cdk-local 0.147.16 → 0.147.18

package/dist/{local-studio-BJxBmC75.js → local-studio-BIHN-Erp.js}

@@ -8102,6 +8102,136 @@ function extractHashFromImageUri(imageUri) {
 	return /:([a-f0-9]{8,})$/.exec(imageUri)?.[1];
 }
 
+//#endregion
+//#region src/utils/url-authority.ts
+/**
+* Compose the authority component of a URL from a host and a port.
+*
+* Every local serve prints an endpoint banner, and several of those banners
+* are MACHINE-PARSED — `cdkl studio` reads them to learn where to point its
+* capture proxy (`local/studio-serve-manager`'s `readyRe` /
+* `parsePublishedHostEndpoint`), then resolves the result with `new URL(...)`
+* before it will forward anything there. So an authority that the WHATWG
+* parser rejects is not a cosmetic log defect: the serve is refused.
+*
+* The one shape that used to be composed wrong is an IPv6 literal. RFC 3986
+* 3.2.2 requires it to be bracketed inside an authority, so a bare
+* `${host}:${port}` turns `--container-host ::` into `http://:::8080`, which
+* is not a URL — while the IPv4 wildcard `0.0.0.0`, the same intention spelled
+* differently, works. Issue go-to-k/cdk-local#599.
+*
+* The detection is mechanical rather than a list of known values: a colon is
+* forbidden in both a registered name and an IPv4 address, so a host carrying
+* one is an IPv6 literal — PROVIDED the rest of it could be one, which is a
+* character-class test (hex digits, `:`, and `.` for the IPv4-mapped form)
+* rather than an enumeration. The qualifier is load-bearing rather than
+* pedantry: `buildRedirectLocation` fills its host from an ALB `#{host}`
+* template or a configured literal, so a CRLF-injection attempt reaches this
+* function AS-IS — `example.test\r\nx-injected: yes`, with the CR/LF still in
+* it, because `front-door-server` sanitises the Location only AFTER building
+* it. Either way it is a colon in something that is not an address and must
+* pass through untouched rather than gain brackets it never had. (CR and LF
+* are outside the character class by construction, so the raw and flattened
+* spellings classify identically — but the raw one is what actually arrives.)
+* Caught by `front-door-server.test.ts`'s raw-socket injection case.
+*/
+/**
+* A host that could be an IPv6 literal: hex digits, `:` separators, and `.`
+* for the IPv4-mapped form (`::ffff:127.0.0.1`). Deliberately NOT a full
+* grammar — the job is to separate "an address" from "not an address", and
+* validating an address that has already been bound to is not this function's
+* business.
+*/
+const IPV6_LITERAL_CHARS = /^[0-9A-Fa-f:.]+$/;
+/**
+* Render `host` as it must appear inside a URL authority.
+*
+* - An IPv6 literal is bracketed, in either case (`FE80::1` -> `[FE80::1]`).
+* - An already-bracketed literal comes back bracketed exactly once, so the
+*   function is idempotent: `[::1]` never becomes `[[::1]]`. That matters
+*   because a caller often feeds back a `URL.hostname`, which is ALREADY
+*   bracketed.
+* - A zone id (`fe80::1%en0`) is DROPPED, keeping `[fe80::1]`. No URL parser
+*   accepts one — Node's `new URL` throws on both the raw `%en0` and the
+*   percent-encoded `%25en0` — and a zone id is a host-local interface
+*   selector that carries no meaning for whoever reads the banner. Emitting
+*   an authority nothing can parse is the exact failure this helper exists to
+*   prevent, so the scope is dropped rather than propagated. The brackets are
+*   removed BEFORE that decision, so `[fe80::1%en0]` is stripped too — an
+*   early return on "already bracketed" would have waved the one input that
+*   is both bracketed and unparseable straight through.
+* - Everything else (IPv4 literal, registered name, the empty string, and a
+*   colon-bearing string that is not an address) is returned untouched.
+*/
+function formatHostForAuthority(host) {
+	const inner = host.length > 1 && host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+	if (!inner.includes(":")) return host;
+	const zoneAt = inner.indexOf("%");
+	const literal = zoneAt === -1 ? inner : inner.slice(0, zoneAt);
+	if (!IPV6_LITERAL_CHARS.test(literal)) return host;
+	return `[${literal}]`;
+}
+/**
+* Compose `<host>:<port>` for use inside a URL, bracketing an IPv6 literal.
+*
+* An empty `host` is passed through as-is rather than substituted: the helper
+* composes an authority, it does not invent a host, and a caller that has no
+* host has a bug of its own. The result (`:8080`) does not parse, which is the
+* honest rendering of that state.
