cdk-local 0.85.0 → 0.87.0

package/dist/{local-studio-DaJ3D7co.js → local-studio-Cnpre8fu.js}

@@ -14705,7 +14705,7 @@ function availableApiIdentifiers(routes) {
 * @param overrides         Parsed `--env-vars` file contents, or
 *                          `undefined` when the flag was not passed.
 */
-function resolveEnvVars(logicalId, displayPath, templateEnv, overrides) {
+function resolveEnvVars$1(logicalId, displayPath, templateEnv, overrides) {
 	const resolved = {};
 	const unresolved = [];
 	if (templateEnv) for (const [key, value] of Object.entries(templateEnv)) if (isLiteralEnvValue(value)) resolved[key] = String(value);
@@ -16196,7 +16196,7 @@ async function buildContainerSpec(args) {
 		for (const { key, reason } of unresolved) getLogger().warn(`Lambda ${logicalId}: state source could not substitute env var ${key} (${reason}). Override it via --env-vars or it will be dropped.`);
 	}
 	const lambdaCdkPath = readCdkPathOrUndefined(lambda.resource);
-	const envResult = resolveEnvVars(logicalId, lambdaCdkPath, templateEnv, overrides);
+	const envResult = resolveEnvVars$1(logicalId, lambdaCdkPath, templateEnv, overrides);
 	for (const key of envResult.unresolved) {
 		if (stateAudit && stateAudit.unresolved.some((u) => u.key === key)) continue;
 		const overrideKeyExample = lambdaCdkPath?.replace(/\/Resource$/, "") ?? logicalId;
@@ -17209,7 +17209,7 @@ async function localInvokeCommand(target, options, extraStateProviders) {
 		}
 		const overrides = readEnvOverridesFile$3(options.envVars);
 		const lambdaCdkPath = readCdkPathOrUndefined(lambda.resource);
-		const envResult = resolveEnvVars(lambda.logicalId, lambdaCdkPath, templateEnv, overrides);
+		const envResult = resolveEnvVars$1(lambda.logicalId, lambdaCdkPath, templateEnv, overrides);
 		for (const key of envResult.unresolved) {
 			if (stateAudit && stateAudit.unresolved.some((u) => u.key === key)) continue;
 			const overrideKeyExample = lambdaCdkPath?.replace(/\/Resource$/, "") ?? lambda.logicalId;
@@ -19187,7 +19187,7 @@ async function buildContainerEnv(resolved, options, profileCredentials, profileC
 	}
 	const overrides = readEnvOverridesFile$2(options.envVars);
 	const cdkPath = readCdkPathOrUndefined(resolved.resource);
-	const envResult = resolveEnvVars(resolved.logicalId, cdkPath, templateEnv, overrides);
+	const envResult = resolveEnvVars$1(resolved.logicalId, cdkPath, templateEnv, overrides);
 	for (const key of envResult.unresolved) {
 		const overrideKeyExample = cdkPath?.replace(/\/Resource$/, "") ?? resolved.logicalId;
 		logger.warn(`Environment variable ${key} contains a CloudFormation intrinsic and was dropped. Override it with --env-vars (e.g. {"${overrideKeyExample}":{"${key}":"<literal>"}}), or pass a state-source flag (e.g. --from-cfn-stack) to recover deployed values.`);
@@ -27971,6 +27971,174 @@ function createStudioStore(bus, options = {}) {
 	};
 }
 
+//#endregion
+//#region src/local/studio-option-specs.ts
+/**
+* The per-kind option table. Kinds absent here (or with an empty list) have
+* no per-run options — the UI shows just the primary control (the event
+* composer for `lambda`, a bare Start for a serve).
+*/
+const OPTION_SPECS = {
+	lambda: [{
+		flag: "--env-vars",
+		kind: "env-kv",
+		label: "Env vars",
+		sep: "=",
+		leftPlaceholder: "KEY",
+		rightPlaceholder: "value",
+		help: "Overlay container env vars — add KEY=VALUE rows or paste a JSON object."
+	}],
+	alb: [
+		{
+			flag: "--tls",
+			kind: "boolean",
+			label: "TLS (terminate HTTPS locally)"
+		},
+		{
+			flag: "--tls-cert",
+			kind: "scalar",
+			label: "TLS cert",
+			placeholder: "./cert.pem",
+			showWhen: "--tls"
+		},
+		{
+			flag: "--tls-key",
+			kind: "scalar",
+			label: "TLS key",
+			placeholder: "./key.pem",
+			showWhen: "--tls"
+		},
+		{
+			flag: "--lb-port",
+			kind: "repeat-pair",
+			label: "Listener port remap",
+			sep: "=",
+			leftPlaceholder: "listenerPort",
+			rightPlaceholder: "hostPort"
+		},
+		{
+			flag: "--bearer-token",
+			kind: "scalar",
+			label: "Bearer token",
+			placeholder: "eyJ...",
+			help: "Default JWT injected for authenticate-cognito / authenticate-oidc actions."
+		},
+		{
+			flag: "--no-verify-auth",
+			kind: "boolean",
+			label: "Disable auth guard"
+		}
+	],
+	ecs: [{
+		flag: "--max-tasks",
+		kind: "scalar",
+		label: "Max replicas",
+		placeholder: "1",
+		inputType: "number"
+	}, {
+		flag: "--host-port",
+		kind: "repeat-pair",
+		label: "Container port publish",
+		sep: "=",
+		leftPlaceholder: "containerPort",
+		rightPlaceholder: "hostPort"
+	}]
+};
+/** True when `value` is a non-empty trimmed string. */
+function nonEmptyStr(value) {
+	return typeof value === "string" && value.trim() !== "";
+}
+/**
+* Build the per-run argv fragment for a target `kind` from the UI-posted
+* option `values`, validating each value against {@link OPTION_SPECS}.
+*
+* Throws on an unknown flag (a value keyed to an option the kind does not
+* declare) or a type mismatch (e.g. a string where a boolean is expected) so
+* a malformed UI / curl body fails loudly rather than spawning a child with
+* a bogus arg. A `scalar` with `showWhen` is dropped unless its gate boolean
+* is on. Empty / blank values are omitted.
