@geekmidas/envkit 0.1.0 → 0.3.0

package/dist/credentials.cjs

@@ -0,0 +1,66 @@
+Object.defineProperty(exports, '__esModule', { value: true });
+const require_chunk = require('./chunk-CUT6urMc.cjs');
+const node_crypto = require_chunk.__toESM(require("node:crypto"));
+
+//#region src/credentials.ts
+/** AES-256-GCM auth tag length */
+const AUTH_TAG_LENGTH = 16;
+/**
+* Decrypt credentials from encrypted payload.
+* Exported for testing purposes.
+*/
+function decryptCredentials(encrypted, iv, masterKey) {
+	const key = Buffer.from(masterKey, "hex");
+	const ivBuffer = Buffer.from(iv, "hex");
+	const combined = Buffer.from(encrypted, "base64");
+	const ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);
+	const authTag = combined.subarray(-AUTH_TAG_LENGTH);
+	const decipher = (0, node_crypto.createDecipheriv)("aes-256-gcm", key, ivBuffer);
+	decipher.setAuthTag(authTag);
+	const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+	return JSON.parse(plaintext.toString("utf-8"));
+}
+/**
+* Credentials object for use with EnvironmentParser.
+*
+* In development mode (no embedded credentials), this returns an empty object.
+* In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
+* environment variable.
+*
+* @example
+* ```typescript
+* import { EnvironmentParser } from '@geekmidas/envkit';
+* import { Credentials } from '@geekmidas/envkit/credentials';
+*
+* export const envParser = new EnvironmentParser({...process.env, ...Credentials})
+*   .create((get) => ({
+*     database: {
+*       url: get('DATABASE_URL').string(),
+*     },
+*   }))
+*   .parse();
+* ```
+*/
+const Credentials = (() => {
+	if (typeof __GKM_ENCRYPTED_CREDENTIALS__ === "undefined" || typeof __GKM_CREDENTIALS_IV__ === "undefined") return {};
+	const masterKey = process.env.GKM_MASTER_KEY;
+	if (!masterKey) {
+		console.error("[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.");
+		console.error("[gkm] Falling back to environment variables. Some secrets may be missing.");
+		return {};
+	}
+	try {
+		return decryptCredentials(__GKM_ENCRYPTED_CREDENTIALS__, __GKM_CREDENTIALS_IV__, masterKey);
+	} catch (error) {
+		console.error("[gkm] Failed to decrypt credentials:", error);
+		console.error("[gkm] Falling back to environment variables.");
+		return {};
+	}
+})();
+var credentials_default = Credentials;
+
+//#endregion
+exports.Credentials = Credentials;
+exports.decryptCredentials = decryptCredentials;
+exports.default = credentials_default;
+//# sourceMappingURL=credentials.cjs.map

package/dist/credentials.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.cjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * In development mode (no embedded credentials), this returns an empty object.\n * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY\n * environment variable.\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,kCAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBD,MAAaC,cAAsC,CAAC,MAAM;AAEzD,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}

package/dist/credentials.d.cts

@@ -0,0 +1,31 @@
+//#region src/credentials.d.ts
+/**
+ * Decrypt credentials from encrypted payload.
+ * Exported for testing purposes.
+ */
+declare function decryptCredentials(encrypted: string, iv: string, masterKey: string): Record<string, string>;
+/**
+ * Credentials object for use with EnvironmentParser.
+ *
+ * In development mode (no embedded credentials), this returns an empty object.
+ * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
+ * environment variable.
+ *
+ * @example
+ * ```typescript
+ * import { EnvironmentParser } from '@geekmidas/envkit';
+ * import { Credentials } from '@geekmidas/envkit/credentials';
+ *
+ * export const envParser = new EnvironmentParser({...process.env, ...Credentials})
+ *   .create((get) => ({
+ *     database: {
+ *       url: get('DATABASE_URL').string(),
+ *     },
+ *   }))
+ *   .parse();
+ * ```
+ */
+declare const Credentials: Record<string, string>;
+//#endregion
+export { Credentials, Credentials as default, decryptCredentials };
+//# sourceMappingURL=credentials.d.cts.map

package/dist/credentials.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.cts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AA8CA;;iBA9CgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;cA0CU,aAAa"}

