cdk-local 0.61.0 → 0.61.1

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $t as isCfnFlagPresent, Gt as getEmbedConfig, Jt as ExtraStateProviders, Kt as resetEmbedConfig, Qt as createLocalStateProvider, Wt as CdkLocalEmbedConfig, Xt as LocalStateSourceError, Yt as LocalStateProviderFactory, Zt as LocalStateSourceOptions, _n as substituteEnvVarsFromStateAsync, an as LocalStateRecord, cn as collectSsmParameterRefs, d as createLocalStartApiCommand, dn as PseudoParameters, en as rejectExplicitCfnStackWithMultipleStacks, fn as StateEnvSubstitutionAudit, gn as substituteEnvVarsFromState, hn as substituteAgainstStateAsync, i as listTargets, in as LocalStateProvider, l as CreateLocalStartApiCommandOptions, ln as resolveSsmParameters, mn as substituteAgainstState, n as TargetListing, nn as resolveCfnRegion, on as ResolvedSsmParameters, pn as SubstitutionContext, qt as setEmbedConfig, r as countTargets, rn as resolveCfnStackName, sn as SsmParameterRef, t as TargetEntry, tn as resolveCfnFallbackRegion, un as CrossStackResolver, vn as CloudFormationTemplate } from "./target-lister-dwdfzm_d.js";
+import { $t as isCfnFlagPresent, Gt as getEmbedConfig, Jt as ExtraStateProviders, Kt as resetEmbedConfig, Qt as createLocalStateProvider, Wt as CdkLocalEmbedConfig, Xt as LocalStateSourceError, Yt as LocalStateProviderFactory, Zt as LocalStateSourceOptions, _n as substituteEnvVarsFromStateAsync, an as LocalStateRecord, cn as collectSsmParameterRefs, d as createLocalStartApiCommand, dn as PseudoParameters, en as rejectExplicitCfnStackWithMultipleStacks, fn as StateEnvSubstitutionAudit, gn as substituteEnvVarsFromState, hn as substituteAgainstStateAsync, i as listTargets, in as LocalStateProvider, l as CreateLocalStartApiCommandOptions, ln as resolveSsmParameters, mn as substituteAgainstState, n as TargetListing, nn as resolveCfnRegion, on as ResolvedSsmParameters, pn as SubstitutionContext, qt as setEmbedConfig, r as countTargets, rn as resolveCfnStackName, sn as SsmParameterRef, t as TargetEntry, tn as resolveCfnFallbackRegion, un as CrossStackResolver, vn as CloudFormationTemplate } from "./target-lister-DztbPwpu.js";
 import { Command } from "commander";
 import { CloudFormationClient } from "@aws-sdk/client-cloudformation";
 
@@ -68,6 +68,7 @@ declare class CfnLocalStateProvider implements LocalStateProvider {
   private getSsmClient;
   resolveTemplateSsmParameters(template: CloudFormationTemplate): Promise<ResolvedSsmParameters>;
   resolveDeployedFunctionEnv(functionPhysicalId: string): Promise<Record<string, string> | undefined>;
+  resolveLambdaExecutionRoleArn(functionPhysicalId: string): Promise<string | undefined>;
   load(_stackName: string, _synthRegion: string | undefined): Promise<LocalStateRecord | undefined>;
   buildCrossStackResolver(_consumerRegion: string): Promise<CrossStackResolver | undefined>;
   dispose(): void;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cli/commands/local-invoke.ts","../src/cli/commands/local-invoke-agentcore.ts","../src/cli/commands/local-run-task.ts","../src/cli/commands/local-start-service.ts","../src/cli/commands/local-start-alb.ts","../src/cli/commands/local-list.ts","../src/local/cfn-local-state-provider.ts"],"mappings":";;;;;UA6IiB,+BAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAi6BA,wBAAA,CAAyB,IAAA,GAAM,+BAAA,GAAuC,OAAA;;;UCz2BrE,wCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA6wCA,iCAAA,CACd,IAAA,GAAM,wCAAA,GACL,OAAA;;;UC/2Cc,gCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmhBA,yBAAA,CAA0B,IAAA,GAAM,gCAAA,GAAwC,OAAA;;;UCvmBvE,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmCA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UChCc,iCