cdk-local 0.124.2 → 0.125.0

package/dist/{local-studio-rgRqFe-U.js → local-studio-BGi3yHZI.js}

@@ -18790,6 +18790,76 @@ function isTransientNetworkError(err) {
 */
 const WS_PATH = "/ws";
 /**
+* Decode a `ws` {@link RawData} frame to UTF-8 text. `ws` delivers a Buffer by
+* default (binaryType 'nodebuffer'); handle the fragments / ArrayBuffer shapes
+* too so a frame is always decoded the same way regardless of source.
+*/
+function decodeWsFrame(data) {
+	return (Buffer.isBuffer(data) ? data : Array.isArray(data) ? Buffer.concat(data) : Buffer.from(data)).toString("utf-8");
+}
+/**
+* Open `ws://host:port/ws` with the AgentCore session-id (+ optional
+* `Authorization`) upgrade header and return a handle for bidirectional
+* frame relay. Sends NO initial frame — the caller drives every frame. Each
+* received frame is decoded to UTF-8 and passed to {@link
+* BridgeAgentCoreWsOptions.onMessage}.
+*/
+function bridgeAgentCoreWs(host, port, options) {
+	const ws = new (options.webSocketImpl ?? WebSocket)(`ws://${host}:${port}${WS_PATH}`, { headers: {
+		[AGENTCORE_SESSION_ID_HEADER]: options.sessionId,
+		...options.authorization && { Authorization: options.authorization }
+	} });
+	let open = false;
+	let closed = false;
+	const pending = [];
+	const close = () => {
+		if (closed) return;
+		closed = true;
+		options.abortSignal?.removeEventListener("abort", close);
+		try {
+			ws.close();
+		} catch {}
+	};
+	if (options.abortSignal) if (options.abortSignal.aborted) close();
+	else options.abortSignal.addEventListener("abort", close, { once: true });
+	const sendFrame = (text) => {
+		try {
+			ws.send(text);
+		} catch (err) {
+			options.onError?.(err instanceof Error ? err : new Error(String(err)));
+		}
+	};
+	ws.on("open", () => {
+		open = true;
+		if (closed) {
+			try {
+				ws.close();
+			} catch {}
+			return;
+		}
+		options.onOpen?.();
+		for (const frame of pending.splice(0)) sendFrame(frame);
+	});
+	ws.on("message", (data) => options.onMessage(decodeWsFrame(data)));
+	ws.on("close", (code) => {
+		closed = true;
+		options.abortSignal?.removeEventListener("abort", close);
+		options.onClose?.(code);
+	});
+	ws.on("error", (err) => options.onError?.(err));
+	return {
+		send: (text) => {
+			if (closed) return;
+			if (!open) {
+				pending.push(text);
+				return;
+			}
+			sendFrame(text);
+		},
+		close
+	};
+}
+/**
 * Open `/ws`, send the event as the first frame, stream received frames to
 * `onMessage`, and resolve when the server closes. Rejects on a connection
 * error or when `timeoutMs` elapses before the server closes.
@@ -27417,7 +27487,7 @@ function resolveAlbFrontDoor(stack, albLogicalId) {
 		if (resource.Type !== LISTENER_TYPE) continue;
 		const props = resource.Properties ?? {};
 		if (refOf(props["LoadBalancerArn"]) !== albLogicalId) continue;
-		const port = parsePort(props["Port"]);
+		const port = parsePort$1(props["Port"]);
 		if (port === void 0) continue;
 		const protocol = typeof props["Protocol"] === "string" ? props["Protocol"] : "HTTP";
 		if (protocol !== "HTTP" && protocol !== "HTTPS") {
@@ -27866,7 +27936,7 @@ function refOf(raw) {
 		if (typeof ref === "string" && ref.length > 0) return ref;
 	}
 }
-function parsePort(raw) {
+function parsePort$1(raw) {
 	if (typeof raw === "number" && Number.isInteger(raw) && raw >= 1 && raw <= 65535) return raw;
 	if (typeof raw === "string" && /^\d+$/.test(raw)) {
 		const n = parseInt(raw, 10);
@@ -27874,7 +27944,7 @@ function parsePort(raw) {
 	}
 }
 function parseContainerPort(raw) {
-	return parsePort(raw);
+	return parsePort$1(raw);
 }
 /**
 * Parse a `ForwardConfig.TargetGroups[].Weight`. ALB weights are 0-999; a
@@ -30612,6 +30682,288 @@ function addStartCloudFrontSpecificOptions(cmd) {
 	return cmd.addOption(new Option("--port <port>", "HTTP server port (default: auto-allocate)").default("0")).addOption(new Option("--host <host>", "Bind address").default("127.0.0.1")).addOption(new Option("--origin <originId=dir>", "Point a distribution origin at a local directory (repeatable). Use when cdk-local cannot resolve the origin's BucketDeployment source automatically (content uploaded out of band, or a non-CDK bucket).").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--kvs-file <kvsLogicalId=file.json>", "Back a CloudFront Function's KeyValueStore reads (cf.kvs().get()) with a local JSON map (repeatable). The key is the AWS::CloudFront::KeyValueStore resource logical id; the file is a flat { \"key\": \"value\" } object. The AWS-free alternative to --from-cfn-stack, which instead reads the deployed store via the GetKey API.").