cdk-local 0.107.1 → 0.108.0

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { $t as createLocalStartApiCommand, E as createLocalStartCloudFrontCommand, Ot as createLocalInvokeAgentCoreCommand, Q as createLocalRunTaskCommand, S as createLocalListCommand, U as createLocalStartAlbCommand, Y as createLocalStartServiceCommand, Zt as createLocalInvokeCommand, a as createLocalStudioCommand } from "./local-studio-BWrmJblg.js";
+import { $t as createLocalStartApiCommand, E as createLocalStartCloudFrontCommand, Ot as createLocalInvokeAgentCoreCommand, Q as createLocalRunTaskCommand, S as createLocalListCommand, U as createLocalStartAlbCommand, Y as createLocalStartServiceCommand, Zt as createLocalInvokeCommand, a as createLocalStudioCommand } from "./local-studio-DWur2ccn.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.107.1");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.108.0");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalInvokeAgentCoreCommand());
 program.addCommand(createLocalStartApiCommand());

package/dist/index.js

@@ -1,4 +1,4 @@
 import { d as setEmbedConfig, l as getEmbedConfig, u as resetEmbedConfig } from "./docker-cmd-GcI_cqY5.js";
-import { $t as createLocalStartApiCommand, C as formatTargetListing, Cr as listTargets, E as createLocalStartCloudFrontCommand, Ot as createLocalInvokeAgentCoreCommand, Q as createLocalRunTaskCommand, S as createLocalListCommand, Sr as countTargets, U as createLocalStartAlbCommand, Y as createLocalStartServiceCommand, Zt as createLocalInvokeCommand, _r as CfnLocalStateProvider, a as createLocalStudioCommand, cr as substituteEnvVarsFromState, dr as createLocalStateProvider, fr as isCfnFlagPresent, gr as resolveCfnStackName, hr as resolveCfnRegion, lr as substituteEnvVarsFromStateAsync, mr as resolveCfnFallbackRegion, or as substituteAgainstState, pr as rejectExplicitCfnStackWithMultipleStacks, sr as substituteAgainstStateAsync, ur as LocalStateSourceError, vr as collectSsmParameterRefs, yr as resolveSsmParameters } from "./local-studio-BWrmJblg.js";
+import { $t as createLocalStartApiCommand, C as formatTargetListing, Cr as listTargets, E as createLocalStartCloudFrontCommand, Ot as createLocalInvokeAgentCoreCommand, Q as createLocalRunTaskCommand, S as createLocalListCommand, Sr as countTargets, U as createLocalStartAlbCommand, Y as createLocalStartServiceCommand, Zt as createLocalInvokeCommand, _r as CfnLocalStateProvider, a as createLocalStudioCommand, cr as substituteEnvVarsFromState, dr as createLocalStateProvider, fr as isCfnFlagPresent, gr as resolveCfnStackName, hr as resolveCfnRegion, lr as substituteEnvVarsFromStateAsync, mr as resolveCfnFallbackRegion, or as substituteAgainstState, pr as rejectExplicitCfnStackWithMultipleStacks, sr as substituteAgainstStateAsync, ur as LocalStateSourceError, vr as collectSsmParameterRefs, yr as resolveSsmParameters } from "./local-studio-DWur2ccn.js";
 
 export { CfnLocalStateProvider, LocalStateSourceError, collectSsmParameterRefs, countTargets, createLocalInvokeAgentCoreCommand, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartAlbCommand, createLocalStartApiCommand, createLocalStartCloudFrontCommand, createLocalStartServiceCommand, createLocalStateProvider, createLocalStudioCommand, formatTargetListing, getEmbedConfig, isCfnFlagPresent, listTargets, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveSsmParameters, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync };

package/dist/internal.js

@@ -1,3 +1,3 @@
-import { $ as MAX_TASKS_SUBNET_RANGE_CAP, $n as buildMessageEvent, A as startCloudFrontServer, An as buildCorsConfigByApiId, Ar as discoverRoutes, At as A2A_CONTAINER_PORT, B as runViewerResponse, Bn as pickResponseTemplate, Br as resolveAgentCoreTarget, Bt as AGENTCORE_SESSION_ID_HEADER, Cn as buildMethodArn, Ct as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, D as parseOriginOverrides, Dn as invokeTokenAuthorizer, Dr as filterWebSocketApisByIdentifiers, Dt as addInvokeAgentCoreSpecificOptions, En as invokeRequestAuthorizer, Er as discoverWebSocketApisOrThrow, Et as attachContainerLogStreamer, F as pickFunctionUrlLogicalIdFromOrigin, Fn as translateLambdaResponse, Fr as AGENTCORE_HTTP_PROTOCOL, Ft as MCP_PROTOCOL_VERSION, G as resolveAlbTarget, Gn as probeHostGatewaySupport, Gr as LocalInvokeBuildError, Gt as buildAgentCoreCodeImage, H as albStrategy, Hn as tryParseStatus, Hr as formatStateRemedy, Ht as waitForAgentCorePing, I as pickTargetFunctionLogicalId, In as applyAuthorizerOverlay, Ir as AGENTCORE_MCP_PROTOCOL, It as mcpInvokeOnce, J as addStartServiceSpecificOptions, Jn as buildMgmtEndpointEnvUrl, Jt as toCmdArgv, K as isApplicationLoadBalancer, Kn as bufferToBody, Kr as buildStsClientConfig, Kt as computeCodeImageTag, L as resolveCloudFrontDistribution, Ln as buildHttpApiV2Event, Lr as AGENTCORE_RUNTIME_TYPE, Lt as parseSseForJsonRpc, M as serveLambdaUrlOrigin, Mn as isFunctionUrlOacFronted, Mr as resolveLambdaArnIntrinsic, Mt as a2aInvokeOnce, N as CLOUDFRONT_DISTRIBUTION_TYPE, Nn as matchPreflight, Nr as AGENTCORE_A2A_PROTOCOL, Nt as MCP_CONTAINER_PORT, O as resolveCloudFrontTarget, On as attachAuthorizers, Or as parseSelectionExpressionPath, P as isCloudFrontDistribution, Pn as matchRoute, Pr as AGENTCORE_AGUI_PROTOCOL, Pt as MCP_PATH, Qn as buildDisconnectEvent, Qt as addStartApiSpecificOptions, R as compileCloudFrontFunction, Rn as buildRestV1Event, Rr as AgentCoreResolutionError, Rt as AGENTCORE_SIGV4_SERVICE, Sn as verifyJwtViaDiscovery, St as DEFAULT_SHADOW_READY_TIMEOUT_MS, T as addStartCloudFrontSpecificOptions, Tn as evaluateCachedLambdaPolicy, Tr as discoverWebSocketApis, Tt as getContainerNetworkIp, Un as VtlEvaluationError, Ur as substituteImagePlaceholders, Ut