@pikku/lambda 0.12.3 → 0.12.4

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 0.12.4
+
+### Patch Changes
+
+- 41ce2cb: Upgrade to TypeScript 6 and raise the minimum Node.js version to 22.
+
+  All packages now build against `typescript@^6.0.3` and declare `engines.node >= 22`. Internal tooling (`ts-json-schema-generator`, `zod-to-ts`) was bumped to TypeScript 6-compatible releases.
+
+- Updated dependencies [41ce2cb]
+  - @pikku/core@0.12.44
+
 ## 0.12.0
 
 ## 0.12.3

package/dist/handler-factories.d.ts

@@ -0,0 +1,17 @@
+import { LocalVariablesService } from '@pikku/core/services';
+import type { CoreSingletonServices } from '@pikku/core';
+import type { APIGatewayEvent, APIGatewayProxyEventV2 } from 'aws-lambda';
+export interface LambdaServiceFactories {
+    createConfig: (variables: LocalVariablesService, ...args: unknown[]) => Promise<unknown>;
+    createSingletonServices: (config: unknown, existingServices?: Partial<Record<string, unknown>>) => Promise<CoreSingletonServices>;
+    createPlatformServices?: () => Record<string, unknown> | Promise<Record<string, unknown>>;
+}
+export declare function createLambdaHandler(factories: LambdaServiceFactories, handlerTypes: string[]): Record<string, unknown>;
+export declare function createLambdaWorkerHandler(factories: LambdaServiceFactories): {
+    handler(event: APIGatewayProxyEventV2): Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;
+};
+export declare function createLambdaWebSocketHandler(factories: LambdaServiceFactories): {
+    connect(event: APIGatewayEvent): Promise<import("aws-lambda").APIGatewayProxyResult>;
+    disconnect(event: APIGatewayEvent): Promise<import("aws-lambda").APIGatewayProxyResult>;
+    default(event: APIGatewayEvent): Promise<import("aws-lambda").APIGatewayProxyResult>;
+};

package/dist/handler-factories.js

@@ -0,0 +1,91 @@
+import { LocalVariablesService, LocalSecretService } from '@pikku/core/services';
+import { runFetchV2 } from './http/run-fetch-v2.js';
+import { runSQSQueueWorker } from './queue/sqs-worker.js';
+import { runLambdaScheduled } from './scheduled/run-scheduled.js';
+let cachedServices = null;
+async function setupServices(factories) {
+    if (cachedServices)
+        return cachedServices;
+    const variables = new LocalVariablesService(process.env);
+    const config = await factories.createConfig(variables);
+    const secrets = new LocalSecretService(variables);
+    const platformServices = factories.createPlatformServices
+        ? await factories.createPlatformServices()
+        : {};
+    cachedServices = await factories.createSingletonServices(config, {
+        variables,
+        secrets,
+        ...platformServices,
+    });
+    return cachedServices;
+}
+export function createLambdaHandler(factories, handlerTypes) {
+    const result = {};
+    if (handlerTypes.includes('fetch')) {
+        result.handler = async (event) => {
+            await setupServices(factories);
+            return runFetchV2(event);
+        };
+    }
+    if (handlerTypes.includes('queue')) {
+        result.queue = async (event) => {
+            const services = await setupServices(factories);
+            return runSQSQueueWorker(services.logger, event);
+        };
+    }
+    if (handlerTypes.includes('scheduled')) {
+        result.scheduled = async (event) => {
+            await setupServices(factories);
+            return runLambdaScheduled(event);
+        };
+    }
+    if (!handlerTypes.includes('fetch')) {
+        const activeHandlers = handlerTypes.join(', ');
+        result.handler = async () => ({
+            statusCode: 200,
+            body: `Lambda active (handlers: ${activeHandlers})`,
+        });
+    }
+    return result;
+}
+export function createLambdaWorkerHandler(factories) {
+    return {
+        async handler(event) {
+            await setupServices(factories);
+            return runFetchV2(event);
+        },
+    };
+}
+export function createLambdaWebSocketHandler(factories) {
+    const getChannelStore = () => {
+        if (!cachedServices) {
+            throw new Error('Services not initialized for WebSocket handler');
+        }
+        const channelStore = cachedServices
+            .channelStore;
+        if (!channelStore) {
+            throw new Error('channelStore not found in singleton services. Ensure it is configured for channel units.');
+        }
+        return channelStore;
+    };
+    return {
+        async connect(event) {
+            await setupServices(factories);
+            const { connectWebsocket } = await import('./websocket/index.js');
+            return connectWebsocket(event, { channelStore: getChannelStore() });
+        },
+        async disconnect(event) {
+            await setupServices(factories);
+            const { disconnectWebsocket } = await import('./websocket/index.js');
+            return disconnectWebsocket(event, { channelStore: getChannelStore() });
+        },
+        async default(event) {
+            await setupServices(factories);
+            const { processWebsocketMessage } = await import('./websocket/index.js');
+            return processWebsocketMessage(event, {
+                channelStore: getChannelStore(),
+            });
+        },
+    };
+}
+//# sourceMappingURL=handler-factories.js.map

package/dist/handler-factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-factories.js","sourceRoot":"","sources":["../src/handler-factories.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAGhF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AA2BjE,IAAI,cAAc,GAAiC,IAAI,CAAA;AAEvD,KAAK,UAAU,aAAa,CAC1B,SAAiC;IAEjC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAA;IACzC,MAAM,SAAS,GAAG,IAAI,qBAAqB,CACzC,OAAO,CAAC,GAAyC,CAClD,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAEjD,MAAM,gBAAgB,GAAG,SAAS,CAAC,sBAAsB;QACvD,CAAC,CAAC,MAAM,SAAS,CAAC,sBAAsB,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAA;IAEN,cAAc,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,MAAM,EAAE;QAC/D,SAAS;QACT,OAAO;QACP,GAAG,gBAAgB;KACpB,CAAC,CAAA;IACF,OAAO,cAAc,CAAA;AACvB,CAAC;AAUD,MAAM,UAAU,mBAAmB,CACjC,SAAiC,EACjC,YAAsB;IAEtB,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,KAAK,EAAE,KAA6B,EAAE,EAAE;YACvD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC,CAAA;IACH,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,GAAG,KAAK,EAAE,KAAe,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC/C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAClD,CAAC,CAAA;IACH,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,SAAS,GAAG,KAAK,EAAE,KAAqB,EAAE,EAAE;YACjD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;IAGD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5B,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,4BAA4B,cAAc,GAAG;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAMD,MAAM,UAAU,yBAAyB,CAAC,SAAiC;IACzE,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAA6B;YACzC,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC;AAMD,MAAM,UAAU,4BAA4B,CAC1C,SAAiC;IAGjC,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,YAAY,GAAI,cAAqD;aACxE,YAAwC,CAAA;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAA;QACH,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAsB;YAClC,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACjE,OAAO,gBAAgB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAsB;YACrC,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACpE,OAAO,mBAAmB,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAsB;YAClC,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;YAC9B,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;YACxE,OAAO,uBAAuB,CAAC,KAAK,EAAE;gBACpC,YAAY,EAAE,eAAe,EAAE;aAChC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/http/index.d.ts

