@geekmidas/envkit 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @geekmidas/envkit
 
+## 1.0.4
+
+### Patch Changes
+
+- 🐛 [`a483d4c`](https://github.com/geekmidas/toolbox/commit/a483d4c193d27673ccad2aeed6f56b1c5708b5b4) Thanks [@geekmidas](https://github.com/geekmidas)! - Fix credentials injection to work with esm/cjs
+
+## 1.0.3
+
+### Patch Changes
+
+- ✨ [`bf094cd`](https://github.com/geekmidas/toolbox/commit/bf094cd29df2d18e75213f0976c0c9ff8047d14c) Thanks [@geekmidas](https://github.com/geekmidas)! - Add legacy dynamo resolution
+
 ## 1.0.2
 
 ### Patch Changes

package/dist/{SstEnvironmentBuilder-BTJh8Tgo.d.mts → SstEnvironmentBuilder-BRAcRQp2.d.mts}

@@ -13,6 +13,7 @@ declare enum ResourceType {
   Bucket = "sst.aws.Bucket",
   Vpc = "sst.aws.Vpc",
   Secret = "sst.sst.Secret",
+  Dynamo = "sst.aws.Dynamo",
   SSTSecret = "sst:sst:Secret",
   SSTFunction = "sst:sst:Function",
   SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
@@ -80,7 +81,7 @@ type SnsTopic = {
  * AWS DynamoDB Table resource type.
  */
 type Dynamo = {
-  type: ResourceType.SSTDynamo;
+  type: ResourceType.Dynamo | ResourceType.SSTDynamo;
   name: string;
 };
 /**
@@ -182,4 +183,4 @@ declare class SstEnvironmentBuilder<TRecord extends Record<string, SstResource |
 }
 //#endregion
 export { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers };
-//# sourceMappingURL=SstEnvironmentBuilder-BTJh8Tgo.d.mts.map
+//# sourceMappingURL=SstEnvironmentBuilder-BRAcRQp2.d.mts.map

