@go-to-k/cdkd 0.291.16 → 0.291.17

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as isVersionOnlyInvocation, t as getCdkdVersion } from "./version-Qigb_6I0.js";
+import { n as isVersionOnlyInvocation, t as getCdkdVersion } from "./version-DMRkEtU2.js";
 
 //#region src/cli/pipe-close-handler.ts
 /**
@@ -74,7 +74,7 @@ async function main() {
 		console.log(getCdkdVersion());
 		return;
 	}
-	const { buildProgram } = await import("./program-DjkAPWi0.js");
+	const { buildProgram } = await import("./program-hXXls0hg.js");
 	const program = buildProgram();
 	const args = reorderArgs(process.argv);
 	await program.parseAsync(args);

package/dist/{deploy-engine-yukC8N_f.js → deploy-engine-xxVOQPPr.js}

@@ -1,6 +1,6 @@
 import { C as displayAwsMessage, D as truncateCodePoints, E as isPasteableIdent, S as UNRENDERABLE, T as displaySafe, d as applyDefaultNameForFallback, f as explicitNamePropertyFor, g as looksLikeCdkdGeneratedName, h as getCurrentStackName, m as generateResourceNameWithFallback, n as getLogger, p as generateResourceName, r as isStdoutReservedForPayload, s as getLiveRenderer, v as withStackName, w as displayIdent, x as STACK_REF_MAX_CODE_POINTS, y as withoutGeneratedFallbackName } from "./logger-GASr9bAF.js";
 import { a as setAssumedRoleCredentials, c as currentStackAwsScope, i as getPreAssumeEnvCredentials, l as runInStackAwsScope, n as awsClientDefaults, o as setPreAssumeEnvCredentials, r as getAssumedRoleCredentials, s as ambientRegion, t as SECOND_ROLE_PUBLISH_REFUSAL } from "./aws-client-defaults-jISU4PHo.js";
-import { t as getCdkdVersion } from "./version-Qigb_6I0.js";
+import { t as getCdkdVersion } from "./version-DMRkEtU2.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetBucketReplicationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -9566,11 +9566,13 @@ function dockerSubject(assetId) {
 * would take from outside the assembly (issue
 * [#3503](https://github.com/go-to-k/cdkd/issues/3503)).
 *
-* `cdk-local`'s own `buildDockerImage` spells the context (and the
-* `executable` arm's cwd) as `${cdkOutDir}/${source.directory}` with no
-* containment, and cdkd cannot hand it a pre-resolved path without changing
-* the image tag it derives from `source`. So this judges the path the engine
-* WILL open, before the engine runs, through the same
+* Since cdk-local 0.149.3 the engine's own `buildDockerImage` refuses the same
+* escapes and opens the path it judged (go-to-k/cdkd#3597). This copy stays in
+* FRONT of it because the engine's refusal quotes the assembly-chosen value in
+* a boundary the value can close (go-to-k/cdk-local#758), while this one
+* renders it through `displayAssemblyPath`; go-to-k/cdkd#3652 removes it once
+* that ships. It judges the path the engine's `${cdkOutDir}/${source.directory}`
+* spelling names, before the engine runs, through the same
 * {@link resolveDockerContextDirectory} cdkd's own build uses.
