cdk-local 0.134.0 → 0.135.0

package/dist/{local-studio-BfroIGQL.js → local-studio-CdpdUbIA.js}

@@ -27,7 +27,7 @@ import { Readable } from "node:stream";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { createServer as createServer$1, request } from "node:http";
 import { createServer as createServer$2 } from "node:https";
-import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { mkdir, mkdtemp, readFile as readFile$1, readdir, rm, writeFile } from "node:fs/promises";
 import { pipeline } from "node:stream/promises";
 import * as chokidar from "chokidar";
 import { Sha256 } from "@aws-crypto/sha256-js";
@@ -18213,10 +18213,18 @@ function classifySourceChange(changedPaths, ctx) {
 * artifact is just source + an `EntryPoint` + a `Runtime`; AWS's managed
 * runtime runs the entrypoint, which self-serves the AgentCore HTTP contract
 * (`POST /invocations` + `GET /ping` on 8080) — typically via the
-* `bedrock-agentcore` SDK. We replicate that locally: generate a Dockerfile
-* for the runtime's base image, install the bundle's dependencies, and run the
-* entrypoint. The resulting container speaks the same 8080 contract, so the
-* existing HTTP client drives it unchanged.
+* `bedrock-agentcore` SDK. Crucially, the managed runtime does NOT install
+* dependencies at runtime: deps are vendored INTO the bundle at deploy time
+* (e.g. `uv pip install --target`), and the runtime resolves them from the
+* bundle's dependency search path. We replicate that locally faithfully:
+* generate a Dockerfile for the runtime's base image that copies the bundle
+* and runs the entrypoint AS-IS (no install). So a bundle that forgot to
+* vendor its deps fails locally the same way it fails deployed
+* (`ModuleNotFoundError`) instead of passing locally only because we installed
+* them — `buildAgentCoreCodeImage` warns up-front with the vendoring recipe
+* when a dependency manifest is present without vendored deps. The resulting
+* container speaks the same 8080 contract, so the existing HTTP client drives
+* it unchanged.
 */
 /** AgentCore CodeConfiguration `Runtime` enum → local Docker base image. */
 const RUNTIME_BASE_IMAGES = {
@@ -18239,6 +18247,7 @@ async function buildAgentCoreCodeImage(options) {
 	const base = RUNTIME_BASE_IMAGES[options.runtime];
 	if (!base) throw new LocalInvokeBuildError(`AgentCore CodeConfiguration runtime '${options.runtime}' is not supported for local execution. Supported runtimes: ${SUPPORTED_CODE_RUNTIMES.join(", ")}.`);
 	const isNode = options.runtime.startsWith("NODE");
+	await warnIfDependenciesNotVendored(options.sourceDir, options.runtime, isNode, logger);
 	const dockerfile = renderCodeDockerfile(base, options.entryPoint, isNode);
 	const tag = computeCodeImageTag(options.sourceDir, options.runtime, options.entryPoint, dockerfile);
 	const platform = options.architecture === "x86_64" ? "linux/amd64" : "linux/arm64";
@@ -18275,23 +18284,53 @@ async function buildAgentCoreCodeImage(options) {
 	return tag;
 }
 /**
-* Render the generated Dockerfile. Dependencies are installed conditionally
-* (a bundle may vendor them or ship none), and the EntryPoint is mapped to a
-* CMD: a bare script (`app.py` / `server.js`) is run by the interpreter, while
-* an explicit launcher (e.g. `opentelemetry-instrument`) is run verbatim.
+* Render the generated Dockerfile. Dependencies are NOT installed: the
+* AgentCore managed runtime resolves deps from the bundle (vendored at deploy
+* time), so we copy the bundle and run the EntryPoint as-is to match deployed
+* behavior. The EntryPoint is mapped to a CMD: a bare script (`app.py` /
+* `server.js`) is run by the interpreter, while an explicit launcher (e.g.
+* `opentelemetry-instrument`) is run verbatim.
 */
 function renderCodeDockerfile(base, entryPoint, isNode) {
-	const installStep = isNode ? "RUN if [ -f package.json ]; then npm install --omit=dev; fi" : "RUN if [ -f requirements.txt ]; then pip install --no-cache-dir -r requirements.txt; elif [ -f pyproject.toml ]; then pip install --no-cache-dir .; fi";
 	return [
 		`FROM ${base}`,
 		"WORKDIR /app",
 		"COPY . /app",
-		installStep,
 		"EXPOSE 8080",
 		`CMD ${JSON.stringify(toCmdArgv(entryPoint, isNode))}`
 	].join("\n") + "\n";
 }
 /**
+* Warn when a code bundle declares a dependency manifest but does not appear to
+* vendor its dependencies. The AgentCore managed runtime does NOT install deps
+* at runtime, so an unvendored bundle that "works" only because something
+* installed deps for it would fail on deploy with `ModuleNotFoundError`. We run
+* the bundle as-is locally (matching deploy); this surfaces the likely cause
+* up-front with the vendoring recipe. Heuristic: a Python bundle is considered
+* vendored if it contains any `*.dist-info` dir (what `pip install --target`
+* leaves); a Node bundle if it has a `node_modules` dir.
