@awsless/cli 0.1.37 → 0.1.38

package/dist/bin.js

@@ -126318,6 +126318,11 @@ function useColor() {
 // ../../node_modules/.pnpm/commander@15.0.0/node_modules/commander/index.js
 var program = new Command;
 
+// src/util/remote-agent.ts
+var isRemoteAgent = () => {
+  return !!process.env.AWSLESS_REMOTE_AGENT && process.env.AWSLESS_REMOTE_AGENT !== "0";
+};
+
 // src/cli/command/auth/user/create.ts
 import {
   AdminAddUserToGroupCommand as AdminAddUserToGroupCommand2,
@@ -155252,7 +155257,20 @@ var isError = (error52, name) => {
   return error52 instanceof Error && error52.name === name;
 };
 var hasRuntimeAwsCredentials = () => !!(process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_ACCESS_KEY_ID || process.env.AWS_WEB_IDENTITY_TOKEN_FILE);
+var getRemoteAgentCredentials = async (profile) => {
+  process.env.AWS_EC2_METADATA_DISABLED ??= "true";
+  const provider = fromNodeProviderChain();
+  try {
+    await provider();
+  } catch (error52) {
+    throw new ExpectedError(`No AWS credentials found for the ${profile} profile while running as a remote agent. ` + `Set AWS_ACCESS_KEY_ID & AWS_SECRET_ACCESS_KEY in the environment.`, { cause: error52 });
+  }
+  return provider;
+};
 var getCredentials = async (profile) => {
+  if (isRemoteAgent()) {
+    return getRemoteAgentCredentials(profile);
+  }
   if (hasRuntimeAwsCredentials()) {
     return fromNodeProviderChain();
   }
@@ -205177,6 +205195,255 @@ var prune = (program3) => {
   });
 };
 
+// src/cli/command/remote-agent/credentials/shared.ts
+import { IAMClient as IAMClient2 } from "@aws-sdk/client-iam";
+
+// src/util/remote-agent-iam.ts
+import {
+  CreateAccessKeyCommand,
+  CreateUserCommand,
+  DeleteAccessKeyCommand,
+  DeleteUserCommand,
+  DeleteUserPolicyCommand,
+  GetUserCommand,
+  GetUserPolicyCommand,
+  ListAccessKeysCommand,
+  PutUserPolicyCommand
+} from "@aws-sdk/client-iam";
+var remoteAgentUserName = (appName) => `awsless-remote-agent-${appName}`;
+var remoteAgentPolicyName = "awsless-remote-agent";
+var buildRemoteAgentPolicy = ({ appName, region, accountId, auth: auth2 }) => {
+  return {
+    Version: "2012-10-17",
+    Statement: [
+      {
+        Sid: "ReadConfig",
+        Effect: "Allow",
+        Action: ["ssm:GetParametersByPath", "ssm:GetParameter", "ssm:GetParameters"],
+        Resource: `arn:aws:ssm:${region}:${accountId}:parameter${configParameterPrefix(appName)}/*`
+      },
+      {
+        Sid: "DecryptConfig",
+        Effect: "Allow",
+        Action: "kms:Decrypt",
+        Resource: `arn:aws:kms:${region}:${accountId}:key/*`,
+        Condition: { StringEquals: { "kms:ViaService": `ssm.${region}.amazonaws.com` } }
+      },
+      ...auth2 ? [
+        {
+          Sid: "ResolveAuthPools",
+          Effect: "Allow",
+          Action: ["cognito-idp:ListUserPools", "cognito-idp:ListUserPoolClients"],
+          Resource: "*"
+        }
+      ] : []
+    ]
+  };
+};
+
+class RemoteAgentIam {
+  client;
+  appName;
+  constructor(client2, appName) {
+    this.client = client2;
+    this.appName = appName;
+  }
+  get userName() {
+    return remoteAgentUserName(this.appName);
+  }
+  async ensureUser() {
+    try {
+      await this.client.send(new GetUserCommand({ UserName: this.userName }));
+      return "existing";
+    } catch (error53) {
+      if (!isError(error53, "NoSuchEntityException")) {
+        throw error53;
+      }
+    }
+    await this.client.send(new CreateUserCommand({
+      UserName: this.userName,
+      Tags: [
+        { Key: "awsless:app", Value: this.appName },
+        { Key: "awsless:purpose", Value: "remote-agent" }
+      ]
+    }));
+    return "created";
+  }
+  async ensurePolicy(policy) {
+    const document2 = JSON.stringify(policy);
+    let current;
+    try {
+      const result = await this.client.send(new GetUserPolicyCommand({ UserName: this.userName, PolicyName: remoteAgentPolicyName }));
+      current = result.PolicyDocument ? JSON.stringify(JSON.parse(decodeURIComponent(result.PolicyDocument))) : undefined;