 *
 * An ABSOLUTE value is judged by the engine's spelling, not honoured: the
@@ -36326,7 +36328,7 @@ var CloudControlProvider = class {
 		const indeterminateGuard = await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DAvRcbyS.js").then((n) => n.n);
+			const { ASGProvider } = await import("./asg-provider-CHM7_WdJ.js").then((n) => n.n);
 			const asgProvider = new ASGProvider();
 			return withIndeterminateGuard(await asgProvider.delete(logicalId, physicalId, resourceType, _properties, context), indeterminateGuard);
 		}
@@ -51807,5 +51809,5 @@ var DeployEngine = class DeployEngine {
 };
 
 //#endregion
-export { yellow as $, formatError as $a, MIGRATE_TMP_PREFIX as $i, repairMalformedOutputsForReadOnly as $n, WorkGraph as $r, replayWarn as $t, createPreDeleteFinalSnapshot as A, runWithStackAwsClients as Aa, runDockerForeground as Ai, malformedOrphansRefusalMessage as An, scrubResourceRecord as Ar, isTerminationProtectionPropagationError as At, isStatefulRecreateTargetSync as B, LocalInvokeBuildError as Ba, getLegacyStateBucketName as Bi, refuseMalformedNestedChildOutputs as Bn, DEFAULT_STATE_PREFIX as Br, parameterTypeMayLoseSecretIdentity as Bt, namesAnyDeclaredParameter as C, renderAssemblyPathEscape as Ca, finchSecretArgvRefusal as Ci, hasReadableOutputs as Cn, maskSecretsInError as Cr, CloudControlProvider as Ct, PRE_DELETE_SNAPSHOT_TYPES as D, AwsClients as Da, isMalformedEnvKey as Di, malformedExportSourceWarning as Dn, recordMaskOnlyValuesIn as Dr, deleteSkipReason as Dt, ATOMIC_FINAL_SNAPSHOT_TYPES as E, resolveBucketRegion as Ea, isDockerClientEnvKey as Ei, malformedExportNamesWarning as En, recordMaskOnlyValue as Er, deleteIndeterminateGuards as Et, extractDeploymentEventError as F, CrossAccountSecretRefusalError as Fa, AssetManifestLoader as Fi, malformedResourceEntriesWarning as Fn, buildForceUnlockCommand as Fr, coerceParameterTypedValue as Ft, toCfnInteger as G, PartialFailureError as Ga, resolveStateBucketWithDefault as Gi, refuseMalformedOutputsForDestroy as Gn, importableOutputKeys as Gr, resolveExplicitPhysicalId as Gt, WARM_THROUGHPUT_MEMBERS as H, LockError as Ha, resolveAutoAssetStorage as Hi, refuseMalformedOrphansForDestroy as Hn, hasReadableExportSet as Hr, isSettledInstanceState as Ht, makeSiblingClaimReader as I, DependencyError as Ia, getDockerImageBySourceHash as Ii, malformedResourcePropertiesWarning as In, buildLockContentionMessage as Ir, getAccountInfo as It, bold as J, ResourceUpdateNotSupportedError as Ja, stateBucketExistenceConfirmed as Ji, refuseMalformedResourceEntriesForOrphan as Jn, orphansAfterRollback as Jr, coerceCfnInteger as Jt, toFiniteNumber as K, ProvisioningError as Ka, resolveStateBucketWithDefaultAndSource as Ki, refuseMalformedResourceAttributesForOrphan as Kn, importableOutputs as Kr, assertRegionMatch as Kt, planOrphanAdoption as L, DeployCancelledError as La, Synthesizer as Li, malformedResourcesWarning as Ln, forceQuitRecoveryClause as Lr, isImpossibleEmptyStoredAttribute as Lt, refusesFinalSnapshot as M, AssetError as Ma, warnFinchArgvExposure as Mi, malformedOutputsRefusalMessage as Mn, S3StateBackend as Mr, carriesDynamicReference as Mt, unsupportedFinalSnapshotError as N, CdkdError as Na, escapeRegExp$1 as Ni, malformedOutputsWarning as Nn, rebuildClientForBucketRegion as Nr, carriesFetchableDynamicReference as Nt, buildFinalSnapshotIdentifier as O, getAwsClients as Oa, partitionSensitiveEnv as Oi, malformedLocalOutputsWarning as