+*/
+async function warnIfDependenciesNotVendored(sourceDir, runtime, isNode, logger) {
+	let entries;
+	try {
+		entries = await readdir(sourceDir);
+	} catch {
+		return;
+	}
+	const has = (name) => entries.includes(name);
+	if (isNode) {
+		if (has("package.json") && !has("node_modules")) logger.warn(`AgentCore code bundle '${sourceDir}' declares package.json but does not vendor node_modules. The AgentCore managed runtime does NOT install dependencies at runtime, so the deployed agent will fail to resolve them. Vendor dependencies into the bundle (e.g. 'npm install --omit=dev' in the bundle dir) so the deploy artifact is self-contained. cdk-local runs the bundle as-is to match the deployed runtime.`);
+		return;
+	}
+	const manifest = await pythonManifestDeclaringDeps(sourceDir, entries);
+	const vendored = entries.some((e) => e.endsWith(".dist-info"));
+	if (manifest && !vendored) {
+		const pyVersion = runtime.replace("PYTHON_", "").replace("_", ".");
+		logger.warn(`AgentCore code bundle '${sourceDir}' declares ${manifest} but does not vendor its dependencies. The AgentCore managed runtime does NOT install dependencies at runtime, so the deployed agent will fail with ModuleNotFoundError. Vendor arm64 wheels into the bundle, e.g.:
+  uv pip install --python-platform aarch64-manylinux2014 --python-version ${pyVersion} --target <bundle-dir> -r requirements.txt\ncdk-local runs the bundle as-is to match the deployed runtime.`);
+	}
+}
+/**
 * Map the EntryPoint argv to a Docker CMD argv. The managed runtime execs the
 * entrypoint as the program; a bare script file is run by the language
 * interpreter (`python` / `node`), while a non-script first token (a launcher
@@ -18302,6 +18341,24 @@ function toCmdArgv(entryPoint, isNode) {
 	if (!(isNode ? /\.[cm]?js$/.test(first) : /\.py$/.test(first))) return entryPoint;
 	return [isNode ? "node" : "python", ...entryPoint];
 }
+/**
+* Return the Python dependency manifest filename that declares at least one
+* real dependency, or undefined. A `requirements.txt` that is empty or only
+* comments/pip-options (the stdlib-only-agent case) declares nothing, so it
+* must not trigger the unvendored-deps warning.
+*/
+async function pythonManifestDeclaringDeps(sourceDir, entries) {
+	if (entries.includes("requirements.txt")) {
+		if ((await readFile$1(join(sourceDir, "requirements.txt"), "utf-8").catch(() => "")).split(/\r?\n/).some((line) => {
+			const t = line.trim();
+			return t.length > 0 && !t.startsWith("#") && !t.startsWith("-");
+		})) return "requirements.txt";
+	}
+	if (entries.includes("pyproject.toml")) {
+		const content = await readFile$1(join(sourceDir, "pyproject.toml"), "utf-8").catch(() => "");
+		if (/dependencies\s*=\s*\[\s*["']/.test(content) || content.includes("[tool.poetry.dependencies]")) return "pyproject.toml";
+	}
+}
 /** Deterministic local tag, stable for identical source + runtime + entrypoint. */
 function computeCodeImageTag(sourceDir, runtime, entryPoint, dockerfile) {
 	const hash = createHash("sha256").update([
@@ -18412,8 +18469,8 @@ function defaultFetchObject$1(options) {
 * plain HTTP. `cdkl invoke-agentcore` runs the container, waits for `/ping`,
 * then POSTs one event to `/invocations` (invoke-once).
 */
-const PING_PATH = "/ping";
-const INVOCATIONS_PATH = "/invocations";
+const PING_PATH$1 = "/ping";
+const INVOCATIONS_PATH$1 = "/invocations";
 /**
 * Header AgentCore Runtime uses to carry the session id to the container.
 * Real AgentCore always sends it; we generate one (or pass the user's
@@ -18450,7 +18507,7 @@ async function waitForAgentCorePing(host, port, timeoutMs = 3e4) {
 		await setTimeout$1(150);
 	}
 	const tail = lastDetail ? `: ${lastDetail}` : "";
-	throw new Error(`AgentCore agent did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve GET ${PING_PATH} — check 'docker logs' output.`);
+	throw new Error(`AgentCore agent did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve GET ${PING_PATH$1} — check 'docker logs' output.`);
 }
 /**
 * Issue `GET /ping`. Returns the HTTP status on any response, undefined on
@@ -18461,7 +18518,7 @@ async function pingProbe(host, port, timeoutMs) {
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), timeoutMs);
 	try {
-		const response = await fetch(`http://${host}:${port}${PING_PATH}`, {
+		const response = await fetch(`http://${host}:${port}${PING_PATH$1}`, {
 			method: "GET",
 			signal: controller.signal
 		});
@@ -18500,7 +18557,7 @@ function isTransientNetworkError$2(err) {
 * a missing sink) is buffered into `raw` and returned verbatim.
