cdk-local 0.160.0 → 0.160.1

package/dist/{local-studio-D1XHJoJZ.js → local-studio-Ur6enHho.js}

@@ -1,8 +1,8 @@
 import { C as sanitizeServiceExceptionMessage, S as isAwsServiceException, _ as resolveAssemblyPath, a as isDockerClientEnvKey, b as describeCredentialLoadFailure, c as runDockerStreaming, d as absoluteAssemblyPathEscape, f as assemblyPathEscape, g as renderAssemblyPathEscape, h as namesTheSameDirectory, i as getDockerCmd, l as spawnStreaming, m as isPasteableCommandArg, n as finchSecretArgvRefusal, o as isMalformedEnvKey, p as displayUntrustedValue, r as formatDockerLoginError, s as runDockerForeground, u as warnFinchArgvExposure, v as clampErrorName, w as stringifyThrown, x as flattenToOneLine, y as describeAwsFailureForWarn } from "./docker-cmd-CoZdbeos.js";
 import { a as displayIdent, c as getEmbedConfig, i as STACK_REF_MAX_CODE_POINTS, o as displayStackName, s as displayToolOutput, t as getLogger, u as setEmbedConfig } from "./logger-Co5XVwco.js";
-import { chmodSync, cpSync, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import { chmodSync, cpSync, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, promises, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, hostname, tmpdir } from "node:os";
-import * as path$1 from "node:path";
+import * as nodePath from "node:path";
 import path, { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { Command, InvalidArgumentError, Option } from "commander";
 import { AssumeRoleCommand, GetCallerIdentityCommand, STSClient } from "@aws-sdk/client-sts";
@@ -6850,6 +6850,10 @@ function extractHashFromImageUri(imageUri) {
 //#endregion
 //#region src/local/rie-client.ts
 const INVOKE_PATH = "/2015-03-31/functions/function/invocations";
+const NOT_AN_RIE_STATUS = /* @__PURE__ */ new Set([404, 405]);
+function notAnRieError(url, status) {
+	return /* @__PURE__ */ new Error(`The container answered the invoke at ${url} with HTTP ${status}, which the Lambda Runtime Interface Emulator never sends for that path: something else is listening on the container's port 8080 (the function's own server?). Check the container logs.`);
+}
 async function waitForRieReady(host, port, timeoutMs = 5e3) {
 	const deadline = Date.now() + timeoutMs;
 	let lastError;
@@ -6910,6 +6914,7 @@ async function invokeRie(host, port, event, timeoutMs) {
 		clearTimeout(timer);
 	}
 	const raw = await response.text();
+	if (NOT_AN_RIE_STATUS.has(response.status)) throw notAnRieError(url, response.status);
 	let payload = raw;
 	try {
 		payload = JSON.parse(raw);
@@ -6965,6 +6970,11 @@ async function invokeRieStreaming(host, port, event, timeoutMs) {
 		if (err.name === "AbortError") throw new Error(`RIE streaming invoke at ${url} timed out after ${timeoutMs}ms. The handler may be hung; check container logs.`);
 		throw err;
 	}
+	if (NOT_AN_RIE_STATUS.has(response.status)) {
+		clearTimeout(timer);
+		await response.body?.cancel().catch(() => void 0);
+		throw notAnRieError(url, response.status);
+	}
 	if (!response.body) {
 		clearTimeout(timer);
 		throw new Error(`RIE streaming invoke at ${url} returned no response body.`);
@@ -8856,11 +8866,11 @@ function createContainerPool(specs, options) {
 		} else containerId = await runDetached({
 			image: spec.image,
 			mounts: [],
-			...spec.profileCredentialsFile && { extraMounts: [{
+			extraMounts: [...spec.rieMount ? [spec.rieMount] : [], ...spec.profileCredentialsFile ? [{
 				hostPath: spec.profileCredentialsFile.hostPath,
 				containerPath: spec.profileCredentialsFile.containerPath,
 				readOnly: true
-			}] },
+			}] : []],
 			env: spec.env,
 			...spec.sensitiveEnvKeys !== void 0 && { sensitiveEnvKeys: spec.sensitiveEnvKeys },
 			cmd: spec.command,
@@ -9077,6 +9087,209 @@ function clampConcurrency(input) {
