@awsless/awsless 0.0.275 → 0.0.278

package/dist/bin.js

@@ -91,6 +91,113 @@ var Cancelled = class extends Error {
   }
 };
 
+// src/util/workspace.ts
+import { minutes } from "@awsless/duration";
+import { aws, local, WorkSpace } from "@awsless/formation";
+import { mkdir, readFile, rm, writeFile } from "fs/promises";
+import { dirname, join as join2 } from "path";
+
+// src/util/path.ts
+import { lstat } from "fs/promises";
+import { join, normalize } from "path";
+var root = process.cwd();
+var directories = {
+  root,
+  get output() {
+    return join(this.root, ".awsless");
+  },
+  get cache() {
+    return join(this.output, "cache");
+  },
+  get state() {
+    return join(this.output, "state");
+  },
+  get build() {
+    return join(this.output, "build");
+  },
+  get types() {
+    return join(this.output, "types");
+  },
+  // get template() {
+  // 	return join(this.output, 'template')
+  // },
+  get test() {
+    return join(this.output, "test");
+  }
+};
+var setRoot = (path = root) => {
+  directories.root = path;
+};
+var findRootDir = async (path, configFiles, level = 5) => {
+  if (!level) {
+    throw new TypeError("No awsless project found");
+  }
+  for (const configFile of configFiles) {
+    const file = join(path, configFile);
+    const exists = await fileExist(file);
+    if (exists) {
+      return [file, path];
+    }
+  }
+  return findRootDir(normalize(join(path, "..")), configFiles, level - 1);
+};
+var fileExist = async (file) => {
+  try {
+    const stat5 = await lstat(file);
+    if (stat5.isFile()) {
+      return true;
+    }
+  } catch (error) {
+  }
+  return false;
+};
+
+// src/util/workspace.ts
+var getStateBucketName = (accountId) => {
+  return `awsless-state-${accountId}`;
+};
+var createWorkSpace = (props) => {
+  const lockProvider = new aws.dynamodb.LockProvider({
+    ...props,
+    tableName: "awsless-locks"
+  });
+  const stateProvider = new aws.s3.StateProvider({
+    ...props,
+    bucket: getStateBucketName(props.accountId)
+  });
+  const cloudProviders = aws.createCloudProviders({
+    ...props,
+    timeout: minutes(60)
+  });
+  const workspace = new WorkSpace({
+    lockProvider,
+    stateProvider,
+    cloudProviders,
+    concurrency: 15
+  });
+  return {
+    workspace,
+    lockProvider,
+    stateProvider
+  };
+};
+var pullRemoteState = async (app, stateProvider) => {
+  const file = join2(directories.state, `${app.urn}.json`);
+  const state2 = await stateProvider.get(app.urn);
+  await mkdir(dirname(file), { recursive: true });
+  if (typeof state2 === "undefined") {
+    await rm(file);
+  } else {
+    await writeFile(file, JSON.stringify(state2, void 0, 2));
+  }
+};
+var pushRemoteState = async (app, stateProvider) => {
+  const file = join2(directories.state, `${app.urn}.json`);
+  const data = await readFile(file, "utf8");
+  const state2 = JSON.parse(data);
+  await stateProvider.update(app.urn, state2);
+};
+
 // src/cli/ui/util.ts
 import wrapAnsi from "wrap-ansi";
 import Table from "cli-table3";
@@ -183,14 +290,15 @@ var hasStateBucket = async (client, accountId) => {
   try {
     const result = await client.send(
       new HeadBucketCommand({
-        Bucket: `awsless-state-${accountId}`
+        Bucket: getStateBucketName(accountId)
       })
     );
     return !!result.BucketRegion;
   } catch (error) {
-    console.log(error);
     if (error instanceof S3ServiceException) {
-      return false;
+      if (error.name === "NotFound") {
+        return false;
+      }
     }
     throw error;
   }
@@ -218,7 +326,7 @@ var createLockTable = (client) => {
 var createStateBucket = (client, accountId) => {
   return client.send(
     new CreateBucketCommand({
-      Bucket: `awsless-state-${accountId}`
+      Bucket: getStateBucketName(accountId)
     })
   );
 };
@@ -258,7 +366,7 @@ var bootstrapAwsless = async (props) => {
 import { intro, outro } from "@clack/prompts";
 
 // src/config/load/load.ts
-import { basename as basename2, dirname as dirname2, join as join4 } from "path";
+import { basename as basename2, dirname as dirname3, join as join5 } from "path";
 
 // src/cli/debug.ts
 var queue = [];
@@ -309,73 +417,16 @@ var durationMax = (max) => {
 // src/config/schema/local-file.ts
 import { stat } from "fs/promises";
 import { z as z3 } from "zod";
-
-// src/util/path.ts
-import { lstat } from "fs/promises";
-import { join, normalize } from "path";
-var root = process.cwd();
-var directories = {
-  root,
-  get output() {
-    return join(this.root, ".awsless");
-  },
-  get cache() {
-    return join(this.output, "cache");
-  },
-  get state() {
-    return join(this.output, "state");
-  },
-  get build() {
-    return join(this.output, "build");
-  },
-  get types() {
-    return join(this.output, "types");
-  },
-  // get template() {
-  // 	return join(this.output, 'template')
-  // },
-  get test() {
-    return join(this.output, "test");
-  }
-};
-var setRoot = (path = root) => {
-  directories.root = path;
-};
-var findRootDir = async (path, configFiles, level = 5) => {
-  if (!level) {
-    throw new TypeError("No awsless project found");
-  }
-  for (const configFile of configFiles) {
-    const file = join(path, configFile);
-    const exists = await fileExist(file);
-    if (exists) {
-      return [file, path];
-    }
-  }
-  return findRootDir(normalize(join(path, "..")), configFiles, level - 1);
-};
-var fileExist = async (file) => {
-  try {
-    const stat5 = await lstat(file);
-    if (stat5.isFile()) {
-      return true;
-    }
-  } catch (error) {
-  }
-  return false;
-};
-
-// src/config/schema/local-file.ts
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 var basePath;
 var setLocalBasePath = (path) => {
   basePath = path;
 };
 var resolvePath = (path) => {
   if (path.startsWith(".") && basePath) {
-    return join2(basePath, path);
+    return join3(basePath, path);
   }
-  return join2(directories.root, path);
+  return join3(directories.root, path);
 };
 var LocalFileSchema = z3.string().transform((path) => resolvePath(path)).refine(async (path) => {
   try {
@@ -402,12 +453,12 @@ var sizeMax = (max) => {
 };
 
 // src/feature/function/schema.ts
-import { days, minutes, seconds } from "@awsless/duration";
+import { days, minutes as minutes2, seconds } from "@awsless/duration";
 import { gibibytes, mebibytes } from "@awsless/size";
 var MemorySizeSchema = SizeSchema.refine(sizeMin(mebibytes(128)), "Minimum memory size is 128 MB").refine(sizeMax(gibibytes(10)), "Maximum memory size is 10 GB").describe(
   "The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The value can be any multiple of 1 MB. You can specify a size value from 128 MB to 10 GB."
 );
-var TimeoutSchema = DurationSchema.refine(durationMin(seconds(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(minutes(15)), "Maximum timeout duration is 15 minutes").describe(
+var TimeoutSchema = DurationSchema.refine(durationMin(seconds(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(minutes2(15)), "Maximum timeout duration is 15 minutes").describe(
   "The amount of time that Lambda allows a function to run before stopping it. You can specify a size value from 1 second to 15 minutes."
 );
 var EphemeralStorageSizeSchema = SizeSchema.refine(
@@ -721,10 +772,10 @@ var InstancesSchema = z12.record(
 
 // src/feature/queue/schema.ts
 import { z as z13 } from "zod";
-import { days as days2, hours, minutes as minutes2, seconds as seconds2 } from "@awsless/duration";
+import { days as days2, hours, minutes as minutes3, seconds as seconds2 } from "@awsless/duration";
 import { kibibytes } from "@awsless/size";
 var RetentionPeriodSchema = DurationSchema.refine(
-  durationMin(minutes2(1)),
+  durationMin(minutes3(1)),
   "Minimum retention period is 1 minute"
 ).refine(durationMax(days2(14)), "Maximum retention period is 14 days").describe(
   "The number of seconds that Amazon SQS retains a message. You can specify a duration from 1 minute to 14 days."
@@ -736,7 +787,7 @@ var VisibilityTimeoutSchema = DurationSchema.refine(
   "The length of time during which a message will be unavailable after a message is delivered from the queue. This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue. You can specify a duration from 0 to 12 hours."
 );
 var DeliveryDelaySchema = DurationSchema.refine(
-  durationMax(minutes2(15)),
+  durationMax(minutes3(15)),
   "Maximum delivery delay is 15 minutes"
 ).describe(
   "The time in seconds for which the delivery of all messages in the queue is delayed. You can specify a duration from 0 to 15 minutes."
@@ -757,7 +808,7 @@ var MaxConcurrencySchema = z13.number().int().min(2, "Minimum max concurrency is
   "Limits the number of concurrent instances that the queue worker can invoke. You can specify an integer from 2 to 1000."
 );
 var MaxBatchingWindow = DurationSchema.refine(
-  durationMax(minutes2(5)),
+  durationMax(minutes3(5)),
   "Maximum max batching window is 5 minutes"
 ).describe(
   "The maximum amount of time, that Lambda spends gathering records before invoking the function. You can specify an duration from 0 seconds to 5 minutes."
@@ -1407,13 +1458,13 @@ var StackSchema = z31.object({
 });
 
