cdk-local 0.122.0 → 0.123.1

package/dist/{local-studio-B08qyJZz.js → local-studio-Dk9H7QVO.js}

@@ -5,6 +5,7 @@ import * as path$1 from "node:path";
 import path, { dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { Command, Option } from "commander";
 import { AssumeRoleCommand, GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
+import { unzipSync } from "fflate";
 import { MultiSelectPrompt } from "@clack/core";
 import { S_BAR, S_BAR_END, S_BAR_START, S_CHECKBOX_ACTIVE, S_CHECKBOX_INACTIVE, S_CHECKBOX_SELECTED, confirm, isCancel, multiselect, select, text } from "@clack/prompts";
 import { AssetManifestArtifact } from "@aws-cdk/cloud-assembly-api";
@@ -29,7 +30,6 @@ import { createServer as createServer$2 } from "node:https";
 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { pipeline } from "node:stream/promises";
 import * as chokidar from "chokidar";
-import { unzipSync } from "fflate";
 import { Sha256 } from "@aws-crypto/sha256-js";
 import { SignatureV4 } from "@smithy/signature-v4";
 import graphlib from "graphlib";
@@ -1011,7 +1011,7 @@ function extractLambdaProperties(stack, logicalId, resource, resources) {
 	if (!handler) throw new LocalInvokeResolutionError(`Lambda '${logicalId}' has no Handler property.`);
 	const inlineCode = typeof code["ZipFile"] === "string" ? code["ZipFile"] : void 0;
 	let codePath = null;
-	if (!inlineCode) codePath = resolveAssetCodePath$1(stack, logicalId, resource);
+	if (!inlineCode) codePath = resolveAssetCodePath$1(stack, logicalId, resource, { allowZip: true });
 	const layers = resolveLambdaLayers(stack, logicalId, props);
 	return {
 		kind: "zip",
@@ -1155,13 +1155,63 @@ function extractImageLambdaProperties(args) {
 * Lambdas; absence usually means the user pre-synthesized with a different
 * cdk.out and pointed `--output` at a stale one).
 */
-function resolveAssetCodePath$1(stack, logicalId, resource) {
+function resolveAssetCodePath$1(stack, logicalId, resource, options = {}) {
 	const assetPath = resource.Metadata?.["aws:asset:path"];
 	if (typeof assetPath !== "string" || assetPath.length === 0) throw new LocalInvokeResolutionError(`Lambda '${logicalId}' has no Metadata['aws:asset:path']. ${getEmbedConfig().cliName} invoke needs this hint to find the local asset directory. Re-synthesize the app (without \`--output <stale-dir>\`) and retry.`);
 	const cdkOutDir = stack.assetManifestPath ? dirname(stack.assetManifestPath) : process.cwd();
 	const abs = isAbsolute(assetPath) ? assetPath : resolve(cdkOutDir, assetPath);
-	if (!existsSync(abs) || !statSync(abs).isDirectory()) throw new LocalInvokeResolutionError(`Lambda '${logicalId}' asset directory '${abs}' does not exist or is not a directory. Re-synthesize the app and retry.`);
-	return abs;
+	if (!existsSync(abs)) throw new LocalInvokeResolutionError(`Lambda '${logicalId}' asset path '${abs}' does not exist. Re-synthesize the app and retry.`);
+	const stat = statSync(abs);
+	if (stat.isDirectory()) return abs;
+	if (options.allowZip && stat.isFile() && abs.toLowerCase().endsWith(".zip")) return abs;
+	throw new LocalInvokeResolutionError(`Lambda '${logicalId}' asset path '${abs}' is not a directory` + (options.allowZip ? " or a .zip archive" : "") + ". Re-synthesize the app and retry.");
+}
+/**
+* Turn a resolved function-code asset path into a directory ready to
+* bind-mount into the Lambda container.
+*
+* Most CDK Lambda assets are already-unzipped directories (`asset.<hash>/`)
+* that bind-mount directly — those pass through untouched. But a
+* ZIP-packaged asset (`Code.fromAsset('bundle.zip')`, or a bundling that
+* emits a zip) is staged as `asset.<hash>.zip` and `aws:asset:path` points at
+* the zip FILE. Docker cannot bind-mount a zip file as a directory, so we
+* extract it to a fresh temp dir on demand and return that for the mount.
+*
+* Used by `cdkl invoke`, `cdkl start-api`, and the front-door Lambda runner —
+* the three places that bind-mount a ZIP Lambda's code — so all agree on the
+* zip handling. The returned `tmpDir` (when set) is threaded into the caller's
+* existing tmpdir cleanup.
