cdk-local 0.65.1 → 0.65.3

package/README.md

@@ -32,15 +32,15 @@ cdkl invoke MyStack/Fn --from-cfn-stack    # one Lambda against real DynamoDB /
 ## Why cdk-local
 
 - **Zero-friction local execution** — run standalone: no deploy, no IAM access, just Docker and your CDK app. Onboard new engineers, review a PR by actually running its code, or work on an OSS CDK sample without owning the maintainer's account.
-- **Iterate against your real deployed stack — including its data.** `--from-cfn-stack` reads the deployed CloudFormation stack and injects its real ARNs, Secret values, and IAM credentials into the container, so you stay on the real DynamoDB rows, S3 objects, Cognito users, and Secret values your IAM credentials reach — instead of paying to seed and anonymize a local emulator.
-- **Picks up where `sam local` leaves off:**
-  - **CDK-native** — point at `cdk.json`; no SAM template to maintain.
-  - **Wider coverage** — adds ECS, ALB front-doors, and Bedrock AgentCore on top of Lambda + API Gateway.
-  - **Real container images** — the Lambda RIE base image; ECS as real Docker. The only dependency is Docker itself.
+- **Iterate against your real deployed stack — including its data.** `--from-cfn-stack` reads the deployed CloudFormation stack and injects its real ARNs, Secret values, and IAM credentials into the container — no `.env` file to maintain, no manual ARN copy-paste — so you stay on the real DynamoDB rows, S3 objects, Cognito users, and Secret values your IAM credentials reach. An offline emulator can fake the API surface, but you'd still own the cost of seeding it:
+  - dumping production data into a local DB
+  - mirroring Secret values into local Secrets Manager
+  - anonymizing fixtures across schema changes
+  - scripting realistic Cognito test users
 
 ## What runs locally
 
-cdk-local runs your **application compute** in Docker, using your CDK app as the source of truth. It deliberately does NOT emulate AWS managed services: your code reaches DynamoDB / S3 / Secrets Manager / Cognito / SNS / SQS / etc. as **real AWS** through your IAM credentials (`--assume-role`, or `--from-cfn-stack` to bind to a deployed stack). Want those offline too? Pair cdk-local with a service emulator like [LocalStack](https://www.localstack.cloud/) — it does not bundle one.
+cdk-local runs your **application compute** in Docker, using your CDK app as the source of truth. It deliberately does NOT emulate AWS managed services: your code reaches DynamoDB / S3 / Secrets Manager / Cognito / SNS / SQS / etc. as **real AWS** through your IAM credentials (`--assume-role`, or `--from-cfn-stack` to bind to a deployed stack).
 
 The locally executable resources are listed under [Supported resources](#supported-resources).
 

package/dist/cli.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { E as createLocalStartApiCommand, Kt as createLocalInvokeCommand, S as createLocalRunTaskCommand, n as createLocalListCommand, o as createLocalStartAlbCommand, w as createLocalInvokeAgentCoreCommand } from "./local-list-JDGfdnip.js";
-import { t as createLocalStartServiceCommand } from "./local-start-service-DN37tzcc.js";
+import { E as createLocalStartApiCommand, Kt as createLocalInvokeCommand, S as createLocalRunTaskCommand, n as createLocalListCommand, o as createLocalStartAlbCommand, w as createLocalInvokeAgentCoreCommand } from "./local-list-CJj6-Ska.js";
+import { t as createLocalStartServiceCommand } from "./local-start-service-KNA6t86q.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.65.1");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.65.3");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalInvokeAgentCoreCommand());
 program.addCommand(createLocalStartApiCommand());

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as createLocalStartApiCommand, $n as LocalStateRecord, B as TargetListing, Bn as resetEmbedConfig, Fn as createLocalInvokeCommand, G as CreateLocalRunTaskCommandOptions, Gn as LocalStateSourceOptions, H as listTargets, Hn as ExtraStateProviders, Jn as rejectExplicitCfnStackWithMultipleStacks, Kn as createLocalStateProvider, Kt as createLocalInvokeAgentCoreCommand, Nn as CreateLocalInvokeCommandOptions, Qn as LocalStateProvider, Rn as CdkLocalEmbedConfig, Un as LocalStateProviderFactory, V as countTargets, Vn as setEmbedConfig, Wn as LocalStateSourceError, Wt as CreateLocalInvokeAgentCoreCommandOptions, X as CreateLocalStartApiCommandOptions, Xn as resolveCfnRegion, Yn as resolveCfnFallbackRegion, Zn as resolveCfnStackName, a as formatTargetListing, ar as PseudoParameters, cr as substituteAgainstState, dr as substituteEnvVarsFromStateAsync, er as ResolvedSsmParameters, fr as CloudFormationTemplate, i as createLocalListCommand, ir as CrossStackResolver, l as createLocalStartAlbCommand, lr as substituteAgainstStateAsync, n as FormatTargetListingOptions, nr as collectSsmParameterRefs, o as CreateLocalStartAlbCommandOptions, or as StateEnvSubstitutionAudit, q as createLocalRunTaskCommand, qn as isCfnFlagPresent, rr as resolveSsmParameters, sr as SubstitutionContext, t as CreateLocalListCommandOptions, tr as SsmParameterRef, ur as substituteEnvVarsFromState, z as TargetEntry, zn as getEmbedConfig } from "./local-list-CogAxLul.js";
+import { $ as createLocalStartApiCommand, $n as LocalStateProvider, B as TargetListing, Bn as getEmbedConfig, G as CreateLocalRunTaskCommandOptions, Gn as LocalStateSourceError, H as listTargets, Hn as setEmbedConfig, In as createLocalInvokeCommand, Jn as isCfnFlagPresent, Kn as LocalStateSourceOptions, Kt as createLocalInvokeAgentCoreCommand, Pn as CreateLocalInvokeCommandOptions, Qn as resolveCfnStackName, Un as ExtraStateProviders, V as countTargets, Vn as resetEmbedConfig, Wn as LocalStateProviderFactory, Wt as CreateLocalInvokeAgentCoreCommandOptions, X as CreateLocalStartApiCommandOptions, Xn as resolveCfnFallbackRegion, Yn as rejectExplicitCfnStackWithMultipleStacks, Zn as resolveCfnRegion, a as formatTargetListing, ar as CrossStackResolver, cr as SubstitutionContext, dr as substituteEnvVarsFromState, er as LocalStateRecord, fr as substituteEnvVarsFromStateAsync, i as createLocalListCommand, ir as resolveSsmParameters, l as createLocalStartAlbCommand, lr as substituteAgainstState, n as FormatTargetListingOptions, nr as SsmParameterRef, o as CreateLocalStartAlbCommandOptions, or as PseudoParameters, pr as CloudFormationTemplate, q as createLocalRunTaskCommand, qn as createLocalStateProvider, rr as collectSsmParameterRefs, sr as StateEnvSubstitutionAudit, t as CreateLocalListCommandOptions, tr as ResolvedSsmParameters, ur as substituteAgainstStateAsync, z as TargetEntry, zn as CdkLocalEmbedConfig } from "./local-list-DwByVWWX.js";
 import { Command } from "commander";
 import { CloudFormationClient } from "@aws-sdk/client-cloudformation";
 
@@ -25,6 +25,7 @@ declare class CfnLocalStateProvider implements LocalStateProvider {
   private agentCoreControlClient;
   private readonly clientOptions;
   private disposed;
+  private lastLoadError;
   constructor(opts: CfnLocalStateProviderOptions);
   private getClient;
   private getLambdaClient;
@@ -35,6 +36,7 @@ declare class CfnLocalStateProvider implements LocalStateProvider {
   resolveLambdaExecutionRoleArn(functionPhysicalId: string): Promise<string | undefined>;
   resolveAgentCoreRuntimeRoleArn(runtimePhysicalId: string): Promise<string | undefined>;
   load(_stackName: string, _synthRegion: string | undefined): Promise<LocalStateRecord | undefined>;
+  getLastLoadError(): string | undefined;
   buildCrossStackResolver(_consumerRegion: string): Promise<CrossStackResolver | undefined>;
   dispose(): void;
 }

