@go-to-k/cdkd 0.315.0 → 0.317.0

package/dist/{program-CMtAmRyw.js → program-BZ-VVfXu.js}

@@ -1,9 +1,9 @@
-import { a as runWithStackAwsClients, i as resetAwsClients, o as setAwsClients, t as AwsClients } from "./aws-clients-Bu9EMILF.js";
-import { $ as safeMsg, B as SAFE_MSG_ALTERED_CHAR, G as cutMarker, H as STACK_REF_MAX_CODE_POINTS, I as withSkipPrefix, J as displaySafe, K as displayAwsMessage, L as withStackScope, Q as plainIdentOr, S as explicitNamePropertyFor, U as UNRENDERABLE, V as SECRET_REF_MAX_CODE_POINTS, W as asIsMessage, X as isPasteableIdent, Y as displayStackName, _ as PATTERN_B_RESOURCE_TYPES, a as safeStringify, c as isStdoutReservedForPayload, d as runStackBuffered, et as stringifyJsonPayload, g as PATTERN_B_NAME_PROPERTIES, h as PATTERN_B_NAME_OPTIONS, j as isNameGeneration, l as reserveStdoutForPayload, m as getLiveRenderer, n as describeAwsFailure, nt as truncateCodePoints, q as displayIdent, s as getLogger, tt as terminalSafe, w as generateResourceName, x as derivesPatternBName } from "./aws-failure-text-agWtoyga.js";
-import { $n as plainOrDescribed, $t as formatLockOperation, An as NestedStackChildDirectDestroyError, Ar as markNonRetryable, Cn as DynamicReferenceRegionAmbiguousError, Dt as resourceTypeShown, En as LocalStartServiceError, Er as retryClassificationText, F as VALUE_NOT_SHOWN, Fn as StackHasActiveImportsError, H as remedyLogicalId, Hn as normalizeAwsError, In as StackTerminationProtectionError, Jn as commandHole, Jt as UNREPRODUCIBLE_LOCK_CLAUSE, Kn as SHELL_ACTIVE_WHY, Ln as StateError, M as isMarkedNotGone, Mn as ProvisioningError, Nn as ResourceTimeoutError, Or as isMarkedNonRetryable, P as assertRegionMatch, Pn as ResourceUpdateNotSupportedError, Qt as formatLockExpiry, Rn as SynthesisError, Tn as LocalInvokeBuildError$1, Tr as isTransientServerError, Tt as logicalIdShown, Un as withErrorHandling, Wn as TIMEOUT_FLAG_RESOURCE_TYPE, Xn as isInertUnquoted, Xt as buildLockContentionMessage, Yt as buildForceUnlockCommand, Zn as pasteableCommand, Zt as forceQuitRecoveryClause, _n as CdkdError, _r as stripForDisplay, _t as endCommandInterruptScope, an as injectiveKey, ar as setPasteableVerbFlags, cn as producerRecordKey, dn as ambientClientDefaults, en as formatLockOwner, er as quotedOrDescribed, f as readRecordedPrincipals, fn as ambientCredentialConfig, gr as stripControlChars, gt as beginCommandInterruptScope, hn as AccountIdUnavailableError, hr as escapeRegExp, in as DEFAULT_STATE_PREFIX, ir as setPasteableRunFlags, j as RESOURCE_NOT_FOUND, jn as PartialFailureError, kn as MalformedProducerRecordRefusalError, kr as isThrottlingError, ln as setPasteableAwsProfile, lt as isAwsCliLiteral, mn as credentialFingerprint, nr as shellQuote, o as IAM_PRINCIPAL_NAME, pn as clientDefaultsFor, rn as CUSTOM_RESOURCE_RESPONSE_PREFIX, rr as withheldTargetClause, rt as runDeleteAttempt, s as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, sn as producerCoordinateKey, tr as shellBoundedDisplay, un as withPasteableAwsProfile, vt as interruptWatchListenerCount, wn as IntrinsicResolutionRefusalError, wr as isRetryableTransientError, xn as DeployCancelledError, xr as isAmbiguousOutcomeError, yn as CrossAccountSecretRefusalError, yt as isInterruptedWaitError, zn as formatError } from "./created-resource-sink-QECX8C-Z.js";
-import { a as setAssumedRoleCredentials, d as formatAuthority, i as getPreAssumeEnvCredentials, n as awsClientDefaults, r as getAssumedRoleCredentials, u as runInStackAwsScope } from "./aws-client-defaults-BX9Y_fKp.js";
-import { $a as assertSendableRoleArn, $c as logOnlyValueCount, $i as isCustomResource, $l as hasUnverifiableParameterRefusal, $n as retiredAfterRollback, $o as malformedOrphansWarning, $r as removeSuperseded, $s as isStatefulRecreateTargetForReplace, $t as isHandledOrphan, $u as loadCdkJson, Ac as canonicalCoordinates, Ad as nullPrototypeRecord, Ai as unsupportedFinalSnapshotError, Al as recordNoEchoParameterFreshValue, An as demoteSupersededOrphans, Ao as JSON_LISTING_HOLE_VALUE, Ar as movedToHint, As as refuseMalformedResourcesForDestroy, At as makeCanonicalizePropertiesFn, Au as resolveDockerContextDirectory, Bc as readbackPathFor, Bd as resolveBucketRegion, Bl as CrossPrefixScanCache, Bn as orphanNeedsIdentity, Bo as hasReadableResources, Bs as unreadableOrphanRecords, Bt as dropSettledNestedJournals, Bu as partitionSensitiveEnv, Cd as processStackMessages, Ci as PRE_DELETE_SNAPSHOT_TYPES, Cl as recordPhysicalNameCopy, Cn as recordAfterRollbackUpdate, Co as lacksRecordedTableArn, Cr as DEFAULT_RESOURCE_WARN_AFTER_MS, Cs as refuseMalformedResourceEntriesForImportSave, Cu as isCrossRegionRedirect, Dd as defineOwnKey, Di as effectiveDeletionPolicy, Dl as recordMaskOnlyValue, Dn as equalModuloMarkedMask, Do as parameterInputsFor, Dr as formatDestructiveChange, Ds as refuseMalformedResourcePropertiesForExport, Dt as isSecretBearingReferenceString, Du as validateContainerRepoName, Ed as utf8ByteLength, Ei as createPreDeleteFinalSnapshot, El as provenPublicValue, En as calculateResourceDrift, Eo as withSharedDrainBudget, Er as findDestructiveChanges, Es as refuseMalformedResourcePropertiesForDrift, Et as diffSecurity, Eu as validateAssetBucketName, Fa as withoutUnsettledProperties, Fc as maskedLeafCoordinatesOf, Fd as renderAssemblyPathEscape, Fl as LockManager, Fn as recheckFailedPlan, Fo as accountArgs, Fr as mappingPairs, Fs as repairMalformedOutputsForReadOnly, Ft as keptForRetainedRecord, Fu as finchSecretArgvRefusal, Ga as producerLookupOver, Gl as stackInstanceIdOf, Go as malformedExportSourceWarning, Gr as gray, Gt as revertedNestedRowIds, Gu as runDockerStreaming, Hc as recordedNoEchoValuesOf, Hl as crossPrefixDeniedWarning, Ho as isReadableResourceEntry, Hs as withheldAccountClause, Ht as nestedChildStackName$1, Hu as redactedCause, Ia as IntrinsicFunctionResolver, Ic as noEchoCoordinatesOf, Id as resolveAssemblyPath, Ii as DeploymentEventsReader, Il as isLockInfoExpired, In as recordUnderIdIsNotOwn, Io as deployRefusesOrphanRowsReason, Ir as parseMappingFile, Is as repairMalformedResourceEntriesForReadOnly, It as recordRetainedForReadoption, Iu as formatDockerLoginError, Jl as acceptedCreateOnlyDropsOf, Jn as updatePartialMessage, Jo as malformedLocalResourcesWarning, Jr as yellow, Js as NO_CC_HANDLERS_REASON, Jt as getCurrentNestedStackContext, Ju as getDockerImageBySourceHash, Ka as refuseUnreadableCdkCrossAccountRefs, Kc as redactForState, Kl as withStackInstanceIdWithheld, Ko as malformedLocalOutputsWarning, Kr as green, Ks as unwrittenCreateOnlyReplacement, Kt as withNestedRevertRun, Ku as warnFinchArgvExposure, La as poisonRenderedSpellingsCollidingIn, Lc as noEchoLeavesOf, Ld as injectAwsRegion, Li as DeploymentEventsStore, Ll as S3StateBackend, Ln as replacementNeverSwapped, Lo as displayLogicalId, Lr as proposeRenames, Ls as repairMalformedResourcePropertiesForReadOnly, Lt as NESTED_PENDING_PARENT_REASON, Lu as getDockerCmd, Ma as unsettledItemsOf, Mc as maskAtCoordinates, Md as absoluteAssemblyPathEscape, Mi as ledgerForStack, Ml as wholeStringLeavesOf, Mn as isReplacementOrphan, Mo as STATE_RESOURCES_MALFORMED, Mr as withMovedTo, Ms as refuseMalformedState, Mt as planOrphanAdoption, Mu as describeDockerExecFailure, Na as unsettledPropertiesOf, Nc as maskReadbackAtCoordinates, Nd as describeFileReadFailure, Nl as WHOLE_DYNAMIC_REFERENCE_PATTERN, Nn as planFailedOps, No as UNREADABLE_ORPHANS_CONTAINER_ROW, Nr as isPairableType, Ns as repairMalformedOrphanRecordsForReadOnly, Nt as pendingRequestCount, Nu as describeDockerFailure, Oa as DiffCalculator, Oc as DagBuilder, Od as hasOwnKey, Oi as isFinalSnapshotError, Ol as recordMaskOnlyValuesIn, On as equalModuloMask, Or as findRefactorHints, Os as refuseMalformedResourcePropertiesForOrphan, Ot as keptWholeReasonText, Ou as buildDenyExternalAccessPolicy, Pa as withUnsettledProperties, Pc as maskWholeValue, Pd as displayAssemblyPath, Pi as withCreateTokenLedger, Pl as isSingleDynamicReferenceToken, Pn as planRollback, Po as UNREADABLE_RESOURCES_MAP_ROW, Pr as looselyEqual, Ps as repairMalformedOrphansForReadOnly, Pt as resolvePendingCloudControlRequests, Pu as dockerSpawnEnvWithSensitive, Qa as assertFlagRoleArn, Qc as literalSplitDelimitersOf, Qi as ccBrokenReason, Ql as hasReasonlessBaselineRefusal, Qn as nameScopeOf, Qo as malformedOrphansRefusalMessage, Qr as isSupersededResourceRecord, Qs as MULTI_REGION_RECREATE_BLOCKED_TYPES, Qt as dropFailedHint, Qu as getLegacyStateBucketName, Rc as noEchoOutputsComparison, Rd as injectedAwsRegionValue, Ri as extractDeploymentEventError, Rl as rebuildClientForBucketRegion, Rn as resolveReplacementOldType, Ro as hasReadableOrphans, Rs as repairMalformedResourcesForReadOnly, Rt as displacedOpClause, Ru as isDockerClientEnvKey, Sd as StageLoadError, Si as ATOMIC_FINAL_SNAPSHOT_TYPES, Sn as removeProtectionTypeList, So as isStalePlaceholderArnAttribute, Sr as DEFAULT_RESOURCE_TIMEOUT_MS, Ss as refuseMalformedResourceEntriesForImport, St as readRecordedConditionVerdicts, Su as getBootstrapMarkerKey, Td as parseFailureDebugDetail, Ti as ccRoutedFinalSnapshotError, Tl as carriesSecretMask, Tn as withUnprovenUnsettled, Tr as constructPathOf$1, Ts as refuseMalformedResourcePropertiesForDestroy, Tt as withResourceDeadline, Tu as readBootstrapMarkerBody, Uc as valueAtCoordinate, Ul as isAccessDenied, Un as inheritProducerRegions, Uo as malformedDriftResourcePropertiesWarning, Ur as bold, Us as findActionableSilentDrops, Ut as recordDisplacedSkips, Uu as redactedDockerCause, Vc as readsNoEchoSource, Vl as applyCrossPrefixScan, Vn as findNestedStackTypeChanges, Vo as isReadableOrphanRecord, Vr as withStackRecords, Vs as unreadableResourceEntries, Vu as redactDockerArgvValues, Wa as resolveDynamicReferences, Wc as liveMatchesUnresolvedTokenFrame, Wl as isNotImplemented, Wo as malformedExportNamesWarning, Wr as cyan, Ws as findHandledUnwrittenCreateOnly, Wu as runDockerForeground, Xa as recordedReferenceRegions, Xc as createUnionSecretMasker, Xi as CC_BROKEN_REASON, Xl as exportNamesCarriedFrom, Xn as nameGenerationCarriedFrom, Xo as malformedOrphanRecordsWarning, Xr as deleteSupersededEntry, Xs as findReplacedReadersOfRecreateTargets, Xt as deleteJournaledOrphans, Xu as synthesisStatusMessage, Ya as recordedOutputReferenceRegions, Yc as carryLogOnlyValues, Yl as describeRegionValueKind, Yn as updatePartialReason, Yo as malformedOrphanRecordsRefusalMessage, Yr as addSuperseded, Ys as hasNoCloudControlHandlers, Yt as withNestedStackContext, Yu as Synthesizer, Za as applyRoleArnIfSet, Zc as hasMaskableValues, Zi as ProviderRegistry, Zl as hasReadableExportSet, Zn as nameGenerationHighWaterOf, Zo as malformedOrphanRowsKeptWarning, Zr as holdsSupersededResources, Zs as shownType, Zt as dropFailedCommands, Zu as getDefaultStateBucketName, _a as deleteLeftInPlace, _c as prefetchCreateOnlyPropertyPaths, _d as expectedOwnerParam, _i as secretNamePrintingBags, _l as identityKeyFor, _n as pendingMovesOutOf, _o as carriesFetchableDynamicReference, _r as noEchoParameterValueSeed, _s as refuseMalformedOutputsForDestroy, _t as renderNestedTemplateTreeDefect, _u as rewriteTemplateAssetReferences, a as isProtectionValueActive, ad as resolveStateBucketWithDefaultAndSource, ai as noEchoAttributeNamesOf, al as createSecretMasker, ao as callerEnvCredentials, ar as reachableDivergentParameters, as as malformedResourcesWarning, au as shouldRetainResource, ba as isWaitAbandonedError, bc as withRetry, bd as derivePartitionAndUrlSuffix, bi as stateSecretNameNeedles, bn as replayFailedOperations, bo as AWS_NO_VALUE, br as isExportAliasCollision, bs as refuseMalformedResourceEntriesForDeploy, bt as conditionInputsFrom, bu as assertAssetBucketRegion, ca as applyCustomResourceResponseExpiration, cd as warnDeprecatedNoPrefixCliFlag, ci as noEchoParameterNamesOf, cl as maskSecretsInText, co as classifyReplaySecretRegion, cr as displayTextOrWithheld, cs as previewableOrphanRecords, ct as crossStackOutputProvenanceSource, cu as renderPhaseTimings, da as slowCcOperationTimeoutMs, dd as CFN_TEMPLATE_URL_LIMIT, di as completedReplayEntries, dn as refactorMarkerMovesOf, do as coerceParameterTypedValue, dr as secretBearingStateKeyWarning, ds as refuseMalformedOrphanRecords, dt as findServiceTokenRefusals, du as isSensitiveAttributeName, ea as wouldReturnToSdkProvider, ec as isStatefulRecreateTargetSync, ed as resolveApp, ei as supersededAfterRollback, el as printingCorpusOf, en as journaledOrphanLines, eo as explicitRoleArnOrThrow, er as retiredNameGenerationsAfter, es as malformedOutputsRefusalMessage, eu as importableOutputKeys, fd as MIGRATE_TMP_PREFIX, fi as journaledOrphanPrintingBag, fl as DYNAMIC_REFERENCE_TOKEN_SCAN, fn as refactorMarkerRefusalMessage, fo