+*/
+function buildPerRunArgs(kind, values) {
+	if (values === void 0) return [];
+	const specs = OPTION_SPECS[kind] ?? [];
+	const byFlag = new Map(specs.map((s) => [s.flag, s]));
+	for (const flag of Object.keys(values)) if (!byFlag.has(flag)) throw new Error(`Unknown option '${flag}' for target kind '${kind}'.`);
+	const args = [];
+	for (const spec of specs) {
+		const value = values[spec.flag];
+		if (value === void 0) continue;
+		if (spec.kind === "boolean") {
+			if (typeof value !== "boolean") throw new Error(`Option '${spec.flag}' must be a boolean.`);
+			if (value) args.push(spec.flag);
+			continue;
+		}
+		if (spec.kind === "scalar") {
+			if (value !== "" && typeof value !== "string") throw new Error(`Option '${spec.flag}' must be a string.`);
+			if (spec.showWhen && values[spec.showWhen] !== true) continue;
+			if (nonEmptyStr(value)) args.push(spec.flag, value.trim());
+			continue;
+		}
+		if (spec.kind === "env-kv") {
+			if (!Array.isArray(value) && typeof value !== "string") throw new Error(`Option '${spec.flag}' must be KEY/VALUE rows or a JSON string.`);
+			continue;
+		}
+		if (!Array.isArray(value)) throw new Error(`Option '${spec.flag}' must be an array of { left, right } rows.`);
+		for (const row of value) {
+			if (typeof row !== "object" || row === null) throw new Error(`Option '${spec.flag}' rows must be objects.`);
+			const { left, right } = row;
+			if (!nonEmptyStr(left) && !nonEmptyStr(right)) continue;
+			if (!nonEmptyStr(left) || !nonEmptyStr(right)) throw new Error(`Option '${spec.flag}' rows need both sides (got '${left}${spec.sep}${right}').`);
+			args.push(spec.flag, `${left.trim()}${spec.sep}${right.trim()}`);
+		}
+	}
+	return args;
+}
+/**
+* Materialize the `env-kv` option for a target `kind` into the SAM-shape
+* object `--env-vars` expects (one level of nesting). The caller writes the
+* returned object to a temp JSON file and passes `--env-vars <file>` to the
+* child. Returns `undefined` when there is no env-kv option / no values.
+*
+* Two input forms (both produced by the UI's KV / JSON toggle):
+* - **KV rows** (`PairValue[]`) -> a flat `{KEY: value}` map wrapped as
+*   `{ Parameters: {...} }` (the SAM global scope — applies to the target).
+* - **JSON string** -> parsed; a full SAM-shape object (a `Parameters` key or
+*   any nested-object value) is used as-is, while a flat `{KEY: "value"}`
+*   object is wrapped in `{ Parameters: {...} }`.
+*
+* Throws on malformed JSON / a non-object so a bad value fails as a clean
+* boundary error rather than writing garbage to the temp file.
+*/
+function resolveEnvVars(kind, values) {
+	if (values === void 0) return void 0;
+	const spec = (OPTION_SPECS[kind] ?? []).find((s) => s.kind === "env-kv");
+	if (!spec) return void 0;
+	const value = values[spec.flag];
+	if (value === void 0) return void 0;
+	if (Array.isArray(value)) {
+		const flat = {};
+		for (const row of value) {
+			const { left, right } = row ?? {};
+			if (nonEmptyStr(left)) flat[left.trim()] = typeof right === "string" ? right : "";
+		}
+		return Object.keys(flat).length > 0 ? { Parameters: flat } : void 0;
+	}
+	if (typeof value === "string") {
+		const text = value.trim();
+		if (text === "") return void 0;
+		let parsed;
+		try {
+			parsed = JSON.parse(text);
+		} catch {
+			throw new Error("Env vars JSON is not valid JSON.");
+		}
+		if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error("Env vars JSON must be a JSON object.");
+		const obj = parsed;
+		return "Parameters" in obj || Object.values(obj).some((v) => typeof v === "object" && v !== null) ? obj : { Parameters: obj };
+	}
+	throw new Error(`Option '${spec.flag}' must be KEY/VALUE rows or a JSON object string.`);
+}
+
 //#endregion
 //#region src/local/studio-ui.ts
 /**
@@ -28001,6 +28169,7 @@ const STUDIO_CSS = `
   body {
     margin: 0; font: 13px/1.5 ui-monospace, SFMono-Regular, Menlo, monospace;
     color: #e6e6e6; background: #1a1a1a; height: 100vh; overflow: hidden;
+    display: flex; flex-direction: column;
   }
   header {
     padding: 8px 14px; background: #111; border-bottom: 1px solid #333;
@@ -28008,9 +28177,30 @@ const STUDIO_CSS = `
   }
   header .brand { font-weight: 700; color: #fff; }
   header .meta { color: #888; font-size: 12px; }
+  #session-bar {
+    display: flex; align-items: center; gap: 8px; flex-wrap: wrap;
+    padding: 5px 14px; background: #141414; border-bottom: 1px solid #2a2a2a;
+    font-size: 12px;
+  }
+  #session-bar .sess-title { color: #888; text-transform: uppercase; font-size: 11px; }
+  #session-bar .sess-bind { color: #bbb; display: inline-flex; align-items: center; gap: 4px; }
+  #session-bar input[type=text] {
+    background: #111; color: #ddd; border: 1px solid #333; border-radius: 3px;
+    padding: 3px 6px; font: 12px ui-monospace, Menlo, monospace; min-width: 180px;
+  }
+  #session-bar input:focus { outline: none; border-color: #4ec97a; }
+  #session-bar button {
+    background: #2a3a2c; color: #7bd88f; border: 1px solid #2f4030; border-radius: 3px;
+    cursor: pointer; padding: 3px 12px; font: 12px ui-monospace, monospace;
+  }
+  #session-bar button:hover { background: #314b34; }
+  #session-bar #sess-msg { color: #7bd88f; min-width: 40px; }
+  #session-bar .sess-synth { color: #777; margin-left: auto; }
   main {
     display: grid; grid-template-columns: 280px 5px 1fr 5px 320px;
-    height: calc(100vh - 38px);
+    /* Body is a flex column (header + session-bar + main); main fills the
+       rest so the height is computed — no magic constant, wrap-safe. */
+    flex: 1; min-height: 0;
   }
   .pane { overflow: auto; }
   .splitter { background: #2a2a2a; cursor: col-resize; }
@@ -28093,6 +28283,35 @@ const STUDIO_CSS = `
   #conn { font-size: 11px; }
