@skuba-lib/api 3.0.1 → 3.1.0-add-CDK.ensureAssetPlaceholders-20261027233644

package/lib/{index-CNxgBJm_.d.mts → index-DhV1vmV_.d.mts}

@@ -1,4 +1,3 @@
-//#region src/buildkite/annotate.d.ts
 type AnnotationStyle = 'success' | 'info' | 'warning' | 'error';
 interface AnnotationOptions {
   context?: string;
@@ -24,8 +23,6 @@ interface AnnotationOptions {
  * The `buildkite-agent` binary must also be on your `PATH`.
  */
 declare const annotate: (markdown: string, opts?: AnnotationOptions) => Promise<void>;
-//#endregion
-//#region src/buildkite/md.d.ts
 /**
  * @internal
  */
@@ -35,5 +32,4 @@ declare const md: {
 declare namespace index_d_exports {
   export { AnnotationStyle, annotate, md };
 }
-//#endregion
 export { annotate as i, md as n, AnnotationStyle as r, index_d_exports as t };

package/lib/{index--hWvZI6b.d.cts → index-ozhcNkrB.d.cts}

@@ -1,7 +1,6 @@
-import { f as ChangedFile, t as index_d_exports$1 } from "./index-CLEYcnJY.cjs";
+import { f as ChangedFile } from "./index-CX5l1M9F.cjs";
 import { Endpoints } from "@octokit/types";
 import { Octokit } from "@octokit/rest";
-//#region src/github/checkRun.d.ts
 type Output = NonNullable<Endpoints['PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}']['parameters']['output']>;
 type Annotation = NonNullable<Output['annotations']>[number];
 /**
@@ -18,6 +17,12 @@ interface CreateCheckRunParameters {
    * The final conclusion of the check.
    */
   conclusion: 'failure' | 'success';
+  /**
+   * A URL that links to the full details of the check, such as a CI build.
+   *
+   * Defaults to the homepage of the GitHub App that created the check run.
+   */
+  detailsUrl?: string;
   /**
    * The name of the check. For example, "code-coverage".
    */
@@ -43,9 +48,7 @@ interface CreateCheckRunParameters {
  * A `GITHUB_API_TOKEN` or `GITHUB_TOKEN` with the `checks:write` permission
  * must be present on the environment.
  */
-declare const createCheckRun: ({ annotations, conclusion, name, summary, text, title }: CreateCheckRunParameters) => Promise<void>;
-//#endregion
-//#region src/github/environment.d.ts
+declare const createCheckRun: ({ annotations, conclusion, detailsUrl, name, summary, text, title }: CreateCheckRunParameters) => Promise<void>;
 /**
  * Returns the name of the build as seen in GitHub status checks.
  *
@@ -63,8 +66,6 @@ declare const enabledFromEnvironment: (env?: NodeJS.ProcessEnv) => boolean;
  * Tries to return a GitHub API token from the environment.
  */
 declare const apiTokenFromEnvironment: (env?: NodeJS.ProcessEnv) => string | undefined;
-//#endregion
-//#region src/github/pullRequest.d.ts
 interface GetPullRequestParameters {
   /**
    * A preconstructed Octokit client to interact with GitHub's APIs.
@@ -84,8 +85,6 @@ interface GetPullRequestParameters {
  * associated pull requests, or if they are all closed or locked.
  */
 declare const getPullRequestNumber: (params?: GetPullRequestParameters) => Promise<number>;
-//#endregion
-//#region src/github/issueComment.d.ts
 /**
  * https://docs.github.com/en/rest/reference/issues#create-an-issue-comment
  */
@@ -146,8 +145,6 @@ interface IssueComment {
  * on the environment.
  */
 declare const putIssueComment: (params: PutIssueCommentParameters) => Promise<IssueComment | null>;
-//#endregion
-//#region src/github/push.d.ts
 interface UploadAllFileChangesParams {
   dir: string;
   /**
@@ -234,5 +231,4 @@ declare const uploadFileChanges: ({ dir, branch, messageHeadline, messageBody, f
 declare namespace index_d_exports {
   export { Annotation, apiTokenFromEnvironment, buildNameFromEnvironment, createCheckRun, enabledFromEnvironment, getPullRequestNumber, putIssueComment, readFileChanges, uploadAllFileChanges, uploadFileChanges };
 }
-//#endregion
 export { putIssueComment as a, buildNameFromEnvironment as c, createCheckRun as d, uploadFileChanges as i, enabledFromEnvironment as l, readFileChanges as n, getPullRequestNumber as o, uploadAllFileChanges as r, apiTokenFromEnvironment as s, index_d_exports as t, Annotation as u };

