@geekmidas/cli 9.0.2 → 10.0.0-alpha.0

package/dist/reconcile/public.d.cts

@@ -0,0 +1,125 @@
+import { CacheBackend, EmailBackend } from "../types-abJQuk7m.cjs";
+import { ConstructManifest, Declaration, RouteInfo } from "@geekmidas/manifest";
+
+//#region src/reconcile/discover.d.ts
+
+/** The construct face discovery needs: an id, and the ability to declare. */
+interface Declarable {
+  id: string;
+  declare(): Declaration[];
+}
+/**
+ * Whether a module export is a construct.
+ *
+ * Deliberately loose about what else it carries — a construct that also has a
+ * `service` is still a construct, and requiring one would exclude the kinds that
+ * own no address.
+ */
+declare function isDeclarable(value: unknown): value is Declarable;
+interface DiscoverOptions {
+  /** The glob(s) to search. One pattern, not one per kind. */
+  patterns: string | readonly string[];
+  cwd?: string;
+  /**
+   * Re-import changed modules, for the dev watcher.
+   *
+   * A single glob makes discovery more central, not less: a new construct file
+   * has to be picked up on `add`, not only on `change`.
+   */
+  bustCache?: boolean;
+  /**
+   * Filled in with where each construct was found, when provided.
+   *
+   * Discovery is the only thing that knows: it globbed the files and imported
+   * them. Everything downstream that needs to *write* an import — the build,
+   * generating a server entry that reads a surface's logger — would otherwise
+   * have to be told the path in config, which is the string this removes.
+   *
+   * An out-parameter rather than a second return value so that every existing
+   * caller, which wants the manifest and nothing else, is unchanged.
+   */
+  sources?: Record<string, ConstructSource>;
+}
+/** Where a construct was declared, and under what name. */
+interface ConstructSource {
+  /** Absolute path to the module that exported it. */
+  file: string;
+  /** The name it was exported as — what an import statement has to say. */
+  exportName: string;
+}
+/**
+ * Build the construct manifest for a project.
+ *
+ * Runs the manifest's own validation before returning, so an app is wrong here
+ * — where the error names a file — rather than at deploy.
+ *
+ * @throws {DuplicateConstruct} when two exports claim one id.
+ */
+declare function discover(options: DiscoverOptions): Promise<ConstructManifest>;
+/** Two constructs claiming one id. */
+//#endregion
+//#region src/reconcile/emit.d.ts
+/** Where the build writes it, relative to the app root. */
+declare const MANIFEST_PATH = ".gkm/manifest.ts";
+/**
+ * Fold the build's generated routes into the surface that serves them.
+ *
+ * The routes already exist: `gkm build` generates one handler per endpoint and
+ * records its path, method and environment. What was missing is that the
+ * *construct* manifest never learned about them, so a `rest-api` node said
+ * `endpoints: []` while five handlers sat in `.gkm/`. Two documents describing
+ * the same routes, one of them wrong.
+ *
+ * Merging here rather than making the construct name a glob or import its
+ * endpoints: the build is the thing that already walked the filesystem and
+ * already knows where it wrote each handler. Asking the declaration to restate
+ * any of that is how the two come to disagree.
+ *
+ * Attribution is by exclusion — routes go to the surface that declared none of
+ * its own. A surface with static endpoints (an auth server's single wildcard)
+ * keeps them. That is exact while an app has one API of its own, and needs a
+ * real answer the day it has two; the alternative today would be inventing one
+ * before anything needs it.
+ *
+ * **Only from a provider that generates one handler per route.** The `server`
+ * provider generates a single catch-all — `ALL *` pointing at the Hono app that
+ * routes in-process — which is a true description of that build and a false
+ * description of the application. Merging it wrote `endpoints: [{ method:
+ * 'ALL', path: '*' }]` into a manifest for an app with five routes, and made the
+ * document's contents depend on which `--provider` ran last. A manifest must not
+ * do that.
+ */
+declare function withRoutes(manifest: ConstructManifest, routes: readonly RouteInfo[], options: {
+  perRoute: boolean;
+}): ConstructManifest;
+/**
+ * Fold in the compute the build generated: functions, crons, queue workers and
+ * topic subscribers.
+ *
+ * All four are named by their *export*, the same way an endpoint's handler is —
+ * `CronGenerator` uses the export key as the name — so none of them can declare
+ * themselves and all of them are the build's to add. That is why a `Function`
+ * has no `declare()` and never will.
+ *
+ * A worker and a subscriber **nest** inside the queue or topic that triggers
+ * them, because position carries the trigger. A function and a cron are
+ * top-level, because nothing triggers them but a caller or a clock.
+ */
+
+/**
+ * The manifest as TypeScript source.
+ *
+ * Pure, so what gets written can be asserted without touching a filesystem.
+ */
+declare function manifestModule(manifest: ConstructManifest, backends?: Backends): string;
+/** Write it where the deploy config expects to import it from. */
+declare function writeManifestModule(manifest: ConstructManifest, appRoot: string, backends?: Backends): Promise<string>;
+/** The choices that are deployment config rather than declaration. */
+interface Backends {
+  cache?: CacheBackend;
+  email?: EmailBackend;
+}
+//# sourceMappingURL=emit.d.ts.map
+//#endregion
+export { DiscoverOptions, MANIFEST_PATH, discover, isDeclarable, manifestModule, withRoutes, writeManifestModule };
+//# sourceMappingURL=public.d.cts.map

