@go-to-k/cdkd 0.321.0 → 0.322.1

package/dist/{deploy-engine-pGWgnV-6.js → deploy-engine-q2VQt7uX.js}

@@ -2,7 +2,7 @@ import { c as __exportAll, r as getAwsClients } from "./aws-clients-DWpHZk2l.js"
 import { $ as safeMsg, B as SAFE_MSG_ALTERED_CHAR, C as fallbackNamePropertyFor, D as getCurrentSkipPrefix, E as generatedNameFor, F as withNameGeneration, H as STACK_REF_MAX_CODE_POINTS, I as withSkipPrefix, J as displaySafe, K as displayAwsMessage, L as withStackScope, M as looksLikeCdkdGeneratedName, O as getCurrentStackInstanceId, P as stackInstanceNameSuffix, Q as plainIdentOr, R as withStackScopeBeforeStateRead, S as explicitNamePropertyFor, T as generateResourceNameWithFallback, U as UNRENDERABLE, V as SECRET_REF_MAX_CODE_POINTS, W as asIsMessage, X as isPasteableIdent, Y as displayStackName, a as safeStringify$1, b as currentNameGeneration, c as isStdoutReservedForPayload, f as currentLogLineMasker, j as isNameGeneration, k as getCurrentStackName, m as getLiveRenderer, n as describeAwsFailure, nt as truncateCodePoints, p as installLogLineMaskerSource, q as displayIdent, s as getLogger, t as VERBOSE_POINTER, tt as terminalSafe, v as alternateNamePropertiesFor, y as applyDefaultNameForFallback, z as withoutGeneratedFallbackName } from "./aws-failure-text-DiHodi76.js";
 import { $ as isTerminalDeleteFailure, $n as physicalIdShownBesideCommand, $t as formatLockExpiry, An as MalformedProducerRecordRefusalError, Ar as isThrottlingError, At as stateOrphanRecordRemedy, B as normalizeAwsTagsToCfn, Bt as createdBeforeFailure, Cn as DeploymentNotApprovedError, Dr as retryClassificationText, Er as isTransientServerError, Et as logicalIdShown, F as assertRegionMatch, Fn as ResourceUpdateNotSupportedError, Ft as maskerOrIdentity, Gt as markAuxiliaryFailure, H as refusalTypeShown, Hn as isSoftAbort, Ht as hasCreatedBeforeFailure, It as withDerivedNameMasks, Jn as UNSHOWABLE_VALUE, Jt as replayMadeAnotherResource, K as ProtectionFlipRegistry, Kn as SHELL_ACTIVE, Kt as markCreatedBeforeFailure, Lt as RETRY_AUXILIARY_OWNER, M as RESOURCE_NOT_FOUND, Mr as markRedactedCause, Mt as createMaskedRetryLogger, N as isMarkedNotGone, Nn as ProvisioningError, Nr as wrapMaskedAwsError, Nt as isSecretDerivedValue, On as LockError, Ot as resourceTypeShown, P as markNotGone, Pn as ResourceTimeoutError, Pt as maskDeep, Qn as pasteableCommand, Rn as StateError, Rt as carryCreatedBeforeFailure, Sr as isAmbiguousOutcomeError, St as canonicalizeRoute53QueryName, Tn as IntrinsicResolutionRefusalError, Tr as isRetryableTransientError, Un as normalizeAwsError, Ut as isAuxiliaryFailure, V as quotedRemedyLogicalId, Vt as createdResourceIdentityBeforeFailure, W as resolveExplicitPhysicalId, Wt as isAuxiliaryMarkOf, Xt as buildForceUnlockCommand, Y as deleteWithProtectionCompensation, Yn as commandHole, Yt as UNREPRODUCIBLE_LOCK_CLAUSE, Zn as isInertUnquoted, _ as prepareRemovalForUpdate, _n as AssetError, _r as stripControlChars, an as DEFAULT_STATE_PREFIX, bn as CrossAccountSecretRefusalError, br as formatRetryClassificationSignals, bt as isInterruptedWaitError, cr as hasReplayMayCollide, dn as withPasteableAwsProfile, dr as isRecreateRetryableError, dt as pasteableAwsCommand, en as formatLockOperation, er as plainOrDescribed, fn as ambientClientDefaults, fr as isReplayedNameCollisionFrom, ft as protectedReplacementAdvice, gn as AccountIdUnavailableError, gr as escapeRegExp$3, gt as monotonicNowMs, h as withUnchangedSecretPrincipalLists, hn as credentialFingerprint, hr as relayedNameCollision, ht as ElapsedBudgetRegistry, i as reportCreatedResource, in as CUSTOM_RESOURCE_RESPONSE_PREFIX, ir as withheldTargetClause, it as runDeleteAttempt, j as withoutServerErrorRetries, jr as markNonRetryable, jt as createMaskedLogSinks, kn as MacroExpansionError, kr as isMarkedNonRetryable, kt as segmentAfterAnchor, ln as producerRecordKey, lr as isNameCollisionErrorFrom, mn as clientDefaultsFor, mr as markReplayMayCollide, mt as ElapsedBudget, n as clearCreatedReport, nn as recoveryCommandFlags, nr as shellBoundedDisplay, nt as protectionFlipKey, o as retractCreatedResource, on as injectiveKey, pn as ambientCredentialConfig, q as compensateProtectionFlip, qn as SHELL_ACTIVE_WHY, r as collectCreatedResources, rn as sanitizeRecoveryValue, rr as shellQuote, sr as isUpdateUnsupportedError, st as DELETION_PROTECTION_DOC_POINTER, t as CreatedResourceSink, tn as formatLockOwner, tr as quotedOrDescribed, tt as observeThenDisableProtection, u as holdsSecretDerivedEntry, ur as isNameCooldownError, v as removalWarning, vn as CdkdError, wn as DynamicReferenceRegionAmbiguousError, wr as isIamPropagationError, wt as compositeIdSeparatorRefusal, x as withoutInjectedRemovals, xn as DependencyError, xr as isAmbiguousCcHandlerErrorCode, xt as startInterruptWatch, z as isQuotableImportValue, zn as SynthesisError } from "./created-resource-sink-CmrPwGge.js";
 import { a as setAssumedRoleCredentials, c as ambientRegion, i as getPreAssumeEnvCredentials, n as awsClientDefaults, o as setPreAssumeEnvCredentials, r as getAssumedRoleCredentials, s as quietS3Logger, t as SECOND_ROLE_PUBLISH_REFUSAL } from "./aws-client-defaults-BLXFsfMa.js";
-import { t as getCdkdVersion } from "./version-DWSVZXE5.js";
+import { a as red, c as getCdkdVersion, i as green, n as cyan, o as yellow, r as gray, t as bold } from "./colors-DCpTnlsT.js";
 import { createHash, randomUUID } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketReplicationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketLifecycleConfigurationCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -15811,7 +15811,7 @@ function withRecreatedAttachmentsDropped(input) {
 const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	["AWS::ApiGateway::Account", {
 		handled: /* @__PURE__ */ new Set(["CloudWatchRoleArn"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -15829,14 +15829,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RestApiId",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AuthorizerId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::ApiGateway::Deployment", {
 		handled: /* @__PURE__ */ new Set(["Description", "RestApiId"]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["DeploymentCanarySettings", "API Gateway requires StageName for a canary deployment (\"Non null and non empty stageName must be provided for canary deployment\"), and StageName is not handled here, so a valid canary Deployment routes to Cloud Control; declare AWS::ApiGateway::Stage with CanarySetting for an SDK-routed canary"],
 			["StageDescription", "CFn-only convenience for inline-creating a Stage; declare AWS::ApiGateway::Stage with the Description property instead"],
 			["StageName", "CFn-only convenience for inline-creating a Stage from a Deployment; declare AWS::ApiGateway::Stage explicitly to attach to this Deployment"]
@@ -15861,7 +15861,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ResourceId",
 			"RestApiId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -15872,7 +15872,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PathPart",
 			"RestApiId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ResourceId"]),
 		ccRouteUnavailable: false
@@ -15894,7 +15894,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TracingEnabled",
 			"Variables"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -15912,7 +15912,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Version"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["BasePath", "OpenAPI-import-only basePath override; meaningful only on the ImportApi code path."],
 			["Body", "OpenAPI/Swagger inline spec; routed through ImportApi, not the field-by-field CreateApi path."],
 			["BodyS3Location", "OpenAPI/Swagger spec on S3; routed through ImportApi, not the field-by-field CreateApi path."],
@@ -15944,7 +15944,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"JwtConfiguration",
 			"Name"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AuthorizerId"]),
 		ccRouteUnavailable: false
@@ -15970,7 +15970,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TimeoutInMillis",
 			"TlsConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["IntegrationId"]),
 		ccRouteUnavailable: false
@@ -15990,7 +15990,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RouteResponseSelectionExpression",
 			"Target"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["RouteId"]),
 		ccRouteUnavailable: false
@@ -16009,7 +16009,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StageVariables",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -16020,7 +16020,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Description",
 			"Expires"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ApiKey",
@@ -16045,7 +16045,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ServiceRoleArn",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DataSourceArn"]),
 		ccRouteUnavailable: false
@@ -16071,7 +16071,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Visibility",
 			"XrayEnabled"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ApiId",
@@ -16090,7 +16090,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Definition",
 			"DefinitionS3Location"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16115,7 +16115,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SyncConfig",
 			"TypeName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ResolverArn"]),
 		ccRouteUnavailable: false
@@ -16159,7 +16159,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TrafficSources",
 			"VPCZoneIdentifier"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["InstanceId", "CreateAutoScalingGroup derives a new launch configuration from the instance, and AWS Launch Configurations are end-of-life 2024-10 like LaunchConfigurationName; use LaunchTemplate instead"],
 			["LaunchConfigurationName", "AWS Launch Configurations end-of-life 2024-10; use LaunchTemplate instead"],
 			["NotificationConfiguration", "Legacy singular form; use NotificationConfigurations (plural) which cdkd already wires"]
@@ -16170,7 +16170,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::BedrockAgentCore::Browser", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"BrowserArn",
@@ -16182,7 +16182,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::BedrockAgentCore::CodeInterpreter", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CodeInterpreterArn",
@@ -16200,7 +16200,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Level",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -16231,7 +16231,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RoleArn",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AgentRuntimeArn",
@@ -16251,7 +16251,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"NotificationsWithSubscribers",
 			"ResourceTags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16268,14 +16268,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"ValidationMethod"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CertificateArn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFormation::Stack", {
 		handled: /* @__PURE__ */ new Set(["Parameters", "TemplateURL"]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Capabilities", "CFn-only IAM capability declaration — cdkd does not go through CloudFormation so capabilities have no equivalent"],
 			["Description", "CFn-only informational — no semantic effect on the recursive deploy"],
 			["DisableRollback", "CFn-only — cdkd controls rollback via the top-level deploy-engine --no-rollback flag, not per nested stack"],
@@ -16305,28 +16305,28 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::CloudFormation::WaitConditionHandle", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
 	}],
 	["AWS::CloudFront::CloudFrontOriginAccessIdentity", {
 		handled: /* @__PURE__ */ new Set(["CloudFrontOriginAccessIdentityConfig"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "S3CanonicalUserId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFront::Distribution", {
 		handled: /* @__PURE__ */ new Set(["DistributionConfig", "Tags"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DomainName", "Id"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFront::OriginAccessControl", {
 		handled: /* @__PURE__ */ new Set(["OriginAccessControlConfig"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16351,7 +16351,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TrailName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "SnsTopicArn"]),
 		ccRouteUnavailable: false
@@ -16386,7 +16386,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Unit",
 			"WarmUpConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -16402,7 +16402,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SingleMetricAnomalyDetector",
 			"Stat"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16435,7 +16435,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Visibility",
 			"VpcConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: true
@@ -16449,7 +16449,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Triggers"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -16495,7 +16495,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"WebAuthnRelyingPartyID",
 			"WebAuthnUserVerification"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -16520,7 +16520,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"State",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "PolicyId"]),
 		ccRouteUnavailable: false
@@ -16558,7 +16558,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UseLatestRestorableTime",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ClusterResourceId",
