cdk-local 0.167.2 → 0.168.1

package/dist/{local-studio-B0Wlk_VO.js → local-studio-QpEYP98G.js}

@@ -5360,17 +5360,38 @@ function resolveWatchConfig() {
 }
 
 // src/local/ssm-parameter-resolver.ts
-const SSM_STRING_TYPE = "AWS::SSM::Parameter::Value<String>";
-const SSM_LIST_TYPE = "AWS::SSM::Parameter::Value<List<String>>";
+const AWS_SPECIFIC_PARAMETER_TYPES = /* @__PURE__ */ new Set([
+	"AWS::EC2::AvailabilityZone::Name",
+	"AWS::EC2::Image::Id",
+	"AWS::EC2::Instance::Id",
+	"AWS::EC2::KeyPair::KeyName",
+	"AWS::EC2::SecurityGroup::GroupName",
+	"AWS::EC2::SecurityGroup::Id",
+	"AWS::EC2::Subnet::Id",
+	"AWS::EC2::Volume::Id",
+	"AWS::EC2::VPC::Id",
+	"AWS::Route53::HostedZone::Id"
+]);
+const SSM_VALUE_PREFIX = "AWS::SSM::Parameter::Value<";
+function classifySsmParameterType(type) {
+	if (typeof type !== "string" || !type.startsWith(SSM_VALUE_PREFIX) || !type.endsWith(">")) return;
+	const inner = type.slice(27, -1);
+	if (inner === "String" || AWS_SPECIFIC_PARAMETER_TYPES.has(inner)) return "scalar";
+	if (inner === "CommaDelimitedList") return "list";
+	if (inner.startsWith("List<") && inner.endsWith(">")) {
+		const member = inner.slice(5, -1);
+		if (member === "String" || AWS_SPECIFIC_PARAMETER_TYPES.has(member)) return "list";
+	}
+}
 function collectSsmParameterRefs(template) {
 	const params = template?.Parameters;
 	if (!params) return [];
 	const out = [];
 	for (const [logicalId, entry] of Object.entries(params)) {
 		if (!entry || typeof entry !== "object") continue;
-		const type = entry.Type;
-		const isList = type === SSM_LIST_TYPE;
-		if (type !== SSM_STRING_TYPE && !isList) continue;
+		const kind = classifySsmParameterType(entry.Type);
+		if (kind === void 0) continue;
+		const isList = kind === "list";
 		const ssmName = entry.Default;
 		if (typeof ssmName !== "string" || ssmName.length === 0) continue;
 		out.push({
@@ -5420,7 +5441,7 @@ async function resolveSsmParameters(client, refs, label) {
 			if (!requesters) continue;
 			const isSecure = p.Type === "SecureString";
 			for (const ref of requesters) {
-				out.values[ref.logicalId] = p.Value;
+				out.values[ref.logicalId] = ref.isList ? p.Value.split(",") : p.Value;
 				if (isSecure) out.secureStringLogicalIds.push(ref.logicalId);
 			}
 		}
@@ -5694,6 +5715,9 @@ function resolveCfnStackName(fromCfnStack, stackName) {
 	if (typeof fromCfnStack === "string") return fromCfnStack;
 	return stackName;
 }
+function deployedStackName(opts, stackName) {
+	return resolveCfnStackName(opts.fromCfnStack ?? false, stackName);
+}
 function isCfnFlagPresent(opts) {
 	const v = opts.fromCfnStack;
 	return v !== void 0 && v !== false;
@@ -6065,6 +6089,10 @@ function resolveRef(arg, context) {
 	};
 	const parameterValue = context.parameters?.[arg];
 	if (parameterValue !== void 0) {
+		if (Array.isArray(parameterValue)) return {
+			kind: "unresolved",
+			reason: `Ref ${displayIdent(arg)}: the parameter is a list, which is not a valid string value (use Fn::Select to pick one element or Fn::Join to join it)`
+		};
 		if (context.sensitiveParameters?.has(arg)) context.onSensitiveParameterConsumed?.(arg);
 		return {
 			kind: "literal",
@@ -6106,9 +6134,15 @@ function resolvePseudoParameter(name, pseudo) {
 				value: pseudo.urlSuffix
 			};
 			break;
+		case "AWS::StackName":
+			if (pseudo.stackName !== void 0) return {
+				kind: "literal",
+				value: pseudo.stackName
+			};
+			break;
 		default: return {
 			kind: "unresolved",