package/dist/reconcile/public.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/reconcile/discover.ts","../../src/reconcile/emit.ts"],"sourcesContent":[],"mappings":";;;;;;AAiGU,UAnEA,UAAA,CAmEA;;aAjEE;;ACKZ;AA8BA;;;;;AAIoB;AA2JJ,iBDxLA,YAAA,CCwLc,KAAA,EAAA,OAAA,CAAA,EAAA,KAAA,IDxLyB,UCwLzB;AAAA,UD5Kb,eAAA,CC4Ka;EAAA;EACF,QACjB,EAAA,MAAA,GAAA,SAAA,MAAA,EAAA;EAAa,GAAA,CAAA,EAAA,MAAA;EA8BF;;;;;AAIZ;EAUO,SAAA,CAAA,EAAQ,OAAA;EAAA;;;AAEJ;;;;;;;;YDtMV,eAAe;;;UAIT,eAAA;;;;;;;;;;;;;;iBAeK,QAAA,UACZ,kBACP,QAAQ;;;;AC5DX;AA8BgB,cA9BH,aAAA,GA8Ba,kBAAA;;;;;AAIN;AA2JpB;;;;AAEwB;AA8BxB;;;;;AAIU;AAUV;;;;AAEqB;;;;;;;;iBA/ML,UAAA,WACL,oCACO;;IAEf;;;;;;;;;;;;;;;;;;;;iBA2Ja,cAAA,WACL,8BACA;;iBA8BW,mBAAA,WACX,+CAEA,WACR;;UAUc,QAAA;UACR;UACA"}

