@go-to-k/cdkd 0.290.41 → 0.290.43

package/dist/{program-B1JOjOY4.js → program-Bh8a5wjj.js}

@@ -1,8 +1,8 @@
-import { $ as yellow, $n as STATE_SOURCED_BASELINE_RULES, $r as readBootstrapMarkerBody, $t as requireConfigObject, A as createPreDeleteFinalSnapshot, Aa as safeStringify, Ai as warnDeprecatedNoPrefixCliFlag, An as malformedResourcePropertiesWarning, Ar as hasReadableExportSet, At as carriesDynamicReference, B as isStatefulRecreateTargetSync, Bi as PARTITION_TABLE, Bn as refuseMalformedState, Br as stringifyValue, Bt as isSettledInstanceState, C as namesAnyDeclaredParameter, Ca as isRetryableTransientError, Ci as resolveAutoAssetStorage, Cn as malformedExportSourceWarning, Cr as buildLockContentionMessage, Ct as slowCcOperationTimeoutMs, D as PRE_DELETE_SNAPSHOT_TYPES, Da as markRedactedCause, Di as resolveStateBucketWithDefaultAndSource, Dn as malformedOutputsWarning, Dr as CUSTOM_RESOURCE_RESPONSE_PREFIX, Dt as disableInstanceApiTermination, E as ATOMIC_FINAL_SNAPSHOT_TYPES, Ea as markNonRetryable, Ei as resolveStateBucketWithDefault, En as malformedOutputsRefusalMessage, Er as shellQuote, Et as deleteSkipReason, F as extractDeploymentEventError, Fi as findLargeInlineResources, Fn as refuseMalformedOutputs, Fr as isReadableBag, Ft as isImpossibleEmptyStoredAttribute, G as toCfnInteger, Gn as safeRegion, Gr as rewriteTemplateAssetReferences, Gt as coerceCfnBoolean, H as WARM_THROUGHPUT_MEMBERS, Hi as derivePartitionAndUrlSuffix, Hn as repairMalformedResourceEntriesForReadOnly, Hr as buildAssetRedirectMap, Ht as normalizeAwsTagsToCfn, I as makeSiblingClaimReader, Ii as uploadCfnTemplate, In as refuseMalformedOutputsForDestroy, Ir as orphansAfterRollback, It as isNamelessDynamicReferenceError, J as bold, Ji as getAwsClients, Jn as findSilentDropProperties, Jr as assertAssetBucketRegion, Jt as configIntegerRefusal, K as toFiniteNumber, Ki as resolveBucketRegion, Kn as safeStackName, Kr as AssetModeResolver, Kt as coerceCfnInteger, L as planOrphanAdoption, Li as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, Ln as refuseMalformedResourceEntries, Lr as orphansCarriedFrom, Lt as isUnboundTemplateParameter, M as refusesFinalSnapshot, Mi as CFN_TEMPLATE_BODY_LIMIT, Mn as malformedStateRefusalMessage, Mr as hasUnverifiableParameterRefusal, Mt as cfnRefValueFromPhysicalId, N as unsupportedFinalSnapshotError, Ni as CFN_TEMPLATE_URL_LIMIT, Nn as refuseDivergentRecordRegionForDestroy, Nr as importableOutputKeys, Nt as coerceParameterTypedValue, O as buildFinalSnapshotIdentifier, Oa as retryClassificationText, Oi as resolveUseCdkBootstrapAssets, On as malformedRenderedContainersWarning, Or as DEFAULT_STATE_PREFIX, Ot as isTerminationProtectionPropagationError, P as makeCanonicalizePropertiesFn, Pi as MIGRATE_TMP_PREFIX, Pn as refuseMalformedNestedChildOutputs, Pr as importableOutputs, Pt as getAccountInfo, Q as red, Qi as CdkdError, Qn as TemplateParser, Qr as parseBootstrapMarker, Qt as requireConfigArray, R as MULTI_REGION_RECREATE_BLOCKED_TYPES, Ri as decodeListingKey, Rn as refuseMalformedResourcePropertiesForOrphan, Rr as shouldRetainResource, Rt as parameterTypeMayLoseSecretIdentity, S as computeParameterTaint, Sa as isMarkedNonRetryable, Si as resolveApp, Sn as malformedExportNamesWarning, Sr as buildForceUnlockCommand, St as isWaitAbandonedError, T as resourcesNamingDeclaredParameter, Ta as isTransientServerError, Ti as resolveSkipPrefix, Tn as malformedOrphanRecordsWarning, Tr as formatLockExpiry, Tt as deleteIndeterminateGuards, U as coerceWarmThroughput$1, Ui as AssemblyReader, Un as repairMalformedResourcePropertiesForReadOnly, Ur as createAssetRedirectResolver, Ut as resolveExplicitPhysicalId, V as renderStatefulReason, Vi as canonicalizeRegion, Vn as repairMalformedOutputsForReadOnly, Vr as WorkGraph, Vt as WAFv2WebACLProvider, W as isWarmThroughputDecrease, Wi as processStackMessages, Wn as repairMalformedResourcesForReadOnly, Wr as loadPublishableAssetManifest, Wt as assertRegionMatch, X as gray, Xi as setAwsClients, Xn as withRetry, Xr as getBootstrapMarkerKey, Xt as readConfigString, Y as cyan, Yi as resetAwsClients, Yn as describeTypeWithThrottleRetry, Yr as ensureAssetStorage, Yt as configStringRefusal, Z as green, Zn as DagBuilder, Zr as isCrossRegionRedirect, Zt as replayWarn, _ as bagHoldsSecretExpression, _a as SynthesisError, _i as getDockerImageBySourceHash, _n as UNREADABLE_RESOURCES_MAP_ROW, _r as S3StateBackend, _t as endCommandInterruptScope, a as DeploymentEventsStore, aa as LocalInvokeBuildError$1, ai as describeDockerExecFailure, an as s3BucketDomainName, ar as dynamicReferenceTokens, at as secretBearingStateKeyWarning, b as mergeNoChangeOutputs, ba as normalizeAwsError, bi as getDefaultStateBucketName, bn as hasReadableResources, br as producerRecordKey, bt as startInterruptWatch, c as replayFailedOperations, ca as MalformedProducerRecordRefusalError, ci as formatDockerLoginError, cn as s3BucketWebsiteUrl, cr as isSingleDynamicReferenceToken, ct as IAMRoleProvider, d as updatePartialMessage, da as ProvisioningError, di as redactDockerArgvValues, dn as applyCallerIdentityCredentials, dr as maskSecretsInText, dt as ProviderRegistry, ea as CrossAccountSecretRefusalError, ei as validateAssetBucketName, en as requireConfigString, er as STATE_SOURCED_CROSS_GENERATION_RULES, et as collectDeclaredOutputNames, f as updatePartialReason, fa as ResourceTimeoutError, fi as runDockerForeground, fn as callerEnvCredentials, fr as recordMaskOnlyValue, ft as wouldReturnToSdkProvider, g as computeImplicitDeleteEdges, gi as AssetManifestLoader, gn as STATE_RESOURCES_MALFORMED, gr as LockManager, gt as beginCommandInterruptScope, h as IMPLICIT_DELETE_DEPENDENCIES, ha as StackTerminationProtectionError, hi as stripControlChars, hn as INTRINSIC_KEYS, hr as scrubResourceRecord, ht as maskerOrIdentity, i as DeploymentEventsReader, ia as IntrinsicResolutionRefusalError, ii as describeDockerCapturedOutput, in as s3BucketArn, ir as createSecretMasker, it as secretBearing, j as isFinalSnapshotError, ji as ssmResolvedValueType, jn as malformedResourcesWarning, jr as hasReasonlessBaselineRefusal, jt as carriesFetchableDynamicReference, k as ccRoutedFinalSnapshotError, ka as describeAwsFailure, ki as stateBucketExistenceConfirmed, kn as malformedResourceEntriesWarning, kr as exportNamesCarriedFrom, kt as IntrinsicFunctionResolver, l as replayRollback, la as NestedStackChildDirectDestroyError, li as getDockerCmd, ln as applyRoleArnIfSet, lr as markSameGenerationBag, lt as collectInlinePolicyNamesManagedBySiblings, m as maskingRetryLogger, ma as StackHasActiveImportsError, mi as escapeRegExp, mn as DiffCalculator, mr as redactSecretsForState, mt as maskDeep, n as DEFAULT_RESOURCE_WARN_AFTER_MS, na as DeployCancelledError, ni as buildDenyExternalAccessPolicy, nn as producerRegionsFromState, nr as TEMPLATE_SOURCED_RULES, nt as exportAliasCollisionScrubWarning, o as planFailedOps, oa as LocalStartServiceError, oi as describeDockerFailure, on as s3BucketDualStackDomainName, or as errorCauseChain, ot as