@go-to-k/cdkd 0.302.0 → 0.302.2

package/dist/{neptune-provider-WE1O3kXY.js → neptune-provider-CUoBJ6Ys.js}

@@ -1,7 +1,8 @@
-import { T as generatedNameFor, Z as safeMsg, n as describeAwsFailure, s as getLogger } from "./aws-failure-text-BDZdavf4.js";
-import { E as assertRegionMatch, F as resolveExplicitPhysicalId, H as observeThenDisableProtection, L as ProtectionFlipRegistry, Mt as markCreatedBeforeFailure, Qt as ambientClientDefaults, T as RESOURCE_NOT_FOUND, U as protectionFlipKey, W as rdsFamilyProtectionSite, j as normalizeAwsTagsToCfn, u as clearOnUpdateRemoval, vn as ProvisioningError, w as withoutServerErrorRetries, z as deleteWithProtectionCompensation } from "./iam-policy-targets-Dnk6FCsr.js";
+import { Q as safeMsg, T as generatedNameFor, n as describeAwsFailure, s as getLogger } from "./aws-failure-text-e_ddrDDo.js";
+import { E as assertRegionMatch, F as resolveExplicitPhysicalId, H as observeThenDisableProtection, L as ProtectionFlipRegistry, Mt as markCreatedBeforeFailure, Qt as ambientClientDefaults, T as RESOURCE_NOT_FOUND, U as protectionFlipKey, W as rdsFamilyProtectionSite, j as normalizeAwsTagsToCfn, u as clearOnUpdateRemoval, vr as markNonRetryable, w as withoutServerErrorRetries, xt as maskerOrIdentity, yn as ProvisioningError, yr as markRedactedCause, z as deleteWithProtectionCompensation } from "./iam-policy-targets-OtGPguLH.js";
 import { s as ambientRegion } from "./aws-client-defaults-DBXBcg0J.js";
-import { Fr as refuseMalformedDesiredTags, Lr as tagPlanWarning, Nr as planTagDiff, Rr as definedAttributes, zr as stringifyIfAssigned } from "./deploy-engine-DU0BoQqo.js";
+import { Br as stringifyIfAssigned, Ir as refuseMalformedDesiredTags, Pr as planTagDiff, Rr as tagPlanWarning, W as enclosingDeadlineRemainingMs, zr as definedAttributes } from "./deploy-engine-B_xWnZ4Q.js";
+import { DescribeSecurityGroupsCommand, EC2Client } from "@aws-sdk/client-ec2";
 import { AddTagsToResourceCommand, CreateDBClusterCommand, CreateDBInstanceCommand, CreateDBSubnetGroupCommand, DeleteDBClusterCommand, DeleteDBInstanceCommand, DeleteDBSubnetGroupCommand, DescribeDBClustersCommand, DescribeDBInstancesCommand, DescribeDBSubnetGroupsCommand, ListTagsForResourceCommand, ModifyDBClusterCommand, ModifyDBInstanceCommand, ModifyDBSubnetGroupCommand, NeptuneClient, RemoveTagsFromResourceCommand } from "@aws-sdk/client-neptune";
 
 //#region src/provisioning/providers/neptune-provider.ts
@@ -28,9 +29,12 @@ function instanceAttributes(instance) {
 function isDbIdentifier(id) {
 	return id.length <= 63 && /^[A-Za-z](?:-?[A-Za-z0-9])*$/.test(id);
 }
+const FINAL_SNAPSHOT_SETTLE_WAIT_MS = 9e5;
+const FINAL_SNAPSHOT_COMPENSATION_MARGIN_MS = 6e4;
 var NeptuneProvider = class {
 	neptuneClient;
 	createClient;
+	ec2Client;
 	providerRegion;
 	logger = getLogger().child("NeptuneProvider");
 	protectionFlips = new ProtectionFlipRegistry();
@@ -87,6 +91,13 @@ var NeptuneProvider = class {
 		}
 		return this.neptuneClient;
 	}
+	getEc2Client() {
+		if (!this.ec2Client) this.ec2Client = new EC2Client({
+			...ambientClientDefaults(),
+			...this.providerRegion ? { region: this.providerRegion } : {}
+		});
+		return this.ec2Client;
+	}
 	getCreateClient() {
 		this.getClient();
 		return this.createClient;
@@ -99,10 +110,10 @@ var NeptuneProvider = class {
 			default: throw new ProvisioningError(`Unsupported resource type: ${resourceType}`, resourceType, logicalId);
 		}
 	}
-	async update(logicalId, physicalId, resourceType, properties, previousProperties, _context) {
+	async update(logicalId, physicalId, resourceType, properties, previousProperties, context) {
 		switch (resourceType) {
 			case "AWS::Neptune::DBSubnetGroup": return this.updateDBSubnetGroup(logicalId, physicalId, resourceType, properties, previousProperties);
-			case "AWS::Neptune::DBCluster": return this.updateDBCluster(logicalId, physicalId, resourceType, properties, previousProperties);
+			case "AWS::Neptune::DBCluster": return this.updateDBCluster(logicalId, physicalId, resourceType, properties, previousProperties, context);
 			case "AWS::Neptune::DBInstance": return this.updateDBInstance(logicalId, physicalId, resourceType, properties, previousProperties);
 			default: throw new ProvisioningError(`Unsupported resource type: ${resourceType}`, resourceType, logicalId, physicalId);
 		}
@@ -216,12 +227,11 @@ var NeptuneProvider = class {
 			throw thrown;
 		}
 	}
-	async updateDBCluster(logicalId, physicalId, resourceType, properties, previousProperties) {
+	async updateDBCluster(logicalId, physicalId, resourceType, properties, previousProperties, context) {
 		this.logger.debug(`Updating Neptune DBCluster ${logicalId}: ${physicalId}`);
 		refuseMalformedDesiredTags(properties["Tags"], resourceType, logicalId, physicalId);
 		try {
-			const vpcSgIds = properties["VpcSecurityGroupIds"];
-			const sendVpcSgIds = vpcSgIds !== void 0 && vpcSgIds.length > 0;
+			const vpcSgIds = await this.dbClusterSecurityGroupsToSend(logicalId, physicalId, resourceType, properties, previousProperties, context);
 			await this.getClient().send(new ModifyDBClusterCommand({
 				DBClusterIdentifier: physicalId,
 				EngineVersion: properties["EngineVersion"],
@@ -231,12 +241,16 @@ var NeptuneProvider = class {
 				PreferredMaintenanceWindow: properties["PreferredMaintenanceWindow"],
 				DBClusterParameterGroupName: properties["DBClusterParameterGroupName"],
 				EnableIAMDatabaseAuthentication: properties["IamAuthEnabled"],
-				...sendVpcSgIds && { VpcSecurityGroupIds: vpcSgIds },
+				...vpcSgIds !== void 0 && { VpcSecurityGroupIds: vpcSgIds },
 				Port: properties["DBPort"] != null ? Number(properties["DBPort"]) : properties["Port"] != null ? Number(properties["Port"]) : void 0,
 				ApplyImmediately: true
 			}));
 			this.logger.debug(`Successfully updated Neptune DBCluster ${logicalId}`);
 			const described = await this.describeDBCluster(physicalId);
+			if (process.env["CDKD_NO_WAIT"] !== "true" && securityGroupListChanged(vpcSgIds, previousProperties["VpcSecurityGroupIds"])) {
+				await this.waitForSecurityGroupsApplied(physicalId, logicalId, vpcSgIds ?? []);
+				for (const member of described?.DBClusterMembers ?? []) if (member.DBInstanceIdentifier) await this.waitForMemberAfterSecurityGroupChange(member.DBInstanceIdentifier);
+			}
 			if (described?.DBClusterArn) await this.applyTagDiff(described.DBClusterArn, resourceType, logicalId, previousProperties["Tags"], properties["Tags"]);
 			return {
 				physicalId,
@@ -244,6 +258,7 @@ var NeptuneProvider = class {
 				attributes: clusterAttributes(described)
 			};
 		} catch (error) {
+			if (error instanceof ProvisioningError) throw error;
 			const cause = error instanceof Error ? error : void 0;
 			throw new ProvisioningError(`Failed to update Neptune DBCluster ${logicalId}: ${describeAwsFailure(error).detail}`, resourceType, logicalId, physicalId, cause);
 		}
@@ -284,6 +299,7 @@ var NeptuneProvider = class {
 					flip,
 					logger: this.logger,
 					physicalId,
+					mask: context?.maskSecrets,
 					guardName: "DeletionProtection",
 					observe: async () => (await this.describeDBCluster(physicalId))?.DeletionProtection === true,
 					disable: async () => {
@@ -296,9 +312,10 @@ var NeptuneProvider = class {
 				});
 				this.logger.debug(`Disabled DeletionProtection on Neptune DBCluster ${logicalId} before delete`);
 			} catch (disableError) {
-				if (!this.isNotFoundError(disableError, "DBClusterNotFoundFault")) this.logger.debug(`Could not disable deletion protection for Neptune DBCluster ${logicalId}: ${describeAwsFailure(disableError).detail}`);
+				if (!this.isNotFoundError(disableError, "DBClusterNotFoundFault")) this.logger.debug(maskerOrIdentity(context?.maskSecrets)(`Could not disable deletion protection for Neptune DBCluster ${logicalId}: ${describeAwsFailure(disableError).detail}`));
 			}
 			const finalSnapshotId = context?.finalSnapshotIdentifier;
+			if (finalSnapshotId && flip.flippedOffByThisRun && !flip.deleteAccepted) await this.waitForProtectionOffBeforeFinalSnapshot(logicalId, physicalId);
 			await this.getClient().send(new DeleteDBClusterCommand({
 				DBClusterIdentifier: physicalId,
 				...finalSnapshotId ? {
@@ -419,6 +436,7 @@ var NeptuneProvider = class {
 					flip,
 					logger: this.logger,
 					physicalId,
+					mask: context?.maskSecrets,
 					guardName: "DeletionProtection",
 					observe: async () => (await this.describeDBInstance(physicalId))?.DeletionProtection === true,
 					disable: async () => {
@@ -431,7 +449,7 @@ var NeptuneProvider = class {
 				});
 				this.logger.debug(`Disabled DeletionProtection on Neptune DBInstance ${logicalId} before delete`);
 			} catch (disableError) {
-				if (!this.isNotFoundError(disableError, "DBInstanceNotFoundFault")) this.logger.debug(`Could not disable deletion protection for ${physicalId}: ${describeAwsFailure(disableError).detail}`);
+				if (!this.isNotFoundError(disableError, "DBInstanceNotFoundFault")) this.logger.debug(maskerOrIdentity(context?.maskSecrets)(`Could not disable deletion protection for ${physicalId}: ${describeAwsFailure(disableError).detail}`));
 			}
 			await this.getClient().send(new DeleteDBInstanceCommand({
 				DBInstanceIdentifier: physicalId,
@@ -534,9 +552,96 @@ var NeptuneProvider = class {
 	async describeDBCluster(dbClusterIdentifier) {
 		return (await this.getClient().send(new DescribeDBClustersCommand({ DBClusterIdentifier: dbClusterIdentifier }))).DBClusters?.[0];
 	}