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA6QA,0BAAA,CAA2B,IAAA,GAAM,iCAAA,GAAyC,OAAA;;;UCzQzE,6BAAA;EAEf,WAAA,GAAc,mBAAA;AAAA;AAAA,UAuCC,0BAAA;EAOf,IAAA;AAAA;AAAA,iBAYc,mBAAA,CACd,OAAA,EAAS,aAAA,EACT,OAAA,UACA,OAAA,GAAS,0BAAA;AAAA,iBAuEK,sBAAA,CAAuB,IAAA,GAAM,6BAAA,GAAqC,OAAA;;;UC/FjE,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAmCE,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EA2DE,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cli/commands/local-invoke.ts","../src/cli/commands/local-invoke-agentcore.ts","../src/cli/commands/local-run-task.ts","../src/cli/commands/local-start-service.ts","../src/cli/commands/local-start-alb.ts","../src/cli/commands/local-list.ts","../src/local/cfn-local-state-provider.ts"],"mappings":";;;;;UA8IiB,+BAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAg+BA,wBAAA,CAAyB,IAAA,GAAM,+BAAA,GAAuC,OAAA;;;UCz6BrE,wCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA6wCA,iCAAA,CACd,IAAA,GAAM,wCAAA,GACL,OAAA;;;UC/2Cc,gCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmhBA,yBAAA,CAA0B,IAAA,GAAM,gCAAA,GAAwC,OAAA;;;UCvmBvE,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmCA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UChCc,iCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBA6QA,0BAAA,CAA2B,IAAA,GAAM,iCAAA,GAAyC,OAAA;;;UCzQzE,6BAAA;EAEf,WAAA,GAAc,mBAAA;AAAA;AAAA,UAuCC,0BAAA;EAOf,IAAA;AAAA;AAAA,iBAYc,mBAAA,CACd,OAAA,EAAS,aAAA,EACT,OAAA,UACA,OAAA,GAAS,0BAAA;AAAA,iBAuEK,sBAAA,CAAuB,IAAA,GAAM,6BAAA,GAAqC,OAAA;;;UC/FjE,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAiCE,6BAAA,CACX,kBAAA,WACC,OAAA;EAmCU,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EA2DE,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA"}

package/dist/index.js

@@ -1,5 +1,5 @@
 import { c as getEmbedConfig, l as resetEmbedConfig, u as setEmbedConfig } from "./docker-cmd-voNPrcRh.js";
-import { En as listTargets, Tn as countTargets, _n as CfnLocalStateProvider, a as createLocalStartApiCommand, an as substituteAgainstStateAsync, dn as createLocalStateProvider, fn as isCfnFlagPresent, gn as resolveCfnStackName, hn as resolveCfnRegion, in as substituteAgainstState, mn as resolveCfnFallbackRegion, on as substituteEnvVarsFromState, pn as rejectExplicitCfnStackWithMultipleStacks, sn as substituteEnvVarsFromStateAsync, un as LocalStateSourceError, vn as collectSsmParameterRefs, yn as resolveSsmParameters } from "./cloud-map-resolver-DjKCYyIq.js";
-import { a as createLocalRunTaskCommand, i as createLocalStartServiceCommand, n as formatTargetListing, o as createLocalInvokeAgentCoreCommand, r as createLocalStartAlbCommand, s as createLocalInvokeCommand, t as createLocalListCommand } from "./local-list-CZEZ5-JP.js";
+import { En as listTargets, Tn as countTargets, _n as CfnLocalStateProvider, a as createLocalStartApiCommand, an as substituteAgainstStateAsync, dn as createLocalStateProvider, fn as isCfnFlagPresent, gn as resolveCfnStackName, hn as resolveCfnRegion, in as substituteAgainstState, mn as resolveCfnFallbackRegion, on as substituteEnvVarsFromState, pn as rejectExplicitCfnStackWithMultipleStacks, sn as substituteEnvVarsFromStateAsync, un as LocalStateSourceError, vn as collectSsmParameterRefs, yn as resolveSsmParameters } from "./cloud-map-resolver-BIGVKpx5.js";
+import { a as createLocalRunTaskCommand, i as createLocalStartServiceCommand, n as formatTargetListing, o as createLocalInvokeAgentCoreCommand, r as createLocalStartAlbCommand, s as createLocalInvokeCommand, t as createLocalListCommand } from "./local-list-D6okp0IA.js";
 