as isUnboundTemplateParameter, fr as secretSafeKeyDisplay, fs as refuseMalformedOrphanRecordsForDestroy, ft as serviceTokenBlockingReason, fu as stringifyValue, ga as deleteIndeterminateGuards, gd as decodeListingKey, gi as secretNamePrintingBag, gl as spelledKeysOf, gn as hasPendingMovesOut, go as carriesDynamicReference, gr as isWholeDynamicReferenceValue, gs as refuseMalformedOutputs, gt as listNestedTemplateRows, gu as loadPublishableAssetManifest, ha as UNSPECIFIED_SKIP_REASON, hd as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, hi as orphanRecordsPrintingBag, hl as pathCrossesDottedKey, hn as updateRefactorMarker, ho as isImpossibleEmptyStoredAttribute, hr as exportNameSecretExposure, hs as refuseMalformedOrphansForOrphan, ht as isAbsoluteAssetPath, hu as createAssetRedirectResolver, i as PROTECTION_PROPERTY_BY_TYPE, ia as isCustomResourceType$1, id as resolveStateBucketWithDefault, ii as withoutSuperseded, il as unionOfSecretBags, in as formatResourceLine, io as applyCallerIdentityCredentials, ir as namesAnyDeclaredParameter, is as malformedResourcePropertiesWarning, iu as orphansCarriedFrom, ja as unsettledItemsField, jc as isMarkedCoordinate, jd as ownValue, jl as recordProvenPublicExpression, jn as isJournaledOrphan, jo as STATE_REGION_DIVERGED, jr as rollbackOrphanIds, js as refuseMalformedResourcesForExport, jt as makeSiblingClaimReader, ju as describeDockerCapturedOutput, ka as INTRINSIC_KEYS, kc as TemplateParser, kd as hasPlainPrototype, ki as refusesFinalSnapshot, kl as recordNoEchoAttributeValues, kn as undeclaredEmptyObservedKeys, ko as declaresNoEcho, kr as hintSidesOf, ks as refuseMalformedResourcesForDeploy, kt as mergeNoChangeOutputs, ku as buildDockerImage, la as customResourceResponseExpirationWarning, ld as ssmResolvedValueType, li as withAttemptedItemsMasked, ll as scrubResourceRecord, ln as readRefactorMarker, lo as producerRegionsFromState, lr as exportAliasCollisionScrubWarning, ls as refuseDivergentRecordRegionForDestroy, lt as inheritedProvenanceForChildDiff, lu as timePhase, ma as RollbackInlinePolicyWriters, md as uploadCfnTemplate, mi as namingSecretsWithRecordedNoEcho, ml as isUncertifiedBaselineMaskPosition, mn as sameMove, mo as getAccountInfo, mr as exportNameNoEchoParameters, ms as refuseMalformedOrphansForDestroy, mt as findNestedTemplateTreeDefect, mu as buildAssetRedirectMap, n as recordedProtectionEvidence, na as TemplateNoEchoReresolver, nd as resolveCaptureObservedState, ni as supersededHolderOf, nl as recordLogOnlyValue, nn as makeForeignHolderScan, no as sendableAssumeRoleCommand, nr as withNameGenerationReached, ns as malformedRenderedContainersWarning, nu as isReadableBag, o as perType, oa as withPrintingSecrets, od as resolveUseCdkBootstrapAssets, oi as noEchoComparisonForTemplate, ol as errorCauseChain, oo as envCredentialsAreAssumedRole, or as resourcesNamingDeclaredParameter, os as malformedScrubResourceEntriesRefusalMessage, ot as IMPLICIT_DELETE_DEPENDENCIES, ou as stackInstanceIdCarriedFrom, pd as findLargeInlineResources, pi as maskEventTextWithBoundBags, pl as dynamicReferenceTokens, pn as refuseRefactorMarker, po as parameterTypeMayLoseSecretIdentity, pr as carriedExportAliasExposure, ps as refuseMalformedOrphans, pt as childTemplateLoader, pu as WorkGraph, qa as keepHeldTokenProvenance, ql as splitImportedOps, qo as malformedLocalResourceEntriesWarning, qr as red, qt as collectNestedChildUnaddressed, qu as AssetManifestLoader, r as recordedProtectionNote, ra as readsNoEchoDeleteValues, rd as resolveSkipPrefix, ri as supersededResourcesOf, rl as shareLogOnlyValues, rn as sameJournaledOrphans, ro as AWS_CREDENTIAL_ENV_KEYS, rr as computeParameterTaint, rs as malformedResourceEntriesWarning, ru as orphansAfterRollback, s as readProtection, sa as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, sd as stateBucketExistenceConfirmed, si as noEchoExactEchoLeavesOf, sl as maskSecretsInError, so as classifyRecordedSecretRegion, sr as WITHHELD_NAME_DISPLAY, ss as malformedStateRefusalMessage, st as computeImplicitDeleteEdges, su as PhaseClock, t as DeployEngine, tc as renderStatefulReason, td as resolveAutoAssetStorage, ti as supersededHeldByOtherTypeWarning, tl as recordLogOnlyParameterValue, tn as loadJournaledOrphans, to as isIamRoleArn, tr as retiredNameGenerationsLeaving, ts as malformedOutputsWarning, tu as importableOutputs, ua as CloudControlProvider, ud as CFN_TEMPLATE_BODY_LIMIT, ui as createReadOnlyAttributeHealerFactory, ul as withPhysicalNameCopies, un as readRefactorMarkerOnce, uo as regionLessSecretName, ur as secretBearing, ut as deferredServiceTokenWarning, uu as AssetPublisher, va as deleteSkipReason, vc as templateResourceTypes, vd as PARTITION_TABLE, vl as inheritNestedStackParameterAssociations, vn as pendingMovesRefusalMessage, vo as isNamelessDynamicReferenceError, vr as collectDeclaredOutputNames, vs as refuseMalformedResourceAttributesForOrphan, vt as templateIdentity, vu as AssetModeResolver, wd as describeJsonParseFailure, wi as buildFinalSnapshotIdentifier, wl as splitGetAttStringForm, wn as settleUnsettledPrevious, wo as refStateLookupFromResource, wr as maskingRetryLogger, ws as refuseMalformedResourceEntriesForOrphan, wu as parseBootstrapMarker, xd as AssemblyReader, xi as storedSecretNameNeedles, xl as physicalNameCopiesOf, xn as replayRollback, xo as cfnRefValueFromPhysicalId, xr as bindingSkippedOutputs, xs as refuseMalformedResourceEntriesForDestroy, xt as parentSuppliedValues, xu as ensureAssetStorage, yc as describeTypeWithThrottleRetry, yd as canonicalizeRegion, yi as secretNamedRecordNeedles, yl as recordNestedStackParameterExpressions, yn as refusePendingMovesOut, yo as keepsSecretReferenceToken, yr as collectPublishedOutputNames, ys as refuseMalformedResourceEntries, yt as conditionFingerprint, yu as BOOTSTRAP_MARKER_PREFIX, zl as CrossPrefixReadError, zn as seedsDeleteFirstGuard, zo as hasReadableOutputs, zr as destroyStackRecordsView, zs as unpreviewableOrphanRecords, zt as displacedPhysicalIdShown, zu as isMalformedEnvKey } from "./deploy-engine--bCIMkkk.js";
-import { t as getCdkdVersion } from "./version-Caty7J3x.js";
+import { a as runWithStackAwsClients, i as resetAwsClients, o as setAwsClients, t as AwsClients } from "./aws-clients-DWpHZk2l.js";
+import { $ as safeMsg, B as SAFE_MSG_ALTERED_CHAR, G as cutMarker, H as STACK_REF_MAX_CODE_POINTS, I as withSkipPrefix, J as displaySafe, K as displayAwsMessage, L as withStackScope, Q as plainIdentOr, S as explicitNamePropertyFor, U as UNRENDERABLE, V as SECRET_REF_MAX_CODE_POINTS, W as asIsMessage, X as isPasteableIdent, Y as displayStackName, _ as PATTERN_B_RESOURCE_TYPES, a as safeStringify, c as isStdoutReservedForPayload, d as runStackBuffered, et as stringifyJsonPayload, g as PATTERN_B_NAME_PROPERTIES, h as PATTERN_B_NAME_OPTIONS, j as isNameGeneration, l as reserveStdoutForPayload, m as getLiveRenderer, n as describeAwsFailure, nt as truncateCodePoints, q as displayIdent, s as getLogger, tt as terminalSafe, w as generateResourceName, x as derivesPatternBName } from "./aws-failure-text-DiHodi76.js";
+import { $t as formatLockExpiry, An as MalformedProducerRecordRefusalError, Ar as isThrottlingError, Bn as formatError, Dn as LocalStartServiceError, Dr as retryClassificationText, En as LocalInvokeBuildError$1, Er as isTransientServerError, Et as logicalIdShown, F as assertRegionMatch, Fn as ResourceUpdateNotSupportedError, Gn as TIMEOUT_FLAG_RESOURCE_TYPE, I as VALUE_NOT_SHOWN, In as StackHasActiveImportsError, Ln as StackTerminationProtectionError, M as RESOURCE_NOT_FOUND, Mn as PartialFailureError, N as isMarkedNotGone, Nn as ProvisioningError, Ot as resourceTypeShown, Pn as ResourceTimeoutError, Qn as pasteableCommand, Qt as forceQuitRecoveryClause, Rn as StateError, Sn as DeployCancelledError, Sr as isAmbiguousOutcomeError, Tn as IntrinsicResolutionRefusalError, Tr as isRetryableTransientError, U as remedyLogicalId, Un as normalizeAwsError, Wn as withErrorHandling, Xt as buildForceUnlockCommand, Yn as commandHole, Yt as UNREPRODUCIBLE_LOCK_CLAUSE, Zn as isInertUnquoted, Zt as buildLockContentionMessage, _r as stripControlChars, _t as beginCommandInterruptScope, an as DEFAULT_STATE_PREFIX, ar as setPasteableRunFlags, bn as CrossAccountSecretRefusalError, bt as isInterruptedWaitError, c as RESOLVED_PREVIOUS_PRINCIPAL_KEYS, cn as producerCoordinateKey, dn as withPasteableAwsProfile, en as formatLockOperation, er as plainOrDescribed, fn as ambientClientDefaults, gn as AccountIdUnavailableError, gr as escapeRegExp, hn as credentialFingerprint, in as CUSTOM_RESOURCE_RESPONSE_PREFIX, ir as withheldTargetClause, it as runDeleteAttempt, jn as NestedStackChildDirectDestroyError, jr as markNonRetryable, kr as isMarkedNonRetryable, ln as producerRecordKey, mn as clientDefaultsFor, nr as shellBoundedDisplay, on as injectiveKey, or as setPasteableVerbFlags, p as readRecordedPrincipals, pn as ambientCredentialConfig, qn as SHELL_ACTIVE_WHY, rr as shellQuote, s as IAM_PRINCIPAL_NAME, tn as formatLockOwner, tr as quotedOrDescribed, un as setPasteableAwsProfile, ut as isAwsCliLiteral, vn as CdkdError, vr as stripForDisplay, vt as endCommandInterruptScope, wn as DynamicReferenceRegionAmbiguousError, yt as interruptWatchListenerCount, zn as SynthesisError } from "./created-resource-sink-BpB3iPvn.js";
+import { a as setAssumedRoleCredentials, d as formatAuthority, i as getPreAssumeEnvCredentials, n as awsClientDefaults, r as getAssumedRoleCredentials, u as runInStackAwsScope } from "./aws-client-defaults-BLXFsfMa.js";
+import { $a as assertSendableRoleArn, $c as logOnlyValueCount, $i as isCustomResource, $l as hasUnverifiableParameterRefusal, $n as retiredAfterRollback, $o as malformedOrphansWarning, $r as removeSuperseded, $s as isStatefulRecreateTargetForReplace, $t as isHandledOrphan, $u as loadCdkJson, Ac as canonicalCoordinates, Ad as nullPrototypeRecord, Ai as unsupportedFinalSnapshotError, Al as recordNoEchoParameterFreshValue, An as demoteSupersededOrphans, Ao as JSON_LISTING_HOLE_VALUE, Ar as movedToHint, As as refuseMalformedResourcesForDestroy, At as makeCanonicalizePropertiesFn, Au as resolveDockerContextDirectory, Bc as readbackPathFor, Bd as resolveBucketRegion, Bl as CrossPrefixScanCache, Bn as orphanNeedsIdentity, Bo as hasReadableResources, Bs as unreadableOrphanRecords, Bt as dropSettledNestedJournals, Bu as partitionSensitiveEnv, Cd as processStackMessages, Ci as PRE_DELETE_SNAPSHOT_TYPES, Cl as recordPhysicalNameCopy, Cn as recordAfterRollbackUpdate, Co as lacksRecordedTableArn, Cr as DEFAULT_RESOURCE_WARN_AFTER_MS, Cs as refuseMalformedResourceEntriesForImportSave, Cu as isCrossRegionRedirect, Dd as defineOwnKey, Di as effectiveDeletionPolicy, Dl as recordMaskOnlyValue, Dn as equalModuloMarkedMask, Do as parameterInputsFor, Dr as formatDestructiveChange, Ds as refuseMalformedResourcePropertiesForExport, Dt as isSecretBearingReferenceString, Du as validateContainerRepoName, Ed as utf8ByteLength, Ei as createPreDeleteFinalSnapshot, El as provenPublicValue, En as calculateResourceDrift, Eo as withSharedDrainBudget, Er as findDestructiveChanges, Es as refuseMalformedResourcePropertiesForDrift, Et as diffSecurity, Eu as validateAssetBucketName, Fa as withoutUnsettledProperties, Fc as maskedLeafCoordinatesOf, Fd as renderAssemblyPathEscape, Fl as LockManager, Fn as recheckFailedPlan, Fo as accountArgs, Fr as mappingPairs, Fs as repairMalformedOutputsForReadOnly, Ft as keptForRetainedRecord, Fu as finchSecretArgvRefusal, Ga as producerLookupOver, Gl as stackInstanceIdOf, Go as malformedExportSourceWarning, Gr as gray, Gt as revertedNestedRowIds, Gu as runDockerStreaming, Hc as recordedNoEchoValuesOf, Hl as crossPrefixDeniedWarning, Ho as isReadableResourceEntry, Hs as withheldAccountClause, Ht as nestedChildStackName$1, Hu as redactedCause, Ia as IntrinsicFunctionResolver, Ic as noEchoCoordinatesOf, Id as resolveAssemblyPath, Ii as DeploymentEventsReader, Il as isLockInfoExpired, In as recordUnderIdIsNotOwn, Io as deployRefusesOrphanRowsReason, Ir as parseMappingFile, Is as repairMalformedResourceEntriesForReadOnly, It as recordRetainedForReadoption, Iu as formatDockerLoginError, Jl as acceptedCreateOnlyDropsOf, Jn as updatePartialMessage, Jo as malformedLocalResourcesWarning, Jr as yellow, Js as NO_CC_HANDLERS_REASON, Jt as getCurrentNestedStackContext, Ju as getDockerImageBySourceHash, Ka as refuseUnreadableCdkCrossAccountRefs, Kc as redactForState, Kl as withStackInstanceIdWithheld, Ko as malformedLocalOutputsWarning, Kr as green, Ks as unwrittenCreateOnlyReplacement, Kt as withNestedRevertRun, Ku as warnFinchArgvExposure, La as poisonRenderedSpellingsCollidingIn, Lc as noEchoLeavesOf, Ld