@awsless/awsless 0.0.85 → 0.0.86

package/dist/bin.js

@@ -591,8 +591,8 @@ var Stack = class {
       return node;
     };
     for (const resource of this.resources) {
-      const json2 = walk(resource.toJSON());
-      Object.assign(resources, json2);
+      const json3 = walk(resource.toJSON());
+      Object.assign(resources, json3);
     }
     for (let [name, value] of this.exports.entries()) {
       Object.assign(outputs, {
@@ -892,7 +892,11 @@ import json from "@rollup/plugin-json";
 import commonjs from "@rollup/plugin-commonjs";
 import nodeResolve from "@rollup/plugin-node-resolve";
 import { dirname } from "path";
-var rollupBundle = ({ format: format2 = "esm", minify = true, handler = "default" } = {}) => {
+var rollupBundle = ({
+  format: format2 = "esm",
+  minify = true,
+  handler = "default"
+} = {}) => {
   return async (input) => {
     const bundle = await rollup({
       input,
@@ -977,6 +981,7 @@ var zipFiles = (files) => {
 };
 
 // src/formation/resource/lambda/code.ts
+import { readFile } from "fs/promises";
 import { fileURLToPath } from "url";
 import { join } from "path";
 var Code = class {
@@ -993,21 +998,10 @@ var Code = class {
   // 	return new ZipFileCode(id, file, hash, handler)
   // }
   static fromFeature(id) {
-    const root2 = fileURLToPath(new URL(".", import.meta.url));
-    const file = join(root2, `features/${id}.js`);
-    return new FileCode(id, file, rollupBundle({
-      minify: false,
-      handler: "handler"
-    }));
+    return new FeatureCode(id);
   }
   static fromInlineFeature(id) {
-    const root2 = fileURLToPath(new URL(".", import.meta.url));
-    const file = join(root2, `features/${id}.js`);
-    return new InlineFileCode(id, file, rollupBundle({
-      format: "cjs",
-      minify: false,
-      handler: "handler"
-    }));
+    return new InlineFeatureCode(id);
   }
 };
 var InlineCode = class {
@@ -1034,11 +1028,12 @@ var InlineFileCode = class extends Asset {
   handler;
   async build({ write }) {
     const bundler = this.bundler ?? rollupBundle();
-    const { hash, files: [file], handler } = await bundler(this.file);
-    await Promise.all([
-      write("HASH", hash),
-      write("file.js", file.code)
-    ]);
+    const {
+      hash,
+      files: [file],
+      handler
+    } = await bundler(this.file);
+    await Promise.all([write("HASH", hash), write("file.js", file.code)]);
     this.handler = handler;
     this.code = file.code.toString("utf8");
     return {
@@ -1082,11 +1077,7 @@ var FileCode = class extends Asset {
     };
   }
   async publish({ publish }) {
-    this.s3 = await publish(
-      `${this.id}.zip`,
-      this.bundle,
-      this.hash
-    );
+    this.s3 = await publish(`${this.id}.zip`, this.bundle, this.hash);
   }
   toCodeJson() {
     return {
@@ -1099,6 +1090,49 @@ var FileCode = class extends Asset {
     };
   }
 };
+var FeatureCode = class extends Asset {
+  s3;
+  constructor(id) {
+    super("function", id);
+  }
+  async publish({ publish }) {
+    const root2 = fileURLToPath(new URL(".", import.meta.url));
+    const path = join(root2, `features/${this.id}`);
+    const bundle = await readFile(join(path, "bundle.zip"));
+    const hash = await readFile(join(path, "HASH"));
+    this.s3 = await publish(`${this.id}.zip`, bundle, hash.toString("utf8"));
+  }
+  toCodeJson() {
+    return {
+      Handler: "index.handler",
+      Code: {
+        S3Bucket: this.s3?.bucket ?? "",
+        S3Key: this.s3?.key ?? "",
+        S3ObjectVersion: this.s3?.version ?? ""
+      }
+    };
+  }
+};
+var InlineFeatureCode = class extends Asset {
+  code;
+  constructor(id) {
+    super("function", id);
+  }
+  async publish() {
+    const root2 = fileURLToPath(new URL(".", import.meta.url));
+    const path = join(root2, `features/${this.id}`);
+    const file = await readFile(join(path, "index.js"));
+    this.code = file.toString("utf8");
+  }
+  toCodeJson() {
+    return {
+      Handler: "index.handler",
+      Code: {
+        ZipFile: this.code ?? ""
+      }
+    };
+  }
+};
 
 // src/formation/resource/lambda/event-invoke-config.ts
 var EventInvokeConfig = class extends Resource {
@@ -1321,16 +1355,23 @@ var TypeObject = class {
 };
 