package/lib/{index-C9lVo3vU.d.cts → index-tjm5vla2.d.cts}

@@ -1,10 +1,7 @@
-//#region src/net/socket.d.ts
 interface SocketAddress {
   host: string;
   port: number;
 }
-//#endregion
-//#region src/net/waitFor.d.ts
 /**
  * Wait for a resource to start listening on a socket address.
  *
@@ -29,5 +26,4 @@ declare const waitFor: ({ host, port, resolveCompose, timeout }: {
 declare namespace index_d_exports {
   export { waitFor };
 }
-//#endregion
 export { waitFor as n, index_d_exports as t };

package/lib/{index-C9lVo3vU.d.mts → index-tjm5vla2.d.mts}

@@ -1,10 +1,7 @@
-//#region src/net/socket.d.ts
 interface SocketAddress {
   host: string;
   port: number;
 }
-//#endregion
-//#region src/net/waitFor.d.ts
 /**
  * Wait for a resource to start listening on a socket address.
  *
@@ -29,5 +26,4 @@ declare const waitFor: ({ host, port, resolveCompose, timeout }: {
 declare namespace index_d_exports {
   export { waitFor };
 }
-//#endregion
 export { waitFor as n, index_d_exports as t };

package/lib/index.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_buildkite = require("./buildkite-Br2Fyde2.cjs");
-const require_cdk_index = require("./cdk/index.cjs");
-const require_git = require("./git-CSGc8r3Q.cjs");
-const require_github = require("./github-CuWb88m1.cjs");
-const require_net = require("./net-BONidEnf.cjs");
-const require_rolldown = require("./rolldown-B47lAoi7.cjs");
+const require_buildkite = require("./buildkite-ClGGPaJV.cjs");
+const require_cdk = require("./cdk-ByEVlN14.cjs");
+const require_git = require("./git-BOuG-9aF.cjs");
+const require_github = require("./github-CY8WyO3R.cjs");
+const require_net = require("./net-B0uYVMTV.cjs");
+const require_rolldown = require("./rolldown-uS0trAmM.cjs");
 Object.defineProperty(exports, "Buildkite", {
 	enumerable: true,
 	get: function() {
@@ -14,7 +14,7 @@ Object.defineProperty(exports, "Buildkite", {
 Object.defineProperty(exports, "Cdk", {
 	enumerable: true,
 	get: function() {
-		return require_cdk_index.cdk_exports;
+		return require_cdk.cdk_exports;
 	}
 });
 Object.defineProperty(exports, "Git", {

package/lib/index.d.cts

@@ -1,7 +1,7 @@
-import { t as index_d_exports } from "./index-CNxgBJm_.cjs";
-import { t as index_d_exports$1 } from "./cdk/index.cjs";
-import { t as index_d_exports$2 } from "./index-CLEYcnJY.cjs";
-import { t as index_d_exports$3 } from "./index--hWvZI6b.cjs";
-import { t as index_d_exports$4 } from "./index-C9lVo3vU.cjs";
-import { t as index_d_exports$5 } from "./index-BKHTGdUP.cjs";
+import { t as index_d_exports } from "./index-DhV1vmV_.cjs";
+import { n as index_d_exports$1 } from "./index-DP8zjEgM.cjs";
+import { t as index_d_exports$2 } from "./index-CX5l1M9F.cjs";
+import { t as index_d_exports$3 } from "./index-ozhcNkrB.cjs";
+import { t as index_d_exports$4 } from "./index-tjm5vla2.cjs";
+import { t as index_d_exports$5 } from "./index-BqaQKTmE.cjs";
 export { index_d_exports as Buildkite, index_d_exports$1 as Cdk, index_d_exports$2 as Git, index_d_exports$3 as GitHub, index_d_exports$4 as Net, index_d_exports$5 as Rolldown };

