@awsless/cli 0.0.46-next.19 → 0.0.46-next.20

package/dist/bin.js

@@ -53724,9 +53724,9 @@ var require_nodefs_handler = __commonJS((exports, module) => {
       if (this.fsw.closed) {
         return;
       }
-      const dirname16 = sysPath.dirname(file2);
+      const dirname17 = sysPath.dirname(file2);
       const basename4 = sysPath.basename(file2);
-      const parent = this.fsw._getWatchedDir(dirname16);
+      const parent = this.fsw._getWatchedDir(dirname17);
       let prevStats = stats2;
       if (parent.has(basename4))
         return;
@@ -53751,7 +53751,7 @@ var require_nodefs_handler = __commonJS((exports, module) => {
               prevStats = newStats2;
             }
           } catch (error3) {
-            this.fsw._remove(dirname16, basename4);
+            this.fsw._remove(dirname17, basename4);
           }
         } else if (parent.has(basename4)) {
           const at = newStats.atimeMs;
@@ -56328,7 +56328,7 @@ var require_client2 = __commonJS((exports) => {
 var require_config = __commonJS((exports) => {
   var { homedir: homedir2 } = __require("os");
   var { sep: sep2, join: join29 } = __require("path");
-  var { createHash: createHash16 } = __require("crypto");
+  var { createHash: createHash17 } = __require("crypto");
   var { readFile: readFile$1 } = __require("fs/promises");
   var { IniSectionType: IniSectionType2 } = require_dist_cjs();
   var { normalizeProvider } = require_client2();
@@ -56483,7 +56483,7 @@ var require_config = __commonJS((exports) => {
   var DEFAULT_PROFILE = "default";
   var getProfileName = (init) => init.profile || process.env[ENV_PROFILE] || DEFAULT_PROFILE;
   var getSSOTokenFilepath = (id) => {
-    const hasher = createHash16("sha1");
+    const hasher = createHash17("sha1");
     const cacheName = hasher.update(id).digest("hex");
     return join29(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
   };
@@ -57833,7 +57833,7 @@ var require_endpoints = __commonJS((exports) => {
 
 // ../../node_modules/.pnpm/@smithy+core@3.29.7/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
-  var { createHmac: createHmac3, createHash: createHash16, getRandomValues } = __require("crypto");
+  var { createHmac: createHmac3, createHash: createHash17, getRandomValues } = __require("crypto");
   var { ReadStream, lstatSync: lstatSync2, fstatSync } = __require("fs");
   var { HttpResponse: HttpResponse2 } = require_transport2();
   var { toEndpointV1 } = require_endpoints();
@@ -58735,7 +58735,7 @@ var require_serde = __commonJS((exports) => {
       return Promise.resolve(this.hash.digest());
     }
     reset() {
-      this.hash = this.secret ? createHmac3(this.algorithmIdentifier, castSourceData(this.secret)) : createHash16(this.algorithmIdentifier);
+      this.hash = this.secret ? createHmac3(this.algorithmIdentifier, castSourceData(this.secret)) : createHash17(this.algorithmIdentifier);
     }
   }
   function castSourceData(toCast, encoding) {
@@ -59474,7 +59474,7 @@ var require_checksum = __commonJS((exports) => {
   var { createReadStream: createReadStream2 } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
-  var { createHash: createHash16, createHmac: createHmac3 } = __require("crypto");
+  var { createHash: createHash17, createHmac: createHmac3 } = __require("crypto");
   var zlib = __require("zlib");
   async function blobReader(blob, onChunk, chunkSize = 1024 * 1024) {
     const size = blob.size;
@@ -59639,7 +59639,7 @@ var require_checksum = __commonJS((exports) => {
   }
   var hasNativeCrypto$1 = (() => {
     try {
-      createHash16("md5");
+      createHash17("md5");
       return true;
     } catch {
       return false;
@@ -59649,7 +59649,7 @@ var require_checksum = __commonJS((exports) => {
   function buildNativeClass$2() {
     return class Md5Node2 {
       digestLength = 16;
-      hash = createHash16("md5");
+      hash = createHash17("md5");
       update(data) {
         this.hash.update(toUint8Array(data));
       }
@@ -59658,7 +59658,7 @@ var require_checksum = __commonJS((exports) => {
         return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
       }
       reset() {
-        this.hash = createHash16("md5");
+        this.hash = createHash17("md5");
       }
     };
   }
@@ -59948,7 +59948,7 @@ var require_checksum = __commonJS((exports) => {
   ]);
   var hasNativeCrypto = (() => {
     try {
-      createHash16("sha256");
+      createHash17("sha256");
       return true;
     } catch {
       return false;
@@ -59988,7 +59988,7 @@ var require_checksum = __commonJS((exports) => {
         this.finished = false;
       }
       createHash() {
-        return this.secret ? createHmac3("sha256", toBuffer(this.secret)) : createHash16("sha256");
+        return this.secret ? createHmac3("sha256", toBuffer(this.secret)) : createHash17("sha256");
       }
     };
   }
@@ -74174,10 +74174,10 @@ var require_signin = __commonJS((exports) => {
 });
 
 // ../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.66/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash16, createPrivateKey, createPublicKey, sign } from "crypto";
+import { createHash as createHash17, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs3 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname17, join as join32 } from "path";
+import { dirname as dirname18, join as join32 } from "path";
 var import_config24, import_protocols3, LoginCredentialsFetcher;
 var init_LoginCredentialsFetcher = __esm(() => {
   import_config24 = __toESM(require_config(), 1);
@@ -74329,7 +74329,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     }
     async saveToken(token) {
       const tokenFilePath = this.getTokenFilePath();
-      const directory = dirname17(tokenFilePath);
+      const directory = dirname18(tokenFilePath);
       try {
         await fs3.mkdir(directory, { recursive: true });
       } catch (error3) {}
@@ -74338,7 +74338,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     getTokenFilePath() {
       const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join32(homedir3(), ".aws", "login", "cache");
       const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
-      const loginSessionSha256 = createHash16("sha256").update(loginSessionBytes).digest("hex");
+      const loginSessionSha256 = createHash17("sha256").update(loginSessionBytes).digest("hex");
       return join32(directory, `${loginSessionSha256}.json`);
     }
     derToRawSignature(derSignature) {
@@ -100603,6 +100603,10 @@ var AuthDefaultSchema = exports_external.record(ResourceIdSchema, exports_extern
   }).default({}).describe("Specifies the validity duration for every JWT token.")
 })).default({}).describe("Define the authenticatable users in your app.");
 
