effortless-aws 0.0.1 → 0.1.0

package/dist/cli/index.js

@@ -13872,9 +13872,9 @@ var require_dispatcher_base = __commonJS({
       }
       close(callback) {
         if (callback === void 0) {
-          return new Promise((resolve7, reject) => {
+          return new Promise((resolve8, reject) => {
             this.close((err, data) => {
-              return err ? reject(err) : resolve7(data);
+              return err ? reject(err) : resolve8(data);
             });
           });
         }
@@ -13912,9 +13912,9 @@ var require_dispatcher_base = __commonJS({
           err = null;
         }
         if (callback === void 0) {
-          return new Promise((resolve7, reject) => {
+          return new Promise((resolve8, reject) => {
             this.destroy(err, (err2, data) => {
-              return err2 ? reject(err2) : resolve7(data);
+              return err2 ? reject(err2) : resolve8(data);
             });
           });
         }
@@ -17390,8 +17390,8 @@ var require_promise = __commonJS({
     function createDeferredPromise() {
       let res;
       let rej;
-      const promise3 = new Promise((resolve7, reject) => {
-        res = resolve7;
+      const promise3 = new Promise((resolve8, reject) => {
+        res = resolve8;
         rej = reject;
       });
       return { promise: promise3, resolve: res, reject: rej };
@@ -18689,12 +18689,12 @@ upgrade: ${upgrade}\r
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve7, reject) => {
+      const waitForDrain = () => new Promise((resolve8, reject) => {
         assert3(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve7;
+          callback = resolve8;
         }
       });
       socket.on("close", onDrain).on("drain", onDrain);
@@ -19535,12 +19535,12 @@ var require_client_h2 = __commonJS({
           cb();
         }
       }
-      const waitForDrain = () => new Promise((resolve7, reject) => {
+      const waitForDrain = () => new Promise((resolve8, reject) => {
         assert3(callback === null);
         if (socket[kError]) {
           reject(socket[kError]);
         } else {
-          callback = resolve7;
+          callback = resolve8;
         }
       });
       h2stream.on("close", onDrain).on("drain", onDrain);
@@ -19848,16 +19848,16 @@ var require_client = __commonJS({
         return this[kNeedDrain] < 2;
       }
       [kClose]() {
-        return new Promise((resolve7) => {
+        return new Promise((resolve8) => {
           if (this[kSize]) {
-            this[kClosedResolve] = resolve7;
+            this[kClosedResolve] = resolve8;
           } else {
-            resolve7(null);
+            resolve8(null);
           }
         });
       }
       [kDestroy](err) {
-        return new Promise((resolve7) => {
+        return new Promise((resolve8) => {
           const requests = this[kQueue].splice(this[kPendingIdx]);
           for (let i = 0; i < requests.length; i++) {
             const request2 = requests[i];
@@ -19868,7 +19868,7 @@ var require_client = __commonJS({
               this[kClosedResolve]();
               this[kClosedResolve] = null;
             }
-            resolve7(null);
+            resolve8(null);
           };
           if (this[kHTTPContext]) {
             this[kHTTPContext].destroy(err, callback);
@@ -20265,8 +20265,8 @@ var require_pool_base = __commonJS({
           }
           return Promise.all(closeAll);
         } else {
-          return new Promise((resolve7) => {
-            this[kClosedResolve] = resolve7;
+          return new Promise((resolve8) => {
+            this[kClosedResolve] = resolve8;
           });
         }
       }
@@ -21797,7 +21797,7 @@ var require_readable = __commonJS({
         if (this._readableState.closeEmitted) {
           return Promise.resolve(null);
         }
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           if (this[kContentLength] && this[kContentLength] > limit || this[kBytesRead] > limit) {
             this.destroy(new AbortError());
           }
@@ -21811,11 +21811,11 @@ var require_readable = __commonJS({
               if (signal.aborted) {
                 reject(signal.reason ?? new AbortError());
               } else {
-                resolve7(null);
+                resolve8(null);
               }
             });
           } else {
-            this.on("close", resolve7);
+            this.on("close", resolve8);
           }
           this.on("error", noop).on("data", () => {
             if (this[kBytesRead] > limit) {
@@ -21843,7 +21843,7 @@ var require_readable = __commonJS({
     }
     function consume(stream3, type2) {
       assert3(!stream3[kConsume]);
-      return new Promise((resolve7, reject) => {
+      return new Promise((resolve8, reject) => {
         if (isUnusable(stream3)) {
           const rState = stream3._readableState;
           if (rState.destroyed && rState.closeEmitted === false) {
@@ -21858,7 +21858,7 @@ var require_readable = __commonJS({
             stream3[kConsume] = {
               type: type2,
               stream: stream3,
-              resolve: resolve7,
+              resolve: resolve8,
               reject,
               length: 0,
               body: []
@@ -21932,18 +21932,18 @@ var require_readable = __commonJS({
       return buffer3;
     }
     function consumeEnd(consume2, encoding) {
-      const { type: type2, body, resolve: resolve7, stream: stream3, length: length3 } = consume2;
+      const { type: type2, body, resolve: resolve8, stream: stream3, length: length3 } = consume2;
       try {
         if (type2 === "text") {
-          resolve7(chunksDecode(body, length3, encoding));
+          resolve8(chunksDecode(body, length3, encoding));
         } else if (type2 === "json") {
-          resolve7(JSON.parse(chunksDecode(body, length3, encoding)));
+          resolve8(JSON.parse(chunksDecode(body, length3, encoding)));
         } else if (type2 === "arrayBuffer") {
-          resolve7(chunksConcat(body, length3).buffer);
+          resolve8(chunksConcat(body, length3).buffer);
         } else if (type2 === "blob") {
-          resolve7(new Blob(body, { type: stream3[kContentType] }));
