@aws/agentcore 1.0.0-preview.20 → 1.0.0-preview.21

package/dist/lib/constants.d.ts

@@ -29,9 +29,13 @@ export declare const CONTAINER_INTERNAL_PORT = 8080;
 export type ContainerRuntime = 'docker' | 'podman' | 'finch';
 export declare const CONTAINER_RUNTIMES: ContainerRuntime[];
 /**
- * Get the Dockerfile path for a given code location.
- * @param codeLocation - Directory containing the Dockerfile
- * @param dockerfile - Custom Dockerfile name (default: 'Dockerfile')
+ * Resolve the Dockerfile path against the Docker build context.
+ * @param buildContext - The build context directory (`buildContextPath` when set, else `codeLocation`)
+ * @param dockerfile - Dockerfile name or relative subpath within the context (default: 'Dockerfile')
+ *
+ * `dockerfile` may be a filename ('Dockerfile') or a forward-slash relative subpath
+ * ('docker/Dockerfile'); absolute paths, backslashes, and `..` traversal are rejected so it can
+ * never escape the build context.
  */
-export declare function getDockerfilePath(codeLocation: string, dockerfile?: string): string;
+export declare function getDockerfilePath(buildContext: string, dockerfile?: string): string;
 //# sourceMappingURL=constants.d.ts.map

package/dist/lib/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAGA,cAAc,WAAW,CAAC;AAG1B,eAAO,MAAM,UAAU,cAAc,CAAC;AAGtC,eAAO,MAAM,OAAO,QAAQ,CAAC;AAC7B,eAAO,MAAM,cAAc,QAAQ,CAAC;AAGpC,eAAO,MAAM,WAAW,cAAc,CAAC;AAGvC,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,eAAO,MAAM,YAAY,SAAS,CAAC;AAEnC,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,eAAO,MAAM,eAAe,gGACmE,CAAC;AAChG,eAAO,MAAM,gBAAgB,wEAAwE,CAAC;AACtG,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAG/D,eAAO,MAAM,MAAM,QAAqB,CAAC;AACzC,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7D,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EAAkC,CAAC;AAEpF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAMnF"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":"AAIA,cAAc,WAAW,CAAC;AAG1B,eAAO,MAAM,UAAU,cAAc,CAAC;AAGtC,eAAO,MAAM,OAAO,QAAQ,CAAC;AAC7B,eAAO,MAAM,cAAc,QAAQ,CAAC;AAGpC,eAAO,MAAM,WAAW,cAAc,CAAC;AAGvC,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,eAAO,MAAM,YAAY,SAAS,CAAC;AAEnC,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,eAAO,MAAM,eAAe,gGACmE,CAAC;AAChG,eAAO,MAAM,gBAAgB,wEAAwE,CAAC;AACtG,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAG/D,eAAO,MAAM,MAAM,QAAqB,CAAC;AACzC,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7D,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EAAkC,CAAC;AAEpF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CASnF"}

package/dist/lib/constants.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CONTAINER_RUNTIMES = exports.CONTAINER_INTERNAL_PORT = exports.DOCKERFILE_NAME = exports.ONE_GB = exports.DEFAULT_PYTHON_PLATFORM = exports.NPM_INSTALL_HINT = exports.UV_INSTALL_HINT = exports.ENV_FILE = exports.CONFIG_FILES = exports.CLI_LOGS_DIR = exports.CLI_SYSTEM_DIR = exports.HARNESS_DIR = exports.MCP_APP_SUBDIR = exports.APP_DIR = exports.CONFIG_DIR = void 0;
 exports.getArtifactZipName = getArtifactZipName;
 exports.getDockerfilePath = getDockerfilePath;
+const schema_1 = require("../schema");
 const path_1 = require("path");
 // Re-export all schema constants from schema
 __exportStar(require("../schema"), exports);
@@ -55,15 +56,20 @@ exports.DOCKERFILE_NAME = 'Dockerfile';
 exports.CONTAINER_INTERNAL_PORT = 8080;
 exports.CONTAINER_RUNTIMES = ['docker', 'podman', 'finch'];
 /**
- * Get the Dockerfile path for a given code location.
- * @param codeLocation - Directory containing the Dockerfile
- * @param dockerfile - Custom Dockerfile name (default: 'Dockerfile')
+ * Resolve the Dockerfile path against the Docker build context.
+ * @param buildContext - The build context directory (`buildContextPath` when set, else `codeLocation`)
+ * @param dockerfile - Dockerfile name or relative subpath within the context (default: 'Dockerfile')
+ *
+ * `dockerfile` may be a filename ('Dockerfile') or a forward-slash relative subpath
+ * ('docker/Dockerfile'); absolute paths, backslashes, and `..` traversal are rejected so it can
+ * never escape the build context.
  */
-function getDockerfilePath(codeLocation, dockerfile) {
+function getDockerfilePath(buildContext, dockerfile) {
     const name = dockerfile ?? exports.DOCKERFILE_NAME;
-    if (name.includes('/') || name.includes('\\') || name.includes('..')) {
-        throw new Error(`Invalid dockerfile name: must be a filename without path separators or traversal`);
+    if (!(0, schema_1.isValidDockerfilePath)(name)) {
+        throw new Error(`Invalid dockerfile path "${name}": must be a relative path within the build context (a filename or ` +
+            `forward-slash subpath; no leading slash, backslash, empty segments, or ".." traversal)`);
     }
-    return (0, path_1.join)(codeLocation, name);
+    return (0, path_1.join)(buildContext, name);
 }
 //# sourceMappingURL=constants.js.map

