@awsless/awsless 0.0.581 → 0.0.583

package/dist/bin.js

@@ -994,36 +994,38 @@ var OnLogDefaultSchema = z17.union([
   })
 ]).optional().describe("Define a subscription on all Lambda functions logs.");
 
-// src/feature/pubsub/appsync/schema.ts
+// src/feature/pubsub/schema.ts
 import { z as z18 } from "zod";
 var DomainSchema = ResourceIdSchema.describe("The domain id to link your Pubsub API with.");
 var PubSubDefaultSchema = z18.record(
   ResourceIdSchema,
   z18.object({
-    auth: FunctionSchema.describe("The authentication function for the pubsub API."),
+    auth: FunctionSchema,
     domain: DomainSchema.optional(),
-    subDomain: z18.string().optional(),
-    namespaces: z18.array(z18.string()).optional().describe('The namespaces for the PubSub API. If not set, a single "default" namespace is created.'),
-    logLevel: z18.enum(["none", "info", "error", "debug", "all"]).optional().describe("The logging level for AppSync API. When set, logging is enabled.")
+    subDomain: z18.string().optional()
+    // auth: z.union([
+    // 	ResourceIdSchema,
+    // 	z.object({
+    // 		authorizer: FunctionSchema,
+    // 		// ttl: AuthorizerTtl.default('1 hour'),
+    // 	}),
+    // ]),
+    // policy: z
+    // 	.object({
+    // 		publish: z.array(z.string()).optional(),
+    // 		subscribe: z.array(z.string()).optional(),
+    // 	})
+    // 	.optional(),
   })
-).optional().describe("Define the pubsub API configuration in your stack.");
+).optional().describe("Define the pubsub subscriber in your stack.");
 var PubSubSchema = z18.record(
   ResourceIdSchema,
   z18.object({
-    channels: z18.array(z18.string()).describe("The event channels this subscriber listens to."),
-    filter: z18.object({
-      eventType: z18.string().optional().describe("Filter events by event type.")
-      // Add more filter options as needed
-      // userId: z.string().optional(),
-      // custom: z.record(z.string(), z.any()).optional(),
-    }).optional().describe("Event filtering options."),
-    consumer: FunctionSchema.describe("The consuming lambda function properties."),
-    batchSize: z18.number().int().min(1).max(100).default(1).describe("Number of events to batch before invoking the consumer function."),
-    retryPolicy: z18.object({
-      maxRetries: z18.number().int().min(0).max(3).default(2).describe("Maximum number of retry attempts.")
-    }).optional().describe("Retry policy for failed event processing.")
+    sql: z18.string().describe("The SQL statement used to query the IOT topic."),
+    sqlVersion: z18.enum(["2015-10-08", "2016-03-23", "beta"]).default("2016-03-23").describe("The version of the SQL rules engine to use when evaluating the rule."),
+    consumer: FunctionSchema.describe("The consuming lambda function properties.")
   })
-).optional().describe("Define the pubsub event subscribers in your stack.");
+).optional().describe("Define the pubsub subscriber in your stack.");
 
 // src/feature/queue/schema.ts
 import { days as days2, hours, minutes as minutes2, seconds as seconds2 } from "@awsless/duration";
@@ -1153,7 +1155,24 @@ var RpcDefaultSchema = z22.record(
     geoRestrictions: z22.array(z22.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked.")
   })
 ).describe(`Define the global RPC API's.`).optional();
-var RpcSchema = z22.record(ResourceIdSchema, z22.record(z22.string(), FunctionSchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
+var PermissionsSchema2 = z22.union([
+  //
+  z22.string().transform((v) => [v]),
+  z22.string().array()
+]).default([]).describe(
+  "Specifies a list of permissions that can be used inside your custom authorizer function to determine if the user has access to this specific RPC function."
+);
+var EntrySchema = z22.union([
+  FunctionSchema.transform((props) => ({
+    function: props,
+    permissions: []
+  })),
+  z22.object({
+    function: FunctionSchema,
+    permissions: PermissionsSchema2
+  })
+]);
+var RpcSchema = z22.record(ResourceIdSchema, z22.record(z22.string(), EntrySchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
 