-			reason: `Ref ${displayIdent(name)}: pseudo parameter not supported (supported: AWS::AccountId, AWS::Region, AWS::Partition, AWS::URLSuffix)`
+			reason: `Ref ${displayIdent(name)}: pseudo parameter not supported (supported: AWS::AccountId, AWS::Region, AWS::Partition, AWS::URLSuffix, AWS::StackName)`
 		};
 	}
 	return {
@@ -6219,15 +6253,31 @@ function resolveSub(arg, context) {
 	};
 }
 function resolveJoin(arg, context) {
-	if (!Array.isArray(arg) || arg.length !== 2 || !Array.isArray(arg[1])) return {
+	if (!Array.isArray(arg) || arg.length !== 2) return {
 		kind: "unresolved",
 		reason: `Fn::Join expects [delimiter, [elements]], got ${Array.isArray(arg) ? `array of length ${arg.length}` : typeof arg}`
 	};
-	const [delimiterRaw, elements] = arg;
+	const [delimiterRaw, elementsArg] = arg;
 	if (typeof delimiterRaw !== "string") return {
 		kind: "unresolved",
 		reason: `Fn::Join delimiter must be a string, got ${typeof delimiterRaw}`
 	};
+	if (!Array.isArray(elementsArg)) {
+		const list = resolveAny(elementsArg, context);
+		if (list.kind === "unresolved") return {
+			kind: "unresolved",
+			reason: `Fn::Join list: ${list.reason}`
+		};
+		if (!Array.isArray(list.value)) return {
+			kind: "unresolved",
+			reason: `Fn::Join list must resolve to an array, got ${typeof list.value}`
+		};
+		return {
+			kind: "literal",
+			value: list.value.join(delimiterRaw)
+		};
+	}
+	const elements = elementsArg;
 	const parts = [];
 	for (let i = 0; i < elements.length; i += 1) {
 		const sub = substituteAgainstState(elements[i], context);
@@ -6320,6 +6370,19 @@ function resolveAny(value, context) {
 		};
 	}
 	if (value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === 1 && Object.prototype.hasOwnProperty.call(value, "Fn::Split")) return resolveSplitAsArray(value["Fn::Split"], context);
+	if (value !== null && typeof value === "object" && Object.keys(value).length === 1 && Object.prototype.hasOwnProperty.call(value, "Ref")) {
+		const target = value["Ref"];
+		if (typeof target === "string" && !context.resources[target]) {
+			const parameterValue = context.parameters?.[target];
+			if (Array.isArray(parameterValue)) {
+				if (context.sensitiveParameters?.has(target)) context.onSensitiveParameterConsumed?.(target);
+				return {
+					kind: "literal",
+					value: [...parameterValue]
+				};
+			}
+		}
+	}
 	return substituteAgainstState(value, context);
 }
 async function substituteAgainstStateAsync(value, contextOrResources) {
@@ -10817,7 +10880,7 @@ function envHasCrossStackIntrinsic(templateEnv) {
 	if (!templateEnv) return false;
 	return Object.values(templateEnv).some(containsCrossStackIntrinsic);
 }
-async function resolvePseudoParametersForInvoke(stackRegion, options) {
+async function resolvePseudoParametersForInvoke(stackRegion, options, stackName) {
 	const logger = getLogger();
 	const region = options.region ?? namedEnvAwsRegion() ?? process.env["AWS_DEFAULT_REGION"] ?? regionOrAmbientDefault(stackRegion);
 	if (!region) logger.warn(`Resolver references \${AWS::Region} but ${getEmbedConfig().binaryName} could not determine the target region. Pass --region, set AWS_REGION, or declare env.region on the CDK stack.`);
@@ -10844,7 +10907,8 @@ async function resolvePseudoParametersForInvoke(stackRegion, options) {
 		...partitionAndSuffix && {
 			partition: partitionAndSuffix.partition,
 			urlSuffix: partitionAndSuffix.urlSuffix
-		}
+		},
+		...stackName !== void 0 && { stackName: deployedStackName(options, stackName) }
 	};
 	return Object.keys(bag).length === 0 ? void 0 : bag;
 }
