checkly 9.5.0 → 10.0.0-rc.1

package/dist/constructs/internal/declaring-file.d.ts

@@ -0,0 +1,39 @@
+import path from 'node:path';
+/** What the frame filter needs to know about a call site. */
+export interface Frame {
+    fileName?: string | null;
+    isConstructor: boolean;
+}
+export interface DeclaringFileOptions {
+    /** The directory holding the CLI's own code. */
+    ownRoot: string;
+    /**
+     * The number of classes from `Construct` down to the class being
+     * instantiated; each one contributes a constructor frame at the top of
+     * the stack.
+     */
+    constructorChainLength: number;
+    /**
+     * For tests only, so Windows frames can be exercised on other platforms.
+     */
+    platformPath?: path.PlatformPath;
+}
+/**
+ * Picks the declaring file out of a list of stack frames, innermost first.
+ * See the module description for the rules.
+ */
+export declare function declaringFileFromFrames(frames: Frame[], { ownRoot, constructorChainLength, platformPath }: DeclaringFileOptions): string | undefined;
+/**
+ * The user file that declares the construct whose constructor is running, or
+ * `undefined` when no user code is on the stack (the CLI or a test runner
+ * created the construct) or the runtime does not expose structured stack
+ * frames.
+ *
+ * `Error.prepareStackTrace` is replaced for the duration of a single
+ * synchronous `new Error()` so V8 hands over call sites instead of a
+ * formatted string, then restored; only file names and the constructor flag
+ * are read, which no source map changes.
+ *
+ * @param constructorChainLength see {@link DeclaringFileOptions}
+ */
+export declare function captureDeclaringFile(constructorChainLength: number): string | undefined;

