cdk-assets 4.7.2 → 4.7.4

package/bin/docker-credential-cdk-assets.js

@@ -198,8 +198,8 @@ var require_windows = __commonJS({
   "../../node_modules/isexe/windows.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs13 = require("fs");
-    function checkPathExt(path12, options) {
+    var fs14 = require("fs");
+    function checkPathExt(path14, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -210,28 +210,28 @@ var require_windows = __commonJS({
       }
       for (var i6 = 0; i6 < pathext.length; i6++) {
         var p3 = pathext[i6].toLowerCase();
-        if (p3 && path12.substr(-p3.length).toLowerCase() === p3) {
+        if (p3 && path14.substr(-p3.length).toLowerCase() === p3) {
           return true;
         }
       }
       return false;
     }
     __name(checkPathExt, "checkPathExt");
-    function checkStat(stat, path12, options) {
+    function checkStat(stat, path14, options) {
       if (!stat.isSymbolicLink() && !stat.isFile()) {
         return false;
       }
-      return checkPathExt(path12, options);
+      return checkPathExt(path14, options);
     }
     __name(checkStat, "checkStat");
-    function isexe(path12, options, cb) {
-      fs13.stat(path12, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path12, options));
+    function isexe(path14, options, cb) {
+      fs14.stat(path14, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, path14, options));
       });
     }
     __name(isexe, "isexe");
-    function sync(path12, options) {
-      return checkStat(fs13.statSync(path12), path12, options);
+    function sync(path14, options) {
+      return checkStat(fs14.statSync(path14), path14, options);
     }
     __name(sync, "sync");
   }
@@ -242,15 +242,15 @@ var require_mode = __commonJS({
   "../../node_modules/isexe/mode.js"(exports2, module2) {
     module2.exports = isexe;
     isexe.sync = sync;
-    var fs13 = require("fs");
-    function isexe(path12, options, cb) {
-      fs13.stat(path12, function(er, stat) {
+    var fs14 = require("fs");
+    function isexe(path14, options, cb) {
+      fs14.stat(path14, function(er, stat) {
         cb(er, er ? false : checkStat(stat, options));
       });
     }
     __name(isexe, "isexe");
-    function sync(path12, options) {
-      return checkStat(fs13.statSync(path12), options);
+    function sync(path14, options) {
+      return checkStat(fs14.statSync(path14), options);
     }
     __name(sync, "sync");
     function checkStat(stat, options) {
@@ -277,7 +277,7 @@ var require_mode = __commonJS({
 // ../../node_modules/isexe/index.js
 var require_isexe = __commonJS({
   "../../node_modules/isexe/index.js"(exports2, module2) {
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     var core;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
       core = require_windows();
@@ -286,7 +286,7 @@ var require_isexe = __commonJS({
     }
     module2.exports = isexe;
     isexe.sync = sync;
-    function isexe(path12, options, cb) {
+    function isexe(path14, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -296,7 +296,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve5, reject) {
-          isexe(path12, options || {}, function(er, is) {
+          isexe(path14, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -305,7 +305,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path12, options || {}, function(er, is) {
+      core(path14, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -316,9 +316,9 @@ var require_isexe = __commonJS({
       });
     }
     __name(isexe, "isexe");
-    function sync(path12, options) {
+    function sync(path14, options) {
       try {
-        return core.sync(path12, options || {});
+        return core.sync(path14, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -335,7 +335,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "../../node_modules/cross-spawn/node_modules/which/which.js"(exports2, module2) {
     var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path12 = require("path");
+    var path14 = require("path");
     var COLON2 = isWindows ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = /* @__PURE__ */ __name((cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" }), "getNotFoundError");
@@ -373,7 +373,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve5(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i6];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path12.join(pathPart, cmd);
+        const pCmd = path14.join(pathPart, cmd);
         const p3 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve5(subStep(p3, i6, 0));
       }), "step");
@@ -400,7 +400,7 @@ var require_which = __commonJS({
       for (let i6 = 0; i6 < pathEnv.length; i6++) {
         const ppRaw = pathEnv[i6];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path12.join(pathPart, cmd);
+        const pCmd = path14.join(pathPart, cmd);
         const p3 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j6 = 0; j6 < pathExt.length; j6++) {
           const cur = p3 + pathExt[j6];
@@ -448,7 +448,7 @@ var require_path_key = __commonJS({
 var require_resolveCommand = __commonJS({
   "../../node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
     "use strict";
-    var path12 = require("path");
+    var path14 = require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -466,7 +466,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env2[getPathKey({ env: env2 })],
-          pathExt: withoutPathExt ? path12.delimiter : void 0
+          pathExt: withoutPathExt ? path14.delimiter : void 0
         });
       } catch (e6) {
       } finally {
@@ -475,7 +475,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path12.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path14.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -533,8 +533,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path12, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path12.split("/").pop();
+      const [path14, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path14.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -547,16 +547,16 @@ var require_shebang_command = __commonJS({
 var require_readShebang = __commonJS({
   "../../node_modules/cross-spawn/lib/util/readShebang.js"(exports2, module2) {
     "use strict";
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command6) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs13.openSync(command6, "r");
-        fs13.readSync(fd, buffer, 0, size, 0);
-        fs13.closeSync(fd);
+        fd = fs14.openSync(command6, "r");
+        fs14.readSync(fd, buffer, 0, size, 0);
+        fs14.closeSync(fd);
       } catch (e6) {
       }
       return shebangCommand(buffer.toString());
@@ -570,7 +570,7 @@ var require_readShebang = __commonJS({
 var require_parse = __commonJS({
   "../../node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
     "use strict";
-    var path12 = require("path");
+    var path14 = require("path");
     var resolveCommand = require_resolveCommand();
     var escape = require_escape();
     var readShebang = require_readShebang();
@@ -596,7 +596,7 @@ var require_parse = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path12.normalize(parsed.command);
+        parsed.command = path14.normalize(parsed.command);
         parsed.command = escape.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -840,6 +840,7 @@ var require_subprocess = __commonJS({
     async function runUserCommandLine(commandLine, options = {}) {
       const child = child_process.spawn(commandLine, {
         ...spawnOptions(options),
+        // eslint-disable-next-line no-restricted-syntax -- this is the single sanctioned shell entry point (see the module header)
         shell: true
       });
       return monitor(child, commandLine, options);
@@ -1077,7 +1078,7 @@ var require_path = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.convertPosixPathToPattern = exports2.convertWindowsPathToPattern = exports2.convertPathToPattern = exports2.escapePosixPath = exports2.escapeWindowsPath = exports2.escape = exports2.removeLeadingDotSegment = exports2.makeAbsolute = exports2.unixify = void 0;
     var os5 = require("os");
-    var path12 = require("path");
+    var path14 = require("path");
     var IS_WINDOWS_PLATFORM = os5.platform() === "win32";
     var LEADING_DOT_SEGMENT_CHARACTERS_COUNT = 2;
     var POSIX_UNESCAPED_GLOB_SYMBOLS_RE = /(\\?)([()*?[\]{|}]|^!|[!+@](?=\()|\\(?![!()*+?@[\]{|}]))/g;
@@ -1090,7 +1091,7 @@ var require_path = __commonJS({
     __name(unixify, "unixify");
     exports2.unixify = unixify;
     function makeAbsolute(cwd, filepath) {
-      return path12.resolve(cwd, filepath);
+      return path14.resolve(cwd, filepath);
     }
     __name(makeAbsolute, "makeAbsolute");
     exports2.makeAbsolute = makeAbsolute;
@@ -2407,7 +2408,7 @@ var require_braces = __commonJS({
 var require_constants2 = __commonJS({
   "../../node_modules/micromatch/node_modules/picomatch/lib/constants.js"(exports2, module2) {
     "use strict";
-    var path12 = require("path");
+    var path14 = require("path");
     var WIN_SLASH = "\\\\/";
     var WIN_NO_SLASH = `[^${WIN_SLASH}]`;
     var DEFAULT_MAX_EXTGLOB_RECURSION = 0;
@@ -2581,7 +2582,7 @@ var require_constants2 = __commonJS({
       /* | */
       CHAR_ZERO_WIDTH_NOBREAK_SPACE: 65279,
       /* \uFEFF */
-      SEP: path12.sep,
+      SEP: path14.sep,
       /**
        * Create EXTGLOB_CHARS
        */
@@ -2608,7 +2609,7 @@ var require_constants2 = __commonJS({
 var require_utils2 = __commonJS({
   "../../node_modules/micromatch/node_modules/picomatch/lib/utils.js"(exports2) {
     "use strict";
-    var path12 = require("path");
+    var path14 = require("path");
     var win32 = process.platform === "win32";
     var {
       REGEX_BACKSLASH,
@@ -2637,7 +2638,7 @@ var require_utils2 = __commonJS({
       if (options && typeof options.windows === "boolean") {
         return options.windows;
       }
-      return win32 === true || path12.sep === "\\";
+      return win32 === true || path14.sep === "\\";
     };
     exports2.escapeLast = (input, char, lastIdx) => {
       const idx = input.lastIndexOf(char, lastIdx);
@@ -4001,7 +4002,7 @@ var require_parse3 = __commonJS({
 var require_picomatch = __commonJS({
   "../../node_modules/micromatch/node_modules/picomatch/lib/picomatch.js"(exports2, module2) {
     "use strict";
-    var path12 = require("path");
+    var path14 = require("path");
     var scan = require_scan();
     var parse3 = require_parse3();
     var utils = require_utils2();
@@ -4086,7 +4087,7 @@ var require_picomatch = __commonJS({
     };
     picomatch.matchBase = (input, glob, options, posix = utils.isWindows(options)) => {
       const regex = glob instanceof RegExp ? glob : picomatch.makeRe(glob, options);
-      return regex.test(path12.basename(input));
+      return regex.test(path14.basename(input));
     };
     picomatch.isMatch = (str, patterns, options) => picomatch(patterns, options)(str);
     picomatch.parse = (pattern, options) => {
@@ -4313,7 +4314,7 @@ var require_pattern = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.isAbsolute = exports2.partitionAbsoluteAndRelative = exports2.removeDuplicateSlashes = exports2.matchAny = exports2.convertPatternsToRe = exports2.makeRe = exports2.getPatternParts = exports2.expandBraceExpansion = exports2.expandPatternsWithBraceExpansion = exports2.isAffectDepthOfReadingPattern = exports2.endsWithSlashGlobStar = exports2.hasGlobStar = exports2.getBaseDirectory = exports2.isPatternRelatedToParentDirectory = exports2.getPatternsOutsideCurrentDirectory = exports2.getPatternsInsideCurrentDirectory = exports2.getPositivePatterns = exports2.getNegativePatterns = exports2.isPositivePattern = exports2.isNegativePattern = exports2.convertToNegativePattern = exports2.convertToPositivePattern = exports2.isDynamicPattern = exports2.isStaticPattern = void 0;
-    var path12 = require("path");
+    var path14 = require("path");
     var globParent = require_glob_parent();
     var micromatch = require_micromatch();
     var GLOBSTAR = "**";
@@ -4423,7 +4424,7 @@ var require_pattern = __commonJS({
     __name(endsWithSlashGlobStar, "endsWithSlashGlobStar");
     exports2.endsWithSlashGlobStar = endsWithSlashGlobStar;
     function isAffectDepthOfReadingPattern(pattern) {
-      const basename = path12.basename(pattern);
+      const basename = path14.basename(pattern);
       return endsWithSlashGlobStar(pattern) || isStaticPattern(basename);
     }
     __name(isAffectDepthOfReadingPattern, "isAffectDepthOfReadingPattern");
@@ -4490,7 +4491,7 @@ var require_pattern = __commonJS({
     __name(partitionAbsoluteAndRelative, "partitionAbsoluteAndRelative");
     exports2.partitionAbsoluteAndRelative = partitionAbsoluteAndRelative;
     function isAbsolute(pattern) {
-      return path12.isAbsolute(pattern);
+      return path14.isAbsolute(pattern);
     }
     __name(isAbsolute, "isAbsolute");
     exports2.isAbsolute = isAbsolute;
@@ -4679,10 +4680,10 @@ var require_utils3 = __commonJS({
     exports2.array = array;
     var errno = require_errno();
     exports2.errno = errno;
-    var fs13 = require_fs();
-    exports2.fs = fs13;
-    var path12 = require_path();
-    exports2.path = path12;
+    var fs14 = require_fs();
+    exports2.fs = fs14;
+    var path14 = require_path();
+    exports2.path = path14;
     var pattern = require_pattern();
     exports2.pattern = pattern;
     var stream = require_stream();
@@ -4802,8 +4803,8 @@ var require_async = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.read = void 0;
-    function read(path12, settings, callback) {
-      settings.fs.lstat(path12, (lstatError, lstat) => {
+    function read(path14, settings, callback) {
+      settings.fs.lstat(path14, (lstatError, lstat) => {
         if (lstatError !== null) {
           callFailureCallback(callback, lstatError);
           return;
@@ -4812,7 +4813,7 @@ var require_async = __commonJS({
           callSuccessCallback(callback, lstat);
           return;
         }
-        settings.fs.stat(path12, (statError, stat) => {
+        settings.fs.stat(path14, (statError, stat) => {
           if (statError !== null) {
             if (settings.throwErrorOnBrokenSymbolicLink) {
               callFailureCallback(callback, statError);
@@ -4847,13 +4848,13 @@ var require_sync = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.read = void 0;
-    function read(path12, settings) {
-      const lstat = settings.fs.lstatSync(path12);
+    function read(path14, settings) {
+      const lstat = settings.fs.lstatSync(path14);
       if (!lstat.isSymbolicLink() || !settings.followSymbolicLink) {
         return lstat;
       }
       try {
-        const stat = settings.fs.statSync(path12);
