@geekmidas/constructs 10.0.0-alpha.9 → 10.0.0-alpha.90

package/dist/database/kysely.d.mts

@@ -1,152 +1,2 @@
-import { Construct } from "../construct-interface-g5GM5pwR.mjs";
-import { Cache } from "../cache-BrRz3fEB.mjs";
-import { ConstructName, Declaration, PostgresVersion } from "@geekmidas/manifest";
-import { Service } from "@geekmidas/services";
-import { Kysely, KyselyConfig } from "kysely";
-
-//#region src/database/kysely.d.ts
-
-/**
- * Everything Kysely takes, plus what this construct declares.
- *
- * `dialect` is omitted because the construct owns it — it is built from the one
- * URL the adapter supplied, which is the whole point of the construct. The rest
- * of `KyselyConfig` (`plugins`, `log`) is the app's business and passes
- * straight through, so anything Kysely adds later arrives without being
- * tracked here.
- */
-interface KyselyDatabaseOptions extends Omit<KyselyConfig, 'dialect'> {
-  /**
-   * The schema, pinned on both roles' `search_path`.
-   *
-   * Defaults to `app` — the role the schema plays, rather than a restatement
-   * of the database's own name, which reads correctly beside `auth` and
-   * `pgboss` and keeps the application off `public`.
-   */
-  schema?: string;
-  /**
-   * Provision the owner/runtime role split. Defaults to on.
-   *
-   * Off falls back to the cluster's master credential in both URLs, giving up
-   * the DDL/DML split and putting credentials that can drop a table into the
-   * function's environment. A deliberate downgrade, not a default.
-   */
-  roles?: boolean;
-  /**
-   * The Postgres major version to provision.
-   *
-   * Declared here so one statement reaches both targets. It was previously
-   * set in two unrelated places — a container tag locally, nothing at all on
-   * AWS (so Aurora chose) — which is how local came to run 18 while deployed
-   * ran 17.7 with nothing recording the difference.
-   *
-   * Defaults to {@link DEFAULT_POSTGRES_VERSION}.
-   */
-  version?: PostgresVersion;
-}
-/** What makes a construct derived rather than a database in its own right. */
-interface DerivedFrom {
-  kind: 'database-reader' | 'database-schema';
-  of: string;
-  schema?: string;
-}
-/**
- * @typeParam DB - the database's schema.
- * @typeParam TName - the canonical id. TypeScript has no partial
- * type-argument inference, so `new KyselyDatabase<OrdersDB>('orders')` leaves
- * this at its default and the service key widens to `string`. `db` still types
- * through `.database()`, which infers from the service.
- */
-declare class KyselyDatabase<DB = unknown, TName extends string = string> implements Construct<TName, Kysely<DB>> {
-  private readonly options;
-  readonly id: TName;
-  readonly service: Service<Uncapitalize<TName>, Kysely<DB>>;
-  /**
-   * Declared once and read by both `declare()` and `connect()`, so the key the
-   * build publishes and the key the client reads cannot drift.
-   */
-  private readonly config;
-  private readonly schemaName;
-  private readonly roles;
-  private readonly version;
-  private readonly derivedFrom?;
-  constructor(id: ConstructName<TName>, options?: KyselyDatabaseOptions, derivedFrom?: DerivedFrom);
-  declare(): Declaration[];
-  /**
-   * A read-only endpoint on this database.
-   *
-   * Read-only is enforced by the reader role's grants rather than by which
-   * endpoint it resolves to, so falling back to the writer where no replica
-   * exists is safe rather than a silently writable connection behind a name
-   * that says reader. There is no `writer()`: the database *is* the writer, so
-   * a replica can never be reached by accident.
-   *
-   * The return type is narrower than this class on purpose — see
-   * {@link ReadOnlyDatabase}.
-   */
-  reader(): ReadOnlyDatabase<DB, `${TName}Reader`>;
-  /**
-   * A cache that lives in this database.
-   *
-   * The same strengthening `schema()` is over a second database: `new
-   * Cache('Sessions')` says the app caches and leaves where to the deployment,
-   * while this says it caches *here* — which is a fact about the application
-   * and so belongs in its code.
-   *
-   * What it buys beyond being explicit: the table's schema and the role that
-   * reaches it come from this database rather than from a second convention,
-   * and the backend no longer has to guess which database "the database" meant
-   * when an app declares two.
-   *
-   * A cache is not a `KyselyDatabase`, so this returns a `Cache` — the client
-   * is a key/value store, not a query builder, and typing it as the parent
-   * would be a convenience that lies.
-   */
-  cache<TCache extends string = `${TName}Cache`>(id?: ConstructName<TCache>, options?: {
-    table?: string;
-  }): Cache<TCache>;
-  /**
-   * A second schema in this database, with its own role(s) and its own URL —
-   * so this database's role holds no grant on those tables at all.
-   *
-   * Typed separately because a tenant has its own tables: the point is that
-   * `auth.selectFrom('sessions')` type-checks and
-   * `orders.selectFrom('sessions')` does not.
-   */
-  schema<TenantDB, TTenant extends string>(id: ConstructName<TTenant>, options?: KyselyDatabaseOptions): KyselyDatabase<TenantDB, TTenant>;
-  /**
-   * A connection as the *owner* role — the one that may create, alter and drop.
-   *
-   * A `Service` rather than part of the construct, and deliberately so: a
-   * construct is what `.dependsOn()` accepts, and nothing should be able to
-   * depend on this. A migrator asks for it by name; a handler cannot ask at
-   * all, which is the security property the role split exists for.
-   *
-   * Falls back to the runtime URL where no owner URL was published — the
-   * `roles: false` downgrade, where there is only one credential and it is the
-   * cluster master's.
-   */
-  get owner(): Service<`${Uncapitalize<TName>}Owner`, Kysely<DB>>;
-  private connect;
-}
-/**
- * A database you may read through, and derive nothing from.
- *
- * A reader is terminal in the graph, and this is that fact in the type system.
- * `DERIVES_FROM` gives `cache` and `database-schema` no `database-reader`
- * parent, and there is no reader of a reader — so `orders.reader().cache(…)`
- * has always been illegal, but it type-checked and failed later at
- * `assertDerivations`. That is a long way round to learn that a read-only
- * endpoint cannot own a table something writes to.
- *
- * Omitting the three deriving methods rather than making them throw keeps the
- * failure where it costs least: the editor, on the line that wrote it.
- *
- * The result is deliberately not assignable back to `KyselyDatabase` — a
- * reader is not one, and anything that genuinely needs the writer should say
- * so.
- */
-type ReadOnlyDatabase<DB, TName extends string> = Omit<KyselyDatabase<DB, TName>, 'reader' | 'cache' | 'schema'>;
-//#endregion
-export { KyselyDatabase, KyselyDatabaseOptions, ReadOnlyDatabase };
-//# sourceMappingURL=kysely.d.mts.map
+import { i as closeDatabasePools, n as KyselyDatabaseOptions, r as ReadOnlyDatabase, t as KyselyDatabase } from "../kysely-DUqC3Ie0.mjs";
+export { KyselyDatabase, KyselyDatabaseOptions, ReadOnlyDatabase, closeDatabasePools };

