cdk-local 0.166.0 → 0.166.1

package/dist/internal.js

@@ -1,7 +1,7 @@
-import { A as validateAwsEmulatorEnvVars, B as describeCredentialLoadFailure, C as isRealAwsSentinel, D as realAwsServicesForWorkload, E as realAwsEndpointFor, G as AWS_ENDPOINT_SERVICE_IDS, J as resolveEnvVars, O as realAwsServicesOf, S as isLegacyAwsEmulatorSentinel, T as readAwsEmulatorEnvVarsFile, _ as MIXED_MODE_RESIGN_PORT, b as findLegacyAwsEmulatorSentinels, c as getAwsEmulatorServiceRouting, d as isProxyEnvConfigured, f as normalizeAwsEndpointServiceId, g as LEGACY_AWS_EMULATOR_SENTINEL, h as setAwsEndpointOverride, i as buildProxyClientConfig, k as resourceTypeMatchesService, l as getAwsEndpointOverride, m as setAwsEmulatorServiceRouting, n as awsEmulatorRealServices, o as deployArtifactClientConfig, q as readEnvVarsFileText, r as awsEndpointOverrideClientConfig, t as awsClientConfigForService, u as isAwsServiceRoutedToEmulator, v as REAL_AWS_SENTINEL, w as legacyAwsEmulatorSentinelMessage, x as findRealAwsExceptions, y as createMixedModeStateProvider, z as describeAwsFailureForWarn } from "./aws-proxy-CtjweaLu.js";
-import { B as substituteImagePlaceholders, C as startLoopbackForwarder, R as derivePseudoParametersFromRegion, S as ensureForwarderImage, T as buildContainerImage, V as tryResolveImageFnJoin, W as LocalInvokeBuildError, _ as LOOPBACK_FORWARDER_IMAGE, b as buildNamespaceOwnerForwarderDockerArgs, g as withWorkloadAwsWiring, i as attachLoopbackForwarder, nt as buildStsClientConfig, rt as resolveProfileCredentials, v as awaitLoopbackForwarderStatus, w as architectureToPlatform, x as describeForwarderFailure, y as buildLoopbackForwarderDockerArgs, z as formatStateRemedy } from "./docker-runner-Du4rQJ1q.js";
-import { A as parseAwsEndpoint, C as effectiveLoopbackPorts, D as javaTruststoreToolOptions, E as getContainerJavaTruststorePath, F as resolveHostDefaultCredentials, G as createMixedModeTlsMaterials, H as MIXED_MODE_RESIGN_BODY_CAP_BYTES, I as resolveWorkloadAwsWiring, L as setActiveWorkloadAwsWiring, M as readEmulatorRunFiles, N as readProfileEndpointSettings, O as loopbackForwarderPlan, P as resolveAwsEmulatorOption, R as takeAwsEmulatorStateSourceHint, S as displayEndpointValue, T as getContainerCaBundlePath, V as writeCaBundleFile, W as buildJavaTrustStore, _ as HOST_DEFAULT_CREDENTIALS_MISS_TTL_MS, a as deployAccountStsClientConfig, b as awsEmulatorEnvName, c as resetWorkloadIdentity, d as workloadStsClientConfig, f as AUTH_OFF_PLACEHOLDER_CREDENTIALS, g as HOST_CA_TRUST_ENV_KEYS, h as EMULATOR_SCRUBBED_ENV_KEYS, i as assumedRoleRecorded, j as probeAwsEmulatorHealth, k as mergeJavaToolOptions, m as DEFAULT_AWS_EMULATOR_URL, o as readEnvCallerCredentials, p as CA_TRUST_ENV_KEYS, s as recordAssumedRole, t as SECOND_ASSUME_MESSAGE, u as workloadClientConfig, v as activateWorkloadAwsWiring, w as getActiveWorkloadAwsWiring, x as collectHostEndpointOverrides, y as applyWorkloadAwsWiringToEnv } from "./workload-identity-BONcukjU.js";
-import { $ as postHook, $a as withoutKeys, $i as probeHostGatewaySupport, $n as addImageOverrideOptions, $r as resolveApiTargetSubset, $t as classifyS3Error, A as microvmFidelityWarnings, Aa as filterWebSocketApisByIdentifiers, Ai as translateLambdaResponse, An as stripCloudFrontImport, Ar as A2A_CONTAINER_PORT, At as readContainerLogTail, B as MICROVM_WS_BASE_PROTOCOL, Ba as AGENTCORE_RUNTIME_TYPE, Bi as ConnectionRegistry, Br as AGENTCORE_SESSION_ID_HEADER, Bt as parseWebFunctionBuildConfig, C as addListSpecificOptions, Ca as resolveWatchConfig, Ci as attachAuthorizers, Cn as WEB_FUNCTION_REVISION_TYPE, Cr as setShadowReadyTimeoutMs, Ct as parseKvsFileOverrides, D as buildMicrovmLambdaView, Da as availableWebSocketApiIdentifiers, Di as isFunctionUrlOacFronted, Dn as compileCloudFrontFunction, Dt as WEB_FUNCTION_CONTAINER_PORT, E as addStartMicrovmSpecificOptions, Ei as buildCorsConfigFromCloudFrontChain, En as resolveWebFunctionTarget, Er as addInvokeAgentCoreSpecificOptions, Et as RecentOutput, F as microvmImageTag, Fa as resolveLambdaArnIntrinsic, Fi as pickResponseTemplate, Fn as findFileAssetForObjectKey, Fr as MCP_PROTOCOL_VERSION, Ft as buildNodeEntryFileStart, G as startMicrovmFrontDoor, Ga as DynamicReferenceResolver, Gi as buildDisconnectEvent, Gn as addStartServiceSpecificOptions, Gr as SUPPORTED_CODE_RUNTIMES, Gt as readWebFunctionServiceConfig, H as PROXY_PORT_HEADER, Ha as pickAgentCoreCandidateStack, Hi as handleConnectionsRequest, Hn as resolveAlbTarget, Hr as waitForAgentCoreHttpReady, Ht as WEB_FUNCTION_HTTP_ENDPOINT_ENV, I as planMicrovmPorts, Ia as AGENTCORE_A2A_PROTOCOL, Ii as selectIntegrationResponse, In as isBucketDeploymentResource, Ir as mcpInvokeOnce, It as defaultWebFunctionPlatform, J as MICROVM_HOOK_PATH_PREFIX, Ja as firstUsableRegion, Ji as createFileWatcher, Jn as addRunTaskSpecificOptions, Jr as renderCodeDockerfile, Jt as idFromArn, K as stripMicrovmProxyHeaders, Ka as containsDynamicReference, Ki as buildMessageEvent, Kr as buildAgentCoreCodeImage, Kt as webFunctionAssumeRole, L as readExposedPorts, La as AGENTCORE_AGUI_PROTOCOL, Li as tryParseStatus, Ln as resolveBucketDeploymentObjectKey, Lr as parseSseForJsonRpc, Lt as resolveWebFunctionRuntime, M as DEFAULT_TERMINATE_HOOK_TIMEOUT_MS, Ma as webSocketApiMatchesIdentifier, Mi as buildHttpApiV2Event, Mn as createLocalFileKvsDataSource, Mr as a2aInvokeOnce, Mt as waitForWebFunctionReady, N as LocalMicrovm, Na as discoverRoutes, Ni as buildRestV1Event, Nn as createUnboundCloudFrontModule, Nr as MCP_CONTAINER_PORT, Nt as watchContainerExit, Oa as discoverWebSocketApis, Oi as matchPreflight, On as runViewerRequest, Or as bridgeAgentCoreWs, Ot as containerFailure, P as buildMicrovmImage, Pa as pickRefLogicalId, Pi as evaluateResponseParameters, Pn as bucketDeploymentSourceObjectKeys, Pr as MCP_PATH, Pt as WEB_FUNCTION_RUNTIMES, Q as pollBuildHook, Qa as resolveDynamicReferencesInEnv, Qi as HOST_GATEWAY_MIN_VERSION, Qn as addEcsAssumeRoleOptions, Qr as createWatchPredicates, Qt as resolveDeployedOriginBucket, R as setContainerPaused, Ra as AGENTCORE_HTTP_PROTOCOL, Ri as VtlEvaluationError, Rn as addAlbSpecificOptions, Rr as AGENTCORE_SIGV4_SERVICE, Rt as supportedWebFunctionRuntimes, S as StudioEventBus, Si as invokeTokenAuthorizer, Sn as WEB_FUNCTION_ENDPOINT_TYPE, Sr as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, St as normalizeKvsFileKeys, Ti as buildCorsConfigByApiId, Tn as WebFunctionResolutionError, Tr as attachContainerLogStreamer, Tt as resolveCloudFrontTarget, U as rewriteUpgradeResponseHead, Ua as resolveAgentCoreTarget, Ui as parseConnectionsPath, Un as isApplicationLoadBalancer, Ur as waitForAgentCorePing, Ut as buildWebFunctionLambdaView, V as MicrovmStateError, Va as AgentCoreResolutionError, Vi as buildMgmtEndpointEnvUrl, Vn as parseLbPortOverrides, Vr as invokeAgentCore, Vt as resolveWebFunctionArtifact, W as selectTargetPort, Wa as DynamicReferenceResolutionError, Wi as buildConnectEvent, Wn as resolveAlbFrontDoor, Wr as downloadAndExtractS3Bundle, Wt as finalizeWebFunctionEnv, X as callRuntimeHook, Xa as keysOverriddenBy, Xn as MAX_TASKS_SUBNET_RANGE_CAP, Xr as addStartApiSpecificOptions, Xt as createDeployedKvsDataSource, Y as MicrovmHookError, Ya as keysNotFromTemplate, Yi as addInvokeSpecificOptions, Yr as toCmdArgv, Yt as resolveKvsModulesForDistribution, Z as generateMicrovmId, Za as parseDynamicReference, Zi as HOST_DOCKER_INTERNAL_GATEWAY, Zn as addCommonEcsServiceOptions, Zt as resolveDeployedKvsArnByName, _ as filterStudioTargetGroups, _i as verifyJwtViaDiscovery, _n as pickKvsLogicalIdFromArn, _r as isLocalCdkAssetImage, _t as attachAgentCoreWsBridge, aa as assertEcsTaskImagesResolvable, ai as filterRoutesByApiIdentifiers, an as serveLambdaUrlOrigin, ar as resolveSharedSidecarCredentials, at as disposeMicrovmCodeArtifact, b as renderStudioHtml, bi as evaluateCachedLambdaPolicy, bn as pickWebFunctionEndpointLogicalIdFromOrigin, br as CloudMapRegistry, bt as addStartCloudFrontSpecificOptions, c as startStudioProxy, ci as startApiServer, cn as buildEdgeRequestEvent, cr as buildImageOverrideTag, ct as resolveMicrovmImageTarget, d as createStudioDispatcher, di as defaultCredentialsLoader, dn as httpHeadersToEdge, dr as mergeForService, ea as resolveHostGatewayExtraHosts, ei as createAuthorizerCache, en as createS3OriginReader, eo as addAwsEndpointOptions, er as buildEcsImageResolutionContext, et as runHookBody, f as filterStudioCustomResources, fa as UNNAMED_WORKLOAD, fi as buildCognitoJwksUrl, fn as CLOUDFRONT_DISTRIBUTION_TYPE, fr as parseImageOverrideFlags, ft as addStartAgentCoreSpecificOptions, g as annotatePinnedEcsTargets, gi as verifyJwtAuthorizer, gn as pickFunctionUrlLogicalIdFromOrigin, gr as imageOverrideKeyAliases, gt as startAgentCoreHttpServer, h as annotateEcsTaskPinnedTargets, hi as verifyCognitoJwt, hn as isCloudFrontDistribution, hr as describePinnedImageUri, ht as selectServeInboundAuth, i as coerceStopRequest, ia as EcsTaskResolutionError, ii as filterRoutesByApiIdentifier, in as serveFromStaticOrigin, ir as resolveEcsAssumeRoleOption, it as MicrovmResolutionError, j as readRunHookPayload, ja as parseSelectionExpressionPath, ji as applyAuthorizerOverlay, jn as createCloudFrontModule, jr as A2A_PATH, jt as startWebFunctionContainer, k as finalizeMicrovmEnv, ka as discoverWebSocketApisOrThrow, ki as matchRoute, kn as runViewerResponse, kr as invokeAgentCoreWs, kt as planWebFunctionContainer, l as relayServeRequest, li as resolveSelectionExpression, ln as buildEdgeResponseEvent, lr as canonicalizeImageOverrideKeys, lt as s3KeyOfUri, m as annotateAlbPinnedBackingServices, ma as groupWorkloadsRoutedApart, mi as createJwksCache, mn as extractKvsAssociations, mr as runImageOverrideBuilds, mt as buildAgentCoreServeAuthCheck, n as coerceRunRequest, na as resolveRuntimeFileExtension, ni as buildStageMap, nn as startCloudFrontServer, nr as parseMaxTasks, nt as MICROVM_DEFAULT_INGRESS_PORT, o as resolveServeBaseUrl, oi as groupRoutesByServer, on as applyEdgeRequestResult, or as runEcsServiceEmulator, ot as readMicrovmImageConfig, p as isCustomResourceLambdaTarget, pi as buildJwksUrlFromIssuer, pn as describeS3OriginDomain, pr as resolveImageOverrides, q as MAX_RUN_HOOK_PAYLOAD_BYTES, qa as deployedFillMayBeSecret, qi as classifySourceChange, qn as serviceStrategy, qr as computeCodeImageTag, qt as webFunctionFidelityWarnings, r as coerceServeRequest, ra as resolveRuntimeImage, ri as availableApiIdentifiers, rn as resolveErrorResponseCandidates, rr as parseRestartPolicy, rt as MICROVM_IMAGE_TYPE, s as createStudioServeManager, si as readMtlsMaterialsFromDisk, sn as applyEdgeResponseResult, sr as ImageOverrideError, st as resolveMicrovmCodeArtifact, t as addStudioSpecificOptions, ta as resolveRuntimeCodeMountPath, ti as attachStageContext, tn as matchBehavior, to as awsEndpointOptions, tr as ecsClusterOption, tt as waitForAppAnswer, u as reinvoke, ua as materializeLayerFromArn, ui as resolveServiceIntegrationParameters, un as edgeHeadersToHttp, ur as enforceImageOverrideOrphans, ut as addStartWebFunctionSpecificOptions, v as startStudioServer, vi as buildMethodArn, vn as pickLambdaEdgeFunctionLogicalId, vr as listPinnedTargets, vt as startAgentCoreWsBridge, wa as resolveSingleTarget, wi as applyCorsResponseHeaders, wn as WEB_FUNCTION_TYPE, wr as getContainerNetworkIp, wt as parseOriginOverrides, x as createStudioStore, xi as invokeRequestAuthorizer, xn as resolveCloudFrontDistribution, xr as DEFAULT_SHADOW_READY_TIMEOUT_MS, y as toStudioTargetGroups, yi as computeRequestIdentityHash, yn as pickTargetFunctionLogicalId, yr as buildCloudMapIndex, yt as LocalStartCloudFrontError, z as MICROVM_CONTROL_PATH, za as AGENTCORE_MCP_PROTOCOL, zi as bufferToBody, zn as albStrategy, zr as signAgentCoreInvocation, zt as disposeWebFunctionArtifact } from "./local-studio-D4E6Wb1V.js";
-import { d as dockerRegistryEnv, f as isEcrRegistryConfigKey, m as stripEcrCredentials, p as noImplicitEcrPullArgs } from "./docker-cmd-Cqd0TG-d.js";
