cdk-local 0.139.3 → 0.141.0

package/dist/{local-studio-BvuYWUHm.js → local-studio-fdztI6b8.js}

@@ -30533,22 +30533,70 @@ function parseOriginOverrides(values) {
 	return out;
 }
 /**
-* Parse the repeatable `--kvs-file <kvsLogicalId>=<file.json>` overrides into a
+* Parse the repeatable `--kvs-file <key>=<file.json>` overrides into a
 * map. Each entry backs a CloudFront Function's `cf.kvs()` reads with a local
 * JSON map instead of the deployed store — the AWS-free escape hatch for KVS,
-* symmetric with `--origin <id>=<dir>`. The key is the
-* `AWS::CloudFront::KeyValueStore` resource logical id (surfaced in the
-* unbound-KVS boot warning when missing).
+* symmetric with `--origin <id>=<dir>`. The key is a KeyValueStore handle —
+* its `AWS::CloudFront::KeyValueStore` resource logical id, its construct path,
+* or its bare construct id — resolved to a logical id by
+* {@link normalizeKvsFileKeys} once the template is known.
 */
 function parseKvsFileOverrides(values) {
 	const out = /* @__PURE__ */ new Map();
 	for (const raw of values ?? []) {
 		const eq = raw.indexOf("=");
-		if (eq <= 0 || eq === raw.length - 1) throw new LocalStartCloudFrontError(`Invalid --kvs-file '${raw}'. Expected <kvsLogicalId>=<file.json> (e.g. MyKvsStore=./kvs.json).`);
+		if (eq <= 0 || eq === raw.length - 1) throw new LocalStartCloudFrontError(`Invalid --kvs-file '${raw}'. Expected <key>=<file.json> (e.g. RoutesKvs=./kvs.json).`);
 		out.set(raw.slice(0, eq).trim(), raw.slice(eq + 1).trim());
 	}
 	return out;
 }
+/** Index every `AWS::CloudFront::KeyValueStore` in a template for key matching. */
+function collectKvsStoreIdentities(template) {
+	const out = [];
+	for (const [logicalId, resource] of Object.entries(template.Resources ?? {})) {
+		if (resource.Type !== "AWS::CloudFront::KeyValueStore") continue;
+		const cdkPath = readCdkPath(resource) || void 0;
+		const constructPath = cdkPath?.endsWith("/Resource") ? cdkPath.slice(0, -9) : cdkPath;
+		const constructId = constructPath?.split("/").pop();
+		out.push({
+			logicalId,
+			...cdkPath !== void 0 && { cdkPath },
+			...constructPath !== void 0 && { constructPath },
+			...constructId !== void 0 && constructId !== "" && { constructId }
+		});
+	}
+	return out;
+}
+/**
+* Resolve the `--kvs-file` keys (a logical id, a construct path, or a bare
+* construct id) to `AWS::CloudFront::KeyValueStore` resource logical ids, so the
+* binding layer — which matches strictly by logical id — finds them. Mirrors the
+* construct-path ergonomics the `start-cloudfront` target argument already has,
+* removing the need to synth + grep the template for the hash-suffixed logical
+* id (issue #465).
+*
+* Match priority per key: exact logical id, then exact construct path (the
+* `aws:cdk:path` with or without the synthesized `/Resource` leaf), then bare
+* construct id. A key matching no store, or a bare id matching more than one,
+* throws a {@link LocalStartCloudFrontError} listing the candidates.
+*/
+function normalizeKvsFileKeys(kvsFiles, template) {
+	if (kvsFiles.size === 0) return kvsFiles;
+	const stores = collectKvsStoreIdentities(template);
+	const candidates = () => stores.map((s) => s.constructPath ? `${s.logicalId} (${s.constructPath})` : s.logicalId).join(", ") || "(none in this distribution)";
+	const out = /* @__PURE__ */ new Map();
+	for (const [key, filePath] of kvsFiles) {
+		const matched = [
+			stores.filter((s) => s.logicalId === key),
+			stores.filter((s) => s.constructPath === key || s.cdkPath === key),
+			stores.filter((s) => s.constructId === key)
+		].find((t) => t.length > 0) ?? [];
+		if (matched.length === 0) throw new LocalStartCloudFrontError(`--kvs-file key '${key}' matched no AWS::CloudFront::KeyValueStore in the distribution. Pass a store's logical id, construct path, or bare construct id. Candidates: ${candidates()}.`);
+		if (matched.length > 1) throw new LocalStartCloudFrontError(`--kvs-file key '${key}' is ambiguous — it matched ${matched.length} KeyValueStores (${matched.map((s) => s.logicalId).join(", ")}). Use the logical id or full construct path.`);
+		out.set(matched[0].logicalId, filePath);
+	}
+	return out;
+}
 /**
 * Resolve + attach the `cf` KeyValueStore module to every KVS-reading
 * CloudFront Function in the distribution (run after each synth, initial +
@@ -30558,8 +30606,9 @@ function parseKvsFileOverrides(values) {
 * runtime then fails the read with the same guidance).
 */
 async function attachKvsModules(distribution, stacks, options, profileCredentials, logger, extraStateProviders) {
-	const kvsFiles = parseKvsFileOverrides(options.kvsFile);
-	const synthRegion = stacks.find((s) => s.stackName === distribution.stackName)?.region;
+	const stack = stacks.find((s) => s.stackName === distribution.stackName);
+	const synthRegion = stack?.region;
+	const kvsFiles = stack ? normalizeKvsFileKeys(parseKvsFileOverrides(options.kvsFile), stack.template) : parseKvsFileOverrides(options.kvsFile);
 	const resolveDeployedKvs = isCfnFlagPresent(options) ? async (kvsLogicalId) => {
 		const provider = createLocalStateProvider(options, distribution.stackName, synthRegion, extraStateProviders);
 		if (!provider) return void 0;
@@ -30962,7 +31011,7 @@ function createLocalStartCloudFrontCommand(opts = {}) {
 * `cmd`.
