, classifyReplaySecretRegion as Xt, collectDeclaredOutputNames as Y, StateError as Yi, maskSecretsInError as Yn, stripControlChars as Yr, requireConfigString as Yt, exportAliasCollisionScrubWarning as Z, formatError as Zi, recordMaskOnlyValue as Zn, getDockerImageBySourceHash as Zr, producerRegionsFromState as Zt, isSecretBearingReferenceString as _, decodeListingKey as _i, malformedRenderedContainersWarning as _n, orphansCarriedFrom as _r, isWaitAbandonedError as _t, DeploymentEventsStore as a, markNonRetryable as aa, resolveSkipPrefix as ai, applyCallerIdentityCredentials as an, buildLockContentionMessage as ar, clearOnUpdateRemoval as at, bindingSkippedOutputs as b, canonicalizeRegion as bi, malformedStateRefusalMessage as bn, stringifyValue as br, deleteIndeterminateGuards as bt, replayFailedOperations as c, describeAwsFailure as ca, resolveUseCdkBootstrapAssets as ci, INTRINSIC_KEYS as cn, shellQuote as cr, createMaskedRetryLogger as ct, updatePartialReason as d, CFN_TEMPLATE_BODY_LIMIT as di, hasReadableResources as dn, exportNamesCarriedFrom as dr, beginCommandInterruptScope as dt, withErrorHandling as ea, getDefaultStateBucketName as ei, s3BucketDomainName as en, scrubResourceRecord as er, secretBearingStateKeyWarning as et, withResourceDeadline as f, CFN_TEMPLATE_URL_LIMIT as fi, malformedExportNamesWarning as fn, hasReadableExportSet as fr, endCommandInterruptScope as ft, bagHoldsSecretExpression as g, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as gi, malformedOutputsWarning as gn, orphansAfterRollback as gr, CloudControlProvider as gt, computeImplicitDeleteEdges as h, uploadCfnTemplate as hi, malformedOutputsRefusalMessage as hn, isReadableBag as hr, startInterruptWatch as ht, DeploymentEventsReader as i, isTransientServerError as ia, resolveCaptureObservedState as ii, applyRoleArnIfSet as in, buildForceUnlockCommand as ir, collectInlinePolicyNamesManagedBySiblings as it, makeSiblingClaimReader as j, CdkdError as ji, repairMalformedResourcesForReadOnly as jn, isCrossRegionRedirect as jr, isNamelessDynamicReferenceError as jt, makeCanonicalizePropertiesFn as k, setAwsClients as ki, repairMalformedOutputsForReadOnly as kn, ensureAssetStorage as kr, getAccountInfo as kt, replayRollback as l, safeStringify$1 as la, stateBucketExistenceConfirmed as li, STATE_RESOURCES_MALFORMED as ln, CUSTOM_RESOURCE_RESPONSE_PREFIX as lr, maskDeep as lt, IMPLICIT_DELETE_DEPENDENCIES as m, findLargeInlineResources as mi, malformedLocalOutputsWarning as mn, importableOutputs as mr, isInterruptedWaitError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, isRetryableTransientError as na, resolveApp as ni, s3BucketRegionalDomainName as nn, S3StateBackend as nr, getCurrentResourceSecrets as nt, planFailedOps as o, markRedactedCause as oa, resolveStateBucketWithDefault as oi, callerEnvCredentials as on, forceQuitRecoveryClause as or, ProviderRegistry as ot, maskingRetryLogger as p, MIGRATE_TMP_PREFIX as pi, malformedExportSourceWarning as pn, importableOutputKeys as pr, interruptWatchListenerCount as pt, red as q, StackHasActiveImportsError as qi, isSingleDynamicReferenceToken as qn, runDockerStreaming as qr, requireConfigArray as qt, DeployEngine as r, isThrottlingError as ra, resolveAutoAssetStorage as