package/dist/constructs/internal/declaring-file.js

@@ -0,0 +1,139 @@
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/**
+ * Finds the user file that declares a construct by looking at the call
+ * stack of the construct's constructor.
+ *
+ * The project parser loads check files one at a time, but a module a check
+ * file imports is evaluated once, during its first importer's load, and then
+ * served from the module cache. A construct declared in such a module (a
+ * shared alerts file, a group definition no check glob matches) therefore
+ * cannot be attributed by "the file being loaded right now": that would name
+ * whichever importer happened to load first. The call stack does not have
+ * this problem: the frame right below the constructor chain is the code that
+ * ran `new SomeCheck(...)`, wherever it lives.
+ *
+ * Frames are considered from the innermost outwards:
+ * - the constructor chain of the construct's own class hierarchy is skipped
+ *   (one frame per class from `Construct` down to the class being
+ *   instantiated, subclasses in the user's code included), so the file that
+ *   ran `new` counts rather than the file declaring a subclass;
+ * - frames without a file, `node:` internals and eval'd code are skipped;
+ * - frames inside the CLI's own code (`dist/` in the published package,
+ *   `src/` when run from source) are skipped, so the parser and helpers such
+ *   as a group's `testMatch` expansion never count either;
+ * - the first remaining frame is the answer, unless it sits under a
+ *   `node_modules` directory: then no user code created the construct (the
+ *   CLI created it itself and the next frame out is the command runner, or a
+ *   test runner did), and the caller falls back to the parser's current file.
+ *
+ * Both jiti (TypeScript check files) and Node's own ESM loader report the
+ * original file, as a plain path or a `file://` URL. A module the loader
+ * resolved itself is reported at its physical location (symlinks resolved);
+ * the file the loader was asked to load keeps the path it was given, which is
+ * why the project parser hands it physical paths.
+ *
+ * Accepted limitations: a construct created inside a helper function or a
+ * wrapper class in the user's code is attributed to the helper's file; a
+ * construct library installed under `node_modules` (rather than linked from
+ * workspace source) falls back to the parser's current file; and V8 emits a
+ * single frame for a run of two or more consecutive subclasses without an
+ * explicit constructor, so behind such a run one more frame is skipped than
+ * the chain has classes, which only matters when that frame is a wrapper
+ * class's constructor.
+ */
+/**
+ * The directory holding the CLI's own code: `dist/` in the published package,
+ * `src/` when running from source. Frames under it belong to the CLI, not to
+ * the user's project.
+ */
+const OWN_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+/**
+ * Frames to capture. The CLI's own constructor chain is at most five frames
+ * deep (`CheckGroupV1` creating a `BrowserCheck` for a `testMatch` entry);
+ * the rest is headroom for subclasses and helper functions in the user's
+ * code.
+ */
+const STACK_DEPTH = 32;
+const NODE_MODULES_SEGMENT = /[\\/]node_modules[\\/]/;
+function isInside(root, file, platformPath) {
+    const relative = platformPath.relative(root, file);
+    const escapes = relative === '..' || relative.startsWith(`..${platformPath.sep}`);
+    return !escapes && !platformPath.isAbsolute(relative);
+}
+/**
+ * Picks the declaring file out of a list of stack frames, innermost first.
+ * See the module description for the rules.
+ */
+export function declaringFileFromFrames(frames, { ownRoot, constructorChainLength, platformPath = path }) {
+    // The chain is skipped by count, not by looking for constructor frames:
+    // a wrapper class in the user's code that creates a construct in its own
+    // constructor is a helper, and its frame must count. The flag only guards
+    // against a chain shorter than expected.
+    let skipped = 0;
+    for (const { fileName, isConstructor } of frames) {
+        if (skipped < constructorChainLength && isConstructor) {
+            skipped++;
+            continue;
+        }
+        if (!fileName || fileName.startsWith('node:')) {
+            continue;
+        }
+        let file;
+        if (fileName.startsWith('file:')) {
+            try {
+                file = fileURLToPath(fileName, { windows: platformPath === path.win32 });
+            }
+            catch {
+                continue;
+            }
+        }
+        else if (platformPath.isAbsolute(fileName)) {
+            file = fileName;
+        }
+        else {
+            // `<anonymous>`, `eval at ...` and similar.
+            continue;
+        }
+        if (isInside(ownRoot, file, platformPath)) {
+            continue;
+        }
+        return NODE_MODULES_SEGMENT.test(file) ? undefined : file;
+    }
+    return undefined;
+}
+/**
+ * The user file that declares the construct whose constructor is running, or
+ * `undefined` when no user code is on the stack (the CLI or a test runner
+ * created the construct) or the runtime does not expose structured stack
+ * frames.
+ *
+ * `Error.prepareStackTrace` is replaced for the duration of a single
+ * synchronous `new Error()` so V8 hands over call sites instead of a
+ * formatted string, then restored; only file names and the constructor flag
+ * are read, which no source map changes.
+ *
+ * @param constructorChainLength see {@link DeclaringFileOptions}
+ */
+export function captureDeclaringFile(constructorChainLength) {
+    const { prepareStackTrace, stackTraceLimit } = Error;
+    let callSites;
+    try {
+        Error.prepareStackTrace = (_error, sites) => sites;
+        Error.stackTraceLimit = STACK_DEPTH;
+        callSites = new Error().stack;
+    }
+    finally {
+        Error.prepareStackTrace = prepareStackTrace;
+        Error.stackTraceLimit = stackTraceLimit;
+    }
+    if (!Array.isArray(callSites)) {
+        return undefined;
+    }
+    const frames = callSites.map(site => ({
+        fileName: site.getFileName(),
+        isConstructor: site.isConstructor(),
+    }));
+    return declaringFileFromFrames(frames, { ownRoot: OWN_ROOT, constructorChainLength });
+}
+//# sourceMappingURL=declaring-file.js.map

package/dist/constructs/internal/declaring-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaring-file.js","sourceRoot":"","sources":["../../../src/constructs/internal/declaring-file.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;GAIG;AACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAEvF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,EAAE,CAAA;AAEtB,MAAM,oBAAoB,GAAG,wBAAwB,CAAA;AAuBrD,SAAS,QAAQ,CAAE,IAAY,EAAE,IAAY,EAAE,YAA+B;IAC5E,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC,CAAA;IACjF,OAAO,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAe,EACf,EAAE,OAAO,EAAE,sBAAsB,EAAE,YAAY,GAAG,IAAI,EAAwB;IAE9E,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,yCAAyC;IACzC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,MAAM,EAAE,CAAC;QACjD,IAAI,OAAO,GAAG,sBAAsB,IAAI,aAAa,EAAE,CAAC;YACtD,OAAO,EAAE,CAAA;YACT,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,SAAQ;QACV,CAAC;QACD,IAAI,IAAY,CAAA;QAChB,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;QACH,CAAC;aAAM,IAAI,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,QAAQ,CAAA;QACjB,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,SAAQ;QACV,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAE,sBAA8B;IAClE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,KAAK,CAAA;IACpD,IAAI,SAAkB,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAA;QAClD,KAAK,CAAC,eAAe,GAAG,WAAW,CAAA;QACnC,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;QAC3C,KAAK,CAAC,eAAe,GAAG,eAAe,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAI,SAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;QAC5B,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;KACpC,CAAC,CAAC,CAAA;IACH,OAAO,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAA;AACvF,CAAC"}

