@awsless/awsless 0.0.485 → 0.0.487

package/dist/bin.js

@@ -47,22 +47,157 @@ import { mkdir, readFile, rm, writeFile } from "fs/promises";
 import { homedir } from "os";
 import { dirname, join as join2 } from "path";
 
-// src/formation/cloudfront.ts
-import { CloudFrontClient, CreateInvalidationCommand } from "@aws-sdk/client-cloudfront";
+// src/formation/cloudfront-kvs.ts
+import {
+  CloudFrontKeyValueStoreClient,
+  DescribeKeyValueStoreCommand,
+  ListKeysCommand,
+  UpdateKeysCommand
+} from "@aws-sdk/client-cloudfront-keyvaluestore";
 import { createCustomProvider, createCustomResourceClass } from "@awsless/formation";
+import chunk from "chunk";
 import { z } from "zod";
-var Invalidation = createCustomResourceClass(
+import "@aws-sdk/signature-v4-crt";
+var ImportKeys = createCustomResourceClass("cloudfront-kvs", "import-keys");
+var createCloudFrontKvsProvider = ({ profile, region }) => {
+  const client = new CloudFrontKeyValueStoreClient({ profile, region });
+  const validateInput = (state2) => {
+    return z.object({
+      kvsArn: z.string(),
+      keys: z.array(z.object({ key: z.string(), value: z.string() })),
+      eTag: z.string().optional()
+    }).parse(state2);
+  };
+  const formatOutput = (output) => {
+    return {
+      eTag: output.ETag,
+      itemCount: output.ItemCount,
+      totalSizeInBytes: output.TotalSizeInBytes
+    };
+  };
+  const bulkUpdate = async (props) => {
+    const batches = chunk(props.mutations, 50);
+    let prev = await client.send(
+      new DescribeKeyValueStoreCommand({
+        KvsARN: props.arn
+      })
+    );
+    let result;
+    let ifMatch = prev.ETag;
+    for (const mutations of batches) {
+      result = await client.send(
+        new UpdateKeysCommand({
+          KvsARN: props.arn,
+          IfMatch: ifMatch,
+          Puts: mutations.filter((item) => item.type === "put").map((item) => ({
+            Key: item.key,
+            Value: item.value
+          })),
+          Deletes: mutations.filter((item) => item.type === "delete").map((item) => ({
+            Key: item.key
+          }))
+        })
+      );
+      ifMatch = result.ETag;
+    }
+    return result;
+  };
+  return createCustomProvider("cloudfront-kvs", {
+    "import-keys": {
+      async getResource(props) {
+        const state2 = z.object({ kvsArn: z.string() }).parse(props.state);
+        const result = await client.send(
+          new DescribeKeyValueStoreCommand({
+            KvsARN: state2.kvsArn
+          })
+        );
+        const keys = [];
+        let nextToken;
+        while (true) {
+          const result2 = await client.send(
+            new ListKeysCommand({
+              KvsARN: state2.kvsArn,
+              NextToken: nextToken,
+              MaxResults: 50
+            })
+          );
+          for (const item of result2.Items ?? []) {
+            keys.push({
+              key: item.Key,
+              value: item.Value
+            });
+          }
+          if (result2.NextToken) {
+            nextToken = result2.NextToken;
+          } else {
+            break;
+          }
+        }
+        return {
+          keys,
+          ...state2,
+          ...formatOutput(result)
+        };
+      },
+      async createResource(props) {
+        const state2 = validateInput(props.state);
+        const result = await bulkUpdate({
+          arn: state2.kvsArn,
+          mutations: state2.keys.map((item) => ({ ...item, type: "put" }))
+        });
+        return {
+          ...state2,
+          ...formatOutput(result)
+        };
+      },
+      async updateResource(props) {
+        const priorState = validateInput(props.priorState);
+        const proposedState = validateInput(props.proposedState);
+        const puts = proposedState.keys.filter((a) => {
+          return !priorState.keys.find((b) => a.key === b.key);
+        });
+        const deletes = priorState.keys.filter((a) => {
+          return !proposedState.keys.find((b) => a.key === b.key);
+        });
+        const result = await bulkUpdate({
+          arn: proposedState.kvsArn,
+          mutations: [
+            ...puts.map((i) => ({ ...i, type: "put" })),
+            ...deletes.map((i) => ({ ...i, type: "delete" }))
+          ]
+        });
+        return {
+          ...proposedState,
+          ...formatOutput(result)
+        };
+      },
+      async deleteResource(props) {
+        const state2 = validateInput(props.state);
+        await bulkUpdate({
+          arn: state2.kvsArn,
+          mutations: state2.keys.map((i) => ({ ...i, type: "delete" }))
+        });
+      }
+    }
+  });
+};
+
+// src/formation/cloudfront.ts
+import { CloudFrontClient, CreateInvalidationCommand } from "@aws-sdk/client-cloudfront";
+import { createCustomProvider as createCustomProvider2, createCustomResourceClass as createCustomResourceClass2 } from "@awsless/formation";
+import { z as z2 } from "zod";
+var Invalidation = createCustomResourceClass2(
   "cloudfront",
   "invalidation"
 );
 var createCloudFrontProvider = ({ profile, region }) => {
   const cloudFront = new CloudFrontClient({ profile, region });
-  return createCustomProvider("cloudfront", {
+  return createCustomProvider2("cloudfront", {
     invalidation: {
       async updateResource(props) {
-        const state2 = z.object({
-          distributionId: z.string(),
-          paths: z.string().array().min(1)
+        const state2 = z2.object({
+          distributionId: z2.string(),
+          paths: z2.string().array().min(1)
         }).parse(props.proposedState);
         const result = await cloudFront.send(
           new CreateInvalidationCommand({
@@ -87,24 +222,24 @@ var createCloudFrontProvider = ({ profile, region }) => {
 
 // src/formation/lambda.ts
 import { LambdaClient, UpdateFunctionCodeCommand } from "@aws-sdk/client-lambda";
-import { createCustomProvider as createCustomProvider2, createCustomResourceClass as createCustomResourceClass2 } from "@awsless/formation";
-import { z as z2 } from "zod";
-var UpdateFunctionCode = createCustomResourceClass2(
+import { createCustomProvider as createCustomProvider3, createCustomResourceClass as createCustomResourceClass3 } from "@awsless/formation";
+import { z as z3 } from "zod";
+var UpdateFunctionCode = createCustomResourceClass3(
   "lambda",
   "update-function-code"
 );
 var createLambdaProvider = ({ credentials, region }) => {
   const lambda = new LambdaClient({ credentials, region });
-  return createCustomProvider2("lambda", {
+  return createCustomProvider3("lambda", {
     "update-function-code": {
       async updateResource(props) {
-        const state2 = z2.object({
-          functionName: z2.string(),
-          architectures: z2.string().array(),
-          s3Bucket: z2.string().optional().transform((v) => v ? v : void 0),
-          s3Key: z2.string().optional().transform((v) => v ? v : void 0),
-          s3ObjectVersion: z2.string().optional().transform((v) => v ? v : void 0),
-          imageUri: z2.string().optional().transform((v) => v ? v : void 0)
+        const state2 = z3.object({
+          functionName: z3.string(),
+          architectures: z3.string().array(),
+          s3Bucket: z3.string().optional().transform((v) => v ? v : void 0),
+          s3Key: z3.string().optional().transform((v) => v ? v : void 0),
+          s3ObjectVersion: z3.string().optional().transform((v) => v ? v : void 0),
+          imageUri: z3.string().optional().transform((v) => v ? v : void 0)
         }).parse(props.proposedState);
         await lambda.send(
           new UpdateFunctionCodeCommand({
@@ -202,11 +337,12 @@ var createWorkSpace = async (props) => {
   if (process.env.VERBOSE) {
     enableDebug();
   }
-  const aws = await terraform.install("hashicorp", "aws", "5.94.1");
+  const aws = await terraform.install("hashicorp", "aws", "5.98.0");
   const workspace = new WorkSpace({
     providers: [
       createLambdaProvider(props),
       createCloudFrontProvider(props),
+      createCloudFrontKvsProvider(props),
       aws(
         {
           profile: props.profile,
@@ -491,21 +627,21 @@ var debug = (...parts) => {
 };
 
 // src/config/app.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 
 // src/feature/alert/schema.ts
 import { kebabCase } from "change-case";
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 
 // src/config/schema/email.ts
-import { z as z3 } from "zod";
-var EmailSchema = z3.string().email();
+import { z as z4 } from "zod";
+var EmailSchema = z4.string().email();
 
 // src/feature/alert/schema.ts
-var AlertNameSchema = z4.string().min(3).max(256).regex(/^[a-z0-9\-]+$/i, "Invalid alert name").transform((value) => kebabCase(value)).describe("Define alert name.");
-var AlertsDefaultSchema = z4.record(
+var AlertNameSchema = z5.string().min(3).max(256).regex(/^[a-z0-9\-]+$/i, "Invalid alert name").transform((value) => kebabCase(value)).describe("Define alert name.");
+var AlertsDefaultSchema = z5.record(
   AlertNameSchema,
-  z4.union([
+  z5.union([
     //
     EmailSchema.transform((v) => [v]),
     EmailSchema.array()
@@ -513,17 +649,17 @@ var AlertsDefaultSchema = z4.record(
 ).optional().describe("Define the alerts in your app. Alerts are a way to send messages to one or more email addresses.");
 
 // src/feature/auth/schema.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 
 // src/config/schema/resource-id.ts
 import { kebabCase as kebabCase2 } from "change-case";
-import { z as z5 } from "zod";
-var ResourceIdSchema = z5.string().min(3).max(24).regex(/^[a-z0-9\-]+$/i, "Invalid resource ID").transform((value) => kebabCase2(value));
+import { z as z6 } from "zod";
+var ResourceIdSchema = z6.string().min(3).max(24).regex(/^[a-z0-9\-]+$/i, "Invalid resource ID").transform((value) => kebabCase2(value));
 
