@go-to-k/cdkd 0.66.0 → 0.68.0

package/dist/cli.js

@@ -708,10 +708,10 @@ var require_GraphQLError = __commonJS({
        */
       constructor(message, ...rawArgs) {
         var _this$nodes, _nodeLocations$, _ref;
-        const { nodes, source, positions, path, originalError, extensions } = toNormalizedOptions(rawArgs);
+        const { nodes, source, positions, path: path2, originalError, extensions } = toNormalizedOptions(rawArgs);
         super(message);
         this.name = "GraphQLError";
-        this.path = path !== null && path !== void 0 ? path : void 0;
+        this.path = path2 !== null && path2 !== void 0 ? path2 : void 0;
         this.originalError = originalError !== null && originalError !== void 0 ? originalError : void 0;
         this.nodes = undefinedIfEmpty(
           Array.isArray(nodes) ? nodes : nodes ? [nodes] : void 0
@@ -4173,14 +4173,14 @@ var require_visitor = __commonJS({
       let node = root;
       let key = void 0;
       let parent = void 0;
-      const path = [];
+      const path2 = [];
       const ancestors = [];
       do {
         index++;
         const isLeaving = index === keys.length;
         const isEdited = isLeaving && edits.length !== 0;
         if (isLeaving) {
-          key = ancestors.length === 0 ? void 0 : path[path.length - 1];
+          key = ancestors.length === 0 ? void 0 : path2[path2.length - 1];
           node = parent;
           parent = ancestors.pop();
           if (isEdited) {
@@ -4214,7 +4214,7 @@ var require_visitor = __commonJS({
           if (node === null || node === void 0) {
             continue;
           }
-          path.push(key);
+          path2.push(key);
         }
         let result;
         if (!Array.isArray(node)) {
@@ -4224,13 +4224,13 @@ var require_visitor = __commonJS({
             `Invalid AST Node: ${(0, _inspect.inspect)(node)}.`
           );
           const visitFn = isLeaving ? (_enterLeaveMap$get = enterLeaveMap.get(node.kind)) === null || _enterLeaveMap$get === void 0 ? void 0 : _enterLeaveMap$get.leave : (_enterLeaveMap$get2 = enterLeaveMap.get(node.kind)) === null || _enterLeaveMap$get2 === void 0 ? void 0 : _enterLeaveMap$get2.enter;
-          result = visitFn === null || visitFn === void 0 ? void 0 : visitFn.call(visitor, node, key, parent, path, ancestors);
+          result = visitFn === null || visitFn === void 0 ? void 0 : visitFn.call(visitor, node, key, parent, path2, ancestors);
           if (result === BREAK) {
             break;
           }
           if (result === false) {
             if (!isLeaving) {
-              path.pop();
+              path2.pop();
               continue;
             }
           } else if (result !== void 0) {
@@ -4239,7 +4239,7 @@ var require_visitor = __commonJS({
               if ((0, _ast.isNode)(result)) {
                 node = result;
               } else {
-                path.pop();
+                path2.pop();
                 continue;
               }
             }
@@ -4249,7 +4249,7 @@ var require_visitor = __commonJS({
           edits.push([key, node]);
         }
         if (isLeaving) {
-          path.pop();
+          path2.pop();
         } else {
           var _node$kind;
           stack = {
@@ -4374,16 +4374,16 @@ var require_printer = __commonJS({
       },
       // Document
       Document: {
-        leave: (node) => join6(node.definitions, "\n\n")
+        leave: (node) => join7(node.definitions, "\n\n")
       },
       OperationDefinition: {
         leave(node) {
-          const varDefs = hasMultilineItems(node.variableDefinitions) ? wrap("(\n", join6(node.variableDefinitions, "\n"), "\n)") : wrap("(", join6(node.variableDefinitions, ", "), ")");
-          const prefix = wrap("", node.description, "\n") + join6(
+          const varDefs = hasMultilineItems(node.variableDefinitions) ? wrap("(\n", join7(node.variableDefinitions, "\n"), "\n)") : wrap("(", join7(node.variableDefinitions, ", "), ")");
+          const prefix = wrap("", node.description, "\n") + join7(
             [
               node.operation,
-              join6([node.name, varDefs]),
-              join6(node.directives, " ")
+              join7([node.name, varDefs]),
+              join7(node.directives, " ")
             ],
             " "
           );
@@ -4391,7 +4391,7 @@ var require_printer = __commonJS({
         }
       },
       VariableDefinition: {
-        leave: ({ variable, type, defaultValue, directives, description }) => wrap("", description, "\n") + variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join6(directives, " "))
+        leave: ({ variable, type, defaultValue, directives, description }) => wrap("", description, "\n") + variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join7(directives, " "))
       },
       SelectionSet: {
         leave: ({ selections }) => block(selections)
@@ -4399,11 +4399,11 @@ var require_printer = __commonJS({
       Field: {
         leave({ alias, name, arguments: args, directives, selectionSet }) {
           const prefix = wrap("", alias, ": ") + name;
-          let argsLine = prefix + wrap("(", join6(args, ", "), ")");
+          let argsLine = prefix + wrap("(", join7(args, ", "), ")");
           if (argsLine.length > MAX_LINE_LENGTH) {
-            argsLine = prefix + wrap("(\n", indent(join6(args, "\n")), "\n)");
+            argsLine = prefix + wrap("(\n", indent(join7(args, "\n")), "\n)");
           }
-          return join6([argsLine, join6(directives, " "), selectionSet], " ");
+          return join7([argsLine, join7(directives, " "), selectionSet], " ");
         }
       },
       Argument: {
@@ -4411,14 +4411,14 @@ var require_printer = __commonJS({
       },
       // Fragments
       FragmentSpread: {
-        leave: ({ name, directives }) => "..." + name + wrap(" ", join6(directives, " "))
+        leave: ({ name, directives }) => "..." + name + wrap(" ", join7(directives, " "))
       },
       InlineFragment: {
-        leave: ({ typeCondition, directives, selectionSet }) => join6(
+        leave: ({ typeCondition, directives, selectionSet }) => join7(
           [
             "...",
             wrap("on ", typeCondition),
-            join6(directives, " "),
+            join7(directives, " "),
             selectionSet
           ],
           " "
@@ -4434,7 +4434,7 @@ var require_printer = __commonJS({
           description
         }) => wrap("", description, "\n") + // Note: fragment variable definitions are experimental and may be changed
         // or removed in the future.
-        `fragment ${name}${wrap("(", join6(variableDefinitions, ", "), ")")} on ${typeCondition} ${wrap("", join6(directives, " "), " ")}` + selectionSet
+        `fragment ${name}${wrap("(", join7(variableDefinitions, ", "), ")")} on ${typeCondition} ${wrap("", join7(directives, " "), " ")}` + selectionSet
       },
       // Value
       IntValue: {
@@ -4456,17 +4456,17 @@ var require_printer = __commonJS({
         leave: ({ value }) => value
       },
       ListValue: {
-        leave: ({ values }) => "[" + join6(values, ", ") + "]"
+        leave: ({ values }) => "[" + join7(values, ", ") + "]"
       },
       ObjectValue: {
-        leave: ({ fields }) => "{" + join6(fields, ", ") + "}"
+        leave: ({ fields }) => "{" + join7(fields, ", ") + "}"
       },
       ObjectField: {
         leave: ({ name, value }) => name + ": " + value
       },
       // Directive
       Directive: {
-        leave: ({ name, arguments: args }) => "@" + name + wrap("(", join6(args, ", "), ")")
+        leave: ({ name, arguments: args }) => "@" + name + wrap("(", join7(args, ", "), ")")
       },
       // Type
       NamedType: {
@@ -4480,61 +4480,61 @@ var require_printer = __commonJS({
       },
       // Type System Definitions
       SchemaDefinition: {
-        leave: ({ description, directives, operationTypes }) => wrap("", description, "\n") + join6(["schema", join6(directives, " "), block(operationTypes)], " ")
+        leave: ({ description, directives, operationTypes }) => wrap("", description, "\n") + join7(["schema", join7(directives, " "), block(operationTypes)], " ")
       },
       OperationTypeDefinition: {
         leave: ({ operation, type }) => operation + ": " + type
       },
       ScalarTypeDefinition: {
-        leave: ({ description, name, directives }) => wrap("", description, "\n") + join6(["scalar", name, join6(directives, " ")], " ")
+        leave: ({ description, name, directives }) => wrap("", description, "\n") + join7(["scalar", name, join7(directives, " ")], " ")
       },
       ObjectTypeDefinition: {
-        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join6(
+        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join7(
           [
             "type",
             name,
-            wrap("implements ", join6(interfaces, " & ")),
-            join6(directives, " "),
+            wrap("implements ", join7(interfaces, " & ")),
+            join7(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       FieldDefinition: {
-        leave: ({ description, name, arguments: args, type, directives }) => wrap("", description, "\n") + name + (hasMultilineItems(args) ? wrap("(\n", indent(join6(args, "\n")), "\n)") : wrap("(", join6(args, ", "), ")")) + ": " + type + wrap(" ", join6(directives, " "))
+        leave: ({ description, name, arguments: args, type, directives }) => wrap("", description, "\n") + name + (hasMultilineItems(args) ? wrap("(\n", indent(join7(args, "\n")), "\n)") : wrap("(", join7(args, ", "), ")")) + ": " + type + wrap(" ", join7(directives, " "))
       },
       InputValueDefinition: {
-        leave: ({ description, name, type, defaultValue, directives }) => wrap("", description, "\n") + join6(
-          [name + ": " + type, wrap("= ", defaultValue), join6(directives, " ")],
+        leave: ({ description, name, type, defaultValue, directives }) => wrap("", description, "\n") + join7(
+          [name + ": " + type, wrap("= ", defaultValue), join7(directives, " ")],
           " "
         )
       },
       InterfaceTypeDefinition: {
-        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join6(
+        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join7(
           [
             "interface",
             name,
-            wrap("implements ", join6(interfaces, " & ")),
-            join6(directives, " "),
+            wrap("implements ", join7(interfaces, " & ")),
+            join7(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       UnionTypeDefinition: {
-        leave: ({ description, name, directives, types }) => wrap("", description, "\n") + join6(
-          ["union", name, join6(directives, " "), wrap("= ", join6(types, " | "))],
+        leave: ({ description, name, directives, types }) => wrap("", description, "\n") + join7(
+          ["union", name, join7(directives, " "), wrap("= ", join7(types, " | "))],
           " "
         )
       },
       EnumTypeDefinition: {
-        leave: ({ description, name, directives, values }) => wrap("", description, "\n") + join6(["enum", name, join6(directives, " "), block(values)], " ")
+        leave: ({ description, name, directives, values }) => wrap("", description, "\n") + join7(["enum", name, join7(directives, " "), block(values)], " ")
       },
       EnumValueDefinition: {
-        leave: ({ description, name, directives }) => wrap("", description, "\n") + join6([name, join6(directives, " ")], " ")
+        leave: ({ description, name, directives }) => wrap("", description, "\n") + join7([name, join7(directives, " ")], " ")
       },
       InputObjectTypeDefinition: {
-        leave: ({ description, name, directives, fields }) => wrap("", description, "\n") + join6(["input", name, join6(directives, " "), block(fields)], " ")
+        leave: ({ description, name, directives, fields }) => wrap("", description, "\n") + join7(["input", name, join7(directives, " "), block(fields)], " ")
       },
       DirectiveDefinition: {
         leave: ({
@@ -4544,84 +4544,84 @@ var require_printer = __commonJS({
           directives,
           repeatable,
           locations
-        }) => wrap("", description, "\n") + "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent(join6(args, "\n")), "\n)") : wrap("(", join6(args, ", "), ")")) + wrap(" ", join6(directives, " ")) + (repeatable ? " repeatable" : "") + " on " + join6(locations, " | ")
+        }) => wrap("", description, "\n") + "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent(join7(args, "\n")), "\n)") : wrap("(", join7(args, ", "), ")")) + wrap(" ", join7(directives, " ")) + (repeatable ? " repeatable" : "") + " on " + join7(locations, " | ")
