@geekmidas/envkit 0.2.0 → 0.3.0

package/src/credentials.ts

@@ -0,0 +1,99 @@
+import { createDecipheriv } from 'node:crypto';
+
+/**
+ * Build-time injected encrypted credentials.
+ * These are replaced by tsdown/esbuild --define at build time.
+ */
+declare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;
+declare const __GKM_CREDENTIALS_IV__: string | undefined;
+
+/** AES-256-GCM auth tag length */
+const AUTH_TAG_LENGTH = 16;
+
+/**
+ * Decrypt credentials from encrypted payload.
+ * Exported for testing purposes.
+ */
+export function decryptCredentials(
+	encrypted: string,
+	iv: string,
+	masterKey: string,
+): Record<string, string> {
+	const key = Buffer.from(masterKey, 'hex');
+	const ivBuffer = Buffer.from(iv, 'hex');
+	const combined = Buffer.from(encrypted, 'base64');
+
+	// Split ciphertext and auth tag
+	const ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);
+	const authTag = combined.subarray(-AUTH_TAG_LENGTH);
+
+	// Decrypt using AES-256-GCM
+	const decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);
+	decipher.setAuthTag(authTag);
+
+	const plaintext = Buffer.concat([
+		decipher.update(ciphertext),
+		decipher.final(),
+	]);
+
+	return JSON.parse(plaintext.toString('utf-8'));
+}
+
+/**
+ * Credentials object for use with EnvironmentParser.
+ *
+ * In development mode (no embedded credentials), this returns an empty object.
+ * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
+ * environment variable.
+ *
+ * @example
+ * ```typescript
+ * import { EnvironmentParser } from '@geekmidas/envkit';
+ * import { Credentials } from '@geekmidas/envkit/credentials';
+ *
+ * export const envParser = new EnvironmentParser({...process.env, ...Credentials})
+ *   .create((get) => ({
+ *     database: {
+ *       url: get('DATABASE_URL').string(),
+ *     },
+ *   }))
+ *   .parse();
+ * ```
+ */
+export const Credentials: Record<string, string> = (() => {
+	// Development mode - no credentials embedded at build time
+	if (
+		typeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||
+		typeof __GKM_CREDENTIALS_IV__ === 'undefined'
+	) {
+		return {};
+	}
+
+	// Production mode - decrypt credentials using master key
+	const masterKey = process.env.GKM_MASTER_KEY;
+
+	if (!masterKey) {
+		// Log warning but don't throw - allows graceful fallback to env vars
+		console.error(
+			'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',
+		);
+		console.error(
+			'[gkm] Falling back to environment variables. Some secrets may be missing.',
+		);
+		return {};
+	}
+
+	try {
+		return decryptCredentials(
+			__GKM_ENCRYPTED_CREDENTIALS__,
+			__GKM_CREDENTIALS_IV__,
+			masterKey,
+		);
+	} catch (error) {
+		console.error('[gkm] Failed to decrypt credentials:', error);
+		console.error('[gkm] Falling back to environment variables.');
+		return {};
+	}
+})();
+
+export default Credentials;

package/src/index.ts

@@ -1,13 +1,13 @@
-export { EnvironmentParser, ConfigParser } from './EnvironmentParser';
 export {
-  EnvironmentBuilder,
-  environmentCase,
-  type EnvRecord,
-  type EnvValue,
-  type EnvironmentResolver,
-  type Resolvers,
-  type EnvironmentBuilderOptions,
-  type InputValue,
-  type TypedInputValue,
-  type TypedResolvers,
+	EnvironmentBuilder,
+	type EnvironmentBuilderOptions,
+	type EnvironmentResolver,
+	type EnvRecord,
+	type EnvValue,
+	environmentCase,
+	type InputValue,
+	type Resolvers,
+	type TypedInputValue,
+	type TypedResolvers,
 } from './EnvironmentBuilder';
+export { ConfigParser, EnvironmentParser } from './EnvironmentParser';