 // src/config/schema/duration.ts
 import { parse } from "@awsless/duration";
-import { z as z6 } from "zod";
-var DurationSchema = z6.string().regex(/^[0-9]+ (seconds?|minutes?|hours?|days?|weeks?)$/, "Invalid duration").transform((v) => parse(v));
+import { z as z7 } from "zod";
+var DurationSchema = z7.string().regex(/^[0-9]+ (seconds?|minutes?|hours?|days?|weeks?)$/, "Invalid duration").transform((v) => parse(v));
 var durationMin = (min) => {
   return (duration) => {
     return duration.value >= min.value;
@@ -536,10 +672,10 @@ var durationMax = (max) => {
 };
 
 // src/feature/auth/schema.ts
-var AuthDefaultSchema = z7.record(
+var AuthDefaultSchema = z8.record(
   ResourceIdSchema,
-  z7.object({
-    allowUserRegistration: z7.boolean().default(true).describe("Specifies whether users can create an user account or if only the administrator can."),
+  z8.object({
+    allowUserRegistration: z8.boolean().default(true).describe("Specifies whether users can create an user account or if only the administrator can."),
     // messaging: z
     // 	.object({
     // 		fromEmail: EmailSchema.describe("Specifies the sender's email address."),
@@ -551,23 +687,23 @@ var AuthDefaultSchema = z7.record(
     // 	.optional()
     // 	.describe('The email configuration for sending messages.'),
     // secret: z.boolean().default(false).describe('Specifies whether you want to generate a client secret.'),
-    username: z7.object({
+    username: z8.object({
       // emailAlias: z.boolean().default(true).describe('Allow the user email to be used as username.'),
-      caseSensitive: z7.boolean().default(false).describe(
+      caseSensitive: z8.boolean().default(false).describe(
         "Specifies whether username case sensitivity will be enabled. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name."
       )
     }).default({}).describe("The username policy."),
-    password: z7.object({
-      minLength: z7.number().int().min(6).max(99).default(12).describe("Required users to have at least the minimum password length."),
-      uppercase: z7.boolean().default(true).describe("Required users to use at least one uppercase letter in their password."),
-      lowercase: z7.boolean().default(true).describe("Required users to use at least one lowercase letter in their password."),
-      numbers: z7.boolean().default(true).describe("Required users to use at least one number in their password."),
-      symbols: z7.boolean().default(true).describe("Required users to use at least one symbol in their password."),
+    password: z8.object({
+      minLength: z8.number().int().min(6).max(99).default(12).describe("Required users to have at least the minimum password length."),
+      uppercase: z8.boolean().default(true).describe("Required users to use at least one uppercase letter in their password."),
+      lowercase: z8.boolean().default(true).describe("Required users to use at least one lowercase letter in their password."),
+      numbers: z8.boolean().default(true).describe("Required users to use at least one number in their password."),
+      symbols: z8.boolean().default(true).describe("Required users to use at least one symbol in their password."),
       temporaryPasswordValidity: DurationSchema.default("7 days").describe(
         "The duration a temporary password is valid. If the user doesn't sign in during this time, an administrator must reset their password."
       )
     }).default({}).describe("The password policy."),
-    validity: z7.object({
+    validity: z8.object({
       idToken: DurationSchema.default("1 hour").describe(
         "The ID token time limit. After this limit expires, your user can't use their ID token."
       ),
@@ -583,18 +719,18 @@ var AuthDefaultSchema = z7.record(
 ).default({}).describe("Define the authenticatable users in your app.");
 
 // src/feature/domain/schema.ts
-import { z as z8 } from "zod";
-var DomainNameSchema = z8.string().regex(/[a-z\-\_\.]/g, "Invalid domain name").describe(
+import { z as z9 } from "zod";
+var DomainNameSchema = z9.string().regex(/[a-z\-\_\.]/g, "Invalid domain name").describe(
   "Enter a fully qualified domain name, for example, www.example.com. You can optionally include a trailing dot. If you omit the trailing dot, Amazon Route 53 assumes that the domain name that you specify is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical."
 );
-var DNSTypeSchema = z8.enum(["A", "AAAA", "CAA", "CNAME", "DS", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TXT"]).describe("The DNS record type.");
+var DNSTypeSchema = z9.enum(["A", "AAAA", "CAA", "CNAME", "DS", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TXT"]).describe("The DNS record type.");
 var TTLSchema = DurationSchema.describe("The resource record cache time to live (TTL).");
-var RecordsSchema = z8.string().array().describe("One or more values that correspond with the value that you specified for the Type property.");
-var DomainsDefaultSchema = z8.record(
+var RecordsSchema = z9.string().array().describe("One or more values that correspond with the value that you specified for the Type property.");
+var DomainsDefaultSchema = z9.record(
   ResourceIdSchema,
-  z8.object({
+  z9.object({
     domain: DomainNameSchema.describe("Define the domain name"),
-    dns: z8.object({
+    dns: z9.object({
       name: DomainNameSchema.optional(),
       type: DNSTypeSchema,
       ttl: TTLSchema,
@@ -606,15 +742,15 @@ var DomainsDefaultSchema = z8.record(
 // src/feature/function/schema.ts
 import { days, minutes, seconds, toDays } from "@awsless/duration";
 import { gibibytes, mebibytes } from "@awsless/size";
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 
 // src/config/schema/local-directory.ts
 import { stat } from "fs/promises";
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 
 // src/config/schema/relative-path.ts
 import { join as join3 } from "path";
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 var basePath;
 var setLocalBasePath = (path) => {
   basePath = path;
@@ -625,10 +761,10 @@ var resolvePath = (path) => {
   }
   return path;
 };
-var RelativePathSchema = z9.string().transform((path) => resolvePath(path));
+var RelativePathSchema = z10.string().transform((path) => resolvePath(path));
 
 // src/config/schema/local-directory.ts
-var LocalDirectorySchema = z10.union([
+var LocalDirectorySchema = z11.union([
   RelativePathSchema.refine(async (path) => {
     try {
       const s = await stat(path);
@@ -637,7 +773,7 @@ var LocalDirectorySchema = z10.union([
       return false;
     }
   }, `Directory doesn't exist`),
-  z10.object({
+  z11.object({
     nocheck: RelativePathSchema.describe(
       "Specifies a local directory without checking if the directory exists."
     )
@@ -646,8 +782,8 @@ var LocalDirectorySchema = z10.union([
 
 // src/config/schema/local-file.ts
 import { stat as stat2 } from "fs/promises";
-import { z as z11 } from "zod";
-var LocalFileSchema = z11.union([
+import { z as z12 } from "zod";
+var LocalFileSchema = z12.union([
   RelativePathSchema.refine(async (path) => {
     try {
       const s = await stat2(path);
@@ -656,15 +792,15 @@ var LocalFileSchema = z11.union([
       return false;
     }
   }, `File doesn't exist`),
-  z11.object({
+  z12.object({
     nocheck: RelativePathSchema.describe("Specifies a local file without checking if the file exists.")
   }).transform((v) => v.nocheck)
 ]);
 
