@geekmidas/cloud 10.0.0-alpha.11 → 10.0.0-alpha.111

package/README.md

@@ -105,17 +105,25 @@ const cron = new Cron(stack, 'Nightly', { processor: fn, schedule: 'rate(1 day)'
 
 ### From a `gkm build` manifest
 
-`gkm build` emits a deployment manifest (types in `@geekmidas/manifest`). Each
-construct has a static `fromManifest` factory that maps it straight into infra:
+The root `gkm build` writes the application's manifest to
+`.gkm/manifest/aws.ts` (types in `@geekmidas/manifest`), and `fromManifest`
+maps it straight into infra:
 
 ```ts
-import routes from './.gkm/routes-manifest.json';
+// sst.config.ts
+const { App, fromManifest, Stack } = await import('@geekmidas/cloud/sst');
+const { backends, constructs } = await import('./.gkm/manifest/aws.js');
 
-const api     = Api.fromManifest(stack, 'Api', routes, { links: [db], authorizers });
-const workers = Function.fromManifest(stack, functionsManifest, { links: [db] });
-const crons   = Cron.fromManifest(stack, cronsManifest, { links: [db] });
+fromManifest(new Stack(app, 'Shop'), constructs, { Database: { vpc } }, backends);
 ```
 
+`constructs` is every declared construct keyed by id; the overrides are keyed
+by the same ids. One call provisions the resources, each `RestApi`'s endpoints
+(each a Lambda linked only to its own dependencies, placed in the database's
+VPC when it reaches one, with the `iam` authorizer enforced by the gateway),
+queue consumers, every function (a Lambda with an IAM-authorized URL) and every
+cron (a Lambda on its schedule).
+
 ## `@geekmidas/cloud/utils` (runtime)
 
 ```ts

package/dist/index.cjs

@@ -1,3 +1,3 @@
-const require_utils = require('./utils-B1a2UuEO.cjs');
-
-exports.buildResourceEnv = require_utils.buildResourceEnv;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_utils_index = require("./utils/index.cjs");
+exports.buildResourceEnv = require_utils_index.buildResourceEnv;

package/dist/index.d.cts

@@ -1,2 +1,2 @@
-import { buildResourceEnv } from "./index-B5CZ1xVf.cjs";
+import { buildResourceEnv } from "./utils/index.cjs";
 export { buildResourceEnv };

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { buildResourceEnv } from "./index-DhHRjduZ.mjs";
+import { buildResourceEnv } from "./utils/index.mjs";
 export { buildResourceEnv };

package/dist/index.mjs

@@ -1,3 +1,2 @@
-import { buildResourceEnv } from "./utils-DMOXJ27j.mjs";
-
-export { buildResourceEnv };
+import { buildResourceEnv } from "./utils/index.mjs";
+export { buildResourceEnv };

package/dist/utils/index.cjs

@@ -1,6 +1,107 @@
-const require_utils = require('../utils-B1a2UuEO.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+let node_os = require("node:os");
+node_os = __toESM(node_os, 1);
+let lodash_snakecase = require("lodash.snakecase");
+lodash_snakecase = __toESM(lodash_snakecase, 1);
+//#region src/utils/index.ts
+function getLocalIpAddress() {
+	const networkInterfaces = node_os.default.networkInterfaces();
+	for (const interfaceName in networkInterfaces) {
+		const addresses = networkInterfaces[interfaceName] || [];
+		for (const addressInfo of addresses) if (addressInfo.family === "IPv4" && !addressInfo.internal) return addressInfo.address;
+	}
+	return null;
+}
+function environmentCase(name) {
+	return (0, lodash_snakecase.default)(name).toUpperCase().replace(/_\d+/g, (r) => {
+		return r.replace("_", "");
+	});
+}
+let ResourceType = /* @__PURE__ */ function(ResourceType) {
+	ResourceType["ApiGatewayV2"] = "sst.aws.ApiGatewayV2";
+	ResourceType["Postgres"] = "sst.aws.Postgres";
+	ResourceType["Function"] = "sst.aws.Function";
+	ResourceType["ObjectStorage"] = "sst.aws.Bucket";
+	ResourceType["Vpc"] = "sst.aws.Vpc";
+	ResourceType["Secret"] = "sst.sst.Secret";
+	ResourceType["SSTSecret"] = "sst:sst:Secret";
+	ResourceType["SSTFunction"] = "sst:sst:Function";
+	ResourceType["SSTApiGatewayV2"] = "sst:aws:ApiGatewayV2";
+	ResourceType["SSTPostgres"] = "sst:aws:Postgres";
+	ResourceType["SSTObjectStorage"] = "sst:aws:Bucket";