secretSafeKeyDisplay, p as withResourceDeadline, pa as ResourceUpdateNotSupportedError, pi as runDockerStreaming, pn as envCredentialsAreAssumedRole, pr as recoverMaskedOutput, pt as createMaskedRetryLogger, q as formatResourceLine, qi as AwsClients, qn as findActionableSilentDrops, qr as BOOTSTRAP_MARKER_PREFIX, qt as configBooleanRefusal, r as DeployEngine, ra as DynamicReferenceRegionAmbiguousError, ri as buildDockerImage, rn as withSharedDrainBudget, rr as carriesSecretMask, rt as isExportAliasCollision, s as planRollback, si as dockerSpawnEnvWithSensitive, sn as s3BucketRegionalDomainName, sr as identityKeyFor, st as getCurrentResourceSecrets, t as DEFAULT_RESOURCE_TIMEOUT_MS, ti as validateContainerRepoName, tn as classifyReplaySecretRegion, tr as STATE_SOURCED_READBACK_RULES, tt as collectPublishedOutputNames, u as resolveReplacementOldType, ua as PartialFailureError, ui as partitionSensitiveEnv, un as AWS_CREDENTIAL_ENV_KEYS, ur as maskSecretsInError, ut as clearOnUpdateRemoval, v as isSecretBearingReferenceString, vi as Synthesizer, vn as displayLogicalId, vr as rebuildClientForBucketRegion, vt as interruptWatchListenerCount, w as reachableDivergentParameters, wa as isThrottlingError, wi as resolveCaptureObservedState, wn as malformedLocalOutputsWarning, wr as forceQuitRecoveryClause, wt as UNSPECIFIED_SKIP_REASON, x as bindingSkippedOutputs, xa as withErrorHandling, xi as getLegacyStateBucketName, xn as isReadableResourceEntry, xr as UNREPRODUCIBLE_LOCK_CLAUSE, xt as CloudControlProvider, y as keptWholeReasonText, yi as synthesisStatusMessage, yn as hasReadableOutputs, yr as producerCoordinateKey, yt as isInterruptedWaitError, z as isStatefulRecreateTargetForReplace, zi as expectedOwnerParam, zn as refuseMalformedResourcesForDestroy, zr as AssetPublisher, zt as refStateLookupFromResource } from "./deploy-engine-RoGuHEgf.js";
+import { $ as yellow, $i as getAwsClients, $n as STATE_SOURCED_BASELINE_RULES, $r as validateContainerRepoName, $t as requireConfigObject, A as createPreDeleteFinalSnapshot, Aa as isTransientServerError, Ai as ssmResolvedValueType, An as malformedResourcePropertiesWarning, Ar as hasUnverifiableParameterRefusal, At as carriesDynamicReference, B as isStatefulRecreateTargetSync, Bi as producerRecordKey, Bn as refuseMalformedState, Br as buildAssetRedirectMap, Bt as isSettledInstanceState, C as namesAnyDeclaredParameter, Ci as resolveCaptureObservedState, Cn as malformedExportSourceWarning, Cr as formatLockExpiry, Ct as slowCcOperationTimeoutMs, D as PRE_DELETE_SNAPSHOT_TYPES, Da as isMarkedNonRetryable, Di as resolveUseCdkBootstrapAssets, Dn as malformedOutputsWarning, Dr as exportNamesCarriedFrom, Dt as disableInstanceApiTermination, E as ATOMIC_FINAL_SNAPSHOT_TYPES, Ea as withErrorHandling, Ei as resolveStateBucketWithDefaultAndSource, En as malformedOutputsRefusalMessage, Er as DEFAULT_STATE_PREFIX, Et as deleteSkipReason, F as extractDeploymentEventError, Fa as safeStringify, Fi as uploadCfnTemplate, Fn as refuseMalformedOutputs, Fr as orphansCarriedFrom, Ft as isImpossibleEmptyStoredAttribute, G as toCfnInteger, Gi as derivePartitionAndUrlSuffix, Gn as safeRegion, Gr as BOOTSTRAP_MARKER_PREFIX, Gt as coerceCfnBoolean, H as WARM_THROUGHPUT_MEMBERS, Hi as expectedOwnerParam, Hn as repairMalformedResourceEntriesForReadOnly, Hr as loadPublishableAssetManifest, Ht as normalizeAwsTagsToCfn, I as makeSiblingClaimReader, Ii as CUSTOM_RESOURCE_RESPONSE_OBJECT_DESCRIPTION, In as refuseMalformedOutputsForDestroy, Ir as shouldRetainResource, It as isNamelessDynamicReferenceError, J as bold, Ji as renderAssemblyPathEscape, Jn as findSilentDropProperties, Jr as getBootstrapMarkerKey, Jt as configIntegerRefusal, K as toFiniteNumber, Ki as AssemblyReader, Kn as safeStackName, Kr as assertAssetBucketRegion, Kt as coerceCfnInteger, L as planOrphanAdoption, Li as injectiveKey, Ln as refuseMalformedResourceEntries, Lr as AssetPublisher, Lt as isUnboundTemplateParameter, M as refusesFinalSnapshot, Ma as markRedactedCause, Mi as CFN_TEMPLATE_URL_LIMIT, Mn as malformedStateRefusalMessage, Mr as importableOutputs, Mt as cfnRefValueFromPhysicalId, N as unsupportedFinalSnapshotError, Na as retryClassificationText, Ni as MIGRATE_TMP_PREFIX, Nn as refuseDivergentRecordRegionForDestroy, Nr as isReadableBag, Nt as coerceParameterTypedValue, O as buildFinalSnapshotIdentifier, Oa as isRetryableTransientError, Oi as stateBucketExistenceConfirmed, On as malformedRenderedContainersWarning, Or as hasReadableExportSet, Ot as isTerminationProtectionPropagationError, P as makeCanonicalizePropertiesFn, Pa as describeAwsFailure, Pi as findLargeInlineResources, Pn as refuseMalformedNestedChildOutputs, Pr as orphansAfterRollback, Pt as getAccountInfo, Q as red, Qi as AwsClients, Qn as TemplateParser, Qr as validateAssetBucketName, Qt as requireConfigArray, R as MULTI_REGION_RECREATE_BLOCKED_TYPES, Ri as injectiveKeyPrefix, Rn as refuseMalformedResourcePropertiesForOrphan, Rr as stringifyValue, Rt as parameterTypeMayLoseSecretIdentity, S as computeParameterTaint, Sa as SynthesisError, Si as resolveAutoAssetStorage, Sn as malformedExportNamesWarning, Sr as forceQuitRecoveryClause, St as isWaitAbandonedError, T as resourcesNamingDeclaredParameter, Ta as normalizeAwsError, Ti as resolveStateBucketWithDefault, Tn as malformedOrphanRecordsWarning, Tr as CUSTOM_RESOURCE_RESPONSE_PREFIX, Tt as deleteIndeterminateGuards, U as coerceWarmThroughput$1, Ui as PARTITION_TABLE, Un as repairMalformedResourcePropertiesForReadOnly, Ur as rewriteTemplateAssetReferences, Ut as resolveExplicitPhysicalId, V as renderStatefulReason, Vi as decodeListingKey, Vn as repairMalformedOutputsForReadOnly, Vr as createAssetRedirectResolver, Vt as WAFv2WebACLProvider, W as isWarmThroughputDecrease, Wi as canonicalizeRegion, Wn as repairMalformedResourcesForReadOnly, Wr as AssetModeResolver, Wt as assertRegionMatch, X as gray, Xn as withRetry, Xr as parseBootstrapMarker, Xt as readConfigString, Y as cyan, Yi as resolveAssemblyPath, Yn as describeTypeWithThrottleRetry, Yr as isCrossRegionRedirect, Yt as configStringRefusal, Z as green, Zi as resolveBucketRegion, Zn as DagBuilder, Zr as readBootstrapMarkerBody, Zt as replayWarn, _ as bagHoldsSecretExpression, _a as ResourceTimeoutError, _i as Synthesizer, _n as UNREADABLE_RESOURCES_MAP_ROW, _r as S3StateBackend, _t as endCommandInterruptScope, a as DeploymentEventsStore, aa as CrossAccountSecretRefusalError, ai as describeDockerFailure, an as s3BucketDomainName, ar as dynamicReferenceTokens, at as secretBearingStateKeyWarning, b as mergeNoChangeOutputs, ba as StackTerminationProtectionError, bi as getLegacyStateBucketName, bn as hasReadableResources, br as buildForceUnlockCommand, bt as startInterruptWatch, c as replayFailedOperations, ca as DynamicReferenceRegionAmbiguousError, ci as getDockerCmd, cn as s3BucketWebsiteUrl, cr as isSingleDynamicReferenceToken, ct as IAMRoleProvider, d as updatePartialMessage, da as LocalStartServiceError, di as runDockerForeground, dn as applyCallerIdentityCredentials, dr as