package/dist/constructs/internal/retry-strategy-defaults.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The values `RetryStrategyBuilder` fills in for an option left unset. They
+ * live apart from the builder so the retry strategy codegen can compare a
+ * stored strategy against them (an option equal to its default is left out
+ * of generated code, since the builder puts it back) without exporting
+ * anything new from the constructs' public surface.
+ */
+export declare const RETRY_STRATEGY_DEFAULTS: {
+    readonly baseBackoffSeconds: 60;
+    readonly maxRetries: 2;
+    readonly maxDurationSeconds: number;
+    readonly sameRegion: true;
+};

package/dist/constructs/internal/retry-strategy-defaults.js

@@ -0,0 +1,14 @@
+/**
+ * The values `RetryStrategyBuilder` fills in for an option left unset. They
+ * live apart from the builder so the retry strategy codegen can compare a
+ * stored strategy against them (an option equal to its default is left out
+ * of generated code, since the builder puts it back) without exporting
+ * anything new from the constructs' public surface.
+ */
+export const RETRY_STRATEGY_DEFAULTS = {
+    baseBackoffSeconds: 60,
+    maxRetries: 2,
+    maxDurationSeconds: 60 * 10,
+    sameRegion: true,
+};
+//# sourceMappingURL=retry-strategy-defaults.js.map

package/dist/constructs/internal/retry-strategy-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-strategy-defaults.js","sourceRoot":"","sources":["../../../src/constructs/internal/retry-strategy-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,kBAAkB,EAAE,EAAE;IACtB,UAAU,EAAE,CAAC;IACb,kBAAkB,EAAE,EAAE,GAAG,EAAE;IAC3B,UAAU,EAAE,IAAI;CACR,CAAA"}

package/dist/constructs/key-value-pair-codegen.d.ts

@@ -1,4 +1,9 @@
 import { GeneratedFile, Program, Value } from '../sourcegen/index.js';
 import { Context } from './internal/codegen/index.js';
 import KeyValuePair from './key-value-pair.js';
-export declare function valueForKeyValuePair(program: Program, genfile: GeneratedFile, context: Context, kv: KeyValuePair): Value;
+/**
+ * @param path The dotted path of the list the pair belongs to
+ * (`environmentVariables`, `request.headers`), under which the code being
+ * rendered may spell out this pair's flags as `<path>[<key>].locked`.
+ */
+export declare function valueForKeyValuePair(program: Program, genfile: GeneratedFile, context: Context, kv: KeyValuePair, path: string): Value;

package/dist/constructs/key-value-pair-codegen.js

@@ -1,14 +1,35 @@
 import { decl, expr, ident, object } from '../sourcegen/index.js';
-export function valueForKeyValuePair(program, genfile, context, kv) {
+import { MASKED_VALUE } from './internal/codegen/index.js';
+/**
+ * @param path The dotted path of the list the pair belongs to
+ * (`environmentVariables`, `request.headers`), under which the code being
+ * rendered may spell out this pair's flags as `<path>[<key>].locked`.
+ */
+export function valueForKeyValuePair(program, genfile, context, kv, path) {
+    const spelledOut = (flag) => context.spelledOut(`${path}[${kv.key}].${flag}`);
     return object(builder => {
         builder.string('key', kv.key);
         if (kv.secret !== true) {
             builder.string('value', kv.value);
         }
-        if (kv.locked === true) {
+        else if (context.maskedValues !== undefined) {
+            // A preview prints a secret only as a value it masked itself; anything
+            // else, whatever it looks like, prints as the plain mask.
+            const value = kv.value;
+            builder.string('value', context.isMasked(value) ? value : MASKED_VALUE);
+        }
+        // Both flags default to false; a flag the code spells out is kept
+        // whatever its value. A pair without a value for it writes nothing.
+        if (kv.locked === true || (kv.locked === false && spelledOut('locked'))) {
             builder.boolean('locked', kv.locked);
         }
-        if (kv.secret === true) {
+        if (kv.secret === true && context.maskedValues !== undefined) {
+            builder.boolean('secret', true);
+        }
+        else if (kv.secret === false && spelledOut('secret')) {
+            builder.boolean('secret', false);
+        }
+        else if (kv.secret === true) {
             const secretVariable = ident(kv.key, {
                 format: 'SCREAMING_SNAKE_CASE',
             });

