@geekmidas/cli 10.0.0-alpha.9 → 10.0.0-alpha.91

package/dist/{chunk-CUT6urMc.cjs → rolldown-runtime-C0BPl7ul.cjs}

@@ -1,10 +1,19 @@
-//#region rolldown:runtime
+//#region \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -15,16 +24,20 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
-
 //#endregion
-
-Object.defineProperty(exports, '__toESM', {
-  enumerable: true,
-  get: function () {
-    return __toESM;
-  }
-});
+Object.defineProperty(exports, "__exportAll", {
+	enumerable: true,
+	get: function() {
+		return __exportAll;
+	}
+});
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/runtime-CN_kmqxo.d.cts

@@ -0,0 +1,90 @@
+import { K as DeployRuntime, et as TargetOptionsIssue } from "./types-NqX1Hz4P.cjs";
+//#region src/target/builtins.d.ts
+/** A target name that is neither built in nor in `deploy.targets`. */
+declare class UnknownDeployTarget extends Error {
+  readonly target: string;
+  /** The names that would have resolved. */
+  readonly known: readonly string[];
+  constructor(target: string,
+  /** The names that would have resolved. */
+  known: readonly string[]);
+}
+/** A built-in target `gkm deploy` cannot deploy through yet. */
+declare class DeployTargetNotYetSupported extends Error {
+  readonly target: string;
+  /** What to do instead, when there is something. */
+  readonly instead?: string | undefined;
+  constructor(target: string,
+  /** What to do instead, when there is something. */
+  instead?: string | undefined);
+}
+//#endregion
+//#region src/target/package.d.ts
+/** A target package the project does not have installed. */
+declare class TargetPackageNotFound extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  readonly from: string;
+  constructor(target: string, packageName: string, from: string);
+}
+//#endregion
+//#region src/target/provider.d.ts
+/**
+ * `gkm deploy --provider`, from before there were targets.
+ *
+ * It named three things, and only one of them ever deployed a workspace:
+ * `dokploy` is now the target of that name; `docker` and `aws-lambda` were
+ * accepted and always failed, so they are gone with a pointer to what does
+ * the job.
+ */
+/** A `--provider` that no longer exists. */
+declare class ProviderRemoved extends Error {
+  readonly provider: string;
+  /** What to use instead. */
+  readonly instead: string;
+  constructor(provider: string,
+  /** What to use instead. */
+  instead: string);
+}
+//#endregion
+//#region src/target/resolve.d.ts
+/** A target package whose default export is not a target. */
+declare class TargetPackageInvalid extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  constructor(target: string, packageName: string);
+}
+/** A `deploy.targets` entry that is not a target, a package name or a pair. */
+declare class TargetEntryInvalid extends Error {
+  readonly target: string;
+  constructor(target: string);
+}
+/** A target whose `runtime` is not the one its package declares. */
+declare class TargetRuntimeMismatch extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  readonly declared: DeployRuntime;
+  readonly actual: DeployRuntime;
+  constructor(target: string, packageName: string, declared: DeployRuntime, actual: DeployRuntime);
+}
+/** Options a target's schema rejected. */
+declare class InvalidTargetOptions extends Error {
+  readonly target: string;
+  readonly issues: readonly TargetOptionsIssue[];
+  constructor(target: string, issues: readonly TargetOptionsIssue[]);
+}
+//#endregion
+//#region src/target/runtime.d.ts
+/** A target package whose `package.json` does not say where it runs. */
+declare class TargetRuntimeUndeclared extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  /** What `gkm.runtime` held instead, when it held anything. */
+  readonly found?: unknown;
+  constructor(target: string, packageName: string,
+  /** What `gkm.runtime` held instead, when it held anything. */
+  found?: unknown);
+}
+//#endregion
+export { TargetRuntimeMismatch as a, DeployTargetNotYetSupported as c, TargetPackageInvalid as i, UnknownDeployTarget as l, InvalidTargetOptions as n, ProviderRemoved as o, TargetEntryInvalid as r, TargetPackageNotFound as s, TargetRuntimeUndeclared as t };
+//# sourceMappingURL=runtime-CN_kmqxo.d.cts.map

package/dist/runtime-CN_kmqxo.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-CN_kmqxo.d.cts","names":[],"sources":["../src/target/builtins.ts","../src/target/package.ts","../src/target/provider.ts","../src/target/resolve.ts","../src/target/runtime.ts"],"mappings":";;;cA+Da,4BAA4B;WAE9B;;WAEA;EAHV,YACU,gBAEA;;EAAA;;;cAUE,oCAAoC;WAEtC;;WAEA;EAHV,YACU,gBAEA;;EAAA;;;;;cCrDE,8BAA8B;WAEhC;WACA;WACA;EAHV,YACU,gBACA,qBACA;;;;;;;;;;;;;cCZE,wBAAwB;WAE1B;;WAEA;EAHV,YACU,kBAEA;;EAAA;;;;;cCoCE,6BAA6B;WAE/B;WACA;EAFV,YACU,gBACA;;;cAUE,2BAA2B;WAClB;EAArB,YAAqB;;;cAST,8BAA8B;WAEhC;WACA;WACA,UAAU;WACV,QAAQ;EAJlB,YACU,gBACA,qBACA,UAAU,eACV,QAAQ;;;cAUN,6BAA6B;WAE/B;WACA,iBAAiB;EAF3B,YACU,gBACA,iBAAiB;;;;;cC1Ef,gCAAgC;WAElC;WACA;;WAEA;EAJV,YACU,gBACA,qBAEA;;EAAA"}