+          resolve8(new Blob(body, { type: stream3[kContentType] }));
         } else if (type2 === "bytes") {
-          resolve7(chunksConcat(body, length3));
+          resolve8(chunksConcat(body, length3));
         }
         consumeFinish(consume2);
       } catch (err) {
@@ -22133,9 +22133,9 @@ var require_api_request = __commonJS({
     };
     function request2(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           request2.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve7(data);
+            return err ? reject(err) : resolve8(data);
           });
         });
       }
@@ -22347,9 +22347,9 @@ var require_api_stream = __commonJS({
     };
     function stream3(opts, factory, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           stream3.call(this, opts, factory, (err, data) => {
-            return err ? reject(err) : resolve7(data);
+            return err ? reject(err) : resolve8(data);
           });
         });
       }
@@ -22637,9 +22637,9 @@ var require_api_upgrade = __commonJS({
     };
     function upgrade(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           upgrade.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve7(data);
+            return err ? reject(err) : resolve8(data);
           });
         });
       }
@@ -22732,9 +22732,9 @@ var require_api_connect = __commonJS({
     };
     function connect(opts, callback) {
       if (callback === void 0) {
-        return new Promise((resolve7, reject) => {
+        return new Promise((resolve8, reject) => {
           connect.call(this, opts, (err, data) => {
-            return err ? reject(err) : resolve7(data);
+            return err ? reject(err) : resolve8(data);
           });
         });
       }
@@ -24002,7 +24002,7 @@ var require_snapshot_recorder = __commonJS({
   "node_modules/.pnpm/undici@7.21.0/node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
     var { writeFile: writeFile3, readFile: readFile5, mkdir: mkdir2 } = __require("fs/promises");
-    var { dirname: dirname3, resolve: resolve7 } = __require("path");
+    var { dirname: dirname4, resolve: resolve8 } = __require("path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("timers");
     var { InvalidArgumentError, UndiciError } = require_errors2();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -24203,7 +24203,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile5(resolve7(path12), "utf8");
+          const data = await readFile5(resolve8(path12), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -24232,8 +24232,8 @@ var require_snapshot_recorder = __commonJS({
         if (!path12) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve7(path12);
-        await mkdir2(dirname3(resolvedPath), { recursive: true });
+        const resolvedPath = resolve8(path12);
+        await mkdir2(dirname4(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
           snapshot
@@ -30781,7 +30781,7 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url2 = requestCurrentURL(request2);
         const agent = fetchParams.controller.dispatcher;
-        return new Promise((resolve7, reject) => agent.dispatch(
+        return new Promise((resolve8, reject) => agent.dispatch(
           {
             path: url2.pathname + url2.search,
             origin: url2.origin,
@@ -30861,7 +30861,7 @@ var require_fetch = __commonJS({
                 }
               }
               const onError4 = this.onError.bind(this);
-              resolve7({
+              resolve8({
                 status: status2,
                 statusText,
                 headersList,
@@ -30904,7 +30904,7 @@ var require_fetch = __commonJS({
               for (let i = 0; i < rawHeaders.length; i += 2) {
                 headersList.append(bufferToLowerCasedHeaderName(rawHeaders[i]), rawHeaders[i + 1].toString("latin1"), true);
               }
-              resolve7({
+              resolve8({
                 status: status2,
                 statusText: STATUS_CODES[status2],
                 headersList,
@@ -43439,18 +43439,18 @@ var parallelErrors = (self) => matchCauseEffect(self, {
   onSuccess: succeed
 });
 var patchFiberRefs = (patch9) => updateFiberRefs((fiberId3, fiberRefs3) => pipe(patch9, patch6(fiberId3, fiberRefs3)));
-var promise = (evaluate2) => evaluate2.length >= 1 ? async_((resolve7, signal) => {
+var promise = (evaluate2) => evaluate2.length >= 1 ? async_((resolve8, signal) => {
   try {
-    evaluate2(signal).then((a) => resolve7(succeed(a)), (e) => resolve7(die2(e)));
+    evaluate2(signal).then((a) => resolve8(succeed(a)), (e) => resolve8(die2(e)));
   } catch (e) {
-    resolve7(die2(e));
+    resolve8(die2(e));
   }
-}) : async_((resolve7) => {
+}) : async_((resolve8) => {
   try {
     ;
-    evaluate2().then((a) => resolve7(succeed(a)), (e) => resolve7(die2(e)));
+    evaluate2().then((a) => resolve8(succeed(a)), (e) => resolve8(die2(e)));
   } catch (e) {
-    resolve7(die2(e));
+    resolve8(die2(e));
   }
 });
 var provideService = /* @__PURE__ */ dual(3, (self, tag4, service2) => contextWithEffect((env2) => provideContext(self, add2(env2, tag4, service2))));
@@ -43576,19 +43576,19 @@ var tryPromise = (arg) => {
   }
   const fail19 = (e) => catcher ? failSync(() => catcher(e)) : fail2(new UnknownException(e, "An unknown error occurred in Effect.tryPromise"));
   if (evaluate2.length >= 1) {
-    return async_((resolve7, signal) => {
+    return async_((resolve8, signal) => {
       try {
-        evaluate2(signal).then((a) => resolve7(succeed(a)), (e) => resolve7(fail19(e)));
+        evaluate2(signal).then((a) => resolve8(succeed(a)), (e) => resolve8(fail19(e)));
       } catch (e) {
-        resolve7(fail19(e));
+        resolve8(fail19(e));
       }
     });
   }
-  return async_((resolve7) => {
+  return async_((resolve8) => {
     try {
-      evaluate2().then((a) => resolve7(succeed(a)), (e) => resolve7(fail19(e)));
+      evaluate2().then((a) => resolve8(succeed(a)), (e) => resolve8(fail19(e)));
     } catch (e) {
-      resolve7(fail19(e));
+      resolve8(fail19(e));
     }
   });
 };
@@ -48957,14 +48957,14 @@ var unsafeRunPromise = /* @__PURE__ */ makeDual((runtime5, effect3, options3) =>
