cdk-local 0.149.7 → 0.149.9

package/README.md

@@ -200,6 +200,8 @@ Each top-level JSON key picks which target to overlay:
 
 `--env-vars` overlays the env block after the template's literals and any resolved ECS `Secrets[]` have been applied. A per-target key (from the table above) wins over `Parameters`. A `null` value clears the key — use the JSON literal `null`, not the string `"null"`.
 
+CloudFormation dynamic references in a container's env — `{{resolve:secretsmanager:...}}`, `{{resolve:ssm:...}}`, `{{resolve:ssm-secure:...}}` — are resolved with your credentials before the container starts, as CloudFormation resolves them for the deployed resource. A lookup that fails stops the command with an error naming the reference and the IAM permission instead of passing the token through, and an `--env-vars` override of the variable skips the lookup. Rules: [docs/cli-reference.md#environment-variables](docs/cli-reference.md#environment-variables).
+
 `--env-vars` can be combined with `--from-cfn-stack`: the latter resolves intrinsics (`Ref` / `Fn::ImportValue` / `Fn::GetStackOutput` / `Fn::GetAtt`) against the deployed stack first, then `--env-vars` overlays your overrides on top. Running standalone (no `--from-cfn-stack`), env vars whose template value is an intrinsic can't be resolved and are dropped with a warning — `--env-vars` is how you supply a concrete value for them.
 
 When pointing a container at a tunneled VPC resource (e.g. an Aurora cluster reached via a local port forward), use `host.docker.internal` instead of `127.0.0.1` — `127.0.0.1` inside the container is the container itself, not the host where the tunnel listens.

package/dist/cdkl-io-host-DYuHWzAS.js

@@ -0,0 +1,26 @@
+import { n as resolveConfiguredLogLevel } from "./logger-CuUAMAnt.js";
+import { NonInteractiveIoHost } from "@aws-cdk/toolkit-lib";
+
+//#region src/synthesis/cdkl-io-host.ts
+var CdklIoHost = class extends NonInteractiveIoHost {
+	suppressNonWarnings = (() => {
+		const level = resolveConfiguredLogLevel();
+		return level === "warn" || level === "error";
+	})();
+	async notify(msg) {
+		if (isStackIdTemplateHint(msg)) return;
+		const reclassified = msg.code === "CDK_ASSEMBLY_E1002" || msg.code === "CDK_TOOLKIT_I1901" || msg.code === "CDK_TOOLKIT_I1902" ? {
+			...msg,
+			level: "info"
+		} : msg;
+		if (this.suppressNonWarnings && reclassified.level !== "warn" && reclassified.level !== "error") return;
+		return super.notify(reclassified);
+	}
+};
+function isStackIdTemplateHint(msg) {
+	return msg.code === void 0 && typeof msg.message === "string" && msg.message.startsWith("Supply a stack id ") && msg.message.includes("to display its template");
+}
+
+//#endregion
+export { CdklIoHost };
+//# sourceMappingURL=cdkl-io-host-DYuHWzAS.js.map

package/dist/cdkl-io-host-DYuHWzAS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdkl-io-host-DYuHWzAS.js","names":[],"sources":["../src/synthesis/cdkl-io-host.ts"],"mappings":";;;;AAoDA,IAAa,aAAb,cAAgC,qBAAqB;CACnD,AAAiB,6BAA6B;EAC5C,MAAM,QAAQ,0BAA0B;EACxC,OAAO,UAAU,UAAU,UAAU;CACvC,EAAC,CAAE;CAEH,MAAM,OAAO,KAAwC;EACnD,IAAI,sBAAsB,GAAG,GAC3B;EAGF,MAAM,eACJ,IAAI,SAAS,wBACb,IAAI,SAAS,uBACb,IAAI,SAAS,sBACT;GAAE,GAAG;GAAK,OAAO;EAAgB,IACjC;EAEN,IACE,KAAK,uBACL,aAAa,UAAU,UACvB,aAAa,UAAU,SAEvB;EAEF,OAAO,MAAM,OAAO,YAAY;CAClC;AACF;AAQA,SAAS,sBAAsB,KAAkC;CAC/D,OACE,IAAI,SAAS,UACb,OAAO,IAAI,YAAY,YACvB,IAAI,QAAQ,WAAW,oBAAoB,KAC3C,IAAI,QAAQ,SAAS,yBAAyB;AAElD"}

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { D as createLocalStartAgentCoreCommand, F as createLocalStartCloudFrontCommand, Mn as createLocalInvokeCommand, Ot as createLocalStartServiceCommand, Pn as createLocalStartApiCommand, St as createLocalStartAlbCommand, a as createLocalStudioCommand, jt as createLocalRunTaskCommand, sn as createLocalInvokeAgentCoreCommand, w as createLocalListCommand } from "./local-studio-U-gD2HSf.js";
+import { D as createLocalStartAgentCoreCommand, F as createLocalStartCloudFrontCommand, Mn as createLocalInvokeCommand, Ot as createLocalStartServiceCommand, Pn as createLocalStartApiCommand, St as createLocalStartAlbCommand, a as createLocalStudioCommand, jt as createLocalRunTaskCommand, sn as createLocalInvokeAgentCoreCommand, w as createLocalListCommand } from "./local-studio-CcK2y5Gs.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.149.7");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.149.9");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalInvokeAgentCoreCommand());
 program.addCommand(createLocalStartApiCommand());

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","names":[],"sources":["../src/cli/index.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from 'commander';\nimport { createLocalInvokeCommand } from './commands/local-invoke.js';\nimport { createLocalInvokeAgentCoreCommand } from './commands/local-invoke-agentcore.js';\nimport { createLocalStartApiCommand } from './commands/local-start-api.js';\nimport { createLocalRunTaskCommand } from './commands/local-run-task.js';\nimport { createLocalStartServiceCommand } from './commands/local-start-service.js';\nimport { createLocalStartAlbCommand } from './commands/local-start-alb.js';\nimport { createLocalStartCloudFrontCommand } from './commands/local-start-cloudfront.js';\nimport { createLocalStartAgentCoreCommand } from './commands/local-start-agentcore.js';\nimport { createLocalListCommand } from './commands/local-list.js';\nimport { createLocalStudioCommand } from './commands/local-studio.js';\n\ndeclare const __CDK_LOCAL_VERSION__: string;\n\nconst program = new Command();\nprogram\n  .name('cdkl')\n  .description('Run AWS CDK stacks locally with Docker.')