cdk-local 0.69.0 → 0.70.0

package/README.md

@@ -31,7 +31,10 @@ cdkl invoke MyStack/Fn --from-cfn-stack    # one Lambda against real DynamoDB /
 
 ## Why cdk-local
 
-- **Zero-friction local execution** — run standalone: no deploy, no IAM access, just Docker and your CDK app. Onboard new engineers, review a PR by actually running its code, or work on an OSS CDK sample without owning the maintainer's account.
+- **Zero-friction local execution** — run standalone with just Docker and your CDK app, no AWS account or deploy needed. Verify the parts of your app that don't touch AWS in seconds — handy as a zero-setup first run, or in CI where no credentials are available:
+  - API Gateway routing and request shaping
+  - Lambda authorizers, running in real local containers
+  - pure handler logic — validation, transforms, branching
 - **Iterate against your real deployed stack — including its data.** `--from-cfn-stack` reads the deployed CloudFormation stack and injects its real ARNs, Secret values, and IAM credentials into the container — no `.env` file to maintain, no manual ARN copy-paste — so you stay on the real DynamoDB rows, S3 objects, Cognito users, and Secret values your IAM credentials reach. An offline emulator can fake the API surface, but you'd still own the cost of seeding it:
   - dumping production data into a local DB
   - mirroring Secret values into local Secrets Manager
@@ -68,11 +71,61 @@ cdkl list                                      # every runnable target, grouped
 
 Full flags, precedence, and `--from-cfn-stack` resolution: [docs/cli-reference.md](docs/cli-reference.md) and [docs/local-emulation.md](docs/local-emulation.md).
 
+### Deployed stack binding — `--from-cfn-stack`
+
+`--from-cfn-stack` binds to the deployed CloudFormation stack whose name matches your CDK stack. The bare form resolves the stack name from the target; pass an explicit name only when the deployed CFn stack name differs (e.g. CDK's `stackName` prop was overridden):
+
+```bash
+cdkl invoke MyStack/Fn --from-cfn-stack                              # bare: uses resolved stack name
+cdkl invoke MyStack/Fn --from-cfn-stack MyExplicitCfnName            # explicit when names differ
+cdkl invoke MyStack/Fn --from-cfn-stack --stack-region eu-west-1     # cross-region CFn client
+cdkl invoke MyStack/Fn --from-cfn-stack --assume-role                # auto-assume deployed execution role
+```
+
+Substitutes `Ref` / `Fn::ImportValue` / `Fn::GetStackOutput` in env vars with the deployed physical IDs / exports, decrypts `AWS::SSM::Parameter::Value` entries (kept off the `docker run` argv), and resolves same-stack ECR `ContainerUri` to the deployed image. `Fn::GetAtt` in the Lambda's own env is recovered from the deployed function's resolved `Environment.Variables` via `lambda:GetFunctionConfiguration`. Full resolution rules: [docs/cli-reference.md#cloudformation-driven-env-recovery---from-cfn-stack](docs/cli-reference.md#cloudformation-driven-env-recovery---from-cfn-stack).
+
+### Environment variables — `--env-vars`
+
+Every command accepts `--env-vars <file>`, a SAM-shape JSON file that overlays the container's environment — point a Lambda function or ECS container at a different backend for a local run, or supply a value the synthesized template only knows as an intrinsic:
+
+```bash
+cdkl invoke MyStack/Fn --env-vars ./env.json
+cdkl start-service MyStack/MyService --env-vars ./env.json
+cdkl start-alb MyStack/MyAlb --env-vars ./env.json
+```
+
+```json
+{
+  "Parameters": { "LOG_LEVEL": "debug" },
+  "MyStack/Fn": { "TABLE_ENDPOINT": "http://localhost:8000" },
+  "AppContainer": { "DB_HOST": "host.docker.internal", "DB_PORT": "13306" }
+}
+```
+
+Each top-level JSON key picks which target to overlay:
+
+| Target | Key shape | Notes |
+| --- | --- | --- |
+| Every target | `Parameters` | Reserved literal; applied first to every container |
+| Lambda / AgentCore Runtime | CDK construct path (e.g. `MyStack/Fn`) | From `Metadata['aws:cdk:path']` of the resource; prefix-matched (`MyStack/Fn` also catches `MyStack/Fn/Resource`) |
+| Lambda / AgentCore Runtime | CloudFormation logical ID (e.g. `MyStackFn1A2B3C`) | Top-level resource key in the synthesized template; exact match |
+| ECS container | Container Name (e.g. `AppContainer`) | The `containerName` set in CDK (= `ContainerDefinitions[].Name`). The TaskDefinition's CDK path / logical ID is NOT accepted as a key — it would identify the TaskDef but not which container's env block to overlay |
+
+Precedence is template literals < ECS `Secrets` < `Parameters` < target-specific, so a value sourced from Secrets Manager / SSM via a TaskDefinition `Secrets[]` entry is overridable here (the secret is still fetched first, then replaced). A `null` value clears a variable. Running standalone, env vars whose template value is an intrinsic (`Ref` / `Fn::GetAtt`) can't be resolved without a deployed stack and are dropped with a warning — `--env-vars` is how you supply a concrete value for them.
+
+When pointing a container at a tunneled VPC resource (e.g. an Aurora cluster reached via a local port forward), use `host.docker.internal` instead of `127.0.0.1` — `127.0.0.1` inside the container is the container itself, not the host where the tunnel listens.
+
 ### Hot reload — `--watch`
 
+```bash
+cdkl start-api --watch        # reload API routes on save
+cdkl start-service --watch    # roll ECS replicas on save
+cdkl start-alb --watch        # roll ALB-fronted ECS replicas on save
+```
+
 `cdkl start-api --watch` re-synths your CDK app and reloads routes when the source changes, so editing a handler is reflected on the next request without restarting the server. Synth failures keep the previous version serving (warn-and-continue). Honors `cdk.json`'s `watch.include` / `watch.exclude` globs, so no separate `cdk watch` process is needed.
 
-`cdkl start-service --watch` and `cdkl start-alb --watch` bring the same edit-and-go loop to ECS services: re-synth + per-replica reload on save. A per-firing classifier picks the per-replica primitive — a source-only edit on an interpreted-language handler (Node / Python / Ruby / shell) takes a bind-mount FAST PATH (`docker cp` the new source into each replica's WORKDIR + `docker restart`; no `docker build`, no shadow boot, sub-second), while a Dockerfile / dependency manifest / compiled-language source edit falls through to the rebuild rolling primitive (boot a shadow replica with the new image, wait for it to accept TCP, atomically swap Service-Connect / Cloud Map / ALB front-door pool pointers, then retire the old container). Either path rolls one replica at a time, so peer services AND an external request stream against the ALB listener port see zero connection refusals across the reload even on multi-replica services. The host front-door (TLS materials, JWKS cache, Lambda-target containers, listener sockets) stays up across the reload; only the per-replica pool entries rotate. The previous replica(s) keep serving when synth fails mid-reload.
+`cdkl start-service --watch` and `cdkl start-alb --watch` bring the same edit-and-go loop to ECS services. A source-only edit on an interpreted-language handler (Node / Python / Ruby / shell) takes a sub-second fast path; a Dockerfile / dependency / compiled-source change triggers a rolling rebuild. Either way replicas roll one at a time, so the service stays available — an external request stream against the ALB listener port sees zero connection refusals, even on multi-replica services. Synth failures keep the previous replica(s) serving.
 
 Full reload pipeline + glob defaults: [docs/local-emulation.md#hot-reload---watch](docs/local-emulation.md#hot-reload---watch).
 

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { A as createLocalStartApiCommand, E as createLocalRunTaskCommand, O as createLocalInvokeAgentCoreCommand, Xt as createLocalInvokeCommand, f as createLocalStartServiceCommand, n as createLocalListCommand, o as createLocalStartAlbCommand } from "./local-list-l2_7oGHF.js";
+import { D as createLocalRunTaskCommand, Zt as createLocalInvokeCommand, f as createLocalStartServiceCommand, j as createLocalStartApiCommand, k as createLocalInvokeAgentCoreCommand, n as createLocalListCommand, o as createLocalStartAlbCommand } from "./local-list-C-wXKogn.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.69.0");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.70.0");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalInvokeAgentCoreCommand());
 program.addCommand(createLocalStartApiCommand());

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $n as rejectExplicitCfnStackWithMultipleStacks, Bn as createLocalInvokeCommand, G as countTargets, Gn as resetEmbedConfig, Jn as LocalStateProviderFactory, Jt as CreateLocalInvokeAgentCoreCommandOptions, K as listTargets, Kn as setEmbedConfig, Qn as isCfnFlagPresent, Rn as CreateLocalInvokeCommandOptions, U as TargetEntry, Un as CdkLocalEmbedConfig, W as TargetListing, Wn as getEmbedConfig, Xn as LocalStateSourceOptions, Xt as createLocalInvokeAgentCoreCommand, Y as CreateLocalRunTaskCommandOptions, Yn as LocalStateSourceError, Z as createLocalRunTaskCommand, Zn as createLocalStateProvider, _r as CloudFormationTemplate, a as formatTargetListing, ar as ResolvedSsmParameters, cr as resolveSsmParameters, dr as StateEnvSubstitutionAudit, er as resolveCfnFallbackRegion, et as CreateLocalStartApiCommandOptions, f as CreateLocalStartServiceCommandOptions, fr as SubstitutionContext, gr as substituteEnvVarsFromStateAsync, hr as substituteEnvVarsFromState, i as createLocalListCommand, ir as LocalStateRecord, l as createLocalStartAlbCommand, lr as CrossStackResolver, m as createLocalStartServiceCommand, mr as substituteAgainstStateAsync, n as FormatTargetListingOptions, nr as resolveCfnStackName, o as CreateLocalStartAlbCommandOptions, or as SsmParameterRef, pr as substituteAgainstState, qn as ExtraStateProviders, rr as LocalStateProvider, rt as createLocalStartApiCommand, sr as collectSsmParameterRefs, t as CreateLocalListCommandOptions, tr as resolveCfnRegion, ur as PseudoParameters } from "./local-list-9jAE7ClA.js";
+import { $ as CreateLocalRunTaskCommandOptions, $n as LocalStateSourceError, Hn as CreateLocalInvokeCommandOptions, J as TargetListing, Jn as getEmbedConfig, Qn as LocalStateProviderFactory, Qt as CreateLocalInvokeAgentCoreCommandOptions, Wn as createLocalInvokeCommand, X as listTargets, Xn as setEmbedConfig, Y as countTargets, Yn as resetEmbedConfig, Zn as ExtraStateProviders, _r as substituteAgainstState, a as formatTargetListing, ar as resolveCfnRegion, br as substituteEnvVarsFromStateAsync, cr as LocalStateRecord, dr as collectSsmParameterRefs, en as createLocalInvokeAgentCoreCommand, er as LocalStateSourceOptions, f as CreateLocalStartServiceCommandOptions, fr as resolveSsmParameters, gr as SubstitutionContext, hr as StateEnvSubstitutionAudit, i as createLocalListCommand, ir as resolveCfnFallbackRegion, it as CreateLocalStartApiCommandOptions, l as createLocalStartAlbCommand, lr as ResolvedSsmParameters, m as createLocalStartServiceCommand, mr as PseudoParameters, n as FormatTargetListingOptions, nr as isCfnFlagPresent, o as CreateLocalStartAlbCommandOptions, or as resolveCfnStackName, pr as CrossStackResolver, q as TargetEntry, qn as CdkLocalEmbedConfig, rr as rejectExplicitCfnStackWithMultipleStacks, sr as LocalStateProvider, st as createLocalStartApiCommand, t as CreateLocalListCommandOptions, tr as createLocalStateProvider, tt as createLocalRunTaskCommand, ur as SsmParameterRef, vr as substituteAgainstStateAsync, xr as CloudFormationTemplate, yr as substituteEnvVarsFromState } from "./local-list-D6VYjdj1.js";
 import { CloudFormationClient } from "@aws-sdk/client-cloudformation";
 