+	async dbClusterSecurityGroupsToSend(logicalId, physicalId, resourceType, properties, previousProperties, context) {
+		const desired = properties["VpcSecurityGroupIds"];
+		if (desired !== void 0) return desired.length > 0 ? desired : void 0;
+		const previous = previousProperties["VpcSecurityGroupIds"];
+		if (context?.desiredFromAwsReadback === true) return void 0;
+		if (!Array.isArray(previous) || previous.length === 0) return void 0;
+		let groupId;
+		let missing;
+		let awsError;
+		try {
+			const subnetGroupName = (await this.describeDBCluster(physicalId))?.DBSubnetGroup;
+			const vpcId = subnetGroupName ? (await this.getClient().send(new DescribeDBSubnetGroupsCommand({ DBSubnetGroupName: subnetGroupName }))).DBSubnetGroups?.[0]?.VpcId : void 0;
+			if (!subnetGroupName) missing = "the cluster reports no DB subnet group";
+			else if (!vpcId) missing = `DB subnet group ${subnetGroupName} reports no VPC`;
+			else {
+				groupId = (await this.getEc2Client().send(new DescribeSecurityGroupsCommand({ Filters: [{
+					Name: "vpc-id",
+					Values: [vpcId]
+				}, {
+					Name: "group-name",
+					Values: ["default"]
+				}] }))).SecurityGroups?.[0]?.GroupId;
+				if (!groupId) missing = `VPC ${vpcId} has no security group named default`;
+			}
+		} catch (error) {
+			awsError = error;
+		}
+		if (groupId === void 0) {
+			const mask = context?.maskSecrets ?? ((text) => text);
+			const failure = missing === void 0 ? describeAwsFailure(awsError) : void 0;
+			if (failure?.redacted === true) this.logger.debug(safeMsg`${logicalId}: the VPC default security group lookup failed: ${mask(failure.detail)}`);
+			const shown = mask(failure?.summary ?? "");
+			const refusal = new ProvisioningError(`Failed to update Neptune DBCluster ${logicalId}: VpcSecurityGroupIds was removed from the template, so the cluster moves to its VPC's default security group (as CloudFormation does), but cdkd could not find that group: ${missing ?? shown}. Declare VpcSecurityGroupIds in the template to choose the cluster's security groups.`, resourceType, logicalId, physicalId, awsError instanceof Error ? awsError : void 0);
+			if (missing !== void 0) throw markNonRetryable(refusal);
+			throw awsError instanceof Error && (failure?.redacted === true || shown !== (failure?.summary ?? "")) ? markRedactedCause(refusal) : refusal;
+		}
+		this.logger.warn(safeMsg`${logicalId}: VpcSecurityGroupIds was removed from the template; attaching the VPC's default security group ${groupId}, as CloudFormation does.`);
+		return [groupId];
+	}
 	async describeDBInstance(dbInstanceIdentifier) {
 		return (await this.getClient().send(new DescribeDBInstancesCommand({ DBInstanceIdentifier: dbInstanceIdentifier }))).DBInstances?.[0];
 	}
+	async waitForMemberAfterSecurityGroupChange(dbInstanceIdentifier, maxWaitMs = 18e5) {
+		const startTime = Date.now();
+		let delay = 5e3;
+		while (Date.now() - startTime < maxWaitMs) {
+			let status;
+			try {
+				status = (await this.describeDBInstance(dbInstanceIdentifier))?.DBInstanceStatus;
+			} catch (error) {
+				if (this.isNotFoundError(error, "DBInstanceNotFoundFault")) return;
+				throw error;
+			}
+			if (status !== "modifying") return;
+			await this.sleep(delay);
+			delay = Math.min(delay * 2, 1e4);
+		}
+		throw new Error(`Timed out waiting for a member instance of the cluster to finish applying its new VPC security groups`);
+	}
+	async waitForSecurityGroupsApplied(dbClusterIdentifier, logicalId, expected, maxWaitMs = 18e5) {
+		const want = [...new Set(expected)].sort().join(" ");
+		const startTime = Date.now();
+		let delay = 5e3;
+		while (Date.now() - startTime < maxWaitMs) {
+			const cluster = await this.describeDBCluster(dbClusterIdentifier);
+			const groups = cluster?.VpcSecurityGroups ?? [];
+			const ids = groups.map((group) => group.VpcSecurityGroupId ?? "").sort().join(" ");
+			if (cluster !== void 0 && cluster.Status !== "modifying" && groups.every((group) => group.Status === "active") && ids === want) return;
+			this.logger.debug(safeMsg`Neptune DBCluster ${logicalId} security groups not settled yet (status ${cluster?.Status ?? "unknown"})`);
+			await this.sleep(delay);
+			delay = Math.min(delay * 2, 1e4);
+		}
+		throw new Error(`Timed out waiting for Neptune DBCluster ${logicalId} to apply its new VPC security groups`);
+	}
+	async waitForProtectionOffBeforeFinalSnapshot(logicalId, physicalId, maxWaitMs = FINAL_SNAPSHOT_SETTLE_WAIT_MS) {
+		const budgetMs = Math.min(maxWaitMs, enclosingDeadlineRemainingMs() - FINAL_SNAPSHOT_COMPENSATION_MARGIN_MS);
+		if (budgetMs <= 0) throw new Error(`--remove-protection turned DeletionProtection off, but the resource timeout leaves no time to wait for the cluster to return to 'available', which the final snapshot its DeletionPolicy asks for needs. The delete was not sent and the guard is put back; re-run the destroy with a longer --resource-timeout`);
+		const startTime = Date.now();
+		let delay = 5e3;
+		for (;;) {
+			const current = await this.describeDBCluster(physicalId);
+			if (current === void 0) return;
+			if (current.DeletionProtection === false && current.Status !== "modifying") return;
+			if (Date.now() - startTime + delay >= budgetMs) break;
+			this.logger.debug(safeMsg`Neptune DBCluster ${logicalId}: waiting for the DeletionProtection change to settle before the final snapshot (status ${current.Status ?? "unknown"})`);
+			await this.sleep(delay);
+			delay = Math.min(delay * 2, 1e4);
+		}
+		throw new Error(`--remove-protection turned DeletionProtection off, but the cluster did not return to 'available' within ${Math.max(1, Math.round(budgetMs / 6e4))} minutes, and the final snapshot its DeletionPolicy asks for needs it. The delete was not sent and the guard is put back; re-run the destroy once the cluster is 'available'`);
+	}
 	async waitForClusterAvailable(dbClusterIdentifier, maxWaitMs = 18e5) {
 		const startTime = Date.now();
 		let delay = 5e3;
@@ -738,7 +843,12 @@ var NeptuneProvider = class {
 		return null;
 	}
 };
+function securityGroupListChanged(sent, previous) {
+	if (sent === void 0) return false;
+	const before = Array.isArray(previous) ? previous.filter((id) => typeof id === "string") : [];
+	return [...sent].sort().join(" ") !== [...before].sort().join(" ");
+}
 
 //#endregion
 export { NeptuneProvider };
-//# sourceMappingURL=neptune-provider-WE1O3kXY.js.map
+//# sourceMappingURL=neptune-provider-CUoBJ6Ys.js.map

package/dist/neptune-provider-CUoBJ6Ys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neptune-provider-CUoBJ6Ys.js","names":[],"sources":["../src/provisioning/providers/neptune-provider.ts"],"mappings":";;;;;;;;AAgEA,SAAS,kBACP,SASyB;CACzB,OAAO,kBAAkB;EACvB,UAAU,SAAS;EACnB,MAAM,oBAAoB,SAAS,IAAI;EACvC,cAAc,SAAS;EACvB,oBAAoB,SAAS;EAC7B,iBAAiB,oBAAoB,SAAS,IAAI;EAClD,wBAAwB,SAAS;EACjC,mBAAmB,SAAS;CAC9B,CAAC;AACH;AAMA,SAAS,mBACP,UAMyB;CACzB,OAAO,kBAAkB;EACvB,UAAU,UAAU,UAAU;EAC9B,MAAM,oBAAoB,UAAU,UAAU,IAAI;EAClD,oBAAoB,UAAU,UAAU;EACxC,iBAAiB,oBAAoB,UAAU,UAAU,IAAI;EAC7D,KAAK,UAAU;CACjB,CAAC;AACH;AAOA,SAAS,eAAe,IAAqB;CAC3C,OAAO,GAAG,UAAU,MAAM,+BAA+B,KAAK,EAAE;AAClE;AAMA,MAAM,gCAAgC;AAGtC,MAAM,wCAAwC;AAyB9C,IAAa,kBAAb,MAAyD;CACvD,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAiB;CACjB,AAAQ,SAAS,UAAU,CAAC,CAAC,MAAM,iBAAiB;CAMpD,AAAiB,kBAAkB,IAAI,uBAAuB;CAa9D,oCAAoB,IAAI,IAAiC;EACvD,CACE,+CACA,IAAI,IAAI;GAAC;GAAqB;GAA4B;GAAa;EAAM,CAAC,CAChF;EACA,CACE,2CACA,IAAI,IAAI;GACN;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC,CACH;EACA,CACE,4CACA,IAAI,IAAI;GACN;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC,CACH;CACF,CAAC;CAOD,YAAY,SAA+B;EACzC,KAAK,iBAAiB,SAAS,UAAU,cAAc;CACzD;CAEA,AAAQ,YAA2B;EACjC,IAAI,CAAC,KAAK,eAAe;GAGvB,KAAK,gBAAgB,IAAI,cAAc;IACrC,GAAG,sBAAsB;IACzB,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;GAC/D,CAAC;GACD,KAAK,eAAe,0BAClB,IAAI,cAAc;IAChB,GAAG,sBAAsB;IACzB,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;GAC/D,CAAC,CACH;EACF;EACA,OAAO,KAAK;CACd;CAGA,AAAQ,eAA0B;EAChC,IAAI,CAAC,KAAK,WACR,KAAK,YAAY,IAAI,UAAU;GAC7B,GAAG,sBAAsB;GACzB,GAAI,KAAK,iBAAiB,EAAE,QAAQ,KAAK,eAAe,IAAI,CAAC;EAC/D,CAAC;EAEH,OAAO,KAAK;CACd;CAiBA,AAAQ,kBAAiC;EACvC,KAAK,UAAU;EACf,OAAO,KAAK;CACd;CAIA,MAAM,OACJ,WACA,cACA,YAC+B;EAC/B,QAAQ,cAAR;GACE,KAAK,+BACH,OAAO,KAAK,oBAAoB,WAAW,cAAc,UAAU;GACrE,KAAK,2BACH,OAAO,KAAK,gBAAgB,WAAW,cAAc,UAAU;GACjE,KAAK,4BACH,OAAO,KAAK,iBAAiB,WAAW,cAAc,UAAU;GAClE,SACE,MAAM,IAAI,kBACR,8BAA8B,gBAC9B,cACA,SACF;EACJ;CACF;CAEA,MAAM,OACJ,WACA,YACA,cACA,YACA,oBACA,SAC+B;EAC/B,QAAQ,cAAR;GACE,KAAK,+BACH,OAAO,KAAK,oBACV,WACA,YACA,cACA,YACA,kBACF;GACF,KAAK,2BACH,OAAO,KAAK,gBACV,WACA,YACA,cACA,YACA,oBACA,OACF;GACF,KAAK,4BACH,OAAO,KAAK,iBACV,WACA,YACA,cACA,YACA,kBACF;GACF,SACE,MAAM,IAAI,kBACR,8BAA8B,gBAC9B,cACA,WACA,UACF;EACJ;CACF;CAEA,MAAM,OACJ,WACA,YACA,cACA,aACA,SACe;EACf,QAAQ,cAAR;GACE,KAAK,+BACH,OAAO,KAAK,oBAAoB,WAAW,YAAY,cAAc,OAAO;GAC9E,KAAK,2BACH,OAAO,KAAK,gBAAgB,WAAW,YAAY,cAAc,OAAO;GAC1E,KAAK,4BACH,OAAO,KAAK,iBAAiB,WAAW,YAAY,cAAc,OAAO;GAC3E,SACE,MAAM,IAAI,kBACR,8BAA8B,gBAC9B,cACA,WACA,UACF;EACJ;CACF;CAIA,MAAc,oBACZ,WACA,cACA,YAC+B;EAC/B,KAAK,OAAO,MAAM,kCAAkC,WAAW;EAE/D,MAAM,OAAO,2BAA2B,WAAW,SAAS,cAAc,SAAS;EAEnF,MAAM,oBACH,WAAW,wBACZ,iBAAiB,+BAA+B,SAAS;EAE3D,IAAI;GACF,MAAM,KAAK,gBAAgB,CAAC,CAAC,KAC3B,IAAI,2BAA2B;IAC7B,mBAAmB;IACnB,0BACG,WAAW,+BAA0C,oBAAoB;IAC5E,WAAW,WAAW;IACtB,GAAI,KAAK,SAAS,KAAK,EAAE,MAAM,KAAK;GACtC,CAAC,CACH;GAEA,KAAK,OAAO,MACV,8CAA8C,UAAU,IAAI,mBAC9D;GAEA,OAAO;IACL,YAAY;IACZ,YAAY,EACV,mBAAmB,kBACrB;GACF;EACF,SAAS,OAAO;GACd,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,0CAA0C,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAClF,cACA,WACA,mBACA,KACF;EACF;CACF;CAEA,MAAc,oBACZ,WACA,YACA,cACA,YACA,oBAC+B;EAC/B,KAAK,OAAO,MAAM,kCAAkC,UAAU,IAAI,YAAY;EAE9E,2BAA2B,WAAW,SAAS,cAAc,WAAW,UAAU;EAElF,IAAI;GAKF,MAAM,YAAY,WAAW;GAC7B,MAAM,gBAAgB,cAAc,UAAa,UAAU,SAAS;GACpE,MAAM,cAAc;IAClB,mBAAmB;IAOnB,0BAA0B,qBACxB,WAAW,6BACX,mBAAmB,6BACnB,oBAAoB,WACtB;IACA,GAAI,iBAAiB,EAAE,WAAW,UAAU;GAC9C;GACA,MAAM,KAAK,UAAU,CAAC,CAAC,KAAK,IAAI,2BAA2B,WAAW,CAAC;GAKvE,MAAM,OAAM,MAHO,KAAK,UAAU,CAAC,CAAC,KAClC,IAAI,8BAA8B,EAAE,mBAAmB,WAAW,CAAC,CACrE,EACgB,CAAC,iBAAiB,EAAE,EAAE;GACtC,IAAI,KACF,MAAM,KAAK,aACT,KACA,cACA,WACA,mBAAmB,SACnB,WAAW,OACb;GAGF,KAAK,OAAO,MAAM,8CAA8C,WAAW;GAE3E,OAAO;IACL;IACA,aAAa;IACb,YAAY,EACV,mBAAmB,WACrB;GACF;EACF,SAAS,OAAO;GACd,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,0CAA0C,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAClF,cACA,WACA,YACA,KACF;EACF;CACF;CAEA,MAAc,oBACZ,WACA,YACA,cACA,SACe;EACf,KAAK,OAAO,MAAM,kCAAkC,UAAU,IAAI,YAAY;EAE9E,IAAI;GACF,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,2BAA2B,EAC7B,mBAAmB,WACrB,CAAC,CACH;GACA,KAAK,OAAO,MAAM,8CAA8C,WAAW;EAC7E,SAAS,OAAO;GACd,IAAI,KAAK,gBAAgB,OAAO,4BAA4B,GAAG;IAC7D,MAAM,eAAe,MAAM,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO;IAC1D,kBACE,cACA,SAAS,gBACT,cACA,WACA,UACF;IACA,KAAK,OAAO,MAAM,yBAAyB,WAAW,mCAAmC;IACzF;GACF;GACA,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,0CAA0C,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAClF,cACA,WACA,YACA,KACF;EACF;CACF;CAIA,MAAc,gBACZ,WACA,cACA,YAC+B;EAC/B,KAAK,OAAO,MAAM,8BAA8B,WAAW;EAE3D,MAAM,OAAO,2BAA2B,WAAW,SAAS,cAAc,SAAS;EAEnF,MAAM,sBACH,WAAW,0BACZ,iBAAiB,2BAA2B,SAAS;EAGvD,IAAI,iBAAiB;EAGrB,IAAI;EACJ,IAAI;GACF,MAAM,WAAW,MAAM,KAAK,gBAAgB,CAAC,CAAC,KAC5C,IAAI,uBAAuB;IACzB,qBAAqB;IAErB,QAAQ;IACR,eAAe,WAAW;IAI1B,MACE,WAAW,aAAa,OACpB,OAAO,WAAW,SAAS,IAC3B,WAAW,WAAW,OACpB,OAAO,WAAW,OAAO,IACzB;IACR,qBAAqB,WAAW;IAChC,mBAAmB,WAAW;IAC9B,kBAAkB,WAAW;IAC7B,UAAU,WAAW;IACrB,uBACE,WAAW,4BAA4B,OACnC,OAAO,WAAW,wBAAwB,IAC1C;IACN,uBAAuB,WAAW;IAClC,4BAA4B,WAAW;IAGvC,6BAA6B,WAAW;IAGxC,iCAAiC,WAAW;IAC5C,oBAAoB,WAAW;IAC/B,GAAI,KAAK,SAAS,KAAK,EAAE,MAAM,KAAK;GACtC,CAAC,CACH;GACA,iBAAiB;GACjB,oBAAoB,SAAS,WAAW;GAGxC,IAAI,CADY,SAAS,WAEvB,MAAM,IAAI,MAAM,0CAA0C;GAG5D,KAAK,OAAO,MACV,0CAA0C,UAAU,IAAI,qBAC1D;GAGA,IAAI,QAAQ,IAAI,oBAAoB,QAClC,MAAM,KAAK,wBAAwB,mBAAmB;GAKxD,OAAO;IACL,YAAY;IACZ,YAAY,kBAAkB,MAJR,KAAK,kBAAkB,mBAAmB,CAIzB;GACzC;EACF,SAAS,OAAO;GACd,MAAM,SACJ,iBAAiB,oBACb,QACA,IAAI,kBACF,sCAAsC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC9E,cACA,WACA,qBACA,iBAAiB,QAAQ,QAAQ,MACnC;GAGN,IAAI,gBACF,yBACE,QACA,WACA,cACA,qBACA,iBACF;GAEF,MAAM;EACR;CACF;CAEA,MAAc,gBACZ,WACA,YACA,cACA,YACA,oBACA,SAC+B;EAC/B,KAAK,OAAO,MAAM,8BAA8B,UAAU,IAAI,YAAY;EAE1E,2BAA2B,WAAW,SAAS,cAAc,WAAW,UAAU;EAElF,IAAI;GAEF,MAAM,WAAW,MAAM,KAAK,8BAC1B,WACA,YACA,cACA,YACA,oBACA,OACF;GAsBA,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,uBAAuB;IACzB,qBAAqB;IACrB,eAAe,WAAW;IAI1B,oBAAoB,WAAW;IAC/B,uBACE,WAAW,4BAA4B,OACnC,OAAO,WAAW,wBAAwB,IAC1C;IACN,uBAAuB,WAAW;IAClC,4BAA4B,WAAW;IAGvC,6BAA6B,WAAW;IAKxC,iCAAiC,WAAW;IAC5C,GAAI,aAAa,UAAa,EAAE,qBAAqB,SAAS;IAC9D,MACE,WAAW,aAAa,OACpB,OAAO,WAAW,SAAS,IAC3B,WAAW,WAAW,OACpB,OAAO,WAAW,OAAO,IACzB;IACR,kBAAkB;GACpB,CAAC,CACH;GAEA,KAAK,OAAO,MAAM,0CAA0C,WAAW;GAEvE,MAAM,YAAY,MAAM,KAAK,kBAAkB,UAAU;GASzD,IACE,QAAQ,IAAI,oBAAoB,UAChC,yBAAyB,UAAU,mBAAmB,sBAAsB,GAC5E;IACA,MAAM,KAAK,6BAA6B,YAAY,WAAW,YAAY,CAAC,CAAC;IAC7E,KAAK,MAAM,UAAU,WAAW,oBAAoB,CAAC,GACnD,IAAI,OAAO,sBACT,MAAM,KAAK,sCAAsC,OAAO,oBAAoB;GAGlF;GAEA,IAAI,WAAW,cACb,MAAM,KAAK,aACT,UAAU,cACV,cACA,WACA,mBAAmB,SACnB,WAAW,OACb;GAGF,OAAO;IACL;IACA,aAAa;IACb,YAAY,kBAAkB,SAAS;GACzC;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,mBAAmB,MAAM;GAC9C,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,sCAAsC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC9E,cACA,WACA,YACA,KACF;EACF;CACF;CAOA,MAAc,gBACZ,WACA,YACA,cACA,SACe;EACf,MAAM,iCAAiC;GACrC,UAAU,KAAK;GACf,KAAK,kBAAkB,cAAc,YAAY,SAAS,cAAc;GACxE,MAAM,SAAS,KAAK,oBAAoB,WAAW,YAAY,cAAc,SAAS,IAAI;GAC1F,cAAc;IACZ;IACA;IACA,QAAQ,KAAK;IACb,MAAM,wBAAwB;KAC5B,YAAY;KACZ,cAAc;KACd,MAAM;KACN;KACA,QAAQ,SAAS;KACjB,eAAe;KACf,aAAa,UAAU,KAAK,gBAAgB,OAAO,wBAAwB;IAC7E,CAAC;IACD,UAAU,YAAY;KACpB,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,uBAAuB;MACzB,qBAAqB;MACrB,oBAAoB;MACpB,kBAAkB;KACpB,CAAC,CACH;IACF;GACF;EACF,CAAC;CACH;CAEA,MAAc,oBACZ,WACA,YACA,cACA,SACA,MACe;EACf,KAAK,OAAO,MAAM,8BAA8B,WAAW;EAE3D,IAAI;GAQF,IAAI,SAAS,qBAAqB,MAChC,IAAI;IACF,MAAM,6BAA6B;KACjC;KACA,QAAQ,KAAK;KACb;KACA,MAAM,SAAS;KACf,WAAW;KACX,SAAS,aACN,MAAM,KAAK,kBAAkB,UAAU,EAAC,EAAG,uBAAuB;KACrE,SAAS,YAAY;MACnB,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,uBAAuB;OACzB,qBAAqB;OACrB,oBAAoB;OACpB,kBAAkB;MACpB,CAAC,CACH;KACF;IACF,CAAC;IACD,KAAK,OAAO,MACV,oDAAoD,UAAU,eAChE;GACF,SAAS,cAAc;IACrB,IAAI,CAAC,KAAK,gBAAgB,cAAc,wBAAwB,GAC9D,KAAK,OAAO,MACV,iBAAiB,SAAS,WAAW,CAAC,CACpC,+DAA+D,UAAU,IAAI,mBAAmB,YAAY,CAAC,CAAC,QAChH,CACF;GAEJ;GAKF,MAAM,kBAAkB,SAAS;GAIjC,IAAI,mBAAmB,KAAK,uBAAuB,CAAC,KAAK,gBACvD,MAAM,KAAK,wCAAwC,WAAW,UAAU;GAE1E,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,uBAAuB;IACzB,qBAAqB;IACrB,GAAI,kBACA;KAAE,mBAAmB;KAAO,2BAA2B;IAAgB,IACvE,EAAE,mBAAmB,KAAK;GAChC,CAAC,CACH;GAGA,KAAK,iBAAiB;GAGtB,IAAI,iBACF,KAAK,OAAO,KACV,8BAA8B,UAAU,kDAC1C;GAGF,KAAK,OAAO,MAAM,wDAAwD,WAAW;GAGrF,MAAM,KAAK,sBAAsB,WAAW,UAAU;EACxD,SAAS,OAAO;GACd,IAAI,KAAK,gBAAgB,OAAO,wBAAwB,GAAG;IACzD,MAAM,eAAe,MAAM,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO;IAC1D,kBACE,cACA,SAAS,gBACT,cACA,WACA,UACF;IACA,IAAI,SAAS,uBAAuB,MAGlC,KAAK,OAAO,KACV,OAAO,wBAAwB,WAAW,IAAI,UAAU,qEAC1D;SAEA,KAAK,OAAO,MAAM,qBAAqB,UAAU,mCAAmC;IAEtF;GACF;GACA,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,sCAAsC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC9E,cACA,WACA,YACA,KACF;EACF;CACF;CAIA,MAAc,iBACZ,WACA,cACA,YAC+B;EAC/B,KAAK,OAAO,MAAM,+BAA+B,WAAW;EAE5D,MAAM,OAAO,2BAA2B,WAAW,SAAS,cAAc,SAAS;EAEnF,MAAM,uBACH,WAAW,2BACZ,iBAAiB,4BAA4B,SAAS;EAGxD,IAAI,kBAAkB;EAGtB,IAAI;EACJ,IAAI;GACF,MAAM,WAAW,MAAM,KAAK,gBAAgB,CAAC,CAAC,KAC5C,IAAI,wBAAwB;IAC1B,sBAAsB;IACtB,iBAAiB,WAAW;IAE5B,QAAQ;IACR,qBAAqB,WAAW;IAChC,mBAAmB,WAAW;IAC9B,sBAAsB,WAAW;IACjC,kBAAkB,WAAW;IAC7B,4BAA4B,WAAW;IAGvC,yBAAyB,WAAW;IACpC,oBAAoB,WAAW;IAC/B,GAAI,KAAK,SAAS,KAAK,EAAE,MAAM,KAAK;GACtC,CAAC,CACH;GACA,kBAAkB;GAClB,oBAAoB,SAAS,YAAY;GAGzC,IAAI,CADa,SAAS,YAExB,MAAM,IAAI,MAAM,4CAA4C;GAG9D,KAAK,OAAO,MACV,2CAA2C,UAAU,IAAI,sBAC3D;GAGA,IAAI,QAAQ,IAAI,oBAAoB,QAClC,MAAM,KAAK,yBAAyB,oBAAoB;GAK1D,OAAO;IACL,YAAY;IACZ,YAAY,mBAAmB,MAJT,KAAK,mBAAmB,oBAAoB,CAI1B;GAC1C;EACF,SAAS,OAAO;GACd,MAAM,SACJ,iBAAiB,oBACb,QACA,IAAI,kBACF,uCAAuC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC/E,cACA,WACA,sBACA,iBAAiB,QAAQ,QAAQ,MACnC;GAGN,IAAI,iBACF,yBACE,QACA,WACA,cACA,sBACA,iBACF;GAEF,MAAM;EACR;CACF;CAEA,MAAc,iBACZ,WACA,YACA,cACA,YACA,oBAC+B;EAC/B,KAAK,OAAO,MAAM,+BAA+B,UAAU,IAAI,YAAY;EAE3E,2BAA2B,WAAW,SAAS,cAAc,WAAW,UAAU;EAElF,IAAI;GAYF,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,wBAAwB;IAC1B,sBAAsB;IACtB,iBAAiB,WAAW;IAC5B,sBAAsB,WAAW;IACjC,4BAA4B,WAAW;IAKvC,yBAAyB,WAAW;IAEpC,oBAAoB,WAAW;IAC/B,kBAAkB;GACpB,CAAC,CACH;GAEA,KAAK,OAAO,MAAM,2CAA2C,WAAW;GAExE,MAAM,YAAY,MAAM,KAAK,mBAAmB,UAAU;GAE1D,IAAI,WAAW,eACb,MAAM,KAAK,aACT,UAAU,eACV,cACA,WACA,mBAAmB,SACnB,WAAW,OACb;GAGF,OAAO;IACL;IACA,aAAa;IACb,YAAY,mBAAmB,SAAS;GAC1C;EACF,SAAS,OAAO;GACd,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,uCAAuC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC/E,cACA,WACA,YACA,KACF;EACF;CACF;CAGA,MAAc,iBACZ,WACA,YACA,cACA,SACe;EACf,MAAM,iCAAiC;GACrC,UAAU,KAAK;GACf,KAAK,kBAAkB,cAAc,YAAY,SAAS,cAAc;GACxE,MAAM,SAAS,KAAK,qBAAqB,WAAW,YAAY,cAAc,SAAS,IAAI;GAC3F,cAAc;IACZ;IACA;IACA,QAAQ,KAAK;IACb,MAAM,wBAAwB;KAC5B,YAAY;KACZ,cAAc;KACd,MAAM;KACN;KACA,QAAQ,SAAS;KACjB,eAAe;KACf,aAAa,UAAU,KAAK,gBAAgB,OAAO,yBAAyB;IAC9E,CAAC;IACD,UAAU,YAAY;KACpB,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,wBAAwB;MAC1B,sBAAsB;MACtB,oBAAoB;MACpB,kBAAkB;KACpB,CAAC,CACH;IACF;GACF;EACF,CAAC;CACH;CAEA,MAAc,qBACZ,WACA,YACA,cACA,SACA,MACe;EACf,KAAK,OAAO,MAAM,+BAA+B,UAAU,IAAI,YAAY;EAE3E,IAAI;GAOF,IAAI,SAAS,qBAAqB,MAChC,IAAI;IACF,MAAM,6BAA6B;KACjC;KACA,QAAQ,KAAK;KACb;KACA,MAAM,SAAS;KACf,WAAW;KACX,SAAS,aACN,MAAM,KAAK,mBAAmB,UAAU,EAAC,EAAG,uBAAuB;KACtE,SAAS,YAAY;MACnB,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,wBAAwB;OAC1B,sBAAsB;OACtB,oBAAoB;OACpB,kBAAkB;MACpB,CAAC,CACH;KACF;IACF,CAAC;IACD,KAAK,OAAO,MACV,qDAAqD,UAAU,eACjE;GACF,SAAS,cAAc;IACrB,IAAI,CAAC,KAAK,gBAAgB,cAAc,yBAAyB,GAC/D,KAAK,OAAO,MACV,iBAAiB,SAAS,WAAW,CAAC,CACpC,6CAA6C,WAAW,IAAI,mBAAmB,YAAY,CAAC,CAAC,QAC/F,CACF;GAEJ;GAGF,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,wBAAwB;IAC1B,sBAAsB;IACtB,mBAAmB;GACrB,CAAC,CACH;GAEA,KAAK,iBAAiB;GAEtB,KAAK,OAAO,MAAM,yDAAyD,WAAW;GAGtF,MAAM,KAAK,uBAAuB,UAAU;EAC9C,SAAS,OAAO;GACd,IAAI,KAAK,gBAAgB,OAAO,yBAAyB,GAAG;IAC1D,MAAM,eAAe,MAAM,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO;IAC1D,kBACE,cACA,SAAS,gBACT,cACA,WACA,UACF;IACA,IAAI,SAAS,uBAAuB,MAGlC,KAAK,OAAO,KACV,OAAO,yBAAyB,WAAW,IAAI,UAAU,qEAC3D;SAEA,KAAK,OAAO,MAAM,sBAAsB,WAAW,mCAAmC;IAExF;GACF;GACA,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;GAC/C,MAAM,IAAI,kBACR,uCAAuC,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC,UAC/E,cACA,WACA,YACA,KACF;EACF;CACF;CASA,MAAc,aACZ,KACA,cACA,WACA,YACA,YACe;EAGf,MAAM,OAAO,YAAY,YAAY,UAAU;EAC/C,MAAM,aAAa,eAAe,MAAM,cAAc,SAAS;EAC/D,IAAI,eAAe,QACjB,KAAK,OAAO,KAAK,UAAU;EAE7B,MAAM,YAAY,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY;GAAE;GAAK;EAAM,EAAE;EACtE,MAAM,eAAe,KAAK;EAE1B,IAAI,aAAa,SAAS,GAAG;GAC3B,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,8BAA8B;IAAE,cAAc;IAAK,SAAS;GAAa,CAAC,CAChF;GACA,KAAK,OAAO,MAAM,WAAW,aAAa