 */
 function addStartCloudFrontSpecificOptions(cmd) {
-	return cmd.addOption(new Option("--port <port>", "HTTP server port (default: auto-allocate)").default("0")).addOption(new Option("--host <host>", "Bind address").default("127.0.0.1")).addOption(new Option("--origin <originId=dir>", "Point a distribution origin at a local directory (repeatable). Use when cdk-local cannot resolve the origin's BucketDeployment source automatically (content uploaded out of band, or a non-CDK bucket).").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--kvs-file <kvsLogicalId=file.json>", "Back a CloudFront Function's KeyValueStore reads (cf.kvs().get()) with a local JSON map (repeatable). The key is the AWS::CloudFront::KeyValueStore resource logical id; the file is a flat { \"key\": \"value\" } object. The AWS-free alternative to --from-cfn-stack, which instead reads the deployed store via the GetKey API.").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--tls", "Terminate real TLS (HTTPS). Uses --tls-cert / --tls-key when supplied, else an auto-generated self-signed cert.").default(false)).addOption(new Option("--tls-cert <path>", "PEM server certificate for --tls (implies --tls).")).addOption(new Option("--tls-key <path>", "PEM server private key for --tls (implies --tls).")).addOption(new Option("--no-pull", "Skip 'docker pull' for a Lambda Function URL origin's base image (use the locally cached image).")).addOption(new Option("--from-cfn-stack [cfn-stack-name]", "Bind to a deployed CloudFormation stack (ListStackResources). Resolves an S3 origin that has no local BucketDeployment source to its deployed bucket and serves it from real S3 on demand (the front/back-split case: files uploaded out of band), and resolves a Lambda Function URL / Lambda@Edge function's env vars to the deployed physical IDs / exports. Use for CDK apps deployed via the upstream CDK CLI (`cdk deploy`). Bare form uses the resolved stack name; pass a value when the CFn stack name differs.")).addOption(new Option("--cache-origin", "For a deployed-S3 origin (served from real S3 under --from-cfn-stack): keep fetched objects in memory for the session instead of re-reading on every request. Faster repeat reads / fewer S3 GETs, but an out-of-band S3 content change is not reflected until a --watch reload (which clears the cache) or a restart. Off by default (every request re-reads, always current). Not CloudFront CDN caching.").default(false)).addOption(new Option("--stack-region <region>", "Region of the state record to read. Used with --from-cfn-stack as the CFn client region.")).addOption(new Option("--assume-role [arn]", "Assume a Lambda Function URL origin's deployed execution role and forward STS-issued temp credentials into its container so the handler runs with the deployed permissions. Three forms: `--assume-role <arn>` (explicit ARN); `--assume-role` (bare, auto-resolves from state — requires --from-cfn-stack); `--no-assume-role` (opt out). Off by default (the dev shell credentials are forwarded).")).addOption(new Option("--watch", "Hot-reload: re-synth + re-resolve the distribution when the CDK app's source changes (honors cdk.json watch.include/exclude; cdk.out, node_modules, .git are always excluded). The server keeps the previous version serving when synth fails mid-reload.").default(false));
+	return cmd.addOption(new Option("--port <port>", "HTTP server port (default: auto-allocate)").default("0")).addOption(new Option("--host <host>", "Bind address").default("127.0.0.1")).addOption(new Option("--origin <originId=dir>", "Point a distribution origin at a local directory (repeatable). Use when cdk-local cannot resolve the origin's BucketDeployment source automatically (content uploaded out of band, or a non-CDK bucket).").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--kvs-file <key=file.json>", "Back a CloudFront Function's KeyValueStore reads (cf.kvs().get()) with a local JSON map (repeatable). The key is a KeyValueStore handle — its AWS::CloudFront::KeyValueStore resource logical id, its construct path, or its bare construct id; the file is a flat { \"key\": \"value\" } object. The AWS-free alternative to --from-cfn-stack, which instead reads the deployed store via the GetKey API.").argParser((value, prev) => [...prev ?? [], value])).addOption(new Option("--tls", "Terminate real TLS (HTTPS). Uses --tls-cert / --tls-key when supplied, else an auto-generated self-signed cert.").default(false)).addOption(new Option("--tls-cert <path>", "PEM server certificate for --tls (implies --tls).")).addOption(new Option("--tls-key <path>", "PEM server private key for --tls (implies --tls).")).addOption(new Option("--no-pull", "Skip 'docker pull' for a Lambda Function URL origin's base image (use the locally cached image).")).addOption(new Option("--from-cfn-stack [cfn-stack-name]", "Bind to a deployed CloudFormation stack (ListStackResources). Resolves an S3 origin that has no local BucketDeployment source to its deployed bucket and serves it from real S3 on demand (the front/back-split case: files uploaded out of band), and resolves a Lambda Function URL / Lambda@Edge function's env vars to the deployed physical IDs / exports. Use for CDK apps deployed via the upstream CDK CLI (`cdk deploy`). Bare form uses the resolved stack name; pass a value when the CFn stack name differs.")).addOption(new Option("--cache-origin", "For a deployed-S3 origin (served from real S3 under --from-cfn-stack): keep fetched objects in memory for the session instead of re-reading on every request. Faster repeat reads / fewer S3 GETs, but an out-of-band S3 content change is not reflected until a --watch reload (which clears the cache) or a restart. Off by default (every request re-reads, always current). Not CloudFront CDN caching.").default(false)).addOption(new Option("--stack-region <region>", "Region of the state record to read. Used with --from-cfn-stack as the CFn client region.")).addOption(new Option("--assume-role [arn]", "Assume a Lambda Function URL origin's deployed execution role and forward STS-issued temp credentials into its container so the handler runs with the deployed permissions. Three forms: `--assume-role <arn>` (explicit ARN); `--assume-role` (bare, auto-resolves from state — requires --from-cfn-stack); `--no-assume-role` (opt out). Off by default (the dev shell credentials are forwarded).")).addOption(new Option("--watch", "Hot-reload: re-synth + re-resolve the distribution when the CDK app's source changes (honors cdk.json watch.include/exclude; cdk.out, node_modules, .git are always excluded). The server keeps the previous version serving when synth fails mid-reload.").default(false));
 }
 
 //#endregion
@@ -31928,172 +31977,6 @@ function createStudioStore(bus, options = {}) {
 	};
 }
 
-//#endregion
-//#region src/local/studio-option-catalog.ts
-/**
-* Auto-derived full-flag catalog for `cdkl studio` (issue #301).
-*
-* The per-target {@link OPTION_SPECS} in `studio-option-specs.ts` is a
-* CURATED subset — the handful of flags worth a rich control (a checkbox, a
-* KV editor, an add-row list). But a command like `cdkl start-api` accepts
-* many more flags than studio renders a control for, and hiding them makes
-* the UI strictly less capable than the headless CLI.
-*
-* This module closes that gap by INTROSPECTING each runnable kind's Commander
-* command factory and emitting the complete flag list (name + description).
-* The studio UI serializes it into the page and renders, inside a collapsed
-* "All options" section, (a) the full catalog as a read-only reference and
-* (b) a raw extra-args input (see {@link tokenizeRawArgs}) so any flag the
-* curated controls don't expose can still be passed verbatim. Auto-derivation
-* means the catalog can never drift from the command's real option set.
-*
-* Session-global flags (handled by the studio Session bar / `studio-child-args`)
-* and the auto-added `--help` / `--version` are excluded — passing them per-run
-* would conflict with the session-wide wiring.
-*/
-/**
-* Long flag names handled by the session bar / `studio-child-args` (forwarded
-* to every spawned child once, session-wide). Excluded from the per-target
-* catalog so a user does not re-specify them per-run and collide with the
-* session-wide value. Plus the Commander-managed `--help` / `--version`.
-*/
-const CATALOG_EXCLUDED_FLAGS = new Set([
-	"--app",
-	"--profile",
-	"--region",
-	"--context",
-	"--from-cfn-stack",
-	"--assume-role",
-	"--help",
-	"--version"
-]);
-const KIND_FACTORIES = {
-	lambda: {
-		command: "invoke",
-		factory: createLocalInvokeCommand
-	},
-	agentcore: {
-		command: "invoke-agentcore",
-		factory: createLocalInvokeAgentCoreCommand
-	},
-	api: {
-		command: "start-api",
-		factory: createLocalStartApiCommand
-	},
-	alb: {
-		command: "start-alb",
-		factory: createLocalStartAlbCommand
-	},
-	ecs: {
-		command: "start-service",
-		factory: createLocalStartServiceCommand
-	},
-	"ecs-task": {
-		command: "run-task",
-		factory: createLocalRunTaskCommand
-	},
-	cloudfront: {
-		command: "start-cloudfront",
-		factory: createLocalStartCloudFrontCommand
-	},
-	"agentcore-ws": {
-		command: "start-agentcore",
-		factory: createLocalStartAgentCoreCommand
-	}
-};
-let cached;
-/**
-* Build (and memoize) the full per-kind flag catalog by introspecting each
-* runnable kind's Commander command factory.
-*
-* Each factory calls `setEmbedConfig(opts.embedConfig)` at construction — with
-* no opts that resets the active embed config to cdk-local defaults, which
-* would wipe a host CLI's branding. So the active config is snapshotted and
-* each factory is re-handed it: branding is preserved AND the derived flag
-* descriptions reflect the host's active branding. The `finally` restore is a
-* belt-and-suspenders against a factory that ignores the passed config.
-* Memoized: the factories are instantiated exactly once per process, not per
-* page render.
