@geekmidas/cloud 10.0.0-alpha.2 → 10.0.0-alpha.21

package/src/sst/__tests__/links.spec.ts

@@ -0,0 +1,209 @@
+import { describe, expect, it } from 'vitest';
+import { Cache, CacheNeedsProvider, CacheNeedsVpc } from '../aws/Cache';
+import { Database } from '../aws/Database';
+import { DatabaseReader, DatabaseSchema } from '../aws/DerivedDatabase';
+import { Email } from '../aws/Email';
+import { FileServer } from '../aws/FileServer';
+import { Queue } from '../aws/Queue';
+import { RestApiSurface } from '../aws/RestApiSurface';
+import { Secret } from '../aws/Secret';
+import { StaticSite } from '../aws/StaticSite';
+import { Storage } from '../aws/Storage';
+import { Topic } from '../aws/Topic';
+import { ResourceType } from '../Linkable';
+
+/**
+ * What a linked function receives from each component, and the type that
+ * decides which variables a link provides. `getSSTLink()` is the payload SST
+ * injects into every handler linked to the resource; `_type` is what
+ * `LinkedEnvironment` keys the variable names off.
+ */
+
+const stack = {} as never;
+const vpc = { subnets: ['subnet-1'], securityGroups: ['sg-1'] } as never;
+
+/** Resolves `$util.output(promise)`, which the stub leaves as the promise. */
+const settle = async (value: unknown) =>
+	(value as { apply: (fn: (v: unknown) => unknown) => unknown }).apply(
+		(v) => v,
+	);
+
+describe('link payloads', () => {
+	it('a queue adds its ARN and connection string to SST’s own link', () => {
+		const queue = new Queue(stack, 'Emails');
+
+		expect(queue._type).toBe(ResourceType.Queue);
+		// The connection string itself is parsed back in provides.spec; here, the
+		// link carries exactly what `provides()` resolved.
+		expect(queue.getSSTLink().properties).toEqual({
+			name: 'Emails',
+			arn: queue.arn,
+			...queue.provides(),
+		});
+	});
+
+	it('a topic carries its publisher connection string', () => {
+		const topic = new Topic(stack, 'Users');
+
+		expect(topic._type).toBe(ResourceType.SnsTopic);
+		expect(topic.getSSTLink().properties).toEqual({
+			name: 'Users',
+			...topic.provides(),
+		});
+	});
+
+	it('a secret carries its value', () => {
+		const secret = new Secret(stack, 'AuthSecret');
+
+		expect(secret._type).toBe(ResourceType.SSTSecret);
+		expect(secret.getSSTLink().properties).toMatchObject(secret.provides());
+	});
+
+	it('a mailer carries its URL and sending identity, and nothing else', () => {
+		const email = new Email(stack, 'Mail', {
+			backend: 'smtp',
+			url: 'smtp://relay.test:587',
+			from: 'hello@shop.test',
+		} as never);
+
+		expect(email._type).toBe(ResourceType.Email);
+		expect(email.getSSTLink()).toEqual({
+			properties: { url: 'smtp://relay.test:587', from: 'hello@shop.test' },
+		});
+	});
+
+	it('a file server routes everything to its bucket, and links its URL', () => {
+		const origin = new Storage(stack, 'Uploads');
+		const server = new FileServer(stack, 'Files', { origin } as never);
+
+		expect(origin._type).toBe(ResourceType.ObjectStorage);
+		expect(origin._id).toBe('Uploads');
+		expect(server._type).toBe(ResourceType.FileServer);
+		expect((server as unknown as { routed: unknown[] }).routed).toEqual([
+			{ pattern: '/*', bucket: origin },
+		]);
+		expect(server.getSSTLink().properties).toMatchObject({
+			url: server.url,
+		});
+	});
+
+	it('a site is built the way its variant builds, and links its URL', () => {
+		const vite = new StaticSite(stack, 'Web');
+		const next = new StaticSite(stack, 'Admin', {
+			variant: 'next',
+			build: { command: 'pnpm build:custom', output: 'out' },
+		} as never);
+		const args = (site: unknown) => (site as { args: { build: unknown } }).args;
+
+		expect(vite._type).toBe(ResourceType.StaticSite);
+		expect(args(vite).build).toEqual(expect.objectContaining({}));