package/dist/runtime-Cjvon3oj.d.mts

@@ -0,0 +1,90 @@
+import { K as DeployRuntime, et as TargetOptionsIssue } from "./types-ZHuZ89hv.mjs";
+//#region src/target/builtins.d.ts
+/** A target name that is neither built in nor in `deploy.targets`. */
+declare class UnknownDeployTarget extends Error {
+  readonly target: string;
+  /** The names that would have resolved. */
+  readonly known: readonly string[];
+  constructor(target: string,
+  /** The names that would have resolved. */
+  known: readonly string[]);
+}
+/** A built-in target `gkm deploy` cannot deploy through yet. */
+declare class DeployTargetNotYetSupported extends Error {
+  readonly target: string;
+  /** What to do instead, when there is something. */
+  readonly instead?: string | undefined;
+  constructor(target: string,
+  /** What to do instead, when there is something. */
+  instead?: string | undefined);
+}
+//#endregion
+//#region src/target/package.d.ts
+/** A target package the project does not have installed. */
+declare class TargetPackageNotFound extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  readonly from: string;
+  constructor(target: string, packageName: string, from: string);
+}
+//#endregion
+//#region src/target/provider.d.ts
+/**
+ * `gkm deploy --provider`, from before there were targets.
+ *
+ * It named three things, and only one of them ever deployed a workspace:
+ * `dokploy` is now the target of that name; `docker` and `aws-lambda` were
+ * accepted and always failed, so they are gone with a pointer to what does
+ * the job.
+ */
+/** A `--provider` that no longer exists. */
+declare class ProviderRemoved extends Error {
+  readonly provider: string;
+  /** What to use instead. */
+  readonly instead: string;
+  constructor(provider: string,
+  /** What to use instead. */
+  instead: string);
+}
+//#endregion
+//#region src/target/resolve.d.ts
+/** A target package whose default export is not a target. */
+declare class TargetPackageInvalid extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  constructor(target: string, packageName: string);
+}
+/** A `deploy.targets` entry that is not a target, a package name or a pair. */
+declare class TargetEntryInvalid extends Error {
+  readonly target: string;
+  constructor(target: string);
+}
+/** A target whose `runtime` is not the one its package declares. */
+declare class TargetRuntimeMismatch extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  readonly declared: DeployRuntime;
+  readonly actual: DeployRuntime;
+  constructor(target: string, packageName: string, declared: DeployRuntime, actual: DeployRuntime);
+}
+/** Options a target's schema rejected. */
+declare class InvalidTargetOptions extends Error {
+  readonly target: string;
+  readonly issues: readonly TargetOptionsIssue[];
+  constructor(target: string, issues: readonly TargetOptionsIssue[]);
+}
+//#endregion
+//#region src/target/runtime.d.ts
+/** A target package whose `package.json` does not say where it runs. */
+declare class TargetRuntimeUndeclared extends Error {
+  readonly target: string;
+  readonly packageName: string;
+  /** What `gkm.runtime` held instead, when it held anything. */
+  readonly found?: unknown;
+  constructor(target: string, packageName: string,
+  /** What `gkm.runtime` held instead, when it held anything. */
+  found?: unknown);
+}
+//#endregion
+export { TargetRuntimeMismatch as a, DeployTargetNotYetSupported as c, TargetPackageInvalid as i, UnknownDeployTarget as l, InvalidTargetOptions as n, ProviderRemoved as o, TargetEntryInvalid as r, TargetPackageNotFound as s, TargetRuntimeUndeclared as t };
+//# sourceMappingURL=runtime-Cjvon3oj.d.mts.map

package/dist/runtime-Cjvon3oj.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-Cjvon3oj.d.mts","names":[],"sources":["../src/target/builtins.ts","../src/target/package.ts","../src/target/provider.ts","../src/target/resolve.ts","../src/target/runtime.ts"],"mappings":";;;cA+Da,4BAA4B;WAE9B;;WAEA;EAHV,YACU,gBAEA;;EAAA;;;cAUE,oCAAoC;WAEtC;;WAEA;EAHV,YACU,gBAEA;;EAAA;;;;;cCrDE,8BAA8B;WAEhC;WACA;WACA;EAHV,YACU,gBACA,qBACA;;;;;;;;;;;;;cCZE,wBAAwB;WAE1B;;WAEA;EAHV,YACU,kBAEA;;EAAA;;;;;cCoCE,6BAA6B;WAE/B;WACA;EAFV,YACU,gBACA;;;cAUE,2BAA2B;WAClB;EAArB,YAAqB;;;cAST,8BAA8B;WAEhC;WACA;WACA,UAAU;WACV,QAAQ;EAJlB,YACU,gBACA,qBACA,UAAU,eACV,QAAQ;;;cAUN,6BAA6B;WAE/B;WACA,iBAAiB;EAF3B,YACU,gBACA,iBAAiB;;;;;cC1Ef,gCAAgC;WAElC;WACA;;WAEA;EAJV,YACU,gBACA,qBAEA;;EAAA"}