 // src/config/schema/size.ts
 import { parse as parse2 } from "@awsless/size";
-import { z as z12 } from "zod";
-var SizeSchema = z12.string().regex(/^[0-9]+ (B|KB|MB|GB|TB|PB)$/, "Invalid size").transform((v) => parse2(v));
+import { z as z13 } from "zod";
+var SizeSchema = z13.string().regex(/^[0-9]+ (B|KB|MB|GB|TB|PB)$/, "Invalid size").transform((v) => parse2(v));
 var sizeMin = (min) => {
   return (size) => {
     return size.value >= min.value;
@@ -687,32 +823,32 @@ var EphemeralStorageSizeSchema = SizeSchema.refine(
   sizeMin(mebibytes(512)),
   "Minimum ephemeral storage size is 512 MB"
 ).refine(sizeMax(gibibytes(10)), "Minimum ephemeral storage size is 10 GB").describe("The size of the function's /tmp directory. You can specify a size value from 512 MB to 10 GB.");
-var ReservedConcurrentExecutionsSchema = z13.number().int().min(0).describe("The number of simultaneous executions to reserve for the function. You can specify a number from 0.");
-var EnvironmentSchema = z13.record(z13.string(), z13.string()).optional().describe("Environment variable key-value pairs.");
-var ArchitectureSchema = z13.enum(["x86_64", "arm64"]).describe("The instruction set architecture that the function supports.");
-var RetryAttemptsSchema = z13.number().int().min(0).max(2).describe(
+var ReservedConcurrentExecutionsSchema = z14.number().int().min(0).describe("The number of simultaneous executions to reserve for the function. You can specify a number from 0.");
+var EnvironmentSchema = z14.record(z14.string(), z14.string()).optional().describe("Environment variable key-value pairs.");
+var ArchitectureSchema = z14.enum(["x86_64", "arm64"]).describe("The instruction set architecture that the function supports.");
+var RetryAttemptsSchema = z14.number().int().min(0).max(2).describe(
   "The maximum number of times to retry when the function returns an error. You can specify a number from 0 to 2."
 );
-var NodeRuntimeSchema = z13.enum(["nodejs18.x", "nodejs20.x", "nodejs22.x"]);
-var ContainerRuntimeSchema = z13.literal("container");
-var RuntimeSchema = NodeRuntimeSchema.or(ContainerRuntimeSchema).or(z13.string()).describe("The identifier of the function's runtime.");
-var ActionSchema = z13.string();
-var ActionsSchema = z13.union([ActionSchema.transform((v) => [v]), ActionSchema.array()]);
-var ArnSchema = z13.string().startsWith("arn:");
-var WildcardSchema = z13.literal("*");
-var ResourceSchema = z13.union([ArnSchema, WildcardSchema]);
-var ResourcesSchema = z13.union([ResourceSchema.transform((v) => [v]), ResourceSchema.array()]);
-var PermissionSchema = z13.object({
-  effect: z13.enum(["allow", "deny"]).default("allow"),
+var NodeRuntimeSchema = z14.enum(["nodejs18.x", "nodejs20.x", "nodejs22.x"]);
+var ContainerRuntimeSchema = z14.literal("container");
+var RuntimeSchema = NodeRuntimeSchema.or(ContainerRuntimeSchema).or(z14.string()).describe("The identifier of the function's runtime.");
+var ActionSchema = z14.string();
+var ActionsSchema = z14.union([ActionSchema.transform((v) => [v]), ActionSchema.array()]);
+var ArnSchema = z14.string().startsWith("arn:");
+var WildcardSchema = z14.literal("*");
+var ResourceSchema = z14.union([ArnSchema, WildcardSchema]);
+var ResourcesSchema = z14.union([ResourceSchema.transform((v) => [v]), ResourceSchema.array()]);
+var PermissionSchema = z14.object({
+  effect: z14.enum(["allow", "deny"]).default("allow"),
   actions: ActionsSchema,
   resources: ResourcesSchema
 });
-var PermissionsSchema = z13.union([PermissionSchema.transform((v) => [v]), PermissionSchema.array()]).describe("Add IAM permissions to your function.");
-var WarmSchema = z13.number().int().min(0).max(10).describe("Specify how many functions you want to warm up each 5 minutes. You can specify a number from 0 to 10.");
-var VPCSchema = z13.boolean().describe("Put the function inside your global VPC.");
-var MinifySchema = z13.boolean().describe("Minify the function code.");
-var HandlerSchema = z13.string().describe("The name of the exported method within your code that Lambda calls to run your function.");
-var DescriptionSchema = z13.string().describe("A description of the function.");
+var PermissionsSchema = z14.union([PermissionSchema.transform((v) => [v]), PermissionSchema.array()]).describe("Add IAM permissions to your function.");
+var WarmSchema = z14.number().int().min(0).max(10).describe("Specify how many functions you want to warm up each 5 minutes. You can specify a number from 0 to 10.");
+var VPCSchema = z14.boolean().describe("Put the function inside your global VPC.");
+var MinifySchema = z14.boolean().describe("Minify the function code.");
+var HandlerSchema = z14.string().describe("The name of the exported method within your code that Lambda calls to run your function.");
+var DescriptionSchema = z14.string().describe("A description of the function.");
 var validLogRetentionDays = [
   ...[1, 3, 5, 7, 14, 30, 60, 90, 120, 150],
   ...[180, 365, 400, 545, 731, 1096, 1827, 2192],
@@ -727,43 +863,43 @@ var LogRetentionSchema = DurationSchema.refine(
   },
   `Invalid log retention. Valid days are: ${validLogRetentionDays.map((days6) => `${days6}`).join(", ")}`
 ).describe("The log retention duration.");
-var LogSchema = z13.union([
-  z13.boolean().transform((enabled) => ({ retention: enabled ? days(7) : days(0) })),
+var LogSchema = z14.union([
+  z14.boolean().transform((enabled) => ({ retention: enabled ? days(7) : days(0) })),
   LogRetentionSchema.transform((retention) => ({ retention })),
-  z13.object({
+  z14.object({
     // subscription: LogSubscriptionSchema.optional(),
     retention: LogRetentionSchema.optional(),
-    format: z13.enum(["text", "json"]).describe(
+    format: z14.enum(["text", "json"]).describe(
       `The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.`
     ).optional(),
-    system: z13.enum(["debug", "info", "warn"]).describe(
+    system: z14.enum(["debug", "info", "warn"]).describe(
       "Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where DEBUG is the highest level and WARN is the lowest."
     ).optional(),
-    level: z13.enum(["trace", "debug", "info", "warn", "error", "fatal"]).describe(
+    level: z14.enum(["trace", "debug", "info", "warn", "error", "fatal"]).describe(
       "Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where TRACE is the highest level and FATAL is the lowest."
     ).optional()
   })
 ]).describe("Enable logging to a CloudWatch log group. Providing a duration value will set the log retention time.");
-var LayersSchema = z13.string().array().describe(
+var LayersSchema = z14.string().array().describe(
   // `A list of function layers to add to the function's execution environment..`
   `A list of function layers to add to the function's execution environment. Specify each layer by its ARN, including the version.`
 );
-var FileCodeSchema = z13.object({
+var FileCodeSchema = z14.object({
   file: LocalFileSchema.describe("The file path of the function code."),
   minify: MinifySchema.optional().default(true),
-  external: z13.string().array().optional().describe(`A list of external packages that won't be included in the bundle.`)
+  external: z14.string().array().optional().describe(`A list of external packages that won't be included in the bundle.`)
 });
-var BundleCodeSchema = z13.object({
+var BundleCodeSchema = z14.object({
   bundle: LocalDirectorySchema.describe("The directory that needs to be bundled.")
 });
-var CodeSchema = z13.union([
+var CodeSchema = z14.union([
   LocalFileSchema.transform((file) => ({
     file
   })).pipe(FileCodeSchema),
   FileCodeSchema,
   BundleCodeSchema
 ]).describe("Specify the code of your function.");
-var FnSchema = z13.object({
+var FnSchema = z14.object({
   code: CodeSchema,
   // node
   handler: HandlerSchema.optional(),
@@ -786,14 +922,14 @@ var FnSchema = z13.object({
   environment: EnvironmentSchema.optional(),
   permissions: PermissionsSchema.optional()
 });
-var FunctionSchema = z13.union([
+var FunctionSchema = z14.union([
   LocalFileSchema.transform((code) => ({
     code
   })).pipe(FnSchema),
   FnSchema
 ]);
-var FunctionsSchema = z13.record(ResourceIdSchema, FunctionSchema).optional().describe("Define the functions in your stack.");
-var FunctionDefaultSchema = z13.object({
+var FunctionsSchema = z14.record(ResourceIdSchema, FunctionSchema).optional().describe("Define the functions in your stack.");
+var FunctionDefaultSchema = z14.object({
   runtime: RuntimeSchema.default("nodejs20.x"),
   // node
   handler: HandlerSchema.default("index.default"),
@@ -822,25 +958,25 @@ var FunctionDefaultSchema = z13.object({
 }).default({});
 
 // src/feature/layer/schema.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 
 // src/config/schema/lambda.ts
-import { z as z14 } from "zod";
-var ArchitectureSchema2 = z14.enum(["x86_64", "arm64"]).describe("The instruction set architecture that the function supports.");
-var NodeRuntimeSchema2 = z14.enum(["nodejs18.x", "nodejs20.x", "nodejs22.x"]).describe("The identifier of the function's runtime.");
+import { z as z15 } from "zod";
+var ArchitectureSchema2 = z15.enum(["x86_64", "arm64"]).describe("The instruction set architecture that the function supports.");
+var NodeRuntimeSchema2 = z15.enum(["nodejs18.x", "nodejs20.x", "nodejs22.x"]).describe("The identifier of the function's runtime.");
 
 // src/feature/layer/schema.ts
-var Schema = z15.object({
+var Schema = z16.object({
   file: LocalFileSchema,
   runtimes: NodeRuntimeSchema2.array().optional(),
   architecture: ArchitectureSchema2.optional(),
-  packages: z15.string().array().optional().describe(
+  packages: z16.string().array().optional().describe(
     "Define the package names that are available bundled in the layer. Those packages are not bundled while bundling the lambda."
   )
 });
-var LayerSchema = z15.record(
-  z15.string(),
-  z15.union([
+var LayerSchema = z16.record(
+  z16.string(),
+  z16.union([
     LocalFileSchema.transform((file) => ({
       file,
       description: void 0
@@ -855,28 +991,28 @@ var OnFailureDefaultSchema = FunctionSchema.optional().describe(
 );
 
 // src/feature/on-log/schema.ts
-import { z as z16 } from "zod";
-var FilterSchema = z16.enum(["trace", "debug", "info", "warn", "error", "fatal"]).array().describe("The log level that will gets delivered to the consumer.");
-var OnLogDefaultSchema = z16.union([
+import { z as z17 } from "zod";
+var FilterSchema = z17.enum(["trace", "debug", "info", "warn", "error", "fatal"]).array().describe("The log level that will gets delivered to the consumer.");
+var OnLogDefaultSchema = z17.union([
   FunctionSchema.transform((consumer) => ({
     consumer,
     filter: ["error", "fatal"]
   })),
-  z16.object({
+  z17.object({
     consumer: FunctionSchema,
     filter: FilterSchema
   })
 ]).optional().describe("Define a subscription on all Lambda functions logs.");
 
