@geekmidas/cli 10.0.0-alpha.1 → 10.0.0-alpha.100

package/dist/deploy/public.mjs

@@ -0,0 +1,145 @@
+import { t as GkmError } from "../errors-D8Gwp5kU.mjs";
+import { n as CommandTimedOut, o as GKM_HOME_ENV, s as gkmHome, t as CommandFailed } from "../run-BJLIerMM.mjs";
+import { n as chainCredentials, r as storedCredentials, t as MissingCredential } from "../credentials-B5N5yKk6.mjs";
+import { V as UnknownStageProvider, et as ProvisionedBucketUnreachable } from "../workspace-D1QbNd55.mjs";
+import { a as UnknownDeployTarget, i as DeployTargetNotYetSupported } from "../define-6poNqm5O.mjs";
+import { J as DEV_SERVICES, Jt as detectPackageManager, X as ExternalServicesNotConfigured, Y as DevServicesNeedServerTarget, k as StageProviderDisabled, q as AllowDevServicesTakesNoValue, t as DeploySeedsFailed } from "../seeds-E4nUeXTl.mjs";
+import { n as deployIdentity } from "../identity-CBXr4wNi.mjs";
+import { n as ConstructsNotSerializable, o as SandboxWorkerFailed, t as ConstructDiscoveryFailed } from "../discover-kziEht4W.mjs";
+import { n as SandboxCwdEscape, o as confineCwd, r as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-CbVB7uOD.mjs";
+import { ConfigLoadFailed, ConfigObjectNotSerializable } from "../config.mjs";
+import { i as TargetRuntimeMismatch, l as TargetPackageNotFound, n as TargetEntryInvalid, r as TargetPackageInvalid, s as TargetRuntimeUndeclared, t as InvalidTargetOptions } from "../resolve-Bei6BMbw.mjs";
+import { a as UnknownDeployApps, i as TargetBuildsNothing, n as NoDeployableApps, r as RollbackFailed, t as deploy } from "../deploy-BSilGXuR.mjs";
+import { n as SANDBOX_ENV_ALLOWLIST, r as allowlistedEnv, t as LocalSandbox } from "../local-BwC2v2Y8.mjs";
+import { a as DeploymentTimedOut, f as StateLocked, g as StateVersionConflict, i as DeploymentFailed, u as LocalStateInCi } from "../sniffer-bUiSXLMj.mjs";
+import { _ as RegistryNotConfigured, g as RegistryAmbiguous, h as HealthCheckTimedOut, m as DeployMigrationsFailed, n as FrontendDeployFailed, r as MissingEnvVars, t as BackendDeployFailed, v as RegistryNotFound, y as ProjectNotOwned } from "../engine-32gL2ju3.mjs";
+import { i as rollbackStage, n as RollbackNeedsApp, r as StageNeverDeployed, t as NothingToRollBack } from "../rollback-BJ3H4kQ8.mjs";
+import { t as ProviderRemoved } from "../provider-CEOKk8NS.mjs";
+import { i as SurfacesUnhealthy, r as SstOutputsUnreadable, t as SstConfigNotFound } from "../sst-C1pxbFEd.mjs";
+import { join, resolve } from "node:path";
+import { existsSync } from "node:fs";
+//#region src/sandbox/install.ts
+/**
+* Installing a project's dependencies in a sandbox, with or without their
+* lifecycle scripts.
+*
+* `postinstall` is the oldest way into a build machine: any package in the
+* lockfile — a dependency of a dependency — runs whatever it likes the moment
+* it is installed. For a build the host trusts that is how native modules get
+* built. For one it does not, the scripts are skipped, and the few packages
+* that genuinely need theirs (esbuild's binary, a database driver) are named
+* and rebuilt — with nothing but the sandbox's environment either way.
+*/
+/** Long enough for a cold install of a large monorepo. */
+const INSTALL_TIMEOUT_MS = 9e5;
+/** A name in `allowScripts` that is not a package name. */
+var InstallAllowlistNameInvalid = class extends GkmError {
+	packageName;
+	constructor(packageName) {
+		super(`'${packageName}' is not a package name, so its scripts cannot be allowed. Name the package as it appears in package.json — 'esbuild', '@prisma/client'.`);
+		this.packageName = packageName;
+		this.name = "InstallAllowlistNameInvalid";
+	}
+};
+/** The package manager has no way to run only some packages' scripts. */
+var InstallScriptsAllowlistUnsupported = class extends GkmError {
+	packageManager;
+	allowScripts;
+	constructor(packageManager, allowScripts) {
+		super(`${packageManager} cannot rebuild named packages after an install without scripts, so ${allowScripts.join(", ")} cannot be allowed theirs. Use pnpm, npm or Yarn 2+, or install with every script skipped.`);
+		this.packageManager = packageManager;
+		this.allowScripts = allowScripts;
+		this.name = "InstallScriptsAllowlistUnsupported";
+	}
+};
+/**
+* npm's package-name grammar, less a leading `-`: each name is an argument to
+* `rebuild`, and must never be read as a flag.
+*/
+const PACKAGE_NAME = /^(?:@[a-z0-9~][a-z0-9._~-]*\/)?[a-z0-9~][a-z0-9._~-]*$/;
+/**
+* The commands an install runs, in order. Exported for the tests, which
+* check each package manager's flags without installing with all four.
+*/
+function installCommands(packageManager, cwd, options = {}) {
+	const ignore = options.ignoreScripts ?? false;
+	const allow = ignore ? [...options.allowScripts ?? []] : [];
+	for (const name of allow) if (!PACKAGE_NAME.test(name)) throw new InstallAllowlistNameInvalid(name);
+	switch (packageManager) {
+		case "pnpm": return [["pnpm", [
+			"install",
+			"--frozen-lockfile",
+			...ignore ? ["--ignore-scripts"] : []
+		]], ...allow.length > 0 ? [["pnpm", [
+			"rebuild",
+			"--config.dangerouslyAllowAllBuilds=true",
+			...allow
+		]]] : []];
+		case "npm": return [["npm", [existsSync(join(cwd, "package-lock.json")) ? "ci" : "install", ...ignore ? ["--ignore-scripts"] : []]], ...allow.length > 0 ? [["npm", [
+			"rebuild",
+			"--dangerously-allow-all-scripts",
+			...allow
+		]]] : []];
+		case "yarn":
+			if (existsSync(join(cwd, ".yarnrc.yml"))) return [["yarn", [
+				"install",
+				"--immutable",
+				...ignore ? ["--mode=skip-build"] : []
+			]], ...allow.length > 0 ? [["yarn", ["rebuild", ...allow]]] : []];
+			if (allow.length > 0) throw new InstallScriptsAllowlistUnsupported("Yarn 1", allow);
+			return [["yarn", [
+				"install",
+				"--frozen-lockfile",
+				...ignore ? ["--ignore-scripts"] : []
+			]]];
+		case "bun":
+			if (allow.length > 0) throw new InstallScriptsAllowlistUnsupported("bun", allow);
+			return [["bun", [
+				"install",
+				"--frozen-lockfile",
+				...ignore ? ["--ignore-scripts"] : []
+			]]];
+	}
+}
+/**
+* Install the project's dependencies in `sandbox`.
+*
+* ```ts
+* // A checkout nobody has reviewed: no scripts but esbuild's.
+* await installDependencies(sandbox, {
+*   ignoreScripts: true,
+*   allowScripts: ['esbuild'],
+* });
+* ```
+*
+* Resolves with each command's result, in order — with its output when
+* `output` is `capture`.
+*
+* @throws {CommandFailed} when the package manager exits unsuccessfully.
+* @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package
+*   manager cannot honour, before anything is installed.
+*/
+async function installDependencies(sandbox, options = {}) {
+	const cwd = options.cwd ?? sandbox.root;
+	const results = [];
+	const packageManager = options.packageManager ?? detectPackageManager(resolve(sandbox.root, cwd));
+	for (const [command, args] of installCommands(packageManager, resolve(sandbox.root, cwd), options)) {
+		const result = await sandbox.exec(command, args, {
+			cwd,
+			env: {
+				...sandbox.env,
+				...options.env
+			},
+			timeoutMs: options.timeoutMs ?? 9e5,
+			output: options.output ?? "inherit",
+			...options.signal ? { signal: options.signal } : {}
+		});
+		results.push(result);
+		if (result.exitCode !== 0) throw new CommandFailed(command, args, result.exitCode, result.signal);
+	}
+	return results;
+}
+//#endregion
+export { AllowDevServicesTakesNoValue, BackendDeployFailed, CommandFailed, CommandTimedOut, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, DEV_SERVICES, DeployMigrationsFailed, DeploySeedsFailed, DeployTargetNotYetSupported, DeploymentFailed, DeploymentTimedOut, DevServicesNeedServerTarget, ExternalServicesNotConfigured, FrontendDeployFailed, GKM_HOME_ENV, HealthCheckTimedOut, INSTALL_TIMEOUT_MS, InstallAllowlistNameInvalid, InstallScriptsAllowlistUnsupported, InvalidTargetOptions, LocalSandbox, LocalStateInCi, MissingCredential, MissingEnvVars, NoDeployableApps, NothingToRollBack, ProjectNotOwned, ProviderRemoved, ProvisionedBucketUnreachable, RegistryAmbiguous, RegistryNotConfigured, RegistryNotFound, RollbackFailed, RollbackNeedsApp, SANDBOX_ENV_ALLOWLIST, SECRETS_DIR_ENV, SandboxCwdEscape, SandboxWorkerFailed, SecretNameInvalid, SstConfigNotFound, SstOutputsUnreadable, StageNeverDeployed, StageProviderDisabled, StateLocked, StateVersionConflict, SurfacesUnhealthy, TargetBuildsNothing, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployApps, UnknownDeployTarget, UnknownStageProvider, allowlistedEnv, chainCredentials, confineCwd, deploy, deployIdentity, gkmHome, installDependencies, rollbackStage, storedCredentials };
+
+//# sourceMappingURL=public.mjs.map

