cdk-local 0.31.0 → 0.32.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -1,10 +1,10 @@
1
1
  #!/usr/bin/env node
2
- import { $ as createLocalInvokeCommand, c as createLocalStartApiCommand, r as createLocalStartServiceCommand, s as createLocalRunTaskCommand, t as createLocalListCommand } from "./local-list-DHtTSGOt.js";
2
+ import { c as createLocalStartApiCommand, it as createLocalInvokeCommand, r as createLocalStartServiceCommand, s as createLocalRunTaskCommand, t as createLocalListCommand } from "./local-list-DdmjsVLF.js";
3
3
  import { Command } from "commander";
4
4
 
5
5
  //#region src/cli/index.ts
6
6
  const program = new Command();
7
- program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.31.0");
7
+ program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.32.0");
8
8
  program.addCommand(createLocalInvokeCommand());
9
9
  program.addCommand(createLocalStartApiCommand());
10
10
  program.addCommand(createLocalRunTaskCommand());
@@ -24,7 +24,9 @@ const DEFAULTS = {
24
24
  productName: "cdk-local",
25
25
  resourceNamePrefix: "cdkl",
26
26
  awsBindMountPath: "/cdk-local-aws",
27
- envPrefix: "CDKL"
27
+ envPrefix: "CDKL",
28
+ sigV4StrictByDefault: false,
29
+ sigV4OptFlag: "--strict-sigv4"
28
30
  };
29
31
  let current = DEFAULTS;
30
32
  /**
@@ -40,7 +42,9 @@ function setEmbedConfig(config) {
40
42
  productName: config?.productName ?? DEFAULTS.productName,
41
43
  resourceNamePrefix: config?.resourceNamePrefix ?? DEFAULTS.resourceNamePrefix,
42
44
  awsBindMountPath: config?.awsBindMountPath ?? DEFAULTS.awsBindMountPath,
43
- envPrefix: config?.envPrefix ?? DEFAULTS.envPrefix
45
+ envPrefix: config?.envPrefix ?? DEFAULTS.envPrefix,
46
+ sigV4StrictByDefault: config?.sigV4StrictByDefault ?? DEFAULTS.sigV4StrictByDefault,
47
+ sigV4OptFlag: config?.sigV4OptFlag ?? DEFAULTS.sigV4OptFlag
44
48
  };
45
49
  }
46
50
  /** The active resolved embed config. */
@@ -386,4 +390,4 @@ function mergeEnv(overrides) {
386
390
 
387
391
  //#endregion
388
392
  export { runDockerStreaming as a, getEmbedConfig as c, runDockerForeground as i, resetEmbedConfig as l, formatDockerLoginError as n, spawnStreaming as o, getDockerCmd as r, getLogger as s, docker_cmd_exports as t, setEmbedConfig as u };
389
- //# sourceMappingURL=docker-cmd-DvoehoBl.js.map
393
+ //# sourceMappingURL=docker-cmd--8TRSn9z.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"docker-cmd--8TRSn9z.js","names":[],"sources":["../src/local/embed-config.ts","../src/utils/logger.ts","../src/utils/docker-cmd.ts"],"sourcesContent":["/**\n * Embed-time branding configuration.\n *\n * cdk-local hardcodes its own branding (`cdkl` binary, `cdk-local`\n * product name, `cdkl-*` Docker / AWS resource names, `/cdk-local-aws`\n * credential bind-mount) into user-visible error messages and resource\n * identifiers. A host that embeds cdk-local's Commander factories (e.g.\n * cdkd, whose binary is `cdkd` and whose subcommand group is\n * `cdkd local`) passes a {@link CdkLocalEmbedConfig} so those strings\n * read in the host's own branding instead.\n *\n * The four command factories call {@link setEmbedConfig} before building\n * their Commander option tree, so both construction-time strings (option\n * descriptions / defaults) and action-time strings (errors, resource\n * names) read the resolved config via {@link getEmbedConfig}. When no\n * config is supplied every field falls back to cdk-local's own defaults,\n * leaving native `cdkl` behavior byte-identical.\n */\nexport interface CdkLocalEmbedConfig {\n /**\n * Command prefix for subcommand references in user-facing strings, e.g.\n * `${cliName} invoke` / `${cliName} start-api`. Default `'cdkl'`; cdkd\n * passes `'cdkd local'`.\n */\n cliName?: string;\n /**\n * Bare executable / process name for standalone references, e.g.\n * `${binaryName} is exiting` / `${binaryName} could not determine ...`,\n * the local request id, and the hyphen-free Cognito user-pool\n * placeholder id. Default `'cdkl'`; cdkd passes `'cdkd'`.\n */\n binaryName?: string;\n /**\n * Product name for prose references, e.g. `${productName} supports ...`.\n * Also seeds the profile-credentials tmpdir prefix. Default\n * `'cdk-local'`; cdkd passes `'cdkd'`.\n */\n productName?: string;\n /**\n * Prefix for generated Docker / AWS resource identifiers — container,\n * volume, network, image-tag, tmpdir names, STS `RoleSessionName`s, and\n * the example Cloud Map namespace. Default `'cdkl'`; cdkd passes\n * `'cdkd-local'`.\n */\n resourceNamePrefix?: string;\n /**\n * Container directory the host AWS shared-credentials file is\n * bind-mounted under. Default `'/cdk-local-aws'`; cdkd passes\n * `'/cdkd-aws'`.\n */\n awsBindMountPath?: string;\n /**\n * Prefix for the environment variables this CLI reads — `${envPrefix}_APP`\n * (the `--app` fallback) and `${envPrefix}_ROLE_ARN` (the `--role-arn`\n * fallback). Default `'CDKL'`; cdkd passes `'CDKD'`.\n */\n envPrefix?: string;\n /**\n * Whether this host fails-closed by default on unverifiable AWS_IAM SigV4\n * requests. cdk-local's default is warn-and-pass (`false`); a host like\n * cdkd that ships fail-closed-by-default passes `true`. Drives the polarity\n * of the SigV4 warn-message advice (whether the strictness flag reads as an\n * opt-IN or opt-OUT). Default `false`.\n */\n sigV4StrictByDefault?: boolean;\n /**\n * The CLI flag a user toggles to change SigV4 strictness. With\n * `sigV4StrictByDefault: false` it is an opt-IN flag (`'--strict-sigv4'`,\n * the default); with `sigV4StrictByDefault: true` it is the host's opt-OUT\n * flag (cdkd passes `'--allow-unverified-sigv4'`). Default `'--strict-sigv4'`.\n */\n sigV4OptFlag?: string;\n}\n\nexport interface ResolvedEmbedConfig {\n cliName: string;\n binaryName: string;\n productName: string;\n resourceNamePrefix: string;\n awsBindMountPath: string;\n envPrefix: string;\n sigV4StrictByDefault: boolean;\n sigV4OptFlag: string;\n}\n\nconst DEFAULTS: ResolvedEmbedConfig = {\n cliName: 'cdkl',\n binaryName: 'cdkl',\n productName: 'cdk-local',\n resourceNamePrefix: 'cdkl',\n awsBindMountPath: '/cdk-local-aws',\n envPrefix: 'CDKL',\n sigV4StrictByDefault: false,\n sigV4OptFlag: '--strict-sigv4',\n};\n\nlet current: ResolvedEmbedConfig = DEFAULTS;\n\n/**\n * Resolve and install the active embed config. Called once per command\n * factory with the host's overrides (or `undefined` for native cdkl\n * behavior). Idempotent: re-calling with the same overrides is a no-op,\n * which is why all four factories may safely set the same config.\n */\nexport function setEmbedConfig(config?: CdkLocalEmbedConfig): void {\n current = {\n cliName: config?.cliName ?? DEFAULTS.cliName,\n binaryName: config?.binaryName ?? DEFAULTS.binaryName,\n productName: config?.productName ?? DEFAULTS.productName,\n resourceNamePrefix: config?.resourceNamePrefix ?? DEFAULTS.resourceNamePrefix,\n awsBindMountPath: config?.awsBindMountPath ?? DEFAULTS.awsBindMountPath,\n envPrefix: config?.envPrefix ?? DEFAULTS.envPrefix,\n sigV4StrictByDefault: config?.sigV4StrictByDefault ?? DEFAULTS.sigV4StrictByDefault,\n sigV4OptFlag: config?.sigV4OptFlag ?? DEFAULTS.sigV4OptFlag,\n };\n}\n\n/** The active resolved embed config. */\nexport function getEmbedConfig(): ResolvedEmbedConfig {\n return current;\n}\n\n/** Restore cdk-local defaults. Primarily a test-isolation helper. */\nexport function resetEmbedConfig(): void {\n current = DEFAULTS;\n}\n","/**\n * Logger interface and console implementation for cdk-local.\n *\n * API-compatible with cdkd's logger (same `Logger` / `LogLevel` shape, same\n * `getLogger()` / `setLogger()` exports, same `ConsoleLogger` class with\n * `child(prefix)`). The cdk-local variant drops cdkd's multi-stack output\n * buffer (`stack-context`) and live progress renderer (`live-renderer`)\n * because cdk-local invokes a single Lambda / API / task at a time — there\n * is no parallel multi-stack output to interleave.\n */\n\nexport type LogLevel = 'debug' | 'info' | 'warn' | 'error';\n\nexport interface Logger {\n debug(message: string, ...args: unknown[]): void;\n info(message: string, ...args: unknown[]): void;\n warn(message: string, ...args: unknown[]): void;\n error(message: string, ...args: unknown[]): void;\n setLevel(level: LogLevel): void;\n getLevel(): LogLevel;\n child(prefix: string): Logger;\n}\n\n/**\n * ANSI color codes\n *\n * Kept internal — `ConsoleLogger.formatMessage` references these for the\n * verbose/compact mode level prefixes.\n */\nconst colors = {\n reset: '\\x1b[0m',\n bright: '\\x1b[1m',\n dim: '\\x1b[2m',\n red: '\\x1b[31m',\n green: '\\x1b[32m',\n yellow: '\\x1b[33m',\n blue: '\\x1b[34m',\n cyan: '\\x1b[36m',\n gray: '\\x1b[90m',\n} as const;\n\nfunction formatTimestamp(): string {\n const now = new Date();\n return now.toISOString();\n}\n\n/**\n * Console logger implementation\n *\n * Supports two output modes:\n * - verbose (debug level): timestamps, module prefixes, all details\n * - compact (info level): clean output without timestamps or prefixes\n */\nexport class ConsoleLogger implements Logger {\n private level: LogLevel;\n private useColors: boolean;\n\n constructor(level: LogLevel = 'info', useColors: boolean = true) {\n this.level = level;\n this.useColors = useColors;\n }\n\n private shouldLog(level: LogLevel): boolean {\n const levels: LogLevel[] = ['debug', 'info', 'warn', 'error'];\n const currentLevelIndex = levels.indexOf(this.level);\n const messageLevelIndex = levels.indexOf(level);\n return messageLevelIndex >= currentLevelIndex;\n }\n\n private formatMessage(level: LogLevel, message: string, ...args: unknown[]): string {\n const formattedArgs = args.length > 0 ? ' ' + args.map((a) => JSON.stringify(a)).join(' ') : '';\n\n if (this.level === 'debug') {\n const timestamp = formatTimestamp();\n const levelStr = level.toUpperCase().padEnd(5);\n\n if (this.useColors) {\n const levelColorMap: Record<LogLevel, string> = {\n debug: colors.gray,\n info: colors.blue,\n warn: colors.yellow,\n error: colors.red,\n };\n const levelColor = levelColorMap[level];\n\n return `${colors.dim}${timestamp}${colors.reset} ${levelColor}${levelStr}${colors.reset} ${message}${formattedArgs}`;\n }\n\n return `${timestamp} ${levelStr} ${message}${formattedArgs}`;\n }\n\n if (this.useColors) {\n if (level === 'error') {\n return `${colors.red}${message}${formattedArgs}${colors.reset}`;\n }\n if (level === 'warn') {\n return `${colors.yellow}${message}${formattedArgs}${colors.reset}`;\n }\n return `${message}${formattedArgs}`;\n }\n\n return `${message}${formattedArgs}`;\n }\n\n private emit(level: LogLevel, formatted: string): void {\n if (level === 'error') console.error(formatted);\n else if (level === 'warn') console.warn(formatted);\n else if (level === 'info') console.info(formatted);\n else console.debug(formatted);\n }\n\n debug(message: string, ...args: unknown[]): void {\n if (this.shouldLog('debug')) {\n this.emit('debug', this.formatMessage('debug', message, ...args));\n }\n }\n\n info(message: string, ...args: unknown[]): void {\n if (this.shouldLog('info')) {\n this.emit('info', this.formatMessage('info', message, ...args));\n }\n }\n\n warn(message: string, ...args: unknown[]): void {\n if (this.shouldLog('warn')) {\n this.emit('warn', this.formatMessage('warn', message, ...args));\n }\n }\n\n error(message: string, ...args: unknown[]): void {\n if (this.shouldLog('error')) {\n this.emit('error', this.formatMessage('error', message, ...args));\n }\n }\n\n setLevel(level: LogLevel): void {\n this.level = level;\n }\n\n getLevel(): LogLevel {\n return this.level;\n }\n\n child(prefix: string): ChildLogger {\n return new ChildLogger(prefix, this.useColors);\n }\n}\n\n/**\n * Child logger that always syncs level from global logger\n */\nclass ChildLogger extends ConsoleLogger {\n private readonly prefix: string;\n\n constructor(prefix: string, useColors: boolean) {\n super('info', useColors);\n this.prefix = prefix;\n }\n\n private syncLevel(): void {\n if (globalLogger) {\n this.setLevel(globalLogger.getLevel());\n }\n }\n\n override debug(message: string, ...args: unknown[]): void {\n this.syncLevel();\n super.debug(`[${this.prefix}] ${message}`, ...args);\n }\n\n override info(message: string, ...args: unknown[]): void {\n this.syncLevel();\n const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n super.info(msg, ...args);\n }\n\n override warn(message: string, ...args: unknown[]): void {\n this.syncLevel();\n const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n super.warn(msg, ...args);\n }\n\n override error(message: string, ...args: unknown[]): void {\n this.syncLevel();\n const msg = this.getLevel() === 'debug' ? `[${this.prefix}] ${message}` : message;\n super.error(msg, ...args);\n }\n}\n\nlet globalLogger: ConsoleLogger | null = null;\n\nexport function getLogger(): ConsoleLogger {\n if (!globalLogger) {\n globalLogger = new ConsoleLogger();\n }\n return globalLogger;\n}\n\nexport function setLogger(logger: ConsoleLogger): void {\n globalLogger = logger;\n}\n","import { spawn } from 'node:child_process';\nimport { getLogger } from './logger.js';\nimport { getEmbedConfig } from '../local/embed-config.js';\n\n/**\n * Shared helpers for invoking the docker-compatible CLI binary across cdk-local.