 //#region src/local/cfn-local-state-provider.d.ts

package/dist/index.js

@@ -1,4 +1,4 @@
 import { c as getEmbedConfig, l as resetEmbedConfig, u as setEmbedConfig } from "./docker-cmd-voNPrcRh.js";
-import { A as createLocalStartApiCommand, E as createLocalRunTaskCommand, O as createLocalInvokeAgentCoreCommand, Sn as listTargets, Xt as createLocalInvokeCommand, _n as collectSsmParameterRefs, an as substituteEnvVarsFromState, dn as isCfnFlagPresent, f as createLocalStartServiceCommand, fn as rejectExplicitCfnStackWithMultipleStacks, gn as CfnLocalStateProvider, hn as resolveCfnStackName, in as substituteAgainstStateAsync, ln as LocalStateSourceError, mn as resolveCfnRegion, n as createLocalListCommand, o as createLocalStartAlbCommand, on as substituteEnvVarsFromStateAsync, pn as resolveCfnFallbackRegion, r as formatTargetListing, rn as substituteAgainstState, un as createLocalStateProvider, vn as resolveSsmParameters, xn as countTargets } from "./local-list-l2_7oGHF.js";
+import { Cn as listTargets, D as createLocalRunTaskCommand, Sn as countTargets, Zt as createLocalInvokeCommand, _n as CfnLocalStateProvider, an as substituteAgainstStateAsync, dn as createLocalStateProvider, f as createLocalStartServiceCommand, fn as isCfnFlagPresent, gn as resolveCfnStackName, hn as resolveCfnRegion, in as substituteAgainstState, j as createLocalStartApiCommand, k as createLocalInvokeAgentCoreCommand, mn as resolveCfnFallbackRegion, n as createLocalListCommand, o as createLocalStartAlbCommand, on as substituteEnvVarsFromState, pn as rejectExplicitCfnStackWithMultipleStacks, r as formatTargetListing, sn as substituteEnvVarsFromStateAsync, un as LocalStateSourceError, vn as collectSsmParameterRefs, yn as resolveSsmParameters } from "./local-list-C-wXKogn.js";
 
 export { CfnLocalStateProvider, LocalStateSourceError, collectSsmParameterRefs, countTargets, createLocalInvokeAgentCoreCommand, createLocalInvokeCommand, createLocalListCommand, createLocalRunTaskCommand, createLocalStartAlbCommand, createLocalStartApiCommand, createLocalStartServiceCommand, createLocalStateProvider, formatTargetListing, getEmbedConfig, isCfnFlagPresent, listTargets, rejectExplicitCfnStackWithMultipleStacks, resetEmbedConfig, resolveCfnFallbackRegion, resolveCfnRegion, resolveCfnStackName, resolveSsmParameters, setEmbedConfig, substituteAgainstState, substituteAgainstStateAsync, substituteEnvVarsFromState, substituteEnvVarsFromStateAsync };

package/dist/internal.d.ts

@@ -1,7 +1,29 @@
-import { $ as ApiTargetSubset, $t as AgentCoreWsResult, A as buildEcsImageResolutionContext, An as ResolvedAgentCoreRuntime, At as CorsConfig, B as buildCloudMapIndex, Bt as evaluateResponseParameters, C as PlannedForwardAction, Cn as AGENTCORE_HTTP_PROTOCOL, Ct as CachedAuthorizerResult, D as PlannedRedirectAction, Dn as AgentCoreCustomClaim, Dt as LambdaTokenAuthorizer, E as PlannedLambdaForwardTarget, En as AgentCoreCodeArtifact, Et as LambdaRequestAuthorizer, F as FrontDoorForwardTarget, Fn as formatStateRemedy, Ft as matchPreflight, Gt as ContainerPool, H as RegistrationHandle, Hn as StackInfo, Ht as selectIntegrationResponse, I as ResolvedListenerAction, In as substituteImagePlaceholders, It as DiscoveredRoute, J as LocalInvokeBuildError, Kt as CdkWatchConfig, L as isApplicationLoadBalancer, Ln as tryResolveImageFnJoin, Lt as RestV1IntegrationConfig, M as parseRestartPolicy, Mn as resolveAgentCoreTarget, Mt as buildCorsConfigByApiId, N as resolveSharedSidecarCredentials, Nn as ImageResolutionContext, Nt as buildCorsConfigFromCloudFrontChain, O as ServiceBoot, On as AgentCoreJwtAuthorizer, Ot as RouteWithAuth, P as runEcsServiceEmulator, Pn as derivePseudoParametersFromRegion, Pt as isFunctionUrlOacFronted, Q as EcsTaskResolutionError, Qt as resolveEnvVars, R as resolveAlbFrontDoor, Rt as discoverRoutes, S as PlannedFixedResponseAction, Sn as AGENTCORE_AGUI_PROTOCOL, St as AuthorizerCache, T as PlannedFrontDoorListener, Tn as AGENTCORE_RUNTIME_TYPE, Tt as AuthorizerInfo, U as TargetEntry, Ut as tryParseStatus, V as CloudMapRegistry, Vn as ResolvedArnLambdaLayer, Vt as pickResponseTemplate, Wt as VtlEvaluationError, X as addRunTaskSpecificOptions, Yt as addInvokeAgentCoreSpecificOptions, Zt as EnvOverrideFile, _ as EmulatorStrategy, _n as AgentCoreInvokeResult, _r as CloudFormationTemplate, _t as buildJwksUrlFromIssuer, an as A2aInvokeResult, at as resolveApiTargetSubset, b as PlannedAction, bn as waitForAgentCorePing, bt as verifyJwtAuthorizer, c as albStrategy, cn as MCP_CONTAINER_PORT, ct as StartedApiServer, d as resolveAlbTarget, dn as McpInvokeOptions, dt as CredentialsLoader, en as InvokeAgentCoreWsOptions, fn as McpInvokeResult, ft as defaultCredentialsLoader, g as EcsServiceEmulatorOptions, gn as AGENTCORE_SESSION_ID_HEADER, gt as buildCognitoJwksUrl, h as serviceStrategy, hn as parseSseForJsonRpc, ht as JwtCustomClaim, in as A2aInvokeOptions, it as createWatchPredicates, j as parseMaxTasks, jn as pickAgentCoreCandidateStack, jt as applyCorsResponseHeaders, k as addCommonEcsServiceOptions, kn as AgentCoreResolutionError, kt as attachAuthorizers, ln as MCP_PATH, lt as readMtlsMaterialsFromDisk, mn as mcpInvokeOnce, mt as JwksCache, nn as A2A_CONTAINER_PORT, nt as addStartApiSpecificOptions, on as A2aJsonRpcRequest, ot as MtlsServerConfig, p as addStartServiceSpecificOptions, pn as McpJsonRpcRequest, pt as DiscoveryJwtAuthorizer, q as CdkLocalError, qt as resolveWatchConfig, r as addListSpecificOptions, rn as A2A_PATH, s as addAlbSpecificOptions, sn as a2aInvokeOnce, st as ServerState, tn as invokeAgentCoreWs, tt as WatchPredicates, u as parseLbPortOverrides, un as MCP_PROTOCOL_VERSION, ut as startApiServer, v as FrontDoorPlan, vn as InvokeAgentCoreOptions, vt as createJwksCache, w as PlannedForwardTarget, wn as AGENTCORE_MCP_PROTOCOL, wt as createAuthorizerCache, x as PlannedEcsForwardTarget, xn as AGENTCORE_A2A_PROTOCOL, xt as verifyJwtViaDiscovery, y as MAX_TASKS_SUBNET_RANGE_CAP, yn as invokeAgentCore, yt as verifyCognitoJwt, z as CloudMapIndex, zn as addInvokeSpecificOptions, zt as IntegrationResponseEntry } from "./local-list-9jAE7ClA.js";
+import { $t as addInvokeAgentCoreSpecificOptions, A as buildEcsImageResolutionContext, An as AgentCoreCodeArtifact, At as LambdaRequestAuthorizer, B as ReloadVerdict, Bn as substituteImagePlaceholders, Bt as DiscoveredRoute, C as PlannedForwardAction, Cn as invokeAgentCore, Ct as verifyCognitoJwt, D as PlannedRedirectAction, Dn as AGENTCORE_HTTP_PROTOCOL, Dt as CachedAuthorizerResult, E as PlannedLambdaForwardTarget, En as AGENTCORE_AGUI_PROTOCOL, Et as AuthorizerCache, F as FrontDoorForwardTarget, Fn as pickAgentCoreCandidateStack, Ft as applyCorsResponseHeaders, G as CloudMapRegistry, Gn as ResolvedArnLambdaLayer, Gt as pickResponseTemplate, H as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, Ht as discoverRoutes, I as ResolvedListenerAction, In as resolveAgentCoreTarget, It as buildCorsConfigByApiId, Jt as VtlEvaluationError, K as RegistrationHandle, Kn as StackInfo, Kt as selectIntegrationResponse, L as isApplicationLoadBalancer, Ln as ImageResolutionContext, Lt as buildCorsConfigFromCloudFrontChain, M as parseRestartPolicy, Mn as AgentCoreJwtAuthorizer, Mt as RouteWithAuth, N as resolveSharedSidecarCredentials, Nn as AgentCoreResolutionError, Nt as attachAuthorizers, O as ServiceBoot, On as AGENTCORE_MCP_PROTOCOL, Ot as createAuthorizerCache, P as runEcsServiceEmulator, Pn as ResolvedAgentCoreRuntime, Pt as CorsConfig, Q as LocalInvokeBuildError, R as resolveAlbFrontDoor, Rn as derivePseudoParametersFromRegion, Rt as isFunctionUrlOacFronted, S as PlannedFixedResponseAction, Sn as InvokeAgentCoreOptions, St as createJwksCache, T as PlannedFrontDoorListener, Tn as AGENTCORE_A2A_PROTOCOL, Tt as verifyJwtViaDiscovery, U as CloudMapIndex, Un as addInvokeSpecificOptions, Ut as IntegrationResponseEntry, V as classifySourceChange, Vn as tryResolveImageFnJoin, Vt as RestV1IntegrationConfig, W as buildCloudMapIndex, Wt as evaluateResponseParameters, Xt as CdkWatchConfig, Yt as ContainerPool, Z as CdkLocalError, Zt as resolveWatchConfig, _ as EmulatorStrategy, _n as McpJsonRpcRequest, _t as DiscoveryJwtAuthorizer, an as invokeAgentCoreWs, at as WatchPredicates, b as PlannedAction, bn as AGENTCORE_SESSION_ID_HEADER, bt as buildCognitoJwksUrl, c as albStrategy, cn as A2aInvokeOptions, ct as createWatchPredicates, d as resolveAlbTarget, dn as a2aInvokeOnce, dt as ServerState, et as addRunTaskSpecificOptions, fn as MCP_CONTAINER_PORT, ft as StartedApiServer, g as EcsServiceEmulatorOptions, gn as McpInvokeResult, gt as defaultCredentialsLoader, h as serviceStrategy, hn as McpInvokeOptions, ht as CredentialsLoader, in as InvokeAgentCoreWsOptions, j as parseMaxTasks, jn as AgentCoreCustomClaim, jt as LambdaTokenAuthorizer, k as addCommonEcsServiceOptions, kn as AGENTCORE_RUNTIME_TYPE, kt as AuthorizerInfo, ln as A2aInvokeResult, lt as resolveApiTargetSubset, mn as MCP_PROTOCOL_VERSION, mt as startApiServer, nn as resolveEnvVars, nt as EcsTaskResolutionError, on as A2A_CONTAINER_PORT, ot as addStartApiSpecificOptions, p as addStartServiceSpecificOptions, pn as MCP_PATH, pt as readMtlsMaterialsFromDisk, q as TargetEntry, qt as tryParseStatus, r as addListSpecificOptions, rn as AgentCoreWsResult, rt as ApiTargetSubset, s as addAlbSpecificOptions, sn as A2A_PATH, tn as EnvOverrideFile, u as parseLbPortOverrides, un as A2aJsonRpcRequest, ut as MtlsServerConfig, v as FrontDoorPlan, vn as mcpInvokeOnce, vt as JwksCache, w as PlannedForwardTarget, wn as waitForAgentCorePing, wt as verifyJwtAuthorizer, x as PlannedEcsForwardTarget, xn as AgentCoreInvokeResult, xr as CloudFormationTemplate, xt as buildJwksUrlFromIssuer, y as MAX_TASKS_SUBNET_RANGE_CAP, yn as parseSseForJsonRpc, yt as JwtCustomClaim, z as ReloadAssetContext, zn as formatStateRemedy, zt as matchPreflight } from "./local-list-D6VYjdj1.js";
 import { WebSocket } from "ws";
 import { IncomingMessage, ServerResponse } from "node:http";
 