 // src/feature/pubsub/schema.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var DomainSchema = ResourceIdSchema.describe("The domain id to link your Pubsub API with.");
-var PubSubDefaultSchema = z17.record(
+var PubSubDefaultSchema = z18.record(
   ResourceIdSchema,
-  z17.object({
+  z18.object({
     auth: FunctionSchema,
     domain: DomainSchema.optional(),
-    subDomain: z17.string().optional()
+    subDomain: z18.string().optional()
     // auth: z.union([
     // 	ResourceIdSchema,
     // 	z.object({
@@ -892,11 +1028,11 @@ var PubSubDefaultSchema = z17.record(
     // 	.optional(),
   })
 ).optional().describe("Define the pubsub subscriber in your stack.");
-var PubSubSchema = z17.record(
+var PubSubSchema = z18.record(
   ResourceIdSchema,
-  z17.object({
-    sql: z17.string().describe("The SQL statement used to query the IOT topic."),
-    sqlVersion: z17.enum(["2015-10-08", "2016-03-23", "beta"]).default("2016-03-23").describe("The version of the SQL rules engine to use when evaluating the rule."),
+  z18.object({
+    sql: z18.string().describe("The SQL statement used to query the IOT topic."),
+    sqlVersion: z18.enum(["2015-10-08", "2016-03-23", "beta"]).default("2016-03-23").describe("The version of the SQL rules engine to use when evaluating the rule."),
     consumer: FunctionSchema.describe("The consuming lambda function properties.")
   })
 ).optional().describe("Define the pubsub subscriber in your stack.");
@@ -904,7 +1040,7 @@ var PubSubSchema = z17.record(
 // src/feature/queue/schema.ts
 import { days as days2, hours, minutes as minutes2, seconds as seconds2 } from "@awsless/duration";
 import { kibibytes } from "@awsless/size";
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var RetentionPeriodSchema = DurationSchema.refine(
   durationMin(minutes2(1)),
   "Minimum retention period is 1 minute"
@@ -932,10 +1068,10 @@ var ReceiveMessageWaitTimeSchema = DurationSchema.refine(
 var MaxMessageSizeSchema = SizeSchema.refine(sizeMin(kibibytes(1)), "Minimum max message size is 1 KB").refine(sizeMax(kibibytes(256)), "Maximum max message size is 256 KB").describe(
   "The limit of how many bytes that a message can contain before Amazon SQS rejects it. You can specify an size from 1 KB to 256 KB."
 );
-var BatchSizeSchema = z18.number().int().min(1, "Minimum batch size is 1").max(1e4, "Maximum batch size is 10000").describe(
+var BatchSizeSchema = z19.number().int().min(1, "Minimum batch size is 1").max(1e4, "Maximum batch size is 10000").describe(
   "The maximum number of records in each batch that Lambda pulls from your queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB). You can specify an integer from 1 to 10000."
 );
-var MaxConcurrencySchema = z18.number().int().min(2, "Minimum max concurrency is 2").max(1e3, "Maximum max concurrency is 1000").describe(
+var MaxConcurrencySchema = z19.number().int().min(2, "Minimum max concurrency is 2").max(1e3, "Maximum max concurrency is 1000").describe(
   "Limits the number of concurrent instances that the queue worker can invoke. You can specify an integer from 2 to 1000."
 );
 var MaxBatchingWindow = DurationSchema.refine(
@@ -944,7 +1080,7 @@ var MaxBatchingWindow = DurationSchema.refine(
 ).describe(
   "The maximum amount of time, that Lambda spends gathering records before invoking the function. You can specify an duration from 0 seconds to 5 minutes."
 );
-var QueueDefaultSchema = z18.object({
+var QueueDefaultSchema = z19.object({
   retentionPeriod: RetentionPeriodSchema.default("7 days"),
   visibilityTimeout: VisibilityTimeoutSchema.default("30 seconds"),
   deliveryDelay: DeliveryDelaySchema.default("0 seconds"),
@@ -954,7 +1090,7 @@ var QueueDefaultSchema = z18.object({
   maxConcurrency: MaxConcurrencySchema.optional(),
   maxBatchingWindow: MaxBatchingWindow.optional()
 }).default({});
-var QueueSchema = z18.object({
+var QueueSchema = z19.object({
   consumer: FunctionSchema.describe("The consuming lambda function properties."),
   retentionPeriod: RetentionPeriodSchema.optional(),
   visibilityTimeout: VisibilityTimeoutSchema.optional(),
@@ -965,9 +1101,9 @@ var QueueSchema = z18.object({
   maxConcurrency: MaxConcurrencySchema.optional(),
   maxBatchingWindow: MaxBatchingWindow.optional()
 });
-var QueuesSchema = z18.record(
+var QueuesSchema = z19.record(
   ResourceIdSchema,
-  z18.union([
+  z19.union([
     LocalFileSchema.transform((consumer) => ({
       consumer
     })).pipe(QueueSchema),
@@ -976,26 +1112,26 @@ var QueuesSchema = z18.record(
 ).optional().describe("Define the queues in your stack.");
 
 // src/feature/rest/schema.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 
 // src/config/schema/route.ts
-import { z as z19 } from "zod";
-var RouteSchema = z19.union([
-  z19.string().regex(/^(POST|GET|PUT|DELETE|HEAD|OPTIONS|ANY)(\s\/[a-z0-9\+\_\-\/\{\}]*)$/gi, "Invalid route"),
-  z19.literal("$default")
+import { z as z20 } from "zod";
+var RouteSchema = z20.union([
+  z20.string().regex(/^(POST|GET|PUT|DELETE|HEAD|OPTIONS|ANY)(\s\/[a-z0-9\+\_\-\/\{\}]*)$/gi, "Invalid route"),
+  z20.literal("$default")
 ]);
 
 // src/feature/rest/schema.ts
-var RestDefaultSchema = z20.record(
+var RestDefaultSchema = z21.record(
   ResourceIdSchema,
-  z20.object({
+  z21.object({
     domain: ResourceIdSchema.describe("The domain id to link your API with.").optional(),
-    subDomain: z20.string().optional()
+    subDomain: z21.string().optional()
   })
 ).optional().describe("Define your global REST API's.");
-var RestSchema = z20.record(
+var RestSchema = z21.record(
   ResourceIdSchema,
-  z20.record(
+  z21.record(
     RouteSchema.describe(
       [
         "The REST API route that is comprised by the http method and http path.",
@@ -1008,7 +1144,7 @@ var RestSchema = z20.record(
 ).optional().describe("Define routes in your stack for your global REST API.");
 
 // src/feature/rpc/schema.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 import { minutes as minutes3, seconds as seconds3 } from "@awsless/duration";
 var TimeoutSchema2 = DurationSchema.refine(durationMin(seconds3(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(minutes3(5)), "Maximum timeout duration is 5 minutes").describe(
   [
@@ -1017,21 +1153,21 @@ var TimeoutSchema2 = DurationSchema.refine(durationMin(seconds3(10)), "Minimum t
     "The timeouts of all inner RPC functions will be capped at 80% of this timeout."
   ].join(" ")
 );
-var RpcDefaultSchema = z21.record(
+var RpcDefaultSchema = z22.record(
   ResourceIdSchema,
-  z21.object({
+  z22.object({
     domain: ResourceIdSchema.describe("The domain id to link your RPC API with.").optional(),
-    subDomain: z21.string().optional(),
+    subDomain: z22.string().optional(),
     auth: FunctionSchema.optional(),
     log: LogSchema.optional(),
     timeout: TimeoutSchema2.default("1 minutes"),
-    geoRestrictions: z21.array(z21.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked.")
+    geoRestrictions: z22.array(z22.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked.")
   })
 ).describe(`Define the global RPC API's.`).optional();
-var RpcSchema = z21.record(ResourceIdSchema, z21.record(z21.string(), FunctionSchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
+var RpcSchema = z22.record(ResourceIdSchema, z22.record(z22.string(), FunctionSchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
 
 // src/config/schema/region.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 var US = ["us-east-2", "us-east-1", "us-west-1", "us-west-2"];
 var AF = ["af-south-1"];
 var AP = [
@@ -1060,16 +1196,16 @@ var EU = [
 var ME = ["me-south-1", "me-central-1"];
 var SA = ["sa-east-1"];
 var regions = [...US, ...AF, ...AP, ...CA, ...EU, ...ME, ...SA];
-var RegionSchema = z22.enum(regions);
+var RegionSchema = z23.enum(regions);
 
 // src/config/app.ts
-var AppSchema = z23.object({
-  $schema: z23.string().optional(),
+var AppSchema = z24.object({
+  $schema: z24.string().optional(),
   name: ResourceIdSchema.describe("App name."),
   region: RegionSchema.describe("The AWS region to deploy to."),
-  profile: z23.string().describe("The AWS profile to deploy to."),
-  protect: z23.boolean().default(false).describe("Protect your app & stacks from being deleted."),
-  removal: z23.enum(["remove", "retain"]).default("remove").describe(
+  profile: z24.string().describe("The AWS profile to deploy to."),
+  protect: z24.boolean().default(false).describe("Protect your app & stacks from being deleted."),
+  removal: z24.enum(["remove", "retain"]).default("remove").describe(
     [
       "Configure how your resources are handled when they have to be removed.",
       "",
@@ -1083,7 +1219,7 @@ var AppSchema = z23.object({
   // 	.default('prod')
   // 	.describe('The deployment stage.'),
   // onFailure: OnFailureSchema,
-  defaults: z23.object({
+  defaults: z24.object({
     onFailure: OnFailureDefaultSchema,
     onLog: OnLogDefaultSchema,
     auth: AuthDefaultSchema,
@@ -1105,11 +1241,11 @@ var AppSchema = z23.object({
 });
 
 // src/config/stack.ts
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 
 // src/feature/cache/schema.ts
 import { gibibytes as gibibytes2 } from "@awsless/size";
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var StorageSchema = SizeSchema.refine(sizeMin(gibibytes2(1)), "Minimum storage size is 1 GB").refine(
   sizeMax(gibibytes2(5e3)),
   "Maximum storage size is 5000 GB"
@@ -1120,31 +1256,31 @@ var MinimumStorageSchema = StorageSchema.describe(
 var MaximumStorageSchema = StorageSchema.describe(
   "The upper limit for data storage the cache is set to use. You can specify a size value from 1 GB to 5000 GB."
 );
-var EcpuSchema = z24.number().int().min(1e3).max(15e6);
+var EcpuSchema = z25.number().int().min(1e3).max(15e6);
 var MinimumEcpuSchema = EcpuSchema.describe(
   "The minimum number of ECPUs the cache can consume per second. You can specify a integer from 1,000 to 15,000,000."
 );
 var MaximumEcpuSchema = EcpuSchema.describe(
   "The maximum number of ECPUs the cache can consume per second. You can specify a integer from 1,000 to 15,000,000."
 );
-var CachesSchema = z24.record(
+var CachesSchema = z25.record(
   ResourceIdSchema,
-  z24.object({
+  z25.object({
     minStorage: MinimumStorageSchema.optional(),
     maxStorage: MaximumStorageSchema.optional(),
     minECPU: MinimumEcpuSchema.optional(),
     maxECPU: MaximumEcpuSchema.optional(),
-    snapshotRetentionLimit: z24.number().int().positive().default(1)
+    snapshotRetentionLimit: z25.number().int().positive().default(1)
   })
 ).optional().describe("Define the caches in your stack. For access to the cache put your functions inside the global VPC.");
 