package/src/sst.ts

@@ -1,33 +1,33 @@
 // Re-export everything from SstEnvironmentBuilder
-export {
-  SstEnvironmentBuilder,
-  sstResolvers,
-  ResourceType,
-  type ApiGatewayV2,
-  type Postgres,
-  type Function,
-  type Bucket,
-  type Vpc,
-  type Secret,
-  type SnsTopic,
-  type SstResource,
-  type ResourceProcessor,
-} from './SstEnvironmentBuilder';
-
-// Re-export environmentCase from EnvironmentBuilder
-export { environmentCase } from './EnvironmentBuilder';
 
 // Re-export types from EnvironmentBuilder
 export type {
-  EnvRecord,
-  EnvValue,
-  EnvironmentBuilderOptions,
+	EnvironmentBuilderOptions,
+	EnvRecord,
+	EnvValue,
 } from './EnvironmentBuilder';
 
+// Re-export environmentCase from EnvironmentBuilder
+export { environmentCase } from './EnvironmentBuilder';
+export {
+	type ApiGatewayV2,
+	type Bucket,
+	type Function,
+	type Postgres,
+	type ResourceProcessor,
+	ResourceType,
+	type Secret,
+	type SnsTopic,
+	SstEnvironmentBuilder,
+	type SstResource,
+	sstResolvers,
+	type Vpc,
+} from './SstEnvironmentBuilder';
+
 // Import for deprecated function
 import {
-  SstEnvironmentBuilder,
-  type SstResource,
+	SstEnvironmentBuilder,
+	type SstResource,
 } from './SstEnvironmentBuilder';
 
 /**
@@ -47,9 +47,9 @@ import {
  * new SstEnvironmentBuilder({ database: postgresResource }).build()
  */
 export function normalizeResourceEnv(
-  record: Record<string, SstResource | string>,
+	record: Record<string, SstResource | string>,
 ): Record<string, string | number | boolean | Record<string, unknown>> {
-  return new SstEnvironmentBuilder(record).build();
+	return new SstEnvironmentBuilder(record).build();
 }
 
 // Keep Resource type as deprecated alias for backwards compatibility

package/sst-env.d.ts

@@ -6,4 +6,3 @@
 /// <reference path="../../sst-env.d.ts" />
 
 import 'sst';
-export {};

package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "composite": true
+  },
+  "include": ["src/**/*"]
+}

