@awsless/cli 0.0.46-next.11 → 0.0.46-next.12

package/dist/bin.js

@@ -172965,6 +172965,117 @@ var zipFiles = (files) => {
   });
 };
 
+// src/feature/bundle/policy.ts
+var compactPolicyStatements = (statements) => {
+  const merged = mergeEqualStatements(statements);
+  const absorbed = merged.map(absorbWildcardResources);
+  return mergeConditionValues(absorbed);
+};
+var mergeEqualStatements = (statements) => {
+  const groups = new Map;
+  for (const statement of statements) {
+    const key = JSON.stringify([
+      statement.effect ?? "allow",
+      [...statement.actions].sort(),
+      statement.conditions ?? null
+    ]);
+    const group4 = groups.get(key);
+    if (!group4) {
+      groups.set(key, { ...statement, resources: [...statement.resources] });
+      continue;
+    }
+    for (const resource of statement.resources) {
+      if (!group4.resources.includes(resource)) {
+        group4.resources.push(resource);
+      }
+    }
+  }
+  return Array.from(groups.values());
+};
+var absorbWildcardResources = (statement) => {
+  const prefixes = statement.resources.filter((resource) => {
+    return resource.endsWith("*") && !resource.slice(0, -1).includes("*") && !resource.includes("?");
+  }).map((resource) => resource.slice(0, -1));
+  const resources = statement.resources.filter((resource) => {
+    return !prefixes.some((prefix) => {
+      return resource !== `${prefix}*` && resource.startsWith(prefix);
+    });
+  });
+  return { ...statement, resources };
+};
+var mergeConditionValues = (statements) => {
+  const output = [];
+  const groups = new Map;
+  for (const statement of statements) {
+    const condition = singleStringEqualsCondition(statement);
+    if (!condition) {
+      output.push(statement);
+      continue;
+    }
+    const key = JSON.stringify([
+      statement.effect ?? "allow",
+      [...statement.actions].sort(),
+      [...statement.resources].sort(),
+      condition.key
+    ]);
+    const group4 = groups.get(key);
+    if (!group4) {
+      const entry = { statement, conditionKey: condition.key, values: [...condition.values] };
+      groups.set(key, entry);
+      output.push(entry);
+      continue;
+    }
+    for (const value of condition.values) {
+      if (!group4.values.includes(value)) {
+        group4.values.push(value);
+      }
+    }
+  }
+  return output.map((entry) => {
+    if (!("conditionKey" in entry)) {
+      return entry;
+    }
+    if (entry.values.length === 1) {
+      return entry.statement;
+    }
+    return {
+      ...entry.statement,
+      conditions: {
+        StringEquals: {
+          [entry.conditionKey]: entry.values
+        }
+      }
+    };
+  });
+};
+var singleStringEqualsCondition = (statement) => {
+  const conditions = statement.conditions;
+  if (typeof conditions !== "object" || conditions === null) {
+    return;
+  }
+  const operators = Object.keys(conditions);
+  if (operators.length !== 1 || operators[0] !== "StringEquals") {
+    return;
+  }
+  const values = conditions.StringEquals;
+  if (typeof values !== "object" || values === null) {
+    return;
+  }
+  const keys = Object.keys(values);
+  const key = keys[0];
+  if (keys.length !== 1 || !key) {
+    return;
+  }
+  const value = values[key];
+  if (typeof value === "string") {
+    return { key, values: [value] };
+  }
+  if (Array.isArray(value) && value.every((entry) => typeof entry === "string")) {
+    return { key, values: value };
+  }
+  return;
+};
+
 // src/feature/bundle/util.ts
 import { generateFileHash } from "@awsless/ts-file-cache";
 import { createHash as createHash13 } from "crypto";