+// src/feature/config/schema.ts
+var ConfigNameSchema = exports_external.string().regex(/^[a-z0-9-]+$/, "Invalid config name");
+var ConfigsSchema = exports_external.array(ConfigNameSchema).optional().describe("Define the config values for your app.");
+
 // src/feature/domain/schema.ts
 var DomainNameSchema = exports_external.string().regex(/[a-z\-\_\.]/g, "Invalid domain name").describe("Enter a fully qualified domain name, for example, www.example.com. You can optionally include a trailing dot. If you omit the trailing dot, Amazon Route 53 assumes that the domain name that you specify is fully qualified. This means that Route 53 treats www.example.com (without a trailing dot) and www.example.com. (with a trailing dot) as identical.");
 var DNSTypeSchema = exports_external.enum(["A", "AAAA", "CAA", "CNAME", "DS", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TXT"]).describe("The DNS record type.");
@@ -100744,6 +100748,11 @@ var sizeMax = (max) => {
 // src/feature/function/schema.ts
 var MemorySizeSchema = SizeSchema.refine(sizeMin(mebibytes(128)), "Minimum memory size is 128 MB").refine(sizeMax(gibibytes(10)), "Maximum memory size is 10 GB").describe("The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The value can be any multiple of 1 MB. You can specify a size value from 128 MB to 10 GB.");
 var TimeoutSchema = DurationSchema.refine(durationMin(seconds(10)), "Minimum timeout duration is 10 seconds").refine(durationMax(minutes(15)), "Maximum timeout duration is 15 minutes").describe("The amount of time that Lambda allows a function to run before stopping it. You can specify a size value from 1 second to 15 minutes.");
+var EphemeralStorageSizeSchema = SizeSchema.refine(sizeMin(mebibytes(512)), "Minimum ephemeral storage size is 512 MB").refine(sizeMax(gibibytes(10)), "Minimum ephemeral storage size is 10 GB").describe("The size of the function's /tmp directory. You can specify a size value from 512 MB to 10 GB.");
+var ReservedConcurrentExecutionsSchema = exports_external.number().int().min(0).describe("The number of simultaneous executions to reserve for the function. You can specify a number from 0.");
+var VPCSchema = exports_external.boolean().describe("Put the function inside your global VPC.");
+var DescriptionSchema = exports_external.string().describe("A description of the function.");
+var LayersSchema = exports_external.string().array().describe(`A list of function layers to add to the function's execution environment. Specify each layer by its name.`);
 var EnvironmentSchema = exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Environment variable key-value pairs.");
 var ArchitectureSchema = exports_external.enum(["x86_64", "arm64"]).describe("The instruction set architecture that the function supports.");
 var RuntimeSchema = exports_external.enum(["nodejs18.x", "nodejs20.x", "nodejs22.x", "nodejs24.x"]).or(exports_external.literal("container")).or(exports_external.string()).describe("The identifier of the function's runtime.");
@@ -100782,6 +100791,7 @@ var LogSchema = exports_external.union([
 var FileCodeSchema = exports_external.object({
   file: LocalFileSchema.describe("The file path of the function code."),
   minify: MinifySchema.optional().default(true),
+  moduleSideEffects: RelativePathSchema.array().default([]).describe(`A list of glob patterns for modules that should be flagged as having potential side effects. For example "./.svelte-kit/**" will flag every file inside the .svelte-kit folder.`),
   external: exports_external.string().array().optional().describe(`A list of external packages that won't be included in the bundle.`),
   importAsString: exports_external.string().array().optional().describe(`A list of glob patterns, which specifies the files that should be imported as string.`)
 });
@@ -100801,7 +100811,29 @@ var FunctionSchema = exports_external.union([
   })).pipe(FnSchema),
   FnSchema
 ]);
-var FunctionsSchema = exports_external.record(ResourceIdSchema, FunctionSchema).optional().describe("Define the functions in your stack.");
+var StackFnSchema = exports_external.object({
+  code: CodeSchema,
+  handler: HandlerSchema.optional(),
+  runtime: RuntimeSchema.optional(),
+  description: DescriptionSchema.optional(),
+  vpc: VPCSchema.optional(),
+  log: LogSchema.optional(),
+  timeout: TimeoutSchema.optional(),
+  memorySize: MemorySizeSchema.optional(),
+  architecture: ArchitectureSchema.optional(),
+  ephemeralStorageSize: EphemeralStorageSizeSchema.optional(),
+  reserved: ReservedConcurrentExecutionsSchema.optional(),
+  layers: LayersSchema.optional(),
+  environment: EnvironmentSchema.optional(),
+  permissions: PermissionsSchema.optional()
+}).strict();
+var StackFunctionSchema = exports_external.union([
+  LocalFileSchema.transform((code) => ({
+    code
+  })).pipe(StackFnSchema),
+  StackFnSchema
+]);
+var FunctionsSchema = exports_external.record(ResourceIdSchema, StackFunctionSchema).optional().describe("Define the functions in your stack.");
 var FunctionDefaultSchema = exports_external.object({
   runtime: RuntimeSchema.default("nodejs24.x"),
   handler: HandlerSchema.default("index.default"),
@@ -100816,6 +100848,10 @@ var FunctionDefaultSchema = exports_external.object({
   timeout: TimeoutSchema.default("15 minutes"),
   memorySize: MemorySizeSchema.default("1024 MB"),
   architecture: ArchitectureSchema.default("arm64"),
+  vpc: VPCSchema.default(true),
+  ephemeralStorageSize: EphemeralStorageSizeSchema.default("512 MB"),
+  reserved: ReservedConcurrentExecutionsSchema.optional(),
+  layers: LayersSchema.optional(),
   environment: EnvironmentSchema.optional(),
   permissions: PermissionsSchema.optional()
 }).default({});
@@ -100935,7 +100971,7 @@ var PermissionSchema2 = exports_external.object({
   resources: ResourcesSchema2
 });
 var PermissionsSchema2 = exports_external.union([PermissionSchema2.transform((v3) => [v3]), PermissionSchema2.array()]).describe("Add IAM permissions to your instance.");
-var DescriptionSchema = exports_external.string().describe("A description of the instance.");
+var DescriptionSchema2 = exports_external.string().describe("A description of the instance.");
 var ImageSchema = exports_external.string().optional().describe("The URL of the container image to use. Default: public.ecr.aws/aws-cli/aws-cli:{architecture}");
 var validLogRetentionDays2 = [
   ...[1, 3, 5, 7, 14, 30, 60, 90, 120, 150],
@@ -100964,7 +101000,7 @@ var CodeSchema2 = exports_external.union([
 var StartupCommandSchema = exports_external.union([exports_external.string().transform((v3) => [v3]), exports_external.string().array()]).describe("Optional shell commands to run before the instance program starts.");
 var ISchema = exports_external.object({
   code: CodeSchema2,
-  description: DescriptionSchema.optional(),
+  description: DescriptionSchema2.optional(),
   image: ImageSchema.optional(),
   startupCommand: StartupCommandSchema.optional(),
   log: LogSchema2.optional(),
@@ -101420,6 +101456,7 @@ var AppSchema = exports_external.object({
   region: RegionSchema.describe("The AWS region to deploy to."),
   profile: exports_external.string().describe("The AWS profile to deploy to."),
   protect: exports_external.boolean().default(false).describe("Protect your app & stacks from being deleted."),
+  configs: ConfigsSchema,
   removal: exports_external.enum(["remove", "retain"]).default("remove").describe([
     "Configure how your resources are handled when they have to be removed.",
     "",
@@ -101476,10 +101513,6 @@ var CommandSchema = exports_external.union([
 ]);
 var CommandsSchema = exports_external.record(ResourceIdSchema, CommandSchema).optional().describe("Define the custom commands for your stack.");
 
-// src/feature/config/schema.ts
-var ConfigNameSchema = exports_external.string().regex(/^[a-z0-9-]+$/, "Invalid config name");
-var ConfigsSchema = exports_external.array(ConfigNameSchema).optional().describe("Define the config values for your stack.");
-
 // src/feature/cron/schema/schedule.ts
 var import_aws_cron_expression_validator = __toESM(require_src5(), 1);
 var RateExpressionSchema = exports_external.custom((value) => {
@@ -101885,7 +101918,6 @@ var StackSchema = exports_external.object({
   commands: CommandsSchema,
   rest: RestSchema,
   rpc: RpcSchema,
-  configs: ConfigsSchema,
   crons: CronsSchema,
   caches: CachesSchema,
   subscribers: SubscribersSchema,
@@ -102668,6 +102700,7 @@ var loadAppConfig = async (options) => {
   const appConfig = await readConfigWithStage(appFileName, options.stage);
   debug3("Validate app config file");
   const app = await validateConfig(AppSchema, appConfig.file, appConfig.data);
+  app.stage = options.stage;
   return app;
 };
 var loadStackConfigs = async (options) => {
@@ -103465,8 +103498,18 @@ var ROUTE_MODULE_QUERY = "?awsless-route=";
 var formatRouteModuleId = (file2, routeKey) => {
   return `${file2}${ROUTE_MODULE_QUERY}${encodeURIComponent(routeKey)}`;
 };
+var createModuleMatcher = (patterns = []) => {
+  const globs = patterns.map((pattern) => {
+    return new Minimatch(pattern.replaceAll("\\", "/"), { dot: true });
+  });
+  return (id) => {
+    const path2 = id.replaceAll("\\", "/");
+    return globs.some((glob2) => glob2.match(path2));
+  };
+};
 var bundleTypeScriptWithRolldown = async (props) => {
   const { format: format2 = "esm", minify = true } = props;
+  const hasModuleSideEffects = createModuleMatcher(props.moduleSideEffects);
   const bundle = await rolldown({
     input: props.file,
     platform: "node",
@@ -103474,7 +103517,7 @@ var bundleTypeScriptWithRolldown = async (props) => {
       return importee.startsWith("@aws-sdk") || importee.startsWith("aws-sdk") || props.external?.includes(importee);
     },
     treeshake: {
-      moduleSideEffects: (id, isExternal) => isExternal ? props.external?.includes(id) === true : id.startsWith(`${directories.root}/`) && !id.includes("/node_modules/")
+      moduleSideEffects: (id, isExternal) => isExternal ? props.external?.includes(id) === true : hasModuleSideEffects(id) || id.startsWith(`${directories.root}/`) && !id.includes("/node_modules/")
     },
     onwarn: (error3) => {
       if (error3.code === "UNRESOLVED_IMPORT") {
@@ -103567,7 +103610,8 @@ var registerBundleFunction = (ctx, routeKey, props) => {
     file: props.code.file,
     exportName: parseExportName(props.handler ?? ctx.appConfig.defaults.function.handler),
     external: props.code.external,
-    importAsString: props.code.importAsString
+    importAsString: props.code.importAsString,
+    moduleSideEffects: props.code.moduleSideEffects
   });
   return bundle;
 };
@@ -103599,7 +103643,11 @@ ${entries2.join(`
       readFile7(runtime),
       ...handlers.map((handler) => dirname6(handler.file) === dirname6(runtime) ? readFile7(handler.file) : generateFileHash(workspace, handler.file))
     ]);
-    const hash2 = createHash8("sha1").update(entry).update(JSON.stringify([props.external, props.minify, handlers.map((h2) => [h2.external, h2.importAsString])]));
+    const hash2 = createHash8("sha1").update(entry).update(JSON.stringify([
+      props.external,
+      props.minify,
+      handlers.map((h2) => [h2.external, h2.importAsString, h2.moduleSideEffects])
+    ]));
     for (const item of hashes) {
       hash2.update(item);
     }
@@ -103609,6 +103657,7 @@ ${entries2.join(`
       const entryFile = join10(temp.path, "entry.ts");
       await writeFile5(entryFile, entry);
       const importAsString2 = handlers.flatMap((handler) => handler.importAsString ?? []);
+      const moduleSideEffects = handlers.flatMap((handler) => handler.moduleSideEffects ?? []);
       const bundle = await bundleTypeScriptWithRolldown({
         file: entryFile,
         minify: props.minify,
@@ -103617,7 +103666,8 @@ ${entries2.join(`
           ...props.external ?? [],
           ...handlers.flatMap((handler) => handler.external ?? [])
         ],
-        importAsString: importAsString2.length > 0 ? importAsString2 : undefined
+        importAsString: importAsString2.length > 0 ? importAsString2 : undefined,
+        moduleSideEffects: moduleSideEffects.length > 0 ? moduleSideEffects : undefined
       });
       await temp.delete();
       await rm6(getBuildPath("bundle", props.name, "files"), { recursive: true, force: true });
@@ -103796,7 +103846,15 @@ var bundleFeature = defineFeature({
       }),
       sourceCodeHash: sourceHash,
       environment: {
-        variables: {}
+        variables: {
+          APP: ctx.appConfig.name,
+          APP_ID: ctx.appId,
+          AWS_ACCOUNT_ID: ctx.accountId,
+          REGION: ctx.appConfig.region,
+          STAGE: ctx.appConfig.stage ?? "default",
+          STANDALONE: "false",
+          AWS_USE_DUALSTACK_ENDPOINT: "true"
+        }
       },
       vpcConfig: {
         securityGroupIds: [ctx.shared.get("vpc", "security-group-id")],
@@ -103863,10 +103921,6 @@ var bundleFeature = defineFeature({
         resources: [logGroup.arn.pipe((arn) => `${arn}:*`)]
       });
     }
-    addEnv("APP", ctx.appConfig.name);
-    addEnv("APP_ID", ctx.appId);
-    addEnv("AWS_ACCOUNT_ID", ctx.accountId);
-    addEnv("AWS_USE_DUALSTACK_ENDPOINT", "true");
     for (const [name2, value] of Object.entries(defaults2.environment ?? {})) {
       addEnv(name2, value);
     }
@@ -104134,10 +104188,10 @@ var configFeature = defineFeature({
   async onTypeGen(ctx) {
     const gen = new TypeFile("awsless");
     const resources = new TypeObject(0, false);
+    for (const name of ctx.appConfig.configs ?? []) {
+      resources.addConst(name, "string");
+    }
     for (const stack of ctx.stackConfigs) {
-      for (const name of stack.configs ?? []) {
-        resources.addConst(name, "string");
-      }
       for (const site of Object.values(stack.sites ?? {})) {
         for (const name of site.build?.configs ?? []) {
           resources.addConst(name, "string");
@@ -104159,10 +104213,7 @@ var configFeature = defineFeature({
         `arn:aws:ssm:${ctx.appConfig.region}:${ctx.accountId}:parameter${configParameterPrefix(ctx.app.name)}/*`
       ]
     });
-  },
-  onStack(ctx) {
-    const configs = ctx.stackConfig.configs ?? [];
-    for (const name of configs) {
+    for (const name of ctx.appConfig.configs ?? []) {
       ctx.registerConfig(name);
       ctx.addEnv(`CONFIG_${constantCase(name)}`, name);
     }
@@ -104476,8 +104527,471 @@ var domainFeature = defineFeature({
 });
 
