cdktn 0.23.2 → 0.23.4

package/lib/upgrade-id-aspect.js

@@ -161,5 +161,5 @@ Refer to the following page for more information: https://cdktn.io/docs/examples
 }
 exports.MigrateIds = MigrateIds;
 _a = JSII_RTTI_SYMBOL_1;
-MigrateIds[_a] = { fqn: "cdktn.MigrateIds", version: "0.23.2" };
+MigrateIds[_a] = { fqn: "cdktn.MigrateIds", version: "0.23.4" };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXBncmFkZS1pZC1hc3BlY3QuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvdXBncmFkZS1pZC1hc3BlY3QudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFBQSwrQkFBK0I7QUFDL0IsbUNBQW1DO0FBRW5DLHdCQU9XO0FBR1gsaUNBQWlDO0FBQ2pDLHFDQUErRDtBQUMvRCw2QkFBNkI7QUFFN0I7OztHQUdHO0FBRUg7Ozs7O0dBS0c7QUFDSCxNQUFNLG9CQUFvQixHQUFHLFVBQVUsQ0FBQztBQUV4Qzs7R0FFRztBQUNILE1BQU0sU0FBUyxHQUFHLFNBQVMsQ0FBQztBQUU1QixNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUM7QUFDckIsTUFBTSxVQUFVLEdBQUcsR0FBRyxDQUFDO0FBRXZCLE1BQU0sUUFBUSxHQUFHLENBQUMsQ0FBQztBQUNuQixNQUFNLGFBQWEsR0FBRyxHQUFHLENBQUMsQ0FBQyxvQkFBb0I7QUFDL0MsTUFBTSxVQUFVLEdBQUcsR0FBRyxDQUFDO0FBRXZCOzs7Ozs7OztHQVFHO0FBQ0gsU0FBUyxzQkFBc0IsQ0FBQyxVQUFvQixFQUFFLGFBQXNCO0lBQzFFLFVBQVUsR0FBRyxVQUFVLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEtBQUssU0FBUyxDQUFDLENBQUM7SUFFdkQsSUFBSSxVQUFVLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQzVCLE1BQU0sSUFBQSw0Q0FBbUMsR0FBRSxDQUFDO0lBQzlDLENBQUM7SUFFRCwyRUFBMkU7SUFDM0UsMkVBQTJFO0lBQzNFLGdDQUFnQztJQUNoQyxJQUFJLFVBQVUsQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7UUFDNUIscUVBQXFFO1FBQ3JFLHlFQUF5RTtRQUN6RSx3RUFBd0U7UUFDeEUscUVBQXFFO1FBQ3JFLDZDQUE2QztRQUM3QyxNQUFNLFNBQVMsR0FBRywwQkFBMEIsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLEVBQUUsYUFBYSxDQUFDLENBQUM7UUFFM0UsMEVBQTBFO1FBQzFFLG1CQUFtQjtRQUNuQixJQUFJLFNBQVMsQ0FBQyxNQUFNLElBQUksVUFBVSxFQUFFLENBQUM7WUFDbkMsT0FBTyxTQUFTLENBQUM7UUFDbkIsQ0FBQztJQUNILENBQUM7SUFFRCxNQUFNLElBQUksR0FBRyxRQUFRLENBQUMsVUFBVSxDQUFDLENBQUM7SUFDbEMsTUFBTSxLQUFLLEdBQUcsV0FBVyxDQUFDLFVBQVUsQ0FBQztTQUNsQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsS0FBSyxvQkFBb0IsQ0FBQztTQUN6QyxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLDBCQUEwQixDQUFDLENBQUMsRUFBRSxhQUFhLENBQUMsQ0FBQztTQUN4RCxJQUFJLENBQUMsVUFBVSxDQUFDO1NBQ2hCLEtBQUssQ0FBQyxDQUFDLEVBQUUsYUFBYSxDQUFDLENBQUM7SUFFM0IsT0FBTyxLQUFLLEdBQUcsVUFBVSxHQUFHLElBQUksQ0FBQztBQUNuQyxDQUFDO0FBRUQ7Ozs7R0FJRztBQUNILFNBQVMsUUFBUSxDQUFDLElBQWM7SUFDOUIsTUFBTSxHQUFHLEdBQUcsTUFBTTtTQUNmLFVBQVUsQ0FBQyxLQUFLLENBQUM7U0FDakIsTUFBTSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUM7U0FDM0IsTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDO0lBQ2pCLE9BQU8sR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsUUFBUSxDQUFDLENBQUMsV0FBVyxFQUFFLENBQUM7QUFDOUMsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsU0FBUywwQkFBMEIsQ0FBQyxDQUFTLEVBQUUsYUFBc0I7SUFDbkUsSUFBSSxhQUFhLEVBQUUsQ0FBQztRQUNsQixPQUFPLHdCQUF3QixDQUFDLENBQUMsQ0FBQyxDQUFDO0lBQ3JDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyxxQkFBcUIsQ0FBQyxDQUFDLENBQUMsQ0FBQztJQUNsQyxDQUFDO0FBQ0gsQ0FBQztBQUVEOztHQUVHO0FBQ0gsU0FBUyxxQkFBcUIsQ0FBQyxDQUFTO0lBQ3RDLE9BQU8sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxlQUFlLEVBQUUsRUFBRSxDQUFDLENBQUM7QUFDeEMsQ0FBQztBQUVEOzs7O0dBSUc7QUFDSCxTQUFTLHdCQUF3QixDQUFDLENBQVM7SUFDekMsT0FBTyxDQUFDLENBQUMsT0FBTyxDQUFDLGlCQUFpQixFQUFFLEVBQUUsQ0FBQyxDQUFDO0FBQzFDLENBQUM7QUFFRDs7Ozs7R0FLRztBQUNILFNBQVMsV0FBVyxDQUFDLElBQWM7SUFDakMsTUFBTSxHQUFHLEdBQUcsSUFBSSxLQUFLLEVBQVUsQ0FBQztJQUVoQyxLQUFLLE1BQU0sU0FBUyxJQUFJLElBQUksRUFBRSxDQUFDO1FBQzdCLElBQUksR0FBRyxDQUFDLE1BQU0sS0FBSyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsU0FBUyxDQUFDLEVBQUUsQ0FBQztZQUNqRSxHQUFHLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBQ3RCLENBQUM7SUFDSCxDQUFDO0lBRUQsT0FBTyxHQUFHLENBQUM7QUFDYixDQUFDO0FBRUQ7Ozs7R0FJRztBQUNILFNBQVMsMkJBQTJCLENBQ2xDLFNBQWtDO0lBRWxDLE1BQU0sSUFBSSxHQUFHLG1CQUFnQixDQUFDLGtCQUFrQixDQUFDLFNBQVMsQ0FBQztRQUN6RCxDQUFDLENBQUMsU0FBUyxDQUFDLElBQUk7UUFDaEIsQ0FBQyxDQUFDLFNBQVMsQ0FBQztJQUVkLHdEQUF3RDtJQUN4RCxNQUFNLFVBQVUsR0FBRyxDQUFDLENBQUM7SUFFckIsTUFBTSxVQUFVLEdBQUcsSUFBSSxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsVUFBVSxHQUFHLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQztJQUMzRSxPQUFPLFVBQVUsQ0FBQyxNQUFNLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxzQkFBc0IsQ0FBQyxVQUFVLEVBQUUsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztBQUNoRixDQUFDO0FBRUQ7O0dBRUc7QUFDSCxNQUFhLFVBQVU7SUFDckIsS0FBSyxDQUFDLElBQWdCO1FBQ3BCLHVEQUF1RDtRQUN2RCxJQUFJLElBQUksWUFBWSxvQkFBaUIsRUFBRSxDQUFDO1lBQ3RDLE1BQU0sS0FBSyxHQUFHLDJCQUEyQixDQUFDLElBQUksQ0FBQyxDQUFDO1lBQ2hELElBQUksQ0FBQyxVQUFVLENBQUMsR0FBRyxJQUFJLENBQUMscUJBQXFCLElBQUksS0FBSyxFQUFFLENBQUMsQ0FBQztRQUM1RCxDQUFDO1FBQ0QsdURBQXVEO1FBQ3ZELElBQUksSUFBSSxZQUFZLGtCQUFlLEVBQUUsQ0FBQztZQUNwQyxNQUFNLEtBQUssR0FBRywyQkFBMkIsQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUNoRCxNQUFNLFdBQVcsR0FBRyxNQUFHLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLFFBQVEsQ0FBQztZQUMxQyxNQUFNLGFBQWEsR0FBRyxXQUFXLENBQUMsUUFBUSxDQUFDLGlCQUFjLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7WUFDcEUsTUFBTSxXQUFXLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FDM0IsV0FBVyxDQUFDLE1BQU0sRUFDbEIsYUFBYSxDQUFDLGdCQUFnQixDQUMvQixDQUFDO1lBQ0YsY0FBVyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUM7aUJBQ2pCLFVBQVUsQ0FBQyw0QkFBNEIsSUFBSSxDQUFDLGdCQUFnQjt3RUFDRyxLQUFLLFdBQVcsSUFBSSxDQUFDLGdCQUFnQiw4QkFBOEIsV0FBVzttSUFDbkIsQ0FBQyxDQUFDO1FBQ2pJLENBQUM7SUFDSCxDQUFDOztBQXJCSCxnQ0FzQkMiLCJzb3VyY2VzQ29udGVudCI6WyIvLyBDb3B5cmlnaHQgKGMpIEhhc2hpQ29ycCwgSW5jXG4vLyBTUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogTVBMLTIuMFxuXG5pbXBvcnQge1xuICBBbm5vdGF0aW9ucyxcbiAgQXBwLFxuICBUZXJyYWZvcm1FbGVtZW50LFxuICBUZXJyYWZvcm1Nb2R1bGUsXG4gIFRlcnJhZm9ybVJlc291cmNlLFxuICBUZXJyYWZvcm1TdGFjayxcbn0gZnJvbSBcIi5cIjtcbmltcG9ydCB7IElBc3BlY3QgfSBmcm9tIFwiLi9hc3BlY3RcIjtcbmltcG9ydCB7IElDb25zdHJ1Y3QsIE5vZGUgfSBmcm9tIFwiY29uc3RydWN0c1wiO1xuaW1wb3J0ICogYXMgY3J5cHRvIGZyb20gXCJjcnlwdG9cIjtcbmltcG9ydCB7IGNhbm5vdENhbGNJZEZvckVtcHR5U2V0T2ZDb21wb25lbnRzIH0gZnJvbSBcIi4vZXJyb3JzXCI7XG5pbXBvcnQgKiBhcyBwYXRoIGZyb20gXCJwYXRoXCI7XG5cbi8qKlxuICogV2UgaGF2ZSB0byBjb3B5IHRoaXMgZnJvbSB0aGUgb2xkIENES1ROIHZlcnNpb24gZm9yIG5vdywgc28gdGhhdCB3ZSBjYW5cbiAqIGNhbGN1bGF0ZSB0aGUgb2xkIGxvZ2ljYWwgSURzIGZvciBub3cgYW5kIGZvciBsYXRlciBmb3IgdGhlIG1pZ3JhdGlvbi5cbiAqL1xuXG4vKipcbiAqIFJlc291cmNlcyB3aXRoIHRoaXMgSUQgYXJlIGhpZGRlbiBmcm9tIGh1bWFuc1xuICpcbiAqIFRoZXkgZG8gbm90IGFwcGVhciBpbiB0aGUgaHVtYW4tcmVhZGFibGUgcGFydCBvZiB0aGUgbG9naWNhbCBJRCxcbiAqIGJ1dCB0aGV5IGFyZSBpbmNsdWRlZCBpbiB0aGUgaGFzaCBjYWxjdWxhdGlvbi5cbiAqL1xuY29uc3QgSElEREVOX0ZST01fSFVNQU5fSUQgPSBcIlJlc291cmNlXCI7XG5cbi8qKlxuICogUmVzb3VyY2VzIHdpdGggdGhpcyBJRCBhcmUgY29tcGxldGUgaGlkZGVuIGZyb20gdGhlIGxvZ2ljYWwgSUQgY2FsY3VsYXRpb24uXG4gKi9cbmNvbnN0IEhJRERFTl9JRCA9IFwiRGVmYXVsdFwiO1xuXG5jb25zdCBQQVRIX1NFUCA9IFwiL1wiO1xuY29uc3QgVU5JUVVFX1NFUCA9IFwiX1wiO1xuXG5jb25zdCBIQVNIX0xFTiA9IDg7XG5jb25zdCBNQVhfSFVNQU5fTEVOID0gMjQwOyAvLyBtYXggSUQgbGVuIGlzIDI1NVxuY29uc3QgTUFYX0lEX0xFTiA9IDI1NTtcblxuLyoqXG4gKiBDYWxjdWxhdGVzIGEgdW5pcXVlIElEIGZvciBhIHNldCBvZiB0ZXh0dWFsIGNvbXBvbmVudHMuXG4gKlxuICogVGhpcyBpcyBkb25lIGJ5IGNhbGN1bGF0aW5nIGEgaGFzaCBvbiB0aGUgZnVsbCBwYXRoIGFuZCB1c2luZyBpdCBhcyBhIHN1ZmZpeFxuICogb2YgYSBsZW5ndGgtbGltaXRlZCBcImh1bWFuXCIgcmVuZGl0aW9uIG9mIHRoZSBwYXRoIGNvbXBvbmVudHMuXG4gKlxuICogQHBhcmFtIGNvbXBvbmVudHMgVGhlIHBhdGggY29tcG9uZW50c1xuICogQHJldHVybnMgYSB1bmlxdWUgYWxwaGEtbnVtZXJpYyBpZGVudGlmaWVyIHdpdGggYSBtYXhpbXVtIGxlbmd0aCBvZiAyNTVcbiAqL1xuZnVuY3Rpb24gbWFrZVVuaXF1ZUlkT2xkVmVyc2lvbihjb21wb25lbnRzOiBzdHJpbmdbXSwgYWxsb3dTZXBDaGFyczogYm9vbGVhbikge1xuICBjb21wb25lbnRzID0gY29tcG9uZW50cy5maWx0ZXIoKHgpID0+IHggIT09IEhJRERFTl9JRCk7XG5cbiAgaWYgKGNvbXBvbmVudHMubGVuZ3RoID09PSAwKSB7XG4gICAgdGhyb3cgY2Fubm90Q2FsY0lkRm9yRW1wdHlTZXRPZkNvbXBvbmVudHMoKTtcbiAgfVxuXG4gIC8vIHRvcC1sZXZlbCByZXNvdXJjZXMgd2lsbCBzaW1wbHkgdXNlIHRoZSBgbmFtZWAgYXMtaXMgaW4gb3JkZXIgdG8gc3VwcG9ydFxuICAvLyB0cmFuc3BhcmVudCBtaWdyYXRpb24gb2YgY2xvdWRmb3JtYXRpb24gdGVtcGxhdGVzIHRvIHRoZSBDREsgd2l0aG91dCB0aGVcbiAgLy8gbmVlZCB0byByZW5hbWUgYWxsIHJlc291cmNlcy5cbiAgaWYgKGNvbXBvbmVudHMubGVuZ3RoID09PSAxKSB7XG4gICAgLy8gd2UgZmlsdGVyIG91dCBub24tYWxwaGEgY2hhcmFjdGVycyBidXQgdGhhdCBpcyBhY3R1YWxseSBhIGJhZCBpZGVhXG4gICAgLy8gYmVjYXVzZSBpdCBjb3VsZCBjcmVhdGUgY29uZmxpY3RzIChcIkEtQlwiIGFuZCBcIkFCXCIgd2lsbCByZW5kZXIgdGhlIHNhbWVcbiAgICAvLyBsb2dpY2FsIElEKS4gc2FkbHksIGNoYW5naW5nIGl0IGluIHRoZSAxLnggdmVyc2lvbiBsaW5lIGlzIGltcG9zc2libGVcbiAgICAvLyBiZWNhdXNlIGl0IHdpbGwgYmUgYSBicmVha2luZyBjaGFuZ2UuIHdlIHNob3VsZCBjb25zaWRlciBmb3IgdjIuMC5cbiAgICAvLyBodHRwczovL2dpdGh1Yi5jb20vYXdzL2F3cy1jZGsvaXNzdWVzLzY0MjFcbiAgICBjb25zdCBjYW5kaWRhdGUgPSByZW1vdmVEaXNhbGxvd2VkQ2hhcmFjdGVycyhjb21wb25lbnRzWzBdLCBhbGxvd1NlcENoYXJzKTtcblxuICAgIC8vIGlmIG91ciBjYW5kaWRhdGUgaXMgc2hvcnQgZW5vdWdoLCB1c2UgaXQgYXMgaXMuIG90aGVyd2lzZSwgZmFsbCBiYWNrIHRvXG4gICAgLy8gdGhlIG5vcm1hbCBtb2RlLlxuICAgIGlmIChjYW5kaWRhdGUubGVuZ3RoIDw9IE1BWF9JRF9MRU4pIHtcbiAgICAgIHJldHVybiBjYW5kaWRhdGU7XG4gICAgfVxuICB9XG5cbiAgY29uc3QgaGFzaCA9IHBhdGhIYXNoKGNvbXBvbmVudHMpO1xuICBjb25zdCBodW1hbiA9IHJlbW92ZUR1cGVzKGNvbXBvbmVudHMpXG4gICAgLmZpbHRlcigoeCkgPT4geCAhPT0gSElEREVOX0ZST01fSFVNQU5fSUQpXG4gICAgLm1hcCgocykgPT4gcmVtb3ZlRGlzYWxsb3dlZENoYXJhY3RlcnMocywgYWxsb3dTZXBDaGFycykpXG4gICAgLmpvaW4oVU5JUVVFX1NFUClcbiAgICAuc2xpY2UoMCwgTUFYX0hVTUFOX0xFTik7XG5cbiAgcmV0dXJuIGh1bWFuICsgVU5JUVVFX1NFUCArIGhhc2g7XG59XG5cbi8qKlxuICogVGFrZSBhIGhhc2ggb2YgdGhlIGdpdmVuIHBhdGguXG4gKlxuICogVGhlIGhhc2ggaXMgbGltaXRlZCBpbiBzaXplLlxuICovXG5mdW5jdGlvbiBwYXRoSGFzaChwYXRoOiBzdHJpbmdbXSk6IHN0cmluZyB7XG4gIGNvbnN0IG1kNSA9IGNyeXB0b1xuICAgIC5jcmVhdGVIYXNoKFwibWQ1XCIpXG4gICAgLnVwZGF0ZShwYXRoLmpvaW4oUEFUSF9TRVApKVxuICAgIC5kaWdlc3QoXCJoZXhcIik7XG4gIHJldHVybiBtZDUuc2xpY2UoMCwgSEFTSF9MRU4pLnRvVXBwZXJDYXNlKCk7XG59XG5cbi8qKlxuICpcbiAqIEBwYXJhbSBzXG4gKiBAcGFyYW0gYWxsb3dTZXBDaGFyc1xuICogQHJldHVybnNcbiAqL1xuZnVuY3Rpb24gcmVtb3ZlRGlzYWxsb3dlZENoYXJhY3RlcnMoczogc3RyaW5nLCBhbGxvd1NlcENoYXJzOiBib29sZWFuKSB7XG4gIGlmIChhbGxvd1NlcENoYXJzKSB7XG4gICAgcmV0dXJuIHJlbW92ZU5vbkFscGhhbnVtZXJpY1NlcChzKTtcbiAgfSBlbHNlIHtcbiAgICByZXR1cm4gcmVtb3ZlTm9uQWxwaGFudW1lcmljKHMpO1xuICB9XG59XG5cbi8qKlxuICogUmVtb3ZlcyBhbGwgbm9uLWFscGhhbnVtZXJpYyBjaGFyYWN0ZXJzIGluIGEgc3RyaW5nLlxuICovXG5mdW5jdGlvbiByZW1