On, recoverMaskedOutput as Or, isWaitAbandonedError as Ot, makeCanonicalizePropertiesFn as P, ConfigError as Pa, stripControlChars as Pi, malformedRenderedContainersWarning as Pn, UNREPRODUCIBLE_LOCK_CLAUSE as Pr, cfnRefValueFromPhysicalId as Pt, red as Q, SynthesisError as Qa, CFN_TEMPLATE_URL_LIMIT as Qi, repairMalformedOrphansForReadOnly as Qn, stringifyValue as Qr, readConfigString as Qt, MULTI_REGION_RECREATE_BLOCKED_TYPES as R, DynamicReferenceRegionAmbiguousError as Ra, synthesisStatusMessage as Ri, malformedStateRefusalMessage as Rn, formatLockExpiry as Rr, isNamelessDynamicReferenceError as Rt, computeParameterTaint as S, displayAssemblyPath as Sa, dockerSpawnEnvWithSensitive as Si, hasReadableOrphans as Sn, markSameGenerationBag as Sr, startInterruptWatch as St, resourcesNamingDeclaredParameter as T, clearBucketRegionCache as Ta, getDockerCmd as Ti, isReadableResourceEntry as Tn, pathCrossesDottedKey as Tr, UNSPECIFIED_SKIP_REASON as Tt, coerceWarmThroughput as U, MalformedProducerRecordRefusalError as Ua, resolveCaptureObservedState as Ui, refuseMalformedOrphansForOrphan as Un, hasReasonlessBaselineRefusal as Ur, WAFv2WebACLProvider as Ut, renderStatefulReason as V, LocalStartServiceError as Va, resolveApp as Vi, refuseMalformedOrphans as Vn, exportNamesCarriedFrom as Vr, refStateLookupFromResource as Vt, isWarmThroughputDecrease as W, NestedStackChildDirectDestroyError as Wa, resolveSkipPrefix as Wi, refuseMalformedOutputs as Wn, hasUnverifiableParameterRefusal as Wr, normalizeAwsTagsToCfn as Wt, gray as X, StackTerminationProtectionError as Xa, ssmResolvedValueType as Xi, refuseMalformedResourcesForDestroy as Xn, shouldRetainResource as Xr, configIntegerRefusal as Xt, cyan as Y, StackHasActiveImportsError as Ya, warnDeprecatedNoPrefixCliFlag as Yi, refuseMalformedResourcePropertiesForOrphan as Yn, orphansCarriedFrom as Yr, configBooleanRefusal as Yt, green as Z, StateError as Za, CFN_TEMPLATE_BODY_LIMIT as Zi, refuseMalformedState as Zn, AssetPublisher as Zr, configStringRefusal as Zt, bagHoldsSecretExpression as _, hasOwnKey as _a, resolveDockerContextDirectory as _i, INTRINSIC_KEYS as _n, dynamicReferenceTokens as _r, maskerOrIdentity as _t, DeploymentEventsStore as a, producerCoordinateKey as aa, BOOTSTRAP_MARKER_PREFIX as ai, withSharedDrainBudget as an, isMarkedNonRetryable as ao, findActionableSilentDrops as ar, secretBearingStateKeyWarning as at, mergeNoChangeOutputs as b, ownValue as ba, describeDockerExecFailure as bi, UNREADABLE_RESOURCES_MAP_ROW as bn, isSingleDynamicReferenceToken as br, interruptWatchListenerCount as bt, replayFailedOperations as c, expectedOwnerParam as ca, getBootstrapMarkerKey as ci, s3BucketDualStackDomainName as cn, isTransientServerError as co, withRetry as cr, IAMRoleProvider as ct, updatePartialMessage as d, derivePartitionAndUrlSuffix as da, readBootstrapMarkerBody as di, applyRoleArnIfSet as dn, retryClassificationText as do, STATE_SOURCED_BASELINE_RULES as dr, definedAttributes as dt, findLargeInlineResources as ea, buildAssetRedirectMap as ei, requireConfigArray as en, isCdkdError as eo, repairMalformedResourceEntriesForReadOnly as er, collectDeclaredOutputNames as et, updatePartialReason as f, AssemblyReader as fa, validateAssetBucketName as fi, AWS_CREDENTIAL_ENV_KEYS as fn, describeAwsFailure as fo, STATE_SOURCED_CROSS_GENERATION_RULES as fr, stringifyIfAssigned as ft, computeImplicitDeleteEdges as g, defineOwnKey as ga, buildDockerImage as gi, DiffCalculator