@arki/env 0.0.9 → 0.2.0

package/src/node/references.ts

@@ -0,0 +1,90 @@
+/** Secret-manager reads use argv, a bounded subprocess and caller-owned provider authentication. */
+import { execFileSync } from 'node:child_process';
+import { z } from 'zod';
+
+import { isFailure } from '@arki/failure';
+import { ensure, parse } from '@arki/schema';
+
+import { EnvCancelled, EnvDeadline, ReferenceFailed } from './errors.js';
+import { nodeOperation } from './operation-telemetry.js';
+
+/** The remaining aggregate budget and cooperative cancellation for a synchronous provider read. */
+export type ReferenceOptions = { readonly timeoutMs?: number; readonly signal?: AbortSignal };
+/** A provider returns its value or the exact owned provider/cancellation/deadline outcomes. */
+export type ReferenceResolver = (reference: string, options?: ReferenceOptions) => ReturnType<typeof runProvider>;
+
+const segment = z.string().regex(/^\w[\w.-]*$/);
+const referencePath = z.array(segment);
+const timeoutSchema = z.number().int().min(1).max(30_000);
+const execFailure = z.object({ code: z.string().optional() });
+
+/** The resolvers used unless the caller supplies an explicit registry. */
+export const DEFAULT_RESOLVERS: Readonly<Record<string, ReferenceResolver>> = {
+  op: (reference, options) => runProvider('op', ['read', '--no-newline', reference], options),
+  infisical: (reference, options) => {
+    const parts = pathOf(reference);
+    if (isFailure(parts)) return ReferenceFailed({ scheme: 'infisical' }, { cause: parts });
+    const [environment, ...rest] = parts;
+    const name = rest.pop();
+    if (environment === undefined || name === undefined) return ReferenceFailed({ scheme: 'infisical' });
+    return runProvider(
+      'infisical',
+      ['secrets', 'get', '--plain', '--silent', `--env=${environment}`, `--path=/${rest.join('/')}`, '--', name],
+      options,
+    );
+  },
+  doppler: (reference, options) => {
+    const parts = pathOf(reference);
+    if (isFailure(parts)) return ReferenceFailed({ scheme: 'doppler' }, { cause: parts });
+    const [project, config, name, ...extra] = parts;
+    if (project === undefined || config === undefined || name === undefined || extra.length > 0)
+      return ReferenceFailed({ scheme: 'doppler' });
+    return runProvider(
+      'doppler',
+      ['secrets', 'get', '--plain', `--project=${project}`, `--config=${config}`, '--', name],
+      options,
+    );
+  },
+};
+
+/** Registered schemes are references; unknown URLs remain plain values. */
+export function referenceScheme(
+  value: string,
+  resolvers: Readonly<Record<string, ReferenceResolver>>,
+): string | undefined {
+  const scheme = /^([a-z][a-z0-9+.-]*):\/\/./.exec(value)?.[1];
+  return scheme !== undefined && Object.hasOwn(resolvers, scheme) ? scheme : undefined;
+}
+
+function runProvider(command: string, args: readonly string[], options: ReferenceOptions = {}) {
+  const timeout = ensure(options.timeoutMs ?? 30_000, timeoutSchema);
+  return nodeOperation(`reference.${command}`, () => {
+    if (options.signal?.aborted) return EnvCancelled({ cause: options.signal.reason });
+    try {
+      const value = execFileSync(command, args, {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout,
+        // These are bounded reads: a provider must not evade the deadline by ignoring SIGTERM.
+        killSignal: 'SIGKILL',
+      }).replace(/\r?\n$/, '');
+      return options.signal?.aborted ? EnvCancelled({ cause: options.signal.reason }) : value;
+    } catch (error) {
+      const detail = execFailure.safeParse(error);
+      if (options.signal?.aborted) return EnvCancelled({ cause: error });
+      if (detail.success && detail.data.code === 'ETIMEDOUT') return EnvDeadline({ cause: error });
+      // CLI stderr may contain a credential. Keep the complete original error only in the private cause.
+      return ReferenceFailed({ scheme: command }, { cause: error });
+    }
+  });
+}
+
+function pathOf(reference: string) {
+  return parse(
+    referencePath,
+    reference
+      .slice(reference.indexOf('://') + 3)
+      .split('/')
+      .filter(part => part !== ''),
+  );
+}