as downloadAndExtractS3Bundle, V as addAlbSpecificOptions, Vn as selectIntegrationResponse, Vr as derivePseudoParametersFromRegion, Vt as invokeAgentCore, W as parseLbPortOverrides, Wn as HOST_GATEWAY_MIN_VERSION, Wr as tryResolveImageFnJoin, Wt as SUPPORTED_CODE_RUNTIMES, X as serviceStrategy, Xn as parseConnectionsPath, Xt as addInvokeSpecificOptions, Yn as handleConnectionsRequest, Yt as classifySourceChange, Z as addRunTaskSpecificOptions, Zn as buildConnectEvent, _ as toStudioTargetGroups, _n as buildCognitoJwksUrl, _t as describePinnedImageUri, an as buildStageMap, ar as EcsTaskResolutionError, at as parseMaxTasks, b as StudioEventBus, bn as verifyCognitoJwt, br as resolveWatchConfig, bt as buildCloudMapIndex, c as startStudioProxy, cn as availableApiIdentifiers, ct as resolveSharedSidecarCredentials, d as createStudioDispatcher, dn as groupRoutesByServer, dt as buildImageOverrideTag, en as createWatchPredicates, er as architectureToPlatform, et as addCommonEcsServiceOptions, f as filterStudioCustomResources, fn as readMtlsMaterialsFromDisk, ft as enforceImageOverrideOrphans, g as startStudioServer, gn as defaultCredentialsLoader, gt as runImageOverrideBuilds, h as filterStudioTargetGroups, hn as resolveServiceIntegrationParameters, ht as resolveImageOverrides, i as coerceStopRequest, in as attachStageContext, ir as resolveRuntimeImage, it as ecsClusterOption, j as serveFromStaticOrigin, jn as buildCorsConfigFromCloudFrontChain, jr as pickRefLogicalId, jt as A2A_PATH, k as matchBehavior, kn as applyCorsResponseHeaders, kr as webSocketApiMatchesIdentifier, kt as invokeAgentCoreWs, l as relayServeRequest, ln as filterRoutesByApiIdentifier, lt as runEcsServiceEmulator, m as annotatePinnedEcsTargets, mn as resolveSelectionExpression, mt as parseImageOverrideFlags, n as coerceRunRequest, nn as createAuthorizerCache, nr as resolveRuntimeCodeMountPath, nt as addImageOverrideOptions, o as resolveServeBaseUrl, on as materializeLayerFromArn, ot as parseRestartPolicy, p as isCustomResourceLambdaTarget, pn as startApiServer, pt as mergeForService, q as resolveAlbFrontDoor, qn as ConnectionRegistry, qr as resolveProfileCredentials, qt as renderCodeDockerfile, r as coerceServeRequest, rn as createFileWatcher, rr as resolveRuntimeFileExtension, rt as buildEcsImageResolutionContext, s as createStudioServeManager, sn as resolveEnvVars, st as resolveEcsAssumeRoleOption, t as addStudioSpecificOptions, tn as resolveApiTargetSubset, tr as buildContainerImage, tt as addEcsAssumeRoleOptions, u as reinvoke, un as filterRoutesByApiIdentifiers, ut as ImageOverrideError, v as renderStudioHtml, vn as buildJwksUrlFromIssuer, vt as isLocalCdkAssetImage, w as LocalStartCloudFrontError, wn as computeRequestIdentityHash, wr as availableWebSocketApiIdentifiers, wt as setShadowReadyTimeoutMs, x as addListSpecificOptions, xn as verifyJwtAuthorizer, xr as resolveSingleTarget, xt as CloudMapRegistry, y as createStudioStore, yn as createJwksCache, yt as listPinnedTargets, z as runViewerRequest, zn as evaluateResponseParameters, zr as pickAgentCoreCandidateStack, zt as signAgentCoreInvocation } from "./local-studio-BWrmJblg.js";
+import { $ as MAX_TASKS_SUBNET_RANGE_CAP, $n as buildMessageEvent, A as startCloudFrontServer, An as buildCorsConfigByApiId, Ar as discoverRoutes, At as A2A_CONTAINER_PORT, B as runViewerResponse, Bn as pickResponseTemplate, Br as resolveAgentCoreTarget, Bt as AGENTCORE_SESSION_ID_HEADER, Cn as buildMethodArn, Ct as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, D as parseOriginOverrides, Dn as invokeTokenAuthorizer, Dr as filterWebSocketApisByIdentifiers, Dt as addInvokeAgentCoreSpecificOptions, En as invokeRequestAuthorizer, Er as discoverWebSocketApisOrThrow, Et as attachContainerLogStreamer, F as pickFunctionUrlLogicalIdFromOrigin, Fn as translateLambdaResponse, Fr as AGENTCORE_HTTP_PROTOCOL, Ft as MCP_PROTOCOL_VERSION, G as resolveAlbTarget, Gn as probeHostGatewaySupport, Gr as LocalInvokeBuildError, Gt as buildAgentCoreCodeImage, H as albStrategy, Hn as tryParseStatus, Hr as formatStateRemedy, Ht as waitForAgentCorePing, I as pickTargetFunctionLogicalId, In as applyAuthorizerOverlay, Ir as AGENTCORE_MCP_PROTOCOL, It as mcpInvokeOnce, J as addStartServiceSpecificOptions, Jn as buildMgmtEndpointEnvUrl, Jt as toCmdArgv, K as isApplicationLoadBalancer, Kn as bufferToBody, Kr as buildStsClientConfig, Kt as computeCodeImageTag, L as resolveCloudFrontDistribution, Ln as buildHttpApiV2Event, Lr as AGENTCORE_RUNTIME_TYPE, Lt as parseSseForJsonRpc, M as serveLambdaUrlOrigin, Mn as isFunctionUrlOacFronted, Mr as resolveLambdaArnIntrinsic, Mt as a2aInvokeOnce, N as CLOUDFRONT_DISTRIBUTION_TYPE, Nn as matchPreflight, Nr as AGENTCORE_A2A_PROTOCOL, Nt as MCP_CONTAINER_PORT, O as resolveCloudFrontTarget, On as attachAuthorizers, Or as parseSelectionExpressionPath, P as isCloudFrontDistribution, Pn as matchRoute, Pr as AGENTCORE_AGUI_PROTOCOL, Pt as MCP_PATH, Qn as buildDisconnectEvent, Qt as addStartApiSpecificOptions, R as compileCloudFrontFunction, Rn as buildRestV1Event, Rr as AgentCoreResolutionError, Rt as AGENTCORE_SIGV4_SERVICE, Sn as verifyJwtViaDiscovery, St as DEFAULT_SHADOW_READY_TIMEOUT_MS, T as addStartCloudFrontSpecificOptions, Tn as evaluateCachedLambdaPolicy, Tr as discoverWebSocketApis, Tt as getContainerNetworkIp, Un as VtlEvaluationError, Ur as substituteImagePlaceholders, Ut as downloadAndExtractS3Bundle, V as addAlbSpecificOptions, Vn as selectIntegrationResponse, Vr as derivePseudoParametersFromRegion, Vt as invokeAgentCore, W as parseLbPortOverrides, Wn as HOST_GATEWAY_MIN_VERSION, Wr as tryResolveImageFnJoin, Wt as SUPPORTED_CODE_RUNTIMES, X as serviceStrategy, Xn as parseConnectionsPath, Xt as