@geekmidas/cli 10.0.0-alpha.3 → 10.0.0-alpha.30

package/dist/ready-DXtNfk7v.cjs

@@ -0,0 +1,390 @@
+const require_discover = require("./discover-CroTIm0K.cjs");
+const require_OpenApiTsGenerator = require("./OpenApiTsGenerator-D1nhN98m.cjs");
+let node_fs = require("node:fs");
+let node_fs_promises = require("node:fs/promises");
+let node_path = require("node:path");
+let _geekmidas_manifest = require("@geekmidas/manifest");
+let _geekmidas_envkit = require("@geekmidas/envkit");
+let _geekmidas_services = require("@geekmidas/services");
+//#region src/generators/drivers.ts
+/**
+* Driver registration for generated entry points.
+*
+* A construct declares that it needs object storage and is handed one URL; the
+* scheme in that URL picks the driver that builds the client. Which drivers
+* exist is therefore the *entry point's* decision, not the construct's and not
+* the application's — an app that never talks to S3 should never resolve the AWS
+* SDK, and application code that registers a driver has named a provider in the
+* one layer this design keeps provider-free.
+*
+* So the generated entries register: `gkm dev`'s server for local development,
+* and each Lambda handler for its own target. Registration is an explicit call
+* rather than an import side effect, because a side-effecting module is exactly
+* what a bundler is entitled to drop.
+*/
+/** The `s3://` driver, which serves MinIO locally and S3 deployed. */
+const S3 = {
+	imports: `import { registerStorageDriver } from '@geekmidas/storage';\nimport { s3Driver } from '@geekmidas/storage/aws';`,
+	setup: "registerStorageDriver(s3Driver);"
+};
+const NONE = {
+	imports: "",
+	setup: ""
+};
+/**
+* The cache driver for a backend — exactly one, never all three.
+*
+* Keyed off the *backend* rather than off a dependency, because unlike storage
+* the backend already says which driver is right: a project caching in Postgres
+* resolves `pg` and never `ioredis`, and one caching in Upstash resolves
+* neither. That is the whole reason the drivers live behind separate subpaths.
+*
+* Both HTTP schemes are registered for Upstash, because the local proxy speaks
+* `http://` and Upstash speaks `https://`, and an entry that registered one
+* would work in exactly one of the two places.
+*/
+const CACHE_DRIVERS = {
+	upstash: {
+		imports: `import { registerCacheDriver } from '@geekmidas/cache';\nimport { upstashCacheDriver, upstashInsecureCacheDriver } from '@geekmidas/cache/upstash';`,
+		setup: "registerCacheDriver(upstashCacheDriver);\nregisterCacheDriver(upstashInsecureCacheDriver);"
+	},
+	elasticache: {
+		imports: `import { registerCacheDriver } from '@geekmidas/cache';\nimport { redisCacheDriver, redissCacheDriver } from '@geekmidas/cache/redis';`,
+		setup: "registerCacheDriver(redisCacheDriver);\nregisterCacheDriver(redissCacheDriver);"
+	},
+	db: {
+		imports: `import { registerCacheDriver } from '@geekmidas/cache';\nimport { postgresCacheDriver } from '@geekmidas/cache/postgres';`,
+		setup: "registerCacheDriver(postgresCacheDriver);"
+	}
+};
+/**
+* Everything a generated entry should register: object storage, and the cache.
+*
+* Merged here rather than threaded separately, because a generated file has one
+* import block and one setup block whatever fills them.
+*/
+function driversFor(options) {
+	const backends = options.cache === false || options.cache === void 0 ? [] : typeof options.cache === "string" ? [options.cache] : options.cache;
+	const parts = [storageDriversFor(options.appRoot), ...[...new Set(backends)].map((backend) => CACHE_DRIVERS[backend] ?? CACHE_DRIVERS[require_discover.DEFAULT_CACHE.aws])].filter((part) => part.imports || part.setup);
+	if (parts.length === 0) return NONE;
+	return {
+		imports: parts.map((part) => part.imports).join("\n"),
+		setup: parts.map((part) => part.setup).join("\n")
+	};
+}
+/**
+* Which cache backends an app's entry actually has to speak.
+*
+* The config answers this for a cache that named nowhere, and the *declaration*
+* answers it for one that named a database — `orders.cache('Sessions')` is a
+* statement about the application, so a deployment cannot move that cache and
+* the entry cannot register a driver for somewhere else.
+*
+* Reading only the config is how an entry ends up registering the Upstash
+* driver for a URL the target composed as `postgres://`, which fails at the
+* first request with `UnregisteredCacheScheme` and a stack that points at the
+* cache rather than at the config that disagreed.
+*/
+function cacheBackendsIn(manifest, configured) {
+	const caches = Object.values(manifest).filter((d) => d.kind === "cache");
+	return [...new Set(caches.map((c) => c.of ? "db" : configured))];
+}
+/**
+* The drivers an app's entry points should register.
+*
+* Keyed off the dependency rather than off a declared bucket, because the entry
+* is generated before discovery has run on the watcher's rebuild path — and an
+* app that installed `@geekmidas/storage` has already paid for the SDK it would
+* otherwise resolve lazily.
+*/
+function storageDriversFor(appRoot) {
+	return dependsOnStorage(appRoot) ? S3 : NONE;
+}
+function dependsOnStorage(appRoot) {
+	const manifest = (0, node_path.join)(appRoot, "package.json");
+	if (!(0, node_fs.existsSync)(manifest)) return false;
+	try {
+		const pkg = JSON.parse((0, node_fs.readFileSync)(manifest, "utf8"));
+		return Boolean(pkg.dependencies?.["@geekmidas/storage"] ?? pkg.devDependencies?.["@geekmidas/storage"]);
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/test/harness.ts
+/**
+* What `gkm test` writes for a feature test to be built from.
+*
+* `gkm test` already discovers an app's constructs and resolves the test
+* stage's environment; this keeps both, under `.gkm/test/`:
+*
+* - `manifest.json` — which construct and endpoint is exported where, and the
+*   environment the test stage resolved, keyed as the constructs derive keys.
+* - `clients/<surface>.ts` — each surface's typed client, from the same
+*   generator `gkm build` uses for the app's own.
+* - `index.ts` — the configured `it`, and a `Browser` holding one client per
+*   surface and one per auth server, each on the browser's `fetch`.
+*
+* A test imports `it` from there and declares nothing — not a construct, not an
+* environment key, not a client.
+*/
+/**
+* The variable the manifest's path travels in — what
+* `@geekmidas/constructs/testing` reads. Its own constant rather than an import:
+* that entry carries the whole harness (MSW, Hono, Vitest), and importing it
+* here put all of it on the start-up path of every `gkm` command.
+*/
+const TEST_MANIFEST_ENV = "GKM_TEST_MANIFEST";
+/** Where the harness lives, relative to the workspace root. */
+const TEST_HARNESS_DIR = ".gkm/test";
+/**
+* Better-auth's client plugin for each server plugin id.
+*
+* Written down rather than derived: the ids and the client names do not follow
+* one rule (`admin` pairs with `adminClient`, `email-otp` with
+* `emailOTPClient`), and a guess that missed would hand a test a client
+* silently lacking every method of that plugin. A server plugin not listed has
+* no client counterpart — `bearer`, `open-api` — or needs one from another
+* package, and is left out.