package/dist/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAkCA,gDAEC;AAqBD,8CAMC;AA/DD,+BAA4B;AAE5B,6CAA6C;AAC7C,4CAA0B;AAE1B,yCAAyC;AAC5B,QAAA,UAAU,GAAG,WAAW,CAAC;AAEtC,kEAAkE;AACrD,QAAA,OAAO,GAAG,KAAK,CAAC;AAChB,QAAA,cAAc,GAAG,KAAK,CAAC;AAEpC,sBAAsB;AACT,QAAA,WAAW,GAAG,WAAW,CAAC;AAEvC,8CAA8C;AACjC,QAAA,cAAc,GAAG,MAAM,CAAC;AACxB,QAAA,YAAY,GAAG,MAAM,CAAC;AAEtB,QAAA,YAAY,GAAG;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,cAAc,EAAE,qBAAqB;IACrC,QAAQ,EAAE,eAAe;CACjB,CAAC;AAEX,gFAAgF;AACnE,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,GAAG,IAAI,MAAM,CAAC;AACvB,CAAC;AAEY,QAAA,eAAe,GAC1B,6FAA6F,CAAC;AACnF,QAAA,gBAAgB,GAAG,qEAAqE,CAAC;AACzF,QAAA,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D,sBAAsB;AACT,QAAA,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5B,QAAA,eAAe,GAAG,YAAY,CAAC;AAC/B,QAAA,uBAAuB,GAAG,IAAI,CAAC;AAI/B,QAAA,kBAAkB,GAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEpF;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,YAAoB,EAAE,UAAmB;IACzE,MAAM,IAAI,GAAG,UAAU,IAAI,uBAAe,CAAC;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,IAAA,WAAI,EAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/lib/constants.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAmCA,gDAEC;AAyBD,8CASC;AAvED,sCAAkD;AAClD,+BAA4B;AAE5B,6CAA6C;AAC7C,4CAA0B;AAE1B,yCAAyC;AAC5B,QAAA,UAAU,GAAG,WAAW,CAAC;AAEtC,kEAAkE;AACrD,QAAA,OAAO,GAAG,KAAK,CAAC;AAChB,QAAA,cAAc,GAAG,KAAK,CAAC;AAEpC,sBAAsB;AACT,QAAA,WAAW,GAAG,WAAW,CAAC;AAEvC,8CAA8C;AACjC,QAAA,cAAc,GAAG,MAAM,CAAC;AACxB,QAAA,YAAY,GAAG,MAAM,CAAC;AAEtB,QAAA,YAAY,GAAG;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,cAAc,EAAE,qBAAqB;IACrC,QAAQ,EAAE,eAAe;CACjB,CAAC;AAEX,gFAAgF;AACnE,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,GAAG,IAAI,MAAM,CAAC;AACvB,CAAC;AAEY,QAAA,eAAe,GAC1B,6FAA6F,CAAC;AACnF,QAAA,gBAAgB,GAAG,qEAAqE,CAAC;AACzF,QAAA,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D,sBAAsB;AACT,QAAA,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5B,QAAA,eAAe,GAAG,YAAY,CAAC;AAC/B,QAAA,uBAAuB,GAAG,IAAI,CAAC;AAI/B,QAAA,kBAAkB,GAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEpF;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,YAAoB,EAAE,UAAmB;IACzE,MAAM,IAAI,GAAG,UAAU,IAAI,uBAAe,CAAC;IAC3C,IAAI,CAAC,IAAA,8BAAqB,EAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,qEAAqE;YACnG,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,WAAI,EAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC"}

package/dist/lib/packaging/build-args.d.ts

@@ -3,4 +3,10 @@
  * Returns an empty array when no custom indexes are configured.
  */
 export declare function getUvBuildArgs(): string[];
+/**
+ * Return Docker `--build-arg KEY=VALUE` flags for an agent's `customDockerBuildArgs`.
+ * Returns an empty array when there are none. Shared by the local `package` and `dev` build paths
+ * so the flag encoding stays in one place.
+ */
+export declare function getCustomBuildArgs(customDockerBuildArgs?: Record<string, string>): string[];
 //# sourceMappingURL=build-args.d.ts.map

package/dist/lib/packaging/build-args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-args.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/build-args.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAMzC"}
+{"version":3,"file":"build-args.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/build-args.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAMzC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAE3F"}

package/dist/lib/packaging/build-args.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getUvBuildArgs = getUvBuildArgs;
+exports.getCustomBuildArgs = getCustomBuildArgs;
 const global_config_1 = require("../schemas/io/global-config");
 /**
  * Return Docker --build-arg flags for UV index URLs configured in ~/.agentcore/config.json.
@@ -15,4 +16,12 @@ function getUvBuildArgs() {
         args.push('--build-arg', `UV_INDEX=${config.uvIndex}`);
     return args;
 }
+/**
+ * Return Docker `--build-arg KEY=VALUE` flags for an agent's `customDockerBuildArgs`.
+ * Returns an empty array when there are none. Shared by the local `package` and `dev` build paths
+ * so the flag encoding stays in one place.
+ */
+function getCustomBuildArgs(customDockerBuildArgs) {
+    return Object.entries(customDockerBuildArgs ?? {}).flatMap(([key, value]) => ['--build-arg', `${key}=${value}`]);
+}
 //# sourceMappingURL=build-args.js.map

package/dist/lib/packaging/build-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-args.js","sourceRoot":"","sources":["../../../src/lib/packaging/build-args.ts"],"names":[],"mappings":";;AAMA,wCAMC;AAZD,+DAAmE;AAEnE;;;GAGG;AACH,SAAgB,cAAc;IAC5B,MAAM,MAAM,GAAG,IAAA,oCAAoB,GAAE,CAAC;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"build-args.js","sourceRoot":"","sources":["../../../src/lib/packaging/build-args.ts"],"names":[],"mappings":";;AAMA,wCAMC;AAOD,gDAEC;AArBD,+DAAmE;AAEnE;;;GAGG;AACH,SAAgB,cAAc;IAC5B,MAAM,MAAM,GAAG,IAAA,oCAAoB,GAAE,CAAC;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,qBAA8C;IAC/E,OAAO,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;AACnH,CAAC"}