\n *\n * Two parity decisions with `aws-cdk-cli`'s `cdk-assets-lib`:\n * 1. `CDK_DOCKER` env var swaps the binary so podman / finch users can\n * run cdk-local without code changes (`CDK_DOCKER=podman cdkd deploy`).\n * 2. `runDockerStreaming` uses streaming spawn rather than `execFile`'s\n * buffered `maxBuffer` ceiling. BuildKit's progress output can run to\n * tens of MB on multi-stage builds with `# syntax=docker/dockerfile:1`\n * frontend downloads + heredoc / `RUN --mount=...` features; the 50 MB\n * `execFile` ceiling cdk-local used to set silently killed those builds\n * with `ERR_CHILD_PROCESS_STDIO_MAXBUFFER`.\n *\n * Output handling: stdout/stderr are collected in memory unconditionally so\n * `runDockerStreaming` can return them to the caller for error wrapping.\n * When the logger is at debug level (i.e. the user passed `--verbose`),\n * the chunks are ALSO mirrored to `process.stdout` / `process.stderr` so\n * the user sees live build progress.\n */\n\n/**\n * Return the docker-compatible CLI binary to invoke. Matches CDK CLI:\n * `CDK_DOCKER` env var overrides the default `docker` so users on\n * podman / finch / nerdctl can swap without changing cdk-local code.\n */\nexport function getDockerCmd(): string {\n const override = process.env['CDK_DOCKER'];\n return override && override.length > 0 ? override : 'docker';\n}\n\nexport interface SpawnResult {\n stdout: string;\n stderr: string;\n}\n\nexport interface SpawnError extends Error {\n /** Captured stderr at the time of failure. */\n stderr: string;\n /** Captured stdout at the time of failure. */\n stdout: string;\n /** Process exit code (null when the process was killed by signal). */\n exitCode: number | null;\n}\n\nexport interface RunDockerOptions {\n /** Optional working directory for the subprocess. */\n cwd?: string;\n /**\n * Additional environment variables to set. Merged on top of `process.env`\n * (so the user's `DOCKER_BUILDKIT=1` and friends propagate through).\n */\n env?: Record<string, string | undefined>;\n /** When set, written to stdin (used by `docker login --password-stdin`). */\n input?: string;\n /**\n * When true, mirror stdout/stderr chunks to `process.stdout` / `process.stderr`\n * as they arrive. Useful for `docker pull` / `docker build` where live\n * progress is desirable. Defaults to \"true when the logger is at debug\n * level\" — matches the existing `--verbose` UX.\n */\n streamLive?: boolean;\n}\n\n/**\n * Spawn a docker-compatible CLI binary (resolved via `getDockerCmd`) with\n * streaming I/O. Collects stdout/stderr in memory and resolves with both\n * on exit code 0; rejects with a `SpawnError` carrying both streams on any\n * non-zero exit so the caller can wrap with its own error class without\n * losing the upstream output.\n *\n * No `maxBuffer` ceiling: BuildKit progress output frequently exceeds the\n * `child_process.execFile` default of 1 MB (cdk-local previously bumped to 50 MB\n * but BuildKit + frontend pulls can still exceed that on first-time builds).\n */\nexport async function runDockerStreaming(\n args: string[],\n options: RunDockerOptions = {}\n): Promise<SpawnResult> {\n return spawnStreaming(getDockerCmd(), args, options);\n}\n\n/**\n * Generic streaming spawn — used by `runDockerStreaming` AND by the\n * `executable` source mode in `docker-build.ts` (which runs an arbitrary\n * user-supplied build command, not docker).\n */\nexport async function spawnStreaming(\n cmd: string,\n args: string[],\n options: RunDockerOptions = {}\n): Promise<SpawnResult> {\n const streamLive = options.streamLive ?? getLogger().getLevel() === 'debug';\n const env = options.env ? mergeEnv(options.env) : undefined;\n\n return new Promise<SpawnResult>((resolve, reject) => {\n const child = spawn(cmd, args, {\n cwd: options.cwd,\n env,\n stdio: [options.input ? 'pipe' : 'ignore', 'pipe', 'pipe'],\n });\n\n const stdoutChunks: Buffer[] = [];\n const stderrChunks: Buffer[] = [];\n\n child.stdout!.on('data', (chunk: Buffer) => {\n stdoutChunks.push(chunk);\n if (streamLive) process.stdout.write(chunk);\n });\n child.stderr!.on('data', (chunk: Buffer) => {\n stderrChunks.push(chunk);\n if (streamLive) process.stderr.write(chunk);\n });\n\n child.once('error', (err: NodeJS.ErrnoException) => {\n if (err.code === 'ENOENT') {\n const usingOverride = process.env['CDK_DOCKER'] === cmd && cmd !== 'docker';\n reject(\n new Error(\n usingOverride\n ? `Failed to find and execute '${cmd}' (resolved via CDK_DOCKER). ` +\n `Install '${cmd}' or unset CDK_DOCKER to fall back to 'docker'.`\n : `Failed to find and execute '${cmd}'. Install Docker (or set the ` +\n `'CDK_DOCKER' environment variable to a compatible binary such as podman / finch).`\n )\n );\n } else {\n reject(err);\n }\n });\n\n child.once('close', (code) => {\n const stdout = Buffer.concat(stdoutChunks).toString('utf-8');\n const stderr = Buffer.concat(stderrChunks).toString('utf-8');\n if (code === 0) {\n resolve({ stdout, stderr });\n } else {\n const message =\n stderr.trim() || stdout.trim() || `${cmd} ${args[0] ?? ''} exited with code ${code}`;\n const err = new Error(message) as SpawnError;\n err.stderr = stderr;\n err.stdout = stdout;\n err.exitCode = code;\n reject(err);\n }\n });\n\n if (options.input !== undefined) {\n // Defensive: when spawn() fails (e.g. ENOENT race), the synchronous\n // write below could emit a stream 'error' event before the close /\n // error handlers above fire. Without a listener, Node escalates that\n // to \"Unhandled 'error' event\" on some versions. cdk-local's only `input`\n // call site is `docker login --password-stdin` with short payloads\n // that complete well within the syscall, so this is unlikely to fire\n // in practice — but the no-op listener is free.\n child.stdin!.on('error', () => {\n /* surfaced via the outer error/close handlers above */\n });\n child.stdin!.write(options.input);\n child.stdin!.end();\n }\n });\n}\n\n/**\n * Spawn a docker-compatible CLI binary (resolved via `getDockerCmd`) attached\n * to the parent process's stdio so the user sees live output (`docker pull`\n * layer progress, `docker login` interactive prompts that should never fire\n * with `--password-stdin` but still safe to inherit, etc.). Resolves on exit\n * code 0; rejects with a plain `Error` carrying the exit code on any non-zero\n * exit, so the caller can wrap with its own error class.\n *\n * Differs from {@link runDockerStreaming} in two ways:\n * 1. `stdio: 'inherit'` — output is NOT captured, so terminal control codes\n * (color, progress bar overwrites) flow through unchanged. This is the\n * load-bearing reason for the split: `docker pull`'s progress bars only\n * animate properly when stdout is a real TTY connected to the parent.\n * 2. No `input` / `streamLive` options — inherit-mode has nothing to\n * capture and nothing to mirror.\n *\n * Used by the `--verbose`-mode `docker pull` plumbing in `docker-runner.ts`\n * and `ecr-puller.ts` (visible layer progress). Non-verbose pulls go through\n * {@link runDockerStreaming} so stderr can be folded into the error message.\n */\nexport async function runDockerForeground(\n args: string[],\n options: ForegroundOptions = {}\n): Promise<void> {\n return spawnForeground(getDockerCmd(), args, options);\n}\n\nexport interface ForegroundOptions {\n /** Optional working directory for the subprocess. */\n cwd?: string;\n /**\n * Additional environment variables to set. Merged on top of `process.env`\n * (same semantics as {@link RunDockerOptions.env}).\n */\n env?: Record<string, string | undefined>;\n}\n\n/**\n * Foreground (stdio-inherit) spawn — the inherit-mode counterpart to\n * {@link spawnStreaming}. Used by {@link runDockerForeground} for docker-CLI\n * subprocesses.\n *\n * The ENOENT branch crafts a docker-specific install hint (\"Install Docker\n * (or set CDK_DOCKER ...)\"), so non-docker callers reusing this helper\n * would see a misleading error on missing-binary failures. Keep the binary\n * docker-shaped, or update the ENOENT message before adding a non-docker\n * call site.\n */\nexport async function spawnForeground(\n cmd: string,\n args: string[],\n options: ForegroundOptions = {}\n): Promise<void> {\n const env = options.env ? mergeEnv(options.env) : undefined;\n return new Promise<void>((resolve, reject) => {\n const child = spawn(cmd, args, {\n cwd: options.cwd,\n env,\n stdio: 'inherit',\n });\n child.once('error', (err: NodeJS.ErrnoException) => {\n if (err.code === 'ENOENT') {\n const usingOverride = process.env['CDK_DOCKER'] === cmd && cmd !== 'docker';\n reject(\n new Error(\n usingOverride\n ? `Failed to find and execute '${cmd}' (resolved via CDK_DOCKER). ` +\n `Install '${cmd}' or unset CDK_DOCKER to fall back to 'docker'.`\n : `Failed to find and execute '${cmd}'. Install Docker (or set the ` +\n `'CDK_DOCKER' environment variable to a compatible binary such as podman / finch).`\n )\n );\n } else {\n reject(new Error(`${cmd} failed: ${err.message}`));\n }\n });\n child.once('close', (code) => {\n if (code === 0) {\n resolve();\n } else {\n reject(new Error(`${cmd} exited with code ${code}`));\n }\n });\n });\n}\n\n/**\n * Format the stderr from a failed `docker login` so the surfaced cdk-local\n * error gives the user an actionable workaround when the underlying\n * failure is a credential-helper persistence bug (which has nothing to\n * do with cdk-local, AWS, or IAM perms — the docker CLI itself fails to\n * save the auth token to the platform's credential store). The most\n * common shape is `osxkeychain` on macOS rejecting an overwrite for\n * an existing entry, but `wincred` (Windows), `pass` (Linux), and\n * `secretservice` (Linux) hit the same class of `Error saving\n * credentials` failure, so the rewritten message stays platform-\n * agnostic — `docker logout <endpoint>` is the correct recovery on\n * every backend.\n *\n * Detected docker / docker-credential-* output patterns:\n * - `error storing credentials - err: exit status 1, out: \\`The\n * specified item already exists in the keychain.\\`` (osxkeychain)\n * - `Error saving credentials: ...` (any backend)\n *\n * Non-matching failures (genuine IAM / network / endpoint problems)\n * pass through with just the stderr trimmed — the original message\n * stays load-bearing for diagnosis.