@@ -16582,7 +16582,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PreferredMaintenanceWindow",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Endpoint",
@@ -16598,7 +16598,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -16625,7 +16625,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"WriteOnDemandThroughputSettings",
 			"WriteProvisionedThroughputSettings"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["GlobalTableSourceArn", "Multi-account replica: CDK's TableV2MultiAccountReplica renders no KeySchema (which create() requires) and DynamoDB asks for a ResourcePolicy on the CreateTable (measured 2026-11-01), a cross-account path this provider cannot exercise. Stays on Cloud Control"],
 			["GlobalTableWitnesses", "MRSC witness; same one-call UpdateTable shape as MultiRegionConsistency, measured 2026-11-01. Stays on Cloud Control"],
 			["MultiRegionConsistency", "MRSC does not fit the per-replica serial paths: measured 2026-11-01 (us-east-1 / us-east-2 / us-west-2), the replica and witness Creates must go out in ONE UpdateTable with the mode, a lone replica Delete is refused ('does not include all witnesses'), DeleteTable is refused until they are gone, TTL is refused, and the table carries no stream, which create()'s needsStream arm would enable. Stays on Cloud Control"]
@@ -16661,7 +16661,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VectorIndexes",
 			"WarmThroughput"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ImportSourceSpecification", "S3 import uses the separate ImportTable API (not CreateTable) and is create-only with no readback; deferred to a dedicated import-from-S3 PR"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ImportSourceSpecification", "S3 import uses the separate ImportTable API (not CreateTable) and is create-only with no readback; deferred to a dedicated import-from-S3 PR"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["ImportSourceSpecification"]),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "StreamArn"]),
 		ccRouteUnavailable: false
@@ -16674,7 +16674,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PublicIpv4Pool",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Address", "Bring-your-own-IP: allocating a specific address you own is not yet supported; cdkd allocates an Amazon-owned address"],
 			["IpamPoolId", "Allocation from an IPAM pool is not yet supported"],
 			["TransferAddress", "Accepting a transferred Elastic IP is not yet supported (out-of-band EIP transfer flow)"]
@@ -16707,7 +16707,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UserData"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AdditionalInfo", "not yet implemented by cdkd"],
 			["Affinity", "not yet implemented by cdkd"],
 			["CpuOptions", "not yet implemented by cdkd"],
@@ -16760,7 +16760,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::InternetGateway", {
 		handled: /* @__PURE__ */ new Set(["Tags"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InternetGatewayId"]),
 		ccRouteUnavailable: false
@@ -16779,7 +16779,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["MaxDrainDurationSeconds", "write-only address-drain timeout with no CreateNatGateway member and no NAT gateway modify API; only ec2:DisassociateNatGatewayAddress / UnassignPrivateNatGatewayAddress accept it, and the cdkd NatGateway update releases only the AvailabilityZoneAddresses of a regional gateway, never the secondary addresses of a zonal one — routed via Cloud Control instead"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["MaxDrainDurationSeconds", "write-only address-drain timeout with no CreateNatGateway member and no NAT gateway modify API; only ec2:DisassociateNatGatewayAddress / UnassignPrivateNatGatewayAddress accept it, and the cdkd NatGateway update releases only the AvailabilityZoneAddresses of a regional gateway, never the secondary addresses of a zonal one — routed via Cloud Control instead"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AutoProvisionZones",
@@ -16792,7 +16792,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::NetworkAcl", {
 		handled: /* @__PURE__ */ new Set(["Tags", "VpcId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16809,7 +16809,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RuleAction",
 			"RuleNumber"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16833,14 +16833,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcEndpointId",
 			"VpcPeeringConnectionId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CidrBlock"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::EC2::RouteTable", {
 		handled: /* @__PURE__ */ new Set(["Tags", "VpcId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["RouteTableId"]),
 		ccRouteUnavailable: false
@@ -16854,7 +16854,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["GroupId", "Id"]),
 		ccRouteUnavailable: false
@@ -16872,7 +16872,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SourceSecurityGroupOwnerId",
 			"ToPort"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["GroupName", "EC2-Classic-only — use GroupId for VPC security groups (EC2-Classic retired 2022-08-15)"], ["SourceSecurityGroupName", "EC2-Classic-only — use SourceSecurityGroupId for VPC peer security groups (EC2-Classic retired 2022-08-15)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["GroupName", "EC2-Classic-only — use GroupId for VPC security groups (EC2-Classic retired 2022-08-15)"], ["SourceSecurityGroupName", "EC2-Classic-only — use SourceSecurityGroupId for VPC peer security groups (EC2-Classic retired 2022-08-15)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["GroupName", "SourceSecurityGroupName"]),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16885,7 +16885,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AssignIpv6AddressOnCreation", "not yet implemented by cdkd"],
 			["AvailabilityZoneId", "not yet implemented by cdkd"],
 			["EnableDns64", "not yet implemented by cdkd"],
@@ -16918,14 +16918,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::SubnetNetworkAclAssociation", {
 		handled: /* @__PURE__ */ new Set(["NetworkAclId", "SubnetId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AssociationId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::EC2::SubnetRouteTableAssociation", {
 		handled: /* @__PURE__ */ new Set(["RouteTableId", "SubnetId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16938,7 +16938,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"InstanceTenancy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Ipv4IpamPoolId", "not yet implemented by cdkd"],
 			["Ipv4NetmaskLength", "not yet implemented by cdkd"],
 			["VpcEncryptionControl", "not yet implemented by cdkd"]
@@ -16963,7 +16963,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcId",
 			"VpnGatewayId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AttachmentType"]),
 		ccRouteUnavailable: false
@@ -16980,7 +16980,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RepositoryPolicyText",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RepositoryUri"]),
 		ccRouteUnavailable: false
@@ -16995,7 +16995,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ServiceConnectDefaults",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17031,7 +17031,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VolumeConfigurations",
 			"VpcLatticeConfigurations"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Name", "ServiceArn"]),
 		ccRouteUnavailable: false
@@ -17056,7 +17056,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TaskRoleArn",
 			"Volumes"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["InferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["InferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["InferenceAccelerators"]),
 		readOnly: /* @__PURE__ */ new Set(["TaskDefinitionArn"]),
 		ccRouteUnavailable: false
@@ -17068,7 +17068,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PosixUser",
 			"RootDirectory"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ClientToken", "cdkd supplies its own retry-stable ClientToken on CreateAccessPoint, so a template-supplied value would be overwritten. The SDK does not own this field either: an omitted ClientToken is auto-filled with a FRESH uuid per attempt, which leaves a retried 500 free to mint a second access point, while a caller-supplied value goes on the wire verbatim."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ClientToken", "cdkd supplies its own retry-stable ClientToken on CreateAccessPoint, so a template-supplied value would be overwritten. The SDK does not own this field either: an omitted ClientToken is auto-filled with a FRESH uuid per attempt, which leaves a retried 500 free to mint a second access point, while a caller-supplied value goes on the wire verbatim."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["ClientToken"]),
 		readOnly: /* @__PURE__ */ new Set(["AccessPointId", "Arn"]),
 		ccRouteUnavailable: false
@@ -17088,7 +17088,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ProvisionedThroughputInMibps",
 			"ThroughputMode"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ReplicationConfiguration", "Cross-region EFS replication (CreateReplicationConfiguration) provisions a separate destination file system in another region with its own lifecycle, KMS key, and availability-zone placement; replicating + then tearing down the destination on destroy is a multi-resource, cross-region orchestration that is out of scope for the single-resource SDK provider."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ReplicationConfiguration", "Cross-region EFS replication (CreateReplicationConfiguration) provisions a separate destination file system in another region with its own lifecycle, KMS key, and availability-zone placement; replicating + then tearing down the destination on destroy is a multi-resource, cross-region orchestration that is out of scope for the single-resource SDK provider."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "FileSystemId"]),
 		ccRouteUnavailable: false
@@ -17102,7 +17102,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SecurityGroups",
 			"SubnetId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -17134,7 +17134,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TransitEncryptionEnabled",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["CacheSecurityGroupNames", "EC2-Classic-only — use VpcSecurityGroupIds for VPC-deployed clusters (EC2-Classic retired 2022-08-15)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["CacheSecurityGroupNames", "EC2-Classic-only — use VpcSecurityGroupIds for VPC-deployed clusters (EC2-Classic retired 2022-08-15)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ConfigurationEndpoint", "RedisEndpoint"]),
 		ccRouteUnavailable: false
@@ -17147,7 +17147,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17165,7 +17165,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SslPolicy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ListenerArn"]),
 		ccRouteUnavailable: false
@@ -17187,7 +17187,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CanonicalHostedZoneID",
@@ -17221,7 +17221,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UnhealthyThresholdCount",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"LoadBalancerArns",
@@ -17261,7 +17261,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VisibleToAllUsers"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "MasterPublicDNS"]),
 		ccRouteUnavailable: true
@@ -17277,7 +17277,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TargetOnDemandCapacity",
 			"TargetSpotCapacity"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InstanceFleetId"]),
 		ccRouteUnavailable: true
@@ -17296,7 +17296,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Market",
 			"Name"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InstanceGroupId"]),
 		ccRouteUnavailable: true
@@ -17312,7 +17312,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Policy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17329,7 +17329,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Targets"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RuleName"]),
 		ccRouteUnavailable: false
@@ -17351,7 +17351,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"WindowsConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DNSName",
@@ -17368,7 +17368,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ConnectionInput",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Name"]),
 		ccRouteUnavailable: false
@@ -17391,7 +17391,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Targets"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17402,7 +17402,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"DatabaseInput",
 			"DatabaseName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17434,14 +17434,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Timeout",
 			"WorkerType"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
 	}],
 	["AWS::Glue::SecurityConfiguration", {
 		handled: /* @__PURE__ */ new Set(["EncryptionConfiguration", "Name"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17454,7 +17454,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"OpenTableFormatInput",
 			"TableInput"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: true
@@ -17472,7 +17472,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"WorkflowName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17485,7 +17485,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Name",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17496,7 +17496,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Status",
 			"UserName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "SecretAccessKey"]),