package/dist/deploy/public.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.mjs","names":[],"sources":["../../src/sandbox/install.ts"],"sourcesContent":["/**\n * Installing a project's dependencies in a sandbox, with or without their\n * lifecycle scripts.\n *\n * `postinstall` is the oldest way into a build machine: any package in the\n * lockfile — a dependency of a dependency — runs whatever it likes the moment\n * it is installed. For a build the host trusts that is how native modules get\n * built. For one it does not, the scripts are skipped, and the few packages\n * that genuinely need theirs (esbuild's binary, a database driver) are named\n * and rebuilt — with nothing but the sandbox's environment either way.\n */\n\nimport { existsSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\nimport { detectPackageManager, type PackageManager } from '../docker/templates';\nimport { GkmError } from '../errors';\nimport { CommandFailed } from '../run';\nimport type { Sandbox, SandboxOutput, SandboxResult } from './sandbox';\n\n/** Long enough for a cold install of a large monorepo. */\nexport const INSTALL_TIMEOUT_MS = 15 * 60_000;\n\nexport interface InstallOptions {\n\t/** The directory to install in. Defaults to the sandbox's root. */\n\tcwd?: string;\n\t/** Defaults to the one the lockfile above `cwd` names. */\n\tpackageManager?: PackageManager;\n\t/**\n\t * Skip every lifecycle script — dependencies' and the project's own —\n\t * except those of {@link allowScripts}. Defaults to false: scripts run as\n\t * a plain install runs them, under the package manager's own policy —\n\t * npm 12 and pnpm 10 skip dependencies' scripts nobody approved.\n\t */\n\tignoreScripts?: boolean;\n\t/**\n\t * With `ignoreScripts`, the packages whose scripts still run: rebuilt by\n\t * name once the install is done.\n\t */\n\tallowScripts?: readonly string[];\n\t/** Variables the install needs beyond the sandbox's own. */\n\tenv?: Readonly<Record<string, string>>;\n\t/** Defaults to {@link INSTALL_TIMEOUT_MS}, for each command. */\n\ttimeoutMs?: number;\n\t/** Where the package manager's output goes. Defaults to `inherit`. */\n\toutput?: SandboxOutput;\n\tsignal?: AbortSignal;\n}\n\n/** A name in `allowScripts` that is not a package name. */\nexport class InstallAllowlistNameInvalid extends GkmError {\n\tconstructor(readonly packageName: string) {\n\t\tsuper(\n\t\t\t`'${packageName}' is not a package name, so its scripts cannot be ` +\n\t\t\t\t'allowed. Name the package as it appears in package.json — ' +\n\t\t\t\t\"'esbuild', '@prisma/client'.\",\n\t\t);\n\t\tthis.name = 'InstallAllowlistNameInvalid';\n\t}\n}\n\n/** The package manager has no way to run only some packages' scripts. */\nexport class InstallScriptsAllowlistUnsupported extends GkmError {\n\tconstructor(\n\t\treadonly packageManager: string,\n\t\treadonly allowScripts: readonly string[],\n\t) {\n\t\tsuper(\n\t\t\t`${packageManager} cannot rebuild named packages after an install ` +\n\t\t\t\t`without scripts, so ${allowScripts.join(', ')} cannot be allowed ` +\n\t\t\t\t'theirs. Use pnpm, npm or Yarn 2+, or install with every script ' +\n\t\t\t\t'skipped.',\n\t\t);\n\t\tthis.name = 'InstallScriptsAllowlistUnsupported';\n\t}\n}\n\n/**\n * npm's package-name grammar, less a leading `-`: each name is an argument to\n * `rebuild`, and must never be read as a flag.\n */\nconst PACKAGE_NAME = /^(?:@[a-z0-9~][a-z0-9._~-]*\\/)?[a-z0-9~][a-z0-9._~-]*$/;\n\n/**\n * The commands an install runs, in order. Exported for the tests, which\n * check each package manager's flags without installing with all four.\n */\nexport function installCommands(\n\tpackageManager: PackageManager,\n\tcwd: string,\n\toptions: Pick<InstallOptions, 'ignoreScripts' | 'allowScripts'> = {},\n): [string, string[]][] {\n\tconst ignore = options.ignoreScripts ?? false;\n\tconst allow = ignore ? [...(options.allowScripts ?? [])] : [];\n\tfor (const name of allow) {\n\t\tif (!PACKAGE_NAME.test(name)) throw new InstallAllowlistNameInvalid(name);\n\t}\n\n\tswitch (packageManager) {\n\t\tcase 'pnpm':\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'pnpm',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t\t// pnpm 10 builds no dependency it was not told to, even by name;\n\t\t\t\t// this command names exactly the ones allowed, so it may build\n\t\t\t\t// what it names.\n\t\t\t\t...(allow.length > 0\n\t\t\t\t\t? [\n\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t'pnpm',\n\t\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t\t'rebuild',\n\t\t\t\t\t\t\t\t\t'--config.dangerouslyAllowAllBuilds=true',\n\t\t\t\t\t\t\t\t\t...allow,\n\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t] as [string, string[]],\n\t\t\t\t\t\t]\n\t\t\t\t\t: []),\n\t\t\t];\n\t\tcase 'npm': {\n\t\t\tconst locked = existsSync(join(cwd, 'package-lock.json'));\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'npm',\n\t\t\t\t\t[locked ? 'ci' : 'install', ...(ignore ? ['--ignore-scripts'] : [])],\n\t\t\t\t],\n\t\t\t\t// npm 12 runs no dependency's install script its `allowScripts`\n\t\t\t\t// policy does not approve, rebuilt by name or not, and refuses\n\t\t\t\t// `--allow-scripts` on a project's command line. This command\n\t\t\t\t// names exactly the packages allowed, so it may run what it names.\n\t\t\t\t...(allow.length > 0\n\t\t\t\t\t? [\n\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\t'npm',\n\t\t\t\t\t\t\t\t['rebuild', '--dangerously-allow-all-scripts', ...allow],\n\t\t\t\t\t\t\t] as [string, string[]],\n\t\t\t\t\t\t]\n\t\t\t\t\t: []),\n\t\t\t];\n\t\t}\n\t\tcase 'yarn': {\n\t\t\t// Yarn 2+ keeps a `.yarnrc.yml`; it skips builds by mode and can\n\t\t\t// rebuild by name. Yarn 1 can only skip them all.\n\t\t\tconst berry = existsSync(join(cwd, '.yarnrc.yml'));\n\t\t\tif (berry) {\n\t\t\t\treturn [\n\t\t\t\t\t[\n\t\t\t\t\t\t'yarn',\n\t\t\t\t\t\t[\n\t\t\t\t\t\t\t'install',\n\t\t\t\t\t\t\t'--immutable',\n\t\t\t\t\t\t\t...(ignore ? ['--mode=skip-build'] : []),\n\t\t\t\t\t\t],\n\t\t\t\t\t],\n\t\t\t\t\t...(allow.length > 0\n\t\t\t\t\t\t? [['yarn', ['rebuild', ...allow]] as [string, string[]]]\n\t\t\t\t\t\t: []),\n\t\t\t\t];\n\t\t\t}\n\t\t\tif (allow.length > 0) {\n\t\t\t\tthrow new InstallScriptsAllowlistUnsupported('Yarn 1', allow);\n\t\t\t}\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'yarn',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t];\n\t\t}\n\t\tcase 'bun':\n\t\t\tif (allow.length > 0) {\n\t\t\t\tthrow new InstallScriptsAllowlistUnsupported('bun', allow);\n\t\t\t}\n\t\t\treturn [\n\t\t\t\t[\n\t\t\t\t\t'bun',\n\t\t\t\t\t[\n\t\t\t\t\t\t'install',\n\t\t\t\t\t\t'--frozen-lockfile',\n\t\t\t\t\t\t...(ignore ? ['--ignore-scripts'] : []),\n\t\t\t\t\t],\n\t\t\t\t],\n\t\t\t];\n\t}\n}\n\n/**\n * Install the project's dependencies in `sandbox`.\n *\n * ```ts\n * // A checkout nobody has reviewed: no scripts but esbuild's.\n * await installDependencies(sandbox, {\n *   ignoreScripts: true,\n *   allowScripts: ['esbuild'],\n * });\n * ```\n *\n * Resolves with each command's result, in order — with its output when\n * `output` is `capture`.\n *\n * @throws {CommandFailed} when the package manager exits unsuccessfully.\n * @throws {InstallScriptsAllowlistUnsupported} for an allowlist the package\n *   manager cannot honour, before anything is installed.\n */\nexport async function installDependencies(\n\tsandbox: Sandbox,\n\toptions: InstallOptions = {},\n): Promise<SandboxResult[]> {\n\tconst cwd = options.cwd ?? sandbox.root;\n\tconst results: SandboxResult[] = [];\n\tconst packageManager =\n\t\toptions.packageManager ?? detectPackageManager(resolve(sandbox.root, cwd));\n\n\tfor (const [command, args] of installCommands(\n\t\tpackageManager,\n\t\tresolve(sandbox.root, cwd),\n\t\toptions,\n\t)) {\n\t\tconst result = await sandbox.exec(command, args, {\n\t\t\tcwd,\n\t\t\tenv: { ...sandbox.env, ...options.env },\n\t\t\ttimeoutMs: options.timeoutMs ?? INSTALL_TIMEOUT_MS,\n\t\t\toutput: options.output ?? 'inherit',\n\t\t\t...(options.signal ? { signal: options.signal } : {}),\n\t\t});\n\t\tresults.push(result);\n\t\tif (result.exitCode !== 0) {\n\t\t\tthrow new CommandFailed(\n\t\t\t\tcommand,\n\t\t\t\targs,\n\t\t\t\tresult.exitCode,\n\t\t\t\tresult.signal as NodeJS.Signals | null,\n\t\t\t);\n\t\t}\n\t}\n\treturn results;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBAAqB;;AA6BlC,IAAa,8BAAb,cAAiD,SAAS;CACpC;CAArB,YAAY,aAA8B;EACzC,MACC,IAAI,YAAY,yIAGjB;EALoB,KAAA,cAAA;EAMpB,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,qCAAb,cAAwD,SAAS;CAEtD;CACA;CAFV,YACC,gBACA,cACC;EACD,MACC,GAAG,eAAe,sEACM,aAAa,KAAK,IAAI,EAAE,2FAGjD;EARS,KAAA,iBAAA;EACA,KAAA,eAAA;EAQT,KAAK,OAAO;CACb;AACD;;;;;AAMA,MAAM,eAAe;;;;;AAMrB,SAAgB,gBACf,gBACA,KACA,UAAkE,CAAC,GAC5C;CACvB,MAAM,SAAS,QAAQ,iBAAiB;CACxC,MAAM,QAAQ,SAAS,CAAC,GAAI,QAAQ,gBAAgB,CAAC,CAAE,IAAI,CAAC;CAC5D,KAAK,MAAM,QAAQ,OAClB,IAAI,CAAC,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI,4BAA4B,IAAI;CAGzE,QAAQ,gBAAR;EACC,KAAK,QACJ,OAAO,CACN,CACC,QACA;GACC;GACA;GACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;EACtC,CACD,GAIA,GAAI,MAAM,SAAS,IAChB,CACA,CACC,QACA;GACC;GACA;GACA,GAAG;EACJ,CACD,CACD,IACC,CAAC,CACL;EACD,KAAK,OAEJ,OAAO,CACN,CACC,OACA,CAJa,WAAW,KAAK,KAAK,mBAAmB,CAI/C,IAAI,OAAO,WAAW,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAE,CACpE,GAKA,GAAI,MAAM,SAAS,IAChB,CACA,CACC,OACA;GAAC;GAAW;GAAmC,GAAG;EAAK,CACxD,CACD,IACC,CAAC,CACL;EAED,KAAK;GAIJ,IADc,WAAW,KAAK,KAAK,aAAa,CACxC,GACP,OAAO,CACN,CACC,QACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,mBAAmB,IAAI,CAAC;GACvC,CACD,GACA,GAAI,MAAM,SAAS,IAChB,CAAC,CAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,CAAuB,IACtD,CAAC,CACL;GAED,IAAI,MAAM,SAAS,GAClB,MAAM,IAAI,mCAAmC,UAAU,KAAK;GAE7D,OAAO,CACN,CACC,QACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;GACtC,CACD,CACD;EAED,KAAK;GACJ,IAAI,MAAM,SAAS,GAClB,MAAM,IAAI,mCAAmC,OAAO,KAAK;GAE1D,OAAO,CACN,CACC,OACA;IACC;IACA;IACA,GAAI,SAAS,CAAC,kBAAkB,IAAI,CAAC;GACtC,CACD,CACD;CACF;AACD;;;;;;;;;;;;;;;;;;;AAoBA,eAAsB,oBACrB,SACA,UAA0B,CAAC,GACA;CAC3B,MAAM,MAAM,QAAQ,OAAO,QAAQ;CACnC,MAAM,UAA2B,CAAC;CAClC,MAAM,iBACL,QAAQ,kBAAkB,qBAAqB,QAAQ,QAAQ,MAAM,GAAG,CAAC;CAE1E,KAAK,MAAM,CAAC,SAAS,SAAS,gBAC7B,gBACA,QAAQ,QAAQ,MAAM,GAAG,GACzB,OACD,GAAG;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,SAAS,MAAM;GAChD;GACA,KAAK;IAAE,GAAG,QAAQ;IAAK,GAAG,QAAQ;GAAI;GACtC,WAAW,QAAQ,aAAA;GACnB,QAAQ,QAAQ,UAAU;GAC1B,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACpD,CAAC;EACD,QAAQ,KAAK,MAAM;EACnB,IAAI,OAAO,aAAa,GACvB,MAAM,IAAI,cACT,SACA,MACA,OAAO,UACP,OAAO,MACR;CAEF;CACA,OAAO;AACR"}