ri, s3BucketWebsiteUrl as rn, rebuildClientForBucketRegion as rr, IAMRoleProvider as rt, planRollback as s, retryClassificationText as sa, resolveStateBucketWithDefaultAndSource as si, DiffCalculator as sn, formatLockExpiry as sr, wouldReturnToSdkProvider as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, isMarkedNonRetryable as ta, getLegacyStateBucketName as ti, s3BucketDualStackDomainName as tn, LockManager as tr, secretSafeKeyDisplay as tt, updatePartialMessage as u, __exportAll as ua, warnDeprecatedNoPrefixCliFlag as ui, hasReadableOutputs as un, DEFAULT_STATE_PREFIX as ur, maskerOrIdentity as ut, keptWholeReasonText as v, expectedOwnerParam as vi, malformedResourcePropertiesWarning as vn, shouldRetainResource as vr, slowCcOperationTimeoutMs as vt, ccRoutedFinalSnapshotError as w, clearBucketRegionCache as wi, refuseMalformedOutputs as wn, loadPublishableAssetManifest as wr, IntrinsicFunctionResolver as wt, ATOMIC_FINAL_SNAPSHOT_TYPES as x, derivePartitionAndUrlSuffix as xi, producerRecordKey as xn, WorkGraph as xr, deleteSkipReason as xt, mergeNoChangeOutputs as y, PARTITION_TABLE as yi, malformedResourcesWarning as yn, AssetPublisher as yr, UNSPECIFIED_SKIP_REASON as yt, isWarmThroughputDecrease as z, LocalStartServiceError as zi, STATE_SOURCED_CROSS_GENERATION_RULES as zn, describeDockerExecFailure as zr, assertRegionMatch as zt };
-//# sourceMappingURL=deploy-engine-DtFiFMxh.js.map
+export { secretBearing as $, formatError as $i, recordMaskOnlyValue as $n, getDockerImageBySourceHash as $r, s3BucketArn as $t, extractDeploymentEventError as A, resetAwsClients as Ai, refuseMalformedState as An, assertAssetBucketRegion as Ar, isImpossibleEmptyStoredAttribute as At, toCfnInteger as B, LocalInvokeBuildError as Bi, STATE_SOURCED_BASELINE_RULES as Bn, describeDockerCapturedOutput as Br, coerceCfnBoolean as Bt, buildFinalSnapshotIdentifier as C, derivePartitionAndUrlSuffix as Ci, producerRecordKey as Cn, WorkGraph as Cr, isTerminationProtectionPropagationError as Ct, refusesFinalSnapshot as D, resolveBucketRegion as Di, refuseMalformedOutputsForDestroy as Dn, rewriteTemplateAssetReferences as Dr, cfnRefValueFromPhysicalId as Dt, isFinalSnapshotError as E, clearBucketRegionCache as Ei, refuseMalformedOutputs as En, loadPublishableAssetManifest as Er, carriesFetchableDynamicReference as Et, isStatefulRecreateTargetSync as F, CrossAccountSecretRefusalError as Fi, findSilentDropProperties as Fn, readBootstrapMarkerBody as Fr, isSettledInstanceState as Ft, gray as G, PartialFailureError as Gi, createSecretMasker as Gn, getDockerCmd as Gr, readConfigString as Gt, formatResourceLine as H, LockError as Hi, STATE_SOURCED_READBACK_RULES as Hn, describeDockerFailure as Hr, configBooleanRefusal as Ht, renderStatefulReason as I, DependencyError as Ii, describeTypeWithThrottleRetry as In, validateAssetBucketName as Ir, WAFv2WebACLProvider as It, yellow as J, ResourceUpdateNotSupportedError as Ji, identityKeyFor as Jn, runDockerForeground as Jr, requireConfigObject as Jt, green as K, ProvisioningError as Ki, dynamicReferenceTokens as Kn, partitionSensitiveEnv as Kr, replayWarn as Kt, WARM_THROUGHPUT_MEMBERS as L, DeployCancelledError as Li, withRetry as Ln, validateContainerRepoName as Lr, normalizeAwsTagsToCfn as