@go-to-k/cdkd 0.301.13 → 0.301.15

package/dist/{program-DJGAVTCe.js → program-CXvao3wc.js}

@@ -1,9 +1,9 @@
 import { a as runWithStackAwsClients, i as resetAwsClients, o as setAwsClients, t as AwsClients } from "./aws-clients-B_CEQGE1.js";
-import { A as STACK_REF_MAX_CODE_POINTS, B as plainIdentOr, E as withStackName, F as displayIdent, H as stringifyJsonPayload, I as displaySafe, L as displayStackName, N as cutMarker, O as SAFE_MSG_ALTERED_CHAR, P as displayAwsMessage, R as isPasteableIdent, T as withSkipPrefix, U as terminalSafe, V as safeMsg, W as truncateCodePoints, b as generateResourceName, c as reserveStdoutForPayload, g as PATTERN_B_RESOURCE_TYPES, h as PATTERN_B_NAME_PROPERTIES, i as safeStringify, j as UNRENDERABLE, k as SECRET_REF_MAX_CODE_POINTS, m as PATTERN_B_NAME_OPTIONS, n as describeAwsFailure, o as getLogger, p as getLiveRenderer, s as isStdoutReservedForPayload, u as runStackBuffered, v as derivesPatternBName, y as explicitNamePropertyFor } from "./aws-failure-text-YMKku1DS.js";
-import { $t as ambientCredentialConfig, Bn as shellBoundedDisplay, Bt as formatLockOperation, Cn as StateError, D as VALUE_NOT_SHOWN, Dn as normalizeAwsError, E as assertRegionMatch, Fn as isInertUnquoted, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gt as DEFAULT_STATE_PREFIX, Hn as withheldTargetClause, In as pasteableCommand, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kt as injectiveKey, Lt as buildLockContentionMessage, Nn as commandHole, On as withErrorHandling, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as plainOrDescribed, Rt as forceQuitRecoveryClause, Sn as StackTerminationProtectionError, T as RESOURCE_NOT_FOUND, Un as setPasteableRunFlags, Vn as shellQuote, Vt as formatLockOwner, Wn as setPasteableVerbFlags, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as PartialFailureError, bn as ResourceUpdateNotSupportedError, cn as DeployCancelledError, dn as LocalInvokeBuildError$1, dr as isTransientServerError, en as clientDefaultsFor, fn as LocalStartServiceError, fr as retryClassificationText, ft as logicalIdShown, gn as NestedStackChildDirectDestroyError, gr as markNonRetryable, hn as MalformedProducerRecordRefusalError, hr as isThrottlingError, in as CdkdError, it as isInterruptedWaitError, jn as SHELL_ACTIVE_WHY, kn as TIMEOUT_FLAG_RESOURCE_TYPE, ln as DynamicReferenceRegionAmbiguousError, mr as isMarkedNonRetryable, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nr as stripControlChars, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, rr as stripForDisplay, rt as interruptWatchListenerCount, s as readRecordedPrincipals, sr as isAmbiguousOutcomeError, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tr as escapeRegExp, tt as beginCommandInterruptScope, un as IntrinsicResolutionRefusalError, ur as isRetryableTransientError, vn as ProvisioningError, wn as SynthesisError, xn as StackHasActiveImportsError, yn as ResourceTimeoutError, zn as quotedOrDescribed, zt as formatLockExpiry } from "./iam-policy-targets-Df2XcLrn.js";
+import { A as SECRET_REF_MAX_CODE_POINTS, D as withStackName, E as withSkipPrefix, F as displayAwsMessage, G as truncateCodePoints, H as safeMsg, I as displayIdent, L as displaySafe, M as UNRENDERABLE, P as cutMarker, R as displayStackName, U as stringifyJsonPayload, V as plainIdentOr, W as terminalSafe, _ as PATTERN_B_RESOURCE_TYPES, a as safeStringify, b as explicitNamePropertyFor, c as isStdoutReservedForPayload, d as runStackBuffered, g as PATTERN_B_NAME_PROPERTIES, h as PATTERN_B_NAME_OPTIONS, j as STACK_REF_MAX_CODE_POINTS, k as SAFE_MSG_ALTERED_CHAR, l as reserveStdoutForPayload, m as getLiveRenderer, n as describeAwsFailure, s as getLogger, x as generateResourceName, y as derivesPatternBName, z as isPasteableIdent } from "./aws-failure-text-CdgZn80O.js";