package/dist/deploy/sniffer-envkit-patch.cjs

@@ -1,8 +1,16 @@
-const require_chunk = require('../chunk-CUT6urMc.cjs');
-const __geekmidas_envkit_sniffer = require_chunk.__toESM(require("@geekmidas/envkit/sniffer"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _geekmidas_envkit_sniffer = require("@geekmidas/envkit/sniffer");
 //#region src/deploy/sniffer-envkit-patch.ts
-if (!globalThis.__envSniffer) globalThis.__envSniffer = new __geekmidas_envkit_sniffer.SnifferEnvironmentParser();
+/**
+* Patched @geekmidas/envkit module for entry app sniffing.
+*
+* This module re-exports the SnifferEnvironmentParser as EnvironmentParser,
+* allowing entry apps to be imported while capturing their env var usage.
+*
+* The actual sniffer instance is stored in globalThis.__envSniffer
+* so the worker script can retrieve the captured variables.
+*/
+if (!globalThis.__envSniffer) globalThis.__envSniffer = new _geekmidas_envkit_sniffer.SnifferEnvironmentParser();
 /**
 * Patched EnvironmentParser that uses the global sniffer instance.
 *
@@ -15,13 +23,13 @@ var PatchedEnvironmentParser = class {
 		return globalThis.__envSniffer.create(builder);
 	}
 };
-
 //#endregion
 exports.EnvironmentParser = PatchedEnvironmentParser;
-Object.defineProperty(exports, 'SnifferEnvironmentParser', {
-  enumerable: true,
-  get: function () {
-    return __geekmidas_envkit_sniffer.SnifferEnvironmentParser;
-  }
+Object.defineProperty(exports, "SnifferEnvironmentParser", {
+	enumerable: true,
+	get: function() {
+		return _geekmidas_envkit_sniffer.SnifferEnvironmentParser;
+	}
 });
+
 //# sourceMappingURL=sniffer-envkit-patch.cjs.map

package/dist/deploy/sniffer-envkit-patch.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-envkit-patch.cjs","names":["SnifferEnvironmentParser","builder: (get: EnvFetcher) => TReturn"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":["/**\n * Patched @geekmidas/envkit module for entry app sniffing.\n *\n * This module re-exports the SnifferEnvironmentParser as EnvironmentParser,\n * allowing entry apps to be imported while capturing their env var usage.\n *\n * The actual sniffer instance is stored in globalThis.__envSniffer\n * so the worker script can retrieve the captured variables.\n */\n\nimport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n\n// Extend globalThis type for the sniffer instance\ndeclare global {\n\t// eslint-disable-next-line no-var\n\tvar __envSniffer: SnifferEnvironmentParser | undefined;\n}\n\n// Create a shared sniffer instance that will be used by all imports\n// This is stored globally so the worker script can access it\nif (!globalThis.__envSniffer) {\n\tglobalThis.__envSniffer = new SnifferEnvironmentParser();\n}\n\n// Type for the config parser returned by create()\ninterface ConfigParser<T> {\n\tparse(): T;\n\tsafeParse(): { success: true; data: T } | { success: false; error: Error };\n}\n\n// Type for the env fetcher function\ntype EnvFetcher = (name: string) => {\n\tstring(): { parse(): string; safeParse(): unknown };\n\tnumber(): { parse(): number; safeParse(): unknown };\n\tboolean(): { parse(): boolean; safeParse(): unknown };\n\toptional(): EnvFetcher;\n\tdefault(value: unknown): EnvFetcher;\n};\n\n/**\n * Patched EnvironmentParser that uses the global sniffer instance.\n *\n * This class wraps the global sniffer to maintain API compatibility\n * with the real EnvironmentParser. The constructor accepts an env\n * parameter for API compatibility but ignores it since we're sniffing.\n */\nclass PatchedEnvironmentParser {\n\tcreate<TReturn extends Record<string, unknown>>(\n\t\tbuilder: (get: EnvFetcher) => TReturn,\n\t): ConfigParser<TReturn> {\n\t\treturn globalThis.__envSniffer!.create(\n\t\t\tbuilder as any,\n\t\t) as unknown as ConfigParser<TReturn>;\n\t}\n}\n\n// Export the patched parser as EnvironmentParser\nexport { PatchedEnvironmentParser as EnvironmentParser };\n\n// Re-export other envkit exports that entry apps might use\nexport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n"],"mappings":";;;;AAoBA,KAAK,WAAW,aACf,YAAW,eAAe,IAAIA;;;;;;;;AAyB/B,IAAM,2BAAN,MAA+B;CAC9B,OACCC,SACwB;AACxB,SAAO,WAAW,aAAc,OAC/B,QACA;CACD;AACD"}
+{"version":3,"file":"sniffer-envkit-patch.cjs","names":["SnifferEnvironmentParser"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":["/**\n * Patched @geekmidas/envkit module for entry app sniffing.\n *\n * This module re-exports the SnifferEnvironmentParser as EnvironmentParser,\n * allowing entry apps to be imported while capturing their env var usage.\n *\n * The actual sniffer instance is stored in globalThis.__envSniffer\n * so the worker script can retrieve the captured variables.\n */\n\nimport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n\n// Extend globalThis type for the sniffer instance\ndeclare global {\n\t// eslint-disable-next-line no-var\n\tvar __envSniffer: SnifferEnvironmentParser | undefined;\n}\n\n// Create a shared sniffer instance that will be used by all imports\n// This is stored globally so the worker script can access it\nif (!globalThis.__envSniffer) {\n\tglobalThis.__envSniffer = new SnifferEnvironmentParser();\n}\n\n// Type for the config parser returned by create()\ninterface ConfigParser<T> {\n\tparse(): T;\n\tsafeParse(): { success: true; data: T } | { success: false; error: Error };\n}\n\n// Type for the env fetcher function\ntype EnvFetcher = (name: string) => {\n\tstring(): { parse(): string; safeParse(): unknown };\n\tnumber(): { parse(): number; safeParse(): unknown };\n\tboolean(): { parse(): boolean; safeParse(): unknown };\n\toptional(): EnvFetcher;\n\tdefault(value: unknown): EnvFetcher;\n};\n\n/**\n * Patched EnvironmentParser that uses the global sniffer instance.\n *\n * This class wraps the global sniffer to maintain API compatibility\n * with the real EnvironmentParser. The constructor accepts an env\n * parameter for API compatibility but ignores it since we're sniffing.\n */\nclass PatchedEnvironmentParser {\n\tcreate<TReturn extends Record<string, unknown>>(\n\t\tbuilder: (get: EnvFetcher) => TReturn,\n\t): ConfigParser<TReturn> {\n\t\treturn globalThis.__envSniffer!.create(\n\t\t\tbuilder as any,\n\t\t) as unknown as ConfigParser<TReturn>;\n\t}\n}\n\n// Export the patched parser as EnvironmentParser\nexport { PatchedEnvironmentParser as EnvironmentParser };\n\n// Re-export other envkit exports that entry apps might use\nexport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n"],"mappings":";;;;;;;;;;;;AAoBA,IAAI,CAAC,WAAW,cACf,WAAW,eAAe,IAAIA,0BAAAA,yBAAyB;;;;;;;;AAyBxD,IAAM,2BAAN,MAA+B;CAC9B,OACC,SACwB;EACxB,OAAO,WAAW,aAAc,OAC/B,OACD;CACD;AACD"}