 	return Math.min(MAX_PER_LAMBDA_CONCURRENCY, Math.max(MIN_PER_LAMBDA_CONCURRENCY, Math.trunc(input)));
 }
 
+//#endregion
+//#region src/utils/cache-home.ts
+function userCacheHome(env = process.env, home = homedir) {
+	const product = getEmbedConfig().productName.replace(/[^A-Za-z0-9._-]/g, "-").replace(/^\.*$/, "-");
+	const xdg = env["XDG_CACHE_HOME"];
+	if (xdg !== void 0 && isAbsolute(xdg)) return join(xdg, product);
+	let dir;
+	try {
+		dir = home();
+	} catch {
+		return;
+	}
+	return isAbsolute(dir) ? join(dir, ".cache", product) : void 0;
+}
+
+//#endregion
+//#region src/local/rie-mount.ts
+const RIE_CONTAINER_PATH = "/var/rapid/aws-lambda-rie";
+const RIE_SOURCE_IMAGE = "public.ecr.aws/lambda/provided:al2023";
+const RIE_SOURCE_PATH = "/usr/local/bin/aws-lambda-rie";
+const RIE_BASENAME = "aws-lambda-rie";
+const ELF_MACHINE_BY_PLATFORM = {
+	"linux/amd64": 62,
+	"linux/arm64": 183
+};
+function rieCacheDirectory(env = process.env) {
+	const root = userCacheHome(env);
+	return root === void 0 ? void 0 : join(root, "lambda-rie");
+}
+const inFlight = /* @__PURE__ */ new Map();
+const warnedNoBinary = /* @__PURE__ */ new Set();
+async function resolveRieWrap(input) {
+	const logger = getLogger().child("rie");
+	let program;
+	try {
+		const own = nonEmpty(input.entryPoint) && nonEmpty(input.command) ? {
+			entrypoint: [],
+			cmd: []
+		} : await inspectImageEntrypointCmd(input.image);
+		const entryPoint = nonEmpty(input.entryPoint) ? [...input.entryPoint] : own.entrypoint;
+		const cmd = nonEmpty(input.command) ? [...input.command] : own.cmd;
+		program = [...entryPoint, ...cmd];
+	} catch (err) {
+		logger.warn(`Could not read the ENTRYPOINT / CMD of image ${displayUntrustedValue(input.image)} (${messageOf(err)}), so no Lambda Runtime Interface Emulator is mounted into it; it runs as built.`);
+		return;
+	}
+	const ownRie = program.find(isRieExecutable);
+	if (ownRie !== void 0) {
+		logger.debug(`Image ${displayUntrustedValue(input.image)} already runs ${displayUntrustedValue(ownRie)}; not mounting another RIE`);
+		return;
+	}
+	let hostPath;
+	try {
+		hostPath = await ensureRieBinary(input.platform, input.skipPull === true);
+	} catch (err) {
+		if (!warnedNoBinary.has(input.platform)) {
+			warnedNoBinary.add(input.platform);
+			logger.warn(`Could not mount the Lambda Runtime Interface Emulator into ${displayUntrustedValue(input.platform)} container-image functions (${messageOf(err)}). They run as built, so only images that ship their own emulator (the AWS Lambda base images do) can be invoked.`);
+		} else logger.debug(`RIE mount skipped for ${displayUntrustedValue(input.image)}: ${messageOf(err)}`);
+		return;
+	}
+	return {
+		mount: {
+			hostPath,
+			containerPath: RIE_CONTAINER_PATH,
+			readOnly: true
+		},
+		entryPoint: [RIE_CONTAINER_PATH],
+		cmd: program
+	};
+}
+function isRieExecutable(path) {
+	return basename(path).startsWith(RIE_BASENAME);
+}
+function messageOf(err) {
+	return displayToolOutput(err instanceof Error ? err.message : String(err));
+}
+function nonEmpty(v) {
+	return v !== void 0 && v.length > 0;
+}
+async function inspectImageEntrypointCmd(image) {
+	let stdout;
+	try {
+		({stdout} = await runDockerStreaming([
+			"image",
+			"inspect",
+			"--format",
+			"{{json .Config}}",
+			image
+		], { streamLive: false }));
+	} catch (err) {
+		throw new Error(`docker image inspect failed: ${messageOf(err)}`);
+	}
+	const config = JSON.parse(stdout.trim());
+	return {
+		entrypoint: stringArray(config?.Entrypoint),
+		cmd: stringArray(config?.Cmd)
+	};
+}
+function stringArray(v) {
+	return Array.isArray(v) && v.every((s) => typeof s === "string") ? v : [];
+}
+async function ensureRieBinary(platform, skipPull) {
+	const machine = ELF_MACHINE_BY_PLATFORM[platform];
+	if (machine === void 0) throw new Error(`unsupported platform '${platform}'`);