+*/
+function materializeAssetCodeDir(codePath) {
+	if (!existsSync(codePath)) throw new LocalInvokeResolutionError(`Lambda asset path '${codePath}' does not exist. Re-synthesize the app and retry.`);
+	if (statSync(codePath).isDirectory()) return { dir: codePath };
+	let files;
+	try {
+		files = unzipSync(readFileSync(codePath));
+	} catch (err) {
+		throw new LocalInvokeResolutionError(`Lambda asset '${codePath}' is a file but could not be read as a ZIP archive: ${err instanceof Error ? err.message : String(err)}. Re-synthesize the app and retry.`);
+	}
+	const dir = mkdtempSync(join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-lambda-zip-`));
+	for (const [name, content] of Object.entries(files)) {
+		if (name.endsWith("/")) continue;
+		const dest = resolveSafeZipEntryPath(dir, name);
+		mkdirSync(dirname(dest), { recursive: true });
+		writeFileSync(dest, content);
+	}
+	return {
+		dir,
+		tmpDir: dir
+	};
+}
+/**
+* Guard against zip-slip: reject an entry whose normalized path escapes the
+* extraction root (e.g. `../../etc/passwd`).
+*/
+function resolveSafeZipEntryPath(root, entry) {
+	const dest = normalize(join(root, entry));
+	const rootWithSep = root.endsWith(sep) ? root : root + sep;
+	if (dest !== root && !dest.startsWith(rootWithSep)) throw new LocalInvokeResolutionError(`Refusing to extract a Lambda ZIP asset entry that escapes the target dir: '${entry}'.`);
+	return dest;
 }
 /**
 * Resolve a Lambda's `Properties.Layers` references to local asset
@@ -16269,7 +16319,11 @@ async function buildContainerSpec(args) {
 	let imageRef;
 	let platform;
 	if (lambda.kind === "zip") {
-		codeDir = lambda.codePath ?? materializeInlineCode$2(lambda.handler, lambda.inlineCode ?? "", resolveRuntimeFileExtension(lambda.runtime), inlineTmpDirs);
+		if (lambda.codePath) {
+			const materialized = materializeAssetCodeDir(lambda.codePath);
+			codeDir = materialized.dir;
+			if (materialized.tmpDir) inlineTmpDirs.add(materialized.tmpDir);
+		} else codeDir = materializeInlineCode$2(lambda.handler, lambda.inlineCode ?? "", resolveRuntimeFileExtension(lambda.runtime), inlineTmpDirs);
 		optDir = await materializeLambdaLayers$1(lambda.layers, layerTmpDirs, layerRoleArn);
 	} else {
 		imageRef = (await resolveContainerImageForStartApi(lambda, skipPull, args.profile, {
@@ -17205,6 +17259,14 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 		} catch (err) {
 			getLogger().debug(`Failed to remove inline-code tmpdir ${imagePlan.inlineTmpDir}: ${err instanceof Error ? err.message : String(err)}`);
 		}
+		if (imagePlan?.assetTmpDir) try {
+			rmSync(imagePlan.assetTmpDir, {
+				recursive: true,
+				force: true
+			});
+		} catch (err) {
+			getLogger().debug(`Failed to remove zip-asset tmpdir ${imagePlan.assetTmpDir}: ${err instanceof Error ? err.message : String(err)}`);
+		}
 		if (imagePlan?.layersTmpDir) try {
 			rmSync(imagePlan.layersTmpDir, {
 				recursive: true,
@@ -17322,10 +17384,15 @@ async function resolveImagePlan(lambda, options) {
 }
 async function resolveZipImagePlan$1(lambda, options) {
 	let inlineTmpDir;
+	let assetTmpDir;
 	let codeDir = lambda.codePath;
 	if (codeDir === null) {
 		inlineTmpDir = materializeInlineCode$1(lambda.handler, lambda.inlineCode ?? "", resolveRuntimeFileExtension(lambda.runtime));
 		codeDir = inlineTmpDir;
+	} else {
+		const materialized = materializeAssetCodeDir(codeDir);
+		codeDir = materialized.dir;
+		assetTmpDir = materialized.tmpDir;
 	}
 	const image = resolveRuntimeImage(lambda.runtime);
 	await pullImage(image, options.pull === false);
@@ -17342,6 +17409,7 @@ async function resolveZipImagePlan$1(lambda, options) {
 		extraMounts: layerPlan.mount ? [layerPlan.mount] : [],