 		ccRouteUnavailable: true
@@ -17508,7 +17508,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Path",
 			"Policies"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17519,7 +17519,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Path",
 			"Roles"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17535,7 +17535,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Users"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AttachmentCount",
@@ -17557,7 +17557,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Roles",
 			"Users"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -17574,7 +17574,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RoleName",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RoleId"]),
 		ccRouteUnavailable: false
@@ -17590,14 +17590,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UserName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::IAM::UserToGroupAddition", {
 		handled: /* @__PURE__ */ new Set(["GroupName", "Users"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -17614,7 +17614,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StreamModeDetails",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["WarmThroughputMiBps", "AWS accepts it only on an account enrolled in the Kinesis minimum throughput billing commitment, so the SDK path is not wired (go-to-k/cdkd#1695); Cloud Control forwards it."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["WarmThroughputMiBps", "AWS accepts it only on an account enrolled in the Kinesis minimum throughput billing commitment, so the SDK path is not wired (go-to-k/cdkd#1695); Cloud Control forwards it."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "WarmThroughputObject"]),
 		ccRouteUnavailable: false
@@ -17625,7 +17625,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StreamARN",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ConsumerARN",
@@ -17653,14 +17653,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SplunkDestinationConfiguration",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["DatabaseSourceConfiguration", "Database as a source was a public preview AWS removed on 2025-09-24 (Firehose document history); CreateDeliveryStream refused DeliveryStreamType DatabaseAsSource in every region probed, so an SDK path could not be verified. Stays on Cloud Control"], ["SnowflakeDestinationConfiguration", "Proving the wire shape live needs a real Snowflake account, and the block carries key material (PrivateKey, KeyPassphrase). Stays on Cloud Control"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["DatabaseSourceConfiguration", "Database as a source was a public preview AWS removed on 2025-09-24 (Firehose document history); CreateDeliveryStream refused DeliveryStreamType DatabaseAsSource in every region probed, so an SDK path could not be verified. Stays on Cloud Control"], ["SnowflakeDestinationConfiguration", "Proving the wire shape live needs a real Snowflake account, and the block carries key material (PrivateKey, KeyPassphrase). Stays on Cloud Control"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["DatabaseSourceConfiguration"]),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::KMS::Alias", {
 		handled: /* @__PURE__ */ new Set(["AliasName", "TargetKeyId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17680,7 +17680,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RotationPeriodInDays",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "KeyId"]),
 		ccRouteUnavailable: false
@@ -17693,7 +17693,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"MaximumRetryAttempts",
 			"Qualifier"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: true
@@ -17729,7 +17729,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Topics",
 			"TumblingWindowInSeconds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["EventSourceMappingArn", "Id"]),
 		ccRouteUnavailable: false
@@ -17768,7 +17768,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TracingConfig",
 			"VpcConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "SnapStartResponse"]),
 		ccRouteUnavailable: false
@@ -17782,7 +17782,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"LayerName",
 			"LicenseInfo"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["LayerVersionArn"]),
 		ccRouteUnavailable: false
@@ -17804,7 +17804,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Resources",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17823,7 +17823,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"OperatorRole",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -17845,7 +17845,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SourceAccount",
 			"SourceArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -17858,7 +17858,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Qualifier",
 			"TargetFunctionArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["FunctionArn", "FunctionUrl"]),
 		ccRouteUnavailable: false
@@ -17875,7 +17875,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ScalingConfig",
 			"ThrottleConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17899,7 +17899,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"KmsKeyArn",
 			"ServiceConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17923,7 +17923,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RetentionInDays",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ResourcePolicyDocument", "not driven by this provider by decision (issue #1412): no CreateLogGroup / PutRetentionPolicy member carries it, and both policy lifecycles — the account-scoped AWS::Logs::ResourcePolicy type and the log-group-scoped logs:PutResourcePolicy (resourceArn + policyScope RESOURCE) — are ones this provider does not take on — routed via Cloud Control, whose handler applies it"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ResourcePolicyDocument", "not driven by this provider by decision (issue #1412): no CreateLogGroup / PutRetentionPolicy member carries it, and both policy lifecycles — the account-scoped AWS::Logs::ResourcePolicy type and the log-group-scoped logs:PutResourcePolicy (resourceArn + policyScope RESOURCE) — are ones this provider does not take on — routed via Cloud Control, whose handler applies it"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17958,7 +17958,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UseLatestRestorableTime",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["GlobalClusterIdentifier", "Cloud Control owns a global-cluster member: NeptuneProvider has no detach, and a member cannot be deleted while attached (deletesThroughSdkProvider keeps its delete there too)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["GlobalClusterIdentifier", "Cloud Control owns a global-cluster member: NeptuneProvider has no detach, and a member cannot be deleted while attached (deletesThroughSdkProvider keeps its delete there too)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["GlobalClusterIdentifier"]),
 		readOnly: /* @__PURE__ */ new Set([
 			"ClusterResourceId",
@@ -17983,7 +17983,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PubliclyAccessible",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["DBSnapshotIdentifier", "The CloudFormation schema documents it as not supported, and CreateDBInstance has no such member: a Neptune instance is not restored from a snapshot, its cluster is"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["DBSnapshotIdentifier", "The CloudFormation schema documents it as not supported, and CreateDBInstance has no such member: a Neptune instance is not restored from a snapshot, its cluster is"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["DBSnapshotIdentifier"]),
 		readOnly: /* @__PURE__ */ new Set(["Endpoint", "Port"]),
 		ccRouteUnavailable: false
@@ -17995,7 +17995,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18016,7 +18016,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Target",
 			"TargetParameters"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18057,7 +18057,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AllocatedStorage", "not yet implemented by cdkd"],
 			["AssociatedRoles", "not yet implemented by cdkd"],
 			["AutoMinorVersionUpgrade", "not yet implemented by cdkd"],
@@ -18167,7 +18167,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VPCSecurityGroups"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AdditionalStorageVolumes", "not yet implemented by cdkd"],
 			["ApplyImmediately", "cdkd always applies modifications immediately (rds:ModifyDBInstance.ApplyImmediately=true is hardcoded); users wanting maintenance-window deferral should run aws rds modify-db-instance directly"],
 			["AssociatedRoles", "not yet implemented by cdkd"],
@@ -18252,7 +18252,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcSecurityGroupIds",
 			"VpcSubnetIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DBProxyArn",
@@ -18271,7 +18271,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcSecurityGroupIds",
 			"VpcSubnetIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DBProxyEndpointArn",
@@ -18290,7 +18290,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TargetGroupName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TargetGroupArn"]),
 		ccRouteUnavailable: true
@@ -18302,7 +18302,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DBSubnetGroupArn"]),
 		ccRouteUnavailable: false
@@ -18317,7 +18317,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"QueryLoggingConfig",
 			"VPCs"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "NameServers"]),
 		ccRouteUnavailable: false
@@ -18342,7 +18342,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"Weight"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18373,7 +18373,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VersioningConfiguration",
 			"WebsiteConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["AccessControl", "Legacy canned ACL; AWS disables ACLs by default since 2023-04 — use BucketOwnershipControls + BucketPolicy / PublicAccessBlockConfiguration instead"], ["MetadataTableConfiguration", "V1 S3 Metadata, which the schema says to replace with MetadataConfiguration; S3 answered V1APIsNotAllowed where it was probed, so an SDK path could not be verified. Stays on Cloud Control"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["AccessControl", "Legacy canned ACL; AWS disables ACLs by default since 2023-04 — use BucketOwnershipControls + BucketPolicy / PublicAccessBlockConfiguration instead"], ["MetadataTableConfiguration", "V1 S3 Metadata, which the schema says to replace with MetadataConfiguration; S3 answered V1APIsNotAllowed where it was probed, so an SDK path could not be verified. Stays on Cloud Control"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18386,7 +18386,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::S3::BucketPolicy", {
 		handled: /* @__PURE__ */ new Set(["Bucket", "PolicyDocument"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18402,14 +18402,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"MetricsConfigurations",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "AvailabilityZoneName"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::S3Tables::Namespace", {
 		handled: /* @__PURE__ */ new Set(["Namespace", "TableBucketARN"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18429,7 +18429,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"WithoutMetadata"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"TableARN",
@@ -18448,7 +18448,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UnreferencedFileRemoval"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TableBucketARN"]),
 		ccRouteUnavailable: false
@@ -18459,7 +18459,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VectorBucketName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CreationTime", "VectorBucketArn"]),
 		ccRouteUnavailable: false
@@ -18478,7 +18478,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"State",
 			"Target"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: true
@@ -18494,7 +18494,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -18505,7 +18505,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Name",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "Id"]),
 		ccRouteUnavailable: false
@@ -18518,7 +18518,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Vpc"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18534,7 +18534,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Properties",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18555,7 +18555,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "Id"]),
 		ccRouteUnavailable: false
@@ -18573,7 +18573,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubscriptionRoleArn",
 			"TopicArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["Region", "CFn-only cross-region subscription hint; cdkd uses the SDK client region directly and has no per-resource region override"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["Region", "CFn-only cross-region subscription hint; cdkd uses the SDK client region directly and has no per-resource region override"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -18595,14 +18595,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TopicName",
 			"TracingConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TopicArn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::SNS::TopicPolicy", {
 		handled: /* @__PURE__ */ new Set(["PolicyDocument", "Topics"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -18626,14 +18626,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VisibilityTimeout"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "QueueUrl"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::SQS::QueuePolicy", {