\n */\nexport function formatDockerLoginError(stderr: string, endpoint: string): string {\n const trimmed = stderr.trim();\n const isCredentialHelperFailure =\n trimmed.includes('already exists in the keychain') ||\n trimmed.includes('Error saving credentials');\n if (isCredentialHelperFailure) {\n return (\n `docker's credential helper (osxkeychain on macOS / wincred on Windows / pass / secretservice on Linux) ` +\n `failed to persist the ECR auth token. The \"already exists in the keychain\" / \"Error saving credentials\" ` +\n `output is a known docker-credential-helpers issue — unrelated to ${getEmbedConfig().productName}, AWS credentials, or IAM perms. ` +\n `Quick fix: run \\`docker logout ${endpoint}\\` to clear the stale entry, then retry the ${getEmbedConfig().productName} command. ` +\n `Permanent fix: edit ~/.docker/config.json and remove (or empty) the platform-specific \"credsStore\" entry ` +\n `(e.g. \"osxkeychain\" → \"\" or \"desktop\" on macOS Docker Desktop). ` +\n `Original docker stderr: ${trimmed}`\n );\n }\n return trimmed;\n}\n\nfunction mergeEnv(overrides: Record<string, string | undefined>): NodeJS.ProcessEnv {\n const merged: NodeJS.ProcessEnv = { ...process.env };\n for (const [k, v] of Object.entries(overrides)) {\n if (v === undefined) {\n delete merged[k];\n } else {\n merged[k] = v;\n }\n }\n return merged;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAqFA,MAAM,WAAgC;CACpC,SAAS;CACT,YAAY;CACZ,aAAa;CACb,oBAAoB;CACpB,kBAAkB;CAClB,WAAW;CACX,sBAAsB;CACtB,cAAc;CACf;AAED,IAAI,UAA+B;;;;;;;AAQnC,SAAgB,eAAe,QAAoC;CACjE,UAAU;EACR,SAAS,QAAQ,WAAW,SAAS;EACrC,YAAY,QAAQ,cAAc,SAAS;EAC3C,aAAa,QAAQ,eAAe,SAAS;EAC7C,oBAAoB,QAAQ,sBAAsB,SAAS;EAC3D,kBAAkB,QAAQ,oBAAoB,SAAS;EACvD,WAAW,QAAQ,aAAa,SAAS;EACzC,sBAAsB,QAAQ,wBAAwB,SAAS;EAC/D,cAAc,QAAQ,gBAAgB,SAAS;EAChD;;;AAIH,SAAgB,iBAAsC;CACpD,OAAO;;;AAIT,SAAgB,mBAAyB;CACvC,UAAU;;;;;;;;;;;AC/FZ,MAAM,SAAS;CACb,OAAO;CACP,QAAQ;CACR,KAAK;CACL,KAAK;CACL,OAAO;CACP,QAAQ;CACR,MAAM;CACN,MAAM;CACN,MAAM;CACP;AAED,SAAS,kBAA0B;CAEjC,wBAAO,IADS,MACN,EAAC,aAAa;;;;;;;;;AAU1B,IAAa,gBAAb,MAA6C;CAC3C,AAAQ;CACR,AAAQ;CAER,YAAY,QAAkB,QAAQ,YAAqB,MAAM;EAC/D,KAAK,QAAQ;EACb,KAAK,YAAY;;CAGnB,AAAQ,UAAU,OAA0B;EAC1C,MAAM,SAAqB;GAAC;GAAS;GAAQ;GAAQ;GAAQ;EAC7D,MAAM,oBAAoB,OAAO,QAAQ,KAAK,MAAM;EAEpD,OAD0B,OAAO,QAAQ,MACjB,IAAI;;CAG9B,AAAQ,cAAc,OAAiB,SAAiB,GAAG,MAAyB;EAClF,MAAM,gBAAgB,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,MAAM,KAAK,UAAU,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG;EAE7F,IAAI,KAAK,UAAU,SAAS;GAC1B,MAAM,YAAY,iBAAiB;GACnC,MAAM,WAAW,MAAM,aAAa,CAAC,OAAO,EAAE;GAE9C,IAAI,KAAK,WAAW;IAOlB,MAAM,aAAa;KALjB,OAAO,OAAO;KACd,MAAM,OAAO;KACb,MAAM,OAAO;KACb,OAAO,OAAO;KAEgB,CAAC;IAEjC,OAAO,GAAG,OAAO,MAAM,YAAY,OAAO,MAAM,GAAG,aAAa,WAAW,OAAO,MAAM,GAAG,UAAU;;GAGvG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU;;EAG/C,IAAI,KAAK,WAAW;GAClB,IAAI,UAAU,SACZ,OAAO,GAAG,OAAO,MAAM,UAAU,gBAAgB,OAAO;GAE1D,IAAI,UAAU,QACZ,OAAO,GAAG,OAAO,SAAS,UAAU,gBAAgB,OAAO;GAE7D,OAAO,GAAG,UAAU;;EAGtB,OAAO,GAAG,UAAU;;CAGtB,AAAQ,KAAK,OAAiB,WAAyB;EACrD,IAAI,UAAU,SAAS,QAAQ,MAAM,UAAU;OAC1C,IAAI,UAAU,QAAQ,QAAQ,KAAK,UAAU;OAC7C,IAAI,UAAU,QAAQ,QAAQ,KAAK,UAAU;OAC7C,QAAQ,MAAM,UAAU;;CAG/B,MAAM,SAAiB,GAAG,MAAuB;EAC/C,IAAI,KAAK,UAAU,QAAQ,EACzB,KAAK,KAAK,SAAS,KAAK,cAAc,SAAS,SAAS,GAAG,KAAK,CAAC;;CAIrE,KAAK,SAAiB,GAAG,MAAuB;EAC9C,IAAI,KAAK,UAAU,OAAO,EACxB,KAAK,KAAK,QAAQ,KAAK,cAAc,QAAQ,SAAS,GAAG,KAAK,CAAC;;CAInE,KAAK,SAAiB,GAAG,MAAuB;EAC9C,IAAI,KAAK,UAAU,OAAO,EACxB,KAAK,KAAK,QAAQ,KAAK,cAAc,QAAQ,SAAS,GAAG,KAAK,CAAC;;CAInE,MAAM,SAAiB,GAAG,MAAuB;EAC/C,IAAI,KAAK,UAAU,QAAQ,EACzB,KAAK,KAAK,SAAS,KAAK,cAAc,SAAS,SAAS,GAAG,KAAK,CAAC;;CAIrE,SAAS,OAAuB;EAC9B,KAAK,QAAQ;;CAGf,WAAqB;EACnB,OAAO,KAAK;;CAGd,MAAM,QAA6B;EACjC,OAAO,IAAI,YAAY,QAAQ,KAAK,UAAU;;;;;;AAOlD,IAAM,cAAN,cAA0B,cAAc;CACtC,AAAiB;CAEjB,YAAY,QAAgB,WAAoB;EAC9C,MAAM,QAAQ,UAAU;EACxB,KAAK,SAAS;;CAGhB,AAAQ,YAAkB;EACxB,IAAI,cACF,KAAK,SAAS,aAAa,UAAU,CAAC;;CAI1C,AAAS,MAAM,SAAiB,GAAG,MAAuB;EACxD,KAAK,WAAW;EAChB,MAAM,MAAM,IAAI,KAAK,OAAO,IAAI,WAAW,GAAG,KAAK;;CAGrD,AAAS,KAAK,SAAiB,GAAG,MAAuB;EACvD,KAAK,WAAW;EAChB,MAAM,MAAM,KAAK,UAAU,KAAK,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,KAAK,KAAK,GAAG,KAAK;;CAG1B,AAAS,KAAK,SAAiB,GAAG,MAAuB;EACvD,KAAK,WAAW;EAChB,MAAM,MAAM,KAAK,UAAU,KAAK,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,KAAK,KAAK,GAAG,KAAK;;CAG1B,AAAS,MAAM,SAAiB,GAAG,MAAuB;EACxD,KAAK,WAAW;EAChB,MAAM,MAAM,KAAK,UAAU,KAAK,UAAU,IAAI,KAAK,OAAO,IAAI,YAAY;EAC1E,MAAM,MAAM,KAAK,GAAG,KAAK;;;AAI7B,IAAI,eAAqC;AAEzC,SAAgB,YAA2B;CACzC,IAAI,CAAC,cACH,eAAe,IAAI,eAAe;CAEpC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACtKT,SAAgB,eAAuB;CACrC,MAAM,WAAW,QAAQ,IAAI;CAC7B,OAAO,YAAY,SAAS,SAAS,IAAI,WAAW;;;;;;;;;;;;;AA+CtD,eAAsB,mBACpB,MACA,UAA4B,EAAE,EACR;CACtB,OAAO,eAAe,cAAc,EAAE,MAAM,QAAQ;;;;;;;AAQtD,eAAsB,eACpB,KACA,MACA,UAA4B,EAAE,EACR;CACtB,MAAM,aAAa,QAAQ,cAAc,WAAW,CAAC,UAAU,KAAK;CACpE,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ,IAAI,GAAG;CAElD,OAAO,IAAI,SAAsB,SAAS,WAAW;EACnD,MAAM,QAAQ,MAAM,KAAK,MAAM;GAC7B,KAAK,QAAQ;GACb;GACA,OAAO;IAAC,QAAQ,QAAQ,SAAS;IAAU;IAAQ;IAAO;GAC3D,CAAC;EAEF,MAAM,eAAyB,EAAE;EACjC,MAAM,eAAyB,EAAE;EAEjC,MAAM,OAAQ,GAAG,SAAS,UAAkB;GAC1C,aAAa,KAAK,MAAM;GACxB,IAAI,YAAY,QAAQ,OAAO,MAAM,MAAM;IAC3C;EACF,MAAM,OAAQ,GAAG,SAAS,UAAkB;GAC1C,aAAa,KAAK,MAAM;GACxB,IAAI,YAAY,QAAQ,OAAO,MAAM,MAAM;IAC3C;EAEF,MAAM,KAAK,UAAU,QAA+B;GAClD,IAAI,IAAI,SAAS,UAAU;IACzB,MAAM,gBAAgB,QAAQ,IAAI,kBAAkB,OAAO,QAAQ;IACnE,uBACE,IAAI,MACF,gBACI,+BAA+B,IAAI,wCACrB,IAAI,mDAClB,+BAA+B,IAAI,iHAExC,CACF;UAED,OAAO,IAAI;IAEb;EAEF,MAAM,KAAK,UAAU,SAAS;GAC5B,MAAM,SAAS,OAAO,OAAO,aAAa,CAAC,SAAS,QAAQ;GAC5D,MAAM,SAAS,OAAO,OAAO,aAAa,CAAC,SAAS,QAAQ;GAC5D,IAAI,SAAS,GACX,QAAQ;IAAE;IAAQ;IAAQ,CAAC;QACtB;IACL,MAAM,UACJ,OAAO,MAAM,IAAI,OAAO,MAAM,IAAI,GAAG,IAAI,GAAG,KAAK,MAAM,GAAG,oBAAoB;IAChF,MAAM,MAAM,IAAI,MAAM,QAAQ;IAC9B,IAAI,SAAS;IACb,IAAI,SAAS;IACb,IAAI,WAAW;IACf,OAAO,IAAI;;IAEb;EAEF,IAAI,QAAQ,UAAU,QAAW;GAQ/B,MAAM,MAAO,GAAG,eAAe,GAE7B;GACF,MAAM,MAAO,MAAM,QAAQ,MAAM;GACjC,MAAM,MAAO,KAAK;;GAEpB;;;;;;;;;;;;;;;;;;;;;;AAuBJ,eAAsB,oBACpB,MACA,UAA6B,EAAE,EAChB;CACf,OAAO,gBAAgB,cAAc,EAAE,MAAM,QAAQ;;;;;;;;;;;;;AAwBvD,eAAsB,gBACpB,KACA,MACA,UAA6B,EAAE,EAChB;CACf,MAAM,MAAM,QAAQ,MAAM,SAAS,QAAQ,IAAI,GAAG;CAClD,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,QAAQ,MAAM,KAAK,MAAM;GAC7B,KAAK,QAAQ;GACb;GACA,OAAO;GACR,CAAC;EACF,MAAM,KAAK,UAAU,QAA+B;GAClD,IAAI,IAAI,SAAS,UAAU;IACzB,MAAM,gBAAgB,QAAQ,IAAI,kBAAkB,OAAO,QAAQ;IACnE,uBACE,IAAI,MACF,gBACI,+BAA+B,IAAI,wCACrB,IAAI,mDAClB,+BAA+B,IAAI,iHAExC,CACF;UAED,uBAAO,IAAI,MAAM,GAAG,IAAI,WAAW,IAAI,UAAU,CAAC;IAEpD;EACF,MAAM,KAAK,UAAU,SAAS;GAC5B,IAAI,SAAS,GACX,SAAS;QAET,uBAAO,IAAI,MAAM,GAAG,IAAI,oBAAoB,OAAO,CAAC;IAEtD;GACF;;;;;;;;;;;;;;;;;;;;;;;;AAyBJ,SAAgB,uBAAuB,QAAgB,UAA0B;CAC/E,MAAM,UAAU,OAAO,MAAM;CAI7B,IAFE,QAAQ,SAAS,iCAAiC,IAClD,QAAQ,SAAS,2BAA2B,EAE5C,OACE,mRAEoE,gBAAgB,CAAC,YAAY,kEAC/D,SAAS,8CAA8C,gBAAgB,CAAC,YAAY,6MAG3F;CAG/B,OAAO;;AAGT,SAAS,SAAS,WAAkE;CAClF,MAAM,SAA4B,EAAE,GAAG,QAAQ,KAAK;CACpD,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,UAAU,EAC5C,IAAI,MAAM,QACR,OAAO,OAAO;MAEd,OAAO,KAAK;CAGhB,OAAO"}
package/dist/index.d.ts CHANGED
@@ -2,7 +2,7 @@ import { Command, Option } from "commander";
2
2
  import { CloudFormationClient } from "@aws-sdk/client-cloudformation";
3
3
  import { SSMClient } from "@aws-sdk/client-ssm";
4
4
  import { WebSocket } from "ws";
5
- import { IncomingMessage, ServerResponse } from "node:http";
5
+ import { IncomingMessage, Server, ServerResponse } from "node:http";
6
6
 
7
7
  //#region src/types/resource.d.ts
8
8
  interface CloudFormationTemplate {
@@ -143,6 +143,8 @@ interface CdkLocalEmbedConfig {
143
143
  resourceNamePrefix?: string;
144
144
  awsBindMountPath?: string;
145
145
  envPrefix?: string;
146
+ sigV4StrictByDefault?: boolean;
147
+ sigV4OptFlag?: string;
146
148
  }
147
149
  interface ResolvedEmbedConfig {
148
150
  cliName: string;
@@ -151,6 +153,8 @@ interface ResolvedEmbedConfig {
151
153
  resourceNamePrefix: string;
152
154
  awsBindMountPath: string;
153
155
  envPrefix: string;
156
+ sigV4StrictByDefault: boolean;
157
+ sigV4OptFlag: string;
154
158
  }
155
159
  declare function setEmbedConfig(config?: CdkLocalEmbedConfig): void;
156
160
  declare function getEmbedConfig(): ResolvedEmbedConfig;
@@ -303,6 +307,7 @@ interface CorsConfig {
303
307
  }
304
308
  declare function buildCorsConfigByApiId(template: CloudFormationTemplate): Map<string, CorsConfig>;
305
309
  declare function buildCorsConfigFromCloudFrontChain(template: CloudFormationTemplate): Map<string, CorsConfig>;
310
+ declare function isFunctionUrlOacFronted(template: CloudFormationTemplate, fnUrlLogicalId: string): boolean;
306
311
  interface PreflightResponse {
307
312
  statusCode: number;
308
313
  headers: Record<string, string>;
@@ -378,6 +383,7 @@ interface RouteWithAuth {
378
383
  route: DiscoveredRoute;
379
384
  authorizer?: AuthorizerInfo;
380
385
  }
386
+ declare function attachAuthorizers(stacks: readonly StackInfo[], routes: readonly DiscoveredRoute[]): RouteWithAuth[];
381
387
  //#endregion
382
388
  //#region src/local/authorizer-cache.d.ts
383
389
  interface CachedAuthorizerResult {
@@ -442,6 +448,57 @@ declare function verifyJwtAuthorizer(authorizer: JwtAuthorizer, authorizationHea
442
448
  ttlSeconds: number;
443
449
  }>;
444
450
  //#endregion
451
+ //#region src/local/sigv4-verify.d.ts
452
+ interface ResolvedCredentials {
453
+ accessKeyId: string;
454
+ secretAccessKey: string;
455
+ sessionToken?: string | undefined;
456
+ }
457
+ type CredentialsLoader = () => Promise<ResolvedCredentials>;
458
+ declare function defaultCredentialsLoader(): CredentialsLoader;
459
+ //#endregion
460
+ //#region src/local/http-server.d.ts
461
+ interface ServerState {
462
+ routes: readonly RouteWithAuth[];
463
+ pool: ContainerPool;
464
+ corsConfigByApiId: Map<string, CorsConfig>;
465
+ }
466
+ interface StartApiServerOptions {
467
+ state: ServerState;
468
+ rieTimeoutMs: number;
469
+ host: string;
470
+ port: number;
471
+ authorizerCache?: AuthorizerCache;
472
+ jwksCache?: JwksCache;
473
+ jwksWarnedUrls?: Set<string>;
474
+ mtls?: MtlsServerConfig;
475
+ sigV4CredentialsLoader?: CredentialsLoader;
476
+ sigV4WarnedForeignIds?: Set<string>;
477
+ sigV4Strict?: boolean;
478
+ defaultRegion?: string;
479
+ preDispatch?: (req: IncomingMessage, res: ServerResponse) => Promise<boolean>;
480
+ }
481
+ interface MtlsServerConfig {
482
+ caPem: Buffer;
483
+ certPem: Buffer;
484
+ keyPem: Buffer;
485
+ }
486
+ interface StartedApiServer {
487
+ port: number;
488
+ host: string;
489
+ scheme: 'http' | 'https';
490
+ server: Server;
491
+ close: () => Promise<void>;
492
+ setServerState: (next: ServerState) => ServerState;
493
+ getServerState: () => ServerState;
494
+ }
495
+ declare function startApiServer(opts: StartApiServerOptions): Promise<StartedApiServer>;
496
+ declare function readMtlsMaterialsFromDisk(opts: {
497
+ truststorePath: string;
498
+ certPath: string;
499
+ keyPath: string;
500
+ }): MtlsServerConfig;
501
+ //#endregion
445
502
  //#region src/cli/commands/local-start-api.d.ts
446
503
  interface CreateLocalStartApiCommandOptions {
447
504
  extraStateProviders?: ExtraStateProviders;
@@ -954,5 +1011,5 @@ interface CloudMapIndex {
954
1011
  }
955
1012
  declare function buildCloudMapIndex(stack: StackInfo): CloudMapIndex;
956
1013
  //#endregion
957
- export { type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type CachedAuthorizerResult, type CdkLocalEmbedConfig, CfnLocalStateProvider, type CfnLocalStateProviderOptions, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CreateLocalInvokeCommandOptions, type CreateLocalListCommandOptions, type CreateLocalRunTaskCommandOptions, type CreateLocalStartApiCommandOptions, type CreateLocalStartServiceCommandOptions, type CrossStackResolver, type DiscoveredRoute, type DiscoveredWebSocketApi, EcsTaskResolutionError, type EnvOverrideFile, type ExtraStateProviders, type FormatTargetListingOptions, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type JwksCache, type LambdaArnResolveOutcome, type LocalStateProvider, type LocalStateProviderFactory, type LocalStateRecord, LocalStateSourceError, type LocalStateSourceOptions, type MatchedRouteContext, type PseudoParameters, type RegistrationHandle, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type SsmParameterRef, type StateEnvSubstitutionAudit, type SubstitutionContext, type TargetEntry, type TargetListing, type TranslatedHttpResponse, VtlEvaluationError, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, applyAuthorizerOverlay, applyCorsResponseHeaders, attachStageContext, availableApiIdentifiers, bufferToBody, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, collectSsmParameterRefs, computeRequestIdentityHash, countTargets, createAuthorizerCache, createJwksCache, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatTargetListing, getContainerNetworkIp, getEmbedConfig, groupRoutesByServer, handleConnectionsRequest, invokeRequestAuthorizer, invokeTokenAuthorizer, isCfnFlagPresent, listTargets, matchPreflight, matchRoute, materializeLayerFromArn, parseConnectionsPath, parseSelectionExpressionPath, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveApiTargetSubset, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSsmParameters, selectIntegrationResponse, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync, substituteImagePlaceholders, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer };
1014
+ export { type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type CachedAuthorizerResult, type CdkLocalEmbedConfig, CfnLocalStateProvider, type CfnLocalStateProviderOptions, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CreateLocalInvokeCommandOptions, type CreateLocalListCommandOptions, type CreateLocalRunTaskCommandOptions, type CreateLocalStartApiCommandOptions, type CreateLocalStartServiceCommandOptions, type CredentialsLoader, type CrossStackResolver, type DiscoveredRoute, type DiscoveredWebSocketApi, EcsTaskResolutionError, type EnvOverrideFile, type ExtraStateProviders, type FormatTargetListingOptions, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type JwksCache, type LambdaArnResolveOutcome, type LocalStateProvider, type LocalStateProviderFactory, type LocalStateRecord, LocalStateSourceError, type LocalStateSourceOptions, type MatchedRouteContext, type MtlsServerConfig, type PseudoParameters, type RegistrationHandle, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type ServerState, type SsmParameterRef, type StartedApiServer, type StateEnvSubstitutionAudit, type SubstitutionContext, type TargetEntry, type TargetListing, type TranslatedHttpResponse, VtlEvaluationError, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, applyAuthorizerOverlay, applyCorsResponseHeaders, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, collectSsmParameterRefs, computeRequestIdentityHash, countTargets, createAuthorizerCache, createJwksCache, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatTargetListing, getContainerNetworkIp, getEmbedConfig, groupRoutesByServer, handleConnectionsRequest, invokeRequestAuthorizer, invokeTokenAuthorizer, isCfnFlagPresent, isFunctionUrlOacFronted, listTargets, matchPreflight, matchRoute, materializeLayerFromArn, parseConnectionsPath, parseSelectionExpressionPath, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveApiTargetSubset, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSsmParameters, selectIntegrationResponse, setEmbedConfig, startApiServer, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync, substituteImagePlaceholders, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer };
958
1015
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/resource.ts","../src/types/state.ts","../src/local/state-resolver.ts","../src/local/local-state-provider.ts","../src/cli/commands/local-state-source.ts","../src/local/embed-config.ts","../src/synthesis/assembly-reader.ts","../src/local/lambda-resolver.ts","../src/cli/commands/local-invoke.ts","../src/local/httpv2-service-integration.ts","../src/local/container-pool.ts","../src/local/vtl-engine.ts","../src/local/integration-response-selector.ts","../src/local/rest-v1-integrations.ts","../src/local/route-discovery.ts","../src/local/cors-handler.ts","../src/local/authorizer-resolver.ts","../src/local/authorizer-cache.ts","../src/local/cognito-jwt.ts","../src/cli/commands/local-start-api.ts","../src/local/intrinsic-image.ts","../src/local/ecs-task-resolver.ts","../src/cli/commands/local-run-task.ts","../src/cli/commands/local-start-service.ts","../src/local/target-lister.ts","../src/cli/commands/local-list.ts","../src/local/cfn-local-state-provider.ts","../src/local/ssm-parameter-resolver.ts","../src/local/intrinsic-utils.ts","../src/local/intrinsic-lambda-arn.ts","../src/local/parameter-mapping.ts","../src/local/api-gateway-response.ts","../src/local/docker-inspect.ts","../src/local/route-matcher.ts","../src/local/api-gateway-event.ts","../src/local/websocket-route-discovery.ts","../src/local/lambda-authorizer.ts","../src/local/env-resolver.ts","../src/local/stage-resolver.ts","../src/local/cloud-map-registry.ts","../src/local/runtime-image.ts","../src/local/websocket-event.ts","../src/local/websocket-mgmt-api.ts","../src/local/websocket-body.ts","../src/local/docker-version.ts","../src/local/api-server-grouping.ts","../src/local/layer-arn-materializer.ts","../src/local/cloud-map-resolver.ts"],"mappings":";;;;;;;UAGiB,sBAAA;EACf,wBAAA;EACA,WAAA;EACA,UAAA,GAAa,MAAA,SAAe,iBAAA;EAC5B,SAAA,EAAW,MAAA,SAAe,gBAAA;EAC1B,OAAA,GAAU,MAAA,SAAe,cAAA;EACzB,UAAA,GAAa,MAAA;EACb,QAAA,GAAW,MAAA;EAWX,SAAA;EACA,KAAA,GAAQ,MAAA;AAAA;AAAA,UAMO,iBAAA;EACf,IAAA;EACA,OAAA;EACA,WAAA;EACA,aAAA;EACA,cAAA;EACA,qBAAA;AAAA;AAAA,UAMe,gBAAA;EACf,IAAA;EACA,UAAA,GAAa,MAAA;EACb,SAAA;EACA,SAAA;EACA,QAAA,GAAW,MAAA;EACX,cAAA,GAAiB,MAAA;EACjB,YAAA,GAAe,MAAA;EACf,cAAA;EACA,mBAAA;AAAA;AAAA,UAMe,cAAA;EACf,KAAA;EACA,WAAA;EACA,MAAA;IACE,IAAA;EAAA;AAAA;;;UC4Ha,aAAA;EAEf,UAAA;EAGA,YAAA;EAGA,UAAA,EAAY,MAAA;EAcZ,kBAAA,GAAqB,MAAA;EAGrB,UAAA,GAAa,MAAA;EAGb,YAAA;EAGA,QAAA,GAAW,MAAA;EAmBX,cAAA;EAMA,mBAAA;EAyBA,aAAA;AAAA;;;KCtJU,uBAAA;EACN,IAAA;EAAiB,KAAA;AAAA;EACjB,IAAA;EAAoB,MAAA;AAAA;AAAA,UAYT,gBAAA;EACf,SAAA;EACA,MAAA;EACA,SAAA;EACA,SAAA;AAAA;AAAA,UAqBe,kBAAA;EAOf,aAAA,CAAc,UAAA,WAAqB,OAAA;EAQnC,qBAAA,CACE,aAAA,UACA,cAAA,UACA,UAAA,WACC,OAAA;AAAA;AAAA,UAGY,mBAAA;EAEf,SAAA,EAAW,MAAA,SAAe,aAAA;EAa1B,UAAA,GAAa,MAAA;EAEb,gBAAA,GAAmB,gBAAA;EAOnB,kBAAA,GAAqB,kBAAA;EAOrB,cAAA;AAAA;AAAA,iBAiBc,sBAAA,CACd,KAAA,WACA,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,uBAAA;AAAA,iBAmhBmB,2BAAA,CACpB,KAAA,WACA,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,OAAA,CAAQ,uBAAA;AAAA,UAiPM,yBAAA;EAEf,YAAA;EAMA,UAAA,EAAY,KAAA;IAAQ,GAAA;IAAa,MAAA;EAAA;AAAA;AAAA,iBAcnB,0BAAA,CACd,WAAA,EAAa,MAAA,+BACb,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA;EACtD,GAAA,EAAK,MAAA;EAAyB,KAAA,EAAO,yBAAA;AAAA;AAAA,iBA+CpB,+BAAA,CACpB,WAAA,EAAa,MAAA,+BACb,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,OAAA;EAAU,GAAA,EAAK,MAAA;EAAyB,KAAA,EAAO,yBAAA;AAAA;;;UCvgCjC,gBAAA;EAWf,SAAA,EAAW,MAAA,SAAe,aAAA;EAO1B,OAAA,EAAS,MAAA;EAOT,MAAA;AAAA;AAAA,UAsBe,kBAAA;EAAA,SAMN,KAAA;EAQT,IAAA,CAAK,SAAA,UAAmB,WAAA,uBAAkC,OAAA,CAAQ,gBAAA;EAalE,uBAAA,CAAwB,cAAA,WAAyB,OAAA,CAAQ,kBAAA;EA4BzD,0BAAA,EACE,kBAAA,WACC,OAAA,CAAQ,MAAA;EA0BX,4BAAA,EAA8B,QAAA,EAAU,sBAAA,GAAyB,OAAA,CAAQ,MAAA;EAKzE,OAAA;AAAA;;;UCxIe,uBAAA;EAOf,YAAA;EAEA,MAAA;EAEA,OAAA;EAMA,WAAA;EAAA,CAEC,GAAA;AAAA;AAAA,KAQS,yBAAA,IAA6B,OAAA,EAAS,uBAAA,KAA4B,kBAAA;AAAA,KAUlE,mBAAA,GAAsB,MAAA,SAAe,yBAAA;AAAA,iBAUjC,mBAAA,CAAoB,YAAA,oBAAgC,SAAA;AAAA,iBAapD,gBAAA,CAAiB,IAAA,EAAM,IAAA,CAAK,uBAAA;AAAA,iBAgB5B,gBAAA,CACd,OAAA,EAAS,IAAA,CAAK,uBAAA,6BACd,WAAA;AAAA,iBAqCoB,wBAAA,CACpB,OAAA,EAAS,IAAA,CAAK,uBAAA,+BACd,WAAA,uBACC,OAAA;AAAA,cAUU,qBAAA,SAA8B,KAAA;cAC7B,OAAA;AAAA;AAAA,iBAkBE,wCAAA,CACd,OAAA,EAAS,IAAA,CAAK,uBAAA,mBACd,gBAAA;AAAA,iBAiCc,wBAAA,CACd,OAAA,EAAS,uBAAA,EACT,SAAA,UACA,WAAA,sBACA,mBAAA,GAAsB,mBAAA,GACrB,kBAAA;;;UCrNc,mBAAA;EAMf,OAAA;EAOA,UAAA;EAMA,WAAA;EAOA,kBAAA;EAMA,gBAAA;EAMA,SAAA;AAAA;AAAA,UAGe,mBAAA;EACf,OAAA;EACA,UAAA;EACA,WAAA;EACA,kBAAA;EACA,gBAAA;EACA,SAAA;AAAA;AAAA,iBAoBc,cAAA,CAAe,MAAA,GAAS,mBAAA;AAAA,iBAYxB,cAAA,CAAA,GAAkB,mBAAA;AAAA,iBAKlB,gBAAA,CAAA;;;UCnFC,SAAA;EAEf,SAAA;EAOA,WAAA;EAGA,UAAA;EAGA,QAAA,EAAU,sBAAA;EAGV,iBAAA;EAGA,eAAA;EAGA,MAAA;EAGA,OAAA;EAOA,qBAAA;EAcA,eAAA,GAAkB,MAAA;AAAA;;;UCwDH,sBAAA;EACf,IAAA;EAMA,SAAA;EAQA,GAAA;EAEA,MAAA;EAEA,SAAA;EAEA,IAAA;EAEA,OAAA;AAAA;;;UCLe,+BAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAy5BA,wBAAA,CAAyB,IAAA,GAAM,+BAAA,GAAuC,OAAA;;;KCx9B1E,gBAAA;;;UC7CK,eAAA;EACf,SAAA;EACA,WAAA;EACA,aAAA;EACA,QAAA;EACA,aAAA;EAEA,aAAA;AAAA;AAAA,UAgMe,aAAA;EAMf,OAAA,CAAQ,SAAA,WAAoB,OAAA,CAAQ,eAAA;EAEpC,OAAA,CAAQ,MAAA,EAAQ,eAAA;EAEhB,OAAA,IAAW,OAAA;AAAA;;;cCvGA,kBAAA,SAA2B,KAAA;cAC1B,OAAA;AAAA;;;UCjGG,wBAAA;EAEf,UAAA;EAOA,gBAAA;EAaA,kBAAA,GAAqB,MAAA;EAQrB,iBAAA,GAAoB,MAAA;EAEpB,eAAA;AAAA;AAAA,UAOe,2BAAA;EAEf,KAAA,EAAO,wBAAA;EAEP,UAAA;AAAA;AAAA,iBA0Bc,yBAAA,CACd,OAAA,EAAS,wBAAA,gBACT,WAAA,UACA,kBAAA,YACC,2BAAA;AAAA,iBAwDa,cAAA,CAAe,GAAA;AAAA,iBAwCf,0BAAA,CACd,kBAAA,EAAoB,MAAA,8BACpB,IAAA;EAAQ,aAAA,IAAiB,GAAA,UAAa,KAAA,UAAe,MAAA;AAAA,IACpD,MAAA;AAAA,iBA2Ca,oBAAA,CACd,iBAAA,EAAmB,MAAA,8BACnB,MAAA;EACG,QAAA;EAAkB,WAAA;AAAA;;;UC/GN,qBAAA;EACf,IAAA;EAOA,eAAA;EAEA,SAAA,EAAW,wBAAA;AAAA;AAAA,UA8FI,0BAAA;EACf,IAAA;EAEA,GAAA;EAEA,qBAAA;EAMA,iBAAA,GAAoB,MAAA;EAEpB,SAAA,EAAW,wBAAA;AAAA;AAAA,UAsGI,qBAAA;EACf,IAAA;EACA,GAAA;EACA,qBAAA;EACA,iBAAA,GAAoB,MAAA;EAEpB,gBAAA,GAAmB,MAAA;EACnB,SAAA,EAAW,wBAAA;AAAA;AAAA,UA2II,0BAAA;EACf,IAAA;EAEA,eAAA;EAEA,gBAAA,GAAmB,MAAA;EAEnB,SAAA,EAAW,wBAAA;AAAA;;;KClfD,uBAAA,GACR,qBAAA,GACA,0BAAA,GACA,qBAAA,GACA,0BAAA;AAAA,UAmCa,eAAA;EAEf,MAAA;EAEA,WAAA;EAEA,eAAA;EAEA,MAAA;EAEA,UAAA;EAUA,KAAA;EAgBA,YAAA;EAQA,YAAA;EAWA,UAAA;EAOA,cAAA,GAAiB,MAAA;EAWjB,UAAA;EAsBA,WAAA;IAAgB,MAAA;EAAA;EAgBhB,QAAA;IAAa,UAAA;IAAoB,OAAA,EAAS,MAAA;EAAA;EAgB1C,kBAAA;IACE,OAAA,EAAS,gBAAA;IACT,iBAAA,EAAmB,QAAA,CAAS,MAAA;IAC5B,kBAAA,GAAqB,QAAA,CAAS,MAAA,SAAe,QAAA,CAAS,MAAA;EAAA;EAaxD,iBAAA,GAAoB,uBAAA;EAEpB,UAAA;AAAA;AAAA,iBAoBc,cAAA,CAAe,MAAA,WAAiB,SAAA,KAAc,eAAA;;;UC9J7C,UAAA;EACf,YAAA;EACA,YAAA;EACA,YAAA;EACA,aAAA;EACA,MAAA;EACA,gBAAA;AAAA;AAAA,iBAsBc,sBAAA,CAAuB,QAAA,EAAU,sBAAA,GAAyB,GAAA,SAAY,UAAA;AAAA,iBA4GtE,kCAAA,CACd,QAAA,EAAU,sBAAA,GACT,GAAA,SAAY,UAAA;AAAA,UA8NE,iBAAA;EACf,UAAA;EACA,OAAA,EAAS,MAAA;AAAA;AAAA,iBAUK,cAAA,CACd,GAAA;EAAO,MAAA;EAAgB,OAAA,EAAS,MAAA;AAAA,GAChC,MAAA,EAAQ,UAAA,GACP,iBAAA;AAAA,iBAqGa,wBAAA,CACd,GAAA,EAAK,cAAA,EACL,YAAA,sBACA,iBAAA,EAAmB,GAAA,SAAY,UAAA,GAC/B,aAAA;;;UC3fe,qBAAA;EACf,IAAA;EAEA,SAAA;EAEA,eAAA;EAMA,WAAA;EAEA,gBAAA;EAEA,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,IAAA;EACA,SAAA;EACA,eAAA;EAEA,eAAA,EAAiB,aAAA,CAAc,sBAAA;EAE/B,gBAAA;EAEA,UAAA;EACA,UAAA;AAAA;AAAA,UASe,cAAA;EAEf,WAAA;EAEA,MAAA;EAEA,UAAA;AAAA;AAAA,UAGe,yBAAA;EACf,IAAA;EACA,SAAA;EAWA,KAAA,EAAO,aAAA,CAAc,cAAA;EAOrB,WAAA;EAEA,MAAA;EAEA,UAAA;EAYA,UAAA;AAAA;AAAA,UAGe,aAAA;EACf,IAAA;EACA,SAAA;EAEA,MAAA;EAKA,QAAA,EAAU,aAAA;EAMV,MAAA;EACA,UAAA;EACA,UAAA;AAAA;AAAA,UAae,aAAA;EACf,IAAA;EAEA,SAAA;EACA,UAAA;EAYA,UAAA;AAAA;AAAA,KAGU,cAAA,GACR,qBAAA,GACA,uBAAA,GACA,yBAAA,GACA,aAAA,GACA,aAAA;AAAA,KAEQ,sBAAA;EACN,IAAA;EAAgB,IAAA;AAAA;EAChB,IAAA;EAAe,IAAA;AAAA;EACf,IAAA;EAAiB,IAAA;AAAA;EACjB,IAAA;EAAwB,IAAA;AAAA;AAAA,UAucb,aAAA;EACf,KAAA,EAD4B,eAAA;EAE5B,UAAA,GAAa,cAAA;AAAA;;;UCnnBE,sBAAA;EAcf,KAAA;EAKA,WAAA;EAMA,OAAA,GAAU,MAAA;EASV,MAAA;AAAA;AAAA,UAQe,eAAA;EAMf,GAAA,CAAI,mBAAA,UAA6B,YAAA,WAAuB,sBAAA;EAIxD,GAAA,CACE,mBAAA,UACA,YAAA,UACA,UAAA,UACA,MAAA,EAAQ,sBAAA;EAGV,KAAA;EAEA,IAAA;AAAA;AAAA,iBAQc,qBAAA,CAAsB,IAAA;EAAQ,GAAA;AAAA,IAA4B,eAAA;;;UC9DhE,OAAA;EAER,GAAA;EAEA,CAAA;EAEA,CAAA;EAEA,GAAA;EAEA,GAAA;EAEA,GAAA;AAAA;AAAA,UAGQ,cAAA;EAER,KAAA,EAAO,GAAA,SAAY,OAAA;EAEnB,SAAA;EAEA,WAAA;AAAA;AAAA,UAQe,SAAA;EACf,aAAA,CAAc,OAAA,WAAkB,OAAA,CAAQ,cAAA;EAExC,IAAA,CAAK,OAAA,WAAkB,cAAA;EACvB,KAAA;AAAA;AAAA,iBAac,eAAA,CACd,IAAA;EACE,SAAA,IACE,GAAA,aACG,OAAA;IAAU,EAAA;IAAa,MAAA;IAAgB,IAAA,QAAY,OAAA;EAAA;EACxD,GAAA;EACA,KAAA;EAEA,YAAA;AAAA,IAED,SAAA;AAAA,iBA+Ea,mBAAA,CAAoB,MAAA,UAAgB,UAAA;AAAA,iBAQpC,sBAAA,CAAuB,MAAA;AAAA,iBAsCjB,gBAAA,CACpB,UAAA,EAAY,yBAAA,EACZ,mBAAA,sBACA,SAAA,EAAW,SAAA,EACX,IAAA;EAAQ,GAAA;EAAoB,MAAA,GAAS,GAAA;AAAA,IACpC,OAAA,CAAQ,sBAAA;EAA2B,YAAA;EAAkC,UAAA;AAAA;AAAA,iBAuElD,mBAAA,CACpB,UAAA,EAAY,aAAA,EACZ,mBAAA,sBACA,SAAA,EAAW,SAAA,EACX,IAAA;EAAQ,GAAA;EAAoB,MAAA,GAAS,GAAA;AAAA,IACpC,OAAA,CAAQ,sBAAA;EAA2B,YAAA;EAAkC,UAAA;AAAA;;;UChCvD,iCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,UAwoCC,eAAA;EAAA,SAEN,QAAA,EAAU,aAAA;EAAA,SAEV,SAAA;AAAA;AAAA,iBA2BK,sBAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,qBACA,UAAA,sBACC,eAAA;AAAA,iBAskEa,0BAAA,CAA2B,IAAA,GAAM,iCAAA,GAAyC,OAAA;;;UCh9GzE,sBAAA;EAOf,gBAAA;IACE,SAAA;IACA,MAAA;IACA,SAAA;IACA,SAAA;EAAA;EASF,cAAA,GAAiB,MAAA,SAAe,aAAA;EAWhC,eAAA,GAAkB,MAAA;AAAA;AAAA,iBAyBJ,gCAAA,CACd,MAAA,sBACA,SAAA;EACG,SAAA;EAAoB,MAAA;EAAgB,SAAA;EAAmB,SAAA;AAAA;AAAA,KAiChD,oBAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAkB,GAAA;AAAA;EAClB,IAAA;EAAqB,aAAA;AAAA;EACrB,IAAA;EAA0B,MAAA;AAAA;AAAA,iBA2BhB,qBAAA,CACd,GAAA,WACA,SAAA,EAAW,MAAA,SAAe,gBAAA,GAC1B,OAAA,EAAS,sBAAA,eACR,oBAAA;AAAA,iBAwSa,2BAAA,CACd,IAAA,UACA,SAAA,EAAW,MAAA,SAAe,gBAAA,GAC1B,OAAA,EAAS,sBAAA;;;cCzTE,sBAAA,SAA+B,KAAA;cAC9B,OAAA;AAAA;;;UC7CG,gCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA0gBA,yBAAA,CAA0B,IAAA,GAAM,gCAAA,GAAwC,OAAA;;;UChhBvE,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAqrBA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UCnxBc,WAAA;EAEf,SAAA;EAEA,SAAA;EAKA,WAAA;EAMA,WAAA;EAOA,IAAA;AAAA;AAAA,UAOe,aAAA;EAEf,OAAA,EAAS,WAAA;EAMT,IAAA,EAAM,WAAA;EAEN,WAAA,EAAa,WAAA;EAEb,kBAAA,EAAoB,WAAA;AAAA;AAAA,iBA+GN,WAAA,CAAY,MAAA,WAAiB,SAAA,KAAc,aAAA;AAAA,iBAiB3C,YAAA,CAAa,OAAA,EAAS,aAAA;;;UC/IrB,6BAAA;EAEf,WAAA,GAAc,mBAAA;AAAA;AAAA,UAuCC,0BAAA;EAOf,IAAA;AAAA;AAAA,iBAYc,mBAAA,CACd,OAAA,EAAS,aAAA,EACT,OAAA,UACA,OAAA,GAAS,0BAAA;AAAA,iBA2DK,sBAAA,CAAuB,IAAA,GAAM,6BAAA,GAAqC,OAAA;;;UCpFjE,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,MAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAmCE,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EA2DE,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA;;;UC9VQ,eAAA;EAEf,SAAA;EAEA,OAAA;EAEA,MAAA;AAAA;AAAA,iBAec,uBAAA,CACd,QAAA,EAAU,IAAA,CAAK,sBAAA,8BACd,eAAA;AAAA,iBAgDmB,oBAAA,CACpB,MAAA,EAAQ,SAAA,EACR,IAAA,WAAe,eAAA,IACf,KAAA,WACC,OAAA,CAAQ,MAAA;;;iBCjHK,gBAAA,CAAiB,KAAA;;;KCmCrB,uBAAA;EACN,IAAA;EAAkB,SAAA;AAAA;EAClB,IAAA;EAAqB,MAAA;AAAA;AAAA,iBAuBX,yBAAA,CAA0B,KAAA,YAAiB,uBAAA;;;UCpB1C,uBAAA;EAEf,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,WAAA,EAAa,QAAA,CAAS,MAAA;EAEtB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAEzB,WAAA;EAEA,IAAA;EAEA,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAoBzB,UAAA,GAAa,QAAA,CAAS,MAAA;AAAA;AAAA,KASZ,wBAAA;EACN,IAAA;EAAY,QAAA,EAAU,MAAA;AAAA;EACtB,IAAA;EAAe,MAAA;AAAA;AAAA,iBAQL,mCAAA,CACd,UAAA,EAAY,QAAA,CAAS,MAAA,oBACrB,GAAA,EAAK,uBAAA,GACJ,wBAAA;AAAA,iBAkCa,0BAAA,CAA2B,KAAA,UAAe,GAAA,EAAK,uBAAA;;;UCnH9C,sBAAA;EACf,UAAA;EAMA,OAAA,EAAS,MAAA;EAET,OAAA;EAEA,IAAA,EAAM,MAAA;AAAA;AAAA,iBAgBQ,uBAAA,CACd,OAAA,WACA,OAAA,gBACC,sBAAA;;;iBChCmB,qBAAA,CACpB,WAAA,UACA,WAAA,WACC,OAAA;;;UCHc,gBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;AAAA;AAAA,iBAQF,UAAA,CACd,MAAA,UACA,WAAA,UACA,MAAA,WAAiB,eAAA,KAChB,gBAAA;;;UC5Bc,mBAAA;EAEf,MAAA;EAKA,MAAA;EAMA,OAAA,EAAS,MAAA;EAET,IAAA,EAAM,MAAA;EAEN,QAAA;EAwBA,UAAA,GAAa,MAAA;AAAA;AAAA,UAQE,mBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;EAEhB,WAAA;AAAA;AAAA,iBA+Bc,mBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,iBA4Ea,gBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,KAiFS,sBAAA;EACN,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAyB,MAAA,EAAQ,MAAA;AAAA;EACjC,IAAA;EAAqB,MAAA,EAAQ,MAAA;EAAyB,MAAA;AAAA;AAAA,iBAY5C,sBAAA,CACd,KAAA,EAAO,MAAA,mBACP,OAAA,EAAS,sBAAA,GACR,MAAA;;;UC3Pc,sBAAA;EAEf,YAAA;EAEA,YAAA;EAEA,UAAA;EAMA,UAAA;EAQA,wBAAA;EAOA,KAAA;EAaA,MAAA,EAAQ,mBAAA;EAiBR,WAAA;IAAgB,MAAA;EAAA;AAAA;AAAA,UAID,mBAAA;EAEf,QAAA;EAEA,qBAAA;EAEA,eAAA;EAEA,UAAA;AAAA;AAAA,iBAuBc,qBAAA,CAAsB,MAAA,WAAiB,SAAA;EACrD,IAAA,EAAM,sBAAA;EACN,MAAA;AAAA;AAAA,iBA8Bc,4BAAA,CACd,MAAA,WAAiB,SAAA,KAChB,sBAAA;AAAA,iBAgJa,4BAAA,CAA6B,IAAA;;;UC3Q5B,4BAAA;EAEf,MAAA;EAEA,OAAA,EAAS,MAAA;EAET,qBAAA,EAAuB,MAAA;EAEvB,cAAA,EAAgB,MAAA;EAEhB,QAAA;EAEA,WAAA;EAEA,KAAA;AAAA;AAAA,UAGe,2BAAA;EAEf,IAAA,EAAM,aAAA;EAEN,YAAA;EAMA,SAAA;EAEA,aAAA;EAEA,SAAA;AAAA;AAAA,iBAWc,cAAA,CAAe,IAAA;EAC7B,KAAA;EACA,SAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,iBAoBoB,qBAAA,CACpB,UAAA,EAAY,qBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyBhB,uBAAA,CACpB,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyEtB,0BAAA,CACd,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA;EACN,YAAA;EAAsB,OAAA;AAAA;AAAA,iBAmRX,0BAAA,CACd,MAAA,EAAQ,sBAAA,EACR,SAAA,WACC,sBAAA;;;UChcc,mBAAA;EAEf,QAAA,EAAU,MAAA;EAEV,UAAA;AAAA;AAAA,UAGe,eAAA;EAEf,UAAA,GAAa,MAAA;EAAA,CAKZ,sBAAA,WAAiC,MAAA;AAAA;AAAA,iBAwBpB,cAAA,CACd,SAAA,UACA,WAAA,sBACA,WAAA,EAAa,MAAA,+BACb,SAAA,GAAY,eAAA,GACX,mBAAA;;;UCxCc,aAAA;EAEf,cAAA;EAEA,SAAA;EAEA,UAAA;EAEA,SAAA,EAAW,MAAA;AAAA;AAAA,iBAgCG,aAAA,CACd,QAAA,EAAU,sBAAA,EACV,aAAA,YACC,GAAA,SAAY,aAAA;AAAA,iBA4HC,kBAAA,CACd,MAAA,EAAQ,eAAA,IACR,QAAA,EAAU,GAAA,SAAY,aAAA;;;UCpKP,kBAAA;EAEf,EAAA;EAEA,IAAA;EAEA,QAAA;AAAA;AAAA,UAIe,kBAAA;EAAA,SAEN,IAAA;EAAA,SAEA,QAAA;AAAA;AAAA,UAgBM,eAAA;EACf,SAAA;EACA,aAAA;EACA,SAAA,EAAW,aAAA,CAAc,kBAAA;EAEzB,OAAA;AAAA;AAAA,cAmBW,gBAAA;EAAA,iBAEM,MAAA;EAAA,iBAYA,UAAA;EAcjB,QAAA,CACE,SAAA,UACA,aAAA,UACA,QAAA,EAAU,kBAAA,GACT,kBAAA;EAmCH,aAAA,CAAc,KAAA,UAAe,UAAA;EA6B7B,UAAA,CAAW,MAAA,EAAQ,kBAAA;EAenB,iBAAA,CAAkB,cAAA;EAmBlB,MAAA,CAAO,SAAA,UAAmB,aAAA,WAAwB,aAAA,CAAc,kBAAA;EAahE,WAAA,CAAY,KAAA,WAAgB,aAAA,CAAc,kBAAA;EAsB1C,iBAAA,CAAkB,qBAAA;EAiClB,IAAA,CAAA,GAAQ,aAAA,CAAc,eAAA;EA0BtB,OAAA,CAAA;AAAA;;;iBCnOc,mBAAA,CAAoB,OAAA;AAAA,iBAgBpB,2BAAA,CAA4B,OAAA;AAAA,iBA6E5B,2BAAA,CAA4B,OAAA;;;UC3I3B,0BAAA;EAEf,OAAA,EAAS,MAAA;EAET,cAAA;EAEA,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,QAAA;EAEA,SAAA;AAAA;AAAA,UAQe,2BAAA;EACf,QAAA;EACA,SAAA;EACA,YAAA;EACA,iBAAA;EACA,WAAA;EACA,gBAAA;EACA,gBAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,UAAA;EACA,KAAA;EACA,UAAA;EACA,QAAA;IACE,SAAA;IACA,QAAA;IACA,SAAA;EAAA;AAAA;AAAA,UAKa,oBAAA;EAEf,OAAA,GAAU,MAAA;EAEV,iBAAA,GAAoB,MAAA;EAEpB,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,cAAA,EAAgB,2BAAA,GAA8B,MAAA;EAE9C,eAAA;EAEA,IAAA;AAAA;AAAA,iBAqDc,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;AAAA,IACR,oBAAA;AAAA,iBA6BY,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,QAAA;EACA,IAAA;EASA,eAAA;AAAA,IACE,oBAAA;AAAA,iBA4BY,oBAAA,CAAqB,IAAA;EACnC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,oBAAA;EACA,gBAAA;AAAA,IACE,oBAAA;;;UChNa,uBAAA;EAEf,YAAA;EAEA,MAAA,EAAQ,SAAA;EAER,WAAA;EAEA,YAAA;EAEA,KAAA;AAAA;AAAA,cAOW,kBAAA;EAAA,iBACM,OAAA;EAEjB,QAAA,CAAS,KAAA,EAAO,uBAAA;EAIhB,UAAA,CAAW,YAAA,WAAuB,uBAAA;EAMlC,GAAA,CAAI,YAAA,WAAuB,uBAAA;EAI3B,IAAA,CAAA;EASA,IAAA,CAAA,GAAQ,uBAAA;EAIR,KAAA,CAAA;AAAA;AAAA,iBA4Bc,oBAAA,CAAqB,GAAA;EACnC,YAAA;AAAA;AAAA,iBA0Bc,uBAAA,CAAwB,IAAA,UAAc,IAAA,UAAc,KAAA;AAAA,iBAkE9C,wBAAA,CAAyB,IAAA;EAC7C,GAAA,EAAK,eAAA;EACL,GAAA,EAAK,cAAA;EACL,QAAA,EAAU,kBAAA;AAAA,IACR,OAAA;;;iBC5LY,YAAA,CACd,GAAA,EAAK,MAAA,GAAS,WAAA,GAAc,MAAA,IAC5B,QAAA;EACG,IAAA;EAAc,eAAA;AAAA;;;cCJN,wBAAA,EAA0B,mBAAA;AAAA,UAEtB,mBAAA;EACf,KAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAmCe,sBAAA;EAEf,UAAA;EAEA,MAAA,EAAQ,mBAAA;EAMR,SAAA;AAAA;AAAA,iBAqBoB,uBAAA,CAAA,GAA2B,OAAA,CAAQ,sBAAA;;;UCzDxC,cAAA;EAAA,SAmBN,SAAA;EAAA,SAEA,WAAA;EAAA,SAEA,IAAA;EAAA,SAMA,UAAA;EAAA,SAEA,MAAA,WAAiB,aAAA;AAAA;AAAA,iBAgBZ,mBAAA,CAAoB,MAAA,WAAiB,aAAA,KAAkB,cAAA;AAAA,iBAqGvD,2BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,UAAA,WACC,aAAA;AAAA,iBAqBa,4BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,sBACC,aAAA;AAAA,iBAkCa,uBAAA,CAAwB,MAAA,WAAiB,aAAA;;;UCpMxC,uBAAA;EAQf,OAAA;EAMA,mBAAA,IAAuB,MAAA,UAAgB,WAAA,GAAc,cAAA,KAAmB,gBAAA;EAKxE,gBAAA,IAAoB,MAAA,aAAmB,aAAA;EAMvC,QAAA,IAAY,YAAA,aAAyB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAG9B,cAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAOe,gBAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAAU,OAAA;MAAY,QAAA;IAAA;EAAA;EAC1C,OAAA;AAAA;AAAA,UAGe,aAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAClB,WAAA;MACE,WAAA;MACA,eAAA;MACA,YAAA;IAAA;EAAA;EAGJ,OAAA;AAAA;AAAA,iBAWoB,uBAAA,CACpB,KAAA,EAAO,sBAAA,EACP,OAAA,GAAS,uBAAA,GACR,OAAA;;;UClFc,yBAAA;EAEf,SAAA;EAEA,IAAA;AAAA;AAAA,UAGe,uBAAA;EAEf,SAAA;EAEA,kBAAA;EAEA,aAAA;EAEA,IAAA;EASA,UAAA,EAAY,aAAA;IAAgB,IAAA;IAAmB,UAAA;EAAA;AAAA;AAAA,UAUhC,aAAA;EAEf,qBAAA,EAAuB,GAAA,SAAY,yBAAA;EAEnC,gBAAA,EAAkB,GAAA,SAAY,yBAAA;EAE9B,mBAAA,EAAqB,GAAA,SAAY,uBAAA;EAMjC,QAAA;AAAA;AAAA,iBAcc,kBAAA,CAAmB,KAAA,EAAO,SAAA,GAAY,aAAA"}
1
+ {"version":3,"file":"index.d.ts","names":[],"sources":["../src/types/resource.ts","../src/types/state.ts","../src/local/state-resolver.ts","../src/local/local-state-provider.ts","../src/cli/commands/local-state-source.ts","../src/local/embed-config.ts","../src/synthesis/assembly-reader.ts","../src/local/lambda-resolver.ts","../src/cli/commands/local-invoke.ts","../src/local/httpv2-service-integration.ts","../src/local/container-pool.ts","../src/local/vtl-engine.ts","../src/local/integration-response-selector.ts","../src/local/rest-v1-integrations.ts","../src/local/route-discovery.ts","../src/local/cors-handler.ts","../src/local/authorizer-resolver.ts","../src/local/authorizer-cache.ts","../src/local/cognito-jwt.ts","../src/local/sigv4-verify.ts","../src/local/http-server.ts","../src/cli/commands/local-start-api.ts","../src/local/intrinsic-image.ts","../src/local/ecs-task-resolver.ts","../src/cli/commands/local-run-task.ts","../src/cli/commands/local-start-service.ts","../src/local/target-lister.ts","../src/cli/commands/local-list.ts","../src/local/cfn-local-state-provider.ts","../src/local/ssm-parameter-resolver.ts","../src/local/intrinsic-utils.ts","../src/local/intrinsic-lambda-arn.ts","../src/local/parameter-mapping.ts","../src/local/api-gateway-response.ts","../src/local/docker-inspect.ts","../src/local/route-matcher.ts","../src/local/api-gateway-event.ts","../src/local/websocket-route-discovery.ts","../src/local/lambda-authorizer.ts","../src/local/env-resolver.ts","../src/local/stage-resolver.ts","../src/local/cloud-map-registry.ts","../src/local/runtime-image.ts","../src/local/websocket-event.ts","../src/local/websocket-mgmt-api.ts","../src/local/websocket-body.ts","../src/local/docker-version.ts","../src/local/api-server-grouping.ts","../src/local/layer-arn-materializer.ts","../src/local/cloud-map-resolver.ts"],"mappings":";;;;;;;UAGiB,sBAAA;EACf,wBAAA;EACA,WAAA;EACA,UAAA,GAAa,MAAA,SAAe,iBAAA;EAC5B,SAAA,EAAW,MAAA,SAAe,gBAAA;EAC1B,OAAA,GAAU,MAAA,SAAe,cAAA;EACzB,UAAA,GAAa,MAAA;EACb,QAAA,GAAW,MAAA;EAWX,SAAA;EACA,KAAA,GAAQ,MAAA;AAAA;AAAA,UAMO,iBAAA;EACf,IAAA;EACA,OAAA;EACA,WAAA;EACA,aAAA;EACA,cAAA;EACA,qBAAA;AAAA;AAAA,UAMe,gBAAA;EACf,IAAA;EACA,UAAA,GAAa,MAAA;EACb,SAAA;EACA,SAAA;EACA,QAAA,GAAW,MAAA;EACX,cAAA,GAAiB,MAAA;EACjB,YAAA,GAAe,MAAA;EACf,cAAA;EACA,mBAAA;AAAA;AAAA,UAMe,cAAA;EACf,KAAA;EACA,WAAA;EACA,MAAA;IACE,IAAA;EAAA;AAAA;;;UC4Ha,aAAA;EAEf,UAAA;EAGA,YAAA;EAGA,UAAA,EAAY,MAAA;EAcZ,kBAAA,GAAqB,MAAA;EAGrB,UAAA,GAAa,MAAA;EAGb,YAAA;EAGA,QAAA,GAAW,MAAA;EAmBX,cAAA;EAMA,mBAAA;EAyBA,aAAA;AAAA;;;KCtJU,uBAAA;EACN,IAAA;EAAiB,KAAA;AAAA;EACjB,IAAA;EAAoB,MAAA;AAAA;AAAA,UAYT,gBAAA;EACf,SAAA;EACA,MAAA;EACA,SAAA;EACA,SAAA;AAAA;AAAA,UAqBe,kBAAA;EAOf,aAAA,CAAc,UAAA,WAAqB,OAAA;EAQnC,qBAAA,CACE,aAAA,UACA,cAAA,UACA,UAAA,WACC,OAAA;AAAA;AAAA,UAGY,mBAAA;EAEf,SAAA,EAAW,MAAA,SAAe,aAAA;EAa1B,UAAA,GAAa,MAAA;EAEb,gBAAA,GAAmB,gBAAA;EAOnB,kBAAA,GAAqB,kBAAA;EAOrB,cAAA;AAAA;AAAA,iBAiBc,sBAAA,CACd,KAAA,WACA,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,uBAAA;AAAA,iBAmhBmB,2BAAA,CACpB,KAAA,WACA,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,OAAA,CAAQ,uBAAA;AAAA,UAiPM,yBAAA;EAEf,YAAA;EAMA,UAAA,EAAY,KAAA;IAAQ,GAAA;IAAa,MAAA;EAAA;AAAA;AAAA,iBAcnB,0BAAA,CACd,WAAA,EAAa,MAAA,+BACb,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA;EACtD,GAAA,EAAK,MAAA;EAAyB,KAAA,EAAO,yBAAA;AAAA;AAAA,iBA+CpB,+BAAA,CACpB,WAAA,EAAa,MAAA,+BACb,kBAAA,EAAoB,mBAAA,GAAsB,MAAA,SAAe,aAAA,IACxD,OAAA;EAAU,GAAA,EAAK,MAAA;EAAyB,KAAA,EAAO,yBAAA;AAAA;;;UCvgCjC,gBAAA;EAWf,SAAA,EAAW,MAAA,SAAe,aAAA;EAO1B,OAAA,EAAS,MAAA;EAOT,MAAA;AAAA;AAAA,UAsBe,kBAAA;EAAA,SAMN,KAAA;EAQT,IAAA,CAAK,SAAA,UAAmB,WAAA,uBAAkC,OAAA,CAAQ,gBAAA;EAalE,uBAAA,CAAwB,cAAA,WAAyB,OAAA,CAAQ,kBAAA;EA4BzD,0BAAA,EACE,kBAAA,WACC,OAAA,CAAQ,MAAA;EA0BX,4BAAA,EAA8B,QAAA,EAAU,sBAAA,GAAyB,OAAA,CAAQ,MAAA;EAKzE,OAAA;AAAA;;;UCxIe,uBAAA;EAOf,YAAA;EAEA,MAAA;EAEA,OAAA;EAMA,WAAA;EAAA,CAEC,GAAA;AAAA;AAAA,KAQS,yBAAA,IAA6B,OAAA,EAAS,uBAAA,KAA4B,kBAAA;AAAA,KAUlE,mBAAA,GAAsB,MAAA,SAAe,yBAAA;AAAA,iBAUjC,mBAAA,CAAoB,YAAA,oBAAgC,SAAA;AAAA,iBAapD,gBAAA,CAAiB,IAAA,EAAM,IAAA,CAAK,uBAAA;AAAA,iBAgB5B,gBAAA,CACd,OAAA,EAAS,IAAA,CAAK,uBAAA,6BACd,WAAA;AAAA,iBAqCoB,wBAAA,CACpB,OAAA,EAAS,IAAA,CAAK