@go-to-k/cdkd 0.322.0 → 0.322.1

package/dist/{deploy-engine-BC5pwkqY.js → deploy-engine-q2VQt7uX.js}

@@ -2,7 +2,7 @@ import { c as __exportAll, r as getAwsClients } from "./aws-clients-DWpHZk2l.js"
 import { $ as safeMsg, B as SAFE_MSG_ALTERED_CHAR, C as fallbackNamePropertyFor, D as getCurrentSkipPrefix, E as generatedNameFor, F as withNameGeneration, H as STACK_REF_MAX_CODE_POINTS, I as withSkipPrefix, J as displaySafe, K as displayAwsMessage, L as withStackScope, M as looksLikeCdkdGeneratedName, O as getCurrentStackInstanceId, P as stackInstanceNameSuffix, Q as plainIdentOr, R as withStackScopeBeforeStateRead, S as explicitNamePropertyFor, T as generateResourceNameWithFallback, U as UNRENDERABLE, V as SECRET_REF_MAX_CODE_POINTS, W as asIsMessage, X as isPasteableIdent, Y as displayStackName, a as safeStringify$1, b as currentNameGeneration, c as isStdoutReservedForPayload, f as currentLogLineMasker, j as isNameGeneration, k as getCurrentStackName, m as getLiveRenderer, n as describeAwsFailure, nt as truncateCodePoints, p as installLogLineMaskerSource, q as displayIdent, s as getLogger, t as VERBOSE_POINTER, tt as terminalSafe, v as alternateNamePropertiesFor, y as applyDefaultNameForFallback, z as withoutGeneratedFallbackName } from "./aws-failure-text-DiHodi76.js";
 import { $ as isTerminalDeleteFailure, $n as physicalIdShownBesideCommand, $t as formatLockExpiry, An as MalformedProducerRecordRefusalError, Ar as isThrottlingError, At as stateOrphanRecordRemedy, B as normalizeAwsTagsToCfn, Bt as createdBeforeFailure, Cn as DeploymentNotApprovedError, Dr as retryClassificationText, Er as isTransientServerError, Et as logicalIdShown, F as assertRegionMatch, Fn as ResourceUpdateNotSupportedError, Ft as maskerOrIdentity, Gt as markAuxiliaryFailure, H as refusalTypeShown, Hn as isSoftAbort, Ht as hasCreatedBeforeFailure, It as withDerivedNameMasks, Jn as UNSHOWABLE_VALUE, Jt as replayMadeAnotherResource, K as ProtectionFlipRegistry, Kn as SHELL_ACTIVE, Kt as markCreatedBeforeFailure, Lt as RETRY_AUXILIARY_OWNER, M as RESOURCE_NOT_FOUND, Mr as markRedactedCause, Mt as createMaskedRetryLogger, N as isMarkedNotGone, Nn as ProvisioningError, Nr as wrapMaskedAwsError, Nt as isSecretDerivedValue, On as LockError, Ot as resourceTypeShown, P as markNotGone, Pn as ResourceTimeoutError, Pt as maskDeep, Qn as pasteableCommand, Rn as StateError, Rt as carryCreatedBeforeFailure, Sr as isAmbiguousOutcomeError, St as canonicalizeRoute53QueryName, Tn as IntrinsicResolutionRefusalError, Tr as isRetryableTransientError, Un as normalizeAwsError, Ut as isAuxiliaryFailure, V as quotedRemedyLogicalId, Vt as createdResourceIdentityBeforeFailure, W as resolveExplicitPhysicalId, Wt as isAuxiliaryMarkOf, Xt as buildForceUnlockCommand, Y as deleteWithProtectionCompensation, Yn as commandHole, Yt as UNREPRODUCIBLE_LOCK_CLAUSE, Zn as isInertUnquoted, _ as prepareRemovalForUpdate, _n as AssetError, _r as stripControlChars, an as DEFAULT_STATE_PREFIX, bn as CrossAccountSecretRefusalError, br as formatRetryClassificationSignals, bt as isInterruptedWaitError, cr as hasReplayMayCollide, dn as withPasteableAwsProfile, dr as isRecreateRetryableError, dt as pasteableAwsCommand, en as formatLockOperation, er as plainOrDescribed, fn as ambientClientDefaults, fr as isReplayedNameCollisionFrom, ft as protectedReplacementAdvice, gn as AccountIdUnavailableError, gr as escapeRegExp$3, gt as monotonicNowMs, h as withUnchangedSecretPrincipalLists, hn as credentialFingerprint, hr as relayedNameCollision, ht as ElapsedBudgetRegistry, i as reportCreatedResource, in as CUSTOM_RESOURCE_RESPONSE_PREFIX, ir as withheldTargetClause, it as runDeleteAttempt, j as withoutServerErrorRetries, jr as markNonRetryable, jt as createMaskedLogSinks, kn as MacroExpansionError, kr as isMarkedNonRetryable, kt as segmentAfterAnchor, ln as producerRecordKey, lr as isNameCollisionErrorFrom, mn as clientDefaultsFor, mr as markReplayMayCollide, mt as ElapsedBudget, n as clearCreatedReport, nn as recoveryCommandFlags, nr as shellBoundedDisplay, nt as protectionFlipKey, o as retractCreatedResource, on as injectiveKey, pn as ambientCredentialConfig, q as compensateProtectionFlip, qn as SHELL_ACTIVE_WHY, r as collectCreatedResources, rn as sanitizeRecoveryValue, rr as shellQuote, sr as isUpdateUnsupportedError, st as DELETION_PROTECTION_DOC_POINTER, t as CreatedResourceSink, tn as formatLockOwner, tr as quotedOrDescribed, tt as observeThenDisableProtection, u as holdsSecretDerivedEntry, ur as isNameCooldownError, v as removalWarning, vn as CdkdError, wn as DynamicReferenceRegionAmbiguousError, wr as isIamPropagationError, wt as compositeIdSeparatorRefusal, x as withoutInjectedRemovals, xn as DependencyError, xr as isAmbiguousCcHandlerErrorCode, xt as startInterruptWatch, z as isQuotableImportValue, zn as SynthesisError } from "./created-resource-sink-CmrPwGge.js";
 import { a as setAssumedRoleCredentials, c as ambientRegion, i as getPreAssumeEnvCredentials, n as awsClientDefaults, o as setPreAssumeEnvCredentials, r as getAssumedRoleCredentials, s as quietS3Logger, t as SECOND_ROLE_PUBLISH_REFUSAL } from "./aws-client-defaults-BLXFsfMa.js";
-import { n as getCdkdVersion } from "./version-BWH_L6He.js";
+import { a as red, c as getCdkdVersion, i as green, n as cyan, o as yellow, r as gray, t as bold } from "./colors-DCpTnlsT.js";
 import { createHash, randomUUID } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { CreateBucketCommand, DeleteObjectCommand, DeleteObjectsCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketReplicationCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchKey, PutBucketEncryptionCommand, PutBucketLifecycleConfigurationCommand, PutBucketPolicyCommand, PutObjectCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -15811,7 +15811,7 @@ function withRecreatedAttachmentsDropped(input) {
 const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	["AWS::ApiGateway::Account", {
 		handled: /* @__PURE__ */ new Set(["CloudWatchRoleArn"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -15829,14 +15829,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RestApiId",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AuthorizerId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::ApiGateway::Deployment", {
 		handled: /* @__PURE__ */ new Set(["Description", "RestApiId"]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["DeploymentCanarySettings", "API Gateway requires StageName for a canary deployment (\"Non null and non empty stageName must be provided for canary deployment\"), and StageName is not handled here, so a valid canary Deployment routes to Cloud Control; declare AWS::ApiGateway::Stage with CanarySetting for an SDK-routed canary"],
 			["StageDescription", "CFn-only convenience for inline-creating a Stage; declare AWS::ApiGateway::Stage with the Description property instead"],
 			["StageName", "CFn-only convenience for inline-creating a Stage from a Deployment; declare AWS::ApiGateway::Stage explicitly to attach to this Deployment"]
@@ -15861,7 +15861,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ResourceId",
 			"RestApiId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -15872,7 +15872,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PathPart",
 			"RestApiId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ResourceId"]),
 		ccRouteUnavailable: false
@@ -15894,7 +15894,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TracingEnabled",
 			"Variables"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -15912,7 +15912,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Version"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["BasePath", "OpenAPI-import-only basePath override; meaningful only on the ImportApi code path."],
 			["Body", "OpenAPI/Swagger inline spec; routed through ImportApi, not the field-by-field CreateApi path."],
 			["BodyS3Location", "OpenAPI/Swagger spec on S3; routed through ImportApi, not the field-by-field CreateApi path."],
@@ -15944,7 +15944,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"JwtConfiguration",
 			"Name"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AuthorizerId"]),
 		ccRouteUnavailable: false
@@ -15970,7 +15970,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TimeoutInMillis",
 			"TlsConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["IntegrationId"]),
 		ccRouteUnavailable: false
@@ -15990,7 +15990,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RouteResponseSelectionExpression",
 			"Target"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["RouteId"]),
 		ccRouteUnavailable: false
@@ -16009,7 +16009,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StageVariables",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -16020,7 +16020,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Description",
 			"Expires"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ApiKey",
@@ -16045,7 +16045,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ServiceRoleArn",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DataSourceArn"]),
 		ccRouteUnavailable: false
@@ -16071,7 +16071,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Visibility",
 			"XrayEnabled"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ApiId",
@@ -16090,7 +16090,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Definition",
 			"DefinitionS3Location"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16115,7 +16115,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SyncConfig",
 			"TypeName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ResolverArn"]),
 		ccRouteUnavailable: false
@@ -16159,7 +16159,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TrafficSources",
 			"VPCZoneIdentifier"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["InstanceId", "CreateAutoScalingGroup derives a new launch configuration from the instance, and AWS Launch Configurations are end-of-life 2024-10 like LaunchConfigurationName; use LaunchTemplate instead"],
 			["LaunchConfigurationName", "AWS Launch Configurations end-of-life 2024-10; use LaunchTemplate instead"],
 			["NotificationConfiguration", "Legacy singular form; use NotificationConfigurations (plural) which cdkd already wires"]
@@ -16170,7 +16170,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::BedrockAgentCore::Browser", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"BrowserArn",
@@ -16182,7 +16182,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::BedrockAgentCore::CodeInterpreter", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CodeInterpreterArn",
@@ -16200,7 +16200,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Level",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -16231,7 +16231,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RoleArn",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AgentRuntimeArn",
@@ -16251,7 +16251,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"NotificationsWithSubscribers",
 			"ResourceTags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16268,14 +16268,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"ValidationMethod"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CertificateArn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFormation::Stack", {
 		handled: /* @__PURE__ */ new Set(["Parameters", "TemplateURL"]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Capabilities", "CFn-only IAM capability declaration — cdkd does not go through CloudFormation so capabilities have no equivalent"],
 			["Description", "CFn-only informational — no semantic effect on the recursive deploy"],
 			["DisableRollback", "CFn-only — cdkd controls rollback via the top-level deploy-engine --no-rollback flag, not per nested stack"],
@@ -16305,28 +16305,28 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::CloudFormation::WaitConditionHandle", {
 		handled: /* @__PURE__ */ new Set(),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
 	}],
 	["AWS::CloudFront::CloudFrontOriginAccessIdentity", {
 		handled: /* @__PURE__ */ new Set(["CloudFrontOriginAccessIdentityConfig"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "S3CanonicalUserId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFront::Distribution", {
 		handled: /* @__PURE__ */ new Set(["DistributionConfig", "Tags"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DomainName", "Id"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::CloudFront::OriginAccessControl", {
 		handled: /* @__PURE__ */ new Set(["OriginAccessControlConfig"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16351,7 +16351,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TrailName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "SnsTopicArn"]),
 		ccRouteUnavailable: false
@@ -16386,7 +16386,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Unit",
 			"WarmUpConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -16402,7 +16402,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SingleMetricAnomalyDetector",