package/dist/lib/packaging/build-context-dockerignore.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Default `.dockerignore` written at a Container agent's build-context root when `buildContextPath`
+ * is set and none exists. Keeps secrets and build junk out of the image and out of the CodeBuild
+ * upload. Both local `agentcore dev`/`package` and `agentcore deploy` honor this same file, so what
+ * is excluded locally is exactly what is excluded on deploy.
+ */
+export declare const BUILD_CONTEXT_DOCKERIGNORE_TEMPLATE = "# Generated by agentcore because this agent sets buildContextPath \u2014 the whole of this directory is the\n# Docker build context, so secrets/junk here would otherwise be baked into the image and uploaded to\n# CodeBuild. Patterns are listed both bare and '**/'-prefixed so nested copies (e.g.\n# app/agent-one/node_modules, app/agent-one/.env) are excluded too, not just the top level \u2014 Docker\n# matches .dockerignore patterns root-relative. Both 'agentcore dev'/'package' and 'agentcore deploy'\n# honor this file. Edit freely; to intentionally include a file listed here (e.g. a non-secret\n# .env.production), add a '!'-prefixed line for it below.\n.env\n.env.*\n**/.env\n**/.env.*\n.git\n**/.git\n.venv\n**/.venv\nnode_modules\n**/node_modules\n__pycache__\n**/__pycache__\n.pytest_cache\n**/.pytest_cache\n.DS_Store\n**/.DS_Store\nagentcore/\n";
+/**
+ * Ensure a `.dockerignore` exists at the resolved build-context root. No-op when the directory does
+ * not exist or a `.dockerignore` is already present (the user's file is never overwritten). Returns
+ * the path when it creates one, otherwise null.
+ *
+ * Guards the DIRECTORY, not just the file: a missing/typo'd `buildContextPath` would otherwise make
+ * `writeFileSync` throw a raw ENOENT — crashing `agentcore dev`, bypassing `PackagingError` in
+ * `package`, and masking preflight's friendly "Dockerfile not found". Callers invoke this only AFTER
+ * validating that the Dockerfile exists, so on a failing build/deploy no stray `.dockerignore` is
+ * left behind.
+ *
+ * Called only when `buildContextPath` is set — that is when the context is widened beyond the agent's
+ * own `codeLocation` (e.g. to a monorepo root) and a stray root-level `.env`/`.git` would be swept in.
+ */
+export declare function ensureBuildContextDockerignore(resolvedBuildContext: string): string | null;
+//# sourceMappingURL=build-context-dockerignore.d.ts.map

package/dist/lib/packaging/build-context-dockerignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context-dockerignore.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/build-context-dockerignore.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,81BAwB/C,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,oBAAoB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1F"}

package/dist/lib/packaging/build-context-dockerignore.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILD_CONTEXT_DOCKERIGNORE_TEMPLATE = void 0;
+exports.ensureBuildContextDockerignore = ensureBuildContextDockerignore;
+const fs_1 = require("fs");
+const path_1 = require("path");
+/**
+ * Default `.dockerignore` written at a Container agent's build-context root when `buildContextPath`
+ * is set and none exists. Keeps secrets and build junk out of the image and out of the CodeBuild
+ * upload. Both local `agentcore dev`/`package` and `agentcore deploy` honor this same file, so what
+ * is excluded locally is exactly what is excluded on deploy.
+ */
+exports.BUILD_CONTEXT_DOCKERIGNORE_TEMPLATE = `# Generated by agentcore because this agent sets buildContextPath — the whole of this directory is the
+# Docker build context, so secrets/junk here would otherwise be baked into the image and uploaded to
+# CodeBuild. Patterns are listed both bare and '**/'-prefixed so nested copies (e.g.
+# app/agent-one/node_modules, app/agent-one/.env) are excluded too, not just the top level — Docker
+# matches .dockerignore patterns root-relative. Both 'agentcore dev'/'package' and 'agentcore deploy'
+# honor this file. Edit freely; to intentionally include a file listed here (e.g. a non-secret
+# .env.production), add a '!'-prefixed line for it below.
+.env
+.env.*
+**/.env
+**/.env.*
+.git
+**/.git
+.venv
+**/.venv
+node_modules
+**/node_modules
+__pycache__
+**/__pycache__
+.pytest_cache
+**/.pytest_cache
+.DS_Store
+**/.DS_Store
+agentcore/
+`;
+/**
+ * Ensure a `.dockerignore` exists at the resolved build-context root. No-op when the directory does
+ * not exist or a `.dockerignore` is already present (the user's file is never overwritten). Returns
+ * the path when it creates one, otherwise null.
+ *
+ * Guards the DIRECTORY, not just the file: a missing/typo'd `buildContextPath` would otherwise make
+ * `writeFileSync` throw a raw ENOENT — crashing `agentcore dev`, bypassing `PackagingError` in
+ * `package`, and masking preflight's friendly "Dockerfile not found". Callers invoke this only AFTER
+ * validating that the Dockerfile exists, so on a failing build/deploy no stray `.dockerignore` is
+ * left behind.
+ *
+ * Called only when `buildContextPath` is set — that is when the context is widened beyond the agent's
+ * own `codeLocation` (e.g. to a monorepo root) and a stray root-level `.env`/`.git` would be swept in.
+ */
+function ensureBuildContextDockerignore(resolvedBuildContext) {
+    if (!(0, fs_1.existsSync)(resolvedBuildContext)) {
+        return null;
+    }
+    const dockerignorePath = (0, path_1.join)(resolvedBuildContext, '.dockerignore');
+    if ((0, fs_1.existsSync)(dockerignorePath)) {
+        return null;
+    }
+    (0, fs_1.writeFileSync)(dockerignorePath, exports.BUILD_CONTEXT_DOCKERIGNORE_TEMPLATE);
+    return dockerignorePath;
+}
+//# sourceMappingURL=build-context-dockerignore.js.map

package/dist/lib/packaging/build-context-dockerignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context-dockerignore.js","sourceRoot":"","sources":["../../../src/lib/packaging/build-context-dockerignore.ts"],"names":[],"mappings":";;;AAiDA,wEAUC;AA3DD,2BAA+C;AAC/C,+BAA4B;AAE5B;;;;;GAKG;AACU,QAAA,mCAAmC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBlD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,SAAgB,8BAA8B,CAAC,oBAA4B;IACzE,IAAI,CAAC,IAAA,eAAU,EAAC,oBAAoB,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAA,WAAI,EAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,IAAA,eAAU,EAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAA,kBAAa,EAAC,gBAAgB,EAAE,2CAAmC,CAAC,CAAC;IACrE,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/lib/packaging/build-context.d.ts