+        const stat = settings.fs.statSync(path14);
         if (settings.markSymbolicLink) {
           stat.isSymbolicLink = () => true;
         }
@@ -4876,12 +4877,12 @@ var require_fs2 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.createFileSystemAdapter = exports2.FILE_SYSTEM_ADAPTER = void 0;
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     exports2.FILE_SYSTEM_ADAPTER = {
-      lstat: fs13.lstat,
-      stat: fs13.stat,
-      lstatSync: fs13.lstatSync,
-      statSync: fs13.statSync
+      lstat: fs14.lstat,
+      stat: fs14.stat,
+      lstatSync: fs14.lstatSync,
+      statSync: fs14.statSync
     };
     function createFileSystemAdapter(fsMethods) {
       if (fsMethods === void 0) {
@@ -4899,7 +4900,7 @@ var require_settings = __commonJS({
   "../../node_modules/@nodelib/fs.stat/out/settings.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var fs13 = require_fs2();
+    var fs14 = require_fs2();
     var Settings = class {
       static {
         __name(this, "Settings");
@@ -4907,7 +4908,7 @@ var require_settings = __commonJS({
       constructor(_options = {}) {
         this._options = _options;
         this.followSymbolicLink = this._getValue(this._options.followSymbolicLink, true);
-        this.fs = fs13.createFileSystemAdapter(this._options.fs);
+        this.fs = fs14.createFileSystemAdapter(this._options.fs);
         this.markSymbolicLink = this._getValue(this._options.markSymbolicLink, false);
         this.throwErrorOnBrokenSymbolicLink = this._getValue(this._options.throwErrorOnBrokenSymbolicLink, true);
       }
@@ -4929,18 +4930,18 @@ var require_out = __commonJS({
     var sync = require_sync();
     var settings_1 = require_settings();
     exports2.Settings = settings_1.default;
-    function stat(path12, optionsOrSettingsOrCallback, callback) {
+    function stat(path14, optionsOrSettingsOrCallback, callback) {
       if (typeof optionsOrSettingsOrCallback === "function") {
-        async.read(path12, getSettings(), optionsOrSettingsOrCallback);
+        async.read(path14, getSettings(), optionsOrSettingsOrCallback);
         return;
       }
-      async.read(path12, getSettings(optionsOrSettingsOrCallback), callback);
+      async.read(path14, getSettings(optionsOrSettingsOrCallback), callback);
     }
     __name(stat, "stat");
     exports2.stat = stat;
-    function statSync3(path12, optionsOrSettings) {
+    function statSync3(path14, optionsOrSettings) {
       const settings = getSettings(optionsOrSettings);
-      return sync.read(path12, settings);
+      return sync.read(path14, settings);
     }
     __name(statSync3, "statSync");
     exports2.statSync = statSync3;
@@ -5073,8 +5074,8 @@ var require_utils4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.fs = void 0;
-    var fs13 = require_fs3();
-    exports2.fs = fs13;
+    var fs14 = require_fs3();
+    exports2.fs = fs14;
   }
 });
 
@@ -5170,16 +5171,16 @@ var require_async2 = __commonJS({
           return;
         }
         const tasks = names.map((name) => {
-          const path12 = common.joinPathSegments(directory, name, settings.pathSegmentSeparator);
+          const path14 = common.joinPathSegments(directory, name, settings.pathSegmentSeparator);
           return (done) => {
-            fsStat.stat(path12, settings.fsStatSettings, (error2, stats) => {
+            fsStat.stat(path14, settings.fsStatSettings, (error2, stats) => {
               if (error2 !== null) {
                 done(error2);
                 return;
               }
               const entry = {
                 name,
-                path: path12,
+                path: path14,
                 dirent: utils.fs.createDirentFromStats(name, stats)
               };
               if (settings.stats) {
@@ -5279,14 +5280,14 @@ var require_fs4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.createFileSystemAdapter = exports2.FILE_SYSTEM_ADAPTER = void 0;
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     exports2.FILE_SYSTEM_ADAPTER = {
-      lstat: fs13.lstat,
-      stat: fs13.stat,
-      lstatSync: fs13.lstatSync,
-      statSync: fs13.statSync,
-      readdir: fs13.readdir,
-      readdirSync: fs13.readdirSync
+      lstat: fs14.lstat,
+      stat: fs14.stat,
+      lstatSync: fs14.lstatSync,
+      statSync: fs14.statSync,
+      readdir: fs14.readdir,
+      readdirSync: fs14.readdirSync
     };
     function createFileSystemAdapter(fsMethods) {
       if (fsMethods === void 0) {
@@ -5304,9 +5305,9 @@ var require_settings2 = __commonJS({
   "../../node_modules/@nodelib/fs.scandir/out/settings.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var path12 = require("path");
+    var path14 = require("path");
     var fsStat = require_out();
-    var fs13 = require_fs4();
+    var fs14 = require_fs4();
     var Settings = class {
       static {
         __name(this, "Settings");
@@ -5314,8 +5315,8 @@ var require_settings2 = __commonJS({
       constructor(_options = {}) {
         this._options = _options;
         this.followSymbolicLinks = this._getValue(this._options.followSymbolicLinks, false);
-        this.fs = fs13.createFileSystemAdapter(this._options.fs);
-        this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path12.sep);
+        this.fs = fs14.createFileSystemAdapter(this._options.fs);
+        this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path14.sep);
         this.stats = this._getValue(this._options.stats, false);
         this.throwErrorOnBrokenSymbolicLink = this._getValue(this._options.throwErrorOnBrokenSymbolicLink, true);
         this.fsStatSettings = new fsStat.Settings({
@@ -5342,18 +5343,18 @@ var require_out2 = __commonJS({
     var sync = require_sync2();
     var settings_1 = require_settings2();
     exports2.Settings = settings_1.default;
-    function scandir(path12, optionsOrSettingsOrCallback, callback) {
+    function scandir(path14, optionsOrSettingsOrCallback, callback) {
       if (typeof optionsOrSettingsOrCallback === "function") {
-        async.read(path12, getSettings(), optionsOrSettingsOrCallback);
+        async.read(path14, getSettings(), optionsOrSettingsOrCallback);
         return;
       }
-      async.read(path12, getSettings(optionsOrSettingsOrCallback), callback);
+      async.read(path14, getSettings(optionsOrSettingsOrCallback), callback);
     }
     __name(scandir, "scandir");
     exports2.scandir = scandir;
-    function scandirSync(path12, optionsOrSettings) {
+    function scandirSync(path14, optionsOrSettings) {
       const settings = getSettings(optionsOrSettings);
-      return sync.read(path12, settings);
+      return sync.read(path14, settings);
     }
     __name(scandirSync, "scandirSync");
     exports2.scandirSync = scandirSync;
@@ -6050,7 +6051,7 @@ var require_settings3 = __commonJS({
   "../../node_modules/@nodelib/fs.walk/out/settings.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var path12 = require("path");
+    var path14 = require("path");
     var fsScandir = require_out2();
     var Settings = class {
       static {
@@ -6063,7 +6064,7 @@ var require_settings3 = __commonJS({
         this.deepFilter = this._getValue(this._options.deepFilter, null);
         this.entryFilter = this._getValue(this._options.entryFilter, null);
         this.errorFilter = this._getValue(this._options.errorFilter, null);
-        this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path12.sep);
+        this.pathSegmentSeparator = this._getValue(this._options.pathSegmentSeparator, path14.sep);
         this.fsScandirSettings = new fsScandir.Settings({
           followSymbolicLinks: this._options.followSymbolicLinks,
           fs: this._options.fs,
@@ -6129,7 +6130,7 @@ var require_reader2 = __commonJS({
   "../../node_modules/fast-glob/out/readers/reader.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var path12 = require("path");
+    var path14 = require("path");
     var fsStat = require_out();
     var utils = require_utils3();
     var Reader = class {
@@ -6145,7 +6146,7 @@ var require_reader2 = __commonJS({
         });
       }
       _getFullEntryPath(filepath) {
-        return path12.resolve(this._settings.cwd, filepath);
+        return path14.resolve(this._settings.cwd, filepath);
       }
       _makeEntry(stats, pattern) {
         const entry = {
@@ -6585,7 +6586,7 @@ var require_provider = __commonJS({
   "../../node_modules/fast-glob/out/providers/provider.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    var path12 = require("path");
+    var path14 = require("path");
     var deep_1 = require_deep();
     var entry_1 = require_entry();
     var error_1 = require_error();
@@ -6602,7 +6603,7 @@ var require_provider = __commonJS({
         this.entryTransformer = new entry_2.default(this._settings);
       }
       _getRootDirectory(task) {
-        return path12.resolve(this._settings.cwd, task.base);
+        return path14.resolve(this._settings.cwd, task.base);
       }
       _getReaderOptions(task) {
         const basePath = task.base === "." ? "" : task.base;
@@ -6795,16 +6796,16 @@ var require_settings4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.DEFAULT_FILE_SYSTEM_ADAPTER = void 0;
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     var os5 = require("os");
     var CPU_COUNT = Math.max(os5.cpus().length, 1);
     exports2.DEFAULT_FILE_SYSTEM_ADAPTER = {
-      lstat: fs13.lstat,
-      lstatSync: fs13.lstatSync,
-      stat: fs13.stat,
-      statSync: fs13.statSync,
-      readdir: fs13.readdir,
-      readdirSync: fs13.readdirSync
+      lstat: fs14.lstat,
+      lstatSync: fs14.lstatSync,
+      stat: fs14.stat,
+      statSync: fs14.statSync,
+      readdir: fs14.readdir,
+      readdirSync: fs14.readdirSync
     };
     var Settings = class {
       static {
@@ -7282,7 +7283,7 @@ var require_dist = __commonJS({
 // ../../node_modules/yazl/index.js
 var require_yazl = __commonJS({
   "../../node_modules/yazl/index.js"(exports2) {
-    var fs13 = require("fs");
+    var fs14 = require("fs");
     var Transform = require("stream").Transform;
     var PassThrough2 = require("stream").PassThrough;
     var zlib2 = require("zlib");
@@ -7313,14 +7314,14 @@ var require_yazl = __commonJS({
       if (shouldIgnoreAdding(self2)) return;
       var entry = new Entry(metadataPath, false, options);
       self2.entries.push(entry);
-      fs13.stat(realPath, function(err, stats) {
+      fs14.stat(realPath, function(err, stats) {
         if (err) return self2.emit("error", err);
         if (!stats.isFile()) return self2.emit("error", new Error("not a file: " + realPath));
         entry.uncompressedSize = stats.size;
         if (options.mtime == null) entry.setLastModDate(stats.mtime);
         if (options.mode == null) entry.setFileAttributesMode(stats.mode);
         entry.setFileDataPumpFunction(function() {
-          var readStream = fs13.createReadStream(realPath);
+          var readStream = fs14.createReadStream(realPath);
           entry.state = Entry.FILE_DATA_IN_PROGRESS;
           readStream.on("error", function(err2) {
             self2.emit("error", err2);
@@ -7990,7 +7991,7 @@ var require_zip = __commonJS({
     exports2.zipDirectory = zipDirectory2;
     exports2.zipString = zipString;
     var fs_1 = require("fs");
-    var path12 = __importStar2(require("path"));
+    var path14 = __importStar2(require("path"));
     var fast_glob_1 = require_out4();
     var yazl_1 = require_yazl();
     function epoch() {
@@ -8038,7 +8039,7 @@ var require_zip = __commonJS({
         output.once("close", ok);
         zip.outputStream.pipe(output);
         for (const file of files) {
-          const fullPath = path12.resolve(directory, file);
+          const fullPath = path14.resolve(directory, file);
           const [data, stat] = await Promise.all([fs_1.promises.readFile(fullPath), fs_1.promises.stat(fullPath)]);
           zip.addBuffer(data, file, {
             mtime: epoch(),
@@ -8126,7 +8127,7 @@ var init_tools = __esm({
 
 // ../@aws-cdk/cdk-assets-lib/lib/private/shell.ts
 async function shell(command6, options) {
-  const displayCommand = (0, tools_exports.renderForDisplay)(command6);
+  const displayCommand = (0, tools_exports.renderForDisplay)(redactSensitiveArgs(command6, options.redactFlags));
   handleShellOutput(displayCommand, options, "open");
   try {
     const result = await (0, tools_exports.run)(command6, {
@@ -8144,10 +8145,11 @@ async function shell(command6, options) {
       }
       handleShellOutput(displayCommand, options, "close");
       const stderr = e6.stderr.trim();
+      const message = e6.message.replace(e6.command, () => displayCommand);
       throw new ProcessFailed(
         e6.exitCode,
         e6.signal,
-        stderr ? `${e6.message}: ${stderr}` : e6.message
+        stderr ? `${message}: ${stderr}` : message
       );
     }
     throw e6;
@@ -8156,6 +8158,9 @@ async function shell(command6, options) {
 function handleShellOutput(chunk, options, shellEventType) {
   switch (options.subprocessOutputDestination) {
     case "ignore":
+      if (shellEventType === "open") {
+        options.shellEventPublisher(shellEventType, chunk);
+      }
       return;
     case "publish":
       options.shellEventPublisher(shellEventType, chunk);
@@ -8176,6 +8181,23 @@ function handleShellOutput(chunk, options, shellEventType) {
       break;
   }
 }
+function redactSensitiveArgs(argv, redactFlags) {
+  if (!redactFlags || redactFlags.length === 0) {
+    return [...argv];
+  }
+  const flags = new Set(redactFlags);
+  const out = new Array();
+  for (let i6 = 0; i6 < argv.length; i6++) {
+    out.push(argv[i6]);
+    if (flags.has(argv[i6]) && i6 + 1 < argv.length) {
+      i6 += 1;
+      const token = argv[i6];
+      const eq = token.indexOf("=");
+      out.push(eq >= 0 ? `${token.slice(0, eq + 1)}<redacted>` : "<redacted>");
+    }
+  }
+  return out;
+}
 var ProcessFailed;
 var init_shell = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/private/shell.ts"() {
@@ -8183,6 +8205,7 @@ var init_shell = __esm({
     init_tools();
     __name(shell, "shell");
     __name(handleShellOutput, "handleShellOutput");
+    __name(redactSensitiveArgs, "redactSensitiveArgs");
     ProcessFailed = class extends Error {
       constructor(exitCode, signal, message) {
         super(message);
@@ -8297,6 +8320,10 @@ var init_docker = __esm({
         await this.execute(buildCommand, {
           cwd: options.directory,
           subprocessOutputDestination: this.subprocessOutputDestination,
+          // `--build-arg` values are passed literally and are a common (if
+          // discouraged) place for secrets; `--secret` specs can name sensitive
+          // sources. Mask their values wherever the command line is logged.
