@go-to-k/cdkd 0.301.6 → 0.301.7

package/dist/{program-Cqk1ZTsY.js → program-CiTz5-_D.js}

@@ -1,9 +1,9 @@
 import { a as runWithStackAwsClients, i as resetAwsClients, o as setAwsClients, t as AwsClients } from "./aws-clients-B_CEQGE1.js";
 import { A as UNRENDERABLE, B as safeMsg, D as SAFE_MSG_ALTERED_CHAR, F as displaySafe, H as terminalSafe, I as displayStackName, L as isPasteableIdent, M as cutMarker, N as displayAwsMessage, O as SECRET_REF_MAX_CODE_POINTS, P as displayIdent, T as withStackName, U as truncateCodePoints, V as stringifyJsonPayload, _ as derivesPatternBName, a as getLogger, f as getLiveRenderer, h as PATTERN_B_RESOURCE_TYPES, k as STACK_REF_MAX_CODE_POINTS, l as runStackBuffered, m as PATTERN_B_NAME_PROPERTIES, o as isStdoutReservedForPayload, p as PATTERN_B_NAME_OPTIONS, r as safeStringify, s as reserveStdoutForPayload, t as describeAwsFailure, v as explicitNamePropertyFor, w as withSkipPrefix, y as generateResourceName, z as plainIdentOr } from "./aws-failure-text-BEQfs6za.js";
-import { $t as ambientCredentialConfig, Bn as shellBoundedDisplay, Bt as formatLockOperation, Cn as StateError, D as VALUE_NOT_SHOWN, Dn as normalizeAwsError, E as assertRegionMatch, Fn as isInertUnquoted, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gt as DEFAULT_STATE_PREFIX, Hn as withheldTargetClause, In as pasteableCommand, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kt as injectiveKey, Lt as buildLockContentionMessage, Nn as commandHole, On as withErrorHandling, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as plainOrDescribed, Rt as forceQuitRecoveryClause, Sn as StackTerminationProtectionError, T as RESOURCE_NOT_FOUND, Un as setPasteableRunFlags, Vn as shellQuote, Vt as formatLockOwner, Wn as setPasteableVerbFlags, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as PartialFailureError, ar as isRetryableTransientError, bn as ResourceUpdateNotSupportedError, cn as DeployCancelledError, dn as LocalInvokeBuildError$1, dr as markNonRetryable, en as clientDefaultsFor, fn as LocalStartServiceError, ft as logicalIdShown, gn as NestedStackChildDirectDestroyError, hn as MalformedProducerRecordRefusalError, in as CdkdError, it as isInterruptedWaitError, jn as SHELL_ACTIVE_WHY, kn as TIMEOUT_FLAG_RESOURCE_TYPE, ln as DynamicReferenceRegionAmbiguousError, lr as isMarkedNonRetryable, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nr as isAmbiguousOutcomeError, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, or as isTransientServerError, rt as interruptWatchListenerCount, s as readRecordedPrincipals, sr as retryClassificationText, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tt as beginCommandInterruptScope, un as IntrinsicResolutionRefusalError, ur as isThrottlingError, vn as ProvisioningError, wn as SynthesisError, xn as StackHasActiveImportsError, yn as ResourceTimeoutError, zn as quotedOrDescribed, zt as formatLockExpiry } from "./iam-policy-targets-BkeM7IXi.js";
+import { $t as ambientCredentialConfig, Bn as shellBoundedDisplay, Bt as formatLockOperation, Cn as StateError, D as VALUE_NOT_SHOWN, Dn as normalizeAwsError, E as assertRegionMatch, Fn as isInertUnquoted, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gt as DEFAULT_STATE_PREFIX, Hn as withheldTargetClause, In as pasteableCommand, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kt as injectiveKey, Lt as buildLockContentionMessage, Nn as commandHole, On as withErrorHandling, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as plainOrDescribed, Rt as forceQuitRecoveryClause, Sn as StackTerminationProtectionError, T as RESOURCE_NOT_FOUND, Un as setPasteableRunFlags, Vn as shellQuote, Vt as formatLockOwner, Wn as setPasteableVerbFlags, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as PartialFailureError, bn as ResourceUpdateNotSupportedError, cn as DeployCancelledError, cr as retryClassificationText, dn as LocalInvokeBuildError$1, dr as isThrottlingError, en as clientDefaultsFor, fn as LocalStartServiceError, fr as markNonRetryable, ft as logicalIdShown, gn as NestedStackChildDirectDestroyError, hn as MalformedProducerRecordRefusalError, in as CdkdError, it as isInterruptedWaitError, jn as SHELL_ACTIVE_WHY, kn as TIMEOUT_FLAG_RESOURCE_TYPE, ln as DynamicReferenceRegionAmbiguousError, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, or as isRetryableTransientError, rr as isAmbiguousOutcomeError, rt as interruptWatchListenerCount, s as readRecordedPrincipals, sr as isTransientServerError, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tt as beginCommandInterruptScope, un as IntrinsicResolutionRefusalError, ur as isMarkedNonRetryable, vn as ProvisioningError, wn as SynthesisError, xn as StackHasActiveImportsError, yn as ResourceTimeoutError, zn as quotedOrDescribed, zt as formatLockExpiry } from "./iam-policy-targets-LyArt3ew.js";