 // src/feature/function/index.ts
+import { formatRouteEnvName } from "awsless";
 import { relative as relative3 } from "path";
+
+// src/feature/function/util.ts
+import { seconds as seconds4, toDays as toDays6, toSeconds as toSeconds4 } from "@awsless/duration";
+import { generateFileHash as generateFileHash2 } from "@awsless/ts-file-cache";
 var import_deepmerge = __toESM(require_cjs2(), 1);
+import { createHash as createHash10 } from "crypto";
+
+// src/feature/on-error-log/util.ts
+var filterPattern = `{${[
+  `$.level = "WARN"`,
+  `$.level = "ERROR"`,
+  `$.level = "FATAL"`,
+  `($.type = "platform.report" && $.record.status = "timeout")`,
+  `($.type = "platform.report" && $.record.status = "error")`,
+  `($.type = "platform.report" && $.record.status = "failure")`
+].join(" || ")}}`;
+
+// src/feature/function/util.ts
+var standaloneFields = [
+  "runtime",
+  "description",
+  "vpc",
+  "log",
+  "timeout",
+  "memorySize",
+  "architecture",
+  "ephemeralStorageSize",
+  "reserved",
+  "layers",
+  "environment",
+  "permissions"
+];
+var isStandaloneFunction = (props) => {
+  return standaloneFields.some((field) => typeof props[field] !== "undefined");
+};
+var createLambdaFunction = (ctx, id, local) => {
+  const group = new Group(ctx.stack, "function", id);
+  const props = import_deepmerge.default(ctx.appConfig.defaults.function, local);
+  if (props.runtime === "container") {
+    throw new FileError(ctx.stackConfig.file, `The "container" runtime isn't supported for stack functions.`);
+  }
+  for (const layerId of props.layers ?? []) {
+    if (!(layerId in (ctx.appConfig.defaults.layers ?? {}))) {
+      throw new FileError(ctx.stackConfig.file, `Layer "${layerId}" is not defined in app.json`);
+    }
+  }
+  const name = formatLocalResourceName({
+    appName: ctx.app.name,
+    stackName: ctx.stack.name,
+    resourceType: "function",
+    resourceName: id
+  });
+  const roleName = shortId(`${ctx.app.name}:${ctx.stack.name}:function:${id}:${ctx.appId}`);
+  const fileCode = local.code;
+  ctx.registerBuild("function", name, async (build2, { workspace }) => {
+    const fingerprint = createHash10("sha1").update(await generateFileHash2(workspace, fileCode.file)).update(JSON.stringify([
+      fileCode.minify,
+      fileCode.external,
+      fileCode.importAsString,
+      fileCode.moduleSideEffects
+    ])).digest("hex");
+    return build2(fingerprint, async (write) => {
+      const bundle = await bundleTypeScriptWithRolldown({
+        file: fileCode.file,
+        minify: fileCode.minify,
+        external: [
+          ...fileCode.external ?? [],
+          ...(props.layers ?? []).flatMap((layerId) => ctx.shared.entry("layer", "packages", layerId))
+        ],
+        moduleSideEffects: fileCode.moduleSideEffects,
+        importAsString: fileCode.importAsString
+      });
+      const archive = await zipFiles(bundle.files);
+      await Promise.all([
+        write("HASH", bundle.hash),
+        write("bundle.zip", archive),
+        ...bundle.files.map((file2) => write(`files/${file2.name}`, file2.code)),
+        ...bundle.files.map((file2) => file2.map && write(`files/${file2.name}.map`, file2.map))
+      ]);
+      return {
+        size: formatByteSize(archive.byteLength)
+      };
+    });
+  });
+  const sourceHash = $file(getBuildPath("function", name, "HASH"));
+  const code = new aws.s3.BucketObject(group, "code", {
+    bucket: ctx.shared.get("asset", "bucket").name,
+    key: `lambda/${name}.zip`,
+    source: relativePath(getBuildPath("function", name, "bundle.zip")),
+    sourceHash
+  }, {
+    replaceOnChanges: ["bucket", "key"]
+  });
+  const role = new aws.iam.Role(group, "role", {
+    name: roleName,
+    description: name,
+    assumeRolePolicy: JSON.stringify({
+      Version: "2012-10-17",
+      Statement: [
+        {
+          Effect: "Allow",
+          Action: "sts:AssumeRole",
+          Principal: {
+            Service: ["lambda.amazonaws.com"]
+          }
+        }
+      ]
+    })
+  });
+  const statements = [];
+  const statementDeps = new Set;
+  const addPermission = (...permissions) => {
+    statements.push(...permissions);
+    for (const dep of findInputDeps(permissions)) {
+      statementDeps.add(dep);
+    }
+  };
+  addPermission(...props.permissions ?? []);
+  ctx.onPermission((statement) => {
+    addPermission(statement);
+  });
+  const policy = new aws.iam.RolePolicy(group, "policy", {
+    role: role.name,
+    name: "lambda-policy",
+    policy: new Output(statementDeps, async (resolve3) => {
+      const list2 = await resolveInputs(statements);
+      resolve3(JSON.stringify({
+        Version: "2012-10-17",
+        Statement: compactPolicyStatements(list2).map((statement) => ({
+          Effect: pascalCase(statement.effect ?? "allow"),
+          Action: statement.actions,
+          Resource: statement.resources,
+          Condition: statement.conditions
+        }))
+      }));
+    })
+  });
+  const dependsOn = [policy];
+  if (props.vpc) {
+    dependsOn.push(new aws.iam.RolePolicy(group, "vpc-policy", {
+      role: role.name,
+      name: "lambda-vpc-policy",
+      policy: JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Action: [
+              "ec2:CreateNetworkInterface",
+              "ec2:DescribeNetworkInterfaces",
+              "ec2:DescribeSubnets",
+              "ec2:DeleteNetworkInterface",
+              "ec2:AssignPrivateIpAddresses",
+              "ec2:UnassignPrivateIpAddresses"
+            ],
+            Resource: ["*"]
+          }
+        ]
+      })
+    }));
+  }
+  const variables = {};
+  const logFormats = {
+    text: "Text",
+    json: "JSON"
+  };
+  const lambda = new aws.lambda.Function(group, "function", {
+    functionName: name,
+    description: props.description ?? name,
+    role: role.arn,
+    runtime: props.runtime,
+    handler: props.handler,
+    timeout: toSeconds4(props.timeout),
+    memorySize: toMebibytes(props.memorySize),
+    architectures: [props.architecture],
+    reservedConcurrentExecutions: props.reserved,
+    ephemeralStorage: {
+      size: toMebibytes(props.ephemeralStorageSize)
+    },
+    layers: props.layers?.map((layerId) => ctx.shared.entry("layer", "arn", layerId)),
+    timeouts: {
+      create: "30s",
+      update: "30s",
+      delete: "30s"
+    },
+    s3Bucket: code.bucket,
+    s3ObjectVersion: code.versionId,
+    s3Key: code.key.pipe((name2) => {
+      if (name2.startsWith("/")) {
+        return name2.substring(1);
+      }
+      return name2;
+    }),
+    sourceCodeHash: sourceHash,
+    environment: {
+      variables
+    },
+    vpcConfig: props.vpc ? {
+      securityGroupIds: [ctx.shared.get("vpc", "security-group-id")],
+      subnetIds: ctx.shared.get("vpc", "private-subnets"),
+      ipv6AllowedForDualStack: true
+    } : undefined,
+    loggingConfig: {
+      logGroup: `/aws/lambda/${name}`,
+      logFormat: logFormats[props.log.format],
+      applicationLogLevel: props.log.format === "json" ? props.log.level?.toUpperCase() : undefined,
+      systemLogLevel: props.log.format === "json" ? props.log.system?.toUpperCase() : undefined
+    }
+  }, {
+    dependsOn
+  });
+  ctx.addFunction(lambda);
+  variables.APP = ctx.appConfig.name;
+  variables.APP_ID = ctx.appId;
+  variables.AWS_ACCOUNT_ID = ctx.accountId;
+  variables.REGION = ctx.appConfig.region;
+  variables.STAGE = ctx.appConfig.stage ?? "default";
+  variables.STACK = ctx.stackConfig.name;
+  variables.STANDALONE = "true";
+  if (props.vpc) {
+    variables.AWS_USE_DUALSTACK_ENDPOINT = "true";
+  }
+  for (const [key, value] of Object.entries(props.environment ?? {})) {
+    variables[key] = value;
+  }
+  ctx.onEnv((name2, value) => {
+    variables[name2] = value;
+  });
+  ctx.onBind((name2, value) => {
+    variables[name2] = value;
+  });
+  if (props.log.retention.value > 0n) {
+    const logGroup = new aws.cloudwatch.LogGroup(group, "log", {
+      name: `/aws/lambda/${name}`,
+      retentionInDays: toDays6(props.log.retention)
+    });
