@ez4/aws-function 0.41.0 → 0.42.0

package/README.md

@@ -35,6 +35,17 @@ Ensure the user performing deployments has the permissions below:
         "lambda:UntagResource"
       ],
       "Resource": ["arn:aws:lambda:*:{account-id}:function:{prefix}-*"]
+    },
+    {
+      "Sid": "AuthorizeLambdaServices",
+      "Effect": "Allow",
+      "Action": ["iam:PassRole"],
+      "Resource": ["arn:aws:iam::{account-id}:role/{prefix}-*"],
+      "Condition": {
+        "StringLike": {
+          "iam:PassedToService": ["lambda.amazonaws.com"]
+        }
+      }
     }
   ]
 }

package/dist/function/client.d.ts

@@ -15,6 +15,7 @@ export type CreateRequest = {
     memory?: number;
     publish?: boolean;
     debug?: boolean;
+    vpc?: boolean;
     tags?: ResourceTags;
 };
 export type ImportOrCreateResponse = {
@@ -31,6 +32,7 @@ export type UpdateConfigurationRequest = {
     timeout?: number;
     memory?: number;
     debug?: boolean;
+    vpc?: boolean;
 };
 export type UpdateSourceCodeRequest = {
     architecture?: ArchitectureType;

package/dist/function/errors.d.ts

@@ -1,3 +1,6 @@
 export declare class FunctionNotFoundError extends Error {
     constructor(bucketName: string);
 }
+export declare class DefaultVpcDetailsError extends Error {
+    constructor();
+}

package/dist/function/utils.d.ts

@@ -7,3 +7,7 @@ export declare const getFunctionState: (context: EventContext, functionName: str
 export declare const getFunctionName: (serviceName: string, resourceId: string, context: StepContext) => string;
 export declare const tryGetFunctionArn: (context: StepContext) => `arn:aws:${string}:${string}:${string}:${string}` | undefined;
 export declare const getFunctionArn: (serviceName: string, resourceId: string, context: StepContext) => `arn:aws:${string}:${string}:${string}:${string}`;
+export declare const getDefaultVpcConfig: () => Promise<{
+    subnetIds: string[];
+    securityGroupId: string;
+}>;

package/dist/main.cjs

@@ -1,180 +1,188 @@
-"use strict";var it=Object.create;var M=Object.defineProperty;var at=Object.getOwnPropertyDescriptor;var st=Object.getOwnPropertyNames;var pt=Object.getPrototypeOf,ct=Object.prototype.hasOwnProperty;var o=(t,e)=>M(t,"name",{value:e,configurable:!0});var ut=(t,e)=>{for(var n in e)M(t,n,{get:e[n],enumerable:!0})},ae=(t,e,n,r)=>{if(e&&
-typeof e=="object"||typeof e=="function")for(let i of st(e))!ct.call(t,i)&&i!==n&&
-M(t,i,{get:()=>e[i],enumerable:!(r=at(e,i))||r.enumerable});return t};var mt=(t,e,n)=>(n=t!=null?it(pt(t)):{},ae(e||!t||!t.__esModule?M(n,"default",{value:t,
-enumerable:!0}):n,t)),lt=t=>ae(M({},"__esModule",{value:!0}),t);var Zt={};ut(Zt,{FunctionArchitecture:()=>ce,FunctionDefaults:()=>rt,FunctionRuntime:()=>pe,
-FunctionServiceName:()=>F,FunctionServiceType:()=>x,MappingService:()=>Me,MappingServiceName:()=>R,
-MappingServiceType:()=>v,PermissionServiceName:()=>E,PermissionServiceType:()=>w,
-buildFunctionArn:()=>jt,createFunction:()=>qt,createMapping:()=>Wt,createPermission:()=>kt,
-getFunctionArchitecture:()=>G,getFunctionArn:()=>At,getFunctionName:()=>L,getFunctionRuntime:()=>z,
-getFunctionState:()=>Ct,getPermission:()=>Bt,isFunctionState:()=>te,isMappingState:()=>$t,
-registerTriggers:()=>Dt,tryGetFunctionArn:()=>Pe,tryGetFunctionState:()=>Pt});module.
-exports=lt(Zt);var Qe=require("@ez4/aws-common"),_e=require("@ez4/aws-identity"),Je=require("@ez4/aws-logs"),
-Ke=require("@ez4/project/library");var be=require("@ez4/aws-common");var S=require("@ez4/aws-common"),P=require("@ez4/utils"),X=require("@ez4/aws-logs"),
-Y=require("@ez4/aws-identity");var s=require("@aws-sdk/client-lambda"),D=require("@ez4/aws-common");var O=require("@ez4/aws-common"),se=require("@aws-sdk/client-lambda");var d=o(()=>new se.LambdaClient((0,O.getAwsClientOptions)()),"getLambdaClient"),
-U=o(t=>({...(0,O.getAwsClientWaiter)(),client:t}),"getLambdaWaiter");var j=require("@ez4/project");var pe=(n=>(n.Node22="nodejs22.x",n.Node24="nodejs24.x",n))(pe||{});var gt={[j.RuntimeType.Node22]:"nodejs22.x",[j.RuntimeType.Node24]:"nodejs24.x"},
-z=o(t=>gt[t],"getFunctionRuntime");var Z=require("@ez4/project");var ce=(n=>(n.Arm="arm64",n.x86="x86_64",n))(ce||{});var dt={[Z.ArchitectureType.Arm]:"arm64",[Z.ArchitectureType.x86]:"x86_64"},G=o(
-t=>dt[t],"getFunctionArchitecture");var ue=require("@ez4/aws-common"),me=require("@ez4/utils");var F="AWS:Lambda/Function",x="aws:lambda.function";var ft=/[a-z][\w]+/i,yt=o(t=>ft.test(t),"isValidName"),Q=o(t=>{for(let e in t)if(!yt(
-e))throw new ue.InvalidParameterError(F,`${e} is an invalid variable name .`)},"\
-assertVariables"),A=o(t=>{let e={};for(let n in t)e[n]=(0,me.hashData)(t[n]);return e},
-"protectVariables");var le=mt(require("adm-zip"),1),ge=require("node:fs/promises");var de=o(async(t,e)=>{let n=new le.default,r=await(0,ge.readFile)(t);return n.addFile(
-e,r),n.toBufferPromise()},"getZipBuffer");var fe=o(async(t,e,n)=>{t.update("Importing function");try{let r=await d().send(
+"use strict";var ut=Object.create;var T=Object.defineProperty;var mt=Object.getOwnPropertyDescriptor;var lt=Object.getOwnPropertyNames;var gt=Object.getPrototypeOf,dt=Object.prototype.hasOwnProperty;var o=(t,e)=>T(t,"name",{value:e,configurable:!0});var ft=(t,e)=>{for(var n in e)T(t,n,{get:e[n],enumerable:!0})},me=(t,e,n,r)=>{if(e&&
+typeof e=="object"||typeof e=="function")for(let i of lt(e))!dt.call(t,i)&&i!==n&&
+T(t,i,{get:()=>e[i],enumerable:!(r=mt(e,i))||r.enumerable});return t};var yt=(t,e,n)=>(n=t!=null?ut(gt(t)):{},me(e||!t||!t.__esModule?T(n,"default",{value:t,
+enumerable:!0}):n,t)),St=t=>me(T({},"__esModule",{value:!0}),t);var Xt={};ft(Xt,{FunctionArchitecture:()=>de,FunctionDefaults:()=>pt,FunctionRuntime:()=>ge,
+FunctionServiceName:()=>w,FunctionServiceType:()=>x,MappingService:()=>Ge,MappingServiceName:()=>v,
+MappingServiceType:()=>R,PermissionServiceName:()=>E,PermissionServiceType:()=>b,
+buildFunctionArn:()=>Kt,createFunction:()=>jt,createMapping:()=>_t,createPermission:()=>Zt,
+getDefaultVpcConfig:()=>q,getFunctionArchitecture:()=>D,getFunctionArn:()=>ht,getFunctionName:()=>N,
+getFunctionRuntime:()=>z,getFunctionState:()=>Rt,getPermission:()=>Qt,isFunctionState:()=>Y,
+isMappingState:()=>Jt,registerTriggers:()=>$t,tryGetFunctionArn:()=>xe,tryGetFunctionState:()=>vt});
+module.exports=St(Xt);var Ye=require("@ez4/aws-common"),et=require("@ez4/aws-identity"),tt=require("@ez4/aws-logs"),
+nt=require("@ez4/project/library");var Ne=require("@ez4/aws-common");var f=require("@ez4/aws-common"),C=require("@ez4/utils"),re=require("@ez4/aws-logs"),
+oe=require("@ez4/aws-identity");var s=require("@aws-sdk/client-lambda"),B=require("@ez4/aws-common");var U=require("@ez4/aws-common"),le=require("@aws-sdk/client-lambda");var d=o(()=>new le.LambdaClient((0,U.getAwsClientOptions)()),"getLambdaClient"),
+G=o(t=>({...(0,U.getAwsClientWaiter)(),client:t}),"getLambdaWaiter");var _=require("@ez4/project");var ge=(n=>(n.Node22="nodejs22.x",n.Node24="nodejs24.x",n))(ge||{});var wt={[_.RuntimeType.Node22]:"nodejs22.x",[_.RuntimeType.Node24]:"nodejs24.x"},
+z=o(t=>wt[t],"getFunctionRuntime");var J=require("@ez4/project");var de=(n=>(n.Arm="arm64",n.x86="x86_64",n))(de||{});var Ft={[J.ArchitectureType.Arm]:"arm64",[J.ArchitectureType.x86]:"x86_64"},D=o(
+t=>Ft[t],"getFunctionArchitecture");var fe=require("@ez4/aws-common"),ye=require("@ez4/utils");var w="AWS:Lambda/Function",x="aws:lambda.function";var xt=/[a-z][\w]+/i,bt=o(t=>xt.test(t),"isValidName"),K=o(t=>{for(let e in t)if(!bt(
+e))throw new fe.InvalidParameterError(w,`${e} is an invalid variable name .`)},"\
+assertVariables"),A=o(t=>{let e={};for(let n in t)e[n]=(0,ye.hashData)(t[n]);return e},
+"protectVariables");var Se=yt(require("adm-zip"),1),we=require("node:fs/promises");var Fe=o(async(t,e)=>{let n=new Se.default,r=await(0,we.readFile)(t);return n.addFile(
+e,r),n.toBufferPromise()},"getZipBuffer");var L=require("@ez4/aws-vpc"),X=require("@ez4/aws-common");var k=class extends Error{static{o(this,"FunctionNotFoundError")}constructor(e){
+super(`Function ${e} wasn't found.`)}},V=class extends Error{static{o(this,"Defa\
+ultVpcDetailsError")}constructor(){super("Unable to get the default VPC details.")}};var Y=o(t=>t.type===x,"isFunctionState"),vt=o((t,e,n)=>{try{let r=t.getServiceState(
+e,n);if(Y(r))return r}catch{}},"tryGetFunctionState"),Rt=o((t,e,n)=>{let r=t.getServiceState(
+e,n);if(!Y(r))throw new k(e);return r},"getFunctionState"),N=o((t,e,n)=>{let r=n.
+getDependencies(x).at(0)?.parameters;if(!r?.functionName)throw new X.IncompleteResourceError(
+t,e,"functionName");return r.functionName},"getFunctionName"),xe=o(t=>t.getDependencies(
+x)[0]?.result?.functionArn,"tryGetFunctionArn"),ht=o((t,e,n)=>{let r=xe(n);if(!r)
+throw new X.IncompleteResourceError(t,e,"functionArn");return r},"getFunctionArn"),
+q=o(async()=>{let t=await(0,L.getDefaultVpcId)();if(!t)throw new V;let[e,n]=await Promise.
+all([(0,L.getDefaultSubnetIds)(t),(0,L.getDefaultSecurityGroupId)(t)]);if(!e?.length||
+!n)throw new V;return{subnetIds:e.slice(0,2),securityGroupId:n}},"getDefaultVpcC\
+onfig");var be=o(async(t,e,n)=>{t.update("Importing function");try{let r=await d().send(
 new s.GetFunctionCommand({FunctionName:e,Qualifier:n})),i=r.Configuration.Version,
 a=r.Configuration.FunctionArn;return{functionVersion:i,functionArn:a}}catch(r){if(!(r instanceof
-s.ResourceNotFoundException))throw r;return}},"importFunction"),ye=o(async(t,e)=>{
-t.update("Creating function");let{functionName:n,variables:r}=e;r&&Q(r);let i=we(
-e.handlerName),a=await xe(e.sourceFile),{description:p,memory:c,timeout:m,publish:u,
-architecture:l,runtime:g,debug:y,roleArn:h,logGroup:C}=e,V=d(),H=await(0,D.waitCreation)(
-()=>V.send(new s.CreateFunctionCommand({FunctionName:n,Description:p,MemorySize:c,
-Timeout:m,Role:h,Publish:u,Handler:i,Architectures:[G(l)],Runtime:z(g),PackageType:"\
-Zip",LoggingConfig:{LogGroup:C,ApplicationLogLevel:y?s.ApplicationLogLevel.Debug:
-s.ApplicationLogLevel.Warn,SystemLogLevel:s.SystemLogLevel.Warn,LogFormat:s.LogFormat.