package/lib/index.d.mts

@@ -1,7 +1,7 @@
-import { t as index_d_exports } from "./index-CNxgBJm_.mjs";
-import { t as index_d_exports$1 } from "./cdk/index.mjs";
-import { t as index_d_exports$2 } from "./index-CLEYcnJY.mjs";
-import { t as index_d_exports$3 } from "./index-J0PI37zH.mjs";
-import { t as index_d_exports$4 } from "./index-C9lVo3vU.mjs";
-import { t as index_d_exports$5 } from "./index-BKHTGdUP.mjs";
+import { t as index_d_exports } from "./index-DhV1vmV_.mjs";
+import { n as index_d_exports$1 } from "./index-DP8zjEgM.mjs";
+import { t as index_d_exports$2 } from "./index-CX5l1M9F.mjs";
+import { t as index_d_exports$3 } from "./index-BIoXUgOB.mjs";
+import { t as index_d_exports$4 } from "./index-tjm5vla2.mjs";
+import { t as index_d_exports$5 } from "./index-BqaQKTmE.mjs";
 export { index_d_exports as Buildkite, index_d_exports$1 as Cdk, index_d_exports$2 as Git, index_d_exports$3 as GitHub, index_d_exports$4 as Net, index_d_exports$5 as Rolldown };

package/lib/index.mjs

@@ -1,7 +1,7 @@
-import { t as buildkite_exports } from "./buildkite-D6oioQR_.mjs";
-import { t as cdk_exports } from "./cdk/index.mjs";
-import { t as git_exports } from "./git-BygvGOZr.mjs";
-import { t as github_exports } from "./github-BLyV25Ac.mjs";
-import { t as net_exports } from "./net-BxPK6QHR.mjs";
-import { t as rolldown_exports } from "./rolldown-CHdN4G5F.mjs";
+import { t as buildkite_exports } from "./buildkite-ChVcxGm7.mjs";
+import { t as cdk_exports } from "./cdk-BSFGwx14.mjs";
+import { t as git_exports } from "./git-DsCvTj_4.mjs";
+import { t as github_exports } from "./github-B_q9oeR0.mjs";
+import { t as net_exports } from "./net-Biz58RYT.mjs";
+import { t as rolldown_exports } from "./rolldown-BT1dfSUF.mjs";
 export { buildkite_exports as Buildkite, cdk_exports as Cdk, git_exports as Git, github_exports as GitHub, net_exports as Net, rolldown_exports as Rolldown };

package/lib/{logging-BQNEupxh.mjs → logging-BnwLxc05.mjs}

@@ -1,5 +1,5 @@
 import { styleText } from "node:util";
-//#region ../../src/utils/logging.ts
+// ../../src/utils/logging.ts
 const createLogger = ({ debug, prefixes = [], suffixes = [] }) => {
 	const logWithoutSuffixes = (...message) => console.log(...prefixes, ...message);
 	const log = (...message) => logWithoutSuffixes(...message, ...suffixes);
@@ -24,5 +24,4 @@ const createLogger = ({ debug, prefixes = [], suffixes = [] }) => {
 };
 const log = createLogger({ debug: false });
 const pluralise = (count, subject) => `${count} ${subject}${count === 1 ? "" : "s"}`;
-//#endregion
 export { pluralise as n, log as t };

package/lib/{logging-BqpzZfsF.cjs → logging-DlMiOLHo.cjs}

@@ -1,5 +1,5 @@
 let node_util = require("node:util");
-//#region ../../src/utils/logging.ts
+// ../../src/utils/logging.ts
 const createLogger = ({ debug, prefixes = [], suffixes = [] }) => {
 	const logWithoutSuffixes = (...message) => console.log(...prefixes, ...message);
 	const log = (...message) => logWithoutSuffixes(...message, ...suffixes);
@@ -24,7 +24,6 @@ const createLogger = ({ debug, prefixes = [], suffixes = [] }) => {
 };
 const log = createLogger({ debug: false });
 const pluralise = (count, subject) => `${count} ${subject}${count === 1 ? "" : "s"}`;
-//#endregion
 Object.defineProperty(exports, "log", {
 	enumerable: true,
 	get: function() {