+    } catch (error53) {
+      if (!isError(error53, "NoSuchEntityException")) {
+        throw error53;
+      }
+    }
+    if (current === document2) {
+      return "unchanged";
+    }
+    await this.client.send(new PutUserPolicyCommand({
+      UserName: this.userName,
+      PolicyName: remoteAgentPolicyName,
+      PolicyDocument: document2
+    }));
+    return current === undefined ? "created" : "updated";
+  }
+  async listKeys() {
+    try {
+      const result = await this.client.send(new ListAccessKeysCommand({ UserName: this.userName }));
+      return (result.AccessKeyMetadata ?? []).filter((key) => key.AccessKeyId).map((key) => ({ id: key.AccessKeyId, createdAt: key.CreateDate }));
+    } catch (error53) {
+      if (isError(error53, "NoSuchEntityException")) {
+        return [];
+      }
+      throw error53;
+    }
+  }
+  async createKey() {
+    const result = await this.client.send(new CreateAccessKeyCommand({ UserName: this.userName }));
+    const key = result.AccessKey;
+    if (!key?.AccessKeyId || !key.SecretAccessKey) {
+      throw new Error("IAM returned an access key without an id or secret.");
+    }
+    return { id: key.AccessKeyId, secret: key.SecretAccessKey };
+  }
+  async deleteKey(id) {
+    await this.client.send(new DeleteAccessKeyCommand({ UserName: this.userName, AccessKeyId: id }));
+  }
+  async deleteUser() {
+    try {
+      await this.client.send(new GetUserCommand({ UserName: this.userName }));
+    } catch (error53) {
+      if (isError(error53, "NoSuchEntityException")) {
+        return false;
+      }
+      throw error53;
+    }
+    for (const key of await this.listKeys()) {
+      await this.deleteKey(key.id);
+    }
+    try {
+      await this.client.send(new DeleteUserPolicyCommand({ UserName: this.userName, PolicyName: remoteAgentPolicyName }));
+    } catch (error53) {
+      if (!isError(error53, "NoSuchEntityException")) {
+        throw error53;
+      }
+    }
+    await this.client.send(new DeleteUserCommand({ UserName: this.userName }));
+    return true;
+  }
+}
+
+// src/cli/command/remote-agent/credentials/shared.ts
+var createRemoteAgentIam = async (appConfig) => {
+  const credentials2 = await getCredentials(appConfig.profile);
+  const accountId = await getAccountId(credentials2, appConfig.region);
+  const client2 = new IAMClient2({ region: appConfig.region, credentials: credentials2 });
+  const iam = new RemoteAgentIam(client2, appConfig.name);
+  const policy = buildRemoteAgentPolicy({
+    appName: appConfig.name,
+    region: appConfig.region,
+    accountId,
+    auth: Object.keys(appConfig.auth ?? {}).length > 0
+  });
+  return { iam, policy };
+};
+var ensureRemoteAgentUser = async (iam, policy) => {
+  const user2 = await logs_exports.task({
+    initialMessage: `Ensuring the ${iam.userName} IAM user...`,
+    successMessage: `The ${iam.userName} IAM user is in place.`,
+    errorMessage: `Failed to ensure the ${iam.userName} IAM user.`,
+    task: () => iam.ensureUser()
+  });
+  const state = await logs_exports.task({
+    initialMessage: "Ensuring the remote agent policy...",
+    successMessage: "The remote agent policy is in place.",
+    errorMessage: "Failed to ensure the remote agent policy.",
+    task: () => iam.ensurePolicy(policy)
+  });
+  return { user: user2, policy: state };
+};
+var printCredentials = (appConfig, key) => {
+  logs_exports.list("Remote agent environment", {
+    AWSLESS_REMOTE_AGENT: "1",
+    AWS_REGION: appConfig.region,
+    AWS_ACCESS_KEY_ID: key.id,
+    AWS_SECRET_ACCESS_KEY: key.secret
+  });
+  logs_exports.warning(`The secret access key is shown only once. Copy these variables into the agent environment now - ` + `run ${color2.info("awsless remote-agent credentials rotate")} to get a new one later.`);
+};
+
+// src/cli/command/remote-agent/credentials/create.ts
+var create2 = (program3) => {
+  program3.command("create").description("Create the IAM user & access key a remote agent needs to run the dev & test commands").action(async () => {