package/dist/sandbox/config-worker.cjs

@@ -0,0 +1,43 @@
+const require_workerRuntime = require("../workerRuntime-BXfhbe13.cjs");
+let node_fs_promises = require("node:fs/promises");
+let node_url = require("node:url");
+//#region src/sandbox/config-worker.ts
+/**
+* Loads `gkm.config.ts` in a sandbox and answers with it as data.
+*
+* Usage (by `loadWorkspaceConfig` with a sandbox, never by hand):
+*   node --import=<tsx> config-worker.ts /path/to/gkm.config.ts
+*
+* Answers `{ reason: 'loaded', config }`, `{ reason: 'live', paths }` when the
+* config holds something JSON cannot carry, or `{ reason: 'failed', error }`
+* when it could not be loaded at all.
+*/
+async function load(configPath) {
+	if (configPath.endsWith(".json")) return JSON.parse(await (0, node_fs_promises.readFile)(configPath, "utf8"));
+	return (await import((0, node_url.pathToFileURL)(configPath).href)).default;
+}
+async function main() {
+	const configPath = process.argv[2];
+	try {
+		if (!configPath) throw new TypeError("No config path was given.");
+		await require_workerRuntime.registerAdjacentTsconfig();
+		const config = await load(configPath);
+		const paths = require_workerRuntime.liveValuePaths(config);
+		require_workerRuntime.answer(paths.length > 0 ? {
+			reason: "live",
+			paths
+		} : {
+			reason: "loaded",
+			config
+		});
+	} catch (error) {
+		require_workerRuntime.answer({
+			reason: "failed",
+			error: require_workerRuntime.errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+
+//# sourceMappingURL=config-worker.cjs.map

package/dist/sandbox/config-worker.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-worker.cjs","names":["readFile","pathToFileURL","registerAdjacentTsconfig","liveValuePaths","errorData"],"sources":["../../src/sandbox/config-worker.ts"],"sourcesContent":["/**\n * Loads `gkm.config.ts` in a sandbox and answers with it as data.\n *\n * Usage (by `loadWorkspaceConfig` with a sandbox, never by hand):\n *   node --import=<tsx> config-worker.ts /path/to/gkm.config.ts\n *\n * Answers `{ reason: 'loaded', config }`, `{ reason: 'live', paths }` when the\n * config holds something JSON cannot carry, or `{ reason: 'failed', error }`\n * when it could not be loaded at all.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport { pathToFileURL } from 'node:url';\nimport {\n\tanswer,\n\terrorData,\n\tliveValuePaths,\n\tregisterAdjacentTsconfig,\n} from './workerRuntime';\n\nasync function load(configPath: string): Promise<unknown> {\n\tif (configPath.endsWith('.json')) {\n\t\treturn JSON.parse(await readFile(configPath, 'utf8'));\n\t}\n\tconst module = await import(pathToFileURL(configPath).href);\n\treturn module.default;\n}\n\nasync function main(): Promise<void> {\n\tconst configPath = process.argv[2];\n\ttry {\n\t\tif (!configPath) throw new TypeError('No config path was given.');\n\t\tawait registerAdjacentTsconfig();\n\t\tconst config = await load(configPath);\n\t\tconst paths = liveValuePaths(config);\n\t\tanswer(\n\t\t\tpaths.length > 0\n\t\t\t\t? { reason: 'live', paths }\n\t\t\t\t: { reason: 'loaded', config },\n\t\t);\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAe,KAAK,YAAsC;CACzD,IAAI,WAAW,SAAS,OAAO,GAC9B,OAAO,KAAK,MAAM,OAAA,GAAMA,iBAAAA,SAAAA,CAAS,YAAY,MAAM,CAAC;CAGrD,QAAO,MADc,QAAA,GAAOC,SAAAA,cAAAA,CAAc,UAAU,CAAC,CAAC,MAAA,CACxC;AACf;AAEA,eAAe,OAAsB;CACpC,MAAM,aAAa,QAAQ,KAAK;CAChC,IAAI;EACH,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,2BAA2B;EAChE,MAAMC,sBAAAA,yBAAyB;EAC/B,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,QAAQC,sBAAAA,eAAe,MAAM;EACnC,sBAAA,OACC,MAAM,SAAS,IACZ;GAAE,QAAQ;GAAQ;EAAM,IACxB;GAAE,QAAQ;GAAU;EAAO,CAC/B;CACD,SAAS,OAAO;EACf,sBAAA,OAAO;GAAE,QAAQ;GAAU,OAAOC,sBAAAA,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}

package/dist/sandbox/config-worker.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/config-worker.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/config-worker.mjs