+	ResourceType["SnsTopic"] = "sst:aws:SnsTopic";
+	return ResourceType;
+}({});
+const secret = (name, value) => ({ [environmentCase(name)]: value.value });
+const postgres = (key, value) => {
+	const prefix = `${environmentCase(key)}`;
+	return {
+		[`${prefix}_NAME`]: value.database,
+		[`${prefix}_HOST`]: value.host,
+		[`${prefix}_PASSWORD`]: value.password,
+		[`${prefix}_PORT`]: value.port,
+		[`${prefix}_USERNAME`]: value.username
+	};
+};
+const bucket = (name, value) => {
+	return { [`${`${environmentCase(name)}`}_NAME`]: value.name };
+};
+const topic = (name, value) => {
+	return { [`${`${environmentCase(name)}`}_ARN`]: value.arn };
+};
+const noop = (_name, _value) => ({});
+const processors = {
+	["sst.aws.ApiGatewayV2"]: noop,
+	["sst.aws.Function"]: noop,
+	["sst.aws.Vpc"]: noop,
+	["sst.sst.Secret"]: secret,
+	["sst.aws.Postgres"]: postgres,
+	["sst.aws.Bucket"]: bucket,
+	["sst:sst:Secret"]: secret,
+	["sst:aws:Bucket"]: bucket,
+	["sst:sst:Function"]: noop,
+	["sst:aws:Postgres"]: postgres,
+	["sst:aws:ApiGatewayV2"]: noop,
+	["sst:aws:SnsTopic"]: topic
+};
+function buildResourceEnv(record) {
+	const env = {};
+	for (const [k, value] of Object.entries(record)) {
+		if (typeof value === "string") {
+			env[environmentCase(k)] = value;
+			continue;
+		}
+		const processor = processors[value.type];
+		if (processor) Object.assign(env, processor(k, value));
+	}
+	return env;
+}
+//#endregion
+exports.ResourceType = ResourceType;
+exports.buildResourceEnv = buildResourceEnv;
+exports.environmentCase = environmentCase;
+exports.getLocalIpAddress = getLocalIpAddress;
 
-exports.ResourceType = require_utils.ResourceType;
-exports.buildResourceEnv = require_utils.buildResourceEnv;
-exports.environmentCase = require_utils.environmentCase;
-exports.getLocalIpAddress = require_utils.getLocalIpAddress;
+//# sourceMappingURL=index.cjs.map

package/dist/utils/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["os","snakecase"],"sources":["../../src/utils/index.ts"],"sourcesContent":["import os from 'node:os';\nimport snakecase from 'lodash.snakecase';\n\nexport function getLocalIpAddress() {\n\tconst networkInterfaces = os.networkInterfaces();\n\tfor (const interfaceName in networkInterfaces) {\n\t\tconst addresses = networkInterfaces[interfaceName] || [];\n\t\tfor (const addressInfo of addresses) {\n\t\t\t// Look for an IPv4 address that is not internal (loopback)\n\t\t\tif (addressInfo.family === 'IPv4' && !addressInfo.internal) {\n\t\t\t\treturn addressInfo.address;\n\t\t\t}\n\t\t}\n\t}\n\treturn null; // No suitable IP address found\n}\n\nexport function environmentCase(name: string) {\n\treturn snakecase(name)\n\t\t.toUpperCase()\n\t\t.replace(/_\\d+/g, (r) => {\n\t\t\treturn r.replace('_', '');\n\t\t});\n}\nexport enum ResourceType {\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tObjectStorage = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTObjectStorage = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n}\n\nconst secret = (name: string, value: Secret) => ({\n\t[environmentCase(name)]: value.value,\n});\nconst postgres = (key: string, value: Postgres) => {\n\tconst prefix = `${environmentCase(key)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.database,\n\t\t[`${prefix}_HOST`]: value.host,\n\t\t[`${prefix}_PASSWORD`]: value.password,\n\t\t[`${prefix}_PORT`]: value.port,\n\t\t[`${prefix}_USERNAME`]: value.username,\n\t};\n};\n\nconst bucket = (name: string, value: Bucket) => {\n\tconst prefix = `${environmentCase(name)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.name,\n\t};\n};\n\nconst topic = (name: string, value: SnsTopic) => {\n\tconst prefix = `${environmentCase(name)}`;\n\tconst key = `${prefix}_ARN`;\n\n\treturn {\n\t\t[key]: value.arn,\n\t};\n};\n\nconst noop = (_name: string, _value: any) => ({});\n\nconst processors: Record<ResourceType, ResourceProcessor<any>> = {\n\t[ResourceType.ApiGatewayV2]: noop,\n\t[ResourceType.Function]: noop,\n\t[ResourceType.Vpc]: noop,\n\t[ResourceType.Secret]: secret,\n\t[ResourceType.Postgres]: postgres,\n\t[ResourceType.ObjectStorage]: bucket,\n\n\t[ResourceType.SSTSecret]: secret,\n\t[ResourceType.SSTObjectStorage]: bucket,\n\t[ResourceType.SSTFunction]: noop,\n\t[ResourceType.SSTPostgres]: postgres,\n\t[ResourceType.SSTApiGatewayV2]: noop,\n\t[ResourceType.SnsTopic]: topic,\n};\n\nexport function buildResourceEnv(\n\trecord: Record<string, Resource | string>,\n): Record<string, string> {\n\tconst env: Record<string, string> = {};\n\tfor (const [k, value] of Object.entries(record)) {\n\t\tif (typeof value === 'string') {\n\t\t\tenv[environmentCase(k)] = value;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst processor = processors[value.type];\n\t\tif (processor) {\n\t\t\tObject.assign(env, processor(k, value));\n\t\t} else {\n\t\t}\n\t}\n\n\treturn env;\n}\n\n/**\n * SST links a resource under one of two spellings — `sst.aws.Bucket` when it\n * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —\n * and `processors` has always handled both. Only the dotted half was admitted\n * here, so the colon half could not be passed to `buildResourceEnv` without a\n * cast, and `SnsTopic` was missing from `Resource` altogether despite being the\n * only thing that produces `*_ARN`.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\nexport type Postgres = {\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tusername: string;\n};\n\nexport type Function = {\n\tname: string;\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n};\n\nexport type Bucket = {\n\tname: string;\n\ttype: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;\n};\n\nexport type SnsTopic = {\n\tarn: string;\n\ttype: ResourceType.SnsTopic;\n};\n\nexport type Vpc = {\n\tbastion: string;\n\ttype: ResourceType.Vpc;\n};\n\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\nexport type Resource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| SnsTopic\n\t| Vpc\n\t| Secret;\n\nexport type ResourceProcessor<K extends Resource> = (\n\tname: string,\n\tvalue: K,\n) => Record<string, string | number>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,SAAgB,oBAAoB;CACnC,MAAM,oBAAoBA,QAAAA,QAAG,kBAAkB;CAC/C,KAAK,MAAM,iBAAiB,mBAAmB;EAC9C,MAAM,YAAY,kBAAkB,kBAAkB,CAAC;EACvD,KAAK,MAAM,eAAe,WAEzB,IAAI,YAAY,WAAW,UAAU,CAAC,YAAY,UACjD,OAAO,YAAY;CAGtB;CACA,OAAO;AACR;AAEA,SAAgB,gBAAgB,MAAc;CAC7C,QAAA,GAAOC,iBAAAA,QAAAA,CAAU,IAAI,CAAC,CACpB,YAAY,CAAC,CACb,QAAQ,UAAU,MAAM;EACxB,OAAO,EAAE,QAAQ,KAAK,EAAE;CACzB,CAAC;AACH;AACA,IAAY,eAAL,yBAAA,cAAA;CACN,aAAA,kBAAA;CACA,aAAA,cAAA;CACA,aAAA,cAAA;CACA,aAAA,mBAAA;CACA,aAAA,SAAA;CACA,aAAA,YAAA;CACA,aAAA,eAAA;CACA,aAAA,iBAAA;CACA,aAAA,qBAAA;CACA,aAAA,iBAAA;CACA,aAAA,sBAAA;CACA,aAAA,cAAA;;AACD,EAAA,CAAA,CAAA;AAEA,MAAM,UAAU,MAAc,WAAmB,GAC/C,gBAAgB,IAAI,IAAI,MAAM,MAChC;AACA,MAAM,YAAY,KAAa,UAAoB;CAClD,MAAM,SAAS,GAAG,gBAAgB,GAAG;CACrC,OAAO;GACL,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,aAAa,MAAM;GAC7B,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,aAAa,MAAM;CAC/B;AACD;AAEA,MAAM,UAAU,MAAc,UAAkB;CAE/C,OAAO,GACL,GAAG,GAFa,gBAAgB,IAAI,IAE1B,SAAS,MAAM,KAC3B;AACD;AAEA,MAAM,SAAS,MAAc,UAAoB;CAIhD,OAAO,GACL,GAHa,GADG,gBAAgB,IAAI,IAChB,QAGd,MAAM,IACd;AACD;AAEA,MAAM,QAAQ,OAAe,YAAiB,CAAC;AAE/C,MAAM,aAA2D;EACnC,yBAAA;EACJ,qBAAA;EACL,gBAAA;EACG,mBAAA;EACE,qBAAA;EACK,mBAAA;EAEJ,mBAAA;EACO,mBAAA;EACL,qBAAA;EACA,qBAAA;EACI,yBAAA;EACP,qBAAA;AAC1B;AAEA,SAAgB,iBACf,QACyB;CACzB,MAAM,MAA8B,CAAC;CACrC,KAAK,MAAM,CAAC,GAAG,UAAU,OAAO,QAAQ,MAAM,GAAG;EAChD,IAAI,OAAO,UAAU,UAAU;GAC9B,IAAI,gBAAgB,CAAC,KAAK;GAC1B;EACD;EAEA,MAAM,YAAY,WAAW,MAAM;EACnC,IAAI,WACH,OAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;CAGxC;CAEA,OAAO;AACR"}

package/dist/utils/index.d.cts

@@ -1,2 +1,62 @@
-import { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress } from "../index-B5CZ1xVf.cjs";
-export { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress };
+//#region src/utils/index.d.ts
+export declare function getLocalIpAddress(): string | null;
+export declare function environmentCase(name: string): string;
