@rio-cloud/cdk-v2-constructs 8.6.1 → 8.7.0

package/lib/sbom-catalog/lambda/handler.cjs

@@ -1002,17 +1002,17 @@ var init_schemaDeserializationMiddleware = __esm({
           response,
           output: parsed
         };
-      } catch (error2) {
-        Object.defineProperty(error2, "$response", {
+      } catch (error3) {
+        Object.defineProperty(error3, "$response", {
           value: response,
           enumerable: false,
           writable: false,
           configurable: false
         });
-        if (!("$metadata" in error2)) {
+        if (!("$metadata" in error3)) {
           const hint = `Deserialization error: to see the raw response, inspect the hidden field {error}.$response on this object.`;
           try {
-            error2.message += "\n  " + hint;
+            error3.message += "\n  " + hint;
           } catch (ignored) {
             if (!context.logger || context.logger?.constructor?.name === "NoOpLogger") {
               console.warn(hint);
@@ -1020,16 +1020,16 @@ var init_schemaDeserializationMiddleware = __esm({
               context.logger?.warn?.(hint);
             }
           }
-          if (typeof error2.$responseBodyText !== "undefined") {
-            if (error2.$response) {
-              error2.$response.body = error2.$responseBodyText;
+          if (typeof error3.$responseBodyText !== "undefined") {
+            if (error3.$response) {
+              error3.$response.body = error3.$responseBodyText;
             }
           }
           try {
             if (HttpResponse.isInstance(response)) {
               const { headers = {}, statusCode } = response;
               const headerEntries = Object.entries(headers);
-              error2.$metadata = {
+              error3.$metadata = {
                 httpStatusCode: statusCode,
                 requestId: findHeader(/^x-[\w-]+-request-?id$/, headerEntries),
                 extendedRequestId: findHeader(/^x-[\w-]+-id-2$/, headerEntries),
@@ -1039,7 +1039,7 @@ var init_schemaDeserializationMiddleware = __esm({
           } catch (ignored) {
           }
         }
-        throw error2;
+        throw error3;
       }
     };
     findHeader = (pattern, headers) => {
@@ -3530,17 +3530,17 @@ var init_deserializerMiddleware = __esm({
           response,
           output: parsed
         };
-      } catch (error2) {
-        Object.defineProperty(error2, "$response", {
+      } catch (error3) {
+        Object.defineProperty(error3, "$response", {
           value: response,
           enumerable: false,
           writable: false,
           configurable: false
         });
-        if (!("$metadata" in error2)) {
+        if (!("$metadata" in error3)) {
           const hint = `Deserialization error: to see the raw response, inspect the hidden field {error}.$response on this object.`;
           try {
-            error2.message += "\n  " + hint;
+            error3.message += "\n  " + hint;
           } catch (ignored) {
             if (!context.logger || context.logger?.constructor?.name === "NoOpLogger") {
               console.warn(hint);
@@ -3548,16 +3548,16 @@ var init_deserializerMiddleware = __esm({
               context.logger?.warn?.(hint);
             }
           }
-          if (typeof error2.$responseBodyText !== "undefined") {
-            if (error2.$response) {
-              error2.$response.body = error2.$responseBodyText;
+          if (typeof error3.$responseBodyText !== "undefined") {
+            if (error3.$response) {
+              error3.$response.body = error3.$responseBodyText;
             }
           }
           try {
             if (HttpResponse.isInstance(response)) {
               const { headers = {} } = response;
               const headerEntries = Object.entries(headers);
-              error2.$metadata = {
+              error3.$metadata = {
                 httpStatusCode: response.statusCode,
                 requestId: findHeader2(/^x-[\w-]+-request-?id$/, headerEntries),
                 extendedRequestId: findHeader2(/^x-[\w-]+-id-2$/, headerEntries),
@@ -3567,7 +3567,7 @@ var init_deserializerMiddleware = __esm({
           } catch (ignored) {
           }
         }
-        throw error2;
+        throw error3;
       }
     };
     findHeader2 = (pattern, headers) => {
@@ -3601,8 +3601,8 @@ var init_ProviderError = __esm({
         Object.setPrototypeOf(this, _ProviderError.prototype);
         logger3?.debug?.(`@smithy/property-provider ${tryNextLink ? "->" : "(!)"} ${message}`);
       }
-      static from(error2, options = true) {
-        return Object.assign(new this(error2.message, options), error2);
+      static from(error3, options = true) {
+        return Object.assign(new this(error3.message, options), error3);
       }
     };
   }
@@ -5730,9 +5730,9 @@ var init_getEndpointUrl = __esm({
       if (typeof expression === "string") {
         try {
           return new URL(expression);
-        } catch (error2) {
-          console.error(`Failed to construct URL with ${expression}`, error2);
-          throw error2;
+        } catch (error3) {
+          console.error(`Failed to construct URL with ${expression}`, error3);
+          throw error3;
         }
       }