 		handled: /* @__PURE__ */ new Set(["PolicyDocument", "Queues"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -18650,7 +18650,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"Value"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -18669,7 +18669,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TracingConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18697,7 +18697,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TokenDomains",
 			"VisibilityConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -19079,14 +19079,14 @@ function unsupportedTypeIssueUrl(resourceType) {
 function getPropertyCoverage(resourceType) {
 	return PROPERTY_COVERAGE_BY_TYPE.get(resourceType);
 }
-function findSilentDropProperties(resourceType, templateProperties) {
+function findSdkUnwiredProperties(resourceType, templateProperties) {
 	if (!templateProperties) return [];
 	const coverage = getPropertyCoverage(resourceType);
 	if (!coverage) return [];
 	const drops = [];
 	for (const prop of Object.keys(templateProperties)) {
 		if (coverage.handled.has(prop)) continue;
-		const rationale = coverage.silentDrop.get(prop);
+		const rationale = coverage.sdkUnwired.get(prop);
 		if (rationale === void 0) continue;
 		drops.push({
 			property: prop,
@@ -19096,8 +19096,8 @@ function findSilentDropProperties(resourceType, templateProperties) {
 	return drops.sort((a, b) => a.property.localeCompare(b.property));
 }
 const UNRECOGNIZED_PROPERTY_RATIONALE = "not in cdkd's CFn schema snapshot";
-function findActionableSilentDrops(resourceType, templateProperties, allowedKeys, recordedProperties, options) {
-	const drops = findSilentDropProperties(resourceType, templateProperties).filter(({ property }) => !allowedKeys.has(`${resourceType}:${property}`));
+function findActionableSdkUnwired(resourceType, templateProperties, allowedKeys, recordedProperties, options) {
+	const drops = findSdkUnwiredProperties(resourceType, templateProperties).filter(({ property }) => !allowedKeys.has(`${resourceType}:${property}`));
 	const unrecognized = findRoutableUnrecognizedProperties(resourceType, templateProperties, allowedKeys, recordedProperties, options);
 	if (unrecognized.length === 0) return drops;
 	return [...drops, ...unrecognized.map((property) => ({
@@ -19126,9 +19126,9 @@ function containsIntrinsic$1(value) {
 function toJsonValue(value) {
 	return value === void 0 ? void 0 : JSON.parse(JSON.stringify(value));
 }
-function findAcceptedSilentDrops(resourceType, templateProperties, allowedKeys, recordedProperties) {
+function findAcceptedSdkUnwired(resourceType, templateProperties, allowedKeys, recordedProperties) {
 	if (findRoutableUnrecognizedProperties(resourceType, templateProperties, allowedKeys, recordedProperties).length > 0) return [];
-	const drops = findSilentDropProperties(resourceType, templateProperties);
+	const drops = findSdkUnwiredProperties(resourceType, templateProperties);
 	const accepted = [];
 	for (const { property } of drops) {
 		if (!allowedKeys.has(`${resourceType}:${property}`)) return [];
@@ -19136,22 +19136,22 @@ function findAcceptedSilentDrops(resourceType, templateProperties, allowedKeys,
 	}
 	return accepted;
 }
-function withoutSilentDropProperties(resourceType, properties) {
-	const removable = removableSilentDrops(resourceType, properties);
+function withoutSdkUnwiredProperties(resourceType, properties) {
+	const removable = removableSdkUnwired(resourceType, properties);
 	if (removable.length === 0) return properties;
 	const written = { ...properties };
 	for (const property of removable) delete written[property];
 	return written;
 }
-function withoutAcceptedSilentDropProperties(resourceType, properties, allowedKeys, recordedProperties) {
-	const removable = excludeCreateOnly(resourceType, findAcceptedSilentDrops(resourceType, properties, allowedKeys, recordedProperties));
+function withoutAcceptedSdkUnwiredProperties(resourceType, properties, allowedKeys, recordedProperties) {
+	const removable = excludeCreateOnly(resourceType, findAcceptedSdkUnwired(resourceType, properties, allowedKeys, recordedProperties));
 	if (removable.length === 0) return properties;
 	const written = { ...properties };
 	for (const property of removable) delete written[property];
 	return written;
 }
-function removableSilentDrops(resourceType, properties) {
-	return excludeCreateOnly(resourceType, findSilentDropProperties(resourceType, properties).map(({ property }) => property));
+function removableSdkUnwired(resourceType, properties) {
+	return excludeCreateOnly(resourceType, findSdkUnwiredProperties(resourceType, properties).map(({ property }) => property));
 }
 function excludeCreateOnly(resourceType, names) {
 	if (names.length === 0) return names;
@@ -19159,9 +19159,9 @@ function excludeCreateOnly(resourceType, names) {
 	if (createOnly === void 0 || createOnly.size === 0) return names;
 	return names.filter((property) => !createOnly.has(property));
 }
-function withoutUnwrittenSilentDropProperties(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
+function withoutUnwrittenSdkUnwiredProperties(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops;
-	const removable = findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly?.has(property) !== true).concat(evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence).filter((property) => desiredProperties === void 0 || !Object.hasOwn(desiredProperties, property) || askedUnchanged(recordedProperties, desiredProperties, property)));
+	const removable = findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly?.has(property) !== true).concat(evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence).filter((property) => desiredProperties === void 0 || !Object.hasOwn(desiredProperties, property) || askedUnchanged(recordedProperties, desiredProperties, property)));
 	if (removable.length === 0) return recordedProperties;
 	const narrowed = { ...recordedProperties };
 	for (const property of removable) delete narrowed[property];
@@ -19173,8 +19173,8 @@ function findUnwrittenCreateOnlyDrops(resourceType, recordedProperties, desiredP
 function evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
 	if (evidence.size === 0) return [];
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops ?? /* @__PURE__ */ new Set();
-	const accepted = new Set(findAcceptedSilentDrops(resourceType, desiredProperties, allowedKeys, recordedProperties));
-	return [...findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && evidence.has(property) && !accepted.has(property)), ...findHandledUnwrittenCreateOnly(resourceType, recordedProperties, evidence)].sort((a, b) => a.localeCompare(b));
+	const accepted = new Set(findAcceptedSdkUnwired(resourceType, desiredProperties, allowedKeys, recordedProperties));
+	return [...findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && evidence.has(property) && !accepted.has(property)), ...findHandledUnwrittenCreateOnly(resourceType, recordedProperties, evidence)].sort((a, b) => a.localeCompare(b));
 }
 function askedUnchanged(recordedProperties, desiredProperties, property) {
 	return sameJsonValue(recordedProperties[property], desiredProperties[property], "unchanged");
@@ -19189,7 +19189,7 @@ function findHandledUnwrittenCreateOnly(resourceType, recordedProperties, eviden
 function acceptedCreateOnlyDropsEvidence(recordedProperties, resourceType, provisionedBy, carried) {
 	if (provisionedBy !== "sdk") return void 0;
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops ?? /* @__PURE__ */ new Set();
-	const names = findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && (carried === void 0 || carried.has(property)));
+	const names = findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && (carried === void 0 || carried.has(property)));
 	const handled = carried === void 0 ? [] : findHandledUnwrittenCreateOnly(resourceType, recordedProperties, carried);
 	const all = [...names, ...handled].sort((a, b) => a.localeCompare(b));
 	return all.length > 0 ? all : void 0;
@@ -19211,7 +19211,7 @@ function findUnrecognizedProperties(resourceType, templateProperties) {
 	for (const prop of Object.keys(templateProperties)) {
 		if (prop === "Ref" || prop.startsWith("Fn::")) continue;
 		if (coverage.handled.has(prop)) continue;
-		if (coverage.silentDrop.has(prop)) continue;
+		if (coverage.sdkUnwired.has(prop)) continue;
 		unrecognized.push(prop);
 	}
 	return unrecognized.sort((a, b) => a.localeCompare(b));
@@ -26173,8 +26173,8 @@ var DiffCalculator = class DiffCalculator {
 				const rawDesiredProps = desiredResource.Properties || {};
 				const resolvedDesiredProps = resolveFn ? await this.resolveBestEffort(rawDesiredProps, resolveFn) : rawDesiredProps;
 				const sdkRouted = currentResource.provisionedBy !== "cc-api";
-				const desiredAfterDrops = sdkRouted && allowedUnsupportedProperties ? withoutAcceptedSilentDropProperties(desiredResource.Type, resolvedDesiredProps, allowedUnsupportedProperties, currentResource.properties) : resolvedDesiredProps;
-				const currentAfterDrops = sdkRouted ? withoutUnwrittenSilentDropProperties(desiredResource.Type, currentResource.properties, resolvedDesiredProps, allowedUnsupportedProperties ?? /* @__PURE__ */ new Set(), acceptedCreateOnlyDropsOf(currentResource)) : currentResource.properties;
+				const desiredAfterDrops = sdkRouted && allowedUnsupportedProperties ? withoutAcceptedSdkUnwiredProperties(desiredResource.Type, resolvedDesiredProps, allowedUnsupportedProperties, currentResource.properties) : resolvedDesiredProps;
+				const currentAfterDrops = sdkRouted ? withoutUnwrittenSdkUnwiredProperties(desiredResource.Type, currentResource.properties, resolvedDesiredProps, allowedUnsupportedProperties ?? /* @__PURE__ */ new Set(), acceptedCreateOnlyDropsOf(currentResource)) : currentResource.properties;
 				const desiredPropsForCompare = canonicalizeProperties ? canonicalizeProperties(desiredResource.Type, desiredAfterDrops) : desiredAfterDrops;
 				const currentPropsForCompare = canonicalizeProperties && sdkRouted ? canonicalizeProperties(desiredResource.Type, currentAfterDrops) : currentAfterDrops;
 				const droppedKeys = canonicalizeProperties ? Object.keys(desiredAfterDrops).filter((key) => !Object.hasOwn(desiredPropsForCompare, key)) : [];
@@ -28608,7 +28608,7 @@ var CloudControlProvider = class {
 		const indeterminateGuard = await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-DIQU27yo.js");
+			const { ASGProvider } = await import("./asg-provider-lSRpxvv-.js");
 			const delegateRegion = ambientRegion();
 			let asgProvider = this.asgDeleteDelegates.get(delegateRegion);
 			if (asgProvider === void 0) {
@@ -28717,7 +28717,7 @@ var CloudControlProvider = class {
 		const family = SDK_DELETE_FAMILIES.get(resourceType);
 		const cached = this.sdkDeleteDelegates.get(family);
 		if (cached !== void 0 && cached.region === ccRegion) return cached.provider;
-		const provider = family === "rds" ? new (await (import("./rds-provider-BenOBQ9u.js"))).RDSProvider({ region: ccRegion }) : new (await (import("./neptune-provider-DzedCIWf.js"))).NeptuneProvider({ region: ccRegion });
+		const provider = family === "rds" ? new (await (import("./rds-provider-lqfHEmI_.js"))).RDSProvider({ region: ccRegion }) : new (await (import("./neptune-provider-C15HKNRt.js"))).NeptuneProvider({ region: ccRegion });
 		this.sdkDeleteDelegates.set(family, {
 			region: ccRegion,
 			provider
@@ -33109,7 +33109,7 @@ function wouldReturnToSdkProvider(input) {
 	if (forceCcApi) return false;
 	if (desiredProperties === void 0) return false;
 	if (previousProperties === void 0) return false;
-	return [desiredProperties, previousProperties].every((bag) => findActionableSilentDrops(resourceType, bag, allowedUnsupportedProperties).length === 0);
+	return [desiredProperties, previousProperties].every((bag) => findActionableSdkUnwired(resourceType, bag, allowedUnsupportedProperties).length === 0);
 }
 var ProviderRegistry = class {
 	logger = getLogger().child("ProviderRegistry");
@@ -33185,7 +33185,7 @@ var ProviderRegistry = class {
 		}
 		const specificProvider = this.providers.get(resourceType);
 		if (specificProvider) {
-			const actionableDrops = findActionableSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, input.previousProperties);
+			const actionableDrops = findActionableSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, input.previousProperties);
 			if (actionableDrops.length === 0) {
 				debug(`Using specific SDK provider for ${resourceType}`);
 				if (returningToSdk) {
@@ -33202,7 +33202,7 @@ var ProviderRegistry = class {
 				};
 			}
 			const unroutable = this.ccRouteUnavailableReason(resourceType);
-			if (unroutable !== void 0) throw new Error(this.buildUnroutableSilentDropMessage(resourceType, actionableDrops, unroutable));
+			if (unroutable !== void 0) throw new Error(this.buildUnroutableSdkUnwiredMessage(resourceType, actionableDrops, unroutable));
 			debug(`Auto-routing ${resourceType} via Cloud Control (SDK-unwired properties: ${actionableDrops.map((d) => d.property).join(", ")})`);
 			return {
 				provider: this.cloudControlProvider,
@@ -33230,7 +33230,7 @@ var ProviderRegistry = class {
 		if (hasNoCloudControlHandlers(resourceType)) return NO_CC_HANDLERS_REASON;
 		if (this.providers.get(resourceType)?.disableCcApiFallback === true) return "the type's SDK provider opts out of the Cloud Control fallback (disableCcApiFallback)";
 	}
-	buildUnroutableSilentDropMessage(resourceType, drops, reason) {
+	buildUnroutableSdkUnwiredMessage(resourceType, drops, reason) {
