@awsless/cli 0.0.46-next.15 → 0.0.46-next.16

package/dist/bin.js

@@ -55542,8 +55542,8 @@ var require_client2 = __commonJS((exports) => {
       return value;
     };
   };
-  var sleep2 = (seconds8) => {
-    return new Promise((resolve4) => setTimeout(resolve4, seconds8 * 1000));
+  var sleep2 = (seconds9) => {
+    return new Promise((resolve4) => setTimeout(resolve4, seconds9 * 1000));
   };
   var waiterServiceDefaults = {
     minDelay: 2,
@@ -58183,11 +58183,11 @@ var require_serde = __commonJS((exports) => {
     if (!match3) {
       throw new TypeError("Invalid RFC-3339 date-time value");
     }
-    const [_4, yearStr, monthStr, dayStr, hours, minutes9, seconds8, fractionalMilliseconds] = match3;
+    const [_4, yearStr, monthStr, dayStr, hours, minutes9, seconds9, fractionalMilliseconds] = match3;
     const year2 = strictParseShort(stripLeadingZeroes(yearStr));
     const month = parseDateValue(monthStr, "month", 1, 12);
     const day = parseDateValue(dayStr, "day", 1, 31);
-    return buildDate(year2, month, day, { hours, minutes: minutes9, seconds: seconds8, fractionalMilliseconds });
+    return buildDate(year2, month, day, { hours, minutes: minutes9, seconds: seconds9, fractionalMilliseconds });
   };
   var RFC3339_WITH_OFFSET$1 = new RegExp(/^(\d{4})-(\d{2})-(\d{2})[tT](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(([-+]\d{2}:\d{2})|[zZ])$/);
   var parseRfc3339DateTimeWithOffset = (value) => {
@@ -58201,11 +58201,11 @@ var require_serde = __commonJS((exports) => {
     if (!match3) {
       throw new TypeError("Invalid RFC-3339 date-time value");
     }
-    const [_4, yearStr, monthStr, dayStr, hours, minutes9, seconds8, fractionalMilliseconds, offsetStr] = match3;
+    const [_4, yearStr, monthStr, dayStr, hours, minutes9, seconds9, fractionalMilliseconds, offsetStr] = match3;
     const year2 = strictParseShort(stripLeadingZeroes(yearStr));
     const month = parseDateValue(monthStr, "month", 1, 12);
     const day = parseDateValue(dayStr, "day", 1, 31);
-    const date2 = buildDate(year2, month, day, { hours, minutes: minutes9, seconds: seconds8, fractionalMilliseconds });
+    const date2 = buildDate(year2, month, day, { hours, minutes: minutes9, seconds: seconds9, fractionalMilliseconds });
     if (offsetStr.toUpperCase() != "Z") {
       date2.setTime(date2.getTime() - parseOffsetToMilliseconds(offsetStr));
     }
@@ -58223,23 +58223,23 @@ var require_serde = __commonJS((exports) => {
     }
     let match3 = IMF_FIXDATE$1.exec(value);
     if (match3) {
-      const [_4, dayStr, monthStr, yearStr, hours, minutes9, seconds8, fractionalMilliseconds] = match3;
-      return buildDate(strictParseShort(stripLeadingZeroes(yearStr)), parseMonthByShortName(monthStr), parseDateValue(dayStr, "day", 1, 31), { hours, minutes: minutes9, seconds: seconds8, fractionalMilliseconds });
+      const [_4, dayStr, monthStr, yearStr, hours, minutes9, seconds9, fractionalMilliseconds] = match3;
+      return buildDate(strictParseShort(stripLeadingZeroes(yearStr)), parseMonthByShortName(monthStr), parseDateValue(dayStr, "day", 1, 31), { hours, minutes: minutes9, seconds: seconds9, fractionalMilliseconds });
     }
     match3 = RFC_850_DATE$1.exec(value);
     if (match3) {
-      const [_4, dayStr, monthStr, yearStr, hours, minutes9, seconds8, fractionalMilliseconds] = match3;
+      const [_4, dayStr, monthStr, yearStr, hours, minutes9, seconds9, fractionalMilliseconds] = match3;
       return adjustRfc850Year(buildDate(parseTwoDigitYear(yearStr), parseMonthByShortName(monthStr), parseDateValue(dayStr, "day", 1, 31), {
         hours,
         minutes: minutes9,
-        seconds: seconds8,
+        seconds: seconds9,
         fractionalMilliseconds
       }));
     }
     match3 = ASC_TIME$1.exec(value);
     if (match3) {
-      const [_4, monthStr, dayStr, hours, minutes9, seconds8, fractionalMilliseconds, yearStr] = match3;
-      return buildDate(strictParseShort(stripLeadingZeroes(yearStr)), parseMonthByShortName(monthStr), parseDateValue(dayStr.trimLeft(), "day", 1, 31), { hours, minutes: minutes9, seconds: seconds8, fractionalMilliseconds });
+      const [_4, monthStr, dayStr, hours, minutes9, seconds9, fractionalMilliseconds, yearStr] = match3;
+      return buildDate(strictParseShort(stripLeadingZeroes(yearStr)), parseMonthByShortName(monthStr), parseDateValue(dayStr.trimLeft(), "day", 1, 31), { hours, minutes: minutes9, seconds: seconds9, fractionalMilliseconds });
     }
     throw new TypeError("Invalid RFC-7231 date-time value");
   };
@@ -58409,13 +58409,13 @@ var require_serde = __commonJS((exports) => {
     if (!matches) {
       throw new TypeError(`Invalid RFC3339 timestamp format ${value}`);
     }
-    const [, yearStr, monthStr, dayStr, hours, minutes9, seconds8, , ms, offsetStr] = matches;
+    const [, yearStr, monthStr, dayStr, hours, minutes9, seconds9, , ms, offsetStr] = matches;
     range(monthStr, 1, 12);
     range(dayStr, 1, 31);
     range(hours, 0, 23);
     range(minutes9, 0, 59);
-    range(seconds8, 0, 60);
-    const date2 = new Date(Date.UTC(Number(yearStr), Number(monthStr) - 1, Number(dayStr), Number(hours), Number(minutes9), Number(seconds8), Number(ms) ? Math.round(parseFloat(`0.${ms}`) * 1000) : 0));
+    range(seconds9, 0, 60);
+    const date2 = new Date(Date.UTC(Number(yearStr), Number(monthStr) - 1, Number(dayStr), Number(hours), Number(minutes9), Number(seconds9), Number(ms) ? Math.round(parseFloat(`0.${ms}`) * 1000) : 0));
     date2.setUTCFullYear(Number(yearStr));
     if (offsetStr.toUpperCase() != "Z") {
       const [, sign, offsetH, offsetM] = /([+-])(\d\d):(\d\d)/.exec(offsetStr) || [undefined, "+", 0, 0];
@@ -104651,10 +104651,205 @@ var onErrorLogFeature = defineFeature({
 });
 