   #conn.up { color: #7bd88f; }
   #conn.down { color: #e0707a; }
+  .options .opt-row { display: flex; align-items: center; gap: 8px; margin: 6px 0; }
+  .options .opt-row.opt-col { display: flex; flex-direction: column; align-items: stretch; gap: 4px; }
+  .opt-label { color: #aaa; font-size: 12px; min-width: 120px; }
+  .opt-bool { color: #ddd; font-size: 12px; display: inline-flex; align-items: center; gap: 4px; cursor: pointer; }
+  .options input[type=text], .options input[type=number] {
+    flex: 1; background: #111; color: #ddd; border: 1px solid #333; border-radius: 3px;
+    padding: 4px 6px; font: 12px ui-monospace, Menlo, monospace; min-width: 0;
+  }
+  .options input:focus, .envkv-ta:focus { outline: none; border-color: #4ec97a; }
+  .pair-wrap { display: flex; flex-direction: column; gap: 4px; flex: 1; }
+  .pair-row { display: flex; align-items: center; gap: 6px; }
+  .pair-in { width: 1px; flex: 1; background: #111; color: #ddd; border: 1px solid #333;
+    border-radius: 3px; padding: 4px 6px; font: 12px ui-monospace, Menlo, monospace; min-width: 0; }
+  .pair-sep { color: #888; }
+  .pair-x { background: #2a2a2a; color: #bbb; border: none; border-radius: 3px; cursor: pointer;
+    padding: 2px 7px; font: 12px ui-monospace, monospace; }
+  .pair-x:hover { background: #3a2a2a; color: #e0707a; }
+  .pair-add { align-self: flex-start; background: #1d1d1d; color: #7bd88f; border: 1px solid #2f4030;
+    border-radius: 3px; cursor: pointer; padding: 3px 9px; font: 12px ui-monospace, monospace; }
+  .pair-add:hover { background: #243024; }
+  .envkv-modes { display: flex; gap: 0; }
+  .envkv-mode { background: #1a1a1a; color: #999; border: 1px solid #333; cursor: pointer;
+    padding: 3px 12px; font: 11px ui-monospace, monospace; }
+  .envkv-mode:first-child { border-radius: 3px 0 0 3px; }
+  .envkv-mode:last-child { border-radius: 0 3px 3px 0; border-left: none; }
+  .envkv-mode.active { background: #2a3a2c; color: #7bd88f; }
+  .envkv-ta { width: 100%; box-sizing: border-box; min-height: 70px; resize: vertical;
+    background: #111; color: #ddd; border: 1px solid #333; border-radius: 3px; padding: 6px 8px;
+    font: 12px ui-monospace, Menlo, monospace; }
 `;
 const STUDIO_SCRIPT = `
   const KIND_LABEL = { lambda: 'Lambda', api: 'API', alb: 'ALB', ecs: 'ECS', agentcore: 'AgentCore' };
@@ -28115,6 +28334,142 @@ const STUDIO_SCRIPT = `
     return e;
   }
 
+  // Per-target run options (issue #301 slice 2). The descriptor table is
+  // serialized into the page by the server; we render a control per option
+  // and return { node, collect } so the caller places the section and reads
+  // the values when the user clicks Invoke / Start.
+  const OPTION_SPECS = window.__OPTION_SPECS__ || {};
+
+  function buildOptions(kind) {
+    const specs = OPTION_SPECS[kind] || [];
+    if (!specs.length) return { node: null, collect: function () { return undefined; } };
+    const sec = el('div', 'section options');
+    sec.appendChild(el('h3', null, 'Options'));
+    const getters = [];
+    const bools = {};
+
+    // Shared add-row pair list (used by repeat-pair AND the env-kv KV pane).
+    function pairList(spec) {
+      const list = el('div', 'pair-rows');
+      const pairs = [];
+      const addRow = function () {
+        const r = el('div', 'pair-row');
+        const lv = el('input');
+        lv.placeholder = spec.leftPlaceholder;
+        lv.className = 'pair-in';
+        const rv = el('input');
+        rv.placeholder = spec.rightPlaceholder;
+        rv.className = 'pair-in';
+        const pair = { l: lv, r: rv };
+        const x = el('button', 'pair-x', 'x');
+        x.type = 'button';
+        x.onclick = function () {
+          list.removeChild(r);
+          const i = pairs.indexOf(pair);
+          if (i >= 0) pairs.splice(i, 1);
+        };
+        r.appendChild(lv);
+        r.appendChild(el('span', 'pair-sep', spec.sep));
+        r.appendChild(rv);
+        r.appendChild(x);
+        list.appendChild(r);
+        pairs.push(pair);
+      };
+      const add = el('button', 'pair-add', '+ add');
+      add.type = 'button';
+      add.onclick = addRow;
+      const wrap = el('div', 'pair-wrap');
+      wrap.appendChild(list);
+      wrap.appendChild(add);
+      return {
+        node: wrap,
+        rows: function () {
+          return pairs.map(function (p) { return { left: p.l.value, right: p.r.value }; });
+        },
+      };
+    }
+
+    specs.forEach(function (spec) {
+      const row = el('div', 'opt-row');
+      if (spec.kind === 'boolean') {
+        const cb = el('input');
+        cb.type = 'checkbox';
+        const lab = el('label', 'opt-bool');
+        lab.appendChild(cb);
+        lab.appendChild(document.createTextNode(' ' + spec.label));
+        row.appendChild(lab);
+        bools[spec.flag] = cb;
+        getters.push(function () { return [spec.flag, cb.checked]; });
+      } else if (spec.kind === 'scalar') {
+        row.appendChild(el('span', 'opt-label', spec.label));
+        const inp = el('input');
+        inp.type = spec.inputType === 'number' ? 'number' : 'text';
+        if (spec.placeholder) inp.placeholder = spec.placeholder;
+        row.appendChild(inp);
+        if (spec.showWhen) {
+          const gate = bools[spec.showWhen];
+          const sync = function () { row.style.display = gate && gate.checked ? 'flex' : 'none'; };
+          if (gate) gate.addEventListener('change', sync);
+          sync();
+        }
+        getters.push(function () { return [spec.flag, inp.value]; });
+      } else if (spec.kind === 'env-kv') {
+        // Two input modes — KV add-rows or a raw JSON object; the server
+        // materializes either into a SAM-shape temp file for --env-vars.