-*/
-function buildFlagCatalog() {
-	if (cached) return cached;
-	const savedEmbedConfig = getEmbedConfig();
-	try {
-		const out = {};
-		for (const kind of Object.keys(KIND_FACTORIES)) {
-			const { command, factory } = KIND_FACTORIES[kind];
-			const cmd = factory({ embedConfig: savedEmbedConfig });
-			const flags = [];
-			for (const opt of cmd.options) {
-				if (opt.hidden) continue;
-				if (opt.long && CATALOG_EXCLUDED_FLAGS.has(opt.long)) continue;
-				flags.push({
-					flags: opt.flags,
-					description: opt.description ?? ""
-				});
-			}
-			out[kind] = {
-				command,
-				flags
-			};
-		}
-		cached = out;
-		return out;
-	} finally {
-		setEmbedConfig(savedEmbedConfig);
-	}
-}
-/**
-* Tokenize a raw extra-args string into discrete argv elements, honoring
-* single / double quotes and backslash escaping so values with spaces survive
-* (`--name "two words"` -> `['--name', 'two words']`). studio spawns children
-* WITHOUT a shell (argv array), so the tokens are appended verbatim — there is
-* no shell-injection surface; the child command still validates each arg.
-*
-* Returns `[]` for an empty / whitespace-only input. Throws on an unterminated
-* quote so a malformed raw-args string fails as a clean boundary error rather
-* than spawning a child with a mis-split argv.
-*/
-function tokenizeRawArgs(raw) {
-	if (raw === void 0) return [];
-	const tokens = [];
-	let current = "";
-	let inToken = false;
-	let quote = null;
-	for (let i = 0; i < raw.length; i++) {
-		const ch = raw[i];
-		if (quote) {
-			if (ch === "\\" && quote === "\"" && i + 1 < raw.length) current += raw[++i];
-			else if (ch === quote) quote = null;
-			else current += ch;
-			continue;
-		}
-		if (ch === "\"" || ch === "'") {
-			quote = ch;
-			inToken = true;
-			continue;
-		}
-		if (ch === "\\" && i + 1 < raw.length) {
-			current += raw[++i];
-			inToken = true;
-			continue;
-		}
-		if (ch === " " || ch === "	" || ch === "\n" || ch === "\r") {
-			if (inToken) {
-				tokens.push(current);
-				current = "";
-				inToken = false;
-			}
-			continue;
-		}
-		current += ch;
-		inToken = true;
-	}
-	if (quote) throw new Error(`Raw extra args have an unterminated ${quote} quote.`);
-	if (inToken) tokens.push(current);
-	return tokens;
-}
-
 //#endregion
 //#region src/local/studio-option-specs.ts
 /**
@@ -32397,6 +32280,264 @@ function resolveEnvVars(kind, values) {
 	throw new Error(`Option '${spec.flag}' must be KEY/VALUE rows or a JSON object string.`);
 }
 
+//#endregion
+//#region src/local/studio-option-catalog.ts
+/**
+* Auto-derived full-flag catalog for `cdkl studio` (issue #301).
+*
+* The per-target {@link OPTION_SPECS} in `studio-option-specs.ts` is a
+* CURATED subset — the handful of flags worth a rich control (a checkbox, a
+* KV editor, an add-row list). But a command like `cdkl start-api` accepts
+* many more flags than studio renders a control for, and hiding them makes
+* the UI strictly less capable than the headless CLI.
+*
+* This module closes that gap by INTROSPECTING each runnable kind's Commander
+* command factory and emitting the complete flag list (name + description).
+* The studio UI serializes it into the page and renders, inside a collapsed
+* "All options" section, (a) the full catalog as a read-only reference and
+* (b) a raw extra-args input (see {@link tokenizeRawArgs}) so any flag the
+* curated controls don't expose can still be passed verbatim. Auto-derivation
+* means the catalog can never drift from the command's real option set.
+*
+* Session-global flags (handled by the studio Session bar / `studio-child-args`)
+* and the auto-added `--help` / `--version` are excluded — passing them per-run
+* would conflict with the session-wide wiring.
+*/
+/**
+* Long flag names handled by the session bar / `studio-child-args` (forwarded
+* to every spawned child once, session-wide). Excluded from the per-target
+* catalog so a user does not re-specify them per-run and collide with the
+* session-wide value. Plus the Commander-managed `--help` / `--version`.
+*/
+const CATALOG_EXCLUDED_FLAGS = new Set([
+	"--app",
+	"--profile",
+	"--region",
+	"--context",
+	"--from-cfn-stack",
+	"--assume-role",
+	"--help",
+	"--version"
+]);
+/**
+* Long flags studio INJECTS or binds itself per run, so the "All options"
+* section must NOT auto-render an editable control for them (a user-set value
+* would collide with — or break — studio's own wiring). They still appear in
+* the catalog (so it stays a complete reference), just `renderable: false`; a
+* power user can still force one via the raw extra-args input, which is
+* appended last.
+*
+* - `--event` / `--response-file`: studio writes the composed event /
+*   response-capture file and passes these itself (the invoke kinds).
+* - `--host` / `--port`: the serve-manager binds the listen host/port and the
+*   capture proxy fronts it; a user override would desync the proxy URL.
+* - `--watch`: the session-global Session-bar toggle (appended by the
+*   serve-manager from the mutable config), not a per-run flag.
+* - the `--image-*` override family: handled by the dedicated Dockerfile
+*   picker (a partial control here would produce a half-wired override).
+*/
+const CATALOG_MANAGED_FLAGS = new Set([
+	"--event",
+	"--response-file",
+	"--host",
+	"--port",
+	"--watch",
+	"--image-override",
+	"--image-build-arg",
+	"--image-build-secret",
+	"--image-target",
+	"--no-interactive-overrides",
+	"--strict-overrides"
+]);
+const KIND_FACTORIES = {
+	lambda: {
+		command: "invoke",
+		factory: createLocalInvokeCommand
+	},
+	agentcore: {
+		command: "invoke-agentcore",
+		factory: createLocalInvokeAgentCoreCommand
+	},
+	api: {
+		command: "start-api",
+		factory: createLocalStartApiCommand
+	},
+	alb: {
+		command: "start-alb",
+		factory: createLocalStartAlbCommand
+	},
+	ecs: {
+		command: "start-service",
+		factory: createLocalStartServiceCommand
+	},
+	"ecs-task": {
+		command: "run-task",
+		factory: createLocalRunTaskCommand
+	},
+	cloudfront: {
+		command: "start-cloudfront",
+		factory: createLocalStartCloudFrontCommand
+	},
+	"agentcore-ws": {
+		command: "start-agentcore",
+		factory: createLocalStartAgentCoreCommand
+	}
+};
+let cached;
+/**
+* Parse the value-token placeholder out of a Commander flags string for a
+* value-taking option: `-e, --event <file>` -> `file`,
+* `--platform <platform>` -> `platform`, `--lb-port <listener=host>` ->
+* `listener=host`. The trailing `...` of a variadic token is dropped. Returns
+* undefined for a boolean flag (no `<...>` / `[...]` token), so the input
+* placeholder falls back to a generic hint.
+*/
+function parseFlagPlaceholder(flags) {
+	const m = /[<[]([^>\]]+)[>\]]/.exec(flags);
+	if (!m || m[1] === void 0) return void 0;
+	return m[1].replace(/\.\.\.$/, "").trim() || void 0;
+}
+/**
+* Build (and memoize) the full per-kind flag catalog by introspecting each
+* runnable kind's Commander command factory.
+*
+* Each factory calls `setEmbedConfig(opts.embedConfig)` at construction — with
+* no opts that resets the active embed config to cdk-local defaults, which
+* would wipe a host CLI's branding. So the active config is snapshotted and
+* each factory is re-handed it: branding is preserved AND the derived flag
+* descriptions reflect the host's active branding. The `finally` restore is a
+* belt-and-suspenders against a factory that ignores the passed config.
+* Memoized: the factories are instantiated exactly once per process, not per
+* page render.
+*/
+function buildFlagCatalog() {
+	if (cached) return cached;
+	const savedEmbedConfig = getEmbedConfig();
+	try {
+		const out = {};
+		for (const kind of Object.keys(KIND_FACTORIES)) {
+			const { command, factory } = KIND_FACTORIES[kind];
+			const cmd = factory({ embedConfig: savedEmbedConfig });
+			const curated = new Set((OPTION_SPECS[kind] ?? []).map((s) => s.flag));
+			const flags = [];
+			for (const opt of cmd.options) {
+				if (opt.hidden) continue;
+				if (opt.long && CATALOG_EXCLUDED_FLAGS.has(opt.long)) continue;
+				const long = opt.long ?? "";
+				const takesValue = Boolean(opt.required || opt.optional);
+				const negate = Boolean(opt.negate);
+				const variadic = Boolean(opt.variadic);
+				const choices = Array.isArray(opt.argChoices) ? [...opt.argChoices] : void 0;
+				const placeholder = parseFlagPlaceholder(opt.flags);
+				const renderable = long !== "" && !curated.has(long) && !CATALOG_MANAGED_FLAGS.has(long);
+				const info = {
+					flags: opt.flags,
+					description: opt.description ?? "",
+					long,
+					takesValue,
+					negate,
+					variadic,
+					renderable
+				};
+				if (placeholder !== void 0) info.placeholder = placeholder;
+				if (choices) info.choices = choices;
+				flags.push(info);
+			}
+			out[kind] = {
+				command,
+				flags
+			};
+		}
+		cached = out;
+		return out;
+	} finally {
+		setEmbedConfig(savedEmbedConfig);
+	}
+}
+/**
+* Tokenize a raw extra-args string into discrete argv elements, honoring
+* single / double quotes and backslash escaping so values with spaces survive
+* (`--name "two words"` -> `['--name', 'two words']`). studio spawns children
+* WITHOUT a shell (argv array), so the tokens are appended verbatim — there is
+* no shell-injection surface; the child command still validates each arg.
+*
+* Returns `[]` for an empty / whitespace-only input. Throws on an unterminated
+* quote so a malformed raw-args string fails as a clean boundary error rather
+* than spawning a child with a mis-split argv.
+*/
+function tokenizeRawArgs(raw) {
+	if (raw === void 0) return [];
+	const tokens = [];
+	let current = "";
+	let inToken = false;
+	let quote = null;
+	for (let i = 0; i < raw.length; i++) {
+		const ch = raw[i];
+		if (quote) {
+			if (ch === "\\" && quote === "\"" && i + 1 < raw.length) current += raw[++i];
+			else if (ch === quote) quote = null;
+			else current += ch;
+			continue;
+		}
+		if (ch === "\"" || ch === "'") {
+			quote = ch;
+			inToken = true;
+			continue;
+		}
+		if (ch === "\\" && i + 1 < raw.length) {
+			current += raw[++i];
+			inToken = true;
+			continue;
+		}
+		if (ch === " " || ch === "	" || ch === "\n" || ch === "\r") {
+			if (inToken) {
+				tokens.push(current);
+				current = "";
+				inToken = false;
+			}
+			continue;
+		}
+		current += ch;
+		inToken = true;
+	}
+	if (quote) throw new Error(`Raw extra args have an unterminated ${quote} quote.`);
+	if (inToken) tokens.push(current);
+	return tokens;
+}
+/**
+* Build the argv fragment for the auto-rendered "All options" controls from the
+* UI-posted {@link CatalogValues}, validating each key against the kind's flag
+* catalog. Emits `--flag` for a checked boolean (bare/negate) flag and
+* `--flag <value>` for a non-empty value flag. Blank / false values are
+* omitted.
+*
+* Throws (→ a clean 400 at the `/api/run` boundary) on a key that is not a
+* RENDERABLE catalog flag for the kind — an unknown flag, a session-global /
+* studio-managed flag, or a curated flag (which belongs to the `options` path,
+* not here). The studio UI only ever posts renderable flags; the validation
+* guards a hand-rolled curl body. studio spawns children WITHOUT a shell, so
+* each emitted token is a discrete argv element with no injection surface.
+*/
+function buildCatalogArgs(kind, values) {
+	if (values === void 0) return [];
+	const catalog = buildFlagCatalog()[kind];
+	const byFlag = new Map((catalog?.flags ?? []).filter((f) => f.renderable).map((f) => [f.long, f]));
+	const args = [];
+	for (const [flag, value] of Object.entries(values)) {
+		const info = byFlag.get(flag);
+		if (!info) throw new Error(`Unknown / non-overridable option '${flag}' for target kind '${kind}'.`);
+		if (info.takesValue) {
+			if (typeof value !== "string") throw new Error(`Option '${flag}' must be a string value.`);
+			const trimmed = value.trim();
+			if (trimmed !== "") args.push(flag, trimmed);
+		} else {
+			if (typeof value !== "boolean") throw new Error(`Option '${flag}' must be a boolean.`);
+			if (value) args.push(flag);
+		}
+	}
+	return args;
+}
+
 //#endregion
 //#region src/local/studio-ui.ts
 /**
@@ -32732,10 +32873,18 @@ const STUDIO_CSS = `
      read — kept small as it is secondary. */
   .io-label { color: #d7dde5; font-weight: 500; overflow-wrap: anywhere; min-width: 0; }
   .io-hint { color: #e3b34a; font-size: 11px; }
-  .flag-catalog { margin-top: 8px; display: flex; flex-direction: column; gap: 2px; }
-  .flag-row { display: flex; gap: 8px; align-items: baseline; font-size: 11px; }
-  .flag-name { color: #7bd88f; font-family: ui-monospace, Menlo, monospace; white-space: nowrap; }
-  .flag-desc { color: #999; }
+  /* Auto-rendered controls for the residual (non-curated) command flags in the
+     "All options" section: one stacked row per flag (label + input/select +
+     description hint), styled to match the curated .options controls. */
+  .flag-controls { display: flex; flex-direction: column; gap: 6px; margin-bottom: 8px; }
+  .all-options input.flag-control, .all-options select.flag-control {
+    width: 100%; box-sizing: border-box; background: #111; color: #ddd; border: 1px solid #333;
+    border-radius: 3px; padding: 4px 6px; font: 12px ui-monospace, Menlo, monospace;
+  }
+  .all-options input.flag-control:focus, .all-options select.flag-control:focus {
+    outline: none; border-color: #4ec97a;
+  }
+  .all-options .opt-label { color: #9aa4ad; }
   .started-list { display: flex; flex-direction: column; gap: 3px; margin-top: 4px; }
   .started-flag { color: #7bd88f; font-family: ui-monospace, Menlo, monospace; font-size: 11px; white-space: pre-wrap; word-break: break-all; }
   .envkv-modes { display: flex; gap: 0; }
@@ -32829,7 +32978,7 @@ const STUDIO_SCRIPT = `
   // prefill (issue #398): the option map a stopped serve was last Started with
   // (serveApplied.options), so the re-rendered composer comes back filled.
   // rawPrefill is the raw-extra-args string (serveApplied.rawArgs).
-  function buildOptions(kind, prefill, rawPrefill) {
+  function buildOptions(kind, prefill, rawPrefill, catalogPrefill) {
     const specs = OPTION_SPECS[kind] || [];
     // The composer always shows an "All options" section (raw extra args + the
     // auto-derived flag reference), even for kinds with no curated controls.
@@ -32980,7 +33129,7 @@ const STUDIO_SCRIPT = `
       }
       sec.appendChild(row);
     });
-    const allOpts = buildAllOptions(kind, rawPrefill);
+    const allOpts = buildAllOptions(kind, rawPrefill, catalogPrefill);
     wrap.appendChild(allOpts.node);
     return {
       node: wrap,
@@ -32992,22 +33141,97 @@ const STUDIO_SCRIPT = `
         // body identical to before this section existed.
         return Object.keys(out).length ? out : undefined;
       },
+      collectCatalog: allOpts.collectCatalog,
       collectRaw: allOpts.collectRaw,
     };
   }
 
-  // The collapsed "All options" section: a raw extra-args input (appended
-  // verbatim to the spawned child) + the auto-derived, read-only catalog of
-  // every flag the underlying command accepts. The curated controls above
-  // cover the common flags with rich UI; this exposes the rest so the studio
-  // UI is never strictly less capable than the headless CLI (issue #301).