as gn, createSecretMasker as gr, maskDeep as gt, IMPLICIT_DELETE_DEPENDENCIES as h, processStackMessages as ha, assertCdkLocalDockerContextContained as hi, envCredentialsAreAssumedRole as hn, carriesSecretMask as hr, createMaskedRetryLogger as ht, DeploymentEventsReader as i, injectiveKeyPrefix as ia, AssetModeResolver as ii, producerRegionsFromState as in, shellQuote as io, safeStackName as ir, secretBearing as it, isFinalSnapshotError as j, setAwsClients as ja, runDockerStreaming as ji, malformedOrphansWarning as jn, LockManager as jr, IntrinsicFunctionResolver as jt, ccRoutedFinalSnapshotError as k, resetAwsClients as ka, redactDockerArgvValues as ki, malformedOrphanRecordsWarning as kn, redactSecretsForState as kr, disableInstanceApiTermination as kt, replayRollback as l, PARTITION_TABLE as la, isCrossRegionRedirect as li, s3BucketRegionalDomainName as ln, markNonRetryable as lo, DagBuilder as lr, collectInlinePolicyNamesManagedBySiblings as lt, maskingRetryLogger as m, globMatches as ma, buildDenyExternalAccessPolicy as mi, callerEnvCredentials as mn, __exportAll as mo, TEMPLATE_SOURCED_RULES as mr, wouldReturnToSdkProvider as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as na, loadPublishableAssetManifest as ni, requireConfigString as nn, withErrorHandling as no, repairMalformedResourcesForReadOnly as nr, exportAliasCollisionScrubWarning as nt, planFailedOps as o, producerRecordKey as oa, assertAssetBucketRegion as oi, s3BucketArn as on, isRetryableTransientError as oo, findSilentDropProperties as or, secretSafeKeyDisplay as ot, withResourceDeadline as p, failedStageNote as pa, validateContainerRepoName as pi, applyCallerIdentityCredentials as pn, safeStringify$1 as po, STATE_SOURCED_READBACK_RULES as pr, ProviderRegistry as pt, formatResourceLine as q, ResourceTimeoutError as qa, resolveUseCdkBootstrapAssets as qi, refuseMalformedResourceEntries as qn, isReadableBag as qr, coerceCfnBoolean as qt, DeployEngine as r, injectiveKey as ra, rewriteTemplateAssetReferences as ri, classifyReplaySecretRegion as rn, pasteableCommand as ro, safeRegion as rr, isExportAliasCollision as rt, planRollback as s, decodeListingKey as sa, ensureAssetStorage as si, s3BucketDomainName as sn, isThrottlingError as so, describeTypeWithThrottleRetry as sr, getCurrentResourceSecrets as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, uploadCfnTemplate as ta, createAssetRedirectResolver as ti, requireConfigObject as tn, normalizeAwsError as to, repairMalformedResourcePropertiesForReadOnly as tr, collectPublishedOutputNames as tt, resolveReplacementOldType as u, canonicalizeRegion as ua, parseBootstrapMarker as ui, s3BucketWebsiteUrl as un, markRedactedCause as uo, TemplateParser as ur, clearOnUpdateRemoval as ut, isSecretBearingReferenceString as v, hasPlainPrototype$1 as va, warnManifestExecutable as vi, STATE_RESOURCES_MALFORMED as vn, errorCauseChain as vr, beginCommandInterruptScope as vt, reachableDivergentParameters as w, resolveAssemblyPath as wa, formatDockerLoginError as wi, hasReadableResources as wn, maskSecretsInText as wr, slowCcOperationTimeoutMs as wt, bindingSkippedOutputs as x, absoluteAssemblyPathEscape as xa, describeDockerFailure as xi, displayLogicalId as xn, isUncertifiedBaselineMaskPosition as xr, isInterruptedWaitError as xt, keptWholeReasonText as y, nullPrototypeRecord as ya, describeDockerCapturedOutput as yi, UNREADABLE_ORPHANS_CONTAINER_ROW as yn, identityKeyFor as yr, endCommandInterruptScope as yt, isStatefulRecreateTargetForReplace as z, IntrinsicResolutionRefusalError as za, getDefaultStateBucketName as zi, refuseDivergentRecordRegionForDestroy as zn, CUSTOM_RESOURCE_RESPONSE_PREFIX as zr, isUnboundTemplateParameter as zt };