package/src/node/register.ts

@@ -0,0 +1,18 @@
+/**
+ * Side-effect entry: load the env files into `process.env` as this module is imported. Import it
+ * first in a process entry, before any module that reads the environment:
+ *
+ * ```ts
+ * import '@arki/env/node/register';
+ * ```
+ *
+ * Fails the import with every problem listed (names only, never values).
+ */
+import { isFailure, orThrow } from '@arki/failure';
+
+import { EnvFilesFailed } from './errors.js';
+import { formatEnvFilesErrors, loadEnvFiles } from './load.js';
+
+const report = loadEnvFiles();
+if (EnvFilesFailed.is(report)) throw new Error(formatEnvFilesErrors(report), { cause: report });
+if (isFailure(report)) orThrow(report);

package/src/{contracts → presets}/common.ts

@@ -1,22 +1,18 @@
 import { z } from 'zod';
 
-export const commonContracts = {
+export const commonPresets = {
   string: (defaultValue?: string) => {
     const schema = z.string();
-    return defaultValue ? schema.default(defaultValue) : schema;
+    return defaultValue === undefined ? schema : schema.default(defaultValue);
   },
 
   number: (defaultValue?: number) => {
     const schema = z.coerce.number();
-    return defaultValue ? schema.default(defaultValue) : schema;
+    return defaultValue === undefined ? schema : schema.default(defaultValue);
   },
 
   port: (defaultValue = 3000) =>
-    z
-      .coerce.number()
-      .min(1, 'Port must be at least 1')
-      .max(65_535, 'Port must be at most 65535')
-      .default(defaultValue),
+    z.coerce.number().min(1, 'Port must be at least 1').max(65_535, 'Port must be at most 65535').default(defaultValue),
 
   nodeEnv: () => z.enum(['development', 'production', 'test']).default('development'),
 

package/src/presets/index.ts

@@ -0,0 +1,18 @@
+/** Ready-made Zod presets for ports, URLs, lists, JSON and other common variable shapes. */
+import { commonPresets } from './common.js';
+import { parsePresets } from './parsing.js';
+import { urlPresets } from './urls.js';
+
+// Unified presets export
+export const presets = {
+  ...commonPresets,
+  ...urlPresets,
+  ...parsePresets,
+};
+
+// Individual category exports
+
+
+export {commonPresets} from './common.js';
+export {urlPresets} from './urls.js';
+export {parsePresets} from './parsing.js';

package/src/{contracts → presets}/parsing.ts

@@ -1,11 +1,18 @@
 import { z } from 'zod';
 
-export const parseContracts = {
+export const parsePresets = {
   json: <T extends z.ZodType>(schema: T) =>
-    z.string().transform(str => {
-      const parsed = JSON.parse(str);
-      return schema.parse(parsed);
-    }),
+    z
+      .string()
+      .transform((str, context) => {
+        try {
+          return JSON.parse(str) as unknown;
+        } catch {
+          context.issues.push({ code: 'custom', message: 'Invalid JSON', input: str });
+          return z.NEVER;
+        }
+      })
+      .pipe(schema),
 
   csvArray: <T extends z.ZodType>(itemSchema: T) =>
     z.preprocess(val => {

package/src/{contracts → presets}/urls.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 
-export const urlContracts = {
+export const urlPresets = {
   url: (defaultValue?: string) => {
     const schema = z.url();
     return defaultValue ? schema.default(defaultValue) : schema;

package/dist/contracts/common.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe;IAC1B,MAAM,kBAAkB,MAAM;IAK9B,MAAM,kBAAkB,MAAM;IAK9B,IAAI;IAOJ,OAAO;;;;;IAEP,OAAO;;;;;;IAMP,QAAQ,kBAAiB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;CAE7D,CAAC"}

package/dist/contracts/common.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,CAAC,YAAqB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,CAAC,YAAqB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,GAAG,IAAI,EAAE,EAAE,CAC5B,CAAC;SACE,MAAM,CAAC,MAAM,EAAE;SACf,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;SACjC,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC;SACzC,OAAO,CAAC,YAAY,CAAC;IAE1B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAEnF,OAAO,EAAE,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,CAChC,CAAC;SACE,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;SACjC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;SACxC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;IAEpD,QAAQ,EAAE,CAAC,YAAY,GAAwC,MAAM,EAAE,EAAE,CACvE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;CACnE,CAAC"}