+  // The collapsed "All options" section. The curated controls above cover the
+  // common flags with rich UI; this section auto-renders a real control
+  // (checkbox / input / select) for EVERY other flag the underlying command
+  // accepts (the catalog's renderable flags), so the studio UI is never
+  // strictly less capable than the headless CLI AND a user does not have to
+  // hand-type "--flag value" for the long tail of simple flags. A raw
+  // extra-args input remains as the final escape hatch for anything the
+  // auto-render cannot express (issue #301 + the all-options-controls slice).
   const FLAG_CATALOG = window.__FLAG_CATALOG__ || {};
 
-  function buildAllOptions(kind, rawPrefill) {
+  function buildAllOptions(kind, rawPrefill, catalogPrefill) {
     const cat = FLAG_CATALOG[kind] || { command: '', flags: [] };
     const det = el('details', 'all-options');
     det.appendChild(el('summary', null, 'All options'));
 
+    // Auto-rendered controls for every renderable (non-curated, non-managed)
+    // flag. The collected value map is keyed by the long flag.
+    const catGetters = [];
+    const renderable = (cat.flags || []).filter(function (f) {
+      return f.renderable;
+    });
+    const preCat = function (flag) {
+      return catalogPrefill ? catalogPrefill[flag] : undefined;
+    };
+    if (renderable.length) {
+      const grid = el('div', 'flag-controls');
+      renderable.forEach(function (f) {
+        const row = el('div', 'opt-row opt-col');
+        if (!f.takesValue) {
+          // Boolean (bare / negate) flag -> checkbox; emits the bare flag.
+          const cb = el('input');
+          cb.type = 'checkbox';
+          if (preCat(f.long) === true) {
+            cb.checked = true;
+            det.open = true;
+          }
+          const lab = el('label', 'opt-bool');
+          lab.appendChild(cb);
+          lab.appendChild(document.createTextNode(' ' + f.long));
+          row.appendChild(lab);
+          catGetters.push(function () {
+            return [f.long, cb.checked];
+          });
+        } else if (f.choices && f.choices.length) {
+          // Value flag with a fixed choice set -> select (blank = unset).
+          row.appendChild(el('span', 'opt-label', f.long));
+          const sel = el('select', 'flag-control');
+          const none = el('option', null, '(default)');
+          none.value = '';
+          sel.appendChild(none);
+          f.choices.forEach(function (c) {
+            const o = el('option', null, c);
+            o.value = c;
+            sel.appendChild(o);
+          });
+          const pv = preCat(f.long);
+          if (pv != null && pv !== '') {
+            sel.value = String(pv);
+            det.open = true;
+          }
+          row.appendChild(sel);
+          catGetters.push(function () {
+            return [f.long, sel.value];
+          });
+        } else {
+          // Value flag -> text input. The placeholder is the flag's own value
+          // token (e.g. file, from the flags' angle-bracket token).
+          row.appendChild(el('span', 'opt-label', f.long));
+          const inp = el('input', 'flag-control');
+          inp.placeholder = f.placeholder || 'value';
+          const pv = preCat(f.long);
+          if (pv != null && pv !== '') {
+            inp.value = String(pv);
+            det.open = true;
+          }
+          row.appendChild(inp);
+          catGetters.push(function () {
+            return [f.long, inp.value];
+          });
+        }
+        if (f.description) row.appendChild(el('div', 'opt-hint', f.description));
+        grid.appendChild(row);
+      });
+      det.appendChild(grid);
+    }
+
     const rawRow = el('div', 'opt-row opt-col');
     rawRow.appendChild(el('span', 'opt-label', 'Raw extra args'));
     const rawIn = el('input', 'raw-args');
@@ -33024,20 +33248,25 @@ const STUDIO_SCRIPT = `
     rawRow.appendChild(el('div', 'opt-hint', hint));
     det.appendChild(rawRow);
 
-    if (cat.flags.length) {
-      const ref = el('div', 'flag-catalog');
-      ref.appendChild(el('div', 'opt-label', 'Available flags'));
-      cat.flags.forEach(function (f) {
-        const row = el('div', 'flag-row');
-        row.appendChild(el('code', 'flag-name', f.flags));
-        if (f.description) row.appendChild(el('span', 'flag-desc', f.description));
-        ref.appendChild(row);
-      });
-      det.appendChild(ref);
-    }
-
     return {
       node: det,
+      // Collect the auto-rendered control values, omitting unset ones (an
+      // unchecked checkbox / a blank input or select) so the posted map carries
+      // only flags the user actually set. Returns undefined when nothing is set.
+      collectCatalog: function () {
+        const out = {};
+        catGetters.forEach(function (g) {
+          const kv = g();
+          const flag = kv[0];
+          const val = kv[1];
+          if (typeof val === 'boolean') {
+            if (val) out[flag] = true;
+          } else if (typeof val === 'string' && val.trim() !== '') {
+            out[flag] = val.trim();
+          }
+        });
+        return Object.keys(out).length ? out : undefined;
+      },
       collectRaw: function () {
         const v = rawIn.value.trim();
         return v === '' ? undefined : v;
@@ -33456,6 +33685,16 @@ const STUDIO_SCRIPT = `
         }
       });
     }
+    // Auto-rendered "All options" controls (the catalog flags). Surface each
+    // set flag so the running view does not look like the picks vanished (the
+    // issue #356 contract): the bare flag for a checked boolean, flag + value
+    // otherwise.
+    if (applied && applied.catalogArgs) {
+      Object.keys(applied.catalogArgs).forEach(function (flag) {
+        const v = applied.catalogArgs[flag];
+        lines.push(v === true ? flag : flag + ' ' + v);
+      });
+    }
     if (applied && applied.imageOverride) {
       lines.push('--image-override ' + applied.imageOverride);
     }
@@ -33474,7 +33713,7 @@ const STUDIO_SCRIPT = `
     return lines;
   }
 
-  async function startServe(id, options, rawArgs, imageOverride, imageOverrides) {
+  async function startServe(id, options, catalogArgs, rawArgs, imageOverride, imageOverrides) {
     // The serve kind (api / alb / ecs) drives which headless command the
     // server spawns; it is recorded on the row when the target list loads.
     const meta = serveMeta.get(id);
@@ -33490,6 +33729,7 @@ const STUDIO_SCRIPT = `
     const watchEl = document.getElementById('sess-watch');
     serveApplied.set(id, {
       options: options,
+      catalogArgs: catalogArgs,
       rawArgs: rawArgs,
       imageOverride: imageOverride,
       imageOverrides: imageOverrides,
@@ -33504,6 +33744,7 @@ const STUDIO_SCRIPT = `
     try {
       const body = { targetId: id, kind };
       if (options) body.options = options;
+      if (catalogArgs) body.catalogArgs = catalogArgs;
       if (rawArgs) body.rawArgs = rawArgs;
       if (imageOverride) body.imageOverride = imageOverride;
       if (imageOverrides) body.imageOverrides = imageOverrides;
@@ -33610,6 +33851,7 @@ const STUDIO_SCRIPT = `
     }
     // Per-run options are only set before a start; collected on the Start click.
     let collectOpts = function () { return undefined; };
+    let collectCatalog = function () { return undefined; };
     let collectRaw = function () { return undefined; };
     let collectImageOverride = function () { return undefined; };
     let collectImageOverrides = function () { return undefined; };
@@ -33623,7 +33865,14 @@ const STUDIO_SCRIPT = `
         serveState.set(id, { status: 'stopped', endpoints: [] });
         renderServeWorkspace(id);
       } else {
-        startServe(id, collectOpts(), collectRaw(), collectImageOverride(), collectImageOverrides());
+        startServe(
+          id,
+          collectOpts(),
+          collectCatalog(),
+          collectRaw(),
+          collectImageOverride(),
+          collectImageOverrides()
+        );
       }
     };
     head.appendChild(btn);
@@ -33663,9 +33912,15 @@ const STUDIO_SCRIPT = `
         ws.appendChild(io.node);
         collectImageOverrides = io.collect;
       }
-      const opt = buildOptions(kind, applied && applied.options, applied && applied.rawArgs);
+      const opt = buildOptions(
+        kind,
+        applied && applied.options,
+        applied && applied.rawArgs,
+        applied && applied.catalogArgs
+      );
       if (opt.node) ws.appendChild(opt.node);
       collectOpts = opt.collect;
+      collectCatalog = opt.collectCatalog;
       collectRaw = opt.collectRaw;
     }
 
@@ -34284,7 +34539,7 @@ const STUDIO_SCRIPT = `
     // target; per-run options are not carried over, so the options section is
     // omitted (the payload is the thing being tweaked). A fresh invoke keeps
     // the per-run options (e.g. env vars) below the event, above Invoke.