 		const details = drops.map((d) => safeMsg`  - ${d.property}: ${d.rationale}`).join("\n");
 		const overrideHint = drops.map((d) => safeMsg`${resourceType}:${d.property}`).join(",");
 		return safeMsg`${resourceType} uses properties cdkd's SDK Provider does not handle, and ` + safeMsg`this type cannot fall back to Cloud Control API (${reason}):\n` + `${details}\nRemove the properties, or force the SDK provider path and accept leaving them unwritten via --prefer-sdk-route ${overrideHint} (the provider may still reject the resource if the property is required).`;
@@ -33275,7 +33275,7 @@ var ProviderRegistry = class {
 		this.validateMutuallyExclusiveProperties(materialized);
 		this.validateNestedRequiredProperties(materialized);
 		this.validateCustomResourceSecureReferences(materialized);
-		this.reportSilentDropDecisions(materialized);
+		this.reportSdkUnwiredDecisions(materialized);
 	}
 	validateMutuallyExclusiveProperties(resources) {
 		const lines = [];
@@ -33298,16 +33298,16 @@ var ProviderRegistry = class {
 		if (lines.length === 0) return;
 		throw new Error("The following custom resources pass a secure dynamic reference ({{resolve:secretsmanager:...}} / {{resolve:ssm-secure:...}}) in their properties:\n" + lines.join("\n") + "\n\nCloudFormation does not support secure dynamic references in custom resources, so the template is rejected before anything is resolved. Have the handler read the secret itself (pass its name or ARN instead), or use a plain {{resolve:ssm:...}} parameter for a value that is not secret.");
 	}
-	reportSilentDropDecisions(resources) {
+	reportSdkUnwiredDecisions(resources) {
 		for (const { logicalId, resourceType, properties, provisionedBy, previousProperties } of resources) {
-			const drops = findSilentDropProperties(resourceType, properties);
+			const drops = findSdkUnwiredProperties(resourceType, properties);
 			const unrecognizedRoute = findRoutableUnrecognizedProperties(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			const stickyCc = provisionedBy === "cc-api" && !STICKY_CC_MIGRATION_EXEMPT.has(resourceType);
-			const overridden = stickyCc ? [] : findAcceptedSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
+			const overridden = stickyCc ? [] : findAcceptedSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			const autoRouted = [...drops.map(({ property }) => property).filter((property) => !this.allowedUnsupportedProperties.has(`${resourceType}:${property}`)), ...unrecognizedRoute].sort((a, b) => a.localeCompare(b));
 			if (autoRouted.length > 0) {
 				const unroutable = this.ccRouteUnavailableReason(resourceType);
-				if (unroutable !== void 0) throw new Error(safeMsg`${logicalId}: ` + this.buildUnroutableSilentDropMessage(resourceType, drops.filter((d) => autoRouted.includes(d.property)), unroutable));
+				if (unroutable !== void 0) throw new Error(safeMsg`${logicalId}: ` + this.buildUnroutableSdkUnwiredMessage(resourceType, drops.filter((d) => autoRouted.includes(d.property)), unroutable));
 				const propList = autoRouted.join(", ");
 				const overrideHint = autoRouted.map((p) => `${resourceType}:${p}`).join(",");
 				const message = `${logicalId} (${resourceType}): routing via Cloud Control API (cdkd's SDK Provider does not yet wire ${propList} — CC API will forward the full property map.${unrecognizedRoute.length === 0 ? "" : ` ${unrecognizedRoute.join(", ")} ${unrecognizedRoute.length === 1 ? "is" : "are"} not in cdkd's CFn schema snapshot: Cloud Control applies a property AWS published since, and rejects a misspelled one as CloudFormation does.`} Override via --prefer-sdk-route ${overrideHint}.)`;
@@ -33365,7 +33365,7 @@ var ProviderRegistry = class {
 	findAutoRouteHits(resources) {
 		const hits = [];
 		for (const { logicalId, resourceType, properties, previousProperties } of resources) {
-			const actionable = findActionableSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
+			const actionable = findActionableSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			if (actionable.length === 0) continue;
 			hits.push({
 				logicalId,
@@ -36402,25 +36402,6 @@ function holdsSupersededResources(record) {
 	return rows !== void 0 && (!Array.isArray(rows) || rows.length > 0);
 }
 
-// src/utils/colors.ts
-const codes = {
-	reset: "\x1B[0m",
-	bright: "\x1B[1m",
-	dim: "\x1B[2m",
-	red: "\x1B[31m",
-	green: "\x1B[32m",
-	yellow: "\x1B[33m",
-	blue: "\x1B[34m",
-	cyan: "\x1B[36m",
-	gray: "\x1B[90m"
-};
-const green = (s) => `${codes.green}${s}${codes.reset}`;
-const yellow = (s) => `${codes.yellow}${s}${codes.reset}`;
-const red = (s) => `${codes.red}${s}${codes.reset}`;
-const cyan = (s) => `${codes.cyan}${s}${codes.reset}`;
-const gray = (s) => `${codes.gray}${s}${codes.reset}`;
-const bold = (s) => `${codes.bright}${s}${codes.reset}`;
-
 // src/deployment/rollback-executor/replay-scope.ts
 function withReplayDeletePrinting(scope, fn) {
 	const deployBag = scope.ctx.logOnlyNeedlesFor?.(scope.op.logicalId);
@@ -46520,8 +46501,8 @@ function withPropertiesMarksOf(original, rebuilt) {
 	return carryRedactionMarks(original, rebuilt);
 }
 function propertiesToRecord(desiredProperties, result, resourceType, provisionedBy) {
-	if (result.effectiveProperties) return markWrittenFromDeployedTemplate(markLeafCertifiedBag(provisionedBy === "sdk" ? withoutSilentDropProperties(resourceType, result.effectiveProperties) : result.effectiveProperties));
-	const written = provisionedBy === "sdk" ? withoutSilentDropProperties(resourceType, desiredProperties) : desiredProperties;
+	if (result.effectiveProperties) return markWrittenFromDeployedTemplate(markLeafCertifiedBag(provisionedBy === "sdk" ? withoutSdkUnwiredProperties(resourceType, result.effectiveProperties) : result.effectiveProperties));
+	const written = provisionedBy === "sdk" ? withoutSdkUnwiredProperties(resourceType, desiredProperties) : desiredProperties;
 	return markWrittenFromDeployedTemplate(markSameGenerationBag(written));
 }
 function extractTemplateAttributes(template, logicalId) {
@@ -47433,6 +47414,67 @@ function isResourceNotFoundError(error) {
 	return typeof error === "object" && error !== null && error.name === "ResourceNotFoundException";
 }
 
+// src/provisioning/resource-timeout-registry.ts
+let resolved;
+function setResolvedResourceTimeouts(opt) {
+	resolved = opt;
+}
+function resolvedResourceTimeoutMs(resourceType) {
+	if (!resolved) return void 0;
+	return resolved.perTypeMs?.[resourceType] ?? resolved.globalMs;
+}
+
+// src/provisioning/delete-gone-wait.ts
+async function waitForGoneAfterDelete(opts) {
+	const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+	const now = opts.now ?? Date.now;
+	const userTimeoutMs = resolvedResourceTimeoutMs(opts.resourceType);
+	const maxWaitMs = userTimeoutMs === void 0 ? opts.maxWaitMs : Math.min(opts.maxWaitMs, userTimeoutMs / 2);
+	const startedAt = now();
+	const stopped = `${opts.what}: the delete was ACCEPTED by AWS, but cdkd stopped waiting for it to disappear`;
+	const consequence = opts.consequence ?? "AWS finishes the delete on its side; until it does, a create of the same name is refused with \"already exists\".";
+	const watch = startInterruptWatch(`${opts.what} deletion wait`);
+	try {
+		let lastStatus;
+		let sawNonFailedStatus = false;
+		for (;;) {
+			if (watch.isInterrupted()) {
+				opts.logger.warn(safeMsg`${stopped} (interrupted). ${consequence}`);
+				return;
+			}
+			try {
+				const status = await opts.describe();
+				if (status === void 0) {
+					opts.logger.debug(safeMsg`${opts.what} is gone`);
+					return;
+				}
+				const failure = opts.failedStatus?.(status);
+				if (failure !== void 0) {
+					if (sawNonFailedStatus || now() - startedAt >= opts.pollIntervalMs) throw markWaitAbandoned(failure);
+				} else sawNonFailedStatus = true;
+				lastStatus = status;
+				opts.logger.debug(safeMsg`${opts.what} status: ${status}, waiting for it to disappear`);
+			} catch (error) {
+				if (isWaitAbandonedError(error)) throw error;
+				if (!isThrottlingError(error) && !isTransientServerError(error)) {
+					opts.logger.debug(safeMsg`${opts.what}: status read failed: ${describeAwsFailure(error).detail}`);
+					opts.logger.warn(safeMsg`${stopped}: its status could not be read (${describeAwsFailure(error).summary}). ${consequence}`);
+					return;
+				}
+				opts.logger.debug(safeMsg`${opts.what}: status read throttled or failed transiently, re-polling`);
+			}
+			const remainingMs = maxWaitMs - (now() - startedAt);
+			if (remainingMs <= 0) {
+				opts.logger.warn(safeMsg`${stopped} after ${Math.round(maxWaitMs / 1e3)}s` + safeMsg`${lastStatus !== void 0 ? ` (last status: ${lastStatus})` : ""}. ${consequence}`);
+				return;
+			}
+			await sleep(Math.min(opts.pollIntervalMs, remainingMs));
+		}
+	} finally {
+		watch.dispose();
+	}
+}
+
 // src/provisioning/dynamodb-contributor-insights.ts
 const CONTRIBUTOR_INSIGHTS_KEY = "ContributorInsightsSpecification";
 function readContributorInsightsSpec(value, path) {
@@ -48407,6 +48449,7 @@ var DynamoDBGlobalTableProvider = class {
 	attributeCache = /* @__PURE__ */ new Map();
 	deleteBudgets = new ElapsedBudgetRegistry();
 	protectionFlips = new ProtectionFlipRegistry();
+	droppedReplicaRegions = /* @__PURE__ */ new Map();
 	handledProperties = /* @__PURE__ */ new Map([["AWS::DynamoDB::GlobalTable", /* @__PURE__ */ new Set([
 		"TableName",
 		"KeySchema",
@@ -50591,6 +50634,9 @@ var DynamoDBGlobalTableProvider = class {
 		}
 		let preDeleteTable;
 		let indexNoun;
+		const droppedKey = deleteBudgetKey(physicalId, context?.expectedRegion);
+		const droppedReplicaRegions = this.droppedReplicaRegions.get(droppedKey) ?? /* @__PURE__ */ new Set();
+		this.droppedReplicaRegions.set(droppedKey, droppedReplicaRegions);
 		try {
 			const describe = await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }));
 			const replicas = describe.Table?.Replicas ?? [];
@@ -50606,6 +50652,7 @@ var DynamoDBGlobalTableProvider = class {
 					await this.dropReplicaForDelete(physicalId, region, context?.removeProtection === true, logicalId, budget, deleteMask);
 					progress.stripped = true;
 					await this.waitForReplicaGone(physicalId, region, logicalId, REPLICA_GONE_WAIT_ATTEMPTS, budget, context?.maskSecrets);
+					droppedReplicaRegions.add(region);
 					await this.deregisterRemovedReplicaScalableTargets(physicalId, region, {
 						budget,
 						maskSecrets: deleteMask,
@@ -50665,9 +50712,26 @@ var DynamoDBGlobalTableProvider = class {
 				sleepSeam: deleteTableRetryDelays
 			});
 			await this.waitForTableGone(physicalId, logicalId, 600, budget, context?.maskSecrets);
+			await Promise.all([...droppedReplicaRegions].map((region) => waitForGoneAfterDelete({
+				what: deleteMask(`DynamoDB GlobalTable ${physicalId} replica in ${region}`),
+				resourceType,
+				consequence: `AWS finishes the delete on its side; until it does, the table still exists in ${region}, and a dependent deleted in the meantime (such as its KMS key) goes while it is still in use.`,
+				describe: async () => {
+					try {
+						return (await this.getRegionalClient(region).send(new DescribeTableCommand({ TableName: physicalId }))).Table?.TableStatus ?? "UNKNOWN";
+					} catch (describeError) {
+						if (describeError instanceof ResourceNotFoundException$1) return void 0;
+						throw describeError;
+					}
+				},
+				logger: loopLogger,
+				pollIntervalMs: replicaDeleteGoneWait.pollIntervalMs,
+				maxWaitMs: Math.min(replicaDeleteGoneWait.maxWaitMs, budget.remainingMs())
+			})));
 			this.logger.debug(`Successfully deleted DynamoDB GlobalTable ${logicalId}`);
 			this.deleteBudgets.release(deleteBudgetKey(physicalId, context?.expectedRegion));
 			this.protectionFlips.release(deleteBudgetKey(physicalId, context?.expectedRegion));
+			this.droppedReplicaRegions.delete(droppedKey);
 		} catch (error) {
 			if (error instanceof ResourceNotFoundException$1) {
 				const clientRegion = await this.dynamoDBClient.config.region();
@@ -50675,6 +50739,7 @@ var DynamoDBGlobalTableProvider = class {
 				if (context?.failedCreateOrphan === true) this.logger.info(safeMsg`  DynamoDB GlobalTable ${physicalId} (${logicalId}), which a failed deploy created, is already gone; nothing to delete`);
 				else this.logger.debug(`DynamoDB GlobalTable ${physicalId} does not exist, skipping`);
 				this.deleteBudgets.release(deleteBudgetKey(physicalId, context?.expectedRegion));
+				this.droppedReplicaRegions.delete(droppedKey);
 				this.protectionFlips.release(deleteBudgetKey(physicalId, context?.expectedRegion));
 				return;
 			}
@@ -51607,6 +51672,10 @@ const REPLICA_GONE_WAIT_ATTEMPTS = 600;
 const GLOBAL_TABLE_ACTIVE_WAIT_ATTEMPTS = 600;
 const VECTOR_INDEX_SETTLE_ATTEMPTS = 1800;
 const TABLE_GONE_WAIT_ATTEMPTS = 600;
+const replicaDeleteGoneWait = {
+	maxWaitMs: 600 * DYNAMODB_DELETE_POLL_COST_MS,
+	pollIntervalMs: INDEX_SETTLE_POLL_INTERVAL_MS
+};
 const deleteTableRetryDelays = {};
 const DESCRIBE_SCALABLE_TARGETS_BATCH = 50;
 function collectAutoScalingTargets(properties, localRegion) {
@@ -53406,11 +53475,11 @@ async function provisionUpdate(engine, logicalId, change, stateResources, stackN
 		const repaired = replaceEmbeddedPhysicalNameRewrites(attributes[key], embeddedRewrites);
 		if (repaired !== attributes[key]) attributes[key] = repaired;
 	}
-	const allowedSilentDrops = engine.providerRegistry.getAllowedUnsupportedProperties?.();
-	const desiredForSkipCheckAsWritten = currentResource.provisionedBy !== "cc-api" && allowedSilentDrops ? withoutAcceptedSilentDropProperties(resourceType, desiredForSkipCheck, allowedSilentDrops, currentResource.properties) : desiredForSkipCheck;