 import { a as setAssumedRoleCredentials, i as getPreAssumeEnvCredentials, l as runInStackAwsScope, n as awsClientDefaults, r as getAssumedRoleCredentials, u as formatAuthority } from "./aws-client-defaults-DBXBcg0J.js";
-import { $ as resolvePendingCloudControlRequests, $a as repairMalformedOutputsForReadOnly, $c as warnFinchArgvExposure, $i as accountArgs, $n as buildFinalSnapshotIdentifier, $o as readbackPathFor, $r as DiffCalculator, $s as CrossPrefixScanCache, $t as namesAnyDeclaredParameter, A as findServiceTokenRefusals, Aa as refuseMalformedOrphanRecordsForDestroy, Ac as isCrossRegionRedirect, Ai as coerceParameterTypedValue, Al as derivePartitionAndUrlSuffix, An as gray, Ar as isCustomResourceType$1, As as inheritNestedStackParameterAssociations, At as removeProtectionTypeList, B as parentSuppliedValues, Ba as refuseMalformedResourceEntriesForImport, Bc as describeDockerFailure, Bi as cfnRefValueFromPhysicalId, Bl as describeFileReadFailure, Bn as journaledOrphanPrintingBag, Br as UNSPECIFIED_SKIP_REASON, Bs as recordMaskOnlyValuesIn, Bt as resolveReplacementOldType, Ca as malformedResourcesWarning, Cc as loadPublishableAssetManifest, Ci as applyCallerIdentityCredentials, Cl as findLargeInlineResources, Cr as ProviderRegistry, Cs as withPhysicalNameCopies, Ct as formatResourceLine, D as crossStackOutputProvenanceSource, Da as refuseDivergentRecordRegionForDestroy, Dc as assertAssetBucketRegion, Di as classifyReplaySecretRegion, Dl as expectedOwnerParam, Ds as isUncertifiedBaselineMaskPosition, E as computeImplicitDeleteEdges, Ea as previewableOrphanRecords, Ec as BOOTSTRAP_MARKER_PREFIX, Ei as classifyRecordedSecretRegion, El as decodeListingKey, En as withStackRecords, Er as wouldReturnToSdkProvider, Es as dynamicReferenceTokens, F as listNestedTemplateRows, Fa as refuseMalformedOutputsForDestroy, Fc as buildDenyExternalAccessPolicy, Fi as carriesDynamicReference, Fl as hasOwnKey, Fn as noEchoComparisonForTemplate, Fo as templateResourceTypes, Fr as customResourceResponseExpirationWarning, Fs as recordPhysicalNameCopy, Ft as planFailedOps, G as keptWholeReasonText, Ga as refuseMalformedResourcePropertiesForExport, Gc as isDockerClientEnvKey, Gi as parameterInputsFor, Gl as injectedAwsRegionValue, Gn as secretNamePrintingBags, Go as maskAtCoordinates, Gr as isWaitAbandonedError, Gs as STATE_SOURCED_CROSS_GENERATION_RULES, Gt as inheritProducerRegions, H as withResourceDeadline, Ha as refuseMalformedResourceEntriesForOrphan, Hc as finchSecretArgvRefusal, Hi as refStateLookupFromResource, Hl as renderAssemblyPathEscape, Hn as namingSecretsWithRecordedNoEcho, Ho as TemplateParser, Hr as deleteLeftInPlace, Hs as recordNoEchoParameterFreshValue, Ht as orphanNeedsIdentity, I as renderNestedTemplateTreeDefect, Ia as refuseMalformedResourceAttributesForOrphan, Ic as buildDockerImage, Ii as carriesFetchableDynamicReference, Il as hasPlainPrototype, In as noEchoExactEchoLeavesOf, Io as describeTypeWithThrottleRetry, Ir as CloudControlProvider, Is as splitGetAttStringForm, It as planRollback, J as makeSiblingClaimReader, Ja as refuseMalformedResourcesForDestroy, Jc as redactDockerArgvValues, Ji as JSON_LISTING_HOLE_VALUE, Jn as stateSecretNameNeedles, Jo as maskedLeafCoordinatesOf, Js as LockManager, K as mergeNoChangeOutputs, Ka as refuseMalformedResourcePropertiesForOrphan, Kc as isMalformedEnvKey, Ko as maskReadbackAtCoordinates, Ks as WHOLE_DYNAMIC_REFERENCE_PATTERN, L as templateIdentity, La as refuseMalformedResourceEntries, Lc as resolveDockerContextDirectory, Li as isNamelessDynamicReferenceError, Ll as nullPrototypeRecord, Ln as noEchoParameterNamesOf, Lo as withRetry, Lr as slowCcOperationTimeoutMs, Ls as carriesSecretMask, Lt as recheckFailedPlan, M as childTemplateLoader, Ma as refuseMalformedOrphansForDestroy, Mc as readBootstrapMarkerBody, Mi as parameterTypeMayLoseSecretIdentity, Ml as StageLoadError, Mn as red, Mr as withPrintingSecrets, Mt as demoteSupersededOrphans, N as findNestedTemplateTreeDefect, Na as refuseMalformedOrphansForOrphan, Nc as validateAssetBucketName, Ni as getAccountInfo, Nl as processStackMessages, Nn as yellow, Nr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Ns as