+*/
+function formatAuthority(host, port) {
+	return `${formatHostForAuthority(host)}:${port}`;
+}
+/**
+* Read the HOST out of an authority (`<host>` or `<host>:<port>`), returning
+* it BARE — an IPv6 literal comes back without its brackets, ready to be
+* handed straight back to {@link formatAuthority}.
+*
+* The inverse of {@link formatAuthority}, and it exists for the same reason:
+* `authority.split(':')[0]` is the obvious thing to write and it is wrong for
+* exactly one input. A conforming client sends `Host: [::1]:8080` (measured —
+* see `tests/unit/local/ipv6-host-header.test.ts`), and splitting that on the
+* first colon yields `'['`, so an ALB `#{host}` substitution built from it
+* produced `http://[:8080/...`. Issue go-to-k/cdk-local#599.
+*
+* # It refuses rather than guesses — on BOTH arms
+*
+* This is an attacker-reachable parser: the request `Host` header feeds an
+* ALB `#{host}` substitution, and whatever comes back is composed into a
+* redirect `Location`. So a malformed authority yields the empty string
+* rather than the fragment that happens to be readable, on either branch.
+*
+* BRACKETED — read to the closing `]`, and only when the value is
+* well-formed: there must BE a closing bracket, and what follows it must be
+* empty or `:<digits>`. Guessing here is the worse of the two directions,
+* because the guess PARSES: `[evil.example` (no closing bracket) would come
+* back as `evil.example`, turning a half-named host into a valid `Location`
+* the client would follow, where the malformed input should have produced
+* nothing. `[a:b]junk` would silently drop its trailing junk, and `[x:y`
+* would return a multi-colon value as a host — the very thing the other arm
+* refuses.
+*
+* UNBRACKETED — the text before its single `:`. Two or more colons yields
+* the empty string: it is not a shape any conforming client sends (Node
+* brackets — measured in `tests/unit/local/ipv6-host-header.test.ts`), it has
+* no unambiguous split, and returning the leading fragment would hand a
+* caller a host that is not the one named. `split(':')[0]` did exactly that —
+* `fe80::1:8080` came back as `'fe80'`.
+*/
+function hostFromAuthority(authority) {
+	if (authority.startsWith("[")) {
+		const close = authority.indexOf("]");
+		if (close === -1) return "";
+		const afterBracket = authority.slice(close + 1);
+		if (afterBracket !== "" && !/^:\d+$/.test(afterBracket)) return "";
+		return authority.slice(1, close);
+	}
+	const firstColon = authority.indexOf(":");
+	if (firstColon === -1) return authority;
+	if (authority.includes(":", firstColon + 1)) return "";
+	return authority.slice(0, firstColon);
+}
+
 //#endregion
 //#region src/local/rie-client.ts
 /**
@@ -8168,7 +8298,7 @@ async function waitForRieReady(host, port, timeoutMs = 5e3) {
 		await setTimeout$1(100);
 	}
 	const tail = lastError instanceof Error ? `: ${lastError.message}` : "";
-	throw new Error(`RIE did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early — check 'docker logs' output.`);
+	throw new Error(`RIE did not become ready on ${formatAuthority(host, port)} within ${timeoutMs}ms${tail}. The container may have exited early — check 'docker logs' output.`);
 }
 /**
 * Issue a tiny HTTP request to confirm RIE's HTTP listener is up (not
@@ -8180,7 +8310,7 @@ async function httpProbe(host, port, timeoutMs) {
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), timeoutMs);
 	try {
-		await (await fetch(`http://${host}:${port}/`, {
+		await (await fetch(`http://${formatAuthority(host, port)}/`, {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: "{}",
@@ -8222,7 +8352,7 @@ function isTransientNetworkError$3(err) {
 * the timeout in v1, but it's the right ballpark.
 */
 async function invokeRie(host, port, event, timeoutMs) {
-	const url = `http://${host}:${port}${INVOKE_PATH}`;
+	const url = `http://${formatAuthority(host, port)}${INVOKE_PATH}`;
 	const body = JSON.stringify(event ?? {});
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), timeoutMs);
@@ -8359,7 +8489,7 @@ const STREAM_BODY_MAX_BYTES = 100 * 1024 * 1024;
 * Readable is destroyed with a clear error when the cap trips.
 */
 async function invokeRieStreaming(host, port, event, timeoutMs) {
-	const url = `http://${host}:${port}${INVOKE_PATH}`;
+	const url = `http://${formatAuthority(host, port)}${INVOKE_PATH}`;
 	const body = JSON.stringify(event ?? {});
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), timeoutMs);
@@ -8747,7 +8877,7 @@ function parseConnectionsPath(url) {
 * Issue #537 item 7.