package/dist/reconcile/public.d.mts

@@ -0,0 +1,125 @@
+import { CacheBackend, EmailBackend } from "../types-C-arnQ1r.mjs";
+import { ConstructManifest, Declaration, RouteInfo } from "@geekmidas/manifest";
+
+//#region src/reconcile/discover.d.ts
+
+/** The construct face discovery needs: an id, and the ability to declare. */
+interface Declarable {
+  id: string;
+  declare(): Declaration[];
+}
+/**
+ * Whether a module export is a construct.
+ *
+ * Deliberately loose about what else it carries — a construct that also has a
+ * `service` is still a construct, and requiring one would exclude the kinds that
+ * own no address.
+ */
+declare function isDeclarable(value: unknown): value is Declarable;
+interface DiscoverOptions {
+  /** The glob(s) to search. One pattern, not one per kind. */
+  patterns: string | readonly string[];
+  cwd?: string;
+  /**
+   * Re-import changed modules, for the dev watcher.
+   *
+   * A single glob makes discovery more central, not less: a new construct file
+   * has to be picked up on `add`, not only on `change`.
+   */
+  bustCache?: boolean;
+  /**
+   * Filled in with where each construct was found, when provided.
+   *
+   * Discovery is the only thing that knows: it globbed the files and imported
+   * them. Everything downstream that needs to *write* an import — the build,
+   * generating a server entry that reads a surface's logger — would otherwise
+   * have to be told the path in config, which is the string this removes.
+   *
+   * An out-parameter rather than a second return value so that every existing
+   * caller, which wants the manifest and nothing else, is unchanged.
+   */
+  sources?: Record<string, ConstructSource>;
+}
+/** Where a construct was declared, and under what name. */
+interface ConstructSource {
+  /** Absolute path to the module that exported it. */
+  file: string;
+  /** The name it was exported as — what an import statement has to say. */
+  exportName: string;
+}
+/**
+ * Build the construct manifest for a project.
+ *
+ * Runs the manifest's own validation before returning, so an app is wrong here
+ * — where the error names a file — rather than at deploy.
+ *
+ * @throws {DuplicateConstruct} when two exports claim one id.
+ */
+declare function discover(options: DiscoverOptions): Promise<ConstructManifest>;
+/** Two constructs claiming one id. */
+//#endregion
+//#region src/reconcile/emit.d.ts
+/** Where the build writes it, relative to the app root. */
+declare const MANIFEST_PATH = ".gkm/manifest.ts";
+/**
+ * Fold the build's generated routes into the surface that serves them.
+ *
+ * The routes already exist: `gkm build` generates one handler per endpoint and
+ * records its path, method and environment. What was missing is that the
+ * *construct* manifest never learned about them, so a `rest-api` node said
+ * `endpoints: []` while five handlers sat in `.gkm/`. Two documents describing
+ * the same routes, one of them wrong.
+ *
+ * Merging here rather than making the construct name a glob or import its
+ * endpoints: the build is the thing that already walked the filesystem and
+ * already knows where it wrote each handler. Asking the declaration to restate
+ * any of that is how the two come to disagree.
+ *
+ * Attribution is by exclusion — routes go to the surface that declared none of
+ * its own. A surface with static endpoints (an auth server's single wildcard)
+ * keeps them. That is exact while an app has one API of its own, and needs a
+ * real answer the day it has two; the alternative today would be inventing one
+ * before anything needs it.
+ *
+ * **Only from a provider that generates one handler per route.** The `server`
+ * provider generates a single catch-all — `ALL *` pointing at the Hono app that
+ * routes in-process — which is a true description of that build and a false
+ * description of the application. Merging it wrote `endpoints: [{ method:
+ * 'ALL', path: '*' }]` into a manifest for an app with five routes, and made the
+ * document's contents depend on which `--provider` ran last. A manifest must not
+ * do that.
+ */
+declare function withRoutes(manifest: ConstructManifest, routes: readonly RouteInfo[], options: {
+  perRoute: boolean;
+}): ConstructManifest;
+/**
+ * Fold in the compute the build generated: functions, crons, queue workers and
+ * topic subscribers.
+ *
+ * All four are named by their *export*, the same way an endpoint's handler is —
+ * `CronGenerator` uses the export key as the name — so none of them can declare
+ * themselves and all of them are the build's to add. That is why a `Function`
+ * has no `declare()` and never will.
+ *
+ * A worker and a subscriber **nest** inside the queue or topic that triggers
+ * them, because position carries the trigger. A function and a cron are
+ * top-level, because nothing triggers them but a caller or a clock.
+ */
+
+/**
+ * The manifest as TypeScript source.
+ *
+ * Pure, so what gets written can be asserted without touching a filesystem.
+ */
+declare function manifestModule(manifest: ConstructManifest, backends?: Backends): string;
+/** Write it where the deploy config expects to import it from. */
+declare function writeManifestModule(manifest: ConstructManifest, appRoot: string, backends?: Backends): Promise<string>;
+/** The choices that are deployment config rather than declaration. */
+interface Backends {
+  cache?: CacheBackend;
+  email?: EmailBackend;
+}
+//# sourceMappingURL=emit.d.ts.map
+//#endregion
+export { DiscoverOptions, MANIFEST_PATH, discover, isDeclarable, manifestModule, withRoutes, writeManifestModule };
+//# sourceMappingURL=public.d.mts.map