as injectAwsRegion, Li as DeploymentEventsStore, Ll as S3StateBackend, Ln as replacementNeverSwapped, Lo as displayLogicalId, Lr as proposeRenames, Ls as repairMalformedResourcePropertiesForReadOnly, Lt as NESTED_PENDING_PARENT_REASON, Lu as getDockerCmd, Ma as unsettledItemsOf, Mc as maskAtCoordinates, Md as absoluteAssemblyPathEscape, Mi as ledgerForStack, Ml as wholeStringLeavesOf, Mn as isReplacementOrphan, Mo as STATE_RESOURCES_MALFORMED, Mr as withMovedTo, Ms as refuseMalformedState, Mt as planOrphanAdoption, Mu as describeDockerExecFailure, Na as unsettledPropertiesOf, Nc as maskReadbackAtCoordinates, Nd as describeFileReadFailure, Nl as WHOLE_DYNAMIC_REFERENCE_PATTERN, Nn as planFailedOps, No as UNREADABLE_ORPHANS_CONTAINER_ROW, Nr as isPairableType, Ns as repairMalformedOrphanRecordsForReadOnly, Nt as pendingRequestCount, Nu as describeDockerFailure, Oa as DiffCalculator, Oc as DagBuilder, Od as hasOwnKey, Oi as isFinalSnapshotError, Ol as recordMaskOnlyValuesIn, On as equalModuloMask, Or as findRefactorHints, Os as refuseMalformedResourcePropertiesForOrphan, Ot as keptWholeReasonText, Ou as buildDenyExternalAccessPolicy, Pa as withUnsettledProperties, Pc as maskWholeValue, Pd as displayAssemblyPath, Pi as withCreateTokenLedger, Pl as isSingleDynamicReferenceToken, Pn as planRollback, Po as UNREADABLE_RESOURCES_MAP_ROW, Pr as looselyEqual, Ps as repairMalformedOrphansForReadOnly, Pt as resolvePendingCloudControlRequests, Pu as dockerSpawnEnvWithSensitive, Qa as assertFlagRoleArn, Qc as literalSplitDelimitersOf, Qi as ccBrokenReason, Ql as hasReasonlessBaselineRefusal, Qn as nameScopeOf, Qo as malformedOrphansRefusalMessage, Qr as isSupersededResourceRecord, Qs as MULTI_REGION_RECREATE_BLOCKED_TYPES, Qt as dropFailedHint, Qu as getLegacyStateBucketName, Rc as noEchoOutputsComparison, Rd as injectedAwsRegionValue, Ri as extractDeploymentEventError, Rl as rebuildClientForBucketRegion, Rn as resolveReplacementOldType, Ro as hasReadableOrphans, Rs as repairMalformedResourcesForReadOnly, Rt as displacedOpClause, Ru as isDockerClientEnvKey, Sd as StageLoadError, Si as ATOMIC_FINAL_SNAPSHOT_TYPES, Sn as removeProtectionTypeList, So as isStalePlaceholderArnAttribute, Sr as DEFAULT_RESOURCE_TIMEOUT_MS, Ss as refuseMalformedResourceEntriesForImport, St as readRecordedConditionVerdicts, Su as getBootstrapMarkerKey, Td as parseFailureDebugDetail, Ti as ccRoutedFinalSnapshotError, Tl as carriesSecretMask, Tn as withUnprovenUnsettled, Tr as constructPathOf$1, Ts as refuseMalformedResourcePropertiesForDestroy, Tt as withResourceDeadline, Tu as readBootstrapMarkerBody, Uc as valueAtCoordinate, Ul as isAccessDenied, Un as inheritProducerRegions, Uo as malformedDriftResourcePropertiesWarning, Ur as bold, Us as findActionableSilentDrops, Ut as recordDisplacedSkips, Uu as redactedDockerCause, Vc as readsNoEchoSource, Vl as applyCrossPrefixScan, Vn as findNestedStackTypeChanges, Vo as isReadableOrphanRecord, Vr as withStackRecords, Vs as unreadableResourceEntries, Vu as redactDockerArgvValues, Wa as resolveDynamicReferences, Wc as liveMatchesUnresolvedTokenFrame, Wl as isNotImplemented, Wo as malformedExportNamesWarning, Wr as cyan, Ws as findHandledUnwrittenCreateOnly, Wu as runDockerForeground, Xa as recordedReferenceRegions, Xc as createUnionSecretMasker, Xi as CC_BROKEN_REASON, Xl as exportNamesCarriedFrom, Xn as nameGenerationCarriedFrom, Xo as malformedOrphanRecordsWarning, Xr as deleteSupersededEntry, Xs as findReplacedReadersOfRecreateTargets, Xt as deleteJournaledOrphans, Xu as synthesisStatusMessage, Ya as recordedOutputReferenceRegions, Yc as carryLogOnlyValues, Yl as describeRegionValueKind, Yn as updatePartialReason, Yo as malformedOrphanRecordsRefusalMessage, Yr as addSuperseded, Ys as hasNoCloudControlHandlers, Yt as withNestedStackContext, Yu as Synthesizer, Za as applyRoleArnIfSet, Zc as hasMaskableValues, Zi as ProviderRegistry, Zl as hasReadableExportSet, Zn as nameGenerationHighWaterOf, Zo as malformedOrphanRowsKeptWarning, Zr as holdsSupersededResources, Zs as shownType, Zt as dropFailedCommands, Zu as getDefaultStateBucketName, _a as deleteLeftInPlace, _c as prefetchCreateOnlyPropertyPaths, _d as expectedOwnerParam, _i as secretNamePrintingBags, _l as identityKeyFor, _n as pendingMovesOutOf, _o as carriesFetchableDynamicReference, _r as noEchoParameterValueSeed, _s as refuseMalformedOutputsForDestroy, _t as renderNestedTemplateTreeDefect, _u as rewriteTemplateAssetReferences, a as isProtectionValueActive, ad as resolveStateBucketWithDefaultAndSource, ai as noEchoAttributeNamesOf, al as createSecretMasker, ao as callerEnvCredentials, ar as reachableDivergentParameters, as as malformedResourcesWarning, au as shouldRetainResource, ba as isWaitAbandonedError, bc as withRetry, bd as derivePartitionAndUrlSuffix, bi as stateSecretNameNeedles, bn as replayFailedOperations, bo as AWS_NO_VALUE, br as isExportAliasCollision, bs as refuseMalformedResourceEntriesForDeploy, bt as conditionInputsFrom, bu as assertAssetBucketRegion, ca as applyCustomResourceResponseExpiration, cd as warnDeprecatedNoPrefixCliFlag, ci as noEchoParameterNamesOf, cl as maskSecretsInText, co as classifyReplaySecretRegion, cr as displayTextOrWithheld, cs as previewableOrphanRecords, ct as crossStackOutputProvenanceSource, cu as renderPhaseTimings, da as slowCcOperationTimeoutMs, dd as CFN_TEMPLATE_URL_LIMIT, di as completedReplayEntries, dn as refactorMarkerMovesOf, do as coerceParameterTypedValue, dr as secretBearingStateKeyWarning, ds as refuseMalformedOrphanRecords, dt as findServiceTokenRefusals, du as isSensitiveAttributeName, ea as wouldReturnToSdkProvider, ec as isStatefulRecreateTargetSync, ed as resolveApp, ei as supersededAfterRollback, el as printingCorpusOf, en as journaledOrphanLines, eo as explicitRoleArnOrThrow, er as retiredNameGenerationsAfter, es as malformedOutputsRefusalMessage, eu as importableOutputKeys, fd as MIGRATE_TMP_PREFIX, fi as journaledOrphanPrintingBag, fl as DYNAMIC_REFERENCE_TOKEN_SCAN, fn as refactorMarkerRefusalMessage, fo as isUnboundTemplateParameter, fr as secretSafeKeyDisplay, fs as refuseMalformedOrphanRecordsForDestroy, ft as serviceTokenBlockingReason, fu as stringifyValue, ga as deleteIndeterminateGuards, gd as decodeListingKey, gi as secretNamePrintingBag, gl as spelledKeysOf, gn as hasPendingMovesOut, go as carriesDynamicReference, gr as isWholeDynamicReferenceValue, gs as refuseMalformedOutputs, gt as listNestedTemplateRows, gu as loadPublishableAssetManifest, ha as UNSPECIFIED_SKIP_REASON, hd as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, hi as orphanRecordsPrintingBag, hl as pathCrossesDottedKey, hn as updateRefactorMarker, ho as isImpossibleEmptyStoredAttribute, hr as exportNameSecretExposure, hs as refuseMalformedOrphansForOrphan, ht as isAbsoluteAssetPath, hu as createAssetRedirectResolver, i as PROTECTION_PROPERTY_BY_TYPE, ia as isCustomResourceType$1, id as resolveStateBucketWithDefault, ii as withoutSuperseded, il as unionOfSecretBags, in as formatResourceLine, io as applyCallerIdentityCredentials, ir as namesAnyDeclaredParameter, is as malformedResourcePropertiesWarning, iu as orphansCarriedFrom, ja as unsettledItemsField, jc as isMarkedCoordinate, jd as ownValue, jl as recordProvenPublicExpression, jn as isJournaledOrphan, jo as STATE_REGION_DIVERGED, jr as rollbackOrphanIds, js as refuseMalformedResourcesForExport, jt as makeSiblingClaimReader, ju as describeDockerCapturedOutput, ka as INTRINSIC_KEYS, kc as TemplateParser, kd as hasPlainPrototype, ki as refusesFinalSnapshot, kl as recordNoEchoAttributeValues, kn as undeclaredEmptyObservedKeys, ko as declaresNoEcho, kr as hintSidesOf, ks as refuseMalformedResourcesForDeploy, kt as mergeNoChangeOutputs, ku as buildDockerImage, la as customResourceResponseExpirationWarning, ld as ssmResolvedValueType, li as withAttemptedItemsMasked, ll as scrubResourceRecord, ln as readRefactorMarker, lo as producerRegionsFromState, lr as exportAliasCollisionScrubWarning, ls as refuseDivergentRecordRegionForDestroy, lt as inheritedProvenanceForChildDiff, lu as timePhase, ma as RollbackInlinePolicyWriters, md as uploadCfnTemplate, mi as namingSecretsWithRecordedNoEcho, ml as isUncertifiedBaselineMaskPosition, mn as sameMove, mo as getAccountInfo, mr as exportNameNoEchoParameters, ms as refuseMalformedOrphansForDestroy, mt as findNestedTemplateTreeDefect, mu as buildAssetRedirectMap, n as recordedProtectionEvidence, na as TemplateNoEchoReresolver, nd as resolveCaptureObservedState, ni as supersededHolderOf, nl as recordLogOnlyValue, nn as makeForeignHolderScan, no as sendableAssumeRoleCommand, nr as withNameGenerationReached, ns as malformedRenderedContainersWarning, nu as isReadableBag, o as perType, oa as withPrintingSecrets, od as resolveUseCdkBootstrapAssets, oi as noEchoComparisonForTemplate, ol as errorCauseChain, oo as envCredentialsAreAssumedRole, or as resourcesNamingDeclaredParameter, os as malformedScrubResourceEntriesRefusalMessage, ot as IMPLICIT_DELETE_DEPENDENCIES, ou as stackInstanceIdCarriedFrom, pd as findLargeInlineResources, pi as maskEventTextWithBoundBags, pl as dynamicReferenceTokens, pn as refuseRefactorMarker, po as parameterTypeMayLoseSecretIdentity, pr as carriedExportAliasExposure, ps as refuseMalformedOrphans, pt as childTemplateLoader, pu as WorkGraph, qa as keepHeldTokenProvenance, ql as splitImportedOps, qo as malformedLocalResourceEntriesWarning, qr as red, qt as collectNestedChildUnaddressed, qu as AssetManifestLoader, r as recordedProtectionNote, ra as readsNoEchoDeleteValues, rd as resolveSkipPrefix, ri as supersededResourcesOf, rl as shareLogOnlyValues, rn as sameJournaledOrphans, ro as AWS_CREDENTIAL_ENV_KEYS, rr as computeParameterTaint, rs as malformedResourceEntriesWarning, ru as orphansAfterRollback, s as readProtection, sa as CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID, sd as stateBucketExistenceConfirmed, si as noEchoExactEchoLeavesOf, sl as maskSecretsInError, so as classifyRecordedSecretRegion, sr as WITHHELD_NAME_DISPLAY, ss as malformedStateRefusalMessage, st as computeImplicitDeleteEdges, su as PhaseClock, t as DeployEngine, tc as renderStatefulReason, td as resolveAutoAssetStorage, ti as supersededHeldByOtherTypeWarning, tl as recordLogOnlyParameterValue, tn as loadJournaledOrphans, to as isIamRoleArn, tr as retiredNameGenerationsLeaving, ts as malformedOutputsWarning, tu as importableOutputs, ua as CloudControlProvider, ud as CFN_TEMPLATE_BODY_LIMIT, ui as createReadOnlyAttributeHealerFactory, ul as withPhysicalNameCopies, un as readRefactorMarkerOnce, uo as regionLessSecretName, ur as secretBearing, ut as deferredServiceTokenWarning, uu as AssetPublisher, va as deleteSkipReason, vc as templateResourceTypes, vd as PARTITION_TABLE, vl as inheritNestedStackParameterAssociations, vn as pendingMovesRefusalMessage, vo as isNamelessDynamicReferenceError, vr as collectDeclaredOutputNames, vs as refuseMalformedResourceAttributesForOrphan, vt as templateIdentity, vu as AssetModeResolver, wd as describeJsonParseFailure, wi as buildFinalSnapshotIdentifier, wl as splitGetAttStringForm, wn as settleUnsettledPrevious, wo as refStateLookupFromResource, wr as maskingRetryLogger, ws as refuseMalformedResourceEntriesForOrphan, wu as parseBootstrapMarker, xd as AssemblyReader, xi as storedSecretNameNeedles, xl as physicalNameCopiesOf, xn as replayRollback, xo as cfnRefValueFromPhysicalId, xr as bindingSkippedOutputs, xs as refuseMalformedResourceEntriesForDestroy, xt as parentSuppliedValues, xu as ensureAssetStorage, yc as describeTypeWithThrottleRetry, yd as canonicalizeRegion, yi as secretNamedRecordNeedles, yl as recordNestedStackParameterExpressions, yn as refusePendingMovesOut, yo as keepsSecretReferenceToken, yr as collectPublishedOutputNames, ys as refuseMalformedResourceEntries, yt as conditionFingerprint, yu as BOOTSTRAP_MARKER_PREFIX, zl as CrossPrefixReadError, zn as seedsDeleteFirstGuard, zo as hasReadableOutputs, zr as destroyStackRecordsView, zs as unpreviewableOrphanRecords, zt as displacedPhysicalIdShown, zu as isMalformedEnvKey } from "./deploy-engine-b0rYBotL.js";
+import { t as getCdkdVersion } from "./version-BkSInxUL.js";
 import { randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketCommand, DeleteObjectsCommand, GetBucketLocationCommand, GetObjectCommand, HeadBucketCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketEncryptionCommand, PutBucketPolicyCommand, PutBucketVersioningCommand, PutObjectCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
 import { GetRoleCommand, GetUserCommand } from "@aws-sdk/client-iam";
@@ -34,7 +34,7 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { WebSocketServer } from "ws";
 