package/dist/EnvironmentBuilder-DfmYRBm-.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"EnvironmentBuilder-DfmYRBm-.mjs","names":["name: string","record: TRecord","resolvers: TResolvers","options: EnvironmentBuilderOptions","env: EnvRecord"],"sources":["../src/EnvironmentBuilder.ts"],"sourcesContent":["import snakecase from 'lodash.snakecase';\n\n/**\n * Converts a string to environment variable case format (UPPER_SNAKE_CASE).\n * Numbers following underscores are preserved without the underscore.\n *\n * @param name - The string to convert\n * @returns The converted string in environment variable format\n *\n * @example\n * environmentCase('myVariable') // 'MY_VARIABLE'\n * environmentCase('apiV2') // 'APIV2'\n */\nexport function environmentCase(name: string): string {\n  return snakecase(name)\n    .toUpperCase()\n    .replace(/_\\d+/g, (r) => {\n      return r.replace('_', '');\n    });\n}\n\n/**\n * A record of environment variable names to their values.\n * Values can be primitives or nested records.\n */\nexport interface EnvRecord {\n  [key: string]: EnvValue;\n}\n\n/**\n * Represents a value that can be stored in an environment record.\n * Can be a primitive value or a nested record of environment values.\n */\nexport type EnvValue = string | number | boolean | EnvRecord;\n\n/**\n * A resolver function that converts a typed value into environment variables.\n *\n * @template T - The type of value this resolver handles (without the `type` key)\n * @param key - The key name from the input record\n * @param value - The value to resolve (without the `type` key)\n * @returns A record of environment variable names to their values\n */\nexport type EnvironmentResolver<T = any> = (key: string, value: T) => EnvRecord;\n\n/**\n * A map of type discriminator strings to their resolver functions.\n */\nexport type Resolvers = Record<string, EnvironmentResolver<any>>;\n\n/**\n * Options for configuring the EnvironmentBuilder.\n */\nexport interface EnvironmentBuilderOptions {\n  /**\n   * Handler called when a value's type doesn't match any registered resolver.\n   * Defaults to console.warn.\n   */\n  onUnmatchedValue?: (key: string, value: unknown) => void;\n}\n\n/**\n * Input value type - either a string or an object with a `type` discriminator.\n */\nexport type InputValue = string | { type: string; [key: string]: unknown };\n\n/**\n * Base type for typed input values with a specific type discriminator.\n */\nexport type TypedInputValue<TType extends string = string> = {\n  type: TType;\n  [key: string]: unknown;\n};\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n  [K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n  TRecord extends Record<string, InputValue>,\n  TType extends string,\n> = {\n  [K in keyof TRecord]: TRecord[K] extends { type: TType }\n    ? OmitType<TRecord[K]>\n    : never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers based on the input record.\n * Keys are the `type` values, values are resolver functions receiving the value without `type`.\n */\nexport type TypedResolvers<TRecord extends Record<string, InputValue>> = {\n  [TType in AllTypeValues<TRecord>]: EnvironmentResolver<\n    ValueForType<TRecord, TType>\n  >;\n};\n\n/**\n * A generic, extensible class for building environment variables from\n * objects with type-discriminated values.