package/dist/reconcile/public.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.mts","names":[],"sources":["../../src/reconcile/discover.ts","../../src/reconcile/emit.ts"],"sourcesContent":[],"mappings":";;;;;;AAiGU,UAnEA,UAAA,CAmEA;;aAjEE;;ACKZ;AA8BA;;;;;AAIoB;AA2JJ,iBDxLA,YAAA,CCwLc,KAAA,EAAA,OAAA,CAAA,EAAA,KAAA,IDxLyB,UCwLzB;AAAA,UD5Kb,eAAA,CC4Ka;EAAA;EACF,QACjB,EAAA,MAAA,GAAA,SAAA,MAAA,EAAA;EAAa,GAAA,CAAA,EAAA,MAAA;EA8BF;;;;;AAIZ;EAUO,SAAA,CAAA,EAAQ,OAAA;EAAA;;;AAEJ;;;;;;;;YDtMV,eAAe;;;UAIT,eAAA;;;;;;;;;;;;;;iBAeK,QAAA,UACZ,kBACP,QAAQ;;;;AC5DX;AA8BgB,cA9BH,aAAA,GA8Ba,kBAAA;;;;;AAIN;AA2JpB;;;;AAEwB;AA8BxB;;;;;AAIU;AAUV;;;;AAEqB;;;;;;;;iBA/ML,UAAA,WACL,oCACO;;IAEf;;;;;;;;;;;;;;;;;;;;iBA2Ja,cAAA,WACL,8BACA;;iBA8BW,mBAAA,WACX,+CAEA,WACR;;UAUc,QAAA;UACR;UACA"}

package/dist/reconcile/public.mjs

@@ -0,0 +1,4 @@
+import { discover, isDeclarable } from "../discover-CAlFgYec.mjs";
+import { MANIFEST_PATH, manifestModule, withRoutes, writeManifestModule } from "../emit-CiZS_5Ub.mjs";
+
+export { MANIFEST_PATH, discover, isDeclarable, manifestModule, withRoutes, writeManifestModule };

package/dist/{reconcile-B2FoJE0a.mjs → reconcile-CFs8C_1a.mjs}

@@ -1,4 +1,5 @@
-import { generateFullstackCustomSecrets } from "./fullstack-secrets-l8s3II_H.mjs";
+import "./generator-VE2JrFlY.mjs";
+import { generateFullstackCustomSecrets } from "./fullstack-secrets-D1o9-G5l.mjs";
 
 //#region src/secrets/reconcile.ts
 /**
@@ -10,10 +11,10 @@ import { generateFullstackCustomSecrets } from "./fullstack-secrets-l8s3II_H.mjs
 *
 * @returns ReconcileResult if keys were added, null if secrets are up-to-date
 */
-function reconcileMissingSecrets(secrets, workspace) {
+function reconcileMissingSecrets(secrets, workspace, containers = []) {
 	const isMultiApp = Object.keys(workspace.apps).length > 1;
 	if (!isMultiApp) return null;
-	const expectedCustom = generateFullstackCustomSecrets(workspace);
+	const expectedCustom = generateFullstackCustomSecrets(workspace, containers);
 	const addedKeys = [];
 	const mergedCustom = { ...secrets.custom };
 	for (const [key, value] of Object.entries(expectedCustom)) if (!(key in mergedCustom)) {
@@ -33,4 +34,4 @@ function reconcileMissingSecrets(secrets, workspace) {
 