 export { CfnLocalStateProvider, LocalStateSourceError, collectSsmParameterRefs, countTargets, createLocalInvokeAgentCoreCommand, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartAlbCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, formatTargetListing, getEmbedConfig, isCfnFlagPresent, listTargets, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveSsmParameters, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync };

package/dist/internal.d.ts

@@ -1,4 +1,4 @@
-import { $ as ContainerPool, A as AuthorizerCache, At as AGENTCORE_RUNTIME_TYPE, B as buildCorsConfigByApiId, Bt as substituteImagePlaceholders, C as JwtCustomClaim, Ct as InvokeAgentCoreOptions, D as verifyCognitoJwt, Dt as AGENTCORE_AGUI_PROTOCOL, E as createJwksCache, Et as AGENTCORE_A2A_PROTOCOL, F as LambdaTokenAuthorizer, Ft as ResolvedAgentCoreRuntime, G as RestV1IntegrationConfig, H as isFunctionUrlOacFronted, Ht as ResolvedArnLambdaLayer, I as RouteWithAuth, It as pickAgentCoreCandidateStack, J as evaluateResponseParameters, K as discoverRoutes, L as attachAuthorizers, Lt as resolveAgentCoreTarget, M as createAuthorizerCache, Mt as AgentCoreCustomClaim, N as AuthorizerInfo, Nt as AgentCoreJwtAuthorizer, O as verifyJwtAuthorizer, Ot as AGENTCORE_HTTP_PROTOCOL, P as LambdaRequestAuthorizer, Pt as AgentCoreResolutionError, Q as VtlEvaluationError, R as CorsConfig, Rt as ImageResolutionContext, S as JwksCache, St as AgentCoreInvokeResult, T as buildJwksUrlFromIssuer, Tt as waitForAgentCorePing, U as matchPreflight, Ut as StackInfo, V as buildCorsConfigFromCloudFrontChain, Vt as tryResolveImageFnJoin, W as DiscoveredRoute, X as selectIntegrationResponse, Y as pickResponseTemplate, Z as tryParseStatus, _ as readMtlsMaterialsFromDisk, _t as McpInvokeResult, a as CdkLocalError, at as InvokeAgentCoreWsOptions, b as defaultCredentialsLoader, bt as parseSseForJsonRpc, c as ApiTargetSubset, ct as A2A_PATH, dt as A2aJsonRpcRequest, et as CdkWatchConfig, f as createWatchPredicates, ft as a2aInvokeOnce, g as StartedApiServer, gt as McpInvokeOptions, h as ServerState, ht as MCP_PROTOCOL_VERSION, it as AgentCoreWsResult, j as CachedAuthorizerResult, jt as AgentCoreCodeArtifact, k as verifyJwtViaDiscovery, kt as AGENTCORE_MCP_PROTOCOL, lt as A2aInvokeOptions, m as MtlsServerConfig, mt as MCP_PATH, nt as EnvOverrideFile, o as LocalInvokeBuildError, ot as invokeAgentCoreWs, p as resolveApiTargetSubset, pt as MCP_CONTAINER_PORT, q as IntegrationResponseEntry, rt as resolveEnvVars, s as EcsTaskResolutionError, st as A2A_CONTAINER_PORT, t as TargetEntry, tt as resolveWatchConfig, u as WatchPredicates, ut as A2aInvokeResult, v as startApiServer, vn as CloudFormationTemplate, vt as McpJsonRpcRequest, w as buildCognitoJwksUrl, wt as invokeAgentCore, x as DiscoveryJwtAuthorizer, xt as AGENTCORE_SESSION_ID_HEADER, y as CredentialsLoader, yt as mcpInvokeOnce, z as applyCorsResponseHeaders, zt as derivePseudoParametersFromRegion } from "./target-lister-dwdfzm_d.js";
+import { $ as ContainerPool, A as AuthorizerCache, At as AGENTCORE_RUNTIME_TYPE, B as buildCorsConfigByApiId, Bt as substituteImagePlaceholders, C as JwtCustomClaim, Ct as InvokeAgentCoreOptions, D as verifyCognitoJwt, Dt as AGENTCORE_AGUI_PROTOCOL, E as createJwksCache, Et as AGENTCORE_A2A_PROTOCOL, F as LambdaTokenAuthorizer, Ft as ResolvedAgentCoreRuntime, G as RestV1IntegrationConfig, H as isFunctionUrlOacFronted, Ht as ResolvedArnLambdaLayer, I as RouteWithAuth, It as pickAgentCoreCandidateStack, J as evaluateResponseParameters, K as discoverRoutes, L as attachAuthorizers, Lt as resolveAgentCoreTarget, M as createAuthorizerCache, Mt as AgentCoreCustomClaim, N as AuthorizerInfo, Nt as AgentCoreJwtAuthorizer, O as verifyJwtAuthorizer, Ot as AGENTCORE_HTTP_PROTOCOL, P as LambdaRequestAuthorizer, Pt as AgentCoreResolutionError, Q as VtlEvaluationError, R as CorsConfig, Rt