     }
   }
 }));
-var unsafeRunPromiseExit = /* @__PURE__ */ makeDual((runtime5, effect3, options3) => new Promise((resolve7) => {
+var unsafeRunPromiseExit = /* @__PURE__ */ makeDual((runtime5, effect3, options3) => new Promise((resolve8) => {
   const op = fastPath(effect3);
   if (op) {
-    resolve7(op);
+    resolve8(op);
   }
   const fiber = unsafeFork3(runtime5)(effect3);
   fiber.addObserver((exit4) => {
-    resolve7(exit4);
+    resolve8(exit4);
   });
   if (options3?.signal !== void 0) {
     if (options3.signal.aborted) {
@@ -68719,7 +68719,8 @@ __export(clients_exports, {
   iam: () => iam_exports,
   lambda: () => lambda_exports,
   makeClients: () => makeClients,
-  resource_groups_tagging_api: () => resource_groups_tagging_api_exports
+  resource_groups_tagging_api: () => resource_groups_tagging_api_exports,
+  ssm: () => ssm_exports
 });
 
 // src/aws/clients/apigatewayv2.ts
@@ -69392,20 +69393,216 @@ var ResourceGroupsTaggingAPICommandFactory = {
   untag_resources: Sdk5.UntagResourcesCommand
 };
 
+// src/aws/clients/ssm.ts
+var ssm_exports = {};
+__export(ssm_exports, {
+  SSMClient: () => SSMClient2,
+  SSMError: () => SSMError,
+  make: () => make73
+});
+import * as Sdk6 from "@aws-sdk/client-ssm";
+var SSMClient2 = class _SSMClient extends Tag2("SSMClient")() {
+  static Default = (config2) => effect(
+    _SSMClient,
+    gen3(function* () {
+      return new Sdk6.SSMClient(config2 ?? {});
+    })
+  );
+};
+var make73 = fn("aws_SSM")(function* (actionName, actionInput) {
+  yield* logDebug2(`aws_SSM.${actionName}`, { input: actionInput });
+  const client = yield* SSMClient2;
+  const command = new SSMCommandFactory[actionName](actionInput);
+  const result = yield* tryPromise2({
+    try: () => client.send(command),
+    catch: (error4) => {
+      if (error4 instanceof Sdk6.SSMServiceException) {
+        return new SSMError(error4, actionName);
+      }
+      throw error4;
+    }
+  });
+  yield* logDebug2(`aws_SSM.${actionName} completed`);
+  return result;
+});
+var SSMError = class {
+  constructor(cause3, command) {
+    this.cause = cause3;
+    this.command = command;
+  }
+  _tag = "SSMError";
+  $is(name) {
+    return this.cause.name == name;
+  }
+  is(name) {
+    return this.cause.name == name;
+  }
+};
+var SSMCommandFactory = {
+  add_tags_to_resource: Sdk6.AddTagsToResourceCommand,
+  associate_ops_item_related_item: Sdk6.AssociateOpsItemRelatedItemCommand,
+  cancel_command: Sdk6.CancelCommandCommand,
+  cancel_maintenance_window_execution: Sdk6.CancelMaintenanceWindowExecutionCommand,
+  create_activation: Sdk6.CreateActivationCommand,
+  create_association: Sdk6.CreateAssociationCommand,
+  create_association_batch: Sdk6.CreateAssociationBatchCommand,
+  create_document: Sdk6.CreateDocumentCommand,
+  create_maintenance_window: Sdk6.CreateMaintenanceWindowCommand,
+  create_ops_item: Sdk6.CreateOpsItemCommand,
+  create_ops_metadata: Sdk6.CreateOpsMetadataCommand,
+  create_patch_baseline: Sdk6.CreatePatchBaselineCommand,
+  create_resource_data_sync: Sdk6.CreateResourceDataSyncCommand,
+  delete_activation: Sdk6.DeleteActivationCommand,
+  delete_association: Sdk6.DeleteAssociationCommand,
+  delete_document: Sdk6.DeleteDocumentCommand,
+  delete_inventory: Sdk6.DeleteInventoryCommand,
+  delete_maintenance_window: Sdk6.DeleteMaintenanceWindowCommand,
+  delete_ops_item: Sdk6.DeleteOpsItemCommand,
+  delete_ops_metadata: Sdk6.DeleteOpsMetadataCommand,
+  delete_parameter: Sdk6.DeleteParameterCommand,
+  delete_parameters: Sdk6.DeleteParametersCommand,
+  delete_patch_baseline: Sdk6.DeletePatchBaselineCommand,
+  delete_resource_data_sync: Sdk6.DeleteResourceDataSyncCommand,
+  delete_resource_policy: Sdk6.DeleteResourcePolicyCommand,
+  deregister_managed_instance: Sdk6.DeregisterManagedInstanceCommand,
+  deregister_patch_baseline_for_patch_group: Sdk6.DeregisterPatchBaselineForPatchGroupCommand,
+  deregister_target_from_maintenance_window: Sdk6.DeregisterTargetFromMaintenanceWindowCommand,
+  deregister_task_from_maintenance_window: Sdk6.DeregisterTaskFromMaintenanceWindowCommand,
+  describe_activations: Sdk6.DescribeActivationsCommand,
+  describe_association: Sdk6.DescribeAssociationCommand,
+  describe_association_execution_targets: Sdk6.DescribeAssociationExecutionTargetsCommand,
+  describe_association_executions: Sdk6.DescribeAssociationExecutionsCommand,
+  describe_automation_executions: Sdk6.DescribeAutomationExecutionsCommand,
+  describe_automation_step_executions: Sdk6.DescribeAutomationStepExecutionsCommand,
+  describe_available_patches: Sdk6.DescribeAvailablePatchesCommand,
+  describe_document: Sdk6.DescribeDocumentCommand,
+  describe_document_permission: Sdk6.DescribeDocumentPermissionCommand,
+  describe_effective_instance_associations: Sdk6.DescribeEffectiveInstanceAssociationsCommand,
+  describe_effective_patches_for_patch_baseline: Sdk6.DescribeEffectivePatchesForPatchBaselineCommand,
+  describe_instance_associations_status: Sdk6.DescribeInstanceAssociationsStatusCommand,
+  describe_instance_information: Sdk6.DescribeInstanceInformationCommand,
+  describe_instance_patch_states: Sdk6.DescribeInstancePatchStatesCommand,
+  describe_instance_patch_states_for_patch_group: Sdk6.DescribeInstancePatchStatesForPatchGroupCommand,
+  describe_instance_patches: Sdk6.DescribeInstancePatchesCommand,
+  describe_instance_properties: Sdk6.DescribeInstancePropertiesCommand,
+  describe_inventory_deletions: Sdk6.DescribeInventoryDeletionsCommand,
+  describe_maintenance_window_execution_task_invocations: Sdk6.DescribeMaintenanceWindowExecutionTaskInvocationsCommand,
+  describe_maintenance_window_execution_tasks: Sdk6.DescribeMaintenanceWindowExecutionTasksCommand,
+  describe_maintenance_window_executions: Sdk6.DescribeMaintenanceWindowExecutionsCommand,
+  describe_maintenance_window_schedule: Sdk6.DescribeMaintenanceWindowScheduleCommand,
+  describe_maintenance_window_targets: Sdk6.DescribeMaintenanceWindowTargetsCommand,
+  describe_maintenance_window_tasks: Sdk6.DescribeMaintenanceWindowTasksCommand,
+  describe_maintenance_windows: Sdk6.DescribeMaintenanceWindowsCommand,