addInvokeSpecificOptions, Yn as handleConnectionsRequest, Yt as classifySourceChange, Z as addRunTaskSpecificOptions, Zn as buildConnectEvent, _ as toStudioTargetGroups, _n as buildCognitoJwksUrl, _t as describePinnedImageUri, an as buildStageMap, ar as EcsTaskResolutionError, at as parseMaxTasks, b as StudioEventBus, bn as verifyCognitoJwt, br as resolveWatchConfig, bt as buildCloudMapIndex, c as startStudioProxy, cn as availableApiIdentifiers, ct as resolveSharedSidecarCredentials, d as createStudioDispatcher, dn as groupRoutesByServer, dt as buildImageOverrideTag, en as createWatchPredicates, er as architectureToPlatform, et as addCommonEcsServiceOptions, f as filterStudioCustomResources, fn as readMtlsMaterialsFromDisk, ft as enforceImageOverrideOrphans, g as startStudioServer, gn as defaultCredentialsLoader, gt as runImageOverrideBuilds, h as filterStudioTargetGroups, hn as resolveServiceIntegrationParameters, ht as resolveImageOverrides, i as coerceStopRequest, in as attachStageContext, ir as resolveRuntimeImage, it as ecsClusterOption, j as serveFromStaticOrigin, jn as buildCorsConfigFromCloudFrontChain, jr as pickRefLogicalId, jt as A2A_PATH, k as matchBehavior, kn as applyCorsResponseHeaders, kr as webSocketApiMatchesIdentifier, kt as invokeAgentCoreWs, l as relayServeRequest, ln as filterRoutesByApiIdentifier, lt as runEcsServiceEmulator, m as annotatePinnedEcsTargets, mn as resolveSelectionExpression, mt as parseImageOverrideFlags, n as coerceRunRequest, nn as createAuthorizerCache, nr as resolveRuntimeCodeMountPath, nt as addImageOverrideOptions, o as resolveServeBaseUrl, on as materializeLayerFromArn, ot as parseRestartPolicy, p as isCustomResourceLambdaTarget, pn as startApiServer, pt as mergeForService, q as resolveAlbFrontDoor, qn as ConnectionRegistry, qr as resolveProfileCredentials, qt as renderCodeDockerfile, r as coerceServeRequest, rn as createFileWatcher, rr as resolveRuntimeFileExtension, rt as buildEcsImageResolutionContext, s as createStudioServeManager, sn as resolveEnvVars, st as resolveEcsAssumeRoleOption, t as addStudioSpecificOptions, tn as resolveApiTargetSubset, tr as buildContainerImage, tt as addEcsAssumeRoleOptions, u as reinvoke, un as filterRoutesByApiIdentifiers, ut as ImageOverrideError, v as renderStudioHtml, vn as buildJwksUrlFromIssuer, vt as isLocalCdkAssetImage, w as LocalStartCloudFrontError, wn as computeRequestIdentityHash, wr as availableWebSocketApiIdentifiers, wt as setShadowReadyTimeoutMs, x as addListSpecificOptions, xn as verifyJwtAuthorizer, xr as resolveSingleTarget, xt as CloudMapRegistry, y as createStudioStore, yn as createJwksCache, yt as listPinnedTargets, z as runViewerRequest, zn as evaluateResponseParameters, zr as pickAgentCoreCandidateStack, zt as signAgentCoreInvocation } from "./local-studio-DWur2ccn.js";
 
 export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CLOUDFRONT_DISTRIBUTION_TYPE, CloudMapRegistry, ConnectionRegistry, DEFAULT_SHADOW_READY_TIMEOUT_MS, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, ImageOverrideError, LocalInvokeBuildError, LocalStartCloudFrontError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, StudioEventBus, VtlEvaluationError, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addEcsAssumeRoleOptions, addImageOverrideOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, addStartCloudFrontSpecificOptions, addStartServiceSpecificOptions, addStudioSpecificOptions, albStrategy, annotatePinnedEcsTargets, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachContainerLogStreamer, attachStageContext, availableApiIdentifiers, availableWebSocketApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildImageOverrideTag, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, buildStsClientConfig, classifySourceChange, coerceRunRequest, coerceServeRequest, coerceStopRequest, compileCloudFrontFunction, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createStudioDispatcher, createStudioServeManager, createStudioStore, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, describePinnedImageUri, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, ecsClusterOption, enforceImageOverrideOrphans, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, filterStudioCustomResources, filterStudioTargetGroups, filterWebSocketApisByIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isCloudFrontDistribution, isCustomResourceLambdaTarget, isFunctionUrlOacFronted, isLocalCdkAssetImage, listPinnedTargets, matchBehavior, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, mergeForService, parseConnectionsPath, parseImageOverrideFlags, parseLbPortOverrides, parseMaxTasks, parseOriginOverrides, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickFunctionUrlLogicalIdFromOrigin, pickRefLogicalId, pickResponseTemplate, pickTargetFunctionLogicalId, probeHostGatewaySupport, readMtlsMaterialsFromDisk, reinvoke, relayServeRequest, renderCodeDockerfile, renderStudioHtml, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveCloudFrontDistribution, resolveCloudFrontTarget, resolveEcsAssumeRoleOption, resolveEnvVars, resolveImageOverrides, resolveLambdaArnIntrinsic, resolveProfileCredentials, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServeBaseUrl, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, runImageOverrideBuilds, runViewerRequest, runViewerResponse, selectIntegrationResponse, serveFromStaticOrigin, serveLambdaUrlOrigin, serviceStrategy, setShadowReadyTimeoutMs, signAgentCoreInvocation, startApiServer, startCloudFrontServer, startStudioProxy, startStudioServer, substituteImagePlaceholders, toCmdArgv, toStudioTargetGroups, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing, webSocketApiMatchesIdentifier };