+export declare enum ResourceType {
+  ApiGatewayV2 = "sst.aws.ApiGatewayV2",
+  Postgres = "sst.aws.Postgres",
+  Function = "sst.aws.Function",
+  ObjectStorage = "sst.aws.Bucket",
+  Vpc = "sst.aws.Vpc",
+  Secret = "sst.sst.Secret",
+  SSTSecret = "sst:sst:Secret",
+  SSTFunction = "sst:sst:Function",
+  SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
+  SSTPostgres = "sst:aws:Postgres",
+  SSTObjectStorage = "sst:aws:Bucket",
+  SnsTopic = "sst:aws:SnsTopic"
+}
+export declare function buildResourceEnv(record: Record<string, Resource | string>): Record<string, string>;
+/**
+ * SST links a resource under one of two spellings — `sst.aws.Bucket` when it
+ * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —
+ * and `processors` has always handled both. Only the dotted half was admitted
+ * here, so the colon half could not be passed to `buildResourceEnv` without a
+ * cast, and `SnsTopic` was missing from `Resource` altogether despite being the
+ * only thing that produces `*_ARN`.
+ */
+export type ApiGatewayV2 = {
+  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;
+  url: string;
+};
+export type Postgres = {
+  database: string;
+  host: string;
+  password: string;
+  port: number;
+  type: ResourceType.Postgres | ResourceType.SSTPostgres;
+  username: string;
+};
+export type Function = {
+  name: string;
+  type: ResourceType.Function | ResourceType.SSTFunction;
+};
+export type Bucket = {
+  name: string;
+  type: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;
+};
+export type SnsTopic = {
+  arn: string;
+  type: ResourceType.SnsTopic;
+};
+export type Vpc = {
+  bastion: string;
+  type: ResourceType.Vpc;
+};
+export type Secret = {
+  type: ResourceType.Secret | ResourceType.SSTSecret;
+  value: string;
+};
+export type Resource = ApiGatewayV2 | Postgres | Function | Bucket | SnsTopic | Vpc | Secret;
+export type ResourceProcessor<K extends Resource> = (name: string, value: K) => Record<string, string | number>;
+//#endregion
+//# sourceMappingURL=index.d.cts.map

package/dist/utils/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/utils/index.ts"],"mappings":";wBAGgB;wBAcA,gBAAgB;oBAOpB;EACX;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;wBAmDe,iBACf,QAAQ,eAAe,qBACrB;;;;;;;;;YA0BS;EACX,MAAM,aAAa,eAAe,aAAa;EAC/C;;YAGW;EACX;EACA;EACA;EACA;EACA,MAAM,aAAa,WAAW,aAAa;EAC3C;;YAGW;EACX;EACA,MAAM,aAAa,WAAW,aAAa;;YAGhC;EACX;EACA,MAAM,aAAa,gBAAgB,aAAa;;YAGrC;EACX;EACA,MAAM,aAAa;;YAGR;EACX;EACA,MAAM,aAAa;;YAGR;EACX,MAAM,aAAa,SAAS,aAAa;EACzC;;YAGW,WACT,eACA,WACA,WACA,SACA,WACA,MACA;YAES,kBAAkB,UAAU,aACvC,cACA,OAAO,MACH"}

package/dist/utils/index.d.mts

@@ -1,2 +1,62 @@
-import { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress } from "../index-DhHRjduZ.mjs";
-export { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress };
+//#region src/utils/index.d.ts
+export declare function getLocalIpAddress(): string | null;
+export declare function environmentCase(name: string): string;
+export declare enum ResourceType {
+  ApiGatewayV2 = "sst.aws.ApiGatewayV2",
+  Postgres = "sst.aws.Postgres",
+  Function = "sst.aws.Function",
+  ObjectStorage = "sst.aws.Bucket",
+  Vpc = "sst.aws.Vpc",
+  Secret = "sst.sst.Secret",
+  SSTSecret = "sst:sst:Secret",
+  SSTFunction = "sst:sst:Function",
+  SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
+  SSTPostgres = "sst:aws:Postgres",
+  SSTObjectStorage = "sst:aws:Bucket",
+  SnsTopic = "sst:aws:SnsTopic"
+}
+export declare function buildResourceEnv(record: Record<string, Resource | string>): Record<string, string>;
+/**
+ * SST links a resource under one of two spellings — `sst.aws.Bucket` when it
+ * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —
+ * and `processors` has always handled both. Only the dotted half was admitted
+ * here, so the colon half could not be passed to `buildResourceEnv` without a
+ * cast, and `SnsTopic` was missing from `Resource` altogether despite being the
+ * only thing that produces `*_ARN`.
