@digimuza/saas-core 0.0.2

package/dist/cli/index.js

@@ -0,0 +1,198 @@
+#!/usr/bin/env node
+import { createInterface } from "node:readline/promises";
+import { basename, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { parseArgs } from "node:util";
+import { devDown, devInit, devLogs, devStatus, devUp } from "./commands/dev.js";
+import { projectInit, projectStart } from "./commands/project.js";
+import { CliError, failure, info, style } from "./output.js";
+import { normaliseProjectName } from "./templates.js";
+const USAGE = `${style.bold("sc")} — bootstrap and run a @digimuza/saas-core project
+
+${style.bold("Usage")}
+  sc init                   Ask for a project name and create docker-compose.yml
+  sc start                  Start PostgreSQL and wait until it is ready
+
+${style.bold("Advanced development stack")}
+  saas-core dev up          Start postgres, minio and caddy, then wait for health
+  saas-core dev down        Stop the stack, keeping data
+  saas-core dev down --volumes
+                            Stop and delete the volumes
+  saas-core dev status      Show container state
+  saas-core dev logs        Recent logs
+  saas-core dev init        Write the stack files without starting anything
+
+${style.bold("Options")}
+  --project <name>          Compose project name (default: the directory name)
+  --domain <host>           Host Caddy serves (default: app.localhost)
+  --app-port <n>            Dev server port Caddy forwards to (default: 3000)
+  --postgres-port <n>       Host port for postgres (default: 5432)
+  --minio-port <n>          Host port for minio; console takes the next one
+                            (default: 9000)
+  --force                   Overwrite generated files that already exist
+  --follow, -f              Follow logs
+  --volumes                 With \`down\`: delete volumes too
+  --help, -h                This text
+  --version                 Package version
+
+${style.bold("Notes")}
+  The stack is generated into .saas-core/ and meant to be committed — it is
+  infrastructure, and a change to it should show up in a diff.
+
+  Every port binds to 127.0.0.1. Credentials are fixed and weak on purpose: this
+  holds throwaway data, and a generated password is one more thing to look up.
+`;
+async function promptProjectName() {
+    const defaultName = normaliseProjectName(basename(resolve(process.cwd())));
+    const prompt = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await prompt.question(`Project name (${defaultName}): `);
+        return answer.trim() === "" ? defaultName : normaliseProjectName(answer);
+    }
+    finally {
+        prompt.close();
+    }
+}
+/** Parse a port, rejecting anything that would fail later inside Docker. */
+function port(raw, flag) {
+    if (raw === undefined) {
+        return undefined;
+    }
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1 || value > 65_535) {
+        throw new CliError(`${flag} must be a port between 1 and 65535, not "${raw}".`);
+    }
+    return value;
+}
+export async function main(argv, dependencies = { promptProjectName }) {
+    let parsed;
+    try {
+        parsed = parseArgs({
+            args: [...argv],
+            allowPositionals: true,
+            options: {
+                project: { type: "string" },
+                domain: { type: "string" },
+                "app-port": { type: "string" },
+                "postgres-port": { type: "string" },
+                "minio-port": { type: "string" },
+                force: { type: "boolean" },
+                volumes: { type: "boolean" },
+                follow: { type: "boolean", short: "f" },
+                help: { type: "boolean", short: "h" },
+                version: { type: "boolean" },
+            },
+        });
+    }
+    catch (error) {
+        // parseArgs rejects unknown flags; say which and show usage.
+        failure(error instanceof Error ? error.message : "Could not parse arguments.");
+        info("");
+        info(USAGE);
+        return 2;
+    }
+    const { values, positionals } = parsed;
+    if (values.version === true) {
+        const { VERSION } = await import("../index.js");
+        info(VERSION);
+        return 0;
+    }
+    if (values.help === true || positionals.length === 0) {
+        info(USAGE);
+        return values.help === true ? 0 : 2;
+    }
+    const appPort = port(values["app-port"], "--app-port");
+    const postgresPort = port(values["postgres-port"], "--postgres-port");
+    const minioPort = port(values["minio-port"], "--minio-port");
+    const options = {
+        ...(typeof values.project === "string" ? { projectName: values.project } : {}),
+        ...(typeof values.domain === "string" ? { domain: values.domain } : {}),
+        ...(appPort !== undefined ? { appPort } : {}),
+        ...(postgresPort !== undefined ? { postgresPort } : {}),
+        ...(minioPort !== undefined ? { minioPort } : {}),
+        ...(values.force === true ? { force: true } : {}),
+    };
+    const [group, action, ...rest] = positionals;
+    if (group === "init") {
+        if (action !== undefined) {
+            throw new CliError(`Unexpected argument "${action}" after \`sc init\`.`);
+        }
+        await projectInit({
+            ...options,
+            projectName: typeof values.project === "string"
+                ? values.project