+    addPermission({
+      actions: ["logs:PutLogEvents", "logs:CreateLogStream"],
+      resources: [logGroup.arn.pipe((arn) => `${arn}:*`)]
+    });
+    if (ctx.shared.has("on-error-log", "subscriber-arn")) {
+      new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
+        name: "error-log-subscription",
+        destinationArn: ctx.shared.get("on-error-log", "subscriber-arn"),
+        logGroupName: logGroup.name,
+        filterPattern
+      }, {
+        dependsOn: [ctx.shared.get("on-error-log", "permission")]
+      });
+    }
+  }
+  return {
+    name,
+    group,
+    lambda,
+    policy,
+    code,
+    setEnvironment(name2, value) {
+      variables[name2] = value;
+    },
+    addPermission(...permissions) {
+      addPermission(...permissions);
+    }
+  };
+};
+var createPrebuildLambdaFunction = (parentGroup, ctx, ns, id, props) => {
+  let name;
+  let roleName;
+  const group = new Group(parentGroup, "function", id);
+  if ("stack" in ctx) {
+    name = formatLocalResourceName({
+      appName: ctx.app.name,
+      stackName: ctx.stack.name,
+      resourceType: ns,
+      resourceName: id
+    });
+    roleName = formatLocalResourceName({
+      appName: ctx.app.name,
+      stackName: ctx.stack.name,
+      resourceType: ns,
+      resourceName: id,
+      postfix: ctx.appId
+    });
+  } else {
+    name = formatGlobalResourceName({
+      appName: ctx.app.name,
+      resourceType: ns,
+      resourceName: id
+    });
+    roleName = formatGlobalResourceName({
+      appName: ctx.app.name,
+      resourceType: ns,
+      resourceName: id,
+      postfix: ctx.appId
+    });
+  }
+  const sourceHash = $file(props.bundleHash);
+  const code = new aws.s3.BucketObject(group, "code", {
+    bucket: ctx.shared.get("asset", "bucket").name,
+    key: `lambda/${name}.zip`,
+    source: relativePath(props.bundleFile),
+    sourceHash
+  }, {
+    replaceOnChanges: ["bucket", "key"]
+  });
+  const role = new aws.iam.Role(group, "role", {
+    name: roleName,
+    description: name,
+    assumeRolePolicy: JSON.stringify({
+      Version: "2012-10-17",
+      Statement: [
+        {
+          Effect: "Allow",
+          Action: "sts:AssumeRole",
+          Principal: {
+            Service: ["lambda.amazonaws.com"]
+          }
+        }
+      ]
+    })
+  });
+  const statements = [];
+  const statementDeps = new Set;
+  const addPermission = (...permissions) => {
+    statements.push(...permissions);
+    for (const dep of findInputDeps(permissions)) {
+      statementDeps.add(dep);
+    }
+  };
+  const policy = new aws.iam.RolePolicy(group, "policy", {
+    role: role.name,
+    name: "lambda-policy",
+    policy: new Output(statementDeps, async (resolve3) => {
+      const list2 = await resolveInputs(statements);
+      resolve3(JSON.stringify({
+        Version: "2012-10-17",
+        Statement: compactPolicyStatements(list2).map((statement) => ({
+          Effect: pascalCase(statement.effect ?? "allow"),
+          Action: statement.actions,
+          Resource: statement.resources,
+          Condition: statement.conditions
+        }))
+      }));
+    })
+  });
+  const dependsOn = [policy];
+  if (props.vpc) {
+    dependsOn.push(new aws.iam.RolePolicy(group, "vpc-policy", {
+      role: role.name,
+      name: "lambda-vpc-policy",
+      policy: JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Effect: "Allow",
+            Action: [
+              "ec2:CreateNetworkInterface",
+              "ec2:DescribeNetworkInterfaces",
+              "ec2:DescribeSubnets",
+              "ec2:DeleteNetworkInterface",
+              "ec2:AssignPrivateIpAddresses",
+              "ec2:UnassignPrivateIpAddresses"
+            ],
+            Resource: ["*"]
+          }
+        ]
+      })
+    }));
+  }
+  const variables = {};
+  const logFormats = {
+    text: "Text",
+    json: "JSON"
+  };
+  const lambda = new aws.lambda.Function(group, "function", {
+    functionName: name,
+    description: name,
+    role: role.arn,
+    runtime: props.runtime,
+    handler: props.handler,
+    timeout: toSeconds4(props.timeout ?? seconds4(10)),
+    memorySize: toMebibytes(props.memorySize ?? mebibytes(128)),
+    architectures: [props.architecture ?? "arm64"],
+    timeouts: {
+      create: "30s",
+      update: "30s",
+      delete: "30s"
+    },
+    s3Bucket: code.bucket,
+    s3ObjectVersion: code.versionId,
+    s3Key: code.key.pipe((name2) => {
+      if (name2.startsWith("/")) {
+        return name2.substring(1);
+      }
+      return name2;
+    }),
+    sourceCodeHash: sourceHash,
+    environment: {
+      variables
+    },
+    vpcConfig: props.vpc ? {
+      securityGroupIds: [ctx.shared.get("vpc", "security-group-id")],
+      subnetIds: ctx.shared.get("vpc", "private-subnets"),
+      ipv6AllowedForDualStack: true
+    } : undefined,
+    loggingConfig: {
+      logGroup: `/aws/lambda/${name}`,
+      logFormat: logFormats[props.log?.format ?? "json"],
+      applicationLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.level?.toUpperCase() : undefined,
+      systemLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.system?.toUpperCase() : undefined
+    }
+  }, {
+    dependsOn
+  });
+  variables.APP = ctx.appConfig.name;
+  variables.APP_ID = ctx.appId;
+  variables.AWS_ACCOUNT_ID = ctx.accountId;
+  variables.REGION = ctx.appConfig.region;
+  variables.STAGE = ctx.appConfig.stage ?? "default";
+  if ("stackConfig" in ctx) {
+    variables.STACK = ctx.stackConfig.name;
+  }
+  if (props.vpc) {
+    variables.AWS_USE_DUALSTACK_ENDPOINT = "true";
+  }
+  const retention = props.log?.retention;
+  if (retention && retention.value > 0n) {
+    const logGroup = new aws.cloudwatch.LogGroup(group, "log", {
+      name: `/aws/lambda/${name}`,
+      retentionInDays: toDays6(retention)
+    });
+    addPermission({
+      actions: ["logs:PutLogEvents", "logs:CreateLogStream"],
+      resources: [logGroup.arn.pipe((arn) => `${arn}:*`)]
+    });
+    if (ctx.shared.has("on-error-log", "subscriber-arn")) {
+      new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
+        name: "error-log-subscription",
+        destinationArn: ctx.shared.get("on-error-log", "subscriber-arn"),
+        logGroupName: logGroup.name,
+        filterPattern
+      }, {
+        dependsOn: [ctx.shared.get("on-error-log", "permission")]
+      });
+    }
+  }
+  return {
+    name,
+    group,
+    lambda,
+    policy,
+    code,
+    setEnvironment(name2, value) {
+      variables[name2] = value;
+    },
+    addPermission(...permissions) {
+      addPermission(...permissions);
+    }
+  };
+};
+
+// src/feature/function/index.ts
+var import_deepmerge2 = __toESM(require_cjs2(), 1);
 var typeGenCode3 = `
 import { InvokeOptions, InvokeResponse } from '@awsless/lambda'
 import type { PartialDeep } from 'type-fest'
@@ -104518,7 +105032,7 @@ var functionFeature = defineFeature({
       const mock = new TypeObject(2);
       const mockResponse = new TypeObject(2);
       for (const [name, local] of Object.entries(stack.functions || {})) {
-        const props = import_deepmerge.default(ctx.appConfig.defaults.function, local);
+        const props = import_deepmerge2.default(ctx.appConfig.defaults.function, local);
         const varName = camelCase(`${stack.name}-${name}`);
         const funcName = formatLocalResourceName({
           appName: ctx.appConfig.name,
@@ -104561,25 +105075,20 @@ var functionFeature = defineFeature({
   },
   onStack(ctx) {
     for (const [id, props] of Object.entries(ctx.stackConfig.functions ?? {})) {
-      registerBundleFunction(ctx, formatRouteKey(ctx.stack.name, "function", id), props);
+      const routeKey = formatRouteKey(ctx.stack.name, "function", id);
+      if (!isStandaloneFunction(props)) {
+        registerBundleFunction(ctx, routeKey, props);
+        continue;
+      }
+      createLambdaFunction(ctx, id, props);
+      const bundle = ctx.shared.get("bundle", "main");
+      bundle.addEnv(formatRouteEnvName(routeKey, "STANDALONE"), "true");
     }
   }
 });
 