 // src/config/load/read.ts
-import { basename, dirname, extname, join as join3 } from "path";
-import { readFile } from "fs/promises";
+import { basename, dirname as dirname2, extname, join as join4 } from "path";
+import { readFile as readFile2 } from "fs/promises";
 import JSON5 from "json5";
 import merge from "deepmerge";
 var readConfig = async (file) => {
   try {
-    const json4 = await readFile(file, "utf8");
+    const json4 = await readFile2(file, "utf8");
     const data = JSON5.parse(json4);
     return data;
   } catch (error) {
@@ -1427,7 +1478,7 @@ var readConfigWithStage = async (file, stage) => {
   const config2 = await readConfig(file);
   const ext = extname(file);
   const stageFileName = basename(file, ext) + "." + stage + ext;
-  const stageFile = join3(dirname(file), stageFileName);
+  const stageFile = join4(dirname2(file), stageFileName);
   const stageFileExists = await fileExist(stageFile);
   if (!stageFileExists) {
     return config2;
@@ -1454,7 +1505,7 @@ var validateConfig = async (schema, file, data) => {
 // src/config/load/load.ts
 var loadAppConfig = async (options) => {
   debug("Find the root directory");
-  const cwd = options.configFile ? dirname2(join4(process.cwd(), options.configFile)) : process.cwd();
+  const cwd = options.configFile ? dirname3(join5(process.cwd(), options.configFile)) : process.cwd();
   const configFileOptions = options.configFile ? [basename2(options.configFile)] : ["app.json", "app.jsonc", "app.json5"];
   const [appFileName, root2] = await findRootDir(cwd, configFileOptions);
   setRoot(root2);
@@ -1480,8 +1531,8 @@ var loadStackConfigs = async (options) => {
       continue;
     }
     debug("Load stack file:", color.info(file));
-    const stackConfig = await readConfigWithStage(join4(directories.root, file), options.stage);
-    setLocalBasePath(join4(directories.root, dirname2(file)));
+    const stackConfig = await readConfigWithStage(join5(directories.root, file), options.stage);
+    setLocalBasePath(join5(directories.root, dirname3(file)));
     const stack = await validateConfig(StackSchema, file, stackConfig);
     stacks.push({
       ...stack,
@@ -1748,10 +1799,10 @@ var bootstrap = (program2) => {
 };
 
 // src/app.ts
-import { App, Stack } from "@awsless/formation";
+import { App as App2, Stack } from "@awsless/formation";
 
 // src/feature/auth/index.ts
-import { aws as aws2, Node as Node2 } from "@awsless/formation";
+import { aws as aws3, Node as Node2 } from "@awsless/formation";
 import { constantCase as constantCase2 } from "change-case";
 
 // src/feature.ts
@@ -1885,14 +1936,14 @@ var formatLocalResourceName = (appName, stackName, ns, id, seperator = "--") =>
 };
 
 // src/feature/function/util.ts
-import { Asset, aws } from "@awsless/formation";
+import { Asset, aws as aws2 } from "@awsless/formation";
 import deepmerge from "deepmerge";
-import { basename as basename4, dirname as dirname6, extname as extname3 } from "path";
+import { basename as basename4, dirname as dirname7, extname as extname3 } from "path";
 import { exec } from "promisify-child-process";
 
 // src/build/index.ts
-import { mkdir, readFile as readFile2, writeFile } from "fs/promises";
-import { dirname as dirname3, join as join5 } from "path";
+import { mkdir as mkdir2, readFile as readFile3, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname4, join as join6 } from "path";
 
 // old/util/timer.ts
 import hrtime from "pretty-hrtime";
@@ -1927,7 +1978,7 @@ var createTimer = () => {
 // src/build/index.ts
 var readCache = async (file) => {
   try {
-    const value = await readFile2(file, "utf8");
+    const value = await readFile3(file, "utf8");
     return JSON.parse(value);
   } catch (_) {
     return void 0;
@@ -1935,12 +1986,12 @@ var readCache = async (file) => {
 };
 var writeCache = async (file, version, data) => {
   const cache = JSON.stringify({ version, data });
-  const base = dirname3(file);
-  await mkdir(base, { recursive: true });
-  await writeFile(file, cache, "utf8");
+  const base = dirname4(file);
+  await mkdir2(base, { recursive: true });
+  await writeFile2(file, cache, "utf8");
 };
 var getBuildPath = (type, name, file) => {
-  return join5(directories.build, type, name, file);
+  return join6(directories.build, type, name, file);
 };
 var build = (type, name, builder) => {
   return builder(async (version, callback) => {
@@ -1955,9 +2006,9 @@ var build = (type, name, builder) => {
     const time = createTimer();
     const meta = await callback(async (file, data2) => {
       const path = getBuildPath(type, name, file);
-      const base = dirname3(path);
-      await mkdir(base, { recursive: true });
-      await writeFile(path, data2);
+      const base = dirname4(path);
+      await mkdir2(base, { recursive: true });
+      await writeFile2(path, data2);
     });
     const data = { ...meta, buildTime: time() };
     await writeCache(cacheFile, version, data);
@@ -1993,7 +2044,7 @@ import { swc, minify as swcMinify } from "rollup-plugin-swc3";
 import json from "@rollup/plugin-json";
 import commonjs from "@rollup/plugin-commonjs";
 import nodeResolve from "@rollup/plugin-node-resolve";
-import { dirname as dirname4 } from "path";
+import { dirname as dirname5 } from "path";
 var bundleTypeScript = async ({ format: format2 = "esm", minify = true, file }) => {
   const bundle = await rollup({
     input: file,
@@ -2016,7 +2067,7 @@ var bundleTypeScript = async ({ format: format2 = "esm", minify = true, file })
         // minify,
         // module: true,
         jsc: {
-          baseUrl: dirname4(file),
+          baseUrl: dirname5(file),
           minify: { sourceMap: true }
         },
         sourceMaps: true
@@ -2062,8 +2113,8 @@ var bundleTypeScript = async ({ format: format2 = "esm", minify = true, file })
 
 // src/feature/function/build/typescript/fingerprint.ts
 import { createHash as createHash2 } from "crypto";
-import { readFile as readFile3, readdir, stat as stat3 } from "fs/promises";
-import { basename as basename3, dirname as dirname5, extname as extname2, join as join6 } from "path";
+import { readFile as readFile4, readdir, stat as stat3 } from "fs/promises";
+import { basename as basename3, dirname as dirname6, extname as extname2, join as join7 } from "path";
 import parseStaticImports from "parse-static-imports";
 var extensions = ["js", "mjs", "jsx", "ts", "mts", "tsx"];
 var generateFileHashes = async (file, hashes) => {
@@ -2094,17 +2145,17 @@ var readModuleFile = (file) => {
     return readFiles([
       file,
       ...extensions.map((exp) => `${file}.${exp}`),
-      ...extensions.map((exp) => join6(file, `/index.${exp}`))
+      ...extensions.map((exp) => join7(file, `/index.${exp}`))
     ]);
   }
-  return readFile3(file, "utf8");
+  return readFile4(file, "utf8");
 };
 var readFiles = async (files) => {
   for (const file of files) {
     try {
       const s = await stat3(file);
       if (s.isFile()) {
-        return readFile3(file, "utf8");
+        return readFile4(file, "utf8");
       }
     } catch (_) {
       continue;
@@ -2114,7 +2165,7 @@ var readFiles = async (files) => {
 };
 var findDependencies = async (file, code) => {
   const imports = await parseStaticImports(code);
-  return imports.map((entry) => entry.moduleName).filter(Boolean).map((value) => value?.startsWith(".") ? join6(dirname5(file), value) : value);
+  return imports.map((entry) => entry.moduleName).filter(Boolean).map((value) => value?.startsWith(".") ? join7(dirname6(file), value) : value);
 };
 