package/dist/SstEnvironmentBuilder-BRAcRQp2.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SstEnvironmentBuilder-BRAcRQp2.d.mts","names":[],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":[],"mappings":";;;;;;AAaA;AAwBA;AAAwB,aAxBZ,YAAA;EAwBY,YACjB,GAAA,sBAAa;EAAY,QAAG,GAAA,kBAAa;EAAe,QAAA,GAAA,kBAAA;EAQnD,MAAA,GAAA,gBAAQ;EAAA,GAAA,GAAA,aAAA;EAAA,MACb,GAAA,gBAAa;EAAQ,MAAG,GAAA,gBAAa;EAAW,SAAA,GAAA,gBAAA;EAW3C,WAAQ,GAAA,kBAAA;EAAA,eAAA,GAAA,sBAAA;EAAA,WACb,GAAA,kBAAa;EAAQ,SAAG,GAAA,gBAAa;EAAW,QAAA,GAAA,kBAAA;EAO3C,SAAM,GAAA,gBAAA;;;;AACiC;AAOnD;AAQY,KA7CA,YAAA,GA6CM;EAAA,IAAA,EA5CX,YAAA,CAAa,YA4CF,GA5CiB,YAAA,CAAa,eA4C9B;EAAA,GACX,EAAA,MAAA;CAAmB;AAAyB;AAOnD;AAQA;;AACO,KArDK,QAAA,GAqDQ;EAAM,IAAG,EApDtB,YAAA,CAAa,QAoDsB,GApDX,YAAA,CAAa,WAoDF;EAAS,QAAA,EAAA,MAAA;EAOvC,IAAA,EAAA,MAAA;EAAW,QAAA,EAAA,MAAA;EAAA,IACpB,EAAA,MAAA;EAAY,QACZ,EAAA,MAAA;CAAQ;;;;AAKR,KAvDS,QAAA,GAuDT;EAAQ,IACR,EAvDI,YAAA,CAAa,QAuDjB,GAvD4B,YAAA,CAAa,WAuDzC;EAAM,IAAA,EAAA,MAAA;AAiBT,CAAA;;;;AAAwE,KAjE5D,MAAA,GAiE4D;EAiC3D,IAAA,EAjGN,YAAA,CAAa,MAmHnB,GAnH4B,YAAA,CAAa,SAmHzC;EAKI,IAAA,EAAA,MAAA;AAAuC,CAAA;;;;AAKwB,KAtHxD,GAAA,GAsHwD;EAK/D,IAAA,EA1HE,YAAA,CAAa,GA0HP;EAAA,OAAA,EAAA,MAAA;CAAA;;;AAAuC;AAK/C,KAxHO,MAAA,GAwHM;EAAA,IAAA,EAvHX,YAAA,CAAa,MAuHF,GAvHW,YAAA,CAAa,SAuHxB;EAAA,KAAgC,EAAA,MAAA;CAAU;;;;AACrC,KAjHX,QAAA,GAiHW;EAAW,IAC1B,EAjHD,YAAA,CAAa,QAiHZ;EAAO,GAAA,EAAA,MAAA;AAAA,CAAA;;;;AAMA,KAhHH,MAAA,GAgHG;EAAO,IAArB,EA/GM,YAAA,CAAa,MA+GnB,GA/G4B,YAAA,CAAa,SA+GzC;EAAa,IACb,EAAA,MAAA;CAAqB;AAFqD;AAAA;;AAS3C,KAhHpB,WAAA,GACT,YA+G6B,GA9G7B,QA8G6B,GA7G7B,QA6G6B,GA5G7B,MA4G6B,GA3G7B,GA2G6B,GA1G7B,MA0G6B,GAzG7B,QAyG6B,GAxG7B,MAwG6B;;;;;;;;;AAMxB,KA7FI,iBA6FJ,CAAA,CAAA,CAAA,GAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,EA7FiD,CA6FjD,EAAA,GA7FuD,SA6FvD;AAAO;AAAA;;AAKqC,cAjEvC,YAiEuC,EAjEzB,SAiEyB;;;;KA1C/C,qBAAA,GA4CD,GA5C4B,YA4C5B,EAAA;;;;KAvCC,WA0CsB,CAAA,CAAA,CAAA,GA1CL,CA0CK,SAAA;EAAK,IAA3B,EAAA,KAAA,WAAA,MAAA;CAAY,GA1CkD,CA0ClD,GADyB,KAAA;AAAmB;AAkC7D;;KAtEK,QAuE2B,CAAA,CAAA,CAAA,GAvEb,CAuEa,SAAA;EAAW,IAAG,EAAA,MAAA;CAAU,GAvER,IAuE/B,CAvEoC,CAuEpC,EAAA,MAAA,CAAA,GAAA,KAAA;;;;KAlEZ,aAmFO,CAAA,gBAnFuB,MAmFvB,CAAA,MAAA,EAnFsC,UAmFtC,CAAA,CAAA,GAAA,QAmBF,MArGG,OAqGH,GArGa,WAqGb,CArGyB,OAqGzB,CArGiC,CAqGjC,CAAA,CAAA,EAAS,CAAA,MApGX,OAoGW,CAAA;;;;KA/Fd,iCAAiC,eAAe,eAAe,QACnE,cAAc,UACd;;;;KAMI,6BACY,eAAe,mDAGnB,UAAU,QAAQ;QAAmB;IAC9C,SAAS,QAAQ,oBAEb;;;;KAKH,gCAAgC,eAAe,eACnD,iBAAiB,yBACd,oCAEU,iBAAiB,WAAW,oBACrC,aAAa,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCd,sCACI,eAAe,cAAc;;;;;;;;;sBAepC,+BACc,gBAAgB,oBAC5B;;;;;;WAmBF"}

package/dist/{SstEnvironmentBuilder-CMa4wbhI.cjs → SstEnvironmentBuilder-D-NGrp7U.cjs}