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--tls", "Terminate real TLS (HTTPS). Uses --tls-cert / --tls-key when supplied, else an auto-generated self-signed cert.").default(false)).addOption(new Option("--tls-cert <path>", "PEM server certificate for --tls (implies --tls).")).addOption(new Option("--tls-key <path>", "PEM server private key for --tls (implies --tls).")).addOption(new Option("--no-pull", "Skip 'docker pull' for a Lambda Function URL origin's base image (use the locally cached image).")).addOption(new Option("--from-cfn-stack [cfn-stack-name]", "Bind to a deployed CloudFormation stack (ListStackResources). Resolves an S3 origin that has no local BucketDeployment source to its deployed bucket and serves it from real S3 on demand (the front/back-split case: files uploaded out of band), and resolves a Lambda Function URL / Lambda@Edge function's env vars to the deployed physical IDs / exports. Use for CDK apps deployed via the upstream CDK CLI (`cdk deploy`). Bare form uses the resolved stack name; pass a value when the CFn stack name differs.")).addOption(new Option("--cache-origin", "For a deployed-S3 origin (served from real S3 under --from-cfn-stack): keep fetched objects in memory for the session instead of re-reading on every request. Faster repeat reads / fewer S3 GETs, but an out-of-band S3 content change is not reflected until a --watch reload (which clears the cache) or a restart. Off by default (every request re-reads, always current). Not CloudFront CDN caching.").default(false)).addOption(new Option("--stack-region <region>", "Region of the state record to read. Used with --from-cfn-stack as the CFn client region.")).addOption(new Option("--assume-role [arn]", "Assume a Lambda Function URL origin's deployed execution role and forward STS-issued temp credentials into its container so the handler runs with the deployed permissions. Three forms: `--assume-role <arn>` (explicit ARN); `--assume-role` (bare, auto-resolves from state — requires --from-cfn-stack); `--no-assume-role` (opt out). Off by default (the dev shell credentials are forwarded).")).addOption(new Option("--watch", "Hot-reload: re-synth + re-resolve the distribution when the CDK app's source changes (honors cdk.json watch.include/exclude; cdk.out, node_modules, .git are always excluded). The server keeps the previous version serving when synth fails mid-reload.").default(false));
 }
 
+//#endregion
+//#region src/local/agentcore-ws-bridge.ts
+/**
+* Host-side WebSocket bridge in front of an AgentCore runtime's container
+* `/ws` endpoint, the serving primitive behind `cdkl start-agentcore`.
+*
+* Why a bridge instead of pointing a client straight at the published
+* container port: the AgentCore `/ws` upgrade requires the
+* `X-Amzn-Bedrock-AgentCore-Runtime-Session-Id` header (and `Authorization`
+* under a `customJwtAuthorizer`), but a browser `WebSocket` cannot set custom
+* request headers. So a browser console connects to THIS header-less bridge,
+* and the bridge opens a `ws` connection to the container with the headers
+* injected (via {@link bridgeAgentCoreWs}), piping frames both ways.
+*
+* One container connection per inbound client connection; each inbound client
+* gets its own AgentCore session id (a fresh UUID, unless one is pinned) so a
+* browser tab is its own session — the way the cloud front door scopes them.
+*/
+const DEFAULT_PATH = "/ws";
+function decodeBrowserFrame(data, isBinary) {
+	if (typeof data === "string") return data;
+	return (Buffer.isBuffer(data) ? data : Array.isArray(data) ? Buffer.concat(data) : Buffer.from(data)).toString("utf-8");
+}
+/**
+* Start the bridge server. Resolves once it is listening; the returned handle
+* carries the connectable `url` and a `close()` that tears down the server and
+* every live bridged connection.
+*/
+function startAgentCoreWsBridge(config) {
+	const host = config.host ?? "127.0.0.1";
+	const path = config.path ?? DEFAULT_PATH;
+	const httpServer = createServer$1((_req, res) => {
+		res.writeHead(426, { "Content-Type": "text/plain" });
+		res.end("Upgrade required: connect over WebSocket.\n");
+	});
+	const wss = new WebSocketServer({
+		server: httpServer,
+		path
+	});
+	const liveCloses = /* @__PURE__ */ new Set();
+	wss.on("connection", (browser) => {
+		const sessionId = config.sessionId ?? randomUUID();
+		const handle = bridgeAgentCoreWs(config.containerHost, config.containerPort, {
+			sessionId,
+			...config.authorization && { authorization: config.authorization },
+			...config.webSocketImpl && { webSocketImpl: config.webSocketImpl },
+			onMessage: (text) => {
+				if (browser.readyState === browser.OPEN) browser.send(text);
+			},
+			onClose: () => {
+				try {
+					browser.close();
+				} catch {}
+			},
+			onError: (err) => {
+				if (browser.readyState === browser.OPEN) try {
+					browser.send(`[bridge error] ${err.message}`);
+				} catch {}
+				try {
+					browser.close();
+				} catch {}
+			}
+		});
+		liveCloses.add(handle.close);
+		browser.on("message", (data, isBinary) => {
+			handle.send(decodeBrowserFrame(data, isBinary));
+		});
+		browser.on("close", () => {
+			liveCloses.delete(handle.close);
+			handle.close();
+		});
+		browser.on("error", () => {
+			liveCloses.delete(handle.close);
+			handle.close();
+		});
+	});
+	return new Promise((resolve, reject) => {
+		httpServer.once("error", reject);
+		httpServer.listen(config.port ?? 0, host, () => {
+			httpServer.removeListener("error", reject);
+			httpServer.on("error", (err) => getLogger().debug(`agentcore-ws bridge server error: ${err.message}`));
+			const port = httpServer.address().port;
+			resolve({
+				url: `ws://${host}:${port}${path}`,
+				port,
+				close: () => new Promise((res) => {
+					for (const closeLeg of liveCloses) closeLeg();
+					liveCloses.clear();
+					wss.close(() => httpServer.close(() => res()));
+				})
+			});
+		});
+	});
+}
+
+//#endregion
+//#region src/cli/commands/local-start-agentcore.ts
+/**
+* Parser for `--port <n>`. Accepts 0 (OS-assigned) through 65535.
