@astrale-os/sdk 0.1.6 → 0.1.7

package/dist/cli/bin.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env bun
+/**
+ * `astrale-domain` bin entry. Runs under bun (native TS) so it can import the
+ * project's `astrale.config.ts` directly — matching the `astrale` CLI.
+ */
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA;;;GAGG"}

package/dist/cli/bin.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env bun
+/**
+ * `astrale-domain` bin entry. Runs under bun (native TS) so it can import the
+ * project's `astrale.config.ts` directly — matching the `astrale` CLI.
+ */
+import { run } from './run';
+run(process.argv.slice(2))
+    .then((code) => process.exit(code))
+    .catch((err) => {
+    process.stderr.write(`\x1b[31m✗\x1b[0m ${err.message ?? String(err)}\n`);
+    if (process.env.DEBUG)
+        process.stderr.write(`${err.stack ?? ''}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/dist/cli/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAE3B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACvB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAClC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAqB,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,GAAa,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAA;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/cli/dotenv.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Minimal dotenv parser — the secrets-file boundary.
+ *
+ * `secrets: '.env.<env>'` in an adapter's params points a gitignored file whose
+ * entire contents are secrets. `loadDotenvFile` reads it into a flat
+ * `Record<string,string>` the CLI hands the adapter (injected into the local
+ * runtime in dev, pushed to a secret store in prod). No `process.env` mutation,
+ * no interpolation magic beyond `${VAR}` against earlier keys in the same file.
+ */
+export declare function parseDotenv(contents: string): Record<string, string>;
+/** Read + parse a dotenv file. Returns `{}` if the file is absent (CI-safe). */
+export declare function loadDotenvFile(path: string): Record<string, string>;
+//# sourceMappingURL=dotenv.d.ts.map

package/dist/cli/dotenv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.d.ts","sourceRoot":"","sources":["../../src/cli/dotenv.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBpE;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQnE"}

package/dist/cli/dotenv.js

@@ -0,0 +1,46 @@
+/**
+ * Minimal dotenv parser — the secrets-file boundary.
+ *
+ * `secrets: '.env.<env>'` in an adapter's params points a gitignored file whose
+ * entire contents are secrets. `loadDotenvFile` reads it into a flat
+ * `Record<string,string>` the CLI hands the adapter (injected into the local
+ * runtime in dev, pushed to a secret store in prod). No `process.env` mutation,
+ * no interpolation magic beyond `${VAR}` against earlier keys in the same file.
+ */
+import { readFileSync } from 'node:fs';
+export function parseDotenv(contents) {
+    const out = {};
+    for (const raw of contents.split('\n')) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const match = /^(?:export\s+)?([A-Za-z_]\w*)\s*=\s*(.*)$/.exec(line);
+        if (!match)
+            continue;
+        const [, key, rawValue] = match;
+        let value = rawValue.trim();
+        // Single quotes mean a LITERAL value (standard dotenv): no `${VAR}`
+        // interpolation, so a secret that legitimately contains a literal `${...}`
+        // (e.g. a password) survives intact instead of being silently blanked.
+        const singleQuoted = value.length >= 2 && value.startsWith("'") && value.endsWith("'");
+        if ((value.length >= 2 && value.startsWith('"') && value.endsWith('"')) || singleQuoted) {
+            value = value.slice(1, -1);
+        }
+        out[key] = singleQuoted
+            ? value
+            : value.replace(/\$\{(\w+)\}/g, (_, name) => out[name] ?? '');
+    }
+    return out;
+}
+/** Read + parse a dotenv file. Returns `{}` if the file is absent (CI-safe). */
+export function loadDotenvFile(path) {
+    let contents;
+    try {
+        contents = readFileSync(path, 'utf-8');
+    }
+    catch {
+        return {};
+    }
+    return parseDotenv(contents);
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/cli/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../src/cli/dotenv.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAEtC,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3C,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpE,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAA;QAC/B,IAAI,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC3B,oEAAoE;QACpE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACtF,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;YACxF,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY;YACrB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAA;AAC9B,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `@astrale-os/sdk/cli` — the `astrale-domain` CLI (dev | build | deploy) and
+ * the dotenv secrets-file boundary, folded in from the former
+ * `@astrale-os/devkit` package.
+ *
+ * Node-only: the CLI imports `node:fs`/`node:module`/`node:url` and runs under
+ * Bun (it imports the project's `astrale.config.ts` directly). This subpath is
+ * deliberately NOT re-exported from the package barrel — pulling it into the
+ * isomorphic `.` entry would poison browser/worker bundlers that traverse every
+ * re-export (the same rule that keeps `./server` and `./deploy` off the barrel).
+ * The bin lives at `./bin`.
+ */
+export { run, parseArgs } from './run';
+export { parseDotenv, loadDotenvFile } from './dotenv';
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACtC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA"}