-Json},Code:{ZipFile:a},Environment:{Variables:r},Tags:{...e.tags,ManagedBy:"EZ4"}}))),
-ot=H.FunctionArn,oe=H.Version,ie=U(V);return await(0,s.waitUntilFunctionActive)(
-ie,{FunctionName:n}),u&&await(0,s.waitUntilPublishedVersionActive)(ie,{FunctionName:n,
-Qualifier:oe}),{functionArn:ot,...u&&{functionVersion:oe}}},"createFunction"),_=o(
-async(t,e,n)=>{t.update("Updating source code");let r=await xe(n.sourceFile),{publish:i,
+s.ResourceNotFoundException))throw r;return}},"importFunction"),ve=o(async(t,e)=>{
+t.update("Creating function");let{functionName:n,variables:r}=e;r&&K(r);let i=e.
+vpc?await q():void 0,a=Pe(e.handlerName),p=await Ce(e.sourceFile),{description:c,
+memory:l,timeout:u,publish:m,architecture:g,runtime:S,debug:F,roleArn:P,logGroup:Q}=e,
+O=d(),pe=await(0,B.waitCreation)(()=>O.send(new s.CreateFunctionCommand({FunctionName:n,
+Description:c,MemorySize:l,Timeout:u,Role:P,Publish:m,Handler:a,Architectures:[D(
+g)],Runtime:z(S),PackageType:"Zip",VpcConfig:{SecurityGroupIds:i?[i.securityGroupId]:
+[],SubnetIds:i?i.subnetIds:[]},LoggingConfig:{LogGroup:Q,ApplicationLogLevel:F?s.ApplicationLogLevel.
+Debug:s.ApplicationLogLevel.Warn,SystemLogLevel:s.SystemLogLevel.Warn,LogFormat:s.LogFormat.
+Json},Code:{ZipFile:p},Environment:{Variables:r},Tags:{...e.tags,ManagedBy:"EZ4"}}))),
+ct=pe.FunctionArn,ce=pe.Version,ue=G(O);return await(0,s.waitUntilFunctionActive)(
+ue,{FunctionName:n}),m&&await(0,s.waitUntilPublishedVersionActive)(ue,{FunctionName:n,
+Qualifier:ce}),{functionArn:ct,...m&&{functionVersion:ce}}},"createFunction"),ee=o(
+async(t,e,n)=>{t.update("Updating source code");let r=await Ce(n.sourceFile),{publish:i,
 architecture:a}=n,p=d(),c=await p.send(new s.UpdateFunctionCodeCommand({Architectures:a&&
-[G(a)],FunctionName:e,ZipFile:r,Publish:i})),m=c.FunctionArn,u=c.Version,l=U(p);
-return await(0,s.waitUntilFunctionUpdated)(l,{FunctionName:e}),i&&await(0,s.waitUntilPublishedVersionActive)(
-l,{FunctionName:e,Qualifier:u}),{functionArn:m,...i&&{functionVersion:u}}},"upda\
-teSourceCode"),J=o(async(t,e,n)=>{t.update("Updating configuration");let{handlerName:r,
-variables:i}=n;i&&Q(i);let{description:a,memory:p,timeout:c,runtime:m,debug:u,roleArn:l,
-logGroup:g}=n,y=d();await y.send(new s.UpdateFunctionConfigurationCommand({Runtime:m&&
-z(m),FunctionName:e,Description:a,MemorySize:p,Timeout:c,Role:l,...r&&{Handler:we(
-r)},LoggingConfig:{LogGroup:g,ApplicationLogLevel:u?s.ApplicationLogLevel.Debug:
-s.ApplicationLogLevel.Warn,SystemLogLevel:s.SystemLogLevel.Warn,LogFormat:s.LogFormat.
-Json},Environment:{Variables:i}})),await(0,s.waitUntilFunctionUpdated)(U(y),{FunctionName:e})},
-"updateConfiguration"),Se=o(async(t,e)=>{e.update("Deleting function");let n=d();
-await(0,D.waitDeletion)(async()=>{try{await n.send(new s.DeleteFunctionCommand({
+[D(a)],FunctionName:e,ZipFile:r,Publish:i})),l=c.FunctionArn,u=c.Version,m=G(p);
+return await(0,s.waitUntilFunctionUpdated)(m,{FunctionName:e}),i&&await(0,s.waitUntilPublishedVersionActive)(
+m,{FunctionName:e,Qualifier:u}),{functionArn:l,...i&&{functionVersion:u}}},"upda\
+teSourceCode"),te=o(async(t,e,n)=>{t.update("Updating configuration");let{handlerName:r,
+variables:i}=n;i&&K(i);let a=n.vpc?await q():void 0,{description:p,memory:c,timeout:l,
+runtime:u,debug:m,roleArn:g,logGroup:S}=n,F=d();await F.send(new s.UpdateFunctionConfigurationCommand(
+{Runtime:u&&z(u),FunctionName:e,Description:p,MemorySize:c,Timeout:l,Role:g,...r&&
+{Handler:Pe(r)},VpcConfig:{SecurityGroupIds:a?[a.securityGroupId]:[],SubnetIds:a?
+a.subnetIds:[]},LoggingConfig:{LogGroup:S,ApplicationLogLevel:m?s.ApplicationLogLevel.
+Debug:s.ApplicationLogLevel.Warn,SystemLogLevel:s.SystemLogLevel.Warn,LogFormat:s.LogFormat.
+Json},Environment:{Variables:i}})),await(0,s.waitUntilFunctionUpdated)(G(F),{FunctionName:e})},
+"updateConfiguration"),Re=o(async(t,e)=>{e.update("Deleting function");let n=d();
+await(0,B.waitDeletion)(async()=>{try{await n.send(new s.DeleteFunctionCommand({
 FunctionName:t}))}catch(r){if(!(r instanceof s.ResourceNotFoundException))throw r}})},
-"deleteFunction");var K=o(async(t,e,n)=>{t.update("Tag function"),await d().send(new s.TagResourceCommand(
-{Resource:e,Tags:{...n,ManagedBy:"EZ4"}}))},"tagFunction"),Fe=o(async(t,e,n)=>{t.
+"deleteFunction");var ne=o(async(t,e,n)=>{t.update("Tag function"),await d().send(new s.TagResourceCommand(
+{Resource:e,Tags:{...n,ManagedBy:"EZ4"}}))},"tagFunction"),he=o(async(t,e,n)=>{t.
 update("Untag function"),await d().send(new s.UntagResourceCommand({Resource:e,TagKeys:n}))},
-"untagFunction"),xe=o(t=>de(t,"main.mjs"),"getSourceZipFile"),we=o(t=>`main.${t}`,
-"getSourceHandlerName");var Re=o(()=>({equals:St,create:ve,replace:xt,preview:Ft,update:wt,delete:Rt}),"\
-getFunctionHandler"),St=o((t,e)=>!!t.result&&t.result.functionArn===e.result?.functionArn,
-"equalsResource"),Ft=o(async(t,e)=>{let n=t.parameters,r=e.parameters,i=(0,P.deepCompare)(
+"untagFunction"),Ce=o(t=>Fe(t,"main.mjs"),"getSourceZipFile"),Pe=o(t=>`main.${t}`,
+"getSourceHandlerName");var Ae=o(()=>({equals:Ct,create:Le,replace:At,preview:Pt,update:Lt,delete:Nt}),"\
+getFunctionHandler"),Ct=o((t,e)=>!!t.result&&t.result.functionArn===e.result?.functionArn,
+"equalsResource"),Pt=o(async(t,e)=>{let n=t.parameters,r=e.parameters,i=(0,C.deepCompare)(
 {...n,connections:t.connections,dependencies:t.dependencies,variables:A(await n.
-getFunctionVariables()),sourceHash:await(0,S.getBundleHash)(...n.getFunctionFiles()),
+getFunctionVariables()),sourceHash:await(0,f.getBundleHash)(...n.getFunctionFiles()),
 valuesHash:n.getFunctionHash()},{...r,connections:e.connections,dependencies:e.dependencies,
 variables:e.result?.variables,sourceHash:e.result?.sourceHash,valuesHash:e.result?.
 valuesHash},{exclude:{release:!0}});if(i.counts)return{...i,name:n.functionName}},
-"previewResource"),xt=o(async(t,e,n)=>{if(e.result)throw new S.ReplaceResourceError(
-F,t.entryId,e.entryId);return ve(t,n)},"replaceResource"),ve=o((t,e)=>{let{functionName:n,
-release:r,...i}=t.parameters;return S.OperationLogger.logExecution(F,n,"creation",
-async a=>{let p=(0,X.getLogGroupName)(F,n,e),c=(0,Y.getRoleArn)(F,n,e),[m,u,l,g]=await Promise.
-all([(0,S.getBundleHash)(...i.getFunctionFiles()),i.getFunctionBundle(e),i.getFunctionHash(),
-i.getFunctionVariables()]),y=await fe(a,n),h=await(0,P.hashFile)(u);if(y)return await _(
-a,n,{architecture:i.architecture,publish:!1,sourceFile:u}),await J(a,n,{...i,logGroup:p,
-roleArn:c,variables:{...g,...r?.variableName&&{[r.variableName]:r.version}}}),await K(
-a,y.functionArn,{...i.tags,...r?.tagName&&{[r.tagName]:r.version}}),{functionArn:y.
-functionArn,functionVersion:y.functionVersion,variables:A(g),valuesHash:l,sourceHash:m,
-bundleHash:h,logGroup:p,roleArn:c};let C=await ye(a,{...i,publish:!0,functionName:n,
-sourceFile:u,logGroup:p,roleArn:c,variables:{...g,...r?.variableName&&{[r.variableName]:r.
-version}},tags:{...i.tags,...r?.tagName&&{[r.tagName]:r.version}}});return{functionArn:C.
-functionArn,functionVersion:C.functionVersion,variables:A(g),valuesHash:l,sourceHash:m,
-bundleHash:h,logGroup:p,roleArn:c}})},"createResource"),wt=o((t,e,n)=>{let{parameters:r,
-result:i}=t,{functionName:a}=r;if(!i)throw new S.CorruptedResourceError(F,a);return S.OperationLogger.
-logExecution(F,a,"updates",async p=>{let c=await r.getFunctionVariables(),m=e.result?.
-variables??c,u=(0,Y.getRoleArn)(F,a,n),l=e.result?.roleArn??u,g=(0,X.getLogGroupName)(
-F,a,n),y=e.result?.logGroup??g,{isUpdated:h,...C}=await ht(p,a,r,e.result,n),V={
-...r,variables:c,roleArn:u,logGroup:g},H={...e.parameters,variables:m,roleArn:l,
-logGroup:y};return await vt(p,a,V,H,h,n),await bt(p,i.functionArn,r,e.parameters,
-h),{...i,...C,variables:A(c),logGroup:g,roleArn:u}})},"updateResource"),Rt=o(async t=>{
-let{result:e,parameters:n}=t;if(!e)return;let{functionName:r}=n;await S.OperationLogger.
-logExecution(F,r,"deletion",async i=>{await Se(r,i)})},"deleteResource"),vt=o(async(t,e,n,r,i,a)=>{
-let{variables:p,...c}=n,m={variables:A(p),...c},u=!(0,P.deepEqual)(m,r,{exclude:{
-sourceFile:!0,functionName:!0,architecture:!0,release:!0,tags:!0}}),l=i?n.release:
-r.release,g=i&&l?.variableName;(u||g||a.force)&&await J(t,e,{...n,variables:{...n.
-variables,...l?.variableName&&{[l.variableName]:l.version}}})},"checkConfigurati\
-onUpdates"),bt=o(async(t,e,n,r,i)=>{let p=i&&n.release?.version!==r.release?.version?