 // src/feature/on-failure/index.ts
-import { days as days8, toSeconds as toSeconds4 } from "@awsless/duration";
-import { formatRouteEnvName as formatRouteEnvName2 } from "awsless";
+import { days as days8, toSeconds as toSeconds5 } from "@awsless/duration";
 import { dirname as dirname8, join as join13 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
+
+// src/feature/function/prebuild.ts
+import { seconds as seconds4, toDays as toDays6, toSeconds as toSeconds4 } from "@awsless/duration";
+var createPrebuildLambdaFunction = (parentGroup, ctx, ns, id, props) => {
+  let name;
+  let roleName;
+  const group = new Group(parentGroup, "function", id);
+  if ("stack" in ctx) {
+    name = formatLocalResourceName({
+      appName: ctx.app.name,
+      stackName: ctx.stack.name,
+      resourceType: ns,
+      resourceName: id
+    });
+    roleName = formatLocalResourceName({
+      appName: ctx.app.name,
+      stackName: ctx.stack.name,
+      resourceType: ns,
+      resourceName: id,
+      postfix: ctx.appId
+    });
+  } else {
+    name = formatGlobalResourceName({
+      appName: ctx.app.name,
+      resourceType: ns,
+      resourceName: id
+    });
+    roleName = formatGlobalResourceName({
+      appName: ctx.app.name,
+      resourceType: ns,
+      resourceName: id,
+      postfix: ctx.appId
+    });
+  }
+  const sourceHash = $file(props.bundleHash);
+  const code = new aws.s3.BucketObject(group, "code", {
+    bucket: ctx.shared.get("asset", "bucket").name,
+    key: `lambda/${name}.zip`,
+    source: relativePath(props.bundleFile),
+    sourceHash
+  }, {
+    replaceOnChanges: ["bucket", "key"]
+  });
+  const role = new aws.iam.Role(group, "role", {
+    name: roleName,
+    description: name,
+    assumeRolePolicy: JSON.stringify({
+      Version: "2012-10-17",
+      Statement: [
+        {
+          Effect: "Allow",
+          Action: "sts:AssumeRole",
+          Principal: {
+            Service: ["lambda.amazonaws.com"]
+          }
+        }
+      ]
+    })
+  });
+  const statements = [];
+  const statementDeps = new Set;
+  const addPermission = (...permissions) => {
+    statements.push(...permissions);
+    for (const dep of findInputDeps(permissions)) {
+      statementDeps.add(dep);
+    }
+  };
+  const policy = new aws.iam.RolePolicy(group, "policy", {
+    role: role.name,
+    name: "lambda-policy",
+    policy: new Output(statementDeps, async (resolve3) => {
+      const list2 = await resolveInputs(statements);
+      resolve3(JSON.stringify({
+        Version: "2012-10-17",
+        Statement: compactPolicyStatements(list2).map((statement) => ({
+          Effect: pascalCase(statement.effect ?? "allow"),
+          Action: statement.actions,
+          Resource: statement.resources,
+          Condition: statement.conditions
+        }))
+      }));
+    })
+  });
+  const dependsOn = [];
+  if (props.vpc) {
+    dependsOn.push(new aws.iam.RolePolicy(group, "vpc-policy", {
+      role: role.name,
+      name: "lambda-vpc-policy",
+      policy: JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Action: [
+              "ec2:CreateNetworkInterface",
+              "ec2:DescribeNetworkInterfaces",
+              "ec2:DescribeSubnets",
+              "ec2:DeleteNetworkInterface",
+              "ec2:AssignPrivateIpAddresses",
+              "ec2:UnassignPrivateIpAddresses"
+            ],
+            Resource: ["*"]
+          }
+        ]
+      })
+    }));
+  }
+  const variables = {};
+  const logFormats = {
+    text: "Text",
+    json: "JSON"
+  };
+  const lambda = new aws.lambda.Function(group, "function", {
+    functionName: name,
+    description: name,
+    role: role.arn,
+    runtime: props.runtime,
+    handler: props.handler,
+    timeout: toSeconds4(props.timeout ?? seconds4(10)),
+    memorySize: toMebibytes(props.memorySize ?? mebibytes(128)),
+    architectures: [props.architecture ?? "arm64"],
+    timeouts: {
+      create: "30s",
+      update: "30s",
+      delete: "30s"
+    },
+    s3Bucket: code.bucket,
+    s3ObjectVersion: code.versionId,
+    s3Key: code.key.pipe((name2) => {
+      if (name2.startsWith("/")) {
+        return name2.substring(1);
+      }
+      return name2;
+    }),
+    sourceCodeHash: sourceHash,
+    environment: {
+      variables
+    },
+    vpcConfig: props.vpc ? {
+      securityGroupIds: [ctx.shared.get("vpc", "security-group-id")],
+      subnetIds: ctx.shared.get("vpc", "private-subnets"),
+      ipv6AllowedForDualStack: true
+    } : undefined,
+    loggingConfig: {
+      logGroup: `/aws/lambda/${name}`,
+      logFormat: logFormats[props.log?.format ?? "json"],
+      applicationLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.level?.toUpperCase() : undefined,
+      systemLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.system?.toUpperCase() : undefined
+    }
+  }, {
+    dependsOn
+  });
+  variables.APP = ctx.appConfig.name;
+  variables.APP_ID = ctx.appId;
+  variables.AWS_ACCOUNT_ID = ctx.accountId;
+  if ("stackConfig" in ctx) {
+    variables.STACK = ctx.stackConfig.name;
+  }
+  if (props.vpc) {
+    variables.AWS_USE_DUALSTACK_ENDPOINT = "true";
+  }
+  const retention = props.log?.retention;
+  if (retention && retention.value > 0n) {
+    const logGroup = new aws.cloudwatch.LogGroup(group, "log", {
+      name: `/aws/lambda/${name}`,
+      retentionInDays: toDays6(retention)
+    });
+    addPermission({
+      actions: ["logs:PutLogEvents", "logs:CreateLogStream"],
+      resources: [logGroup.arn.pipe((arn) => `${arn}:*`)]
+    });
+    if (ctx.shared.has("on-error-log", "subscriber-arn")) {
+      new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
+        name: "error-log-subscription",
+        destinationArn: ctx.shared.get("on-error-log", "subscriber-arn"),
+        logGroupName: logGroup.name,
+        filterPattern
+      });
+    }
+  }
+  return {
+    name,
+    group,
+    lambda,
+    policy,
+    code,
+    setEnvironment(name2, value) {
+      variables[name2] = value;
+    },
+    addPermission(...permissions) {
+      addPermission(...permissions);
+    }
+  };
+};
+
+// src/feature/on-failure/index.ts
 var onFailureFeature = defineFeature({
   name: "on-failure",
   onBefore(ctx) {
@@ -104665,9 +104860,9 @@ var onFailureFeature = defineFeature({
         resourceType: "on-failure",
         resourceName: "deadletter"
       }),
-      messageRetentionSeconds: toSeconds4(days8(14))
+      messageRetentionSeconds: toSeconds5(days8(14))
     });
-    const bundleTimeout = toSeconds4(ctx.appConfig.defaults.function.timeout);
+    const bundleTimeout = toSeconds5(ctx.appConfig.defaults.function.timeout);
     const queue2 = new aws.sqs.Queue(group, "on-failure", {
       name: formatGlobalResourceName({
         appName: ctx.app.name,
@@ -104801,21 +104996,29 @@ var onFailureFeature = defineFeature({
     }
     const bundle = ctx.shared.get("bundle", "main");
     const { group, bucket, queue: queue2 } = ctx.shared.get("on-failure", "resources");
-    const normalizerRoute = formatRouteKey("base", "on-failure", "normalizer");
-    const consumerRoute = formatRouteKey("base", "on-failure", "consumer");
-    const consumer = props.consumer;
-    bundle.addHandler({
-      routeKey: normalizerRoute,
-      file: join13(dirname8(fileURLToPath5(import.meta.url)), "/handlers/on-failure.js"),
-      exportName: "default"
-    });
-    registerBundleFunction(ctx, consumerRoute, consumer);
-    bundle.addEnv(formatRouteEnvName2(normalizerRoute, "CONSUMER"), consumerRoute);
-    bundle.addPermission({
+    registerBundleFunction(ctx, formatRouteKey("base", "on-failure", "consumer"), props.consumer);
+    const distDir = dirname8(fileURLToPath5(import.meta.url));
+    const handler = createPrebuildLambdaFunction(group, ctx, "on-failure", "handler", {
+      bundleFile: join13(distDir, "/prebuild/on-failure/bundle.zip"),
+      bundleHash: join13(distDir, "/prebuild/on-failure/HASH"),
+      runtime: "nodejs24.x",
+      handler: "index.default",
+      memorySize: mebibytes(256),
+      timeout: ctx.appConfig.defaults.function.timeout,
+      log: {
+        format: "json",
+        level: "warn",
+        system: "warn",
+        retention: days8(3)
+      }
+    });
+    handler.addPermission({
+      actions: ["lambda:InvokeFunction"],
+      resources: [bundle.alias.arn]
+    }, {
       actions: ["s3:GetObject", "s3:DeleteObject"],
       resources: [$interpolate`${bucket.arn}/*`]
-    });
-    bundle.addPermission({
+    }, {
       actions: [
         "sqs:DeleteMessage",
         "sqs:ReceiveMessage",
@@ -104825,11 +105028,11 @@ var onFailureFeature = defineFeature({
       resources: [queue2.arn]
     });
     new aws.lambda.EventSourceMapping(group, "on-failure", {
-      functionName: bundle.alias.arn,
+      functionName: handler.lambda.arn,
       eventSourceArn: queue2.arn,
       batchSize: 10
     }, {
-      dependsOn: [bundle.policy]
+      dependsOn: [handler.policy]
     });
     const queuePolicy = new aws.sqs.QueuePolicy(group, "bucket-notification", {
       queueUrl: queue2.url,
@@ -104873,10 +105076,10 @@ var onFailureFeature = defineFeature({
 import { createHmac as createHmac2 } from "crypto";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { dirname as dirname10, join as join16 } from "path";
-import { formatRouteEnvName as formatRouteEnvName3 } from "awsless";
+import { formatRouteEnvName as formatRouteEnvName2 } from "awsless";
 