+	const root = rieCacheDirectory();
+	if (root === void 0) throw new Error("no cache directory (HOME is not set)");
+	const target = join(root, platform.replace("/", "-"), RIE_BASENAME);
+	if (!isMountableHostPath(target)) throw new Error(`the cache path ${displayUntrustedValue(target)} contains ':'`);
+	let run = inFlight.get(target);
+	if (run === void 0) {
+		run = (async () => {
+			if (await isRegularFile(target) && await isElfFor(target, machine)) return target;
+			await extractRie(platform, target, machine, skipPull);
+			return target;
+		})();
+		inFlight.set(target, run);
+		run.catch(() => inFlight.delete(target));
+	}
+	return run;
+}
+function isMountableHostPath(path, pathApi = nodePath) {
+	return !path.slice(pathApi.parse(path).root.length).includes(":");
+}
+async function isRegularFile(path) {
+	try {
+		return (await promises.lstat(path)).isFile();
+	} catch {
+		return false;
+	}
+}
+async function isElfFor(path, machine) {
+	let handle;
+	try {
+		handle = await promises.open(path, "r");
+		const header = Buffer.alloc(20);
+		const { bytesRead } = await handle.read(header, 0, 20, 0);
+		return bytesRead === 20 && header.readUInt32BE(0) === 2135247942 && header.readUInt16LE(18) === machine;
+	} catch {
+		return false;
+	} finally {
+		await handle?.close().catch(() => void 0);
+	}
+}
+async function extractRie(platform, target, machine, skipPull) {
+	getLogger().child("rie").info(skipPull ? `Copying the Lambda Runtime Interface Emulator for ${platform} out of the local ${RIE_SOURCE_IMAGE} image (one time)...` : `Fetching the Lambda Runtime Interface Emulator for ${platform} from ${RIE_SOURCE_IMAGE} (one time)...`);
+	const dir = dirname(target);
+	await promises.mkdir(dir, {
+		recursive: true,
+		mode: 448
+	});
+	if (!skipPull) try {
+		await runDockerStreaming([
+			"pull",
+			"--platform",
+			platform,
+			RIE_SOURCE_IMAGE
+		], { streamLive: false });
+	} catch (err) {
+		throw new Error(`docker pull failed: ${messageOf(err)}`);
+	}
+	const createArgs = [
+		"create",
+		"--name",
+		`${getEmbedConfig().resourceNamePrefix}-rie-extract-${process.pid}-${randomBytes(4).toString("hex")}`,
+		...skipPull ? ["--pull", "never"] : [],
+		"--platform",
+		platform,
+		RIE_SOURCE_IMAGE
+	];
+	let containerId;
+	try {
+		containerId = (await runDockerStreaming(createArgs, { streamLive: false })).stdout.trim();
+	} catch (err) {
+		throw new Error(`docker create failed: ${messageOf(err)}` + (skipPull ? ` (--no-pull: pull ${RIE_SOURCE_IMAGE} once, or run ${getEmbedConfig().binaryName} without --no-pull)` : ""));
+	}
+	const tmp = join(dir, `.${RIE_BASENAME}.${process.pid}.${randomBytes(4).toString("hex")}`);
+	try {
+		try {
+			await runDockerStreaming([
+				"cp",
+				`${containerId}:${RIE_SOURCE_PATH}`,
+				tmp
+			], { streamLive: false });
+		} catch (err) {
+			throw new Error(`docker cp failed: ${messageOf(err)}`);
+		}
+		if (!await isRegularFile(tmp) || !await isElfFor(tmp, machine)) throw new Error(`the copied ${RIE_SOURCE_PATH} is not a ${platform} executable`);
+		await promises.chmod(tmp, 493);
+		await promises.rename(tmp, target);
+	} finally {
+		await promises.rm(tmp, {
+			force: true,
+			recursive: true
+		}).catch(() => void 0);
+		await runDockerStreaming([
+			"rm",
+			"-f",
+			containerId
+		], { streamLive: false }).catch(() => void 0);
+	}
+}
+
 //#endregion
 //#region src/local/api-gateway-event.ts
 const MOCK_ACCOUNT_ID = "123456789012";
@@ -12337,8 +12550,8 @@ function getContainerAwsCredentialsPath() {
 async function writeProfileCredentialsFile(profileName, creds) {
 	if (profileName === "") throw new Error("writeProfileCredentialsFile: profile name must not be empty.");