@@ -1 +1,4 @@
 export * from './run-fetch.js';
+export * from './run-fetch-v2.js';
+export { lambdaV2EventToRequest } from './request-converter-v2.js';
+export { responseToLambdaV2Result } from './response-converter-v2.js';

package/dist/http/index.js

@@ -1,2 +1,5 @@
 export * from './run-fetch.js';
+export * from './run-fetch-v2.js';
+export { lambdaV2EventToRequest } from './request-converter-v2.js';
+export { responseToLambdaV2Result } from './response-converter-v2.js';
 //# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA"}

package/dist/http/request-converter-v2.d.ts

@@ -0,0 +1,2 @@
+import type { APIGatewayProxyEventV2 } from 'aws-lambda';
+export declare const lambdaV2EventToRequest: (event: APIGatewayProxyEventV2) => Request;

package/dist/http/request-converter-v2.js

@@ -0,0 +1,25 @@
+export const lambdaV2EventToRequest = (event) => {
+    const host = event.headers?.host ?? event.requestContext?.domainName ?? 'localhost';
+    const url = new URL(event.rawPath, `https://${host}`);
+    if (event.rawQueryString) {
+        url.search = `?${event.rawQueryString}`;
+    }
+    const body = event.body && event.isBase64Encoded
+        ? Buffer.from(event.body, 'base64')
+        : event.body || undefined;
+    const method = event.requestContext?.http?.method || 'GET';
+    const headers = {};
+    if (event.headers) {
+        for (const [key, value] of Object.entries(event.headers)) {
+            if (value != null) {
+                headers[key] = value;
+            }
+        }
+    }
+    return new Request(url.toString(), {
+        method,
+        headers,
+        body: ['GET', 'HEAD'].includes(method.toUpperCase()) ? undefined : body,
+    });
+};
+//# sourceMappingURL=request-converter-v2.js.map

package/dist/http/request-converter-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-converter-v2.js","sourceRoot":"","sources":["../../src/http/request-converter-v2.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA6B,EACpB,EAAE;IACX,MAAM,IAAI,GACR,KAAK,CAAC,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC,cAAc,EAAE,UAAU,IAAI,WAAW,CAAA;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAA;IAErD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAEzB,GAAG,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,CAAA;IACzC,CAAC;IAED,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,eAAe;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;QACnC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAA;IAE7B,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,CAAA;IAE1D,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjC,MAAM;QACN,OAAO;QACP,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/http/response-converter-v2.d.ts

@@ -0,0 +1,2 @@
+import type { APIGatewayProxyStructuredResultV2 } from 'aws-lambda';
+export declare const responseToLambdaV2Result: (response: Response) => Promise<APIGatewayProxyStructuredResultV2>;

package/dist/http/response-converter-v2.js

@@ -0,0 +1,31 @@
+export const responseToLambdaV2Result = async (response) => {
+    const cookies = response.headers.getSetCookie
+        ? response.headers.getSetCookie()
+        : [];
+    const headers = {};
+    response.headers.forEach((value, key) => {
+        if (key.toLowerCase() === 'set-cookie' && cookies.length > 0)
+            return;
+        headers[key.toLowerCase()] = value;
+    });
+    let body;
+    let isBase64Encoded = false;
+    const contentType = response.headers.get('content-type') || '';
+    const isBinary = !/^text\/|application\/(json|javascript|xml)/.test(contentType);
+    const buffer = Buffer.from(await response.arrayBuffer());
+    if (isBinary) {
+        body = buffer.toString('base64');
+        isBase64Encoded = true;
+    }
+    else {
+        body = buffer.toString('utf-8');
+    }
+    return {
+        statusCode: response.status,
+        headers,
+        body,
+        isBase64Encoded,
+        ...(cookies.length > 0 ? { cookies } : {}),
+    };
+};
+//# sourceMappingURL=response-converter-v2.js.map

package/dist/http/response-converter-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-converter-v2.js","sourceRoot":"","sources":["../../src/http/response-converter-v2.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,QAAkB,EAC0B,EAAE;IAE9C,MAAM,OAAO,GAAa,QAAQ,CAAC,OAAO,CAAC,YAAY;QACrD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE;QACjC,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAM;QACpE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,IAAI,IAAY,CAAA;IAChB,IAAI,eAAe,GAAG,KAAK,CAAA;IAE3B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IAC9D,MAAM,QAAQ,GAAG,CAAC,4CAA4C,CAAC,IAAI,CACjE,WAAW,CACZ,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACxD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAChC,eAAe,GAAG,IAAI,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IAED,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,OAAO;QACP,IAAI;QACJ,eAAe;QACf,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAA;AACH,CAAC,CAAA"}

package/dist/http/run-fetch-v2.d.ts

@@ -0,0 +1,2 @@
+import type { APIGatewayProxyEventV2, APIGatewayProxyStructuredResultV2 } from 'aws-lambda';
+export declare const runFetchV2: (event: APIGatewayProxyEventV2) => Promise<APIGatewayProxyStructuredResultV2>;