package/lib/net/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_net = require("../net-BONidEnf.cjs");
+const require_net = require("../net-B0uYVMTV.cjs");
 exports.waitFor = require_net.waitFor;

package/lib/net/index.d.cts

@@ -1,2 +1,2 @@
-import { n as waitFor } from "../index-C9lVo3vU.cjs";
+import { n as waitFor } from "../index-tjm5vla2.cjs";
 export { waitFor };

package/lib/net/index.d.mts

@@ -1,2 +1,2 @@
-import { n as waitFor } from "../index-C9lVo3vU.mjs";
+import { n as waitFor } from "../index-tjm5vla2.mjs";
 export { waitFor };

package/lib/net/index.mjs

@@ -1,2 +1 @@
-import { n as waitFor } from "../net-BxPK6QHR.mjs";
-export { waitFor };
+export { n as waitFor } from "../net-Biz58RYT.mjs";

package/lib/{net-BONidEnf.cjs → net-B0uYVMTV.cjs}

@@ -1,8 +1,8 @@
-const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_exec = require("./exec-DqBpB5Vp.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-BW-eSwOZ.cjs");
+const require_exec = require("./exec-BIvSnwhj.cjs");
 let net = require("net");
 net = require_rolldown_runtime.__toESM(net, 1);
-//#region src/net/compose.ts
+// src/net/compose.ts
 const portStringToNumber = (portString) => {
 	const port = Number(portString);
 	if (!Number.isSafeInteger(port)) throw Error(`received non-integer port: '${portString}'`);
@@ -17,8 +17,7 @@ const resolveComposeAddress = async (privateHost, privatePort) => {
 		port: portStringToNumber(portString)
 	};
 };
-//#endregion
-//#region src/net/socket.ts
+// src/net/socket.ts
 const trySocket = async (host, port) => new Promise((resolve) => {
 	const socket = new net.default.Socket();
 	const onFailure = () => {
@@ -45,8 +44,7 @@ const pollSocket = async (host, port, timeout) => new Promise((resolve, reject)
 	}, timeout);
 	callPort().catch(() => void 0);
 });
-//#endregion
-//#region src/net/waitFor.ts
+// src/net/waitFor.ts
 /**
 * Wait for a resource to start listening on a socket address.
 *
@@ -61,10 +59,8 @@ const waitFor = async ({ host = "localhost", port, resolveCompose = false, timeo
 	await pollSocket(resolvedAddress.host, resolvedAddress.port, timeout);
 	return resolvedAddress;
 };
-//#endregion
-//#region src/net/index.ts
+// src/net/index.ts
 var net_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({ waitFor: () => waitFor });
-//#endregion
 Object.defineProperty(exports, "net_exports", {
 	enumerable: true,
 	get: function() {

package/lib/{net-BxPK6QHR.mjs → net-Biz58RYT.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { t as createExec } from "./exec-GeacTdU5.mjs";
+import { t as __exportAll } from "./rolldown-runtime-D8jQpDG7.mjs";
+import { t as createExec } from "./exec-DC-QAW0e.mjs";
 import net from "net";
-//#region src/net/compose.ts
+// src/net/compose.ts
 const portStringToNumber = (portString) => {
 	const port = Number(portString);
 	if (!Number.isSafeInteger(port)) throw Error(`received non-integer port: '${portString}'`);
@@ -16,8 +16,7 @@ const resolveComposeAddress = async (privateHost, privatePort) => {
 		port: portStringToNumber(portString)
 	};
 };
-//#endregion
-//#region src/net/socket.ts
+// src/net/socket.ts
 const trySocket = async (host, port) => new Promise((resolve) => {
 	const socket = new net.Socket();
 	const onFailure = () => {
@@ -44,8 +43,7 @@ const pollSocket = async (host, port, timeout) => new Promise((resolve, reject)
 	}, timeout);
 	callPort().catch(() => void 0);
 });
-//#endregion
-//#region src/net/waitFor.ts
+// src/net/waitFor.ts
 /**
 * Wait for a resource to start listening on a socket address.
 *
@@ -60,8 +58,6 @@ const waitFor = async ({ host = "localhost", port, resolveCompose = false, timeo
 	await pollSocket(resolvedAddress.host, resolvedAddress.port, timeout);
 	return resolvedAddress;
 };
-//#endregion
-//#region src/net/index.ts
+// src/net/index.ts
 var net_exports = /* @__PURE__ */ __exportAll({ waitFor: () => waitFor });
-//#endregion
 export { waitFor as n, net_exports as t };