+          redactFlags: ["--build-arg", "--secret"],
           env: {
             BUILDX_NO_DEFAULT_ATTESTATIONS: "1"
             // Docker Build adds provenance attestations by default that confuse cdk-assets
@@ -8739,14 +8766,14 @@ var init_assets = __esm({
 var require_helpers = __commonJS({
   "../@aws-cdk/cloud-assembly-schema/node_modules/jsonschema/lib/helpers.js"(exports2, module2) {
     "use strict";
-    var ValidationError = exports2.ValidationError = /* @__PURE__ */ __name(function ValidationError2(message, instance, schema, path12, name, argument) {
-      if (Array.isArray(path12)) {
-        this.path = path12;
-        this.property = path12.reduce(function(sum, item) {
+    var ValidationError = exports2.ValidationError = /* @__PURE__ */ __name(function ValidationError2(message, instance, schema, path14, name, argument) {
+      if (Array.isArray(path14)) {
+        this.path = path14;
+        this.property = path14.reduce(function(sum, item) {
           return sum + makeSuffix(item);
         }, "instance");
-      } else if (path12 !== void 0) {
-        this.property = path12;
+      } else if (path14 !== void 0) {
+        this.property = path14;
       }
       if (message) {
         this.message = message;
@@ -8841,16 +8868,16 @@ var require_helpers = __commonJS({
         name: { value: "SchemaError", enumerable: false }
       }
     );
-    var SchemaContext = exports2.SchemaContext = /* @__PURE__ */ __name(function SchemaContext2(schema, options, path12, base, schemas) {
+    var SchemaContext = exports2.SchemaContext = /* @__PURE__ */ __name(function SchemaContext2(schema, options, path14, base, schemas) {
       this.schema = schema;
       this.options = options;
-      if (Array.isArray(path12)) {
-        this.path = path12;
-        this.propertyPath = path12.reduce(function(sum, item) {
+      if (Array.isArray(path14)) {
+        this.path = path14;
+        this.propertyPath = path14.reduce(function(sum, item) {
           return sum + makeSuffix(item);
         }, "instance");
       } else {
-        this.propertyPath = path12;
+        this.propertyPath = path14;
       }
       this.base = base;
       this.schemas = schemas;
@@ -8859,10 +8886,10 @@ var require_helpers = __commonJS({
       return (() => resolveUrl(this.base, target))();
     }, "resolve");
     SchemaContext.prototype.makeChild = /* @__PURE__ */ __name(function makeChild(schema, propertyName) {
-      var path12 = propertyName === void 0 ? this.path : this.path.concat([propertyName]);
+      var path14 = propertyName === void 0 ? this.path : this.path.concat([propertyName]);
       var id = schema.$id || schema.id;
       let base = (() => resolveUrl(this.base, id || ""))();
-      var ctx = new SchemaContext(schema, this.options, path12, base, Object.create(this.schemas));
+      var ctx = new SchemaContext(schema, this.options, path14, base, Object.create(this.schemas));
       if (id && !ctx.schemas[base]) {
         ctx.schemas[base] = schema;
       }
@@ -9979,8 +10006,8 @@ var require_validator = __commonJS({
       if (ctx.schemas[switchSchema]) {
         return { subschema: ctx.schemas[switchSchema], switchSchema };
       }
-      let parsed = new URL(switchSchema, "thismessage::/");
-      let fragment = parsed.hash;
+      let hashIndex = switchSchema.indexOf("#");
+      let fragment = hashIndex === -1 || hashIndex === switchSchema.length - 1 ? "" : switchSchema.substr(hashIndex);
       var document = fragment && fragment.length && switchSchema.substr(0, switchSchema.length - fragment.length);
       if (!document || !ctx.schemas[document]) {
         throw new SchemaError("no such schema <" + switchSchema + ">", schema);
@@ -12065,7 +12092,7 @@ var require_semver2 = __commonJS({
 // ../@aws-cdk/cloud-assembly-schema/cli-version.json
 var require_cli_version = __commonJS({
   "../@aws-cdk/cloud-assembly-schema/cli-version.json"(exports2, module2) {
-    module2.exports = { version: "2.1139.0" };
+    module2.exports = { version: "2.1145.0" };
   }
 });
 
@@ -13780,6 +13807,7 @@ var require_integ_schema = __commonJS({
               enum: [
                 "any-change",
                 "broadening",
+                "destructive",
                 "never"
               ],
               type: "string"
@@ -14340,9 +14368,9 @@ var require_validation_report_schema = __commonJS({
 var require_version = __commonJS({
   "../@aws-cdk/cloud-assembly-schema/schema/version.json"(exports2, module2) {
     module2.exports = {
-      schemaHash: "095859ad1d3d89d3bc4f9cbe9393d219798972dbd2389287bcc66b49f323cef1",
+      schemaHash: "b006b5c8829cee1f2287b98829ca0ed8abfbdbb2948fecc185e56398afb11a7b",
       $comment: "Do not hold back the version on additions: jsonschema validation of the manifest by the consumer will trigger errors on unexpected fields.",
-      revision: 54
+      revision: 55
     };
   }
 });
@@ -14614,6 +14642,7 @@ var init_common = __esm({
       RequireApproval2["NEVER"] = "never";
       RequireApproval2["ANYCHANGE"] = "any-change";
       RequireApproval2["BROADENING"] = "broadening";
+      RequireApproval2["DESTRUCTIVE"] = "destructive";
       return RequireApproval2;
     })(RequireApproval || {});
   }
@@ -16698,6 +16727,592 @@ var init_template_ranges = __esm({
   }
 });
 
+// ../@aws-cdk/cloud-assembly-api/lib/stack-trace.ts
+var stack_trace_exports = {};
+__export(stack_trace_exports, {
+  DEFAULT_USER_CODE_FINDER: () => DEFAULT_USER_CODE_FINDER,
+  StackFrame: () => StackFrame,
+  StackTrace: () => StackTrace
+});
+var DEFAULT_USER_CODE_FINDER, StackTrace, StackFrame;
+var init_stack_trace = __esm({
+  "../@aws-cdk/cloud-assembly-api/lib/stack-trace.ts"() {
+    "use strict";
+    DEFAULT_USER_CODE_FINDER = {
+      isInterestingFrame(frame) {
+        return frame.includes(" (") && frame.endsWith(")");
+      }
+    };
+    StackTrace = class _StackTrace {
+      constructor(frames) {
+        this.frames = frames;
+      }
+      frames;
+      static {
+        __name(this, "StackTrace");
+      }
+      static fromNewlineSeparatedString(stackTrace) {
+        return new _StackTrace(stackTrace.split("\n"));
+      }
+      /**
+       * Return the first user frame from a "Just My Code" call stack
+       *
+       * With all the NON-"my code" call frames redacted, the top level frame should
+       * be the last user frame that is associated with the given call stack.
+       */
+      findAndParse(finder) {
+        for (const frame of this.frames) {
+          if (finder.isInterestingFrame(frame)) {
+            return StackFrame.parse(frame);
+          }
+        }
+        return void 0;
+      }
+    };
+    StackFrame = class {
+      constructor(functionName, fileName, sourceLocation) {
+        this.functionName = functionName;
+        this.fileName = fileName;
+        this.sourceLocation = sourceLocation;
+      }
+      functionName;
+      fileName;
+      sourceLocation;
+      static {
+        __name(this, "StackFrame");
+      }
+      /**
+       * Parse a single line of a stack frame into a structured object
+       *
+       * This is mostly a NodeJS-flavored string we parse here, except that in
+       * a NodeJS stack trace the line would start with `    at `.
+       *
+       * Parses all of these:
+       *
+       * ```
+       * <function> (<file>:<line>:<col>)
+       * <class>.<function> (<file>:<line>:<col>)
+       * Object.<anonymous> (<file>:<line>:<col>)
+       * <function> [as somethingElse] (<file>:<line>:<col>)
+       * new <constructor> (<file>:<line>:<col>)
+       * <file>:<line>:<col>
+       * ```
+       *
+       * See https://v8.dev/docs/stack-trace-api#appendix%3A-stack-trace-format
+       */
+      static parse(frame) {
+        let fileName;
+        let functionName;
+        let sourceLocation;
+        const paren = frame.indexOf("(");
+        if (paren) {
+          functionName = frame.slice(0, paren - 1);
+          frame = frame.slice(paren + 1, -1);
+        } else {
+          functionName = "<entry>";
+        }
+        if (functionName === "Object.<anonymous>") {
+          functionName = "<anonymous>";
+        }
+        let asI = functionName.indexOf(" [as ");
+        if (asI > -1) {
+          const endOfAlias = functionName.indexOf("]", asI);
+          const lastPeriod = functionName.lastIndexOf(".", asI);
+          functionName = functionName.slice(0, lastPeriod + 1) + functionName.slice(asI + 5, endOfAlias);
+        }
+        const m4 = frame.match(/(:[0-9]+){0,2}$/);
+        fileName = m4 ? frame.slice(0, -m4[0].length) : frame;
+        sourceLocation = m4 ? m4[0].slice(1) : "";
+        return {
+          fileName,
+          functionName,
+          sourceLocation
+        };
+      }
+    };
+  }
+});
+
+// ../@aws-cdk/cloud-assembly-api/lib/private/color.ts
+var Col, Colorize;
+var init_color = __esm({
+  "../@aws-cdk/cloud-assembly-api/lib/private/color.ts"() {
+    "use strict";
+    Col = class {
+      static {
+        __name(this, "Col");
+      }
+      static RED = "31";
+      static ORANGE = "38;5;208";
+      static YELLOW = "33";
+      static BLUE = "34";
+      static BOLD = "1";
+      static UNDERLINE = "4";
+      static GREY = "90";
+    };
+    Colorize = class _Colorize {
+      static {
+        __name(this, "Colorize");
+      }
+      static red(str) {
+        return _Colorize.colorize(Col.RED, str);
+      }
+      static orange(str) {
+        return _Colorize.colorize(Col.ORANGE, str);
+      }
+      static yellow(str) {
+        return _Colorize.colorize(Col.YELLOW, str);
+      }
+      static blue(str) {
+        return _Colorize.colorize(Col.BLUE, str);
+      }
+      static grey(str) {
+        return _Colorize.colorize(Col.GREY, str);
+      }
+      static bold(str) {
+        return _Colorize.colorize(Col.BOLD, str);
+      }
+      static underline(str) {
+        return _Colorize.colorize(Col.UNDERLINE, str);
+      }
+      static colorize(col, str) {
+        if (process.env.FORCE_COLOR === "0" || process.env.NO_COLOR || !process.stdout.isTTY || !process.stderr.isTTY) {
+          return str;
+        }
+        return `\x1B[${col}m${str}\x1B[0m`;
+      }
+    };
+  }
+});
+
+// ../@aws-cdk/cloud-assembly-api/lib/validation/parsing.ts
+var parsing_exports = {};
+__export(parsing_exports, {
+  ANNOTATION_PLUGIN_NAME: () => ANNOTATION_PLUGIN_NAME,
+  ANNOTATION_PLUGIN_NAMESPACE: () => ANNOTATION_PLUGIN_NAMESPACE,
+  isSuppressibleViolation: () => isSuppressibleViolation,
+  namespaceFromPluginName: () => namespaceFromPluginName,
+  normalizeValidationId: () => normalizeValidationId,
+  normalizeValidationIdForAnnotations: () => normalizeValidationIdForAnnotations,
+  parseValidationId: () => parseValidationId,
+  pluginNameFromNamespace: () => pluginNameFromNamespace
+});
+function isSuppressibleViolation(violation) {
+  const isFatal = violation.severity?.toLowerCase() === "fatal";
+  const isErrorAnnotation = violation.ruleMetadata?.["cdk:annotation"] && violation.severity?.toLowerCase() === "error";
+  return !isFatal && !isErrorAnnotation;
+}
+function parseValidationId(id) {
+  let nsSeparator = void 0;
+  const braceStack = [];
+  for (let i6 = 0; i6 < id.length; i6++) {
+    const c6 = id[i6];
+    if (c6 === ":" && id[i6 + 1] === ":" && braceStack.length === 0) {
+      if (nsSeparator !== void 0) {
+        throw new Error(`Invalid validation rule ID '${id}'. The '::' delimiter is reserved for separating the prefix from the rule name (e.g. 'prefix::RuleName').`);
+      }
+      nsSeparator = i6;
+      i6 += 1;
+    } else if (["]", ")", "}"].includes(c6)) {
+      const lastBrace = braceStack.pop();
+      if (lastBrace === void 0) {
+        throw new Error(`Invalid validation rule ID '${id}'. Unmatched closing brace '${c6}' at position ${i6}.`);
+      }
+      if (lastBrace === "(" && c6 !== ")" || lastBrace === "[" && c6 !== "]" || lastBrace === "{" && c6 !== "}") {
+        throw new Error(`Invalid validation rule ID '${id}'. Mismatched closing brace '${c6}' at position ${i6}. Expected '${lastBrace === "(" ? ")" : lastBrace === "[" ? "]" : "}"}'.`);
+      }
+    } else if (["[", "(", "{"].includes(c6)) {
+      braceStack.push(c6);
+    }
+  }
+  if (nsSeparator === void 0) {
+    return { ruleId: id };
+  }
+  if (nsSeparator === 0) {
+    throw new Error(`Invalid validation rule ID '${id}'. Missing plugin name before '::'.`);
+  }
+  const namespace = namespaceFromString(id.substring(0, nsSeparator));
+  const ruleId = id.substring(nsSeparator + 2);
+  return { namespace, ruleId };
+}
+function normalizeValidationId(id, defaultNamespace) {
+  const p3 = typeof id === "string" ? parseValidationId(id) : id;
+  const parsed = {
+    namespace: p3.namespace ? namespaceFromString(p3.namespace[NS].replaceAll(/ /g, "-")) : void 0,
+    ruleId: p3.ruleId.replaceAll(/ /g, "-")
+  };
+  if (parsed.namespace && ["annotation", "Construct-Annotations"].includes(parsed.namespace[NS])) {
+    return `${ANNOTATION_PLUGIN_NAMESPACE}::${parsed.ruleId}`;
+  }
+  return `${parsed.namespace ?? defaultNamespace[NS]}::${parsed.ruleId}`;
+}
+function normalizeValidationIdForAnnotations(id) {
+  return normalizeValidationId(id, ANNOTATION_PLUGIN_NAMESPACE);
+}
+function namespaceFromPluginName(pluginName) {
+  if (pluginName === ANNOTATION_PLUGIN_NAME) {
+    return ANNOTATION_PLUGIN_NAMESPACE;
+  }
+  return namespaceFromString(pluginName.replace(/ /g, "-"));
+}
+function namespaceFromString(namespace) {
+  return Object.assign({
+    [NS]: namespace.replace(/ /g, "-")
+  }, {
+    toString() {
+      return this[NS];
+    }
+  });
+}
+function pluginNameFromNamespace(namespace) {
+  return namespace[NS].replace(/-/g, " ");
+}
+var NS, ANNOTATION_PLUGIN_NAME, ANNOTATION_PLUGIN_NAMESPACE;
+var init_parsing = __esm({
+  "../@aws-cdk/cloud-assembly-api/lib/validation/parsing.ts"() {
+    "use strict";
+    __name(isSuppressibleViolation, "isSuppressibleViolation");
+    __name(parseValidationId, "parseValidationId");
+    __name(normalizeValidationId, "normalizeValidationId");
+    __name(normalizeValidationIdForAnnotations, "normalizeValidationIdForAnnotations");
+    NS = /* @__PURE__ */ Symbol("namespace");
+    __name(namespaceFromPluginName, "namespaceFromPluginName");
+    __name(namespaceFromString, "namespaceFromString");
+    __name(pluginNameFromNamespace, "pluginNameFromNamespace");
+    ANNOTATION_PLUGIN_NAME = "Construct Annotations";
+    ANNOTATION_PLUGIN_NAMESPACE = namespaceFromPluginName("Annotation");
+  }
+});
+
+// ../@aws-cdk/cloud-assembly-api/lib/validation/formatting.ts
+var formatting_exports = {};
+__export(formatting_exports, {
+  ValidationReportFormatter: () => ValidationReportFormatter,