 */
 function buildMgmtEndpointEnvUrl(host, port, stage) {
-	return `http://${host}:${port}/${stage}`;
+	return `http://${formatAuthority(host, port)}/${stage}`;
 }
 /**
 * `decodeURIComponent` throws `URIError` on malformed input
@@ -16352,6 +16482,24 @@ async function writeProfileCredentialsFile(profileName, creds) {
 
 //#endregion
 //#region src/cli/commands/local-start-api.ts
+/**
+* The `Server listening on <url>  (<label>)` ready banner, terminated with a
+* newline.
+*
+* D8.4 — load-bearing, and the most machine-parsed line in the repo: several
+* integ fixtures grep the prefix and extract the port from it, and
+* `cdkl studio` matches it with `SERVE_SPECS.api.readyRe` and then resolves
+* the captured URL with `new URL(...)` before it will front the serve with a
+* capture proxy. An authority the WHATWG parser rejects therefore does not
+* merely read badly — the studio serve is refused (issue #599).
+*
+* Exported so that contract has a unit test at the EMITTER. Both banner sites
+* live inside the long-running boot function, which has no cheap test seam,
+* so without this the only emitter-side coverage was the source fence.
+*/
+function formatServerListeningBanner(scheme, host, port, pathSuffix, label) {
+	return `Server listening on ${scheme}://${formatAuthority(host, port)}${pathSuffix}  (${label})\n`;
+}
 async function localStartApiCommand(targets, options, extraStateProviders) {
 	const logger = getLogger();
 	if (options.verbose) logger.setLevel("debug");
@@ -16660,10 +16808,10 @@ async function localStartApiCommand(targets, options, extraStateProviders) {
 	warnUnsupportedRoutes(allRoutes, logger);
 	warnSsrfRiskyIntegrations(allRoutes, logger);
 	logger.info(`Per-Lambda concurrency: ${perLambdaConcurrency} (override with --per-lambda-concurrency)`);
-	for (const { group, server } of servers) process.stdout.write(`Server listening on ${server.scheme}://${server.host}:${server.port}  (${group.displayName})\n`);
+	for (const { group, server } of servers) process.stdout.write(formatServerListeningBanner(server.scheme, server.host, server.port, "", group.displayName));
 	for (const ws of wsServers) {
 		const scheme = ws.server.scheme === "https" ? "wss" : "ws";
-		process.stdout.write(`Server listening on ${scheme}://${ws.server.host}:${ws.server.port}${ws.apiPath}  (${ws.api.apiLogicalId} (WebSocket API))\n`);
+		process.stdout.write(formatServerListeningBanner(scheme, ws.server.host, ws.server.port, ws.apiPath, `${ws.api.apiLogicalId} (WebSocket API)`));
 	}
 	process.stdout.write("^C to stop and clean up containers.\n");
 	let watcher;
@@ -17781,7 +17929,7 @@ function filterSpecsForGroup(group, allSpecs) {
 */
 function printPerServerRouteTables(servers) {
 	for (const { group, server } of servers) {
-		process.stdout.write(`\n${group.displayName}  (http://${server.host}:${server.port})\n`);
+		process.stdout.write(`\n${group.displayName}  (http://${formatAuthority(server.host, server.port)})\n`);
 		printRouteTable(group.routes);
 	}
 }
@@ -19254,7 +19402,7 @@ async function waitForAgentCorePing(host, port, timeoutMs = 3e4) {
 		await setTimeout$1(150);
 	}
 	const tail = lastDetail ? `: ${lastDetail}` : "";
-	throw new Error(`AgentCore agent did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve GET ${PING_PATH} — check 'docker logs' output.`);
+	throw new Error(`AgentCore agent did not become ready on ${formatAuthority(host, port)} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve GET ${PING_PATH} — check 'docker logs' output.`);
 }
 /**
 * Issue `GET /ping`. Returns the HTTP status on any response, undefined on
@@ -19265,7 +19413,7 @@ async function pingProbe(host, port, timeoutMs) {
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), timeoutMs);
 	try {
-		const response = await fetch(`http://${host}:${port}${PING_PATH}`, {
+		const response = await fetch(`http://${formatAuthority(host, port)}${PING_PATH}`, {
 			method: "GET",
 			signal: controller.signal
 		});
@@ -19301,7 +19449,7 @@ async function waitForAgentCoreHttpReady(host, port, path, timeoutMs = 3e4) {
 		const controller = new AbortController();
 		const timer = setTimeout(() => controller.abort(), 1e3);
 		try {
-			await (await fetch(`http://${host}:${port}${path}`, {
+			await (await fetch(`http://${formatAuthority(host, port)}${path}`, {
 				method: "POST",
 				headers: { "content-type": "application/json" },
 				body: "{}",
@@ -19317,7 +19465,7 @@ async function waitForAgentCoreHttpReady(host, port, path, timeoutMs = 3e4) {
 		await setTimeout$1(150);
 	}
 	const tail = lastDetail ? `: ${lastDetail}` : "";
-	throw new Error(`AgentCore agent did not become ready on ${host}:${port} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve POST ${path} — check 'docker logs' output.`);
+	throw new Error(`AgentCore agent did not become ready on ${formatAuthority(host, port)} within ${timeoutMs}ms${tail}. The container may have exited early or may not serve POST ${path} — check 'docker logs' output.`);
 }
 /**
 * `fetch()` failures during container boot manifest as a generic
@@ -19345,7 +19493,7 @@ function isTransientNetworkError$2(err) {
 * a missing sink) is buffered into `raw` and returned verbatim.