\n *\n * @template TRecord - The input record type for type inference\n * @template TResolvers - The resolvers type (defaults to TypedResolvers<TRecord>)\n *\n * @example\n * ```typescript\n * const env = new EnvironmentBuilder(\n *   {\n *     apiKey: { type: 'secret', value: 'xyz' },\n *     appName: 'my-app'\n *   },\n *   {\n *     // `value` is typed as { value: string } (without `type`)\n *     secret: (key, value) => ({ [key]: value.value }),\n *   }\n * ).build();\n * // { API_KEY: 'xyz', APP_NAME: 'my-app' }\n * ```\n */\nexport class EnvironmentBuilder<\n  TRecord extends Record<string, InputValue> = Record<string, InputValue>,\n  TResolvers extends Resolvers = TypedResolvers<TRecord>,\n> {\n  private readonly record: TRecord;\n  private readonly resolvers: TResolvers;\n  private readonly options: Required<EnvironmentBuilderOptions>;\n\n  constructor(\n    record: TRecord,\n    resolvers: TResolvers,\n    options: EnvironmentBuilderOptions = {},\n  ) {\n    this.record = record;\n    this.resolvers = resolvers;\n    this.options = {\n      onUnmatchedValue:\n        options.onUnmatchedValue ??\n        ((key, value) => {\n          console.warn(`No resolver found for key \"${key}\":`, { value });\n        }),\n    };\n  }\n\n  /**\n   * Build environment variables from the input record.\n   *\n   * - Plain string values are passed through with key transformation\n   * - Object values with a `type` property are matched against resolvers\n   * - Resolvers receive values without the `type` key\n   * - Only root-level keys are transformed to UPPER_SNAKE_CASE\n   *\n   * @returns A record of environment variables\n   */\n  build(): EnvRecord {\n    const env: EnvRecord = {};\n\n    for (const [key, value] of Object.entries(this.record)) {\n      // Handle plain string values\n      if (typeof value === 'string') {\n        env[environmentCase(key)] = value;\n        continue;\n      }\n\n      // Handle objects with type discriminator\n      const { type, ...rest } = value;\n      const resolver = this.resolvers[type];\n      if (resolver) {\n        const resolved = resolver(key, rest);\n        // Transform only root-level keys from resolver output\n        for (const [resolvedKey, resolvedValue] of Object.entries(resolved)) {\n          env[environmentCase(resolvedKey)] = resolvedValue;\n        }\n      } else {\n        this.options.onUnmatchedValue(key, value);\n      }\n    }\n\n    return env;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,SAAgB,gBAAgBA,MAAsB;AACpD,QAAO,UAAU,KAAK,CACnB,aAAa,CACb,QAAQ,SAAS,CAAC,MAAM;AACvB,SAAO,EAAE,QAAQ,KAAK,GAAG;CAC1B,EAAC;AACL;;;;;;;;;;;;;;;;;;;;;;;AAoHD,IAAa,qBAAb,MAGE;CACA,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YACEC,QACAC,WACAC,UAAqC,CAAE,GACvC;AACA,OAAK,SAAS;AACd,OAAK,YAAY;AACjB,OAAK,UAAU,EACb,kBACE,QAAQ,qBACP,CAAC,KAAK,UAAU;AACf,WAAQ,MAAM,6BAA6B,IAAI,KAAK,EAAE,MAAO,EAAC;EAC/D,GACJ;CACF;;;;;;;;;;;CAYD,QAAmB;EACjB,MAAMC,MAAiB,CAAE;AAEzB,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,KAAK,OAAO,EAAE;AAEtD,cAAW,UAAU,UAAU;AAC7B,QAAI,gBAAgB,IAAI,IAAI;AAC5B;GACD;GAGD,MAAM,EAAE,KAAM,GAAG,MAAM,GAAG;GAC1B,MAAM,WAAW,KAAK,UAAU;AAChC,OAAI,UAAU;IACZ,MAAM,WAAW,SAAS,KAAK,KAAK;AAEpC,SAAK,MAAM,CAAC,aAAa,cAAc,IAAI,OAAO,QAAQ,SAAS,CACjE,KAAI,gBAAgB,YAAY,IAAI;GAEvC,MACC,MAAK,QAAQ,iBAAiB,KAAK,MAAM;EAE5C;AAED,SAAO;CACR;AACF"}