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cli/commands/local-start-service.ts","../src/local/cfn-local-state-provider.ts"],"mappings":";;;;;UA0BiB,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmCA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UCkBc,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,QAKA,sBAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,yBAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAiCE,6BAAA,CACX,kBAAA,WACC,OAAA;EAiCU,8BAAA,CACX,iBAAA,WACC,OAAA;EAmCU,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EA2DE,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cli/commands/local-start-service.ts","../src/local/cfn-local-state-provider.ts"],"mappings":";;;;;UA0BiB,qCAAA;EACf,mBAAA,GAAsB,mBAAA;EAEtB,WAAA,GAAc,mBAAA;AAAA;AAAA,iBAmCA,8BAAA,CACd,IAAA,GAAM,qCAAA,GACL,OAAA;;;UCkBc,4BAAA;EAOf,YAAA;EAKA,MAAA;EAiBA,OAAA;AAAA;AAAA,cAGW,qBAAA,YAAiC,kBAAA;EAAA,SAG5B,KAAA;EAAA,iBACC,YAAA;EAAA,iBACA,MAAA;EAAA,QAKT,MAAA;EAAA,QAKA,YAAA;EAAA,QAKA,SAAA;EAAA,QAKA,sBAAA;EAAA,iBACS,aAAA;EAAA,QAQT,QAAA;EAAA,QASA,aAAA;cAEI,IAAA,EAAM,4BAAA;EAAA,QAOV,SAAA;EAAA,QAmBA,eAAA;EAAA,QAaA,yBAAA;EAAA,QAaA,YAAA;EA6BK,4BAAA,CACX,QAAA,EAAU,sBAAA,GACT,OAAA,CAAQ,qBAAA;EAsBE,0BAAA,CACX,kBAAA,WACC,OAAA,CAAQ,MAAA;EAiCE,6BAAA,CACX,kBAAA,WACC,OAAA;EAiCU,8BAAA,CACX,iBAAA,WACC,OAAA;EAmCU,IAAA,CACX,UAAA,UACA,YAAA,uBACC,OAAA,CAAQ,gBAAA;EAsEJ,gBAAA,CAAA;EAoBM,uBAAA,CACX,eAAA,WACC,OAAA,CAAQ,kBAAA;EA8DJ,OAAA,CAAA;AAAA"}

package/dist/index.js

@@ -1,5 +1,5 @@
 import { c as getEmbedConfig, l as resetEmbedConfig, u as setEmbedConfig } from "./docker-cmd-voNPrcRh.js";
-import { $t as substituteAgainstState, E as createLocalStartApiCommand, Kt as createLocalInvokeCommand, S as createLocalRunTaskCommand, _n as countTargets, an as LocalStateSourceError, cn as rejectExplicitCfnStackWithMultipleStacks, dn as resolveCfnStackName, en as substituteAgainstStateAsync, fn as CfnLocalStateProvider, ln as resolveCfnFallbackRegion, mn as resolveSsmParameters, n as createLocalListCommand, nn as substituteEnvVarsFromStateAsync, o as createLocalStartAlbCommand, on as createLocalStateProvider, pn as collectSsmParameterRefs, r as formatTargetListing, sn as isCfnFlagPresent, tn as substituteEnvVarsFromState, un as resolveCfnRegion, vn as listTargets, w as createLocalInvokeAgentCoreCommand } from "./local-list-JDGfdnip.js";
-import { t as createLocalStartServiceCommand } from "./local-start-service-DN37tzcc.js";
+import { $t as substituteAgainstState, E as createLocalStartApiCommand, Kt as createLocalInvokeCommand, S as createLocalRunTaskCommand, _n as countTargets, an as LocalStateSourceError, cn as rejectExplicitCfnStackWithMultipleStacks, dn as resolveCfnStackName, en as substituteAgainstStateAsync, fn as CfnLocalStateProvider, ln as resolveCfnFallbackRegion, mn as resolveSsmParameters, n as createLocalListCommand, nn as substituteEnvVarsFromStateAsync, o as createLocalStartAlbCommand, on as createLocalStateProvider, pn as collectSsmParameterRefs, r as formatTargetListing, sn as isCfnFlagPresent, tn as substituteEnvVarsFromState, un as resolveCfnRegion, vn as listTargets, w as createLocalInvokeAgentCoreCommand } from "./local-list-CJj6-Ska.js";
+import { t as createLocalStartServiceCommand } from "./local-start-service-KNA6t86q.js";
 
 export { CfnLocalStateProvider, LocalStateSourceError, collectSsmParameterRefs, countTargets, createLocalInvokeAgentCoreCommand, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartAlbCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, formatTargetListing, getEmbedConfig, isCfnFlagPresent, listTargets, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveSsmParameters, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync };

package/dist/internal.d.ts

@@ -1,4 +1,4 @@
-import { $t as A2A_PATH, A as runEcsServiceEmulator, An as derivePseudoParametersFromRegion, At as isFunctionUrlOacFronted, Bt as VtlEvaluationError, C as PlannedRedirectAction, Cn as AgentCoreCustomClaim, Ct as LambdaTokenAuthorizer, D as parseMaxTasks, Dn as pickAgentCoreCandidateStack, Dt as applyCorsResponseHeaders, E as buildEcsImageResolutionContext, En as ResolvedAgentCoreRuntime, Et as CorsConfig, F as CloudMapIndex, Ft as IntegrationResponseEntry, Gt as addInvokeAgentCoreSpecificOptions, Ht as CdkWatchConfig, I as buildCloudMapIndex, In as ResolvedArnLambdaLayer, It as evaluateResponseParameters, J as EcsTaskResolutionError, Jt as resolveEnvVars, K as addRunTaskSpecificOptions, L as CloudMapRegistry, Ln as StackInfo, Lt as pickResponseTemplate, M as ResolvedListenerAction, Mn as tryResolveImageFnJoin, Mt as DiscoveredRoute, N as isApplicationLoadBalancer, Nt as RestV1IntegrationConfig, O as parseRestartPolicy, On as resolveAgentCoreTarget, Ot as buildCorsConfigByApiId, P as resolveAlbFrontDoor, Pn as addInvokeSpecificOptions, Pt as discoverRoutes, Q as addStartApiSpecificOptions, Qt as A2A_CONTAINER_PORT, R as RegistrationHandle, Rt as selectIntegrationResponse, S as PlannedLambdaForwardTarget, Sn as AgentCoreCodeArtifact, St as LambdaRequestAuthorizer, T as addCommonEcsServiceOptions, Tn as AgentCoreResolutionError, Tt as attachAuthorizers, U as CdkLocalError, Ut as resolveWatchConfig, Vt as ContainerPool, W as LocalInvokeBuildError, Xt as InvokeAgentCoreWsOptions, Y as ApiTargetSubset, Yt as AgentCoreWsResult, Z as WatchPredicates, Zt as invokeAgentCoreWs, _ as PlannedEcsForwardTarget, _n as AGENTCORE_A2A_PROTOCOL, _t as verifyJwtViaDiscovery, an as MCP_PATH, at as readMtlsMaterialsFromDisk, b as PlannedForwardTarget, bn as AGENTCORE_MCP_PROTOCOL, bt as createAuthorizerCache, c as albStrategy, cn as McpInvokeResult, ct as defaultCredentialsLoader, d as resolveAlbTarget, dn as parseSseForJsonRpc, dt as JwtCustomClaim, en as A2aInvokeOptions, et as createWatchPredicates, f as EcsServiceEmulatorOptions, fn as AGENTCORE_SESSION_ID_HEADER, fr as CloudFormationTemplate, ft as buildCognitoJwksUrl, g as PlannedAction, gn as waitForAgentCorePing, gt as verifyJwtAuthorizer, h as MAX_TASKS_SUBNET_RANGE_CAP, hn as invokeAgentCore, ht as verifyCognitoJwt, in as MCP_CONTAINER_PORT, it as StartedApiServer, j as FrontDoorForwardTarget, jn as substituteImagePlaceholders, jt as matchPreflight, k as resolveSharedSidecarCredentials, kn as ImageResolutionContext, kt as buildCorsConfigFromCloudFrontChain, ln as McpJsonRpcRequest, lt as DiscoveryJwtAuthorizer, m as FrontDoorPlan, mn as InvokeAgentCoreOptions, mt as createJwksCache, nn as A2aJsonRpcRequest, nt as MtlsServerConfig, on as MCP_PROTOCOL_VERSION, ot as startApiServer, p as EmulatorStrategy, pn as AgentCoreInvokeResult, pt as buildJwksUrlFromIssuer, qt as EnvOverrideFile, r as addListSpecificOptions, rn as a2aInvokeOnce, rt as ServerState, s as addAlbSpecificOptions, sn as McpInvokeOptions, st as CredentialsLoader, tn as A2aInvokeResult, tt as resolveApiTargetSubset, u as parseLbPortOverrides, un as mcpInvokeOnce, ut as JwksCache, v as PlannedFixedResponseAction, vn as AGENTCORE_AGUI_PROTOCOL, vt as AuthorizerCache, w as ServiceBoot, wn as AgentCoreJwtAuthorizer, wt as RouteWithAuth, x as PlannedFrontDoorListener, xn as AGENTCORE_RUNTIME_TYPE, xt as AuthorizerInfo, y as PlannedForwardAction, yn as AGENTCORE_HTTP_PROTOCOL, yt as CachedAuthorizerResult, z as TargetEntry, zt as tryParseStatus } from "./local-list-CogAxLul.js";
+import { $t as A2A_PATH, A as runEcsServiceEmulator, An as derivePseudoParametersFromRegion, At as isFunctionUrlOacFronted, Bt as VtlEvaluationError, C as PlannedRedirectAction, Cn as AgentCoreCustomClaim, Ct as LambdaTokenAuthorizer, D as parseMaxTasks, Dn as pickAgentCoreCandidateStack, Dt as applyCorsResponseHeaders, E as buildEcsImageResolutionContext, En as ResolvedAgentCoreRuntime, Et as CorsConfig, F as CloudMapIndex, Fn as addInvokeSpecificOptions, Ft as IntegrationResponseEntry, Gt as addInvokeAgentCoreSpecificOptions, Ht as CdkWatchConfig, I as buildCloudMapIndex, It as evaluateResponseParameters, J as EcsTaskResolutionError, Jt as resolveEnvVars, K as addRunTaskSpecificOptions, L as CloudMapRegistry, Ln as ResolvedArnLambdaLayer, Lt as pickResponseTemplate, M as ResolvedListenerAction, Mn as substituteImagePlaceholders, Mt as DiscoveredRoute, N as isApplicationLoadBalancer, Nn as tryResolveImageFnJoin, Nt as RestV1IntegrationConfig, O as parseRestartPolicy, On as resolveAgentCoreTarget, Ot as buildCorsConfigByApiId, P as resolveAlbFrontDoor, Pt as discoverRoutes, Q as addStartApiSpecificOptions, Qt as A2A_CONTAINER_PORT, R as RegistrationHandle, Rn as StackInfo, Rt as selectIntegrationResponse, S as PlannedLambdaForwardTarget, Sn as AgentCoreCodeArtifact, St as LambdaRequestAuthorizer, T as addCommonEcsServiceOptions, Tn as AgentCoreResolutionError, Tt as attachAuthorizers, U as CdkLocalError, Ut as resolveWatchConfig, Vt as ContainerPool, W as LocalInvokeBuildError, Xt as InvokeAgentCoreWsOptions, Y as ApiTargetSubset, Yt as AgentCoreWsResult, Z as WatchPredicates, Zt as invokeAgentCoreWs, _ as PlannedEcsForwardTarget, _n as AGENTCORE_A2A_PROTOCOL, _t as verifyJwtViaDiscovery, an as MCP_PATH, at as readMtlsMaterialsFromDisk, b as PlannedForwardTarget, bn as AGENTCORE_MCP_PROTOCOL, bt as createAuthorizerCache, c as albStrategy, cn as McpInvokeResult, ct as defaultCredentialsLoader, d as resolveAlbTarget, dn as parseSseForJsonRpc, dt as JwtCustomClaim, en as A2aInvokeOptions, et as createWatchPredicates, f as EcsServiceEmulatorOptions, fn as AGENTCORE_SESSION_ID_HEADER, ft as buildCognitoJwksUrl, g as PlannedAction, gn as waitForAgentCorePing, gt as verifyJwtAuthorizer, h as MAX_TASKS_SUBNET_RANGE_CAP, hn as invokeAgentCore, ht as verifyCognitoJwt, in as MCP_CONTAINER_PORT, it as StartedApiServer, j as FrontDoorForwardTarget, jn as formatStateRemedy, jt as matchPreflight, k as resolveSharedSidecarCredentials, kn as ImageResolutionContext, kt as buildCorsConfigFromCloudFrontChain, ln as McpJsonRpcRequest, lt as DiscoveryJwtAuthorizer, m as FrontDoorPlan, mn as InvokeAgentCoreOptions, mt as createJwksCache, nn as A2aJsonRpcRequest, nt as MtlsServerConfig, on as MCP_PROTOCOL_VERSION, ot as startApiServer, p as EmulatorStrategy, pn as AgentCoreInvokeResult, pr as CloudFormationTemplate, pt as buildJwksUrlFromIssuer, qt as EnvOverrideFile, r as addListSpecificOptions, rn as a2aInvokeOnce, rt as ServerState, s as addAlbSpecificOptions, sn as McpInvokeOptions, st as CredentialsLoader, tn as A2aInvokeResult, tt as resolveApiTargetSubset, u as parseLbPortOverrides, un as mcpInvokeOnce, ut as JwksCache, v as PlannedFixedResponseAction, vn as AGENTCORE_AGUI_PROTOCOL, vt as AuthorizerCache, w as ServiceBoot, wn as AgentCoreJwtAuthorizer, wt as RouteWithAuth, x as PlannedFrontDoorListener, xn as AGENTCORE_RUNTIME_TYPE, xt as AuthorizerInfo, y as PlannedForwardAction, yn as AGENTCORE_HTTP_PROTOCOL, yt as CachedAuthorizerResult, z as TargetEntry, zt as tryParseStatus } from "./local-list-DwByVWWX.js";
 import { WebSocket } from "ws";
 import { IncomingMessage, ServerResponse } from "node:http";
 
@@ -443,5 +443,5 @@ interface ResolveParams {
 }
 declare function resolveSingleTarget(provided: string | undefined, params: ResolveParams): Promise<string>;
 //#endregion
-export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type BuildAgentCoreCodeImageOptions, type BuildContainerImageOptions, type CachedAuthorizerResult, type CdkWatchConfig, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CredentialsLoader, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EmulatorStrategy, type EnvOverrideFile, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type LambdaArnResolveOutcome, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MtlsServerConfig, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type RegistrationHandle, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedListenerAction, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type S3BundleCredentials, type S3BundleLocation, SUPPORTED_CODE_RUNTIMES, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartedApiServer, type TranslatedHttpResponse, VtlEvaluationError, type WatchPredicates, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
+export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type BuildAgentCoreCodeImageOptions, type BuildContainerImageOptions, type CachedAuthorizerResult, type CdkWatchConfig, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CredentialsLoader, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EmulatorStrategy, type EnvOverrideFile, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type LambdaArnResolveOutcome, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MtlsServerConfig, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type RegistrationHandle, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedListenerAction, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type S3BundleCredentials, type S3BundleLocation, SUPPORTED_CODE_RUNTIMES, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartedApiServer, type TranslatedHttpResponse, VtlEvaluationError, type WatchPredicates, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
 //# sourceMappingURL=internal.d.ts.map