+                : await dependencies.promptProjectName(),
+        });
+        return 0;
+    }
+    if (group === "start") {
+        if (action !== undefined) {
+            throw new CliError(`Unexpected argument "${action}" after \`sc start\`.`);
+        }
+        await projectStart(options);
+        return 0;
+    }
+    if (group !== "dev") {
+        throw new CliError(`Unknown command "${String(group)}".`, {
+            hint: "`sc --help` lists what there is.",
+        });
+    }
+    switch (action) {
+        case "up":
+            await devUp(options);
+            return 0;
+        case "down":
+            await devDown({ ...options, ...(values.volumes === true ? { volumes: true } : {}) });
+            return 0;
+        case "status":
+        case "ps":
+            await devStatus(options);
+            return 0;
+        case "logs":
+            await devLogs({
+                ...options,
+                ...(values.follow === true ? { follow: true } : {}),
+                ...(rest[0] !== undefined ? { service: rest[0] } : {}),
+            });
+            return 0;
+        case "init":
+            await devInit(options);
+            return 0;
+        default:
+            throw new CliError(action === undefined
+                ? "`dev` needs a subcommand."
+                : `Unknown subcommand "dev ${action}".`, { hint: "One of: up, down, status, logs, init." });
+    }
+}
+/**
+ * Only run when executed as a binary, not when imported.
+ *
+ * Comparing resolved URLs rather than matching on the path: a substring check
+ * misfires on symlinks and on any path that merely ends with the same characters.
+ * The guard is what lets the tests call `main` directly instead of spawning a
+ * process, which is what makes the argument handling testable at all.
+ */
+const invokedDirectly = process.argv[1] !== undefined && import.meta.url === pathToFileURL(process.argv[1]).href;
+if (invokedDirectly) {
+    try {
+        process.exitCode = await main(process.argv.slice(2));
+    }
+    catch (error) {
+        if (error instanceof CliError) {
+            // A stack trace tells a CLI user nothing actionable and buries the message.
+            failure(error.message);
+            if (error.hint !== undefined) {
+                info(style.dim(`  ${error.hint}`));
+            }
+            process.exitCode = 1;
+        }
+        else {
+            failure(error instanceof Error ? error.message : "Unexpected failure.");
+            if (error instanceof Error && error.stack !== undefined) {
+                info(style.dim(error.stack.split("\n").slice(1, 6).join("\n")));
+            }
+            process.exitCode = 1;
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;;EAE/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;;;;EAInB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC;;;;;;;;;EASxC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;EAarB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;;CAMpB,CAAC;AAMF,KAAK,UAAU,iBAAiB;IAC9B,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,iBAAiB,WAAW,KAAK,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,IAAI,CAAC,GAAuB,EAAE,IAAY;IACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,6CAA6C,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAuB,EACvB,YAAY,GAAqB,EAAE,iBAAiB,EAAE;IAEtD,IAAI,MAAoC,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE;gBACP,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;gBACvC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;gBACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC7B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6DAA6D;QAC7D,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC/E,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEvC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,CAAC;QACZ,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAuB,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAuB,EAAE,iBAAiB,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAuB,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IAEF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IAE7C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,MAAM,sBAAsB,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,WAAW,CAAC;YAChB,GAAG,OAAO;YACV,WAAW,EACT,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,MAAM,YAAY,CAAC,iBAAiB,EAAE;SAC7C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,MAAM,uBAAuB,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACxD,IAAI,EAAE,kCAAkC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,IAAI;YACP,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QAEX,KAAK,MAAM;YACT,MAAM,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QAEX,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,CAAC;QAEX,KAAK,MAAM;YACT,MAAM,OAAO,CAAC;gBACZ,GAAG,OAAO;gBACV,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QAEX,KAAK,MAAM;YACT,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC;QAEX;YACE,MAAM,IAAI,QAAQ,CAChB,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,2BAA2B,MAAM,IAAI,EACzC,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAClD,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAE3F,IAAI,eAAe,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,4EAA4E;YAC5E,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YACxE,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/output.d.ts