package/dist/constructs/key-value-pair-codegen.js.map

@@ -1 +1 @@
-{"version":3,"file":"key-value-pair-codegen.js","sourceRoot":"","sources":["../../src/constructs/key-value-pair-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAiB,KAAK,EAAE,MAAM,EAAkB,MAAM,uBAAuB,CAAA;AAIhG,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,OAAsB,EACtB,OAAgB,EAChB,EAAgB;IAEhB,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC;QAED,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA;QACtC,CAAC;QAED,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;gBACnC,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAA;YAEF,IAAI,OAAO,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAA;gBAE3D,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;gBAEjD,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE;oBACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE;wBAC/C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;4BACrB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;wBACtC,CAAC,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAC,CAAA;oBAEH,OAAO,CAAC,MAAM,EAAE,CAAA;gBAClB,CAAC,CAAC,CAAC,CAAA;YACL,CAAC;YAED,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE;gBACnD,cAAc,EAAE,IAAI;aACrB,CAAC,CAAA;YAEF,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAEtC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"key-value-pair-codegen.js","sourceRoot":"","sources":["../../src/constructs/key-value-pair-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAiB,KAAK,EAAE,MAAM,EAAkB,MAAM,uBAAuB,CAAA;AAChG,OAAO,EAAW,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAGnE;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,OAAsB,EACtB,OAAgB,EAChB,EAAgB,EAChB,IAAY;IAEZ,MAAM,UAAU,GAAG,CAAC,IAAyB,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAA;IAClG,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC9C,uEAAuE;YACvE,0DAA0D;YAC1D,MAAM,KAAK,GAAY,EAAE,CAAC,KAAK,CAAA;YAC/B,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;QACnF,CAAC;QAED,kEAAkE;QAClE,oEAAoE;QACpE,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA;QACtC,CAAC;QAED,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;gBACnC,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAA;YAEF,IAAI,OAAO,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAA;gBAE3D,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;gBAEjD,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE;oBACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE;wBAC/C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;4BACrB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;wBACtC,CAAC,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAC,CAAA;oBAEH,OAAO,CAAC,MAAM,EAAE,CAAA;gBAClB,CAAC,CAAC,CAAC,CAAA;YACL,CAAC;YAED,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE;gBACnD,cAAc,EAAE,IAAI;aACrB,CAAC,CAAA;YAEF,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAEtC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/constructs/maintenance-window-codegen.d.ts

@@ -1,4 +1,7 @@
 import { Codegen, Context } from './internal/codegen/index.js';
+import { Value } from '../sourcegen/index.js';
+/** The expression for a timestamp the API reports as an ISO string: `new Date('<iso>')`. */
+export declare function valueForDate(iso: string): Value;
 export interface MaintenanceWindowResource {
     name: string;
     tags: Array<string>;
@@ -7,6 +10,10 @@ export interface MaintenanceWindowResource {
     repeatInterval?: number | null;
     repeatUnit?: string;
     repeatEndsAt?: string;
+    timezone?: string | null;
+    pauseAllChecks?: boolean;
+    silenceAlertsTags?: Array<string>;
+    silenceAllAlerts?: boolean;
 }
 export declare class MaintenanceWindowCodegen extends Codegen<MaintenanceWindowResource> {
     describe(resource: MaintenanceWindowResource): string;

package/dist/constructs/maintenance-window-codegen.js

@@ -1,5 +1,13 @@
 import { Codegen } from './internal/codegen/index.js';
 import { expr, ident } from '../sourcegen/index.js';
+/** The expression for a timestamp the API reports as an ISO string: `new Date('<iso>')`. */
+export function valueForDate(iso) {
+    return expr(ident('Date'), builder => {
+        builder.new(builder => {
+            builder.string(iso);
+        });
+    });
+}
 const construct = 'MaintenanceWindow';
 export class MaintenanceWindowCodegen extends Codegen {
     describe(resource) {
@@ -16,21 +24,15 @@ export class MaintenanceWindowCodegen extends Codegen {
                 builder.string(logicalId);
                 builder.object(builder => {
                     builder.string('name', resource.name);
-                    builder.array('tags', builder => {
-                        for (const tag of resource.tags) {
-                            builder.string(tag);
-                        }
-                    });
-                    builder.expr('startsAt', ident('Date'), builder => {
-                        builder.new(builder => {
-                            builder.string(resource.startsAt);
+                    if (resource.tags?.length) {
+                        builder.array('tags', builder => {
+                            for (const tag of resource.tags) {
+                                builder.string(tag);
+                            }
                         });
-                    });
-                    builder.expr('endsAt', ident('Date'), builder => {
-                        builder.new(builder => {
-                            builder.string(resource.endsAt);
-                        });
-                    });
+                    }
+                    builder.value('startsAt', valueForDate(resource.startsAt));
+                    builder.value('endsAt', valueForDate(resource.endsAt));
                     if (resource.repeatInterval !== undefined && resource.repeatInterval !== null) {
                         builder.number('repeatInterval', resource.repeatInterval);
                     }
@@ -38,13 +40,28 @@ export class MaintenanceWindowCodegen extends Codegen {
                         builder.string('repeatUnit', resource.repeatUnit);
                     }
                     if (resource.repeatEndsAt) {
-                        const repeatEndsAt = resource.repeatEndsAt;
-                        builder.expr('repeatEndsAt', ident('Date'), builder => {
-                            builder.new(builder => {
-                                builder.string(repeatEndsAt);
-                            });
+                        builder.value('repeatEndsAt', valueForDate(resource.repeatEndsAt));
+                    }
+                    // UTC is what an omitted timezone means, so it is left out like the other defaults.
+                    if (resource.timezone && resource.timezone !== 'UTC') {
+                        builder.string('timezone', resource.timezone);
+                    }
+                    // The default value for pauseAllChecks is false, only include if true.
+                    if (resource.pauseAllChecks !== undefined && resource.pauseAllChecks) {
+                        builder.boolean('pauseAllChecks', resource.pauseAllChecks);
+                    }
+                    if (resource.silenceAlertsTags?.length) {
+                        const silenceAlertsTags = resource.silenceAlertsTags;
+                        builder.array('silenceAlertsTags', builder => {
+                            for (const tag of silenceAlertsTags) {
+                                builder.string(tag);
+                            }
                         });
                     }
+                    // The default value for silenceAllAlerts is false, only include if true.
+                    if (resource.silenceAllAlerts !== undefined && resource.silenceAllAlerts) {
+                        builder.boolean('silenceAllAlerts', resource.silenceAllAlerts);
+                    }
                 });
             });
         }));