package/dist/internal.js

@@ -1,3 +1,3 @@
-import { $ as pickResponseTemplate, A as createFileWatcher, An as AgentCoreResolutionError, At as MCP_PATH, B as resolveServiceIntegrationParameters, Bt as SUPPORTED_CODE_RUNTIMES, C as addInvokeAgentCoreSpecificOptions, Cn as pickRefLogicalId, Ct as isFunctionUrlOacFronted, D as createWatchPredicates, Dn as AGENTCORE_HTTP_PROTOCOL, Dt as A2A_PATH, En as AGENTCORE_AGUI_PROTOCOL, Et as A2A_CONTAINER_PORT, F as filterRoutesByApiIdentifiers, Fn as tryResolveImageFnJoin, Ft as signAgentCoreInvocation, G as invokeRequestAuthorizer, Gt as addInvokeSpecificOptions, H as buildMethodArn, Ht as computeCodeImageTag, I as groupRoutesByServer, In as LocalInvokeBuildError, It as AGENTCORE_SESSION_ID_HEADER, J as translateLambdaResponse, Jt as buildContainerImage, K as invokeTokenAuthorizer, L as readMtlsMaterialsFromDisk, Lt as invokeAgentCore, M as buildStageMap, Mn as resolveAgentCoreTarget, Mt as mcpInvokeOnce, N as availableApiIdentifiers, Nn as derivePseudoParametersFromRegion, Nt as parseSseForJsonRpc, O as resolveApiTargetSubset, On as AGENTCORE_MCP_PROTOCOL, Ot as a2aInvokeOnce, P as filterRoutesByApiIdentifier, Pn as substituteImagePlaceholders, Pt as AGENTCORE_SIGV4_SERVICE, Q as evaluateResponseParameters, Qt as EcsTaskResolutionError, R as startApiServer, Rt as waitForAgentCorePing, Sn as discoverRoutes, St as buildCorsConfigFromCloudFrontChain, T as addStartApiSpecificOptions, Tn as AGENTCORE_A2A_PROTOCOL, Tt as invokeAgentCoreWs, U as computeRequestIdentityHash, Ut as renderCodeDockerfile, V as defaultCredentialsLoader, Vt as buildAgentCoreCodeImage, W as evaluateCachedLambdaPolicy, Wt as toCmdArgv, X as buildHttpApiV2Event, Xt as resolveRuntimeFileExtension, Y as applyAuthorizerOverlay, Yt as resolveRuntimeCodeMountPath, Z as buildRestV1Event, Zt as resolveRuntimeImage, _ as runEcsServiceEmulator, _t as verifyJwtAuthorizer, a as albStrategy, at as bufferToBody, b as getContainerNetworkIp, bn as discoverWebSocketApisOrThrow, bt as applyCorsResponseHeaders, c as resolveAlbTarget, ct as handleConnectionsRequest, d as MAX_TASKS_SUBNET_RANGE_CAP, dt as buildDisconnectEvent, et as selectIntegrationResponse, f as addCommonEcsServiceOptions, ft as buildMessageEvent, g as resolveSharedSidecarCredentials, gn as resolveSingleTarget, gt as verifyCognitoJwt, h as parseRestartPolicy, hn as resolveWatchConfig, ht as createJwksCache, i as addAlbSpecificOptions, in as materializeLayerFromArn, it as probeHostGatewaySupport, j as attachStageContext, jn as pickAgentCoreCandidateStack, jt as MCP_PROTOCOL_VERSION, k as createAuthorizerCache, kn as AGENTCORE_RUNTIME_TYPE, kt as MCP_CONTAINER_PORT, l as isApplicationLoadBalancer, lt as parseConnectionsPath, m as parseMaxTasks, mt as buildJwksUrlFromIssuer, nt as VtlEvaluationError, ot as ConnectionRegistry, p as buildEcsImageResolutionContext, pt as buildCognitoJwksUrl, q as matchRoute, qt as architectureToPlatform, rn as resolveEnvVars, rt as HOST_GATEWAY_MIN_VERSION, s as parseLbPortOverrides, st as buildMgmtEndpointEnvUrl, t as addListSpecificOptions, tt as tryParseStatus, u as resolveAlbFrontDoor, ut as buildConnectEvent, v as buildCloudMapIndex, vt as verifyJwtViaDiscovery, wn as resolveLambdaArnIntrinsic, wt as matchPreflight, x as addRunTaskSpecificOptions, xn as parseSelectionExpressionPath, xt as buildCorsConfigByApiId, y as CloudMapRegistry, yn as discoverWebSocketApis, yt as attachAuthorizers, z as resolveSelectionExpression, zt as downloadAndExtractS3Bundle } from "./local-list-JDGfdnip.js";
+import { $ as pickResponseTemplate, A as createFileWatcher, An as AgentCoreResolutionError, At as MCP_PATH, B as resolveServiceIntegrationParameters, Bt as SUPPORTED_CODE_RUNTIMES, C as addInvokeAgentCoreSpecificOptions, Cn as pickRefLogicalId, Ct as isFunctionUrlOacFronted, D as createWatchPredicates, Dn as AGENTCORE_HTTP_PROTOCOL, Dt as A2A_PATH, En as AGENTCORE_AGUI_PROTOCOL, Et as A2A_CONTAINER_PORT, F as filterRoutesByApiIdentifiers, Fn as substituteImagePlaceholders, Ft as signAgentCoreInvocation, G as invokeRequestAuthorizer, Gt as addInvokeSpecificOptions, H as buildMethodArn, Ht as computeCodeImageTag, I as groupRoutesByServer, In as tryResolveImageFnJoin, It as AGENTCORE_SESSION_ID_HEADER, J as translateLambdaResponse, Jt as buildContainerImage, K as invokeTokenAuthorizer, L as readMtlsMaterialsFromDisk, Ln as LocalInvokeBuildError, Lt as invokeAgentCore, M as buildStageMap, Mn as resolveAgentCoreTarget, Mt as mcpInvokeOnce, N as availableApiIdentifiers, Nn as derivePseudoParametersFromRegion, Nt as parseSseForJsonRpc, O as resolveApiTargetSubset, On as AGENTCORE_MCP_PROTOCOL, Ot as a2aInvokeOnce, P as filterRoutesByApiIdentifier, Pn as formatStateRemedy, Pt as AGENTCORE_SIGV4_SERVICE, Q as evaluateResponseParameters, Qt as EcsTaskResolutionError, R as startApiServer, Rt as waitForAgentCorePing, Sn as discoverRoutes, St as buildCorsConfigFromCloudFrontChain, T as addStartApiSpecificOptions, Tn as AGENTCORE_A2A_PROTOCOL, Tt as invokeAgentCoreWs, U as computeRequestIdentityHash, Ut as renderCodeDockerfile, V as defaultCredentialsLoader, Vt as buildAgentCoreCodeImage, W as evaluateCachedLambdaPolicy, Wt as toCmdArgv, X as buildHttpApiV2Event, Xt as resolveRuntimeFileExtension, Y as applyAuthorizerOverlay, Yt as resolveRuntimeCodeMountPath, Z as buildRestV1Event, Zt as resolveRuntimeImage, _ as runEcsServiceEmulator, _t as verifyJwtAuthorizer, a as albStrategy, at as bufferToBody, b as getContainerNetworkIp, bn as discoverWebSocketApisOrThrow, bt as applyCorsResponseHeaders, c as resolveAlbTarget, ct as handleConnectionsRequest, d as MAX_TASKS_SUBNET_RANGE_CAP, dt as buildDisconnectEvent, et as selectIntegrationResponse, f as addCommonEcsServiceOptions, ft as buildMessageEvent, g as resolveSharedSidecarCredentials, gn as resolveSingleTarget, gt as verifyCognitoJwt, h as parseRestartPolicy, hn as resolveWatchConfig, ht as createJwksCache, i as addAlbSpecificOptions, in as materializeLayerFromArn, it as probeHostGatewaySupport, j as attachStageContext, jn as pickAgentCoreCandidateStack, jt as MCP_PROTOCOL_VERSION, k as createAuthorizerCache, kn as AGENTCORE_RUNTIME_TYPE, kt as MCP_CONTAINER_PORT, l as isApplicationLoadBalancer, lt as parseConnectionsPath, m as parseMaxTasks, mt as buildJwksUrlFromIssuer, nt as VtlEvaluationError, ot as ConnectionRegistry, p as buildEcsImageResolutionContext, pt as buildCognitoJwksUrl, q as matchRoute, qt as architectureToPlatform, rn as resolveEnvVars, rt as HOST_GATEWAY_MIN_VERSION, s as parseLbPortOverrides, st as buildMgmtEndpointEnvUrl, t as addListSpecificOptions, tt as tryParseStatus, u as resolveAlbFrontDoor, ut as buildConnectEvent, v as buildCloudMapIndex, vt as verifyJwtViaDiscovery, wn as resolveLambdaArnIntrinsic, wt as matchPreflight, x as addRunTaskSpecificOptions, xn as parseSelectionExpressionPath, xt as buildCorsConfigByApiId, y as CloudMapRegistry, yn as discoverWebSocketApis, yt as attachAuthorizers, z as resolveSelectionExpression, zt as downloadAndExtractS3Bundle } from "./local-list-CJj6-Ska.js";
 
