@celsoft/platform 0.1.0 → 0.3.0

package/dist/runtime/index.d.ts

@@ -1,16 +1,26 @@
 import postgres from "postgres";
+import { type Auth } from "./auth.js";
+import { type Email, type EmailBindings } from "./email.js";
+export type { Auth } from "./auth.js";
+export type { Email, EmailMessage } from "./email.js";
 export type Sql = postgres.Sql;
-export interface PlatformBindings {
+export interface PlatformBindings extends EmailBindings {
     DB?: {
         connectionString: string;
     };
+    APP_URL?: string;
+    BETTER_AUTH_SECRET?: string;
 }
 export interface ExecutionContext {
     waitUntil(promise: Promise<unknown>): void;
 }
+export type Session = NonNullable<Awaited<ReturnType<Auth["api"]["getSession"]>>>;
 export interface AppContext<Env> {
     env: Env;
     readonly sql: Sql;
+    readonly email: Email;
+    readonly auth: Auth;
+    session(): Promise<Session | null>;
     waitUntil(promise: Promise<unknown>): void;
 }
 export type Handler<Env> = (request: Request, app: AppContext<Env>) => Response | Promise<Response>;

package/dist/runtime/index.js

@@ -1,12 +1,17 @@
 import postgres from "postgres";
+import { AUTH_PATH, authPool, createAuth } from "./auth.js";
+import { createEmail } from "./email.js";
 const defaultConnect = (connectionString) => postgres(connectionString, { max: 5, fetch_types: false });
 // `Secrets` names the app's secrets, such as `defineApp<{ SESSION_SECRET: string }>`; the
-// platform's own bindings are added to it.
+// platform's own bindings are added to it. With `auth` on, /api/auth/* is handled for the app.
 export function defineApp(handler, options = {}) {
     const connect = options.connect ?? defaultConnect;
     return {
         async fetch(request, env, ctx) {
             let sql;
+            let email;
+            let auth;
+            let pool;
             const app = {
                 env,
                 get sql() {
@@ -14,14 +19,38 @@ export function defineApp(handler, options = {}) {
                         throw new Error("this app has no database; add `database` to platform.jsonc");
                     return (sql ??= connect(env.DB.connectionString));
                 },
+                get email() {
+                    return (email ??= createEmail(env));
+                },
+                get auth() {
+                    if (!env.BETTER_AUTH_SECRET)
+                        throw new Error("this app has no auth; set `auth: true` in platform.jsonc");
+                    if (!env.DB)
+                        throw new Error("auth needs a database; add `database` to platform.jsonc");
+                    return (auth ??= createAuth({
+                        pool: (pool ??= authPool(env.DB.connectionString)),
+                        secret: env.BETTER_AUTH_SECRET,
+                        baseURL: env.APP_URL ?? new URL(request.url).origin,
+                        email: app.email,
+                        requireVerification: env.EMAIL_MODE === "send",
+                    }));
+                },
+                async session() {
+                    return env.BETTER_AUTH_SECRET ? app.auth.api.getSession({ headers: request.headers }) : null;
+                },
                 waitUntil: (promise) => ctx.waitUntil(promise),
             };
             try {
+                if (env.BETTER_AUTH_SECRET && new URL(request.url).pathname.startsWith(`${AUTH_PATH}/`)) {
+                    return await app.auth.handler(request);
+                }
                 return await handler(request, app);
             }
             finally {
                 if (sql)
                     ctx.waitUntil(sql.end({ timeout: 5 }));
+                if (pool)
+                    ctx.waitUntil(pool.end());
             }
         },
     };

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAwBhC,MAAM,cAAc,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhH,0FAA0F;AAC1F,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAkC,OAA4C,EAAE,OAAO,GAAe,EAAE;IAC/H,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAElD,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAA+B,EAAE,GAAqB;YAClF,IAAI,GAAoB,CAAC;YACzB,MAAM,GAAG,GAA2C;gBAClD,GAAG;gBACH,IAAI,GAAG;oBACL,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;oBAC3F,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;aAC/C,CAAC;YAEF,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,IAAI,GAAG;oBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAa,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,WAAW,EAAkC,MAAM,YAAY,CAAC;AAkCzE,MAAM,cAAc,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhH,0FAA0F;AAC1F,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAkC,OAA4C,EAAE,OAAO,GAAe,EAAE;IAC/H,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAElD,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAA+B,EAAE,GAAqB;YAClF,IAAI,GAAoB,CAAC;YACzB,IAAI,KAAwB,CAAC;YAC7B,IAAI,IAAsB,CAAC;YAC3B,IAAI,IAAsB,CAAC;YAE3B,MAAM,GAAG,GAA2C;gBAClD,GAAG;gBACH,IAAI,GAAG;oBACL,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;oBAC3F,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,KAAK;oBACP,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,IAAI;oBACN,IAAI,CAAC,GAAG,CAAC,kBAAkB;wBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;oBACzG,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;oBACxF,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;wBAC1B,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;wBAClD,MAAM,EAAE,GAAG,CAAC,kBAAkB;wBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;wBACnD,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,mBAAmB,EAAE,GAAG,CAAC,UAAU,KAAK,MAAM;qBAC/C,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,KAAK,CAAC,OAAO;oBACX,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC/F,CAAC;gBACD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;aAC/C,CAAC;YAEF,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,kBAAkB,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;oBACxF,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,IAAI,GAAG;oBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,IAAI,IAAI;oBAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/secrets.d.ts

@@ -1,3 +1,5 @@
 export declare const SECRETS_FILE = ".env.secrets";
+export declare const VARS_FILE = ".env";
 export declare function parseDotenv(text: string): Record<string, string>;
-export declare function loadSecrets(startDir: string, env?: NodeJS.ProcessEnv): Promise<Record<string, string>>;
+export declare function loadSecrets(startDir: string, names: string[], env?: NodeJS.ProcessEnv): Promise<Record<string, string>>;
+export declare function loadVars(startDir: string, names: string[], env?: NodeJS.ProcessEnv): Promise<Record<string, string>>;

package/dist/secrets.js

@@ -1,6 +1,7 @@
 import { readFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 export const SECRETS_FILE = ".env.secrets";
+export const VARS_FILE = ".env";
 export function parseDotenv(text) {
     const values = {};
     for (const line of text.split(/\r?\n/)) {
@@ -14,17 +15,23 @@ export function parseDotenv(text) {
     }
     return values;
 }
-// Locally secrets come from the nearest .env.secrets; in CI the workflow passes the
-// Environment's secrets as PLATFORM_SECRETS JSON. Later sources win.
-export async function loadSecrets(startDir, env = process.env) {
-    const fromFile = await findSecretsFile(startDir);
-    const fromJson = env.PLATFORM_SECRETS ? JSON.parse(env.PLATFORM_SECRETS) : {};
-    return { ...fromFile, ...fromJson };
+// Locally secrets come from the nearest .env.secrets; in CI the workflow passes each named
+// secret as an environment variable. The environment wins.
+export async function loadSecrets(startDir, names, env = process.env) {
+    return { ...(await findEnvFile(startDir, SECRETS_FILE)), ...pick(env, names) };
 }
-async function findSecretsFile(dir) {
+// Non-secret values platform.jsonc references as ${NAME}: the nearest .env locally,
+// GitHub secrets passed by name in CI.
+export async function loadVars(startDir, names, env = process.env) {
+    return { ...(await findEnvFile(startDir, VARS_FILE)), ...pick(env, names) };
+}
+function pick(env, names) {
+    return Object.fromEntries(names.filter((name) => env[name]).map((name) => [name, env[name]]));
+}
+async function findEnvFile(dir, name) {
     for (let current = dir;; current = dirname(current)) {
         try {
-            return parseDotenv(await readFile(join(current, SECRETS_FILE), "utf8"));
+            return parseDotenv(await readFile(join(current, name), "utf8"));
         }
         catch {
             if (dirname(current) === current)

package/dist/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAE3C,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAI,CAAC;QACvD,IAAI,KAAK;YAAE,MAAM,CAAC,IAAK,CAAC,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtF,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,KAAK,IAAI,OAAO,GAAG,GAAG,GAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;gBAAE,OAAO,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC;AAEhC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAI,CAAC;QACvD,IAAI,KAAK;YAAE,MAAM,CAAC,IAAK,CAAC,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,KAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IACvG,OAAO,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,oFAAoF;AACpF,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB,EAAE,KAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpG,OAAO,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,IAAI,CAAC,GAAsB,EAAE,KAAe;IACnD,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAY;IAClD,KAAK,IAAI,OAAO,GAAG,GAAG,GAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO;gBAAE,OAAO,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/workflow.d.ts