@@ -12,6 +12,7 @@ let ResourceType = /* @__PURE__ */ function(ResourceType$1) {
 	ResourceType$1["Bucket"] = "sst.aws.Bucket";
 	ResourceType$1["Vpc"] = "sst.aws.Vpc";
 	ResourceType$1["Secret"] = "sst.sst.Secret";
+	ResourceType$1["Dynamo"] = "sst.aws.Dynamo";
 	ResourceType$1["SSTSecret"] = "sst:sst:Secret";
 	ResourceType$1["SSTFunction"] = "sst:sst:Function";
 	ResourceType$1["SSTApiGatewayV2"] = "sst:aws:ApiGatewayV2";
@@ -43,6 +44,7 @@ const sstResolvers = {
 	[ResourceType.Secret]: secretResolver,
 	[ResourceType.Postgres]: postgresResolver,
 	[ResourceType.Bucket]: bucketResolver,
+	[ResourceType.Dynamo]: dynamoResolver,
 	[ResourceType.SSTSecret]: secretResolver,
 	[ResourceType.SSTBucket]: bucketResolver,
 	[ResourceType.SSTFunction]: noopResolver,
@@ -125,4 +127,4 @@ Object.defineProperty(exports, 'sstResolvers', {
     return sstResolvers;
   }
 });
-//# sourceMappingURL=SstEnvironmentBuilder-CMa4wbhI.cjs.map
+//# sourceMappingURL=SstEnvironmentBuilder-D-NGrp7U.cjs.map