+import { $t as ambientCredentialConfig, Bn as shellBoundedDisplay, Bt as formatLockOperation, Cn as StateError, D as VALUE_NOT_SHOWN, Dn as normalizeAwsError, E as assertRegionMatch, Fn as isInertUnquoted, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gt as DEFAULT_STATE_PREFIX, Hn as withheldTargetClause, In as pasteableCommand, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kt as injectiveKey, Lt as buildLockContentionMessage, Nn as commandHole, On as withErrorHandling, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as plainOrDescribed, Rt as forceQuitRecoveryClause, Sn as StackTerminationProtectionError, T as RESOURCE_NOT_FOUND, Un as setPasteableRunFlags, Vn as shellQuote, Vt as formatLockOwner, Wn as setPasteableVerbFlags, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as PartialFailureError, bn as ResourceUpdateNotSupportedError, cn as DeployCancelledError, dn as LocalInvokeBuildError$1, dr as isTransientServerError, en as clientDefaultsFor, fn as LocalStartServiceError, fr as retryClassificationText, ft as logicalIdShown, gn as NestedStackChildDirectDestroyError, gr as markNonRetryable, hn as MalformedProducerRecordRefusalError, hr as isThrottlingError, in as CdkdError, it as isInterruptedWaitError, jn as SHELL_ACTIVE_WHY, kn as TIMEOUT_FLAG_RESOURCE_TYPE, ln as DynamicReferenceRegionAmbiguousError, mr as isMarkedNonRetryable, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nr as stripControlChars, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, rr as stripForDisplay, rt as interruptWatchListenerCount, s as readRecordedPrincipals, sr as isAmbiguousOutcomeError, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tr as escapeRegExp, tt as beginCommandInterruptScope, un as IntrinsicResolutionRefusalError, ur as isRetryableTransientError, vn as ProvisioningError, wn as SynthesisError, xn as StackHasActiveImportsError, yn as ResourceTimeoutError, zn as quotedOrDescribed, zt as formatLockExpiry } from "./iam-policy-targets-Dap4bLyq.js";
 import { a as setAssumedRoleCredentials, i as getPreAssumeEnvCredentials, l as runInStackAwsScope, n as awsClientDefaults, r as getAssumedRoleCredentials, u as formatAuthority } from "./aws-client-defaults-DBXBcg0J.js";
-import { $ as DeploymentEventsStore, $a as repairMalformedOrphanRecordsForReadOnly, $c as runDockerStreaming, $i as UNREADABLE_ORPHANS_CONTAINER_ROW, $n as ATOMIC_FINAL_SNAPSHOT_TYPES, $o as noEchoOutputsComparison, $s as CrossPrefixReadError, $t as updatePartialReason, A as inheritedProvenanceForChildDiff, Ac as getBootstrapMarkerKey, Ai as producerRegionsFromState, Al as StageLoadError, An as bold, Ar as TemplateNoEchoReresolver, As as pathCrossesDottedKey, At as replayFailedOperations, B as conditionFingerprint, Ba as refuseMalformedResourceEntriesForDeploy, Bc as describeDockerExecFailure, Bi as keepsSecretReferenceToken, Bl as renderAssemblyPathEscape, Bn as createReadOnlyAttributeHealerFactory, Bs as provenPublicValue, Bt as recordUnderIdIsNotOwn, Ca as malformedResourceEntriesWarning, Cc as createAssetRedirectResolver, Ci as sendableAssumeRoleCommand, Cl as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, Cn as findDestructiveChanges, Cs as maskSecretsInText, Ct as makeForeignHolderScan, D as IMPLICIT_DELETE_DEPENDENCIES, Da as malformedStateRefusalMessage, Dc as BOOTSTRAP_MARKER_PREFIX, Di as envCredentialsAreAssumedRole, Dl as canonicalizeRegion, Dr as isCustomResource, Ds as DYNAMIC_REFERENCE_TOKEN_SCAN, Ea as malformedScrubResourceEntriesRefusalMessage, Ec as AssetModeResolver, Ei as callerEnvCredentials, El as PARTITION_TABLE, En as destroyStackRecordsView, Er as ccBrokenReason, F as findNestedTemplateTreeDefect, Fa as refuseMalformedOrphansForOrphan, Fc as validateContainerRepoName, Fi as getAccountInfo, Fl as nullPrototypeRecord, Fn as yellow, Fr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Fs as physicalNameCopiesOf, Ft as isJournaledOrphan, G as diffSecurity, Ga as refuseMalformedResourcePropertiesForDestroy, Gc as getDockerCmd, Gl as resolveBucketRegion, Gn as orphanRecordsPrintingBag, Go as canonicalCoordinates, Gr as deleteSkipReason, Gs as recordProvenPublicExpression, Gt as findNestedStackTypeChanges, H as parentSuppliedValues, Ha as refuseMalformedResourceEntriesForImport, Hc as dockerSpawnEnvWithSensitive, Hi as cfnRefValueFromPhysicalId, Hl as injectAwsRegion, Hn as journaledOrphanPrintingBag, Hr as UNSPECIFIED_SKIP_REASON, Hs as recordMaskOnlyValuesIn, Ht as resolveReplacementOldType, I as isAbsoluteAssetPath, Ia as refuseMalformedOutputs, Ic as buildDenyExternalAccessPolicy, Ii as isImpossibleEmptyStoredAttribute, Il as ownValue, In as noEchoAttributeNamesOf, Io as prefetchCreateOnlyPropertyPaths, Ir as applyCustomResourceResponseExpiration, It as isReplacementOrphan, J as mergeNoChangeOutputs, Ja as refuseMalformedResourcePropertiesForOrphan, Jc as partitionSensitiveEnv, Jo as maskReadbackAtCoordinates, Js as isSingleDynamicReferenceToken, K as isSecretBearingReferenceString, Ka as refuseMalformedResourcePropertiesForDrift, Kc