 		cmd: [lambda.handler],
 		...inlineTmpDir !== void 0 && { inlineTmpDir },
+		...assetTmpDir !== void 0 && { assetTmpDir },
 		...layerPlan.tmpDir !== void 0 && { layersTmpDir: layerPlan.tmpDir },
 		...layerPlan.extraTmpDirs.length > 0 && { layerArnTmpDirs: layerPlan.extraTmpDirs },
 		...tmpfs !== void 0 && { tmpfs }
@@ -24449,10 +24517,15 @@ function materializeInlineCode(handler, source, fileExtension) {
 }
 async function resolveZipImagePlan(lambda, opts) {
 	let inlineTmpDir;
+	let assetTmpDir;
 	let codeDir = lambda.codePath;
 	if (codeDir === null) {
 		inlineTmpDir = materializeInlineCode(lambda.handler, lambda.inlineCode ?? "", resolveRuntimeFileExtension(lambda.runtime));
 		codeDir = inlineTmpDir;
+	} else {
+		const materialized = materializeAssetCodeDir(codeDir);
+		codeDir = materialized.dir;
+		assetTmpDir = materialized.tmpDir;
 	}
 	const image = resolveRuntimeImage(lambda.runtime);
 	await pullImage(image, opts.skipPull === true);
@@ -24465,7 +24538,8 @@ async function resolveZipImagePlan(lambda, opts) {
 			readOnly: true
 		}],
 		cmd: [lambda.handler],
-		...inlineTmpDir !== void 0 && { inlineTmpDir }
+		...inlineTmpDir !== void 0 && { inlineTmpDir },
+		...assetTmpDir !== void 0 && { assetTmpDir }
 	};
 }
 async function resolveContainerImagePlan(lambda, opts) {
@@ -24592,6 +24666,14 @@ function createFrontDoorLambdaRunner(lambda, opts) {
 			} catch (err) {
 				logger.debug(`Failed to remove inline-code tmpdir ${plan.inlineTmpDir}: ${err instanceof Error ? err.message : String(err)}`);
 			}
+			if (plan?.assetTmpDir) try {
+				rmSync(plan.assetTmpDir, {
+					recursive: true,
+					force: true
+				});
+			} catch (err) {
+				logger.debug(`Failed to remove zip-asset tmpdir ${plan.assetTmpDir}: ${err instanceof Error ? err.message : String(err)}`);
+			}
 		}
 	};
 }
@@ -28722,7 +28804,8 @@ function resolveOrigins(dc, template, stack, overrides) {
 			continue;
 		}
 		const bucketLogicalId = pickBucketLogicalIdFromOrigin(origin, template);
-		if (!(origin["S3OriginConfig"] !== void 0 || bucketLogicalId !== void 0)) {
+		const s3Domain = describeS3OriginDomain(origin["DomainName"]);
+		if (!(origin["S3OriginConfig"] !== void 0 || bucketLogicalId !== void 0 || s3Domain.isS3)) {
 			const lambdaUrl = resolveLambdaUrlOrigin(origin, template, originId);
 			if (lambdaUrl) {
 				out.set(originId, lambdaUrl);
@@ -28741,15 +28824,59 @@ function resolveOrigins(dc, template, stack, overrides) {
 			originId,
 			localDirs
 		});
-		else out.set(originId, {
-			kind: "s3-unresolved",
-			originId,
-			...bucketLogicalId !== void 0 && { bucketLogicalId }
-		});
+		else {
+			const literalBucket = bucketLogicalId === void 0 ? s3Domain.bucketName : void 0;
+			out.set(originId, {
+				kind: "s3-unresolved",
+				originId,
+				...bucketLogicalId !== void 0 && { bucketLogicalId },
+				...literalBucket !== void 0 && { bucketName: literalBucket },
+				...bucketLogicalId === void 0 && literalBucket === void 0 && s3Domain.isS3 ? { deployedConfigOnly: true } : {}
+			});
+		}
 	}
 	return out;
 }
 /**
+* Describe an S3 origin's `DomainName`: whether it is an S3-bucket domain and,
+* if so, the literal bucket name when it is statically derivable from the
+* template (issue #405 follow-up). Handles a literal string, an `Fn::Sub`
+* template, and an `Fn::Join('', [...])`. The bucket label is the part before
+* `.s3` / `.s3-website`; when that label is a pure intrinsic (`${Ref}`), the
+* name is left undefined (the command resolves it via GetDistributionConfig).
+* The region segment (`${AWS::Region}` etc.) does NOT affect the bucket name,
+* so it is normalized away just to validate the S3 shape.