@@ -0,0 +1,44 @@
+import { a as registerAdjacentTsconfig, i as liveValuePaths, n as answer, r as errorData } from "../workerRuntime-CsOyBRx2.mjs";
+import { readFile } from "node:fs/promises";
+import { pathToFileURL } from "node:url";
+//#region src/sandbox/config-worker.ts
+/**
+* Loads `gkm.config.ts` in a sandbox and answers with it as data.
+*
+* Usage (by `loadWorkspaceConfig` with a sandbox, never by hand):
+*   node --import=<tsx> config-worker.ts /path/to/gkm.config.ts
+*
+* Answers `{ reason: 'loaded', config }`, `{ reason: 'live', paths }` when the
+* config holds something JSON cannot carry, or `{ reason: 'failed', error }`
+* when it could not be loaded at all.
+*/
+async function load(configPath) {
+	if (configPath.endsWith(".json")) return JSON.parse(await readFile(configPath, "utf8"));
+	return (await import(pathToFileURL(configPath).href)).default;
+}
+async function main() {
+	const configPath = process.argv[2];
+	try {
+		if (!configPath) throw new TypeError("No config path was given.");
+		await registerAdjacentTsconfig();
+		const config = await load(configPath);
+		const paths = liveValuePaths(config);
+		answer(paths.length > 0 ? {
+			reason: "live",
+			paths
+		} : {
+			reason: "loaded",
+			config
+		});
+	} catch (error) {
+		answer({
+			reason: "failed",
+			error: errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+export {};
+
+//# sourceMappingURL=config-worker.mjs.map

package/dist/sandbox/config-worker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-worker.mjs","names":[],"sources":["../../src/sandbox/config-worker.ts"],"sourcesContent":["/**\n * Loads `gkm.config.ts` in a sandbox and answers with it as data.\n *\n * Usage (by `loadWorkspaceConfig` with a sandbox, never by hand):\n *   node --import=<tsx> config-worker.ts /path/to/gkm.config.ts\n *\n * Answers `{ reason: 'loaded', config }`, `{ reason: 'live', paths }` when the\n * config holds something JSON cannot carry, or `{ reason: 'failed', error }`\n * when it could not be loaded at all.\n */\n\nimport { readFile } from 'node:fs/promises';\nimport { pathToFileURL } from 'node:url';\nimport {\n\tanswer,\n\terrorData,\n\tliveValuePaths,\n\tregisterAdjacentTsconfig,\n} from './workerRuntime';\n\nasync function load(configPath: string): Promise<unknown> {\n\tif (configPath.endsWith('.json')) {\n\t\treturn JSON.parse(await readFile(configPath, 'utf8'));\n\t}\n\tconst module = await import(pathToFileURL(configPath).href);\n\treturn module.default;\n}\n\nasync function main(): Promise<void> {\n\tconst configPath = process.argv[2];\n\ttry {\n\t\tif (!configPath) throw new TypeError('No config path was given.');\n\t\tawait registerAdjacentTsconfig();\n\t\tconst config = await load(configPath);\n\t\tconst paths = liveValuePaths(config);\n\t\tanswer(\n\t\t\tpaths.length > 0\n\t\t\t\t? { reason: 'live', paths }\n\t\t\t\t: { reason: 'loaded', config },\n\t\t);\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAe,KAAK,YAAsC;CACzD,IAAI,WAAW,SAAS,OAAO,GAC9B,OAAO,KAAK,MAAM,MAAM,SAAS,YAAY,MAAM,CAAC;CAGrD,QAAO,MADc,OAAO,cAAc,UAAU,CAAC,CAAC,MAAA,CACxC;AACf;AAEA,eAAe,OAAsB;CACpC,MAAM,aAAa,QAAQ,KAAK;CAChC,IAAI;EACH,IAAI,CAAC,YAAY,MAAM,IAAI,UAAU,2BAA2B;EAChE,MAAM,yBAAyB;EAC/B,MAAM,SAAS,MAAM,KAAK,UAAU;EACpC,MAAM,QAAQ,eAAe,MAAM;EACnC,OACC,MAAM,SAAS,IACZ;GAAE,QAAQ;GAAQ;EAAM,IACxB;GAAE,QAAQ;GAAU;EAAO,CAC/B;CACD,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAU,OAAO,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}