+		// A build the caller supplied wins over the variant's.
+		expect(args(next).build).toEqual({
+			command: 'pnpm build:custom',
+			output: 'out',
+		});
+		expect(vite.getSSTLink().properties).toMatchObject({ url: vite.url });
+	});
+
+	it('a surface links its address and, once resolved, who may call it', async () => {
+		const bare = new RestApiSurface(stack, 'Api');
+		const called = new RestApiSurface(stack, 'Api', {
+			callers: Promise.resolve({
+				trustedOrigins: 'https://web.shop.test',
+				cookieDomain: 'shop.test',
+			}),
+		});
+
+		expect(bare._type).toBe(ResourceType.ApiGatewayV2);
+		expect(await settle(bare.provides().trustedOrigins)).toBe('');
+		expect(await settle(bare.provides().cookieDomain)).toBe('');
+
+		const link = called.getSSTLink().properties as Record<string, unknown>;
+		expect(link.url).toBe(called.url);
+		expect(await settle(link.trustedOrigins)).toBe('https://web.shop.test');
+		expect(await settle(link.cookieDomain)).toBe('shop.test');
+	});
+
+	it('a database and the nodes derived from it each link only their own URL', () => {
+		const cluster = new Database(stack, 'Orders', { vpc, schema: 'app' });
+		const reader = new DatabaseReader('OrdersReader', cluster);
+		const tenant = new DatabaseSchema('AuthDb', cluster, 'authdb');
+
+		expect(cluster._type).toBe(ResourceType.SSTPostgres);
+		expect(reader._type).toBe(ResourceType.SSTPostgres);
+		expect(tenant._type).toBe(ResourceType.SSTPostgres);
+		expect(cluster.getSSTLink().properties).toMatchObject({
+			url: cluster.provides().url,
+		});
+		// Least privilege: the reader's link is its URL and not the writer's.
+		expect(reader.getSSTLink()).toEqual({
+			properties: { url: reader.provides().url },
+		});
+		expect(tenant.getSSTLink()).toEqual({
+			properties: { url: tenant.provides().url },
+		});
+	});
+
+	it('a cache given its URL links it as-is', () => {
+		const cache = new Cache(stack, 'Sessions', {
+			backend: 'db',
+			url: 'postgres://db.test/app',
+		});
+
+		expect(cache._type).toBe(ResourceType.Cache);
+		expect(cache.getSSTLink()).toEqual({
+			properties: { url: 'postgres://db.test/app' },
+		});
+	});
+});
+
+describe('Cache on Upstash', () => {
+	/** `sst add upstash` installs this global; here, a recording stand-in. */
+	const created: { name: string; args: Record<string, unknown> }[] = [];
+	class RedisDatabase {
+		readonly endpoint = 'eu1-cache.upstash.io';
+		readonly restToken = 'tok/en+1';
+		constructor(name: string, args: Record<string, unknown>) {
+			created.push({ name, args });
+		}
+	}
+
+	it('creates a TLS database and puts its token in the URL', () => {
+		(globalThis as Record<string, unknown>).upstash = { RedisDatabase };
+		try {
+			const defaulted = new Cache(stack, 'Sessions', { backend: 'upstash' });
+			new Cache(stack, 'Rates', { backend: 'upstash', region: 'us-east-1' });
+
+			expect(created).toEqual([
+				{
+					name: 'SessionsCache',
+					args: { databaseName: 'Sessions', region: 'eu-west-1', tls: true },
+				},
+				{
+					name: 'RatesCache',
+					args: { databaseName: 'Rates', region: 'us-east-1', tls: true },
+				},
+			]);
+			// The address and the credential that opens it are one fact.
+			expect(defaulted.provides().url).toBe(
+				`https://:${encodeURIComponent('tok/en+1')}@eu1-cache.upstash.io`,
+			);
+		} finally {
+			delete (globalThis as Record<string, unknown>).upstash;
+		}
+	});
+});
+
+describe('Cache provisioning refusals', () => {
+	it('asks for the Upstash provider when it is not installed', () => {
+		expect(() => new Cache(stack, 'Sessions', { backend: 'upstash' })).toThrow(
+			CacheNeedsProvider,
+		);
+	});
+
+	it('asks for a VPC before creating an ElastiCache', () => {
+		expect(
+			() => new Cache(stack, 'Sessions', { backend: 'elasticache' }),
+		).toThrow(CacheNeedsVpc);
+	});
+});