@@ -0,0 +1,21 @@
+import type { AgentEnvSpec } from '../../schema';
+/** Resolved Docker build context and Dockerfile path for a Container agent. */
+export interface ResolvedBuildContext {
+    /** Absolute path to the Docker build context (`buildContextPath` when set, else `codeLocation`). */
+    buildContext: string;
+    /** Absolute path to the Dockerfile, resolved against the build context. */
+    dockerfilePath: string;
+}
+/**
+ * Resolve the Docker build context + Dockerfile path for a Container agent — the single source of
+ * truth shared by `package` (ContainerPackager), `deploy` preflight, and `dev`.
+ *
+ * The context is `buildContextPath` when set, otherwise `codeLocation`, resolved via
+ * `resolveCodeLocation` (the same resolver the deploy-side `ContainerSourceAsset` uses to upload it),
+ * and the Dockerfile is resolved against that context (matching the CodeBuild buildspec's `-f`).
+ * Collapsing this into one function keeps local `dev`/`package` and `deploy` from ever resolving the
+ * context differently — a divergence would otherwise let a config build from one directory locally and
+ * a different one on deploy.
+ */
+export declare function resolveBuildContext(spec: Pick<AgentEnvSpec, 'codeLocation' | 'buildContextPath' | 'dockerfile'>, baseDir: string): ResolvedBuildContext;
+//# sourceMappingURL=build-context.d.ts.map

package/dist/lib/packaging/build-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/build-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAIjD,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,kBAAkB,GAAG,YAAY,CAAC,EAC5E,OAAO,EAAE,MAAM,GACd,oBAAoB,CAGtB"}

package/dist/lib/packaging/build-context.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBuildContext = resolveBuildContext;
+const constants_1 = require("../constants");
+const helpers_1 = require("./helpers");
+/**
+ * Resolve the Docker build context + Dockerfile path for a Container agent — the single source of
+ * truth shared by `package` (ContainerPackager), `deploy` preflight, and `dev`.
+ *
+ * The context is `buildContextPath` when set, otherwise `codeLocation`, resolved via
+ * `resolveCodeLocation` (the same resolver the deploy-side `ContainerSourceAsset` uses to upload it),
+ * and the Dockerfile is resolved against that context (matching the CodeBuild buildspec's `-f`).
+ * Collapsing this into one function keeps local `dev`/`package` and `deploy` from ever resolving the
+ * context differently — a divergence would otherwise let a config build from one directory locally and
+ * a different one on deploy.
+ */
+function resolveBuildContext(spec, baseDir) {
+    const buildContext = (0, helpers_1.resolveCodeLocation)(spec.buildContextPath ?? spec.codeLocation, baseDir);
+    return { buildContext, dockerfilePath: (0, constants_1.getDockerfilePath)(buildContext, spec.dockerfile) };
+}
+//# sourceMappingURL=build-context.js.map

package/dist/lib/packaging/build-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-context.js","sourceRoot":"","sources":["../../../src/lib/packaging/build-context.ts"],"names":[],"mappings":";;AAuBA,kDAMC;AA5BD,4CAAiD;AACjD,uCAAgD;AAUhD;;;;;;;;;;GAUG;AACH,SAAgB,mBAAmB,CACjC,IAA4E,EAC5E,OAAe;IAEf,MAAM,YAAY,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC9F,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,IAAA,6BAAiB,EAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;AAC5F,CAAC"}

package/dist/lib/packaging/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/container.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAKjD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAmBzF;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,eAAe;IACvD,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;CAkEhF"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/container.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAOjD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAmBzF;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,eAAe;IACvD,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;CA4EhF"}

package/dist/lib/packaging/container.js

@@ -4,6 +4,8 @@ exports.ContainerPackager = void 0;
 const constants_1 = require("../constants");
 const types_1 = require("../errors/types");
 const build_args_1 = require("./build-args");
+const build_context_1 = require("./build-context");
+const build_context_dockerignore_1 = require("./build-context-dockerignore");
 const helpers_1 = require("./helpers");
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
@@ -34,11 +36,18 @@ class ContainerPackager {
         const agentName = options.agentName ?? spec.name;
         const configBaseDir = options.artifactDir ?? options.projectRoot ?? process.cwd();
         const codeLocation = (0, helpers_1.resolveCodeLocation)(spec.codeLocation, configBaseDir);
-        const dockerfilePath = (0, constants_1.getDockerfilePath)(codeLocation, spec.dockerfile);
+        // Build context + Dockerfile via the shared resolver (identical to the deploy/CodeBuild path).
+        const { buildContext, dockerfilePath } = (0, build_context_1.resolveBuildContext)(spec, configBaseDir);
         // Preflight: Dockerfile must exist
         if (!(0, fs_1.existsSync)(dockerfilePath)) {
             return Promise.reject(new types_1.PackagingError(`${spec.dockerfile ?? constants_1.DOCKERFILE_NAME} not found at ${dockerfilePath}. Container agents require a Dockerfile.`));
         }
+        // Dockerfile validated — when buildContextPath widens the context, ensure a .dockerignore keeps
+        // secrets/junk out of the local image (the same file the deploy path honors). No-op if the dir is
+        // missing or a .dockerignore already exists, so a failing build never leaves a stray file.
+        if (spec.buildContextPath) {
+            (0, build_context_dockerignore_1.ensureBuildContextDockerignore)(buildContext);
+        }
         // Detect container runtime
         const runtime = detectContainerRuntimeSync();
         if (!runtime) {
@@ -49,9 +58,11 @@ class ContainerPackager {
                 stagingPath: codeLocation,
             });
         }
-        // Build locally
-        const imageName = `agentcore-package-${agentName}`;
-        const buildResult = (0, child_process_1.spawnSync)(runtime, ['build', '-t', imageName, '-f', dockerfilePath, ...(0, build_args_1.getUvBuildArgs)(), codeLocation], {
+        // Build locally. Docker image tags must be lowercase, but agent names allow uppercase
+        // (e.g. the default "AgentOne"), so lower-case the tag — matching the dev server.
+        const imageName = `agentcore-package-${agentName}`.toLowerCase();
+        const buildArgFlags = (0, build_args_1.getCustomBuildArgs)(spec.customDockerBuildArgs);
+        const buildResult = (0, child_process_1.spawnSync)(runtime, ['build', '-t', imageName, '-f', dockerfilePath, ...(0, build_args_1.getUvBuildArgs)(), ...buildArgFlags, buildContext], {
             stdio: 'pipe',
         });
         if (buildResult.status !== 0) {