 // src/feature/instance/schema.ts
 import { days as days3, toDays as toDays2 } from "@awsless/duration";
@@ -1225,7 +1244,7 @@ var PermissionSchema2 = z23.object({
   actions: ActionsSchema2,
   resources: ResourcesSchema2
 });
-var PermissionsSchema2 = z23.union([PermissionSchema2.transform((v) => [v]), PermissionSchema2.array()]).describe("Add IAM permissions to your instance.");
+var PermissionsSchema3 = z23.union([PermissionSchema2.transform((v) => [v]), PermissionSchema2.array()]).describe("Add IAM permissions to your instance.");
 var DescriptionSchema2 = z23.string().describe("A description of the instance.");
 var ImageSchema = z23.string().optional().describe("The URL of the container image to use.");
 var validLogRetentionDays2 = [
@@ -1267,7 +1286,7 @@ var ISchema = z23.object({
   memorySize: MemorySizeSchema2.optional(),
   architecture: ArchitectureSchema3.optional(),
   environment: EnvironmentSchema2.optional(),
-  permissions: PermissionsSchema2.optional(),
+  permissions: PermissionsSchema3.optional(),
   healthCheck: HealthCheckSchema.optional()
   // restartPolicy: RestartPolicySchema.optional(),
 });
@@ -1284,7 +1303,7 @@ var InstanceDefaultSchema = z23.object({
   memorySize: MemorySizeSchema2.default("512 MB"),
   architecture: ArchitectureSchema3.default("arm64"),
   environment: EnvironmentSchema2.optional(),
-  permissions: PermissionsSchema2.optional(),
+  permissions: PermissionsSchema3.optional(),
   healthCheck: HealthCheckSchema.optional(),
   // restartPolicy: RestartPolicySchema.default({ enabled: true }),
   log: LogSchema2.default(true).transform((log26) => ({
@@ -2490,7 +2509,6 @@ var authFeature = defineFeature({
         resourceType: "auth",
         resourceName: id
       });
-      props.username;
       const userPool = new $.aws.cognito.UserPool(
         group,
         "user-pool",
@@ -3029,6 +3047,7 @@ var bundleTypeScript = async ({
     }
     const code = Buffer.from(item.code, "utf8");
     const map = item.map ? Buffer.from(item.map.toString(), "utf8") : void 0;
+    item.map?.version;
     hash.update(code);
     files.push({
       name: item.fileName,
@@ -4528,8 +4547,8 @@ var rpcFeature = defineFeature({
       const schema = new TypeObject(2);
       for (const stack of ctx.stackConfigs) {
         for (const [name, props] of Object.entries(stack.rpc?.[id] ?? {})) {
-          if ("file" in props.code) {
-            const relFile = relative5(directories.types, props.code.file);
+          if ("file" in props.function.code) {
+            const relFile = relative5(directories.types, props.function.code.file);
             const varName = camelCase5(`${stack.name}-${name}`);
             types2.addImport(varName, relFile);
             schema.addType(name, `Handle<typeof ${varName}>`);
@@ -4558,7 +4577,7 @@ var rpcFeature = defineFeature({
           } else {
             list3.add(name);
           }
-          const timeout = toSeconds5(props.timeout ?? ctx.appConfig.defaults.function.timeout);
+          const timeout = toSeconds5(props.function.timeout ?? ctx.appConfig.defaults.function.timeout);
           const maxTimeout = toSeconds5(ctx.appConfig.defaults.rpc[id].timeout) * 0.8;
           if (timeout > maxTimeout) {
             throw new FileError(
@@ -4784,7 +4803,7 @@ var rpcFeature = defineFeature({
         const queryGroup = new Group13(group, "query", name);
         const entryId = kebabCase6(`${id}-${shortId(name)}`);
         createLambdaFunction(queryGroup, ctx, `rpc`, entryId, {
-          ...props,
+          ...props.function,
           description: `${id} ${name}`
         });
         new $13.aws.dynamodb.TableItem(queryGroup, "query", {
@@ -4800,6 +4819,11 @@ var rpcFeature = defineFeature({
                 resourceType: "rpc",
                 resourceName: entryId
               })
+            },
+            permissions: {
+              L: props.permissions.map((permission) => ({
+                S: permission
+              }))
             }
           })
         });

package/dist/build-json-schema.js

@@ -389,36 +389,38 @@ var OnLogDefaultSchema = z14.union([
   })
 ]).optional().describe("Define a subscription on all Lambda functions logs.");
 