@@ -10961,7 +11025,7 @@ async function resolveLambdaContainerEnvWith(lambda, options, profileCredentials
 				})
 			};
 			if (envHasIntrinsicValue$1(templateEnv)) {
-				const pseudo = await resolvePseudoParametersForInvoke(lambda.stack.region, options);
+				const pseudo = await resolvePseudoParametersForInvoke(lambda.stack.region, options, lambda.stack.stackName);
 				if (pseudo) subContext.pseudoParameters = pseudo;
 			}
 			if (envHasIntrinsicValue$1(templateEnv) && stateProvider.resolveTemplateSsmParameters) {
@@ -17677,7 +17741,7 @@ async function loadStackStateBundle(stack, provider, args) {
 			region: loaded.region
 		};
 		if (args.intrinsicEnv) {
-			const pseudo = args.pseudoParameters ?? await resolvePseudoParametersForStartApi(loaded.region, args.options);
+			const pseudo = args.pseudoParameters ?? await resolvePseudoParametersForStartApi(loaded.region, args.options, stack.stackName);
 			if (pseudo) bundle.pseudoParameters = pseudo;
 		}
 		if (provider.resolveDeployedFunctionEnv) {
@@ -17704,7 +17768,7 @@ async function loadStackStateBundle(stack, provider, args) {
 		provider.dispose();
 	}
 }
-async function resolvePseudoParametersForStartApi(stateRegion, options) {
+async function resolvePseudoParametersForStartApi(stateRegion, options, stackName) {
 	const logger = getLogger();
 	const region = options.region ?? namedEnvAwsRegion() ?? process.env["AWS_DEFAULT_REGION"] ?? regionOrAmbientDefault(stateRegion);
 	let accountId;
@@ -17730,7 +17794,8 @@ async function resolvePseudoParametersForStartApi(stateRegion, options) {
 		...partitionAndSuffix && {
 			partition: partitionAndSuffix.partition,
 			urlSuffix: partitionAndSuffix.urlSuffix
-		}
+		},
+		...stackName !== void 0 && { stackName: deployedStackName(options, stackName) }
 	};
 	return Object.keys(bag).length === 0 ? void 0 : bag;
 }
@@ -18627,7 +18692,7 @@ async function localInvokeAgentCoreCommand(target, options, extraStateProviders)
 				logger.info(`${resolved.protocol} runtime: invoking the local container's ${pathLabel} directly (vanilla ${resolved.protocol}). An inbound JWT / --bearer-token is an AgentCore managed-plane concern and is not applied locally.`);
 			}
 		} else authorization = await resolveInboundAuthorization(resolved, options);
-		await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext);
+		await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext, options);
 		const image = await resolveAgentCoreImage(resolved, options, loadedState, stateProvider);
 		const { env: dockerEnv, sensitiveEnvKeys } = await buildContainerEnv(resolved, options, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext);
 		const hostPort = await pickFreePort();
@@ -18696,7 +18761,7 @@ async function localInvokeAgentCoreCommand(target, options, extraStateProviders)
 						loaded: void 0
 					};
 					const newResolved = resolveAgentCoreTarget(resolvedTarget, newStacks, newImageContext);
-					await resolveFromS3BucketIntrinsic(newResolved, stateProvider, newLoaded, newImageContext);
+					await resolveFromS3BucketIntrinsic(newResolved, stateProvider, newLoaded, newImageContext, options);
 					const newImage = await resolveAgentCoreImage(newResolved, options, newLoaded, stateProvider);
 					const { env: newEnv, sensitiveEnvKeys: newSensitive } = await buildContainerEnv(newResolved, options, profileCredentials, profileCredsFile, stateProvider, newLoaded, newImageContext);
 					if (signal?.aborted) throw new CdkLocalError("Reload cancelled: shutting down.", "LOCAL_INVOKE_AGENTCORE_WATCH_CANCELLED");