physicalNameCopiesOf, Nt as isJournaledOrphan, O as inheritedProvenanceForChildDiff, Oc as ensureAssetStorage, Oi as producerRegionsFromState, Ol as PARTITION_TABLE, On as bold, Or as TemplateNoEchoReresolver, Os as pathCrossesDottedKey, Ot as replayFailedOperations, P as isAbsoluteAssetPath, Pa as refuseMalformedOutputs, Pc as validateContainerRepoName, Pi as isImpossibleEmptyStoredAttribute, Pl as defineOwnKey, Pn as noEchoAttributeNamesOf, Po as prefetchCreateOnlyPropertyPaths, Pr as applyCustomResourceResponseExpiration, Pt as isReplacementOrphan, Q as pendingRequestCount, Qa as repairMalformedOrphansForReadOnly, Qc as runDockerStreaming, Qi as UNREADABLE_RESOURCES_MAP_ROW, Qn as PRE_DELETE_SNAPSHOT_TYPES, Qs as CrossPrefixReadError, Qt as computeParameterTaint, R as conditionFingerprint, Ra as refuseMalformedResourceEntriesForDeploy, Rc as describeDockerCapturedOutput, Ri as keepsSecretReferenceToken, Rl as ownValue, Rn as createReadOnlyAttributeHealerFactory, Rs as provenPublicValue, Rt as recordUnderIdIsNotOwn, Sa as malformedResourcePropertiesWarning, Sc as createAssetRedirectResolver, Si as AWS_CREDENTIAL_ENV_KEYS, Sl as MIGRATE_TMP_PREFIX, Sn as formatDestructiveChange, Sr as CC_BROKEN_REASON, Ss as scrubResourceRecord, St as sameJournaledOrphans, T as IMPLICIT_DELETE_DEPENDENCIES, Ta as malformedStateRefusalMessage, Tc as AssetModeResolver, Ti as envCredentialsAreAssumedRole, Tl as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, Tr as isCustomResource, Ts as DYNAMIC_REFERENCE_TOKEN_SCAN, U as diffSecurity, Ua as refuseMalformedResourcePropertiesForDestroy, Uc as formatDockerLoginError, Ul as resolveAssemblyPath, Un as orphanRecordsPrintingBag, Uo as canonicalCoordinates, Ur as deleteSkipReason, Us as recordProvenPublicExpression, Ut as findNestedStackTypeChanges, V as readRecordedConditionVerdicts, Va as refuseMalformedResourceEntriesForImportSave, Vc as dockerSpawnEnvWithSensitive, Vi as isStalePlaceholderArnAttribute, Vl as displayAssemblyPath, Vn as maskEventTextWithBoundBags, Vo as DagBuilder, Vr as deleteIndeterminateGuards, Vs as recordNoEchoAttributeValues, Vt as seedsDeleteFirstGuard, W as isSecretBearingReferenceString, Wa as refuseMalformedResourcePropertiesForDrift, Wc as getDockerCmd, Wi as withSharedDrainBudget, Wl as injectAwsRegion, Wn as secretNamePrintingBag, Wo as isMarkedCoordinate, Ws as wholeStringLeavesOf, X as DeploymentEventsReader, Xa as refuseMalformedState, Xc as redactedDockerCause, Xi as STATE_RESOURCES_MALFORMED, Xn as extractDeploymentEventError, Xo as noEchoLeavesOf, Xs as S3StateBackend, Xt as updatePartialMessage, Y as planOrphanAdoption, Ya as refuseMalformedResourcesForExport, Yc as redactedCause, Yi as STATE_REGION_DIVERGED, Yn as storedSecretNameNeedles, Yo as noEchoCoordinatesOf, Ys as isLockInfoExpired, Z as DeploymentEventsStore, Za as repairMalformedOrphanRecordsForReadOnly, Zc as runDockerForeground, Zi as UNREADABLE_ORPHANS_CONTAINER_ROW, Zn as ATOMIC_FINAL_SNAPSHOT_TYPES, Zo as noEchoOutputsComparison, Zs as rebuildClientForBucketRegion, Zt as updatePartialReason, _a as malformedOrphansWarning, _c as AssetPublisher, _i as assertFlagRoleArn, _l as stateBucketExistenceConfirmed, _n as DEFAULT_RESOURCE_TIMEOUT_MS, _o as isStatefulRecreateTargetSync, _s as maskSecretsInError, _t as dropFailedHint, a as isProtectionValueActive, aa as isReadableOrphanRecord, ac as acceptedCreateOnlyDropsOf, al as Synthesizer, an as secretBearing, ao as unreadableResourceEntries, ar as unsupportedFinalSnapshotError, as as carryLogOnlyValues, at as dropSettledNestedJournals, ba as malformedRenderedContainersWarning, bc as WorkGraph, bi as isIamRoleArn, bl as CFN_TEMPLATE_BODY_LIMIT, bn as constructPathOf, bt as loadJournaledOrphans, ca as malformedExportNamesWarning, cc as hasReadableExportSet, cl as getLegacyStateBucketName, cn as carriedExportAliasExposure, cs as literalSplitDelimitersOf, ct as recordDisplacedSkips, da as malformedLocalResourceEntriesWarning, dc as importableOutputKeys, di as refuseUnreadableCdkCrossAccountRefs, dl as resolveAutoAssetStorage, dn as isWholeDynamicReferenceValue, do as NO_CC_HANDLERS_REASON, ds as recordLogOnlyParameterValue, dt as withNestedRevertRun, ea as deployRefusesOrphanRowsReason, ec as applyCrossPrefixScan, ei as INTRINSIC_KEYS, el as escapeRegExp, en as reachableDivergentParameters, eo as repairMalformedResourceEntriesForReadOnly, er as ccRoutedFinalSnapshotError, es as readsNoEchoSource, et as keptForReadoption, fa as malformedLocalResourcesWarning, fc as