 */
 async function invokeAgentCore(host, port, event, options) {
-	const url = `http://${host}:${port}${INVOCATIONS_PATH}`;
+	const url = `http://${host}:${port}${INVOCATIONS_PATH$1}`;
 	const body = JSON.stringify(event ?? {});
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), options.timeoutMs);
@@ -30859,17 +30916,19 @@ function decodeBrowserFrame(data, isBinary) {
 	return (Buffer.isBuffer(data) ? data : Array.isArray(data) ? Buffer.concat(data) : Buffer.from(data)).toString("utf-8");
 }
 /**
-* Start the bridge server. Resolves once it is listening; the returned handle
-* carries the connectable `url` and a `close()` that tears down the server and
-* every live bridged connection.
+* Attach the AgentCore `/ws` bridge to an EXISTING `http.Server`: registers a
+* `WebSocketServer` on `config.path` and, for each inbound (header-less)
+* client, opens a container `/ws` leg with the session-id / Authorization
+* headers injected (via {@link bridgeAgentCoreWs}), piping frames both ways.
+*
+* Shared by {@link startAgentCoreWsBridge} (a standalone `/ws`-only bridge) and
+* the HTTP serve (`startAgentCoreHttpServer`, issue #454), which serves the
+* same warm container's `POST /invocations` + `GET /ping` on the SAME port and
+* delegates the `/ws` upgrade here. The caller owns `httpServer.listen()` and
+* the host port; this helper only owns the WebSocket layer.
 */
-function startAgentCoreWsBridge(config) {
-	const host = config.host ?? "127.0.0.1";
+function attachAgentCoreWsBridge(httpServer, config) {
 	const path = config.path ?? DEFAULT_PATH;
-	const httpServer = createServer$1((_req, res) => {
-		res.writeHead(426, { "Content-Type": "text/plain" });
-		res.end("Upgrade required: connect over WebSocket.\n");
-	});
 	const wss = new WebSocketServer({
 		server: httpServer,
 		path
@@ -30911,6 +30970,27 @@ function startAgentCoreWsBridge(config) {
 			handle.close();
 		});
 	});
+	return {
+		path,
+		close: () => new Promise((res) => {
+			for (const closeLeg of liveCloses) closeLeg();
+			liveCloses.clear();
+			wss.close(() => res());
+		})
+	};
+}
+/**
+* Start a standalone `/ws`-only bridge server. Resolves once it is listening;
+* the returned handle carries the connectable `url` and a `close()` that tears
+* down the server and every live bridged connection.
+*/
+function startAgentCoreWsBridge(config) {
+	const host = config.host ?? "127.0.0.1";
+	const httpServer = createServer$1((_req, res) => {
+		res.writeHead(426, { "Content-Type": "text/plain" });
+		res.end("Upgrade required: connect over WebSocket.\n");
+	});
+	const attached = attachAgentCoreWsBridge(httpServer, config);
 	return new Promise((resolve, reject) => {
 		httpServer.once("error", reject);
 		httpServer.listen(config.port ?? 0, host, () => {
@@ -30918,12 +30998,113 @@ function startAgentCoreWsBridge(config) {
 			httpServer.on("error", (err) => getLogger().debug(`agentcore-ws bridge server error: ${err.message}`));
 			const port = httpServer.address().port;
 			resolve({
-				url: `ws://${host}:${port}${path}`,
+				url: `ws://${host}:${port}${attached.path}`,
 				port,
 				close: () => new Promise((res) => {
-					for (const closeLeg of liveCloses) closeLeg();
-					liveCloses.clear();
-					wss.close(() => httpServer.close(() => res()));
+					attached.close().then(() => httpServer.close(() => res()));
+				})
+			});
+		});
+	});
+}
+
+//#endregion
+//#region src/local/agentcore-http-server.ts
+/**
+* Host HTTP serve in front of a warm AgentCore runtime container, the serving
+* primitive behind `cdkl start-agentcore` for HTTP / AGUI protocols (issue
+* #454). Unlike the single-shot `cdkl invoke-agentcore` — which boots a
+* container, POSTs ONE `/invocations`, and tears it down — this keeps the
+* container warm and serves its native HTTP contract until `^C`, so a client
+* can hit `POST /invocations` (and `GET /ping`) repeatedly against the SAME
+* warm container. That mirrors AgentCore's deployed model, where many
+* `InvokeAgentRuntime` calls on the same `runtimeSessionId` reuse one warm
+* microVM.