package/dist/database/kysely.mjs

@@ -1,180 +1,2 @@
-import { Cache } from "../cache-0ANvRQnD.mjs";
-import { DEFAULT_POSTGRES_VERSION, canonicalId, provideKey, serviceKey } from "@geekmidas/manifest";
-import { Kysely, PostgresDialect } from "kysely";
-import pg from "pg";
-
-//#region src/database/kysely.ts
-/** The schema a database uses when it does not say otherwise. */
-const DEFAULT_SCHEMA = "app";
-/**
-* @typeParam DB - the database's schema.
-* @typeParam TName - the canonical id. TypeScript has no partial
-* type-argument inference, so `new KyselyDatabase<OrdersDB>('orders')` leaves
-* this at its default and the service key widens to `string`. `db` still types
-* through `.database()`, which infers from the service.
-*/
-var KyselyDatabase = class KyselyDatabase {
-	id;
-	service;
-	/**
-	* Declared once and read by both `declare()` and `connect()`, so the key the
-	* build publishes and the key the client reads cannot drift.
-	*/
-	config;
-	schemaName;
-	roles;
-	version;
-	derivedFrom;
-	constructor(id, options = {}, derivedFrom) {
-		this.options = options;
-		const canonical = canonicalId(id);
-		this.id = canonical;
-		this.config = {
-			url: provideKey(canonical, "url"),
-			ownerUrl: provideKey(canonical, "ownerUrl")
-		};
-		this.schemaName = options.schema ?? DEFAULT_SCHEMA;
-		this.roles = options.roles ?? true;
-		this.version = options.version ?? DEFAULT_POSTGRES_VERSION;
-		this.derivedFrom = derivedFrom;
-		this.service = {
-			serviceName: serviceKey(canonical),
-			register: (registerOptions) => this.connect(registerOptions)
-		};
-	}
-	declare() {
-		if (this.derivedFrom) {
-			const { kind, of, schema } = this.derivedFrom;
-			return [kind === "database-schema" ? {
-				kind,
-				id: this.id,
-				of,
-				schema: schema ?? this.schemaName,
-				provides: [this.config.url]
-			} : {
-				kind,
-				id: this.id,
-				of,
-				provides: [this.config.url]
-			}];
-		}
-		return [{
-			kind: "database",
-			id: this.id,
-			engine: "postgres",
-			schema: this.schemaName,
-			version: this.version,
-			provides: [this.config.url],
-			...this.roles ? {} : { roles: false }
-		}];
-	}
-	/**
-	* A read-only endpoint on this database.
-	*
-	* Read-only is enforced by the reader role's grants rather than by which
-	* endpoint it resolves to, so falling back to the writer where no replica
-	* exists is safe rather than a silently writable connection behind a name
-	* that says reader. There is no `writer()`: the database *is* the writer, so
-	* a replica can never be reached by accident.
-	*
-	* The return type is narrower than this class on purpose — see
-	* {@link ReadOnlyDatabase}.
-	*/
-	reader() {
-		return new KyselyDatabase(`${this.id}Reader`, this.options, {
-			kind: "database-reader",
-			of: this.id
-		});
-	}
-	/**
-	* A cache that lives in this database.
-	*
-	* The same strengthening `schema()` is over a second database: `new
-	* Cache('Sessions')` says the app caches and leaves where to the deployment,
-	* while this says it caches *here* — which is a fact about the application
-	* and so belongs in its code.
-	*
-	* What it buys beyond being explicit: the table's schema and the role that
-	* reaches it come from this database rather than from a second convention,
-	* and the backend no longer has to guess which database "the database" meant
-	* when an app declares two.
-	*
-	* A cache is not a `KyselyDatabase`, so this returns a `Cache` — the client
-	* is a key/value store, not a query builder, and typing it as the parent
-	* would be a convenience that lies.
-	*/
-	cache(id = `${this.id}Cache`, options = {}) {
-		return new Cache(id, {
-			of: this.id,
-			...options.table ? { table: options.table } : {}
-		});
-	}
-	/**
-	* A second schema in this database, with its own role(s) and its own URL —
-	* so this database's role holds no grant on those tables at all.
-	*
-	* Typed separately because a tenant has its own tables: the point is that
-	* `auth.selectFrom('sessions')` type-checks and
-	* `orders.selectFrom('sessions')` does not.
-	*/
-	schema(id, options = {}) {
-		return new KyselyDatabase(id, options, {
-			kind: "database-schema",
-			of: this.id,
-			schema: options.schema ?? id.toLowerCase()
-		});
-	}
-	/**
-	* A connection as the *owner* role — the one that may create, alter and drop.
-	*
-	* A `Service` rather than part of the construct, and deliberately so: a
-	* construct is what `.dependsOn()` accepts, and nothing should be able to
-	* depend on this. A migrator asks for it by name; a handler cannot ask at
-	* all, which is the security property the role split exists for.
-	*
-	* Falls back to the runtime URL where no owner URL was published — the
-	* `roles: false` downgrade, where there is only one credential and it is the
-	* cluster master's.
-	*/
-	get owner() {
-		return {
-			serviceName: `${serviceKey(this.id)}Owner`,
-			register: (options) => this.connect(options, { owner: true })
-		};
-	}
-	async connect(options, as = {}) {
-		const { url, ownerUrl } = options.envParser.create((get) => ({
-			url: get(this.config.url).string(),
-			ownerUrl: get(this.config.ownerUrl).string().optional()
-		})).parse();
-		const { schema: _schema, roles: _roles,...kysely } = this.options;
-		return new Kysely({
-			...kysely,
-			dialect: new PostgresDialect({ pool: pool(as.owner ? ownerUrl ?? url : url) })
-		});
-	}
-};
-/**
-* A pool for one URL, with its schema actually on the search path.
-*
-* `?search_path=` is not a libpq parameter — a URL carrying it connects
-* happily and then resolves every unqualified name against `public`, which is
-* how a schema tenant silently writes its tables into the database it was
-* separated from. Postgres takes it as a startup option instead, so the URL
-* keeps the readable form the target derives and this turns it into the thing
-* the server understands.
-*/
-function pool(url) {
-	const parsed = new URL(url);
-	const searchPath = parsed.searchParams.get("search_path");
-	if (!searchPath) return new pg.Pool({ connectionString: url });
-	parsed.searchParams.delete("search_path");
-	return new pg.Pool({
-		connectionString: parsed.toString(),
-		options: `-c search_path=${searchPath}`
-	});
-}
-
-//#endregion
-export { KyselyDatabase };
-//# sourceMappingURL=kysely.mjs.map
+import { n as closeDatabasePools, t as KyselyDatabase } from "../kysely-Bii4l6eP.mjs";
+export { KyselyDatabase, closeDatabasePools };