as ImageResolutionContext, S as JwksCache, St as AgentCoreInvokeResult, T as buildJwksUrlFromIssuer, Tt as waitForAgentCorePing, U as matchPreflight, Ut as StackInfo, V as buildCorsConfigFromCloudFrontChain, Vt as tryResolveImageFnJoin, W as DiscoveredRoute, X as selectIntegrationResponse, Y as pickResponseTemplate, Z as tryParseStatus, _ as readMtlsMaterialsFromDisk, _t as McpInvokeResult, a as CdkLocalError, at as InvokeAgentCoreWsOptions, b as defaultCredentialsLoader, bt as parseSseForJsonRpc, c as ApiTargetSubset, ct as A2A_PATH, dt as A2aJsonRpcRequest, et as CdkWatchConfig, f as createWatchPredicates, ft as a2aInvokeOnce, g as StartedApiServer, gt as McpInvokeOptions, h as ServerState, ht as MCP_PROTOCOL_VERSION, it as AgentCoreWsResult, j as CachedAuthorizerResult, jt as AgentCoreCodeArtifact, k as verifyJwtViaDiscovery, kt as AGENTCORE_MCP_PROTOCOL, lt as A2aInvokeOptions, m as MtlsServerConfig, mt as MCP_PATH, nt as EnvOverrideFile, o as LocalInvokeBuildError, ot as invokeAgentCoreWs, p as resolveApiTargetSubset, pt as MCP_CONTAINER_PORT, q as IntegrationResponseEntry, rt as resolveEnvVars, s as EcsTaskResolutionError, st as A2A_CONTAINER_PORT, t as TargetEntry, tt as resolveWatchConfig, u as WatchPredicates, ut as A2aInvokeResult, v as startApiServer, vn as CloudFormationTemplate, vt as McpJsonRpcRequest, w as buildCognitoJwksUrl, wt as invokeAgentCore, x as DiscoveryJwtAuthorizer, xt as AGENTCORE_SESSION_ID_HEADER, y as CredentialsLoader, yt as mcpInvokeOnce, z as applyCorsResponseHeaders, zt as derivePseudoParametersFromRegion } from "./target-lister-DztbPwpu.js";
 import { WebSocket } from "ws";
 import { IncomingMessage, ServerResponse } from "node:http";
 

package/dist/internal.js

@@ -1,3 +1,3 @@
-import { $ as attachAuthorizers, A as buildHttpApiV2Event, An as discoverRoutes, B as ConnectionRegistry, Bn as resolveAgentCoreTarget, C as computeRequestIdentityHash, Ct as renderCodeDockerfile, D as matchRoute, Dn as discoverWebSocketApis, E as invokeTokenAuthorizer, F as tryParseStatus, Fn as AGENTCORE_HTTP_PROTOCOL, G as buildDisconnectEvent, H as handleConnectionsRequest, Hn as derivePseudoParametersFromRegion, I as VtlEvaluationError, In as AGENTCORE_MCP_PROTOCOL, J as buildJwksUrlFromIssuer, Jt as resolveRuntimeImage, K as buildMessageEvent, Kt as resolveRuntimeCodeMountPath, L as HOST_GATEWAY_MIN_VERSION, Ln as AGENTCORE_RUNTIME_TYPE, M as evaluateResponseParameters, Mn as resolveLambdaArnIntrinsic, Mt as buildContainerImage, N as pickResponseTemplate, Nn as AGENTCORE_A2A_PROTOCOL, O as translateLambdaResponse, On as discoverWebSocketApisOrThrow, P as selectIntegrationResponse, Pn as AGENTCORE_AGUI_PROTOCOL, Q as verifyJwtViaDiscovery, R as probeHostGatewaySupport, Rn as AgentCoreResolutionError, S as buildMethodArn, St as computeCodeImageTag, T as invokeRequestAuthorizer, U as parseConnectionsPath, Un as substituteImagePlaceholders, V as buildMgmtEndpointEnvUrl, W as buildConnectEvent, Wn as tryResolveImageFnJoin, X as verifyCognitoJwt, Xn as LocalInvokeBuildError, Y as createJwksCache, Yt as EcsTaskResolutionError, Z as verifyJwtAuthorizer, _ as readMtlsMaterialsFromDisk, _t as invokeAgentCore, at as invokeAgentCoreWs, b as resolveServiceIntegrationParameters, bt as SUPPORTED_CODE_RUNTIMES, cn as resolveEnvVars, ct as a2aInvokeOnce, d as attachStageContext, dt as MCP_PROTOCOL_VERSION, et as applyCorsResponseHeaders, f as buildStageMap, ft as mcpInvokeOnce, g as groupRoutesByServer, gt as AGENTCORE_SESSION_ID_HEADER, h as filterRoutesByApiIdentifiers, ht as signAgentCoreInvocation, it as matchPreflight, j as buildRestV1Event, jn as pickRefLogicalId, jt as architectureToPlatform, k as applyAuthorizerOverlay, kn