package/dist/EnvironmentBuilder-W2wku49g.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"EnvironmentBuilder-W2wku49g.cjs","names":["name: string","record: TRecord","resolvers: TResolvers","options: EnvironmentBuilderOptions","env: EnvRecord"],"sources":["../src/EnvironmentBuilder.ts"],"sourcesContent":["import snakecase from 'lodash.snakecase';\n\n/**\n * Converts a string to environment variable case format (UPPER_SNAKE_CASE).\n * Numbers following underscores are preserved without the underscore.\n *\n * @param name - The string to convert\n * @returns The converted string in environment variable format\n *\n * @example\n * environmentCase('myVariable') // 'MY_VARIABLE'\n * environmentCase('apiV2') // 'APIV2'\n */\nexport function environmentCase(name: string): string {\n  return snakecase(name)\n    .toUpperCase()\n    .replace(/_\\d+/g, (r) => {\n      return r.replace('_', '');\n    });\n}\n\n/**\n * A record of environment variable names to their values.\n * Values can be primitives or nested records.\n */\nexport interface EnvRecord {\n  [key: string]: EnvValue;\n}\n\n/**\n * Represents a value that can be stored in an environment record.\n * Can be a primitive value or a nested record of environment values.\n */\nexport type EnvValue = string | number | boolean | EnvRecord;\n\n/**\n * A resolver function that converts a typed value into environment variables.\n *\n * @template T - The type of value this resolver handles (without the `type` key)\n * @param key - The key name from the input record\n * @param value - The value to resolve (without the `type` key)\n * @returns A record of environment variable names to their values\n */\nexport type EnvironmentResolver<T = any> = (key: string, value: T) => EnvRecord;\n\n/**\n * A map of type discriminator strings to their resolver functions.\n */\nexport type Resolvers = Record<string, EnvironmentResolver<any>>;\n\n/**\n * Options for configuring the EnvironmentBuilder.\n */\nexport interface EnvironmentBuilderOptions {\n  /**\n   * Handler called when a value's type doesn't match any registered resolver.\n   * Defaults to console.warn.\n   */\n  onUnmatchedValue?: (key: string, value: unknown) => void;\n}\n\n/**\n * Input value type - either a string or an object with a `type` discriminator.\n */\nexport type InputValue = string | { type: string; [key: string]: unknown };\n\n/**\n * Base type for typed input values with a specific type discriminator.\n */\nexport type TypedInputValue<TType extends string = string> = {\n  type: TType;\n  [key: string]: unknown;\n};\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n  [K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n  TRecord extends Record<string, InputValue>,\n  TType extends string,\n> = {\n  [K in keyof TRecord]: TRecord[K] extends { type: TType }\n    ? OmitType<TRecord[K]>\n    : never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers based on the input record.\n * Keys are the `type` values, values are resolver functions receiving the value without `type`.\n */\nexport type TypedResolvers<TRecord extends Record<string, InputValue>> = {\n  [TType in AllTypeValues<TRecord>]: EnvironmentResolver<\n    ValueForType<TRecord, TType>\n  >;\n};\n\n/**\n * A generic, extensible class for building environment variables from\n * objects with type-discriminated values.