maskSecretsInText, dt as ProviderRegistry, ea as resetAwsClients, ei as buildDenyExternalAccessPolicy, en as requireConfigString, er as STATE_SOURCED_CROSS_GENERATION_RULES, et as collectDeclaredOutputNames, f as updatePartialReason, fi as runDockerStreaming, fn as callerEnvCredentials, fr as recordMaskOnlyValue, ft as wouldReturnToSdkProvider, g as computeImplicitDeleteEdges, ga as ProvisioningError, gi as getDockerImageBySourceHash, gn as STATE_RESOURCES_MALFORMED, gr as LockManager, gt as beginCommandInterruptScope, h as IMPLICIT_DELETE_DEPENDENCIES, ha as PartialFailureError, hi as AssetManifestLoader, hn as INTRINSIC_KEYS, hr as scrubResourceRecord, ht as maskerOrIdentity, i as DeploymentEventsReader, ii as describeDockerExecFailure, in as s3BucketArn, ir as createSecretMasker, it as secretBearing, j as isFinalSnapshotError, ja as markNonRetryable, ji as CFN_TEMPLATE_BODY_LIMIT, jn as malformedResourcesWarning, jr as importableOutputKeys, jt as carriesFetchableDynamicReference, k as ccRoutedFinalSnapshotError, ka as isThrottlingError, ki as warnDeprecatedNoPrefixCliFlag, kn as malformedResourceEntriesWarning, kr as hasReasonlessBaselineRefusal, kt as IntrinsicFunctionResolver, l as replayRollback, la as IntrinsicResolutionRefusalError, li as partitionSensitiveEnv, ln as applyRoleArnIfSet, lr as markSameGenerationBag, lt as collectInlinePolicyNamesManagedBySiblings, m as maskingRetryLogger, ma as NestedStackChildDirectDestroyError, mi as stripControlChars, mn as DiffCalculator, mr as redactSecretsForState, mt as maskDeep, n as DEFAULT_RESOURCE_WARN_AFTER_MS, ni as resolveDockerContextDirectory, nn as producerRegionsFromState, nr as TEMPLATE_SOURCED_RULES, nt as exportAliasCollisionScrubWarning, o as planFailedOps, oi as dockerSpawnEnvWithSensitive, on as s3BucketDualStackDomainName, or as errorCauseChain, ot as secretSafeKeyDisplay, p as withResourceDeadline, pa as MalformedProducerRecordRefusalError, pi as escapeRegExp, pn as envCredentialsAreAssumedRole, pr as recoverMaskedOutput, pt as createMaskedRetryLogger, q as formatResourceLine, qi as processStackMessages, qn as findActionableSilentDrops, qr as ensureAssetStorage, qt as configBooleanRefusal, r as DeployEngine, ra as CdkdError, ri as describeDockerCapturedOutput, rn as withSharedDrainBudget, rr as carriesSecretMask, rt as isExportAliasCollision, s as planRollback, sa as DeployCancelledError, si as formatDockerLoginError, sn as s3BucketRegionalDomainName, sr as identityKeyFor, st as getCurrentResourceSecrets, t as DEFAULT_RESOURCE_TIMEOUT_MS, ta as setAwsClients, ti as buildDockerImage, tn as classifyReplaySecretRegion, tr as STATE_SOURCED_READBACK_RULES, tt as collectPublishedOutputNames, u as resolveReplacementOldType, ua as LocalInvokeBuildError$1, ui as redactDockerArgvValues, un as AWS_CREDENTIAL_ENV_KEYS, ur as maskSecretsInError, ut as clearOnUpdateRemoval, v as isSecretBearingReferenceString, va as ResourceUpdateNotSupportedError, vi as synthesisStatusMessage, vn as displayLogicalId, vr as rebuildClientForBucketRegion, vt as interruptWatchListenerCount, w as reachableDivergentParameters, wi as resolveSkipPrefix, wn as malformedLocalOutputsWarning, wr as shellQuote, wt as UNSPECIFIED_SKIP_REASON, x as bindingSkippedOutputs, xi as resolveApp, xn as isReadableResourceEntry, xr as buildLockContentionMessage, xt as CloudControlProvider, y as keptWholeReasonText, ya as StackHasActiveImportsError, yi as getDefaultStateBucketName, yn as hasReadableOutputs, yr as UNREPRODUCIBLE_LOCK_CLAUSE, yt as isInterruptedWaitError, z as isStatefulRecreateTargetForReplace, zi as producerCoordinateKey, zn as refuseMalformedResourcesForDestroy, zr as WorkGraph, zt as refStateLookupFromResource } from "./deploy-engine-Bw8VoyEi.js";
 import { C as displayAwsMessage, D as truncateCodePoints, E as isPasteableIdent, S as UNRENDERABLE, T as displaySafe, _ as withSkipPrefix, b as SECRET_REF_MAX_CODE_POINTS, c as PATTERN_B_NAME_OPTIONS, f as explicitNamePropertyFor, h as getCurrentStackName, i as reserveStdoutForPayload, l as PATTERN_B_NAME_PROPERTIES, m as generateResourceNameWithFallback, n as getLogger, o as runStackBuffered, p as generateResourceName, s as getLiveRenderer, u as PATTERN_B_RESOURCE_TYPES, v as withStackName, w as displayIdent, x as STACK_REF_MAX_CODE_POINTS } from "./logger-D-2HeLmd.js";
 import { n as awsClientDefaults } from "./aws-client-defaults-BoIxyCir.js";
-import { t as getCdkdVersion } from "./version-Cxppiepi.js";
-import { a as renderDisableCommand, i as protectedReplacementAdvice, r as UNNAMEABLE_ID_CLAUSE, t as ASGProvider } from "./asg-provider-CPWB3m4b.js";
+import { t as getCdkdVersion } from "./version-ChfV4K6h.js";
+import { a as renderDisableCommand, i as protectedReplacementAdvice, r as UNNAMEABLE_ID_CLAUSE, t as ASGProvider } from "./asg-provider-C9R-ND4b.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, NotFound, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -34,7 +34,6 @@ import { tmpdir } from "node:os";
 import { AssociateVPCWithHostedZoneCommand, ChangeResourceRecordSetsCommand, ChangeTagsForResourceCommand, CreateHostedZoneCommand, CreateQueryLoggingConfigCommand, DeleteHostedZoneCommand, DeleteQueryLoggingConfigCommand, DisassociateVPCFromHostedZoneCommand, GetHostedZoneCommand, HostedZoneAlreadyExists, ListHostedZonesByNameCommand, ListQueryLoggingConfigsCommand, ListResourceRecordSetsCommand, ListTagsForResourceCommand as ListTagsForResourceCommand$8, Route53Client, UpdateHostedZoneCommentCommand, UpdateHostedZoneFeaturesCommand } from "@aws-sdk/client-route-53";
 import { AddTagsCommand, CreateListenerCommand, CreateLoadBalancerCommand, CreateTargetGroupCommand, DeleteListenerCommand, DeleteLoadBalancerCommand, DeleteTargetGroupCommand, DeregisterTargetsCommand, DescribeCapacityReservationCommand, DescribeListenerAttributesCommand, DescribeListenersCommand, DescribeLoadBalancerAttributesCommand, DescribeLoadBalancersCommand, DescribeTagsCommand, DescribeTargetGroupAttributesCommand, DescribeTargetGroupsCommand, DescribeTargetHealthCommand, ElasticLoadBalancingV2Client, ModifyCapacityReservationCommand, ModifyIpPoolsCommand, ModifyListenerAttributesCommand, ModifyListenerCommand, ModifyLoadBalancerAttributesCommand, ModifyTargetGroupAttributesCommand, ModifyTargetGroupCommand, RegisterTargetsCommand, RemoveTagsCommand, SetIpAddressTypeCommand, SetSecurityGroupsCommand, SetSubnetsCommand, waitUntilLoadBalancerAvailable } from "@aws-sdk/client-elastic-load-balancing-v2";
 import { CreateAliasCommand, CreateKeyCommand, DeleteAliasCommand, DescribeKeyCommand, DisableKeyCommand, DisableKeyRotationCommand, EnableKeyCommand, EnableKeyRotationCommand, GetKeyPolicyCommand, GetKeyRotationStatusCommand, KMSClient, ListAliasesCommand, ListResourceTagsCommand, NotFoundException as NotFoundException$2, PutKeyPolicyCommand, ScheduleKeyDeletionCommand, TagResourceCommand as TagResourceCommand$11, UntagResourceCommand as UntagResourceCommand$11, UpdateAliasCommand, UpdateKeyDescriptionCommand } from "@aws-sdk/client-kms";