+        row.className = 'opt-row opt-col';
+        row.appendChild(el('span', 'opt-label', spec.label));
+        const modes = el('div', 'envkv-modes');
+        const kvBtn = el('button', 'envkv-mode active', 'KV');
+        kvBtn.type = 'button';
+        const jsonBtn = el('button', 'envkv-mode', 'JSON');
+        jsonBtn.type = 'button';
+        modes.appendChild(kvBtn);
+        modes.appendChild(jsonBtn);
+        row.appendChild(modes);
+        const pl = pairList(spec);
+        row.appendChild(pl.node);
+        const ta = el('textarea', 'envkv-ta');
+        ta.placeholder = '{ "KEY": "value" }';
+        ta.spellcheck = false;
+        ta.style.display = 'none';
+        row.appendChild(ta);
+        let mode = 'kv';
+        kvBtn.onclick = function () {
+          mode = 'kv';
+          kvBtn.className = 'envkv-mode active';
+          jsonBtn.className = 'envkv-mode';
+          pl.node.style.display = '';
+          ta.style.display = 'none';
+        };
+        jsonBtn.onclick = function () {
+          mode = 'json';
+          jsonBtn.className = 'envkv-mode active';
+          kvBtn.className = 'envkv-mode';
+          ta.style.display = '';
+          pl.node.style.display = 'none';
+        };
+        getters.push(function () {
+          return mode === 'json' ? [spec.flag, ta.value] : [spec.flag, pl.rows()];
+        });
+      } else {
+        // repeat-pair: an add-row list of left<sep>right inputs.
+        row.appendChild(el('span', 'opt-label', spec.label));
+        const pl = pairList(spec);
+        row.appendChild(pl.node);
+        getters.push(function () { return [spec.flag, pl.rows()]; });
+      }
+      sec.appendChild(row);
+    });
+    return {
+      node: sec,
+      collect: function () {
+        const out = {};
+        getters.forEach(function (g) { const kv = g(); out[kv[0]] = kv[1]; });
+        return out;
+      },
+    };
+  }
+
   async function loadTargets() {
     const pane = document.getElementById('targets');
     try {
@@ -28231,7 +28586,7 @@ const STUDIO_SCRIPT = `
     }
   }
 
-  async function startServe(id) {
+  async function startServe(id, options) {
     // The serve kind (api / alb / ecs) drives which headless command the
     // server spawns; it is recorded on the row when the target list loads.
     const meta = serveMeta.get(id);
@@ -28239,10 +28594,12 @@ const STUDIO_SCRIPT = `
     serveState.set(id, { status: 'starting', endpoints: [] });
     updateServeRow(id);
     try {
+      const body = { targetId: id, kind };
+      if (options) body.options = options;
       const res = await fetch('/api/run', {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ targetId: id, kind }),
+        body: JSON.stringify(body),
       });
       const data = await res.json();
       if (!res.ok) {
@@ -28279,12 +28636,17 @@ const STUDIO_SCRIPT = `
     const running = st.status === 'running';
     const starting = st.status === 'starting';
 
+    const meta = serveMeta.get(id);
+    const kind = meta ? meta.kind : 'api';
+
     const head = el('div', 'composer');
     head.appendChild(el('div', 'target-name', 'Serve ' + id));
     const btn = running || starting
       ? el('button', null, 'Stop')
       : el('button', null, starting ? 'Starting…' : 'Start');
-    btn.onclick = () => { if (running || starting) stopServe(id); else startServe(id); };
+    // Per-run options are only set before a start; collected on the Start click.
+    let collectOpts = function () { return undefined; };
+    btn.onclick = () => { if (running || starting) stopServe(id); else startServe(id, collectOpts()); };
     head.appendChild(btn);
     if (errMsg) {
       const m = el('div', 'err', errMsg);
@@ -28292,7 +28654,12 @@ const STUDIO_SCRIPT = `
     }
     ws.appendChild(head);
 
-    const meta = serveMeta.get(id);
+    if (!running && !starting) {
+      const opt = buildOptions(kind);
+      if (opt.node) ws.appendChild(opt.node);
+      collectOpts = opt.collect;
+    }
+
     const isEcs = meta && meta.kind === 'ecs';
     const epSec = el('div', 'section');
     epSec.appendChild(el('h3', null, 'Endpoints'));
@@ -28340,6 +28707,9 @@ const STUDIO_SCRIPT = `
     ta.value = eventText;
     ta.spellcheck = false;
     composer.appendChild(ta);
+    // Per-run options (e.g. env vars) below the event, above Invoke.
+    const opt = buildOptions(kind);
+    if (opt.node) composer.appendChild(opt.node);
     composer.appendChild(document.createElement('br'));
     const btn = el('button', null, 'Invoke');
     const msg = el('div', 'err');
@@ -28351,7 +28721,7 @@ const STUDIO_SCRIPT = `
     ws.appendChild(composer);
     ws.appendChild(result);
 
-    active = { id, kind, ta, btn, msg, result };
+    active = { id, kind, ta, btn, msg, result, collectOpts: opt.collect };
     btn.onclick = () => runInvoke();
     shownInvId = null;
     shownDetailId = null;
@@ -28373,10 +28743,13 @@ const STUDIO_SCRIPT = `
     btn.textContent = 'Invoking...';
     result.innerHTML = '';
     try {
+      const body = { targetId: id, kind, event };
+      const options = active.collectOpts ? active.collectOpts() : undefined;
+      if (options) body.options = options;
       const res = await fetch('/api/run', {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ targetId: id, kind, event }),
+        body: JSON.stringify(body),
       });
       const data = await res.json();
       if (data.invocationId) {
@@ -28648,11 +29021,78 @@ const STUDIO_SCRIPT = `
     wire('split-right', (dx, l0, r0) => { right = clamp(r0 - dx); });
   }
 
+  // Session config (issue #301 slice 3): synth-time context is read-only;
+  // the run-time bindings (from-cfn-stack / assume-role) are editable and
+  // apply to subsequent invokes / serves.