+import { A as validateAwsEmulatorEnvVars, B as describeCredentialLoadFailure, C as isRealAwsSentinel, D as realAwsServicesForWorkload, E as realAwsEndpointFor, G as AWS_ENDPOINT_SERVICE_IDS, J as resolveEnvVars, O as realAwsServicesOf, S as isLegacyAwsEmulatorSentinel, T as readAwsEmulatorEnvVarsFile, _ as MIXED_MODE_RESIGN_PORT, b as findLegacyAwsEmulatorSentinels, c as getAwsEmulatorServiceRouting, d as isProxyEnvConfigured, f as normalizeAwsEndpointServiceId, g as LEGACY_AWS_EMULATOR_SENTINEL, h as setAwsEndpointOverride, i as buildProxyClientConfig, k as resourceTypeMatchesService, l as getAwsEndpointOverride, m as setAwsEmulatorServiceRouting, n as awsEmulatorRealServices, o as deployArtifactClientConfig, q as readEnvVarsFileText, r as awsEndpointOverrideClientConfig, t as awsClientConfigForService, u as isAwsServiceRoutedToEmulator, v as REAL_AWS_SENTINEL, w as legacyAwsEmulatorSentinelMessage, x as findRealAwsExceptions, y as createMixedModeStateProvider, z as describeAwsFailureForWarn } from "./aws-proxy-Ba_BOPyi.js";
+import { B as substituteImagePlaceholders, C as startLoopbackForwarder, R as derivePseudoParametersFromRegion, S as ensureForwarderImage, T as buildContainerImage, V as tryResolveImageFnJoin, W as LocalInvokeBuildError, _ as LOOPBACK_FORWARDER_IMAGE, b as buildNamespaceOwnerForwarderDockerArgs, g as withWorkloadAwsWiring, i as attachLoopbackForwarder, nt as buildStsClientConfig, rt as resolveProfileCredentials, v as awaitLoopbackForwarderStatus, w as architectureToPlatform, x as describeForwarderFailure, y as buildLoopbackForwarderDockerArgs, z as formatStateRemedy } from "./docker-runner-DjcP2syq.js";
+import { A as parseAwsEndpoint, C as effectiveLoopbackPorts, D as javaTruststoreToolOptions, E as getContainerJavaTruststorePath, F as resolveHostDefaultCredentials, G as createMixedModeTlsMaterials, H as MIXED_MODE_RESIGN_BODY_CAP_BYTES, I as resolveWorkloadAwsWiring, L as setActiveWorkloadAwsWiring, M as readEmulatorRunFiles, N as readProfileEndpointSettings, O as loopbackForwarderPlan, P as resolveAwsEmulatorOption, R as takeAwsEmulatorStateSourceHint, S as displayEndpointValue, T as getContainerCaBundlePath, V as writeCaBundleFile, W as buildJavaTrustStore, _ as HOST_DEFAULT_CREDENTIALS_MISS_TTL_MS, a as deployAccountStsClientConfig, b as awsEmulatorEnvName, c as resetWorkloadIdentity, d as workloadStsClientConfig, f as AUTH_OFF_PLACEHOLDER_CREDENTIALS, g as HOST_CA_TRUST_ENV_KEYS, h as EMULATOR_SCRUBBED_ENV_KEYS, i as assumedRoleRecorded, j as probeAwsEmulatorHealth, k as mergeJavaToolOptions, m as DEFAULT_AWS_EMULATOR_URL, o as readEnvCallerCredentials, p as CA_TRUST_ENV_KEYS, s as recordAssumedRole, t as SECOND_ASSUME_MESSAGE, u as workloadClientConfig, v as activateWorkloadAwsWiring, w as getActiveWorkloadAwsWiring, x as collectHostEndpointOverrides, y as applyWorkloadAwsWiringToEnv } from "./workload-identity-Blv2g1Jp.js";
+import { $ as postHook, $a as withoutKeys, $i as probeHostGatewaySupport, $n as addImageOverrideOptions, $r as resolveApiTargetSubset, $t as classifyS3Error, A as microvmFidelityWarnings, Aa as filterWebSocketApisByIdentifiers, Ai as translateLambdaResponse, An as stripCloudFrontImport, Ar as A2A_CONTAINER_PORT, At as readContainerLogTail, B as MICROVM_WS_BASE_PROTOCOL, Ba as AGENTCORE_RUNTIME_TYPE, Bi as ConnectionRegistry, Br as AGENTCORE_SESSION_ID_HEADER, Bt as parseWebFunctionBuildConfig, C as addListSpecificOptions, Ca as resolveWatchConfig, Ci as attachAuthorizers, Cn as WEB_FUNCTION_REVISION_TYPE, Cr as setShadowReadyTimeoutMs, Ct as parseKvsFileOverrides, D as buildMicrovmLambdaView, Da as availableWebSocketApiIdentifiers, Di as isFunctionUrlOacFronted, Dn as compileCloudFrontFunction, Dt as WEB_FUNCTION_CONTAINER_PORT, E as addStartMicrovmSpecificOptions, Ei as buildCorsConfigFromCloudFrontChain, En as resolveWebFunctionTarget, Er as addInvokeAgentCoreSpecificOptions, Et as RecentOutput, F as microvmImageTag, Fa as resolveLambdaArnIntrinsic, Fi as pickResponseTemplate, Fn as findFileAssetForObjectKey, Fr as MCP_PROTOCOL_VERSION, Ft as buildNodeEntryFileStart, G as startMicrovmFrontDoor, Ga as DynamicReferenceResolver, Gi as buildDisconnectEvent, Gn as addStartServiceSpecificOptions, Gr as SUPPORTED_CODE_RUNTIMES, Gt as readWebFunctionServiceConfig, H as PROXY_PORT_HEADER, Ha as pickAgentCoreCandidateStack, Hi as handleConnectionsRequest, Hn as resolveAlbTarget, Hr as waitForAgentCoreHttpReady, Ht as WEB_FUNCTION_HTTP_ENDPOINT_ENV, I as planMicrovmPorts, Ia as AGENTCORE_A2A_PROTOCOL, Ii as selectIntegrationResponse, In as isBucketDeploymentResource, Ir as mcpInvokeOnce, It as defaultWebFunctionPlatform, J as MICROVM_HOOK_PATH_PREFIX, Ja as firstUsableRegion, Ji as createFileWatcher, Jn as addRunTaskSpecificOptions, Jr as renderCodeDockerfile, Jt as idFromArn, K as stripMicrovmProxyHeaders, Ka as containsDynamicReference, Ki as buildMessageEvent, Kr as buildAgentCoreCodeImage, Kt as webFunctionAssumeRole, L as readExposedPorts, La as AGENTCORE_AGUI_PROTOCOL, Li as tryParseStatus, Ln as resolveBucketDeploymentObjectKey, Lr as parseSseForJsonRpc, Lt as resolveWebFunctionRuntime, M as DEFAULT_TERMINATE_HOOK_TIMEOUT_MS, Ma as webSocketApiMatchesIdentifier, Mi as buildHttpApiV2Event, Mn as createLocalFileKvsDataSource, Mr as a2aInvokeOnce, Mt as waitForWebFunctionReady, N as LocalMicrovm, Na as discoverRoutes, Ni as buildRestV1Event, Nn as createUnboundCloudFrontModule, Nr as MCP_CONTAINER_PORT, Nt as watchContainerExit, Oa as discoverWebSocketApis, Oi as matchPreflight, On as runViewerRequest, Or as bridgeAgentCoreWs, Ot as containerFailure, P as buildMicrovmImage, Pa as pickRefLogicalId, Pi as evaluateResponseParameters, Pn as bucketDeploymentSourceObjectKeys, Pr as MCP_PATH, Pt as WEB_FUNCTION_RUNTIMES, Q as pollBuildHook, Qa as resolveDynamicReferencesInEnv, Qi as HOST_GATEWAY_MIN_VERSION, Qn as addEcsAssumeRoleOptions, Qr as createWatchPredicates, Qt as resolveDeployedOriginBucket, R as setContainerPaused, Ra as AGENTCORE_HTTP_PROTOCOL, Ri as VtlEvaluationError, Rn as addAlbSpecificOptions, Rr as AGENTCORE_SIGV4_SERVICE, Rt as supportedWebFunctionRuntimes, S as StudioEventBus, Si as invokeTokenAuthorizer, Sn as WEB_FUNCTION_ENDPOINT_TYPE, Sr as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, St as normalizeKvsFileKeys, Ti as buildCorsConfigByApiId, Tn as WebFunctionResolutionError, Tr as attachContainerLogStreamer, Tt as resolveCloudFrontTarget, U as rewriteUpgradeResponseHead, Ua as resolveAgentCoreTarget, Ui as parseConnectionsPath, Un as isApplicationLoadBalancer, Ur as waitForAgentCorePing, Ut as buildWebFunctionLambdaView, V as MicrovmStateError, Va as AgentCoreResolutionError, Vi as buildMgmtEndpointEnvUrl, Vn as parseLbPortOverrides, Vr as invokeAgentCore, Vt as resolveWebFunctionArtifact, W as selectTargetPort, Wa as DynamicReferenceResolutionError, Wi as buildConnectEvent, Wn as resolveAlbFrontDoor, Wr as downloadAndExtractS3Bundle, Wt as finalizeWebFunctionEnv, X as callRuntimeHook, Xa as keysOverriddenBy, Xn as MAX_TASKS_SUBNET_RANGE_CAP, Xr as addStartApiSpecificOptions, Xt as createDeployedKvsDataSource, Y as MicrovmHookError, Ya as keysNotFromTemplate, Yi as addInvokeSpecificOptions, Yr as toCmdArgv, Yt as resolveKvsModulesForDistribution, Z as generateMicrovmId, Za as parseDynamicReference, Zi as HOST_DOCKER_INTERNAL_GATEWAY, Zn as addCommonEcsServiceOptions, Zt as resolveDeployedKvsArnByName, _ as filterStudioTargetGroups, _i as verifyJwtViaDiscovery, _n as pickKvsLogicalIdFromArn, _r as isLocalCdkAssetImage, _t as attachAgentCoreWsBridge, aa as assertEcsTaskImagesResolvable, ai as filterRoutesByApiIdentifiers, an as serveLambdaUrlOrigin, ar as resolveSharedSidecarCredentials, at as disposeMicrovmCodeArtifact, b as renderStudioHtml, bi as evaluateCachedLambdaPolicy, bn as pickWebFunctionEndpointLogicalIdFromOrigin, br as CloudMapRegistry, bt as addStartCloudFrontSpecificOptions, c as startStudioProxy, ci as startApiServer, cn as buildEdgeRequestEvent, cr as buildImageOverrideTag, ct as resolveMicrovmImageTarget, d as createStudioDispatcher, di as defaultCredentialsLoader, dn as httpHeadersToEdge, dr as mergeForService, ea as resolveHostGatewayExtraHosts, ei as createAuthorizerCache, en as createS3OriginReader, eo as addAwsEndpointOptions, er as buildEcsImageResolutionContext, et as runHookBody, f as filterStudioCustomResources, fa as UNNAMED_WORKLOAD, fi as buildCognitoJwksUrl, fn as CLOUDFRONT_DISTRIBUTION_TYPE, fr as parseImageOverrideFlags, ft as addStartAgentCoreSpecificOptions, g as annotatePinnedEcsTargets, gi as verifyJwtAuthorizer, gn as pickFunctionUrlLogicalIdFromOrigin, gr as imageOverrideKeyAliases, gt as startAgentCoreHttpServer, h as annotateEcsTaskPinnedTargets, hi as verifyCognitoJwt, hn as isCloudFrontDistribution, hr as describePinnedImageUri, ht as selectServeInboundAuth, i as coerceStopRequest, ia as EcsTaskResolutionError, ii as filterRoutesByApiIdentifier, in as serveFromStaticOrigin, ir as resolveEcsAssumeRoleOption, it as MicrovmResolutionError, j as readRunHookPayload, ja as parseSelectionExpressionPath, ji as applyAuthorizerOverlay, jn as createCloudFrontModule, jr as A2A_PATH, jt as startWebFunctionContainer, k as finalizeMicrovmEnv, ka as discoverWebSocketApisOrThrow, ki as matchRoute, kn as runViewerResponse, kr as invokeAgentCoreWs, kt as planWebFunctionContainer, l as relayServeRequest, li as resolveSelectionExpression, ln as buildEdgeResponseEvent, lr as canonicalizeImageOverrideKeys, lt as s3KeyOfUri, m as annotateAlbPinnedBackingServices, ma as groupWorkloadsRoutedApart, mi as createJwksCache, mn as extractKvsAssociations, mr as runImageOverrideBuilds, mt as buildAgentCoreServeAuthCheck, n as coerceRunRequest, na as resolveRuntimeFileExtension, ni as buildStageMap, nn as startCloudFrontServer, nr as parseMaxTasks, nt as MICROVM_DEFAULT_INGRESS_PORT, o as resolveServeBaseUrl, oi as groupRoutesByServer, on as applyEdgeRequestResult, or as runEcsServiceEmulator, ot as readMicrovmImageConfig, p as isCustomResourceLambdaTarget, pi as buildJwksUrlFromIssuer, pn as describeS3OriginDomain, pr as resolveImageOverrides, q as MAX_RUN_HOOK_PAYLOAD_BYTES, qa as deployedFillMayBeSecret, qi as classifySourceChange, qn as serviceStrategy, qr as computeCodeImageTag, qt as webFunctionFidelityWarnings, r as coerceServeRequest, ra as resolveRuntimeImage, ri as availableApiIdentifiers, rn as resolveErrorResponseCandidates, rr as parseRestartPolicy, rt as MICROVM_IMAGE_TYPE, s as createStudioServeManager, si as readMtlsMaterialsFromDisk, sn as applyEdgeResponseResult, sr as ImageOverrideError, st as resolveMicrovmCodeArtifact, t as addStudioSpecificOptions, ta as resolveRuntimeCodeMountPath, ti as attachStageContext, tn as matchBehavior, to as awsEndpointOptions, tr as ecsClusterOption, tt as waitForAppAnswer, u as reinvoke, ua as materializeLayerFromArn, ui as resolveServiceIntegrationParameters, un as edgeHeadersToHttp, ur as enforceImageOverrideOrphans, ut as addStartWebFunctionSpecificOptions, v as startStudioServer, vi as buildMethodArn, vn as pickLambdaEdgeFunctionLogicalId, vr as listPinnedTargets, vt as startAgentCoreWsBridge, wa as resolveSingleTarget, wi as applyCorsResponseHeaders, wn as WEB_FUNCTION_TYPE, wr as getContainerNetworkIp, wt as parseOriginOverrides, x as createStudioStore, xi as invokeRequestAuthorizer, xn as resolveCloudFrontDistribution, xr as DEFAULT_SHADOW_READY_TIMEOUT_MS, y as toStudioTargetGroups, yi as computeRequestIdentityHash, yn as pickTargetFunctionLogicalId, yr as buildCloudMapIndex, yt as LocalStartCloudFrontError, z as MICROVM_CONTROL_PATH, za as AGENTCORE_MCP_PROTOCOL, zi as bufferToBody, zn as albStrategy, zr as signAgentCoreInvocation, zt as disposeWebFunctionArtifact } from "./local-studio-PpZpeKYn.js";
+import { d as dockerRegistryEnv, f as isEcrRegistryConfigKey, m as stripEcrCredentials, p as noImplicitEcrPullArgs } from "./docker-cmd-BnW-0c0e.js";
 