 	if (/[\r\n[\]]/.test(profileName)) throw new Error(`writeProfileCredentialsFile: profile name ${displayUntrustedValue(profileName)} contains a forbidden character (any of CR, LF, '[', ']' would corrupt the INI file or the docker -e env var).`);
-	const dir = await mkdtemp(path$1.join(tmpdir(), `${getEmbedConfig().productName}-profile-creds-`));
-	const hostPath = path$1.join(dir, "credentials");
+	const dir = await mkdtemp(nodePath.join(tmpdir(), `${getEmbedConfig().productName}-profile-creds-`));
+	const hostPath = nodePath.join(dir, "credentials");
 	const lines = [
 		`[${profileName}]`,
 		`aws_access_key_id = ${creds.accessKeyId}`,
@@ -12791,8 +13004,8 @@ async function localStartApiCommand(targets, options, extraStateProviders) {
 }
 function createWatchPredicates(args) {
 	const { watchRoot, output, watchConfig } = args;
-	const toRel = (abs) => path$1.relative(watchRoot, abs).split(path$1.sep).join("/");
-	const outputRel = toRel(path$1.resolve(watchRoot, output));
+	const toRel = (abs) => nodePath.relative(watchRoot, abs).split(nodePath.sep).join("/");
+	const outputRel = toRel(nodePath.resolve(watchRoot, output));
 	const excludePatterns = [
 		...outputRel !== "" && !outputRel.startsWith("..") ? [outputRel] : [],
 		"node_modules",
@@ -13159,13 +13372,24 @@ async function buildContainerSpec(args) {
 			containerPath: profileCredsFile.containerPath
 		} }
 	};
+	const rie = await resolveRieWrap({
+		image: imageRef,
+		platform,
+		entryPoint: lambda.imageConfig.entryPoint,
+		command: lambda.imageConfig.command,
+		skipPull
+	});
 	return {
 		kind: "image",
 		lambda,
 		image: imageRef,
 		platform,
-		command: lambda.imageConfig.command ?? [],
-		...lambda.imageConfig.entryPoint !== void 0 && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
+		command: rie ? rie.cmd : lambda.imageConfig.command ?? [],
+		...rie && {
+			entryPoint: rie.entryPoint,
+			rieMount: rie.mount
+		},
+		...!rie && lambda.imageConfig.entryPoint !== void 0 && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
 		...lambda.imageConfig.workingDirectory !== void 0 && { workingDir: lambda.imageConfig.workingDirectory },
 		env: dockerEnv,
 		...sensitiveEnvKeys && { sensitiveEnvKeys },
@@ -13198,7 +13422,7 @@ async function resolveContainerImageForStartApi(lambda, skipPull, profile, optio
 async function resolveLocalBuildPlan$1(lambda) {
 	const manifestPath = lambda.stack.assetManifestPath;
 	if (!manifestPath) return void 0;
-	const cdkOutDir = path$1.dirname(manifestPath);
+	const cdkOutDir = nodePath.dirname(manifestPath);
 	const manifest = await new AssetManifestLoader().loadStackManifest(lambda.stack, cdkOutDir);
 	if (!manifest) return void 0;
 	const entry = getDockerImageBySourceHash(manifest, lambda.imageUri);
@@ -13228,7 +13452,7 @@ async function materializeLambdaLayers$1(layers, layerTmpDirs, layerRoleArn) {
 		});
 	}
 	if (flat.length === 1) return flat[0].assetPath;
-	const dir = mkdtempSync(path$1.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-start-api-layers-`));
+	const dir = mkdtempSync(nodePath.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-start-api-layers-`));
 	try {
 		for (const layer of flat) copyLayerTreeLastWins(layer.assetPath, dir);
 	} catch (error) {
@@ -13369,10 +13593,10 @@ function materializeInlineCode$2(handler, source, fileExtension, tmpDirsOut) {
 	const lastDot = handler.lastIndexOf(".");
 	if (lastDot <= 0) throw new Error(`Handler ${displayUntrustedValue(handler)} is malformed: expected '<modulePath>.<exportName>'.`);
 	const modulePath = handler.substring(0, lastDot);
-	const dir = mkdtempSync(path$1.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-start-api-`));
+	const dir = mkdtempSync(nodePath.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-start-api-`));
 	tmpDirsOut.add(dir);
-	const filePath = path$1.join(dir, `${modulePath}${fileExtension}`);