-// src/feature/pubsub/appsync/schema.ts
+// src/feature/pubsub/schema.ts
 import { z as z15 } from "zod";
 var DomainSchema = ResourceIdSchema.describe("The domain id to link your Pubsub API with.");
 var PubSubDefaultSchema = z15.record(
   ResourceIdSchema,
   z15.object({
-    auth: FunctionSchema.describe("The authentication function for the pubsub API."),
+    auth: FunctionSchema,
     domain: DomainSchema.optional(),
-    subDomain: z15.string().optional(),
-    namespaces: z15.array(z15.string()).optional().describe('The namespaces for the PubSub API. If not set, a single "default" namespace is created.'),
-    logLevel: z15.enum(["none", "info", "error", "debug", "all"]).optional().describe("The logging level for AppSync API. When set, logging is enabled.")
+    subDomain: z15.string().optional()
+    // auth: z.union([
+    // 	ResourceIdSchema,
+    // 	z.object({
+    // 		authorizer: FunctionSchema,
+    // 		// ttl: AuthorizerTtl.default('1 hour'),
+    // 	}),
+    // ]),
+    // policy: z
+    // 	.object({
+    // 		publish: z.array(z.string()).optional(),
+    // 		subscribe: z.array(z.string()).optional(),
+    // 	})
+    // 	.optional(),
   })
-).optional().describe("Define the pubsub API configuration in your stack.");
+).optional().describe("Define the pubsub subscriber in your stack.");
 var PubSubSchema = z15.record(
   ResourceIdSchema,
   z15.object({
-    channels: z15.array(z15.string()).describe("The event channels this subscriber listens to."),
-    filter: z15.object({
-      eventType: z15.string().optional().describe("Filter events by event type.")
-      // Add more filter options as needed
-      // userId: z.string().optional(),
-      // custom: z.record(z.string(), z.any()).optional(),
-    }).optional().describe("Event filtering options."),
-    consumer: FunctionSchema.describe("The consuming lambda function properties."),
-    batchSize: z15.number().int().min(1).max(100).default(1).describe("Number of events to batch before invoking the consumer function."),
-    retryPolicy: z15.object({
-      maxRetries: z15.number().int().min(0).max(3).default(2).describe("Maximum number of retry attempts.")
-    }).optional().describe("Retry policy for failed event processing.")
+    sql: z15.string().describe("The SQL statement used to query the IOT topic."),
+    sqlVersion: z15.enum(["2015-10-08", "2016-03-23", "beta"]).default("2016-03-23").describe("The version of the SQL rules engine to use when evaluating the rule."),
+    consumer: FunctionSchema.describe("The consuming lambda function properties.")
   })
-).optional().describe("Define the pubsub event subscribers in your stack.");
+).optional().describe("Define the pubsub subscriber in your stack.");
 
 // src/feature/queue/schema.ts
 import { days as days2, hours, minutes as minutes2, seconds as seconds2 } from "@awsless/duration";
@@ -548,7 +550,24 @@ var RpcDefaultSchema = z19.record(
     geoRestrictions: z19.array(z19.string().length(2).toUpperCase()).default([]).describe("Specifies a blacklist of countries that should be blocked.")
   })
 ).describe(`Define the global RPC API's.`).optional();
-var RpcSchema = z19.record(ResourceIdSchema, z19.record(z19.string(), FunctionSchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
+var PermissionsSchema2 = z19.union([
+  //
+  z19.string().transform((v) => [v]),
+  z19.string().array()
+]).default([]).describe(
+  "Specifies a list of permissions that can be used inside your custom authorizer function to determine if the user has access to this specific RPC function."
+);
+var EntrySchema = z19.union([
+  FunctionSchema.transform((props) => ({
+    function: props,
+    permissions: []
+  })),
+  z19.object({
+    function: FunctionSchema,
+    permissions: PermissionsSchema2
+  })
+]);
+var RpcSchema = z19.record(ResourceIdSchema, z19.record(z19.string(), EntrySchema).describe("The queries for your global RPC API.")).describe("Define the schema in your stack for your global RPC API.").optional();
 