 // src/feature/command/schema.ts
-import { z as z25 } from "zod";
-var CommandSchema = z25.union([
-  z25.object({
+import { z as z26 } from "zod";
+var CommandSchema = z26.union([
+  z26.object({
     file: LocalFileSchema,
-    handler: z25.string().default("default").describe("The name of the handler that needs to run"),
-    description: z25.string().optional().describe("A description of the command")
+    handler: z26.string().default("default").describe("The name of the handler that needs to run"),
+    description: z26.string().optional().describe("A description of the command")
     // options: z.record(ResourceIdSchema, OptionSchema).optional(),
     // arguments: z.record(ResourceIdSchema, ArgumentSchema).optional(),
   }),
@@ -1154,22 +1290,22 @@ var CommandSchema = z25.union([
     description: void 0
   }))
 ]);
-var CommandsSchema = z25.record(ResourceIdSchema, CommandSchema).optional().describe("Define the custom commands for your stack.");
+var CommandsSchema = z26.record(ResourceIdSchema, CommandSchema).optional().describe("Define the custom commands for your stack.");
 
 // src/feature/config/schema.ts
-import { z as z26 } from "zod";
-var ConfigNameSchema = z26.string().regex(/[a-z0-9\-]/g, "Invalid config name");
-var ConfigsSchema = z26.array(ConfigNameSchema).optional().describe("Define the config values for your stack.");
+import { z as z27 } from "zod";
+var ConfigNameSchema = z27.string().regex(/[a-z0-9\-]/g, "Invalid config name");
+var ConfigsSchema = z27.array(ConfigNameSchema).optional().describe("Define the config values for your stack.");
 
 // src/feature/cron/schema/index.ts
-import { z as z28 } from "zod";
+import { z as z29 } from "zod";
 
 // src/feature/cron/schema/schedule.ts
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 import { awsCronExpressionValidator } from "aws-cron-expression-validator";
-var RateExpressionSchema = z27.custom(
+var RateExpressionSchema = z28.custom(
   (value) => {
-    return z27.string().regex(/^[0-9]+ (seconds?|minutes?|hours?|days?)$/).refine((rate) => {
+    return z28.string().regex(/^[0-9]+ (seconds?|minutes?|hours?|days?)$/).refine((rate) => {
       const [str] = rate.split(" ");
       const number = parseInt(str);
       return number > 0;
@@ -1185,9 +1321,9 @@ var RateExpressionSchema = z27.custom(
   }
   return `rate(${rate})`;
 });
-var CronExpressionSchema = z27.custom(
+var CronExpressionSchema = z28.custom(
   (value) => {
-    return z27.string().safeParse(value).success;
+    return z28.string().safeParse(value).success;
   },
   { message: "Invalid cron expression" }
 ).superRefine((value, ctx) => {
@@ -1196,12 +1332,12 @@ var CronExpressionSchema = z27.custom(
   } catch (error) {
     if (error instanceof Error) {
       ctx.addIssue({
-        code: z27.ZodIssueCode.custom,
+        code: z28.ZodIssueCode.custom,
         message: `Invalid cron expression: ${error.message}`
       });
     } else {
       ctx.addIssue({
-        code: z27.ZodIssueCode.custom,
+        code: z28.ZodIssueCode.custom,
         message: "Invalid cron expression"
       });
     }
@@ -1212,23 +1348,23 @@ var CronExpressionSchema = z27.custom(
 var ScheduleExpressionSchema = RateExpressionSchema.or(CronExpressionSchema);
 
 // src/feature/cron/schema/index.ts
-var CronsSchema = z28.record(
+var CronsSchema = z29.record(
   ResourceIdSchema,
-  z28.object({
-    enabled: z28.boolean().default(true).describe("If the cron is enabled."),
+  z29.object({
+    enabled: z29.boolean().default(true).describe("If the cron is enabled."),
     consumer: FunctionSchema.describe("The consuming lambda function properties."),
     schedule: ScheduleExpressionSchema.describe(
       'The scheduling expression.\n\nexample: "0 20 * * ? *"\nexample: "5 minutes"'
     ),
-    payload: z28.unknown().optional().describe("The JSON payload that will be passed to the consumer.")
+    payload: z29.unknown().optional().describe("The JSON payload that will be passed to the consumer.")
   })
 ).optional().describe(`Define the cron jobs in your stack.`);
 
 // src/feature/search/schema.ts
 import { gibibytes as gibibytes3 } from "@awsless/size";
-import { z as z29 } from "zod";
-var VersionSchema = z29.enum(["2.13", "2.11", "2.9", "2.7", "2.5", "2.3", "1.3"]);
-var TypeSchema = z29.enum([
+import { z as z30 } from "zod";
+var VersionSchema = z30.enum(["2.13", "2.11", "2.9", "2.7", "2.5", "2.3", "1.3"]);
+var TypeSchema = z30.enum([
   "t3.small",
   "t3.medium",
   "m3.medium",
@@ -1303,11 +1439,11 @@ var TypeSchema = z29.enum([
   "r6gd.16xlarge"
 ]);
 var StorageSizeSchema = SizeSchema.refine(sizeMin(gibibytes3(10)), "Minimum storage size is 10 GB").refine(sizeMax(gibibytes3(100)), "Maximum storage size is 100 GB").describe("The size of the function's /tmp directory. You can specify a size value from 512 MB to 10 GiB.");
-var SearchsSchema = z29.record(
+var SearchsSchema = z30.record(
   ResourceIdSchema,
-  z29.object({
+  z30.object({
     type: TypeSchema.default("t3.small"),
-    count: z29.number().int().min(1).default(1),
+    count: z30.number().int().min(1).default(1),
     version: VersionSchema.default("2.13"),
     storage: StorageSizeSchema.default("10 GB")
     // vpc: z.boolean().default(false),
@@ -1315,12 +1451,12 @@ var SearchsSchema = z29.record(
 ).optional().describe("Define the search instances in your stack. Backed by OpenSearch.");
 
 // src/feature/site/schema.ts
-import { z as z31 } from "zod";
+import { z as z32 } from "zod";
 
 // src/config/schema/local-entry.ts
 import { stat as stat3 } from "fs/promises";
-import { z as z30 } from "zod";
-var LocalEntrySchema = z30.union([
+import { z as z31 } from "zod";
+var LocalEntrySchema = z31.union([
   RelativePathSchema.refine(async (path) => {
     try {
       const s = await stat3(path);
@@ -1329,7 +1465,7 @@ var LocalEntrySchema = z30.union([
       return false;
     }
   }, `File or directory doesn't exist`),
-  z30.object({
+  z31.object({
     nocheck: RelativePathSchema.describe(
       "Specifies a local file or directory without checking if the file or directory exists."
     )
@@ -1337,14 +1473,14 @@ var LocalEntrySchema = z30.union([
 ]);
 