+*/
+const CLIENT_PLUGINS = {
+	admin: "adminClient",
+	anonymous: "anonymousClient",
+	"device-authorization": "deviceAuthorizationClient",
+	"email-otp": "emailOTPClient",
+	jwt: "jwtClient",
+	"last-login-method": "lastLoginMethodClient",
+	"magic-link": "magicLinkClient",
+	"multi-session": "multiSessionClient",
+	"oauth-popup": "oauthPopupClient",
+	"one-tap": "oneTapClient",
+	"one-time-token": "oneTimeTokenClient",
+	organization: "organizationClient",
+	"phone-number": "phoneNumberClient",
+	siwe: "siweClient",
+	"two-factor": "twoFactorClient",
+	username: "usernameClient"
+};
+/** Write the manifest, the clients and the harness; return the manifest path. */
+async function writeTestHarness(options) {
+	const sources = {};
+	const declared = await require_discover.discover({
+		patterns: options.patterns,
+		cwd: options.root,
+		sources
+	});
+	const endpoints = (await new require_OpenApiTsGenerator.EndpointGenerator().load(options.patterns, options.root)).map(({ key, construct, path }) => ({
+		surface: construct.owner ?? construct.surface?.id,
+		construct,
+		source: {
+			file: path.absolute,
+			export: key
+		}
+	})).filter((endpoint) => endpoint.surface !== void 0);
+	const manifest = {
+		stage: options.stage,
+		constructs: Object.fromEntries(Object.entries(declared).flatMap(([id, declaration]) => {
+			const source = sources[id];
+			return source ? [[id, {
+				kind: declaration.kind,
+				source: {
+					file: source.file,
+					export: source.exportName
+				}
+			}]] : [];
+		})),
+		endpoints: endpoints.map(({ surface, source }) => ({
+			surface,
+			source
+		})),
+		env: options.env
+	};
+	const surfaces = [...new Set(endpoints.map(({ surface }) => surface))];
+	const generator = new require_OpenApiTsGenerator.OpenApiTsGenerator();
+	const clients = await Promise.all(surfaces.map(async (surface) => ({
+		file: `${(0, _geekmidas_manifest.kebabCase)(surface)}.ts`,
+		content: await generator.generate(endpoints.filter((endpoint) => endpoint.surface === surface).map(({ construct }) => construct), {
+			title: surface,
+			version: "1.0.0"
+		})
+	})));
+	const auths = await authClients(declared, sources, options.env);
+	const drivers = driversFor({
+		appRoot: options.root,
+		cache: cacheBackendsIn(declared, options.cacheBackend)
+	});
+	const database = await databaseSource(declared, sources, endpoints.map(({ construct }) => construct));
+	const files = [.../* @__PURE__ */ new Set([...Object.values(manifest.constructs).map(({ source }) => source.file), ...manifest.endpoints.map(({ source }) => source.file)])];
+	const harnessFor = (dir) => harnessModule({
+		dir,
+		files,
+		database,
+		surfaces: surfaces.map((id, index) => ({
+			id,
+			secured: clients[index].content.includes("authStrategies:")
+		})),
+		auths,
+		drivers
+	});
+	const json = `${JSON.stringify(manifest, null, 2)}\n`;
+	return (await Promise.all([...new Set(options.targets)].map(async (target) => {
+		const dir = (0, node_path.join)(target, TEST_HARNESS_DIR);
+		await (0, node_fs_promises.rm)(dir, {
+			recursive: true,
+			force: true
+		});
+		await (0, node_fs_promises.mkdir)((0, node_path.join)(dir, "clients"), { recursive: true });
+		await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "manifest.json"), json);
+		await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "index.ts"), harnessFor(dir));
+		for (const client of clients) await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "clients", client.file), client.content);
+		return (0, node_path.join)(dir, "manifest.json");
+	})))[0];
+}
+/** Each auth server, with the client plugins its server plugins pair with. */
+async function authClients(declared, sources, env) {
+	const clients = [];
+	const envParser = new _geekmidas_envkit.EnvironmentParser({ ...env });
+	for (const [id, declaration] of Object.entries(declared)) {
+		const source = sources[id];
+		if (declaration.kind !== "rest-api" || !source) continue;
+		const exported = (await import(source.file))[source.exportName];
+		if (!isBetterAuth(exported) || exported.id !== id) continue;
+		const ids = await exported.pluginIds({
+			envParser,
+			context: _geekmidas_services.serviceContext
+		});
+		clients.push({
+			id,
+			basePath: exported.basePath,
+			plugins: ids.flatMap((plugin) => CLIENT_PLUGINS[plugin] ?? [])
+		});
+	}
+	return clients;
+}
+function isBetterAuth(value) {
+	return typeof value === "object" && value !== null && "pluginIds" in value && "basePath" in value;
+}
+/** `Api` → `api`, `AdminApi` → `adminApi`: a construct id as a property name. */
+function propertyOf(id) {
+	return id.charAt(0).toLowerCase() + id.slice(1);
+}
+/**
+* The database a test's `db` is — the one the endpoints were given with
+* `.database()`, found by the service they hold, which is the construct's own.
+* The same rule `featureTest` applies at runtime, applied here so `db` can be
+* typed by the construct's schema.
+*/
+async function databaseSource(declared, sources, endpoints) {
+	const services = new Set(endpoints.map((endpoint) => endpoint.databaseService).filter(Boolean));
+	if (services.size === 0) return void 0;
+	for (const [id, declaration] of Object.entries(declared)) {
+		const source = sources[id];
+		if (!source || !declaration.kind.startsWith("database")) continue;
+		const exported = (await import(source.file))[source.exportName];
+		if (services.has(exported?.service)) return source;
+	}
+}
+/** An import specifier for `file`, from the harness written into `dir`. */
+function specifierFrom(dir, file) {
+	const path = (0, node_path.relative)(dir, file).replace(/\.tsx?$/, ".js");
+	return path.startsWith(".") ? path : `./${path}`;
+}
+function harnessModule(options) {
+	const { surfaces, auths, drivers, database, dir, files } = options;
+	const plugins = [...new Set(auths.flatMap(({ plugins }) => plugins))].sort();
+	const imports = [
+		`import {${database ? " type DatabaseOf," : ""} featureTest, loadTestManifest } from '@geekmidas/constructs/testing';`,
+		...database ? [`import type { ${database.exportName} as __database } from '${specifierFrom(dir, database.file)}';`] : [],
+		`import { Browser as TestBrowser } from '@geekmidas/testkit/browser';`,
+		...surfaces.map(({ id }) => `import { createApi as create${id} } from './clients/${(0, _geekmidas_manifest.kebabCase)(id)}.js';`),
+		...auths.length ? [`import { createAuthClient } from 'better-auth/client';`] : [],
+		...plugins.length ? [`import { ${plugins.join(", ")} } from 'better-auth/client/plugins';`] : [],
+		...drivers.imports ? [drivers.imports] : [],
+		...files.map((file, index) => `import * as __module${index} from '${specifierFrom(dir, file)}';`)
+	];
+	const url = (id) => `manifest.env[${JSON.stringify((0, _geekmidas_manifest.provideKey)(id, "url"))}]!`;
+	const members = [...surfaces.map(({ id, secured }) => `	/** \`${id}\`, at ${(0, _geekmidas_manifest.provideKey)(id, "url")}. */
+	readonly ${propertyOf(id)} = create${id}({
+		baseURL: ${url(id)},
+		fetch: this.fetch,${secured ? `
+		// Served in-process: no authorizer runs, so nothing is signed. A scheme
+		// with no strategy sends its request without credentials.
+		authStrategies: {} as never,` : ""}
+	});`), ...auths.map((auth) => `	/** \`${auth.id}\`, at ${(0, _geekmidas_manifest.provideKey)(auth.id, "url")}. */
+	readonly ${propertyOf(auth.id)} = createAuthClient({
+		baseURL: \`\${${url(auth.id)}}${auth.basePath}\`,
+		plugins: [${auth.plugins.map((plugin) => `${plugin}()`).join(", ")}],
+		fetchOptions: { customFetchImpl: this.fetch },
+	});`)];
+	return `// Generated by \`gkm test\` from the app's constructs — do not edit.
+${imports.join("\n")}
+
+${drivers.setup ? `// The drivers the app's server entry registers, registered the same way.\n${drivers.setup}\n\n` : ""}const manifest = loadTestManifest(new URL('./manifest.json', import.meta.url));
+
+/** A browser with a client for every surface the app declares. */
+export class Browser extends TestBrowser {
+${members.join("\n\n")}
+}
+
+/** The app's modules, by the path the manifest records for each. */
+const modules = {
+${files.map((file, index) => `\t${JSON.stringify(file)}: __module${index},`).join("\n")}
+};
+
+/** \`it\`, for a test that drives the app the way it runs deployed. */
+export const it = featureTest${database ? "<Browser, DatabaseOf<typeof __database>>" : ""}({ manifest, modules, browser: Browser });
+`;
+}
+//#endregion
+//#region src/test/ready.ts
+/**
+* The hand-off between `gkm test` and the Vitest global setup.