package/dist/lib/packaging/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../../src/lib/packaging/container.ts"],"names":[],"mappings":";;;AACA,4CAA8F;AAC9F,2CAAiD;AACjD,6CAA8C;AAC9C,uCAAgD;AAEhD,iDAA0C;AAC1C,2BAAgC;AAEhC;;;GAGG;AACH,SAAS,0BAA0B;IACjC,KAAK,MAAM,OAAO,IAAI,8BAAkB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IAC5B,IAAI,CAAC,IAAkB,EAAE,UAA0B,EAAE;QACnD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,sBAAc,CAAC,uDAAuD,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;QACjD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClF,MAAM,YAAY,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,IAAA,6BAAiB,EAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAExE,mCAAmC;QACnC,IAAI,CAAC,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,sBAAc,CAChB,GAAG,IAAI,CAAC,UAAU,IAAI,2BAAe,iBAAiB,cAAc,0CAA0C,CAC/G,CACF,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iFAAiF;YACjF,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,YAAY;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB;QAChB,MAAM,SAAS,GAAG,qBAAqB,SAAS,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,IAAA,yBAAS,EAC3B,OAAO,EACP,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAA,2BAAc,GAAE,EAAE,YAAY,CAAC,EACnF;YACE,KAAK,EAAE,MAAM;SACd,CACF,CAAC;QAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,sBAAc,CAAC,4BAA4B,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1G,CAAC;QAED,4BAA4B;QAC5B,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE;YACjG,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,SAAS,GAAG,kBAAM,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,sBAAc,CAChB,sCAAsC,MAAM,OAAO;gBACjD,6FAA6F,CAChG,CACF,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,YAAY,EAAE,GAAG,OAAO,MAAM,SAAS,EAAE;YACzC,SAAS;YACT,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;IACL,CAAC;CACF;AAnED,8CAmEC"}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../../src/lib/packaging/container.ts"],"names":[],"mappings":";;;AACA,4CAA2E;AAC3E,2CAAiD;AACjD,6CAAkE;AAClE,mDAAsD;AACtD,6EAA8E;AAC9E,uCAAgD;AAEhD,iDAA0C;AAC1C,2BAAgC;AAEhC;;;GAGG;AACH,SAAS,0BAA0B;IACjC,KAAK,MAAM,OAAO,IAAI,8BAAkB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IAC5B,IAAI,CAAC,IAAkB,EAAE,UAA0B,EAAE;QACnD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,sBAAc,CAAC,uDAAuD,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;QACjD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClF,MAAM,YAAY,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC3E,+FAA+F;QAC/F,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,IAAA,mCAAmB,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAElF,mCAAmC;QACnC,IAAI,CAAC,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,sBAAc,CAChB,GAAG,IAAI,CAAC,UAAU,IAAI,2BAAe,iBAAiB,cAAc,0CAA0C,CAC/G,CACF,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,kGAAkG;QAClG,2FAA2F;QAC3F,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAA,2DAA8B,EAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iFAAiF;YACjF,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,YAAY;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,sFAAsF;QACtF,kFAAkF;QAClF,MAAM,SAAS,GAAG,qBAAqB,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,IAAA,+BAAkB,EAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAA,yBAAS,EAC3B,OAAO,EACP,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAA,2BAAc,GAAE,EAAE,GAAG,aAAa,EAAE,YAAY,CAAC,EACrG;YACE,KAAK,EAAE,MAAM;SACd,CACF,CAAC;QAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,sBAAc,CAAC,4BAA4B,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1G,CAAC;QAED,4BAA4B;QAC5B,MAAM,aAAa,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE;YACjG,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,SAAS,GAAG,kBAAM,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,sBAAc,CAChB,sCAAsC,MAAM,OAAO;gBACjD,6FAA6F,CAChG,CACF,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,YAAY,EAAE,GAAG,OAAO,MAAM,SAAS,EAAE;YACzC,SAAS;YACT,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;IACL,CAAC;CACF;AA7ED,8CA6EC"}

package/dist/lib/packaging/index.d.ts

@@ -36,4 +36,6 @@ export declare function packRuntime(spec: AgentEnvSpec, options?: PackageOptions
 export declare function packCodeZipSync(config: CodeBundleConfig | AgentEnvSpec, options?: PackageOptions): ArtifactResult;
 export type { ArtifactResult, CodeBundleConfig, CodeZipPackager, PackageOptions, RuntimePackager, } from './types/packaging';
 export { resolveCodeLocation } from './helpers';
+export { ensureBuildContextDockerignore } from './build-context-dockerignore';
+export { resolveBuildContext, type ResolvedBuildContext } from './build-context';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/packaging/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAOvF,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAM1F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,eAAe,CAQlF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,eAAe,CAQlF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,eAAe,CAEtD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAGvG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAIjH;AAED,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/packaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAOvF,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAM1F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,eAAe,CAQlF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,eAAe,CAQlF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,eAAe,CAEtD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAGvG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAIjH;AAED,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/lib/packaging/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveCodeLocation = void 0;
+exports.resolveBuildContext = exports.ensureBuildContextDockerignore = exports.resolveCodeLocation = void 0;
 exports.validateAgentExists = validateAgentExists;
 exports.getRuntimePackager = getRuntimePackager;
 exports.getCodeZipPackager = getCodeZipPackager;
@@ -80,4 +80,8 @@ function packCodeZipSync(config, options) {
 }
 var helpers_2 = require("./helpers");
 Object.defineProperty(exports, "resolveCodeLocation", { enumerable: true, get: function () { return helpers_2.resolveCodeLocation; } });
+var build_context_dockerignore_1 = require("./build-context-dockerignore");
+Object.defineProperty(exports, "ensureBuildContextDockerignore", { enumerable: true, get: function () { return build_context_dockerignore_1.ensureBuildContextDockerignore; } });
+var build_context_1 = require("./build-context");
+Object.defineProperty(exports, "resolveBuildContext", { enumerable: true, get: function () { return build_context_1.resolveBuildContext; } });
 //# sourceMappingURL=index.js.map