package/dist/{local-studio-BWrmJblg.js → local-studio-DWur2ccn.js}

@@ -17201,123 +17201,14 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 		const targetLabel = lambda.kind === "zip" ? lambda.runtime : "container image";
 		logger.info(`Target: ${lambda.stack.stackName}/${lambda.logicalId} (${targetLabel})`);
 		imagePlan = await resolveImagePlan(lambda, options);
-		let stateAudit;
-		let templateEnv = getTemplateEnv(lambda.resource);
-		let stateForRoleHint;
-		const stateProvider = createLocalStateProvider(options, lambda.stack.stackName, await resolveCfnFallbackRegion(options, lambda.stack.region), extraStateProviders);
-		if (stateProvider) try {
-			const loaded = await stateProvider.load(lambda.stack.stackName, lambda.stack.region);
-			if (loaded) {
-				stateForRoleHint = {
-					version: 1,
-					stackName: lambda.stack.stackName,
-					resources: loaded.resources,
-					outputs: loaded.outputs,
-					lastModified: 0
-				};
-				const subContext = {
-					resources: loaded.resources,
-					consumerRegion: loaded.region
-				};
-				if (envHasIntrinsicValue(templateEnv)) {
-					const pseudo = await resolvePseudoParametersForInvoke(lambda.stack.region, options);
-					if (pseudo) subContext.pseudoParameters = pseudo;
-				}
-				if (envHasIntrinsicValue(templateEnv) && stateProvider.resolveTemplateSsmParameters) {
-					const ssmParams = await stateProvider.resolveTemplateSsmParameters(lambda.stack.template);
-					if (Object.keys(ssmParams.values).length > 0) subContext.parameters = ssmParams.values;
-					if (ssmParams.secureStringLogicalIds.length > 0) subContext.sensitiveParameters = new Set(ssmParams.secureStringLogicalIds);
-				}
-				if (envHasCrossStackIntrinsic(templateEnv)) {
-					const resolver = await stateProvider.buildCrossStackResolver(loaded.region);
-					if (resolver) subContext.crossStackResolver = resolver;
-				}
-				const { env, audit } = await substituteEnvVarsFromStateAsync(templateEnv, subContext);
-				templateEnv = env;
-				const label = stateProvider.label;
-				for (const key of audit.resolvedKeys) logger.debug(`${label}: substituted env var ${key}`);
-				let unresolved = audit.unresolved;
-				const resolvedKeys = [...audit.resolvedKeys];
-				if (unresolved.length > 0 && stateProvider.resolveDeployedFunctionEnv) {
-					const physicalId = loaded.resources[lambda.logicalId]?.physicalId;
-					if (physicalId) {
-						const deployedEnv = await stateProvider.resolveDeployedFunctionEnv(physicalId);
-						const fb = applyDeployedEnvFallback(templateEnv, unresolved, deployedEnv);
-						templateEnv = fb.env;
-						unresolved = fb.stillUnresolved;
-						for (const key of fb.filled) {
-							resolvedKeys.push(key);
-							logger.debug(`${label}: filled env var ${key} from deployed function config`);
-						}
-					}
-				}
-				stateAudit = {
-					resolvedKeys,
-					unresolved,
-					sensitiveKeys: audit.sensitiveKeys
-				};
-				for (const { key, reason } of unresolved) logger.warn(`${label}: could not substitute env var ${key} (${reason}). Override it via --env-vars or it will be dropped.`);
-			}
-		} catch (err) {
-			stateProvider.dispose();
-			throw err;
-		}
-		const overrides = readEnvOverridesFile$3(options.envVars);
-		const lambdaCdkPath = readCdkPathOrUndefined(lambda.resource);
-		const envResult = resolveEnvVars$1(lambda.logicalId, lambdaCdkPath, templateEnv, overrides);
-		for (const key of envResult.unresolved) {
-			if (stateAudit && stateAudit.unresolved.some((u) => u.key === key)) continue;
-			const overrideKeyExample = lambdaCdkPath?.replace(/\/Resource$/, "") ?? lambda.logicalId;
-			logger.warn(`Environment variable ${key} contains a CloudFormation intrinsic and was dropped. Override it with --env-vars (e.g. {"${overrideKeyExample}":{"${key}":"<literal>"}}), or pass a state-source flag (e.g. --from-cfn-stack or a host-provided extension) to recover deployed values.`);
-		}
-		let resolvedAssumeRoleArn;
-		try {
-			resolvedAssumeRoleArn = await resolveAssumeRoleArnForLambda(options.assumeRole, stateForRoleHint, stateProvider, lambda.logicalId);
-		} finally {
-			stateProvider?.dispose();
+		const containerEnv = await resolveLambdaContainerEnv(lambda, options, profileCredentials, extraStateProviders);
+		const dockerEnv = containerEnv.env;
+		if (options.assumeRole === void 0 && containerEnv.stateForRoleHint) suggestAssumeRoleFromState(containerEnv.stateForRoleHint, lambda.logicalId);
+		if (!containerEnv.assumeRoleApplied && profileCredsFile) {
+			dockerEnv["AWS_SHARED_CREDENTIALS_FILE"] = profileCredsFile.containerPath;
+			dockerEnv["AWS_PROFILE"] = profileCredsFile.profileName;
 		}
-		if (options.assumeRole === void 0 && stateForRoleHint) suggestAssumeRoleFromState(stateForRoleHint, lambda.logicalId);
 		const event = await readEvent$1(options);
-		const dockerEnv = {
-			AWS_LAMBDA_FUNCTION_NAME: lambda.logicalId,
-			AWS_LAMBDA_FUNCTION_MEMORY_SIZE: String(lambda.memoryMb),
-			AWS_LAMBDA_FUNCTION_TIMEOUT: String(lambda.timeoutSec),
-			AWS_LAMBDA_FUNCTION_VERSION: "$LATEST",
-			AWS_LAMBDA_LOG_GROUP_NAME: `/aws/lambda/${lambda.logicalId}`,
-			AWS_LAMBDA_LOG_STREAM_NAME: "local",
-			...envResult.resolved
-		};
-		let assumeSucceeded = false;
-		if (resolvedAssumeRoleArn) {
-			const stsRegion = options.region ?? process.env["AWS_REGION"] ?? process.env["AWS_DEFAULT_REGION"];
-			try {
-				const creds = await assumeLambdaExecutionRole(resolvedAssumeRoleArn, stsRegion, options.profile);
-				dockerEnv["AWS_ACCESS_KEY_ID"] = creds.accessKeyId;
-				dockerEnv["AWS_SECRET_ACCESS_KEY"] = creds.secretAccessKey;
-				dockerEnv["AWS_SESSION_TOKEN"] = creds.sessionToken;
-				if (stsRegion) dockerEnv["AWS_REGION"] = stsRegion;
-				assumeSucceeded = true;