 			"Stat"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16435,7 +16435,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Visibility",
 			"VpcConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: true
@@ -16449,7 +16449,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Triggers"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -16495,7 +16495,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"WebAuthnRelyingPartyID",
 			"WebAuthnUserVerification"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -16520,7 +16520,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"State",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "PolicyId"]),
 		ccRouteUnavailable: false
@@ -16558,7 +16558,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UseLatestRestorableTime",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ClusterResourceId",
@@ -16582,7 +16582,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PreferredMaintenanceWindow",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Endpoint",
@@ -16598,7 +16598,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -16625,7 +16625,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"WriteOnDemandThroughputSettings",
 			"WriteProvisionedThroughputSettings"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["GlobalTableSourceArn", "Multi-account replica: CDK's TableV2MultiAccountReplica renders no KeySchema (which create() requires) and DynamoDB asks for a ResourcePolicy on the CreateTable (measured 2026-11-01), a cross-account path this provider cannot exercise. Stays on Cloud Control"],
 			["GlobalTableWitnesses", "MRSC witness; same one-call UpdateTable shape as MultiRegionConsistency, measured 2026-11-01. Stays on Cloud Control"],
 			["MultiRegionConsistency", "MRSC does not fit the per-replica serial paths: measured 2026-11-01 (us-east-1 / us-east-2 / us-west-2), the replica and witness Creates must go out in ONE UpdateTable with the mode, a lone replica Delete is refused ('does not include all witnesses'), DeleteTable is refused until they are gone, TTL is refused, and the table carries no stream, which create()'s needsStream arm would enable. Stays on Cloud Control"]
@@ -16661,7 +16661,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VectorIndexes",
 			"WarmThroughput"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ImportSourceSpecification", "S3 import uses the separate ImportTable API (not CreateTable) and is create-only with no readback; deferred to a dedicated import-from-S3 PR"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ImportSourceSpecification", "S3 import uses the separate ImportTable API (not CreateTable) and is create-only with no readback; deferred to a dedicated import-from-S3 PR"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["ImportSourceSpecification"]),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "StreamArn"]),
 		ccRouteUnavailable: false
@@ -16674,7 +16674,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PublicIpv4Pool",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Address", "Bring-your-own-IP: allocating a specific address you own is not yet supported; cdkd allocates an Amazon-owned address"],
 			["IpamPoolId", "Allocation from an IPAM pool is not yet supported"],
 			["TransferAddress", "Accepting a transferred Elastic IP is not yet supported (out-of-band EIP transfer flow)"]
@@ -16707,7 +16707,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UserData"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AdditionalInfo", "not yet implemented by cdkd"],
 			["Affinity", "not yet implemented by cdkd"],
 			["CpuOptions", "not yet implemented by cdkd"],
@@ -16760,7 +16760,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::InternetGateway", {
 		handled: /* @__PURE__ */ new Set(["Tags"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InternetGatewayId"]),
 		ccRouteUnavailable: false
@@ -16779,7 +16779,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["MaxDrainDurationSeconds", "write-only address-drain timeout with no CreateNatGateway member and no NAT gateway modify API; only ec2:DisassociateNatGatewayAddress / UnassignPrivateNatGatewayAddress accept it, and the cdkd NatGateway update releases only the AvailabilityZoneAddresses of a regional gateway, never the secondary addresses of a zonal one — routed via Cloud Control instead"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["MaxDrainDurationSeconds", "write-only address-drain timeout with no CreateNatGateway member and no NAT gateway modify API; only ec2:DisassociateNatGatewayAddress / UnassignPrivateNatGatewayAddress accept it, and the cdkd NatGateway update releases only the AvailabilityZoneAddresses of a regional gateway, never the secondary addresses of a zonal one — routed via Cloud Control instead"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AutoProvisionZones",
@@ -16792,7 +16792,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::NetworkAcl", {
 		handled: /* @__PURE__ */ new Set(["Tags", "VpcId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16809,7 +16809,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RuleAction",
 			"RuleNumber"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -16833,14 +16833,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcEndpointId",
 			"VpcPeeringConnectionId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CidrBlock"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::EC2::RouteTable", {
 		handled: /* @__PURE__ */ new Set(["Tags", "VpcId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["RouteTableId"]),
 		ccRouteUnavailable: false
@@ -16854,7 +16854,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["GroupId", "Id"]),
 		ccRouteUnavailable: false
@@ -16872,7 +16872,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SourceSecurityGroupOwnerId",
 			"ToPort"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["GroupName", "EC2-Classic-only — use GroupId for VPC security groups (EC2-Classic retired 2022-08-15)"], ["SourceSecurityGroupName", "EC2-Classic-only — use SourceSecurityGroupId for VPC peer security groups (EC2-Classic retired 2022-08-15)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["GroupName", "EC2-Classic-only — use GroupId for VPC security groups (EC2-Classic retired 2022-08-15)"], ["SourceSecurityGroupName", "EC2-Classic-only — use SourceSecurityGroupId for VPC peer security groups (EC2-Classic retired 2022-08-15)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["GroupName", "SourceSecurityGroupName"]),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16885,7 +16885,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AssignIpv6AddressOnCreation", "not yet implemented by cdkd"],
 			["AvailabilityZoneId", "not yet implemented by cdkd"],
 			["EnableDns64", "not yet implemented by cdkd"],
@@ -16918,14 +16918,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::EC2::SubnetNetworkAclAssociation", {
 		handled: /* @__PURE__ */ new Set(["NetworkAclId", "SubnetId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AssociationId"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::EC2::SubnetRouteTableAssociation", {
 		handled: /* @__PURE__ */ new Set(["RouteTableId", "SubnetId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -16938,7 +16938,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"InstanceTenancy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["Ipv4IpamPoolId", "not yet implemented by cdkd"],
 			["Ipv4NetmaskLength", "not yet implemented by cdkd"],
 			["VpcEncryptionControl", "not yet implemented by cdkd"]
@@ -16963,7 +16963,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcId",
 			"VpnGatewayId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["AttachmentType"]),
 		ccRouteUnavailable: false
@@ -16980,7 +16980,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RepositoryPolicyText",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RepositoryUri"]),
 		ccRouteUnavailable: false
@@ -16995,7 +16995,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ServiceConnectDefaults",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17031,7 +17031,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VolumeConfigurations",
 			"VpcLatticeConfigurations"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Name", "ServiceArn"]),
 		ccRouteUnavailable: false
@@ -17056,7 +17056,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TaskRoleArn",
 			"Volumes"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["InferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["InferenceAccelerators", "AWS Elastic Inference end-of-life 2024-04; use AWS Inferentia / Trainium accelerator instance families instead"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["InferenceAccelerators"]),
 		readOnly: /* @__PURE__ */ new Set(["TaskDefinitionArn"]),
 		ccRouteUnavailable: false
@@ -17068,7 +17068,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PosixUser",
 			"RootDirectory"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ClientToken", "cdkd supplies its own retry-stable ClientToken on CreateAccessPoint, so a template-supplied value would be overwritten. The SDK does not own this field either: an omitted ClientToken is auto-filled with a FRESH uuid per attempt, which leaves a retried 500 free to mint a second access point, while a caller-supplied value goes on the wire verbatim."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ClientToken", "cdkd supplies its own retry-stable ClientToken on CreateAccessPoint, so a template-supplied value would be overwritten. The SDK does not own this field either: an omitted ClientToken is auto-filled with a FRESH uuid per attempt, which leaves a retried 500 free to mint a second access point, while a caller-supplied value goes on the wire verbatim."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["ClientToken"]),
 		readOnly: /* @__PURE__ */ new Set(["AccessPointId", "Arn"]),
 		ccRouteUnavailable: false
@@ -17088,7 +17088,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ProvisionedThroughputInMibps",
 			"ThroughputMode"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ReplicationConfiguration", "Cross-region EFS replication (CreateReplicationConfiguration) provisions a separate destination file system in another region with its own lifecycle, KMS key, and availability-zone placement; replicating + then tearing down the destination on destroy is a multi-resource, cross-region orchestration that is out of scope for the single-resource SDK provider."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ReplicationConfiguration", "Cross-region EFS replication (CreateReplicationConfiguration) provisions a separate destination file system in another region with its own lifecycle, KMS key, and availability-zone placement; replicating + then tearing down the destination on destroy is a multi-resource, cross-region orchestration that is out of scope for the single-resource SDK provider."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "FileSystemId"]),
 		ccRouteUnavailable: false
@@ -17102,7 +17102,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SecurityGroups",
 			"SubnetId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -17134,7 +17134,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TransitEncryptionEnabled",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["CacheSecurityGroupNames", "EC2-Classic-only — use VpcSecurityGroupIds for VPC-deployed clusters (EC2-Classic retired 2022-08-15)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["CacheSecurityGroupNames", "EC2-Classic-only — use VpcSecurityGroupIds for VPC-deployed clusters (EC2-Classic retired 2022-08-15)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ConfigurationEndpoint", "RedisEndpoint"]),
 		ccRouteUnavailable: false
@@ -17147,7 +17147,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17165,7 +17165,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SslPolicy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["ListenerArn"]),
 		ccRouteUnavailable: false
@@ -17187,7 +17187,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CanonicalHostedZoneID",
@@ -17221,7 +17221,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UnhealthyThresholdCount",
 			"VpcId"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"LoadBalancerArns",
@@ -17261,7 +17261,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VisibleToAllUsers"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "MasterPublicDNS"]),
 		ccRouteUnavailable: true
@@ -17277,7 +17277,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TargetOnDemandCapacity",
 			"TargetSpotCapacity"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InstanceFleetId"]),
 		ccRouteUnavailable: true
@@ -17296,7 +17296,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Market",
 			"Name"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["InstanceGroupId"]),
 		ccRouteUnavailable: true