-//#region src/cli/commands/state-file-keys.ts
+// src/cli/commands/state-file-keys.ts
 const STATE_FILE_SUFFIX = "/state.json";
 const LEGACY_SEGMENTS_UNDER_PREFIX = 1;
 const LOCK_FILE_SUFFIX = "/lock.json";
@@ -68,8 +68,7 @@ function describeStateKey(key, suffix = STATE_FILE_SUFFIX, knownPrefix) {
 }
 const STATE_KEY_MAX_CODE_POINTS = STACK_REF_MAX_CODE_POINTS + 64;
 
-//#endregion
-//#region src/cli/options.ts
+// src/cli/options.ts
 function parseContextOptions(contextArgs) {
 	const context = nullPrototypeRecord();
 	if (contextArgs) for (const arg of contextArgs) {
@@ -322,8 +321,7 @@ const destroyOptions = [
 ];
 const skipFinalSnapshotOption = new Option("--skip-final-snapshot", "Delete resources whose DeletionPolicy (or, on replacements, UpdateReplacePolicy) is 'Snapshot' — including an RDS DB cluster or standalone DB instance with no DeletionPolicy, whose CloudFormation default is 'Snapshot' — WITHOUT creating the final snapshot the policy promises (DATA LOSS — explicit opt-out of CloudFormation parity). By default cdkd creates the final snapshot for every CloudFormation-supported type (RDS DBInstance / DBCluster, Neptune / DocDB clusters, ElastiCache CacheCluster / ReplicationGroup, Redshift Cluster, EC2 Volume) and refuses the delete when it cannot — e.g. a resource managed via the Cloud Control API route, whose delete has no final-snapshot parameter. On 'cdkd rollback' the flag governs the rolled-back CREATE's DeletionPolicy; a reverse-replacement delete of the NEW resource keeps its own bounded UpdateReplacePolicy behavior and is unaffected.").default(false);
 