-	mkdirSync(path$1.dirname(filePath), { recursive: true });
+	const filePath = nodePath.join(dir, `${modulePath}${fileExtension}`);
+	mkdirSync(nodePath.dirname(filePath), { recursive: true });
 	writeFileSync(filePath, source, "utf-8");
 	return dir;
 }
@@ -13896,7 +14120,7 @@ function materializeLambdaLayers(layers) {
 		containerPath: "/opt",
 		readOnly: true
 	} };
-	const tmpDir = mkdtempSync(path$1.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-invoke-layers-`));
+	const tmpDir = mkdtempSync(nodePath.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-invoke-layers-`));
 	try {
 		for (const layer of layers) copyLayerTreeLastWins(layer.assetPath, tmpDir);
 	} catch (error) {
@@ -13936,13 +14160,21 @@ async function resolveContainerImagePlan$1(lambda, options) {
 		});
 	}
 	const tmpfs = resolveTmpfsForLambda(lambda);
+	const rie = await resolveRieWrap({
+		image: imageRef,
+		platform,
+		entryPoint: lambda.imageConfig.entryPoint,
+		command: lambda.imageConfig.command,
+		skipPull: options.pull === false
+	});
 	return {
 		image: imageRef,
 		mounts: [],
-		extraMounts: [],
-		cmd: lambda.imageConfig.command ?? [],
+		extraMounts: rie ? [rie.mount] : [],
+		cmd: rie ? rie.cmd : lambda.imageConfig.command ?? [],
 		platform,
-		...lambda.imageConfig.entryPoint && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
+		...rie && { entryPoint: rie.entryPoint },
+		...!rie && lambda.imageConfig.entryPoint && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
 		...lambda.imageConfig.workingDirectory !== void 0 && { workingDir: lambda.imageConfig.workingDirectory },
 		...tmpfs !== void 0 && { tmpfs }
 	};
@@ -14233,9 +14465,9 @@ function materializeInlineCode$1(handler, source, fileExtension) {
 	const lastDot = handler.lastIndexOf(".");
 	if (lastDot <= 0) throw new Error(`Handler ${displayUntrustedValue(handler)} is malformed: expected '<modulePath>.<exportName>'.`);
 	const modulePath = handler.substring(0, lastDot);
-	const dir = mkdtempSync(path$1.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-invoke-`));
-	const filePath = path$1.join(dir, `${modulePath}${fileExtension}`);
-	mkdirSync(path$1.dirname(filePath), { recursive: true });
+	const dir = mkdtempSync(nodePath.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-invoke-`));
+	const filePath = nodePath.join(dir, `${modulePath}${fileExtension}`);
+	mkdirSync(nodePath.dirname(filePath), { recursive: true });
 	writeFileSync(filePath, source, "utf-8");
 	return dir;
 }
@@ -19854,9 +20086,9 @@ function materializeInlineCode(handler, source, fileExtension) {
 	const lastDot = handler.lastIndexOf(".");
 	if (lastDot <= 0) throw new Error(`Handler ${displayIdent(handler)} is malformed: expected '<modulePath>.<exportName>'.`);
 	const modulePath = handler.substring(0, lastDot);
-	const dir = mkdtempSync(path$1.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-alb-lambda-`));
-	const filePath = path$1.join(dir, `${modulePath}${fileExtension}`);
-	mkdirSync(path$1.dirname(filePath), { recursive: true });
+	const dir = mkdtempSync(nodePath.join(tmpdir(), `${getEmbedConfig().resourceNamePrefix}-alb-lambda-`));
+	const filePath = nodePath.join(dir, `${modulePath}${fileExtension}`);
+	mkdirSync(nodePath.dirname(filePath), { recursive: true });
 	writeFileSync(filePath, source, "utf-8");
 	return dir;
 }
@@ -19896,7 +20128,7 @@ async function resolveContainerImagePlan(lambda, opts) {
 	let imageRef;
 	let localBuilt = false;
 	if (manifestPath) {
-		const cdkOutDir = path$1.dirname(manifestPath);
+		const cdkOutDir = nodePath.dirname(manifestPath);
 		const manifest = await new AssetManifestLoader().loadStackManifest(lambda.stack, cdkOutDir);
 		const entry = manifest ? getDockerImageBySourceHash(manifest, lambda.imageUri) : void 0;