@@ -17312,7 +17312,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Policy",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17329,7 +17329,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Targets"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RuleName"]),
 		ccRouteUnavailable: false
@@ -17351,7 +17351,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"WindowsConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DNSName",
@@ -17368,7 +17368,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ConnectionInput",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Name"]),
 		ccRouteUnavailable: false
@@ -17391,7 +17391,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Targets"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17402,7 +17402,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"DatabaseInput",
 			"DatabaseName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17434,14 +17434,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Timeout",
 			"WorkerType"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
 	}],
 	["AWS::Glue::SecurityConfiguration", {
 		handled: /* @__PURE__ */ new Set(["EncryptionConfiguration", "Name"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17454,7 +17454,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"OpenTableFormatInput",
 			"TableInput"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: true
@@ -17472,7 +17472,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"WorkflowName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17485,7 +17485,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Name",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17496,7 +17496,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Status",
 			"UserName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "SecretAccessKey"]),
 		ccRouteUnavailable: true
@@ -17508,7 +17508,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Path",
 			"Policies"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17519,7 +17519,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Path",
 			"Roles"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17535,7 +17535,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Users"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"AttachmentCount",
@@ -17557,7 +17557,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Roles",
 			"Users"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -17574,7 +17574,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RoleName",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "RoleId"]),
 		ccRouteUnavailable: false
@@ -17590,14 +17590,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UserName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::IAM::UserToGroupAddition", {
 		handled: /* @__PURE__ */ new Set(["GroupName", "Users"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -17614,7 +17614,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StreamModeDetails",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["WarmThroughputMiBps", "AWS accepts it only on an account enrolled in the Kinesis minimum throughput billing commitment, so the SDK path is not wired (go-to-k/cdkd#1695); Cloud Control forwards it."]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["WarmThroughputMiBps", "AWS accepts it only on an account enrolled in the Kinesis minimum throughput billing commitment, so the SDK path is not wired (go-to-k/cdkd#1695); Cloud Control forwards it."]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "WarmThroughputObject"]),
 		ccRouteUnavailable: false
@@ -17625,7 +17625,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"StreamARN",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"ConsumerARN",
@@ -17653,14 +17653,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SplunkDestinationConfiguration",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["DatabaseSourceConfiguration", "Database as a source was a public preview AWS removed on 2025-09-24 (Firehose document history); CreateDeliveryStream refused DeliveryStreamType DatabaseAsSource in every region probed, so an SDK path could not be verified. Stays on Cloud Control"], ["SnowflakeDestinationConfiguration", "Proving the wire shape live needs a real Snowflake account, and the block carries key material (PrivateKey, KeyPassphrase). Stays on Cloud Control"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["DatabaseSourceConfiguration", "Database as a source was a public preview AWS removed on 2025-09-24 (Firehose document history); CreateDeliveryStream refused DeliveryStreamType DatabaseAsSource in every region probed, so an SDK path could not be verified. Stays on Cloud Control"], ["SnowflakeDestinationConfiguration", "Proving the wire shape live needs a real Snowflake account, and the block carries key material (PrivateKey, KeyPassphrase). Stays on Cloud Control"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["DatabaseSourceConfiguration"]),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::KMS::Alias", {
 		handled: /* @__PURE__ */ new Set(["AliasName", "TargetKeyId"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -17680,7 +17680,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RotationPeriodInDays",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "KeyId"]),
 		ccRouteUnavailable: false
@@ -17693,7 +17693,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"MaximumRetryAttempts",
 			"Qualifier"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: true
@@ -17729,7 +17729,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Topics",
 			"TumblingWindowInSeconds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["EventSourceMappingArn", "Id"]),
 		ccRouteUnavailable: false
@@ -17768,7 +17768,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TracingConfig",
 			"VpcConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "SnapStartResponse"]),
 		ccRouteUnavailable: false
@@ -17782,7 +17782,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"LayerName",
 			"LicenseInfo"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["LayerVersionArn"]),
 		ccRouteUnavailable: false
@@ -17804,7 +17804,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Resources",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17823,7 +17823,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"OperatorRole",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -17845,7 +17845,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SourceAccount",
 			"SourceArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -17858,7 +17858,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Qualifier",
 			"TargetFunctionArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["FunctionArn", "FunctionUrl"]),
 		ccRouteUnavailable: false
@@ -17875,7 +17875,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"ScalingConfig",
 			"ThrottleConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17899,7 +17899,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"KmsKeyArn",
 			"ServiceConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"CreatedAt",
@@ -17923,7 +17923,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"RetentionInDays",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["ResourcePolicyDocument", "not driven by this provider by decision (issue #1412): no CreateLogGroup / PutRetentionPolicy member carries it, and both policy lifecycles — the account-scoped AWS::Logs::ResourcePolicy type and the log-group-scoped logs:PutResourcePolicy (resourceArn + policyScope RESOURCE) — are ones this provider does not take on — routed via Cloud Control, whose handler applies it"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["ResourcePolicyDocument", "not driven by this provider by decision (issue #1412): no CreateLogGroup / PutRetentionPolicy member carries it, and both policy lifecycles — the account-scoped AWS::Logs::ResourcePolicy type and the log-group-scoped logs:PutResourcePolicy (resourceArn + policyScope RESOURCE) — are ones this provider does not take on — routed via Cloud Control, whose handler applies it"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -17958,7 +17958,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"UseLatestRestorableTime",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["GlobalClusterIdentifier", "Cloud Control owns a global-cluster member: NeptuneProvider has no detach, and a member cannot be deleted while attached (deletesThroughSdkProvider keeps its delete there too)"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["GlobalClusterIdentifier", "Cloud Control owns a global-cluster member: NeptuneProvider has no detach, and a member cannot be deleted while attached (deletesThroughSdkProvider keeps its delete there too)"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["GlobalClusterIdentifier"]),
 		readOnly: /* @__PURE__ */ new Set([
 			"ClusterResourceId",
@@ -17983,7 +17983,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"PubliclyAccessible",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["DBSnapshotIdentifier", "The CloudFormation schema documents it as not supported, and CreateDBInstance has no such member: a Neptune instance is not restored from a snapshot, its cluster is"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["DBSnapshotIdentifier", "The CloudFormation schema documents it as not supported, and CreateDBInstance has no such member: a Neptune instance is not restored from a snapshot, its cluster is"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(["DBSnapshotIdentifier"]),
 		readOnly: /* @__PURE__ */ new Set(["Endpoint", "Port"]),
 		ccRouteUnavailable: false
@@ -17995,7 +17995,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18016,7 +18016,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Target",
 			"TargetParameters"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18057,7 +18057,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VpcSecurityGroupIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AllocatedStorage", "not yet implemented by cdkd"],
 			["AssociatedRoles", "not yet implemented by cdkd"],
 			["AutoMinorVersionUpgrade", "not yet implemented by cdkd"],
@@ -18167,7 +18167,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VPCSecurityGroups"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([
+		sdkUnwired: /* @__PURE__ */ new Map([
 			["AdditionalStorageVolumes", "not yet implemented by cdkd"],
 			["ApplyImmediately", "cdkd always applies modifications immediately (rds:ModifyDBInstance.ApplyImmediately=true is hardcoded); users wanting maintenance-window deferral should run aws rds modify-db-instance directly"],
 			["AssociatedRoles", "not yet implemented by cdkd"],
@@ -18252,7 +18252,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcSecurityGroupIds",
 			"VpcSubnetIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DBProxyArn",
@@ -18271,7 +18271,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VpcSecurityGroupIds",
 			"VpcSubnetIds"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"DBProxyEndpointArn",
@@ -18290,7 +18290,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TargetGroupName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TargetGroupArn"]),
 		ccRouteUnavailable: true
@@ -18302,7 +18302,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubnetIds",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["DBSubnetGroupArn"]),
 		ccRouteUnavailable: false
@@ -18317,7 +18317,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"QueryLoggingConfig",
 			"VPCs"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id", "NameServers"]),
 		ccRouteUnavailable: false
@@ -18342,7 +18342,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"Weight"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18373,7 +18373,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"VersioningConfiguration",
 			"WebsiteConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["AccessControl", "Legacy canned ACL; AWS disables ACLs by default since 2023-04 — use BucketOwnershipControls + BucketPolicy / PublicAccessBlockConfiguration instead"], ["MetadataTableConfiguration", "V1 S3 Metadata, which the schema says to replace with MetadataConfiguration; S3 answered V1APIsNotAllowed where it was probed, so an SDK path could not be verified. Stays on Cloud Control"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["AccessControl", "Legacy canned ACL; AWS disables ACLs by default since 2023-04 — use BucketOwnershipControls + BucketPolicy / PublicAccessBlockConfiguration instead"], ["MetadataTableConfiguration", "V1 S3 Metadata, which the schema says to replace with MetadataConfiguration; S3 answered V1APIsNotAllowed where it was probed, so an SDK path could not be verified. Stays on Cloud Control"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18386,7 +18386,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 	}],
 	["AWS::S3::BucketPolicy", {