 // src/feature/pubsub/util.ts
-import { toDays as toDays6 } from "@awsless/duration";
+import { toDays as toDays7 } from "@awsless/duration";
 import { stringify } from "@awsless/json";
 import { createHash as createHash11 } from "crypto";
 import { readFile as readFile10 } from "fs/promises";
@@ -105057,7 +105260,7 @@ var createPubSubService = (parentGroup, ctx, id, props, inputs) => {
   if (props.log.retention && props.log.retention.value > 0n) {
     logGroup = new aws.cloudwatch.LogGroup(group, "log", {
       name: `/aws/ecs/${name}`,
-      retentionInDays: toDays6(props.log.retention)
+      retentionInDays: toDays7(props.log.retention)
     });
     if (ctx.shared.has("on-error-log", "subscriber-arn")) {
       new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
@@ -105483,9 +105686,9 @@ var pubsubFeature = defineFeature({
         file: join16(__dirname3, "/handlers/pubsub-publisher.js"),
         exportName: "default"
       });
-      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "REDIS_HOST"), redisHost);
-      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "REDIS_PORT"), redisPort.pipe((port) => port.toString()));
-      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "CHANNEL"), channel);
+      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "REDIS_HOST"), redisHost);
+      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "REDIS_PORT"), redisPort.pipe((port) => port.toString()));
+      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "CHANNEL"), channel);
       const routerProps = ctx.appConfig.defaults.router?.[props.router];
       if (!routerProps?.domain) {
         throw new FileError("app.json", `The pubsub "${id}" requires the "${props.router}" router to have a domain configured.`);
@@ -105525,7 +105728,7 @@ var pubsubFeature = defineFeature({
 // src/feature/queue/index.ts
 var import_deepmerge2 = __toESM(require_cjs2(), 1);
 import { relative as relative4 } from "path";
-import { minutes as minutes7, seconds as seconds4, toSeconds as toSeconds5 } from "@awsless/duration";
+import { minutes as minutes7, seconds as seconds5, toSeconds as toSeconds6 } from "@awsless/duration";
 var typeGenCode5 = `
 import {
 	SendMessageOptions,
@@ -105591,7 +105794,7 @@ var queueFeature = defineFeature({
     await ctx.write("queue.d.ts", gen, true);
   },
   onStack(ctx) {
-    const bundleTimeout = toSeconds5(ctx.appConfig.defaults.function.timeout);
+    const bundleTimeout = toSeconds6(ctx.appConfig.defaults.function.timeout);
     for (const [id, local] of Object.entries(ctx.stackConfig.queues || {})) {
       const props = import_deepmerge2.default(ctx.appConfig.defaults.queue, typeof local === "object" ? local : {});
       const group = new Group(ctx.stack, "queue", id);
@@ -105603,9 +105806,9 @@ var queueFeature = defineFeature({
       });
       const queue2 = new aws.sqs.Queue(group, "queue", {
         name: `${baseName}.fifo`,
-        visibilityTimeoutSeconds: bundleTimeout + toSeconds5(minutes7(1)),
-        receiveWaitTimeSeconds: toSeconds5(props.receiveMessageWaitTime ?? seconds4(0)),
-        messageRetentionSeconds: toSeconds5(props.retentionPeriod),
+        visibilityTimeoutSeconds: bundleTimeout + toSeconds6(minutes7(1)),
+        receiveWaitTimeSeconds: toSeconds6(props.receiveMessageWaitTime ?? seconds5(0)),
+        messageRetentionSeconds: toSeconds6(props.retentionPeriod),
         maxMessageSize: toBytes(props.maxMessageSize),
         fifoQueue: true,
         deduplicationScope: "messageGroup",
@@ -105740,10 +105943,10 @@ var restFeature = defineFeature({
 });
 