-//#endregion
-//#region src/cli/region-options.ts
+// src/cli/region-options.ts
 function foldRegionOption(options) {
 	if (options.region !== void 0) options.region = canonicalizeRegion(options.region);
 	for (const key of ["AWS_REGION", "AWS_DEFAULT_REGION"]) {
@@ -548,8 +546,7 @@ function regionShown(region) {
 	return displayIdent(region) === region ? plainOrDescribed(region, "region") : "a region that is not a plain identifier";
 }
 
-//#endregion
-//#region src/cli/commands/bootstrap-destroy.ts
+// src/cli/commands/bootstrap-destroy.ts
 async function promptBootstrapDestroyConfirm(input) {
 	const logger = getLogger();
 	logger.warn("");
@@ -854,8 +851,7 @@ async function bootstrapDestroyCommand(options) {
 	}
 }
 
-//#endregion
-//#region src/cli/commands/bootstrap.ts
+// src/cli/commands/bootstrap.ts
 async function bootstrapCommand(options) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -1066,8 +1062,7 @@ function createBootstrapCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/utils/glob-match.ts
+// src/utils/glob-match.ts
 function globMatches(pattern, subject) {
 	const segments = pattern.split("*");
 	if (segments.length === 1) return pattern === subject;
@@ -1099,8 +1094,7 @@ function pathGlobMatches(pattern, subject) {
 	return can[0];
 }
 
-//#endregion
-//#region src/cli/cdk-path.ts
+// src/cli/cdk-path.ts
 function readCdkPath(resource) {
 	const meta = resource.Metadata;
 	if (!meta) return "";
@@ -1153,8 +1147,7 @@ function stackForPathFormTarget(parsed, target, stacks) {
 	return stackForConstructPath(parsed.pathOrId, stacks);
 }
 
-//#endregion
-//#region src/cli/stack-matcher.ts
+// src/cli/stack-matcher.ts
 function matchStacks(stacks, patterns, options = {}) {
 	if (patterns.length === 0) return [];
 	const selected = /* @__PURE__ */ new Set();
@@ -1311,8 +1304,7 @@ function renderAllNoTopLevelStacks(inStages) {
 	return `--all selects top-level stacks only, and this app has none: every stack is inside a CDK Stage (${inStages.map(describeStack).join(", ")}). ` + renderStagePatternAdvice(inStages);
 }
 
-//#endregion
-//#region src/utils/yaml.ts
+// src/utils/yaml.ts
 const EMIT_OPTIONS = {
 	schema: "core",
 	lineWidth: 0,
@@ -1377,8 +1369,7 @@ function toYaml(obj) {
 	return doc.toString(EMIT_OPTIONS);
 }
 
-//#endregion
-//#region src/cli/commands/synth.ts
+// src/cli/commands/synth.ts
 function countDeployableResources(template) {
 	return Object.values(template.Resources ?? {}).filter((r) => r.Type !== "AWS::CDK::Metadata").length;
 }
@@ -1461,8 +1452,7 @@ function createSynthCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/list.ts
+// src/cli/commands/list.ts
 function sortByDependency(stacks) {
 	const visited = /* @__PURE__ */ new Set();
 	const result = [];
@@ -1556,8 +1546,7 @@ function createListCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/utils/interrupt-signals.ts
+// src/utils/interrupt-signals.ts
 const postCleanupListeners = /* @__PURE__ */ new WeakSet();
 function prependPostCleanupSigintListener(listener) {
 	postCleanupListeners.add(listener);
@@ -1628,8 +1617,7 @@ function watchCommandInterrupt(opts) {
 	};
 }
 
-//#endregion
-//#region src/deployment/recreate-targets/validate.ts
+// src/deployment/recreate-targets/validate.ts
 const EMPTY_ALLOW_SET$1 = /* @__PURE__ */ new Set();
 const NESTED_STACK_RESOURCE_TYPE$1 = "AWS::CloudFormation::Stack";
 function validateRecreateTargets(input) {
@@ -1742,8 +1730,7 @@ function validateRecreateTargets(input) {
 	};
 }
 
-//#endregion
-//#region src/deployment/recreate-targets/render.ts
+// src/deployment/recreate-targets/render.ts
 function renderRecreateTargetsErrors(validation) {
 	const lines = [];
 	const FLAG_UMBRELLA = "--recreate-via-cc-api / --recreate-via-sdk-provider";
@@ -1841,8 +1828,7 @@ function foldRegion(region) {
 	return canonicalizeRegion(region?.trim());
 }
 
-//#endregion
-//#region src/deployment/recreate-targets/probe.ts
+// src/deployment/recreate-targets/probe.ts
 async function probeStatefulRecreateTargetsAsync(targets, clients, logger = getLogger().child("recreate-targets")) {
 	const promoted = [];
 	const probeRetryOptions = {
@@ -1962,8 +1948,7 @@ async function probeAndRevalidateStateful(input) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/confirm-prompt.ts
+// src/cli/commands/confirm-prompt.ts
 let promptQueue = Promise.resolve();
 function serializePrompt(ask) {
 	const asked = promptQueue.then(ask);
@@ -1997,8 +1982,7 @@ async function confirmOrRefuse(prompt, options) {
 	}
 }
 
-//#endregion
-//#region src/cli/commands/recreate-downstream-consumers.ts
+// src/cli/commands/recreate-downstream-consumers.ts
 function producerNameIsUnresolved(sourceStack) {
 	return sourceStack.includes("{{resolve:") || sourceStack.includes("***");
 }
@@ -2068,8 +2052,7 @@ function renderDownstreamConsumers(producerStack, consumers) {
 	return lines.join("\n");
 }
 
-//#endregion
-//#region src/cli/commands/recreate-confirm-prompt.ts
+// src/cli/commands/recreate-confirm-prompt.ts
 async function promptRecreateConfirm(input) {
 	if (input.targets.length === 0) return true;
 	const logger = getLogger();
@@ -2126,8 +2109,7 @@ async function promptRecreateConfirm(input) {
 	});
 }
 
-//#endregion
-//#region src/cli/commands/pin-cc-api-reachability.ts
+// src/cli/commands/pin-cc-api-reachability.ts
 function analyzePinCcApiReachability(pinnedLogicalIds, stacks) {
 	const idSets = stacks.map((s) => ({
 		stackName: s.stackName,
@@ -2152,8 +2134,7 @@ function analyzePinCcApiReachability(pinnedLogicalIds, stacks) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/nested-template-preflight.ts
+// src/cli/commands/nested-template-preflight.ts
 function refuseMalformedNestedTemplateTrees(stacks) {
 	for (const stack of stacks) {
 		if (!stack.nestedTemplates) continue;
@@ -2163,8 +2144,7 @@ function refuseMalformedNestedTemplateTrees(stacks) {
 	}
 }
 
-//#endregion
-//#region src/cli/commands/require-approval.ts
+// src/cli/commands/require-approval.ts
 const REQUIRE_APPROVAL_VALUES = [
 	"never",
 	"any-change",
@@ -2208,8 +2188,7 @@ function renderApprovalRequest(request) {
 	return `${lines.join("\n")}\n`;
 }
 
-//#endregion
-//#region src/cli/commands/deployment-events-run.ts
+// src/cli/commands/deployment-events-run.ts
 function startRunRecorder(args) {
 	if (args.dryRun) return void 0;
 	const recorder = new DeploymentEventsStore(args.backend, {
@@ -2246,8 +2225,7 @@ function recordRunFailed(recorder, stackName, error) {
 	});
 }
 
-//#endregion
-//#region src/state/export-index-store.ts
+// src/state/export-index-store.ts
 const EXPORT_INDEX_VERSION = 1;
 function mapsEqual(a, b) {
 	if (a.size !== b.size) return false;
@@ -2607,8 +2585,7 @@ var ExportIndexStore = class {
 	}
 };
 
-//#endregion
-//#region src/analyzer/cross-stack-deps.ts
+// src/analyzer/cross-stack-deps.ts
 function inferCrossStackStackDeps(stacks, opts) {
 	const result = /* @__PURE__ */ new Map();
 	for (const [consumer, producers] of inferCrossStackDepsByStack(stacks, opts)) {
@@ -2706,11 +2683,10 @@ function collectCrossStackRefs(node, onRef, unconditional) {
 	for (const value of Object.values(obj)) collectCrossStackRefs(value, onRef, below);
 }
 
-//#endregion
-//#region src/provisioning/register-providers.ts
+// src/provisioning/register-providers.ts
 let providerClasses;
 function loadProviderClasses() {
-	providerClasses ??= import("./provider-classes-B8kkAZqJ.js");
+	providerClasses ??= import("./provider-classes-DGFOKPO9.js");
 	return providerClasses;
 }
 function registerAllProviders(registry, classes) {
@@ -2872,8 +2848,7 @@ function registerAllProviders(registry, classes) {
 	registry.register("AWS::CloudFormation::WaitConditionHandle", new WaitConditionHandleProvider());
 }
 
-//#endregion
-//#region src/provisioning/resource-timeout-registry.ts
+// src/provisioning/resource-timeout-registry.ts
 let resolved;
 function setResolvedResourceTimeouts(opt) {
 	resolved = opt;
@@ -2883,8 +2858,7 @@ function resolvedResourceTimeoutMs(resourceType) {
 	return resolved.perTypeMs?.[resourceType] ?? resolved.globalMs;
 }
 
-//#endregion
-//#region src/cli/commands/prefix-migration-check.ts
+// src/cli/commands/prefix-migration-check.ts
 function findPendingPrefixRenames(stackName, state) {
 	if (!state) return [];
 	const patternB = new Set(PATTERN_B_RESOURCE_TYPES);
@@ -2959,8 +2933,7 @@ function createPrefixMigrationGate(opts) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/registry-release.ts
+// src/cli/commands/registry-release.ts
 async function releaseRegistryMarkerQuietly(backend, stackName, region, logger, known) {
 	if (stackName.includes("~")) return;
 	try {
@@ -2971,8 +2944,7 @@ async function releaseRegistryMarkerQuietly(backend, stackName, region, logger,
 	}
 }
 
-//#endregion
-//#region src/cli/commands/cross-prefix-gate.ts
+// src/cli/commands/cross-prefix-gate.ts
 function deployStackRegion(stack, baseRegion) {
 	return stack.region || baseRegion;
 }
@@ -3069,8 +3041,7 @@ function composeStateLoadedGates(crossPrefix, migration) {
 	};
 }
 
-//#endregion
-//#region src/state/stack-registry.ts
+// src/state/stack-registry.ts
 function unwrapReadError(error) {
 	return error instanceof CrossPrefixReadError ? error.cause : error;
 }
@@ -3215,8 +3186,7 @@ var CrossPrefixGuard = class {
 	}
 };
 
-//#endregion
-//#region src/cli/commands/deploy.ts
+// src/cli/commands/deploy.ts
 async function deployCommand(stacks, options) {
 	const runClock = new PhaseClock("run", { fromProcessStart: true });
 	runClock.lap("node startup + module load");
@@ -3795,8 +3765,7 @@ function splitUpdatePartial(result) {
 	};
 }
 
-//#endregion
-//#region src/analyzer/outputs-diff.ts
+// src/analyzer/outputs-diff.ts
 function secretSpanInStoredKey(key, exportName) {
 	const tokens = dynamicReferenceTokens(exportName);
 	const first = tokens[0];
@@ -4201,8 +4170,7 @@ function computeOutputsDiff(current, desired, exportNames, secretSourceKeys = /*
 	return changes;
 }
 
-//#endregion
-//#region src/cli/cfn-stack-states.ts
+// src/cli/cfn-stack-states.ts
 const STABLE_TERMINAL_STATUSES = /* @__PURE__ */ new Set([
 	"CREATE_COMPLETE",
 	"UPDATE_COMPLETE",
@@ -4211,8 +4179,7 @@ const STABLE_TERMINAL_STATUSES = /* @__PURE__ */ new Set([
 	"IMPORT_ROLLBACK_COMPLETE"
 ]);
 