 		handled: /* @__PURE__ */ new Set(["Bucket", "PolicyDocument"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18402,14 +18402,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"MetricsConfigurations",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "AvailabilityZoneName"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::S3Tables::Namespace", {
 		handled: /* @__PURE__ */ new Set(["Namespace", "TableBucketARN"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(),
 		ccRouteUnavailable: false
@@ -18429,7 +18429,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"WithoutMetadata"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"TableARN",
@@ -18448,7 +18448,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"UnreferencedFileRemoval"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TableBucketARN"]),
 		ccRouteUnavailable: false
@@ -18459,7 +18459,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VectorBucketName"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["CreationTime", "VectorBucketArn"]),
 		ccRouteUnavailable: false
@@ -18478,7 +18478,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"State",
 			"Target"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: true
@@ -18494,7 +18494,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: false
@@ -18505,7 +18505,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Name",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "Id"]),
 		ccRouteUnavailable: false
@@ -18518,7 +18518,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Vpc"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18534,7 +18534,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Properties",
 			"Tags"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18555,7 +18555,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"Type"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "Id"]),
 		ccRouteUnavailable: false
@@ -18573,7 +18573,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"SubscriptionRoleArn",
 			"TopicArn"
 		]),
-		silentDrop: /* @__PURE__ */ new Map([["Region", "CFn-only cross-region subscription hint; cdkd uses the SDK client region directly and has no per-resource region override"]]),
+		sdkUnwired: /* @__PURE__ */ new Map([["Region", "CFn-only cross-region subscription hint; cdkd uses the SDK client region directly and has no per-resource region override"]]),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -18595,14 +18595,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TopicName",
 			"TracingConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["TopicArn"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::SNS::TopicPolicy", {
 		handled: /* @__PURE__ */ new Set(["PolicyDocument", "Topics"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -18626,14 +18626,14 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"VisibilityTimeout"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn", "QueueUrl"]),
 		ccRouteUnavailable: false
 	}],
 	["AWS::SQS::QueuePolicy", {
 		handled: /* @__PURE__ */ new Set(["PolicyDocument", "Queues"]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Id"]),
 		ccRouteUnavailable: true
@@ -18650,7 +18650,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Type",
 			"Value"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set(["Arn"]),
 		ccRouteUnavailable: false
@@ -18669,7 +18669,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"Tags",
 			"TracingConfiguration"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -18697,7 +18697,7 @@ const PROPERTY_COVERAGE_BY_TYPE = /* @__PURE__ */ new Map([
 			"TokenDomains",
 			"VisibilityConfig"
 		]),
-		silentDrop: /* @__PURE__ */ new Map(),
+		sdkUnwired: /* @__PURE__ */ new Map(),
 		createOnlyDrops: /* @__PURE__ */ new Set(),
 		readOnly: /* @__PURE__ */ new Set([
 			"Arn",
@@ -19079,14 +19079,14 @@ function unsupportedTypeIssueUrl(resourceType) {
 function getPropertyCoverage(resourceType) {
 	return PROPERTY_COVERAGE_BY_TYPE.get(resourceType);
 }
-function findSilentDropProperties(resourceType, templateProperties) {
+function findSdkUnwiredProperties(resourceType, templateProperties) {
 	if (!templateProperties) return [];
 	const coverage = getPropertyCoverage(resourceType);
 	if (!coverage) return [];
 	const drops = [];
 	for (const prop of Object.keys(templateProperties)) {
 		if (coverage.handled.has(prop)) continue;
-		const rationale = coverage.silentDrop.get(prop);
+		const rationale = coverage.sdkUnwired.get(prop);
 		if (rationale === void 0) continue;
 		drops.push({
 			property: prop,
@@ -19096,8 +19096,8 @@ function findSilentDropProperties(resourceType, templateProperties) {
 	return drops.sort((a, b) => a.property.localeCompare(b.property));
 }
 const UNRECOGNIZED_PROPERTY_RATIONALE = "not in cdkd's CFn schema snapshot";
-function findActionableSilentDrops(resourceType, templateProperties, allowedKeys, recordedProperties, options) {
-	const drops = findSilentDropProperties(resourceType, templateProperties).filter(({ property }) => !allowedKeys.has(`${resourceType}:${property}`));
+function findActionableSdkUnwired(resourceType, templateProperties, allowedKeys, recordedProperties, options) {
+	const drops = findSdkUnwiredProperties(resourceType, templateProperties).filter(({ property }) => !allowedKeys.has(`${resourceType}:${property}`));
 	const unrecognized = findRoutableUnrecognizedProperties(resourceType, templateProperties, allowedKeys, recordedProperties, options);
 	if (unrecognized.length === 0) return drops;
 	return [...drops, ...unrecognized.map((property) => ({
@@ -19126,9 +19126,9 @@ function containsIntrinsic$1(value) {
 function toJsonValue(value) {
 	return value === void 0 ? void 0 : JSON.parse(JSON.stringify(value));
 }
-function findAcceptedSilentDrops(resourceType, templateProperties, allowedKeys, recordedProperties) {
+function findAcceptedSdkUnwired(resourceType, templateProperties, allowedKeys, recordedProperties) {
 	if (findRoutableUnrecognizedProperties(resourceType, templateProperties, allowedKeys, recordedProperties).length > 0) return [];
-	const drops = findSilentDropProperties(resourceType, templateProperties);
+	const drops = findSdkUnwiredProperties(resourceType, templateProperties);
 	const accepted = [];
 	for (const { property } of drops) {
 		if (!allowedKeys.has(`${resourceType}:${property}`)) return [];
@@ -19136,22 +19136,22 @@ function findAcceptedSilentDrops(resourceType, templateProperties, allowedKeys,
 	}
 	return accepted;
 }
-function withoutSilentDropProperties(resourceType, properties) {
-	const removable = removableSilentDrops(resourceType, properties);
+function withoutSdkUnwiredProperties(resourceType, properties) {
+	const removable = removableSdkUnwired(resourceType, properties);
 	if (removable.length === 0) return properties;
 	const written = { ...properties };
 	for (const property of removable) delete written[property];
 	return written;
 }
-function withoutAcceptedSilentDropProperties(resourceType, properties, allowedKeys, recordedProperties) {
-	const removable = excludeCreateOnly(resourceType, findAcceptedSilentDrops(resourceType, properties, allowedKeys, recordedProperties));
+function withoutAcceptedSdkUnwiredProperties(resourceType, properties, allowedKeys, recordedProperties) {
+	const removable = excludeCreateOnly(resourceType, findAcceptedSdkUnwired(resourceType, properties, allowedKeys, recordedProperties));
 	if (removable.length === 0) return properties;
 	const written = { ...properties };
 	for (const property of removable) delete written[property];
 	return written;
 }
-function removableSilentDrops(resourceType, properties) {
-	return excludeCreateOnly(resourceType, findSilentDropProperties(resourceType, properties).map(({ property }) => property));
+function removableSdkUnwired(resourceType, properties) {
+	return excludeCreateOnly(resourceType, findSdkUnwiredProperties(resourceType, properties).map(({ property }) => property));
 }
 function excludeCreateOnly(resourceType, names) {
 	if (names.length === 0) return names;
@@ -19159,9 +19159,9 @@ function excludeCreateOnly(resourceType, names) {
 	if (createOnly === void 0 || createOnly.size === 0) return names;
 	return names.filter((property) => !createOnly.has(property));
 }
-function withoutUnwrittenSilentDropProperties(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
+function withoutUnwrittenSdkUnwiredProperties(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops;
-	const removable = findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly?.has(property) !== true).concat(evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence).filter((property) => desiredProperties === void 0 || !Object.hasOwn(desiredProperties, property) || askedUnchanged(recordedProperties, desiredProperties, property)));
+	const removable = findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly?.has(property) !== true).concat(evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence).filter((property) => desiredProperties === void 0 || !Object.hasOwn(desiredProperties, property) || askedUnchanged(recordedProperties, desiredProperties, property)));
 	if (removable.length === 0) return recordedProperties;
 	const narrowed = { ...recordedProperties };
 	for (const property of removable) delete narrowed[property];
@@ -19173,8 +19173,8 @@ function findUnwrittenCreateOnlyDrops(resourceType, recordedProperties, desiredP
 function evidenceNamedUnwritten(resourceType, recordedProperties, desiredProperties, allowedKeys, evidence) {
 	if (evidence.size === 0) return [];
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops ?? /* @__PURE__ */ new Set();
-	const accepted = new Set(findAcceptedSilentDrops(resourceType, desiredProperties, allowedKeys, recordedProperties));
-	return [...findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && evidence.has(property) && !accepted.has(property)), ...findHandledUnwrittenCreateOnly(resourceType, recordedProperties, evidence)].sort((a, b) => a.localeCompare(b));
+	const accepted = new Set(findAcceptedSdkUnwired(resourceType, desiredProperties, allowedKeys, recordedProperties));
+	return [...findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && evidence.has(property) && !accepted.has(property)), ...findHandledUnwrittenCreateOnly(resourceType, recordedProperties, evidence)].sort((a, b) => a.localeCompare(b));
 }
 function askedUnchanged(recordedProperties, desiredProperties, property) {
 	return sameJsonValue(recordedProperties[property], desiredProperties[property], "unchanged");
@@ -19189,7 +19189,7 @@ function findHandledUnwrittenCreateOnly(resourceType, recordedProperties, eviden
 function acceptedCreateOnlyDropsEvidence(recordedProperties, resourceType, provisionedBy, carried) {
 	if (provisionedBy !== "sdk") return void 0;
 	const createOnly = getPropertyCoverage(resourceType)?.createOnlyDrops ?? /* @__PURE__ */ new Set();
-	const names = findSilentDropProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && (carried === void 0 || carried.has(property)));
+	const names = findSdkUnwiredProperties(resourceType, recordedProperties).map(({ property }) => property).filter((property) => createOnly.has(property) && (carried === void 0 || carried.has(property)));
 	const handled = carried === void 0 ? [] : findHandledUnwrittenCreateOnly(resourceType, recordedProperties, carried);
 	const all = [...names, ...handled].sort((a, b) => a.localeCompare(b));
 	return all.length > 0 ? all : void 0;
@@ -19211,7 +19211,7 @@ function findUnrecognizedProperties(resourceType, templateProperties) {
 	for (const prop of Object.keys(templateProperties)) {
 		if (prop === "Ref" || prop.startsWith("Fn::")) continue;
 		if (coverage.handled.has(prop)) continue;
-		if (coverage.silentDrop.has(prop)) continue;
+		if (coverage.sdkUnwired.has(prop)) continue;
 		unrecognized.push(prop);
 	}
 	return unrecognized.sort((a, b) => a.localeCompare(b));
@@ -26173,8 +26173,8 @@ var DiffCalculator = class DiffCalculator {
 				const rawDesiredProps = desiredResource.Properties || {};
 				const resolvedDesiredProps = resolveFn ? await this.resolveBestEffort(rawDesiredProps, resolveFn) : rawDesiredProps;
 				const sdkRouted = currentResource.provisionedBy !== "cc-api";
-				const desiredAfterDrops = sdkRouted && allowedUnsupportedProperties ? withoutAcceptedSilentDropProperties(desiredResource.Type, resolvedDesiredProps, allowedUnsupportedProperties, currentResource.properties) : resolvedDesiredProps;
-				const currentAfterDrops = sdkRouted ? withoutUnwrittenSilentDropProperties(desiredResource.Type, currentResource.properties, resolvedDesiredProps, allowedUnsupportedProperties ?? /* @__PURE__ */ new Set(), acceptedCreateOnlyDropsOf(currentResource)) : currentResource.properties;
+				const desiredAfterDrops = sdkRouted && allowedUnsupportedProperties ? withoutAcceptedSdkUnwiredProperties(desiredResource.Type, resolvedDesiredProps, allowedUnsupportedProperties, currentResource.properties) : resolvedDesiredProps;