 export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AUTH_OFF_PLACEHOLDER_CREDENTIALS, AWS_ENDPOINT_SERVICE_IDS, AgentCoreResolutionError, CA_TRUST_ENV_KEYS, CLOUDFRONT_DISTRIBUTION_TYPE, CloudMapRegistry, ConnectionRegistry, DEFAULT_AWS_EMULATOR_URL, DEFAULT_SHADOW_READY_TIMEOUT_MS, DEFAULT_TERMINATE_HOOK_TIMEOUT_MS, DynamicReferenceResolutionError, DynamicReferenceResolver, EMULATOR_SCRUBBED_ENV_KEYS, EcsTaskResolutionError, HOST_CA_TRUST_ENV_KEYS, HOST_DEFAULT_CREDENTIALS_MISS_TTL_MS, HOST_DOCKER_INTERNAL_GATEWAY, HOST_GATEWAY_MIN_VERSION, ImageOverrideError, LEGACY_AWS_EMULATOR_SENTINEL, LOOPBACK_FORWARDER_IMAGE, LocalInvokeBuildError, LocalMicrovm, LocalStartCloudFrontError, MAX_RUN_HOOK_PAYLOAD_BYTES, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, MICROVM_CONTROL_PATH, MICROVM_DEFAULT_INGRESS_PORT, MICROVM_HOOK_PATH_PREFIX, MICROVM_IMAGE_TYPE, MICROVM_WS_BASE_PROTOCOL, MIXED_MODE_RESIGN_BODY_CAP_BYTES, MIXED_MODE_RESIGN_PORT, MicrovmHookError, MicrovmResolutionError, MicrovmStateError, PROXY_PORT_HEADER, REAL_AWS_SENTINEL, RecentOutput, SECOND_ASSUME_MESSAGE, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, StudioEventBus, UNNAMED_WORKLOAD, VtlEvaluationError, WEB_FUNCTION_CONTAINER_PORT, WEB_FUNCTION_ENDPOINT_TYPE, WEB_FUNCTION_HTTP_ENDPOINT_ENV, WEB_FUNCTION_REVISION_TYPE, WEB_FUNCTION_RUNTIMES, WEB_FUNCTION_TYPE, WebFunctionResolutionError, a2aInvokeOnce, activateWorkloadAwsWiring, addAlbSpecificOptions, addAwsEndpointOptions, addCommonEcsServiceOptions, addEcsAssumeRoleOptions, addImageOverrideOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartAgentCoreSpecificOptions, addStartApiSpecificOptions, addStartCloudFrontSpecificOptions, addStartMicrovmSpecificOptions, addStartServiceSpecificOptions, addStartWebFunctionSpecificOptions, addStudioSpecificOptions, albStrategy, annotateAlbPinnedBackingServices, annotateEcsTaskPinnedTargets, annotatePinnedEcsTargets, applyAuthorizerOverlay, applyCorsResponseHeaders, applyEdgeRequestResult, applyEdgeResponseResult, applyWorkloadAwsWiringToEnv, architectureToPlatform, assertEcsTaskImagesResolvable, assumedRoleRecorded, attachAgentCoreWsBridge, attachAuthorizers, attachContainerLogStreamer, attachLoopbackForwarder, attachStageContext, availableApiIdentifiers, availableWebSocketApiIdentifiers, awaitLoopbackForwarderStatus, awsClientConfigForService, awsEmulatorEnvName, awsEmulatorRealServices, awsEndpointOptions, awsEndpointOverrideClientConfig, bridgeAgentCoreWs, bucketDeploymentSourceObjectKeys, bufferToBody, buildAgentCoreCodeImage, buildAgentCoreServeAuthCheck, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildEdgeRequestEvent, buildEdgeResponseEvent, buildHttpApiV2Event, buildImageOverrideTag, buildJavaTrustStore, buildJwksUrlFromIssuer, buildLoopbackForwarderDockerArgs, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildMicrovmImage, buildMicrovmLambdaView, buildNamespaceOwnerForwarderDockerArgs, buildNodeEntryFileStart, buildProxyClientConfig, buildRestV1Event, buildStageMap, buildStsClientConfig, buildWebFunctionLambdaView, callRuntimeHook, canonicalizeImageOverrideKeys, classifyS3Error, classifySourceChange, coerceRunRequest, coerceServeRequest, coerceStopRequest, collectHostEndpointOverrides, compileCloudFrontFunction, computeCodeImageTag, computeRequestIdentityHash, containerFailure, containsDynamicReference, createAuthorizerCache, createCloudFrontModule, createDeployedKvsDataSource, createFileWatcher, createJwksCache, createLocalFileKvsDataSource, createMixedModeStateProvider, createMixedModeTlsMaterials, createS3OriginReader, createStudioDispatcher, createStudioServeManager, createStudioStore, createUnboundCloudFrontModule, createWatchPredicates, defaultCredentialsLoader, defaultWebFunctionPlatform, deployAccountStsClientConfig, deployArtifactClientConfig, deployedFillMayBeSecret, derivePseudoParametersFromRegion, describeAwsFailureForWarn, describeCredentialLoadFailure, describeForwarderFailure, describePinnedImageUri, describeS3OriginDomain, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, displayEndpointValue, disposeMicrovmCodeArtifact, disposeWebFunctionArtifact, dockerRegistryEnv, downloadAndExtractS3Bundle, ecsClusterOption, edgeHeadersToHttp, effectiveLoopbackPorts, enforceImageOverrideOrphans, ensureForwarderImage, evaluateCachedLambdaPolicy, evaluateResponseParameters, extractKvsAssociations, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, filterStudioCustomResources, filterStudioTargetGroups, filterWebSocketApisByIdentifiers, finalizeMicrovmEnv, finalizeWebFunctionEnv, findFileAssetForObjectKey, findLegacyAwsEmulatorSentinels, findRealAwsExceptions, firstUsableRegion, formatStateRemedy, generateMicrovmId, getActiveWorkloadAwsWiring, getAwsEmulatorServiceRouting, getAwsEndpointOverride, getContainerCaBundlePath, getContainerJavaTruststorePath, getContainerNetworkIp, groupRoutesByServer, groupWorkloadsRoutedApart, handleConnectionsRequest, httpHeadersToEdge, idFromArn, imageOverrideKeyAliases, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isAwsServiceRoutedToEmulator, isBucketDeploymentResource, isCloudFrontDistribution, isCustomResourceLambdaTarget, isEcrRegistryConfigKey, isFunctionUrlOacFronted, isLegacyAwsEmulatorSentinel, isLocalCdkAssetImage, isProxyEnvConfigured, isRealAwsSentinel, javaTruststoreToolOptions, keysNotFromTemplate, keysOverriddenBy, legacyAwsEmulatorSentinelMessage, listPinnedTargets, loopbackForwarderPlan, matchBehavior, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, mergeForService, mergeJavaToolOptions, microvmFidelityWarnings, microvmImageTag, noImplicitEcrPullArgs, normalizeAwsEndpointServiceId, normalizeKvsFileKeys, parseAwsEndpoint, parseConnectionsPath, parseDynamicReference, parseImageOverrideFlags, parseKvsFileOverrides, parseLbPortOverrides, parseMaxTasks, parseOriginOverrides, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, parseWebFunctionBuildConfig, pickAgentCoreCandidateStack, pickFunctionUrlLogicalIdFromOrigin, pickKvsLogicalIdFromArn, pickLambdaEdgeFunctionLogicalId, pickRefLogicalId, pickResponseTemplate, pickTargetFunctionLogicalId, pickWebFunctionEndpointLogicalIdFromOrigin, planMicrovmPorts, planWebFunctionContainer, pollBuildHook, postHook, probeAwsEmulatorHealth, probeHostGatewaySupport, readAwsEmulatorEnvVarsFile, readContainerLogTail, readEmulatorRunFiles, readEnvCallerCredentials, readEnvVarsFileText, readExposedPorts, readMicrovmImageConfig, readMtlsMaterialsFromDisk, readProfileEndpointSettings, readRunHookPayload, readWebFunctionServiceConfig, realAwsEndpointFor, realAwsServicesForWorkload, realAwsServicesOf, recordAssumedRole, reinvoke, relayServeRequest, renderCodeDockerfile, renderStudioHtml, resetWorkloadIdentity, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveAwsEmulatorOption, resolveBucketDeploymentObjectKey, resolveCloudFrontDistribution, resolveCloudFrontTarget, resolveDeployedKvsArnByName, resolveDeployedOriginBucket, resolveDynamicReferencesInEnv, resolveEcsAssumeRoleOption, resolveEnvVars, resolveErrorResponseCandidates, resolveHostDefaultCredentials, resolveHostGatewayExtraHosts, resolveImageOverrides, resolveKvsModulesForDistribution, resolveLambdaArnIntrinsic, resolveMicrovmCodeArtifact, resolveMicrovmImageTarget, resolveProfileCredentials, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServeBaseUrl, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, resolveWebFunctionArtifact, resolveWebFunctionRuntime, resolveWebFunctionTarget, resolveWorkloadAwsWiring, resourceTypeMatchesService, rewriteUpgradeResponseHead, runEcsServiceEmulator, runHookBody, runImageOverrideBuilds, runViewerRequest, runViewerResponse, s3KeyOfUri, selectIntegrationResponse, selectServeInboundAuth, selectTargetPort, serveFromStaticOrigin, serveLambdaUrlOrigin, serviceStrategy, setActiveWorkloadAwsWiring, setAwsEmulatorServiceRouting, setAwsEndpointOverride, setContainerPaused, setShadowReadyTimeoutMs, signAgentCoreInvocation, startAgentCoreHttpServer, startAgentCoreWsBridge, startApiServer, startCloudFrontServer, startLoopbackForwarder, startMicrovmFrontDoor, startStudioProxy, startStudioServer, startWebFunctionContainer, stripCloudFrontImport, stripEcrCredentials, stripMicrovmProxyHeaders, substituteImagePlaceholders, supportedWebFunctionRuntimes, takeAwsEmulatorStateSourceHint, toCmdArgv, toStudioTargetGroups, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, validateAwsEmulatorEnvVars, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCoreHttpReady, waitForAgentCorePing, waitForAppAnswer, waitForWebFunctionReady, watchContainerExit, webFunctionAssumeRole, webFunctionFidelityWarnings, webSocketApiMatchesIdentifier, withWorkloadAwsWiring, withoutKeys, workloadClientConfig, workloadStsClientConfig, writeCaBundleFile };

package/dist/{local-studio-D6vz-OSk.d.ts → local-studio-BF_pYaBC.d.ts}

@@ -175,6 +175,7 @@ interface LocalStateRecord {
   resources: Record<string, ResourceState>;
   outputs: Record<string, string>;
   region: string;
+  realSideUnread?: boolean;
 }
 interface LocalStateProvider {
   readonly label: string;
@@ -359,6 +360,8 @@ interface ImageResolutionContext {
   };
   stateResources?: Record<string, ResourceState>;
   stateRegion?: string;
+  ignoreStateForRoles?: boolean;
+  roleRecordRealSideUnread?: boolean;
   stateParameters?: Record<string, string>;
   stateSensitiveParameters?: readonly string[];
   stateLoadFailureMessage?: string;
@@ -747,6 +750,10 @@ interface ResolvedEcsTask {
   family: string;
   networkMode: 'bridge' | 'awsvpc' | 'host' | 'none';
   taskRoleArn?: string;
+  taskRoleUnresolved?: {
+    logicalId: string;
+    reason: TaskRoleUnresolvedReason;
+  };
   executionRoleArn?: string;
   containers: ResolvedEcsContainer[];
   volumes: ResolvedEcsVolume[];
@@ -837,6 +844,7 @@ declare class EcsTaskResolutionError extends Error {
 }
 declare function assertEcsTaskImagesResolvable(task: Pick<ResolvedEcsTask, 'containers'>, coveredContainers?: ReadonlySet<string> | ReadonlyMap<string, unknown>): void;
 type EcsImageResolutionContext = ImageResolutionContext;
+type TaskRoleUnresolvedReason = 'no-state' | 'no-record' | 'path-not-literal';
 //#endregion
 //#region src/utils/error-handler.d.ts
 declare class CdkLocalError extends Error {
@@ -1643,4 +1651,4 @@ declare function createLocalStudioCommand(opts?: CreateLocalStudioCommandOptions
 declare function addStudioSpecificOptions(cmd: Command): Command;
 //#endregion
 export { mergeJavaToolOptions as $, LocalStateProvider as $i, buildEcsImageResolutionContext as $n, resolveWatchConfig as $r, MicrovmHookConfig as $t, CA_TRUST_ENV_KEYS as A, setAwsEndpointOverride as Aa, createLocalInvokeCommand as Ai, CreateLocalStartServiceCommandOptions as An, CognitoUserPoolAuthorizer as Ar, assumedRoleRecorded as At, WorkloadAwsWiringCommandOptions as B, LocalStateProviderBehavior as Bi, MAX_TASKS_SUBNET_RANGE_CAP as Bn, discoverWebSocketApisOrThrow as Br, createLocalListCommand as Bt, StudioEventBus as C, deployArtifactClientConfig as Ca, substituteImagePlaceholders as Ci, resolveCloudFrontTarget as Cn, CreateLocalStartApiCommandOptions as Cr, realAwsEndpointFor as Ct, StudioTargetKind as D, isProxyEnvConfigured as Da, SynthesisResult as Di, createLocalStartAlbCommand as Dn, createWatchPredicates as Dr, validateAwsEmulatorEnvVars as Dt, StudioServeEvent as E, isAwsServiceRoutedToEmulator as Ea, SynthesisOptions as Ei, albStrategy as En, createLocalStartApiCommand as Er, resourceTypeMatchesService as Et, HOST_DEFAULT_CREDENTIALS_MISS_TTL_MS as F, EmbedHostLogger as Fi, addRunTaskSpecificOptions as Fn, attachAuthorizers as Fr, workloadClientConfig as Ft, collectHostEndpointOverrides as G, WorkloadRouteGroup as Gi, PlannedForwardTarget as Gn, RestV1IntegrationConfig as Gr, createLocalStartMicrovmCommand as Gt, activateWorkloadAwsWiring as H, LocalStateSourceError as Hi, PlannedEcsForwardTarget as Hn, parseSelectionExpressionPath as Hr, CreateLocalStartMicrovmCommandOptions as Ht, MixedModeWiring as I, getEmbedConfig as Ii, createLocalRunTaskCommand as In, DiscoveredWebSocketApi as Ir, workloadStsClientConfig as It, getActiveWorkloadAwsWiring as J, isCfnFlagPresent as Ji, PlannedRedirectAction as Jn, evaluateResponseParameters as Jr, readRunHookPayload as Jt, displayEndpointValue as K, createLocalStateProvider as Ki, PlannedFrontDoorListener as Kn, discoverRoutes as Kr, finalizeMicrovmEnv as Kt, ParsedAwsEndpoint as L, resetEmbedConfig as Li, EcsServiceEmulatorOptions as Ln, WebSocketRouteEntry as Lr, CreateLocalListCommandOptions as Lt, EMULATOR_SCRUBBED_ENV_KEYS as M, ResolvedZipLambda as Mi, createLocalStartServiceCommand as Mn, LambdaRequestAuthorizer as Mr, readEnvCallerCredentials as Mt, EmulatorRunFiles as N, StackInfo as Ni, serviceStrategy as Nn, LambdaTokenAuthorizer as Nr, recordAssumedRole as Nt, AUTH_OFF_PLACEHOLDER_CREDENTIALS as