\n  .version(__CDK_LOCAL_VERSION__);\n\nprogram.addCommand(createLocalInvokeCommand());\nprogram.addCommand(createLocalInvokeAgentCoreCommand());\nprogram.addCommand(createLocalStartApiCommand());\nprogram.addCommand(createLocalRunTaskCommand());\nprogram.addCommand(createLocalStartServiceCommand());\nprogram.addCommand(createLocalStartAlbCommand());\nprogram.addCommand(createLocalStartCloudFrontCommand());\nprogram.addCommand(createLocalStartAgentCoreCommand());\nprogram.addCommand(createLocalListCommand());\nprogram.addCommand(createLocalStudioCommand());\n\nvoid program.parseAsync(process.argv);\n"],"mappings":";;;;;AAgBA,MAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,MAAM,CAAC,CACZ,YAAY,yCAAyC,CAAC,CACtD,iBAA6B;AAEhC,QAAQ,WAAW,yBAAyB,CAAC;AAC7C,QAAQ,WAAW,kCAAkC,CAAC;AACtD,QAAQ,WAAW,2BAA2B,CAAC;AAC/C,QAAQ,WAAW,0BAA0B,CAAC;AAC9C,QAAQ,WAAW,+BAA+B,CAAC;AACnD,QAAQ,WAAW,2BAA2B,CAAC;AAC/C,QAAQ,WAAW,kCAAkC,CAAC;AACtD,QAAQ,WAAW,iCAAiC,CAAC;AACrD,QAAQ,WAAW,uBAAuB,CAAC;AAC3C,QAAQ,WAAW,yBAAyB,CAAC;AAExC,QAAQ,WAAW,QAAQ,IAAI"}
+{"version":3,"file":"cli.js","names":[],"sources":["../src/cli/index.ts"],"mappings":";;;;;AAgBA,MAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,MAAM,CAAC,CACZ,YAAY,yCAAyC,CAAC,CACtD,iBAA6B;AAEhC,QAAQ,WAAW,yBAAyB,CAAC;AAC7C,QAAQ,WAAW,kCAAkC,CAAC;AACtD,QAAQ,WAAW,2BAA2B,CAAC;AAC/C,QAAQ,WAAW,0BAA0B,CAAC;AAC9C,QAAQ,WAAW,+BAA+B,CAAC;AACnD,QAAQ,WAAW,2BAA2B,CAAC;AAC/C,QAAQ,WAAW,kCAAkC,CAAC;AACtD,QAAQ,WAAW,iCAAiC,CAAC;AACrD,QAAQ,WAAW,uBAAuB,CAAC;AAC3C,QAAQ,WAAW,yBAAyB,CAAC;AAExC,QAAQ,WAAW,QAAQ,IAAI"}

package/dist/docker-cmd-C2kvSLVs.js

@@ -0,0 +1,557 @@
+import { t as getLogger } from "./logger-CuUAMAnt.js";
+import { readlinkSync, realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { spinner } from "@clack/prompts";
+import { spawn } from "node:child_process";
+
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) {
+		__defProp(target, name, {
+			get: all[name],
+			enumerable: true
+		});
+	}
+	if (!no_symbols) {
+		__defProp(target, Symbol.toStringTag, { value: "Module" });
+	}
+	return target;
+};
+
+//#endregion
+//#region src/local/embed-config.ts
+const DEFAULTS = {
+	cliName: "cdkl",
+	binaryName: "cdkl",
+	productName: "cdk-local",
+	resourceNamePrefix: "cdkl",
+	awsBindMountPath: "/cdk-local-aws",
+	envPrefix: "CDKL",
+	sigV4StrictByDefault: false,
+	sigV4OptFlag: "--strict-sigv4"
+};
+let current = DEFAULTS;
+function setEmbedConfig(config) {
+	current = {
+		cliName: config?.cliName ?? DEFAULTS.cliName,
+		binaryName: config?.binaryName ?? DEFAULTS.binaryName,
+		productName: config?.productName ?? DEFAULTS.productName,
+		resourceNamePrefix: config?.resourceNamePrefix ?? DEFAULTS.resourceNamePrefix,
+		awsBindMountPath: config?.awsBindMountPath ?? DEFAULTS.awsBindMountPath,
+		envPrefix: config?.envPrefix ?? DEFAULTS.envPrefix,
+		sigV4StrictByDefault: config?.sigV4StrictByDefault ?? DEFAULTS.sigV4StrictByDefault,
+		sigV4OptFlag: config?.sigV4OptFlag ?? DEFAULTS.sigV4OptFlag
+	};
+}
+function getEmbedConfig() {
+	return current;
+}
+function resetEmbedConfig() {
+	current = DEFAULTS;
+}
+
+//#endregion
+//#region src/local/credential-error.ts
+const SERVICE_MESSAGE_MAX = 512;
+function stringifyThrown(err) {
+	try {
+		return err instanceof Error ? String(err.message) : String(err);
+	} catch {
+		return "[unstringifiable throw]";
+	}
+}
+function clampErrorName(err) {
+	let rawKind;
+	try {
+		rawKind = err instanceof Error ? err.name : "unknown";
+	} catch {
+		return "unknown";
+	}
+	return typeof rawKind === "string" && /^[A-Za-z0-9_.-]{1,64}$/.test(rawKind) ? rawKind : "unknown";
+}
+function clampErrorCode(err) {
+	if (!err || typeof err !== "object") return void 0;
+	let raw;
+	try {
+		raw = err.code;
+	} catch {
+		return;
+	}
+	if (typeof raw !== "string") return void 0;
+	return /^[A-Za-z0-9_.-]{1,64}$/.test(raw) ? raw : void 0;
+}
+function isAwsServiceException(err) {
+	if (!err || typeof err !== "object") return false;
+	const candidate = err;
+	try {
+		return Boolean(candidate.$metadata) && (candidate.$fault === "client" || candidate.$fault === "server");
+	} catch {
+		return false;
+	}
+}
+function flattenToOneLine(message) {
+	return message.replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}\p{Cs}]/gu, " ");
+}
+function sanitizeServiceExceptionMessage(message) {
+	const points = [...flattenToOneLine(message)];
+	if (points.length <= SERVICE_MESSAGE_MAX) return points.join("");
+	return `${points.slice(0, SERVICE_MESSAGE_MAX).join("")}[... truncated; ${points.length}-character message]`;
+}
+function describeCredentialLoadFailure(err) {
+	const code = clampErrorCode(err);
+	return `${code === void 0 ? clampErrorName(err) : `${clampErrorName(err)} ${code}`}; ${stringifyThrown(err).length}-character message withheld, logged at debug level under --verbose`;
+}
+function describeAwsFailureForWarn(err, operation) {
+	if (isAwsServiceException(err)) return `${clampErrorName(err)}: ${sanitizeServiceExceptionMessage(stringifyThrown(err))}`;
+	getLogger().debug(`${operation}: the AWS SDK's own failure message was: ${flattenToOneLine(stringifyThrown(err))}`);