+ */
+export type ApiGatewayV2 = {
+  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;
+  url: string;
+};
+export type Postgres = {
+  database: string;
+  host: string;
+  password: string;
+  port: number;
+  type: ResourceType.Postgres | ResourceType.SSTPostgres;
+  username: string;
+};
+export type Function = {
+  name: string;
+  type: ResourceType.Function | ResourceType.SSTFunction;
+};
+export type Bucket = {
+  name: string;
+  type: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;
+};
+export type SnsTopic = {
+  arn: string;
+  type: ResourceType.SnsTopic;
+};
+export type Vpc = {
+  bastion: string;
+  type: ResourceType.Vpc;
+};
+export type Secret = {
+  type: ResourceType.Secret | ResourceType.SSTSecret;
+  value: string;
+};
+export type Resource = ApiGatewayV2 | Postgres | Function | Bucket | SnsTopic | Vpc | Secret;
+export type ResourceProcessor<K extends Resource> = (name: string, value: K) => Record<string, string | number>;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/utils/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/utils/index.ts"],"mappings":";wBAGgB;wBAcA,gBAAgB;oBAOpB;EACX;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;wBAmDe,iBACf,QAAQ,eAAe,qBACrB;;;;;;;;;YA0BS;EACX,MAAM,aAAa,eAAe,aAAa;EAC/C;;YAGW;EACX;EACA;EACA;EACA;EACA,MAAM,aAAa,WAAW,aAAa;EAC3C;;YAGW;EACX;EACA,MAAM,aAAa,WAAW,aAAa;;YAGhC;EACX;EACA,MAAM,aAAa,gBAAgB,aAAa;;YAGrC;EACX;EACA,MAAM,aAAa;;YAGR;EACX;EACA,MAAM,aAAa;;YAGR;EACX,MAAM,aAAa,SAAS,aAAa;EACzC;;YAGW,WACT,eACA,WACA,WACA,SACA,WACA,MACA;YAES,kBAAkB,UAAU,aACvC,cACA,OAAO,MACH"}

package/dist/utils/index.mjs

@@ -1,3 +1,79 @@
-import { ResourceType, buildResourceEnv, environmentCase, getLocalIpAddress } from "../utils-DMOXJ27j.mjs";
+import os from "node:os";
+import snakecase from "lodash.snakecase";
+//#region src/utils/index.ts
+function getLocalIpAddress() {
+	const networkInterfaces = os.networkInterfaces();
+	for (const interfaceName in networkInterfaces) {
+		const addresses = networkInterfaces[interfaceName] || [];
+		for (const addressInfo of addresses) if (addressInfo.family === "IPv4" && !addressInfo.internal) return addressInfo.address;
+	}
+	return null;
+}
+function environmentCase(name) {
+	return snakecase(name).toUpperCase().replace(/_\d+/g, (r) => {
+		return r.replace("_", "");
+	});
+}
+let ResourceType = /* @__PURE__ */ function(ResourceType) {
+	ResourceType["ApiGatewayV2"] = "sst.aws.ApiGatewayV2";
+	ResourceType["Postgres"] = "sst.aws.Postgres";
+	ResourceType["Function"] = "sst.aws.Function";
+	ResourceType["ObjectStorage"] = "sst.aws.Bucket";
+	ResourceType["Vpc"] = "sst.aws.Vpc";
+	ResourceType["Secret"] = "sst.sst.Secret";
+	ResourceType["SSTSecret"] = "sst:sst:Secret";
+	ResourceType["SSTFunction"] = "sst:sst:Function";
+	ResourceType["SSTApiGatewayV2"] = "sst:aws:ApiGatewayV2";
+	ResourceType["SSTPostgres"] = "sst:aws:Postgres";
+	ResourceType["SSTObjectStorage"] = "sst:aws:Bucket";
+	ResourceType["SnsTopic"] = "sst:aws:SnsTopic";
+	return ResourceType;
+}({});
+const secret = (name, value) => ({ [environmentCase(name)]: value.value });
+const postgres = (key, value) => {
+	const prefix = `${environmentCase(key)}`;
+	return {
+		[`${prefix}_NAME`]: value.database,
+		[`${prefix}_HOST`]: value.host,
+		[`${prefix}_PASSWORD`]: value.password,
+		[`${prefix}_PORT`]: value.port,
+		[`${prefix}_USERNAME`]: value.username
+	};
+};
+const bucket = (name, value) => {
+	return { [`${`${environmentCase(name)}`}_NAME`]: value.name };
+};
+const topic = (name, value) => {
+	return { [`${`${environmentCase(name)}`}_ARN`]: value.arn };
+};
+const noop = (_name, _value) => ({});
+const processors = {
+	["sst.aws.ApiGatewayV2"]: noop,