package/dist/contracts/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIrB,CAAC;AAKF,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,YAAY,EAAC,MAAM,WAAW,CAAC;AACvC,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC"}

package/dist/contracts/index.js

@@ -1,14 +0,0 @@
-import { commonContracts } from './common.js';
-import { parseContracts } from './parsing.js';
-import { urlContracts } from './urls.js';
-// Unified contracts export
-export const contracts = {
-    ...commonContracts,
-    ...urlContracts,
-    ...parseContracts,
-};
-// Individual category exports
-export { commonContracts } from './common.js';
-export { urlContracts } from './urls.js';
-export { parseContracts } from './parsing.js';
-//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,2BAA2B;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,GAAG,eAAe;IAClB,GAAG,YAAY;IACf,GAAG,cAAc;CAClB,CAAC;AAEF,8BAA8B;AAG9B,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,YAAY,EAAC,MAAM,WAAW,CAAC;AACvC,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC"}

package/dist/contracts/parsing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parsing.d.ts","sourceRoot":"","sources":["../../src/contracts/parsing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;IACzB,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,UAAU,CAAC;IAMrC,QAAQ,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC;IAM7C,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC;CAK5C,CAAC"}

package/dist/contracts/parsing.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parsing.js","sourceRoot":"","sources":["../../src/contracts/parsing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,CAAsB,MAAS,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEJ,QAAQ,EAAE,CAAsB,UAAa,EAAE,EAAE,CAC/C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;QACjB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QACxC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEzB,MAAM,EAAE,CAAsB,UAAa,EAAE,EAAE,CAC7C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;QACjB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QACxC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;CAC1B,CAAC"}

package/dist/contracts/urls.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"urls.d.ts","sourceRoot":"","sources":["../../src/contracts/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,YAAY;IACvB,GAAG,kBAAkB,MAAM;IAK3B,WAAW;IAQX,QAAQ;CAOT,CAAC"}

package/dist/contracts/urls.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../src/contracts/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,CAAC,YAAqB,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,WAAW,EAAE,GAAG,EAAE,CAChB,CAAC;SACE,GAAG,EAAE;SACL,MAAM,CACL,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EACvE,2DAA2D,CAC5D;IAEL,QAAQ,EAAE,GAAG,EAAE,CACb,CAAC;SACE,GAAG,EAAE;SACL,MAAM,CACL,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAChE,iDAAiD,CAClD;CACN,CAAC"}

package/dist/dot.d.ts

@@ -1,67 +0,0 @@
-/**
- * DOT adapter for `@arki/env`.
- *
- * Wraps `defineEnv()` as a DOT plugin so a DOT app can validate its
- * environment alongside any other services. The plugin is sync (env
- * validation is sync), so the `boot` hook returns the validated env
- * object synchronously through the standard provides channel.
- *
- * @example
- * ```ts
- * import { defineApp } from '@arki/dot';
- * import { env } from '@arki/env/dot';
- * import { z } from 'zod';
- *
- * const app = await defineApp('my-app')
- *   .use(env({ schema: { PORT: z.coerce.number().default(3000) } }))
- *   .boot();
- *
- * console.log(app.services.env.PORT); // number, typed.
- * ```
- *
- * To mount a second env scope in the same app, rename the published wire
- * key at the mount site:
- *
- * ```ts
- * import { rename } from '@arki/dot';
- *
- * .use(env({ schema: appSchema }))
- * .use(rename(env({ schema: publicSchema }), { env: 'publicEnv' }, 'public-env'))
- * ```
- *
- * The `@arki/dot` package is an OPTIONAL peer of `@arki/env`. Importing
- * this adapter without `@arki/dot` installed will fail at module load —
- * that is intentional: the adapter only makes sense in a DOT app.
- */
-import type { ZodType } from 'zod';
-import type { EmptyShape, Plugin } from '@arki/dot/plugin';
-/**
- * Options for the env DOT adapter.
- *
- * @typeParam TSchema - The shape of the `server` schema record. The
- *   resulting `app.services.env` is typed from this.
- */
-export type EnvDotOptions<TSchema extends Record<string, ZodType>> = {
-    /** Zod schemas for each env var the plugin validates. */
-    readonly schema: TSchema;
-    /**
-     * Forwarded to `defineEnv`. If `true`, the validator is skipped
-     * entirely. By default, validation is skipped when `CI` is set or
-     * `NODE_ENV !== 'development'`.
-     */
-    readonly skipValidation?: boolean;
-};
-/** The shape of services published by the env adapter. */
-export type EnvServices<TSchema extends Record<string, ZodType>> = {
-    readonly env: {
-        readonly [K in keyof TSchema]: TSchema[K] extends ZodType<infer U> ? U : never;
-    };
-};
-/**
- * Build a DOT plugin that validates and publishes a typed `env` service.
- *
- * @param options - Schema + optional config.
- * @returns A plugin that publishes `services.env`.
- */
-export declare function env<TSchema extends Record<string, ZodType>>(options: EnvDotOptions<TSchema>): Plugin<EmptyShape, EnvServices<TSchema>>;
-//# sourceMappingURL=dot.d.ts.map