package/dist/credentials.d.mts

@@ -0,0 +1,31 @@
+//#region src/credentials.d.ts
+/**
+ * Decrypt credentials from encrypted payload.
+ * Exported for testing purposes.
+ */
+declare function decryptCredentials(encrypted: string, iv: string, masterKey: string): Record<string, string>;
+/**
+ * Credentials object for use with EnvironmentParser.
+ *
+ * In development mode (no embedded credentials), this returns an empty object.
+ * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
+ * environment variable.
+ *
+ * @example
+ * ```typescript
+ * import { EnvironmentParser } from '@geekmidas/envkit';
+ * import { Credentials } from '@geekmidas/envkit/credentials';
+ *
+ * export const envParser = new EnvironmentParser({...process.env, ...Credentials})
+ *   .create((get) => ({
+ *     database: {
+ *       url: get('DATABASE_URL').string(),
+ *     },
+ *   }))
+ *   .parse();
+ * ```
+ */
+declare const Credentials: Record<string, string>;
+//#endregion
+export { Credentials, Credentials as default, decryptCredentials };
+//# sourceMappingURL=credentials.d.mts.map

package/dist/credentials.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.mts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AA8CA;;iBA9CgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;cA0CU,aAAa"}

package/dist/credentials.mjs

@@ -0,0 +1,62 @@
+import { createDecipheriv } from "node:crypto";
+
+//#region src/credentials.ts
+/** AES-256-GCM auth tag length */
+const AUTH_TAG_LENGTH = 16;
+/**
+* Decrypt credentials from encrypted payload.
+* Exported for testing purposes.
+*/
+function decryptCredentials(encrypted, iv, masterKey) {
+	const key = Buffer.from(masterKey, "hex");
+	const ivBuffer = Buffer.from(iv, "hex");
+	const combined = Buffer.from(encrypted, "base64");
+	const ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);
+	const authTag = combined.subarray(-AUTH_TAG_LENGTH);
+	const decipher = createDecipheriv("aes-256-gcm", key, ivBuffer);
+	decipher.setAuthTag(authTag);
+	const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+	return JSON.parse(plaintext.toString("utf-8"));
+}
+/**
+* Credentials object for use with EnvironmentParser.
+*
+* In development mode (no embedded credentials), this returns an empty object.
+* In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
+* environment variable.
+*
+* @example
+* ```typescript
+* import { EnvironmentParser } from '@geekmidas/envkit';
+* import { Credentials } from '@geekmidas/envkit/credentials';
+*
+* export const envParser = new EnvironmentParser({...process.env, ...Credentials})
+*   .create((get) => ({
+*     database: {
+*       url: get('DATABASE_URL').string(),
+*     },
+*   }))
+*   .parse();
+* ```
+*/
+const Credentials = (() => {
+	if (typeof __GKM_ENCRYPTED_CREDENTIALS__ === "undefined" || typeof __GKM_CREDENTIALS_IV__ === "undefined") return {};
+	const masterKey = process.env.GKM_MASTER_KEY;
+	if (!masterKey) {
+		console.error("[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.");
+		console.error("[gkm] Falling back to environment variables. Some secrets may be missing.");
+		return {};
+	}
+	try {
+		return decryptCredentials(__GKM_ENCRYPTED_CREDENTIALS__, __GKM_CREDENTIALS_IV__, masterKey);
+	} catch (error) {
+		console.error("[gkm] Failed to decrypt credentials:", error);
+		console.error("[gkm] Falling back to environment variables.");
+		return {};
+	}
+})();
+var credentials_default = Credentials;
+
+//#endregion
+export { Credentials, decryptCredentials, credentials_default as default };
+//# sourceMappingURL=credentials.mjs.map

package/dist/credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.mjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * In development mode (no embedded credentials), this returns an empty object.\n * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY\n * environment variable.\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,iBAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBD,MAAaC,cAAsC,CAAC,MAAM;AAEzD,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}

package/dist/index.cjs

@@ -1,4 +1,4 @@
-const require_EnvironmentBuilder = require('./EnvironmentBuilder-W2wku49g.cjs');
+const require_EnvironmentBuilder = require('./EnvironmentBuilder-Djr1VsWM.cjs');
 const require_EnvironmentParser = require('./EnvironmentParser-Bt246UeP.cjs');
 
 exports.ConfigParser = require_EnvironmentParser.ConfigParser;