as isDockerClientEnvKey, Ki as withSharedDrainBudget, Kn as secretNamePrintingBag, Ko as isMarkedCoordinate, Ks as wholeStringLeavesOf, L as listNestedTemplateRows, La as refuseMalformedOutputsForDestroy, Lc as buildDockerImage, Li as carriesDynamicReference, Ll as absoluteAssemblyPathEscape, Ln as noEchoComparisonForTemplate, Lo as templateResourceTypes, Lr as customResourceResponseExpirationWarning, Ls as recordPhysicalNameCopy, Lt as planFailedOps, M as findServiceTokenRefusals, Ma as refuseMalformedOrphanRecordsForDestroy, Mc as parseBootstrapMarker, Mi as coerceParameterTypedValue, Ml as defineOwnKey, Mn as gray, Mr as isCustomResourceType$1, Ms as inheritNestedStackParameterAssociations, Mt as removeProtectionTypeList, N as serviceTokenBlockingReason, Na as refuseMalformedOrphans, Nc as readBootstrapMarkerBody, Ni as isUnboundTemplateParameter, Nl as hasOwnKey, Nn as green, Ns as recordNestedStackParameterExpressions, Nt as recordAfterRollbackUpdate, O as computeImplicitDeleteEdges, Oa as previewableOrphanRecords, Oc as assertAssetBucketRegion, Oi as classifyRecordedSecretRegion, Ol as derivePartitionAndUrlSuffix, On as withStackRecords, Or as wouldReturnToSdkProvider, Os as dynamicReferenceTokens, P as childTemplateLoader, Pa as refuseMalformedOrphansForDestroy, Pc as validateAssetBucketName, Pi as parameterTypeMayLoseSecretIdentity, Pl as hasPlainPrototype, Pn as red, Pr as withPrintingSecrets, Pt as demoteSupersededOrphans, Q as DeploymentEventsReader, Qa as refuseMalformedState, Qc as runDockerForeground, Qi as STATE_RESOURCES_MALFORMED, Qn as extractDeploymentEventError, Qo as noEchoLeavesOf, Qs as rebuildClientForBucketRegion, Qt as updatePartialMessage, R as renderNestedTemplateTreeDefect, Ra as refuseMalformedResourceAttributesForOrphan, Rc as resolveDockerContextDirectory, Ri as carriesFetchableDynamicReference, Rl as describeFileReadFailure, Rn as noEchoExactEchoLeavesOf, Ro as describeTypeWithThrottleRetry, Rr as CloudControlProvider, Rs as splitGetAttStringForm, Rt as planRollback, Sa as malformedRenderedContainersWarning, Sc as buildAssetRedirectMap, Si as isIamRoleArn, Sl as uploadCfnTemplate, Sn as constructPathOf, Ss as maskSecretsInError, St as loadJournaledOrphans, Ta as malformedResourcesWarning, Tc as rewriteTemplateAssetReferences, Ti as applyCallerIdentityCredentials, Tl as expectedOwnerParam, Tr as ProviderRegistry, Ts as withPhysicalNameCopies, Tt as formatResourceLine, U as readRecordedConditionVerdicts, Ua as refuseMalformedResourceEntriesForImportSave, Uc as finchSecretArgvRefusal, Ui as isStalePlaceholderArnAttribute, Ul as injectedAwsRegionValue, Un as maskEventTextWithBoundBags, Uo as DagBuilder, Ur as deleteIndeterminateGuards, Us as recordNoEchoAttributeValues, Ut as seedsDeleteFirstGuard, V as conditionInputsFrom, Va as refuseMalformedResourceEntriesForDestroy, Vc as describeDockerFailure, Vi as AWS_NO_VALUE, Vl as resolveAssemblyPath, Vn as completedReplayEntries, Vr as RollbackInlinePolicyWriters, Vs as recordMaskOnlyValue, Vt as replacementNeverSwapped, W as withResourceDeadline, Wa as refuseMalformedResourceEntriesForOrphan, Wc as formatDockerLoginError, Wi as refStateLookupFromResource, Wn as namingSecretsWithRecordedNoEcho, Wo as TemplateParser, Wr as deleteLeftInPlace, Ws as recordNoEchoParameterFreshValue, Wt as orphanNeedsIdentity, X as makeSiblingClaimReader, Xa as refuseMalformedResourcesForDestroy, Xc as redactedCause, Xi as JSON_LISTING_HOLE_VALUE, Xn as stateSecretNameNeedles, Xo as maskedLeafCoordinatesOf, Xs as isLockInfoExpired, Y as makeCanonicalizePropertiesFn, Ya as refuseMalformedResourcesForDeploy, Yc as redactDockerArgvValues, Yi as declaresNoEcho, Yn as secretNamedRecordNeedles, Yo as maskWholeValue, Ys as LockManager, Z as planOrphanAdoption, Za as refuseMalformedResourcesForExport, Zc as redactedDockerCause, Zi as STATE_REGION_DIVERGED, Zn as storedSecretNameNeedles, Zo as noEchoCoordinatesOf, Zs as S3StateBackend, _a as malformedOrphanRowsKeptWarning, _c as shouldRetainResource, _i as recordedReferenceRegions, _l as ssmResolvedValueType, _n as isExportAliasCollision, _o as MULTI_REGION_RECREATE_BLOCKED_TYPES, _s as recordLogOnlyValue, _t as deleteJournaledOrphans, a as isProtectionValueActive, aa as hasReadableOutputs, ac as splitImportedOps, al as getDefaultStateBucketName, an as displayTextOrWithheld, ao as unpreviewableOrphanRecords, ar as