       throw new EndpointError(`Endpoint URL must be a string, got ${typeof expression}`);
@@ -5867,7 +5867,7 @@ var init_evaluateErrorRule = __esm({
     init_evaluateConditions();
     init_evaluateExpression();
     evaluateErrorRule = (errorRule, options) => {
-      const { conditions, error: error2 } = errorRule;
+      const { conditions, error: error3 } = errorRule;
       const { result, referenceRecord } = evaluateConditions(conditions, options);
       if (!result) {
         return;
@@ -5876,7 +5876,7 @@ var init_evaluateErrorRule = __esm({
         ...options,
         referenceRecord: { ...options.referenceRecord, ...referenceRecord }
       } : options;
-      throw new EndpointError(evaluateExpression(error2, "Error", errorRuleOptions));
+      throw new EndpointError(evaluateExpression(error3, "Error", errorRuleOptions));
     };
   }
 });
@@ -6183,15 +6183,15 @@ var init_ChecksumStream = __esm({
         }
         this.push(null);
       };
-      onSourceError = (error2) => {
-        this.destroy(error2);
+      onSourceError = (error3) => {
+        this.destroy(error3);
       };
       _read(size) {
         this.source.resume();
       }
-      _destroy(error2, callback) {
+      _destroy(error3, callback) {
         this.source?.destroy();
-        callback(error2);
+        callback(error3);
       }
     };
   }
@@ -6313,8 +6313,8 @@ var init_createChecksumStream_browser = __esm({
           const digest2 = await checksum.digest();
           const received = encoder(digest2);
           if (expectedChecksum !== received) {
-            const error2 = new Error(`Checksum mismatch: expected "${expectedChecksum}" but received "${received}" in response header "${checksumSourceLocation}".`);
-            controller.error(error2);
+            const error3 = new Error(`Checksum mismatch: expected "${expectedChecksum}" but received "${received}" in response header "${checksumSourceLocation}".`);
+            controller.error(error3);
           } else {
             controller.terminate();
           }
@@ -7562,14 +7562,14 @@ var init_Sha256Js = __esm({
           const h5 = new _Sha256Js();
           h5.update(key);
           const out = h5.digestSync();
-          const padded = new Uint8Array(BLOCK);
-          padded.set(out);
-          return padded;
+          const padded2 = new Uint8Array(BLOCK);
+          padded2.set(out);
+          return padded2;
         }
         if (key.byteLength < BLOCK) {
-          const padded = new Uint8Array(BLOCK);
-          padded.set(key);
-          return padded;
+          const padded2 = new Uint8Array(BLOCK);
+          padded2.set(key);
+          return padded2;
         }
         return key;
       }
@@ -8418,9 +8418,9 @@ function getMessageUnmarshaller(deserializer, toUtf83) {
       const exception = { [code]: message };
       const deserializedException = await deserializer(exception);
       if (deserializedException.$unknown) {
-        const error2 = new Error(toUtf83(message.body));
-        error2.name = code;
-        throw error2;
+        const error3 = new Error(toUtf83(message.body));
+        error3.name = code;
+        throw error3;
       }
       throw deserializedException[code];
     } else if (messageType === "event") {
@@ -10267,8 +10267,8 @@ var init_S3ExpressIdentityProviderImpl = __esm({
         return cache5.set(key, new S3ExpressIdentityCacheEntry(this.getIdentity(key))).identity;
       }
       async getIdentity(key) {
-        await this.cache.purgeExpired().catch((error2) => {
-          console.warn("Error while clearing expired entries in S3ExpressIdentityCache: \n" + error2);
+        await this.cache.purgeExpired().catch((error3) => {
+          console.warn("Error while clearing expired entries in S3ExpressIdentityCache: \n" + error3);
         });
         const session = await this.createSessionFn(key);
         if (!session.Credentials?.AccessKeyId || !session.Credentials?.SecretAccessKey) {
@@ -11168,18 +11168,18 @@ var init_constants5 = __esm({
 });
 
 // node_modules/@smithy/core/dist-es/submodules/retry/service-error-classification/service-error-classification.js
-function isNodeJsHttp2TransientError(error2) {
-  return error2.code === "ERR_HTTP2_STREAM_ERROR" && error2.message.includes("NGHTTP2_REFUSED_STREAM");
+function isNodeJsHttp2TransientError(error3) {
+  return error3.code === "ERR_HTTP2_STREAM_ERROR" && error3.message.includes("NGHTTP2_REFUSED_STREAM");
 }
 var isRetryableByTrait, isClockSkewError, isClockSkewCorrectedError, isBrowserNetworkError, isThrottlingError, isTransientError, isServerError;
 var init_service_error_classification = __esm({
   "node_modules/@smithy/core/dist-es/submodules/retry/service-error-classification/service-error-classification.js"() {
     "use strict";
     init_constants5();
-    isRetryableByTrait = (error2) => error2?.$retryable !== void 0;
-    isClockSkewError = (error2) => CLOCK_SKEW_ERROR_CODES.includes(error2.name);
-    isClockSkewCorrectedError = (error2) => error2.$metadata?.clockSkewCorrected;
-    isBrowserNetworkError = (error2) => {
+    isRetryableByTrait = (error3) => error3?.$retryable !== void 0;
+    isClockSkewError = (error3) => CLOCK_SKEW_ERROR_CODES.includes(error3.name);