 // src/feature/site/schema.ts
-var ErrorResponsePathSchema = z31.string().describe(
+var ErrorResponsePathSchema = z32.string().describe(
   [
     "The path to the custom error page that you want to return to the viewer when your origin returns the HTTP status code specified.",
     "- We recommend that you store custom error pages in an Amazon S3 bucket.",
     "If you store custom error pages on an HTTP server and the server starts to return 5xx errors, CloudFront can't get the files that you want to return to viewers because the origin server is unavailable."
   ].join("\n")
 );
-var StatusCodeSchema = z31.number().int().positive().optional().describe(
+var StatusCodeSchema = z32.number().int().positive().optional().describe(
   [
     "The HTTP status code that you want CloudFront to return to the viewer along with the custom error page.",
     "There are a variety of reasons that you might want CloudFront to return a status code different from the status code that your origin returned to CloudFront, for example:",
@@ -1357,19 +1493,19 @@ var StatusCodeSchema = z31.number().int().positive().optional().describe(
 var MinTTLSchema = DurationSchema.describe(
   "The minimum amount of time, that you want to cache the error response. When this time period has elapsed, CloudFront queries your origin to see whether the problem that caused the error has been resolved and the requested object is now available."
 );
-var ErrorResponseSchema = z31.union([
+var ErrorResponseSchema = z32.union([
   ErrorResponsePathSchema,
-  z31.object({
+  z32.object({
     path: ErrorResponsePathSchema,
     statusCode: StatusCodeSchema.optional(),
     minTTL: MinTTLSchema.optional()
   })
 ]).optional();
-var SitesSchema = z31.record(
+var SitesSchema = z32.record(
   ResourceIdSchema,
-  z31.object({
+  z32.object({
     domain: ResourceIdSchema.describe("The domain id to link your site with.").optional(),
-    subDomain: z31.string().optional(),
+    subDomain: z32.string().optional(),
     // bind: z
     // 	.object({
     // 		auth: z.array(ResourceIdSchema),
@@ -1378,20 +1514,23 @@ var SitesSchema = z31.record(
     // 		// rest: z.array(ResourceIdSchema),
     // 	})
     // 	.optional(),
-    build: z31.object({
-      command: z31.string().describe(
+    build: z32.object({
+      command: z32.string().describe(
         `Specifies the files and directories to generate the cache key for your custom build command.`
       ),
-      cacheKey: z31.union([LocalEntrySchema.transform((v) => [v]), LocalEntrySchema.array()]).describe(
+      cacheKey: z32.union([LocalEntrySchema.transform((v) => [v]), LocalEntrySchema.array()]).describe(
         `Specifies the files and directories to generate the cache key for your custom build command.`
       )
     }).optional().describe(`Specifies the build process for sites that need a build step.`),
-    static: z31.union([LocalDirectorySchema, z31.boolean()]).optional().describe(
+    static: z32.union([LocalDirectorySchema, z32.boolean()]).optional().describe(
       "Specifies the path to the static files directory. Additionally you can also pass `true` when you don't have local static files, but still want to make an S3 bucket."
     ),
     ssr: FunctionSchema.optional().describe("Specifies the file that will render the site on the server."),
     // envPrefix: z.string().optional().describe('Specifies a prefix for all '),
-    origin: z31.enum(["ssr-first", "static-first"]).default("static-first").describe("Specifies the origin fallback ordering."),
+    // origin: z
+    // 	.enum(['ssr-first', 'static-first'])
+    // 	.default('static-first')
+    // 	.describe('Specifies the origin fallback ordering.'),
     // bind: z.object({
     // 	auth:
     // 	h
@@ -1404,15 +1543,18 @@ var SitesSchema = z31.record(
     // 		build: z.string().optional(),
     // 	}),
     // ]),
-    geoRestrictions: z31.array(z31.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked."),
-    forwardHost: z31.boolean().default(false).describe(
-      [
-        "Specify if the original `host` header should be forwarded to the SSR function.",
-        "The original `host` header will be forwarded as `x-forwarded-host`.",
-        "Keep in mind that this requires an extra CloudFront Function."
-      ].join("\n")
-    ),
-    errors: z31.object({
+    geoRestrictions: z32.array(z32.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked."),
+    // forwardHost: z
+    // 	.boolean()
+    // 	.default(false)
+    // 	.describe(
+    // 		[
+    // 			'Specify if the original `host` header should be forwarded to the SSR function.',
+    // 			'The original `host` header will be forwarded as `x-forwarded-host`.',
+    // 			'Keep in mind that this requires an extra CloudFront Function.',
+    // 		].join('\n')
+    // 	),
+    errors: z32.object({
       400: ErrorResponseSchema.describe("Customize a `400 Bad Request` response."),
       403: ErrorResponseSchema.describe("Customize a `403 Forbidden` response."),
       404: ErrorResponseSchema.describe("Customize a `404 Not Found` response."),
@@ -1425,16 +1567,16 @@ var SitesSchema = z31.record(
       503: ErrorResponseSchema.describe("Customize a `503 Service Unavailable` response."),
       504: ErrorResponseSchema.describe("Customize a `504 Gateway Timeout` response.")
     }).optional().describe("Customize the error responses for specific HTTP status codes."),
-    cors: z31.object({
-      override: z31.boolean().default(false),
+    cors: z32.object({
+      override: z32.boolean().default(false),
       maxAge: DurationSchema.default("365 days"),
-      exposeHeaders: z31.string().array().optional(),
-      credentials: z31.boolean().default(false),
-      headers: z31.string().array().default(["*"]),
-      origins: z31.string().array().default(["*"]),
-      methods: z31.enum(["GET", "DELETE", "HEAD", "OPTIONS", "PATCH", "POST", "PUT", "ALL"]).array().default(["ALL"])
+      exposeHeaders: z32.string().array().optional(),
+      credentials: z32.boolean().default(false),
+      headers: z32.string().array().default(["*"]),
+      origins: z32.string().array().default(["*"]),
+      methods: z32.enum(["GET", "DELETE", "HEAD", "OPTIONS", "PATCH", "POST", "PUT", "ALL"]).array().default(["ALL"])
     }).optional().describe("Specify the cors headers."),
-    security: z31.object({
+    security: z32.object({
       // contentSecurityPolicy: z.object({
       // 	override: z.boolean().default(false),
       // 	policy: z.string(),
@@ -1476,10 +1618,10 @@ var SitesSchema = z31.record(
       // 	reportUri?: string
       // }
     }).optional().describe("Specify the security policy."),
-    cache: z31.object({
-      cookies: z31.string().array().optional().describe("Specifies the cookies that CloudFront includes in the cache key."),
-      headers: z31.string().array().optional().describe("Specifies the headers that CloudFront includes in the cache key."),
-      queries: z31.string().array().optional().describe("Specifies the query values that CloudFront includes in the cache key.")
+    cache: z32.object({
+      cookies: z32.string().array().optional().describe("Specifies the cookies that CloudFront includes in the cache key."),
+      headers: z32.string().array().optional().describe("Specifies the headers that CloudFront includes in the cache key."),
+      queries: z32.string().array().optional().describe("Specifies the query values that CloudFront includes in the cache key.")
     }).optional().describe(
       "Specifies the cookies, headers, and query values that CloudFront includes in the cache key."
     )
@@ -1487,22 +1629,22 @@ var SitesSchema = z31.record(
 ).optional().describe("Define the sites in your stack.");
 
 // src/feature/store/schema.ts
-import { z as z32 } from "zod";
-var StoresSchema = z32.union([
-  z32.array(ResourceIdSchema).transform((list4) => {
+import { z as z33 } from "zod";
+var StoresSchema = z33.union([
+  z33.array(ResourceIdSchema).transform((list4) => {
     const stores = {};
     for (const key of list4) {
       stores[key] = {};
     }
     return stores;
   }),
-  z32.record(
+  z33.record(
     ResourceIdSchema,
-    z32.object({
+    z33.object({
       // cors: CorsSchema,
       // deletionProtection: DeletionProtectionSchema.optional(),
-      versioning: z32.boolean().default(false).describe("Enable versioning of your store."),
-      events: z32.object({
+      versioning: z33.boolean().default(false).describe("Enable versioning of your store."),
+      events: z33.object({
         // create
         "created:*": FunctionSchema.optional().describe(
           "Subscribe to notifications regardless of the API that was used to create an object."
@@ -1536,22 +1678,22 @@ var StoresSchema = z32.union([
 
 // src/feature/table/schema.ts
 import { minutes as minutes4, seconds as seconds4 } from "@awsless/duration";
-import { z as z33 } from "zod";
-var KeySchema = z33.string().min(1).max(255);
-var TablesSchema = z33.record(
+import { z as z34 } from "zod";
+var KeySchema = z34.string().min(1).max(255);
+var TablesSchema = z34.record(
   ResourceIdSchema,
-  z33.object({
+  z34.object({
     hash: KeySchema.describe(
       "Specifies the name of the partition / hash key that makes up the primary key for the table."
     ),
     sort: KeySchema.optional().describe(
       "Specifies the name of the range / sort key that makes up the primary key for the table."
     ),
-    fields: z33.record(z33.string(), z33.enum(["string", "number", "binary"])).optional().describe(
+    fields: z34.record(z34.string(), z34.enum(["string", "number", "binary"])).optional().describe(
       'A list of attributes that describe the key schema for the table and indexes. If no attribute field is defined we default to "string".'
     ),
-    class: z33.enum(["standard", "standard-infrequent-access"]).default("standard").describe("The table class of the table."),
-    pointInTimeRecovery: z33.boolean().default(false).describe("Indicates whether point in time recovery is enabled on the table."),
+    class: z34.enum(["standard", "standard-infrequent-access"]).default("standard").describe("The table class of the table."),
+    pointInTimeRecovery: z34.boolean().default(false).describe("Indicates whether point in time recovery is enabled on the table."),
     ttl: KeySchema.optional().describe(
       [
         "The name of the TTL attribute used to store the expiration time for items in the table.",
@@ -1559,8 +1701,8 @@ var TablesSchema = z33.record(
       ].join("\n")
     ),
     // deletionProtection: DeletionProtectionSchema.optional(),
-    stream: z33.object({
-      type: z33.enum(["keys-only", "new-image", "old-image", "new-and-old-images"]).describe(
+    stream: z34.object({
+      type: z34.enum(["keys-only", "new-image", "old-image", "new-and-old-images"]).describe(
         [
           "When an item in the table is modified, you can determines what information is written to the stream for this table.",
           "Valid values are:",
@@ -1570,7 +1712,7 @@ var TablesSchema = z33.record(
           "- new-and-old-images - Both the new and the old item images of the item are written to the stream."
         ].join("\n")
       ),
-      batchSize: z33.number().min(1).max(1e4).default(1).describe(
+      batchSize: z34.number().min(1).max(1e4).default(1).describe(
         [
           "The maximum number of records in each batch that Lambda pulls from your stream and sends to your function.",
           "Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).",
@@ -1600,7 +1742,7 @@ var TablesSchema = z33.record(
       // 			'You can specify a number from -1 to 10000.',
       // 		].join('\n')
       // 	),
-      retryAttempts: z33.number().min(-1).max(1e4).default(-1).describe(
+      retryAttempts: z34.number().min(-1).max(1e4).default(-1).describe(
         [
           "Discard records after the specified number of retries.",
           "The default value is -1, which sets the maximum number of retries to infinite.",
@@ -1608,7 +1750,7 @@ var TablesSchema = z33.record(
           "You can specify a number from -1 to 10000."
         ].join("\n")
       ),
-      concurrencyPerShard: z33.number().min(1).max(10).default(1).describe(
+      concurrencyPerShard: z34.number().min(1).max(10).default(1).describe(
         [
           "The number of batches to process concurrently from each shard.",
           "You can specify a number from 1 to 10."
@@ -1618,16 +1760,16 @@ var TablesSchema = z33.record(
     }).optional().describe(
       "The settings for the DynamoDB table stream, which capture changes to items stored in the table."
     ),
-    indexes: z33.record(
-      z33.string(),
-      z33.object({
+    indexes: z34.record(
+      z34.string(),
+      z34.object({
         hash: KeySchema.describe(
           "Specifies the name of the partition / hash key that makes up the primary key for the global secondary index."
         ),
         sort: KeySchema.optional().describe(
           "Specifies the name of the range / sort key that makes up the primary key for the global secondary index."
         ),
-        projection: z33.enum(["all", "keys-only"]).default("all").describe(
+        projection: z34.enum(["all", "keys-only"]).default("all").describe(
           [
             "The set of attributes that are projected into the index:",
             "- all - All of the table attributes are projected into the index.",
@@ -1641,11 +1783,11 @@ var TablesSchema = z33.record(
 ).optional().describe("Define the tables in your stack.");
 