Lt, planOrphanAdoption as M, AssetError as Mi, repairMalformedResourcePropertiesForReadOnly as Mn, getBootstrapMarkerKey as Mr, isUnboundTemplateParameter as Mt, MULTI_REGION_RECREATE_BLOCKED_TYPES as N, CdkdError as Ni, repairMalformedResourcesForReadOnly as Nn, isCrossRegionRedirect as Nr, parameterTypeMayLoseSecretIdentity as Nt, unsupportedFinalSnapshotError as O, AwsClients as Oi, refuseMalformedResourcePropertiesForOrphan as On, AssetModeResolver as Or, coerceParameterTypedValue as Ot, isStatefulRecreateTargetForReplace as P, ConfigError as Pi, findActionableSilentDrops as Pn, parseBootstrapMarker as Pr, refStateLookupFromResource as Pt, isExportAliasCollision as Q, SynthesisError as Qi, maskSecretsInText as Qn, AssetManifestLoader as Qr, withSharedDrainBudget as Qt, coerceWarmThroughput as R, DynamicReferenceRegionAmbiguousError as Ri, DagBuilder as Rn, buildDenyExternalAccessPolicy as Rr, resolveExplicitPhysicalId as Rt, PRE_DELETE_SNAPSHOT_TYPES as S, canonicalizeRegion as Si, malformedStateRefusalMessage as Sn, stringifyValue as Sr, disableInstanceApiTermination as St, createPreDeleteFinalSnapshot as T, processStackMessages as Ti, refuseMalformedNestedChildOutputs as Tn, createAssetRedirectResolver as Tr, carriesDynamicReference as Tt, bold as U, MalformedProducerRecordRefusalError as Ui, TEMPLATE_SOURCED_RULES as Un, dockerSpawnEnvWithSensitive as Ur, configIntegerRefusal as Ut, toFiniteNumber as V, LocalStartServiceError as Vi, STATE_SOURCED_CROSS_GENERATION_RULES as Vn, describeDockerExecFailure as Vr, coerceCfnInteger as Vt, cyan as W, NestedStackChildDirectDestroyError as Wi, carriesSecretMask as Wn, formatDockerLoginError as Wr, configStringRefusal as Wt, collectPublishedOutputNames as X, StackTerminationProtectionError as Xi, markSameGenerationBag as Xn, escapeRegExp$1 as Xr, classifyReplaySecretRegion as Xt, collectDeclaredOutputNames as Y, StackHasActiveImportsError as Yi, isSingleDynamicReferenceToken as Yn, runDockerStreaming as Yr, requireConfigString as Yt, exportAliasCollisionScrubWarning as Z, StateError as Zi, maskSecretsInError as Zn, stripControlChars as Zr, producerRegionsFromState as Zt, isSecretBearingReferenceString as _, uploadCfnTemplate as _i, malformedOutputsRefusalMessage as _n, isReadableBag as _r, isWaitAbandonedError as _t, DeploymentEventsStore as a, isThrottlingError as aa, resolveAutoAssetStorage as ai, AWS_CREDENTIAL_ENV_KEYS as an, rebuildClientForBucketRegion as ar, clearOnUpdateRemoval as at, bindingSkippedOutputs as b, expectedOwnerParam as bi, malformedResourcePropertiesWarning as bn, shouldRetainResource as br, deleteIndeterminateGuards as bt, replayFailedOperations as c, markRedactedCause as ca, resolveStateBucketWithDefault as ci, envCredentialsAreAssumedRole as cn, forceQuitRecoveryClause as cr, createMaskedRetryLogger as ct, updatePartialReason as d, safeStringify$1 as da, stateBucketExistenceConfirmed as di, STATE_RESOURCES_MALFORMED as dn, CUSTOM_RESOURCE_RESPONSE_PREFIX as dr, beginCommandInterruptScope as dt, isCdkdError as ea, Synthesizer as ei, s3BucketDomainName as en, recoverMaskedOutput as er, secretBearingStateKeyWarning as et, withResourceDeadline as f, __exportAll as fa, warnDeprecatedNoPrefixCliFlag as fi, hasReadableOutputs as fn, DEFAULT_STATE_PREFIX