+*
+* One host `http.Server` serves all three:
+*  - `GET  /ping`         -> proxied to the container's `/ping`
+*  - `POST /invocations`  -> proxied to the container's `/invocations`
+*    (request body streamed up, response — JSON or SSE — streamed back)
+*  - `/ws` upgrade        -> the existing header-injecting bridge
+*    ({@link attachAgentCoreWsBridge}) on the same port, so a header-less
+*    browser `WebSocket` still works exactly as before.
+*
+* Auth parity: the boot-resolved `authorization` (the `--bearer-token`
+* validated once at boot under a `customJwtAuthorizer`, or the `--sigv4`
+* header set) is injected on every forwarded request — the same model the
+* `/ws` bridge uses. Per-request inbound JWT verification is out of scope for
+* this slice.
+*/
+const PING_PATH = "/ping";
+const INVOCATIONS_PATH = "/invocations";
+/**
+* Proxy one inbound HTTP request to the warm container, injecting the
+* session-id + Authorization (+ any extra) headers, and stream the response
+* back. Used for both `GET /ping` and `POST /invocations`; piping the response
+* preserves an SSE (`text/event-stream`) stream.
+*/
+function proxyToContainer(clientReq, clientRes, config, upstreamPath) {
+	const headers = { ...clientReq.headers };
+	delete headers["host"];
+	headers[AGENTCORE_SESSION_ID_HEADER] = config.sessionId ?? randomUUID();
+	if (config.authorization) headers["authorization"] = config.authorization;
+	const upstream = request({
+		host: config.containerHost,
+		port: config.containerPort,
+		path: upstreamPath,
+		method: clientReq.method,
+		headers
+	}, (upRes) => {
+		clientRes.writeHead(upRes.statusCode ?? 502, upRes.headers);
+		upRes.on("error", () => clientRes.destroy());
+		upRes.pipe(clientRes);
+	});
+	upstream.on("error", (err) => {
+		getLogger().debug(`agentcore http serve upstream error: ${err.message}`);
+		if (!clientRes.headersSent) clientRes.writeHead(502, { "content-type": "application/json" });
+		clientRes.end(JSON.stringify({ error: `upstream error: ${err.message}` }));
+	});
+	clientReq.on("error", (err) => {
+		getLogger().debug(`agentcore http serve client error: ${err.message}`);
+		upstream.destroy();
+	});
+	clientReq.pipe(upstream);
+}
+/**
+* Start the HTTP serve. Resolves once it is listening; the returned handle
+* carries the connectable `httpUrl` / `wsUrl` and a `close()` that tears down
+* the server + the `/ws` bridge + every live bridged connection.
+*/
+function startAgentCoreHttpServer(config) {
+	const host = config.host ?? "127.0.0.1";
+	const httpServer = createServer$1((req, res) => {
+		const path = (req.url ?? "/").split("?")[0];
+		if (req.method === "GET" && path === PING_PATH) return proxyToContainer(req, res, config, PING_PATH);
+		if (req.method === "POST" && path === INVOCATIONS_PATH) return proxyToContainer(req, res, config, INVOCATIONS_PATH);
+		res.writeHead(404, { "content-type": "application/json" });
+		res.end(JSON.stringify({
+			error: "not found",
+			hint: "POST /invocations or GET /ping (WebSocket: connect to /ws)"
+		}));
+	});
+	const bridge = attachAgentCoreWsBridge(httpServer, {
+		containerHost: config.containerHost,
+		containerPort: config.containerPort,
+		...config.sessionId && { sessionId: config.sessionId },
+		...config.authorization && { authorization: config.authorization }
+	});
+	return new Promise((resolve, reject) => {
+		httpServer.once("error", reject);
+		httpServer.listen(config.port ?? 0, host, () => {
+			httpServer.removeListener("error", reject);
+			httpServer.on("error", (err) => getLogger().debug(`agentcore http serve server error: ${err.message}`));
+			const port = httpServer.address().port;
+			resolve({
+				httpUrl: `http://${host}:${port}`,
+				wsUrl: `ws://${host}:${port}${bridge.path}`,
+				port,
+				close: () => new Promise((res) => {
+					bridge.close().then(() => httpServer.close(() => res()));
 				})
 			});
 		});
@@ -30972,7 +31153,7 @@ async function localStartAgentCoreCommand(target, options, extraStateProviders)