as parseSelectionExpressionPath, l as createAuthorizerCache, ln as materializeLayerFromArn, lt as MCP_CONTAINER_PORT, m as filterRoutesByApiIdentifier, mt as AGENTCORE_SIGV4_SERVICE, n as CloudMapRegistry, nt as buildCorsConfigFromCloudFrontChain, o as createWatchPredicates, ot as A2A_CONTAINER_PORT, p as availableApiIdentifiers, pt as parseSseForJsonRpc, q as buildCognitoJwksUrl, qt as resolveRuntimeFileExtension, r as getContainerNetworkIp, rt as isFunctionUrlOacFronted, s as resolveApiTargetSubset, st as A2A_PATH, t as buildCloudMapIndex, tt as buildCorsConfigByApiId, u as createFileWatcher, ut as MCP_PATH, v as startApiServer, vt as waitForAgentCorePing, w as evaluateCachedLambdaPolicy, wn as resolveSingleTarget, wt as toCmdArgv, x as defaultCredentialsLoader, xn as resolveWatchConfig, xt as buildAgentCoreCodeImage, y as resolveSelectionExpression, yt as downloadAndExtractS3Bundle, z as bufferToBody, zn as pickAgentCoreCandidateStack } from "./cloud-map-resolver-DjKCYyIq.js";
+import { $ as attachAuthorizers, A as buildHttpApiV2Event, An as discoverRoutes, B as ConnectionRegistry, Bn as resolveAgentCoreTarget, C as computeRequestIdentityHash, Ct as renderCodeDockerfile, D as matchRoute, Dn as discoverWebSocketApis, E as invokeTokenAuthorizer, F as tryParseStatus, Fn as AGENTCORE_HTTP_PROTOCOL, G as buildDisconnectEvent, H as handleConnectionsRequest, Hn as derivePseudoParametersFromRegion, I as VtlEvaluationError, In as AGENTCORE_MCP_PROTOCOL, J as buildJwksUrlFromIssuer, Jt as resolveRuntimeImage, K as buildMessageEvent, Kt as resolveRuntimeCodeMountPath, L as HOST_GATEWAY_MIN_VERSION, Ln as AGENTCORE_RUNTIME_TYPE, M as evaluateResponseParameters, Mn as resolveLambdaArnIntrinsic, Mt as buildContainerImage, N as pickResponseTemplate, Nn as AGENTCORE_A2A_PROTOCOL, O as translateLambdaResponse, On as discoverWebSocketApisOrThrow, P as selectIntegrationResponse, Pn as AGENTCORE_AGUI_PROTOCOL, Q as verifyJwtViaDiscovery, R as probeHostGatewaySupport, Rn as AgentCoreResolutionError, S as buildMethodArn, St as computeCodeImageTag, T as invokeRequestAuthorizer, U as parseConnectionsPath, Un as substituteImagePlaceholders, V as buildMgmtEndpointEnvUrl, W as buildConnectEvent, Wn as tryResolveImageFnJoin, X as verifyCognitoJwt, Xn as LocalInvokeBuildError, Y as createJwksCache, Yt as EcsTaskResolutionError, Z as verifyJwtAuthorizer, _ as readMtlsMaterialsFromDisk, _t as invokeAgentCore, at as invokeAgentCoreWs, b as resolveServiceIntegrationParameters, bt as SUPPORTED_CODE_RUNTIMES, cn as resolveEnvVars, ct as a2aInvokeOnce, d as attachStageContext, dt as MCP_PROTOCOL_VERSION, et as applyCorsResponseHeaders, f as buildStageMap, ft as mcpInvokeOnce, g as groupRoutesByServer, gt as AGENTCORE_SESSION_ID_HEADER, h as filterRoutesByApiIdentifiers, ht as signAgentCoreInvocation, it as matchPreflight, j as buildRestV1Event, jn as pickRefLogicalId, jt as architectureToPlatform, k as applyAuthorizerOverlay, kn as parseSelectionExpressionPath, l as createAuthorizerCache, ln as materializeLayerFromArn, lt as MCP_CONTAINER_PORT, m as filterRoutesByApiIdentifier, mt as AGENTCORE_SIGV4_SERVICE, n as CloudMapRegistry, nt as buildCorsConfigFromCloudFrontChain, o as createWatchPredicates, ot as A2A_CONTAINER_PORT, p as availableApiIdentifiers, pt as parseSseForJsonRpc, q as buildCognitoJwksUrl, qt as resolveRuntimeFileExtension, r as getContainerNetworkIp, rt as isFunctionUrlOacFronted, s as resolveApiTargetSubset, st as A2A_PATH, t as buildCloudMapIndex, tt as buildCorsConfigByApiId, u as createFileWatcher, ut as MCP_PATH, v as startApiServer, vt as waitForAgentCorePing, w as evaluateCachedLambdaPolicy, wn as resolveSingleTarget, wt as toCmdArgv, x as defaultCredentialsLoader, xn as resolveWatchConfig, xt as buildAgentCoreCodeImage, y as resolveSelectionExpression, yt as downloadAndExtractS3Bundle, z as bufferToBody, zn as pickAgentCoreCandidateStack } from "./cloud-map-resolver-BIGVKpx5.js";
 
