@geekmidas/constructs 10.0.0-alpha.11 → 10.0.0-alpha.111

package/dist/site.d.cts

@@ -1,15 +1,14 @@
-import { Declarable } from "./construct-interface-D9d4Gm4p.cjs";
+import { i as Declarable } from "./construct-interface-B1AfqRl4.cjs";
+import { n as Telemetry } from "./telemetry-B48RLjyk.cjs";
 import { ConstructName, Declaration, Dependency, SiteDeclaration } from "@geekmidas/manifest";
-
 //#region src/site.d.ts
-
 /**
  * Where a site's source lives, and the little else a layout can differ by.
  *
  * Only `path` is required: `new StaticSite('Web', { path: 'apps/web' })` is a
  * complete site.
  */
-interface StaticSiteConfig {
+export interface StaticSiteConfig {
   /**
    * Where its source lives, relative to the workspace root — `'apps/web'`.
    *
@@ -17,6 +16,12 @@ interface StaticSiteConfig {
    * inferred from the id, which made a site's home whatever was on disk.
    */
   path: string;
+  /**
+   * The label it answers on under a stage's domain — `api` for
+   * `api.myapp.com`, from `domains` — and under the project locally,
+   * `api.myapp.localhost`. Absent, its id kebab-cased.
+   */
+  subdomain?: string;
   /**
    * The port it answers on locally.
    *
@@ -52,8 +57,15 @@ interface StaticSiteConfig {
    * else.
    */
   variant?: SiteDeclaration['variant'];
+  /**
+   * What the site emits — the `Telemetry` construct. An edge to the node and
+   * nothing more for now: a site is handed none of its server keys, and the
+   * browser half (propagation from the generated client, then a browser SDK
+   * exporting through the API) builds on this edge.
+   */
+  telemetry?: Telemetry;
 }
-declare class StaticSite<TName extends string = string> implements Declarable<TName> {
+export declare class StaticSite<TName extends string = string> implements Declarable<TName> {
   private readonly config;
   /**
    * Internal: how `.dependsOn()` carries edges into the copy it returns.
@@ -88,7 +100,5 @@ declare class StaticSite<TName extends string = string> implements Declarable<TN
   dependsOn(constructs: readonly Declarable[]): StaticSite<TName>;
   declare(): Declaration[];
 }
-//# sourceMappingURL=site.d.ts.map
 //#endregion
-export { StaticSite, StaticSiteConfig };
 //# sourceMappingURL=site.d.cts.map

package/dist/site.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"site.d.cts","names":[],"sources":["../src/site.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;UAwCiB,gBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAuCN;;cAGE,qDACD,WAAW;;;;;;;;;eAET;;;;kBAIR,cAAc,gBACO;;;;;;;0BAOe;;;;;;;;;;;;iCAiBV,eAAe,WAAW;aAO9C"}
+{"version":3,"file":"site.d.cts","names":[],"sources":["../src/site.ts"],"mappings":";;;;;;;;;;iBAyCiB;;;;;;;EAOhB;;;;;;EAMA;;;;;;;EAOA;;;;;;;EAOA;IAAW;IAAiB;;;;;;;;;;EAS5B;;;;;;;;;EASA,UAAU;;;;;;;EAOV,YAAY;;qBAGA,WAAW,0CACZ,WAAW;mBAOJ;;;;;;;mBAOA;WAZT,IAAI;WACJ;IAAQ;;EAEjB,YACC,IAAI,cAAc,QACD,QAAQ,kBAOR;;;;;;;EAAA,wBAAuB;;;;;;;;;;;;EAiBzC,UAAU,qBAAqB,eAAe,WAAW;EAOzD,WAAW"}

package/dist/site.d.mts

@@ -1,15 +1,14 @@
-import { Declarable } from "./construct-interface-g5GM5pwR.mjs";
+import { i as Declarable } from "./construct-interface-ZvYQbivO.mjs";
+import { n as Telemetry } from "./telemetry-BEoBn6GO.mjs";
 import { ConstructName, Declaration, Dependency, SiteDeclaration } from "@geekmidas/manifest";
-
 //#region src/site.d.ts
-
 /**
  * Where a site's source lives, and the little else a layout can differ by.
  *
  * Only `path` is required: `new StaticSite('Web', { path: 'apps/web' })` is a
  * complete site.
  */
-interface StaticSiteConfig {
+export interface StaticSiteConfig {
   /**
    * Where its source lives, relative to the workspace root — `'apps/web'`.
    *
@@ -17,6 +16,12 @@ interface StaticSiteConfig {
    * inferred from the id, which made a site's home whatever was on disk.
    */
   path: string;
+  /**
+   * The label it answers on under a stage's domain — `api` for
+   * `api.myapp.com`, from `domains` — and under the project locally,
+   * `api.myapp.localhost`. Absent, its id kebab-cased.
+   */
+  subdomain?: string;
   /**
    * The port it answers on locally.
    *
@@ -52,8 +57,15 @@ interface StaticSiteConfig {
    * else.
    */
   variant?: SiteDeclaration['variant'];
+  /**
+   * What the site emits — the `Telemetry` construct. An edge to the node and
+   * nothing more for now: a site is handed none of its server keys, and the
+   * browser half (propagation from the generated client, then a browser SDK
+   * exporting through the API) builds on this edge.
+   */
+  telemetry?: Telemetry;
 }
-declare class StaticSite<TName extends string = string> implements Declarable<TName> {
+export declare class StaticSite<TName extends string = string> implements Declarable<TName> {
   private readonly config;
   /**
    * Internal: how `.dependsOn()` carries edges into the copy it returns.
@@ -88,7 +100,5 @@ declare class StaticSite<TName extends string = string> implements Declarable<TN
   dependsOn(constructs: readonly Declarable[]): StaticSite<TName>;
   declare(): Declaration[];
 }
-//# sourceMappingURL=site.d.ts.map
 //#endregion
-export { StaticSite, StaticSiteConfig };
 //# sourceMappingURL=site.d.mts.map