package/dist/index.d.cts

@@ -1,3 +1,3 @@
 import { EnvRecord, EnvValue, EnvironmentBuilder, EnvironmentBuilderOptions, EnvironmentResolver, InputValue, Resolvers, TypedInputValue, TypedResolvers, environmentCase } from "./EnvironmentBuilder-Xuf2Dd9u.cjs";
-import { ConfigParser, EnvironmentParser } from "./EnvironmentParser-tV-JjCg7.cjs";
+import { ConfigParser, EnvironmentParser } from "./EnvironmentParser-DtOL86NU.cjs";
 export { ConfigParser, EnvRecord, EnvValue, EnvironmentBuilder, EnvironmentBuilderOptions, EnvironmentParser, EnvironmentResolver, InputValue, Resolvers, TypedInputValue, TypedResolvers, environmentCase };

package/dist/index.d.mts

@@ -1,3 +1,3 @@
 import { EnvRecord, EnvValue, EnvironmentBuilder, EnvironmentBuilderOptions, EnvironmentResolver, InputValue, Resolvers, TypedInputValue, TypedResolvers, environmentCase } from "./EnvironmentBuilder-DHfDXJUm.mjs";
-import { ConfigParser, EnvironmentParser } from "./EnvironmentParser-CVWU1ooT.mjs";
+import { ConfigParser, EnvironmentParser } from "./EnvironmentParser-CY8TosTN.mjs";
 export { ConfigParser, EnvRecord, EnvValue, EnvironmentBuilder, EnvironmentBuilderOptions, EnvironmentParser, EnvironmentResolver, InputValue, Resolvers, TypedInputValue, TypedResolvers, environmentCase };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { EnvironmentBuilder, environmentCase } from "./EnvironmentBuilder-DfmYRBm-.mjs";
+import { EnvironmentBuilder, environmentCase } from "./EnvironmentBuilder-BSuHZm0y.mjs";
 import { ConfigParser, EnvironmentParser } from "./EnvironmentParser-c06agx31.mjs";
 
 export { ConfigParser, EnvironmentBuilder, EnvironmentParser, environmentCase };

package/dist/sst.cjs

@@ -1,5 +1,5 @@
-const require_EnvironmentBuilder = require('./EnvironmentBuilder-W2wku49g.cjs');
-const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-BuFw1hCe.cjs');
+const require_EnvironmentBuilder = require('./EnvironmentBuilder-Djr1VsWM.cjs');
+const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-wFnN2M5O.cjs');
 