+  relativeFileLocationRenderer: () => relativeFileLocationRenderer,
+  stripAnsi: () => stripAnsi
+});
+function flattenViolations(reports) {
+  return reports.flatMap((report) => {
+    const pluginName = report.pluginName;
+    return report.violations.flatMap((violation) => {
+      return violation.violatingConstructs.map((construct) => ({
+        severity: normalizeSeverity(violation.severity, violation.customSeverity),
+        description: violation.description,
+        ruleName: violation.ruleName,
+        pluginName,
+        construct,
+        suggestedFix: violation.suggestedFix,
+        ruleMetadata: violation.ruleMetadata
+      }));
+    });
+  });
+}
+function normalizeSeverity(severity, customSeverity) {
+  switch (severity) {
+    case "fatal":
+    case "error":
+    case "warning":
+    case "info":
+      return severity.toUpperCase();
+    case "custom":
+      return customSeverity ?? "INFO";
+  }
+}
+function getSeverityColor(severity) {
+  switch (severity.toLowerCase()) {
+    case "fatal":
+      return Colorize.red;
+    case "error":
+      return Colorize.orange;
+    case "warning":
+      return Colorize.yellow;
+    default:
+      return Colorize.blue;
+  }
+}
+function stripAckTag(description) {
+  return description.replace(/\s*\[ack:\s*[^\]]+\]\s*/g, "").trim();
+}
+function formatPluginFailure(f6) {
+  return `${Colorize.orange("ERROR")} ${sanitize(f6.error)}`;
+}
+function sanitize(s2) {
+  return (s2 ?? "").replace(CONTROL_CHARS, "\uFFFD");
+}
+function isPluginFailure(r6) {
+  if (r6.conclusion === "success" || r6.violations.length > 0 || !r6.metadata?.error) {
+    return void 0;
+  }
+  return { error: r6.metadata.error };
+}
+function stripAnsi(x) {
+  const pattern = [
+    "[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)",
+    "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))"
+  ].join("|");
+  const re = new RegExp(pattern, "g");
+  return x.replaceAll(re, "");
+}
+function relativeFileLocationRenderer(root6) {
+  return {
+    renderAbsoluteFilePath(absPath) {
+      const relPath = import_path.default.relative(root6, absPath);
+      return relPath.length < absPath.length ? relPath : absPath;
+    }
+  };
+}
+var import_path, ValidationReportFormatter, CONTROL_CHARS, SEVERITY_ORDER;
+var init_formatting = __esm({
+  "../@aws-cdk/cloud-assembly-api/lib/validation/formatting.ts"() {
+    "use strict";
+    import_path = __toESM(require("path"));
+    init_color();
+    init_stack_trace();
+    init_parsing();
+    ValidationReportFormatter = class {
+      constructor(options) {
+        this.options = options;
+        this.fileLocationRenderer = options.fileLocationRenderer ?? relativeFileLocationRenderer(process.cwd());
+      }
+      options;
+      static {
+        __name(this, "ValidationReportFormatter");
+      }
+      fileLocationRenderer;
+      formatReports(reports) {
+        const successfullyExecutedPlugins = reports.filter((r6) => isPluginFailure(r6) === void 0);
+        const pluginFailures = reports.map(isPluginFailure).filter((e6) => e6 !== void 0);
+        const violations = flattenViolations(successfullyExecutedPlugins);
+        violations.sort((a6, b6) => {
+          const aOrder = SEVERITY_ORDER[a6.severity.toLowerCase()] ?? 4;
+          const bOrder = SEVERITY_ORDER[b6.severity.toLowerCase()] ?? 4;
+          return aOrder - bOrder;
+        });
+        return [
+          ...pluginFailures.map(formatPluginFailure),
+          ...violations.map((v) => this.formatViolationBlock(v))
+        ];
+      }
+      formatViolationBlock(v) {
+        const lines = [];
+        const locations = this.sourceLocations(v.construct.stackTraces);
+        const maxTraces = 5;
+        let additional = false;
+        for (const location of locations.slice(0, maxTraces)) {
+          lines.push(`${additional ? "or " : ""}${Colorize.underline(sanitize(location))}`);
+          additional = true;
+        }
+        if (locations.length > maxTraces) {
+          lines.push(Colorize.grey(`(and ${locations.length - maxTraces} more...)`));
+        }
+        const pluginNs = namespaceFromPluginName(v.pluginName);
+        const parsed = parseValidationId(v.ruleName);
+        lines.push([
+          Colorize.bold(getSeverityColor(v.severity)(sanitize(v.severity))),
+          Colorize.bold(stripAckTag(sanitize(v.description))),
+          Colorize.grey(`(${sanitize(parsed.namespace ? pluginNameFromNamespace(parsed.namespace) : v.pluginName)})`)
+        ].join(" "));
+        const constructInfo = this.formatConstructInfo(v.construct);
+        lines.push(`   ${constructInfo}`);
+        if (v.suggestedFix) {
+          lines.push(`   Suggested fix: ${sanitize(v.suggestedFix).replace(/\n/g, "\n   ")}`);
+        }
+        const ackId = normalizeValidationId(v.ruleName, pluginNs);
+        if (isSuppressibleViolation(v)) {
+          lines.push(`   ${Colorize.grey(`Acknowledge with '${sanitize(ackId)}'`)}`);
+        } else {
+          lines.push(`   ${Colorize.grey(`Rule ${sanitize(ackId)}`)}`);
+        }
+        return lines.join("\n");
+      }
+      sourceLocations(stackTraces) {
+        const ret = [];
+        for (const trace of stackTraces ?? []) {
+          const frame = StackTrace.fromNewlineSeparatedString(trace).findAndParse(this.options.frameFinder ?? DEFAULT_USER_CODE_FINDER);
+          if (frame && frame.fileName) {
+            const candidate = `${this.fileLocationRenderer.renderAbsoluteFilePath(frame.fileName)}:${frame.sourceLocation}`;
+            if (!ret.includes(candidate)) {
+              ret.push(candidate);
+            }
+          }
+        }
+        return ret;
+      }
+      formatConstructInfo(construct) {
+        const parts = [];
+        const logicalId = sanitize(construct.cloudFormationResource?.logicalId);
+        if (construct.constructPath) {
+          const cPath = sanitize(construct.constructPath);
+          parts.push(logicalId ? `${Colorize.bold(cPath)} (${logicalId})` : Colorize.bold(cPath));
+        } else {
+          if (construct.cloudFormationResource?.templatePath) {
+            parts.push(this.fileLocationRenderer.renderAbsoluteFilePath(sanitize(construct.cloudFormationResource.templatePath)));
+          }
+          if (logicalId) {
+            parts.push(Colorize.bold(logicalId));
+          }
+        }
+        if (construct.constructFqn) {
+          parts.push(Colorize.grey(sanitize(construct.constructFqn)));
+        }
+        return parts.join(" ");
+      }
+    };
+    __name(flattenViolations, "flattenViolations");
+    __name(normalizeSeverity, "normalizeSeverity");
+    __name(getSeverityColor, "getSeverityColor");
+    __name(stripAckTag, "stripAckTag");
+    __name(formatPluginFailure, "formatPluginFailure");
+    CONTROL_CHARS = /[\x00-\x08\x0B-\x1F\x7F\x9B]/g;
+    __name(sanitize, "sanitize");
+    SEVERITY_ORDER = {
+      fatal: 0,
+      error: 1,
+      warning: 2,
+      info: 3
+    };
+    __name(isPluginFailure, "isPluginFailure");
+    __name(stripAnsi, "stripAnsi");
+    __name(relativeFileLocationRenderer, "relativeFileLocationRenderer");
+  }
+});
+
+// ../@aws-cdk/cloud-assembly-api/lib/validation/loading.ts
+var loading_exports = {};
+__export(loading_exports, {
+  loadUnifiedValidationReport: () => loadUnifiedValidationReport
+});
+async function loadUnifiedValidationReport(assembly, stacks) {
+  const ret = [];
+  const reportPath = path10.join(assembly.directory, VALIDATION_REPORT_FILE2);
+  if (await pathExists(reportPath)) {
+    const selectedStackIds = new Set(stacks.map((stack) => stack.hierarchicalId));
+    const report = import_cloud_assembly_schema2.Manifest.loadValidationReport(reportPath);
+    const filteredReports = filterReportsByStacks(report.pluginReports, selectedStackIds);
+    ret.push(...filteredReports);
+  }
+  const alreadyHasAnnotations = ret.some((r6) => r6.pluginName === ANNOTATION_PLUGIN_NAME);
+  if (!alreadyHasAnnotations) {
+    const annotationReport = pluginReportFromAnnotations(stacks);
+    if (annotationReport.violations.length > 0 || annotationReport.conclusion === "failure") {
+      ret.push(annotationReport);
+    }
+  }
+  return ret;
+}
+function filterReportsByStacks(reports, selectedStackIds) {
+  const stackIds = Array.from(selectedStackIds);
+  return reports.map(filterReport);
+  function filterReport(report) {
+    const violationsWithoutConstructs = new Set(report.violations.flatMap((v, i6) => v.violatingConstructs.length === 0 ? [i6] : []));
+    const filteredViolations = report.violations.map((v) => ({
+      ...v,
+      violatingConstructs: v.violatingConstructs.filter(constructMatches)
+    })).filter((v, i6) => v.violatingConstructs.length > 0 || violationsWithoutConstructs.has(i6));
+    return {
+      ...report,
+      violations: filteredViolations,
+      conclusion: filteredViolations.length > 0 ? report.conclusion : "success"
+    };
+  }
+  __name(filterReport, "filterReport");
+  function constructMatches(c6) {
+    return !c6.constructPath || stackIds.some((stackId) => c6.constructPath === stackId || c6.constructPath?.startsWith(`${stackId}/`));
+  }
+  __name(constructMatches, "constructMatches");
+}
+function pluginReportFromAnnotations(stacks) {
+  const ruleMap = /* @__PURE__ */ new Map();
+  for (const stack of stacks) {
+    for (const entry of stack.messages) {
+      let severity;
+      switch (entry.level) {
+        case "warning" /* WARNING */:
+          severity = "warning";
+          break;
+        case "error" /* ERROR */:
+          severity = "error";
+          break;
+        case "info" /* INFO */:
+          severity = "info";
+          break;
+      }
+      const { message, ruleName } = splitDescriptionAndId(String(entry.entry.data));
+      const ruleKey = `${ruleName}|${severity}|${message}`;
+      let violation = ruleMap.get(ruleKey);
+      if (!violation) {
+        violation = {
+          ruleName: ruleName ?? `${severity}-annotation`,
+          description: message,
+          severity,
+          violatingConstructs: [],
+          ruleMetadata: {
+            "cdk:annotation": "true"
+          }
+        };
+        ruleMap.set(ruleKey, violation);
+      }
+      violation.violatingConstructs.push({
+        constructPath: entry.id.replace(/^\//, "")
+        // remove leading slash
+        // TODO: see if this information can be obtained from tree.json
+        // cloudFormationResource
+        // constructFqn:
+        // libraryVersion
+        // TODO: see if we can get this from metadata stack traces. We may need to re-enable them for
+        // annotations in the core library. Otherwise we should probably get a stack trace to the resource itself.
+        // stackTraces
+      });
+    }
+  }
+  const violations = Array.from(ruleMap.values());
+  const hasErrors = violations.some((v) => v.severity === "error");
+  return {
+    pluginName: ANNOTATION_PLUGIN_NAME,
+    conclusion: hasErrors ? "failure" : "success",
+    violations
+  };
+}
+function splitDescriptionAndId(message) {
+  const ackMatch = message.match(/\[ack: ([^\]]+)\]/);
+  if (ackMatch) {
+    return { message: message.replace(ackMatch[0], "").trim(), ruleName: ackMatch[1] };
+  }
+  const idMatch = message.match(/\(([^()]+::[^()]+)\)$/);
+  if (idMatch) {
+    return { message: message.replace(idMatch[0], "").trim(), ruleName: idMatch[1] };
+  }
+  return { message };
+}
+async function pathExists(pathName) {
+  try {
+    await import_fs.promises.access(pathName);
+    return true;
+  } catch (e6) {
+    if (e6.code !== "ENOENT") {
+      throw e6;
+    }
+    return false;
+  }
+}
+var import_fs, path10, import_cloud_assembly_schema2, VALIDATION_REPORT_FILE2;
+var init_loading = __esm({
+  "../@aws-cdk/cloud-assembly-api/lib/validation/loading.ts"() {
+    "use strict";
+    import_fs = require("fs");
+    path10 = __toESM(require("path"));
+    import_cloud_assembly_schema2 = __toESM(require_lib2());
+    init_metadata();
+    init_parsing();
+    VALIDATION_REPORT_FILE2 = "validation-report.json";
+    __name(loadUnifiedValidationReport, "loadUnifiedValidationReport");
+    __name(filterReportsByStacks, "filterReportsByStacks");
+    __name(pluginReportFromAnnotations, "pluginReportFromAnnotations");
+    __name(splitDescriptionAndId, "splitDescriptionAndId");
+    __name(pathExists, "pathExists");
+  }
+});
+
 // ../@aws-cdk/cloud-assembly-api/lib/index.js
 var require_lib3 = __commonJS({
   "../@aws-cdk/cloud-assembly-api/lib/index.js"(exports2) {
@@ -16742,6 +17357,10 @@ var require_lib3 = __commonJS({
     __exportStar((init_bootstrap(), __toCommonJS(bootstrap_exports)), exports2);
     __exportStar((init_construct_tree(), __toCommonJS(construct_tree_exports)), exports2);
     __exportStar((init_template_ranges(), __toCommonJS(template_ranges_exports)), exports2);
+    __exportStar((init_stack_trace(), __toCommonJS(stack_trace_exports)), exports2);
+    __exportStar((init_formatting(), __toCommonJS(formatting_exports)), exports2);
+    __exportStar((init_parsing(), __toCommonJS(parsing_exports)), exports2);
+    __exportStar((init_loading(), __toCommonJS(loading_exports)), exports2);
   }
 });
 
@@ -16806,11 +17425,11 @@ async function repositoryUri(ecr, repositoryName) {
     return void 0;
   }
 }
-var path9, ContainerImageAssetHandler, ContainerImageBuilder;
+var path11, ContainerImageAssetHandler, ContainerImageBuilder;
 var init_container_images = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/private/handlers/container-images.ts"() {
     "use strict";
-    path9 = __toESM(require("path"));
+    path11 = __toESM(require("path"));
     init_client_options();
     init_progress();
     init_placeholders2();
@@ -16841,7 +17460,7 @@ var init_container_images = __esm({
         }
         const dockerForBuilding = await this.host.dockerFactory.forBuild({
           repoUri: initOnce.repoUri,
-          eventEmitter: /* @__PURE__ */ __name((m4) => this.host.emitMessage("debug" /* DEBUG */, m4), "eventEmitter"),
+          eventEmitter: this.host.emitMessage.bind(this.host),
           ecr: initOnce.ecr,
           subprocessOutputDestination: this.options.subprocessOutputDestination
         });
@@ -16996,7 +17615,7 @@ var init_container_images = __esm({
             `'directory' is expected in the DockerImage asset source, got: ${JSON.stringify(source)}`
           );
         }
-        const fullPath = path9.resolve(this.workDir, source.directory);
+        const fullPath = path11.resolve(this.workDir, source.directory);
         this.host.emitMessage("build" /* BUILD */, `Building Docker image at ${fullPath}`);
         await this.docker.build({