-//#endregion
-//#region src/cli/yaml-cfn.ts
+// src/cli/yaml-cfn.ts
 const FN_TAGS = [
 	"GetAtt",
 	"Sub",
@@ -4423,8 +4390,7 @@ function parseCfnTemplateWithFormat(text) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/retire-cfn-stack.ts
+// src/cli/commands/retire-cfn-stack.ts
 const NESTED_STACK_RESOURCE_TYPE = "AWS::CloudFormation::Stack";
 const TEMPLATE_BODY_LIMIT = CFN_TEMPLATE_BODY_LIMIT;
 const TEMPLATE_URL_LIMIT = CFN_TEMPLATE_URL_LIMIT;
@@ -4826,8 +4792,7 @@ function isStackNotFoundError(err) {
 	return name === "ValidationError" && /does not exist/i.test(message);
 }
 
-//#endregion
-//#region src/cli/commands/diff-recursive.ts
+// src/cli/commands/diff-recursive.ts
 const SDK_MIGRATION_TOKEN = "returning to SDK provider";
 const logger = getLogger().child("DiffRecursive");
 function collectRefTargets(value, refs) {
@@ -6278,8 +6243,7 @@ function renderDiffTree(node, isRoot, logFn) {
 	for (const child of node.children) renderDiffTree(child, false, logFn);
 }
 
-//#endregion
-//#region src/cli/commands/diff.ts
+// src/cli/commands/diff.ts
 function treeNodes(node) {
 	return [node, ...node.children.flatMap(treeNodes)];
 }
@@ -6592,8 +6556,7 @@ function createDiffCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/scrub.ts
+// src/cli/commands/scrub.ts
 var ScrubNeededError = class ScrubNeededError extends CdkdError {
 	silent = true;
 	constructor() {
@@ -9104,8 +9067,7 @@ function copiesOfParentRow(bag) {
 	return copies === void 0 || copies.size === 0 ? {} : { inheritedPhysicalNameCopies: copies };
 }
 
-//#endregion
-//#region src/analyzer/drift-principal-normalize.ts
+// src/analyzer/drift-principal-normalize.ts
 const PRINCIPAL_UNIQUE_ID_RE = /^A(?:ROA|IDA)[A-Z0-9]{6,}$/;
 const IAM_PRINCIPAL_ARN_RE = /^arn:[a-z0-9-]+:iam::\d{12}:(role|user)\/(.+)$/;
 function parseIamPrincipalArn(arn) {
@@ -9209,8 +9171,7 @@ async function canonicalizePrincipalUniqueIds(baseline, aws, resolve) {
 	};
 }
 
-//#endregion
-//#region src/utils/ip-protocol.ts
+// src/utils/ip-protocol.ts
 const PROTOCOL_NUMBER_TO_NAME = /* @__PURE__ */ new Map([
 	["1", "icmp"],
 	["6", "tcp"],
@@ -9230,8 +9191,7 @@ function canonicalizeIpProtocolValue(value) {
 	return text;
 }
 
-//#endregion
-//#region src/analyzer/drift-protocol-normalize.ts
+// src/analyzer/drift-protocol-normalize.ts
 const IP_PROTOCOL_PATHS = /* @__PURE__ */ new Map([
 	["AWS::EC2::SecurityGroupIngress", ["IpProtocol"]],
 	["AWS::EC2::SecurityGroupEgress", ["IpProtocol"]],
@@ -9291,8 +9251,7 @@ function canonicalizeIpProtocols(baseline, aws, resourceType) {
 	};
 }
 
-//#endregion
-//#region src/analyzer/drift-cc-api-deny-list.ts
+// src/analyzer/drift-cc-api-deny-list.ts
 const CC_API_FALLBACK_DENY_LIST = {
 	"AWS::ApiGateway::RestApi": "Body / BodyS3Location are write-only inputs not returned by CC API GetResource; cdkd state preserves them",
 	"AWS::CloudFormation::Stack": "cdkd deploys nested stacks itself: no CloudFormation stack exists, and the physicalId is a cdkd-local placeholder ARN",
@@ -9302,8 +9261,7 @@ const CC_API_FALLBACK_DENY_LIST = {
 	"AWS::EC2::LaunchTemplate": "CC API returns version-bumped LaunchTemplateData with synthetic LatestVersionNumber that diverges from the CFn input shape"
 };
 
-//#endregion
-//#region src/analyzer/cc-api-strip.ts
+// src/analyzer/cc-api-strip.ts
 const ALWAYS_STRIPPED_FIELDS = /* @__PURE__ */ new Set([
 	"CreationDate",
 	"CreationTime",
@@ -9346,16 +9304,14 @@ function stripWalk(value) {
 	return value;
 }
 
-//#endregion
-//#region src/cli/commands/refused-baseline-remedy.ts
+// src/cli/commands/refused-baseline-remedy.ts
 const ACCEPT_REFUSED_REMEDY = "Once the deployed template no longer reads a parameter at this resource, cdkd state refresh-observed '<stack>' --accept-refused '<logicalId>' --template '<file>' records a baseline on your assertion that AWS holds no secret the template does not spell as a dynamic reference.";
 function refusedBaselineRemedy(record) {
 	if (hasUnverifiableParameterRefusal(record)) return "Deploying a change does NOT clear this refusal: the resource reads a template parameter whose deployed value cdkd could not prove, so only a deploy that replaces the resource, or a re-import while a CloudFormation stack can prove that value, restores a baseline. " + ACCEPT_REFUSED_REMEDY;
 	if (hasReasonlessBaselineRefusal(record)) return "This refusal was recorded without a reason this cdkd recognizes: a deploy that actually CHANGES this resource restores a baseline unless the resource reads a template parameter, and then only a deploy that replaces the resource, or a re-import while a CloudFormation stack can prove the parameter's deployed value, does. " + ACCEPT_REFUSED_REMEDY;
 }
 
-//#endregion
-//#region src/cli/commands/drift.ts
+// src/cli/commands/drift.ts
 const PRE_V10_BASELINE_WARNING_FLOOR = 10;
 function matchOutcome(outcome, handlers) {
 	return handlers[outcome.kind](outcome);
@@ -11781,8 +11737,7 @@ function declaredEmptyProperties(properties) {
 	return out;
 }
 
-//#endregion
-//#region src/cli/commands/stack-lock-guard.ts
+// src/cli/commands/stack-lock-guard.ts
 async function acquireStackLock(opts) {
 	const { lockManager, stackName, region, recovery } = opts;
 	let interrupted = false;
@@ -11863,8 +11818,7 @@ async function acquireStackLock(opts) {
 	};
 }
 
-//#endregion
-//#region src/provisioning/secret-principal-resolution.ts
+// src/provisioning/secret-principal-resolution.ts
 const TRANSIENT_RESOLUTION_MESSAGE = "Resolving a secret-derived IAM principal list was throttled or hit a server error";
 function resolvableVerdict(verdict) {
 	return verdict.kind === "local" || verdict.kind === "recorded-region";
@@ -11976,8 +11930,7 @@ function resolvablePrincipalLists(resource) {
 	return keys.map((key) => props[key]).filter((value) => isResolvableSecretPrincipalList(value));
 }
 
-//#endregion
-//#region src/cli/commands/destroy-runner.ts
+// src/cli/commands/destroy-runner.ts
 const NOECHO_PRINTING_BIND_CAP_MS = 1e4;
 async function purgeStateHistoryIfOptedIn(ctx, stackName, region) {
 	if (ctx.purgeStateHistory === true) await ctx.stateBackend.purgeDeletedStateHistory(stackName, region);
@@ -12917,8 +12870,7 @@ function refuseNewPendingRequests(read, stackName, region) {
 	throw new Error(`The rollback journal of stack ${displayStackName(stackName)} (${displaySafe(region, { asciiOnly: true })}) now records a Cloud Control CREATE a failed deploy stopped waiting for — another cdkd process wrote to it. Nothing was deleted; re-run the destroy, which checks how that CREATE ended first.`);
 }
 
-//#endregion
-//#region src/cli/commands/destroy-skip-message.ts
+// src/cli/commands/destroy-skip-message.ts
 function skippedDestroyMessage(totalSkipped, totalOrphanSkips, rerunCommand) {
 	const recordSkips = totalSkipped - totalOrphanSkips;
 	const orphanSentence = `${totalOrphanSkips} resource(s) a failed deploy created were left in AWS, and no state records them any more. The warning naming each says what to do with it.`;
@@ -12926,8 +12878,7 @@ function skippedDestroyMessage(totalSkipped, totalOrphanSkips, rerunCommand) {
 	return `Destroy skipped ${recordSkips} entr${recordSkips === 1 ? "y" : "ies"} whose delete cdkd did not confirm, so the underlying resources may still exist in AWS. A skipped nested stack counts as ONE entry and may cover several of its own resources — the per-stack summaries above give the exact breakdown. State preserved (the records are kept). The per-resource 'skipped (...)' lines and their warnings name each cause and whether repairing the record in state.json helps: where it does, repair it and re-run '${rerunCommand}'; otherwise (for example a custom-resource Delete handler that reported FAILED), delete the resources by hand and drop the records with 'cdkd state orphan <stack> --stack-region <region>'.` + (totalOrphanSkips > 0 ? ` Separately, ${orphanSentence}` : "");
 }
 
-//#endregion
-//#region src/cli/commands/destroy.ts
+// src/cli/commands/destroy.ts
 function orderConsumersBeforeProducers(stackNames, consumerToProducers) {
 	const pendingConsumers = /* @__PURE__ */ new Map();
 	for (const name of stackNames) pendingConsumers.set(name, /* @__PURE__ */ new Set());
@@ -13433,8 +13384,7 @@ function createDestroyCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/rollback-drop-failed.ts
+// src/cli/commands/rollback-drop-failed.ts
 function refuseDropFailedConflicts(options) {
 	const conflicting = [
 		...(options.orphan ?? []).length > 0 ? ["--orphan"] : [],
@@ -13568,8 +13518,7 @@ async function dropFailedJournalEntry(args) {
 	}
 }
 
-//#endregion
-//#region src/cli/interactive-select.ts
+// src/cli/interactive-select.ts
 const ARM_DELAY_MS = 50;
 const FILTER_CHAR = /^[\p{L}\p{N}\p{P}\p{S} ]$/u;
 function isInteractiveTerminal(streams) {
@@ -13669,8 +13618,7 @@ function selectFromList(title, items, streams) {
 	});
 }
 
-//#endregion
-//#region src/cli/commands/state-browse.ts
+// src/cli/commands/state-browse.ts
 const VIEW_ITEMS = [
 	{
 		label: "Resources (logical id, type, physical id)",
@@ -13722,8 +13670,7 @@ async function runStateBrowse(deps) {
 	}
 }
 
-//#endregion
-//#region src/deployment/public-ssm-proof.ts
+// src/deployment/public-ssm-proof.ts
 var PublicSsmProver = class {
 	resolver;
 	verdicts = /* @__PURE__ */ new Map();
@@ -13791,8 +13738,7 @@ function mixedLeafSsmTokens(source) {
 	return tokens;
 }
 
-//#endregion
-//#region src/analyzer/orphan-rewriter.ts
+// src/analyzer/orphan-rewriter.ts
 const UNREADABLE_ORPHAN_RECORD_REASON = "the orphaned resource's state record is not a readable resource record (not an object, no resource type, or no physical id), so nothing in it can be substituted";
 function isResolvableOrphanRecord(entry) {
 	if (!isReadableResourceEntry(entry)) return false;
@@ -14198,8 +14144,7 @@ async function rewriteSubTemplate(template, ownerLogicalId, pathPrefix, orphanSe
 	};
 }
 
-//#endregion
-//#region src/cli/commands/orphan.ts
+// src/cli/commands/orphan.ts
 function displaySafeList(values) {
 	return values.map((value) => displaySafe(value)).join(", ");
 }
@@ -14447,8 +14392,7 @@ function createOrphanCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/state-migrate.ts
+// src/cli/commands/state-migrate.ts
 async function stateMigrateCommand(options) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -14721,8 +14665,7 @@ function createStateMigrateCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/state-list-tree.ts
+// src/cli/commands/state-list-tree.ts
 const MAX_STACK_TREE_DEPTH = 100;
 function buildStackTree(entries) {
 	const refKey = (stackName, region) => producerRecordKey(stackName, region ?? "");
@@ -14817,8 +14760,7 @@ function stackTreeToJson(roots) {
 	}));
 }
 
-//#endregion
-//#region src/utils/ipv4-cidr.ts
+// src/utils/ipv4-cidr.ts
 function canonicalizeIpv4Cidr(value) {
 	const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})\/(\d{1,2})$/.exec(value);
 	if (!match) return void 0;
@@ -14839,8 +14781,7 @@ function canonicalizeIpv4Cidr(value) {
 	].join(".")}/${prefixLength}`;
 }
 