+//#region src/types/assets.d.ts
+interface DockerImageAssetSource {
+  directory?: string;
+  executable?: string[];
+  dockerFile?: string;
+  dockerBuildTarget?: string;
+  dockerBuildArgs?: Record<string, string>;
+  dockerBuildContexts?: Record<string, string>;
+  dockerBuildSsh?: string;
+  dockerBuildSecrets?: Record<string, string>;
+  networkMode?: string;
+  platform?: string;
+  dockerOutputs?: string[];
+  cacheFrom?: DockerCacheOption[];
+  cacheTo?: DockerCacheOption;
+  cacheDisabled?: boolean;
+}
+interface DockerCacheOption {
+  type: string;
+  params?: Record<string, string>;
+}
+//#endregion
 //#region src/local/intrinsic-utils.d.ts
 declare function pickRefLogicalId(value: unknown): string | null;
 //#endregion
@@ -388,28 +410,6 @@ interface SignedAgentCoreHeaders {
 }
 declare function signAgentCoreInvocation(opts: SignAgentCoreInvocationOptions): Promise<SignedAgentCoreHeaders>;
 //#endregion
-//#region src/types/assets.d.ts
-interface DockerImageAssetSource {
-  directory?: string;
-  executable?: string[];
-  dockerFile?: string;
-  dockerBuildTarget?: string;
-  dockerBuildArgs?: Record<string, string>;
-  dockerBuildContexts?: Record<string, string>;
-  dockerBuildSsh?: string;
-  dockerBuildSecrets?: Record<string, string>;
-  networkMode?: string;
-  platform?: string;
-  dockerOutputs?: string[];
-  cacheFrom?: DockerCacheOption[];
-  cacheTo?: DockerCacheOption;
-  cacheDisabled?: boolean;
-}
-interface DockerCacheOption {
-  type: string;
-  params?: Record<string, string>;
-}
-//#endregion
 //#region src/local/docker-image-builder.d.ts
 interface BuildContainerImageOptions {
   architecture: 'x86_64' | 'arm64';
@@ -434,23 +434,6 @@ interface FileWatcherOptions {
 }
 declare function createFileWatcher(options: FileWatcherOptions): FileWatcher;
 //#endregion
-//#region src/local/source-change-classifier.d.ts
-interface ReloadAssetContext {
-  oldAssetHash?: string;
-  newAssetHash: string;
-  newAssetSourceDir: string;
-  dockerFile: string;
-}
-type ReloadVerdict = {
-  kind: 'rebuild';
-  reason: string;
-} | {
-  kind: 'soft-reload';
-  reason: string;
-  newAssetSourceDir: string;
-};
-declare function classifySourceChange(changedPaths: readonly string[], ctx: ReloadAssetContext | undefined): ReloadVerdict;
-//#endregion
 //#region src/local/target-picker.d.ts
 interface ResolveParams {
   entries: TargetEntry[];
@@ -460,5 +443,5 @@ interface ResolveParams {
 }
 declare function resolveSingleTarget(provided: string | undefined, params: ResolveParams): Promise<string>;
 //#endregion
-export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type BuildAgentCoreCodeImageOptions, type BuildContainerImageOptions, type CachedAuthorizerResult, type CdkWatchConfig, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CredentialsLoader, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EmulatorStrategy, type EnvOverrideFile, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type LambdaArnResolveOutcome, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MtlsServerConfig, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type RegistrationHandle, type ReloadAssetContext, type ReloadVerdict, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedListenerAction, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type S3BundleCredentials, type S3BundleLocation, SUPPORTED_CODE_RUNTIMES, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartedApiServer, type TranslatedHttpResponse, VtlEvaluationError, type WatchPredicates, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, addStartServiceSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, classifySourceChange, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, serviceStrategy, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
+export { A2A_CONTAINER_PORT, A2A_PATH, type A2aInvokeOptions, type A2aInvokeResult, type A2aJsonRpcRequest, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, type AgentCoreCodeArtifact, type AgentCoreCustomClaim, type AgentCoreInvokeResult, type AgentCoreJwtAuthorizer, AgentCoreResolutionError, type AgentCoreWsResult, type ApiServerGroup, type ApiTargetSubset, type AuthorizerCache, type AuthorizerEventOverlay, type AuthorizerInfo, type BuildAgentCoreCodeImageOptions, type BuildContainerImageOptions, type CachedAuthorizerResult, type CdkWatchConfig, type CloudMapIndex, CloudMapRegistry, ConnectionRegistry, type ConnectionRegistryEntry, type CorsConfig, type CredentialsLoader, type DiscoveredRoute, type DiscoveredWebSocketApi, type DiscoveryJwtAuthorizer, type DownloadS3BundleOptions, type EcsServiceEmulatorOptions, EcsTaskResolutionError, type EmulatorStrategy, type EnvOverrideFile, type ExtractedS3Bundle, type FileWatcher, type FileWatcherOptions, type FrontDoorForwardTarget, type FrontDoorPlan, HOST_GATEWAY_MIN_VERSION, type HttpRequestSnapshot, type ImageResolutionContext, type IntegrationResponseEntry, type InvokeAgentCoreOptions, type InvokeAgentCoreWsOptions, type JwksCache, type JwtCustomClaim, type LambdaArnResolveOutcome, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, type MatchedRouteContext, type McpInvokeOptions, type McpInvokeResult, type McpJsonRpcRequest, type MtlsServerConfig, type PlannedAction, type PlannedEcsForwardTarget, type PlannedFixedResponseAction, type PlannedForwardAction, type PlannedForwardTarget, type PlannedFrontDoorListener, type PlannedLambdaForwardTarget, type PlannedRedirectAction, type RegistrationHandle, type ReloadAssetContext, type ReloadVerdict, type RequestParameterContext, type ResolveParametersOutcome, type ResolvedAgentCoreRuntime, type ResolvedListenerAction, type ResolvedStage, type RestV1IntegrationConfig, type RouteMatchResult, type RouteWithAuth, type S3BundleCredentials, type S3BundleLocation, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, type ServerState, type ServiceBoot, type SigV4Credentials, type SignAgentCoreInvocationOptions, type SignedAgentCoreHeaders, type StartedApiServer, type TranslatedHttpResponse, VtlEvaluationError, type WatchPredicates, type WebSocketHandshakeSnapshot, type WebSocketLambdaEvent, type WebSocketRouteEntry, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, addStartServiceSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, classifySourceChange, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, serviceStrategy, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
 //# sourceMappingURL=internal.d.ts.map