 // src/feature/function/build/zip.ts
@@ -2162,14 +2213,14 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
         };
       });
     });
-    code = new aws.s3.BucketObject(group, "code", {
+    code = new aws2.s3.BucketObject(group, "code", {
       bucket: ctx.shared.get("function-bucket-name"),
       key: `/lambda/${name}.zip`,
       body: Asset.fromFile(getBuildPath("function", name, "bundle.zip"))
     });
   } else if (basename4(props.file) === "dockerfile") {
     ctx.registerBuild("function", name, async (build3) => {
-      const basePath2 = dirname6(props.file);
+      const basePath2 = dirname7(props.file);
       const version = await hashElement(basePath2, {
         files: {
           exclude: ["stack.json"]
@@ -2190,7 +2241,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
         };
       });
     });
-    const image = new aws.ecr.Image(group, "image", {
+    const image = new aws2.ecr.Image(group, "image", {
       repository: ctx.shared.get("function-repository-name"),
       hash: Asset.fromFile(getBuildPath("function", name, "HASH")),
       name,
@@ -2203,12 +2254,12 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
   } else {
     throw new Error("Unknown Lambda Function type.");
   }
-  const role = new aws.iam.Role(group, "role", {
+  const role = new aws2.iam.Role(group, "role", {
     name,
     assumedBy: "lambda.amazonaws.com"
     // policies: inlinePolicies,
   });
-  const policy = new aws.iam.RolePolicy(group, "policy", {
+  const policy = new aws2.iam.RolePolicy(group, "policy", {
     role: role.name,
     name: "lambda-policy",
     version: "2012-10-17"
@@ -2220,7 +2271,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
     // 	},
     // ],
   });
-  const lambda = new aws.lambda.Function(group, `function`, {
+  const lambda = new aws2.lambda.Function(group, `function`, {
     ...props,
     name,
     role: role.arn,
@@ -2239,7 +2290,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
     lambda.addEnvironment("STACK", ctx.stackConfig.name);
   }
   if (props.log.retention.value > 0n) {
-    const logGroup = new aws.cloudWatch.LogGroup(group, "log", {
+    const logGroup = new aws2.cloudWatch.LogGroup(group, "log", {
       name: lambda.name.apply((name2) => `/aws/lambda/${name2}`),
       retention: props.log.retention
     });
@@ -2261,7 +2312,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
     policy.addStatement(...local2.permissions);
   }
   if (props.warm) {
-    const rule = new aws.events.Rule(group, "warm", {
+    const rule = new aws2.events.Rule(group, "warm", {
       name: `${name}--warm`,
       schedule: "rate(5 minutes)",
       enabled: true,
@@ -2276,7 +2327,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
         }
       ]
     });
-    new aws.lambda.Permission(group, `warm`, {
+    new aws2.lambda.Permission(group, `warm`, {
       action: "lambda:InvokeFunction",
       principal: "events.amazonaws.com",
       functionArn: lambda.arn,
@@ -2291,7 +2342,7 @@ var createLambdaFunction = (group, ctx, ns, id, local2) => {
         ctx.shared.get(`vpc-public-subnet-id-2`)
       ]
     });
-    const vpcPolicy = new aws.iam.RolePolicy(group, "vpc-policy", {
+    const vpcPolicy = new aws2.iam.RolePolicy(group, "vpc-policy", {
       role: role.name,
       name: "lambda-vpc-policy",
       version: "2012-10-17",
@@ -2320,7 +2371,7 @@ var createAsyncLambdaFunction = (group, ctx, ns, id, local2) => {
   const result = createLambdaFunction(group, ctx, ns, id, local2);
   const props = deepmerge(ctx.appConfig.defaults.function, local2);
   result.lambda.addEnvironment("LOG_VIEWABLE_ERROR", "1");
-  const invokeConfig = new aws.lambda.EventInvokeConfig(group, "async", {
+  const invokeConfig = new aws2.lambda.EventInvokeConfig(group, "async", {
     functionArn: result.lambda.arn,
     retryAttempts: props.retryAttempts,
     onFailure: getGlobalOnFailure(ctx)
@@ -2372,12 +2423,12 @@ var authFeature = defineFeature({
           policy
         };
       }
-      new aws2.cognito.LambdaTriggers(group, "lambda-triggers", {
+      new aws3.cognito.LambdaTriggers(group, "lambda-triggers", {
         userPoolId,
         triggers
       });
       for (const item of Object.values(list4)) {
-        new aws2.lambda.Permission(item.group, `permission`, {
+        new aws3.lambda.Permission(item.group, `permission`, {
           action: "lambda:InvokeFunction",
           principal: "cognito-idp.amazonaws.com",
           functionArn: item.lambda.arn,
@@ -2416,7 +2467,7 @@ var authFeature = defineFeature({
         };
       }
       const name = formatGlobalResourceName(ctx.appConfig.name, "auth", id);
-      const userPool = new aws2.cognito.UserPool(group, "user-pool", {
+      const userPool = new aws3.cognito.UserPool(group, "user-pool", {
         name,
         // deletionProtection: true,
         allowUserRegistration: props.allowUserRegistration,
@@ -2424,7 +2475,7 @@ var authFeature = defineFeature({
         password: props.password,
         email: emailConfig
       });
-      const client = new aws2.cognito.UserPoolClient(group, "client", {
+      const client = new aws3.cognito.UserPoolClient(group, "client", {
         userPoolId: userPool.id,
         name,
         validity: props.validity,
@@ -2443,7 +2494,7 @@ var authFeature = defineFeature({
 });
 
 // src/feature/cache/index.ts
-import { aws as aws3, Node as Node3 } from "@awsless/formation";
+import { aws as aws4, Node as Node3 } from "@awsless/formation";
 import { constantCase as constantCase3 } from "change-case";
 var typeGenCode = `
 import { Cluster, CommandOptions } from '@awsless/redis'
@@ -2476,7 +2527,7 @@ var cacheFeature = defineFeature({
     for (const [id, props] of Object.entries(ctx.stackConfig.caches ?? {})) {
       const group = new Node3(ctx.stack, this.name, id);
       const name = formatLocalResourceName(ctx.appConfig.name, ctx.stack.name, this.name, id, "-");
-      const subnetGroup = new aws3.memorydb.SubnetGroup(group, "subnets", {
+      const subnetGroup = new aws4.memorydb.SubnetGroup(group, "subnets", {
         name,
         subnetIds: [
           //
@@ -2484,15 +2535,15 @@ var cacheFeature = defineFeature({
           ctx.shared.get("vpc-private-subnet-id-2")
         ]
       });
-      const securityGroup = new aws3.ec2.SecurityGroup(group, "security", {
+      const securityGroup = new aws4.ec2.SecurityGroup(group, "security", {
         name,
         vpcId: ctx.shared.get(`vpc-id`),
         description: name
       });
-      const port = aws3.ec2.Port.tcp(props.port);
-      securityGroup.addIngressRule({ port, peer: aws3.ec2.Peer.anyIpv4() });
-      securityGroup.addIngressRule({ port, peer: aws3.ec2.Peer.anyIpv6() });
-      const cluster = new aws3.memorydb.Cluster(group, "cluster", {
+      const port = aws4.ec2.Port.tcp(props.port);
+      securityGroup.addIngressRule({ port, peer: aws4.ec2.Peer.anyIpv4() });
+      securityGroup.addIngressRule({ port, peer: aws4.ec2.Peer.anyIpv6() });
+      const cluster = new aws4.memorydb.Cluster(group, "cluster", {
         name,
         aclName: "open-access",
         securityGroupIds: [securityGroup.id],
@@ -2649,14 +2700,14 @@ var configFeature = defineFeature({
 });
 
 // src/feature/cron/index.ts
-import { Node as Node4, aws as aws4 } from "@awsless/formation";
+import { Node as Node4, aws as aws5 } from "@awsless/formation";
 var cronFeature = defineFeature({
   name: "cron",
   onStack(ctx) {
     for (const [id, props] of Object.entries(ctx.stackConfig.crons ?? {})) {
       const group = new Node4(ctx.stack, "cron", id);
       const { lambda } = createAsyncLambdaFunction(group, ctx, "cron", id, props.consumer);
-      const rule = new aws4.events.Rule(group, "rule", {
+      const rule = new aws5.events.Rule(group, "rule", {
         name: formatLocalResourceName(ctx.app.name, ctx.stack.name, this.name, id),
         schedule: props.schedule,
         enabled: props.enabled,
@@ -2668,7 +2719,7 @@ var cronFeature = defineFeature({
           }
         ]
       });
-      new aws4.lambda.Permission(group, "permission", {
+      new aws5.lambda.Permission(group, "permission", {
         action: "lambda:InvokeFunction",
         principal: "events.amazonaws.com",
         functionArn: lambda.arn,
@@ -2679,8 +2730,8 @@ var cronFeature = defineFeature({
 });
 
