cdk-local 0.155.0 → 0.157.0

package/dist/internal.d.ts

@@ -1,4 +1,4 @@
-import { $t as JwtAuthorizer, A as addListSpecificOptions, An as AgentCoreWsBridgeHandle, At as DEFAULT_SHADOW_READY_TIMEOUT_MS, B as LocalStartCloudFrontError, Bn as tryResolveImageFnJoin, Bt as addRunTaskSpecificOptions, C as StudioEventBus, Cn as resolveProfileCredentials, Ct as resolveEcsAssumeRoleOption, D as StudioTargetKind, Dt as ResolvedListenerAction, E as StudioServeEvent, En as isProxyEnvConfigured, Er as TemplateResource, Et as FrontDoorForwardTarget, Fn as invokeAgentCoreWs, G as parseOriginOverrides, Gn as addInvokeSpecificOptions, Ht as EcsTaskResolutionError, In as ImageResolutionContext, J as addAlbSpecificOptions, Jn as ResolvedZipLambda, K as resolveCloudFrontTarget, Kt as WatchPredicates, L as addStartAgentCoreSpecificOptions, Ln as derivePseudoParametersFromRegion, Lt as CdkLocalError, Mn as BridgeAgentCoreWsOptions, Mt as setShadowReadyTimeoutMs, Nn as InvokeAgentCoreWsOptions, Nt as TargetEntry, On as addInvokeAgentCoreSpecificOptions, Ot as isApplicationLoadBalancer, P as addStartWebFunctionSpecificOptions, Pn as bridgeAgentCoreWs, Pt as TargetListing, Q as resolveAlbTarget, Qt as CognitoUserPoolAuthorizer, Rn as formatStateRemedy, Rt as LocalInvokeBuildError, S as createStudioDispatcher, Sn as buildStsClientConfig, St as parseRestartPolicy, T as StudioLogEvent, Tn as buildProxyClientConfig, Tr as CloudFormationTemplate, Tt as runEcsServiceEmulator, U as normalizeKvsFileKeys, Ut as ResolvedEcsTask, V as addStartCloudFrontSpecificOptions, W as parseKvsFileOverrides, Wt as ApiTargetSubset, Xt as resolveApiTargetSubset, Y as albStrategy, Yn as StackInfo, Yt as createWatchPredicates, Z as parseLbPortOverrides, Zt as AuthorizerInfo, _ as startStudioProxy, _n as pickResponseTemplate, _t as addEcsAssumeRoleOptions, a as coerceServeRequest, an as WebSocketRouteEntry, at as FrontDoorPlan, b as StudioRunRequest, bn as CdkWatchConfig, bt as ecsClusterOption, c as resolveServeBaseUrl, cn as discoverWebSocketApisOrThrow, ct as PlannedEcsForwardTarget, d as StudioServeRequest, dn as webSocketApiMatchesIdentifier, dt as PlannedForwardTarget, en as LambdaRequestAuthorizer, et as addStartServiceSpecificOptions, f as StudioServeState, fn as DiscoveredRoute, ft as PlannedFrontDoorListener, g as StudioProxyConfig, gn as evaluateResponseParameters, gt as addCommonEcsServiceOptions, h as RunningStudioProxy, hn as IntegrationResponseEntry, ht as ServiceBoot, i as coerceRunRequest, in as DiscoveredWebSocketApi, it as EmulatorStrategy, jn as AgentCoreWsResult, jt as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, kt as resolveAlbFrontDoor, l as StudioServeManager, ln as filterWebSocketApisByIdentifiers, lt as PlannedFixedResponseAction, m as createStudioServeManager, mn as discoverRoutes, mt as PlannedRedirectAction, n as StudioServeRequestPayload, nn as RouteWithAuth, nt as serviceStrategy, o as coerceStopRequest, on as availableWebSocketApiIdentifiers, ot as MAX_TASKS_SUBNET_RANGE_CAP, p as StudioStopRequest, pn as RestV1IntegrationConfig, pt as PlannedLambdaForwardTarget, qn as ResolvedArnLambdaLayer, qt as addStartApiSpecificOptions, r as addStudioSpecificOptions, rn as attachAuthorizers, rt as EcsServiceEmulatorOptions, sn as discoverWebSocketApis, st as PlannedAction, tn as LambdaTokenAuthorizer, u as StudioServeManagerConfig, un as parseSelectionExpressionPath, ut as PlannedForwardAction, v as StudioDispatchConfig, vn as selectIntegrationResponse, vt as addImageOverrideOptions, w as StudioInvocationEvent, wn as AwsProxyClientConfig, wt as resolveSharedSidecarCredentials, x as StudioRunResult, xn as resolveWatchConfig, xt as parseMaxTasks, y as StudioDispatcher, yn as tryParseStatus, yt as buildEcsImageResolutionContext, zn as substituteImagePlaceholders } from "./local-studio-D5Ycx74D.js";
+import { $ as resolveMicrovmImageTarget, $n as AssetManifest, $t as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, A as addListSpecificOptions, An as discoverWebSocketApisOrThrow, At as PlannedEcsForwardTarget, B as MICROVM_DEFAULT_INGRESS_PORT, Bn as selectIntegrationResponse, Bt as addImageOverrideOptions, C as StudioEventBus, Cn as LambdaTokenAuthorizer, D as StudioTargetKind, Dn as WebSocketRouteEntry, Dt as FrontDoorPlan, E as StudioServeEvent, En as DiscoveredWebSocketApi, Et as EmulatorStrategy, F as buildMicrovmLambdaView, Fn as RestV1IntegrationConfig, Ft as PlannedLambdaForwardTarget, G as MicrovmHookName, Gn as resolveProfileCredentials, Gt as resolveEcsAssumeRoleOption, H as MicrovmBuildHook, Hn as CdkWatchConfig, Ht as ecsClusterOption, In as discoverRoutes, It as PlannedRedirectAction, J as MicrovmRuntimeHook, Jn as isProxyEnvConfigured, Jt as FrontDoorForwardTarget, K as MicrovmImageConfig, Kn as AwsProxyClientConfig, Kt as resolveSharedSidecarCredentials, L as finalizeMicrovmEnv, Ln as IntegrationResponseEntry, Lt as ServiceBoot, Mn as parseSelectionExpressionPath, Mt as PlannedForwardAction, Nn as webSocketApiMatchesIdentifier, Nt as PlannedForwardTarget, On as availableWebSocketApiIdentifiers, Ot as MAX_TASKS_SUBNET_RANGE_CAP, P as addStartMicrovmSpecificOptions, Pn as DiscoveredRoute, Pt as PlannedFrontDoorListener, Q as resolveMicrovmCodeArtifact, Qn as AssetManifestLoader, Qr as TemplateResource, Qt as DEFAULT_SHADOW_READY_TIMEOUT_MS, R as microvmFidelityWarnings, Rn as evaluateResponseParameters, Rt as addCommonEcsServiceOptions, S as createStudioDispatcher, Sn as LambdaRequestAuthorizer, St as addStartServiceSpecificOptions, T as StudioLogEvent, Tn as attachAuthorizers, Tt as EcsServiceEmulatorOptions, U as MicrovmCodeArtifact, Un as resolveWatchConfig, Ut as parseMaxTasks, V as MICROVM_IMAGE_TYPE, Vn as tryParseStatus, Vt as buildEcsImageResolutionContext, W as MicrovmHookConfig, Wn as buildStsClientConfig, Wt as parseRestartPolicy, X as disposeMicrovmCodeArtifact, Xn as addInvokeAgentCoreSpecificOptions, Xt as isApplicationLoadBalancer, Y as ResolvedMicrovmImage, Yt as ResolvedListenerAction, Z as readMicrovmImageConfig, Zr as CloudFormationTemplate, Zt as resolveAlbFrontDoor, _ as startStudioProxy, _n as