+	["sst.aws.Function"]: noop,
+	["sst.aws.Vpc"]: noop,
+	["sst.sst.Secret"]: secret,
+	["sst.aws.Postgres"]: postgres,
+	["sst.aws.Bucket"]: bucket,
+	["sst:sst:Secret"]: secret,
+	["sst:aws:Bucket"]: bucket,
+	["sst:sst:Function"]: noop,
+	["sst:aws:Postgres"]: postgres,
+	["sst:aws:ApiGatewayV2"]: noop,
+	["sst:aws:SnsTopic"]: topic
+};
+function buildResourceEnv(record) {
+	const env = {};
+	for (const [k, value] of Object.entries(record)) {
+		if (typeof value === "string") {
+			env[environmentCase(k)] = value;
+			continue;
+		}
+		const processor = processors[value.type];
+		if (processor) Object.assign(env, processor(k, value));
+	}
+	return env;
+}
+//#endregion
+export { ResourceType, buildResourceEnv, environmentCase, getLocalIpAddress };
 
-export { ResourceType, buildResourceEnv, environmentCase, getLocalIpAddress };
+//# sourceMappingURL=index.mjs.map

package/dist/utils/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/utils/index.ts"],"sourcesContent":["import os from 'node:os';\nimport snakecase from 'lodash.snakecase';\n\nexport function getLocalIpAddress() {\n\tconst networkInterfaces = os.networkInterfaces();\n\tfor (const interfaceName in networkInterfaces) {\n\t\tconst addresses = networkInterfaces[interfaceName] || [];\n\t\tfor (const addressInfo of addresses) {\n\t\t\t// Look for an IPv4 address that is not internal (loopback)\n\t\t\tif (addressInfo.family === 'IPv4' && !addressInfo.internal) {\n\t\t\t\treturn addressInfo.address;\n\t\t\t}\n\t\t}\n\t}\n\treturn null; // No suitable IP address found\n}\n\nexport function environmentCase(name: string) {\n\treturn snakecase(name)\n\t\t.toUpperCase()\n\t\t.replace(/_\\d+/g, (r) => {\n\t\t\treturn r.replace('_', '');\n\t\t});\n}\nexport enum ResourceType {\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tObjectStorage = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTObjectStorage = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n}\n\nconst secret = (name: string, value: Secret) => ({\n\t[environmentCase(name)]: value.value,\n});\nconst postgres = (key: string, value: Postgres) => {\n\tconst prefix = `${environmentCase(key)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.database,\n\t\t[`${prefix}_HOST`]: value.host,\n\t\t[`${prefix}_PASSWORD`]: value.password,\n\t\t[`${prefix}_PORT`]: value.port,\n\t\t[`${prefix}_USERNAME`]: value.username,\n\t};\n};\n\nconst bucket = (name: string, value: Bucket) => {\n\tconst prefix = `${environmentCase(name)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.name,\n\t};\n};\n\nconst topic = (name: string, value: SnsTopic) => {\n\tconst prefix = `${environmentCase(name)}`;\n\tconst key = `${prefix}_ARN`;\n\n\treturn {\n\t\t[key]: value.arn,\n\t};\n};\n\nconst noop = (_name: string, _value: any) => ({});\n\nconst processors: Record<ResourceType, ResourceProcessor<any>> = {\n\t[ResourceType.ApiGatewayV2]: noop,\n\t[ResourceType.Function]: noop,\n\t[ResourceType.Vpc]: noop,\n\t[ResourceType.Secret]: secret,\n\t[ResourceType.Postgres]: postgres,\n\t[ResourceType.ObjectStorage]: bucket,\n\n\t[ResourceType.SSTSecret]: secret,\n\t[ResourceType.SSTObjectStorage]: bucket,\n\t[ResourceType.SSTFunction]: noop,\n\t[ResourceType.SSTPostgres]: postgres,\n\t[ResourceType.SSTApiGatewayV2]: noop,\n\t[ResourceType.SnsTopic]: topic,\n};\n\nexport function buildResourceEnv(\n\trecord: Record<string, Resource | string>,\n): Record<string, string> {\n\tconst env: Record<string, string> = {};\n\tfor (const [k, value] of Object.entries(record)) {\n\t\tif (typeof value === 'string') {\n\t\t\tenv[environmentCase(k)] = value;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst processor = processors[value.type];\n\t\tif (processor) {\n\t\t\tObject.assign(env, processor(k, value));\n\t\t} else {\n\t\t}\n\t}\n\n\treturn env;\n}\n\n/**\n * SST links a resource under one of two spellings — `sst.aws.Bucket` when it\n * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —\n * and `processors` has always handled both. Only the dotted half was admitted\n * here, so the colon half could not be passed to `buildResourceEnv` without a\n * cast, and `SnsTopic` was missing from `Resource` altogether despite being the\n * only thing that produces `*_ARN`.