\n *\n * @template TRecord - The input record type for type inference\n * @template TResolvers - The resolvers type (defaults to TypedResolvers<TRecord>)\n *\n * @example\n * ```typescript\n * const env = new EnvironmentBuilder(\n *   {\n *     apiKey: { type: 'secret', value: 'xyz' },\n *     appName: 'my-app'\n *   },\n *   {\n *     // `value` is typed as { value: string } (without `type`)\n *     secret: (key, value) => ({ [key]: value.value }),\n *   }\n * ).build();\n * // { API_KEY: 'xyz', APP_NAME: 'my-app' }\n * ```\n */\nexport class EnvironmentBuilder<\n  TRecord extends Record<string, InputValue> = Record<string, InputValue>,\n  TResolvers extends Resolvers = TypedResolvers<TRecord>,\n> {\n  private readonly record: TRecord;\n  private readonly resolvers: TResolvers;\n  private readonly options: Required<EnvironmentBuilderOptions>;\n\n  constructor(\n    record: TRecord,\n    resolvers: TResolvers,\n    options: EnvironmentBuilderOptions = {},\n  ) {\n    this.record = record;\n    this.resolvers = resolvers;\n    this.options = {\n      onUnmatchedValue:\n        options.onUnmatchedValue ??\n        ((key, value) => {\n          console.warn(`No resolver found for key \"${key}\":`, { value });\n        }),\n    };\n  }\n\n  /**\n   * Build environment variables from the input record.\n   *\n   * - Plain string values are passed through with key transformation\n   * - Object values with a `type` property are matched against resolvers\n   * - Resolvers receive values without the `type` key\n   * - Only root-level keys are transformed to UPPER_SNAKE_CASE\n   *\n   * @returns A record of environment variables\n   */\n  build(): EnvRecord {\n    const env: EnvRecord = {};\n\n    for (const [key, value] of Object.entries(this.record)) {\n      // Handle plain string values\n      if (typeof value === 'string') {\n        env[environmentCase(key)] = value;\n        continue;\n      }\n\n      // Handle objects with type discriminator\n      const { type, ...rest } = value;\n      const resolver = this.resolvers[type];\n      if (resolver) {\n        const resolved = resolver(key, rest);\n        // Transform only root-level keys from resolver output\n        for (const [resolvedKey, resolvedValue] of Object.entries(resolved)) {\n          env[environmentCase(resolvedKey)] = resolvedValue;\n        }\n      } else {\n        this.options.onUnmatchedValue(key, value);\n      }\n    }\n\n    return env;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAaA,SAAgB,gBAAgBA,MAAsB;AACpD,QAAO,8BAAU,KAAK,CACnB,aAAa,CACb,QAAQ,SAAS,CAAC,MAAM;AACvB,SAAO,EAAE,QAAQ,KAAK,GAAG;CAC1B,EAAC;AACL;;;;;;;;;;;;;;;;;;;;;;;AAoHD,IAAa,qBAAb,MAGE;CACA,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YACEC,QACAC,WACAC,UAAqC,CAAE,GACvC;AACA,OAAK,SAAS;AACd,OAAK,YAAY;AACjB,OAAK,UAAU,EACb,kBACE,QAAQ,qBACP,CAAC,KAAK,UAAU;AACf,WAAQ,MAAM,6BAA6B,IAAI,KAAK,EAAE,MAAO,EAAC;EAC/D,GACJ;CACF;;;;;;;;;;;CAYD,QAAmB;EACjB,MAAMC,MAAiB,CAAE;AAEzB,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,KAAK,OAAO,EAAE;AAEtD,cAAW,UAAU,UAAU;AAC7B,QAAI,gBAAgB,IAAI,IAAI;AAC5B;GACD;GAGD,MAAM,EAAE,KAAM,GAAG,MAAM,GAAG;GAC1B,MAAM,WAAW,KAAK,UAAU;AAChC,OAAI,UAAU;IACZ,MAAM,WAAW,SAAS,KAAK,KAAK;AAEpC,SAAK,MAAM,CAAC,aAAa,cAAc,IAAI,OAAO,QAAQ,SAAS,CACjE,KAAI,gBAAgB,YAAY,IAAI;GAEvC,MACC,MAAK,QAAQ,iBAAiB,KAAK,MAAM;EAE5C;AAED,SAAO;CACR;AACF"}