importableOutputs, fi as keepHeldTokenProvenance, fl as resolveCaptureObservedState, fn as noEchoParameterValueSeed, fo as hasNoCloudControlHandlers, fs as recordLogOnlyValue, ft as collectNestedChildUnaddressed, ga as malformedOrphansRefusalMessage, gc as shouldRetainResource, gi as applyRoleArnIfSet, gl as resolveUseCdkBootstrapAssets, gn as bindingSkippedOutputs, go as isStatefulRecreateTargetForReplace, gs as errorCauseChain, gt as dropFailedCommands, ha as malformedOrphanRowsKeptWarning, hc as orphansCarriedFrom, hi as recordedReferenceRegions, hl as resolveStateBucketWithDefaultAndSource, hn as isExportAliasCollision, ho as MULTI_REGION_RECREATE_BLOCKED_TYPES, hs as createSecretMasker, ht as deleteJournaledOrphans, i as PROTECTION_PROPERTY_BY_TYPE, ia as hasReadableResources, ic as splitImportedOps, il as getDockerImageBySourceHash, in as exportAliasCollisionScrubWarning, io as unreadableOrphanRecords, ir as refusesFinalSnapshot, is as liveMatchesUnresolvedTokenFrame, it as displacedPhysicalIdShown, j as serviceTokenBlockingReason, ja as refuseMalformedOrphans, jc as parseBootstrapMarker, ji as isUnboundTemplateParameter, jl as AssemblyReader, jn as green, js as recordNestedStackParameterExpressions, jt as recordAfterRollbackUpdate, k as deferredServiceTokenWarning, ka as refuseMalformedOrphanRecords, kc as getBootstrapMarkerKey, ki as regionLessSecretName, kl as canonicalizeRegion, kn as cyan, kr as readsNoEchoDeleteValues, ks as identityKeyFor, kt as replayRollback, la as malformedExportSourceWarning, lc as hasReasonlessBaselineRefusal, li as resolveDynamicReferences, ll as loadCdkJson, ln as exportNameNoEchoParameters, lo as unwrittenCreateOnlyReplacement, lr as withCreateTokenLedger, ls as logOnlyValueCount, ma as malformedOrphanRecordsWarning, mc as orphansAfterRollback, mi as recordedOutputReferenceRegions, ml as resolveStateBucketWithDefault, mn as collectPublishedOutputNames, mo as shownType, ms as unionOfSecretBags, mt as withNestedStackContext, n as recordedProtectionEvidence, na as hasReadableOrphans, nc as isAccessDenied, ni as poisonRenderedSpellingsCollidingIn, nl as stripForDisplay, nn as WITHHELD_NAME_DISPLAY, no as repairMalformedResourcesForReadOnly, nr as effectiveDeletionPolicy, ns as valueAtCoordinate, nt as NESTED_PENDING_PARENT_REASON, o as perType, oa as isReadableResourceEntry, oc as describeRegionValueKind, ol as synthesisStatusMessage, on as secretBearingStateKeyWarning, oo as withheldAccountClause, os as createUnionSecretMasker, pa as malformedOrphanRecordsRefusalMessage, pc as isReadableBag, pl as resolveSkipPrefix, pn as collectDeclaredOutputNames, po as findReplacedReadersOfRecreateTargets, ps as shareLogOnlyValues, pt as getCurrentNestedStackContext, q as makeCanonicalizePropertiesFn, qa as refuseMalformedResourcesForDeploy, qc as partitionSensitiveEnv, qi as declaresNoEcho, ql as resolveBucketRegion, qn as secretNamedRecordNeedles, qo as maskWholeValue, qs as isSingleDynamicReferenceToken, r as recordedProtectionNote, ra as hasReadableOutputs, rc as isNotImplemented, rl as AssetManifestLoader, rn as displayTextOrWithheld, ro as unpreviewableOrphanRecords, rr as isFinalSnapshotError, rs as redactForState, rt as displacedOpClause, s as readProtection, sa as malformedDriftResourcePropertiesWarning, sc as exportNamesCarriedFrom, sl as getDefaultStateBucketName, sn as secretSafeKeyDisplay, so as findActionableSilentDrops, sr as ledgerForStack, ss as hasMaskableValues, st as nestedChildStackName$1, t as DeployEngine, ta as displayLogicalId, tc as crossPrefixDeniedWarning, ti as IntrinsicFunctionResolver, tl as stripControlChars, tn as resourcesNamingDeclaredParameter, to as repairMalformedResourcePropertiesForReadOnly, tr as createPreDeleteFinalSnapshot, ts as recordedNoEchoValuesOf, tt as recordRetainedForReadoption, ua as malformedLocalOutputsWarning, uc as hasUnverifiableParameterRefusal, ui as producerLookupOver, ul as resolveApp, un as exportNameSecretExposure, us as printingCorpusOf, ut as revertedNestedRowIds, va as malformedOutputsRefusalMessage, vc as isSensitiveAttributeName, vi as assertSendableRoleArn, vl as warnDeprecatedNoPrefixCliFlag, vn as DEFAULT_RESOURCE_WARN_AFTER_MS, vo as renderStatefulReason, vs as maskSecretsInText, vt as isHandledOrphan, wa as malformedScrubResourceEntriesRefusalMessage, wc as rewriteTemplateAssetReferences, wi as callerEnvCredentials, wl as uploadCfnTemplate, wn as destroyStackRecordsView, wr as ccBrokenReason, xa as malformedResourceEntriesWarning, xc as buildAssetRedirectMap, xi as sendableAssumeRoleCommand, xl as CFN_TEMPLATE_URL_LIMIT, xn as findDestructiveChanges, xt as makeForeignHolderScan, ya as malformedOutputsWarning, yc as stringifyValue, yi as explicitRoleArnOrThrow, yl as ssmResolvedValueType, yn as maskingRetryLogger, yt as journaledOrphanLines, z as conditionInputsFrom, za as refuseMalformedResourceEntriesForDestroy, zc as describeDockerExecFailure, zi as AWS_NO_VALUE, zl as absoluteAssemblyPathEscape, zn as completedReplayEntries, zr as RollbackInlinePolicyWriters, zs as recordMaskOnlyValue, zt as replacementNeverSwapped } from "./deploy-engine-D1z0QUsv.js";