as fr, endCommandInterruptScope as ft, bagHoldsSecretExpression as g, findLargeInlineResources as gi, malformedLocalOutputsWarning as gn, importableOutputs as gr, CloudControlProvider as gt, computeImplicitDeleteEdges as h, MIGRATE_TMP_PREFIX as hi, malformedExportSourceWarning as hn, importableOutputKeys as hr, startInterruptWatch as ht, DeploymentEventsReader as i, isRetryableTransientError as ia, resolveApp as ii, applyRoleArnIfSet as in, S3StateBackend as ir, collectInlinePolicyNamesManagedBySiblings as it, makeSiblingClaimReader as j, setAwsClients as ji, repairMalformedOutputsForReadOnly as jn, ensureAssetStorage as jr, isNamelessDynamicReferenceError as jt, makeCanonicalizePropertiesFn as k, getAwsClients as ki, refuseMalformedResourcesForDestroy as kn, BOOTSTRAP_MARKER_PREFIX as kr, getAccountInfo as kt, replayRollback as l, retryClassificationText as la, resolveStateBucketWithDefaultAndSource as li, DiffCalculator as ln, formatLockExpiry as lr, maskDeep as lt, IMPLICIT_DELETE_DEPENDENCIES as m, CFN_TEMPLATE_URL_LIMIT as mi, malformedExportNamesWarning as mn, hasReadableExportSet as mr, isInterruptedWaitError as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, withErrorHandling as na, getDefaultStateBucketName as ni, s3BucketRegionalDomainName as nn, scrubResourceRecord as nr, getCurrentResourceSecrets as nt, planFailedOps as o, isTransientServerError as oa, resolveCaptureObservedState as oi, applyCallerIdentityCredentials as on, buildForceUnlockCommand as or, ProviderRegistry as ot, maskingRetryLogger as p, CFN_TEMPLATE_BODY_LIMIT as pi, hasReadableResources as pn, exportNamesCarriedFrom as pr, interruptWatchListenerCount as pt, red as q, ResourceTimeoutError as qi, errorCauseChain as qn, redactDockerArgvValues as qr, requireConfigArray as qt, DeployEngine as r, isMarkedNonRetryable as ra, getLegacyStateBucketName as ri, s3BucketWebsiteUrl as rn, LockManager as rr, IAMRoleProvider as rt, planRollback as s, markNonRetryable as sa, resolveSkipPrefix as si, callerEnvCredentials as sn, buildLockContentionMessage as sr, wouldReturnToSdkProvider as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, normalizeAwsError as ta, synthesisStatusMessage as ti, s3BucketDualStackDomainName as tn, redactSecretsForState as tr, secretSafeKeyDisplay as tt, updatePartialMessage as u, describeAwsFailure as ua, resolveUseCdkBootstrapAssets as ui, INTRINSIC_KEYS as un, shellQuote as ur, maskerOrIdentity as ut, keptWholeReasonText as v, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as vi, malformedOutputsWarning as vn, orphansAfterRollback as vr, slowCcOperationTimeoutMs as vt, ccRoutedFinalSnapshotError as w, AssemblyReader as wi, refuseDivergentRecordRegionForDestroy as wn, buildAssetRedirectMap as wr, IntrinsicFunctionResolver as wt, ATOMIC_FINAL_SNAPSHOT_TYPES as x, PARTITION_TABLE as xi, malformedResourcesWarning as xn, AssetPublisher as xr, deleteSkipReason as xt, mergeNoChangeOutputs as y, decodeListingKey as yi, malformedRenderedContainersWarning as yn, orphansCarriedFrom as yr, UNSPECIFIED_SKIP_REASON as yt, isWarmThroughputDecrease as z, IntrinsicResolutionRefusalError as zi, TemplateParser as zn, buildDockerImage as zr, assertRegionMatch as zt };
+//# sourceMappingURL=deploy-engine-CbIc5Y73.js.map