package/src/sst/aws/Api.ts

@@ -153,7 +153,7 @@ export class Api<
 		// Fail the whole synth if any route is misconfigured, with one actionable
 		// message per offending route.
 		if (failures.length) {
-			throw new Error(failures.map((f) => f.message).join('\n\n'));
+			throw new RoutesMissingEnvironment(id, failures);
 		}
 	}
 
@@ -307,3 +307,18 @@ export interface ApiProps<TAuthorizers extends Record<string, unknown> = {}>
 	 * may override it. */
 	runtime?: sst.aws.FunctionArgs['runtime'];
 }
+
+/**
+ * Routes that read variables nothing links or whitelists. Collected across
+ * every route so one synth reports all of them, each with its own suggestions,
+ * rather than stopping at the first.
+ */
+export class RoutesMissingEnvironment extends Error {
+	constructor(
+		readonly api: string,
+		readonly failures: readonly EnvValidationError[],
+	) {
+		super(failures.map((f) => f.message).join('\n\n'));
+		this.name = 'RoutesMissingEnvironment';
+	}
+}

package/src/sst/aws/Cache.ts

@@ -206,7 +206,7 @@ export function withCacheTable(url: string, table: string): string {
 }
 
 /**
- * `services.cache: 'db'` in an app that declares more than one database.
+ * A `'db'` cache in an app that declares more than one database.
  *
  * Picking one would put the cache somewhere nobody chose, and the symptom —
  * entries that are never found — appears long after the deploy reported
@@ -222,7 +222,7 @@ export class CacheIsAmbiguous extends Error {
 			`'${id}' is a cache backed by the database, and this app declares ` +
 				`${databases.length}: ${databases.join(', ')}. Declare the cache from ` +
 				`its database — e.g. ${databases[0]}.cache('${id}') — rather than ` +
-				`with services.cache.`,
+				`as a bare new Cache().`,
 		);
 		this.name = 'CacheIsAmbiguous';
 	}
@@ -232,8 +232,8 @@ export class CacheNeedsDatabase extends Error {
 	constructor(readonly id: string) {
 		super(
 			`'${id}' is a cache backed by the database, and this app declares no ` +
-				`database for it to live in. Declare one, or set services.cache to ` +
-				`'upstash' or 'elasticache'.`,
+				`database for it to live in. Declare one, or declare the cache from ` +
+				`the database it belongs to.`,
 		);
 		this.name = 'CacheNeedsDatabase';
 	}

package/src/sst/aws/Database.ts

@@ -84,7 +84,21 @@ export class Database<
 	 * produces a database that looks empty.
 	 */
 	provides(): Record<string, $util.Input<string>> {
-		return { url: this.urlFor({}) };
+		return { url: this.urlFor(this.role ? { as: this.role } : {}) };
+	}
+
+	/**
+	 * The runtime role this database's own handlers connect as.
+	 *
+	 * Set by the adapter once the bootstrap has registered the role — the
+	 * cluster exists before any role does, so it cannot be a constructor
+	 * argument. Until it is set (and under `roles: false`, where it never is),
+	 * the URL is the master's.
+	 */
+	private role: { user: string; password: $util.Input<string> } | undefined;
+
+	connectAs(role: { user: string; password: $util.Input<string> }): void {
+		this.role = role;
 	}
 
 	/**

package/src/sst/fromManifest.ts

@@ -39,7 +39,7 @@ import {
 	withCacheTable,
 } from './aws/Cache';
 import { Credential } from './aws/Credential';
-import { Database, DatabaseNeedsVpc } from './aws/Database';
+import { Database, DatabaseNeedsVpc, type DatabaseProps } from './aws/Database';
 import { DatabaseBootstrap } from './aws/DatabaseBootstrap';
 import { DatabaseReader, DatabaseSchema } from './aws/DerivedDatabase';
 import { Email, EmailNeedsSender } from './aws/Email';
@@ -98,8 +98,8 @@ export interface ProvisionContext {
 	/**
 	 * Where a declared cache lives, and who delivers mail.
 	 *
-	 * Deployment choices rather than declarations, for the same reason
-	 * `services.events` is: the same application code caches into any of them and
+	 * Deployment choices rather than declarations, for the same reason the
+	 * event broker is: the same application code caches into any of them and
 	 * sends through any of them. They reach the provisioner here because it is
 	 * the only place that knows both the choice and the manifest.
 	 */
@@ -220,7 +220,11 @@ const PROVISIONERS: Partial<Record<DeclarationKind, Provisioner>> = {
 			// rather than whatever Aurora defaults to that month. Local ran 18
 			// while this ran 17.7, and neither was written down anywhere.
 			version: String(d.version ?? DEFAULT_POSTGRES_VERSION),
-			...(props as unknown as sst.aws.PostgresArgs),
+			// `DatabaseProps`, not `sst.aws.PostgresArgs`: the database needs the
+			// `Vpc` component itself (its bootstrap function runs in the same VPC
+			// and needs the security groups too), where RDS would accept bare
+			// subnet ids. TS 7 checks the spread; 6 let the wider type through.
+			...(props as unknown as Omit<DatabaseProps, 'schema'>),
 		});
 
 		// A database needs its own roles, not just its tenants'. Registering only
@@ -232,13 +236,20 @@ const PROVISIONERS: Partial<Record<DeclarationKind, Provisioner>> = {
 			const bootstrap = bootstrapFor(cluster, d.id, context);
 			const runtime = roleNameFor(d, context);
 