-//# sourceMappingURL=deploy-engine-yukC8N_f.js.map
+export { yellow as $, isCdkdError as $a, findLargeInlineResources as $i, repairMalformedOutputsForReadOnly as $n, WorkGraph as $r, replayWarn as $t, createPreDeleteFinalSnapshot as A, setAwsClients as Aa, runDockerStreaming as Ai, malformedOrphansRefusalMessage as An, scrubResourceRecord as Ar, isTerminationProtectionPropagationError as At, isStatefulRecreateTargetSync as B, LocalStartServiceError as Ba, resolveApp as Bi, refuseMalformedNestedChildOutputs as Bn, DEFAULT_STATE_PREFIX as Br, parameterTypeMayLoseSecretIdentity as Bt, namesAnyDeclaredParameter as C, resolveAssemblyPath as Ca, formatDockerLoginError as Ci, hasReadableOutputs as Cn, maskSecretsInError as Cr, CloudControlProvider as Ct, PRE_DELETE_SNAPSHOT_TYPES as D, getAwsClients as Da, partitionSensitiveEnv as Di, malformedExportSourceWarning as Dn, recordMaskOnlyValuesIn as Dr, deleteSkipReason as Dt, ATOMIC_FINAL_SNAPSHOT_TYPES as E, AwsClients as Ea, isMalformedEnvKey as Ei, malformedExportNamesWarning as En, recordMaskOnlyValue as Er, deleteIndeterminateGuards as Et, extractDeploymentEventError as F, DependencyError as Fa, getDockerImageBySourceHash as Fi, malformedResourceEntriesWarning as Fn, buildForceUnlockCommand as Fr, coerceParameterTypedValue as Ft, toCfnInteger as G, ProvisioningError as Ga, resolveStateBucketWithDefaultAndSource as Gi, refuseMalformedOutputsForDestroy as Gn, importableOutputKeys as Gr, resolveExplicitPhysicalId as Gt, WARM_THROUGHPUT_MEMBERS as H, MalformedProducerRecordRefusalError as Ha, resolveCaptureObservedState as Hi, refuseMalformedOrphansForDestroy as Hn, hasReadableExportSet as Hr, isSettledInstanceState as Ht, makeSiblingClaimReader as I, DeployCancelledError as Ia, Synthesizer as Ii, malformedResourcePropertiesWarning as In, buildLockContentionMessage as Ir, getAccountInfo as It, bold as J, StackHasActiveImportsError as Ja, warnDeprecatedNoPrefixCliFlag as Ji, refuseMalformedResourceEntriesForOrphan as Jn, orphansAfterRollback as Jr, coerceCfnInteger as Jt, toFiniteNumber as K, ResourceTimeoutError as Ka, resolveUseCdkBootstrapAssets as Ki, refuseMalformedResourceAttributesForOrphan as Kn, importableOutputs as Kr, assertRegionMatch as Kt, planOrphanAdoption as L, DynamicReferenceRegionAmbiguousError as La, synthesisStatusMessage as Li, malformedResourcesWarning as Ln, forceQuitRecoveryClause as Lr, isImpossibleEmptyStoredAttribute as Lt, refusesFinalSnapshot as M, CdkdError as Ma, escapeRegExp$1 as Mi, malformedOutputsRefusalMessage as Mn, S3StateBackend as Mr, carriesDynamicReference as Mt, unsupportedFinalSnapshotError as N, ConfigError as Na, stripControlChars as Ni, malformedOutputsWarning as Nn, rebuildClientForBucketRegion as Nr, carriesFetchableDynamicReference as Nt, buildFinalSnapshotIdentifier as O, resetAwsClients as Oa, redactDockerArgvValues as Oi, malformedLocalOutputsWarning as On, recoverMaskedOutput as Or, isWaitAbandonedError as Ot, makeCanonicalizePropertiesFn as P, CrossAccountSecretRefusalError as Pa, AssetManifestLoader as Pi, malformedRenderedContainersWarning as Pn, UNREPRODUCIBLE_LOCK_CLAUSE as Pr, cfnRefValueFromPhysicalId as Pt, red as Q, formatError as