-    let opt = { collect: undefined, collectRaw: undefined };
+    let opt = { collect: undefined, collectCatalog: undefined, collectRaw: undefined };
     if (reinvokeOf) {
       composer.appendChild(
         el('div', 'opt-hint', 'Re-invoke runs the edited event through the same target (per-run options use defaults).')
@@ -34312,6 +34567,7 @@ const STUDIO_SCRIPT = `
       msg,
       result,
       collectOpts: opt.collect,
+      collectCatalog: opt.collectCatalog,
       collectRaw: opt.collectRaw,
       reinvokeOf: reinvokeOf || null,
     };
@@ -34350,6 +34606,8 @@ const STUDIO_SCRIPT = `
         body = { targetId: id, kind, event };
         const options = active.collectOpts ? active.collectOpts() : undefined;
         if (options) body.options = options;
+        const catalogArgs = active.collectCatalog ? active.collectCatalog() : undefined;
+        if (catalogArgs) body.catalogArgs = catalogArgs;
         const rawArgs = active.collectRaw ? active.collectRaw() : undefined;
         if (rawArgs) body.rawArgs = rawArgs;
       }
@@ -35544,6 +35802,7 @@ function createStudioDispatcher(config) {
 				eventFile,
 				...buildSharedChildArgs(config, { preferAssembly: true }),
 				...buildPerRunArgs(req.kind, req.options),
+				...buildCatalogArgs(req.kind, req.catalogArgs),
 				...responseFilePath ? ["--response-file", responseFilePath] : []
 			];
 			const envVars = resolveEnvVars(req.kind, req.options);
@@ -36210,6 +36469,7 @@ function createStudioServeManager(config) {
 			...spec.portArgs,
 			...buildSharedChildArgs(config, { preferAssembly }),
 			...buildPerRunArgs(req.kind, req.options),
+			...buildCatalogArgs(req.kind, req.catalogArgs),
 			...envFile ? ["--env-vars", envFile] : [],
 			...req.imageOverride && req.imageOverride.trim() !== "" ? ["--image-override", req.targetId + "=" + req.imageOverride.trim()] : [],
 			...Object.entries(req.imageOverrides ?? {}).flatMap(([svc, df]) => df && df.trim() !== "" ? ["--image-override", svc + "=" + df.trim()] : []),
@@ -36476,7 +36736,7 @@ const STUDIO_TARGET_KINDS = [
 */
 function coerceRunRequest(body) {
 	if (typeof body !== "object" || body === null) throw new Error("Request body must be a JSON object.");
-	const { targetId, kind, event, options, rawArgs, imageOverride, imageOverrides } = body;
+	const { targetId, kind, event, options, catalogArgs, rawArgs, imageOverride, imageOverrides } = body;
 	if (typeof targetId !== "string" || targetId.trim() === "") throw new Error("Request body must include a non-empty \"targetId\" string.");
 	if (typeof kind !== "string" || !STUDIO_TARGET_KINDS.includes(kind)) throw new Error(`Request body "kind" must be one of: ${STUDIO_TARGET_KINDS.join(", ")}.`);
 	let runOptions;
@@ -36486,6 +36746,12 @@ function coerceRunRequest(body) {
 		buildPerRunArgs(kind, runOptions);
 		resolveEnvVars(kind, runOptions);
 	}
+	let runCatalogArgs;
+	if (catalogArgs !== void 0) {
+		if (typeof catalogArgs !== "object" || catalogArgs === null || Array.isArray(catalogArgs)) throw new Error("Request body \"catalogArgs\" must be a JSON object keyed by flag.");
+		runCatalogArgs = catalogArgs;
+		buildCatalogArgs(kind, runCatalogArgs);
+	}
 	let runRawArgs;
 	if (rawArgs !== void 0) {
 		if (typeof rawArgs !== "string") throw new Error("Request body \"rawArgs\" must be a string.");
@@ -36512,6 +36778,7 @@ function coerceRunRequest(body) {
 		kind,
 		event,
 		...runOptions !== void 0 ? { options: runOptions } : {},
+		...runCatalogArgs !== void 0 ? { catalogArgs: runCatalogArgs } : {},
 		...runRawArgs !== void 0 ? { rawArgs: runRawArgs } : {},
 		...runImageOverride !== void 0 ? { imageOverride: runImageOverride } : {},
 		...runImageOverrides !== void 0 ? { imageOverrides: runImageOverrides } : {}
@@ -37317,5 +37584,5 @@ function addStudioSpecificOptions(cmd) {
 }
 
 //#endregion
-export { buildEdgeRequestEvent as $, createJwksCache as $n, resolveSsmParameters as $r, CloudMapRegistry as $t, startAgentCoreHttpServer as A, addInvokeSpecificOptions as An, parseConnectionsPath as Ar, createLocalRunTaskCommand as At, resolveKvsModulesForDistribution as B, materializeLayerFromArn as Bn, substituteAgainstState as Br, resolveSharedSidecarCredentials as Bt, addListSpecificOptions as C, substituteImagePlaceholders as Ci, downloadAndExtractS3Bundle as Cn, VtlEvaluationError as Cr, resolveAlbTarget as Ct, createLocalStartAgentCoreCommand as D, resolveProfileCredentials as Di, renderCodeDockerfile as Dn, ConnectionRegistry as Dr, createLocalStartServiceCommand as Dt, addStartAgentCoreSpecificOptions as E, buildStsClientConfig as Ei, computeCodeImageTag as En, bufferToBody as Er, addStartServiceSpecificOptions as Et, createLocalStartCloudFrontCommand as F, resolveApiTargetSubset as Fn, buildContainerImage as Fr, buildEcsImageResolutionContext$1 as Ft, createS3OriginReader as G, groupRoutesByServer as Gn, createLocalStateProvider as Gr, mergeForService as Gt, resolveDeployedKvsArnByName as H, availableApiIdentifiers as Hn, substituteEnvVarsFromState as Hr, ImageOverrideError as Ht, parseKvsFileOverrides as I, createAuthorizerCache as In, resolveRuntimeCodeMountPath as Ir, ecsClusterOption as It, resolveErrorResponseCandidates as J, resolveSelectionExpression as Jn, resolveCfnFallbackRegion as Jr, runImageOverrideBuilds as Jt, matchBehavior as K, readMtlsMaterialsFromDisk as Kn, isCfnFlagPresent as Kr, parseImageOverrideFlags as Kt, parseOriginOverrides as L, createFileWatcher as Ln, resolveRuntimeFileExtension as Lr, parseMaxTasks as Lt, startAgentCoreWsBridge as M, addStartApiSpecificOptions as Mn, buildDisconnectEvent as Mr, addCommonEcsServiceOptions as Mt, LocalStartCloudFrontError as N, createLocalStartApiCommand as Nn, buildMessageEvent as Nr, addEcsAssumeRoleOptions as Nt, buildAgentCoreServeAuthCheck as O, toCmdArgv as On, buildMgmtEndpointEnvUrl as Or, serviceStrategy as Ot, addStartCloudFrontSpecificOptions as P, createWatchPredicates as Pn, architectureToPlatform as Pr, addImageOverrideOptions as Pt, applyEdgeResponseResult as Q, buildJwksUrlFromIssuer as Qn, collectSsmParameterRefs as Qr, buildCloudMapIndex as Qt, resolveCloudFrontTarget as R, attachStageContext