+    await layout("remote-agent credentials create", async ({ appConfig }) => {
+      const { iam, policy } = await createRemoteAgentIam(appConfig);
+      await ensureRemoteAgentUser(iam, policy);
+      const keys = await iam.listKeys();
+      if (keys.length > 0) {
+        const key2 = keys[0];
+        const created = key2.createdAt ? ` created ${key2.createdAt.toISOString()}` : "";
+        throw new ExpectedError(`The ${iam.userName} user already has an access key (${key2.id}${created}). ` + `Its secret can't be shown again - run ${color2.info("awsless remote-agent credentials rotate")} to replace it.`);
+      }
+      const key = await iam.createKey();
+      printCredentials(appConfig, key);
+    });
+  });
+};
+
+// src/cli/command/remote-agent/credentials/delete.ts
+var del5 = (program3) => {
+  program3.command("delete").description("Delete the remote agent IAM user, its policy & access keys").action(async () => {
+    await layout("remote-agent credentials delete", async ({ appConfig }) => {
+      const { iam } = await createRemoteAgentIam(appConfig);
+      const deleted = await logs_exports.task({
+        initialMessage: `Deleting the ${iam.userName} IAM user...`,
+        successMessage: `Deleted the ${iam.userName} IAM user.`,
+        errorMessage: `Failed to delete the ${iam.userName} IAM user.`,
+        task: () => iam.deleteUser()
+      });
+      if (!deleted) {
+        logs_exports.info(`The ${iam.userName} IAM user doesn't exist - nothing to delete.`);
+      }
+    });
+  });
+};
+
+// src/cli/command/remote-agent/credentials/rotate.ts
+var rotate = (program3) => {
+  program3.command("rotate").description("Replace the access key of the remote agent IAM user").action(async () => {
+    await layout("remote-agent credentials rotate", async ({ appConfig }) => {
+      const { iam, policy } = await createRemoteAgentIam(appConfig);
+      await ensureRemoteAgentUser(iam, policy);
+      const old = await iam.listKeys();
+      const key = await iam.createKey();
+      for (const entry of old) {
+        await iam.deleteKey(entry.id);
+      }
+      if (old.length > 0) {
+        logs_exports.info(`Deleted ${old.length} previous access key${old.length === 1 ? "" : "s"}.`);
+      }
+      printCredentials(appConfig, key);
+    });
+  });
+};
+
+// src/cli/command/remote-agent/credentials/index.ts
+var commands10 = [create2, rotate, del5];
+var credentials2 = (program3) => {
+  const command3 = program3.command("credentials").description("Manage the AWS credentials a remote agent uses for the dev & test commands");
+  commands10.forEach((cb) => cb(command3));
+};
+
+// src/cli/command/remote-agent/index.ts
+var commands11 = [credentials2];
+var remoteAgent = (program3) => {
+  const command3 = program3.command("remote-agent").description("Manage the setup for remote agents, like the Claude cloud sandbox");
+  commands11.forEach((cb) => cb(command3));
+};
+
 // src/cli/command/resources.ts
 var import_wildstring4 = __toESM(require_wildstring(), 1);
 import { DynamoDBClient as DynamoDBClient7 } from "@awsless/dynamodb";
@@ -205185,14 +205452,14 @@ var resources = (program3) => {
     await layout("resources", async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
       const profile = appConfig.profile;
-      const credentials2 = await getCredentials(profile);
-      const accountId = await getAccountId(credentials2, region);
-      const dynamo = new DynamoDBClient7({ credentials: credentials2, region });
+      const credentials3 = await getCredentials(profile);
+      const accountId = await getAccountId(credentials3, region);
+      const dynamo = new DynamoDBClient7({ credentials: credentials3, region });
       const deployment = await currentDeployment(dynamo, generateGlobalAppId({ accountId, region, appName: appConfig.name }));
       const { app, ready: ready2 } = createApp({ appConfig, stackConfigs, accountId, deploymentId: deployment?.id });
       ready2();