+				const currentAfterDrops = sdkRouted ? withoutUnwrittenSdkUnwiredProperties(desiredResource.Type, currentResource.properties, resolvedDesiredProps, allowedUnsupportedProperties ?? /* @__PURE__ */ new Set(), acceptedCreateOnlyDropsOf(currentResource)) : currentResource.properties;
 				const desiredPropsForCompare = canonicalizeProperties ? canonicalizeProperties(desiredResource.Type, desiredAfterDrops) : desiredAfterDrops;
 				const currentPropsForCompare = canonicalizeProperties && sdkRouted ? canonicalizeProperties(desiredResource.Type, currentAfterDrops) : currentAfterDrops;
 				const droppedKeys = canonicalizeProperties ? Object.keys(desiredAfterDrops).filter((key) => !Object.hasOwn(desiredPropsForCompare, key)) : [];
@@ -28608,7 +28608,7 @@ var CloudControlProvider = class {
 		const indeterminateGuard = await this.confirmDeleteTargetIdentity(logicalId, resourceType, physicalId, context);
 		if (context?.removeProtection === true && resourceType === "AWS::AutoScaling::AutoScalingGroup") {
 			this.logger.debug(`Delegating protected AutoScalingGroup ${logicalId} delete to the SDK ASGProvider (Cloud Control cannot force-delete a protected ASG)`);
-			const { ASGProvider } = await import("./asg-provider-BymHNHgo.js");
+			const { ASGProvider } = await import("./asg-provider-lSRpxvv-.js");
 			const delegateRegion = ambientRegion();
 			let asgProvider = this.asgDeleteDelegates.get(delegateRegion);
 			if (asgProvider === void 0) {
@@ -28717,7 +28717,7 @@ var CloudControlProvider = class {
 		const family = SDK_DELETE_FAMILIES.get(resourceType);
 		const cached = this.sdkDeleteDelegates.get(family);
 		if (cached !== void 0 && cached.region === ccRegion) return cached.provider;
-		const provider = family === "rds" ? new (await (import("./rds-provider-CFm779-M.js"))).RDSProvider({ region: ccRegion }) : new (await (import("./neptune-provider-BQ92M2BH.js"))).NeptuneProvider({ region: ccRegion });
+		const provider = family === "rds" ? new (await (import("./rds-provider-lqfHEmI_.js"))).RDSProvider({ region: ccRegion }) : new (await (import("./neptune-provider-C15HKNRt.js"))).NeptuneProvider({ region: ccRegion });
 		this.sdkDeleteDelegates.set(family, {
 			region: ccRegion,
 			provider
@@ -33109,7 +33109,7 @@ function wouldReturnToSdkProvider(input) {
 	if (forceCcApi) return false;
 	if (desiredProperties === void 0) return false;
 	if (previousProperties === void 0) return false;
-	return [desiredProperties, previousProperties].every((bag) => findActionableSilentDrops(resourceType, bag, allowedUnsupportedProperties).length === 0);
+	return [desiredProperties, previousProperties].every((bag) => findActionableSdkUnwired(resourceType, bag, allowedUnsupportedProperties).length === 0);
 }
 var ProviderRegistry = class {
 	logger = getLogger().child("ProviderRegistry");
@@ -33185,7 +33185,7 @@ var ProviderRegistry = class {
 		}
 		const specificProvider = this.providers.get(resourceType);
 		if (specificProvider) {
-			const actionableDrops = findActionableSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, input.previousProperties);
+			const actionableDrops = findActionableSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, input.previousProperties);
 			if (actionableDrops.length === 0) {
 				debug(`Using specific SDK provider for ${resourceType}`);
 				if (returningToSdk) {
@@ -33202,7 +33202,7 @@ var ProviderRegistry = class {
 				};
 			}
 			const unroutable = this.ccRouteUnavailableReason(resourceType);
-			if (unroutable !== void 0) throw new Error(this.buildUnroutableSilentDropMessage(resourceType, actionableDrops, unroutable));
+			if (unroutable !== void 0) throw new Error(this.buildUnroutableSdkUnwiredMessage(resourceType, actionableDrops, unroutable));
 			debug(`Auto-routing ${resourceType} via Cloud Control (SDK-unwired properties: ${actionableDrops.map((d) => d.property).join(", ")})`);
 			return {
 				provider: this.cloudControlProvider,
@@ -33230,7 +33230,7 @@ var ProviderRegistry = class {
 		if (hasNoCloudControlHandlers(resourceType)) return NO_CC_HANDLERS_REASON;
 		if (this.providers.get(resourceType)?.disableCcApiFallback === true) return "the type's SDK provider opts out of the Cloud Control fallback (disableCcApiFallback)";
 	}
-	buildUnroutableSilentDropMessage(resourceType, drops, reason) {
+	buildUnroutableSdkUnwiredMessage(resourceType, drops, reason) {
 		const details = drops.map((d) => safeMsg`  - ${d.property}: ${d.rationale}`).join("\n");
 		const overrideHint = drops.map((d) => safeMsg`${resourceType}:${d.property}`).join(",");
 		return safeMsg`${resourceType} uses properties cdkd's SDK Provider does not handle, and ` + safeMsg`this type cannot fall back to Cloud Control API (${reason}):\n` + `${details}\nRemove the properties, or force the SDK provider path and accept leaving them unwritten via --prefer-sdk-route ${overrideHint} (the provider may still reject the resource if the property is required).`;
@@ -33275,7 +33275,7 @@ var ProviderRegistry = class {
 		this.validateMutuallyExclusiveProperties(materialized);
 		this.validateNestedRequiredProperties(materialized);
 		this.validateCustomResourceSecureReferences(materialized);
-		this.reportSilentDropDecisions(materialized);
+		this.reportSdkUnwiredDecisions(materialized);
 	}
 	validateMutuallyExclusiveProperties(resources) {
 		const lines = [];
@@ -33298,16 +33298,16 @@ var ProviderRegistry = class {
 		if (lines.length === 0) return;
 		throw new Error("The following custom resources pass a secure dynamic reference ({{resolve:secretsmanager:...}} / {{resolve:ssm-secure:...}}) in their properties:\n" + lines.join("\n") + "\n\nCloudFormation does not support secure dynamic references in custom resources, so the template is rejected before anything is resolved. Have the handler read the secret itself (pass its name or ARN instead), or use a plain {{resolve:ssm:...}} parameter for a value that is not secret.");
 	}
-	reportSilentDropDecisions(resources) {
+	reportSdkUnwiredDecisions(resources) {
 		for (const { logicalId, resourceType, properties, provisionedBy, previousProperties } of resources) {
-			const drops = findSilentDropProperties(resourceType, properties);
+			const drops = findSdkUnwiredProperties(resourceType, properties);
 			const unrecognizedRoute = findRoutableUnrecognizedProperties(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			const stickyCc = provisionedBy === "cc-api" && !STICKY_CC_MIGRATION_EXEMPT.has(resourceType);
-			const overridden = stickyCc ? [] : findAcceptedSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
+			const overridden = stickyCc ? [] : findAcceptedSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			const autoRouted = [...drops.map(({ property }) => property).filter((property) => !this.allowedUnsupportedProperties.has(`${resourceType}:${property}`)), ...unrecognizedRoute].sort((a, b) => a.localeCompare(b));
 			if (autoRouted.length > 0) {
 				const unroutable = this.ccRouteUnavailableReason(resourceType);
-				if (unroutable !== void 0) throw new Error(safeMsg`${logicalId}: ` + this.buildUnroutableSilentDropMessage(resourceType, drops.filter((d) => autoRouted.includes(d.property)), unroutable));
+				if (unroutable !== void 0) throw new Error(safeMsg`${logicalId}: ` + this.buildUnroutableSdkUnwiredMessage(resourceType, drops.filter((d) => autoRouted.includes(d.property)), unroutable));
 				const propList = autoRouted.join(", ");
 				const overrideHint = autoRouted.map((p) => `${resourceType}:${p}`).join(",");
 				const message = `${logicalId} (${resourceType}): routing via Cloud Control API (cdkd's SDK Provider does not yet wire ${propList} — CC API will forward the full property map.${unrecognizedRoute.length === 0 ? "" : ` ${unrecognizedRoute.join(", ")} ${unrecognizedRoute.length === 1 ? "is" : "are"} not in cdkd's CFn schema snapshot: Cloud Control applies a property AWS published since, and rejects a misspelled one as CloudFormation does.`} Override via --prefer-sdk-route ${overrideHint}.)`;
@@ -33365,7 +33365,7 @@ var ProviderRegistry = class {
 	findAutoRouteHits(resources) {
 		const hits = [];
 		for (const { logicalId, resourceType, properties, previousProperties } of resources) {
-			const actionable = findActionableSilentDrops(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
+			const actionable = findActionableSdkUnwired(resourceType, properties, this.allowedUnsupportedProperties, previousProperties);
 			if (actionable.length === 0) continue;
 			hits.push({
 				logicalId,
@@ -36402,25 +36402,6 @@ function holdsSupersededResources(record) {
 	return rows !== void 0 && (!Array.isArray(rows) || rows.length > 0);
 }
 
-// src/utils/colors.ts
-const codes = {
-	reset: "\x1B[0m",
-	bright: "\x1B[1m",
-	dim: "\x1B[2m",
-	red: "\x1B[31m",
-	green: "\x1B[32m",
-	yellow: "\x1B[33m",
-	blue: "\x1B[34m",
-	cyan: "\x1B[36m",
-	gray: "\x1B[90m"
-};
-const green = (s) => `${codes.green}${s}${codes.reset}`;
-const yellow = (s) => `${codes.yellow}${s}${codes.reset}`;
-const red = (s) => `${codes.red}${s}${codes.reset}`;
-const cyan = (s) => `${codes.cyan}${s}${codes.reset}`;
-const gray = (s) => `${codes.gray}${s}${codes.reset}`;
-const bold = (s) => `${codes.bright}${s}${codes.reset}`;
-
 // src/deployment/rollback-executor/replay-scope.ts
 function withReplayDeletePrinting(scope, fn) {
 	const deployBag = scope.ctx.logOnlyNeedlesFor?.(scope.op.logicalId);
@@ -46520,8 +46501,8 @@ function withPropertiesMarksOf(original, rebuilt) {
 	return carryRedactionMarks(original, rebuilt);
 }
 function propertiesToRecord(desiredProperties, result, resourceType, provisionedBy) {
-	if (result.effectiveProperties) return markWrittenFromDeployedTemplate(markLeafCertifiedBag(provisionedBy === "sdk" ? withoutSilentDropProperties(resourceType, result.effectiveProperties) : result.effectiveProperties));
-	const written = provisionedBy === "sdk" ? withoutSilentDropProperties(resourceType, desiredProperties) : desiredProperties;
+	if (result.effectiveProperties) return markWrittenFromDeployedTemplate(markLeafCertifiedBag(provisionedBy === "sdk" ? withoutSdkUnwiredProperties(resourceType, result.effectiveProperties) : result.effectiveProperties));
+	const written = provisionedBy === "sdk" ? withoutSdkUnwiredProperties(resourceType, desiredProperties) : desiredProperties;
 	return markWrittenFromDeployedTemplate(markSameGenerationBag(written));
 }
 function extractTemplateAttributes(template, logicalId) {
@@ -53494,11 +53475,11 @@ async function provisionUpdate(engine, logicalId, change, stateResources, stackN
 		const repaired = replaceEmbeddedPhysicalNameRewrites(attributes[key], embeddedRewrites);
 		if (repaired !== attributes[key]) attributes[key] = repaired;
 	}
-	const allowedSilentDrops = engine.providerRegistry.getAllowedUnsupportedProperties?.();
-	const desiredForSkipCheckAsWritten = currentResource.provisionedBy !== "cc-api" && allowedSilentDrops ? withoutAcceptedSilentDropProperties(resourceType, desiredForSkipCheck, allowedSilentDrops, currentResource.properties) : desiredForSkipCheck;
-	const allowedForRecord = allowedSilentDrops ?? /* @__PURE__ */ new Set();
+	const allowedSdkUnwired = engine.providerRegistry.getAllowedUnsupportedProperties?.();
+	const desiredForSkipCheckAsWritten = currentResource.provisionedBy !== "cc-api" && allowedSdkUnwired ? withoutAcceptedSdkUnwiredProperties(resourceType, desiredForSkipCheck, allowedSdkUnwired, currentResource.properties) : desiredForSkipCheck;
+	const allowedForRecord = allowedSdkUnwired ?? /* @__PURE__ */ new Set();
 	const createOnlyEvidence = acceptedCreateOnlyDropsOf(currentResource);
-	const recordedAsWritten = currentResource.provisionedBy === "cc-api" ? currentProps : withoutUnwrittenSilentDropProperties(resourceType, currentProps, desiredForSkipCheck, allowedForRecord, createOnlyEvidence);
+	const recordedAsWritten = currentResource.provisionedBy === "cc-api" ? currentProps : withoutUnwrittenSdkUnwiredProperties(resourceType, currentProps, desiredForSkipCheck, allowedForRecord, createOnlyEvidence);
 	const unmarkedRecord = noEchoLeavesOf(currentResource) === void 0;
 	const todayAsWritten = unmarkedRecord || witnessNormalize(recordedAsWritten, void 0, desiredForSkipCheckAsWritten).differing.length > 0 ? redactForState(resolvedProps, {
 		provenance: "template-derived",
@@ -53826,7 +53807,7 @@ async function provisionUpdate(engine, logicalId, change, stateResources, stackN
 			logicalId,
 			resourceType,
 			unwritten,
-			routeDriving: findActionableSilentDrops(resourceType, desiredForSkipCheck, allowedForRecord, currentProps).map(({ property }) => property),
+			routeDriving: findActionableSdkUnwired(resourceType, desiredForSkipCheck, allowedForRecord, currentProps).map(({ property }) => property),
 			nested: engine.options.parentStackInfo !== void 0,
 			nowWritten: findHandledUnwrittenCreateOnly(resourceType, currentProps, createOnlyEvidence),
 			evidence: [...createOnlyEvidence],
@@ -55859,5 +55840,5 @@ function sameGenerationClaimsOf(record) {
 	};
 }
 