 //#region src/sst.ts
 /**

package/dist/sst.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sst.cjs","names":["record: Record<string, SstResource | string>","SstEnvironmentBuilder"],"sources":["../src/sst.ts"],"sourcesContent":["// Re-export everything from SstEnvironmentBuilder\nexport {\n  SstEnvironmentBuilder,\n  sstResolvers,\n  ResourceType,\n  type ApiGatewayV2,\n  type Postgres,\n  type Function,\n  type Bucket,\n  type Vpc,\n  type Secret,\n  type SnsTopic,\n  type SstResource,\n  type ResourceProcessor,\n} from './SstEnvironmentBuilder';\n\n// Re-export environmentCase from EnvironmentBuilder\nexport { environmentCase } from './EnvironmentBuilder';\n\n// Re-export types from EnvironmentBuilder\nexport type {\n  EnvRecord,\n  EnvValue,\n  EnvironmentBuilderOptions,\n} from './EnvironmentBuilder';\n\n// Import for deprecated function\nimport {\n  SstEnvironmentBuilder,\n  type SstResource,\n} from './SstEnvironmentBuilder';\n\n/**\n * @deprecated Use `new SstEnvironmentBuilder(record).build()` instead.\n *\n * Normalizes SST resources and plain strings into environment variables.\n * Processes resources based on their type and converts names to environment case.\n *\n * @param record - Object containing resources and/or string values\n * @returns Normalized environment variables object\n *\n * @example\n * // Old usage (deprecated):\n * normalizeResourceEnv({ database: postgresResource })\n *\n * // New usage:\n * new SstEnvironmentBuilder({ database: postgresResource }).build()\n */\nexport function normalizeResourceEnv(\n  record: Record<string, SstResource | string>,\n): Record<string, string | number | boolean | Record<string, unknown>> {\n  return new SstEnvironmentBuilder(record).build();\n}\n\n// Keep Resource type as deprecated alias for backwards compatibility\n/**\n * @deprecated Use `SstResource` instead.\n */\nexport type Resource = SstResource;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAgB,qBACdA,QACqE;AACrE,QAAO,IAAIC,oDAAsB,QAAQ,OAAO;AACjD"}
+{"version":3,"file":"sst.cjs","names":["record: Record<string, SstResource | string>","SstEnvironmentBuilder"],"sources":["../src/sst.ts"],"sourcesContent":["// Re-export everything from SstEnvironmentBuilder\n\n// Re-export types from EnvironmentBuilder\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n\n// Re-export environmentCase from EnvironmentBuilder\nexport { environmentCase } from './EnvironmentBuilder';\nexport {\n\ttype ApiGatewayV2,\n\ttype Bucket,\n\ttype Function,\n\ttype Postgres,\n\ttype ResourceProcessor,\n\tResourceType,\n\ttype Secret,\n\ttype SnsTopic,\n\tSstEnvironmentBuilder,\n\ttype SstResource,\n\tsstResolvers,\n\ttype Vpc,\n} from './SstEnvironmentBuilder';\n\n// Import for deprecated function\nimport {\n\tSstEnvironmentBuilder,\n\ttype SstResource,\n} from './SstEnvironmentBuilder';\n\n/**\n * @deprecated Use `new SstEnvironmentBuilder(record).build()` instead.\n *\n * Normalizes SST resources and plain strings into environment variables.\n * Processes resources based on their type and converts names to environment case.\n *\n * @param record - Object containing resources and/or string values\n * @returns Normalized environment variables object\n *\n * @example\n * // Old usage (deprecated):\n * normalizeResourceEnv({ database: postgresResource })\n *\n * // New usage:\n * new SstEnvironmentBuilder({ database: postgresResource }).build()\n */\nexport function normalizeResourceEnv(\n\trecord: Record<string, SstResource | string>,\n): Record<string, string | number | boolean | Record<string, unknown>> {\n\treturn new SstEnvironmentBuilder(record).build();\n}\n\n// Keep Resource type as deprecated alias for backwards compatibility\n/**\n * @deprecated Use `SstResource` instead.\n */\nexport type Resource = SstResource;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAgB,qBACfA,QACsE;AACtE,QAAO,IAAIC,oDAAsB,QAAQ,OAAO;AAChD"}

package/dist/sst.d.cts

@@ -24,6 +24,7 @@ declare function normalizeResourceEnv(record: Record<string, SstResource | strin
  * @deprecated Use `SstResource` instead.
  */
 type Resource = SstResource;
+//# sourceMappingURL=sst.d.ts.map
 //#endregion
 export { ApiGatewayV2, Bucket, EnvRecord, EnvValue, EnvironmentBuilderOptions, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, environmentCase, normalizeResourceEnv, sstResolvers };
 //# sourceMappingURL=sst.d.cts.map

package/dist/sst.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sst.d.cts","names":[],"sources":["../src/sst.ts"],"sourcesContent":[],"mappings":";;;;;AAgDA;;;;;;AAES;AAQT;;;;;;;;;iBAVgB,oBAAA,SACP,eAAe,wBACrB,2CAA2C;;;;KAQlC,QAAA,GAAW"}

package/dist/sst.d.mts

@@ -24,6 +24,7 @@ declare function normalizeResourceEnv(record: Record<string, SstResource | strin
  * @deprecated Use `SstResource` instead.
  */
 type Resource = SstResource;
+//# sourceMappingURL=sst.d.ts.map
 //#endregion
 export { ApiGatewayV2, Bucket, EnvRecord, EnvValue, EnvironmentBuilderOptions, Function, Postgres, Resource, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, environmentCase, normalizeResourceEnv, sstResolvers };
 //# sourceMappingURL=sst.d.mts.map

package/dist/sst.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sst.d.mts","names":[],"sources":["../src/sst.ts"],"sourcesContent":[],"mappings":";;;;;AAgDA;;;;;;AAES;AAQT;;;;;;;;;iBAVgB,oBAAA,SACP,eAAe,wBACrB,2CAA2C;;;;KAQlC,QAAA,GAAW"}

package/dist/sst.mjs

@@ -1,5 +1,5 @@
-import { environmentCase } from "./EnvironmentBuilder-DfmYRBm-.mjs";
-import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-DEa3lTUB.mjs";
+import { environmentCase } from "./EnvironmentBuilder-BSuHZm0y.mjs";
+import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-BEBFSUYr.mjs";
 