 	if (options.verbose) logger.setLevel("debug");
 	let containerId;
 	let stopLogs;
-	let bridge;
+	let server;
 	let profileCredsFile;
 	let stateProvider;
 	let shuttingDown = false;
@@ -30980,10 +31161,10 @@ async function localStartAgentCoreCommand(target, options, extraStateProviders)
 	const teardown = async () => {
 		if (tornDown) return;
 		tornDown = true;
-		if (bridge) try {
-			await bridge.close();
+		if (server) try {
+			await server.close();
 		} catch (err) {
-			logger.debug(`bridge close failed: ${err instanceof Error ? err.message : String(err)}`);
+			logger.debug(`server close failed: ${err instanceof Error ? err.message : String(err)}`);
 		}
 		if (stopLogs) try {
 			stopLogs();
@@ -31069,7 +31250,7 @@ async function localStartAgentCoreCommand(target, options, extraStateProviders)
 	process.on("SIGTERM", () => void shutdown("SIGTERM", 0));
 	try {
 		await waitForAgentCorePing(containerHost, containerHostPort, options.timeout);
-		bridge = await startAgentCoreWsBridge({
+		server = await startAgentCoreHttpServer({
 			containerHost,
 			containerPort: containerHostPort,
 			host: options.host,
@@ -31081,7 +31262,8 @@ async function localStartAgentCoreCommand(target, options, extraStateProviders)
 		await teardown();
 		throw err;
 	}
-	logger.info(`Server listening on ${bridge.url}  (${resolved.logicalId} (AgentCore WebSocket))`);
+	logger.info(`Server listening on ${server.wsUrl}  (${resolved.logicalId} (AgentCore WebSocket))`);
+	logger.info(`HTTP contract served on ${server.httpUrl} — POST ${server.httpUrl}/invocations, GET ${server.httpUrl}/ping`);
 	logger.info("Press ^C to shut down.");
 	await new Promise(() => void 0);
 }
@@ -36666,5 +36848,5 @@ function addStudioSpecificOptions(cmd) {
 }
 
 //#endregion
-export { CLOUDFRONT_DISTRIBUTION_TYPE as $, computeRequestIdentityHash as $n, availableWebSocketApiIdentifiers as $r, getContainerNetworkIp as $t, addStartCloudFrontSpecificOptions as A, resolveApiTargetSubset as An, buildContainerImage as Ar, addImageOverrideOptions as At, classifyS3Error as B, groupRoutesByServer as Bn, createLocalStateProvider as Br, enforceImageOverrideOrphans as Bt, addListSpecificOptions as C, toCmdArgv as Cn, buildMgmtEndpointEnvUrl as Cr, createLocalStartServiceCommand as Ct, createLocalStartAgentCoreCommand as D, addStartApiSpecificOptions as Dn, buildDisconnectEvent as Dr, MAX_TASKS_SUBNET_RANGE_CAP as Dt, addStartAgentCoreSpecificOptions as E, createLocalInvokeCommand as En, buildConnectEvent as Er, createLocalRunTaskCommand as Et, idFromArn as F, materializeLayerFromArn as Fn, substituteAgainstState as Fr, resolveEcsAssumeRoleOption as Ft, serveFromStaticOrigin as G, defaultCredentialsLoader as Gn, resolveCfnStackName as Gr, describePinnedImageUri as Gt, matchBehavior as H, startApiServer as Hn, rejectExplicitCfnStackWithMultipleStacks as Hr, parseImageOverrideFlags as Ht, resolveKvsModulesForDistribution as I, resolveEnvVars$1 as In, substituteAgainstStateAsync as Ir, resolveSharedSidecarCredentials as It, applyEdgeResponseResult as J, createJwksCache as Jn, resolveSsmParameters as Jr, buildCloudMapIndex as Jt, serveLambdaUrlOrigin as K, buildCognitoJwksUrl as Kn, CfnLocalStateProvider as Kr, isLocalCdkAssetImage as Kt, createDeployedKvsDataSource as L, availableApiIdentifiers as Ln, substituteEnvVarsFromState as Lr, runEcsServiceEmulator as Lt, parseKvsFileOverrides as M, createFileWatcher as Mn, resolveRuntimeFileExtension as Mr, ecsClusterOption as Mt, parseOriginOverrides as N, attachStageContext as Nn, resolveRuntimeImage as Nr, parseMaxTasks as Nt, startAgentCoreWsBridge as O, createLocalStartApiCommand as On, buildMessageEvent as Or, addCommonEcsServiceOptions as Ot, resolveCloudFrontTarget as P, buildStageMap as Pn, EcsTaskResolutionError as Pr, parseRestartPolicy as Pt, httpHeadersToEdge as Q, buildMethodArn as Qn, listTargets as Qr, setShadowReadyTimeoutMs as Qt, resolveDeployedKvsArnByName as R, filterRoutesByApiIdentifier as Rn, substituteEnvVarsFromStateAsync as Rr, ImageOverrideError as