package/lib/rolldown/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_rolldown = require("../rolldown-B47lAoi7.cjs");
+const require_rolldown = require("../rolldown-uS0trAmM.cjs");
 exports.lambdaAsset = require_rolldown.lambdaAsset;

package/lib/rolldown/index.d.cts

@@ -1,2 +1,2 @@
-import { i as lambdaAsset, n as LambdaAssetFile, r as LambdaAssetOptions } from "../index-BKHTGdUP.cjs";
+import { i as lambdaAsset, n as LambdaAssetFile, r as LambdaAssetOptions } from "../index-BqaQKTmE.cjs";
 export { type LambdaAssetFile, type LambdaAssetOptions, lambdaAsset };

package/lib/rolldown/index.d.mts

@@ -1,2 +1,2 @@
-import { i as lambdaAsset, n as LambdaAssetFile, r as LambdaAssetOptions } from "../index-BKHTGdUP.mjs";
+import { i as lambdaAsset, n as LambdaAssetFile, r as LambdaAssetOptions } from "../index-BqaQKTmE.mjs";
 export { type LambdaAssetFile, type LambdaAssetOptions, lambdaAsset };

package/lib/rolldown/index.mjs

@@ -1,2 +1 @@
-import { n as lambdaAsset } from "../rolldown-CHdN4G5F.mjs";
-export { lambdaAsset };
+export { n as lambdaAsset } from "../rolldown-BT1dfSUF.mjs";