package/dist/http/run-fetch-v2.js

@@ -0,0 +1,25 @@
+import { PikkuFetchHTTPResponse, fetchData } from '@pikku/core/http';
+import { responseToLambdaV2Result } from './response-converter-v2.js';
+import { lambdaV2EventToRequest } from './request-converter-v2.js';
+export const runFetchV2 = async (event) => {
+    const request = lambdaV2EventToRequest(event);
+    const response = new PikkuFetchHTTPResponse();
+    if (request.method === 'OPTIONS') {
+        response.header('Access-Control-Allow-Origin', request.headers.get('origin') || '*');
+        response.header('Access-Control-Allow-Headers', 'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent');
+        response.header('Access-Control-Allow-Methods', 'OPTIONS,DELETE,GET,HEAD,PATCH,POST,PUT');
+        response.status(200);
+        return responseToLambdaV2Result(response.toResponse());
+    }
+    try {
+        await fetchData(request, response);
+    }
+    catch (err) {
+        console.error('fetchData error:', err);
+        response.status(500);
+        response.header('content-type', 'application/json');
+        response.json({ error: 'Internal Server Error' });
+    }
+    return responseToLambdaV2Result(response.toResponse());
+};
+//# sourceMappingURL=run-fetch-v2.js.map

package/dist/http/run-fetch-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-fetch-v2.js","sourceRoot":"","sources":["../../src/http/run-fetch-v2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAKpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAElE,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,KAA6B,EACe,EAAE;IAC9C,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAA;IAE7C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,QAAQ,CAAC,MAAM,CACb,6BAA6B,EAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CACrC,CAAA;QACD,QAAQ,CAAC,MAAM,CACb,8BAA8B,EAC9B,uFAAuF,CACxF,CAAA;QACD,QAAQ,CAAC,MAAM,CACb,8BAA8B,EAC9B,wCAAwC,CACzC,CAAA;QACD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,OAAO,wBAAwB,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;QACtC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,OAAO,wBAAwB,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;AACxD,CAAC,CAAA"}

package/dist/index.d.ts

@@ -1,3 +1,7 @@
 export * from './http/index.js';
 export * from './websocket/index.js';
 export * from './queue/index.js';
+export * from './scheduled/index.js';
+export * from './handler-factories.js';
+export { SQSQueueService } from './sqs-queue-service.js';
+export { LambdaDeploymentService } from './lambda-deployment-service.js';

package/dist/index.js

@@ -1,4 +1,8 @@
 export * from './http/index.js';
 export * from './websocket/index.js';
 export * from './queue/index.js';
+export * from './scheduled/index.js';
+export * from './handler-factories.js';
+export { SQSQueueService } from './sqs-queue-service.js';
+export { LambdaDeploymentService } from './lambda-deployment-service.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA"}

package/dist/lambda-deployment-service.d.ts

@@ -0,0 +1,14 @@
+import type { DeploymentService, DeploymentConfig } from '@pikku/core/services';
+import type { JWTService } from '@pikku/core/services';
+import type { SecretService } from '@pikku/core/services';
+export declare class LambdaDeploymentService implements DeploymentService {
+    private jwt;
+    private secrets;
+    private client;
+    private bindings;
+    constructor(jwt: JWTService | undefined, secrets: SecretService, functionBindings: Record<string, string>);
+    init(): Promise<void>;
+    start(_config: DeploymentConfig): Promise<void>;
+    stop(): Promise<void>;
+    invoke(funcName: string, data: unknown, session?: unknown, traceId?: string): Promise<unknown>;
+}

package/dist/lambda-deployment-service.js

@@ -0,0 +1,89 @@
+import { LambdaClient, InvokeCommand } from '@aws-sdk/client-lambda';
+import { encryptJSON } from '@pikku/core/crypto-utils';
+export class LambdaDeploymentService {
+    jwt;
+    secrets;
+    client;
+    bindings;
+    constructor(jwt, secrets, functionBindings) {
+        this.jwt = jwt;
+        this.secrets = secrets;
+        this.client = new LambdaClient({});
+        this.bindings = new Map(Object.entries(functionBindings));
+    }
+    async init() { }
+    async start(_config) { }
+    async stop() { }
+    async invoke(funcName, data, session, traceId) {
+        const lambdaFunctionName = this.bindings.get(funcName);
+        if (!lambdaFunctionName) {
+            throw new Error(`No Lambda binding for function '${funcName}'. ` +
+                `Available bindings: ${[...this.bindings.keys()].join(', ')}`);
+        }
+        const headers = {
+            'content-type': 'application/json',
+            ...(traceId && { 'x-request-id': traceId }),
+        };
+        let secret;
+        try {
+            secret = await this.secrets.getSecret('PIKKU_REMOTE_SECRET');
+        }
+        catch { }
+        if (secret && this.jwt) {
+            const sessionEnc = session
+                ? await encryptJSON(secret, { session })
+                : undefined;
+            const token = await this.jwt.encode({ value: 5, unit: 'minute' }, {
+                aud: 'pikku-remote',
+                fn: funcName,
+                iat: Math.floor(Date.now() / 1000),
+                session: sessionEnc,
+            });
+            headers.authorization = `Bearer ${token}`;
+        }
+        const rpcPath = `/remote/rpc/${encodeURIComponent(funcName)}`;
+        const apiGatewayEvent = {
+            httpMethod: 'POST',
+            path: rpcPath,
+            headers,
+            body: JSON.stringify({ data }),
+            isBase64Encoded: false,
+            queryStringParameters: null,
+            pathParameters: null,
+            stageVariables: null,
+            requestContext: {
+                httpMethod: 'POST',
+                path: rpcPath,
+                stage: 'prod',
+                requestId: crypto.randomUUID(),
+                identity: {},
+            },
+            resource: rpcPath,
+        };
+        const response = await this.client.send(new InvokeCommand({
+            FunctionName: lambdaFunctionName,
+            Payload: JSON.stringify(apiGatewayEvent),
+        }));
+        if (response.FunctionError) {
+            const errorPayload = response.Payload
+                ? new TextDecoder().decode(response.Payload)
+                : 'Unknown error';
+            throw new Error(`Remote RPC call to '${funcName}' failed: Lambda error: ${errorPayload}`);
+        }
+        if (!response.Payload) {
+            throw new Error(`Remote RPC call to '${funcName}' returned no payload`);
+        }
+        const lambdaResult = JSON.parse(new TextDecoder().decode(response.Payload));
+        if (lambdaResult.statusCode && lambdaResult.statusCode >= 400) {
+            throw new Error(`Remote RPC call to '${funcName}' failed: ${lambdaResult.statusCode} ${lambdaResult.body}`);
+        }
+        const body = lambdaResult.body;
+        try {
+            return JSON.parse(body);
+        }
+        catch {
+            return body;
+        }
+    }
+}
+//# sourceMappingURL=lambda-deployment-service.js.map