-export { isTtlRateLimited as $, recordedReferenceRegions as $a, createUnionSecretMasker as $c, stringifyIfAssigned as $i, exportNamesCarriedFrom as $l, nameGenerationCarriedFrom as $n, malformedOrphanRecordsWarning as $o, addSuperseded as $r, findReplacedReadersOfRecreateTargets as $s, deleteJournaledOrphans as $t, synthesisStatusMessage as $u, resolvedResourceTimeoutMs as A, reEnableInstanceApiTermination as Aa, sameLambdaFunctionAddress as Ac, defineOwnKey as Ad, createPreDeleteFinalSnapshot as Ai, recordMaskOnlyValue as Al, equalModuloMarkedMask as An, parameterInputsFor as Ao, formatDestructiveChange as Ar, refuseMalformedResourcePropertiesForExport as As, isSecretBearingReferenceString as At, validateContainerRepoName as Au, DELETE_INDEX_WAIT_PROCEED_NOTE as B, poisonRenderedSpellingsCollidingIn as Ba, noEchoLeavesOf as Bc, injectAwsRegion as Bd, DeploymentEventsReader as Bi, S3StateBackend as Bl, replacementNeverSwapped as Bn, displayLogicalId as Bo, proposeRenames as Br, repairMalformedResourcePropertiesForReadOnly as Bs, NESTED_PENDING_PARENT_REASON as Bt, getDockerCmd as Bu, planContributorInsightsOp as C, withIndeterminateGuard as Ca, withRetry as Cc, derivePartitionAndUrlSuffix as Cd, secretNamedRecordNeedles as Ci, recoverMaskedOutput as Cl, replayFailedOperations as Cn, AWS_NO_VALUE as Co, isExportAliasCollision as Cr, refuseMalformedResourceEntriesForDeploy as Cs, conditionInputsFrom as Ct, assertAssetBucketRegion as Cu, reverseMapTableContributorInsights as D, isTerminationProtectionPropagationError as Da, emrClusterInstancesReplaced as Dc, describeJsonParseFailure as Dd, PRE_DELETE_SNAPSHOT_TYPES as Di, splitGetAttStringForm as Dl, settleUnsettledPrevious as Dn, refStateLookupFromResource as Do, maskingRetryLogger as Dr, refuseMalformedResourceEntriesForOrphan as Ds, enclosingDeadlineRemainingMs as Dt, parseBootstrapMarker as Du, reverseMapIndexContributorInsights as E, ec2InstanceProtectionSite as Ea, ecsServiceLaunchTypeSetOrChanged as Ec, processStackMessages as Ed, ATOMIC_FINAL_SNAPSHOT_TYPES as Ei, recordPhysicalNameCopy as El, recordAfterRollbackUpdate as En, lacksRecordedTableArn as Eo, DEFAULT_RESOURCE_WARN_AFTER_MS as Er, refuseMalformedResourceEntriesForImportSave as Es, enclosingDeadlineExpired as Et, isCrossRegionRedirect as Eu, beginDeleteWait as F, unsettledItemsOf as Fa, maskAtCoordinates as Fc, absoluteAssemblyPathEscape as Fd, earliestDefined as Fi, wholeStringLeavesOf as Fl, isReplacementOrphan as Fn, STATE_RESOURCES_MALFORMED as Fo, withMovedTo as Fr, refuseMalformedState as Fs, planOrphanAdoption as Ft, describeDockerExecFailure as Fu, relayedIndexBusyDelete as G, s3BucketRegionalDomainName as Ga, recordedNoEchoValuesOf as Gc, DBPROXY_TAGS_WHAT as Gi, crossPrefixDeniedWarning as Gl, getCurrentProducerRegions as Gn, isReadableResourceEntry as Go, withStackRecords as Gr, withheldAccountClause as Gs, nestedChildStackName as Gt, redactedCause as Gu, TABLE_INDEX_NOUN as H, s3BucketArn as Ha, passedNoEchoParametersOf as Hc, clearBucketRegionCache as Hd, extractDeploymentEventError as Hi, CrossPrefixReadError as Hl, seedsDeleteFirstGuard as Hn, hasReadableOutputs as Ho, awaitInFlightSibling as Hr, unpreviewableOrphanRecords as Hs, displacedPhysicalIdShown as Ht, isMalformedEnvKey as Hu, compensateRemovedDeletionProtection as I, unsettledPropertiesOf as Ia, maskReadbackAtCoordinates as Ic, describeFileReadFailure as Id, ledgerForStack as Ii, WHOLE_DYNAMIC_REFERENCE_PATTERN as Il, planFailedOps as In, UNREADABLE_ORPHANS_CONTAINER_ROW as Io, isPairableType as Ir, repairMalformedOrphanRecordsForReadOnly as Is, pendingRequestCount as It, describeDockerFailure as Iu, readbackVectorIndexes as J, producerLookupOver as Ja, markSameGenerationBag as Jc, readTagList as Ji, stackInstanceIdOf as Jl, isRedactedRecordedValue as Jn, malformedExportSourceWarning as Jo, cyan as Jr, findSilentDropProperties as Js, revertedNestedRowIds as Jt, runDockerStreaming as Ju, waitForIndexesSettled as K, s3BucketWebsiteUrl as Ka, valueAtCoordinate as Kc, DBPROXY_TAG_OPTIONS as Ki, isAccessDenied$1 as Kl, inheritProducerRegions as Kn, malformedDriftResourcePropertiesWarning as Ko, replacedDeleteFailureVerdict as Kr, findActionableSilentDrops as Ks, recordDisplacedSkips as Kt, redactedDockerCause as Ku, deleteBudgetKey as L, withUnsettledProperties as La, maskWholeValue as Lc, displayAssemblyPath as Ld, reserveStackCreateToken as Li, isSingleDynamicReferenceToken as Ll, planRollback as Ln, UNREADABLE_RESOURCES_MAP_ROW as Lo, looselyEqual as Lr, repairMalformedOrphansForReadOnly as Ls, resolvePendingCloudControlRequests as Lt, dockerSpawnEnvWithSensitive as Lu, DYNAMODB_DELETE_DEADLINE_MARGIN_MS as M, INTRINSIC_KEYS as Ma, TemplateParser as Mc, hasPlainPrototype$1 as Md, isFinalSnapshotError as Mi, recordNoEchoAttributeValues as Ml, undeclaredEmptyObservedKeys as Mn, declaresNoEcho as Mo, hintSidesOf as Mr, refuseMalformedResourcesForDeploy as Ms, mergeNoChangeOutputs as Mt, buildDockerImage as Mu, DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS as N, isUsableAttemptedName as Na, canonicalCoordinates as Nc, nullPrototypeRecord as Nd, refusesFinalSnapshot as Ni, recordNoEchoParameterFreshValue as Nl, demoteSupersededOrphans as Nn, JSON_LISTING_HOLE_VALUE as No, movedToHint as Nr, refuseMalformedResourcesForDestroy as Ns, makeCanonicalizePropertiesFn as Nt, resolveDockerContextDirectory as Nu, stripIndexContributorInsights as O, observeThenDisableInstanceApiTermination as Oa, canonicalLambdaFunctionName as Oc, parseFailureDebugDetail as Od, buildFinalSnapshotIdentifier as Oi, carriesSecretMask as Ol, withUnprovenUnsettled as On, parseWebACLArn as Oo, constructPathOf as Or, refuseMalformedResourcePropertiesForDestroy as Os, withResourceDeadline as Ot, readBootstrapMarkerBody as Ou, DYNAMODB_DELETE_POLL_COST_MS as P, unsettledItemsField as Pa, isMarkedCoordinate as Pc, ownValue as Pd, unsupportedFinalSnapshotError as Pi, recordProvenPublicExpression as Pl, isJournaledOrphan as Pn, STATE_REGION_DIVERGED as Po, rollbackOrphanIds as Pr, refuseMalformedResourcesForExport as Ps, makeSiblingClaimReader as Pt, describeDockerCapturedOutput as Pu, isTtlAlreadyDisabled as Q, recordedOutputReferenceRegions as Qa, carryLogOnlyValues as Qc, definedAttributes as Qi, describeRegionValueKind as Ql, updatePartialReason as Qn, malformedOrphanRecordsRefusalMessage as Qo, yellow as Qr, hasNoCloudControlHandlers as Qs, withNestedStackContext as Qt, Synthesizer as Qu, resolveDynamoDbDeleteBudgetClock as R, withoutUnsettledProperties as Ra, maskedLeafCoordinatesOf as Rc, renderAssemblyPathEscape as Rd, withCreateTokenLedger as Ri, LockManager as Rl, recheckFailedPlan as Rn, accountArgs as Ro, mappingPairs as Rr, repairMalformedOutputsForReadOnly as Rs, keptForRetainedRecord as Rt, finchSecretArgvRefusal as Ru, indexDeclaresContributorInsights as S, deleteSkipReason as Sa, describeTypeWithThrottleRetry as Sc, canonicalizeRegion as Sd, secretNamedAttributeNamesOf as Si, recordNestedStackParameterExpressions as Sl, refusePendingMovesOut as Sn, keepsSecretReferenceToken as So, collectPublishedOutputNames as Sr, refuseMalformedResourceEntries as Ss, conditionFingerprint as St, BOOTSTRAP_MARKER_PREFIX as Su, readContributorInsightsSpec as T, disableInstanceApiTermination as Ta, dbInstanceEngineChangeIsInPlace as Tc, StageLoadError as Td, storedSecretNameNeedles as Ti, recordAttributeIdCopy as Tl, removeProtectionTypeList as Tn, isStalePlaceholderArnAttribute as To, DEFAULT_RESOURCE_TIMEOUT_MS as Tr, refuseMalformedResourceEntriesForImport as Ts, readRecordedConditionVerdicts as Tt, getBootstrapMarkerKey as Tu, deleteTableWithIndexBusyRetry as U, s3BucketDomainName as Ua, readbackPathFor as Uc, resolveBucketRegion as Ud, isRefusedByName as Ui, CrossPrefixScanCache as Ul, orphanNeedsIdentity as Un, hasReadableResources as Uo, destroyStackRecordsView as Ur, unreadableOrphanRecords as Us, dropSettledNestedJournals as Ut, partitionSensitiveEnv as Uu, INDEX_SETTLE_POLL_INTERVAL_MS as V, isSettledInstanceState as Va, noEchoOutputsComparison as Vc, injectedAwsRegionValue as Vd, DeploymentEventsStore as Vi, rebuildClientForBucketRegion as Vl, resolveReplacementOldType as Vn, hasReadableOrphans as Vo, refuseRestoreFromItself as Vr, repairMalformedResourcesForReadOnly as Vs, displacedOpClause as Vt, isDockerClientEnvKey as Vu, maskedLogger as W, s3BucketDualStackDomainName as Wa, readsNoEchoSource as Wc, markDeleteStarted as Wi, applyCrossPrefixScan as Wl, findNestedStackTypeChanges as Wn, isReadableOrphanRecord as Wo, getStackRecords as Wr, unreadableResourceEntries as Ws, getNestedRevertRun as Wt, redactDockerArgvValues as Wu, vectorIndexesSettled as X, keepHeldTokenProvenance as Xa, recordReferenceProvenanceEntry as Xc, tagMapAsList as Xi, splitImportedOps as Xl, redactedDeleteAddressSkip as Xn, malformedLocalResourceEntriesWarning as Xo, green as Xr, withoutSilentDropProperties as Xs, collectNestedChildUnaddressed as Xt, AssetManifestLoader as Xu, vectorIndexesForCreate as Y, refuseUnreadableCdkCrossAccountRefs as Ya, redactForState as Yc, refuseMalformedDesiredTags as Yi, withStackInstanceIdWithheld as Yl, redactedDeleteAddressFields as Yn, malformedLocalOutputsWarning as Yo, gray as Yr, unwrittenCreateOnlyReplacement as Ys, withNestedRevertRun as Yt, warnFinchArgvExposure as Yu, vectorIndexesShapeDetail as Z, outputReferenceProvenanceOf as Za, snapshotPassProvenance as Zc, tagPlanWarning as Zi, acceptedCreateOnlyDropsOf as Zl, updatePartialMessage as Zn, malformedLocalResourcesWarning as Zo, red as Zr, NO_CC_HANDLERS_REASON as Zs, getCurrentNestedStackContext as Zt, getDockerImageBySourceHash as Zu, streamMemberRefusals as _, unchangedBehindSecretReference as _a, requireConfigArray as _c, uploadCfnTemplate as _d, maskEventTextWithBoundBags as _i, isUncertifiedBaselineMaskPosition as _l, sameMove as _n, getAccountInfo as _o, exportNameNoEchoParameters as _r, refuseMalformedOrphansForDestroy as _s, findNestedTemplateTreeDefect as _t, buildAssetRedirectMap as _u, isProtectionValueActive as a, waitForLambdaFunctionActive as aa, WARM_THROUGHPUT_MEMBERS as ac, resolveCaptureObservedState as ad, supersededHeldByOtherTypeWarning as ai, recordLogOnlyValue as al, makeForeignHolderScan as an, sendableAssumeRoleCommand as ao, withNameGenerationReached as ar, malformedRenderedContainersWarning as as, hasCdkAutoDeleteTag as at, isReadableBag as au, CONTRIBUTOR_INSIGHTS_KEY as b, deleteIndeterminateGuards as ba, prefetchCreateOnlyPropertyPaths as bc, expectedOwnerParam as bd, secretNamePrintingBag as bi, identityKeyFor as bl, pendingMovesOutOf as bn, carriesFetchableDynamicReference as bo, noEchoParameterValueSeed as br, refuseMalformedOutputsForDestroy as bs, renderNestedTemplateTreeDefect as bt, rewriteTemplateAssetReferences as bu, DynamoDBGlobalTableProvider as c, isCustomResourceType as ca, toCfnInteger as cc, resolveStateBucketWithDefaultAndSource as cd, withoutSuperseded as ci, createSecretMasker as cl, chunks as cn, callerEnvCredentials as co, reachableDivergentParameters as cr, malformedResourcesWarning as cs, markRefusedBeforeApplying as ct, shouldRetainResource as cu, declaredStreamPolicyMember as d, CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID as da, coerceCfnInteger as dc, warnDeprecatedNoPrefixCliFlag as dd, noEchoExactEchoLeavesOf as di, maskSecretsInText as dl, withApiLimit as dn, classifyReplaySecretRegion as do, displayTextOrWithheld as dr, previewableOrphanRecords as ds, crossStackOutputProvenanceSource as dt, renderPhaseTimings as du, CC_BROKEN_REASON as ea, shownType as ec, getDefaultStateBucketName as ed, deleteSupersededEntry as ei, hasMaskableValues as el, dropFailedCommands as en, applyRoleArnIfSet as eo, nameGenerationHighWaterOf as er, malformedOrphanRowsKeptWarning as es, planTimeToLive as et, hasReadableExportSet as eu, declaredStreamTagsMember as f, applyCustomResourceResponseExpiration as fa, configBooleanRefusal as fc, ssmResolvedValueType as fd, noEchoParameterNamesOf as fi, scrubResourceRecord as fl, readRefactorMarker as fn, producerRegionsFromState as fo, exportAliasCollisionScrubWarning as fr, refuseDivergentRecordRegionForDestroy as fs, inheritedProvenanceForChildDiff as ft, timePhase as fu, streamDeclaresTags as g, onlySecretReferencesDiffer as ga, replayWarn as gc, findLargeInlineResources as gd, journaledOrphanPrintingBag as gi, dynamicReferenceTokens as gl, refuseRefactorMarker as gn, parameterTypeMayLoseSecretIdentity as go, carriedExportAliasExposure as gr, refuseMalformedOrphans as gs, childTemplateLoader as gt, WorkGraph as gu, streamDeclaresPolicy as h, slowCcOperationTimeoutMs as ha, readConfigString as hc, MIGRATE_TMP_PREFIX as hd, completedReplayEntries as hi, DYNAMIC_REFERENCE_TOKEN_SCAN as hl, refactorMarkerRefusalMessage as hn, isUnboundTemplateParameter as ho, secretSafeKeyDisplay as hr, refuseMalformedOrphanRecordsForDestroy as hs, serviceTokenBlockingReason as ht, stringifyValue as hu, PROTECTION_PROPERTY_BY_TYPE as i, wouldReturnToSdkProvider as ia, renderStatefulReason as ic, resolveAutoAssetStorage as id, supersededAfterRollback as