vdmVOb25BbHBoYW51bWVyaWMoczogc3RyaW5nKSB7XG4gIHJldHVybiBzLnJlcGxhY2UoL1teQS1aYS16MC05XS9nLCBcIlwiKTtcbn1cblxuLyoqXG4gKlxuICogQHBhcmFtIHNcbiAqIEByZXR1cm5zXG4gKi9cbmZ1bmN0aW9uIHJlbW92ZU5vbkFscGhhbnVtZXJpY1NlcChzOiBzdHJpbmcpIHtcbiAgcmV0dXJuIHMucmVwbGFjZSgvW15BLVphLXowLTlfLV0vZywgXCJcIik7XG59XG5cbi8qKlxuICogUmVtb3ZlIGR1cGxpY2F0ZSBcInRlcm1zXCIgZnJvbSB0aGUgcGF0aCBsaXN0XG4gKlxuICogSWYgdGhlIHByZXZpb3VzIHBhdGggY29tcG9uZW50IG5hbWUgZW5kcyB3aXRoIHRoaXMgY29tcG9uZW50IG5hbWUsIHNraXAgdGhlXG4gKiBjdXJyZW50IGNvbXBvbmVudC5cbiAqL1xuZnVuY3Rpb24gcmVtb3ZlRHVwZXMocGF0aDogc3RyaW5nW10pOiBzdHJpbmdbXSB7XG4gIGNvbnN0IHJldCA9IG5ldyBBcnJheTxzdHJpbmc+KCk7XG5cbiAgZm9yIChjb25zdCBjb21wb25lbnQgb2YgcGF0aCkge1xuICAgIGlmIChyZXQubGVuZ3RoID09PSAwIHx8ICFyZXRbcmV0Lmxlbmd0aCAtIDFdLmVuZHNXaXRoKGNvbXBvbmVudCkpIHtcbiAgICAgIHJldC5wdXNoKGNvbXBvbmVudCk7XG4gICAgfVxuICB9XG5cbiAgcmV0dXJuIHJldDtcbn1cblxuLyoqXG4gKlxuICogQHBhcmFtIHRmRWxlbWVudFxuICogQHJldHVybnNcbiAqL1xuZnVuY3Rpb24gYWxsb2NhdGVMb2dpY2FsSWRPbGRWZXJzaW9uKFxuICB0ZkVsZW1lbnQ6IFRlcnJhZm9ybUVsZW1lbnQgfCBOb2RlLFxuKTogc3RyaW5nIHtcbiAgY29uc3Qgbm9kZSA9IFRlcnJhZm9ybUVsZW1lbnQuaXNUZXJyYWZvcm1FbGVtZW50KHRmRWxlbWVudClcbiAgICA/IHRmRWxlbWVudC5ub2RlXG4gICAgOiB0ZkVsZW1lbnQ7XG5cbiAgLy8gVGhpcyBpcyB0aGUgcHJldmlvdXMgYmVoYXZpb3IsIHdoaWNoIHdlIHdhbnQgZm9yIG5vdy5cbiAgY29uc3Qgc3RhY2tJbmRleCA9IDA7XG5cbiAgY29uc3QgY29tcG9uZW50cyA9IG5vZGUuc2NvcGVzLnNsaWNlKHN0YWNrSW5kZXggKyAxKS5tYXAoKGMpID0+IGMubm9kZS5pZCk7XG4gIHJldHVybiBjb21wb25lbnRzLmxlbmd0aCA+IDAgPyBtYWtlVW5pcXVlSWRPbGRWZXJzaW9uKGNvbXBvbmVudHMsIGZhbHNlKSA6IFwiXCI7XG59XG5cbi8qKlxuICogRm9yIG1pZ3JhdGluZyBwYXN0IDAuMTcgd2hlcmUgdGhlIGZlYXR1cmUgZmxhZyBmb3IgdGhlIG9sZCBpZCBnZW5lcmF0aW9uIGxvZ2ljIHdhcyByZW1vdmVkIGFmdGVyIGJlaW5nIGRlcHJlY2F0ZWQgc2luY2UgMC4xNVxuICovXG5leHBvcnQgY2xhc3MgTWlncmF0ZUlkcyBpbXBsZW1lbnRzIElBc3BlY3Qge1xuICB2aXNpdChub2RlOiBJQ29uc3RydWN0KSB7XG4gICAgLy8gZXNsaW50LWRpc2FibGUtbmV4dC1saW5lIG5vLWluc3RhbmNlb2Yvbm8taW5zdGFuY2VvZlxuICAgIGlmIChub2RlIGluc3RhbmNlb2YgVGVycmFmb3JtUmVzb3VyY2UpIHtcbiAgICAgIGNvbnN0IG9sZElkID0gYWxsb2NhdGVMb2dpY2FsSWRPbGRWZXJzaW9uKG5vZGUpO1xuICAgICAgbm9kZS5tb3ZlRnJvbUlkKGAke25vZGUudGVycmFmb3JtUmVzb3VyY2VUeXBlfS4ke29sZElkfWApO1xuICAgIH1cbiAgICAvLyBlc2xpbnQtZGlzYWJsZS1uZXh0LWxpbmUgbm8taW5zdGFuY2VvZi9uby1pbnN0YW5jZW9mXG4gICAgaWYgKG5vZGUgaW5zdGFuY2VvZiBUZXJyYWZvcm1Nb2R1bGUpIHtcbiAgICAgIGNvbnN0IG9sZElkID0gYWxsb2NhdGVMb2dpY2FsSWRPbGRWZXJzaW9uKG5vZGUpO1xuICAgICAgY29uc3QgYXBwTWFuaWZlc3QgPSBBcHAub2Yobm9kZSkubWFuaWZlc3Q7XG4gICAgICBjb25zdCBzdGFja01hbmlmZXN0ID0gYXBwTWFuaWZlc3QuZm9yU3RhY2soVGVycmFmb3JtU3RhY2sub2Yobm9kZSkpO1xuICAgICAgY29uc3Qgc3RhY2tPdXRkaXIgPSBwYXRoLmpvaW4oXG4gICAgICAgIGFwcE1hbmlmZXN0Lm91dGRpcixcbiAgICAgICAgc3RhY2tNYW5pZmVzdC53b3JraW5nRGlyZWN0b3J5LFxuICAgICAgKTtcbiAgICAgIEFubm90YXRpb25zLm9mKG5vZGUpXG4gICAgICAgIC5hZGRXYXJuaW5nKGBGb3VuZCBtb2R1bGUgd2l0aCBuZXcgaWQgJHtub2RlLmZyaWVuZGx5VW5pcXVlSWR9LiBNb3ZpbmcgdGhpcyBtb2R1bGUgcmVxdWlyZXMgYSBtYW51YWwgc3RhdGUgbWlncmF0aW9uLlxuSWYgdGhpcyBtb2R1bGUgaGFzIG5vdCBiZWVuIG1vdmVkIHlldCwgcnVuIFwidGVycmFmb3JtIHN0YXRlIG12IG1vZHVsZS4ke29sZElkfSBtb2R1bGUuJHtub2RlLmZyaWVuZGx5VW5pcXVlSWR9XCIgaW4gdGhlIG91dHB1dCBkaXJlY3RvcnkgXCIke3N0YWNrT3V0ZGlyfVwiIHRvIG1pZ3JhdGUgdGhlIGV4aXN0aW5nIHN0YXRlIHRvIGl0cyBuZXcgaWQuXG5SZWZlciB0byB0aGUgZm9sbG93aW5nIHBhZ2UgZm9yIG1vcmUgaW5mb3JtYXRpb246IGh0dHBzOi8vY2RrdG4uaW8vZG9jcy9leGFtcGxlcy1hbmQtZ3VpZGVzL3JlZmFjdG9yaW5nI21vdmluZy1vci1yZW5hbWluZy1tb2R1bGVzYCk7XG4gICAgfVxuICB9XG59XG4iXX0=