createWatchPredicates, _r as addInvokeSpecificOptions, _t as albStrategy, a as coerceServeRequest, an as CdkLocalError, ar as InvokeAgentCoreWsOptions, at as addStartAgentCoreSpecificOptions, b as StudioRunRequest, bn as CognitoUserPoolAuthorizer, br as ResolvedZipLambda, bt as resolveAlbTarget, c as resolveServeBaseUrl, cn as addRunTaskSpecificOptions, cr as ImageResolutionContext, ct as LocalStartCloudFrontError, d as StudioServeRequest, dn as ResolvedEcsTask, dr as substituteImagePlaceholders, dt as normalizeKvsFileKeys, en as setShadowReadyTimeoutMs, er as DockerImageAssetSource, et as s3KeyOfUri, f as StudioServeState, fn as ApiTargetSubset, fr as tryResolveImageFnJoin, ft as parseKvsFileOverrides, g as StudioProxyConfig, gt as addAlbSpecificOptions, h as RunningStudioProxy, hn as addStartApiSpecificOptions, i as coerceRunRequest, ir as BridgeAgentCoreWsOptions, jn as filterWebSocketApisByIdentifiers, jt as PlannedFixedResponseAction, kn as discoverWebSocketApis, kt as PlannedAction, l as StudioServeManager, lr as derivePseudoParametersFromRegion, lt as addStartCloudFrontSpecificOptions, m as createStudioServeManager, mn as WatchPredicates, mt as resolveCloudFrontTarget, n as StudioServeRequestPayload, nn as TargetListing, nr as AgentCoreWsBridgeHandle, nt as addStartWebFunctionSpecificOptions, o as coerceStopRequest, on as LocalInvokeBuildError, or as bridgeAgentCoreWs, p as StudioStopRequest, pt as parseOriginOverrides, q as MicrovmResolutionError, qn as buildProxyClientConfig, qt as runEcsServiceEmulator, r as addStudioSpecificOptions, rr as AgentCoreWsResult, sr as invokeAgentCoreWs, tn as TargetEntry, tr as FileAsset, u as StudioServeManagerConfig, un as EcsTaskResolutionError, ur as formatStateRemedy, v as StudioDispatchConfig, vn as resolveApiTargetSubset, w as StudioInvocationEvent, wn as RouteWithAuth, wt as serviceStrategy, x as StudioRunResult, xn as JwtAuthorizer, xr as StackInfo, y as StudioDispatcher, yn as AuthorizerInfo, yr as ResolvedArnLambdaLayer, yt as parseLbPortOverrides, z as readRunHookPayload, zn as pickResponseTemplate, zt as addEcsAssumeRoleOptions } from "./local-studio-DXVr171Y.js";
 import { IncomingHttpHeaders, IncomingMessage, Server, ServerResponse } from "node:http";
 import { SecretsManagerClient } from "@aws-sdk/client-secrets-manager";
 import { SSMClient } from "@aws-sdk/client-ssm";
@@ -178,77 +178,6 @@ interface EnvOverrideFile {
 }
 declare function resolveEnvVars(logicalId: string, displayPath: string | undefined, templateEnv: Record<string, unknown> | undefined, overrides?: EnvOverrideFile): EnvResolutionResult;
 //#endregion
-//#region src/types/assets.d.ts
-interface AssetManifest {
-  version: string;
-  files: Record<string, FileAsset>;
-  dockerImages: Record<string, DockerImageAsset>;
-}
-interface FileAsset {
-  displayName: string;
-  source: FileAssetSource;
-  destinations: Record<string, FileAssetDestination>;
-}
-interface FileAssetSource {
-  path: string;
-  packaging: 'file' | 'zip';
-  executable?: string[];
-}
-interface FileAssetDestination {
-  bucketName: string;
-  objectKey: string;
-  assumeRoleArn?: string;
-  region?: string;
-}
-interface DockerImageAsset {
-  displayName: string;
-  source: DockerImageAssetSource;
-  destinations: Record<string, DockerImageAssetDestination>;
-}
-interface DockerImageAssetSource {
-  directory?: string;
-  executable?: string[];
-  dockerFile?: string;
-  dockerBuildTarget?: string;
-  dockerBuildArgs?: Record<string, string>;
-  dockerBuildContexts?: Record<string, string>;
-  dockerBuildSsh?: string;
-  dockerBuildSecrets?: Record<string, string>;
-  networkMode?: string;
-  platform?: string;
-  dockerOutputs?: string[];
-  cacheFrom?: DockerCacheOption[];
-  cacheTo?: DockerCacheOption;
-  cacheDisabled?: boolean;
-}
-interface DockerCacheOption {
-  type: string;
-  params?: Record<string, string>;
-}
-interface DockerImageAssetDestination {
-  repositoryName: string;
-  imageTag: string;
-  assumeRoleArn?: string;
-  region?: string;
-}
-//#endregion
-//#region src/assets/asset-manifest-loader.d.ts
-declare class AssetManifestLoader {
-  private logger;
-  loadStackManifest(stack: {
-    stackName: string;
-    assetManifestPath?: string | undefined;
-  }, fallbackDir: string): Promise<AssetManifest | null>;
-  loadManifest(cdkOutputDir: string, stackName: string, fileName?: string): Promise<AssetManifest | null>;
-  getFileAssets(manifest: AssetManifest): Map<string, FileAsset>;
-  getAssetSourcePath(cdkOutputDir: string, asset: FileAsset, opts: {
-    assetOutdir: string;
-    subject: string;
-    wrapError: (message: string) => Error;
-  }): string;
-  resolveAssetDestinationValue(value: string, accountId: string, region: string, partition?: string): string;
-}
-//#endregion
 //#region src/local/container-pool.d.ts
 interface ContainerHandle {
   logicalId: string;
@@ -674,6 +603,11 @@ type ResolvedOrigin = {
   originId: string;
   functionLogicalId: string;
   functionUrlLogicalId: string;
+} | {
+  kind: 'web-function';
+  originId: string;
+  endpointLogicalId: string;
+  readTimeoutSeconds?: number;
 } | {
   kind: 'custom';
   originId: string;
@@ -700,10 +634,17 @@ declare function describeS3OriginDomain(value: unknown): {
   isS3: boolean;
   bucketName?: string;
 };
+declare function pickWebFunctionEndpointLogicalIdFromOrigin(value: unknown, template: CloudFormationTemplate): string | undefined;
 declare function pickFunctionUrlLogicalIdFromOrigin(value: unknown): string | undefined;
 declare function pickTargetFunctionLogicalId(value: unknown): string | undefined;
 declare function isCloudFrontDistribution(resource: TemplateResource): boolean;
 //#endregion
+//#region src/local/cloudfront-web-function-origin.d.ts
+interface WebFunctionOriginTarget {
+  host: string;
+  port: number;
+}
+//#endregion
 //#region src/local/cloudfront-s3-origin.d.ts
 interface S3OriginCredentials {
   accessKeyId: string;
@@ -763,10 +704,114 @@ interface StartCloudFrontServerOptions {
   lambdaInvokers?: LambdaUrlInvokerMap;
   edgeInvokers?: LambdaUrlInvokerMap;
   s3OriginReaders?: Map<string, S3OriginReader>;
