@awsless/awsless 0.0.18 → 0.0.20

package/dist/bin.js

@@ -171,6 +171,12 @@ var formatLogicalId = (id) => {
 var formatName = (name) => {
   return paramCase2(name);
 };
+var formatArn = (props) => {
+  return sub("arn:${AWS::Partition}:${service}:${AWS::Region}:${AWS::AccountId}:${resource}${seperator}${resourceName}", {
+    seperator: "/",
+    ...props
+  });
+};
 
 // src/formation/resource.ts
 var Resource = class {
@@ -180,13 +186,19 @@ var Resource = class {
     this.logicalId = formatLogicalId(`${logicalId}-${type.replace(/^AWS::/, "")}`);
   }
   logicalId;
+  tags = /* @__PURE__ */ new Map();
   deps = /* @__PURE__ */ new Set();
+  stack;
   dependsOn(...dependencies) {
     for (const dependency of dependencies) {
       this.deps.add(dependency);
     }
     return this;
   }
+  tag(key, value) {
+    this.tags.set(key, value);
+    return this;
+  }
   attr(name, value) {
     if (typeof value === "undefined") {
       return {};
@@ -195,12 +207,41 @@ var Resource = class {
       [name]: value
     };
   }
+  setStack(stack) {
+    this.stack = stack;
+    return this;
+  }
+  ref() {
+    return this.getAtt("ref");
+  }
+  getAtt(attr) {
+    return new Lazy((stack) => {
+      if (!this.stack) {
+        throw new TypeError("Resource stack not defined before building template");
+      }
+      const value = attr === "ref" ? ref(this.logicalId) : getAtt(this.logicalId, attr);
+      if (stack === this.stack) {
+        return value;
+      }
+      const name = `${this.stack.name}-${this.logicalId}-${attr}`;
+      this.stack.export(name, value);
+      return this.stack.import(name);
+    });
+  }
   toJSON() {
     return {
       [this.logicalId]: {
         Type: this.type,
         DependsOn: [...this.deps].map((dep) => dep.logicalId),
-        Properties: this.properties()
+        Properties: {
+          ...this.tags.size ? {
+            Tags: Array.from(this.tags.entries()).map(([key, value]) => ({
+              Key: key,
+              Value: value
+            }))
+          } : {},
+          ...this.properties()
+        }
       }
     };
   }
@@ -210,6 +251,11 @@ var Group = class {
     this.children = children;
   }
 };
+var Lazy = class {
+  constructor(callback) {
+    this.callback = callback;
+  }
+};
 
 // src/formation/resource/iam/inline-policy.ts
 var InlinePolicy = class {
@@ -315,6 +361,7 @@ var Function = class extends Resource {
     this.policy = policy;
     this.name = formatName(this.props.name || logicalId);
     this.environmentVariables = props.environment ? { ...props.environment } : {};
+    this.tag("name", this.name);
   }
   name;
   role;
@@ -328,11 +375,15 @@ var Function = class extends Resource {
     this.environmentVariables[name] = value;
     return this;
   }
+  setVpc(vpc) {
+    this.props.vpc = vpc;
+    return this;
+  }
   get id() {
-    return ref(this.logicalId);
+    return this.ref();
   }
   get arn() {
-    return getAtt(this.logicalId, "Arn");
+    return this.getAtt("Arn");
   }
   get permissions() {
     return {
@@ -340,7 +391,14 @@ var Function = class extends Resource {
         "lambda:InvokeFunction",
         "lambda:InvokeAsync"
       ],
-      resources: [this.arn]
+      resources: [
+        formatArn({
+          service: "lambda",
+          resource: "function",
+          resourceName: this.name,
+          seperator: ":"
+        })
+      ]
     };
   }
   properties() {
@@ -351,10 +409,17 @@ var Function = class extends Resource {
       Timeout: this.props.timeout?.toSeconds() ?? 10,
       Architectures: [this.props.architecture ?? "arm64"],
       Role: this.role.arn,
+      ...this.attr("ReservedConcurrentExecutions", this.props.reserved),
       ...this.props.code.toCodeJson(),
       EphemeralStorage: {
         Size: this.props.ephemeralStorageSize?.toMegaBytes() ?? 512
       },
+      ...this.props.vpc ? {
+        VpcConfig: {
+          SecurityGroupIds: this.props.vpc.securityGroupIds,
+          SubnetIds: this.props.vpc.subnetIds
+        }
+      } : {},
       Environment: {
         Variables: this.environmentVariables
       }
@@ -379,6 +444,7 @@ var Stack = class {
       } else {
         this.add(...item.children);
         if (item instanceof Resource) {
+          item.setStack(this);
           this.resources.add(item);
         }
       }
@@ -422,8 +488,24 @@ var Stack = class {
   toJSON() {
     const resources = {};
     const outputs = {};
+    const walk = (object) => {
+      for (const [key, value] of Object.entries(object)) {
+        if (!object.hasOwnProperty(key)) {
+          continue;
+        }
+        if (value instanceof Lazy) {
+          object[key] = value.callback(this);
+          continue;
+        }
+        if (typeof value === "object" && value !== null) {
+          walk(value);
+        }
+      }
+    };
     for (const resource of this) {
-      Object.assign(resources, resource.toJSON());
+      const json2 = resource.toJSON();
+      walk(json2);
+      Object.assign(resources, json2);
     }
     for (const [name, value] of this.exports.entries()) {
       Object.assign(outputs, {
@@ -491,54 +573,33 @@ var toStack = ({ config, app, stackConfig, bootstrap: bootstrap2, usEastBootstra
   }
   return {
     stack,
-    depends: stackConfig.depends
+    bindings
+    // depends: stackConfig.depends,
   };
 };
 