package/dist/internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal.d.ts","names":[],"sources":["../src/local/intrinsic-utils.ts","../src/local/intrinsic-lambda-arn.ts","../src/local/parameter-mapping.ts","../src/local/api-gateway-response.ts","../src/local/docker-inspect.ts","../src/local/route-matcher.ts","../src/local/api-gateway-event.ts","../src/local/websocket-route-discovery.ts","../src/local/lambda-authorizer.ts","../src/local/stage-resolver.ts","../src/local/runtime-image.ts","../src/local/websocket-event.ts","../src/local/websocket-mgmt-api.ts","../src/local/websocket-body.ts","../src/local/docker-version.ts","../src/local/api-server-grouping.ts","../src/local/layer-arn-materializer.ts","../src/local/agentcore-code-build.ts","../src/local/agentcore-s3-bundle.ts","../src/local/agentcore-sigv4-sign.ts","../src/types/assets.ts","../src/local/docker-image-builder.ts","../src/local/file-watcher.ts","../src/local/source-change-classifier.ts","../src/local/target-picker.ts"],"mappings":";;;;;iBASgB,gBAAA,CAAiB,KAAA;;;KCmCrB,uBAAA;EACN,IAAA;EAAkB,SAAA;AAAA;EAClB,IAAA;EAAqB,MAAA;AAAA;AAAA,iBAuBX,yBAAA,CAA0B,KAAA,YAAiB,uBAAA;;;UCpB1C,uBAAA;EAEf,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,WAAA,EAAa,QAAA,CAAS,MAAA;EAEtB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAEzB,WAAA;EAEA,IAAA;EAEA,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAoBzB,UAAA,GAAa,QAAA,CAAS,MAAA;AAAA;AAAA,KASZ,wBAAA;EACN,IAAA;EAAY,QAAA,EAAU,MAAA;AAAA;EACtB,IAAA;EAAe,MAAA;AAAA;AAAA,iBAQL,mCAAA,CACd,UAAA,EAAY,QAAA,CAAS,MAAA,oBACrB,GAAA,EAAK,uBAAA,GACJ,wBAAA;AAAA,iBAkCa,0BAAA,CAA2B,KAAA,UAAe,GAAA,EAAK,uBAAA;;;UCnH9C,sBAAA;EACf,UAAA;EAMA,OAAA,EAAS,MAAA;EAET,OAAA;EAEA,IAAA,EAAM,MAAA;AAAA;AAAA,iBAgBQ,uBAAA,CACd,OAAA,WACA,OAAA,gBACC,sBAAA;;;iBChCmB,qBAAA,CACpB,WAAA,UACA,WAAA,WACC,OAAA;;;UCHc,gBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;AAAA;AAAA,iBAQF,UAAA,CACd,MAAA,UACA,WAAA,UACA,MAAA,WAAiB,eAAA,KAChB,gBAAA;;;UC5Bc,mBAAA;EAEf,MAAA;EAKA,MAAA;EAMA,OAAA,EAAS,MAAA;EAET,IAAA,EAAM,MAAA;EAEN,QAAA;EAwBA,UAAA,GAAa,MAAA;AAAA;AAAA,UAQE,mBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;EAEhB,WAAA;AAAA;AAAA,iBA+Bc,mBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,iBA4Ea,gBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,KAiFS,sBAAA;EACN,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAyB,MAAA,EAAQ,MAAA;AAAA;EACjC,IAAA;EAAqB,MAAA,EAAQ,MAAA;EAAyB,MAAA;AAAA;AAAA,iBAY5C,sBAAA,CACd,KAAA,EAAO,MAAA,mBACP,OAAA,EAAS,sBAAA,GACR,MAAA;;;UC3Pc,sBAAA;EAEf,YAAA;EAEA,YAAA;EAEA,UAAA;EAMA,UAAA;EAQA,wBAAA;EAOA,KAAA;EAaA,MAAA,EAAQ,mBAAA;EAiBR,WAAA;IAAgB,MAAA;EAAA;AAAA;AAAA,UAID,mBAAA;EAEf,QAAA;EAEA,qBAAA;EAEA,eAAA;EAEA,UAAA;AAAA;AAAA,iBAuBc,qBAAA,CAAsB,MAAA,WAAiB,SAAA;EACrD,IAAA,EAAM,sBAAA;EACN,MAAA;AAAA;AAAA,iBA8Bc,4BAAA,CACd,MAAA,WAAiB,SAAA,KAChB,sBAAA;AAAA,iBAgJa,4BAAA,CAA6B,IAAA;;;UC3Q5B,4BAAA;EAEf,MAAA;EAEA,OAAA,EAAS,MAAA;EAET,qBAAA,EAAuB,MAAA;EAEvB,cAAA,EAAgB,MAAA;EAEhB,QAAA;EAEA,WAAA;EAEA,KAAA;AAAA;AAAA,UAGe,2BAAA;EAEf,IAAA,EAAM,aAAA;EAEN,YAAA;EAMA,SAAA;EAEA,aAAA;EAEA,SAAA;AAAA;AAAA,iBAWc,cAAA,CAAe,IAAA;EAC7B,KAAA;EACA,SAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,iBAoBoB,qBAAA,CACpB,UAAA,EAAY,qBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyBhB,uBAAA,CACpB,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyEtB,0BAAA,CACd,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA;EACN,YAAA;EAAsB,OAAA;AAAA;AAAA,iBAmRX,0BAAA,CACd,MAAA,EAAQ,sBAAA,EACR,SAAA,WACC,sBAAA;;;UC7bc,aAAA;EAEf,cAAA;EAEA,SAAA;EAEA,UAAA;EAEA,SAAA,EAAW,MAAA;AAAA;AAAA,iBAgCG,aAAA,CACd,QAAA,EAAU,sBAAA,EACV,aAAA,YACC,GAAA,SAAY,aAAA;AAAA,iBA4HC,kBAAA,CACd,MAAA,EAAQ,eAAA,IACR,QAAA,EAAU,GAAA,SAAY,aAAA;;;iBCjHR,mBAAA,CAAoB,OAAA;AAAA,iBAgBpB,2BAAA,CAA4B,OAAA;AAAA,iBA6E5B,2BAAA,CAA4B,OAAA;;;UC3I3B,0BAAA;EAEf,OAAA,EAAS,MAAA;EAET,cAAA;EAEA,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,QAAA;EAEA,SAAA;AAAA;AAAA,UAQe,2BAAA;EACf,QAAA;EACA,SAAA;EACA,YAAA;EACA,iBAAA;EACA,WAAA;EACA,gBAAA;EACA,gBAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,UAAA;EACA,KAAA;EACA,UAAA;EACA,QAAA;IACE,SAAA;IACA,QAAA;IACA,SAAA;EAAA;AAAA;AAAA,UAKa,oBAAA;EAEf,OAAA,GAAU,MAAA;EAEV,iBAAA,GAAoB,MAAA;EAEpB,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,cAAA,EAAgB,2BAAA,GAA8B,MAAA;EAE9C,eAAA;EAEA,IAAA;AAAA;AAAA,iBAqDc,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;AAAA,IACR,oBAAA;AAAA,iBA6BY,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,QAAA;EACA,IAAA;EASA,eAAA;AAAA,IACE,oBAAA;AAAA,iBA4BY,oBAAA,CAAqB,IAAA;EACnC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,oBAAA;EACA,gBAAA;AAAA,IACE,oBAAA;;;UChNa,uBAAA;EAEf,YAAA;EAEA,MAAA,EAAQ,SAAA;EAER,WAAA;EAEA,YAAA;EAEA,KAAA;AAAA;AAAA,cAOW,kBAAA;EAAA,iBACM,OAAA;EAEjB,QAAA,CAAS,KAAA,EAAO,uBAAA;EAIhB,UAAA,CAAW,YAAA,WAAuB,uBAAA;EAMlC,GAAA,CAAI,YAAA,WAAuB,uBAAA;EAI3B,IAAA,CAAA;EASA,IAAA,CAAA,GAAQ,uBAAA;EAIR,KAAA,CAAA;AAAA;AAAA,iBA4Bc,oBAAA,CAAqB,GAAA;EACnC,YAAA;AAAA;AAAA,iBA0Bc,uBAAA,CAAwB,IAAA,UAAc,IAAA,UAAc,KAAA;AAAA,iBAkE9C,wBAAA,CAAyB,IAAA;EAC7C,GAAA,EAAK,eAAA;EACL,GAAA,EAAK,cAAA;EACL,QAAA,EAAU,kBAAA;AAAA,IACR,OAAA;;;iBC5LY,YAAA,CACd,GAAA,EAAK,MAAA,GAAS,WAAA,GAAc,MAAA,IAC5B,QAAA;EACG,IAAA;EAAc,eAAA;AAAA;;;cCJN,wBAAA,EAA0B,mBAAA;AAAA,UAEtB,mBAAA;EACf,KAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAmCe,sBAAA;EAEf,UAAA;EAEA,MAAA,EAAQ,mBAAA;EAMR,SAAA;AAAA;AAAA,iBAqBoB,uBAAA,CAAA,GAA2B,OAAA,CAAQ,sBAAA;;;UCzDxC,cAAA;EAAA,SAmBN,SAAA;EAAA,SAEA,WAAA;EAAA,SAEA,IAAA;EAAA,SAMA,UAAA;EAAA,SAEA,MAAA,WAAiB,aAAA;AAAA;AAAA,iBAgBZ,mBAAA,CAAoB,MAAA,WAAiB,aAAA,KAAkB,cAAA;AAAA,iBAqGvD,2BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,UAAA,WACC,aAAA;AAAA,iBAqBa,4BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,sBACC,aAAA;AAAA,iBAkCa,uBAAA,CAAwB,MAAA,WAAiB,aAAA;;;UCpMxC,uBAAA;EAQf,OAAA;EAMA,mBAAA,IAAuB,MAAA,UAAgB,WAAA,GAAc,cAAA,KAAmB,gBAAA;EAKxE,gBAAA,IAAoB,MAAA,aAAmB,aAAA;EAMvC,QAAA,IAAY,YAAA,aAAyB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAG9B,cAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAOe,gBAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAAU,OAAA;MAAY,QAAA;IAAA;EAAA;EAC1C,OAAA;AAAA;AAAA,UAGe,aAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAClB,WAAA;MACE,WAAA;MACA,eAAA;MACA,YAAA;IAAA;EAAA;EAGJ,OAAA;AAAA;AAAA,iBAWoB,uBAAA,CACpB,KAAA,EAAO,sBAAA,EACP,OAAA,GAAS,uBAAA,GACR,OAAA;;;cC5EU,uBAAA;AAAA,UAEI,8BAAA;EAEf,SAAA;EAEA,OAAA;EAEA,UAAA;EAEA,YAAA;EAEA,OAAA;AAAA;AAAA,iBAQoB,uBAAA,CACpB,OAAA,EAAS,8BAAA,GACR,OAAA;AAAA,iBAqEa,oBAAA,CAAqB,IAAA,UAAc,UAAA,YAAsB,MAAA;AAAA,iBAuBzD,SAAA,CAAU,UAAA,YAAsB,MAAA;AAAA,iBAQhC,mBAAA,CACd,SAAA,UACA,OAAA,UACA,UAAA,YACA,UAAA;;;UC7Ie,gBAAA;EACf,MAAA;EACA,GAAA;EACA,SAAA;AAAA;AAAA,UAIe,mBAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAGe,uBAAA;EAEf,MAAA;EAEA,OAAA;EAEA,WAAA,GAAc,mBAAA;EAEd,WAAA,IAAe,QAAA,EAAU,gBAAA,KAAqB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAGvC,iBAAA;EAEf,GAAA;EAEA,OAAA,QAAe,OAAA;AAAA;AAAA,iBAQK,0BAAA,CACpB,QAAA,EAAU,gBAAA,EACV,OAAA,GAAS,uBAAA,GACR,OAAA,CAAQ,iBAAA;;;cCvCE,uBAAA;AAAA,UAGI,gBAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAGe,8BAAA;EACf,WAAA,EAAa,gBAAA;EACb,MAAA;EACA,IAAA;EACA,IAAA;EAEA,IAAA;EAEA,IAAA;EAEA,SAAA;EAEA,MAAA;EAEA,GAAA;AAAA;AAAA,UAQe,sBAAA;EAEf,aAAA;EAEA,OAAA;EAEA,gBAAA;EAEA,gBAAA;AAAA;AAAA,iBAOoB,uBAAA,CACpB,IAAA,EAAM,8BAAA,GACL,OAAA,CAAQ,sBAAA;;;UCDM,sBAAA;EAKf,SAAA;EAOA,UAAA;EAEA,UAAA;EAEA,iBAAA;EAEA,eAAA,GAAkB,MAAA;EAElB,mBAAA,GAAsB,MAAA;EAEtB,cAAA;EAEA,kBAAA,GAAqB,MAAA;EAErB,WAAA;EAEA,QAAA;EAEA,aAAA;EAEA,SAAA,GAAY,iBAAA;EAEZ,OAAA,GAAU,iBAAA;EAEV,aAAA;AAAA;AAAA,UAOe,iBAAA;EAMf,IAAA;EAKA,MAAA,GAAS,MAAA;AAAA;;;UCpGM,0BAAA;EAEf,YAAA;EAeA,OAAA;AAAA;AAAA,iBAYoB,mBAAA,CACpB,KAAA;EAAS,MAAA,EAAQ,sBAAA;AAAA,GACjB,SAAA,UACA,OAAA,EAAS,0BAAA,GACR,OAAA;AAAA,iBAsDa,sBAAA,CAAuB,YAAA;;;UCpFtB,WAAA;EAEf,KAAA,IAAS,OAAA;AAAA;AAAA,UAGM,kBAAA;EAEf,KAAA;EAWA,QAAA,GAAW,YAAA;EAEX,UAAA;EAOA,aAAA;EASA,OAAA,IAAW,IAAA;EAWX,aAAA,IAAiB,IAAA;AAAA;AAAA,iBAeH,iBAAA,CAAkB,OAAA,EAAS,kBAAA,GAAqB,WAAA;;;UCrC/C,kBAAA;EASf,YAAA;EAMA,YAAA;EASA,iBAAA;EAUA,UAAA;AAAA;AAAA,KAGU,aAAA;EAEN,IAAA;EAEA,MAAA;AAAA;EAGA,IAAA;EAEA,MAAA;EAEA,iBAAA;AAAA;AAAA,iBAoHU,oBAAA,CACd,YAAA,qBACA,GAAA,EAAK,kBAAA,eACJ,aAAA;;;UCrCO,aAAA;EAER,OAAA,EAAS,WAAA;EAET,OAAA;EAEA,IAAA;EAEA,SAAA,QAAiB,aAAA;AAAA;AAAA,iBAyBG,mBAAA,CACpB,QAAA,sBACA,MAAA,EAAQ,aAAA,GACP,OAAA"}