 */
 async function invokeAgentCore(host, port, event, options) {
-	const url = `http://${host}:${port}${INVOCATIONS_PATH}`;
+	const url = `http://${formatAuthority(host, port)}${INVOCATIONS_PATH}`;
 	const body = JSON.stringify(event ?? {});
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), options.timeoutMs);
@@ -19452,7 +19600,7 @@ async function signAgentCoreInvocation(opts) {
 		path: opts.path,
 		headers: {
 			"Content-Type": "application/json",
-			Host: `${opts.host}:${opts.port}`,
+			Host: formatAuthority(opts.host, opts.port),
 			[AGENTCORE_SESSION_ID_HEADER]: opts.sessionId
 		},
 		body: opts.body
@@ -19513,7 +19661,7 @@ const PROTOCOL_VERSION_HEADER = "MCP-Protocol-Version";
 */
 async function mcpInvokeOnce(host, port, request, options = {}) {
 	const fetchImpl = options.fetchImpl ?? fetch;
-	const url = `http://${host}:${port}${MCP_PATH}`;
+	const url = `http://${formatAuthority(host, port)}${MCP_PATH}`;
 	const requestTimeoutMs = options.requestTimeoutMs ?? 12e4;
 	const sessionId = await initializeWithRetry(fetchImpl, url, options.readyTimeoutMs ?? 3e4);
 	await postMcp(fetchImpl, url, {
@@ -19689,7 +19837,7 @@ const A2A_PATH = "/";
 */
 async function a2aInvokeOnce(host, port, request, options = {}) {
 	const fetchImpl = options.fetchImpl ?? fetch;
-	const url = `http://${host}:${port}${"/"}`;
+	const url = `http://${formatAuthority(host, port)}${"/"}`;
 	const requestTimeoutMs = options.requestTimeoutMs ?? 12e4;
 	const readyTimeoutMs = options.readyTimeoutMs ?? 3e4;
 	const message = await postWithReadyRetry(fetchImpl, url, {
@@ -19801,7 +19949,7 @@ function decodeWsFrame(data) {
 * BridgeAgentCoreWsOptions.onMessage}.
 */
 function bridgeAgentCoreWs(host, port, options) {
-	const ws = new (options.webSocketImpl ?? WebSocket)(`ws://${host}:${port}${WS_PATH}`, { headers: {
+	const ws = new (options.webSocketImpl ?? WebSocket)(`ws://${formatAuthority(host, port)}${WS_PATH}`, { headers: {
 		[AGENTCORE_SESSION_ID_HEADER]: options.sessionId,
 		...options.authorization && { Authorization: options.authorization }
 	} });
@@ -19862,7 +20010,7 @@ function bridgeAgentCoreWs(host, port, options) {
 */
 async function invokeAgentCoreWs(host, port, event, options) {
 	const Impl = options.webSocketImpl ?? WebSocket;
-	const url = `ws://${host}:${port}${WS_PATH}`;
+	const url = `ws://${formatAuthority(host, port)}${WS_PATH}`;
 	const body = JSON.stringify(event ?? {});
 	return new Promise((resolve, reject) => {
 		const ws = new Impl(url, { headers: {
@@ -22364,7 +22512,7 @@ function buildDockerRunArgs(opts) {
 		const hostPort = opts.hostPortOverrides?.[pm.containerPort] ?? declaredHostPort;
 		const overridden = hostPort !== declaredHostPort;
 		const overrideNote = opts.autoRemappedContainerPorts?.has(pm.containerPort) ?? false ? " (privileged-port auto-remap)" : overridden ? " (--host-port override)" : "";
-		getLogger().child("ecs").info(`Container '${container.name}' container port ${pm.containerPort} published on ${containerHost}:${hostPort}${overrideNote}. Reach it at ${containerHost}:${hostPort}.`);
+		getLogger().child("ecs").info(`Container '${container.name}' container port ${pm.containerPort} published on ${formatAuthority(containerHost, hostPort)}${overrideNote}. Reach it at ${formatAuthority(containerHost, hostPort)}.`);
 		args.push("-p", `${containerHost}:${hostPort}:${pm.containerPort}/${pm.protocol}`);