+	return describeCredentialLoadFailure(err);
+}
+
+//#endregion
+//#region src/utils/assembly-path.ts
+function isInside(base, candidate) {
+	const rel = relative(base, candidate);
+	if (rel === "" || rel === "..") return false;
+	if (rel.startsWith(`..${sep}`)) return false;
+	return !isAbsolute(rel);
+}
+function tryRealpath(p) {
+	try {
+		return realpathSync.native(p);
+	} catch {
+		return;
+	}
+}
+function tryReadlink(p) {
+	try {
+		return readlinkSync(p);
+	} catch {
+		return;
+	}
+}
+const MAX_LINK_HOPS = 40;
+const MAX_PATH_COMPONENTS = 1e3;
+function resolveThroughLinks(target, hops = 0, climbs = 0) {
+	const direct = tryRealpath(target);
+	if (direct !== void 0) return direct;
+	if (hops >= MAX_LINK_HOPS) return void 0;
+	if (climbs >= MAX_PATH_COMPONENTS) return void 0;
+	const parent = dirname(target);
+	if (parent === target) return void 0;
+	const realParent = resolveThroughLinks(parent, hops, climbs + 1);
+	if (realParent === void 0) return void 0;
+	const link = tryReadlink(target);
+	if (link === void 0) return join(realParent, basename(target));
+	return resolveThroughLinks(resolve(realParent, link), hops + 1, climbs);
+}
+function resolveAssemblyPath(dir, candidate, options) {
+	const base = resolve(dir);
+	const bound = options?.containWithin === void 0 ? base : resolve(options.containWithin);
+	const joined = resolve(join(base, candidate));
+	if (!isInside(bound, joined)) return {
+		contained: false,
+		escape: "lexical",
+		path: joined
+	};
+	const realBound = resolveThroughLinks(bound);
+	if (realBound !== void 0) {
+		const realTarget = resolveThroughLinks(joined);
+		if (realTarget !== void 0 && !isInside(realBound, realTarget)) return {
+			contained: false,
+			escape: "symlink",
+			path: joined,
+			realPath: realTarget
+		};
+	}
+	return {
+		contained: true,
+		path: joined
+	};
+}
+function absoluteAssemblyPathEscape(bound, absolutePath) {
+	const resolvedBound = resolve(bound);
+	const target = resolve(absolutePath);
+	const lexicallyOutside = !isInside(resolvedBound, target) && target !== resolvedBound;
+	const realBound = resolveThroughLinks(resolvedBound);
+	const realTarget = resolveThroughLinks(target);
+	const reallyOutside = realBound === void 0 || realTarget === void 0 ? void 0 : !isInside(realBound, realTarget) && realTarget !== realBound;
+	if (lexicallyOutside) {
+		if (reallyOutside === false) return void 0;
+		return {
+			contained: false,
+			escape: "lexical",
+			path: target
+		};
+	}
+	if (reallyOutside === true) return {
+		contained: false,
+		escape: "symlink",
+		path: target,
+		realPath: realTarget
+	};
+}
+function namesTheSameDirectory(bound, candidate) {
+	const resolvedBound = resolve(bound);
+	const target = resolve(candidate);
+	if (target === resolvedBound) return true;
+	const realBound = resolveThroughLinks(resolvedBound);
+	const realTarget = resolveThroughLinks(target);
+	return realBound !== void 0 && realTarget !== void 0 && realBound === realTarget;
+}
+function assemblyPathEscape(base, bound, candidate) {
+	if (isAbsolute(candidate)) return absoluteAssemblyPathEscape(bound, candidate);
+	const resolved = resolveAssemblyPath(base, candidate, { containWithin: bound });
+	if (resolved.contained || namesTheSameDirectory(bound, resolved.path)) return void 0;
+	return resolved;
+}
+function renderAssemblyPathEscape(escape, dir, action, provenanceOverride) {
+	const provenance = provenanceOverride ?? `CDK emits assembly paths that stay inside the assembly directory; one that leaves it indicates the synth output was hand-modified or generated by a non-CDK toolchain. Refusing to ${action}.`;
+	const base = resolve(dir);
+	const realBase = resolveThroughLinks(base) ?? base;
+	const shownPath = displayUntrustedValue(escape.path);
+	const shownBase = displayUntrustedValue(base);
+	if (escape.escape === "symlink") {
+		if (escape.realPath === realBase) return `resolves to ${shownPath}, a symbolic link to the directory ${shownBase} itself rather than to a path inside it. ${provenance}`;
+		return `resolves to ${shownPath}, which leads through a symbolic link to ${displayUntrustedValue(escape.realPath)}, outside ${shownBase}. ${provenance}`;
+	}
+	if (escape.path === base) return `names the directory ${shownBase} itself rather than a path inside it. ${provenance}`;
+	return `resolves to ${shownPath}, outside ${shownBase}. ${provenance}`;
+}
+const VISIBLE_LETTER = new RegExp(String.raw`^(?![\p{Default_Ignorable_Code_Point}\u02b0-\u02ff\u0374\u0559\u07f4\u07f5\ua78b\ua78c\uff9e\uff9f])[\p{L}\p{N}]$`, "u");
+const COMBINING_MARK = /^\p{M}$/u;
+const DEFAULT_IGNORABLE = /^\p{Default_Ignorable_Code_Point}$/u;
+const BARE_PUNCTUATION = /^[/\\._~+@:=-]$/;
+function classify(chars) {
+	let afterLetter = false;
+	return chars.map((ch) => {
+		if (DEFAULT_IGNORABLE.test(ch)) {
+			afterLetter = false;
+			return "escaped";
+		}
+		if (COMBINING_MARK.test(ch)) return afterLetter ? "bare" : "escaped";
+		afterLetter = VISIBLE_LETTER.test(ch);
+		if (afterLetter || BARE_PUNCTUATION.test(ch)) return "bare";
+		return ch >= " " && ch <= "~" ? "shown" : "escaped";
+	});
+}
+function displayUntrustedValue(value) {
+	const clean = sanitizeServiceExceptionMessage(value);
+	const chars = Array.from(clean);
+	const kinds = classify(chars);
+	if (clean === value && chars.length > 0 && kinds.every((k) => k === "bare")) return clean;
+	let body = "";