package/dist/email.cjs

@@ -1,9 +1,22 @@
-const require_chunk = require('./chunk-DWy1uDak.cjs');
-const __geekmidas_manifest = require_chunk.__toESM(require("@geekmidas/manifest"));
-const __geekmidas_emailkit = require_chunk.__toESM(require("@geekmidas/emailkit"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _geekmidas_manifest = require("@geekmidas/manifest");
+let _geekmidas_emailkit = require("@geekmidas/emailkit");
 //#region src/email.ts
+/**
+* `Email` — declared outbound mail.
+*
+* The same three-package meeting point as `ObjectStorage`: it implements the
+* construct contract, derives its env key through `@geekmidas/manifest`, and
+* hands back an `@geekmidas/emailkit` client. It names no provider — locally the
+* injected URL points at Mailpit, deployed it points at SES or whichever service
+* config selected.
+*
+* Where object storage needs a driver per provider, this needs none: mail is
+* delivered over SMTP whoever delivers it, so there is one client and one URL
+* shape, and the provider survives only as a host and a credential.
+*/
 var Email = class {
+	options;
 	id;
 	service;
 	/**
@@ -13,15 +26,15 @@ var Email = class {
 	keys;
 	constructor(id, options) {
 		this.options = options;
-		const canonical = (0, __geekmidas_manifest.canonicalId)(id);
+		const canonical = (0, _geekmidas_manifest.canonicalId)(id);
 		this.id = canonical;
 		this.keys = {
-			url: (0, __geekmidas_manifest.provideKey)(canonical, "url"),
-			from: (0, __geekmidas_manifest.provideKey)(canonical, "from")
+			url: (0, _geekmidas_manifest.provideKey)(canonical, "url"),
+			from: (0, _geekmidas_manifest.provideKey)(canonical, "from")
 		};
 		this.service = {
-			serviceName: (0, __geekmidas_manifest.serviceKey)(canonical),
-			register: (options$1) => this.connect(options$1)
+			serviceName: (0, _geekmidas_manifest.serviceKey)(canonical),
+			register: (options) => this.connect(options)
 		};
 	}
 	declare() {
@@ -43,8 +56,8 @@ var Email = class {
 			url: get(this.keys.url).string(),
 			from: get(this.keys.from).string()
 		})).parse();
-		return (0, __geekmidas_emailkit.createEmailClient)({
-			smtp: (0, __geekmidas_emailkit.parseEmailUrl)(url),
+		return (0, _geekmidas_emailkit.createEmailClient)({
+			smtp: (0, _geekmidas_emailkit.parseEmailUrl)(url),
 			templates: this.options.templates,
 			defaults: {
 				from,
@@ -53,7 +66,7 @@ var Email = class {
 		});
 	}
 };
-
 //#endregion
 exports.Email = Email;
+
 //# sourceMappingURL=email.cjs.map