 // src/feature/rpc/index.ts
-import { formatRouteEnvName as formatRouteEnvName4 } from "awsless";
+import { formatRouteEnvName as formatRouteEnvName3 } from "awsless";
 import { dirname as dirname11, join as join17, relative as relative5 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import { toSeconds as toSeconds6 } from "@awsless/duration";
+import { toSeconds as toSeconds7 } from "@awsless/duration";
 var rpcFeature = defineFeature({
   name: "rpc",
   async onTypeGen(ctx) {
@@ -105797,7 +106000,7 @@ var rpcFeature = defineFeature({
         file: join17(dirname11(fileURLToPath8(import.meta.url)), "/handlers/rpc.js"),
         exportName: "default"
       });
-      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "TIMEOUT"), toSeconds6(ctx.appConfig.defaults.function.timeout).toString());
+      bundle.addEnv(formatRouteEnvName3(serverRouteKey, "TIMEOUT"), toSeconds7(ctx.appConfig.defaults.function.timeout).toString());
       const lockTable = new aws.dynamodb.Table(group, "lock", {
         name: formatGlobalResourceName({
           appName: ctx.app.name,
@@ -105817,7 +106020,7 @@ var rpcFeature = defineFeature({
           }
         ]
       });
-      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "LOCK_TABLE"), lockTable.name);
+      bundle.addEnv(formatRouteEnvName3(serverRouteKey, "LOCK_TABLE"), lockTable.name);
       bundle.addPermission({
         effect: "allow",
         actions: ["dynamodb:UpdateItem", "dynamodb:DeleteItem"],
@@ -105826,7 +106029,7 @@ var rpcFeature = defineFeature({
       if (props.auth) {
         const authRouteKey = formatRouteKey("base", "rpc", `${id}-auth`);
         registerBundleFunction(ctx, authRouteKey, props.auth);
-        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "AUTH"), authRouteKey);
+        bundle.addEnv(formatRouteEnvName3(serverRouteKey, "AUTH"), authRouteKey);
       }
       const addRoutes = ctx.shared.entry("router", "addRoutes", props.router);
       addRoutes({
@@ -105851,7 +106054,7 @@ var rpcFeature = defineFeature({
         const entryId = kebabCase(`${id}-${shortId(name)}`);
         const routeKey = formatRouteKey(ctx.stack.name, "rpc", entryId);
         registerBundleFunction(ctx, routeKey, props.function);
-        bundle.addEnv(formatRouteEnvName4(serverRouteKey, `QUERY:${name}`), JSON.stringify({ function: routeKey, lock: props.lock }));
+        bundle.addEnv(formatRouteEnvName3(serverRouteKey, `QUERY:${name}`), JSON.stringify({ function: routeKey, lock: props.lock }));
       }
     }
   }
@@ -106121,7 +106324,7 @@ ${(errors3.trim() || output.trim()).slice(-2000)}`);
 
 // src/feature/store/index.ts
 import { join as join20 } from "path";
-import { toDays as toDays7 } from "@awsless/duration";
+import { toDays as toDays8 } from "@awsless/duration";
 
 // src/feature/store/util.ts
 import { extname as extname6 } from "path";
@@ -106228,7 +106431,7 @@ var storeFeature = defineFeature({
           id: rule.prefix ? `expire-${kebabCase(`${id}-${rule.prefix}`)}` : `expire-${id}-rule-${index}`,
           enabled: true,
           prefix: `${folder}${rule.prefix ?? ""}`,
-          expiration: { days: toDays7(rule.expiration) }
+          expiration: { days: toDays8(rule.expiration) }
         });
       }
       ctx.onReady(() => {
@@ -106261,7 +106464,7 @@ var storeFeature = defineFeature({
 });
 
 // src/feature/table/index.ts
-import { toSeconds as toSeconds7 } from "@awsless/duration";
+import { toSeconds as toSeconds8 } from "@awsless/duration";
 var tableFeature = defineFeature({
   name: "table",
   async onTypeGen(ctx) {
@@ -106390,7 +106593,7 @@ var tableFeature = defineFeature({
           functionName: bundle.alias.arn,
           eventSourceArn: table3.streamArn,
           batchSize: props.stream.batchSize,
-          maximumBatchingWindowInSeconds: props.stream.batchWindow ? toSeconds7(props.stream.batchWindow) : undefined,
+          maximumBatchingWindowInSeconds: props.stream.batchWindow ? toSeconds8(props.stream.batchWindow) : undefined,
           maximumRetryAttempts: props.stream.retryAttempts,
           parallelizationFactor: props.stream.concurrencyPerShard,
           functionResponseTypes: ["ReportBatchItemFailures"],
@@ -106867,8 +107070,8 @@ var layerFeature = defineFeature({
 });
 
 // src/feature/image/index.ts
-import { toDays as toDays8 } from "@awsless/duration";
-import { formatRouteEnvName as formatRouteEnvName5 } from "awsless";
+import { toDays as toDays9 } from "@awsless/duration";
+import { formatRouteEnvName as formatRouteEnvName4 } from "awsless";
 import { dirname as dirname13, join as join21 } from "path";
 import { fileURLToPath as fileURLToPath9 } from "url";
 var imageFeature = defineFeature({
@@ -106942,7 +107145,7 @@ var imageFeature = defineFeature({
           enabled: true,
           prefix: `${folder}cache/`,
           expiration: {
-            days: toDays8(props.cacheDuration)
+            days: toDays9(props.cacheDuration)
           }
         });
       }
@@ -106965,17 +107168,17 @@ var imageFeature = defineFeature({
           }
         }
       });
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_CONFIG"), JSON.stringify({
+      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_CONFIG"), JSON.stringify({
         presets: props.presets,
         extensions: props.extensions
       }));
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_BUCKET"), bucket.name);
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_FOLDER"), folder);
+      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_BUCKET"), bucket.name);
+      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_FOLDER"), folder);
       if (originRouteKey) {
-        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_ORIGIN"), originRouteKey);
+        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_ORIGIN"), originRouteKey);
       }
       if (props.origin.static) {
-        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_ORIGIN_S3"), "true");
+        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_ORIGIN_S3"), "true");
       }
       ctx.onReady(() => {
         if (props.origin.static) {
@@ -107002,8 +107205,8 @@ var imageFeature = defineFeature({
 });
 
 // src/feature/icon/index.ts
-import { toDays as toDays9 } from "@awsless/duration";
-import { formatRouteEnvName as formatRouteEnvName6 } from "awsless";
+import { toDays as toDays10 } from "@awsless/duration";
+import { formatRouteEnvName as formatRouteEnvName5 } from "awsless";
 import { dirname as dirname14, join as join22 } from "path";
 import { fileURLToPath as fileURLToPath10 } from "url";
 var iconFeature = defineFeature({
@@ -107029,7 +107232,7 @@ var iconFeature = defineFeature({
           enabled: true,
           prefix: `${folder}cache/`,
           expiration: {
-            days: toDays9(props.cacheDuration)
+            days: toDays10(props.cacheDuration)
           }
         });
       }
@@ -107051,17 +107254,17 @@ var iconFeature = defineFeature({
           }
         }
       });
-      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_CONFIG"), JSON.stringify({
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_CONFIG"), JSON.stringify({
         preserveIds: props.preserveIds,
         symbols: props.symbols
       }));
-      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_BUCKET"), bucket.name);
-      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_FOLDER"), folder);
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_BUCKET"), bucket.name);
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_FOLDER"), folder);
       if (originRouteKey) {
-        bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_ORIGIN"), originRouteKey);
+        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_ORIGIN"), originRouteKey);
       }
       if (props.origin.static) {
-        bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_ORIGIN_S3"), "true");
+        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_ORIGIN_S3"), "true");
       }
       ctx.onReady(() => {
         if (props.origin.static) {
@@ -107096,7 +107299,7 @@ import { relative as relative7 } from "path";
 