 // src/feature/domain/index.ts
-import { minutes as minutes3 } from "@awsless/duration";
-import { aws as aws5, Node as Node5 } from "@awsless/formation";
+import { minutes as minutes4 } from "@awsless/duration";
+import { aws as aws6, Node as Node5 } from "@awsless/formation";
 var domainFeature = defineFeature({
   name: "domain",
   onApp(ctx) {
@@ -2689,7 +2740,7 @@ var domainFeature = defineFeature({
       return;
     }
     const group = new Node5(ctx.base, "domain", "mail");
-    const configurationSet = new aws5.ses.ConfigurationSet(group, "config", {
+    const configurationSet = new aws6.ses.ConfigurationSet(group, "config", {
       name: ctx.app.name,
       engagementMetrics: true,
       reputationMetrics: true
@@ -2697,29 +2748,29 @@ var domainFeature = defineFeature({
     ctx.shared.set(`mail-configuration-set`, configurationSet.name);
     for (const [id, props] of domains) {
       const group2 = new Node5(ctx.base, "domain", id);
-      const hostedZone = new aws5.route53.HostedZone(group2, "zone", {
+      const hostedZone = new aws6.route53.HostedZone(group2, "zone", {
         name: props.domain
       });
       ctx.shared.set(`hosted-zone-${id}-id`, hostedZone.id);
-      const certificate = new aws5.acm.Certificate(group2, "local", {
+      const certificate = new aws6.acm.Certificate(group2, "local", {
         domainName: props.domain,
         alternativeNames: [`*.${props.domain}`]
       });
       hostedZone.addRecord("local-cert-1", certificate.validationRecord(0));
       hostedZone.addRecord("local-cert-2", certificate.validationRecord(1));
-      const validation = new aws5.acm.CertificateValidation(group2, "local", {
+      const validation = new aws6.acm.CertificateValidation(group2, "local", {
         certificateArn: certificate.arn
       });
       ctx.shared.set(`local-certificate-${id}-arn`, validation.arn);
       if (ctx.appConfig.region !== "us-east-1") {
-        const globalCertificate = new aws5.acm.Certificate(group2, "global", {
+        const globalCertificate = new aws6.acm.Certificate(group2, "global", {
           domainName: props.domain,
           alternativeNames: [`*.${props.domain}`],
           region: "us-east-1"
         });
         hostedZone.addRecord("global-cert-1", globalCertificate.validationRecord(0));
         hostedZone.addRecord("global-cert-2", globalCertificate.validationRecord(1));
-        const globalValidation = new aws5.acm.CertificateValidation(group2, "global", {
+        const globalValidation = new aws6.acm.CertificateValidation(group2, "global", {
           certificateArn: globalCertificate.arn,
           region: "us-east-1"
         });
@@ -2727,7 +2778,7 @@ var domainFeature = defineFeature({
       } else {
         ctx.shared.set(`global-certificate-${id}-arn`, validation.arn);
       }
-      const emailIdentity = new aws5.ses.EmailIdentity(group2, "mail", {
+      const emailIdentity = new aws6.ses.EmailIdentity(group2, "mail", {
         emailIdentity: props.domain,
         mailFromDomain: `mail.${props.domain}`,
         configurationSetName: configurationSet.name,
@@ -2736,30 +2787,30 @@ var domainFeature = defineFeature({
       });
       let i = 0;
       for (const record of emailIdentity.dkimRecords) {
-        new aws5.route53.RecordSet(group2, `dkim-${++i}`, {
+        new aws6.route53.RecordSet(group2, `dkim-${++i}`, {
           hostedZoneId: hostedZone.id,
           ...record
         });
       }
-      new aws5.route53.RecordSet(group2, `MX`, {
+      new aws6.route53.RecordSet(group2, `MX`, {
         hostedZoneId: hostedZone.id,
         name: `mail.${props.domain}`,
         type: "MX",
-        ttl: minutes3(5),
+        ttl: minutes4(5),
         records: [`10 feedback-smtp.${ctx.appConfig.region}.amazonses.com`]
       });
-      new aws5.route53.RecordSet(group2, `SPF`, {
+      new aws6.route53.RecordSet(group2, `SPF`, {
         hostedZoneId: hostedZone.id,
         name: `mail.${props.domain}`,
         type: "TXT",
-        ttl: minutes3(5),
+        ttl: minutes4(5),
         records: ['"v=spf1 include:amazonses.com -all"']
       });
-      new aws5.route53.RecordSet(group2, `DMARC`, {
+      new aws6.route53.RecordSet(group2, `DMARC`, {
         hostedZoneId: hostedZone.id,
         name: `_dmarc.${props.domain}`,
         type: "TXT",
-        ttl: minutes3(5),
+        ttl: minutes4(5),
         records: ['"v=DMARC1; p=none;"']
       });
       const mailIdentityArn = emailIdentity.output(() => {
@@ -2769,7 +2820,7 @@ var domainFeature = defineFeature({
       ctx.shared.set(`mail-${props.domain}-arn`, mailIdentityArn);
       for (const record of props.dns ?? []) {
         const name = record.name ?? props.domain;
-        new aws5.route53.RecordSet(group2, `${name}-${record.type}`, {
+        new aws6.route53.RecordSet(group2, `${name}-${record.type}`, {
           hostedZoneId: hostedZone.id,
           name,
           ...record
@@ -2786,7 +2837,7 @@ var domainFeature = defineFeature({
 });
 
 // src/feature/function/index.ts
-import { aws as aws6, Node as Node6 } from "@awsless/formation";
+import { aws as aws7, Node as Node6 } from "@awsless/formation";
 import { camelCase as camelCase3 } from "change-case";
 import { relative } from "path";
 var typeGenCode2 = `
@@ -2840,13 +2891,13 @@ var functionFeature = defineFeature({
   },
   onApp(ctx) {
     const group = new Node6(ctx.base, "function", "asset");
-    const bucket = new aws6.s3.Bucket(group, "bucket", {
+    const bucket = new aws7.s3.Bucket(group, "bucket", {
       name: formatGlobalResourceName(ctx.appConfig.name, "function", "assets"),
       versioning: true,
       forceDelete: true
     });
     ctx.shared.set("function-bucket-name", bucket.name);
-    const repository = new aws6.ecr.Repository(group, "repository", {
+    const repository = new aws7.ecr.Repository(group, "repository", {
       name: formatGlobalResourceName(ctx.appConfig.name, "function", "repository", "-"),
       imageTagMutability: true
     });
@@ -2871,15 +2922,15 @@ var functionFeature = defineFeature({
 import { constantCase as constantCase4, paramCase as paramCase5 } from "change-case";
 import { generate } from "@awsless/graphql";
 import { mergeTypeDefs } from "@graphql-tools/merge";
-import { readFile as readFile5 } from "fs/promises";
+import { readFile as readFile6 } from "fs/promises";
 import { buildSchema, print } from "graphql";
-import { Asset as Asset2, aws as aws7, Node as Node7 } from "@awsless/formation";
+import { Asset as Asset2, aws as aws8, Node as Node7 } from "@awsless/formation";
 import { createHash as createHash5 } from "crypto";
 
 // src/build/fingerprint.ts
 import { createHash as createHash3 } from "crypto";
-import { readFile as readFile4, readdir as readdir2, stat as stat4 } from "fs/promises";
-import { basename as basename5, dirname as dirname7, extname as extname4, join as join7 } from "path";
+import { readFile as readFile5, readdir as readdir2, stat as stat4 } from "fs/promises";
+import { basename as basename5, dirname as dirname8, extname as extname4, join as join8 } from "path";
 import parseStaticImports2 from "parse-static-imports";
 var extensions2 = ["js", "mjs", "jsx", "ts", "mts", "tsx"];
 var generateFileHashes2 = async (file, hashes) => {
@@ -2907,7 +2958,7 @@ var fingerprintFromDirectory = async (dir) => {
   const files = await readdir2(dir, { recursive: true });
   for (const file of files) {
     if (extensions2.includes(extname4(file).substring(1)) && file.at(0) !== "_") {
-      await generateFileHashes2(join7(dir, file), hashes);
+      await generateFileHashes2(join8(dir, file), hashes);
     }
   }
   const merge2 = Buffer.concat(Array.from(hashes.values()).sort());
@@ -2921,17 +2972,17 @@ var readModuleFile2 = (file) => {
     return readFiles2([
       file,
       ...extensions2.map((exp) => `${file}.${exp}`),
-      ...extensions2.map((exp) => join7(file, `/index.${exp}`))
+      ...extensions2.map((exp) => join8(file, `/index.${exp}`))
     ]);
   }
-  return readFile4(file, "utf8");
+  return readFile5(file, "utf8");
 };
 var readFiles2 = async (files) => {
   for (const file of files) {
     try {
       const s = await stat4(file);
       if (s.isFile()) {
-        return readFile4(file, "utf8");
+        return readFile5(file, "utf8");
       }
     } catch (_) {
       continue;
@@ -2941,7 +2992,7 @@ var readFiles2 = async (files) => {
 };
 var findDependencies2 = async (file, code) => {
   const imports = await parseStaticImports2(code);
-  return imports.map((entry) => entry.moduleName).filter(Boolean).map((value) => value?.startsWith(".") ? join7(dirname7(file), value) : value);
+  return imports.map((entry) => entry.moduleName).filter(Boolean).map((value) => value?.startsWith(".") ? join8(dirname8(file), value) : value);
 };
 