package/dist/site.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"site.d.mts","names":[],"sources":["../src/site.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;UAwCiB,gBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAuCN;;cAGE,qDACD,WAAW;;;;;;;;;eAET;;;;kBAIR,cAAc,gBACO;;;;;;;0BAOe;;;;;;;;;;;;iCAiBV,eAAe,WAAW;aAO9C"}
+{"version":3,"file":"site.d.mts","names":[],"sources":["../src/site.ts"],"mappings":";;;;;;;;;;iBAyCiB;;;;;;;EAOhB;;;;;;EAMA;;;;;;;EAOA;;;;;;;EAOA;IAAW;IAAiB;;;;;;;;;;EAS5B;;;;;;;;;EASA,UAAU;;;;;;;EAOV,YAAY;;qBAGA,WAAW,0CACZ,WAAW;mBAOJ;;;;;;;mBAOA;WAZT,IAAI;WACJ;IAAQ;;EAEjB,YACC,IAAI,cAAc,QACD,QAAQ,kBAOR;;;;;;;EAAA,wBAAuB;;;;;;;;;;;;EAiBzC,UAAU,qBAAqB,eAAe,WAAW;EAOzD,WAAW"}

package/dist/site.mjs

@@ -1,8 +1,32 @@
-import { edgeTo } from "./construct-interface-Z4CpS8tK.mjs";
+import { edgeTo } from "./construct-interface.mjs";
 import { canonicalId, provideKey } from "@geekmidas/manifest";
-
 //#region src/site.ts
+/**
+* `StaticSite` — a frontend, declared like anything else.
+*
+* The point is not that a site needs provisioning; it is that a site is the
+* *consumer* whose edges make four hand-maintained lists derivable. Declaring it
+* is what turns "which origins does the API allow" from something a person keeps
+* in step into something the graph already knows.
+*
+* ```ts
+* export const console = new StaticSite('Console', { path: 'apps/console' })
+*   .dependsOn([api, auth]);
+* ```
+*
+* It has no `.service`. A site is not a process that registers clients — it is
+* built, and the values it needs are inlined or fetched by its own framework —
+* so the edge is {@link Declarable} rather than {@link Consumable}, and the
+* asymmetry is the honest one: a site consumes addresses, not connections.
+*
+* Only the static variant ships. SSR deploy shapes are unstable and each one is
+* its own maintenance, so they follow rather than arrive together. A mobile app
+* is not a site — it is reached by a scheme, not a URL — and is its own
+* construct: see `MobileApp`.
+*/
 var StaticSite = class StaticSite {
+	config;
+	dependencies;
 	id;
 	keys;
 	constructor(id, config, dependencies = []) {
@@ -30,6 +54,7 @@ var StaticSite = class StaticSite {
 			kind: "site",
 			id: this.id,
 			variant: this.config.variant ?? "static",
+			...this.config.subdomain ? { subdomain: this.config.subdomain } : {},
 			app: {
 				path: this.config.path,
 				...this.config.port ? { port: this.config.port } : {},
@@ -37,11 +62,12 @@ var StaticSite = class StaticSite {
 			},
 			...this.config.root ? { root: true } : {},
 			dependencies: this.dependencies,
+			...this.config.telemetry ? { telemetry: this.config.telemetry.id } : {},
 			provides: [this.keys.url]
 		}];
 	}
 };
-
 //#endregion
 export { StaticSite };
+
 //# sourceMappingURL=site.mjs.map