package/lib/validations/index.d.ts

@@ -1,2 +1,5 @@
+export * from "./target-versions";
 export * from "./validate-binary-version";
+export * from "./validate-function-version-support";
 export * from "./validate-provider-presence";
+export * from "./validate-terraform-feature-version";

package/lib/validations/index.js

@@ -16,6 +16,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 // Copyright (c) HashiCorp, Inc
 // SPDX-License-Identifier: MPL-2.0
+__exportStar(require("./target-versions"), exports);
 __exportStar(require("./validate-binary-version"), exports);
+__exportStar(require("./validate-function-version-support"), exports);
 __exportStar(require("./validate-provider-presence"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdmFsaWRhdGlvbnMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLCtCQUErQjtBQUMvQixtQ0FBbUM7QUFDbkMsNERBQTBDO0FBQzFDLCtEQUE2QyIsInNvdXJjZXNDb250ZW50IjpbIi8vIENvcHlyaWdodCAoYykgSGFzaGlDb3JwLCBJbmNcbi8vIFNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBNUEwtMi4wXG5leHBvcnQgKiBmcm9tIFwiLi92YWxpZGF0ZS1iaW5hcnktdmVyc2lvblwiO1xuZXhwb3J0ICogZnJvbSBcIi4vdmFsaWRhdGUtcHJvdmlkZXItcHJlc2VuY2VcIjtcbiJdfQ==
+__exportStar(require("./validate-terraform-feature-version"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validations/target-versions.d.ts