 // src/feature/task/schema.ts
-import { z as z34 } from "zod";
-var RetryAttemptsSchema2 = z34.number().int().min(0).max(2).describe(
+import { z as z35 } from "zod";
+var RetryAttemptsSchema2 = z35.number().int().min(0).max(2).describe(
   "The maximum number of times to retry when the function returns an error. You can specify a number from 0 to 2."
 );
-var TaskSchema = z34.union([
+var TaskSchema = z35.union([
   LocalFileSchema.transform((file) => ({
     consumer: {
       code: {
@@ -1656,33 +1798,33 @@ var TaskSchema = z34.union([
     },
     retryAttempts: void 0
   })),
-  z34.object({
+  z35.object({
     consumer: FunctionSchema,
     retryAttempts: RetryAttemptsSchema2.optional()
   })
 ]);
-var TasksSchema = z34.record(ResourceIdSchema, TaskSchema).optional().describe("Define the tasks in your stack.");
+var TasksSchema = z35.record(ResourceIdSchema, TaskSchema).optional().describe("Define the tasks in your stack.");
 
 // src/feature/test/schema.ts
-import { z as z35 } from "zod";
-var TestsSchema = z35.union([LocalDirectorySchema.transform((v) => [v]), LocalDirectorySchema.array()]).describe("Define the location of your tests for your stack.").optional();
+import { z as z36 } from "zod";
+var TestsSchema = z36.union([LocalDirectorySchema.transform((v) => [v]), LocalDirectorySchema.array()]).describe("Define the location of your tests for your stack.").optional();
 
 // src/feature/topic/schema.ts
 import { kebabCase as kebabCase3 } from "change-case";
-import { z as z36 } from "zod";
-var TopicNameSchema = z36.string().min(3).max(256).regex(/^[a-z0-9\-]+$/i, "Invalid topic name").transform((value) => kebabCase3(value)).describe("Define event topic name.");
-var TopicsSchema = z36.array(TopicNameSchema).refine((topics) => {
+import { z as z37 } from "zod";
+var TopicNameSchema = z37.string().min(3).max(256).regex(/^[a-z0-9\-]+$/i, "Invalid topic name").transform((value) => kebabCase3(value)).describe("Define event topic name.");
+var TopicsSchema = z37.array(TopicNameSchema).refine((topics) => {
   return topics.length === new Set(topics).size;
 }, "Must be a list of unique topic names").optional().describe("Define the event topics to publish too in your stack.");
-var SubscribersSchema = z36.record(TopicNameSchema, FunctionSchema).optional().describe("Define the event topics to subscribe too in your stack.");
+var SubscribersSchema = z37.record(TopicNameSchema, FunctionSchema).optional().describe("Define the event topics to subscribe too in your stack.");
 
 // src/config/stack.ts
 var DependsSchema = ResourceIdSchema.array().optional().describe("Define the stacks that this stack is depended on.");
 var NameSchema = ResourceIdSchema.refine((name) => !["base", "hostedzones"].includes(name), {
   message: `Stack name can't be a reserved name.`
 }).describe("Stack name.");
-var StackSchema = z37.object({
-  $schema: z37.string().optional(),
+var StackSchema = z38.object({
+  $schema: z38.string().optional(),
   name: NameSchema,
   depends: DependsSchema,
   commands: CommandsSchema,
@@ -1749,13 +1891,13 @@ var readConfigWithStage = async (file, stage) => {
 };
 
 // src/config/load/validate.ts
-import { z as z38 } from "zod";
+import { z as z39 } from "zod";
 var validateConfig = async (schema, file, data) => {
   try {
     const result = await schema.parseAsync(data);
     return result;
   } catch (error) {
-    if (error instanceof z38.ZodError) {
+    if (error instanceof z39.ZodError) {
       throw new ConfigError(file, error, data);
     }
     throw error;
@@ -4396,20 +4538,140 @@ var getCacheControl = (file) => {
 var getContentType = (file) => {
   return contentType(extname2(file)) || "text/html; charset=utf-8";
 };
-var getForwardHostFunctionCode = () => {
-  return [
-    "function handler(event) {",
-    "const request = event.request",
-    "const headers = request.headers",
-    "const host = request.headers.host.value",
-    'headers["x-forwarded-host"] = { value: host }',
-    "return request",
-    "}"
-  ].join("\n");
+var getViewerRequestFunctionCode = (domain2, bucket, functionUrl) => {
+  return $resolve([bucket?.bucketRegionalDomainName, functionUrl?.functionUrl], (bucketDomain, lambdaUrl) => {
+    return CF_FUNC_WRAP([
+      // --------------------------------------------------------
+      // Block direct access to cloudfront.
+      domain2 ? BLOCK_DIRECT_ACCESS_TO_CLOUDFRONT : "",
+      // --------------------------------------------------------
+      // Define functions.
+      bucketDomain ? GET_PREFIXES : "",
+      bucketDomain ? SET_S3_ORIGIN : "",
+      lambdaUrl ? SET_LAMBDA_ORIGIN : "",
+      // --------------------------------------------------------
+      // Route asset requests to the s3 bucket.
+      bucketDomain ? ROUTE_TO_S3_ORIGIN_IF_STATIC_ASSET(bucketDomain) : "",
+      // --------------------------------------------------------
+      // Route SSR requests.
+      lambdaUrl ? ROUTE_TO_LAMBDA_ORIGIN(lambdaUrl.split("/")[2]) : "",
+      // --------------------------------------------------------
+      // Return original response
+      bucketDomain && !lambdaUrl ? ROUTE_TO_S3_ORIGIN(bucketDomain) : ""
+    ]);
+  });
 };
+var CF_FUNC_WRAP = (code) => `
+import cf from "cloudfront";
+
+async function handler(event) {
+	${code.join("\n")}
+
+	return event.request;
+}
+`;
+var BLOCK_DIRECT_ACCESS_TO_CLOUDFRONT = `
+if (event.request.headers.host.value.includes('cloudfront.net')) {
+	return {
+		statusCode: 403,
+		statusDescription: 'Forbidden',
+		body: {
+			encoding: 'text',
+			data: '<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>'
+		}
+	};
+}`;
+var SET_S3_ORIGIN = `
+function setS3Origin(s3Domain) {
+	const origin = {
+		domainName: s3Domain,
+		originAccessControlConfig: {
+			enabled: true,
+			signingBehavior: 'always',
+			signingProtocol: 'sigv4',
+			originType: 's3',
+		}
+	};
+
+	console.log("s3 origin")
+	console.log(origin)
+	cf.updateRequestOrigin(origin);
+}`;
+var SET_LAMBDA_ORIGIN = `
+function setLambdaOrigin(urlHost) {
+	cf.updateRequestOrigin({
+		domainName: urlHost,
+		customOriginConfig: {
+			port: 443,
+			protocol: 'https',
+			sslProtocols: ['TLSv1.2'],
+		},
+		originAccessControlConfig: {
+			enabled: true,
+			signingBehavior: 'always',
+			signingProtocol: 'sigv4',
+			originType: 'lambda',
+		}
+	});
+}`;
+var GET_PREFIXES = `
+function getPostfixes(path) {
+	if(path === '') {
+		return ['/index.html'];
+	}
+
+	if(path.endsWith('/')) {
+		return ['index.html'];
+	}
+
+	const parts = path.split('/');
+	const lastPart = parts[parts.length - 1];
+
+	if(lastPart.includes('.')) {
+		return [''];
+	}
+
+	return ['', '.html', '/index.html'];
+}`;
+var ROUTE_TO_S3_ORIGIN_IF_STATIC_ASSET = (bucketDomain) => `
+if (event.request.method === 'GET' || event.request.method === 'HEAD') {
+	const s3Domain = '${bucketDomain}';
+	const path = decodeURIComponent(event.request.uri);
+	const postfixes = getPostfixes(path);
+
+	try {
+		const postfix = await Promise.any(
+			postfixes.map(p => {
+				return cf
+					.kvs()
+					.get(path + p)
+					.then(v => p);
+			})
+		);
+
+		event.request.uri = event.request.uri + postfix;
+		setS3Origin(s3Domain);
+		return event.request;
+	} catch (e) {}
+}`;
+var ROUTE_TO_S3_ORIGIN = (bucketDomain) => `
+setS3Origin('${bucketDomain}');`;
+var ROUTE_TO_LAMBDA_ORIGIN = (url) => `
+for (var key in event.request.querystring) {
+	if (key.includes('/')) {
+		event.request.querystring[encodeURIComponent(key)] = event.request.querystring[key];
+		delete event.request.querystring[key];
+	}
+}
+
+if (event.request.headers.host) {
+	event.request.headers['x-forwarded-host'] = event.request.headers.host;
+}
+
+setLambdaOrigin('${url}');`;
 
 // src/feature/site/index.ts
-import { camelCase as camelCase6, constantCase as constantCase10 } from "change-case";
+import { camelCase as camelCase6 } from "change-case";
 