package/dist/email.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"email.cjs","names":["id: ConstructName<TName>","options: EmailOptions<TTemplates>","options"],"sources":["../src/email.ts"],"sourcesContent":["/**\n * `Email` — declared outbound mail.\n *\n * The same three-package meeting point as `ObjectStorage`: it implements the\n * construct contract, derives its env key through `@geekmidas/manifest`, and\n * hands back an `@geekmidas/emailkit` client. It names no provider — locally the\n * injected URL points at Mailpit, deployed it points at SES or whichever service\n * config selected.\n *\n * Where object storage needs a driver per provider, this needs none: mail is\n * delivered over SMTP whoever delivers it, so there is one client and one URL\n * shape, and the provider survives only as a host and a credential.\n */\n\nimport {\n\tcreateEmailClient,\n\ttype EmailClient,\n\tparseEmailUrl,\n\ttype TemplateRecord,\n} from '@geekmidas/emailkit';\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\tprovideKey,\n\tserviceKey,\n} from '@geekmidas/manifest';\nimport type { Service, ServiceRegisterOptions } from '@geekmidas/services';\nimport type { Construct } from './construct-interface';\n\nexport interface EmailOptions<TTemplates extends TemplateRecord> {\n\t/**\n\t * The React templates this app can send.\n\t *\n\t * Structural — they are code, they ship with the handler, and which ones\n\t * exist cannot differ between stages. They are also what types\n\t * `sendTemplate`, so passing them here is what makes the client's call sites\n\t * checkable.\n\t */\n\ttemplates: TTemplates;\n\t/**\n\t * A reply-to address for every send.\n\t *\n\t * `from` is deliberately absent: it belongs to the verified sending domain,\n\t * which is `myapp.test` locally and the real domain deployed, so it arrives\n\t * as stage config rather than being written here.\n\t */\n\treplyTo?: string;\n}\n\nexport class Email<\n\tTName extends string = string,\n\tTTemplates extends TemplateRecord = TemplateRecord,\n> implements Construct<TName, EmailClient<TTemplates>>\n{\n\treadonly id: TName;\n\treadonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;\n\n\t/**\n\t * Declared once and read by both `declare()` and `connect()`, so the key the\n\t * build publishes and the key the client reads cannot drift.\n\t */\n\tprivate readonly keys: { url: string; from: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly options: EmailOptions<TTemplates>,\n\t) {\n\t\tconst canonical = canonicalId(id as string);\n\n\t\tthis.id = canonical as TName;\n\t\tthis.keys = {\n\t\t\turl: provideKey(canonical, 'url'),\n\t\t\t// The sending identity travels with the URL rather than being a second\n\t\t\t// construct option, for the same reason the URL does: it is the one\n\t\t\t// thing about mail that differs per stage.\n\t\t\tfrom: provideKey(canonical, 'from'),\n\t\t};\n\n\t\t// A field, not a getter: consumers cache services by object identity.\n\t\tthis.service = {\n\t\t\tserviceName: serviceKey(canonical) as Uncapitalize<TName>,\n\t\t\tregister: (options) => this.connect(options),\n\t\t};\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'email',\n\t\t\t\tid: this.id,\n\t\t\t\tprovides: [this.keys.url, this.keys.from],\n\t\t\t},\n\t\t];\n\t}\n\n\t/**\n\t * Builds the client from the URL the adapter supplied.\n\t *\n\t * No provider branch and no driver lookup — `parseEmailUrl` turns any of\n\t * Mailpit, SES, or Resend into the same transport config, which is the whole\n\t * reason the scheme is always `smtp://`.\n\t */\n\tprivate async connect({\n\t\tenvParser,\n\t}: ServiceRegisterOptions): Promise<EmailClient<TTemplates>> {\n\t\tconst { url, from } = envParser\n\t\t\t.create((get) => ({\n\t\t\t\turl: get(this.keys.url).string(),\n\t\t\t\tfrom: get(this.keys.from).string(),\n\t\t\t}))\n\t\t\t.parse();\n\n\t\treturn createEmailClient({\n\t\t\tsmtp: parseEmailUrl(url),\n\t\t\ttemplates: this.options.templates,\n\t\t\tdefaults: {\n\t\t\t\tfrom,\n\t\t\t\t...(this.options.replyTo ? { replyTo: this.options.replyTo } : {}),\n\t\t\t},\n\t\t});\n\t}\n}\n"],"mappings":";;;;;AAkDA,IAAa,QAAb,MAIA;CACC,AAAS;CACT,AAAS;;;;;CAMT,AAAiB;CAEjB,YACCA,IACiBC,SAChB;EADgB;EAEjB,MAAM,YAAY,sCAAY,GAAa;AAE3C,OAAK,KAAK;AACV,OAAK,OAAO;GACX,KAAK,qCAAW,WAAW,MAAM;GAIjC,MAAM,qCAAW,WAAW,OAAO;EACnC;AAGD,OAAK,UAAU;GACd,aAAa,qCAAW,UAAU;GAClC,UAAU,CAACC,cAAY,KAAK,QAAQA,UAAQ;EAC5C;CACD;CAED,UAAyB;AACxB,SAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,UAAU,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAK;EACzC,CACD;CACD;;;;;;;;CASD,MAAc,QAAQ,EACrB,WACwB,EAAoC;EAC5D,MAAM,EAAE,KAAK,MAAM,GAAG,UACpB,OAAO,CAAC,SAAS;GACjB,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,QAAQ;GAChC,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC,QAAQ;EAClC,GAAE,CACF,OAAO;AAET,SAAO,4CAAkB;GACxB,MAAM,wCAAc,IAAI;GACxB,WAAW,KAAK,QAAQ;GACxB,UAAU;IACT;IACA,GAAI,KAAK,QAAQ,UAAU,EAAE,SAAS,KAAK,QAAQ,QAAS,IAAG,CAAE;GACjE;EACD,EAAC;CACF;AACD"}
+{"version":3,"file":"email.cjs","names":["canonicalId","provideKey","serviceKey","createEmailClient","parseEmailUrl"],"sources":["../src/email.ts"],"sourcesContent":["/**\n * `Email` — declared outbound mail.\n *\n * The same three-package meeting point as `ObjectStorage`: it implements the\n * construct contract, derives its env key through `@geekmidas/manifest`, and\n * hands back an `@geekmidas/emailkit` client. It names no provider — locally the\n * injected URL points at Mailpit, deployed it points at SES or whichever service\n * config selected.\n *\n * Where object storage needs a driver per provider, this needs none: mail is\n * delivered over SMTP whoever delivers it, so there is one client and one URL\n * shape, and the provider survives only as a host and a credential.\n */\n\nimport {\n\tcreateEmailClient,\n\ttype EmailClient,\n\tparseEmailUrl,\n\ttype TemplateRecord,\n} from '@geekmidas/emailkit';\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\tprovideKey,\n\tserviceKey,\n} from '@geekmidas/manifest';\nimport type { Service, ServiceRegisterOptions } from '@geekmidas/services';\nimport type { Construct } from './construct-interface';\n\nexport interface EmailOptions<TTemplates extends TemplateRecord> {\n\t/**\n\t * The React templates this app can send.\n\t *\n\t * Structural — they are code, they ship with the handler, and which ones\n\t * exist cannot differ between stages. They are also what types\n\t * `sendTemplate`, so passing them here is what makes the client's call sites\n\t * checkable.\n\t */\n\ttemplates: TTemplates;\n\t/**\n\t * A reply-to address for every send.\n\t *\n\t * `from` is deliberately absent: it belongs to the verified sending domain,\n\t * which is `myapp.test` locally and the real domain deployed, so it arrives\n\t * as stage config rather than being written here.\n\t */\n\treplyTo?: string;\n}\n\nexport class Email<\n\tTName extends string = string,\n\tTTemplates extends TemplateRecord = TemplateRecord,\n> implements Construct<TName, EmailClient<TTemplates>>\n{\n\treadonly id: TName;\n\treadonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;\n\n\t/**\n\t * Declared once and read by both `declare()` and `connect()`, so the key the\n\t * build publishes and the key the client reads cannot drift.\n\t */\n\tprivate readonly keys: { url: string; from: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly options: EmailOptions<TTemplates>,\n\t) {\n\t\tconst canonical = canonicalId(id as string);\n\n\t\tthis.id = canonical as TName;\n\t\tthis.keys = {\n\t\t\turl: provideKey(canonical, 'url'),\n\t\t\t// The sending identity travels with the URL rather than being a second\n\t\t\t// construct option, for the same reason the URL does: it is the one\n\t\t\t// thing about mail that differs per stage.\n\t\t\tfrom: provideKey(canonical, 'from'),\n\t\t};\n\n\t\t// A field, not a getter: consumers cache services by object identity.\n\t\tthis.service = {\n\t\t\tserviceName: serviceKey(canonical) as Uncapitalize<TName>,\n\t\t\tregister: (options) => this.connect(options),\n\t\t};\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'email',\n\t\t\t\tid: this.id,\n\t\t\t\tprovides: [this.keys.url, this.keys.from],\n\t\t\t},\n\t\t];\n\t}\n\n\t/**\n\t * Builds the client from the URL the adapter supplied.\n\t *\n\t * No provider branch and no driver lookup — `parseEmailUrl` turns any of\n\t * Mailpit, SES, or Resend into the same transport config, which is the whole\n\t * reason the scheme is always `smtp://`.\n\t */\n\tprivate async connect({\n\t\tenvParser,\n\t}: ServiceRegisterOptions): Promise<EmailClient<TTemplates>> {\n\t\tconst { url, from } = envParser\n\t\t\t.create((get) => ({\n\t\t\t\turl: get(this.keys.url).string(),\n\t\t\t\tfrom: get(this.keys.from).string(),\n\t\t\t}))\n\t\t\t.parse();\n\n\t\treturn createEmailClient({\n\t\t\tsmtp: parseEmailUrl(url),\n\t\t\ttemplates: this.options.templates,\n\t\t\tdefaults: {\n\t\t\t\tfrom,\n\t\t\t\t...(this.options.replyTo ? { replyTo: this.options.replyTo } : {}),\n\t\t\t},\n\t\t});\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkDA,IAAa,QAAb,MAIA;CAYmB;CAXlB;CACA;;;;;CAMA;CAEA,YACC,IACA,SACC;EADgB,KAAA,UAAA;EAEjB,MAAM,aAAA,GAAYA,oBAAAA,YAAAA,CAAY,EAAY;EAE1C,KAAK,KAAK;EACV,KAAK,OAAO;GACX,MAAA,GAAKC,oBAAAA,WAAAA,CAAW,WAAW,KAAK;GAIhC,OAAA,GAAMA,oBAAAA,WAAAA,CAAW,WAAW,MAAM;EACnC;EAGA,KAAK,UAAU;GACd,cAAA,GAAaC,oBAAAA,WAAAA,CAAW,SAAS;GACjC,WAAW,YAAY,KAAK,QAAQ,OAAO;EAC5C;CACD;CAEA,UAAyB;EACxB,OAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,UAAU,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI;EACzC,CACD;CACD;;;;;;;;CASA,MAAc,QAAQ,EACrB,aAC4D;EAC5D,MAAM,EAAE,KAAK,SAAS,UACpB,QAAQ,SAAS;GACjB,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,OAAO;GAC/B,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO;EAClC,EAAE,CAAC,CACF,MAAM;EAER,QAAA,GAAOC,oBAAAA,kBAAAA,CAAkB;GACxB,OAAA,GAAMC,oBAAAA,cAAAA,CAAc,GAAG;GACvB,WAAW,KAAK,QAAQ;GACxB,UAAU;IACT;IACA,GAAI,KAAK,QAAQ,UAAU,EAAE,SAAS,KAAK,QAAQ,QAAQ,IAAI,CAAC;GACjE;EACD,CAAC;CACF;AACD"}