isFinalSnapshotError, as as liveMatchesUnresolvedTokenFrame, at as displacedOpClause, ba as malformedOutputsRefusalMessage, bc as stringifyValue, bi as assertSendableRoleArn, bl as MIGRATE_TMP_PREFIX, bn as DEFAULT_RESOURCE_WARN_AFTER_MS, bo as renderStatefulReason, bs as createSecretMasker, bt as isHandledOrphan, ca as isReadableResourceEntry, cc as exportNamesCarriedFrom, cl as resolveApp, cn as secretBearingStateKeyWarning, co as withheldAccountClause, da as malformedExportSourceWarning, dc as hasUnverifiableParameterRefusal, di as resolveDynamicReferences, dl as resolveSkipPrefix, dn as exportNameNoEchoParameters, do as unwrittenCreateOnlyReplacement, dr as withCreateTokenLedger, ds as createUnionSecretMasker, ea as UNREADABLE_RESOURCES_MAP_ROW, ec as CrossPrefixScanCache, el as warnFinchArgvExposure, en as computeParameterTaint, eo as repairMalformedOrphansForReadOnly, er as PRE_DELETE_SNAPSHOT_TYPES, et as pendingRequestCount, fa as malformedLocalOutputsWarning, fc as importableOutputKeys, fi as producerLookupOver, fl as resolveStateBucketWithDefault, fn as exportNameSecretExposure, fs as hasMaskableValues, ft as revertedNestedRowIds, ga as malformedOrphanRecordsWarning, gc as orphansCarriedFrom, gi as recordedOutputReferenceRegions, gl as warnDeprecatedNoPrefixCliFlag, gn as collectPublishedOutputNames, go as shownType, gs as recordLogOnlyParameterValue, gt as withNestedStackContext, ha as malformedOrphanRecordsRefusalMessage, hc as orphansAfterRollback, hl as stateBucketExistenceConfirmed, hn as collectDeclaredOutputNames, ho as findReplacedReadersOfRecreateTargets, hs as printingCorpusOf, ht as getCurrentNestedStackContext, i as PROTECTION_PROPERTY_BY_TYPE, ia as hasReadableOrphans, ic as isNotImplemented, ii as poisonRenderedSpellingsCollidingIn, il as synthesisStatusMessage, in as WITHHELD_NAME_DISPLAY, io as repairMalformedResourcesForReadOnly, ir as effectiveDeletionPolicy, is as valueAtCoordinate, it as NESTED_PENDING_PARENT_REASON, j as deferredServiceTokenWarning, ja as refuseMalformedOrphanRecords, jc as isCrossRegionRedirect, ji as regionLessSecretName, jl as processStackMessages, jn as cyan, jr as readsNoEchoDeleteValues, js as identityKeyFor, jt as replayRollback, k as crossStackOutputProvenanceSource, ka as refuseDivergentRecordRegionForDestroy, kc as ensureAssetStorage, ki as classifyReplaySecretRegion, kl as AssemblyReader, ks as isUncertifiedBaselineMaskPosition, la as malformedDriftResourcePropertiesWarning, lc as hasReadableExportSet, ll as resolveAutoAssetStorage, ln as secretSafeKeyDisplay, lo as findActionableSilentDrops, lr as ledgerForStack, lt as nestedChildStackName$1, ma as malformedLocalResourcesWarning, mc as isReadableBag, mi as keepHeldTokenProvenance, ml as resolveUseCdkBootstrapAssets, mn as noEchoParameterValueSeed, mo as hasNoCloudControlHandlers, ms as logOnlyValueCount, mt as collectNestedChildUnaddressed, n as recordedProtectionEvidence, na as deployRefusesOrphanRowsReason, nc as crossPrefixDeniedWarning, ni as INTRINSIC_KEYS, nl as getDockerImageBySourceHash, nn as reachableDivergentParameters, no as repairMalformedResourceEntriesForReadOnly, nr as ccRoutedFinalSnapshotError, ns as readsNoEchoSource, nt as keptForReadoption, o as perType, oa as hasReadableResources, oc as acceptedCreateOnlyDropsOf, ol as getLegacyStateBucketName, on as exportAliasCollisionScrubWarning, oo as unreadableOrphanRecords, or as refusesFinalSnapshot, ot as displacedPhysicalIdShown, pa as malformedLocalResourceEntriesWarning, pc as importableOutputs, pi as refuseUnreadableCdkCrossAccountRefs, pl as resolveStateBucketWithDefaultAndSource, pn as isWholeDynamicReferenceValue, po as NO_CC_HANDLERS_REASON, ps as literalSplitDelimitersOf, pt as withNestedRevertRun, q as keptWholeReasonText, qa as refuseMalformedResourcePropertiesForExport, qc as isMalformedEnvKey, qi as parameterInputsFor, qn as secretNamePrintingBags, qo as maskAtCoordinates, qr as isWaitAbandonedError, qs as WHOLE_DYNAMIC_REFERENCE_PATTERN, qt as inheritProducerRegions, r as recordedProtectionNote, ra as displayLogicalId, rc as isAccessDenied, ri as IntrinsicFunctionResolver, rl as Synthesizer, rn as resourcesNamingDeclaredParameter, ro as repairMalformedResourcePropertiesForReadOnly, rr as createPreDeleteFinalSnapshot, rs as recordedNoEchoValuesOf, rt as recordRetainedForReadoption, s as readProtection, sa as isReadableOrphanRecord, sc as