@@ -0,0 +1,30 @@
+export declare const style: {
+    bold: (text: string) => string;
+    dim: (text: string) => string;
+    red: (text: string) => string;
+    green: (text: string) => string;
+    yellow: (text: string) => string;
+    cyan: (text: string) => string;
+};
+export declare function info(message: string): void;
+export declare function step(message: string): void;
+export declare function success(message: string): void;
+export declare function warn(message: string): void;
+export declare function failure(message: string): void;
+/** An aligned key/value block. For printing the environment a stack exposes. */
+export declare function table(rows: readonly (readonly [string, string])[]): void;
+/**
+ * A problem the user can fix.
+ *
+ * Printed as a message and a hint, without a stack trace — a stack tells someone
+ * running a CLI nothing they can act on, and buries the one line that matters.
+ */
+export declare class CliError extends Error {
+    readonly name = "CliError";
+    /** Shown after the message, as a suggested next step. */
+    readonly hint?: string;
+    constructor(message: string, options?: {
+        hint?: string;
+    });
+}
+//# sourceMappingURL=output.d.ts.map

package/dist/cli/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,KAAK;IAChB,IAAI,SAAS,MAAM;IACnB,GAAG,SAAS,MAAM;IAClB,GAAG,SAAS,MAAM;IAClB,KAAK,SAAS,MAAM;IACpB,MAAM,SAAS,MAAM;IACrB,IAAI,SAAS,MAAM;CACpB,CAAC;AAEF,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1C;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,gFAAgF;AAChF,wBAAgB,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAQxE;AAED;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,SAAkB,IAAI,cAAc;IAEpC,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,EAK3D;CACF"}

package/dist/cli/output.js

@@ -0,0 +1,66 @@
+/**
+ * Terminal output.
+ *
+ * No dependency: colour is a handful of escape codes and a TTY check. Anything
+ * writing to a pipe or a CI log gets plain text, because escape codes in a build
+ * log are noise a human then has to read around.
+ */
+const useColour = process.stdout.isTTY === true &&
+    process.env.NO_COLOR === undefined &&
+    process.env.TERM !== "dumb";
+const ESC = "\u001b";
+function paint(code, text) {
+    return useColour ? `${ESC}[${code}m${text}${ESC}[0m` : text;
+}
+export const style = {
+    bold: (text) => paint("1", text),
+    dim: (text) => paint("2", text),
+    red: (text) => paint("31", text),
+    green: (text) => paint("32", text),
+    yellow: (text) => paint("33", text),
+    cyan: (text) => paint("36", text),
+};
+export function info(message) {
+    process.stdout.write(`${message}\n`);
+}
+export function step(message) {
+    process.stdout.write(`${style.cyan(">")} ${message}\n`);
+}
+export function success(message) {
+    process.stdout.write(`${style.green("ok")} ${message}\n`);
+}
+export function warn(message) {
+    // Diagnostics go to stderr, so piping stdout stays clean.
+    process.stderr.write(`${style.yellow("!")} ${message}\n`);
+}
+export function failure(message) {
+    process.stderr.write(`${style.red("x")} ${message}\n`);
+}
+/** An aligned key/value block. For printing the environment a stack exposes. */
+export function table(rows) {
+    if (rows.length === 0) {
+        return;
+    }
+    const width = Math.max(...rows.map(([key]) => key.length));
+    for (const [key, value] of rows) {
+        process.stdout.write(`  ${style.dim(key.padEnd(width))}  ${value}\n`);
+    }
+}
+/**
+ * A problem the user can fix.
+ *
+ * Printed as a message and a hint, without a stack trace — a stack tells someone
+ * running a CLI nothing they can act on, and buries the one line that matters.
+ */
+export class CliError extends Error {
+    name = "CliError";
+    /** Shown after the message, as a suggested next step. */
+    hint;
+    constructor(message, options = {}) {
+        super(message);
+        if (options.hint !== undefined) {
+            this.hint = options.hint;
+        }
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;IAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AAE9B,MAAM,GAAG,GAAG,QAAQ,CAAC;AAErB,SAAS,KAAK,CAAC,IAAY,EAAE,IAAY;IACvC,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IACxC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;IACvC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;IACxC,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,KAAK,CAAC,IAA4C;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACf,IAAI,GAAG,UAAU,CAAC;IAEpC,yDAAyD;IAChD,IAAI,CAAU;IAEvB,YAAY,OAAe,EAAE,OAAO,GAAsB,EAAE;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;CACF"}