 // src/feature/on-error-log/index.ts
-import { formatRouteEnvName } from "awsless";
-
-// src/feature/on-error-log/util.ts
-var filterPattern = `{${[
-  `$.level = "WARN"`,
-  `$.level = "ERROR"`,
-  `$.level = "FATAL"`,
-  `($.type = "platform.report" && $.record.status = "timeout")`,
-  `($.type = "platform.report" && $.record.status = "error")`,
-  `($.type = "platform.report" && $.record.status = "failure")`
-].join(" || ")}}`;
-
-// src/feature/on-error-log/index.ts
+import { formatRouteEnvName as formatRouteEnvName2 } from "awsless";
 import { dirname as dirname7, join as join12 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var onErrorLogFeature = defineFeature({
@@ -104599,7 +105108,7 @@ var onErrorLogFeature = defineFeature({
       file: join12(dirname7(fileURLToPath4(import.meta.url)), "/handlers/on-error-log.js"),
       exportName: "default"
     });
-    bundle.addEnv(formatRouteEnvName(handlerRoute, "CONSUMER"), consumerRoute);
+    bundle.addEnv(formatRouteEnvName2(handlerRoute, "CONSUMER"), consumerRoute);
     const requestTable = new aws.dynamodb.Table(group, "requests", {
       name: formatGlobalResourceName({
         appName: ctx.app.name,
@@ -104619,7 +105128,7 @@ var onErrorLogFeature = defineFeature({
         }
       ]
     });
-    bundle.addEnv(formatRouteEnvName(handlerRoute, "TABLE"), requestTable.name);
+    bundle.addEnv(formatRouteEnvName2(handlerRoute, "TABLE"), requestTable.name);
     bundle.addPermission({
       effect: "allow",
       actions: ["dynamodb:PutItem", "dynamodb:GetItem"],
@@ -104654,204 +105163,6 @@ var onErrorLogFeature = defineFeature({
 import { days as days8, toSeconds as toSeconds5 } from "@awsless/duration";
 import { dirname as dirname8, join as join13 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
-
-// src/feature/function/prebuild.ts
-import { seconds as seconds4, toDays as toDays6, toSeconds as toSeconds4 } from "@awsless/duration";
-var createPrebuildLambdaFunction = (parentGroup, ctx, ns, id, props) => {
-  let name;
-  let roleName;
-  const group = new Group(parentGroup, "function", id);
-  if ("stack" in ctx) {
-    name = formatLocalResourceName({
-      appName: ctx.app.name,
-      stackName: ctx.stack.name,
-      resourceType: ns,
-      resourceName: id
-    });
-    roleName = formatLocalResourceName({
-      appName: ctx.app.name,
-      stackName: ctx.stack.name,
-      resourceType: ns,
-      resourceName: id,
-      postfix: ctx.appId
-    });
-  } else {
-    name = formatGlobalResourceName({
-      appName: ctx.app.name,
-      resourceType: ns,
-      resourceName: id
-    });
-    roleName = formatGlobalResourceName({
-      appName: ctx.app.name,
-      resourceType: ns,
-      resourceName: id,
-      postfix: ctx.appId
-    });
-  }
-  const sourceHash = $file(props.bundleHash);
-  const code = new aws.s3.BucketObject(group, "code", {
-    bucket: ctx.shared.get("asset", "bucket").name,
-    key: `lambda/${name}.zip`,
-    source: relativePath(props.bundleFile),
-    sourceHash
-  }, {
-    replaceOnChanges: ["bucket", "key"]
-  });
-  const role = new aws.iam.Role(group, "role", {
-    name: roleName,
-    description: name,
-    assumeRolePolicy: JSON.stringify({
-      Version: "2012-10-17",
-      Statement: [
-        {
-          Effect: "Allow",
-          Action: "sts:AssumeRole",
-          Principal: {
-            Service: ["lambda.amazonaws.com"]
-          }
-        }
-      ]
-    })
-  });
-  const statements = [];
-  const statementDeps = new Set;
-  const addPermission = (...permissions) => {
-    statements.push(...permissions);
-    for (const dep of findInputDeps(permissions)) {
-      statementDeps.add(dep);
-    }
-  };
-  const policy = new aws.iam.RolePolicy(group, "policy", {
-    role: role.name,
-    name: "lambda-policy",
-    policy: new Output(statementDeps, async (resolve3) => {
-      const list2 = await resolveInputs(statements);
-      resolve3(JSON.stringify({
-        Version: "2012-10-17",
-        Statement: compactPolicyStatements(list2).map((statement) => ({
-          Effect: pascalCase(statement.effect ?? "allow"),
-          Action: statement.actions,
-          Resource: statement.resources,
-          Condition: statement.conditions
-        }))
-      }));
-    })
-  });
-  const dependsOn = [policy];
-  if (props.vpc) {
-    dependsOn.push(new aws.iam.RolePolicy(group, "vpc-policy", {
-      role: role.name,
-      name: "lambda-vpc-policy",
-      policy: JSON.stringify({
-        Version: "2012-10-17",
-        Statement: [
-          {
-            Effect: "Allow",
-            Action: [
-              "ec2:CreateNetworkInterface",
-              "ec2:DescribeNetworkInterfaces",
-              "ec2:DescribeSubnets",
-              "ec2:DeleteNetworkInterface",
-              "ec2:AssignPrivateIpAddresses",
-              "ec2:UnassignPrivateIpAddresses"
-            ],
-            Resource: ["*"]
-          }
-        ]
-      })
-    }));
-  }
-  const variables = {};
-  const logFormats = {
-    text: "Text",
-    json: "JSON"
-  };
-  const lambda = new aws.lambda.Function(group, "function", {
-    functionName: name,
-    description: name,
-    role: role.arn,
-    runtime: props.runtime,
-    handler: props.handler,
-    timeout: toSeconds4(props.timeout ?? seconds4(10)),
-    memorySize: toMebibytes(props.memorySize ?? mebibytes(128)),
-    architectures: [props.architecture ?? "arm64"],
-    timeouts: {
-      create: "30s",
-      update: "30s",
-      delete: "30s"
-    },
-    s3Bucket: code.bucket,
-    s3ObjectVersion: code.versionId,
-    s3Key: code.key.pipe((name2) => {
-      if (name2.startsWith("/")) {
-        return name2.substring(1);
-      }
-      return name2;
-    }),
-    sourceCodeHash: sourceHash,
-    environment: {
-      variables
-    },
-    vpcConfig: props.vpc ? {
-      securityGroupIds: [ctx.shared.get("vpc", "security-group-id")],
-      subnetIds: ctx.shared.get("vpc", "private-subnets"),
-      ipv6AllowedForDualStack: true
-    } : undefined,
-    loggingConfig: {
-      logGroup: `/aws/lambda/${name}`,
-      logFormat: logFormats[props.log?.format ?? "json"],
-      applicationLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.level?.toUpperCase() : undefined,
-      systemLogLevel: (props.log?.format ?? "json") === "json" ? props.log?.system?.toUpperCase() : undefined
-    }
-  }, {
-    dependsOn
-  });
-  variables.APP = ctx.appConfig.name;
-  variables.APP_ID = ctx.appId;
-  variables.AWS_ACCOUNT_ID = ctx.accountId;
-  if ("stackConfig" in ctx) {
-    variables.STACK = ctx.stackConfig.name;
-  }
-  if (props.vpc) {
-    variables.AWS_USE_DUALSTACK_ENDPOINT = "true";
-  }
-  const retention = props.log?.retention;
-  if (retention && retention.value > 0n) {
-    const logGroup = new aws.cloudwatch.LogGroup(group, "log", {
-      name: `/aws/lambda/${name}`,
-      retentionInDays: toDays6(retention)
-    });
-    addPermission({
-      actions: ["logs:PutLogEvents", "logs:CreateLogStream"],
-      resources: [logGroup.arn.pipe((arn) => `${arn}:*`)]
-    });
-    if (ctx.shared.has("on-error-log", "subscriber-arn")) {
-      new aws.cloudwatch.LogSubscriptionFilter(group, "on-error-log", {
-        name: "error-log-subscription",
-        destinationArn: ctx.shared.get("on-error-log", "subscriber-arn"),
-        logGroupName: logGroup.name,
-        filterPattern
-      }, {
-        dependsOn: [ctx.shared.get("on-error-log", "permission")]
-      });
-    }
-  }
-  return {
-    name,
-    group,
-    lambda,
-    policy,
-    code,
-    setEnvironment(name2, value) {
-      variables[name2] = value;
-    },
-    addPermission(...permissions) {
-      addPermission(...permissions);
-    }
-  };
-};
-
-// src/feature/on-failure/index.ts
 var onFailureFeature = defineFeature({
   name: "on-failure",
   onBefore(ctx) {
@@ -105078,18 +105389,18 @@ var onFailureFeature = defineFeature({
 import { createHmac as createHmac2 } from "crypto";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { dirname as dirname10, join as join16 } from "path";
-import { formatRouteEnvName as formatRouteEnvName2 } from "awsless";
+import { formatRouteEnvName as formatRouteEnvName3 } from "awsless";
 