Qa, MIGRATE_TMP_PREFIX as Qi, repairMalformedOrphansForReadOnly as Qn, stringifyValue as Qr, readConfigString as Qt, MULTI_REGION_RECREATE_BLOCKED_TYPES as R, IntrinsicResolutionRefusalError as Ra, getDefaultStateBucketName as Ri, malformedStateRefusalMessage as Rn, formatLockExpiry as Rr, isNamelessDynamicReferenceError as Rt, computeParameterTaint as S, renderAssemblyPathEscape as Sa, finchSecretArgvRefusal as Si, hasReadableOrphans as Sn, markSameGenerationBag as Sr, startInterruptWatch as St, resourcesNamingDeclaredParameter as T, resolveBucketRegion as Ta, isDockerClientEnvKey as Ti, isReadableResourceEntry as Tn, pathCrossesDottedKey as Tr, UNSPECIFIED_SKIP_REASON as Tt, coerceWarmThroughput as U, NestedStackChildDirectDestroyError as Ua, resolveSkipPrefix as Ui, refuseMalformedOrphansForOrphan as Un, hasReasonlessBaselineRefusal as Ur, WAFv2WebACLProvider as Ut, renderStatefulReason as V, LockError as Va, resolveAutoAssetStorage as Vi, refuseMalformedOrphans as Vn, exportNamesCarriedFrom as Vr, refStateLookupFromResource as Vt, isWarmThroughputDecrease as W, PartialFailureError as Wa, resolveStateBucketWithDefault as Wi, refuseMalformedOutputs as Wn, hasUnverifiableParameterRefusal as Wr, normalizeAwsTagsToCfn as Wt, gray as X, StateError as Xa, CFN_TEMPLATE_BODY_LIMIT as Xi, refuseMalformedResourcesForDestroy as Xn, shouldRetainResource as Xr, configIntegerRefusal as Xt, cyan as Y, StackTerminationProtectionError as Ya, ssmResolvedValueType as Yi, refuseMalformedResourcePropertiesForOrphan as Yn, orphansCarriedFrom as Yr, configBooleanRefusal as Yt, green as Z, SynthesisError as Za, CFN_TEMPLATE_URL_LIMIT as Zi, refuseMalformedState as Zn, AssetPublisher as Zr, configStringRefusal as Zt, bagHoldsSecretExpression as _, hasPlainPrototype$1 as _a, resolveDockerContextDirectory as _i, INTRINSIC_KEYS as _n, dynamicReferenceTokens as _r, maskerOrIdentity as _t, DeploymentEventsStore as a, producerRecordKey as aa, BOOTSTRAP_MARKER_PREFIX as ai, withSharedDrainBudget as an, isRetryableTransientError as ao, findActionableSilentDrops as ar, secretBearingStateKeyWarning as at, mergeNoChangeOutputs as b, absoluteAssemblyPathEscape as ba, describeDockerFailure as bi, UNREADABLE_RESOURCES_MAP_ROW as bn, isSingleDynamicReferenceToken as br, interruptWatchListenerCount as bt, replayFailedOperations as c, PARTITION_TABLE as ca, getBootstrapMarkerKey as ci, s3BucketDualStackDomainName as cn, markNonRetryable as co, withRetry as cr, IAMRoleProvider as ct, updatePartialMessage as d, AssemblyReader as da, readBootstrapMarkerBody as di, applyRoleArnIfSet as dn, describeAwsFailure as do, STATE_SOURCED_BASELINE_RULES as dr, definedAttributes as dt, uploadCfnTemplate as ea, buildAssetRedirectMap as ei, requireConfigArray as en, normalizeAwsError as eo, repairMalformedResourceEntriesForReadOnly as er, collectDeclaredOutputNames as et, updatePartialReason as f, failedStageNote as fa, validateAssetBucketName as fi, AWS_CREDENTIAL_ENV_KEYS as fn, safeStringify$1 as fo, STATE_SOURCED_CROSS_GENERATION_RULES as fr, stringifyIfAssigned as ft, computeImplicitDeleteEdges as g, hasOwnKey as ga, buildDockerImage as gi, DiffCalculator as gn, createSecretMasker as gr, maskDeep as gt, IMPLICIT_DELETE_DEPENDENCIES as h, defineOwnKey as ha, assertCdkLocalDockerContextContained as hi, envCredentialsAreAssumedRole as hn, carriesSecretMask as hr, createMaskedRetryLogger as ht, DeploymentEventsReader as i, producerCoordinateKey as ia, AssetModeResolver