package/dist/cli/templates.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The local development stack, generated rather than shipped as a static file.
+ *
+ * Generated because ports collide: a developer with an existing PostgreSQL on
+ * 5432 needs a different one, and editing a vendored file means losing the edit
+ * on every upgrade. The output is written into the project and meant to be
+ * committed — it is infrastructure, and it should be reviewable in a diff.
+ */
+export interface StackConfig {
+    /** Compose project name. Namespaces containers, networks and volumes. */
+    readonly projectName: string;
+    /** Hostname Caddy terminates TLS for. */
+    readonly domain: string;
+    /** Where Caddy forwards to — the framework dev server on the host. */
+    readonly appPort: number;
+    readonly postgresPort: number;
+    readonly postgresUser: string;
+    readonly postgresPassword: string;
+    readonly postgresDatabase: string;
+    readonly minioPort: number;
+    readonly minioConsolePort: number;
+    readonly minioAccessKey: string;
+    readonly minioSecretKey: string;
+    readonly storageBucket: string;
+}
+export declare const DEFAULT_STACK: Omit<StackConfig, "projectName">;
+export interface ProjectComposeConfig {
+    readonly projectName: string;
+    readonly postgresPort: number;
+}
+/**
+ * The small stack created by `sc init`.
+ *
+ * Product projects start with PostgreSQL only. Additional infrastructure belongs
+ * in the product's compose file when it has a concrete need for it.
+ */
+export declare function renderProjectComposeFile(config: ProjectComposeConfig): string;
+export declare function renderComposeFile(config: StackConfig): string;
+export declare function renderCaddyfile(config: StackConfig): string;
+/** The `.gitignore` for the generated directory: state is local, config is not. */
+export declare function renderStackGitignore(): string;
+/**
+ * The environment this stack exposes.
+ *
+ * Printed rather than written to a file: configuration comes from Infisical, and
+ * a `.env` sitting in the project is exactly the habit that leads to one in
+ * production.
+ */
+export declare function stackEnvironment(config: StackConfig): (readonly [string, string])[];
+/** A compose project name Docker will accept. */
+export declare function normaliseProjectName(raw: string): string;
+//# sourceMappingURL=templates.d.ts.map

package/dist/cli/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAiB1D,CAAC;AAcF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CA2B7E;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAsF7D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAsB3D;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,IAAI,MAAM,CAS7C;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAcnF;AAED,iDAAiD;AACjD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUxD"}