       const { workspace } = await createWorkSpace({
-        credentials: credentials2,
+        credentials: credentials3,
         accountId,
         region
       });
@@ -206349,8 +206616,8 @@ var getHttpAuthExtensionConfiguration3 = (runtimeConfig) => {
     httpAuthSchemeProvider() {
       return _httpAuthSchemeProvider;
     },
-    setCredentials(credentials2) {
-      _credentials = credentials2;
+    setCredentials(credentials3) {
+      _credentials = credentials3;
     },
     credentials() {
       return _credentials;
@@ -206777,7 +207044,7 @@ var sinon;
     return;
   }
   const proto2 = {
-    create: function create2(stub) {
+    create: function create3(stub) {
       const behavior = extend2({}, proto2);
       delete behavior.create;
       delete behavior.addBehavior;
@@ -207386,7 +207653,7 @@ var sinon;
   const mockExpectation = {
     minCalls: 1,
     maxCalls: 1,
-    create: function create2(methodName) {
+    create: function create3(methodName) {
       const expectation = extend2.nonEnum(stub(), mockExpectation);
       delete expectation.create;
       expectation.method = methodName;
@@ -207579,7 +207846,7 @@ var sinon;
     });
   }
   extend2(mock, {
-    create: function create2(object3) {
+    create: function create3(object3) {
       if (!object3) {
         throw new TypeError("object is null");
       }
@@ -218786,21 +219053,21 @@ var run = (program3) => {
   program3.command("run").allowUnknownOption(true).argument("[command]", "The command you want to run").description("Run one of your defined commands.").action(async (selected) => {
     await layout(`run ${selected ?? ""}`, async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
-      const credentials2 = await getCredentials(appConfig.profile);
-      const accountId = await getAccountId(credentials2, region);
-      const { commands: commands10, appId } = createApp({ appConfig, stackConfigs, accountId });
+      const credentials3 = await getCredentials(appConfig.profile);
+      const accountId = await getAccountId(credentials3, region);
+      const { commands: commands12, appId } = createApp({ appConfig, stackConfigs, accountId });
       let command3;
       if (selected) {
-        command3 = commands10.find((cmd) => {
+        command3 = commands12.find((cmd) => {
           return cmd.name === selected;
         });
       } else if (process.env.SKIP_PROMPT) {
-        throw new ExpectedError(`Pass the command argument when running with --skip-prompt: [ ${commands10.map((cmd) => cmd.name).join(", ")} ]`);
+        throw new ExpectedError(`Pass the command argument when running with --skip-prompt: [ ${commands12.map((cmd) => cmd.name).join(", ")} ]`);
       } else {
         command3 = await prompts_exports.select({
           message: "Pick the command you want to run:",
-          initialValue: commands10[0],
-          options: commands10.map((cmd) => ({
+          initialValue: commands12[0],
+          options: commands12.map((cmd) => ({
             value: cmd,
             label: cmd.name,
             hint: cmd.description
@@ -218824,15 +219091,15 @@ var run = (program3) => {
       if (!handler) {
         throw new ExpectedError(`No "${command3.handler}" handler found.`);
       }
-      dynamoDBClient.set(new DynamoDBClient8({ region, credentials: credentials2 }));
-      lambdaClient.set(new LambdaClient7({ region, credentials: credentials2 }));
-      snsClient.set(new SNSClient2({ region, credentials: credentials2 }));
-      iotClient.set(new IoTDataPlaneClient({ region, credentials: credentials2 }));
-      sqsClient.set(new SQSClient({ region, credentials: credentials2 }));
-      s3Client.set(new S3Client8({ region, credentials: credentials2 }));
+      dynamoDBClient.set(new DynamoDBClient8({ region, credentials: credentials3 }));
+      lambdaClient.set(new LambdaClient7({ region, credentials: credentials3 }));
+      snsClient.set(new SNSClient2({ region, credentials: credentials3 }));