+*/
+function parsePort(raw) {
+	const n = Number(raw);
+	if (!Number.isInteger(n) || n < 0 || n > 65535) throw new CdkLocalError(`--port must be an integer 0-65535, got '${raw}'.`, "INVALID_PORT");
+	return n;
+}
+/**
+* Reject MCP / A2A runtimes: the `/ws` WebSocket endpoint this command serves
+* exists only on the HTTP / AGUI protocols. MCP (`POST /mcp`) and A2A
+* (`POST /`) are single-shot request/response contracts with no bidirectional
+* socket. Exported so a unit test can drive the gate without the Docker
+* pipeline.
+*/
+function assertAgentCoreWsServable(resolved) {
+	if (resolved.protocol === "MCP" || resolved.protocol === "A2A") throw new CdkLocalError(`${getEmbedConfig().cliName} start-agentcore serves the HTTP / AGUI /ws WebSocket endpoint, but '${resolved.logicalId}' is a ${resolved.protocol} runtime, which has no /ws. Use \`${getEmbedConfig().cliName} invoke-agentcore\` for ${resolved.protocol} runtimes.`, "LOCAL_START_AGENTCORE_PROTOCOL_UNSUPPORTED");
+}
+/**
+* `cdkl start-agentcore <target>` — boot a Bedrock AgentCore Runtime container
+* locally and serve its bidirectional `/ws` WebSocket endpoint behind a
+* long-running host bridge, so a browser (or any WebSocket client) can hold an
+* interactive multi-frame session against it.
+*
+* Why a bridge rather than the published container port directly: the
+* AgentCore `/ws` upgrade requires the session-id (and, under a
+* `customJwtAuthorizer`, `Authorization`) header, which a browser `WebSocket`
+* cannot set. The bridge accepts a header-less client and injects those
+* headers on the container leg. HTTP / AGUI protocols only — MCP / A2A
+* runtimes have no `/ws`.
+*
+* The container is booted once via the SAME image / env / auth resolution as
+* `cdkl invoke-agentcore`; the process then blocks until SIGINT / SIGTERM,
+* tearing down the bridge and the container.
+*/
+async function localStartAgentCoreCommand(target, options, extraStateProviders) {
+	const logger = getLogger();
+	if (options.verbose) logger.setLevel("debug");
+	let containerId;
+	let stopLogs;
+	let bridge;
+	let profileCredsFile;
+	let stateProvider;
+	let shuttingDown = false;
+	let tornDown = false;
+	const teardown = async () => {
+		if (tornDown) return;
+		tornDown = true;
+		if (bridge) try {
+			await bridge.close();
+		} catch (err) {
+			logger.debug(`bridge close failed: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		if (stopLogs) try {
+			stopLogs();
+		} catch (err) {
+			logger.debug(`streamLogs stop failed: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		if (containerId) try {
+			await removeContainer(containerId);
+		} catch (err) {
+			logger.debug(`removeContainer(${containerId}) failed: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		if (stateProvider) try {
+			stateProvider.dispose();
+		} catch {}
+		if (profileCredsFile) try {
+			await profileCredsFile.dispose();
+		} catch {}
+	};
+	await applyRoleArnIfSet({
+		roleArn: options.roleArn,
+		region: options.region,
+		profile: options.profile
+	});
+	await ensureDockerAvailable();
+	const profileCredentials = options.profile ? await resolveProfileCredentials(options.profile) : void 0;
+	if (options.profile && profileCredentials) profileCredsFile = await writeProfileCredentialsFile(options.profile, profileCredentials);
+	const appCmd = resolveApp(options.app);
+	if (!appCmd) throw new Error(`No CDK app specified. Pass --app, set ${getEmbedConfig().envPrefix}_APP, or add "app" to cdk.json.`);
+	logger.info("Synthesizing CDK app...");
+	const synthesizer = new Synthesizer();
+	const context = parseContextOptions(options.context);
+	const synthOpts = {
+		app: appCmd,
+		output: options.output,
+		...options.region && { region: options.region },
+		...options.profile && { profile: options.profile },
+		...Object.keys(context).length > 0 && { context }
+	};
+	const { stacks } = await synthesizer.synthesize(synthOpts);
+	const resolvedTarget = await resolveSingleTarget(target, {
+		entries: listTargets(stacks).agentCoreRuntimes,
+		message: "Select an AgentCore Runtime to serve",
+		noun: "AgentCore Runtimes",
+		onMissing: () => new CdkLocalError(`${getEmbedConfig().cliName} start-agentcore requires a <target> (an AgentCore Runtime display path or logical ID). Run \`${getEmbedConfig().cliName} list\` to see them, or run it in a TTY to pick interactively.`, "LOCAL_START_AGENTCORE_TARGET_REQUIRED")
+	});
+	const candidate = pickAgentCoreCandidateStack(resolvedTarget, stacks);