-export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SUPPORTED_CODE_RUNTIMES, VtlEvaluationError, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
+export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SUPPORTED_CODE_RUNTIMES, VtlEvaluationError, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };

package/dist/{local-list-JDGfdnip.js → local-list-CJj6-Ska.js}

@@ -417,6 +417,24 @@ function stackMatchesPattern(stack, pattern) {
 //#endregion
 //#region src/local/intrinsic-image.ts
 /**
+* Render the resolver-error remedy string for a "needs deployed state"
+* failure. When the context records that a state-source provider's
+* `load()` was attempted but failed ({@link ImageResolutionContext.stateLoadFailureMessage}),
+* the hint surfaces the underlying failure and points at the
+* stack-name / region / profile knobs instead of repeating "pass
+* --from-cfn-stack" — the user already passed it and seeing the same
+* flag suggested back is misleading. Otherwise the original hint is
+* emitted verbatim.
+*
+* Returned as a clause without a trailing punctuation so callers can
+* concatenate it with their alternatives (e.g. "..., build via
+* ContainerImage.fromAsset, or pin a public image.").
+*/
+function formatStateRemedy(context) {
+	if (context?.stateLoadFailureMessage) return `the state-source attempt failed: ${context.stateLoadFailureMessage}; verify the stack name (try --from-cfn-stack <deployed-name> if it differs from the synthesized name) and that --region / --profile target the right account`;
+	return "pass --from-cfn-stack to load the deployed stack state";
+}
+/**
 * Derive the AWS pseudo parameters that are trivially knowable from the
 * deploy region alone, without any STS call or state load.
 * `urlSuffix` and `partition` follow the canonical AWS partition rules:
@@ -823,7 +841,7 @@ function resolveLambdaTarget(target, stacks) {
 	const { logicalId, resource } = match;
 	if (resource.Type !== "AWS::Lambda::Function") {
 		if (resource.Type.startsWith("Custom::")) throw new LocalInvokeResolutionError(`Resource '${logicalId}' in ${stack.stackName} is a Custom Resource (${resource.Type}), not a Lambda function. Custom Resources are invoked by the deploy framework, not by users. If you want to test the underlying handler, target the ServiceToken Lambda directly.`);
-		throw new LocalInvokeResolutionError(`Resource '${logicalId}' in ${stack.stackName} is ${resource.Type}, not a Lambda function. ${getEmbedConfig().cliName} invoke only works on AWS::Lambda::Function resources in v1.`);
+		throw new LocalInvokeResolutionError(`Resource '${logicalId}' in ${stack.stackName} is ${resource.Type}, not a Lambda function. ${getEmbedConfig().cliName} only invokes AWS::Lambda::Function resources.`);
 	}
 	return extractLambdaProperties(stack, logicalId, resource, resources);
 }
@@ -967,10 +985,10 @@ function extractImageUri$1(value, logicalId, stackName, resources, region) {
 			const pseudoParameters = derivePseudoParametersFromRegion(region);
 			const joinResolved = tryResolveImageFnJoin(value, resources, pseudoParameters ? { pseudoParameters } : void 0);
 			if (joinResolved.kind === "resolved") return joinResolved.uri;
-			if (joinResolved.kind === "needs-state") throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} invoke cannot resolve the repository URI without state — deploy the stack first (so ${getEmbedConfig().productName} records the repository physical id), rebuild via lambda.DockerImageCode.fromImageAsset, or pin a public image.`);
-			if (joinResolved.kind === "unsupported-join") throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} has an unsupported Fn::Join Code.ImageUri shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} invoke recognizes the canonical CDK 2.x lambda.DockerImageCode.fromEcr Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
+			if (joinResolved.kind === "needs-state") throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} cannot resolve the repository URI without state — deploy the stack first (so ${getEmbedConfig().productName} records the repository physical id), rebuild via lambda.DockerImageCode.fromImageAsset, or pin a public image.`);
+			if (joinResolved.kind === "unsupported-join") throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} has an unsupported Fn::Join Code.ImageUri shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} recognizes the canonical CDK 2.x lambda.DockerImageCode.fromEcr Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
 			const accountIdHint = pseudoParameters ? ` (likely \${AWS::AccountId}, which ${getEmbedConfig().productName} cannot derive without --from-state or STS)` : ` (${getEmbedConfig().productName} could not derive AWS pseudo parameters because stack.region was undefined)`;
-			throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} has an Fn::Join Code.ImageUri that ${getEmbedConfig().cliName} invoke cannot resolve${accountIdHint}. Workarounds: deploy first and run with --from-state, or pin a fully-literal public image URI.`);
+			throw new LocalInvokeResolutionError(`Lambda '${logicalId}' in ${stackName} has an Fn::Join Code.ImageUri that ${getEmbedConfig().cliName} cannot resolve${accountIdHint}. Workarounds: deploy first and run with --from-state, or pin a fully-literal public image URI.`);
 		}
 	}
 }
@@ -992,7 +1010,7 @@ function extractImageLambdaProperties(args) {
 		const first = arches[0];
 		if (first === "arm64") architecture = "arm64";
 		else if (first === "x86_64") architecture = "x86_64";
-		else throw new LocalInvokeResolutionError(`Lambda '${logicalId}' has unsupported Architectures value '${String(first)}'. ${getEmbedConfig().cliName} invoke supports x86_64 and arm64.`);
+		else throw new LocalInvokeResolutionError(`Lambda '${logicalId}' has unsupported Architectures value '${String(first)}'. ${getEmbedConfig().cliName} supports x86_64 and arm64.`);
 	}
 	return {
 		kind: "image",
@@ -1534,12 +1552,13 @@ function resolveImageUri(value, logicalId, stackName, resources, region, imageCo
 	if (typeof sub === "string" && sub.length > 0) return imageContext ? substituteImagePlaceholders(sub, resources, imageContext) : sub;
 	if (Array.isArray(sub) && typeof sub[0] === "string") return imageContext ? substituteImagePlaceholders(sub[0], resources, imageContext) : sub[0];
 	if ("Fn::Join" in obj) {
-		const joinResolved = tryResolveImageFnJoin(value, resources, imageContext ?? (() => {
+		const context = imageContext ?? (() => {
 			const pseudoParameters = derivePseudoParametersFromRegion(region);
 			return pseudoParameters ? { pseudoParameters } : void 0;
-		})());
+		})();
+		const joinResolved = tryResolveImageFnJoin(value, resources, context);
 		if (joinResolved.kind === "resolved") return joinResolved.uri;
-		if (joinResolved.kind === "needs-state") throw new AgentCoreResolutionError(`AgentCore Runtime '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} invoke-agentcore cannot resolve the repository URI without state — pass --from-cfn-stack to load the deployed stack state, build via Runtime.fromAsset, or pin a literal / imported ECR image URI.`);
+		if (joinResolved.kind === "needs-state") throw new AgentCoreResolutionError(`AgentCore Runtime '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} cannot resolve the repository URI without state — ` + formatStateRemedy(context) + ", build via Runtime.fromAsset, or pin a literal / imported ECR image URI.");
 	}
 }
 