package/dist/dot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dot.d.ts","sourceRoot":"","sources":["../src/dot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAK3D;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACnE,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACjE,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;KAAE,CAAC;CAClG,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,GAAG,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzD,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAC9B,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAoB1C"}

package/dist/dot.js

@@ -1,65 +0,0 @@
-/**
- * DOT adapter for `@arki/env`.
- *
- * Wraps `defineEnv()` as a DOT plugin so a DOT app can validate its
- * environment alongside any other services. The plugin is sync (env
- * validation is sync), so the `boot` hook returns the validated env
- * object synchronously through the standard provides channel.
- *
- * @example
- * ```ts
- * import { defineApp } from '@arki/dot';
- * import { env } from '@arki/env/dot';
- * import { z } from 'zod';
- *
- * const app = await defineApp('my-app')
- *   .use(env({ schema: { PORT: z.coerce.number().default(3000) } }))
- *   .boot();
- *
- * console.log(app.services.env.PORT); // number, typed.
- * ```
- *
- * To mount a second env scope in the same app, rename the published wire
- * key at the mount site:
- *
- * ```ts
- * import { rename } from '@arki/dot';
- *
- * .use(env({ schema: appSchema }))
- * .use(rename(env({ schema: publicSchema }), { env: 'publicEnv' }, 'public-env'))
- * ```
- *
- * The `@arki/dot` package is an OPTIONAL peer of `@arki/env`. Importing
- * this adapter without `@arki/dot` installed will fail at module load —
- * that is intentional: the adapter only makes sense in a DOT app.
- */
-import { plugin } from '@arki/dot/plugin';
-import { defineEnv } from './core/define-env.js';
-/**
- * Build a DOT plugin that validates and publishes a typed `env` service.
- *
- * @param options - Schema + optional config.
- * @returns A plugin that publishes `services.env`.
- */
-export function env(options) {
-    return plugin({
-        name: 'env',
-        version: '0.1.0',
-        configure(ctx) {
-            ctx.registerService('env', 'env');
-        },
-        boot() {
-            const validated = defineEnv({
-                server: options.schema,
-                options: options.skipValidation === undefined ? undefined : { skipValidation: options.skipValidation },
-            });
-            // `defineEnv` returns a Proxy from `@t3-oss/env-core`; we narrow it
-            // to the schema-derived shape so downstream typing flows through.
-            // The runtime guarantee comes from Zod-side validation inside
-            // `defineEnv`. No `any` involved — the cast is type-only.
-            const envObject = validated;
-            return { env: envObject };
-        },
-    });
-}
-//# sourceMappingURL=dot.js.map

package/dist/dot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dot.js","sourceRoot":"","sources":["../src/dot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAwBjD;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CACjB,OAA+B;IAE/B,OAAO,MAAM,CAAC;QACZ,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,OAAO;QAChB,SAAS,CAAC,GAAG;YACX,GAAG,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI;YACF,MAAM,SAAS,GAAG,SAAS,CAAC;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;aACvG,CAAC,CAAC;YACH,oEAAoE;YACpE,kEAAkE;YAClE,8DAA8D;YAC9D,0DAA0D;YAC1D,MAAM,SAAS,GAAG,SAAmD,CAAC;YACtE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/src/contracts/index.ts