+	stateProvider = createLocalStateProvider(options, candidate?.stackName ?? "", await resolveCfnFallbackRegion(options, candidate?.region), extraStateProviders);
+	const { context: imageContext, loaded: loadedState } = stateProvider && candidate ? await buildAgentCoreImageContext(candidate, stateProvider, options) : {
+		context: void 0,
+		loaded: void 0
+	};
+	const resolved = resolveAgentCoreTarget(resolvedTarget, stacks, imageContext);
+	logger.info(`Target: ${resolved.stack.stackName}/${resolved.logicalId} (${resolved.protocol})`);
+	assertAgentCoreWsServable(resolved);
+	const authorization = await resolveInboundAuthorization(resolved, options);
+	await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext);
+	const image = await resolveAgentCoreImage(resolved, options, loadedState, stateProvider);
+	const { env: dockerEnv, sensitiveEnvKeys } = await buildContainerEnv(resolved, options, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext);
+	const containerHostPort = await pickFreePort();
+	const containerHost = options.containerHost;
+	const containerName = `${getEmbedConfig().resourceNamePrefix}-agentcore-${process.pid}-${Math.random().toString(36).slice(2, 8)}`;
+	logger.info(`Starting agent container (image=${image}, port=${containerHostPort} -> 8080)...`);
+	containerId = await runDetached({
+		image,
+		mounts: [],
+		env: dockerEnv,
+		cmd: [],
+		hostPort: containerHostPort,
+		host: containerHost,
+		platform: options.platform,
+		name: containerName,
+		...sensitiveEnvKeys.size > 0 && { sensitiveEnvKeys }
+	});
+	stopLogs = streamLogs(containerId);
+	const shutdown = async (signal, exitCode) => {
+		if (shuttingDown) return;
+		shuttingDown = true;
+		logger.info(`Received ${signal}, shutting down...`);
+		await teardown();
+		process.exit(exitCode);
+	};
+	process.on("SIGINT", () => void shutdown("SIGINT", 130));
+	process.on("SIGTERM", () => void shutdown("SIGTERM", 0));
+	try {
+		await waitForAgentCorePing(containerHost, containerHostPort, options.timeout);
+		bridge = await startAgentCoreWsBridge({
+			containerHost,
+			containerPort: containerHostPort,
+			host: options.host,
+			port: options.port,
+			...authorization && { authorization },
+			...options.sessionId && { sessionId: options.sessionId }
+		});
+	} catch (err) {
+		await teardown();
+		throw err;
+	}
+	logger.info(`Server listening on ${bridge.url}  (${resolved.logicalId} (AgentCore WebSocket))`);
+	logger.info("Press ^C to shut down.");
+	await new Promise(() => void 0);
+}
+/**
+* `cdkl start-agentcore <target>` — long-running serve for a Bedrock AgentCore
+* Runtime's `/ws` WebSocket endpoint, fronted by a host bridge that injects the
+* session-id / Authorization upgrade headers a browser `WebSocket` cannot set.
+* The serve counterpart of the single-shot `cdkl invoke-agentcore`; the studio
+* `agentcore-ws` serve kind spawns this command.
+*/
+function createLocalStartAgentCoreCommand(opts = {}) {
+	setEmbedConfig(opts.embedConfig);
+	const cmd = new Command("start-agentcore").description("Serve a Bedrock AgentCore Runtime's bidirectional /ws WebSocket endpoint locally for an interactive multi-frame session. Boots the AWS::BedrockAgentCore::Runtime container (same image / env / credential resolution as invoke-agentcore), then runs a host WebSocket bridge that injects the AgentCore session-id (and Authorization under a customJwtAuthorizer) on the container upgrade so a header-less client (e.g. a browser) can connect. HTTP / AGUI protocols only (MCP / A2A runtimes have no /ws). Target accepts a CDK display path (MyStack/MyAgent) or stack-qualified logical ID; single-stack apps may omit the prefix. Omit <target> in a TTY to pick from a list. Runs until ^C.").argument("[target]", "CDK display path or stack-qualified logical ID of the AgentCore Runtime to serve (omit to pick interactively in a TTY)").action(withErrorHandling(async (target, options) => {
+		await localStartAgentCoreCommand(target, options, opts.extraStateProviders);
+	}));
+	addStartAgentCoreSpecificOptions(cmd);
+	[
+		...commonOptions(),
+		...appOptions(),
+		...contextOptions
+	].forEach((opt) => cmd.addOption(opt));
+	cmd.addOption(regionOption);
+	return cmd;
+}
+/**
+* Register the option block `cdkl start-agentcore` adds on top of the shared
+* common / app / context helpers. Shared with any host CLI (e.g. cdkd's
+* `local start-agentcore`) wrapping this factory, so adding or renaming a
+* `start-agentcore`-only flag here propagates without duplicate
+* `.addOption(...)` blocks. Chainable: returns `cmd`.