 		publishedEndpoints.push({
 			containerName: container.name,
@@ -24790,7 +24938,7 @@ function buildRedirectLocation(action, req, listenerPort, scheme = "http") {
 	const rawHost = req.headers["host"];
 	const placeholders = {
 		protocol: scheme,
-		host: ((Array.isArray(rawHost) ? rawHost[0] : rawHost) ?? "").split(":")[0] ?? "",
+		host: hostFromAuthority((Array.isArray(rawHost) ? rawHost[0] : rawHost) ?? ""),
 		port: String(listenerPort),
 		path: reqPath.replace(/^\//, ""),
 		query: reqQuery
@@ -24801,7 +24949,7 @@ function buildRedirectLocation(action, req, listenerPort, scheme = "http") {
 	const port = action.port ? fill(action.port) : placeholders["port"];
 	const path = fill(action.path ?? "/#{path}");
 	const query = fill(action.query ?? "#{query}");
-	return `${protocol}://${protocol === "http" && port === "80" || protocol === "https" && port === "443" || port === "" ? host : `${host}:${port}`}${path.startsWith("/") ? path : `/${path}`}${query ? `?${query}` : ""}`;
+	return `${protocol}://${protocol === "http" && port === "80" || protocol === "https" && port === "443" || port === "" ? formatHostForAuthority(host) : formatAuthority(host, port)}${path.startsWith("/") ? path : `/${path}`}${query ? `?${query}` : ""}`;
 }
 /** Synthesize an ALB-style fixed-response. */
 function writeFixedResponse(res, action) {
@@ -27462,7 +27610,7 @@ async function buildFrontDoor(plan, options, logger, extraStateProviders) {
 				} else throw bindErr;
 			}
 			servers.push(server);
-			logger.info(`ALB front-door: ${server.scheme}://${server.host}:${server.port} (listener port ${listener.listenerPort})`);
+			logger.info(`ALB front-door: ${server.scheme}://${formatAuthority(server.host, server.port)} (listener port ${listener.listenerPort})`);
 			if (degradedHttps) logger.warn(`listener port ${listener.listenerPort} is HTTPS in the cloud but serving HTTP locally (X-Forwarded-Proto: https preserved). Pass --tls to terminate TLS locally with a self-signed or user-supplied cert.`);
 			if (listener.defaultAction) logger.info(`  default -> ${describeAction(listener.defaultAction)}`);
 			for (const r of [...listener.rules].sort((a, b) => a.priority - b.priority)) logger.info(`  ${describeConditions(r)} (priority ${r.priority}) -> ${describeAction(r.action)}`);
@@ -27724,12 +27872,12 @@ function logEndpointsBanner(perTarget, frontDoorServers, logger) {
 		for (const ep of endpoints) {
 			const scheme = ep.protocol.toLowerCase() === "udp" ? "udp" : "http";
 			const override = ep.overridden ? "  (--host-port override)" : "";
-			lines.push(`    ${ep.containerName} container port ${ep.containerPort}/${ep.protocol} -> ${scheme}://${ep.host}:${ep.hostPort}${override}`);
+			lines.push(`    ${ep.containerName} container port ${ep.containerPort}/${ep.protocol} -> ${scheme}://${formatAuthority(ep.host, ep.hostPort)}${override}`);
 		}
 	}
 	if (frontDoorServers.length > 0) {
 		lines.push("  ALB front-door");
-		for (const s of frontDoorServers) lines.push(`    ${s.scheme}://${s.host}:${s.port}`);
+		for (const s of frontDoorServers) lines.push(`    ${s.scheme}://${formatAuthority(s.host, s.port)}`);
 	}
 	if (lines.length === 0) return;
 	logger.info("Service endpoints:");
@@ -30607,7 +30755,7 @@ async function startCloudFrontServer(options) {
 	}, handler) : createServer$1(handler);
 	const port = await listen(server, options.host, options.port);
 	return {