,OAAO,gCAAgC,KAAK;EACxF;EACA,IAAI,UAAU,SAAS,GAAG;GACxB,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,yBAAyB;IAAE,cAAc;IAAK,MAAM;GAAU,CAAC,CACrE;GACA,KAAK,OAAO,MAAM,iBAAiB,UAAU,OAAO,8BAA8B,KAAK;EACzF;CACF;CAEA,AAAQ,gBAAgB,OAAgB,WAA4B;EAClE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;EACtC,MAAM,OAAQ,MAA4B,QAAQ;EAClD,MAAM,UAAU,MAAM,QAAQ,YAAY;EAC1C,OACE,SAAS,aAAa,QAAQ,SAAS,WAAW,KAAK,QAAQ,SAAS,gBAAgB;CAE5F;CAuBA,MAAM,eACJ,qBACA,QACA,cACA,SACkC;EAClC,IAAI,iBAAiB,6BAA6B,iBAAiB,4BACjE,OAAO;EAET,IAAI,CAAC,eAAe,mBAAmB,KAAK,CAAC,eAAe,OAAO,UAAU,GAC3E,OAAO;EAET,IAAI,oBAAoB,YAAY,MAAM,OAAO,WAAW,YAAY,GAAG,OAAO;EAElF,IAAI,MADuB,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,MACrC,QAAQ,gBAAgB,OAAO;EACpD,MAAM,mBAAmB,MAAM,KAAK,yBAAyB,cAAc,OAAO,UAAU;EAC5F,IAAI,qBAAqB,QAAW,OAAO;EAC3C,MAAM,sBAAsB,MAAM,KAAK,yBACrC,cACA,mBACF;EACA,IAAI,wBAAwB,QAAW,OAAO;EAC9C,OAAO,wBAAwB,mBAAmB,SAAS;CAC7D;CAiBA,MAAM,iBACJ,YACA,cACA,SACgD;EAChD,IAAI,iBAAiB,6BAA6B,iBAAiB,4BACjE;EAEF,IAAI,CAAC,eAAe,UAAU,GAAG,OAAO;EAExC,IAAI,MADuB,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,MACrC,QAAQ,gBAAgB,OAAO;EACpD,MAAM,OAAO,MAAM,KAAK,yBAAyB,cAAc,UAAU;EACzE,OAAO,SAAS,SAAY,qBAAqB;CACnD;CAWA,MAAc,yBACZ,cACA,YAC6B;EAC7B,MAAM,YAAY,iBAAiB;EACnC,IAAI;EAOJ,IAAI;GACF,IAAI,WAAW;IACb,MAAM,UAAU,MAAM,KAAK,kBAAkB,UAAU;IACvD,QAAQ,WAAW;KACjB,YAAY,QAAQ;KACpB,QAAQ,QAAQ;KAChB,YAAY,QAAQ;IACtB;GACF,OAAO;IACL,MAAM,WAAW,MAAM,KAAK,mBAAmB,UAAU;IACzD,QAAQ,YAAY;KAClB,YAAY,SAAS;KACrB,QAAQ,SAAS;KACjB,YAAY,SAAS;IACvB;GACF;EACF,SAAS,OAAO;GACd,MAAM,WAAW,YAAY,2BAA2B;GACxD,IAAK,OAAqC,SAAS,UAAU,OAAO;GACpE,MAAM;EACR;EACA,IAAI,UAAU,QAAW,OAAO;EAChC,MAAM,MAAM,YAAY,uBAAuB;EAC/C,IAAI,MAAM,YAAY,YAAY,MAAM,WAAW,YAAY,GAC7D,MAAM,IAAI,MAAM,GAAG,IAAI,iCAAiC;EAE1D,IAAI,MAAM,WAAW,WACnB,MAAM,IAAI,MAAM,GAAG,IAAI,2CAA2C;EAEpE,IAAI,OAAO,MAAM,eAAe,YAAY,MAAM,eAAe,IAC/D,MAAM,IAAI,MAAM,GAAG,IAAI,yBAAyB;EAElD,OAAO,MAAM;CACf;CAEA,MAAc,kBAAkB,qBAA6B;EAM3D,QAAO,MALgB,KAAK,UAAU,CAAC,CAAC,KACtC,IAAI,0BAA0B,EAC5B,qBAAqB,oBACvB,CAAC,CACH,EACe,CAAC,aAAa;CAC/B;CAiBA,MAAc,8BACZ,WACA,YACA,cACA,YACA,oBACA,SAC+B;EAC/B,MAAM,UAAU,WAAW;EAC3B,IAAI,YAAY,QAAW,OAAO,QAAQ,SAAS,IAAI,UAAU;EACjE,MAAM,WAAW,mBAAmB;EACpC,IAAI,SAAS,2BAA2B,MAAM,OAAO;EACrD,IAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,GAAG,OAAO;EAI9D,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI;GACF,MAAM,mBAAmB,MAAM,KAAK,kBAAkB,UAAU,EAAC,EAAG;GACpE,MAAM,QAAQ,mBAER,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,8BAA8B,EAAE,mBAAmB,gBAAgB,CAAC,CAC1E,EAAC,CACD,iBAAiB,EAAE,EAAE,QACvB;GACJ,IAAI,CAAC,iBAAiB,UAAU;QAC3B,IAAI,CAAC,OAAO,UAAU,mBAAmB,gBAAgB;QACzD;IASH,WAAU,MARW,KAAK,aAAa,CAAC,CAAC,KACvC,IAAI,8BAA8B,EAChC,SAAS,CACP;KAAE,MAAM;KAAU,QAAQ,CAAC,KAAK;IAAE,GAClC;KAAE,MAAM;KAAc,QAAQ,CAAC,SAAS;IAAE,CAC5C,EACF,CAAC,CACH,EACgB,CAAC,iBAAiB,EAAE,EAAE;IACtC,IAAI,CAAC,SAAS,UAAU,OAAO,MAAM;GACvC;EACF,SAAS,OAAO;GACd,WAAW;EACb;EACA,IAAI,YAAY,QAAW;GAKzB,MAAM,OAAO,SAAS,iBAAiB,SAAiB;GACxD,MAAM,UAAU,YAAY,SAAY,mBAAmB,QAAQ,IAAI;GACvE,IAAI,SAAS,aAAa,MACxB,KAAK,OAAO,MACV,OAAO,GAAG,UAAU,kDAAkD,KAAK,QAAQ,MAAM,GAC3F;GAEF,MAAM,QAAQ,KAAK,SAAS,WAAW,EAAE;GACzC,MAAM,UAAU,IAAI,kBAClB,sCAAsC,UAAU,8KAA8K,WAAW,MAAM,yFAC/O,cACA,WACA,YACA,oBAAoB,QAAQ,WAAW,MACzC;GACA,IAAI,YAAY,QAAW,MAAM,iBAAiB,OAAO;GAOzD,MAFE,oBAAoB,UACnB,SAAS,aAAa,QAAQ,WAAW,SAAS,WAAW,OAC/C,kBAAkB,OAAO,IAAI;EAChD;EAEA,KAAK,OAAO,KACV,OAAO,GAAG,UAAU,kGAAkG,QAAQ,0BAChI;EACA,OAAO,CAAC,OAAO;CACjB;CAEA,MAAc,mBAAmB,sBAA8B;EAM7D,QAAO,MALgB,KAAK,UAAU,CAAC,CAAC,KACtC,IAAI,2BAA2B,EAC7B,sBAAsB,qBACxB,CAAC,CACH,EACe,CAAC,cAAc;CAChC;CASA,MAAc,sCACZ,sBACA,YAAY,MACG;EACf,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EACZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GACzC,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,KAAK,mBAAmB,oBAAoB,EAAC,EAAG;GAClE,SAAS,OAAO;IACd,IAAI,KAAK,gBAAgB,OAAO,yBAAyB,GAAG;IAC5D,MAAM;GACR;GACA,IAAI,WAAW,aAAa;GAC5B,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EACA,MAAM,IAAI,MACR,uGACF;CACF;CAOA,MAAc,6BACZ,qBACA,WACA,UACA,YAAY,MACG;EACf,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;EACnD,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EACZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GACzC,MAAM,UAAU,MAAM,KAAK,kBAAkB,mBAAmB;GAChE,MAAM,SAAS,SAAS,qBAAqB,CAAC;GAC9C,MAAM,MAAM,OACT,KAAK,UAAU,MAAM,sBAAsB,EAAE,CAAC,CAC9C,KAAK,CAAC,CACN,KAAK,GAAG;GAQX,IAJE,YAAY,UACZ,QAAQ,WAAW,eACnB,OAAO,OAAO,UAAU,MAAM,WAAW,QAAQ,KACjD,QAAQ,MACG;GACb,KAAK,OAAO,MACV,OAAO,qBAAqB,UAAU,2CAA2C,SAAS,UAAU,UAAU,EAChH;GACA,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EACA,MAAM,IAAI,MACR,2CAA2C,UAAU,sCACvD;CACF;CAWA,MAAc,wCACZ,WACA,YACA,YAAY,+BACG;EAMf,MAAM,WAAW,KAAK,IACpB,WACA,6BAA6B,IAAI,qCACnC;EACA,IAAI,YAAY,GACd,MAAM,IAAI,MACR,iTACF;EAEF,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EACZ,SAAS;GACP,MAAM,UAAU,MAAM,KAAK,kBAAkB,UAAU;GACvD,IAAI,YAAY,QAAW;GAG3B,IAAI,QAAQ,uBAAuB,SAAS,QAAQ,WAAW,aAAa;GAC5E,IAAI,KAAK,IAAI,IAAI,YAAY,SAAS,UAAU;GAChD,KAAK,OAAO,MACV,OAAO,qBAAqB,UAAU,0FAA0F,QAAQ,UAAU,UAAU,EAC9J;GACA,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EACA,MAAM,IAAI,MACR,2GAA2G,KAAK,IAAI,GAAG,KAAK,MAAM,WAAW,GAAM,CAAC,EAAE,6KACxJ;CACF;CAKA,MAAc,wBACZ,qBACA,YAAY,MACG;EACf,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EAEZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GAEzC,MAAM,UAAS,MADO,KAAK,kBAAkB,mBAAmB,EAC1C,EAAE;GAExB,KAAK,OAAO,MAAM,qBAAqB,oBAAoB,WAAW,QAAQ;GAE9E,IAAI,WAAW,aAAa;GAE5B,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EAEA,MAAM,IAAI,MACR,2CAA2C,oBAAoB,qBACjE;CACF;CAKA,MAAc,sBACZ,WACA,qBACA,YAAY,MACG;EACf,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EAEZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GACzC,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,kBAAkB,mBAAmB;IAChE,MAAM,SAAS,SAAS;IAExB,KAAK,OAAO,MAAM,qBAAqB,UAAU,WAAW,QAAQ;IAEpE,IAAI,CAAC,SAAS;GAChB,SAAS,OAAO;IACd,IAAI,KAAK,gBAAgB,OAAO,wBAAwB,GACtD;IAEF,MAAM;GACR;GAEA,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EAEA,MAAM,IAAI,MAAM,2CAA2C,UAAU,eAAe;CACtF;CAKA,MAAc,yBACZ,sBACA,YAAY,MACG;EACf,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EAEZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GAEzC,MAAM,UAAS,MADQ,KAAK,mBAAmB,oBAAoB,EAC5C,EAAE;GAEzB,KAAK,OAAO,MAAM,sBAAsB,qBAAqB,WAAW,QAAQ;GAEhF,IAAI,WAAW,aAAa;GAE5B,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EAEA,MAAM,IAAI,MACR,4CAA4C,qBAAqB,qBACnE;CACF;CAEA,MAAc,uBACZ,sBACA,YAAY,MACG;EACf,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,QAAQ;EAEZ,OAAO,KAAK,IAAI,IAAI,YAAY,WAAW;GACzC,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,mBAAmB,oBAAoB;IACnE,MAAM,SAAS,UAAU;IAEzB,KAAK,OAAO,MAAM,sBAAsB,qBAAqB,WAAW,QAAQ;IAEhF,IAAI,CAAC,UAAU;GACjB,SAAS,OAAO;IACd,IAAI,KAAK,gBAAgB,OAAO,yBAAyB,GACvD;IAEF,MAAM;GACR;GAEA,MAAM,KAAK,MAAM,KAAK;GACtB,QAAQ,KAAK,IAAI,QAAQ,GAAG,GAAM;EACpC;EAEA,MAAM,IAAI,MACR,4CAA4C,qBAAqB,eACnE;CACF;CAEA,AAAQ,MAAM,IAA2B;EACvC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;CACzD;CAKA,MAAM,OAAO,OAAkE;EAC7E,QAAQ,MAAM,cAAd;GACE,KAAK,4BACH,OAAO,KAAK,iBAAiB,KAAK;GACpC,KAAK,2BACH,OAAO,KAAK,gBAAgB,KAAK;GACnC,KAAK,+BACH,OAAO,KAAK,oBAAoB,KAAK;GACvC,SACE,OAAO;EACX;CACF;CAQA,MAAM,iBACJ,YACA,YACA,cACiE;EACjE,QAAQ,cAAR;GACE,KAAK,4BACH,OAAO,KAAK,2BAA2B,UAAU;GACnD,KAAK,2BACH,OAAO,KAAK,0BAA0B,UAAU;GAClD,KAAK,+BACH,OAAO,KAAK,8BAA8B,UAAU;GACtD,SACE;EACJ;CACF;CAEA,MAAc,2BACZ,YACiE;EACjE,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,KAAK,mBAAmB,UAAU;EACjD,SAAS,KAAK;GAGZ,IAAK,KAAmC,SAAS,2BAC/C,OAAO;GACT,IAAI,KAAK,gBAAgB,KAAK,yBAAyB,GAAG,OAAO;GACjE,MAAM;EACR;EACA,IAAI,CAAC,MAAM,OAAO;EAElB,MAAM,SAAkC,CAAC;EACzC,IAAI,KAAK,yBAAyB,QAChC,OAAO,0BAA0B,KAAK;EAExC,IAAI,KAAK,oBAAoB,QAAW,OAAO,qBAAqB,KAAK;EACzE,IAAI,KAAK,wBAAwB,QAC/B,OAAO,yBAAyB,KAAK;EAEvC,IAAI,KAAK,eAAe,sBAAsB,QAC5C,OAAO,uBAAuB,KAAK,cAAc;EAEnD,IAAI,KAAK,qBAAqB,QAAW,OAAO,sBAAsB,KAAK;EAC3E,IAAI,KAAK,+BAA+B,QACtC,OAAO,gCAAgC,KAAK;EAE9C,IAAI,KAAK,4BAA4B,QACnC,OAAO,6BAA6B,KAAK;EAE3C,IAAI,KAAK,uBAAuB,QAC9B,OAAO,wBAAwB,KAAK;EAItC,MAAM,KAAK,KAAK,oBAAoB,EAAE,EAAE;EACxC,IAAI,OAAO,QAAW,OAAO,0BAA0B;EAEvD,IAAI,KAAK,eAAe,MAAM,KAAK,WAAW,QAAQ,KAAK,aAAa;EACxE,OAAO;CACT;CAEA,MAAc,0BACZ,YACiE;EACjE,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,KAAK,kBAAkB,UAAU;EACnD,SAAS,KAAK;GAGZ,IAAK,KAAmC,SAAS,0BAC/C,OAAO;GACT,IAAI,KAAK,gBAAgB,KAAK,wBAAwB,GAAG,OAAO;GAChE,MAAM;EACR;EACA,IAAI,CAAC,SAAS,OAAO;EAErB,MAAM,SAAkC,CAAC;EACzC,IAAI,QAAQ,wBAAwB,QAClC,OAAO,yBAAyB,QAAQ;EAE1C,IAAI,QAAQ,kBAAkB,QAAW,OAAO,mBAAmB,QAAQ;EAK3E,IAAI,QAAQ,SAAS,QAAW;GAC9B,OAAO,UAAU,QAAQ;GACzB,OAAO,YAAY,QAAQ;EAC7B;EACA,OAAO,0BAA0B,QAAQ,qBAAqB,CAAC,EAAC,CAC7D,KAAK,OAAO,GAAG,kBAAkB,CAAC,CAClC,QAAQ,OAAqB,CAAC,CAAC,EAAE;EACpC,IAAI,QAAQ,kBAAkB,QAAW,OAAO,uBAAuB,QAAQ;EAC/E,IAAI,QAAQ,qBAAqB,QAC/B,OAAO,sBAAsB,QAAQ;EAEvC,IAAI,QAAQ,aAAa,QAAW,OAAO,cAAc,QAAQ;EACjE,IAAI,QAAQ,0BAA0B,QACpC,OAAO,2BAA2B,QAAQ;EAE5C,IAAI,QAAQ,0BAA0B,QACpC,OAAO,2BAA2B,QAAQ;EAE5C,IAAI,QAAQ,+BAA+B,QACzC,OAAO,gCAAgC,QAAQ;EAEjD,IAAI,QAAQ,4BAA4B,QACtC,OAAO,iCAAiC,QAAQ;EAElD,IAAI,QAAQ,qCAAqC,QAC/C,OAAO,oBAAoB,QAAQ;EAErC,IAAI,QAAQ,uBAAuB,QACjC,OAAO,wBAAwB,QAAQ;EAEzC,IAAI,QAAQ,cAAc,MAAM,KAAK,WAAW,QAAQ,QAAQ,YAAY;EAC5E,OAAO;CACT;CAEA,MAAc,8BACZ,YACiE;EACjE,IAAI;EAQJ,IAAI;GACF,OAAQ,MAAM,KAAK,UAAU,CAAC,CAAC,KAC7B,IAAI,8BAA8B,EAAE,mBAAmB,WAAW,CAAC,CACrE;EACF,SAAS,KAAK;GAGZ,IAAK,KAAmC,SAAS,8BAC/C,OAAO;GACT,IAAI,KAAK,gBAAgB,KAAK,4BAA4B,GAAG,OAAO;GACpE,MAAM;EACR;EACA,MAAM,KAAK,KAAK,iBAAiB;EACjC,IAAI,CAAC,IAAI,OAAO;EAEhB,MAAM,SAAkC,CAAC;EACzC,IAAI,GAAG,sBAAsB,QAAW,OAAO,uBAAuB,GAAG;EACzE,IAAI,GAAG,6BAA6B,QAClC,OAAO,8BAA8B,GAAG;EAE1C,OAAO,gBAAgB,GAAG,WAAW,CAAC,EAAC,CACpC,KAAK,MAAM,EAAE,gBAAgB,CAAC,CAC9B,QAAQ,OAAqB,CAAC,CAAC,EAAE;EACpC,IAAI,GAAG,kBAAkB,MAAM,KAAK,WAAW,QAAQ,GAAG,gBAAgB;EAC1E,OAAO;CACT;CAMA,MAAc,WAAW,QAAiC,KAA4B;EACpF,IAAI;GACF,MAAM,WAAW,MAAM,KAAK,UAAU,CAAC,CAAC,KACtC,IAAI,2BAA2B,EAAE,cAAc,IAAI,CAAC,CACtD;GAEA,OAAO,UADM,sBAAsB,SAAS,OACxB;EACtB,SAAS,KAAK;GACZ,KAAK,OAAO,MACV,+BAA+B,IAAI,YAAY,mBAAmB,GAAG,CAAC,CAAC,QACzE;EACF;CACF;CAEA,MAAc,iBAAiB,OAAkE;EAC/F,MAAM,WAAW,0BAA0B,OAAO,sBAAsB;EACxE,IAAI,UACF,IAAI;GAUF,MAAM,aAAY,MATC,KAAK,UAAU,CAAC,CAAC,KAClC,IAAI,2BAA2B,EAAE,sBAAsB,SAAS,CAAC,CACnE,EAOsB,CAAC,cAAc;GACrC,OAAO;IACL,YAAY;IACZ,YAAY,mBAAmB,SAAS;GAC1C;EACF,SAAS,KAAK;GACZ,IAAK,IAA0B,SAAS,2BAA2B,OAAO;GAC1E,MAAM;EACR;EAOF,OAAO;CACT;CAEA,MAAc,gBAAgB,OAAkE;EAC9F,MAAM,WAAW,0BAA0B,OAAO,qBAAqB;EACvE,IAAI,UACF,IAAI;GAKF,OAAO;IAAE,YAAY;IAAU,YAAY,mBAAkB,MAJ1C,KAAK,UAAU,CAAC,CAAC,KAClC,IAAI,0BAA0B,EAAE,qBAAqB,SAAS,CAAC,CACjE,EAEiE,CAAC,aAAa,EAAE;GAAE;EACrF,SAAS,KAAK;GACZ,IAAK,IAA0B,SAAS,0BAA0B,OAAO;GACzE,MAAM;EACR;EAOF,OAAO;CACT;CAEA,MAAc,oBACZ,OACsC;EACtC,MAAM,WAAW,0BAA0B,OAAO,mBAAmB;EACrE,IAAI,UACF,IAAI;GACF,MAAM,KAAK,UAAU,CAAC,CAAC,KACrB,IAAI,8BAA8B,EAAE,mBAAmB,SAAS,CAAC,CACnE;GACA,OAAO;IAAE,YAAY;IAAU,YAAY,CAAC;GAAE;EAChD,SAAS,KAAK;GACZ,IAAK,IAA0B,SAAS,8BAA8B,OAAO;GAC7E,MAAM;EACR;EAOF,OAAO;CACT;AACF;AAOA,SAAS,yBAAyB,MAAqC,UAA4B;CACjG,IAAI,SAAS,QAAW,OAAO;CAC/B,MAAM,SAAS,MAAM,QAAQ,QAAQ,IACjC,SAAS,QAAQ,OAAqB,OAAO,OAAO,QAAQ,IAC5D,CAAC;CACL,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;AACnE"}