+  webFunctionOrigins?: Map<string, WebFunctionOriginTarget>;
 }
 declare function startCloudFrontServer(options: StartCloudFrontServerOptions): Promise<StartedCloudFrontServer>;
 declare function matchBehavior(behaviors: readonly ResolvedBehavior[], uri: string): ResolvedBehavior | undefined;
 //#endregion
+//#region src/local/web-function-resolver.d.ts
+declare const WEB_FUNCTION_TYPE = "AWS::Lambda::WebFunction";
+declare const WEB_FUNCTION_REVISION_TYPE = "AWS::Lambda::WebFunctionRevision";
+declare const WEB_FUNCTION_ENDPOINT_TYPE = "AWS::Lambda::WebFunctionEndpoint";
+declare class WebFunctionResolutionError extends Error {
+  constructor(message: string);
+}
+interface WebFunctionRevisionWeight {
+  revisionLogicalId: string | undefined;
+  weight: number;
+}
+interface ResolvedWebFunctionEndpoint {
+  logicalId: string;
+  endpointType: string | undefined;
+  authType: string | undefined;
+  weights: WebFunctionRevisionWeight[];
+}
+type WebFunctionRevisionSelection = 'target-revision' | 'revision-flag' | 'endpoint-weight' | 'only-revision';
+interface ResolvedWebFunction {
+  stack: StackInfo;
+  functionLogicalId: string | undefined;
+  functionName: string;
+  revisionLogicalId: string;
+  revision: TemplateResource;
+  endpoint: ResolvedWebFunctionEndpoint | undefined;
+  selection: WebFunctionRevisionSelection;
+}
+declare function resolveWebFunctionTarget(target: string, stacks: StackInfo[], revisionFlag?: string): ResolvedWebFunction;
+//#endregion
+//#region src/local/web-function-artifact.d.ts
+type WebFunctionArtifact = WebFunctionZipArtifact | WebFunctionImageArtifact;
+interface WebFunctionZipArtifact {
+  kind: 'zip';
+  runtime: string;
+  codeDir: string;
+  tmpDir?: string;
+  assetHash: string;
+}
+interface WebFunctionImageArtifact {
+  kind: 'image';
+  imageUri: string;
+}
+interface WebFunctionCodeConfig {
+  runtime: string;
+  s3Object: {
+    bucket: unknown;
+    key: string;
+    versionId?: string;
+    deployment?: {
+      logicalId: string;
+      index: number;
+    };
+  };
+}
+declare function parseWebFunctionBuildConfig(revisionLogicalId: string, buildConfig: unknown, template?: CloudFormationTemplate): WebFunctionCodeConfig;
+declare function resolveWebFunctionArtifact(stack: StackInfo, revisionLogicalId: string, code: WebFunctionCodeConfig, loader?: AssetManifestLoader): Promise<WebFunctionArtifact>;
+declare function disposeWebFunctionArtifact(artifact: WebFunctionArtifact | undefined): void;
+//#endregion
+//#region src/local/web-function-runtime.d.ts
+interface WebFunctionRuntimeSpec {
+  runtime: string;
+  baseImage: string;
+  codeMountPath: string;
+  architectures: readonly ('arm64' | 'x86_64')[];
+  buildStart(env: Readonly<Record<string, string>>, codeDir: string, deps?: {
+    fileExists?: (path: string) => boolean;
+  }): WebFunctionStartCommand;
+}
+interface WebFunctionStartCommand {
+  entryPoint: string[];
+  cmd: string[];
+  label: string;
+}
+declare function buildNodeEntryFileStart(runtime: string, env: Readonly<Record<string, string>>, codeDir: string, fileExists?: (path: string) => boolean): WebFunctionStartCommand;
+declare const WEB_FUNCTION_RUNTIMES: Readonly<Record<string, WebFunctionRuntimeSpec>>;
+declare function supportedWebFunctionRuntimes(table?: Readonly<Record<string, WebFunctionRuntimeSpec>>): string[];
+declare function resolveWebFunctionRuntime(runtime: string, table?: Readonly<Record<string, WebFunctionRuntimeSpec>>): WebFunctionRuntimeSpec;
+declare function defaultWebFunctionPlatform(spec: WebFunctionRuntimeSpec): string;
+//#endregion
+//#region src/local/web-function-service-config.d.ts
+declare const WEB_FUNCTION_HTTP_ENDPOINT_ENV = "AWS_LAMBDA_HTTP_ENDPOINT";
+interface WebFunctionServiceConfig {
+  environmentVariables: Record<string, unknown> | undefined;
+  environmentUnreadable: boolean;
+  executionRoleArn: unknown;
+  egressNetworkConnectorArn: unknown;
+  timeoutSeconds: number | undefined;
+  logGroup: string | undefined;
+}
+declare function readWebFunctionServiceConfig(revision: ResolvedWebFunction['revision']): WebFunctionServiceConfig;
+declare function buildWebFunctionLambdaView(resolved: ResolvedWebFunction, config: WebFunctionServiceConfig, runtime: string): ResolvedZipLambda;
+declare function webFunctionAssumeRole(assumeRole: string | boolean | undefined, config: WebFunctionServiceConfig): string | boolean | undefined;
+declare function finalizeWebFunctionEnv(lambdaEnv: Readonly<Record<string, string>>, opts: {
+  functionName: string;
+  containerPort: number;
+  timeoutSeconds: number | undefined;
+  logGroup: string | undefined;
+}): {
+  env: Record<string, string>;
+  replacedHttpEndpoint: boolean;
+};
+declare function webFunctionFidelityWarnings(resolved: ResolvedWebFunction, config: WebFunctionServiceConfig): string[];
+//#endregion
 //#region src/local/agentcore-serve-auth.d.ts
 interface AgentCoreServeAuthResult {
   allow: boolean;
@@ -1380,108 +1425,41 @@ declare function attachContainerLogStreamer(prefix: string, containerId: string,
   expectRestart?: () => boolean;
 }): () => void;
 //#endregion
-//#region src/local/web-function-resolver.d.ts
-declare const WEB_FUNCTION_TYPE = "AWS::Lambda::WebFunction";
-declare const WEB_FUNCTION_REVISION_TYPE = "AWS::Lambda::WebFunctionRevision";
-declare const WEB_FUNCTION_ENDPOINT_TYPE = "AWS::Lambda::WebFunctionEndpoint";
-declare class WebFunctionResolutionError extends Error {
-  constructor(message: string);
-}
-interface WebFunctionRevisionWeight {
-  revisionLogicalId: string | undefined;
-  weight: number;
-}
-interface ResolvedWebFunctionEndpoint {
-  logicalId: string;
-  endpointType: string | undefined;
-  authType: string | undefined;
-  weights: WebFunctionRevisionWeight[];
-}
-type WebFunctionRevisionSelection = 'target-revision' | 'revision-flag' | 'endpoint-weight' | 'only-revision';
-interface ResolvedWebFunction {
-  stack: StackInfo;
-  functionLogicalId: string | undefined;
-  functionName: string;
-  revisionLogicalId: string;
-  revision: TemplateResource;
-  endpoint: ResolvedWebFunctionEndpoint | undefined;
-  selection: WebFunctionRevisionSelection;