package/dist/lambda-deployment-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda-deployment-service.js","sourceRoot":"","sources":["../src/lambda-deployment-service.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAIpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAEtD,MAAM,OAAO,uBAAuB;IAKxB;IACA;IALF,MAAM,CAAc;IACpB,QAAQ,CAAqB;IAErC,YACU,GAA2B,EAC3B,OAAsB,EAC9B,gBAAwC;QAFhC,QAAG,GAAH,GAAG,CAAwB;QAC3B,YAAO,GAAP,OAAO,CAAe;QAG9B,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,IAAI,KAAmB,CAAC;IAC9B,KAAK,CAAC,KAAK,CAAC,OAAyB,IAAkB,CAAC;IACxD,KAAK,CAAC,IAAI,KAAmB,CAAC;IAE9B,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,IAAa,EACb,OAAiB,EACjB,OAAgB;QAEhB,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,KAAK;gBAC9C,uBAAuB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,OAAO,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;SAC5C,CAAA;QAGD,IAAI,MAA0B,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;QAC9D,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,OAAO;gBACxB,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAA;YACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CACjC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC5B;gBACE,GAAG,EAAE,cAAc;gBACnB,EAAE,EAAE,QAAQ;gBACZ,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAClC,OAAO,EAAE,UAAU;aACpB,CACF,CAAA;YACD,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAA;QAC3C,CAAC;QAGD,MAAM,OAAO,GAAG,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;QAC7D,MAAM,eAAe,GAAG;YACtB,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,OAAO;YACb,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;YAC9B,eAAe,EAAE,KAAK;YACtB,qBAAqB,EAAE,IAAI;YAC3B,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE;gBACd,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,QAAQ,EAAE,EAAE;aACb;YACD,QAAQ,EAAE,OAAO;SAClB,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,IAAI,aAAa,CAAC;YAChB,YAAY,EAAE,kBAAkB;YAChC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;SACzC,CAAC,CACH,CAAA;QAED,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO;gBACnC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5C,CAAC,CAAC,eAAe,CAAA;YACnB,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,2BAA2B,YAAY,EAAE,CACzE,CAAA;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,uBAAuB,CAAC,CAAA;QACzE,CAAC;QAGD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAE3E,IAAI,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,aAAa,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,IAAI,EAAE,CAC3F,CAAA;QACH,CAAC;QAGD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAA;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/scheduled/index.d.ts

@@ -0,0 +1 @@
+export { runLambdaScheduled } from './run-scheduled.js';

package/dist/scheduled/index.js

@@ -0,0 +1,2 @@
+export { runLambdaScheduled } from './run-scheduled.js';
+//# sourceMappingURL=index.js.map

package/dist/scheduled/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scheduled/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/scheduled/run-scheduled.d.ts

@@ -0,0 +1,2 @@
+import type { ScheduledEvent } from 'aws-lambda';
+export declare const runLambdaScheduled: (_event: ScheduledEvent) => Promise<void>;

package/dist/scheduled/run-scheduled.js

@@ -0,0 +1,14 @@
+import { runScheduledTask, getScheduledTasks } from '@pikku/core/scheduler';
+export const runLambdaScheduled = async (_event) => {
+    const scheduledTasks = getScheduledTasks();
+    for (const [name] of scheduledTasks) {
+        const traceId = `cron-${crypto.randomUUID()}`;
+        try {
+            await runScheduledTask({ name, traceId });
+        }
+        catch (err) {
+            console.error(`Scheduled task '${name}' (traceId: ${traceId}) failed:`, err);
+        }
+    }
+};
+//# sourceMappingURL=run-scheduled.js.map

package/dist/scheduled/run-scheduled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-scheduled.js","sourceRoot":"","sources":["../../src/scheduled/run-scheduled.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,MAAsB,EACP,EAAE;IACjB,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAA;IAI1C,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ,MAAM,CAAC,UAAU,EAAE,EAAE,CAAA;QAC7C,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,mBAAmB,IAAI,eAAe,OAAO,WAAW,EACxD,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/sqs-queue-service.d.ts

@@ -0,0 +1,10 @@
+import type { QueueService, QueueJob, JobOptions } from '@pikku/core/queue';
+export declare class SQSQueueService implements QueueService {
+    private queueUrlMap?;
+    readonly supportsResults = false;
+    private client;
+    constructor(queueUrlMap?: Record<string, string> | undefined);
+    add<T>(queueName: string, data: T, options?: JobOptions): Promise<string>;
+    getJob<T, R>(_queueName: string, _jobId: string): Promise<QueueJob<T, R> | null>;
+    private resolveQueueUrl;
+}

package/dist/sqs-queue-service.js

@@ -0,0 +1,52 @@
+import { SQSClient, SendMessageCommand } from '@aws-sdk/client-sqs';
+export class SQSQueueService {
+    queueUrlMap;
+    supportsResults = false;
+    client;
+    constructor(queueUrlMap) {
+        this.queueUrlMap = queueUrlMap;
+        this.client = new SQSClient({});
+    }
+    async add(queueName, data, options) {
+        const queueUrl = this.resolveQueueUrl(queueName);
+        const messageId = crypto.randomUUID();
+        const message = {
+            id: messageId,
+            queueName,
+            data,
+            pikkuUserId: options?.pikkuUserId,
+        };
+        const result = await this.client.send(new SendMessageCommand({
+            QueueUrl: queueUrl,
+            MessageBody: JSON.stringify(message),
+            DelaySeconds: options?.delay
+                ? Math.min(Math.ceil(options.delay / 1000), 900)
+                : undefined,
+        }));
+        return result.MessageId ?? messageId;
+    }
+    async getJob(_queueName, _jobId) {
+        throw new Error('SQSQueueService does not support getJob(). ' +
+            'SQS is fire-and-forget. ' +
+            'Use BullMQ or PgBoss if you need job result tracking.');
+    }
+    resolveQueueUrl(queueName) {
+        if (this.queueUrlMap?.[queueName]) {
+            return this.queueUrlMap[queueName];
+        }
+        const envKey = `SQS_QUEUE_URL_${toScreamingSnake(queueName)}`;
+        const url = process.env[envKey];
+        if (!url) {
+            throw new Error(`SQS queue URL not found for queue "${queueName}". ` +
+                `Set environment variable ${envKey} or pass queueUrlMap to constructor.`);
+        }
+        return url;
+    }
+}
+function toScreamingSnake(name) {
+    return name
+        .replace(/([a-z0-9])([A-Z])/g, '$1_$2')
+        .replace(/-/g, '_')
+        .toUpperCase();
+}
+//# sourceMappingURL=sqs-queue-service.js.map