package/dist/cli/templates.js

@@ -0,0 +1,225 @@
+/**
+ * The local development stack, generated rather than shipped as a static file.
+ *
+ * Generated because ports collide: a developer with an existing PostgreSQL on
+ * 5432 needs a different one, and editing a vendored file means losing the edit
+ * on every upgrade. The output is written into the project and meant to be
+ * committed — it is infrastructure, and it should be reviewable in a diff.
+ */
+export const DEFAULT_STACK = {
+    domain: "app.localhost",
+    appPort: 3000,
+    postgresPort: 5432,
+    /**
+     * Fixed, weak credentials. This stack binds to localhost and holds throwaway
+     * data; a generated password would only need storing somewhere, and a developer
+     * would then have to look it up to run `psql`.
+     */
+    postgresUser: "saas",
+    postgresPassword: "saas",
+    postgresDatabase: "saas_core",
+    minioPort: 9000,
+    minioConsolePort: 9001,
+    minioAccessKey: "saascoredev",
+    minioSecretKey: "saascoredev",
+    storageBucket: "saas-core-dev",
+};
+/**
+ * PostgreSQL 17.
+ *
+ * 15 is the real floor: the schema uses `UNIQUE NULLS NOT DISTINCT` for feature
+ * flag overrides, which does not exist before it. Pinning the major version keeps
+ * a developer's local database from silently diverging from production.
+ */
+const POSTGRES_IMAGE = "postgres:17-alpine";
+const MINIO_IMAGE = "minio/minio:latest";
+const MINIO_CLIENT_IMAGE = "minio/mc:latest";
+const CADDY_IMAGE = "caddy:2-alpine";
+/**
+ * The small stack created by `sc init`.
+ *
+ * Product projects start with PostgreSQL only. Additional infrastructure belongs
+ * in the product's compose file when it has a concrete need for it.
+ */
+export function renderProjectComposeFile(config) {
+    const database = config.projectName.replaceAll("-", "_");
+    return `# Generated by \`sc init\`. Safe to edit and commit.
+name: ${config.projectName}
+
+services:
+  postgres:
+    image: ${POSTGRES_IMAGE}
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: sc
+      POSTGRES_PASSWORD: sc
+      POSTGRES_DB: ${database}
+    ports:
+      - "127.0.0.1:${config.postgresPort}:5432"
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U sc -d ${database}"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+volumes:
+  postgres-data:
+`;
+}
+export function renderComposeFile(config) {
+    return `# Generated by \`saas-core dev\`. Safe to edit and commit.
+#
+# Local development only. Nothing here is hardened: credentials are fixed, TLS
+# uses Caddy's local CA, and every port binds to 127.0.0.1.
+
+name: ${config.projectName}
+
+services:
+  postgres:
+    image: ${POSTGRES_IMAGE}
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${config.postgresUser}
+      POSTGRES_PASSWORD: ${config.postgresPassword}
+      POSTGRES_DB: ${config.postgresDatabase}
+    ports:
+      # Bound to the loopback interface, not 0.0.0.0 — otherwise a laptop on a
+      # cafe network is serving an unauthenticated database to the room.
+      - "127.0.0.1:${config.postgresPort}:5432"
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      # \`--wait\` blocks on this, so "up" means "ready to accept a connection"
+      # rather than "the container started".
+      test: ["CMD-SHELL", "pg_isready -U ${config.postgresUser} -d ${config.postgresDatabase}"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  minio:
+    image: ${MINIO_IMAGE}
+    restart: unless-stopped
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: ${config.minioAccessKey}
+      MINIO_ROOT_PASSWORD: ${config.minioSecretKey}
+    ports:
+      - "127.0.0.1:${config.minioPort}:9000"
+      - "127.0.0.1:${config.minioConsolePort}:9001"
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ["CMD", "mc", "ready", "local"]
+      interval: 2s
+      timeout: 3s
+      retries: 30
+
+  minio-init:
+    # One-shot: MinIO starts with no buckets, and the storage module expects the
+    # configured one to exist. Without this every upload fails on a fresh volume.
+    image: ${MINIO_CLIENT_IMAGE}
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint:
+      - sh
+      - -c
+      - |
+        mc alias set local http://minio:9000 ${config.minioAccessKey} ${config.minioSecretKey}
+        mc mb --ignore-existing local/${config.storageBucket}
+        echo "bucket ${config.storageBucket} ready"
+
+  caddy:
+    image: ${CADDY_IMAGE}
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:80:80"
+      - "127.0.0.1:443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      # Persisted so the local CA survives a restart. Without it every restart
+      # issues a new root and the browser trust has to be redone.
+      - caddy-data:/data
+      - caddy-config:/config
+    extra_hosts:
+      # Caddy proxies to the dev server running on the *host*. Docker Desktop
+      # provides this name; on Linux it has to be mapped explicitly.
+      - "host.docker.internal:host-gateway"
+
+volumes:
+  postgres-data:
+  minio-data:
+  caddy-data:
+  caddy-config:
+`;
+}
+export function renderCaddyfile(config) {
+    return `# Generated by \`saas-core dev\`. Safe to edit and commit.
+
+{
+	# Local development only. Never point this at a public address.
+	admin off
+}
+
+${config.domain} {
+	# Caddy's own CA, so local development runs over HTTPS.
+	#
+	# This matters beyond neatness: the auth module marks session cookies Secure
+	# outside development, WorkOS redirect URIs are easier to keep consistent when
+	# local and production are both https, and SameSite behaviour differs between
+	# schemes. Testing over plain http hides all three.
+	tls internal
+
+	# The framework dev server, on the host rather than in a container — so
+	# hot reload and the real node_modules keep working.
+	reverse_proxy host.docker.internal:${config.appPort}
+}
+`;
+}
+/** The `.gitignore` for the generated directory: state is local, config is not. */
+export function renderStackGitignore() {
+    return `# Generated by \`saas-core dev\`.
+#
+# docker-compose.yml and Caddyfile are checked in — they are infrastructure, and
+# a change to either should show up in a diff. Everything else here is local
+# state.
+*.log
+.stack-state.json
+`;
+}
+/**
+ * The environment this stack exposes.
+ *
+ * Printed rather than written to a file: configuration comes from Infisical, and
+ * a `.env` sitting in the project is exactly the habit that leads to one in
+ * production.
+ */
+export function stackEnvironment(config) {
+    return [
+        ["APP_URL", `https://${config.domain}`],
+        [
+            "DATABASE_URL",
+            `postgres://${config.postgresUser}:${config.postgresPassword}` +
+                `@localhost:${config.postgresPort}/${config.postgresDatabase}`,
+        ],
+        ["STORAGE_BUCKET", config.storageBucket],
+        ["STORAGE_REGION", "us-east-1"],
+        ["STORAGE_ENDPOINT", `http://localhost:${config.minioPort}`],
+        ["STORAGE_ACCESS_KEY_ID", config.minioAccessKey],
+        ["STORAGE_SECRET_ACCESS_KEY", config.minioSecretKey],
+    ];
+}
+/** A compose project name Docker will accept. */
+export function normaliseProjectName(raw) {
+    const cleaned = raw
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/^[^a-z0-9]+/, "")
+        .replace(/[^a-z0-9]+$/, "")
+        .slice(0, 40);
+    // Compose rejects an empty or non-alphanumeric-leading name.
+    return cleaned.length === 0 ? "saas-core" : cleaned;
+}
+//# sourceMappingURL=templates.js.map