 		if (entry) {
@@ -19916,12 +20148,20 @@ async function resolveContainerImagePlan(lambda, opts) {
 			...opts.ecrRoleArn !== void 0 && { ecrRoleArn: opts.ecrRoleArn }
 		});
 	}
+	const rie = await resolveRieWrap({
+		image: imageRef,
+		platform,
+		entryPoint: lambda.imageConfig.entryPoint,
+		command: lambda.imageConfig.command,
+		skipPull: opts.skipPull === true
+	});
 	return {
 		image: imageRef,
-		mounts: [],
-		cmd: lambda.imageConfig.command ?? [],
+		mounts: rie ? [rie.mount] : [],
+		cmd: rie ? rie.cmd : lambda.imageConfig.command ?? [],
 		platform,
-		...lambda.imageConfig.entryPoint && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
+		...rie && { entryPoint: rie.entryPoint },
+		...!rie && lambda.imageConfig.entryPoint && lambda.imageConfig.entryPoint.length > 0 && { entryPoint: lambda.imageConfig.entryPoint },
 		...lambda.imageConfig.workingDirectory !== void 0 && { workingDir: lambda.imageConfig.workingDirectory }
 	};
 }
@@ -33360,4 +33600,4 @@ function addStudioSpecificOptions(cmd) {
 
 //#endregion
 export { postHook as $, deployedFillMayBeSecret as $a, parseConnectionsPath as $i, addImageOverrideOptions as $n, addStartApiSpecificOptions as $r, classifyS3Error as $t, microvmFidelityWarnings as A, discoverWebSocketApisOrThrow as Aa, applyCorsResponseHeaders as Ai, stripCloudFrontImport as An, A2A_CONTAINER_PORT as Ar, readContainerLogTail as At, MICROVM_WS_BASE_PROTOCOL as B, AGENTCORE_MCP_PROTOCOL as Ba, evaluateResponseParameters as Bi, createLocalStartAlbCommand as Bn, AGENTCORE_SESSION_ID_HEADER as Br, parseWebFunctionBuildConfig as Bt, addListSpecificOptions as C, resolveSsmParameters as Ca, verifyJwtViaDiscovery as Ci, WEB_FUNCTION_REVISION_TYPE as Cn, setShadowReadyTimeoutMs as Cr, parseKvsFileOverrides as Ct, buildMicrovmLambdaView as D, listTargets as Da, invokeRequestAuthorizer as Di, compileCloudFrontFunction as Dn, createLocalInvokeAgentCoreCommand as Dr, WEB_FUNCTION_CONTAINER_PORT as Dt, addStartMicrovmSpecificOptions as E, countTargets as Ea, evaluateCachedLambdaPolicy as Ei, resolveWebFunctionTarget as En, addInvokeAgentCoreSpecificOptions as Er, RecentOutput as Et, microvmImageTag as F, pickRefLogicalId as Fa, matchRoute as Fi, findFileAssetForObjectKey as Fn, MCP_PROTOCOL_VERSION as Fr, buildNodeEntryFileStart as Ft, startMicrovmFrontDoor as G, derivePseudoParametersFromRegion as Ga, HOST_DOCKER_INTERNAL_GATEWAY as Gi, addStartServiceSpecificOptions as Gn, SUPPORTED_CODE_RUNTIMES as Gr, readWebFunctionServiceConfig as Gt, PROXY_PORT_HEADER as H, AgentCoreResolutionError as Ha, selectIntegrationResponse as Hi, resolveAlbTarget as Hn, waitForAgentCoreHttpReady as Hr, WEB_FUNCTION_HTTP_ENDPOINT_ENV as Ht, planMicrovmPorts as I, resolveLambdaArnIntrinsic as Ia, translateLambdaResponse as Ii, isBucketDeploymentResource as In, mcpInvokeOnce as Ir, defaultWebFunctionPlatform as It, MICROVM_HOOK_PATH_PREFIX as J, tryResolveImageFnJoin as Ja, resolveHostGatewayExtraHosts as Ji, addRunTaskSpecificOptions as Jn, renderCodeDockerfile as Jr, idFromArn as Jt, stripMicrovmProxyHeaders as K, formatStateRemedy as Ka, HOST_GATEWAY_MIN_VERSION as Ki, createLocalStartServiceCommand as Kn, buildAgentCoreCodeImage as Kr, webFunctionAssumeRole as Kt, readExposedPorts as L, AGENTCORE_A2A_PROTOCOL as La, applyAuthorizerOverlay as Li, resolveBucketDeploymentObjectKey as Ln, parseSseForJsonRpc as Lr, resolveWebFunctionRuntime as Lt, DEFAULT_TERMINATE_HOOK_TIMEOUT_MS as M, parseSelectionExpressionPath as Ma, buildCorsConfigFromCloudFrontChain as Mi, createLocalFileKvsDataSource as Mn, a2aInvokeOnce as Mr, waitForWebFunctionReady as Mt, LocalMicrovm as N, webSocketApiMatchesIdentifier as Na, isFunctionUrlOacFronted as Ni, createUnboundCloudFrontModule as Nn, MCP_CONTAINER_PORT as Nr, watchContainerExit as