package/dist/sqs-queue-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqs-queue-service.js","sourceRoot":"","sources":["../src/sqs-queue-service.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAGnE,MAAM,OAAO,eAAe;IAIN;IAHX,eAAe,GAAG,KAAK,CAAA;IACxB,MAAM,CAAW;IAEzB,YAAoB,WAAoC;QAApC,gBAAW,GAAX,WAAW,CAAyB;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAAiB,EACjB,IAAO,EACP,OAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAErC,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,SAAS;YACb,SAAS;YACT,IAAI;YACJ,WAAW,EAAE,OAAO,EAAE,WAAW;SAClC,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,kBAAkB,CAAC;YACrB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACpC,YAAY,EAAE,OAAO,EAAE,KAAK;gBAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC;gBAChD,CAAC,CAAC,SAAS;SACd,CAAC,CACH,CAAA;QAED,OAAO,MAAM,CAAC,SAAS,IAAI,SAAS,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,MAAc;QAEd,MAAM,IAAI,KAAK,CACb,6CAA6C;YAC3C,0BAA0B;YAC1B,uDAAuD,CAC1D,CAAA;IACH,CAAC;IASO,eAAe,CAAC,SAAiB;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QACpC,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAA;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAE/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,KAAK;gBAClD,4BAA4B,MAAM,sCAAsC,CAC3E,CAAA;QACH,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,WAAW,EAAE,CAAA;AAClB,CAAC"}

package/dist/websocket/utils.d.ts

@@ -9,5 +9,5 @@ export declare const getServerlessDependencies: (channelStore: ChannelStore, eve
     channelId: string;
     callbackAPI: ApiGatewayManagementApiClient;
     channelHandlerFactory: import("@pikku/core/channel").PikkuChannelHandlerFactory;
-    channelStore: ChannelStore<unknown, unknown, import("@pikku/core").CoreUserSession, import("@pikku/core/channel").Channel<unknown, unknown>>;
+    channelStore: ChannelStore<unknown, unknown, import("@pikku/core/channel").Channel<unknown, unknown>>;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/lambda",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "license": "MIT",
   "author": "yasser.fadl@gmail.com",
   "module": "dist/index.js",
@@ -20,19 +20,24 @@
     ".": "./dist/index.js",
     "./http": "./dist/http/index.js",
     "./websocket": "./dist/websocket/index.js",
-    "./queue": "./dist/queue/index.js"
+    "./queue": "./dist/queue/index.js",
+    "./scheduled": "./dist/scheduled/index.js"
   },
   "peerDependencies": {
     "@aws-sdk/client-apigatewaymanagementapi": "^3.713.0",
-    "@pikku/core": "^0.12.9",
+    "@aws-sdk/client-lambda": "^3.713.0",
+    "@aws-sdk/client-sqs": "^3.713.0",
+    "@pikku/core": "^0.12.44",
     "@types/aws-lambda": "^8.10.161"
   },
   "devDependencies": {
     "@aws-sdk/client-apigatewaymanagementapi": "^3.1000.0",
+    "@aws-sdk/client-lambda": "^3.1000.0",
+    "@aws-sdk/client-sqs": "^3.1000.0",
     "@types/aws-lambda": "^8.10.161",
-    "typescript": "^5.9.3"
+    "typescript": "^6.0.3"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   }
 }