package/dist/cli/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAoBH,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB;;;;OAIG;IACH,YAAY,EAAE,MAAM;IACpB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,WAAW;IAC7B,SAAS,EAAE,IAAI;IACf,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,aAAa;IAC7B,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAOrC;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA4B;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEzD,OAAO;QACD,MAAM,CAAC,WAAW;;;;aAIb,cAAc;;;;;qBAKN,QAAQ;;qBAER,MAAM,CAAC,YAAY;;;;iDAIS,QAAQ;;;;;;;CAOxD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,OAAO;;;;;QAKD,MAAM,CAAC,WAAW;;;;aAIb,cAAc;;;uBAGJ,MAAM,CAAC,YAAY;2BACf,MAAM,CAAC,gBAAgB;qBAC7B,MAAM,CAAC,gBAAgB;;;;qBAIvB,MAAM,CAAC,YAAY;;;;;;2CAMG,MAAM,CAAC,YAAY,OAAO,MAAM,CAAC,gBAAgB;;;;;;aAM/E,WAAW;;;;yBAIC,MAAM,CAAC,cAAc;6BACjB,MAAM,CAAC,cAAc;;qBAE7B,MAAM,CAAC,SAAS;qBAChB,MAAM,CAAC,gBAAgB;;;;;;;;;;;;aAY/B,kBAAkB;;;;;;;;+CAQgB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc;wCACrD,MAAM,CAAC,aAAa;uBACrC,MAAM,CAAC,aAAa;;;aAG9B,WAAW;;;;;;;;;;;;;;;;;;;;;CAqBvB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,OAAO;;;;;;;EAOP,MAAM,CAAC,MAAM;;;;;;;;;;;sCAWuB,MAAM,CAAC,OAAO;;CAEnD,CAAC;AACF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;CAOR,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,OAAO;QACL,CAAC,SAAS,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC;QACvC;YACE,cAAc;YACd,cAAc,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE;gBAC5D,cAAc,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE;SACjE;QACD,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC;QACxC,CAAC,gBAAgB,EAAE,WAAW,CAAC;QAC/B,CAAC,kBAAkB,EAAE,oBAAoB,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5D,CAAC,uBAAuB,EAAE,MAAM,CAAC,cAAc,CAAC;QAChD,CAAC,2BAA2B,EAAE,MAAM,CAAC,cAAc,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,GAAG;SAChB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,6DAA6D;IAC7D,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AACtD,CAAC"}