+  describe_maintenance_windows_for_target: Sdk6.DescribeMaintenanceWindowsForTargetCommand,
+  describe_ops_items: Sdk6.DescribeOpsItemsCommand,
+  describe_parameters: Sdk6.DescribeParametersCommand,
+  describe_patch_baselines: Sdk6.DescribePatchBaselinesCommand,
+  describe_patch_group_state: Sdk6.DescribePatchGroupStateCommand,
+  describe_patch_groups: Sdk6.DescribePatchGroupsCommand,
+  describe_patch_properties: Sdk6.DescribePatchPropertiesCommand,
+  describe_sessions: Sdk6.DescribeSessionsCommand,
+  disassociate_ops_item_related_item: Sdk6.DisassociateOpsItemRelatedItemCommand,
+  get_access_token: Sdk6.GetAccessTokenCommand,
+  get_automation_execution: Sdk6.GetAutomationExecutionCommand,
+  get_calendar_state: Sdk6.GetCalendarStateCommand,
+  get_command_invocation: Sdk6.GetCommandInvocationCommand,
+  get_connection_status: Sdk6.GetConnectionStatusCommand,
+  get_default_patch_baseline: Sdk6.GetDefaultPatchBaselineCommand,
+  get_deployable_patch_snapshot_for_instance: Sdk6.GetDeployablePatchSnapshotForInstanceCommand,
+  get_document: Sdk6.GetDocumentCommand,
+  get_execution_preview: Sdk6.GetExecutionPreviewCommand,
+  get_inventory: Sdk6.GetInventoryCommand,
+  get_inventory_schema: Sdk6.GetInventorySchemaCommand,
+  get_maintenance_window: Sdk6.GetMaintenanceWindowCommand,
+  get_maintenance_window_execution: Sdk6.GetMaintenanceWindowExecutionCommand,
+  get_maintenance_window_execution_task: Sdk6.GetMaintenanceWindowExecutionTaskCommand,
+  get_maintenance_window_execution_task_invocation: Sdk6.GetMaintenanceWindowExecutionTaskInvocationCommand,
+  get_maintenance_window_task: Sdk6.GetMaintenanceWindowTaskCommand,
+  get_ops_item: Sdk6.GetOpsItemCommand,
+  get_ops_metadata: Sdk6.GetOpsMetadataCommand,
+  get_ops_summary: Sdk6.GetOpsSummaryCommand,
+  get_parameter: Sdk6.GetParameterCommand,
+  get_parameter_history: Sdk6.GetParameterHistoryCommand,
+  get_parameters: Sdk6.GetParametersCommand,
+  get_parameters_by_path: Sdk6.GetParametersByPathCommand,
+  get_patch_baseline: Sdk6.GetPatchBaselineCommand,
+  get_patch_baseline_for_patch_group: Sdk6.GetPatchBaselineForPatchGroupCommand,
+  get_resource_policies: Sdk6.GetResourcePoliciesCommand,
+  get_service_setting: Sdk6.GetServiceSettingCommand,
+  label_parameter_version: Sdk6.LabelParameterVersionCommand,
+  list_association_versions: Sdk6.ListAssociationVersionsCommand,
+  list_associations: Sdk6.ListAssociationsCommand,
+  list_command_invocations: Sdk6.ListCommandInvocationsCommand,
+  list_commands: Sdk6.ListCommandsCommand,
+  list_compliance_items: Sdk6.ListComplianceItemsCommand,
+  list_compliance_summaries: Sdk6.ListComplianceSummariesCommand,
+  list_document_metadata_history: Sdk6.ListDocumentMetadataHistoryCommand,
+  list_document_versions: Sdk6.ListDocumentVersionsCommand,
+  list_documents: Sdk6.ListDocumentsCommand,
+  list_inventory_entries: Sdk6.ListInventoryEntriesCommand,
+  list_nodes: Sdk6.ListNodesCommand,
+  list_nodes_summary: Sdk6.ListNodesSummaryCommand,
+  list_ops_item_events: Sdk6.ListOpsItemEventsCommand,
+  list_ops_item_related_items: Sdk6.ListOpsItemRelatedItemsCommand,
+  list_ops_metadata: Sdk6.ListOpsMetadataCommand,
+  list_resource_compliance_summaries: Sdk6.ListResourceComplianceSummariesCommand,
+  list_resource_data_sync: Sdk6.ListResourceDataSyncCommand,
+  list_tags_for_resource: Sdk6.ListTagsForResourceCommand,
+  modify_document_permission: Sdk6.ModifyDocumentPermissionCommand,
+  put_compliance_items: Sdk6.PutComplianceItemsCommand,
+  put_inventory: Sdk6.PutInventoryCommand,
+  put_parameter: Sdk6.PutParameterCommand,
+  put_resource_policy: Sdk6.PutResourcePolicyCommand,
+  register_default_patch_baseline: Sdk6.RegisterDefaultPatchBaselineCommand,
+  register_patch_baseline_for_patch_group: Sdk6.RegisterPatchBaselineForPatchGroupCommand,
+  register_target_with_maintenance_window: Sdk6.RegisterTargetWithMaintenanceWindowCommand,
+  register_task_with_maintenance_window: Sdk6.RegisterTaskWithMaintenanceWindowCommand,
+  remove_tags_from_resource: Sdk6.RemoveTagsFromResourceCommand,
+  reset_service_setting: Sdk6.ResetServiceSettingCommand,
+  resume_session: Sdk6.ResumeSessionCommand,
+  send_automation_signal: Sdk6.SendAutomationSignalCommand,
+  send_command: Sdk6.SendCommandCommand,
+  start_access_request: Sdk6.StartAccessRequestCommand,
+  start_associations_once: Sdk6.StartAssociationsOnceCommand,
+  start_automation_execution: Sdk6.StartAutomationExecutionCommand,
+  start_change_request_execution: Sdk6.StartChangeRequestExecutionCommand,
+  start_execution_preview: Sdk6.StartExecutionPreviewCommand,
+  start_session: Sdk6.StartSessionCommand,
+  stop_automation_execution: Sdk6.StopAutomationExecutionCommand,
+  terminate_session: Sdk6.TerminateSessionCommand,
+  unlabel_parameter_version: Sdk6.UnlabelParameterVersionCommand,
+  update_association: Sdk6.UpdateAssociationCommand,
+  update_association_status: Sdk6.UpdateAssociationStatusCommand,
+  update_document: Sdk6.UpdateDocumentCommand,
+  update_document_default_version: Sdk6.UpdateDocumentDefaultVersionCommand,
+  update_document_metadata: Sdk6.UpdateDocumentMetadataCommand,
+  update_maintenance_window: Sdk6.UpdateMaintenanceWindowCommand,
+  update_maintenance_window_target: Sdk6.UpdateMaintenanceWindowTargetCommand,
+  update_maintenance_window_task: Sdk6.UpdateMaintenanceWindowTaskCommand,
+  update_managed_instance_role: Sdk6.UpdateManagedInstanceRoleCommand,
+  update_ops_item: Sdk6.UpdateOpsItemCommand,
+  update_ops_metadata: Sdk6.UpdateOpsMetadataCommand,
+  update_patch_baseline: Sdk6.UpdatePatchBaselineCommand,
+  update_resource_data_sync: Sdk6.UpdateResourceDataSyncCommand,
+  update_service_setting: Sdk6.UpdateServiceSettingCommand
+};
+
 // src/aws/clients/index.ts
 var AllClientsDefault = mergeAll6(
   ApiGatewayV2Client2.Default(),
   DynamoDBClient2.Default(),
   IAMClient2.Default(),
   LambdaClient2.Default(),
-  ResourceGroupsTaggingAPIClient2.Default()
+  ResourceGroupsTaggingAPIClient2.Default(),
+  SSMClient2.Default()
 );
 var makeClients = (config2) => mergeAll6(
   ApiGatewayV2Client2.Default(config2?.apigatewayv2),