 // src/util/deployment.ts
-var createDependencyTree = (stacks) => {
+var createDeploymentLine = (stacks) => {
   const list3 = stacks.map(({ stack, config }) => ({
     stack,
     depends: config?.depends?.map((dep) => dep.name) || []
   }));
-  const findChildren = (list4, parents) => {
-    const children = [];
-    const rests = [];
-    for (const item of list4) {
-      const isChild = item.depends.filter((dep) => !parents.includes(dep)).length === 0;
-      if (isChild) {
-        children.push(item);
-      } else {
-        rests.push(item);
+  const line = [];
+  const deps = [];
+  let limit = 10;
+  while (deps.length < list3.length) {
+    const local = [];
+    for (const { stack, depends } of list3) {
+      if (!deps.includes(stack.name) && depends.filter((dep) => !deps.includes(dep)).length === 0) {
+        local.push(stack);
       }
     }
-    if (!rests.length) {
-      return children.map(({ stack }) => ({
-        stack,
-        children: []
-      }));
+    if (limit-- <= 0) {
+      throw new Error(`Circular stack dependencies arn't allowed.`);
     }
-    return children.map(({ stack }) => {
-      return {
-        stack,
-        children: findChildren(rests, [...parents, stack.name])
-      };
-    });
-  };
-  return findChildren(list3, []);
-};
-var createDeploymentLine = (stacks) => {
-  const line = [];
-  const walk = (stacks2, level) => {
-    stacks2.forEach((node) => {
-      if (!line[level]) {
-        line[level] = [];
-      }
-      line[level].push(node.stack);
-      walk(node.children, level + 1);
-    });
-  };
-  walk(stacks, 0);
+    deps.push(...local.map((stack) => stack.name));
+    line.push(local);
+  }
   return line;
 };
 
@@ -924,6 +985,7 @@ var hasOnFailure = (config) => {
 var MemorySizeSchema = SizeSchema.refine(sizeMin(Size.megaBytes(128)), "Minimum memory size is 128 MB").refine(sizeMax(Size.gigaBytes(10)), "Minimum memory size is 10 GB");
 var TimeoutSchema = DurationSchema.refine(durationMin(Duration.seconds(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(Duration.minutes(15)), "Maximum timeout duration is 15 minutes");
 var EphemeralStorageSizeSchema = SizeSchema.refine(sizeMin(Size.megaBytes(512)), "Minimum ephemeral storage size is 512 MB").refine(sizeMax(Size.gigaBytes(10)), "Minimum ephemeral storage size is 10 GB");
+var ReservedConcurrentExecutionsSchema = z6.number().int().min(0);
 var EnvironmentSchema = z6.record(z6.string(), z6.string()).optional();
 var ArchitectureSchema = z6.enum(["x86_64", "arm64"]);
 var RetryAttemptsSchema = z6.number().int().min(0).max(2);
@@ -934,8 +996,12 @@ var RuntimeSchema = z6.enum([
 var FunctionSchema = z6.union([
   LocalFileSchema,
   z6.object({
-    /** The file path ofthe function code. */
+    /** The file path of the function code. */
     file: LocalFileSchema,
+    /** Put the function inside your global VPC.
+     * @default false
+     */
+    vpc: z6.boolean().optional(),
     /** The amount of time that Lambda allows a function to run before stopping it.
      * You can specify a size value from 1 second to 15 minutes.
      * @default '10 seconds'
@@ -966,6 +1032,10 @@ var FunctionSchema = z6.union([
      * @default 2
     */
     retryAttempts: RetryAttemptsSchema.optional(),
+    /** The number of simultaneous executions to reserve for the function.
+     * You can specify a number from 0.
+     */
+    reserved: ReservedConcurrentExecutionsSchema.optional(),
     /** Environment variable key-value pairs.
      * @example
      * {
@@ -981,6 +1051,10 @@ var FunctionSchema = z6.union([
 var schema = z6.object({
   defaults: z6.object({
     function: z6.object({
+      /** Put the function inside your global VPC.
+       * @default false
+       */
+      vpc: z6.boolean().default(false),
       /** The amount of time that Lambda allows a function to run before stopping it.
        * You can specify a size value from 1 second to 15 minutes.
        * @default '10 seconds'
@@ -1011,6 +1085,10 @@ var schema = z6.object({
        * @default 2
       */
       retryAttempts: RetryAttemptsSchema.default(2),
+      /** The number of simultaneous executions to reserve for the function.
+       * You can specify a number from 0.
+       */
+      reserved: ReservedConcurrentExecutionsSchema.optional(),
       /** Environment variable key-value pairs.
        * @example
        * {
@@ -1051,6 +1129,12 @@ var functionPlugin = definePlugin({
         retryAttempts: props.retryAttempts,
         onFailure: getGlobalOnFailure(ctx)
       }).dependsOn(lambda);
+      if (hasOnFailure(ctx.config)) {
+        lambda.addPermissions({
+          actions: ["sqs:SendMessage"],
+          resources: [getGlobalOnFailure(ctx)]
+        });
+      }
       stack.add(invoke, lambda);
     }
   }
@@ -1062,12 +1146,36 @@ var toLambdaFunction = (ctx, id, fileOrProps) => {
   const lambda = new Function(id, {
     name: `${config.name}-${stack.name}-${id}`,
     code: Code.fromFile(id, props.file),
-    ...props
+    ...props,
+    vpc: void 0
   });
   lambda.addEnvironment("APP", config.name).addEnvironment("STAGE", config.stage).addEnvironment("STACK", stack.name);
+  if (props.vpc) {
+    lambda.setVpc({
+      securityGroupIds: [
+        ctx.bootstrap.import(`vpc-security-group-id`)
+      ],
+      subnetIds: [
+        ctx.bootstrap.import(`public-subnet-1`),
+        ctx.bootstrap.import(`public-subnet-2`)
+      ]
+    }).addPermissions({
+      actions: [
+        "ec2:CreateNetworkInterface",
+        "ec2:DescribeNetworkInterfaces",
+        "ec2:DeleteNetworkInterface",
+        "ec2:AssignPrivateIpAddresses",
+        "ec2:UnassignPrivateIpAddresses"
+      ],
+      resources: ["*"]
+    });
+  }
   if (props.runtime.startsWith("nodejs")) {
     lambda.addEnvironment("AWS_NODEJS_CONNECTION_REUSE_ENABLED", "1");
   }
+  ctx.bind((other) => {
+    other.addPermissions(lambda.permissions);
+  });
   return lambda;
 };
 