Nt, createLocalStartMicrovmCommand as O, availableWebSocketApiIdentifiers as Oa, invokeTokenAuthorizer as Oi, runViewerRequest as On, bridgeAgentCoreWs as Or, containerFailure as Ot, buildMicrovmImage as P, discoverRoutes as Pa, matchPreflight as Pi, bucketDeploymentSourceObjectKeys as Pn, MCP_PATH as Pr, WEB_FUNCTION_RUNTIMES as Pt, pollBuildHook as Q, containsDynamicReference as Qa, handleConnectionsRequest as Qi, addEcsAssumeRoleOptions as Qn, createLocalInvokeCommand as Qr, resolveDeployedOriginBucket as Qt, setContainerPaused as R, AGENTCORE_AGUI_PROTOCOL as Ra, buildHttpApiV2Event as Ri, addAlbSpecificOptions as Rn, AGENTCORE_SIGV4_SERVICE as Rr, supportedWebFunctionRuntimes as Rt, StudioEventBus as S, collectSsmParameterRefs as Sa, verifyJwtAuthorizer as Si, WEB_FUNCTION_ENDPOINT_TYPE as Sn, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Sr, normalizeKvsFileKeys as St, formatTargetListing as T, resolveSingleTarget as Ta, computeRequestIdentityHash as Ti, WebFunctionResolutionError as Tn, attachContainerLogStreamer as Tr, resolveCloudFrontTarget as Tt, rewriteUpgradeResponseHead as U, pickAgentCoreCandidateStack as Ua, tryParseStatus as Ui, isApplicationLoadBalancer as Un, waitForAgentCorePing as Ur, buildWebFunctionLambdaView as Ut, MicrovmStateError as V, AGENTCORE_RUNTIME_TYPE as Va, pickResponseTemplate as Vi, parseLbPortOverrides as Vn, invokeAgentCore as Vr, resolveWebFunctionArtifact as Vt, selectTargetPort as W, resolveAgentCoreTarget as Wa, VtlEvaluationError as Wi, resolveAlbFrontDoor as Wn, downloadAndExtractS3Bundle as Wr, finalizeWebFunctionEnv as Wt, callRuntimeHook as X, DynamicReferenceResolutionError as Xa, ConnectionRegistry as Xi, MAX_TASKS_SUBNET_RANGE_CAP as Xn, classifySourceChange as Xr, createDeployedKvsDataSource as Xt, MicrovmHookError as Y, LocalInvokeBuildError as Ya, bufferToBody as Yi, createLocalRunTaskCommand as Yn, toCmdArgv as Yr, resolveKvsModulesForDistribution as Yt, generateMicrovmId as Z, DynamicReferenceResolver as Za, buildMgmtEndpointEnvUrl as Zi, addCommonEcsServiceOptions as Zn, addInvokeSpecificOptions as Zr, resolveDeployedKvsArnByName as Zt, filterStudioTargetGroups as _, rejectExplicitCfnStackWithMultipleStacks as _a, defaultCredentialsLoader as _i, pickKvsLogicalIdFromArn as _n, isProxyEnvConfigured as _o, isLocalCdkAssetImage as _r, attachAgentCoreWsBridge as _t, createLocalStudioCommand as a, resolveRuntimeCodeMountPath as aa, attachStageContext as ai, serveLambdaUrlOrigin as an, withoutKeys as ao, resolveSharedSidecarCredentials as ar, disposeMicrovmCodeArtifact as at, renderStudioHtml as b, resolveCfnStackName as ba, createJwksCache as bi, pickWebFunctionEndpointLogicalIdFromOrigin as bn, CloudMapRegistry as br, addStartCloudFrontSpecificOptions as bt, startStudioProxy as c, EcsTaskResolutionError as ca, resolveEnvVars$1 as ci, buildEdgeRequestEvent as cn, deployAccountStsClientConfig as co, buildImageOverrideTag as cr, resolveMicrovmImageTarget as ct, createStudioDispatcher as d, substituteAgainstStateAsync as da, filterRoutesByApiIdentifiers as di, httpHeadersToEdge as dn, resetWorkloadIdentity as do, mergeForService as dr, createLocalStartWebFunctionCommand as dt, buildConnectEvent as ea, createLocalStartApiCommand as ei, createS3OriginReader as en, firstUsableRegion as eo, buildEcsImageResolutionContext$1 as er, runHookBody as et, filterStudioCustomResources as f, substituteEnvVarsFromState as fa, groupRoutesByServer as fi, CLOUDFRONT_DISTRIBUTION_TYPE as fn, workloadClientConfig as fo, parseImageOverrideFlags as fr, addStartAgentCoreSpecificOptions as ft, annotatePinnedEcsTargets as g, isCfnFlagPresent as ga, resolveServiceIntegrationParameters as gi, pickFunctionUrlLogicalIdFromOrigin as gn, buildProxyClientConfig as go, imageOverrideKeyAliases as