package/dist/SstEnvironmentBuilder-D-NGrp7U.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SstEnvironmentBuilder-D-NGrp7U.cjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","value: DynamoValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers","EnvironmentBuilder"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n\tEnvironmentBuilder,\n\ttype EnvironmentBuilderOptions,\n\ttype EnvironmentResolver,\n\ttype EnvRecord,\n\ttype InputValue,\n\ttype Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n\t// Legacy format (dot notation)\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tBucket = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\tDynamo = 'sst.aws.Dynamo',\n\n\t// Modern format (colon notation)\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTBucket = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n\tSSTDynamo = 'sst:aws:Dynamo',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\tusername: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n\tname: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n\ttype: ResourceType.Bucket | ResourceType.SSTBucket;\n\tname: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n\ttype: ResourceType.Vpc;\n\tbastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n\ttype: ResourceType.SnsTopic;\n\tarn: string;\n};\n\n/**\n * AWS DynamoDB Table resource type.\n */\nexport type Dynamo = {\n\ttype: ResourceType.Dynamo | ResourceType.SSTDynamo;\n\tname: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| Vpc\n\t| Secret\n\t| SnsTopic\n\t| Dynamo;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\ntype DynamoValue = Omit<Dynamo, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n\t[name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n\t[`${key}Name`]: value.database,\n\t[`${key}Host`]: value.host,\n\t[`${key}Password`]: value.password,\n\t[`${key}Port`]: value.port,\n\t[`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n\t[`${name}Arn`]: value.arn,\n});\n\nconst dynamoResolver = (name: string, value: DynamoValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n\t// Legacy format\n\t[ResourceType.ApiGatewayV2]: noopResolver,\n\t[ResourceType.Function]: noopResolver,\n\t[ResourceType.Vpc]: noopResolver,\n\t[ResourceType.Secret]: secretResolver,\n\t[ResourceType.Postgres]: postgresResolver,\n\t[ResourceType.Bucket]: bucketResolver,\n\t[ResourceType.Dynamo]: dynamoResolver,\n\n\t// Modern format\n\t[ResourceType.SSTSecret]: secretResolver,\n\t[ResourceType.SSTBucket]: bucketResolver,\n\t[ResourceType.SSTFunction]: noopResolver,\n\t[ResourceType.SSTPostgres]: postgresResolver,\n\t[ResourceType.SSTApiGatewayV2]: noopResolver,\n\t[ResourceType.SnsTopic]: topicResolver,\n\t[ResourceType.SSTDynamo]: dynamoResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n\t[K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n\tAllTypeValues<TRecord>,\n\tSstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n\tTRecord extends Record<string, InputValue>,\n\tTType extends string,\n> = {\n\t[K in keyof TRecord]: TRecord[K] extends { type: TType }\n\t\t? OmitType<TRecord[K]>\n\t\t: never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n\tCustomTypeValues<TRecord> extends