@@ -173510,7 +173621,7 @@ var bundleFeature = defineFeature({
         const list2 = await resolveInputs(Array.from(statements));
         resolve3(JSON.stringify({
           Version: "2012-10-17",
-          Statement: list2.map((statement) => ({
+          Statement: compactPolicyStatements(list2).map((statement) => ({
             Effect: pascalCase(statement.effect ?? "allow"),
             Action: statement.actions,
             Resource: statement.resources,
@@ -173658,7 +173769,8 @@ var bundleFeature = defineFeature({
       addHandler,
       addEnv,
       addLayer,
-      addPermission
+      addPermission,
+      statements
     });
   }
 });
@@ -181759,17 +181871,6 @@ var configFeature = defineFeature({
       ctx.registerConfig(name);
       ctx.addEnv(`CONFIG_${constantCase(name)}`, name);
     }
-    if (configs.length) {
-      ctx.addGlobalPermission({
-        actions: [
-          "ssm:GetParameter",
-          "ssm:GetParameters",
-          "ssm:GetParametersByPath",
-          "ssm:GetParameterHistory"
-        ],
-        resources: configs.map((name) => `arn:aws:ssm:${ctx.appConfig.region}:${ctx.accountId}:parameter${configParameterPrefix(ctx.app.name)}/${kebabCase(name)}`)
-      });
-    }
   }
 });
 
@@ -185766,16 +185867,19 @@ var metricFeature = defineFeature({
   onStack(ctx) {
     const bundle = ctx.shared.get("bundle", "main");
     const namespace = `awsless/${kebabCase(ctx.app.name)}/${kebabCase(ctx.stack.name)}`;
-    ctx.addGlobalPermission({
-      actions: ["cloudwatch:PutMetricData"],
-      resources: ["*"],
-      conditions: {
-        StringEquals: {
-          "cloudwatch:namespace": namespace
+    const metrics = Object.entries(ctx.stackConfig.metrics ?? {});
+    if (metrics.length > 0) {
+      ctx.addGlobalPermission({
+        actions: ["cloudwatch:PutMetricData"],
+        resources: ["*"],
+        conditions: {
+          StringEquals: {
+            "cloudwatch:namespace": namespace
+          }
         }
-      }
-    });
-    for (const [id, props] of Object.entries(ctx.stackConfig.metrics ?? {})) {
+      });
+    }
+    for (const [id, props] of metrics) {
       const group4 = new Group(ctx.stack, "metric", id);
       ctx.addEnv(`METRIC_${constantCase(ctx.stack.name)}_${constantCase(id)}`, props.type);
       for (const alarmId in props.alarms ?? []) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awsless/cli",
-  "version": "0.0.46-next.11",
+  "version": "0.0.46-next.12",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
@@ -31,8 +31,8 @@
     "@awsless/lambda": "^0.0.46",
     "@awsless/s3": "^0.0.22",
     "@awsless/validate": "^0.1.7",
-    "@awsless/weak-cache": "^0.0.1",
-    "awsless": "^0.0.15-next.2"
+    "awsless": "^0.0.15-next.2",
+    "@awsless/weak-cache": "^0.0.1"
   },
   "devDependencies": {
     "@aws-sdk/client-cloudformation": "^3.369.0",
@@ -100,25 +100,25 @@
     "zip-a-folder": "^3.1.6",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.24.3",
-    "@awsless/clui": "^0.0.9",
-    "@awsless/duration": "^0.0.4",
     "@awsless/big-float": "^0.1.7",
     "@awsless/cloudwatch": "^0.0.1",
+    "@awsless/clui": "^0.0.9",
+    "@awsless/duration": "^0.0.4",
     "@awsless/dynamodb": "^0.3.21",
-    "@awsless/json": "^0.0.11",
     "@awsless/iot": "^0.0.5",
     "@awsless/lambda": "^0.0.46",
-    "@awsless/open-search": "^0.0.24",
-    "@awsless/redis": "^0.1.13",
-    "@awsless/s3": "^0.0.22",
+    "@awsless/json": "^0.0.11",
     "@awsless/scheduler": "^0.0.5",
+    "@awsless/s3": "^0.0.22",
+    "@awsless/redis": "^0.1.13",
     "@awsless/sns": "^0.0.11",
+    "@awsless/size": "^0.0.2",
     "@awsless/sqs": "^0.0.24",