O, normalizeAwsEndpointServiceId as Oa, CreateLocalInvokeCommandOptions as Oi, parseLbPortOverrides as On, resolveApiTargetSubset as Or, CallerCredentials as Ot, HOST_CA_TRUST_ENV_KEYS as P, CdkLocalEmbedConfig as Pi, CreateLocalRunTaskCommandOptions as Pn, RouteWithAuth as Pr, resetWorkloadIdentity as Pt, loopbackForwarderPlan as Q, resolveCfnStackName as Qi, addImageOverrideOptions as Qn, CdkWatchConfig as Qr, MicrovmCodeArtifact as Qt, ResolveWorkloadAwsWiringOptions as R, setEmbedConfig as Ri, EmulatorStrategy as Rn, availableWebSocketApiIdentifiers as Rr, FormatTargetListingOptions as Rt, createStudioDispatcher as S, buildProxyClientConfig as Sa, formatStateRemedy as Si, parseOriginOverrides as Sn, ApiTargetSubset as Sr, readAwsEmulatorEnvVarsFile as St, StudioLogEvent as T, getAwsEndpointOverride as Ta, CdkAppSynthesizer as Ti, addAlbSpecificOptions as Tn, addStartApiSpecificOptions as Tr, realAwsServicesOf as Tt, applyWorkloadAwsWiringToEnv as U, LocalStateSourceOptions as Ui, PlannedFixedResponseAction as Un, webSocketApiMatchesIdentifier as Ur, addStartMicrovmSpecificOptions as Ut, WorkloadMount as V, LocalStateProviderFactory as Vi, PlannedAction as Vn, filterWebSocketApisByIdentifiers as Vr, formatTargetListing as Vt, awsEmulatorEnvName as W, UNNAMED_WORKLOAD as Wi, PlannedForwardAction as Wn, DiscoveredRoute as Wr, buildMicrovmLambdaView as Wt, getContainerJavaTruststorePath as X, resolveCfnFallbackRegion as Xi, addCommonEcsServiceOptions as Xn, selectIntegrationResponse as Xr, MICROVM_IMAGE_TYPE as Xt, getContainerCaBundlePath as Y, rejectExplicitCfnStackWithMultipleStacks as Yi, ServiceBoot as Yn, pickResponseTemplate as Yr, MICROVM_DEFAULT_INGRESS_PORT as Yt, javaTruststoreToolOptions as Z, resolveCfnRegion as Zi, addEcsAssumeRoleOptions as Zn, tryParseStatus as Zr, MicrovmBuildHook as Zt, startStudioProxy as _, AwsEndpointOverride as _a, InvokeAgentCoreWsOptions as _i, LocalStartCloudFrontError as _n, listTargets as _r, findLegacyAwsEmulatorSentinels as _t, coerceServeRequest as a, CrossStackResolver as aa, addInvokeAgentCoreSpecificOptions as ai, disposeMicrovmCodeArtifact as an, runEcsServiceEmulator as ar, resolveHostDefaultCredentials as at, StudioRunRequest as b, awsEmulatorRealServices as ba, ImageResolutionContext as bi, normalizeKvsFileKeys as bn, EcsTaskResolutionError as br, isRealAwsSentinel as bt, resolveServeBaseUrl as c, SubstitutionContext as ca, AssetManifest as ci, resolveMicrovmImageTarget as cn, isApplicationLoadBalancer as cr, takeAwsEmulatorStateSourceHint as ct, StudioServeRequest as d, substituteEnvVarsFromState as da, EnvOverrideFile as di, addStartWebFunctionSpecificOptions as dn, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as dr, LEGACY_AWS_EMULATOR_SENTINEL as dt, LocalStateRecord as ea, buildStsClientConfig as ei, MicrovmHookName as en, ecsClusterOption as er, parseAwsEndpoint as et, StudioServeState as f, substituteEnvVarsFromStateAsync as fa, readEnvVarsFileText as fi, createLocalStartWebFunctionCommand as fn, setShadowReadyTimeoutMs as fr, MIXED_MODE_RESIGN_PORT as ft, StudioProxyConfig as g, AwsEmulatorWorkload as ga, BridgeAgentCoreWsOptions as gi, CreateLocalStartCloudFrontCommandOptions as gn, countTargets as gr, createMixedModeStateProvider as gt, RunningStudioProxy as h, AwsEmulatorServiceRouting as ha, AgentCoreWsResult as hi, createLocalStartAgentCoreCommand as hn, TargetListing as hr, RealAwsException as ht, coerceRunRequest as i, resolveSsmParameters as ia, CreateLocalInvokeAgentCoreCommandOptions as ii, ResolvedMicrovmImage as in, resolveSharedSidecarCredentials as ir, resolveAwsEmulatorOption as it, DEFAULT_AWS_EMULATOR_URL as j, ResolvedArnLambdaLayer as ji, addStartServiceSpecificOptions as jn, JwtAuthorizer as jr, deployAccountStsClientConfig as jt, AwsEmulatorSidecarWiring as k, setAwsEmulatorServiceRouting as ka, addInvokeSpecificOptions as ki, resolveAlbTarget as kn, AuthorizerInfo as kr, SECOND_ASSUME_MESSAGE as kt, StudioServeManager as l, substituteAgainstState as la, DockerImageAssetSource as li, s3KeyOfUri as ln, resolveAlbFrontDoor as lr, writeCaBundleFile as lt, createStudioServeManager as m, TemplateResource as ma, AgentCoreWsBridgeHandle as mi, addStartAgentCoreSpecificOptions as mn, TargetEntry as mr, REAL_AWS_SENTINEL as mt, StudioServeRequestPayload as n, SsmParameterRef as na, addAwsEndpointOptions as ni, MicrovmResolutionError as nn, parseRestartPolicy as nr, readEmulatorRunFiles as nt, coerceStopRequest as o, PseudoParameters as oa, createLocalInvokeAgentCoreCommand as oi, readMicrovmImageConfig as on, FrontDoorForwardTarget as or, resolveWorkloadAwsWiring as ot, StudioStopRequest as p, CloudFormationTemplate as pa, resolveEnvVars as pi, CreateLocalStartAgentCoreCommandOptions as pn, ResolvedEcsService as pr, MixedModeStateProviderOptions as pt, effectiveLoopbackPorts as q, groupWorkloadsRoutedApart as qi, PlannedLambdaForwardTarget as qn, IntegrationResponseEntry as qr, microvmFidelityWarnings as qt, addStudioSpecificOptions as r, collectSsmParameterRefs as ra, awsEndpointOptions as ri, MicrovmRuntimeHook as rn, resolveEcsAssumeRoleOption as rr, readProfileEndpointSettings as rt, createLocalStudioCommand as s, StateEnvSubstitutionAudit as sa, AssetManifestLoader as si, resolveMicrovmCodeArtifact as sn, ResolvedListenerAction as sr, setActiveWorkloadAwsWiring as st, CreateLocalStudioCommandOptions as t, ResolvedSsmParameters as ta, resolveProfileCredentials as ti, MicrovmImageConfig as tn, parseMaxTasks as tr, probeAwsEmulatorHealth as tt, StudioServeManagerConfig as u, substituteAgainstStateAsync as ua, FileAsset as ui, CreateLocalStartWebFunctionCommandOptions as un, DEFAULT_SHADOW_READY_TIMEOUT_MS as ur, AwsEmulatorEnvVarsScan as ut, StudioDispatchConfig as v, AwsProxyClientConfig as va, bridgeAgentCoreWs as vi, addStartCloudFrontSpecificOptions as vn, CdkLocalError as vr, findRealAwsExceptions as vt, StudioInvocationEvent as w, getAwsEmulatorServiceRouting as wa, tryResolveImageFnJoin as wi, CreateLocalStartAlbCommandOptions as wn, WatchPredicates as wr, realAwsServicesForWorkload as wt, StudioRunResult as x, awsEndpointOverrideClientConfig as xa, derivePseudoParametersFromRegion as xi, parseKvsFileOverrides as xn, assertEcsTaskImagesResolvable as xr, legacyAwsEmulatorSentinelMessage as xt, StudioDispatcher as y, awsClientConfigForService as ya, invokeAgentCoreWs as yi, createLocalStartCloudFrontCommand as yn, LocalInvokeBuildError as yr, isLegacyAwsEmulatorSentinel as yt, WorkloadAwsWiring as z, ExtraStateProviders as zi, FrontDoorPlan as zn, discoverWebSocketApis as zr, addListSpecificOptions as zt };
-//# sourceMappingURL=local-studio-D6vz-OSk.d.ts.map
+//# sourceMappingURL=local-studio-BF_pYaBC.d.ts.map

package/dist/local-studio-BF_pYaBC.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-studio-BF_pYaBC.d.ts","names":[],"sources":["../src/utils/aws-proxy.ts","../src/types/resource.ts","../src/types/state.ts","../src/local/state-resolver.ts","../src/local/ssm-parameter-resolver.ts","../src/local/local-state-provider.ts","../src/cli/commands/local-state-source.ts","../src/local/embed-config.ts","../src/synthesis/assembly-reader.ts","../src/local/lambda-resolver.ts","../src/cli/commands/local-invoke.ts","../src/synthesis/synthesizer.ts","../src/local/intrinsic-image.ts","../src/local/agentcore-ws-client.ts","../src/local/env-resolver.ts","../src/types/assets.ts","../src/assets/asset-manifest-loader.ts","../src/cli/commands/local-invoke-agentcore.ts","../src/cli/options.ts","../src/utils/profile-resolver.ts","../src/cli/config-loader.ts","../src/local/httpv2-service-integration.ts","../src/local/integration-response-selector.ts","../src/local/rest-v1-integrations.ts","../src/local/route-discovery.ts","../src/local/websocket-route-discovery.ts","../src/local/authorizer-resolver.ts","../src/cli/commands/local-start-api.ts","../src/local/ecs-task-resolver.ts","../src/utils/error-handler.ts","../src/local/target-lister.ts","../src/local/ecs-service-resolver.ts","../src/local/ecs-service-runner.ts","../src/local/alb-path-matcher.ts","../src/local/elb-front-door-resolver.ts","../src/cli/commands/ecs-service-emulator.ts","../src/cli/commands/local-run-task.ts","../src/cli/commands/local-start-service.ts","../src/cli/commands/local-start-alb.ts","../src/cli/commands/local-start-cloudfront.ts","../src/cli/commands/local-start-agentcore.ts","../src/cli/commands/local-start-web-function.ts","../src/local/microvm-image.ts","../src/cli/commands/local-start-microvm.ts","../src/cli/commands/local-list.ts","../src/utils/workload-identity.ts","../src/local/aws-emulator-mixed-mode.ts","../src/local/workload-aws-wiring.ts","../src/local/studio-events.ts","../src/local/studio-child-args.ts","../src/local/studio-option-specs.ts","../src/local/studio-option-catalog.ts","../src/local/studio-dispatch.ts","../src/local/studio-proxy.ts","../src/local/studio-serve-manager.ts","../src/cli/commands/local-studio.ts"],"mappings":";;;;;;;;;;iBAuEgB;UAgUC;EACf,iBAAiB;EACjB,cAAc;EAEd;;UAUe;EACf;EACA;EACA;IAAgB;IAAqB;IAAyB;;;iBAMhD,uBAAuB,GAAG;iBAK1B,0BAA0B;UAYzB;EAMf;EACA,UAAU;EAOV,eAAe,SAAS;;UAUT;EACf;EACA;EACA;;iBAiBc,8BAA8B;iBAQ9B,6BAA6B,GAAG;iBAWhC,gCAAgC;iBAmBhC,wBAAwB,WAAW;iBAmBnC,6BACd,mBACA,WAAW;iBA+BG,0BACd,mBACA;EAAQ;EAA8B,WAAW;IAChD;iBAaa,gCAAgC,GAAG,sBAAsB;iBA8BzD,2BAA2B;EACzC;EACA;EACA,WAAW;IACT;iBA4FY,uBACd;EACE;EACA;EACA,WAAW;IAEZ;;;UCtsBc;EACf;EACA;EACA,aAAa,eAAe;EAC5B,WAAW,eAAe;EAC1B,UAAU,eAAe;EACzB,aAAa;EACb,WAAW;EAWX;EACA,QAAQ;;UAMO;EACf;EACA;EACA;EACA;EACA;EACA;;UAMe;EACf;EACA,aAAa;EACb;EACA;EACA,WAAW;EACX,iBAAiB;EACjB,eAAe;EACf;EACA;;UAMe;EACf;EACA;EACA;IACE;;;;;UC2Ha;EAEf;EAGA;EAGA,YAAY;EAcZ,qBAAqB;EAGrB,aAAa;EAGb;EAGA,WAAW;EAmBX;EAMA;EAwBA;;;;KC/IU;EACN;EAAiB;;EACjB;EAAoB;;UAaT;EACf;EACA;EACA;EACA;;UAqBe;EAMf,cAAc,qBAAqB;EAQnC,sBACE,uBACA,wBACA,qBACC;;UAGY;EAEf,WAAW,eAAe;EAa1B,aAAa;EAUb,sBAAsB;EAStB,gCAAgC;EAQhC;EAEA,mBAAmB;EAOnB,qBAAqB;EAOrB;EAgBA,4BACE,eACA,wBACA,WAAW,wBACR;;iBAiBS,uBACd,gBACA,oBAAoB,sBAAsB,eAAe,iBACxD;iBA6hBmB,4BACpB,gBACA,oBAAoB,sBAAsB,eAAe,iBACxD,QAAQ;UA2TM;EAEf;EAMA,YAAY;IAAQ;IAAa;;EAOjC;;iBAcc,2BACd,aAAa,qCACb,oBAAoB,sBAAsB,eAAe;EACtD,KAAK;EAAyB,OAAO;;iBAuGpB,gCACpB,aAAa,qCACb,oBAAoB,sBAAsB,eAAe,iBACxD;EAAU,KAAK;EAAyB,OAAO;;;;UC1sCjC;EAEf;EAEA;EAEA;;UAYe;EAEf,QAAQ;EAER;;iBAec,wBACd,UAAU,KAAK,oDACd;iBAiDmB,qBACpB,QAAQ,WACR,eAAe,mBACf,gBACC,QAAQ;;;UC/FM;EAWf,WAAW,eAAe;EAO1B,SAAS;EAOT;EAOA;;UAsBe;WAMN;EAQT,KAAK,mBAAmB,kCAAkC,QAAQ;EAalE,wBAAwB,yBAAyB,QAAQ;EA4BzD,4BACE,6BACC,QAAQ;EA0BX,+BAA+B,6BAA6B;EA4B5D,gCAAgC,4BAA4B;EA4B5D,8BAA8B,UAAU,yBAAyB,QAAQ;EAiBzE;EAKA;;;;UCtNe;EAOf;EAEA;EAEA;EAMA;GAEC;;UAOc;EAOf,WAAW;;KAWD,6BACV,SAAS,yBACT,UAAU,+BACP;KAUO,sBAAsB,eAAe;iBAUjC,oBAAoB,gCAAgC;iBAapD,iBAAiB,MAAM,KAAK;iBAwF5B,iBACd,SAAS,KAAK,oDACd;iBAqCoB,yBACpB,SAAS,KAAK,sDACd,kCACC;cAUU,8BAA8B;EACzC,YAAY;;iBAkBE,yCACd,SAAS,KAAK,0CACd;iBAiCc,yBACd,SAAS,yBACT,mBACA,iCACA,sBAAsB,qBAEtB,WAAU,6BACT;cAwFU,kBAAkB;UAGd,mBAAmB;EAElC;EAEA,UAAU;EACV,OAAO;;iBAaO,0BAA0B,GACxC,gBAAgB,KAChB,aAAa,MAAM,MAAM,sBACxB,mBAAmB;;;UChaL;EACf,MAAM,oBAAoB;EAC1B,KAAK,oBAAoB;EACzB,KAAK,oBAAoB;EACzB,MAAM,oBAAoB;EAC1B,SAAS;EACT;;UAGe;EAMf;EAOA;EAMA;EAOA;EAMA;EAMA;EAQA;EAOA;EAaA,SAAS;EAsCT;EAYA;EAUA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA;;iBAwBc,eAAe,SAAS;iBAqBxB,kBAAkB;iBAKlB;;;UCjMC;EAEf;EAOA;EAGA;EAGA,UAAU;EAGV;EAwBA;EAGA;EAGA;EAGA;EAOA;EAcA,kBAAkB;;;;KCvDR,iBAAiB,oBAAoB;UAEvC;EAER,OAAO;EAEP;EAEA,UAAU;EAEV;EAEA;EA6BA,QAAQ;EAmBR;;KAkBU,sBAAsB,2BAA2B;UAE5C;EACf;EAMA;EAQA;;UAGe;EACf;EAMA;EAQA;EAEA;EAEA;EAEA;EAEA;;UAGe,0BAA0B;EACzC;EAEA;EAEA;EASA;EAKA;EAQA;;UAGe,4BAA4B;EAC3C;EASA;EAOA;IACE;IACA;IACA;;EASF;;;;UC9Be;EACf,sBAAsB;EAEtB,cAAc;;UAizBC,kCAAkC;EAEjD;EAMA;EAEA;EAQA;;iBA8kBc,yBAAyB,OAAM,kCAAuC;iBA0CtE,yBAAyB,KAAK,UAAU;;;UC1nDvC;EAEf;EAEA;EAEA;EAEA;EASA,UAAU;;UAGK;EAEf,QAAQ;EAWR,uBAAuB;;UAkBR;EACf,WAAW,MAAM,mBAAmB,QAAQ;;;;UC3B7B;EAOf;IACE;IACA;IACA;IACA;;EASF,iBAAiB,eAAe;EAMhC;EAOA;EAOA;EAWA,kBAAkB;EAQlB;EAWA;EASA,kBAAkB,SAAS,eAAe;;KAIhC,wBAAwB,KAClC;iBAoCc,kBAAkB,SAAS;iBAwG3B,iCACd,4BACA;EACG;EAAoB;EAAgB;EAAmB;;KAiBhD;EACN;;EACA;EAAkB;;EAClB;EAAqB;;EACrB;EAA0B;;iBA2BhB,sBACd,cACA,WAAW,eAAe,mBAC1B,SAAS,qCACR;iBAwSa,4BACd,cACA,WAAW,eAAe,mBAC1B,SAAS;;;UCjlBM;EAEf;EAEA,YAAY;EAEZ;EAOA;EAUA,cAAc;EAWd,cAAc;EAEd,uBAAuB;;UAGR;EAEf;;UAiBe;EAEf;EAMA;EAEA,YAAY;EAEZ;EAEA,WAAW;EAEX,WAAW,KAAK;EAEhB,cAAc;EAEd,uBAAuB;;UAYR;EAKf,OAAO;EAEP;;iBAUc,kBACd,cACA,cACA,SAAS,2BACR;iBAuFmB,kBACpB,cACA,cACA,gBACA,SAAS,2BACR,QAAQ;;;iBC7KK,oBAAoB;UAuBnB;EAEf,UAAU;EAEV;;UAGe;EAEf,aAAa;GAKZ,iCAAiC;;iBAwBpB,eACd,mBACA,iCACA,aAAa,qCACb,YAAY,kBACX;;;UC9Gc;EACf;EACA,OAAO,eAAe;EACtB,cAAc,eAAe;;UAMd;EACf;EACA,QAAQ;EACR,cAAc,eAAe;;UAMd;EACf;EACA;EACA;;UAMe;EACf;EACA;EACA;EACA;;UAMe;EACf;EACA,QAAQ;EACR,cAAc,eAAe;;UAkBd;EAKf;EAOA;EAEA;EAEA;EAEA,kBAAkB;EAElB,sBAAsB;EAEtB;EAEA,qBAAqB;EAErB;EAEA;EAEA;EAEA,YAAY;EAEZ,UAAU;EAEV;;UAOe;EAMf;EAKA,SAAS;;UAMM;EACf;EACA;EACA;EACA;;;;cClHW;UACH;EAeF,kBACJ;IAAS;IAAmB;KAC5B,sBACC,QAAQ;EAqBL,aACJ,sBACA,mBACA,oBACC,QAAQ;EA8CX,cAAc,UAAU,gBAAgB,YAAY;EAiCpD,mBACE,sBACA,OAAO,WACP;IAAQ;IAAqB;IAAiB,YAAY,oBAAoB;;EAwBhF,6BACE,eACA,mBACA,gBACA;;;;UCkHa;EACf,sBAAsB;EAEtB,cAAc;;iBAy4EA,kCACd,OAAM,2CACL;iBAiDa,kCAAkC,KAAK,UAAU;;;iBCvqFjD,sBAAsB;iBAkBtB,sBAAsB,KAAK,UAAU;;;iBC7C/B,0BAA0B,kBAAkB;EAChE;EACA;EACA;EACA;;iBAuEc,qBAAqB;EACnC;EACA;;EACI;EAAiB;IAAqB;;;UCnD3B;EAEf;EAEA;;iBAec,sBAAsB;;;KCkB1B;;;UC3CK;EAEf;EAOA;EAaA,qBAAqB;EAQrB,oBAAoB;EAEpB;;UAOe;EAEf,OAAO;EAEP;;iBA0Bc,0BACd,SAAS,wCACT,qBACA,8BACC;iBAwDa,eAAe;iBAwCf,2BACd,oBAAoB,oCACpB;EAAQ,iBAAiB,aAAa,eAAe;IACpD;iBA2Ca,qBACd,mBAAmB,oCACnB;EACG;EAAkB;;;;UC/GN;EACf;EAOA;EAEA,WAAW;;UA8FI;EACf;EAEA;EAEA;EAMA,oBAAoB;EAEpB,WAAW;;UA0GI;EACf;EACA;EACA;EACA,oBAAoB;EAEpB,mBAAmB;EACnB,WAAW;;UA+II;EACf;EAEA;EAEA,mBAAmB;EAEnB,WAAW;;;;KCtfD,0BACR,wBACA,6BACA,wBACA;UAmCa;EAEf;EAEA;EAEA;EAEA;EAEA;EAUA;EAgBA;EAQA;EAWA;EAOA,iBAAiB;EAejB;EAsBA;IAAgB;;EAgBhB;IAAa;IAAoB,SAAS;;EAgB1C;IACE,SAAS;IACT,mBAAmB,SAAS;IAC5B,qBAAqB,SAAS,eAAe,SAAS;;EAaxD,oBAAoB;EAEpB;;iBAoBc,eAAe,iBAAiB,cAAc;;;UCtN7C;EAEf;EAEA;EAEA;EAMA;EAQA;EAOA;EAaA,QAAQ;EAiBR;IAAgB;;;UAID;EAEf;EAEA;EAEA;EAEA;;iBAuBc,sBAAsB,iBAAiB;EACrD,MAAM;EACN;;iBA8Bc,6BACd,iBAAiB,cAChB;iBAgJa,6BAA6B;iBA8L7B,8BACd,KAAK,wBACL;iBAiBc,iCACd,eAAe,0BACf,iCACC;iBAWa,iCACd,eAAe;;;UCxdA;EACf;EAEA;EAEA;EAMA;EAEA;EAEA;;UAGe;EACf;EACA;EACA;EAEA,iBAAiB,cAAc;EAE/B;EAEA;EACA;;UASe;EAEf;EAEA;EAEA;;UAGe;EACf;EACA;EAWA,OAAO,cAAc;EAOrB;EAEA;EAEA;EAYA;;UAGe;EACf;EACA;EAEA;EAKA,UAAU;EAMV;EACA;EACA;;UAae;EACf;EAEA;EACA;EAYA;;KAGU,iBACR,wBACA,0BACA,4BACA,gBACA;KAEQ;EACN;EAAgB;;EAChB;EAAe;;EACf;EAAiB;;EACjB;EAAwB;;UAgdb;EACf,OADe;EAEf,aAAa;;iBAGC,kBACd,iBAAiB,aACjB,iBADiB,oBAEhB;;;UC5Sc;EACf,sBAAsB;EAEtB,cAAc;;UAwlCC;EAEf,UAAU;EAEV,gBAAgB;EAEhB;;iBAoBc,sBAAsB;EACpC;EACA;EACA,aAAa;EAEb;IACE;UAsIa;WAEN,UAAU;WAOV,uBAAuB;WAEvB;;iBA2BK,uBACd,iBAAiB,iBACjB,gCACA,+BACA,yBAAwB,2BACvB;iBAm8Ea,2BAA2B,OAAM,oCAAyC;iBAuC1E,2BAA2B,KAAK,UAAU;;;UCvlIzC;EAEf,OAAO;EAEP;EAEA,UAAU;EAMV;EAMA;EAkBA;EAMA;IAAuB;IAAmB,QAAQ;;EAElD;EACA,YAAY;EACZ,SAAS;EAMT;IAAoB;IAAqC;;EAKzD;;UAGe;EACf;EACA,OAAO;EACP;EACA;EACA;EAEA,aAAa;EAOb;EAEA;IAAW;IAAc;;EAOzB;EAOA;IACE;IACA;IACA;IACA;;EAEF;IAAe;IAAsB;IAAuB;;EAC5D;IAAa;IAAuB;;EACpC;EAEA;EACA;IACE;IACA;IACA;IACA;IACA;;EAEF;EACA;EACA;EACA;IAAW;IAAc;IAAmB;;EAO5C;EAEA;;KAGU;EACN;EAAmB;;EACnB;EAAa;EAAa;EAAiB;;EAC3C;EAAgB;;EAShB;EAAwB;EAAuB;;UAEpC;EACf;EACA;EAEA;EAKA;IACE;IACA;IACA;IACA,aAAa;IACb,SAAS;;;cAIA,+BAA+B;EAC1C,YAAY;;iBAkBE,8BACd,MAAM,KAAK,gCACX,oBAAmB,sBAAsB;KA2D/B,4BAA4B;KA+xC5B;;;cChjDC,sBAAsB;WACjB;WACA,OAAO;EAEvB,YAAY,iBAAiB,cAAc,QAAQ;;cAkBxC,8BAA8B;EACzC,YAAY,iBAAiB,QAAQ;;;;UCTtB;EAEf;EAEA;EAKA;EAMA;EAOA;EASA;EAQA;;UAOe;EAEf,SAAS;EAMT,MAAM;EAEN,aAAa;EAEb,oBAAoB;EAEpB,mBAAmB;EAEnB,eAAe;EAEf,yBAAyB;EAEzB,cAAc;EAEd,eAAe;;iBA2KD,YAAY,iBAAiB,cAAc;iBAyC3C,aAAa,SAAS;;;UC/PrB;EASf;EAMA,UAAU;IAER;IAOA;IAOA;IAEA,eAAe;MAAgB;MAAkB;;;;UAWpC;EAEf;EAEA;EAEA;;UAGe;EAEf,OAAO;EAEP;EAEA,UAAU;EAOV;EAeA;EAEA;EAgBA;EAMA,MAAM;EAMN,iBAAiB;EAQjB,mBAAmB,cAAc;EAMjC;;;;cC3FW;cAstCA;iBAgBG,wBAAwB;;;UChvCvB;EAEf;EAEA;;UAIe;EAEf;EAEA;;;;KCGU,yBAAyB,qBAAqB;UAGzC;EACf;EAEA;EAEA;EAEA;EAEA;EAMA;;UAgBe;EACf;EAEA;EAEA;EAMA;EAMA;;UAIe;EACf;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;;UAIe;EACf;EAEA;EAEA;EAEA;;UAIe;EACf;EAEA,SAAS;;UAcM;EACf;EAEA;EAEA;EAEA;EAEA;EAOA;EAEA;;KAIU,yBACR,yBACA,0BACA;UAGa;EAEf;EAEA;EAEA;EAEA,sBAAsB;EAEtB;EAEA,uBAAuB;EAEvB;EAEA,QAAQ;EAMR,YAAY;;UAIG;EAEf;EAEA;EAEA;EAOA,gBAAgB;EAKhB,mBAAmB;EAEnB,OAAO;;UAGQ;EAEf,WAAW;EAEX;;iBAQc,oBACd,OAAO,WACP,uBACC;iBAgIa,0BAA0B,UAAU;;;UClOnC;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA;EASA;EAMA;EACA;EASA;EACA;EAEA;EAEA;EAMA;EASA;EAOA;EAMA;EAOA;EAMA;EACA;EAEA;EAEA;EAKA;EACA;EAaA;EAeA;EAWA;EAOA;EASA;EASA;EAOA;EASA;EAOA;EAUA;GAEC;;UAIc;EAEf;;KAQU,uBAAuB,0BAA0B;UAG5C;EACf;EAEA;EAEA;EAEA;EAEA;;UAIe;EACf;EAEA,QAAQ;EAER;EAEA;EAEA;;UAIe;EACf;EACA,SAAS;;UAIM;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;UAIe;EACf;EACA;EACA;EACA;;KAIU,gBACR,uBACA,wBACA;UAGa;EAEf;EAEA;EAEA;EAEA,gBAAgB;EAEhB,mBAAmB;EAMnB;EAEA,OAAO;IACL;IACA;IACA;IACA,sBAAsB;IACtB;IACA,uBAAuB;IACvB;IACA,QAAQ;IAER,YAAY;;;UAKC;EACf,WAAW;;UAgBI;EACf,YAAY,QAAQ,cAAc;EAClC;EACA;EACA,aAAa;EACb,aACE,QAAQ,aACR;IACG,OAAO;IAAe,YAAY;IAAe;;EACtD,iBAAiB;EAQjB;EAeA;;iBASoB,sBACpB,mBACA,SAAS,2BACT,UAAU,kBACV,qBAAqB,iCACrB,kBAAkB,oBACjB;KAqoES,4BACV,UAAU,wBACP;iBA6EiB,+BACpB,gBACA,QAAQ,aACR,SAAS,2BACT,eAAe,gCACf;EACE;EAMA;EAOA,mBAAmB;IAEpB,QAAQ;cAsQE;iBAEG,cAAc;iBAWd,mBAAmB;iBAsFb,gCAAgC;EACpD;IACE;EAAU;EAAqB;EAAyB;;iBAkN5C,oBAAoB;iBAmBpB,wBAAwB,KAAK,UAAU;iBAgEvC,2BAA2B;EACzC;EACA;;iBAwBc,2BAA2B,KAAK,UAAU;iBA8H1C,wBAAwB,KAAK,UAAU;;;UCh3GtC;EACf,sBAAsB;EAEtB,cAAc;;iBAoxBA,0BAA0B,OAAM,mCAAwC;iBA4LxE,0BAA0B,KAAK,UAAU;;;UCtnCxC;EACf,sBAAsB;EAEtB,cAAc;EAEd,cAAc;;iBAgBA,mBAAmB;iBA2BnB,+BACd,OAAM,wCACL;iBA4Da,+BAA+B,KAAK,UAAU;;;UCtG7C;EACf,sBAAsB;EAEtB,cAAc;EAEd,cAAc;;iBAWA,qBAAqB,+BAA+B;iBAwGpD,iBACd,gBACA,QAAQ;EACL,OAAO;EAAW;;iBA8EP,YAAY,SAAS,4BAA4B;iBAiLjD,2BAA2B,OAAM,oCAAyC;iBA0D1E,sBAAsB,KAAK,UAAU;;;cCzXxC,kCAAkC;EAC7C,YAAY,iBAAiB,QAAQ;;UAkEtB;EAEf,cAAc;EAEd,cAAc;EAQd,sBAAsB;;iBASR,qBAAqB,+BAA+B;iBAuBpD,sBAAsB,+BAA+B;iBA4DrD,qBACd,UAAU,qBACV,UAAU,yBACT;iBA2Ga,wBACd,gBACA,QAAQ;EACL,OAAO;EAAW;;iBA84BP,kCACd,OAAM,2CACL;iBA+Ca,kCAAkC,KAAK,UAAU;;;UCllBhD;EACf,sBAAsB;EAEtB,cAAc;EAEd,cAAc;;iBAYA,iCACd,OAAM,0CACL;iBA0Ca,iCAAiC,KAAK,UAAU;;;UClkB/C;EACf,sBAAsB;EAEtB,cAAc;EAEd,cAAc;;iBAUA,mCACd,OAAM,4CACL;iBAwCa,mCAAmC,KAAK,UAAU;;;cC5QrD;cAGA;KAGD;KACA;KACA,kBAAkB,mBAAmB;UAGhC;EACf;;UAIe;EACf;EAEA;EAEA;EAEA;EAEA,aAAa;EAEb;EAEA,OAAO,QAAQ,OAAO,iBAAiB;EAEvC;;cAIW,+BAA+B;EAC1C,YAAY;;UAQG;EACf,OAAO;EACP;EACA,UAAU;;iBASI,0BACd,gBACA,QAAQ,cACP;iBAmFa,uBACd,mBACA,UAAU,mBACT;iBAsHa,WAAW;UA2BV;EAEf;EAEA;EAEA;;iBASoB,2BACpB,OAAO,WACP,QAAQ,oBACR,SAAQ,sBACP,QAAQ;iBAmEK,2BAA2B,UAAU;;;UCvTpC,iCAAiC;EAChD;EACA;EACA;EACA;EACA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;EAEA;;iBAsCc,mBACd,SAAS,KAAK,oEACd,YAAW;iBAqCG,uBACd,UAAU,sBACV,QAAQ,qBACP;iBA+Ba,mBACd,WAAW,SAAS,yBACpB,UAAU,SAAS,2BAClB;iBAYa,wBAAwB,QAAQ;UAuU/B;EACf,sBAAsB;EAEtB,cAAc;EAEd,cAAc;;iBAUA,+BACd,OAAM,wCACL;iBAiCa,+BAA+B,KAAK,UAAU;;;UC1jB7C;EAEf,cAAc;;UAyCC;EAOf;;iBAYc,oBACd,SAAS,eACT,iBACA,UAAS;iBA0FK,uBAAuB,OAAM,gCAAqC;iBA4ClE,uBAAuB,KAAK,UAAU;;;UCrMrC;EACf;EACA;EACA;;cAiCW;iBAoBG,kBACd,QAAQ,+BACR,OAAO;iBAOO;iBAKA,yBACd,MAAK,OAAO,aACX;iBASa;iBAuEA,qBACd;EACE;EACA;EACA,WAAW;IAEZ;iBA0Ba,wBAAwB;EACtC;EACA;;EACI;EAAiB;IAAqB;iBAmB5B,6BAA6B;EAC3C;EACA;;EACI;EAAiB;IAAqB;;;cCpN/B;cAMA;cAOA;UAGI;EAEf;EAEA;EAEA;;iBAUc,kBAAkB,aAAa;iBAK/B,4BAA4B,aAAa;iBA0BzC,sBACd,WAAW,kBAAkB,sCAC5B;iBAKa,+BACd,WAAW,kBAAkB,sCAC5B;UAKc;EAEf,WAAW,SAAS;EAEpB,YAAY;EAEZ,iBAAiB;;iBAUH,2BAA2B,+BAA+B;iBA+C1D,2BACd,WAAW,SAAS,sCACpB,UAAU;iBAsCI,iCAAiC,GAAG;iBA0BpC,2BACd,MAAM,KAAK,2DACX;iBA2Bc,kBAAkB,qBAAqB;iBAiCvC,mBAAmB,iBAAiB;iBAgEpC,2BACd,sBACA;UAce;EAEf,UAAU;EAEV,MAAM;EAEN;;iBA6Bc,6BACd,MAAM,gCACL;;;cC3VU;cAYA;cAOA;UAmBI;EAEf;EACA;EACA;EAEA;;iBAac,qBAAqB;iBAgBrB,iBAAiB,eAAe,iBAA2B;UA4D1D;EAEf;EAEA;EAEA,cAAc;EAEd;EAEA;;iBAWc,qBAAqB,cAAc,mBAA8B;cA0BpE,kCAAkC;iBAc/B,4BACd,KAAK,OAAO,YACZ,6BACA;EACG;EAAsB;EAAmB;;iBAkD9B,6BACd,KAAK,OAAO,YACZ;EAAQ;EAA8B;IACrC;UAyBc;EACf;EACA;;UASe;EAEf;EAEA,kBAAkB;EAElB;EAEA;EAKA,qBAAqB;EAErB;EAMA;EAQA,wBAAwB;;UAUT;EAEf;EAEA;EAEA,UAAU;EAEV;EAEA;;UAIe;EAEf;EAEA,QAAQ;EAMR,UAAU;EAEV,mBAAmB;EAKnB,KAAK;EAEL;EAEA,QAAQ;EAER;EAEA;EAEA;EAEA;EAKA,sBAAsB;EAEtB;;UAIe;EAKf;EAEA;EAEA;EAEA,MAAM,OAAO;EAEb;EAKA,eAAe,aAAa,+BAA+B;EAE3D;EAMA,6BAA6B;;iBASf;iBAWA,0BAA0B;iBAY1B,qBAAqB,8BAA8B;iBAuBnD;iBAiBA,kBACd,4BACA;EACG;EAAkB;;cAiCV;iBASG,uBACd,aACA,6BACC;iBAmOmB,yBACpB,MAAM,kCACL,QAAQ;iBAyPK,uBACd,KAAK,SAAS,yBACd,QAAQ;iBA6BM,sBACd,QAAQ,mBACR;EACG;EAAiB;;iBAwCN,4BACd,KAAK,SAAS,yBACd,QAAQ,mBACR,qBAAqB,oBACpB;iBAwImB,8BACpB;EAAQ;IACP,QAAQ;cA6CE;iBAQG,8BAA8B;iBAS9B,2BAA2B,QAAQ;UAoBlC;EAEf;EACA;EACA;EAEA;EAKA;;iBASc;iBAMA,yBACd,oCACA,MAAK,OAAO;iBA6BQ,0BACpB,SAAS,kCACR,QAAQ;iBA+DK;;;KCx9CJ;UAmBK;EAEf;EAEA;EAEA;EAEA,MAAM;EAEN;EAEA;EAEA;EAEA;EAEA;EAKA;;UAQe;EAEf;EAEA;EAEA;EAEA;EAEA;;UAae;EAEf;EAEA;EAEA,MAAM;EAEN;EAMA;EAQA;EAEA;EAEA;;UAMQ;EACR,aAAa;EACb,MAAM;EACN,QAAQ;;cAYG;mBACM;EAEjB;EAMA,KAAK,gBAAgB,gBAAgB,OAAO,MAAM,MAAM,eAAe;EAIvE,GAAG,gBAAgB,gBACjB,OAAO,GACP,cAAc,MAAM,eAAe;EAMrC,IAAI,gBAAgB,gBAClB,OAAO,GACP,cAAc,MAAM,eAAe;EAWrC,cAAc,gBAAgB,gBAAgB,OAAO;;;;UCjJtC;EAEf;EAWA;EAEA;EAEA;EAEA,UAAU;EAOV;EAOA;EAMA;EAEA;;;;UCgCe;EACf;EACA;;KAIU,eAAe,kCAAkC;;;KCiNjD,gBAAgB;;;UC1RX;EAEf;EAMA,MAAM;EAEN;EAEA,UAAU;EAQV,cAAc;EAMd;EAMA;EASA,iBAAiB;EAOjB;;UAIe;EAEf;EAEA;EAMA;EAEA;EAEA;EAEA;EAEA;;UAIe,6BAA6B;EAE5C;EAEA,KAAK;EAEL;EAEA;EAEA,iBAAiB;EAEjB;EAEA;;UAIe;EACf,MAAM,KAAK,qBAAqB,QAAQ;;iBA0B1B,uBAAuB,QAAQ,uBAAuB;;;UC/HrD;EAEf,KAAK;EAEL;EAEA,MAAM;EAEN;EAEA;EAEA;EAEA;EAMA;;UAIe;EAEf;EAEA;EAEA,aAAa;;iBA+IC,iBAAiB,QAAQ,oBAAoB,QAAQ;;;UCtKpD;EAEf;EAEA,MAAM;EAEN,UAAU;EAOV,cAAc;EAMd;EAOA;EAQA,iBAAiB;;UAIF;EAEf;;UAIe;EAEf;EAEA,MAAM;EAEN;EAEA;EAWA;EAEA;EAEA;;UAIe,iCAAiC;EAEhD;EAEA,KAAK;EASL;EAEA;EAEA;EAEA,iBAAiB;EAEjB;EAMA;EASA;EAEA,sBAAsB;EAEtB,wBAAwB;EAMxB,gBAAgB,QAAQ,sBAAsB,QAAQ;EAOtD;;UAIe;EAEf,QAAQ,KAAK,uBAAuB,QAAQ;EAE5C,OAAO,KAAK,sBAAsB;EAElC,YAAY;EAEZ,eAAe;;iBA2XD,yBAAyB,QAAQ,2BAA2B;;;iBC9a5D,iBAAiB,gBAAgB;iBA2FjC,kBAAkB,gBAAgB;UA4CjC;EACf;EACA;EACA;EACA,UAAU;EACV;;iBAYc,oBAAoB,OAAO;iBA2F3B,mBAAmB,gBAAgB;UAouBlC;EAEf,cAAc;;iBAibA,yBAAyB,OAAM,kCAAuC;iBA4BtE,yBAAyB,KAAK,UAAU"}

package/dist/{local-studio-D4E6Wb1V.js → local-studio-PpZpeKYn.js}

@@ -1,8 +1,8 @@
 import { a as displayIdent, c as getEmbedConfig, i as STACK_REF_MAX_CODE_POINTS, o as displayStackName, s as displayToolOutput, t as getLogger, u as setEmbedConfig } from "./logger-uzapot2X.js";
-import { $ as formatHostForAuthority, B as describeCredentialLoadFailure, H as isAwsServiceException, I as renderAssemblyPathEscape, J as resolveEnvVars$1, K as applyEnvOverrideMap, L as resolveAssemblyPath, N as displayUntrustedValue, Q as formatAuthority, R as clampErrorName, U as sanitizeServiceExceptionMessage, V as flattenToOneLine, W as stringifyThrown, X as isLoopbackHostname, Y as defineOwnKey, Z as isWildcardHostname, et as hostFromAuthority, j as absoluteAssemblyPathEscape, n as awsEmulatorRealServices, o as deployArtifactClientConfig, p as proxyAwareFetch, q as readEnvVarsFileText, r as awsEndpointOverrideClientConfig, s as deployArtifactsReadEmulator, u as isAwsServiceRoutedToEmulator, y as createMixedModeStateProvider, z as describeAwsFailureForWarn } from "./aws-proxy-CtjweaLu.js";
-import { $ as isIamRoleArn, A as buildDockerImage, B as substituteImagePlaceholders, D as isImageInLocalCache, E as warnIfEmulatedPlatform, F as parseEcrRegistryHost, G as LocalStartServiceError, H as CdkLocalError, I as contextForContainer, J as withErrorHandling, K as RouteDiscoveryError, L as derivePartitionAndUrlSuffix, M as createShutdownSignalHandler, N as signalExitCode, O as parseEcrUri, P as describeExitWithoutArgv, Q as describeRejectedRoleArn, R as derivePseudoParametersFromRegion, T as buildContainerImage, U as InteractiveTtyRequiredError, V as tryResolveImageFnJoin, W as LocalInvokeBuildError, X as applyRoleArnIfSet, Y as AssumeRoleFailure, Z as assumeRoleCredentials, a as describeRefusedSensitiveEnvKeys, c as execEnvForSecrets, d as rememberForwardedPorts, et as refusedRoleArnMessage, f as removeContainer, h as streamLogs, i as attachLoopbackForwarder, j as resolveAssetSourcePath, k as pullEcrImage, l as pickFreePort, m as startNamespaceOwnerForwarder, n as SENSITIVE_ENV_KEYS, nt as buildStsClientConfig, p as runDetached, q as TargetSelectionCancelledError, r as appendEnvFlags, rt as resolveProfileCredentials, s as ensureDockerAvailable, t as DockerRunnerError, tt as emulateRoleAfterDeniedAssume, u as pullImage, w as architectureToPlatform, z as formatStateRemedy } from "./docker-runner-Du4rQJ1q.js";