-}
-declare function resolveWebFunctionTarget(target: string, stacks: StackInfo[], revisionFlag?: string): ResolvedWebFunction;
-//#endregion
-//#region src/local/web-function-artifact.d.ts
-type WebFunctionArtifact = WebFunctionZipArtifact | WebFunctionImageArtifact;
-interface WebFunctionZipArtifact {
-  kind: 'zip';
-  runtime: string;
-  codeDir: string;
-  tmpDir?: string;
-  assetHash: string;
-}
-interface WebFunctionImageArtifact {
-  kind: 'image';
-  imageUri: string;
-}
-interface WebFunctionCodeConfig {
-  runtime: string;
-  s3Object: {
-    bucket: unknown;
-    key: string;
-    versionId?: string;
-  };
-}
-declare function parseWebFunctionBuildConfig(revisionLogicalId: string, buildConfig: unknown): WebFunctionCodeConfig;
+//#region src/local/s3-object-asset.d.ts
 declare function findFileAssetForObjectKey(manifest: AssetManifest, key: string): {
   hash: string;
   asset: FileAsset;
 } | undefined;
-declare function resolveWebFunctionArtifact(stack: StackInfo, revisionLogicalId: string, code: WebFunctionCodeConfig, loader?: AssetManifestLoader): Promise<WebFunctionArtifact>;
-declare function disposeWebFunctionArtifact(artifact: WebFunctionArtifact | undefined): void;
-//#endregion
-//#region src/local/web-function-runtime.d.ts
-interface WebFunctionRuntimeSpec {
-  runtime: string;
-  baseImage: string;
-  codeMountPath: string;
-  architectures: readonly ('arm64' | 'x86_64')[];
-  buildStart(env: Readonly<Record<string, string>>, codeDir: string, deps?: {
-    fileExists?: (path: string) => boolean;
-  }): WebFunctionStartCommand;
-}
-interface WebFunctionStartCommand {
-  entryPoint: string[];
-  cmd: string[];
-  label: string;
-}
-declare function buildNodeEntryFileStart(runtime: string, env: Readonly<Record<string, string>>, codeDir: string, fileExists?: (path: string) => boolean): WebFunctionStartCommand;
-declare const WEB_FUNCTION_RUNTIMES: Readonly<Record<string, WebFunctionRuntimeSpec>>;
-declare function supportedWebFunctionRuntimes(table?: Readonly<Record<string, WebFunctionRuntimeSpec>>): string[];
-declare function resolveWebFunctionRuntime(runtime: string, table?: Readonly<Record<string, WebFunctionRuntimeSpec>>): WebFunctionRuntimeSpec;
-declare function defaultWebFunctionPlatform(spec: WebFunctionRuntimeSpec): string;
-//#endregion
-//#region src/local/web-function-service-config.d.ts
-declare const WEB_FUNCTION_HTTP_ENDPOINT_ENV = "AWS_LAMBDA_HTTP_ENDPOINT";
-interface WebFunctionServiceConfig {
-  environmentVariables: Record<string, unknown> | undefined;
-  environmentUnreadable: boolean;
-  executionRoleArn: unknown;
-  egressNetworkConnectorArn: unknown;
-  timeoutSeconds: number | undefined;
-  logGroup: string | undefined;
-}
-declare function readWebFunctionServiceConfig(revision: ResolvedWebFunction['revision']): WebFunctionServiceConfig;
-declare function buildWebFunctionLambdaView(resolved: ResolvedWebFunction, config: WebFunctionServiceConfig, runtime: string): ResolvedZipLambda;
-declare function webFunctionAssumeRole(assumeRole: string | boolean | undefined, config: WebFunctionServiceConfig): string | boolean | undefined;
-declare function finalizeWebFunctionEnv(lambdaEnv: Readonly<Record<string, string>>, opts: {
-  functionName: string;
-  containerPort: number;
-  timeoutSeconds: number | undefined;
-  logGroup: string | undefined;
-}): {
-  env: Record<string, string>;
-  replacedHttpEndpoint: boolean;
+declare function isBucketDeploymentResource(resource: TemplateResource | undefined): boolean;
+declare function bucketDeploymentSourceObjectKeys(resource: TemplateResource): unknown[];
+type BucketDeploymentObjectKeyResolution = {
+  kind: 'resolved';
+  deploymentLogicalId: string;
+  index: number;
+  sourceObjectKey: string;
+} | {
+  kind: 'extracts';
+  deploymentLogicalId: string;
+  index: number;
+} | {
+  kind: 'object-keys-not-output';
+  deploymentLogicalId: string;
+  index: number;
+} | {
+  kind: 'prefixed-destination';
+  deploymentLogicalId: string;
+  index: number;
+} | {
+  kind: 'index-out-of-range';
+  deploymentLogicalId: string;
+  index: number;
+  sourceCount: number;
+} | {
+  kind: 'source-key-not-literal';
+  deploymentLogicalId: string;
+  index: number;
 };
-declare function webFunctionFidelityWarnings(resolved: ResolvedWebFunction, config: WebFunctionServiceConfig): string[];
+declare function resolveBucketDeploymentObjectKey(template: CloudFormationTemplate, value: unknown): BucketDeploymentObjectKeyResolution | undefined;
 //#endregion
 //#region src/local/web-function-runner.d.ts
 declare const WEB_FUNCTION_CONTAINER_PORT = 8080;
@@ -1542,6 +1520,135 @@ declare function watchContainerExit(containerId: string): {
 };
 declare function readContainerLogTail(containerId: string, lines: number, spawnFn?: typeof spawn): Promise<string[]>;
 //#endregion
+//#region src/local/microvm-hooks.d.ts
+declare const MICROVM_HOOK_PATH_PREFIX = "/aws/lambda-microvms/runtime/v1/";
+declare const MAX_RUN_HOOK_PAYLOAD_BYTES: number;
+type HookPostResult = {
+  kind: 'status';
+  status: number;
+  body: string;
+} | {
+  kind: 'refused';
+} | {
+  kind: 'timeout';
+};
+interface MicrovmHookDeps {
+  post: (host: string, port: number, path: string, body: string | undefined, timeoutMs: number) => Promise<HookPostResult>;
+  sleep: (ms: number) => Promise<void>;
+  now: () => number;
+  isAlive?: () => Promise<boolean>;
+}
+interface HookEndpoint {
+  host: string;
+  port: number;
+}
+declare class MicrovmHookError extends CdkLocalError {
+  constructor(message: string, code?: string);
+}
+declare function generateMicrovmId(): string;
+declare function runHookBody(microvmId: string, runHookPayload: string | undefined): string;
+declare function pollBuildHook(hook: MicrovmBuildHook, endpoint: HookEndpoint, timeoutMs: number, deps?: MicrovmHookDeps): Promise<number>;
+declare function callRuntimeHook(hook: MicrovmRuntimeHook, endpoint: HookEndpoint, timeoutMs: number, body: string | undefined, deps?: MicrovmHookDeps): Promise<void>;
+declare function waitForAppAnswer(endpoint: HookEndpoint, timeoutMs: number, deps?: {