package/dist/email.d.cts

@@ -1,11 +1,9 @@
-import { Construct } from "./construct-interface-D9d4Gm4p.cjs";
+import { n as Construct } from "./construct-interface-B1AfqRl4.cjs";
 import { Service } from "@geekmidas/services";
 import { ConstructName, Declaration } from "@geekmidas/manifest";
 import { EmailClient, TemplateRecord } from "@geekmidas/emailkit";
-
 //#region src/email.d.ts
-
-interface EmailOptions<TTemplates extends TemplateRecord> {
+export interface EmailOptions<TTemplates extends TemplateRecord> {
   /**
    * The React templates this app can send.
    *
@@ -24,7 +22,7 @@ interface EmailOptions<TTemplates extends TemplateRecord> {
    */
   replyTo?: string;
 }
-declare class Email<TName extends string = string, TTemplates extends TemplateRecord = TemplateRecord> implements Construct<TName, EmailClient<TTemplates>> {
+export declare class Email<TName extends string = string, TTemplates extends TemplateRecord = TemplateRecord> implements Construct<TName, EmailClient<TTemplates>> {
   private readonly options;
   readonly id: TName;
   readonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;
@@ -44,7 +42,5 @@ declare class Email<TName extends string = string, TTemplates extends TemplateRe
    */
   private connect;
 }
-//# sourceMappingURL=email.d.ts.map
 //#endregion
-export { Email, EmailOptions };
 //# sourceMappingURL=email.d.cts.map