package/dist/constructs/maintenance-window-codegen.js.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance-window-codegen.js","sourceRoot":"","sources":["../../src/constructs/maintenance-window-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAYnD,MAAM,SAAS,GAAG,mBAAmB,CAAA;AAErC,MAAM,OAAO,wBAAyB,SAAQ,OAAkC;IAC9E,QAAQ,CAAE,QAAmC;QAC3C,OAAO,uBAAuB,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC/C,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAAmC,EAAE,OAAgB;QAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,+BAA+B,EAAE,QAAQ,CAAC,IAAI,EAAE;YAChF,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;oBAErC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;wBAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;4BAChC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;wBACrB,CAAC;oBACH,CAAC,CAAC,CAAA;oBAEF,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;wBAChD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;4BACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;wBACnC,CAAC,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAA;oBAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;wBAC9C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;4BACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;wBACjC,CAAC,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAA;oBAEF,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;wBAC9E,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;oBAC3D,CAAC;oBAED,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;wBACxB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;oBACnD,CAAC;oBAED,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;wBAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;wBAC1C,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;4BACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gCACpB,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;4BAC9B,CAAC,CAAC,CAAA;wBACJ,CAAC,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}
+{"version":3,"file":"maintenance-window-codegen.js","sourceRoot":"","sources":["../../src/constructs/maintenance-window-codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAS,MAAM,uBAAuB,CAAA;AAE1D,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAE,GAAW;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAgBD,MAAM,SAAS,GAAG,mBAAmB,CAAA;AAErC,MAAM,OAAO,wBAAyB,SAAQ,OAAkC;IAC9E,QAAQ,CAAE,QAAmC;QAC3C,OAAO,uBAAuB,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC/C,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAAmC,EAAE,OAAgB;QAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,+BAA+B,EAAE,QAAQ,CAAC,IAAI,EAAE;YAChF,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;oBAErC,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;wBAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;4BAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gCAChC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;4BACrB,CAAC;wBACH,CAAC,CAAC,CAAA;oBACJ,CAAC;oBAED,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;oBAC1D,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;oBAEtD,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;wBAC9E,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;oBAC3D,CAAC;oBAED,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;wBACxB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;oBACnD,CAAC;oBAED,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;wBAC1B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;oBACpE,CAAC;oBAED,oFAAoF;oBACpF,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBACrD,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;oBAC/C,CAAC;oBAED,uEAAuE;oBACvE,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;wBACrE,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;oBAC5D,CAAC;oBAED,IAAI,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;wBACvC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAA;wBACpD,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE;4BAC3C,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;gCACpC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;4BACrB,CAAC;wBACH,CAAC,CAAC,CAAA;oBACJ,CAAC;oBAED,yEAAyE;oBACzE,IAAI,QAAQ,CAAC,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;wBACzE,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAChE,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/constructs/maintenance-window.d.ts