@@ -1145,7 +1253,7 @@ var cronPlugin = definePlugin({
   name: "cron",
   schema: z7.object({
     stacks: z7.object({
-      /** Define the crons in your stack
+      /** Define the crons in your stack.
        * @example
        * {
        *   crons: {
@@ -1157,7 +1265,7 @@ var cronPlugin = definePlugin({
        * }
        * */
       crons: z7.record(ResourceIdSchema, z7.object({
-        /** The consuming lambda function properties */
+        /** The consuming lambda function properties. */
         consumer: FunctionSchema,
         /** The scheduling expression.
          * @example 'cron(0 20 * * ? *)'
@@ -1191,6 +1299,7 @@ var Queue = class extends Resource {
     super("AWS::SQS::Queue", logicalId);
     this.props = props;
     this.name = formatName(this.props.name || logicalId);
+    this.tag("name", this.name);
   }
   name;
   setDeadLetter(arn) {
@@ -1211,7 +1320,13 @@ var Queue = class extends Resource {
         "sqs:GetQueueUrl",
         "sqs:GetQueueAttributes"
       ],
-      resources: [this.arn]
+      resources: [
+        formatArn({
+          service: "sqs",
+          resource: "queue",
+          resourceName: this.name
+        })
+      ]
     };
   }
   properties() {
@@ -1224,7 +1339,8 @@ var Queue = class extends Resource {
       VisibilityTimeout: this.props.visibilityTimeout?.toSeconds() ?? 30,
       ...this.props.deadLetterArn ? {
         RedrivePolicy: {
-          deadLetterTargetArn: this.props.deadLetterArn
+          deadLetterTargetArn: this.props.deadLetterArn,
+          maxReceiveCount: this.props.maxReceiveCount ?? 100
         }
       } : {}
     };
@@ -1280,8 +1396,7 @@ var SqsEventSource = class extends Group {
       sourceArn: props.queueArn,
       batchSize: props.batchSize ?? 10,
       maxBatchingWindow: props.maxBatchingWindow,
-      maxConcurrency: props.maxConcurrency,
-      onFailure: props.onFailure
+      maxConcurrency: props.maxConcurrency
     });
     lambda.addPermissions({
       actions: [
@@ -1296,6 +1411,14 @@ var SqsEventSource = class extends Group {
 };
 