   DynamoDBClient2.Default(config2?.dynamodb),
   IAMClient2.Default(config2?.iam),
   LambdaClient2.Default(config2?.lambda),
-  ResourceGroupsTaggingAPIClient2.Default(config2?.resource_groups_tagging_api)
+  ResourceGroupsTaggingAPIClient2.Default(config2?.resource_groups_tagging_api),
+  SSMClient2.Default(config2?.ssm)
 );
 
 // src/aws/lambda.ts
@@ -69417,12 +69614,13 @@ var arraysEqual = (a, b) => {
   return sortedA.every((v, i) => v === sortedB[i]);
 };
 var ensureLambda = (config2) => Effect_exports.gen(function* () {
-  const functionName = `${config2.project}-${config2.name}`;
+  const functionName = `${config2.project}-${config2.stage}-${config2.name}`;
   const memory = config2.memory;
   const timeout4 = config2.timeout;
   const handler = config2.handler ?? "index.handler";
   const runtime5 = config2.runtime ?? Runtime2.nodejs22x;
   const layers = config2.layers ?? [];
+  const environment2 = config2.environment ?? {};
   const existingFunction = yield* lambda_exports.make("get_function", {
     FunctionName: functionName
   }).pipe(
@@ -69438,7 +69636,10 @@ var ensureLambda = (config2) => Effect_exports.gen(function* () {
     const codeChanged = existingHash !== newHash;
     const existingLayers = existingFunction.Layers?.map((l) => l.Arn).filter(Boolean) ?? [];
     const layersChanged = !arraysEqual(existingLayers, layers);
-    const configChanged = existingFunction.MemorySize !== memory || existingFunction.Timeout !== timeout4 || existingFunction.Handler !== handler || existingFunction.Runtime !== runtime5 || layersChanged;
+    const existingEnv = existingFunction.Environment?.Variables ?? {};
+    const envKeys = [.../* @__PURE__ */ new Set([...Object.keys(existingEnv), ...Object.keys(environment2)])].sort();
+    const envChanged = envKeys.some((k) => existingEnv[k] !== environment2[k]);
+    const configChanged = existingFunction.MemorySize !== memory || existingFunction.Timeout !== timeout4 || existingFunction.Handler !== handler || existingFunction.Runtime !== runtime5 || layersChanged || envChanged;
     if (!codeChanged && !configChanged) {
       yield* Effect_exports.logInfo(`Function ${functionName} unchanged, skipping update`);
       return existingFunction.FunctionArn;
@@ -69461,7 +69662,8 @@ var ensureLambda = (config2) => Effect_exports.gen(function* () {
         Timeout: timeout4,
         Handler: handler,
         Runtime: runtime5,
-        Layers: layers.length > 0 ? layers : void 0
+        Layers: layers.length > 0 ? layers : void 0,
+        Environment: Object.keys(environment2).length > 0 ? { Variables: environment2 } : void 0
       });
       yield* updateConfig.pipe(
         Effect_exports.catchIf(
@@ -69491,7 +69693,8 @@ var ensureLambda = (config2) => Effect_exports.gen(function* () {
     MemorySize: memory,
     Timeout: timeout4,
     Tags: config2.tags,
-    Layers: layers.length > 0 ? layers : void 0
+    Layers: layers.length > 0 ? layers : void 0,
+    Environment: Object.keys(environment2).length > 0 ? { Variables: environment2 } : void 0
   });
   yield* waitForFunctionActive(functionName);
   return createResult.FunctionArn;
@@ -69573,8 +69776,8 @@ var LAMBDA_ASSUME_ROLE_POLICY = JSON.stringify({
   ]
 });
 var BASIC_EXECUTION_POLICY_ARN = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole";
-var ensureRole = (project2, name, additionalActions, tags2) => Effect_exports.gen(function* () {
-  const roleName = `${project2}-${name}-role`;
+var ensureRole = (project2, stage, name, additionalActions, tags2) => Effect_exports.gen(function* () {
+  const roleName = `${project2}-${stage}-${name}-role`;
   const existingRole = yield* iam_exports.make("get_role", { RoleName: roleName }).pipe(
     Effect_exports.map((r) => r.Role),
     Effect_exports.catchIf(
@@ -69836,7 +70039,7 @@ var deleteTable = (tableName) => Effect_exports.gen(function* () {
 
 // src/aws/apigateway.ts
 var ensureProjectApi = (config2) => Effect_exports.gen(function* () {
-  const apiName = config2.projectName;
+  const apiName = `${config2.projectName}-${config2.stage}`;
   const existingApis = yield* apigatewayv2_exports.make("get_apis", {});
   const existingApi = existingApis.Items?.find((api) => api.Name === apiName);
   let apiId;
@@ -70205,7 +70408,7 @@ var ensureLayer = (config2) => Effect_exports.gen(function* () {
   if (!hash2) {
     return null;
   }
-  const layerName = `${config2.project}-deps`;
+  const layerName = `${config2.project}-${config2.stage}-deps`;
   const existing = yield* getExistingLayerByHash(layerName, hash2);
   if (existing) {
     yield* Effect_exports.logInfo(`Layer ${layerName} with hash ${hash2} already exists (version ${existing.version})`);
@@ -70276,6 +70479,7 @@ import { unmarshall, marshall } from "@aws-sdk/util-dynamodb";
 import * as esbuild from "esbuild";
 import * as fsSync2 from "fs";
 import * as path5 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import archiver2 from "archiver";
 import { globSync } from "glob";
 
@@ -70285,7 +70489,7 @@ var parseSource = (source) => {
   const project2 = new Project({ useInMemoryFileSystem: true });
   return project2.createSourceFile("input.ts", source);
 };
-var RUNTIME_PROPS = ["onRequest", "onRecord", "onBatchComplete", "context"];
+var RUNTIME_PROPS = ["onRequest", "onRecord", "onBatchComplete", "onBatch", "context", "schema", "onError", "deps", "params"];
 var buildConfigWithoutRuntime = (obj) => {
   const props = obj.getProperties().filter((p3) => {
     if (p3.getKind() === SyntaxKind.PropertyAssignment) {
@@ -70309,22 +70513,72 @@ var extractPropertyFromObject = (obj, propName) => {
   }
   return void 0;
 };
+var extractDepsKeys = (obj) => {
+  const depsProp = obj.getProperties().find((p3) => {
+    if (p3.getKind() === SyntaxKind.PropertyAssignment) {
+      return p3.getName() === "deps";
+    }
+    return false;
+  });
+  if (!depsProp || depsProp.getKind() !== SyntaxKind.PropertyAssignment) return [];
+  const init = depsProp.getInitializer();
+  if (!init || init.getKind() !== SyntaxKind.ObjectLiteralExpression) return [];
+  const depsObj = init;
+  return depsObj.getProperties().map((p3) => {