 // src/plugins/function.ts
-var MemorySizeSchema = SizeSchema.refine(sizeMin(Size.megaBytes(128)), "Minimum memory size is 128 MB").refine(sizeMax(Size.gigaBytes(10)), "Minimum memory size is 10 GB");
-var TimeoutSchema = DurationSchema.refine(durationMin(Duration.seconds(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(Duration.minutes(15)), "Maximum timeout duration is 15 minutes");
-var EphemeralStorageSizeSchema = SizeSchema.refine(sizeMin(Size.megaBytes(512)), "Minimum ephemeral storage size is 512 MB").refine(sizeMax(Size.gigaBytes(10)), "Minimum ephemeral storage size is 10 GB");
+var MemorySizeSchema = SizeSchema.refine(sizeMin(Size.megaBytes(128)), "Minimum memory size is 128 MB").refine(
+  sizeMax(Size.gigaBytes(10)),
+  "Minimum memory size is 10 GB"
+);
+var TimeoutSchema = DurationSchema.refine(
+  durationMin(Duration.seconds(10)),
+  "Minimum timeout duration is 10 seconds"
+).refine(durationMax(Duration.minutes(15)), "Maximum timeout duration is 15 minutes");
+var EphemeralStorageSizeSchema = SizeSchema.refine(
+  sizeMin(Size.megaBytes(512)),
+  "Minimum ephemeral storage size is 512 MB"
+).refine(sizeMax(Size.gigaBytes(10)), "Minimum ephemeral storage size is 10 GB");
 var ReservedConcurrentExecutionsSchema = z6.number().int().min(0);
 var EnvironmentSchema = z6.record(z6.string(), z6.string()).optional();
 var ArchitectureSchema = z6.enum(["x86_64", "arm64"]);
 var RetryAttemptsSchema = z6.number().int().min(0).max(2);
-var RuntimeSchema = z6.enum([
-  "nodejs18.x"
-]);
+var RuntimeSchema = z6.enum(["nodejs18.x"]);
 var PermissionSchema = z6.object({
   effect: z6.enum(["allow", "deny"]).default("allow"),
   actions: z6.string().array(),
@@ -1392,12 +1433,12 @@ var FunctionSchema = z6.union([
     /** The size of the function's /tmp directory.
      * You can specify a size value from 512 MB to 10 GB.
      * @default 512 MB
-    */
+     */
     ephemeralStorageSize: EphemeralStorageSizeSchema.optional(),
     /** The maximum number of times to retry when the function returns an error.
      * You can specify a number from 0 to 2.
      * @default 2
-    */
+     */
     retryAttempts: RetryAttemptsSchema.optional(),
     /** The number of simultaneous executions to reserve for the function.
      * You can specify a number from 0.
@@ -1432,7 +1473,7 @@ var schema = z6.object({
     function: z6.object({
       /** The name of the exported method within your code that Lambda calls to run your function.
        * @default 'default'
-      	 */
+       */
       handler: z6.string().default("default"),
       /** Minify the function code.
        * @default true
@@ -1474,12 +1515,12 @@ var schema = z6.object({
       /** The size of the function's /tmp directory.
        * You can specify a size value from 512 MB to 10 GB.
        * @default 512 MB
-      */
+       */
       ephemeralStorageSize: EphemeralStorageSizeSchema.default("512 MB"),
       /** The maximum number of times to retry when the function returns an error.
        * You can specify a number from 0 to 2.
        * @default 2
-      */
+       */
       retryAttempts: RetryAttemptsSchema.default(2),
       /** The number of simultaneous executions to reserve for the function.
        * You can specify a number from 0.
@@ -1515,10 +1556,7 @@ var schema = z6.object({
      *   }
      * }
      */
-    functions: z6.record(
-      ResourceIdSchema,
-      FunctionSchema
-    ).optional()
+    functions: z6.record(ResourceIdSchema, FunctionSchema).optional()
   }).array()
 });
 var typeGenCode = `
@@ -1571,15 +1609,19 @@ var functionPlugin = definePlugin({
 });
 var toLambdaFunction = (ctx, id, fileOrProps) => {
   const config = ctx.config;
-  const stack = ctx.stack;
+  const stack = ctx.stack ?? ctx.bootstrap;
   const bootstrap2 = ctx.bootstrap;
   const props = typeof fileOrProps === "string" ? { ...config.defaults?.function, file: fileOrProps } : { ...config.defaults?.function, ...fileOrProps };
   const lambda = new Function(id, {
     name: `${config.name}-${stack.name}-${id}`,
-    code: Code.fromFile(id, props.file, rollupBundle({
-      handler: props.handler,
-      minify: props.minify
-    })),
+    code: Code.fromFile(
+      id,
+      props.file,
+      rollupBundle({
+        handler: props.handler,
+        minify: props.minify
+      })
+    ),
     ...props,
     vpc: void 0
   });
@@ -1598,13 +1640,8 @@ var toLambdaFunction = (ctx, id, fileOrProps) => {
   }
   if (props.vpc) {
     lambda.setVpc({
-      securityGroupIds: [
-        bootstrap2.import(`vpc-security-group-id`)
-      ],
-      subnetIds: [
-        bootstrap2.import(`public-subnet-1`),
-        bootstrap2.import(`public-subnet-2`)
-      ]
+      securityGroupIds: [bootstrap2.import(`vpc-security-group-id`)],
+      subnetIds: [bootstrap2.import(`public-subnet-1`), bootstrap2.import(`public-subnet-2`)]
     }).addPermissions({
       actions: [
         "ec2:CreateNetworkInterface",
@@ -1617,10 +1654,7 @@ var toLambdaFunction = (ctx, id, fileOrProps) => {
     });
   }
   lambda.addPermissions({
-    actions: [
-      "lambda:InvokeFunction",
-      "lambda:InvokeAsync"
-    ],
+    actions: ["lambda:InvokeFunction", "lambda:InvokeAsync"],
     resources: ["*"]
   });
   return lambda;
@@ -2782,9 +2816,9 @@ var RecordSet = class extends Resource {
   properties() {
     return {
       HostedZoneId: this.props.hostedZoneId,
-      Name: this.name + ".",
+      Name: typeof this.name === "string" ? this.name + "." : this.name,
       Type: this.props.type,
-      TTL: this.props.ttl,
+      TTL: this.props.ttl?.toSeconds(),
       ...this.props.records ? {
         ResourceRecords: this.props.records
       } : {},
@@ -2800,7 +2834,7 @@ var RecordSet = class extends Resource {
 