+  async function loadConfig() {
+    try {
+      const res = await fetch('/api/config');
+      const c = await res.json();
+      const cfn = document.getElementById('sess-cfn');
+      const cfnName = document.getElementById('sess-cfn-name');
+      const role = document.getElementById('sess-role');
+      const on = c.fromCfnStack !== undefined && c.fromCfnStack !== false;
+      cfn.checked = on;
+      cfnName.value = typeof c.fromCfnStack === 'string' ? c.fromCfnStack : '';
+      cfnName.style.display = on ? '' : 'none';
+      role.value = c.assumeRole || '';
+      const s = c.synth || {};
+      const parts = [];
+      if (s.profile) parts.push('profile=' + s.profile);
+      if (s.region) parts.push('region=' + s.region);
+      if (s.app) parts.push('app=' + s.app);
+      document.getElementById('sess-synth').textContent = parts.length ? '(' + parts.join(' \\u00b7 ') + ')' : '';
+    } catch (err) {
+      /* best-effort; the session bar is non-critical */
+    }
+  }
+
+  async function saveConfig() {
+    const cfn = document.getElementById('sess-cfn');
+    const cfnName = document.getElementById('sess-cfn-name');
+    const role = document.getElementById('sess-role');
+    const msg = document.getElementById('sess-msg');
+    const body = {
+      fromCfnStack: cfn.checked ? cfnName.value.trim() || true : null,
+      assumeRole: role.value.trim() || null,
+    };
+    msg.textContent = 'Saving...';
+    try {
+      const res = await fetch('/api/config', {
+        method: 'PATCH',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(body),
+      });
+      if (!res.ok) {
+        const e = await res.json().catch(function () { return {}; });
+        msg.textContent = 'Error: ' + (e.error || ('HTTP ' + res.status));
+        return;
+      }
+      msg.textContent = 'Saved';
+      setTimeout(function () { msg.textContent = ''; }, 1500);
+      await loadConfig();
+    } catch (err) {
+      msg.textContent = 'Failed: ' + err;
+    }
+  }
+
+  function wireSession() {
+    const cfn = document.getElementById('sess-cfn');
+    const cfnName = document.getElementById('sess-cfn-name');
+    cfn.addEventListener('change', function () {
+      cfnName.style.display = cfn.checked ? '' : 'none';
+      if (cfn.checked) cfnName.focus();
+    });
+    document.getElementById('sess-save').onclick = saveConfig;
+  }
+
   loadTargets().then(loadRunning);
   loadHistory();
+  loadConfig();
   connect();
   initSplitters();
   wireLogSearch();
+  wireSession();
 `;
 /**
 * Render the full studio HTML document. `appLabel` is shown in the
@@ -28676,6 +29116,16 @@ function renderStudioHtml(appLabel, cliName) {
   <span class="meta">${safeApp}</span>
   <span id="conn" class="down">● connecting</span>
 </header>
+<div id="session-bar">
+  <span class="sess-title">Session</span>
+  <label class="sess-bind"><input type="checkbox" id="sess-cfn" /> from-cfn-stack</label>
+  <input id="sess-cfn-name" type="text" placeholder="stack name (blank = auto)" style="display:none" />
+  <label class="sess-bind" for="sess-role">assume-role</label>
+  <input id="sess-role" type="text" placeholder="arn:aws:iam::…:role/…" />
+  <button id="sess-save" type="button">Save</button>
+  <span id="sess-msg"></span>
+  <span id="sess-synth" class="sess-synth"></span>
+</div>
 <main>
   <section class="pane" id="targets"><h2>Targets</h2></section>
   <div class="splitter" id="split-left"></div>
@@ -28688,6 +29138,7 @@ function renderStudioHtml(appLabel, cliName) {
     <div id="log-results"></div>
   </section>
 </main>
+<script>window.__OPTION_SPECS__ = ${JSON.stringify(OPTION_SPECS).replace(/</g, "\\u003c")};<\/script>
 <script>${STUDIO_SCRIPT}<\/script>
 </body>
 </html>`;
@@ -28812,6 +29263,16 @@ function handleRequest(req, res, bus, html, targetsJson, options) {
 		res.end(JSON.stringify({ logs }));
 		return;
 	}
+	if (req.method === "GET" && path === "/api/config") {
+		const config = options.getConfig ? options.getConfig() : {};
+		res.writeHead(200, { "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify(config));
+		return;
+	}
+	if (req.method === "PATCH" && path === "/api/config") {
+		handleDispatch(req, res, options.patchConfig);
+		return;
+	}
 	if (req.method === "GET" && path === "/api/events") {
 		serveSse(req, res, bus);
 		return;
@@ -29048,8 +29509,15 @@ function createStudioDispatcher(config) {
 				req.targetId,
 				"--event",
 				eventFile,
-				...buildSharedChildArgs(config)
+				...buildSharedChildArgs(config),
+				...buildPerRunArgs("lambda", req.options)
 			];
+			const envVars = resolveEnvVars("lambda", req.options);
+			if (envVars) {
+				const envFile = join(dir, "env-vars.json");
+				writeFileSync(envFile, JSON.stringify(envVars));
+				args.push("--env-vars", envFile);
+			}
 			const { code, stdout, stderr } = await runChild(spawnFn, nodeBin, [config.cliEntry, ...args], config.cwd ?? process.cwd(), invocationId, req.targetId, config.bus, clock);
 			const durationMs = clock() - startedAt;
 			const ok = code === 0;
@@ -29485,12 +29953,13 @@ function createStudioServeManager(config) {