@@ -3,5 +3,7 @@ export type PackageManager = "pnpm" | "npm";
 export interface WorkflowInput {
     appDir: string;
     packageManager: PackageManager;
+    secrets: string[];
+    variables: string[];
 }
-export declare function renderWorkflow({ appDir, packageManager }: WorkflowInput): string;
+export declare function renderWorkflow({ appDir, packageManager, secrets, variables }: WorkflowInput): string;

package/dist/workflow.js

@@ -1,10 +1,17 @@
 export const WORKFLOW_PATH = ".github/workflows/platform.yml";
 // Written by `platform init` and compared by `platform ci`, so it must stay deterministic.
-export function renderWorkflow({ appDir, packageManager }) {
+// Each secret and variable is passed by name, so the step only ever sees what the app uses.
+export function renderWorkflow({ appDir, packageManager, secrets, variables }) {
     const install = packageManager === "pnpm" ? "pnpm install --frozen-lockfile" : "npm ci";
     const exec = packageManager === "pnpm" ? "pnpm exec platform ci" : "npx --no-install platform ci";
     const setupPnpm = packageManager === "pnpm" ? "\n      - uses: pnpm/action-setup@v4" : "";
     const workingDirectory = appDir === "." ? "" : `\n        working-directory: ${appDir}`;
+    const env = [
+        ...[...new Set(secrets)].sort().map((name) => `${name}: \${{ secrets.${name} }}`),
+        // Config values are stored as secrets too: GitHub prints a step's variables in its public log, but hides secrets.
+        ...[...new Set(variables)].sort().map((name) => `${name}: \${{ secrets.${name} }}`),
+        "GITHUB_TOKEN: ${{ github.token }}",
+    ];
     return `# Written by \`platform init\`; rerun it to update this file.
 name: platform
 
@@ -36,10 +43,7 @@ jobs:
       - run: ${install}
       - run: ${exec}${workingDirectory}
         env:
-          CLOUDFLARE_API_TOKEN: \${{ secrets.CLOUDFLARE_API_TOKEN }}
-          NEON_API_KEY: \${{ secrets.NEON_API_KEY }}
-          PLATFORM_SECRETS: \${{ toJSON(secrets) }}
-          GITHUB_TOKEN: \${{ github.token }}
+${env.map((line) => `          ${line}`).join("\n")}
 `;
 }
 //# sourceMappingURL=workflow.js.map

package/dist/workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAS9D,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,EAAiB;IACtE,MAAM,OAAO,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,MAAM,IAAI,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAClG,MAAM,SAAS,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,gBAAgB,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,MAAM,EAAE,CAAC;IAExF,OAAO;;;;;;;;;;;;;;;;;;;;;;;mCAuB0B,SAAS;;;;mBAIzB,cAAc;eAClB,OAAO;eACP,IAAI,GAAG,gBAAgB;;;;;;CAMrC,CAAC;AACF,CAAC"}
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAW9D,2FAA2F;AAC3F,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAiB;IAC1F,MAAM,OAAO,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxF,MAAM,IAAI,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAClG,MAAM,SAAS,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,gBAAgB,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,MAAM,EAAE,CAAC;IACxF,MAAM,GAAG,GAAG;QACV,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,kBAAkB,IAAI,KAAK,CAAC;QACjF,kHAAkH;QAClH,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,kBAAkB,IAAI,KAAK,CAAC;QACnF,mCAAmC;KACpC,CAAC;IAEF,OAAO;;;;;;;;;;;;;;;;;;;;;;;mCAuB0B,SAAS;;;;mBAIzB,cAAc;eAClB,OAAO;eACP,IAAI,GAAG,gBAAgB;;EAEpC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;CAClD,CAAC;AACF,CAAC"}

package/dist/wrangler-config.d.ts

@@ -5,5 +5,6 @@ export interface WranglerInput {
     hostname: string;
     accountId: string;
     hyperdriveId: string | undefined;
+    vars: Record<string, string>;
 }
-export declare function wranglerConfig({ config, worker, hostname, accountId, hyperdriveId }: WranglerInput): object;
+export declare function wranglerConfig({ config, worker, hostname, accountId, hyperdriveId, vars }: WranglerInput): object;

package/dist/wrangler-config.js

@@ -1,4 +1,4 @@
-export function wranglerConfig({ config, worker, hostname, accountId, hyperdriveId }) {
+export function wranglerConfig({ config, worker, hostname, accountId, hyperdriveId, vars }) {
     return {
         name: worker,
         account_id: accountId,
@@ -8,6 +8,7 @@ export function wranglerConfig({ config, worker, hostname, accountId, hyperdrive
         workers_dev: false,
         routes: [{ pattern: hostname, custom_domain: true }],
         observability: { enabled: true },
+        vars,
         ...(config.frontend && {
             assets: { directory: config.frontend, not_found_handling: "single-page-application", run_worker_first: ["/api/*"] },
         }),