+    isClockSkewCorrectedError = (error3) => error3.$metadata?.clockSkewCorrected;
+    isBrowserNetworkError = (error3) => {
       const errorMessages = /* @__PURE__ */ new Set([
         "Failed to fetch",
         "NetworkError when attempting to fetch resource",
@@ -11187,18 +11187,18 @@ var init_service_error_classification = __esm({
         "Load failed",
         "Network request failed"
       ]);
-      const isValid = error2 && error2 instanceof TypeError;
+      const isValid = error3 && error3 instanceof TypeError;
       if (!isValid) {
         return false;
       }
-      return errorMessages.has(error2.message);
+      return errorMessages.has(error3.message);
     };
-    isThrottlingError = (error2) => error2.$metadata?.httpStatusCode === 429 || THROTTLING_ERROR_CODES.includes(error2.name) || error2.$retryable?.throttling == true;
-    isTransientError = (error2, depth = 0) => isRetryableByTrait(error2) || isClockSkewCorrectedError(error2) || error2.name === "InvalidSignatureException" && error2.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error2.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error2?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error2?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error2.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error2) || isNodeJsHttp2TransientError(error2) || error2.cause !== void 0 && depth <= 10 && isTransientError(error2.cause, depth + 1);
-    isServerError = (error2) => {
-      if (error2.$metadata?.httpStatusCode !== void 0) {
-        const statusCode = error2.$metadata.httpStatusCode;
-        if (500 <= statusCode && statusCode <= 599 && !isTransientError(error2)) {
+    isThrottlingError = (error3) => error3.$metadata?.httpStatusCode === 429 || THROTTLING_ERROR_CODES.includes(error3.name) || error3.$retryable?.throttling == true;
+    isTransientError = (error3, depth = 0) => isRetryableByTrait(error3) || isClockSkewCorrectedError(error3) || error3.name === "InvalidSignatureException" && error3.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error3.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error3?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error3?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error3.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error3) || isNodeJsHttp2TransientError(error3) || error3.cause !== void 0 && depth <= 10 && isTransientError(error3.cause, depth + 1);
+    isServerError = (error3) => {
+      if (error3.$metadata?.httpStatusCode !== void 0) {
+        const statusCode = error3.$metadata.httpStatusCode;
+        if (500 <= statusCode && statusCode <= 599 && !isTransientError(error3)) {
           return true;
         }
         return false;
@@ -11281,14 +11281,14 @@ var asSdkError;
 var init_util = __esm({
   "node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/util.js"() {
     "use strict";
-    asSdkError = (error2) => {
-      if (error2 instanceof Error)
-        return error2;
-      if (error2 instanceof Object)
-        return Object.assign(new Error(), error2);
-      if (typeof error2 === "string")
-        return new Error(error2);
-      return new Error(`AWS SDK error wrapper for ${error2}`);
+    asSdkError = (error3) => {
+      if (error3 instanceof Error)
+        return error3;
+      if (error3 instanceof Object)
+        return Object.assign(new Error(), error3);
+      if (typeof error3 === "string")
+        return new Error(error3);
+      return new Error(`AWS SDK error wrapper for ${error3}`);
     };
   }
 });
@@ -11374,23 +11374,23 @@ var init_retryMiddleware = __esm({
     init_util();
     cooldown = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
     isRetryStrategyV2 = (retryStrategy) => typeof retryStrategy.acquireInitialRetryToken !== "undefined" && typeof retryStrategy.refreshRetryTokenForRetry !== "undefined" && typeof retryStrategy.recordSuccess !== "undefined";
-    getRetryErrorInfo = (error2, logger3) => {
+    getRetryErrorInfo = (error3, logger3) => {
       const errorInfo = {
-        error: error2,
-        errorType: getRetryErrorType(error2)
+        error: error3,
+        errorType: getRetryErrorType(error3)
       };
-      const retryAfterHint = parseRetryAfterHeader(error2.$response, logger3);
+      const retryAfterHint = parseRetryAfterHeader(error3.$response, logger3);
       if (retryAfterHint) {
         errorInfo.retryAfterHint = retryAfterHint;
       }
       return errorInfo;
     };
-    getRetryErrorType = (error2) => {
-      if (isThrottlingError(error2))
+    getRetryErrorType = (error3) => {
+      if (isThrottlingError(error3))
         return "THROTTLING";
-      if (isTransientError(error2))
+      if (isTransientError(error3))
         return "TRANSIENT";
-      if (isServerError(error2))
+      if (isServerError(error3))
         return "SERVER_ERROR";
       return "CLIENT_ERROR";
     };
@@ -11800,13 +11800,13 @@ var init_defaultRetryQuota = __esm({
       const retryCost = options?.retryCost ?? RETRY_COST;
       const timeoutRetryCost = options?.timeoutRetryCost ?? TIMEOUT_RETRY_COST;
       let availableCapacity = initialRetryTokens;
-      const getCapacityAmount = (error2) => error2.name === "TimeoutError" ? timeoutRetryCost : retryCost;