+*/
+function addStartAgentCoreSpecificOptions(cmd) {
+	return cmd.addOption(new Option("--port <n>", "Bridge-server bind port the client (browser) connects to. Default 0 (OS-assigned).").default(0).argParser(parsePort)).addOption(new Option("--host <ip>", "Bridge-server bind host. Default 127.0.0.1.").default("127.0.0.1")).addOption(new Option("--session-id <id>", "Pin one AgentCore runtime session id header value for every connection (default: a fresh random UUID per connection, so each client is its own session).")).addOption(new Option("--bearer-token <jwt>", "Bearer JWT to present when the runtime declares a customJwtAuthorizer. Verified against the runtime's OIDC discovery URL before the container starts, then injected as Authorization: Bearer <jwt> on the container /ws upgrade for every bridged connection.")).addOption(new Option("--no-verify-auth", "Skip inbound JWT verification even when the runtime declares a customJwtAuthorizer (local-dev escape hatch). A --bearer-token, if given, is still forwarded.")).addOption(new Option("--env-vars <file>", "JSON env-var overrides (SAM-compatible: {\"LogicalId\":{\"KEY\":\"VALUE\"}, \"Parameters\": {...}})")).addOption(new Option("--platform <platform>", "docker --platform for the agent container (linux/amd64 or linux/arm64). Defaults to linux/arm64 because the cloud AgentCore Runtime requires arm64.").choices(["linux/amd64", "linux/arm64"]).default("linux/arm64")).addOption(new Option("--no-pull", "Skip docker pull (use cached image) — no-op for the local-build path")).addOption(new Option("--no-build", "Skip docker build on the local-asset path (use the previously-built tag). No-op for the ECR / registry pull paths.")).addOption(new Option("--container-host <host>", "Host IP used to bind the agent container port. Must be a numeric IP. Defaults to 127.0.0.1.").default("127.0.0.1")).addOption(new Option("--timeout <ms>", "Maximum time in milliseconds to wait for the container to become ready (the GET /ping readiness deadline). Default 120000.").default(12e4).argParser(parseTimeoutMs)).addOption(new Option("--assume-role [arn]", "Assume the runtime's execution role and forward STS-issued temp credentials to the container. (1) `--assume-role <arn>` assumes the explicit ARN; (2) `--assume-role` (bare) uses the runtime's literal RoleArn; (3) `--no-assume-role` opts out. Off by default.")).addOption(new Option("--ecr-role-arn <arn>", "Role ARN to assume before authenticating against ECR for cross-account / centralized registries.")).addOption(new Option("--from-cfn-stack [cfn-stack-name]", "Read a deployed CloudFormation stack and substitute Ref / Fn::ImportValue in env vars / image URIs with the deployed physical IDs / exports. Bare form uses the resolved stack name.")).addOption(new Option("--stack-region <region>", "Region of the state record to read. Used with --from-cfn-stack as the CFn client region."));
+}
+
 //#endregion
 //#region src/cli/commands/local-list.ts
 async function localListCommand(options) {
@@ -35778,5 +36130,5 @@ function addStudioSpecificOptions(cmd) {
 }
 
 //#endregion
-export { isCloudFrontDistribution as $, attachAuthorizers as $n, parseSelectionExpressionPath as $r, createLocalInvokeAgentCoreCommand as $t, parseOriginOverrides as A, buildStageMap as An, EcsTaskResolutionError as Ar, parseMaxTasks as At, startCloudFrontServer as B, resolveServiceIntegrationParameters as Bn, resolveCfnRegion as Br, resolveImageOverrides as Bt, addListSpecificOptions as C, addStartApiSpecificOptions as Cn, buildDisconnectEvent as Cr, createLocalRunTaskCommand as Ct, addStartCloudFrontSpecificOptions as D, createAuthorizerCache as Dn, resolveRuntimeCodeMountPath as Dr, addImageOverrideOptions as Dt, LocalStartCloudFrontError as E, resolveApiTargetSubset as En, buildContainerImage as Er, addEcsAssumeRoleOptions as Et, resolveDeployedKvsArnByName as F, filterRoutesByApiIdentifiers as Fn, LocalStateSourceError as Fr, ImageOverrideError as Ft, applyEdgeResponseResult as G, verifyCognitoJwt as Gn, resolveWatchConfig as Gr, buildCloudMapIndex as Gt, serveFromStaticOrigin as H, buildCognitoJwksUrl as Hn, CfnLocalStateProvider as Hr, describePinnedImageUri as Ht, resolveDeployedOriginBucket as I, groupRoutesByServer as In, createLocalStateProvider as Ir, buildImageOverrideTag as