-n.release:void 0,c={...n.tags,...p?.tagName&&{[p.tagName]:p.version}};await(0,S.applyTagUpdates)(
-c,r.tags,m=>K(t,e,m),m=>Fe(t,e,m))},"checkTagUpdates"),ht=o(async(t,e,n,r,i)=>{let[
-a,p]=await Promise.all([(0,S.getBundleHash)(...n.getFunctionFiles()),n.getFunctionHash()]),
-c=r?.sourceHash,m=r?.valuesHash;if(a!==c||p!==m||i.force){let u=await n.getFunctionBundle(
-i),l=await(0,P.hashFile)(u),g=r?.bundleHash;if(l===g&&p===m)return t.update("Ski\
-pping source code update"),{isUpdated:!1,valuesHash:p,sourceHash:a};let{functionVersion:y}=await _(
+"previewResource"),At=o(async(t,e,n)=>{if(e.result)throw new f.ReplaceResourceError(
+w,t.entryId,e.entryId);return Le(t,n)},"replaceResource"),Le=o((t,e)=>{let{functionName:n,
+release:r,...i}=t.parameters;return f.OperationLogger.logExecution(w,n,"creation",
+async a=>{let p=(0,re.getLogGroupName)(w,n,e),c=(0,oe.getRoleArn)(w,n,e),[l,u,m,
+g]=await Promise.all([(0,f.getBundleHash)(...i.getFunctionFiles()),i.getFunctionBundle(
+e),i.getFunctionHash(),i.getFunctionVariables()]),S=await be(a,n),F=await(0,C.hashFile)(
+u);if(S)return await ee(a,n,{architecture:i.architecture,publish:!1,sourceFile:u}),
+await te(a,n,{...i,logGroup:p,roleArn:c,variables:{...g,...r?.variableName&&{[r.
+variableName]:r.version}}}),await ne(a,S.functionArn,{...i.tags,...r?.tagName&&{
+[r.tagName]:r.version}}),{functionArn:S.functionArn,functionVersion:S.functionVersion,
+variables:A(g),valuesHash:m,sourceHash:l,bundleHash:F,logGroup:p,roleArn:c};let P=await ve(
+a,{...i,publish:!0,functionName:n,sourceFile:u,logGroup:p,roleArn:c,variables:{...g,
+...r?.variableName&&{[r.variableName]:r.version}},tags:{...i.tags,...r?.tagName&&
+{[r.tagName]:r.version}}});return{functionArn:P.functionArn,functionVersion:P.functionVersion,
+variables:A(g),valuesHash:m,sourceHash:l,bundleHash:F,logGroup:p,roleArn:c}})},"\
+createResource"),Lt=o((t,e,n)=>{let{parameters:r,result:i}=t,{functionName:a}=r;
+if(!i)throw new f.CorruptedResourceError(w,a);return f.OperationLogger.logExecution(
+w,a,"updates",async p=>{let c=await r.getFunctionVariables(),l=e.result?.variables??
+c,u=(0,oe.getRoleArn)(w,a,n),m=e.result?.roleArn??u,g=(0,re.getLogGroupName)(w,a,
+n),S=e.result?.logGroup??g,{isUpdated:F,...P}=await Mt(p,a,r,e.result,n),Q={...r,
+variables:c,roleArn:u,logGroup:g},O={...e.parameters,variables:l,roleArn:m,logGroup:S};
+return await It(p,a,Q,O,F,n),await Et(p,i.functionArn,r,e.parameters,F),{...i,...P,
+variables:A(c),logGroup:g,roleArn:u}})},"updateResource"),Nt=o(async t=>{let{result:e,
+parameters:n}=t;if(!e)return;let{functionName:r}=n;await f.OperationLogger.logExecution(
+w,r,"deletion",async i=>{await Re(r,i)})},"deleteResource"),It=o(async(t,e,n,r,i,a)=>{
+let{variables:p,...c}=n,l={variables:A(p),...c},u=!(0,C.deepEqual)(l,r,{exclude:{
+sourceFile:!0,functionName:!0,architecture:!0,release:!0,tags:!0}}),m=i?n.release:
+r.release,g=i&&m?.variableName;(u||g||a.force)&&await te(t,e,{...n,variables:{...n.
+variables,...m?.variableName&&{[m.variableName]:m.version}}})},"checkConfigurati\
+onUpdates"),Et=o(async(t,e,n,r,i)=>{let p=i&&n.release?.version!==r.release?.version?
+n.release:void 0,c={...n.tags,...p?.tagName&&{[p.tagName]:p.version}};await(0,f.applyTagUpdates)(
+c,r.tags,l=>ne(t,e,l),l=>he(t,e,l))},"checkTagUpdates"),Mt=o(async(t,e,n,r,i)=>{
+let[a,p]=await Promise.all([(0,f.getBundleHash)(...n.getFunctionFiles()),n.getFunctionHash()]),
+c=r?.sourceHash,l=r?.valuesHash;if(a!==c||p!==l||i.force){let u=await n.getFunctionBundle(
+i),m=await(0,C.hashFile)(u),g=r?.bundleHash;if(m===g&&p===l)return t.update("Ski\
+pping source code update"),{isUpdated:!1,valuesHash:p,sourceHash:a};let{functionVersion:S}=await ee(
 t,e,{architecture:n.architecture,publish:!r?.functionVersion,sourceFile:u});return{
-isUpdated:!0,valuesHash:p,sourceHash:a,bundleHash:l,...y&&{functionVersion:y}}}return{
-isUpdated:!1}},"checkSourceCodeUpdates");var he=o(()=>{(0,be.tryRegisterProvider)(x,Re())},"registerFunctionProvider");var Ee=require("@ez4/aws-common");var T=require("@ez4/aws-common");var ee=require("@ez4/aws-common");var q=class extends Error{static{o(this,"FunctionNotFoundError")}constructor(e){
-super(`Function ${e} wasn't found.`)}};var te=o(t=>t.type===x,"isFunctionState"),Pt=o((t,e,n)=>{try{let r=t.getServiceState(
-e,n);if(te(r))return r}catch{}},"tryGetFunctionState"),Ct=o((t,e,n)=>{let r=t.getServiceState(
-e,n);if(!te(r))throw new q(e);return r},"getFunctionState"),L=o((t,e,n)=>{let r=n.
-getDependencies(x).at(0)?.parameters;if(!r?.functionName)throw new ee.IncompleteResourceError(
-t,e,"functionName");return r.functionName},"getFunctionName"),Pe=o(t=>t.getDependencies(
-x)[0]?.result?.functionArn,"tryGetFunctionArn"),At=o((t,e,n)=>{let r=Pe(n);if(!r)
-throw new ee.IncompleteResourceError(t,e,"functionArn");return r},"getFunctionAr\
-n");var N=require("@aws-sdk/client-lambda");var Ce=o(async(t,e)=>{t.update("Creating permission");let n=e.statementId??`ID${Date.
-now()}`;return await d().send(new N.AddPermissionCommand({StatementId:n,FunctionName:e.
+isUpdated:!0,valuesHash:p,sourceHash:a,bundleHash:m,...S&&{functionVersion:S}}}return{
+isUpdated:!1}},"checkSourceCodeUpdates");var Ie=o(()=>{(0,Ne.tryRegisterProvider)(x,Ae())},"registerFunctionProvider");var He=require("@ez4/aws-common");var H=require("@ez4/aws-common");var I=require("@aws-sdk/client-lambda");var Ee=o(async(t,e)=>{t.update("Creating permission");let n=e.statementId??`ID${Date.
+now()}`;return await d().send(new I.AddPermissionCommand({StatementId:n,FunctionName:e.
 functionName,SourceArn:e.sourceArn,Principal:e.principal,Action:e.action})),{statementId:n}},
-"createPermission"),Ae=o(async(t,e,n)=>{t.update("Deleting permission");try{return await d().
-send(new N.RemovePermissionCommand({FunctionName:e,StatementId:n})),!0}catch(r){
-if(!(r instanceof N.ResourceNotFoundException))throw r;return!1}},"deletePermiss\
-ion");var E="AWS:Lambda/Permission",w="aws:lambda.permission";var Le=o(()=>({equals:Lt,create:Ne,replace:Et,preview:Nt,update:It,delete:Mt}),"\
-getPermissionHandler"),Lt=o((t,e)=>!!t.result&&t.result.functionName===e.result?.
-functionName,"equalsResource"),Nt=o((t,e)=>{},"previewResource"),Et=o(async(t,e,n)=>{
-if(e.result)throw new T.ReplaceResourceError(E,t.entryId,e.entryId);return Ne(t,
-n)},"replaceResource"),Ne=o((t,e)=>{let n=t.parameters,r=L(E,"permission",e);return T.OperationLogger.
-logExecution(E,r,"creation",async i=>{let a=await n.getPermission(e);return{statementId:(await Ce(
+"createPermission"),Me=o(async(t,e,n)=>{t.update("Deleting permission");try{return await d().
+send(new I.RemovePermissionCommand({FunctionName:e,StatementId:n})),!0}catch(r){
+if(!(r instanceof I.ResourceNotFoundException))throw r;return!1}},"deletePermiss\
+ion");var E="AWS:Lambda/Permission",b="aws:lambda.permission";var Te=o(()=>({equals:Tt,create:Ve,replace:Ht,preview:Vt,update:Ot,delete:Ut}),"\
+getPermissionHandler"),Tt=o((t,e)=>!!t.result&&t.result.functionName===e.result?.
+functionName,"equalsResource"),Vt=o((t,e)=>{},"previewResource"),Ht=o(async(t,e,n)=>{
+if(e.result)throw new H.ReplaceResourceError(E,t.entryId,e.entryId);return Ve(t,
+n)},"replaceResource"),Ve=o((t,e)=>{let n=t.parameters,r=N(E,"permission",e);return H.OperationLogger.
+logExecution(E,r,"creation",async i=>{let a=await n.getPermission(e);return{statementId:(await Ee(
 i,{action:"lambda:InvokeFunction",sourceArn:a.sourceArn,principal:a.principal,functionName:r})).
-statementId,functionName:r}})},"createResource"),It=o(async()=>{},"updateResourc\
-e"),Mt=o(async t=>{let e=t.result;if(!e)return;let{functionName:n,statementId:r}=e;
-await T.OperationLogger.logExecution(E,n,"deletion",async i=>{await Ae(i,n,r)})},
-"deleteResource");var Ie=o(()=>{(0,Ee.tryRegisterProvider)(w,Le())},"registerPermissionProvider");var ke=require("@ez4/aws-common");var b=require("@ez4/aws-common"),k=require("@ez4/utils");var f=require("@aws-sdk/client-lambda"),Te=require("@ez4/aws-common"),ne=require("@ez4/utils");var R="AWS:Lambda/Mapping",v="aws:lambda.mapping",Me=(n=>(n.DynamoDB="dynamodb",
-n.Queue="sqs",n))(Me||{});var Ve=o(async(t,e,n)=>{t.update("Importing mapping");let r=await d().send(new f.ListEventSourceMappingsCommand(
+statementId,functionName:r}})},"createResource"),Ot=o(async()=>{},"updateResourc\
+e"),Ut=o(async t=>{let e=t.result;if(!e)return;let{functionName:n,statementId:r}=e;
+await H.OperationLogger.logExecution(E,n,"deletion",async i=>{await Me(i,n,r)})},
+"deleteResource");var Oe=o(()=>{(0,He.tryRegisterProvider)(b,Te())},"registerPermissionProvider");var Ze=require("@ez4/aws-common");var h=require("@ez4/aws-common"),W=require("@ez4/utils");var y=require("@aws-sdk/client-lambda"),ze=require("@ez4/aws-common");var Ue=require("@aws-sdk/client-lambda"),ie=require("@ez4/utils");var ae=o(async(t,e)=>{let n=new Set(["Enabled","Disabled"]);await ie.Wait.until(
+async()=>{let r=await Gt(t,e);return n.has(r)?!0:ie.Wait.RetryAttempt})},"waitFo\
+rReadyState"),Gt=o(async(t,e)=>(await t.send(new Ue.GetEventSourceMappingCommand(
+{UUID:e}))).State,"getMappingState");var v="AWS:Lambda/Mapping",R="aws:lambda.mapping",Ge=(n=>(n.DynamoDB="dynamodb",
+n.Queue="sqs",n))(Ge||{});var De=o(async(t,e,n)=>{t.update("Importing mapping");let r=await d().send(new y.ListEventSourceMappingsCommand(
 {FunctionName:e,EventSourceArn:n})),[i]=r.EventSourceMappings;return i?{eventId:i.