-		url: `${scheme}://${options.host}:${port}`,
+		url: `${scheme}://${formatAuthority(options.host, port)}`,
 		port,
 		scheme,
 		update(distribution) {
@@ -31884,7 +32032,7 @@ function startAgentCoreWsBridge(config) {
 			httpServer.on("error", (err) => getLogger().debug(`agentcore-ws bridge server error: ${err.message}`));
 			const port = httpServer.address().port;
 			resolve({
-				url: `ws://${host}:${port}${attached.path}`,
+				url: `ws://${formatAuthority(host, port)}${attached.path}`,
 				port,
 				close: () => new Promise((res) => {
 					attached.close().then(() => httpServer.close(() => res()));
@@ -32057,8 +32205,8 @@ function startAgentCoreHttpServer(config) {
 			httpServer.on("error", (err) => getLogger().debug(`agentcore http serve server error: ${err.message}`));
 			const port = httpServer.address().port;
 			resolve({
-				httpUrl: `http://${host}:${port}`,
-				...bridge && { wsUrl: `ws://${host}:${port}${bridge.path}` },
+				httpUrl: `http://${formatAuthority(host, port)}`,
+				...bridge && { wsUrl: `ws://${formatAuthority(host, port)}${bridge.path}` },
 				port,
 				setContainerPort: (newPort) => {
 					config.containerPort = newPort;
@@ -36256,7 +36404,7 @@ async function startStudioServer(options) {
 	const server = createServer$1((req, res) => handleRequest(req, res, options.bus, html, () => targetsJson, options, instanceId));
 	const boundPort = await listenWithBump(server, host, options.port, maxBump);
 	return {
-		url: `http://${host}:${boundPort}`,
+		url: `http://${formatAuthority(host, boundPort)}`,
 		port: boundPort,
 		close: () => new Promise((resolveClose, reject) => {
 			server.close((err) => err ? reject(err) : resolveClose());
@@ -37271,7 +37419,7 @@ function startStudioProxy(config) {
 			server.removeListener("error", reject);
 			const port = server.address().port;
 			resolve({
-				url: `http://${host}:${port}`,
+				url: `http://${formatAuthority(host, port)}`,
 				port,
 				close: () => new Promise((resolveClose, rejectClose) => {
 					for (const sock of upgradeSockets) sock.destroy();
@@ -37413,6 +37561,12 @@ const SERVE_SPECS = {
 	}
 };
 /**
+* The `ecs-task-runner` replica publish banner, with its authority captured.
+* The authority is a dotted-quad IPv4 or a bracketed IPv6 literal, each
+* followed by `:<port>`.
+*/
+const PUBLISHED_ENDPOINT_RE = /^Container '[^']*' container port \d+ published on ((?:\d{1,3}(?:\.\d{1,3}){3}|\[[0-9A-Fa-f:.]{2,45}\]):\d+)/;
+/**
 * Parse an auto-published replica host endpoint from an `ecs` serve child's
 * stdout (issue #392). `start-service` publishes each replica's declared
 * container port on the host — auto-remapping a privileged port (< 1024) to a
@@ -37432,9 +37586,17 @@ const SERVE_SPECS = {
 * The loopback bound is applied by the CALLER (a parsed endpoint is still only
 * adopted when {@link normalizeLocalUpstream} accepts it), so this stays a pure
 * reader of the banner.
+*
+* The authority half accepts a BRACKETED IPv6 literal alongside the dotted
+* quad (issue go-to-k/cdk-local#599). `ecs-task-runner` composes that banner
+* through `formatAuthority`, so `--container-host ::1` prints
+* `[::1]:54321` — an emitter that brackets and a reader that only knows IPv4
+* is the same defect moved one file over. Brackets are REQUIRED here rather
+* than optional: a bare `::1:54321` has no unambiguous split into host and
+* port, and it is not what the emitter writes.