It, edgeHeadersToHttp as J, buildMethodArn as Jn, listTargets as Jr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Jt, buildEdgeRequestEvent as K, verifyJwtAuthorizer as Kn, resolveSingleTarget as Kr, CloudMapRegistry as Kt, classifyS3Error as L, readMtlsMaterialsFromDisk as Ln, isCfnFlagPresent as Lr, enforceImageOverrideOrphans as Lt, idFromArn as M, resolveEnvVars$1 as Mn, substituteAgainstStateAsync as Mr, resolveEcsAssumeRoleOption as Mt, resolveKvsModulesForDistribution as N, availableApiIdentifiers as Nn, substituteEnvVarsFromState as Nr, resolveSharedSidecarCredentials as Nt, createLocalStartCloudFrontCommand as O, createFileWatcher as On, resolveRuntimeFileExtension as Or, buildEcsImageResolutionContext$1 as Ot, createDeployedKvsDataSource as P, filterRoutesByApiIdentifier as Pn, substituteEnvVarsFromStateAsync as Pr, runEcsServiceEmulator as Pt, extractKvsAssociations as Q, invokeTokenAuthorizer as Qn, filterWebSocketApisByIdentifiers as Qr, addInvokeAgentCoreSpecificOptions as Qt, createS3OriginReader as R, startApiServer as Rn, rejectExplicitCfnStackWithMultipleStacks as Rr, mergeForService as Rt, StudioEventBus as S, createLocalInvokeCommand as Sn, buildConnectEvent as Sr, addRunTaskSpecificOptions as St, formatTargetListing as T, createWatchPredicates as Tn, architectureToPlatform as Tr, addCommonEcsServiceOptions as Tt, serveLambdaUrlOrigin as U, buildJwksUrlFromIssuer as Un, collectSsmParameterRefs as Ur, isLocalCdkAssetImage as Ut, resolveErrorResponseCandidates as V, defaultCredentialsLoader as Vn, resolveCfnStackName as Vr, runImageOverrideBuilds as Vt, applyEdgeRequestResult as W, createJwksCache as Wn, resolveSsmParameters as Wr, listPinnedTargets as Wt, CLOUDFRONT_DISTRIBUTION_TYPE as X, evaluateCachedLambdaPolicy as Xn, discoverWebSocketApis as Xr, getContainerNetworkIp as Xt, httpHeadersToEdge as Y, computeRequestIdentityHash as Yn, availableWebSocketApiIdentifiers as Yr, setShadowReadyTimeoutMs as Yt, describeS3OriginDomain as Z, invokeRequestAuthorizer as Zn, discoverWebSocketApisOrThrow as Zr, attachContainerLogStreamer as Zt, filterStudioTargetGroups as _, buildStsClientConfig as _i, computeCodeImageTag as _n, bufferToBody as _r, isApplicationLoadBalancer as _t, createLocalStudioCommand as a, AGENTCORE_AGUI_PROTOCOL as ai, MCP_PATH as an, matchRoute as ar, compileCloudFrontFunction as at, renderStudioHtml as b, classifySourceChange as bn, handleConnectionsRequest as br, createLocalStartServiceCommand as bt, startStudioProxy as c, AGENTCORE_RUNTIME_TYPE as ci, parseSseForJsonRpc as cn, buildHttpApiV2Event as cr, stripCloudFrontImport as ct, createStudioDispatcher as d, resolveAgentCoreTarget as di, AGENTCORE_SESSION_ID_HEADER as dn, pickResponseTemplate as dr, createUnboundCloudFrontModule as dt, webSocketApiMatchesIdentifier as ei, invokeAgentCoreWs as en, applyCorsResponseHeaders as er, pickFunctionUrlLogicalIdFromOrigin as et, filterStudioCustomResources as f, derivePseudoParametersFromRegion as fi, invokeAgentCore as fn, selectIntegrationResponse as fr, addAlbSpecificOptions as ft, annotatePinnedEcsTargets as g, LocalInvokeBuildError as gi, buildAgentCoreCodeImage as gn, probeHostGatewaySupport as gr, resolveAlbTarget as gt, annotateEcsTaskPinnedTargets as h, tryResolveImageFnJoin as hi, SUPPORTED_CODE_RUNTIMES as hn, HOST_GATEWAY_MIN_VERSION as hr, parseLbPortOverrides as ht, coerceStopRequest as i, AGENTCORE_A2A_PROTOCOL as ii, MCP_CONTAINER_PORT as in, matchPreflight as ir, resolveCloudFrontDistribution as it, resolveCloudFrontTarget as j, materializeLayerFromArn as jn, substituteAgainstState as jr, parseRestartPolicy as jt, parseKvsFileOverrides as k, attachStageContext as kn, resolveRuntimeImage as kr, ecsClusterOption as kt, relayServeRequest as l, AgentCoreResolutionError as li, AGENTCORE_SIGV4_SERVICE as ln, buildRestV1Event as lr, createCloudFrontModule as lt, annotateAlbPinnedBackingServices as m, substituteImagePlaceholders as mi, downloadAndExtractS3Bundle as mn, VtlEvaluationError as mr, createLocalStartAlbCommand as mt, coerceRunRequest as n, pickRefLogicalId as ni, A2A_PATH as nn, buildCorsConfigFromCloudFrontChain as nr, pickLambdaEdgeFunctionLogicalId as nt, resolveServeBaseUrl as o, AGENTCORE_HTTP_PROTOCOL as oi, MCP_PROTOCOL_VERSION as on, translateLambdaResponse as or, runViewerRequest