-			bootstrap?.add({
+			const credentials = bootstrap?.add({
 				id: d.id,
 				schema: d.schema,
 				runtime,
 				owner: ownerRole(runtime),
 				...(hasReader(d.id, context) ? { reader: readerRole(runtime) } : {}),
 			});
+
+			// Registering the role was half of it: its handlers have to connect as
+			// it too, or the DDL creates a role nothing uses and every handler
+			// linked to the database still holds the master.
+			if (credentials) {
+				cluster.connectAs({ user: runtime, password: credentials.runtime });
+			}
 		}
 
 		return cluster;

package/dist/index-B5CZ1xVf.d.cts

@@ -1,64 +0,0 @@
-//#region src/utils/index.d.ts
-declare function getLocalIpAddress(): string | null;
-declare function environmentCase(name: string): string;
-declare enum ResourceType {
-  ApiGatewayV2 = "sst.aws.ApiGatewayV2",
-  Postgres = "sst.aws.Postgres",
-  Function = "sst.aws.Function",
-  ObjectStorage = "sst.aws.Bucket",
-  Vpc = "sst.aws.Vpc",
-  Secret = "sst.sst.Secret",
-  SSTSecret = "sst:sst:Secret",
-  SSTFunction = "sst:sst:Function",
-  SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
-  SSTPostgres = "sst:aws:Postgres",
-  SSTObjectStorage = "sst:aws:Bucket",
-  SnsTopic = "sst:aws:SnsTopic",
-}
-declare function buildResourceEnv(record: Record<string, Resource | string>): Record<string, string>;
-/**
- * SST links a resource under one of two spellings — `sst.aws.Bucket` when it
- * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —
- * and `processors` has always handled both. Only the dotted half was admitted
- * here, so the colon half could not be passed to `buildResourceEnv` without a
- * cast, and `SnsTopic` was missing from `Resource` altogether despite being the
- * only thing that produces `*_ARN`.
- */
-type ApiGatewayV2 = {
-  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;
-  url: string;
-};
-type Postgres = {
-  database: string;
-  host: string;
-  password: string;
-  port: number;
-  type: ResourceType.Postgres | ResourceType.SSTPostgres;
-  username: string;
-};
-type Function = {
-  name: string;
-  type: ResourceType.Function | ResourceType.SSTFunction;
-};
-type Bucket = {
-  name: string;
-  type: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;
-};
-type SnsTopic = {
-  arn: string;
-  type: ResourceType.SnsTopic;
-};
-type Vpc = {
-  bastion: string;
-  type: ResourceType.Vpc;
-};
-type Secret = {
-  type: ResourceType.Secret | ResourceType.SSTSecret;
-  value: string;
-};
-type Resource = ApiGatewayV2 | Postgres | Function | Bucket | SnsTopic | Vpc | Secret;
-type ResourceProcessor<K extends Resource> = (name: string, value: K) => Record<string, string | number>;
-//# sourceMappingURL=index.d.ts.map
-//#endregion
-export { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress };
-//# sourceMappingURL=index-B5CZ1xVf.d.cts.map

package/dist/index-B5CZ1xVf.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-B5CZ1xVf.d.cts","names":[],"sources":["../src/utils/index.ts"],"sourcesContent":[],"mappings":";iBAGgB,iBAAA,CAAA;AAAA,iBAcA,eAAA,CAdiB,IAAA,EAAA,MAAA,CAAA,EAAA,MAAA;AAcjB,aAOJ,YAAA;EAAA,YAAA,GAAY,sBAAA;EA+DR,QAAA,GAAA,kBAAgB;EAAA,QAAA,GAAA,kBAAA;EAAA,aACR,GAAA,gBAAA;EAAQ,GAAvB,GAAA,aAAA;EAAM,MACZ,GAAA,gBAAA;EAAM,SAAA,GAAA,gBAAA;EA0BG,WAAA,GAAA,kBAAY;EAAA,eAAA,GAAA,sBAAA;EAAA,WACjB,GAAA,kBAAa;EAAY,gBAAgB,GAAA,gBAAA;EAAe,QAAA,GAAA,kBAAA;AAI/D;AAAoB,iBAjCJ,gBAAA,CAiCI,MAAA,EAhCX,MAgCW,CAAA,MAAA,EAhCI,QAgCJ,GAAA,MAAA,CAAA,CAAA,EA/BjB,MA+BiB,CAAA,MAAA,EAAA,MAAA,CAAA;;;AAKmC;AAIvD;;;;AAEuD;AAG3C,KAnBA,YAAA,GAmBM;EAAA,IAAA,EAlBX,YAAA,CAAa,YAkBF,GAlBiB,YAAA,CAAa,eAkB9B;EAAA,GAEX,EAAA,MAAA;CAA0B;AAAgC,KAhBrD,QAAA,GAgBqD;EAGrD,QAAA,EAAA,MAAQ;EAKR,IAAA,EAAG,MAAA;EAKH,QAAA,EAAM,MAAA;EAAA,IAAA,EAAA,MAAA;EAAA,IACX,EAzBA,YAAA,CAAa,QAyBA,GAzBW,YAAA,CAAa,WAyBxB;EAAM,QAAG,EAAA,MAAa;AAAS,CAAA;AAIvC,KAzBA,QAAA,GAyBQ;EAAA,IAAA,EAAA,MAAA;EAAA,IACjB,EAxBI,YAAA,CAAa,QAwBjB,GAxB4B,YAAA,CAAa,WAwBzC;CAAY;AAEZ,KAvBS,MAAA,GAuBT;EAAQ,IACR,EAAA,MAAA;EAAM,IACN,EAvBI,YAAA,CAAa,aAuBjB,GAvBiC,YAAA,CAAa,gBAuB9C;CAAQ;AAER,KAtBS,QAAA,GAsBT;EAAM,GAAA,EAAA,MAAA;EAEG,IAAA,EAtBL,YAAA,CAAa,QAsBS;CAAA;AAAW,KAnB5B,GAAA,GAmB4B;EAAQ,OAExC,EAAA,MAAA;EAAC,IACJ,EApBE,YAAA,CAAa,GAoBf;AAAM,CAAA;KAjBC,MAAA;QACL,YAAA,CAAa,SAAS,YAAA,CAAa;;;KAI9B,QAAA,GACT,eACA,WACA,WACA,SACA,WACA,MACA;KAES,4BAA4B,kCAEhC,MACH"}