ii, recordLogOnlyParameterValue as il, loadJournaledOrphans as in, isIamRoleArn as io, retiredNameGenerationsLeaving as ir, malformedOutputsWarning as is, S3_AUTO_DELETE_OBJECTS_TAG as it, importableOutputs as iu, setResolvedResourceTimeouts as j, DiffCalculator as ja, DagBuilder as jc, hasOwnKey as jd, effectiveDeletionPolicy as ji, recordMaskOnlyValuesIn as jl, equalModuloMask as jn, passedParameterClassesOf as jo, findRefactorHints as jr, refuseMalformedResourcePropertiesForOrphan as js, keptWholeReasonText as jt, buildDenyExternalAccessPolicy as ju, waitForGoneAfterDelete as k, reDisableInstanceApiTermination as ka, lambdaFunctionNameForMask as kc, utf8ByteLength as kd, ccRoutedFinalSnapshotError as ki, provenPublicValue as kl, calculateResourceDrift as kn, withSharedDrainBudget as ko, findDestructiveChanges as kr, refuseMalformedResourcePropertiesForDrift as ks, diffSecurity as kt, validateAssetBucketName as ku, STREAM_POLICY_KEY as l, getCurrentResourceSecrets as la, toFiniteNumber as lc, resolveUseCdkBootstrapAssets as ld, noEchoAttributeNamesOf as li, errorCauseChain as ll, isAccessDeniedError as ln, envCredentialsAreAssumedRole as lo, resourcesNamingDeclaredParameter as lr, malformedScrubResourceEntriesRefusalMessage as ls, IMPLICIT_DELETE_DEPENDENCIES as lt, stackInstanceIdCarriedFrom as lu, reverseMapStreamPolicy as m, CloudControlProvider as ma, configStringRefusal as mc, CFN_TEMPLATE_URL_LIMIT as md, createReadOnlyAttributeHealerFactory as mi, withoutPhysicalNameCopies as ml, refactorMarkerMovesOf as mn, coerceParameterTypedValue as mo, secretBearingStateKeyWarning as mr, refuseMalformedOrphanRecords as ms, findServiceTokenRefusals as mt, isSensitiveAttributeName as mu, recordedProtectionEvidence as n, ccBrokenReason as na, isStatefulRecreateTargetForReplace as nc, loadCdkJson as nd, isSupersededResourceRecord as ni, logOnlyValueCount as nl, isHandledOrphan as nn, assertSendableRoleArn as no, retiredAfterRollback as nr, malformedOrphansWarning as ns, sendTtlWaitingOutRateLimit as nt, hasUnverifiableParameterRefusal as nu, perType as o, TemplateNoEchoReresolver as oa, coerceWarmThroughput as oc, resolveSkipPrefix as od, supersededHolderOf as oi, shareLogOnlyValues as ol, sameJournaledOrphans as on, AWS_CREDENTIAL_ENV_KEYS as oo, computeParameterTaint as or, malformedResourceEntriesWarning as os, isTruthyCfnBoolean as ot, orphansAfterRollback as ou, planStreamMemberOps as p, customResourceResponseExpirationWarning as pa, configIntegerRefusal as pc, CFN_TEMPLATE_BODY_LIMIT as pd, withAttemptedItemsMasked as pi, withPhysicalNameCopies as pl, readRefactorMarkerOnce as pn, regionLessSecretName as po, secretBearing as pr, refuseMalformedNestedChildOutputs as ps, deferredServiceTokenWarning as pt, AssetPublisher as pu, planVectorIndexUpdates as q, resolveDynamicReferences as qa, liveMatchesUnresolvedTokenFrame as qc, planTagDiff as qi, isNotImplemented as ql, REDACTED_DELETE_ADDRESS_SKIP_REASON as qn, malformedExportNamesWarning as qo, bold as qr, findHandledUnwrittenCreateOnly as qs, revertNestedChildFromJournal as qt, runDockerForeground as qu, recordedProtectionNote as r, isCustomResource as ra, isStatefulRecreateTargetSync as rc, resolveApp as rd, removeSuperseded as ri, printingCorpusOf as rl, journaledOrphanLines as rn, explicitRoleArnOrThrow as ro, retiredNameGenerationsAfter as rr, malformedOutputsRefusalMessage as rs, ECR_AUTO_DELETE_IMAGES_TAG as rt, importableOutputKeys as ru, readProtection as s, readsNoEchoDeleteValues as sa, isWarmThroughputDecrease as sc, resolveStateBucketWithDefault as sd, supersededResourcesOf as si, unionOfSecretBags as sl, formatResourceLine as sn, applyCallerIdentityCredentials as so, namesAnyDeclaredParameter as sr, malformedResourcePropertiesWarning as ss, getPriorAttempts as st, orphansCarriedFrom as su, DeployEngine as t, ProviderRegistry as ta, MULTI_REGION_RECREATE_BLOCKED_TYPES as tc, getLegacyStateBucketName as td, holdsSupersededResources as ti, literalSplitDelimitersOf as tl, dropFailedHint as tn, assertFlagRoleArn as to, nameScopeOf as tr, malformedOrphansRefusalMessage as ts, readTtlSpec as tt, hasReasonlessBaselineRefusal as tu, STREAM_TAGS_KEY as u, withPrintingSecrets as ua, coerceCfnBoolean as uc, stateBucketExistenceConfirmed as ud, noEchoComparisonForTemplate as ui, maskSecretsInError as ul, lookupEachName as un, classifyRecordedSecretRegion as uo, WITHHELD_NAME_DISPLAY as ur, malformedStateRefusalMessage as us, computeImplicitDeleteEdges as ut, PhaseClock as uu, streamPolicyMatchesDeclared as v, RollbackInlinePolicyWriters as va, requireConfigObject as vc, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as vd, namingSecretsWithRecordedNoEcho as vi, pathCrossesDottedKey as vl, updateRefactorMarker as vn, isImpossibleEmptyStoredAttribute as vo, exportNameSecretExposure as vr, refuseMalformedOrphansForOrphan as vs, isAbsoluteAssetPath as vt, createAssetRedirectResolver as vu, planIndexContributorInsightsOps as w, isWaitAbandonedError as wa, blockDeviceMappingsDifferOnlyInDeleteOnTermination as wc, AssemblyReader as wd, stateSecretNameNeedles as wi, physicalNameCopiesOf as wl, replayRollback as wn, cfnRefValueFromPhysicalId as wo, bindingSkippedOutputs as wr, refuseMalformedResourceEntriesForDestroy as ws, parentSuppliedValues as wt, ensureAssetStorage as wu, contributorInsightsRefusals as x, deleteLeftInPlace as xa, templateResourceTypes as xc, PARTITION_TABLE as xd, secretNamePrintingBags as xi, inheritNestedStackParameterAssociations as xl, pendingMovesRefusalMessage as xn, isNamelessDynamicReferenceError as xo, collectDeclaredOutputNames as xr, refuseMalformedResourceAttributesForOrphan as xs, templateIdentity as xt, AssetModeResolver as xu, streamTagsMatchDeclared as y, UNSPECIFIED_SKIP_REASON as ya, requireConfigString as yc, decodeListingKey as yd, orphanRecordsPrintingBag as yi, spelledKeysOf as yl, hasPendingMovesOut as yn, carriesDynamicReference as yo, isWholeDynamicReferenceValue as yr, refuseMalformedOutputs as ys, listNestedTemplateRows as yt, loadPublishableAssetManifest as yu, resolveDynamoDbDeleteBudgetMs as z, IntrinsicFunctionResolver as za, noEchoCoordinatesOf as zc, resolveAssemblyPath as zd, acquireIdempotencyToken as zi, isLockInfoExpired as zl, recordUnderIdIsNotOwn as zn, deployRefusesOrphanRowsReason as zo, parseMappingFile as zr, repairMalformedResourceEntriesForReadOnly as zs, recordRetainedForReadoption as zt, formatDockerLoginError as zu };
-//# sourceMappingURL=deploy-engine-BC5pwkqY.js.map
+export { isTtlRateLimited as $, sendableAssumeRoleCommand as $a, recordLogOnlyValue as $c, waitForLambdaFunctionActive as $i, isReadableBag as $l, nameGenerationCarriedFrom as $n, malformedRenderedContainersWarning as $o, supersededHeldByOtherTypeWarning as $r, WARM_THROUGHPUT_MEMBERS as $s, deleteJournaledOrphans as $t, resolveCaptureObservedState as $u, resolvedResourceTimeoutMs as A, unsettledPropertiesOf as Aa, maskReadbackAtCoordinates as Ac, describeFileReadFailure as Ad, ledgerForStack as Ai, WHOLE_DYNAMIC_REFERENCE_PATTERN as Al, equalModuloMarkedMask as An, UNREADABLE_ORPHANS_CONTAINER_ROW as Ao, formatDestructiveChange as Ar, repairMalformedOrphanRecordsForReadOnly as As, isSecretBearingReferenceString as At, describeDockerFailure as Au, DELETE_INDEX_WAIT_PROCEED_NOTE as B, s3BucketWebsiteUrl as Ba, valueAtCoordinate as Bc, DBPROXY_TAG_OPTIONS as Bi, isAccessDenied$1 as Bl, replacementNeverSwapped as Bn, malformedDriftResourcePropertiesWarning as Bo, proposeRenames as Br, findActionableSdkUnwired as Bs, NESTED_PENDING_PARENT_REASON as Bt, redactedDockerCause as Bu, planContributorInsightsOp as C, reDisableInstanceApiTermination as Ca, lambdaFunctionNameForMask as Cc, utf8ByteLength as Cd, ccRoutedFinalSnapshotError as Ci, provenPublicValue as Cl, replayFailedOperations as Cn, withSharedDrainBudget as Co, isExportAliasCollision as Cr, refuseMalformedResourcePropertiesForDrift as Cs, conditionInputsFrom as Ct, validateAssetBucketName as Cu, reverseMapTableContributorInsights as D, isUsableAttemptedName as Da, canonicalCoordinates as Dc, nullPrototypeRecord as Dd, refusesFinalSnapshot as Di, recordNoEchoParameterFreshValue as Dl, settleUnsettledPrevious as Dn, JSON_LISTING_HOLE_VALUE as Do, maskingRetryLogger as Dr, refuseMalformedResourcesForDestroy as Ds, enclosingDeadlineRemainingMs as Dt, resolveDockerContextDirectory as Du, reverseMapIndexContributorInsights as E, INTRINSIC_KEYS as Ea, TemplateParser as Ec, hasPlainPrototype$1 as Ed, isFinalSnapshotError as Ei, recordNoEchoAttributeValues as El, recordAfterRollbackUpdate as En, declaresNoEcho as Eo, DEFAULT_RESOURCE_WARN_AFTER_MS as Er, refuseMalformedResourcesForDeploy as Es, enclosingDeadlineExpired as Et, buildDockerImage as Eu, beginDeleteWait as F, isSettledInstanceState as Fa, noEchoOutputsComparison as Fc, injectedAwsRegionValue as Fd, DeploymentEventsStore as Fi, rebuildClientForBucketRegion as Fl, isReplacementOrphan as Fn, hasReadableOrphans as Fo, withMovedTo as Fr, repairMalformedResourcesForReadOnly as Fs, planOrphanAdoption as Ft, isDockerClientEnvKey as Fu, relayedIndexBusyDelete as G, outputReferenceProvenanceOf as Ga, snapshotPassProvenance as Gc, tagPlanWarning as Gi, acceptedCreateOnlyDropsOf as Gl, getCurrentProducerRegions as Gn, malformedLocalResourcesWarning as Go, withStackRecords as Gr, NO_CC_HANDLERS_REASON as Gs, nestedChildStackName as Gt, getDockerImageBySourceHash as Gu, TABLE_INDEX_NOUN as H, producerLookupOver as Ha, markSameGenerationBag as Hc, readTagList as Hi, stackInstanceIdOf as Hl, seedsDeleteFirstGuard as Hn, malformedExportSourceWarning as Ho, awaitInFlightSibling as Hr, findSdkUnwiredProperties as Hs, displacedPhysicalIdShown as Ht, runDockerStreaming as Hu, compensateRemovedDeletionProtection as I, s3BucketArn as Ia, passedNoEchoParametersOf as Ic, clearBucketRegionCache as Id, extractDeploymentEventError as Ii, CrossPrefixReadError as Il, planFailedOps as In, hasReadableOutputs as Io, isPairableType as Ir, unpreviewableOrphanRecords as Is, pendingRequestCount as It, isMalformedEnvKey as Iu, readbackVectorIndexes as J, applyRoleArnIfSet as Ja, hasMaskableValues as Jc, CC_BROKEN_REASON as Ji, hasReadableExportSet as Jl, isRedactedRecordedValue as Jn, malformedOrphanRowsKeptWarning as Jo, deleteSupersededEntry as Jr, shownType as Js, revertedNestedRowIds as Jt, getDefaultStateBucketName as Ju, waitForIndexesSettled as K, recordedOutputReferenceRegions as Ka, carryLogOnlyValues as Kc, definedAttributes as Ki, describeRegionValueKind as Kl, inheritProducerRegions as Kn, malformedOrphanRecordsRefusalMessage as Ko, replacedDeleteFailureVerdict as Kr, hasNoCloudControlHandlers as Ks, recordDisplacedSkips as Kt, Synthesizer as Ku, deleteBudgetKey as L, s3BucketDomainName as La, readbackPathFor as Lc, resolveBucketRegion as Ld, isRefusedByName as Li, CrossPrefixScanCache as Ll, planRollback as Ln, hasReadableResources as Lo, looselyEqual as Lr, unreadableOrphanRecords as Ls, resolvePendingCloudControlRequests as Lt, partitionSensitiveEnv as Lu, DYNAMODB_DELETE_DEADLINE_MARGIN_MS as M, withoutUnsettledProperties as Ma, maskedLeafCoordinatesOf as Mc, renderAssemblyPathEscape as Md, withCreateTokenLedger as Mi, LockManager as Ml, undeclaredEmptyObservedKeys as Mn, accountArgs as Mo, hintSidesOf as Mr, repairMalformedOutputsForReadOnly as Ms, mergeNoChangeOutputs as Mt, finchSecretArgvRefusal as Mu, DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS as N, IntrinsicFunctionResolver as Na, noEchoCoordinatesOf as Nc, resolveAssemblyPath as Nd, acquireIdempotencyToken as Ni, isLockInfoExpired as Nl, demoteSupersededOrphans as Nn, deployRefusesOrphanRowsReason as No, movedToHint as Nr, repairMalformedResourceEntriesForReadOnly as Ns, makeCanonicalizePropertiesFn as Nt, formatDockerLoginError as Nu, stripIndexContributorInsights as O, unsettledItemsField as Oa, isMarkedCoordinate as Oc, ownValue as Od, unsupportedFinalSnapshotError as Oi, recordProvenPublicExpression as Ol, withUnprovenUnsettled as On, STATE_REGION_DIVERGED as Oo, constructPathOf as Or, refuseMalformedResourcesForExport as Os, withResourceDeadline as Ot, describeDockerCapturedOutput as Ou, DYNAMODB_DELETE_POLL_COST_MS as P, poisonRenderedSpellingsCollidingIn as Pa, noEchoLeavesOf as Pc, injectAwsRegion as Pd, DeploymentEventsReader as Pi, S3StateBackend as Pl, isJournaledOrphan as Pn, displayLogicalId as Po, rollbackOrphanIds as Pr, repairMalformedResourcePropertiesForReadOnly as Ps, makeSiblingClaimReader as Pt, getDockerCmd as Pu, isTtlAlreadyDisabled as Q, isIamRoleArn as Qa, recordLogOnlyParameterValue as Qc, wouldReturnToSdkProvider as Qi, importableOutputs as Ql, updatePartialReason as Qn, malformedOutputsWarning as Qo, supersededAfterRollback as Qr, renderStatefulReason as Qs, withNestedStackContext as Qt, resolveAutoAssetStorage as Qu, resolveDynamoDbDeleteBudgetClock as R, s3BucketDualStackDomainName as Ra, readsNoEchoSource as Rc, markDeleteStarted as Ri, applyCrossPrefixScan as Rl, recheckFailedPlan as Rn, isReadableOrphanRecord