package/dist/site.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"site.mjs","names":["id: ConstructName<TName>","config: StaticSiteConfig","dependencies: readonly Dependency[]","constructs: readonly Declarable[]"],"sources":["../src/site.ts"],"sourcesContent":["/**\n * `StaticSite` — a frontend, declared like anything else.\n *\n * The point is not that a site needs provisioning; it is that a site is the\n * *consumer* whose edges make four hand-maintained lists derivable. Declaring it\n * is what turns \"which origins does the API allow\" from something a person keeps\n * in step into something the graph already knows.\n *\n * ```ts\n * export const console = new StaticSite('Console', { path: 'apps/console' })\n *   .dependsOn([api, auth]);\n * ```\n *\n * It has no `.service`. A site is not a process that registers clients — it is\n * built, and the values it needs are inlined or fetched by its own framework —\n * so the edge is {@link Declarable} rather than {@link Consumable}, and the\n * asymmetry is the honest one: a site consumes addresses, not connections.\n *\n * Only the static variant ships. SSR deploy shapes are unstable and each one is\n * its own maintenance, so they follow rather than arrive together; Expo and\n * mobile are out of scope entirely, because an app store is not infrastructure\n * and there is no URL to hand anyone.\n */\n\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\ttype Dependency,\n\tprovideKey,\n\ttype SiteDeclaration,\n} from '@geekmidas/manifest';\nimport { type Declarable, edgeTo } from './construct-interface';\n\n/**\n * Where a site's source lives, and the little else a layout can differ by.\n *\n * Only `path` is required: `new StaticSite('Web', { path: 'apps/web' })` is a\n * complete site.\n */\nexport interface StaticSiteConfig {\n\t/**\n\t * Where its source lives, relative to the workspace root — `'apps/web'`.\n\t *\n\t * Required, the same field `RestApi` and `BetterAuth` take. It was\n\t * inferred from the id, which made a site's home whatever was on disk.\n\t */\n\tpath: string;\n\t/**\n\t * The port it answers on locally.\n\t *\n\t * Normally omitted: ports are assigned in a stable order, so adding a site\n\t * does not renumber the ones already running.\n\t */\n\tport?: number;\n\t/**\n\t * Modules to import when sniffing which env vars this site reads.\n\t *\n\t * A frontend's values are inlined at build time, so the build has to know\n\t * which ones it reads before it reads them.\n\t */\n\tconfig?: { client?: string; server?: string };\n\t/**\n\t * Whether the base domain points at this site.\n\t *\n\t * A project with one site needs this no more than a project with one\n\t * database needs to say which database. It matters when there are several\n\t * and none is called `web`: the base domain then belongs to whichever site\n\t * says so, rather than to whichever file the glob happened to reach first.\n\t */\n\troot?: boolean;\n\t/**\n\t * Which framework builds it.\n\t *\n\t * It selects how values are delivered — `VITE_`, `NEXT_PUBLIC_`, a fetched\n\t * `config.json` — and never which values there are. One neutral name from the\n\t * construct, one serialisation per framework, the same rule as everywhere\n\t * else.\n\t */\n\tvariant?: SiteDeclaration['variant'];\n}\n\nexport class StaticSite<TName extends string = string>\n\timplements Declarable<TName>\n{\n\treadonly id: TName;\n\treadonly keys: { url: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly config: StaticSiteConfig,\n\t\t/**\n\t\t * Internal: how `.dependsOn()` carries edges into the copy it returns.\n\t\t * Written as a parameter rather than a mutable field so the builder can\n\t\t * stay immutable without a clone method, the same shape\n\t\t * `KyselyDatabase` uses for its derived forms.\n\t\t */\n\t\tprivate readonly dependencies: readonly Dependency[] = [],\n\t) {\n\t\tthis.id = canonicalId(id as string) as TName;\n\t\tthis.keys = { url: provideKey(this.id, 'url') };\n\t}\n\n\t/**\n\t * What this site calls.\n\t *\n\t * Immutable, like every other builder here: it returns a new site rather than\n\t * mutating this one, so a module that exports both a base and a variant of it\n\t * cannot have the second silently change the first.\n\t *\n\t * Takes {@link Declarable} rather than {@link Consumable} because a site's\n\t * edge is a build-time link and not a service injection — requiring a client\n\t * would exclude exactly the surfaces a frontend actually depends on.\n\t */\n\tdependsOn(constructs: readonly Declarable[]): StaticSite<TName> {\n\t\treturn new StaticSite<TName>(this.id as ConstructName<TName>, this.config, [\n\t\t\t...this.dependencies,\n\t\t\t...constructs.map(edgeTo),\n\t\t]);\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'site',\n\t\t\t\tid: this.id,\n\t\t\t\tvariant: this.config.variant ?? 'static',\n\t\t\t\tapp: {\n\t\t\t\t\tpath: this.config.path,\n\t\t\t\t\t...(this.config.port ? { port: this.config.port } : {}),\n\t\t\t\t\t...(this.config.config ? { config: this.config.config } : {}),\n\t\t\t\t},\n\t\t\t\t...(this.config.root ? { root: true } : {}),\n\t\t\t\tdependencies: this.dependencies,\n\t\t\t\tprovides: [this.keys.url],\n\t\t\t},\n\t\t];\n\t}\n}\n"],"mappings":";;;;AAkFA,IAAa,aAAb,MAAa,WAEb;CACC,AAAS;CACT,AAAS;CAET,YACCA,IACiBC,QAOAC,eAAsC,CAAE,GACxD;EARgB;EAOA;AAEjB,OAAK,KAAK,YAAY,GAAa;AACnC,OAAK,OAAO,EAAE,KAAK,WAAW,KAAK,IAAI,MAAM,CAAE;CAC/C;;;;;;;;;;;;CAaD,UAAUC,YAAsD;AAC/D,SAAO,IAAI,WAAkB,KAAK,IAA4B,KAAK,QAAQ,CAC1E,GAAG,KAAK,cACR,GAAG,WAAW,IAAI,OAAO,AACzB;CACD;CAED,UAAyB;AACxB,SAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,SAAS,KAAK,OAAO,WAAW;GAChC,KAAK;IACJ,MAAM,KAAK,OAAO;IAClB,GAAI,KAAK,OAAO,OAAO,EAAE,MAAM,KAAK,OAAO,KAAM,IAAG,CAAE;IACtD,GAAI,KAAK,OAAO,SAAS,EAAE,QAAQ,KAAK,OAAO,OAAQ,IAAG,CAAE;GAC5D;GACD,GAAI,KAAK,OAAO,OAAO,EAAE,MAAM,KAAM,IAAG,CAAE;GAC1C,cAAc,KAAK;GACnB,UAAU,CAAC,KAAK,KAAK,GAAI;EACzB,CACD;CACD;AACD"}