-			} catch (err) {
-				const reason = err instanceof Error ? err.message : String(err);
-				logger.warn(`--assume-role: STS AssumeRole(${resolvedAssumeRoleArn}) failed: ${reason}. Falling back to the developer's shell credentials.`);
-			}
-		}
-		if (!assumeSucceeded) {
-			forwardAwsEnv$2(dockerEnv);
-			applyProfileCredentialsOverlay(dockerEnv, profileCredentials, false);
-			if (profileCredsFile) {
-				dockerEnv["AWS_SHARED_CREDENTIALS_FILE"] = profileCredsFile.containerPath;
-				dockerEnv["AWS_PROFILE"] = profileCredsFile.profileName;
-			}
-		}
-		if (!dockerEnv["AWS_REGION"] && !dockerEnv["AWS_DEFAULT_REGION"]) {
-			const fallbackRegion = resolveContainerFallbackRegion({
-				stackRegionOverride: options.region,
-				synthRegion: lambda.stack.region,
-				profileRegion: profileCredentials?.region
-			});
-			if (fallbackRegion) dockerEnv["AWS_REGION"] = fallbackRegion;
-		}
 		let debugPort;
 		if (options.debugPort) {
 			debugPort = Number(options.debugPort);
@@ -17339,7 +17230,7 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 			mounts: imagePlan.mounts,
 			extraMounts: extraMountsWithProfile,
 			env: dockerEnv,
-			...stateAudit && stateAudit.sensitiveKeys.length > 0 && { sensitiveEnvKeys: new Set(stateAudit.sensitiveKeys) },
+			...containerEnv.sensitiveEnvKeys.length > 0 && { sensitiveEnvKeys: new Set(containerEnv.sensitiveEnvKeys) },
 			cmd: imagePlan.cmd,
 			hostPort,
 			host: containerHost,
@@ -17627,6 +17518,141 @@ function applyProfileCredentialsOverlay(env, profileCreds, assumeRoleActive) {
 	if (profileCreds.sessionToken) env["AWS_SESSION_TOKEN"] = profileCreds.sessionToken;
 	else delete env["AWS_SESSION_TOKEN"];
 }
+/**
+* Resolve the full container environment for a Lambda: its declared env vars
+* (literal + `--env-vars` overrides + intrinsic values substituted against a
+* `--from-cfn-stack` deployed stack — SSM / cross-stack / deployed-env
+* fallback included), the `AWS_LAMBDA_*` runtime vars, and AWS credentials
+* (an `--assume-role` STS assume, else the dev shell's forwarded creds + a
+* `--profile` overlay), plus a fallback `AWS_REGION`.
+*
+* This is the single source of truth shared by `cdkl invoke` AND the
+* front-door Lambda boot path (`start-cloudfront`'s Function URL origin,
+* `start-alb`'s Lambda targets — issue #380), so a CDN- / ALB-fronted Lambda
+* reaches the same deployed resources as a direct `cdkl invoke`. The caller
+* layers any command-specific concerns (a `--profile` credentials-file
+* bind-mount, `--debug-port`) on top of `env`.
+*/
+async function resolveLambdaContainerEnv(lambda, options, profileCredentials, extraStateProviders) {
+	const logger = getLogger();
+	let stateAudit;
+	let templateEnv = getTemplateEnv(lambda.resource);
+	let stateForRoleHint;
+	const stateProvider = createLocalStateProvider(options, lambda.stack.stackName, await resolveCfnFallbackRegion(options, lambda.stack.region), extraStateProviders);
+	if (stateProvider) try {
+		const loaded = await stateProvider.load(lambda.stack.stackName, lambda.stack.region);
+		if (loaded) {
+			stateForRoleHint = {
+				version: 1,
+				stackName: lambda.stack.stackName,
+				resources: loaded.resources,
+				outputs: loaded.outputs,
+				lastModified: 0
+			};
+			const subContext = {
+				resources: loaded.resources,
+				consumerRegion: loaded.region
+			};
+			if (envHasIntrinsicValue(templateEnv)) {
+				const pseudo = await resolvePseudoParametersForInvoke(lambda.stack.region, options);
+				if (pseudo) subContext.pseudoParameters = pseudo;
+			}
+			if (envHasIntrinsicValue(templateEnv) && stateProvider.resolveTemplateSsmParameters) {
+				const ssmParams = await stateProvider.resolveTemplateSsmParameters(lambda.stack.template);
+				if (Object.keys(ssmParams.values).length > 0) subContext.parameters = ssmParams.values;
+				if (ssmParams.secureStringLogicalIds.length > 0) subContext.sensitiveParameters = new Set(ssmParams.secureStringLogicalIds);
+			}
+			if (envHasCrossStackIntrinsic(templateEnv)) {
+				const resolver = await stateProvider.buildCrossStackResolver(loaded.region);
+				if (resolver) subContext.crossStackResolver = resolver;
+			}
+			const { env, audit } = await substituteEnvVarsFromStateAsync(templateEnv, subContext);
+			templateEnv = env;
+			const label = stateProvider.label;
+			for (const key of audit.resolvedKeys) logger.debug(`${label}: substituted env var ${key}`);
+			let unresolved = audit.unresolved;
+			const resolvedKeys = [...audit.resolvedKeys];
+			if (unresolved.length > 0 && stateProvider.resolveDeployedFunctionEnv) {
+				const physicalId = loaded.resources[lambda.logicalId]?.physicalId;
+				if (physicalId) {
+					const deployedEnv = await stateProvider.resolveDeployedFunctionEnv(physicalId);
+					const fb = applyDeployedEnvFallback(templateEnv, unresolved, deployedEnv);
+					templateEnv = fb.env;
+					unresolved = fb.stillUnresolved;
+					for (const key of fb.filled) {
+						resolvedKeys.push(key);
+						logger.debug(`${label}: filled env var ${key} from deployed function config`);
+					}
+				}
+			}
+			stateAudit = {
+				resolvedKeys,
+				unresolved,
+				sensitiveKeys: audit.sensitiveKeys
+			};
+			for (const { key, reason } of unresolved) logger.warn(`${label}: could not substitute env var ${key} (${reason}). Override it via --env-vars or it will be dropped.`);
+		}
+	} catch (err) {
+		stateProvider.dispose();
+		throw err;
+	}
+	const overrides = readEnvOverridesFile$3(options.envVars);
+	const lambdaCdkPath = readCdkPathOrUndefined(lambda.resource);
+	const envResult = resolveEnvVars$1(lambda.logicalId, lambdaCdkPath, templateEnv, overrides);
+	for (const key of envResult.unresolved) {