           directory: fullPath,
@@ -17067,11 +17686,11 @@ var require_Mime = __commonJS({
         }
       }
     };
-    Mime.prototype.getType = function(path12) {
-      path12 = String(path12);
-      let last = path12.replace(/^.*[/\\]/, "").toLowerCase();
+    Mime.prototype.getType = function(path14) {
+      path14 = String(path14);
+      let last = path14.replace(/^.*[/\\]/, "").toLowerCase();
       let ext = last.replace(/^.*\./, "").toLowerCase();
-      let hasPath = last.length < path12.length;
+      let hasPath = last.length < path14.length;
       let hasDot = ext.length < last.length - 1;
       return (hasDot || !hasPath) && this._types[ext] || null;
     };
@@ -17107,7 +17726,7 @@ var require_mime = __commonJS({
 });
 
 // ../@aws-cdk/cdk-assets-lib/lib/private/fs-extra.ts
-async function pathExists(pathName) {
+async function pathExists2(pathName) {
   try {
     await pfs.stat(pathName);
     return true;
@@ -17118,13 +17737,13 @@ async function pathExists(pathName) {
     return false;
   }
 }
-var fs9, pfs;
+var fs10, pfs;
 var init_fs_extra = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/private/fs-extra.ts"() {
     "use strict";
-    fs9 = __toESM(require("fs"));
-    pfs = fs9.promises;
-    __name(pathExists, "pathExists");
+    fs10 = __toESM(require("fs"));
+    pfs = fs10.promises;
+    __name(pathExists2, "pathExists");
   }
 });
 
@@ -17147,13 +17766,13 @@ async function cached(cache6, key, factory) {
   cache6.set(key, fresh);
   return fresh;
 }
-var import_fs, path10, import_cloud_assembly_schema2, mime, EMPTY_ZIP_FILE_SIZE, FileAssetHandler, BucketInformation;
+var import_fs2, path12, import_cloud_assembly_schema3, mime, EMPTY_ZIP_FILE_SIZE, FileAssetHandler, BucketInformation;
 var init_files = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/private/handlers/files.ts"() {
     "use strict";
-    import_fs = require("fs");
-    path10 = __toESM(require("path"));
-    import_cloud_assembly_schema2 = __toESM(require_lib2());
+    import_fs2 = require("fs");
+    path12 = __toESM(require("path"));
+    import_cloud_assembly_schema3 = __toESM(require_lib2());
     mime = __toESM(require_mime());
     init_client_options();
     init_progress();
@@ -17167,7 +17786,7 @@ var init_files = __esm({
         this.workDir = workDir;
         this.asset = asset;
         this.host = host;
-        this.fileCacheRoot = path10.join(workDir, ".cache");
+        this.fileCacheRoot = path12.join(workDir, ".cache");
       }
       workDir;
       asset;
@@ -17282,7 +17901,7 @@ var init_files = __esm({
           {
             Bucket: destination.bucketName,
             Key: destination.objectKey,
-            Body: (0, import_fs.createReadStream)(publishFile.packagedPath),
+            Body: (0, import_fs2.createReadStream)(publishFile.packagedPath),
             ContentType: publishFile.contentType,
             ChecksumAlgorithm: "SHA256"
           },
@@ -17296,12 +17915,12 @@ var init_files = __esm({
             `'path' is expected in the File asset source, got: ${JSON.stringify(source)}`
           );
         }
-        const fullPath = path10.resolve(this.workDir, source.path);
-        if (source.packaging === import_cloud_assembly_schema2.FileAssetPackaging.ZIP_DIRECTORY) {
+        const fullPath = path12.resolve(this.workDir, source.path);
+        if (source.packaging === import_cloud_assembly_schema3.FileAssetPackaging.ZIP_DIRECTORY) {
           const contentType = "application/zip";
-          await import_fs.promises.mkdir(this.fileCacheRoot, { recursive: true });
-          const packagedPath = path10.join(this.fileCacheRoot, `${this.asset.id.assetId}.zip`);
-          if (await pathExists(packagedPath)) {
+          await import_fs2.promises.mkdir(this.fileCacheRoot, { recursive: true });
+          const packagedPath = path12.join(this.fileCacheRoot, `${this.asset.id.assetId}.zip`);
+          if (await pathExists2(packagedPath)) {
             this.host.emitMessage("cached" /* CACHED */, `From cache ${packagedPath}`);
             return { packagedPath, contentType };
           }
@@ -17440,13 +18059,13 @@ function prefixTreeChars(xs, prefix = "") {
   }
   return ret;
 }
-var fs11, path11, import_cloud_assembly_schema3, AssetManifest, ASSET_TYPES, FileManifestEntry, DockerImageManifestEntry, DestinationIdentifier, DestinationPattern;
+var fs12, path13, import_cloud_assembly_schema4, AssetManifest, ASSET_TYPES, FileManifestEntry, DockerImageManifestEntry, DestinationIdentifier, DestinationPattern;
 var init_asset_manifest = __esm({
   "../@aws-cdk/cdk-assets-lib/lib/asset-manifest.ts"() {
     "use strict";
-    fs11 = __toESM(require("fs"));
-    path11 = __toESM(require("path"));
-    import_cloud_assembly_schema3 = __toESM(require_lib2());
+    fs12 = __toESM(require("fs"));
+    path13 = __toESM(require("path"));
+    import_cloud_assembly_schema4 = __toESM(require_lib2());
     AssetManifest = class _AssetManifest {
       constructor(directory, manifest) {
         this.manifest = manifest;
@@ -17465,8 +18084,8 @@ var init_asset_manifest = __esm({
        */
       static fromFile(fileName) {
         try {
-          const obj = import_cloud_assembly_schema3.Manifest.loadAssetManifest(fileName);
-          return new _AssetManifest(path11.dirname(fileName), obj);
+          const obj = import_cloud_assembly_schema4.Manifest.loadAssetManifest(fileName);
+          return new _AssetManifest(path13.dirname(fileName), obj);
         } catch (e6) {
           throw new Error(`Cannot read asset manifest '${fileName}': ${e6.message}`);
         }
@@ -17479,12 +18098,12 @@ var init_asset_manifest = __esm({
       static fromPath(filePath) {
         let st;
         try {
-          st = fs11.statSync(filePath);
+          st = fs12.statSync(filePath);
         } catch (e6) {
           throw new Error(`Cannot read asset manifest at '${filePath}': ${e6.message}`);
         }
         if (st.isDirectory()) {
-          return _AssetManifest.fromFile(path11.join(filePath, _AssetManifest.DEFAULT_FILENAME));
+          return _AssetManifest.fromFile(path13.join(filePath, _AssetManifest.DEFAULT_FILENAME));
         }
         return _AssetManifest.fromFile(filePath);
       }
@@ -19680,12 +20299,12 @@ var init_TypeRegistry = __esm({
         this.namespace = namespace;
         this.schemas = schemas;
         this.exceptions = exceptions;
-      }
-      static for(namespace) {
         if (!_TypeRegistry.registries.has(namespace)) {
-          _TypeRegistry.registries.set(namespace, new _TypeRegistry(namespace));
+          _TypeRegistry.registries.set(namespace, this);
         }
-        return _TypeRegistry.registries.get(namespace);
+      }
+      static for(namespace) {
+        return _TypeRegistry.registries.get(namespace) ?? new _TypeRegistry(namespace);
       }
       copyFrom(other) {
         const { schemas, exceptions } = this;
@@ -19703,7 +20322,9 @@ var init_TypeRegistry = __esm({
       register(shapeId, schema) {
         const qualifiedName = this.normalizeShapeId(shapeId);
         for (const r6 of [this, _TypeRegistry.for(qualifiedName.split("#")[0])]) {
-          r6.schemas.set(qualifiedName, schema);
+          if (!r6.schemas.has(qualifiedName)) {
+            r6.schemas.set(qualifiedName, schema);
+          }
         }
       }
       getSchema(shapeId) {
@@ -19728,9 +20349,12 @@ var init_TypeRegistry = __esm({
       registerError(es, ctor) {
         const $error = es;
         const ns = $error[1];
+        const qualifiedName = ns + "#" + $error[2];
         for (const r6 of [this, _TypeRegistry.for(ns)]) {
-          r6.schemas.set(ns + "#" + $error[2], $error);
-          r6.exceptions.set($error, ctor);
+          if (!r6.schemas.has(qualifiedName) && !r6.exceptions.has($error)) {
+            r6.schemas.set(qualifiedName, $error);
+            r6.exceptions.set($error, ctor);
+          }
         }
       }
       getErrorCtor(es) {
@@ -19887,20 +20511,27 @@ var init_command = __esm({
         }
         const stack = clientStack.concat(this.middlewareStack);
         const { logger: logger2 } = configuration;
+        const additionalSmithyContext = additionalContext[import_types2.SMITHY_CONTEXT_KEY];
         const handlerExecutionContext = {
           logger: logger2,
           clientName,
           commandName,
           inputFilterSensitiveLog,
           outputFilterSensitiveLog,
+          ...additionalContext,
           [import_types2.SMITHY_CONTEXT_KEY]: {
+            ...additionalSmithyContext,
             commandInstance: this,
-            ...smithyContext
-          },
-          ...additionalContext
+            ...smithyContext,
+            ...options?.metricsRecorder === void 0 ? {} : { metricsRecorder: options.metricsRecorder }
+          }
         };
         const { requestHandler } = configuration;
         let requestOptions = options ?? {};
+        if (requestOptions.metricsRecorder) {
+          requestOptions = { ...requestOptions };
+          delete requestOptions.metricsRecorder;
+        }
         if (smithyContext.eventStream) {
           requestOptions = {
             isEventStream: true,
@@ -20106,10 +20737,25 @@ var init_exceptions = __esm({
           return _ServiceException.isInstance(instance);
         }
         if (_ServiceException.isInstance(instance)) {
-          if (candidate.name && this.name) {
-            return this.prototype.isPrototypeOf(instance) || candidate.name === this.name;
+          if (this.prototype.isPrototypeOf(instance)) {
+            return true;
+          }
+          const targetName = this.name;
+          if (!targetName || !candidate.name) {
+            return false;
+          }
+          if (candidate.name === targetName) {
+            return true;
+          }
+          let proto = Object.getPrototypeOf(candidate);
+          while (proto && proto !== Object.prototype) {
+            const ctorName = proto.constructor?.name;
+            if (ctorName && ctorName !== "Error" && ctorName === targetName) {
+              return true;
+            }
+            proto = Object.getPrototypeOf(proto);
           }
-          return this.prototype.isPrototypeOf(instance);
+          return false;
         }
         return false;
       }
@@ -22011,14 +22657,14 @@ var init_readFile = __esm({
     import_promises2 = require("node:fs/promises");
     filePromises = {};
     fileIntercept = {};
-    readFile2 = /* @__PURE__ */ __name((path12, options) => {
-      if (fileIntercept[path12] !== void 0) {
-        return fileIntercept[path12];
+    readFile2 = /* @__PURE__ */ __name((path14, options) => {
+      if (fileIntercept[path14] !== void 0) {
+        return fileIntercept[path14];
       }
-      if (!filePromises[path12] || options?.ignoreCache) {
-        filePromises[path12] = (0, import_promises2.readFile)(path12, "utf8");
+      if (!filePromises[path14] || options?.ignoreCache) {
+        filePromises[path14] = (0, import_promises2.readFile)(path14, "utf8");
       }
-      return filePromises[path12];
+      return filePromises[path14];
     }, "readFile");
   }
 });
@@ -22130,8 +22776,8 @@ var init_externalDataInterceptor = __esm({
       getFileRecord() {
         return fileIntercept;
       },
-      interceptFile(path12, contents) {
-        fileIntercept[path12] = Promise.resolve(contents);
+      interceptFile(path14, contents) {
+        fileIntercept[path14] = Promise.resolve(contents);
       },
       getTokenRecord() {
         return tokenIntercept;
@@ -22930,8 +23576,8 @@ var init_createConfigValueProvider = __esm({
               return endpoint.url.href;
             }
             if ("hostname" in endpoint) {
-              const { protocol, hostname, port, path: path12 } = endpoint;
-              return `${protocol}//${hostname}${port ? ":" + port : ""}${path12}`;
+              const { protocol, hostname, port, path: path14 } = endpoint;
+              return `${protocol}//${hostname}${port ? ":" + port : ""}${path14}`;
             }
           }
           return endpoint;
@@ -23322,18 +23968,18 @@ var getAttrPathList;
 var init_getAttrPathList = __esm({
   "../../node_modules/@smithy/core/dist-es/submodules/endpoints/util-endpoints/lib/getAttrPathList.js"() {
     init_types2();
-    getAttrPathList = /* @__PURE__ */ __name((path12) => {
-      const parts = path12.split(".");
+    getAttrPathList = /* @__PURE__ */ __name((path14) => {
+      const parts = path14.split(".");
       const pathList = [];
       for (const part of parts) {
         const squareBracketIndex = part.indexOf("[");
         if (squareBracketIndex !== -1) {
           if (part.indexOf("]") !== part.length - 1) {
-            throw new EndpointError(`Path: '${path12}' does not end with ']'`);
+            throw new EndpointError(`Path: '${path14}' does not end with ']'`);
           }
           const arrayIndex = part.slice(squareBracketIndex + 1, -1);
           if (Number.isNaN(parseInt(arrayIndex))) {
-            throw new EndpointError(`Invalid array index: '${arrayIndex}' in path: '${path12}'`);
+            throw new EndpointError(`Invalid array index: '${arrayIndex}' in path: '${path14}'`);
           }
           if (squareBracketIndex !== 0) {
             pathList.push(part.slice(0, squareBracketIndex));
@@ -23354,9 +24000,9 @@ var init_getAttr = __esm({
   "../../node_modules/@smithy/core/dist-es/submodules/endpoints/util-endpoints/lib/getAttr.js"() {
     init_types2();
     init_getAttrPathList();
-    getAttr = /* @__PURE__ */ __name((value, path12) => getAttrPathList(path12).reduce((acc, index) => {
+    getAttr = /* @__PURE__ */ __name((value, path14) => getAttrPathList(path14).reduce((acc, index) => {
       if (typeof acc !== "object") {
-        throw new EndpointError(`Index '${index}' in '${path12}' not found in '${JSON.stringify(value)}'`);
+        throw new EndpointError(`Index '${index}' in '${path14}' not found in '${JSON.stringify(value)}'`);
       } else if (Array.isArray(acc)) {
         const i6 = parseInt(index);
         return acc[i6 < 0 ? acc.length + i6 : i6];
@@ -23418,8 +24064,8 @@ var init_parseURL = __esm({
             return value;
           }
           if (typeof value === "object" && "hostname" in value) {
-            const { hostname: hostname2, port, protocol: protocol2 = "", path: path12 = "", query = {} } = value;
-            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path12}`);
+            const { hostname: hostname2, port, protocol: protocol2 = "", path: path14 = "", query = {} } = value;
+            const url = new URL(`${protocol2}//${hostname2}${port ? `:${port}` : ""}${path14}`);