       },
       SchemaExtension: {
-        leave: ({ directives, operationTypes }) => join6(
-          ["extend schema", join6(directives, " "), block(operationTypes)],
+        leave: ({ directives, operationTypes }) => join7(
+          ["extend schema", join7(directives, " "), block(operationTypes)],
           " "
         )
       },
       ScalarTypeExtension: {
-        leave: ({ name, directives }) => join6(["extend scalar", name, join6(directives, " ")], " ")
+        leave: ({ name, directives }) => join7(["extend scalar", name, join7(directives, " ")], " ")
       },
       ObjectTypeExtension: {
-        leave: ({ name, interfaces, directives, fields }) => join6(
+        leave: ({ name, interfaces, directives, fields }) => join7(
           [
             "extend type",
             name,
-            wrap("implements ", join6(interfaces, " & ")),
-            join6(directives, " "),
+            wrap("implements ", join7(interfaces, " & ")),
+            join7(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       InterfaceTypeExtension: {
-        leave: ({ name, interfaces, directives, fields }) => join6(
+        leave: ({ name, interfaces, directives, fields }) => join7(
           [
             "extend interface",
             name,
-            wrap("implements ", join6(interfaces, " & ")),
-            join6(directives, " "),
+            wrap("implements ", join7(interfaces, " & ")),
+            join7(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       UnionTypeExtension: {
-        leave: ({ name, directives, types }) => join6(
+        leave: ({ name, directives, types }) => join7(
           [
             "extend union",
             name,
-            join6(directives, " "),
-            wrap("= ", join6(types, " | "))
+            join7(directives, " "),
+            wrap("= ", join7(types, " | "))
           ],
           " "
         )
       },
       EnumTypeExtension: {
-        leave: ({ name, directives, values }) => join6(["extend enum", name, join6(directives, " "), block(values)], " ")
+        leave: ({ name, directives, values }) => join7(["extend enum", name, join7(directives, " "), block(values)], " ")
       },
       InputObjectTypeExtension: {
-        leave: ({ name, directives, fields }) => join6(["extend input", name, join6(directives, " "), block(fields)], " ")
+        leave: ({ name, directives, fields }) => join7(["extend input", name, join7(directives, " "), block(fields)], " ")
       },
       DirectiveExtension: {
-        leave: ({ name, directives }) => join6(["extend directive @" + name, join6(directives, " ")], " ")
+        leave: ({ name, directives }) => join7(["extend directive @" + name, join7(directives, " ")], " ")
       },
       // Schema Coordinates
       TypeCoordinate: {
         leave: ({ name }) => name
       },
       MemberCoordinate: {
-        leave: ({ name, memberName }) => join6([name, wrap(".", memberName)])
+        leave: ({ name, memberName }) => join7([name, wrap(".", memberName)])
       },
       ArgumentCoordinate: {
-        leave: ({ name, fieldName, argumentName }) => join6([name, wrap(".", fieldName), wrap("(", argumentName, ":)")])
+        leave: ({ name, fieldName, argumentName }) => join7([name, wrap(".", fieldName), wrap("(", argumentName, ":)")])
       },
       DirectiveCoordinate: {
-        leave: ({ name }) => join6(["@", name])
+        leave: ({ name }) => join7(["@", name])
       },
       DirectiveArgumentCoordinate: {
-        leave: ({ name, argumentName }) => join6(["@", name, wrap("(", argumentName, ":)")])
+        leave: ({ name, argumentName }) => join7(["@", name, wrap("(", argumentName, ":)")])
       }
     };
-    function join6(maybeArray, separator = "") {
+    function join7(maybeArray, separator = "") {
       var _maybeArray$filter$jo;
       return (_maybeArray$filter$jo = maybeArray === null || maybeArray === void 0 ? void 0 : maybeArray.filter((x) => x).join(separator)) !== null && _maybeArray$filter$jo !== void 0 ? _maybeArray$filter$jo : "";
     }
     function block(array) {
-      return wrap("{\n", indent(join6(array, "\n")), "\n}");
+      return wrap("{\n", indent(join7(array, "\n")), "\n}");
     }
     function wrap(start, maybeString, end = "") {
       return maybeString != null && maybeString !== "" ? start + maybeString + end : "";
@@ -9578,8 +9578,8 @@ var require_printPathArray = __commonJS({
       value: true
     });
     exports.printPathArray = printPathArray;
-    function printPathArray(path) {
-      return path.map(
+    function printPathArray(path2) {
+      return path2.map(
         (key) => typeof key === "number" ? "[" + key.toString() + "]" : "." + key
       ).join("");
     }
@@ -9602,9 +9602,9 @@ var require_Path = __commonJS({
         typename
       };
     }
-    function pathToArray(path) {
+    function pathToArray(path2) {
       const flattened = [];
-      let curr = path;
+      let curr = path2;
       while (curr) {
         flattened.push(curr.key);
         curr = curr.prev;
@@ -9635,21 +9635,21 @@ var require_coerceInputValue = __commonJS({
     function coerceInputValue(inputValue, type, onError = defaultOnError) {
       return coerceInputValueImpl(inputValue, type, onError, void 0);
     }
-    function defaultOnError(path, invalidValue, error) {
+    function defaultOnError(path2, invalidValue, error) {
       let errorPrefix = "Invalid value " + (0, _inspect.inspect)(invalidValue);
-      if (path.length > 0) {
-        errorPrefix += ` at "value${(0, _printPathArray.printPathArray)(path)}"`;
+      if (path2.length > 0) {
+        errorPrefix += ` at "value${(0, _printPathArray.printPathArray)(path2)}"`;
       }
       error.message = errorPrefix + ": " + error.message;
       throw error;
     }
-    function coerceInputValueImpl(inputValue, type, onError, path) {
+    function coerceInputValueImpl(inputValue, type, onError, path2) {
       if ((0, _definition.isNonNullType)(type)) {
         if (inputValue != null) {
-          return coerceInputValueImpl(inputValue, type.ofType, onError, path);
+          return coerceInputValueImpl(inputValue, type.ofType, onError, path2);
         }
         onError(
-          (0, _Path.pathToArray)(path),
+          (0, _Path.pathToArray)(path2),
           inputValue,
           new _GraphQLError.GraphQLError(
             `Expected non-nullable type "${(0, _inspect.inspect)(
@@ -9666,16 +9666,16 @@ var require_coerceInputValue = __commonJS({
         const itemType = type.ofType;
         if ((0, _isIterableObject.isIterableObject)(inputValue)) {
           return Array.from(inputValue, (itemValue, index) => {
-            const itemPath = (0, _Path.addPath)(path, index, void 0);
+            const itemPath = (0, _Path.addPath)(path2, index, void 0);
             return coerceInputValueImpl(itemValue, itemType, onError, itemPath);
           });
         }
-        return [coerceInputValueImpl(inputValue, itemType, onError, path)];
+        return [coerceInputValueImpl(inputValue, itemType, onError, path2)];
       }
       if ((0, _definition.isInputObjectType)(type)) {
         if (!(0, _isObjectLike.isObjectLike)(inputValue) || Array.isArray(inputValue)) {
           onError(
-            (0, _Path.pathToArray)(path),
+            (0, _Path.pathToArray)(path2),
             inputValue,
             new _GraphQLError.GraphQLError(
               `Expected type "${type.name}" to be an object.`
@@ -9693,7 +9693,7 @@ var require_coerceInputValue = __commonJS({
             } else if ((0, _definition.isNonNullType)(field.type)) {
               const typeStr = (0, _inspect.inspect)(field.type);
               onError(
-                (0, _Path.pathToArray)(path),
+                (0, _Path.pathToArray)(path2),
                 inputValue,
                 new _GraphQLError.GraphQLError(
                   `Field "${field.name}" of required type "${typeStr}" was not provided.`
@@ -9706,7 +9706,7 @@ var require_coerceInputValue = __commonJS({
             fieldValue,
             field.type,
             onError,
-            (0, _Path.addPath)(path, field.name, type.name)
+            (0, _Path.addPath)(path2, field.name, type.name)
           );
         }
         for (const fieldName of Object.keys(inputValue)) {
@@ -9716,7 +9716,7 @@ var require_coerceInputValue = __commonJS({
               Object.keys(type.getFields())
             );
             onError(
-              (0, _Path.pathToArray)(path),
+              (0, _Path.pathToArray)(path2),
               inputValue,
               new _GraphQLError.GraphQLError(
                 `Field "${fieldName}" is not defined by type "${type.name}".` + (0, _didYouMean.didYouMean)(suggestions)
@@ -9728,7 +9728,7 @@ var require_coerceInputValue = __commonJS({
           const keys = Object.keys(coercedValue);
           if (keys.length !== 1) {
             onError(
-              (0, _Path.pathToArray)(path),
+              (0, _Path.pathToArray)(path2),
               inputValue,
               new _GraphQLError.GraphQLError(
                 `Exactly one key must be specified for OneOf type "${type.name}".`
@@ -9739,7 +9739,7 @@ var require_coerceInputValue = __commonJS({
           const value = coercedValue[key];
           if (value === null) {
             onError(
-              (0, _Path.pathToArray)(path).concat(key),
+              (0, _Path.pathToArray)(path2).concat(key),
               value,
               new _GraphQLError.GraphQLError(`Field "${key}" must be non-null.`)
             );
@@ -9753,10 +9753,10 @@ var require_coerceInputValue = __commonJS({
           parseResult = type.parseValue(inputValue);
         } catch (error) {
           if (error instanceof _GraphQLError.GraphQLError) {
-            onError((0, _Path.pathToArray)(path), inputValue, error);
+            onError((0, _Path.pathToArray)(path2), inputValue, error);
           } else {
             onError(
-              (0, _Path.pathToArray)(path),
+              (0, _Path.pathToArray)(path2),
               inputValue,
               new _GraphQLError.GraphQLError(
                 `Expected type "${type.name}". ` + error.message,
@@ -9770,7 +9770,7 @@ var require_coerceInputValue = __commonJS({
         }
         if (parseResult === void 0) {
           onError(
-            (0, _Path.pathToArray)(path),
+            (0, _Path.pathToArray)(path2),
             inputValue,
             new _GraphQLError.GraphQLError(`Expected type "${type.name}".`)
           );
@@ -10011,11 +10011,11 @@ var require_values = __commonJS({
         coercedValues[varName] = (0, _coerceInputValue.coerceInputValue)(
           value,
           varType,
-          (path, invalidValue, error) => {
+          (path2, invalidValue, error) => {
             let prefix = `Variable "$${varName}" got invalid value ` + (0, _inspect.inspect)(invalidValue);
-            if (path.length > 0) {
+            if (path2.length > 0) {
               prefix += ` at "${varName}${(0, _printPathArray.printPathArray)(
-                path
+                path2
               )}"`;
             }
             onError(
@@ -11745,7 +11745,7 @@ var require_locatedError = __commonJS({
     exports.locatedError = locatedError;
     var _toError = require_toError();
     var _GraphQLError = require_GraphQLError();
-    function locatedError(rawOriginalError, nodes, path) {
+    function locatedError(rawOriginalError, nodes, path2) {
       var _nodes;
       const originalError = (0, _toError.toError)(rawOriginalError);
       if (isLocatedGraphQLError(originalError)) {
@@ -11755,7 +11755,7 @@ var require_locatedError = __commonJS({
         nodes: (_nodes = originalError.nodes) !== null && _nodes !== void 0 ? _nodes : nodes,
         source: originalError.source,
         positions: originalError.positions,
-        path,
+        path: path2,
         originalError
       });
     }
@@ -11815,20 +11815,20 @@ var require_execute = __commonJS({
       get errors() {
         return this._errors;
       }
-      add(error, path) {
-        if (this._hasNulledPosition(path)) {
+      add(error, path2) {
+        if (this._hasNulledPosition(path2)) {
           return;
         }
-        this._errorPositions.add(path);
+        this._errorPositions.add(path2);
         this._errors.push(error);
       }
       _hasNulledPosition(startPath) {
-        let path = startPath;
-        while (path !== void 0) {
-          if (this._errorPositions.has(path)) {
+        let path2 = startPath;