as Ro, mappingPairs as Rr, unreadableResourceEntries as Rs, keptForRetainedRecord as Rt, redactDockerArgvValues as Ru, indexDeclaresContributorInsights as S, observeThenDisableInstanceApiTermination as Sa, canonicalLambdaFunctionName as Sc, parseFailureDebugDetail as Sd, buildFinalSnapshotIdentifier as Si, carriesSecretMask as Sl, refusePendingMovesOut as Sn, parseWebACLArn as So, collectPublishedOutputNames as Sr, refuseMalformedResourcePropertiesForDestroy as Ss, conditionFingerprint as St, readBootstrapMarkerBody as Su, readContributorInsightsSpec as T, DiffCalculator as Ta, DagBuilder as Tc, hasOwnKey as Td, effectiveDeletionPolicy as Ti, recordMaskOnlyValuesIn as Tl, removeProtectionTypeList as Tn, passedParameterClassesOf as To, DEFAULT_RESOURCE_TIMEOUT_MS as Tr, refuseMalformedResourcePropertiesForOrphan as Ts, readRecordedConditionVerdicts as Tt, buildDenyExternalAccessPolicy as Tu, deleteTableWithIndexBusyRetry as U, refuseUnreadableCdkCrossAccountRefs as Ua, redactForState as Uc, refuseMalformedDesiredTags as Ui, withStackInstanceIdWithheld as Ul, orphanNeedsIdentity as Un, malformedLocalOutputsWarning as Uo, destroyStackRecordsView as Ur, unwrittenCreateOnlyReplacement as Us, dropSettledNestedJournals as Ut, warnFinchArgvExposure as Uu, INDEX_SETTLE_POLL_INTERVAL_MS as V, resolveDynamicReferences as Va, liveMatchesUnresolvedTokenFrame as Vc, planTagDiff as Vi, isNotImplemented as Vl, resolveReplacementOldType as Vn, malformedExportNamesWarning as Vo, refuseRestoreFromItself as Vr, findHandledUnwrittenCreateOnly as Vs, displacedOpClause as Vt, runDockerForeground as Vu, maskedLogger as W, keepHeldTokenProvenance as Wa, recordReferenceProvenanceEntry as Wc, tagMapAsList as Wi, splitImportedOps as Wl, findNestedStackTypeChanges as Wn, malformedLocalResourceEntriesWarning as Wo, getStackRecords as Wr, withoutSdkUnwiredProperties as Ws, getNestedRevertRun as Wt, AssetManifestLoader as Wu, vectorIndexesSettled as X, assertSendableRoleArn as Xa, logOnlyValueCount as Xc, ccBrokenReason as Xi, hasUnverifiableParameterRefusal as Xl, redactedDeleteAddressSkip as Xn, malformedOrphansWarning as Xo, isSupersededResourceRecord as Xr, isStatefulRecreateTargetForReplace as Xs, collectNestedChildUnaddressed as Xt, loadCdkJson as Xu, vectorIndexesForCreate as Y, assertFlagRoleArn as Ya, literalSplitDelimitersOf as Yc, ProviderRegistry as Yi, hasReasonlessBaselineRefusal as Yl, redactedDeleteAddressFields as Yn, malformedOrphansRefusalMessage as Yo, holdsSupersededResources as Yr, MULTI_REGION_RECREATE_BLOCKED_TYPES as Ys, withNestedRevertRun as Yt, getLegacyStateBucketName as Yu, vectorIndexesShapeDetail as Z, explicitRoleArnOrThrow as Za, printingCorpusOf as Zc, isCustomResource as Zi, importableOutputKeys as Zl, updatePartialMessage as Zn, malformedOutputsRefusalMessage as Zo, removeSuperseded as Zr, isStatefulRecreateTargetSync as Zs, getCurrentNestedStackContext as Zt, resolveApp as Zu, streamMemberRefusals as _, withIndeterminateGuard as _a, withRetry as _c, derivePartitionAndUrlSuffix as _d, secretNamedRecordNeedles as _i, recoverMaskedOutput as _l, sameMove as _n, AWS_NO_VALUE as _o, exportNameNoEchoParameters as _r, refuseMalformedResourceEntriesForDeploy as _s, findNestedTemplateTreeDefect as _t, assertAssetBucketRegion as _u, isProtectionValueActive as a, CUSTOM_RESOURCE_RESPONSE_LIFECYCLE_RULE_ID as aa, coerceCfnInteger as ac, warnDeprecatedNoPrefixCliFlag as ad, noEchoExactEchoLeavesOf as ai, maskSecretsInText as al, makeForeignHolderScan as an, classifyReplaySecretRegion as ao, withNameGenerationReached as ar, previewableOrphanRecords as as, hasCdkAutoDeleteTag as at, renderPhaseTimings as au, CONTRIBUTOR_INSIGHTS_KEY as b, ec2InstanceProtectionSite as ba, ecsServiceLaunchTypeSetOrChanged as bc, processStackMessages as bd, ATOMIC_FINAL_SNAPSHOT_TYPES as bi, recordPhysicalNameCopy as bl, pendingMovesOutOf as bn, lacksRecordedTableArn as bo, noEchoParameterValueSeed as br, refuseMalformedResourceEntriesForImportSave as bs, renderNestedTemplateTreeDefect as bt, isCrossRegionRedirect as bu, DynamoDBGlobalTableProvider as c, CloudControlProvider as ca, configStringRefusal as cc, CFN_TEMPLATE_URL_LIMIT as cd, createReadOnlyAttributeHealerFactory as ci, withoutPhysicalNameCopies as cl, chunks as cn, coerceParameterTypedValue as co, reachableDivergentParameters as cr, refuseMalformedOrphanRecords as cs, markRefusedBeforeApplying as ct, isSensitiveAttributeName as cu, declaredStreamPolicyMember as d, unchangedBehindSecretReference as da, requireConfigArray as dc, uploadCfnTemplate as dd, maskEventTextWithBoundBags as di, isUncertifiedBaselineMaskPosition as dl, withApiLimit as dn, getAccountInfo as do, displayTextOrWithheld as dr, refuseMalformedOrphansForDestroy as ds, crossStackOutputProvenanceSource as dt, buildAssetRedirectMap as du, TemplateNoEchoReresolver as ea, coerceWarmThroughput as ec, resolveSkipPrefix as ed, supersededHolderOf as ei, shareLogOnlyValues as el, dropFailedCommands as en, AWS_CREDENTIAL_ENV_KEYS as eo, nameGenerationHighWaterOf as er, malformedResourceEntriesWarning as es, planTimeToLive as et, orphansAfterRollback as eu, declaredStreamTagsMember as f, RollbackInlinePolicyWriters as fa, requireConfigObject as fc, CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION as fd, namingSecretsWithRecordedNoEcho as fi, pathCrossesDottedKey as fl, readRefactorMarker as fn, isImpossibleEmptyStoredAttribute as fo, exportAliasCollisionScrubWarning as fr, refuseMalformedOrphansForOrphan as fs, inheritedProvenanceForChildDiff as ft, createAssetRedirectResolver as fu, streamDeclaresTags as g, deleteSkipReason as ga, describeTypeWithThrottleRetry as gc, canonicalizeRegion as gd, secretNamedAttributeNamesOf as gi, recordNestedStackParameterExpressions as gl, refuseRefactorMarker as gn, keepsSecretReferenceToken as go, carriedExportAliasExposure as gr, refuseMalformedResourceEntries as gs, childTemplateLoader as gt, BOOTSTRAP_MARKER_PREFIX as gu, streamDeclaresPolicy as h, deleteLeftInPlace as ha, templateResourceTypes as hc, PARTITION_TABLE as hd, secretNamePrintingBags as hi, inheritNestedStackParameterAssociations as hl, refactorMarkerRefusalMessage as hn, isNamelessDynamicReferenceError as ho, secretSafeKeyDisplay as hr, refuseMalformedResourceAttributesForOrphan as hs, serviceTokenBlockingReason as ht, AssetModeResolver as hu, PROTECTION_PROPERTY_BY_TYPE as i, withPrintingSecrets as ia, coerceCfnBoolean as ic, stateBucketExistenceConfirmed as id, noEchoComparisonForTemplate as ii, maskSecretsInError as il, loadJournaledOrphans as in, classifyRecordedSecretRegion as io, retiredNameGenerationsLeaving as ir, malformedStateRefusalMessage as is, S3_AUTO_DELETE_OBJECTS_TAG as it, PhaseClock as iu, setResolvedResourceTimeouts as j, withUnsettledProperties as ja, maskWholeValue as jc, displayAssemblyPath as jd, reserveStackCreateToken as ji, isSingleDynamicReferenceToken as jl, equalModuloMask as jn, UNREADABLE_RESOURCES_MAP_ROW as jo, findRefactorHints as jr, repairMalformedOrphansForReadOnly as js, keptWholeReasonText as jt, dockerSpawnEnvWithSensitive as ju, waitForGoneAfterDelete as k, unsettledItemsOf as ka, maskAtCoordinates as kc, absoluteAssemblyPathEscape as kd, earliestDefined as ki, wholeStringLeavesOf as kl, calculateResourceDrift as kn, STATE_RESOURCES_MALFORMED as ko, findDestructiveChanges as kr, refuseMalformedState as ks, diffSecurity as kt, describeDockerExecFailure as ku, STREAM_POLICY_KEY as l, slowCcOperationTimeoutMs as la, readConfigString as lc, MIGRATE_TMP_PREFIX as ld, completedReplayEntries as li, DYNAMIC_REFERENCE_TOKEN_SCAN as ll, isAccessDeniedError as ln, isUnboundTemplateParameter as lo, resourcesNamingDeclaredParameter as lr, refuseMalformedOrphanRecordsForDestroy as ls, IMPLICIT_DELETE_DEPENDENCIES as lt, stringifyValue as lu, reverseMapStreamPolicy as m, deleteIndeterminateGuards as ma, prefetchCreateOnlyPropertyPaths as mc, expectedOwnerParam as md, secretNamePrintingBag as mi, identityKeyFor as ml, refactorMarkerMovesOf as mn, carriesFetchableDynamicReference as mo, secretBearingStateKeyWarning as mr, refuseMalformedOutputsForDestroy as ms, findServiceTokenRefusals as mt, rewriteTemplateAssetReferences as mu, recordedProtectionEvidence as n, isCustomResourceType as na, toCfnInteger as nc, resolveStateBucketWithDefaultAndSource as nd, withoutSuperseded as ni, createSecretMasker as nl, isHandledOrphan as nn, callerEnvCredentials as no, retiredAfterRollback as nr, malformedResourcesWarning as ns, sendTtlWaitingOutRateLimit as nt, shouldRetainResource as nu, perType as o, applyCustomResourceResponseExpiration as oa, configBooleanRefusal as oc, ssmResolvedValueType as od, noEchoParameterNamesOf as oi, scrubResourceRecord as ol, sameJournaledOrphans as on, producerRegionsFromState as oo, computeParameterTaint as or, refuseDivergentRecordRegionForDestroy as os, isTruthyCfnBoolean as ot, timePhase as ou, planStreamMemberOps as p, UNSPECIFIED_SKIP_REASON as pa, requireConfigString as pc, decodeListingKey as pd, orphanRecordsPrintingBag as pi, spelledKeysOf as pl, readRefactorMarkerOnce as pn, carriesDynamicReference as po, secretBearing as pr, refuseMalformedOutputs as ps, deferredServiceTokenWarning as pt, loadPublishableAssetManifest as pu, planVectorIndexUpdates as q, recordedReferenceRegions as qa, createUnionSecretMasker as qc, stringifyIfAssigned as qi, exportNamesCarriedFrom as ql, REDACTED_DELETE_ADDRESS_SKIP_REASON as qn, malformedOrphanRecordsWarning as qo, addSuperseded as qr, findReplacedReadersOfRecreateTargets as qs, revertNestedChildFromJournal as qt, synthesisStatusMessage as qu, recordedProtectionNote as r, getCurrentResourceSecrets as ra, toFiniteNumber as rc, resolveUseCdkBootstrapAssets as rd, noEchoAttributeNamesOf as ri, errorCauseChain as rl, journaledOrphanLines as rn, envCredentialsAreAssumedRole as ro, retiredNameGenerationsAfter as rr, malformedScrubResourceEntriesRefusalMessage as rs, ECR_AUTO_DELETE_IMAGES_TAG as rt, stackInstanceIdCarriedFrom as ru, readProtection as s, customResourceResponseExpirationWarning as sa, configIntegerRefusal as sc, CFN_TEMPLATE_BODY_LIMIT as sd, withAttemptedItemsMasked as si, withPhysicalNameCopies as sl, formatResourceLine as sn, regionLessSecretName as so, namesAnyDeclaredParameter as sr, refuseMalformedNestedChildOutputs as ss, getPriorAttempts as st, AssetPublisher as su, DeployEngine as t, readsNoEchoDeleteValues as ta, isWarmThroughputDecrease as tc, resolveStateBucketWithDefault as td, supersededResourcesOf as ti, unionOfSecretBags as tl, dropFailedHint as tn, applyCallerIdentityCredentials as to, nameScopeOf as tr, malformedResourcePropertiesWarning as ts, readTtlSpec as tt, orphansCarriedFrom as tu, STREAM_TAGS_KEY as u, onlySecretReferencesDiffer as ua, replayWarn as uc, findLargeInlineResources as ud, journaledOrphanPrintingBag as ui, dynamicReferenceTokens as ul, lookupEachName as un, parameterTypeMayLoseSecretIdentity as uo, WITHHELD_NAME_DISPLAY as ur, refuseMalformedOrphans as us, computeImplicitDeleteEdges as ut, WorkGraph as uu, streamPolicyMatchesDeclared as v, isWaitAbandonedError as va, blockDeviceMappingsDifferOnlyInDeleteOnTermination as vc, AssemblyReader as vd, stateSecretNameNeedles as vi, physicalNameCopiesOf as vl, updateRefactorMarker as vn, cfnRefValueFromPhysicalId as vo, exportNameSecretExposure as vr, refuseMalformedResourceEntriesForDestroy as vs, isAbsoluteAssetPath as vt, ensureAssetStorage as vu, planIndexContributorInsightsOps as w, reEnableInstanceApiTermination as wa, sameLambdaFunctionAddress as wc, defineOwnKey as wd, createPreDeleteFinalSnapshot as wi, recordMaskOnlyValue as wl, replayRollback as wn, parameterInputsFor as wo, bindingSkippedOutputs as wr, refuseMalformedResourcePropertiesForExport as ws, parentSuppliedValues as wt, validateContainerRepoName as wu, contributorInsightsRefusals as x, isTerminationProtectionPropagationError as xa, emrClusterInstancesReplaced as xc, describeJsonParseFailure as xd, PRE_DELETE_SNAPSHOT_TYPES as xi, splitGetAttStringForm as xl, pendingMovesRefusalMessage as xn, refStateLookupFromResource as xo, collectDeclaredOutputNames as xr, refuseMalformedResourceEntriesForOrphan as xs, templateIdentity as xt, parseBootstrapMarker as xu, streamTagsMatchDeclared as y, disableInstanceApiTermination as ya, dbInstanceEngineChangeIsInPlace as yc, StageLoadError as yd, storedSecretNameNeedles as yi, recordAttributeIdCopy as yl, hasPendingMovesOut as yn, isStalePlaceholderArnAttribute as yo, isWholeDynamicReferenceValue as yr, refuseMalformedResourceEntriesForImport as ys, listNestedTemplateRows as yt, getBootstrapMarkerKey as yu, resolveDynamoDbDeleteBudgetMs as z, s3BucketRegionalDomainName as za, recordedNoEchoValuesOf as zc, DBPROXY_TAGS_WHAT as zi, crossPrefixDeniedWarning as zl, recordUnderIdIsNotOwn as zn, isReadableResourceEntry as zo, parseMappingFile as zr, withheldAccountClause as zs, recordRetainedForReadoption as zt, redactedCause as zu };
+//# sourceMappingURL=deploy-engine-q2VQt7uX.js.map