 		if (message !== void 0) ev.message = message;
 		config.bus.emit("serve", ev);
 	}
-	function buildArgs(targetId, spec) {
+	function buildArgs(req, spec) {
 		return [
 			spec.command,
-			targetId,
+			req.targetId,
 			...spec.portArgs,
-			...buildSharedChildArgs(config)
+			...buildSharedChildArgs(config),
+			...buildPerRunArgs(req.kind, req.options)
 		];
 	}
 	async function start(req) {
@@ -29501,7 +29970,7 @@ function createStudioServeManager(config) {
 		const startedAt = clock();
 		let child;
 		try {
-			child = spawnFn(nodeBin, [config.cliEntry, ...buildArgs(req.targetId, spec)], { cwd });
+			child = spawnFn(nodeBin, [config.cliEntry, ...buildArgs(req, spec)], { cwd });
 		} catch (err) {
 			throw err instanceof Error ? err : new Error(String(err));
 		}
@@ -29711,13 +30180,21 @@ const STUDIO_TARGET_KINDS = [
 */
 function coerceRunRequest(body) {
 	if (typeof body !== "object" || body === null) throw new Error("Request body must be a JSON object.");
-	const { targetId, kind, event } = body;
+	const { targetId, kind, event, options } = body;
 	if (typeof targetId !== "string" || targetId.trim() === "") throw new Error("Request body must include a non-empty \"targetId\" string.");
 	if (typeof kind !== "string" || !STUDIO_TARGET_KINDS.includes(kind)) throw new Error(`Request body "kind" must be one of: ${STUDIO_TARGET_KINDS.join(", ")}.`);
+	let runOptions;
+	if (options !== void 0) {
+		if (typeof options !== "object" || options === null || Array.isArray(options)) throw new Error("Request body \"options\" must be a JSON object keyed by option flag.");
+		runOptions = options;
+		buildPerRunArgs(kind, runOptions);
+		resolveEnvVars(kind, runOptions);
+	}
 	return {
 		targetId,
 		kind,
-		event
+		event,
+		...runOptions !== void 0 ? { options: runOptions } : {}
 	};
 }
 /**
@@ -29731,6 +30208,32 @@ function coerceStopRequest(body) {
 	if (typeof targetId !== "string" || targetId.trim() === "") throw new Error("Request body must include a non-empty \"targetId\" string.");
 	return { targetId };
 }
+/**
+* Validate a `PATCH /api/config` body and apply the editable run-time
+* bindings (`fromCfnStack` / `assumeRole`) onto `target` in place. Only the
+* keys PRESENT in the body are touched (a partial update); `null` / `false` /
+* `''` clears a binding. Throws on a malformed body / value so a bad patch
+* fails loudly rather than silently mis-binding subsequent runs — the studio
+* server surfaces a thrown handler error as a 500 (same as every other
+* `/api/*` dispatch). The read-only synth context (profile / region / app) is
+* never patchable.
+*/
+function applyConfigPatch(body, target) {
+	if (typeof body !== "object" || body === null || Array.isArray(body)) throw new Error("Request body must be a JSON object.");
+	const b = body;
+	if ("fromCfnStack" in b) {
+		const v = b["fromCfnStack"];
+		if (v === null || v === false || v === "") delete target.fromCfnStack;
+		else if (v === true || typeof v === "string") target.fromCfnStack = v;
+		else throw new Error("\"fromCfnStack\" must be a string, boolean, or null.");
+	}
+	if ("assumeRole" in b) {
+		const v = b["assumeRole"];
+		if (v === null || v === "") delete target.assumeRole;
+		else if (typeof v === "string") target.assumeRole = v;
+		else throw new Error("\"assumeRole\" must be a string or null.");
+	}
+}
 const DEFAULT_STUDIO_PORT = 9999;
 /**
 * Parse + validate the `--studio-port` value. Accepts `0` (OS-assigned)
@@ -29780,6 +30283,15 @@ async function localStudioCommand(options) {
 	};
 	const dispatcher = createStudioDispatcher(childConfig);
 	const serveManager = createStudioServeManager(childConfig);
+	const sessionConfigSnapshot = () => ({
+		synth: {
+			profile: childConfig.profile,
+			region: childConfig.region,
+			app: childConfig.app
+		},
+		fromCfnStack: childConfig.fromCfnStack,
+		assumeRole: childConfig.assumeRole
+	});
 	const store = createStudioStore(bus);
 	const server = await startStudioServer({
 		port,
@@ -29799,7 +30311,12 @@ async function localStudioCommand(options) {
 			await serveManager.stop(req);
 			return { stopped: req.targetId };
 		},
-		getRunning: () => ({ running: serveManager.list() })
+		getRunning: () => ({ running: serveManager.list() }),
+		getConfig: () => sessionConfigSnapshot(),
+		patchConfig: (body) => {
+			applyConfigPatch(body, childConfig);
+			return Promise.resolve(sessionConfigSnapshot());
+		}
 	});
 	const cliName = getEmbedConfig().cliName;
 	logger.info(`${cliName} studio is running at ${server.url}`);
@@ -29872,5 +30389,5 @@ function addStudioSpecificOptions(cmd) {
 }
 
 //#endregion