-import { C as effectiveLoopbackPorts, F as resolveHostDefaultCredentials, R as takeAwsEmulatorStateSourceHint, b as awsEmulatorEnvName, d as workloadStsClientConfig, l as warnWorkloadCredentialsStripped, n as accountLookupStsClientConfig, r as applyWorkloadEnvCredentials, u as workloadClientConfig, v as activateWorkloadAwsWiring, w as getActiveWorkloadAwsWiring, y as applyWorkloadAwsWiringToEnv, z as workloadGetsEmulatorKeysOnly } from "./workload-identity-BONcukjU.js";
-import { a as isDockerClientEnvKey, c as runDockerStreaming, i as getDockerCmd, n as finchSecretArgvRefusal, o as isMalformedEnvKey, p as noImplicitEcrPullArgs, u as warnFinchArgvExposure } from "./docker-cmd-Cqd0TG-d.js";
+import { $ as formatHostForAuthority, B as describeCredentialLoadFailure, H as isAwsServiceException, I as renderAssemblyPathEscape, J as resolveEnvVars$1, K as applyEnvOverrideMap, L as resolveAssemblyPath, N as displayUntrustedValue, Q as formatAuthority, R as clampErrorName, U as sanitizeServiceExceptionMessage, V as flattenToOneLine, W as stringifyThrown, X as isLoopbackHostname, Y as defineOwnKey, Z as isWildcardHostname, et as hostFromAuthority, j as absoluteAssemblyPathEscape, n as awsEmulatorRealServices, o as deployArtifactClientConfig, p as proxyAwareFetch, q as readEnvVarsFileText, r as awsEndpointOverrideClientConfig, s as deployArtifactsReadEmulator, u as isAwsServiceRoutedToEmulator, y as createMixedModeStateProvider, z as describeAwsFailureForWarn } from "./aws-proxy-Ba_BOPyi.js";
+import { $ as isIamRoleArn, A as buildDockerImage, B as substituteImagePlaceholders, D as isImageInLocalCache, E as warnIfEmulatedPlatform, F as parseEcrRegistryHost, G as LocalStartServiceError, H as CdkLocalError, I as contextForContainer, J as withErrorHandling, K as RouteDiscoveryError, L as derivePartitionAndUrlSuffix, M as createShutdownSignalHandler, N as signalExitCode, O as parseEcrUri, P as describeExitWithoutArgv, Q as describeRejectedRoleArn, R as derivePseudoParametersFromRegion, T as buildContainerImage, U as InteractiveTtyRequiredError, V as tryResolveImageFnJoin, W as LocalInvokeBuildError, X as applyRoleArnIfSet, Y as AssumeRoleFailure, Z as assumeRoleCredentials, a as describeRefusedSensitiveEnvKeys, c as execEnvForSecrets, d as rememberForwardedPorts, et as refusedRoleArnMessage, f as removeContainer, h as streamLogs, i as attachLoopbackForwarder, j as resolveAssetSourcePath, k as pullEcrImage, l as pickFreePort, m as startNamespaceOwnerForwarder, n as SENSITIVE_ENV_KEYS, nt as buildStsClientConfig, p as runDetached, q as TargetSelectionCancelledError, r as appendEnvFlags, rt as resolveProfileCredentials, s as ensureDockerAvailable, t as DockerRunnerError, tt as emulateRoleAfterDeniedAssume, u as pullImage, w as architectureToPlatform, z as formatStateRemedy } from "./docker-runner-DjcP2syq.js";
+import { C as effectiveLoopbackPorts, F as resolveHostDefaultCredentials, R as takeAwsEmulatorStateSourceHint, b as awsEmulatorEnvName, d as workloadStsClientConfig, l as warnWorkloadCredentialsStripped, n as accountLookupStsClientConfig, r as applyWorkloadEnvCredentials, u as workloadClientConfig, v as activateWorkloadAwsWiring, w as getActiveWorkloadAwsWiring, y as applyWorkloadAwsWiringToEnv, z as workloadGetsEmulatorKeysOnly } from "./workload-identity-Blv2g1Jp.js";
+import { a as isDockerClientEnvKey, c as runDockerStreaming, i as getDockerCmd, n as finchSecretArgvRefusal, o as isMalformedEnvKey, p as noImplicitEcrPullArgs, u as warnFinchArgvExposure } from "./docker-cmd-BnW-0c0e.js";
 import { chmodSync, cpSync, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, promises, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { Command, InvalidArgumentError, Option } from "commander";
 import { STSClient } from "@aws-sdk/client-sts";
@@ -4274,6 +4274,7 @@ function detectEcsImageResolutionNeeds(stack) {
 	let needsStateResources = false;
 	let needsEnvOrSecretSubstitution = false;
 	let needsCrossStackResolver = false;
+	let needsTaskRoleState = false;
 	for (const res of Object.values(resources)) {
 		if (res.Type !== "AWS::ECS::TaskDefinition") continue;
 		const props = res.Properties ?? {};
@@ -4298,13 +4299,15 @@ function detectEcsImageResolutionNeeds(stack) {
 				break;
 			}
 		}
+		if (sameStackRoleLogicalId(props["TaskRoleArn"], resources) !== void 0) needsTaskRoleState = true;
 		if (isFnJoinOrSubIntrinsic(props["TaskRoleArn"]) || isFnJoinOrSubIntrinsic(props["ExecutionRoleArn"])) needsEnvOrSecretSubstitution = true;
 	}
 	return {
 		needsPseudoParameters,
 		needsStateResources,
 		needsEnvOrSecretSubstitution,
-		needsCrossStackResolver
+		needsCrossStackResolver,
+		needsTaskRoleState
 	};
 }
 function containerHasCrossStackEnvOrSecret(c) {
@@ -4502,8 +4505,13 @@ function extractTaskDefinitionProperties(stack, logicalId, resource, context) {
 	if (props["ProxyConfiguration"]) warnings.push(`Task definition ${displayIdent(logicalId)} declares 'ProxyConfiguration' (custom Envoy / App Mesh bootstrap), which is NOT honored by '${getEmbedConfig().cliName} start-service' / '${getEmbedConfig().cliName} run-task' in v1. Local execution will run without the configured proxy. See design doc § 2 for the rationale.`);
 	const resources = stack.template.Resources ?? {};
 	const subContext = buildSubstitutionContextFromImageContext(context);
-	const taskRoleArn = resolveRoleArn(props["TaskRoleArn"], resources, subContext);
-	const executionRoleArn = resolveRoleArn(props["ExecutionRoleArn"], resources, subContext);
+	const roleSubContext = context?.ignoreStateForRoles && subContext ? {
+		...subContext,
+		resources: Object.fromEntries(Object.entries(subContext.resources).filter(([, r]) => r.resourceType !== "AWS::IAM::Role"))
+	} : subContext;
+	const taskRole = resolveRoleArn(props["TaskRoleArn"], resources, roleSubContext);
+	const taskRoleArn = taskRole.arn;
+	const executionRoleArn = resolveRoleArn(props["ExecutionRoleArn"], resources, roleSubContext).arn;
 	const runtimePlatform = parseRuntimePlatform(props["RuntimePlatform"]);
 	const rawContainers = props["ContainerDefinitions"];
 	if (!Array.isArray(rawContainers) || rawContainers.length === 0) throw new EcsTaskResolutionError(`Task definition ${displayIdent(logicalId)} has no ContainerDefinitions.`);
@@ -4528,6 +4536,7 @@ function extractTaskDefinitionProperties(stack, logicalId, resource, context) {
 		warnings
 	};
 	if (taskRoleArn !== void 0) out.taskRoleArn = taskRoleArn;
+	if (taskRole.unresolved !== void 0) out.taskRoleUnresolved = taskRole.unresolved;
 	if (executionRoleArn !== void 0) out.executionRoleArn = executionRoleArn;
 	if (runtimePlatform !== void 0) out.runtimePlatform = runtimePlatform;
 	return out;
@@ -4901,10 +4910,20 @@ function resolveVolumeSourcePath(raw, volumeName, idx, taskLogicalId, subContext
 	throw new EcsTaskResolutionError(`Task ${displayIdent(taskLogicalId)} Volumes[${idx}] ${displayIdent(volumeName)} Host.SourcePath could not be resolved: ` + (sub.kind === "literal" ? "resolved to non-string / empty value" : sub.reason));
 }
 const TASK_ROLE_ACCOUNT_PLACEHOLDER = "${AWS::AccountId}";
-function resolveRoleArn(value, resources, subContext) {
-	if (value === void 0 || value === null) return void 0;
-	if (typeof value === "string") return value;
-	if (typeof value !== "object") return void 0;
+const TASK_ROLE_PARTITION_PLACEHOLDER = "${AWS::Partition}";
+function placeholderRoleArn(pathAndName) {
+	return `arn:${TASK_ROLE_PARTITION_PLACEHOLDER}:iam::${TASK_ROLE_ACCOUNT_PLACEHOLDER}:role${pathAndName}`;
+}
+function fillTaskRolePlaceholders(arn, account, callerArn) {
+	const segment = callerArn?.split(":")[1];
+	const partition = callerArn?.startsWith("arn:") && segment ? segment : "aws";
+	return arn.split(TASK_ROLE_ACCOUNT_PLACEHOLDER).join(account).split(TASK_ROLE_PARTITION_PLACEHOLDER).join(partition);
+}
+function hasTaskRolePlaceholder(arn) {
+	return arn.includes("${AWS::AccountId}") || arn.includes("${AWS::Partition}");
+}
+function sameStackRoleLogicalId(value, resources) {
+	if (!value || typeof value !== "object") return void 0;
 	const obj = value;
 	let refLogicalId;
 	if ("Ref" in obj && typeof obj["Ref"] === "string") refLogicalId = obj["Ref"];
@@ -4915,16 +4934,48 @@ function resolveRoleArn(value, resources, subContext) {
 			if (attr === "" || attr === "Arn") refLogicalId = arg[0];
 		}
 	}
+	if (refLogicalId === void 0) return void 0;
+	return resources[refLogicalId]?.Type === "AWS::IAM::Role" ? refLogicalId : void 0;
+}
+function roleArnFromStateRecord(logicalId, role, subContext) {
+	if (!subContext) return { reason: "no-state" };
+	const record = subContext.resources[logicalId];
+	if (!record) return { reason: "no-record" };
+	const arn = record.attributes?.["Arn"];
+	if (typeof arn === "string" && arn.length > 0) return { arn };
+	const name = record.physicalId;
+	if (typeof name !== "string" || name.length === 0) return { reason: "no-record" };
+	if (name.startsWith("arn:")) return { arn: name };
+	const rawPath = role.Properties?.["Path"];
+	if (rawPath === void 0) return { arn: placeholderRoleArn(`/${name}`) };
+	if (typeof rawPath !== "string" || !/^\/(?:.*\/)?$/.test(rawPath)) return { reason: "path-not-literal" };
+	return { arn: placeholderRoleArn(`${rawPath}${name}`) };
+}
+function resolveRoleArn(value, resources, subContext) {
+	if (value === void 0 || value === null) return {};
+	if (typeof value === "string") return { arn: value };
+	if (typeof value !== "object") return {};
+	const obj = value;
+	const refLogicalId = sameStackRoleLogicalId(value, resources);
 	if (refLogicalId !== void 0) {
-		if (resources[refLogicalId]?.Type !== "AWS::IAM::Role") return void 0;
-		return `arn:aws:iam::${TASK_ROLE_ACCOUNT_PLACEHOLDER}:role/${refLogicalId}`;
+		const fromState = roleArnFromStateRecord(refLogicalId, resources[refLogicalId], subContext);
+		if ("arn" in fromState) return { arn: fromState.arn };
+		return {
+			arn: placeholderRoleArn(`/${refLogicalId}`),
+			unresolved: {
+				logicalId: refLogicalId,
+				reason: fromState.reason
+			}
+		};
 	}
+	if ("Ref" in obj || "Fn::GetAtt" in obj) return {};
 	if ("Fn::Join" in obj || "Fn::Sub" in obj) {
-		if (!subContext) return void 0;
+		if (!subContext) return {};
 		const sub = substituteAgainstState(value, subContext);
-		if (sub.kind === "literal" && typeof sub.value === "string" && sub.value.length > 0) return sub.value;
-		return;
+		if (sub.kind === "literal" && typeof sub.value === "string" && sub.value.length > 0) return { arn: sub.value };
+		return {};
 	}
+	return {};
 }
 function pickString(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -16988,7 +17039,7 @@ async function softReloadReplica(args) {
 const defaultDockerInspectWorkdirImpl = async (containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	const { stdout } = await promisify(execFile)(getDockerCmd(), [
 		"inspect",
 		"--format",
@@ -17001,7 +17052,7 @@ let dockerInspectWorkdirImpl = defaultDockerInspectWorkdirImpl;
 const defaultDockerCpImpl = async (src, dst) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	await promisify(execFile)(getDockerCmd(), [
 		"cp",
 		src,
@@ -17012,19 +17063,19 @@ let dockerCpImpl = defaultDockerCpImpl;
 const defaultDockerStopImpl = async (containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	await promisify(execFile)(getDockerCmd(), ["stop", containerId]);
 };
 const defaultDockerStartImpl = async (containerId, opts = {}) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	await promisify(execFile)(getDockerCmd(), ["start", containerId]);
 	if (opts.joinedForwarder) return;
-	const { getActiveWorkloadAwsWiring } = await import("./workload-identity-BONcukjU.js").then((n) => n.B);
+	const { getActiveWorkloadAwsWiring } = await import("./workload-identity-Blv2g1Jp.js").then((n) => n.B);
 	const wiring = getActiveWorkloadAwsWiring();
 	if (wiring) {
-		const { attachLoopbackForwarder } = await import("./docker-runner-Du4rQJ1q.js").then((n) => n.o);
+		const { attachLoopbackForwarder } = await import("./docker-runner-DjcP2syq.js").then((n) => n.o);
 		await attachLoopbackForwarder(containerId, wiring);
 	}
 };
@@ -17094,7 +17145,7 @@ async function attachToSharedNetwork(plan, withAliases) {