-import { join as join$1 } from "path";
 import { BatchDeleteImageCommand, CreateRepositoryCommand, DeleteLifecyclePolicyCommand, DeleteRepositoryCommand, DeleteRepositoryPolicyCommand, DescribeImagesCommand as DescribeImagesCommand$1, DescribeRepositoriesCommand, ECRClient, GetAuthorizationTokenCommand, GetLifecyclePolicyCommand, LifecyclePolicyNotFoundException, ListTagsForResourceCommand as ListTagsForResourceCommand$9, PutImageScanningConfigurationCommand, PutImageTagMutabilityCommand, PutLifecyclePolicyCommand, RepositoryNotEmptyException, RepositoryNotFoundException, SetRepositoryPolicyCommand, TagResourceCommand as TagResourceCommand$12, UntagResourceCommand as UntagResourceCommand$12 } from "@aws-sdk/client-ecr";
 import { isDeepStrictEqual, promisify } from "node:util";
 import graphlib from "graphlib";
@@ -42,7 +41,6 @@ import { AddTagsToResourceCommand as AddTagsToResourceCommand$2, CreateDBCluster
 import { Command, InvalidArgumentError, Option } from "commander";
 import * as readline$1 from "node:readline/promises";
 import readline from "node:readline/promises";
-import { writeFileSync as writeFileSync$1 } from "fs";
 import { Document, Pair, Scalar, YAMLMap, YAMLSeq, isScalar, parse, stringify, visit } from "yaml";
 import * as zlib from "node:zlib";
 import { ApplicationAutoScalingClient, DeleteScalingPolicyCommand, DeregisterScalableTargetCommand, DescribeScalableTargetsCommand, DescribeScalingPoliciesCommand, PutScalingPolicyCommand, RegisterScalableTargetCommand } from "@aws-sdk/client-application-auto-scaling";
@@ -2265,7 +2263,35 @@ function countDeployableResources(template) {
 	return Object.values(template.Resources ?? {}).filter((r) => r.Type !== "AWS::CDK::Metadata").length;
 }
 /**
-* Synth command implementation
+* Where `cdkd synth --verbose` writes one stack's template, refusing a path
+* that leaves `outputDir` (issue
+* [#3489](https://github.com/go-to-k/cdkd/issues/3489)).
+*
+* `stackName` is the assembly manifest's own `properties.stackName`, falling
+* back to the artifact id, so it is chosen by whoever wrote the assembly — and
+* this is the ONE place cdkd turns such a string into a path it WRITES. A
+* `../../../..`-bearing name would put attacker-chosen JSON outside the output
+* directory, clobbering whatever `<name>.template.json` it can reach.
+*
+* Exported for unit testing.
+*/
+function resolveVerboseTemplatePath(outputDir, stackName) {
+	const resolved = resolveAssemblyPath(outputDir, `${stackName}.template.json`);
+	if (!resolved.contained) throw new SynthesisError(`Stack '${displaySafe(stackName)}' would write its template to a path that ${renderAssemblyPathEscape(resolved, outputDir, "write it")}`);
+	let linked = false;
+	try {
+		linked = lstatSync(resolved.path).isSymbolicLink();
+	} catch {}
+	if (linked) throw new SynthesisError(`Stack '${displaySafe(stackName)}' would write its template over a symbolic link at '${displaySafe(resolved.path)}'. cdkd writes a stack's template as a regular file beside the assembly; a symbolic link there redirects the write to wherever it points, so this indicates the synth output was hand-modified or generated by a non-CDK toolchain. Refusing to write it.`);
+	return resolved.path;
+}
+/**
+* Synth command implementation.
+*
+* Exported for the wiring test that pins `--verbose` writing through
+* {@link resolveVerboseTemplatePath} rather than a bare `path.join`
+* (go-to-k/cdkd#3489): the guard has its own cases, but reverting the CALL
+* SITE left the suite green.
 */
 async function synthCommand(options) {
 	const logger = getLogger();
@@ -2311,9 +2337,9 @@ async function synthCommand(options) {
 		logger.info(`    - Outputs: ${outputCount}`);
 		logger.info(`    - Has assets: ${assemblyReader.hasAssets(stack) ? "Yes" : "No"}`);
 		if (options.verbose) {
-			const templatePath = join$1(options.output, `${stack.stackName}.template.json`);
-			writeFileSync$1(templatePath, JSON.stringify(stack.template, null, 2));
-			logger.debug(`    - Template written to: ${templatePath}`);
+			const templatePath = resolveVerboseTemplatePath(options.output, stack.stackName);
+			writeFileSync(templatePath, JSON.stringify(stack.template, null, 2));
+			logger.debug(`    - Template written to: ${displaySafe(templatePath)}`);
 		}
 	}
 	logger.info(`\nOutput: ${assemblyDir}`);
@@ -3444,7 +3470,7 @@ function templateIdentity(templatePath) {
 	const dir = path.dirname(templatePath);
 	let realDir;
 	try {
-		realDir = fs.realpathSync(dir);
+		realDir = fs.realpathSync.native(dir);
 	} catch {
 		realDir = path.resolve(dir);
 	}
@@ -3567,7 +3593,16 @@ function findNestedTemplateTreeDefect(nestedTemplates, ancestorTemplatePaths = [
 						logicalId: row.logicalId,
 						assetPath: row.assetPath
 					};
-					const defect = visit(row.logicalId, path.join(dir, row.assetPath));
+					const resolved = resolveAssemblyPath(dir, row.assetPath);
+					if (!resolved.contained) return {
+						kind: "escaping-path",
+						chain: [...chain],
+						logicalId: row.logicalId,
+						assetPath: row.assetPath,
+						escape: resolved,
+						dir
+					};
+					const defect = visit(row.logicalId, resolved.path);
 					if (defect) return defect;
 				}
 			} finally {
@@ -3626,6 +3661,7 @@ function renderNestedTemplateTreeDefect(defect, stackName, action) {
 	}
 	if (defect.kind === "too-large") return `The nested template tree under stack '${displaySafe(stackName)}' has more than ${MAX_ROWS_FOLLOWED} nested-stack rows to follow (the walk stopped at ${renderChain(defect.chain)}). That is far beyond any CDK-generated assembly. Symlinked directories can give one template file many paths, which multiplies the tree without ever repeating on one chain. Refusing to ${action}.`;
 	if (defect.kind === "too-deep") return `The nested template tree under stack '${displaySafe(stackName)}' nests more than ${512} levels deep: ${renderChain(defect.chain)}. No tree that deep can deploy, because each level lengthens the child's state key and S3 caps a key at 1024 bytes. ${provenance}`;
+	if (defect.kind === "escaping-path") return `The nested template tree under stack '${displaySafe(stackName)}' has nested stack '${displaySafe(defect.logicalId)}' (reached through ${renderChain(defect.chain)}) with Metadata['aws:asset:path']='${displaySafe(defect.assetPath)}' which ${renderAssemblyPathEscape(defect.escape, defect.dir, action)}`;
 	return `The nested template tree under stack '${displaySafe(stackName)}' has nested stack '${displaySafe(defect.logicalId)}' (reached through ${renderChain(defect.chain)}) with Metadata['aws:asset:path']='${displaySafe(defect.assetPath)}' which is absolute. ${provenance}`;
 }
 
@@ -18131,7 +18167,11 @@ function resolveDynamoDbDeleteBudgetClock() {
 * the first's spent allowance. In practice `destroy-runner.ts` builds a fresh
 * provider (and therefore a fresh registry) per region, so the collision is not
 * reachable today — but that is an invariant of the CALLER, enforced nowhere,
-* and the fix costs one string concat. `\0` cannot appear in either component.