package/dist/deploy/sniffer-envkit-patch.d.cts

@@ -1,7 +1,5 @@
 import { SnifferEnvironmentParser, SnifferEnvironmentParser as SnifferEnvironmentParser$1 } from "@geekmidas/envkit/sniffer";
-
 //#region src/deploy/sniffer-envkit-patch.d.ts
-
 declare global {
   var __envSniffer: SnifferEnvironmentParser$1 | undefined;
 }

package/dist/deploy/sniffer-envkit-patch.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-envkit-patch.d.cts","names":[],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":[],"mappings":";;;;QA0BU,MAAA,CAAA;EAAC,IAC0B,YAAA,EAZlB,0BAYkB,GAAA,SAAA;;AAAoC,UAF/D,YAE+D,CAAA,CAAA,CAAA,CAAA;EAIpE,KAAA,EAAA,EALK,CAKL;EAAU,SAAA,EAAA,EAAA;IAIF,OAAA,EAAA,IAAA;IACa,IAAA,EATW,CASX;EAAU,CAAA,GAAA;IAU9B,OAAA,EAAA,KAAA;IAAwB,KAAA,EAnBsC,KAmBtC;EAAA,CAAA;;KAfzB,UAAA,GAiB2B,CAAA,IAAA,EAAA,MAAA,EAAA,GAAA;EAAO,MACtB,EAAA,EAAA;IAAb,KAAA,EAAA,EAAA,MAAA;IAAY,SAAA,EAAA,EAAA,OAAA;;;;;;;;;;cAdH;2BACa;;;;;;;;;cAUpB,wBAAA;yBACkB,wCACP,eAAe,UAC5B,aAAa"}
+{"version":3,"file":"sniffer-envkit-patch.d.cts","names":["SnifferEnvironmentParser"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"mappings":";;QAaQ;MAEH,cAAcA;;UAUT,aAAa;EACtB,SAAS;EACT;IAAe;IAAe,MAAM;;IAAQ;IAAgB,OAAO;;;KAI/D,cAAc;EAClB;IAAY;IAAiB;;EAC7B;IAAY;IAAiB;;EAC7B;IAAa;IAAkB;;EAC/B,YAAY;EACZ,QAAQ,iBAAiB;;;;;;;;;cAUpB;EACL,OAAO,gBAAgB,yBACtB,UAAU,KAAK,eAAe,UAC5B,aAAa"}

package/dist/deploy/sniffer-envkit-patch.d.mts

@@ -1,7 +1,5 @@
 import { SnifferEnvironmentParser, SnifferEnvironmentParser as SnifferEnvironmentParser$1 } from "@geekmidas/envkit/sniffer";
-
 //#region src/deploy/sniffer-envkit-patch.d.ts
-
 declare global {
   var __envSniffer: SnifferEnvironmentParser$1 | undefined;
 }

package/dist/deploy/sniffer-envkit-patch.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-envkit-patch.d.mts","names":[],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":[],"mappings":";;;;QA0BU,MAAA,CAAA;EAAC,IAC0B,YAAA,EAZlB,0BAYkB,GAAA,SAAA;;AAAoC,UAF/D,YAE+D,CAAA,CAAA,CAAA,CAAA;EAIpE,KAAA,EAAA,EALK,CAKL;EAAU,SAAA,EAAA,EAAA;IAIF,OAAA,EAAA,IAAA;IACa,IAAA,EATW,CASX;EAAU,CAAA,GAAA;IAU9B,OAAA,EAAA,KAAA;IAAwB,KAAA,EAnBsC,KAmBtC;EAAA,CAAA;;KAfzB,UAAA,GAiB2B,CAAA,IAAA,EAAA,MAAA,EAAA,GAAA;EAAO,MACtB,EAAA,EAAA;IAAb,KAAA,EAAA,EAAA,MAAA;IAAY,SAAA,EAAA,EAAA,OAAA;;;;;;;;;;cAdH;2BACa;;;;;;;;;cAUpB,wBAAA;yBACkB,wCACP,eAAe,UAC5B,aAAa"}
+{"version":3,"file":"sniffer-envkit-patch.d.mts","names":["SnifferEnvironmentParser"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"mappings":";;QAaQ;MAEH,cAAcA;;UAUT,aAAa;EACtB,SAAS;EACT;IAAe;IAAe,MAAM;;IAAQ;IAAgB,OAAO;;;KAI/D,cAAc;EAClB;IAAY;IAAiB;;EAC7B;IAAY;IAAiB;;EAC7B;IAAa;IAAkB;;EAC/B,YAAY;EACZ,QAAQ,iBAAiB;;;;;;;;;cAUpB;EACL,OAAO,gBAAgB,yBACtB,UAAU,KAAK,eAAe,UAC5B,aAAa"}

package/dist/deploy/sniffer-envkit-patch.mjs

@@ -1,6 +1,14 @@
 import { SnifferEnvironmentParser, SnifferEnvironmentParser as SnifferEnvironmentParser$1 } from "@geekmidas/envkit/sniffer";
-
 //#region src/deploy/sniffer-envkit-patch.ts
+/**
+* Patched @geekmidas/envkit module for entry app sniffing.
+*
+* This module re-exports the SnifferEnvironmentParser as EnvironmentParser,
+* allowing entry apps to be imported while capturing their env var usage.
+*
+* The actual sniffer instance is stored in globalThis.__envSniffer
+* so the worker script can retrieve the captured variables.
+*/
 if (!globalThis.__envSniffer) globalThis.__envSniffer = new SnifferEnvironmentParser$1();
 /**
 * Patched EnvironmentParser that uses the global sniffer instance.
@@ -14,7 +22,7 @@ var PatchedEnvironmentParser = class {
 		return globalThis.__envSniffer.create(builder);
 	}
 };
-
 //#endregion
 export { PatchedEnvironmentParser as EnvironmentParser, SnifferEnvironmentParser };
+
 //# sourceMappingURL=sniffer-envkit-patch.mjs.map