 // src/feature/job/util.ts
 import { createHash as createHash14 } from "crypto";
-import { toDays as toDays10, toSeconds as toSeconds8 } from "@awsless/duration";
+import { toDays as toDays11, toSeconds as toSeconds9 } from "@awsless/duration";
 import { stringify as stringify2 } from "@awsless/json";
 import { generateFileHash as generateFileHash2 } from "@awsless/ts-file-cache";
 var import_deepmerge3 = __toESM(require_cjs2(), 1);
@@ -107283,7 +107486,7 @@ var createFargateJob = (parentGroup, ctx, ns, id, local) => {
   if (props.log.retention && props.log.retention.value > 0n) {
     logGroup = new aws.cloudwatch.LogGroup(group, "log", {
       name: `/aws/ecs/${name}`,
-      retentionInDays: toDays10(props.log.retention)
+      retentionInDays: toDays11(props.log.retention)
     });
     if (ctx.shared.has("on-error-log", "subscriber-arn")) {
       new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
@@ -107371,7 +107574,7 @@ var createFargateJob = (parentGroup, ctx, ns, id, local) => {
             [
               ...props.startupCommand?.length ? [props.startupCommand.join(" && ")] : [],
               `if [ "$(cat /root/.code-hash 2>/dev/null)" != "$CODE_HASH" ]; then command -v aws >/dev/null 2>&1 || dnf install -y awscli && aws s3 cp s3://${s3Bucket}/${s3Key} /root/program.tmp && mv /root/program.tmp /root/program && chmod +x /root/program && echo "$CODE_HASH" > /root/.code-hash; fi`,
-              `exec timeout --kill-after=10 ${toSeconds8(props.timeout)} /root/program`
+              `exec timeout --kill-after=10 ${toSeconds9(props.timeout)} /root/program`
             ].join(" && ")
           ],
           environment: Object.entries(data).map(([name2, value]) => ({
@@ -107609,10 +107812,10 @@ var jobFeature = defineFeature({
 });
 
 // src/feature/instance/index.ts
-import { days as days9, seconds as seconds5, toSeconds as toSeconds10 } from "@awsless/duration";
+import { days as days9, seconds as seconds6, toSeconds as toSeconds11 } from "@awsless/duration";
 
 // src/feature/instance/util.ts
-import { toDays as toDays11, toSeconds as toSeconds9 } from "@awsless/duration";
+import { toDays as toDays12, toSeconds as toSeconds10 } from "@awsless/duration";
 import { stringify as stringify3 } from "@awsless/json";
 import { generateFileHash as generateFileHash3 } from "@awsless/ts-file-cache";
 var import_deepmerge5 = __toESM(require_cjs2(), 1);
@@ -107735,7 +107938,7 @@ var createFargateTask = (parentGroup, ctx, ns, id, local) => {
   if (props.log.retention && props.log.retention.value > 0n) {
     logGroup = new aws.cloudwatch.LogGroup(group, "log", {
       name: `/aws/ecs/${name}`,
-      retentionInDays: toDays11(props.log.retention)
+      retentionInDays: toDays12(props.log.retention)
     });
     if (ctx.shared.has("on-error-log", "subscriber-arn")) {
       new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
@@ -107824,10 +108027,10 @@ var createFargateTask = (parentGroup, ctx, ns, id, local) => {
               "CMD-SHELL",
               `curl -f http://${join24("localhost", props.healthCheck.path)} || exit 1`
             ],
-            interval: toSeconds9(props.healthCheck.interval),
+            interval: toSeconds10(props.healthCheck.interval),
             retries: props.healthCheck.retries,
-            startPeriod: toSeconds9(props.healthCheck.startPeriod),
-            timeout: toSeconds9(props.healthCheck.timeout)
+            startPeriod: toSeconds10(props.healthCheck.startPeriod),
+            timeout: toSeconds10(props.healthCheck.timeout)
           } : undefined
         }
       ]));
@@ -107992,10 +108195,10 @@ var instanceFeature = defineFeature({
       const task2 = createFargateTask(group, ctx, "instance", id, props);
       const queue2 = new aws.sqs.Queue(group, "queue", {
         name: task2.name,
-        visibilityTimeoutSeconds: toSeconds10(seconds5(30)),
-        messageRetentionSeconds: toSeconds10(days9(4)),
+        visibilityTimeoutSeconds: toSeconds11(seconds6(30)),
+        messageRetentionSeconds: toSeconds11(days9(4)),
         maxMessageSize: toBytes(kibibytes(256)),
-        receiveWaitTimeSeconds: toSeconds10(seconds5(20))
+        receiveWaitTimeSeconds: toSeconds11(seconds6(20))
       });
       task2.addPermission({
         actions: [
@@ -108017,7 +108220,7 @@ var instanceFeature = defineFeature({
 });
 
 // src/feature/metric/index.ts
-import { toSeconds as toSeconds11 } from "@awsless/duration";
+import { toSeconds as toSeconds12 } from "@awsless/duration";
 var typeGenCode13 = `
 import { type PutDataProps, putData, batchPutData } from '@awsless/cloudwatch'
 import { type Duration } from '@awsless/duration'
@@ -108130,7 +108333,7 @@ var metricFeature = defineFeature({
           alarmDescription: alarmProps.description,
           statistic: alarmProps.where.stat,
           threshold: alarmProps.where.value,
-          period: toSeconds11(alarmProps.period),
+          period: toSeconds12(alarmProps.period),
           evaluationPeriods: alarmProps.minDataPoints,
           comparisonOperator: alarmProps.where.op,
           alarmActions: [alarmAction]
@@ -108151,12 +108354,12 @@ var metricFeature = defineFeature({
 });
 
 // src/feature/router/index.ts
-import { days as days10, seconds as seconds7, toSeconds as toSeconds13, years } from "@awsless/duration";
+import { days as days10, seconds as seconds8, toSeconds as toSeconds14, years } from "@awsless/duration";
 