@@ -18986,8 +19051,10 @@ async function buildContainerEnvWith(resolved, options, profileCredentials, prof
 				consumer: `AgentCore Runtime ${resolved.logicalId} cross-stack env value`
 			})
 		};
-		const pseudo = imageContext?.pseudoParameters ?? derivePseudoParametersFromRegion(loaded.region);
-		if (pseudo) subContext.pseudoParameters = pseudo;
+		subContext.pseudoParameters = imageContext?.pseudoParameters ?? {
+			...derivePseudoParametersFromRegion(loaded.region),
+			stackName: deployedStackName(options, resolved.stack.stackName)
+		};
 		if (imageContext?.stateParameters) subContext.parameters = imageContext.stateParameters;
 		if (imageContext?.stateSensitiveParameters?.length) subContext.sensitiveParameters = new Set(imageContext.stateSensitiveParameters);
 		const resolver = await stateProvider.buildCrossStackResolver(loaded.region);
@@ -19037,7 +19104,7 @@ async function buildContainerEnvWith(resolved, options, profileCredentials, prof
 		sensitiveEnvKeys
 	};
 }
-async function resolveFromS3BucketIntrinsic(resolved, stateProvider, loaded, imageContext) {
+async function resolveFromS3BucketIntrinsic(resolved, stateProvider, loaded, imageContext, options = {}) {
 	const s3Source = resolved.codeArtifact?.s3Source;
 	if (!s3Source || s3Source.bucketIntrinsic === void 0) return;
 	if (s3Source.bucket !== void 0) return;
@@ -19046,8 +19113,10 @@ async function resolveFromS3BucketIntrinsic(resolved, stateProvider, loaded, ima
 		resources: imageContext?.stateResources ?? loaded.resources,
 		consumerRegion: loaded.region
 	};
-	const pseudo = imageContext?.pseudoParameters ?? derivePseudoParametersFromRegion(loaded.region);
-	if (pseudo) subContext.pseudoParameters = pseudo;
+	subContext.pseudoParameters = imageContext?.pseudoParameters ?? {
+		...derivePseudoParametersFromRegion(loaded.region),
+		stackName: deployedStackName(options, resolved.stack.stackName)
+	};
 	const crossStackResolver = await stateProvider.buildCrossStackResolver(loaded.region);
 	if (crossStackResolver) subContext.crossStackResolver = crossStackResolver;
 	const result = await substituteAgainstStateAsync(s3Source.bucketIntrinsic, subContext);
@@ -19074,8 +19143,10 @@ async function buildAgentCoreImageContext(candidate, stateProvider, options) {
 		logger.warn(`--from-cfn-stack: STS GetCallerIdentity failed: ${describeAwsFailureForWarn(err, "STS GetCallerIdentity")}. A same-stack ECR image URI referencing \${AWS::AccountId} may not resolve.`);
 	}
 	const context = {};
-	const pseudo = derivePseudoParametersFromRegion(region, accountId);
-	if (pseudo) context.pseudoParameters = pseudo;
+	context.pseudoParameters = {
+		...derivePseudoParametersFromRegion(region, accountId),
+		stackName: deployedStackName(options, candidate.stackName)
+	};
 	const loaded = await stateProvider.load(candidate.stackName, candidate.region);
 	if (loaded) {
 		context.stateResources = loaded.resources;
@@ -25233,7 +25304,8 @@ async function buildEcsImageResolutionContext$1(target, stacks, options, statePr
 			...partitionAndSuffix && {
 				partition: partitionAndSuffix.partition,
 				urlSuffix: partitionAndSuffix.urlSuffix
-			}
+			},
+			stackName: deployedStackName(options, candidate.stackName)
 		};
 	}
 	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution || wantsStateForTaskRole;
@@ -25730,7 +25802,8 @@ async function buildEcsImageResolutionContext(candidate, stateProvider, options,
 			...partitionAndSuffix && {
 				partition: partitionAndSuffix.partition,