package/dist/index-DhHRjduZ.d.mts

@@ -1,64 +0,0 @@
-//#region src/utils/index.d.ts
-declare function getLocalIpAddress(): string | null;
-declare function environmentCase(name: string): string;
-declare enum ResourceType {
-  ApiGatewayV2 = "sst.aws.ApiGatewayV2",
-  Postgres = "sst.aws.Postgres",
-  Function = "sst.aws.Function",
-  ObjectStorage = "sst.aws.Bucket",
-  Vpc = "sst.aws.Vpc",
-  Secret = "sst.sst.Secret",
-  SSTSecret = "sst:sst:Secret",
-  SSTFunction = "sst:sst:Function",
-  SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
-  SSTPostgres = "sst:aws:Postgres",
-  SSTObjectStorage = "sst:aws:Bucket",
-  SnsTopic = "sst:aws:SnsTopic",
-}
-declare function buildResourceEnv(record: Record<string, Resource | string>): Record<string, string>;
-/**
- * SST links a resource under one of two spellings — `sst.aws.Bucket` when it
- * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —
- * and `processors` has always handled both. Only the dotted half was admitted
- * here, so the colon half could not be passed to `buildResourceEnv` without a
- * cast, and `SnsTopic` was missing from `Resource` altogether despite being the
- * only thing that produces `*_ARN`.
- */
-type ApiGatewayV2 = {
-  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;
-  url: string;
-};
-type Postgres = {
-  database: string;
-  host: string;
-  password: string;
-  port: number;
-  type: ResourceType.Postgres | ResourceType.SSTPostgres;
-  username: string;
-};
-type Function = {
-  name: string;
-  type: ResourceType.Function | ResourceType.SSTFunction;
-};
-type Bucket = {
-  name: string;
-  type: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;
-};
-type SnsTopic = {
-  arn: string;
-  type: ResourceType.SnsTopic;
-};
-type Vpc = {
-  bastion: string;
-  type: ResourceType.Vpc;
-};
-type Secret = {
-  type: ResourceType.Secret | ResourceType.SSTSecret;
-  value: string;
-};
-type Resource = ApiGatewayV2 | Postgres | Function | Bucket | SnsTopic | Vpc | Secret;
-type ResourceProcessor<K extends Resource> = (name: string, value: K) => Record<string, string | number>;
-//# sourceMappingURL=index.d.ts.map
-//#endregion
-export { ApiGatewayV2, Bucket, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, Vpc, buildResourceEnv, environmentCase, getLocalIpAddress };
-//# sourceMappingURL=index-DhHRjduZ.d.mts.map