+* and the fix costs one string concat. The key is ENCODED rather than
+* separated, so it does not rest on what can appear in either component --
+* both come from a state record, which `parseStateBody` reads as an unchecked
+* cast, so the claim this sentence used to make was about AWS rather than
+* about what arrives here (go-to-k/cdkd#3496).
 *
 * `region` is the STATE's region (`DeleteContext.expectedRegion`), which is
 * available synchronously at the top of `delete()` — unlike the client's own
@@ -18140,7 +18180,7 @@ function resolveDynamoDbDeleteBudgetClock() {
 * which degrades to the old bare-name key rather than failing.
 */
 function deleteBudgetKey(physicalId, region) {
-	return `${region ?? ""}\u0000${physicalId}`;
+	return injectiveKey(region ?? "", physicalId);
 }
 /**
 * The poll cap a wait may actually use: its own constant, or what the shared
@@ -23397,7 +23437,7 @@ var DynamoDBGlobalTableProvider = class {
 	* repeated `DescribeTable` calls.
 	*/
 	async getAttribute(physicalId, _resourceType, attributeName) {
-		const cacheKey = `${physicalId}::${attributeName}`;
+		const cacheKey = injectiveKey(physicalId, attributeName);
 		if (this.attributeCache.has(cacheKey)) return this.attributeCache.get(cacheKey);
 		try {
 			const resp = await this.dynamoDBClient.send(new DescribeTableCommand({ TableName: physicalId }));
@@ -28575,7 +28615,7 @@ const generations = /* @__PURE__ */ new Map();
 * long-lived process cannot grow the map without bound.
 */
 const MAX_TRACKED_GENERATIONS = 1e5;
-const tokenKey = (scope, logicalId, maxLength, charset) => `${scope}\u0000${process.env["AWS_REGION"] ?? ""}\u0000${getCurrentStackName() ?? ""}\u0000${logicalId}\u0000${maxLength}\u0000${charset}`;
+const tokenKey = (scope, logicalId, maxLength, charset) => injectiveKey(scope, process.env["AWS_REGION"] ?? "", getCurrentStackName() ?? "", logicalId, maxLength, charset);
 const derive = (key, generation, maxLength, charset) => {
 	const digest = createHash("sha256").update(`${PROCESS_NONCE}\u0000${key}\u0000${generation}`).digest("hex");
 	return `cdkd${charset === "alphanumeric" ? "" : "-"}${digest}`.slice(0, maxLength);
@@ -42392,7 +42432,7 @@ var RDSDBProxyProvider = class {
 		throw new ProvisioningError(`Timed out waiting for DBProxy ${physicalId} to fully delete`, resourceType, logicalId, physicalId);
 	}
 	async getAttribute(physicalId, _resourceType, attributeName) {
-		const cacheKey = `${physicalId}:${attributeName}`;
+		const cacheKey = injectiveKey(physicalId, attributeName);
 		const cached = this.attributeCache.get(cacheKey);
 		if (cached !== void 0) return cached;
 		if (attributeName !== "Endpoint" && attributeName !== "DBProxyArn" && attributeName !== "VpcId") {
@@ -42467,7 +42507,7 @@ var RDSDBProxyProvider = class {
 		const newMap = this.toTagMap(newTags);
 		if (oldMap.size === newMap.size && [...oldMap.keys()].every((k) => newMap.has(k)) && [...oldMap.entries()].every(([k, v]) => newMap.get(k) === v)) return;
 		const client = this.getClient();
-		const arnCacheKey = `${physicalId}:DBProxyArn`;
+		const arnCacheKey = injectiveKey(physicalId, "DBProxyArn");
 		let arn = this.attributeCache.get(arnCacheKey);
 		if (!arn) try {
 			arn = (await client.send(new DescribeDBProxiesCommand({ DBProxyName: physicalId }))).DBProxies?.[0]?.DBProxyArn;
@@ -42534,7 +42574,8 @@ var RDSDBProxyProvider = class {
 		}
 	}
 	invalidateAttributeCache(physicalId) {
-		for (const key of this.attributeCache.keys()) if (key.startsWith(`${physicalId}:`)) this.attributeCache.delete(key);
+		const encodedPrefix = injectiveKeyPrefix(physicalId);
+		for (const key of this.attributeCache.keys()) if (key.startsWith(encodedPrefix)) this.attributeCache.delete(key);
 	}
 	wrapError(error, op, resourceType, logicalId, physicalId) {
 		const message = error instanceof Error ? error.message : String(error);
@@ -42717,7 +42758,7 @@ var RDSDBProxyEndpointProvider = class {
 		throw new ProvisioningError(`Timed out waiting for DBProxyEndpoint ${physicalId} to fully delete`, resourceType, logicalId, physicalId);
 	}
 	async getAttribute(physicalId, _resourceType, attributeName) {
-		const cacheKey = `${physicalId}:${attributeName}`;
+		const cacheKey = injectiveKey(physicalId, attributeName);
 		const cached = this.attributeCache.get(cacheKey);
 		if (cached !== void 0) return cached;
 		if (attributeName !== "Endpoint" && attributeName !== "DBProxyEndpointArn" && attributeName !== "IsDefault" && attributeName !== "VpcId") {
@@ -42778,7 +42819,7 @@ var RDSDBProxyEndpointProvider = class {
 		const newMap = this.toTagMap(newTags);
 		if (oldMap.size === newMap.size && [...oldMap.keys()].every((k) => newMap.has(k)) && [...oldMap.entries()].every(([k, v]) => newMap.get(k) === v)) return;
 		const client = this.getClient();
-		const arnCacheKey = `${physicalId}:DBProxyEndpointArn`;
+		const arnCacheKey = injectiveKey(physicalId, "DBProxyEndpointArn");
 		let arn = this.attributeCache.get(arnCacheKey);
 		if (!arn) try {
 			arn = (await client.send(new DescribeDBProxyEndpointsCommand({ DBProxyEndpointName: physicalId }))).DBProxyEndpoints?.[0]?.DBProxyEndpointArn;
@@ -42846,7 +42887,8 @@ var RDSDBProxyEndpointProvider = class {
 		}
 	}
 	invalidateAttributeCache(physicalId) {
-		for (const key of this.attributeCache.keys()) if (key.startsWith(`${physicalId}:`)) this.attributeCache.delete(key);
+		const encodedPrefix = injectiveKeyPrefix(physicalId);
+		for (const key of this.attributeCache.keys()) if (key.startsWith(encodedPrefix)) this.attributeCache.delete(key);
 	}
 	wrapError(error, op, resourceType, logicalId, physicalId) {
 		const message = error instanceof Error ? error.message : String(error);
@@ -64978,7 +65020,9 @@ var NestedStackProvider = class {
 		const result = Object.create(null);
 		for (const { logicalId: grandLogicalId, assetPath } of listNestedTemplateRows(childTemplate)) {
 			if (isAbsoluteCrossPlatform$1(assetPath)) throw markNonRetryable(/* @__PURE__ */ new Error(`NestedStackProvider: nested-stack '${displaySafe(grandLogicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which is absolute. CDK emits relative asset paths for nested templates; an absolute path indicates the synth output was hand-modified or generated by a non-CDK toolchain. Refusing to load.`));
-			result[grandLogicalId] = path.join(dir, assetPath);
+			const resolved = resolveAssemblyPath(dir, assetPath);
+			if (!resolved.contained) throw markNonRetryable(/* @__PURE__ */ new Error(`NestedStackProvider: nested-stack '${displaySafe(grandLogicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which ${renderAssemblyPathEscape(resolved, dir)}`));
+			result[grandLogicalId] = resolved.path;
 		}
 		return result;
 	}
@@ -66091,7 +66135,8 @@ async function deployCommand(stacks, options) {
 							region: assetRegion,
 							...options.profile && { profile: options.profile },
 							nodePrefix: `${stack.stackName}:`,
-							...redirect && { redirect }
+							...redirect && { redirect },
+							...stack.assetOutdir !== void 0 && { assetOutdir: stack.assetOutdir }
 						});
 						for (const id of nodeIds) stackDeps.add(id);
 					}
@@ -67863,7 +67908,9 @@ function indexNestedChildTemplates(template, templatePath) {
 		const assetPath = resource.Metadata?.["aws:asset:path"];
 		if (typeof assetPath !== "string" || assetPath.length === 0) continue;
 		if (isAbsoluteCrossPlatform(assetPath)) throw new Error(`Nested stack '${displaySafe(logicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which is absolute. CDK emits relative asset paths for nested templates; an absolute path indicates the synth output was hand-modified or generated by a non-CDK toolchain. Refusing to load.`);
-		result[logicalId] = path.join(dir, assetPath);
+		const resolved = resolveAssemblyPath(dir, assetPath);
+		if (!resolved.contained) throw new Error(`Nested stack '${displaySafe(logicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which ${renderAssemblyPathEscape(resolved, dir)}`);
+		result[logicalId] = resolved.path;
 	}
 	return result;
 }
@@ -78711,8 +78758,13 @@ function readNestedChildTemplateFile(templatePath, childLogicalId) {
 * non-CDK toolchain — `path.join(dir, '/abs/foo')` would silently bypass
 * the `dir` argument).