 // src/feature/router/router-code.ts
-import { minutes as minutes8, seconds as seconds6, toSeconds as toSeconds12 } from "@awsless/duration";
-var ORIGIN_READ_TIMEOUT = toSeconds12(minutes8(2));
-var ORIGIN_CONNECTION_TIMEOUT = toSeconds12(seconds6(10));
+import { minutes as minutes8, seconds as seconds7, toSeconds as toSeconds13 } from "@awsless/duration";
+var ORIGIN_READ_TIMEOUT = toSeconds13(minutes8(2));
+var ORIGIN_CONNECTION_TIMEOUT = toSeconds13(seconds7(10));
 var getViewerRequestFunctionCode = (props) => {
   return CODE([
     props.blockDirectAccess ? BLOCK_DIRECT_ACCESS_TO_CLOUDFRONT : "",
@@ -108703,9 +108906,9 @@ var routerFeature = defineFeature({
       });
       const cache = new aws.cloudfront.CachePolicy(group, "cache", {
         name,
-        minTtl: toSeconds13(seconds7(0)),
-        maxTtl: toSeconds13(days10(365)),
-        defaultTtl: toSeconds13(days10(0)),
+        minTtl: toSeconds14(seconds8(0)),
+        maxTtl: toSeconds14(days10(365)),
+        defaultTtl: toSeconds14(days10(0)),
         parametersInCacheKeyAndForwardedToOrigin: {
           enableAcceptEncodingBrotli: true,
           enableAcceptEncodingGzip: true,
@@ -108754,7 +108957,7 @@ var routerFeature = defineFeature({
         name,
         corsConfig: {
           originOverride: props.cors?.override ?? true,
-          accessControlMaxAgeSec: toSeconds13(props.cors?.maxAge ?? years(1)),
+          accessControlMaxAgeSec: toSeconds14(props.cors?.maxAge ?? years(1)),
           accessControlAllowHeaders: { items: props.cors?.headers ?? ["*"] },
           accessControlAllowMethods: { items: props.cors?.methods ?? ["ALL"] },
           accessControlAllowOrigins: { items: props.cors?.origins ?? ["*"] },
@@ -108779,7 +108982,7 @@ var routerFeature = defineFeature({
           strictTransportSecurity: {
             override: true,
             preload: true,
-            accessControlMaxAgeSec: toSeconds13(years(1)),
+            accessControlMaxAgeSec: toSeconds14(years(1)),
             includeSubdomains: true
           },
           xssProtection: {
@@ -108799,7 +109002,7 @@ var routerFeature = defineFeature({
             rateBasedStatement: {
               limit: wafSettingsConfig.rateLimiter.limit,
               aggregateKeyType: "IP",
-              evaluationWindowSec: toSeconds13(wafSettingsConfig.rateLimiter.window)
+              evaluationWindowSec: toSeconds14(wafSettingsConfig.rateLimiter.window)
             }
           },
           action: {
@@ -108889,12 +109092,12 @@ var routerFeature = defineFeature({
           rule: wafRules,
           captchaConfig: {
             immunityTimeProperty: {
-              immunityTime: toSeconds13(wafSettingsConfig.captchaImmunityTime)
+              immunityTime: toSeconds14(wafSettingsConfig.captchaImmunityTime)
             }
           },
           challengeConfig: {
             immunityTimeProperty: {
-              immunityTime: toSeconds13(wafSettingsConfig.challengeImmunityTime)
+              immunityTime: toSeconds14(wafSettingsConfig.challengeImmunityTime)
             }
           },
           visibilityConfig: {
@@ -108936,7 +109139,7 @@ var routerFeature = defineFeature({
           }
           return {
             errorCode: Number(errorCode),
-            errorCachingMinTtl: item.minTTL ? toSeconds13(item.minTTL) : undefined,
+            errorCachingMinTtl: item.minTTL ? toSeconds14(item.minTTL) : undefined,
             responseCode: item.statusCode?.toString() ?? errorCode,
             responsePagePath: item.path
           };
@@ -109019,7 +109222,7 @@ var routerFeature = defineFeature({
             }
             return {
               errorCode: Number(errorCode),
-              errorCachingMinTtl: item.minTTL ? toSeconds13(item.minTTL) : undefined,
+              errorCachingMinTtl: item.minTTL ? toSeconds14(item.minTTL) : undefined,
               responseCode: item.statusCode ?? Number(errorCode),
               responsePagePath: item.path
             };
@@ -112529,7 +112732,7 @@ var getRecursionDetectionPlugin = (options) => ({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+middleware-user-agent@3.972.28/node_modules/@aws-sdk/middleware-user-agent/dist-es/configurations.js
-var import_core45 = __toESM(require_dist_cjs2(), 1);
+var import_core46 = __toESM(require_dist_cjs2(), 1);
 var DEFAULT_UA_APP_ID = undefined;
 function isValidUserAgentAppId(appId) {
   if (appId === undefined) {
@@ -112538,7 +112741,7 @@ function isValidUserAgentAppId(appId) {
   return typeof appId === "string" && appId.length <= 50;
 }
 function resolveUserAgentConfig(input) {
-  const normalizedAppIdProvider = import_core45.normalizeProvider(input.userAgentAppId ?? DEFAULT_UA_APP_ID);
+  const normalizedAppIdProvider = import_core46.normalizeProvider(input.userAgentAppId ?? DEFAULT_UA_APP_ID);
   const { customUserAgent } = input;
   return Object.assign(input, {
     customUserAgent: typeof customUserAgent === "string" ? [[customUserAgent]] : customUserAgent,
@@ -113974,7 +114177,7 @@ var resolveRegionConfig = (input) => {
 };
 
 // ../../node_modules/.pnpm/@aws-sdk+client-iot-data-plane@3.1023.0_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/client-iot-data-plane/dist-es/IoTDataPlaneClient.js
-var import_core46 = __toESM(require_dist_cjs2(), 1);
+var import_core47 = __toESM(require_dist_cjs2(), 1);
 var import_schema62 = __toESM(require_schema(), 1);
 
 // ../../node_modules/.pnpm/@smithy+middleware-content-length@4.2.12/node_modules/@smithy/middleware-content-length/dist-es/index.js
@@ -116969,13 +117172,13 @@ class IoTDataPlaneClient extends Client {
     this.middlewareStack.use(getHostHeaderPlugin(this.config));
     this.middlewareStack.use(getLoggerPlugin(this.config));
     this.middlewareStack.use(getRecursionDetectionPlugin(this.config));
-    this.middlewareStack.use(import_core46.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
+    this.middlewareStack.use(import_core47.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
       httpAuthSchemeParametersProvider: defaultIoTDataPlaneHttpAuthSchemeParametersProvider,
-      identityProviderConfigProvider: async (config2) => new import_core46.DefaultIdentityProviderConfig({
+      identityProviderConfigProvider: async (config2) => new import_core47.DefaultIdentityProviderConfig({
         "aws.auth#sigv4": config2.credentials
       })
     }));
-    this.middlewareStack.use(import_core46.getHttpSigningPlugin(this.config));
+    this.middlewareStack.use(import_core47.getHttpSigningPlugin(this.config));
   }
   destroy() {
     super.destroy();
@@ -117010,7 +117213,7 @@ import { LambdaClient as LambdaClient5, lambdaClient } from "@awsless/lambda";
 import { S3Client as S3Client4, s3Client } from "@awsless/s3";
 
 // ../../node_modules/.pnpm/@aws-sdk+client-sns@3.1023.0_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/client-sns/dist-es/SNSClient.js
-var import_core47 = __toESM(require_dist_cjs2(), 1);
+var import_core48 = __toESM(require_dist_cjs2(), 1);
 var import_schema64 = __toESM(require_schema(), 1);
 