package/lib/{rolldown-CHdN4G5F.mjs → rolldown-BT1dfSUF.mjs}

@@ -1,14 +1,14 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { t as log } from "./logging-BQNEupxh.mjs";
-import { t as createExec } from "./exec-GeacTdU5.mjs";
-import { t as pathExists } from "./fs-Cjt5C6XD.mjs";
+import { t as __exportAll } from "./rolldown-runtime-D8jQpDG7.mjs";
+import { t as log } from "./logging-BnwLxc05.mjs";
+import { t as createExec } from "./exec-DC-QAW0e.mjs";
+import { t as pathExists } from "./fs-Bac0LYeg.mjs";
 import { findPackageJSON } from "node:module";
+import * as path$1 from "node:path";
 import fs from "fs-extra";
-import * as path from "node:path";
 import { findUp } from "find-up";
 import { pathToFileURL } from "node:url";
 import { isMap, parseDocument } from "yaml";
-//#region src/rolldown/pnpm.ts
+// src/rolldown/pnpm.ts
 const PNPM_LOCK = "pnpm-lock.yaml";
 const PNPM_WORKSPACE_YAML = "pnpm-workspace.yaml";
 const PNPM_PATCHES_DIR = "patches";
@@ -18,7 +18,7 @@ const PNPM_WORKSPACE_FILES = [
 	".pnpmfile.cjs",
 	".pnpmfile.mjs"
 ];
-const PNPM_METADATA_FILES = [path.join("node_modules", ".modules.yaml"), path.join("node_modules", ".pnpm-workspace-state-v1.json")];
+const PNPM_METADATA_FILES = [path$1.join("node_modules", ".modules.yaml"), path$1.join("node_modules", ".pnpm-workspace-state-v1.json")];
 const PNPM_INSTALL_COMMAND = [
 	"pnpm",
 	"install",
@@ -43,7 +43,7 @@ const PACKAGE_MANAGER_FIELDS = ["packageManager", "devEngines"];
 * pnpm version as the project.
 */
 const readPackageManagerFields = async (workspaceRoot) => {
-	const pkgPath = path.join(workspaceRoot, "package.json");
+	const pkgPath = path$1.join(workspaceRoot, "package.json");
 	if (!await pathExists(pkgPath)) return {};
 	const parsed = await readJsonFile(pkgPath);
 	if (!isRecord(parsed)) return {};
@@ -73,21 +73,21 @@ const allowUnusedPatches = (content) => {
 */
 const stageWorkspaceFiles = async (workspaceRoot, outputDir, stagedFiles = []) => {
 	const present = (await Promise.all(PNPM_WORKSPACE_FILES.map(async (file) => {
-		const src = path.join(workspaceRoot, file);
+		const src = path$1.join(workspaceRoot, file);
 		return await pathExists(src) ? {
 			file,
 			src
 		} : void 0;
 	}))).filter((entry) => entry !== void 0);
-	for (const { file } of present) stagedFiles.push(path.join(outputDir, file));
+	for (const { file } of present) stagedFiles.push(path$1.join(outputDir, file));
 	await Promise.all(present.map(async ({ file, src }) => {
-		const dest = path.join(outputDir, file);
+		const dest = path$1.join(outputDir, file);
 		if (file === PNPM_WORKSPACE_YAML) await fs.promises.writeFile(dest, allowUnusedPatches(await fs.promises.readFile(src, "utf8")));
 		else await fs.promises.copyFile(src, dest);
 	}));
-	const patchesSrc = path.join(workspaceRoot, PNPM_PATCHES_DIR);
+	const patchesSrc = path$1.join(workspaceRoot, PNPM_PATCHES_DIR);
 	if (await pathExists(patchesSrc)) {
-		const patchesDest = path.join(outputDir, PNPM_PATCHES_DIR);
+		const patchesDest = path$1.join(outputDir, PNPM_PATCHES_DIR);
 		stagedFiles.push(patchesDest);
 		await fs.copy(patchesSrc, patchesDest);
 	}
@@ -113,20 +113,19 @@ const extractDependencies = async (resolveFrom, modules) => {
 	}
 	return result;
 };
-//#endregion
-//#region src/rolldown/lambdaAsset.ts
+// src/rolldown/lambdaAsset.ts
 const PLUGIN_NAME = "skuba:lambda-asset";
 const resolveOutputDir = ({ dir, file }, cwd) => {
 	if (!dir) throw new Error(`${PLUGIN_NAME} requires \`output.dir\`; it prepares a deployable directory, so a single \`output.file\`${file ? ` (${file})` : ""} has nowhere to install into.`);
-	return path.resolve(cwd, dir);
+	return path$1.resolve(cwd, dir);
 };
 const resolveLockFile = async (depsLockFilePath, cwd) => {
 	if (!depsLockFilePath) return findUp(PNPM_LOCK, { cwd });
-	const resolved = path.resolve(cwd, depsLockFilePath);
+	const resolved = path$1.resolve(cwd, depsLockFilePath);
 	if (!await pathExists(resolved)) throw new Error(`${PLUGIN_NAME} cannot find a ${PNPM_LOCK} at '${depsLockFilePath}'.`);
 	return resolved;
 };
-const toPosix = (p) => p.split(path.sep).join("/");
+const toPosix = (p) => p.split(path$1.sep).join("/");
 /**
 * Emits extra `assets` into the build output alongside the bundle.
 *
@@ -138,26 +137,26 @@ const toPosix = (p) => p.split(path.sep).join("/");
 */
 const emitAssets = async (emit, projectRoot, assets) => {
 	await Promise.all(assets.map(async (asset) => {
-		const from = path.resolve(projectRoot, asset.from);
-		const to = asset.to ?? path.basename(asset.from);
-		const normalized = path.normalize(to);
-		if (path.isAbsolute(normalized) || normalized === "." || normalized === ".." || normalized.startsWith(`..${path.sep}`)) throw new Error(`${PLUGIN_NAME} refuses to copy asset '${asset.from}' to '${asset.to}': it escapes the output directory.`);
+		const from = path$1.resolve(projectRoot, asset.from);
+		const to = asset.to ?? path$1.basename(asset.from);
+		const normalized = path$1.normalize(to);