package/dist/sandbox/credentials-worker.cjs

@@ -0,0 +1,54 @@
+const require_discover = require("../discover-D1It5r_h.cjs");
+const require_sandbox = require("../sandbox-CL--ZDui.cjs");
+const require_workerRuntime = require("../workerRuntime-BXfhbe13.cjs");
+const require_credentialSchemas = require("../credentialSchemas-DCR4Wd1W.cjs");
+let node_path = require("node:path");
+let node_fs_promises = require("node:fs/promises");
+//#region src/sandbox/credentials-worker.ts
+/**
+* Loads a project's constructs in a sandbox and answers with what their
+* credentials schemas say, as data: each schema as JSON Schema, and whether
+* each value it was handed passes.
+*
+* Usage (by `inspectCredentials` under a sandbox, never by hand):
+*   node --import=<tsx> credentials-worker.ts '{"patterns":[…],"cwd":"…"}'
+*
+* The schemas are the project's code, which is why they run here. Each value
+* arrives as a file in `GKM_SECRETS_DIR` named by its key, is read into this
+* process's memory only, and never comes back: an answer carries issue paths
+* and messages, not values.
+*/
+/** Every secret file the sandbox mounted, by name. */
+async function mountedSecrets() {
+	const dir = process.env[require_sandbox.SECRETS_DIR_ENV];
+	if (!dir) return {};
+	const secrets = {};
+	for (const name of await (0, node_fs_promises.readdir)(dir)) secrets[name] = (await (0, node_fs_promises.readFile)((0, node_path.join)(dir, name), "utf8")).trim();
+	return secrets;
+}
+async function main() {
+	try {
+		const request = JSON.parse(process.argv[2] ?? "{}");
+		await require_workerRuntime.registerAdjacentTsconfig();
+		const sources = {};
+		const manifest = await require_discover.discover({
+			patterns: request.patterns,
+			cwd: request.cwd,
+			sources
+		});
+		const inspection = await require_credentialSchemas.inspectLive(require_credentialSchemas.liveCredentials(manifest, sources), await mountedSecrets());
+		require_workerRuntime.answer({
+			reason: "inspected",
+			...inspection
+		});
+	} catch (error) {
+		require_workerRuntime.answer({
+			reason: "failed",
+			error: require_workerRuntime.errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+
+//# sourceMappingURL=credentials-worker.cjs.map

package/dist/sandbox/credentials-worker.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-worker.cjs","names":["SECRETS_DIR_ENV","readdir","readFile","join","registerAdjacentTsconfig","discover","inspectLive","liveCredentials","errorData"],"sources":["../../src/sandbox/credentials-worker.ts"],"sourcesContent":["/**\n * Loads a project's constructs in a sandbox and answers with what their\n * credentials schemas say, as data: each schema as JSON Schema, and whether\n * each value it was handed passes.\n *\n * Usage (by `inspectCredentials` under a sandbox, never by hand):\n *   node --import=<tsx> credentials-worker.ts '{\"patterns\":[…],\"cwd\":\"…\"}'\n *\n * The schemas are the project's code, which is why they run here. Each value\n * arrives as a file in `GKM_SECRETS_DIR` named by its key, is read into this\n * process's memory only, and never comes back: an answer carries issue paths\n * and messages, not values.\n */\n\nimport { readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { type ConstructSource, discover } from '../reconcile/discover';\nimport { inspectLive, liveCredentials } from '../secrets/credentialSchemas';\nimport { SECRETS_DIR_ENV } from './sandbox';\nimport { answer, errorData, registerAdjacentTsconfig } from './workerRuntime';\n\n/** Every secret file the sandbox mounted, by name. */\nasync function mountedSecrets(): Promise<Record<string, string>> {\n\tconst dir = process.env[SECRETS_DIR_ENV];\n\tif (!dir) return {};\n\n\tconst secrets: Record<string, string> = {};\n\tfor (const name of await readdir(dir)) {\n\t\tsecrets[name] = (await readFile(join(dir, name), 'utf8')).trim();\n\t}\n\treturn secrets;\n}\n\nasync function main(): Promise<void> {\n\ttry {\n\t\tconst request = JSON.parse(process.argv[2] ?? '{}') as {\n\t\t\tpatterns: string[];\n\t\t\tcwd: string;\n\t\t};\n\t\tawait registerAdjacentTsconfig();\n\n\t\tconst sources: Record<string, ConstructSource> = {};\n\t\tconst manifest = await discover({\n\t\t\tpatterns: request.patterns,\n\t\t\tcwd: request.cwd,\n\t\t\tsources,\n\t\t});\n\n\t\tconst inspection = await inspectLive(\n\t\t\tliveCredentials(manifest, sources),\n\t\t\tawait mountedSecrets(),\n\t\t);\n\t\tanswer({ reason: 'inspected', ...inspection });\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsBA,eAAe,iBAAkD;CAChE,MAAM,MAAM,QAAQ,IAAIA,gBAAAA;CACxB,IAAI,CAAC,KAAK,OAAO,CAAC;CAElB,MAAM,UAAkC,CAAC;CACzC,KAAK,MAAM,QAAQ,OAAA,GAAMC,iBAAAA,QAAAA,CAAQ,GAAG,GACnC,QAAQ,SAAS,OAAA,GAAMC,iBAAAA,SAAAA,EAAAA,GAASC,UAAAA,KAAAA,CAAK,KAAK,IAAI,GAAG,MAAM,EAAA,CAAG,KAAK;CAEhE,OAAO;AACR;AAEA,eAAe,OAAsB;CACpC,IAAI;EACH,MAAM,UAAU,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI;EAIlD,MAAMC,sBAAAA,yBAAyB;EAE/B,MAAM,UAA2C,CAAC;EAClD,MAAM,WAAW,MAAMC,iBAAAA,SAAS;GAC/B,UAAU,QAAQ;GAClB,KAAK,QAAQ;GACb;EACD,CAAC;EAED,MAAM,aAAa,MAAMC,0BAAAA,YACxBC,0BAAAA,gBAAgB,UAAU,OAAO,GACjC,MAAM,eAAe,CACtB;EACA,sBAAA,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAW,CAAC;CAC9C,SAAS,OAAO;EACf,sBAAA,OAAO;GAAE,QAAQ;GAAU,OAAOC,sBAAAA,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}

package/dist/sandbox/credentials-worker.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/credentials-worker.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/credentials-worker.mjs