+*
+* `gkm test` reconciles and migrates the test stage before Vitest starts; the
+* setup, run inside Vitest, only has to load what that left. Started by plain
+* `vitest` instead, the setup runs `gkm test --setup` itself first — so there is
+* one way the stage gets ready, whichever started the suite.
+*/
+/** Set on the Vitest process by `gkm test`: the stage is ready, here. */
+const TEST_READY_ENV = "GKM_TEST_READY";
+/** Where `gkm test` records what it prepared, from where it ran. */
+const TEST_READY_FILE = ".gkm/test-ready.json";
+//#endregion
+Object.defineProperty(exports, "TEST_MANIFEST_ENV", {
+	enumerable: true,
+	get: function() {
+		return TEST_MANIFEST_ENV;
+	}
+});
+Object.defineProperty(exports, "TEST_READY_ENV", {
+	enumerable: true,
+	get: function() {
+		return TEST_READY_ENV;
+	}
+});
+Object.defineProperty(exports, "TEST_READY_FILE", {
+	enumerable: true,
+	get: function() {
+		return TEST_READY_FILE;
+	}
+});
+Object.defineProperty(exports, "cacheBackendsIn", {
+	enumerable: true,
+	get: function() {
+		return cacheBackendsIn;
+	}
+});
+Object.defineProperty(exports, "driversFor", {
+	enumerable: true,
+	get: function() {
+		return driversFor;
+	}
+});
+Object.defineProperty(exports, "writeTestHarness", {
+	enumerable: true,
+	get: function() {
+		return writeTestHarness;
+	}
+});
+
+//# sourceMappingURL=ready-DXtNfk7v.cjs.map

package/dist/ready-DXtNfk7v.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ready-DXtNfk7v.cjs","names":["DEFAULT_CACHE","join","existsSync","readFileSync","discover","EndpointGenerator","OpenApiTsGenerator","kebabCase","join","rm","mkdir","writeFile","EnvironmentParser","serviceContext","relative","provideKey"],"sources":["../src/generators/drivers.ts","../src/test/harness.ts","../src/test/ready.ts"],"sourcesContent":["/**\n * Driver registration for generated entry points.\n *\n * A construct declares that it needs object storage and is handed one URL; the\n * scheme in that URL picks the driver that builds the client. Which drivers\n * exist is therefore the *entry point's* decision, not the construct's and not\n * the application's — an app that never talks to S3 should never resolve the AWS\n * SDK, and application code that registers a driver has named a provider in the\n * one layer this design keeps provider-free.\n *\n * So the generated entries register: `gkm dev`'s server for local development,\n * and each Lambda handler for its own target. Registration is an explicit call\n * rather than an import side effect, because a side-effecting module is exactly\n * what a bundler is entitled to drop.\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { type CacheBackend, DEFAULT_CACHE } from '../types.js';\n\n/** The `s3://` driver, which serves MinIO locally and S3 deployed. */\nconst S3 = {\n\timports: `import { registerStorageDriver } from '@geekmidas/storage';\\nimport { s3Driver } from '@geekmidas/storage/aws';`,\n\tsetup: 'registerStorageDriver(s3Driver);',\n};\n\n/** What a generated entry needs in order to register the drivers it uses. */\nexport interface RuntimeDrivers {\n\t/** Import lines, or `''` when there is nothing to register. */\n\timports: string;\n\t/** The registration calls, or `''`. */\n\tsetup: string;\n}\n\n/** @deprecated The same shape, from when only storage had drivers. */\nexport type StorageDrivers = RuntimeDrivers;\n\nconst NONE: RuntimeDrivers = { imports: '', setup: '' };\n\n/**\n * The cache driver for a backend — exactly one, never all three.\n *\n * Keyed off the *backend* rather than off a dependency, because unlike storage\n * the backend already says which driver is right: a project caching in Postgres\n * resolves `pg` and never `ioredis`, and one caching in Upstash resolves\n * neither. That is the whole reason the drivers live behind separate subpaths.\n *\n * Both HTTP schemes are registered for Upstash, because the local proxy speaks\n * `http://` and Upstash speaks `https://`, and an entry that registered one\n * would work in exactly one of the two places.\n */\nconst CACHE_DRIVERS: Record<CacheBackend, RuntimeDrivers> = {\n\tupstash: {\n\t\timports: `import { registerCacheDriver } from '@geekmidas/cache';\\nimport { upstashCacheDriver, upstashInsecureCacheDriver } from '@geekmidas/cache/upstash';`,\n\t\tsetup:\n\t\t\t'registerCacheDriver(upstashCacheDriver);\\nregisterCacheDriver(upstashInsecureCacheDriver);',\n\t},\n\telasticache: {\n\t\timports: `import { registerCacheDriver } from '@geekmidas/cache';\\nimport { redisCacheDriver, redissCacheDriver } from '@geekmidas/cache/redis';`,\n\t\tsetup:\n\t\t\t'registerCacheDriver(redisCacheDriver);\\nregisterCacheDriver(redissCacheDriver);',\n\t},\n\tdb: {\n\t\timports: `import { registerCacheDriver } from '@geekmidas/cache';\\nimport { postgresCacheDriver } from '@geekmidas/cache/postgres';`,\n\t\tsetup: 'registerCacheDriver(postgresCacheDriver);',\n\t},\n};\n\n/**\n * Everything a generated entry should register: object storage, and the cache.\n *\n * Merged here rather than threaded separately, because a generated file has one\n * import block and one setup block whatever fills them.\n */\nexport function driversFor(options: {\n\tappRoot: string;\n\t/**\n\t * The cache backends actually in play — normally one, and more than one only\n\t * where an app declares two caches that live in different places.\n\t *\n\t * Absent or empty means nothing declared a cache, so no cache driver is\n\t * registered at all.\n\t */\n\tcache?: CacheBackend | readonly CacheBackend[] | false;\n}): RuntimeDrivers {\n\tconst backends =\n\t\toptions.cache === false || options.cache === undefined\n\t\t\t? []\n\t\t\t: typeof options.cache === 'string'\n\t\t\t\t? [options.cache]\n\t\t\t\t: options.cache;\n\n\tconst parts = [\n\t\tstorageDriversFor(options.appRoot),\n\t\t...[...new Set(backends)].map(\n\t\t\t(backend) => CACHE_DRIVERS[backend] ?? CACHE_DRIVERS[DEFAULT_CACHE.aws],\n\t\t),\n\t].filter((part) => part.imports || part.setup);\n\n\tif (parts.length === 0) return NONE;\n\n\treturn {\n\t\timports: parts.map((part) => part.imports).join('\\n'),\n\t\tsetup: parts.map((part) => part.setup).join('\\n'),\n\t};\n}\n\n/**\n * Which cache backends an app's entry actually has to speak.