-UUID}:void 0},"importMapping"),He=o(async(t,e)=>{t.update("Creating mapping");let{
-sourceArn:n,functionName:r}=e,a=(await d().send(new f.CreateEventSourceMappingCommand(
-{FunctionName:r,EventSourceArn:n,...Ge(e)}))).UUID;return await ze(a),{eventId:a}},
-"createMapping"),Oe=o(async(t,e,n)=>{t.update("Updating mapping");let{functionName:r}=n;
-await d().send(new f.UpdateEventSourceMappingCommand({UUID:e,FunctionName:r,...Ge(
-n)})),await ze(e)},"updateMapping"),Ue=o(async(t,e)=>{t.update("Deleting mapping");
-try{return await d().send(new f.DeleteEventSourceMappingCommand({UUID:e})),!0}catch(n){
-if(!(n instanceof f.ResourceNotFoundException))throw n;return!1}},"deleteMapping"),
-Tt=o(async t=>(await d().send(new f.GetEventSourceMappingCommand({UUID:t}))).State,
-"getMappingState"),ze=o(async t=>{let e=new Set(["Enabled","Disabled"]);await ne.Wait.
-until(async()=>{let n=await Tt(t);return e.has(n)?!0:ne.Wait.RetryAttempt})},"wa\
-itForReadyState"),Ge=o(t=>{let{sourceArn:e,enabled:n,concurrency:r,batch:i}=t,{service:a}=(0,Te.parseArn)(
-e);return{Enabled:n,FunctionResponseTypes:[f.FunctionResponseType.ReportBatchItemFailures],
+UUID}:void 0},"importMapping"),ke=o(async(t,e)=>{t.update("Creating mapping");let{
+sourceArn:n,functionName:r}=e,i=d(),p=(await i.send(new y.CreateEventSourceMappingCommand(
+{FunctionName:r,EventSourceArn:n,...We(e)}))).UUID;return await ae(i,p),{eventId:p}},
+"createMapping"),qe=o(async(t,e,n)=>{t.update("Updating mapping");let{functionName:r}=n,
+i=d();await i.send(new y.UpdateEventSourceMappingCommand({UUID:e,FunctionName:r,
+...We(n)})),await ae(i,e)},"updateMapping"),Be=o(async(t,e)=>{t.update("Deleting\
+ mapping");try{return await d().send(new y.DeleteEventSourceMappingCommand({UUID:e})),
+!0}catch(n){if(!(n instanceof y.ResourceNotFoundException))throw n;return!1}},"d\
+eleteMapping"),We=o(t=>{let{sourceArn:e,enabled:n,concurrency:r,batch:i}=t,{service:a}=(0,ze.parseArn)(
+e);return{Enabled:n,FunctionResponseTypes:[y.FunctionResponseType.ReportBatchItemFailures],
 MaximumBatchingWindowInSeconds:i?.maxWait,BatchSize:i?.size,...a==="dynamodb"&&{
-StartingPosition:f.EventSourcePosition.LATEST},...a==="sqs"&&{ScalingConfig:{MaximumConcurrency:r}}}},
-"upsertMappingRequest");var De=o(()=>({equals:Vt,create:qe,replace:Ot,preview:Ht,update:Ut,delete:zt}),"\
-getMappingHandler"),Vt=o((t,e)=>!!t.result&&t.result.eventId===e.result?.eventId,
-"equalsResource"),Ht=o((t,e)=>{let n={...t.parameters,dependencies:t.dependencies},
-r={...e.parameters,dependencies:e.dependencies},i=(0,k.deepCompare)(n,r,{exclude:{
+StartingPosition:y.EventSourcePosition.LATEST},...a==="sqs"&&{ScalingConfig:{MaximumConcurrency:r}}}},
+"upsertMappingRequest");var $e=o(()=>({equals:zt,create:je,replace:kt,preview:Dt,update:qt,delete:Bt}),"\
+getMappingHandler"),zt=o((t,e)=>!!t.result&&t.result.eventId===e.result?.eventId,
+"equalsResource"),Dt=o((t,e)=>{let n={...t.parameters,dependencies:t.dependencies},
+r={...e.parameters,dependencies:e.dependencies},i=(0,W.deepCompare)(n,r,{exclude:{
 getSourceArn:!0}});if(i.counts)return{...i,name:n.fromService}},"previewResource"),
-Ot=o(async(t,e,n)=>{if(e.result)throw new b.ReplaceResourceError(R,t.entryId,e.entryId);
-return qe(t,n)},"replaceResource"),qe=o((t,e)=>{let n=t.parameters,r=L(R,"mappin\
-g",e);return b.OperationLogger.logExecution(R,r,"creation",async i=>{let a=await n.
-getSourceArn(e);return{eventId:(await Ve(i,r,a)??await He(i,{...t.parameters,functionName:r,
-sourceArn:a})).eventId,functionName:r,sourceArn:a}})},"createResource"),Ut=o((t,e,n)=>{
-let{result:r,parameters:i}=t,{fromService:a}=i;if(!r)throw new b.CorruptedResourceError(
-R,"mapping");return b.OperationLogger.logExecution(R,a,"updates",async p=>{let c=L(
-R,"mapping",n),m=e.result?.functionName??r.functionName,u=r.sourceArn,l={...t.parameters,
-functionName:c,sourceArn:u},g={...e.parameters,functionName:m,sourceArn:u};return await Gt(
-p,r.eventId,l,g),{...r,functionName:c}})},"updateResource"),zt=o(async t=>{let e=t.
-result;if(!e)return;let{functionName:n}=e;await b.OperationLogger.logExecution(R,
-n,"deletion",async r=>{await Ue(r,e.eventId)})},"deleteResource"),Gt=o(async(t,e,n,r)=>{
-!(0,k.deepEqual)(n,r,{exclude:{getSourceArn:!0,fromService:!0}})&&await Oe(t,e,n)},
-"checkGeneralUpdates");var Be=o(()=>{(0,ke.tryRegisterProvider)(v,De())},"registerMappingProvider");var We=o(()=>[{account:"lambda.amazonaws.com"}],"prepareIdentityAccount");var B=require("@ez4/aws-identity"),je=require("@ez4/project/library");var I=require("@ez4/aws-identity");var $e=o(async t=>{let[e,n]=await Promise.all([(0,I.getRegion)(),(0,I.getAccountId)()]);
-return(0,I.createPolicyDocument)([{permissions:["logs:CreateLogStream","logs:Put\
-LogEvents"],resourceIds:[`arn:aws:logs:${e}:${n}:log-group:${t}-*:*`]}])},"getPo\
-licyDocument");var Ze=o(async t=>{let{state:e,options:n}=t,r=(0,je.getServiceName)("",n),i=`${r}\
--lambda-policy`;return(0,B.tryGetPolicy)(e,i)??(0,B.createPolicy)(e,{tags:n.tags,
-policyDocument:await $e(r),policyName:i})},"prepareExecutionPolicy");var Dt=o(()=>{(0,Qe.registerTriggers)(),(0,_e.registerTriggers)(),(0,Je.registerTriggers)(),
-(0,Ke.tryCreateTrigger)("@ez4/aws-function",{"deploy:prepareIdentityAccount":We,
-"deploy:prepareExecutionPolicy":Ze}),he(),Ie(),Be()},"registerTriggers");var W=require("@ez4/utils"),Xe=require("@ez4/stateful");var qt=o((t,e,n,r)=>{let i=(0,W.toKebabCase)(r.functionName),a=(0,W.hashData)(x,
-e.entryId,i),p=[e.entryId];return n&&p.push(n.entryId),(0,Xe.attachEntry)(t,{type:x,
-entryId:a,dependencies:p,parameters:{...r,functionName:i}})},"createFunction");var et=require("@ez4/stateful"),re=require("@ez4/utils");var Ye=o(t=>t.type===w,"isPermissionState");var kt=o((t,e,n,r)=>{let i=(0,re.hashData)(w,e.entryId,n.entryId);return(0,et.attachEntry)(
-t,{type:w,entryId:i,dependencies:[e.entryId,n.entryId],parameters:r})},"createPe\
-rmission"),Bt=o((t,e,n)=>{let r=(0,re.hashData)(w,e.entryId,n.entryId),i=t[r];return i&&
-Ye(i)?i:null},"getPermission");var tt=require("@ez4/utils"),nt=require("@ez4/stateful");var Wt=o((t,e,n,r)=>{let i=(0,tt.hashData)(v,e.entryId,n.entryId);return(0,nt.attachEntry)(
-t,{type:v,entryId:i,dependencies:[e.entryId,n.entryId],parameters:r})},"createMa\
-pping");var $t=o(t=>t.type===v,"isMappingState");var jt=o((t,e,n)=>`arn:aws:lambda:${t}:${e}:function:${n}`,"buildFunctionArn");var $=require("@ez4/project"),rt;(a=>(a.LogRetention=90,a.Architecture=$.ArchitectureType.
-x86,a.Runtime=$.RuntimeType.Node24,a.Timeout=90,a.Memory=192))(rt||={});0&&(module.exports={FunctionArchitecture,FunctionDefaults,FunctionRuntime,FunctionServiceName,
+kt=o(async(t,e,n)=>{if(e.result)throw new h.ReplaceResourceError(v,t.entryId,e.entryId);
+return je(t,n)},"replaceResource"),je=o((t,e)=>{let n=t.parameters,r=N(v,"mappin\
+g",e);return h.OperationLogger.logExecution(v,r,"creation",async i=>{let a=await n.
+getSourceArn(e);return{eventId:(await De(i,r,a)??await ke(i,{...t.parameters,functionName:r,
+sourceArn:a})).eventId,functionName:r,sourceArn:a}})},"createResource"),qt=o((t,e,n)=>{
+let{result:r,parameters:i}=t,{fromService:a}=i;if(!r)throw new h.CorruptedResourceError(
+v,"mapping");return h.OperationLogger.logExecution(v,a,"updates",async p=>{let c=N(
+v,"mapping",n),l=e.result?.functionName??r.functionName,u=r.sourceArn,m={...t.parameters,
+functionName:c,sourceArn:u},g={...e.parameters,functionName:l,sourceArn:u};return await Wt(
+p,r.eventId,m,g),{...r,functionName:c}})},"updateResource"),Bt=o(async t=>{let e=t.
+result;if(!e)return;let{functionName:n}=e;await h.OperationLogger.logExecution(v,
+n,"deletion",async r=>{await Be(r,e.eventId)})},"deleteResource"),Wt=o(async(t,e,n,r)=>{
+!(0,W.deepEqual)(n,r,{exclude:{getSourceArn:!0,fromService:!0}})&&await qe(t,e,n)},
+"checkGeneralUpdates");var Qe=o(()=>{(0,Ze.tryRegisterProvider)(R,$e())},"registerMappingProvider");var _e=o(()=>[{account:"lambda.amazonaws.com"}],"prepareIdentityAccount");var $=require("@ez4/aws-identity"),Ke=require("@ez4/project/library");var M=require("@ez4/aws-identity");var Je=o(async t=>{let[e,n]=await Promise.all([(0,M.getRegion)(),(0,M.getAccountId)()]);
+return(0,M.createPolicyDocument)([{permissions:["logs:CreateLogStream","logs:Put\
+LogEvents"],resourceIds:[`arn:aws:logs:${e}:${n}:log-group:${t}-*:*`]},{permissions:[
+"ec2:CreateNetworkInterface","ec2:DescribeNetworkInterfaces","ec2:DeleteNetworkI\
+nterface"],resourceIds:["*"]}])},"getPolicyDocument");var Xe=o(async t=>{let{state:e,options:n}=t,r=(0,Ke.getServiceName)("",n),i=`${r}\
+-lambda-policy`;return(0,$.tryGetPolicy)(e,i)??(0,$.createPolicy)(e,{tags:n.tags,
+policyDocument:await Je(r),policyName:i})},"prepareExecutionPolicy");var $t=o(()=>{(0,Ye.registerTriggers)(),(0,et.registerTriggers)(),(0,tt.registerTriggers)(),
+(0,nt.tryCreateTrigger)("@ez4/aws-function",{"deploy:prepareIdentityAccount":_e,
+"deploy:prepareExecutionPolicy":Xe}),Ie(),Oe(),Qe()},"registerTriggers");var j=require("@ez4/utils"),rt=require("@ez4/stateful");var jt=o((t,e,n,r)=>{let i=(0,j.toKebabCase)(r.functionName),a=(0,j.hashData)(x,
+e.entryId,i),p=[e.entryId];return n&&p.push(n.entryId),(0,rt.attachEntry)(t,{type:x,
+entryId:a,dependencies:p,parameters:{...r,functionName:i}})},"createFunction");var it=require("@ez4/stateful"),se=require("@ez4/utils");var ot=o(t=>t.type===b,"isPermissionState");var Zt=o((t,e,n,r)=>{let i=(0,se.hashData)(b,e.entryId,n.entryId);return(0,it.attachEntry)(
+t,{type:b,entryId:i,dependencies:[e.entryId,n.entryId],parameters:r})},"createPe\
+rmission"),Qt=o((t,e,n)=>{let r=(0,se.hashData)(b,e.entryId,n.entryId),i=t[r];return i&&
+ot(i)?i:null},"getPermission");var at=require("@ez4/utils"),st=require("@ez4/stateful");var _t=o((t,e,n,r)=>{let i=(0,at.hashData)(R,e.entryId,n.entryId);return(0,st.attachEntry)(
+t,{type:R,entryId:i,dependencies:[e.entryId,n.entryId],parameters:r})},"createMa\
+pping");var Jt=o(t=>t.type===R,"isMappingState");var Kt=o((t,e,n)=>`arn:aws:lambda:${t}:${e}:function:${n}`,"buildFunctionArn");var Z=require("@ez4/project"),pt;(a=>(a.LogRetention=90,a.Architecture=Z.ArchitectureType.