-import { t as getCdkdVersion } from "./version-CnjZ9J4l.js";
+import { $ as resolvePendingCloudControlRequests, $a as repairMalformedOutputsForReadOnly, $c as escapeRegExp, $i as accountArgs, $n as buildFinalSnapshotIdentifier, $o as readbackPathFor, $r as DiffCalculator, $s as applyCrossPrefixScan, $t as namesAnyDeclaredParameter, A as findServiceTokenRefusals, Aa as refuseMalformedOrphanRecordsForDestroy, Ac as parseBootstrapMarker, Ai as coerceParameterTypedValue, Al as AssemblyReader, An as gray, Ar as isCustomResourceType$1, As as inheritNestedStackParameterAssociations, At as removeProtectionTypeList, B as parentSuppliedValues, Ba as refuseMalformedResourceEntriesForImport, Bc as dockerSpawnEnvWithSensitive, Bi as cfnRefValueFromPhysicalId, Bl as displayAssemblyPath, Bn as journaledOrphanPrintingBag, Br as UNSPECIFIED_SKIP_REASON, Bs as recordMaskOnlyValuesIn, Bt as resolveReplacementOldType, Ca as malformedResourcesWarning, Cc as rewriteTemplateAssetReferences, Ci as applyCallerIdentityCredentials, Cl as uploadCfnTemplate, Cr as ProviderRegistry, Cs as withPhysicalNameCopies, Ct as formatResourceLine, D as crossStackOutputProvenanceSource, Da as refuseDivergentRecordRegionForDestroy, Dc as ensureAssetStorage, Di as classifyReplaySecretRegion, Dl as PARTITION_TABLE, Ds as isUncertifiedBaselineMaskPosition, E as computeImplicitDeleteEdges, Ea as previewableOrphanRecords, Ec as assertAssetBucketRegion, Ei as classifyRecordedSecretRegion, El as expectedOwnerParam, En as withStackRecords, Er as wouldReturnToSdkProvider, Es as dynamicReferenceTokens, F as listNestedTemplateRows, Fa as refuseMalformedOutputsForDestroy, Fc as buildDockerImage, Fi as carriesDynamicReference, Fl as hasPlainPrototype, Fn as noEchoComparisonForTemplate, Fo as templateResourceTypes, Fr as customResourceResponseExpirationWarning, Fs as recordPhysicalNameCopy, Ft as planFailedOps, G as keptWholeReasonText, Ga as refuseMalformedResourcePropertiesForExport, Gc as isMalformedEnvKey, Gi as parameterInputsFor, Gn as secretNamePrintingBags, Go as maskAtCoordinates, Gr as isWaitAbandonedError, Gs as WHOLE_DYNAMIC_REFERENCE_PATTERN, Gt as inheritProducerRegions, H as withResourceDeadline, Ha as refuseMalformedResourceEntriesForOrphan, Hc as formatDockerLoginError, Hi as refStateLookupFromResource, Hl as resolveAssemblyPath, Hn as namingSecretsWithRecordedNoEcho, Ho as TemplateParser, Hr as deleteLeftInPlace, Hs as recordNoEchoParameterFreshValue, Ht as orphanNeedsIdentity, I as renderNestedTemplateTreeDefect, Ia as refuseMalformedResourceAttributesForOrphan, Ic as resolveDockerContextDirectory, Ii as carriesFetchableDynamicReference, Il as nullPrototypeRecord, In as noEchoExactEchoLeavesOf, Io as describeTypeWithThrottleRetry, Ir as CloudControlProvider, Is as splitGetAttStringForm, It as planRollback, J as makeSiblingClaimReader, Ja as refuseMalformedResourcesForDestroy, Jc as redactedCause, Ji as JSON_LISTING_HOLE_VALUE, Jn as stateSecretNameNeedles, Jo as maskedLeafCoordinatesOf, Js as isLockInfoExpired, K as mergeNoChangeOutputs, Ka as refuseMalformedResourcePropertiesForOrphan, Kc as partitionSensitiveEnv, Kl as resolveBucketRegion, Ko as maskReadbackAtCoordinates, Ks as isSingleDynamicReferenceToken, L as templateIdentity, La as refuseMalformedResourceEntries, Lc as describeDockerCapturedOutput, Li as isNamelessDynamicReferenceError, Ll as ownValue, Ln as noEchoParameterNamesOf, Lo as withRetry, Lr as slowCcOperationTimeoutMs, Ls as carriesSecretMask, Lt as recheckFailedPlan, M as childTemplateLoader, Ma as refuseMalformedOrphansForDestroy, Mc as validateAssetBucketName, Mi as parameterTypeMayLoseSecretIdentity, Ml as processStackMessages, Mn as red, Mr as withPrintingSecrets, Mt as demoteSupersededOrphans, N as findNestedTemplateTreeDefect, Na as refuseMalformedOrphansForOrphan, Nc as validateContainerRepoName, Ni as getAccountInfo, Nl as defineOwnKey, Nn