@@ -0,0 +1,71 @@
+import { IConstruct, IValidation } from "constructs";
+import { TerraformFeatureVersionConstraints } from "./validate-terraform-feature-version";
+/**
+ * Context key carrying the project's declared Terraform-compatible runtime
+ * targets (set from the `targetVersions` field in cdktf.json by the CLI, or
+ * directly via App context / CDKTF_CONTEXT_JSON for standalone synth).
+ *
+ * This is the canonical definition. `@cdktn/commons` imports it from here
+ * (commons depends on cdktn; cdktn must not depend on commons), so the CLI
+ * writes and the construct library reads the exact same key. It is an
+ * internal wiring detail, deliberately not part of cdktn's public API.
+ */
+export declare const TARGET_VERSIONS_CONTEXT_KEY = "targetVersions";
+/**
+ * The Terraform-compatible runtimes a project declares it supports, as npm
+ * semver ranges per product. A missing product means the project does not
+ * target that product.
+ */
+export interface TerraformTargetVersions {
+    readonly terraform?: string;
+    readonly opentofu?: string;
+}
+/**
+ * Used when a project declares no `targetVersions`: the project is assumed
+ * to target every supported release of both products, which is the strictest
+ * (most portable) interpretation.
+ */
+export declare const DEFAULT_TARGET_VERSIONS: TerraformTargetVersions;
+/**
+ * The product keys a project may declare targets for. Exported for reuse by
+ * `@cdktn/commons` (imported via subpath), not part of cdktn's public API.
+ */
+export declare const TARGET_PRODUCTS: readonly ["terraform", "opentofu"];
+/**
+ * Resolves the declared target versions from construct context, falling back
+ * to DEFAULT_TARGET_VERSIONS. Returns errors instead of targets when the
+ * declared value is malformed (which can happen when context is set directly
+ * on the App rather than going through cdktf.json validation).
+ */
+export declare function resolveTargetVersions(scope: IConstruct): {
+    targets?: TerraformTargetVersions;
+    errors: string[];
+};
+/**
+ * Checks whether a feature is supported across the entire declared target
+ * range of every targeted product.
+ *
+ * `supportedIn` follows the TerraformFeatureVersionConstraints semantics: a
+ * missing product key means the feature is not supported by that product at
+ * any version. The check is a semver range subset: declaring
+ * `terraform: ">=1.5.7"` while a feature requires `>=1.8.0` fails, because
+ * the project claims to support 1.5.7..1.8.0 where the feature is missing.
+ */
+export declare function checkFeatureSupportedByTargets(featureName: string, supportedIn: TerraformFeatureVersionConstraints, targets: TerraformTargetVersions, hint?: string): string[];
+/**
+ * Validates that a feature is supported by the project's declared
+ * Terraform-compatible runtime targets (cdktf.json `targetVersions`),
+ * without probing any locally installed binary.
+ *
+ * Verifying the actually installed binary is a separate, explicit step:
+ * the opt-in `validateInstalledBinary` config handled by the CLI commands
+ * that execute the binary.
+ */
+export declare class ValidateFeatureTargetSupport implements IValidation {
+    protected scope: IConstruct;
+    protected featureName: string;
+    protected supportedIn: TerraformFeatureVersionConstraints;
+    protected hint?: string | undefined;
+    constructor(scope: IConstruct, featureName: string, supportedIn: TerraformFeatureVersionConstraints, hint?: string | undefined);
+    validate(): string[];
+}

package/lib/validations/target-versions.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidateFeatureTargetSupport = exports.TARGET_PRODUCTS = exports.DEFAULT_TARGET_VERSIONS = exports.TARGET_VERSIONS_CONTEXT_KEY = void 0;
+exports.resolveTargetVersions = resolveTargetVersions;
+exports.checkFeatureSupportedByTargets = checkFeatureSupportedByTargets;
+const semver = require("semver");
+/**
+ * Context key carrying the project's declared Terraform-compatible runtime
+ * targets (set from the `targetVersions` field in cdktf.json by the CLI, or
+ * directly via App context / CDKTF_CONTEXT_JSON for standalone synth).
+ *
+ * This is the canonical definition. `@cdktn/commons` imports it from here
+ * (commons depends on cdktn; cdktn must not depend on commons), so the CLI
+ * writes and the construct library reads the exact same key. It is an
+ * internal wiring detail, deliberately not part of cdktn's public API.
+ */
+exports.TARGET_VERSIONS_CONTEXT_KEY = "targetVersions";
+/**
+ * Used when a project declares no `targetVersions`: the project is assumed
+ * to target every supported release of both products, which is the strictest
+ * (most portable) interpretation.
+ */
+exports.DEFAULT_TARGET_VERSIONS = {
+    terraform: ">=1.5.7",
+    opentofu: ">=1.6.0",
+};
+/**
+ * The product keys a project may declare targets for. Exported for reuse by
+ * `@cdktn/commons` (imported via subpath), not part of cdktn's public API.
+ */
+exports.TARGET_PRODUCTS = ["terraform", "opentofu"];
+/**
+ * Resolves the declared target versions from construct context, falling back
+ * to DEFAULT_TARGET_VERSIONS. Returns errors instead of targets when the
+ * declared value is malformed (which can happen when context is set directly
+ * on the App rather than going through cdktf.json validation).
+ */
+function resolveTargetVersions(scope) {
+    const declared = scope.node.tryGetContext(exports.TARGET_VERSIONS_CONTEXT_KEY);
+    if (declared === undefined) {
+        return { targets: exports.DEFAULT_TARGET_VERSIONS, errors: [] };
+    }
+    if (typeof declared !== "object" ||
+        declared === null ||
+        Array.isArray(declared)) {
+        return {
+            errors: [
+                `targetVersions context must be an object mapping products to semver ranges, e.g. { "terraform": ">=1.5.7" }`,
+            ],
+        };
+    }
+    const entries = Object.entries(declared);
+    if (entries.length === 0) {
+        return {
+            errors: [
+                `targetVersions must declare at least one product ("terraform" or "opentofu") or be omitted entirely`,
+            ],
+        };
+    }
+    const errors = [];
+    for (const [product, range] of entries) {
+        if (!exports.TARGET_PRODUCTS.includes(product)) {
+            errors.push(`targetVersions has unknown product "${product}" (expected "terraform" or "opentofu")`);
+        }
+        else if (typeof range === "string" && range.includes("~>")) {
+            // npm semver happens to parse "~>" as "~", which has different
+            // semantics than Terraform's "~>" pessimistic constraint — reject it
+            // instead of silently meaning something else
+            errors.push(`targetVersions.${product} "${range}" uses Terraform provider constraint syntax; use npm semver ranges instead (e.g. ">=1.5.7" or "~1.5.7")`);
+        }
+        else if (typeof range !== "string" || semver.validRange(range) === null) {
+            errors.push(`targetVersions.${product} ${JSON.stringify(range)} is not a valid semver range`);
+        }
+    }
+    if (errors.length > 0) {
+        return { errors };
+    }
+    return { targets: declared, errors: [] };
+}
+/**
+ * Checks whether a feature is supported across the entire declared target
+ * range of every targeted product.
+ *
+ * `supportedIn` follows the TerraformFeatureVersionConstraints semantics: a
+ * missing product key means the feature is not supported by that product at
+ * any version. The check is a semver range subset: declaring
+ * `terraform: ">=1.5.7"` while a feature requires `>=1.8.0` fails, because
+ * the project claims to support 1.5.7..1.8.0 where the feature is missing.
+ */
+function checkFeatureSupportedByTargets(featureName, supportedIn, targets, hint) {
+    const errors = [];
+    for (const product of exports.TARGET_PRODUCTS) {
+        const targetRange = targets[product];
+        if (!targetRange)
+            continue; // product not targeted by the project
+        const supportedRange = supportedIn[product];
+        if (!supportedRange) {
+            errors.push(`${featureName} is not supported by ${product}, but the project targets ${product} ${targetRange}. ${hint || ""}`.trimEnd());
+            continue;
+        }
+        if (!semver.subset(targetRange, supportedRange)) {
+            errors.push(`${featureName} requires ${product} ${supportedRange}, but the project targets ${product} ${targetRange}. ${hint || ""}`.trimEnd());
+        }
+    }
+    return errors;
+}
+/**
+ * Validates that a feature is supported by the project's declared
+ * Terraform-compatible runtime targets (cdktf.json `targetVersions`),
+ * without probing any locally installed binary.
+ *
+ * Verifying the actually installed binary is a separate, explicit step:
+ * the opt-in `validateInstalledBinary` config handled by the CLI commands
+ * that execute the binary.
+ */
+class ValidateFeatureTargetSupport {
+    constructor(scope, featureName, supportedIn, hint) {
+        this.scope = scope;
+        this.featureName = featureName;
+        this.supportedIn = supportedIn;
+        this.hint = hint;
+    }
+    validate() {
+        const { targets, errors } = resolveTargetVersions(this.scope);
+        if (!targets) {
+            return errors;
+        }
+        return checkFeatureSupportedByTargets(this.featureName, this.supportedIn, targets, this.hint);
+    }
+}
+exports.ValidateFeatureTargetSupport = ValidateFeatureTargetSupport;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validations/validate-binary-version.d.ts