 				urlSuffix: partitionAndSuffix.urlSuffix
-			}
+			},
+			stackName: deployedStackName(options, candidate.stackName)
 		};
 	}
 	const wantsState = needs.needsStateResources || needs.needsEnvOrSecretSubstitution || wantsStateForTaskRole;
@@ -30396,7 +30469,7 @@ async function serveAgentCore(target, options, extraStateProviders, hostSynthesi
 	const sigv4Context = await resolveAgentCoreSigV4Context(options, resolved, loadedState, stateProvider);
 	const authPlan = selectServeInboundAuth(resolved, options, sigv4Context !== void 0);
 	if (authPlan.authCheck && resolved.jwtAuthorizer) logger.info(`Inbound JWT: each request verified per-request against ${resolved.jwtAuthorizer.discoveryUrl}${options.verifyAuth === false ? " (verification DISABLED via --no-verify-auth)" : ""}.`);
-	await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext);
+	await resolveFromS3BucketIntrinsic(resolved, stateProvider, loadedState, imageContext, options);
 	const image = await resolveAgentCoreImage(resolved, options, loadedState, stateProvider);
 	const { env: dockerEnv, sensitiveEnvKeys } = await buildContainerEnv(resolved, options, profileCredentials, profileCredsFile, stateProvider, loadedState, imageContext);
 	let containerHostPort = await pickFreePort();
@@ -30507,7 +30580,7 @@ async function serveAgentCore(target, options, extraStateProviders, hostSynthesi
 					freshImageContext = ctx.context;
 					freshLoaded = ctx.loaded;
 					freshResolved = resolveAgentCoreTarget(resolvedTarget, freshStacks, freshImageContext);
-					await resolveFromS3BucketIntrinsic(freshResolved, stateProvider, freshLoaded, freshImageContext);
+					await resolveFromS3BucketIntrinsic(freshResolved, stateProvider, freshLoaded, freshImageContext, options);
 					const assetCtx = await loadAgentCoreAssetContext({
 						resolvedTarget,
 						resolved: freshResolved,
@@ -37243,4 +37316,4 @@ function addStudioSpecificOptions(cmd) {
 }
 
 export { postHook as $, AGENTCORE_A2A_PROTOCOL as $a, probeHostGatewaySupport as $i, addImageOverrideOptions as $n, loopbackForwarderPlan as $o, resolveApiTargetSubset as $r, classifyS3Error as $t, microvmFidelityWarnings as A, createLocalStateProvider as Aa, translateLambdaResponse as Ai, stripCloudFrontImport as An, readEnvCallerCredentials as Ao, A2A_CONTAINER_PORT as Ar, readContainerLogTail as At, MICROVM_WS_BASE_PROTOCOL as B, resolveWatchConfig as Ba, ConnectionRegistry as Bi, createLocalStartAlbCommand as Bn, HOST_DEFAULT_CREDENTIALS_MISS_TTL_MS as Bo, AGENTCORE_SESSION_ID_HEADER as Br, parseWebFunctionBuildConfig as Bt, addListSpecificOptions as C, substituteAgainstState as Ca, attachAuthorizers as Ci, WEB_FUNCTION_REVISION_TYPE as Cn, resolveDynamicReferencesInEnv as Co, setShadowReadyTimeoutMs as Cr, parseKvsFileOverrides as Ct, buildMicrovmLambdaView as D, materializeLayerFromArn as Da, isFunctionUrlOacFronted as Di, compileCloudFrontFunction as Dn, SECOND_ASSUME_MESSAGE as Do, createLocalInvokeAgentCoreCommand as Dr, WEB_FUNCTION_CONTAINER_PORT as Dt, addStartMicrovmSpecificOptions as E, substituteEnvVarsFromStateAsync as Ea, buildCorsConfigFromCloudFrontChain as Ei, resolveWebFunctionTarget as En, awsEndpointOptions as Eo, addInvokeAgentCoreSpecificOptions as Er, RecentOutput as Et, microvmImageTag as F, resolveCfnRegion as Fa, pickResponseTemplate as Fi, findFileAssetForObjectKey as Fn, AUTH_OFF_PLACEHOLDER_CREDENTIALS as Fo, MCP_PROTOCOL_VERSION as Fr, buildNodeEntryFileStart as Ft, startMicrovmFrontDoor as G, discoverWebSocketApis as Ga, buildDisconnectEvent