+{"version":3,"file":"site.mjs","names":[],"sources":["../src/site.ts"],"sourcesContent":["/**\n * `StaticSite` — a frontend, declared like anything else.\n *\n * The point is not that a site needs provisioning; it is that a site is the\n * *consumer* whose edges make four hand-maintained lists derivable. Declaring it\n * is what turns \"which origins does the API allow\" from something a person keeps\n * in step into something the graph already knows.\n *\n * ```ts\n * export const console = new StaticSite('Console', { path: 'apps/console' })\n *   .dependsOn([api, auth]);\n * ```\n *\n * It has no `.service`. A site is not a process that registers clients — it is\n * built, and the values it needs are inlined or fetched by its own framework —\n * so the edge is {@link Declarable} rather than {@link Consumable}, and the\n * asymmetry is the honest one: a site consumes addresses, not connections.\n *\n * Only the static variant ships. SSR deploy shapes are unstable and each one is\n * its own maintenance, so they follow rather than arrive together. A mobile app\n * is not a site — it is reached by a scheme, not a URL — and is its own\n * construct: see `MobileApp`.\n */\n\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\ttype Dependency,\n\tprovideKey,\n\ttype SiteDeclaration,\n} from '@geekmidas/manifest';\nimport { type Declarable, edgeTo } from './construct-interface';\nimport type { Telemetry } from './telemetry';\n\n/**\n * Where a site's source lives, and the little else a layout can differ by.\n *\n * Only `path` is required: `new StaticSite('Web', { path: 'apps/web' })` is a\n * complete site.\n */\nexport interface StaticSiteConfig {\n\t/**\n\t * Where its source lives, relative to the workspace root — `'apps/web'`.\n\t *\n\t * Required, the same field `RestApi` and `BetterAuth` take. It was\n\t * inferred from the id, which made a site's home whatever was on disk.\n\t */\n\tpath: string;\n\t/**\n\t * The label it answers on under a stage's domain — `api` for\n\t * `api.myapp.com`, from `domains` — and under the project locally,\n\t * `api.myapp.localhost`. Absent, its id kebab-cased.\n\t */\n\tsubdomain?: string;\n\t/**\n\t * The port it answers on locally.\n\t *\n\t * Normally omitted: ports are assigned in a stable order, so adding a site\n\t * does not renumber the ones already running.\n\t */\n\tport?: number;\n\t/**\n\t * Modules to import when sniffing which env vars this site reads.\n\t *\n\t * A frontend's values are inlined at build time, so the build has to know\n\t * which ones it reads before it reads them.\n\t */\n\tconfig?: { client?: string; server?: string };\n\t/**\n\t * Whether the base domain points at this site.\n\t *\n\t * A project with one site needs this no more than a project with one\n\t * database needs to say which database. It matters when there are several\n\t * and none is called `web`: the base domain then belongs to whichever site\n\t * says so, rather than to whichever file the glob happened to reach first.\n\t */\n\troot?: boolean;\n\t/**\n\t * Which framework builds it.\n\t *\n\t * It selects how values are delivered — `VITE_`, `NEXT_PUBLIC_`, a fetched\n\t * `config.json` — and never which values there are. One neutral name from the\n\t * construct, one serialisation per framework, the same rule as everywhere\n\t * else.\n\t */\n\tvariant?: SiteDeclaration['variant'];\n\t/**\n\t * What the site emits — the `Telemetry` construct. An edge to the node and\n\t * nothing more for now: a site is handed none of its server keys, and the\n\t * browser half (propagation from the generated client, then a browser SDK\n\t * exporting through the API) builds on this edge.\n\t */\n\ttelemetry?: Telemetry;\n}\n\nexport class StaticSite<TName extends string = string>\n\timplements Declarable<TName>\n{\n\treadonly id: TName;\n\treadonly keys: { url: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly config: StaticSiteConfig,\n\t\t/**\n\t\t * Internal: how `.dependsOn()` carries edges into the copy it returns.\n\t\t * Written as a parameter rather than a mutable field so the builder can\n\t\t * stay immutable without a clone method, the same shape\n\t\t * `KyselyDatabase` uses for its derived forms.\n\t\t */\n\t\tprivate readonly dependencies: readonly Dependency[] = [],\n\t) {\n\t\tthis.id = canonicalId(id as string) as TName;\n\t\tthis.keys = { url: provideKey(this.id, 'url') };\n\t}\n\n\t/**\n\t * What this site calls.\n\t *\n\t * Immutable, like every other builder here: it returns a new site rather than\n\t * mutating this one, so a module that exports both a base and a variant of it\n\t * cannot have the second silently change the first.\n\t *\n\t * Takes {@link Declarable} rather than {@link Consumable} because a site's\n\t * edge is a build-time link and not a service injection — requiring a client\n\t * would exclude exactly the surfaces a frontend actually depends on.\n\t */\n\tdependsOn(constructs: readonly Declarable[]): StaticSite<TName> {\n\t\treturn new StaticSite<TName>(this.id as ConstructName<TName>, this.config, [\n\t\t\t...this.dependencies,\n\t\t\t...constructs.map(edgeTo),\n\t\t]);\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'site',\n\t\t\t\tid: this.id,\n\t\t\t\tvariant: this.config.variant ?? 'static',\n\t\t\t\t...(this.config.subdomain ? { subdomain: this.config.subdomain } : {}),\n\t\t\t\tapp: {\n\t\t\t\t\tpath: this.config.path,\n\t\t\t\t\t...(this.config.port ? { port: this.config.port } : {}),\n\t\t\t\t\t...(this.config.config ? { config: this.config.config } : {}),\n\t\t\t\t},\n\t\t\t\t...(this.config.root ? { root: true } : {}),\n\t\t\t\tdependencies: this.dependencies,\n\t\t\t\t...(this.config.telemetry\n\t\t\t\t\t? { telemetry: this.config.telemetry.id }\n\t\t\t\t\t: {}),\n\t\t\t\tprovides: [this.keys.url],\n\t\t\t},\n\t\t];\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAgGA,IAAa,aAAb,MAAa,WAEb;CAMmB;CAOA;CAZlB;CACA;CAEA,YACC,IACA,QAOA,eAAuD,CAAC,GACvD;EARgB,KAAA,SAAA;EAOA,KAAA,eAAA;EAEjB,KAAK,KAAK,YAAY,EAAY;EAClC,KAAK,OAAO,EAAE,KAAK,WAAW,KAAK,IAAI,KAAK,EAAE;CAC/C;;;;;;;;;;;;CAaA,UAAU,YAAsD;EAC/D,OAAO,IAAI,WAAkB,KAAK,IAA4B,KAAK,QAAQ,CAC1E,GAAG,KAAK,cACR,GAAG,WAAW,IAAI,MAAM,CACzB,CAAC;CACF;CAEA,UAAyB;EACxB,OAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,SAAS,KAAK,OAAO,WAAW;GAChC,GAAI,KAAK,OAAO,YAAY,EAAE,WAAW,KAAK,OAAO,UAAU,IAAI,CAAC;GACpE,KAAK;IACJ,MAAM,KAAK,OAAO;IAClB,GAAI,KAAK,OAAO,OAAO,EAAE,MAAM,KAAK,OAAO,KAAK,IAAI,CAAC;IACrD,GAAI,KAAK,OAAO,SAAS,EAAE,QAAQ,KAAK,OAAO,OAAO,IAAI,CAAC;GAC5D;GACA,GAAI,KAAK,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;GACzC,cAAc,KAAK;GACnB,GAAI,KAAK,OAAO,YACb,EAAE,WAAW,KAAK,OAAO,UAAU,GAAG,IACtC,CAAC;GACJ,UAAU,CAAC,KAAK,KAAK,GAAG;EACzB,CACD;CACD;AACD"}