\n *\n * The config answers this for a cache that named nowhere, and the *declaration*\n * answers it for one that named a database — `orders.cache('Sessions')` is a\n * statement about the application, so a deployment cannot move that cache and\n * the entry cannot register a driver for somewhere else.\n *\n * Reading only the config is how an entry ends up registering the Upstash\n * driver for a URL the target composed as `postgres://`, which fails at the\n * first request with `UnregisteredCacheScheme` and a stack that points at the\n * cache rather than at the config that disagreed.\n */\nexport function cacheBackendsIn(\n\tmanifest: Record<string, { kind: string; of?: string }>,\n\tconfigured: CacheBackend,\n): CacheBackend[] {\n\tconst caches = Object.values(manifest).filter((d) => d.kind === 'cache');\n\n\treturn [...new Set(caches.map((c) => (c.of ? 'db' : configured)))];\n}\n\n/**\n * The drivers an app's entry points should register.\n *\n * Keyed off the dependency rather than off a declared bucket, because the entry\n * is generated before discovery has run on the watcher's rebuild path — and an\n * app that installed `@geekmidas/storage` has already paid for the SDK it would\n * otherwise resolve lazily.\n */\nexport function storageDriversFor(appRoot: string): RuntimeDrivers {\n\treturn dependsOnStorage(appRoot) ? S3 : NONE;\n}\n\nfunction dependsOnStorage(appRoot: string): boolean {\n\tconst manifest = join(appRoot, 'package.json');\n\tif (!existsSync(manifest)) return false;\n\n\ttry {\n\t\tconst pkg = JSON.parse(readFileSync(manifest, 'utf8')) as {\n\t\t\tdependencies?: Record<string, string>;\n\t\t\tdevDependencies?: Record<string, string>;\n\t\t};\n\n\t\treturn Boolean(\n\t\t\tpkg.dependencies?.['@geekmidas/storage'] ??\n\t\t\t\tpkg.devDependencies?.['@geekmidas/storage'],\n\t\t);\n\t} catch {\n\t\t// An unreadable package.json is the build's problem, not this function's.\n\t\treturn false;\n\t}\n}\n","/**\n * What `gkm test` writes for a feature test to be built from.\n *\n * `gkm test` already discovers an app's constructs and resolves the test\n * stage's environment; this keeps both, under `.gkm/test/`:\n *\n * - `manifest.json` — which construct and endpoint is exported where, and the\n *   environment the test stage resolved, keyed as the constructs derive keys.\n * - `clients/<surface>.ts` — each surface's typed client, from the same\n *   generator `gkm build` uses for the app's own.\n * - `index.ts` — the configured `it`, and a `Browser` holding one client per\n *   surface and one per auth server, each on the browser's `fetch`.\n *\n * A test imports `it` from there and declares nothing — not a construct, not an\n * environment key, not a client.\n */\n\nimport { mkdir, rm, writeFile } from 'node:fs/promises';\nimport { join, relative } from 'node:path';\nimport type { BetterAuth } from '@geekmidas/constructs/auth';\nimport type { Endpoint } from '@geekmidas/constructs/endpoints';\nimport type { TestManifest } from '@geekmidas/constructs/testing';\nimport { EnvironmentParser } from '@geekmidas/envkit';\nimport { kebabCase, provideKey } from '@geekmidas/manifest';\nimport { serviceContext } from '@geekmidas/services';\nimport {\n\tcacheBackendsIn,\n\tdriversFor,\n\ttype RuntimeDrivers,\n} from '../generators/drivers.js';\nimport { EndpointGenerator } from '../generators/EndpointGenerator.js';\nimport { OpenApiTsGenerator } from '../generators/OpenApiTsGenerator.js';\nimport { type ConstructSource, discover } from '../reconcile/discover.js';\nimport type { CacheBackend } from '../types.js';\n\n/**\n * The variable the manifest's path travels in — what\n * `@geekmidas/constructs/testing` reads. Its own constant rather than an import:\n * that entry carries the whole harness (MSW, Hono, Vitest), and importing it\n * here put all of it on the start-up path of every `gkm` command.\n */\nexport const TEST_MANIFEST_ENV = 'GKM_TEST_MANIFEST';\n\n/** Where the harness lives, relative to the workspace root. */\nexport const TEST_HARNESS_DIR = '.gkm/test';\n\n/**\n * Better-auth's client plugin for each server plugin id.\n *\n * Written down rather than derived: the ids and the client names do not follow\n * one rule (`admin` pairs with `adminClient`, `email-otp` with\n * `emailOTPClient`), and a guess that missed would hand a test a client\n * silently lacking every method of that plugin. A server plugin not listed has\n * no client counterpart — `bearer`, `open-api` — or needs one from another\n * package, and is left out.\n */\nconst CLIENT_PLUGINS: Readonly<Record<string, string>> = {\n\tadmin: 'adminClient',\n\tanonymous: 'anonymousClient',\n\t'device-authorization': 'deviceAuthorizationClient',\n\t'email-otp': 'emailOTPClient',\n\tjwt: 'jwtClient',\n\t'last-login-method': 'lastLoginMethodClient',\n\t'magic-link': 'magicLinkClient',\n\t'multi-session': 'multiSessionClient',\n\t'oauth-popup': 'oauthPopupClient',\n\t'one-tap': 'oneTapClient',\n\t'one-time-token': 'oneTimeTokenClient',\n\torganization: 'organizationClient',\n\t'phone-number': 'phoneNumberClient',\n\tsiwe: 'siweClient',\n\t'two-factor': 'twoFactorClient',\n\tusername: 'usernameClient',\n};\n\nexport interface WriteTestHarnessOptions {\n\t/** The workspace root: where discovery runs from. */\n\troot: string;\n\t/**\n\t * The directories to write `.gkm/test/` into — each app's own. A package\n\t * maps its `#test` import only to a path inside itself, so each app gets its\n\t * own copy of the harness rather than one at the root it cannot reach.\n\t */\n\ttargets: string[];\n\t/** The constructs glob — the same patterns reconcile and the build use. */\n\tpatterns: string[];\n\t/** The stage the environment was resolved for. */\n\tstage: string;\n\t/** The environment the suite runs with. */\n\tenv: Record<string, string>;\n\t/**\n\t * Where a cache lives when it names nowhere — the target's default, which\n\t * the build's server entry registers a driver for.