 // src/util/id.ts
@@ -2974,7 +3025,7 @@ import { swc as swc2, minify as swcMinify2 } from "rollup-plugin-swc3";
 import json2 from "@rollup/plugin-json";
 import commonjs2 from "@rollup/plugin-commonjs";
 import nodeResolve2 from "@rollup/plugin-node-resolve";
-import { dirname as dirname8 } from "path";
+import { dirname as dirname9 } from "path";
 var buildTypeScriptResolver = async (input, { minify = true } = {}) => {
   const bundle = await rollup2({
     input,
@@ -2996,7 +3047,7 @@ var buildTypeScriptResolver = async (input, { minify = true } = {}) => {
         // minify,
         // module: true,
         jsc: {
-          baseUrl: dirname8(input),
+          baseUrl: dirname9(input),
           minify: { sourceMap: true }
         },
         sourceMaps: true
@@ -3081,7 +3132,7 @@ var graphqlFeature = defineFeature({
     for (const [id, files] of apis) {
       const sources = await Promise.all(
         files.map((file) => {
-          return readFile5(file, "utf8");
+          return readFile6(file, "utf8");
         })
       );
       if (sources.length) {
@@ -3119,7 +3170,7 @@ var graphqlFeature = defineFeature({
         authorizer = lambda;
       }
       const name = formatGlobalResourceName(ctx.app.name, "graphql", id);
-      const api = new aws7.appsync.GraphQLApi(group, "api", {
+      const api = new aws8.appsync.GraphQLApi(group, "api", {
         name,
         type: "graphql",
         auth: {
@@ -3137,7 +3188,7 @@ var graphqlFeature = defineFeature({
         }
       });
       if (typeof props.auth === "object") {
-        new aws7.lambda.Permission(group, "authorizer", {
+        new aws8.lambda.Permission(group, "authorizer", {
           functionArn: authorizer.arn,
           principal: "appsync.amazonaws.com",
           action: "lambda:InvokeFunction"
@@ -3150,7 +3201,7 @@ var graphqlFeature = defineFeature({
         for (const stack of ctx.stackConfigs) {
           const file = stack.graphql?.[id]?.schema;
           if (file) {
-            const source = await readFile5(file, "utf8");
+            const source = await readFile6(file, "utf8");
             const finger2 = createHash5("sha1").update(source).digest("hex");
             sources.push(source);
             fingers.push(finger2);
@@ -3166,7 +3217,7 @@ var graphqlFeature = defineFeature({
           };
         });
       });
-      new aws7.appsync.GraphQLSchema(group, "schema", {
+      new aws8.appsync.GraphQLSchema(group, "schema", {
         apiId: api.id,
         definition: Asset2.fromFile(getBuildPath("graphql-schema", name, "schema.gql"))
       });
@@ -3189,15 +3240,15 @@ var graphqlFeature = defineFeature({
       if (props.domain) {
         const domainName = formatFullDomainName(ctx.appConfig, props.domain, props.subDomain);
         const domainGroup = new Node7(group, "domain", domainName);
-        const domain = new aws7.appsync.DomainName(domainGroup, "domain", {
+        const domain = new aws8.appsync.DomainName(domainGroup, "domain", {
           domainName,
           certificateArn: ctx.shared.get(`global-certificate-${props.domain}-arn`)
         });
-        new aws7.appsync.DomainNameApiAssociation(domainGroup, "association", {
+        new aws8.appsync.DomainNameApiAssociation(domainGroup, "association", {
           apiId: api.id,
           domainName: domain.domainName
         });
-        new aws7.route53.RecordSet(domainGroup, "record", {
+        new aws8.route53.RecordSet(domainGroup, "record", {
           hostedZoneId: ctx.shared.get(`hosted-zone-${props.domain}-id`),
           type: "A",
           name: domainName,
@@ -3230,7 +3281,7 @@ var graphqlFeature = defineFeature({
             ...props2.consumer,
             description: `${id} ${typeName}.${fieldName}`
           });
-          const role = new aws7.iam.Role(resolverGroup, "source-role", {
+          const role = new aws8.iam.Role(resolverGroup, "source-role", {
             assumedBy: "appsync.amazonaws.com",
             policies: [
               {
@@ -3244,7 +3295,7 @@ var graphqlFeature = defineFeature({
               }
             ]
           });
-          const source = new aws7.appsync.DataSource(resolverGroup, "source", {
+          const source = new aws8.appsync.DataSource(resolverGroup, "source", {
             apiId,
             name,
             role: role.arn,
@@ -3257,13 +3308,13 @@ var graphqlFeature = defineFeature({
           } else if (defaultProps.resolver) {
             code = Asset2.fromFile(getBuildPath("graphql-resolver", id, "resolver.js"));
           }
-          const config2 = new aws7.appsync.FunctionConfiguration(resolverGroup, "config", {
+          const config2 = new aws8.appsync.FunctionConfiguration(resolverGroup, "config", {
             apiId,
             name,
             code,
             dataSourceName: source.name
           });
-          new aws7.appsync.Resolver(resolverGroup, "resolver", {
+          new aws8.appsync.Resolver(resolverGroup, "resolver", {
             apiId,
             typeName,
             fieldName,
@@ -3277,7 +3328,7 @@ var graphqlFeature = defineFeature({
 });
 
 // src/feature/http/index.ts
-import { aws as aws8, Node as Node8 } from "@awsless/formation";
+import { aws as aws9, Node as Node8 } from "@awsless/formation";
 import { camelCase as camelCase4, constantCase as constantCase5 } from "change-case";
 import { relative as relative2 } from "path";
 var parseRoute = (route) => {
@@ -3353,17 +3404,17 @@ var httpFeature = defineFeature({
       return;
     }
     const group = new Node8(ctx.base, "http", "main");
-    const securityGroup = new aws8.ec2.SecurityGroup(group, "http", {
+    const securityGroup = new aws9.ec2.SecurityGroup(group, "http", {
       vpcId: ctx.shared.get(`vpc-id`),
       name: formatGlobalResourceName(ctx.app.name, "http", "http"),
       description: `Global security group for HTTP api.`
     });
-    const port = aws8.ec2.Port.tcp(443);
-    securityGroup.addIngressRule({ port, peer: aws8.ec2.Peer.anyIpv4() });
-    securityGroup.addIngressRule({ port, peer: aws8.ec2.Peer.anyIpv6() });
+    const port = aws9.ec2.Port.tcp(443);
+    securityGroup.addIngressRule({ port, peer: aws9.ec2.Peer.anyIpv4() });
+    securityGroup.addIngressRule({ port, peer: aws9.ec2.Peer.anyIpv6() });
     for (const [id, props] of Object.entries(ctx.appConfig.defaults?.http ?? {})) {
       const group2 = new Node8(ctx.base, "http", id);
-      const loadBalancer = new aws8.elb.LoadBalancer(group2, "balancer", {
+      const loadBalancer = new aws9.elb.LoadBalancer(group2, "balancer", {
         name: formatGlobalResourceName(ctx.app.name, "http", id),
         type: "application",
         securityGroups: [securityGroup.id],
@@ -3373,13 +3424,13 @@ var httpFeature = defineFeature({
           ctx.shared.get(`vpc-public-subnet-id-2`)
         ]
       });
-      const listener = new aws8.elb.Listener(group2, "listener", {
+      const listener = new aws9.elb.Listener(group2, "listener", {
         loadBalancerArn: loadBalancer.arn,
         port: 443,
         protocol: "https",
         certificates: [ctx.shared.get(`local-certificate-${props.domain}-arn`)],
         defaultActions: [
-          aws8.elb.ListenerAction.fixedResponse({
+          aws9.elb.ListenerAction.fixedResponse({
             statusCode: 404,
             contentType: "application/json",
             messageBody: JSON.stringify({
@@ -3390,7 +3441,7 @@ var httpFeature = defineFeature({
       });
       ctx.shared.set(`http-${id}-listener-arn`, listener.arn);
       const domainName = formatFullDomainName(ctx.appConfig, props.domain, props.subDomain);
-      new aws8.route53.RecordSet(group2, domainName, {
+      new aws9.route53.RecordSet(group2, domainName, {
         hostedZoneId: ctx.shared.get(`hosted-zone-${props.domain}-id`),
         name: domainName,
         type: "A",
@@ -3419,25 +3470,25 @@ var httpFeature = defineFeature({
           description: routeKey
         });
         const name = formatLocalResourceName(ctx.app.name, ctx.stack.name, "http", routeId);
-        const permission = new aws8.lambda.Permission(routeGroup, id, {
+        const permission = new aws9.lambda.Permission(routeGroup, id, {
           action: "lambda:InvokeFunction",
           principal: "elasticloadbalancing.amazonaws.com",
           functionArn: lambda.arn
           // sourceArn: `arn:aws:elasticloadbalancing:${ctx.appConfig.region}:*:targetgroup/${name}/*`,
         });
-        const target = new aws8.elb.TargetGroup(routeGroup, id, {
+        const target = new aws9.elb.TargetGroup(routeGroup, id, {
           name,
           type: "lambda",
           targets: [lambda.arn]
         }).dependsOn(permission);
-        new aws8.elb.ListenerRule(routeGroup, id, {
+        new aws9.elb.ListenerRule(routeGroup, id, {
           listenerArn: ctx.shared.get(`http-${id}-listener-arn`),
           priority: generatePriority(ctx.stackConfig.name, routeKey),
           conditions: [
-            aws8.elb.ListenerCondition.httpRequestMethods([method]),
-            aws8.elb.ListenerCondition.pathPatterns([path])
+            aws9.elb.ListenerCondition.httpRequestMethods([method]),
+            aws9.elb.ListenerCondition.pathPatterns([path])
           ],
-          actions: [aws8.elb.ListenerAction.forward([target.arn])]
+          actions: [aws9.elb.ListenerAction.forward([target.arn])]
         }).dependsOn(target);
       }
     }
@@ -3446,22 +3497,22 @@ var httpFeature = defineFeature({
 