 *
+* Also refuses a path that RESOLVES outside `templateDir`, which the absolute
+* check cannot see — `path.join` folds `..`
+* ([#3489](https://github.com/go-to-k/cdkd/issues/3489)).
+*
 * Sibling of `indexGrandchildTemplatePaths` in `import.ts`. Same rationale
-* for separate definitions as `readNestedChildTemplateFile` above.
+* for separate definitions as `readNestedChildTemplateFile` above. Exported
+* for unit testing.
 */
 function indexNestedTemplatePaths(template, templateDir) {
 	const result = {};
@@ -78724,8 +78776,10 @@ function indexNestedTemplatePaths(template, templateDir) {
 		if (r.Type !== "AWS::CloudFormation::Stack") continue;
 		const assetPath = r.Metadata?.["aws:asset:path"];
 		if (typeof assetPath !== "string" || assetPath.length === 0) continue;
-		if (path.isAbsolute(assetPath)) throw new Error(`cdkd export: nested-stack '${logicalId}' has Metadata['aws:asset:path']='${assetPath}' which is absolute. CDK emits relative asset paths for nested templates.`);
-		result[logicalId] = path.join(templateDir, assetPath);
+		if (path.isAbsolute(assetPath)) throw new Error(`cdkd export: nested-stack '${displaySafe(logicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which is absolute. CDK emits relative asset paths for nested templates.`);
+		const resolved = resolveAssemblyPath(templateDir, assetPath);
+		if (!resolved.contained) throw new Error(`cdkd export: nested-stack '${displaySafe(logicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which ${renderAssemblyPathEscape(resolved, templateDir)}`);
+		result[logicalId] = resolved.path;
 	}
 	return result;
 }
@@ -85003,7 +85057,7 @@ var AttributeFetcher = class {
 	* success path returns `{ ok: true, value, fromCache: true }`.
 	*/
 	async getAtt(orphanLogicalId, attribute) {
-		const cacheKey = `${orphanLogicalId}\0${attribute}`;
+		const cacheKey = injectiveKey(orphanLogicalId, attribute);
 		if (this.cache.has(cacheKey)) return {
 			ok: true,
 			value: this.cache.get(cacheKey)
@@ -85061,7 +85115,7 @@ var AttributeFetcher = class {
 		this.logger.warn(`--force: live fetch failed for '${orphanLogicalId}.${attribute}' (${reason}); falling back to cached value from state.attributes.`);
 		if (carriesDynamicReference(cached)) this.logger.warn(`--force: the cached value for '${orphanLogicalId}.${attribute}' is an UNRESOLVED dynamic reference (a nested stack's redacted output, issue #2055). It is being written into the referring resource's state VERBATIM — cdkd cannot re-resolve it from here. Re-run without --force once the live attribute is readable, or fix the referring property by hand.`);
 		if (carriesSecretMask(cached)) this.logger.warn(`--force: the cached value for '${orphanLogicalId}.${attribute}' is the REDACTION MASK ('${"***"}'), not the attribute's value — cdkd redacted it into state and cannot recover it. It is being written into the referring resource's state VERBATIM, so that row now records a value the live resource does not have: the next 'cdkd diff' / 'cdkd deploy' reports a spurious change there (a REPLACEMENT if the property is create-only), 'cdkd rollback' refuses the record as a replay baseline, and 'cdkd export' blocks it. Re-run without --force once the live attribute is readable, re-import the record that holds the mask, or fix the referring property by hand.`);
-		const cacheKey = `${orphanLogicalId}\0${attribute}`;
+		const cacheKey = injectiveKey(orphanLogicalId, attribute);
 		this.cache.set(cacheKey, cached);
 		return {
 			ok: true,
@@ -85775,7 +85829,8 @@ async function publishAssetsCommand(stacks, options) {
 						region: stack.region || baseRegion,
 						...options.profile && { profile: options.profile },
 						nodePrefix: `${stack.stackName}:`,
-						...redirect && { redirect }
+						...redirect && { redirect },
+						...stack.assetOutdir !== void 0 && { assetOutdir: stack.assetOutdir }
 					});
 				} catch (err) {
 					if (err.code === "ENOENT") {
@@ -87591,6 +87646,11 @@ function readNestedChildTemplate(templatePath, childLogicalId) {
 * does: an absolute path indicates the synth output was hand-modified or
 * generated by a non-CDK toolchain — `path.join(dir, '/abs/foo')` would
 * silently bypass our `dir` resolution and point outside cdk.out.
+*
+* Also refuses a path that RESOLVES outside `dir`, which the absolute check
+* cannot see — `path.join` folds `..`
+* ([#3489](https://github.com/go-to-k/cdkd/issues/3489)). Exported for unit
+* testing.