 // src/feature/pubsub/util.ts
 import { toDays as toDays7 } from "@awsless/duration";
 import { stringify } from "@awsless/json";
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 import { readFile as readFile10 } from "fs/promises";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { dirname as dirname9, join as join15 } from "path";
 
 // src/feature/instance/build/executable.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 import { readFile as readFile9 } from "fs/promises";
 import { join as join14 } from "path";
 var buildExecutable = async (input, outputPath, architecture) => {
@@ -105132,7 +105443,7 @@ ${result.logs?.map((log) => log.message).join(`
   }
   const file2 = await readFile9(filePath);
   return {
-    hash: createHash10("sha1").update(file2).update("x86_64").digest("hex"),
+    hash: createHash11("sha1").update(file2).update("x86_64").digest("hex"),
     file: file2
   };
 };
@@ -105156,7 +105467,7 @@ var createPubSubService = (parentGroup, ctx, id, props, inputs) => {
   const image = "public.ecr.aws/aws-cli/aws-cli:arm64";
   const bundleFile = join15(__dirname2, "handlers/pubsub-server.js");
   ctx.registerBuild("pubsub", name, async (build2) => {
-    const hash2 = createHash11("sha1").update(await readFile10(bundleFile)).digest("hex");
+    const hash2 = createHash12("sha1").update(await readFile10(bundleFile)).digest("hex");
     const fingerprint = `${hash2}-${ARCHITECTURE}`;
     return build2(fingerprint, async (write) => {
       const temp = await createTempFolder(`pubsub--${name}`);
@@ -105431,7 +105742,7 @@ var createPubSubService = (parentGroup, ctx, id, props, inputs) => {
   variables.APP_ID = ctx.appId;
   variables.AWS_ACCOUNT_ID = ctx.accountId;
   variables.CODE_HASH = code.sourceHash;
-  variables.PUBSUB_CONFIG_HASH = createHash11("sha1").update(stringify(props)).digest("hex");
+  variables.PUBSUB_CONFIG_HASH = createHash12("sha1").update(stringify(props)).digest("hex");
   for (const [key, value] of Object.entries(inputs.environment)) {
     variables[key] = value;
     for (const dep of findInputDeps([value])) {
@@ -105688,9 +105999,9 @@ var pubsubFeature = defineFeature({
         file: join16(__dirname3, "/handlers/pubsub-publisher.js"),
         exportName: "default"
       });
-      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "REDIS_HOST"), redisHost);
-      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "REDIS_PORT"), redisPort.pipe((port) => port.toString()));
-      bundle.addEnv(formatRouteEnvName2(publisherRouteKey, "CHANNEL"), channel);
+      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "REDIS_HOST"), redisHost);
+      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "REDIS_PORT"), redisPort.pipe((port) => port.toString()));
+      bundle.addEnv(formatRouteEnvName3(publisherRouteKey, "CHANNEL"), channel);
       const routerProps = ctx.appConfig.defaults.router?.[props.router];
       if (!routerProps?.domain) {
         throw new FileError("app.json", `The pubsub "${id}" requires the "${props.router}" router to have a domain configured.`);
@@ -105728,7 +106039,7 @@ var pubsubFeature = defineFeature({
 });
 
 // src/feature/queue/index.ts
-var import_deepmerge2 = __toESM(require_cjs2(), 1);
+var import_deepmerge3 = __toESM(require_cjs2(), 1);
 import { relative as relative4 } from "path";
 import { minutes as minutes7, seconds as seconds5, toSeconds as toSeconds6 } from "@awsless/duration";
 var typeGenCode5 = `
@@ -105798,7 +106109,7 @@ var queueFeature = defineFeature({
   onStack(ctx) {
     const bundleTimeout = toSeconds6(ctx.appConfig.defaults.function.timeout);
     for (const [id, local] of Object.entries(ctx.stackConfig.queues || {})) {
-      const props = import_deepmerge2.default(ctx.appConfig.defaults.queue, typeof local === "object" ? local : {});
+      const props = import_deepmerge3.default(ctx.appConfig.defaults.queue, typeof local === "object" ? local : {});
       const group = new Group(ctx.stack, "queue", id);
       const baseName = formatLocalResourceName({
         appName: ctx.app.name,
@@ -105945,7 +106256,7 @@ var restFeature = defineFeature({
 });
 
 // src/feature/rpc/index.ts
-import { formatRouteEnvName as formatRouteEnvName3 } from "awsless";
+import { formatRouteEnvName as formatRouteEnvName4 } from "awsless";
 import { dirname as dirname11, join as join17, relative as relative5 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { toSeconds as toSeconds7 } from "@awsless/duration";
@@ -106002,7 +106313,7 @@ var rpcFeature = defineFeature({
         file: join17(dirname11(fileURLToPath8(import.meta.url)), "/handlers/rpc.js"),
         exportName: "default"
       });
-      bundle.addEnv(formatRouteEnvName3(serverRouteKey, "TIMEOUT"), toSeconds7(ctx.appConfig.defaults.function.timeout).toString());
+      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "TIMEOUT"), toSeconds7(ctx.appConfig.defaults.function.timeout).toString());
       const lockTable = new aws.dynamodb.Table(group, "lock", {
         name: formatGlobalResourceName({
           appName: ctx.app.name,
@@ -106022,7 +106333,7 @@ var rpcFeature = defineFeature({
           }
         ]
       });
-      bundle.addEnv(formatRouteEnvName3(serverRouteKey, "LOCK_TABLE"), lockTable.name);
+      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "LOCK_TABLE"), lockTable.name);
       bundle.addPermission({
         effect: "allow",
         actions: ["dynamodb:UpdateItem", "dynamodb:DeleteItem"],
@@ -106031,7 +106342,7 @@ var rpcFeature = defineFeature({
       if (props.auth) {
         const authRouteKey = formatRouteKey("base", "rpc", `${id}-auth`);
         registerBundleFunction(ctx, authRouteKey, props.auth);
-        bundle.addEnv(formatRouteEnvName3(serverRouteKey, "AUTH"), authRouteKey);
+        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "AUTH"), authRouteKey);
       }
       const addRoutes = ctx.shared.entry("router", "addRoutes", props.router);
       addRoutes({
@@ -106056,7 +106367,7 @@ var rpcFeature = defineFeature({
         const entryId = kebabCase(`${id}-${shortId(name)}`);
         const routeKey = formatRouteKey(ctx.stack.name, "rpc", entryId);
         registerBundleFunction(ctx, routeKey, props.function);
-        bundle.addEnv(formatRouteEnvName3(serverRouteKey, `QUERY:${name}`), JSON.stringify({ function: routeKey, lock: props.lock }));
+        bundle.addEnv(formatRouteEnvName4(serverRouteKey, `QUERY:${name}`), JSON.stringify({ function: routeKey, lock: props.lock }));
       }
     }
   }
@@ -106148,8 +106459,8 @@ var searchFeature = defineFeature({
 });
 
 // src/feature/site/index.ts
-import { createHash as createHash12 } from "crypto";
-import { dirname as dirname12, join as join20 } from "path";
+import { createHash as createHash13 } from "crypto";
+import { dirname as dirname13, join as join20 } from "path";
 
 // src/util/cache.ts
 import { lstat as lstat3, readdir as readdir4 } from "fs/promises";
@@ -106189,36 +106500,41 @@ var listAllFiles = async (list2) => {
 };
 