 // src/feature/instance/index.ts
 import { days as days3 } from "@awsless/duration";
-import { Asset as Asset3, aws as aws9, combine, Node as Node9, Output as Output2, unwrap } from "@awsless/formation";
+import { Asset as Asset3, aws as aws10, combine, Node as Node9, Output as Output2, unwrap } from "@awsless/formation";
 import { hashElement as hashElement2 } from "folder-hash";
-import { mkdir as mkdir2 } from "fs/promises";
-import { dirname as dirname9 } from "path";
+import { mkdir as mkdir3 } from "fs/promises";
+import { dirname as dirname10 } from "path";
 import { zip } from "zip-a-folder";
 var instanceFeature = defineFeature({
   name: "instance",
   onApp(ctx) {
     const group = new Node9(ctx.base, "instance", "asset");
-    const bucket = new aws9.s3.Bucket(group, "bucket", {
+    const bucket = new aws10.s3.Bucket(group, "bucket", {
       name: formatGlobalResourceName(ctx.appConfig.name, "instance", "assets"),
       forceDelete: true
     });
     ctx.shared.set("instance-bucket-name", bucket.name);
     if (ctx.appConfig.defaults.instance.connect) {
-      new aws9.ec2.InstanceConnectEndpoint(group, "connect", {
+      new aws10.ec2.InstanceConnectEndpoint(group, "connect", {
         name: ctx.appConfig.name,
         subnetId: ctx.shared.get(`vpc-public-subnet-id-1`),
         securityGroupIds: [ctx.shared.get("vpc-security-group-id")]
@@ -3503,6 +3554,7 @@ var instanceFeature = defineFeature({
               ...Object.entries(props.environment ?? {}).map(([key, value]) => {
                 return `echo export ${key}="${value}" >> /etc/profile`;
               }),
+              "source /etc/profile",
               props.command ? `sudo -u ${u} ${props.command}` : ""
             ].join("\n");
             resolve(Asset3.fromString(Buffer.from(code2, "utf8").toString("base64")));
@@ -3517,16 +3569,16 @@ var instanceFeature = defineFeature({
           }
         });
         await build3(version.hash, async () => {
-          await mkdir2(dirname9(bundleFile), { recursive: true });
+          await mkdir3(dirname10(bundleFile), { recursive: true });
           await zip(props.code, bundleFile);
         });
       });
-      const code = new aws9.s3.BucketObject(group, "code", {
+      const code = new aws10.s3.BucketObject(group, "code", {
         key: name,
         bucket: bucketName,
         body: Asset3.fromFile(bundleFile)
       });
-      const template = new aws9.ec2.LaunchTemplate(group, "template", {
+      const template = new aws10.ec2.LaunchTemplate(group, "template", {
         name,
         imageId: props.image,
         instanceType: props.type,
@@ -3534,11 +3586,11 @@ var instanceFeature = defineFeature({
         monitoring: true,
         userData
       });
-      const role = new aws9.iam.Role(group, "role", {
+      const role = new aws10.iam.Role(group, "role", {
         name,
         assumedBy: "ec2.amazonaws.com"
       });
-      const policy = new aws9.iam.RolePolicy(group, "policy", {
+      const policy = new aws10.iam.RolePolicy(group, "policy", {
         name,
         role: role.name
       });
@@ -3547,18 +3599,18 @@ var instanceFeature = defineFeature({
         resources: [bucketName.apply((bucket) => `arn:aws:s3:::${bucket}/${name}`)]
       });
       ctx.registerPolicy(policy);
-      const profile = new aws9.iam.InstanceProfile(group, "profile", {
+      const profile = new aws10.iam.InstanceProfile(group, "profile", {
         name,
         roles: [role.name]
       });
-      const instance = new aws9.ec2.Instance(group, "instance", {
+      const instance = new aws10.ec2.Instance(group, "instance", {
         name,
         iamInstanceProfile: profile.arn,
         launchTemplate: template,
         subnetId: ctx.shared.get(`vpc-public-subnet-id-1`)
       });
       instance.dependsOn(code);
-      const logGroup = new aws9.cloudWatch.LogGroup(group, "log", {
+      const logGroup = new aws10.cloudWatch.LogGroup(group, "log", {
         name: `/awsless/instance/${name}`,
         retention: days3(3)
       });
@@ -3577,7 +3629,7 @@ var instanceFeature = defineFeature({
 });
 
 // src/feature/on-failure/index.ts
-import { Node as Node10, aws as aws10 } from "@awsless/formation";
+import { Node as Node10, aws as aws11 } from "@awsless/formation";
 var onFailureFeature = defineFeature({
   name: "on-failure",
   onApp(ctx) {
@@ -3588,7 +3640,7 @@ var onFailureFeature = defineFeature({
     if (count > 1) {
       throw new TypeError("Only 1 onFailure configuration is allowed in your app.");
     }
-    const queue2 = new aws10.sqs.Queue(ctx.base, "on-failure", {
+    const queue2 = new aws11.sqs.Queue(ctx.base, "on-failure", {
       name: formatGlobalResourceName(ctx.appConfig.name, "on-failure", "failure")
     });
     ctx.shared.set("on-failure-queue-arn", queue2.arn);
@@ -3601,7 +3653,7 @@ var onFailureFeature = defineFeature({
     const queueArn = ctx.shared.get("on-failure-queue-arn");
     const group = new Node10(ctx.stack, "on-failure", "failure");
     const { lambda, policy } = createLambdaFunction(group, ctx, "on-failure", "failure", onFailure);
-    const source = new aws10.lambda.EventSourceMapping(group, "on-failure", {
+    const source = new aws11.lambda.EventSourceMapping(group, "on-failure", {
       functionArn: lambda.arn,
       sourceArn: queueArn,
       batchSize: 10
@@ -3621,7 +3673,7 @@ var onFailureFeature = defineFeature({
 });
 
 // src/feature/pubsub/index.ts
-import { aws as aws11, Node as Node11 } from "@awsless/formation";
+import { aws as aws12, Node as Node11 } from "@awsless/formation";
 var pubsubFeature = defineFeature({
   name: "pubsub",
   onApp(ctx) {
@@ -3637,13 +3689,13 @@ var pubsubFeature = defineFeature({
       const group = new Node11(ctx.stack, "pubsub", id);
       const { lambda } = createAsyncLambdaFunction(group, ctx, `pubsub`, id, props.consumer);
       const name = formatLocalResourceName(ctx.app.name, ctx.stack.name, "pubsub", id);
-      const topic = new aws11.iot.TopicRule(group, "rule", {
+      const topic = new aws12.iot.TopicRule(group, "rule", {
         name: name.replaceAll("-", "_"),
         sql: props.sql,
         sqlVersion: props.sqlVersion,
         actions: [{ lambda: { functionArn: lambda.arn } }]
       });
-      new aws11.lambda.Permission(group, "permission", {
+      new aws12.lambda.Permission(group, "permission", {
         action: "lambda:InvokeFunction",
         principal: "iot.amazonaws.com",
         functionArn: lambda.arn,
@@ -3654,7 +3706,7 @@ var pubsubFeature = defineFeature({
 });
 
 // src/feature/queue/index.ts
-import { aws as aws12, Node as Node12 } from "@awsless/formation";
+import { aws as aws13, Node as Node12 } from "@awsless/formation";
 import { camelCase as camelCase5, constantCase as constantCase6 } from "change-case";
 import deepmerge2 from "deepmerge";
 import { relative as relative3 } from "path";
@@ -3710,14 +3762,14 @@ var queueFeature = defineFeature({
     for (const [id, local2] of Object.entries(ctx.stackConfig.queues || {})) {
       const props = deepmerge2(ctx.appConfig.defaults.queue, local2);
       const group = new Node12(ctx.stack, "queue", id);
-      const queue2 = new aws12.sqs.Queue(group, "queue", {
+      const queue2 = new aws13.sqs.Queue(group, "queue", {
         name: formatLocalResourceName(ctx.appConfig.name, ctx.stack.name, "queue", id),
         deadLetterArn: getGlobalOnFailure(ctx),
         ...props
       });
       const { lambda, policy } = createLambdaFunction(group, ctx, `queue`, id, props.consumer);
       lambda.addEnvironment("LOG_VIEWABLE_ERROR", "1");
-      new aws12.lambda.EventSourceMapping(group, "event", {
+      new aws13.lambda.EventSourceMapping(group, "event", {
         functionArn: lambda.arn,
         sourceArn: queue2.arn,
         batchSize: props.batchSize,
@@ -3737,18 +3789,18 @@ var queueFeature = defineFeature({
 });
 
 // src/feature/rest/index.ts
-import { aws as aws13, Node as Node13 } from "@awsless/formation";
+import { aws as aws14, Node as Node13 } from "@awsless/formation";
 import { constantCase as constantCase7 } from "change-case";
 var restFeature = defineFeature({
   name: "rest",
   onApp(ctx) {
     for (const [id, props] of Object.entries(ctx.appConfig.defaults?.rest ?? {})) {
       const group = new Node13(ctx.base, "rest", id);
-      const api = new aws13.apiGatewayV2.Api(group, "api", {
+      const api = new aws14.apiGatewayV2.Api(group, "api", {
         name: formatGlobalResourceName(ctx.app.name, "rest", id),
         protocolType: "HTTP"
       });
-      const stage = new aws13.apiGatewayV2.Stage(group, "stage", {
+      const stage = new aws14.apiGatewayV2.Stage(group, "stage", {
         name: "v1",
         apiId: api.id
       });
@@ -3757,7 +3809,7 @@ var restFeature = defineFeature({
         const domainName = formatFullDomainName(ctx.appConfig, props.domain, props.subDomain);
         const hostedZoneId = ctx.shared.get(`hosted-zone-${props.domain}-id`);
         const certificateArn = ctx.shared.get(`certificate-${props.domain}-arn`);
-        const domain = new aws13.apiGatewayV2.DomainName(group, "domain", {
+        const domain = new aws14.apiGatewayV2.DomainName(group, "domain", {
           name: domainName,
           certificates: [
             {
@@ -3765,12 +3817,12 @@ var restFeature = defineFeature({
             }
           ]
         });
-        const mapping = new aws13.apiGatewayV2.ApiMapping(group, "mapping", {
+        const mapping = new aws14.apiGatewayV2.ApiMapping(group, "mapping", {
           apiId: api.id,
           domainName: domain.name,
           stage: stage.name
         });
-        const record = new aws13.route53.RecordSet(group, "record", {
+        const record = new aws14.route53.RecordSet(group, "record", {
           hostedZoneId,
           type: "A",
           name: domainName,
@@ -3797,12 +3849,12 @@ var restFeature = defineFeature({
           ...props,
           description: `${id} ${routeKey}`
         });
-        const permission = new aws13.lambda.Permission(group, "permission", {
+        const permission = new aws14.lambda.Permission(group, "permission", {
           action: "lambda:InvokeFunction",
           principal: "apigateway.amazonaws.com",
           functionArn: lambda.arn
         });
-        const integration = new aws13.apiGatewayV2.Integration(group, "integration", {
+        const integration = new aws14.apiGatewayV2.Integration(group, "integration", {
           apiId,
           description: `${id} ${routeKey}`,
           method: "POST",
@@ -3812,7 +3864,7 @@ var restFeature = defineFeature({
             return `arn:aws:apigateway:${ctx.appConfig.region}:lambda:path/2015-03-31/functions/${arn}/invocations`;
           })
         });
-        const route = new aws13.apiGatewayV2.Route(group, "route", {
+        const route = new aws14.apiGatewayV2.Route(group, "route", {
           apiId,
           routeKey,
           target: integration.id.apply((id2) => `integrations/${id2}`)
@@ -3824,7 +3876,7 @@ var restFeature = defineFeature({
 });
 