package/dist/wrangler-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrangler-config.js","sourceRoot":"","sources":["../src/wrangler-config.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAiB;IACjG,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,mBAAmB,EAAE,CAAC,eAAe,CAAC;QACtC,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACpD,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI;YACrB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE;SACpH,CAAC;QACF,GAAG,CAAC,YAAY,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"wrangler-config.js","sourceRoot":"","sources":["../src/wrangler-config.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAiB;IACvG,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,mBAAmB,EAAE,CAAC,eAAe,CAAC;QACtC,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACpD,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QAChC,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI;YACrB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE;SACpH,CAAC;QACF,GAAG,CAAC,YAAY,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "@celsoft/platform",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Deploy apps to Cloudflare Workers with Neon Postgres, prod on push and a preview per pull request",
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/celsoft-com/platform.git", "directory": "packages/platform" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/celsoft-com/platform.git",
+    "directory": "packages/platform"
+  },
   "homepage": "https://github.com/celsoft-com/platform#readme",
-  "publishConfig": { "access": "public" },
+  "publishConfig": {
+    "access": "public"
+  },
   "type": "module",
   "bin": {
     "platform": "./dist/cli.js"
@@ -22,13 +28,16 @@
   },
   "dependencies": {
     "@neondatabase/api-client": "^2.7.3",
+    "better-auth": "^1.7.12",
     "cloudflare": "^7.3.0",
     "jsonc-parser": "^3.3.1",
+    "pg": "^8.23.1",
     "postgres": "^3.4.9",
     "wrangler": "^4.152.0",
     "zod": "^4.6.7"
   },
   "devDependencies": {
+    "@types/pg": "^8.23.1",
     "typescript": "7.0.2"
   }
 }

package/schema.json

@@ -11,11 +11,25 @@
     },
     "name": {
       "type": "string",
-      "pattern": "^[a-z][a-z0-9-]{0,49}$"
+      "anyOf": [
+        {
+          "pattern": "^[a-z][a-z0-9-]{0,49}$"
+        },
+        {
+          "pattern": "^\\$\\{[A-Z][A-Z0-9_]*\\}$"
+        }
+      ]
     },
     "hostname": {
       "type": "string",
-      "pattern": "^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}$"
+      "anyOf": [
+        {
+          "pattern": "^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}$"
+        },
+        {
+          "pattern": "^\\$\\{[A-Z][A-Z0-9_]*\\}$"
+        }
+      ]
     },
     "worker": {
       "type": "string",
@@ -24,7 +38,14 @@
     },
     "compatibilityDate": {
       "type": "string",
-      "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
+      "anyOf": [
+        {
+          "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
+        },
+        {
+          "pattern": "^\\$\\{[A-Z][A-Z0-9_]*\\}$"
+        }
+      ]
     },
     "frontend": {
       "description": "Directory holding the built static files",
@@ -36,7 +57,14 @@
       "properties": {
         "neonProject": {
           "type": "string",
-          "pattern": "^[a-z]+-[a-z]+-\\d+$"
+          "anyOf": [
+            {
+              "pattern": "^[a-z]+-[a-z]+-\\d+$"
+            },
+            {
+              "pattern": "^\\$\\{[A-Z][A-Z0-9_]*\\}$"
+            }
+          ]
         },
         "migrate": {
           "type": "string",
@@ -50,12 +78,29 @@
       ],
       "additionalProperties": false
     },
+    "email": {
+      "default": false,
+      "description": "Send email through Resend from noreply@ the app's own hostname; the app only sends",
+      "type": "boolean"
+    },
+    "auth": {
+      "default": false,
+      "description": "Sign-up and login with email and password; needs database and email",
+      "type": "boolean"
+    },
     "secrets": {
       "default": [],
       "type": "array",
       "items": {
         "type": "string",
-        "pattern": "^[A-Z][A-Z0-9_]*$"
+        "anyOf": [
+          {
+            "pattern": "^[A-Z][A-Z0-9_]*$"
+          },
+          {
+            "pattern": "^\\$\\{[A-Z][A-Z0-9_]*\\}$"
+          }
+        ]
       }
     }
   },