as ot, isCustomResourceLambdaTarget as p, formatStateRemedy as pi, waitForAgentCorePing as pn, tryParseStatus as pr, albStrategy as pt, buildEdgeResponseEvent as q, verifyJwtViaDiscovery as qn, countTargets as qr, DEFAULT_SHADOW_READY_TIMEOUT_MS as qt, coerceServeRequest as r, resolveLambdaArnIntrinsic as ri, a2aInvokeOnce as rn, isFunctionUrlOacFronted as rr, pickTargetFunctionLogicalId as rt, createStudioServeManager as s, AGENTCORE_MCP_PROTOCOL as si, mcpInvokeOnce as sn, applyAuthorizerOverlay as sr, runViewerResponse as st, addStudioSpecificOptions as t, discoverRoutes as ti, A2A_CONTAINER_PORT as tn, buildCorsConfigByApiId as tr, pickKvsLogicalIdFromArn as tt, reinvoke as u, pickAgentCoreCandidateStack as ui, signAgentCoreInvocation as un, evaluateResponseParameters as ur, createLocalFileKvsDataSource as ut, startStudioServer as v, resolveProfileCredentials as vi, renderCodeDockerfile as vn, ConnectionRegistry as vr, resolveAlbFrontDoor as vt, createLocalListCommand as w, createLocalStartApiCommand as wn, buildMessageEvent as wr, MAX_TASKS_SUBNET_RANGE_CAP as wt, createStudioStore as x, addInvokeSpecificOptions as xn, parseConnectionsPath as xr, serviceStrategy as xt, toStudioTargetGroups as y, toCmdArgv as yn, buildMgmtEndpointEnvUrl as yr, addStartServiceSpecificOptions as yt, matchBehavior as z, resolveSelectionExpression as zn, resolveCfnFallbackRegion as zr, parseImageOverrideFlags as zt };
-//# sourceMappingURL=local-studio-rgRqFe-U.js.map
+export { CLOUDFRONT_DISTRIBUTION_TYPE as $, computeRequestIdentityHash as $n, availableWebSocketApiIdentifiers as $r, getContainerNetworkIp as $t, addStartCloudFrontSpecificOptions as A, resolveApiTargetSubset as An, buildContainerImage as Ar, addImageOverrideOptions as At, classifyS3Error as B, groupRoutesByServer as Bn, createLocalStateProvider as Br, enforceImageOverrideOrphans as Bt, addListSpecificOptions as C, toCmdArgv as Cn, buildMgmtEndpointEnvUrl as Cr, createLocalStartServiceCommand as Ct, createLocalStartAgentCoreCommand as D, addStartApiSpecificOptions as Dn, buildDisconnectEvent as Dr, MAX_TASKS_SUBNET_RANGE_CAP as Dt, addStartAgentCoreSpecificOptions as E, createLocalInvokeCommand as En, buildConnectEvent as Er, createLocalRunTaskCommand as Et, idFromArn as F, materializeLayerFromArn as Fn, substituteAgainstState as Fr, resolveEcsAssumeRoleOption as Ft, serveFromStaticOrigin as G, defaultCredentialsLoader as Gn, resolveCfnStackName as Gr, describePinnedImageUri as Gt, matchBehavior as H, startApiServer as Hn, rejectExplicitCfnStackWithMultipleStacks as Hr, parseImageOverrideFlags as Ht, resolveKvsModulesForDistribution as I, resolveEnvVars$1 as In, substituteAgainstStateAsync as Ir, resolveSharedSidecarCredentials as It, applyEdgeResponseResult as J, createJwksCache as Jn, resolveSsmParameters as Jr, buildCloudMapIndex as Jt, serveLambdaUrlOrigin as K, buildCognitoJwksUrl as Kn, CfnLocalStateProvider as Kr, isLocalCdkAssetImage as Kt, createDeployedKvsDataSource as L, availableApiIdentifiers as Ln, substituteEnvVarsFromState as Lr, runEcsServiceEmulator as Lt, parseKvsFileOverrides as M, createFileWatcher as Mn, resolveRuntimeFileExtension as Mr, ecsClusterOption as Mt, parseOriginOverrides as N, attachStageContext as Nn, resolveRuntimeImage as Nr, parseMaxTasks as Nt, startAgentCoreWsBridge as O, createLocalStartApiCommand as On, buildMessageEvent as Or, addCommonEcsServiceOptions as Ot, resolveCloudFrontTarget as P, buildStageMap as Pn, EcsTaskResolutionError as Pr, parseRestartPolicy as Pt, httpHeadersToEdge as Q, buildMethodArn as Qn, listTargets as Qr, setShadowReadyTimeoutMs as Qt, resolveDeployedKvsArnByName as R, filterRoutesByApiIdentifier as Rn, substituteEnvVarsFromStateAsync as Rr, ImageOverrideError as Rt, StudioEventBus as S, resolveProfileCredentials as Si, renderCodeDockerfile as Sn, ConnectionRegistry as Sr, addStartServiceSpecificOptions as St, formatTargetListing as T, addInvokeSpecificOptions as Tn, parseConnectionsPath as Tr, addRunTaskSpecificOptions as Tt, startCloudFrontServer as U, resolveSelectionExpression as Un, resolveCfnFallbackRegion as Ur, resolveImageOverrides as Ut, createS3OriginReader as V, readMtlsMaterialsFromDisk as Vn, isCfnFlagPresent as Vr, mergeForService as Vt, resolveErrorResponseCandidates as W, resolveServiceIntegrationParameters