package/dist/SstEnvironmentBuilder-BuFw1hCe.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-BuFw1hCe.cjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers","EnvironmentBuilder"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n  type EnvRecord,\n  EnvironmentBuilder,\n  type EnvironmentBuilderOptions,\n  type EnvironmentResolver,\n  type InputValue,\n  type Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n  // Legacy format (dot notation)\n  ApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n  Postgres = 'sst.aws.Postgres',\n  Function = 'sst.aws.Function',\n  Bucket = 'sst.aws.Bucket',\n  Vpc = 'sst.aws.Vpc',\n  Secret = 'sst.sst.Secret',\n\n  // Modern format (colon notation)\n  SSTSecret = 'sst:sst:Secret',\n  SSTFunction = 'sst:sst:Function',\n  SSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n  SSTPostgres = 'sst:aws:Postgres',\n  SSTBucket = 'sst:aws:Bucket',\n  SnsTopic = 'sst:aws:SnsTopic',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n  url: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n  type: ResourceType.Postgres | ResourceType.SSTPostgres;\n  database: string;\n  host: string;\n  password: string;\n  port: number;\n  username: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n  type: ResourceType.Function | ResourceType.SSTFunction;\n  name: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n  type: ResourceType.Bucket | ResourceType.SSTBucket;\n  name: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n  type: ResourceType.Vpc;\n  bastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n  type: ResourceType.Secret | ResourceType.SSTSecret;\n  value: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n  type: ResourceType.SnsTopic;\n  arn: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n  | ApiGatewayV2\n  | Postgres\n  | Function\n  | Bucket\n  | Vpc\n  | Secret\n  | SnsTopic;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n  [name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n  [`${key}Name`]: value.database,\n  [`${key}Host`]: value.host,\n  [`${key}Password`]: value.password,\n  [`${key}Port`]: value.port,\n  [`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n  [`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n  [`${name}Arn`]: value.arn,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n  // Legacy format\n  [ResourceType.ApiGatewayV2]: noopResolver,\n  [ResourceType.Function]: noopResolver,\n  [ResourceType.Vpc]: noopResolver,\n  [ResourceType.Secret]: secretResolver,\n  [ResourceType.Postgres]: postgresResolver,\n  [ResourceType.Bucket]: bucketResolver,\n\n  // Modern format\n  [ResourceType.SSTSecret]: secretResolver,\n  [ResourceType.SSTBucket]: bucketResolver,\n  [ResourceType.SSTFunction]: noopResolver,\n  [ResourceType.SSTPostgres]: postgresResolver,\n  [ResourceType.SSTApiGatewayV2]: noopResolver,\n  [ResourceType.SnsTopic]: topicResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n  [K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n  AllTypeValues<TRecord>,\n  SstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n  TRecord extends Record<string, InputValue>,\n  TType extends string,\n> = {\n  [K in keyof TRecord]: TRecord[K] extends { type: TType }\n    ? OmitType<TRecord[K]>\n    : never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n  CustomTypeValues<TRecord> extends never\n    ? Resolvers | undefined\n    : {\n        [TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n          ValueForType<TRecord, TType>\n        >;\n      };\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n  TRecord extends Record<string, SstResource | InputValue | string>,\n> {\n  private readonly builder: EnvironmentBuilder<\n    Record<string, InputValue>,\n    Resolvers\n  >;\n\n  /**\n   * Create a new SST environment builder.\n   *\n   * @param record - Object containing SST resources, custom resources, and/or string values\n   * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n   * @param options - Optional configuration options\n   */\n  constructor(\n    record: TRecord,\n    additionalResolvers?: CustomResolvers<TRecord>,\n    options?: EnvironmentBuilderOptions,\n  ) {\n    // Merge resolvers with custom ones taking precedence\n    const mergedResolvers: Resolvers = additionalResolvers\n      ? { ...sstResolvers, ...additionalResolvers }\n      : sstResolvers;\n\n    this.builder = new EnvironmentBuilder(\n      record as Record<string, InputValue>,\n      mergedResolvers,\n      options,\n    );\n  }\n\n  /**\n   * Build environment variables from the input record.\n   *\n   * @returns A record of environment variables\n   */\n  build(): EnvRecord {\n    return this.builder.build();\n  }\n}\n\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\nexport type {\n  EnvRecord,\n  EnvValue,\n  EnvironmentBuilderOptions,\n} from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEL;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;;AACD;AA8FD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC3D,OAAO,MAAM,MACf;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC7D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC3B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC1D,EAAE,KAAK,QAAQ,MAAM,KACxB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC3D,EAAE,KAAK,OAAO,MAAM,IACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAEpC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACA,AAAiB;;;;;;;;CAYjB,YACEC,QACAC,qBACAC,SACA;EAEA,MAAMC,kBAA6B,sBAC/B;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEJ,OAAK,UAAU,IAAIC,8CACjB,QACA,iBACA;CAEH;;;;;;CAOD,QAAmB;AACjB,SAAO,KAAK,QAAQ,OAAO;CAC5B;AACF"}