+        while (path2 !== void 0) {
+          if (this._errorPositions.has(path2)) {
             return true;
           }
-          path = path.prev;
+          path2 = path2.prev;
         }
         return this._errorPositions.has(void 0);
       }
@@ -11977,27 +11977,27 @@ var require_execute = __commonJS({
         rootType,
         operation.selectionSet
       );
-      const path = void 0;
+      const path2 = void 0;
       switch (operation.operation) {
         case _ast.OperationTypeNode.QUERY:
-          return executeFields(exeContext, rootType, rootValue, path, rootFields);
+          return executeFields(exeContext, rootType, rootValue, path2, rootFields);
         case _ast.OperationTypeNode.MUTATION:
           return executeFieldsSerially(
             exeContext,
             rootType,
             rootValue,
-            path,
+            path2,
             rootFields
           );
         case _ast.OperationTypeNode.SUBSCRIPTION:
-          return executeFields(exeContext, rootType, rootValue, path, rootFields);
+          return executeFields(exeContext, rootType, rootValue, path2, rootFields);
       }
     }
-    function executeFieldsSerially(exeContext, parentType, sourceValue, path, fields) {
+    function executeFieldsSerially(exeContext, parentType, sourceValue, path2, fields) {
       return (0, _promiseReduce.promiseReduce)(
         fields.entries(),
         (results, [responseName, fieldNodes]) => {
-          const fieldPath = (0, _Path.addPath)(path, responseName, parentType.name);
+          const fieldPath = (0, _Path.addPath)(path2, responseName, parentType.name);
           const result = executeField(
             exeContext,
             parentType,
@@ -12020,12 +12020,12 @@ var require_execute = __commonJS({
         /* @__PURE__ */ Object.create(null)
       );
     }
-    function executeFields(exeContext, parentType, sourceValue, path, fields) {
+    function executeFields(exeContext, parentType, sourceValue, path2, fields) {
       const results = /* @__PURE__ */ Object.create(null);
       let containsPromise = false;
       try {
         for (const [responseName, fieldNodes] of fields.entries()) {
-          const fieldPath = (0, _Path.addPath)(path, responseName, parentType.name);
+          const fieldPath = (0, _Path.addPath)(path2, responseName, parentType.name);
           const result = executeField(
             exeContext,
             parentType,
@@ -12053,7 +12053,7 @@ var require_execute = __commonJS({
       }
       return (0, _promiseForObject.promiseForObject)(results);
     }
-    function executeField(exeContext, parentType, source, fieldNodes, path) {
+    function executeField(exeContext, parentType, source, fieldNodes, path2) {
       var _fieldDef$resolve;
       const fieldDef = getFieldDef(exeContext.schema, parentType, fieldNodes[0]);
       if (!fieldDef) {
@@ -12066,7 +12066,7 @@ var require_execute = __commonJS({
         fieldDef,
         fieldNodes,
         parentType,
-        path
+        path2
       );
       try {
         const args = (0, _values.getArgumentValues)(
@@ -12079,7 +12079,7 @@ var require_execute = __commonJS({
         let completed;
         if ((0, _isPromise.isPromise)(result)) {
           completed = result.then(
-            (resolved) => completeValue(exeContext, returnType, fieldNodes, info, path, resolved)
+            (resolved) => completeValue(exeContext, returnType, fieldNodes, info, path2, resolved)
           );
         } else {
           completed = completeValue(
@@ -12087,7 +12087,7 @@ var require_execute = __commonJS({
             returnType,
             fieldNodes,
             info,
-            path,
+            path2,
             result
           );
         }
@@ -12096,9 +12096,9 @@ var require_execute = __commonJS({
             const error = (0, _locatedError.locatedError)(
               rawError,
               fieldNodes,
-              (0, _Path.pathToArray)(path)
+              (0, _Path.pathToArray)(path2)
             );
-            return handleFieldError(error, returnType, path, exeContext);
+            return handleFieldError(error, returnType, path2, exeContext);
           });
         }
         return completed;
@@ -12106,18 +12106,18 @@ var require_execute = __commonJS({
         const error = (0, _locatedError.locatedError)(
           rawError,
           fieldNodes,
-          (0, _Path.pathToArray)(path)
+          (0, _Path.pathToArray)(path2)
         );
-        return handleFieldError(error, returnType, path, exeContext);
+        return handleFieldError(error, returnType, path2, exeContext);
       }
     }
-    function buildResolveInfo(exeContext, fieldDef, fieldNodes, parentType, path) {
+    function buildResolveInfo(exeContext, fieldDef, fieldNodes, parentType, path2) {
       return {
         fieldName: fieldDef.name,
         fieldNodes,
         returnType: fieldDef.type,
         parentType,
-        path,
+        path: path2,
         schema: exeContext.schema,
         fragments: exeContext.fragments,
         rootValue: exeContext.rootValue,
@@ -12125,14 +12125,14 @@ var require_execute = __commonJS({
         variableValues: exeContext.variableValues
       };
     }
-    function handleFieldError(error, returnType, path, exeContext) {
+    function handleFieldError(error, returnType, path2, exeContext) {
       if ((0, _definition.isNonNullType)(returnType)) {
         throw error;
       }
-      exeContext.collectedErrors.add(error, path);
+      exeContext.collectedErrors.add(error, path2);
       return null;
     }
-    function completeValue(exeContext, returnType, fieldNodes, info, path, result) {
+    function completeValue(exeContext, returnType, fieldNodes, info, path2, result) {
       if (result instanceof Error) {
         throw result;
       }
@@ -12142,7 +12142,7 @@ var require_execute = __commonJS({
           returnType.ofType,
           fieldNodes,
           info,
-          path,
+          path2,
           result
         );
         if (completed === null) {
@@ -12161,7 +12161,7 @@ var require_execute = __commonJS({
           returnType,
           fieldNodes,
           info,
-          path,
+          path2,
           result
         );
       }
@@ -12174,7 +12174,7 @@ var require_execute = __commonJS({
           returnType,
           fieldNodes,
           info,
-          path,
+          path2,
           result
         );
       }
@@ -12184,7 +12184,7 @@ var require_execute = __commonJS({
           returnType,
           fieldNodes,
           info,
-          path,
+          path2,
           result
         );
       }
@@ -12193,7 +12193,7 @@ var require_execute = __commonJS({
         "Cannot complete value of unexpected output type: " + (0, _inspect.inspect)(returnType)
       );
     }
-    function completeListValue(exeContext, returnType, fieldNodes, info, path, result) {
+    function completeListValue(exeContext, returnType, fieldNodes, info, path2, result) {
       if (!(0, _isIterableObject.isIterableObject)(result)) {
         throw new _GraphQLError.GraphQLError(
           `Expected Iterable, but did not find one for field "${info.parentType.name}.${info.fieldName}".`
@@ -12202,7 +12202,7 @@ var require_execute = __commonJS({
       const itemType = returnType.ofType;
       let containsPromise = false;
       const completedResults = Array.from(result, (item, index) => {
-        const itemPath = (0, _Path.addPath)(path, index, void 0);
+        const itemPath = (0, _Path.addPath)(path2, index, void 0);
         try {
           let completedItem;
           if ((0, _isPromise.isPromise)(item)) {
@@ -12260,7 +12260,7 @@ var require_execute = __commonJS({
       }
       return serializedResult;
     }
-    function completeAbstractValue(exeContext, returnType, fieldNodes, info, path, result) {
+    function completeAbstractValue(exeContext, returnType, fieldNodes, info, path2, result) {
       var _returnType$resolveTy;
       const resolveTypeFn = (_returnType$resolveTy = returnType.resolveType) !== null && _returnType$resolveTy !== void 0 ? _returnType$resolveTy : exeContext.typeResolver;
       const contextValue = exeContext.contextValue;
@@ -12279,7 +12279,7 @@ var require_execute = __commonJS({
             ),
             fieldNodes,
             info,
-            path,
+            path2,
             result
           )
         );
@@ -12296,7 +12296,7 @@ var require_execute = __commonJS({
         ),
         fieldNodes,
         info,
-        path,
+        path2,
         result
       );
     }
@@ -12344,7 +12344,7 @@ var require_execute = __commonJS({
       }
       return runtimeType;
     }
-    function completeObjectValue(exeContext, returnType, fieldNodes, info, path, result) {
+    function completeObjectValue(exeContext, returnType, fieldNodes, info, path2, result) {
       const subFieldNodes = collectSubfields(exeContext, returnType, fieldNodes);
       if (returnType.isTypeOf) {
         const isTypeOf = returnType.isTypeOf(result, exeContext.contextValue, info);
@@ -12357,7 +12357,7 @@ var require_execute = __commonJS({
               exeContext,
               returnType,
               result,
-              path,
+              path2,
               subFieldNodes
             );
           });
@@ -12366,7 +12366,7 @@ var require_execute = __commonJS({
           throw invalidReturnTypeError(returnType, result, fieldNodes);
         }
       }
-      return executeFields(exeContext, returnType, result, path, subFieldNodes);
+      return executeFields(exeContext, returnType, result, path2, subFieldNodes);
     }
     function invalidReturnTypeError(returnType, result, fieldNodes) {
       return new _GraphQLError.GraphQLError(
@@ -12448,7 +12448,7 @@ var require_graphql = __commonJS({
     var _validate2 = require_validate2();
     var _execute = require_execute();
     function graphql(args) {
-      return new Promise((resolve4) => resolve4(graphqlImpl(args)));
+      return new Promise((resolve5) => resolve5(graphqlImpl(args)));
     }
     function graphqlSync(args) {
       const result = graphqlImpl(args);
@@ -13450,13 +13450,13 @@ var require_subscribe = __commonJS({
           }
         );
       }
-      const path = (0, _Path.addPath)(void 0, responseName, rootType.name);
+      const path2 = (0, _Path.addPath)(void 0, responseName, rootType.name);
       const info = (0, _execute.buildResolveInfo)(
         exeContext,
         fieldDef,
         fieldNodes,
         rootType,
-        path
+        path2
       );
       try {
         var _fieldDef$subscribe;
@@ -13476,7 +13476,7 @@ var require_subscribe = __commonJS({
         throw (0, _locatedError.locatedError)(
           error,
           fieldNodes,
-          (0, _Path.pathToArray)(path)
+          (0, _Path.pathToArray)(path2)
         );
       }
     }
@@ -17797,7 +17797,7 @@ var require_graphql2 = __commonJS({
 });
 
 // src/cli/index.ts
-import { Command as Command14 } from "commander";
+import { Command as Command15 } from "commander";
 
 // src/cli/commands/bootstrap.ts
 import { Command, Option as Option2 } from "commander";
@@ -18855,7 +18855,7 @@ var IntrinsicFunctionResolver = class {
               this.logger.debug(
                 `VPC ${physicalId} IPv6 CIDR still associating (attempt ${attempt}/${maxAttempts}), waiting...`
               );
-              await new Promise((resolve4) => setTimeout(resolve4, 2e3));
+              await new Promise((resolve5) => setTimeout(resolve5, 2e3));
             }
             this.logger.warn(
               `VPC ${physicalId} IPv6 CIDR did not reach 'associated' state after ${maxAttempts} attempts`
@@ -19740,7 +19740,7 @@ var DagExecutor = class {
   async execute(concurrency, fn, cancelled = () => false) {
     let active = 0;
     const errors = [];
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const dispatch = () => {
         let changed = true;
         while (changed) {
@@ -19802,7 +19802,7 @@ var DagExecutor = class {
             );
             return;
           }
-          resolve4();
+          resolve5();
         }
       };
       dispatch();
@@ -20483,7 +20483,7 @@ Error: ${err.message || "Unknown error"}`,
    * Sleep for specified milliseconds
    */
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Check if a resource type is supported by Cloud Control API
@@ -21217,7 +21217,7 @@ var CustomResourceProvider = class _CustomResourceProvider {
     return result;
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Adopt an existing custom resource into cdkd state.