+*/
+function describeS3OriginDomain(value) {
+	const flat = flattenDomainTemplate(value);
+	if (flat === void 0) return { isS3: false };
+	const normalized = flat.replace(/\$\{AWS::Region\}/g, "region").replace(/\$\{AWS::URLSuffix\}/g, "amazonaws.com").replace(/\$\{AWS::Partition\}/g, "aws");
+	const match = /^(.+?)\.s3(?:[.-][A-Za-z0-9$.{}_-]+)*\.amazonaws\.com$/.exec(normalized);
+	if (!match) return { isS3: false };
+	const label = match[1];
+	if (label.includes("${") || label.includes("{Fn")) return { isS3: true };
+	return {
+		isS3: true,
+		bucketName: label
+	};
+}
+/**
+* Flatten an origin `DomainName` to a single string for S3-shape matching:
+* a literal string verbatim; an `Fn::Sub` template's string; an
+* `Fn::Join('', parts)` with literal parts verbatim and intrinsic parts as a
+* `${...}` marker. Returns `undefined` for any other shape.
+*/
+function flattenDomainTemplate(value) {
+	if (typeof value === "string") return value;
+	if (!value || typeof value !== "object") return void 0;
+	const obj = value;
+	const sub = obj["Fn::Sub"];
+	if (typeof sub === "string") return sub;
+	if (Array.isArray(sub) && typeof sub[0] === "string") return sub[0];
+	const join = obj["Fn::Join"];
+	if (Array.isArray(join) && join[0] === "" && Array.isArray(join[1])) return join[1].map((part) => typeof part === "string" ? part : "${x}").join("");
+}
+/**
 * Read a stack's asset manifest, or `undefined` when it ships no assets / is
 * unreadable. We already hold the absolute manifest path on {@link StackInfo},
 * so we read + parse it directly rather than going through the by-stack-name
@@ -29870,6 +29997,40 @@ function classifyS3Error(err) {
 	};
 }
 
+//#endregion
+//#region src/local/cloudfront-distribution-config.ts
+/**
+* Returns the resolved bucket name, or `undefined` when the distribution /
+* origin cannot be read or its `DomainName` is not an S3 domain. Never throws —
+* a failure (no permission, wrong id, throttle) resolves to `undefined` so the
+* caller can fall back to its actionable `--origin` guidance.
+*/
+async function resolveDeployedOriginBucket(options) {
+	try {
+		const origin = (await (options.getOrigins ? options.getOrigins(options.distributionId) : defaultGetOrigins(options))).find((o) => o.Id === options.originId);
+		if (!origin || typeof origin.DomainName !== "string") return void 0;
+		return describeS3OriginDomain(origin.DomainName).bucketName;
+	} catch {
+		return;
+	}
+}
+async function defaultGetOrigins(options) {
+	const { CloudFrontClient, GetDistributionConfigCommand } = await import("@aws-sdk/client-cloudfront");
+	const client = new CloudFrontClient({
+		region: "us-east-1",
+		...options.credentials && { credentials: {
+			accessKeyId: options.credentials.accessKeyId,
+			secretAccessKey: options.credentials.secretAccessKey,
+			...options.credentials.sessionToken && { sessionToken: options.credentials.sessionToken }
+		} }
+	});
+	try {
+		return (await client.send(new GetDistributionConfigCommand({ Id: options.distributionId }))).DistributionConfig?.Origins?.Items ?? [];
+	} finally {
+		client.destroy();
+	}
+}
+
 //#endregion
 //#region src/local/cloudfront-kvs-client.ts
 /**
@@ -30231,9 +30392,25 @@ async function resolveDeployedS3Origins(distribution, stacks, options, profileCr
 	const region = options.stackRegion ?? options.region ?? synthRegion;
 	const provider = createLocalStateProvider(options, distribution.stackName, synthRegion);
 	const record = provider ? await provider.load(distribution.stackName, synthRegion) : void 0;
+	const distributionId = record?.resources[distribution.logicalId]?.physicalId;
 	for (const origin of [...distribution.origins.values()]) {
-		if (origin.kind !== "s3-unresolved" || origin.bucketLogicalId === void 0) continue;
-		const bucketName = record?.resources[origin.bucketLogicalId]?.physicalId;