+	chars.forEach((ch, i) => {
+		if (ch === "\"" || ch === "\\") body += `\\${ch}`;
+		else if (kinds[i] !== "escaped") body += ch;
+		else for (let u = 0; u < ch.length; u++) body += `\\u${ch.charCodeAt(u).toString(16).padStart(4, "0")}`;
+	});
+	return `"${body}"`;
+}
+
+//#endregion
+//#region src/utils/docker-cmd.ts
+var docker_cmd_exports = /* @__PURE__ */ __exportAll({
+	DOCKER_CLIENT_ENV_KEYS: () => DOCKER_CLIENT_ENV_KEYS,
+	DOCKER_CLIENT_ENV_PREFIXES: () => DOCKER_CLIENT_ENV_PREFIXES,
+	DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS: () => DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS,
+	allowSecretsOnArgvEnvName: () => allowSecretsOnArgvEnvName,
+	finchSecretArgvRefusal: () => finchSecretArgvRefusal,
+	formatDockerLoginError: () => formatDockerLoginError,
+	getDockerCmd: () => getDockerCmd,
+	isDockerClientEnvKey: () => isDockerClientEnvKey,
+	isFinchVmClient: () => isFinchVmClient,
+	isMalformedEnvKey: () => isMalformedEnvKey,
+	runDockerForeground: () => runDockerForeground,
+	runDockerStreaming: () => runDockerStreaming,
+	spawnForeground: () => spawnForeground,
+	spawnStreaming: () => spawnStreaming,
+	warnFinchArgvExposure: () => warnFinchArgvExposure
+});
+function getDockerCmd() {
+	const override = process.env["CDK_DOCKER"];
+	return override && override.length > 0 ? override : "docker";
+}
+function isFinchVmClient(cmd = getDockerCmd(), platform = process.platform) {
+	if (platform !== "darwin" && platform !== "win32") return false;
+	const base = (cmd.split(/[\\/]/).pop() ?? "").toLowerCase();
+	return base === "finch" || base === "finch.exe";
+}
+function allowSecretsOnArgvEnvName() {
+	return `${getEmbedConfig().envPrefix}_ALLOW_SECRETS_ON_ARGV`;
+}
+function secretsOnArgvAllowed() {
+	const v = process.env[allowSecretsOnArgvEnvName()];
+	return v !== void 0 && ["1", "true"].includes(v.trim().toLowerCase());
+}
+function finchSecretArgvRefusal(secretNames, subject) {
+	if (secretNames.length === 0 || !isFinchVmClient() || secretsOnArgvAllowed()) return void 0;
+	const names = [...new Set(secretNames)];
+	return `${subject.label} ${displayUntrustedValue(subject.name)}: refusing to forward secret(s) ${names.map(displayUntrustedValue).join(", ")} under CDK_DOCKER=finch on macOS / Windows. finch turns each value-less '-e KEY' into '-e KEY=<value>' on the command line of the limactl process it starts, where other local processes can read the plaintext. Use a container client that keeps the value off the command line (for example the default 'docker', by unsetting CDK_DOCKER), or set ${allowSecretsOnArgvEnvName()}=1 to accept that exposure while it stays set.`;
+}
+const finchArgvWarned = /* @__PURE__ */ new Set();
+function warnFinchArgvExposure(keys) {
+	if (keys.length === 0 || !isFinchVmClient()) return;
+	const names = [...new Set(keys)].sort();
+	const latch = JSON.stringify(names);
+	if (finchArgvWarned.has(latch)) return;
+	finchArgvWarned.add(latch);
+	getLogger().warn(`CDK_DOCKER=finch on macOS / Windows puts the values of ${names.map(displayUntrustedValue).join(", ")} on the command line of the limactl process it starts (finch turns a value-less '-e KEY' into '-e KEY=<value>'), where other local processes can read them. The default 'docker' client keeps them off the command line.`);
+}
+async function runDockerStreaming(args, options = {}) {
+	return spawnStreaming(getDockerCmd(), args, options);
+}
+async function spawnStreaming(cmd, args, options = {}) {
+	const streamLive = options.streamLive ?? getLogger().getLevel() === "debug";
+	const env = options.env ? mergeEnv(options.env) : void 0;
+	const spin = startProgressSpinner(options.progressLabel, streamLive);
+	return new Promise((resolve, reject) => {
+		let child;
+		try {
+			child = spawn(cmd, args, {
+				cwd: options.cwd,
+				env,
+				stdio: [
+					options.input ? "pipe" : "ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+		} catch (err) {
+			stopProgressSpinner(spin, options.progressLabel);
+			reject(err);
+			return;
+		}
+		const stdoutChunks = [];
+		const stderrChunks = [];
+		child.stdout.on("data", (chunk) => {
+			stdoutChunks.push(chunk);
+			if (streamLive) process.stdout.write(chunk);
+		});
+		child.stderr.on("data", (chunk) => {
+			stderrChunks.push(chunk);
+			if (streamLive) process.stderr.write(chunk);
+		});
+		child.once("error", (err) => {
+			stopProgressSpinner(spin, options.progressLabel);
+			if (err.code === "ENOENT") {
+				const usingOverride = process.env["CDK_DOCKER"] === cmd && cmd !== "docker";
+				const shownCmd = displayUntrustedValue(cmd);
+				reject(/* @__PURE__ */ new Error(usingOverride ? `Failed to find and execute ${shownCmd} (resolved via CDK_DOCKER). Install ${shownCmd} or unset CDK_DOCKER to fall back to 'docker'.` : `Failed to find and execute ${shownCmd}. Install Docker (or set the 'CDK_DOCKER' environment variable to a compatible binary such as podman / finch).`));
+			} else {
+				const wrapped = /* @__PURE__ */ new Error(`Failed to execute ${displayUntrustedValue(cmd)} (${err.code ?? "spawn error"})`);
+				if (err.code !== void 0) wrapped.code = err.code;
+				reject(wrapped);
+			}
+		});
+		child.once("close", (code) => {
+			const stdout = Buffer.concat(stdoutChunks).toString("utf-8");
+			const stderr = Buffer.concat(stderrChunks).toString("utf-8");
+			if (code === 0) {
+				stopProgressSpinner(spin, options.progressLabel);
+				resolve({