@@ -3471,10 +3490,27 @@ var AssemblyReader = class {
 	}
 	/**
 	* Read a pre-synthesized Cloud Assembly directory (no subprocess).
+	*
+	* `failOnMissingContext: false` matches CDK CLI's own behavior for
+	* `cdk deploy --app cdk.out`. CDK CLI's `cxapp/exec.js` bypasses
+	* `Toolkit.fromAssemblyDirectory()` entirely on this path and builds
+	* the assembly via `@aws-cdk/cloud-assembly-api`'s `CloudAssembly`
+	* directly, which does NOT enforce a missing-context check; then
+	* `cxapp/cloud-executable.js` attempts a single context-provider
+	* resolve, and if no progress is made it returns the assembly as-is
+	* with `manifest.missing` still populated. The strict default that
+	* `fromAssemblyDirectory()` carries is a toolkit-lib decision aimed
+	* at programmatic deploy callers, not parity with CDK CLI semantics.
+	*
+	* cdk-local's needs are looser still: we only read the synthesized
+	* template, and under `--from-cfn-stack` runtime values come from
+	* the deployed CFN stack anyway. Refusing here just makes the
+	* pre-synth flow unusable for any app that relies on context
+	* lookups (SSM / VPC / AMI / etc.), without any safety benefit.
 	*/
 	async readFromDirectory(assemblyDir) {
 		const toolkit = new Toolkit({ ioHost: new CdklIoHost() });
-		const source = await toolkit.fromAssemblyDirectory(assemblyDir);
+		const source = await toolkit.fromAssemblyDirectory(assemblyDir, { failOnMissingContext: false });
 		const cached = await toolkit.synth(source);
 		try {
 			return cached.cloudAssembly.stacks.map((stack) => mapStackArtifact(stack));
@@ -3823,6 +3859,7 @@ var CfnLocalStateProvider = class {
 	agentCoreControlClient;
 	clientOptions;
 	disposed = false;
+	lastLoadError;
 	constructor(opts) {
 		this.cfnStackName = opts.cfnStackName;
 		this.region = opts.region;
@@ -3966,10 +4003,12 @@ var CfnLocalStateProvider = class {
 		if (this.disposed) throw new Error("CfnLocalStateProvider used after dispose()");
 		const logger = getLogger();
 		const client = this.getClient();
+		this.lastLoadError = void 0;
 		let resourceMap;
 		try {
 			resourceMap = buildResourceStateMap(await fetchAllStackResources(client, this.cfnStackName));
 		} catch (err) {
+			this.lastLoadError = `ListStackResources(${this.cfnStackName}) failed: ${formatAwsErrorForWarn(err)} (region='${this.region}')`;
 			logger.warn(`${this.label}: ListStackResources(${this.cfnStackName}) failed: ${formatAwsErrorForWarn(err)}. Was the stack deployed in region '${this.region}'? Falling back.`);
 			return;
 		}
@@ -3991,6 +4030,24 @@ var CfnLocalStateProvider = class {
 		};
 	}
 	/**
+	* Return the failure detail captured by the most recent failed
+	* `load()` call, or `undefined` when the latest call succeeded /
+	* was never made. Surfaces the same `ListStackResources(<name>) failed: ...`
+	* text the warn-logger emits so downstream resolvers can embed it
+	* verbatim in their error and avoid the misleading "pass
+	* --from-cfn-stack" hint when the user already passed it.
+	*
+	* Throws after `dispose()` to keep parity with the other operational
+	* entry points on this class — a post-dispose caller is a programming
+	* bug, and surfacing it loudly is cheaper than silently returning a
+	* stale captured message after the provider's state is conceptually
+	* gone.
+	*/
+	getLastLoadError() {
+		if (this.disposed) throw new Error("CfnLocalStateProvider used after dispose()");
+		return this.lastLoadError;
+	}
+	/**
 	* Build a `CrossStackResolver` that resolves `Fn::ImportValue` via
 	* `cloudformation:ListExports`. `Fn::GetStackOutput` is rejected here
 	* — it has no CFn-side equivalent, and the user-visible error message
@@ -5923,10 +5980,10 @@ function parseContainerImage(raw, containerName, taskLogicalId, resources, _stac
 	if (getAttImage) return classifyResolvedImage(getAttImage);
 	const joinResolved = tryResolveImageFnJoin(raw, resources, context);
 	if (joinResolved.kind === "resolved") return classifyResolvedImage(joinResolved.uri);
-	if (joinResolved.kind === "needs-state") throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} run-task cannot resolve the repository URI without state — pass --from-cfn-stack to load the deployed stack state, build via ContainerImage.fromAsset, or pin a public image.`);
-	if (joinResolved.kind === "unsupported-join") throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an unsupported Fn::Join Image shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} run-task recognizes the canonical CDK 2.x ContainerImage.fromEcrRepository Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
+	if (joinResolved.kind === "needs-state") throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} cannot resolve the repository URI without state — ` + formatStateRemedy(context) + ", build via ContainerImage.fromAsset, or pin a public image.");
+	if (joinResolved.kind === "unsupported-join") throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an unsupported Fn::Join Image shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} recognizes the canonical CDK 2.x ContainerImage.fromEcrRepository Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
 	const flat = extractImageString(raw);
-	if (!flat) throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an unparseable Image property. ${getEmbedConfig().cliName} run-task v1 supports flat string images, single-key Fn::Sub bodies, and CDK-asset Image references.`);
+	if (!flat) throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an unparseable Image property. ${getEmbedConfig().cliName} supports flat string images, single-key Fn::Sub bodies, and CDK-asset Image references.`);
 	if (flat.includes("cdk-hnb659fds-container-assets-")) {
 		const hashMatch = /:([a-f0-9]{8,})$/.exec(flat);
 		const out = { kind: "cdk-asset" };
@@ -5936,9 +5993,9 @@ function parseContainerImage(raw, containerName, taskLogicalId, resources, _stac
 	const substituted = substituteImagePlaceholders(flat, resources, context);
 	if (substituted.includes("${")) {
 		const unresolvedRepoRef = findUnresolvedEcrRepositoryRef(substituted, resources);
-		if (unresolvedRepoRef) throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' references same-stack ECR repository '${unresolvedRepoRef}'. ${getEmbedConfig().cliName} run-task v1 cannot resolve the repository URI without state — pass --from-cfn-stack to load the deployed stack state, build via ContainerImage.fromAsset, or pin a public image.`);
+		if (unresolvedRepoRef) throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' references same-stack ECR repository '${unresolvedRepoRef}'. ${getEmbedConfig().cliName} cannot resolve the repository URI without state — ` + formatStateRemedy(context) + ", build via ContainerImage.fromAsset, or pin a public image.");
 		if (substituted.includes("AWS::")) throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an Image that references AWS pseudo parameters (${substituted}). ${getEmbedConfig().productName} could not resolve them: confirm AWS credentials are configured so STS GetCallerIdentity succeeds, and that --region / AWS_REGION names the target region. Workaround: build the image locally (ContainerImage.fromAsset) or pin a public image.`);