never\n\t\t? Resolvers | undefined\n\t\t: {\n\t\t\t\t[TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n\t\t\t\t\tValueForType<TRecord, TType>\n\t\t\t\t>;\n\t\t\t};\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n\tTRecord extends Record<string, SstResource | InputValue | string>,\n> {\n\tprivate readonly builder: EnvironmentBuilder<\n\t\tRecord<string, InputValue>,\n\t\tResolvers\n\t>;\n\n\t/**\n\t * Create a new SST environment builder.\n\t *\n\t * @param record - Object containing SST resources, custom resources, and/or string values\n\t * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n\t * @param options - Optional configuration options\n\t */\n\tconstructor(\n\t\trecord: TRecord,\n\t\tadditionalResolvers?: CustomResolvers<TRecord>,\n\t\toptions?: EnvironmentBuilderOptions,\n\t) {\n\t\t// Merge resolvers with custom ones taking precedence\n\t\tconst mergedResolvers: Resolvers = additionalResolvers\n\t\t\t? { ...sstResolvers, ...additionalResolvers }\n\t\t\t: sstResolvers;\n\n\t\tthis.builder = new EnvironmentBuilder(\n\t\t\trecord as Record<string, InputValue>,\n\t\t\tmergedResolvers,\n\t\t\toptions,\n\t\t);\n\t}\n\n\t/**\n\t * Build environment variables from the input record.\n\t *\n\t * @returns A record of environment variables\n\t */\n\tbuild(): EnvRecord {\n\t\treturn this.builder.build();\n\t}\n}\n\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEN;AACA;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;;AACA;AAwGD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC5D,OAAO,MAAM,MACd;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC9D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC1B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC5D,EAAE,KAAK,OAAO,MAAM,IACtB;AAED,MAAM,iBAAiB,CAACL,MAAcM,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAErC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EACtB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;EACxB,aAAa,YAAY;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACD,AAAiB;;;;;;;;CAYjB,YACCC,QACAC,qBACAC,SACC;EAED,MAAMC,kBAA6B,sBAChC;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEH,OAAK,UAAU,IAAIC,8CAClB,QACA,iBACA;CAED;;;;;;CAOD,QAAmB;AAClB,SAAO,KAAK,QAAQ,OAAO;CAC3B;AACD"}

package/dist/{SstEnvironmentBuilder-COFYmwx6.mjs → SstEnvironmentBuilder-DOu4dVPL.mjs}

@@ -12,6 +12,7 @@ let ResourceType = /* @__PURE__ */ function(ResourceType$1) {
 	ResourceType$1["Bucket"] = "sst.aws.Bucket";
 	ResourceType$1["Vpc"] = "sst.aws.Vpc";
 	ResourceType$1["Secret"] = "sst.sst.Secret";
+	ResourceType$1["Dynamo"] = "sst.aws.Dynamo";
 	ResourceType$1["SSTSecret"] = "sst:sst:Secret";
 	ResourceType$1["SSTFunction"] = "sst:sst:Function";
 	ResourceType$1["SSTApiGatewayV2"] = "sst:aws:ApiGatewayV2";
@@ -43,6 +44,7 @@ const sstResolvers = {
 	[ResourceType.Secret]: secretResolver,
 	[ResourceType.Postgres]: postgresResolver,
 	[ResourceType.Bucket]: bucketResolver,
+	[ResourceType.Dynamo]: dynamoResolver,
 	[ResourceType.SSTSecret]: secretResolver,
 	[ResourceType.SSTBucket]: bucketResolver,
 	[ResourceType.SSTFunction]: noopResolver,
@@ -108,4 +110,4 @@ var SstEnvironmentBuilder = class {
 