package/dist/{program-BVLiidXb.js → program-DDJHp1K3.js}

@@ -1,9 +1,10 @@
 import { a as runWithStackAwsClients, i as resetAwsClients, o as setAwsClients, t as AwsClients } from "./aws-clients-B_CEQGE1.js";
-import { $ as terminalSafe, B as STACK_REF_MAX_CODE_POINTS, C as generateResourceName, F as withStackScope, G as displayIdent, J as isPasteableIdent, K as displaySafe, P as withSkipPrefix, Q as stringifyJsonPayload, R as SAFE_MSG_ALTERED_CHAR, U as cutMarker, V as UNRENDERABLE, W as displayAwsMessage, X as plainIdentOr, Z as safeMsg, _ as PATTERN_B_RESOURCE_TYPES, a as safeStringify, b as derivesPatternBName, c as isStdoutReservedForPayload, d as runStackBuffered, et as truncateCodePoints, g as PATTERN_B_NAME_PROPERTIES, h as PATTERN_B_NAME_OPTIONS, k as isNameGeneration, l as reserveStdoutForPayload, m as getLiveRenderer, n as describeAwsFailure, q as displayStackName, s as getLogger, x as explicitNamePropertyFor, z as SECRET_REF_MAX_CODE_POINTS } from "./aws-failure-text-BDZdavf4.js";
-import { $t as ambientCredentialConfig, Bn as shellBoundedDisplay, Bt as formatLockOperation, Cn as StateError, D as VALUE_NOT_SHOWN, Dn as normalizeAwsError, E as assertRegionMatch, Fn as isInertUnquoted, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gt as DEFAULT_STATE_PREFIX, Hn as withheldTargetClause, In as pasteableCommand, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kt as injectiveKey, Lt as buildLockContentionMessage, Nn as commandHole, On as withErrorHandling, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as plainOrDescribed, Rt as forceQuitRecoveryClause, Sn as StackTerminationProtectionError, T as RESOURCE_NOT_FOUND, Un as setPasteableRunFlags, Vn as shellQuote, Vt as formatLockOwner, Wn as setPasteableVerbFlags, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as PartialFailureError, bn as ResourceUpdateNotSupportedError, cn as DeployCancelledError, dn as LocalInvokeBuildError$1, dr as isTransientServerError, en as clientDefaultsFor, fn as LocalStartServiceError, fr as retryClassificationText, ft as logicalIdShown, gn as NestedStackChildDirectDestroyError, gr as markNonRetryable, hn as MalformedProducerRecordRefusalError, hr as isThrottlingError, in as CdkdError, it as isInterruptedWaitError, jn as SHELL_ACTIVE_WHY, kn as TIMEOUT_FLAG_RESOURCE_TYPE, ln as DynamicReferenceRegionAmbiguousError, mr as isMarkedNonRetryable, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nr as stripControlChars, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, rr as stripForDisplay, rt as interruptWatchListenerCount, s as readRecordedPrincipals, sr as isAmbiguousOutcomeError, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tr as escapeRegExp, tt as beginCommandInterruptScope, un as IntrinsicResolutionRefusalError, ur as isRetryableTransientError, vn as ProvisioningError, wn as SynthesisError, xn as StackHasActiveImportsError, yn as ResourceTimeoutError, zn as quotedOrDescribed, zt as formatLockExpiry } from "./iam-policy-targets-Dnk6FCsr.js";
+import { $ as stringifyJsonPayload, A as isNameGeneration, B as SECRET_REF_MAX_CODE_POINTS, C as generateResourceName, F as withSkipPrefix, G as displayAwsMessage, H as UNRENDERABLE, I as withStackScope, J as displayStackName, K as displayIdent, Q as safeMsg, V as STACK_REF_MAX_CODE_POINTS, W as cutMarker, Y as isPasteableIdent, Z as plainIdentOr, _ as PATTERN_B_RESOURCE_TYPES, a as safeStringify, b as derivesPatternBName, c as isStdoutReservedForPayload, d as runStackBuffered, et as terminalSafe, g as PATTERN_B_NAME_PROPERTIES, h as PATTERN_B_NAME_OPTIONS, l as reserveStdoutForPayload, m as getLiveRenderer, n as describeAwsFailure, q as displaySafe, s as getLogger, tt as truncateCodePoints, x as explicitNamePropertyFor, z as SAFE_MSG_ALTERED_CHAR } from "./aws-failure-text-e_ddrDDo.js";
+import { $t as ambientCredentialConfig, An as withErrorHandling, Bn as plainOrDescribed, Bt as formatLockOperation, Cn as StackTerminationProtectionError, D as VALUE_NOT_SHOWN, E as assertRegionMatch, Fn as commandHole, Ft as UNREPRODUCIBLE_LOCK_CLAUSE, G as runDeleteAttempt, Gn as setPasteableRunFlags, Gt as DEFAULT_STATE_PREFIX, Hn as shellBoundedDisplay, It as buildForceUnlockCommand, Jt as producerCoordinateKey, Kn as setPasteableVerbFlags, Kt as injectiveKey, Ln as isInertUnquoted, Lt as buildLockContentionMessage, Nn as SHELL_ACTIVE_WHY, P as remedyLogicalId, Qt as ambientClientDefaults, Rn as pasteableCommand, Rt as forceQuitRecoveryClause, Sn as StackHasActiveImportsError, T as RESOURCE_NOT_FOUND, Tn as SynthesisError, Un as shellQuote, Vn as quotedOrDescribed, Vt as formatLockOwner, Wn as withheldTargetClause, Wt as CUSTOM_RESOURCE_RESPONSE_PREFIX, Xt as setPasteableAwsProfile, Yt as producerRecordKey, Z as isAwsCliLiteral, Zt as withPasteableAwsProfile, _n as NestedStackChildDirectDestroyError, _r as isThrottlingError, ar as stripForDisplay, bn as ResourceTimeoutError, cn as DeployCancelledError, dn as IntrinsicResolutionRefusalError, en as clientDefaultsFor, fn as LocalInvokeBuildError$1, fr as isRetryableTransientError, ft as logicalIdShown, gn as MalformedProducerRecordRefusalError, gr as isMarkedNonRetryable, in as CdkdError, ir as stripControlChars, it as isInterruptedWaitError, jn as TIMEOUT_FLAG_RESOURCE_TYPE, kn as normalizeAwsError, lr as isAmbiguousOutcomeError, mr as retryClassificationText, mt as resourceTypeShown, n as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, nn as AccountIdUnavailableError, nt as endCommandInterruptScope, on as CrossAccountSecretRefusalError, pn as LocalStartServiceError, pr as isTransientServerError, rr as escapeRegExp, rt as interruptWatchListenerCount, s as readRecordedPrincipals, t as IAM_PRINCIPAL_NAME, tn as credentialFingerprint, tt as beginCommandInterruptScope, un as DynamicReferenceRegionAmbiguousError, vn as PartialFailureError, vr as markNonRetryable, wn as StateError, xn as ResourceUpdateNotSupportedError, yn as ProvisioningError, zt as formatLockExpiry } from "./iam-policy-targets-OtGPguLH.js";
 import { a as setAssumedRoleCredentials, i as getPreAssumeEnvCredentials, l as runInStackAwsScope, n as awsClientDefaults, r as getAssumedRoleCredentials, u as formatAuthority } from "./aws-client-defaults-DBXBcg0J.js";
-import { $ as DeploymentEventsStore, $a as refuseMalformedOutputsForDestroy, $c as validateAssetBucketName, $i as carriesDynamicReference, $l as hasPlainPrototype, $n as noEchoComparisonForTemplate, $o as templateResourceTypes, $r as customResourceResponseExpirationWarning, $s as recordPhysicalNameCopy, $t as updatePartialReason, A as inheritedProvenanceForChildDiff, Aa as malformedLocalResourcesWarning, Ac as importableOutputKeys, Ai as keepHeldTokenProvenance, Al as resolveSkipPrefix, An as formatDestructiveChange, Ao as hasNoCloudControlHandlers, As as logOnlyValueCount, At as replayFailedOperations, B as conditionFingerprint, Ba as malformedResourcePropertiesWarning, Bc as WorkGraph, Bi as AWS_CREDENTIAL_ENV_KEYS, Bl as findLargeInlineResources, Bn as red, Br as CC_BROKEN_REASON, Bs as scrubResourceRecord, Bt as recordUnderIdIsNotOwn, Ca as isReadableOrphanRecord, Cc as splitImportedOps, Cl as synthesisStatusMessage, Cn as isExportAliasCollision, Co as unreadableResourceEntries, Cr as unsupportedFinalSnapshotError, Cs as redactForState, Ct as makeForeignHolderScan, D as IMPLICIT_DELETE_DEPENDENCIES, Da as malformedExportSourceWarning, Dc as hasReadableExportSet, Di as resolveDynamicReferences, Dl as resolveApp, Dn as maskingRetryLogger, Do as unwrittenCreateOnlyReplacement, Dr as withCreateTokenLedger, Ds as createUnionSecretMasker, Ea as malformedExportNamesWarning, Ec as exportNamesCarriedFrom, El as loadCdkJson, En as DEFAULT_RESOURCE_WARN_AFTER_MS, Es as carryLogOnlyValues, F as findNestedTemplateTreeDefect, Fa as malformedOrphansWarning, Fc as shouldRetainResource, Fi as assertFlagRoleArn, Fl as warnDeprecatedNoPrefixCliFlag, Fo as isStatefulRecreateTargetSync, Fs as unionOfSecretBags, Ft as isJournaledOrphan, G as diffSecurity, Ga as refuseDivergentRecordRegionForDestroy, Gc as AssetModeResolver, Gi as classifyReplaySecretRegion, Gl as PARTITION_TABLE, Gn as isSupersededResourceRecord, Gs as isUncertifiedBaselineMaskPosition, Gt