@@ -21647,7 +21647,7 @@ function isRetryableTransientError(error, message) {
 }
 
 // src/deployment/retry.ts
-var defaultSleep = (ms) => new Promise((resolve4) => setTimeout(resolve4, ms));
+var defaultSleep = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms));
 async function withRetry(operation, logicalId, opts = {}) {
   const maxRetries = opts.maxRetries ?? 8;
   const initialDelayMs = opts.initialDelayMs ?? 1e3;
@@ -21664,15 +21664,15 @@ async function withRetry(operation, logicalId, opts = {}) {
       if (!retryable || attempt >= maxRetries) {
         throw error;
       }
-      const delay = Math.min(initialDelayMs * Math.pow(2, attempt), maxDelayMs);
+      const delay2 = Math.min(initialDelayMs * Math.pow(2, attempt), maxDelayMs);
       opts.logger?.debug(
-        `  \u23F3 Retrying ${logicalId} in ${delay / 1e3}s (attempt ${attempt + 1}/${maxRetries}) - ${message}`
+        `  \u23F3 Retrying ${logicalId} in ${delay2 / 1e3}s (attempt ${attempt + 1}/${maxRetries}) - ${message}`
       );
-      for (let waited = 0; waited < delay; waited += 1e3) {
+      for (let waited = 0; waited < delay2; waited += 1e3) {
         if (opts.isInterrupted?.()) {
           throw opts.onInterrupted ? opts.onInterrupted() : new Error("Interrupted");
         }
-        await sleep(Math.min(1e3, delay - waited));
+        await sleep(Math.min(1e3, delay2 - waited));
       }
     }
   }
@@ -21702,7 +21702,7 @@ function validateOptions(opts) {
 async function withResourceDeadline(operation, opts) {
   validateOptions(opts);
   const startedAt = Date.now();
-  return new Promise((resolve4, reject) => {
+  return new Promise((resolve5, reject) => {
     let settled = false;
     let warnTimer;
     let timeoutTimer;
@@ -21742,7 +21742,7 @@ async function withResourceDeadline(operation, opts) {
           return;
         settled = true;
         cleanup();
-        resolve4(value);
+        resolve5(value);
       },
       (err) => {
         if (settled)
@@ -23742,7 +23742,7 @@ var AppExecutor = class {
    * Spawn subprocess and wait for completion
    */
   spawn(commandLine, env) {
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const proc = spawn(commandLine, {
         stdio: ["ignore", "pipe", "pipe"],
         shell: true,
@@ -23768,7 +23768,7 @@ var AppExecutor = class {
       });
       proc.on("close", (code) => {
         if (code === 0) {
-          resolve4();
+          resolve5();
         } else {
           const stderr = stderrChunks.join("\n");
           reject(
@@ -24480,8 +24480,8 @@ var CcApiContextProvider = class {
   /**
    * Get nested property value using dot notation
    */
-  getNestedProperty(obj, path) {
-    const parts = path.split(".");
+  getNestedProperty(obj, path2) {
+    const parts = path2.split(".");
     let current = obj;
     for (const part of parts) {
       if (current === null || current === void 0 || typeof current !== "object") {
@@ -25290,11 +25290,11 @@ var FileAssetPublisher = class {
    */
   async uploadZip(client, dirPath, bucket, key) {
     const archiver = await import("archiver");
-    const body = await new Promise((resolve4, reject) => {
+    const body = await new Promise((resolve5, reject) => {
       const chunks = [];
       const archive = archiver.default("zip", { zlib: { level: 9 } });
       archive.on("data", (chunk) => chunks.push(chunk));
-      archive.on("end", () => resolve4(Buffer.concat(chunks)));
+      archive.on("end", () => resolve5(Buffer.concat(chunks)));
       archive.on("error", reject);
       const stat = statSync2(dirPath);
       if (stat.isDirectory()) {
@@ -25457,7 +25457,7 @@ var DockerAssetPublisher = class {
     const token = Buffer.from(authData.authorizationToken, "base64").toString();
     const [username, password] = token.split(":");
     const endpoint = authData.proxyEndpoint || `https://${accountId}.dkr.ecr.${region}.amazonaws.com`;
-    await new Promise((resolve4, reject) => {
+    await new Promise((resolve5, reject) => {
       const proc = spawn2(
         "docker",
         ["login", "--username", username, "--password-stdin", endpoint],
@@ -25471,7 +25471,7 @@ var DockerAssetPublisher = class {
       });
       proc.on("close", (code) => {
         if (code === 0) {
-          resolve4();
+          resolve5();
         } else {
           reject(new AssetError(`ECR login failed: ${stderr.trim()}`));
         }
@@ -25524,7 +25524,7 @@ var WorkGraph = class {
   async execute(concurrency, fn) {
     const active = { "asset-build": 0, "asset-publish": 0, stack: 0 };
     const errors = [];
-    return new Promise((resolve4, reject) => {
+    return new Promise((resolve5, reject) => {
       const dispatch = () => {
         const ready = [];
         for (const node of this.nodes.values()) {
@@ -25596,7 +25596,7 @@ ${msg}`
             );
             return;
           }
-          resolve4();
+          resolve5();
         }
       };
       dispatch();
@@ -26587,7 +26587,7 @@ var LockManager = class {
           this.logger.info(
             `Stack '${stackName}' (${region}) is locked by ${lockInfo2.owner}${lockInfo2.operation ? ` (operation: ${lockInfo2.operation})` : ""}. Lock expires in ${this.formatDuration(remainingMs)}. Retrying in ${this.formatDuration(retryDelay)}... (attempt ${attempt + 1}/${maxRetries})`
           );
-          await new Promise((resolve4) => setTimeout(resolve4, retryDelay));
+          await new Promise((resolve5) => setTimeout(resolve5, retryDelay));
           continue;
         }
       }
@@ -26835,11 +26835,11 @@ var DagBuilder = class {
     const cycles = [];
     const visited = /* @__PURE__ */ new Set();
     const recursionStack = /* @__PURE__ */ new Set();
-    const path = [];
+    const path2 = [];
     const dfs = (node) => {
       visited.add(node);
       recursionStack.add(node);
-      path.push(node);
+      path2.push(node);
       const successors = graph.successors(node) || [];
       for (const successor of successors) {
         if (!visited.has(successor)) {
@@ -26847,14 +26847,14 @@ var DagBuilder = class {
             return true;
           }
         } else if (recursionStack.has(successor)) {
-          const cycleStart = path.indexOf(successor);
-          const cycle = path.slice(cycleStart);
+          const cycleStart = path2.indexOf(successor);
+          const cycle = path2.slice(cycleStart);
           cycle.push(successor);
           cycles.push(cycle);
           return true;
         }
       }
-      path.pop();
+      path2.pop();
       recursionStack.delete(node);
       return false;
     };
@@ -28882,13 +28882,13 @@ var IAMInstanceProfileProvider = class {
       properties["InstanceProfileName"] || logicalId,
       { maxLength: 128 }
     );
-    const path = properties["Path"] || "/";
+    const path2 = properties["Path"] || "/";
     const roles = properties["Roles"];
     try {
       const response = await this.iamClient.send(
         new CreateInstanceProfileCommand({
           InstanceProfileName: instanceProfileName,
-          Path: path
+          Path: path2
         })
       );
       this.logger.debug(`Created IAM instance profile: ${instanceProfileName}`);
@@ -34968,7 +34968,7 @@ var LambdaFunctionProvider = class {
    */
   async waitForLambdaUpdateCompleted(functionName) {
     const start = Date.now();
-    let delay = this.eniWaitInitialDelayMs;
+    let delay2 = this.eniWaitInitialDelayMs;
     for (; ; ) {
       let status;
       try {
@@ -34998,9 +34998,9 @@ var LambdaFunctionProvider = class {
         return;
       }
       const remaining = this.eniWaitTimeoutMs - elapsed;
-      const sleepMs = Math.min(delay, remaining);
+      const sleepMs = Math.min(delay2, remaining);
       await this.sleep(sleepMs);
-      delay = Math.min(delay * 2, this.eniWaitMaxDelayMs);
+      delay2 = Math.min(delay2 * 2, this.eniWaitMaxDelayMs);
     }
   }
   async cleanupLambdaEnis(functionName) {
@@ -35081,7 +35081,7 @@ var LambdaFunctionProvider = class {
     return enis;
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Build Lambda Code parameter from CDK properties
@@ -36958,7 +36958,7 @@ var DynamoDBTableProvider = class {
       if (status !== "CREATING") {
         throw new Error(`Unexpected table status: ${status}`);
       }
-      await new Promise((resolve4) => setTimeout(resolve4, 1e3));
+      await new Promise((resolve5) => setTimeout(resolve5, 1e3));
     }
     throw new Error(`Table ${tableName} did not reach ACTIVE status within ${maxAttempts} seconds`);
   }
@@ -36978,7 +36978,7 @@ var DynamoDBTableProvider = class {
       if (status === "ACTIVE") {
         return;
       }
-      await new Promise((resolve4) => setTimeout(resolve4, 1e3));
+      await new Promise((resolve5) => setTimeout(resolve5, 1e3));
     }
     throw new Error(
       `Table ${tableName} did not reach ACTIVE status within ${maxAttempts} seconds after UpdateTable`
@@ -40158,7 +40158,7 @@ var EC2Provider = class {
           this.logger.debug(
             `VPC ${physicalId} has dependencies (attempt ${attempt}/${maxAttempts}), retrying in ${attempt * 5}s...`
           );
-          await new Promise((resolve4) => setTimeout(resolve4, attempt * 5e3));
+          await new Promise((resolve5) => setTimeout(resolve5, attempt * 5e3));
           continue;
         }
         const cause = error instanceof Error ? error : void 0;
@@ -40322,7 +40322,7 @@ var EC2Provider = class {
           this.logger.debug(
             `Subnet ${physicalId} has dependencies (attempt ${attempt}/${maxAttempts}), retrying in ${attempt * 5}s...`
           );
-          await new Promise((resolve4) => setTimeout(resolve4, attempt * 5e3));
+          await new Promise((resolve5) => setTimeout(resolve5, attempt * 5e3));
           continue;
         }
         const cause = error instanceof Error ? error : void 0;
@@ -41080,7 +41080,7 @@ var EC2Provider = class {
           this.logger.debug(
             `SecurityGroup ${physicalId} has dependent objects (attempt ${attempt}/${maxAttempts}), retrying in ${attempt * 5}s...`
           );
-          await new Promise((resolve4) => setTimeout(resolve4, attempt * 5e3));
+          await new Promise((resolve5) => setTimeout(resolve5, attempt * 5e3));
           continue;
         }
         const cause = error instanceof Error ? error : void 0;
@@ -41978,7 +41978,7 @@ var EC2Provider = class {
     const maxDelayMs = 6e4;
     const startedAt = Date.now();
     let attempt = 0;
-    let delay = initialDelayMs;
+    let delay2 = initialDelayMs;
     while (true) {
       try {
         return await operation();
@@ -41991,13 +41991,13 @@ var EC2Provider = class {
           throw error;
         }
         attempt += 1;
-        const sleepMs = Math.min(delay, totalBudgetMs - elapsed);
+        const sleepMs = Math.min(delay2, totalBudgetMs - elapsed);
         const message = error instanceof Error ? error.message : String(error);
         this.logger.debug(
           `${opts.description}: dependency still mapped (attempt ${attempt}, retrying in ${sleepMs}ms): ${message}`
         );
         await this.sleep(sleepMs);
-        delay = Math.min(delay * 2, maxDelayMs);
+        delay2 = Math.min(delay2 * 2, maxDelayMs);
       }
     }
   }
@@ -42024,7 +42024,7 @@ var EC2Provider = class {
    * `setTimeout` globally.
    */
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Check if an error indicates the resource was not found
@@ -43305,13 +43305,13 @@ var ApiGatewayProvider = class _ApiGatewayProvider {
       { key: "IdentityValidationExpression", path: "/identityValidationExpression" },
       { key: "AuthorizerResultTtlInSeconds", path: "/authorizerResultTtlInSeconds" }
     ];
-    for (const { key, path } of primitiveFields) {
+    for (const { key, path: path2 } of primitiveFields) {
       const newVal = properties[key];
       const prevVal = previousProperties[key];
       if (newVal !== prevVal) {
         patchOperations.push({
           op: "replace",
-          path,
+          path: path2,
           value: newVal !== void 0 ? String(newVal) : ""
         });
       }
@@ -43947,13 +43947,13 @@ var ApiGatewayProvider = class _ApiGatewayProvider {
       { key: "OperationName", path: "/operationName" },
       { key: "RequestValidatorId", path: "/requestValidatorId" }
     ];
-    for (const { key, path } of primitiveFields) {
+    for (const { key, path: path2 } of primitiveFields) {
       const newVal = properties[key];
       const prevVal = previousProperties[key];
       if (newVal !== prevVal) {
         patchOperations.push({
           op: "replace",
-          path,
+          path: path2,
           value: newVal !== void 0 ? String(newVal) : ""
         });
       }
@@ -44124,7 +44124,7 @@ var ApiGatewayProvider = class _ApiGatewayProvider {
    * Sleep for specified milliseconds
    */
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Convert CloudFormation Tags (Array<{Key, Value}>) to SDK tags (Record<string, string>).