+x86,a.Runtime=Z.RuntimeType.Node24,a.Timeout=90,a.Memory=192))(pt||={});0&&(module.exports={FunctionArchitecture,FunctionDefaults,FunctionRuntime,FunctionServiceName,
 FunctionServiceType,MappingService,MappingServiceName,MappingServiceType,PermissionServiceName,
 PermissionServiceType,buildFunctionArn,createFunction,createMapping,createPermission,
-getFunctionArchitecture,getFunctionArn,getFunctionName,getFunctionRuntime,getFunctionState,
-getPermission,isFunctionState,isMappingState,registerTriggers,tryGetFunctionArn,
+getDefaultVpcConfig,getFunctionArchitecture,getFunctionArn,getFunctionName,getFunctionRuntime,
+getFunctionState,getPermission,isFunctionState,isMappingState,registerTriggers,tryGetFunctionArn,
 tryGetFunctionState});
 //# sourceMappingURL=main.cjs.map

package/dist/main.mjs

@@ -1,162 +1,171 @@
-var Ie=Object.defineProperty;var o=(t,e)=>Ie(t,"name",{value:e,configurable:!0});import{registerTriggers as en}from"@ez4/aws-common";import{registerTriggers as tn}from"@ez4/aws-identity";
-import{registerTriggers as nn}from"@ez4/aws-logs";import{tryCreateTrigger as rn}from"@ez4/project/library";import{tryRegisterProvider as dt}from"@ez4/aws-common";import{applyTagUpdates as tt,CorruptedResourceError as nt,getBundleHash as O,OperationLogger as U,
-ReplaceResourceError as rt}from"@ez4/aws-common";import{deepCompare as ot,deepEqual as it,
-hashFile as te}from"@ez4/utils";import{getLogGroupName as ne}from"@ez4/aws-logs";
-import{getRoleArn as re}from"@ez4/aws-identity";import{GetFunctionCommand as $e,CreateFunctionCommand as je,DeleteFunctionCommand as Ze,
-UpdateFunctionCodeCommand as Qe,UpdateFunctionConfigurationCommand as _e,PublishVersionCommand as zn,
-TagResourceCommand as Je,UntagResourceCommand as Ke,waitUntilFunctionActive as Xe,
-waitUntilFunctionUpdated as W,waitUntilPublishedVersionActive as $,ResourceNotFoundException as j,
-ApplicationLogLevel as L,SystemLogLevel as Z,LogFormat as Q}from"@aws-sdk/client-lambda";
-import{waitCreation as Ye,waitDeletion as et}from"@ez4/aws-common";import{getAwsClientOptions as Me,getAwsClientWaiter as Te}from"@ez4/aws-common";
-import{LambdaClient as Ve}from"@aws-sdk/client-lambda";var g=o(()=>new Ve(Me()),"getLambdaClient"),A=o(t=>({...Te(),client:t}),"getLamb\
-daWaiter");import{RuntimeType as q}from"@ez4/project";var He=(n=>(n.Node22="nodejs22.x",n.Node24="nodejs24.x",n))(He||{});var Oe={[q.Node22]:"nodejs22.x",[q.Node24]:"nodejs24.x"},E=o(t=>Oe[t],"getFuncti\
-onRuntime");import{ArchitectureType as k}from"@ez4/project";var Ue=(n=>(n.Arm="arm64",n.x86="x86_64",n))(Ue||{});var ze={[k.Arm]:"arm64",[k.x86]:"x86_64"},I=o(t=>ze[t],"getFunctionArchitecture");import{InvalidParameterError as Ge}from"@ez4/aws-common";import{hashData as De}from"@ez4/utils";var f="AWS:Lambda/Function",y="aws:lambda.function";var qe=/[a-z][\w]+/i,ke=o(t=>qe.test(t),"isValidName"),M=o(t=>{for(let e in t)if(!ke(
-e))throw new Ge(f,`${e} is an invalid variable name .`)},"assertVariables"),v=o(
-t=>{let e={};for(let n in t)e[n]=De(t[n]);return e},"protectVariables");import Be from"adm-zip";import{readFile as We}from"node:fs/promises";var B=o(async(t,e)=>{let n=new Be,r=await We(t);return n.addFile(e,r),n.toBufferPromise()},
-"getZipBuffer");var _=o(async(t,e,n)=>{t.update("Importing function");try{let r=await g().send(new $e(
-{FunctionName:e,Qualifier:n})),i=r.Configuration.Version,a=r.Configuration.FunctionArn;
-return{functionVersion:i,functionArn:a}}catch(r){if(!(r instanceof j))throw r;return}},
-"importFunction"),J=o(async(t,e)=>{t.update("Creating function");let{functionName:n,
-variables:r}=e;r&&M(r);let i=ee(e.handlerName),a=await Y(e.sourceFile),{description:s,
-memory:p,timeout:u,publish:c,architecture:m,runtime:l,debug:d,roleArn:x,logGroup:R}=e,
-P=g(),C=await Ye(()=>P.send(new je({FunctionName:n,Description:s,MemorySize:p,Timeout:u,
-Role:x,Publish:c,Handler:i,Architectures:[I(m)],Runtime:E(l),PackageType:"Zip",LoggingConfig:{
-LogGroup:R,ApplicationLogLevel:d?L.Debug:L.Warn,SystemLogLevel:Z.Warn,LogFormat:Q.
-Json},Code:{ZipFile:a},Environment:{Variables:r},Tags:{...e.tags,ManagedBy:"EZ4"}}))),
-Ee=C.FunctionArn,G=C.Version,D=A(P);return await Xe(D,{FunctionName:n}),c&&await $(
-D,{FunctionName:n,Qualifier:G}),{functionArn:Ee,...c&&{functionVersion:G}}},"cre\
-ateFunction"),T=o(async(t,e,n)=>{t.update("Updating source code");let r=await Y(
-n.sourceFile),{publish:i,architecture:a}=n,s=g(),p=await s.send(new Qe({Architectures:a&&
-[I(a)],FunctionName:e,ZipFile:r,Publish:i})),u=p.FunctionArn,c=p.Version,m=A(s);
-return await W(m,{FunctionName:e}),i&&await $(m,{FunctionName:e,Qualifier:c}),{functionArn:u,
-...i&&{functionVersion:c}}},"updateSourceCode"),V=o(async(t,e,n)=>{t.update("Upd\
-ating configuration");let{handlerName:r,variables:i}=n;i&&M(i);let{description:a,
-memory:s,timeout:p,runtime:u,debug:c,roleArn:m,logGroup:l}=n,d=g();await d.send(
-new _e({Runtime:u&&E(u),FunctionName:e,Description:a,MemorySize:s,Timeout:p,Role:m,
-...r&&{Handler:ee(r)},LoggingConfig:{LogGroup:l,ApplicationLogLevel:c?L.Debug:L.
-Warn,SystemLogLevel:Z.Warn,LogFormat:Q.Json},Environment:{Variables:i}})),await W(
-A(d),{FunctionName:e})},"updateConfiguration"),K=o(async(t,e)=>{e.update("Deleti\
-ng function");let n=g();await et(async()=>{try{await n.send(new Ze({FunctionName:t}))}catch(r){
-if(!(r instanceof j))throw r}})},"deleteFunction");var H=o(async(t,e,n)=>{t.update("Tag function"),await g().send(new Je({Resource:e,
-Tags:{...n,ManagedBy:"EZ4"}}))},"tagFunction"),X=o(async(t,e,n)=>{t.update("Unta\
-g function"),await g().send(new Ke({Resource:e,TagKeys:n}))},"untagFunction"),Y=o(
-t=>B(t,"main.mjs"),"getSourceZipFile"),ee=o(t=>`main.${t}`,"getSourceHandlerName");var oe=o(()=>({equals:at,create:ie,replace:pt,preview:st,update:ct,delete:ut}),"\
-getFunctionHandler"),at=o((t,e)=>!!t.result&&t.result.functionArn===e.result?.functionArn,
-"equalsResource"),st=o(async(t,e)=>{let n=t.parameters,r=e.parameters,i=ot({...n,
+var Ve=Object.defineProperty;var o=(t,e)=>Ve(t,"name",{value:e,configurable:!0});import{registerTriggers as sn}from"@ez4/aws-common";import{registerTriggers as pn}from"@ez4/aws-identity";
+import{registerTriggers as cn}from"@ez4/aws-logs";import{tryCreateTrigger as un}from"@ez4/project/library";import{tryRegisterProvider as bt}from"@ez4/aws-common";import{applyTagUpdates as pt,CorruptedResourceError as ct,getBundleHash as G,OperationLogger as z,
+ReplaceResourceError as ut}from"@ez4/aws-common";import{deepCompare as mt,deepEqual as lt,
+hashFile as se}from"@ez4/utils";import{getLogGroupName as pe}from"@ez4/aws-logs";
+import{getRoleArn as ce}from"@ez4/aws-identity";import{GetFunctionCommand as Xe,CreateFunctionCommand as Ye,DeleteFunctionCommand as et,
+UpdateFunctionCodeCommand as tt,UpdateFunctionConfigurationCommand as nt,PublishVersionCommand as tr,
+TagResourceCommand as rt,UntagResourceCommand as ot,waitUntilFunctionActive as it,
+waitUntilFunctionUpdated as J,waitUntilPublishedVersionActive as K,ResourceNotFoundException as X,
+ApplicationLogLevel as N,SystemLogLevel as Y,LogFormat as ee}from"@aws-sdk/client-lambda";
+import{waitCreation as at,waitDeletion as st}from"@ez4/aws-common";import{getAwsClientOptions as He,getAwsClientWaiter as Oe}from"@ez4/aws-common";
+import{LambdaClient as Ue}from"@aws-sdk/client-lambda";var g=o(()=>new Ue(He()),"getLambdaClient"),A=o(t=>({...Oe(),client:t}),"getLamb\
+daWaiter");import{RuntimeType as $}from"@ez4/project";var Ge=(n=>(n.Node22="nodejs22.x",n.Node24="nodejs24.x",n))(Ge||{});var ze={[$.Node22]:"nodejs22.x",[$.Node24]:"nodejs24.x"},E=o(t=>ze[t],"getFuncti\
+onRuntime");import{ArchitectureType as j}from"@ez4/project";var De=(n=>(n.Arm="arm64",n.x86="x86_64",n))(De||{});var ke={[j.Arm]:"arm64",[j.x86]:"x86_64"},M=o(t=>ke[t],"getFunctionArchitecture");import{InvalidParameterError as qe}from"@ez4/aws-common";import{hashData as Be}from"@ez4/utils";var f="AWS:Lambda/Function",S="aws:lambda.function";var We=/[a-z][\w]+/i,$e=o(t=>We.test(t),"isValidName"),T=o(t=>{for(let e in t)if(!$e(
+e))throw new qe(f,`${e} is an invalid variable name .`)},"assertVariables"),v=o(
+t=>{let e={};for(let n in t)e[n]=Be(t[n]);return e},"protectVariables");import je from"adm-zip";import{readFile as Ze}from"node:fs/promises";var Z=o(async(t,e)=>{let n=new je,r=await Ze(t);return n.addFile(e,r),n.toBufferPromise()},
+"getZipBuffer");import{getDefaultSecurityGroupId as Qe,getDefaultSubnetIds as _e,getDefaultVpcId as Je}from"@ez4/aws-vpc";
+import{IncompleteResourceError as Q}from"@ez4/aws-common";var L=class extends Error{static{o(this,"FunctionNotFoundError")}constructor(e){
+super(`Function ${e} wasn't found.`)}},R=class extends Error{static{o(this,"Defa\
+ultVpcDetailsError")}constructor(){super("Unable to get the default VPC details.")}};var _=o(t=>t.type===S,"isFunctionState"),_n=o((t,e,n)=>{try{let r=t.getServiceState(
+e,n);if(_(r))return r}catch{}},"tryGetFunctionState"),Jn=o((t,e,n)=>{let r=t.getServiceState(
+e,n);if(!_(r))throw new L(e);return r},"getFunctionState"),h=o((t,e,n)=>{let r=n.