 //#endregion
 export { ResourceType, SstEnvironmentBuilder, sstResolvers };
-//# sourceMappingURL=SstEnvironmentBuilder-COFYmwx6.mjs.map
+//# sourceMappingURL=SstEnvironmentBuilder-DOu4dVPL.mjs.map

package/dist/SstEnvironmentBuilder-DOu4dVPL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SstEnvironmentBuilder-DOu4dVPL.mjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","value: DynamoValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n\tEnvironmentBuilder,\n\ttype EnvironmentBuilderOptions,\n\ttype EnvironmentResolver,\n\ttype EnvRecord,\n\ttype InputValue,\n\ttype Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n\t// Legacy format (dot notation)\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tBucket = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\tDynamo = 'sst.aws.Dynamo',\n\n\t// Modern format (colon notation)\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTBucket = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n\tSSTDynamo = 'sst:aws:Dynamo',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\tusername: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n\tname: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n\ttype: ResourceType.Bucket | ResourceType.SSTBucket;\n\tname: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n\ttype: ResourceType.Vpc;\n\tbastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n\ttype: ResourceType.SnsTopic;\n\tarn: string;\n};\n\n/**\n * AWS DynamoDB Table resource type.\n */\nexport type Dynamo = {\n\ttype: ResourceType.Dynamo | ResourceType.SSTDynamo;\n\tname: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| Vpc\n\t| Secret\n\t| SnsTopic\n\t| Dynamo;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\ntype DynamoValue = Omit<Dynamo, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n\t[name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n\t[`${key}Name`]: value.database,\n\t[`${key}Host`]: value.host,\n\t[`${key}Password`]: value.password,\n\t[`${key}Port`]: value.port,\n\t[`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n\t[`${name}Arn`]: value.arn,\n});\n\nconst dynamoResolver = (name: string, value: DynamoValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n\t// Legacy format\n\t[ResourceType.ApiGatewayV2]: noopResolver,\n\t[ResourceType.Function]: noopResolver,\n\t[ResourceType.Vpc]: noopResolver,\n\t[ResourceType.Secret]: secretResolver,\n\t[ResourceType.Postgres]: postgresResolver,\n\t[ResourceType.Bucket]: bucketResolver,\n\t[ResourceType.Dynamo]: dynamoResolver,\n\n\t// Modern format\n\t[ResourceType.SSTSecret]: secretResolver,\n\t[ResourceType.SSTBucket]: bucketResolver,\n\t[ResourceType.SSTFunction]: noopResolver,\n\t[ResourceType.SSTPostgres]: postgresResolver,\n\t[ResourceType.SSTApiGatewayV2]: noopResolver,\n\t[ResourceType.SnsTopic]: topicResolver,\n\t[ResourceType.SSTDynamo]: dynamoResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n\t[K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n\tAllTypeValues<TRecord>,\n\tSstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n\tTRecord extends Record<string, InputValue>,\n\tTType extends string,\n> = {\n\t[K in keyof TRecord]: TRecord[K] extends { type: TType }\n\t\t? OmitType<TRecord[K]>\n\t\t: never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n\tCustomTypeValues<TRecord> extends never\n\t\t? Resolvers | undefined\n\t\t: {\n\t\t\t\t[TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n\t\t\t\t\tValueForType<TRecord, TType>\n\t\t\t\t>;\n\t\t\t};\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n\tTRecord extends Record<string, SstResource | InputValue | string>,\n> {\n\tprivate readonly builder: EnvironmentBuilder<\n\t\tRecord<string, InputValue>,\n\t\tResolvers\n\t>;\n\n\t/**\n\t * Create a new SST environment builder.\n\t *\n\t * @param record - Object containing SST resources, custom resources, and/or string values\n\t * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n\t * @param options - Optional configuration options\n\t */\n\tconstructor(\n\t\trecord: TRecord,\n\t\tadditionalResolvers?: CustomResolvers<TRecord>,\n\t\toptions?: EnvironmentBuilderOptions,\n\t) {\n\t\t// Merge resolvers with custom ones taking precedence\n\t\tconst mergedResolvers: Resolvers = additionalResolvers\n\t\t\t? { ...sstResolvers, ...additionalResolvers }\n\t\t\t: sstResolvers;\n\n\t\tthis.builder = new EnvironmentBuilder(\n\t\t\trecord as Record<string, InputValue>,\n\t\t\tmergedResolvers,\n\t\t\toptions,\n\t\t);\n\t}\n\n\t/**\n\t * Build environment variables from the input record.\n\t *\n\t * @returns A record of environment variables\n\t */\n\tbuild(): EnvRecord {\n\t\treturn this.builder.build();\n\t}\n}\n\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEN;AACA;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;;AACA;AAwGD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC5D,OAAO,MAAM,MACd;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC9D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC1B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC5D,EAAE,KAAK,OAAO,MAAM,IACtB;AAED,MAAM,iBAAiB,CAACL,MAAcM,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAErC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EACtB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;EACxB,aAAa,YAAY;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACD,AAAiB;;;;;;;;CAYjB,YACCC,QACAC,qBACAC,SACC;EAED,MAAMC,kBAA6B,sBAChC;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEH,OAAK,UAAU,IAAI,mBAClB,QACA,iBACA;CAED;;;;;;CAOD,QAAmB;AAClB,SAAO,KAAK,QAAQ,OAAO;CAC3B;AACD"}