-      const hasRetryTokens = (error2) => getCapacityAmount(error2) <= availableCapacity;
-      const retrieveRetryTokens = (error2) => {
-        if (!hasRetryTokens(error2)) {
+      const getCapacityAmount = (error3) => error3.name === "TimeoutError" ? timeoutRetryCost : retryCost;
+      const hasRetryTokens = (error3) => getCapacityAmount(error3) <= availableCapacity;
+      const retrieveRetryTokens = (error3) => {
+        if (!hasRetryTokens(error3)) {
           throw new Error("No retry token available");
         }
-        const capacityAmount = getCapacityAmount(error2);
+        const capacityAmount = getCapacityAmount(error3);
         availableCapacity -= capacityAmount;
         return capacityAmount;
       };
@@ -11839,11 +11839,11 @@ var init_retryDecider = __esm({
   "node_modules/@smithy/core/dist-es/submodules/retry/middleware-retry/retry-pre-sra-deprecated/retryDecider.js"() {
     "use strict";
     init_service_error_classification();
-    defaultRetryDecider = (error2) => {
-      if (!error2) {
+    defaultRetryDecider = (error3) => {
+      if (!error3) {
         return false;
       }
-      return isRetryableByTrait(error2) || isClockSkewError(error2) || isThrottlingError(error2) || isTransientError(error2);
+      return isRetryableByTrait(error3) || isClockSkewError(error3) || isThrottlingError(error3) || isTransientError(error3);
     };
   }
 });
@@ -11874,8 +11874,8 @@ var init_StandardRetryStrategy2 = __esm({
         this.delayDecider = options?.delayDecider ?? defaultDelayDecider;
         this.retryQuota = options?.retryQuota ?? getDefaultRetryQuota(INITIAL_RETRY_TOKENS);
       }
-      shouldRetry(error2, attempts, maxAttempts) {
-        return attempts < maxAttempts && this.retryDecider(error2) && this.retryQuota.hasRetryTokens(error2);
+      shouldRetry(error3, attempts, maxAttempts) {
+        return attempts < maxAttempts && this.retryDecider(error3) && this.retryQuota.hasRetryTokens(error3);
       }
       async getMaxAttempts() {
         let maxAttempts;
@@ -12246,7 +12246,7 @@ var init_loggerMiddleware = __esm({
           metadata: $metadata
         });
         return response;
-      } catch (error2) {
+      } catch (error3) {
         const { clientName, commandName, logger: logger3, dynamoDbDocumentClientOptions = {} } = context;
         const { overrideInputFilterSensitiveLog } = dynamoDbDocumentClientOptions;
         const inputFilterSensitiveLog = overrideInputFilterSensitiveLog ?? context.inputFilterSensitiveLog;
@@ -12254,10 +12254,10 @@ var init_loggerMiddleware = __esm({
           clientName,
           commandName,
           input: inputFilterSensitiveLog(args.input),
-          error: error2,
-          metadata: error2.$metadata
+          error: error3,
+          metadata: error3.$metadata
         });
-        throw error2;
+        throw error3;
       }
     };
     loggerMiddlewareOptions = {
@@ -12642,8 +12642,8 @@ var init_httpSigningMiddleware = __esm({
     "use strict";
     init_protocols();
     init_transport();
-    defaultErrorHandler = (signingProperties) => (error2) => {
-      throw error2;
+    defaultErrorHandler = (signingProperties) => (error3) => {
+      throw error3;
     };
     defaultSuccessHandler = (httpResponse, signingProperties) => {
     };
@@ -14854,8 +14854,8 @@ var init_s3ExpressHttpSigningMiddleware = __esm({
     init_client2();
     init_protocols();
     init_signS3Express();
-    defaultErrorHandler2 = (signingProperties) => (error2) => {
-      throw error2;
+    defaultErrorHandler2 = (signingProperties) => (error3) => {
+      throw error3;
     };
     defaultSuccessHandler2 = (httpResponse, signingProperties) => {
     };
@@ -15151,20 +15151,20 @@ var init_ProtocolLib = __esm({
       decorateServiceException(exception, additions = {}) {
         if (this.queryCompat) {
           const msg = exception.Message ?? additions.Message;
-          const error2 = decorateServiceException(exception, additions);
+          const error3 = decorateServiceException(exception, additions);
           if (msg) {
-            error2.message = msg;
-          }
-          const errorObj = error2.Error ?? {};
-          errorObj.Type = error2.Error?.Type;
-          errorObj.Code = error2.Error?.Code;
-          errorObj.Message = error2.Error?.message ?? error2.Error?.Message ?? msg;
-          error2.Error = errorObj;
-          const reqId = error2.$metadata.requestId;
+            error3.message = msg;
+          }
+          const errorObj = error3.Error ?? {};
+          errorObj.Type = error3.Error?.Type;
+          errorObj.Code = error3.Error?.Code;
+          errorObj.Message = error3.Error?.message ?? error3.Error?.Message ?? msg;
+          error3.Error = errorObj;
+          const reqId = error3.$metadata.requestId;
           if (reqId) {
-            error2.RequestId = reqId;
+            error3.RequestId = reqId;
           }
-          return error2;
+          return error3;
         }
         return decorateServiceException(exception, additions);
       }
@@ -18446,12 +18446,12 @@ var init_validateChecksumFromResponse = __esm({
           let checksumAlgorithmFn;
           try {
             checksumAlgorithmFn = selectChecksumAlgorithmFunction(algorithm, config2);