@@ -44326,12 +44326,12 @@ var ApiGatewayProvider = class _ApiGatewayProvider {
 function appendMapPatchOps(ops, basePath, next, prev) {
   const escape = (k) => k.replace(/~/g, "~0").replace(/\//g, "~1");
   for (const [key, val] of Object.entries(next)) {
-    const path = `${basePath}/${escape(key)}`;
+    const path2 = `${basePath}/${escape(key)}`;
     const stringValue = String(val);
     if (!(key in prev)) {
-      ops.push({ op: "add", path, value: stringValue });
+      ops.push({ op: "add", path: path2, value: stringValue });
     } else if (String(prev[key]) !== stringValue) {
-      ops.push({ op: "replace", path, value: stringValue });
+      ops.push({ op: "replace", path: path2, value: stringValue });
     }
   }
   for (const key of Object.keys(prev)) {
@@ -45984,7 +45984,7 @@ var CloudFrontDistributionProvider = class {
    */
   async waitForDistributionStable(distributionId, expectedEnabled) {
     const maxAttempts = 60;
-    let delay = 5e3;
+    let delay2 = 5e3;
     const maxDelay = 3e4;
     let interrupted = false;
     const sigintHandler = () => {
@@ -46014,11 +46014,11 @@ var CloudFrontDistributionProvider = class {
         this.logger.debug(
           `Distribution ${distributionId} status: ${status}, enabled: ${enabled}` + (expectedEnabled === void 0 ? "" : ` (waiting for Enabled=${expectedEnabled})`) + ` (attempt ${attempt}/${maxAttempts})`
         );
-        const sleepEnd = Date.now() + delay;
+        const sleepEnd = Date.now() + delay2;
         while (Date.now() < sleepEnd && !interrupted) {
-          await new Promise((resolve4) => setTimeout(resolve4, 1e3));
+          await new Promise((resolve5) => setTimeout(resolve5, 1e3));
         }
-        delay = Math.min(delay * 1.5, maxDelay);
+        delay2 = Math.min(delay2 * 1.5, maxDelay);
       }
       this.logger.debug(
         `Distribution ${distributionId} did not reach stable state within timeout, proceeding with next step`
@@ -46136,17 +46136,17 @@ var CloudFrontDistributionProvider = class {
   /**
    * Apply Quantity wrapping at a nested path (e.g., "ForwardedValues.Headers").
    */
-  applyQuantityAtPath(obj, path) {
-    if (path.length === 0)
+  applyQuantityAtPath(obj, path2) {
+    if (path2.length === 0)
       return;
-    if (path.length === 1) {
-      const key = path[0];
+    if (path2.length === 1) {
+      const key = path2[0];
       if (obj[key] !== void 0) {
         obj[key] = this.wrapWithQuantity(obj[key]);
       }
       return;
     }
-    const [head, ...rest] = path;
+    const [head, ...rest] = path2;
     const headKey = head;
     if (obj[headKey] && typeof obj[headKey] === "object") {
       const nested = { ...obj[headKey] };
@@ -49750,15 +49750,15 @@ var RDSProvider = class {
    */
   async waitForClusterAvailable(dbClusterIdentifier, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       const cluster = await this.describeDBCluster(dbClusterIdentifier);
       const status = cluster?.Status;
       this.logger.debug(`DBCluster ${dbClusterIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DBCluster ${dbClusterIdentifier} to become available`);
   }
@@ -49767,7 +49767,7 @@ var RDSProvider = class {
    */
   async waitForClusterDeleted(dbClusterIdentifier, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const cluster = await this.describeDBCluster(dbClusterIdentifier);
@@ -49781,8 +49781,8 @@ var RDSProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DBCluster ${dbClusterIdentifier} to be deleted`);
   }
@@ -49791,15 +49791,15 @@ var RDSProvider = class {
    */
   async waitForInstanceAvailable(dbInstanceIdentifier, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       const instance = await this.describeDBInstance(dbInstanceIdentifier);
       const status = instance?.DBInstanceStatus;
       this.logger.debug(`DBInstance ${dbInstanceIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DBInstance ${dbInstanceIdentifier} to become available`);
   }
@@ -49808,7 +49808,7 @@ var RDSProvider = class {
    */
   async waitForInstanceDeleted(dbInstanceIdentifier, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const instance = await this.describeDBInstance(dbInstanceIdentifier);
@@ -49822,13 +49822,13 @@ var RDSProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DBInstance ${dbInstanceIdentifier} to be deleted`);
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Adopt an existing RDS resource into cdkd state.
@@ -50734,15 +50734,15 @@ var DocDBProvider = class {
    */
   async waitForClusterAvailable(dbClusterIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       const cluster = await this.describeDBCluster(dbClusterIdentifier);
       const status = cluster?.Status;
       this.logger.debug(`DocDB DBCluster ${dbClusterIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for DocDB DBCluster ${dbClusterIdentifier} to become available`
@@ -50753,7 +50753,7 @@ var DocDBProvider = class {
    */
   async waitForClusterDeleted(dbClusterIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const cluster = await this.describeDBCluster(dbClusterIdentifier);
@@ -50767,8 +50767,8 @@ var DocDBProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DocDB DBCluster ${dbClusterIdentifier} to be deleted`);
   }
@@ -50777,15 +50777,15 @@ var DocDBProvider = class {
    */
   async waitForInstanceAvailable(dbInstanceIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       const instance = await this.describeDBInstance(dbInstanceIdentifier);
       const status = instance?.DBInstanceStatus;
       this.logger.debug(`DocDB DBInstance ${dbInstanceIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for DocDB DBInstance ${dbInstanceIdentifier} to become available`
@@ -50793,7 +50793,7 @@ var DocDBProvider = class {
   }
   async waitForInstanceDeleted(dbInstanceIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const instance = await this.describeDBInstance(dbInstanceIdentifier);
@@ -50807,13 +50807,13 @@ var DocDBProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for DocDB DBInstance ${dbInstanceIdentifier} to be deleted`);
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Adopt an existing DocDB resource into cdkd state.
@@ -51722,15 +51722,15 @@ var NeptuneProvider = class {
    */
   async waitForClusterAvailable(dbClusterIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       const cluster = await this.describeDBCluster(dbClusterIdentifier);
       const status = cluster?.Status;
       this.logger.debug(`Neptune DBCluster ${dbClusterIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for Neptune DBCluster ${dbClusterIdentifier} to become available`
@@ -51741,7 +51741,7 @@ var NeptuneProvider = class {
    */
   async waitForClusterDeleted(dbClusterIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const cluster = await this.describeDBCluster(dbClusterIdentifier);
@@ -51755,8 +51755,8 @@ var NeptuneProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for Neptune DBCluster ${dbClusterIdentifier} to be deleted`);
   }
@@ -51765,15 +51765,15 @@ var NeptuneProvider = class {
    */
   async waitForInstanceAvailable(dbInstanceIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       const instance = await this.describeDBInstance(dbInstanceIdentifier);
       const status = instance?.DBInstanceStatus;
       this.logger.debug(`Neptune DBInstance ${dbInstanceIdentifier} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for Neptune DBInstance ${dbInstanceIdentifier} to become available`
@@ -51781,7 +51781,7 @@ var NeptuneProvider = class {
   }
   async waitForInstanceDeleted(dbInstanceIdentifier, maxWaitMs = 18e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const instance = await this.describeDBInstance(dbInstanceIdentifier);
@@ -51795,15 +51795,15 @@ var NeptuneProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for Neptune DBInstance ${dbInstanceIdentifier} to be deleted`
     );
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Adopt an existing Neptune resource into cdkd state.
@@ -54306,15 +54306,15 @@ var ElastiCacheProvider = class {
    */
   async waitForClusterAvailable(cacheClusterId, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       const cluster = await this.describeCacheCluster(cacheClusterId);
       const status = cluster?.CacheClusterStatus;
       this.logger.debug(`CacheCluster ${cacheClusterId} status: ${status}`);
       if (status === "available")
         return;
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for CacheCluster ${cacheClusterId} to become available`);
   }
@@ -54323,7 +54323,7 @@ var ElastiCacheProvider = class {
    */
   async waitForClusterDeleted(cacheClusterId, maxWaitMs = 6e5) {
     const startTime = Date.now();
-    let delay = 1e4;
+    let delay2 = 1e4;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const cluster = await this.describeCacheCluster(cacheClusterId);
@@ -54337,13 +54337,13 @@ var ElastiCacheProvider = class {
         }
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(`Timed out waiting for CacheCluster ${cacheClusterId} to be deleted`);
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   /**
    * Read the AWS-current ElastiCache resource configuration in CFn-property shape.