as ii, producerRegionsFromState as in, isMarkedNonRetryable as io, safeStackName as ir, secretBearing as it, isFinalSnapshotError as j, AssetError as ja, warnFinchArgvExposure as ji, malformedOrphansWarning as jn, LockManager as jr, IntrinsicFunctionResolver as jt, ccRoutedFinalSnapshotError as k, runWithStackAwsClients as ka, runDockerForeground as ki, malformedOrphanRecordsWarning as kn, redactSecretsForState as kr, disableInstanceApiTermination as kt, replayRollback as l, canonicalizeRegion as la, isCrossRegionRedirect as li, s3BucketRegionalDomainName as ln, markRedactedCause as lo, DagBuilder as lr, collectInlinePolicyNamesManagedBySiblings as lt, maskingRetryLogger as m, processStackMessages as ma, buildDenyExternalAccessPolicy as mi, callerEnvCredentials as mn, TEMPLATE_SOURCED_RULES as mr, wouldReturnToSdkProvider as mt, DEFAULT_RESOURCE_WARN_AFTER_MS as n, injectiveKey as na, loadPublishableAssetManifest as ni, requireConfigString as nn, pasteableCommand as no, repairMalformedResourcesForReadOnly as nr, exportAliasCollisionScrubWarning as nt, planFailedOps as o, decodeListingKey as oa, assertAssetBucketRegion as oi, s3BucketArn as on, isThrottlingError as oo, findSilentDropProperties as or, secretSafeKeyDisplay as ot, withResourceDeadline as p, globMatches as pa, validateContainerRepoName as pi, applyCallerIdentityCredentials as pn, __exportAll as po, STATE_SOURCED_READBACK_RULES as pr, ProviderRegistry as pt, formatResourceLine as q, ResourceUpdateNotSupportedError as qa, stateBucketExistenceConfirmed as qi, refuseMalformedResourceEntries as qn, isReadableBag as qr, coerceCfnBoolean as qt, DeployEngine as r, injectiveKeyPrefix as ra, rewriteTemplateAssetReferences as ri, classifyReplaySecretRegion as rn, shellQuote as ro, safeRegion as rr, isExportAliasCollision as rt, planRollback as s, expectedOwnerParam as sa, ensureAssetStorage as si, s3BucketDomainName as sn, isTransientServerError as so, describeTypeWithThrottleRetry as sr, getCurrentResourceSecrets as st, DEFAULT_RESOURCE_TIMEOUT_MS as t, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as ta, createAssetRedirectResolver as ti, requireConfigObject as tn, withErrorHandling as to, repairMalformedResourcePropertiesForReadOnly as tr, collectPublishedOutputNames as tt, resolveReplacementOldType as u, derivePartitionAndUrlSuffix as ua, parseBootstrapMarker as ui, s3BucketWebsiteUrl as un, retryClassificationText as uo, TemplateParser as ur, clearOnUpdateRemoval as ut, isSecretBearingReferenceString as v, nullPrototypeRecord as va, describeDockerCapturedOutput as vi, STATE_RESOURCES_MALFORMED as vn, errorCauseChain as vr, beginCommandInterruptScope as vt, reachableDivergentParameters as w, clearBucketRegionCache as wa, getDockerCmd as wi, hasReadableResources as wn, maskSecretsInText as wr, slowCcOperationTimeoutMs as wt, bindingSkippedOutputs as x, displayAssemblyPath as xa, dockerSpawnEnvWithSensitive as xi, displayLogicalId as xn, isUncertifiedBaselineMaskPosition as xr, isInterruptedWaitError as xt, keptWholeReasonText as y, ownValue as ya, describeDockerExecFailure as yi, UNREADABLE_ORPHANS_CONTAINER_ROW as yn, identityKeyFor as yr, endCommandInterruptScope as yt, isStatefulRecreateTargetForReplace as z, LocalInvokeBuildError as za, getLegacyStateBucketName as zi, refuseDivergentRecordRegionForDestroy as zn, CUSTOM_RESOURCE_RESPONSE_PREFIX as zr, isUnboundTemplateParameter as zt };
+//# sourceMappingURL=deploy-engine-xxVOQPPr.js.map