describeRegionValueKind, sl as loadCdkJson, sn as secretBearing, so as unreadableResourceEntries, sr as unsupportedFinalSnapshotError, ss as redactForState, st as dropSettledNestedJournals, t as DeployEngine, ta as accountArgs, tc as applyCrossPrefixScan, ti as DiffCalculator, tl as AssetManifestLoader, tn as namesAnyDeclaredParameter, to as repairMalformedOutputsForReadOnly, tr as buildFinalSnapshotIdentifier, ts as readbackPathFor, tt as resolvePendingCloudControlRequests, ua as malformedExportNamesWarning, uc as hasReasonlessBaselineRefusal, ul as resolveCaptureObservedState, un as carriedExportAliasExposure, us as carryLogOnlyValues, ut as recordDisplacedSkips, va as malformedOrphansRefusalMessage, vc as AssetPublisher, vi as applyRoleArnIfSet, vl as CFN_TEMPLATE_BODY_LIMIT, vn as bindingSkippedOutputs, vo as isStatefulRecreateTargetForReplace, vs as shareLogOnlyValues, vt as dropFailedCommands, wa as malformedResourcePropertiesWarning, wc as loadPublishableAssetManifest, wi as AWS_CREDENTIAL_ENV_KEYS, wl as decodeListingKey, wn as formatDestructiveChange, wr as CC_BROKEN_REASON, ws as scrubResourceRecord, wt as sameJournaledOrphans, xa as malformedOutputsWarning, xc as WorkGraph, xi as explicitRoleArnOrThrow, xl as findLargeInlineResources, xn as maskingRetryLogger, xs as errorCauseChain, xt as journaledOrphanLines, ya as malformedOrphansWarning, yc as isSensitiveAttributeName, yi as assertFlagRoleArn, yl as CFN_TEMPLATE_URL_LIMIT, yn as DEFAULT_RESOURCE_TIMEOUT_MS, yo as isStatefulRecreateTargetSync, ys as unionOfSecretBags, yt as dropFailedHint, z as templateIdentity, za as refuseMalformedResourceEntries, zc as describeDockerCapturedOutput, zi as isNamelessDynamicReferenceError, zl as displayAssemblyPath, zn as noEchoParameterNamesOf, zo as withRetry, zr as slowCcOperationTimeoutMs, zs as carriesSecretMask, zt as recheckFailedPlan } from "./deploy-engine-DnImYUXS.js";
-import { t as getCdkdVersion } from "./version-CsCqmOl6.js";
+import { $ as DeploymentEventsStore, $a as repairMalformedOrphanRecordsForReadOnly, $c as runDockerStreaming, $i as UNREADABLE_ORPHANS_CONTAINER_ROW, $n as ATOMIC_FINAL_SNAPSHOT_TYPES, $o as noEchoOutputsComparison, $s as CrossPrefixReadError, $t as updatePartialReason, A as inheritedProvenanceForChildDiff, Ac as getBootstrapMarkerKey, Ai as producerRegionsFromState, Al as StageLoadError, An as bold, Ar as TemplateNoEchoReresolver, As as pathCrossesDottedKey, At as replayFailedOperations, B as conditionFingerprint, Ba as refuseMalformedResourceEntriesForDeploy, Bc as describeDockerExecFailure, Bi as keepsSecretReferenceToken, Bl as renderAssemblyPathEscape, Bn as createReadOnlyAttributeHealerFactory, Bs as provenPublicValue, Bt as recordUnderIdIsNotOwn, Ca as malformedResourceEntriesWarning, Cc as createAssetRedirectResolver, Ci as sendableAssumeRoleCommand, Cl as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, Cn as findDestructiveChanges, Cs as maskSecretsInText, Ct as makeForeignHolderScan, D as IMPLICIT_DELETE_DEPENDENCIES, Da as malformedStateRefusalMessage, Dc as BOOTSTRAP_MARKER_PREFIX, Di as envCredentialsAreAssumedRole, Dl as canonicalizeRegion, Dr as isCustomResource, Ds as DYNAMIC_REFERENCE_TOKEN_SCAN, Ea as malformedScrubResourceEntriesRefusalMessage, Ec as AssetModeResolver, Ei as callerEnvCredentials, El as PARTITION_TABLE, En as destroyStackRecordsView, Er as ccBrokenReason, F as findNestedTemplateTreeDefect, Fa as refuseMalformedOrphansForOrphan, Fc as validateContainerRepoName, Fi as getAccountInfo, Fl as nullPrototypeRecord, Fn as yellow, Fr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Fs as physicalNameCopiesOf, Ft as isJournaledOrphan, G as diffSecurity, Ga as refuseMalformedResourcePropertiesForDestroy, Gc as getDockerCmd, Gl as resolveBucketRegion, Gn as orphanRecordsPrintingBag, Go as canonicalCoordinates, Gr as deleteSkipReason, Gs as recordProvenPublicExpression, Gt as findNestedStackTypeChanges, H as parentSuppliedValues, Ha as refuseMalformedResourceEntriesForImport, Hc as dockerSpawnEnvWithSensitive, Hi as cfnRefValueFromPhysicalId, Hl as injectAwsRegion, Hn as journaledOrphanPrintingBag, Hr as UNSPECIFIED_SKIP_REASON, Hs as recordMaskOnlyValuesIn, Ht as resolveReplacementOldType, I as isAbsoluteAssetPath, Ia as refuseMalformedOutputs, Ic as buildDenyExternalAccessPolicy, Ii as isImpossibleEmptyStoredAttribute, Il as ownValue, In as noEchoAttributeNamesOf, Io