package/dist/deploy/sniffer-envkit-patch.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-envkit-patch.mjs","names":["SnifferEnvironmentParser","builder: (get: EnvFetcher) => TReturn"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":["/**\n * Patched @geekmidas/envkit module for entry app sniffing.\n *\n * This module re-exports the SnifferEnvironmentParser as EnvironmentParser,\n * allowing entry apps to be imported while capturing their env var usage.\n *\n * The actual sniffer instance is stored in globalThis.__envSniffer\n * so the worker script can retrieve the captured variables.\n */\n\nimport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n\n// Extend globalThis type for the sniffer instance\ndeclare global {\n\t// eslint-disable-next-line no-var\n\tvar __envSniffer: SnifferEnvironmentParser | undefined;\n}\n\n// Create a shared sniffer instance that will be used by all imports\n// This is stored globally so the worker script can access it\nif (!globalThis.__envSniffer) {\n\tglobalThis.__envSniffer = new SnifferEnvironmentParser();\n}\n\n// Type for the config parser returned by create()\ninterface ConfigParser<T> {\n\tparse(): T;\n\tsafeParse(): { success: true; data: T } | { success: false; error: Error };\n}\n\n// Type for the env fetcher function\ntype EnvFetcher = (name: string) => {\n\tstring(): { parse(): string; safeParse(): unknown };\n\tnumber(): { parse(): number; safeParse(): unknown };\n\tboolean(): { parse(): boolean; safeParse(): unknown };\n\toptional(): EnvFetcher;\n\tdefault(value: unknown): EnvFetcher;\n};\n\n/**\n * Patched EnvironmentParser that uses the global sniffer instance.\n *\n * This class wraps the global sniffer to maintain API compatibility\n * with the real EnvironmentParser. The constructor accepts an env\n * parameter for API compatibility but ignores it since we're sniffing.\n */\nclass PatchedEnvironmentParser {\n\tcreate<TReturn extends Record<string, unknown>>(\n\t\tbuilder: (get: EnvFetcher) => TReturn,\n\t): ConfigParser<TReturn> {\n\t\treturn globalThis.__envSniffer!.create(\n\t\t\tbuilder as any,\n\t\t) as unknown as ConfigParser<TReturn>;\n\t}\n}\n\n// Export the patched parser as EnvironmentParser\nexport { PatchedEnvironmentParser as EnvironmentParser };\n\n// Re-export other envkit exports that entry apps might use\nexport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n"],"mappings":";;;AAoBA,KAAK,WAAW,aACf,YAAW,eAAe,IAAIA;;;;;;;;AAyB/B,IAAM,2BAAN,MAA+B;CAC9B,OACCC,SACwB;AACxB,SAAO,WAAW,aAAc,OAC/B,QACA;CACD;AACD"}
+{"version":3,"file":"sniffer-envkit-patch.mjs","names":["SnifferEnvironmentParser"],"sources":["../../src/deploy/sniffer-envkit-patch.ts"],"sourcesContent":["/**\n * Patched @geekmidas/envkit module for entry app sniffing.\n *\n * This module re-exports the SnifferEnvironmentParser as EnvironmentParser,\n * allowing entry apps to be imported while capturing their env var usage.\n *\n * The actual sniffer instance is stored in globalThis.__envSniffer\n * so the worker script can retrieve the captured variables.\n */\n\nimport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n\n// Extend globalThis type for the sniffer instance\ndeclare global {\n\t// eslint-disable-next-line no-var\n\tvar __envSniffer: SnifferEnvironmentParser | undefined;\n}\n\n// Create a shared sniffer instance that will be used by all imports\n// This is stored globally so the worker script can access it\nif (!globalThis.__envSniffer) {\n\tglobalThis.__envSniffer = new SnifferEnvironmentParser();\n}\n\n// Type for the config parser returned by create()\ninterface ConfigParser<T> {\n\tparse(): T;\n\tsafeParse(): { success: true; data: T } | { success: false; error: Error };\n}\n\n// Type for the env fetcher function\ntype EnvFetcher = (name: string) => {\n\tstring(): { parse(): string; safeParse(): unknown };\n\tnumber(): { parse(): number; safeParse(): unknown };\n\tboolean(): { parse(): boolean; safeParse(): unknown };\n\toptional(): EnvFetcher;\n\tdefault(value: unknown): EnvFetcher;\n};\n\n/**\n * Patched EnvironmentParser that uses the global sniffer instance.\n *\n * This class wraps the global sniffer to maintain API compatibility\n * with the real EnvironmentParser. The constructor accepts an env\n * parameter for API compatibility but ignores it since we're sniffing.\n */\nclass PatchedEnvironmentParser {\n\tcreate<TReturn extends Record<string, unknown>>(\n\t\tbuilder: (get: EnvFetcher) => TReturn,\n\t): ConfigParser<TReturn> {\n\t\treturn globalThis.__envSniffer!.create(\n\t\t\tbuilder as any,\n\t\t) as unknown as ConfigParser<TReturn>;\n\t}\n}\n\n// Export the patched parser as EnvironmentParser\nexport { PatchedEnvironmentParser as EnvironmentParser };\n\n// Re-export other envkit exports that entry apps might use\nexport { SnifferEnvironmentParser } from '@geekmidas/envkit/sniffer';\n"],"mappings":";;;;;;;;;;;AAoBA,IAAI,CAAC,WAAW,cACf,WAAW,eAAe,IAAIA,2BAAyB;;;;;;;;AAyBxD,IAAM,2BAAN,MAA+B;CAC9B,OACC,SACwB;EACxB,OAAO,WAAW,aAAc,OAC/B,OACD;CACD;AACD"}

package/dist/deploy/sniffer-envparser-worker.cjs

@@ -0,0 +1,54 @@
+let node_url = require("node:url");
+let _geekmidas_envkit_sniffer = require("@geekmidas/envkit/sniffer");
+//#region src/deploy/sniffer-envparser-worker.ts
+/**
+* Subprocess worker for envParser sniffing.
+*
+* Imports an app's envParser module, hands it a SnifferEnvironmentParser and
+* reports which variables it read. A subprocess, like the entry and route
+* sniffers, so the module runs in the sandbox rather than in the deploy, with
+* none of the deploy's environment.
+*
+* Usage:
+*   node --import tsx ./sniffer-envparser-worker.ts /path/to/env.ts envParser
+*
+* Output (JSON, last line of stdout):
+*   { "envVars": [...], "optionalEnvVars": [...], "unhandledRejections": [...],
+*     "warnings": [...], "error": null }
+*/
+const modulePath = process.argv[2];
+const exportName = process.argv[3] ?? "default";
+async function sniff() {
+	const warnings = [];
+	const sniffer = new _geekmidas_envkit_sniffer.SnifferEnvironmentParser();
+	const result = await (0, _geekmidas_envkit_sniffer.sniffWithFireAndForget)(sniffer, async () => {
+		if (!modulePath) throw new TypeError("No envParser module was given.");
+		const envParser = (await import((0, node_url.pathToFileURL)(modulePath).href))[exportName];
+		if (typeof envParser !== "function") {
+			warnings.push(`[sniffer] Export "${exportName}" from "${modulePath}" is not a function`);
+			return;
+		}
+		const parser = envParser(sniffer);
+		if (parser && typeof parser.parse === "function") try {
+			parser.parse();
+		} catch {}
+	});
+	const line = JSON.stringify({
+		envVars: result.envVars,
+		optionalEnvVars: result.optionalEnvVars,
+		unhandledRejections: result.unhandledRejections.map((e) => e.message),
+		warnings,
+		error: result.error ? result.error.message : null
+	});
+	process.stdout.write(`${line}\n`, () => process.exit(0));
+}
+sniff().catch((e) => {
+	console.log(JSON.stringify({
+		envVars: [],
+		error: e.message || String(e)
+	}));
+	process.exit(1);
+});
+//#endregion
+
+//# sourceMappingURL=sniffer-envparser-worker.cjs.map

package/dist/deploy/sniffer-envparser-worker.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sniffer-envparser-worker.cjs","names":["SnifferEnvironmentParser","sniffWithFireAndForget","pathToFileURL"],"sources":["../../src/deploy/sniffer-envparser-worker.ts"],"sourcesContent":["/**\n * Subprocess worker for envParser sniffing.\n *\n * Imports an app's envParser module, hands it a SnifferEnvironmentParser and\n * reports which variables it read. A subprocess, like the entry and route\n * sniffers, so the module runs in the sandbox rather than in the deploy, with\n * none of the deploy's environment.\n *\n * Usage:\n *   node --import tsx ./sniffer-envparser-worker.ts /path/to/env.ts envParser\n *\n * Output (JSON, last line of stdout):\n *   { \"envVars\": [...], \"optionalEnvVars\": [...], \"unhandledRejections\": [...],\n *     \"warnings\": [...], \"error\": null }\n */\n\nimport { pathToFileURL } from 'node:url';\nimport {\n\tSnifferEnvironmentParser,\n\tsniffWithFireAndForget,\n} from '@geekmidas/envkit/sniffer';\n\nconst modulePath = process.argv[2];\nconst exportName = process.argv[3] ?? 'default';\n\nasync function sniff(): Promise<void> {\n\tconst warnings: string[] = [];\n\tconst sniffer = new SnifferEnvironmentParser();\n\n\tconst result = await sniffWithFireAndForget(sniffer, async () => {\n\t\tif (!modulePath) throw new TypeError('No envParser module was given.');\n\t\tconst module = await import(pathToFileURL(modulePath).href);\n\n\t\tconst envParser = module[exportName];\n\t\tif (typeof envParser !== 'function') {\n\t\t\twarnings.push(\n\t\t\t\t`[sniffer] Export \"${exportName}\" from \"${modulePath}\" is not a function`,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\t// The envParser function typically creates and configures an\n\t\t// EnvironmentParser; the sniffer implements the same interface.\n\t\tconst parser = envParser(sniffer);\n\n\t\t// A ConfigParser's parse() is what reads the variables.\n\t\tif (parser && typeof parser.parse === 'function') {\n\t\t\ttry {\n\t\t\t\tparser.parse();\n\t\t\t} catch {\n\t\t\t\t// Parsing may fail on the sniffer's mock values; expected.\n\t\t\t}\n\t\t}\n\t});\n\n\tconst line = JSON.stringify({\n\t\tenvVars: result.envVars,\n\t\toptionalEnvVars: result.optionalEnvVars,\n\t\tunhandledRejections: result.unhandledRejections.map((e) => e.message),\n\t\twarnings,\n\t\terror: result.error ? result.error.message : null,\n\t});\n\t// The module may have left a pool or a timer open, so exit — once the\n\t// answer has drained: a pipe on macOS is written asynchronously.\n\tprocess.stdout.write(`${line}\\n`, () => process.exit(0));\n}\n\nsniff().catch((e) => {\n\tconsole.log(JSON.stringify({ envVars: [], error: e.message || String(e) }));\n\tprocess.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,aAAa,QAAQ,KAAK;AAChC,MAAM,aAAa,QAAQ,KAAK,MAAM;AAEtC,eAAe,QAAuB;CACrC,MAAM,WAAqB,CAAC;CAC5B,MAAM,UAAU,IAAIA,0BAAAA,yBAAyB;CAE7C,MAAM,SAAS,OAAA,GAAMC,0BAAAA,uBAAAA,CAAuB,SAAS,YAAY;EAChE,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,gCAAgC;EAGrE,MAAM,aAAY,MAFG,QAAA,GAAOC,SAAAA,cAAAA,CAAc,UAAU,CAAC,CAAC,MAAA,CAE7B;EACzB,IAAI,OAAO,cAAc,YAAY;GACpC,SAAS,KACR,qBAAqB,WAAW,UAAU,WAAW,oBACtD;GACA;EACD;EAIA,MAAM,SAAS,UAAU,OAAO;EAGhC,IAAI,UAAU,OAAO,OAAO,UAAU,YACrC,IAAI;GACH,OAAO,MAAM;EACd,QAAQ,CAER;CAEF,CAAC;CAED,MAAM,OAAO,KAAK,UAAU;EAC3B,SAAS,OAAO;EAChB,iBAAiB,OAAO;EACxB,qBAAqB,OAAO,oBAAoB,KAAK,MAAM,EAAE,OAAO;EACpE;EACA,OAAO,OAAO,QAAQ,OAAO,MAAM,UAAU;CAC9C,CAAC;CAGD,QAAQ,OAAO,MAAM,GAAG,KAAK,WAAW,QAAQ,KAAK,CAAC,CAAC;AACxD;AAEA,MAAM,CAAC,CAAC,OAAO,MAAM;CACpB,QAAQ,IAAI,KAAK,UAAU;EAAE,SAAS,CAAC;EAAG,OAAO,EAAE,WAAW,OAAO,CAAC;CAAE,CAAC,CAAC;CAC1E,QAAQ,KAAK,CAAC;AACf,CAAC"}

package/dist/deploy/sniffer-envparser-worker.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/deploy/sniffer-envparser-worker.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/deploy/sniffer-envparser-worker.mjs