package/dist/index-DhHRjduZ.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-DhHRjduZ.d.mts","names":[],"sources":["../src/utils/index.ts"],"sourcesContent":[],"mappings":";iBAGgB,iBAAA,CAAA;AAAA,iBAcA,eAAA,CAdiB,IAAA,EAAA,MAAA,CAAA,EAAA,MAAA;AAcjB,aAOJ,YAAA;EAAA,YAAA,GAAY,sBAAA;EA+DR,QAAA,GAAA,kBAAgB;EAAA,QAAA,GAAA,kBAAA;EAAA,aACR,GAAA,gBAAA;EAAQ,GAAvB,GAAA,aAAA;EAAM,MACZ,GAAA,gBAAA;EAAM,SAAA,GAAA,gBAAA;EA0BG,WAAA,GAAA,kBAAY;EAAA,eAAA,GAAA,sBAAA;EAAA,WACjB,GAAA,kBAAa;EAAY,gBAAgB,GAAA,gBAAA;EAAe,QAAA,GAAA,kBAAA;AAI/D;AAAoB,iBAjCJ,gBAAA,CAiCI,MAAA,EAhCX,MAgCW,CAAA,MAAA,EAhCI,QAgCJ,GAAA,MAAA,CAAA,CAAA,EA/BjB,MA+BiB,CAAA,MAAA,EAAA,MAAA,CAAA;;;AAKmC;AAIvD;;;;AAEuD;AAG3C,KAnBA,YAAA,GAmBM;EAAA,IAAA,EAlBX,YAAA,CAAa,YAkBF,GAlBiB,YAAA,CAAa,eAkB9B;EAAA,GAEX,EAAA,MAAA;CAA0B;AAAgC,KAhBrD,QAAA,GAgBqD;EAGrD,QAAA,EAAA,MAAQ;EAKR,IAAA,EAAG,MAAA;EAKH,QAAA,EAAM,MAAA;EAAA,IAAA,EAAA,MAAA;EAAA,IACX,EAzBA,YAAA,CAAa,QAyBA,GAzBW,YAAA,CAAa,WAyBxB;EAAM,QAAG,EAAA,MAAa;AAAS,CAAA;AAIvC,KAzBA,QAAA,GAyBQ;EAAA,IAAA,EAAA,MAAA;EAAA,IACjB,EAxBI,YAAA,CAAa,QAwBjB,GAxB4B,YAAA,CAAa,WAwBzC;CAAY;AAEZ,KAvBS,MAAA,GAuBT;EAAQ,IACR,EAAA,MAAA;EAAM,IACN,EAvBI,YAAA,CAAa,aAuBjB,GAvBiC,YAAA,CAAa,gBAuB9C;CAAQ;AAER,KAtBS,QAAA,GAsBT;EAAM,GAAA,EAAA,MAAA;EAEG,IAAA,EAtBL,YAAA,CAAa,QAsBS;CAAA;AAAW,KAnB5B,GAAA,GAmB4B;EAAQ,OAExC,EAAA,MAAA;EAAC,IACJ,EApBE,YAAA,CAAa,GAoBf;AAAM,CAAA;KAjBC,MAAA;QACL,YAAA,CAAa,SAAS,YAAA,CAAa;;;KAI9B,QAAA,GACT,eACA,WACA,WACA,SACA,WACA,MACA;KAES,4BAA4B,kCAEhC,MACH"}

package/dist/utils-B1a2UuEO.cjs

@@ -1,129 +0,0 @@
-//#region rolldown:runtime
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-
-//#endregion
-const node_os = __toESM(require("node:os"));
-const lodash_snakecase = __toESM(require("lodash.snakecase"));
-
-//#region src/utils/index.ts
-function getLocalIpAddress() {
-	const networkInterfaces = node_os.default.networkInterfaces();
-	for (const interfaceName in networkInterfaces) {
-		const addresses = networkInterfaces[interfaceName] || [];
-		for (const addressInfo of addresses) if (addressInfo.family === "IPv4" && !addressInfo.internal) return addressInfo.address;
-	}
-	return null;
-}
-function environmentCase(name) {
-	return (0, lodash_snakecase.default)(name).toUpperCase().replace(/_\d+/g, (r) => {
-		return r.replace("_", "");
-	});
-}
-let ResourceType = /* @__PURE__ */ function(ResourceType$1) {
-	ResourceType$1["ApiGatewayV2"] = "sst.aws.ApiGatewayV2";
-	ResourceType$1["Postgres"] = "sst.aws.Postgres";
-	ResourceType$1["Function"] = "sst.aws.Function";
-	ResourceType$1["ObjectStorage"] = "sst.aws.Bucket";