-		throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an Image with unresolved \${...} placeholders (${substituted}). ${getEmbedConfig().cliName} run-task v1 only resolves AWS pseudo parameters and same-stack AWS::ECR::Repository refs.`);
+		throw new EcsTaskResolutionError(`Container '${containerName}' in task '${taskLogicalId}' has an Image with unresolved \${...} placeholders (${substituted}). ${getEmbedConfig().cliName} only resolves AWS pseudo parameters and same-stack AWS::ECR::Repository refs.`);
 	}
 	const ecrMatch = /^(\d{12})\.dkr\.ecr\.([^.]+)\.amazonaws\.com(?:\.cn)?\//.exec(substituted);
 	if (ecrMatch) return {
@@ -6043,8 +6100,8 @@ function parseVolume(raw, idx, taskLogicalId, subContext) {
 	const v = raw;
 	const name = pickString(v["Name"]);
 	if (!name) throw new EcsTaskResolutionError(`Task '${taskLogicalId}' Volumes[${idx}] has no Name.`);
-	if (v["EFSVolumeConfiguration"]) throw new EcsTaskResolutionError(`Task '${taskLogicalId}' Volumes[${idx}] '${name}' uses EFSVolumeConfiguration, which ${getEmbedConfig().cliName} run-task cannot proxy locally. Workaround: bind-mount a local directory at the same containerPath via Host: { SourcePath: '<local-path>' }, or override at runtime via --env-vars semantics for a Phase 2 follow-up.`);
-	if (v["FSxWindowsFileServerVolumeConfiguration"]) throw new EcsTaskResolutionError(`Task '${taskLogicalId}' Volumes[${idx}] '${name}' uses FSxWindowsFileServerVolumeConfiguration, which ${getEmbedConfig().cliName} run-task cannot proxy locally.`);
+	if (v["EFSVolumeConfiguration"]) throw new EcsTaskResolutionError(`Task '${taskLogicalId}' Volumes[${idx}] '${name}' uses EFSVolumeConfiguration, which ${getEmbedConfig().cliName} cannot proxy locally. Workaround: bind-mount a local directory at the same containerPath via Host: { SourcePath: '<local-path>' }, or override at runtime via --env-vars semantics for a Phase 2 follow-up.`);
+	if (v["FSxWindowsFileServerVolumeConfiguration"]) throw new EcsTaskResolutionError(`Task '${taskLogicalId}' Volumes[${idx}] '${name}' uses FSxWindowsFileServerVolumeConfiguration, which ${getEmbedConfig().cliName} cannot proxy locally.`);
 	const dockerCfg = v["DockerVolumeConfiguration"];
 	if (dockerCfg && typeof dockerCfg === "object") {
 		const d = dockerCfg;
@@ -17634,10 +17691,10 @@ function extractImageUri(value, logicalId, stackName, resources, region) {
 			const pseudoParameters = derivePseudoParametersFromRegion(region);
 			const joinResolved = tryResolveImageFnJoin(value, resources, pseudoParameters ? { pseudoParameters } : void 0);
 			if (joinResolved.kind === "resolved") return joinResolved.uri;
-			if (joinResolved.kind === "needs-state") throw new Error(`Lambda '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} start-api cannot resolve the repository URI without state — deploy the stack first, rebuild via lambda.DockerImageCode.fromImageAsset, or pin a public image.`);
-			if (joinResolved.kind === "unsupported-join") throw new Error(`Lambda '${logicalId}' in ${stackName} has an unsupported Fn::Join Code.ImageUri shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} start-api recognizes the canonical CDK 2.x lambda.DockerImageCode.fromEcr Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
+			if (joinResolved.kind === "needs-state") throw new Error(`Lambda '${logicalId}' in ${stackName} references same-stack ECR repository '${joinResolved.repoLogicalId}' via Fn::Join. ${getEmbedConfig().cliName} cannot resolve the repository URI without state — deploy the stack first, rebuild via lambda.DockerImageCode.fromImageAsset, or pin a public image.`);
+			if (joinResolved.kind === "unsupported-join") throw new Error(`Lambda '${logicalId}' in ${stackName} has an unsupported Fn::Join Code.ImageUri shape: ${joinResolved.reason}. ${getEmbedConfig().cliName} recognizes the canonical CDK 2.x lambda.DockerImageCode.fromEcr Fn::Join shape (delimiter "" with nested Fn::Select/Fn::Split over an ECR Repository Arn GetAtt + Ref to the repo).`);
 			const accountIdHint = pseudoParameters ? ` (likely \${AWS::AccountId}, which ${getEmbedConfig().binaryName} cannot derive without a state source or STS)` : ` (${getEmbedConfig().binaryName} could not derive AWS pseudo parameters because stack.region was undefined)`;
-			throw new Error(`Lambda '${logicalId}' in ${stackName} has an Fn::Join Code.ImageUri that ${getEmbedConfig().cliName} start-api cannot resolve${accountIdHint}. Workarounds: deploy first and run with a state-source flag (e.g. --from-cfn-stack or a host-provided extension), or pin a fully-literal public image URI.`);
+			throw new Error(`Lambda '${logicalId}' in ${stackName} has an Fn::Join Code.ImageUri that ${getEmbedConfig().cliName} cannot resolve${accountIdHint}. Workarounds: deploy first and run with a state-source flag (e.g. --from-cfn-stack or a host-provided extension), or pin a fully-literal public image URI.`);
 		}
 	}
 }
@@ -18811,6 +18868,9 @@ async function buildAgentCoreImageContext(candidate, stateProvider, options) {
 			if (Object.keys(ssm.values).length > 0) context.stateParameters = ssm.values;
 			if (ssm.secureStringLogicalIds.length > 0) context.stateSensitiveParameters = ssm.secureStringLogicalIds;
 		}
+	} else {
+		const loadError = stateProvider.getLastLoadError?.();
+		if (loadError) context.stateLoadFailureMessage = loadError;
 	}
 	return {
 		context,
@@ -20355,6 +20415,10 @@ async function buildEcsImageResolutionContext$1(candidate, stateProvider, option
 	if (stateProvider && wantsState) {
 		const loaded = await stateProvider.load(candidate.stackName, candidate.region);
 		if (loaded) ctx.stateResources = loaded.resources;
+		else {
+			const loadError = stateProvider.getLastLoadError?.();
+			if (loadError) ctx.stateLoadFailureMessage = loadError;
+		}
 		if (needs.needsEnvOrSecretSubstitution && stateProvider.resolveTemplateSsmParameters) {
 			const ssmParameters = await stateProvider.resolveTemplateSsmParameters(candidate.template);
 			if (Object.keys(ssmParameters.values).length > 0) ctx.stateParameters = ssmParameters.values;
@@ -23714,6 +23778,10 @@ async function buildEcsImageResolutionContext(target, stacks, options, stateProv
 	if (stateProvider && wantsState) {
 		const loaded = await stateProvider.load(candidate.stackName, candidate.region);
 		if (loaded) ctx.stateResources = loaded.resources;
+		else {
+			const loadError = stateProvider.getLastLoadError?.();
+			if (loadError) ctx.stateLoadFailureMessage = loadError;
+		}
 		if (needs.needsEnvOrSecretSubstitution && stateProvider.resolveTemplateSsmParameters) {
 			const ssmParameters = await stateProvider.resolveTemplateSsmParameters(candidate.template);
 			if (Object.keys(ssmParameters.values).length > 0) ctx.stateParameters = ssmParameters.values;
@@ -24790,5 +24858,5 @@ function addListSpecificOptions(cmd) {
 }
 