+		if (origin.kind !== "s3-unresolved") continue;
+		let bucketName;
+		let via;
+		if (origin.bucketLogicalId !== void 0) {
+			bucketName = record?.resources[origin.bucketLogicalId]?.physicalId;
+			via = "deployed state";
+		} else if (origin.bucketName !== void 0) {
+			bucketName = origin.bucketName;
+			via = "the origin's DomainName";
+		} else if (origin.deployedConfigOnly && distributionId) {
+			bucketName = await resolveDeployedOriginBucket({
+				distributionId,
+				originId: origin.originId,
+				...profileCredentials !== void 0 && { credentials: profileCredentials }
+			});
+			via = "GetDistributionConfig";
+		} else continue;
 		if (!bucketName) continue;
 		readers.set(origin.originId, createS3OriginReader(bucketName, {
 			...region !== void 0 && { region },
@@ -30246,7 +30423,7 @@ async function resolveDeployedS3Origins(distribution, stacks, options, profileCr
 			originId: origin.originId,
 			bucketName
 		});
-		logger.info(`Origin '${origin.originId}': no local BucketDeployment source; serving from deployed S3 (bucket=${bucketName}) on demand under --from-cfn-stack.`);
+		logger.info(`Origin '${origin.originId}': no local BucketDeployment source; serving from deployed S3 (bucket=${bucketName}, resolved via ${via}) on demand under --from-cfn-stack.`);
 	}
 	return {
 		readers,
@@ -35466,5 +35643,5 @@ function addStudioSpecificOptions(cmd) {
 }
 
 //#endregion
-export { pickKvsLogicalIdFromArn as $, buildCorsConfigByApiId as $n, discoverRoutes as $r, A2A_CONTAINER_PORT as $t, parseOriginOverrides as A, resolveEnvVars$1 as An, substituteAgainstStateAsync as Ar, resolveEcsAssumeRoleOption as At, resolveErrorResponseCandidates as B, buildCognitoJwksUrl as Bn, CfnLocalStateProvider as Br, describePinnedImageUri as Bt, addListSpecificOptions as C, createWatchPredicates as Cn, architectureToPlatform as Cr, addCommonEcsServiceOptions as Ct, addStartCloudFrontSpecificOptions as D, attachStageContext as Dn, resolveRuntimeImage as Dr, ecsClusterOption as Dt, LocalStartCloudFrontError as E, createFileWatcher as En, resolveRuntimeFileExtension as Er, buildEcsImageResolutionContext$1 as Et, resolveDeployedKvsArnByName as F, readMtlsMaterialsFromDisk as Fn, isCfnFlagPresent as Fr, enforceImageOverrideOrphans as Ft, buildEdgeRequestEvent as G, verifyJwtViaDiscovery as Gn, countTargets as Gr, DEFAULT_SHADOW_READY_TIMEOUT_MS as Gt, serveLambdaUrlOrigin as H, createJwksCache as Hn, resolveSsmParameters as Hr, listPinnedTargets as Ht, classifyS3Error as I, startApiServer as In, rejectExplicitCfnStackWithMultipleStacks as Ir, mergeForService as It, httpHeadersToEdge as J, evaluateCachedLambdaPolicy as Jn, discoverWebSocketApis as Jr, getContainerNetworkIp as Jt, buildEdgeResponseEvent as K, buildMethodArn as Kn, listTargets as Kr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Kt, createS3OriginReader as L, resolveSelectionExpression as Ln, resolveCfnFallbackRegion as Lr, parseImageOverrideFlags as Lt, idFromArn as M, filterRoutesByApiIdentifier as Mn, substituteEnvVarsFromStateAsync as Mr, runEcsServiceEmulator as Mt, resolveKvsModulesForDistribution as N, filterRoutesByApiIdentifiers as Nn, LocalStateSourceError as Nr, ImageOverrideError as Nt, createLocalStartCloudFrontCommand as O, buildStageMap as On, EcsTaskResolutionError as Or, parseMaxTasks as Ot, createDeployedKvsDataSource as P, groupRoutesByServer as Pn, createLocalStateProvider as Pr, buildImageOverrideTag as Pt, pickFunctionUrlLogicalIdFromOrigin as Q, applyCorsResponseHeaders as Qn, webSocketApiMatchesIdentifier as Qr, invokeAgentCoreWs as Qt, matchBehavior as R, resolveServiceIntegrationParameters as Rn, resolveCfnRegion as Rr, resolveImageOverrides as Rt, StudioEventBus as S, createLocalStartApiCommand as Sn, buildMessageEvent as Sr, MAX_TASKS_SUBNET_RANGE_CAP as St, formatTargetListing as