+{"version":3,"file":"internal.d.ts","names":[],"sources":["../src/types/assets.ts","../src/local/intrinsic-utils.ts","../src/local/intrinsic-lambda-arn.ts","../src/local/parameter-mapping.ts","../src/local/api-gateway-response.ts","../src/local/docker-inspect.ts","../src/local/route-matcher.ts","../src/local/api-gateway-event.ts","../src/local/websocket-route-discovery.ts","../src/local/lambda-authorizer.ts","../src/local/stage-resolver.ts","../src/local/runtime-image.ts","../src/local/websocket-event.ts","../src/local/websocket-mgmt-api.ts","../src/local/websocket-body.ts","../src/local/docker-version.ts","../src/local/api-server-grouping.ts","../src/local/layer-arn-materializer.ts","../src/local/agentcore-code-build.ts","../src/local/agentcore-s3-bundle.ts","../src/local/agentcore-sigv4-sign.ts","../src/local/docker-image-builder.ts","../src/local/file-watcher.ts","../src/local/target-picker.ts"],"mappings":";;;;;UAmEiB,sBAAA;EAKf,SAAA;EAOA,UAAA;EAEA,UAAA;EAEA,iBAAA;EAEA,eAAA,GAAkB,MAAA;EAElB,mBAAA,GAAsB,MAAA;EAEtB,cAAA;EAEA,kBAAA,GAAqB,MAAA;EAErB,WAAA;EAEA,QAAA;EAEA,aAAA;EAEA,SAAA,GAAY,iBAAA;EAEZ,OAAA,GAAU,iBAAA;EAEV,aAAA;AAAA;AAAA,UAOe,iBAAA;EAMf,IAAA;EAKA,MAAA,GAAS,MAAA;AAAA;;;iBChHK,gBAAA,CAAiB,KAAA;;;KCmCrB,uBAAA;EACN,IAAA;EAAkB,SAAA;AAAA;EAClB,IAAA;EAAqB,MAAA;AAAA;AAAA,iBAuBX,yBAAA,CAA0B,KAAA,YAAiB,uBAAA;;;UCpB1C,uBAAA;EAEf,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,WAAA,EAAa,QAAA,CAAS,MAAA;EAEtB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAEzB,WAAA;EAEA,IAAA;EAEA,OAAA,EAAS,QAAA,CAAS,MAAA;EAElB,cAAA,EAAgB,QAAA,CAAS,MAAA;EAoBzB,UAAA,GAAa,QAAA,CAAS,MAAA;AAAA;AAAA,KASZ,wBAAA;EACN,IAAA;EAAY,QAAA,EAAU,MAAA;AAAA;EACtB,IAAA;EAAe,MAAA;AAAA;AAAA,iBAQL,mCAAA,CACd,UAAA,EAAY,QAAA,CAAS,MAAA,oBACrB,GAAA,EAAK,uBAAA,GACJ,wBAAA;AAAA,iBAkCa,0BAAA,CAA2B,KAAA,UAAe,GAAA,EAAK,uBAAA;;;UCnH9C,sBAAA;EACf,UAAA;EAMA,OAAA,EAAS,MAAA;EAET,OAAA;EAEA,IAAA,EAAM,MAAA;AAAA;AAAA,iBAgBQ,uBAAA,CACd,OAAA,WACA,OAAA,gBACC,sBAAA;;;iBChCmB,qBAAA,CACpB,WAAA,UACA,WAAA,WACC,OAAA;;;UCHc,gBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;AAAA;AAAA,iBAQF,UAAA,CACd,MAAA,UACA,WAAA,UACA,MAAA,WAAiB,eAAA,KAChB,gBAAA;;;UC5Bc,mBAAA;EAEf,MAAA;EAKA,MAAA;EAMA,OAAA,EAAS,MAAA;EAET,IAAA,EAAM,MAAA;EAEN,QAAA;EAwBA,UAAA,GAAa,MAAA;AAAA;AAAA,UAQE,mBAAA;EACf,KAAA,EAAO,eAAA;EACP,cAAA,EAAgB,MAAA;EAEhB,WAAA;AAAA;AAAA,iBA+Bc,mBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,iBA4Ea,gBAAA,CACd,GAAA,EAAK,mBAAA,EACL,GAAA,EAAK,mBAAA,EACL,IAAA;EAAQ,GAAA,SAAY,IAAA;AAAA,IACnB,MAAA;AAAA,KAiFS,sBAAA;EACN,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAwB,WAAA;EAAsB,OAAA,GAAU,MAAA;AAAA;EACxD,IAAA;EAAyB,MAAA,EAAQ,MAAA;AAAA;EACjC,IAAA;EAAqB,MAAA,EAAQ,MAAA;EAAyB,MAAA;AAAA;AAAA,iBAY5C,sBAAA,CACd,KAAA,EAAO,MAAA,mBACP,OAAA,EAAS,sBAAA,GACR,MAAA;;;UC3Pc,sBAAA;EAEf,YAAA;EAEA,YAAA;EAEA,UAAA;EAMA,UAAA;EAQA,wBAAA;EAOA,KAAA;EAaA,MAAA,EAAQ,mBAAA;EAiBR,WAAA;IAAgB,MAAA;EAAA;AAAA;AAAA,UAID,mBAAA;EAEf,QAAA;EAEA,qBAAA;EAEA,eAAA;EAEA,UAAA;AAAA;AAAA,iBAuBc,qBAAA,CAAsB,MAAA,WAAiB,SAAA;EACrD,IAAA,EAAM,sBAAA;EACN,MAAA;AAAA;AAAA,iBA8Bc,4BAAA,CACd,MAAA,WAAiB,SAAA,KAChB,sBAAA;AAAA,iBAgJa,4BAAA,CAA6B,IAAA;;;UC3Q5B,4BAAA;EAEf,MAAA;EAEA,OAAA,EAAS,MAAA;EAET,qBAAA,EAAuB,MAAA;EAEvB,cAAA,EAAgB,MAAA;EAEhB,QAAA;EAEA,WAAA;EAEA,KAAA;AAAA;AAAA,UAGe,2BAAA;EAEf,IAAA,EAAM,aAAA;EAEN,YAAA;EAMA,SAAA;EAEA,aAAA;EAEA,SAAA;AAAA;AAAA,iBAWc,cAAA,CAAe,IAAA;EAC7B,KAAA;EACA,SAAA;EACA,MAAA;EACA,KAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,iBAoBoB,qBAAA,CACpB,UAAA,EAAY,qBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyBhB,uBAAA,CACpB,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA,EACT,GAAA,EAAK,2BAAA,GACJ,OAAA,CAAQ,sBAAA;EAA2B,YAAA;AAAA;AAAA,iBAyEtB,0BAAA,CACd,UAAA,EAAY,uBAAA,EACZ,OAAA,EAAS,4BAAA;EACN,YAAA;EAAsB,OAAA;AAAA;AAAA,iBAmRX,0BAAA,CACd,MAAA,EAAQ,sBAAA,EACR,SAAA,WACC,sBAAA;;;UC7bc,aAAA;EAEf,cAAA;EAEA,SAAA;EAEA,UAAA;EAEA,SAAA,EAAW,MAAA;AAAA;AAAA,iBAgCG,aAAA,CACd,QAAA,EAAU,sBAAA,EACV,aAAA,YACC,GAAA,SAAY,aAAA;AAAA,iBA4HC,kBAAA,CACd,MAAA,EAAQ,eAAA,IACR,QAAA,EAAU,GAAA,SAAY,aAAA;;;iBCjHR,mBAAA,CAAoB,OAAA;AAAA,iBAgBpB,2BAAA,CAA4B,OAAA;AAAA,iBA6E5B,2BAAA,CAA4B,OAAA;;;UC3I3B,0BAAA;EAEf,OAAA,EAAS,MAAA;EAET,cAAA;EAEA,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,QAAA;EAEA,SAAA;AAAA;AAAA,UAQe,2BAAA;EACf,QAAA;EACA,SAAA;EACA,YAAA;EACA,iBAAA;EACA,WAAA;EACA,gBAAA;EACA,gBAAA;EACA,KAAA;EACA,WAAA;EACA,SAAA;EACA,UAAA;EACA,KAAA;EACA,UAAA;EACA,QAAA;IACE,SAAA;IACA,QAAA;IACA,SAAA;EAAA;AAAA;AAAA,UAKa,oBAAA;EAEf,OAAA,GAAU,MAAA;EAEV,iBAAA,GAAoB,MAAA;EAEpB,qBAAA,GAAwB,MAAA;EAExB,+BAAA,GAAkC,MAAA;EAElC,cAAA,EAAgB,2BAAA,GAA8B,MAAA;EAE9C,eAAA;EAEA,IAAA;AAAA;AAAA,iBAqDc,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;AAAA,IACR,oBAAA;AAAA,iBA6BY,iBAAA,CAAkB,IAAA;EAChC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,QAAA;EACA,IAAA;EASA,eAAA;AAAA,IACE,oBAAA;AAAA,iBA4BY,oBAAA,CAAqB,IAAA;EACnC,YAAA;EACA,WAAA;EACA,KAAA;EACA,QAAA,EAAU,0BAAA;EACV,oBAAA;EACA,gBAAA;AAAA,IACE,oBAAA;;;UChNa,uBAAA;EAEf,YAAA;EAEA,MAAA,EAAQ,SAAA;EAER,WAAA;EAEA,YAAA;EAEA,KAAA;AAAA;AAAA,cAOW,kBAAA;EAAA,iBACM,OAAA;EAEjB,QAAA,CAAS,KAAA,EAAO,uBAAA;EAIhB,UAAA,CAAW,YAAA,WAAuB,uBAAA;EAMlC,GAAA,CAAI,YAAA,WAAuB,uBAAA;EAI3B,IAAA,CAAA;EASA,IAAA,CAAA,GAAQ,uBAAA;EAIR,KAAA,CAAA;AAAA;AAAA,iBA4Bc,oBAAA,CAAqB,GAAA;EACnC,YAAA;AAAA;AAAA,iBA0Bc,uBAAA,CAAwB,IAAA,UAAc,IAAA,UAAc,KAAA;AAAA,iBAkE9C,wBAAA,CAAyB,IAAA;EAC7C,GAAA,EAAK,eAAA;EACL,GAAA,EAAK,cAAA;EACL,QAAA,EAAU,kBAAA;AAAA,IACR,OAAA;;;iBC5LY,YAAA,CACd,GAAA,EAAK,MAAA,GAAS,WAAA,GAAc,MAAA,IAC5B,QAAA;EACG,IAAA;EAAc,eAAA;AAAA;;;cCJN,wBAAA,EAA0B,mBAAA;AAAA,UAEtB,mBAAA;EACf,KAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAmCe,sBAAA;EAEf,UAAA;EAEA,MAAA,EAAQ,mBAAA;EAMR,SAAA;AAAA;AAAA,iBAqBoB,uBAAA,CAAA,GAA2B,OAAA,CAAQ,sBAAA;;;UCzDxC,cAAA;EAAA,SAmBN,SAAA;EAAA,SAEA,WAAA;EAAA,SAEA,IAAA;EAAA,SAMA,UAAA;EAAA,SAEA,MAAA,WAAiB,aAAA;AAAA;AAAA,iBAgBZ,mBAAA,CAAoB,MAAA,WAAiB,aAAA,KAAkB,cAAA;AAAA,iBAqGvD,2BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,UAAA,WACC,aAAA;AAAA,iBAqBa,4BAAA,CACd,MAAA,WAAiB,aAAA,IACjB,WAAA,sBACC,aAAA;AAAA,iBAkCa,uBAAA,CAAwB,MAAA,WAAiB,aAAA;;;UCpMxC,uBAAA;EAQf,OAAA;EAMA,mBAAA,IAAuB,MAAA,UAAgB,WAAA,GAAc,cAAA,KAAmB,gBAAA;EAKxE,gBAAA,IAAoB,MAAA,aAAmB,aAAA;EAMvC,QAAA,IAAY,YAAA,aAAyB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAG9B,cAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAOe,gBAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAAU,OAAA;MAAY,QAAA;IAAA;EAAA;EAC1C,OAAA;AAAA;AAAA,UAGe,aAAA;EAEf,IAAA,CAAK,OAAA,QAAe,OAAA;IAClB,WAAA;MACE,WAAA;MACA,eAAA;MACA,YAAA;IAAA;EAAA;EAGJ,OAAA;AAAA;AAAA,iBAWoB,uBAAA,CACpB,KAAA,EAAO,sBAAA,EACP,OAAA,GAAS,uBAAA,GACR,OAAA;;;cC5EU,uBAAA;AAAA,UAEI,8BAAA;EAEf,SAAA;EAEA,OAAA;EAEA,UAAA;EAEA,YAAA;EAEA,OAAA;AAAA;AAAA,iBAQoB,uBAAA,CACpB,OAAA,EAAS,8BAAA,GACR,OAAA;AAAA,iBAqEa,oBAAA,CAAqB,IAAA,UAAc,UAAA,YAAsB,MAAA;AAAA,iBAuBzD,SAAA,CAAU,UAAA,YAAsB,MAAA;AAAA,iBAQhC,mBAAA,CACd,SAAA,UACA,OAAA,UACA,UAAA,YACA,UAAA;;;UC7Ie,gBAAA;EACf,MAAA;EACA,GAAA;EACA,SAAA;AAAA;AAAA,UAIe,mBAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAGe,uBAAA;EAEf,MAAA;EAEA,OAAA;EAEA,WAAA,GAAc,mBAAA;EAEd,WAAA,IAAe,QAAA,EAAU,gBAAA,KAAqB,OAAA,CAAQ,UAAA;AAAA;AAAA,UAGvC,iBAAA;EAEf,GAAA;EAEA,OAAA,QAAe,OAAA;AAAA;AAAA,iBAQK,0BAAA,CACpB,QAAA,EAAU,gBAAA,EACV,OAAA,GAAS,uBAAA,GACR,OAAA,CAAQ,iBAAA;;;cCvCE,uBAAA;AAAA,UAGI,gBAAA;EACf,WAAA;EACA,eAAA;EACA,YAAA;AAAA;AAAA,UAGe,8BAAA;EACf,WAAA,EAAa,gBAAA;EACb,MAAA;EACA,IAAA;EACA,IAAA;EAEA,IAAA;EAEA,IAAA;EAEA,SAAA;EAEA,MAAA;EAEA,GAAA;AAAA;AAAA,UAQe,sBAAA;EAEf,aAAA;EAEA,OAAA;EAEA,gBAAA;EAEA,gBAAA;AAAA;AAAA,iBAOoB,uBAAA,CACpB,IAAA,EAAM,8BAAA,GACL,OAAA,CAAQ,sBAAA;;;UC/CM,0BAAA;EAEf,YAAA;EAeA,OAAA;AAAA;AAAA,iBAYoB,mBAAA,CACpB,KAAA;EAAS,MAAA,EAAQ,sBAAA;AAAA,GACjB,SAAA,UACA,OAAA,EAAS,0BAAA,GACR,OAAA;AAAA,iBAsDa,sBAAA,CAAuB,YAAA;;;UCpFtB,WAAA;EAEf,KAAA,IAAS,OAAA;AAAA;AAAA,UAGM,kBAAA;EAEf,KAAA;EAWA,QAAA,GAAW,YAAA;EAEX,UAAA;EAOA,aAAA;EASA,OAAA,IAAW,IAAA;EAWX,aAAA,IAAiB,IAAA;AAAA;AAAA,iBAeH,iBAAA,CAAkB,OAAA,EAAS,kBAAA,GAAqB,WAAA;;;UC6FtD,aAAA;EAER,OAAA,EAAS,WAAA;EAET,OAAA;EAEA,IAAA;EAEA,SAAA,QAAiB,aAAA;AAAA;AAAA,iBAyBG,mBAAA,CACpB,QAAA,sBACA,MAAA,EAAQ,aAAA,GACP,OAAA"}