package/dist/stages-BSCF19o2.d.cts

@@ -0,0 +1,56 @@
+//#region src/stages.d.ts
+/**
+ * The project's stage names, as types.
+ *
+ * `gkm.config.ts` declares the stages — `stages: { local: 'dev', deployed:
+ * ['staging', 'prod'] }` — but constructs and application code cannot import
+ * the config, so a stage name written anywhere else was a bare `string`: a
+ * typo'd key in an `ExternalApi`'s `url` map was silently never read, and a
+ * seed's `stage === 'prodution'` branch silently never ran.
+ *
+ * `gkm dev`, `gkm build` and `gkm test --prepare` write `.gkm/stages.d.ts`,
+ * which fills this interface in from the loaded workspace:
+ *
+ * ```ts
+ * declare module '@geekmidas/constructs' {
+ *   interface Stages { local: 'dev'; deployed: 'staging' | 'prod' }
+ * }
+ * ```
+ *
+ * Until that file exists — a fresh clone, before the first run — the interface
+ * is empty and every stage type below is `string`, so nothing fails to compile
+ * for want of a generated file.
+ */
+interface Stages {}
+/** What `Stages` says under `key`, or `string` while it says nothing. */
+type Declared<TKey extends string> = Stages extends { [K in TKey]: infer TStage extends string; } ? TStage : string;
+/** The stage `gkm dev`, `exec`, `setup` and `test` run as: `stages.local`. */
+type LocalStage = Declared<'local'>;
+/** A stage `gkm deploy --stage` accepts: one of `stages.deployed`. */
+type DeployedStage = Declared<'deployed'>;
+/** What `gkm test` runs as. The CLI's own; no project stage may take it. */
+type TestStage = 'test';
+/** Any stage the project's code can find itself running as. */
+type AnyStage = LocalStage | TestStage | DeployedStage;
+/**
+ * What a seed is handed beside its database.
+ *
+ * Seeds run on every stage, production included, so a seed that should write
+ * something only somewhere — a demo tenant on the local stage, never on a
+ * deployed one — decides by the stage it is given:
+ *
+ * ```ts
+ * import type { SeedContext } from '@geekmidas/constructs';
+ *
+ * export async function seed(db: Kysely<Database>, { stage }: SeedContext) {
+ *   if (stage === 'dev') await insertDemoTenant(db);
+ * }
+ * ```
+ */
+interface SeedContext {
+  /** The stage being seeded: the local one, `test`, or a deployed one. */
+  stage: AnyStage;
+}
+//#endregion
+export { Stages as a, SeedContext as i, DeployedStage as n, TestStage as o, LocalStage as r, AnyStage as t };
+//# sourceMappingURL=stages-BSCF19o2.d.cts.map

package/dist/stages-BSCF19o2.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages-BSCF19o2.d.cts","names":[],"sources":["../src/stages.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;UAuBiB;;KAGZ,SAAS,uBAAuB,kBACnC,KAAK,aAAa,2BAEjB;;KAIS,aAAa;;KAGb,gBAAgB;;KAGhB;;KAGA,WAAW,aAAa,YAAY;;;;;;;;;;;;;;;;UAiB/B;;EAEhB,OAAO"}

package/dist/stages-BSCF19o2.d.mts

@@ -0,0 +1,56 @@
+//#region src/stages.d.ts
+/**
+ * The project's stage names, as types.
+ *
+ * `gkm.config.ts` declares the stages — `stages: { local: 'dev', deployed:
+ * ['staging', 'prod'] }` — but constructs and application code cannot import
+ * the config, so a stage name written anywhere else was a bare `string`: a
+ * typo'd key in an `ExternalApi`'s `url` map was silently never read, and a
+ * seed's `stage === 'prodution'` branch silently never ran.
+ *
+ * `gkm dev`, `gkm build` and `gkm test --prepare` write `.gkm/stages.d.ts`,
+ * which fills this interface in from the loaded workspace:
+ *
+ * ```ts
+ * declare module '@geekmidas/constructs' {
+ *   interface Stages { local: 'dev'; deployed: 'staging' | 'prod' }
+ * }
+ * ```
+ *
+ * Until that file exists — a fresh clone, before the first run — the interface
+ * is empty and every stage type below is `string`, so nothing fails to compile
+ * for want of a generated file.
+ */
+interface Stages {}
+/** What `Stages` says under `key`, or `string` while it says nothing. */
+type Declared<TKey extends string> = Stages extends { [K in TKey]: infer TStage extends string; } ? TStage : string;
+/** The stage `gkm dev`, `exec`, `setup` and `test` run as: `stages.local`. */
+type LocalStage = Declared<'local'>;
+/** A stage `gkm deploy --stage` accepts: one of `stages.deployed`. */
+type DeployedStage = Declared<'deployed'>;
+/** What `gkm test` runs as. The CLI's own; no project stage may take it. */
+type TestStage = 'test';
+/** Any stage the project's code can find itself running as. */
+type AnyStage = LocalStage | TestStage | DeployedStage;
+/**
+ * What a seed is handed beside its database.
+ *
+ * Seeds run on every stage, production included, so a seed that should write
+ * something only somewhere — a demo tenant on the local stage, never on a
+ * deployed one — decides by the stage it is given:
+ *
+ * ```ts
+ * import type { SeedContext } from '@geekmidas/constructs';
+ *
+ * export async function seed(db: Kysely<Database>, { stage }: SeedContext) {
+ *   if (stage === 'dev') await insertDemoTenant(db);
+ * }
+ * ```
+ */
+interface SeedContext {
+  /** The stage being seeded: the local one, `test`, or a deployed one. */
+  stage: AnyStage;
+}
+//#endregion
+export { Stages as a, SeedContext as i, DeployedStage as n, TestStage as o, LocalStage as r, AnyStage as t };
+//# sourceMappingURL=stages-BSCF19o2.d.mts.map