@@ -0,0 +1,55 @@
+import { pathToFileURL } from "node:url";
+import { SnifferEnvironmentParser, sniffWithFireAndForget } from "@geekmidas/envkit/sniffer";
+//#region src/deploy/sniffer-envparser-worker.ts
+/**
+* Subprocess worker for envParser sniffing.
+*
+* Imports an app's envParser module, hands it a SnifferEnvironmentParser and
+* reports which variables it read. A subprocess, like the entry and route
+* sniffers, so the module runs in the sandbox rather than in the deploy, with
+* none of the deploy's environment.
+*
+* Usage:
+*   node --import tsx ./sniffer-envparser-worker.ts /path/to/env.ts envParser
+*
+* Output (JSON, last line of stdout):
+*   { "envVars": [...], "optionalEnvVars": [...], "unhandledRejections": [...],
+*     "warnings": [...], "error": null }
+*/
+const modulePath = process.argv[2];
+const exportName = process.argv[3] ?? "default";
+async function sniff() {
+	const warnings = [];
+	const sniffer = new SnifferEnvironmentParser();
+	const result = await sniffWithFireAndForget(sniffer, async () => {
+		if (!modulePath) throw new TypeError("No envParser module was given.");
+		const envParser = (await import(pathToFileURL(modulePath).href))[exportName];
+		if (typeof envParser !== "function") {
+			warnings.push(`[sniffer] Export "${exportName}" from "${modulePath}" is not a function`);
+			return;
+		}
+		const parser = envParser(sniffer);
+		if (parser && typeof parser.parse === "function") try {
+			parser.parse();
+		} catch {}
+	});
+	const line = JSON.stringify({
+		envVars: result.envVars,
+		optionalEnvVars: result.optionalEnvVars,
+		unhandledRejections: result.unhandledRejections.map((e) => e.message),
+		warnings,
+		error: result.error ? result.error.message : null
+	});
+	process.stdout.write(`${line}\n`, () => process.exit(0));
+}
+sniff().catch((e) => {
+	console.log(JSON.stringify({
+		envVars: [],
+		error: e.message || String(e)
+	}));
+	process.exit(1);
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=sniffer-envparser-worker.mjs.map

package/dist/deploy/sniffer-envparser-worker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sniffer-envparser-worker.mjs","names":[],"sources":["../../src/deploy/sniffer-envparser-worker.ts"],"sourcesContent":["/**\n * Subprocess worker for envParser sniffing.\n *\n * Imports an app's envParser module, hands it a SnifferEnvironmentParser and\n * reports which variables it read. A subprocess, like the entry and route\n * sniffers, so the module runs in the sandbox rather than in the deploy, with\n * none of the deploy's environment.\n *\n * Usage:\n *   node --import tsx ./sniffer-envparser-worker.ts /path/to/env.ts envParser\n *\n * Output (JSON, last line of stdout):\n *   { \"envVars\": [...], \"optionalEnvVars\": [...], \"unhandledRejections\": [...],\n *     \"warnings\": [...], \"error\": null }\n */\n\nimport { pathToFileURL } from 'node:url';\nimport {\n\tSnifferEnvironmentParser,\n\tsniffWithFireAndForget,\n} from '@geekmidas/envkit/sniffer';\n\nconst modulePath = process.argv[2];\nconst exportName = process.argv[3] ?? 'default';\n\nasync function sniff(): Promise<void> {\n\tconst warnings: string[] = [];\n\tconst sniffer = new SnifferEnvironmentParser();\n\n\tconst result = await sniffWithFireAndForget(sniffer, async () => {\n\t\tif (!modulePath) throw new TypeError('No envParser module was given.');\n\t\tconst module = await import(pathToFileURL(modulePath).href);\n\n\t\tconst envParser = module[exportName];\n\t\tif (typeof envParser !== 'function') {\n\t\t\twarnings.push(\n\t\t\t\t`[sniffer] Export \"${exportName}\" from \"${modulePath}\" is not a function`,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\t// The envParser function typically creates and configures an\n\t\t// EnvironmentParser; the sniffer implements the same interface.\n\t\tconst parser = envParser(sniffer);\n\n\t\t// A ConfigParser's parse() is what reads the variables.\n\t\tif (parser && typeof parser.parse === 'function') {\n\t\t\ttry {\n\t\t\t\tparser.parse();\n\t\t\t} catch {\n\t\t\t\t// Parsing may fail on the sniffer's mock values; expected.\n\t\t\t}\n\t\t}\n\t});\n\n\tconst line = JSON.stringify({\n\t\tenvVars: result.envVars,\n\t\toptionalEnvVars: result.optionalEnvVars,\n\t\tunhandledRejections: result.unhandledRejections.map((e) => e.message),\n\t\twarnings,\n\t\terror: result.error ? result.error.message : null,\n\t});\n\t// The module may have left a pool or a timer open, so exit — once the\n\t// answer has drained: a pipe on macOS is written asynchronously.\n\tprocess.stdout.write(`${line}\\n`, () => process.exit(0));\n}\n\nsniff().catch((e) => {\n\tconsole.log(JSON.stringify({ envVars: [], error: e.message || String(e) }));\n\tprocess.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,aAAa,QAAQ,KAAK;AAChC,MAAM,aAAa,QAAQ,KAAK,MAAM;AAEtC,eAAe,QAAuB;CACrC,MAAM,WAAqB,CAAC;CAC5B,MAAM,UAAU,IAAI,yBAAyB;CAE7C,MAAM,SAAS,MAAM,uBAAuB,SAAS,YAAY;EAChE,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,gCAAgC;EAGrE,MAAM,aAAY,MAFG,OAAO,cAAc,UAAU,CAAC,CAAC,MAAA,CAE7B;EACzB,IAAI,OAAO,cAAc,YAAY;GACpC,SAAS,KACR,qBAAqB,WAAW,UAAU,WAAW,oBACtD;GACA;EACD;EAIA,MAAM,SAAS,UAAU,OAAO;EAGhC,IAAI,UAAU,OAAO,OAAO,UAAU,YACrC,IAAI;GACH,OAAO,MAAM;EACd,QAAQ,CAER;CAEF,CAAC;CAED,MAAM,OAAO,KAAK,UAAU;EAC3B,SAAS,OAAO;EAChB,iBAAiB,OAAO;EACxB,qBAAqB,OAAO,oBAAoB,KAAK,MAAM,EAAE,OAAO;EACpE;EACA,OAAO,OAAO,QAAQ,OAAO,MAAM,UAAU;CAC9C,CAAC;CAGD,QAAQ,OAAO,MAAM,GAAG,KAAK,WAAW,QAAQ,KAAK,CAAC,CAAC;AACxD;AAEA,MAAM,CAAC,CAAC,OAAO,MAAM;CACpB,QAAQ,IAAI,KAAK,UAAU;EAAE,SAAS,CAAC;EAAG,OAAO,EAAE,WAAW,OAAO,CAAC;CAAE,CAAC,CAAC;CAC1E,QAAQ,KAAK,CAAC;AACf,CAAC"}

package/dist/deploy/sniffer-hooks.cjs

@@ -1,10 +1,16 @@
-const require_chunk = require('../chunk-CUT6urMc.cjs');
-const node_fs = require_chunk.__toESM(require("node:fs"));
-const node_path = require_chunk.__toESM(require("node:path"));
-const node_url = require_chunk.__toESM(require("node:url"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let node_path = require("node:path");
+let node_fs = require("node:fs");
 //#region src/deploy/sniffer-hooks.ts
-const __filename$1 = (0, node_url.fileURLToPath)(require("url").pathToFileURL(__filename).href);
+/**
+* Module loader hooks for entry app sniffing.
+*
+* This module provides the resolve hook that intercepts '@geekmidas/envkit'
+* imports and redirects them to the patched sniffer version.
+*
+* This file is registered via module.register() from sniffer-loader.ts.
+*/
+const __filename$1 = (0, require("node:url").fileURLToPath)(require("url").pathToFileURL(__filename).href);
 const __dirname$1 = (0, node_path.dirname)(__filename$1);
 const mjsPath = (0, node_path.join)(__dirname$1, "sniffer-envkit-patch.mjs");
 const tsPath = (0, node_path.join)(__dirname$1, "sniffer-envkit-patch.ts");
@@ -19,7 +25,7 @@ async function resolve(specifier, context, nextResolve) {
 	};
 	return nextResolve(specifier, context);
 }
-
 //#endregion
 exports.resolve = resolve;
+
 //# sourceMappingURL=sniffer-hooks.cjs.map