+					stdout,
+					stderr
+				});
+			} else {
+				stopProgressSpinner(spin, options.progressLabel);
+				const message = stderr.trim() || stdout.trim() || `${displayUntrustedValue(cmd)} exited with code ${code}`;
+				const err = new Error(message);
+				err.stderr = stderr;
+				err.stdout = stdout;
+				err.exitCode = code;
+				reject(err);
+			}
+		});
+		if (options.input !== void 0) {
+			child.stdin.on("error", () => {});
+			child.stdin.write(options.input);
+			child.stdin.end();
+		}
+	});
+}
+function startProgressSpinner(label, streamLive) {
+	if (label === void 0 || streamLive || process.stdout.isTTY !== true) return void 0;
+	const spin = spinner();
+	spin.start(label);
+	return spin;
+}
+function stopProgressSpinner(spin, label) {
+	if (spin === void 0) return;
+	spin.stop(label ?? "");
+}
+async function runDockerForeground(args, options = {}) {
+	return spawnForeground(getDockerCmd(), args, options);
+}
+async function spawnForeground(cmd, args, options = {}) {
+	const env = options.env ? mergeEnv(options.env) : void 0;
+	return new Promise((resolve, reject) => {
+		const child = spawn(cmd, args, {
+			cwd: options.cwd,
+			env,
+			stdio: "inherit"
+		});
+		child.once("error", (err) => {
+			if (err.code === "ENOENT") {
+				const usingOverride = process.env["CDK_DOCKER"] === cmd && cmd !== "docker";
+				const shownCmd = displayUntrustedValue(cmd);
+				reject(/* @__PURE__ */ new Error(usingOverride ? `Failed to find and execute ${shownCmd} (resolved via CDK_DOCKER). Install ${shownCmd} or unset CDK_DOCKER to fall back to 'docker'.` : `Failed to find and execute ${shownCmd}. Install Docker (or set the 'CDK_DOCKER' environment variable to a compatible binary such as podman / finch).`));
+			} else reject(/* @__PURE__ */ new Error(`${cmd} failed: ${err.message}`));
+		});
+		child.once("close", (code) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error(`${cmd} exited with code ${code}`));
+		});
+	});
+}
+function formatDockerLoginError(stderr, endpoint) {
+	const trimmed = stderr.trim();
+	if (trimmed.includes("already exists in the keychain") || trimmed.includes("Error saving credentials")) return `docker's credential helper (osxkeychain on macOS / wincred on Windows / pass / secretservice on Linux) failed to persist the ECR auth token. The "already exists in the keychain" / "Error saving credentials" output is a known docker-credential-helpers issue — unrelated to ${getEmbedConfig().productName}, AWS credentials, or IAM perms. Quick fix: run \`docker logout ${endpoint}\` to clear the stale entry, then retry the ${getEmbedConfig().productName} command. Permanent fix: edit ~/.docker/config.json and remove (or empty) the platform-specific "credsStore" entry (e.g. "osxkeychain" → "" or "desktop" on macOS Docker Desktop). Original docker stderr: ${trimmed}`;
+	return trimmed;
+}
+function mergeEnv(overrides) {
+	const merged = { ...process.env };
+	for (const [k, v] of Object.entries(overrides)) if (v === void 0) delete merged[k];
+	else merged[k] = v;
+	return merged;
+}
+const DOCKER_CLIENT_ENV_KEYS = /* @__PURE__ */ new Set([
+	"PATH",
+	"PATHEXT",
+	"HOME",
+	"USERPROFILE",
+	"HOMEDRIVE",
+	"HOMEPATH",
+	"DOCKER_HOST",
+	"DOCKER_CONTEXT",
+	"DOCKER_CONFIG",
+	"DOCKER_CERT_PATH",
+	"DOCKER_TLS",
+	"DOCKER_TLS_VERIFY",
+	"DOCKER_API_VERSION",
+	"DOCKER_AUTH_CONFIG",
+	"DOCKER_DEFAULT_PLATFORM",
+	"DOCKER_CUSTOM_HEADERS",
+	"DOCKER_CONTENT_TRUST",
+	"DOCKER_CONTENT_TRUST_SERVER",
+	"DOCKER_HIDE_LEGACY_COMMANDS",
+	"BUILDKIT_PROGRESS",
+	"GLIBC_TUNABLES",
+	"GCONV_PATH",
+	"BASH_ENV",
+	"SHELLOPTS",
+	"PS4",
+	"PYTHONPATH",
+	"PYTHONHOME",
+	"PYTHONUSERBASE",
+	"PYTHONPYCACHEPREFIX",
+	"PYTHONPLATLIBDIR",
+	"PYTHONWARNINGS",
+	"BROWSER",
+	"REQUESTS_CA_BUNDLE",
+	"CURL_CA_BUNDLE",
+	"HTTPLIB2_CA_CERTS",
+	"SSLKEYLOGFILE",
+	"GCE_METADATA_HOST",
+	"GCE_METADATA_ROOT",
+	"GCE_METADATA_IP",
+	"NODE_OPTIONS",
+	"NODE_PATH",
+	"NODE_COMPILE_CACHE",
+	"NODE_EXTRA_CA_CERTS",
+	"NODE_TLS_REJECT_UNAUTHORIZED",
+	"RUBYOPT",
+	"RUBYLIB",
+	"GEM_PATH",
+	"GEM_HOME",
+	"RUBYGEMS_GEMDEPS",
+	"PERL5OPT",
+	"PERL5LIB",
+	"PERLLIB",
+	"PERL5DB",
+	"OPENSSL_CONF",
+	"OPENSSL_MODULES",
+	"OPENSSL_ENGINES",
+	"SSH_AUTH_SOCK",
+	"SSH_ASKPASS",
+	"SSH_ASKPASS_REQUIRE",
+	"SSH_SK_HELPER",
+	"SSH_SK_PROVIDER",
+	"SSH_PKCS11_HELPER",
+	"SSH_AGENT_PID",
+	"AWS_ENDPOINT_URL",
+	"AWS_CA_BUNDLE",
+	"AWS_PROFILE",
+	"AWS_CONFIG_FILE",
+	"AWS_SHARED_CREDENTIALS_FILE",
+	"AWS_WEB_IDENTITY_TOKEN_FILE",
+	"AWS_CONTAINER_CREDENTIALS_FULL_URI",
+	"AWS_ROLE_ARN",
+	"AWS_EC2_METADATA_SERVICE_ENDPOINT",
+	"AWS_ECR_CACHE_DIR",
+	"CONTAINER_HOST",
+	"CONTAINER_CONNECTION",
+	"CONTAINER_SSHKEY",
+	"PODMAN_CONNECTIONS_CONF",
+	"CONTAINER_PROXY",
+	"CONTAINERS_SSH_CONF",
+	"CONTAINERS_CONF",
+	"CONTAINERS_CONF_OVERRIDE",
+	"CONTAINERS_REGISTRIES_CONF",
+	"CONTAINERS_REGISTRIES_CONF_OVERRIDE",
+	"REGISTRIES_CONFIG_PATH",
+	"CONTAINERS_STORAGE_CONF",
+	"CONTAINERS_STORAGE_CONF_OVERRIDE",
+	"CONTAINERS_POLICY_JSON",
+	"STORAGE_OPTS",
+	"CONTAINERS_HELPER_BINARY_DIR",
+	"REGISTRY_AUTH_FILE",
+	"DBUS_SESSION_BUS_ADDRESS",
+	"NOTIFY_SOCKET",
+	"XDG_CONFIG_HOME",
+	"XDG_RUNTIME_DIR",
+	"APPDATA",
+	"PROGRAMDATA",
+	"PROGRAMFILES",
+	"LOCALAPPDATA",
+	"SSH",
+	"CONTAINERD_ADDRESS",
+	"CONTAINERD_NAMESPACE",
+	"NERDCTL_TOML",
+	"CNI_PATH",
+	"NETCONFPATH",
+	"ROOTLESSKIT_STATE_DIR",
+	"NERDCTL_LOG_FILE",
+	"SSL_CERT_FILE",