+  probe: (host: string, port: number, timeoutMs: number) => Promise<ProbeOutcome>;
+  sleep: (ms: number) => Promise<void>;
+  now: () => number;
+  isAlive?: () => Promise<boolean>;
+}): Promise<void>;
+declare function postHook(host: string, port: number, path: string, body: string | undefined, timeoutMs: number): Promise<HookPostResult>;
+//#endregion
+//#region src/local/microvm-front-door.d.ts
+declare const MICROVM_CONTROL_PATH = "/_cdkl/microvm";
+declare const PROXY_PORT_HEADER = "x-aws-proxy-port";
+declare const MICROVM_WS_BASE_PROTOCOL = "lambda-microvms";
+type MicrovmState = 'running' | 'suspending' | 'suspended' | 'resuming' | 'terminating' | 'terminated';
+interface MicrovmProxyTarget {
+  readonly microvmId: string;
+  state(): MicrovmState;
+  upstreamFor(containerPort: number): HookEndpoint | undefined;
+  routablePorts(): number[];
+  suspend(): Promise<void>;
+  resume(): Promise<void>;
+  terminate(): Promise<void>;
+}
+interface MicrovmFrontDoorOptions {
+  host: string;
+  port: number;
+  target: MicrovmProxyTarget;
+  autoResume: boolean;
+}
+interface RunningMicrovmFrontDoor {
+  port: number;
+  close(): Promise<void>;
+}
+type PortSelection = {
+  ok: true;
+  port: number;
+} | {
+  ok: false;
+  status: 400;
+  message: string;
+};
+declare function selectTargetPort(headers: IncomingMessage['headers']): PortSelection;
+declare function stripMicrovmProxyHeaders(headers: NodeJS.Dict<string | string[]>): boolean;
+declare function startMicrovmFrontDoor(opts: MicrovmFrontDoorOptions): Promise<RunningMicrovmFrontDoor>;
+declare class MicrovmStateError extends Error {
+  constructor(message: string);
+}
+declare function rewriteUpgradeResponseHead(head: string, addBase: boolean): string;
+//#endregion
+//#region src/local/microvm-runner.d.ts
+declare const DEFAULT_TERMINATE_HOOK_TIMEOUT_MS = 10000;
+declare function microvmImageTag(artifact: MicrovmCodeArtifact): string;
+declare function buildMicrovmImage(opts: {
+  artifact: MicrovmCodeArtifact;
+  platform: string | undefined;
+  noCache: boolean;
+}): Promise<string>;
+declare function readExposedPorts(image: string): Promise<number[]>;
+declare function planMicrovmPorts(hooksPort: number | undefined, exposed: readonly number[], extra: readonly number[]): number[];
+declare function setContainerPaused(containerId: string, paused: boolean): Promise<void>;
+interface LocalMicrovmDeps {
+  setPaused: (containerId: string, paused: boolean) => Promise<void>;
+  remove: (containerId: string) => Promise<void>;
+  hooks?: MicrovmHookDeps;
+  waitForAnswer?: typeof waitForAppAnswer;
+  isAlive?: () => Promise<boolean>;
+}
+interface LocalMicrovmOptions {
+  microvmId: string;
+  containerId: string;
+  ports: ReadonlyMap<number, HookEndpoint>;
+  config: MicrovmImageConfig;
+  timeoutMs: number;
+  onTerminated?: (vm: LocalMicrovm) => void;
+}
+declare class LocalMicrovm implements MicrovmProxyTarget {
+  readonly microvmId: string;
+  readonly containerId: string;
+  private current;
+  private resuming;
+  private suspending;
+  private paused;
+  private terminating;
+  private readonly opts;
+  private readonly deps;
+  constructor(opts: LocalMicrovmOptions, deps?: Partial<LocalMicrovmDeps>);
+  state(): MicrovmState;
+  upstreamFor(containerPort: number): HookEndpoint | undefined;
+  routablePorts(): number[];
+  private log;
+  private hookEndpoint;
+  private hookTimeoutMs;
+  private hookDeps;
+  private runtimeHook;
+  boot(runHookPayload: string | undefined): Promise<void>;
+  private setPaused;
+  suspend(): Promise<void>;
+  resume(): Promise<void>;
+  terminate(): Promise<void>;
+}
+//#endregion
 //#region src/local/cloudfront-edge-event.d.ts
 type EdgeHeaders = Record<string, Array<{
   key: string;
@@ -1822,5 +1929,5 @@ declare function resolveDynamicReferencesInEnv(env: Record<string, string>, opti
   resolvedKeys: string[];
 }>;
 //#endregion
-export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreHttpServerConfig, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreServeAuthCheck, type AgentCoreServeAuthResult, type AgentCoreServeRoute, type AgentCoreServeSignRequest, type AgentCoreWsBridgeHandle, type AgentCoreWsBridgeServerConfig, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AttachedAgentCoreWsBridge, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type AwsProxyClientConfig, type BridgeAgentCoreWsOptions, type BuildAgentCoreCodeImageOptions, type BuildAgentCoreServeAuthCheckOptions, type BuildContainerImageOptions, CLOUDFRONT_DISTRIBUTION_TYPE, type CachedAuthorizerResult, type CallerCredentials, type CdkWatchConfig, type CfRequest, type CfResponse, type CloudFrontClientCredentials, type CloudFrontKvsAssociation, type CloudFrontKvsHandle, type CloudFrontModule, type CloudMapIndex, CloudMapRegistry, type CompiledCloudFrontFunction, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CreateDeployedKvsDataSourceOptions, type CredentialsLoader, DEFAULT_SHADOW_READY_TIMEOUT_MS, type DeployedKvsRef, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type DynamicReference, DynamicReferenceResolutionError, DynamicReferenceResolver, type DynamicReferenceResolverOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EdgeEvent, type EdgeEventType, type EdgeRequest, type EdgeRequestInput, type EdgeResponse, type EdgeResponseResult, type EmulatorStrategy, type EnvOverrideFile, type ErrorResponseCandidate, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FilterStudioCustomResourcesOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_DOCKER_INTERNAL_GATEWAY, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageOverrideEntry, ImageOverrideError, type ImageOverrideGlobals, type ImageOverrideMap, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type KvsDataSource, type LambdaArnResolveOutcome, type LambdaUrlInvokerMap, type LambdaUrlOriginRequest, type LambdaUrlOriginResult, LocalInvokeBuildError, LocalStartCloudFrontError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MtlsServerConfig, type PerServiceBuildInputs, type PinnedTargetEntry, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type ProbeOutcome, type RawImageOverrideFlags, RecentOutput, type