package/dist/internal.js

@@ -1,3 +1,3 @@
-import { $ as applyAuthorizerOverlay, $t as resolveRuntimeCodeMountPath, An as AGENTCORE_AGUI_PROTOCOL, At as A2A_CONTAINER_PORT, B as groupRoutesByServer, Bn as tryResolveImageFnJoin, Bt as AGENTCORE_SESSION_ID_HEADER, C as classifySourceChange, Cn as discoverWebSocketApis, Ct as attachAuthorizers, D as addInvokeAgentCoreSpecificOptions, Dn as pickRefLogicalId, Dt as isFunctionUrlOacFronted, En as discoverRoutes, Et as buildCorsConfigFromCloudFrontChain, F as attachStageContext, Fn as pickAgentCoreCandidateStack, Ft as MCP_PROTOCOL_VERSION, G as defaultCredentialsLoader, Gt as buildAgentCoreCodeImage, H as startApiServer, Ht as waitForAgentCorePing, I as buildStageMap, In as resolveAgentCoreTarget, It as mcpInvokeOnce, J as evaluateCachedLambdaPolicy, Jt as toCmdArgv, K as buildMethodArn, Kt as computeCodeImageTag, L as availableApiIdentifiers, Ln as derivePseudoParametersFromRegion, Lt as parseSseForJsonRpc, M as resolveApiTargetSubset, Mn as AGENTCORE_MCP_PROTOCOL, Mt as a2aInvokeOnce, N as createAuthorizerCache, Nn as AGENTCORE_RUNTIME_TYPE, Nt as MCP_CONTAINER_PORT, On as resolveLambdaArnIntrinsic, Ot as matchPreflight, P as createFileWatcher, Pn as AgentCoreResolutionError, Pt as MCP_PATH, Q as translateLambdaResponse, Qt as buildContainerImage, R as filterRoutesByApiIdentifier, Rn as formatStateRemedy, Rt as AGENTCORE_SIGV4_SERVICE, S as CloudMapRegistry, St as verifyJwtViaDiscovery, T as addRunTaskSpecificOptions, Tn as parseSelectionExpressionPath, Tt as buildCorsConfigByApiId, U as resolveSelectionExpression, Ut as downloadAndExtractS3Bundle, V as readMtlsMaterialsFromDisk, Vn as LocalInvokeBuildError, Vt as invokeAgentCore, W as resolveServiceIntegrationParameters, Wt as SUPPORTED_CODE_RUNTIMES, X as invokeTokenAuthorizer, Y as invokeRequestAuthorizer, Yt as addInvokeSpecificOptions, Z as matchRoute, Zt as architectureToPlatform, _ as parseMaxTasks, _t as buildCognitoJwksUrl, a as albStrategy, at as tryParseStatus, b as runEcsServiceEmulator, bn as resolveSingleTarget, bt as verifyCognitoJwt, c as resolveAlbTarget, cn as materializeLayerFromArn, ct as probeHostGatewaySupport, d as addStartServiceSpecificOptions, dt as buildMgmtEndpointEnvUrl, en as resolveRuntimeFileExtension, et as buildHttpApiV2Event, ft as handleConnectionsRequest, g as buildEcsImageResolutionContext, gt as buildMessageEvent, h as addCommonEcsServiceOptions, ht as buildDisconnectEvent, i as addAlbSpecificOptions, it as selectIntegrationResponse, j as createWatchPredicates, jn as AGENTCORE_HTTP_PROTOCOL, jt as A2A_PATH, k as addStartApiSpecificOptions, kn as AGENTCORE_A2A_PROTOCOL, kt as invokeAgentCoreWs, l as isApplicationLoadBalancer, lt as bufferToBody, m as MAX_TASKS_SUBNET_RANGE_CAP, mt as buildConnectEvent, nn as EcsTaskResolutionError, nt as evaluateResponseParameters, ot as VtlEvaluationError, p as serviceStrategy, pt as parseConnectionsPath, q as computeRequestIdentityHash, qt as renderCodeDockerfile, rt as pickResponseTemplate, s as parseLbPortOverrides, sn as resolveEnvVars, st as HOST_GATEWAY_MIN_VERSION, t as addListSpecificOptions, tn as resolveRuntimeImage, tt as buildRestV1Event, u as resolveAlbFrontDoor, ut as ConnectionRegistry, v as parseRestartPolicy, vt as buildJwksUrlFromIssuer, w as getContainerNetworkIp, wn as discoverWebSocketApisOrThrow, wt as applyCorsResponseHeaders, x as buildCloudMapIndex, xt as verifyJwtAuthorizer, y as resolveSharedSidecarCredentials, yn as resolveWatchConfig, yt as createJwksCache, z as filterRoutesByApiIdentifiers, zn as substituteImagePlaceholders, zt as signAgentCoreInvocation } from "./local-list-l2_7oGHF.js";
+import { $ as translateLambdaResponse, $t as buildContainerImage, A as addStartApiSpecificOptions, An as AGENTCORE_A2A_PROTOCOL, At as invokeAgentCoreWs, B as filterRoutesByApiIdentifiers, Bn as substituteImagePlaceholders, Bt as signAgentCoreInvocation, C as classifySourceChange, Ct as verifyJwtViaDiscovery, Dn as discoverRoutes, Dt as buildCorsConfigFromCloudFrontChain, E as addRunTaskSpecificOptions, En as parseSelectionExpressionPath, Et as buildCorsConfigByApiId, F as createFileWatcher, Fn as AgentCoreResolutionError, Ft as MCP_PATH, G as resolveServiceIntegrationParameters, Gt as SUPPORTED_CODE_RUNTIMES, H as readMtlsMaterialsFromDisk, Hn as LocalInvokeBuildError, Ht as invokeAgentCore, I as attachStageContext, In as pickAgentCoreCandidateStack, It as MCP_PROTOCOL_VERSION, J as computeRequestIdentityHash, Jt as renderCodeDockerfile, K as defaultCredentialsLoader, Kt as buildAgentCoreCodeImage, L as buildStageMap, Ln as resolveAgentCoreTarget, Lt as mcpInvokeOnce, M as createWatchPredicates, Mn as AGENTCORE_HTTP_PROTOCOL, Mt as A2A_PATH, N as resolveApiTargetSubset, Nn as AGENTCORE_MCP_PROTOCOL, Nt as a2aInvokeOnce, O as addInvokeAgentCoreSpecificOptions, On as pickRefLogicalId, Ot as isFunctionUrlOacFronted, P as createAuthorizerCache, Pn as AGENTCORE_RUNTIME_TYPE, Pt as MCP_CONTAINER_PORT, Q as matchRoute, Qt as architectureToPlatform, R as availableApiIdentifiers, Rn as derivePseudoParametersFromRegion, Rt as parseSseForJsonRpc, S as CloudMapRegistry, St as verifyJwtAuthorizer, T as getContainerNetworkIp, Tn as discoverWebSocketApisOrThrow, Tt as applyCorsResponseHeaders, U as startApiServer, Ut as waitForAgentCorePing, V as groupRoutesByServer, Vn as tryResolveImageFnJoin, Vt as AGENTCORE_SESSION_ID_HEADER, W as resolveSelectionExpression, Wt as downloadAndExtractS3Bundle, X as invokeRequestAuthorizer, Xt as addInvokeSpecificOptions, Y as evaluateCachedLambdaPolicy, Yt as toCmdArgv, Z as invokeTokenAuthorizer, _ as parseMaxTasks, _t as buildMessageEvent, a as albStrategy, at as selectIntegrationResponse, b as runEcsServiceEmulator, bn as resolveWatchConfig, bt as createJwksCache, c as resolveAlbTarget, cn as resolveEnvVars, ct as HOST_GATEWAY_MIN_VERSION, d as addStartServiceSpecificOptions, dt as ConnectionRegistry, en as resolveRuntimeCodeMountPath, et as applyAuthorizerOverlay, ft as buildMgmtEndpointEnvUrl, g as buildEcsImageResolutionContext, gt as buildDisconnectEvent, h as addCommonEcsServiceOptions, ht as buildConnectEvent, i as addAlbSpecificOptions, it as pickResponseTemplate, jn as AGENTCORE_AGUI_PROTOCOL, jt as A2A_CONTAINER_PORT, kn as resolveLambdaArnIntrinsic, kt as matchPreflight, l as isApplicationLoadBalancer, ln as materializeLayerFromArn, lt as probeHostGatewaySupport, m as MAX_TASKS_SUBNET_RANGE_CAP, mt as parseConnectionsPath, nn as resolveRuntimeImage, nt as buildRestV1Event, ot as tryParseStatus, p as serviceStrategy, pt as handleConnectionsRequest, q as buildMethodArn, qt as computeCodeImageTag, rn as EcsTaskResolutionError, rt as evaluateResponseParameters, s as parseLbPortOverrides, st as VtlEvaluationError, t as addListSpecificOptions, tn as resolveRuntimeFileExtension, tt as buildHttpApiV2Event, u as resolveAlbFrontDoor, ut as bufferToBody, v as parseRestartPolicy, vt as buildCognitoJwksUrl, w as SOFT_RELOAD_COMPLETION_LOG_SUFFIX, wn as discoverWebSocketApis, wt as attachAuthorizers, x as buildCloudMapIndex, xn as resolveSingleTarget, xt as verifyCognitoJwt, y as resolveSharedSidecarCredentials, yt as buildJwksUrlFromIssuer, z as filterRoutesByApiIdentifier, zn as formatStateRemedy, zt as AGENTCORE_SIGV4_SERVICE } from "./local-list-C-wXKogn.js";
 
-export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SUPPORTED_CODE_RUNTIMES, VtlEvaluationError, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, addStartServiceSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, classifySourceChange, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, serviceStrategy, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };
+export { A2A_CONTAINER_PORT, A2A_PATH, AGENTCORE_A2A_PROTOCOL, AGENTCORE_AGUI_PROTOCOL, AGENTCORE_HTTP_PROTOCOL, AGENTCORE_MCP_PROTOCOL, AGENTCORE_RUNTIME_TYPE, AGENTCORE_SESSION_ID_HEADER, AGENTCORE_SIGV4_SERVICE, AgentCoreResolutionError, CloudMapRegistry, ConnectionRegistry, EcsTaskResolutionError, HOST_GATEWAY_MIN_VERSION, LocalInvokeBuildError, MAX_TASKS_SUBNET_RANGE_CAP, MCP_CONTAINER_PORT, MCP_PATH, MCP_PROTOCOL_VERSION, SOFT_RELOAD_COMPLETION_LOG_SUFFIX, SUPPORTED_CODE_RUNTIMES, VtlEvaluationError, a2aInvokeOnce, addAlbSpecificOptions, addCommonEcsServiceOptions, addInvokeAgentCoreSpecificOptions, addInvokeSpecificOptions, addListSpecificOptions, addRunTaskSpecificOptions, addStartApiSpecificOptions, addStartServiceSpecificOptions, albStrategy, applyAuthorizerOverlay, applyCorsResponseHeaders, architectureToPlatform, attachAuthorizers, attachStageContext, availableApiIdentifiers, bufferToBody, buildAgentCoreCodeImage, buildCloudMapIndex, buildCognitoJwksUrl, buildConnectEvent, buildContainerImage, buildCorsConfigByApiId, buildCorsConfigFromCloudFrontChain, buildDisconnectEvent, buildEcsImageResolutionContext, buildHttpApiV2Event, buildJwksUrlFromIssuer, buildMessageEvent, buildMethodArn, buildMgmtEndpointEnvUrl, buildRestV1Event, buildStageMap, classifySourceChange, computeCodeImageTag, computeRequestIdentityHash, createAuthorizerCache, createFileWatcher, createJwksCache, createWatchPredicates, defaultCredentialsLoader, derivePseudoParametersFromRegion, discoverRoutes, discoverWebSocketApis, discoverWebSocketApisOrThrow, downloadAndExtractS3Bundle, evaluateCachedLambdaPolicy, evaluateResponseParameters, filterRoutesByApiIdentifier, filterRoutesByApiIdentifiers, formatStateRemedy, getContainerNetworkIp, groupRoutesByServer, handleConnectionsRequest, invokeAgentCore, invokeAgentCoreWs, invokeRequestAuthorizer, invokeTokenAuthorizer, isApplicationLoadBalancer, isFunctionUrlOacFronted, matchPreflight, matchRoute, materializeLayerFromArn, mcpInvokeOnce, parseConnectionsPath, parseLbPortOverrides, parseMaxTasks, parseRestartPolicy, parseSelectionExpressionPath, parseSseForJsonRpc, pickAgentCoreCandidateStack, pickRefLogicalId, pickResponseTemplate, probeHostGatewaySupport, readMtlsMaterialsFromDisk, renderCodeDockerfile, resolveAgentCoreTarget, resolveAlbFrontDoor, resolveAlbTarget, resolveApiTargetSubset, resolveEnvVars, resolveLambdaArnIntrinsic, resolveRuntimeCodeMountPath, resolveRuntimeFileExtension, resolveRuntimeImage, resolveSelectionExpression, resolveServiceIntegrationParameters, resolveSharedSidecarCredentials, resolveSingleTarget, resolveWatchConfig, runEcsServiceEmulator, selectIntegrationResponse, serviceStrategy, signAgentCoreInvocation, startApiServer, substituteImagePlaceholders, toCmdArgv, translateLambdaResponse, tryParseStatus, tryResolveImageFnJoin, verifyCognitoJwt, verifyJwtAuthorizer, verifyJwtViaDiscovery, waitForAgentCorePing };