+    if (p3.getKind() === SyntaxKind.ShorthandPropertyAssignment) {
+      return p3.asKindOrThrow(SyntaxKind.ShorthandPropertyAssignment).getName();
+    }
+    if (p3.getKind() === SyntaxKind.PropertyAssignment) {
+      return p3.getName();
+    }
+    return "";
+  }).filter(Boolean);
+};
+var extractParamEntries = (obj) => {
+  const paramsProp = obj.getProperties().find((p3) => {
+    if (p3.getKind() === SyntaxKind.PropertyAssignment) {
+      return p3.getName() === "params";
+    }
+    return false;
+  });
+  if (!paramsProp || paramsProp.getKind() !== SyntaxKind.PropertyAssignment) return [];
+  const init = paramsProp.getInitializer();
+  if (!init || init.getKind() !== SyntaxKind.ObjectLiteralExpression) return [];
+  const paramsObj = init;
+  const entries2 = [];
+  for (const p3 of paramsObj.getProperties()) {
+    if (p3.getKind() !== SyntaxKind.PropertyAssignment) continue;
+    const propAssign = p3;
+    const propName = propAssign.getName();
+    const propInit = propAssign.getInitializer();
+    if (!propInit || propInit.getKind() !== SyntaxKind.CallExpression) continue;
+    const callExpr = propInit;
+    const callArgs = callExpr.getArguments();
+    if (callArgs.length === 0) continue;
+    const firstArg = callArgs[0];
+    if (firstArg.getKind() === SyntaxKind.StringLiteral) {
+      const ssmKey = firstArg.asKindOrThrow(SyntaxKind.StringLiteral).getLiteralValue();
+      entries2.push({ propName, ssmKey });
+    }
+  }
+  return entries2;
+};
 var handlerRegistry = {
   http: {
     defineFn: "defineHttp",
-    handlerProp: "onRequest",
+    handlerProps: ["onRequest"],
     wrapperFn: "wrapHttp",
     wrapperPath: "~/runtime/wrap-http"
   },
   table: {
     defineFn: "defineTable",
-    handlerProp: "onRecord",
+    handlerProps: ["onRecord", "onBatch"],
     wrapperFn: "wrapTableStream",
     wrapperPath: "~/runtime/wrap-table-stream"
   }
 };
 var extractHandlerConfigs = (source, type2) => {
-  const { defineFn, handlerProp } = handlerRegistry[type2];
+  const { defineFn, handlerProps } = handlerRegistry[type2];
   const sourceFile = parseSource(source);
   const results = [];
   const exportDefault = sourceFile.getExportAssignment((e) => !e.isExportEquals());
@@ -70339,8 +70593,10 @@ var extractHandlerConfigs = (source, type2) => {
           const objLiteral = firstArg;
           const configText = buildConfigWithoutRuntime(objLiteral);
           const configObj = new Function(`return ${configText}`)();
-          const hasHandler = extractPropertyFromObject(objLiteral, handlerProp) !== void 0;
-          results.push({ exportName: "default", config: configObj, hasHandler });
+          const hasHandler = handlerProps.some((p3) => extractPropertyFromObject(objLiteral, p3) !== void 0);
+          const depsKeys = extractDepsKeys(objLiteral);
+          const paramEntries = extractParamEntries(objLiteral);
+          results.push({ exportName: "default", config: configObj, hasHandler, depsKeys, paramEntries });
         }
       }
     }
@@ -70358,19 +70614,22 @@ var extractHandlerConfigs = (source, type2) => {
         const objLiteral = firstArg;
         const configText = buildConfigWithoutRuntime(objLiteral);
         const configObj = new Function(`return ${configText}`)();
-        const hasHandler = extractPropertyFromObject(objLiteral, handlerProp) !== void 0;
-        results.push({ exportName: decl.getName(), config: configObj, hasHandler });
+        const hasHandler = handlerProps.some((p3) => extractPropertyFromObject(objLiteral, p3) !== void 0);
+        const depsKeys = extractDepsKeys(objLiteral);
+        const paramEntries = extractParamEntries(objLiteral);
+        results.push({ exportName: decl.getName(), config: configObj, hasHandler, depsKeys, paramEntries });
       }
     });
   });
   return results;
 };
-var generateEntryPoint = (sourcePath, exportName, type2) => {
+var generateEntryPoint = (sourcePath, exportName, type2, runtimeDir2) => {
   const { wrapperFn, wrapperPath } = handlerRegistry[type2];
+  const resolvedWrapperPath = runtimeDir2 ? wrapperPath.replace("~/runtime", runtimeDir2) : wrapperPath;
   const importName = exportName === "default" ? "__handler" : exportName;
   const importStmt = exportName === "default" ? `import __handler from "${sourcePath}";` : `import { ${exportName} } from "${sourcePath}";`;
   return `${importStmt}
-import { ${wrapperFn} } from "${wrapperPath}";
+import { ${wrapperFn} } from "${resolvedWrapperPath}";
 export const handler = ${wrapperFn}(${importName});
 `;
 };
@@ -70378,12 +70637,15 @@ export const handler = ${wrapperFn}(${importName});
 // src/build/bundle.ts
 var extractConfigs = (source) => extractHandlerConfigs(source, "http");
 var extractTableConfigs = (source) => extractHandlerConfigs(source, "table");
+var runtimeDir = path5.resolve(path5.dirname(fileURLToPath2(import.meta.url)), "../../dist/runtime");
 var bundle = (input) => Effect_exports.gen(function* () {
   const exportName = input.exportName ?? "default";
   const type2 = input.type ?? "http";
   const externals = input.external ?? [];
   const sourcePath = path5.isAbsolute(input.file) ? input.file : `./${input.file}`;
-  const entryPoint = generateEntryPoint(sourcePath, exportName, type2);
+  const entryPoint = generateEntryPoint(sourcePath, exportName, type2, runtimeDir);
+  const awsExternals = ["@aws-sdk/*", "@smithy/*"];
+  const allExternals = [.../* @__PURE__ */ new Set([...awsExternals, ...externals])];
   const result = yield* Effect_exports.tryPromise({
     try: () => esbuild.build({
       stdin: {
@@ -70398,7 +70660,7 @@ var bundle = (input) => Effect_exports.gen(function* () {
       minify: false,
       sourcemap: false,
       format: input.format ?? "esm",
-      ...externals.length > 0 ? { external: externals } : { packages: "bundle" }
+      external: allExternals
     }),
     catch: (error4) => new Error(`esbuild failed: ${error4}`)
   });
@@ -70453,6 +70715,7 @@ var readSource = (input) => Effect_exports.gen(function* () {
 var ensureLayerAndExternal = (input) => Effect_exports.gen(function* () {
   const layerResult = yield* ensureLayer({
     project: input.project,