RegistrationHandle, type ReinvokeDeps, type ReinvokeInput, type ReloadAssetContext, type ReloadVerdict, type RequestParameterContext, type ResolveDeployedOriginBucketOptions, type ResolveEnvDynamicReferencesOptions, type ResolveKvsModulesOptions, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedBehavior, type ResolvedCloudFrontFunction, type ResolvedCustomErrorResponse, type ResolvedDistribution, type ResolvedLambdaEdge, type ResolvedLambdaEdgeAssoc, type ResolvedListenerAction, type ResolvedOrigin, type ResolvedStage, type ResolvedWebFunction, type ResolvedWebFunctionEndpoint, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type RunningAgentCoreHttpServer, type RunningAgentCoreWsBridge, type RunningStudioProxy, type RunningStudioServer, type S3BundleCredentials, type S3BundleLocation, type S3FetchResult, type S3ObjectFetcher, type S3OriginCredentials, type S3OriginReader, type S3OriginReaderOptions, SECOND_ASSUME_MESSAGE, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, type ServeInboundAuthPlan, type ServeRequestInput, type ServeRequestResult, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartWebFunctionContainerOptions, type StartedApiServer, type StartedCloudFrontServer, type StaticOriginResult, type StudioDispatchConfig, type StudioDispatcher, StudioEventBus, type StudioHistory, type StudioInvocationEvent, type StudioLogEvent, type StudioLogSearchOptions, type StudioProxyConfig, type StudioRunRequest, type StudioRunResult, type StudioServeEvent, type StudioServeManager, type StudioServeManagerConfig, type StudioServeRequest, type StudioServeRequestPayload, type StudioServeState, type StudioServerOptions, type StudioStopRequest, type StudioStore, type StudioStoreOptions, type StudioTarget, type StudioTargetGroup, type StudioTargetKind, type TranslatedHttpResponse, VtlEvaluationError, WEB_FUNCTION_CONTAINER_PORT, WEB_FUNCTION_ENDPOINT_TYPE, WEB_FUNCTION_HTTP_ENDPOINT_ENV, WEB_FUNCTION_REVISION_TYPE, WEB_FUNCTION_RUNTIMES, WEB_FUNCTION_TYPE, type WarnedAt, type WatchPredicates, type WebFunctionArtifact, type WebFunctionCodeConfig, type WebFunctionContainerPlan, type WebFunctionImageArtifact, WebFunctionResolutionError, type WebFunctionRevisionSelection, type WebFunctionRevisionWeight, type WebFunctionRuntimeSpec, type WebFunctionServiceConfig, type WebFunctionStartCommand, type WebFunctionZipArtifact, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addEcsAssumeRoleOptions, addImageOverrideOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartAgentCoreSpecificOptions, addStartApiSpecificOptions, addStartCloudFrontSpecificOptions, addStartServiceSpecificOptions, addStartWebFunctionSpecificOptions, addStudioSpecificOptions, albStrategy, annotateAlbPinnedBackingServices, annotateEcsTaskPinnedTargets, annotatePinnedEcsTargets, applyAuthorizerOverlay, applyCorsResponseHeaders, applyEdgeRequestResult, applyEdgeResponseResult, architectureToPlatform, assumedRoleRecorded, attachAgentCoreWsBridge, attachAuthorizers, attachContainerLogStreamer, attachStageContext, availableApiIdentifiers, availableWebSocketApiIdentifiers, bridgeAgentCoreWs, bufferToBody, buildAgentCoreCodeImage, buildAgentCoreServeAuthCheck, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildEdgeRequestEvent, buildEdgeResponseEvent, buildHttpApiV2Event, buildImageOverrideTag, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildNodeEntryFileStart, buildProxyClientConfig, buildRestV1Event, buildStageMap, buildStsClientConfig, buildWebFunctionLambdaView, canonicalizeImageOverrideKeys, classifyS3Error, classifySourceChange, coerceRunRequest, coerceServeRequest, coerceStopRequest, compileCloudFrontFunction, computeCodeImageTag, computeRequestIdentityHash, containerFailure, containsDynamicReference, createAuthorizerCache, createCloudFrontModule, createDeployedKvsDataSource, createFileWatcher, createJwksCache, createLocalFileKvsDataSource, createS3OriginReader, createStudioDispatcher, createStudioServeManager, createStudioStore, createUnboundCloudFrontModule, createWatchPredicates, defaultCredentialsLoader, defaultWebFunctionPlatform, deployAccountStsClientConfig, deployedFillMayBeSecret, derivePseudoParametersFromRegion, describeAwsFailureForWarn, describeCredentialLoadFailure, describePinnedImageUri, describeS3OriginDomain, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, disposeWebFunctionArtifact, downloadAndExtractS3Bundle, ecsClusterOption, edgeHeadersToHttp, enforceImageOverrideOrphans, evaluateCachedLambdaPolicy, evaluateResponseParameters, extractKvsAssociations, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, filterStudioCustomResources, filterStudioTargetGroups, filterWebSocketApisByIdentifiers, finalizeWebFunctionEnv, findFileAssetForObjectKey, firstUsableRegion, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, httpHeadersToEdge, idFromArn, imageOverrideKeyAliases, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isCloudFrontDistribution, isCustomResourceLambdaTarget, isFunctionUrlOacFronted, isLocalCdkAssetImage, isProxyEnvConfigured, keysNotFromTemplate, keysOverriddenBy, listPinnedTargets, matchBehavior, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, mergeForService, normalizeKvsFileKeys, parseConnectionsPath, parseDynamicReference, parseImageOverrideFlags, parseKvsFileOverrides, parseLbPortOverrides, parseMaxTasks, parseOriginOverrides, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, parseWebFunctionBuildConfig, pickAgentCoreCandidateStack, pickFunctionUrlLogicalIdFromOrigin, pickKvsLogicalIdFromArn, pickLambdaEdgeFunctionLogicalId, pickRefLogicalId, pickResponseTemplate, pickTargetFunctionLogicalId, planWebFunctionContainer, probeHostGatewaySupport, readContainerLogTail, readEnvCallerCredentials, readMtlsMaterialsFromDisk, readWebFunctionServiceConfig, recordAssumedRole, reinvoke, relayServeRequest, renderCodeDockerfile, renderStudioHtml, resetWorkloadIdentity, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveCloudFrontDistribution, resolveCloudFrontTarget, resolveDeployedKvsArnByName, resolveDeployedOriginBucket, resolveDynamicReferencesInEnv, resolveEcsAssumeRoleOption, resolveEnvVars, resolveErrorResponseCandidates, resolveHostGatewayExtraHosts, resolveImageOverrides, resolveKvsModulesForDistribution, resolveLambdaArnIntrinsic, resolveProfileCredentials, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServeBaseUrl, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, resolveWebFunctionArtifact, resolveWebFunctionRuntime, resolveWebFunctionTarget, runEcsServiceEmulator, runImageOverrideBuilds, runViewerRequest, runViewerResponse, selectIntegrationResponse, selectServeInboundAuth, serveFromStaticOrigin, serveLambdaUrlOrigin, serviceStrategy, setShadowReadyTimeoutMs, signAgentCoreInvocation, startAgentCoreHttpServer, startAgentCoreWsBridge, startApiServer, startCloudFrontServer, startStudioProxy, startStudioServer, startWebFunctionContainer, stripCloudFrontImport, substituteImagePlaceholders, supportedWebFunctionRuntimes, toCmdArgv, toStudioTargetGroups, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCoreHttpReady, waitForAgentCorePing, waitForWebFunctionReady, watchContainerExit, webFunctionAssumeRole, webFunctionFidelityWarnings, webSocketApiMatchesIdentifier, withoutKeys, workloadClientConfig, workloadStsClientConfig };
+export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreHttpServerConfig, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreServeAuthCheck, type AgentCoreServeAuthResult, type AgentCoreServeRoute, type AgentCoreServeSignRequest, type AgentCoreWsBridgeHandle, type AgentCoreWsBridgeServerConfig, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AttachedAgentCoreWsBridge, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type AwsProxyClientConfig, type BridgeAgentCoreWsOptions, type BucketDeploymentObjectKeyResolution, type BuildAgentCoreCodeImageOptions, type BuildAgentCoreServeAuthCheckOptions, type BuildContainerImageOptions, CLOUDFRONT_DISTRIBUTION_TYPE, type CachedAuthorizerResult, type CallerCredentials, type CdkWatchConfig, type CfRequest, type CfResponse, type CloudFrontClientCredentials, type CloudFrontKvsAssociation, type CloudFrontKvsHandle, type CloudFrontModule, type CloudMapIndex, CloudMapRegistry, type CompiledCloudFrontFunction, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CreateDeployedKvsDataSourceOptions, type CredentialsLoader, DEFAULT_SHADOW_READY_TIMEOUT_MS, DEFAULT_TERMINATE_HOOK_TIMEOUT_MS, type DeployedKvsRef, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type DynamicReference, DynamicReferenceResolutionError, DynamicReferenceResolver, type DynamicReferenceResolverOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EdgeEvent, type EdgeEventType, type EdgeRequest, type EdgeRequestInput, type EdgeResponse, type EdgeResponseResult, type EmulatorStrategy, type EnvOverrideFile, type ErrorResponseCandidate, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FilterStudioCustomResourcesOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_DOCKER_INTERNAL_GATEWAY, HOST_GATEWAY_MIN_VERSION, type HookEndpoint, type HookPostResult, type HttpRequestSnapshot, type ImageOverrideEntry, ImageOverrideError, type ImageOverrideGlobals, type ImageOverrideMap, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type KvsDataSource, type LambdaArnResolveOutcome, type LambdaUrlInvokerMap, type LambdaUrlOriginRequest, type LambdaUrlOriginResult, LocalInvokeBuildError, LocalMicrovm, type LocalMicrovmDeps, type LocalMicrovmOptions, LocalStartCloudFrontError, MAX_RUN_HOOK_PAYLOAD_BYTES, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, MICROVM_CONTROL_PATH, MICROVM_DEFAULT_INGRESS_PORT, MICROVM_HOOK_PATH_PREFIX, MICROVM_IMAGE_TYPE, MICROVM_WS_BASE_PROTOCOL, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MicrovmBuildHook, type MicrovmCodeArtifact, type MicrovmFrontDoorOptions, type MicrovmHookConfig, type MicrovmHookDeps, MicrovmHookError, type MicrovmHookName, type MicrovmImageConfig, type MicrovmProxyTarget, MicrovmResolutionError, type MicrovmRuntimeHook, type MicrovmState, MicrovmStateError, type MtlsServerConfig, PROXY_PORT_HEADER, type PerServiceBuildInputs, type PinnedTargetEntry, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type PortSelection, type ProbeOutcome, type RawImageOverrideFlags, RecentOutput, type RegistrationHandle, type ReinvokeDeps, type ReinvokeInput, type ReloadAssetContext, type ReloadVerdict, type RequestParameterContext, type ResolveDeployedOriginBucketOptions, type ResolveEnvDynamicReferencesOptions, type ResolveKvsModulesOptions, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedBehavior, type ResolvedCloudFrontFunction, type ResolvedCustomErrorResponse, type ResolvedDistribution, type ResolvedLambdaEdge, type ResolvedLambdaEdgeAssoc, type ResolvedListenerAction, type ResolvedMicrovmImage, type ResolvedOrigin, type ResolvedStage, type ResolvedWebFunction, type ResolvedWebFunctionEndpoint, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type RunningAgentCoreHttpServer, type RunningAgentCoreWsBridge, type RunningMicrovmFrontDoor, type RunningStudioProxy, type RunningStudioServer, type S3BundleCredentials, type S3BundleLocation, type S3FetchResult, type S3ObjectFetcher, type S3OriginCredentials, type S3OriginReader, type S3OriginReaderOptions, SECOND_ASSUME_MESSAGE, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, type ServeInboundAuthPlan, type ServeRequestInput, type ServeRequestResult, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartWebFunctionContainerOptions, type StartedApiServer, type StartedCloudFrontServer, type StaticOriginResult, type StudioDispatchConfig, type StudioDispatcher, StudioEventBus, type StudioHistory, type StudioInvocationEvent, type StudioLogEvent, type StudioLogSearchOptions, type StudioProxyConfig, type StudioRunRequest, type StudioRunResult, type StudioServeEvent, type StudioServeManager, type StudioServeManagerConfig, type StudioServeRequest, type StudioServeRequestPayload, type StudioServeState, type StudioServerOptions, type StudioStopRequest, type StudioStore, type StudioStoreOptions, type StudioTarget, type StudioTargetGroup, type StudioTargetKind, type