 */
 function indexGrandchildTemplatePaths(childTemplate, childTemplatePath) {
 	const dir = path.dirname(childTemplatePath);
@@ -87599,8 +87659,10 @@ function indexGrandchildTemplatePaths(childTemplate, childTemplatePath) {
 		if (resource.Type !== "AWS::CloudFormation::Stack") continue;
 		const assetPath = resource.Metadata?.["aws:asset:path"];
 		if (typeof assetPath !== "string" || assetPath.length === 0) continue;
-		if (path.isAbsolute(assetPath)) throw new Error(`cdkd import --migrate-from-cloudformation: grandchild nested-stack '${grandLogicalId}' has Metadata['aws:asset:path']='${assetPath}' which is absolute. CDK emits relative asset paths for nested templates.`);
-		result[grandLogicalId] = path.join(dir, assetPath);
+		if (path.isAbsolute(assetPath)) throw new Error(`cdkd import --migrate-from-cloudformation: grandchild nested-stack '${displaySafe(grandLogicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which is absolute. CDK emits relative asset paths for nested templates.`);
+		const resolved = resolveAssemblyPath(dir, assetPath);
+		if (!resolved.contained) throw new Error(`cdkd import --migrate-from-cloudformation: grandchild nested-stack '${displaySafe(grandLogicalId)}' has Metadata['aws:asset:path']='${displaySafe(assetPath)}' which ${renderAssemblyPathEscape(resolved, dir)}`);
+		result[grandLogicalId] = resolved.path;
 	}
 	return result;
 }
@@ -88819,7 +88881,7 @@ function notFoundError$1(target, stack, resources) {
 */
 function copyLayerTreeLastWins(src, dest) {
 	mkdirSync(dest, { recursive: true });
-	copyDirLastWins(realpathSync(src), dest);
+	copyDirLastWins(realpathSync.native(src), dest);
 }
 function copyDirLastWins(fromDir, toDir) {
 	for (const entry of readdirSync(fromDir, { withFileTypes: true })) {
@@ -92585,7 +92647,7 @@ function materializeInlineCode$1(handler, source, fileExtension, tmpDirsOut) {
 	const modulePath = handler.substring(0, lastDot);
 	const dir = mkdtempSync(path.join(tmpdir(), "cdkd-local-start-api-"));
 	tmpDirsOut.add(dir);
-	const filePath = path.join(dir, `${modulePath}${fileExtension}`);
+	const filePath = resolveInlineCodeFilePath(dir, modulePath, fileExtension, handler);
 	mkdirSync(path.dirname(filePath), { recursive: true });
 	writeFileSync(filePath, source, "utf-8");
 	return dir;
@@ -93775,8 +93837,9 @@ async function prepareOneImage(task, container, options) {
 			const tag = `cdkd-local-run-task-${(image.assetHash ?? "single").slice(0, 16)}`;
 			const actualTag = await buildDockerImage(asset, cdkOutDir, {
 				tag,
+				...task.stack.assetOutdir !== void 0 && { assetOutdir: task.stack.assetOutdir },
 				...options.platformOverride !== void 0 && { platform: options.platformOverride },
-				wrapError: (stderr) => new LocalInvokeBuildError$1(`docker build failed for ECS container '${container.name}' (${asset.source.directory ?? (asset.source.executable ? redactDockerArgvValues(asset.source.executable).join(" ") : void 0)}): ${stderr}`)
+				wrapError: (stderr) => new LocalInvokeBuildError$1(`docker build failed for ECS container '${displaySafe(container.name)}' (${asset.source.directory !== void 0 ? displaySafe(asset.source.directory) : asset.source.executable ? redactDockerArgvValues(asset.source.executable).join(" ") : void 0}): ${displaySafe(stderr)}`)
 			});
 			if (actualTag !== tag) {
 				const tagArgs = [
@@ -93787,7 +93850,7 @@ async function prepareOneImage(task, container, options) {
 				try {
 					await runDockerStreaming(tagArgs);
 				} catch (err) {
-					throw new LocalInvokeBuildError$1(`docker tag failed re-tagging '${actualTag}' → '${tag}' for ECS container '${container.name}': ${describeDockerFailure(err, tagArgs)}`);
+					throw new LocalInvokeBuildError$1(`docker tag failed re-tagging '${displaySafe(actualTag)}' → '${displaySafe(tag)}' for ECS container '${displaySafe(container.name)}': ${displaySafe(describeDockerFailure(err, tagArgs))}`);
 				}
 			}
 			return tag;
@@ -94705,13 +94768,16 @@ async function loadAgentCoreAssetContext(args) {
 	const { resolvedTarget, resolved, stacks, cdkOutDir, assetLoader, oldAssetHash } = args;
 	const newCandidate = pickAgentCoreCandidateStack(resolvedTarget, stacks);
 	if (!newCandidate) return void 0;
+	const cdkdRecord = stacks.find((s) => s.stackName === newCandidate.stackName);
+	const manifestDir = cdkdRecord?.assetManifestPath ? dirname(cdkdRecord.assetManifestPath) : cdkOutDir;
+	const assetOutdir = cdkdRecord?.assetOutdir ?? manifestDir;
 	if (resolved.codeArtifact) {
 		if (resolved.codeArtifact.s3Source) return void 0;
-		const manifest = await assetLoader.loadManifest(cdkOutDir, newCandidate.stackName);
+		const manifest = await assetLoader.loadManifest(manifestDir, newCandidate.stackName);
 		if (!manifest) return void 0;
 		const asset = assetLoader.getFileAssets(manifest).get(resolved.codeArtifact.codeAssetHash);
 		if (!asset) return void 0;
-		const sourceDir = assetLoader.getAssetSourcePath(cdkOutDir, asset);
+		const sourceDir = assetLoader.getAssetSourcePath(manifestDir, asset, assetOutdir);
 		return {
 			...oldAssetHash !== void 0 && { oldAssetHash },
 			newAssetHash: resolved.codeArtifact.codeAssetHash,
@@ -94720,13 +94786,13 @@ async function loadAgentCoreAssetContext(args) {
 		};
 	}
 	if (resolved.containerUri === void 0) return void 0;
-	const manifest = await assetLoader.loadManifest(cdkOutDir, newCandidate.stackName);
+	const manifest = await assetLoader.loadManifest(manifestDir, newCandidate.stackName);
 	if (!manifest) return void 0;
 	const dockerImageEntry = getDockerImageBySourceHash(manifest, resolved.containerUri);
 	if (!dockerImageEntry) return void 0;
 	const newDockerImage = dockerImageEntry.asset;
 	if (!newDockerImage.source.directory) return void 0;
-	const newAssetSourceDir = resolve(cdkOutDir, newDockerImage.source.directory);
+	const newAssetSourceDir = resolveDockerContextDirectory(manifestDir, newDockerImage.source.directory, (message) => new Error(message), assetOutdir);
 	return {
 		...oldAssetHash !== void 0 && { oldAssetHash },
 		newAssetHash: dockerImageEntry.hash,
@@ -94743,6 +94809,9 @@ async function loadAgentCoreAssetContext(args) {
 * "force rebuild", which is the conservative default.
 *
 * NOT exported from `cdk-local/internal`, so copied locally.
+*
+* @internal — exported so its manifest lookup can be fenced beside
+* {@link loadAgentCoreAssetContext}'s, which is its twin.
 */
 async function deriveOldAssetHash(args) {
 	const { resolvedTarget, resolved, stacks, cdkOutDir, assetLoader } = args;
@@ -94750,7 +94819,9 @@ async function deriveOldAssetHash(args) {
 	if (resolved.containerUri === void 0) return void 0;
 	const candidate = pickAgentCoreCandidateStack(resolvedTarget, stacks);
 	if (!candidate) return void 0;
-	const manifest = await assetLoader.loadManifest(cdkOutDir, candidate.stackName);
+	const manifestFile = stacks.find((s) => s.stackName === candidate.stackName)?.assetManifestPath;
+	const manifestDir = manifestFile !== void 0 ? dirname(manifestFile) : cdkOutDir;
+	const manifest = await assetLoader.loadManifest(manifestDir, candidate.stackName);
 	if (!manifest) return void 0;
 	return getDockerImageBySourceHash(manifest, resolved.containerUri)?.hash;
 }
@@ -94835,7 +94906,7 @@ async function localInvokeAgentCoreCommand(target, options) {
 			...options.profile && { profile: options.profile },
 			...Object.keys(context).length > 0 && { context }
 		};
-		const { stacks } = await synthesizer.synthesize(synthOpts);
+		const { stacks, assemblyDir } = await synthesizer.synthesize(synthOpts);
 		const resolvedTarget = await resolveSingleTarget(target, {
 			entries: listTargets(stacks).agentCoreRuntimes,
 			message: "Select an AgentCore Runtime to invoke",
@@ -94873,6 +94944,7 @@ async function localInvokeAgentCoreCommand(target, options) {
 		const boot = await bootAgentCoreContainer({
 			resolved,
 			options,
+			assemblyDir,
 			profileCredentials,
 			profileCredsFile,
 			stateProvider,
@@ -95083,9 +95155,9 @@ function isAgentCoreWatchEligible(protocol) {
 */
 async function bootAgentCoreContainer(args) {
 	const logger = getLogger();
-	const { resolved, options, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext, isMcp, isA2a } = args;
+	const { resolved, options, assemblyDir, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext, isMcp, isA2a } = args;
 	await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext);
-	const image = await resolveAgentCoreImage(resolved, options, loadedState);
+	const image = await resolveAgentCoreImage(resolved, options, assemblyDir, loadedState);
 	const { env: dockerEnv, sensitiveEnvKeys } = await buildContainerEnv(resolved, options, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext);
 	const hostPort = await pickFreePort();
 	const containerHost = options.containerHost;
@@ -95132,7 +95204,7 @@ async function bootAgentCoreContainer(args) {
 async function rebuildAgentCoreContainer(args) {
 	const { cleanupBefore, resolvedTarget, options, synthesizer, synthOpts, profileCredentials, profileCredsFile, stateProvider, isMcp, isA2a } = args;
 	await cleanupBefore();
-	const { stacks: newStacks } = await synthesizer.synthesize(synthOpts);
+	const { stacks: newStacks, assemblyDir: newAssemblyDir } = await synthesizer.synthesize(synthOpts);
 	const newCandidate = pickAgentCoreCandidateStack$1(resolvedTarget, newStacks);
 	const { context: newImageContext, loaded: newLoaded } = stateProvider && newCandidate ? await buildAgentCoreImageContext(newCandidate, stateProvider, options) : {
 		context: void 0,
@@ -95142,6 +95214,7 @@ async function rebuildAgentCoreContainer(args) {
 		...await bootAgentCoreContainer({
 			resolved: resolveAgentCoreTarget(resolvedTarget, newStacks, newImageContext),
 			options,
+			assemblyDir: newAssemblyDir,
 			profileCredentials,
 			profileCredsFile,
 			stateProvider,
@@ -95322,11 +95395,18 @@ async function resolveHostCredentialsForSigV4(options, resolved, loaded, region)
 * `loaded` is the `--from-cfn-stack` state record (when available) — threaded
 * through so a bare `--assume-role` can resolve the execution-role ARN from
 * state for the fromS3 download.