-	const allowedForRecord = allowedSilentDrops ?? /* @__PURE__ */ new Set();
+	const allowedSdkUnwired = engine.providerRegistry.getAllowedUnsupportedProperties?.();
+	const desiredForSkipCheckAsWritten = currentResource.provisionedBy !== "cc-api" && allowedSdkUnwired ? withoutAcceptedSdkUnwiredProperties(resourceType, desiredForSkipCheck, allowedSdkUnwired, currentResource.properties) : desiredForSkipCheck;
+	const allowedForRecord = allowedSdkUnwired ?? /* @__PURE__ */ new Set();
 	const createOnlyEvidence = acceptedCreateOnlyDropsOf(currentResource);
-	const recordedAsWritten = currentResource.provisionedBy === "cc-api" ? currentProps : withoutUnwrittenSilentDropProperties(resourceType, currentProps, desiredForSkipCheck, allowedForRecord, createOnlyEvidence);
+	const recordedAsWritten = currentResource.provisionedBy === "cc-api" ? currentProps : withoutUnwrittenSdkUnwiredProperties(resourceType, currentProps, desiredForSkipCheck, allowedForRecord, createOnlyEvidence);
 	const unmarkedRecord = noEchoLeavesOf(currentResource) === void 0;
 	const todayAsWritten = unmarkedRecord || witnessNormalize(recordedAsWritten, void 0, desiredForSkipCheckAsWritten).differing.length > 0 ? redactForState(resolvedProps, {
 		provenance: "template-derived",
@@ -53738,7 +53807,7 @@ async function provisionUpdate(engine, logicalId, change, stateResources, stackN
 			logicalId,
 			resourceType,
 			unwritten,
-			routeDriving: findActionableSilentDrops(resourceType, desiredForSkipCheck, allowedForRecord, currentProps).map(({ property }) => property),
+			routeDriving: findActionableSdkUnwired(resourceType, desiredForSkipCheck, allowedForRecord, currentProps).map(({ property }) => property),
 			nested: engine.options.parentStackInfo !== void 0,
 			nowWritten: findHandledUnwrittenCreateOnly(resourceType, currentProps, createOnlyEvidence),
 			evidence: [...createOnlyEvidence],
@@ -55771,5 +55840,5 @@ function sameGenerationClaimsOf(record) {
 	};
 }
 
-export { sendTtlWaitingOutRateLimit as $, assertFlagRoleArn as $a, literalSplitDelimitersOf as $c, ccBrokenReason as $i, hasReasonlessBaselineRefusal as $l, retiredAfterRollback as $n, malformedOrphansRefusalMessage as $o, isSupersededResourceRecord as $r, MULTI_REGION_RECREATE_BLOCKED_TYPES as $s, isHandledOrphan as $t, getLegacyStateBucketName as $u, DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS as A, INTRINSIC_KEYS as Aa, TemplateParser as Ac, hasPlainPrototype$1 as Ad, refusesFinalSnapshot as Ai, recordNoEchoAttributeValues as Al, demoteSupersededOrphans as An, declaresNoEcho as Ao, movedToHint as Ar, refuseMalformedResourcesForDeploy as As, makeCanonicalizePropertiesFn as At, buildDockerImage as Au, deleteTableWithIndexBusyRetry as B, s3BucketArn as Ba, passedNoEchoParametersOf as Bc, clearBucketRegionCache as Bd, isRefusedByName as Bi, CrossPrefixReadError as Bl, orphanNeedsIdentity as Bn, hasReadableOutputs as Bo, destroyStackRecordsView as Br, unpreviewableOrphanRecords as Bs, dropSettledNestedJournals as Bt, isMalformedEnvKey as Bu, planContributorInsightsOp as C, disableInstanceApiTermination as Ca, dbInstanceEngineChangeIsInPlace as Cc, StageLoadError as Cd, ATOMIC_FINAL_SNAPSHOT_TYPES as Ci, recordAttributeIdCopy as Cl, recordAfterRollbackUpdate as Cn, isStalePlaceholderArnAttribute as Co, DEFAULT_RESOURCE_WARN_AFTER_MS as Cr, refuseMalformedResourceEntriesForImport as Cs, enclosingDeadlineExpired as Ct, getBootstrapMarkerKey as Cu, reverseMapTableContributorInsights as D, reDisableInstanceApiTermination as Da, lambdaFunctionNameForMask as Dc, utf8ByteLength as Dd, createPreDeleteFinalSnapshot as Di, provenPublicValue as Dl, equalModuloMarkedMask as Dn, withSharedDrainBudget as Do, formatDestructiveChange as Dr, refuseMalformedResourcePropertiesForDrift as Ds, isSecretBearingReferenceString as Dt, validateAssetBucketName as Du, reverseMapIndexContributorInsights as E, observeThenDisableInstanceApiTermination as Ea, canonicalLambdaFunctionName as Ec, parseFailureDebugDetail as Ed, ccRoutedFinalSnapshotError as Ei, carriesSecretMask as El, calculateResourceDrift as En, parseWebACLArn as Eo, findDestructiveChanges as Er, refuseMalformedResourcePropertiesForDestroy as Es, diffSecurity as Et, readBootstrapMarkerBody as Eu, resolveDynamoDbDeleteBudgetClock as F, withUnsettledProperties as Fa, maskWholeValue as Fc, displayAssemblyPath as Fd, withCreateTokenLedger as Fi, isSingleDynamicReferenceToken as Fl, recheckFailedPlan as Fn, UNREADABLE_RESOURCES_MAP_ROW as Fo, mappingPairs as Fr, repairMalformedOrphansForReadOnly as Fs, keptForRetainedRecord as Ft, dockerSpawnEnvWithSensitive as Fu, readbackVectorIndexes as G, resolveDynamicReferences as Ga, liveMatchesUnresolvedTokenFrame as Gc, readTagList as Gi, isNotImplemented as Gl, isRedactedRecordedValue as Gn, malformedExportNamesWarning as Go, cyan as Gr, findHandledUnwrittenCreateOnly as Gs, revertedNestedRowIds as Gt, runDockerForeground as Gu, relayedIndexBusyDelete as H, s3BucketDualStackDomainName as Ha, readsNoEchoSource as Hc, DBPROXY_TAGS_WHAT as Hi, applyCrossPrefixScan as Hl, getCurrentProducerRegions as Hn, isReadableOrphanRecord as Ho, withStackRecords as Hr, unreadableResourceEntries as Hs, nestedChildStackName as Ht, redactDockerArgvValues as Hu, resolveDynamoDbDeleteBudgetMs as I, withoutUnsettledProperties as Ia, maskedLeafCoordinatesOf as Ic, renderAssemblyPathEscape as Id, acquireIdempotencyToken as Ii, LockManager as Il, recordUnderIdIsNotOwn as In, accountArgs as Io, parseMappingFile as Ir, repairMalformedOutputsForReadOnly as Is, recordRetainedForReadoption as It, finchSecretArgvRefusal as Iu, vectorIndexesShapeDetail as J, keepHeldTokenProvenance as Ja, recordReferenceProvenanceEntry as Jc, tagPlanWarning as Ji, splitImportedOps as Jl, updatePartialMessage as Jn, malformedLocalResourceEntriesWarning as Jo, red as Jr, withoutSilentDropProperties as Js, getCurrentNestedStackContext as Jt, AssetManifestLoader as Ju, vectorIndexesForCreate as K, producerLookupOver as Ka, markSameGenerationBag as Kc, refuseMalformedDesiredTags as Ki, stackInstanceIdOf as Kl, redactedDeleteAddressFields as Kn, malformedExportSourceWarning as Ko, gray as Kr, findSilentDropProperties as Ks, withNestedRevertRun as Kt, runDockerStreaming as Ku, DELETE_INDEX_WAIT_PROCEED_NOTE as L, IntrinsicFunctionResolver as La, noEchoCoordinatesOf as Lc, resolveAssemblyPath as Ld, DeploymentEventsReader as Li, isLockInfoExpired as Ll, replacementNeverSwapped as Ln, deployRefusesOrphanRowsReason as Lo, proposeRenames as Lr, repairMalformedResourceEntriesForReadOnly as Ls, NESTED_PENDING_PARENT_REASON as Lt, formatDockerLoginError as Lu, beginDeleteWait as M, unsettledItemsField as Ma, isMarkedCoordinate as Mc, ownValue as Md, earliestDefined as Mi, recordProvenPublicExpression as Ml, isReplacementOrphan as Mn, STATE_REGION_DIVERGED as Mo, withMovedTo as Mr, refuseMalformedResourcesForExport as Ms, planOrphanAdoption as Mt, describeDockerCapturedOutput as Mu, compensateRemovedDeletionProtection as N, unsettledItemsOf as Na, maskAtCoordinates as Nc, absoluteAssemblyPathEscape as Nd, ledgerForStack as Ni, wholeStringLeavesOf as Nl, planFailedOps as Nn, STATE_RESOURCES_MALFORMED as No, isPairableType as Nr, refuseMalformedState as Ns, pendingRequestCount as Nt, describeDockerExecFailure as Nu, stripIndexContributorInsights as O, reEnableInstanceApiTermination as Oa, sameLambdaFunctionAddress as Oc, defineOwnKey as Od, effectiveDeletionPolicy as Oi, recordMaskOnlyValue as Ol, equalModuloMask as On, parameterInputsFor as Oo, findRefactorHints as Or, refuseMalformedResourcePropertiesForExport as Os, keptWholeReasonText as Ot, validateContainerRepoName as Ou, deleteBudgetKey as P, unsettledPropertiesOf as Pa, maskReadbackAtCoordinates as Pc, describeFileReadFailure as Pd, reserveStackCreateToken as Pi, WHOLE_DYNAMIC_REFERENCE_PATTERN as Pl, planRollback as Pn, UNREADABLE_ORPHANS_CONTAINER_ROW as Po, looselyEqual as Pr, repairMalformedOrphanRecordsForReadOnly as Ps, resolvePendingCloudControlRequests as Pt, describeDockerFailure as Pu, readTtlSpec as Q, applyRoleArnIfSet as Qa, hasMaskableValues as Qc, ProviderRegistry as Qi, hasReadableExportSet as Ql, nameScopeOf as Qn, malformedOrphanRowsKeptWarning as Qo, holdsSupersededResources as Qr, shownType as Qs, dropFailedHint as Qt, getDefaultStateBucketName as Qu, INDEX_SETTLE_POLL_INTERVAL_MS as R, poisonRenderedSpellingsCollidingIn as Ra, noEchoLeavesOf as Rc, injectAwsRegion as Rd, DeploymentEventsStore as Ri, S3StateBackend as Rl, resolveReplacementOldType as Rn, displayLogicalId as Ro, refuseRestoreFromItself as Rr, repairMalformedResourcePropertiesForReadOnly as Rs, displacedOpClause as Rt, getDockerCmd as Ru, indexDeclaresContributorInsights as S, markWaitAbandoned as Sa, blockDeviceMappingsDifferOnlyInDeleteOnTermination as Sc, AssemblyReader as Sd, storedSecretNameNeedles as Si, physicalNameCopiesOf as Sl, removeProtectionTypeList as Sn, cfnRefValueFromPhysicalId as So, DEFAULT_RESOURCE_TIMEOUT_MS as Sr, refuseMalformedResourceEntriesForDestroy as Ss, readRecordedConditionVerdicts as St, ensureAssetStorage as Su, readContributorInsightsSpec as T, isTerminationProtectionPropagationError as Ta, emrClusterInstancesReplaced as Tc, describeJsonParseFailure as Td, buildFinalSnapshotIdentifier as Ti, splitGetAttStringForm as Tl, withUnprovenUnsettled as Tn, refStateLookupFromResource as To, constructPathOf as Tr, refuseMalformedResourceEntriesForOrphan as Ts, withResourceDeadline as Tt, parseBootstrapMarker as Tu, waitForIndexesSettled as U, s3BucketRegionalDomainName as Ua, recordedNoEchoValuesOf as Uc, DBPROXY_TAG_OPTIONS as Ui, crossPrefixDeniedWarning as Ul, inheritProducerRegions as Un, isReadableResourceEntry as Uo, replacedDeleteFailureVerdict as Ur, withheldAccountClause as Us, recordDisplacedSkips as Ut, redactedCause as Uu, maskedLogger as V, s3BucketDomainName as Va, readbackPathFor as Vc, resolveBucketRegion as Vd, markDeleteStarted as Vi, CrossPrefixScanCache as Vl, findNestedStackTypeChanges as Vn, hasReadableResources as Vo, getStackRecords as Vr, unreadableOrphanRecords as Vs, getNestedRevertRun as Vt, partitionSensitiveEnv as Vu, planVectorIndexUpdates as W, s3BucketWebsiteUrl as Wa, valueAtCoordinate as Wc, planTagDiff as Wi, isAccessDenied$1 as Wl, REDACTED_DELETE_ADDRESS_SKIP_REASON as Wn, malformedDriftResourcePropertiesWarning as Wo, bold as Wr, findActionableSilentDrops as Ws, revertNestedChildFromJournal as Wt, redactedDockerCause as Wu, isTtlRateLimited as X, recordedOutputReferenceRegions as Xa, carryLogOnlyValues as Xc, stringifyIfAssigned as Xi, describeRegionValueKind as Xl, nameGenerationCarriedFrom as Xn, malformedOrphanRecordsRefusalMessage as Xo, addSuperseded as Xr, hasNoCloudControlHandlers as Xs, deleteJournaledOrphans as Xt, Synthesizer as Xu, isTtlAlreadyDisabled as Y, outputReferenceProvenanceOf as Ya, snapshotPassProvenance as Yc, definedAttributes as Yi, acceptedCreateOnlyDropsOf as Yl, updatePartialReason as Yn, malformedLocalResourcesWarning as Yo, yellow as Yr, NO_CC_HANDLERS_REASON as Ys, withNestedStackContext as Yt, getDockerImageBySourceHash as Yu, planTimeToLive as Z, recordedReferenceRegions as Za, createUnionSecretMasker as Zc, CC_BROKEN_REASON as Zi, exportNamesCarriedFrom as Zl, nameGenerationHighWaterOf as Zn, malformedOrphanRecordsWarning as Zo, deleteSupersededEntry as Zr, findReplacedReadersOfRecreateTargets as Zs, dropFailedCommands as Zt, synthesisStatusMessage as Zu, streamMemberRefusals as _, deleteIndeterminateGuards as _a, requireConfigString as _c, decodeListingKey as _d, secretNamePrintingBag as _i, spelledKeysOf as _l, pendingMovesOutOf as _n, carriesDynamicReference as _o, noEchoParameterValueSeed as _r, refuseMalformedOutputs as _s, renderNestedTemplateTreeDefect as _t, loadPublishableAssetManifest as _u, isProtectionValueActive as a, isCustomResourceType as aa, isWarmThroughputDecrease as ac, resolveStateBucketWithDefault as ad, withoutSuperseded as ai, unionOfSecretBags as al, chunks as an, applyCallerIdentityCredentials as ao, reachableDivergentParameters as ar, malformedResourcePropertiesWarning as as, markRefusedBeforeApplying as at, orphansCarriedFrom as au, CONTRIBUTOR_INSIGHTS_KEY as b, withIndeterminateGuard as ba, describeTypeWithThrottleRetry as bc, canonicalizeRegion as bd, secretNamedRecordNeedles as bi, recordNestedStackParameterExpressions as bl, replayFailedOperations as bn, keepsSecretReferenceToken as bo, isExportAliasCollision as br, refuseMalformedResourceEntries as bs, conditionInputsFrom as bt, BOOTSTRAP_MARKER_PREFIX as bu, DynamoDBGlobalTableProvider as c, CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID as ca, coerceCfnBoolean as cc, stateBucketExistenceConfirmed as cd, noEchoExactEchoLeavesOf as ci, maskSecretsInError as cl, withApiLimit as cn, classifyRecordedSecretRegion as co, displayTextOrWithheld as cr, malformedStateRefusalMessage as cs, crossStackOutputProvenanceSource as ct, PhaseClock as cu, declaredStreamPolicyMember as d, CloudControlProvider as da, configIntegerRefusal as dc, CFN_TEMPLATE_BODY_LIMIT as dd, createReadOnlyAttributeHealerFactory as di, withPhysicalNameCopies as dl, refactorMarkerMovesOf as dn, regionLessSecretName as do, secretBearingStateKeyWarning as dr, refuseMalformedNestedChildOutputs as ds, findServiceTokenRefusals as dt, AssetPublisher as du, isCustomResource as ea, isStatefulRecreateTargetForReplace as ec, loadCdkJson as ed, removeSuperseded as ei, logOnlyValueCount as el, journaledOrphanLines as en, assertSendableRoleArn as eo, retiredNameGenerationsAfter as er, malformedOrphansWarning as es, ECR_AUTO_DELETE_IMAGES_TAG as et, hasUnverifiableParameterRefusal as