-          } catch (error2) {
+          } catch (error3) {
             if (algorithm === ChecksumAlgorithm.CRC64NVME) {
-              logger3?.warn(`Skipping ${ChecksumAlgorithm.CRC64NVME} checksum validation: ${error2.message}`);
+              logger3?.warn(`Skipping ${ChecksumAlgorithm.CRC64NVME} checksum validation: ${error3.message}`);
               continue;
             }
-            throw error2;
+            throw error3;
           }
           const { base64Encoder } = config2;
           if (isStreaming(responseBody)) {
@@ -19233,8 +19233,8 @@ var init_AwsSdkSigV4Signer = __esm({
         return signedRequest;
       }
       errorHandler(signingProperties) {
-        return (error2) => {
-          const errorException = error2;
+        return (error3) => {
+          const errorException = error3;
           const serverTime = errorException.ServerTime ?? getDateHeader(errorException.$response);
           if (serverTime) {
             const config2 = throwSigningPropertyError("config", signingProperties.config);
@@ -19248,7 +19248,7 @@ var init_AwsSdkSigV4Signer = __esm({
               errorException.$metadata.clockSkewCorrected = true;
             }
           }
-          throw error2;
+          throw error3;
         };
       }
       successHandler(httpResponse, signingProperties) {
@@ -27400,8 +27400,8 @@ function __read(o3, n3) {
   var i5 = m3.call(o3), r5, ar = [], e5;
   try {
     while ((n3 === void 0 || n3-- > 0) && !(r5 = i5.next()).done) ar.push(r5.value);
-  } catch (error2) {
-    e5 = { error: error2 };
+  } catch (error3) {
+    e5 = { error: error3 };
   } finally {
     try {
       if (r5 && !r5.done && (m3 = i5["return"])) m3.call(i5);
@@ -27652,9 +27652,9 @@ var init_tslib_es6 = __esm({
       };
       return ownKeys(o3);
     };
-    _SuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error2, suppressed, message) {
+    _SuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error3, suppressed, message) {
       var e5 = new Error(message);
-      return e5.name = "SuppressedError", e5.error = error2, e5.suppressed = suppressed, e5;
+      return e5.name = "SuppressedError", e5.error = error3, e5.suppressed = suppressed, e5;
     };
     tslib_es6_default = {
       __extends,
@@ -28159,12 +28159,12 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
           let token;
           try {
             token = (await getMetadataToken({ ...endpoint, timeout })).toString();
-          } catch (error2) {
-            if (error2?.statusCode === 400) {
-              throw Object.assign(error2, {
+          } catch (error3) {
+            if (error3?.statusCode === 400) {
+              throw Object.assign(error3, {
                 message: "EC2 Metadata token request returned error"
               });
-            } else if (error2.message === "TimeoutError" || [403, 404, 405].includes(error2.statusCode)) {
+            } else if (error3.message === "TimeoutError" || [403, 404, 405].includes(error3.statusCode)) {
               disableFetchToken = true;
             }
             logger3?.debug("AWS SDK Instance Metadata", "using v1 fallback (initial)");
@@ -28291,12 +28291,12 @@ var require_dist_cjs22 = __commonJS({
         return timing.setTimeout(() => {
           let msg = `@smithy/node-http-handler - [${throwOnRequestTimeout ? "ERROR" : "WARN"}] a request has exceeded the configured ${timeoutInMs} ms requestTimeout.`;
           if (throwOnRequestTimeout) {
-            const error2 = Object.assign(new Error(msg), {
+            const error3 = Object.assign(new Error(msg), {
               name: "TimeoutError",
               code: "ETIMEDOUT"
             });
-            req.destroy(error2);
-            reject(error2);
+            req.destroy(error3);
+            reject(error3);
           } else {
             msg += ` Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.`;
             logger3?.warn?.(msg);
@@ -30423,13 +30423,13 @@ var require_dist_cjs24 = __commonJS({
             expiresAt: newTokenExpiration.toISOString(),
             refreshToken: newSsoOidcToken.refreshToken
           });
-        } catch (error2) {
+        } catch (error3) {
         }
         return {
           token: newSsoOidcToken.accessToken,
           expiration: newTokenExpiration
         };
-      } catch (error2) {
+      } catch (error3) {
         validateTokenExpiry(existingToken);
         return existingToken;
       }
@@ -32271,9 +32271,9 @@ var require_dist_cjs26 = __commonJS({
             accountId: newAccessToken.accountId,
             expiration
           };
-        } catch (error2) {
-          if (error2.name === "AccessDeniedException") {
-            const errorType = error2.error;
+        } catch (error3) {
+          if (error3.name === "AccessDeniedException") {
+            const errorType = error3.error;
             let message;
             switch (errorType) {
               case "TOKEN_EXPIRED":
@@ -32286,11 +32286,11 @@ var require_dist_cjs26 = __commonJS({
                 message = "Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";
                 break;
               default:
-                message = `Failed to refresh token: ${String(error2)}. Please re-authenticate using \`aws login\``;