as findNestedStackTypeChanges, H as parentSuppliedValues, Ha as malformedScrubResourceEntriesRefusalMessage, Hc as createAssetRedirectResolver, Hi as callerEnvCredentials, Hl as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, Hn as addSuperseded, Hr as ccBrokenReason, Ht as resolveReplacementOldType, I as isAbsoluteAssetPath, Ia as malformedOutputsRefusalMessage, Ic as stackInstanceIdCarriedFrom, Ii as assertSendableRoleArn, Il as ssmResolvedValueType, In as bold, Io as renderStatefulReason, Is as createSecretMasker, It as isReplacementOrphan, J as mergeNoChangeOutputs, Ja as refuseMalformedOrphanRecordsForDestroy, Jc as ensureAssetStorage, Ji as coerceParameterTypedValue, Jl as AssemblyReader, Jn as supersededHeldByOtherTypeWarning, Jr as isCustomResourceType$1, Js as inheritNestedStackParameterAssociations, K as isSecretBearingReferenceString, Kc as BOOTSTRAP_MARKER_PREFIX, Ki as producerRegionsFromState, Kl as canonicalizeRegion, Kn as removeSuperseded, Kr as TemplateNoEchoReresolver, Ks as pathCrossesDottedKey, L as listNestedTemplateRows, La as malformedOutputsWarning, Lc as AssetPublisher, Li as explicitRoleArnOrThrow, Ll as CFN_TEMPLATE_BODY_LIMIT, Ln as cyan, Ls as errorCauseChain, Lt as planFailedOps, M as findServiceTokenRefusals, Ma as malformedOrphanRecordsWarning, Mc as isReadableBag, Mi as recordedOutputReferenceRegions, Ml as resolveStateBucketWithDefaultAndSource, Mn as destroyStackRecordsView, Mo as shownType, Ms as recordLogOnlyParameterValue, Mt as removeProtectionTypeList, N as serviceTokenBlockingReason, Na as malformedOrphanRowsKeptWarning, Nc as orphansAfterRollback, Ni as recordedReferenceRegions, Nl as resolveUseCdkBootstrapAssets, No as MULTI_REGION_RECREATE_BLOCKED_TYPES, Ns as recordLogOnlyValue, Nt as recordAfterRollbackUpdate, O as computeImplicitDeleteEdges, Oa as malformedLocalOutputsWarning, Oc as hasReasonlessBaselineRefusal, Oi as producerLookupOver, Ol as resolveAutoAssetStorage, On as constructPathOf, Os as hasMaskableValues, P as childTemplateLoader, Pa as malformedOrphansRefusalMessage, Pc as orphansCarriedFrom, Pi as applyRoleArnIfSet, Pl as stateBucketExistenceConfirmed, Pn as withStackRecords, Po as isStatefulRecreateTargetForReplace, Ps as shareLogOnlyValues, Pt as demoteSupersededOrphans, Q as DeploymentEventsReader, Qa as refuseMalformedOutputs, Qc as readBootstrapMarkerBody, Qi as isImpossibleEmptyStoredAttribute, Ql as hasOwnKey, Qn as noEchoAttributeNamesOf, Qo as prefetchCreateOnlyPropertyPaths, Qr as applyCustomResourceResponseExpiration, Qt as updatePartialMessage, R as renderNestedTemplateTreeDefect, Ra as malformedRenderedContainersWarning, Rc as isSensitiveAttributeName, Ri as isIamRoleArn, Rl as CFN_TEMPLATE_URL_LIMIT, Rn as gray, Rs as maskSecretsInError, Rt as planRollback, Sa as hasReadableResources, Sc as withStackInstanceIdWithheld, Sl as Synthesizer, Sn as collectPublishedOutputNames, So as unreadableOrphanRecords, Sr as refusesFinalSnapshot, St as loadJournaledOrphans, Ta as malformedDriftResourcePropertiesWarning, Tc as describeRegionValueKind, Tl as getLegacyStateBucketName, Tn as DEFAULT_RESOURCE_TIMEOUT_MS, To as findActionableSilentDrops, Tr as ledgerForStack, Tt as formatResourceLine, U as readRecordedConditionVerdicts, Ua as malformedStateRefusalMessage, Uc as loadPublishableAssetManifest, Ui as envCredentialsAreAssumedRole, Ul as decodeListingKey, Un as deleteSupersededEntry, Ur as isCustomResource, Us as DYNAMIC_REFERENCE_TOKEN_SCAN, Ut as seedsDeleteFirstGuard, V as conditionInputsFrom, Va as malformedResourcesWarning, Vc as buildAssetRedirectMap, Vi as applyCallerIdentityCredentials, Vl as uploadCfnTemplate, Vn as yellow, Vr as ProviderRegistry, Vs as withPhysicalNameCopies, Vt as replacementNeverSwapped, W as withResourceDeadline, Wa as previewableOrphanRecords, Wc as rewriteTemplateAssetReferences, Wi as classifyRecordedSecretRegion, Wl as expectedOwnerParam, Wn as holdsSupersededResources, Wr as wouldReturnToSdkProvider, Ws as dynamicReferenceTokens, Wt as orphanNeedsIdentity, X as makeSiblingClaimReader, Xa as refuseMalformedOrphansForDestroy, Xc as isCrossRegionRedirect, Xi as parameterTypeMayLoseSecretIdentity, Xl as processStackMessages, Xn as supersededResourcesOf, Xr as withPrintingSecrets, Y as makeCanonicalizePropertiesFn, Ya as refuseMalformedOrphans, Yc as getBootstrapMarkerKey, Yi as isUnboundTemplateParameter, Yl as StageLoadError, Yn as supersededHolderOf, Ys as recordNestedStackParameterExpressions, Z as planOrphanAdoption, Za as refuseMalformedOrphansForOrphan, Zc as parseBootstrapMarker, Zi as getAccountInfo, Zl as defineOwnKey, Zn as withoutSuperseded, Zr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Zs as physicalNameCopiesOf, _a as accountArgs, _c as applyCrossPrefixScan, _i as DiffCalculator, _l as runDockerForeground, _n as exportNameNoEchoParameters, _o as repairMalformedOutputsForReadOnly, _r as buildFinalSnapshotIdentifier, _s as readbackPathFor, _t as deleteJournaledOrphans, a as isProtectionValueActive, aa as isStalePlaceholderArnAttribute, ac as recordNoEchoAttributeValues, ai as deleteIndeterminateGuards, al as describeDockerExecFailure, an as retiredNameGenerationsLeaving, ao as refuseMalformedResourceEntriesForImportSave, ar as maskEventTextWithBoundBags, as as DagBuilder, at as displacedOpClause, au as renderAssemblyPathEscape, ba as hasReadableOrphans, bc as isNotImplemented, bi as poisonRenderedSpellingsCollidingIn, bl as AssetManifestLoader, bn as noEchoParameterValueSeed, bo as repairMalformedResourcesForReadOnly, br as effectiveDeletionPolicy, bs as valueAtCoordinate, bt as isHandledOrphan, ca as withSharedDrainBudget, cc as wholeStringLeavesOf, cl as finchSecretArgvRefusal, cn as reachableDivergentParameters, co as refuseMalformedResourcePropertiesForDrift, cr as secretNamePrintingBag, cs as isMarkedCoordinate, cu as injectedAwsRegionValue, da as declaresNoEcho, dc as LockManager, dl as isDockerClientEnvKey, dn as displayTextOrWithheld, do as refuseMalformedResourcesForDeploy, dr as secretNamedRecordNeedles, ds as maskWholeValue, ea as carriesFetchableDynamicReference, ec as splitGetAttStringForm, ei as CloudControlProvider, el as validateContainerRepoName, en as nameGenerationCarriedFrom, eo as refuseMalformedResourceAttributesForOrphan, er as noEchoExactEchoLeavesOf, es as describeTypeWithThrottleRetry, et as pendingRequestCount, eu as nullPrototypeRecord, fa as JSON_LISTING_HOLE_VALUE, fc as isLockInfoExpired, fl as isMalformedEnvKey, fn as exportAliasCollisionScrubWarning, fo as refuseMalformedResourcesForDestroy, fr as stateSecretNameNeedles, fs as maskedLeafCoordinatesOf, ft as revertedNestedRowIds, ga as UNREADABLE_RESOURCES_MAP_ROW, gc as CrossPrefixScanCache, gl as redactedDockerCause, gn as carriedExportAliasExposure, go as repairMalformedOrphansForReadOnly, gr as PRE_DELETE_SNAPSHOT_TYPES, gt as withNestedStackContext, ha as UNREADABLE_ORPHANS_CONTAINER_ROW, hc as CrossPrefixReadError, hl as redactedCause, hn as secretSafeKeyDisplay, ho as repairMalformedOrphanRecordsForReadOnly, hr as ATOMIC_FINAL_SNAPSHOT_TYPES, hs as noEchoOutputsComparison, ht as getCurrentNestedStackContext, i as PROTECTION_PROPERTY_BY_TYPE, ia as cfnRefValueFromPhysicalId, ic as recordMaskOnlyValuesIn, ii as UNSPECIFIED_SKIP_REASON, il as describeDockerCapturedOutput, in as retiredNameGenerationsAfter, io as refuseMalformedResourceEntriesForImport, ir as journaledOrphanPrintingBag, it as NESTED_PENDING_PARENT_REASON, iu as displayAssemblyPath, j as deferredServiceTokenWarning, ja as malformedOrphanRecordsRefusalMessage, jc as importableOutputs, jl as resolveStateBucketWithDefault, jo as findReplacedReadersOfRecreateTargets, js as printingCorpusOf, jt as replayRollback, k as crossStackOutputProvenanceSource, ka as malformedLocalResourceEntriesWarning, kc as hasUnverifiableParameterRefusal, ki as refuseUnreadableCdkCrossAccountRefs, kl as resolveCaptureObservedState, kn as findDestructiveChanges, ko as NO_CC_HANDLERS_REASON, ks as literalSplitDelimitersOf, la as parameterInputsFor, lc as WHOLE_DYNAMIC_REFERENCE_PATTERN, li as isWaitAbandonedError, ll as formatDockerLoginError, ln as resourcesNamingDeclaredParameter, lo as refuseMalformedResourcePropertiesForExport, lr as secretNamePrintingBags, ls as maskAtCoordinates, lt as nestedChildStackName$1, ma as STATE_RESOURCES_MALFORMED, mc as rebuildClientForBucketRegion, ml as redactDockerArgvValues, mn as secretBearingStateKeyWarning, mo as refuseMalformedState, mr as extractDeploymentEventError, ms as noEchoLeavesOf, mt as collectNestedChildUnaddressed, n as recordedProtectionEvidence, na as keepsSecretReferenceToken, nc as provenPublicValue, nl as buildDockerImage, nn as nameScopeOf, no as refuseMalformedResourceEntriesForDeploy, nr as createReadOnlyAttributeHealerFactory, nt as keptForRetainedRecord, nu as absoluteAssemblyPathEscape, o as perType, oa as refStateLookupFromResource, oc as recordNoEchoParameterFreshValue, oi as deleteLeftInPlace, ol as describeDockerFailure, on as computeParameterTaint, oo as refuseMalformedResourceEntriesForOrphan, or as namingSecretsWithRecordedNoEcho, os as TemplateParser, ot as displacedPhysicalIdShown, ou as resolveAssemblyPath, pa as STATE_REGION_DIVERGED, pc as S3StateBackend, pl as partitionSensitiveEnv, pn as secretBearing, po as refuseMalformedResourcesForExport, pr as storedSecretNameNeedles, ps as noEchoCoordinatesOf, pt as withNestedRevertRun, q as keptWholeReasonText, qa as refuseMalformedOrphanRecords, qc as assertAssetBucketRegion, qi as regionLessSecretName, ql