@@ -1,4 +1,6 @@
 import { Construct } from './construct.js';
+import { Diagnostics } from './diagnostics.js';
+import { TimeZone } from './time-zone.js';
 export type MaintenanceWindowRepeatUnit = 'DAY' | 'WEEK' | 'MONTH';
 export interface MaintenanceWindowProps {
     /**
@@ -6,9 +8,10 @@ export interface MaintenanceWindowProps {
      */
     name: string;
     /**
-     * A list of one or more tags that filter which checks are affected by the maintenance window.
+     * Tags that select which checks are paused during the maintenance window.
+     * A window must set at least one of `tags`, `pauseAllChecks`, `silenceAlertsTags` or `silenceAllAlerts`.
      */
-    tags: Array<string>;
+    tags?: Array<string>;
     /**
      * The start date and time of the maintenance window in ISO 8601 format, "YYYY-MM-DDTHH:mm:ss.sssZ" as returned by
      * `new Date()`
@@ -31,6 +34,30 @@ export interface MaintenanceWindowProps {
      * The end date and time when the maintenance window should stop repeating.
      */
     repeatEndsAt?: Date;
+    /**
+     * The named IANA time zone used to schedule recurring occurrences, e.g. `'America/New_York'`.
+     * Occurrences keep the same local time across daylight-saving changes.
+     *
+     * `startsAt` and `endsAt` remain absolute instants; the time zone does not reinterpret them.
+     * UTC offsets such as `'+05:00'` or `'Etc/GMT+5'` are not accepted. When omitted, the window is
+     * scheduled in UTC, and removing a previously set time zone resets the window to UTC on the next
+     * deploy. The time zone cannot be changed while a maintenance is active.
+     */
+    timezone?: TimeZone;
+    /**
+     * When true, checks are paused for every check in the account, regardless of `tags`.
+     */
+    pauseAllChecks?: boolean;
+    /**
+     * A list of tags that filter which checks have their alerts silenced. Ignored when
+     * `silenceAllAlerts` is true.
+     */
+    silenceAlertsTags?: Array<string>;
+    /**
+     * When true, alerts are silenced for every check in the account, overriding
+     * `silenceAlertsTags`.
+     */
+    silenceAllAlerts?: boolean;
 }
 /**
  * Creates a Maintenance Window
@@ -41,12 +68,16 @@ export interface MaintenanceWindowProps {
  */
 export declare class MaintenanceWindow extends Construct {
     name: string;
-    tags: Array<string>;
+    tags?: Array<string>;
     startsAt: Date;
     endsAt: Date;
     repeatInterval?: number;
     repeatUnit?: MaintenanceWindowRepeatUnit;
     repeatEndsAt?: Date;
+    timezone?: TimeZone;
+    pauseAllChecks?: boolean;
+    silenceAlertsTags?: Array<string>;
+    silenceAllAlerts?: boolean;
     static readonly __checklyType = "maintenance-window";
     /**
      * Constructs the Maintenance Window instance
@@ -58,5 +89,6 @@ export declare class MaintenanceWindow extends Construct {
      */
     constructor(logicalId: string, props: MaintenanceWindowProps);
     describe(): string;
+    validate(diagnostics: Diagnostics): Promise<void>;
     synthesize(): any | null;
 }