eu, declaredStreamTagsMember as f, slowCcOperationTimeoutMs as fa, configStringRefusal as fc, CFN_TEMPLATE_URL_LIMIT as fd, completedReplayEntries as fi, withoutPhysicalNameCopies as fl, refactorMarkerRefusalMessage as fn, coerceParameterTypedValue as fo, secretSafeKeyDisplay as fr, refuseMalformedOrphanRecords as fs, serviceTokenBlockingReason as ft, isSensitiveAttributeName as fu, streamDeclaresTags as g, UNSPECIFIED_SKIP_REASON as ga, requireConfigObject as gc, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as gd, orphanRecordsPrintingBag as gi, pathCrossesDottedKey as gl, hasPendingMovesOut as gn, isImpossibleEmptyStoredAttribute as go, isWholeDynamicReferenceValue as gr, refuseMalformedOrphansForOrphan as gs, listNestedTemplateRows as gt, createAssetRedirectResolver as gu, streamDeclaresPolicy as h, RollbackInlinePolicyWriters as ha, requireConfigArray as hc, uploadCfnTemplate as hd, namingSecretsWithRecordedNoEcho as hi, isUncertifiedBaselineMaskPosition as hl, updateRefactorMarker as hn, getAccountInfo as ho, exportNameSecretExposure as hr, refuseMalformedOrphansForDestroy as hs, isAbsoluteAssetPath as ht, buildAssetRedirectMap as hu, PROTECTION_PROPERTY_BY_TYPE as i, readsNoEchoDeleteValues as ia, coerceWarmThroughput as ic, resolveSkipPrefix as id, supersededResourcesOf as ii, shareLogOnlyValues as il, formatResourceLine as in, AWS_CREDENTIAL_ENV_KEYS as io, namesAnyDeclaredParameter as ir, malformedResourceEntriesWarning as is, getPriorAttempts as it, orphansAfterRollback as iu, DYNAMODB_DELETE_POLL_COST_MS as j, isUsableAttemptedName as ja, canonicalCoordinates as jc, nullPrototypeRecord as jd, unsupportedFinalSnapshotError as ji, recordNoEchoParameterFreshValue as jl, isJournaledOrphan as jn, JSON_LISTING_HOLE_VALUE as jo, rollbackOrphanIds as jr, refuseMalformedResourcesForDestroy as js, makeSiblingClaimReader as jt, resolveDockerContextDirectory as ju, DYNAMODB_DELETE_DEADLINE_MARGIN_MS as k, DiffCalculator as ka, DagBuilder as kc, hasOwnKey as kd, isFinalSnapshotError as ki, recordMaskOnlyValuesIn as kl, undeclaredEmptyObservedKeys as kn, passedParameterClassesOf as ko, hintSidesOf as kr, refuseMalformedResourcePropertiesForOrphan as ks, mergeNoChangeOutputs as kt, buildDenyExternalAccessPolicy as ku, STREAM_POLICY_KEY as l, applyCustomResourceResponseExpiration as la, coerceCfnInteger as lc, warnDeprecatedNoPrefixCliFlag as ld, noEchoParameterNamesOf as li, maskSecretsInText as ll, readRefactorMarker as ln, classifyReplaySecretRegion as lo, exportAliasCollisionScrubWarning as lr, previewableOrphanRecords as ls, inheritedProvenanceForChildDiff as lt, renderPhaseTimings as lu, reverseMapStreamPolicy as m, unchangedBehindSecretReference as ma, replayWarn as mc, findLargeInlineResources as md, maskEventTextWithBoundBags as mi, dynamicReferenceTokens as ml, sameMove as mn, parameterTypeMayLoseSecretIdentity as mo, exportNameNoEchoParameters as mr, refuseMalformedOrphans as ms, findNestedTemplateTreeDefect as mt, WorkGraph as mu, recordedProtectionEvidence as n, waitForLambdaFunctionActive as na, renderStatefulReason as nc, resolveAutoAssetStorage as nd, supersededHeldByOtherTypeWarning as ni, recordLogOnlyParameterValue as nl, makeForeignHolderScan as nn, isIamRoleArn as no, withNameGenerationReached as nr, malformedOutputsWarning as ns, hasCdkAutoDeleteTag as nt, importableOutputs as nu, perType as o, getCurrentResourceSecrets as oa, toCfnInteger as oc, resolveStateBucketWithDefaultAndSource as od, noEchoAttributeNamesOf as oi, createSecretMasker as ol, isAccessDeniedError as on, callerEnvCredentials as oo, resourcesNamingDeclaredParameter as or, malformedResourcesWarning as os, IMPLICIT_DELETE_DEPENDENCIES as ot, shouldRetainResource as ou, planStreamMemberOps as p, onlySecretReferencesDiffer as pa, readConfigString as pc, MIGRATE_TMP_PREFIX as pd, journaledOrphanPrintingBag as pi, DYNAMIC_REFERENCE_TOKEN_SCAN as pl, refuseRefactorMarker as pn, isUnboundTemplateParameter as po, carriedExportAliasExposure as pr, refuseMalformedOrphanRecordsForDestroy as ps, childTemplateLoader as pt, stringifyValue as pu, vectorIndexesSettled as q, refuseUnreadableCdkCrossAccountRefs as qa, redactForState as qc, tagMapAsList as qi, withStackInstanceIdWithheld as ql, redactedDeleteAddressSkip as qn, malformedLocalOutputsWarning as qo, green as qr, unwrittenCreateOnlyReplacement as qs, collectNestedChildUnaddressed as qt, warnFinchArgvExposure as qu, recordedProtectionNote as r, TemplateNoEchoReresolver as ra, WARM_THROUGHPUT_MEMBERS as rc, resolveCaptureObservedState as rd, supersededHolderOf as ri, recordLogOnlyValue as rl, sameJournaledOrphans as rn, sendableAssumeRoleCommand as ro, computeParameterTaint as rr, malformedRenderedContainersWarning as rs, isTruthyCfnBoolean as rt, isReadableBag as ru, readProtection as s, withPrintingSecrets as sa, toFiniteNumber as sc, resolveUseCdkBootstrapAssets as sd, noEchoComparisonForTemplate as si, errorCauseChain as sl, lookupEachName as sn, envCredentialsAreAssumedRole as so, WITHHELD_NAME_DISPLAY as sr, malformedScrubResourceEntriesRefusalMessage as ss, computeImplicitDeleteEdges as st, stackInstanceIdCarriedFrom as su, DeployEngine as t, wouldReturnToSdkProvider as ta, isStatefulRecreateTargetSync as tc, resolveApp as td, supersededAfterRollback as ti, printingCorpusOf as tl, loadJournaledOrphans as tn, explicitRoleArnOrThrow as to, retiredNameGenerationsLeaving as tr, malformedOutputsRefusalMessage as ts, S3_AUTO_DELETE_OBJECTS_TAG as tt, importableOutputKeys as tu, STREAM_TAGS_KEY as u, customResourceResponseExpirationWarning as ua, configBooleanRefusal as uc, ssmResolvedValueType as ud, withAttemptedItemsMasked as ui, scrubResourceRecord as ul, readRefactorMarkerOnce as un, producerRegionsFromState as uo, secretBearing as ur, refuseDivergentRecordRegionForDestroy as us, deferredServiceTokenWarning as ut, timePhase as uu, streamPolicyMatchesDeclared as v, deleteLeftInPlace as va, prefetchCreateOnlyPropertyPaths as vc, expectedOwnerParam as vd, secretNamePrintingBags as vi, identityKeyFor as vl, pendingMovesRefusalMessage as vn, carriesFetchableDynamicReference as vo, collectDeclaredOutputNames as vr, refuseMalformedOutputsForDestroy as vs, templateIdentity as vt, rewriteTemplateAssetReferences as vu, planIndexContributorInsightsOps as w, ec2InstanceProtectionSite as wa, ecsServiceLaunchTypeSetOrChanged as wc, processStackMessages as wd, PRE_DELETE_SNAPSHOT_TYPES as wi, recordPhysicalNameCopy as wl, settleUnsettledPrevious as wn, lacksRecordedTableArn as wo, maskingRetryLogger as wr, refuseMalformedResourceEntriesForImportSave as ws, enclosingDeadlineRemainingMs as wt, isCrossRegionRedirect as wu, contributorInsightsRefusals as x, isWaitAbandonedError as xa, withRetry as xc, derivePartitionAndUrlSuffix as xd, stateSecretNameNeedles as xi, recoverMaskedOutput as xl, replayRollback as xn, AWS_NO_VALUE as xo, bindingSkippedOutputs as xr, refuseMalformedResourceEntriesForDeploy as xs, parentSuppliedValues as xt, assertAssetBucketRegion as xu, streamTagsMatchDeclared as y, deleteSkipReason as ya, templateResourceTypes as yc, PARTITION_TABLE as yd, secretNamedAttributeNamesOf as yi, inheritNestedStackParameterAssociations as yl, refusePendingMovesOut as yn, isNamelessDynamicReferenceError as yo, collectPublishedOutputNames as yr, refuseMalformedResourceAttributesForOrphan as ys, conditionFingerprint as yt, AssetModeResolver as yu, TABLE_INDEX_NOUN as z, isSettledInstanceState as za, noEchoOutputsComparison as zc, injectedAwsRegionValue as zd, extractDeploymentEventError as zi, rebuildClientForBucketRegion as zl, seedsDeleteFirstGuard as zn, hasReadableOrphans as zo, awaitInFlightSibling as zr, repairMalformedResourcesForReadOnly as zs, displacedPhysicalIdShown as zt, isDockerClientEnvKey as zu };
-//# sourceMappingURL=deploy-engine-pGWgnV-6.js.map
+export { isTtlRateLimited as $, sendableAssumeRoleCommand as $a, recordLogOnlyValue as $c, waitForLambdaFunctionActive as $i, isReadableBag as $l, nameGenerationCarriedFrom as $n, malformedRenderedContainersWarning as $o, supersededHeldByOtherTypeWarning as $r, WARM_THROUGHPUT_MEMBERS as $s, deleteJournaledOrphans as $t, resolveCaptureObservedState as $u, resolvedResourceTimeoutMs as A, unsettledPropertiesOf as Aa, maskReadbackAtCoordinates as Ac, describeFileReadFailure as Ad, ledgerForStack as Ai, WHOLE_DYNAMIC_REFERENCE_PATTERN as Al, equalModuloMarkedMask as An, UNREADABLE_ORPHANS_CONTAINER_ROW as Ao, formatDestructiveChange as Ar, repairMalformedOrphanRecordsForReadOnly as As, isSecretBearingReferenceString as At, describeDockerFailure as Au, DELETE_INDEX_WAIT_PROCEED_NOTE as B, s3BucketWebsiteUrl as Ba, valueAtCoordinate as Bc, DBPROXY_TAG_OPTIONS as Bi, isAccessDenied$1 as Bl, replacementNeverSwapped as Bn, malformedDriftResourcePropertiesWarning as Bo, proposeRenames as Br, findActionableSdkUnwired as Bs, NESTED_PENDING_PARENT_REASON as Bt, redactedDockerCause as Bu, planContributorInsightsOp as C, reDisableInstanceApiTermination as Ca, lambdaFunctionNameForMask as Cc, utf8ByteLength as Cd, ccRoutedFinalSnapshotError as Ci, provenPublicValue as Cl, replayFailedOperations as Cn, withSharedDrainBudget as Co, isExportAliasCollision as Cr, refuseMalformedResourcePropertiesForDrift as Cs, conditionInputsFrom as Ct, validateAssetBucketName as Cu, reverseMapTableContributorInsights as D, isUsableAttemptedName as Da, canonicalCoordinates as Dc, nullPrototypeRecord as Dd, refusesFinalSnapshot as Di, recordNoEchoParameterFreshValue as Dl, settleUnsettledPrevious as Dn, JSON_LISTING_HOLE_VALUE as Do, maskingRetryLogger as Dr, refuseMalformedResourcesForDestroy as Ds, enclosingDeadlineRemainingMs as Dt, resolveDockerContextDirectory as Du, reverseMapIndexContributorInsights as E, INTRINSIC_KEYS as Ea, TemplateParser as Ec, hasPlainPrototype$1 as Ed, isFinalSnapshotError as Ei, recordNoEchoAttributeValues as El, recordAfterRollbackUpdate as En, declaresNoEcho as Eo, DEFAULT_RESOURCE_WARN_AFTER_MS as Er, refuseMalformedResourcesForDeploy as Es, enclosingDeadlineExpired as Et, buildDockerImage as Eu, beginDeleteWait as F, isSettledInstanceState as Fa, noEchoOutputsComparison as Fc, injectedAwsRegionValue as Fd, DeploymentEventsStore as Fi, rebuildClientForBucketRegion as Fl, isReplacementOrphan as Fn, hasReadableOrphans as Fo, withMovedTo as Fr, repairMalformedResourcesForReadOnly as Fs, planOrphanAdoption as Ft, isDockerClientEnvKey as Fu, relayedIndexBusyDelete as G, outputReferenceProvenanceOf as Ga, snapshotPassProvenance as Gc, tagPlanWarning as Gi, acceptedCreateOnlyDropsOf as Gl, getCurrentProducerRegions as Gn, malformedLocalResourcesWarning as Go, withStackRecords as Gr, NO_CC_HANDLERS_REASON as Gs, nestedChildStackName as Gt, getDockerImageBySourceHash as Gu, TABLE_INDEX_NOUN as H, producerLookupOver as Ha, markSameGenerationBag as Hc, readTagList as Hi, stackInstanceIdOf as Hl, seedsDeleteFirstGuard as Hn, malformedExportSourceWarning as Ho, awaitInFlightSibling as Hr, findSdkUnwiredProperties as Hs, displacedPhysicalIdShown as Ht, runDockerStreaming as Hu, compensateRemovedDeletionProtection as I, s3BucketArn as Ia, passedNoEchoParametersOf as Ic, clearBucketRegionCache as Id, extractDeploymentEventError as Ii, CrossPrefixReadError as Il, planFailedOps as In, hasReadableOutputs as Io, isPairableType as Ir, unpreviewableOrphanRecords as Is, pendingRequestCount as It, isMalformedEnvKey as Iu, readbackVectorIndexes as J, applyRoleArnIfSet as Ja, hasMaskableValues as Jc, CC_BROKEN_REASON as Ji, hasReadableExportSet as Jl, isRedactedRecordedValue as Jn, malformedOrphanRowsKeptWarning as Jo, deleteSupersededEntry as Jr, shownType as Js, revertedNestedRowIds as Jt, getDefaultStateBucketName as Ju, waitForIndexesSettled as K, recordedOutputReferenceRegions as Ka, carryLogOnlyValues as Kc, definedAttributes as Ki, describeRegionValueKind as Kl, inheritProducerRegions as Kn, malformedOrphanRecordsRefusalMessage as Ko, replacedDeleteFailureVerdict as Kr, hasNoCloudControlHandlers as Ks, recordDisplacedSkips as Kt, Synthesizer as Ku, deleteBudgetKey as L, s3BucketDomainName as La, readbackPathFor as Lc, resolveBucketRegion as Ld, isRefusedByName as Li, CrossPrefixScanCache as Ll, planRollback as Ln, hasReadableResources as Lo, looselyEqual as Lr, unreadableOrphanRecords as Ls, resolvePendingCloudControlRequests as Lt, partitionSensitiveEnv as Lu, DYNAMODB_DELETE_DEADLINE_MARGIN_MS as M, withoutUnsettledProperties as Ma, maskedLeafCoordinatesOf as Mc, renderAssemblyPathEscape as Md, withCreateTokenLedger as Mi, LockManager as Ml, undeclaredEmptyObservedKeys as Mn, accountArgs as Mo, hintSidesOf as Mr, repairMalformedOutputsForReadOnly as Ms, mergeNoChangeOutputs as Mt, finchSecretArgvRefusal as Mu, DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS as N, IntrinsicFunctionResolver as Na, noEchoCoordinatesOf as Nc, resolveAssemblyPath as Nd, acquireIdempotencyToken as Ni, isLockInfoExpired as Nl, demoteSupersededOrphans as Nn, deployRefusesOrphanRowsReason as No, movedToHint as Nr, repairMalformedResourceEntriesForReadOnly as Ns, makeCanonicalizePropertiesFn as Nt, formatDockerLoginError as Nu, stripIndexContributorInsights as O, unsettledItemsField as Oa, isMarkedCoordinate as Oc, ownValue as Od, unsupportedFinalSnapshotError as Oi, recordProvenPublicExpression as Ol, withUnprovenUnsettled as On, STATE_REGION_DIVERGED as Oo, constructPathOf as Or, refuseMalformedResourcesForExport as Os, withResourceDeadline as Ot, describeDockerCapturedOutput as Ou, DYNAMODB_DELETE_POLL_COST_MS as P, poisonRenderedSpellingsCollidingIn as Pa, noEchoLeavesOf as Pc, injectAwsRegion as Pd, DeploymentEventsReader as Pi, S3StateBackend as Pl, isJournaledOrphan as