+                message = `Failed to refresh token: ${String(error3)}. Please re-authenticate using \`aws login\``;
             }
             throw new CredentialsProviderError2(message, { logger: this.logger, tryNextLink: false });
           }
-          throw new CredentialsProviderError2(`Failed to refresh token: ${String(error2)}. Please re-authenticate using aws login`, { logger: this.logger });
+          throw new CredentialsProviderError2(`Failed to refresh token: ${String(error3)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
       }
       async loadToken() {
@@ -32314,8 +32314,8 @@ var require_dist_cjs26 = __commonJS({
             });
           }
           return token;
-        } catch (error2) {
-          throw new CredentialsProviderError2(`Failed to load token from ${tokenFilePath}: ${String(error2)}`, {
+        } catch (error3) {
+          throw new CredentialsProviderError2(`Failed to load token from ${tokenFilePath}: ${String(error3)}`, {
             logger: this.logger,
             tryNextLink: false
           });
@@ -32326,7 +32326,7 @@ var require_dist_cjs26 = __commonJS({
         const directory = dirname(tokenFilePath);
         try {
           await promises.mkdir(directory, { recursive: true });
-        } catch (error2) {
+        } catch (error3) {
         }
         await promises.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8");
       }
@@ -32417,8 +32417,8 @@ var require_dist_cjs26 = __commonJS({
           const rawSignature = this.derToRawSignature(asn1Signature);
           const signatureB64 = rawSignature.toString("base64url");
           return `${message}.${signatureB64}`;
-        } catch (error2) {
-          throw new CredentialsProviderError2(`Failed to generate Dpop proof: ${error2 instanceof Error ? error2.message : String(error2)}`, { logger: this.logger, tryNextLink: false });
+        } catch (error3) {
+          throw new CredentialsProviderError2(`Failed to generate Dpop proof: ${error3 instanceof Error ? error3.message : String(error3)}`, { logger: this.logger, tryNextLink: false });
         }
       }
     };
@@ -33721,8 +33721,8 @@ var require_dist_cjs27 = __commonJS({
               throw Error(`Profile ${profileName} credential_process returned invalid JSON.`);
             }
             return getValidatedProcessCredentials(profileName, data, profiles);
-          } catch (error2) {
-            throw new CredentialsProviderError2(error2.message, { logger: logger3 });
+          } catch (error3) {
+            throw new CredentialsProviderError2(error3.message, { logger: logger3 });
           }
         } else {
           throw new CredentialsProviderError2(`Profile ${profileName} did not contain credential_process.`, { logger: logger3 });
@@ -37139,16 +37139,16 @@ var LogFormatter = class {
    *
    * @param error - Error to format
    */
-  formatError(error2) {
-    const { name, message, stack, cause, ...errorAttributes } = error2;
+  formatError(error3) {
+    const { name, message, stack, cause, ...errorAttributes } = error3;
     const formattedError = {
       name,
-      location: this.getCodeLocation(error2.stack),
+      location: this.getCodeLocation(error3.stack),
       message,
       stack: isDevMode() && typeof stack === "string" ? stack?.split("\n") : stack,
       cause: cause instanceof Error ? this.formatError(cause) : cause
     };
-    for (const key in error2) {
+    for (const key in error3) {
       if (typeof key === "string" && !["name", "message", "stack", "cause"].includes(key)) {
         formattedError[key] = errorAttributes[key];
       }
@@ -38127,15 +38127,15 @@ var Logger = class _Logger extends Utility {
         }
         try {
           return await originalMethod.apply(this, args);
-        } catch (error2) {
+        } catch (error3) {
           if (options?.flushBufferOnUncaughtError) {
             loggerRef.flushBuffer();
             loggerRef.error({
               message: UncaughtErrorLogMessage,
-              error: error2
+              error: error3
             });
           }
-          throw error2;
+          throw error3;
         } finally {
           if (options?.clearState || options?.resetKeys)
             loggerRef.resetKeys();
@@ -38578,8 +38578,8 @@ var Logger = class _Logger extends Utility {
     if (traceId !== void 0 && this.shouldBufferLog(traceId, logLevel)) {
       try {
         this.bufferLogItem(traceId, this.createAndPopulateLogItem(logLevel, input, extraInput), logLevel);
-      } catch (error2) {
-        this.printLog(LogLevelThreshold.WARN, this.createAndPopulateLogItem(LogLevelThreshold.WARN, `Unable to buffer log: ${error2.message}`, [error2]));
+      } catch (error3) {
+        this.printLog(LogLevelThreshold.WARN, this.createAndPopulateLogItem(LogLevelThreshold.WARN, `Unable to buffer log: ${error3.message}`, [error3]));
         this.printLog(logLevel, this.createAndPopulateLogItem(logLevel, input, extraInput));
       }
       return;
@@ -38926,10 +38926,10 @@ var SBOM_CATALOG_BUCKET_ARN = `arn:aws:s3:::${SBOM_CATALOG_BUCKET_NAME}`;
 
 // src/sbom-catalog/lambda/upload-artifacts.ts
 var s3Client = new import_client_s3.S3Client({});