package/src/handler-factories.ts

@@ -0,0 +1,165 @@
+/**
+ * Lambda handler factories — mirrors Cloudflare's handler-factories.ts.
+ *
+ * Creates combined Lambda handlers based on which handler types a unit needs
+ * (fetch, queue, scheduled). Services are cached across warm invocations.
+ */
+
+import { LocalVariablesService, LocalSecretService } from '@pikku/core/services'
+import type { CoreSingletonServices } from '@pikku/core'
+import type { ChannelStore } from '@pikku/core/channel'
+import { runFetchV2 } from './http/run-fetch-v2.js'
+import { runSQSQueueWorker } from './queue/sqs-worker.js'
+import { runLambdaScheduled } from './scheduled/run-scheduled.js'
+import type {
+  APIGatewayEvent,
+  APIGatewayProxyEventV2,
+  SQSEvent,
+  ScheduledEvent,
+} from 'aws-lambda'
+
+export interface LambdaServiceFactories {
+  createConfig: (
+    variables: LocalVariablesService,
+    ...args: unknown[]
+  ) => Promise<unknown>
+  createSingletonServices: (
+    config: unknown,
+    existingServices?: Partial<Record<string, unknown>>
+  ) => Promise<CoreSingletonServices>
+  /**
+   * Optional callback to create platform services from environment.
+   * Returns services to merge into existingServices.
+   * Generated by the deploy codegen based on unit capabilities.
+   */
+  createPlatformServices?: () =>
+    | Record<string, unknown>
+    | Promise<Record<string, unknown>>
+}
+
+let cachedServices: CoreSingletonServices | null = null
+
+async function setupServices(
+  factories: LambdaServiceFactories
+): Promise<CoreSingletonServices> {
+  if (cachedServices) return cachedServices
+  const variables = new LocalVariablesService(
+    process.env as Record<string, string | undefined>
+  )
+  const config = await factories.createConfig(variables)
+  const secrets = new LocalSecretService(variables)
+
+  const platformServices = factories.createPlatformServices
+    ? await factories.createPlatformServices()
+    : {}
+
+  cachedServices = await factories.createSingletonServices(config, {
+    variables,
+    secrets,
+    ...platformServices,
+  })
+  return cachedServices
+}
+
+/**
+ * Creates a combined Lambda handler based on which handler types the unit needs.
+ *
+ * Returns an object with named exports that serverless.yml references:
+ * - `handler` for HTTP (API Gateway)
+ * - `queue` for SQS
+ * - `scheduled` for EventBridge
+ */
+export function createLambdaHandler(
+  factories: LambdaServiceFactories,
+  handlerTypes: string[]
+) {
+  const result: Record<string, unknown> = {}
+
+  if (handlerTypes.includes('fetch')) {
+    result.handler = async (event: APIGatewayProxyEventV2) => {
+      await setupServices(factories)
+      return runFetchV2(event)
+    }
+  }
+
+  if (handlerTypes.includes('queue')) {
+    result.queue = async (event: SQSEvent) => {
+      const services = await setupServices(factories)
+      return runSQSQueueWorker(services.logger, event)
+    }
+  }
+
+  if (handlerTypes.includes('scheduled')) {
+    result.scheduled = async (event: ScheduledEvent) => {
+      await setupServices(factories)
+      return runLambdaScheduled(event)
+    }
+  }
+
+  // If no fetch handler was requested, add a health check
+  if (!handlerTypes.includes('fetch')) {
+    const activeHandlers = handlerTypes.join(', ')
+    result.handler = async () => ({
+      statusCode: 200,
+      body: `Lambda active (handlers: ${activeHandlers})`,
+    })
+  }
+
+  return result
+}
+
+/**
+ * Creates a Lambda handler with a fetch() entrypoint for HTTP, agent, RPC,
+ * and workflow-orchestrator units.
+ */
+export function createLambdaWorkerHandler(factories: LambdaServiceFactories) {
+  return {
+    async handler(event: APIGatewayProxyEventV2) {
+      await setupServices(factories)
+      return runFetchV2(event)
+    },
+  }
+}
+
+/**
+ * Creates a Lambda handler for WebSocket channel units.
+ * Exports separate handlers for $connect, $disconnect, and $default routes.
+ */
+export function createLambdaWebSocketHandler(
+  factories: LambdaServiceFactories
+) {
+  // Import dynamically to avoid pulling in websocket deps for non-channel units
+  const getChannelStore = () => {
+    if (!cachedServices) {
+      throw new Error('Services not initialized for WebSocket handler')
+    }
+    const channelStore = (cachedServices as unknown as Record<string, unknown>)
+      .channelStore as ChannelStore | undefined
+    if (!channelStore) {
+      throw new Error(
+        'channelStore not found in singleton services. Ensure it is configured for channel units.'
+      )
+    }
+    return channelStore
+  }
+
+  return {
+    async connect(event: APIGatewayEvent) {
+      await setupServices(factories)
+      const { connectWebsocket } = await import('./websocket/index.js')
+      return connectWebsocket(event, { channelStore: getChannelStore() })
+    },
+    async disconnect(event: APIGatewayEvent) {
+      await setupServices(factories)
+      const { disconnectWebsocket } = await import('./websocket/index.js')
+      return disconnectWebsocket(event, { channelStore: getChannelStore() })
+    },
+    async default(event: APIGatewayEvent) {
+      await setupServices(factories)
+      const { processWebsocketMessage } = await import('./websocket/index.js')
+      return processWebsocketMessage(event, {
+        channelStore: getChannelStore(),
+      })
+    },
+  }
+}

package/src/http/index.ts

@@ -1 +1,4 @@
 export * from './run-fetch.js'
+export * from './run-fetch-v2.js'
+export { lambdaV2EventToRequest } from './request-converter-v2.js'
+export { responseToLambdaV2Result } from './response-converter-v2.js'

package/src/http/request-converter-v2.ts

@@ -0,0 +1,36 @@
+import type { APIGatewayProxyEventV2 } from 'aws-lambda'
+
+export const lambdaV2EventToRequest = (
+  event: APIGatewayProxyEventV2
+): Request => {
+  const host =
+    event.headers?.host ?? event.requestContext?.domainName ?? 'localhost'
+  const url = new URL(event.rawPath, `https://${host}`)
+
+  if (event.rawQueryString) {
+    // rawQueryString is already encoded, append directly
+    url.search = `?${event.rawQueryString}`
+  }
+
+  const body =
+    event.body && event.isBase64Encoded
+      ? Buffer.from(event.body, 'base64')
+      : event.body || undefined
+
+  const method = event.requestContext?.http?.method || 'GET'
+
+  const headers: Record<string, string> = {}
+  if (event.headers) {
+    for (const [key, value] of Object.entries(event.headers)) {
+      if (value != null) {
+        headers[key] = value
+      }
+    }
+  }
+
+  return new Request(url.toString(), {
+    method,
+    headers,
+    body: ['GET', 'HEAD'].includes(method.toUpperCase()) ? undefined : body,
+  })
+}

package/src/http/response-converter-v2.ts

@@ -0,0 +1,40 @@
+import type { APIGatewayProxyStructuredResultV2 } from 'aws-lambda'
+
+export const responseToLambdaV2Result = async (
+  response: Response
+): Promise<APIGatewayProxyStructuredResultV2> => {
+  // Extract Set-Cookie headers as cookies array (v2 format)
+  const cookies: string[] = response.headers.getSetCookie
+    ? response.headers.getSetCookie()
+    : []
+
+  const headers: Record<string, string> = {}
+  response.headers.forEach((value, key) => {
+    if (key.toLowerCase() === 'set-cookie' && cookies.length > 0) return
+    headers[key.toLowerCase()] = value
+  })
+
+  let body: string
+  let isBase64Encoded = false
+
+  const contentType = response.headers.get('content-type') || ''
+  const isBinary = !/^text\/|application\/(json|javascript|xml)/.test(
+    contentType
+  )
+
+  const buffer = Buffer.from(await response.arrayBuffer())
+  if (isBinary) {
+    body = buffer.toString('base64')
+    isBase64Encoded = true
+  } else {
+    body = buffer.toString('utf-8')
+  }
+
+  return {
+    statusCode: response.status,
+    headers,
+    body,
+    isBase64Encoded,
+    ...(cookies.length > 0 ? { cookies } : {}),
+  }
+}