 // src/feature/site/static-routes.ts
-import { basename as basename3, join as join19 } from "path";
+import { basename as basename3, dirname as dirname12, join as join19 } from "path";
+var isPageFile = (file2) => {
+  return file2.endsWith(".html") || !basename3(file2).includes(".");
+};
+var pageUrl = (file2) => {
+  if (!file2.endsWith(".html")) {
+    return file2;
+  }
+  const url = file2.slice(0, -".html".length);
+  if (basename3(url) === "index") {
+    return dirname12(url);
+  }
+  return url;
+};
 var planStaticRoutes = (files, sitePath) => {
   const plan = { files: {}, dirs: [] };
-  const assetDirs = new Set;
-  for (const file2 of files) {
-    if (file2.endsWith(".html")) {
-      const strippedHtmlFile = file2.endsWith("index.html") ? file2.slice(0, -11) : file2.slice(0, -5);
-      const urlFriendlyFile = strippedHtmlFile.endsWith("/") ? strippedHtmlFile.slice(0, -1) : strippedHtmlFile;
-      plan.files[join19(sitePath, urlFriendlyFile)] = file2;
-      continue;
-    }
-    if (!basename3(file2).includes(".")) {
-      plan.files[join19(sitePath, file2)] = file2;
-      continue;
-    }
-    if (sitePath !== "/") {
-      continue;
-    }
-    const firstSegment = file2.split("/")[0];
-    if (file2.includes("/") && !firstSegment.includes(".")) {
-      assetDirs.add(firstSegment);
-      continue;
-    }
-    plan.files[join19(sitePath, file2)] = file2;
+  const pages = files.filter((file2) => isPageFile(file2));
+  const assets = files.filter((file2) => !isPageFile(file2));
+  for (const page of pages) {
+    plan.files[join19(sitePath, pageUrl(page))] = page;
   }
-  if (sitePath === "/") {
-    plan.dirs = [...assetDirs].map((dir) => join19(sitePath, dir, "*."));
-  } else {
+  if (sitePath !== "/") {
     plan.catchAll = join19(sitePath, "*.");
+    return plan;
+  }
+  const folders = new Set;
+  for (const asset of assets) {
+    const folder = asset.split("/")[0];
+    if (asset.includes("/") && !folder.includes(".")) {
+      folders.add(folder);
+      continue;
+    }
+    plan.files[join19(sitePath, asset)] = asset;
   }
+  plan.dirs = [...folders].map((folder) => join19(sitePath, folder, "*."));
   return plan;
 };
 
@@ -106243,7 +106559,7 @@ var siteFeature = defineFeature({
           return build2(fingerprint, async (write) => {
             const credentialProvider = await getCredentials(ctx.appConfig.profile);
             const credentials2 = await credentialProvider();
-            const cwd = join20(directories.root, dirname12(ctx.stackConfig.file));
+            const cwd = join20(directories.root, dirname13(ctx.stackConfig.file));
             const env2 = {
               ...process.env,
               APP: ctx.appConfig.name,
@@ -106309,7 +106625,7 @@ ${(errors3.trim() || output.trim()).slice(-2000)}`);
             }).sort();
             const hashes = files.map((file2) => $hash(join20(staticDir, file2)));
             const version = $combine(...hashes).pipe((hashes2) => {
-              const hash2 = createHash12("sha1");
+              const hash2 = createHash13("sha1");
               for (const [index, file2] of files.entries()) {
                 hash2.update(file2);
                 hash2.update(hashes2[index]);
@@ -107127,8 +107443,8 @@ var layerFeature = defineFeature({
 
 // src/feature/image/index.ts
 import { toDays as toDays9 } from "@awsless/duration";
-import { formatRouteEnvName as formatRouteEnvName4 } from "awsless";
-import { dirname as dirname13, join as join22 } from "path";
+import { formatRouteEnvName as formatRouteEnvName5 } from "awsless";
+import { dirname as dirname14, join as join22 } from "path";
 import { fileURLToPath as fileURLToPath9 } from "url";
 var imageFeature = defineFeature({
   name: "image",
@@ -107143,7 +107459,7 @@ var imageFeature = defineFeature({
       throw new FileError("app.json", "The image feature requires an arm64 function bundle.");
     }
     const group = new Group(ctx.base, "image", "layer");
-    const path2 = join22(dirname13(fileURLToPath9(import.meta.url)), "/layers/sharp-arm.zip");
+    const path2 = join22(dirname14(fileURLToPath9(import.meta.url)), "/layers/sharp-arm.zip");
     const layerId = formatGlobalResourceName({
       appName: ctx.appConfig.name,
       resourceType: "layer",
@@ -107208,7 +107524,7 @@ var imageFeature = defineFeature({
       const serverRouteKey = formatRouteKey(ctx.stack.name, "image", id);
       bundle.addHandler({
         routeKey: serverRouteKey,
-        file: join22(dirname13(fileURLToPath9(import.meta.url)), "/handlers/image.js"),
+        file: join22(dirname14(fileURLToPath9(import.meta.url)), "/handlers/image.js"),
         exportName: "default",
         external: ["sharp"]
       });
@@ -107224,17 +107540,17 @@ var imageFeature = defineFeature({
           }
         }
       });
-      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_CONFIG"), JSON.stringify({
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_CONFIG"), JSON.stringify({
         presets: props.presets,
         extensions: props.extensions
       }));
-      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_BUCKET"), bucket.name);
-      bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_FOLDER"), folder);
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_BUCKET"), bucket.name);
+      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_FOLDER"), folder);
       if (originRouteKey) {
-        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_ORIGIN"), originRouteKey);
+        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_ORIGIN"), originRouteKey);
       }
       if (props.origin.static) {
-        bundle.addEnv(formatRouteEnvName4(serverRouteKey, "IMAGE_ORIGIN_S3"), "true");
+        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "IMAGE_ORIGIN_S3"), "true");
       }
       ctx.onReady(() => {
         if (props.origin.static) {
@@ -107262,8 +107578,8 @@ var imageFeature = defineFeature({
 
 // src/feature/icon/index.ts
 import { toDays as toDays10 } from "@awsless/duration";
-import { formatRouteEnvName as formatRouteEnvName5 } from "awsless";
-import { dirname as dirname14, join as join23 } from "path";
+import { formatRouteEnvName as formatRouteEnvName6 } from "awsless";
+import { dirname as dirname15, join as join23 } from "path";
 import { fileURLToPath as fileURLToPath10 } from "url";
 var iconFeature = defineFeature({
   name: "icon",
@@ -107295,7 +107611,7 @@ var iconFeature = defineFeature({
       const serverRouteKey = formatRouteKey(ctx.stack.name, "icon", id);
       bundle.addHandler({
         routeKey: serverRouteKey,
-        file: join23(dirname14(fileURLToPath10(import.meta.url)), "/handlers/icon.js"),
+        file: join23(dirname15(fileURLToPath10(import.meta.url)), "/handlers/icon.js"),
         exportName: "default"
       });
       addRoutes({
@@ -107310,17 +107626,17 @@ var iconFeature = defineFeature({
           }
         }
       });
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_CONFIG"), JSON.stringify({
+      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_CONFIG"), JSON.stringify({
         preserveIds: props.preserveIds,
         symbols: props.symbols
       }));
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_BUCKET"), bucket.name);
-      bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_FOLDER"), folder);
+      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_BUCKET"), bucket.name);
+      bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_FOLDER"), folder);
       if (originRouteKey) {
-        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_ORIGIN"), originRouteKey);
+        bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_ORIGIN"), originRouteKey);
       }
       if (props.origin.static) {
-        bundle.addEnv(formatRouteEnvName5(serverRouteKey, "ICON_ORIGIN_S3"), "true");
+        bundle.addEnv(formatRouteEnvName6(serverRouteKey, "ICON_ORIGIN_S3"), "true");
       }
       ctx.onReady(() => {
         if (props.origin.static) {
@@ -107350,18 +107666,18 @@ var iconFeature = defineFeature({
 });
 
 // src/feature/job/index.ts
-var import_deepmerge4 = __toESM(require_cjs2(), 1);
+var import_deepmerge5 = __toESM(require_cjs2(), 1);
 import { relative as relative7 } from "path";
 
 // src/feature/job/util.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import { toDays as toDays11, toSeconds as toSeconds9 } from "@awsless/duration";
 import { stringify as stringify2 } from "@awsless/json";
-import { generateFileHash as generateFileHash2 } from "@awsless/ts-file-cache";
-var import_deepmerge3 = __toESM(require_cjs2(), 1);
+import { generateFileHash as generateFileHash3 } from "@awsless/ts-file-cache";
+var import_deepmerge4 = __toESM(require_cjs2(), 1);
 