+getDependencies(S).at(0)?.parameters;if(!r?.functionName)throw new Q(t,e,"functi\
+onName");return r.functionName},"getFunctionName"),Ke=o(t=>t.getDependencies(S)[0]?.
+result?.functionArn,"tryGetFunctionArn"),Kn=o((t,e,n)=>{let r=Ke(n);if(!r)throw new Q(
+t,e,"functionArn");return r},"getFunctionArn"),V=o(async()=>{let t=await Je();if(!t)
+throw new R;let[e,n]=await Promise.all([_e(t),Qe(t)]);if(!e?.length||!n)throw new R;
+return{subnetIds:e.slice(0,2),securityGroupId:n}},"getDefaultVpcConfig");var te=o(async(t,e,n)=>{t.update("Importing function");try{let r=await g().send(
+new Xe({FunctionName:e,Qualifier:n})),i=r.Configuration.Version,a=r.Configuration.
+FunctionArn;return{functionVersion:i,functionArn:a}}catch(r){if(!(r instanceof X))
+throw r;return}},"importFunction"),ne=o(async(t,e)=>{t.update("Creating function");
+let{functionName:n,variables:r}=e;r&&T(r);let i=e.vpc?await V():void 0,a=ae(e.handlerName),
+s=await ie(e.sourceFile),{description:p,memory:m,timeout:c,publish:u,architecture:l,
+runtime:d,debug:y,roleArn:b,logGroup:I}=e,P=g(),q=await at(()=>P.send(new Ye({FunctionName:n,
+Description:p,MemorySize:m,Timeout:c,Role:b,Publish:u,Handler:a,Architectures:[M(
+l)],Runtime:E(d),PackageType:"Zip",VpcConfig:{SecurityGroupIds:i?[i.securityGroupId]:
+[],SubnetIds:i?i.subnetIds:[]},LoggingConfig:{LogGroup:I,ApplicationLogLevel:y?N.
+Debug:N.Warn,SystemLogLevel:Y.Warn,LogFormat:ee.Json},Code:{ZipFile:s},Environment:{
+Variables:r},Tags:{...e.tags,ManagedBy:"EZ4"}}))),Te=q.FunctionArn,B=q.Version,W=A(
+P);return await it(W,{FunctionName:n}),u&&await K(W,{FunctionName:n,Qualifier:B}),
+{functionArn:Te,...u&&{functionVersion:B}}},"createFunction"),H=o(async(t,e,n)=>{
+t.update("Updating source code");let r=await ie(n.sourceFile),{publish:i,architecture:a}=n,
+s=g(),p=await s.send(new tt({Architectures:a&&[M(a)],FunctionName:e,ZipFile:r,Publish:i})),
+m=p.FunctionArn,c=p.Version,u=A(s);return await J(u,{FunctionName:e}),i&&await K(
+u,{FunctionName:e,Qualifier:c}),{functionArn:m,...i&&{functionVersion:c}}},"upda\
+teSourceCode"),O=o(async(t,e,n)=>{t.update("Updating configuration");let{handlerName:r,
+variables:i}=n;i&&T(i);let a=n.vpc?await V():void 0,{description:s,memory:p,timeout:m,
+runtime:c,debug:u,roleArn:l,logGroup:d}=n,y=g();await y.send(new nt({Runtime:c&&
+E(c),FunctionName:e,Description:s,MemorySize:p,Timeout:m,Role:l,...r&&{Handler:ae(
+r)},VpcConfig:{SecurityGroupIds:a?[a.securityGroupId]:[],SubnetIds:a?a.subnetIds:
+[]},LoggingConfig:{LogGroup:d,ApplicationLogLevel:u?N.Debug:N.Warn,SystemLogLevel:Y.
+Warn,LogFormat:ee.Json},Environment:{Variables:i}})),await J(A(y),{FunctionName:e})},
+"updateConfiguration"),re=o(async(t,e)=>{e.update("Deleting function");let n=g();
+await st(async()=>{try{await n.send(new et({FunctionName:t}))}catch(r){if(!(r instanceof
+X))throw r}})},"deleteFunction");var U=o(async(t,e,n)=>{t.update("Tag function"),await g().send(new rt({Resource:e,
+Tags:{...n,ManagedBy:"EZ4"}}))},"tagFunction"),oe=o(async(t,e,n)=>{t.update("Unt\
+ag function"),await g().send(new ot({Resource:e,TagKeys:n}))},"untagFunction"),ie=o(
+t=>Z(t,"main.mjs"),"getSourceZipFile"),ae=o(t=>`main.${t}`,"getSourceHandlerName");var ue=o(()=>({equals:gt,create:me,replace:ft,preview:dt,update:yt,delete:St}),"\
+getFunctionHandler"),gt=o((t,e)=>!!t.result&&t.result.functionArn===e.result?.functionArn,
+"equalsResource"),dt=o(async(t,e)=>{let n=t.parameters,r=e.parameters,i=mt({...n,
 connections:t.connections,dependencies:t.dependencies,variables:v(await n.getFunctionVariables()),
-sourceHash:await O(...n.getFunctionFiles()),valuesHash:n.getFunctionHash()},{...r,
+sourceHash:await G(...n.getFunctionFiles()),valuesHash:n.getFunctionHash()},{...r,
 connections:e.connections,dependencies:e.dependencies,variables:e.result?.variables,
 sourceHash:e.result?.sourceHash,valuesHash:e.result?.valuesHash},{exclude:{release:!0}});
-if(i.counts)return{...i,name:n.functionName}},"previewResource"),pt=o(async(t,e,n)=>{
-if(e.result)throw new rt(f,t.entryId,e.entryId);return ie(t,n)},"replaceResource"),
-ie=o((t,e)=>{let{functionName:n,release:r,...i}=t.parameters;return U.logExecution(
-f,n,"creation",async a=>{let s=ne(f,n,e),p=re(f,n,e),[u,c,m,l]=await Promise.all(
-[O(...i.getFunctionFiles()),i.getFunctionBundle(e),i.getFunctionHash(),i.getFunctionVariables()]),
-d=await _(a,n),x=await te(c);if(d)return await T(a,n,{architecture:i.architecture,
-publish:!1,sourceFile:c}),await V(a,n,{...i,logGroup:s,roleArn:p,variables:{...l,
-...r?.variableName&&{[r.variableName]:r.version}}}),await H(a,d.functionArn,{...i.
+if(i.counts)return{...i,name:n.functionName}},"previewResource"),ft=o(async(t,e,n)=>{
+if(e.result)throw new ut(f,t.entryId,e.entryId);return me(t,n)},"replaceResource"),
+me=o((t,e)=>{let{functionName:n,release:r,...i}=t.parameters;return z.logExecution(
+f,n,"creation",async a=>{let s=pe(f,n,e),p=ce(f,n,e),[m,c,u,l]=await Promise.all(
+[G(...i.getFunctionFiles()),i.getFunctionBundle(e),i.getFunctionHash(),i.getFunctionVariables()]),
+d=await te(a,n),y=await se(c);if(d)return await H(a,n,{architecture:i.architecture,
+publish:!1,sourceFile:c}),await O(a,n,{...i,logGroup:s,roleArn:p,variables:{...l,
+...r?.variableName&&{[r.variableName]:r.version}}}),await U(a,d.functionArn,{...i.
 tags,...r?.tagName&&{[r.tagName]:r.version}}),{functionArn:d.functionArn,functionVersion:d.
-functionVersion,variables:v(l),valuesHash:m,sourceHash:u,bundleHash:x,logGroup:s,
-roleArn:p};let R=await J(a,{...i,publish:!0,functionName:n,sourceFile:c,logGroup:s,
+functionVersion,variables:v(l),valuesHash:u,sourceHash:m,bundleHash:y,logGroup:s,
+roleArn:p};let b=await ne(a,{...i,publish:!0,functionName:n,sourceFile:c,logGroup:s,
 roleArn:p,variables:{...l,...r?.variableName&&{[r.variableName]:r.version}},tags:{
-...i.tags,...r?.tagName&&{[r.tagName]:r.version}}});return{functionArn:R.functionArn,
-functionVersion:R.functionVersion,variables:v(l),valuesHash:m,sourceHash:u,bundleHash:x,
-logGroup:s,roleArn:p}})},"createResource"),ct=o((t,e,n)=>{let{parameters:r,result:i}=t,
-{functionName:a}=r;if(!i)throw new nt(f,a);return U.logExecution(f,a,"updates",async s=>{
-let p=await r.getFunctionVariables(),u=e.result?.variables??p,c=re(f,a,n),m=e.result?.
-roleArn??c,l=ne(f,a,n),d=e.result?.logGroup??l,{isUpdated:x,...R}=await gt(s,a,r,
-e.result,n),P={...r,variables:p,roleArn:c,logGroup:l},C={...e.parameters,variables:u,
-roleArn:m,logGroup:d};return await mt(s,a,P,C,x,n),await lt(s,i.functionArn,r,e.
-parameters,x),{...i,...R,variables:v(p),logGroup:l,roleArn:c}})},"updateResource"),
-ut=o(async t=>{let{result:e,parameters:n}=t;if(!e)return;let{functionName:r}=n;await U.
-logExecution(f,r,"deletion",async i=>{await K(r,i)})},"deleteResource"),mt=o(async(t,e,n,r,i,a)=>{
-let{variables:s,...p}=n,u={variables:v(s),...p},c=!it(u,r,{exclude:{sourceFile:!0,
-functionName:!0,architecture:!0,release:!0,tags:!0}}),m=i?n.release:r.release,l=i&&
-m?.variableName;(c||l||a.force)&&await V(t,e,{...n,variables:{...n.variables,...m?.
-variableName&&{[m.variableName]:m.version}}})},"checkConfigurationUpdates"),lt=o(
+...i.tags,...r?.tagName&&{[r.tagName]:r.version}}});return{functionArn:b.functionArn,
+functionVersion:b.functionVersion,variables:v(l),valuesHash:u,sourceHash:m,bundleHash:y,
+logGroup:s,roleArn:p}})},"createResource"),yt=o((t,e,n)=>{let{parameters:r,result:i}=t,
+{functionName:a}=r;if(!i)throw new ct(f,a);return z.logExecution(f,a,"updates",async s=>{
+let p=await r.getFunctionVariables(),m=e.result?.variables??p,c=ce(f,a,n),u=e.result?.
+roleArn??c,l=pe(f,a,n),d=e.result?.logGroup??l,{isUpdated:y,...b}=await xt(s,a,r,
+e.result,n),I={...r,variables:p,roleArn:c,logGroup:l},P={...e.parameters,variables:m,
+roleArn:u,logGroup:d};return await wt(s,a,I,P,y,n),await Ft(s,i.functionArn,r,e.
+parameters,y),{...i,...b,variables:v(p),logGroup:l,roleArn:c}})},"updateResource"),
+St=o(async t=>{let{result:e,parameters:n}=t;if(!e)return;let{functionName:r}=n;await z.
+logExecution(f,r,"deletion",async i=>{await re(r,i)})},"deleteResource"),wt=o(async(t,e,n,r,i,a)=>{
+let{variables:s,...p}=n,m={variables:v(s),...p},c=!lt(m,r,{exclude:{sourceFile:!0,
+functionName:!0,architecture:!0,release:!0,tags:!0}}),u=i?n.release:r.release,l=i&&
+u?.variableName;(c||l||a.force)&&await O(t,e,{...n,variables:{...n.variables,...u?.
+variableName&&{[u.variableName]:u.version}}})},"checkConfigurationUpdates"),Ft=o(
 async(t,e,n,r,i)=>{let s=i&&n.release?.version!==r.release?.version?n.release:void 0,
-p={...n.tags,...s?.tagName&&{[s.tagName]:s.version}};await tt(p,r.tags,u=>H(t,e,
-u),u=>X(t,e,u))},"checkTagUpdates"),gt=o(async(t,e,n,r,i)=>{let[a,s]=await Promise.