@@ -55039,7 +55039,7 @@ var ServiceDiscoveryProvider = class {
   async pollOperation(operationId, logicalId, resourceType) {
     const client = this.getClient();
     const maxAttempts = 60;
-    let delay = 1e3;
+    let delay2 = 1e3;
     for (let attempt = 0; attempt < maxAttempts; attempt++) {
       const result = await client.send(new GetOperationCommand({ OperationId: operationId }));
       const status = result.Operation?.Status;
@@ -55058,8 +55058,8 @@ var ServiceDiscoveryProvider = class {
           logicalId
         );
       }
-      await new Promise((resolve4) => setTimeout(resolve4, delay));
-      delay = Math.min(delay * 2, 1e4);
+      await new Promise((resolve5) => setTimeout(resolve5, delay2));
+      delay2 = Math.min(delay2 * 2, 1e4);
     }
     throw new ProvisioningError(
       `Operation timed out for ${logicalId} (operationId: ${operationId})`,
@@ -59583,7 +59583,7 @@ var KinesisStreamProvider = class {
       if (status !== "CREATING" && status !== "UPDATING") {
         throw new Error(`Unexpected stream status: ${status}`);
       }
-      await new Promise((resolve4) => setTimeout(resolve4, 2e3));
+      await new Promise((resolve5) => setTimeout(resolve5, 2e3));
     }
     throw new Error(
       `Stream ${streamName} did not reach ACTIVE status within ${maxAttempts * 2} seconds`
@@ -59916,7 +59916,7 @@ var KinesisStreamConsumerProvider = class {
       if (status !== "CREATING") {
         throw new Error(`Unexpected consumer status: ${status}`);
       }
-      await new Promise((resolve4) => setTimeout(resolve4, 1e3));
+      await new Promise((resolve5) => setTimeout(resolve5, 1e3));
     }
     throw new Error(
       `Consumer ${consumerArn} did not reach ACTIVE status within ${maxAttempts} seconds`
@@ -60221,7 +60221,7 @@ var EFSProvider = class {
       this.logger.debug(
         `FileSystem ${fileSystemId} state: ${fs?.LifeCycleState ?? "unknown"}, waiting...`
       );
-      await new Promise((resolve4) => setTimeout(resolve4, pollIntervalMs));
+      await new Promise((resolve5) => setTimeout(resolve5, pollIntervalMs));
     }
     throw new ProvisioningError(
       `Timed out waiting for EFS FileSystem ${fileSystemId} to become available (60s)`,
@@ -60299,7 +60299,7 @@ var EFSProvider = class {
       this.logger.debug(
         `MountTarget ${mountTargetId} state: ${mountTarget?.LifeCycleState ?? "unknown"}, waiting...`
       );
-      await new Promise((resolve4) => setTimeout(resolve4, pollIntervalMs));
+      await new Promise((resolve5) => setTimeout(resolve5, pollIntervalMs));
     }
     throw new ProvisioningError(
       `Timed out waiting for EFS MountTarget ${mountTargetId} to become available (120s)`,
@@ -60365,7 +60365,7 @@ var EFSProvider = class {
         }
         throw error;
       }
-      await new Promise((resolve4) => setTimeout(resolve4, pollIntervalMs));
+      await new Promise((resolve5) => setTimeout(resolve5, pollIntervalMs));
     }
     this.logger.warn(
       `Timed out waiting for EFS MountTarget ${mountTargetId} deletion for ${logicalId} (120s)`
@@ -61323,7 +61323,7 @@ var FirehoseProvider = class {
       this.logger.debug(
         `Firehose ${logicalId} status: ${status} (attempt ${attempt}/${maxAttempts})`
       );
-      await new Promise((resolve4) => setTimeout(resolve4, 2e3));
+      await new Promise((resolve5) => setTimeout(resolve5, 2e3));
     }
     this.logger.warn(`Firehose ${logicalId} did not reach ACTIVE after ${maxAttempts} attempts`);
   }
@@ -64774,7 +64774,7 @@ var ASGProvider = class {
   }
   async waitForGroupDeleted(groupName, maxWaitMs = 9e5) {
     const startTime = Date.now();
-    let delay = 5e3;
+    let delay2 = 5e3;
     while (Date.now() - startTime < maxWaitMs) {
       try {
         const group = await this.describeGroup(groupName);
@@ -64785,15 +64785,15 @@ var ASGProvider = class {
           return;
         throw error;
       }
-      await this.sleep(delay);
-      delay = Math.min(delay * 2, 3e4);
+      await this.sleep(delay2);
+      delay2 = Math.min(delay2 * 2, 3e4);
     }
     throw new Error(
       `Timed out waiting for AutoScalingGroup ${groupName} to be deleted (15 minute cap)`
     );
   }
   sleep(ms) {
-    return new Promise((resolve4) => setTimeout(resolve4, ms));
+    return new Promise((resolve5) => setTimeout(resolve5, ms));
   }
   // ─── Sub-shape diff helpers ───────────────────────────────────────
   // Each helper is a no-op when before/after JSON is identical (the cheap
@@ -65714,29 +65714,29 @@ function calculateResourceDrift(stateProperties, awsProperties, options) {
   }
   return drifts;
 }
-function isIgnoredPath(path, ignorePaths) {
+function isIgnoredPath(path2, ignorePaths) {
   for (const entry of ignorePaths) {
-    if (path === entry)
+    if (path2 === entry)
       return true;
-    if (path.startsWith(`${entry}.`))
+    if (path2.startsWith(`${entry}.`))
       return true;
   }
   return false;
 }
-function diffAt(path, stateValue, awsValue, out, ignorePaths, unionWalkObjects) {
+function diffAt(path2, stateValue, awsValue, out, ignorePaths, unionWalkObjects) {
   if (deepEqual(stateValue, awsValue))
     return;
   if (isPlainObject(stateValue) && isPlainObject(awsValue) && !Array.isArray(stateValue) && !Array.isArray(awsValue)) {
     const keys = unionWalkObjects ? /* @__PURE__ */ new Set([...Object.keys(stateValue), ...Object.keys(awsValue)]) : Object.keys(stateValue);
     for (const key of keys) {
-      const childPath = `${path}.${key}`;
+      const childPath = `${path2}.${key}`;
       if (isIgnoredPath(childPath, ignorePaths))
         continue;
       diffAt(childPath, stateValue[key], awsValue[key], out, ignorePaths, unionWalkObjects);
     }
     return;
   }
-  out.push({ path, stateValue, awsValue });
+  out.push({ path: path2, stateValue, awsValue });
 }
 function deepEqual(a, b) {
   if (a === b)
@@ -66139,11 +66139,11 @@ async function runDriftForStack(stackName, region, stateBackend, providerRegistr
     };
   });
 }
-function setAtPath(target, path, value) {
-  if (path.length === 0) {
+function setAtPath(target, path2, value) {
+  if (path2.length === 0) {
     return;
   }
-  const segments = path.split(".");
+  const segments = path2.split(".");
   let cursor = target;
   for (let i = 0; i < segments.length - 1; i++) {
     const key = segments[i];
@@ -66729,11 +66729,11 @@ Acquiring lock for stack ${stackName}...`);
                   const isRetryable = msg.includes("Too Many Requests") || msg.includes("has dependencies") || msg.includes("can't be deleted since") || msg.includes("DependencyViolation");
                   if (!isRetryable || attempt >= maxAttempts)
                     break;
-                  const delay = 5e3 * Math.pow(2, attempt);
+                  const delay2 = 5e3 * Math.pow(2, attempt);
                   logger.debug(
-                    `  \u23F3 Retrying delete ${logicalId} in ${delay / 1e3}s (attempt ${attempt + 1}/${maxAttempts})`
+                    `  \u23F3 Retrying delete ${logicalId} in ${delay2 / 1e3}s (attempt ${attempt + 1}/${maxAttempts})`
                   );
-                  await new Promise((resolve4) => setTimeout(resolve4, delay));
+                  await new Promise((resolve5) => setTimeout(resolve5, delay2));
                 }
               }
               if (lastDeleteError)
@@ -67043,19 +67043,19 @@ function buildCdkPathIndex(template) {
   for (const [logicalId, resource] of Object.entries(template.Resources)) {
     if (resource.Type === "AWS::CDK::Metadata")
       continue;
-    const path = readCdkPath(resource);
-    if (path)
-      index.set(path, logicalId);
+    const path2 = readCdkPath(resource);
+    if (path2)
+      index.set(path2, logicalId);
   }
   return index;
 }
 function resolveCdkPathToLogicalIds(input, index) {
   const seen = /* @__PURE__ */ new Map();
   const prefix = `${input}/`;
-  for (const [path, logicalId] of index) {
-    if (path === input || path.startsWith(prefix)) {
+  for (const [path2, logicalId] of index) {
+    if (path2 === input || path2.startsWith(prefix)) {
       if (!seen.has(logicalId))
-        seen.set(logicalId, path);
+        seen.set(logicalId, path2);
     }
   }
   return [...seen.entries()].map(([logicalId, cdkPath]) => ({ logicalId, cdkPath }));
@@ -69962,6 +69962,718 @@ async function captureObservedForImportedResources(stackState, providerRegistry,
   );
 }
 
+// src/cli/commands/local-invoke.ts
+import { mkdtempSync as mkdtempSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
+import * as path from "node:path";
+import { Command as Command14, Option as Option7 } from "commander";
+
+// src/local-invoke/lambda-resolver.ts
+import { existsSync as existsSync4, statSync as statSync3 } from "node:fs";
+import { dirname, isAbsolute, resolve as resolve4 } from "node:path";
+var LocalInvokeResolutionError = class _LocalInvokeResolutionError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "LocalInvokeResolutionError";
+    Object.setPrototypeOf(this, _LocalInvokeResolutionError.prototype);
+  }
+};
+function parseTarget(target) {
+  if (typeof target !== "string" || target.length === 0) {
+    throw new LocalInvokeResolutionError(
+      "Empty target. Pass a CDK display path (e.g. 'MyStack/MyApi/Handler') or stack-qualified logical ID (e.g. 'MyStack:MyApiHandler1234ABCD')."
+    );
+  }
+  const colonIdx = target.indexOf(":");
+  const slashIdx = target.indexOf("/");
+  if (colonIdx > 0 && (slashIdx === -1 || colonIdx < slashIdx)) {
+    const stackPattern = target.substring(0, colonIdx);
+    const pathOrId = target.substring(colonIdx + 1);
+    if (pathOrId.length === 0) {
+      throw new LocalInvokeResolutionError(`Target '${target}' has no logical ID after ':'.`);
+    }
+    return { stackPattern, pathOrId, isPath: pathOrId.includes("/") };
+  }
+  if (slashIdx > 0) {
+    return { stackPattern: target.substring(0, slashIdx), pathOrId: target, isPath: true };
+  }
+  return { stackPattern: null, pathOrId: target, isPath: false };
+}
+function resolveLambdaTarget(target, stacks) {
+  if (stacks.length === 0) {
+    throw new LocalInvokeResolutionError("No stacks found in the synthesized assembly.");
+  }
+  const parsed = parseTarget(target);
+  const stack = pickStack(parsed, stacks);
+  const template = stack.template;
+  const resources = template.Resources ?? {};
+  let match;
+  if (parsed.isPath) {
+    const index = buildCdkPathIndex(template);
+    const resolvedPaths = resolveCdkPathToLogicalIds(parsed.pathOrId, index);
+    const lambdaMatches = resolvedPaths.filter(
+      ({ logicalId: logicalId2 }) => resources[logicalId2]?.Type === "AWS::Lambda::Function"
+    );
+    if (lambdaMatches.length === 0) {
+      throw notFoundError(target, stack, resources);
+    }
+    if (lambdaMatches.length > 1) {
+      throw new LocalInvokeResolutionError(
+        `Target '${target}' matches ${lambdaMatches.length} Lambda functions in ${stack.stackName}: ` + lambdaMatches.map((m2) => m2.logicalId).join(", ") + ". Refine the path or use the stack:LogicalId form."
+      );
+    }
+    const m = lambdaMatches[0];
+    match = { logicalId: m.logicalId, resource: resources[m.logicalId] };
+  } else {
+    const resource2 = resources[parsed.pathOrId];
+    if (!resource2) {
+      throw notFoundError(target, stack, resources);
+    }
+    match = { logicalId: parsed.pathOrId, resource: resource2 };
+  }
+  const { logicalId, resource } = match;
+  if (resource.Type !== "AWS::Lambda::Function") {
+    if (resource.Type.startsWith("Custom::")) {
+      throw new LocalInvokeResolutionError(
+        `Resource '${logicalId}' in ${stack.stackName} is a Custom Resource (${resource.Type}), not a Lambda function. Custom Resources are invoked by the deploy framework, not by users. If you want to test the underlying handler, target the ServiceToken Lambda directly.`
+      );
+    }
+    throw new LocalInvokeResolutionError(
+      `Resource '${logicalId}' in ${stack.stackName} is ${resource.Type}, not a Lambda function. cdkd local invoke only works on AWS::Lambda::Function resources in v1.`
+    );
+  }
+  return extractLambdaProperties(stack, logicalId, resource);
+}
+function pickStack(parsed, stacks) {
+  if (parsed.stackPattern === null) {
+    if (stacks.length === 1)
+      return stacks[0];
+    throw new LocalInvokeResolutionError(
+      `Multiple stacks in app, target '${parsed.pathOrId}' is missing a stack prefix. Use 'StackName:${parsed.pathOrId}' or 'StackName/...' (path form). Available stacks: ${stacks.map((s) => s.stackName).join(", ")}.`
+    );
+  }
+  const matched = matchStacks(stacks, [parsed.stackPattern]);
+  if (matched.length === 0) {
+    throw new LocalInvokeResolutionError(
+      `Stack '${parsed.stackPattern}' not found. Available stacks: ${stacks.map((s) => s.stackName).join(", ")}.`
+    );
+  }
+  if (matched.length > 1) {
+    throw new LocalInvokeResolutionError(
+      `Stack pattern '${parsed.stackPattern}' matched ${matched.length} stacks: ` + matched.map((s) => s.stackName).join(", ") + ". Use a more specific pattern."