T, createAuthorizerCache as Tn, resolveRuntimeCodeMountPath as Tr, addImageOverrideOptions as Tt, applyEdgeRequestResult as U, verifyCognitoJwt as Un, resolveWatchConfig as Ur, buildCloudMapIndex as Ut, serveFromStaticOrigin as V, buildJwksUrlFromIssuer as Vn, collectSsmParameterRefs as Vr, isLocalCdkAssetImage as Vt, applyEdgeResponseResult as W, verifyJwtAuthorizer as Wn, resolveSingleTarget as Wr, CloudMapRegistry as Wt, extractKvsAssociations as X, invokeTokenAuthorizer as Xn, filterWebSocketApisByIdentifiers as Xr, addInvokeAgentCoreSpecificOptions as Xt, CLOUDFRONT_DISTRIBUTION_TYPE as Y, invokeRequestAuthorizer as Yn, discoverWebSocketApisOrThrow as Yr, attachContainerLogStreamer as Yt, isCloudFrontDistribution as Z, attachAuthorizers as Zn, parseSelectionExpressionPath as Zr, createLocalInvokeAgentCoreCommand as Zt, filterStudioTargetGroups as _, toCmdArgv as _n, buildMgmtEndpointEnvUrl as _r, addStartServiceSpecificOptions as _t, createLocalStudioCommand as a, AGENTCORE_MCP_PROTOCOL as ai, mcpInvokeOnce as an, applyAuthorizerOverlay as ar, runViewerResponse as at, renderStudioHtml as b, createLocalInvokeCommand as bn, buildConnectEvent as br, addRunTaskSpecificOptions as bt, startStudioProxy as c, pickAgentCoreCandidateStack as ci, signAgentCoreInvocation as cn, evaluateResponseParameters as cr, createLocalFileKvsDataSource as ct, createStudioDispatcher as d, formatStateRemedy as di, waitForAgentCorePing as dn, tryParseStatus as dr, albStrategy as dt, pickRefLogicalId as ei, A2A_PATH as en, buildCorsConfigFromCloudFrontChain as er, pickLambdaEdgeFunctionLogicalId as et, filterStudioCustomResources as f, substituteImagePlaceholders as fi, downloadAndExtractS3Bundle as fn, VtlEvaluationError as fr, createLocalStartAlbCommand as ft, annotatePinnedEcsTargets as g, resolveProfileCredentials as gi, renderCodeDockerfile as gn, ConnectionRegistry as gr, resolveAlbFrontDoor as gt, annotateEcsTaskPinnedTargets as h, buildStsClientConfig as hi, computeCodeImageTag as hn, bufferToBody as hr, isApplicationLoadBalancer as ht, coerceStopRequest as i, AGENTCORE_HTTP_PROTOCOL as ii, MCP_PROTOCOL_VERSION as in, translateLambdaResponse as ir, runViewerRequest as it, resolveCloudFrontTarget as j, availableApiIdentifiers as jn, substituteEnvVarsFromState as jr, resolveSharedSidecarCredentials as jt, parseKvsFileOverrides as k, materializeLayerFromArn as kn, substituteAgainstState as kr, parseRestartPolicy as kt, relayServeRequest as l, resolveAgentCoreTarget as li, AGENTCORE_SESSION_ID_HEADER as ln, pickResponseTemplate as lr, createUnboundCloudFrontModule as lt, annotateAlbPinnedBackingServices as m, LocalInvokeBuildError as mi, buildAgentCoreCodeImage as mn, probeHostGatewaySupport as mr, resolveAlbTarget as mt, coerceRunRequest as n, AGENTCORE_A2A_PROTOCOL as ni, MCP_CONTAINER_PORT as nn, matchPreflight as nr, resolveCloudFrontDistribution as nt, resolveServeBaseUrl as o, AGENTCORE_RUNTIME_TYPE as oi, parseSseForJsonRpc as on, buildHttpApiV2Event as or, stripCloudFrontImport as ot, isCustomResourceLambdaTarget as p, tryResolveImageFnJoin as pi, SUPPORTED_CODE_RUNTIMES as pn, HOST_GATEWAY_MIN_VERSION as pr, parseLbPortOverrides as pt, edgeHeadersToHttp as q, computeRequestIdentityHash as qn, availableWebSocketApiIdentifiers as qr, setShadowReadyTimeoutMs as qt, coerceServeRequest as r, AGENTCORE_AGUI_PROTOCOL as ri, MCP_PATH as rn, matchRoute as rr, compileCloudFrontFunction as rt, createStudioServeManager as s, AgentCoreResolutionError as si, AGENTCORE_SIGV4_SERVICE as sn, buildRestV1Event as sr, createCloudFrontModule as st, addStudioSpecificOptions as t, resolveLambdaArnIntrinsic as ti, a2aInvokeOnce as tn, isFunctionUrlOacFronted as tr, pickTargetFunctionLogicalId as tt, reinvoke as u, derivePseudoParametersFromRegion as ui, invokeAgentCore as un, selectIntegrationResponse