             url.search = Object.entries(query).map(([k6, v]) => `${k6}=${v}`).join("&");
             return url;
           }
@@ -24578,6 +25224,8 @@ var init_getAwsChunkedEncodingStream_browser = __esm({
       const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
       const checksumRequired = base64Encoder !== void 0 && bodyLengthChecker !== void 0 && checksumAlgorithmFn !== void 0 && checksumLocationName !== void 0 && streamHasher !== void 0;
       const digest3 = checksumRequired ? streamHasher(checksumAlgorithmFn, readableStream) : void 0;
+      Promise.resolve(digest3).catch(() => {
+      });
       const reader = readableStream.getReader();
       return new ReadableStream({
         async pull(controller) {
@@ -24614,9 +25262,12 @@ function getAwsChunkedEncodingStream2(stream, options) {
   const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
   const checksumRequired = base64Encoder !== void 0 && checksumAlgorithmFn !== void 0 && checksumLocationName !== void 0 && streamHasher !== void 0;
   const digest3 = checksumRequired ? streamHasher(checksumAlgorithmFn, readable) : void 0;
+  Promise.resolve(digest3).catch(() => {
+  });
   const awsChunkedEncodingStream = new import_node_stream4.Readable({
-    read: /* @__PURE__ */ __name(() => {
-    }, "read")
+    read() {
+      readable.resume();
+    }
   });
   readable.on("data", (data) => {
     const length = bodyLengthChecker(data) || 0;
@@ -24626,19 +25277,29 @@ function getAwsChunkedEncodingStream2(stream, options) {
     awsChunkedEncodingStream.push(`${length.toString(16)}\r
 `);
     awsChunkedEncodingStream.push(data);
-    awsChunkedEncodingStream.push("\r\n");
+    if (!awsChunkedEncodingStream.push("\r\n")) {
+      readable.pause();
+    }
   });
+  readable.on("error", (err) => {
+    awsChunkedEncodingStream.destroy(err);
+  });
+  readable.pause();
   readable.on("end", async () => {
-    awsChunkedEncodingStream.push(`0\r
+    try {
+      awsChunkedEncodingStream.push(`0\r
 `);
-    if (checksumRequired) {
-      const checksum = base64Encoder(await digest3);
-      awsChunkedEncodingStream.push(`${checksumLocationName}:${checksum}\r
+      if (checksumRequired) {
+        const checksum = base64Encoder(await digest3);
+        awsChunkedEncodingStream.push(`${checksumLocationName}:${checksum}\r
 `);
-      awsChunkedEncodingStream.push(`\r
+        awsChunkedEncodingStream.push(`\r
 `);
+      }
+      awsChunkedEncodingStream.push(null);
+    } catch (err) {
+      awsChunkedEncodingStream.destroy(err);
     }
-    awsChunkedEncodingStream.push(null);
   });
   return awsChunkedEncodingStream;
 }
@@ -26984,7 +27645,7 @@ var init_HttpProtocol = __esm({
       constructor(options) {
         super();
         this.options = options;
-        this.compositeErrorRegistry = TypeRegistry.for(options.defaultNamespace);
+        this.compositeErrorRegistry = new TypeRegistry(options.defaultNamespace);
         for (const etr of options.errorTypeRegistries ?? []) {
           this.compositeErrorRegistry.copyFrom(etr);
         }
@@ -27078,6 +27739,44 @@ var init_HttpProtocol = __esm({
           cfId: output.headers["x-amz-cf-id"]
         };
       }
+      resolveError(name, namespaces, registries) {
+        const defaultErrorSchema = [-3, "", "Error", 0, [], [], 0];
+        let schema;
+        for (const registry of registries) {
+          for (const ns of namespaces) {
+            try {
+              if (ns === "*") {
+                schema = registry.getSchema(name);
+              } else {
+                schema = registry.getSchema(ns + "#" + name);
+              }
+              const errorCtor = registry.getErrorCtor(schema);
+              if (errorCtor) {
+                return [schema, errorCtor, "modeled"];
+              } else {
+                const syntheticErrorSchema = registry.getBaseException();
+                if (syntheticErrorSchema) {
+                  const syntheticErrorCtor = registry.getErrorCtor(syntheticErrorSchema);
+                  if (syntheticErrorCtor) {
+                    return [schema, syntheticErrorCtor, "synthetic"];
+                  }
+                }
+              }
+            } catch (ignored) {
+            }
+          }
+        }
+        for (const registry of registries) {
+          const syntheticErrorSchema = registry.getBaseException();
+          if (syntheticErrorSchema) {
+            const syntheticErrorCtor = registry.getErrorCtor(syntheticErrorSchema);
+            if (syntheticErrorCtor) {
+              return [syntheticErrorSchema, syntheticErrorCtor, "synthetic"];
+            }
+          }
+        }
+        return [defaultErrorSchema, Error, "native"];
+      }
       async serializeEventStream({ eventStream, requestSchema, initialRequest }) {
         const eventStreamSerde = await this.loadEventStreamCapability();
         return eventStreamSerde.serializeEventStream({
@@ -27106,13 +27805,6 @@ var init_HttpProtocol = __esm({
           compositeErrorRegistry: this.compositeErrorRegistry
         });
       }
-      resolveEventStreamMarshaller(importedProvider) {
-        const context = this.serdeContext;
-        if (context.eventStreamMarshaller) {
-          return context.eventStreamMarshaller;
-        }
-        return importedProvider(this.serdeContext);
-      }
       getDefaultContentType() {
         throw new Error(`@smithy/core/protocols - ${this.constructor.name} getDefaultContentType() implementation missing.`);
       }
@@ -27131,6 +27823,13 @@ var init_HttpProtocol = __esm({
         }
         return context.eventStreamMarshaller;
       }
+      resolveEventStreamMarshaller(importedProvider) {
+        const context = this.serdeContext;
+        if (context.eventStreamMarshaller) {
+          return context.eventStreamMarshaller;
+        }
+        return importedProvider(this.serdeContext);
+      }
     };
   }
 });
@@ -27177,11 +27876,11 @@ var init_HttpBindingProtocol = __esm({
           const opTraits = translateTraits(operationSchema.traits);
           if (opTraits.http) {
             request.method = opTraits.http[0];
-            const [path12, search] = opTraits.http[1].split("?");
+            const [path14, search] = opTraits.http[1].split("?");
             if (request.path == "/") {
-              request.path = path12;
+              request.path = path14;
             } else {
-              request.path += path12;
+              request.path += path14;
             }
             const traitSearchParams = new URLSearchParams(search ?? "");
             for (const [key, value] of traitSearchParams) {
@@ -27599,8 +28298,8 @@ var init_requestBuilder = __esm({
         return this;
       }
       p(memberName, labelValueProvider, uriLabel, isGreedyLabel) {
-        this.resolvePathStack.push((path12) => {
-          this.path = resolvedPath(path12, this.input, memberName, labelValueProvider, uriLabel, isGreedyLabel);
+        this.resolvePathStack.push((path14) => {
+          this.path = resolvedPath(path14, this.input, memberName, labelValueProvider, uriLabel, isGreedyLabel);
         });
         return this;
       }
@@ -28220,7 +28919,7 @@ var init_service_error_classification = __esm({
       return errorMessages.has(error2.message);
     }, "isBrowserNetworkError");
     isThrottlingError = /* @__PURE__ */ __name((error2) => error2.$metadata?.httpStatusCode === 429 || THROTTLING_ERROR_CODES.includes(error2.name) || error2.$retryable?.throttling == true, "isThrottlingError");
-    isTransientError = /* @__PURE__ */ __name((error2, depth = 0) => isRetryableByTrait(error2) || isClockSkewCorrectedError(error2) || error2.name === "InvalidSignatureException" && error2.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error2.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error2?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error2?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error2.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error2) || isNodeJsHttp2TransientError(error2) || error2.cause !== void 0 && depth <= 10 && isTransientError(error2.cause, depth + 1), "isTransientError");
+    isTransientError = /* @__PURE__ */ __name((error2, depth = 0) => error2?.name !== "AbortError" && (isRetryableByTrait(error2) || isClockSkewCorrectedError(error2) || error2.name === "InvalidSignatureException" && error2.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error2.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error2?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error2?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error2.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error2) || isNodeJsHttp2TransientError(error2) || error2.cause !== void 0 && depth <= 10 && isTransientError(error2.cause, depth + 1)), "isTransientError");
     isServerError = /* @__PURE__ */ __name((error2) => {
       if (error2.$metadata?.httpStatusCode !== void 0) {
         const statusCode = error2.$metadata.httpStatusCode;
@@ -29786,9 +30485,9 @@ var init_createPaginator = __esm({
       return await client.send(command6, ...args);
     }, "makePagedClientRequest");
     __name(createPaginator, "createPaginator");
-    get = /* @__PURE__ */ __name((fromObject, path12) => {
+    get = /* @__PURE__ */ __name((fromObject, path14) => {
       let cursor2 = fromObject;
-      const pathComponents = path12.split(".");
+      const pathComponents = path14.split(".");
       for (const step of pathComponents) {
         if (!cursor2 || typeof cursor2 !== "object") {
           return void 0;
@@ -32075,7 +32774,7 @@ var init_resolveAwsSdkSigV4AConfig = __esm({
 // ../../node_modules/@smithy/signature-v4/dist-cjs/index.js
 var require_dist_cjs2 = __commonJS({
   "../../node_modules/@smithy/signature-v4/dist-cjs/index.js"(exports2) {
-    var { fromUtf8: fromUtf83, fromHex: fromHex2, toHex: toHex2, toUint8Array: toUint8Array2, isArrayBuffer: isArrayBuffer2 } = (init_serde(), __toCommonJS(serde_exports));
+    var { hasOwn: hasOwn2, fromUtf8: fromUtf83, fromHex: fromHex2, toHex: toHex2, toUint8Array: toUint8Array2, isArrayBuffer: isArrayBuffer2 } = (init_serde(), __toCommonJS(serde_exports));
     var { normalizeProvider: normalizeProvider3 } = (init_client2(), __toCommonJS(client_exports));
     var { escapeUri: escapeUri2, HttpRequest: HttpRequest2 } = (init_protocols(), __toCommonJS(protocols_exports));
     var HeaderFormatter = class {
@@ -32084,7 +32783,9 @@ var require_dist_cjs2 = __commonJS({
       }
       format(headers) {
         const chunks = [];
-        for (const headerName of Object.keys(headers)) {
+        for (const headerName in headers) {
+          if (!hasOwn2(headers, headerName))
+            continue;
           const bytes = fromUtf83(headerName);
           chunks.push(Uint8Array.from([bytes.byteLength]), bytes, this.formatHeaderValue(headers[headerName]));
         }
@@ -32099,27 +32800,27 @@ var require_dist_cjs2 = __commonJS({
       formatHeaderValue(header) {
         switch (header.type) {
           case "boolean":
-            return Uint8Array.from([header.value ? HEADER_VALUE_TYPE2.boolTrue : HEADER_VALUE_TYPE2.boolFalse]);
+            return Uint8Array.from([header.value ? 0 : 1]);
           case "byte":
-            return Uint8Array.from([HEADER_VALUE_TYPE2.byte, header.value]);
+            return Uint8Array.from([2, header.value]);
           case "short":
             const shortView = new DataView(new ArrayBuffer(3));
-            shortView.setUint8(0, HEADER_VALUE_TYPE2.short);
+            shortView.setUint8(0, 3);
             shortView.setInt16(1, header.value, false);
             return new Uint8Array(shortView.buffer);
           case "integer":
             const intView = new DataView(new ArrayBuffer(5));
-            intView.setUint8(0, HEADER_VALUE_TYPE2.integer);
+            intView.setUint8(0, 4);
             intView.setInt32(1, header.value, false);
             return new Uint8Array(intView.buffer);
           case "long":
             const longBytes = new Uint8Array(9);
-            longBytes[0] = HEADER_VALUE_TYPE2.long;
+            longBytes[0] = 5;
             longBytes.set(header.value.bytes, 1);
             return longBytes;
           case "binary":
             const binView = new DataView(new ArrayBuffer(3 + header.value.byteLength));
-            binView.setUint8(0, HEADER_VALUE_TYPE2.byteArray);
+            binView.setUint8(0, 6);
             binView.setUint16(1, header.value.byteLength, false);
             const binBytes = new Uint8Array(binView.buffer);
             binBytes.set(header.value, 3);
@@ -32127,14 +32828,14 @@ var require_dist_cjs2 = __commonJS({
           case "string":
             const utf8Bytes = fromUtf83(header.value);
             const strView = new DataView(new ArrayBuffer(3 + utf8Bytes.byteLength));
-            strView.setUint8(0, HEADER_VALUE_TYPE2.string);
+            strView.setUint8(0, 7);
             strView.setUint16(1, utf8Bytes.byteLength, false);
             const strBytes = new Uint8Array(strView.buffer);
             strBytes.set(utf8Bytes, 3);
             return strBytes;
           case "timestamp":
             const tsBytes = new Uint8Array(9);
-            tsBytes[0] = HEADER_VALUE_TYPE2.timestamp;
+            tsBytes[0] = 8;
             tsBytes.set(Int642.fromNumber(header.value.valueOf()).bytes, 1);
             return tsBytes;
           case "uuid":
@@ -32142,7 +32843,7 @@ var require_dist_cjs2 = __commonJS({
               throw new Error(`Invalid UUID received: ${header.value}`);
             }
             const uuidBytes = new Uint8Array(17);
-            uuidBytes[0] = HEADER_VALUE_TYPE2.uuid;
+            uuidBytes[0] = 9;
             uuidBytes.set(fromHex2(header.value.replace(/-/g, "")), 1);
             return uuidBytes;
         }
@@ -32255,7 +32956,9 @@ var require_dist_cjs2 = __commonJS({
     var getCanonicalQuery = /* @__PURE__ */ __name(({ query = {} }) => {
       const keys = [];
       const serialized = {};
-      for (const key of Object.keys(query)) {
+      for (const key in query) {
+        if (!hasOwn2(query, key))
+          continue;
         if (key.toLowerCase() === SIGNATURE_HEADER) {
           continue;
         }
@@ -32320,10 +33023,10 @@ ${longDate}
 ${credentialScope}
 ${toHex2(hashedRequest)}`;
       }
-      getCanonicalPath({ path: path12 }) {
+      getCanonicalPath({ path: path14 }) {
         if (this.uriEscapePath) {
           const normalizedPathSegments = [];
-          for (const pathSegment of path12.split("/")) {
+          for (const pathSegment of path14.split("/")) {
             if (pathSegment?.length === 0)
               continue;
             if (pathSegment === ".")