 // src/feature/search/index.ts
-import { aws as aws14, Node as Node14 } from "@awsless/formation";
+import { aws as aws15, Node as Node14 } from "@awsless/formation";
 import { constantCase as constantCase8 } from "change-case";
 var typeGenCode4 = `
 import { AnyStruct, Table } from '@awsless/open-search'
@@ -3853,7 +3905,7 @@ var searchFeature = defineFeature({
   onStack(ctx) {
     for (const [id, props] of Object.entries(ctx.stackConfig.searchs ?? {})) {
       const group = new Node14(ctx.stack, "search", id);
-      const openSearch = new aws14.openSearch.Domain(group, "domain", {
+      const openSearch = new aws15.openSearch.Domain(group, "domain", {
         // name: formatLocalResourceName(ctx.app.name, ctx.stack.name, this.name, id),
         version: props.version,
         storageSize: props.storage,
@@ -3892,9 +3944,9 @@ var searchFeature = defineFeature({
 
 // src/feature/site/index.ts
 import { days as days4, seconds as seconds3 } from "@awsless/duration";
-import { Asset as Asset4, aws as aws15, Node as Node15 } from "@awsless/formation";
+import { Asset as Asset4, aws as aws16, Node as Node15 } from "@awsless/formation";
 import { glob as glob2 } from "glob";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 
 // src/feature/site/util.ts
 import { lookup, contentType } from "mime-types";
@@ -3933,7 +3985,7 @@ var siteFeature = defineFeature({
         ctx.onBind((name2, value) => {
           lambda.addEnvironment(name2, value);
         });
-        new aws15.lambda.Permission(group, "permission", {
+        new aws16.lambda.Permission(group, "permission", {
           principal: "*",
           // principal: 'cloudfront.amazonaws.com',
           action: "lambda:InvokeFunctionUrl",
@@ -3942,7 +3994,7 @@ var siteFeature = defineFeature({
           // urlAuthType: 'aws-iam',
           // sourceArn: distribution.arn,
         });
-        const url = new aws15.lambda.Url(group, "url", {
+        const url = new aws16.lambda.Url(group, "url", {
           targetArn: lambda.arn,
           authType: "none"
           // authType: 'aws-iam',
@@ -3954,7 +4006,7 @@ var siteFeature = defineFeature({
         });
       }
       if (props.static) {
-        bucket = new aws15.s3.Bucket(group, "bucket", {
+        bucket = new aws16.s3.Bucket(group, "bucket", {
           name,
           forceDelete: true,
           website: {
@@ -3971,7 +4023,7 @@ var siteFeature = defineFeature({
           ]
         });
         bucket.deletionPolicy = "after-deployment";
-        const accessControl = new aws15.cloudFront.OriginAccessControl(group, `access`, {
+        const accessControl = new aws16.cloudFront.OriginAccessControl(group, `access`, {
           name,
           type: "s3",
           behavior: "always",
@@ -3983,10 +4035,10 @@ var siteFeature = defineFeature({
           nodir: true
         });
         for (const file of files) {
-          const object = new aws15.s3.BucketObject(group, file, {
+          const object = new aws16.s3.BucketObject(group, file, {
             bucket: bucket.name,
             key: file,
-            body: Asset4.fromFile(join8(props.static, file)),
+            body: Asset4.fromFile(join9(props.static, file)),
             cacheControl: getCacheControl(file),
             contentType: getContentType(file)
           });
@@ -4006,14 +4058,14 @@ var siteFeature = defineFeature({
           statusCodes: [403, 404]
         });
       }
-      const cache = new aws15.cloudFront.CachePolicy(group, "cache", {
+      const cache = new aws16.cloudFront.CachePolicy(group, "cache", {
         name,
         minTtl: seconds3(1),
         maxTtl: days4(365),
         defaultTtl: days4(1),
         ...props.cache
       });
-      const originRequest = new aws15.cloudFront.OriginRequestPolicy(group, "request", {
+      const originRequest = new aws16.cloudFront.OriginRequestPolicy(group, "request", {
         name,
         header: {
           behavior: "all-except",
@@ -4021,7 +4073,7 @@ var siteFeature = defineFeature({
         }
       });
       const domainName = formatFullDomainName(ctx.appConfig, props.domain, props.subDomain);
-      const responseHeaders = new aws15.cloudFront.ResponseHeadersPolicy(group, "response", {
+      const responseHeaders = new aws16.cloudFront.ResponseHeadersPolicy(group, "response", {
         name,
         cors: props.cors,
         remove: ["server"]
@@ -4029,7 +4081,7 @@ var siteFeature = defineFeature({
         // 	override: true,
         // },
       });
-      const distribution = new aws15.cloudFront.Distribution(group, "distribution", {
+      const distribution = new aws16.cloudFront.Distribution(group, "distribution", {
         name,
         certificateArn: ctx.shared.get(`global-certificate-${props.domain}-arn`),
         compress: true,
@@ -4057,13 +4109,13 @@ var siteFeature = defineFeature({
           };
         })
       });
-      new aws15.cloudFront.InvalidateCache(group, "invalidate", {
+      new aws16.cloudFront.InvalidateCache(group, "invalidate", {
         distributionId: distribution.id,
         paths: ["/*"],
         versions
       });
       if (props.static) {
-        new aws15.s3.BucketPolicy(group, `policy`, {
+        new aws16.s3.BucketPolicy(group, `policy`, {
           bucketName: bucket.name,
           statements: [
             {
@@ -4089,7 +4141,7 @@ var siteFeature = defineFeature({
           ]
         });
       }
-      new aws15.route53.RecordSet(group, `record`, {
+      new aws16.route53.RecordSet(group, `record`, {
         hostedZoneId: ctx.shared.get(`hosted-zone-${props.domain}-id`),
         type: "A",
         name: domainName,
@@ -4104,7 +4156,7 @@ var siteFeature = defineFeature({
 });
 
 // src/feature/store/index.ts
-import { aws as aws16, Node as Node16 } from "@awsless/formation";
+import { aws as aws17, Node as Node16 } from "@awsless/formation";
 import { paramCase as paramCase6 } from "change-case";
 var typeGenCode5 = `
 import { Body, PutObjectProps, BodyStream, createPresignedPost } from '@awsless/s3'
@@ -4158,7 +4210,7 @@ var storeFeature = defineFeature({
         const eventGroup = new Node16(group, "event", event);
         const eventId = paramCase6(`${id}-${shortId(event)}`);
         const { lambda } = createAsyncLambdaFunction(eventGroup, ctx, `store`, eventId, funcProps);
-        new aws16.lambda.Permission(eventGroup, "permission", {
+        new aws17.lambda.Permission(eventGroup, "permission", {
           action: "lambda:InvokeFunction",
           principal: "s3.amazonaws.com",
           functionArn: lambda.arn,
@@ -4169,7 +4221,7 @@ var storeFeature = defineFeature({
           function: lambda.arn
         });
       }
-      const bucket = new aws16.s3.Bucket(group, "store", {
+      const bucket = new aws17.s3.Bucket(group, "store", {
         name: bucketName,
         versioning: props.versioning,
         lambdaConfigs,
@@ -4192,7 +4244,7 @@ var storeFeature = defineFeature({
 });
 
 // src/feature/stream/index.ts
-import { aws as aws17, Node as Node17 } from "@awsless/formation";
+import { aws as aws18, Node as Node17 } from "@awsless/formation";
 import { constantCase as constantCase9 } from "change-case";
 var streamFeature = defineFeature({
   name: "stream",
@@ -4200,11 +4252,11 @@ var streamFeature = defineFeature({
     for (const [id, props] of Object.entries(ctx.stackConfig.streams ?? {})) {
       const group = new Node17(ctx.stack, "stream", id);
       const name = formatLocalResourceName(ctx.appConfig.name, ctx.stack.name, "stream", id);
-      const channel = new aws17.ivs.Channel(group, "channel", {
+      const channel = new aws18.ivs.Channel(group, "channel", {
         name,
         ...props
       });
-      const streamKey = new aws17.ivs.StreamKey(group, "key", {
+      const streamKey = new aws18.ivs.StreamKey(group, "key", {
         channel: channel.arn
       });
       const prefix = `STREAM_${constantCase9(ctx.stack.name)}_${constantCase9(id)}`;
@@ -4216,7 +4268,7 @@ var streamFeature = defineFeature({
 });
 
 // src/feature/table/index.ts
-import { aws as aws18, Node as Node18 } from "@awsless/formation";
+import { aws as aws19, Node as Node18 } from "@awsless/formation";
 var tableFeature = defineFeature({
   name: "table",
   async onTypeGen(ctx) {
@@ -4236,7 +4288,7 @@ var tableFeature = defineFeature({
   onStack(ctx) {
     for (const [id, props] of Object.entries(ctx.stackConfig.tables ?? {})) {
       const group = new Node18(ctx.stack, "table", id);
-      const table2 = new aws18.dynamodb.Table(group, "table", {
+      const table2 = new aws19.dynamodb.Table(group, "table", {
         ...props,
         name: formatLocalResourceName(ctx.appConfig.name, ctx.stackConfig.name, "table", id),
         stream: props.stream?.type
@@ -4245,7 +4297,7 @@ var tableFeature = defineFeature({
         const { lambda, policy } = createLambdaFunction(group, ctx, "table", id, props.stream.consumer);
         lambda.addEnvironment("LOG_VIEWABLE_ERROR", "1");
         const onFailure = getGlobalOnFailure(ctx);
-        const source = new aws18.lambda.EventSourceMapping(group, id, {
+        const source = new aws19.lambda.EventSourceMapping(group, id, {
           functionArn: lambda.arn,
           sourceArn: table2.streamArn,
           batchSize: 100,
@@ -4339,7 +4391,7 @@ var testFeature = defineFeature({
 });
 