package/dist/{local-list-l2_7oGHF.js → local-list-C-wXKogn.js}

@@ -20887,6 +20887,22 @@ var EcsServiceRunnerError = class EcsServiceRunnerError extends Error {
 		Object.setPrototypeOf(this, EcsServiceRunnerError.prototype);
 	}
 };
+/**
+* Phase 4 (#214) — completion-log suffix the soft-reload primitive
+* emits AFTER `Soft-reloaded replica r<i> (gen <g>): ` to confirm
+* the docker restart + TCP-ready probe + Cloud Map / front-door
+* re-publish round trip is done.
+*
+* Exported so integ fixtures + unit tests can grep against the
+* canonical text instead of hand-copying the wording — a future
+* refactor that rewords this line stays detectable via the symbol
+* import instead of silently breaking every test's regex.
+*
+* Per-repo memory (#218 / test reviewer N4): log-line text is part
+* of the public contract for `--watch` integ scripts, so it earns a
+* constant.
+*/
+const SOFT_RELOAD_COMPLETION_LOG_SUFFIX = "restart + TCP-ready probe complete; Cloud Map + front-door re-published.";
 function createServiceRunState() {
 	return {
 		replicas: [],
@@ -21141,6 +21157,27 @@ async function bootReplica(service, options, instance) {
 	await runEcsTask(service.task, perReplicaTaskOptions, instance.state);
 	if (options.discovery) await publishReplicaToCloudMap(service, instance, options.discovery, ownerKeyPrefix);
 	if (options.frontDoor) await publishReplicaToFrontDoor(service, instance, options.frontDoor, options.taskOptions.containerHost, ownerKeyPrefix);
+	instance.lastDeployedAssetHash = pickEssentialAssetHash(service);
+}
+/**
+* Phase 4 follow-up (#218) — extract the CDK asset hash from a
+* resolved service's first essential container (with the same
+* fallback the watcher uses: first essential, else first container).
+* Returns `undefined` when the image isn't a CDK asset OR carries
+* no hash. Pure helper so the boot + rolling + soft-reload paths
+* share one source of truth for "what's running right now".
+*
+* Exported for unit tests; not part of the semver-covered public
+* surface.
+*
+* @internal
+*/
+function pickEssentialAssetHash(service) {
+	const essential = service.task.containers.find((c) => c.essential) ?? service.task.containers[0];
+	if (!essential) return void 0;
+	const image = essential.image;
+	if (image?.kind !== "cdk-asset") return void 0;
+	return image.assetHash;
 }
 /**
 * After the replica's main container is up, discover its docker
@@ -21515,6 +21552,7 @@ async function softReloadReplica(args) {
 	}
 	unregisterReplicaFromFrontDoor(instance, controllerOptions.frontDoor);
 	instance.softReloadInProgress = true;
+	instance.softReloadGeneration = (instance.softReloadGeneration ?? 0) + 1;
 	try {
 		logger.info(`Soft-reloading replica r${instance.index} (gen ${instance.generation}): docker cp ${sourceDirToCopy} -> ${targets.length} essential container(s); restart.`);
 		for (const target of targets) {
@@ -21545,7 +21583,8 @@ async function softReloadReplica(args) {
 		const ownerKeyPrefix = `${newService.serviceLogicalId}:r${instance.index}${ownerKeyGenSuffix}`;
 		if (controllerOptions.discovery) await publishReplicaToCloudMap(newService, instance, controllerOptions.discovery, ownerKeyPrefix);
 		if (controllerOptions.frontDoor) await publishReplicaToFrontDoor(newService, instance, controllerOptions.frontDoor, controllerOptions.taskOptions.containerHost, ownerKeyPrefix);
-		logger.info(`Soft-reloaded replica r${instance.index} (gen ${instance.generation}): restart + TCP-ready probe complete; Cloud Map + front-door re-published.`);
+		instance.lastDeployedAssetHash = pickEssentialAssetHash(newService);
+		logger.info(`Soft-reloaded replica r${instance.index} (gen ${instance.generation}): ${SOFT_RELOAD_COMPLETION_LOG_SUFFIX}`);
 	} finally {
 		instance.softReloadInProgress = false;
 	}
@@ -21740,6 +21779,7 @@ async function watchReplica(service, options, instance, runState) {
 			await sleep(500);
 			continue;
 		}
+		const softReloadGenBeforeWait = instance.softReloadGeneration ?? 0;
 		let exitCode;
 		try {
 			exitCode = await waitForExitImpl(essentialId);
@@ -21748,7 +21788,8 @@ async function watchReplica(service, options, instance, runState) {
 			exitCode = -1;
 		}
 		if (instance.shuttingDown || runState.shuttingDown) return;
-		if (instance.softReloadInProgress) {
+		const softReloadHappenedMidWait = (instance.softReloadGeneration ?? 0) !== softReloadGenBeforeWait;
+		if (instance.softReloadInProgress || softReloadHappenedMidWait) {
 			while (instance.softReloadInProgress && !instance.shuttingDown && !runState.shuttingDown) await sleep(100);
 			if (instance.shuttingDown || runState.shuttingDown) return;
 			continue;
@@ -22729,9 +22770,51 @@ function escapeRealmQuotes(realm) {
 }
 /** Reply 404 — an ALB listener with no matching rule and no default action. */
 function reply404(req, res, opts) {
-	writeError(res, 404, `No listener rule matched '${req.url ?? "/"}' on ${opts.label}, and the listener has no default action forwarding to a local target.`);
+	writeError(res, 404, buildNoRuleMatched404Body(req, opts));
 	return Promise.resolve();
 }
+/**
+* Build the no-rule-matched 404 body. When the call site supplied a
+* {@link StartFrontDoorServerOptions.rulesSummary}, the body lists every
+* ALB condition field that WAS evaluated (method, host, path) plus every
+* configured rule's priority + conditions + action target — so a user
+* whose request missed on, say, the Host header can spot the mismatch
+* without inspecting the synthesized template. Header conditions are
+* NOT spelled out in the evaluated section (too noisy) but ARE listed
+* in each rule's condition row when the rule constrains them. Without a
+* summary the body falls back to the original path-only shape (preserves
+* the behavior for direct callers that wire the proxy with just a
+* `selectPool` / `selectTarget`).
+*/
+function buildNoRuleMatched404Body(req, opts) {
+	const requestPath = req.url ?? "/";
+	const summary = opts.rulesSummary;
+	if (!summary) return `No listener rule matched '${requestPath}' on ${opts.label}, and the listener has no default action forwarding to a local target.`;
+	const rawHost = req.headers.host;
+	const hostValue = Array.isArray(rawHost) ? rawHost[0] : rawHost;
+	const lines = [];
+	lines.push(`No listener rule matched the request on ${opts.label}, and the listener has no default action forwarding to a local target.`);
+	lines.push("");
+	lines.push("  Evaluated:");
+	lines.push(`    Method:  ${req.method ?? "(unknown)"}`);
+	lines.push(`    Host:    ${hostValue ?? "(no Host header)"}`);
+	lines.push(`    Path:    ${requestPath}`);
+	lines.push("");
+	if (summary.length === 0) lines.push("  Listener has 0 rule(s).");
+	else {
+		lines.push(`  Listener has ${summary.length} rule(s):`);
+		const ordered = [...summary].sort((a, b) => a.priority - b.priority);
+		for (const rule of ordered) {
+			const conditions = rule.conditions.length === 0 ? "(no condition)" : rule.conditions.map(formatRuleConditionSummary).join(" AND ");
+			lines.push(`    [priority=${rule.priority}] ${conditions}  -> ${rule.action}`);
+		}
+	}
+	return lines.join("\n");
+}
+/** Format one condition row of a {@link FrontDoorRuleSummary} for the 404 body. */
+function formatRuleConditionSummary(c) {
+	return `${c.field} in [${c.values.join(", ")}]`;
+}
 function handlePoolRequest(req, res, pool, opts) {
 	return new Promise((resolve) => {
 		const endpoint = pool.next();
@@ -24239,6 +24322,13 @@ async function reloadAllServices(args) {
 * {@link AssetManifestLoader}) so the caller can fall back to rebuild
 * with a warn line that explains why the classifier couldn't run.
 */
+/**
+* @internal — exported for unit tests of the fall-through branches
+* (the 6 `return undefined` paths + the catch arm on
+* `resolveEcsServiceTarget` throw). Not part of the semver-covered
+* public surface; the only legitimate caller is `reloadAllServices`
+* inside this file.
+*/
 async function loadAssetContextForTarget(args) {
 	const { target, controller, stacks, cdkOutDir, assetLoader, logger } = args;
 	const candidate = pickCandidateStack(parseEcsTarget(target).stackPattern, stacks);
@@ -24261,8 +24351,12 @@ async function loadAssetContextForTarget(args) {
 	if (!newDockerImage.source.directory) return;
 	const newAssetSourceDir = path.resolve(cdkOutDir, newDockerImage.source.directory);
 	let oldAssetHash;
-	const oldEssential = controller.service.task.containers.find((c) => c.essential) ?? controller.service.task.containers[0];
-	if (oldEssential?.image.kind === "cdk-asset") oldAssetHash = oldEssential.image.assetHash;
+	const liveReplica = controller.runState.replicas.find((r) => !r.shuttingDown);
+	if (liveReplica?.lastDeployedAssetHash !== void 0) oldAssetHash = liveReplica.lastDeployedAssetHash;
+	else {
+		const oldEssential = controller.service.task.containers.find((c) => c.essential) ?? controller.service.task.containers[0];
+		if (oldEssential?.image.kind === "cdk-asset") oldAssetHash = oldEssential.image.assetHash;
+	}
 	return {
 		...oldAssetHash !== void 0 && { oldAssetHash },
 		newAssetHash,
@@ -24558,6 +24652,7 @@ async function buildFrontDoor(plan, options, logger) {
 			const tls = listener.protocol === "HTTPS" && wantTls ? tlsMaterials : void 0;
 			const forwardedProto = listener.protocol === "HTTPS" ? "https" : "http";
 			const degradedHttps = listener.protocol === "HTTPS" && !wantTls;
+			const rulesSummary = listener.rules.map(buildRuleSummary);
 			const server = await startFrontDoorServer({
 				route,
 				port: listener.hostPort,
@@ -24565,6 +24660,7 @@ async function buildFrontDoor(plan, options, logger) {
 				listenerPort: listener.listenerPort,
 				label: `listener port ${listener.listenerPort}`,
 				forwardedProto,
+				rulesSummary,
 				...tls ? { tls } : {}
 			});
 			servers.push(server);
@@ -24629,6 +24725,66 @@ function describeTarget(t) {
 function describeTargetShort(t) {
 	return t.kind === "lambda" ? `Lambda ${t.lambda.logicalId}` : t.serviceTarget;
 }
+/**
+* Build the per-rule summary the front-door surfaces in its no-rule-matched
+* 404 body (issue #228). One condition row per constrained ALB field, plus a
+* pre-formatted action target. Distinct from {@link describeConditions} /
+* {@link describeAction} (which produce a single-line boot-banner string) —
+* the 404 body needs the rule decomposed into its constituent fields so the
+* formatter can render `field in [values]` rows.
+*/
+function buildRuleSummary(rule) {
+	const conditions = [];
+	if (rule.pathPatterns.length > 0) conditions.push({
+		field: "path-pattern",
+		values: rule.pathPatterns
+	});
+	if (rule.hostPatterns.length > 0) conditions.push({
+		field: "host-header",
+		values: rule.hostPatterns
+	});
+	for (const h of rule.httpHeaderConditions) conditions.push({
+		field: "http-header",
+		values: [`${h.name}: ${h.values.join(", ")}`]
+	});
+	if (rule.httpRequestMethods.length > 0) conditions.push({
+		field: "http-request-method",
+		values: rule.httpRequestMethods
+	});
+	if (rule.queryStringConditions.length > 0) conditions.push({
+		field: "query-string",
+		values: rule.queryStringConditions.map(describeQueryStringCondition)
+	});
+	if (rule.sourceIpCidrs.length > 0) conditions.push({
+		field: "source-ip",
+		values: rule.sourceIpCidrs
+	});
+	return {
+		priority: rule.priority,
+		conditions,
+		action: describeRuleActionForSummary(rule.action)
+	};
+}
+/**
+* Describe a planned action for the no-rule-matched 404 body (issue #228).
+* Uses the `<ECS: ...>` / `<Lambda: ...>` shape the issue body proposes so a
+* user can read each rule's target at a glance.
+*/
+function describeRuleActionForSummary(action) {
+	if (action.kind === "redirect") return `redirect ${action.statusCode}`;
+	if (action.kind === "fixed-response") return `fixed-response ${action.statusCode}`;
+	if (action.targets.length === 1) return `forward to ${describeForwardTargetForSummary(action.targets[0])}`;
+	return `forward weighted [${action.targets.map((t) => `${describeForwardTargetForSummary(t)}@${t.weight}`).join(", ")}]`;
+}
+/**
+* One forward target named the way the 404 body shows it: `<ECS: Service>` or
+* `<Lambda: LogicalId>` — distinct from the boot-banner format (which also
+* prints the container / port / round-robin hint) so the 404 body stays
+* scannable.
+*/
+function describeForwardTargetForSummary(t) {
+	return t.kind === "lambda" ? `<Lambda: ${t.lambda.logicalId}>` : `<ECS: ${t.serviceTarget}>`;
+}
 async function resolvePlaceholderAccount(arn, region) {
 	if (!arn.includes("${AWS::AccountId}")) return arn;
 	const { STSClient, GetCallerIdentityCommand } = await import("@aws-sdk/client-sts");
@@ -25849,5 +26005,5 @@ function addListSpecificOptions(cmd) {
 }
 