 // src/formation/resource/appsync/graphql-schema.ts
 import { print } from "graphql";
-import { readFile } from "fs/promises";
+import { readFile as readFile2 } from "fs/promises";
 import { mergeTypeDefs } from "@graphql-tools/merge";
 var GraphQLSchema = class extends Resource {
   constructor(logicalId, props) {
@@ -2825,7 +2859,7 @@ var Definition = class extends Asset {
   async build({ write }) {
     const files = [this.files].flat();
     const schemas = await Promise.all(files.map((file) => {
-      return readFile(file, "utf8");
+      return readFile2(file, "utf8");
     }));
     const defs = mergeTypeDefs(schemas);
     const schema2 = print(defs);
@@ -2844,8 +2878,69 @@ var Definition = class extends Asset {
   }
 };
 
+// src/formation/resource/appsync/util/rollup.ts
+import { rollup as rollup2 } from "rollup";
+import { swc as swc2, minify as swcMinify2 } from "rollup-plugin-swc3";
+import json2 from "@rollup/plugin-json";
+import commonjs2 from "@rollup/plugin-commonjs";
+import nodeResolve2 from "@rollup/plugin-node-resolve";
+import { dirname as dirname2 } from "path";
+var rollupResolver = ({ minify = true } = {}) => {
+  return async (input) => {
+    const bundle = await rollup2({
+      input,
+      external: (importee) => {
+        return importee.startsWith("@aws-sdk") || importee.startsWith("aws-sdk") || importee.startsWith("@aws-appsync/utils");
+      },
+      onwarn: (error) => {
+        debugError(error.message);
+      },
+      treeshake: {
+        moduleSideEffects: (id) => input === id
+      },
+      plugins: [
+        // @ts-ignore
+        commonjs2({ sourceMap: true }),
+        // @ts-ignore
+        nodeResolve2({ preferBuiltins: true }),
+        swc2({
+          // minify,
+          // module: true,
+          jsc: {
+            baseUrl: dirname2(input),
+            minify: { sourceMap: true }
+          },
+          sourceMaps: true
+        }),
+        minify ? swcMinify2({
+          module: true,
+          sourceMap: true,
+          compress: true
+        }) : void 0,
+        // @ts-ignore
+        json2()
+      ]
+    });
+    const result = await bundle.generate({
+      format: "esm",
+      sourcemap: "hidden",
+      exports: "auto",
+      manualChunks: {},
+      entryFileNames: `index.mjs`,
+      chunkFileNames: `[name].mjs`
+    });
+    let code;
+    for (const item of result.output) {
+      if (item.type !== "chunk") {
+        continue;
+      }
+      code = item.code;
+    }
+    return Buffer.from(code, "utf8");
+  };
+};
+
 // src/formation/resource/appsync/code.ts
-import { readFile as readFile2 } from "fs/promises";
 var Code2 = class {
   static fromFile(id, file) {
     return new FileCode2(id, file);
@@ -2872,7 +2967,7 @@ var FileCode2 = class extends Asset {
   }
   code;
   async build() {
-    const code = await readFile2(this.file);
+    const code = await rollupResolver({ minify: false })(this.file);
     this.code = code.toString("utf8");
     return {
       size: formatByteSize(code.byteLength)
@@ -2934,9 +3029,7 @@ var DataSource = class _DataSource extends Resource {
 import { snakeCase as snakeCase3 } from "change-case";
 var FunctionConfiguration = class extends Resource {
   constructor(logicalId, props) {
-    super("AWS::AppSync::FunctionConfiguration", logicalId, [
-      props.code
-    ]);
+    super("AWS::AppSync::FunctionConfiguration", logicalId);
     this.props = props;
     this.name = snakeCase3(this.props.name || logicalId);
   }
@@ -3055,7 +3148,10 @@ var DomainNameApiAssociation = class extends Resource {
 };
 