package/dist/SstEnvironmentBuilder-DEa3lTUB.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-DEa3lTUB.mjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n  type EnvRecord,\n  EnvironmentBuilder,\n  type EnvironmentBuilderOptions,\n  type EnvironmentResolver,\n  type InputValue,\n  type Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n  // Legacy format (dot notation)\n  ApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n  Postgres = 'sst.aws.Postgres',\n  Function = 'sst.aws.Function',\n  Bucket = 'sst.aws.Bucket',\n  Vpc = 'sst.aws.Vpc',\n  Secret = 'sst.sst.Secret',\n\n  // Modern format (colon notation)\n  SSTSecret = 'sst:sst:Secret',\n  SSTFunction = 'sst:sst:Function',\n  SSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n  SSTPostgres = 'sst:aws:Postgres',\n  SSTBucket = 'sst:aws:Bucket',\n  SnsTopic = 'sst:aws:SnsTopic',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n  type: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n  url: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n  type: ResourceType.Postgres | ResourceType.SSTPostgres;\n  database: string;\n  host: string;\n  password: string;\n  port: number;\n  username: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n  type: ResourceType.Function | ResourceType.SSTFunction;\n  name: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n  type: ResourceType.Bucket | ResourceType.SSTBucket;\n  name: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n  type: ResourceType.Vpc;\n  bastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n  type: ResourceType.Secret | ResourceType.SSTSecret;\n  value: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n  type: ResourceType.SnsTopic;\n  arn: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n  | ApiGatewayV2\n  | Postgres\n  | Function\n  | Bucket\n  | Vpc\n  | Secret\n  | SnsTopic;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n  [name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n  [`${key}Name`]: value.database,\n  [`${key}Host`]: value.host,\n  [`${key}Password`]: value.password,\n  [`${key}Port`]: value.port,\n  [`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n  [`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n  [`${name}Arn`]: value.arn,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n  // Legacy format\n  [ResourceType.ApiGatewayV2]: noopResolver,\n  [ResourceType.Function]: noopResolver,\n  [ResourceType.Vpc]: noopResolver,\n  [ResourceType.Secret]: secretResolver,\n  [ResourceType.Postgres]: postgresResolver,\n  [ResourceType.Bucket]: bucketResolver,\n\n  // Modern format\n  [ResourceType.SSTSecret]: secretResolver,\n  [ResourceType.SSTBucket]: bucketResolver,\n  [ResourceType.SSTFunction]: noopResolver,\n  [ResourceType.SSTPostgres]: postgresResolver,\n  [ResourceType.SSTApiGatewayV2]: noopResolver,\n  [ResourceType.SnsTopic]: topicResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n  [K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n  AllTypeValues<TRecord>,\n  SstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n  TRecord extends Record<string, InputValue>,\n  TType extends string,\n> = {\n  [K in keyof TRecord]: TRecord[K] extends { type: TType }\n    ? OmitType<TRecord[K]>\n    : never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n  CustomTypeValues<TRecord> extends never\n    ? Resolvers | undefined\n    : {\n        [TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n          ValueForType<TRecord, TType>\n        >;\n      };\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n  TRecord extends Record<string, SstResource | InputValue | string>,\n> {\n  private readonly builder: EnvironmentBuilder<\n    Record<string, InputValue>,\n    Resolvers\n  >;\n\n  /**\n   * Create a new SST environment builder.\n   *\n   * @param record - Object containing SST resources, custom resources, and/or string values\n   * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n   * @param options - Optional configuration options\n   */\n  constructor(\n    record: TRecord,\n    additionalResolvers?: CustomResolvers<TRecord>,\n    options?: EnvironmentBuilderOptions,\n  ) {\n    // Merge resolvers with custom ones taking precedence\n    const mergedResolvers: Resolvers = additionalResolvers\n      ? { ...sstResolvers, ...additionalResolvers }\n      : sstResolvers;\n\n    this.builder = new EnvironmentBuilder(\n      record as Record<string, InputValue>,\n      mergedResolvers,\n      options,\n    );\n  }\n\n  /**\n   * Build environment variables from the input record.\n   *\n   * @returns A record of environment variables\n   */\n  build(): EnvRecord {\n    return this.builder.build();\n  }\n}\n\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\nexport type {\n  EnvRecord,\n  EnvValue,\n  EnvironmentBuilderOptions,\n} from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEL;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;;AACD;AA8FD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC3D,OAAO,MAAM,MACf;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC7D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC3B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC1D,EAAE,KAAK,QAAQ,MAAM,KACxB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC3D,EAAE,KAAK,OAAO,MAAM,IACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAEpC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACA,AAAiB;;;;;;;;CAYjB,YACEC,QACAC,qBACAC,SACA;EAEA,MAAMC,kBAA6B,sBAC/B;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEJ,OAAK,UAAU,IAAI,mBACjB,QACA,iBACA;CAEH;;;;;;CAOD,QAAmB;AACjB,SAAO,KAAK,QAAQ,OAAO;CAC5B;AACF"}