-    "@awsless/ssm": "^0.0.8",
     "@awsless/validate": "^0.1.7",
     "@awsless/weak-cache": "^0.0.1",
+    "@awsless/ssm": "^0.0.8",
     "awsless": "^0.0.15-next.2",
-    "@awsless/size": "^0.0.2"
+    "@awsless/open-search": "^0.0.24"
   },
   "scripts": {
     "test": "bun cli/build-handlers.ts && pnpm vitest",

package/README.MD

@@ -1,487 +0,0 @@
-<p align="center">Awsless - Infrastructure as a code</p>
-
-<div align="center">
-
-[![npm version](https://img.shields.io/npm/v/@awsless/awsless.svg?style=flat-square)](https://www.npmjs.org/package/@awsless/awsless)
-
-[![npm downloads](https://img.shields.io/npm/dm/@awsless/awsless.svg?style=flat-square)](https://npm-stat.com/charts.html?package=@awsless/awsless)
-
-</div>
-
-## Table of Contents
-
-- [Table of Contents](#table-of-contents)
-- [Features](#features)
-- [Installing](#installing)
-    - [Package manager](#package-manager)
-- [Getting Started](#getting-started)
-    - [Base Configuration](#base-configuration)
-    - [Modular Stacks](#modular-stacks)
-    - [Deploying](#deploying)
-    - [Stack Updates](#stack-updates)
-    - [Smart Helpers: Call Your Infra Like Functions](#smart-helpers-call-your-infra-like-functions)
-- [Testing Stacks](#testing-stacks)
-- [Core Resources](#core-resources)
-    - [Function - AWS Lambda](#function---aws-lambda)
-        - [Basic usage](#basic-usage)
-        - [Advanced usage](#advanced-usage)
-    - [Task](#task)
-        - [Basic usage](#basic-usage-1)
-        - [Advanced usage](#advanced-usage-1)
-    - [Table](#table)
-        - [Usage](#usage)
-    - [Queue](#queue)
-        - [Usage](#usage-1)
-    - [Topics](#topics)
-        - [Usage](#usage-2)
-    - [Crons](#crons)
-        - [Usage](#usage-3)
-        - [RPC](#rpc)
-- [Smart Functions - Call your infra from code](#smart-functions---call-your-infra-from-code)
-    - [Examples](#examples)
-        - [Lambda Function](#lambda-function)
-        - [Task](#task-1)
-        - [Queue](#queue-1)
-        - [Topic](#topic)
-        - [Config](#config)
-
-## Features
-
-🪶 AWS development using JSON config with best practices baked in
-
-⚡ Deploy APIs, functions, databases, queues, and more — all in one place
-
-🔒 Secure by default with IAM-based permissions and least privilege
-
-🌍 First-class support for AWS Lambda, DynamoDB, SQS, EventBridge, and more
-
-🧪 Built-in local development and testing utilities
-
-🔄 Automatic function bundling with support for ES modules and TypeScript
-
-🔄 Types generatation for all resources that can be acessed anywhere in the code
-
-## Installing
-
-### Package manager
-
-Using npm:
-
-```bash
-$ npm i @awsless/cli awsless
-```
-
-Using pnpm:
-
-```bash
-$ pnpm i @awsless/cli awsless
-```
-
-## Getting Started
-
-In an Awsless project, your infrastructure is organized into modular stack files, each with its own purpose, and a shared base configuration. Before you begin, make sure you have the AWS CLI installed.
-
-### Base Configuration
-
-This is your shared app configuration, which acts as the base stack for the entire project. This should exist in the root of your project.
-`app.json`
-
-```
-{
-  "name": "hello-world",
-  "region": "eu-west-1",
-  "profile": "test",
-  "defaults": {
-    "alerts": {
-      "debug": "hello@gmail.com"
-    }
-  }
-}
-```
-
-🔑 Key Fields
-
-- name: Name of your application.
-
-- region: AWS region where you want to deploy your infrastructure.
-
-- profile: Your AWS CLI profile to use for deployment.
-
-### Modular Stacks
-
-Each feature/module of your application can be defined as a separate stack file. These live in their own folders and are completely independent.