as ur, addAlbSpecificOptions as ut, startStudioServer as v, classifySourceChange as vn, handleConnectionsRequest as vr, createLocalStartServiceCommand as vt, createLocalListCommand as w, resolveApiTargetSubset as wn, buildContainerImage as wr, addEcsAssumeRoleOptions as wt, createStudioStore as x, addStartApiSpecificOptions as xn, buildDisconnectEvent as xr, createLocalRunTaskCommand as xt, toStudioTargetGroups as y, addInvokeSpecificOptions as yn, parseConnectionsPath as yr, serviceStrategy as yt, startCloudFrontServer as z, defaultCredentialsLoader as zn, resolveCfnStackName as zr, runImageOverrideBuilds as zt };
-//# sourceMappingURL=local-studio-B08qyJZz.js.map
+export { isCloudFrontDistribution as $, attachAuthorizers as $n, parseSelectionExpressionPath as $r, createLocalInvokeAgentCoreCommand as $t, parseOriginOverrides as A, buildStageMap as An, EcsTaskResolutionError as Ar, parseMaxTasks as At, startCloudFrontServer as B, resolveServiceIntegrationParameters as Bn, resolveCfnRegion as Br, resolveImageOverrides as Bt, addListSpecificOptions as C, addStartApiSpecificOptions as Cn, buildDisconnectEvent as Cr, createLocalRunTaskCommand as Ct, addStartCloudFrontSpecificOptions as D, createAuthorizerCache as Dn, resolveRuntimeCodeMountPath as Dr, addImageOverrideOptions as Dt, LocalStartCloudFrontError as E, resolveApiTargetSubset as En, buildContainerImage as Er, addEcsAssumeRoleOptions as Et, resolveDeployedKvsArnByName as F, filterRoutesByApiIdentifiers as Fn, LocalStateSourceError as Fr, ImageOverrideError as Ft, applyEdgeResponseResult as G, verifyCognitoJwt as Gn, resolveWatchConfig as Gr, buildCloudMapIndex as Gt, serveFromStaticOrigin as H, buildCognitoJwksUrl as Hn, CfnLocalStateProvider as Hr, describePinnedImageUri as Ht, resolveDeployedOriginBucket as I, groupRoutesByServer as In, createLocalStateProvider as Ir, buildImageOverrideTag as It, edgeHeadersToHttp as J, buildMethodArn as Jn, listTargets as Jr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Jt, buildEdgeRequestEvent as K, verifyJwtAuthorizer as Kn, resolveSingleTarget as Kr, CloudMapRegistry as Kt, classifyS3Error as L, readMtlsMaterialsFromDisk as Ln, isCfnFlagPresent as Lr, enforceImageOverrideOrphans as Lt, idFromArn as M, resolveEnvVars$1 as Mn, substituteAgainstStateAsync as Mr, resolveEcsAssumeRoleOption as Mt, resolveKvsModulesForDistribution as N, availableApiIdentifiers as Nn, substituteEnvVarsFromState as Nr, resolveSharedSidecarCredentials as Nt, createLocalStartCloudFrontCommand as O, createFileWatcher as On, resolveRuntimeFileExtension as Or, buildEcsImageResolutionContext$1 as Ot, createDeployedKvsDataSource as P, filterRoutesByApiIdentifier as Pn, substituteEnvVarsFromStateAsync as Pr, runEcsServiceEmulator as Pt, extractKvsAssociations as Q, invokeTokenAuthorizer as Qn, filterWebSocketApisByIdentifiers as Qr, addInvokeAgentCoreSpecificOptions as Qt, createS3OriginReader as R, startApiServer as Rn, rejectExplicitCfnStackWithMultipleStacks as Rr, mergeForService as Rt, StudioEventBus as S, createLocalInvokeCommand as Sn, buildConnectEvent as Sr, addRunTaskSpecificOptions as St, formatTargetListing as T, createWatchPredicates as Tn, architectureToPlatform as Tr, addCommonEcsServiceOptions as Tt, serveLambdaUrlOrigin as U, buildJwksUrlFromIssuer as Un, collectSsmParameterRefs as Ur, isLocalCdkAssetImage as Ut, resolveErrorResponseCandidates as V, defaultCredentialsLoader as Vn, resolveCfnStackName as Vr, runImageOverrideBuilds as Vt, applyEdgeRequestResult as W, createJwksCache as Wn, resolveSsmParameters as Wr, listPinnedTargets as Wt, CLOUDFRONT_DISTRIBUTION_TYPE as X, evaluateCachedLambdaPolicy as Xn, discoverWebSocketApis as Xr, getContainerNetworkIp as Xt, httpHeadersToEdge as Y, computeRequestIdentityHash as Yn, availableWebSocketApiIdentifiers as Yr, setShadowReadyTimeoutMs