 // src/plugins/graphql.ts
-var defaultResolver = `
+import { basename } from "path";
+var defaultResolver = Code2.fromInline(
+  "graphql-default-resolver",
+  `
 export function request(ctx) {
 	return {
 		operation: 'Invoke',
@@ -3066,7 +3162,9 @@ export function request(ctx) {
 export function response(ctx) {
 	return ctx.result
 }
-`;
+`
+);
+var resolverCache = /* @__PURE__ */ new Map();
 var graphqlPlugin = definePlugin({
   name: "graphql",
   schema: z15.object({
@@ -3100,7 +3198,7 @@ var graphqlPlugin = definePlugin({
                 FunctionSchema,
                 z15.object({
                   consumer: FunctionSchema,
-                  resolver: LocalFileSchema
+                  resolver: LocalFileSchema.optional()
                 })
               ])
             )
@@ -3171,19 +3269,30 @@ var graphqlPlugin = definePlugin({
     }
   },
   onStack(ctx) {
-    const { stack, stackConfig, bootstrap: bootstrap2 } = ctx;
+    const { config, stack, stackConfig, bootstrap: bootstrap2 } = ctx;
     for (const [id, props] of Object.entries(stackConfig.graphql || {})) {
       const apiId = bootstrap2.import(`graphql-${id}`);
+      const defaultProps = config.defaults.graphql?.[id];
       for (const [typeName, fields] of Object.entries(props.resolvers || {})) {
         for (const [fieldName, resolverProps] of Object.entries(fields || {})) {
           const props2 = isFunctionProps(resolverProps) ? { consumer: resolverProps } : resolverProps;
           const entryId = paramCase4(`${id}-${typeName}-${fieldName}`);
           const lambda = toLambdaFunction(ctx, `graphql-${entryId}`, props2.consumer);
+          const resolver = props2.resolver ?? defaultProps?.resolver;
+          let code = defaultResolver;
+          if (resolver) {
+            if (!resolverCache.has(resolver)) {
+              const fileCode = Code2.fromFile(basename(resolver), resolver);
+              resolverCache.set(resolver, fileCode);
+              stack.add(fileCode);
+            }
+            code = resolverCache.get(resolver);
+          }
           const source = new AppsyncEventSource(entryId, lambda, {
             apiId,
             typeName,
             fieldName,
-            code: Code2.fromInline(entryId, props2.resolver || defaultResolver)
+            code
           });
           stack.add(lambda, source);
         }
@@ -3247,9 +3356,9 @@ var RecordSetGroup = class extends Resource {
     return {
       HostedZoneId: this.props.hostedZoneId,
       RecordSets: this.props.records.map((props) => ({
-        Name: props.name + ".",
+        Name: typeof props.name === "string" ? props.name + "." : props.name,
         Type: props.type,
-        TTL: props.ttl,
+        TTL: props.ttl?.toSeconds(),
         ...props.records ? {
           ResourceRecords: props.records
         } : {},
@@ -3292,6 +3401,108 @@ var GlobalExports = class extends Group {
   }
 };
 