+*
+* `assemblyDir` is the ASSEMBLY ROOT as `Synthesizer.synthesize` reported it,
+* and is the containment bound for an asset path read out of the manifest
+* (issue go-to-k/cdkd#3489). It is NOT `options.output`: under
+* `-a <pre-synthesized dir>` synthesis is skipped and the assembly root is
+* `resolve(options.app)` while `--output` keeps its `cdk.out` default, so
+* binding to `--output` would refuse every asset of an untouched assembly.
 */
-async function resolveAgentCoreImage(resolved, options, loaded) {
+async function resolveAgentCoreImage(resolved, options, assemblyDir, loaded) {
 	const logger = getLogger();
 	const architecture = platformToArchitecture(options.platform);
-	if (resolved.codeArtifact) return resolveAgentCoreCodeImage(resolved, resolved.codeArtifact, options, architecture, loaded);
+	if (resolved.codeArtifact) return resolveAgentCoreCodeImage(resolved, resolved.codeArtifact, options, architecture, assemblyDir, loaded);
 	const containerUri = resolved.containerUri;
 	if (containerUri === void 0) throw new CdkdError(`AgentCore Runtime '${resolved.logicalId}' has neither a container image nor a code artifact to run.`, "LOCAL_INVOKE_AGENTCORE_NO_ARTIFACT");
 	const manifestPath = resolved.stack.assetManifestPath;
@@ -95362,7 +95442,7 @@ async function resolveAgentCoreImage(resolved, options, loaded) {
 *   run the same from-source build (generated Dockerfile → install deps → run
 *   EntryPoint).
 */
-async function resolveAgentCoreCodeImage(resolved, code, options, architecture, loaded) {
+async function resolveAgentCoreCodeImage(resolved, code, options, architecture, assemblyDir, loaded) {
 	if (code.s3Source) return resolveAgentCoreCodeImageFromS3(resolved, code, code.s3Source, options, architecture, loaded);
 	const manifestPath = resolved.stack.assetManifestPath;
 	if (!manifestPath) throw new CdkdError(`AgentCore Runtime '${resolved.logicalId}' uses a code artifact, but its stack has no asset manifest in cdk.out to read the bundle source from.`, "LOCAL_INVOKE_AGENTCORE_CODE_NO_MANIFEST");
@@ -95372,8 +95452,8 @@ async function resolveAgentCoreCodeImage(resolved, code, options, architecture,
 	const fileAssets = manifest ? loader.getFileAssets(manifest) : void 0;
 	const asset = fileAssets ? fileAssets.get(code.codeAssetHash) ?? findFileAssetByObjectKey(fileAssets, code.codeAssetHash) : void 0;
 	if (!asset) throw new CdkdError(`AgentCore Runtime '${resolved.logicalId}' code bundle (asset ${code.codeAssetHash}) was not found in the cdk.out asset manifest. ${getEmbedConfig().cliName} invoke-agentcore runs a local from-source build of a fromCodeAsset bundle — re-synthesize the app so the asset is staged in cdk.out and retry. (A fromS3 bundle is downloaded from S3 instead; this runtime has no literal Code.S3.Bucket.)`, "LOCAL_INVOKE_AGENTCORE_CODE_ASSET_NOT_FOUND");
-	const sourceDir = loader.getAssetSourcePath(cdkOutDir, asset);
-	if (!existsSync(sourceDir) || !statSync(sourceDir).isDirectory()) throw new CdkdError(`AgentCore Runtime '${resolved.logicalId}' code bundle source '${sourceDir}' does not exist or is not a directory. Re-synthesize the app and retry.`, "LOCAL_INVOKE_AGENTCORE_CODE_SOURCE_MISSING");
+	const sourceDir = loader.getAssetSourcePath(cdkOutDir, asset, assemblyDir);
+	if (!existsSync(sourceDir) || !statSync(sourceDir).isDirectory()) throw new CdkdError(`AgentCore Runtime '${displaySafe(resolved.logicalId)}' code bundle source '${displaySafe(sourceDir)}' does not exist or is not a directory. Re-synthesize the app and retry.`, "LOCAL_INVOKE_AGENTCORE_CODE_SOURCE_MISSING");
 	return buildAgentCoreCodeImage({
 		sourceDir,
 		runtime: code.runtime,
@@ -97031,6 +97111,31 @@ function applyProfileCredentialsOverlay(env, profileCreds, assumeRoleActive) {
 	else delete env["AWS_SESSION_TOKEN"];
 }
 /**
+* Where an inline `Code.ZipFile` body is written inside `dir`, refusing a
+* `Handler` whose module path escapes it (issue
+* [#3489](https://github.com/go-to-k/cdkd/issues/3489)).
+*
+* `Handler` is template-supplied, and `materializeInlineCode` turned it into a
+* FILENAME and then `mkdirSync(dirname, { recursive: true })` + `writeFileSync`
+* — so `Handler: '../../victim/evil.handler'` wrote attacker-chosen JavaScript
+* to an arbitrary host path. Measured: the file was created outside the temp
+* directory. That is a write, not the "we run their handler in a container"
+* trade cdkd already accepts.
+*
+* `dir` is a temp directory cdkd just created rather than the assembly, but
+* the containment question is identical and `resolveAssemblyPath` answers it
+* unchanged: `mkdtemp` sits under `/var/folders/...`, reached through macOS's
+* `/var -> /private/var` link, and the helper realpaths BOTH sides so that is
+* a no-op. Only the refusal's provenance differs, so it is passed explicitly.
+*
+* Exported for unit testing.
+*/
+function resolveInlineCodeFilePath(dir, modulePath, fileExtension, handler) {
+	const resolved = resolveAssemblyPath(dir, `${modulePath}${fileExtension}`);
+	if (!resolved.contained) throw new Error(`Handler '${displaySafe(handler)}' names a module path that ${renderAssemblyPathEscape(resolved, dir, "materialize it", "A Handler's module path names a file inside the function's own code directory; one that leaves it would write the inline Code.ZipFile body to an arbitrary path on this machine. Refusing to materialize it.")}`);
+	return resolved.path;
+}
+/**
 * Materialize an inline Lambda body (`Code.ZipFile`) to a tmpdir and
 * return the directory the container should mount at /var/task. The
 * filename is derived from the function's Handler property and the
@@ -97052,9 +97157,19 @@ function materializeInlineCode(handler, source, fileExtension) {
 	if (lastDot <= 0) throw new Error(`Handler '${handler}' is malformed: expected '<modulePath>.<exportName>'.`);
 	const modulePath = handler.substring(0, lastDot);
 	const dir = mkdtempSync(path.join(tmpdir(), "cdkd-local-invoke-"));
-	const filePath = path.join(dir, `${modulePath}${fileExtension}`);
-	mkdirSync(path.dirname(filePath), { recursive: true });
-	writeFileSync(filePath, source, "utf-8");
+	try {
+		const filePath = resolveInlineCodeFilePath(dir, modulePath, fileExtension, handler);
+		mkdirSync(path.dirname(filePath), { recursive: true });
+		writeFileSync(filePath, source, "utf-8");
+	} catch (e) {
+		try {
+			rmSync(dir, {
+				recursive: true,
+				force: true
+			});
+		} catch {}
+		throw e;
+	}
 	return dir;
 }
 /**
@@ -97228,4 +97343,4 @@ function buildProgram() {
 
 //#endregion
 export { buildProgram };
-//# sourceMappingURL=program-B1JOjOY4.js.map
+//# sourceMappingURL=program-Bh8a5wjj.js.map