-//#endregion
-//#region src/cli/commands/export.ts
+// src/cli/commands/export.ts
 const NEVER_IMPORTABLE_TYPES = /* @__PURE__ */ new Set(["AWS::CDK::Metadata"]);
 const CHILD_LOCK_RETRY_MAX_ATTEMPTS = 6;
 const CHILD_LOCK_RETRY_DELAY_MS = 5e3;
@@ -17825,8 +17766,7 @@ function spacedAccountClause(recovery, where) {
 	return clause === "" ? "" : ` ${clause}`;
 }
 
-//#endregion
-//#region src/cli/commands/state-refresh-observed.ts
+// src/cli/commands/state-refresh-observed.ts
 function collectAcceptRefused(value, previous) {
 	if (value === "") throw new InvalidArgumentError("--accept-refused takes one logical id.");
 	return [...previous ?? [], value];
@@ -18069,8 +18009,7 @@ async function confirmAcceptRefused(assertion) {
 	return confirmOrRefuse(`${assertion}\nAccept it?`, { refusal: "The cdkd state refresh-observed --accept-refused confirmation prompt cannot run in a non-interactive environment. Pass -y / --yes to make the assertion, or run the command from a real terminal." });
 }
 
-//#endregion
-//#region src/cli/commands/state.ts
+// src/cli/commands/state.ts
 const STATE_READ_FAILED_REASON = "state record could not be read; run `cdkd state show` for the error";
 const LOCK_READ_FAILED_REASON = "lock could not be read; run `cdkd state show` for the error";
 const LEGACY_LOCK_READ_FAILED_REASON = "lock could not be read";
@@ -19707,8 +19646,7 @@ function createStateCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/rollback.ts
+// src/cli/commands/rollback.ts
 function rerunRollback(stackName) {
 	const rerun = pasteableCommand("cdkd rollback", [{
 		value: stackName,
@@ -20335,8 +20273,7 @@ function createRollbackCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/events.ts
+// src/cli/commands/events.ts
 const safeId = (value) => displaySafe(value, { asciiOnly: true });
 const RUN_LIST_TOKEN = /^[!-~]{1,64}$/;
 const runListToken = (value, fallback) => {
@@ -20579,8 +20516,7 @@ function createEventsPruneCommand() {
 	})).option("--older-than <duration>", "Delete runs older than this duration (e.g. 24h, 90m)").option("--all", "Delete every recorded run and the index, and purge every earlier version under the stack's deployments/ prefix on a versioned state bucket", false).action(withErrorHandling((stack, _options, command) => eventsPruneCommand(stack, command.optsWithGlobals())));
 }
 
-//#endregion
-//#region src/utils/ecr-uri.ts
+// src/utils/ecr-uri.ts
 const COMMERCIAL_AND_GOVCLOUD = ["aws", "aws-us-gov"];
 const ECR_REGISTRY_HOST_FORMS = [
 	{ labels: "dkr.ecr" },
@@ -20665,8 +20601,7 @@ function looksLikeEcrHostWithForeignSuffix(imageUri) {
 	return m !== void 0 && m.suffix !== m.expectedSuffix;
 }
 
-//#endregion
-//#region src/cli/commands/gc.ts
+// src/cli/commands/gc.ts
 const DEFAULT_OLDER_THAN_MS = 2592e6;
 const S3_DELETE_BATCH_SIZE = 1e3;
 const ECR_DELETE_BATCH_SIZE = 100;
@@ -21124,8 +21059,7 @@ function keyPrefixHoleSentence(prefix) {
 	return `The state prefix of the key above ${reason === "option-shaped" ? `begins with a '-'` : reason === "altered" ? "does not render exactly" : reason === "too-long" ? "is too long to print" : prefix !== void 0 && prefix.includes("/") ? `has a '/'-separated part that is not a plain identifier` : "is not a plain identifier"}, so the command below prints '<prefix>' in its place: replace it whole, quotes included, with that prefix shell-quoted -- the part of the key before '/<stack>/<region>/state.json' ('/<stack>/state.json' for a legacy key), since 'cdkd gc' takes no --state-prefix.`;
 }
 
-//#endregion
-//#region src/state/logical-id-rename.ts
+// src/state/logical-id-rename.ts
 function applyLogicalIdRenames(state, renames, template) {
 	const byFrom = /* @__PURE__ */ new Map();
 	const targets = /* @__PURE__ */ new Set();
@@ -21329,8 +21263,7 @@ function withoutDependencies(record, drop) {
 	};
 }
 
-//#endregion
-//#region src/utils/deferred-interrupts.ts
+// src/utils/deferred-interrupts.ts
 async function withDeferredInterrupts(fn, onDeferred) {
 	let held;
 	const hold = (signal) => {
@@ -21352,8 +21285,7 @@ async function withDeferredInterrupts(fn, onDeferred) {
 	return result;
 }
 
-//#endregion
-//#region src/cli/commands/refactor-move.ts
+// src/cli/commands/refactor-move.ts
 const rowKey = (stack, region, logicalId) => JSON.stringify([
 	stack,
 	region,
@@ -21864,8 +21796,7 @@ async function finishInterruptedMoves(input) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/refactor.ts
+// src/cli/commands/refactor.ts
 function changedPaths(change) {
 	if (change === void 0) return ["(not in the diff)"];
 	const paths = (change.propertyChanges ?? []).map((p) => p.path);
@@ -22472,8 +22403,7 @@ function createRefactorCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/publish-assets.ts
+// src/cli/commands/publish-assets.ts
 async function publishAssetsCommand(stacks, options) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -22673,8 +22603,7 @@ function createPublishAssetsCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/force-unlock.ts
+// src/cli/commands/force-unlock.ts
 async function forceUnlockCommand(stackArgs, options) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -22761,8 +22690,7 @@ function createForceUnlockCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/import-deployed-parameters.ts
+// src/cli/commands/import-deployed-parameters.ts
 var DeployedParameters = class DeployedParameters {
 	#entries;
 	constructor(entries) {
@@ -22837,8 +22765,7 @@ function divergentParameterNames(template, bound, deployed) {
 	return divergent;
 }
 
-//#endregion
-//#region src/cli/commands/import.ts
+// src/cli/commands/import.ts
 var ObservedBaselineRefusals = class extends Set {
 	unverifiableParameter = /* @__PURE__ */ new Set();
 	hadDeployedParameterSource = false;
@@ -24169,8 +24096,7 @@ function importedNameGenerationFields(prior, row, retired) {
 	}
 }
 
-//#endregion
-//#region src/utils/local-aws-failure.ts
+// src/utils/local-aws-failure.ts
 function describeLocalAwsFailureForWarn(err, operation) {
 	if (err instanceof CdkdError) return withoutTrailingPeriod(displaySafe(err.message));
 	const rendered = describeAwsFailureForWarn(err, operation);
@@ -24189,8 +24115,7 @@ function hasSdkMetadata(error) {
 	return error.$metadata !== void 0;
 }
 
-//#endregion
-//#region src/local/local-role-arn.ts
+// src/local/local-role-arn.ts
 async function applyRoleArnForLocal(opts) {
 	await applyRoleArnIfSet(opts);
 	const role = getAssumedRoleCredentials();
@@ -24202,8 +24127,7 @@ async function applyRoleArnForLocal(opts) {
 	});
 }
 
-//#endregion
-//#region src/cli/commands/local-state-loader.ts
+// src/cli/commands/local-state-loader.ts
 async function loadStateForStack(stackName, synthRegion, opts) {
 	const logger = getLogger();
 	const prefix = opts.logPrefix ?? "--from-state";
@@ -24463,8 +24387,7 @@ function describeStateBucketAccessFailure(err) {
 	return describeLocalAwsFailureForWarn(cause, operation);
 }
 
-//#endregion
-//#region src/local/s3-local-state-provider.ts
+// src/local/s3-local-state-provider.ts
 var S3LocalStateProvider = class {
 	label = "--from-state";
 	opts;
@@ -24526,8 +24449,7 @@ var S3LocalStateProvider = class {
 	}
 };
 
-//#endregion
-//#region src/cli/commands/local-state-source.ts
+// src/cli/commands/local-state-source.ts
 const fromStateFactory = (options) => {
 	const opts = options;
 	const clientRegion = canonicalizeRegion(opts.region) || void 0;
@@ -24547,14 +24469,12 @@ function createLocalStateProvider$1(options, cdkdStackName, synthRegion) {
 	return createLocalStateProvider(options, cdkdStackName, synthRegion, cdkdExtraStateProviders);
 }
 
-//#endregion
-//#region src/local/intrinsic-image.ts
+// src/local/intrinsic-image.ts
 function derivePseudoParametersFromRegion$1(region, accountId) {
 	return derivePseudoParametersFromRegion(canonicalizeRegion(region), accountId);
 }
 
-//#endregion
-//#region src/local/lambda-resolver.ts
+// src/local/lambda-resolver.ts
 var LocalInvokeResolutionError = class LocalInvokeResolutionError extends Error {
 	constructor(message) {
 		super(message);
@@ -24872,8 +24792,7 @@ function notFoundError$1(target, stack, resources) {
 	return new LocalInvokeResolutionError(msg.trimEnd());
 }
 
-//#endregion
-//#region src/local/layer-tree-copy.ts
+// src/local/layer-tree-copy.ts
 function copyLayerTreeLastWins(src, dest) {
 	mkdirSync(dest, { recursive: true });
 	copyDirLastWins(realpathSync.native(src), dest);
@@ -24910,8 +24829,7 @@ function removeUnless(to, kind) {
 	});
 }
 
-//#endregion
-//#region src/local/ecs-task-resolver.ts
+// src/local/ecs-task-resolver.ts
 function detectEcsImageResolutionNeeds(stack) {
 	const resources = stack.template.Resources ?? {};
 	let needsPseudoParameters = false;
@@ -25671,8 +25589,7 @@ async function applyCrossStackResolverToTask(task, context) {
 	}
 }
 
-//#endregion
-//#region src/local/docker-runner.ts
+// src/local/docker-runner.ts
 const execFileAsync$3 = promisify(execFile);
 var DockerRunnerError = class DockerRunnerError extends Error {
 	constructor(message) {
@@ -25892,8 +25809,7 @@ const SENSITIVE_ENV_KEYS = /* @__PURE__ */ new Set([
 	"AWS_SESSION_TOKEN"
 ]);
 
-//#endregion
-//#region src/local/docker-image-builder.ts
+// src/local/docker-image-builder.ts
 async function buildContainerImage$1(asset, cdkOutDir, options) {
 	try {
 		return await buildContainerImage(asset, cdkOutDir, options);
@@ -25903,8 +25819,7 @@ async function buildContainerImage$1(asset, cdkOutDir, options) {
 	}
 }
 
-//#endregion
-//#region src/local/ecr-puller.ts
+// src/local/ecr-puller.ts
 function canonicalizeImageUriHost(imageUri) {
 	const slash = imageUri.indexOf("/");
 	if (slash < 0) return imageUri;
@@ -26084,8 +25999,7 @@ async function verifyImageInLocalCache(imageUri) {
 	}
 }
 
-//#endregion
-//#region src/local/rie-client.ts
+// src/local/rie-client.ts
 const INVOKE_PATH = "/2015-03-31/functions/function/invocations";
 async function waitForRieReady(host, port, timeoutMs = 5e3) {
 	const deadline = Date.now() + timeoutMs;
@@ -26175,8 +26089,7 @@ async function fetchWithStartupRetry(url, body, signal) {
 	throw lastError;
 }
 
-//#endregion
-//#region src/utils/single-flight.ts
+// src/utils/single-flight.ts
 function singleFlight(fn, onError) {
 	let promise;
 	return async () => {
@@ -26191,8 +26104,7 @@ function singleFlight(fn, onError) {
 	};
 }
 