package/src/http/run-fetch-v2.ts

@@ -0,0 +1,42 @@
+import { PikkuFetchHTTPResponse, fetchData } from '@pikku/core/http'
+import type {
+  APIGatewayProxyEventV2,
+  APIGatewayProxyStructuredResultV2,
+} from 'aws-lambda'
+import { responseToLambdaV2Result } from './response-converter-v2.js'
+import { lambdaV2EventToRequest } from './request-converter-v2.js'
+
+export const runFetchV2 = async (
+  event: APIGatewayProxyEventV2
+): Promise<APIGatewayProxyStructuredResultV2> => {
+  const request = lambdaV2EventToRequest(event)
+  const response = new PikkuFetchHTTPResponse()
+
+  if (request.method === 'OPTIONS') {
+    response.header(
+      'Access-Control-Allow-Origin',
+      request.headers.get('origin') || '*'
+    )
+    response.header(
+      'Access-Control-Allow-Headers',
+      'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent'
+    )
+    response.header(
+      'Access-Control-Allow-Methods',
+      'OPTIONS,DELETE,GET,HEAD,PATCH,POST,PUT'
+    )
+    response.status(200)
+    return responseToLambdaV2Result(response.toResponse())
+  }
+
+  try {
+    await fetchData(request, response)
+  } catch (err) {
+    console.error('fetchData error:', err)
+    response.status(500)
+    response.header('content-type', 'application/json')
+    response.json({ error: 'Internal Server Error' })
+  }
+
+  return responseToLambdaV2Result(response.toResponse())
+}

package/src/index.test.ts

@@ -0,0 +1,13 @@
+import assert from 'node:assert/strict'
+import { describe, test } from 'node:test'
+
+import * as lambdaRuntime from './index.js'
+
+describe('@pikku/lambda', () => {
+  test('exports the lambda runtime API', () => {
+    assert.equal(typeof lambdaRuntime.createLambdaHandler, 'function')
+    assert.equal(typeof lambdaRuntime.LambdaDeploymentService, 'function')
+    assert.equal(typeof lambdaRuntime.SQSQueueService, 'function')
+    assert.equal(typeof lambdaRuntime.runFetch, 'function')
+  })
+})

package/src/index.ts

@@ -1,3 +1,7 @@
 export * from './http/index.js'
 export * from './websocket/index.js'
 export * from './queue/index.js'
+export * from './scheduled/index.js'
+export * from './handler-factories.js'
+export { SQSQueueService } from './sqs-queue-service.js'
+export { LambdaDeploymentService } from './lambda-deployment-service.js'

package/src/lambda-deployment-service.ts

@@ -0,0 +1,134 @@
+/**
+ * Lambda deployment service — routes remote() calls via Lambda Invoke.
+ *
+ * When a gateway (agent, MCP, channel, workflow orchestrator) calls
+ * remote('funcName'), this service dispatches to the function's Lambda
+ * via the AWS SDK InvokeCommand. Equivalent to Cloudflare's service bindings.
+ *
+ * Session propagation uses the existing pikkuRemoteAuthMiddleware:
+ * JWT signed with PIKKU_REMOTE_SECRET, session encrypted in payload.
+ */
+
+import { LambdaClient, InvokeCommand } from '@aws-sdk/client-lambda'
+import type { DeploymentService, DeploymentConfig } from '@pikku/core/services'
+import type { JWTService } from '@pikku/core/services'
+import type { SecretService } from '@pikku/core/services'
+import { encryptJSON } from '@pikku/core/crypto-utils'
+
+export class LambdaDeploymentService implements DeploymentService {
+  private client: LambdaClient
+  private bindings: Map<string, string>
+
+  constructor(
+    private jwt: JWTService | undefined,
+    private secrets: SecretService,
+    functionBindings: Record<string, string>
+  ) {
+    this.client = new LambdaClient({})
+    this.bindings = new Map(Object.entries(functionBindings))
+  }
+
+  async init(): Promise<void> {}
+  async start(_config: DeploymentConfig): Promise<void> {}
+  async stop(): Promise<void> {}
+
+  async invoke(
+    funcName: string,
+    data: unknown,
+    session?: unknown,
+    traceId?: string
+  ): Promise<unknown> {
+    const lambdaFunctionName = this.bindings.get(funcName)
+    if (!lambdaFunctionName) {
+      throw new Error(
+        `No Lambda binding for function '${funcName}'. ` +
+          `Available bindings: ${[...this.bindings.keys()].join(', ')}`
+      )
+    }
+
+    const headers: Record<string, string> = {
+      'content-type': 'application/json',
+      ...(traceId && { 'x-request-id': traceId }),
+    }
+
+    // Sign session as JWT for pikkuRemoteAuthMiddleware
+    let secret: string | undefined
+    try {
+      secret = await this.secrets.getSecret('PIKKU_REMOTE_SECRET')
+    } catch {}
+
+    if (secret && this.jwt) {
+      const sessionEnc = session
+        ? await encryptJSON(secret, { session })
+        : undefined
+      const token = await this.jwt.encode(
+        { value: 5, unit: 'minute' },
+        {
+          aud: 'pikku-remote',
+          fn: funcName,
+          iat: Math.floor(Date.now() / 1000),
+          session: sessionEnc,
+        }
+      )
+      headers.authorization = `Bearer ${token}`
+    }
+
+    // Build an API Gateway v2 event for the target Lambda
+    const rpcPath = `/remote/rpc/${encodeURIComponent(funcName)}`
+    const apiGatewayEvent = {
+      httpMethod: 'POST',
+      path: rpcPath,
+      headers,
+      body: JSON.stringify({ data }),
+      isBase64Encoded: false,
+      queryStringParameters: null,
+      pathParameters: null,
+      stageVariables: null,
+      requestContext: {
+        httpMethod: 'POST',
+        path: rpcPath,
+        stage: 'prod',
+        requestId: crypto.randomUUID(),
+        identity: {},
+      },
+      resource: rpcPath,
+    }
+
+    const response = await this.client.send(
+      new InvokeCommand({
+        FunctionName: lambdaFunctionName,
+        Payload: JSON.stringify(apiGatewayEvent),
+      })
+    )
+
+    if (response.FunctionError) {
+      const errorPayload = response.Payload
+        ? new TextDecoder().decode(response.Payload)
+        : 'Unknown error'
+      throw new Error(
+        `Remote RPC call to '${funcName}' failed: Lambda error: ${errorPayload}`
+      )
+    }
+
+    if (!response.Payload) {
+      throw new Error(`Remote RPC call to '${funcName}' returned no payload`)
+    }
+
+    // The Lambda returns an API Gateway response shape
+    const lambdaResult = JSON.parse(new TextDecoder().decode(response.Payload))
+
+    if (lambdaResult.statusCode && lambdaResult.statusCode >= 400) {
+      throw new Error(
+        `Remote RPC call to '${funcName}' failed: ${lambdaResult.statusCode} ${lambdaResult.body}`
+      )
+    }
+
+    // Parse the body from the API Gateway response
+    const body = lambdaResult.body
+    try {
+      return JSON.parse(body)
+    } catch {
+      return body
+    }
+  }
+}