+		if (path$1.isAbsolute(normalized) || normalized === "." || normalized === ".." || normalized.startsWith(`..${path$1.sep}`)) throw new Error(`${PLUGIN_NAME} refuses to copy asset '${asset.from}' to '${asset.to}': it escapes the output directory.`);
 		const files = (await fs.promises.stat(from)).isDirectory() ? (await fs.promises.readdir(from, {
 			recursive: true,
 			withFileTypes: true
-		})).filter((entry) => entry.isFile()).map((entry) => path.join(entry.parentPath, entry.name)) : [from];
+		})).filter((entry) => entry.isFile()).map((entry) => path$1.join(entry.parentPath, entry.name)) : [from];
 		await Promise.all(files.map(async (absFile) => {
-			const rel = path.relative(from, absFile);
+			const rel = path$1.relative(from, absFile);
 			emit({
 				type: "asset",
-				fileName: toPosix(rel ? path.join(to, rel) : to),
+				fileName: toPosix(rel ? path$1.join(to, rel) : to),
 				originalFileName: absFile,
 				source: await fs.promises.readFile(absFile)
 			});
 		}));
 	}));
 };
-const writeOutputPackageJson = (outputDir, fields = {}) => fs.promises.writeFile(path.join(outputDir, "package.json"), JSON.stringify({
+const writeOutputPackageJson = (outputDir, fields = {}) => fs.promises.writeFile(path$1.join(outputDir, "package.json"), JSON.stringify({
 	type: "module",
 	...fields
 }, null, 2));
@@ -168,7 +167,7 @@ const writeOutputPackageJson = (outputDir, fields = {}) => fs.promises.writeFile
 * not skip the rest, and the caller must hear about it.
 */
 const stripInstallFiles = async (outputDir, stagedFiles, cause) => {
-	const reasons = (await Promise.allSettled([...stagedFiles, ...PNPM_METADATA_FILES.map((file) => path.join(outputDir, file))].map((file) => fs.remove(file)))).flatMap((result) => result.status === "rejected" ? [String(result.reason)] : []);
+	const reasons = (await Promise.allSettled([...stagedFiles, ...PNPM_METADATA_FILES.map((file) => path$1.join(outputDir, file))].map((file) => fs.remove(file)))).flatMap((result) => result.status === "rejected" ? [String(result.reason)] : []);
 	if (reasons.length) throw new Error(`${PLUGIN_NAME} could not strip install-only files from '${outputDir}'; these may include registry credentials and must not be deployed. ${reasons.join("; ")}`, { cause });
 };
 /**
@@ -214,7 +213,7 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 			cwd = options.cwd;
 			prepared.clear();
 			if (assets.length) {
-				const projectRoot = path.resolve(cwd, projectRootOption ?? ".");
+				const projectRoot = path$1.resolve(cwd, projectRootOption ?? ".");
 				await emitAssets((file) => this.emitFile(file), projectRoot, assets);
 			}
 		},
@@ -222,15 +221,15 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 			const outputDir = resolveOutputDir(outputOptions, cwd);
 			if (prepared.has(outputDir)) return;
 			prepared.add(outputDir);
-			const projectRoot = path.resolve(cwd, projectRootOption ?? ".");
+			const projectRoot = path$1.resolve(cwd, projectRootOption ?? ".");
 			if (!nodeModules.length) {
 				await writeOutputPackageJson(outputDir);
 				return;
 			}
 			const depsLockFilePath = await resolveLockFile(depsLockFilePathOption, cwd);
 			if (!depsLockFilePath) throw new Error(`${PLUGIN_NAME} cannot find a ${PNPM_LOCK}, which \`nodeModules\` requires. Specify one with \`depsLockFilePath\`.`);
-			const workspaceRoot = path.dirname(depsLockFilePath);
-			const projectPackageJson = path.join(projectRoot, "package.json");
+			const workspaceRoot = path$1.dirname(depsLockFilePath);
+			const projectPackageJson = path$1.join(projectRoot, "package.json");
 			if (!await pathExists(projectPackageJson)) throw new Error(`${PLUGIN_NAME} cannot find a package.json in '${projectRoot}', which \`nodeModules\` requires. Specify the directory with \`projectRoot\`.`);
 			const [dependencies, packageManagerFields] = await Promise.all([extractDependencies(projectPackageJson, nodeModules), readPackageManagerFields(workspaceRoot)]);
 			await writeOutputPackageJson(outputDir, {
@@ -240,7 +239,7 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 			const stagedFiles = [];
 			try {
 				await stageWorkspaceFiles(workspaceRoot, outputDir, stagedFiles);
-				const lockDest = path.join(outputDir, PNPM_LOCK);
+				const lockDest = path$1.join(outputDir, PNPM_LOCK);
 				stagedFiles.push(lockDest);
 				await fs.promises.copyFile(depsLockFilePath, lockDest);
 				log.plain(log.bold(PLUGIN_NAME), "installing", log.bold(nodeModules.join(", ")));
@@ -249,8 +248,8 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 			} catch (err) {
 				await stripInstallFiles(outputDir, [
 					...stagedFiles,
-					path.join(outputDir, "package.json"),
-					path.join(outputDir, "node_modules")
+					path$1.join(outputDir, "package.json"),
+					path$1.join(outputDir, "node_modules")
 				], err);
 				throw err;
 			}
@@ -258,8 +257,6 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 		}
 	};
 };
-//#endregion
-//#region src/rolldown/index.ts
+// src/rolldown/index.ts
 var rolldown_exports = /* @__PURE__ */ __exportAll({ lambdaAsset: () => lambdaAsset });
-//#endregion
 export { lambdaAsset as n, rolldown_exports as t };