TranslatedHttpResponse, VtlEvaluationError, WEB_FUNCTION_CONTAINER_PORT, WEB_FUNCTION_ENDPOINT_TYPE, WEB_FUNCTION_HTTP_ENDPOINT_ENV, WEB_FUNCTION_REVISION_TYPE, WEB_FUNCTION_RUNTIMES, WEB_FUNCTION_TYPE, type WarnedAt, type WatchPredicates, type WebFunctionArtifact, type WebFunctionCodeConfig, type WebFunctionContainerPlan, type WebFunctionImageArtifact, WebFunctionResolutionError, type WebFunctionRevisionSelection, type WebFunctionRevisionWeight, type WebFunctionRuntimeSpec, type WebFunctionServiceConfig, type WebFunctionStartCommand, type WebFunctionZipArtifact, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addEcsAssumeRoleOptions, addImageOverrideOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartAgentCoreSpecificOptions, addStartApiSpecificOptions, addStartCloudFrontSpecificOptions, addStartMicrovmSpecificOptions, addStartServiceSpecificOptions, addStartWebFunctionSpecificOptions, addStudioSpecificOptions, albStrategy, annotateAlbPinnedBackingServices, annotateEcsTaskPinnedTargets, annotatePinnedEcsTargets, applyAuthorizerOverlay, applyCorsResponseHeaders, applyEdgeRequestResult, applyEdgeResponseResult, architectureToPlatform, assumedRoleRecorded, attachAgentCoreWsBridge, attachAuthorizers, attachContainerLogStreamer, attachStageContext, availableApiIdentifiers, availableWebSocketApiIdentifiers, bridgeAgentCoreWs, bucketDeploymentSourceObjectKeys, bufferToBody, buildAgentCoreCodeImage, buildAgentCoreServeAuthCheck, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildEdgeRequestEvent, buildEdgeResponseEvent, buildHttpApiV2Event, buildImageOverrideTag, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildMicrovmImage, buildMicrovmLambdaView, buildNodeEntryFileStart, buildProxyClientConfig, buildRestV1Event, buildStageMap, buildStsClientConfig, buildWebFunctionLambdaView, callRuntimeHook, canonicalizeImageOverrideKeys, classifyS3Error, classifySourceChange, coerceRunRequest, coerceServeRequest, coerceStopRequest, compileCloudFrontFunction, computeCodeImageTag, computeRequestIdentityHash, containerFailure, containsDynamicReference, createAuthorizerCache, createCloudFrontModule, createDeployedKvsDataSource, createFileWatcher, createJwksCache, createLocalFileKvsDataSource, createS3OriginReader, createStudioDispatcher, createStudioServeManager, createStudioStore, createUnboundCloudFrontModule, createWatchPredicates, defaultCredentialsLoader, defaultWebFunctionPlatform, deployAccountStsClientConfig, deployedFillMayBeSecret, derivePseudoParametersFromRegion, describeAwsFailureForWarn, describeCredentialLoadFailure, describePinnedImageUri, describeS3OriginDomain, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, disposeMicrovmCodeArtifact, disposeWebFunctionArtifact, downloadAndExtractS3Bundle, ecsClusterOption, edgeHeadersToHttp, enforceImageOverrideOrphans, evaluateCachedLambdaPolicy, evaluateResponseParameters, extractKvsAssociations, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, filterStudioCustomResources, filterStudioTargetGroups, filterWebSocketApisByIdentifiers, finalizeMicrovmEnv, finalizeWebFunctionEnv, findFileAssetForObjectKey, firstUsableRegion, formatStateRemedy, generateMicrovmId, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, httpHeadersToEdge, idFromArn, imageOverrideKeyAliases, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isBucketDeploymentResource, isCloudFrontDistribution, isCustomResourceLambdaTarget, isFunctionUrlOacFronted, isLocalCdkAssetImage, isProxyEnvConfigured, keysNotFromTemplate, keysOverriddenBy, listPinnedTargets, matchBehavior, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, mergeForService, microvmFidelityWarnings, microvmImageTag, normalizeKvsFileKeys, parseConnectionsPath, parseDynamicReference, parseImageOverrideFlags, parseKvsFileOverrides, parseLbPortOverrides, parseMaxTasks, parseOriginOverrides, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, parseWebFunctionBuildConfig, pickAgentCoreCandidateStack, pickFunctionUrlLogicalIdFromOrigin, pickKvsLogicalIdFromArn, pickLambdaEdgeFunctionLogicalId, pickRefLogicalId, pickResponseTemplate, pickTargetFunctionLogicalId, pickWebFunctionEndpointLogicalIdFromOrigin, planMicrovmPorts, planWebFunctionContainer, pollBuildHook, postHook, probeHostGatewaySupport, readContainerLogTail, readEnvCallerCredentials, readExposedPorts, readMicrovmImageConfig, readMtlsMaterialsFromDisk, readRunHookPayload, readWebFunctionServiceConfig, recordAssumedRole, reinvoke, relayServeRequest, renderCodeDockerfile, renderStudioHtml, resetWorkloadIdentity, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveBucketDeploymentObjectKey, resolveCloudFrontDistribution, resolveCloudFrontTarget, resolveDeployedKvsArnByName, resolveDeployedOriginBucket, resolveDynamicReferencesInEnv, resolveEcsAssumeRoleOption, resolveEnvVars, resolveErrorResponseCandidates, resolveHostGatewayExtraHosts, resolveImageOverrides, resolveKvsModulesForDistribution, resolveLambdaArnIntrinsic, resolveMicrovmCodeArtifact, resolveMicrovmImageTarget, resolveProfileCredentials, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServeBaseUrl, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, resolveWebFunctionArtifact, resolveWebFunctionRuntime, resolveWebFunctionTarget, rewriteUpgradeResponseHead, runEcsServiceEmulator, runHookBody, runImageOverrideBuilds, runViewerRequest, runViewerResponse, s3KeyOfUri, selectIntegrationResponse, selectServeInboundAuth, selectTargetPort, serveFromStaticOrigin, serveLambdaUrlOrigin, serviceStrategy, setContainerPaused, setShadowReadyTimeoutMs, signAgentCoreInvocation, startAgentCoreHttpServer, startAgentCoreWsBridge, startApiServer, startCloudFrontServer, startMicrovmFrontDoor, startStudioProxy, startStudioServer, startWebFunctionContainer, stripCloudFrontImport, stripMicrovmProxyHeaders, substituteImagePlaceholders, supportedWebFunctionRuntimes, toCmdArgv, toStudioTargetGroups, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCoreHttpReady, waitForAgentCorePing, waitForAppAnswer, waitForWebFunctionReady, watchContainerExit, webFunctionAssumeRole, webFunctionFidelityWarnings, webSocketApiMatchesIdentifier, withoutKeys, workloadClientConfig, workloadStsClientConfig };
 //# sourceMappingURL=internal.d.ts.map