 // src/plugins/queue.ts
+var RetentionPeriodSchema = DurationSchema.refine(durationMin(Duration.minutes(1)), "Minimum retention period is 1 minute").refine(durationMax(Duration.days(14)), "Maximum retention period is 14 days");
+var VisibilityTimeoutSchema = DurationSchema.refine(durationMax(Duration.hours(12)), "Maximum visibility timeout is 12 hours");
+var DeliveryDelaySchema = DurationSchema.refine(durationMax(Duration.minutes(15)), "Maximum delivery delay is 15 minutes");
+var ReceiveMessageWaitTimeSchema = DurationSchema.refine(durationMin(Duration.seconds(1)), "Minimum receive message wait time is 1 second").refine(durationMax(Duration.seconds(20)), "Maximum receive message wait time is 20 seconds");
+var MaxMessageSizeSchema = SizeSchema.refine(sizeMin(Size.kiloBytes(1)), "Minimum max message size is 1 KB").refine(sizeMax(Size.kiloBytes(256)), "Maximum max message size is 256 KB");
+var BatchSizeSchema = z8.number().int().min(1, "Minimum batch size is 1").max(1e4, "Maximum batch size is 10000");
+var MaxConcurrencySchema = z8.number().int().min(2, "Minimum max concurrency is 2").max(1e3, "Maximum max concurrency is 1000");
+var MaxBatchingWindow = DurationSchema.refine(durationMax(Duration.minutes(5)), "Maximum max batching window is 5 minutes");
 var queuePlugin = definePlugin({
   name: "queue",
   schema: z8.object({
@@ -1303,29 +1426,40 @@ var queuePlugin = definePlugin({
       /** Define the defaults properties for all queue's in your app. */
       queue: z8.object({
         /** The number of seconds that Amazon SQS retains a message.
-         * You can specify a duration value from 1 minute to 14 days.
+         * You can specify a duration from 1 minute to 14 days.
          * @default '7 days' */
-        retentionPeriod: DurationSchema.default("7 days"),
+        retentionPeriod: RetentionPeriodSchema.default("7 days"),
         /** The length of time during which a message will be unavailable after a message is delivered from the queue.
          * This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue.
-         * You can specify a duration value from 0 to 12 hours.
+         * You can specify a duration from 0 to 12 hours.
          * @default '30 seconds' */
-        visibilityTimeout: DurationSchema.default("30 seconds"),
+        visibilityTimeout: VisibilityTimeoutSchema.default("30 seconds"),
         /** The time in seconds for which the delivery of all messages in the queue is delayed.
-         * You can specify a duration value from 0 to 15 minutes.
+         * You can specify a duration from 0 to 15 minutes.
          * @default '0 seconds' */
-        deliveryDelay: DurationSchema.default("0 seconds"),
+        deliveryDelay: DeliveryDelaySchema.default("0 seconds"),
         /** Specifies the duration, in seconds,
          * that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response,
          * rather than returning an empty response if a message isn't yet available.
-         * You can specify an integer from 1 to 20.
-         * You can specify a duration value from 1 to 20 seconds.
-         * @default '0 seconds' */
-        receiveMessageWaitTime: DurationSchema.default("0 seconds"),
+         * You can specify a duration from 1 to 20 seconds.
+         * Short polling is used as the default. */
+        receiveMessageWaitTime: ReceiveMessageWaitTimeSchema.optional(),
         /** The limit of how many bytes that a message can contain before Amazon SQS rejects it.
-         * You can specify an size value from 1 KB to 256 KB.
+         * You can specify an size from 1 KB to 256 KB.
          * @default '256 KB' */
-        maxMessageSize: SizeSchema.default("256 KB")
+        maxMessageSize: MaxMessageSizeSchema.default("256 KB"),
+        /** The maximum number of records in each batch that Lambda pulls from your queue and sends to your function.
+         * Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
+         * You can specify an integer from 1 to 10000.
+         * @default 10 */
+        batchSize: BatchSizeSchema.default(10),
+        /** Limits the number of concurrent instances that the queue worker can invoke.
+         * You can specify an integer from 2 to 1000. */
+        maxConcurrency: MaxConcurrencySchema.optional(),
+        /** The maximum amount of time, that Lambda spends gathering records before invoking the function.
+         * You can specify an duration from 0 seconds to 5 minutes.
+         * @default '0 seconds' */
+        maxBatchingWindow: MaxBatchingWindow.optional()
       }).default({})
     }).default({}),
     stacks: z8.object({
@@ -1347,26 +1481,38 @@ var queuePlugin = definePlugin({
             /** The number of seconds that Amazon SQS retains a message.
              * You can specify a duration value from 1 minute to 14 days.
              * @default '7 days' */
-            retentionPeriod: DurationSchema.optional(),
+            retentionPeriod: RetentionPeriodSchema.optional(),
             /** The length of time during which a message will be unavailable after a message is delivered from the queue.
              * This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue.
              * You can specify a duration value from 0 to 12 hours.
              * @default '30 seconds' */
-            visibilityTimeout: DurationSchema.optional(),
+            visibilityTimeout: VisibilityTimeoutSchema.optional(),
             /** The time in seconds for which the delivery of all messages in the queue is delayed.
              * You can specify a duration value from 0 to 15 minutes.
              * @default '0 seconds' */
-            deliveryDelay: DurationSchema.optional(),
+            deliveryDelay: DeliveryDelaySchema.optional(),
             /** Specifies the duration, in seconds,
              * that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response,
              * rather than returning an empty response if a message isn't yet available.
              * You can specify a duration value from 1 to 20 seconds.
-             * @default '0 seconds' */
-            receiveMessageWaitTime: DurationSchema.optional(),
+             * Short polling is used as the default. */
+            receiveMessageWaitTime: ReceiveMessageWaitTimeSchema.optional(),
             /** The limit of how many bytes that a message can contain before Amazon SQS rejects it.
              * You can specify an size value from 1 KB to 256 KB.
              * @default '256 KB' */
-            maxMessageSize: SizeSchema.optional()
+            maxMessageSize: MaxMessageSizeSchema.optional(),
+            /** The maximum number of records in each batch that Lambda pulls from your queue and sends to your function.
+             * Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