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\nexport type Postgres = {\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tusername: string;\n};\n\nexport type Function = {\n\tname: string;\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n};\n\nexport type Bucket = {\n\tname: string;\n\ttype: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;\n};\n\nexport type SnsTopic = {\n\tarn: string;\n\ttype: ResourceType.SnsTopic;\n};\n\nexport type Vpc = {\n\tbastion: string;\n\ttype: ResourceType.Vpc;\n};\n\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\nexport type Resource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| SnsTopic\n\t| Vpc\n\t| Secret;\n\nexport type ResourceProcessor<K extends Resource> = (\n\tname: string,\n\tvalue: K,\n) => Record<string, string | number>;\n"],"mappings":";;;AAGA,SAAgB,oBAAoB;CACnC,MAAM,oBAAoB,GAAG,kBAAkB;CAC/C,KAAK,MAAM,iBAAiB,mBAAmB;EAC9C,MAAM,YAAY,kBAAkB,kBAAkB,CAAC;EACvD,KAAK,MAAM,eAAe,WAEzB,IAAI,YAAY,WAAW,UAAU,CAAC,YAAY,UACjD,OAAO,YAAY;CAGtB;CACA,OAAO;AACR;AAEA,SAAgB,gBAAgB,MAAc;CAC7C,OAAO,UAAU,IAAI,CAAC,CACpB,YAAY,CAAC,CACb,QAAQ,UAAU,MAAM;EACxB,OAAO,EAAE,QAAQ,KAAK,EAAE;CACzB,CAAC;AACH;AACA,IAAY,eAAL,yBAAA,cAAA;CACN,aAAA,kBAAA;CACA,aAAA,cAAA;CACA,aAAA,cAAA;CACA,aAAA,mBAAA;CACA,aAAA,SAAA;CACA,aAAA,YAAA;CACA,aAAA,eAAA;CACA,aAAA,iBAAA;CACA,aAAA,qBAAA;CACA,aAAA,iBAAA;CACA,aAAA,sBAAA;CACA,aAAA,cAAA;;AACD,EAAA,CAAA,CAAA;AAEA,MAAM,UAAU,MAAc,WAAmB,GAC/C,gBAAgB,IAAI,IAAI,MAAM,MAChC;AACA,MAAM,YAAY,KAAa,UAAoB;CAClD,MAAM,SAAS,GAAG,gBAAgB,GAAG;CACrC,OAAO;GACL,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,aAAa,MAAM;GAC7B,GAAG,OAAO,SAAS,MAAM;GACzB,GAAG,OAAO,aAAa,MAAM;CAC/B;AACD;AAEA,MAAM,UAAU,MAAc,UAAkB;CAE/C,OAAO,GACL,GAAG,GAFa,gBAAgB,IAAI,IAE1B,SAAS,MAAM,KAC3B;AACD;AAEA,MAAM,SAAS,MAAc,UAAoB;CAIhD,OAAO,GACL,GAHa,GADG,gBAAgB,IAAI,IAChB,QAGd,MAAM,IACd;AACD;AAEA,MAAM,QAAQ,OAAe,YAAiB,CAAC;AAE/C,MAAM,aAA2D;EACnC,yBAAA;EACJ,qBAAA;EACL,gBAAA;EACG,mBAAA;EACE,qBAAA;EACK,mBAAA;EAEJ,mBAAA;EACO,mBAAA;EACL,qBAAA;EACA,qBAAA;EACI,yBAAA;EACP,qBAAA;AAC1B;AAEA,SAAgB,iBACf,QACyB;CACzB,MAAM,MAA8B,CAAC;CACrC,KAAK,MAAM,CAAC,GAAG,UAAU,OAAO,QAAQ,MAAM,GAAG;EAChD,IAAI,OAAO,UAAU,UAAU;GAC9B,IAAI,gBAAgB,CAAC,KAAK;GAC1B;EACD;EAEA,MAAM,YAAY,WAAW,MAAM;EACnC,IAAI,WACH,OAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;CAGxC;CAEA,OAAO;AACR"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/cloud",
-  "version": "10.0.0-alpha.11",
+  "version": "10.0.0-alpha.111",
   "type": "module",
   "files": [
     "dist",
@@ -41,8 +41,8 @@
   },
   "dependencies": {
     "lodash.snakecase": "~4.1.1",
-    "@geekmidas/envkit": "10.0.0-alpha.11",
-    "@geekmidas/manifest": "10.0.0-alpha.11"
+    "@geekmidas/envkit": "10.0.0-alpha.111",
+    "@geekmidas/manifest": "10.0.0-alpha.111"
   },
   "devDependencies": {
     "@types/lodash.get": "~4.4.9",
@@ -58,10 +58,10 @@
     "@pulumi/aws": ">=7.47.0",
     "@pulumi/random": ">=4.21.2",
     "@pulumi/pulumi": ">=3.263.0",
-    "@geekmidas/manifest": "^10.0.0-alpha.11",
-    "@geekmidas/storage": "^10.0.0-alpha.11",
-    "@geekmidas/events": "^10.0.0-alpha.11",
-    "@geekmidas/db": "^10.0.0-alpha.11"
+    "@geekmidas/manifest": "^10.0.0-alpha.111",