+// src/formation/resource/ses/configuration-set.ts
+var ConfigurationSet = class extends Resource {
+  constructor(logicalId, props) {
+    super("AWS::SES::ConfigurationSet", logicalId);
+    this.props = props;
+    this.name = formatName(this.props.name || logicalId);
+  }
+  name;
+  properties() {
+    return {
+      Name: this.name,
+      VdmOptions: {
+        DashboardOptions: {
+          EngagementMetrics: this.props.engagementMetrics ?? false ? "ENABLED" : "DISABLED"
+        }
+      },
+      ReputationOptions: {
+        ReputationMetricsEnabled: this.props.reputationMetrics ?? false
+      },
+      SendingOptions: {
+        SendingEnabled: this.props.sending ?? true
+      }
+    };
+  }
+};
+
+// src/formation/resource/ses/email-identity.ts
+import { constantCase as constantCase7 } from "change-case";
+var EmailIdentity = class extends Resource {
+  constructor(logicalId, props) {
+    super("AWS::SES::EmailIdentity", logicalId);
+    this.props = props;
+  }
+  getDnsToken(index) {
+    return {
+      name: getAtt(this.logicalId, "DkimDNSTokenName" + index),
+      value: getAtt(this.logicalId, "DkimDNSTokenValue" + index)
+    };
+  }
+  get fullDomain() {
+    return `${this.props.subDomain}.${this.props.domain}`;
+  }
+  get dkimDnsToken1() {
+    return this.getDnsToken(1);
+  }
+  get dkimDnsToken2() {
+    return this.getDnsToken(2);
+  }
+  get dkimDnsToken3() {
+    return this.getDnsToken(3);
+  }
+  get records() {
+    const tokens = [this.dkimDnsToken1, this.dkimDnsToken2, this.dkimDnsToken3];
+    const ttl = Duration.minutes(5);
+    return [
+      ...tokens.map((token) => ({
+        name: token.name,
+        type: "CNAME",
+        ttl,
+        records: [token.value]
+      })),
+      {
+        name: this.fullDomain,
+        type: "TXT",
+        ttl,
+        records: ['"v=spf1 include:amazonses.com -all"']
+      },
+      {
+        name: this.fullDomain,
+        type: "MX",
+        ttl,
+        records: [sub("10 feedback-smtp.${AWS::Region}.amazonses.com.")]
+      }
+    ];
+  }
+  properties() {
+    return {
+      EmailIdentity: this.props.domain,
+      ...this.props.configurationSetName ? {
+        ConfigurationSetAttributes: {
+          ConfigurationSetName: this.props.configurationSetName
+        }
+      } : {},
+      ...this.props.dkim ? {
+        DkimAttributes: {
+          SigningEnabled: true
+        },
+        DkimSigningAttributes: {
+          NextSigningKeyLength: constantCase7(this.props.dkim)
+        }
+      } : {},
+      FeedbackAttributes: {
+        EmailForwardingEnabled: this.props.feedback ?? false
+      },
+      MailFromAttributes: {
+        BehaviorOnMxFailure: this.props.rejectOnMxFailure ?? true ? "REJECT_MESSAGE" : "USE_DEFAULT_VALUE",
+        MailFromDomain: this.fullDomain
+      }
+    };
+  }
+};
+
 // src/plugins/domain.ts
 var DomainNameSchema = z16.string().regex(/[a-z\-\_\.]/g, "Invalid domain name");
 var domainPlugin = definePlugin({
@@ -3344,7 +3555,7 @@ var domainPlugin = definePlugin({
       ).optional()
     }).default({})
   }),
-  onApp({ config, bootstrap: bootstrap2, usEastBootstrap }) {
+  onApp({ config, bootstrap: bootstrap2, usEastBootstrap, bind }) {
     const domains = Object.entries(config.defaults.domains || {});
     if (domains.length === 0) {
       return;
@@ -3361,6 +3572,12 @@ var domainPlugin = definePlugin({
       region: usEastBootstrap.region
     });
     bootstrap2.add(usEastExports);
+    const configurationSet = new ConfigurationSet("default", {
+      name: config.name,
+      engagementMetrics: true,
+      reputationMetrics: true
+    });
+    bootstrap2.add(configurationSet);
     for (const [domain, records] of domains) {
       const hostedZone = new HostedZone(domain);
       const usEastCertificate = new Certificate(domain, {
@@ -3378,7 +3595,18 @@ var domainPlugin = definePlugin({
         hostedZoneId: usEastExports.import(`hosted-zone-${domain}-id`),
         alternativeNames: [`*.${domain}`]
       });
-      bootstrap2.add(certificate).export(`certificate-${domain}-arn`, certificate.arn).export(`hosted-zone-${domain}-id`, usEastExports.import(`hosted-zone-${domain}-id`)).export(`us-east-certificate-${domain}-arn`, usEastExports.import(`certificate-${domain}-arn`));
+      const emailIdentity = new EmailIdentity(domain, {
+        domain,
+        subDomain: "mailer",
+        configurationSetName: configurationSet.name,
+        feedback: true,
+        rejectOnMxFailure: true
+      }).dependsOn(configurationSet);
+      const emailRecordGroup = new RecordSetGroup(`${domain}-mail`, {
+        hostedZoneId: usEastExports.import(`hosted-zone-${domain}-id`),
+        records: emailIdentity.records
+      }).dependsOn(emailIdentity);
+      bootstrap2.add(certificate).add(emailIdentity).add(emailRecordGroup).export(`certificate-${domain}-arn`, certificate.arn).export(`hosted-zone-${domain}-id`, usEastExports.import(`hosted-zone-${domain}-id`)).export(`us-east-certificate-${domain}-arn`, usEastExports.import(`certificate-${domain}-arn`));
       if (records.length > 0) {
         const group = new RecordSetGroup(domain, {
           hostedZoneId: hostedZone.id,
@@ -3387,6 +3615,12 @@ var domainPlugin = definePlugin({
         usEastBootstrap.add(group);
       }
     }
+    bind(
+      (lambda) => lambda.addPermissions({
+        actions: ["ses:*"],
+        resources: ["*"]
+      })
+    );
   }
 });
 
@@ -3775,7 +4009,7 @@ var LoadBalancer = class extends Resource {
 };
 
 // src/formation/resource/elb/listener.ts
-import { constantCase as constantCase7 } from "change-case";
+import { constantCase as constantCase8 } from "change-case";
 var Listener = class extends Resource {
   constructor(logicalId, props) {
     super("AWS::ElasticLoadBalancingV2::Listener", logicalId);
@@ -3791,7 +4025,7 @@ var Listener = class extends Resource {
     return {
       LoadBalancerArn: this.props.loadBalancerArn,
       Port: this.props.port,
-      Protocol: constantCase7(this.props.protocol),
+      Protocol: constantCase8(this.props.protocol),
       Certificates: this.props.certificates.map((arn) => ({
         CertificateArn: arn
       })),
@@ -4274,7 +4508,7 @@ var SubnetGroup = class extends Resource {
 };
 
 // src/plugins/cache.ts
-import { constantCase as constantCase8 } from "change-case";
+import { constantCase as constantCase9 } from "change-case";
 var TypeSchema = z20.enum([
   "t4g.small",
   "t4g.medium",
@@ -4294,6 +4528,17 @@ var PortSchema = z20.number().int().min(1).max(5e4);
 var ShardsSchema = z20.number().int().min(0).max(100);
 var ReplicasPerShardSchema = z20.number().int().min(0).max(5);
 var EngineSchema = z20.enum(["7.0", "6.2"]);
+var typeGenCode4 = `
+import { Cluster, CommandOptions } from '@awsless/redis'
+
+type Callback<T> = (redis: Cluster) => T
+
+type Command = {
+	readonly host: string
+	readonly port: number
+	<T>(callback: Callback<T>): T
+	<T>(options:Omit<CommandOptions, 'cluster'>, callback: Callback<T>): T
+}`;
 var cachePlugin = definePlugin({
   name: "cache",
   schema: z20.object({
@@ -4324,10 +4569,11 @@ var cachePlugin = definePlugin({
   }),
   onTypeGen({ config }) {
     const gen = new TypeGen("@awsless/awsless", "CacheResources");
+    gen.addCode(typeGenCode4);
     for (const stack of config.stacks) {
       const list3 = new TypeObject();
       for (const name of Object.keys(stack.caches || {})) {
-        list3.addType(name, `{ readonly host: string, readonly port: number }`);
+        list3.addType(name, `Command`);
       }
       gen.addType(stack.name, list3.toString());
     }
@@ -4357,8 +4603,8 @@ var cachePlugin = definePlugin({
       }).dependsOn(subnetGroup, securityGroup);
       stack.add(subnetGroup, securityGroup, cluster);
       bind((lambda) => {
-        lambda.addEnvironment(`CACHE_${constantCase8(stack.name)}_${constantCase8(id)}_HOST`, cluster.address).addEnvironment(
-          `CACHE_${constantCase8(stack.name)}_${constantCase8(id)}_PORT`,
+        lambda.addEnvironment(`CACHE_${constantCase9(stack.name)}_${constantCase9(id)}_HOST`, cluster.address).addEnvironment(
+          `CACHE_${constantCase9(stack.name)}_${constantCase9(id)}_PORT`,
           props.port.toString()
         );
       });
@@ -5528,7 +5774,7 @@ var featurePlugin = definePlugin({
 import { z as z26 } from "zod";
 