 const defaultDockerNetworkConnectImpl = async (networkName, containerId, opts) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	const args = ["network", "connect"];
 	if (opts.ip) args.push("--ip", opts.ip);
 	for (const a of opts.aliases) args.push("--alias", a);
@@ -17105,7 +17156,7 @@ let dockerNetworkConnectImpl = defaultDockerNetworkConnectImpl;
 const defaultDockerInspectPublishesHostPortsImpl = async (containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	const { stdout } = await promisify(execFile)(getDockerCmd(), [
 		"inspect",
 		"--format",
@@ -17144,7 +17195,7 @@ async function disconnectOldFromSharedNetwork(oldInstance, opts = {}) {
 const defaultDockerNetworkDisconnectImpl = async (networkName, containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	await promisify(execFile)(getDockerCmd(), [
 		"network",
 		"disconnect",
@@ -17235,7 +17286,7 @@ const LISTEN_PROBE_SCRIPT = [
 async function dockerExecListenProbe(containerId, port, timeoutMs = 1e4) {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	try {
 		await promisify(execFile)(getDockerCmd(), [
 			"exec",
@@ -17389,7 +17440,7 @@ function pickEssentialContainerId(instance, service) {
 const defaultWaitForExitImpl = async (containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	const { stdout } = await promisify(execFile)(getDockerCmd(), ["wait", containerId], { maxBuffer: 1024 * 1024 });
 	const code = parseInt(stdout.trim(), 10);
 	return Number.isFinite(code) ? code : -1;
@@ -17399,7 +17450,7 @@ const EXIT_LOG_TAIL_LINES = 50;
 const defaultReadContainerLogsImpl = async (containerId) => {
 	const { execFile } = await import("node:child_process");
 	const { promisify } = await import("node:util");
-	const { getDockerCmd } = await import("./docker-cmd-Cqd0TG-d.js").then((n) => n.t);
+	const { getDockerCmd } = await import("./docker-cmd-BnW-0c0e.js").then((n) => n.t);
 	const { stdout, stderr } = await promisify(execFile)(getDockerCmd(), [
 		"logs",
 		"--tail",
@@ -20013,6 +20064,7 @@ async function resolveServiceAndRunnerOpts(boot, stacks, options, discovery, ski
 	let resolvedRoleArn;
 	if (effectiveAssumeRole === true) {
 		if (!service.task.taskRoleArn) throw new LocalStartServiceError(`--assume-role passed without an ARN but service ${displayIdent(service.serviceLogicalId)} has no resolvable TaskRoleArn. Pass the ARN explicitly: --assume-role <arn>`);
+		warnIfTaskRoleIsLogicalId(service.task, stateProvider, imageContext);
 		resolvedRoleArn = await resolveTaskRoleArnForOptions$1(service.task.taskRoleArn, options);
 		assumedCredentials = await assumeTaskRole$1(resolvedRoleArn, options.region, options.profile, options.emulateRoleVia, options.assumeRole !== void 0 ? "--assume-role" : "--assume-task-role");
 	} else if (typeof effectiveAssumeRole === "string") {
@@ -20354,7 +20406,7 @@ function describeForwardTargetForSummary(t) {
 	return t.kind === "lambda" ? `<Lambda: ${displayIdent(t.lambda.logicalId)}>` : `<ECS: ${displayStackName(t.serviceTarget)}>`;
 }
 async function resolvePlaceholderAccount$1(arn, region, profile, readFromCfnStack) {
-	if (!arn.includes("${AWS::AccountId}")) return arn;
+	if (!hasTaskRolePlaceholder(arn)) return arn;
 	const { STSClient, GetCallerIdentityCommand } = await import("@aws-sdk/client-sts");
 	const sts = new STSClient(accountLookupStsClientConfig({
 		region,
@@ -20362,9 +20414,10 @@ async function resolvePlaceholderAccount$1(arn, region, profile, readFromCfnStac
 		readFromCfnStack
 	}));
 	try {
-		const account = (await sts.send(new GetCallerIdentityCommand({}))).Account;
+		const identity = await sts.send(new GetCallerIdentityCommand({}));
+		const account = identity.Account;
 		if (!account) throw new LocalStartServiceError(`--assume-task-role: GetCallerIdentity returned no Account; cannot resolve placeholder ARN ${displayUntrustedValue(arn)}.`);
-		return arn.split(TASK_ROLE_ACCOUNT_PLACEHOLDER).join(account);
+		return fillTaskRolePlaceholders(arn, account, identity.Arn);
 	} catch (err) {
 		if (err instanceof LocalStartServiceError) throw err;
 		throw new LocalStartServiceError(`--assume-task-role: STS GetCallerIdentity failed while resolving placeholder ARN ${displayUntrustedValue(arn)}: ${describeAwsFailureForWarn(err, "STS GetCallerIdentity (task-role placeholder)")}. Pass the ARN explicitly: --assume-task-role <arn>`);
@@ -20448,8 +20501,11 @@ async function buildEcsImageResolutionContext$1(target, stacks, options, statePr
 	const candidate = pickCandidateStack$1(target, stacks);
 	if (!candidate) return void 0;
 	const needs = detectEcsImageResolutionNeeds(candidate);
-	if (!needs.needsPseudoParameters && !needs.needsStateResources && !needs.needsEnvOrSecretSubstitution) return;
+	const roleRecordUsable = !taskRoleRecordIsEmulatorSide();
+	const wantsStateForTaskRole = !!stateProvider && needs.needsTaskRoleState && isBareAssumeRole(options) && roleRecordUsable;
+	if (!needs.needsPseudoParameters && !needs.needsStateResources && !needs.needsEnvOrSecretSubstitution && !wantsStateForTaskRole) return;
 	const ctx = {};
+	if (!roleRecordUsable) ctx.ignoreStateForRoles = true;
 	const wantsPseudoForEnvOrSecret = !!stateProvider && needs.needsEnvOrSecretSubstitution;
 	if (needs.needsPseudoParameters || wantsPseudoForEnvOrSecret) {
 		const region = options.region ?? process.env["AWS_REGION"] ?? process.env["AWS_DEFAULT_REGION"] ?? candidate.region;
@@ -20470,12 +20526,16 @@ async function buildEcsImageResolutionContext$1(target, stacks, options, statePr
 			}
 		};
 	}
-	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution;
+	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution || wantsStateForTaskRole;
 	if (stateProvider && wantsState) {
 		const loaded = await stateProvider.load(candidate.stackName, candidate.region);
 		if (loaded) {
 			ctx.stateResources = loaded.resources;
 			ctx.stateRegion = loaded.region;
+			if (loaded.realSideUnread) {
+				ctx.ignoreStateForRoles = true;
+				ctx.roleRecordRealSideUnread = true;
+			}
 		} else {
 			const loadError = stateProvider.getLastLoadError?.();
 			if (loadError) ctx.stateLoadFailureMessage = loadError;
@@ -20699,6 +20759,25 @@ function addCommonEcsServiceOptions(cmd) {
 function addImageOverrideOptions(cmd) {
 	return cmd.addOption(new Option("--image-override <service=dockerfile or dockerfile...>", "Replace a service target's deployed-registry image with a local `docker build` of the supplied Dockerfile (repeatable). Two forms: <service>=<dockerfile> binds the service explicitly; a bare <dockerfile> opens a multi-select picker against the still-uncovered pinned targets (one Dockerfile across N services). Mix freely. Lets `--from-cfn-stack` still reach real AWS state while you iterate locally on the application container.")).addOption(new Option("--image-build-arg <KEY=VAL...>", "Global `docker build --build-arg KEY=VAL` pair applied to every --image-override build (repeatable). Lets a CDK Dockerfile that branches on an ARG (env target, base image tag, package mirror) honor that ARG locally without editing the Dockerfile.")).addOption(new Option("--image-build-secret <id=src...>", "Global `docker build --secret id=<id>,src=<src>` entry applied to every --image-override build (repeatable). Enables `RUN --mount=type=secret,id=<id>` in the Dockerfile — the standard private-registry / npm-token recipe (e.g. `--image-build-secret npmrc=./.npmrc`).")).addOption(new Option("--image-target <stage or svc=stage...>", "Repeatable. Bare `<stage>` is a global --target for every --image-override build; `<service>=<stage>` (issue #240) scopes the --target to one overridden target so a monorepo with different multi-stage Dockerfiles per service can stop each at its own intermediate stage. Per-service form overrides the global on the named target.")).addOption(new Option("--image-context <dir or svc=dir...>", "Repeatable. The `docker build` context for --image-override builds whose Dockerfile lives below it (a monorepo whose apps share code: --image-override Svc=apps/api/Dockerfile --image-context Svc=.). Bare `<dir>` applies to every overridden target; `<service>=<dir>` scopes it to one and overrides the global. Default: the Dockerfile's directory.")).addOption(new Option("--no-interactive-overrides", "Suppress the interactive boot prompt that walks each pinned target asking for a Dockerfile path, and the multi-select prompt fired by `--image-override <dockerfile>` (picker form). Useful for CI / scripted invocations.")).addOption(new Option("--strict-overrides", "Fail fast at boot when any pinned target remains uncovered after `--image-override` + the boot prompt resolve. Off by default; the boot WARN per uncovered pinned target still fires regardless.").default(false));
 }
+function isBareAssumeRole(options) {
+	return (options.assumeRole ?? options.assumeTaskRole) === true;
+}
+function taskRoleRecordIsEmulatorSide() {
+	return getActiveWorkloadAwsWiring()?.mixed !== void 0 && isAwsServiceRoutedToEmulator("IAM");
+}
+function warnIfTaskRoleIsLogicalId(task, stateProvider, imageContext) {
+	if (task.taskRoleUnresolved === void 0) return;
+	const { logicalId, reason } = task.taskRoleUnresolved;
+	const id = displayIdent(logicalId);
+	const explicit = "or pass the ARN explicitly: --assume-role '<arn>'.";
+	let why;
+	if (!stateProvider) why = `without a state-source flag (e.g. --from-cfn-stack) ${getEmbedConfig().binaryName} cannot read the name it was deployed under. A role CDK names for you is deployed as '<Stack>-<LogicalId>-<suffix>', where AssumeRole fails: pass a state-source flag, ${explicit}`;
+	else if (imageContext?.roleRecordRealSideUnread) why = `in AWS Emulator mixed mode the stack could not be read from real AWS, so the record holds only the emulator's role, which is not assumed in real AWS. Deploy the stack to real AWS too, ${explicit}`;
+	else if (imageContext?.ignoreStateForRoles || taskRoleRecordIsEmulatorSide()) why = `in AWS Emulator mixed mode the task role is assumed in real AWS, but the state record's IAM roles are the emulator's, so it is not read. Mark IAM as a "real-aws" exception under Parameters (AWS_ENDPOINT_URL_IAM), ${explicit}`;
+	else if (reason === "path-not-literal") why = `the template's Path for it is not a literal IAM path, so its ARN cannot be built from the stack's record. Pass the ARN explicitly: --assume-role '<arn>'.`;
+	else why = `the state source has no record of it (is the stack deployed?). Deploy the stack first, ${explicit}`;
+	getLogger().warn(`--assume-role: TaskRoleArn references the same-stack role ${id}, so a role named ${id} is assumed: ${why}`);
+}
 
 //#endregion
 //#region src/cli/commands/local-run-task.ts
@@ -20791,6 +20870,7 @@ async function localRunTaskCommand(target, options, extraStateProviders) {
 		let resolvedRoleArn;
 		if (effectiveAssumeRole === true) {
 			if (!task.taskRoleArn) throw new Error(`--assume-role passed without an ARN but the task definition has no resolvable TaskRoleArn. Either the task definition does not set TaskRoleArn, or it points at a resource ${getEmbedConfig().binaryName} cannot resolve to an IAM Role at synth time. Pass the ARN explicitly: --assume-role <arn>`);
+			warnIfTaskRoleIsLogicalId(task, stateProvider, imageContext);
 			resolvedRoleArn = await resolveTaskRoleArnForOptions(task.taskRoleArn, options);
 			assumedCredentials = await assumeTaskRole(resolvedRoleArn, options.region, options.profile, options.emulateRoleVia, options.assumeRole !== void 0 ? "--assume-role" : "--assume-task-role");
 		} else if (typeof effectiveAssumeRole === "string") {
@@ -20878,7 +20958,7 @@ var PlaceholderAccountError = class PlaceholderAccountError extends Error {
 	}
 };
 async function resolvePlaceholderAccount(arn, region, profile, readFromCfnStack) {
-	if (!arn.includes("${AWS::AccountId}")) return arn;
+	if (!hasTaskRolePlaceholder(arn)) return arn;
 	const { STSClient, GetCallerIdentityCommand } = await import("@aws-sdk/client-sts");
 	const sts = new STSClient(accountLookupStsClientConfig({
 		region,
@@ -20886,9 +20966,10 @@ async function resolvePlaceholderAccount(arn, region, profile, readFromCfnStack)
 		readFromCfnStack
 	}));
 	try {
-		const account = (await sts.send(new GetCallerIdentityCommand({}))).Account;