as Gi, addStartServiceSpecificOptions as Gn, collectHostEndpointOverrides as Go, SUPPORTED_CODE_RUNTIMES as Gr, readWebFunctionServiceConfig as Gt, PROXY_PORT_HEADER as H, countTargets as Ha, handleConnectionsRequest as Hi, resolveAlbTarget as Hn, applyWorkloadAwsWiringToEnv as Ho, waitForAgentCoreHttpReady as Hr, WEB_FUNCTION_HTTP_ENDPOINT_ENV as Ht, planMicrovmPorts as I, resolveCfnStackName as Ia, selectIntegrationResponse as Ii, isBucketDeploymentResource as In, CA_TRUST_ENV_KEYS as Io, mcpInvokeOnce as Ir, defaultWebFunctionPlatform as It, MICROVM_HOOK_PATH_PREFIX as J, parseSelectionExpressionPath as Ja, createFileWatcher as Ji, addRunTaskSpecificOptions as Jn, getActiveWorkloadAwsWiring as Jo, renderCodeDockerfile as Jr, idFromArn as Jt, stripMicrovmProxyHeaders as K, discoverWebSocketApisOrThrow as Ka, buildMessageEvent as Ki, createLocalStartServiceCommand as Kn, displayEndpointValue as Ko, buildAgentCoreCodeImage as Kr, webFunctionAssumeRole as Kt, readExposedPorts as L, CfnLocalStateProvider as La, tryParseStatus as Li, resolveBucketDeploymentObjectKey as Ln, DEFAULT_AWS_EMULATOR_URL as Lo, parseSseForJsonRpc as Lr, resolveWebFunctionRuntime as Lt, DEFAULT_TERMINATE_HOOK_TIMEOUT_MS as M, isCfnFlagPresent as Ma, buildHttpApiV2Event as Mi, createLocalFileKvsDataSource as Mn, resetWorkloadIdentity as Mo, a2aInvokeOnce as Mr, waitForWebFunctionReady as Mt, LocalMicrovm as N, rejectExplicitCfnStackWithMultipleStacks as Na, buildRestV1Event as Ni, createUnboundCloudFrontModule as Nn, workloadClientConfig as No, MCP_CONTAINER_PORT as Nr, watchContainerExit as Nt, createLocalStartMicrovmCommand as O, LocalStateSourceError as Oa, matchPreflight as Oi, runViewerRequest as On, assumedRoleRecorded as Oo, bridgeAgentCoreWs as Or, containerFailure as Ot, buildMicrovmImage as P, resolveCfnFallbackRegion as Pa, evaluateResponseParameters as Pi, bucketDeploymentSourceObjectKeys as Pn, workloadStsClientConfig as Po, MCP_PATH as Pr, WEB_FUNCTION_RUNTIMES as Pt, pollBuildHook as Q, resolveLambdaArnIntrinsic as Qa, HOST_GATEWAY_MIN_VERSION as Qi, addEcsAssumeRoleOptions as Qn, logMixedModeForWorkload as Qo, createWatchPredicates as Qr, resolveDeployedOriginBucket as Qt, setContainerPaused as R, collectSsmParameterRefs as Ra, VtlEvaluationError as Ri, addAlbSpecificOptions as Rn, EMULATOR_SCRUBBED_ENV_KEYS as Ro, AGENTCORE_SIGV4_SERVICE as Rr, supportedWebFunctionRuntimes as Rt, StudioEventBus as S, containsCrossStackIntrinsic as Sa, invokeTokenAuthorizer as Si, WEB_FUNCTION_ENDPOINT_TYPE as Sn, parseDynamicReference as So, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Sr, normalizeKvsFileKeys as St, formatTargetListing as T, substituteEnvVarsFromState as Ta, buildCorsConfigByApiId as Ti, WebFunctionResolutionError as Tn, addAwsEndpointOptions as To, attachContainerLogStreamer as Tr, resolveCloudFrontTarget as Tt, rewriteUpgradeResponseHead as U, listTargets as Ua, parseConnectionsPath as Ui, isApplicationLoadBalancer as Un, awsEmulatorEnvName as Uo, waitForAgentCorePing as Ur, buildWebFunctionLambdaView as Ut, MicrovmStateError as V, resolveSingleTarget as Va, buildMgmtEndpointEnvUrl as Vi, parseLbPortOverrides as Vn, activateWorkloadAwsWiring as Vo, invokeAgentCore as Vr, resolveWebFunctionArtifact as Vt, selectTargetPort as W, availableWebSocketApiIdentifiers as Wa, buildConnectEvent as Wi, resolveAlbFrontDoor as Wn, awsEmulatorSqsHostBlocks as Wo, downloadAndExtractS3Bundle as Wr, finalizeWebFunctionEnv as Wt, callRuntimeHook as X, discoverRoutes as