@@ -32334,11 +33037,11 @@ ${toHex2(hashedRequest)}`;
               normalizedPathSegments.push(pathSegment);
             }
           }
-          const normalizedPath = `${path12?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path12?.endsWith("/") ? "/" : ""}`;
+          const normalizedPath = `${path14?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path14?.endsWith("/") ? "/" : ""}`;
           const doubleEncoded = escapeUri2(normalizedPath);
           return doubleEncoded.replace(/%2F/g, "/");
         }
-        return path12;
+        return path14;
       }
       validateResolvedCredentials(credentials) {
         if (typeof credentials !== "object" || typeof credentials.accessKeyId !== "string" || typeof credentials.secretAccessKey !== "string") {
@@ -32403,7 +33106,9 @@ ${toHex2(hashedRequest)}`;
       return canonical;
     }, "getCanonicalHeaders");
     var getPayloadHash = /* @__PURE__ */ __name(async ({ headers, body }, hashConstructor) => {
-      for (const headerName of Object.keys(headers)) {
+      for (const headerName in headers) {
+        if (!hasOwn2(headers, headerName))
+          continue;
         if (headerName.toLowerCase() === SHA256_HEADER) {
           return headers[headerName];
         }
@@ -32419,7 +33124,9 @@ ${toHex2(hashedRequest)}`;
     }, "getPayloadHash");
     var hasHeader2 = /* @__PURE__ */ __name((soughtHeader, headers) => {
       soughtHeader = soughtHeader.toLowerCase();
-      for (const headerName of Object.keys(headers)) {
+      for (const headerName in headers) {
+        if (!hasOwn2(headers, headerName))
+          continue;
         if (soughtHeader === headerName.toLowerCase()) {
           return true;
         }
@@ -32428,7 +33135,9 @@ ${toHex2(hashedRequest)}`;
     }, "hasHeader");
     var moveHeadersToQuery = /* @__PURE__ */ __name((request, options = {}) => {
       const { headers, query = {} } = HttpRequest2.clone(request);
-      for (const name of Object.keys(headers)) {
+      for (const name in headers) {
+        if (!hasOwn2(headers, name))
+          continue;
         const lname = name.toLowerCase();
         if (lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname) || options.hoistableHeaders?.has(lname)) {
           query[name] = headers[name];
@@ -32443,7 +33152,9 @@ ${toHex2(hashedRequest)}`;
     }, "moveHeadersToQuery");
     var prepareRequest = /* @__PURE__ */ __name((request) => {
       request = HttpRequest2.clone(request);
-      for (const headerName of Object.keys(request.headers)) {
+      for (const headerName in request.headers) {
+        if (!hasOwn2(request.headers, headerName))
+          continue;
         if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
           delete request.headers[headerName];
         }
@@ -33217,12 +33928,13 @@ For more information, please visit: ` + STATIC_STABILITY_DOC_URL);
 // ../../node_modules/@smithy/node-http-handler/dist-cjs/index.js
 var require_dist_cjs5 = __commonJS({
   "../../node_modules/@smithy/node-http-handler/dist-cjs/index.js"(exports2) {
+    var { hasOwn: hasOwn2 } = (init_serde(), __toCommonJS(serde_exports));
+    var { streamCollector: streamCollector8 } = (init_serde(), __toCommonJS(serde_exports));
+    exports2.streamCollector = streamCollector8;
     var { buildQueryString: buildQueryString2, HttpResponse: HttpResponse2 } = (init_protocols(), __toCommonJS(protocols_exports));
     var node_https = require("node:https");
     var { Readable: Readable8 } = require("node:stream");
     var http2 = require("node:http2");
-    var { streamCollector: streamCollector8 } = (init_serde(), __toCommonJS(serde_exports));
-    exports2.streamCollector = streamCollector8;
     function buildAbortError(abortSignal) {
       const reason = abortSignal && typeof abortSignal === "object" && "reason" in abortSignal ? abortSignal.reason : void 0;
       if (reason) {
@@ -33245,6 +33957,8 @@ var require_dist_cjs5 = __commonJS({
     var getTransformedHeaders = /* @__PURE__ */ __name((headers) => {
       const transformedHeaders = {};
       for (const name in headers) {
+        if (!hasOwn2(headers, name))
+          continue;
         const headerValues = headers[name];
         transformedHeaders[name] = Array.isArray(headerValues) ? headerValues.join(",") : headerValues;
       }
@@ -33435,6 +34149,8 @@ var require_dist_cjs5 = __commonJS({
         }
         if (sockets && requests) {
           for (const origin in sockets) {
+            if (!hasOwn2(sockets, origin))
+              continue;
             const socketsInUse = sockets[origin]?.length ?? 0;
             const requestsEnqueued = requests[origin]?.length ?? 0;
             if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
@@ -33467,6 +34183,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           this.config = await this.configProvider;
         }
         const config = this.config;
+        const logger2 = config.logger;
         const isSSL = request.protocol === "https:";
         if (!isSSL && !this.config.httpAgent) {
           this.config.httpAgent = await this.config.httpAgentProvider();
@@ -33510,7 +34227,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             });
           }
           socketWarningTimeoutId = timing.setTimeout(() => {
-            this.socketWarningTimestamp = _NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, config.logger);
+            this.socketWarningTimestamp = _NodeHttpHandler.checkSocketUsage(agent, this.socketWarningTimestamp, logger2);
           }, config.socketAcquisitionWarningTimeout ?? (config.requestTimeout ?? 2e3) + (config.connectionTimeout ?? 1e3));
           const queryString = request.query ? buildQueryString2(request.query) : "";
           let auth = void 0;
@@ -33519,12 +34236,12 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             const password = request.password ?? "";
             auth = `${username}:${password}`;
           }
-          let path12 = request.path;
+          let path14 = request.path;
           if (queryString) {
-            path12 += `?${queryString}`;
+            path14 += `?${queryString}`;
           }
           if (request.fragment) {
-            path12 += `#${request.fragment}`;
+            path14 += `#${request.fragment}`;
           }
           let hostname = request.hostname ?? "";
           if (hostname[0] === "[" && hostname.endsWith("]")) {
@@ -33536,7 +34253,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             headers: request.headers,
             host: hostname,
             method: request.method,
-            path: path12,
+            path: path14,
             port: request.port,
             agent,
             auth
@@ -33574,7 +34291,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
           }
           const effectiveRequestTimeout = requestTimeout ?? config.requestTimeout;
           connectionTimeoutId = setConnectionTimeout(req, reject, config.connectionTimeout);
-          requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, config.logger ?? console);
+          requestTimeoutId = setRequestTimeout(req, reject, effectiveRequestTimeout, config.throwOnRequestTimeout, logger2 ?? console);
           socketTimeoutId = setSocketTimeout(req, reject, config.socketTimeout);
           const httpAgent = nodeHttpsOptions.agent;
           if (typeof httpAgent === "object" && "keepAlive" in httpAgent) {
@@ -33592,6 +34309,12 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       updateHttpClientConfig(key, value) {
         this.config = void 0;
         this.configProvider = this.configProvider.then((config) => {
+          if (key === /* @__PURE__ */ Symbol.for("logger")) {
+            return {
+              ...config,
+              logger: config.logger ?? value
+            };
+          }
           return {
             ...config,
             [key]: value
@@ -33679,6 +34402,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       destroy() {
         this.refs = 0;
         if (!this.session.destroyed) {
+          this.session.setTimeout(0);
           this.session.destroy();
         }
       }
@@ -33797,9 +34521,8 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         session.on("error", ensureDestroyed);
         session.on("frameError", ensureDestroyed);
         session.on("close", ensureDestroyed);
-        if (connectionConfiguration.requestTimeout) {
-          session.setTimeout(connectionConfiguration.requestTimeout, ensureDestroyed);
-        }
+        const timeout = connectionConfiguration.requestTimeout ?? 3e5;
+        session.setTimeout(timeout, ensureDestroyed);
         ref.retain();
         return ref;
       }
@@ -33951,16 +34674,16 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             reject(err);
           }, "rejectWithDestroy");
           const queryString = query ? buildQueryString2(query) : "";
-          let path12 = request.path;
+          let path14 = request.path;
           if (queryString) {
-            path12 += `?${queryString}`;
+            path14 += `?${queryString}`;
           }
           if (request.fragment) {
-            path12 += `#${request.fragment}`;
+            path14 += `#${request.fragment}`;
           }
           const clientHttp2Stream = session.request({
             ...request.headers,
-            [constants.HTTP2_HEADER_PATH]: path12,
+            [constants.HTTP2_HEADER_PATH]: path14,
             [constants.HTTP2_HEADER_METHOD]: method
           });
           if (effectiveRequestTimeout) {
@@ -34002,6 +34725,9 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
             resolve5({ response: httpResponse });
             if (useIsolatedSession) {
               session.close();
+              clientHttp2Stream.on("end", () => {
+                ref.destroy();
+              });
             }
           });
           clientHttp2Stream.on("close", () => {
@@ -34011,7 +34737,11 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
               this.connectionManager.release(requestContext, ref);
             }
             if (!fulfilled) {
-              rejectWithDestroy(new Error("Unexpected error: http2 request did not get a response"));
+              const error2 = new Error("Unexpected error: http2 request did not get a response");
+              if (session.destroyed) {
+                error2.name = "TimeoutError";
+              }
+              rejectWithDestroy(error2);
             }
           });
           writeRequestBodyPromise = writeRequestBody(clientHttp2Stream, request, effectiveRequestTimeout);
@@ -34042,7 +34772,7 @@ var require_dist_cjs6 = __commonJS({
     var { setCredentialFeature: setCredentialFeature2 } = (init_client3(), __toCommonJS(client_exports2));
     var { CredentialsProviderError: CredentialsProviderError2 } = (init_config2(), __toCommonJS(config_exports));
     var { NodeHttpHandler } = require_dist_cjs5();
-    var fs13 = require("node:fs/promises");
+    var fs14 = require("node:fs/promises");
     var { HttpRequest: HttpRequest2 } = (init_protocols(), __toCommonJS(protocols_exports));
     var { sdkStreamMixin: sdkStreamMixin3, parseRfc3339DateTime: parseRfc3339DateTime2 } = (init_serde(), __toCommonJS(serde_exports));
     var ECS_CONTAINER_HOST = "169.254.170.2";
@@ -34168,7 +34898,7 @@ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
       const provider = retryWrapper(async () => {
         const request = createGetRequest(url);
         if (tokenFile) {
-          request.headers.Authorization = validateToken((await fs13.readFile(tokenFile)).toString());
+          request.headers.Authorization = validateToken((await fs14.readFile(tokenFile)).toString());
         } else if (token) {
           request.headers.Authorization = validateToken(token);
         }
@@ -34283,7 +35013,7 @@ var init_package = __esm({
   "../../node_modules/@aws-sdk/nested-clients/package.json"() {
     package_default = {
       name: "@aws-sdk/nested-clients",
-      version: "3.997.43",
+      version: "3.997.46",
       description: "Nested clients for AWS SDK packages.",
       homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",
       license: "Apache-2.0",
@@ -34383,13 +35113,13 @@ var init_package = __esm({
         "test:watch": "yarn g:vitest watch"
       },
       dependencies: {
-        "@aws-sdk/core": "^3.977.8",
-        "@aws-sdk/signature-v4-multi-region": "^3.996.45",
-        "@aws-sdk/types": "^3.974.4",
-        "@smithy/core": "^3.31.1",
-        "@smithy/fetch-http-handler": "^5.6.13",
-        "@smithy/node-http-handler": "^4.9.13",
-        "@smithy/types": "^4.16.1",
+        "@aws-sdk/core": "^3.978.1",
+        "@aws-sdk/signature-v4-multi-region": "^3.996.47",
+        "@aws-sdk/types": "^3.974.6",
+        "@smithy/core": "^3.35.0",
+        "@smithy/fetch-http-handler": "^5.8.0",
+        "@smithy/node-http-handler": "^4.12.1",
+        "@smithy/types": "^4.19.0",
         tslib: "^2.6.2"
       },
       devDependencies: {
@@ -34434,7 +35164,6 @@ var init_cbor_types = __esm({
 var loadSmithyRpcV2CborErrorCode;
 var init_parseCborBody = __esm({
   "../../node_modules/@smithy/core/dist-es/submodules/cbor/parseCborBody.js"() {
-    init_transport();
     loadSmithyRpcV2CborErrorCode = /* @__PURE__ */ __name((output, data) => {
       const sanitizeErrorCode2 = /* @__PURE__ */ __name((rawValue) => {
         let cleanValue = rawValue;
@@ -34447,26 +35176,11 @@ var init_parseCborBody = __esm({
         if (cleanValue.indexOf(":") >= 0) {
           cleanValue = cleanValue.split(":")[0];
         }
-        if (cleanValue.indexOf("#") >= 0) {
-          cleanValue = cleanValue.split("#")[1];
-        }
         return cleanValue;
       }, "sanitizeErrorCode");
       if (data["__type"] !== void 0) {
         return sanitizeErrorCode2(data["__type"]);
       }
-      let codeKey;
-      for (const key in data) {
-        if (!hasOwn(data, key))
-          continue;
-        if (key.toLowerCase() === "code") {
-          codeKey = key;
-          break;
-        }
-      }
-      if (codeKey && data[codeKey] !== void 0) {
-        return sanitizeErrorCode2(data[codeKey]);
-      }
     }, "loadSmithyRpcV2CborErrorCode");
   }
 });
@@ -35824,11 +36538,11 @@ var init_SmithyRpcV2CborProtocol = __esm({
           }
         }
         const { service, operation: operation2 } = getSmithyContext(context);
-        const path12 = `/service/${service}/operation/${operation2}`;
+        const path14 = `/service/${service}/operation/${operation2}`;
         if (request.path.endsWith("/")) {
-          request.path += path12.slice(1);
+          request.path += path14.slice(1);
         } else {
-          request.path += path12;
+          request.path += path14;
         }
         return request;
       }