-all([O(...n.getFunctionFiles()),n.getFunctionHash()]),p=r?.sourceHash,u=r?.valuesHash;
-if(a!==p||s!==u||i.force){let c=await n.getFunctionBundle(i),m=await te(c),l=r?.
-bundleHash;if(m===l&&s===u)return t.update("Skipping source code update"),{isUpdated:!1,
-valuesHash:s,sourceHash:a};let{functionVersion:d}=await T(t,e,{architecture:n.architecture,
+p={...n.tags,...s?.tagName&&{[s.tagName]:s.version}};await pt(p,r.tags,m=>U(t,e,
+m),m=>oe(t,e,m))},"checkTagUpdates"),xt=o(async(t,e,n,r,i)=>{let[a,s]=await Promise.
+all([G(...n.getFunctionFiles()),n.getFunctionHash()]),p=r?.sourceHash,m=r?.valuesHash;
+if(a!==p||s!==m||i.force){let c=await n.getFunctionBundle(i),u=await se(c),l=r?.
+bundleHash;if(u===l&&s===m)return t.update("Skipping source code update"),{isUpdated:!1,
+valuesHash:s,sourceHash:a};let{functionVersion:d}=await H(t,e,{architecture:n.architecture,
 publish:!r?.functionVersion,sourceFile:c});return{isUpdated:!0,valuesHash:s,sourceHash:a,
-bundleHash:m,...d&&{functionVersion:d}}}return{isUpdated:!1}},"checkSourceCodeUp\
-dates");var ae=o(()=>{dt(y,oe())},"registerFunctionProvider");import{tryRegisterProvider as Pt}from"@ez4/aws-common";import{OperationLogger as me,ReplaceResourceError as xt}from"@ez4/aws-common";import{IncompleteResourceError as se}from"@ez4/aws-common";var N=class extends Error{static{o(this,"FunctionNotFoundError")}constructor(e){
-super(`Function ${e} wasn't found.`)}};var pe=o(t=>t.type===y,"isFunctionState"),lr=o((t,e,n)=>{try{let r=t.getServiceState(
-e,n);if(pe(r))return r}catch{}},"tryGetFunctionState"),gr=o((t,e,n)=>{let r=t.getServiceState(
-e,n);if(!pe(r))throw new N(e);return r},"getFunctionState"),b=o((t,e,n)=>{let r=n.
-getDependencies(y).at(0)?.parameters;if(!r?.functionName)throw new se(t,e,"funct\
-ionName");return r.functionName},"getFunctionName"),ft=o(t=>t.getDependencies(y)[0]?.
-result?.functionArn,"tryGetFunctionArn"),dr=o((t,e,n)=>{let r=ft(n);if(!r)throw new se(
-t,e,"functionArn");return r},"getFunctionArn");import{AddPermissionCommand as yt,RemovePermissionCommand as St,ResourceNotFoundException as Ft}from"@aws-sdk/client-lambda";var ce=o(async(t,e)=>{t.update("Creating permission");let n=e.statementId??`ID${Date.
-now()}`;return await g().send(new yt({StatementId:n,FunctionName:e.functionName,
+bundleHash:u,...d&&{functionVersion:d}}}return{isUpdated:!1}},"checkSourceCodeUp\
+dates");var le=o(()=>{bt(S,ue())},"registerFunctionProvider");import{tryRegisterProvider as Et}from"@ez4/aws-common";import{OperationLogger as fe,ReplaceResourceError as Ct}from"@ez4/aws-common";import{AddPermissionCommand as vt,RemovePermissionCommand as Rt,ResourceNotFoundException as ht}from"@aws-sdk/client-lambda";var ge=o(async(t,e)=>{t.update("Creating permission");let n=e.statementId??`ID${Date.
+now()}`;return await g().send(new vt({StatementId:n,FunctionName:e.functionName,
 SourceArn:e.sourceArn,Principal:e.principal,Action:e.action})),{statementId:n}},
-"createPermission"),ue=o(async(t,e,n)=>{t.update("Deleting permission");try{return await g().
-send(new St({FunctionName:e,StatementId:n})),!0}catch(r){if(!(r instanceof Ft))throw r;
-return!1}},"deletePermission");var h="AWS:Lambda/Permission",S="aws:lambda.permission";var le=o(()=>({equals:wt,create:ge,replace:vt,preview:Rt,update:bt,delete:ht}),"\
-getPermissionHandler"),wt=o((t,e)=>!!t.result&&t.result.functionName===e.result?.
-functionName,"equalsResource"),Rt=o((t,e)=>{},"previewResource"),vt=o(async(t,e,n)=>{
-if(e.result)throw new xt(h,t.entryId,e.entryId);return ge(t,n)},"replaceResource"),
-ge=o((t,e)=>{let n=t.parameters,r=b(h,"permission",e);return me.logExecution(h,r,
-"creation",async i=>{let a=await n.getPermission(e);return{statementId:(await ce(
+"createPermission"),de=o(async(t,e,n)=>{t.update("Deleting permission");try{return await g().
+send(new Rt({FunctionName:e,StatementId:n})),!0}catch(r){if(!(r instanceof ht))throw r;
+return!1}},"deletePermission");var C="AWS:Lambda/Permission",w="aws:lambda.permission";var ye=o(()=>({equals:Pt,create:Se,replace:Lt,preview:At,update:Nt,delete:It}),"\
+getPermissionHandler"),Pt=o((t,e)=>!!t.result&&t.result.functionName===e.result?.
+functionName,"equalsResource"),At=o((t,e)=>{},"previewResource"),Lt=o(async(t,e,n)=>{
+if(e.result)throw new Ct(C,t.entryId,e.entryId);return Se(t,n)},"replaceResource"),
+Se=o((t,e)=>{let n=t.parameters,r=h(C,"permission",e);return fe.logExecution(C,r,
+"creation",async i=>{let a=await n.getPermission(e);return{statementId:(await ge(
 i,{action:"lambda:InvokeFunction",sourceArn:a.sourceArn,principal:a.principal,functionName:r})).
-statementId,functionName:r}})},"createResource"),bt=o(async()=>{},"updateResourc\
-e"),ht=o(async t=>{let e=t.result;if(!e)return;let{functionName:n,statementId:r}=e;
-await me.logExecution(h,n,"deletion",async i=>{await ue(i,n,r)})},"deleteResourc\
-e");var de=o(()=>{Pt(S,le())},"registerPermissionProvider");import{tryRegisterProvider as Zt}from"@ez4/aws-common";import{CorruptedResourceError as Ut,OperationLogger as z,ReplaceResourceError as zt}from"@ez4/aws-common";
-import{deepCompare as Gt,deepEqual as Dt}from"@ez4/utils";import{GetEventSourceMappingCommand as At,CreateEventSourceMappingCommand as Lt,
-UpdateEventSourceMappingCommand as Nt,DeleteEventSourceMappingCommand as Et,ListEventSourceMappingsCommand as It,
-FunctionResponseType as Mt,EventSourcePosition as Tt,ResourceNotFoundException as Vt}from"@aws-sdk/client-lambda";
-import{parseArn as Ht}from"@ez4/aws-common";import{Wait as fe}from"@ez4/utils";var F="AWS:Lambda/Mapping",w="aws:lambda.mapping",Ct=(n=>(n.DynamoDB="dynamodb",
-n.Queue="sqs",n))(Ct||{});var ye=o(async(t,e,n)=>{t.update("Importing mapping");let r=await g().send(new It(
+statementId,functionName:r}})},"createResource"),Nt=o(async()=>{},"updateResourc\
+e"),It=o(async t=>{let e=t.result;if(!e)return;let{functionName:n,statementId:r}=e;
+await fe.logExecution(C,n,"deletion",async i=>{await de(i,n,r)})},"deleteResourc\
+e");var we=o(()=>{Et(w,ye())},"registerPermissionProvider");import{tryRegisterProvider as Yt}from"@ez4/aws-common";import{CorruptedResourceError as Bt,OperationLogger as k,ReplaceResourceError as Wt}from"@ez4/aws-common";
+import{deepCompare as $t,deepEqual as jt}from"@ez4/utils";import{CreateEventSourceMappingCommand as Ht,UpdateEventSourceMappingCommand as Ot,
+DeleteEventSourceMappingCommand as Ut,ListEventSourceMappingsCommand as Gt,FunctionResponseType as zt,
+EventSourcePosition as Dt,ResourceNotFoundException as kt}from"@aws-sdk/client-lambda";
+import{parseArn as qt}from"@ez4/aws-common";import{GetEventSourceMappingCommand as Mt}from"@aws-sdk/client-lambda";import{Wait as Fe}from"@ez4/utils";var D=o(async(t,e)=>{let n=new Set(["Enabled","Disabled"]);await Fe.until(async()=>{
+let r=await Tt(t,e);return n.has(r)?!0:Fe.RetryAttempt})},"waitForReadyState"),Tt=o(
+async(t,e)=>(await t.send(new Mt({UUID:e}))).State,"getMappingState");var F="AWS:Lambda/Mapping",x="aws:lambda.mapping",Vt=(n=>(n.DynamoDB="dynamodb",
+n.Queue="sqs",n))(Vt||{});var xe=o(async(t,e,n)=>{t.update("Importing mapping");let r=await g().send(new Gt(
 {FunctionName:e,EventSourceArn:n})),[i]=r.EventSourceMappings;return i?{eventId:i.
-UUID}:void 0},"importMapping"),Se=o(async(t,e)=>{t.update("Creating mapping");let{
-sourceArn:n,functionName:r}=e,a=(await g().send(new Lt({FunctionName:r,EventSourceArn:n,
-...Re(e)}))).UUID;return await we(a),{eventId:a}},"createMapping"),Fe=o(async(t,e,n)=>{
-t.update("Updating mapping");let{functionName:r}=n;await g().send(new Nt({UUID:e,
-FunctionName:r,...Re(n)})),await we(e)},"updateMapping"),xe=o(async(t,e)=>{t.update(
-"Deleting mapping");try{return await g().send(new Et({UUID:e})),!0}catch(n){if(!(n instanceof
-Vt))throw n;return!1}},"deleteMapping"),Ot=o(async t=>(await g().send(new At({UUID:t}))).
-State,"getMappingState"),we=o(async t=>{let e=new Set(["Enabled","Disabled"]);await fe.
-until(async()=>{let n=await Ot(t);return e.has(n)?!0:fe.RetryAttempt})},"waitFor\
-ReadyState"),Re=o(t=>{let{sourceArn:e,enabled:n,concurrency:r,batch:i}=t,{service:a}=Ht(
-e);return{Enabled:n,FunctionResponseTypes:[Mt.ReportBatchItemFailures],MaximumBatchingWindowInSeconds:i?.
-maxWait,BatchSize:i?.size,...a==="dynamodb"&&{StartingPosition:Tt.LATEST},...a===
-"sqs"&&{ScalingConfig:{MaximumConcurrency:r}}}},"upsertMappingRequest");var ve=o(()=>({equals:qt,create:be,replace:Bt,preview:kt,update:Wt,delete:$t}),"\
-getMappingHandler"),qt=o((t,e)=>!!t.result&&t.result.eventId===e.result?.eventId,
-"equalsResource"),kt=o((t,e)=>{let n={...t.parameters,dependencies:t.dependencies},
-r={...e.parameters,dependencies:e.dependencies},i=Gt(n,r,{exclude:{getSourceArn:!0}});
-if(i.counts)return{...i,name:n.fromService}},"previewResource"),Bt=o(async(t,e,n)=>{
-if(e.result)throw new zt(F,t.entryId,e.entryId);return be(t,n)},"replaceResource"),
-be=o((t,e)=>{let n=t.parameters,r=b(F,"mapping",e);return z.logExecution(F,r,"cr\
-eation",async i=>{let a=await n.getSourceArn(e);return{eventId:(await ye(i,r,a)??
-await Se(i,{...t.parameters,functionName:r,sourceArn:a})).eventId,functionName:r,
-sourceArn:a}})},"createResource"),Wt=o((t,e,n)=>{let{result:r,parameters:i}=t,{fromService:a}=i;
-if(!r)throw new Ut(F,"mapping");return z.logExecution(F,a,"updates",async s=>{let p=b(
-F,"mapping",n),u=e.result?.functionName??r.functionName,c=r.sourceArn,m={...t.parameters,
-functionName:p,sourceArn:c},l={...e.parameters,functionName:u,sourceArn:c};return await jt(
-s,r.eventId,m,l),{...r,functionName:p}})},"updateResource"),$t=o(async t=>{let e=t.