as Wn, resolveCfnRegion as Wr, runImageOverrideBuilds as Wt, buildEdgeResponseEvent as X, verifyJwtAuthorizer as Xn, resolveSingleTarget as Xr, DEFAULT_SHADOW_READY_TIMEOUT_MS as Xt, buildEdgeRequestEvent as Y, verifyCognitoJwt as Yn, resolveWatchConfig as Yr, CloudMapRegistry as Yt, edgeHeadersToHttp as Z, verifyJwtViaDiscovery as Zn, countTargets as Zr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Zt, filterStudioTargetGroups as _, formatStateRemedy as _i, waitForAgentCorePing as _n, tryParseStatus as _r, createLocalStartAlbCommand as _t, createLocalStudioCommand as a, discoverRoutes as ai, A2A_CONTAINER_PORT as an, buildCorsConfigByApiId as ar, pickLambdaEdgeFunctionLogicalId as at, renderStudioHtml as b, LocalInvokeBuildError as bi, buildAgentCoreCodeImage as bn, probeHostGatewaySupport as br, isApplicationLoadBalancer as bt, startStudioProxy as c, AGENTCORE_A2A_PROTOCOL as ci, MCP_CONTAINER_PORT as cn, matchPreflight as cr, compileCloudFrontFunction as ct, createStudioDispatcher as d, AGENTCORE_MCP_PROTOCOL as di, mcpInvokeOnce as dn, applyAuthorizerOverlay as dr, stripCloudFrontImport as dt, discoverWebSocketApis as ei, attachContainerLogStreamer as en, evaluateCachedLambdaPolicy as er, describeS3OriginDomain as et, filterStudioCustomResources as f, AGENTCORE_RUNTIME_TYPE as fi, parseSseForJsonRpc as fn, buildHttpApiV2Event as fr, createCloudFrontModule as ft, annotatePinnedEcsTargets as g, derivePseudoParametersFromRegion as gi, invokeAgentCore as gn, selectIntegrationResponse as gr, albStrategy as gt, annotateEcsTaskPinnedTargets as h, resolveAgentCoreTarget as hi, AGENTCORE_SESSION_ID_HEADER as hn, pickResponseTemplate as hr, addAlbSpecificOptions as ht, coerceStopRequest as i, webSocketApiMatchesIdentifier as ii, invokeAgentCoreWs as in, applyCorsResponseHeaders as ir, pickKvsLogicalIdFromArn as it, createLocalStartCloudFrontCommand as j, createAuthorizerCache as jn, resolveRuntimeCodeMountPath as jr, buildEcsImageResolutionContext$1 as jt, LocalStartCloudFrontError as k, createWatchPredicates as kn, architectureToPlatform as kr, addEcsAssumeRoleOptions as kt, relayServeRequest as l, AGENTCORE_AGUI_PROTOCOL as li, MCP_PATH as ln, matchRoute as lr, runViewerRequest as lt, annotateAlbPinnedBackingServices as m, pickAgentCoreCandidateStack as mi, signAgentCoreInvocation as mn, evaluateResponseParameters as mr, createUnboundCloudFrontModule as mt, coerceRunRequest as n, filterWebSocketApisByIdentifiers as ni, createLocalInvokeAgentCoreCommand as nn, invokeTokenAuthorizer as nr, isCloudFrontDistribution as nt, resolveServeBaseUrl as o, pickRefLogicalId as oi, A2A_PATH as on, buildCorsConfigFromCloudFrontChain as or, pickTargetFunctionLogicalId as ot, isCustomResourceLambdaTarget as p, AgentCoreResolutionError as pi, AGENTCORE_SIGV4_SERVICE as pn, buildRestV1Event as pr, createLocalFileKvsDataSource as pt, applyEdgeRequestResult as q, buildJwksUrlFromIssuer as qn, collectSsmParameterRefs as qr, listPinnedTargets as qt, coerceServeRequest as r, parseSelectionExpressionPath as ri, bridgeAgentCoreWs as rn, attachAuthorizers as rr, pickFunctionUrlLogicalIdFromOrigin as rt, createStudioServeManager as s, resolveLambdaArnIntrinsic as si, a2aInvokeOnce as sn, isFunctionUrlOacFronted as sr, resolveCloudFrontDistribution as st, addStudioSpecificOptions as t, discoverWebSocketApisOrThrow as ti, addInvokeAgentCoreSpecificOptions as tn, invokeRequestAuthorizer as tr, extractKvsAssociations as tt, reinvoke as u, AGENTCORE_HTTP_PROTOCOL as ui, MCP_PROTOCOL_VERSION as un, translateLambdaResponse as ur, runViewerResponse as ut, startStudioServer as v, substituteImagePlaceholders as vi, downloadAndExtractS3Bundle as vn, VtlEvaluationError as vr, parseLbPortOverrides as vt, createLocalListCommand as w, classifySourceChange as wn, handleConnectionsRequest as wr, serviceStrategy as wt, createStudioStore as x, buildStsClientConfig as xi, computeCodeImageTag as xn, bufferToBody as xr, resolveAlbFrontDoor as xt, toStudioTargetGroups as y, tryResolveImageFnJoin as yi, SUPPORTED_CODE_RUNTIMES as yn, HOST_GATEWAY_MIN_VERSION as yr, resolveAlbTarget as yt, resolveDeployedOriginBucket as z, filterRoutesByApiIdentifiers as zn, LocalStateSourceError as zr, buildImageOverrideTag as zt };
+//# sourceMappingURL=local-studio-BGi3yHZI.js.map