\n\t */\n\tcacheBackend: CacheBackend;\n}\n\n/** Write the manifest, the clients and the harness; return the manifest path. */\nexport async function writeTestHarness(\n\toptions: WriteTestHarnessOptions,\n): Promise<string> {\n\tconst sources: Record<string, ConstructSource> = {};\n\tconst declared = await discover({\n\t\tpatterns: options.patterns,\n\t\tcwd: options.root,\n\t\tsources,\n\t});\n\n\tconst loaded = await new EndpointGenerator().load(\n\t\toptions.patterns,\n\t\toptions.root,\n\t);\n\tconst endpoints = loaded\n\t\t.map(({ key, construct, path }) => ({\n\t\t\tsurface: construct.owner ?? construct.surface?.id,\n\t\t\tconstruct,\n\t\t\tsource: { file: path.absolute, export: key },\n\t\t}))\n\t\t.filter(\n\t\t\t(endpoint): endpoint is typeof endpoint & { surface: string } =>\n\t\t\t\tendpoint.surface !== undefined,\n\t\t);\n\n\tconst manifest: TestManifest = {\n\t\tstage: options.stage,\n\t\tconstructs: Object.fromEntries(\n\t\t\tObject.entries(declared).flatMap(([id, declaration]) => {\n\t\t\t\tconst source = sources[id];\n\t\t\t\treturn source\n\t\t\t\t\t? [\n\t\t\t\t\t\t\t[\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tkind: declaration.kind,\n\t\t\t\t\t\t\t\t\tsource: { file: source.file, export: source.exportName },\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t],\n\t\t\t\t\t\t]\n\t\t\t\t\t: [];\n\t\t\t}),\n\t\t),\n\t\tendpoints: endpoints.map(({ surface, source }) => ({ surface, source })),\n\t\tenv: options.env,\n\t};\n\t// One typed client per surface, from the generator the build uses.\n\tconst surfaces = [...new Set(endpoints.map(({ surface }) => surface))];\n\tconst generator = new OpenApiTsGenerator();\n\tconst clients = await Promise.all(\n\t\tsurfaces.map(async (surface) => ({\n\t\t\tfile: `${kebabCase(surface)}.ts`,\n\t\t\tcontent: await generator.generate(\n\t\t\t\tendpoints\n\t\t\t\t\t.filter((endpoint) => endpoint.surface === surface)\n\t\t\t\t\t.map(({ construct }) => construct as Endpoint<any, any, any, any>),\n\t\t\t\t{ title: surface, version: '1.0.0' },\n\t\t\t),\n\t\t})),\n\t);\n\n\tconst auths = await authClients(declared, sources, options.env);\n\t// The drivers the server entry registers — which cache and storage clients\n\t// exist is the entry's decision, and the harness stands where the entry does.\n\tconst drivers = driversFor({\n\t\tappRoot: options.root,\n\t\tcache: cacheBackendsIn(declared, options.cacheBackend),\n\t});\n\tconst database = await databaseSource(\n\t\tdeclared,\n\t\tsources,\n\t\tendpoints.map(({ construct }) => construct as Endpoint<any, any, any, any>),\n\t);\n\tconst files = [\n\t\t...new Set([\n\t\t\t...Object.values(manifest.constructs).map(({ source }) => source.file),\n\t\t\t...manifest.endpoints.map(({ source }) => source.file),\n\t\t]),\n\t];\n\tconst harnessFor = (dir: string) =>\n\t\tharnessModule({\n\t\t\tdir,\n\t\t\tfiles,\n\t\t\tdatabase,\n\t\t\tsurfaces: surfaces.map((id, index) => ({\n\t\t\t\tid,\n\t\t\t\t// The client the generator writes for a surface with authorizers\n\t\t\t\t// takes a strategy per scheme; one without takes none.\n\t\t\t\tsecured: clients[index]!.content.includes('authStrategies:'),\n\t\t\t})),\n\t\t\tauths,\n\t\t\tdrivers,\n\t\t});\n\tconst json = `${JSON.stringify(manifest, null, 2)}\\n`;\n\n\tconst written = await Promise.all(\n\t\t[...new Set(options.targets)].map(async (target) => {\n\t\t\tconst dir = join(target, TEST_HARNESS_DIR);\n\t\t\t// Rewritten whole on every run: a client for a surface that no longer\n\t\t\t// exists is not something a test should be able to import.\n\t\t\tawait rm(dir, { recursive: true, force: true });\n\t\t\tawait mkdir(join(dir, 'clients'), { recursive: true });\n\t\t\tawait writeFile(join(dir, 'manifest.json'), json);\n\t\t\tawait writeFile(join(dir, 'index.ts'), harnessFor(dir));\n\t\t\tfor (const client of clients) {\n\t\t\t\tawait writeFile(join(dir, 'clients', client.file), client.content);\n\t\t\t}\n\t\t\treturn join(dir, 'manifest.json');\n\t\t}),\n\t);\n\n\treturn written[0]!;\n}\n\ninterface AuthClient {\n\tid: string;\n\tbasePath: string;\n\tplugins: string[];\n}\n\n/** Each auth server, with the client plugins its server plugins pair with. */\nasync function authClients(\n\tdeclared: Awaited<ReturnType<typeof discover>>,\n\tsources: Record<string, ConstructSource>,\n\tenv: Record<string, string>,\n): Promise<AuthClient[]> {\n\tconst clients: AuthClient[] = [];\n\tconst envParser = new EnvironmentParser({ ...env });\n\n\tfor (const [id, declaration] of Object.entries(declared)) {\n\t\tconst source = sources[id];\n\t\tif (declaration.kind !== 'rest-api' || !source) continue;\n\n\t\tconst exported = (await import(source.file))[source.exportName] as unknown;\n\t\tif (!isBetterAuth(exported) || exported.id !== id) continue;\n\n\t\tconst ids = await exported.pluginIds({\n\t\t\tenvParser,\n\t\t\tcontext: serviceContext,\n\t\t});\n\t\tclients.push({\n\t\t\tid,\n\t\t\tbasePath: exported.basePath,\n\t\t\tplugins: ids.flatMap((plugin) => CLIENT_PLUGINS[plugin] ?? []),\n\t\t});\n\t}\n\n\treturn clients;\n}\n\nfunction isBetterAuth(value: unknown): value is BetterAuth {\n\treturn (\n\t\ttypeof value === 'object' &&\n\t\tvalue !== null &&\n\t\t'pluginIds' in value &&\n\t\t'basePath' in value\n\t);\n}\n\n/** `Api` → `api`, `AdminApi` → `adminApi`: a construct id as a property name. */\nfunction propertyOf(id: string): string {\n\treturn id.charAt(0).toLowerCase() + id.slice(1);\n}\n\n/**\n * The database a test's `db` is — the one the endpoints were given with\n * `.database()`, found by the service they hold, which is the construct's own.\n * The same rule `featureTest` applies at runtime, applied here so `db` can be\n * typed by the construct's schema.\n */\nasync function databaseSource(\n\tdeclared: Awaited<ReturnType<typeof discover>>,\n\tsources: Record<string, ConstructSource>,\n\tendpoints: Endpoint<any, any, any, any>[],\n): Promise<ConstructSource | undefined> {\n\tconst services = new Set<unknown>(\n\t\tendpoints.map((endpoint) => endpoint.databaseService).filter(Boolean),\n\t);\n\tif (services.size === 0) return undefined;\n\n\tfor (const [id, declaration] of Object.entries(declared)) {\n\t\tconst source = sources[id];\n\t\tif (!source || !declaration.kind.startsWith('database')) continue;\n\n\t\tconst exported = (await import(source.file))[source.exportName] as {\n\t\t\tservice?: unknown;\n\t\t};\n\t\tif (services.has(exported?.service)) return source;\n\t}\n\treturn undefined;\n}\n\n/** An import specifier for `file`, from the harness written into `dir`. */\nfunction specifierFrom(dir: string, file: string): string {\n\tconst path = relative(dir, file).replace(/\\.tsx?