+    stage: input.stage,
     region: input.region,
     projectDir: input.projectDir
   });
@@ -70473,7 +70736,9 @@ var deployCoreLambda = ({
   timeout: timeout4 = 30,
   bundleType,
   layerArn,
-  external
+  external,
+  depsEnv,
+  depsPermissions
 }) => Effect_exports.gen(function* () {
   const tagCtx = {
     project: input.project,
@@ -70486,10 +70751,12 @@ var deployCoreLambda = ({
   }
   const mergedPermissions = [
     ...defaultPermissions ?? [],
-    ...permissions ?? []
+    ...permissions ?? [],
+    ...depsPermissions ?? []
   ];
   const roleArn = yield* ensureRole(
     input.project,
+    tagCtx.stage,
     handlerName,
     mergedPermissions.length > 0 ? mergedPermissions : void 0,
     makeTags(tagCtx, "iam-role")
@@ -70501,8 +70768,15 @@ var deployCoreLambda = ({
     ...external && external.length > 0 ? { external } : {}
   });
   const code2 = yield* zip12({ content: bundled });
+  const environment2 = {
+    EFF_PROJECT: input.project,
+    EFF_STAGE: tagCtx.stage,
+    EFF_HANDLER: handlerName,
+    ...depsEnv
+  };
   const functionArn = yield* ensureLambda({
     project: input.project,
+    stage: tagCtx.stage,
     name: handlerName,
     region: input.region,
     roleArn,
@@ -70510,13 +70784,14 @@ var deployCoreLambda = ({
     memory,
     timeout: timeout4,
     tags: makeTags(tagCtx, "lambda"),
-    ...layerArn ? { layers: [layerArn] } : {}
+    ...layerArn ? { layers: [layerArn] } : {},
+    environment: environment2
   });
   return { functionArn, tagCtx };
 });
 
 // src/deploy/deploy-http.ts
-var deployLambda = ({ input, fn: fn2, layerArn, external }) => Effect_exports.gen(function* () {
+var deployLambda = ({ input, fn: fn2, layerArn, external, depsEnv, depsPermissions }) => Effect_exports.gen(function* () {
   const { exportName, config: config2 } = fn2;
   const handlerName = config2.name ?? exportName;
   const { functionArn } = yield* deployCoreLambda({
@@ -70528,7 +70803,9 @@ var deployLambda = ({ input, fn: fn2, layerArn, external }) => Effect_exports.ge
     ...config2.memory ? { memory: config2.memory } : {},
     ...config2.timeout ? { timeout: config2.timeout } : {},
     ...layerArn ? { layerArn } : {},
-    ...external ? { external } : {}
+    ...external ? { external } : {},
+    ...depsEnv ? { depsEnv } : {},
+    ...depsPermissions ? { depsPermissions } : {}
   });
   return { exportName, functionArn, config: config2, handlerName };
 });
@@ -70550,6 +70827,7 @@ var deploy = (input) => Effect_exports.gen(function* () {
   yield* Effect_exports.logInfo(`Deploying ${handlerName} to ${input.region} (${tagCtx.project}/${tagCtx.stage})`);
   const { layerArn, external } = yield* ensureLayerAndExternal({
     project: input.project,
+    stage: tagCtx.stage,
     region: input.region,
     projectDir: input.projectDir
   });
@@ -70562,6 +70840,7 @@ var deploy = (input) => Effect_exports.gen(function* () {
   yield* Effect_exports.logInfo("Setting up API Gateway...");
   const { apiId } = yield* ensureProjectApi({
     projectName: input.project,
+    stage: tagCtx.stage,
     region: input.region,
     tags: makeTags(tagCtx, "api-gateway")
   });
@@ -70594,19 +70873,21 @@ var deployAll = (input) => Effect_exports.gen(function* () {
     return yield* Effect_exports.fail(new Error("No defineHttp exports found in source"));
   }
   yield* Effect_exports.logInfo(`Found ${functions.length} HTTP handler(s) to deploy`);
-  const { layerArn, external } = yield* ensureLayerAndExternal({
-    project: input.project,
-    region: input.region,
-    projectDir: input.projectDir
-  });
   const tagCtx = {
     project: input.project,
     stage: resolveStage(input.stage),
     handler: "api"
   };
+  const { layerArn, external } = yield* ensureLayerAndExternal({
+    project: input.project,
+    stage: tagCtx.stage,
+    region: input.region,
+    projectDir: input.projectDir
+  });
   yield* Effect_exports.logInfo("Setting up API Gateway...");
   const { apiId } = yield* ensureProjectApi({
     projectName: input.project,
+    stage: tagCtx.stage,
     region: input.region,
     tags: makeTags(tagCtx, "api-gateway")
   });
@@ -70647,7 +70928,7 @@ var deployAll = (input) => Effect_exports.gen(function* () {
 
 // src/deploy/deploy-table.ts
 var TABLE_DEFAULT_PERMISSIONS = ["dynamodb:*", "logs:*"];
-var deployTableFunction = ({ input, fn: fn2, layerArn, external }) => Effect_exports.gen(function* () {
+var deployTableFunction = ({ input, fn: fn2, layerArn, external, depsEnv, depsPermissions }) => Effect_exports.gen(function* () {
   const { exportName, config: config2 } = fn2;
   const handlerName = config2.name ?? exportName;
   const tagCtx = {
@@ -70656,7 +70937,7 @@ var deployTableFunction = ({ input, fn: fn2, layerArn, external }) => Effect_exp
     handler: handlerName
   };
   yield* Effect_exports.logInfo("Creating DynamoDB table...");
-  const tableName = `${input.project}-${handlerName}`;
+  const tableName = `${input.project}-${tagCtx.stage}-${handlerName}`;
   const { tableArn, streamArn } = yield* ensureTable({
     name: tableName,
     pk: config2.pk,
@@ -70665,6 +70946,7 @@ var deployTableFunction = ({ input, fn: fn2, layerArn, external }) => Effect_exp
     streamView: config2.streamView ?? "NEW_AND_OLD_IMAGES",
     tags: makeTags(tagCtx, "dynamodb")
   });
+  const selfEnv = { EFF_TABLE_SELF: tableName, ...depsEnv };
   const { functionArn } = yield* deployCoreLambda({
     input,
     exportName,
@@ -70675,7 +70957,9 @@ var deployTableFunction = ({ input, fn: fn2, layerArn, external }) => Effect_exp
     ...config2.memory ? { memory: config2.memory } : {},
     ...config2.timeout ? { timeout: config2.timeout } : {},
     ...layerArn ? { layerArn } : {},
-    ...external ? { external } : {}
+    ...external ? { external } : {},
+    depsEnv: selfEnv,
+    ...depsPermissions ? { depsPermissions } : {}
   });
   yield* Effect_exports.logInfo("Setting up event source mapping...");
   yield* ensureEventSourceMapping({
@@ -70703,6 +70987,7 @@ var deployTable = (input) => Effect_exports.gen(function* () {
   const fn2 = configs.find((c) => c.exportName === targetExport) ?? configs[0];