package/dist/email.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.cts","names":[],"sources":["../src/email.ts"],"sourcesContent":[],"mappings":";;;;;;;AAqD8B,UAvBb,YAuBa,CAAA,mBAvBmB,cAuBnB,CAAA,CAAA;EAAW;;;;;;;;EAYtB,SACsB,EA3B7B,UA2B6B;EAAU;;;AAb7B;;;;;;cAHT,wDAEO,iBAAiB,2BACxB,UAAU,OAAO,YAAY;;eAE5B;oBACK,QAAQ,aAAa,QAAQ,YAAY;;;;;;kBAStD,cAAc,iBACQ,aAAa;aAoB7B"}
+{"version":3,"file":"email.d.cts","names":[],"sources":["../src/email.ts"],"mappings":";;;;;iBA8BiB,aAAa,mBAAmB;;;;;;;;;EAShD,WAAW;;;;;;;;EAQX;;qBAGY,MACZ,+BACA,mBAAmB,iBAAiB,2BACxB,UAAU,OAAO,YAAY;mBAavB;WAXT,IAAI;WACJ,SAAS,QAAQ,aAAa,QAAQ,YAAY;;;;;mBAM1C;EAEjB,YACC,IAAI,cAAc,QACD,SAAS,aAAa;EAoBxC,WAAW;;;;;;;;UAiBG"}

package/dist/email.d.mts

@@ -1,11 +1,9 @@
-import { Construct } from "./construct-interface-g5GM5pwR.mjs";
+import { n as Construct } from "./construct-interface-DluK3_da.mjs";
 import { ConstructName, Declaration } from "@geekmidas/manifest";
 import { EmailClient, TemplateRecord } from "@geekmidas/emailkit";
 import { Service } from "@geekmidas/services";
-
 //#region src/email.d.ts
-
-interface EmailOptions<TTemplates extends TemplateRecord> {
+export interface EmailOptions<TTemplates extends TemplateRecord> {
   /**
    * The React templates this app can send.
    *
@@ -24,7 +22,7 @@ interface EmailOptions<TTemplates extends TemplateRecord> {
    */
   replyTo?: string;
 }
-declare class Email<TName extends string = string, TTemplates extends TemplateRecord = TemplateRecord> implements Construct<TName, EmailClient<TTemplates>> {
+export declare class Email<TName extends string = string, TTemplates extends TemplateRecord = TemplateRecord> implements Construct<TName, EmailClient<TTemplates>> {
   private readonly options;
   readonly id: TName;
   readonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;
@@ -44,7 +42,5 @@ declare class Email<TName extends string = string, TTemplates extends TemplateRe
    */
   private connect;
 }
-//# sourceMappingURL=email.d.ts.map
 //#endregion
-export { Email, EmailOptions };
 //# sourceMappingURL=email.d.mts.map

package/dist/email.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.mts","names":[],"sources":["../src/email.ts"],"sourcesContent":[],"mappings":";;;;;;;AAqD8B,UAvBb,YAuBa,CAAA,mBAvBmB,cAuBnB,CAAA,CAAA;EAAW;;;;;;;;EAYtB,SACsB,EA3B7B,UA2B6B;EAAU;;;AAb7B;;;;;;cAHT,wDAEO,iBAAiB,2BACxB,UAAU,OAAO,YAAY;;eAE5B;oBACK,QAAQ,aAAa,QAAQ,YAAY;;;;;;kBAStD,cAAc,iBACQ,aAAa;aAoB7B"}
+{"version":3,"file":"email.d.mts","names":[],"sources":["../src/email.ts"],"mappings":";;;;;iBA8BiB,aAAa,mBAAmB;;;;;;;;;EAShD,WAAW;;;;;;;;EAQX;;qBAGY,MACZ,+BACA,mBAAmB,iBAAiB,2BACxB,UAAU,OAAO,YAAY;mBAavB;WAXT,IAAI;WACJ,SAAS,QAAQ,aAAa,QAAQ,YAAY;;;;;mBAM1C;EAEjB,YACC,IAAI,cAAc,QACD,SAAS,aAAa;EAoBxC,WAAW;;;;;;;;UAiBG"}

package/dist/email.mjs

@@ -1,8 +1,21 @@
 import { canonicalId, provideKey, serviceKey } from "@geekmidas/manifest";
 import { createEmailClient, parseEmailUrl } from "@geekmidas/emailkit";
-
 //#region src/email.ts
+/**
+* `Email` — declared outbound mail.
+*
+* The same three-package meeting point as `ObjectStorage`: it implements the
+* construct contract, derives its env key through `@geekmidas/manifest`, and
+* hands back an `@geekmidas/emailkit` client. It names no provider — locally the
+* injected URL points at Mailpit, deployed it points at SES or whichever service
+* config selected.
+*
+* Where object storage needs a driver per provider, this needs none: mail is
+* delivered over SMTP whoever delivers it, so there is one client and one URL
+* shape, and the provider survives only as a host and a credential.
+*/
 var Email = class {
+	options;
 	id;
 	service;
 	/**
@@ -20,7 +33,7 @@ var Email = class {
 		};
 		this.service = {
 			serviceName: serviceKey(canonical),
-			register: (options$1) => this.connect(options$1)
+			register: (options) => this.connect(options)
 		};
 	}
 	declare() {
@@ -52,7 +65,7 @@ var Email = class {
 		});
 	}
 };
-
 //#endregion
 export { Email };
+
 //# sourceMappingURL=email.mjs.map