@@ -35836,36 +36550,37 @@ var init_SmithyRpcV2CborProtocol = __esm({
         return super.deserializeResponse(operationSchema, context, response);
       }
       async handleError(operationSchema, context, response, dataObject, metadata) {
-        const errorName = loadSmithyRpcV2CborErrorCode(response, dataObject) ?? "Unknown";
+        const errorIdentifier = loadSmithyRpcV2CborErrorCode(response, dataObject) ?? "Unknown";
+        const preferredNamespaces = ["*"];
+        const { defaultNamespace } = this.options;
+        preferredNamespaces.unshift(defaultNamespace);
+        const [namespace, errorShapeName] = (() => {
+          if (errorIdentifier.includes("#")) {
+            return errorIdentifier.split("#");
+          }
+          return [void 0, errorIdentifier];
+        })();
+        if (namespace) {
+          preferredNamespaces.unshift(namespace);
+        }
         const errorMetadata = {
           $metadata: metadata,
-          $fault: response.statusCode <= 500 ? "client" : "server"
+          $fault: response.statusCode < 500 ? "client" : "server"
         };
-        let namespace = this.options.defaultNamespace;
-        if (errorName.includes("#")) {
-          [namespace] = errorName.split("#");
-        }
-        const registry = this.compositeErrorRegistry;
-        const nsRegistry = TypeRegistry.for(namespace);
-        registry.copyFrom(nsRegistry);
-        let errorSchema;
-        try {
-          errorSchema = registry.getSchema(errorName);
-        } catch (ignored) {
+        const preferredRegistries = [this.compositeErrorRegistry];
+        if (namespace) {
+          preferredRegistries.push(TypeRegistry.for(namespace));
+        }
+        preferredRegistries.push(TypeRegistry.for(defaultNamespace));
+        const [errorSchema, ErrorCtor, errorMode] = this.resolveError(errorShapeName, preferredNamespaces, preferredRegistries);
+        if (errorMode === "native" || errorMode === "synthetic") {
           if (dataObject.Message) {
             dataObject.message = dataObject.Message;
           }
-          const syntheticRegistry = TypeRegistry.for("smithy.ts.sdk.synthetic." + namespace);
-          registry.copyFrom(syntheticRegistry);
-          const baseExceptionSchema = registry.getBaseException();
-          if (baseExceptionSchema) {
-            const ErrorCtor2 = registry.getErrorCtor(baseExceptionSchema);
-            throw Object.assign(new ErrorCtor2({ name: errorName }), errorMetadata, dataObject);
-          }
-          throw Object.assign(new Error(errorName), errorMetadata, dataObject);
+          const error2 = errorMode === "synthetic" ? new ErrorCtor({ name: errorShapeName }) : new Error(errorShapeName);
+          throw Object.assign(error2, errorMetadata, dataObject);
         }
         const ns = NormalizedSchema.of(errorSchema);
-        const ErrorCtor = registry.getErrorCtor(errorSchema);
         const message = dataObject.message ?? dataObject.Message ?? "Unknown";
         const exception = new ErrorCtor({});
         const output = {};
@@ -39911,10 +40626,10 @@ var init_schemas_0 = __esm({
     _se = "server";
     _tT = "tokenType";
     n0 = "com.amazonaws.ssooidc";
-    _s_registry = TypeRegistry.for(_s);
+    _s_registry = new TypeRegistry(_s);
     SSOOIDCServiceException$ = [-3, _s, "SSOOIDCServiceException", 0, [], []];
     _s_registry.registerError(SSOOIDCServiceException$, SSOOIDCServiceException);
-    n0_registry = TypeRegistry.for(n0);
+    n0_registry = new TypeRegistry(n0);
     AccessDeniedException$ = [
       -3,
       n0,
@@ -40454,7 +41169,7 @@ var require_dist_cjs8 = __commonJS({
       const tokenString = JSON.stringify(ssoToken, null, 2);
       return writeFile(tokenFilepath, tokenString);
     }, "writeSSOTokenToFile");
-    var lastRefreshAttemptTime = /* @__PURE__ */ new Date(0);
+    var lastRefreshAttemptTimes = /* @__PURE__ */ new Map();
     var fromSso = /* @__PURE__ */ __name((init = {}) => async ({ callerClientConfig } = {}) => {
       init.logger?.debug("@aws-sdk/token-providers - fromSso");
       const profiles = await parseKnownFiles2(init);
@@ -40489,11 +41204,15 @@ var require_dist_cjs8 = __commonJS({
       validateTokenKey("accessToken", ssoToken.accessToken);
       validateTokenKey("expiresAt", ssoToken.expiresAt);
       const { accessToken, expiresAt } = ssoToken;
-      const existingToken = { token: accessToken, expiration: new Date(expiresAt) };
+      const existingToken = {
+        token: accessToken,
+        expiration: new Date(expiresAt)
+      };
       if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
         return existingToken;
       }
-      if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1e3) {
+      const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;
+      if (Date.now() - lastRefreshAttemptTime < 30 * 1e3) {
         validateTokenExpiry(existingToken);
         return existingToken;
       }
@@ -40501,7 +41220,7 @@ var require_dist_cjs8 = __commonJS({
       validateTokenKey("clientSecret", ssoToken.clientSecret, true);
       validateTokenKey("refreshToken", ssoToken.refreshToken, true);
       try {
-        lastRefreshAttemptTime.setTime(Date.now());
+        lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
         const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
         validateTokenKey("accessToken", newSsoOidcToken.accessToken);
         validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
@@ -40858,10 +41577,10 @@ var init_schemas_02 = __esm({
     _sT = "sessionToken";
     _xasbt = "x-amz-sso_bearer_token";
     n02 = "com.amazonaws.sso";
-    _s_registry2 = TypeRegistry.for(_s2);
+    _s_registry2 = new TypeRegistry(_s2);
     SSOServiceException$ = [-3, _s2, "SSOServiceException", 0, [], []];
     _s_registry2.registerError(SSOServiceException$, SSOServiceException);
-    n0_registry2 = TypeRegistry.for(n02);
+    n0_registry2 = new TypeRegistry(n02);
     InvalidRequestException$2 = [
       -3,
       n02,
@@ -42065,7 +42784,7 @@ var init_errors3 = __esm({
 });
 
 // ../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/schemas/schemas_0.js
-var _A, _AKI, _AR, _ARI, _ARR, _ARRs, _ARU, _ARWWI, _ARWWIR, _ARWWIRs, _Au, _C, _CA, _DS, _E, _EI, _ETE2, _IDPCEE, _IDPRCE, _IITE, _K, _MPDE, _P, _PA, _PAr, _PC, _PCLT, _PCr, _PDT, _PI, _PPS, _PPTLE, _Pr, _RA, _RDE, _RSN, _SAK, _SFWIT, _SI, _SN, _ST, _T, _TC, _TTK, _Ta, _V, _WIT, _a, _aKST, _aQE, _c3, _cTT, _e3, _hE3, _m2, _pDLT, _s3, _tLT, n03, _s_registry3, STSServiceException$, n0_registry3, ExpiredTokenException$2, IDPCommunicationErrorException$, IDPRejectedClaimException$, InvalidIdentityTokenException$, MalformedPolicyDocumentException$, PackedPolicyTooLargeException$, RegionDisabledException$, errorTypeRegistries3, accessKeySecretType, clientTokenType, AssumedRoleUser$, AssumeRoleRequest$, AssumeRoleResponse$, AssumeRoleWithWebIdentityRequest$, AssumeRoleWithWebIdentityResponse$, Credentials$, PolicyDescriptorType$, ProvidedContext$, Tag$, policyDescriptorListType, ProvidedContextsListType, tagKeyListType, tagListType, AssumeRole$, AssumeRoleWithWebIdentity$;
+var _A, _AKI, _AR, _ARI, _ARR, _ARRs, _ARU, _ARWWI, _ARWWIR, _ARWWIRs, _Au, _C, _CA, _DS, _E, _EI, _ETE2, _IDPCEE, _IDPRCE, _IITE, _K, _MPDE, _MSTS, _P, _PA, _PAr, _PC, _PCLT, _PCr, _PDT, _PI, _PPS, _PPTLE, _Pr, _RA, _RDE, _RSN, _SAK, _SFWIT, _SI, _SN, _ST, _STS, _STU, _T, _TC, _TTK, _Ta, _V, _WIT, _a, _aKST, _aQE, _c3, _cTT, _e3, _hE3, _m2, _pDLT, _s3, _tLT, n03, _s_registry3, STSServiceException$, n0_registry3, ExpiredTokenException$2, IDPCommunicationErrorException$, IDPRejectedClaimException$, InvalidIdentityTokenException$, MalformedPolicyDocumentException$, PackedPolicyTooLargeException$, RegionDisabledException$, errorTypeRegistries3, accessKeySecretType, clientTokenType, AssumedRoleUser$, AssumeRoleRequest$, AssumeRoleResponse$, AssumeRoleWithWebIdentityRequest$, AssumeRoleWithWebIdentityResponse$, Credentials$, PolicyDescriptorType$, ProvidedContext$, Tag$, policyDescriptorListType, ProvidedContextsListType, tagKeyListType, tagListType, AssumeRole$, AssumeRoleWithWebIdentity$;
 var init_schemas_03 = __esm({
   "../../node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/schemas/schemas_0.js"() {
     init_schema4();
@@ -42093,6 +42812,7 @@ var init_schemas_03 = __esm({
     _IITE = "InvalidIdentityTokenException";
     _K = "Key";
     _MPDE = "MalformedPolicyDocumentException";
+    _MSTS = "MinimumSessionTokenSize";
     _P = "Policy";
     _PA = "PolicyArns";
     _PAr = "ProviderArn";
@@ -42112,6 +42832,8 @@ var init_schemas_03 = __esm({
     _SI = "SourceIdentity";
     _SN = "SerialNumber";
     _ST = "SessionToken";
+    _STS = "SessionTokenSize";
+    _STU = "SessionTokenUtilization";
     _T = "Tags";
     _TC = "TokenCode";
     _TTK = "TransitiveTagKeys";
@@ -42130,10 +42852,10 @@ var init_schemas_03 = __esm({
     _s3 = "smithy.ts.sdk.synthetic.com.amazonaws.sts";
     _tLT = "tagListType";
     n03 = "com.amazonaws.sts";
-    _s_registry3 = TypeRegistry.for(_s3);
+    _s_registry3 = new TypeRegistry(_s3);
     STSServiceException$ = [-3, _s3, "STSServiceException", 0, [], []];
     _s_registry3.registerError(STSServiceException$, STSServiceException);
-    n0_registry3 = TypeRegistry.for(n03);
+    n0_registry3 = new TypeRegistry(n03);
     ExpiredTokenException$2 = [
       -3,
       n03,
@@ -42217,8 +42939,8 @@ var init_schemas_03 = __esm({
       n03,
       _ARR,
       0,
-      [_RA, _RSN, _PA, _P, _DS, _T, _TTK, _EI, _SN, _TC, _SI, _PC],
-      [0, 0, () => policyDescriptorListType, 0, 1, () => tagListType, 64 | 0, 0, 0, 0, 0, () => ProvidedContextsListType],
+      [_RA, _RSN, _PA, _P, _DS, _T, _TTK, _EI, _SN, _TC, _SI, _PC, _MSTS],
+      [0, 0, () => policyDescriptorListType, 0, 1, () => tagListType, 64 | 0, 0, 0, 0, 0, () => ProvidedContextsListType, 1],
       2
     ];
     AssumeRoleResponse$ = [
@@ -42226,16 +42948,16 @@ var init_schemas_03 = __esm({
       n03,
       _ARRs,
       0,
-      [_C, _ARU, _PPS, _SI],
-      [[() => Credentials$, 0], () => AssumedRoleUser$, 1, 0]
+      [_C, _ARU, _PPS, _SI, _STU, _STS],
+      [[() => Credentials$, 0], () => AssumedRoleUser$, 1, 0, 1, 1]
     ];
     AssumeRoleWithWebIdentityRequest$ = [
       3,
       n03,
       _ARWWIR,
       0,
-      [_RA, _RSN, _WIT, _PI, _PA, _P, _DS],
-      [0, 0, [() => clientTokenType, 0], 0, () => policyDescriptorListType, 0, 1],
+      [_RA, _RSN, _WIT, _PI, _PA, _P, _DS, _MSTS],
+      [0, 0, [() => clientTokenType, 0], 0, () => policyDescriptorListType, 0, 1, 1],
       3
     ];
     AssumeRoleWithWebIdentityResponse$ = [
@@ -42243,8 +42965,8 @@ var init_schemas_03 = __esm({
       n03,
       _ARWWIRs,
       0,
-      [_C, _SFWIT, _ARU, _PPS, _Pr, _Au, _SI],
-      [[() => Credentials$, 0], 0, () => AssumedRoleUser$, 1, 0, 0, 0]
+      [_C, _SFWIT, _ARU, _PPS, _Pr, _Au, _SI, _STU, _STS],
+      [[() => Credentials$, 0], 0, () => AssumedRoleUser$, 1, 0, 0, 0, 1, 1]
     ];
     Credentials$ = [
       3,
@@ -43284,10 +44006,10 @@ var init_schemas_04 = __esm({
     _tT2 = "tokenType";
     _tt = "token_type";
     n04 = "com.amazonaws.signin";
-    _s_registry4 = TypeRegistry.for(_s4);
+    _s_registry4 = new TypeRegistry(_s4);
     SigninServiceException$ = [-3, _s4, "SigninServiceException", 0, [], []];
     _s_registry4.registerError(SigninServiceException$, SigninServiceException);
-    n0_registry4 = TypeRegistry.for(n04);
+    n0_registry4 = new TypeRegistry(n04);
     AccessDeniedException$2 = [
       -3,
       n04,
@@ -43785,7 +44507,7 @@ var require_dist_cjs11 = __commonJS({
     var { createHash: createHash6, createPrivateKey, createPublicKey, sign: sign3 } = require("node:crypto");
     var { promises: promises2 } = require("node:fs");
     var { homedir: homedir3 } = require("node:os");
-    var { dirname: dirname3, join: join14 } = require("node:path");
+    var { dirname: dirname3, join: join15 } = require("node:path");
     var LoginCredentialsFetcher = class _LoginCredentialsFetcher {
       static {
         __name(this, "LoginCredentialsFetcher");
@@ -43952,10 +44674,10 @@ var require_dist_cjs11 = __commonJS({
         await promises2.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8");
       }
       getTokenFilePath() {
-        const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join14(homedir3(), ".aws", "login", "cache");
+        const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join15(homedir3(), ".aws", "login", "cache");
         const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
         const loginSessionSha256 = createHash6("sha256").update(loginSessionBytes).digest("hex");
-        return join14(directory, `${loginSessionSha256}.json`);
+        return join15(directory, `${loginSessionSha256}.json`);
       }
       derToRawSignature(derSignature) {
         let offset = 2;
@@ -44446,6 +45168,7 @@ var require_dist_cjs15 = __commonJS({
             if (!passiveLock) {
               passiveLock = chain3(options).then((c6) => {
                 credentials = c6;
+              }).catch(() => {
               }).finally(() => {
                 passiveLock = void 0;
               });
@@ -66143,10 +66866,10 @@ var init_schemas_05 = __esm({
     _s5 = "smithy.ts.sdk.synthetic.com.amazonaws.cognitoidentity";
     _se3 = "server";
     n05 = "com.amazonaws.cognitoidentity";
-    _s_registry5 = TypeRegistry.for(_s5);
+    _s_registry5 = new TypeRegistry(_s5);
     CognitoIdentityServiceException$ = [-3, _s5, "CognitoIdentityServiceException", 0, [], []];
     _s_registry5.registerError(CognitoIdentityServiceException$, CognitoIdentityServiceException);
-    n0_registry5 = TypeRegistry.for(n05);
+    n0_registry5 = new TypeRegistry(n05);
     ExternalServiceException$ = [
       -3,
       n05,
@@ -67932,7 +68655,7 @@ var __importStar = exports && exports.__importStar || /* @__PURE__ */ (function(
   };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-var fs12 = __importStar(require("fs"));
+var fs13 = __importStar(require("fs"));
 var cdk_assets_lib_1 = require_lib4();
 var docker_credentials_1 = (init_docker_credentials(), __toCommonJS(docker_credentials_exports));
 async function main() {
@@ -67943,9 +68666,9 @@ async function main() {
   if (!config) {
     throw new Error(`unable to find CDK Docker credentials at: ${(0, docker_credentials_1.cdkCredentialsConfigFile)()}`);
   }
-  let endpoint = fs12.readFileSync(0, { encoding: "utf-8" }).trim();
+  let endpoint = fs13.readFileSync(0, { encoding: "utf-8" }).trim();
   const credentials = await (0, docker_credentials_1.fetchDockerLoginCredentials)(new cdk_assets_lib_1.DefaultAwsClient(), config, endpoint);
-  fs12.writeFileSync(1, JSON.stringify(credentials));
+  fs13.writeFileSync(1, JSON.stringify(credentials));
 }
 __name(main, "main");
 main().catch((e6) => {