,uBAAA,+BACd,WAAA,uBACC,OAAA;AAAA,cAUU,qBAAA,SAA8B,KAAA;cAC7B,OAAA;AAAA;AAAA,iBAkBE,wCAAA,CACd,OAAA,EAAS,IAAA,CAAK,uBAAA,mBACd,gBAAA;AAAA,iBAiCc,wBAAA,CACd,OAAA,EAAS,uBAAA,EACT,SAAA,UACA,WAAA,sBACA,mBAAA,GAAsB,mBAAA,GACrB,kBAAA;;;UCrNc,mBAAA;EAMf,OAAA;EAOA,UAAA;EAMA,WAAA;EAOA,kBAAA;EAMA,gBAAA;EAMA,SAAA;EAQA,oBAAA;EAOA,YAAA;AAAA;AAAA,UAGe,mBAAA;EACf,OAAA;EACA,UAAA;EACA,WAAA;EACA,kBAAA;EACA,gBAAA;EACA,SAAA;EACA,oBAAA;EACA,YAAA;AAAA;AAAA,iBAsBc,cAAA,CAAe,MAAA,GAAS,mBAAA;AAAA,iBAcxB,cAAA,CAAA,GAAkB,mBAAA;AAAA,iBAKlB,gBAAA,CAAA;;;UCxGC,SAAA;EAEf,SAAA;EAOA,WAAA;EAGA,UAAA;EAGA,QAAA,EAAU,sBAAA;EAGV,iBAAA;EAGA,eAAA;EAGA,MAAA;EAGA,OAAA;EAOA,qBAAA;EAcA,eAAA,GAAkB,MAAA;AAAA;;;UCwDH,sBAAA;EACf,IAAA;EAMA,SAAA;EAQA,GAAA;EAEA,MAAA;EAEA,SAAA;EAEA,IAAA;EAEA,OAAA;AAAA;;;UCLe,+BAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAy5BA,wBAAA,CAAyB,IAAA,GAAM,+BAAA,GAAuC,OAAA;;;KCx9B1E,gBAAA;;;UC7CK,eAAA;EACf,SAAA;EACA,WAAA;EACA,aAAA;EACA,QAAA;EACA,aAAA;EAEA,aAAA;AAAA;AAAA,UAgMe,aAAA;EAMf,OAAA,CAAQ,SAAA,WAAoB,OAAA,CAAQ,eAAA;EAEpC,OAAA,CAAQ,MAAA,EAAQ,eAAA;EAEhB,OAAA,IAAW,OAAA;AAAA;;;cCvGA,kBAAA,SAA2B,KAAA;cAC1B,OAAA;AAAA;;;UCjGG,wBAAA;EAEf,UAAA;EAOA,gBAAA;EAaA,kBAAA,GAAqB,MAAA;EAQrB,iBAAA,GAAoB,MAAA;EAEpB,eAAA;AAAA;AAAA,UAOe,2BAAA;EAEf,KAAA,EAAO,wBAAA;EAEP,UAAA;AAAA;AAAA,iBA0Bc,yBAAA,CACd,OAAA,EAAS,wBAAA,gBACT,WAAA,UACA,kBAAA,YACC,2BAAA;AAAA,iBAwDa,cAAA,CAAe,GAAA;AAAA,iBAwCf,0BAAA,CACd,kBAAA,EAAoB,MAAA,8BACpB,IAAA;EAAQ,aAAA,IAAiB,GAAA,UAAa,KAAA,UAAe,MAAA;AAAA,IACpD,MAAA;AAAA,iBA2Ca,oBAAA,CACd,iBAAA,EAAmB,MAAA,8BACnB,MAAA;EACG,QAAA;EAAkB,WAAA;AAAA;;;UC/GN,qBAAA;EACf,IAAA;EAOA,eAAA;EAEA,SAAA,EAAW,wBAAA;AAAA;AAAA,UA8FI,0BAAA;EACf,IAAA;EAEA,GAAA;EAEA,qBAAA;EAMA,iBAAA,GAAoB,MAAA;EAEpB,SAAA,EAAW,wBAAA;AAAA;AAAA,UAsGI,qBAAA;EACf,IAAA;EACA,GAAA;EACA,qBAAA;EACA,iBAAA,GAAoB,MAAA;EAEpB,gBAAA,GAAmB,MAAA;EACnB,SAAA,EAAW,wBAAA;AAAA;AAAA,UA2II,0BAAA;EACf,IAAA;EAEA,eAAA;EAEA,gBAAA,GAAmB,MAAA;EAEnB,SAAA,EAAW,wBAAA;AAAA;;;KClfD,uBAAA,GACR,qBAAA,GACA,0BAAA,GACA,qBAAA,GACA,0BAAA;AAAA,UAmCa,eAAA;EAEf,MAAA;EAEA,WAAA;EAEA,eAAA;EAEA,MAAA;EAEA,UAAA;EAUA,KAAA;EAgBA,YAAA;EAQA,YAAA;EAWA,UAAA;EAOA,cAAA,GAAiB,MAAA;EAWjB,UAAA;EAsBA,WAAA;IAAgB,MAAA;EAAA;EAgBhB,QAAA;IAAa,UAAA;IAAoB,OAAA,EAAS,MAAA;EAAA;EAgB1C,kBAAA;IACE,OAAA,EAAS,gBAAA;IACT,iBAAA,EAAmB,QAAA,CAAS,MAAA;IAC5B,kBAAA,GAAqB,QAAA,CAAS,MAAA,SAAe,QAAA,CAAS,MAAA;EAAA;EAaxD,iBAAA,GAAoB,uBAAA;EAEpB,UAAA;AAAA;AAAA,iBAoBc,cAAA,CAAe,MAAA,WAAiB,SAAA,KAAc,eAAA;;;UC9J7C,UAAA;EACf,YAAA;EACA,YAAA;EACA,YAAA;EACA,aAAA;EACA,MAAA;EACA,gBAAA;AAAA;AAAA,iBAsBc,sBAAA,CAAuB,QAAA,EAAU,sBAAA,GAAyB,GAAA,SAAY,UAAA;AAAA,iBA4GtE,kCAAA,CACd,QAAA,EAAU,sBAAA,GACT,GAAA,SAAY,UAAA;AAAA,iBAqEC,uBAAA,CACd,QAAA,EAAU,sBAAA,EACV,cAAA;AAAA,UAuJe,iBAAA;EACf,UAAA;EACA,OAAA,EAAS,MAAA;AAAA;AAAA,iBAUK,cAAA,CACd,GAAA;EAAO,MAAA;EAAgB,OAAA,EAAS,MAAA;AAAA,GAChC,MAAA,EAAQ,UAAA,GACP,iBAAA;AAAA,iBAqGa,wBAAA,CACd,GAAA,EAAK,cAAA,EACL,YAAA,sBACA,iBAAA,EAAmB,GAAA,SAAY,UAAA,GAC/B,aAAA;;;UC3fe,qBAAA;EACf,IAAA;EAEA,SAAA;EAEA,eAAA;EAMA,WAAA;EAEA,gBAAA;EAEA,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,IAAA;EACA,SAAA;EACA,eAAA;EAEA,eAAA,EAAiB,aAAA,CAAc,sBAAA;EAE/B,gBAAA;EAEA,UAAA;EACA,UAAA;AAAA;AAAA,UASe,cAAA;EAEf,WAAA;EAEA,MAAA;EAEA,UAAA;AAAA;AAAA,UAGe,yBAAA;EACf,IAAA;EACA,SAAA;EAWA,KAAA,EAAO,aAAA,CAAc,cAAA;EAOrB,WAAA;EAEA,MAAA;EAEA,UAAA;EAYA,UAAA;AAAA;AAAA,UAGe,aAAA;EACf,IAAA;EACA,SAAA;EAEA,MAAA;EAKA,QAAA,EAAU,aAAA;EAMV,MAAA;EACA,UAAA;EACA,UAAA;AAAA;AAAA,UAae,aAAA;EACf,IAAA;EAEA,SAAA;EACA,UAAA;EAYA,UAAA;AAAA;AAAA,KAGU,cAAA,GACR,qBAAA,GACA,uBAAA,GACA,yBAAA,GACA,aAAA,GACA,aAAA;AAAA,KAEQ,sBAAA;EACN,IAAA;EAAgB,IAAA;AAAA;EAChB,IAAA;EAAe,IAAA;AAAA;EACf,IAAA;EAAiB,IAAA;AAAA;EACjB,IAAA;EAAwB,IAAA;AAAA;AAAA,UAucb,aAAA;EACf,KAAA,EAD4B,eAAA;EAE5B,UAAA,GAAa,cAAA;AAAA;AAAA,iBAGC,iBAAA,CACd,MAAA,WAAiB,SAAA,IACjB,MAAA,WAD0B,eAAA,KAEzB,aAAA;;;UCznBc,sBAAA;EAcf,KAAA;EAKA,WAAA;EAMA,OAAA,GAAU,MAAA;EASV,MAAA;AAAA;AAAA,UAQe,eAAA;EAMf,GAAA,CAAI,mBAAA,UAA6B,YAAA,WAAuB,sBAAA;EAIxD,GAAA,CACE,mBAAA,UACA,YAAA,UACA,UAAA,UACA,MAAA,EAAQ,sBAAA;EAGV,KAAA;EAEA,IAAA;AAAA;AAAA,iBAQc,qBAAA,CAAsB,IAAA;EAAQ,GAAA;AAAA,IAA4B,eAAA;;;UC9DhE,OAAA;EAER,GAAA;EAEA,CAAA;EAEA,CAAA;EAEA,GAAA;EAEA,GAAA;EAEA,GAAA;AAAA;AAAA,UAGQ,cAAA;EAER,KAAA,EAAO,GAAA,SAAY,OAAA;EAEnB,SAAA;EAEA,WAAA;AAAA;AAAA,UAQe,SAAA;EACf,aAAA,CAAc,OAAA,WAAkB,OAAA,CAAQ,cAAA;EAExC,IAAA,CAAK,OAAA,WAAkB,cAAA;EACvB,KAAA;AAAA;AAAA,iBAac,eAAA,CACd,IAAA;EACE,SAAA,IACE,GAAA,aACG,OAAA;IAAU,EAAA;IAAa,MAAA;IAAgB,IAAA,QAAY,OAAA;EAAA;EACxD,GAAA;EACA,KAAA;EAEA,YAAA;AAAA,IAED,SAAA;AAAA,iBA+Ea,mBAAA,CAAoB,MAAA,UAAgB,UAAA;AAAA,iBAQpC,sBAAA,CAAuB,MAAA;AAAA,iBAsCjB,gBAAA,CACpB,UAAA,EAAY,yBAAA,EACZ,mBAAA,sBACA,SAAA,EAAW,SAAA,EACX,IAAA;EAAQ,GAAA;EAAoB,MAAA,GAAS,GAAA;AAAA,IACpC,OAAA,CAAQ,sBAAA;EAA2B,YAAA;EAAkC,UAAA;AAAA;AAAA,iBAuElD,mBAAA,CACpB,UAAA,EAAY,aAAA,EACZ,mBAAA,sBACA,SAAA,EAAW,SAAA,EACX,IAAA;EAAQ,GAAA;EAAoB,MAAA,GAAS,GAAA;AAAA,IACpC,OAAA,CAAQ,sBAAA;EAA2B,YAAA;EAAkC,UAAA;AAAA;;;UChNvD,mBAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,KAQU,iBAAA,SAA0B,OAAA,CAAQ,mBAAA;AAAA,iBAU9B,wBAAA,CAAA,GAA4B,iBAAA;;;UCC3B,WAAA;EACf,MAAA,WAAiB,aAAA;EACjB,IAAA,EAAM,aAAA;EACN,iBAAA,EAAmB,GAAA,SAAY,UAAA;AAAA;AAAA,UAGhB,qBAAA;EAEf,KAAA,EAAO,WAAA;EAEP,YAAA;EAEA,IAAA;EAEA,IAAA;EAEA,eAAA,GAAkB,eAAA;EAElB,SAAA,GAAY,SAAA;EASZ,cAAA,GAAiB,GAAA;EAgBjB,IAAA,GAAO,gBAAA;EAQP,sBAAA,GAAyB,iBAAA;EAOzB,qBAAA,GAAwB,GAAA;EASxB,WAAA;EAWA,aAAA;EAiBA,WAAA,IAAe,GAAA,EAAK,eAAA,EAAiB,GAAA,EAAK,cAAA,KAAmB,OAAA;AAAA;AAAA,UAc9C,gBAAA;EACf,KAAA,EAAO,MAAA;EACP,OAAA,EAAS,MAAA;EACT,MAAA,EAAQ,MAAA;AAAA;AAAA,UAGO,gBAAA;EAEf,IAAA;EAEA,IAAA;EAKA,MAAA;EAEA,MAAA,EAAQ,MAAA;EAKR,KAAA,QAAa,OAAA;EAQb,cAAA,GAAiB,IAAA,EAAM,WAAA,KAAgB,WAAA;EAEvC,cAAA,QAAsB,WAAA;AAAA;AAAA,iBAQF,cAAA,CAAe,IAAA,EAAM,qBAAA,GAAwB,OAAA,CAAQ,gBAAA;AAAA,iBAygD3D,yBAAA,CAA0B,IAAA;EACxC,cAAA;EACA,QAAA;EACA,OAAA;AAAA,IACE,gBAAA;;;UCxgDa,iCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,UAwoCC,eAAA;EAAA,SAEN,QAAA,EAAU,aAAA;EAAA,SAEV,SAAA;AAAA;AAAA,iBA2BK,sBAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,qBACA,UAAA,sBACC,eAAA;AAAA,iBAskEa,0BAAA,CAA2B,IAAA,GAAM,iCAAA,GAAyC,OAAA;;;UCh9GzE,sBAAA;EAOf,gBAAA;IACE,SAAA;IACA,MAAA;IACA,SAAA;IACA,SAAA;EAAA;EASF,cAAA,GAAiB,MAAA,SAAe,aAAA;EAWhC,eAAA,GAAkB,MAAA;AAAA;AAAA,iBAyBJ,gCAAA,CACd,MAAA,sBACA,SAAA;EACG,SAAA;EAAoB,MAAA;EAAgB,SAAA;EAAmB,SAAA;AAAA;AAAA,KAiChD,oBAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAkB,GAAA;AAAA;EAClB,IAAA;EAAqB,aAAA;AAAA;EACrB,IAAA;EAA0B,MAAA;AAAA;AAAA,iBA2BhB,qBAAA,CACd,GAAA,WACA,SAAA,EAAW,MAAA,SAAe,gBAAA,GAC1B,OAAA,EAAS,sBAAA,eACR,oBAAA;AAAA,iBAwSa,2BAAA,CACd,IAAA,UACA,SAAA,EAAW,MAAA,SAAe,gBAAA,GAC1B,OAAA,EAAS,sBAAA;;;cCzTE,sBAAA,SAA+B,KAAA;cAC9B,OAAA;AAAA;;;UC7CG,gCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA0gBA,yBAAA,CAA0B,IAAA,GAAM,gCAAA,GAAwC,OAAA;;;UChhBvE,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAqrBA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UCnxBc,WAAA;EAEf,SAAA;EAEA,SAAA;EAKA,WAAA;EAMA,WAAA;EAOA,IAAA;AAAA;AAAA,UAOe,aAAA;EAEf,OAAA,EAAS,WAAA;EAMT,IAAA,EAAM,WAAA;EAEN,WAAA,EAAa,WAAA;EAEb,kBAAA,EAAoB,WAAA;AAAA;AAAA,iBA+GN,WAAA,CAAY,MAAA,WAAiB,SAAA,KAAc,aAAA;AAAA,iBAiB3C,YAAA,CAAa,OAAA,EAAS,aAAA;;;UC/IrB,6BAAA;EAEf,WAAA,GAAc,mBAAA;AAAA;AAAA,UAuCC,0BAAA;EAOf,IAAA;AAAA;AAAA,iBAYc,mBAAA,CACd,OAAA,EAAS,aAAA,EACT,OAAA,UACA,OAAA,GAAS,0BAAA;AAAA,iBA2DK,sBAAA,CAAuB,IAAA,GAAM,6BAAA,GAAqC,OAAA;;;UCpFjE,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,MAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAmCE,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EA2DE,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA;;;UC9VQ,eAAA;EAEf,SAAA;EAEA,OAAA;EAEA,MAAA;AAAA;AAAA,iBAec,uBAAA,CACd,QAAA,EAAU,IAAA,CAAK,sBAAA,8BACd,eAAA;AAAA,iBAgDmB,oBAAA,CACpB,MAAA,EAAQ,SAAA,EACR,IAAA,WAAe,eAAA,IACf,KAAA,WACC,OAAA,CAAQ,MAAA;;;iBCjHK,gBAAA,CAAiB,KAAA;;;KCmCrB,uBAAA;EACN,IAAA;EAAkB,SAAA;AAAA;EAClB,IAAA;EAAqB,MAAA;AAAA;AAAA,iBAuBX,yBAAA,CAA0B,KAAA,YAAiB,uBAAA;;;UCpB1C,uBAAA;EAEf,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,WAAA,EAAa,QAAA,CAAS,MAAA;EAEtB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAEzB,WAAA;EAEA,IAAA;EAEA,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAoBzB,UAAA,GAAa,QAAA,CAAS,MAAA;AAAA;AAAA,KASZ,wBAAA;EACN,IAAA;EAAY,QAAA,EAAU,MAAA;AAAA;EACtB,IAAA;EAAe,MAAA;AAAA;AAAA,iBAQL,mCAAA,CACd,UAAA,EAAY,QAAA,CAAS,MAAA,oBACrB,GAAA,EAAK,uBAAA,GACJ,wBAAA;AAAA,iBAkCa,0BAAA,CAA2B,KAAA,UAAe,GAAA,EAAK,uBAAA;;;UCnH9C,sBAAA;EACf,UAAA;EAMA,OAAA,EAAS,MAAA;EAET,OAAA;EAEA,IAAA,EAAM,MAAA;AAAA;AAAA,iBAgBQ,uBAAA,CACd,OAAA,WACA,OAAA,gBACC,sBAAA;;;iBChCmB,qBAAA,CACpB,WAAA,UACA,WAAA,WACC,OAAA;;;UCHc,gBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;AAAA;AAAA,iBAQF,UAAA,CACd,MAAA,UACA,WAAA,UACA,MAAA,WAAiB,eAAA,KAChB,gBAAA;;;UC5Bc,mBAAA;EAEf,MAAA;EAKA,MAAA;EAMA,OAAA,EAAS,MAAA;EAET,IAAA,EAAM,MAAA;EAEN,QAAA;EAwBA,UAAA,GAAa,MAAA;AAAA;AAAA,UAQE,mBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;EAEhB,WAAA;AAAA;AAAA,iBA+Bc,mBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,iBA4Ea,gBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,KAiFS,sBAAA;EACN,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAyB,MAAA,EAAQ,MAAA;AAAA;EACjC,IAAA;EAAqB,MAAA,EAAQ,MAAA;EAAyB,MAAA;AAAA;AAAA,iBAY5C,sBAAA,CACd,KAAA,EAAO,MAAA,mBACP,OAAA,EAAS,sBAAA,GACR,MAAA;;;UC3Pc,sBAAA;EAEf,YAAA;EAEA,YAAA;EAEA,UAAA;EAMA,UAAA;EAQA,wBAAA;EAOA,KAAA;EAaA,MAAA,EAAQ,mBAAA;EAiBR,WAAA;IAAgB,MAAA;EAAA;AAAA;AAAA,UAID,mBAAA;EAEf,QAAA;EAEA,qBAAA;EAEA,eAAA;EAEA,UAAA;AAAA;AAAA,iBAuBc,qBAAA,CAAsB,MAAA,WAAiB,SAAA;EACrD,IAAA,EAAM,sBAAA;EACN,MAAA;AAAA;AAAA,iBA8Bc,4BAAA,CACd,MAAA,WAAiB,SAAA,KAChB,sBAAA;AAAA,iBAgJa,4BAAA,CAA6B,IAAA;;;UC3Q5B,4BAAA;EAEf,MAAA;EAEA,OAAA,EAAS,MAAA;EAET,qBAAA,EAAuB,MAAA;EAEvB,cAAA,EAAgB,MAAA;EAEhB,QAAA;EAEA,WAAA;EAEA,KAAA;AAAA;AAAA,UAGe,2BAAA;EAEf,IAAA,EAAM,aAAA;EAEN,YAAA;EAMA,SAAA;EAEA,aAAA;EAEA,SAAA;AAAA;AAAA,iBAWc,cAAA,CAAe,IAAA;EAC7B,KAAA;EACA,SAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,iBAoBoB,qBAAA,CACpB,UAAA,EAAY,qBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyBhB,uBAAA,CACpB,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyEtB,0BAAA,CACd,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA;EACN,YAAA;EAAsB,OAAA;AAAA;AAAA,iBAmRX,0BAAA,CACd,MAAA,EAAQ,sBAAA,EACR,SAAA,WACC,sBAAA;;;UChcc,mBAAA;EAEf,QAAA,EAAU,MAAA;EAEV,UAAA;AAAA;AAAA,UAGe,eAAA;EAEf,UAAA,GAAa,MAAA;EAAA,CAKZ,sBAAA,WAAiC,MAAA;AAAA;AAAA,iBAwBpB,cAAA,CACd,SAAA,UACA,WAAA,sBACA,WAAA,EAAa,MAAA,+BACb,SAAA,GAAY,eAAA,GACX,mBAAA;;;UCxCc,aAAA;EAEf,cAAA;EAEA,SAAA;EAEA,UAAA;EAEA,SAAA,EAAW,MAAA;AAAA;AAAA,iBAgCG,aAAA,CACd,QAAA,EAAU,sBAAA,EACV,aAAA,YACC,GAAA,SAAY,aAAA;AAAA,iBA4HC,kBAAA,CACd,MAAA,EAAQ,eAAA,IACR,QAAA,EAAU,GAAA,SAAY,aAAA;;;UCpKP,kBAAA;EAEf,EAAA;EAEA,IAAA;EAEA,QAAA;AAAA;AAAA,UAIe,kBAAA;EAAA,SAEN,IAAA;EAAA,SAEA,QAAA;AAAA;AAAA,UAgBM,eAAA;EACf,SAAA;EACA,aAAA;EACA,SAAA,EAAW,aAAA,CAAc,kBAAA;EAEzB,OAAA;AAAA;AAAA,cAmBW,gBAAA;EAAA,iBAEM,MAAA;EAAA,iBAYA,UAAA;EAcjB,QAAA,CACE,SAAA,UACA,aAAA,UACA,QAAA,EAAU,kBAAA,GACT,kBAAA;EAmCH,aAAA,CAAc,KAAA,UAAe,UAAA;EA6B7B,UAAA,CAAW,MAAA,EAAQ,kBAAA;EAenB,iBAAA,CAAkB,cAAA;EAmBlB,MAAA,CAAO,SAAA,UAAmB,aAAA,WAAwB,aAAA,CAAc,kBAAA;EAahE,WAAA,CAAY,KAAA,WAAgB,aAAA,CAAc,kBAAA;EAsB1C,iBAAA,CAAkB,qBAAA;EAiClB,IAAA,CAAA,GAAQ,aAAA,CAAc,eAAA;EA0BtB,OAAA,CAAA;AAAA;;;iBCnOc,mBAAA,CAAoB,OAAA;AAAA,iBAgBpB,2BAAA,CAA4B,OAAA;AAAA,iBA6E5B,2BAAA,CAA4B,OAAA;;;UC3I3B,0BAAA;EAEf,OAAA,EAAS,MAAA;EAET,cAAA;EAEA,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,QAAA;EAEA,SAAA;AAAA;AAAA,UAQe,2BAAA;EACf,QAAA;EACA,SAAA;EACA,YAAA;EACA,iBAAA;EACA,WAAA;EACA,gBAAA;EACA,gBAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,UAAA;EACA,KAAA;EACA,UAAA;EACA,QAAA;IACE,SAAA;IACA,QAAA;IACA,SAAA;EAAA;AAAA;AAAA,UAKa,oBAAA;EAEf,OAAA,GAAU,MAAA;EAEV,iBAAA,GAAoB,MAAA;EAEpB,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,cAAA,EAAgB,2BAAA,GAA8B,MAAA;EAE9C,eAAA;EAEA,IAAA;AAAA;AAAA,iBAqDc,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;AAAA,IACR,oBAAA;AAAA,iBA6BY,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,QAAA;EACA,IAAA;EASA,eAAA;AAAA,IACE,oBAAA;AAAA,iBA4BY,oBAAA,CAAqB,IAAA;EACnC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,oBAAA;EACA,gBAAA;AAAA,IACE,oBAAA;;;UChNa,uBAAA;EAEf,YAAA;EAEA,MAAA,EAAQ,SAAA;EAER,WAAA;EAEA,YAAA;EAEA,KAAA;AAAA;AAAA,cAOW,kBAAA;EAAA,iBACM,OAAA;EAEjB,QAAA,CAAS,KAAA,EAAO,uBAAA;EAIhB,UAAA,CAAW,YAAA,WAAuB,uBAAA;EAMlC,GAAA,CAAI,YAAA,WAAuB,uBAAA;EAI3B,IAAA,CAAA;EASA,IAAA,CAAA,GAAQ,uBAAA;EAIR,KAAA,CAAA;AAAA;AAAA,iBA4Bc,oBAAA,CAAqB,GAAA;EACnC,YAAA;AAAA;AAAA,iBA0Bc,uBAAA,CAAwB,IAAA,UAAc,IAAA,UAAc,KAAA;AAAA,iBAkE9C,wBAAA,CAAyB,IAAA;EAC7C,GAAA,EAAK,eAAA;EACL,GAAA,EAAK,cAAA;EACL,QAAA,EAAU,kBAAA;AAAA,IACR,OAAA;;;iBC5LY,YAAA,CACd,GAAA,EAAK,MAAA,GAAS,WAAA,GAAc,MAAA,IAC5B,QAAA;EACG,IAAA;EAAc,eAAA;AAAA;;;cCJN,wBAAA,EAA0B,mBAAA;AAAA,UAEtB,mBAAA;EACf,KAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAmCe,sBAAA;EAEf,UAAA;EAEA,MAAA,EAAQ,mBAAA;EAMR,SAAA;AAAA;AAAA,iBAqBoB,uBAAA,CAAA,GAA2B,OAAA,CAAQ,sBAAA;;;UCzDxC,cAAA;EAAA,SAmBN,SAAA;EAAA,SAEA,WAAA;EAAA,SAEA,IAAA;EAAA,SAMA,UAAA;EAAA,SAEA,MAAA,WAAiB,aAAA;AAAA;AAAA,iBAgBZ,mBAAA,CAAoB,MAAA,WAAiB,aAAA,KAAkB,cAAA;AAAA,iBAqGvD,2BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,UAAA,WACC,aAAA;AAAA,iBAqBa,4BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,sBACC,aAAA;AAAA,iBAkCa,uBAAA,CAAwB,MAAA,WAAiB,aAAA;;;UCpMxC,uBAAA;EAQf,OAAA;EAMA,mBAAA,IAAuB,MAAA,UAAgB,WAAA,GAAc,cAAA,KAAmB,gBAAA;EAKxE,gBAAA,IAAoB,MAAA,aAAmB,aAAA;EAMvC,QAAA,IAAY,YAAA,aAAyB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAG9B,cAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAOe,gBAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAAU,OAAA;MAAY,QAAA;IAAA;EAAA;EAC1C,OAAA;AAAA;AAAA,UAGe,aAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAClB,WAAA;MACE,WAAA;MACA,eAAA;MACA,YAAA;IAAA;EAAA;EAGJ,OAAA;AAAA;AAAA,iBAWoB,uBAAA,CACpB,KAAA,EAAO,sBAAA,EACP,OAAA,GAAS,uBAAA,GACR,OAAA;;;UClFc,yBAAA;EAEf,SAAA;EAEA,IAAA;AAAA;AAAA,UAGe,uBAAA;EAEf,SAAA;EAEA,kBAAA;EAEA,aAAA;EAEA,IAAA;EASA,UAAA,EAAY,aAAA;IAAgB,IAAA;IAAmB,UAAA;EAAA;AAAA;AAAA,UAUhC,aAAA;EAEf,qBAAA,EAAuB,GAAA,SAAY,yBAAA;EAEnC,gBAAA,EAAkB,GAAA,SAAY,yBAAA;EAE9B,mBAAA,EAAqB,GAAA,SAAY,uBAAA;EAMjC,QAAA;AAAA;AAAA,iBAcc,kBAAA,CAAmB,KAAA,EAAO,SAAA,GAAY,aAAA"}
package/dist/index.js CHANGED
@@ -1,4 +1,4 @@
1
- import { c as getEmbedConfig, l as resetEmbedConfig, u as setEmbedConfig } from "./docker-cmd-DvoehoBl.js";
2
- import { $ as createLocalInvokeCommand, A as buildCorsConfigByApiId, At as resolveLambdaArnIntrinsic, B as selectIntegrationResponse, C as verifyJwtAuthorizer, Ct as countTargets, D as invokeRequestAuthorizer, Dt as parseSelectionExpressionPath, E as evaluateCachedLambdaPolicy, Et as discoverWebSocketApisOrThrow, F as applyAuthorizerOverlay, G as bufferToBody, H as VtlEvaluationError, I as buildHttpApiV2Event, J as handleConnectionsRequest, K as ConnectionRegistry, L as buildRestV1Event, M as matchPreflight, N as matchRoute, O as invokeTokenAuthorizer, Ot as discoverRoutes, P as translateLambdaResponse, Q as buildMessageEvent, R as evaluateResponseParameters, S as verifyCognitoJwt, St as resolveSsmParameters, T as computeRequestIdentityHash, Tt as discoverWebSocketApis, U as HOST_GATEWAY_MIN_VERSION, V as tryParseStatus, W as probeHostGatewaySupport, X as buildConnectEvent, Y as parseConnectionsPath, Z as buildDisconnectEvent, _ as resolveSelectionExpression, _t as resolveCfnFallbackRegion, a as CloudMapRegistry, at as substituteAgainstStateAsync, b as buildJwksUrlFromIssuer, bt as CfnLocalStateProvider, c as createLocalStartApiCommand, ct as resolveEnvVars, d as attachStageContext, dt as substituteImagePlaceholders, et as resolveRuntimeCodeMountPath, f as buildStageMap, ft as tryResolveImageFnJoin, g as groupRoutesByServer, gt as rejectExplicitCfnStackWithMultipleStacks, h as filterRoutesByApiIdentifiers, ht as isCfnFlagPresent, i as buildCloudMapIndex, it as substituteAgainstState, j as buildCorsConfigFromCloudFrontChain, k as applyCorsResponseHeaders, kt as pickRefLogicalId, l as resolveApiTargetSubset, lt as materializeLayerFromArn, m as filterRoutesByApiIdentifier, mt as createLocalStateProvider, n as formatTargetListing, nt as resolveRuntimeImage, o as getContainerNetworkIp, ot as substituteEnvVarsFromState, p as availableApiIdentifiers, pt as LocalStateSourceError, q as buildMgmtEndpointEnvUrl, r as createLocalStartServiceCommand, rt as EcsTaskResolutionError, s as createLocalRunTaskCommand, st as substituteEnvVarsFromStateAsync, t as createLocalListCommand, tt as resolveRuntimeFileExtension, u as createAuthorizerCache, ut as derivePseudoParametersFromRegion, v as resolveServiceIntegrationParameters, vt as resolveCfnRegion, w as buildMethodArn, wt as listTargets, x as createJwksCache, xt as collectSsmParameterRefs, y as buildCognitoJwksUrl, yt as resolveCfnStackName, z as pickResponseTemplate } from "./local-list-DHtTSGOt.js";
1
+ import { c as getEmbedConfig, l as resetEmbedConfig, u as setEmbedConfig } from "./docker-cmd--8TRSn9z.js";
2
+ import { $ as handleConnectionsRequest, A as invokeRequestAuthorizer, At as discoverWebSocketApis, B as applyAuthorizerOverlay, C as buildJwksUrlFromIssuer, Ct as resolveCfnRegion, D as buildMethodArn, Dt as resolveSsmParameters, E as verifyJwtAuthorizer, Et as collectSsmParameterRefs, F as buildCorsConfigFromCloudFrontChain, Ft as resolveLambdaArnIntrinsic, G as selectIntegrationResponse, H as buildRestV1Event, I as isFunctionUrlOacFronted, J as HOST_GATEWAY_MIN_VERSION, K as tryParseStatus, L as matchPreflight, M as attachAuthorizers, Mt as parseSelectionExpressionPath, N as applyCorsResponseHeaders, Nt as discoverRoutes, O as computeRequestIdentityHash, Ot as countTargets, P as buildCorsConfigByApiId, Pt as pickRefLogicalId, Q as buildMgmtEndpointEnvUrl, R as matchRoute, S as buildCognitoJwksUrl, St as resolveCfnFallbackRegion, T as verifyCognitoJwt, Tt as CfnLocalStateProvider, U as evaluateResponseParameters, V as buildHttpApiV2Event, W as pickResponseTemplate, X as bufferToBody, Y as probeHostGatewaySupport, Z as ConnectionRegistry, _ as readMtlsMaterialsFromDisk, _t as tryResolveImageFnJoin, a as CloudMapRegistry, at as resolveRuntimeCodeMountPath, b as resolveServiceIntegrationParameters, bt as isCfnFlagPresent, c as createLocalStartApiCommand, ct as EcsTaskResolutionError, d as attachStageContext, dt as substituteEnvVarsFromState, et as parseConnectionsPath, f as buildStageMap, ft as substituteEnvVarsFromStateAsync, g as groupRoutesByServer, gt as substituteImagePlaceholders, h as filterRoutesByApiIdentifiers, ht as derivePseudoParametersFromRegion, i as buildCloudMapIndex, it as createLocalInvokeCommand, j as invokeTokenAuthorizer, jt as discoverWebSocketApisOrThrow, k as evaluateCachedLambdaPolicy, kt as listTargets, l as resolveApiTargetSubset, lt as substituteAgainstState, m as filterRoutesByApiIdentifier, mt as materializeLayerFromArn, n as formatTargetListing, nt as buildDisconnectEvent, o as getContainerNetworkIp, ot as resolveRuntimeFileExtension, p as availableApiIdentifiers, pt as resolveEnvVars, q as VtlEvaluationError, r as createLocalStartServiceCommand, rt as buildMessageEvent, s as createLocalRunTaskCommand, st as resolveRuntimeImage, t as createLocalListCommand, tt as buildConnectEvent, u as createAuthorizerCache, ut as substituteAgainstStateAsync, v as startApiServer, vt as LocalStateSourceError, w as createJwksCache, wt as resolveCfnStackName, x as defaultCredentialsLoader, xt as rejectExplicitCfnStackWithMultipleStacks, y as resolveSelectionExpression, yt as createLocalStateProvider, z as translateLambdaResponse } from "./local-list-DdmjsVLF.js";
3
3
 
4
- export { CfnLocalStateProvider, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalStateSourceError, VtlEvaluationError, applyAuthorizerOverlay, applyCorsResponseHeaders, attachStageContext, availableApiIdentifiers, bufferToBody, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, collectSsmParameterRefs, computeRequestIdentityHash, countTargets, createAuthorizerCache, createJwksCache, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatTargetListing, getContainerNetworkIp, getEmbedConfig, groupRoutesByServer, handleConnectionsRequest, invokeRequestAuthorizer, invokeTokenAuthorizer, isCfnFlagPresent, listTargets, matchPreflight, matchRoute, materializeLayerFromArn, parseConnectionsPath, parseSelectionExpressionPath, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveApiTargetSubset, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSsmParameters, selectIntegrationResponse, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync, substituteImagePlaceholders, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer };
4
+ export { CfnLocalStateProvider, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalStateSourceError, VtlEvaluationError, applyAuthorizerOverlay, applyCorsResponseHeaders, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, collectSsmParameterRefs, computeRequestIdentityHash, countTargets, createAuthorizerCache, createJwksCache, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatTargetListing, getContainerNetworkIp, getEmbedConfig, groupRoutesByServer, handleConnectionsRequest, invokeRequestAuthorizer, invokeTokenAuthorizer, isCfnFlagPresent, isFunctionUrlOacFronted, listTargets, matchPreflight, matchRoute, materializeLayerFromArn, parseConnectionsPath, parseSelectionExpressionPath, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveApiTargetSubset, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSsmParameters, selectIntegrationResponse, setEmbedConfig, startApiServer, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync, substituteImagePlaceholders, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer };
@@ -1,4 +1,4 @@
1
- import { a as runDockerStreaming, c as getEmbedConfig, i as runDockerForeground, n as formatDockerLoginError, o as spawnStreaming, r as getDockerCmd, s as getLogger, u as setEmbedConfig } from "./docker-cmd-DvoehoBl.js";
1
+ import { a as runDockerStreaming, c as getEmbedConfig, i as runDockerForeground, n as formatDockerLoginError, o as spawnStreaming, r as getDockerCmd, s as getLogger, u as setEmbedConfig } from "./docker-cmd--8TRSn9z.js";
2
2
  import { cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
3
3
  import { tmpdir } from "node:os";
4
4
  import * as path from "node:path";
@@ -13030,14 +13030,15 @@ async function verifySigV4(req, loadCredentials, opts = {}) {
13030
13030
  local = await loadCredentials();
13031
13031
  } catch (err) {
13032
13032
  const reason = err instanceof Error ? err.message : String(err);
13033
+ const { sigV4StrictByDefault, sigV4OptFlag: optFlag } = getEmbedConfig();
13033
13034
  if (opts.strict && !opts.oacFronted) {
13034
- logger.warn(`AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified. --strict-sigv4 is set, so cdk-local denies unverifiable IAM requests; remove --strict-sigv4 to warn-and-pass (the default), or configure AWS credentials cdk-local can read.`);
13035
+ logger.warn(sigV4StrictByDefault ? `AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified. cdk-local denies unverifiable IAM requests by default; pass ${optFlag} to warn-and-pass, or configure AWS credentials cdk-local can read.` : `AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified. ${optFlag} is set, so cdk-local denies unverifiable IAM requests; remove ${optFlag} to warn-and-pass (the default), or configure AWS credentials cdk-local can read.`);
13035
13036
  return {
13036
13037
  allow: false,
13037
13038
  identityHash: void 0
13038
13039
  };
13039
13040
  }
13040
- logger.warn(opts.oacFronted ? `AWS_IAM authorizer: Function URL is fronted by CloudFront OAC (CloudFront re-signs origin requests in production), and local AWS credentials could not be resolved (${reason}). Passing through with unverified principalId 'unverified-no-creds'. Do NOT trust event.requestContext.identity.accessKey in handler code.` : `AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it against AWS's copy of the secret). Passing through with unverified principalId 'unverified-no-creds' — cdk-local's default for unverifiable IAM requests; pass --strict-sigv4 to deny instead. Do NOT trust event.requestContext.identity.accessKey in handler code.`);
13041