+             * You can specify an integer from 1 to 10000.
+             * @default 10 */
+            batchSize: BatchSizeSchema.optional(),
+            /** Limits the number of concurrent instances that the queue worker can invoke.
+             * You can specify an integer from 2 to 1000. */
+            maxConcurrency: MaxConcurrencySchema.optional(),
+            /** The maximum amount of time, that Lambda spends gathering records before invoking the function.
+             * You can specify an duration from 0 seconds to 5 minutes.
+             * @default '0 seconds' */
+            maxBatchingWindow: MaxBatchingWindow.optional()
           })
         ])
       ).optional()
@@ -1378,12 +1524,15 @@ var queuePlugin = definePlugin({
       const props = typeof functionOrProps === "string" ? { ...config.defaults.queue, consumer: functionOrProps } : { ...config.defaults.queue, ...functionOrProps };
       const queue2 = new Queue(id, {
         name: `${config.name}-${stack.name}-${id}`,
+        deadLetterArn: getGlobalOnFailure(ctx),
         ...props
       });
       const lambda = toLambdaFunction(ctx, `queue-${id}`, props.consumer);
       const source = new SqsEventSource(id, lambda, {
         queueArn: queue2.arn,
-        onFailure: getGlobalOnFailure(ctx)
+        batchSize: props.batchSize,
+        maxConcurrency: props.maxConcurrency,
+        maxBatchingWindow: props.maxBatchingWindow
       });
       stack.add(queue2, lambda, source);
       bind((lambda2) => {
@@ -1404,6 +1553,7 @@ var Table = class extends Resource {
     this.props = props;
     this.name = formatName(this.props.name || logicalId);
     this.indexes = { ...this.props.indexes || {} };
+    this.tag("name", this.name);
   }
   name;
   indexes;
@@ -1436,7 +1586,13 @@ var Table = class extends Resource {
         "dynamodb:Query",
         "dynamodb:Scan"
       ],
-      resources: [this.arn]
+      resources: [
+        formatArn({
+          service: "dynamodb",
+          resource: "table",
+          resourceName: this.name
+        })
+      ]
     };
   }
   attributeDefinitions() {
@@ -1670,6 +1826,7 @@ var Bucket = class extends Resource {
     super("AWS::S3::Bucket", logicalId);
     this.props = props;
     this.name = formatName(this.props.name || logicalId);
+    this.tag("name", this.name);
   }
   name;
   get arn() {
@@ -1686,7 +1843,13 @@ var Bucket = class extends Resource {
         "s3:GetQueueUrl",
         "s3:GetQueueAttributes"
       ],
-      resources: [this.arn]
+      resources: [
+        formatArn({
+          service: "s3",
+          resource: "bucket",
+          resourceName: this.name
+        })
+      ]
     };
   }
   properties() {
@@ -1739,6 +1902,7 @@ var Topic = class extends Resource {
     super("AWS::SNS::Topic", logicalId);
     this.props = props;
     this.name = formatName(this.props.name || logicalId);
+    this.tag("name", this.name);
   }
   name;
   get arn() {
@@ -1747,7 +1911,13 @@ var Topic = class extends Resource {
   get permissions() {
     return {
       actions: ["sns:Publish"],
-      resources: [this.arn]
+      resources: [
+        formatArn({
+          service: "sns",
+          resource: "topic",
+          resourceName: this.name
+        })
+      ]
     };
   }
   properties() {
@@ -1980,6 +2150,7 @@ var GraphQLApi = class extends Resource {
     super("AWS::AppSync::GraphQLApi", logicalId);
     this.props = props;
     this.name = formatName(this.props.name || logicalId);
+    this.tag("name", this.name);
   }
   name;
   lambdaAuthProviders = [];
@@ -2632,7 +2803,7 @@ var domainPlugin = definePlugin({
       name: DomainNameSchema.optional(),
       /** The DNS record type. */
       type: z15.enum(["A", "AAAA", "CAA", "CNAME", "DS", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TXT"]),
-      /** The resource record cache time to live (TTL) */
+      /** The resource record cache time to live (TTL). */
       ttl: DurationSchema,
       /** One or more values that correspond with the value that you specified for the Type property. */
       records: z15.string().array()
@@ -2744,6 +2915,12 @@ var Vpc = class extends Resource {
   get id() {
     return ref(this.logicalId);
   }
+  get defaultNetworkAcl() {
+    return getAtt(this.logicalId, "DefaultNetworkAcl");
+  }
+  get defaultSecurityGroup() {
+    return getAtt(this.logicalId, "DefaultSecurityGroup");
+  }
   properties() {
     return {
       CidrBlock: this.props.cidrBlock.ip
@@ -2755,6 +2932,7 @@ var RouteTable = class extends Resource {
     super("AWS::EC2::RouteTable", logicalId);
     this.props = props;
     this.name = formatName(props.name || logicalId);
+    this.tag("name", this.name);
   }
   name;
   get id() {
@@ -2762,11 +2940,7 @@ var RouteTable = class extends Resource {
   }
   properties() {
     return {
-      VpcId: this.props.vpcId,
-      Tags: [{
-        Key: "name",
-        Value: this.name
-      }]
+      VpcId: this.props.vpcId
     };
   }
 };
@@ -2919,6 +3093,7 @@ var vpcPlugin = definePlugin({
       routeTableId: publicRouteTable.id,
       destination: Peer.anyIpv4()
     }).dependsOn(gateway, publicRouteTable);
+    bootstrap2.export("vpc-security-group-id", vpc.defaultSecurityGroup);
     bootstrap2.export(`vpc-id`, vpc.id);
     bootstrap2.add(
       vpc,
@@ -2961,7 +3136,9 @@ var SecurityGroup = class extends Resource {
   constructor(logicalId, props) {
     super("AWS::EC2::SecurityGroup", logicalId);
     this.props = props;
+    this.name = formatName(props.name ?? logicalId);
   }
+  name;
   ingress = [];
   egress = [];
   get id() {
@@ -2986,7 +3163,7 @@ var SecurityGroup = class extends Resource {
   properties() {
     return {
       VpcId: this.props.vpcId,
-      GroupName: this.logicalId,
+      GroupName: this.name,
       GroupDescription: this.props.description,
       SecurityGroupIngress: this.ingress.map((rule) => ({
         Description: rule.description || "",
@@ -3397,6 +3574,7 @@ var Collection = class extends Resource {
     super("AWS::OpenSearchServerless::Collection", logicalId);
     this.props = props;
     this.name = this.props.name || logicalId;
+    this.tag("name", this.name);
   }
   name;
   get id() {
@@ -3408,6 +3586,18 @@ var Collection = class extends Resource {
   get endpoint() {
     return getAtt(this.logicalId, "CollectionEndpoint");
   }
+  get permissions() {
+    return {
+      actions: ["aoss:APIAccessAll"],
+      resources: [
+        formatArn({
+          service: "aoss",
+          resource: "collection",
+          resourceName: this.name
+        })
+      ]
+    };
+  }
   properties() {
     return {
       Name: this.name,
@@ -3432,10 +3622,155 @@ var searchPlugin = definePlugin({