+    );
+  }
+  return matched[0];
+}
+function extractLambdaProperties(stack, logicalId, resource) {
+  const props = resource.Properties ?? {};
+  const runtime = typeof props["Runtime"] === "string" ? props["Runtime"] : "";
+  const handler = typeof props["Handler"] === "string" ? props["Handler"] : "";
+  const memoryMb = typeof props["MemorySize"] === "number" ? props["MemorySize"] : 128;
+  const timeoutSec = typeof props["Timeout"] === "number" ? props["Timeout"] : 3;
+  if (!runtime) {
+    throw new LocalInvokeResolutionError(
+      `Lambda '${logicalId}' has no Runtime property. Container-image Lambdas (Code.ImageUri) are not supported in cdkd local invoke v1.`
+    );
+  }
+  if (!handler) {
+    throw new LocalInvokeResolutionError(`Lambda '${logicalId}' has no Handler property.`);
+  }
+  const code = props["Code"] ?? {};
+  const inlineCode = typeof code["ZipFile"] === "string" ? code["ZipFile"] : void 0;
+  let codePath = null;
+  if (!inlineCode) {
+    codePath = resolveAssetCodePath(stack, logicalId, resource);
+  }
+  return {
+    stack,
+    logicalId,
+    resource,
+    runtime,
+    handler,
+    memoryMb,
+    timeoutSec,
+    codePath,
+    ...inlineCode !== void 0 && { inlineCode }
+  };
+}
+function resolveAssetCodePath(stack, logicalId, resource) {
+  const meta = resource.Metadata;
+  const assetPath = meta?.["aws:asset:path"];
+  if (typeof assetPath !== "string" || assetPath.length === 0) {
+    throw new LocalInvokeResolutionError(
+      `Lambda '${logicalId}' has no Metadata['aws:asset:path']. cdkd local invoke needs this hint to find the local asset directory. Re-synthesize the app (without \`--output <stale-dir>\`) and retry.`
+    );
+  }
+  const cdkOutDir = stack.assetManifestPath ? dirname(stack.assetManifestPath) : process.cwd();
+  const abs = isAbsolute(assetPath) ? assetPath : resolve4(cdkOutDir, assetPath);
+  if (!existsSync4(abs) || !statSync3(abs).isDirectory()) {
+    throw new LocalInvokeResolutionError(
+      `Lambda '${logicalId}' asset directory '${abs}' does not exist or is not a directory. Re-synthesize the app and retry.`
+    );
+  }
+  return abs;
+}
+function notFoundError(target, stack, resources) {
+  const lambdas = [];
+  for (const [logicalId, resource] of Object.entries(resources)) {
+    if (resource.Type !== "AWS::Lambda::Function")
+      continue;
+    const meta = resource.Metadata;
+    const cdkPath = typeof meta?.["aws:cdk:path"] === "string" ? meta["aws:cdk:path"] : "";
+    lambdas.push({ displayPath: cdkPath || logicalId, logicalId });
+  }
+  let msg = `target '${target}' did not match any Lambda function in ${stack.stackName}.
+
+`;
+  if (lambdas.length === 0) {
+    msg += `Stack ${stack.stackName} has no Lambda functions.`;
+  } else {
+    const width = Math.max(...lambdas.map((l) => l.displayPath.length));
+    msg += `Available Lambda functions in ${stack.stackName}:
+`;
+    for (const l of lambdas) {
+      msg += `  ${l.displayPath.padEnd(width)}  (${l.logicalId})
+`;
+    }
+  }
+  return new LocalInvokeResolutionError(msg.trimEnd());
+}
+
+// src/local-invoke/env-resolver.ts
+function resolveEnvVars(logicalId, templateEnv, overrides) {
+  const resolved = {};
+  const unresolved = [];
+  if (templateEnv) {
+    for (const [key, value] of Object.entries(templateEnv)) {
+      if (isLiteralEnvValue(value)) {
+        resolved[key] = String(value);
+      } else {
+        unresolved.push(key);
+      }
+    }
+  }
+  if (overrides) {
+    applyOverrideMap(resolved, overrides.Parameters);
+    const fnOverrides = overrides[logicalId];
+    if (fnOverrides && typeof fnOverrides === "object") {
+      applyOverrideMap(resolved, fnOverrides);
+    }
+  }
+  return { resolved, unresolved };
+}
+function applyOverrideMap(acc, map) {
+  if (!map)
+    return;
+  for (const [key, value] of Object.entries(map)) {
+    if (value === null) {
+      delete acc[key];
+    } else if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+      acc[key] = String(value);
+    }
+  }
+}
+function isLiteralEnvValue(value) {
+  return typeof value === "string" || typeof value === "number" || typeof value === "boolean";
+}
+
+// src/local-invoke/runtime-image.ts
+var SUPPORTED_RUNTIMES = {
+  "nodejs18.x": { image: "public.ecr.aws/lambda/nodejs:18", fileExtension: ".js" },
+  "nodejs20.x": { image: "public.ecr.aws/lambda/nodejs:20", fileExtension: ".js" },
+  "nodejs22.x": { image: "public.ecr.aws/lambda/nodejs:22", fileExtension: ".js" },
+  "python3.11": { image: "public.ecr.aws/lambda/python:3.11", fileExtension: ".py" },
+  "python3.12": { image: "public.ecr.aws/lambda/python:3.12", fileExtension: ".py" },
+  "python3.13": { image: "public.ecr.aws/lambda/python:3.13", fileExtension: ".py" }
+};
+var UnsupportedRuntimeError = class _UnsupportedRuntimeError extends Error {
+  constructor(runtime, message) {
+    super(message);
+    this.runtime = runtime;
+    this.name = "UnsupportedRuntimeError";
+    Object.setPrototypeOf(this, _UnsupportedRuntimeError.prototype);
+  }
+};
+function resolveRuntimeImage(runtime) {
+  return resolveRuntimeSpec(runtime).image;
+}
+function resolveRuntimeFileExtension(runtime) {
+  return resolveRuntimeSpec(runtime).fileExtension;
+}
+function resolveRuntimeSpec(runtime) {
+  if (typeof runtime !== "string" || runtime.length === 0) {
+    throw new UnsupportedRuntimeError(
+      String(runtime),
+      "Lambda function has no Runtime property. Container-image Lambdas (Code.ImageUri) are not supported in cdkd local invoke v1."
+    );
+  }
+  const spec = SUPPORTED_RUNTIMES[runtime];
+  if (spec)
+    return spec;
+  if (runtime.startsWith("java") || runtime.startsWith("dotnet") || runtime.startsWith("ruby") || runtime.startsWith("go") || runtime.startsWith("provided")) {
+    throw new UnsupportedRuntimeError(
+      runtime,
+      `Runtime '${runtime}' is not supported in cdkd local invoke v1. Only Node.js (nodejs18.x / nodejs20.x / nodejs22.x) and Python (python3.11 / python3.12 / python3.13) runtimes are supported. Other runtimes follow in subsequent PRs.`
+    );
+  }
+  throw new UnsupportedRuntimeError(
+    runtime,
+    `Unknown runtime '${runtime}'. cdkd local invoke v1 supports nodejs18.x / nodejs20.x / nodejs22.x / python3.11 / python3.12 / python3.13.`
+  );
+}
+
+// src/local-invoke/docker-runner.ts
+import { execFile as execFile2, spawn as spawn3 } from "node:child_process";
+import { createServer } from "node:net";
+import { promisify as promisify2 } from "node:util";
+var execFileAsync2 = promisify2(execFile2);
+var DockerRunnerError = class _DockerRunnerError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DockerRunnerError";
+    Object.setPrototypeOf(this, _DockerRunnerError.prototype);
+  }
+};
+async function pullImage(image, skipPull) {
+  const logger = getLogger().child("docker");
+  if (skipPull) {
+    logger.debug(`Skipping docker pull for ${image} (--no-pull)`);
+    return;
+  }
+  logger.info(`Pulling ${image}...`);
+  await runForeground("docker", ["pull", image]);
+}
+async function runDetached(opts) {
+  const args = ["run", "-d", "--rm"];
+  const host = opts.host ?? "127.0.0.1";
+  args.push("-p", `${host}:${opts.hostPort}:8080`);
+  if (opts.debugPort !== void 0) {
+    args.push("-p", `${host}:${opts.debugPort}:${opts.debugPort}`);
+  }
+  for (const mount of opts.mounts) {
+    const ro = mount.readOnly ? ":ro" : "";
+    args.push("-v", `${mount.hostPath}:${mount.containerPath}${ro}`);
+  }
+  for (const [k, v] of Object.entries(opts.env)) {
+    args.push("-e", `${k}=${v}`);
+  }
+  args.push(opts.image, ...opts.cmd);
+  const logger = getLogger().child("docker");
+  logger.debug(`docker ${args.join(" ")}`);
+  try {
+    const { stdout } = await execFileAsync2("docker", args, {
+      maxBuffer: 10 * 1024 * 1024
+    });
+    return stdout.trim();
+  } catch (error) {
+    const err = error;
+    throw new DockerRunnerError(
+      `docker run failed: ${err.stderr?.trim() || err.message || String(error)}`
+    );
+  }
+}
+function streamLogs(containerId) {
+  const proc = spawn3("docker", ["logs", "-f", containerId], {
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  proc.stdout?.on("data", (chunk) => process.stdout.write(chunk));
+  proc.stderr?.on("data", (chunk) => process.stderr.write(chunk));
+  proc.on("error", () => {
+  });
+  return () => {
+    if (!proc.killed)
+      proc.kill("SIGTERM");
+  };
+}
+async function removeContainer(containerId) {
+  if (!containerId)
+    return;
+  const logger = getLogger().child("docker");
+  try {
+    await execFileAsync2("docker", ["rm", "-f", containerId]);
+    logger.debug(`Removed container ${containerId}`);
+  } catch (error) {
+    const err = error;
+    logger.debug(
+      `docker rm -f ${containerId} failed: ${err.stderr || err.message || String(error)}`
+    );
+  }
+}
+async function ensureDockerAvailable() {
+  try {
+    await execFileAsync2("docker", ["version", "--format", "{{.Server.Version}}"]);
+  } catch (error) {
+    const err = error;
+    if (err.code === "ENOENT") {
+      throw new DockerRunnerError(
+        "docker is not installed or not on PATH. cdkd local invoke needs Docker \u2014 install Docker Desktop or the docker CLI and retry."