as Rn, resolveRuntimeImage as Rr, parseRestartPolicy as Rt, StudioEventBus as S, formatStateRemedy as Si, waitForAgentCorePing as Sn, tryParseStatus as Sr, parseLbPortOverrides as St, formatTargetListing as T, LocalInvokeBuildError as Ti, buildAgentCoreCodeImage as Tn, probeHostGatewaySupport as Tr, resolveAlbFrontDoor as Tt, resolveDeployedOriginBucket as U, filterRoutesByApiIdentifier as Un, substituteEnvVarsFromStateAsync as Ur, buildImageOverrideTag as Ut, createDeployedKvsDataSource as V, resolveEnvVars$1 as Vn, substituteAgainstStateAsync as Vr, runEcsServiceEmulator as Vt, classifyS3Error as W, filterRoutesByApiIdentifiers as Wn, LocalStateSourceError as Wr, enforceImageOverrideOrphans as Wt, serveLambdaUrlOrigin as X, defaultCredentialsLoader as Xn, resolveCfnStackName as Xr, isLocalCdkAssetImage as Xt, serveFromStaticOrigin as Y, resolveServiceIntegrationParameters as Yn, resolveCfnRegion as Yr, describePinnedImageUri as Yt, applyEdgeRequestResult as Z, buildCognitoJwksUrl as Zn, CfnLocalStateProvider as Zr, listPinnedTargets as Zt, filterStudioTargetGroups as _, AGENTCORE_RUNTIME_TYPE as _i, AGENTCORE_SIGV4_SERVICE as _n, buildHttpApiV2Event as _r, createLocalFileKvsDataSource as _t, createLocalStudioCommand as a, discoverWebSocketApis as ai, addInvokeAgentCoreSpecificOptions as an, evaluateCachedLambdaPolicy as ar, extractKvsAssociations as at, renderStudioHtml as b, resolveAgentCoreTarget as bi, invokeAgentCore as bn, pickResponseTemplate as br, albStrategy as bt, startStudioProxy as c, parseSelectionExpressionPath as ci, invokeAgentCoreWs as cn, attachAuthorizers as cr, pickKvsLogicalIdFromArn as ct, createStudioDispatcher as d, pickRefLogicalId as di, a2aInvokeOnce as dn, buildCorsConfigFromCloudFrontChain as dr, resolveCloudFrontDistribution as dt, resolveWatchConfig as ei, DEFAULT_SHADOW_READY_TIMEOUT_MS as en, verifyCognitoJwt as er, buildEdgeResponseEvent as et, filterStudioCustomResources as f, resolveLambdaArnIntrinsic as fi, MCP_CONTAINER_PORT as fn, isFunctionUrlOacFronted as fr, compileCloudFrontFunction as ft, annotatePinnedEcsTargets as g, AGENTCORE_MCP_PROTOCOL as gi, parseSseForJsonRpc as gn, applyAuthorizerOverlay as gr, createCloudFrontModule as gt, annotateEcsTaskPinnedTargets as h, AGENTCORE_HTTP_PROTOCOL as hi, mcpInvokeOnce as hn, translateLambdaResponse as hr, stripCloudFrontImport as ht, coerceStopRequest as i, availableWebSocketApiIdentifiers as ii, attachContainerLogStreamer as in, computeRequestIdentityHash as ir, describeS3OriginDomain as it, attachAgentCoreWsBridge as j, createLocalInvokeCommand as jn, buildConnectEvent as jr, MAX_TASKS_SUBNET_RANGE_CAP as jt, selectServeInboundAuth as k, classifySourceChange as kn, handleConnectionsRequest as kr, addRunTaskSpecificOptions as kt, relayServeRequest as l, webSocketApiMatchesIdentifier as li, A2A_CONTAINER_PORT as ln, applyCorsResponseHeaders as lr, pickLambdaEdgeFunctionLogicalId as lt, annotateAlbPinnedBackingServices as m, AGENTCORE_AGUI_PROTOCOL as mi, MCP_PROTOCOL_VERSION as mn, matchRoute as mr, runViewerResponse as mt, coerceRunRequest as n, countTargets as ni, setShadowReadyTimeoutMs as nn, verifyJwtViaDiscovery as nr, httpHeadersToEdge as nt, resolveServeBaseUrl as o, discoverWebSocketApisOrThrow as oi, createLocalInvokeAgentCoreCommand as on, invokeRequestAuthorizer as or, isCloudFrontDistribution as ot, isCustomResourceLambdaTarget as p, AGENTCORE_A2A_PROTOCOL as pi, MCP_PATH as pn, matchPreflight as pr, runViewerRequest as pt, startCloudFrontServer as q, startApiServer as qn, rejectExplicitCfnStackWithMultipleStacks as qr, resolveImageOverrides as qt, coerceServeRequest as r, listTargets as ri, getContainerNetworkIp as rn, buildMethodArn as rr, CLOUDFRONT_DISTRIBUTION_TYPE as rt, createStudioServeManager as s, filterWebSocketApisByIdentifiers as si, bridgeAgentCoreWs as sn, invokeTokenAuthorizer as sr, pickFunctionUrlLogicalIdFromOrigin as st, addStudioSpecificOptions as t, resolveSingleTarget as ti, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as tn, verifyJwtAuthorizer as tr, edgeHeadersToHttp as tt, reinvoke as u, discoverRoutes as ui, A2A_PATH as un, buildCorsConfigByApiId as ur, pickTargetFunctionLogicalId as ut, startStudioServer as v, AgentCoreResolutionError as vi, signAgentCoreInvocation as vn, buildRestV1Event as vr, createUnboundCloudFrontModule as vt, createLocalListCommand as w, tryResolveImageFnJoin as wi, SUPPORTED_CODE_RUNTIMES as wn, HOST_GATEWAY_MIN_VERSION as wr, isApplicationLoadBalancer as wt, createStudioStore as x, derivePseudoParametersFromRegion as xi, waitForAgentCoreHttpReady as xn, selectIntegrationResponse as xr, createLocalStartAlbCommand as xt, toStudioTargetGroups as y, pickAgentCoreCandidateStack as yi, AGENTCORE_SESSION_ID_HEADER as yn, evaluateResponseParameters as yr, addAlbSpecificOptions as yt, idFromArn as z, buildStageMap as zn, EcsTaskResolutionError as zr, resolveEcsAssumeRoleOption as zt };
-//# sourceMappingURL=local-studio-BvuYWUHm.js.map
+export { applyEdgeResponseResult as $, buildJwksUrlFromIssuer as $n, collectSsmParameterRefs as $r, buildCloudMapIndex as $t, startAgentCoreHttpServer as A, classifySourceChange as An, handleConnectionsRequest as Ar, addRunTaskSpecificOptions as At, idFromArn as B, buildStageMap as Bn, EcsTaskResolutionError as Br, resolveEcsAssumeRoleOption as Bt, addListSpecificOptions as C, formatStateRemedy as Ci, waitForAgentCorePing as Cn, tryParseStatus as Cr, parseLbPortOverrides as Ct, createLocalStartAgentCoreCommand as D, buildStsClientConfig as Di, computeCodeImageTag as Dn, bufferToBody as Dr, addStartServiceSpecificOptions as Dt, addStartAgentCoreSpecificOptions as E, LocalInvokeBuildError as Ei, buildAgentCoreCodeImage as En, probeHostGatewaySupport as Er, resolveAlbFrontDoor as Et, createLocalStartCloudFrontCommand as F, createWatchPredicates as Fn, architectureToPlatform as Fr, addImageOverrideOptions as Ft, classifyS3Error as G, filterRoutesByApiIdentifiers as Gn, LocalStateSourceError as Gr, enforceImageOverrideOrphans as Gt, createDeployedKvsDataSource as H, resolveEnvVars$1 as Hn, substituteAgainstStateAsync as Hr, runEcsServiceEmulator as