as yellow, Nr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Ns as physicalNameCopiesOf, Nt as isJournaledOrphan, O as inheritedProvenanceForChildDiff, Oc as getBootstrapMarkerKey, Oi as producerRegionsFromState, Ol as canonicalizeRegion, On as bold, Or as TemplateNoEchoReresolver, Os as pathCrossesDottedKey, Ot as replayFailedOperations, P as isAbsoluteAssetPath, Pa as refuseMalformedOutputs, Pc as buildDenyExternalAccessPolicy, Pi as isImpossibleEmptyStoredAttribute, Pl as hasOwnKey, Pn as noEchoAttributeNamesOf, Po as prefetchCreateOnlyPropertyPaths, Pr as applyCustomResourceResponseExpiration, Pt as isReplacementOrphan, Q as pendingRequestCount, Qa as repairMalformedOrphansForReadOnly, Qc as warnFinchArgvExposure, Qi as UNREADABLE_RESOURCES_MAP_ROW, Qn as PRE_DELETE_SNAPSHOT_TYPES, Qs as CrossPrefixScanCache, Qt as computeParameterTaint, R as conditionFingerprint, Ra as refuseMalformedResourceEntriesForDeploy, Rc as describeDockerExecFailure, Ri as keepsSecretReferenceToken, Rl as absoluteAssemblyPathEscape, Rn as createReadOnlyAttributeHealerFactory, Rs as provenPublicValue, Rt as recordUnderIdIsNotOwn, Sa as malformedResourcePropertiesWarning, Sc as loadPublishableAssetManifest, Si as AWS_CREDENTIAL_ENV_KEYS, Sl as findLargeInlineResources, Sn as formatDestructiveChange, Sr as CC_BROKEN_REASON, Ss as scrubResourceRecord, St as sameJournaledOrphans, T as IMPLICIT_DELETE_DEPENDENCIES, Ta as malformedStateRefusalMessage, Tc as BOOTSTRAP_MARKER_PREFIX, Ti as envCredentialsAreAssumedRole, Tl as decodeListingKey, Tr as isCustomResource, Ts as DYNAMIC_REFERENCE_TOKEN_SCAN, U as diffSecurity, Ua as refuseMalformedResourcePropertiesForDestroy, Uc as getDockerCmd, Ul as injectAwsRegion, Un as orphanRecordsPrintingBag, Uo as canonicalCoordinates, Ur as deleteSkipReason, Us as recordProvenPublicExpression, Ut as findNestedStackTypeChanges, V as readRecordedConditionVerdicts, Va as refuseMalformedResourceEntriesForImportSave, Vc as finchSecretArgvRefusal, Vi as isStalePlaceholderArnAttribute, Vl as renderAssemblyPathEscape, Vn as maskEventTextWithBoundBags, Vo as DagBuilder, Vr as deleteIndeterminateGuards, Vs as recordNoEchoAttributeValues, Vt as seedsDeleteFirstGuard, W as isSecretBearingReferenceString, Wa as refuseMalformedResourcePropertiesForDrift, Wc as isDockerClientEnvKey, Wi as withSharedDrainBudget, Wl as injectedAwsRegionValue, Wn as secretNamePrintingBag, Wo as isMarkedCoordinate, Ws as wholeStringLeavesOf, X as DeploymentEventsReader, Xa as refuseMalformedState, Xc as runDockerForeground, Xi as STATE_RESOURCES_MALFORMED, Xn as extractDeploymentEventError, Xo as noEchoLeavesOf, Xs as rebuildClientForBucketRegion, Xt as updatePartialMessage, Y as planOrphanAdoption, Ya as refuseMalformedResourcesForExport, Yc as redactedDockerCause, Yi as STATE_REGION_DIVERGED, Yn as storedSecretNameNeedles, Yo as noEchoCoordinatesOf, Ys as S3StateBackend, Z as DeploymentEventsStore, Za as repairMalformedOrphanRecordsForReadOnly, Zc as runDockerStreaming, Zi as UNREADABLE_ORPHANS_CONTAINER_ROW, Zn as ATOMIC_FINAL_SNAPSHOT_TYPES, Zo as noEchoOutputsComparison, Zs as CrossPrefixReadError, Zt as updatePartialReason, _a as malformedOrphansWarning, _c as isSensitiveAttributeName, _i as assertFlagRoleArn, _l as warnDeprecatedNoPrefixCliFlag, _n as DEFAULT_RESOURCE_TIMEOUT_MS, _o as isStatefulRecreateTargetSync, _s as maskSecretsInText, _t as dropFailedHint, a as isProtectionValueActive, aa as isReadableOrphanRecord, ac as describeRegionValueKind, al as synthesisStatusMessage, an as secretBearing, ao as unreadableResourceEntries, ar as unsupportedFinalSnapshotError, as as createUnionSecretMasker, at as dropSettledNestedJournals, ba as malformedRenderedContainersWarning, bc as buildAssetRedirectMap, bi as isIamRoleArn, bl as CFN_TEMPLATE_URL_LIMIT, bn as constructPathOf, bt as loadJournaledOrphans, ca as malformedExportNamesWarning, cc as hasReasonlessBaselineRefusal, cl as loadCdkJson, cn as carriedExportAliasExposure, cs as logOnlyValueCount, ct as recordDisplacedSkips, da as malformedLocalResourceEntriesWarning, dc as importableOutputs, di as refuseUnreadableCdkCrossAccountRefs, dl as resolveCaptureObservedState, dn as isWholeDynamicReferenceValue, do as NO_CC_HANDLERS_REASON, ds as recordLogOnlyValue, dt as withNestedRevertRun, ea as deployRefusesOrphanRowsReason, ec as crossPrefixDeniedWarning, ei as INTRINSIC_KEYS, el as stripControlChars, en as reachableDivergentParameters, eo as repairMalformedResourceEntriesForReadOnly, er as