 // ../../node_modules/.pnpm/@aws-sdk+client-sns@3.1023.0_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/client-sns/dist-es/auth/httpAuthSchemeProvider.js
@@ -118426,13 +118629,13 @@ class SNSClient extends Client {
     this.middlewareStack.use(getHostHeaderPlugin(this.config));
     this.middlewareStack.use(getLoggerPlugin(this.config));
     this.middlewareStack.use(getRecursionDetectionPlugin(this.config));
-    this.middlewareStack.use(import_core47.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
+    this.middlewareStack.use(import_core48.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
       httpAuthSchemeParametersProvider: defaultSNSHttpAuthSchemeParametersProvider,
-      identityProviderConfigProvider: async (config2) => new import_core47.DefaultIdentityProviderConfig({
+      identityProviderConfigProvider: async (config2) => new import_core48.DefaultIdentityProviderConfig({
         "aws.auth#sigv4": config2.credentials
       })
     }));
-    this.middlewareStack.use(import_core47.getHttpSigningPlugin(this.config));
+    this.middlewareStack.use(import_core48.getHttpSigningPlugin(this.config));
   }
   destroy() {
     super.destroy();
@@ -130819,7 +131022,7 @@ var getQueueUrlPlugin = (config2) => ({
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+client-sqs@3.1022.0_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/client-sqs/dist-es/SQSClient.js
-var import_core48 = __toESM(require_dist_cjs2(), 1);
+var import_core49 = __toESM(require_dist_cjs2(), 1);
 var import_schema66 = __toESM(require_schema(), 1);
 
 // ../../node_modules/.pnpm/@aws-sdk+client-sqs@3.1022.0_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/client-sqs/dist-es/auth/httpAuthSchemeProvider.js
@@ -132403,13 +132606,13 @@ class SQSClient extends Client {
     this.middlewareStack.use(getLoggerPlugin(this.config));
     this.middlewareStack.use(getRecursionDetectionPlugin(this.config));
     this.middlewareStack.use(getQueueUrlPlugin(this.config));
-    this.middlewareStack.use(import_core48.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
+    this.middlewareStack.use(import_core49.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
       httpAuthSchemeParametersProvider: defaultSQSHttpAuthSchemeParametersProvider,
-      identityProviderConfigProvider: async (config2) => new import_core48.DefaultIdentityProviderConfig({
+      identityProviderConfigProvider: async (config2) => new import_core49.DefaultIdentityProviderConfig({
         "aws.auth#sigv4": config2.credentials
       })
     }));
-    this.middlewareStack.use(import_core48.getHttpSigningPlugin(this.config));
+    this.middlewareStack.use(import_core49.getHttpSigningPlugin(this.config));
   }
   destroy() {
     super.destroy();
@@ -132418,7 +132621,7 @@ class SQSClient extends Client {
 
 // ../sqs/dist/index.js
 var import_chunk2 = __toESM(require_chunk(), 1);
-import { seconds as seconds8, toSeconds as toSeconds14 } from "@awsless/duration";
+import { seconds as seconds9, toSeconds as toSeconds15 } from "@awsless/duration";
 import { parse as parse6, stringify as stringify5 } from "@awsless/json";
 var sqsClient = globalClient(() => {
   return new SQSClient({});

package/dist/handlers/bundle.js

@@ -115,19 +115,8 @@ var metricHandler = (event) => {
 // src/feature/bundle/server/resource/on-failure.ts
 var onFailureHandler = (event) => {
   const route = event?.["$awsless-route"];
-  if (typeof route === "string") {
-    if (routeType(route) === "on-failure") {
-      return asyncRoute(route, event.event);
-    }
-    return;
-  }
-  if (typeof event?.headers?.["x-awsless-route"] === "string") {
-    return;
-  }
-  const record = event?.Records?.[0];
-  const eventSourceArn = record?.eventSourceARN;
-  if (record?.eventSource === "aws:sqs" && typeof eventSourceArn === "string" && eventSourceArn.endsWith(":" + process.env.APP + "--on-failure--failure")) {
-    return asyncRoute("base:on-failure:normalizer", event);
+  if (typeof route === "string" && routeType(route) === "on-failure") {
+    return asyncRoute(route, event.event);
   }
   return;
 };

package/dist/handlers/pubsub-server.js

@@ -56588,6 +56588,7 @@ class InvokeCommand extends Command.classBuilder().ep(commonParams3).m(function(
 }
 
 // ../lambda/dist/index.js
+import { AsyncLocalStorage } from "async_hooks";
 var ExpectedError = class extends Error {
   constructor(type, message) {
     super(message);
@@ -56643,18 +56644,12 @@ var invoke = async ({
   return response;
 };
 var GlobalContext = class {
-  #store;
+  #storage = new AsyncLocalStorage;
   async run(store, callback) {
-    this.#store = store;
-    try {
-      const res = await callback();
-      return res;
-    } finally {
-      this.#store = undefined;
-    }
+    return this.#storage.run(store, callback);
   }
   get() {
-    return this.#store;
+    return this.#storage.getStore();
   }
 };
 var eventContext = new GlobalContext;

package/dist/prebuild/on-failure/HASH

@@ -0,0 +1 @@
+00d5cb0528e3ab1b644f8d2a6865dd8505c78944

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awsless/cli",
-  "version": "0.0.46-next.15",
+  "version": "0.0.46-next.16",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
@@ -41,12 +41,12 @@
     "@awsless/big-float": "^0.1.7",
     "@awsless/duration": "^0.0.4",
     "@awsless/dynamodb": "^0.3.21",
+    "@awsless/lambda": "^0.0.47",
     "@awsless/json": "^0.0.11",
-    "@awsless/lambda": "^0.0.46",
-    "@awsless/s3": "^0.0.22",
     "@awsless/validate": "^0.1.7",
-    "awsless": "^0.0.15-next.2",
-    "@awsless/weak-cache": "^0.0.1"
+    "awsless": "^0.0.15-next.3",
+    "@awsless/weak-cache": "^0.0.1",
+    "@awsless/s3": "^0.0.22"
   },
   "devDependencies": {
     "@clack/prompts": "^0.7.0",
@@ -100,25 +100,25 @@
     "zip-a-folder": "^3.1.6",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.24.3",
-    "@awsless/big-float": "^0.1.7",
+    "@awsless/clui": "^0.0.9",
     "@awsless/cloudwatch": "^0.0.1",
+    "@awsless/big-float": "^0.1.7",
     "@awsless/duration": "^0.0.4",
-    "@awsless/clui": "^0.0.9",
     "@awsless/dynamodb": "^0.3.21",
     "@awsless/iot": "^0.0.5",
     "@awsless/json": "^0.0.11",
-    "@awsless/lambda": "^0.0.46",
+    "@awsless/lambda": "^0.0.47",
     "@awsless/open-search": "^0.0.24",
     "@awsless/redis": "^0.1.13",
     "@awsless/s3": "^0.0.22",
     "@awsless/size": "^0.0.2",
+    "@awsless/sqs": "^0.0.24",
     "@awsless/scheduler": "^0.0.5",
     "@awsless/sns": "^0.0.11",
-    "@awsless/sqs": "^0.0.24",
     "@awsless/ssm": "^0.0.8",
+    "@awsless/weak-cache": "^0.0.1",
     "@awsless/validate": "^0.1.7",
-    "awsless": "^0.0.15-next.2",
-    "@awsless/weak-cache": "^0.0.1"
+    "awsless": "^0.0.15-next.3"
   },
   "scripts": {
     "test": "bun cli/build-handlers.ts && pnpm vitest",