as Yt, describeS3OriginDomain as Z, invokeRequestAuthorizer as Zn, discoverWebSocketApisOrThrow as Zr, attachContainerLogStreamer as Zt, filterStudioTargetGroups as _, buildStsClientConfig as _i, computeCodeImageTag as _n, bufferToBody as _r, isApplicationLoadBalancer as _t, createLocalStudioCommand as a, AGENTCORE_AGUI_PROTOCOL as ai, MCP_PATH as an, matchRoute as ar, compileCloudFrontFunction as at, renderStudioHtml as b, classifySourceChange as bn, handleConnectionsRequest as br, createLocalStartServiceCommand as bt, startStudioProxy as c, AGENTCORE_RUNTIME_TYPE as ci, parseSseForJsonRpc as cn, buildHttpApiV2Event as cr, stripCloudFrontImport as ct, createStudioDispatcher as d, resolveAgentCoreTarget as di, AGENTCORE_SESSION_ID_HEADER as dn, pickResponseTemplate as dr, createUnboundCloudFrontModule as dt, webSocketApiMatchesIdentifier as ei, invokeAgentCoreWs as en, applyCorsResponseHeaders as er, pickFunctionUrlLogicalIdFromOrigin as et, filterStudioCustomResources as f, derivePseudoParametersFromRegion as fi, invokeAgentCore as fn, selectIntegrationResponse as fr, addAlbSpecificOptions as ft, annotatePinnedEcsTargets as g, LocalInvokeBuildError as gi, buildAgentCoreCodeImage as gn, probeHostGatewaySupport as gr, resolveAlbTarget as gt, annotateEcsTaskPinnedTargets as h, tryResolveImageFnJoin as hi, SUPPORTED_CODE_RUNTIMES as hn, HOST_GATEWAY_MIN_VERSION as hr, parseLbPortOverrides as ht, coerceStopRequest as i, AGENTCORE_A2A_PROTOCOL as ii, MCP_CONTAINER_PORT as in, matchPreflight as ir, resolveCloudFrontDistribution as it, resolveCloudFrontTarget as j, materializeLayerFromArn as jn, substituteAgainstState as jr, parseRestartPolicy as jt, parseKvsFileOverrides as k, attachStageContext as kn, resolveRuntimeImage as kr, ecsClusterOption as kt, relayServeRequest as l, AgentCoreResolutionError as li, AGENTCORE_SIGV4_SERVICE as ln, buildRestV1Event as lr, createCloudFrontModule as lt, annotateAlbPinnedBackingServices as m, substituteImagePlaceholders as mi, downloadAndExtractS3Bundle as mn, VtlEvaluationError as mr, createLocalStartAlbCommand as mt, coerceRunRequest as n, pickRefLogicalId as ni, A2A_PATH as nn, buildCorsConfigFromCloudFrontChain as nr, pickLambdaEdgeFunctionLogicalId as nt, resolveServeBaseUrl as o, AGENTCORE_HTTP_PROTOCOL as oi, MCP_PROTOCOL_VERSION as on, translateLambdaResponse as or, runViewerRequest as ot, isCustomResourceLambdaTarget as p, formatStateRemedy as pi, waitForAgentCorePing as pn, tryParseStatus as pr, albStrategy as pt, buildEdgeResponseEvent as q, verifyJwtViaDiscovery as qn, countTargets as qr, DEFAULT_SHADOW_READY_TIMEOUT_MS as qt, coerceServeRequest as r, resolveLambdaArnIntrinsic as ri, a2aInvokeOnce as rn, isFunctionUrlOacFronted as rr, pickTargetFunctionLogicalId as rt, createStudioServeManager as s, AGENTCORE_MCP_PROTOCOL as si, mcpInvokeOnce as sn, applyAuthorizerOverlay as sr, runViewerResponse as st, addStudioSpecificOptions as t, discoverRoutes as ti, A2A_CONTAINER_PORT as tn, buildCorsConfigByApiId as tr, pickKvsLogicalIdFromArn as tt, reinvoke as u, pickAgentCoreCandidateStack as ui, signAgentCoreInvocation as un, evaluateResponseParameters as ur, createLocalFileKvsDataSource as ut, startStudioServer as v, resolveProfileCredentials as vi, renderCodeDockerfile as vn, ConnectionRegistry as vr, resolveAlbFrontDoor as vt, createLocalListCommand as w, createLocalStartApiCommand as wn, buildMessageEvent as wr, MAX_TASKS_SUBNET_RANGE_CAP as wt, createStudioStore as x, addInvokeSpecificOptions as xn, parseConnectionsPath as xr, serviceStrategy as xt, toStudioTargetGroups as y, toCmdArgv as yn, buildMgmtEndpointEnvUrl as yr, addStartServiceSpecificOptions as yt, matchBehavior as z, resolveSelectionExpression as zn, resolveCfnFallbackRegion as zr, parseImageOverrideFlags as zt };
+//# sourceMappingURL=local-studio-Dk9H7QVO.js.map