+		if (stateAudit && stateAudit.unresolved.some((u) => u.key === key)) continue;
+		const overrideKeyExample = lambdaCdkPath?.replace(/\/Resource$/, "") ?? lambda.logicalId;
+		logger.warn(`Environment variable ${key} contains a CloudFormation intrinsic and was dropped. Override it with --env-vars (e.g. {"${overrideKeyExample}":{"${key}":"<literal>"}}), or pass a state-source flag (e.g. --from-cfn-stack or a host-provided extension) to recover deployed values.`);
+	}
+	let resolvedAssumeRoleArn;
+	try {
+		resolvedAssumeRoleArn = await resolveAssumeRoleArnForLambda(options.assumeRole, stateForRoleHint, stateProvider, lambda.logicalId);
+	} finally {
+		stateProvider?.dispose();
+	}
+	const dockerEnv = {
+		AWS_LAMBDA_FUNCTION_NAME: lambda.logicalId,
+		AWS_LAMBDA_FUNCTION_MEMORY_SIZE: String(lambda.memoryMb),
+		AWS_LAMBDA_FUNCTION_TIMEOUT: String(lambda.timeoutSec),
+		AWS_LAMBDA_FUNCTION_VERSION: "$LATEST",
+		AWS_LAMBDA_LOG_GROUP_NAME: `/aws/lambda/${lambda.logicalId}`,
+		AWS_LAMBDA_LOG_STREAM_NAME: "local",
+		...envResult.resolved
+	};
+	let assumeSucceeded = false;
+	if (resolvedAssumeRoleArn) {
+		const stsRegion = options.region ?? process.env["AWS_REGION"] ?? process.env["AWS_DEFAULT_REGION"];
+		try {
+			const creds = await assumeLambdaExecutionRole(resolvedAssumeRoleArn, stsRegion, options.profile);
+			dockerEnv["AWS_ACCESS_KEY_ID"] = creds.accessKeyId;
+			dockerEnv["AWS_SECRET_ACCESS_KEY"] = creds.secretAccessKey;
+			dockerEnv["AWS_SESSION_TOKEN"] = creds.sessionToken;
+			if (stsRegion) dockerEnv["AWS_REGION"] = stsRegion;
+			assumeSucceeded = true;
+		} catch (err) {
+			const reason = err instanceof Error ? err.message : String(err);
+			logger.warn(`--assume-role: STS AssumeRole(${resolvedAssumeRoleArn}) failed: ${reason}. Falling back to the developer's shell credentials.`);
+		}
+	}
+	if (!assumeSucceeded) {
+		forwardAwsEnv$2(dockerEnv);
+		applyProfileCredentialsOverlay(dockerEnv, profileCredentials, false);
+	}
+	if (!dockerEnv["AWS_REGION"] && !dockerEnv["AWS_DEFAULT_REGION"]) {
+		const fallbackRegion = resolveContainerFallbackRegion({
+			stackRegionOverride: options.region,
+			synthRegion: lambda.stack.region,
+			profileRegion: profileCredentials?.region
+		});
+		if (fallbackRegion) dockerEnv["AWS_REGION"] = fallbackRegion;
+	}
+	return {
+		env: dockerEnv,
+		sensitiveEnvKeys: stateAudit?.sensitiveKeys ?? [],
+		...stateForRoleHint !== void 0 && { stateForRoleHint },
+		assumeRoleApplied: assumeSucceeded
+	};
+}
 function materializeInlineCode$1(handler, source, fileExtension) {
 	const lastDot = handler.lastIndexOf(".");
 	if (lastDot <= 0) throw new Error(`Handler '${handler}' is malformed: expected '<modulePath>.<exportName>'.`);
@@ -24435,7 +24461,7 @@ function createFrontDoorLambdaRunner(lambda, opts) {
 		const port = await pickFreePort();
 		hostPort = port;
 		const name = `${getEmbedConfig().resourceNamePrefix}-alblambda-${lambda.logicalId}-${process.pid}-${Math.floor(Math.random() * 1e6)}`;
-		const env = {
+		const env = opts.containerEnv ? { ...opts.containerEnv } : {
 			AWS_LAMBDA_FUNCTION_NAME: lambda.logicalId,
 			AWS_LAMBDA_FUNCTION_MEMORY_SIZE: String(lambda.memoryMb),
 			AWS_LAMBDA_FUNCTION_TIMEOUT: String(lambda.timeoutSec),
@@ -24449,6 +24475,7 @@ function createFrontDoorLambdaRunner(lambda, opts) {
 			image: plan.image,
 			mounts: plan.mounts,
 			env,
+			...opts.sensitiveEnvKeys && opts.sensitiveEnvKeys.size > 0 && { sensitiveEnvKeys: opts.sensitiveEnvKeys },
 			cmd: plan.cmd,
 			hostPort: port,
 			host: opts.containerHost,
@@ -28959,10 +28986,14 @@ async function bootLambdaUrlOrigins(distribution, stacks, opts) {
 	for (const functionLogicalId of functionLogicalIds) {
 		let runner;
 		try {
-			runner = createFrontDoorLambdaRunner(resolveLambdaTarget(functionLogicalId, stacks), {
+			const lambda = resolveLambdaTarget(functionLogicalId, stacks);
+			const containerEnv = await resolveLambdaContainerEnv(lambda, opts.envOptions, opts.profileCredentials);
+			runner = createFrontDoorLambdaRunner(lambda, {
 				containerHost: opts.containerHost,
 				skipPull: opts.skipPull,
-				...opts.region !== void 0 && { region: opts.region }
+				...opts.envOptions.region !== void 0 && { region: opts.envOptions.region },
+				containerEnv: containerEnv.env,
+				...containerEnv.sensitiveEnvKeys.length > 0 && { sensitiveEnvKeys: new Set(containerEnv.sensitiveEnvKeys) }
 			});
 			logger.info(`Booting Lambda Function URL origin container for ${functionLogicalId} (the backing Lambda runs locally via RIE)...`);
 			await runner.start();
@@ -29030,10 +29061,19 @@ async function localStartCloudFrontCommand(target, options) {
 	};
 	const initial = await synthAndResolve();
 	warnUnsupported(initial.distribution);
+	const profileCredentials = options.profile ? await resolveProfileCredentials(options.profile) : void 0;
+	const envOptions = {
+		...options.fromCfnStack !== void 0 && { fromCfnStack: options.fromCfnStack },
+		...options.assumeRole !== void 0 && { assumeRole: options.assumeRole },
+		...options.region !== void 0 && { region: options.region },
+		...options.profile !== void 0 && { profile: options.profile },
+		...options.stackRegion !== void 0 && { stackRegion: options.stackRegion }
+	};
 	const { invokers: lambdaInvokers, runners: lambdaRunners } = await bootLambdaUrlOrigins(initial.distribution, initial.stacks, {
 		containerHost: options.host,
 		skipPull: options.pull === false,
-		...options.region !== void 0 && { region: options.region }
+		envOptions,
+		...profileCredentials !== void 0 && { profileCredentials }
 	});
 	let tls;
 	if (tlsRequested) tls = await resolveFrontDoorTlsMaterials({
@@ -29121,7 +29161,7 @@ function createLocalStartCloudFrontCommand(opts = {}) {
 * `cmd`.