+	"SSL_CERT_DIR",
+	"GODEBUG",
+	"HTTP_PROXY",
+	"HTTPS_PROXY",
+	"NO_PROXY",
+	"FTP_PROXY",
+	"ALL_PROXY"
+]);
+const DOCKER_CLIENT_ENV_KEYS_UPPER = new Set([...DOCKER_CLIENT_ENV_KEYS].map((k) => k.toUpperCase()));
+const DOCKER_CLIENT_ENV_PREFIXES = [
+	"LD_",
+	"DYLD_",
+	"AWS_ENDPOINT_URL_",
+	"CLOUDSDK_",
+	"BASH_FUNC_"
+];
+const DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS = /* @__PURE__ */ new Set(["CLOUDSDK_AUTH_ACCESS_TOKEN"]);
+function isDockerClientEnvKey(key) {
+	const upper = key.toUpperCase();
+	if (DOCKER_CLIENT_ENV_KEYS_UPPER.has(upper)) return true;
+	if (DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS.has(upper)) return false;
+	return DOCKER_CLIENT_ENV_PREFIXES.some((prefix) => upper.startsWith(prefix));
+}
+const WELL_FORMED_ENV_KEY = /^[^=\u0000]+$/;
+function isMalformedEnvKey(key) {
+	return !WELL_FORMED_ENV_KEY.test(key);
+}
+
+//#endregion
+export { stringifyThrown as C, setEmbedConfig as E, sanitizeServiceExceptionMessage as S, resetEmbedConfig as T, clampErrorName as _, isDockerClientEnvKey as a, flattenToOneLine as b, runDockerStreaming as c, absoluteAssemblyPathEscape as d, assemblyPathEscape as f, resolveAssemblyPath as g, renderAssemblyPathEscape as h, getDockerCmd as i, spawnStreaming as l, namesTheSameDirectory as m, finchSecretArgvRefusal as n, isMalformedEnvKey as o, displayUntrustedValue as p, formatDockerLoginError as r, runDockerForeground as s, docker_cmd_exports as t, warnFinchArgvExposure as u, describeAwsFailureForWarn as v, getEmbedConfig as w, isAwsServiceException as x, describeCredentialLoadFailure as y };
+//# sourceMappingURL=docker-cmd-C2kvSLVs.js.map

package/dist/docker-cmd-C2kvSLVs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-cmd-C2kvSLVs.js","names":["createSpinner"],"sources":["../src/local/embed-config.ts","../src/local/credential-error.ts","../src/utils/assembly-path.ts","../src/utils/docker-cmd.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAqFA,MAAM,WAAgC;CACpC,SAAS;CACT,YAAY;CACZ,aAAa;CACb,oBAAoB;CACpB,kBAAkB;CAClB,WAAW;CACX,sBAAsB;CACtB,cAAc;AAChB;AAEA,IAAI,UAA+B;AAQnC,SAAgB,eAAe,QAAoC;CACjE,UAAU;EACR,SAAS,QAAQ,WAAW,SAAS;EACrC,YAAY,QAAQ,cAAc,SAAS;EAC3C,aAAa,QAAQ,eAAe,SAAS;EAC7C,oBAAoB,QAAQ,sBAAsB,SAAS;EAC3D,kBAAkB,QAAQ,oBAAoB,SAAS;EACvD,WAAW,QAAQ,aAAa,SAAS;EACzC,sBAAsB,QAAQ,wBAAwB,SAAS;EAC/D,cAAc,QAAQ,gBAAgB,SAAS;CACjD;AACF;AAGA,SAAgB,iBAAsC;CACpD,OAAO;AACT;AAGA,SAAgB,mBAAyB;CACvC,UAAU;AACZ;;;;ACgEA,MAAM,sBAAsB;AA2B5B,SAAgB,gBAAgB,KAAsB;CACpD,IAAI;EACF,OAAO,eAAe,QAAQ,OAAO,IAAI,OAAO,IAAI,OAAO,GAAG;CAChE,QAAQ;EACN,OAAO;CACT;AACF;AA0BA,SAAgB,eAAe,KAAsB;CAMnD,IAAI;CACJ,IAAI;EACF,UAAU,eAAe,QAAQ,IAAI,OAAO;CAC9C,QAAQ;EACN,OAAO;CACT;CACA,OAAO,OAAO,YAAY,YAAY,yBAAyB,KAAK,OAAO,IACvE,UACA;AACN;AA4BA,SAAgB,eAAe,KAAkC;CAC/D,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO;CAC5C,IAAI;CACJ,IAAI;EACF,MAAO,IAA2B;CACpC,QAAQ;EACN;CACF;CACA,IAAI,OAAO,QAAQ,UAAU,OAAO;CACpC,OAAO,yBAAyB,KAAK,GAAG,IAAI,MAAM;AACpD;AAoBA,SAAgB,sBAAsB,KAAuB;CAC3D,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO;CAC5C,MAAM,YAAY;CAClB,IAAI;EACF,OACE,QAAQ,UAAU,SAAS,MAC1B,UAAU,WAAW,YAAY,UAAU,WAAW;CAE3D,QAAQ;EAIN,OAAO;CACT;AACF;AAkCA,SAAgB,iBAAiB,SAAyB;CACxD,OAAO,QAAQ,QAAQ,sCAAsC,GAAG;AAClE;AAqBA,SAAgB,gCAAgC,SAAyB;CASvE,MAAM,SAAS,CAAC,GAAG,iBAAiB,OAAO,CAAC;CAC5C,IAAI,OAAO,UAAU,qBAAqB,OAAO,OAAO,KAAK,EAAE;CAC/D,OAAO,GAAG,OAAO,MAAM,GAAG,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE,kBAAkB,OAAO,OAAO;AAC1F;AAoDA,SAAgB,8BAA8B,KAAsB;CAClE,MAAM,OAAO,eAAe,GAAG;CAE/B,OAAO,GADM,SAAS,SAAY,eAAe,GAAG,IAAI,GAAG,eAAe,GAAG,EAAE,GAAG,OACnE,IAAI,gBAAgB,GAAG,CAAC,CAAC,OAAO;AACjD;AAsCA,SAAgB,0BAA0B,KAAc,WAA2B;CACjF,IAAI,sBAAsB,GAAG,GAC3B,OAAO,GAAG,eAAe,GAAG,EAAE,IAAI,gCAAgC,gBAAgB,GAAG,CAAC;CAExF,UAAU,CAAC,CAAC,MACV,GAAG,UAAU,2CAA2C,iBAAiB,gBAAgB,GAAG,CAAC,GAC/F;CACA,OAAO,8BAA8B,GAAG;AAC1C;;;;ACzbA,SAAS,SAAS,MAAc,WAA4B;CAC1D,MAAM,MAAM,SAAS,MAAM,SAAS;CACpC,IAAI,QAAQ,MAAM,QAAQ,MAAM,OAAO;CACvC,IAAI,IAAI,WAAW,KAAK,KAAK,GAAG,OAAO;CAKvC,OAAO,CAAC,WAAW,GAAG;AACxB;AAaA,SAAS,YAAY,GAA+B;CAClD,IAAI;EACF,OAAO,aAAa,OAAO,CAAC;CAC9B,QAAQ;EACN;CACF;AACF;AAGA,SAAS,YAAY,GAA+B;CAClD,IAAI;EACF,OAAO,aAAa,CAAC;CACvB,QAAQ;EACN;CACF;AACF;AASA,MAAM,gBAAgB;AAkBtB,MAAM,sBAAsB;AA8B5B,SAAS,oBAAoB,QAAgB,OAAO,GAAG,SAAS,GAAuB;CACrF,MAAM,SAAS,YAAY,MAAM;CACjC,IAAI,WAAW,QAAW,OAAO;CACjC,IAAI,QAAQ,eAAe,OAAO;CAClC,IAAI,UAAU,qBAAqB,OAAO;CAE1C,MAAM,SAAS,QAAQ,MAAM;CAG7B,IAAI,WAAW,QAAQ,OAAO;CAI9B,MAAM,aAAa,oBAAoB,QAAQ,MAAM,SAAS,CAAC;CAC/D,IAAI,eAAe,QAAW,OAAO;CAErC,MAAM,OAAO,YAAY,MAAM;CAC/B,IAAI,SAAS,QAGX,OAAO,KAAK,YAAY,SAAS,MAAM,CAAC;CAO1C,OAAO,oBAAoB,QAAQ,YAAY,IAAI,GAAG,OAAO,GAAG,MAAM;AACxE;AAuBA,SAAgB,oBACd,KACA,WACA,SAsBsB;CACtB,MAAM,OAAO,QAAQ,GAAG;CACxB,MAAM,QAAQ,SAAS,kBAAkB,SAAY,OAAO,QAAQ,QAAQ,aAAa;CACzF,MAAM,SAAS,QAAQ,KAAK,MAAM,SAAS,CAAC;CAE5C,IAAI,CAAC,SAAS,OAAO,MAAM,GACzB,OAAO;EAAE,WAAW;EAAO,QAAQ;EAAW,MAAM;CAAO;CAK7D,MAAM,YAAY,oBAAoB,KAAK;CAC3C,IAAI,cAAc,QAAW;EAC3B,MAAM,aAAa,oBAAoB,MAAM;EAC7C,IAAI,eAAe,UAAa,CAAC,SAAS,WAAW,UAAU,GAC7D,OAAO;GAAE,WAAW;GAAO,QAAQ;GAAW,MAAM;GAAQ,UAAU;EAAW;CAErF;CAEA,OAAO;EAAE,WAAW;EAAM,MAAM;CAAO;AACzC;AAiDA,SAAgB,2BACd,OACA,cACgC;CAChC,MAAM,gBAAgB,QAAQ,KAAK;CACnC,MAAM,SAAS,QAAQ,YAAY;CACnC,MAAM,mBAAmB,CAAC,SAAS,eAAe,MAAM,KAAK,WAAW;CAExE,MAAM,YAAY,oBAAoB,aAAa;CACnD,MAAM,aAAa,oBAAoB,MAAM;CAC7C,MAAM,gBACJ,cAAc,UAAa,eAAe,SACtC,SACA,CAAC,SAAS,WAAW,UAAU,KAAK,eAAe;CAEzD,IAAI,kBAAkB;EAGpB,IAAI,kBAAkB,OAAO,OAAO;EACpC,OAAO;GAAE,WAAW;GAAO,QAAQ;GAAW,MAAM;EAAO;CAC7D;CACA,IAAI,kBAAkB,MACpB,OAAO;EAAE,WAAW;EAAO,QAAQ;EAAW,MAAM;EAAQ,UAAU;CAAY;AAGtF;AAkBA,SAAgB,sBAAsB,OAAe,WAA4B;CAC/E,MAAM,gBAAgB,QAAQ,KAAK;CACnC,MAAM,SAAS,QAAQ,SAAS;CAChC,IAAI,WAAW,eAAe,OAAO;CACrC,MAAM,YAAY,oBAAoB,aAAa;CACnD,MAAM,aAAa,oBAAoB,MAAM;CAC7C,OAAO,cAAc,UAAa,eAAe,UAAa,cAAc;AAC9E;AAaA,SAAgB,mBACd,MACA,OACA,WACgC;CAChC,IAAI,WAAW,SAAS,GAAG,OAAO,2BAA2B,OAAO,SAAS;CAC7E,MAAM,WAAW,oBAAoB,MAAM,WAAW,EAAE,eAAe,MAAM,CAAC;CAC9E,IAAI,SAAS,aAAa,sBAAsB,OAAO,SAAS,IAAI,GAAG,OAAO;CAC9E,OAAO;AACT;AAcA,SAAgB,yBACd,QACA,KACA,QACA,oBACQ;CACR,MAAM,aACJ,sBACA,sLAEiB,OAAO;CAC1B,MAAM,OAAO,QAAQ,GAAG;CAMxB,MAAM,WAAW,oBAAoB,IAAI,KAAK;CAG9C,MAAM,YAAY,sBAAsB,OAAO,IAAI;CACnD,MAAM,YAAY,sBAAsB,IAAI;CAC5C,IAAI,OAAO,WAAW,WAAW;EAC/B,IAAI,OAAO,aAAa,UACtB,OACE,eAAe,UAAU,qCACtB,UAAU,2CAA2C;EAG5D,OACE,eAAe,UAAU,2CACtB,sBAAsB,OAAO,QAAQ,EAAE,YAAY,UAAU,IAAI;CAExE;CACA,IAAI,OAAO,SAAS,MAClB,OAAO,uBAAuB,UAAU,wCAAwC;CAElF,OAAO,eAAe,UAAU,YAAY,UAAU,IAAI;AAC5D;AAYA,MAAM,iBAAiB,IAAI,OACzB,OAAO,GAAG,qHACV,GACF;AAOA,MAAM,iBAAiB;AAUvB,MAAM,oBAAoB;AAO1B,MAAM,mBAAmB;AAYzB,SAAS,SAAS,OAA+D;CAC/E,IAAI,cAAc;CAClB,OAAO,MAAM,KAAK,OAAO;EACvB,IAAI,kBAAkB,KAAK,EAAE,GAAG;GAC9B,cAAc;GACd,OAAO;EACT;EACA,IAAI,eAAe,KAAK,EAAE,GAAG,OAAO,cAAc,SAAS;EAC3D,cAAc,eAAe,KAAK,EAAE;EACpC,IAAI,eAAe,iBAAiB,KAAK,EAAE,GAAG,OAAO;EACrD,OAAO,MAAM,OAAO,MAAM,MAAM,UAAU;CAC5C,CAAC;AACH;AA8BA,SAAgB,sBAAsB,OAAuB;CAC3D,MAAM,QAAQ,gCAAgC,KAAK;CAGnD,MAAM,QAAQ,MAAM,KAAK,KAAK;CAC9B,MAAM,QAAQ,SAAS,KAAK;CAC5B,IAAI,UAAU,SAAS,MAAM,SAAS,KAAK,MAAM,OAAO,MAAM,MAAM,MAAM,GAAG,OAAO;CACpF,IAAI,OAAO;CACX,MAAM,SAAS,IAAI,MAAM;EACvB,IAAI,OAAO,QAAO,OAAO,MAAM,QAAQ,KAAK;OACvC,IAAI,MAAM,OAAO,WAAW,QAAQ;OAEvC,KAAK,IAAI,IAAI,GAAG,IAAI,GAAG,QAAQ,KAC7B,QAAQ,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CAGjE,CAAC;CACD,OAAO,IAAI,KAAK;AAClB;;;;;;;;;;;;;;;;;;;;;AC5fA,SAAgB,eAAuB;CACrC,MAAM,WAAW,QAAQ,IAAI;CAC7B,OAAO,YAAY,SAAS,SAAS,IAAI,WAAW;AACtD;AAmBA,SAAgB,gBACd,MAAc,aAAa,GAC3B,WAA4B,QAAQ,UAC3B;CACT,IAAI,aAAa,YAAY,aAAa,SAAS,OAAO;CAC1D,MAAM,QAAQ,IAAI,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK,GAAE,CAAE,YAAY;CAC1D,OAAO,SAAS,WAAW,SAAS;AACtC;AASA,SAAgB,4BAAoC;CAClD,OAAO,GAAG,eAAe,CAAC,CAAC,UAAU;AACvC;AAEA,SAAS,uBAAgC;CACvC,MAAM,IAAI,QAAQ,IAAI,0BAA0B;CAChD,OAAO,MAAM,UAAa,CAAC,KAAK,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC;AACzE;AAsBA,SAAgB,uBACd,aACA,SACoB;CACpB,IAAI,YAAY,WAAW,KAAK,CAAC,gBAAgB,KAAK,qBAAqB,GAAG,OAAO;CACrF,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,WAAW,CAAC;CACtC,OACE,GAAG,QAAQ,MAAM,GAAG,sBAAsB,QAAQ,IAAI,EAAE,kCACrD,MAAM,IAAI,qBAAqB,CAAC,CAAC,KAAK,IAAI,EAAE,wVAK5C,0BAA0B,EAAE;AAEnC;AAGA,MAAM,kCAAkB,IAAI,IAAY;AAaxC,SAAgB,sBAAsB,MAA+B;CACnE,IAAI,KAAK,WAAW,KAAK,CAAC,gBAAgB,GAAG;CAC7C,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK;CACtC,MAAM,QAAQ,KAAK,UAAU,KAAK;CAClC,IAAI,gBAAgB,IAAI,KAAK,GAAG;CAChC,gBAAgB,IAAI,KAAK;CACzB,UAAU,CAAC,CAAC,KACV,0DAA0D,MAAM,IAAI,qBAAqB,CAAC,CAAC,KAAK,IAAI,EAAE,yNAIxG;AACF;AAkFA,eAAsB,mBACpB,MACA,UAA4B,CAAC,GACP;CACtB,OAAO,eAAe,aAAa,GAAG,MAAM,OAAO;AACrD;AAOA,eAAsB,eACpB,KACA,MACA,UAA4B,CAAC,GACP;CACtB,MAAM,aAAa,QAAQ,cAAc,UAAU,CAAC,CAAC,SAAS,MAAM;CACpE,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ,GAAG,IAAI;CAClD,MAAM,OAAO,qBAAqB,QAAQ,eAAe,UAAU;CAEnE,OAAO,IAAI,SAAsB,SAAS,WAAW;EAQnD,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,KAAK,MAAM;IACvB,KAAK,QAAQ;IACb;IACA,OAAO;KAAC,QAAQ,QAAQ,SAAS;KAAU;KAAQ;IAAM;GAC3D,CAAC;EACH,SAAS,KAAK;GACZ,oBAAoB,MAAM,QAAQ,aAAa;GAC/C,OAAO,GAAY;GACnB;EACF;EAEA,MAAM,eAAyB,CAAC;EAChC,MAAM,eAAyB,CAAC;EAEhC,MAAM,OAAQ,GAAG,SAAS,UAAkB;GAC1C,aAAa,KAAK,KAAK;GACvB,IAAI,YAAY,QAAQ,OAAO,MAAM,KAAK;EAC5C,CAAC;EACD,MAAM,OAAQ,GAAG,SAAS,UAAkB;GAC1C,aAAa,KAAK,KAAK;GACvB,IAAI,YAAY,QAAQ,OAAO,MAAM,KAAK;EAC5C,CAAC;EAED,MAAM,KAAK,UAAU,QAA+B;GAClD,oBAAoB,MAAM,QAAQ,aAAa;GAC/C,IAAI,IAAI,SAAS,UAAU;IACzB,MAAM,gBAAgB,QAAQ,IAAI,kBAAkB,OAAO,QAAQ;IACnE,MAAM,WAAW,sBAAsB,GAAG;IAC1C,uBACE,IAAI,MACF,gBACI,8BAA8B,SAAS,sCAC1B,SAAS,kDACtB,8BAA8B,SAAS,+GAE7C,CACF;GACF,OAAO;IAKL,MAAM,0BAAU,IAAI,MAClB,qBAAqB,sBAAsB,GAAG,EAAE,IAAI,IAAI,QAAQ,cAAc,EAChF;IACA,IAAI,IAAI,SAAS,QAAW,QAAQ,OAAO,IAAI;IAC/C,OAAO,OAAO;GAChB;EACF,CAAC;EAED,MAAM,KAAK,UAAU,SAAS;GAC5B,MAAM,SAAS,OAAO,OAAO,YAAY,CAAC,CAAC,SAAS,OAAO;GAC3D,MAAM,SAAS,OAAO,OAAO,YAAY,CAAC,CAAC,SAAS,OAAO;GAC3D,IAAI,SAAS,GAAG;IACd,oBAAoB,MAAM,QAAQ,aAAa;IAC/C,QAAQ;KAAE;KAAQ;IAAO,CAAC;GAC5B,OAAO;IACL,oBAAoB,MAAM,QAAQ,aAAa;IAM/C,MAAM,UACJ,OAAO,KAAK,KACZ,OAAO,KAAK,KACZ,GAAG,sBAAsB,GAAG,EAAE,oBAAoB;IACpD,MAAM,MAAM,IAAI,MAAM,OAAO;IAC7B,IAAI,SAAS;IACb,IAAI,SAAS;IACb,IAAI,WAAW;IACf,OAAO,GAAG;GACZ;EACF,CAAC;EAED,IAAI,QAAQ,UAAU,QAAW;GAQ/B,MAAM,MAAO,GAAG,eAAe,CAE/B,CAAC;GACD,MAAM,MAAO,MAAM,QAAQ,KAAK;GAChC,MAAM,MAAO,IAAI;EACnB;CACF,CAAC;AACH;AAaA,SAAS,qBACP,OACA,YAC0B;CAC1B,IAAI,UAAU,UAAa,cAAc,QAAQ,OAAO,UAAU,MAAM,OAAO;CAC/E,MAAM,OAAOA,QAAc;CAC3B,KAAK,MAAM,KAAK;CAChB,OAAO;AACT;AAEA,SAAS,oBAAoB,MAAgC,OAAiC;CAO5F,IAAI,SAAS,QAAW;CACxB,KAAK,KAAK,SAAS,EAAE;AACvB;AAsBA,eAAsB,oBACpB,MACA,UAA6B,CAAC,GACf;CACf,OAAO,gBAAgB,aAAa,GAAG,MAAM,OAAO;AACtD;AAuBA,eAAsB,gBACpB,KACA,MACA,UAA6B,CAAC,GACf;CACf,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ,GAAG,IAAI;CAClD,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,QAAQ,MAAM,KAAK,MAAM;GAC7B,KAAK,QAAQ;GACb;GACA,OAAO;EACT,CAAC;EACD,MAAM,KAAK,UAAU,QAA+B;GAClD,IAAI,IAAI,SAAS,UAAU;IACzB,MAAM,gBAAgB,QAAQ,IAAI,kBAAkB,OAAO,QAAQ;IACnE,MAAM,WAAW,sBAAsB,GAAG;IAC1C,uBACE,IAAI,MACF,gBACI,8BAA8B,SAAS,sCAC1B,SAAS,kDACtB,8BAA8B,SAAS,+GAE7C,CACF;GACF,OACE,uBAAO,IAAI,MAAM,GAAG,IAAI,WAAW,IAAI,SAAS,CAAC;EAErD,CAAC;EACD,MAAM,KAAK,UAAU,SAAS;GAC5B,IAAI,SAAS,GACX,QAAQ;QAER,uBAAO,IAAI,MAAM,GAAG,IAAI,oBAAoB,MAAM,CAAC;EAEvD,CAAC;CACH,CAAC;AACH;AAwBA,SAAgB,uBAAuB,QAAgB,UAA0B;CAC/E,MAAM,UAAU,OAAO,KAAK;CAI5B,IAFE,QAAQ,SAAS,gCAAgC,KACjD,QAAQ,SAAS,0BAA0B,GAE3C,OACE,mRAEoE,eAAe,CAAC,CAAC,YAAY,kEAC/D,SAAS,8CAA8C,eAAe,CAAC,CAAC,YAAY,6MAG3F;CAG/B,OAAO;AACT;AAEA,SAAS,SAAS,WAAkE;CAClF,MAAM,SAA4B,EAAE,GAAG,QAAQ,IAAI;CACnD,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,SAAS,GAC3C,IAAI,MAAM,QACR,OAAO,OAAO;MAEd,OAAO,KAAK;CAGhB,OAAO;AACT;AA2BA,MAAa,yCAA8C,IAAI,IAAI;CAMjE;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;CAWA;CACA;CAKA;CAQA;CACA;CAYA;CACA;CACA;CACA;CACA;CACA;CACA;CAMA;CACA;CACA;CACA;CAIA;CACA;CACA;CAKA;CACA;CACA;CACA;CACA;CAKA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAMA;CACA;CACA;CAWA;CACA;CACA;CACA;CACA;CACA;CACA;CAiBA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CAMA;CACA;CACA;CACA;CAKA;CACA;CAcA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAIA;CACA;CAWA;CACA;CACA;CACA;CACA;CACA;CAKA;CASA;CACA;CACA;CACA;CACA;CACA;CACA;CAIA;CACA;CACA;CAKA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,+BAAoD,IAAI,IAC5D,CAAC,GAAG,sBAAsB,CAAC,CAAC,KAAK,MAAM,EAAE,YAAY,CAAC,CACxD;AA0BA,MAAa,6BAAgD;CAC3D;CACA;CACA;CACA;CACA;AACF;AAeA,MAAa,sDAA2D,IAAI,IAAI,CAC9E,4BACF,CAAC;AAWD,SAAgB,qBAAqB,KAAsB;CACzD,MAAM,QAAQ,IAAI,YAAY;CAC9B,IAAI,6BAA6B,IAAI,KAAK,GAAG,OAAO;CACpD,IAAI,oCAAoC,IAAI,KAAK,GAAG,OAAO;CAC3D,OAAO,2BAA2B,MAAM,WAAW,MAAM,WAAW,MAAM,CAAC;AAC7E;AAWA,MAAM,sBAAsB;AAa5B,SAAgB,kBAAkB,KAAsB;CACtD,OAAO,CAAC,oBAAoB,KAAK,GAAG;AACtC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $n as rejectExplicitCfnStackWithMultipleStacks, At as TargetEntry, Bn as createLocalInvokeCommand, En as createLocalInvokeAgentCoreCommand, F as createLocalStartAgentCoreCommand, Gn as resetEmbedConfig, Gt as createLocalStartApiCommand, Ht as CreateLocalStartApiCommandOptions, I as CreateLocalStartCloudFrontCommandOptions, It as CreateLocalRunTaskCommandOptions, Jn as LocalStateProviderFactory, Kn as setEmbedConfig, M as formatTargetListing, Mt as countTargets, N as CreateLocalStartAgentCoreCommandOptions, Nt as listTargets, O as CreateLocalListCommandOptions, Q as createLocalStartServiceCommand, Qn as isCfnFlagPresent, Rn as CreateLocalInvokeCommandOptions, Rt as createLocalRunTaskCommand, Un as CdkLocalEmbedConfig, W as CreateLocalStartAlbCommandOptions, Wn as getEmbedConfig, X as CreateLocalStartServiceCommandOptions, Xn as LocalStateSourceOptions, Yn as LocalStateSourceError, Zn as createLocalStateProvider, _r as CloudFormationTemplate, ar as ResolvedSsmParameters, cr as resolveSsmParameters, dr as StateEnvSubstitutionAudit, er as resolveCfnFallbackRegion, fr as SubstitutionContext, gr as substituteEnvVarsFromStateAsync, hr as substituteEnvVarsFromState, ir as LocalStateRecord, j as createLocalListCommand, jt as TargetListing, k as FormatTargetListingOptions, lr as CrossStackResolver, mr as substituteAgainstStateAsync, nr as resolveCfnStackName, or as SsmParameterRef, pr as substituteAgainstState, q as createLocalStartAlbCommand, qn as ExtraStateProviders, rr as LocalStateProvider, s as createLocalStudioCommand, sr as collectSsmParameterRefs, t as CreateLocalStudioCommandOptions, tr as resolveCfnRegion, ur as PseudoParameters, wn as CreateLocalInvokeAgentCoreCommandOptions, z as createLocalStartCloudFrontCommand } from "./local-studio-D-j3TZWX.js";
+import { $n as rejectExplicitCfnStackWithMultipleStacks, At as TargetEntry, Bn as createLocalInvokeCommand, En as createLocalInvokeAgentCoreCommand, F as createLocalStartAgentCoreCommand, Gn as resetEmbedConfig, Gt as createLocalStartApiCommand, Ht as CreateLocalStartApiCommandOptions, I as CreateLocalStartCloudFrontCommandOptions, It as CreateLocalRunTaskCommandOptions, Jn as LocalStateProviderFactory, Kn as setEmbedConfig, M as formatTargetListing, Mt as countTargets, N as CreateLocalStartAgentCoreCommandOptions, Nt as listTargets, O as CreateLocalListCommandOptions, Q as createLocalStartServiceCommand, Qn as isCfnFlagPresent, Rn as CreateLocalInvokeCommandOptions, Rt as createLocalRunTaskCommand, Un as CdkLocalEmbedConfig, W as CreateLocalStartAlbCommandOptions, Wn as getEmbedConfig, X as CreateLocalStartServiceCommandOptions, Xn as LocalStateSourceOptions, Yn as LocalStateSourceError, Zn as createLocalStateProvider, _r as CloudFormationTemplate, ar as ResolvedSsmParameters, cr as resolveSsmParameters, dr as StateEnvSubstitutionAudit, er as resolveCfnFallbackRegion, fr as SubstitutionContext, gr as substituteEnvVarsFromStateAsync, hr as substituteEnvVarsFromState, ir as LocalStateRecord, j as createLocalListCommand, jt as TargetListing, k as FormatTargetListingOptions, lr as CrossStackResolver, mr as substituteAgainstStateAsync, nr as resolveCfnStackName, or as SsmParameterRef, pr as substituteAgainstState, q as createLocalStartAlbCommand, qn as ExtraStateProviders, rr as LocalStateProvider, s as createLocalStudioCommand, sr as collectSsmParameterRefs, t as CreateLocalStudioCommandOptions, tr as resolveCfnRegion, ur as PseudoParameters, wn as CreateLocalInvokeAgentCoreCommandOptions, z as createLocalStartCloudFrontCommand } from "./local-studio-C9L3lxW_.js";
 import { CloudFormationClient } from "@aws-sdk/client-cloudformation";
 //#region src/local/cfn-local-state-provider.d.ts
 interface CfnLocalStateProviderOptions {