+    "@geekmidas/storage": "^10.0.0-alpha.111",
+    "@geekmidas/events": "^10.0.0-alpha.111",
+    "@geekmidas/db": "^10.0.0-alpha.111"
   },
   "peerDependenciesMeta": {
     "@geekmidas/manifest": {
@@ -91,6 +91,7 @@
   },
   "scripts": {
     "sst:install": "node -e \"process.exit(require('fs').existsSync('sst.config.ts')?0:1)\" && sst install || true",
-    "ts:check:sst": "tsc --noEmit -p src/sst/tsconfig.json 2>&1 | grep -E 'src/sst/.*error TS' && exit 1 || exit 0"
+    "ts:check:sst": "tsc --noEmit -p src/sst/tsconfig.json 2>&1 | grep -E 'src/sst/.*error TS' && exit 1 || exit 0",
+    "build": "tsdown --config ../../tsdown.config.ts --filter ."
   }
 }

package/src/dokploy/Application.ts

@@ -195,6 +195,45 @@ const provider: dynamic.ResourceProvider<
 	},
 };
 
+/**
+ * A Dokploy API call that answered with an error status.
+ *
+ * Defined here, beside the provider, rather than imported: the provider's
+ * functions are serialised into state, and Pulumi's closure serialiser
+ * captures a class declared in the same module by value — once, shared by
+ * every function that refers to it, so `instanceof` still holds in the
+ * deployed provider. An imported class would have to be resolvable as a
+ * module where the provider runs, which is the obscure failure the note on
+ * `call` below is about.
+ *
+ * Serialisation rewrites the class into a plain function and drops its link to
+ * `Error.prototype`, so the constructor sets `message` and `stack` itself and
+ * the class says how to print itself. `Application.provider.spec.ts` runs the
+ * serialised provider to keep all of this true.
+ */
+export class DokployCallFailed extends Error {
+	constructor(
+		readonly path: string,
+		readonly status: number,
+		readonly statusText: string,
+		readonly detail: string,
+	) {
+		const message = `Dokploy ${path} failed: ${status} ${statusText}${detail ? ` — ${detail}` : ''}. Check the endpoint and API token, and Dokploy's own logs for the request.`;
+		super(message);
+		// Serialised, this constructor becomes a plain function whose super call
+		// does not initialise `this`: without these the provider host, which
+		// reports `e.message` and logs `${e}: ${e.stack}`, would show nothing.
+		this.message = message;
+		Error.captureStackTrace?.(this, DokployCallFailed);
+		this.name = 'DokployCallFailed';
+	}
+
+	/** What `${error}` prints once serialisation has dropped Error's own. */
+	override toString(): string {
+		return `${this.name}: ${this.message}`;
+	}
+}
+
 /**
  * One call to Dokploy.
  *
@@ -218,10 +257,11 @@ async function call<T>(
 
 	if (!response.ok) {
 		const detail = await response.text().catch(() => '');
-		throw new Error(
-			`Dokploy ${path} failed: ${response.status} ${response.statusText}${
-				detail ? ` — ${detail}` : ''
-			}`,
+		throw new DokployCallFailed(
+			path,
+			response.status,
+			response.statusText,
+			detail,
 		);
 	}
 
@@ -230,7 +270,7 @@ async function call<T>(
 
 /** Whether an error means the thing is already absent. */
 function isNotFound(error: unknown): boolean {
-	return error instanceof Error && /\b404\b/.test(error.message);
+	return error instanceof DokployCallFailed && error.status === 404;
 }
 
 export interface ApplicationArgs {
@@ -241,6 +281,13 @@ export interface ApplicationArgs {
 	environmentId: Input<string>;
 }
 
+/**
+ * The provider itself, for tests: its create/read/update/delete are what talk
+ * to Dokploy, and a dynamic resource gives no other way to reach them without a
+ * Pulumi engine.
+ */
+export { provider as applicationProvider };
+
 export class Application extends dynamic.Resource {
 	declare readonly applicationId: Output<string>;
 	declare readonly appName: Output<string>;