 //#endregion
 export { reconcileMissingSecrets };
-//# sourceMappingURL=reconcile-B2FoJE0a.mjs.map
+//# sourceMappingURL=reconcile-CFs8C_1a.mjs.map

package/dist/reconcile-CFs8C_1a.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-CFs8C_1a.mjs","names":["secrets: StageSecrets","workspace: NormalizedWorkspace","containers: readonly string[]","addedKeys: string[]"],"sources":["../src/secrets/reconcile.ts"],"sourcesContent":["import { generateFullstackCustomSecrets } from '../setup/fullstack-secrets.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\nexport interface ReconcileResult {\n\t/** The updated secrets with missing keys backfilled */\n\tsecrets: StageSecrets;\n\t/** Keys that were added */\n\taddedKeys: string[];\n}\n\n/**\n * Reconcile missing custom secrets for a workspace.\n *\n * Compares current secrets against what generateFullstackCustomSecrets()\n * would produce and backfills any missing keys without overwriting\n * existing values.\n *\n * @returns ReconcileResult if keys were added, null if secrets are up-to-date\n */\nexport function reconcileMissingSecrets(\n\tsecrets: StageSecrets,\n\tworkspace: NormalizedWorkspace,\n\tcontainers: readonly string[] = [],\n): ReconcileResult | null {\n\tconst isMultiApp = Object.keys(workspace.apps).length > 1;\n\tif (!isMultiApp) {\n\t\treturn null;\n\t}\n\n\tconst expectedCustom = generateFullstackCustomSecrets(workspace, containers);\n\tconst addedKeys: string[] = [];\n\tconst mergedCustom = { ...secrets.custom };\n\n\tfor (const [key, value] of Object.entries(expectedCustom)) {\n\t\tif (!(key in mergedCustom)) {\n\t\t\tmergedCustom[key] = value;\n\t\t\taddedKeys.push(key);\n\t\t}\n\t}\n\n\tif (addedKeys.length === 0) {\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tsecrets: {\n\t\t\t...secrets,\n\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\tcustom: mergedCustom,\n\t\t},\n\t\taddedKeys,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAgB,wBACfA,SACAC,WACAC,aAAgC,CAAE,GACT;CACzB,MAAM,aAAa,OAAO,KAAK,UAAU,KAAK,CAAC,SAAS;AACxD,MAAK,WACJ,QAAO;CAGR,MAAM,iBAAiB,+BAA+B,WAAW,WAAW;CAC5E,MAAMC,YAAsB,CAAE;CAC9B,MAAM,eAAe,EAAE,GAAG,QAAQ,OAAQ;AAE1C,MAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,CACxD,OAAM,OAAO,eAAe;AAC3B,eAAa,OAAO;AACpB,YAAU,KAAK,IAAI;CACnB;AAGF,KAAI,UAAU,WAAW,EACxB,QAAO;AAGR,QAAO;EACN,SAAS;GACR,GAAG;GACH,WAAW,qBAAI,QAAO,aAAa;GACnC,QAAQ;EACR;EACD;CACA;AACD"}

package/dist/{reconcile-BzqKJ2Rt.cjs → reconcile-D0pimNiy.cjs}

@@ -1,4 +1,5 @@
-const require_fullstack_secrets = require('./fullstack-secrets-BYzi6Hwl.cjs');
+require('./generator-CNzBw7g5.cjs');
+const require_fullstack_secrets = require('./fullstack-secrets-C-GGohke.cjs');
 