 export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalInvokeBuildError, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SUPPORTED_CODE_RUNTIMES, VtlEvaluationError, a2aInvokeOnce, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSingleTarget, resolveWatchConfig, selectIntegrationResponse, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };

package/dist/{local-list-CZEZ5-JP.js → local-list-D6okp0IA.js}

@@ -1,5 +1,5 @@
 import { a as runDockerStreaming, c as getEmbedConfig, r as getDockerCmd, s as getLogger, u as setEmbedConfig } from "./docker-cmd-voNPrcRh.js";
-import { $n as applyRoleArnIfSet, $t as derivePartitionAndUrlSuffix, At as waitForRieReady, Bn as resolveAgentCoreTarget, Bt as execEnvForSecrets, Cn as resolveMultiTarget, Dt as AssetManifestLoader, En as listTargets, Et as singleFlight, Ft as buildDockerImage, Gn as matchStacks, Gt as streamLogs, Hn as derivePseudoParametersFromRegion, Ht as pullImage, In as AGENTCORE_MCP_PROTOCOL, It as DockerRunnerError, Jn as resolveCdkPathToLogicalIds, Jt as resolveRuntimeImage, Kn as buildCdkPathIndex, Kt as resolveRuntimeCodeMountPath, Lt as SENSITIVE_ENV_KEYS, Mt as buildContainerImage, Nn as AGENTCORE_A2A_PROTOCOL, Nt as parseEcrUri, Ot as getDockerImageBySourceHash, Pn as AGENTCORE_AGUI_PROTOCOL, Pt as pullEcrImage, Q as verifyJwtViaDiscovery, Qn as withErrorHandling, Qt as checkVolumeHostPath, Rt as appendEnvFlags, Sn as Synthesizer, Tn as countTargets, Tt as writeProfileCredentialsFile, Ut as removeContainer, Vn as resolveLambdaTarget, Vt as pickFreePort, Wt as runDetached, Xn as LocalInvokeBuildError, Xt as TASK_ROLE_ACCOUNT_PLACEHOLDER, Y as createJwksCache, Yn as CdkLocalError, Yt as EcsTaskResolutionError, Z as verifyJwtAuthorizer, Zn as LocalStartServiceError, Zt as applyCrossStackResolverToTask, _t as invokeAgentCore, an as substituteAgainstStateAsync, ar as warnIfDeprecatedRegion, at as invokeAgentCoreWs, bn as resolveApp, c as resolveProfileCredentials$1, cn as resolveEnvVars, ct as a2aInvokeOnce, dn as createLocalStateProvider, en as detectEcsImageResolutionNeeds, er as appOptions, ft as mcpInvokeOnce, ht as signAgentCoreInvocation, i as getPublishedHostPort, ir as parseContextOptions, jt as architectureToPlatform, kt as invokeRie, ln as materializeLayerFromArn, lt as MCP_CONTAINER_PORT, mn as resolveCfnFallbackRegion, n as CloudMapRegistry, nn as resolveEcsTaskTarget, nr as contextOptions, ot as A2A_CONTAINER_PORT, pn as rejectExplicitCfnStackWithMultipleStacks, qn as readCdkPathOrUndefined, qt as resolveRuntimeFileExtension, r as getContainerNetworkIp, rn as applyDeployedEnvFallback, rr as deprecatedRegionOption, sn as substituteEnvVarsFromStateAsync, st as A2A_PATH, t as buildCloudMapIndex, tn as parseEcsTarget, tr as commonOptions, ut as MCP_PATH, vt as waitForAgentCorePing, wn as resolveSingleTarget, xt as buildAgentCoreCodeImage, yt as downloadAndExtractS3Bundle, zn as pickAgentCoreCandidateStack, zt as ensureDockerAvailable } from "./cloud-map-resolver-DjKCYyIq.js";