package/dist/constructs/maintenance-window.js

@@ -1,5 +1,8 @@
 import { Construct } from './construct.js';
+import { InvalidPropertyValueDiagnostic } from './construct-diagnostics.js';
+import { WarningDiagnostic } from './diagnostics.js';
 import { Session } from './session.js';
+import { isValidTimeZone } from './time-zone.js';
 /**
  * Creates a Maintenance Window
  *
@@ -15,6 +18,10 @@ export class MaintenanceWindow extends Construct {
     repeatInterval;
     repeatUnit;
     repeatEndsAt;
+    timezone;
+    pauseAllChecks;
+    silenceAlertsTags;
+    silenceAllAlerts;
     static __checklyType = 'maintenance-window';
     /**
      * Constructs the Maintenance Window instance
@@ -33,11 +40,32 @@ export class MaintenanceWindow extends Construct {
         this.repeatInterval = props.repeatInterval;
         this.repeatUnit = props.repeatUnit;
         this.repeatEndsAt = props.repeatEndsAt;
+        this.timezone = props.timezone;
+        this.pauseAllChecks = props.pauseAllChecks;
+        this.silenceAlertsTags = props.silenceAlertsTags;
+        this.silenceAllAlerts = props.silenceAllAlerts;
         Session.registerConstruct(this);
     }
     describe() {
         return `MaintenanceWindow:${this.logicalId}`;
     }
+    async validate(diagnostics) {
+        await super.validate(diagnostics);
+        if (this.timezone !== undefined && !isValidTimeZone(this.timezone)) {
+            diagnostics.add(new InvalidPropertyValueDiagnostic('timezone', new Error(`"timezone" must be a named IANA time zone such as "America/New_York", got "${this.timezone}".`
+                + ` UTC offsets such as "+05:00" or "Etc/GMT+5" are not supported.`)));
+        }
+        const pausesChecks = this.pauseAllChecks || !!this.tags?.length;
+        const silencesAlerts = this.silenceAllAlerts || !!this.silenceAlertsTags?.length;
+        if (!pausesChecks && !silencesAlerts) {
+            diagnostics.add(new WarningDiagnostic({
+                title: 'Maintenance window affects no checks',
+                message: `Maintenance window "${this.logicalId}" neither pauses checks nor silences alerts. `
+                    + `Set "tags" or "pauseAllChecks" to pause checks, or "silenceAlertsTags" or "silenceAllAlerts" `
+                    + `to silence alerts.`,
+            }));
+        }
+    }
     synthesize() {
         return {
             name: this.name,
@@ -46,7 +74,13 @@ export class MaintenanceWindow extends Construct {
             endsAt: this.endsAt,
             repeatInterval: this.repeatInterval,
             repeatUnit: this.repeatUnit,
-            repeatEndsAt: this.repeatEndsAt,
+            // An omitted end date keeps the stored one on update, so null is sent to clear it.
+            repeatEndsAt: this.repeatEndsAt ?? null,
+            // An omitted timezone keeps the stored value on update, so null is sent to reset it to UTC.
+            timezone: this.timezone ?? null,
+            pauseAllChecks: this.pauseAllChecks,
+            silenceAlertsTags: this.silenceAlertsTags,
+            silenceAllAlerts: this.silenceAllAlerts,
         };
     }
 }

package/dist/constructs/maintenance-window.js.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance-window.js","sourceRoot":"","sources":["../../src/constructs/maintenance-window.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAqCtC;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,IAAI,CAAQ;IACZ,IAAI,CAAe;IACnB,QAAQ,CAAM;IACd,MAAM,CAAM;IACZ,cAAc,CAAS;IACvB,UAAU,CAA8B;IACxC,YAAY,CAAO;IAEnB,MAAM,CAAU,aAAa,GAAG,oBAAoB,CAAA;IAEpD;;;;;;;OAOG;IACH,YAAa,SAAiB,EAAE,KAA6B;QAC3D,KAAK,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;QAClC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QACtC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAA;IAC9C,CAAC;IAED,UAAU;QACR,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAA;IACH,CAAC"}
+{"version":3,"file":"maintenance-window.js","sourceRoot":"","sources":["../../src/constructs/maintenance-window.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAA;AAC3E,OAAO,EAAe,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,eAAe,EAAY,MAAM,gBAAgB,CAAA;AA8D1D;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,IAAI,CAAQ;IACZ,IAAI,CAAgB;IACpB,QAAQ,CAAM;IACd,MAAM,CAAM;IACZ,cAAc,CAAS;IACvB,UAAU,CAA8B;IACxC,YAAY,CAAO;IACnB,QAAQ,CAAW;IACnB,cAAc,CAAU;IACxB,iBAAiB,CAAgB;IACjC,gBAAgB,CAAU;IAE1B,MAAM,CAAU,aAAa,GAAG,oBAAoB,CAAA;IAEpD;;;;;;;OAOG;IACH,YAAa,SAAiB,EAAE,KAA6B;QAC3D,KAAK,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;QAClC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QACtC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAA;QAChD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAA;QAC9C,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,qBAAqB,IAAI,CAAC,SAAS,EAAE,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAAwB;QACtC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEjC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,WAAW,CAAC,GAAG,CAAC,IAAI,8BAA8B,CAChD,UAAU,EACV,IAAI,KAAK,CACP,8EAA8E,IAAI,CAAC,QAAQ,IAAI;kBAC7F,iEAAiE,CACpE,CACF,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAA;QAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAA;QAChF,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,WAAW,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC;gBACpC,KAAK,EAAE,sCAAsC;gBAC7C,OAAO,EACL,uBAAuB,IAAI,CAAC,SAAS,+CAA+C;sBAClF,+FAA+F;sBAC/F,oBAAoB;aACzB,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,mFAAmF;YACnF,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACvC,4FAA4F;YAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAA;IACH,CAAC"}

package/dist/constructs/monitor.d.ts

@@ -14,7 +14,7 @@ import { Diagnostics } from './diagnostics.js';
  * Retry strategies supported by monitors.
  */
 export type MonitorRetryStrategy = LinearRetryStrategy | ExponentialRetryStrategy | FixedRetryStrategy | SingleRetryRetryStrategy | NoRetriesRetryStrategy;
-export interface MonitorProps extends Omit<CheckProps, 'doubleCheck'> {
+export interface MonitorProps extends CheckProps {
     /**
      *  The name of the monitor.
      */