-result;if(!e)return;let{functionName:n}=e;await z.logExecution(F,n,"deletion",async r=>{
-await xe(r,e.eventId)})},"deleteResource"),jt=o(async(t,e,n,r)=>{!Dt(n,r,{exclude:{
-getSourceArn:!0,fromService:!0}})&&await Fe(t,e,n)},"checkGeneralUpdates");var he=o(()=>{Zt(w,ve())},"registerMappingProvider");var Pe=o(()=>[{account:"lambda.amazonaws.com"}],"prepareIdentityAccount");import{createPolicy as Kt,tryGetPolicy as Xt}from"@ez4/aws-identity";import{getServiceName as Yt}from"@ez4/project/library";import{getAccountId as Qt,getRegion as _t,createPolicyDocument as Jt}from"@ez4/aws-identity";var Ce=o(async t=>{let[e,n]=await Promise.all([_t(),Qt()]);return Jt([{permissions:[
+UUID}:void 0},"importMapping"),be=o(async(t,e)=>{t.update("Creating mapping");let{
+sourceArn:n,functionName:r}=e,i=g(),s=(await i.send(new Ht({FunctionName:r,EventSourceArn:n,
+...he(e)}))).UUID;return await D(i,s),{eventId:s}},"createMapping"),ve=o(async(t,e,n)=>{
+t.update("Updating mapping");let{functionName:r}=n,i=g();await i.send(new Ot({UUID:e,
+FunctionName:r,...he(n)})),await D(i,e)},"updateMapping"),Re=o(async(t,e)=>{t.update(
+"Deleting mapping");try{return await g().send(new Ut({UUID:e})),!0}catch(n){if(!(n instanceof
+kt))throw n;return!1}},"deleteMapping"),he=o(t=>{let{sourceArn:e,enabled:n,concurrency:r,
+batch:i}=t,{service:a}=qt(e);return{Enabled:n,FunctionResponseTypes:[zt.ReportBatchItemFailures],
+MaximumBatchingWindowInSeconds:i?.maxWait,BatchSize:i?.size,...a==="dynamodb"&&{
+StartingPosition:Dt.LATEST},...a==="sqs"&&{ScalingConfig:{MaximumConcurrency:r}}}},
+"upsertMappingRequest");var Ce=o(()=>({equals:Zt,create:Pe,replace:_t,preview:Qt,update:Jt,delete:Kt}),"\
+getMappingHandler"),Zt=o((t,e)=>!!t.result&&t.result.eventId===e.result?.eventId,
+"equalsResource"),Qt=o((t,e)=>{let n={...t.parameters,dependencies:t.dependencies},
+r={...e.parameters,dependencies:e.dependencies},i=$t(n,r,{exclude:{getSourceArn:!0}});
+if(i.counts)return{...i,name:n.fromService}},"previewResource"),_t=o(async(t,e,n)=>{
+if(e.result)throw new Wt(F,t.entryId,e.entryId);return Pe(t,n)},"replaceResource"),
+Pe=o((t,e)=>{let n=t.parameters,r=h(F,"mapping",e);return k.logExecution(F,r,"cr\
+eation",async i=>{let a=await n.getSourceArn(e);return{eventId:(await xe(i,r,a)??
+await be(i,{...t.parameters,functionName:r,sourceArn:a})).eventId,functionName:r,
+sourceArn:a}})},"createResource"),Jt=o((t,e,n)=>{let{result:r,parameters:i}=t,{fromService:a}=i;
+if(!r)throw new Bt(F,"mapping");return k.logExecution(F,a,"updates",async s=>{let p=h(
+F,"mapping",n),m=e.result?.functionName??r.functionName,c=r.sourceArn,u={...t.parameters,
+functionName:p,sourceArn:c},l={...e.parameters,functionName:m,sourceArn:c};return await Xt(
+s,r.eventId,u,l),{...r,functionName:p}})},"updateResource"),Kt=o(async t=>{let e=t.
+result;if(!e)return;let{functionName:n}=e;await k.logExecution(F,n,"deletion",async r=>{
+await Re(r,e.eventId)})},"deleteResource"),Xt=o(async(t,e,n,r)=>{!jt(n,r,{exclude:{
+getSourceArn:!0,fromService:!0}})&&await ve(t,e,n)},"checkGeneralUpdates");var Ae=o(()=>{Yt(x,Ce())},"registerMappingProvider");var Le=o(()=>[{account:"lambda.amazonaws.com"}],"prepareIdentityAccount");import{createPolicy as rn,tryGetPolicy as on}from"@ez4/aws-identity";import{getServiceName as an}from"@ez4/project/library";import{getAccountId as en,getRegion as tn,createPolicyDocument as nn}from"@ez4/aws-identity";var Ne=o(async t=>{let[e,n]=await Promise.all([tn(),en()]);return nn([{permissions:[
 "logs:CreateLogStream","logs:PutLogEvents"],resourceIds:[`arn:aws:logs:${e}:${n}\
-:log-group:${t}-*:*`]}])},"getPolicyDocument");var Ae=o(async t=>{let{state:e,options:n}=t,r=Yt("",n),i=`${r}-lambda-policy`;return Xt(
-e,i)??Kt(e,{tags:n.tags,policyDocument:await Ce(r),policyName:i})},"prepareExecu\
-tionPolicy");var Fo=o(()=>{en(),tn(),nn(),rn("@ez4/aws-function",{"deploy:prepareIdentityAcco\
-unt":Pe,"deploy:prepareExecutionPolicy":Ae}),ae(),de(),he()},"registerTriggers");import{toKebabCase as on,hashData as an}from"@ez4/utils";import{attachEntry as sn}from"@ez4/stateful";var ho=o((t,e,n,r)=>{let i=on(r.functionName),a=an(y,e.entryId,i),s=[e.entryId];
-return n&&s.push(n.entryId),sn(t,{type:y,entryId:a,dependencies:s,parameters:{...r,
-functionName:i}})},"createFunction");import{attachEntry as pn}from"@ez4/stateful";import{hashData as Ne}from"@ez4/utils";var Le=o(t=>t.type===S,"isPermissionState");var Vo=o((t,e,n,r)=>{let i=Ne(S,e.entryId,n.entryId);return pn(t,{type:S,entryId:i,
-dependencies:[e.entryId,n.entryId],parameters:r})},"createPermission"),Ho=o((t,e,n)=>{
-let r=Ne(S,e.entryId,n.entryId),i=t[r];return i&&Le(i)?i:null},"getPermission");import{hashData as cn}from"@ez4/utils";import{attachEntry as un}from"@ez4/stateful";var qo=o((t,e,n,r)=>{let i=cn(w,e.entryId,n.entryId);return un(t,{type:w,entryId:i,
-dependencies:[e.entryId,n.entryId],parameters:r})},"createMapping");var $o=o(t=>t.type===w,"isMappingState");var Qo=o((t,e,n)=>`arn:aws:lambda:${t}:${e}:function:${n}`,"buildFunctionArn");import{ArchitectureType as mn,RuntimeType as ln}from"@ez4/project";var gn;(a=>(a.
-LogRetention=90,a.Architecture=mn.x86,a.Runtime=ln.Node24,a.Timeout=90,a.Memory=
-192))(gn||={});export{Ue as FunctionArchitecture,gn as FunctionDefaults,He as FunctionRuntime,f as FunctionServiceName,
-y as FunctionServiceType,Ct as MappingService,F as MappingServiceName,w as MappingServiceType,
-h as PermissionServiceName,S as PermissionServiceType,Qo as buildFunctionArn,ho as createFunction,
-qo as createMapping,Vo as createPermission,I as getFunctionArchitecture,dr as getFunctionArn,
-b as getFunctionName,E as getFunctionRuntime,gr as getFunctionState,Ho as getPermission,
-pe as isFunctionState,$o as isMappingState,Fo as registerTriggers,ft as tryGetFunctionArn,
-lr as tryGetFunctionState};
+:log-group:${t}-*:*`]},{permissions:["ec2:CreateNetworkInterface","ec2:DescribeN\
+etworkInterfaces","ec2:DeleteNetworkInterface"],resourceIds:["*"]}])},"getPolicy\
+Document");var Ie=o(async t=>{let{state:e,options:n}=t,r=an("",n),i=`${r}-lambda-policy`;return on(
+e,i)??rn(e,{tags:n.tags,policyDocument:await Ne(r),policyName:i})},"prepareExecu\
+tionPolicy");var Io=o(()=>{sn(),pn(),cn(),un("@ez4/aws-function",{"deploy:prepareIdentityAcco\
+unt":Le,"deploy:prepareExecutionPolicy":Ie}),le(),we(),Ae()},"registerTriggers");import{toKebabCase as mn,hashData as ln}from"@ez4/utils";import{attachEntry as gn}from"@ez4/stateful";var Oo=o((t,e,n,r)=>{let i=mn(r.functionName),a=ln(S,e.entryId,i),s=[e.entryId];
+return n&&s.push(n.entryId),gn(t,{type:S,entryId:a,dependencies:s,parameters:{...r,
+functionName:i}})},"createFunction");import{attachEntry as dn}from"@ez4/stateful";import{hashData as Me}from"@ez4/utils";var Ee=o(t=>t.type===w,"isPermissionState");var jo=o((t,e,n,r)=>{let i=Me(w,e.entryId,n.entryId);return dn(t,{type:w,entryId:i,
+dependencies:[e.entryId,n.entryId],parameters:r})},"createPermission"),Zo=o((t,e,n)=>{
+let r=Me(w,e.entryId,n.entryId),i=t[r];return i&&Ee(i)?i:null},"getPermission");import{hashData as fn}from"@ez4/utils";import{attachEntry as yn}from"@ez4/stateful";var Yo=o((t,e,n,r)=>{let i=fn(x,e.entryId,n.entryId);return yn(t,{type:x,entryId:i,
+dependencies:[e.entryId,n.entryId],parameters:r})},"createMapping");var ri=o(t=>t.type===x,"isMappingState");var ai=o((t,e,n)=>`arn:aws:lambda:${t}:${e}:function:${n}`,"buildFunctionArn");import{ArchitectureType as Sn,RuntimeType as wn}from"@ez4/project";var Fn;(a=>(a.
+LogRetention=90,a.Architecture=Sn.x86,a.Runtime=wn.Node24,a.Timeout=90,a.Memory=
+192))(Fn||={});export{De as FunctionArchitecture,Fn as FunctionDefaults,Ge as FunctionRuntime,f as FunctionServiceName,
+S as FunctionServiceType,Vt as MappingService,F as MappingServiceName,x as MappingServiceType,
+C as PermissionServiceName,w as PermissionServiceType,ai as buildFunctionArn,Oo as createFunction,
+Yo as createMapping,jo as createPermission,V as getDefaultVpcConfig,M as getFunctionArchitecture,
+Kn as getFunctionArn,h as getFunctionName,E as getFunctionRuntime,Jn as getFunctionState,
+Zo as getPermission,_ as isFunctionState,ri as isMappingState,Io as registerTriggers,
+Ke as tryGetFunctionArn,_n as tryGetFunctionState};
 //# sourceMappingURL=main.mjs.map

package/dist/mapping/helpers/state.d.ts

@@ -0,0 +1,2 @@
+import type { LambdaClient } from '@aws-sdk/client-lambda';
+export declare const waitForReadyState: (client: LambdaClient, eventId: string) => Promise<void>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ez4/aws-function",
   "description": "EZ4: Self-managed AWS lambda function provider",
-  "version": "0.41.0",
+  "version": "0.42.0",
   "author": "Silas B.",
   "license": "MIT",
   "type": "module",
@@ -43,13 +43,14 @@
   },
   "dependencies": {
     "@aws-sdk/client-lambda": "^3.958.0",
-    "@ez4/aws-common": "^0.41.0",
-    "@ez4/aws-identity": "^0.41.0",
-    "@ez4/aws-logs": "^0.41.0",
-    "@ez4/project": "^0.41.0",
-    "@ez4/common": "^0.41.0",
-    "@ez4/stateful": "^0.41.0",
-    "@ez4/utils": "^0.41.0",
+    "@ez4/aws-common": "^0.42.0",
+    "@ez4/aws-identity": "^0.42.0",
+    "@ez4/aws-logs": "^0.42.0",
+    "@ez4/aws-vpc": "^0.42.0",
+    "@ez4/project": "^0.42.0",
+    "@ez4/common": "^0.42.0",
+    "@ez4/stateful": "^0.42.0",
+    "@ez4/utils": "^0.42.0",
     "@types/adm-zip": "^0.5.5",
     "adm-zip": "^0.5.14"
   }