 // src/feature/job/build/executable.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 import { readFile as readFile11, writeFile as writeFile7 } from "fs/promises";
 import { join as join24, resolve as resolve3 } from "path";
 var buildJobExecutable = async (input, outputPath, architecture) => {
@@ -107419,7 +107735,7 @@ ${result.logs?.map((log) => log.message).join(`
   }
   const file2 = await readFile11(filePath);
   return {
-    hash: createHash13("sha1").update(file2).update(target2).digest("hex"),
+    hash: createHash14("sha1").update(file2).update(target2).digest("hex"),
     file: file2
   };
 };
@@ -107434,10 +107750,10 @@ var createFargateJob = (parentGroup, ctx, ns, id, local) => {
     resourceName: id
   });
   const shortName = shortId(`${ctx.app.name}:${ctx.stack.name}:${ns}:${id}:${ctx.appId}`);
-  const props = import_deepmerge3.default(ctx.appConfig.defaults.job, local);
+  const props = import_deepmerge4.default(ctx.appConfig.defaults.job, local);
   const image = props.image || (props.architecture === "arm64" ? "public.ecr.aws/aws-cli/aws-cli:arm64" : "public.ecr.aws/aws-cli/aws-cli:amd64");
   ctx.registerBuild("job", name, async (build2, { workspace }) => {
-    const fingerprint = [await generateFileHash2(workspace, local.code.file), props.architecture].join(":");
+    const fingerprint = [await generateFileHash3(workspace, local.code.file), props.architecture].join(":");
     return build2(fingerprint, async (write) => {
       const temp = await createTempFolder(`job--${name}`);
       const executable = await buildJobExecutable(local.code.file, temp.path, props.architecture);
@@ -107682,7 +107998,7 @@ var createFargateJob = (parentGroup, ctx, ns, id, local) => {
   variables.AWS_ACCOUNT_ID = ctx.accountId;
   variables.STACK = ctx.stackConfig.name;
   variables.CODE_HASH = code.sourceHash;
-  variables.JOB_CONFIG_HASH = createHash14("sha1").update(stringify2(props)).digest("hex");
+  variables.JOB_CONFIG_HASH = createHash15("sha1").update(stringify2(props)).digest("hex");
   if (props.environment) {
     for (const [key, value] of Object.entries(props.environment)) {
       variables[key] = value;
@@ -107799,7 +108115,7 @@ var jobFeature = defineFeature({
     });
     ctx.shared.set("job", "security-group-id", securityGroup.id);
     const needsPersistentStorage = ctx.stackConfigs.some((stack) => Object.values(stack.jobs ?? {}).some((job) => {
-      const merged = import_deepmerge4.default(ctx.appConfig.defaults.job, job);
+      const merged = import_deepmerge5.default(ctx.appConfig.defaults.job, job);
       return merged.persistentStorage;
     }));
     if (needsPersistentStorage) {
@@ -107829,6 +108145,8 @@ var jobFeature = defineFeature({
           fileSystemId: fileSystem.id,
           subnetId,
           securityGroups: [securityGroup.id]
+        }, {
+          replaceOnChanges: ["subnetId"]
         });
       }
       ctx.shared.set("job", "persistent-storage-file-system-id", fileSystem.id);
@@ -107873,9 +108191,9 @@ import { days as days9, seconds as seconds6, toSeconds as toSeconds11 } from "@a
 // src/feature/instance/util.ts
 import { toDays as toDays12, toSeconds as toSeconds10 } from "@awsless/duration";
 import { stringify as stringify3 } from "@awsless/json";
-import { generateFileHash as generateFileHash3 } from "@awsless/ts-file-cache";
-var import_deepmerge5 = __toESM(require_cjs2(), 1);
-import { createHash as createHash15 } from "crypto";
+import { generateFileHash as generateFileHash4 } from "@awsless/ts-file-cache";
+var import_deepmerge6 = __toESM(require_cjs2(), 1);
+import { createHash as createHash16 } from "crypto";
 import { join as join25 } from "path";
 var createFargateTask = (parentGroup, ctx, ns, id, local) => {
   const group = new Group(parentGroup, "instance", ns);
@@ -107886,10 +108204,10 @@ var createFargateTask = (parentGroup, ctx, ns, id, local) => {
     resourceName: id
   });
   const shortName = shortId(`${ctx.app.name}:${ctx.stack.name}:${ns}:${id}:${ctx.appId}`);
-  const props = import_deepmerge5.default(ctx.appConfig.defaults.instance, local);
+  const props = import_deepmerge6.default(ctx.appConfig.defaults.instance, local);
   const image = props.image || (props.architecture === "arm64" ? "public.ecr.aws/aws-cli/aws-cli:arm64" : "public.ecr.aws/aws-cli/aws-cli:amd64");
   ctx.registerBuild("instance", name, async (build2, { workspace }) => {
-    const fingerprint = await generateFileHash3(workspace, local.code.file);
+    const fingerprint = await generateFileHash4(workspace, local.code.file);
     return build2(fingerprint, async (write) => {
       const temp = await createTempFolder(`instance--${name}`);
       const executable = await buildExecutable(local.code.file, temp.path, props.architecture);
@@ -108168,7 +108486,7 @@ var createFargateTask = (parentGroup, ctx, ns, id, local) => {
   variables.AWS_ACCOUNT_ID = ctx.accountId;
   variables.STACK = ctx.stackConfig.name;
   variables.CODE_HASH = code.sourceHash;
-  variables.INSTANCE_CONFIG_HASH = createHash15("sha1").update(stringify3(props)).digest("hex");
+  variables.INSTANCE_CONFIG_HASH = createHash16("sha1").update(stringify3(props)).digest("hex");
   if (props.environment) {
     for (const [key, value] of Object.entries(props.environment)) {
       variables[key] = value;
@@ -110237,6 +110555,9 @@ var createApp = (props) => {
           builder
         });
       },
+      registerConfig(name) {
+        configs.add(name);
+      },
       registerCommand(command) {
         commands.push(command);
       },
@@ -110278,6 +110599,7 @@ var createApp = (props) => {
         shared,
         onPermission(callback) {
           globalPermissionCallbacks.push(callback);
+          appPermissionCallbacks.push(callback);
         },
         addGlobalPermission(permission) {
           globalPermissions.push(permission);
@@ -110289,7 +110611,7 @@ var createApp = (props) => {
           warnings.push(props2);
         },
         addFunction(lambda) {
-          for (const configName of stackConfig.configs ?? []) {
+          for (const configName of props.appConfig.configs ?? []) {
             functionsByConfig[configName] ??= [];
             functionsByConfig[configName].push(lambda);
           }
@@ -110782,7 +111104,7 @@ import { parse as parse5, stringify as stringify4 } from "@awsless/json";
 import { generateFolderHash, loadWorkspace as loadWorkspace2 } from "@awsless/ts-file-cache";
 
 // src/test/start.ts
-import { dirname as dirname15, join as join26 } from "path";
+import { dirname as dirname16, join as join26 } from "path";
 import { fileURLToPath as fileURLToPath11 } from "url";
 import { configDefaults } from "vitest/config";
 import { startVitest } from "vitest/node";
@@ -110790,7 +111112,7 @@ import { startVitest } from "vitest/node";
 class NullReporter {
 }
 var startTest = async (props) => {
-  const __dirname4 = dirname15(fileURLToPath11(import.meta.url));
+  const __dirname4 = dirname16(fileURLToPath11(import.meta.url));
   const startTime = process.hrtime.bigint();
   process.noDeprecation = true;
   const vitest = await startVitest("test", props.filters, {
@@ -112311,7 +112633,7 @@ var watchConfig = async (options, resolve4, reject) => {
 
 // src/type-gen/generate.ts
 import { mkdir as mkdir7, writeFile as writeFile9 } from "fs/promises";
-import { dirname as dirname16, join as join28, relative as relative8 } from "path";
+import { dirname as dirname17, join as join28, relative as relative8 } from "path";
 var generateTypes = async (props) => {
   const files = [];
   await Promise.all(features.map((feature) => {
@@ -112324,7 +112646,7 @@ var generateTypes = async (props) => {
           if (include) {
             files.push(relative8(directories.root, path2));
           }
-          await mkdir7(dirname16(path2), { recursive: true });
+          await mkdir7(dirname17(path2), { recursive: true });
           await writeFile9(path2, code);
         }
       }
@@ -115633,12 +115955,12 @@ import { join as join33 } from "path";
 
 // ../../node_modules/.pnpm/@aws-sdk+util-user-agent-node@3.973.14_aws-crt@1.30.0_supports-color@8.1.1_/node_modules/@aws-sdk/util-user-agent-node/dist-es/getNodeModulesParentDirs.js
 import { normalize as normalize3, sep as sep3 } from "path";
-var getNodeModulesParentDirs = (dirname18) => {
+var getNodeModulesParentDirs = (dirname19) => {
   const cwd = process.cwd();
-  if (!dirname18) {
+  if (!dirname19) {
     return [cwd];
   }
-  const normalizedPath = normalize3(dirname18);
+  const normalizedPath = normalize3(dirname19);
   const parts = normalizedPath.split(sep3);
   const nodeModulesIndex = parts.indexOf("node_modules");
   const parentDir = nodeModulesIndex !== -1 ? parts.slice(0, nodeModulesIndex).join(sep3) : normalizedPath;
@@ -115692,8 +116014,8 @@ var getTypeScriptUserAgentPair = async () => {
     tscVersion = null;
     return;
   }
-  const dirname18 = typeof __dirname !== "undefined" ? __dirname : undefined;
-  const nodeModulesParentDirs = getNodeModulesParentDirs(dirname18);
+  const dirname19 = typeof __dirname !== "undefined" ? __dirname : undefined;
+  const nodeModulesParentDirs = getNodeModulesParentDirs(dirname19);
   let versionFromApp;
   for (const nodeModulesParentDir of nodeModulesParentDirs) {
     try {
@@ -115841,7 +116163,7 @@ var toUtf82 = (input) => {
 
 // ../../node_modules/.pnpm/@smithy+hash-node@4.2.12/node_modules/@smithy/hash-node/dist-es/index.js
 import { Buffer as Buffer3 } from "buffer";
-import { createHash as createHash17, createHmac as createHmac3 } from "crypto";
+import { createHash as createHash18, createHmac as createHmac3 } from "crypto";
 
 class Hash {
   algorithmIdentifier;
@@ -115859,7 +116181,7 @@ class Hash {
     return Promise.resolve(this.hash.digest());
   }
   reset() {
-    this.hash = this.secret ? createHmac3(this.algorithmIdentifier, castSourceData(this.secret)) : createHash17(this.algorithmIdentifier);
+    this.hash = this.secret ? createHmac3(this.algorithmIdentifier, castSourceData(this.secret)) : createHash18(this.algorithmIdentifier);
   }
 }
 function castSourceData(toCast, encoding) {