+		const identity = await sts.send(new GetCallerIdentityCommand({}));
+		const account = identity.Account;
 		if (!account) throw new PlaceholderAccountError(`--assume-task-role: GetCallerIdentity returned no Account; cannot resolve placeholder ARN ${displayUntrustedValue(arn)}. Pass the ARN explicitly: --assume-task-role <arn>`);
-		return arn.split(TASK_ROLE_ACCOUNT_PLACEHOLDER).join(account);
+		return fillTaskRolePlaceholders(arn, account, identity.Arn);
 	} catch (err) {
 		if (err instanceof PlaceholderAccountError) throw err;
 		const shownArn = displayUntrustedValue(arn);
@@ -20915,8 +20996,11 @@ async function buildEcsImageResolutionContext(candidate, stateProvider, options,
 	const logger = getLogger();
 	if (!candidate) return void 0;
 	const needs = detectEcsImageResolutionNeeds(candidate);
-	if (!needs.needsPseudoParameters && !needs.needsStateResources && !needs.needsEnvOrSecretSubstitution) return;
+	const roleRecordUsable = !taskRoleRecordIsEmulatorSide();
+	const wantsStateForTaskRole = !!stateProvider && needs.needsTaskRoleState && isBareAssumeRole(options) && roleRecordUsable;
+	if (!needs.needsPseudoParameters && !needs.needsStateResources && !needs.needsEnvOrSecretSubstitution && !wantsStateForTaskRole) return;
 	const ctx = {};
+	if (!roleRecordUsable) ctx.ignoreStateForRoles = true;
 	const wantsPseudoForEnvOrSecret = !!stateProvider && needs.needsEnvOrSecretSubstitution;
 	if (needs.needsPseudoParameters || wantsPseudoForEnvOrSecret) {
 		const region = options.region ?? process.env["AWS_REGION"] ?? process.env["AWS_DEFAULT_REGION"] ?? candidate.region;
@@ -20937,12 +21021,16 @@ async function buildEcsImageResolutionContext(candidate, stateProvider, options,
 			}
 		};
 	}
-	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution;
+	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution || wantsStateForTaskRole;
 	if (stateProvider && wantsState) {
 		const loaded = await stateProvider.load(candidate.stackName, candidate.region);
 		if (loaded) {
 			ctx.stateResources = loaded.resources;
 			ctx.stateRegion = loaded.region;
+			if (loaded.realSideUnread) {
+				ctx.ignoreStateForRoles = true;
+				ctx.roleRecordRealSideUnread = true;
+			}
 		} else {
 			const loadError = stateProvider.getLastLoadError?.();
 			if (loadError) ctx.stateLoadFailureMessage = loadError;
@@ -32435,4 +32523,4 @@ function addStudioSpecificOptions(cmd) {
 
 //#endregion
 export { postHook as $, withoutKeys as $a, probeHostGatewaySupport as $i, addImageOverrideOptions as $n, resolveApiTargetSubset as $r, classifyS3Error as $t, microvmFidelityWarnings as A, filterWebSocketApisByIdentifiers as Aa, translateLambdaResponse as Ai, stripCloudFrontImport as An, A2A_CONTAINER_PORT as Ar, readContainerLogTail as At, MICROVM_WS_BASE_PROTOCOL as B, AGENTCORE_RUNTIME_TYPE as Ba, ConnectionRegistry as Bi, createLocalStartAlbCommand as Bn, AGENTCORE_SESSION_ID_HEADER as Br, parseWebFunctionBuildConfig as Bt, addListSpecificOptions as C, resolveWatchConfig as Ca, attachAuthorizers as Ci, WEB_FUNCTION_REVISION_TYPE as Cn, setShadowReadyTimeoutMs as Cr, parseKvsFileOverrides as Ct, buildMicrovmLambdaView as D, availableWebSocketApiIdentifiers as Da, isFunctionUrlOacFronted as Di, compileCloudFrontFunction as Dn, createLocalInvokeAgentCoreCommand as Dr, WEB_FUNCTION_CONTAINER_PORT as Dt, addStartMicrovmSpecificOptions as E, listTargets as Ea, buildCorsConfigFromCloudFrontChain as Ei, resolveWebFunctionTarget as En, addInvokeAgentCoreSpecificOptions as Er, RecentOutput as Et, microvmImageTag as F, resolveLambdaArnIntrinsic as Fa, pickResponseTemplate as Fi, findFileAssetForObjectKey as Fn, MCP_PROTOCOL_VERSION as Fr, buildNodeEntryFileStart as Ft, startMicrovmFrontDoor as G, DynamicReferenceResolver as Ga, buildDisconnectEvent as Gi, addStartServiceSpecificOptions as Gn, SUPPORTED_CODE_RUNTIMES as Gr, readWebFunctionServiceConfig as Gt, PROXY_PORT_HEADER as H, pickAgentCoreCandidateStack as Ha, handleConnectionsRequest as Hi, resolveAlbTarget as Hn, waitForAgentCoreHttpReady as Hr, WEB_FUNCTION_HTTP_ENDPOINT_ENV as Ht, planMicrovmPorts as I, AGENTCORE_A2A_PROTOCOL as Ia, selectIntegrationResponse as Ii, isBucketDeploymentResource as In, mcpInvokeOnce as Ir, defaultWebFunctionPlatform as It, MICROVM_HOOK_PATH_PREFIX as J, firstUsableRegion as Ja, createFileWatcher as Ji, addRunTaskSpecificOptions as Jn, renderCodeDockerfile as Jr, idFromArn as Jt, stripMicrovmProxyHeaders as K, containsDynamicReference as Ka, buildMessageEvent as Ki, createLocalStartServiceCommand as Kn, buildAgentCoreCodeImage as Kr, webFunctionAssumeRole as Kt, readExposedPorts as L, AGENTCORE_AGUI_PROTOCOL as La, tryParseStatus as Li, resolveBucketDeploymentObjectKey as Ln, parseSseForJsonRpc as Lr, resolveWebFunctionRuntime as Lt, DEFAULT_TERMINATE_HOOK_TIMEOUT_MS as M, webSocketApiMatchesIdentifier as Ma, buildHttpApiV2Event as Mi, createLocalFileKvsDataSource as Mn, a2aInvokeOnce as Mr, waitForWebFunctionReady as Mt, LocalMicrovm as N, discoverRoutes as Na, buildRestV1Event as Ni, createUnboundCloudFrontModule as Nn, MCP_CONTAINER_PORT as Nr, watchContainerExit as Nt, createLocalStartMicrovmCommand as O, discoverWebSocketApis as Oa, matchPreflight as Oi, runViewerRequest as On, bridgeAgentCoreWs as Or, containerFailure as Ot, buildMicrovmImage as P, pickRefLogicalId as Pa, evaluateResponseParameters as Pi, bucketDeploymentSourceObjectKeys as Pn, MCP_PATH as Pr, WEB_FUNCTION_RUNTIMES as Pt, pollBuildHook as Q, resolveDynamicReferencesInEnv as Qa, HOST_GATEWAY_MIN_VERSION as Qi, addEcsAssumeRoleOptions as Qn, createWatchPredicates as Qr, resolveDeployedOriginBucket as Qt, setContainerPaused as R, AGENTCORE_HTTP_PROTOCOL as Ra, VtlEvaluationError as Ri, addAlbSpecificOptions as Rn, AGENTCORE_SIGV4_SERVICE as Rr, supportedWebFunctionRuntimes as Rt, StudioEventBus as S, resolveSsmParameters as Sa, invokeTokenAuthorizer as Si, WEB_FUNCTION_ENDPOINT_TYPE as Sn, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Sr, normalizeKvsFileKeys as St, formatTargetListing as T, countTargets as Ta, buildCorsConfigByApiId as Ti, WebFunctionResolutionError as Tn, attachContainerLogStreamer as Tr, resolveCloudFrontTarget as Tt, rewriteUpgradeResponseHead as U, resolveAgentCoreTarget as Ua, parseConnectionsPath as Ui, isApplicationLoadBalancer as Un, waitForAgentCorePing as Ur, buildWebFunctionLambdaView as Ut, MicrovmStateError as V, AgentCoreResolutionError as Va, buildMgmtEndpointEnvUrl as Vi, parseLbPortOverrides as Vn, invokeAgentCore as Vr, resolveWebFunctionArtifact as Vt, selectTargetPort as W, DynamicReferenceResolutionError as Wa, buildConnectEvent as Wi, resolveAlbFrontDoor as Wn, downloadAndExtractS3Bundle as Wr, finalizeWebFunctionEnv as Wt, callRuntimeHook as X, keysOverriddenBy as Xa, createLocalInvokeCommand as Xi, MAX_TASKS_SUBNET_RANGE_CAP as Xn, addStartApiSpecificOptions as Xr, createDeployedKvsDataSource as Xt, MicrovmHookError as Y, keysNotFromTemplate as Ya, addInvokeSpecificOptions as Yi, createLocalRunTaskCommand as Yn, toCmdArgv as Yr, resolveKvsModulesForDistribution as Yt, generateMicrovmId as Z, parseDynamicReference as Za, HOST_DOCKER_INTERNAL_GATEWAY as Zi, addCommonEcsServiceOptions as Zn, createLocalStartApiCommand as Zr, resolveDeployedKvsArnByName as Zt, filterStudioTargetGroups as _, resolveCfnFallbackRegion as _a, verifyJwtViaDiscovery as _i, pickKvsLogicalIdFromArn as _n, isLocalCdkAssetImage as _r, attachAgentCoreWsBridge as _t, createLocalStudioCommand as a, assertEcsTaskImagesResolvable as aa, filterRoutesByApiIdentifiers as ai, serveLambdaUrlOrigin as an, resolveSharedSidecarCredentials as ar, disposeMicrovmCodeArtifact as at, renderStudioHtml as b, CfnLocalStateProvider as ba, evaluateCachedLambdaPolicy as bi, pickWebFunctionEndpointLogicalIdFromOrigin as bn, CloudMapRegistry as br, addStartCloudFrontSpecificOptions as bt, startStudioProxy as c, substituteEnvVarsFromState as ca, startApiServer as ci, buildEdgeRequestEvent as cn, buildImageOverrideTag as cr, resolveMicrovmImageTarget as ct, createStudioDispatcher as d, LocalStateSourceError as da, defaultCredentialsLoader as di, httpHeadersToEdge as dn, mergeForService as dr, createLocalStartWebFunctionCommand as dt, resolveHostGatewayExtraHosts as ea, createAuthorizerCache as ei, createS3OriginReader as en, addAwsEndpointOptions as eo, buildEcsImageResolutionContext$1 as er, runHookBody as et, filterStudioCustomResources as f, UNNAMED_WORKLOAD as fa, buildCognitoJwksUrl as fi, CLOUDFRONT_DISTRIBUTION_TYPE as fn, parseImageOverrideFlags as fr, addStartAgentCoreSpecificOptions as ft, annotatePinnedEcsTargets as g, rejectExplicitCfnStackWithMultipleStacks as ga, verifyJwtAuthorizer as gi, pickFunctionUrlLogicalIdFromOrigin as gn, imageOverrideKeyAliases as gr, startAgentCoreHttpServer as gt, annotateEcsTaskPinnedTargets as h, isCfnFlagPresent as ha, verifyCognitoJwt as hi, isCloudFrontDistribution as hn, describePinnedImageUri as hr, selectServeInboundAuth as ht, coerceStopRequest as i, EcsTaskResolutionError as ia, filterRoutesByApiIdentifier as ii, serveFromStaticOrigin as in, resolveEcsAssumeRoleOption as ir, MicrovmResolutionError as it, readRunHookPayload as j, parseSelectionExpressionPath as ja, applyAuthorizerOverlay as ji, createCloudFrontModule as jn, A2A_PATH as jr, startWebFunctionContainer as jt, finalizeMicrovmEnv as k, discoverWebSocketApisOrThrow as ka, matchRoute as ki, runViewerResponse as kn, invokeAgentCoreWs as kr, planWebFunctionContainer as kt, relayServeRequest as l, substituteEnvVarsFromStateAsync as la, resolveSelectionExpression as li, buildEdgeResponseEvent as ln, canonicalizeImageOverrideKeys as lr, s3KeyOfUri as lt, annotateAlbPinnedBackingServices as m, groupWorkloadsRoutedApart as ma, createJwksCache as mi, extractKvsAssociations as mn, runImageOverrideBuilds as mr, buildAgentCoreServeAuthCheck as mt, coerceRunRequest as n, resolveRuntimeFileExtension as na, buildStageMap as ni, startCloudFrontServer as nn, parseMaxTasks as nr, MICROVM_DEFAULT_INGRESS_PORT as nt, resolveServeBaseUrl as o, substituteAgainstState as oa, groupRoutesByServer as oi, applyEdgeRequestResult as on, runEcsServiceEmulator as or, readMicrovmImageConfig as ot, isCustomResourceLambdaTarget as p, createLocalStateProvider as pa, buildJwksUrlFromIssuer as pi, describeS3OriginDomain as pn, resolveImageOverrides as pr, createLocalStartAgentCoreCommand as pt, MAX_RUN_HOOK_PAYLOAD_BYTES as q, deployedFillMayBeSecret as qa, classifySourceChange as qi, serviceStrategy as qn, computeCodeImageTag as qr, webFunctionFidelityWarnings as qt, coerceServeRequest as r, resolveRuntimeImage as ra, availableApiIdentifiers as ri, resolveErrorResponseCandidates as rn, parseRestartPolicy as rr, MICROVM_IMAGE_TYPE as rt, createStudioServeManager as s, substituteAgainstStateAsync as sa, readMtlsMaterialsFromDisk as si, applyEdgeResponseResult as sn, ImageOverrideError as sr, resolveMicrovmCodeArtifact as st, addStudioSpecificOptions as t, resolveRuntimeCodeMountPath as ta, attachStageContext as ti, matchBehavior as tn, awsEndpointOptions as to, ecsClusterOption as tr, waitForAppAnswer as tt, reinvoke as u, materializeLayerFromArn as ua, resolveServiceIntegrationParameters as ui, edgeHeadersToHttp as un, enforceImageOverrideOrphans as ur, addStartWebFunctionSpecificOptions as ut, startStudioServer as v, resolveCfnRegion as va, buildMethodArn as vi, pickLambdaEdgeFunctionLogicalId as vn, listPinnedTargets as vr, startAgentCoreWsBridge as vt, createLocalListCommand as w, resolveSingleTarget as wa, applyCorsResponseHeaders as wi, WEB_FUNCTION_TYPE as wn, getContainerNetworkIp as wr, parseOriginOverrides as wt, createStudioStore as x, collectSsmParameterRefs as xa, invokeRequestAuthorizer as xi, resolveCloudFrontDistribution as xn, DEFAULT_SHADOW_READY_TIMEOUT_MS as xr, createLocalStartCloudFrontCommand as xt, toStudioTargetGroups as y, resolveCfnStackName as ya, computeRequestIdentityHash as yi, pickTargetFunctionLogicalId as yn, buildCloudMapIndex as yr, LocalStartCloudFrontError as yt, MICROVM_CONTROL_PATH as z, AGENTCORE_MCP_PROTOCOL as za, bufferToBody as zi, albStrategy as zn, signAgentCoreInvocation as zr, disposeWebFunctionArtifact as zt };
-//# sourceMappingURL=local-studio-D4E6Wb1V.js.map
+//# sourceMappingURL=local-studio-PpZpeKYn.js.map