+      iotClient.set(new IoTDataPlaneClient({ region, credentials: credentials3 }));
+      sqsClient.set(new SQSClient({ region, credentials: credentials3 }));
+      s3Client.set(new S3Client8({ region, credentials: credentials3 }));
       await handler({
         region,
-        credentials: credentials2,
+        credentials: credentials3,
         accountId
       });
     });
@@ -218845,10 +219112,10 @@ var pull = (program3) => {
     await layout("state pull", async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
       const profile = appConfig.profile;
-      const credentials2 = await getCredentials(profile);
-      const accountId = await getAccountId(credentials2, region);
+      const credentials3 = await getCredentials(profile);
+      const accountId = await getAccountId(credentials3, region);
       const { app } = createApp({ appConfig, stackConfigs, accountId });
-      const { state } = await createWorkSpace({ credentials: credentials2, region, accountId });
+      const { state } = await createWorkSpace({ credentials: credentials3, region, accountId });
       await pullRemoteState(app, state);
       return "State pull was successful.";
     });
@@ -218861,10 +219128,10 @@ var push2 = (program3) => {
     await layout("state pull", async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
       const profile = appConfig.profile;
-      const credentials2 = await getCredentials(profile);
-      const accountId = await getAccountId(credentials2, region);
+      const credentials3 = await getCredentials(profile);
+      const accountId = await getAccountId(credentials3, region);
       const { app } = createApp({ appConfig, stackConfigs, accountId });
-      const { state } = await createWorkSpace({ credentials: credentials2, region, accountId });
+      const { state } = await createWorkSpace({ credentials: credentials3, region, accountId });
       if (!process.env.SKIP_PROMPT) {
         const ok2 = await prompts_exports.confirm({
           message: "Pushing up the local state might corrupt your remote state. Are you sure?",
@@ -220836,10 +221103,10 @@ var refresh2 = (program3) => {
     await layout("state refresh", async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
       const profile = appConfig.profile;
-      const credentials2 = await getCredentials(profile);
-      const accountId = await getAccountId(credentials2, region);
+      const credentials3 = await getCredentials(profile);
+      const accountId = await getAccountId(credentials3, region);
       const { app } = createApp({ appConfig, stackConfigs, accountId });
-      const { workspace } = await createWorkSpace({ credentials: credentials2, region, accountId });
+      const { workspace } = await createWorkSpace({ credentials: credentials3, region, accountId });
       const stackNames = app.stacks.filter((stack) => {
         return !!filters.find((f4) => import_wildstring5.default.match(f4, stack.name));
       }).map((s2) => s2.name);
@@ -220930,10 +221197,10 @@ var unlock2 = (program3) => {
     await layout("state unlock", async ({ appConfig, stackConfigs }) => {
       const region = appConfig.region;
       const profile = appConfig.profile;
-      const credentials2 = await getCredentials(profile);
-      const accountId = await getAccountId(credentials2, region);
+      const credentials3 = await getCredentials(profile);
+      const accountId = await getAccountId(credentials3, region);
       const { app } = createApp({ appConfig, stackConfigs, accountId });
-      const { lock: lock2 } = createDeploymentBackends({ credentials: credentials2, region, accountId });
+      const { lock: lock2 } = createDeploymentBackends({ credentials: credentials3, region, accountId });
       const releaseUrn = getAppReleaseLockUrn(generateGlobalAppId({ accountId, region, appName: appConfig.name }));
       const lockedUrns = [];
       for (const urn of [app.urn, releaseUrn]) {
@@ -220962,10 +221229,10 @@ var unlock2 = (program3) => {
 };
 
 // src/cli/command/state/index.ts