-async function uploadArtifacts(configuration) {
+async function uploadArtifacts(configuration, eventId, eventTime) {
   const isStandaloneUpload = "name" in configuration;
   const projectName = isStandaloneUpload ? configuration.name : configuration.collectionName;
-  const destinationPrefix = buildDestinationObjectKeyPrefix(configuration, projectName);
+  const destinationPrefix = buildDestinationObjectKeyPrefix(configuration, projectName, eventId, eventTime);
   let projects;
   let manifest;
   if (isStandaloneUpload) {
@@ -38945,13 +38945,29 @@ async function uploadArtifacts(configuration) {
   await writeToDestinationBucket(manifestKey, manifestBody);
   return { manifestKey, projects };
 }
-function buildDestinationObjectKeyPrefix(configuration, projectName) {
+function buildDestinationObjectKeyPrefix(configuration, projectName, eventId, eventTime) {
   return [
     `${configuration.originAccountId}-${configuration.originAccountName}`,
     projectName,
-    configuration.buildIdentifier
+    eventDestinationPath(eventId, eventTime)
   ].join("/");
 }
+function eventDestinationPath(eventId, eventTime) {
+  const timestamp = new Date(eventTime);
+  if (Number.isNaN(timestamp.getTime())) {
+    throw new Error(`Invalid EventBridge event time '${eventTime}'`);
+  }
+  const year2 = timestamp.getUTCFullYear();
+  const month = padded(timestamp.getUTCMonth() + 1);
+  const day = padded(timestamp.getUTCDate());
+  const hours = padded(timestamp.getUTCHours());
+  const minutes = padded(timestamp.getUTCMinutes());
+  const seconds = padded(timestamp.getUTCSeconds());
+  return `${year2}/${month}/${day}/${hours}${minutes}${seconds}-${eventId}`;
+}
+function padded(value) {
+  return value.toString().padStart(2, "0");
+}
 function buildStandaloneManifest(project) {
   return {
     schemaVersion: 1,
@@ -39810,10 +39826,10 @@ var initializer = (inst, def) => {
 };
 var $ZodError = $constructor("$ZodError", initializer);
 var $ZodRealError = $constructor("$ZodError", initializer, { Parent: Error });
-function flattenError(error2, mapper = (issue2) => issue2.message) {
+function flattenError(error3, mapper = (issue2) => issue2.message) {
   const fieldErrors = {};
   const formErrors = [];
-  for (const sub of error2.issues) {
+  for (const sub of error3.issues) {
     if (sub.path.length > 0) {
       fieldErrors[sub.path[0]] = fieldErrors[sub.path[0]] || [];
       fieldErrors[sub.path[0]].push(mapper(sub));
@@ -39823,10 +39839,10 @@ function flattenError(error2, mapper = (issue2) => issue2.message) {
   }
   return { formErrors, fieldErrors };
 }
-function formatError(error2, mapper = (issue2) => issue2.message) {
+function formatError(error3, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error3, path = []) => {
-    for (const issue2 of error3.issues) {
+  const processError = (error4, path = []) => {
+    for (const issue2 of error4.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
         issue2.errors.map((issues) => processError({ issues }, [...path, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
@@ -39856,7 +39872,7 @@ function formatError(error2, mapper = (issue2) => issue2.message) {
       }
     }
   };
-  processError(error2);
+  processError(error3);
   return fieldErrors;
 }
 
@@ -40624,8 +40640,8 @@ function isValidBase64URL(data) {
   if (!base64url.test(data))
     return false;
   const base642 = data.replace(/[-_]/g, (c5) => c5 === "-" ? "+" : "/");
-  const padded = base642.padEnd(Math.ceil(base642.length / 4) * 4, "=");
-  return isValidBase64(padded);
+  const padded2 = base642.padEnd(Math.ceil(base642.length / 4) * 4, "=");
+  return isValidBase64(padded2);
 }
 var $ZodBase64URL = /* @__PURE__ */ $constructor("$ZodBase64URL", (inst, def) => {
   def.pattern ?? (def.pattern = base64url);
@@ -41459,6 +41475,119 @@ function handleRefineResult(result, payload, input, inst) {
   }
 }
 
+// node_modules/zod/v4/locales/en.js
+var error2 = () => {
+  const Sizable = {
+    string: { unit: "characters", verb: "to have" },
+    file: { unit: "bytes", verb: "to have" },
+    array: { unit: "items", verb: "to have" },
+    set: { unit: "items", verb: "to have" },
+    map: { unit: "entries", verb: "to have" }
+  };
+  function getSizing(origin) {
+    return Sizable[origin] ?? null;
+  }
+  const FormatDictionary = {
+    regex: "input",
+    email: "email address",
+    url: "URL",
+    emoji: "emoji",
+    uuid: "UUID",
+    uuidv4: "UUIDv4",
+    uuidv6: "UUIDv6",
+    nanoid: "nanoid",
+    guid: "GUID",
+    cuid: "cuid",
+    cuid2: "cuid2",
+    ulid: "ULID",
+    xid: "XID",
+    ksuid: "KSUID",
+    datetime: "ISO datetime",
+    date: "ISO date",
+    time: "ISO time",
+    duration: "ISO duration",
+    ipv4: "IPv4 address",
+    ipv6: "IPv6 address",
+    mac: "MAC address",
+    cidrv4: "IPv4 range",
+    cidrv6: "IPv6 range",
+    base64: "base64-encoded string",
+    base64url: "base64url-encoded string",
+    json_string: "JSON string",
+    e164: "E.164 number",
+    jwt: "JWT",
+    template_literal: "input"
+  };
+  const TypeDictionary = {
+    // Compatibility: "nan" -> "NaN" for display
+    nan: "NaN"
+    // All other type names omitted - they fall back to raw values via ?? operator
+  };
+  return (issue2) => {