package/dist/lib/packaging/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/packaging/index.ts"],"names":[],"mappings":";;;AAqBA,kDAMC;AAMD,gDAQC;AAMD,gDAQC;AAKD,oDAEC;AAOD,kCAGC;AAQD,0CAIC;AAnFD,yCAAsD;AACtD,2CAAiD;AACjD,2CAAgD;AAChD,uCAA2D;AAC3D,iCAAsE;AACtE,qCAA4E;AAS5E;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,OAA6B,EAAE,SAAiB;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,IAAI,sBAAc,CAAC,UAAU,SAAS,kCAAkC,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,cAA8B;IAC/D,IAAI,IAAA,yBAAe,EAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,8BAAqB,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,IAAA,uBAAa,EAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,0BAAmB,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,sBAAc,CAAC,gCAAgC,cAAc,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,cAA8B;IAC/D,IAAI,IAAA,yBAAe,EAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,kCAAyB,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAA,uBAAa,EAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,8BAAuB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,sBAAc,CAAC,gCAAgC,cAAc,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,OAAO,IAAI,6BAAiB,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,IAAkB,EAAE,OAAwB;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAe,CAAC,CAAC;IAChH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAAuC,EAAE,OAAwB;IAC/F,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,+BAAsB,CAAC;IACvE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAsB,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAUD,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/packaging/index.ts"],"names":[],"mappings":";;;AAqBA,kDAMC;AAMD,gDAQC;AAMD,gDAQC;AAKD,oDAEC;AAOD,kCAGC;AAQD,0CAIC;AAnFD,yCAAsD;AACtD,2CAAiD;AACjD,2CAAgD;AAChD,uCAA2D;AAC3D,iCAAsE;AACtE,qCAA4E;AAS5E;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,OAA6B,EAAE,SAAiB;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,IAAI,sBAAc,CAAC,UAAU,SAAS,kCAAkC,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,cAA8B;IAC/D,IAAI,IAAA,yBAAe,EAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,8BAAqB,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,IAAA,uBAAa,EAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,0BAAmB,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,sBAAc,CAAC,gCAAgC,cAAc,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,cAA8B;IAC/D,IAAI,IAAA,yBAAe,EAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,kCAAyB,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAA,uBAAa,EAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,8BAAuB,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,sBAAc,CAAC,gCAAgC,cAAc,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,OAAO,IAAI,6BAAiB,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,IAAkB,EAAE,OAAwB;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAe,CAAC,CAAC;IAChH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAAuC,EAAE,OAAwB;IAC/F,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,+BAAsB,CAAC;IACvE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAsB,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAUD,qCAAgD;AAAvC,8GAAA,mBAAmB,OAAA;AAC5B,2EAA8E;AAArE,4IAAA,8BAA8B,OAAA;AACvC,iDAAiF;AAAxE,oHAAA,mBAAmB,OAAA"}

package/dist/schema/schemas/agent-env.d.ts

@@ -24,6 +24,26 @@ export type BuildType = z.infer<typeof BuildTypeSchema>;
  * TypeScript: main.ts, main.js, or index.ts
  */
 export declare const EntrypointSchema: z.ZodType<FilePath>;
+/**
+ * True when `p` is a safe relative Dockerfile path within the build context: allowed chars only, no
+ * leading slash (absolute), and no empty ('' from a leading/trailing/double slash) or '..' segments.
+ *
+ * The single source of truth shared by `DockerfilePathSchema` (config-validation time) and the runtime
+ * `getDockerfilePath` guard, so the two can never diverge — e.g. one accepting '.docker/Dockerfile'
+ * while the other rejects it, or one accepting a trailing-slash directory value like 'docker/'.
+ */
+export declare function isValidDockerfilePath(p: string): boolean;
+/**
+ * Build-arg names reserved by the CodeBuild build environment. On deploy each build arg becomes a
+ * CodeBuild environment-variable override alongside the buildspec's own control vars, so a colliding
+ * name would break the deploy build — a wrong image tag / ECR region, a rejected StartBuild, or a
+ * clobbered build-container shell. We reject the buildspec control vars, the process-critical shell
+ * vars, and CodeBuild's own `AWS_*` / `CODEBUILD_*` namespaces. This is a best-effort denylist (the
+ * shell has other sensitive vars), but it covers the realistic footguns and keeps a config that
+ * builds locally from failing only on deploy.
+ */
+export declare const RESERVED_BUILD_ARG_KEYS: string[];
+export declare function isReservedBuildArgKey(key: string): boolean;
 export declare const EnvVarSchema: z.ZodObject<{
     name: z.ZodString;
     value: z.ZodString;
@@ -151,6 +171,8 @@ export declare const AgentEnvSpecSchema: z.ZodObject<{
     entrypoint: z.ZodType<FilePath, unknown, z.core.$ZodTypeInternals<FilePath, unknown>>;
     codeLocation: z.ZodType<DirectoryPath, unknown, z.core.$ZodTypeInternals<DirectoryPath, unknown>>;
     dockerfile: z.ZodOptional<z.ZodString>;
+    buildContextPath: z.ZodOptional<z.ZodType<DirectoryPath, unknown, z.core.$ZodTypeInternals<DirectoryPath, unknown>>>;
+    customDockerBuildArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     runtimeVersion: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         PYTHON_3_10: "PYTHON_3_10";
         PYTHON_3_11: "PYTHON_3_11";