package/dist/stages-BSCF19o2.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages-BSCF19o2.d.mts","names":[],"sources":["../src/stages.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;UAuBiB;;KAGZ,SAAS,uBAAuB,kBACnC,KAAK,aAAa,2BAEjB;;KAIS,aAAa;;KAGb,gBAAgB;;KAGhB;;KAGA,WAAW,aAAa,YAAY;;;;;;;;;;;;;;;;UAiB/B;;EAEhB,OAAO"}

package/dist/subscribers/index.cjs

@@ -1,7 +1,119 @@
-require('../construct-interface-BfjcOD_E.cjs');
-require('../Construct-CyS3RpTL.cjs');
-require('../clone-Dy0cR2SZ.cjs');
-const require_SubscriberBuilder = require('../SubscriberBuilder-4OPehf2R.cjs');
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_SubscriberBuilder = require("../SubscriberBuilder-M2EAgQhC.cjs");
+const require_runSubscriber = require("../runSubscriber-D8nLXIv1.cjs");
+let _geekmidas_events = require("@geekmidas/events");
+let _geekmidas_services = require("@geekmidas/services");
+let _geekmidas_errors = require("@geekmidas/errors");
+let _geekmidas_events_sns = require("@geekmidas/events/sns");
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is read as the Lambda event SNS would have invoked a
+* function with, and run through the same parsing, services and handler as the
+* Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+* server serving this route has no reason to install `@middy/core`.
+*/
+var SnsPushSubscriberAdaptor = class {
+	envParser;
+	subscriber;
+	options;
+	constructor(envParser, subscriber, options) {
+		this.envParser = envParser;
+		this.subscriber = subscriber;
+		this.options = options;
+	}
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await (0, _geekmidas_events_sns.verifySnsMessage)(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				err: error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await (0, _geekmidas_events_sns.confirmSnsSubscription)(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.notify(message);
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
+	}
+	async notify(message) {
+		const requestId = message.MessageId;
+		const logger = this.subscriber.logger.child({ requestId });
+		await (0, _geekmidas_services.runWithRequestContext)({
+			logger,
+			requestId,
+			startTime: Date.now(),
+			operation: `subscriber ${this.subscriber.topicName ?? "sns"}`
+		}, () => (0, _geekmidas_events.consumeTraced)({
+			system: "aws_sns",
+			destination: this.subscriber.topicName ?? message.TopicArn.split(":").pop() ?? message.TopicArn,
+			type: message.MessageAttributes?.type?.Value,
+			messageId: message.MessageId
+		}, (0, _geekmidas_events.carrierFromAttributes)(message.MessageAttributes), () => this.run(message, logger)));
+	}
+	async run(message, logger) {
+		try {
+			const { services, db } = await require_runSubscriber.subscriberContext(this.subscriber, this.envParser);
+			const events = require_runSubscriber.subscribedEvents(this.subscriber, (0, _geekmidas_events_sns.toSnsEvent)(message), logger);
+			await require_runSubscriber.runSubscriber(this.subscriber, {
+				events,
+				services,
+				logger,
+				db
+			});
+		} catch (error) {
+			logger.error(error, "Error processing subscriber");
+			throw (0, _geekmidas_errors.wrapError)(error);
+		}
+	}
+};
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
+//#endregion
+exports.SnsPushSubscriberAdaptor = SnsPushSubscriberAdaptor;
 exports.Subscriber = require_SubscriberBuilder.Subscriber;
-exports.SubscriberBuilder = require_SubscriberBuilder.SubscriberBuilder;
+exports.SubscriberBuilder = require_SubscriberBuilder.SubscriberBuilder;
+
+//# sourceMappingURL=index.cjs.map