package/lib/{rolldown-runtime-C0BPl7ul.cjs → rolldown-runtime-BW-eSwOZ.cjs}

@@ -1,4 +1,4 @@
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -28,7 +28,6 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-//#endregion
 Object.defineProperty(exports, "__exportAll", {
 	enumerable: true,
 	get: function() {

package/lib/{rolldown-runtime-D7D4PA-g.mjs → rolldown-runtime-D8jQpDG7.mjs}

@@ -1,4 +1,4 @@
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -9,5 +9,4 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-//#endregion
 export { __exportAll as t };

package/lib/{rolldown-B47lAoi7.cjs → rolldown-uS0trAmM.cjs}

@@ -1,16 +1,16 @@
-const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
-const require_logging = require("./logging-BqpzZfsF.cjs");
-const require_exec = require("./exec-DqBpB5Vp.cjs");
-const require_fs = require("./fs-CuSraRTN.cjs");
-let fs_extra = require("fs-extra");
-fs_extra = require_rolldown_runtime.__toESM(fs_extra, 1);
+const require_rolldown_runtime = require("./rolldown-runtime-BW-eSwOZ.cjs");
+const require_logging = require("./logging-DlMiOLHo.cjs");
+const require_exec = require("./exec-BIvSnwhj.cjs");
+const require_fs = require("./fs-DF1Qj2xv.cjs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let fs_extra = require("fs-extra");
+fs_extra = require_rolldown_runtime.__toESM(fs_extra, 1);
 let find_up = require("find-up");
 let node_module = require("node:module");
 let node_url = require("node:url");
 let yaml = require("yaml");
-//#region src/rolldown/pnpm.ts
+// src/rolldown/pnpm.ts
 const PNPM_LOCK = "pnpm-lock.yaml";
 const PNPM_WORKSPACE_YAML = "pnpm-workspace.yaml";
 const PNPM_PATCHES_DIR = "patches";
@@ -115,8 +115,7 @@ const extractDependencies = async (resolveFrom, modules) => {
 	}
 	return result;
 };
-//#endregion
-//#region src/rolldown/lambdaAsset.ts
+// src/rolldown/lambdaAsset.ts
 const PLUGIN_NAME = "skuba:lambda-asset";
 const resolveOutputDir = ({ dir, file }, cwd) => {
 	if (!dir) throw new Error(`${PLUGIN_NAME} requires \`output.dir\`; it prepares a deployable directory, so a single \`output.file\`${file ? ` (${file})` : ""} has nowhere to install into.`);
@@ -260,10 +259,8 @@ const lambdaAsset = ({ nodeModules = [], assets = [], projectRoot: projectRootOp
 		}
 	};
 };
-//#endregion
-//#region src/rolldown/index.ts
+// src/rolldown/index.ts
 var rolldown_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({ lambdaAsset: () => lambdaAsset });
-//#endregion
 Object.defineProperty(exports, "lambdaAsset", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skuba-lib/api",
-  "version": "3.0.1",
+  "version": "3.1.0-add-CDK.ensureAssetPlaceholders-20261027233644",
   "description": "Node.js development API for skuba",
   "homepage": "https://github.com/seek-oss/skuba#readme",
   "bugs": {