Ht, normalizeKvsFileKeys as I, resolveApiTargetSubset as In, buildContainerImage as Ir, buildEcsImageResolutionContext$1 as It, startCloudFrontServer as J, startApiServer as Jn, rejectExplicitCfnStackWithMultipleStacks as Jr, resolveImageOverrides as Jt, createS3OriginReader as K, groupRoutesByServer as Kn, createLocalStateProvider as Kr, mergeForService as Kt, parseKvsFileOverrides as L, createAuthorizerCache as Ln, resolveRuntimeCodeMountPath as Lr, ecsClusterOption as Lt, startAgentCoreWsBridge as M, createLocalInvokeCommand as Mn, buildConnectEvent as Mr, MAX_TASKS_SUBNET_RANGE_CAP as Mt, LocalStartCloudFrontError as N, addStartApiSpecificOptions as Nn, buildDisconnectEvent as Nr, addCommonEcsServiceOptions as Nt, buildAgentCoreServeAuthCheck as O, resolveProfileCredentials as Oi, renderCodeDockerfile as On, ConnectionRegistry as Or, createLocalStartServiceCommand as Ot, addStartCloudFrontSpecificOptions as P, createLocalStartApiCommand as Pn, buildMessageEvent as Pr, addEcsAssumeRoleOptions as Pt, applyEdgeRequestResult as Q, buildCognitoJwksUrl as Qn, CfnLocalStateProvider as Qr, listPinnedTargets as Qt, parseOriginOverrides as R, createFileWatcher as Rn, resolveRuntimeFileExtension as Rr, parseMaxTasks as Rt, StudioEventBus as S, derivePseudoParametersFromRegion as Si, waitForAgentCoreHttpReady as Sn, selectIntegrationResponse as Sr, createLocalStartAlbCommand as St, formatTargetListing as T, tryResolveImageFnJoin as Ti, SUPPORTED_CODE_RUNTIMES as Tn, HOST_GATEWAY_MIN_VERSION as Tr, isApplicationLoadBalancer as Tt, resolveDeployedKvsArnByName as U, availableApiIdentifiers as Un, substituteEnvVarsFromState as Ur, ImageOverrideError as Ut, resolveKvsModulesForDistribution as V, materializeLayerFromArn as Vn, substituteAgainstState as Vr, resolveSharedSidecarCredentials as Vt, resolveDeployedOriginBucket as W, filterRoutesByApiIdentifier as Wn, substituteEnvVarsFromStateAsync as Wr, buildImageOverrideTag as Wt, serveFromStaticOrigin as X, resolveServiceIntegrationParameters as Xn, resolveCfnRegion as Xr, describePinnedImageUri as Xt, resolveErrorResponseCandidates as Y, resolveSelectionExpression as Yn, resolveCfnFallbackRegion as Yr, runImageOverrideBuilds as Yt, serveLambdaUrlOrigin as Z, defaultCredentialsLoader as Zn, resolveCfnStackName as Zr, isLocalCdkAssetImage as Zt, filterStudioTargetGroups as _, AGENTCORE_MCP_PROTOCOL as _i, parseSseForJsonRpc as _n, applyAuthorizerOverlay as _r, createCloudFrontModule as _t, createLocalStudioCommand as a, availableWebSocketApiIdentifiers as ai, attachContainerLogStreamer as an, computeRequestIdentityHash as ar, describeS3OriginDomain as at, renderStudioHtml as b, pickAgentCoreCandidateStack as bi, AGENTCORE_SESSION_ID_HEADER as bn, evaluateResponseParameters as br, addAlbSpecificOptions as bt, startStudioProxy as c, filterWebSocketApisByIdentifiers as ci, bridgeAgentCoreWs as cn, invokeTokenAuthorizer as cr, pickFunctionUrlLogicalIdFromOrigin as ct, createStudioDispatcher as d, discoverRoutes as di, A2A_PATH as dn, buildCorsConfigByApiId as dr, pickTargetFunctionLogicalId as dt, resolveSsmParameters as ei, CloudMapRegistry as en, createJwksCache as er, buildEdgeRequestEvent as et, filterStudioCustomResources as f, pickRefLogicalId as fi, a2aInvokeOnce as fn, buildCorsConfigFromCloudFrontChain as fr, resolveCloudFrontDistribution as ft, annotatePinnedEcsTargets as g, AGENTCORE_HTTP_PROTOCOL as gi, mcpInvokeOnce as gn, translateLambdaResponse as gr, stripCloudFrontImport as gt, annotateEcsTaskPinnedTargets as h, AGENTCORE_AGUI_PROTOCOL as hi, MCP_PROTOCOL_VERSION as hn, matchRoute as hr, runViewerResponse as ht, coerceStopRequest as i, listTargets as ii, getContainerNetworkIp as in, buildMethodArn as ir, CLOUDFRONT_DISTRIBUTION_TYPE as it, attachAgentCoreWsBridge as j, addInvokeSpecificOptions as jn, parseConnectionsPath as jr, createLocalRunTaskCommand as jt, selectServeInboundAuth as k, toCmdArgv as kn, buildMgmtEndpointEnvUrl as kr, serviceStrategy as kt, relayServeRequest as l, parseSelectionExpressionPath as li, invokeAgentCoreWs as ln, attachAuthorizers as lr, pickKvsLogicalIdFromArn as lt, annotateAlbPinnedBackingServices as m, AGENTCORE_A2A_PROTOCOL as mi, MCP_PATH as mn, matchPreflight as mr, runViewerRequest as mt, coerceRunRequest as n, resolveSingleTarget as ni, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as nn, verifyJwtAuthorizer as nr, edgeHeadersToHttp as nt, resolveServeBaseUrl as o, discoverWebSocketApis as oi, addInvokeAgentCoreSpecificOptions as on, evaluateCachedLambdaPolicy as or, extractKvsAssociations as ot, isCustomResourceLambdaTarget as p, resolveLambdaArnIntrinsic as pi, MCP_CONTAINER_PORT as pn, isFunctionUrlOacFronted as pr, compileCloudFrontFunction as pt, matchBehavior as q, readMtlsMaterialsFromDisk as qn, isCfnFlagPresent as qr, parseImageOverrideFlags as qt, coerceServeRequest as r, countTargets as ri, setShadowReadyTimeoutMs as rn, verifyJwtViaDiscovery as rr, httpHeadersToEdge as rt, createStudioServeManager as s, discoverWebSocketApisOrThrow as si, createLocalInvokeAgentCoreCommand as sn, invokeRequestAuthorizer as sr, isCloudFrontDistribution as st, addStudioSpecificOptions as t, resolveWatchConfig as ti, DEFAULT_SHADOW_READY_TIMEOUT_MS as tn, verifyCognitoJwt as tr, buildEdgeResponseEvent as tt, reinvoke as u, webSocketApiMatchesIdentifier as ui, A2A_CONTAINER_PORT as un, applyCorsResponseHeaders as ur, pickLambdaEdgeFunctionLogicalId as ut, startStudioServer as v, AGENTCORE_RUNTIME_TYPE as vi, AGENTCORE_SIGV4_SERVICE as vn, buildHttpApiV2Event as vr, createLocalFileKvsDataSource as vt, createLocalListCommand as w, substituteImagePlaceholders as wi, downloadAndExtractS3Bundle as wn, VtlEvaluationError as wr, resolveAlbTarget as wt, createStudioStore as x, resolveAgentCoreTarget as xi, invokeAgentCore as xn, pickResponseTemplate as xr, albStrategy as xt, toStudioTargetGroups as y, AgentCoreResolutionError as yi, signAgentCoreInvocation as yn, buildRestV1Event as yr, createUnboundCloudFrontModule as yt, resolveCloudFrontTarget as z, attachStageContext as zn, resolveRuntimeImage as zr, parseRestartPolicy as zt };
+//# sourceMappingURL=local-studio-fdztI6b8.js.map