-//#endregion
-//#region src/cli/commands/local-profile-credentials-file.ts
+// src/cli/commands/local-profile-credentials-file.ts
 const CONTAINER_AWS_CREDENTIALS_PATH = "/cdkd-aws/credentials";
 async function writeProfileCredentialsFile(profileName, creds, opts) {
 	if (profileName === "") throw new Error("writeProfileCredentialsFile: profile name must not be empty.");
@@ -26238,8 +26150,7 @@ function strandedProfileCredentialsNotice(hostPath) {
 	return `The AWS credentials file mounted into the containers is NOT removed: delete ${displayIdent(hostPath)} once you tear them down.`;
 }
 
-//#endregion
-//#region src/local/dynamic-reference.ts
+// src/local/dynamic-reference.ts
 function createCallerDynamicReferenceResolver(profile) {
 	return new DynamicReferenceResolver({
 		secretsManagerClientFactory: (region) => new SecretsManagerClient({
@@ -26261,14 +26172,12 @@ function createCallerDynamicReferenceResolver(profile) {
 	});
 }
 
-//#endregion
-//#region src/local/websocket-body.ts
+// src/local/websocket-body.ts
 function bufferToBody$1(raw, isBinary) {
 	return bufferToBody(raw, isBinary);
 }
 
-//#endregion
-//#region src/local/websocket-server.ts
+// src/local/websocket-server.ts
 const DEFAULT_INVOKE_TIMEOUT_MS = 6e4;
 function attachWebSocketServer(opts) {
 	const logger = getLogger().child("start-api/ws");
@@ -26586,8 +26495,7 @@ function safeDecode(s) {
 	}
 }
 
-//#endregion
-//#region src/local/rest-v1-integrations.ts
+// src/local/rest-v1-integrations.ts
 function classifyInternalHost(host) {
 	const h = host.replace(/^\[|\]$/g, "");
 	if (h === "169.254.169.254" || h === "[fd00:ec2::254]" || h === "fd00:ec2::254") return "AWS IMDS (169.254.169.254) — credentials exfiltration risk";
@@ -26612,8 +26520,7 @@ function warnSsrfRiskyUri(uri, routeLabel, warn) {
 	if (classification !== void 0) warn(`Integration URI for ${routeLabel} points at ${host} — ${classification}. cdkd does NOT block this; ensure the upstream is intentional.`);
 }
 
-//#endregion
-//#region src/local/container-pool.ts
+// src/local/container-pool.ts
 const DEFAULT_IDLE_MS = 6e4;
 const IN_FLIGHT_START_TIMEOUT_MS = 2e4;
 const MAX_PER_LAMBDA_CONCURRENCY = 4;
@@ -26949,8 +26856,7 @@ function clampConcurrency(input) {
 	return Math.min(MAX_PER_LAMBDA_CONCURRENCY, Math.max(MIN_PER_LAMBDA_CONCURRENCY, Math.trunc(input)));
 }
 
-//#endregion
-//#region src/cli/commands/local-start-api.ts
+// src/cli/commands/local-start-api.ts
 function formatServerListeningBanner(scheme, host, port, pathSuffix, label) {
 	return `Server listening on ${scheme}://${formatAuthority(host, port)}${pathSuffix}  (${label})\n`;
 }
@@ -28266,8 +28172,7 @@ function createLocalStartApiCommand() {
 	return startApi;
 }
 
-//#endregion
-//#region src/local/ecs-network.ts
+// src/local/ecs-network.ts
 const execFileAsync$2 = promisify(execFile);
 const METADATA_ENDPOINT_IMAGE = "amazon/amazon-ecs-local-container-endpoints:latest-amd64";
 const METADATA_ENDPOINT_IP = "169.254.170.2";
@@ -28389,8 +28294,7 @@ async function destroyNetworkOnly(networkName) {
 	}
 }
 
-//#endregion
-//#region src/local/ecs-secrets-resolver.ts
+// src/local/ecs-secrets-resolver.ts
 var EcsSecretsResolutionError = class EcsSecretsResolutionError extends Error {
 	constructor(message) {
 		super(message);
@@ -28487,8 +28391,7 @@ async function resolveSsm(entry, shape, client) {
 	}
 }
 
-//#endregion
-//#region src/local/ecs-task-runner.ts
+// src/local/ecs-task-runner.ts
 const execFileAsync$1 = promisify(execFile);
 var EcsTaskRunnerError = class EcsTaskRunnerError extends Error {
 	constructor(message) {
@@ -29180,8 +29083,7 @@ function shellJoin(parts) {
 	}).join(" ");
 }
 
-//#endregion
-//#region src/cli/commands/local-run-task.ts
+// src/cli/commands/local-run-task.ts
 async function localRunTaskCommand(target, options) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -29565,8 +29467,7 @@ function createLocalRunTaskCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/local-host-synthesizer.ts
+// src/cli/commands/local-host-synthesizer.ts
 function cdkdHostSynthesizer(readOptions) {
 	return { synthesize: async (opts) => {
 		const { stateBucket, verbose, roleArn } = readOptions();
@@ -29591,8 +29492,7 @@ function publishAssumedRoleFromEnv() {
 	});
 }
 
-//#endregion
-//#region src/cli/commands/local-start-service.ts
+// src/cli/commands/local-start-service.ts
 function serviceStrategy() {
 	return {
 		pickEntries: (stacks) => listTargets(stacks).ecsServices,
@@ -29615,8 +29515,7 @@ function createLocalStartServiceCommand() {
 	return adoptDeprecatedRegionFlag(addCommonEcsServiceOptions(cmd));
 }
 
-//#endregion
-//#region src/local/invoke-agentcore-watch-loop.ts
+// src/local/invoke-agentcore-watch-loop.ts
 const WATCH_INTERRUPTED_CODE = "LOCAL_INVOKE_AGENTCORE_WATCH_INTERRUPTED";
 const execFileAsync = promisify(execFile);
 async function runAgentCoreWatchLoop(args) {
@@ -29836,8 +29735,7 @@ async function deriveOldAssetHash(args) {
 	return getDockerImageBySourceHash(manifest, resolved.containerUri)?.hash;
 }
 
-//#endregion
-//#region src/cli/commands/local-invoke-agentcore.ts
+// src/cli/commands/local-invoke-agentcore.ts
 function parseTimeoutMs(raw) {
 	const parsed = Number(raw);
 	if (!Number.isInteger(parsed) || parsed <= 0) throw new CdkdError(`--timeout must be a positive integer number of milliseconds (got '${raw}').`, "LOCAL_INVOKE_AGENTCORE_TIMEOUT_INVALID");
@@ -30806,8 +30704,7 @@ function createLocalInvokeAgentCoreCommand() {
 	return cmd;
 }
 
-//#endregion
-//#region src/cli/commands/local-start-agentcore.ts
+// src/cli/commands/local-start-agentcore.ts
 function createLocalStartAgentCoreCommand$1() {
 	const cmd = createLocalStartAgentCoreCommand({
 		embedConfig: getEmbedConfig(),
@@ -30821,8 +30718,7 @@ function createLocalStartAgentCoreCommand$1() {
 	return adoptDeprecatedRegionFlag(cmd);
 }
 
-//#endregion
-//#region src/cli/commands/local-start-alb.ts
+// src/cli/commands/local-start-alb.ts
 function createLocalStartAlbCommand() {
 	const cmd = new Command("start-alb").description("Run an Application Load Balancer locally: name the ALB, and cdk-local boots the ECS service(s) behind its listeners and stands up a local front-door on each listener port that round-robins across the running replicas and routes its listener rules across the backing services — a stable host endpoint, like behind a real load balancer. The symmetric ALB counterpart of `start-api`. Each <target> accepts a CDK display path (MyStack/MyAlb) or stack-qualified logical ID; single-stack apps may omit the stack prefix. Supports HTTP and HTTPS listeners — by default a cloud-HTTPS listener is served over plain HTTP locally (with X-Forwarded-Proto: https preserved). Pass --tls (or --tls-cert / --tls-key) to terminate TLS locally with a self-signed or user-supplied cert. All six ALB rule-condition fields are honored (path-pattern / host-header / http-header / http-request-method / query-string / source-ip); forward (single and weighted), redirect, and fixed-response actions; and ECS or Lambda targets (a Lambda target group is invoked locally via the Lambda RIE). authenticate-cognito / authenticate-oidc actions enforce a local Bearer-JWT check (or AWSELBAuthSessionCookie pass-through) against the same JWKS / OIDC discovery URL the deployed ALB would; use --bearer-token '<jwt>' to inject a default token or --no-verify-auth to disable the guard. Omit <targets> in an interactive terminal to multi-select the load balancers from a list.").argument("[targets...]", "One or more CDK display paths or stack-qualified logical IDs of the AWS::ElasticLoadBalancingV2::LoadBalancer resources to run (omit to multi-select interactively in a TTY)").addOption(new Option("--from-state", "Read cdkd's S3 state for the target stack and substitute Ref / Fn::GetAtt / Fn::Sub / Fn::ImportValue / Fn::GetStackOutput intrinsics in container images, environment variables, secrets, role ARNs, and volumes of the ECS services behind the ALB, and in the environment variables of its Lambda target groups' functions. Mutually exclusive with --from-cfn-stack.").default(false)).addOption(new Option("--state-bucket <bucket>", "S3 bucket for --from-state. Falls back to CDKD_STATE_BUCKET env or cdk.json context.cdkd.stateBucket. Also receives the transient upload of a CloudFormation-macro template too large to expand inline.")).addOption(new Option("--state-prefix <prefix>", "S3 key prefix for --from-state state files.").default("cdkd")).action(withErrorHandling(async (targets, options) => {
 		await runEcsServiceEmulator(targets, options, albStrategy(options), cdkdExtraStateProviders, cdkdHostSynthesizer(() => options));
@@ -30831,8 +30727,7 @@ function createLocalStartAlbCommand() {
 	return adoptDeprecatedRegionFlag(addCommonEcsServiceOptions(cmd));
 }
 
-//#endregion
-//#region src/cli/commands/local-start-cloudfront.ts
+// src/cli/commands/local-start-cloudfront.ts
 function createLocalStartCloudFrontCommand$1() {
 	const cmd = createLocalStartCloudFrontCommand({
 		embedConfig: getEmbedConfig(),
@@ -30846,8 +30741,7 @@ function createLocalStartCloudFrontCommand$1() {
 	return adoptDeprecatedRegionFlag(cmd);
 }
 
-//#endregion
-//#region src/cli/commands/local-start-web-function.ts
+// src/cli/commands/local-start-web-function.ts
 function createLocalStartWebFunctionCommand$1() {
 	const cmd = createLocalStartWebFunctionCommand({
 		embedConfig: getEmbedConfig(),
@@ -30861,8 +30755,7 @@ function createLocalStartWebFunctionCommand$1() {
 	return adoptDeprecatedRegionFlag(cmd);
 }
 
-//#endregion
-//#region src/cli/commands/local-start-microvm.ts
+// src/cli/commands/local-start-microvm.ts
 function createLocalStartMicrovmCommand$1() {
 	const cmd = createLocalStartMicrovmCommand({
 		embedConfig: getEmbedConfig(),
@@ -30875,8 +30768,7 @@ function createLocalStartMicrovmCommand$1() {
 	return adoptDeprecatedRegionFlag(cmd);
 }
 
-//#endregion
-//#region src/cli/commands/local-invoke.ts
+// src/cli/commands/local-invoke.ts
 let hostLoggerForwarding = false;
 function forwardToCdkdLogger(level, message, args) {
 	if (!hostLoggerForwarding) {
@@ -31570,8 +31462,7 @@ function createLocalCommand() {
 	return local;
 }
 
-//#endregion
-//#region src/cli/program.ts
+// src/cli/program.ts
 function buildProgram() {
 	const program = new Command();
 	program.name("cdkd").description("Drop-in CDK CLI for existing CDK apps - up to 15x faster deploys via direct AWS SDK calls instead of CloudFormation").version(getCdkdVersion());
@@ -31624,6 +31515,5 @@ function collectVerbFlags(program) {
 	return map;
 }
 
-//#endregion
 export { resolveSecretDerivedPrincipals as a, buildProgram, isResolvableSecretPrincipalList as i, runDestroyForStack as n, canonicalizeIpProtocolValue as o, holdsUnprovenSecretPrincipalToken as r, resolvedResourceTimeoutMs as s, canonicalizeIpv4Cidr as t };
-//# sourceMappingURL=program-CMtAmRyw.js.map
+//# sourceMappingURL=program-BZ-VVfXu.js.map