@@ -0,0 +1,55 @@
+import { r as discover } from "../discover-BPelzeGW.mjs";
+import { t as SECRETS_DIR_ENV } from "../sandbox-Dm247NGx.mjs";
+import { a as registerAdjacentTsconfig, n as answer, r as errorData } from "../workerRuntime-CsOyBRx2.mjs";
+import { a as liveCredentials, r as inspectLive } from "../credentialSchemas-BJqRJNK4.mjs";
+import { join } from "node:path";
+import { readFile, readdir } from "node:fs/promises";
+//#region src/sandbox/credentials-worker.ts
+/**
+* Loads a project's constructs in a sandbox and answers with what their
+* credentials schemas say, as data: each schema as JSON Schema, and whether
+* each value it was handed passes.
+*
+* Usage (by `inspectCredentials` under a sandbox, never by hand):
+*   node --import=<tsx> credentials-worker.ts '{"patterns":[…],"cwd":"…"}'
+*
+* The schemas are the project's code, which is why they run here. Each value
+* arrives as a file in `GKM_SECRETS_DIR` named by its key, is read into this
+* process's memory only, and never comes back: an answer carries issue paths
+* and messages, not values.
+*/
+/** Every secret file the sandbox mounted, by name. */
+async function mountedSecrets() {
+	const dir = process.env[SECRETS_DIR_ENV];
+	if (!dir) return {};
+	const secrets = {};
+	for (const name of await readdir(dir)) secrets[name] = (await readFile(join(dir, name), "utf8")).trim();
+	return secrets;
+}
+async function main() {
+	try {
+		const request = JSON.parse(process.argv[2] ?? "{}");
+		await registerAdjacentTsconfig();
+		const sources = {};
+		const manifest = await discover({
+			patterns: request.patterns,
+			cwd: request.cwd,
+			sources
+		});
+		const inspection = await inspectLive(liveCredentials(manifest, sources), await mountedSecrets());
+		answer({
+			reason: "inspected",
+			...inspection
+		});
+	} catch (error) {
+		answer({
+			reason: "failed",
+			error: errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+export {};
+
+//# sourceMappingURL=credentials-worker.mjs.map

package/dist/sandbox/credentials-worker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-worker.mjs","names":[],"sources":["../../src/sandbox/credentials-worker.ts"],"sourcesContent":["/**\n * Loads a project's constructs in a sandbox and answers with what their\n * credentials schemas say, as data: each schema as JSON Schema, and whether\n * each value it was handed passes.\n *\n * Usage (by `inspectCredentials` under a sandbox, never by hand):\n *   node --import=<tsx> credentials-worker.ts '{\"patterns\":[…],\"cwd\":\"…\"}'\n *\n * The schemas are the project's code, which is why they run here. Each value\n * arrives as a file in `GKM_SECRETS_DIR` named by its key, is read into this\n * process's memory only, and never comes back: an answer carries issue paths\n * and messages, not values.\n */\n\nimport { readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { type ConstructSource, discover } from '../reconcile/discover';\nimport { inspectLive, liveCredentials } from '../secrets/credentialSchemas';\nimport { SECRETS_DIR_ENV } from './sandbox';\nimport { answer, errorData, registerAdjacentTsconfig } from './workerRuntime';\n\n/** Every secret file the sandbox mounted, by name. */\nasync function mountedSecrets(): Promise<Record<string, string>> {\n\tconst dir = process.env[SECRETS_DIR_ENV];\n\tif (!dir) return {};\n\n\tconst secrets: Record<string, string> = {};\n\tfor (const name of await readdir(dir)) {\n\t\tsecrets[name] = (await readFile(join(dir, name), 'utf8')).trim();\n\t}\n\treturn secrets;\n}\n\nasync function main(): Promise<void> {\n\ttry {\n\t\tconst request = JSON.parse(process.argv[2] ?? '{}') as {\n\t\t\tpatterns: string[];\n\t\t\tcwd: string;\n\t\t};\n\t\tawait registerAdjacentTsconfig();\n\n\t\tconst sources: Record<string, ConstructSource> = {};\n\t\tconst manifest = await discover({\n\t\t\tpatterns: request.patterns,\n\t\t\tcwd: request.cwd,\n\t\t\tsources,\n\t\t});\n\n\t\tconst inspection = await inspectLive(\n\t\t\tliveCredentials(manifest, sources),\n\t\t\tawait mountedSecrets(),\n\t\t);\n\t\tanswer({ reason: 'inspected', ...inspection });\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsBA,eAAe,iBAAkD;CAChE,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,CAAC,KAAK,OAAO,CAAC;CAElB,MAAM,UAAkC,CAAC;CACzC,KAAK,MAAM,QAAQ,MAAM,QAAQ,GAAG,GACnC,QAAQ,SAAS,MAAM,SAAS,KAAK,KAAK,IAAI,GAAG,MAAM,EAAA,CAAG,KAAK;CAEhE,OAAO;AACR;AAEA,eAAe,OAAsB;CACpC,IAAI;EACH,MAAM,UAAU,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI;EAIlD,MAAM,yBAAyB;EAE/B,MAAM,UAA2C,CAAC;EAClD,MAAM,WAAW,MAAM,SAAS;GAC/B,UAAU,QAAQ;GAClB,KAAK,QAAQ;GACb;EACD,CAAC;EAED,MAAM,aAAa,MAAM,YACxB,gBAAgB,UAAU,OAAO,GACjC,MAAM,eAAe,CACtB;EACA,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAW,CAAC;CAC9C,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAU,OAAO,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}