 // src/formation/resource/cognito/user-pool.ts
-import { constantCase as constantCase9 } from "change-case";
+import { constantCase as constantCase10 } from "change-case";
 
 // src/formation/resource/cognito/user-pool-client.ts
 var UserPoolClient = class extends Resource {
@@ -5699,25 +5945,26 @@ var UserPool = class extends Resource {
         AliasAttributes: ["email"],
         // UsernameAttributes: [ 'email' ],
         AutoVerifiedAttributes: ["email"],
-        Schema: [{
-          AttributeDataType: "String",
-          Name: "email",
-          Required: true,
-          Mutable: false,
-          StringAttributeConstraints: {
-            MinLength: 5,
-            MaxLength: 100
+        Schema: [
+          {
+            AttributeDataType: "String",
+            Name: "email",
+            Required: true,
+            Mutable: false,
+            StringAttributeConstraints: {
+              MinLength: 5,
+              MaxLength: 100
+            }
           }
-        }]
+        ]
       } : {},
       UsernameConfiguration: {
         CaseSensitive: this.props.username?.caseSensitive ?? false
       },
       ...this.attr("EmailConfiguration", this.props.email?.toJSON()),
-      // DeviceConfiguration: {
-      // 	ChallengeRequiredOnNewDevice: {},
-      // 	DeviceOnlyRememberedOnUserPrompt: {},
-      // },
+      DeviceConfiguration: {
+        DeviceOnlyRememberedOnUserPrompt: false
+      },
       AdminCreateUserConfig: {
         AllowAdminCreateUserOnly: !(this.props.allowUserRegistration ?? true)
       },
@@ -5741,14 +5988,41 @@ var UserPool = class extends Resource {
         ...this.attr("UserMigration", this.props.triggers?.userMigration),
         ...this.attr("DefineAuthChallenge", this.props.triggers?.defineChallange),
         ...this.attr("CreateAuthChallenge", this.props.triggers?.createChallange),
-        ...this.attr("VerifyAuthChallengeResponse", this.props.triggers?.verifyChallange)
+        ...this.attr("VerifyAuthChallengeResponse", this.props.triggers?.verifyChallange),
+        ...this.props.triggers?.emailSender ? {
+          CustomEmailSender: {
+            LambdaArn: this.props.triggers.emailSender,
+            LambdaVersion: "V1_0"
+          }
+        } : {}
       }
     };
   }
 };
+var UserPoolEmail = class _UserPoolEmail {
+  constructor(props) {
+    this.props = props;
+  }
+  static withSES(props) {
+    return new _UserPoolEmail({
+      type: "developer",
+      replyTo: props.replyTo,
+      from: props.fromName ? `${props.fromName} <${props.fromEmail}>` : props.fromEmail,
+      sourceArn: props.sourceArn
+    });
+  }
+  toJSON() {
+    return {
+      ...this.props.type ? { EmailSendingAccount: constantCase10(this.props.type) } : {},
+      ...this.props.from ? { From: this.props.from } : {},
+      ...this.props.replyTo ? { ReplyToEmailAddress: this.props.replyTo } : {},
+      ...this.props.sourceArn ? { SourceArn: this.props.sourceArn } : {}
+    };
+  }
+};
 