+      );
+    }
+    throw new DockerRunnerError(
+      `docker daemon is not reachable: ${err.stderr?.trim() || err.message || String(error)}. Start Docker Desktop / the docker daemon and retry.`
+    );
+  }
+}
+function pickFreePort() {
+  return new Promise((resolvePort, rejectPort) => {
+    const server = createServer();
+    server.unref();
+    server.on("error", rejectPort);
+    server.listen(0, "127.0.0.1", () => {
+      const address = server.address();
+      if (!address || typeof address === "string") {
+        server.close();
+        rejectPort(new Error("Could not allocate a host port"));
+        return;
+      }
+      const port = address.port;
+      server.close(() => resolvePort(port));
+    });
+  });
+}
+function runForeground(cmd, args) {
+  return new Promise((resolveProc, rejectProc) => {
+    const proc = spawn3(cmd, args, { stdio: "inherit" });
+    proc.on("error", (err) => rejectProc(new DockerRunnerError(`${cmd} failed: ${err.message}`)));
+    proc.on("close", (code) => {
+      if (code === 0)
+        resolveProc();
+      else
+        rejectProc(new DockerRunnerError(`${cmd} exited with code ${code}`));
+    });
+  });
+}
+
+// src/local-invoke/rie-client.ts
+import { setTimeout as delay } from "node:timers/promises";
+var INVOKE_PATH = "/2015-03-31/functions/function/invocations";
+async function waitForRieReady(host, port, timeoutMs = 5e3) {
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  while (Date.now() < deadline) {
+    try {
+      const ok = await httpProbe(host, port, 500);
+      if (ok)
+        return;
+    } catch (err) {
+      lastError = err;
+    }
+    await delay(100);
+  }
+  const tail = lastError instanceof Error ? `: ${lastError.message}` : "";
+  throw new Error(
+    `RIE did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early \u2014 check 'docker logs' output.`
+  );
+}
+async function httpProbe(host, port, timeoutMs) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const response = await fetch(`http://${host}:${port}/`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: "{}",
+      signal: controller.signal
+    });
+    await response.text().catch(() => void 0);
+    return true;
+  } catch (err) {
+    if (isTransientNetworkError(err))
+      return false;
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function isTransientNetworkError(err) {
+  if (!(err instanceof Error))
+    return false;
+  if (err.name === "AbortError")
+    return true;
+  if (err.name === "TypeError" && err.message === "fetch failed")
+    return true;
+  const cause = err.cause;
+  if (cause?.code === "ECONNRESET")
+    return true;
+  if (cause?.code === "ECONNREFUSED")
+    return true;
+  if (cause?.code === "UND_ERR_SOCKET")
+    return true;
+  return false;
+}
+async function invokeRie(host, port, event, timeoutMs) {
+  const url = `http://${host}:${port}${INVOKE_PATH}`;
+  const body = JSON.stringify(event ?? {});
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body,
+      signal: controller.signal
+    });
+  } catch (err) {
+    if (err.name === "AbortError") {
+      throw new Error(
+        `RIE invoke at ${url} timed out after ${timeoutMs}ms. The handler may be hung; check container logs.`
+      );
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+  const raw = await response.text();
+  let payload = raw;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+  }
+  return { payload, raw };
+}
+
+// src/cli/commands/local-invoke.ts
+async function localInvokeCommand(target, options) {
+  const logger = getLogger();
+  if (options.verbose) {
+    logger.setLevel("debug");
+  }
+  warnIfDeprecatedRegion(options);
+  await applyRoleArnIfSet({ roleArn: options.roleArn, region: options.region });
+  await ensureDockerAvailable();
+  const appCmd = resolveApp(options.app);
+  if (!appCmd) {
+    throw new Error('No CDK app specified. Pass --app, set CDKD_APP, or add "app" to cdk.json.');
+  }
+  logger.info("Synthesizing CDK app...");
+  const synthesizer = new Synthesizer();
+  const context = parseContextOptions(options.context);
+  const synthOpts = {
+    app: appCmd,
+    output: options.output,
+    ...options.region && { region: options.region },
+    ...options.profile && { profile: options.profile },
+    ...Object.keys(context).length > 0 && { context }
+  };
+  const { stacks } = await synthesizer.synthesize(synthOpts);
+  const lambda = resolveLambdaTarget(target, stacks);
+  logger.info(`Target: ${lambda.stack.stackName}/${lambda.logicalId} (${lambda.runtime})`);
+  const codeDir = lambda.codePath ?? materializeInlineCode(
+    lambda.handler,
+    lambda.inlineCode ?? "",
+    resolveRuntimeFileExtension(lambda.runtime)
+  );
+  const overrides = readEnvOverridesFile(options.envVars);
+  const envResult = resolveEnvVars(lambda.logicalId, getTemplateEnv(lambda.resource), overrides);
+  for (const key of envResult.unresolved) {
+    logger.warn(
+      `Environment variable ${key} contains a CloudFormation intrinsic and was dropped. Override it with --env-vars (e.g. {"${lambda.logicalId}":{"${key}":"<literal>"}}) or wait for --from-state in PR 2.`
+    );
+  }
+  const event = await readEvent(options);
+  const image = resolveRuntimeImage(lambda.runtime);
+  const dockerEnv = {
+    AWS_LAMBDA_FUNCTION_NAME: lambda.logicalId,
+    AWS_LAMBDA_FUNCTION_MEMORY_SIZE: String(lambda.memoryMb),
+    AWS_LAMBDA_FUNCTION_TIMEOUT: String(lambda.timeoutSec),
+    AWS_LAMBDA_FUNCTION_VERSION: "$LATEST",
+    AWS_LAMBDA_LOG_GROUP_NAME: `/aws/lambda/${lambda.logicalId}`,
+    AWS_LAMBDA_LOG_STREAM_NAME: "local",
+    ...envResult.resolved
+  };
+  if (options.assumeRole) {
+    const stsRegion = options.region ?? process.env["AWS_REGION"] ?? process.env["AWS_DEFAULT_REGION"];
+    const creds = await assumeLambdaExecutionRole(options.assumeRole, stsRegion);
+    dockerEnv["AWS_ACCESS_KEY_ID"] = creds.accessKeyId;
+    dockerEnv["AWS_SECRET_ACCESS_KEY"] = creds.secretAccessKey;
+    dockerEnv["AWS_SESSION_TOKEN"] = creds.sessionToken;
+    if (stsRegion)
+      dockerEnv["AWS_REGION"] = stsRegion;
+  } else {
+    forwardAwsEnv(dockerEnv);
+  }
+  let debugPort;
+  if (options.debugPort) {
+    debugPort = Number(options.debugPort);
+    if (!Number.isInteger(debugPort) || debugPort <= 0 || debugPort > 65535) {
+      throw new Error(`--debug-port must be an integer in 1..65535, got '${options.debugPort}'`);
+    }
+    dockerEnv["NODE_OPTIONS"] = `--inspect-brk=0.0.0.0:${debugPort}`;
+  }
+  await pullImage(image, options.pull === false);
+  const hostPort = await pickFreePort();
+  const containerHost = options.containerHost || "127.0.0.1";
+  logger.info(`Starting container (image=${image}, port=${hostPort})...`);
+  const containerId = await runDetached({
+    image,
+    mounts: [{ hostPath: codeDir, containerPath: "/var/task", readOnly: true }],
+    env: dockerEnv,
+    cmd: [lambda.handler],
+    hostPort,
+    host: containerHost,
+    ...debugPort !== void 0 && { debugPort }
+  });
+  const stopLogs = streamLogs(containerId);
+  const sigintHandler = () => {
+    stopLogs();
+    void removeContainer(containerId).then(() => {
+      process.exit(130);
+    });
+  };
+  process.on("SIGINT", sigintHandler);
+  try {
+    await waitForRieReady(containerHost, hostPort, 5e3);
+    const invokeTimeoutMs = Math.max(3e4, lambda.timeoutSec * 2 * 1e3);
+    const result = await invokeRie(containerHost, hostPort, event, invokeTimeoutMs);
+    await new Promise((resolveDelay) => setTimeout(resolveDelay, 250));
+    process.stdout.write(`${result.raw}
+`);
+  } finally {
+    process.off("SIGINT", sigintHandler);
+    stopLogs();
+    await removeContainer(containerId);
+  }
+}
+function getTemplateEnv(resource) {
+  const props = resource.Properties ?? {};
+  const env = props["Environment"];
+  if (!env || typeof env !== "object")
+    return void 0;
+  const vars = env["Variables"];
+  if (!vars || typeof vars !== "object")
+    return void 0;
+  return vars;
+}
+function readEnvOverridesFile(filePath) {
+  if (!filePath)
+    return void 0;
+  let raw;
+  try {
+    raw = readFileSync6(filePath, "utf-8");
+  } catch (err) {
+    throw new Error(
+      `Failed to read --env-vars file '${filePath}': ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    throw new Error(
+      `Failed to parse --env-vars file '${filePath}' as JSON: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`--env-vars file '${filePath}' must contain a JSON object at the top level.`);
+  }
+  return parsed;
+}
+async function readEvent(options) {
+  if (options.event && options.eventStdin) {
+    throw new Error("--event and --event-stdin are mutually exclusive.");
+  }
+  if (options.eventStdin) {
+    const raw = await readStdin();
+    return parseEvent(raw, "<stdin>");
+  }
+  if (options.event) {
+    const raw = readFileSync6(options.event, "utf-8");
+    return parseEvent(raw, options.event);
+  }
+  return {};
+}
+function parseEvent(raw, source) {
+  try {
+    return JSON.parse(raw);
+  } catch (err) {
+    throw new Error(
+      `Failed to parse event payload from ${source} as JSON: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+async function readStdin() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+  }
+  return Buffer.concat(chunks).toString("utf-8");
+}
+async function assumeLambdaExecutionRole(roleArn, region) {
+  const { STSClient: STSClient10, AssumeRoleCommand: AssumeRoleCommand2 } = await import("@aws-sdk/client-sts");
+  const sts = new STSClient10({ ...region && { region } });
+  try {
+    const response = await sts.send(
+      new AssumeRoleCommand2({
+        RoleArn: roleArn,
+        RoleSessionName: `cdkd-local-invoke-${Date.now()}`,
+        DurationSeconds: 3600
+      })
+    );
+    const creds = response.Credentials;
+    if (!creds?.AccessKeyId || !creds.SecretAccessKey || !creds.SessionToken) {
+      throw new Error(`AssumeRole(${roleArn}) returned no usable credentials.`);
+    }
+    return {
+      accessKeyId: creds.AccessKeyId,
+      secretAccessKey: creds.SecretAccessKey,
+      sessionToken: creds.SessionToken
+    };
+  } finally {
+    sts.destroy();
+  }
+}
+function forwardAwsEnv(env) {
+  const passThrough = [
+    "AWS_ACCESS_KEY_ID",
+    "AWS_SECRET_ACCESS_KEY",
+    "AWS_SESSION_TOKEN",
+    "AWS_REGION",
+    "AWS_DEFAULT_REGION"
+  ];
+  for (const key of passThrough) {
+    const value = process.env[key];
+    if (value !== void 0)
+      env[key] = value;
+  }
+}
+function materializeInlineCode(handler, source, fileExtension) {
+  const lastDot = handler.lastIndexOf(".");
+  if (lastDot <= 0) {
+    throw new Error(`Handler '${handler}' is malformed: expected '<modulePath>.<exportName>'.`);
+  }
+  const modulePath = handler.substring(0, lastDot);
+  const dir = mkdtempSync2(path.join(tmpdir2(), "cdkd-local-invoke-"));
+  const filePath = path.join(dir, `${modulePath}${fileExtension}`);
+  mkdirSync2(path.dirname(filePath), { recursive: true });
+  writeFileSync5(filePath, source, "utf-8");
+  return dir;
+}
+function createLocalCommand() {
+  const local = new Command14("local").description(
+    "Local Lambda execution against the AWS Lambda Runtime Interface Emulator (Docker required)"
+  );
+  const invoke = new Command14("invoke").description(
+    "Run a Lambda function locally in a Docker container (RIE-backed). Target accepts a CDK display path (MyStack/MyApi/Handler) or stack-qualified logical ID (MyStack:MyApiHandler1234ABCD). Single-stack apps may omit the stack prefix."
+  ).argument("<target>", "CDK display path or stack-qualified logical ID of the Lambda to invoke").addOption(new Option7("-e, --event <file>", "JSON event payload file (default: {})")).addOption(new Option7("--event-stdin", "Read event JSON from stdin").default(false)).addOption(
+    new Option7(
+      "--env-vars <file>",
+      'JSON env-var overrides (SAM-compatible: {"LogicalId":{"KEY":"VALUE"}})'
+    )
+  ).addOption(new Option7("--no-pull", "Skip docker pull (use cached image)")).addOption(new Option7("--debug-port <port>", "Node --inspect-brk port (default: off)")).addOption(
+    new Option7("--container-host <host>", "Host to bind the RIE port to").default("127.0.0.1")
+  ).addOption(
+    new Option7(
+      "--assume-role <arn>",
+      `Assume the Lambda's deployed execution role and forward STS-issued temp credentials to the container so the handler runs with the deployed function's narrow permissions (closes the "developer admin / function narrow" skew). Off by default \u2014 when omitted, the developer's shell credentials are forwarded unchanged (SAM-compatible default).`
+    )
+  ).action(withErrorHandling(localInvokeCommand));
+  [...commonOptions, ...appOptions, ...contextOptions].forEach((opt) => invoke.addOption(opt));
+  invoke.addOption(deprecatedRegionOption);
+  local.addCommand(invoke);
+  return local;
+}
+
 // src/cli/index.ts
 var SUBCOMMANDS = /* @__PURE__ */ new Set([
   "bootstrap",
@@ -69976,7 +70688,8 @@ var SUBCOMMANDS = /* @__PURE__ */ new Set([
   "import",
   "publish-assets",
   "force-unlock",
-  "state"
+  "state",
+  "local"
 ]);
 function reorderArgs(argv) {
   const prefix = argv.slice(0, 2);
@@ -69989,8 +70702,8 @@ function reorderArgs(argv) {
   return [...prefix, ...cmdAndAfter, ...beforeCmd];
 }
 async function main() {
-  const program = new Command14();
-  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.66.0");
+  const program = new Command15();
+  program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.68.0");
   program.addCommand(createBootstrapCommand());
   program.addCommand(createSynthCommand());
   program.addCommand(createListCommand());
@@ -70003,6 +70716,7 @@ async function main() {
   program.addCommand(createPublishAssetsCommand());
   program.addCommand(createForceUnlockCommand());
   program.addCommand(createStateCommand());
+  program.addCommand(createLocalCommand());
   const args = reorderArgs(process.argv);
   await program.parseAsync(args);
 }