package/dist/email.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email.mjs","names":["id: ConstructName<TName>","options: EmailOptions<TTemplates>","options"],"sources":["../src/email.ts"],"sourcesContent":["/**\n * `Email` — declared outbound mail.\n *\n * The same three-package meeting point as `ObjectStorage`: it implements the\n * construct contract, derives its env key through `@geekmidas/manifest`, and\n * hands back an `@geekmidas/emailkit` client. It names no provider — locally the\n * injected URL points at Mailpit, deployed it points at SES or whichever service\n * config selected.\n *\n * Where object storage needs a driver per provider, this needs none: mail is\n * delivered over SMTP whoever delivers it, so there is one client and one URL\n * shape, and the provider survives only as a host and a credential.\n */\n\nimport {\n\tcreateEmailClient,\n\ttype EmailClient,\n\tparseEmailUrl,\n\ttype TemplateRecord,\n} from '@geekmidas/emailkit';\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\tprovideKey,\n\tserviceKey,\n} from '@geekmidas/manifest';\nimport type { Service, ServiceRegisterOptions } from '@geekmidas/services';\nimport type { Construct } from './construct-interface';\n\nexport interface EmailOptions<TTemplates extends TemplateRecord> {\n\t/**\n\t * The React templates this app can send.\n\t *\n\t * Structural — they are code, they ship with the handler, and which ones\n\t * exist cannot differ between stages. They are also what types\n\t * `sendTemplate`, so passing them here is what makes the client's call sites\n\t * checkable.\n\t */\n\ttemplates: TTemplates;\n\t/**\n\t * A reply-to address for every send.\n\t *\n\t * `from` is deliberately absent: it belongs to the verified sending domain,\n\t * which is `myapp.test` locally and the real domain deployed, so it arrives\n\t * as stage config rather than being written here.\n\t */\n\treplyTo?: string;\n}\n\nexport class Email<\n\tTName extends string = string,\n\tTTemplates extends TemplateRecord = TemplateRecord,\n> implements Construct<TName, EmailClient<TTemplates>>\n{\n\treadonly id: TName;\n\treadonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;\n\n\t/**\n\t * Declared once and read by both `declare()` and `connect()`, so the key the\n\t * build publishes and the key the client reads cannot drift.\n\t */\n\tprivate readonly keys: { url: string; from: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly options: EmailOptions<TTemplates>,\n\t) {\n\t\tconst canonical = canonicalId(id as string);\n\n\t\tthis.id = canonical as TName;\n\t\tthis.keys = {\n\t\t\turl: provideKey(canonical, 'url'),\n\t\t\t// The sending identity travels with the URL rather than being a second\n\t\t\t// construct option, for the same reason the URL does: it is the one\n\t\t\t// thing about mail that differs per stage.\n\t\t\tfrom: provideKey(canonical, 'from'),\n\t\t};\n\n\t\t// A field, not a getter: consumers cache services by object identity.\n\t\tthis.service = {\n\t\t\tserviceName: serviceKey(canonical) as Uncapitalize<TName>,\n\t\t\tregister: (options) => this.connect(options),\n\t\t};\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'email',\n\t\t\t\tid: this.id,\n\t\t\t\tprovides: [this.keys.url, this.keys.from],\n\t\t\t},\n\t\t];\n\t}\n\n\t/**\n\t * Builds the client from the URL the adapter supplied.\n\t *\n\t * No provider branch and no driver lookup — `parseEmailUrl` turns any of\n\t * Mailpit, SES, or Resend into the same transport config, which is the whole\n\t * reason the scheme is always `smtp://`.\n\t */\n\tprivate async connect({\n\t\tenvParser,\n\t}: ServiceRegisterOptions): Promise<EmailClient<TTemplates>> {\n\t\tconst { url, from } = envParser\n\t\t\t.create((get) => ({\n\t\t\t\turl: get(this.keys.url).string(),\n\t\t\t\tfrom: get(this.keys.from).string(),\n\t\t\t}))\n\t\t\t.parse();\n\n\t\treturn createEmailClient({\n\t\t\tsmtp: parseEmailUrl(url),\n\t\t\ttemplates: this.options.templates,\n\t\t\tdefaults: {\n\t\t\t\tfrom,\n\t\t\t\t...(this.options.replyTo ? { replyTo: this.options.replyTo } : {}),\n\t\t\t},\n\t\t});\n\t}\n}\n"],"mappings":";;;;AAkDA,IAAa,QAAb,MAIA;CACC,AAAS;CACT,AAAS;;;;;CAMT,AAAiB;CAEjB,YACCA,IACiBC,SAChB;EADgB;EAEjB,MAAM,YAAY,YAAY,GAAa;AAE3C,OAAK,KAAK;AACV,OAAK,OAAO;GACX,KAAK,WAAW,WAAW,MAAM;GAIjC,MAAM,WAAW,WAAW,OAAO;EACnC;AAGD,OAAK,UAAU;GACd,aAAa,WAAW,UAAU;GAClC,UAAU,CAACC,cAAY,KAAK,QAAQA,UAAQ;EAC5C;CACD;CAED,UAAyB;AACxB,SAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,UAAU,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAK;EACzC,CACD;CACD;;;;;;;;CASD,MAAc,QAAQ,EACrB,WACwB,EAAoC;EAC5D,MAAM,EAAE,KAAK,MAAM,GAAG,UACpB,OAAO,CAAC,SAAS;GACjB,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,QAAQ;GAChC,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC,QAAQ;EAClC,GAAE,CACF,OAAO;AAET,SAAO,kBAAkB;GACxB,MAAM,cAAc,IAAI;GACxB,WAAW,KAAK,QAAQ;GACxB,UAAU;IACT;IACA,GAAI,KAAK,QAAQ,UAAU,EAAE,SAAS,KAAK,QAAQ,QAAS,IAAG,CAAE;GACjE;EACD,EAAC;CACF;AACD"}