 // src/util/exec.ts
 import { exec } from "promisify-child-process";
@@ -4448,10 +4710,17 @@ var siteFeature = defineFeature({
           });
         });
       }
-      const origins = [];
-      const originGroups = [];
-      let bucket;
+      const kvs = new $15.aws.cloudfront.KeyValueStore(group, "kvs", {
+        name,
+        comment: "Store for static assets"
+      });
+      const keys = [];
+      new ImportKeys(group, "keys", {
+        kvsArn: kvs.arn,
+        keys
+      });
       const versions = [];
+      let functionUrl;
       if (props.ssr) {
         const result = createLambdaFunction(group, ctx, `site`, id, props.ssr);
         versions.push(result.code.sourceHash);
@@ -4465,28 +4734,12 @@ var siteFeature = defineFeature({
           functionUrlAuthType: "AWS_IAM",
           sourceArn: `arn:aws:cloudfront::${ctx.accountId}:distribution/*`
         });
-        const url = new $15.aws.lambda.FunctionUrl(group, "url", {
+        functionUrl = new $15.aws.lambda.FunctionUrl(group, "url", {
           functionName: result.lambda.functionName,
           authorizationType: "AWS_IAM"
         });
-        const ssrAccessControl = new $15.aws.cloudfront.OriginAccessControl(group, "ssr-access", {
-          name: `${name}-ssr`,
-          originAccessControlOriginType: "lambda",
-          signingBehavior: "always",
-          signingProtocol: "sigv4"
-        });
-        origins.push({
-          originId: "ssr",
-          domainName: url.functionUrl.pipe((url2) => url2.split("/")[2]),
-          originAccessControlId: ssrAccessControl.id,
-          customOriginConfig: {
-            originProtocolPolicy: "https-only",
-            httpPort: 80,
-            httpsPort: 443,
-            originSslProtocols: ["TLSv1.2"]
-          }
-        });
       }
+      let bucket;
       if (props.static) {
         bucket = new $15.aws.s3.Bucket(group, "bucket", {
           bucket: formatLocalResourceName({
@@ -4527,14 +4780,8 @@ var siteFeature = defineFeature({
             bucket.arn.pipe((arn) => `${arn}/*`)
           ]
         });
-        const accessControl = new $15.aws.cloudfront.OriginAccessControl(group, `access`, {
-          name,
-          originAccessControlOriginType: "s3",
-          signingBehavior: "always",
-          signingProtocol: "sigv4"
-        });
         ctx.onReady(() => {
-          if (typeof props.static === "string") {
+          if (typeof props.static === "string" && bucket) {
             const files = glob2.sync("**", {
               // cwd: join(directories.root, props.static),
               cwd: props.static,
@@ -4549,29 +4796,12 @@ var siteFeature = defineFeature({
                 source: join11(props.static, file),
                 sourceHash: $hash(join11(props.static, file))
               });
+              keys.push({ key: `/${file}`, value: "s3" });
               versions.push(object.key);
               versions.push(object.sourceHash);
             }
           }
         });
-        origins.push({
-          originId: "static",
-          domainName: bucket.bucketRegionalDomainName,
-          originAccessControlId: accessControl.id,
-          s3OriginConfig: {
-            // is required to have an value for s3 origins when using origin access control
-            originAccessIdentity: ""
-          }
-        });
-      }
-      if (props.ssr && props.static) {
-        originGroups.push({
-          originId: "group",
-          member: props.origin === "ssr-first" ? [{ originId: "ssr" }, { originId: "static" }] : [{ originId: "static" }, { originId: "ssr" }],
-          failoverCriteria: {
-            statusCodes: [403, 404]
-          }
-        });
       }
       const cache = new $15.aws.cloudfront.CachePolicy(group, "cache", {
         name,
@@ -4655,30 +4885,25 @@ var siteFeature = defineFeature({
       });
       const domainName = props.domain ? formatFullDomainName(ctx.appConfig, props.domain, props.subDomain) : void 0;
       const certificateArn = props.domain ? ctx.shared.entry("domain", `global-certificate-arn`, props.domain) : void 0;
-      const associations = [];
-      if (props.forwardHost) {
-        const viewerRequest = new $15.aws.cloudfront.Function(group, "forward-host", {
-          name: formatLocalResourceName({
-            appName: ctx.app.name,
-            stackName: ctx.stack.name,
-            resourceType: "site",
-            resourceName: "forward-host"
-          }),
-          runtime: `cloudfront-js-2.0`,
-          comment: "Forward the host header to the origin",
-          publish: true,
-          code: getForwardHostFunctionCode()
-        });
-        associations.push({
-          eventType: "viewer-request",
-          functionArn: viewerRequest.arn
-        });
-      }
+      const viewerRequest = new $15.aws.cloudfront.Function(group, "viewer-request", {
+        name: formatLocalResourceName({
+          appName: ctx.app.name,
+          stackName: ctx.stack.name,
+          resourceType: "site",
+          resourceName: `request-${id}`
+        }),
+        runtime: `cloudfront-js-2.0`,
+        comment: `Viewer Request - ${name}`,
+        publish: true,
+        code: getViewerRequestFunctionCode(domainName, bucket, functionUrl),
+        keyValueStoreAssociations: [kvs.arn]
+      });
       const distribution = new $15.aws.cloudfront.Distribution(group, "distribution", {
         // name,
-        tags: {
-          Name: name
-        },
+        // tags: {
+        // 	Name: name,
+        // },
+        comment: name,
         enabled: true,
         aliases: domainName ? [domainName] : void 0,
         priceClass: "PriceClass_All",
@@ -4690,8 +4915,19 @@ var siteFeature = defineFeature({
         } : {
           cloudfrontDefaultCertificate: true
         },
-        origin: origins,
-        originGroup: originGroups,
+        origin: [
+          {
+            originId: "default",
+            domainName: "placeholder.awsless.dev",
+            customOriginConfig: {
+              httpPort: 80,
+              httpsPort: 443,
+              originProtocolPolicy: "http-only",
+              originReadTimeout: 20,
+              originSslProtocols: ["TLSv1.2"]
+            }
+          }
+        ],
         customErrorResponse: Object.entries(props.errors ?? {}).map(([errorCode, item]) => {
           if (typeof item === "string") {
             return {
@@ -4715,14 +4951,21 @@ var siteFeature = defineFeature({
         },
         defaultCacheBehavior: {
           compress: true,
-          targetOriginId: props.ssr && props.static ? "group" : props.ssr ? "ssr" : "static",
-          functionAssociation: associations,
+          targetOriginId: "default",
+          functionAssociation: [
+            {
+              eventType: "viewer-request",
+              functionArn: viewerRequest.arn
+            }
+          ],
           originRequestPolicyId: originRequest.id,
           cachePolicyId: cache.id,
           responseHeadersPolicyId: responseHeaders.id,
           viewerProtocolPolicy: "redirect-to-https",
           allowedMethods: ["GET", "HEAD", "POST", "PUT", "PATCH", "OPTIONS", "DELETE"],
           cachedMethods: ["GET", "HEAD"]
+          // cachedMethods: ['GET', 'HEAD', 'OPTIONS'],
+          // cachedMethods: [],
         }
       });
       new Invalidation(group, "invalidate", {
@@ -4736,7 +4979,7 @@ var siteFeature = defineFeature({
           });
         })
       });
-      if (props.static) {
+      if (bucket) {
         new $15.aws.s3.BucketPolicy(
           group,
           `policy`,
@@ -4780,9 +5023,6 @@ var siteFeature = defineFeature({
           }
         });
       }
-      if (domainName) {
-        ctx.bind(`SITE_${constantCase10(ctx.stack.name)}_${constantCase10(id)}_ENDPOINT`, domainName);
-      }
     }
   }
 });
@@ -4939,7 +5179,7 @@ var storeFeature = defineFeature({
 
 // src/feature/table/index.ts
 import { $ as $17, Group as Group17 } from "@awsless/formation";
-import { constantCase as constantCase11 } from "change-case";
+import { constantCase as constantCase10 } from "change-case";
 import { toSeconds as toSeconds7 } from "@awsless/duration";
 var tableFeature = defineFeature({
   name: "table",
@@ -5021,8 +5261,8 @@ var tableFeature = defineFeature({
           name,
           billingMode: "PAY_PER_REQUEST",
           streamEnabled: !!props.stream,
-          streamViewType: props.stream && constantCase11(props.stream?.type),
-          tableClass: constantCase11(props.class),
+          streamViewType: props.stream && constantCase10(props.stream?.type),
+          tableClass: constantCase10(props.class),
           hashKey: props.hash,
           rangeKey: props.sort,
           attribute: attributeDefinitions(),
@@ -5037,7 +5277,7 @@ var tableFeature = defineFeature({
             name: name2,
             hashKey: index.hash,
             rangeKey: index.sort,
-            projectionType: constantCase11(index.projection)
+            projectionType: constantCase10(index.projection)
           })),
           deletionProtectionEnabled: ctx.appConfig.removal === "retain"
         },
@@ -6923,7 +7163,7 @@ var auth = (program2) => {
 
 // src/cli/command/bind.ts
 import { log as log10, note as note3 } from "@clack/prompts";
-import { constantCase as constantCase12 } from "change-case";
+import { constantCase as constantCase11 } from "change-case";
 import { spawn } from "child_process";
 var bind = (program2) => {
   program2.command("bind").argument("[command...]", "The command to execute").option("--config <string...>", "List of config values that will be accessable", (v) => v.split(",")).description(`Bind your site environment variables to a command`).action(async (commands7 = [], opts) => {
@@ -6952,10 +7192,10 @@ var bind = (program2) => {
       const configList = opts.config ?? [];
       const configs = {};
       for (const name of configList) {
-        configs[`CONFIG_${constantCase12(name)}`] = name;
+        configs[`CONFIG_${constantCase11(name)}`] = name;
       }
       if (configList.length ?? 0 > 0) {
-        note3(wrap(configList.map((v) => color.label(constantCase12(v)))), "Bind Config");
+        note3(wrap(configList.map((v) => color.label(constantCase11(v)))), "Bind Config");
       }
       if (commands7.length === 0) {
         return "No command to execute.";
@@ -7367,7 +7607,7 @@ var domain = (program2) => {
 import { CloudWatchLogsClient, StartLiveTailCommand } from "@aws-sdk/client-cloudwatch-logs";
 import { log as log15 } from "@clack/prompts";
 import chalk7 from "chalk";
-import chunk from "chunk";
+import chunk2 from "chunk";
 import { formatDate } from "date-fns";
 import wildstring6 from "wildstring";
 var logs = (program2) => {
@@ -7409,7 +7649,7 @@ var logs = (program2) => {
       });
       const streams = await task("Connecting to the log stream...", async (update) => {
         const result = await Promise.all(
-          chunk(logGroupArns, 10).map(async (arns) => {
+          chunk2(logGroupArns, 10).map(async (arns) => {
             const command = new StartLiveTailCommand({
               logGroupIdentifiers: arns
             });