-
-Example - `auth/stack.json`
-
-```
-{
-	"name": "auth",
-	"functions": {
-		"verify": "./src/lambda.ts" // AWS Lambda
-	},
-
-}
-```
-
-Example - `rate/stack.json`
-
-```
-{
-	"name": "rate",
-	"functions": {
-		"limit": "./src/lambda.ts" // AWS Lambda
-	},
-
-}
-```
-
-You can create as many stack files as needed, each targeting different parts of your application.
-
-### Deploying
-
-Deploy all stacks
-
-```bash
-$ pnpm awsless deploy
-```
-
-Deploy individual stack
-
-```bash
-$ pnpm awsless deploy rate
-```
-
-Deploy multiple stacks
-
-```bash
-$ pnpm awsless deploy rate auth
-```
-
-Deploy base stack
-
-```bash
-$ pnpm awsless deploy base
-```
-
-### Stack Updates
-
-Awsless makes it simple to remove infrastructure when it's no longer needed.
-
-🧼 Delete a Specific Stack
-
-```bash
-$ pnpm awsless delete rate
-```
-
-💣 Delete All Stacks
-
-```bash
-pnpm awsless delete
-```
-
-⚠️ This will remove all deployed resources associated with your stacks. Use with caution!
-
-♻️ Updating or Replacing Resources
-When you modify a stack file and run a deployment again, Awsless will:
-
-- Update existing resources if changes are detected.
-
-- Delete resources that are removed from the stack file.
-
-- Create new resources as needed.
-
-- This ensures your infrastructure always reflects the current state of your stack configuration — no manual cleanup required.
-
-### Smart Helpers: Call Your Infra Like Functions
-
-Once your stacks are defined, Awsless provides built-in helpers like Fn, Queue, and Task to let you interact with your infrastructure directly from your application code — no wiring or manual setup needed.
-
-To enable full type support for these resources, run:
-
-```bash
-$ pnpm run dev
-```
-
-This will watch your project and automatically generate type definitions for all the resources you've created.
-
-You can then use them seamlessly inside your Lambda functions:
-
-Now from one lambda function we can all any infra like
-
-```typescript
-import { Queue, Fn } from 'awsless'
-
-// Call a Lambda function from another stack
-await Fn.rate.limit()
-
-// Push a message to a queue
-await Queue.notifications.send({ userId: 123 })
-```
-
-💡 These helpers are fully typed and auto-wired, making your code clean, safe, and easy to maintain.
-
-## Testing Stacks
-
-Awsless supports built-in testing for your stacks to ensure everything works as expected before deployment.
-
-You can define test folder in each stack
-
-```json
-{
-	"name": "rate",
-	"test": "./path/to/test/folder"
-}
-```
-
-exmaple test case
-`rate/test/utils.ts`
-
-```typescript
-describe('test', () => {
-	it('hello world', async () => {
-		expect(1 + 2).toStrictEqual(3)
-	})
-})
-```
-
-🔍 Run Tests Manually
-
-```bash
-$ pnpm awsless test rate
-```
-
-This will look for a defined test folder inside the rate stack directory and run any defined tests inside here.
-
-🛡️ Tests Run Automatically Before Deploy
-Whenever you run `pnpm awsless deploy`, Awsless will automatically:
-
-- Check if a test/ folder exists for each stack
-
-- Run the tests for that stack
-
-- Block the deployment if any tests fail
-
-## Core Resources
-
-### Function - AWS Lambda
-
-#### Basic usage
-
-```json
-{
-	"functions": {
-		"FUNCTION_NAME": "/path/to/function"
-	}
-}
-```
-
-#### Advanced usage
-
-You can also customize your Lambda function with additional parameters like memory size, timeout, environment variables, and more:
-
-```json
-	"functions": {
-		"test": {
-			"code": "/path/to/function",
-			"memorySize": 512
-		}
-	},
-```
-
-### Task
-
-A Task in Awsless is an asynchronous Lambda function designed for background processing. You can trigger a task and immediately move on — Awsless handles the execution in the background, including retries and logging on failure.