+{"version":3,"file":"email.mjs","names":[],"sources":["../src/email.ts"],"sourcesContent":["/**\n * `Email` — declared outbound mail.\n *\n * The same three-package meeting point as `ObjectStorage`: it implements the\n * construct contract, derives its env key through `@geekmidas/manifest`, and\n * hands back an `@geekmidas/emailkit` client. It names no provider — locally the\n * injected URL points at Mailpit, deployed it points at SES or whichever service\n * config selected.\n *\n * Where object storage needs a driver per provider, this needs none: mail is\n * delivered over SMTP whoever delivers it, so there is one client and one URL\n * shape, and the provider survives only as a host and a credential.\n */\n\nimport {\n\tcreateEmailClient,\n\ttype EmailClient,\n\tparseEmailUrl,\n\ttype TemplateRecord,\n} from '@geekmidas/emailkit';\nimport {\n\ttype ConstructName,\n\tcanonicalId,\n\ttype Declaration,\n\tprovideKey,\n\tserviceKey,\n} from '@geekmidas/manifest';\nimport type { Service, ServiceRegisterOptions } from '@geekmidas/services';\nimport type { Construct } from './construct-interface';\n\nexport interface EmailOptions<TTemplates extends TemplateRecord> {\n\t/**\n\t * The React templates this app can send.\n\t *\n\t * Structural — they are code, they ship with the handler, and which ones\n\t * exist cannot differ between stages. They are also what types\n\t * `sendTemplate`, so passing them here is what makes the client's call sites\n\t * checkable.\n\t */\n\ttemplates: TTemplates;\n\t/**\n\t * A reply-to address for every send.\n\t *\n\t * `from` is deliberately absent: it belongs to the verified sending domain,\n\t * which is `myapp.test` locally and the real domain deployed, so it arrives\n\t * as stage config rather than being written here.\n\t */\n\treplyTo?: string;\n}\n\nexport class Email<\n\tTName extends string = string,\n\tTTemplates extends TemplateRecord = TemplateRecord,\n> implements Construct<TName, EmailClient<TTemplates>>\n{\n\treadonly id: TName;\n\treadonly service: Service<Uncapitalize<TName>, EmailClient<TTemplates>>;\n\n\t/**\n\t * Declared once and read by both `declare()` and `connect()`, so the key the\n\t * build publishes and the key the client reads cannot drift.\n\t */\n\tprivate readonly keys: { url: string; from: string };\n\n\tconstructor(\n\t\tid: ConstructName<TName>,\n\t\tprivate readonly options: EmailOptions<TTemplates>,\n\t) {\n\t\tconst canonical = canonicalId(id as string);\n\n\t\tthis.id = canonical as TName;\n\t\tthis.keys = {\n\t\t\turl: provideKey(canonical, 'url'),\n\t\t\t// The sending identity travels with the URL rather than being a second\n\t\t\t// construct option, for the same reason the URL does: it is the one\n\t\t\t// thing about mail that differs per stage.\n\t\t\tfrom: provideKey(canonical, 'from'),\n\t\t};\n\n\t\t// A field, not a getter: consumers cache services by object identity.\n\t\tthis.service = {\n\t\t\tserviceName: serviceKey(canonical) as Uncapitalize<TName>,\n\t\t\tregister: (options) => this.connect(options),\n\t\t};\n\t}\n\n\tdeclare(): Declaration[] {\n\t\treturn [\n\t\t\t{\n\t\t\t\tkind: 'email',\n\t\t\t\tid: this.id,\n\t\t\t\tprovides: [this.keys.url, this.keys.from],\n\t\t\t},\n\t\t];\n\t}\n\n\t/**\n\t * Builds the client from the URL the adapter supplied.\n\t *\n\t * No provider branch and no driver lookup — `parseEmailUrl` turns any of\n\t * Mailpit, SES, or Resend into the same transport config, which is the whole\n\t * reason the scheme is always `smtp://`.\n\t */\n\tprivate async connect({\n\t\tenvParser,\n\t}: ServiceRegisterOptions): Promise<EmailClient<TTemplates>> {\n\t\tconst { url, from } = envParser\n\t\t\t.create((get) => ({\n\t\t\t\turl: get(this.keys.url).string(),\n\t\t\t\tfrom: get(this.keys.from).string(),\n\t\t\t}))\n\t\t\t.parse();\n\n\t\treturn createEmailClient({\n\t\t\tsmtp: parseEmailUrl(url),\n\t\t\ttemplates: this.options.templates,\n\t\t\tdefaults: {\n\t\t\t\tfrom,\n\t\t\t\t...(this.options.replyTo ? { replyTo: this.options.replyTo } : {}),\n\t\t\t},\n\t\t});\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkDA,IAAa,QAAb,MAIA;CAYmB;CAXlB;CACA;;;;;CAMA;CAEA,YACC,IACA,SACC;EADgB,KAAA,UAAA;EAEjB,MAAM,YAAY,YAAY,EAAY;EAE1C,KAAK,KAAK;EACV,KAAK,OAAO;GACX,KAAK,WAAW,WAAW,KAAK;GAIhC,MAAM,WAAW,WAAW,MAAM;EACnC;EAGA,KAAK,UAAU;GACd,aAAa,WAAW,SAAS;GACjC,WAAW,YAAY,KAAK,QAAQ,OAAO;EAC5C;CACD;CAEA,UAAyB;EACxB,OAAO,CACN;GACC,MAAM;GACN,IAAI,KAAK;GACT,UAAU,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI;EACzC,CACD;CACD;;;;;;;;CASA,MAAc,QAAQ,EACrB,aAC4D;EAC5D,MAAM,EAAE,KAAK,SAAS,UACpB,QAAQ,SAAS;GACjB,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,OAAO;GAC/B,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO;EAClC,EAAE,CAAC,CACF,MAAM;EAER,OAAO,kBAAkB;GACxB,MAAM,cAAc,GAAG;GACvB,WAAW,KAAK,QAAQ;GACxB,UAAU;IACT;IACA,GAAI,KAAK,QAAQ,UAAU,EAAE,SAAS,KAAK,QAAQ,QAAQ,IAAI,CAAC;GACjE;EACD,CAAC;CACF;AACD"}