Xa, createLocalInvokeCommand as Xi, MAX_TASKS_SUBNET_RANGE_CAP as Xn, getContainerJavaTruststorePath as Xo, addStartApiSpecificOptions as Xr, createDeployedKvsDataSource as Xt, MicrovmHookError as Y, webSocketApiMatchesIdentifier as Ya, addInvokeSpecificOptions as Yi, createLocalRunTaskCommand as Yn, getContainerCaBundlePath as Yo, toCmdArgv as Yr, resolveKvsModulesForDistribution as Yt, generateMicrovmId as Z, pickRefLogicalId as Za, HOST_DOCKER_INTERNAL_GATEWAY as Zi, addCommonEcsServiceOptions as Zn, javaTruststoreToolOptions as Zo, createLocalStartApiCommand as Zr, resolveDeployedKvsArnByName as Zt, filterStudioTargetGroups as _, resolveRuntimeFileExtension as _a, verifyJwtViaDiscovery as _i, pickKvsLogicalIdFromArn as _n, containsDynamicReference as _o, isLocalCdkAssetImage as _r, sqsEmulatorOriginOf as _s, attachAgentCoreWsBridge as _t, createLocalStudioCommand as a, buildLoopbackForwarderDockerArgs as aa, filterRoutesByApiIdentifiers as ai, serveLambdaUrlOrigin as an, pickAgentCoreCandidateStack as ao, resolveSharedSidecarCredentials as ar, resolveAwsEmulatorOption as as, disposeMicrovmCodeArtifact as at, renderStudioHtml as b, assertEcsTaskCommandsResolved as ba, evaluateCachedLambdaPolicy as bi, pickWebFunctionEndpointLogicalIdFromOrigin as bn, keysNotFromTemplate as bo, CloudMapRegistry as br, buildStsClientConfig as bs, addStartCloudFrontSpecificOptions as bt, startStudioProxy as c, ensureForwarderImage as ca, startApiServer as ci, buildEdgeRequestEvent as cn, formatStateRemedy as co, buildImageOverrideTag as cr, setActiveWorkloadAwsWiring as cs, resolveMicrovmImageTarget as ct, createStudioDispatcher as d, buildContainerImage as da, defaultCredentialsLoader as di, httpHeadersToEdge as dn, LocalInvokeBuildError as do, mergeForService as dr, MIXED_MODE_RESIGN_BODY_CAP_BYTES as ds, createLocalStartWebFunctionCommand as dt, resolveHostGatewayExtraHosts as ea, createAuthorizerCache as ei, createS3OriginReader as en, AGENTCORE_AGUI_PROTOCOL as eo, buildEcsImageResolutionContext$1 as er, mergeJavaToolOptions as es, runHookBody as et, filterStudioCustomResources as f, dockerRegistryEnv as fa, buildCognitoJwksUrl as fi, CLOUDFRONT_DISTRIBUTION_TYPE as fn, ambientDefaultRegion as fo, parseImageOverrideFlags as fr, REAL_SQS_QUEUE_URL as fs, addStartAgentCoreSpecificOptions as ft, annotatePinnedEcsTargets as g, resolveRuntimeCodeMountPath as ga, verifyJwtAuthorizer as gi, pickFunctionUrlLogicalIdFromOrigin as gn, DynamicReferenceResolver as go, imageOverrideKeyAliases as gr, rewriteSqsQueueUrlsInEnv as gs, startAgentCoreHttpServer as gt, annotateEcsTaskPinnedTargets as h, stripEcrCredentials as ha, verifyCognitoJwt as hi, isCloudFrontDistribution as hn, DynamicReferenceResolutionError as ho, describePinnedImageUri as hr, repointLocalSqsQueueUrlsInEnv as hs, selectServeInboundAuth as ht, coerceStopRequest as i, awaitLoopbackForwarderStatus as ia, filterRoutesByApiIdentifier as ii, serveFromStaticOrigin as in, AgentCoreResolutionError as io, resolveEcsAssumeRoleOption as ir, readProfileEndpointSettings as is, MicrovmResolutionError as it, readRunHookPayload as j, groupWorkloadsRoutedApart as ja, applyAuthorizerOverlay as ji, createCloudFrontModule as jn, recordAssumedRole as jo, A2A_PATH as jr, startWebFunctionContainer as jt, finalizeMicrovmEnv as k, UNNAMED_WORKLOAD as ka, matchRoute as ki, runViewerResponse as kn, deployAccountStsClientConfig as ko, invokeAgentCoreWs as kr, planWebFunctionContainer as kt, relayServeRequest as l, startLoopbackForwarder as la, resolveSelectionExpression