package/src/scheduled/index.ts

@@ -0,0 +1 @@
+export { runLambdaScheduled } from './run-scheduled.js'

package/src/scheduled/run-scheduled.ts

@@ -0,0 +1,30 @@
+/**
+ * Lambda handler for EventBridge scheduled events.
+ *
+ * Since each Lambda corresponds to a single unit, and each unit has
+ * specific scheduled tasks registered, we run all tasks in this unit
+ * when the schedule fires.
+ */
+
+import type { ScheduledEvent } from 'aws-lambda'
+import { runScheduledTask, getScheduledTasks } from '@pikku/core/scheduler'
+
+export const runLambdaScheduled = async (
+  _event: ScheduledEvent
+): Promise<void> => {
+  const scheduledTasks = getScheduledTasks()
+
+  // Run all scheduled tasks registered in this unit.
+  // Typically one task per unit, but iterate all to be safe.
+  for (const [name] of scheduledTasks) {
+    const traceId = `cron-${crypto.randomUUID()}`
+    try {
+      await runScheduledTask({ name, traceId })
+    } catch (err) {
+      console.error(
+        `Scheduled task '${name}' (traceId: ${traceId}) failed:`,
+        err
+      )
+    }
+  }
+}

package/src/sqs-queue-service.ts

@@ -0,0 +1,91 @@
+/**
+ * SQS implementation of QueueService (producer side).
+ *
+ * Sends messages to SQS queues. Queue URLs are resolved from environment
+ * variables following the convention: SQS_QUEUE_URL_<SCREAMING_SNAKE_NAME>.
+ *
+ * The consumer side is handled by sqs-worker.ts (runSQSQueueWorker).
+ */
+
+import { SQSClient, SendMessageCommand } from '@aws-sdk/client-sqs'
+import type { QueueService, QueueJob, JobOptions } from '@pikku/core/queue'
+
+export class SQSQueueService implements QueueService {
+  readonly supportsResults = false
+  private client: SQSClient
+
+  constructor(private queueUrlMap?: Record<string, string>) {
+    this.client = new SQSClient({})
+  }
+
+  async add<T>(
+    queueName: string,
+    data: T,
+    options?: JobOptions
+  ): Promise<string> {
+    const queueUrl = this.resolveQueueUrl(queueName)
+    const messageId = crypto.randomUUID()
+
+    const message = {
+      id: messageId,
+      queueName,
+      data,
+      pikkuUserId: options?.pikkuUserId,
+    }
+
+    const result = await this.client.send(
+      new SendMessageCommand({
+        QueueUrl: queueUrl,
+        MessageBody: JSON.stringify(message),
+        DelaySeconds: options?.delay
+          ? Math.min(Math.ceil(options.delay / 1000), 900)
+          : undefined,
+      })
+    )
+
+    return result.MessageId ?? messageId
+  }
+
+  async getJob<T, R>(
+    _queueName: string,
+    _jobId: string
+  ): Promise<QueueJob<T, R> | null> {
+    throw new Error(
+      'SQSQueueService does not support getJob(). ' +
+        'SQS is fire-and-forget. ' +
+        'Use BullMQ or PgBoss if you need job result tracking.'
+    )
+  }
+
+  /**
+   * Resolves the SQS queue URL for a given queue name.
+   *
+   * Checks in order:
+   * 1. Explicit queueUrlMap passed in constructor
+   * 2. Environment variable SQS_QUEUE_URL_<SCREAMING_SNAKE>
+   */
+  private resolveQueueUrl(queueName: string): string {
+    if (this.queueUrlMap?.[queueName]) {
+      return this.queueUrlMap[queueName]
+    }
+
+    const envKey = `SQS_QUEUE_URL_${toScreamingSnake(queueName)}`
+    const url = process.env[envKey]
+
+    if (!url) {
+      throw new Error(
+        `SQS queue URL not found for queue "${queueName}". ` +
+          `Set environment variable ${envKey} or pass queueUrlMap to constructor.`
+      )
+    }
+
+    return url
+  }
+}
+
+function toScreamingSnake(name: string): string {
+  return name
+    .replace(/([a-z0-9])([A-Z])/g, '$1_$2')
+    .replace(/-/g, '_')
+    .toUpperCase()
+}

package/src/websocket/lambda-eventhub-service.ts

@@ -8,9 +8,9 @@ import { getApiGatewayManagementApiClient, sendMessages } from './utils.js'
 import type { Logger } from '@pikku/core/services'
 import type { APIGatewayEvent } from 'aws-lambda'
 
-export class LambdaEventHubService<EventTopics extends Record<string, any> = {}>
-  implements EventHubService<EventTopics>
-{
+export class LambdaEventHubService<
+  EventTopics extends Record<string, any> = {},
+> implements EventHubService<EventTopics> {
   private callbackAPI: ApiGatewayManagementApiClient
 
   constructor(

package/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["./src/index.ts","./src/request-converter.ts","./src/response-converter.ts","./src/http/index.ts","./src/http/run-fetch.ts","./src/queue/index.ts","./src/queue/sqs-worker.ts","./src/websocket/index.ts","./src/websocket/lambda-channel-handler.ts","./src/websocket/lambda-eventhub-service.ts","./src/websocket/utils.ts","./src/websocket/websocket-connect.ts","./src/websocket/websocket-disconnect.ts","./src/websocket/websocket-message.ts","./src/websocket/websocket-types.ts"],"version":"5.9.3"}
+{"root":["./src/handler-factories.ts","./src/index.ts","./src/lambda-deployment-service.ts","./src/request-converter.ts","./src/response-converter.ts","./src/sqs-queue-service.ts","./src/http/index.ts","./src/http/request-converter-v2.ts","./src/http/response-converter-v2.ts","./src/http/run-fetch-v2.ts","./src/http/run-fetch.ts","./src/queue/index.ts","./src/queue/sqs-worker.ts","./src/scheduled/index.ts","./src/scheduled/run-scheduled.ts","./src/websocket/index.ts","./src/websocket/lambda-channel-handler.ts","./src/websocket/lambda-eventhub-service.ts","./src/websocket/utils.ts","./src/websocket/websocket-connect.ts","./src/websocket/websocket-disconnect.ts","./src/websocket/websocket-message.ts","./src/websocket/websocket-types.ts"],"version":"6.0.3"}