+import { $n as applyRoleArnIfSet, $t as derivePartitionAndUrlSuffix, At as waitForRieReady, Bn as resolveAgentCoreTarget, Bt as execEnvForSecrets, Cn as resolveMultiTarget, Dt as AssetManifestLoader, En as listTargets, Et as singleFlight, Ft as buildDockerImage, Gn as matchStacks, Gt as streamLogs, Hn as derivePseudoParametersFromRegion, Ht as pullImage, In as AGENTCORE_MCP_PROTOCOL, It as DockerRunnerError, Jn as resolveCdkPathToLogicalIds, Jt as resolveRuntimeImage, Kn as buildCdkPathIndex, Kt as resolveRuntimeCodeMountPath, Lt as SENSITIVE_ENV_KEYS, Mt as buildContainerImage, Nn as AGENTCORE_A2A_PROTOCOL, Nt as parseEcrUri, Ot as getDockerImageBySourceHash, Pn as AGENTCORE_AGUI_PROTOCOL, Pt as pullEcrImage, Q as verifyJwtViaDiscovery, Qn as withErrorHandling, Qt as checkVolumeHostPath, Rt as appendEnvFlags, Sn as Synthesizer, Tn as countTargets, Tt as writeProfileCredentialsFile, Ut as removeContainer, Vn as resolveLambdaTarget, Vt as pickFreePort, Wt as runDetached, Xn as LocalInvokeBuildError, Xt as TASK_ROLE_ACCOUNT_PLACEHOLDER, Y as createJwksCache, Yn as CdkLocalError, Yt as EcsTaskResolutionError, Z as verifyJwtAuthorizer, Zn as LocalStartServiceError, Zt as applyCrossStackResolverToTask, _t as invokeAgentCore, an as substituteAgainstStateAsync, ar as warnIfDeprecatedRegion, at as invokeAgentCoreWs, bn as resolveApp, c as resolveProfileCredentials$1, cn as resolveEnvVars, ct as a2aInvokeOnce, dn as createLocalStateProvider, en as detectEcsImageResolutionNeeds, er as appOptions, ft as mcpInvokeOnce, ht as signAgentCoreInvocation, i as getPublishedHostPort, ir as parseContextOptions, jt as architectureToPlatform, kt as invokeRie, ln as materializeLayerFromArn, lt as MCP_CONTAINER_PORT, mn as resolveCfnFallbackRegion, n as CloudMapRegistry, nn as resolveEcsTaskTarget, nr as contextOptions, ot as A2A_CONTAINER_PORT, pn as rejectExplicitCfnStackWithMultipleStacks, qn as readCdkPathOrUndefined, qt as resolveRuntimeFileExtension, r as getContainerNetworkIp, rn as applyDeployedEnvFallback, rr as deprecatedRegionOption, sn as substituteEnvVarsFromStateAsync, st as A2A_PATH, t as buildCloudMapIndex, tn as parseEcsTarget, tr as commonOptions, ut as MCP_PATH, vt as waitForAgentCorePing, wn as resolveSingleTarget, xt as buildAgentCoreCodeImage, yt as downloadAndExtractS3Bundle, zn as pickAgentCoreCandidateStack, zt as ensureDockerAvailable } from "./cloud-map-resolver-BIGVKpx5.js";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import * as path from "node:path";
@@ -165,8 +165,9 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 				};
 				for (const { key, reason } of unresolved) logger.warn(`${label}: could not substitute env var ${key} (${reason}). Override it via --env-vars or it will be dropped.`);
 			}
-		} finally {
+		} catch (err) {
 			stateProvider.dispose();
+			throw err;
 		}
 		const overrides = readEnvOverridesFile$3(options.envVars);
 		const lambdaCdkPath = readCdkPathOrUndefined(lambda.resource);
@@ -177,16 +178,12 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 			logger.warn(`Environment variable ${key} contains a CloudFormation intrinsic and was dropped. Override it with --env-vars (e.g. {"${overrideKeyExample}":{"${key}":"<literal>"}}), or pass a state-source flag (e.g. --from-cfn-stack or a host-provided extension) to recover deployed values.`);
 		}
 		let resolvedAssumeRoleArn;
-		if (typeof options.assumeRole === "string") resolvedAssumeRoleArn = options.assumeRole;
-		else if (options.assumeRole === true) if (!stateForRoleHint) logger.warn("--assume-role passed without an ARN, but no state was loaded. Pair it with a state-source flag, or pass the ARN explicitly: --assume-role <arn>. Falling back to the developer's shell credentials.");
-		else {
-			const arn = resolveExecutionRoleArnFromState(stateForRoleHint, lambda.logicalId);
-			if (arn) {
-				resolvedAssumeRoleArn = arn;
-				logger.info(`--assume-role: auto-resolved execution role from state: ${arn}`);
-			} else logger.warn(`--assume-role: could not resolve the execution role ARN from state for '${lambda.logicalId}'. Pass the ARN explicitly: --assume-role <arn>. Falling back to the developer's shell credentials.`);