 //#region src/sst.ts
 /**

package/dist/sst.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sst.mjs","names":["record: Record<string, SstResource | string>"],"sources":["../src/sst.ts"],"sourcesContent":["// Re-export everything from SstEnvironmentBuilder\nexport {\n  SstEnvironmentBuilder,\n  sstResolvers,\n  ResourceType,\n  type ApiGatewayV2,\n  type Postgres,\n  type Function,\n  type Bucket,\n  type Vpc,\n  type Secret,\n  type SnsTopic,\n  type SstResource,\n  type ResourceProcessor,\n} from './SstEnvironmentBuilder';\n\n// Re-export environmentCase from EnvironmentBuilder\nexport { environmentCase } from './EnvironmentBuilder';\n\n// Re-export types from EnvironmentBuilder\nexport type {\n  EnvRecord,\n  EnvValue,\n  EnvironmentBuilderOptions,\n} from './EnvironmentBuilder';\n\n// Import for deprecated function\nimport {\n  SstEnvironmentBuilder,\n  type SstResource,\n} from './SstEnvironmentBuilder';\n\n/**\n * @deprecated Use `new SstEnvironmentBuilder(record).build()` instead.\n *\n * Normalizes SST resources and plain strings into environment variables.\n * Processes resources based on their type and converts names to environment case.\n *\n * @param record - Object containing resources and/or string values\n * @returns Normalized environment variables object\n *\n * @example\n * // Old usage (deprecated):\n * normalizeResourceEnv({ database: postgresResource })\n *\n * // New usage:\n * new SstEnvironmentBuilder({ database: postgresResource }).build()\n */\nexport function normalizeResourceEnv(\n  record: Record<string, SstResource | string>,\n): Record<string, string | number | boolean | Record<string, unknown>> {\n  return new SstEnvironmentBuilder(record).build();\n}\n\n// Keep Resource type as deprecated alias for backwards compatibility\n/**\n * @deprecated Use `SstResource` instead.\n */\nexport type Resource = SstResource;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAgB,qBACdA,QACqE;AACrE,QAAO,IAAI,sBAAsB,QAAQ,OAAO;AACjD"}
+{"version":3,"file":"sst.mjs","names":["record: Record<string, SstResource | string>"],"sources":["../src/sst.ts"],"sourcesContent":["// Re-export everything from SstEnvironmentBuilder\n\n// Re-export types from EnvironmentBuilder\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n\n// Re-export environmentCase from EnvironmentBuilder\nexport { environmentCase } from './EnvironmentBuilder';\nexport {\n\ttype ApiGatewayV2,\n\ttype Bucket,\n\ttype Function,\n\ttype Postgres,\n\ttype ResourceProcessor,\n\tResourceType,\n\ttype Secret,\n\ttype SnsTopic,\n\tSstEnvironmentBuilder,\n\ttype SstResource,\n\tsstResolvers,\n\ttype Vpc,\n} from './SstEnvironmentBuilder';\n\n// Import for deprecated function\nimport {\n\tSstEnvironmentBuilder,\n\ttype SstResource,\n} from './SstEnvironmentBuilder';\n\n/**\n * @deprecated Use `new SstEnvironmentBuilder(record).build()` instead.\n *\n * Normalizes SST resources and plain strings into environment variables.\n * Processes resources based on their type and converts names to environment case.\n *\n * @param record - Object containing resources and/or string values\n * @returns Normalized environment variables object\n *\n * @example\n * // Old usage (deprecated):\n * normalizeResourceEnv({ database: postgresResource })\n *\n * // New usage:\n * new SstEnvironmentBuilder({ database: postgresResource }).build()\n */\nexport function normalizeResourceEnv(\n\trecord: Record<string, SstResource | string>,\n): Record<string, string | number | boolean | Record<string, unknown>> {\n\treturn new SstEnvironmentBuilder(record).build();\n}\n\n// Keep Resource type as deprecated alias for backwards compatibility\n/**\n * @deprecated Use `SstResource` instead.\n */\nexport type Resource = SstResource;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAgB,qBACfA,QACsE;AACtE,QAAO,IAAI,sBAAsB,QAAQ,OAAO;AAChD"}