gr, startAgentCoreHttpServer as gt, annotateEcsTaskPinnedTargets as h, createLocalStateProvider as ha, resolveSelectionExpression as hi, isCloudFrontDistribution as hn, resolveProfileCredentials as ho, describePinnedImageUri as hr, selectServeInboundAuth as ht, coerceStopRequest as i, buildContainerImage as ia, createFileWatcher as ii, serveFromStaticOrigin as in, resolveDynamicReferencesInEnv as io, resolveEcsAssumeRoleOption as ir, MicrovmResolutionError as it, readRunHookPayload as j, filterWebSocketApisByIdentifiers as ja, buildCorsConfigByApiId as ji, createCloudFrontModule as jn, A2A_PATH as jr, startWebFunctionContainer as jt, finalizeMicrovmEnv as k, discoverWebSocketApis as ka, attachAuthorizers as ki, runViewerResponse as kn, invokeAgentCoreWs as kr, planWebFunctionContainer as kt, relayServeRequest as l, assertEcsTaskImagesResolvable as la, availableApiIdentifiers as li, buildEdgeResponseEvent as ln, readEnvCallerCredentials as lo, canonicalizeImageOverrideKeys as lr, s3KeyOfUri as lt, annotateAlbPinnedBackingServices as m, LocalStateSourceError as ma, startApiServer as mi, extractKvsAssociations as mn, buildStsClientConfig as mo, runImageOverrideBuilds as mr, buildAgentCoreServeAuthCheck as mt, coerceRunRequest as n, buildMessageEvent as na, resolveApiTargetSubset as ni, startCloudFrontServer as nn, keysOverriddenBy as no, parseMaxTasks as nr, MICROVM_DEFAULT_INGRESS_PORT as nt, resolveServeBaseUrl as o, resolveRuntimeFileExtension as oa, buildStageMap as oi, applyEdgeRequestResult as on, SECOND_ASSUME_MESSAGE as oo, runEcsServiceEmulator as or, readMicrovmImageConfig as ot, isCustomResourceLambdaTarget as p, substituteEnvVarsFromStateAsync as pa, readMtlsMaterialsFromDisk as pi, describeS3OriginDomain as pn, workloadStsClientConfig as po, resolveImageOverrides as pr, createLocalStartAgentCoreCommand as pt, MAX_RUN_HOOK_PAYLOAD_BYTES as q, substituteImagePlaceholders as qa, probeHostGatewaySupport as qi, serviceStrategy as qn, computeCodeImageTag as qr, webFunctionFidelityWarnings as qt, coerceServeRequest as r, architectureToPlatform as ra, createAuthorizerCache as ri, resolveErrorResponseCandidates as rn, parseDynamicReference as ro, parseRestartPolicy as rr, MICROVM_IMAGE_TYPE as rt, createStudioServeManager as s, resolveRuntimeImage as sa, materializeLayerFromArn as si, applyEdgeResponseResult as sn, assumedRoleRecorded as so, ImageOverrideError as sr, resolveMicrovmCodeArtifact as st, addStudioSpecificOptions as t, buildDisconnectEvent as ta, createWatchPredicates as ti, matchBehavior as tn, keysNotFromTemplate as to, ecsClusterOption as tr, waitForAppAnswer as tt, reinvoke as u, substituteAgainstState as ua, filterRoutesByApiIdentifier as ui, edgeHeadersToHttp as un, recordAssumedRole as uo, enforceImageOverrideOrphans as ur, addStartWebFunctionSpecificOptions as ut, startStudioServer as v, resolveCfnFallbackRegion as va, buildCognitoJwksUrl as vi, pickLambdaEdgeFunctionLogicalId as vn, listPinnedTargets as vr, startAgentCoreWsBridge as vt, createLocalListCommand as w, resolveWatchConfig as wa, buildMethodArn as wi, WEB_FUNCTION_TYPE as wn, getContainerNetworkIp as wr, parseOriginOverrides as wt, createStudioStore as x, CfnLocalStateProvider as xa, verifyCognitoJwt as xi, resolveCloudFrontDistribution as xn, DEFAULT_SHADOW_READY_TIMEOUT_MS as xr, createLocalStartCloudFrontCommand as xt, toStudioTargetGroups as y, resolveCfnRegion as ya, buildJwksUrlFromIssuer as yi, pickTargetFunctionLogicalId as yn, buildCloudMapIndex as yr, LocalStartCloudFrontError as yt, MICROVM_CONTROL_PATH as z, AGENTCORE_HTTP_PROTOCOL as za, buildRestV1Event as zi, albStrategy as zn, signAgentCoreInvocation as zr, disposeWebFunctionArtifact as zt };
-//# sourceMappingURL=local-studio-D1XHJoJZ.js.map
+//# sourceMappingURL=local-studio-Ur6enHho.js.map