as prefetchCreateOnlyPropertyPaths, Ir as applyCustomResourceResponseExpiration, It as isReplacementOrphan, J as mergeNoChangeOutputs, Ja as refuseMalformedResourcePropertiesForOrphan, Jc as partitionSensitiveEnv, Jo as maskReadbackAtCoordinates, Js as isSingleDynamicReferenceToken, K as isSecretBearingReferenceString, Ka as refuseMalformedResourcePropertiesForDrift, Kc as isDockerClientEnvKey, Ki as withSharedDrainBudget, Kn as secretNamePrintingBag, Ko as isMarkedCoordinate, Ks as wholeStringLeavesOf, L as listNestedTemplateRows, La as refuseMalformedOutputsForDestroy, Lc as buildDockerImage, Li as carriesDynamicReference, Ll as absoluteAssemblyPathEscape, Ln as noEchoComparisonForTemplate, Lo as templateResourceTypes, Lr as customResourceResponseExpirationWarning, Ls as recordPhysicalNameCopy, Lt as planFailedOps, M as findServiceTokenRefusals, Ma as refuseMalformedOrphanRecordsForDestroy, Mc as parseBootstrapMarker, Mi as coerceParameterTypedValue, Ml as defineOwnKey, Mn as gray, Mr as isCustomResourceType$1, Ms as inheritNestedStackParameterAssociations, Mt as removeProtectionTypeList, N as serviceTokenBlockingReason, Na as refuseMalformedOrphans, Nc as readBootstrapMarkerBody, Ni as isUnboundTemplateParameter, Nl as hasOwnKey, Nn as green, Ns as recordNestedStackParameterExpressions, Nt as recordAfterRollbackUpdate, O as computeImplicitDeleteEdges, Oa as previewableOrphanRecords, Oc as assertAssetBucketRegion, Oi as classifyRecordedSecretRegion, Ol as derivePartitionAndUrlSuffix, On as withStackRecords, Or as wouldReturnToSdkProvider, Os as dynamicReferenceTokens, P as childTemplateLoader, Pa as refuseMalformedOrphansForDestroy, Pc as validateAssetBucketName, Pi as parameterTypeMayLoseSecretIdentity, Pl as hasPlainPrototype, Pn as red, Pr as withPrintingSecrets, Pt as demoteSupersededOrphans, Q as DeploymentEventsReader, Qa as refuseMalformedState, Qc as runDockerForeground, Qi as STATE_RESOURCES_MALFORMED, Qn as extractDeploymentEventError, Qo as noEchoLeavesOf, Qs as rebuildClientForBucketRegion, Qt as updatePartialMessage, R as renderNestedTemplateTreeDefect, Ra as refuseMalformedResourceAttributesForOrphan, Rc as resolveDockerContextDirectory, Ri as carriesFetchableDynamicReference, Rl as describeFileReadFailure, Rn as noEchoExactEchoLeavesOf, Ro as describeTypeWithThrottleRetry, Rr as CloudControlProvider, Rs as splitGetAttStringForm, Rt as planRollback, Sa as malformedRenderedContainersWarning, Sc as buildAssetRedirectMap, Si as isIamRoleArn, Sl as uploadCfnTemplate, Sn as constructPathOf, Ss as maskSecretsInError, St as loadJournaledOrphans, Ta as malformedResourcesWarning, Tc as rewriteTemplateAssetReferences, Ti as applyCallerIdentityCredentials, Tl as expectedOwnerParam, Tr as ProviderRegistry, Ts as withPhysicalNameCopies, Tt as formatResourceLine, U as readRecordedConditionVerdicts, Ua as refuseMalformedResourceEntriesForImportSave, Uc as finchSecretArgvRefusal, Ui as isStalePlaceholderArnAttribute, Ul as injectedAwsRegionValue, Un as maskEventTextWithBoundBags, Uo as DagBuilder, Ur as deleteIndeterminateGuards, Us as recordNoEchoAttributeValues, Ut as seedsDeleteFirstGuard, V as conditionInputsFrom, Va as refuseMalformedResourceEntriesForDestroy, Vc as describeDockerFailure, Vi as AWS_NO_VALUE, Vl as resolveAssemblyPath, Vn as completedReplayEntries, Vr as RollbackInlinePolicyWriters, Vs as recordMaskOnlyValue, Vt as replacementNeverSwapped, W as withResourceDeadline, Wa as refuseMalformedResourceEntriesForOrphan, Wc as formatDockerLoginError, Wi as refStateLookupFromResource, Wn as namingSecretsWithRecordedNoEcho, Wo as TemplateParser, Wr as deleteLeftInPlace, Ws as recordNoEchoParameterFreshValue, Wt as orphanNeedsIdentity, X as makeSiblingClaimReader, Xa as refuseMalformedResourcesForDestroy, Xc as redactedCause, Xi as JSON_LISTING_HOLE_VALUE, Xn as stateSecretNameNeedles, Xo as maskedLeafCoordinatesOf, Xs as isLockInfoExpired, Y as makeCanonicalizePropertiesFn, Ya as refuseMalformedResourcesForDeploy, Yc as redactDockerArgvValues, Yi as declaresNoEcho, Yn as secretNamedRecordNeedles, Yo as maskWholeValue, Ys as LockManager, Z as planOrphanAdoption, Za as refuseMalformedResourcesForExport, Zc as redactedDockerCause, Zi as STATE_REGION_DIVERGED, Zn as storedSecretNameNeedles, Zo as noEchoCoordinatesOf, Zs as S3StateBackend, _a as malformedOrphanRowsKeptWarning, _c as shouldRetainResource, _i as