Rt, StudioEventBus as S, resolveProfileCredentials as Si, renderCodeDockerfile as Sn, ConnectionRegistry as Sr, addStartServiceSpecificOptions as St, formatTargetListing as T, addInvokeSpecificOptions as Tn, parseConnectionsPath as Tr, addRunTaskSpecificOptions as Tt, startCloudFrontServer as U, resolveSelectionExpression as Un, resolveCfnFallbackRegion as Ur, resolveImageOverrides as Ut, createS3OriginReader as V, readMtlsMaterialsFromDisk as Vn, isCfnFlagPresent as Vr, mergeForService as Vt, resolveErrorResponseCandidates as W, resolveServiceIntegrationParameters as Wn, resolveCfnRegion as Wr, runImageOverrideBuilds as Wt, buildEdgeResponseEvent as X, verifyJwtAuthorizer as Xn, resolveSingleTarget as Xr, DEFAULT_SHADOW_READY_TIMEOUT_MS as Xt, buildEdgeRequestEvent as Y, verifyCognitoJwt as Yn, resolveWatchConfig as Yr, CloudMapRegistry as Yt, edgeHeadersToHttp as Z, verifyJwtViaDiscovery as Zn, countTargets as Zr, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Zt, filterStudioTargetGroups as _, formatStateRemedy as _i, waitForAgentCorePing as _n, tryParseStatus as _r, createLocalStartAlbCommand as _t, createLocalStudioCommand as a, discoverRoutes as ai, A2A_CONTAINER_PORT as an, buildCorsConfigByApiId as ar, pickLambdaEdgeFunctionLogicalId as at, renderStudioHtml as b, LocalInvokeBuildError as bi, buildAgentCoreCodeImage as bn, probeHostGatewaySupport as br, isApplicationLoadBalancer as bt, startStudioProxy as c, AGENTCORE_A2A_PROTOCOL as ci, MCP_CONTAINER_PORT as cn, matchPreflight as cr, compileCloudFrontFunction as ct, createStudioDispatcher as d, AGENTCORE_MCP_PROTOCOL as di, mcpInvokeOnce as dn, applyAuthorizerOverlay as dr, stripCloudFrontImport as dt, discoverWebSocketApis as ei, attachContainerLogStreamer as en, evaluateCachedLambdaPolicy as er, describeS3OriginDomain as et, filterStudioCustomResources as f, AGENTCORE_RUNTIME_TYPE as fi, parseSseForJsonRpc as fn, buildHttpApiV2Event as fr, createCloudFrontModule as ft, annotatePinnedEcsTargets as g, derivePseudoParametersFromRegion as gi, invokeAgentCore as gn, selectIntegrationResponse as gr, albStrategy as gt, annotateEcsTaskPinnedTargets as h, resolveAgentCoreTarget as hi, AGENTCORE_SESSION_ID_HEADER as hn, pickResponseTemplate as hr, addAlbSpecificOptions as ht, coerceStopRequest as i, webSocketApiMatchesIdentifier as ii, invokeAgentCoreWs as in, applyCorsResponseHeaders as ir, pickKvsLogicalIdFromArn as it, createLocalStartCloudFrontCommand as j, createAuthorizerCache as jn, resolveRuntimeCodeMountPath as jr, buildEcsImageResolutionContext$1 as jt, LocalStartCloudFrontError as k, createWatchPredicates as kn, architectureToPlatform as kr, addEcsAssumeRoleOptions as kt, relayServeRequest as l, AGENTCORE_AGUI_PROTOCOL as li, MCP_PATH as ln, matchRoute as lr, runViewerRequest as lt, annotateAlbPinnedBackingServices as m, pickAgentCoreCandidateStack as mi, signAgentCoreInvocation as mn, evaluateResponseParameters as mr, createUnboundCloudFrontModule as mt, coerceRunRequest as n, filterWebSocketApisByIdentifiers as ni, createLocalInvokeAgentCoreCommand as nn, invokeTokenAuthorizer as nr, isCloudFrontDistribution as nt, resolveServeBaseUrl as o, pickRefLogicalId as oi, A2A_PATH as on, buildCorsConfigFromCloudFrontChain as or, pickTargetFunctionLogicalId as ot, isCustomResourceLambdaTarget as p, AgentCoreResolutionError as pi, AGENTCORE_SIGV4_SERVICE as pn, buildRestV1Event as pr, createLocalFileKvsDataSource as pt, applyEdgeRequestResult as q, buildJwksUrlFromIssuer as qn, collectSsmParameterRefs as qr, listPinnedTargets as qt, coerceServeRequest as r, parseSelectionExpressionPath as ri, bridgeAgentCoreWs as rn, attachAuthorizers as rr, pickFunctionUrlLogicalIdFromOrigin as rt, createStudioServeManager as s, resolveLambdaArnIntrinsic as si, a2aInvokeOnce as sn, isFunctionUrlOacFronted as sr, resolveCloudFrontDistribution as st, addStudioSpecificOptions as t, discoverWebSocketApisOrThrow as ti, addInvokeAgentCoreSpecificOptions as tn, invokeRequestAuthorizer as tr, extractKvsAssociations as