@@ -2,6 +2,16 @@ import { IValidation } from "constructs";
 /**
  * A validation that can be applied to a construct that will error if the
  * construct is being used in an environment with a version of a binary lower than the specified version.
+ *
+ * TODO(target-versions): legacy synth-time binary probe that predates
+ * OpenTofu support and the declared `targetVersions` model. Existing
+ * consumers (e.g. ValidateTerraformVersion for resource moves) should
+ * migrate to ValidateFeatureTargetSupport, leaving installed-binary
+ * verification to the opt-in validateInstalledBinary CLI behavior. Left
+ * unchanged here only to keep this PR small; the migration is tracked in
+ * #275. Note this class is not exported from the cdktn package root, so the
+ * change is behavioral (synth no longer shelling out), not a symbol-level
+ * public-API break.
  */
 export declare class ValidateBinaryVersion implements IValidation {
     protected binary: string;

package/lib/validations/validate-binary-version.js

@@ -6,6 +6,16 @@ const semver = require("semver");
 /**
  * A validation that can be applied to a construct that will error if the
  * construct is being used in an environment with a version of a binary lower than the specified version.
+ *
+ * TODO(target-versions): legacy synth-time binary probe that predates
+ * OpenTofu support and the declared `targetVersions` model. Existing
+ * consumers (e.g. ValidateTerraformVersion for resource moves) should
+ * migrate to ValidateFeatureTargetSupport, leaving installed-binary
+ * verification to the opt-in validateInstalledBinary CLI behavior. Left
+ * unchanged here only to keep this PR small; the migration is tracked in
+ * #275. Note this class is not exported from the cdktn package root, so the
+ * change is behavioral (synth no longer shelling out), not a symbol-level
+ * public-API break.
  */
 class ValidateBinaryVersion {
     constructor(binary, versionConstraint, versionCommand, hint) {
@@ -41,4 +51,4 @@ class ValidateBinaryVersion {
     }
 }
 exports.ValidateBinaryVersion = ValidateBinaryVersion;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validations/validate-function-version-support.d.ts

@@ -0,0 +1,21 @@
+import { IConstruct, IValidation } from "constructs";
+/**
+ * Validates that every Terraform function used through `Fn` is supported by
+ * the project's declared Terraform/OpenTofu targets (cdktf.json
+ * `targetVersions`, defaulting to the dual product baseline).
+ *
+ * Most functions are universally available and are not checked at all; only
+ * functions listed in the generated availability map are validated. The
+ * check is purely declarative — no binary is executed — so synth behaves
+ * identically in CI, package builds, and environments without Terraform or
+ * OpenTofu installed. Verifying the actually installed binary is the
+ * separate, opt-in `validateInstalledBinary` CLI behavior.
+ *
+ * Functions used via raw escape hatches (overrides, hand-written expression
+ * strings) are not tracked and therefore not validated.
+ */
+export declare class ValidateFunctionVersionSupport implements IValidation {
+    protected scope: IConstruct;
+    constructor(scope: IConstruct);
+    validate(): string[];
+}

package/lib/validations/validate-function-version-support.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidateFunctionVersionSupport = void 0;
+const target_versions_1 = require("./target-versions");
+const function_availability_generated_1 = require("../functions/function-availability.generated");
+const usage_registry_1 = require("../functions/usage-registry");
+/**
+ * Validates that every Terraform function used through `Fn` is supported by
+ * the project's declared Terraform/OpenTofu targets (cdktf.json
+ * `targetVersions`, defaulting to the dual product baseline).
+ *
+ * Most functions are universally available and are not checked at all; only
+ * functions listed in the generated availability map are validated. The
+ * check is purely declarative — no binary is executed — so synth behaves
+ * identically in CI, package builds, and environments without Terraform or
+ * OpenTofu installed. Verifying the actually installed binary is the
+ * separate, opt-in `validateInstalledBinary` CLI behavior.
+ *
+ * Functions used via raw escape hatches (overrides, hand-written expression
+ * strings) are not tracked and therefore not validated.
+ */
+class ValidateFunctionVersionSupport {
+    constructor(scope) {
+        this.scope = scope;
+    }
+    validate() {
+        const constrainedFunctions = (0, usage_registry_1.getUsedFunctions)()
+            .filter((name) => name in function_availability_generated_1.functionVersionConstraints)
+            .sort();
+        // only universally available functions in use: nothing to validate
+        if (constrainedFunctions.length === 0) {
+            return [];
+        }
+        const { targets, errors } = (0, target_versions_1.resolveTargetVersions)(this.scope);
+        if (!targets) {
+            return errors;
+        }
+        return constrainedFunctions.flatMap((name) => {
+            const supportedIn = function_availability_generated_1.functionVersionConstraints[name];
+            return (0, target_versions_1.checkFeatureSupportedByTargets)(`Terraform function "${name}"`, supportedIn, targets, availabilityHint(supportedIn));
+        });
+    }
+}
+exports.ValidateFunctionVersionSupport = ValidateFunctionVersionSupport;
+/**
+ * Tells the user where the function IS available, so they can adjust their
+ * declared targetVersions (or drop the function).
+ */
+function availabilityHint(supportedIn) {
+    const parts = Object.entries(supportedIn).map(([product, range]) => `${product} ${range}`);
+    return `It is available in ${parts.join(" and ")}.`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/validations/validate-terraform-feature-version.d.ts