package/dist/config/client.d.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+/**
+ * Public configuration safe to ship in a browser bundle.
+ *
+ * This module is deliberately standalone: it does not import `./sections.js` or
+ * any other server configuration code, so nothing that describes or reads a
+ * secret can be pulled into a client bundle through it.
+ *
+ * Every variable is read as a **literal** `process.env.NEXT_PUBLIC_*` access.
+ * Next.js performs a textual substitution of those expressions at build time; a
+ * dynamic lookup such as `process.env[key]` is not substituted and would be
+ * `undefined` in the browser. Do not refactor these into a loop.
+ */
+declare const clientEnvSchema: z.ZodPipe<z.ZodObject<{
+    NEXT_PUBLIC_APP_NAME: z.ZodString;
+    NEXT_PUBLIC_APP_URL: z.ZodURL;
+    NEXT_PUBLIC_APP_ENV: z.ZodDefault<z.ZodEnum<{
+        development: "development";
+        production: "production";
+        staging: "staging";
+        test: "test";
+    }>>;
+    NEXT_PUBLIC_WORKOS_CLIENT_ID: z.ZodString;
+    NEXT_PUBLIC_REALTIME_URL: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>, z.ZodTransform<{
+    appName: string;
+    appUrl: string;
+    environment: "development" | "production" | "staging" | "test";
+    isProduction: boolean;
+    workosClientId: string;
+    realtimeUrl: string | undefined;
+}, {
+    NEXT_PUBLIC_APP_NAME: string;
+    NEXT_PUBLIC_APP_URL: string;
+    NEXT_PUBLIC_APP_ENV: "development" | "production" | "staging" | "test";
+    NEXT_PUBLIC_WORKOS_CLIENT_ID: string;
+    NEXT_PUBLIC_REALTIME_URL?: string | undefined;
+}>>;
+export type ClientConfig = z.output<typeof clientEnvSchema>;
+/** Typed, validated public configuration. Safe for client components. */
+export declare const clientConfig: {
+    readonly app: {
+        name: string;
+        url: string;
+        environment: "development" | "production" | "staging" | "test";
+        isProduction: boolean;
+    };
+    readonly auth: {
+        workosClientId: string;
+    };
+    readonly realtime: {
+        url: string | undefined;
+    };
+};
+/** Eagerly validate public configuration. Call from a client entry point. */
+export declare function assertClientConfig(): void;
+/** Clear memoised public configuration. Test-only. */
+export declare function resetClientConfigCache(): void;
+export { ConfigError } from "./errors.ts";
+//# sourceMappingURL=client.d.ts.map

package/dist/config/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/config/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;GAWG;AAEH,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;GAmBhB,CAAC;AAEN,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAyC5D,yEAAyE;AACzE,eAAO,MAAM,YAAY;aACnB,GAAG;QAGH,IAAI;QACJ,GAAG;QACH,WAAW;QACX,YAAY;;aAGZ,IAAI;QACG,cAAc;;aAErB,QAAQ;QACD,GAAG;;CAEf,CAAC;AAEF,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,sDAAsD;AACtD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}