as derivePartitionAndUrlSuffix, qn as supersededAfterRollback, qr as readsNoEchoDeleteValues, qs as identityKeyFor, qt as inheritProducerRegions, r as recordedProtectionNote, ra as AWS_NO_VALUE, rc as recordMaskOnlyValue, ri as RollbackInlinePolicyWriters, rl as resolveDockerContextDirectory, rn as retiredAfterRollback, ro as refuseMalformedResourceEntriesForDestroy, rr as completedReplayEntries, rt as recordRetainedForReadoption, ru as describeFileReadFailure, s as readProtection, sc as recordProvenPublicExpression, si as deleteSkipReason, sl as dockerSpawnEnvWithSensitive, sn as namesAnyDeclaredParameter, so as refuseMalformedResourcePropertiesForDestroy, sr as orphanRecordsPrintingBag, ss as canonicalCoordinates, st as dropSettledNestedJournals, su as injectAwsRegion, t as DeployEngine, ta as isNamelessDynamicReferenceError, tc as carriesSecretMask, ti as slowCcOperationTimeoutMs, tl as buildDenyExternalAccessPolicy, tn as nameGenerationHighWaterOf, to as refuseMalformedResourceEntries, tr as noEchoParameterNamesOf, ts as withRetry, tt as resolvePendingCloudControlRequests, tu as ownValue, uc as isSingleDynamicReferenceToken, ul as getDockerCmd, un as WITHHELD_NAME_DISPLAY, uo as refuseMalformedResourcePropertiesForOrphan, us as maskReadbackAtCoordinates, ut as recordDisplacedSkips, uu as resolveBucketRegion, va as deployRefusesOrphanRowsReason, vc as crossPrefixDeniedWarning, vi as INTRINSIC_KEYS, vl as runDockerStreaming, vn as exportNameSecretExposure, vo as repairMalformedResourceEntriesForReadOnly, vr as ccRoutedFinalSnapshotError, vs as readsNoEchoSource, vt as dropFailedCommands, wa as isReadableResourceEntry, wc as acceptedCreateOnlyDropsOf, wl as getDefaultStateBucketName, wn as bindingSkippedOutputs, wo as withheldAccountClause, wt as sameJournaledOrphans, xa as hasReadableOutputs, xc as stackInstanceIdOf, xl as getDockerImageBySourceHash, xn as collectDeclaredOutputNames, xo as unpreviewableOrphanRecords, xr as isFinalSnapshotError, xs as liveMatchesUnresolvedTokenFrame, xt as journaledOrphanLines, ya as displayLogicalId, yc as isAccessDenied, yi as IntrinsicFunctionResolver, yl as warnFinchArgvExposure, yn as isWholeDynamicReferenceValue, yo as repairMalformedResourcePropertiesForReadOnly, yr as createPreDeleteFinalSnapshot, ys as recordedNoEchoValuesOf, yt as dropFailedHint, z as templateIdentity, za as malformedResourceEntriesWarning, zc as stringifyValue, zi as sendableAssumeRoleCommand, zl as MIGRATE_TMP_PREFIX, zn as green, zs as maskSecretsInText, zt as recheckFailedPlan } from "./deploy-engine-DU0BoQqo.js";
-import { t as getCdkdVersion } from "./version-C2XBsD-i.js";
+import { $ as pendingRequestCount, $a as refuseMalformedOutputs, $c as absoluteAssemblyPathEscape, $i as isImpossibleEmptyStoredAttribute, $n as noEchoExactEchoLeavesOf, $o as prefetchCreateOnlyPropertyPaths, $r as applyCustomResourceResponseExpiration, $s as buildDockerImage, $t as nameGenerationCarriedFrom, A as inheritedProvenanceForChildDiff, Aa as malformedLocalResourceEntriesWarning, Ac as resolveUseCdkBootstrapAssets, Ai as refuseUnreadableCdkCrossAccountRefs, Ao as NO_CC_HANDLERS_REASON, As as orphansAfterRollback, At as replayRollback, B as conditionFingerprint, Ba as malformedResourceEntriesWarning, Bc as decodeListingKey, Bi as sendableAssumeRoleCommand, Bn as yellow, Bs as loadPublishableAssetManifest, Bt as replacementNeverSwapped, Ca as hasReadableResources, Cc as loadCdkJson, Cn as bindingSkippedOutputs, Co as unreadableOrphanRecords, Cr as ledgerForStack, Cs as exportNamesCarriedFrom, Ct as sameJournaledOrphans, D as IMPLICIT_DELETE_DEPENDENCIES, Da as malformedExportNamesWarning, Dc as resolveSkipPrefix, Dn as constructPathOf, Dr as DeploymentEventsReader, Ds as importableOutputKeys, Ea as malformedDriftResourcePropertiesWarning, Ec as resolveCaptureObservedState, En as maskingRetryLogger, Eo as findActionableSilentDrops, Es as hasUnverifiableParameterRefusal, F as findNestedTemplateTreeDefect, Fa as malformedOrphansRefusalMessage, Fc as CFN_TEMPLATE_URL_LIMIT, Fi as applyRoleArnIfSet, Fn as bold, Fo as isStatefulRecreateTargetForReplace, Fs as isSensitiveAttributeName, Ft as isReplacementOrphan, G as withResourceDeadline, Ga as previewableOrphanRecords, Gc as AssemblyReader, Gi as classifyRecordedSecretRegion, Gn as removeSuperseded, Gr as wouldReturnToSdkProvider, Gs as ensureAssetStorage, H as parentSuppliedValues, Ha as malformedResourcesWarning, Hc as PARTITION_TABLE, Hi as applyCallerIdentityCredentials, Hn as deleteSupersededEntry, Hr as ProviderRegistry, Hs as AssetModeResolver, Ht as seedsDeleteFirstGuard, I as isAbsoluteAssetPath, Ia as malformedOrphansWarning, Ic as MIGRATE_TMP_PREFIX, Ii as assertFlagRoleArn, In as cyan, Io as isStatefulRecreateTargetSync, Is as stringifyValue, It as planFailedOps, J as keptWholeReasonText, Ja as refuseMalformedOrphanRecords, Jc as defineOwnKey, Ji as regionLessSecretName, Jn as supersededHolderOf, Jr as readsNoEchoDeleteValues, Js as parseBootstrapMarker, K as diffSecurity, Ka as refuseDivergentRecordRegionForDestroy, Kc as StageLoadError, Ki as classifyReplaySecretRegion, Kn as supersededAfterRollback, Ks as getBootstrapMarkerKey, Kt as inheritProducerRegions, L as listNestedTemplateRows, La as malformedOutputsRefusalMessage, Lc as findLargeInlineResources, Li as assertSendableRoleArn, Ln as gray, Lo as renderStatefulReason, Ls as WorkGraph, Lt as planRollback, M as findServiceTokenRefusals, Ma as malformedOrphanRecordsRefusalMessage, Mc as warnDeprecatedNoPrefixCliFlag, Mo as findReplacedReadersOfRecreateTargets, Ms as shouldRetainResource, Mt as recordAfterRollbackUpdate, N as serviceTokenBlockingReason, Na as malformedOrphanRecordsWarning, Nc as ssmResolvedValueType, Ni as recordedOutputReferenceRegions, Nn as withStackRecords, No as shownType, Ns as stackInstanceIdCarriedFrom, Nt as demoteSupersededOrphans, O as computeImplicitDeleteEdges, Oa as malformedExportSourceWarning, Oc as resolveStateBucketWithDefault, Oi as resolveDynamicReferences, On as findDestructiveChanges, Oo as unwrittenCreateOnlyReplacement, Or as DeploymentEventsStore, Os as importableOutputs, P as childTemplateLoader, Pa as malformedOrphanRowsKeptWarning, Pc as CFN_TEMPLATE_BODY_LIMIT, Pi as recordedReferenceRegions, Po as MULTI_REGION_RECREATE_BLOCKED_TYPES, Ps as AssetPublisher, Pt as isJournaledOrphan, Q as planOrphanAdoption, Qa as refuseMalformedOrphansForOrphan, Qc as ownValue, Qi as getAccountInfo, Qn as noEchoComparisonForTemplate, Qr as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, Qs as buildDenyExternalAccessPolicy, Qt as updatePartialReason, R as renderNestedTemplateTreeDefect, Ra as malformedOutputsWarning, Rc as uploadCfnTemplate, Ri as explicitRoleArnOrThrow, Rn as green, Rs as buildAssetRedirectMap, Rt as recheckFailedPlan, Sa as hasReadableOutputs, Sc as getLegacyStateBucketName, Sn as isExportAliasCollision, So as unpreviewableOrphanRecords, Ss as describeRegionValueKind, St as makeForeignHolderScan, Ta as isReadableResourceEntry, Tc as resolveAutoAssetStorage, Tn as DEFAULT_RESOURCE_WARN_AFTER_MS, To as withheldAccountClause, Tr as withCreateTokenLedger, Ts as hasReasonlessBaselineRefusal, U as readRecordedConditionVerdicts, Ua as malformedScrubResourceEntriesRefusalMessage, Uc as canonicalizeRegion, Ui as callerEnvCredentials, Un as holdsSupersededResources, Ur as ccBrokenReason, Us as BOOTSTRAP_MARKER_PREFIX, Ut as orphanNeedsIdentity, V as conditionInputsFrom, Va as malformedResourcePropertiesWarning, Vc as expectedOwnerParam, Vi as AWS_CREDENTIAL_ENV_KEYS, Vn as addSuperseded, Vr as CC_BROKEN_REASON, Vs as rewriteTemplateAssetReferences, Vt as resolveReplacementOldType, Wa as malformedStateRefusalMessage, Wc as derivePartitionAndUrlSuffix, Wi as envCredentialsAreAssumedRole, Wn as isSupersededResourceRecord, Wr as isCustomResource, Ws as assertAssetBucketRegion, Wt as findNestedStackTypeChanges, X as makeCanonicalizePropertiesFn, Xa as refuseMalformedOrphans, Xc as hasPlainPrototype, Xi as isUnboundTemplateParameter, Xn as withoutSuperseded, Xs as validateAssetBucketName, Y as mergeNoChangeOutputs, Ya as refuseMalformedOrphanRecordsForDestroy, Yc as hasOwnKey, Yi as coerceParameterTypedValue, Yn as supersededResourcesOf, Yr as isCustomResourceType$1, Ys as readBootstrapMarkerBody, Z as makeSiblingClaimReader, Za as refuseMalformedOrphansForDestroy, Zc as nullPrototypeRecord, Zi as parameterTypeMayLoseSecretIdentity, Zn as noEchoAttributeNamesOf, Zr as withPrintingSecrets, Zs as validateContainerRepoName, Zt as updatePartialMessage, _a as UNREADABLE_RESOURCES_MAP_ROW, _c as AssetManifestLoader, _n as exportNameSecretExposure, _o as repairMalformedOrphansForReadOnly, _r as createPreDeleteFinalSnapshot, _s as isNotImplemented, _t as dropFailedCommands, a as isProtectionValueActive, aa as cfnRefValueFromPhysicalId, ac as finchSecretArgvRefusal, ai as UNSPECIFIED_SKIP_REASON, al as injectedAwsRegionValue, an as computeParameterTaint, ao as refuseMalformedResourceEntriesForImport, ar as namingSecretsWithRecordedNoEcho, at as displacedPhysicalIdShown, ba as displayLogicalId, bc as synthesisStatusMessage, bi as IntrinsicFunctionResolver, bn as collectDeclaredOutputNames, bo as repairMalformedResourcePropertiesForReadOnly, br as refusesFinalSnapshot, bs as splitImportedOps, bt as journaledOrphanLines, cc as isDockerClientEnvKey, ci as deleteSkipReason, cn as resourcesNamingDeclaredParameter, co as refuseMalformedResourcePropertiesForDestroy, cr as secretNamePrintingBags, cs as LockManager, ct as nestedChildStackName$1, dc