         type: "search"
       });
       bind((lambda) => {
-        lambda.addPermissions({
-          actions: ["aoss:APIAccessAll"],
-          resources: [collection.arn]
-        });
+        lambda.addPermissions(collection.permissions);
+      });
+    }
+  }
+});
+
+// src/plugins/cache.ts
+import { z as z19 } from "zod";
+
+// src/formation/resource/memorydb/cluster.ts
+var Cluster = class extends Resource {
+  constructor(logicalId, props) {
+    super("AWS::MemoryDB::Cluster", logicalId);
+    this.props = props;
+    this.name = formatName(this.props.name || logicalId);
+    this.tag("name", this.name);
+  }
+  name;
+  get status() {
+    return this.getAtt("Status");
+  }
+  get arn() {
+    return this.getAtt("ARN");
+  }
+  get address() {
+    return this.getAtt("ClusterEndpoint.Address");
+  }
+  get port() {
+    return this.getAtt("ClusterEndpoint.Port");
+  }
+  properties() {
+    return {
+      ClusterName: this.name,
+      ClusterEndpoint: {
+        Port: this.props.port
+      },
+      Port: this.props.port,
+      ...this.attr("Description", this.props.description),
+      ACLName: this.props.aclName,
+      EngineVersion: this.props.engine ?? "7.0",
+      ...this.attr("SubnetGroupName", this.props.subnetGroupName),
+      ...this.attr("SecurityGroupIds", this.props.securityGroupIds),
+      NodeType: "db." + this.props.type,
+      NumReplicasPerShard: this.props.replicasPerShard ?? 1,
+      NumShards: this.props.shards ?? 1,
+      TLSEnabled: this.props.tls ?? false,
+      DataTiering: this.props.dataTiering ? "true" : "false",
+      AutoMinorVersionUpgrade: this.props.autoMinorVersionUpgrade ?? true,
+      MaintenanceWindow: this.props.maintenanceWindow ?? "Sat:02:00-Sat:05:00"
+    };
+  }
+};
+
+// src/formation/resource/memorydb/subnet-group.ts
+var SubnetGroup = class extends Resource {
+  constructor(logicalId, props) {
+    super("AWS::MemoryDB::SubnetGroup", logicalId);
+    this.props = props;
+    this.name = formatName(this.props.name || logicalId);
+  }
+  name;
+  get arn() {
+    return getAtt(this.logicalId, "Arn");
+  }
+  properties() {
+    return {
+      SubnetGroupName: this.name,
+      SubnetIds: this.props.subnetIds,
+      ...this.attr("Description", this.props.description)
+    };
+  }
+};
+
+// src/plugins/cache.ts
+var TypeSchema = z19.enum([
+  "t4g.small",
+  "t4g.medium",
+  "r6g.large",
+  "r6g.xlarge",
+  "r6g.2xlarge",
+  "r6g.4xlarge",
+  "r6g.8xlarge",
+  "r6g.12xlarge",
+  "r6g.16xlarge",
+  "r6gd.xlarge",
+  "r6gd.2xlarge",
+  "r6gd.4xlarge",
+  "r6gd.8xlarge"
+]);
+var PortSchema = z19.number().int().min(1).max(5e4);
+var ShardsSchema = z19.number().int().min(0).max(100);
+var ReplicasPerShardSchema = z19.number().int().min(0).max(5);
+var EngineSchema = z19.enum(["7.0", "6.2"]);
+var cachePlugin = definePlugin({
+  name: "cache",
+  schema: z19.object({
+    stacks: z19.object({
+      /** Define the caches in your stack.
+       * For access to the cache put your functions inside the global VPC.
+       * @example
+       * {
+       *   caches: {
+       *     CACHE_NAME: {
+       *       type: 't4g.small'
+       *     }
+       *   }
+       * }
+       */
+      caches: z19.record(
+        ResourceIdSchema,
+        z19.object({
+          type: TypeSchema.default("t4g.small"),
+          port: PortSchema.default(6379),
+          shards: ShardsSchema.default(1),
+          replicasPerShard: ReplicasPerShardSchema.default(1),
+          engine: EngineSchema.default("7.0"),
+          dataTiering: z19.boolean().default(false)
+        })
+      ).optional()
+    }).array()
+  }),
+  onStack({ config, stack, stackConfig, bootstrap: bootstrap2, bind }) {
+    for (const [id, props] of Object.entries(stackConfig.caches || {})) {
+      const name = `${config.name}-${stack.name}-${id}`;
+      const subnetGroup = new SubnetGroup(id, {
+        name,
+        subnetIds: [
+          bootstrap2.import(`private-subnet-1`),
+          bootstrap2.import(`private-subnet-2`)
+        ]
+      });
+      const securityGroup = new SecurityGroup(id, {
+        name,
+        vpcId: bootstrap2.import(`vpc-id`),
+        description: name
+      });
+      const port = Port.tcp(props.port);
+      securityGroup.addIngressRule(Peer.anyIpv4(), port);
+      securityGroup.addIngressRule(Peer.anyIpv6(), port);
+      const cluster = new Cluster(id, {
+        name,
+        aclName: "open-access",
+        securityGroupIds: [securityGroup.id],
+        subnetGroupName: subnetGroup.name,
+        ...props
+      }).dependsOn(subnetGroup, securityGroup);
+      stack.add(subnetGroup, securityGroup, cluster);
+      bind((lambda) => {
+        lambda.addEnvironment(`CACHE_${stack.name}_${id}_HOST`, cluster.address).addEnvironment(`CACHE_${stack.name}_${id}_PORT`, props.port.toString());
       });
     }
   }
@@ -3446,6 +3781,7 @@ var defaultPlugins = [
   extendPlugin,
   vpcPlugin,
   functionPlugin,
+  cachePlugin,
   cronPlugin,
   queuePlugin,
   tablePlugin,
@@ -3627,7 +3963,7 @@ var toApp = async (config, filters) => {
     config.stacks.filter((stack) => filters.includes(stack.name))
   );
   for (const stackConfig of filterdStacks) {
-    const { stack } = toStack({
+    const { stack, bindings: bindings2 } = toStack({
       config,
       stackConfig,
       bootstrap: bootstrap2,
@@ -3636,7 +3972,7 @@ var toApp = async (config, filters) => {
       app
     });
     app.add(stack);
-    stacks.push({ stack, config: stackConfig });
+    stacks.push({ stack, config: stackConfig, bindings: bindings2 });
   }
   for (const plugin of plugins) {
     for (const stack of app.stacks) {
@@ -3658,23 +3994,31 @@ var toApp = async (config, filters) => {
       bind2(fn);
     }
   }
-  let dependencyTree = createDependencyTree(stacks);
+  for (const entry of stacks) {
+    for (const dep of entry.config.depends || []) {
+      const depStack = stacks.find((entry2) => entry2.config.name === dep.name);
+      if (!depStack) {
+        throw new Error(`Stack dependency not found: ${dep.name}`);
+      }
+      const functions2 = entry.stack.find(Function);
+      for (const bind2 of depStack.bindings) {
+        for (const fn of functions2) {
+          bind2(fn);
+        }
+      }
+    }
+  }
+  const deploymentLine = createDeploymentLine(stacks);
   if (bootstrap2.size > 0) {
-    dependencyTree = [{
-      stack: bootstrap2,
-      children: dependencyTree
-    }];
+    deploymentLine.unshift([bootstrap2]);
   }
   if (usEastBootstrap.size > 0) {
-    dependencyTree = [{
-      stack: usEastBootstrap,
-      children: dependencyTree
-    }];
+    deploymentLine.unshift([usEastBootstrap]);
   }
   return {
     app,
     plugins,
-    dependencyTree
+    deploymentLine
   };
 };
 