 //#region src/secrets/reconcile.ts
 /**
@@ -10,10 +11,10 @@ const require_fullstack_secrets = require('./fullstack-secrets-BYzi6Hwl.cjs');
 *
 * @returns ReconcileResult if keys were added, null if secrets are up-to-date
 */
-function reconcileMissingSecrets(secrets, workspace) {
+function reconcileMissingSecrets(secrets, workspace, containers = []) {
 	const isMultiApp = Object.keys(workspace.apps).length > 1;
 	if (!isMultiApp) return null;
-	const expectedCustom = require_fullstack_secrets.generateFullstackCustomSecrets(workspace);
+	const expectedCustom = require_fullstack_secrets.generateFullstackCustomSecrets(workspace, containers);
 	const addedKeys = [];
 	const mergedCustom = { ...secrets.custom };
 	for (const [key, value] of Object.entries(expectedCustom)) if (!(key in mergedCustom)) {
@@ -33,4 +34,4 @@ function reconcileMissingSecrets(secrets, workspace) {
 
 //#endregion
 exports.reconcileMissingSecrets = reconcileMissingSecrets;
-//# sourceMappingURL=reconcile-BzqKJ2Rt.cjs.map
+//# sourceMappingURL=reconcile-D0pimNiy.cjs.map

package/dist/reconcile-D0pimNiy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-D0pimNiy.cjs","names":["secrets: StageSecrets","workspace: NormalizedWorkspace","containers: readonly string[]","addedKeys: string[]"],"sources":["../src/secrets/reconcile.ts"],"sourcesContent":["import { generateFullstackCustomSecrets } from '../setup/fullstack-secrets.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\nexport interface ReconcileResult {\n\t/** The updated secrets with missing keys backfilled */\n\tsecrets: StageSecrets;\n\t/** Keys that were added */\n\taddedKeys: string[];\n}\n\n/**\n * Reconcile missing custom secrets for a workspace.\n *\n * Compares current secrets against what generateFullstackCustomSecrets()\n * would produce and backfills any missing keys without overwriting\n * existing values.\n *\n * @returns ReconcileResult if keys were added, null if secrets are up-to-date\n */\nexport function reconcileMissingSecrets(\n\tsecrets: StageSecrets,\n\tworkspace: NormalizedWorkspace,\n\tcontainers: readonly string[] = [],\n): ReconcileResult | null {\n\tconst isMultiApp = Object.keys(workspace.apps).length > 1;\n\tif (!isMultiApp) {\n\t\treturn null;\n\t}\n\n\tconst expectedCustom = generateFullstackCustomSecrets(workspace, containers);\n\tconst addedKeys: string[] = [];\n\tconst mergedCustom = { ...secrets.custom };\n\n\tfor (const [key, value] of Object.entries(expectedCustom)) {\n\t\tif (!(key in mergedCustom)) {\n\t\t\tmergedCustom[key] = value;\n\t\t\taddedKeys.push(key);\n\t\t}\n\t}\n\n\tif (addedKeys.length === 0) {\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tsecrets: {\n\t\t\t...secrets,\n\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\tcustom: mergedCustom,\n\t\t},\n\t\taddedKeys,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAgB,wBACfA,SACAC,WACAC,aAAgC,CAAE,GACT;CACzB,MAAM,aAAa,OAAO,KAAK,UAAU,KAAK,CAAC,SAAS;AACxD,MAAK,WACJ,QAAO;CAGR,MAAM,iBAAiB,yDAA+B,WAAW,WAAW;CAC5E,MAAMC,YAAsB,CAAE;CAC9B,MAAM,eAAe,EAAE,GAAG,QAAQ,OAAQ;AAE1C,MAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,eAAe,CACxD,OAAM,OAAO,eAAe;AAC3B,eAAa,OAAO;AACpB,YAAU,KAAK,IAAI;CACnB;AAGF,KAAI,UAAU,WAAW,EACxB,QAAO;AAGR,QAAO;EACN,SAAS;GACR,GAAG;GACH,WAAW,qBAAI,QAAO,aAAa;GACnC,QAAQ;EACR;EACD;CACA;AACD"}