 // src/plugins/auth.ts
-import { constantCase as constantCase10 } from "change-case";
+import { constantCase as constantCase11 } from "change-case";
 var TriggersSchema = z26.object({
   /** A pre jwt token generation AWS Lambda trigger. */
   beforeToken: FunctionSchema.optional(),
@@ -5762,6 +6036,8 @@ var TriggersSchema = z26.object({
   afterRegister: FunctionSchema.optional(),
   /** A custom message AWS Lambda trigger. */
   customMessage: FunctionSchema.optional(),
+  // /** A custom email sender AWS Lambda trigger */
+  // emailSender: FunctionSchema.optional(),
   /** Defines the authentication challenge. */
   defineChallenge: FunctionSchema.optional(),
   /** Creates an authentication challenge. */
@@ -5795,6 +6071,16 @@ var authPlugin = definePlugin({
            * @default true
            */
           allowUserRegistration: z26.boolean().default(true),
+          /** The email configuration for sending messages.
+           */
+          messaging: z26.object({
+            // Specifies the sender's email address.
+            fromEmail: EmailSchema,
+            // Specifies the sender's name.
+            fromName: z26.string().optional(),
+            // The destination to which the receiver of the email should reply.
+            replyTo: EmailSchema.optional()
+          }).optional(),
           /** The username policy. */
           username: z26.object({
             /** Allow the user email to be used as username.
@@ -5811,9 +6097,9 @@ var authPlugin = definePlugin({
           /** The password policy. */
           password: z26.object({
             /** Required users to have at least the minimum password length.
-             * @default 8
+             * @default 12
              */
-            minLength: z26.number().int().min(6).max(99).default(8),
+            minLength: z26.number().int().min(6).max(99).default(12),
             /** Required users to use at least one uppercase letter in their password.
              * @default true
              */
@@ -5900,11 +6186,13 @@ var authPlugin = definePlugin({
     for (const [id, props] of Object.entries(stackConfig.auth ?? {})) {
       if (props.access) {
         const userPoolId = bootstrap2.import(`auth-${id}-user-pool-id`);
-        const clientId = bootstrap2.import(`auth-${id}-user-pool-id`);
-        const name = constantCase10(id);
+        const clientId = bootstrap2.import(`auth-${id}-client-id`);
+        const clientSecret = bootstrap2.import(`auth-${id}-client-secret`);
+        const name = constantCase11(id);
         bind((lambda) => {
           lambda.addEnvironment(`AUTH_${name}_USER_POOL_ID`, userPoolId);
           lambda.addEnvironment(`AUTH_${name}_CLIENT_ID`, clientId);
+          lambda.addEnvironment(`AUTH_${name}_CLIENT_SECRET`, clientSecret);
           lambda.addPermissions({
             actions: ["cognito:*"],
             resources: ["*"]
@@ -5915,6 +6203,18 @@ var authPlugin = definePlugin({
   },
   onApp(ctx) {
     const { config, bootstrap: bootstrap2 } = ctx;
+    if (Object.keys(config.defaults.auth).length === 0) {
+      return;
+    }
+    const clientSecretLambda = new Function(`auth-client-secret`, {
+      name: `${config.name}-auth-client-secret`,
+      code: Code.fromFeature("cognito-client-secret")
+    });
+    clientSecretLambda.addPermissions({
+      actions: ["cognito-idp:DescribeUserPoolClient"],
+      resources: ["*"]
+    });
+    bootstrap2.add(clientSecretLambda);
     for (const [id, props] of Object.entries(config.defaults.auth)) {
       const functions = /* @__PURE__ */ new Map();
       const triggers = {};
@@ -5935,12 +6235,26 @@ var authPlugin = definePlugin({
           triggers[trigger] = lambda.arn;
         }
       }
+      let emailConfig;
+      if (props.messaging) {
+        const [_, ...parts] = props.messaging.fromEmail.split("@");
+        const domainName = parts.join("@");
+        emailConfig = UserPoolEmail.withSES({
+          ...props.messaging,
+          sourceArn: formatArn({
+            service: "ses",
+            resource: "identity",
+            resourceName: domainName
+          })
+        });
+      }
       const userPool = new UserPool(id, {
         name: `${config.name}-${id}`,
         allowUserRegistration: props.allowUserRegistration,
         username: props.username,
         password: props.password,
-        triggers
+        triggers,
+        email: emailConfig
       });
       const client = userPool.addClient({
         name: `${config.name}-${id}`,
@@ -5954,7 +6268,14 @@ var authPlugin = definePlugin({
       const domain = userPool.addDomain({
         domain: `${config.name}-${id}`
       });
-      bootstrap2.add(userPool).export(`auth-${id}-user-pool-arn`, userPool.arn).export(`auth-${id}-user-pool-id`, userPool.id).export(`auth-${id}-client-id`, client.id).export(`auth-${id}-domain`, domain.domain);
+      const clientSecret = new CustomResource(`${id}-client-secret`, {
+        serviceToken: clientSecretLambda.arn,
+        properties: {
+          userPoolId: userPool.id,
+          clientId: client.id
+        }
+      }).dependsOn(client, userPool);
+      bootstrap2.add(userPool).add(clientSecret).export(`auth-${id}-user-pool-arn`, userPool.arn).export(`auth-${id}-user-pool-id`, userPool.id).export(`auth-${id}-client-id`, client.id).export(`auth-${id}-client-secret`, clientSecret.getAtt("secret")).export(`auth-${id}-domain`, domain.domain);
       for (const [event, lambda] of functions) {
         const permission = new Permission(`auth-${id}-${event}`, {
           action: "lambda:InvokeFunction",
@@ -6207,27 +6528,28 @@ var AppSchema = z30.object({
 });
 