@@ -3698,17 +4042,17 @@ var getCredentials = (profile) => {
 };
 
 // src/schema/app.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 
 // src/schema/stack.ts
-import { z as z19 } from "zod";
-var StackSchema = z19.object({
+import { z as z20 } from "zod";
+var StackSchema = z20.object({
   name: ResourceIdSchema,
-  depends: z19.array(z19.lazy(() => StackSchema)).optional()
+  depends: z20.array(z20.lazy(() => StackSchema)).optional()
 });
 
 // src/schema/region.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 var US = ["us-east-2", "us-east-1", "us-west-1", "us-west-2"];
 var AF = ["af-south-1"];
 var AP = ["ap-east-1", "ap-south-2", "ap-southeast-3", "ap-southeast-4", "ap-south-1", "ap-northeast-3", "ap-northeast-2", "ap-southeast-1", "ap-southeast-2", "ap-northeast-1"];
@@ -3725,47 +4069,49 @@ var regions = [
   ...ME,
   ...SA
 ];
-var RegionSchema = z20.enum(regions);
+var RegionSchema = z21.enum(regions);
 
 // src/schema/plugin.ts
-import { z as z21 } from "zod";
-var PluginSchema = z21.object({
-  name: z21.string(),
-  schema: z21.custom().optional(),
+import { z as z22 } from "zod";
+var PluginSchema = z22.object({
+  name: z22.string(),
+  schema: z22.custom().optional(),
   // depends: z.array(z.lazy(() => PluginSchema)).optional(),
-  onApp: z21.function().returns(z21.void()).optional(),
-  onStack: z21.function().returns(z21.any()).optional(),
-  onResource: z21.function().returns(z21.any()).optional()
+  onApp: z22.function().returns(z22.void()).optional(),
+  onStack: z22.function().returns(z22.any()).optional(),
+  onResource: z22.function().returns(z22.any()).optional()
   // bind: z.function().optional(),
 });
 
 // src/schema/app.ts
-var AppSchema = z22.object({
+var AppSchema = z23.object({
   /** App name */
   name: ResourceIdSchema,
   /** The AWS region to deploy to. */
   region: RegionSchema,
   /** The AWS profile to deploy to. */
-  profile: z22.string(),
+  profile: z23.string(),
   /** The deployment stage.
    * @default 'prod'
    */
-  stage: z22.string().regex(/[a-z]+/).default("prod"),
+  stage: z23.string().regex(/[a-z]+/).default("prod"),
   /** Default properties. */
-  defaults: z22.object({}).default({}),
+  defaults: z23.object({}).default({}),
   /** The application stacks. */
-  stacks: z22.array(StackSchema).min(1).refine((stacks) => {
+  stacks: z23.array(StackSchema).min(1).refine((stacks) => {
     const unique = new Set(stacks.map((stack) => stack.name));
     return unique.size === stacks.length;
   }, "Must be an array of unique stacks"),
   /** Custom plugins. */
-  plugins: z22.array(PluginSchema).optional()
+  plugins: z23.array(PluginSchema).optional()
 });
 
 // src/util/import.ts
-import { transformFile } from "@swc/core";
+import { rollup as rollup2 } from "rollup";
+import { swc as swc2 } from "rollup-plugin-swc3";
+import replace from "rollup-plugin-replace";
 import { dirname, join as join2 } from "path";
-import { lstat as lstat2, mkdir, writeFile } from "fs/promises";
+import { mkdir, writeFile } from "fs/promises";
 
 // src/util/path.ts
 import { lstat } from "fs/promises";
@@ -3812,54 +4158,25 @@ var fileExist = async (file) => {
 };
 