 // src/feature/topic/index.ts
-import { aws as aws19, Node as Node20 } from "@awsless/formation";
+import { aws as aws20, Node as Node20 } from "@awsless/formation";
 var typeGenCode7 = `
 import type { PublishOptions } from '@awsless/sns'
 import type { Mock } from 'vitest'
@@ -4377,7 +4429,7 @@ var topicFeature = defineFeature({
     for (const stack of ctx.stackConfigs) {
       for (const id of stack.topics ?? []) {
         const group = new Node20(ctx.base, "topic", id);
-        const topic = new aws19.sns.Topic(group, "topic", {
+        const topic = new aws20.sns.Topic(group, "topic", {
           name: formatGlobalResourceName(ctx.appConfig.name, "topic", id)
         });
         ctx.shared.set(`topic-${id}-arn`, topic.arn);
@@ -4397,19 +4449,19 @@ var topicFeature = defineFeature({
       const group = new Node20(ctx.stack, "topic", id);
       const topicArn = ctx.shared.get(`topic-${id}-arn`);
       if (typeof props === "string" && isEmail(props)) {
-        new aws19.sns.Subscription(group, id, {
+        new aws20.sns.Subscription(group, id, {
           topicArn,
           protocol: "email",
           endpoint: props
         });
       } else if (typeof props === "object") {
         const { lambda } = createAsyncLambdaFunction(group, ctx, `topic`, id, props);
-        new aws19.sns.Subscription(group, id, {
+        new aws20.sns.Subscription(group, id, {
           topicArn,
           protocol: "lambda",
           endpoint: lambda.arn
         });
-        new aws19.lambda.Permission(group, id, {
+        new aws20.lambda.Permission(group, id, {
           action: "lambda:InvokeFunction",
           principal: "sns.amazonaws.com",
           functionArn: lambda.arn,
@@ -4421,45 +4473,37 @@ var topicFeature = defineFeature({
 });
 
 // src/feature/vpc/index.ts
-import { ipv6CidrBlockFromString } from "@arcanyx/cidr-slicer";
-import { aws as aws20, combine as combine2, Node as Node21 } from "@awsless/formation";
+import { aws as aws21, combine as combine2, Node as Node21 } from "@awsless/formation";
 var vpcFeature = defineFeature({
   name: "vpc",
   onApp(ctx) {
     const group = new Node21(ctx.base, "vpc", "main");
-    const vpc = new aws20.ec2.Vpc(group, "vpc", {
+    const vpc = new aws21.ec2.Vpc(group, "vpc", {
       name: ctx.app.name,
-      cidrBlock: aws20.ec2.Peer.ipv4("10.0.0.0/16")
+      cidrBlock: aws21.ec2.Peer.ipv4("10.0.0.0/16")
       // cidrBlock: aws.ec2.Peer.ipv6('fd00:10:20::/48'),
       // cidrBlock: aws.ec2.Peer.ipv6('2a05:d018:c69:6600::/56'),
       // enableDnsSupport: true,
       // enableDnsHostnames: true,
     });
-    const ipv6CidrBlock = new aws20.ec2.VPCCidrBlock(group, "ipv6", {
-      vpcId: vpc.id,
-      amazonProvidedIpv6CidrBlock: true
-    });
-    const slices = ipv6CidrBlock.ipv6CidrBlock.apply((ip) => {
-      return ipv6CidrBlockFromString(ip).slice(64);
-    });
-    const privateRouteTable = new aws20.ec2.RouteTable(group, "private", {
+    const privateRouteTable = new aws21.ec2.RouteTable(group, "private", {
       vpcId: vpc.id,
       name: "private"
     });
-    const publicRouteTable = new aws20.ec2.RouteTable(group, "public", {
+    const publicRouteTable = new aws21.ec2.RouteTable(group, "public", {
       vpcId: vpc.id,
       name: "public"
     });
-    const gateway = new aws20.ec2.InternetGateway(group, "gateway");
-    const attachment = new aws20.ec2.VPCGatewayAttachment(group, "attachment", {
+    const gateway = new aws21.ec2.InternetGateway(group, "gateway");
+    const attachment = new aws21.ec2.VPCGatewayAttachment(group, "attachment", {
       vpcId: vpc.id,
       internetGatewayId: gateway.id
     });
-    new aws20.ec2.Route(group, "route", {
+    new aws21.ec2.Route(group, "route", {
       gatewayId: gateway.id,
       routeTableId: publicRouteTable.id,
-      // destination: aws.ec2.Peer.anyIpv4(),
-      destination: aws20.ec2.Peer.anyIpv6()
+      destination: aws21.ec2.Peer.anyIpv4()
+      // destination: aws.ec2.Peer.anyIpv6(),
     });
     ctx.shared.set(
       "vpc-id",
@@ -4474,19 +4518,20 @@ var vpcFeature = defineFeature({
       for (const i in zones) {
         const index = Number(i) + 1;
         const id = `${table2.identifier}-${index}`;
-        const subnet = new aws20.ec2.Subnet(group, id, {
+        const subnet = new aws21.ec2.Subnet(group, id, {
           name: `${ctx.app.name}--${table2.identifier}-${index}`,
           vpcId: vpc.id,
-          cidrBlock: aws20.ec2.Peer.ipv4(`10.0.${block++}.0/24`),
+          cidrBlock: aws21.ec2.Peer.ipv4(`10.0.${block++}.0/24`),
           // ipv6CidrBlock: aws.ec2.Peer.ipv6(`fd00:10:20:${++block}::/64`),
           // ipv6CidrBlock: aws.ec2.Peer.ipv6(`2a05:d018:c69:660${++block}::/64`),
           // ipv6CidrBlock: ipv6CidrBlock.ipv6CidrBlock.apply(ip => ),
-          ipv6CidrBlock: slices.apply((list4) => aws20.ec2.Peer.ipv6(list4.get(block++).toString())),
-          assignIpv6AddressOnCreation: true,
+          // ipv6CidrBlock: slices.apply(list => aws.ec2.Peer.ipv6(list.get(block++).toString())),
+          // assignIpv6AddressOnCreation: true,
           // ipv6Native: true,
+          mapPublicIpOnLaunch: table2.identifier === "public",
           availabilityZone: ctx.appConfig.region + zones[i]
         });
-        new aws20.ec2.SubnetRouteTableAssociation(group, id, {
+        new aws21.ec2.SubnetRouteTableAssociation(group, id, {
           routeTableId: table2.id,
           subnetId: subnet.id
         });
@@ -4557,7 +4602,7 @@ var getFiltersWithDeps = (stacks, filters) => {
   return list4;
 };
 var createApp = (props, filters = []) => {
-  const app = new App(props.appConfig.name);
+  const app = new App2(props.appConfig.name);
   const base = new Stack(app, "base");
   const shared = new SharedData();
   const siteFunctions = [];
@@ -4922,55 +4967,6 @@ var config = (program2) => {
 
 // src/cli/command/delete.ts
 import { confirm as confirm3 } from "@clack/prompts";
-
-// src/util/workspace.ts
-import { minutes as minutes4 } from "@awsless/duration";
-import { aws as aws22, local, WorkSpace } from "@awsless/formation";
-import { mkdir as mkdir3, readFile as readFile6, rm, writeFile as writeFile2 } from "fs/promises";
-import { dirname as dirname10, join as join9 } from "path";
-var createWorkSpace = (props) => {
-  const lockProvider = new aws22.dynamodb.LockProvider({
-    ...props,
-    tableName: "awsless-locks"
-  });
-  const stateProvider = new aws22.s3.StateProvider({
-    ...props,
-    bucket: `awsless-state-${props.accountId}`
-  });
-  const cloudProviders = aws22.createCloudProviders({
-    ...props,
-    timeout: minutes4(60)
-  });
-  const workspace = new WorkSpace({
-    lockProvider,
-    stateProvider,
-    cloudProviders,
-    concurrency: 15
-  });
-  return {
-    workspace,
-    lockProvider,
-    stateProvider
-  };
-};
-var pullRemoteState = async (app, stateProvider) => {
-  const file = join9(directories.state, `${app.urn}.json`);
-  const state2 = await stateProvider.get(app.urn);
-  await mkdir3(dirname10(file), { recursive: true });
-  if (typeof state2 === "undefined") {
-    await rm(file);
-  } else {
-    await writeFile2(file, JSON.stringify(state2, void 0, 2));
-  }
-};
-var pushRemoteState = async (app, stateProvider) => {
-  const file = join9(directories.state, `${app.urn}.json`);
-  const data = await readFile6(file, "utf8");
-  const state2 = JSON.parse(data);
-  await stateProvider.update(app.urn, state2);
-};
-
-// src/cli/command/delete.ts
 var del2 = (program2) => {
   program2.command("delete").argument("[stacks...]", "Optionally filter stacks to delete").description("Delete your app from AWS").action(async (filters) => {
     await layout("delete", async ({ appConfig, stackConfigs }) => {