as redactDockerArgvValues, dn as exportAliasCollisionScrubWarning, do as refuseMalformedResourcePropertiesForOrphan, dr as stateSecretNameNeedles, ds as rebuildClientForBucketRegion, dt as revertedNestedRowIds, ea as carriesDynamicReference, ec as resolveDockerContextDirectory, ei as customResourceResponseExpirationWarning, el as describeFileReadFailure, en as nameGenerationHighWaterOf, eo as refuseMalformedOutputsForDestroy, er as noEchoParameterNamesOf, es as templateResourceTypes, et as resolvePendingCloudControlRequests, fa as declaresNoEcho, fc as redactedCause, fn as secretBearing, fo as refuseMalformedResourcesForDeploy, fr as storedSecretNameNeedles, fs as CrossPrefixReadError, ft as withNestedRevertRun, ga as UNREADABLE_ORPHANS_CONTAINER_ROW, gc as warnFinchArgvExposure, gn as exportNameNoEchoParameters, go as repairMalformedOrphanRecordsForReadOnly, gr as ccRoutedFinalSnapshotError, gs as isAccessDenied, gt as deleteJournaledOrphans, ha as STATE_RESOURCES_MALFORMED, hc as runDockerStreaming, hn as carriedExportAliasExposure, ho as refuseMalformedState, hr as buildFinalSnapshotIdentifier, hs as crossPrefixDeniedWarning, ht as withNestedStackContext, i as PROTECTION_PROPERTY_BY_TYPE, ia as AWS_NO_VALUE, ic as dockerSpawnEnvWithSensitive, ii as RollbackInlinePolicyWriters, il as injectAwsRegion, in as retiredNameGenerationsLeaving, io as refuseMalformedResourceEntriesForDestroy, ir as maskEventTextWithBoundBags, it as displacedOpClause, j as deferredServiceTokenWarning, ja as malformedLocalResourcesWarning, jc as stateBucketExistenceConfirmed, ji as keepHeldTokenProvenance, jn as destroyStackRecordsView, jo as hasNoCloudControlHandlers, js as orphansCarriedFrom, jt as removeProtectionTypeList, k as crossStackOutputProvenanceSource, ka as malformedLocalOutputsWarning, kc as resolveStateBucketWithDefaultAndSource, ki as producerLookupOver, kn as formatDestructiveChange, kr as extractDeploymentEventError, ks as isReadableBag, kt as replayFailedOperations, la as withSharedDrainBudget, lc as isMalformedEnvKey, ln as WITHHELD_NAME_DISPLAY, lo as refuseMalformedResourcePropertiesForDrift, ls as isLockInfoExpired, lt as recordDisplacedSkips, ma as STATE_REGION_DIVERGED, mc as runDockerForeground, mn as secretSafeKeyDisplay, mo as refuseMalformedResourcesForExport, mr as PRE_DELETE_SNAPSHOT_TYPES, ms as applyCrossPrefixScan, mt as getCurrentNestedStackContext, n as recordedProtectionEvidence, na as isNamelessDynamicReferenceError, nc as describeDockerExecFailure, ni as slowCcOperationTimeoutMs, nl as renderAssemblyPathEscape, nn as retiredAfterRollback, no as refuseMalformedResourceEntries, nr as completedReplayEntries, ns as withRetry, nt as recordRetainedForReadoption, o as perType, oa as isStalePlaceholderArnAttribute, oc as formatDockerLoginError, oi as deleteIndeterminateGuards, on as namesAnyDeclaredParameter, oo as refuseMalformedResourceEntriesForImportSave, or as orphanRecordsPrintingBag, os as DagBuilder, ot as dropSettledNestedJournals, pa as JSON_LISTING_HOLE_VALUE, pc as redactedDockerCause, pn as secretBearingStateKeyWarning, po as refuseMalformedResourcesForDestroy, pr as ATOMIC_FINAL_SNAPSHOT_TYPES, ps as CrossPrefixScanCache, pt as collectNestedChildUnaddressed, q as isSecretBearingReferenceString, qc as processStackMessages, qi as producerRegionsFromState, qn as supersededHeldByOtherTypeWarning, qr as TemplateNoEchoReresolver, qs as isCrossRegionRedirect, r as recordedProtectionNote, ra as keepsSecretReferenceToken, rc as describeDockerFailure, rl as resolveAssemblyPath, rn as retiredNameGenerationsAfter, ro as refuseMalformedResourceEntriesForDeploy, rr as journaledOrphanPrintingBag, rt as NESTED_PENDING_PARENT_REASON, s as readProtection, sa as refStateLookupFromResource, sc as getDockerCmd, si as deleteLeftInPlace, sl as resolveBucketRegion, sn as reachableDivergentParameters, so as refuseMalformedResourceEntriesForOrphan, sr as secretNamePrintingBag, ss as TemplateParser, t as DeployEngine, ta as carriesFetchableDynamicReference, tc as describeDockerCapturedOutput, ti as CloudControlProvider, tl as displayAssemblyPath, tn as nameScopeOf, to as refuseMalformedResourceAttributesForOrphan, tr as createReadOnlyAttributeHealerFactory, ts as describeTypeWithThrottleRetry, tt as keptForRetainedRecord, ua as parameterInputsFor, uc as partitionSensitiveEnv, ui as isWaitAbandonedError, un as displayTextOrWithheld, uo as refuseMalformedResourcePropertiesForExport, ur as secretNamedRecordNeedles, us as S3StateBackend, va as accountArgs, vc as getDockerImageBySourceHash, vi as DiffCalculator, vn as isWholeDynamicReferenceValue, vo as repairMalformedOutputsForReadOnly, vr as effectiveDeletionPolicy, vs as stackInstanceIdOf, vt as dropFailedHint, wa as isReadableOrphanRecord, wc as resolveApp, wn as DEFAULT_RESOURCE_TIMEOUT_MS, wo as unreadableResourceEntries, ws as hasReadableExportSet, wt as formatResourceLine, xa as hasReadableOrphans, xc as getDefaultStateBucketName, xi as poisonRenderedSpellingsCollidingIn, xn as collectPublishedOutputNames, xo as repairMalformedResourcesForReadOnly, xr as unsupportedFinalSnapshotError, xs as acceptedCreateOnlyDropsOf, xt as loadJournaledOrphans, ya as deployRefusesOrphanRowsReason, yc as Synthesizer, yi as INTRINSIC_KEYS, yn as noEchoParameterValueSeed, yo as repairMalformedResourceEntriesForReadOnly, yr as isFinalSnapshotError, ys as withStackInstanceIdWithheld, yt as isHandledOrphan, z as templateIdentity, za as malformedRenderedContainersWarning, zc as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, zi as isIamRoleArn, zn as red, zs as createAssetRedirectResolver, zt as recordUnderIdIsNotOwn } from "./deploy-engine-B_xWnZ4Q.js";
+import { $ as recordLogOnlyParameterValue, Cn as WHOLE_DYNAMIC_REFERENCE_PATTERN, Ct as DYNAMIC_REFERENCE_TOKEN_SCAN, Dt as pathCrossesDottedKey, Et as isUncertifiedBaselineMaskPosition, F as redactForState, G as carryLogOnlyValues, It as recordNestedStackParameterExpressions, Jt as physicalNameCopiesOf, Ot as identityKeyFor, Q as printingCorpusOf, S as liveMatchesUnresolvedTokenFrame, Tn as isSingleDynamicReferenceToken, Tt as dynamicReferenceTokens, X as literalSplitDelimitersOf, Xt as recordPhysicalNameCopy, Y as hasMaskableValues, Z as logOnlyValueCount, _n as recordMaskOnlyValuesIn, a as maskReadbackAtCoordinates, at as errorCauseChain, b as valueAtCoordinate, bn as recordProvenPublicExpression, bt as withPhysicalNameCopies, ct as maskSecretsInText, d as noEchoOutputsComparison, g as readsNoEchoSource, gn as recordMaskOnlyValue, h as readbackPathFor, i as maskAtCoordinates, it as createSecretMasker, kt as inheritNestedStackParameterAssociations, l as noEchoCoordinatesOf, nn as carriesSecretMask, nt as shareLogOnlyValues, o as maskWholeValue, pn as provenPublicValue, q as createUnionSecretMasker, r as isMarkedCoordinate, rt as unionOfSecretBags, s as maskedLeafCoordinatesOf, st as maskSecretsInError, t as canonicalCoordinates, tn as splitGetAttStringForm, tt as recordLogOnlyValue, u as noEchoLeavesOf, v as recordedNoEchoValuesOf, vn as recordNoEchoAttributeValues, vt as scrubResourceRecord, xn as wholeStringLeavesOf, yn as recordNoEchoParameterFreshValue } from "./secret-redaction-BHWS-PZK.js";
+import { t as getCdkdVersion } from "./version-CZS6bEuG.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutBucketVersioningCommand, PutObjectCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { GetRoleCommand, GetUserCommand } from "@aws-sdk/client-iam";
@@ -2559,7 +2560,7 @@ function collectCrossStackRefs(node, onRef, unconditional) {
 //#region src/provisioning/register-providers.ts
 let providerClasses;
 function loadProviderClasses() {
-	providerClasses ??= import("./provider-classes-CXSiWJVn.js");
+	providerClasses ??= import("./provider-classes-CUKmyCQ8.js");
 	return providerClasses;
 }
 function registerAllProviders(registry, classes) {
@@ -9276,8 +9277,11 @@ function canonicalizeIpProtocols(baseline, aws, resourceType) {
 //#region src/analyzer/drift-cc-api-deny-list.ts
 const CC_API_FALLBACK_DENY_LIST = {
 	"AWS::ApiGateway::RestApi": "Body / BodyS3Location are write-only inputs not returned by CC API GetResource; cdkd state preserves them",
+	"AWS::Budgets::Budget": "CC API GetResource reorders notification subscribers and adds the defaulted ThresholdType, so an unchanged budget diffs as drift",
 	"AWS::CloudFormation::Stack": "cdkd deploys nested stacks itself: no CloudFormation stack exists, and the physicalId is a cdkd-local placeholder ARN",
 	"AWS::CloudWatch::AnomalyDetector": "the physicalId is a cdkd-derived metric descriptor, not the primaryIdentifier Cloud Control's GetResource requires",
+	"AWS::EMR::InstanceFleetConfig": "the physicalId is the bare fleet id, not the composite primaryIdentifier Cloud Control's GetResource requires",
+	"AWS::EMR::InstanceGroupConfig": "the physicalId is the bare instance group id, not the composite primaryIdentifier Cloud Control's GetResource requires",
 	"AWS::EC2::LaunchTemplate": "CC API returns version-bumped LaunchTemplateData with synthetic LatestVersionNumber that diverges from the CFn input shape"
 };
 
@@ -29706,4 +29710,4 @@ function collectVerbFlags(program) {
 
 //#endregion
 export { resolveSecretDerivedPrincipals as a, buildProgram, isResolvableSecretPrincipalList as i, runDestroyForStack as n, canonicalizeIpProtocolValue as o, holdsUnprovenSecretPrincipalToken as r, resolvedResourceTimeoutMs as s, canonicalizeIpv4Cidr as t };
-//# sourceMappingURL=program-BVLiidXb.js.map
+//# sourceMappingURL=program-DDJHp1K3.js.map