package/dist/schema/schemas/agent-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-env.d.ts","sourceRoot":"","sources":["../../../src/schema/schemas/agent-env.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAIxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAO1G,eAAO,MAAM,eAAe,aAOzB,CAAC;AAEJ,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAGJ,eAAO,MAAM,iBAAiB,aAQ3B,CAAC;AAMJ,wCAAwC;AACxC,eAAO,MAAM,YAAY;;;EAAgC,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,eAAe,kCAAgC,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;EAAmC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAKxD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAOX,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAItC,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,qBAAqB;;iBAOhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,6CAA6C,CAAC;AAClF,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AACvD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY/D;AAED,eAAO,MAAM,4BAA4B,yBASgD,CAAC;AAE1F;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,4BAA4B,QACyD,CAAC;AAEnG,eAAO,MAAM,iCAAiC,QAC4E,CAAC;AAE3H,uEAAuE;AACvE,eAAO,MAAM,0BAA0B;;;iBAcrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B;;;iBAiBzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,6DAA6D;AAC7D,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,kEAAkE;AAClE,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;oBAIxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;iBAiBrC,CAAC;AACL,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;GAEG;AACH,eAAO,MAAM,yBAAyB,aAOnC,CAAC;AAEJ,eAAO,MAAM,qBAAqB;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuK3B,CAAC;AAEL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"agent-env.d.ts","sourceRoot":"","sources":["../../../src/schema/schemas/agent-env.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAIxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAClE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAO1G,eAAO,MAAM,eAAe,aAOzB,CAAC;AAEJ,eAAO,MAAM,gBAAgB,aAO1B,CAAC;AAGJ,eAAO,MAAM,iBAAiB,aAQ3B,CAAC;AAMJ,wCAAwC;AACxC,eAAO,MAAM,YAAY;;;EAAgC,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAMlD,eAAO,MAAM,eAAe,kCAAgC,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;EAAmC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAKxD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAOX,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAStC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAIxD;AAkBD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,UAkBnC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1D;AAgBD,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,qBAAqB;;iBAOhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,6CAA6C,CAAC;AAClF,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AACvD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY/D;AAED,eAAO,MAAM,4BAA4B,yBASgD,CAAC;AAE1F;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,4BAA4B,QACyD,CAAC;AAEnG,eAAO,MAAM,iCAAiC,QAC4E,CAAC;AAE3H,uEAAuE;AACvE,eAAO,MAAM,0BAA0B;;;iBAcrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B;;;iBAiBzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,6DAA6D;AAC7D,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,kEAAkE;AAClE,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;oBAIxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;iBAiBrC,CAAC;AACL,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;GAEG;AACH,eAAO,MAAM,yBAAyB,aAOnC,CAAC;AAEJ,eAAO,MAAM,qBAAqB;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmM3B,CAAC;AAEL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schema/schemas/agent-env.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentEnvSpecSchema = exports.RuntimeEndpointSchema = exports.RuntimeEndpointNameSchema = exports.LifecycleConfigurationSchema = exports.LIFECYCLE_TIMEOUT_MAX = exports.LIFECYCLE_TIMEOUT_MIN = exports.FilesystemConfigurationSchema = exports.MAX_S3_MOUNTS = exports.MAX_EFS_MOUNTS = exports.S3FilesAccessPointConfigSchema = exports.EfsAccessPointConfigSchema = exports.S3_FILES_ACCESS_POINT_ARN_PATTERN = exports.EFS_ACCESS_POINT_ARN_PATTERN = exports.SessionStorageSchema = exports.RequestHeaderAllowlistSchema = exports.MAX_HEADER_ALLOWLIST_SIZE = exports.HEADER_NAME_PATTERN = exports.HEADER_ALLOWLIST_PREFIX = exports.NetworkConfigSchema = exports.InstrumentationSchema = exports.EnvVarSchema = exports.EntrypointSchema = exports.BuildTypeSchema = exports.AgentTypeSchema = exports.AccessSchema = exports.GatewayNameSchema = exports.EnvVarNameSchema = exports.AgentNameSchema = void 0;
+exports.AgentEnvSpecSchema = exports.RuntimeEndpointSchema = exports.RuntimeEndpointNameSchema = exports.LifecycleConfigurationSchema = exports.LIFECYCLE_TIMEOUT_MAX = exports.LIFECYCLE_TIMEOUT_MIN = exports.FilesystemConfigurationSchema = exports.MAX_S3_MOUNTS = exports.MAX_EFS_MOUNTS = exports.S3FilesAccessPointConfigSchema = exports.EfsAccessPointConfigSchema = exports.S3_FILES_ACCESS_POINT_ARN_PATTERN = exports.EFS_ACCESS_POINT_ARN_PATTERN = exports.SessionStorageSchema = exports.RequestHeaderAllowlistSchema = exports.MAX_HEADER_ALLOWLIST_SIZE = exports.HEADER_NAME_PATTERN = exports.HEADER_ALLOWLIST_PREFIX = exports.NetworkConfigSchema = exports.InstrumentationSchema = exports.EnvVarSchema = exports.RESERVED_BUILD_ARG_KEYS = exports.EntrypointSchema = exports.BuildTypeSchema = exports.AgentTypeSchema = exports.AccessSchema = exports.GatewayNameSchema = exports.EnvVarNameSchema = exports.AgentNameSchema = void 0;
+exports.isValidDockerfilePath = isValidDockerfilePath;
+exports.isReservedBuildArgKey = isReservedBuildArgKey;
 exports.checkAllowlistHeader = checkAllowlistHeader;
 /**
  * Agent Schema v2 - Clean, simplified model
@@ -58,6 +60,78 @@ exports.EntrypointSchema = zod_1.z
 // eslint-disable-next-line security/detect-unsafe-regex -- character class quantifiers don't cause backtracking
 /^[a-zA-Z0-9_][a-zA-Z0-9_/.-]*\.(py|ts|js)(:[a-zA-Z_][a-zA-Z0-9_]*)?$/, 'Must be a Python (.py) or TypeScript (.ts/.js) file path with optional handler (e.g., "main.py:handler" or "index.ts")');
 const DirectoryPathSchema = zod_1.z.string().min(1);
+// Char-safe set only (no backslash, spaces, or shell metacharacters): on deploy the buildspec
+// interpolates this unquoted as `docker build -f $DOCKERFILE_PATH`. A leading '.' is allowed so
+// conventional paths like '.docker/Dockerfile' pass.
+const DOCKERFILE_PATH_ALLOWED_CHARS = /^[A-Za-z0-9._/-]+$/;
+/**
+ * True when `p` is a safe relative Dockerfile path within the build context: allowed chars only, no
+ * leading slash (absolute), and no empty ('' from a leading/trailing/double slash) or '..' segments.
+ *
+ * The single source of truth shared by `DockerfilePathSchema` (config-validation time) and the runtime
+ * `getDockerfilePath` guard, so the two can never diverge — e.g. one accepting '.docker/Dockerfile'
+ * while the other rejects it, or one accepting a trailing-slash directory value like 'docker/'.
+ */
+function isValidDockerfilePath(p) {
+    if (!DOCKERFILE_PATH_ALLOWED_CHARS.test(p))