 // src/feature/instance/schema.ts
 import { days as days3, toDays as toDays2 } from "@awsless/duration";
@@ -620,7 +639,7 @@ var PermissionSchema2 = z20.object({
   actions: ActionsSchema2,
   resources: ResourcesSchema2
 });
-var PermissionsSchema2 = z20.union([PermissionSchema2.transform((v) => [v]), PermissionSchema2.array()]).describe("Add IAM permissions to your instance.");
+var PermissionsSchema3 = z20.union([PermissionSchema2.transform((v) => [v]), PermissionSchema2.array()]).describe("Add IAM permissions to your instance.");
 var DescriptionSchema2 = z20.string().describe("A description of the instance.");
 var ImageSchema = z20.string().optional().describe("The URL of the container image to use.");
 var validLogRetentionDays2 = [
@@ -662,7 +681,7 @@ var ISchema = z20.object({
   memorySize: MemorySizeSchema2.optional(),
   architecture: ArchitectureSchema3.optional(),
   environment: EnvironmentSchema2.optional(),
-  permissions: PermissionsSchema2.optional(),
+  permissions: PermissionsSchema3.optional(),
   healthCheck: HealthCheckSchema.optional()
   // restartPolicy: RestartPolicySchema.optional(),
 });
@@ -679,7 +698,7 @@ var InstanceDefaultSchema = z20.object({
   memorySize: MemorySizeSchema2.default("512 MB"),
   architecture: ArchitectureSchema3.default("arm64"),
   environment: EnvironmentSchema2.optional(),
-  permissions: PermissionsSchema2.optional(),
+  permissions: PermissionsSchema3.optional(),
   healthCheck: HealthCheckSchema.optional(),
   // restartPolicy: RestartPolicySchema.default({ enabled: true }),
   log: LogSchema2.default(true).transform((log) => ({

package/dist/prebuild/rpc/HASH

@@ -1 +1 @@
-809ac79b62f213f5ced66b7a051b247cda10444b
+f25c05904c0f9349537dd7cb51577a1befa4c1af

package/dist/prebuild.js

@@ -118,6 +118,7 @@ var bundleTypeScript = async ({
     }
     const code = Buffer.from(item.code, "utf8");
     const map = item.map ? Buffer.from(item.map.toString(), "utf8") : void 0;
+    item.map?.version;
     hash.update(code);
     files.push({
       name: item.fileName,

package/dist/server.d.ts

@@ -1,6 +1,6 @@
 import { AwsCredentialIdentityProvider } from '@aws-sdk/types';
 import * as vitest from 'vitest';
-import { Duration, DurationFormat } from '@awsless/duration';
+import { Duration } from '@awsless/duration';
 import { QoS } from '@awsless/iot';
 export { QoS } from '@awsless/iot';
 import { IoTCustomAuthorizerResult } from 'aws-lambda';
@@ -131,7 +131,8 @@ type RpcAuthorizerResponse = {
     authorized: true;
     context?: unknown;
     lockKey?: string;
-    ttl: DurationFormat;
+    permissions?: string[];
+    ttl: Duration;
 };
 
 declare const getSearchName: <N extends string, S extends string = "stack">(resourceName: N, stackName?: S) => `app--${S}--search--${N}`;
@@ -142,9 +143,9 @@ interface SearchResources {
 }
 declare const Search: SearchResources;
 
-declare const getSiteBucketName: <N extends string, S extends string = "stack">(resourceName: N, stackName?: S) => `app--${S}--site--${N}--${string}`;
+declare const getSiteBucketName: <N extends string, S extends string = "stack">(resourceName: N, stackName?: S) => `app--${S}--site--${N}--app-id`;
 
-declare const getStoreName: <N extends string, S extends string = "stack">(resourceName: N, stackName?: S) => `app--${S}--store--${N}--${string}`;
+declare const getStoreName: <N extends string, S extends string = "stack">(resourceName: N, stackName?: S) => `app--${S}--store--${N}--app-id`;
 interface StoreResources {
 }
 declare const Store: StoreResources;

package/dist/server.js

@@ -12,6 +12,7 @@ import { publish } from "@awsless/sns";
 // src/lib/server/util.ts
 import { kebabCase } from "change-case";
 var APP = process.env.APP ?? "app";
+var APP_ID = process.env.APP_ID ?? "app-id";
 var STACK = process.env.STACK ?? "stack";
 var IS_TEST = process.env.NODE_ENV === "test";
 var build = (opt) => {
@@ -617,11 +618,11 @@ var Search = /* @__PURE__ */ createProxy((stack) => {
 });
 
 // src/lib/server/site.ts
-var getSiteBucketName = bindPostfixedLocalResourceName("site", process.env.APP_ID);
+var getSiteBucketName = bindPostfixedLocalResourceName("site", APP_ID);
 
 // src/lib/server/store.ts
 import { deleteObject, getObject, headObject, putObject } from "@awsless/s3";
-var getStoreName = bindPostfixedLocalResourceName("store", process.env.APP_ID);
+var getStoreName = bindPostfixedLocalResourceName("store", APP_ID);
 var Store = /* @__PURE__ */ createProxy((stack) => {
   return createProxy((name) => {
     const bucket = getStoreName(name, stack);