ccRoutedFinalSnapshotError, es as readsNoEchoSource, et as keptForReadoption, fa as malformedLocalResourcesWarning, fc as isReadableBag, fi as keepHeldTokenProvenance, fl as resolveSkipPrefix, fn as noEchoParameterValueSeed, fo as hasNoCloudControlHandlers, fs as shareLogOnlyValues, ft as collectNestedChildUnaddressed, ga as malformedOrphansRefusalMessage, gc as AssetPublisher, gi as applyRoleArnIfSet, gl as stateBucketExistenceConfirmed, gn as bindingSkippedOutputs, go as isStatefulRecreateTargetForReplace, gs as maskSecretsInError, gt as dropFailedCommands, ha as malformedOrphanRowsKeptWarning, hc as shouldRetainResource, hi as recordedReferenceRegions, hl as resolveUseCdkBootstrapAssets, hn as isExportAliasCollision, ho as MULTI_REGION_RECREATE_BLOCKED_TYPES, hs as errorCauseChain, ht as deleteJournaledOrphans, i as PROTECTION_PROPERTY_BY_TYPE, ia as hasReadableResources, ic as acceptedCreateOnlyDropsOf, il as Synthesizer, in as exportAliasCollisionScrubWarning, io as unreadableOrphanRecords, ir as refusesFinalSnapshot, is as carryLogOnlyValues, it as displacedPhysicalIdShown, j as serviceTokenBlockingReason, ja as refuseMalformedOrphans, jc as readBootstrapMarkerBody, ji as isUnboundTemplateParameter, jl as StageLoadError, jn as green, js as recordNestedStackParameterExpressions, jt as recordAfterRollbackUpdate, k as deferredServiceTokenWarning, ka as refuseMalformedOrphanRecords, kc as isCrossRegionRedirect, ki as regionLessSecretName, kl as derivePartitionAndUrlSuffix, kn as cyan, kr as readsNoEchoDeleteValues, ks as identityKeyFor, kt as replayRollback, la as malformedExportSourceWarning, lc as hasUnverifiableParameterRefusal, li as resolveDynamicReferences, ll as resolveApp, ln as exportNameNoEchoParameters, lo as unwrittenCreateOnlyReplacement, lr as withCreateTokenLedger, ls as printingCorpusOf, ma as malformedOrphanRecordsWarning, mc as orphansCarriedFrom, mi as recordedOutputReferenceRegions, ml as resolveStateBucketWithDefaultAndSource, mn as collectPublishedOutputNames, mo as shownType, ms as createSecretMasker, mt as withNestedStackContext, n as recordedProtectionEvidence, na as hasReadableOrphans, nc as isNotImplemented, ni as poisonRenderedSpellingsCollidingIn, nl as AssetManifestLoader, nn as WITHHELD_NAME_DISPLAY, no as repairMalformedResourcesForReadOnly, nr as effectiveDeletionPolicy, ns as valueAtCoordinate, nt as NESTED_PENDING_PARENT_REASON, o as perType, oa as isReadableResourceEntry, oc as exportNamesCarriedFrom, ol as getDefaultStateBucketName, on as secretBearingStateKeyWarning, oo as withheldAccountClause, os as hasMaskableValues, pa as malformedOrphanRecordsRefusalMessage, pc as orphansAfterRollback, pl as resolveStateBucketWithDefault, pn as collectDeclaredOutputNames, po as findReplacedReadersOfRecreateTargets, ps as unionOfSecretBags, pt as getCurrentNestedStackContext, q as makeCanonicalizePropertiesFn, qa as refuseMalformedResourcesForDeploy, qc as redactDockerArgvValues, qi as declaresNoEcho, qn as secretNamedRecordNeedles, qo as maskWholeValue, qs as LockManager, r as recordedProtectionNote, ra as hasReadableOutputs, rc as splitImportedOps, rl as getDockerImageBySourceHash, rn as displayTextOrWithheld, ro as unpreviewableOrphanRecords, rr as isFinalSnapshotError, rs as liveMatchesUnresolvedTokenFrame, rt as displacedOpClause, s as readProtection, sa as malformedDriftResourcePropertiesWarning, sc as hasReadableExportSet, sl as getLegacyStateBucketName, sn as secretSafeKeyDisplay, so as findActionableSilentDrops, sr as ledgerForStack, ss as literalSplitDelimitersOf, st as nestedChildStackName$1, t as DeployEngine, ta as displayLogicalId, tc as isAccessDenied, ti as IntrinsicFunctionResolver, tl as stripForDisplay, tn as resourcesNamingDeclaredParameter, to as repairMalformedResourcePropertiesForReadOnly, tr as createPreDeleteFinalSnapshot, ts as recordedNoEchoValuesOf, tt as recordRetainedForReadoption, ua as malformedLocalOutputsWarning, uc as importableOutputKeys, ui as producerLookupOver, ul as resolveAutoAssetStorage, un as exportNameSecretExposure, us as recordLogOnlyParameterValue, ut as revertedNestedRowIds, va as malformedOutputsRefusalMessage, vc as stringifyValue, vi as assertSendableRoleArn, vl as ssmResolvedValueType, vn as DEFAULT_RESOURCE_WARN_AFTER_MS, vo as renderStatefulReason, vt as isHandledOrphan, wa as malformedScrubResourceEntriesRefusalMessage, wc as AssetModeResolver, wi as callerEnvCredentials, wl as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, wn as destroyStackRecordsView, wr