package/dist/handlers/on-failure.js

@@ -1,216 +0,0 @@
-// src/feature/on-failure/server/handle.ts
-import { parse as parse2, patch } from "@awsless/json";
-import { invoke } from "@awsless/lambda";
-import { deleteObject, getObject } from "@awsless/s3";
-import { formatRoutePayload, getRouteEnv } from "awsless";
-
-// src/feature/on-failure/server/util.ts
-import { parse } from "@awsless/json";
-var isDynamoDBFailureEvent = (event) => {
-  return "DDBStreamBatchInfo" in event;
-};
-var logicalResourceName = (physical) => {
-  const segments = physical.replace(/\.fifo$/, "").split("--");
-  if (segments.length === 4) {
-    return `${segments[1]}:${segments[2]}:${segments[3]}`;
-  }
-  if (segments.length === 3) {
-    return `${segments[1]}:${segments[2]}`;
-  }
-  return physical;
-};
-var getFailureSource = (payload) => {
-  const record = getDeliveryRecord(payload);
-  if (!record) {
-    return;
-  }
-  if (isTopicRecord(record)) {
-    return {
-      resource: record.Sns.TopicArn ? logicalResourceName(lastArnSegment(record.Sns.TopicArn)) : "topic",
-      event: parseEvent(record.Sns.Message)
-    };
-  }
-  if (isStreamRecord(record)) {
-    const table = record.eventSourceARN.split("/")[1];
-    return {
-      resource: table ? logicalResourceName(table) : "table-stream"
-    };
-  }
-  if (isQueueRecord(record)) {
-    return {
-      resource: logicalResourceName(lastArnSegment(record.eventSourceARN)),
-      event: parseEvent(record.body)
-    };
-  }
-  return;
-};
-var getDeliveryRecord = (payload) => {
-  if (!payload || typeof payload !== "object") {
-    return;
-  }
-  const records = payload.Records;
-  const record = Array.isArray(records) ? records[0] : undefined;
-  return record && typeof record === "object" ? record : undefined;
-};
-var isTopicRecord = (record) => {
-  return "Sns" in record && typeof record.Sns === "object" && record.Sns !== null;
-};
-var isStreamRecord = (record) => {
-  return "eventSource" in record && record.eventSource === "aws:dynamodb" && "eventSourceARN" in record;
-};
-var isQueueRecord = (record) => {
-  return "eventSource" in record && record.eventSource === "aws:sqs" && "eventSourceARN" in record;
-};
-var lastArnSegment = (arn) => {
-  return arn.split(":").at(-1);
-};
-var parseEvent = (value) => {
-  if (typeof value !== "string") {
-    return value;
-  }
-  try {
-    return parse(value);
-  } catch {
-    return value;
-  }
-};
-
-// src/feature/on-failure/server/handle.ts
-var handle_default = async (event, context) => {
-  if (!Array.isArray(event.Records)) {
-    throw new TypeError(`Unknown Event Type: ${JSON.stringify(event)}`);
-  }
-  await Promise.all(event.Records.map((record) => {
-    return unknownRecord(record, context);
-  }));
-};
-var unknownRecord = (record, context) => {
-  if (typeof record.eventSource === "string") {
-    if (record.eventSource.startsWith("aws:sqs")) {
-      return sqsRecord(record, context);
-    }
-    if (record.eventSource.startsWith("aws:s3")) {
-      return s3Record(record, context);
-    }
-  }
-  throw new TypeError(`Unknown Record Type: ${JSON.stringify(record)}`);
-};
-var sqsRecord = async (record, context) => {
-  const s3Records = parseS3Records(record.body);
-  if (s3Records) {
-    await Promise.all(s3Records.map((record2) => s3Record(record2, context)));
-    return;
-  }
-  const queueName = record.messageAttributes.queueName?.stringValue;
-  const body = parsePayload(record.body);
-  const payload = {
-    type: "queue",
-    id: record.messageId,
-    date: new Date(Number(record.attributes.SentTimestamp)),
-    payload: body,
-    source: queueName ? { resource: logicalResourceName(queueName), event: body } : undefined,
-    queue: {
-      name: queueName,
-      url: record.messageAttributes.queueUrl?.stringValue
-    }
-  };
-  await invokeConsumer(payload, context);
-};
-var parseS3Records = (body) => {
-  try {
-    const event = JSON.parse(body);
-    if (event?.Event === "s3:TestEvent") {
-      return [];
-    }
-    if (Array.isArray(event?.Records) && event.Records[0]?.eventSource === "aws:s3") {
-      return event.Records;
-    }
-  } catch {}
-  return;
-};
-var s3Record = async (record, context) => {
-  const key = decodeURIComponent(record.s3.object.key.replace(/\+/g, " "));
-  const object = await getObject({
-    bucket: record.s3.bucket.name,
-    key
-  });
-  if (!object) {
-    return;
-  }
-  const json = await object.body.transformToString();
-  const unknownEvent = JSON.parse(json);
-  const payload = formatUnknownFailureEvent(unknownEvent);
-  await invokeConsumer(payload, context);
-  await deleteObject({
-    bucket: record.s3.bucket.name,
-    key
-  });
-};
-var formatUnknownFailureEvent = (event) => {
-  if (isDynamoDBFailureEvent(event)) {
-    return formatDynamoDBStreamFailureEvent(event);
-  }
-  return formatAsyncLambdaFailureEvent(event);
-};
-var formatAsyncLambdaFailureEvent = (event) => {
-  const payload = patchPayload(event.requestPayload);
-  const route = payload && typeof payload === "object" ? payload["$awsless-route"] : undefined;
-  return {
-    type: "async-lambda",
-    date: new Date(event.timestamp),
-    id: event.requestContext.requestId,
-    function: {
-      name: typeof route === "string" ? route : event.requestContext.functionArn.split(":")[6]
-    },
-    payload: typeof route === "string" ? payload.event ?? {} : payload,
-    source: typeof route === "string" ? { resource: route, event: payload.event ?? {} } : getFailureSource(payload),
-    error: {
-      type: event.responsePayload.errorType,
-      message: event.responsePayload.errorMessage,
-      stackTrace: event.responsePayload.stackTrace
-    }
-  };
-};
-var formatDynamoDBStreamFailureEvent = (event) => {
-  const payload = parsePayload(event.payload);
-  const streamArn = event.DDBStreamBatchInfo?.streamArn;
-  const table = streamArn?.split("/")[1];
-  return {
-    type: "dynamodb-stream",
-    date: new Date(event.timestamp),
-    id: event.requestContext.requestId,
-    function: {
-      name: event.requestContext.functionArn.split(":")[6]
-    },
-    payload,
-    source: table ? { resource: logicalResourceName(table) } : getFailureSource(payload)
-  };
-};
-var parsePayload = (payload) => {
-  try {
-    return parse2(payload);
-  } catch {
-    return payload;
-  }
-};
-var patchPayload = (payload) => {
-  try {
-    return patch(payload);
-  } catch {
-    return payload;
-  }
-};
-var invokeConsumer = async (payload, context) => {
-  const consumerRoute = getRouteEnv("CONSUMER");
-  if (!consumerRoute) {
-    throw new Error("The CONSUMER route env is not set");
-  }
-  await invoke({
-    name: context.invokedFunctionArn,
-    type: "RequestResponse",
-    payload: formatRoutePayload(consumerRoute, payload)
-  });
-};
-export {
-  handle_default as default
-};