$/, '.js');\n\treturn path.startsWith('.') ? path : `./${path}`;\n}\n\nfunction harnessModule(options: {\n\tdir: string;\n\t/** Every module the manifest points at, by absolute path. */\n\tfiles: string[];\n\tdatabase: ConstructSource | undefined;\n\tsurfaces: { id: string; secured: boolean }[];\n\tauths: AuthClient[];\n\tdrivers: RuntimeDrivers;\n}): string {\n\tconst { surfaces, auths, drivers, database, dir, files } = options;\n\tconst plugins = [...new Set(auths.flatMap(({ plugins }) => plugins))].sort();\n\n\tconst imports = [\n\t\t`import {${database ? ' type DatabaseOf,' : ''} featureTest, loadTestManifest } from '@geekmidas/constructs/testing';`,\n\t\t...(database\n\t\t\t? [\n\t\t\t\t\t`import type { ${database.exportName} as __database } from '${specifierFrom(dir, database.file)}';`,\n\t\t\t\t]\n\t\t\t: []),\n\t\t`import { Browser as TestBrowser } from '@geekmidas/testkit/browser';`,\n\t\t...surfaces.map(\n\t\t\t({ id }) =>\n\t\t\t\t`import { createApi as create${id} } from './clients/${kebabCase(id)}.js';`,\n\t\t),\n\t\t...(auths.length\n\t\t\t? [`import { createAuthClient } from 'better-auth/client';`]\n\t\t\t: []),\n\t\t...(plugins.length\n\t\t\t? [`import { ${plugins.join(', ')} } from 'better-auth/client/plugins';`]\n\t\t\t: []),\n\t\t...(drivers.imports ? [drivers.imports] : []),\n\t\t// Every construct and endpoint module, imported here — inside the app,\n\t\t// where its tsconfig paths resolve — rather than by path from the kit.\n\t\t...files.map(\n\t\t\t(file, index) =>\n\t\t\t\t`import * as __module${index} from '${specifierFrom(dir, file)}';`,\n\t\t),\n\t];\n\n\tconst url = (id: string) =>\n\t\t`manifest.env[${JSON.stringify(provideKey(id, 'url'))}]!`;\n\n\tconst members = [\n\t\t...surfaces.map(\n\t\t\t({ id, secured }) => `\t/** \\`${id}\\`, at ${provideKey(id, 'url')}. */\n\treadonly ${propertyOf(id)} = create${id}({\n\t\tbaseURL: ${url(id)},\n\t\tfetch: this.fetch,${\n\t\t\tsecured\n\t\t\t\t? `\n\t\t// Served in-process: no authorizer runs, so nothing is signed. A scheme\n\t\t// with no strategy sends its request without credentials.\n\t\tauthStrategies: {} as never,`\n\t\t\t\t: ''\n\t\t}\n\t});`,\n\t\t),\n\t\t...auths.map(\n\t\t\t(auth) => `\t/** \\`${auth.id}\\`, at ${provideKey(auth.id, 'url')}. */\n\treadonly ${propertyOf(auth.id)} = createAuthClient({\n\t\tbaseURL: \\`\\${${url(auth.id)}}${auth.basePath}\\`,\n\t\tplugins: [${auth.plugins.map((plugin) => `${plugin}()`).join(', ')}],\n\t\tfetchOptions: { customFetchImpl: this.fetch },\n\t});`,\n\t\t),\n\t];\n\n\treturn `// Generated by \\`gkm test\\` from the app's constructs — do not edit.\n${imports.join('\\n')}\n\n${drivers.setup ? `// The drivers the app's server entry registers, registered the same way.\\n${drivers.setup}\\n\\n` : ''}const manifest = loadTestManifest(new URL('./manifest.json', import.meta.url));\n\n/** A browser with a client for every surface the app declares. */\nexport class Browser extends TestBrowser {\n${members.join('\\n\\n')}\n}\n\n/** The app's modules, by the path the manifest records for each. */\nconst modules = {\n${files.map((file, index) => `\\t${JSON.stringify(file)}: __module${index},`).join('\\n')}\n};\n\n/** \\`it\\`, for a test that drives the app the way it runs deployed. */\nexport const it = featureTest${database ? '<Browser, DatabaseOf<typeof __database>>' : ''}({ manifest, modules, browser: Browser });\n`;\n}\n","/**\n * The hand-off between `gkm test` and the Vitest global setup.\n *\n * `gkm test` reconciles and migrates the test stage before Vitest starts; the\n * setup, run inside Vitest, only has to load what that left. Started by plain\n * `vitest` instead, the setup runs `gkm test --setup` itself first — so there is\n * one way the stage gets ready, whichever started the suite.\n */\n\n/** Set on the Vitest process by `gkm test`: the stage is ready, here. */\nexport const TEST_READY_ENV = 'GKM_TEST_READY';\n\n/** Where `gkm test` records what it prepared, from where it ran. */\nexport const TEST_READY_FILE = '.gkm/test-ready.json';\n\nexport interface TestReady {\n\t/** The resolved environment, as a JSON object of strings. */\n\tenv: string;\n\t/** The test manifest the `#test` harness reads. */\n\tmanifest?: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAM,KAAK;CACV,SAAS;CACT,OAAO;AACR;AAaA,MAAM,OAAuB;CAAE,SAAS;CAAI,OAAO;AAAG;;;;;;;;;;;;;AActD,MAAM,gBAAsD;CAC3D,SAAS;EACR,SAAS;EACT,OACC;CACF;CACA,aAAa;EACZ,SAAS;EACT,OACC;CACF;CACA,IAAI;EACH,SAAS;EACT,OAAO;CACR;AACD;;;;;;;AAQA,SAAgB,WAAW,SAUR;CAClB,MAAM,WACL,QAAQ,UAAU,SAAS,QAAQ,UAAU,KAAA,IAC1C,CAAC,IACD,OAAO,QAAQ,UAAU,WACxB,CAAC,QAAQ,KAAK,IACd,QAAQ;CAEb,MAAM,QAAQ,CACb,kBAAkB,QAAQ,OAAO,GACjC,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KACxB,YAAY,cAAc,YAAY,cAAcA,iBAAAA,cAAc,IACpE,CACD,CAAC,CAAC,QAAQ,SAAS,KAAK,WAAW,KAAK,KAAK;CAE7C,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,OAAO;EACN,SAAS,MAAM,KAAK,SAAS,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI;EACpD,OAAO,MAAM,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI;CACjD;AACD;;;;;;;;;;;;;;AAeA,SAAgB,gBACf,UACA,YACiB;CACjB,MAAM,SAAS,OAAO,OAAO,QAAQ,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,OAAO;CAEvE,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,KAAK,MAAO,EAAE,KAAK,OAAO,UAAW,CAAC,CAAC;AAClE;;;;;;;;;AAUA,SAAgB,kBAAkB,SAAiC;CAClE,OAAO,iBAAiB,OAAO,IAAI,KAAK;AACzC;AAEA,SAAS,iBAAiB,SAA0B;CACnD,MAAM,YAAA,GAAWC,UAAAA,KAAAA,CAAK,SAAS,cAAc;CAC7C,IAAI,EAAA,GAACC,QAAAA,WAAAA,CAAW,QAAQ,GAAG,OAAO;CAElC,IAAI;EACH,MAAM,MAAM,KAAK,OAAA,GAAMC,QAAAA,aAAAA,CAAa,UAAU,MAAM,CAAC;EAKrD,OAAO,QACN,IAAI,eAAe,yBAClB,IAAI,kBAAkB,qBACxB;CACD,QAAQ;EAEP,OAAO;CACR;AACD;;;;;;;;;;;;;;;;;;;;;;;;;ACtHA,MAAa,oBAAoB;;AAGjC,MAAa,mBAAmB;;;;;;;;;;;AAYhC,MAAM,iBAAmD;CACxD,OAAO;CACP,WAAW;CACX,wBAAwB;CACxB,aAAa;CACb,KAAK;CACL,qBAAqB;CACrB,cAAc;CACd,iBAAiB;CACjB,eAAe;CACf,WAAW;CACX,kBAAkB;CAClB,cAAc;CACd,gBAAgB;CAChB,MAAM;CACN,cAAc;CACd,UAAU;AACX;;AAyBA,eAAsB,iBACrB,SACkB;CAClB,MAAM,UAA2C,CAAC;CAClD,MAAM,WAAW,MAAMC,iBAAAA,SAAS;EAC/B,UAAU,QAAQ;EAClB,KAAK,QAAQ;EACb;CACD,CAAC;CAMD,MAAM,aAAY,MAJG,IAAIC,2BAAAA,kBAAkB,CAAC,CAAC,KAC5C,QAAQ,UACR,QAAQ,IACT,EAAA,CAEE,KAAK,EAAE,KAAK,WAAW,YAAY;EACnC,SAAS,UAAU,SAAS,UAAU,SAAS;EAC/C;EACA,QAAQ;GAAE,MAAM,KAAK;GAAU,QAAQ;EAAI;CAC5C,EAAE,CAAC,CACF,QACC,aACA,SAAS,YAAY,KAAA,CACvB;CAED,MAAM,WAAyB;EAC9B,OAAO,QAAQ;EACf,YAAY,OAAO,YAClB,OAAO,QAAQ,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,iBAAiB;GACvD,MAAM,SAAS,QAAQ;GACvB,OAAO,SACJ,CACA,CACC,IACA;IACC,MAAM,YAAY;IAClB,QAAQ;KAAE,MAAM,OAAO;KAAM,QAAQ,OAAO;IAAW;GACxD,CACD,CACD,IACC,CAAC;EACL,CAAC,CACF;EACA,WAAW,UAAU,KAAK,EAAE,SAAS,cAAc;GAAE;GAAS;EAAO,EAAE;EACvE,KAAK,QAAQ;CACd;CAEA,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,UAAU,KAAK,EAAE,cAAc,OAAO,CAAC,CAAC;CACrE,MAAM,YAAY,IAAIC,2BAAAA,mBAAmB;CACzC,MAAM,UAAU,MAAM,QAAQ,IAC7B,SAAS,IAAI,OAAO,aAAa;EAChC,MAAM,IAAA,GAAGC,oBAAAA,UAAAA,CAAU,OAAO,EAAE;EAC5B,SAAS,MAAM,UAAU,SACxB,UACE,QAAQ,aAAa,SAAS,YAAY,OAAO,CAAC,CAClD,KAAK,EAAE,gBAAgB,SAAyC,GAClE;GAAE,OAAO;GAAS,SAAS;EAAQ,CACpC;CACD,EAAE,CACH;CAEA,MAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,QAAQ,GAAG;CAG9D,MAAM,UAAU,WAAW;EAC1B,SAAS,QAAQ;EACjB,OAAO,gBAAgB,UAAU,QAAQ,YAAY;CACtD,CAAC;CACD,MAAM,WAAW,MAAM,eACtB,UACA,SACA,UAAU,KAAK,EAAE,gBAAgB,SAAyC,CAC3E;CACA,MAAM,QAAQ,CACb,mBAAG,IAAI,IAAI,CACV,GAAG,OAAO,OAAO,SAAS,UAAU,CAAC,CAAC,KAAK,EAAE,aAAa,OAAO,IAAI,GACrE,GAAG,SAAS,UAAU,KAAK,EAAE,aAAa,OAAO,IAAI,CACtD,CAAC,CACF;CACA,MAAM,cAAc,QACnB,cAAc;EACb;EACA;EACA;EACA,UAAU,SAAS,KAAK,IAAI,WAAW;GACtC;GAGA,SAAS,QAAQ,MAAM,CAAE,QAAQ,SAAS,iBAAiB;EAC5D,EAAE;EACF;EACA;CACD,CAAC;CACF,MAAM,OAAO,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE;CAkBlD,QAAO,MAhBe,QAAQ,IAC7B,CAAC,GAAG,IAAI,IAAI,QAAQ,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,WAAW;EACnD,MAAM,OAAA,GAAMC,UAAAA,KAAAA,CAAK,QAAQ,gBAAgB;EAGzC,OAAA,GAAMC,iBAAAA,GAAAA,CAAG,KAAK;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAC9C,OAAA,GAAMC,iBAAAA,MAAAA,EAAAA,GAAMF,UAAAA,KAAAA,CAAK,KAAK,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,OAAA,GAAMG,iBAAAA,UAAAA,EAAAA,GAAUH,UAAAA,KAAAA,CAAK,KAAK,eAAe,GAAG,IAAI;EAChD,OAAA,GAAMG,iBAAAA,UAAAA,EAAAA,GAAUH,UAAAA,KAAAA,CAAK,KAAK,UAAU,GAAG,WAAW,GAAG,CAAC;EACtD,KAAK,MAAM,UAAU,SACpB,OAAA,GAAMG,iBAAAA,UAAAA,EAAAA,GAAUH,UAAAA,KAAAA,CAAK,KAAK,WAAW,OAAO,IAAI,GAAG,OAAO,OAAO;EAElE,QAAA,GAAOA,UAAAA,KAAAA,CAAK,KAAK,eAAe;CACjC,CAAC,CACF,EAAA,CAEe;AAChB;;AASA,eAAe,YACd,UACA,SACA,KACwB;CACxB,MAAM,UAAwB,CAAC;CAC/B,MAAM,YAAY,IAAII,kBAAAA,kBAAkB,EAAE,GAAG,IAAI,CAAC;CAElD,KAAK,MAAM,CAAC,IAAI,gBAAgB,OAAO,QAAQ,QAAQ,GAAG;EACzD,MAAM,SAAS,QAAQ;EACvB,IAAI,YAAY,SAAS,cAAc,CAAC,QAAQ;EAEhD,MAAM,YAAY,MAAM,OAAO,OAAO,MAAA,CAAO,OAAO;EACpD,IAAI,CAAC,aAAa,QAAQ,KAAK,SAAS,OAAO,IAAI;EAEnD,MAAM,MAAM,MAAM,SAAS,UAAU;GACpC;GACA,SAASC,oBAAAA;EACV,CAAC;EACD,QAAQ,KAAK;GACZ;GACA,UAAU,SAAS;GACnB,SAAS,IAAI,SAAS,WAAW,eAAe,WAAW,CAAC,CAAC;EAC9D,CAAC;CACF;CAEA,OAAO;AACR;AAEA,SAAS,aAAa,OAAqC;CAC1D,OACC,OAAO,UAAU,YACjB,UAAU,QACV,eAAe,SACf,cAAc;AAEhB;;AAGA,SAAS,WAAW,IAAoB;CACvC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,MAAM,CAAC;AAC/C;;;;;;;AAQA,eAAe,eACd,UACA,SACA,WACuC;CACvC,MAAM,WAAW,IAAI,IACpB,UAAU,KAAK,aAAa,SAAS,eAAe,CAAC,CAAC,OAAO,OAAO,CACrE;CACA,IAAI,SAAS,SAAS,GAAG,OAAO,KAAA;CAEhC,KAAK,MAAM,CAAC,IAAI,gBAAgB,OAAO,QAAQ,QAAQ,GAAG;EACzD,MAAM,SAAS,QAAQ;EACvB,IAAI,CAAC,UAAU,CAAC,YAAY,KAAK,WAAW,UAAU,GAAG;EAEzD,MAAM,YAAY,MAAM,OAAO,OAAO,MAAA,CAAO,OAAO;EAGpD,IAAI,SAAS,IAAI,UAAU,OAAO,GAAG,OAAO;CAC7C;AAED;;AAGA,SAAS,cAAc,KAAa,MAAsB;CACzD,MAAM,QAAA,GAAOC,UAAAA,SAAAA,CAAS,KAAK,IAAI,CAAC,CAAC,QAAQ,WAAW,KAAK;CACzD,OAAO,KAAK,WAAW,GAAG,IAAI,OAAO,KAAK;AAC3C;AAEA,SAAS,cAAc,SAQZ;CACV,MAAM,EAAE,UAAU,OAAO,SAAS,UAAU,KAAK,UAAU;CAC3D,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,SAAS,EAAE,cAAc,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;CAE3E,MAAM,UAAU;EACf,WAAW,WAAW,sBAAsB,GAAG;EAC/C,GAAI,WACD,CACA,iBAAiB,SAAS,WAAW,yBAAyB,cAAc,KAAK,SAAS,IAAI,EAAE,GACjG,IACC,CAAC;EACJ;EACA,GAAG,SAAS,KACV,EAAE,SACF,+BAA+B,GAAG,sBAAA,GAAqBP,oBAAAA,UAAAA,CAAU,EAAE,EAAE,MACvE;EACA,GAAI,MAAM,SACP,CAAC,wDAAwD,IACzD,CAAC;EACJ,GAAI,QAAQ,SACT,CAAC,YAAY,QAAQ,KAAK,IAAI,EAAE,sCAAsC,IACtE,CAAC;EACJ,GAAI,QAAQ,UAAU,CAAC,QAAQ,OAAO,IAAI,CAAC;EAG3C,GAAG,MAAM,KACP,MAAM,UACN,uBAAuB,MAAM,SAAS,cAAc,KAAK,IAAI,EAAE,GACjE;CACD;CAEA,MAAM,OAAO,OACZ,gBAAgB,KAAK,WAAA,GAAUQ,oBAAAA,WAAAA,CAAW,IAAI,KAAK,CAAC,EAAE;CAEvD,MAAM,UAAU,CACf,GAAG,SAAS,KACV,EAAE,IAAI,cAAc,UAAU,GAAG,UAAA,GAASA,oBAAAA,WAAAA,CAAW,IAAI,KAAK,EAAE;YACxD,WAAW,EAAE,EAAE,WAAW,GAAG;aAC5B,IAAI,EAAE,EAAE;sBAElB,UACG;;;kCAIA,GACH;KAED,GACA,GAAG,MAAM,KACP,SAAS,UAAU,KAAK,GAAG,UAAA,GAASA,oBAAAA,WAAAA,CAAW,KAAK,IAAI,KAAK,EAAE;YACvD,WAAW,KAAK,EAAE,EAAE;kBACd,IAAI,KAAK,EAAE,EAAE,GAAG,KAAK,SAAS;cAClC,KAAK,QAAQ,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE;;KAGnE,CACD;CAEA,OAAO;EACN,QAAQ,KAAK,IAAI,EAAE;;EAEnB,QAAQ,QAAQ,8EAA8E,QAAQ,MAAM,QAAQ,GAAG;;;;EAIvH,QAAQ,KAAK,MAAM,EAAE;;;;;EAKrB,MAAM,KAAK,MAAM,UAAU,KAAK,KAAK,UAAU,IAAI,EAAE,YAAY,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;;;;+BAIzD,WAAW,6CAA6C,GAAG;;AAE1F;;;;;;;;;;;;ACnXA,MAAa,iBAAiB;;AAG9B,MAAa,kBAAkB"}

package/dist/reconcile/public.cjs

@@ -1,9 +1,9 @@
-const require_discover = require('../discover-DTmFeloL.cjs');
-const require_emit = require('../emit-CbcRolsa.cjs');
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_discover = require("../discover-CroTIm0K.cjs");
+const require_emit = require("../emit-BdoPFjZf.cjs");
 exports.MANIFEST_PATH = require_emit.MANIFEST_PATH;
 exports.discover = require_discover.discover;
 exports.isDeclarable = require_discover.isDeclarable;
 exports.manifestModule = require_emit.manifestModule;
 exports.withRoutes = require_emit.withRoutes;
-exports.writeManifestModule = require_emit.writeManifestModule;
+exports.writeManifestModule = require_emit.writeManifestModule;

package/dist/reconcile/public.d.cts

@@ -1,8 +1,6 @@
-import { CacheBackend, EmailBackend } from "../types-abJQuk7m.cjs";
+import { n as EmailBackend, t as CacheBackend } from "../types-DOOAevjG.cjs";
 import { ConstructManifest, Declaration, RouteInfo } from "@geekmidas/manifest";
-
 //#region src/reconcile/discover.d.ts
-
 /** The construct face discovery needs: an id, and the ability to declare. */
 interface Declarable {
   id: string;
@@ -15,7 +13,7 @@ interface Declarable {
  * `service` is still a construct, and requiring one would exclude the kinds that
  * own no address.