as ccBrokenReason, xa as malformedResourceEntriesWarning, xc as createAssetRedirectResolver, xi as sendableAssumeRoleCommand, xl as MIGRATE_TMP_PREFIX, xn as findDestructiveChanges, xs as redactForState, xt as makeForeignHolderScan, ya as malformedOutputsWarning, yc as WorkGraph, yi as explicitRoleArnOrThrow, yl as CFN_TEMPLATE_BODY_LIMIT, yn as maskingRetryLogger, yt as journaledOrphanLines, z as conditionInputsFrom, za as refuseMalformedResourceEntriesForDestroy, zc as describeDockerFailure, zi as AWS_NO_VALUE, zl as describeFileReadFailure, zn as completedReplayEntries, zr as RollbackInlinePolicyWriters, zs as recordMaskOnlyValue, zt as replacementNeverSwapped } from "./deploy-engine-zLKsm0IM.js";
+import { t as getCdkdVersion } from "./version-MUc6NbW0.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutBucketVersioningCommand, PutObjectCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { GetRoleCommand, GetUserCommand } from "@aws-sdk/client-iam";
@@ -2559,7 +2559,7 @@ function collectCrossStackRefs(node, onRef, unconditional) {
 //#region src/provisioning/register-providers.ts
 let providerClasses;
 function loadProviderClasses() {
-	providerClasses ??= import("./provider-classes-CR4DtD8M.js");
+	providerClasses ??= import("./provider-classes-BWo7K01p.js");
 	return providerClasses;
 }
 function registerAllProviders(registry, classes) {
@@ -8439,13 +8439,20 @@ async function scrubStack(stack, region, stateBackend, lockManager, opts) {
 				properties: redactForState(record.properties, {
 					provenance: "template-sourced",
 					secrets: ownSecrets,
-					source: templateProps
+					source: templateProps,
+					generation: "unproven"
 				})
 			} : record;
-			const scrubbed = secrets || templateProps ? scrubResourceRecord(positioned, ownSecrets, void 0, STATE_SOURCED_CROSS_GENERATION_RULES) : record;
+			const scrubbed = secrets || templateProps ? scrubResourceRecord(positioned, ownSecrets, void 0, "state-cross-generation", {
+				properties: "unproven",
+				observed: "unproven"
+			}) : record;
 			const plan = noEchoPlans.byLogicalId.get(logicalId);
 			const migrationNeedles = scrubMigrationNeedles(plan, noEchoPublicTokens);
-			const migrated = migrationNeedles === void 0 ? scrubbed : scrubResourceRecord(scrubbed, migrationNeedles, void 0, STATE_SOURCED_CROSS_GENERATION_RULES);
+			const migrated = migrationNeedles === void 0 ? scrubbed : scrubResourceRecord(scrubbed, migrationNeedles, void 0, "state-cross-generation", {
+				properties: "unproven",
+				observed: "unproven"
+			});
 			const written = keepHeldTokenProvenance(applyScrubNoEcho(migrated, record, plan));
 			if (JSON.stringify(written) !== JSON.stringify(record)) recordsChanged++;
 			newResources[logicalId] = written;
@@ -8455,7 +8462,10 @@ async function scrubStack(stack, region, stateBackend, lockManager, opts) {
 			const needles = new Map(allRecordedSecrets(outputSecrets, perResourceSecrets, orphanSecrets));
 			for (const [plaintext, expression] of own ?? []) needles.set(plaintext, expression);
 			if (needles.size === 0) return record;
-			const scrubbed = keepHeldTokenProvenance(scrubResourceRecord(record.state, needles, void 0, STATE_SOURCED_CROSS_GENERATION_RULES));
+			const scrubbed = keepHeldTokenProvenance(scrubResourceRecord(record.state, needles, void 0, "state-cross-generation", {
+				properties: "unproven",
+				observed: "unproven"
+			}));
 			if (JSON.stringify(scrubbed) === JSON.stringify(record.state)) return record;
 			recordsChanged++;
 			return {
@@ -8502,7 +8512,8 @@ async function scrubStack(stack, region, stateBackend, lockManager, opts) {
 		} : {
 			provenance: "template-sourced",
 			secrets: outputSecrets,
-			source: outputsTemplateSource
+			source: outputsTemplateSource,
+			generation: "unproven"
 		}) : state.outputs, state.outputs, accountedOutputKeys, allRecordedSecrets(outputSecrets, perResourceSecrets, orphanSecrets)), noEchoPlans.outputKeys, new Set(Object.keys(stack.template.Outputs ?? {})), declaredAliasOf);
 		emitAbandonedScanNotes();
 		let newOutputs = noEchoMaskedOutputs;
@@ -29551,4 +29562,4 @@ function collectVerbFlags(program) {
 
 //#endregion
 export { resolveSecretDerivedPrincipals as a, buildProgram, isResolvableSecretPrincipalList as i, runDestroyForStack as n, canonicalizeIpProtocolValue as o, holdsUnprovenSecretPrincipalToken as r, resolvedResourceTimeoutMs as s, canonicalizeIpv4Cidr as t };
-//# sourceMappingURL=program-Cqk1ZTsY.js.map
+//# sourceMappingURL=program-CiTz5-_D.js.map