+        return false;
+    if (p.startsWith('/'))
+        return false;
+    return !p.split('/').some(segment => segment === '' || segment === '..');
+}
+/**
+ * Dockerfile location for Container builds, resolved relative to the Docker build context
+ * (`buildContextPath` when set, otherwise `codeLocation`). Accepts a filename ('Dockerfile',
+ * 'Dockerfile.gpu') or a forward-slash relative subpath ('docker/Dockerfile'). Absolute paths,
+ * trailing/double slashes, and '..' traversal are rejected so the Dockerfile can never escape or
+ * name the build context directory itself.
+ */
+const DockerfilePathSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(255)
+    .refine(isValidDockerfilePath, 'Must be a relative path within the build context: a filename or forward-slash subpath using only letters, digits, dot, dash, underscore, and slash; no leading slash, no ".." traversal, and no empty segments (no trailing or double slash)');
+/**
+ * Build-arg names reserved by the CodeBuild build environment. On deploy each build arg becomes a
+ * CodeBuild environment-variable override alongside the buildspec's own control vars, so a colliding
+ * name would break the deploy build — a wrong image tag / ECR region, a rejected StartBuild, or a
+ * clobbered build-container shell. We reject the buildspec control vars, the process-critical shell
+ * vars, and CodeBuild's own `AWS_*` / `CODEBUILD_*` namespaces. This is a best-effort denylist (the
+ * shell has other sensitive vars), but it covers the realistic footguns and keeps a config that
+ * builds locally from failing only on deploy.
+ */
+exports.RESERVED_BUILD_ARG_KEYS = [
+    // Buildspec control vars (mirrored in @aws/agentcore-cdk's ContainerBuildProject / build handler).
+    'ECR_REGISTRY',
+    'IMAGE_URI',
+    'DOCKERFILE_PATH',
+    'BUILD_ARG_FLAGS',
+    // Overriding these in the build shell would break the buildspec's own commands (command lookup,
+    // word-splitting, dynamic linking) or redirect the docker client off the build daemon. Kept
+    // deliberately narrow to the genuinely-dangerous names so common ARGs (e.g. USER, LANG) stay usable.
+    'PATH',
+    'HOME',
+    'IFS',
+    'LD_PRELOAD',
+    'LD_LIBRARY_PATH',
+    'DOCKER_HOST',
+    'DOCKER_CONFIG',
+    'DOCKER_TLS_VERIFY',
+    'DOCKER_CERT_PATH',
+];
+function isReservedBuildArgKey(key) {
+    return exports.RESERVED_BUILD_ARG_KEYS.includes(key) || key.startsWith('CODEBUILD_') || key.startsWith('AWS_');
+}
+/**
+ * Build-arg value. Bounded and control-char-free because on deploy each value becomes a CodeBuild
+ * `environmentVariablesOverride` PLAINTEXT entry; newlines/control chars or an over-long value can be
+ * rejected by StartBuild, so we reject them at schema time rather than let a local-only-valid config
+ * fail on deploy.
+ */
+const BuildArgValueSchema = zod_1.z
+    .string()
+    .max(4096, 'Build arg values must be at most 4096 characters')
+    .refine(v => ![...v].some(ch => ch.charCodeAt(0) < 0x20 || ch.charCodeAt(0) === 0x7f), 'Build arg values must not contain control characters (including newlines)');
 exports.EnvVarSchema = zod_1.z.object({
     name: exports.EnvVarNameSchema,
     value: zod_1.z.string(),
@@ -239,13 +313,29 @@ exports.AgentEnvSpecSchema = zod_1.z
     build: exports.BuildTypeSchema,
     entrypoint: exports.EntrypointSchema,
     codeLocation: DirectoryPathSchema,
-    /** Custom Dockerfile name for Container builds. Must be a filename, not a path. Default: 'Dockerfile' */
-    dockerfile: zod_1.z
-        .string()
-        .min(1)
-        .max(255)
-        .regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/, 'Must be a filename (no path separators or traversal)')
-        .optional(),
+    /**
+     * Dockerfile for Container builds, resolved relative to the build context (`buildContextPath`
+     * when set, otherwise `codeLocation`). A filename or a relative subpath; no traversal. Default: 'Dockerfile'.
+     */
+    dockerfile: DockerfilePathSchema.optional(),
+    /**
+     * Docker build context directory for Container builds. When set, this directory (instead of
+     * `codeLocation`) is used as the `docker build` context and as the root the Dockerfile path is
+     * resolved against, so a single Dockerfile can be shared across multiple agents in a monorepo
+     * (e.g. so it can COPY files that live outside `codeLocation`). Container builds only.
+     *
+     * Like `codeLocation`, this is intentionally not containment-checked: the config author may point
+     * it at any directory (including a parent via `..` for a monorepo root). The unconditional
+     * secret-exclusion baseline on the deploy upload still applies to whatever directory is chosen.
+     */
+    buildContextPath: DirectoryPathSchema.optional(),
+    /**
+     * Custom build arguments passed to `docker build` as `--build-arg` flags. Keys must be valid
+     * environment-variable names (each arg is forwarded to the build as an env var), reusing
+     * `EnvVarNameSchema`. Useful for parameterising a shared Dockerfile per agent
+     * (e.g. `{ "AGENT_NAME": "myagent" }`). Container builds only.
+     */
+    customDockerBuildArgs: zod_1.z.record(exports.EnvVarNameSchema, BuildArgValueSchema).optional(),
     runtimeVersion: constants_1.RuntimeVersionSchema.optional(),
     /** Environment variables to set on the runtime */
     envVars: zod_1.z.array(exports.EnvVarSchema).optional(),
@@ -328,13 +418,25 @@ exports.AgentEnvSpecSchema = zod_1.z
             path: ['authorizerConfiguration'],
         });
     }
-    // If adding more Container-specific fields, consider consolidating into a containerConfig object (see networkConfig pattern)
-    if (data.build !== 'Container' && data.dockerfile) {
-        ctx.addIssue({
-            code: zod_1.z.ZodIssueCode.custom,
-            message: 'dockerfile is only allowed for Container builds',
-            path: ['dockerfile'],
-        });
+    // Container-only fields. If adding more, extend this list (and consider consolidating into a
+    // containerConfig object — see the networkConfig pattern).
+    for (const field of ['dockerfile', 'buildContextPath', 'customDockerBuildArgs']) {
+        if (data.build !== 'Container' && data[field]) {
+            ctx.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                message: `${field} is only allowed for Container builds`,
+                path: [field],
+            });
+        }
+    }
+    for (const key of Object.keys(data.customDockerBuildArgs ?? {})) {
+        if (isReservedBuildArgKey(key)) {
+            ctx.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                message: `customDockerBuildArgs key "${key}" is reserved by the build environment (must not be ${exports.RESERVED_BUILD_ARG_KEYS.join(', ')}, or start with CODEBUILD_ or AWS_)`,
+                path: ['customDockerBuildArgs', key],
+            });
+        }
     }
     const fcs = data.filesystemConfigurations ?? [];
     if (fcs.length > 0) {