-export { setShadowReadyTimeoutMs as $, discoverWebSocketApis as $n, computeRequestIdentityHash as $t, addEcsAssumeRoleOptions as A, buildContainerImage as An, resolveApiTargetSubset as At, buildImageOverrideTag as B, createLocalStateProvider as Bn, groupRoutesByServer as Bt, addStartServiceSpecificOptions as C, buildMgmtEndpointEnvUrl as Cn, toCmdArgv as Ct, createLocalRunTaskCommand as D, buildDisconnectEvent as Dn, addStartApiSpecificOptions as Dt, addRunTaskSpecificOptions as E, buildConnectEvent as En, createLocalInvokeCommand as Et, parseRestartPolicy as F, substituteAgainstState as Fn, materializeLayerFromArn as Ft, runImageOverrideBuilds as G, resolveCfnStackName as Gn, defaultCredentialsLoader as Gt, mergeForService as H, rejectExplicitCfnStackWithMultipleStacks as Hn, startApiServer as Ht, resolveEcsAssumeRoleOption as I, substituteAgainstStateAsync as In, resolveEnvVars as It, listPinnedTargets as J, resolveSsmParameters as Jn, createJwksCache as Jt, describePinnedImageUri as K, CfnLocalStateProvider as Kn, buildCognitoJwksUrl as Kt, resolveSharedSidecarCredentials as L, substituteEnvVarsFromState as Ln, availableApiIdentifiers as Lt, buildEcsImageResolutionContext$1 as M, resolveRuntimeFileExtension as Mn, createFileWatcher as Mt, ecsClusterOption as N, resolveRuntimeImage as Nn, attachStageContext as Nt, MAX_TASKS_SUBNET_RANGE_CAP as O, buildMessageEvent as On, createLocalStartApiCommand as Ot, parseMaxTasks as P, EcsTaskResolutionError as Pn, buildStageMap as Pt, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Q, listTargets as Qn, buildMethodArn as Qt, runEcsServiceEmulator as R, substituteEnvVarsFromStateAsync as Rn, filterRoutesByApiIdentifier as Rt, resolveAlbFrontDoor as S, ConnectionRegistry as Sn, renderCodeDockerfile as St, serviceStrategy as T, parseConnectionsPath as Tn, addInvokeSpecificOptions as Tt, parseImageOverrideFlags as U, resolveCfnFallbackRegion as Un, resolveSelectionExpression as Ut, enforceImageOverrideOrphans as V, isCfnFlagPresent as Vn, readMtlsMaterialsFromDisk as Vt, resolveImageOverrides as W, resolveCfnRegion as Wn, resolveServiceIntegrationParameters as Wt, CloudMapRegistry as X, resolveSingleTarget as Xn, verifyJwtAuthorizer as Xt, buildCloudMapIndex as Y, resolveWatchConfig as Yn, verifyCognitoJwt as Yt, DEFAULT_SHADOW_READY_TIMEOUT_MS as Z, countTargets as Zn, verifyJwtViaDiscovery as Zt, albStrategy as _, tryParseStatus as _n, LocalInvokeBuildError as _r, waitForAgentCorePing as _t, createStudioServeManager as a, buildCorsConfigByApiId as an, AGENTCORE_A2A_PROTOCOL as ar, A2A_CONTAINER_PORT as at, resolveAlbTarget as b, probeHostGatewaySupport as bn, buildAgentCoreCodeImage as bt, startStudioServer as c, matchPreflight as cn, AGENTCORE_MCP_PROTOCOL as cr, MCP_CONTAINER_PORT as ct, createStudioStore as d, applyAuthorizerOverlay as dn, pickAgentCoreCandidateStack as dr, mcpInvokeOnce as dt, evaluateCachedLambdaPolicy as en, discoverWebSocketApisOrThrow as er, getContainerNetworkIp as et, StudioEventBus as f, buildHttpApiV2Event as fn, resolveAgentCoreTarget as fr, parseSseForJsonRpc as ft, addAlbSpecificOptions as g, selectIntegrationResponse as gn, tryResolveImageFnJoin as gr, invokeAgentCore as gt, formatTargetListing as h, pickResponseTemplate as hn, substituteImagePlaceholders as hr, AGENTCORE_SESSION_ID_HEADER as ht, createLocalStudioCommand as i, applyCorsResponseHeaders as in, resolveLambdaArnIntrinsic as ir, invokeAgentCoreWs as it, addImageOverrideOptions as j, resolveRuntimeCodeMountPath as jn, createAuthorizerCache as jt, addCommonEcsServiceOptions as k, architectureToPlatform as kn, createWatchPredicates as kt, toStudioTargetGroups as l, matchRoute as ln, AGENTCORE_RUNTIME_TYPE as lr, MCP_PATH as lt, createLocalListCommand as m, evaluateResponseParameters as mn, formatStateRemedy as mr, signAgentCoreInvocation as mt, coerceRunRequest as n, invokeTokenAuthorizer as nn, discoverRoutes as nr, addInvokeAgentCoreSpecificOptions as nt, startStudioProxy as o, buildCorsConfigFromCloudFrontChain as on, AGENTCORE_AGUI_PROTOCOL as or, A2A_PATH as ot, addListSpecificOptions as p, buildRestV1Event as pn, derivePseudoParametersFromRegion as pr, AGENTCORE_SIGV4_SERVICE as pt, isLocalCdkAssetImage as q, collectSsmParameterRefs as qn, buildJwksUrlFromIssuer as qt, coerceStopRequest as r, attachAuthorizers as rn, pickRefLogicalId as rr, createLocalInvokeAgentCoreCommand as rt, createStudioDispatcher as s, isFunctionUrlOacFronted as sn, AGENTCORE_HTTP_PROTOCOL as sr, a2aInvokeOnce as st, addStudioSpecificOptions as t, invokeRequestAuthorizer as tn, parseSelectionExpressionPath as tr, attachContainerLogStreamer as tt, renderStudioHtml as u, translateLambdaResponse as un, AgentCoreResolutionError as ur, MCP_PROTOCOL_VERSION as ut, createLocalStartAlbCommand as v, VtlEvaluationError as vn, buildStsClientConfig as vr, downloadAndExtractS3Bundle as vt, createLocalStartServiceCommand as w, handleConnectionsRequest as wn, classifySourceChange as wt, isApplicationLoadBalancer as x, bufferToBody as xn, computeCodeImageTag as xt, parseLbPortOverrides as y, HOST_GATEWAY_MIN_VERSION as yn, resolveProfileCredentials as yr, SUPPORTED_CODE_RUNTIMES as yt, ImageOverrideError as z, LocalStateSourceError as zn, filterRoutesByApiIdentifiers as zt };
-//# sourceMappingURL=local-studio-DaJ3D7co.js.map