package/dist/deploy/sniffer-hooks.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-hooks.cjs","names":["__filename","__dirname","specifier: string","context: ResolveContext","nextResolve: NextResolve"],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":["/**\n * Module loader hooks for entry app sniffing.\n *\n * This module provides the resolve hook that intercepts '@geekmidas/envkit'\n * imports and redirects them to the patched sniffer version.\n *\n * This file is registered via module.register() from sniffer-loader.ts.\n */\n\nimport { existsSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// Resolve path to the patched envkit module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-envkit-patch.mjs');\nconst tsPath = join(__dirname, 'sniffer-envkit-patch.ts');\nconst patchedEnvkitPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\ntype ResolveContext = {\n\tconditions: string[];\n\timportAttributes: Record<string, string>;\n\tparentURL?: string;\n};\n\ntype ResolveResult = {\n\turl: string;\n\tshortCircuit?: boolean;\n\tformat?: string;\n};\n\ntype NextResolve = (\n\tspecifier: string,\n\tcontext: ResolveContext,\n) => Promise<ResolveResult>;\n\n/**\n * Resolve hook - intercepts module resolution for @geekmidas/envkit\n */\nexport async function resolve(\n\tspecifier: string,\n\tcontext: ResolveContext,\n\tnextResolve: NextResolve,\n): Promise<ResolveResult> {\n\t// Intercept @geekmidas/envkit imports\n\tif (specifier === '@geekmidas/envkit') {\n\t\treturn {\n\t\t\turl: `file://${patchedEnvkitPath}`,\n\t\t\tshortCircuit: true,\n\t\t};\n\t}\n\n\treturn nextResolve(specifier, context);\n}\n"],"mappings":";;;;;;AAcA,MAAMA,eAAa,0EAA8B;AACjD,MAAMC,cAAY,uBAAQD,aAAW;AAGrC,MAAM,UAAU,oBAAKC,aAAW,2BAA2B;AAC3D,MAAM,SAAS,oBAAKA,aAAW,0BAA0B;AACzD,MAAM,oBAAoB,wBAAW,QAAQ,GAAG,UAAU;;;;AAsB1D,eAAsB,QACrBC,WACAC,SACAC,aACyB;AAEzB,KAAI,cAAc,oBACjB,QAAO;EACN,MAAM,SAAS,kBAAkB;EACjC,cAAc;CACd;AAGF,QAAO,YAAY,WAAW,QAAQ;AACtC"}
+{"version":3,"file":"sniffer-hooks.cjs","names":["__filename","fileURLToPath","__dirname","dirname","join","existsSync"],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":["/**\n * Module loader hooks for entry app sniffing.\n *\n * This module provides the resolve hook that intercepts '@geekmidas/envkit'\n * imports and redirects them to the patched sniffer version.\n *\n * This file is registered via module.register() from sniffer-loader.ts.\n */\n\nimport { existsSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// Resolve path to the patched envkit module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-envkit-patch.mjs');\nconst tsPath = join(__dirname, 'sniffer-envkit-patch.ts');\nconst patchedEnvkitPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\ntype ResolveContext = {\n\tconditions: string[];\n\timportAttributes: Record<string, string>;\n\tparentURL?: string;\n};\n\ntype ResolveResult = {\n\turl: string;\n\tshortCircuit?: boolean;\n\tformat?: string;\n};\n\ntype NextResolve = (\n\tspecifier: string,\n\tcontext: ResolveContext,\n) => Promise<ResolveResult>;\n\n/**\n * Resolve hook - intercepts module resolution for @geekmidas/envkit\n */\nexport async function resolve(\n\tspecifier: string,\n\tcontext: ResolveContext,\n\tnextResolve: NextResolve,\n): Promise<ResolveResult> {\n\t// Intercept @geekmidas/envkit imports\n\tif (specifier === '@geekmidas/envkit') {\n\t\treturn {\n\t\t\turl: `file://${patchedEnvkitPath}`,\n\t\t\tshortCircuit: true,\n\t\t};\n\t}\n\n\treturn nextResolve(specifier, context);\n}\n"],"mappings":";;;;;;;;;;;;AAcA,MAAMA,gBAAAA,qBAAaC,CAAAA,CAAAA,cAAAA,CAAAA,QAAAA,KAAAA,CAAAA,CAAAA,cAAAA,UAAAA,CAAAA,CAAAA,IAA6B;AAChD,MAAMC,eAAAA,GAAYC,UAAAA,QAAAA,CAAQH,YAAU;AAGpC,MAAM,WAAA,GAAUI,UAAAA,KAAAA,CAAKF,aAAW,0BAA0B;AAC1D,MAAM,UAAA,GAASE,UAAAA,KAAAA,CAAKF,aAAW,yBAAyB;AACxD,MAAM,qBAAA,GAAoBG,QAAAA,WAAAA,CAAW,OAAO,IAAI,UAAU;;;;AAsB1D,eAAsB,QACrB,WACA,SACA,aACyB;CAEzB,IAAI,cAAc,qBACjB,OAAO;EACN,KAAK,UAAU;EACf,cAAc;CACf;CAGD,OAAO,YAAY,WAAW,OAAO;AACtC"}

package/dist/deploy/sniffer-hooks.d.cts

@@ -21,7 +21,6 @@ type NextResolve = (specifier: string, context: ResolveContext) => Promise<Resol
 /**
  * Resolve hook - intercepts module resolution for @geekmidas/envkit
  */
-declare function resolve(specifier: string, context: ResolveContext, nextResolve: NextResolve): Promise<ResolveResult>;
+export declare function resolve(specifier: string, context: ResolveContext, nextResolve: NextResolve): Promise<ResolveResult>;
 //#endregion
-export { resolve };
 //# sourceMappingURL=sniffer-hooks.d.cts.map

package/dist/deploy/sniffer-hooks.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-hooks.d.cts","names":[],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":[],"mappings":";;;AAwByB;AAIP;;;;;AASN,KAfP,cAAA,GAeO;EAKU,UAAO,EAAA,MAAA,EAAA;EAAA,gBAAA,EAlBV,MAkBU,CAAA,MAAA,EAAA,MAAA,CAAA;EAAA,SAEnB,CAAA,EAAA,MAAA;CAAc;KAhBnB,aAAA,GAkBM;EAAa,GAArB,EAAA,MAAA;EAAO,YAAA,CAAA,EAAA,OAAA;;;KAZL,WAAA,gCAEK,mBACL,QAAQ;;;;iBAKS,OAAA,6BAEZ,6BACI,cACX,QAAQ"}
+{"version":3,"file":"sniffer-hooks.d.cts","names":[],"sources":["../../src/deploy/sniffer-hooks.ts"],"mappings":";;;;;;;;;KAsBK;EACJ;EACA,kBAAkB;EAClB;;KAGI;EACJ;EACA;EACA;;KAGI,eACJ,mBACA,SAAS,mBACL,QAAQ;;;;wBAKS,QACrB,mBACA,SAAS,gBACT,aAAa,cACX,QAAQ"}

package/dist/deploy/sniffer-hooks.d.mts

@@ -21,7 +21,6 @@ type NextResolve = (specifier: string, context: ResolveContext) => Promise<Resol
 /**
  * Resolve hook - intercepts module resolution for @geekmidas/envkit
  */
-declare function resolve(specifier: string, context: ResolveContext, nextResolve: NextResolve): Promise<ResolveResult>;
+export declare function resolve(specifier: string, context: ResolveContext, nextResolve: NextResolve): Promise<ResolveResult>;
 //#endregion
-export { resolve };
 //# sourceMappingURL=sniffer-hooks.d.mts.map

package/dist/deploy/sniffer-hooks.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-hooks.d.mts","names":[],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":[],"mappings":";;;AAwByB;AAIP;;;;;AASN,KAfP,cAAA,GAeO;EAKU,UAAO,EAAA,MAAA,EAAA;EAAA,gBAAA,EAlBV,MAkBU,CAAA,MAAA,EAAA,MAAA,CAAA;EAAA,SAEnB,CAAA,EAAA,MAAA;CAAc;KAhBnB,aAAA,GAkBM;EAAa,GAArB,EAAA,MAAA;EAAO,YAAA,CAAA,EAAA,OAAA;;;KAZL,WAAA,gCAEK,mBACL,QAAQ;;;;iBAKS,OAAA,6BAEZ,6BACI,cACX,QAAQ"}
+{"version":3,"file":"sniffer-hooks.d.mts","names":[],"sources":["../../src/deploy/sniffer-hooks.ts"],"mappings":";;;;;;;;;KAsBK;EACJ;EACA,kBAAkB;EAClB;;KAGI;EACJ;EACA;EACA;;KAGI,eACJ,mBACA,SAAS,mBACL,QAAQ;;;;wBAKS,QACrB,mBACA,SAAS,gBACT,aAAa,cACX,QAAQ"}

package/dist/deploy/sniffer-hooks.mjs

@@ -1,8 +1,15 @@
-import { existsSync } from "node:fs";
 import { dirname, join } from "node:path";
+import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-
 //#region src/deploy/sniffer-hooks.ts
+/**
+* Module loader hooks for entry app sniffing.
+*
+* This module provides the resolve hook that intercepts '@geekmidas/envkit'
+* imports and redirects them to the patched sniffer version.
+*
+* This file is registered via module.register() from sniffer-loader.ts.
+*/
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const mjsPath = join(__dirname, "sniffer-envkit-patch.mjs");
@@ -18,7 +25,7 @@ async function resolve(specifier, context, nextResolve) {
 	};
 	return nextResolve(specifier, context);
 }
-
 //#endregion
 export { resolve };
+
 //# sourceMappingURL=sniffer-hooks.mjs.map