 // src/util/import.ts
-var resolveFileNameExtension = async (path) => {
-  const options = [
-    "",
-    ".ts",
-    ".js",
-    "/index.ts",
-    "/index.js"
-  ];
-  for (const option of options) {
-    const file = path.replace(/\.js$/, "") + option;
-    let stat;
-    try {
-      stat = await lstat2(file);
-    } catch (error) {
-      continue;
-    }
-    if (stat.isFile()) {
-      return file;
-    }
-  }
-  throw new Error(`Failed to load file: ${path}`);
-};
-var resolveDir = (path) => {
-  return dirname(path).replace(directories.root + "/", "");
-};
 var importFile = async (path) => {
-  const load = async (file) => {
-    debug("Load file:", style.info(file));
-    let { code: code2 } = await transformFile(file, {
-      isModule: true
-    });
-    const path2 = dirname(file);
-    const dir = resolveDir(file);
-    code2 = code2.replaceAll("__dirname", `"${dir}"`);
-    const matches = code2.match(/(import|export)\s*{\s*[a-z0-9\_\,\s\*]+\s*}\s*from\s*('|")(\.\.?[\/a-z0-9\_\-\.]+)('|");?/ig);
-    if (!matches)
-      return code2;
-    await Promise.all(matches?.map(async (match) => {
-      const parts = /('|")(\.\.?[\/a-z0-9\_\-\.]+)('|")/ig.exec(match);
-      const from = parts[2];
-      const file2 = await resolveFileNameExtension(join2(path2, from));
-      const result = await load(file2);
-      code2 = code2.replace(match, result);
-    }));
-    return code2;
-  };
-  const code = await load(path);
+  const bundle = await rollup2({
+    input: path,
+    plugins: [
+      replace({
+        __dirname: (id) => `'${dirname(id)}'`
+      }),
+      swc2({
+        minify: false
+      })
+    ]
+  });
   const outputFile = join2(directories.cache, "config.js");
+  const result = await bundle.generate({
+    format: "esm",
+    exports: "default"
+  });
+  const output = result.output[0];
+  const code = output.code;
   await mkdir(directories.cache, { recursive: true });
   await writeFile(outputFile, code);
   debug("Save config file:", style.info(outputFile));
@@ -4161,7 +4478,7 @@ var Renderer = class {
   flushing = false;
   screen = [];
   width() {
-    return this.output.columns;
+    return this.output.columns - 1;
   }
   height() {
     return this.output.rows;
@@ -4999,12 +5316,73 @@ var assetPublisher = (config, app) => {
   };
 };
 
+// src/cli/ui/complex/deployer.ts
+var stacksDeployer = (deploymentLine) => {
+  const stackNames = deploymentLine.map((line) => line.map((stack) => stack.name)).flat();
+  const stackNameSize = Math.max(...stackNames.map((name) => name.length));
+  return (term) => {
+    const ui = {};
+    term.out.gap();
+    for (const i in deploymentLine) {
+      const line = flexLine(
+        term,
+        ["   "],
+        [
+          " ",
+          style.placeholder(Number(i) + 1),
+          style.placeholder(" \u2500\u2500")
+        ]
+      );
+      term.out.write(line);
+      term.out.write(br());
+      for (const stack of deploymentLine[i]) {
+        const icon = new Signal(" ");
+        const name = new Signal(style.label.dim(stack.name));
+        const status2 = new Signal(style.info.dim("waiting"));
+        let stopSpinner;
+        term.out.write([
+          icon,
+          "  ",
+          name,
+          " ".repeat(stackNameSize - stack.name.length),
+          " ",
+          style.placeholder(symbol.pointerSmall),
+          " ",
+          status2,
+          br()
+        ]);
+        ui[stack.name] = {
+          start: (value) => {
+            const [spinner, stop] = createSpinner();
+            name.set(style.label(stack.name));
+            icon.set(spinner);
+            status2.set(style.warning(value));
+            stopSpinner = stop;
+          },
+          done(value) {
+            stopSpinner();
+            icon.set(style.success(symbol.success));
+            status2.set(style.success(value));
+          },
+          fail(value) {
+            stopSpinner();
+            icon.set(style.error(symbol.error));
+            status2.set(style.error(value));
+          }
+        };
+      }
+    }
+    term.out.gap();
+    return ui;
+  };
+};
+
 // src/cli/command/deploy.ts
 var deploy = (program2) => {
   program2.command("deploy").argument("[stacks...]", "Optionally filter stacks to deploy").description("Deploy your app to AWS").action(async (filters) => {
     await layout(async (config, write) => {
       await write(bootstrapDeployer(config));
-      const { app, dependencyTree } = await toApp(config, filters);
+      const { app, deploymentLine } = await toApp(config, filters);
       const stackNames = app.stacks.map((stack) => stack.name);
       const formattedFilter = stackNames.map((i) => style.info(i)).join(style.placeholder(", "));
       debug("Stacks to deploy", formattedFilter);
@@ -5018,26 +5396,21 @@ var deploy = (program2) => {
       await write(assetBuilder(app));
       await write(assetPublisher(config, app));
       await write(templateBuilder(app));
-      const statuses = {};
-      for (const stack of app) {
-        statuses[stack.name] = new Signal(style.info("waiting"));
-      }
       const doneDeploying = write(loadingDialog("Deploying stacks to AWS..."));
-      write(stackTree(dependencyTree, statuses));
       const client = new StackClient(app, config.account, config.region, config.credentials);
-      const deploymentLine = createDeploymentLine(dependencyTree);
-      for (const stacks of deploymentLine) {
-        const results = await Promise.allSettled(stacks.map(async (stack) => {
-          const signal = statuses[stack.name];
-          signal.set(style.warning("deploying"));
+      const ui = write(stacksDeployer(deploymentLine));
+      for (const line of deploymentLine) {
+        const results = await Promise.allSettled(line.map(async (stack) => {
+          const item = ui[stack.name];
+          item.start("deploying");
           try {
             await client.deploy(stack);
           } catch (error) {
             debugError(error);
-            signal.set(style.error("failed"));
+            item.fail("failed");
             throw error;
           }
-          signal.set(style.success("deployed"));
+          item.done("deployed");
         }));
         for (const result of results) {
           if (result.status === "rejected") {