+export { setShadowReadyTimeoutMs as $, discoverWebSocketApis as $n, computeRequestIdentityHash as $t, addEcsAssumeRoleOptions as A, buildContainerImage as An, resolveApiTargetSubset as At, buildImageOverrideTag as B, createLocalStateProvider as Bn, groupRoutesByServer as Bt, addStartServiceSpecificOptions as C, buildMgmtEndpointEnvUrl as Cn, toCmdArgv as Ct, createLocalRunTaskCommand as D, buildDisconnectEvent as Dn, addStartApiSpecificOptions as Dt, addRunTaskSpecificOptions as E, buildConnectEvent as En, createLocalInvokeCommand as Et, parseRestartPolicy as F, substituteAgainstState as Fn, materializeLayerFromArn as Ft, runImageOverrideBuilds as G, resolveCfnStackName as Gn, defaultCredentialsLoader as Gt, mergeForService as H, rejectExplicitCfnStackWithMultipleStacks as Hn, startApiServer as Ht, resolveEcsAssumeRoleOption as I, substituteAgainstStateAsync as In, resolveEnvVars$1 as It, listPinnedTargets as J, resolveSsmParameters as Jn, createJwksCache as Jt, describePinnedImageUri as K, CfnLocalStateProvider as Kn, buildCognitoJwksUrl as Kt, resolveSharedSidecarCredentials as L, substituteEnvVarsFromState as Ln, availableApiIdentifiers as Lt, buildEcsImageResolutionContext$1 as M, resolveRuntimeFileExtension as Mn, createFileWatcher as Mt, ecsClusterOption as N, resolveRuntimeImage as Nn, attachStageContext as Nt, MAX_TASKS_SUBNET_RANGE_CAP as O, buildMessageEvent as On, createLocalStartApiCommand as Ot, parseMaxTasks as P, EcsTaskResolutionError as Pn, buildStageMap as Pt, SOFT_RELOAD_COMPLETION_LOG_SUFFIX as Q, listTargets as Qn, buildMethodArn as Qt, runEcsServiceEmulator as R, substituteEnvVarsFromStateAsync as Rn, filterRoutesByApiIdentifier as Rt, resolveAlbFrontDoor as S, ConnectionRegistry as Sn, renderCodeDockerfile as St, serviceStrategy as T, parseConnectionsPath as Tn, addInvokeSpecificOptions as Tt, parseImageOverrideFlags as U, resolveCfnFallbackRegion as Un, resolveSelectionExpression as Ut, enforceImageOverrideOrphans as V, isCfnFlagPresent as Vn, readMtlsMaterialsFromDisk as Vt, resolveImageOverrides as W, resolveCfnRegion as Wn, resolveServiceIntegrationParameters as Wt, CloudMapRegistry as X, resolveSingleTarget as Xn, verifyJwtAuthorizer as Xt, buildCloudMapIndex as Y, resolveWatchConfig as Yn, verifyCognitoJwt as Yt, DEFAULT_SHADOW_READY_TIMEOUT_MS as Z, countTargets as Zn, verifyJwtViaDiscovery as Zt, albStrategy as _, tryParseStatus as _n, LocalInvokeBuildError as _r, waitForAgentCorePing as _t, createStudioServeManager as a, buildCorsConfigByApiId as an, AGENTCORE_A2A_PROTOCOL as ar, A2A_CONTAINER_PORT as at, resolveAlbTarget as b, probeHostGatewaySupport as bn, buildAgentCoreCodeImage as bt, startStudioServer as c, matchPreflight as cn, AGENTCORE_MCP_PROTOCOL as cr, MCP_CONTAINER_PORT as ct, createStudioStore as d, applyAuthorizerOverlay as dn, pickAgentCoreCandidateStack as dr, mcpInvokeOnce as dt, evaluateCachedLambdaPolicy as en, discoverWebSocketApisOrThrow as er, getContainerNetworkIp as et, StudioEventBus as f, buildHttpApiV2Event as fn, resolveAgentCoreTarget as fr, parseSseForJsonRpc as ft, addAlbSpecificOptions as g, selectIntegrationResponse as gn, tryResolveImageFnJoin as gr, invokeAgentCore as gt, formatTargetListing as h, pickResponseTemplate as hn, substituteImagePlaceholders as hr, AGENTCORE_SESSION_ID_HEADER as ht, createLocalStudioCommand as i, applyCorsResponseHeaders as in, resolveLambdaArnIntrinsic as ir, invokeAgentCoreWs as it, addImageOverrideOptions as j, resolveRuntimeCodeMountPath as jn, createAuthorizerCache as jt, addCommonEcsServiceOptions as k, architectureToPlatform as kn, createWatchPredicates as kt, toStudioTargetGroups as l, matchRoute as ln, AGENTCORE_RUNTIME_TYPE as lr, MCP_PATH as lt, createLocalListCommand as m, evaluateResponseParameters as mn, formatStateRemedy as mr, signAgentCoreInvocation as mt, coerceRunRequest as n, invokeTokenAuthorizer as nn, discoverRoutes as nr, addInvokeAgentCoreSpecificOptions as nt, startStudioProxy as o, buildCorsConfigFromCloudFrontChain as on, AGENTCORE_AGUI_PROTOCOL as or, A2A_PATH as ot, addListSpecificOptions as p, buildRestV1Event as pn, derivePseudoParametersFromRegion as pr, AGENTCORE_SIGV4_SERVICE as pt, isLocalCdkAssetImage as q, collectSsmParameterRefs as qn, buildJwksUrlFromIssuer as qt, coerceStopRequest as r, attachAuthorizers as rn, pickRefLogicalId as rr, createLocalInvokeAgentCoreCommand as rt, createStudioDispatcher as s, isFunctionUrlOacFronted as sn, AGENTCORE_HTTP_PROTOCOL as sr, a2aInvokeOnce as st, addStudioSpecificOptions as t, invokeRequestAuthorizer as tn, parseSelectionExpressionPath as tr, attachContainerLogStreamer as tt, renderStudioHtml as u, translateLambdaResponse as un, AgentCoreResolutionError as ur, MCP_PROTOCOL_VERSION as ut, createLocalStartAlbCommand as v, VtlEvaluationError as vn, buildStsClientConfig as vr, downloadAndExtractS3Bundle as vt, createLocalStartServiceCommand as w, handleConnectionsRequest as wn, classifySourceChange as wt, isApplicationLoadBalancer as x, bufferToBody as xn, computeCodeImageTag as xt, parseLbPortOverrides as y, HOST_GATEWAY_MIN_VERSION as yn, resolveProfileCredentials as yr, SUPPORTED_CODE_RUNTIMES as yt, ImageOverrideError as z, LocalStateSourceError as zn, filterRoutesByApiIdentifiers as zt };
+//# sourceMappingURL=local-studio-Cnpre8fu.js.map