  */
-declare function isDeclarable(value: unknown): value is Declarable;
+export declare function isDeclarable(value: unknown): value is Declarable;
 interface DiscoverOptions {
   /** The glob(s) to search. One pattern, not one per kind. */
   patterns: string | readonly string[];
@@ -39,6 +37,18 @@ interface DiscoverOptions {
    * caller, which wants the manifest and nothing else, is unchanged.
    */
   sources?: Record<string, ConstructSource>;
+  /**
+   * Filled in, when provided, with the ids each owner's runnables declared an
+   * edge to — keyed by the surface an endpoint was built from, or the worker
+   * a cron or subscriber was.
+   *
+   * A runnable is not a declaration: a surface's endpoints are found by the
+   * glob, not listed by the surface, so its node says `endpoints: []` until a
+   * build folds the routes in. Anything deciding what an app's process reaches
+   * — which keys its container is given — needs those edges before any build,
+   * and discovery is already importing the files they are in.
+   */
+  runnables?: Record<string, string[]>;
 }
 /** Where a construct was declared, and under what name. */
 interface ConstructSource {
@@ -46,6 +56,13 @@ interface ConstructSource {
   file: string;
   /** The name it was exported as — what an import statement has to say. */
   exportName: string;
+  /**
+   * The exported construct itself.
+   *
+   * What a declaration cannot say — whether it serves itself — the object can
+   * be asked, and discovery already imported it.
+   */
+  construct: unknown;
 }
 /**
  * Build the construct manifest for a project.
@@ -55,12 +72,11 @@ interface ConstructSource {
  *
  * @throws {DuplicateConstruct} when two exports claim one id.
  */
-declare function discover(options: DiscoverOptions): Promise<ConstructManifest>;
-/** Two constructs claiming one id. */
+export declare function discover(options: DiscoverOptions): Promise<ConstructManifest>;
 //#endregion
 //#region src/reconcile/emit.d.ts
 /** Where the build writes it, relative to the app root. */
-declare const MANIFEST_PATH = ".gkm/manifest.ts";
+export declare const MANIFEST_PATH = ".gkm/manifest.ts";
 /**
  * Fold the build's generated routes into the surface that serves them.
  *
@@ -89,37 +105,22 @@ declare const MANIFEST_PATH = ".gkm/manifest.ts";
  * document's contents depend on which `--provider` ran last. A manifest must not
  * do that.
  */
-declare function withRoutes(manifest: ConstructManifest, routes: readonly RouteInfo[], options: {
+export declare function withRoutes(manifest: ConstructManifest, routes: readonly RouteInfo[], options: {
   perRoute: boolean;
 }): ConstructManifest;
-/**
- * Fold in the compute the build generated: functions, crons, queue workers and
- * topic subscribers.
- *
- * All four are named by their *export*, the same way an endpoint's handler is —
- * `CronGenerator` uses the export key as the name — so none of them can declare
- * themselves and all of them are the build's to add. That is why a `Function`
- * has no `declare()` and never will.
- *
- * A worker and a subscriber **nest** inside the queue or topic that triggers
- * them, because position carries the trigger. A function and a cron are
- * top-level, because nothing triggers them but a caller or a clock.
- */
-
 /**
  * The manifest as TypeScript source.
  *
  * Pure, so what gets written can be asserted without touching a filesystem.
  */
-declare function manifestModule(manifest: ConstructManifest, backends?: Backends): string;
+export declare function manifestModule(manifest: ConstructManifest, backends?: Backends): string;
 /** Write it where the deploy config expects to import it from. */
-declare function writeManifestModule(manifest: ConstructManifest, appRoot: string, backends?: Backends): Promise<string>;
+export declare function writeManifestModule(manifest: ConstructManifest, appRoot: string, backends?: Backends): Promise<string>;
 /** The choices that are deployment config rather than declaration. */
 interface Backends {
   cache?: CacheBackend;
   email?: EmailBackend;
 }
-//# sourceMappingURL=emit.d.ts.map
 //#endregion
-export { DiscoverOptions, MANIFEST_PATH, discover, isDeclarable, manifestModule, withRoutes, writeManifestModule };
+export type { DiscoverOptions };
 //# sourceMappingURL=public.d.cts.map

package/dist/reconcile/public.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/reconcile/discover.ts","../../src/reconcile/emit.ts"],"sourcesContent":[],"mappings":";;;;;;AAiGU,UAnEA,UAAA,CAmEA;;aAjEE;;ACKZ;AA8BA;;;;;AAIoB;AA2JJ,iBDxLA,YAAA,CCwLc,KAAA,EAAA,OAAA,CAAA,EAAA,KAAA,IDxLyB,UCwLzB;AAAA,UD5Kb,eAAA,CC4Ka;EAAA;EACF,QACjB,EAAA,MAAA,GAAA,SAAA,MAAA,EAAA;EAAa,GAAA,CAAA,EAAA,MAAA;EA8BF;;;;;AAIZ;EAUO,SAAA,CAAA,EAAQ,OAAA;EAAA;;;AAEJ;;;;;;;;YDtMV,eAAe;;;UAIT,eAAA;;;;;;;;;;;;;;iBAeK,QAAA,UACZ,kBACP,QAAQ;;;;AC5DX;AA8BgB,cA9BH,aAAA,GA8Ba,kBAAA;;;;;AAIN;AA2JpB;;;;AAEwB;AA8BxB;;;;;AAIU;AAUV;;;;AAEqB;;;;;;;;iBA/ML,UAAA,WACL,oCACO;;IAEf;;;;;;;;;;;;;;;;;;;;iBA2Ja,cAAA,WACL,8BACA;;iBA8BW,mBAAA,WACX,+CAEA,WACR;;UAUc,QAAA;UACR;UACA"}
+{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/reconcile/discover.ts","../../src/reconcile/emit.ts"],"mappings":";;;;UA8BU;EACT;EACA,WAAW;;;;;;;;;wBAUI,aAAa,iBAAiB,SAAS;UAYtC;;EAEhB;EACA;;;;;;;EAOA;;;;;;;;;;;;EAYA,UAAU,eAAe;;;;;;;;;;;;EAYzB,YAAY;;;UAII;;EAEhB;;EAEA;;;;;;;EAOA;;;;;;;;;;wBAWqB,SACrB,SAAS,kBACP,QAAQ;;;;qBC/EE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA8BG,WACf,UAAU,mBACV,iBAAiB,aACjB;EAAW;IACT;;;;;;wBA2Ja,eACf,UAAU,mBACV,WAAU;;wBA8BW,oBACrB,UAAU,mBACV,iBACA,WAAU,WACR;;UAUc;EAChB,QAAQ;EACR,QAAQ"}