@@ -1,17 +0,0 @@
-import { commonContracts } from './common.js';
-import { parseContracts } from './parsing.js';
-import { urlContracts } from './urls.js';
-
-// Unified contracts export
-export const contracts = {
-  ...commonContracts,
-  ...urlContracts,
-  ...parseContracts,
-};
-
-// Individual category exports
-
-
-export {commonContracts} from './common.js';
-export {urlContracts} from './urls.js';
-export {parseContracts} from './parsing.js';

package/src/dot.ts

@@ -1,94 +0,0 @@
-/**
- * DOT adapter for `@arki/env`.
- *
- * Wraps `defineEnv()` as a DOT plugin so a DOT app can validate its
- * environment alongside any other services. The plugin is sync (env
- * validation is sync), so the `boot` hook returns the validated env
- * object synchronously through the standard provides channel.
- *
- * @example
- * ```ts
- * import { defineApp } from '@arki/dot';
- * import { env } from '@arki/env/dot';
- * import { z } from 'zod';
- *
- * const app = await defineApp('my-app')
- *   .use(env({ schema: { PORT: z.coerce.number().default(3000) } }))
- *   .boot();
- *
- * console.log(app.services.env.PORT); // number, typed.
- * ```
- *
- * To mount a second env scope in the same app, rename the published wire
- * key at the mount site:
- *
- * ```ts
- * import { rename } from '@arki/dot';
- *
- * .use(env({ schema: appSchema }))
- * .use(rename(env({ schema: publicSchema }), { env: 'publicEnv' }, 'public-env'))
- * ```
- *
- * The `@arki/dot` package is an OPTIONAL peer of `@arki/env`. Importing
- * this adapter without `@arki/dot` installed will fail at module load —
- * that is intentional: the adapter only makes sense in a DOT app.
- */
-
-import type { ZodType } from 'zod';
-
-import type { EmptyShape, Plugin } from '@arki/dot/plugin';
-import { plugin } from '@arki/dot/plugin';
-
-import { defineEnv } from './core/define-env.js';
-
-/**
- * Options for the env DOT adapter.
- *
- * @typeParam TSchema - The shape of the `server` schema record. The
- *   resulting `app.services.env` is typed from this.
- */
-export type EnvDotOptions<TSchema extends Record<string, ZodType>> = {
-  /** Zod schemas for each env var the plugin validates. */
-  readonly schema: TSchema;
-  /**
-   * Forwarded to `defineEnv`. If `true`, the validator is skipped
-   * entirely. By default, validation is skipped when `CI` is set or
-   * `NODE_ENV !== 'development'`.
-   */
-  readonly skipValidation?: boolean;
-};
-
-/** The shape of services published by the env adapter. */
-export type EnvServices<TSchema extends Record<string, ZodType>> = {
-  readonly env: { readonly [K in keyof TSchema]: TSchema[K] extends ZodType<infer U> ? U : never };
-};
-
-/**
- * Build a DOT plugin that validates and publishes a typed `env` service.
- *
- * @param options - Schema + optional config.
- * @returns A plugin that publishes `services.env`.
- */
-export function env<TSchema extends Record<string, ZodType>>(
-  options: EnvDotOptions<TSchema>,
-): Plugin<EmptyShape, EnvServices<TSchema>> {
-  return plugin({
-    name: 'env',
-    version: '0.1.0',
-    configure(ctx) {
-      ctx.registerService('env', 'env');
-    },
-    boot() {
-      const validated = defineEnv({
-        server: options.schema,
-        options: options.skipValidation === undefined ? undefined : { skipValidation: options.skipValidation },
-      });
-      // `defineEnv` returns a Proxy from `@t3-oss/env-core`; we narrow it
-      // to the schema-derived shape so downstream typing flows through.
-      // The runtime guarantee comes from Zod-side validation inside
-      // `defineEnv`. No `any` involved — the cast is type-only.
-      const envObject = validated as unknown as EnvServices<TSchema>['env'];
-      return { env: envObject };
-    },
-  });
-}