-	ResourceType$1["Vpc"] = "sst.aws.Vpc";
-	ResourceType$1["Secret"] = "sst.sst.Secret";
-	ResourceType$1["SSTSecret"] = "sst:sst:Secret";
-	ResourceType$1["SSTFunction"] = "sst:sst:Function";
-	ResourceType$1["SSTApiGatewayV2"] = "sst:aws:ApiGatewayV2";
-	ResourceType$1["SSTPostgres"] = "sst:aws:Postgres";
-	ResourceType$1["SSTObjectStorage"] = "sst:aws:Bucket";
-	ResourceType$1["SnsTopic"] = "sst:aws:SnsTopic";
-	return ResourceType$1;
-}({});
-const secret = (name, value) => ({ [environmentCase(name)]: value.value });
-const postgres = (key, value) => {
-	const prefix = `${environmentCase(key)}`;
-	return {
-		[`${prefix}_NAME`]: value.database,
-		[`${prefix}_HOST`]: value.host,
-		[`${prefix}_PASSWORD`]: value.password,
-		[`${prefix}_PORT`]: value.port,
-		[`${prefix}_USERNAME`]: value.username
-	};
-};
-const bucket = (name, value) => {
-	const prefix = `${environmentCase(name)}`;
-	return { [`${prefix}_NAME`]: value.name };
-};
-const topic = (name, value) => {
-	const prefix = `${environmentCase(name)}`;
-	const key = `${prefix}_ARN`;
-	return { [key]: value.arn };
-};
-const noop = (_name, _value) => ({});
-const processors = {
-	[ResourceType.ApiGatewayV2]: noop,
-	[ResourceType.Function]: noop,
-	[ResourceType.Vpc]: noop,
-	[ResourceType.Secret]: secret,
-	[ResourceType.Postgres]: postgres,
-	[ResourceType.ObjectStorage]: bucket,
-	[ResourceType.SSTSecret]: secret,
-	[ResourceType.SSTObjectStorage]: bucket,
-	[ResourceType.SSTFunction]: noop,
-	[ResourceType.SSTPostgres]: postgres,
-	[ResourceType.SSTApiGatewayV2]: noop,
-	[ResourceType.SnsTopic]: topic
-};
-function buildResourceEnv(record) {
-	const env = {};
-	for (const [k, value] of Object.entries(record)) {
-		if (typeof value === "string") {
-			env[environmentCase(k)] = value;
-			continue;
-		}
-		const processor = processors[value.type];
-		if (processor) Object.assign(env, processor(k, value));
-	}
-	return env;
-}
-
-//#endregion
-Object.defineProperty(exports, 'ResourceType', {
-  enumerable: true,
-  get: function () {
-    return ResourceType;
-  }
-});
-Object.defineProperty(exports, 'buildResourceEnv', {
-  enumerable: true,
-  get: function () {
-    return buildResourceEnv;
-  }
-});
-Object.defineProperty(exports, 'environmentCase', {
-  enumerable: true,
-  get: function () {
-    return environmentCase;
-  }
-});
-Object.defineProperty(exports, 'getLocalIpAddress', {
-  enumerable: true,
-  get: function () {
-    return getLocalIpAddress;
-  }
-});
-//# sourceMappingURL=utils-B1a2UuEO.cjs.map