tt, reinvoke as u, AGENTCORE_HTTP_PROTOCOL as ui, MCP_PROTOCOL_VERSION as un, translateLambdaResponse as ur, runViewerResponse as ut, startStudioServer as v, substituteImagePlaceholders as vi, downloadAndExtractS3Bundle as vn, VtlEvaluationError as vr, parseLbPortOverrides as vt, createLocalListCommand as w, classifySourceChange as wn, handleConnectionsRequest as wr, serviceStrategy as wt, createStudioStore as x, buildStsClientConfig as xi, computeCodeImageTag as xn, bufferToBody as xr, resolveAlbFrontDoor as xt, toStudioTargetGroups as y, tryResolveImageFnJoin as yi, SUPPORTED_CODE_RUNTIMES as yn, HOST_GATEWAY_MIN_VERSION as yr, resolveAlbTarget as yt, resolveDeployedOriginBucket as z, filterRoutesByApiIdentifiers as zn, LocalStateSourceError as zr, buildImageOverrideTag as zt };
-//# sourceMappingURL=local-studio-BfroIGQL.js.map
+export { edgeHeadersToHttp as $, verifyJwtViaDiscovery as $n, countTargets as $r, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as $t, startAgentCoreWsBridge as A, createLocalStartApiCommand as An, buildMessageEvent as Ar, addCommonEcsServiceOptions as At, resolveDeployedKvsArnByName as B, filterRoutesByApiIdentifier as Bn, substituteEnvVarsFromStateAsync as Br, ImageOverrideError as Bt, addListSpecificOptions as C, buildStsClientConfig as Ci, computeCodeImageTag as Cn, bufferToBody as Cr, resolveAlbFrontDoor as Ct, createLocalStartAgentCoreCommand as D, addInvokeSpecificOptions as Dn, parseConnectionsPath as Dr, addRunTaskSpecificOptions as Dt, addStartAgentCoreSpecificOptions as E, classifySourceChange as En, handleConnectionsRequest as Er, serviceStrategy as Et, parseOriginOverrides as F, attachStageContext as Fn, resolveRuntimeImage as Fr, parseMaxTasks as Ft, startCloudFrontServer as G, resolveSelectionExpression as Gn, resolveCfnFallbackRegion as Gr, resolveImageOverrides as Gt, classifyS3Error as H, groupRoutesByServer as Hn, createLocalStateProvider as Hr, enforceImageOverrideOrphans as Ht, resolveCloudFrontTarget as I, buildStageMap as In, EcsTaskResolutionError as Ir, parseRestartPolicy as It, serveLambdaUrlOrigin as J, buildCognitoJwksUrl as Jn, CfnLocalStateProvider as Jr, isLocalCdkAssetImage as Jt, resolveErrorResponseCandidates as K, resolveServiceIntegrationParameters as Kn, resolveCfnRegion as Kr, runImageOverrideBuilds as Kt, idFromArn as L, materializeLayerFromArn as Ln, substituteAgainstState as Lr, resolveEcsAssumeRoleOption as Lt, addStartCloudFrontSpecificOptions as M, resolveApiTargetSubset as Mn, buildContainerImage as Mr, addImageOverrideOptions as Mt, createLocalStartCloudFrontCommand as N, createAuthorizerCache as Nn, resolveRuntimeCodeMountPath as Nr, buildEcsImageResolutionContext$1 as Nt, startAgentCoreHttpServer as O, createLocalInvokeCommand as On, buildConnectEvent as Or, createLocalRunTaskCommand as Ot, parseKvsFileOverrides as P, createFileWatcher as Pn, resolveRuntimeFileExtension as Pr, ecsClusterOption as Pt, buildEdgeResponseEvent as Q, verifyJwtAuthorizer as Qn, resolveSingleTarget as Qr, DEFAULT_SHADOW_READY_TIMEOUT_MS as Qt, resolveKvsModulesForDistribution as R, resolveEnvVars$1 as Rn, substituteAgainstStateAsync as Rr, resolveSharedSidecarCredentials as Rt, StudioEventBus as S, LocalInvokeBuildError as Si, buildAgentCoreCodeImage as Sn, probeHostGatewaySupport as Sr, isApplicationLoadBalancer as St, formatTargetListing as T, toCmdArgv as Tn, buildMgmtEndpointEnvUrl as Tr, createLocalStartServiceCommand as Tt, createS3OriginReader as U, readMtlsMaterialsFromDisk as Un, isCfnFlagPresent as Ur, mergeForService as Ut, resolveDeployedOriginBucket as V, filterRoutesByApiIdentifiers as Vn, LocalStateSourceError as Vr, buildImageOverrideTag as Vt, matchBehavior as W, startApiServer as Wn, rejectExplicitCfnStackWithMultipleStacks as Wr, parseImageOverrideFlags as Wt, applyEdgeResponseResult as X, createJwksCache as Xn, resolveSsmParameters as Xr, buildCloudMapIndex as Xt, applyEdgeRequestResult as Y, buildJwksUrlFromIssuer as Yn, collectSsmParameterRefs as Yr, listPinnedTargets as