package/dist/cli/index.js

@@ -0,0 +1,15 @@
+/**
+ * `@astrale-os/sdk/cli` — the `astrale-domain` CLI (dev | build | deploy) and
+ * the dotenv secrets-file boundary, folded in from the former
+ * `@astrale-os/devkit` package.
+ *
+ * Node-only: the CLI imports `node:fs`/`node:module`/`node:url` and runs under
+ * Bun (it imports the project's `astrale.config.ts` directly). This subpath is
+ * deliberately NOT re-exported from the package barrel — pulling it into the
+ * isomorphic `.` entry would poison browser/worker bundlers that traverse every
+ * re-export (the same rule that keeps `./server` and `./deploy` off the barrel).
+ * The bin lives at `./bin`.
+ */
+export { run, parseArgs } from './run';
+export { parseDotenv, loadDotenvFile } from './dotenv';
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACtC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA"}

package/dist/cli/run.d.ts

@@ -0,0 +1,79 @@
+/**
+ * The `astrale-domain` CLI — dev | build | deploy.
+ *
+ * Thin by design: it reads `astrale.config.ts`, resolves `envs[<env>] → params`
+ * via the adapter, loads the env's secrets file, then drives `adapter.watch`
+ * (dev) or `adapter.deploy` (build+ship). It prints the resulting URL and the
+ * exact `astrale domain install <url> --direct` line. It boots no kernel and knows
+ * nothing provider-specific — that all lives in the adapter.
+ *
+ * The diagnostic spec (`.astrale/spec.json`) is written AFTER watch/deploy
+ * returns, at the live URL: the install graph (and therefore `schemaHash`)
+ * embeds `binding.remoteUrl`s derived from the serving URL, so a spec built at
+ * a guessed URL would carry a hash that never matches the worker's `/meta`.
+ * Only `astrale-domain build` (no URL exists yet) uses an explicit placeholder
+ * and says so.
+ *
+ *   astrale-domain dev               # = deploy dev --watch
+ *   astrale-domain prod              # = deploy prod
+ *   astrale-domain deploy <env>      # any env key
+ *   astrale-domain build             # rebuild spec only (placeholder URL)
+ *   astrale-domain publish [env]     # = deploy [prod] then register the URL
+ *
+ * `publish` (and the `--publish` tail-flag on deploy) deploys, then registers
+ * the resulting URL in the admin catalog by SHELLING OUT to the operator CLI
+ * (`astrale domain publish --origin --name --public-url`). Auth lives entirely
+ * in that CLI — this build tool never touches credentials; it just hands off the
+ * fresh URL it alone knows. Requires `astrale` on PATH (the same CLI the deploy
+ * footer already points you at for `domain install`).
+ */
+import type { DeployConfig } from '../config/deploy';
+type ParsedArgs = {
+    command: 'dev' | 'build' | 'deploy';
+    env: string;
+    watch: boolean;
+    /** `--port <n>` (dev only) — overrides the env's local dev port. */
+    port?: number;
+    /** `--host <url>` (dev only) — public URL of a tunnel/proxy front: binds 0.0.0.0 + pins WORKER_URL. */
+    host?: string;
+    /** Register the deployed URL in the admin catalog (the `publish` command / `--publish` flag). */
+    publish?: boolean;
+    /** `--name <slug>` — registry name to publish under (default: package.json `name`). */
+    name?: string;
+    /** `--install-by-default` — mark the published domain for install on every new instance. */
+    installByDefault?: boolean;
+};
+export declare function run(argv: readonly string[]): Promise<number>;
+/**
+ * Watch `astrale.config.ts` while `dev` runs: on change, re-import the config
+ * (cache-busted), re-resolve env params + secrets, and re-run the adapter's
+ * codegen via `adapter.regenerate` — the running dev server (e.g. `wrangler
+ * dev`, which watches its generated config + entry) reloads them itself, so a
+ * config edit lands without restarting the CLI.
+ *
+ * Watches the config's DIRECTORY, not the file: editors save via atomic
+ * rename, which silently kills an inode-bound watch.
+ *
+ * Deliberate limits, surfaced to the user instead of half-applied:
+ *  • origin / adapter changes re-key the worker's identity → restart;
+ *  • a mid-edit broken config (syntax error, bad env) warns and keeps the
+ *    previous generation running;
+ *  • modules the config IMPORTS (e.g. the schema) stay module-cached — only
+ *    the config file itself is re-evaluated, which covers everything
+ *    `defineDomain` owns (vars, requires, postInstall, wrangler overlay…).
+ */
+export declare function watchConfigForRegen(args: {
+    configPath: string;
+    initial: DeployConfig;
+    env: string;
+    /** CLI flag overrides (dev --port / --host) — re-applied on every regen. */
+    paramOverrides: Record<string, unknown>;
+    projectDir: string;
+    specPath: string;
+    clientDir?: string;
+    url: string;
+    onReload: () => void;
+}): () => void;
+export declare function parseArgs(argv: readonly string[]): ParsedArgs;
+export {};
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAUH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAOpD,KAAK,UAAU,GAAG;IAChB,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAA;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;IACd,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uGAAuG;IACvG,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iGAAiG;IACjG,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,CAAA;AAED,wBAAsB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyIlE;AAqHD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,IAAI,CAAA;CACrB,GAAG,MAAM,IAAI,CAiFb;AAwGD,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA6E7D"}