as li, buildEdgeResponseEvent as ln, substituteImagePlaceholders as lo, canonicalizeImageOverrideKeys as lr, takeAwsEmulatorStateSourceHint as ls, s3KeyOfUri as lt, annotateAlbPinnedBackingServices as m, noImplicitEcrPullArgs as ma, createJwksCache as mi, extractKvsAssociations as mn, setAmbientDefaultRegion as mo, runImageOverrideBuilds as mr, realSqsHostnames as ms, buildAgentCoreServeAuthCheck as mt, coerceRunRequest as n, withWorkloadAwsWiring as na, buildStageMap as ni, startCloudFrontServer as nn, AGENTCORE_MCP_PROTOCOL as no, parseMaxTasks as nr, probeAwsEmulatorHealth as ns, MICROVM_DEFAULT_INGRESS_PORT as nt, resolveServeBaseUrl as o, buildNamespaceOwnerForwarderDockerArgs as oa, groupRoutesByServer as oi, applyEdgeRequestResult as on, resolveAgentCoreTarget as oo, runEcsServiceEmulator as or, resolveHostDefaultCredentials as os, readMicrovmImageConfig as ot, isCustomResourceLambdaTarget as p, isEcrRegistryConfigKey as pa, buildJwksUrlFromIssuer as pi, describeS3OriginDomain as pn, namedEnvAwsRegion as po, resolveImageOverrides as pr, isRealAwsHost as ps, createLocalStartAgentCoreCommand as pt, MAX_RUN_HOOK_PAYLOAD_BYTES as q, filterWebSocketApisByIdentifiers as qa, classifySourceChange as qi, serviceStrategy as qn, effectiveLoopbackPorts as qo, computeCodeImageTag as qr, webFunctionFidelityWarnings as qt, coerceServeRequest as r, LOOPBACK_FORWARDER_IMAGE as ra, availableApiIdentifiers as ri, resolveErrorResponseCandidates as rn, AGENTCORE_RUNTIME_TYPE as ro, parseRestartPolicy as rr, readEmulatorRunFiles as rs, MICROVM_IMAGE_TYPE as rt, createStudioServeManager as s, describeForwarderFailure as sa, readMtlsMaterialsFromDisk as si, applyEdgeResponseResult as sn, derivePseudoParametersFromRegion as so, ImageOverrideError as sr, resolveWorkloadAwsWiring as ss, resolveMicrovmCodeArtifact as st, addStudioSpecificOptions as t, attachLoopbackForwarder as ta, attachStageContext as ti, matchBehavior as tn, AGENTCORE_HTTP_PROTOCOL as to, ecsClusterOption as tr, parseAwsEndpoint as ts, waitForAppAnswer as tt, reinvoke as u, architectureToPlatform as ua, resolveServiceIntegrationParameters as ui, edgeHeadersToHttp as un, tryResolveImageFnJoin as uo, enforceImageOverrideOrphans as ur, writeCaBundleFile as us, addStartWebFunctionSpecificOptions as ut, startStudioServer as v, resolveRuntimeImage as va, buildMethodArn as vi, pickLambdaEdgeFunctionLogicalId as vn, deployedFillMayBeSecret as vo, listPinnedTargets as vr, buildJavaTrustStore as vs, startAgentCoreWsBridge as vt, createLocalListCommand as w, substituteAgainstStateAsync as wa, applyCorsResponseHeaders as wi, WEB_FUNCTION_TYPE as wn, withoutKeys as wo, getContainerNetworkIp as wr, parseOriginOverrides as wt, createStudioStore as x, assertEcsTaskImagesResolvable as xa, invokeRequestAuthorizer as xi, resolveCloudFrontDistribution as xn, keysOverriddenBy as xo, DEFAULT_SHADOW_READY_TIMEOUT_MS as xr, resolveProfileCredentials as xs, createLocalStartCloudFrontCommand as xt, toStudioTargetGroups as y, EcsTaskResolutionError as ya, computeRequestIdentityHash as yi, pickTargetFunctionLogicalId as yn, firstUsableRegion as yo, buildCloudMapIndex as yr, createMixedModeTlsMaterials as ys, LocalStartCloudFrontError as yt, MICROVM_CONTROL_PATH as z, resolveSsmParameters as za, bufferToBody as zi, albStrategy as zn, HOST_CA_TRUST_ENV_KEYS as zo, signAgentCoreInvocation as zr, disposeWebFunctionArtifact as zt };
-//# sourceMappingURL=local-studio-B0Wlk_VO.js.map
+//# sourceMappingURL=local-studio-QpEYP98G.js.map