+		try {
+			resolvedAssumeRoleArn = await resolveAssumeRoleArnForLambda(options.assumeRole, stateForRoleHint, stateProvider, lambda.logicalId);
+		} finally {
+			stateProvider?.dispose();
 		}
-		else if (options.assumeRole === void 0 && stateForRoleHint) suggestAssumeRoleFromState(stateForRoleHint, lambda.logicalId);
+		if (options.assumeRole === void 0 && stateForRoleHint) suggestAssumeRoleFromState(stateForRoleHint, lambda.logicalId);
 		const event = await readEvent$1(options);
 		const dockerEnv = {
 			AWS_LAMBDA_FUNCTION_NAME: lambda.logicalId,
@@ -557,6 +554,48 @@ function suggestAssumeRoleFromState(state, logicalId) {
 	const roleArn = resolveExecutionRoleArnFromState(state, logicalId);
 	if (roleArn) logger.info(`Hint: the deployed function uses execution role ${roleArn}. Re-run with --assume-role to invoke under the deployed function's narrow permissions.`);
 }
+/**
+* Resolve the role ARN to assume for a Lambda invoke, honoring the three
+* `--assume-role` forms:
+*
+*   - `--assume-role <arn>` (explicit) → return `<arn>`.
+*   - `--assume-role` (bare, no value) → resolve from CFn state first;
+*     if that misses, fall back to
+*     `stateProvider.resolveLambdaExecutionRoleArn(<physicalId>)`
+*     (a `lambda:GetFunctionConfiguration` call) so a sibling-stack
+*     execution role still resolves (issue #181 — `ListStackResources`
+*     returns the role's name, not its ARN, so `attributes.Arn` is
+*     empty on the CFn state map and the state-only lookup misses).
+*   - `--assume-role` absent → return undefined (no assume).
+*
+* Logs the resolution path (info on success, warn on miss) so the user
+* can tell why the container did or did not get assumed-role creds.
+*
+* Exported for unit testing.
+*/
+async function resolveAssumeRoleArnForLambda(assumeRole, stateForRoleHint, stateProvider, lambdaLogicalId) {
+	const logger = getLogger();
+	if (typeof assumeRole === "string") return assumeRole;
+	if (assumeRole !== true) return;
+	if (!stateForRoleHint) {
+		logger.warn("--assume-role passed without an ARN, but no state was loaded. Pair it with a state-source flag, or pass the ARN explicitly: --assume-role <arn>. Falling back to the developer's shell credentials.");
+		return;
+	}
+	const fromState = resolveExecutionRoleArnFromState(stateForRoleHint, lambdaLogicalId);
+	if (fromState) {
+		logger.info(`--assume-role: auto-resolved execution role from state: ${fromState}`);
+		return fromState;
+	}
+	const fnPhysicalId = stateForRoleHint.resources[lambdaLogicalId]?.physicalId;
+	if (stateProvider?.resolveLambdaExecutionRoleArn && fnPhysicalId) {
+		const liveArn = await stateProvider.resolveLambdaExecutionRoleArn(fnPhysicalId);
+		if (liveArn) {
+			logger.info(`--assume-role: auto-resolved execution role from GetFunctionConfiguration: ${liveArn}`);
+			return liveArn;
+		}
+	}
+	logger.warn(`--assume-role: could not resolve the execution role ARN for '${lambdaLogicalId}'. Pass the ARN explicitly: --assume-role <arn>. Falling back to the developer's shell credentials.`);
+}
 function resolveExecutionRoleArnFromState(state, logicalId, roleProperty = "Role") {
 	const lambda = state.resources[logicalId];
 	if (!lambda) return void 0;
@@ -6591,4 +6630,4 @@ function createLocalListCommand(opts = {}) {
 
 //#endregion
 export { createLocalRunTaskCommand as a, createLocalStartServiceCommand as i, formatTargetListing as n, createLocalInvokeAgentCoreCommand as o, createLocalStartAlbCommand as r, createLocalInvokeCommand as s, createLocalListCommand as t };
-//# sourceMappingURL=local-list-CZEZ5-JP.js.map
+//# sourceMappingURL=local-list-D6okp0IA.js.map