Pn, displayLogicalId as Po, rollbackOrphanIds as Pr, repairMalformedResourcePropertiesForReadOnly as Ps, makeSiblingClaimReader as Pt, getDockerCmd as Pu, isTtlAlreadyDisabled as Q, isIamRoleArn as Qa, recordLogOnlyParameterValue as Qc, wouldReturnToSdkProvider as Qi, importableOutputs as Ql, updatePartialReason as Qn, malformedOutputsWarning as Qo, supersededAfterRollback as Qr, renderStatefulReason as Qs, withNestedStackContext as Qt, resolveAutoAssetStorage as Qu, resolveDynamoDbDeleteBudgetClock as R, s3BucketDualStackDomainName as Ra, readsNoEchoSource as Rc, markDeleteStarted as Ri, applyCrossPrefixScan as Rl, recheckFailedPlan as Rn, isReadableOrphanRecord as Ro, mappingPairs as Rr, unreadableResourceEntries as Rs, keptForRetainedRecord as Rt, redactDockerArgvValues as Ru, indexDeclaresContributorInsights as S, observeThenDisableInstanceApiTermination as Sa, canonicalLambdaFunctionName as Sc, parseFailureDebugDetail as Sd, buildFinalSnapshotIdentifier as Si, carriesSecretMask as Sl, refusePendingMovesOut as Sn, parseWebACLArn as So, collectPublishedOutputNames as Sr, refuseMalformedResourcePropertiesForDestroy as Ss, conditionFingerprint as St, readBootstrapMarkerBody as Su, readContributorInsightsSpec as T, DiffCalculator as Ta, DagBuilder as Tc, hasOwnKey as Td, effectiveDeletionPolicy as Ti, recordMaskOnlyValuesIn as Tl, removeProtectionTypeList as Tn, passedParameterClassesOf as To, DEFAULT_RESOURCE_TIMEOUT_MS as Tr, refuseMalformedResourcePropertiesForOrphan as Ts, readRecordedConditionVerdicts as Tt, buildDenyExternalAccessPolicy as Tu, deleteTableWithIndexBusyRetry as U, refuseUnreadableCdkCrossAccountRefs as Ua, redactForState as Uc, refuseMalformedDesiredTags as Ui, withStackInstanceIdWithheld as Ul, orphanNeedsIdentity as Un, malformedLocalOutputsWarning as Uo, destroyStackRecordsView as Ur, unwrittenCreateOnlyReplacement as Us, dropSettledNestedJournals as Ut, warnFinchArgvExposure as Uu, INDEX_SETTLE_POLL_INTERVAL_MS as V, resolveDynamicReferences as Va, liveMatchesUnresolvedTokenFrame as Vc, planTagDiff as Vi, isNotImplemented as Vl, resolveReplacementOldType as Vn, malformedExportNamesWarning as Vo, refuseRestoreFromItself as Vr, findHandledUnwrittenCreateOnly as Vs, displacedOpClause as Vt, runDockerForeground as Vu, maskedLogger as W, keepHeldTokenProvenance as Wa, recordReferenceProvenanceEntry as Wc, tagMapAsList as Wi, splitImportedOps as Wl, findNestedStackTypeChanges as Wn, malformedLocalResourceEntriesWarning as Wo, getStackRecords as Wr, withoutSdkUnwiredProperties as Ws, getNestedRevertRun as Wt, AssetManifestLoader as Wu, vectorIndexesSettled as X, assertSendableRoleArn as Xa, logOnlyValueCount as Xc, ccBrokenReason as Xi, hasUnverifiableParameterRefusal as Xl, redactedDeleteAddressSkip as Xn, malformedOrphansWarning as Xo, isSupersededResourceRecord as Xr, isStatefulRecreateTargetForReplace as Xs, collectNestedChildUnaddressed as Xt, loadCdkJson as Xu, vectorIndexesForCreate as Y, assertFlagRoleArn as Ya, literalSplitDelimitersOf as Yc, ProviderRegistry as Yi, hasReasonlessBaselineRefusal as Yl, redactedDeleteAddressFields as Yn, malformedOrphansRefusalMessage as Yo, holdsSupersededResources as Yr, MULTI_REGION_RECREATE_BLOCKED_TYPES as Ys, withNestedRevertRun as Yt, getLegacyStateBucketName as Yu, vectorIndexesShapeDetail as Z, explicitRoleArnOrThrow as Za, printingCorpusOf as Zc, isCustomResource as Zi, importableOutputKeys as Zl, updatePartialMessage as Zn, malformedOutputsRefusalMessage as Zo, removeSuperseded as Zr, isStatefulRecreateTargetSync as Zs, getCurrentNestedStackContext as Zt, resolveApp as Zu, streamMemberRefusals as _, withIndeterminateGuard as _a, withRetry as _c, derivePartitionAndUrlSuffix as _d, secretNamedRecordNeedles as _i, recoverMaskedOutput as _l, sameMove as _n, AWS_NO_VALUE as _o, exportNameNoEchoParameters as _r, refuseMalformedResourceEntriesForDeploy as _s, findNestedTemplateTreeDefect as _t, assertAssetBucketRegion as _u, isProtectionValueActive as a, CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID as aa, coerceCfnInteger as ac, warnDeprecatedNoPrefixCliFlag as ad, noEchoExactEchoLeavesOf as ai, maskSecretsInText as al, makeForeignHolderScan as an, classifyReplaySecretRegion as ao, withNameGenerationReached as ar, previewableOrphanRecords as as, hasCdkAutoDeleteTag as at, renderPhaseTimings as au, CONTRIBUTOR_INSIGHTS_KEY as b, ec2InstanceProtectionSite as ba, ecsServiceLaunchTypeSetOrChanged as bc, processStackMessages as bd, ATOMIC_FINAL_SNAPSHOT_TYPES as bi, recordPhysicalNameCopy as bl, pendingMovesOutOf as bn, lacksRecordedTableArn as bo, noEchoParameterValueSeed as br, refuseMalformedResourceEntriesForImportSave as bs, renderNestedTemplateTreeDefect as bt, isCrossRegionRedirect as bu, DynamoDBGlobalTableProvider as c, CloudControlProvider as ca, configStringRefusal as cc, CFN_TEMPLATE_URL_LIMIT as cd, createReadOnlyAttributeHealerFactory as ci, withoutPhysicalNameCopies as cl, chunks as cn, coerceParameterTypedValue as co, reachableDivergentParameters as cr, refuseMalformedOrphanRecords as cs, markRefusedBeforeApplying as ct, isSensitiveAttributeName as cu, declaredStreamPolicyMember as d, unchangedBehindSecretReference as da, requireConfigArray as dc, uploadCfnTemplate as dd, maskEventTextWithBoundBags as di, isUncertifiedBaselineMaskPosition as dl, withApiLimit as dn, getAccountInfo as do, displayTextOrWithheld as dr, refuseMalformedOrphansForDestroy as ds, crossStackOutputProvenanceSource as dt, buildAssetRedirectMap as du, TemplateNoEchoReresolver as ea, coerceWarmThroughput as ec, resolveSkipPrefix as ed, supersededHolderOf as ei, shareLogOnlyValues as el, dropFailedCommands as en, AWS_CREDENTIAL_ENV_KEYS as eo, nameGenerationHighWaterOf as er, malformedResourceEntriesWarning as es, planTimeToLive as et, orphansAfterRollback as eu, declaredStreamTagsMember as f, RollbackInlinePolicyWriters as fa, requireConfigObject as fc, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as fd, namingSecretsWithRecordedNoEcho as fi, pathCrossesDottedKey as fl, readRefactorMarker as fn, isImpossibleEmptyStoredAttribute as fo, exportAliasCollisionScrubWarning as fr, refuseMalformedOrphansForOrphan as fs, inheritedProvenanceForChildDiff as ft, createAssetRedirectResolver as fu, streamDeclaresTags as g, deleteSkipReason as ga, describeTypeWithThrottleRetry as gc, canonicalizeRegion as gd, secretNamedAttributeNamesOf as gi, recordNestedStackParameterExpressions as gl, refuseRefactorMarker as gn, keepsSecretReferenceToken as go, carriedExportAliasExposure as gr, refuseMalformedResourceEntries as gs, childTemplateLoader as gt, BOOTSTRAP_MARKER_PREFIX as gu, streamDeclaresPolicy as h, deleteLeftInPlace as ha, templateResourceTypes as hc, PARTITION_TABLE as hd, secretNamePrintingBags as hi, inheritNestedStackParameterAssociations as hl, refactorMarkerRefusalMessage as hn, isNamelessDynamicReferenceError as ho, secretSafeKeyDisplay as hr, refuseMalformedResourceAttributesForOrphan as hs, serviceTokenBlockingReason as ht, AssetModeResolver as hu, PROTECTION_PROPERTY_BY_TYPE as i, withPrintingSecrets as ia, coerceCfnBoolean as ic, stateBucketExistenceConfirmed as id, noEchoComparisonForTemplate as ii, maskSecretsInError as il, loadJournaledOrphans as in, classifyRecordedSecretRegion as io, retiredNameGenerationsLeaving as ir, malformedStateRefusalMessage as is, S3_AUTO_DELETE_OBJECTS_TAG as it, PhaseClock as iu, setResolvedResourceTimeouts as j, withUnsettledProperties as ja, maskWholeValue as jc, displayAssemblyPath as jd, reserveStackCreateToken as ji, isSingleDynamicReferenceToken as jl, equalModuloMask as jn, UNREADABLE_RESOURCES_MAP_ROW as jo, findRefactorHints as jr, repairMalformedOrphansForReadOnly as js, keptWholeReasonText as jt, dockerSpawnEnvWithSensitive as ju, waitForGoneAfterDelete as k, unsettledItemsOf as ka, maskAtCoordinates as kc, absoluteAssemblyPathEscape as kd, earliestDefined as ki, wholeStringLeavesOf as kl, calculateResourceDrift as kn, STATE_RESOURCES_MALFORMED as ko, findDestructiveChanges as kr, refuseMalformedState as ks, diffSecurity as kt, describeDockerExecFailure as ku, STREAM_POLICY_KEY as l, slowCcOperationTimeoutMs as la, readConfigString as lc, MIGRATE_TMP_PREFIX as ld, completedReplayEntries as li, DYNAMIC_REFERENCE_TOKEN_SCAN as ll, isAccessDeniedError as ln, isUnboundTemplateParameter as lo, resourcesNamingDeclaredParameter as lr, refuseMalformedOrphanRecordsForDestroy as ls, IMPLICIT_DELETE_DEPENDENCIES as lt, stringifyValue as lu, reverseMapStreamPolicy as m, deleteIndeterminateGuards as ma, prefetchCreateOnlyPropertyPaths as mc, expectedOwnerParam as md, secretNamePrintingBag as mi, identityKeyFor as ml, refactorMarkerMovesOf as mn, carriesFetchableDynamicReference as mo, secretBearingStateKeyWarning as mr, refuseMalformedOutputsForDestroy as ms, findServiceTokenRefusals as mt, rewriteTemplateAssetReferences as mu, recordedProtectionEvidence as n, isCustomResourceType as na, toCfnInteger as nc, resolveStateBucketWithDefaultAndSource as nd, withoutSuperseded as ni, createSecretMasker as nl, isHandledOrphan as nn, callerEnvCredentials as no, retiredAfterRollback as nr, malformedResourcesWarning as ns, sendTtlWaitingOutRateLimit as nt, shouldRetainResource as nu, perType as o, applyCustomResourceResponseExpiration as oa, configBooleanRefusal as oc, ssmResolvedValueType as od, noEchoParameterNamesOf as oi, scrubResourceRecord as ol, sameJournaledOrphans as on, producerRegionsFromState as oo, computeParameterTaint as or, refuseDivergentRecordRegionForDestroy as os, isTruthyCfnBoolean as ot, timePhase as ou, planStreamMemberOps as p, UNSPECIFIED_SKIP_REASON as pa, requireConfigString as pc, decodeListingKey as pd, orphanRecordsPrintingBag as pi, spelledKeysOf as pl, readRefactorMarkerOnce as pn, carriesDynamicReference as po, secretBearing as pr, refuseMalformedOutputs as ps, deferredServiceTokenWarning as pt, loadPublishableAssetManifest as pu, planVectorIndexUpdates as q, recordedReferenceRegions as qa, createUnionSecretMasker as qc, stringifyIfAssigned as qi, exportNamesCarriedFrom as ql, REDACTED_DELETE_ADDRESS_SKIP_REASON as qn, malformedOrphanRecordsWarning as qo, addSuperseded as qr, findReplacedReadersOfRecreateTargets as qs, revertNestedChildFromJournal as qt, synthesisStatusMessage as qu, recordedProtectionNote as r, getCurrentResourceSecrets as ra, toFiniteNumber as rc, resolveUseCdkBootstrapAssets as rd, noEchoAttributeNamesOf as ri, errorCauseChain as rl, journaledOrphanLines as rn, envCredentialsAreAssumedRole as ro, retiredNameGenerationsAfter as rr, malformedScrubResourceEntriesRefusalMessage as rs, ECR_AUTO_DELETE_IMAGES_TAG as rt, stackInstanceIdCarriedFrom as ru, readProtection as s, customResourceResponseExpirationWarning as sa, configIntegerRefusal as sc, CFN_TEMPLATE_BODY_LIMIT as sd, withAttemptedItemsMasked as si, withPhysicalNameCopies as sl, formatResourceLine as sn, regionLessSecretName as so, namesAnyDeclaredParameter as sr, refuseMalformedNestedChildOutputs as ss, getPriorAttempts as st, AssetPublisher as su, DeployEngine as t, readsNoEchoDeleteValues as ta, isWarmThroughputDecrease as tc, resolveStateBucketWithDefault as td, supersededResourcesOf as ti, unionOfSecretBags as tl, dropFailedHint as tn, applyCallerIdentityCredentials as to, nameScopeOf as tr, malformedResourcePropertiesWarning as ts, readTtlSpec as tt, orphansCarriedFrom as tu, STREAM_TAGS_KEY as u, onlySecretReferencesDiffer as ua, replayWarn as uc, findLargeInlineResources as ud, journaledOrphanPrintingBag as ui, dynamicReferenceTokens as ul, lookupEachName as un, parameterTypeMayLoseSecretIdentity as uo, WITHHELD_NAME_DISPLAY as ur, refuseMalformedOrphans as us, computeImplicitDeleteEdges as ut, WorkGraph as uu, streamPolicyMatchesDeclared as v, isWaitAbandonedError as va, blockDeviceMappingsDifferOnlyInDeleteOnTermination as vc, AssemblyReader as vd, stateSecretNameNeedles as vi, physicalNameCopiesOf as vl, updateRefactorMarker as vn, cfnRefValueFromPhysicalId as vo, exportNameSecretExposure as vr, refuseMalformedResourceEntriesForDestroy as vs, isAbsoluteAssetPath as vt, ensureAssetStorage as vu, planIndexContributorInsightsOps as w, reEnableInstanceApiTermination as wa, sameLambdaFunctionAddress as wc, defineOwnKey as wd, createPreDeleteFinalSnapshot as wi, recordMaskOnlyValue as wl, replayRollback as wn, parameterInputsFor as wo, bindingSkippedOutputs as wr, refuseMalformedResourcePropertiesForExport as ws, parentSuppliedValues as wt, validateContainerRepoName as wu, contributorInsightsRefusals as x, isTerminationProtectionPropagationError as xa, emrClusterInstancesReplaced as xc, describeJsonParseFailure as xd, PRE_DELETE_SNAPSHOT_TYPES as xi, splitGetAttStringForm as xl, pendingMovesRefusalMessage as xn, refStateLookupFromResource as xo, collectDeclaredOutputNames as xr, refuseMalformedResourceEntriesForOrphan as xs, templateIdentity as xt, parseBootstrapMarker as xu, streamTagsMatchDeclared as y, disableInstanceApiTermination as ya, dbInstanceEngineChangeIsInPlace as yc, StageLoadError as yd, storedSecretNameNeedles as yi, recordAttributeIdCopy as yl, hasPendingMovesOut as yn, isStalePlaceholderArnAttribute as yo, isWholeDynamicReferenceValue as yr, refuseMalformedResourceEntriesForImport as ys, listNestedTemplateRows as yt, getBootstrapMarkerKey as yu, resolveDynamoDbDeleteBudgetMs as z, s3BucketRegionalDomainName as za, recordedNoEchoValuesOf as zc, DBPROXY_TAGS_WHAT as zi, crossPrefixDeniedWarning as zl, recordUnderIdIsNotOwn as zn, isReadableResourceEntry as zo, parseMappingFile as zr, withheldAccountClause as zs, recordRetainedForReadoption as zt, redactedCause as zu };
+//# sourceMappingURL=deploy-engine-q2VQt7uX.js.map