package/dist/utils-B1a2UuEO.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils-B1a2UuEO.cjs","names":["name: string","value: Secret","key: string","value: Postgres","value: Bucket","value: SnsTopic","_name: string","_value: any","processors: Record<ResourceType, ResourceProcessor<any>>","record: Record<string, Resource | string>","env: Record<string, string>"],"sources":["../src/utils/index.ts"],"sourcesContent":["import os from 'node:os';\nimport snakecase from 'lodash.snakecase';\n\nexport function getLocalIpAddress() {\n\tconst networkInterfaces = os.networkInterfaces();\n\tfor (const interfaceName in networkInterfaces) {\n\t\tconst addresses = networkInterfaces[interfaceName] || [];\n\t\tfor (const addressInfo of addresses) {\n\t\t\t// Look for an IPv4 address that is not internal (loopback)\n\t\t\tif (addressInfo.family === 'IPv4' && !addressInfo.internal) {\n\t\t\t\treturn addressInfo.address;\n\t\t\t}\n\t\t}\n\t}\n\treturn null; // No suitable IP address found\n}\n\nexport function environmentCase(name: string) {\n\treturn snakecase(name)\n\t\t.toUpperCase()\n\t\t.replace(/_\\d+/g, (r) => {\n\t\t\treturn r.replace('_', '');\n\t\t});\n}\nexport enum ResourceType {\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tObjectStorage = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTObjectStorage = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n}\n\nconst secret = (name: string, value: Secret) => ({\n\t[environmentCase(name)]: value.value,\n});\nconst postgres = (key: string, value: Postgres) => {\n\tconst prefix = `${environmentCase(key)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.database,\n\t\t[`${prefix}_HOST`]: value.host,\n\t\t[`${prefix}_PASSWORD`]: value.password,\n\t\t[`${prefix}_PORT`]: value.port,\n\t\t[`${prefix}_USERNAME`]: value.username,\n\t};\n};\n\nconst bucket = (name: string, value: Bucket) => {\n\tconst prefix = `${environmentCase(name)}`;\n\treturn {\n\t\t[`${prefix}_NAME`]: value.name,\n\t};\n};\n\nconst topic = (name: string, value: SnsTopic) => {\n\tconst prefix = `${environmentCase(name)}`;\n\tconst key = `${prefix}_ARN`;\n\n\treturn {\n\t\t[key]: value.arn,\n\t};\n};\n\nconst noop = (_name: string, _value: any) => ({});\n\nconst processors: Record<ResourceType, ResourceProcessor<any>> = {\n\t[ResourceType.ApiGatewayV2]: noop,\n\t[ResourceType.Function]: noop,\n\t[ResourceType.Vpc]: noop,\n\t[ResourceType.Secret]: secret,\n\t[ResourceType.Postgres]: postgres,\n\t[ResourceType.ObjectStorage]: bucket,\n\n\t[ResourceType.SSTSecret]: secret,\n\t[ResourceType.SSTObjectStorage]: bucket,\n\t[ResourceType.SSTFunction]: noop,\n\t[ResourceType.SSTPostgres]: postgres,\n\t[ResourceType.SSTApiGatewayV2]: noop,\n\t[ResourceType.SnsTopic]: topic,\n};\n\nexport function buildResourceEnv(\n\trecord: Record<string, Resource | string>,\n): Record<string, string> {\n\tconst env: Record<string, string> = {};\n\tfor (const [k, value] of Object.entries(record)) {\n\t\tif (typeof value === 'string') {\n\t\t\tenv[environmentCase(k)] = value;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst processor = processors[value.type];\n\t\tif (processor) {\n\t\t\tObject.assign(env, processor(k, value));\n\t\t} else {\n\t\t}\n\t}\n\n\treturn env;\n}\n\n/**\n * SST links a resource under one of two spellings — `sst.aws.Bucket` when it\n * comes from the state file, `sst:aws:Bucket` when it comes from the runtime —\n * and `processors` has always handled both. Only the dotted half was admitted\n * here, so the colon half could not be passed to `buildResourceEnv` without a\n * cast, and `SnsTopic` was missing from `Resource` altogether despite being the\n * only thing that produces `*_ARN`.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\nexport type Postgres = {\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tusername: string;\n};\n\nexport type Function = {\n\tname: string;\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n};\n\nexport type Bucket = {\n\tname: string;\n\ttype: ResourceType.ObjectStorage | ResourceType.SSTObjectStorage;\n};\n\nexport type SnsTopic = {\n\tarn: string;\n\ttype: ResourceType.SnsTopic;\n};\n\nexport type Vpc = {\n\tbastion: string;\n\ttype: ResourceType.Vpc;\n};\n\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\nexport type Resource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| SnsTopic\n\t| Vpc\n\t| Secret;\n\nexport type ResourceProcessor<K extends Resource> = (\n\tname: string,\n\tvalue: K,\n) => Record<string, string | number>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,SAAgB,oBAAoB;CACnC,MAAM,oBAAoB,gBAAG,mBAAmB;AAChD,MAAK,MAAM,iBAAiB,mBAAmB;EAC9C,MAAM,YAAY,kBAAkB,kBAAkB,CAAE;AACxD,OAAK,MAAM,eAAe,UAEzB,KAAI,YAAY,WAAW,WAAW,YAAY,SACjD,QAAO,YAAY;CAGrB;AACD,QAAO;AACP;AAED,SAAgB,gBAAgBA,MAAc;AAC7C,QAAO,8BAAU,KAAK,CACpB,aAAa,CACb,QAAQ,SAAS,CAAC,MAAM;AACxB,SAAO,EAAE,QAAQ,KAAK,GAAG;CACzB,EAAC;AACH;AACD,IAAY,wDAAL;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AACA;AAED,MAAM,SAAS,CAACA,MAAcC,WAAmB,GAC/C,gBAAgB,KAAK,GAAG,MAAM,MAC/B;AACD,MAAM,WAAW,CAACC,KAAaC,UAAoB;CAClD,MAAM,UAAU,EAAE,gBAAgB,IAAI,CAAC;AACvC,QAAO;IACJ,EAAE,OAAO,SAAS,MAAM;IACxB,EAAE,OAAO,SAAS,MAAM;IACxB,EAAE,OAAO,aAAa,MAAM;IAC5B,EAAE,OAAO,SAAS,MAAM;IACxB,EAAE,OAAO,aAAa,MAAM;CAC9B;AACD;AAED,MAAM,SAAS,CAACH,MAAcI,UAAkB;CAC/C,MAAM,UAAU,EAAE,gBAAgB,KAAK,CAAC;AACxC,QAAO,IACJ,EAAE,OAAO,SAAS,MAAM,KAC1B;AACD;AAED,MAAM,QAAQ,CAACJ,MAAcK,UAAoB;CAChD,MAAM,UAAU,EAAE,gBAAgB,KAAK,CAAC;CACxC,MAAM,OAAO,EAAE,OAAO;AAEtB,QAAO,GACL,MAAM,MAAM,IACb;AACD;AAED,MAAM,OAAO,CAACC,OAAeC,YAAiB,CAAE;AAEhD,MAAMC,aAA2D;EAC/D,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,gBAAgB;EAE7B,aAAa,YAAY;EACzB,aAAa,mBAAmB;EAChC,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;AACzB;AAED,SAAgB,iBACfC,QACyB;CACzB,MAAMC,MAA8B,CAAE;AACtC,MAAK,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,QAAQ,OAAO,EAAE;AAChD,aAAW,UAAU,UAAU;AAC9B,OAAI,gBAAgB,EAAE,IAAI;AAC1B;EACA;EAED,MAAM,YAAY,WAAW,MAAM;AACnC,MAAI,UACH,QAAO,OAAO,KAAK,UAAU,GAAG,MAAM,CAAC;CAGxC;AAED,QAAO;AACP"}