package/dist/constructs/msteams-alert-channel-codegen.d.ts

@@ -6,7 +6,7 @@ export interface MSTeamsAlertChannelResource extends WebhookAlertChannelResource
     };
 }
 export declare class MSTeamsAlertChannelCodegen extends Codegen<MSTeamsAlertChannelResource> {
-    validateSafety(resource: MSTeamsAlertChannelResource): void;
+    validateSafety(resource: MSTeamsAlertChannelResource, context?: Context): void;
     describe(resource: MSTeamsAlertChannelResource): string;
     prepare(logicalId: string, resource: MSTeamsAlertChannelResource, context: Context): void;
     gencode(logicalId: string, resource: MSTeamsAlertChannelResource, context: Context): void;

package/dist/constructs/msteams-alert-channel-codegen.js

@@ -4,7 +4,7 @@ import { buildAlertChannelProps } from './alert-channel-codegen.js';
 import { MSTeamsAlertChannel } from './msteams-alert-channel.js';
 const construct = 'MSTeamsAlertChannel';
 export class MSTeamsAlertChannelCodegen extends Codegen {
-    validateSafety(resource) {
+    validateSafety(resource, context) {
         const { config } = resource;
         if (config.method !== 'POST') {
             throw new ImportSafetyViolation(`Unsupported value for property 'method' (expected 'POST')`);
@@ -15,7 +15,9 @@ export class MSTeamsAlertChannelCodegen extends Codegen {
         if (config.queryParameters !== undefined && config.queryParameters.length !== 0) {
             throw new ImportSafetyViolation(`Unsupported value for property 'queryParameters' (expected no value or an empty array)`);
         }
-        if (config.webhookSecret) {
+        // The preview masks this field even when it is null, so a masked value
+        // says nothing about whether a secret is set.
+        if (config.webhookSecret && !context?.isMasked(config.webhookSecret)) {
             throw new ImportSafetyViolation(`Unsupported value for property 'webhookSecret' (expected no value)`);
         }
     }
@@ -24,7 +26,7 @@ export class MSTeamsAlertChannelCodegen extends Codegen {
         return `Microsoft Teams Alert Channel: ${resource.config.name}`;
     }
     prepare(logicalId, resource, context) {
-        this.validateSafety(resource);
+        this.validateSafety(resource, context);
         const { name } = resource.config;
         const filename = context.filePath('resources/alert-channels/ms-teams', name, {
             unique: true,
@@ -32,22 +34,10 @@ export class MSTeamsAlertChannelCodegen extends Codegen {
         context.registerAlertChannel(resource.id, `${name} teams`, this.program.generatedConstructFile(filename.fullPath));
     }
     gencode(logicalId, resource, context) {
-        this.validateSafety(resource);
+        this.validateSafety(resource, context);
         const { id, file } = context.lookupAlertChannel(resource.id);
         file.namedImport(construct, 'checkly/constructs');
         const { config } = resource;
-        if (config.method !== 'POST') {
-            throw new ImportSafetyViolation(`Unsupported value for property 'method' (expected 'POST')`);
-        }
-        if (config.headers !== undefined && config.headers.length !== 0) {
-            throw new ImportSafetyViolation(`Unsupported value for property 'headers' (expected no value or an empty array)`);
-        }
-        if (config.queryParameters !== undefined && config.queryParameters.length !== 0) {
-            throw new ImportSafetyViolation(`Unsupported value for property 'queryParameters' (expected no value or an empty array)`);
-        }
-        if (config.webhookSecret) {
-            throw new ImportSafetyViolation(`Unsupported value for property 'webhookSecret' (expected no value)`);
-        }
         file.section(decl(id, builder => {
             builder.variable(expr(ident(construct), builder => {
                 builder.new(builder => {
@@ -56,11 +46,11 @@ export class MSTeamsAlertChannelCodegen extends Codegen {
                         builder.string('name', config.name);
                         builder.string('url', config.url);
                         if (config.template) {
-                            if (config.template !== MSTeamsAlertChannel.DEFAULT_PAYLOAD) {
+                            if (config.template !== MSTeamsAlertChannel.DEFAULT_PAYLOAD || context.spelledOut('payload')) {
                                 builder.string('payload', config.template);
                             }
                         }
-                        buildAlertChannelProps(builder, resource);
+                        buildAlertChannelProps(builder, resource, context);
                     });
                 });
             }));