@@ -0,0 +1,34 @@
+export type TerraformCliName = "terraform" | "opentofu" | "unknown";
+export interface TerraformCliVersion {
+    readonly name: TerraformCliName;
+    readonly version?: string;
+}
+/**
+ * The versions at which Terraform and OpenTofu support a feature, as npm
+ * semver ranges. A missing product key means the feature is not supported by
+ * that product at any version.
+ *
+ * Features can become available in Terraform and OpenTofu at different
+ * versions, so the validation matrix is feature -> product -> semver range.
+ * Used together with the project's declared targets, see
+ * ValidateFeatureTargetSupport.
+ */
+export interface TerraformFeatureVersionConstraints {
+    readonly terraform?: string;
+    readonly opentofu?: string;
+}
+/**
+ * Parses the output of `terraform version` or `tofu version`.
+ *
+ * Plain text version output is used because both Terraform and OpenTofu expose
+ * a Terraform-compatible `terraform_version` key in `version -json` output.
+ *
+ * Note: synth-time validations check features against the project's declared
+ * `targetVersions` and do not execute any binary; this parser exists for
+ * consumers that explicitly interact with an installed CLI (e.g. the opt-in
+ * validateInstalledBinary behavior in the cdktn CLI). This is the canonical
+ * definition; `@cdktn/commons` imports it (commons depends on cdktn). Its
+ * return type uses a string-literal union, so it is kept out of cdktn's
+ * public (jsii) API and consumed via subpath import.
+ */
+export declare function parseTerraformCliVersion(versionOutput: string): TerraformCliVersion;

package/lib/validations/validate-terraform-feature-version.js

@@ -0,0 +1,34 @@
+"use strict";
+// Copyright (c) HashiCorp, Inc
+// SPDX-License-Identifier: MPL-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseTerraformCliVersion = parseTerraformCliVersion;
+/**
+ * Parses the output of `terraform version` or `tofu version`.
+ *
+ * Plain text version output is used because both Terraform and OpenTofu expose
+ * a Terraform-compatible `terraform_version` key in `version -json` output.
+ *
+ * Note: synth-time validations check features against the project's declared
+ * `targetVersions` and do not execute any binary; this parser exists for
+ * consumers that explicitly interact with an installed CLI (e.g. the opt-in
+ * validateInstalledBinary behavior in the cdktn CLI). This is the canonical
+ * definition; `@cdktn/commons` imports it (commons depends on cdktn). Its
+ * return type uses a string-literal union, so it is kept out of cdktn's
+ * public (jsii) API and consumed via subpath import.
+ */
+function parseTerraformCliVersion(versionOutput) {
+    const firstLine = versionOutput.trim().split(/\r?\n/)[0] || "";
+    const firstLineMatch = firstLine.match(/^(Terraform|OpenTofu) v(\d+\.\d+\.\d+(?:[-+][^\s]+)?)/);
+    if (firstLineMatch) {
+        return {
+            name: firstLineMatch[1] === "OpenTofu" ? "opentofu" : "terraform",
+            version: firstLineMatch[2],
+        };
+    }
+    return {
+        name: "unknown",
+        version: versionOutput.match(/\d+\.\d+\.\d+(?:[-+][^\s]+)?/)?.[0],
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/node_modules/{call-bind-apply-helpers → safe-stable-stringify}/LICENSE

@@ -1,6 +1,6 @@
-MIT License
+The MIT License (MIT)
 
-Copyright (c) 2024 Jordan Harband
+Copyright (c) Ruben Bridgewater
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/node_modules/safe-stable-stringify/esm/package.json

@@ -0,0 +1,4 @@
+{
+  "type": "module",
+  "main": "wrapper.js"
+}

package/node_modules/safe-stable-stringify/esm/wrapper.d.ts

@@ -0,0 +1,4 @@
+import { stringify } from '../index.js'
+
+export * from '../index.js'
+export default stringify

package/node_modules/safe-stable-stringify/esm/wrapper.js

@@ -0,0 +1,6 @@
+import cjsModule from '../index.js'
+
+export const configure = cjsModule.configure
+
+export const stringify = cjsModule
+export default cjsModule

package/node_modules/safe-stable-stringify/index.d.ts

@@ -0,0 +1,22 @@
+export type Replacer = (number | string)[] | null | undefined | ((key: string, value: unknown) => string | number | boolean | null | object)
+
+export function stringify(value: undefined | symbol | ((...args: unknown[]) => unknown), replacer?: Replacer, space?: string | number): undefined
+export function stringify(value: string | number | unknown[] | null | boolean | object, replacer?: Replacer, space?: string | number): string
+export function stringify(value: unknown, replacer?: ((key: string, value: unknown) => unknown) | (number | string)[] | null | undefined, space?: string | number): string | undefined
+
+export interface StringifyOptions {
+  bigint?: boolean,
+  circularValue?: string | null | TypeErrorConstructor | ErrorConstructor,
+  deterministic?: boolean | ((a: string, b: string) => number),
+  maximumBreadth?: number,
+  maximumDepth?: number,
+  strict?: boolean,
+}
+
+export namespace stringify {
+  export function configure(options: StringifyOptions): typeof stringify
+}
+
+export function configure(options: StringifyOptions): typeof stringify
+
+export default stringify