 // src/util/import.ts
-import { rollup as rollup2, watch } from "rollup";
-import { swc as swc2 } from "rollup-plugin-swc3";
+import { rollup as rollup3, watch } from "rollup";
+import { swc as swc3 } from "rollup-plugin-swc3";
 import replace from "rollup-plugin-replace";
 import { EventIterator } from "event-iterator";
-import { dirname as dirname2, join as join5 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
 var importFile = async (path) => {
-  const bundle = await rollup2({
+  const bundle = await rollup3({
     input: path,
     onwarn: (error) => {
       debugError(error.message);
     },
     plugins: [
+      // @ts-ignore
       replace({
-        __dirname: (id) => `'${dirname2(id)}'`,
-        "defineStackConfig({": (id) => `defineStackConfig({ cwd: '${dirname2(id)}',`
+        __dirname: (id) => `'${dirname3(id)}'`
+        // 'defineStackConfig({': id => `defineStackConfig({ cwd: '${dirname(id)}',`,
       }),
-      swc2({
+      swc3({
         minify: false,
         jsc: {
-          baseUrl: dirname2(path)
+          baseUrl: dirname3(path)
         }
       })
     ]
@@ -6256,14 +6578,15 @@ var watchFile = (path) => {
           debugError(error.message);
         },
         plugins: [
+          // @ts-ignore
           replace({
-            __dirname: (id) => `'${dirname2(id)}'`,
-            "defineStackConfig({": (id) => `defineStackConfig({ cwd: '${dirname2(id)}',`
+            __dirname: (id) => `'${dirname3(id)}'`
+            // 'defineStackConfig({': id => `defineStackConfig({ cwd: '${dirname(id)}',`,
           }),
-          swc2({
+          swc3({
             minify: false,
             jsc: {
-              baseUrl: dirname2(path)
+              baseUrl: dirname3(path)
             }
           })
         ]
@@ -6979,7 +7302,7 @@ var flexLine = (term, left, right, reserveSpace = 0) => {
 };
 
 // src/cli/ui/complex/builder.ts
-import { dirname as dirname3, join as join7 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 var assetBuilder = (app) => {
   return async (term) => {
     const assets = [];
@@ -7043,7 +7366,7 @@ var assetBuilder = (app) => {
           const data = await asset.build({
             async write(file, data2) {
               const fullpath = join7(directories.asset, asset.type, app.name, stack.name, asset.id, file);
-              const basepath = dirname3(fullpath);
+              const basepath = dirname4(fullpath);
               await mkdir3(basepath, { recursive: true });
               await writeFile3(fullpath, data2);
             }
@@ -7632,55 +7955,70 @@ var assetPublisher = (config, app) => {
   });
   return async (term) => {
     const done = term.out.write(loadingDialog("Publishing stack assets to AWS..."));
-    await Promise.all(app.stacks.map(async (stack) => {
-      await Promise.all([...stack.assets].map(async (asset) => {
-        await asset.publish?.({
-          async read(file) {
-            const path = join9(directories.asset, asset.type, app.name, stack.name, asset.id, file);
-            const data = await readFile3(path);
-            return data;
-          },
-          async publish(name, data, hash) {
-            const key = `${app.name}/${stack.name}/${asset.type}/${name}`;
-            const bucket = assetBucketName(config.account, config.region);
-            let getResult;
-            try {
-              getResult = await client.send(new GetObjectCommand({
-                Bucket: bucket,
-                Key: key
-              }));
-            } catch (error) {
-              if (error instanceof Error && error.name === "NoSuchKey") {
-              } else {
-                throw error;
+    await Promise.all(
+      app.stacks.map(async (stack) => {
+        await Promise.all(
+          [...stack.assets].map(async (asset) => {
+            await asset.publish?.({
+              async read(file) {
+                const path = join9(
+                  directories.asset,
+                  asset.type,
+                  app.name,
+                  stack.name,
+                  asset.id,
+                  file
+                );
+                const data = await readFile3(path);
+                return data;
+              },
+              async publish(name, data, hash) {
+                const key = `${app.name}/${stack.name}/${asset.type}/${name}`;
+                const bucket = assetBucketName(config.account, config.region);
+                let getResult;
+                try {
+                  getResult = await client.send(
+                    new GetObjectCommand({
+                      Bucket: bucket,
+                      Key: key
+                    })
+                  );
+                } catch (error) {
+                  if (error instanceof Error && error.name === "NoSuchKey") {
+                  } else {
+                    throw error;
+                  }
+                }
+                if (getResult?.Metadata?.hash === hash) {
+                  return {
+                    bucket,
+                    key,
+                    version: getResult.VersionId
+                  };
+                }
+                const putResult = await client.send(
+                  new PutObjectCommand2({
+                    Bucket: bucket,
+                    Key: key,
+                    Body: data,
+                    ACL: ObjectCannedACL2.private,
+                    StorageClass: StorageClass2.STANDARD,
+                    Metadata: {
+                      hash
+                    }
+                  })
+                );
+                return {
+                  bucket,
+                  key,
+                  version: putResult.VersionId
+                };
               }
-            }
-            if (getResult?.Metadata?.hash === hash) {
-              return {
-                bucket,
-                key,
-                version: getResult.VersionId
-              };
-            }
-            const putResult = await client.send(new PutObjectCommand2({
-              Bucket: bucket,
-              Key: key,
-              Body: data,
-              ACL: ObjectCannedACL2.private,
-              StorageClass: StorageClass2.STANDARD,
-              Metadata: {
-                hash
-              }
-            }));
-            return {
-              bucket,
-              key,
-              version: putResult.VersionId
-            };
-          }
-        });
-      }));
-    }));
+            });
+          })
+        );
+      })
+    );
     done("Done publishing stack assets to AWS");
   };
 };