+    switch (issue2.code) {
+      case "invalid_type": {
+        const expected = TypeDictionary[issue2.expected] ?? issue2.expected;
+        const receivedType = parsedType(issue2.input);
+        const received = TypeDictionary[receivedType] ?? receivedType;
+        return `Invalid input: expected ${expected}, received ${received}`;
+      }
+      case "invalid_value":
+        if (issue2.values.length === 1)
+          return `Invalid input: expected ${stringifyPrimitive(issue2.values[0])}`;
+        return `Invalid option: expected one of ${joinValues(issue2.values, "|")}`;
+      case "too_big": {
+        const adj = issue2.inclusive ? "<=" : "<";
+        const sizing = getSizing(issue2.origin);
+        if (sizing)
+          return `Too big: expected ${issue2.origin ?? "value"} to have ${adj}${issue2.maximum.toString()} ${sizing.unit ?? "elements"}`;
+        return `Too big: expected ${issue2.origin ?? "value"} to be ${adj}${issue2.maximum.toString()}`;
+      }
+      case "too_small": {
+        const adj = issue2.inclusive ? ">=" : ">";
+        const sizing = getSizing(issue2.origin);
+        if (sizing) {
+          return `Too small: expected ${issue2.origin} to have ${adj}${issue2.minimum.toString()} ${sizing.unit}`;
+        }
+        return `Too small: expected ${issue2.origin} to be ${adj}${issue2.minimum.toString()}`;
+      }
+      case "invalid_format": {
+        const _issue = issue2;
+        if (_issue.format === "starts_with") {
+          return `Invalid string: must start with "${_issue.prefix}"`;
+        }
+        if (_issue.format === "ends_with")
+          return `Invalid string: must end with "${_issue.suffix}"`;
+        if (_issue.format === "includes")
+          return `Invalid string: must include "${_issue.includes}"`;
+        if (_issue.format === "regex")
+          return `Invalid string: must match pattern ${_issue.pattern}`;
+        return `Invalid ${FormatDictionary[_issue.format] ?? issue2.format}`;
+      }
+      case "not_multiple_of":
+        return `Invalid number: must be a multiple of ${issue2.divisor}`;
+      case "unrecognized_keys":
+        return `Unrecognized key${issue2.keys.length > 1 ? "s" : ""}: ${joinValues(issue2.keys, ", ")}`;
+      case "invalid_key":
+        return `Invalid key in ${issue2.origin}`;
+      case "invalid_union":
+        if (issue2.options && Array.isArray(issue2.options) && issue2.options.length > 0) {
+          const opts = issue2.options.map((o3) => `'${o3}'`).join(" | ");
+          return `Invalid discriminator value. Expected ${opts}`;
+        }
+        return "Invalid input";
+      case "invalid_element":
+        return `Invalid value in ${issue2.origin}`;
+      default:
+        return `Invalid input`;
+    }
+  };
+};
+function en_default() {
+  return {
+    localeError: error2()
+  };
+}
+
 // node_modules/zod/v4/core/registries.js
 var _a3;
 var $output = Symbol("ZodOutput");
@@ -42521,6 +42650,17 @@ var optionalProcessor = (schema, ctx, _json2, params) => {
 };
 
 // node_modules/zod/v4/classic/iso.js
+var iso_exports = {};
+__export(iso_exports, {
+  ZodISODate: () => ZodISODate,
+  ZodISODateTime: () => ZodISODateTime,
+  ZodISODuration: () => ZodISODuration,
+  ZodISOTime: () => ZodISOTime,
+  date: () => date3,
+  datetime: () => datetime2,
+  duration: () => duration2,
+  time: () => time3
+});
 var ZodISODateTime = /* @__PURE__ */ $constructor("ZodISODateTime", (inst, def) => {
   $ZodISODateTime.init(inst, def);
   ZodStringFormat.init(inst, def);
@@ -43283,6 +43423,9 @@ function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
 
+// node_modules/zod/v4/classic/external.js
+config(en_default());
+
 // src/sbom-catalog/lambda/upload-event.ts
 var requiredTextSchema = string2().min(1);
 var destinationKeySegmentSchema = requiredTextSchema.refine((value) => !value.includes("/"), {
@@ -43301,8 +43444,7 @@ var collectionChildSchema = object({
 });
 var sharedConfigurationFields = {
   originAccountId: destinationKeySegmentSchema,
-  originAccountName: destinationKeySegmentSchema,
-  buildIdentifier: destinationKeySegmentSchema
+  originAccountName: destinationKeySegmentSchema
 };
 var standaloneConfigurationSchema = object({
   ...sharedConfigurationFields,
@@ -43319,7 +43461,8 @@ var catalogConfigurationSchema = object({
   children: array(collectionChildSchema).min(1)
 });
 var uploadEventSchema = object({
-  eventId: requiredTextSchema,
+  eventId: destinationKeySegmentSchema,
+  eventTime: iso_exports.datetime(),
   stackId: requiredTextSchema,
   stackStatus: requiredTextSchema,
   configuration: union([standaloneConfigurationSchema, catalogConfigurationSchema])
@@ -43334,10 +43477,11 @@ var handler = async (event) => {
   const uploadEvent = parseUploadEvent(event);
   logger2.info("SBOM upload requested", {
     eventId: uploadEvent.eventId,
+    eventTime: uploadEvent.eventTime,
     stackId: uploadEvent.stackId,
     stackStatus: uploadEvent.stackStatus
   });
-  const result = await uploadArtifacts(uploadEvent.configuration);
+  const result = await uploadArtifacts(uploadEvent.configuration, uploadEvent.eventId, uploadEvent.eventTime);
   logger2.info("SBOM upload completed", {
     manifestKey: result.manifestKey,
     projects: result.projects