package/dist/subscribers/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["verifySnsMessage","confirmSnsSubscription","runWithRequestContext","consumeTraced","carrierFromAttributes","subscriberContext","subscribedEvents","toSnsEvent","runSubscriber","wrapError"],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"sourcesContent":["import type { EnvironmentParser } from '@geekmidas/envkit';\nimport { wrapError } from '@geekmidas/errors';\nimport { carrierFromAttributes, consumeTraced } from '@geekmidas/events';\nimport {\n\tconfirmSnsSubscription,\n\ttype SnsHttpMessage,\n\ttoSnsEvent,\n\tverifySnsMessage,\n} from '@geekmidas/events/sns';\nimport { runWithRequestContext } from '@geekmidas/services';\nimport {\n\trunSubscriber,\n\tsubscribedEvents,\n\tsubscriberContext,\n} from './runSubscriber';\nimport type { Subscriber } from './Subscriber';\n\nexport interface SnsPushOptions {\n\t/** The topic this subscriber is subscribed to. Anything else is refused. */\n\ttopicArn: string;\n\t/**\n\t * Verify each message's signature. Off only against an emulator, which\n\t * signs nothing — decided by the connection string's endpoint, never by\n\t * anything the request says about itself.\n\t */\n\tverify: boolean;\n\t/**\n\t * The emulator's address, as this server was configured with it. An\n\t * emulator names itself in `SubscribeURL` by the port it listens on inside\n\t * its container, which is not the port published to the host — so against\n\t * one, the confirmation is sent here instead. From configuration, never\n\t * from the request.\n\t */\n\temulatorEndpoint?: string;\n}\n\n/** What to answer SNS with. A non-2xx tells SNS to retry. */\nexport interface SnsPushResponse {\n\tstatus: 200 | 400 | 403 | 500;\n\tbody: { status: string; error?: string };\n}\n\n/**\n * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a\n * poller.\n *\n * The notification is read as the Lambda event SNS would have invoked a\n * function with, and run through the same parsing, services and handler as the\n * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a\n * server serving this route has no reason to install `@middy/core`.\n */\nexport class SnsPushSubscriberAdaptor {\n\tconstructor(\n\t\tprivate readonly envParser: EnvironmentParser<{}>,\n\t\treadonly subscriber: Subscriber<any, any, any, any, any, any, any>,\n\t\tprivate readonly options: SnsPushOptions,\n\t) {}\n\n\tasync handle(body: unknown): Promise<SnsPushResponse> {\n\t\tconst message = body as SnsHttpMessage;\n\t\tif (typeof message?.Type !== 'string' || !message.TopicArn) {\n\t\t\treturn refuse(400, 'not an SNS message');\n\t\t}\n\t\t// Checked before the signature: a genuine message for another topic is\n\t\t// still not this subscriber's to confirm or to handle.\n\t\tif (message.TopicArn !== this.options.topicArn) {\n\t\t\treturn refuse(403, `not subscribed to ${message.TopicArn}`);\n\t\t}\n\n\t\tif (this.options.verify) {\n\t\t\ttry {\n\t\t\t\tawait verifySnsMessage(message);\n\t\t\t} catch (error) {\n\t\t\t\tthis.subscriber.logger.warn(\n\t\t\t\t\t{ err: error, topicArn: message.TopicArn },\n\t\t\t\t\t'Refused an SNS message that did not verify',\n\t\t\t\t);\n\t\t\t\treturn refuse(403, (error as Error).name);\n\t\t\t}\n\t\t}\n\n\t\tswitch (message.Type) {\n\t\t\tcase 'SubscriptionConfirmation':\n\t\t\t\tawait confirmSnsSubscription(\n\t\t\t\t\tthis.options.emulatorEndpoint && message.SubscribeURL\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t...message,\n\t\t\t\t\t\t\t\tSubscribeURL: throughEndpoint(\n\t\t\t\t\t\t\t\t\tmessage.SubscribeURL,\n\t\t\t\t\t\t\t\t\tthis.options.emulatorEndpoint,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: message,\n\t\t\t\t);\n\t\t\t\tthis.subscriber.logger.info(\n\t\t\t\t\t{ topicArn: message.TopicArn },\n\t\t\t\t\t'Confirmed SNS subscription',\n\t\t\t\t);\n\t\t\t\treturn { status: 200, body: { status: 'confirmed' } };\n\t\t\tcase 'Notification':\n\t\t\t\ttry {\n\t\t\t\t\tawait this.notify(message);\n\t\t\t\t\treturn { status: 200, body: { status: 'ok' } };\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Already logged. A 500 makes SNS retry, which is the point of\n\t\t\t\t\t// answering at all.\n\t\t\t\t\treturn refuse(500, (error as Error).name);\n\t\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn { status: 200, body: { status: 'ignored' } };\n\t\t}\n\t}\n\n\tprivate async notify(message: SnsHttpMessage): Promise<void> {\n\t\tconst requestId = message.MessageId;\n\t\tconst logger = this.subscriber.logger.child({ requestId });\n\n\t\tawait runWithRequestContext(\n\t\t\t{\n\t\t\t\tlogger,\n\t\t\t\trequestId,\n\t\t\t\tstartTime: Date.now(),\n\t\t\t\toperation: `subscriber ${this.subscriber.topicName ?? 'sns'}`,\n\t\t\t},\n\t\t\t// A CONSUMER span, child of the publisher's: SNS hands the trace\n\t\t\t// context on in the message attributes it was published with.\n\t\t\t() =>\n\t\t\t\tconsumeTraced(\n\t\t\t\t\t{\n\t\t\t\t\t\tsystem: 'aws_sns',\n\t\t\t\t\t\tdestination:\n\t\t\t\t\t\t\tthis.subscriber.topicName ??\n\t\t\t\t\t\t\tmessage.TopicArn.split(':').pop() ??\n\t\t\t\t\t\t\tmessage.TopicArn,\n\t\t\t\t\t\ttype: message.MessageAttributes?.type?.Value,\n\t\t\t\t\t\tmessageId: message.MessageId,\n\t\t\t\t\t},\n\t\t\t\t\tcarrierFromAttributes(message.MessageAttributes),\n\t\t\t\t\t() => this.run(message, logger),\n\t\t\t\t),\n\t\t);\n\t}\n\n\tprivate async run(\n\t\tmessage: SnsHttpMessage,\n\t\tlogger: Subscriber<any, any, any, any, any, any, any>['logger'],\n\t): Promise<void> {\n\t\ttry {\n\t\t\tconst { services, db } = await subscriberContext(\n\t\t\t\tthis.subscriber,\n\t\t\t\tthis.envParser,\n\t\t\t);\n\t\t\tconst events = subscribedEvents(\n\t\t\t\tthis.subscriber,\n\t\t\t\ttoSnsEvent(message),\n\t\t\t\tlogger,\n\t\t\t);\n\t\t\tawait runSubscriber(this.subscriber, {\n\t\t\t\tevents,\n\t\t\t\tservices,\n\t\t\t\tlogger,\n\t\t\t\tdb,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tlogger.error(error as object, 'Error processing subscriber');\n\t\t\tthrow wrapError(error);\n\t\t}\n\t}\n}\n\n/** `url`, sent to `endpoint`'s origin instead of its own. */\nfunction throughEndpoint(url: string, endpoint: string): string {\n\tconst target = new URL(url);\n\tconst origin = new URL(endpoint);\n\ttarget.protocol = origin.protocol;\n\ttarget.host = origin.host;\n\treturn target.toString();\n}\n\nfunction refuse(\n\tstatus: SnsPushResponse['status'],\n\terror: string,\n): SnsPushResponse {\n\treturn { status, body: { status: 'refused', error } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAmDA,IAAa,2BAAb,MAAsC;CAEnB;CACR;CACQ;CAHlB,YACC,WACA,YACA,SACC;EAHgB,KAAA,YAAA;EACR,KAAA,aAAA;EACQ,KAAA,UAAA;CACf;CAEH,MAAM,OAAO,MAAyC;EACrD,MAAM,UAAU;EAChB,IAAI,OAAO,SAAS,SAAS,YAAY,CAAC,QAAQ,UACjD,OAAO,OAAO,KAAK,oBAAoB;EAIxC,IAAI,QAAQ,aAAa,KAAK,QAAQ,UACrC,OAAO,OAAO,KAAK,qBAAqB,QAAQ,UAAU;EAG3D,IAAI,KAAK,QAAQ,QAChB,IAAI;GACH,OAAA,GAAMA,sBAAAA,iBAAAA,CAAiB,OAAO;EAC/B,SAAS,OAAO;GACf,KAAK,WAAW,OAAO,KACtB;IAAE,KAAK;IAAO,UAAU,QAAQ;GAAS,GACzC,4CACD;GACA,OAAO,OAAO,KAAM,MAAgB,IAAI;EACzC;EAGD,QAAQ,QAAQ,MAAhB;GACC,KAAK;IACJ,OAAA,GAAMC,sBAAAA,uBAAAA,CACL,KAAK,QAAQ,oBAAoB,QAAQ,eACtC;KACA,GAAG;KACH,cAAc,gBACb,QAAQ,cACR,KAAK,QAAQ,gBACd;IACD,IACC,OACJ;IACA,KAAK,WAAW,OAAO,KACtB,EAAE,UAAU,QAAQ,SAAS,GAC7B,4BACD;IACA,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,YAAY;IAAE;GACrD,KAAK,gBACJ,IAAI;IACH,MAAM,KAAK,OAAO,OAAO;IACzB,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,KAAK;IAAE;GAC9C,SAAS,OAAO;IAGf,OAAO,OAAO,KAAM,MAAgB,IAAI;GACzC;GACD,SACC,OAAO;IAAE,QAAQ;IAAK,MAAM,EAAE,QAAQ,UAAU;GAAE;EACpD;CACD;CAEA,MAAc,OAAO,SAAwC;EAC5D,MAAM,YAAY,QAAQ;EAC1B,MAAM,SAAS,KAAK,WAAW,OAAO,MAAM,EAAE,UAAU,CAAC;EAEzD,OAAA,GAAMC,oBAAAA,sBAAAA,CACL;GACC;GACA;GACA,WAAW,KAAK,IAAI;GACpB,WAAW,cAAc,KAAK,WAAW,aAAa;EACvD,UAAA,GAICC,kBAAAA,cAAAA,CACC;GACC,QAAQ;GACR,aACC,KAAK,WAAW,aAChB,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC,IAAI,KAChC,QAAQ;GACT,MAAM,QAAQ,mBAAmB,MAAM;GACvC,WAAW,QAAQ;EACpB,IAAA,GACAC,kBAAAA,sBAAAA,CAAsB,QAAQ,iBAAiB,SACzC,KAAK,IAAI,SAAS,MAAM,CAC/B,CACF;CACD;CAEA,MAAc,IACb,SACA,QACgB;EAChB,IAAI;GACH,MAAM,EAAE,UAAU,OAAO,MAAMC,sBAAAA,kBAC9B,KAAK,YACL,KAAK,SACN;GACA,MAAM,SAASC,sBAAAA,iBACd,KAAK,aAAA,GACLC,sBAAAA,WAAAA,CAAW,OAAO,GAClB,MACD;GACA,MAAMC,sBAAAA,cAAc,KAAK,YAAY;IACpC;IACA;IACA;IACA;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,MAAM,OAAiB,6BAA6B;GAC3D,OAAA,GAAMC,kBAAAA,UAAAA,CAAU,KAAK;EACtB;CACD;AACD;;AAGA,SAAS,gBAAgB,KAAa,UAA0B;CAC/D,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,MAAM,SAAS,IAAI,IAAI,QAAQ;CAC/B,OAAO,WAAW,OAAO;CACzB,OAAO,OAAO,OAAO;CACrB,OAAO,OAAO,SAAS;AACxB;AAEA,SAAS,OACR,QACA,OACkB;CAClB,OAAO;EAAE;EAAQ,MAAM;GAAE,QAAQ;GAAW;EAAM;CAAE;AACrD"}