package/dist/deploy/sniffer-hooks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-hooks.mjs","names":["specifier: string","context: ResolveContext","nextResolve: NextResolve"],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":["/**\n * Module loader hooks for entry app sniffing.\n *\n * This module provides the resolve hook that intercepts '@geekmidas/envkit'\n * imports and redirects them to the patched sniffer version.\n *\n * This file is registered via module.register() from sniffer-loader.ts.\n */\n\nimport { existsSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// Resolve path to the patched envkit module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-envkit-patch.mjs');\nconst tsPath = join(__dirname, 'sniffer-envkit-patch.ts');\nconst patchedEnvkitPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\ntype ResolveContext = {\n\tconditions: string[];\n\timportAttributes: Record<string, string>;\n\tparentURL?: string;\n};\n\ntype ResolveResult = {\n\turl: string;\n\tshortCircuit?: boolean;\n\tformat?: string;\n};\n\ntype NextResolve = (\n\tspecifier: string,\n\tcontext: ResolveContext,\n) => Promise<ResolveResult>;\n\n/**\n * Resolve hook - intercepts module resolution for @geekmidas/envkit\n */\nexport async function resolve(\n\tspecifier: string,\n\tcontext: ResolveContext,\n\tnextResolve: NextResolve,\n): Promise<ResolveResult> {\n\t// Intercept @geekmidas/envkit imports\n\tif (specifier === '@geekmidas/envkit') {\n\t\treturn {\n\t\t\turl: `file://${patchedEnvkitPath}`,\n\t\t\tshortCircuit: true,\n\t\t};\n\t}\n\n\treturn nextResolve(specifier, context);\n}\n"],"mappings":";;;;;AAcA,MAAM,aAAa,cAAc,OAAO,KAAK,IAAI;AACjD,MAAM,YAAY,QAAQ,WAAW;AAGrC,MAAM,UAAU,KAAK,WAAW,2BAA2B;AAC3D,MAAM,SAAS,KAAK,WAAW,0BAA0B;AACzD,MAAM,oBAAoB,WAAW,QAAQ,GAAG,UAAU;;;;AAsB1D,eAAsB,QACrBA,WACAC,SACAC,aACyB;AAEzB,KAAI,cAAc,oBACjB,QAAO;EACN,MAAM,SAAS,kBAAkB;EACjC,cAAc;CACd;AAGF,QAAO,YAAY,WAAW,QAAQ;AACtC"}
+{"version":3,"file":"sniffer-hooks.mjs","names":[],"sources":["../../src/deploy/sniffer-hooks.ts"],"sourcesContent":["/**\n * Module loader hooks for entry app sniffing.\n *\n * This module provides the resolve hook that intercepts '@geekmidas/envkit'\n * imports and redirects them to the patched sniffer version.\n *\n * This file is registered via module.register() from sniffer-loader.ts.\n */\n\nimport { existsSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// Resolve path to the patched envkit module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-envkit-patch.mjs');\nconst tsPath = join(__dirname, 'sniffer-envkit-patch.ts');\nconst patchedEnvkitPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\ntype ResolveContext = {\n\tconditions: string[];\n\timportAttributes: Record<string, string>;\n\tparentURL?: string;\n};\n\ntype ResolveResult = {\n\turl: string;\n\tshortCircuit?: boolean;\n\tformat?: string;\n};\n\ntype NextResolve = (\n\tspecifier: string,\n\tcontext: ResolveContext,\n) => Promise<ResolveResult>;\n\n/**\n * Resolve hook - intercepts module resolution for @geekmidas/envkit\n */\nexport async function resolve(\n\tspecifier: string,\n\tcontext: ResolveContext,\n\tnextResolve: NextResolve,\n): Promise<ResolveResult> {\n\t// Intercept @geekmidas/envkit imports\n\tif (specifier === '@geekmidas/envkit') {\n\t\treturn {\n\t\t\turl: `file://${patchedEnvkitPath}`,\n\t\t\tshortCircuit: true,\n\t\t};\n\t}\n\n\treturn nextResolve(specifier, context);\n}\n"],"mappings":";;;;;;;;;;;;AAcA,MAAM,aAAa,cAAc,YAAY,GAAG;AAChD,MAAM,YAAY,QAAQ,UAAU;AAGpC,MAAM,UAAU,KAAK,WAAW,0BAA0B;AAC1D,MAAM,SAAS,KAAK,WAAW,yBAAyB;AACxD,MAAM,oBAAoB,WAAW,OAAO,IAAI,UAAU;;;;AAsB1D,eAAsB,QACrB,WACA,SACA,aACyB;CAEzB,IAAI,cAAc,qBACjB,OAAO;EACN,KAAK,UAAU;EACf,cAAc;CACf;CAGD,OAAO,YAAY,WAAW,OAAO;AACtC"}

package/dist/deploy/sniffer-loader.cjs

@@ -1,16 +1,25 @@
-const require_chunk = require('../chunk-CUT6urMc.cjs');
-const node_fs = require_chunk.__toESM(require("node:fs"));
-const node_path = require_chunk.__toESM(require("node:path"));
-const node_url = require_chunk.__toESM(require("node:url"));
-const node_module = require_chunk.__toESM(require("node:module"));
-
+let node_path = require("node:path");
+let node_fs = require("node:fs");
+let node_module = require("node:module");
+let node_url = require("node:url");
 //#region src/deploy/sniffer-loader.ts
+/**
+* Node.js module loader registration for entry app sniffing.
+*
+* This module registers a custom loader hook that intercepts imports of
+* '@geekmidas/envkit' and replaces the EnvironmentParser with
+* SnifferEnvironmentParser, allowing us to capture which environment
+* variables an entry app accesses.
+*
+* Usage:
+*   node --import tsx --import ./sniffer-loader.mjs ./sniffer-worker.mjs /path/to/entry.ts
+*/
 const __filename$1 = (0, node_url.fileURLToPath)(require("url").pathToFileURL(__filename).href);
 const __dirname$1 = (0, node_path.dirname)(__filename$1);
 const mjsPath = (0, node_path.join)(__dirname$1, "sniffer-hooks.mjs");
 const tsPath = (0, node_path.join)(__dirname$1, "sniffer-hooks.ts");
 const hooksPath = (0, node_fs.existsSync)(mjsPath) ? mjsPath : tsPath;
 (0, node_module.register)((0, node_url.pathToFileURL)(hooksPath).href, require("url").pathToFileURL(__filename).href);
-
 //#endregion
+
 //# sourceMappingURL=sniffer-loader.cjs.map

package/dist/deploy/sniffer-loader.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sniffer-loader.cjs","names":["__filename","__dirname"],"sources":["../../src/deploy/sniffer-loader.ts"],"sourcesContent":["/**\n * Node.js module loader registration for entry app sniffing.\n *\n * This module registers a custom loader hook that intercepts imports of\n * '@geekmidas/envkit' and replaces the EnvironmentParser with\n * SnifferEnvironmentParser, allowing us to capture which environment\n * variables an entry app accesses.\n *\n * Usage:\n *   node --import tsx --import ./sniffer-loader.mjs ./sniffer-worker.mjs /path/to/entry.ts\n */\n\nimport { existsSync } from 'node:fs';\nimport { register } from 'node:module';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\n// Resolve path to the loader hooks module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-hooks.mjs');\nconst tsPath = join(__dirname, 'sniffer-hooks.ts');\nconst hooksPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\n// Register the loader hooks\nregister(pathToFileURL(hooksPath).href, import.meta.url);\n"],"mappings":";;;;;;;AAkBA,MAAMA,eAAa,0EAA8B;AACjD,MAAMC,cAAY,uBAAQD,aAAW;AAGrC,MAAM,UAAU,oBAAKC,aAAW,oBAAoB;AACpD,MAAM,SAAS,oBAAKA,aAAW,mBAAmB;AAClD,MAAM,YAAY,wBAAW,QAAQ,GAAG,UAAU;AAGlD,0BAAS,4BAAc,UAAU,CAAC,oDAAsB"}
+{"version":3,"file":"sniffer-loader.cjs","names":["__filename","fileURLToPath","__dirname","dirname","join","existsSync","register","pathToFileURL"],"sources":["../../src/deploy/sniffer-loader.ts"],"sourcesContent":["/**\n * Node.js module loader registration for entry app sniffing.\n *\n * This module registers a custom loader hook that intercepts imports of\n * '@geekmidas/envkit' and replaces the EnvironmentParser with\n * SnifferEnvironmentParser, allowing us to capture which environment\n * variables an entry app accesses.\n *\n * Usage:\n *   node --import tsx --import ./sniffer-loader.mjs ./sniffer-worker.mjs /path/to/entry.ts\n */\n\nimport { existsSync } from 'node:fs';\nimport { register } from 'node:module';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\n// Resolve path to the loader hooks module\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Try .mjs first (production dist), then .ts (development)\nconst mjsPath = join(__dirname, 'sniffer-hooks.mjs');\nconst tsPath = join(__dirname, 'sniffer-hooks.ts');\nconst hooksPath = existsSync(mjsPath) ? mjsPath : tsPath;\n\n// Register the loader hooks\nregister(pathToFileURL(hooksPath).href, import.meta.url);\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,MAAMA,gBAAAA,GAAaC,SAAAA,cAAAA,CAAAA,QAAAA,KAAAA,CAAAA,CAAAA,cAAAA,UAAAA,CAAAA,CAAAA,IAA6B;AAChD,MAAMC,eAAAA,GAAYC,UAAAA,QAAAA,CAAQH,YAAU;AAGpC,MAAM,WAAA,GAAUI,UAAAA,KAAAA,CAAKF,aAAW,mBAAmB;AACnD,MAAM,UAAA,GAASE,UAAAA,KAAAA,CAAKF,aAAW,kBAAkB;AACjD,MAAM,aAAA,GAAYG,QAAAA,WAAAA,CAAW,OAAO,IAAI,UAAU;CAGlDC,GAAAA,YAAAA,SAAAA,EAAAA,GAASC,SAAAA,cAAAA,CAAc,SAAS,CAAC,CAAC,MAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAqB"}

package/dist/deploy/sniffer-loader.d.cts

@@ -1 +1 @@
-export { };
+export {}

package/dist/deploy/sniffer-loader.d.mts

@@ -1 +1 @@
-export { };
+export {}