 //#endregion
-export { applyAuthorizerOverlay as $, resolveRuntimeCodeMountPath as $t, createLocalStartApiCommand as A, AGENTCORE_AGUI_PROTOCOL as An, A2A_CONTAINER_PORT as At, groupRoutesByServer as B, tryResolveImageFnJoin as Bn, AGENTCORE_SESSION_ID_HEADER as Bt, classifySourceChange as C, discoverWebSocketApis as Cn, attachAuthorizers as Ct, addInvokeAgentCoreSpecificOptions as D, pickRefLogicalId as Dn, isFunctionUrlOacFronted as Dt, createLocalRunTaskCommand as E, discoverRoutes as En, buildCorsConfigFromCloudFrontChain as Et, attachStageContext as F, pickAgentCoreCandidateStack as Fn, MCP_PROTOCOL_VERSION as Ft, defaultCredentialsLoader as G, buildAgentCoreCodeImage as Gt, startApiServer as H, waitForAgentCorePing as Ht, buildStageMap as I, resolveAgentCoreTarget as In, mcpInvokeOnce as It, evaluateCachedLambdaPolicy as J, toCmdArgv as Jt, buildMethodArn as K, computeCodeImageTag as Kt, availableApiIdentifiers as L, derivePseudoParametersFromRegion as Ln, parseSseForJsonRpc as Lt, resolveApiTargetSubset as M, AGENTCORE_MCP_PROTOCOL as Mn, a2aInvokeOnce as Mt, createAuthorizerCache as N, AGENTCORE_RUNTIME_TYPE as Nn, MCP_CONTAINER_PORT as Nt, createLocalInvokeAgentCoreCommand as O, resolveLambdaArnIntrinsic as On, matchPreflight as Ot, createFileWatcher as P, AgentCoreResolutionError as Pn, MCP_PATH as Pt, translateLambdaResponse as Q, buildContainerImage as Qt, filterRoutesByApiIdentifier as R, formatStateRemedy as Rn, AGENTCORE_SIGV4_SERVICE as Rt, CloudMapRegistry as S, listTargets as Sn, verifyJwtViaDiscovery as St, addRunTaskSpecificOptions as T, parseSelectionExpressionPath as Tn, buildCorsConfigByApiId as Tt, resolveSelectionExpression as U, downloadAndExtractS3Bundle as Ut, readMtlsMaterialsFromDisk as V, LocalInvokeBuildError as Vn, invokeAgentCore as Vt, resolveServiceIntegrationParameters as W, SUPPORTED_CODE_RUNTIMES as Wt, invokeTokenAuthorizer as X, createLocalInvokeCommand as Xt, invokeRequestAuthorizer as Y, addInvokeSpecificOptions as Yt, matchRoute as Z, architectureToPlatform as Zt, parseMaxTasks as _, collectSsmParameterRefs as _n, buildCognitoJwksUrl as _t, albStrategy as a, substituteEnvVarsFromState as an, tryParseStatus as at, runEcsServiceEmulator as b, resolveSingleTarget as bn, verifyCognitoJwt as bt, resolveAlbTarget as c, materializeLayerFromArn as cn, probeHostGatewaySupport as ct, addStartServiceSpecificOptions as d, isCfnFlagPresent as dn, buildMgmtEndpointEnvUrl as dt, resolveRuntimeFileExtension as en, buildHttpApiV2Event as et, createLocalStartServiceCommand as f, rejectExplicitCfnStackWithMultipleStacks as fn, handleConnectionsRequest as ft, buildEcsImageResolutionContext as g, CfnLocalStateProvider as gn, buildMessageEvent as gt, addCommonEcsServiceOptions as h, resolveCfnStackName as hn, buildDisconnectEvent as ht, addAlbSpecificOptions as i, substituteAgainstStateAsync as in, selectIntegrationResponse as it, createWatchPredicates as j, AGENTCORE_HTTP_PROTOCOL as jn, A2A_PATH as jt, addStartApiSpecificOptions as k, AGENTCORE_A2A_PROTOCOL as kn, invokeAgentCoreWs as kt, isApplicationLoadBalancer as l, LocalStateSourceError as ln, bufferToBody as lt, MAX_TASKS_SUBNET_RANGE_CAP as m, resolveCfnRegion as mn, buildConnectEvent as mt, createLocalListCommand as n, EcsTaskResolutionError as nn, evaluateResponseParameters as nt, createLocalStartAlbCommand as o, substituteEnvVarsFromStateAsync as on, VtlEvaluationError as ot, serviceStrategy as p, resolveCfnFallbackRegion as pn, parseConnectionsPath as pt, computeRequestIdentityHash as q, renderCodeDockerfile as qt, formatTargetListing as r, substituteAgainstState as rn, pickResponseTemplate as rt, parseLbPortOverrides as s, resolveEnvVars as sn, HOST_GATEWAY_MIN_VERSION as st, addListSpecificOptions as t, resolveRuntimeImage as tn, buildRestV1Event as tt, resolveAlbFrontDoor as u, createLocalStateProvider as un, ConnectionRegistry as ut, parseRestartPolicy as v, resolveSsmParameters as vn, buildJwksUrlFromIssuer as vt, getContainerNetworkIp as w, discoverWebSocketApisOrThrow as wn, applyCorsResponseHeaders as wt, buildCloudMapIndex as x, countTargets as xn, verifyJwtAuthorizer as xt, resolveSharedSidecarCredentials as y, resolveWatchConfig as yn, createJwksCache as yt, filterRoutesByApiIdentifiers as z, substituteImagePlaceholders as zn, signAgentCoreInvocation as zt };
-//# sourceMappingURL=local-list-l2_7oGHF.js.map
+export { translateLambdaResponse as $, buildContainerImage as $t, addStartApiSpecificOptions as A, AGENTCORE_A2A_PROTOCOL as An, invokeAgentCoreWs as At, filterRoutesByApiIdentifiers as B, substituteImagePlaceholders as Bn, signAgentCoreInvocation as Bt, classifySourceChange as C, listTargets as Cn, verifyJwtViaDiscovery as Ct, createLocalRunTaskCommand as D, discoverRoutes as Dn, buildCorsConfigFromCloudFrontChain as Dt, addRunTaskSpecificOptions as E, parseSelectionExpressionPath as En, buildCorsConfigByApiId as Et, createFileWatcher as F, AgentCoreResolutionError as Fn, MCP_PATH as Ft, resolveServiceIntegrationParameters as G, SUPPORTED_CODE_RUNTIMES as Gt, readMtlsMaterialsFromDisk as H, LocalInvokeBuildError as Hn, invokeAgentCore as Ht, attachStageContext as I, pickAgentCoreCandidateStack as In, MCP_PROTOCOL_VERSION as It, computeRequestIdentityHash as J, renderCodeDockerfile as Jt, defaultCredentialsLoader as K, buildAgentCoreCodeImage as Kt, buildStageMap as L, resolveAgentCoreTarget as Ln, mcpInvokeOnce as Lt, createWatchPredicates as M, AGENTCORE_HTTP_PROTOCOL as Mn, A2A_PATH as Mt, resolveApiTargetSubset as N, AGENTCORE_MCP_PROTOCOL as Nn, a2aInvokeOnce as Nt, addInvokeAgentCoreSpecificOptions as O, pickRefLogicalId as On, isFunctionUrlOacFronted as Ot, createAuthorizerCache as P, AGENTCORE_RUNTIME_TYPE as Pn, MCP_CONTAINER_PORT as Pt, matchRoute as Q, architectureToPlatform as Qt, availableApiIdentifiers as R, derivePseudoParametersFromRegion as Rn, parseSseForJsonRpc as Rt, CloudMapRegistry as S, countTargets as Sn, verifyJwtAuthorizer as St, getContainerNetworkIp as T, discoverWebSocketApisOrThrow as Tn, applyCorsResponseHeaders as Tt, startApiServer as U, waitForAgentCorePing as Ut, groupRoutesByServer as V, tryResolveImageFnJoin as Vn, AGENTCORE_SESSION_ID_HEADER as Vt, resolveSelectionExpression as W, downloadAndExtractS3Bundle as Wt, invokeRequestAuthorizer as X, addInvokeSpecificOptions as Xt, evaluateCachedLambdaPolicy as Y, toCmdArgv as Yt, invokeTokenAuthorizer as Z, createLocalInvokeCommand as Zt, parseMaxTasks as _, CfnLocalStateProvider as _n, buildMessageEvent as _t, albStrategy as a, substituteAgainstStateAsync as an, selectIntegrationResponse as at, runEcsServiceEmulator as b, resolveWatchConfig as bn, createJwksCache as bt, resolveAlbTarget as c, resolveEnvVars as cn, HOST_GATEWAY_MIN_VERSION as ct, addStartServiceSpecificOptions as d, createLocalStateProvider as dn, ConnectionRegistry as dt, resolveRuntimeCodeMountPath as en, applyAuthorizerOverlay as et, createLocalStartServiceCommand as f, isCfnFlagPresent as fn, buildMgmtEndpointEnvUrl as ft, buildEcsImageResolutionContext as g, resolveCfnStackName as gn, buildDisconnectEvent as gt, addCommonEcsServiceOptions as h, resolveCfnRegion as hn, buildConnectEvent as ht, addAlbSpecificOptions as i, substituteAgainstState as in, pickResponseTemplate as it, createLocalStartApiCommand as j, AGENTCORE_AGUI_PROTOCOL as jn, A2A_CONTAINER_PORT as jt, createLocalInvokeAgentCoreCommand as k, resolveLambdaArnIntrinsic as kn, matchPreflight as kt, isApplicationLoadBalancer as l, materializeLayerFromArn as ln, probeHostGatewaySupport as lt, MAX_TASKS_SUBNET_RANGE_CAP as m, resolveCfnFallbackRegion as mn, parseConnectionsPath as mt, createLocalListCommand as n, resolveRuntimeImage as nn, buildRestV1Event as nt, createLocalStartAlbCommand as o, substituteEnvVarsFromState as on, tryParseStatus as ot, serviceStrategy as p, rejectExplicitCfnStackWithMultipleStacks as pn, handleConnectionsRequest as pt, buildMethodArn as q, computeCodeImageTag as qt, formatTargetListing as r, EcsTaskResolutionError as rn, evaluateResponseParameters as rt, parseLbPortOverrides as s, substituteEnvVarsFromStateAsync as sn, VtlEvaluationError as st, addListSpecificOptions as t, resolveRuntimeFileExtension as tn, buildHttpApiV2Event as tt, resolveAlbFrontDoor as u, LocalStateSourceError as un, bufferToBody as ut, parseRestartPolicy as v, collectSsmParameterRefs as vn, buildCognitoJwksUrl as vt, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as w, discoverWebSocketApis as wn, attachAuthorizers as wt, buildCloudMapIndex as x, resolveSingleTarget as xn, verifyCognitoJwt as xt, resolveSharedSidecarCredentials as y, resolveSsmParameters as yn, buildJwksUrlFromIssuer as yt, filterRoutesByApiIdentifier as z, formatStateRemedy as zn, AGENTCORE_SIGV4_SERVICE as zt };
+//# sourceMappingURL=local-list-C-wXKogn.js.map