 */
 function parsePublishedHostEndpoint(line) {
-	const m = /^Container '[^']*' container port \d+ published on (\d{1,3}(?:\.\d{1,3}){3}:\d+)/.exec(line);
+	const m = PUBLISHED_ENDPOINT_RE.exec(line);
 	return m ? `http://${m[1]}` : void 0;
 }
 /**
@@ -38836,4 +38998,4 @@ function addStudioSpecificOptions(cmd) {
 
 //#endregion
 export { applyEdgeResponseResult as $, buildJwksUrlFromIssuer as $n, resolveCfnStackName as $r, buildCloudMapIndex as $t, startAgentCoreHttpServer as A, describeCredentialLoadFailure as Ai, classifySourceChange as An, ConnectionRegistry as Ar, addRunTaskSpecificOptions as At, idFromArn as B, buildStageMap as Bn, resolveRuntimeFileExtension as Br, resolveEcsAssumeRoleOption as Bt, addListSpecificOptions as C, resolveAgentCoreTarget as Ci, waitForAgentCorePing as Cn, tryParseStatus as Cr, parseLbPortOverrides as Ct, createLocalStartAgentCoreCommand as D, tryResolveImageFnJoin as Di, computeCodeImageTag as Dn, probeHostGatewaySupport as Dr, addStartServiceSpecificOptions as Dt, addStartAgentCoreSpecificOptions as E, substituteImagePlaceholders as Ei, buildAgentCoreCodeImage as En, HOST_GATEWAY_MIN_VERSION as Er, resolveAlbFrontDoor as Et, createLocalStartCloudFrontCommand as F, createWatchPredicates as Fn, buildDisconnectEvent as Fr, addImageOverrideOptions as Ft, classifyS3Error as G, filterRoutesByApiIdentifiers as Gn, substituteEnvVarsFromState as Gr, enforceImageOverrideOrphans as Gt, createDeployedKvsDataSource as H, resolveEnvVars$1 as Hn, EcsTaskResolutionError as Hr, runEcsServiceEmulator as Ht, normalizeKvsFileKeys as I, resolveApiTargetSubset as In, buildMessageEvent as Ir, buildEcsImageResolutionContext$1 as It, startCloudFrontServer as J, startApiServer as Jn, createLocalStateProvider as Jr, resolveImageOverrides as Jt, createS3OriginReader as K, groupRoutesByServer as Kn, substituteEnvVarsFromStateAsync as Kr, mergeForService as Kt, parseKvsFileOverrides as L, createAuthorizerCache as Ln, architectureToPlatform as Lr, ecsClusterOption as Lt, startAgentCoreWsBridge as M, resolveProfileCredentials as Mi, createLocalInvokeCommand as Mn, handleConnectionsRequest as Mr, MAX_TASKS_SUBNET_RANGE_CAP as Mt, LocalStartCloudFrontError as N, addStartApiSpecificOptions as Nn, parseConnectionsPath as Nr, addCommonEcsServiceOptions as Nt, buildAgentCoreServeAuthCheck as O, LocalInvokeBuildError as Oi, renderCodeDockerfile as On, resolveHostGatewayExtraHosts as Or, createLocalStartServiceCommand as Ot, addStartCloudFrontSpecificOptions as P, createLocalStartApiCommand as Pn, buildConnectEvent as Pr, addEcsAssumeRoleOptions as Pt, applyEdgeRequestResult as Q, buildCognitoJwksUrl as Qn, resolveCfnRegion as Qr, listPinnedTargets as Qt, parseOriginOverrides as R, createFileWatcher as Rn, buildContainerImage as Rr, parseMaxTasks as Rt, StudioEventBus as S, pickAgentCoreCandidateStack as Si, waitForAgentCoreHttpReady as Sn, selectIntegrationResponse as Sr, createLocalStartAlbCommand as St, formatTargetListing as T, formatStateRemedy as Ti, SUPPORTED_CODE_RUNTIMES as Tn, HOST_DOCKER_INTERNAL_GATEWAY as Tr, isApplicationLoadBalancer as Tt, resolveDeployedKvsArnByName as U, availableApiIdentifiers as Un, substituteAgainstState as Ur, ImageOverrideError as Ut, resolveKvsModulesForDistribution as V, materializeLayerFromArn as Vn, resolveRuntimeImage as Vr, resolveSharedSidecarCredentials as Vt, resolveDeployedOriginBucket as W, filterRoutesByApiIdentifier as Wn, substituteAgainstStateAsync as Wr, buildImageOverrideTag as Wt, serveFromStaticOrigin as X, resolveServiceIntegrationParameters as Xn, rejectExplicitCfnStackWithMultipleStacks as Xr, describePinnedImageUri as Xt, resolveErrorResponseCandidates as Y, resolveSelectionExpression as Yn, isCfnFlagPresent as Yr, runImageOverrideBuilds as Yt, serveLambdaUrlOrigin as Z, defaultCredentialsLoader as Zn, resolveCfnFallbackRegion as Zr, isLocalCdkAssetImage as Zt, filterStudioTargetGroups as _, AGENTCORE_AGUI_PROTOCOL as _i, parseSseForJsonRpc as _n, applyAuthorizerOverlay as _r, createCloudFrontModule as _t, createLocalStudioCommand as a, countTargets as ai, attachContainerLogStreamer as an, computeRequestIdentityHash as ar, describeS3OriginDomain as at, renderStudioHtml as b, AGENTCORE_RUNTIME_TYPE as bi, AGENTCORE_SESSION_ID_HEADER as bn, evaluateResponseParameters as br, addAlbSpecificOptions as bt, startStudioProxy as c, discoverWebSocketApis as ci, bridgeAgentCoreWs as cn, invokeTokenAuthorizer as cr, pickFunctionUrlLogicalIdFromOrigin as ct, createStudioDispatcher as d, parseSelectionExpressionPath as di, A2A_PATH as dn, buildCorsConfigByApiId as dr, pickTargetFunctionLogicalId as dt, CfnLocalStateProvider as ei, CloudMapRegistry as en, createJwksCache as er, buildEdgeRequestEvent as et, filterStudioCustomResources as f, webSocketApiMatchesIdentifier as fi, a2aInvokeOnce as fn, buildCorsConfigFromCloudFrontChain as fr, resolveCloudFrontDistribution as ft, annotatePinnedEcsTargets as g, AGENTCORE_A2A_PROTOCOL as gi, mcpInvokeOnce as gn, translateLambdaResponse as gr, stripCloudFrontImport as gt, annotateEcsTaskPinnedTargets as h, resolveLambdaArnIntrinsic as hi, MCP_PROTOCOL_VERSION as hn, matchRoute as hr, runViewerResponse as ht, coerceStopRequest as i, resolveSingleTarget as ii, getContainerNetworkIp as in, buildMethodArn as ir, CLOUDFRONT_DISTRIBUTION_TYPE as it, attachAgentCoreWsBridge as j, buildStsClientConfig as ji, addInvokeSpecificOptions as jn, buildMgmtEndpointEnvUrl as jr, createLocalRunTaskCommand as jt, selectServeInboundAuth as k, describeAwsFailureForWarn as ki, toCmdArgv as kn, bufferToBody as kr, serviceStrategy as kt, relayServeRequest as l, discoverWebSocketApisOrThrow as li, invokeAgentCoreWs as ln, attachAuthorizers as lr, pickKvsLogicalIdFromArn as lt, annotateAlbPinnedBackingServices as m, pickRefLogicalId as mi, MCP_PATH as mn, matchPreflight as mr, runViewerRequest as mt, coerceRunRequest as n, resolveSsmParameters as ni, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as nn, verifyJwtAuthorizer as nr, edgeHeadersToHttp as nt, resolveServeBaseUrl as o, listTargets as oi, addInvokeAgentCoreSpecificOptions as on, evaluateCachedLambdaPolicy as or, extractKvsAssociations as ot, isCustomResourceLambdaTarget as p, discoverRoutes as pi, MCP_CONTAINER_PORT as pn, isFunctionUrlOacFronted as pr, compileCloudFrontFunction as pt, matchBehavior as q, readMtlsMaterialsFromDisk as qn, LocalStateSourceError as qr, parseImageOverrideFlags as qt, coerceServeRequest as r, resolveWatchConfig as ri, setShadowReadyTimeoutMs as rn, verifyJwtViaDiscovery as rr, httpHeadersToEdge as rt, createStudioServeManager as s, availableWebSocketApiIdentifiers as si, createLocalInvokeAgentCoreCommand as sn, invokeRequestAuthorizer as sr, isCloudFrontDistribution as st, addStudioSpecificOptions as t, collectSsmParameterRefs as ti, DEFAULT_SHADOW_READY_TIMEOUT_MS as tn, verifyCognitoJwt as tr, buildEdgeResponseEvent as tt, reinvoke as u, filterWebSocketApisByIdentifiers as ui, A2A_CONTAINER_PORT as un, applyCorsResponseHeaders as ur, pickLambdaEdgeFunctionLogicalId as ut, startStudioServer as v, AGENTCORE_HTTP_PROTOCOL as vi, AGENTCORE_SIGV4_SERVICE as vn, buildHttpApiV2Event as vr, createLocalFileKvsDataSource as vt, createLocalListCommand as w, derivePseudoParametersFromRegion as wi, downloadAndExtractS3Bundle as wn, VtlEvaluationError as wr, resolveAlbTarget as wt, createStudioStore as x, AgentCoreResolutionError as xi, invokeAgentCore as xn, pickResponseTemplate as xr, albStrategy as xt, toStudioTargetGroups as y, AGENTCORE_MCP_PROTOCOL as yi, signAgentCoreInvocation as yn, buildRestV1Event as yr, createUnboundCloudFrontModule as yt, resolveCloudFrontTarget as z, attachStageContext as zn, resolveRuntimeCodeMountPath as zr, parseRestartPolicy as zt };
-//# sourceMappingURL=local-studio-BJxBmC75.js.map
+//# sourceMappingURL=local-studio-BIHN-Erp.js.map