package/dist/sandbox/discover-worker.cjs

@@ -0,0 +1,47 @@
+const require_discover = require("../discover-D1It5r_h.cjs");
+const require_workerRuntime = require("../workerRuntime-BXfhbe13.cjs");
+//#region src/sandbox/discover-worker.ts
+/**
+* Discovers a project's constructs in a sandbox and answers with the
+* manifest as data.
+*
+* Usage (by `discover` under a sandbox, never by hand):
+*   node --import=<tsx> discover-worker.ts '{"patterns":[…],"cwd":"…"}'
+*
+* Discovery imports every construct module — the project's code — which is
+* why it runs here rather than in the deploy. Its warnings go to stderr, where
+* the host passes them on.
+*/
+async function main() {
+	try {
+		const request = JSON.parse(process.argv[2] ?? "{}");
+		await require_workerRuntime.registerAdjacentTsconfig();
+		const runnables = {};
+		const background = {};
+		const manifest = await require_discover.discover({
+			patterns: request.patterns,
+			cwd: request.cwd,
+			runnables,
+			background
+		});
+		const paths = require_workerRuntime.liveValuePaths(manifest);
+		require_workerRuntime.answer(paths.length > 0 ? {
+			reason: "live",
+			paths
+		} : {
+			reason: "discovered",
+			manifest,
+			runnables,
+			background
+		});
+	} catch (error) {
+		require_workerRuntime.answer({
+			reason: "failed",
+			error: require_workerRuntime.errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+
+//# sourceMappingURL=discover-worker.cjs.map

package/dist/sandbox/discover-worker.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover-worker.cjs","names":["registerAdjacentTsconfig","discover","liveValuePaths","errorData"],"sources":["../../src/sandbox/discover-worker.ts"],"sourcesContent":["/**\n * Discovers a project's constructs in a sandbox and answers with the\n * manifest as data.\n *\n * Usage (by `discover` under a sandbox, never by hand):\n *   node --import=<tsx> discover-worker.ts '{\"patterns\":[…],\"cwd\":\"…\"}'\n *\n * Discovery imports every construct module — the project's code — which is\n * why it runs here rather than in the deploy. Its warnings go to stderr, where\n * the host passes them on.\n */\n\nimport { discover } from '../reconcile/discover';\nimport {\n\tanswer,\n\terrorData,\n\tliveValuePaths,\n\tregisterAdjacentTsconfig,\n} from './workerRuntime';\n\nasync function main(): Promise<void> {\n\ttry {\n\t\tconst request = JSON.parse(process.argv[2] ?? '{}') as {\n\t\t\tpatterns: string[];\n\t\t\tcwd: string;\n\t\t};\n\t\tawait registerAdjacentTsconfig();\n\n\t\tconst runnables: Record<string, string[]> = {};\n\t\tconst background: Record<string, string[]> = {};\n\t\tconst manifest = await discover({\n\t\t\tpatterns: request.patterns,\n\t\t\tcwd: request.cwd,\n\t\t\trunnables,\n\t\t\tbackground,\n\t\t});\n\n\t\tconst paths = liveValuePaths(manifest);\n\t\tanswer(\n\t\t\tpaths.length > 0\n\t\t\t\t? { reason: 'live', paths }\n\t\t\t\t: { reason: 'discovered', manifest, runnables, background },\n\t\t);\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAe,OAAsB;CACpC,IAAI;EACH,MAAM,UAAU,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI;EAIlD,MAAMA,sBAAAA,yBAAyB;EAE/B,MAAM,YAAsC,CAAC;EAC7C,MAAM,aAAuC,CAAC;EAC9C,MAAM,WAAW,MAAMC,iBAAAA,SAAS;GAC/B,UAAU,QAAQ;GAClB,KAAK,QAAQ;GACb;GACA;EACD,CAAC;EAED,MAAM,QAAQC,sBAAAA,eAAe,QAAQ;EACrC,sBAAA,OACC,MAAM,SAAS,IACZ;GAAE,QAAQ;GAAQ;EAAM,IACxB;GAAE,QAAQ;GAAc;GAAU;GAAW;EAAW,CAC5D;CACD,SAAS,OAAO;EACf,sBAAA,OAAO;GAAE,QAAQ;GAAU,OAAOC,sBAAAA,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}

package/dist/sandbox/discover-worker.d.cts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/discover-worker.d.mts