package/dist/subscribers/index.d.cts

@@ -1,6 +1,51 @@
-import "../Construct-C0ijr2qp.cjs";
-import "../construct-interface-D9d4Gm4p.cjs";
-import { Subscriber } from "../Subscriber-2mEi0ImH.cjs";
-import "../Topic-19QeHBIR.cjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-waNhzjSM.cjs";
-export { Subscriber, SubscriberBuilder };
+import { t as Subscriber } from "../Subscriber-Bpp02cGr.cjs";
+import { t as SubscriberBuilder } from "../SubscriberBuilder-g3fAVWgs.cjs";
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
+  /**
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
+   */
+  verify: boolean;
+  /**
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
+   */
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+  private run;
+}
+//#endregion
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
+//# sourceMappingURL=index.d.cts.map

package/dist/subscribers/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAiBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB;UA8BA"}

package/dist/subscribers/index.d.mts

@@ -1,6 +1,51 @@
-import "../Construct-Ct8nalEi.mjs";
-import "../construct-interface-g5GM5pwR.mjs";
-import { Subscriber } from "../Subscriber-xTJ9ayPN.mjs";
-import "../Topic-DuFeqkBh.mjs";
-import { SubscriberBuilder } from "../SubscriberBuilder-Dptmo-1A.mjs";
-export { Subscriber, SubscriberBuilder };
+import { t as Subscriber } from "../Subscriber-CtN9R48-.mjs";
+import { t as SubscriberBuilder } from "../SubscriberBuilder-4DWe9feX.mjs";
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
+  /**
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
+   */
+  verify: boolean;
+  /**
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
+   */
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+  private run;
+}
+//#endregion
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
+//# sourceMappingURL=index.d.mts.map

package/dist/subscribers/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAiBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB;UA8BA"}