-var commands10 = [pull, push2, unlock2, refresh2];
+var commands12 = [pull, push2, unlock2, refresh2];
 var state = (program3) => {
   const command3 = program3.command("state").description(`Manage app state`);
-  commands10.forEach((cb) => cb(command3));
+  commands12.forEach((cb) => cb(command3));
 };
 
 // src/cli/command/test.ts
@@ -221010,7 +221277,7 @@ var types2 = (program3) => {
 };
 
 // src/cli/command/index.ts
-var commands11 = [
+var commands13 = [
   bootstrap,
   types2,
   build2,
@@ -221028,6 +221295,7 @@ var commands11 = [
   state,
   resources,
   config3,
+  remoteAgent,
   test2,
   cron,
   image,
@@ -221047,10 +221315,13 @@ program2.exitOverride((error53) => {
 program2.on("option:skip-prompt", () => {
   process.env.SKIP_PROMPT = program2.opts().skipPrompt ? "1" : undefined;
 });
+if (isRemoteAgent()) {
+  process.env.SKIP_PROMPT = "1";
+}
 program2.on("option:no-cache", () => {
   process.env.NO_CACHE = program2.opts().cache === false ? "1" : undefined;
 });
-commands11.forEach((fn) => fn(program2));
+commands13.forEach((fn) => fn(program2));
 
 // src/bin.ts
 clearDebugLog();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awsless/cli",
-  "version": "0.1.37",
+  "version": "0.1.38",
   "bugs": {
     "url": "https://github.com/awsless/awsless/issues"
   },
@@ -29,6 +29,7 @@
     "@aws-sdk/client-cloudwatch-logs": "3.1113.0",
     "@aws-sdk/client-cognito-identity-provider": "3.1113.0",
     "@aws-sdk/client-dynamodb": "3.1113.0",
+    "@aws-sdk/client-iam": "3.1113.0",
     "@aws-sdk/client-lambda": "3.1113.0",
     "@aws-sdk/client-route-53": "3.1113.0",
     "@aws-sdk/client-s3": "3.1113.0",
@@ -81,33 +82,34 @@
     "wildstring": "1.0.9",
     "wrap-ansi": "10.0.1",
     "zod": "4.4.3",
-    "@awsless/big-float": "^0.1.8",
     "@awsless/cloudwatch": "^0.0.2",
+    "@awsless/big-float": "^0.1.8",
     "@awsless/duration": "^0.0.4",
-    "@awsless/dynamodb": "^0.3.28",
     "@awsless/clui": "^0.0.10",
+    "@awsless/dynamodb": "^0.3.28",
     "@awsless/dynamodb-server": "^0.1.11",
+    "@awsless/iot": "^0.0.6",
     "@awsless/json": "^0.0.12",
+    "@awsless/lambda": "^0.0.50",
     "@awsless/open-search": "^0.0.32",
     "@awsless/open-search-server": "^0.0.1",
-    "@awsless/iot": "^0.0.6",
-    "@awsless/lambda": "^0.0.50",
-    "@awsless/redis-server": "^0.1.0",
     "@awsless/redis": "^0.1.15",
     "@awsless/s3": "^0.0.23",
-    "@awsless/ts-file-cache": "^0.0.22",
+    "@awsless/redis-server": "^0.1.0",
     "@awsless/size": "^0.0.3",
-    "awsless": "^0.1.11",
     "@awsless/sns": "^0.0.12",
+    "@awsless/ts-file-cache": "^0.0.22",
     "@awsless/sqs": "^0.0.25",
     "@awsless/validate": "^0.2.1",
-    "@awsless/weak-cache": "^0.0.2"
+    "@awsless/weak-cache": "^0.0.2",
+    "awsless": "^0.1.11"
   },
   "peerDependencies": {
     "@aws-sdk/client-cloudfront-keyvaluestore": "3.1113.0",
     "@aws-sdk/client-cloudwatch-logs": "3.1113.0",
     "@aws-sdk/client-cognito-identity-provider": "3.1113.0",
     "@aws-sdk/client-dynamodb": "3.1113.0",
+    "@aws-sdk/client-iam": "3.1113.0",
     "@aws-sdk/client-lambda": "3.1113.0",
     "@aws-sdk/client-route-53": "3.1113.0",
     "@aws-sdk/client-s3": "3.1113.0",
@@ -118,17 +120,17 @@
     "@aws-sdk/credential-providers": "3.1113.0",
     "@aws-sdk/lib-dynamodb": "3.1113.0",
     "@opensearch-project/opensearch": "3.6.0",
+    "@awsless/big-float": "^0.1.8",
     "@awsless/duration": "^0.0.4",
     "@awsless/dynamodb": "^0.3.28",
-    "@awsless/big-float": "^0.1.8",
-    "@awsless/lambda": "^0.0.50",
     "@awsless/json": "^0.0.12",
-    "@awsless/validate": "^0.2.1",
-    "@awsless/ts-file-cache": "^0.0.22",
+    "@awsless/lambda": "^0.0.50",
     "@awsless/dynamodb-server": "^0.1.11",
+    "@awsless/ts-file-cache": "^0.0.22",
     "@awsless/weak-cache": "^0.0.2",
     "awsless": "^0.1.11",
-    "@awsless/s3": "^0.0.23"
+    "@awsless/s3": "^0.0.23",
+    "@awsless/validate": "^0.2.1"
   },
   "scripts": {
     "test": "bun cli/build-handlers.ts && pnpm vitest run",