-
-#### Basic usage
-
-```json
-{
-	"tasks": {
-		"FUNCTION_NAME": "/path/to/function"
-	}
-}
-```
-
-#### Advanced usage
-
-You can also customize your Lambda function with additional parameters like memory size, timeout, environment variables, and more:
-
-```json
-	"tasks": {
-		"test": {
-			"code": "/path/to/function",
-			"memorySize": 512
-		}
-	},
-```
-
-### Table
-
-The tables feature in Awsless allows you to define fully managed, serverless DynamoDB tables directly in your stack configuration.
-
-#### Usage
-
-```json
-{
-	"tables": {
-		"TABLE_NAME": {
-			"hash": "id",
-			"sort": "user",
-			"indexes": {
-				"list": {
-					"hash": "createdAt",
-					"sort": "id"
-				}
-			}
-		}
-	}
-}
-```
-
-🔑 Key Fields:
-
-- `hash` - Primary key
-- `sort` - Sort key
-- `indexes` - Define secondary index here
-
-### Queue
-
-This allows you to define a queue along with the consumer lambda.
-
-#### Usage
-
-```json
-{
-	"queues": {
-		"sendMail": {
-			"consumer": "/path/to/lambda/file",
-			"maxConcurrency": 2,
-			"batchSize": 5
-		}
-	}
-}
-```
-
-### Topics
-
-This allows you to define a topic along with the subscriber lambda.
-
-#### Usage
-
-```json
-{
-	{
-		"topics": [ "TOPIC_NAME" ],
-		"subscribers": {
-			"TOPIC_NAME": "topic-consumer.ts",
-		}
-	}
-}
-```
-
-### Crons
-
-Awsless uses AWS EventBridge to provide fully managed, serverless cron jobs — perfect for running scheduled tasks like cleanups, reports, or recurring syncs.
-
-#### Usage
-
-```json
-{
-	"crons": {
-		"CRON_NAME": {
-			"schedule": "1 day",
-			"consumer": "cron-consumer.ts"
-		}
-	}
-}
-```
-
-🔑 Key Options:
-
-- `schedule`: The interval or cron expression to define when the job should run (e.g., "1 day" or "cron(0 12 \* _ ? _)").
-
-- `consumer`: Path to the Lambda function that should be triggered on schedule.
-
-#### RPC
-
-Awsless allows you to easily expose any Lambda function as a type-safe RPC (Remote Procedure Call) endpoint for your frontend.
-
-The request and response types are automatically inferred from your Lambda function's payload and return value, giving you end-to-end type safety.
-
-```json
-{
-	"rpc": {
-		"base": {
-			// base resource defined in app.json
-			"SendFriendRequest": "/path/to/lambda"
-		}
-	}
-}
-```
-
-## Smart Functions - Call your infra from code
-
-With awsless, you can interact with your infrastructure directly from your code. awsless generates all necessary types for you, allowing seamless access to your resources.
-
-To set up, define your stacks and run:
-
-```bash
-$ pnpm awsless dev
-```
-
-This command will generate the required types and mappings, enabling you to access infrastructure components in your code effortlessly.
-
-Resources are accessible via their stack name and resource name.
-For instance, if a Lambda function exists within a stack named player, you can access its resources using:
-
-`player.{resourceName}`
-
-### Examples
-
-#### Lambda Function
-
-Calling a function named `limit` inside the `rate` stack:
-
-```typescript
-import { Fn } from 'awsless'
-
-await Fn.rate.limit({ userId: 'test' })
-```
-
-#### Task
-
-```typescript
-import { Task } from 'awsless'
-
-await Task.mail.send({ msg: 'hi', userId: 'test' })
-```
-
-#### Queue
-
-Sending a message to a queue
-
-```typescript
-import { Queue } from 'awsless'
-
-await Queue.mail.send({ msg: 'hi', userId: 'test' })
-```
-
-#### Topic
-
-Publish a message to SNS topic
-
-```typescript
-import { Topic } from 'awsless'
-
-await Topic.transaction.credit({ amount: 10, userId: 'test' })
-```
-
-#### Config
-
-Reading a secret configuration value:
-
-```typescript
-import { Config } from 'awsless'
-
-const key = await Config.API_KEY
-```