@@ -0,0 +1 @@
+export {}

package/dist/sandbox/discover-worker.mjs

@@ -0,0 +1,48 @@
+import { r as discover } from "../discover-BPelzeGW.mjs";
+import { a as registerAdjacentTsconfig, i as liveValuePaths, n as answer, r as errorData } from "../workerRuntime-CsOyBRx2.mjs";
+//#region src/sandbox/discover-worker.ts
+/**
+* Discovers a project's constructs in a sandbox and answers with the
+* manifest as data.
+*
+* Usage (by `discover` under a sandbox, never by hand):
+*   node --import=<tsx> discover-worker.ts '{"patterns":[…],"cwd":"…"}'
+*
+* Discovery imports every construct module — the project's code — which is
+* why it runs here rather than in the deploy. Its warnings go to stderr, where
+* the host passes them on.
+*/
+async function main() {
+	try {
+		const request = JSON.parse(process.argv[2] ?? "{}");
+		await registerAdjacentTsconfig();
+		const runnables = {};
+		const background = {};
+		const manifest = await discover({
+			patterns: request.patterns,
+			cwd: request.cwd,
+			runnables,
+			background
+		});
+		const paths = liveValuePaths(manifest);
+		answer(paths.length > 0 ? {
+			reason: "live",
+			paths
+		} : {
+			reason: "discovered",
+			manifest,
+			runnables,
+			background
+		});
+	} catch (error) {
+		answer({
+			reason: "failed",
+			error: errorData(error)
+		});
+	}
+}
+main();
+//#endregion
+export {};
+
+//# sourceMappingURL=discover-worker.mjs.map

package/dist/sandbox/discover-worker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover-worker.mjs","names":[],"sources":["../../src/sandbox/discover-worker.ts"],"sourcesContent":["/**\n * Discovers a project's constructs in a sandbox and answers with the\n * manifest as data.\n *\n * Usage (by `discover` under a sandbox, never by hand):\n *   node --import=<tsx> discover-worker.ts '{\"patterns\":[…],\"cwd\":\"…\"}'\n *\n * Discovery imports every construct module — the project's code — which is\n * why it runs here rather than in the deploy. Its warnings go to stderr, where\n * the host passes them on.\n */\n\nimport { discover } from '../reconcile/discover';\nimport {\n\tanswer,\n\terrorData,\n\tliveValuePaths,\n\tregisterAdjacentTsconfig,\n} from './workerRuntime';\n\nasync function main(): Promise<void> {\n\ttry {\n\t\tconst request = JSON.parse(process.argv[2] ?? '{}') as {\n\t\t\tpatterns: string[];\n\t\t\tcwd: string;\n\t\t};\n\t\tawait registerAdjacentTsconfig();\n\n\t\tconst runnables: Record<string, string[]> = {};\n\t\tconst background: Record<string, string[]> = {};\n\t\tconst manifest = await discover({\n\t\t\tpatterns: request.patterns,\n\t\t\tcwd: request.cwd,\n\t\t\trunnables,\n\t\t\tbackground,\n\t\t});\n\n\t\tconst paths = liveValuePaths(manifest);\n\t\tanswer(\n\t\t\tpaths.length > 0\n\t\t\t\t? { reason: 'live', paths }\n\t\t\t\t: { reason: 'discovered', manifest, runnables, background },\n\t\t);\n\t} catch (error) {\n\t\tanswer({ reason: 'failed', error: errorData(error) });\n\t}\n}\n\nvoid main();\n"],"mappings":";;;;;;;;;;;;;;AAoBA,eAAe,OAAsB;CACpC,IAAI;EACH,MAAM,UAAU,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI;EAIlD,MAAM,yBAAyB;EAE/B,MAAM,YAAsC,CAAC;EAC7C,MAAM,aAAuC,CAAC;EAC9C,MAAM,WAAW,MAAM,SAAS;GAC/B,UAAU,QAAQ;GAClB,KAAK,QAAQ;GACb;GACA;EACD,CAAC;EAED,MAAM,QAAQ,eAAe,QAAQ;EACrC,OACC,MAAM,SAAS,IACZ;GAAE,QAAQ;GAAQ;EAAM,IACxB;GAAE,QAAQ;GAAc;GAAU;GAAW;EAAW,CAC5D;CACD,SAAS,OAAO;EACf,OAAO;GAAE,QAAQ;GAAU,OAAO,UAAU,KAAK;EAAE,CAAC;CACrD;AACD;AAEK,KAAK"}