Yt, buildEdgeRequestEvent as Z, verifyCognitoJwt as Zn, resolveWatchConfig as Zr, CloudMapRegistry as Zt, filterStudioTargetGroups as _, resolveAgentCoreTarget as _i, AGENTCORE_SESSION_ID_HEADER as _n, pickResponseTemplate as _r, addAlbSpecificOptions as _t, createLocalStudioCommand as a, parseSelectionExpressionPath as ai, bridgeAgentCoreWs as an, attachAuthorizers as ar, pickFunctionUrlLogicalIdFromOrigin as at, renderStudioHtml as b, substituteImagePlaceholders as bi, downloadAndExtractS3Bundle as bn, VtlEvaluationError as br, parseLbPortOverrides as bt, startStudioProxy as c, pickRefLogicalId as ci, A2A_PATH as cn, buildCorsConfigFromCloudFrontChain as cr, pickTargetFunctionLogicalId as ct, createStudioDispatcher as d, AGENTCORE_AGUI_PROTOCOL as di, MCP_PATH as dn, matchRoute as dr, runViewerRequest as dt, listTargets as ei, setShadowReadyTimeoutMs as en, buildMethodArn as er, httpHeadersToEdge as et, filterStudioCustomResources as f, AGENTCORE_HTTP_PROTOCOL as fi, MCP_PROTOCOL_VERSION as fn, translateLambdaResponse as fr, runViewerResponse as ft, annotatePinnedEcsTargets as g, pickAgentCoreCandidateStack as gi, signAgentCoreInvocation as gn, evaluateResponseParameters as gr, createUnboundCloudFrontModule as gt, annotateEcsTaskPinnedTargets as h, AgentCoreResolutionError as hi, AGENTCORE_SIGV4_SERVICE as hn, buildRestV1Event as hr, createLocalFileKvsDataSource as ht, coerceStopRequest as i, filterWebSocketApisByIdentifiers as ii, createLocalInvokeAgentCoreCommand as in, invokeTokenAuthorizer as ir, isCloudFrontDistribution as it, LocalStartCloudFrontError as j, createWatchPredicates as jn, architectureToPlatform as jr, addEcsAssumeRoleOptions as jt, attachAgentCoreWsBridge as k, addStartApiSpecificOptions as kn, buildDisconnectEvent as kr, MAX_TASKS_SUBNET_RANGE_CAP as kt, relayServeRequest as l, resolveLambdaArnIntrinsic as li, a2aInvokeOnce as ln, isFunctionUrlOacFronted as lr, resolveCloudFrontDistribution as lt, annotateAlbPinnedBackingServices as m, AGENTCORE_RUNTIME_TYPE as mi, parseSseForJsonRpc as mn, buildHttpApiV2Event as mr, createCloudFrontModule as mt, coerceRunRequest as n, discoverWebSocketApis as ni, attachContainerLogStreamer as nn, evaluateCachedLambdaPolicy as nr, describeS3OriginDomain as nt, resolveServeBaseUrl as o, webSocketApiMatchesIdentifier as oi, invokeAgentCoreWs as on, applyCorsResponseHeaders as or, pickKvsLogicalIdFromArn as ot, isCustomResourceLambdaTarget as p, AGENTCORE_MCP_PROTOCOL as pi, mcpInvokeOnce as pn, applyAuthorizerOverlay as pr, stripCloudFrontImport as pt, serveFromStaticOrigin as q, defaultCredentialsLoader as qn, resolveCfnStackName as qr, describePinnedImageUri as qt, coerceServeRequest as r, discoverWebSocketApisOrThrow as ri, addInvokeAgentCoreSpecificOptions as rn, invokeRequestAuthorizer as rr, extractKvsAssociations as rt, createStudioServeManager as s, discoverRoutes as si, A2A_CONTAINER_PORT as sn, buildCorsConfigByApiId as sr, pickLambdaEdgeFunctionLogicalId as st, addStudioSpecificOptions as t, availableWebSocketApiIdentifiers as ti, getContainerNetworkIp as tn, computeRequestIdentityHash as tr, CLOUDFRONT_DISTRIBUTION_TYPE as tt, reinvoke as u, AGENTCORE_A2A_PROTOCOL as ui, MCP_CONTAINER_PORT as un, matchPreflight as ur, compileCloudFrontFunction as ut, startStudioServer as v, derivePseudoParametersFromRegion as vi, invokeAgentCore as vn, selectIntegrationResponse as vr, albStrategy as vt, createLocalListCommand as w, resolveProfileCredentials as wi, renderCodeDockerfile as wn, ConnectionRegistry as wr, addStartServiceSpecificOptions as wt, createStudioStore as x, tryResolveImageFnJoin as xi, SUPPORTED_CODE_RUNTIMES as xn, HOST_GATEWAY_MIN_VERSION as xr, resolveAlbTarget as xt, toStudioTargetGroups as y, formatStateRemedy as yi, waitForAgentCorePing as yn, tryParseStatus as yr, createLocalStartAlbCommand as yt, createDeployedKvsDataSource as z, availableApiIdentifiers as zn, substituteEnvVarsFromState as zr, runEcsServiceEmulator as zt };
+//# sourceMappingURL=local-studio-CdpdUbIA.js.map