   const { layerArn, external } = yield* ensureLayerAndExternal({
     project: input.project,
+    stage: resolveStage(input.stage),
     region: input.region,
     projectDir: input.projectDir
   });
@@ -70731,6 +71016,7 @@ var deployAllTables = (input) => Effect_exports.gen(function* () {
   yield* Effect_exports.logInfo(`Found ${functions.length} table handler(s) to deploy`);
   const { layerArn, external } = yield* ensureLayerAndExternal({
     project: input.project,
+    stage: resolveStage(input.stage),
     region: input.region,
     projectDir: input.projectDir
   });
@@ -70759,6 +71045,7 @@ var deployAllTables = (input) => Effect_exports.gen(function* () {
 var prepareLayer = (input) => Effect_exports.gen(function* () {
   const layerResult = yield* ensureLayer({
     project: input.project,
+    stage: input.stage,
     region: input.region,
     projectDir: input.projectDir
   }).pipe(
@@ -70779,6 +71066,57 @@ var prepareLayer = (input) => Effect_exports.gen(function* () {
     external
   };
 });
+var TABLE_CLIENT_PERMISSIONS = [
+  "dynamodb:GetItem",
+  "dynamodb:PutItem",
+  "dynamodb:DeleteItem",
+  "dynamodb:Query",
+  "dynamodb:Scan",
+  "dynamodb:UpdateItem",
+  "dynamodb:BatchGetItem",
+  "dynamodb:BatchWriteItem"
+];
+var buildTableNameMap = (tableHandlers, project2, stage) => {
+  const map36 = /* @__PURE__ */ new Map();
+  for (const { exports } of tableHandlers) {
+    for (const fn2 of exports) {
+      const handlerName = fn2.config.name ?? fn2.exportName;
+      map36.set(fn2.exportName, `${project2}-${stage}-${handlerName}`);
+    }
+  }
+  return map36;
+};
+var resolveDeps = (depsKeys, tableNameMap) => {
+  if (depsKeys.length === 0) return void 0;
+  const depsEnv = {};
+  for (const key of depsKeys) {
+    const tableName = tableNameMap.get(key);
+    if (tableName) {
+      depsEnv[`EFF_TABLE_${key}`] = tableName;
+    }
+  }
+  if (Object.keys(depsEnv).length === 0) return void 0;
+  return { depsEnv, depsPermissions: TABLE_CLIENT_PERMISSIONS };
+};
+var SSM_PERMISSIONS = [
+  "ssm:GetParameter",
+  "ssm:GetParameters"
+];
+var resolveParams = (paramEntries, project2, stage) => {
+  if (paramEntries.length === 0) return void 0;
+  const paramsEnv = {};
+  for (const { propName, ssmKey } of paramEntries) {
+    paramsEnv[`EFF_PARAM_${propName}`] = `/${project2}/${stage}/${ssmKey}`;
+  }
+  return { paramsEnv, paramsPermissions: SSM_PERMISSIONS };
+};
+var mergeResolved = (deps, params) => {
+  if (!deps && !params) return void 0;
+  const env2 = { ...deps?.depsEnv, ...params?.paramsEnv };
+  const permissions = [...deps?.depsPermissions ?? [], ...params?.paramsPermissions ?? []];
+  if (Object.keys(env2).length === 0) return void 0;
+  return { depsEnv: env2, depsPermissions: permissions };
+};
 var deployHttpHandlers = (ctx) => Effect_exports.gen(function* () {
   const results = [];
   for (const { file: file6, exports } of ctx.handlers) {
@@ -70791,11 +71129,17 @@ var deployHttpHandlers = (ctx) => Effect_exports.gen(function* () {
     };
     if (ctx.input.stage) deployInput.stage = ctx.input.stage;
     for (const fn2 of exports) {
+      const stage = resolveStage(ctx.input.stage);
+      const resolved = mergeResolved(
+        resolveDeps(fn2.depsKeys, ctx.tableNameMap),
+        resolveParams(fn2.paramEntries, ctx.input.project, stage)
+      );
       const { exportName, functionArn, config: config2 } = yield* deployLambda({
         input: deployInput,
         fn: fn2,
         ...ctx.layerArn ? { layerArn: ctx.layerArn } : {},
-        ...ctx.external.length > 0 ? { external: ctx.external } : {}
+        ...ctx.external.length > 0 ? { external: ctx.external } : {},
+        ...resolved ? { depsEnv: resolved.depsEnv, depsPermissions: resolved.depsPermissions } : {}
       }).pipe(
         Effect_exports.provide(
           clients_exports.makeClients({
@@ -70836,11 +71180,17 @@ var deployTableHandlers = (ctx) => Effect_exports.gen(function* () {
     };
     if (ctx.input.stage) deployInput.stage = ctx.input.stage;
     for (const fn2 of exports) {
+      const stage = resolveStage(ctx.input.stage);
+      const resolved = mergeResolved(
+        resolveDeps(fn2.depsKeys, ctx.tableNameMap),
+        resolveParams(fn2.paramEntries, ctx.input.project, stage)
+      );
       const result = yield* deployTableFunction({
         input: deployInput,
         fn: fn2,
         ...ctx.layerArn ? { layerArn: ctx.layerArn } : {},
-        ...ctx.external.length > 0 ? { external: ctx.external } : {}
+        ...ctx.external.length > 0 ? { external: ctx.external } : {},
+        ...resolved ? { depsEnv: resolved.depsEnv, depsPermissions: resolved.depsPermissions } : {}
       }).pipe(
         Effect_exports.provide(
           clients_exports.makeClients({
@@ -70868,8 +71218,10 @@ var deployProject = (input) => Effect_exports.gen(function* () {
     return yield* Effect_exports.fail(new Error("No handlers found in matched files"));
   }
   yield* Effect_exports.logInfo(`Discovered ${totalHttpHandlers} HTTP handler(s) and ${totalTableHandlers} table handler(s)`);
+  const tableNameMap = buildTableNameMap(tableHandlers, input.project, resolveStage(input.stage));
   const { layerArn, external } = yield* prepareLayer({
     project: input.project,
+    stage: resolveStage(input.stage),
     region: input.region,
     projectDir: input.projectDir
   });
@@ -70884,6 +71236,7 @@ var deployProject = (input) => Effect_exports.gen(function* () {
     yield* Effect_exports.logInfo("Setting up API Gateway...");
     const api = yield* ensureProjectApi({
       projectName: input.project,
+      stage: tagCtx.stage,
       region: input.region,
       tags: makeTags(tagCtx, "api-gateway")
     }).pipe(
@@ -70901,13 +71254,15 @@ var deployProject = (input) => Effect_exports.gen(function* () {
     apiId,
     input,
     layerArn,
-    external
+    external,
+    tableNameMap
   }) : [];
   const tableResults = yield* deployTableHandlers({
     handlers: tableHandlers,
     input,
     layerArn,
-    external
+    external,
+    tableNameMap
   });
   if (apiUrl) {
     yield* Effect_exports.logInfo(`Deployment complete! API: ${apiUrl}`);