 //#endregion
-export { pickResponseTemplate as $, substituteAgainstState as $t, createFileWatcher as A, AgentCoreResolutionError as An, MCP_PATH as At, resolveServiceIntegrationParameters as B, SUPPORTED_CODE_RUNTIMES as Bt, addInvokeAgentCoreSpecificOptions as C, pickRefLogicalId as Cn, isFunctionUrlOacFronted as Ct, createWatchPredicates as D, AGENTCORE_HTTP_PROTOCOL as Dn, A2A_PATH as Dt, createLocalStartApiCommand as E, AGENTCORE_AGUI_PROTOCOL as En, A2A_CONTAINER_PORT as Et, filterRoutesByApiIdentifiers as F, tryResolveImageFnJoin as Fn, signAgentCoreInvocation as Ft, invokeRequestAuthorizer as G, addInvokeSpecificOptions as Gt, buildMethodArn as H, computeCodeImageTag as Ht, groupRoutesByServer as I, LocalInvokeBuildError as In, AGENTCORE_SESSION_ID_HEADER as It, translateLambdaResponse as J, buildContainerImage as Jt, invokeTokenAuthorizer as K, createLocalInvokeCommand as Kt, readMtlsMaterialsFromDisk as L, LocalStartServiceError as Ln, invokeAgentCore as Lt, buildStageMap as M, resolveAgentCoreTarget as Mn, mcpInvokeOnce as Mt, availableApiIdentifiers as N, derivePseudoParametersFromRegion as Nn, parseSseForJsonRpc as Nt, resolveApiTargetSubset as O, AGENTCORE_MCP_PROTOCOL as On, a2aInvokeOnce as Ot, filterRoutesByApiIdentifier as P, substituteImagePlaceholders as Pn, AGENTCORE_SIGV4_SERVICE as Pt, evaluateResponseParameters as Q, EcsTaskResolutionError as Qt, startApiServer as R, withErrorHandling as Rn, waitForAgentCorePing as Rt, createLocalRunTaskCommand as S, discoverRoutes as Sn, buildCorsConfigFromCloudFrontChain as St, addStartApiSpecificOptions as T, AGENTCORE_A2A_PROTOCOL as Tn, invokeAgentCoreWs as Tt, computeRequestIdentityHash as U, renderCodeDockerfile as Ut, defaultCredentialsLoader as V, buildAgentCoreCodeImage as Vt, evaluateCachedLambdaPolicy as W, toCmdArgv as Wt, buildHttpApiV2Event as X, resolveRuntimeFileExtension as Xt, applyAuthorizerOverlay as Y, resolveRuntimeCodeMountPath as Yt, buildRestV1Event as Z, resolveRuntimeImage as Zt, runEcsServiceEmulator as _, countTargets as _n, verifyJwtAuthorizer as _t, albStrategy as a, LocalStateSourceError as an, bufferToBody as at, getContainerNetworkIp as b, discoverWebSocketApisOrThrow as bn, applyCorsResponseHeaders as bt, resolveAlbTarget as c, rejectExplicitCfnStackWithMultipleStacks as cn, handleConnectionsRequest as ct, MAX_TASKS_SUBNET_RANGE_CAP as d, resolveCfnStackName as dn, buildDisconnectEvent as dt, substituteAgainstStateAsync as en, selectIntegrationResponse as et, addCommonEcsServiceOptions as f, CfnLocalStateProvider as fn, buildMessageEvent as ft, resolveSharedSidecarCredentials as g, resolveSingleTarget as gn, verifyCognitoJwt as gt, parseRestartPolicy as h, resolveWatchConfig as hn, createJwksCache as ht, addAlbSpecificOptions as i, materializeLayerFromArn as in, probeHostGatewaySupport as it, attachStageContext as j, pickAgentCoreCandidateStack as jn, MCP_PROTOCOL_VERSION as jt, createAuthorizerCache as k, AGENTCORE_RUNTIME_TYPE as kn, MCP_CONTAINER_PORT as kt, isApplicationLoadBalancer as l, resolveCfnFallbackRegion as ln, parseConnectionsPath as lt, parseMaxTasks as m, resolveSsmParameters as mn, buildJwksUrlFromIssuer as mt, createLocalListCommand as n, substituteEnvVarsFromStateAsync as nn, VtlEvaluationError as nt, createLocalStartAlbCommand as o, createLocalStateProvider as on, ConnectionRegistry as ot, buildEcsImageResolutionContext as p, collectSsmParameterRefs as pn, buildCognitoJwksUrl as pt, matchRoute as q, architectureToPlatform as qt, formatTargetListing as r, resolveEnvVars as rn, HOST_GATEWAY_MIN_VERSION as rt, parseLbPortOverrides as s, isCfnFlagPresent as sn, buildMgmtEndpointEnvUrl as st, addListSpecificOptions as t, substituteEnvVarsFromState as tn, tryParseStatus as tt, resolveAlbFrontDoor as u, resolveCfnRegion as un, buildConnectEvent as ut, buildCloudMapIndex as v, listTargets as vn, verifyJwtViaDiscovery as vt, createLocalInvokeAgentCoreCommand as w, resolveLambdaArnIntrinsic as wn, matchPreflight as wt, addRunTaskSpecificOptions as x, parseSelectionExpressionPath as xn, buildCorsConfigByApiId as xt, CloudMapRegistry as y, discoverWebSocketApis as yn, attachAuthorizers as yt, resolveSelectionExpression as z, downloadAndExtractS3Bundle as zt };
-//# sourceMappingURL=local-list-JDGfdnip.js.map
+export { pickResponseTemplate as $, substituteAgainstState as $t, createFileWatcher as A, AgentCoreResolutionError as An, MCP_PATH as At, resolveServiceIntegrationParameters as B, SUPPORTED_CODE_RUNTIMES as Bt, addInvokeAgentCoreSpecificOptions as C, pickRefLogicalId as Cn, isFunctionUrlOacFronted as Ct, createWatchPredicates as D, AGENTCORE_HTTP_PROTOCOL as Dn, A2A_PATH as Dt, createLocalStartApiCommand as E, AGENTCORE_AGUI_PROTOCOL as En, A2A_CONTAINER_PORT as Et, filterRoutesByApiIdentifiers as F, substituteImagePlaceholders as Fn, signAgentCoreInvocation as Ft, invokeRequestAuthorizer as G, addInvokeSpecificOptions as Gt, buildMethodArn as H, computeCodeImageTag as Ht, groupRoutesByServer as I, tryResolveImageFnJoin as In, AGENTCORE_SESSION_ID_HEADER as It, translateLambdaResponse as J, buildContainerImage as Jt, invokeTokenAuthorizer as K, createLocalInvokeCommand as Kt, readMtlsMaterialsFromDisk as L, LocalInvokeBuildError as Ln, invokeAgentCore as Lt, buildStageMap as M, resolveAgentCoreTarget as Mn, mcpInvokeOnce as Mt, availableApiIdentifiers as N, derivePseudoParametersFromRegion as Nn, parseSseForJsonRpc as Nt, resolveApiTargetSubset as O, AGENTCORE_MCP_PROTOCOL as On, a2aInvokeOnce as Ot, filterRoutesByApiIdentifier as P, formatStateRemedy as Pn, AGENTCORE_SIGV4_SERVICE as Pt, evaluateResponseParameters as Q, EcsTaskResolutionError as Qt, startApiServer as R, LocalStartServiceError as Rn, waitForAgentCorePing as Rt, createLocalRunTaskCommand as S, discoverRoutes as Sn, buildCorsConfigFromCloudFrontChain as St, addStartApiSpecificOptions as T, AGENTCORE_A2A_PROTOCOL as Tn, invokeAgentCoreWs as Tt, computeRequestIdentityHash as U, renderCodeDockerfile as Ut, defaultCredentialsLoader as V, buildAgentCoreCodeImage as Vt, evaluateCachedLambdaPolicy as W, toCmdArgv as Wt, buildHttpApiV2Event as X, resolveRuntimeFileExtension as Xt, applyAuthorizerOverlay as Y, resolveRuntimeCodeMountPath as Yt, buildRestV1Event as Z, resolveRuntimeImage as Zt, runEcsServiceEmulator as _, countTargets as _n, verifyJwtAuthorizer as _t, albStrategy as a, LocalStateSourceError as an, bufferToBody as at, getContainerNetworkIp as b, discoverWebSocketApisOrThrow as bn, applyCorsResponseHeaders as bt, resolveAlbTarget as c, rejectExplicitCfnStackWithMultipleStacks as cn, handleConnectionsRequest as ct, MAX_TASKS_SUBNET_RANGE_CAP as d, resolveCfnStackName as dn, buildDisconnectEvent as dt, substituteAgainstStateAsync as en, selectIntegrationResponse as et, addCommonEcsServiceOptions as f, CfnLocalStateProvider as fn, buildMessageEvent as ft, resolveSharedSidecarCredentials as g, resolveSingleTarget as gn, verifyCognitoJwt as gt, parseRestartPolicy as h, resolveWatchConfig as hn, createJwksCache as ht, addAlbSpecificOptions as i, materializeLayerFromArn as in, probeHostGatewaySupport as it, attachStageContext as j, pickAgentCoreCandidateStack as jn, MCP_PROTOCOL_VERSION as jt, createAuthorizerCache as k, AGENTCORE_RUNTIME_TYPE as kn, MCP_CONTAINER_PORT as kt, isApplicationLoadBalancer as l, resolveCfnFallbackRegion as ln, parseConnectionsPath as lt, parseMaxTasks as m, resolveSsmParameters as mn, buildJwksUrlFromIssuer as mt, createLocalListCommand as n, substituteEnvVarsFromStateAsync as nn, VtlEvaluationError as nt, createLocalStartAlbCommand as o, createLocalStateProvider as on, ConnectionRegistry as ot, buildEcsImageResolutionContext as p, collectSsmParameterRefs as pn, buildCognitoJwksUrl as pt, matchRoute as q, architectureToPlatform as qt, formatTargetListing as r, resolveEnvVars as rn, HOST_GATEWAY_MIN_VERSION as rt, parseLbPortOverrides as s, isCfnFlagPresent as sn, buildMgmtEndpointEnvUrl as st, addListSpecificOptions as t, substituteEnvVarsFromState as tn, tryParseStatus as tt, resolveAlbFrontDoor as u, resolveCfnRegion as un, buildConnectEvent as ut, buildCloudMapIndex as v, listTargets as vn, verifyJwtViaDiscovery as vt, createLocalInvokeAgentCoreCommand as w, resolveLambdaArnIntrinsic as wn, matchPreflight as wt, addRunTaskSpecificOptions as x, parseSelectionExpressionPath as xn, buildCorsConfigByApiId as xt, CloudMapRegistry as y, discoverWebSocketApis as yn, attachAuthorizers as yt, resolveSelectionExpression as z, withErrorHandling as zn, downloadAndExtractS3Bundle as zt };
+//# sourceMappingURL=local-list-CJj6-Ska.js.map