@astrale-os/sdk 0.1.6 → 0.1.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Astrale Remote Domain SDK - Define and deploy domains as standalone Hono servers",
   "keywords": [
     "astrale",
@@ -15,6 +15,9 @@
     "type": "git",
     "url": "git+https://github.com/astrale-os/sdk.git"
   },
+  "bin": {
+    "astrale-domain": "./dist/cli/bin.js"
+  },
   "files": [
     "dist",
     "src"
@@ -31,6 +34,14 @@
       "types": "./dist/server/index.d.ts",
       "import": "./dist/server/index.js"
     },
+    "./domain": {
+      "types": "./dist/domain/index.d.ts",
+      "import": "./dist/domain/index.js"
+    },
+    "./cli": {
+      "types": "./dist/cli/index.d.ts",
+      "import": "./dist/cli/index.js"
+    },
     "./deploy": {
       "types": "./dist/deploy/index.d.ts",
       "import": "./dist/deploy/index.js"
@@ -50,8 +61,6 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@astrale-os/kernel-host": ">=0.4.0 <1.0.0",
-    "@astrale-os/kernel-test": ">=0.4.0 <1.0.0",
     "@astrale-os/ox": ">=0.1.0 <1.0.0",
     "@astrale/commitlint-config": "npm:@jsr/astrale__commitlint-config@~2.0.0",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",

package/src/cli/bin.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env bun
+/**
+ * `astrale-domain` bin entry. Runs under bun (native TS) so it can import the
+ * project's `astrale.config.ts` directly — matching the `astrale` CLI.
+ */
+
+import { run } from './run'
+
+run(process.argv.slice(2))
+  .then((code) => process.exit(code))
+  .catch((err: unknown) => {
+    process.stderr.write(`\x1b[31m✗\x1b[0m ${(err as Error).message ?? String(err)}\n`)
+    if (process.env.DEBUG) process.stderr.write(`${(err as Error).stack ?? ''}\n`)
+    process.exit(1)
+  })

package/src/cli/dotenv.ts

@@ -0,0 +1,45 @@
+/**
+ * Minimal dotenv parser — the secrets-file boundary.
+ *
+ * `secrets: '.env.<env>'` in an adapter's params points a gitignored file whose
+ * entire contents are secrets. `loadDotenvFile` reads it into a flat
+ * `Record<string,string>` the CLI hands the adapter (injected into the local
+ * runtime in dev, pushed to a secret store in prod). No `process.env` mutation,
+ * no interpolation magic beyond `${VAR}` against earlier keys in the same file.
+ */
+
+import { readFileSync } from 'node:fs'
+
+export function parseDotenv(contents: string): Record<string, string> {
+  const out: Record<string, string> = {}
+  for (const raw of contents.split('\n')) {
+    const line = raw.trim()
+    if (!line || line.startsWith('#')) continue
+    const match = /^(?:export\s+)?([A-Za-z_]\w*)\s*=\s*(.*)$/.exec(line)
+    if (!match) continue
+    const [, key, rawValue] = match
+    let value = rawValue.trim()
+    // Single quotes mean a LITERAL value (standard dotenv): no `${VAR}`
+    // interpolation, so a secret that legitimately contains a literal `${...}`
+    // (e.g. a password) survives intact instead of being silently blanked.
+    const singleQuoted = value.length >= 2 && value.startsWith("'") && value.endsWith("'")
+    if ((value.length >= 2 && value.startsWith('"') && value.endsWith('"')) || singleQuoted) {
+      value = value.slice(1, -1)
+    }
+    out[key] = singleQuoted
+      ? value
+      : value.replace(/\$\{(\w+)\}/g, (_, name: string) => out[name] ?? '')
+  }
+  return out
+}
+
+/** Read + parse a dotenv file. Returns `{}` if the file is absent (CI-safe). */
+export function loadDotenvFile(path: string): Record<string, string> {
+  let contents: string
+  try {
+    contents = readFileSync(path, 'utf-8')
+  } catch {
+    return {}
+  }
+  return parseDotenv(contents)
+}

package/src/cli/index.ts

@@ -0,0 +1,15 @@
+/**
+ * `@astrale-os/sdk/cli` — the `astrale-domain` CLI (dev | build | deploy) and
+ * the dotenv secrets-file boundary, folded in from the former
+ * `@astrale-os/devkit` package.
+ *
+ * Node-only: the CLI imports `node:fs`/`node:module`/`node:url` and runs under
+ * Bun (it imports the project's `astrale.config.ts` directly). This subpath is
+ * deliberately NOT re-exported from the package barrel — pulling it into the
+ * isomorphic `.` entry would poison browser/worker bundlers that traverse every
+ * re-export (the same rule that keeps `./server` and `./deploy` off the barrel).
+ * The bin lives at `./bin`.
+ */
+
+export { run, parseArgs } from './run'
+export { parseDotenv, loadDotenvFile } from './dotenv'