recordedReferenceRegions, _l as ssmResolvedValueType, _n as isExportAliasCollision, _o as MULTI_REGION_RECREATE_BLOCKED_TYPES, _s as recordLogOnlyValue, _t as deleteJournaledOrphans, a as isProtectionValueActive, aa as hasReadableOutputs, ac as splitImportedOps, al as getDefaultStateBucketName, an as displayTextOrWithheld, ao as unpreviewableOrphanRecords, ar as isFinalSnapshotError, as as liveMatchesUnresolvedTokenFrame, at as displacedOpClause, ba as malformedOutputsRefusalMessage, bc as stringifyValue, bi as assertSendableRoleArn, bl as MIGRATE_TMP_PREFIX, bn as DEFAULT_RESOURCE_WARN_AFTER_MS, bo as renderStatefulReason, bs as createSecretMasker, bt as isHandledOrphan, ca as isReadableResourceEntry, cc as exportNamesCarriedFrom, cl as resolveApp, cn as secretBearingStateKeyWarning, co as withheldAccountClause, da as malformedExportSourceWarning, dc as hasUnverifiableParameterRefusal, di as resolveDynamicReferences, dl as resolveSkipPrefix, dn as exportNameNoEchoParameters, do as unwrittenCreateOnlyReplacement, dr as withCreateTokenLedger, ds as createUnionSecretMasker, ea as UNREADABLE_RESOURCES_MAP_ROW, ec as CrossPrefixScanCache, el as warnFinchArgvExposure, en as computeParameterTaint, eo as repairMalformedOrphansForReadOnly, er as PRE_DELETE_SNAPSHOT_TYPES, et as pendingRequestCount, fa as malformedLocalOutputsWarning, fc as importableOutputKeys, fi as producerLookupOver, fl as resolveStateBucketWithDefault, fn as exportNameSecretExposure, fs as hasMaskableValues, ft as revertedNestedRowIds, ga as malformedOrphanRecordsWarning, gc as orphansCarriedFrom, gi as recordedOutputReferenceRegions, gl as warnDeprecatedNoPrefixCliFlag, gn as collectPublishedOutputNames, go as shownType, gs as recordLogOnlyParameterValue, gt as withNestedStackContext, ha as malformedOrphanRecordsRefusalMessage, hc as orphansAfterRollback, hl as stateBucketExistenceConfirmed, hn as collectDeclaredOutputNames, ho as findReplacedReadersOfRecreateTargets, hs as printingCorpusOf, ht as getCurrentNestedStackContext, i as PROTECTION_PROPERTY_BY_TYPE, ia as hasReadableOrphans, ic as isNotImplemented, ii as poisonRenderedSpellingsCollidingIn, il as synthesisStatusMessage, in as WITHHELD_NAME_DISPLAY, io as repairMalformedResourcesForReadOnly, ir as effectiveDeletionPolicy, is as valueAtCoordinate, it as NESTED_PENDING_PARENT_REASON, j as deferredServiceTokenWarning, ja as refuseMalformedOrphanRecords, jc as isCrossRegionRedirect, ji as regionLessSecretName, jl as processStackMessages, jn as cyan, jr as readsNoEchoDeleteValues, js as identityKeyFor, jt as replayRollback, k as crossStackOutputProvenanceSource, ka as refuseDivergentRecordRegionForDestroy, kc as ensureAssetStorage, ki as classifyReplaySecretRegion, kl as AssemblyReader, ks as isUncertifiedBaselineMaskPosition, la as malformedDriftResourcePropertiesWarning, lc as hasReadableExportSet, ll as resolveAutoAssetStorage, ln as secretSafeKeyDisplay, lo as findActionableSilentDrops, lr as ledgerForStack, lt as nestedChildStackName$1, ma as malformedLocalResourcesWarning, mc as isReadableBag, mi as keepHeldTokenProvenance, ml as resolveUseCdkBootstrapAssets, mn as noEchoParameterValueSeed, mo as hasNoCloudControlHandlers, ms as logOnlyValueCount, mt as collectNestedChildUnaddressed, n as recordedProtectionEvidence, na as deployRefusesOrphanRowsReason, nc as crossPrefixDeniedWarning, ni as INTRINSIC_KEYS, nl as getDockerImageBySourceHash, nn as reachableDivergentParameters, no as repairMalformedResourceEntriesForReadOnly, nr as ccRoutedFinalSnapshotError, ns as readsNoEchoSource, nt as keptForReadoption, o as perType, oa as hasReadableResources, oc as acceptedCreateOnlyDropsOf, ol as getLegacyStateBucketName, on as exportAliasCollisionScrubWarning, oo as unreadableOrphanRecords, or as refusesFinalSnapshot, ot as displacedPhysicalIdShown, pa as malformedLocalResourceEntriesWarning, pc as importableOutputs, pi as refuseUnreadableCdkCrossAccountRefs, pl as resolveStateBucketWithDefaultAndSource, pn as isWholeDynamicReferenceValue, po as NO_CC_HANDLERS_REASON, ps as literalSplitDelimitersOf, pt as withNestedRevertRun, q as keptWholeReasonText, qa as refuseMalformedResourcePropertiesForExport, qc as isMalformedEnvKey, qi as parameterInputsFor, qn as secretNamePrintingBags, qo as maskAtCoordinates, qr as isWaitAbandonedError, qs as WHOLE_DYNAMIC_REFERENCE_PATTERN, qt as inheritProducerRegions, r as recordedProtectionNote, ra