+ logger.warn(opts.oacFronted ? `AWS_IAM authorizer: Function URL is fronted by CloudFront OAC (CloudFront re-signs origin requests in production), and local AWS credentials could not be resolved (${reason}). Passing through with unverified principalId 'unverified-no-creds'. Do NOT trust event.requestContext.identity.accessKey in handler code.` : sigV4StrictByDefault ? `AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it against AWS's copy of the secret). ${optFlag} is set; passing through with unverified principalId 'unverified-no-creds'. Do NOT trust event.requestContext.identity.accessKey in handler code.` : `AWS_IAM authorizer: could not resolve local AWS credentials (${reason}), so the request's SigV4 signature cannot be verified locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it against AWS's copy of the secret). Passing through with unverified principalId 'unverified-no-creds' — cdk-local's default for unverifiable IAM requests; pass ${optFlag} to deny instead. Do NOT trust event.requestContext.identity.accessKey in handler code.`);
13041
13042
  return {
13042
13043
  allow: true,
13043
13044
  principalId: "unverified-no-creds",
@@ -13047,9 +13048,10 @@ async function verifySigV4(req, loadCredentials, opts = {}) {
13047
13048
  if (local.accessKeyId.toLowerCase() !== parsed.credentialAccessKeyId.toLowerCase()) {
13048
13049
  const warned = opts.warnedForeignIds;
13049
13050
  const dedupKey = parsed.credentialAccessKeyId.toLowerCase();
13051
+ const { sigV4StrictByDefault, sigV4OptFlag: optFlag } = getEmbedConfig();
13050
13052
  if (opts.strict && !opts.oacFronted) {
13051
13053
  if (!warned || !warned.has(dedupKey)) {
13052
- logger.warn(`AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', which differs from the AWS credentials cdk-local resolved locally — SigV4 (HMAC / shared-secret) can only be verified with the signer's own credentials, never a federated / Cognito Identity Pool / cross-account signer's. --strict-sigv4 is set, so cdk-local denies it; remove --strict-sigv4 to warn-and-pass (the default), or sign the request with the same credentials cdk-local resolves locally.`);
13054
+ logger.warn(sigV4StrictByDefault ? `AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', which differs from the AWS credentials cdk-local resolved locally — SigV4 (HMAC / shared-secret) can only be verified with the signer's own credentials, never a federated / Cognito Identity Pool / cross-account signer's. cdk-local denies it by default; pass ${optFlag} to warn-and-pass, or sign the request with the same credentials cdk-local resolves locally.` : `AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', which differs from the AWS credentials cdk-local resolved locally — SigV4 (HMAC / shared-secret) can only be verified with the signer's own credentials, never a federated / Cognito Identity Pool / cross-account signer's. ${optFlag} is set, so cdk-local denies it; remove ${optFlag} to warn-and-pass (the default), or sign the request with the same credentials cdk-local resolves locally.`);
13053
13055
  warned?.add(dedupKey);
13054
13056
  }
13055
13057
  return {
@@ -13058,7 +13060,7 @@ async function verifySigV4(req, loadCredentials, opts = {}) {
13058
13060
  };
13059
13061
  }
13060
13062
  if (!warned || !warned.has(dedupKey)) {
13061
- logger.warn(opts.oacFronted ? `AWS_IAM authorizer: Function URL is fronted by CloudFront OAC — in production CloudFront re-signs the origin request, so the local client's signature (access-key-id '${parsed.credentialAccessKeyId}') cannot be verified. Passing through with unverified principalId 'unverified-foreign-identity'. Do NOT trust event.requestContext.authorizer.principalId in handler code.` : `AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', a federated / Cognito Identity Pool / cross-account signer cdk-local cannot verify locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it because AWS holds the secret). Passing through with unverified principalId 'unverified-foreign-identity' — cdk-local's default for unverifiable IAM requests; pass --strict-sigv4 to deny instead. Do NOT trust event.requestContext.authorizer.principalId in handler code.`);
13063
+ logger.warn(opts.oacFronted ? `AWS_IAM authorizer: Function URL is fronted by CloudFront OAC — in production CloudFront re-signs the origin request, so the local client's signature (access-key-id '${parsed.credentialAccessKeyId}') cannot be verified. Passing through with unverified principalId 'unverified-foreign-identity'. Do NOT trust event.requestContext.authorizer.principalId in handler code.` : sigV4StrictByDefault ? `AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', a federated / Cognito Identity Pool / cross-account signer cdk-local cannot verify locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it because AWS holds the secret). ${optFlag} is set; passing through with unverified principalId 'unverified-foreign-identity'. Do NOT trust event.requestContext.authorizer.principalId in handler code.` : `AWS_IAM authorizer: request signed with access-key-id '${parsed.credentialAccessKeyId}', a federated / Cognito Identity Pool / cross-account signer cdk-local cannot verify locally (SigV4 is an HMAC shared-secret signature; the deployed API Gateway verifies it because AWS holds the secret). Passing through with unverified principalId 'unverified-foreign-identity' — cdk-local's default for unverifiable IAM requests; pass ${optFlag} to deny instead. Do NOT trust event.requestContext.authorizer.principalId in handler code.`);
13062
13064
  warned?.add(dedupKey);
13063
13065
  }
13064
13066
  return {
@@ -18715,7 +18717,7 @@ function pickEssentialContainerId(instance, service) {
18715
18717
  const defaultWaitForExitImpl = async (containerId) => {
18716
18718
  const { execFile } = await import("node:child_process");
18717
18719
  const { promisify } = await import("node:util");
18718
- const { getDockerCmd } = await import("./docker-cmd-DvoehoBl.js").then((n) => n.t);
18720
+ const { getDockerCmd } = await import("./docker-cmd--8TRSn9z.js").then((n) => n.t);
18719
18721
  const { stdout } = await promisify(execFile)(getDockerCmd(), ["wait", containerId], { maxBuffer: 1024 * 1024 });
18720
18722
  const code = parseInt(stdout.trim(), 10);
18721
18723
  return Number.isFinite(code) ? code : -1;
@@ -18735,7 +18737,7 @@ const EXIT_LOG_TAIL_LINES = 50;
18735
18737
  const defaultReadContainerLogsImpl = async (containerId) => {
18736
18738
  const { execFile } = await import("node:child_process");
18737
18739
  const { promisify } = await import("node:util");
18738
- const { getDockerCmd } = await import("./docker-cmd-DvoehoBl.js").then((n) => n.t);
18740
+ const { getDockerCmd } = await import("./docker-cmd--8TRSn9z.js").then((n) => n.t);
18739
18741
  const { stdout, stderr } = await promisify(execFile)(getDockerCmd(), [
18740
18742
  "logs",
18741
18743
  "--tail",
@@ -19527,5 +19529,5 @@ function createLocalListCommand(opts = {}) {
19527
19529
  }
19528
19530
 
19529
19531
  //#endregion
19530
- export { createLocalInvokeCommand as $, buildCorsConfigByApiId as A, resolveLambdaArnIntrinsic as At, selectIntegrationResponse as B, verifyJwtAuthorizer as C, countTargets as Ct, invokeRequestAuthorizer as D, parseSelectionExpressionPath as Dt, evaluateCachedLambdaPolicy as E, discoverWebSocketApisOrThrow as Et, applyAuthorizerOverlay as F, bufferToBody as G, VtlEvaluationError as H, buildHttpApiV2Event as I, handleConnectionsRequest as J, ConnectionRegistry as K, buildRestV1Event as L, matchPreflight as M, matchRoute as N, invokeTokenAuthorizer as O, discoverRoutes as Ot, translateLambdaResponse as P, buildMessageEvent as Q, evaluateResponseParameters as R, verifyCognitoJwt as S, resolveSsmParameters as St, computeRequestIdentityHash as T, discoverWebSocketApis as Tt, HOST_GATEWAY_MIN_VERSION as U, tryParseStatus as V, probeHostGatewaySupport as W, buildConnectEvent as X, parseConnectionsPath as Y, buildDisconnectEvent as Z, resolveSelectionExpression as _, resolveCfnFallbackRegion as _t, CloudMapRegistry as a, substituteAgainstStateAsync as at, buildJwksUrlFromIssuer as b, CfnLocalStateProvider as bt, createLocalStartApiCommand as c, resolveEnvVars as ct, attachStageContext as d, substituteImagePlaceholders as dt, resolveRuntimeCodeMountPath as et, buildStageMap as f, tryResolveImageFnJoin as ft, groupRoutesByServer as g, rejectExplicitCfnStackWithMultipleStacks as gt, filterRoutesByApiIdentifiers as h, isCfnFlagPresent as ht, buildCloudMapIndex as i, substituteAgainstState as it, buildCorsConfigFromCloudFrontChain as j, applyCorsResponseHeaders as k, pickRefLogicalId as kt, resolveApiTargetSubset as l, materializeLayerFromArn as lt, filterRoutesByApiIdentifier as m, createLocalStateProvider as mt, formatTargetListing as n, resolveRuntimeImage as nt, getContainerNetworkIp as o, substituteEnvVarsFromState as ot, availableApiIdentifiers as p, LocalStateSourceError as pt, buildMgmtEndpointEnvUrl as q, createLocalStartServiceCommand as r, EcsTaskResolutionError as rt, createLocalRunTaskCommand as s, substituteEnvVarsFromStateAsync as st, createLocalListCommand as t, resolveRuntimeFileExtension as tt, createAuthorizerCache as u, derivePseudoParametersFromRegion as ut, resolveServiceIntegrationParameters as v, resolveCfnRegion as vt, buildMethodArn as w, listTargets as wt, createJwksCache as x, collectSsmParameterRefs as xt, buildCognitoJwksUrl as y, resolveCfnStackName as yt, pickResponseTemplate as z };
19531
- //# sourceMappingURL=local-list-DHtTSGOt.js.map
19532
+ export { handleConnectionsRequest as $, invokeRequestAuthorizer as A, discoverWebSocketApis as At, applyAuthorizerOverlay as B, buildJwksUrlFromIssuer as C, resolveCfnRegion as Ct, buildMethodArn as D, resolveSsmParameters as Dt, verifyJwtAuthorizer as E, collectSsmParameterRefs as Et, buildCorsConfigFromCloudFrontChain as F, resolveLambdaArnIntrinsic as Ft, selectIntegrationResponse as G, buildRestV1Event as H, isFunctionUrlOacFronted as I, HOST_GATEWAY_MIN_VERSION as J, tryParseStatus as K, matchPreflight as L, attachAuthorizers as M, parseSelectionExpressionPath as Mt, applyCorsResponseHeaders as N, discoverRoutes as Nt, computeRequestIdentityHash as O, countTargets as Ot, buildCorsConfigByApiId as P, pickRefLogicalId as Pt, buildMgmtEndpointEnvUrl as Q, matchRoute as R, buildCognitoJwksUrl as S, resolveCfnFallbackRegion as St, verifyCognitoJwt as T, CfnLocalStateProvider as Tt, evaluateResponseParameters as U, buildHttpApiV2Event as V, pickResponseTemplate as W, bufferToBody as X, probeHostGatewaySupport as Y, ConnectionRegistry as Z, readMtlsMaterialsFromDisk as _, tryResolveImageFnJoin as _t, CloudMapRegistry as a, resolveRuntimeCodeMountPath as at, resolveServiceIntegrationParameters as b, isCfnFlagPresent as bt, createLocalStartApiCommand as c, EcsTaskResolutionError as ct, attachStageContext as d, substituteEnvVarsFromState as dt, parseConnectionsPath as et, buildStageMap as f, substituteEnvVarsFromStateAsync as ft, groupRoutesByServer as g, substituteImagePlaceholders as gt, filterRoutesByApiIdentifiers as h, derivePseudoParametersFromRegion as ht, buildCloudMapIndex as i, createLocalInvokeCommand as it, invokeTokenAuthorizer as j, discoverWebSocketApisOrThrow as jt, evaluateCachedLambdaPolicy as k, listTargets as kt, resolveApiTargetSubset as l, substituteAgainstState as lt, filterRoutesByApiIdentifier as m, materializeLayerFromArn as mt, formatTargetListing as n, buildDisconnectEvent as nt, getContainerNetworkIp as o, resolveRuntimeFileExtension as ot, availableApiIdentifiers as p, resolveEnvVars as pt, VtlEvaluationError as q, createLocalStartServiceCommand as r, buildMessageEvent as rt, createLocalRunTaskCommand as s, resolveRuntimeImage as st, createLocalListCommand as t, buildConnectEvent as tt, createAuthorizerCache as u, substituteAgainstStateAsync as ut, startApiServer as v, LocalStateSourceError as vt, createJwksCache as w, resolveCfnStackName as wt, defaultCredentialsLoader as x, rejectExplicitCfnStackWithMultipleStacks as xt, resolveSelectionExpression as y, createLocalStateProvider as yt, translateLambdaResponse as z };
19533
+ //# sourceMappingURL=local-list-DdmjsVLF.js.map