 */
 function addStartCloudFrontSpecificOptions(cmd) {
-	return cmd.addOption(new Option("--port <port>", "HTTP server port (default: auto-allocate)").default("0")).addOption(new Option("--host <host>", "Bind address").default("127.0.0.1")).addOption(new Option("--origin <originId=dir>", "Point a distribution origin at a local directory (repeatable). Use when cdk-local cannot resolve the origin's BucketDeployment source automatically (content uploaded out of band, or a non-CDK bucket).").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--tls", "Terminate real TLS (HTTPS). Uses --tls-cert / --tls-key when supplied, else an auto-generated self-signed cert.").default(false)).addOption(new Option("--tls-cert <path>", "PEM server certificate for --tls (implies --tls).")).addOption(new Option("--tls-key <path>", "PEM server private key for --tls (implies --tls).")).addOption(new Option("--no-pull", "Skip 'docker pull' for a Lambda Function URL origin's base image (use the locally cached image).")).addOption(new Option("--watch", "Hot-reload: re-synth + re-resolve the distribution when the CDK app's source changes (honors cdk.json watch.include/exclude; cdk.out, node_modules, .git are always excluded). The server keeps the previous version serving when synth fails mid-reload.").default(false));
+	return cmd.addOption(new Option("--port <port>", "HTTP server port (default: auto-allocate)").default("0")).addOption(new Option("--host <host>", "Bind address").default("127.0.0.1")).addOption(new Option("--origin <originId=dir>", "Point a distribution origin at a local directory (repeatable). Use when cdk-local cannot resolve the origin's BucketDeployment source automatically (content uploaded out of band, or a non-CDK bucket).").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--tls", "Terminate real TLS (HTTPS). Uses --tls-cert / --tls-key when supplied, else an auto-generated self-signed cert.").default(false)).addOption(new Option("--tls-cert <path>", "PEM server certificate for --tls (implies --tls).")).addOption(new Option("--tls-key <path>", "PEM server private key for --tls (implies --tls).")).addOption(new Option("--no-pull", "Skip 'docker pull' for a Lambda Function URL origin's base image (use the locally cached image).")).addOption(new Option("--from-cfn-stack [cfn-stack-name]", "Bind a Lambda Function URL origin's backing Lambda to a deployed CloudFormation stack so its env vars resolve to the deployed physical IDs / exports (ListStackResources). Use for CDK apps deployed via the upstream CDK CLI (`cdk deploy`). Bare form uses the resolved stack name; pass a value when the CFn stack name differs. No effect on a pure-S3 distribution.")).addOption(new Option("--stack-region <region>", "Region of the state record to read. Used with --from-cfn-stack as the CFn client region.")).addOption(new Option("--assume-role [arn]", "Assume a Lambda Function URL origin's deployed execution role and forward STS-issued temp credentials into its container so the handler runs with the deployed permissions. Three forms: `--assume-role <arn>` (explicit ARN); `--assume-role` (bare, auto-resolves from state — requires --from-cfn-stack); `--no-assume-role` (opt out). Off by default (the dev shell credentials are forwarded).")).addOption(new Option("--watch", "Hot-reload: re-synth + re-resolve the distribution when the CDK app's source changes (honors cdk.json watch.include/exclude; cdk.out, node_modules, .git are always excluded). The server keeps the previous version serving when synth fails mid-reload.").default(false));
 }
 
 //#endregion
@@ -33691,4 +33731,4 @@ function addStudioSpecificOptions(cmd) {
 
 //#endregion
 export { MAX_TASKS_SUBNET_RANGE_CAP as $, buildMessageEvent as $n, createLocalStartApiCommand as $t, startCloudFrontServer as A, buildCorsConfigByApiId as An, discoverRoutes as Ar, A2A_CONTAINER_PORT as At, runViewerResponse as B, pickResponseTemplate as Bn, resolveAgentCoreTarget as Br, AGENTCORE_SESSION_ID_HEADER as Bt, formatTargetListing as C, buildMethodArn as Cn, listTargets as Cr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Ct, parseOriginOverrides as D, invokeTokenAuthorizer as Dn, filterWebSocketApisByIdentifiers as Dr, addInvokeAgentCoreSpecificOptions as Dt, createLocalStartCloudFrontCommand as E, invokeRequestAuthorizer as En, discoverWebSocketApisOrThrow as Er, attachContainerLogStreamer as Et, pickFunctionUrlLogicalIdFromOrigin as F, translateLambdaResponse as Fn, AGENTCORE_HTTP_PROTOCOL as Fr, MCP_PROTOCOL_VERSION as Ft, resolveAlbTarget as G, probeHostGatewaySupport as Gn, LocalInvokeBuildError as Gr, buildAgentCoreCodeImage as Gt, albStrategy as H, tryParseStatus as Hn, formatStateRemedy as Hr, waitForAgentCorePing as Ht, pickTargetFunctionLogicalId as I, applyAuthorizerOverlay as In, AGENTCORE_MCP_PROTOCOL as Ir, mcpInvokeOnce as It, addStartServiceSpecificOptions as J, buildMgmtEndpointEnvUrl as Jn, toCmdArgv as Jt, isApplicationLoadBalancer as