as displayLogicalId, rc as isAccessDenied, ri as IntrinsicFunctionResolver, rl as Synthesizer, rn as resourcesNamingDeclaredParameter, ro as repairMalformedResourcePropertiesForReadOnly, rr as createPreDeleteFinalSnapshot, rs as recordedNoEchoValuesOf, rt as recordRetainedForReadoption, s as readProtection, sa as isReadableOrphanRecord, sc as describeRegionValueKind, sl as loadCdkJson, sn as secretBearing, so as unreadableResourceEntries, sr as unsupportedFinalSnapshotError, ss as redactForState, st as dropSettledNestedJournals, t as DeployEngine, ta as accountArgs, tc as applyCrossPrefixScan, ti as DiffCalculator, tl as AssetManifestLoader, tn as namesAnyDeclaredParameter, to as repairMalformedOutputsForReadOnly, tr as buildFinalSnapshotIdentifier, ts as readbackPathFor, tt as resolvePendingCloudControlRequests, ua as malformedExportNamesWarning, uc as hasReasonlessBaselineRefusal, ul as resolveCaptureObservedState, un as carriedExportAliasExposure, us as carryLogOnlyValues, ut as recordDisplacedSkips, va as malformedOrphansRefusalMessage, vc as AssetPublisher, vi as applyRoleArnIfSet, vl as CFN_TEMPLATE_BODY_LIMIT, vn as bindingSkippedOutputs, vo as isStatefulRecreateTargetForReplace, vs as shareLogOnlyValues, vt as dropFailedCommands, wa as malformedResourcePropertiesWarning, wc as loadPublishableAssetManifest, wi as AWS_CREDENTIAL_ENV_KEYS, wl as decodeListingKey, wn as formatDestructiveChange, wr as CC_BROKEN_REASON, ws as scrubResourceRecord, wt as sameJournaledOrphans, xa as malformedOutputsWarning, xc as WorkGraph, xi as explicitRoleArnOrThrow, xl as findLargeInlineResources, xn as maskingRetryLogger, xs as errorCauseChain, xt as journaledOrphanLines, ya as malformedOrphansWarning, yc as isSensitiveAttributeName, yi as assertFlagRoleArn, yl as CFN_TEMPLATE_URL_LIMIT, yn as DEFAULT_RESOURCE_TIMEOUT_MS, yo as isStatefulRecreateTargetSync, ys as unionOfSecretBags, yt as dropFailedHint, z as templateIdentity, za as refuseMalformedResourceEntries, zc as describeDockerCapturedOutput, zi as isNamelessDynamicReferenceError, zl as displayAssemblyPath, zn as noEchoParameterNamesOf, zo as withRetry, zr as slowCcOperationTimeoutMs, zs as carriesSecretMask, zt as recheckFailedPlan } from "./deploy-engine-Dy7N7-Il.js";
+import { t as getCdkdVersion } from "./version-DadUoJjK.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutBucketVersioningCommand, PutObjectCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { GetRoleCommand, GetUserCommand } from "@aws-sdk/client-iam";
@@ -2559,7 +2559,7 @@ function collectCrossStackRefs(node, onRef, unconditional) {
 //#region src/provisioning/register-providers.ts
 let providerClasses;
 function loadProviderClasses() {
-	providerClasses ??= import("./provider-classes-BUvql6rX.js");
+	providerClasses ??= import("./provider-classes-CBbWGsK0.js");
 	return providerClasses;
 }
 function registerAllProviders(registry, classes) {
@@ -11852,17 +11852,19 @@ async function runDestroyForStack(stackName, state, ctx) {
 			region: stackRegion,
 			clients: scopeClients
 		};
-		const registry = new ProviderRegistry();
 		const nestedContext = getCurrentNestedStackContext();
-		const destroyInScope = () => destroyStackInRegion(stackName, state, ctx, {
-			clients: scopeClients,
-			registry
+		return await runInStackAwsScope(awsScope, () => {
+			const registry = new ProviderRegistry();
+			const destroyInScope = () => destroyStackInRegion(stackName, state, ctx, {
+				clients: scopeClients,
+				registry
+			});
+			return nestedContext === void 0 ? destroyInScope() : withNestedStackContext({
+				...nestedContext,
+				providerRegistry: registry,
+				awsClients: scopeClients
+			}, destroyInScope);
 		});
-		return await runInStackAwsScope(awsScope, () => nestedContext === void 0 ? destroyInScope() : withNestedStackContext({
-			...nestedContext,
-			providerRegistry: registry,
-			awsClients: scopeClients
-		}, destroyInScope));
 	} finally {
 		try {
 			scopeClients.destroy();
@@ -29562,4 +29564,4 @@ function collectVerbFlags(program) {
 
 //#endregion
 export { resolveSecretDerivedPrincipals as a, buildProgram, isResolvableSecretPrincipalList as i, runDestroyForStack as n, canonicalizeIpProtocolValue as o, holdsUnprovenSecretPrincipalToken as r, resolvedResourceTimeoutMs as s, canonicalizeIpv4Cidr as t };
-//# sourceMappingURL=program-DJGAVTCe.js.map
+//# sourceMappingURL=program-CXvao3wc.js.map