K, bufferToBody as Kn, buildStsClientConfig as Kr, computeCodeImageTag as Kt, resolveCloudFrontDistribution as L, buildHttpApiV2Event as Ln, AGENTCORE_RUNTIME_TYPE as Lr, parseSseForJsonRpc as Lt, serveLambdaUrlOrigin as M, isFunctionUrlOacFronted as Mn, resolveLambdaArnIntrinsic as Mr, a2aInvokeOnce as Mt, CLOUDFRONT_DISTRIBUTION_TYPE as N, matchPreflight as Nn, AGENTCORE_A2A_PROTOCOL as Nr, MCP_CONTAINER_PORT as Nt, resolveCloudFrontTarget as O, attachAuthorizers as On, parseSelectionExpressionPath as Or, createLocalInvokeAgentCoreCommand as Ot, isCloudFrontDistribution as P, matchRoute as Pn, AGENTCORE_AGUI_PROTOCOL as Pr, MCP_PATH as Pt, createLocalRunTaskCommand as Q, buildDisconnectEvent as Qn, addStartApiSpecificOptions as Qt, compileCloudFrontFunction as R, buildRestV1Event as Rn, AgentCoreResolutionError as Rr, AGENTCORE_SIGV4_SERVICE as Rt, createLocalListCommand as S, verifyJwtViaDiscovery as Sn, countTargets as Sr, DEFAULT_SHADOW_READY_TIMEOUT_MS as St, addStartCloudFrontSpecificOptions as T, evaluateCachedLambdaPolicy as Tn, discoverWebSocketApis as Tr, getContainerNetworkIp as Tt, createLocalStartAlbCommand as U, VtlEvaluationError as Un, substituteImagePlaceholders as Ur, downloadAndExtractS3Bundle as Ut, addAlbSpecificOptions as V, selectIntegrationResponse as Vn, derivePseudoParametersFromRegion as Vr, invokeAgentCore as Vt, parseLbPortOverrides as W, HOST_GATEWAY_MIN_VERSION as Wn, tryResolveImageFnJoin as Wr, SUPPORTED_CODE_RUNTIMES as Wt, serviceStrategy as X, parseConnectionsPath as Xn, addInvokeSpecificOptions as Xt, createLocalStartServiceCommand as Y, handleConnectionsRequest as Yn, classifySourceChange as Yt, addRunTaskSpecificOptions as Z, buildConnectEvent as Zn, createLocalInvokeCommand as Zt, toStudioTargetGroups as _, buildCognitoJwksUrl as _n, CfnLocalStateProvider as _r, describePinnedImageUri as _t, createLocalStudioCommand as a, buildStageMap as an, EcsTaskResolutionError as ar, parseMaxTasks as at, StudioEventBus as b, verifyCognitoJwt as bn, resolveWatchConfig as br, buildCloudMapIndex as bt, startStudioProxy as c, availableApiIdentifiers as cn, substituteEnvVarsFromState as cr, resolveSharedSidecarCredentials as ct, createStudioDispatcher as d, groupRoutesByServer as dn, createLocalStateProvider as dr, buildImageOverrideTag as dt, createWatchPredicates as en, architectureToPlatform as er, addCommonEcsServiceOptions as et, filterStudioCustomResources as f, readMtlsMaterialsFromDisk as fn, isCfnFlagPresent as fr, enforceImageOverrideOrphans as ft, startStudioServer as g, defaultCredentialsLoader as gn, resolveCfnStackName as gr, runImageOverrideBuilds as gt, filterStudioTargetGroups as h, resolveServiceIntegrationParameters as hn, resolveCfnRegion as hr, resolveImageOverrides as ht, coerceStopRequest as i, attachStageContext as in, resolveRuntimeImage as ir, ecsClusterOption as it, serveFromStaticOrigin as j, buildCorsConfigFromCloudFrontChain as jn, pickRefLogicalId as jr, A2A_PATH as jt, matchBehavior as k, applyCorsResponseHeaders as kn, webSocketApiMatchesIdentifier as kr, invokeAgentCoreWs as kt, relayServeRequest as l, filterRoutesByApiIdentifier as ln, substituteEnvVarsFromStateAsync as lr, runEcsServiceEmulator as lt, annotatePinnedEcsTargets as m, resolveSelectionExpression as mn, resolveCfnFallbackRegion as mr, parseImageOverrideFlags as mt, coerceRunRequest as n, createAuthorizerCache as nn, resolveRuntimeCodeMountPath as nr, addImageOverrideOptions as nt, resolveServeBaseUrl as o, materializeLayerFromArn as on, substituteAgainstState as or, parseRestartPolicy as ot, isCustomResourceLambdaTarget as p, startApiServer as pn, rejectExplicitCfnStackWithMultipleStacks as pr, mergeForService as pt, resolveAlbFrontDoor as q, ConnectionRegistry as qn, resolveProfileCredentials as qr, renderCodeDockerfile as qt, coerceServeRequest as r, createFileWatcher as rn, resolveRuntimeFileExtension as rr, buildEcsImageResolutionContext$1 as rt, createStudioServeManager as s, resolveEnvVars$1 as sn, substituteAgainstStateAsync as sr, resolveEcsAssumeRoleOption as st, addStudioSpecificOptions as t, resolveApiTargetSubset as tn, buildContainerImage as tr, addEcsAssumeRoleOptions as tt, reinvoke as u, filterRoutesByApiIdentifiers as un, LocalStateSourceError as ur, ImageOverrideError as ut, renderStudioHtml as v, buildJwksUrlFromIssuer as vn, collectSsmParameterRefs as vr, isLocalCdkAssetImage as vt, LocalStartCloudFrontError as w, computeRequestIdentityHash as wn, availableWebSocketApiIdentifiers as wr, setShadowReadyTimeoutMs as wt, addListSpecificOptions as x, verifyJwtAuthorizer as xn, resolveSingleTarget as xr, CloudMapRegistry as xt, createStudioStore as y, createJwksCache as yn, resolveSsmParameters as yr, listPinnedTargets as yt, runViewerRequest as z, evaluateResponseParameters as zn, pickAgentCoreCandidateStack as zr, signAgentCoreInvocation as zt };
-//# sourceMappingURL=local-studio-BWrmJblg.js.map
+//# sourceMappingURL=local-studio-DWur2ccn.js.map