package/dist/{SstEnvironmentBuilder-C1XsV9lH.d.cts → SstEnvironmentBuilder-Dc9nOuuK.d.cts}

@@ -13,6 +13,7 @@ declare enum ResourceType {
   Bucket = "sst.aws.Bucket",
   Vpc = "sst.aws.Vpc",
   Secret = "sst.sst.Secret",
+  Dynamo = "sst.aws.Dynamo",
   SSTSecret = "sst:sst:Secret",
   SSTFunction = "sst:sst:Function",
   SSTApiGatewayV2 = "sst:aws:ApiGatewayV2",
@@ -80,7 +81,7 @@ type SnsTopic = {
  * AWS DynamoDB Table resource type.
  */
 type Dynamo = {
-  type: ResourceType.SSTDynamo;
+  type: ResourceType.Dynamo | ResourceType.SSTDynamo;
   name: string;
 };
 /**
@@ -182,4 +183,4 @@ declare class SstEnvironmentBuilder<TRecord extends Record<string, SstResource |
 }
 //#endregion
 export { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers };
-//# sourceMappingURL=SstEnvironmentBuilder-C1XsV9lH.d.cts.map
+//# sourceMappingURL=SstEnvironmentBuilder-Dc9nOuuK.d.cts.map

package/dist/SstEnvironmentBuilder-Dc9nOuuK.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SstEnvironmentBuilder-Dc9nOuuK.d.cts","names":[],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":[],"mappings":";;;;;;AAaA;AAwBA;AAAwB,aAxBZ,YAAA;EAwBY,YACjB,GAAA,sBAAa;EAAY,QAAG,GAAA,kBAAa;EAAe,QAAA,GAAA,kBAAA;EAQnD,MAAA,GAAA,gBAAQ;EAAA,GAAA,GAAA,aAAA;EAAA,MACb,GAAA,gBAAa;EAAQ,MAAG,GAAA,gBAAa;EAAW,SAAA,GAAA,gBAAA;EAW3C,WAAQ,GAAA,kBAAA;EAAA,eAAA,GAAA,sBAAA;EAAA,WACb,GAAA,kBAAa;EAAQ,SAAG,GAAA,gBAAa;EAAW,QAAA,GAAA,kBAAA;EAO3C,SAAM,GAAA,gBAAA;;;;AACiC;AAOnD;AAQY,KA7CA,YAAA,GA6CM;EAAA,IAAA,EA5CX,YAAA,CAAa,YA4CF,GA5CiB,YAAA,CAAa,eA4C9B;EAAA,GACX,EAAA,MAAA;CAAmB;AAAyB;AAOnD;AAQA;;AACO,KArDK,QAAA,GAqDQ;EAAM,IAAG,EApDtB,YAAA,CAAa,QAoDsB,GApDX,YAAA,CAAa,WAoDF;EAAS,QAAA,EAAA,MAAA;EAOvC,IAAA,EAAA,MAAA;EAAW,QAAA,EAAA,MAAA;EAAA,IACpB,EAAA,MAAA;EAAY,QACZ,EAAA,MAAA;CAAQ;;;;AAKR,KAvDS,QAAA,GAuDT;EAAQ,IACR,EAvDI,YAAA,CAAa,QAuDjB,GAvD4B,YAAA,CAAa,WAuDzC;EAAM,IAAA,EAAA,MAAA;AAiBT,CAAA;;;;AAAwE,KAjE5D,MAAA,GAiE4D;EAiC3D,IAAA,EAjGN,YAAA,CAAa,MAmHnB,GAnH4B,YAAA,CAAa,SAmHzC;EAKI,IAAA,EAAA,MAAA;AAAuC,CAAA;;;;AAKwB,KAtHxD,GAAA,GAsHwD;EAK/D,IAAA,EA1HE,YAAA,CAAa,GA0HP;EAAA,OAAA,EAAA,MAAA;CAAA;;;AAAuC;AAK/C,KAxHO,MAAA,GAwHM;EAAA,IAAA,EAvHX,YAAA,CAAa,MAuHF,GAvHW,YAAA,CAAa,SAuHxB;EAAA,KAAgC,EAAA,MAAA;CAAU;;;;AACrC,KAjHX,QAAA,GAiHW;EAAW,IAC1B,EAjHD,YAAA,CAAa,QAiHZ;EAAO,GAAA,EAAA,MAAA;AAAA,CAAA;;;;AAMA,KAhHH,MAAA,GAgHG;EAAO,IAArB,EA/GM,YAAA,CAAa,MA+GnB,GA/G4B,YAAA,CAAa,SA+GzC;EAAa,IACb,EAAA,MAAA;CAAqB;AAFqD;AAAA;;AAS3C,KAhHpB,WAAA,GACT,YA+G6B,GA9G7B,QA8G6B,GA7G7B,QA6G6B,GA5G7B,MA4G6B,GA3G7B,GA2G6B,GA1G7B,MA0G6B,GAzG7B,QAyG6B,GAxG7B,MAwG6B;;;;;;;;;AAMxB,KA7FI,iBA6FJ,CAAA,CAAA,CAAA,GAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,EA7FiD,CA6FjD,EAAA,GA7FuD,SA6FvD;AAAO;AAAA;;AAKqC,cAjEvC,YAiEuC,EAjEzB,SAiEyB;;;;KA1C/C,qBAAA,GA4CD,GA5C4B,YA4C5B,EAAA;;;;KAvCC,WA0CsB,CAAA,CAAA,CAAA,GA1CL,CA0CK,SAAA;EAAK,IAA3B,EAAA,KAAA,WAAA,MAAA;CAAY,GA1CkD,CA0ClD,GADyB,KAAA;AAAmB;AAkC7D;;KAtEK,QAuE2B,CAAA,CAAA,CAAA,GAvEb,CAuEa,SAAA;EAAW,IAAG,EAAA,MAAA;CAAU,GAvER,IAuE/B,CAvEoC,CAuEpC,EAAA,MAAA,CAAA,GAAA,KAAA;;;;KAlEZ,aAmFO,CAAA,gBAnFuB,MAmFvB,CAAA,MAAA,EAnFsC,UAmFtC,CAAA,CAAA,GAAA,QAmBF,MArGG,OAqGH,GArGa,WAqGb,CArGyB,OAqGzB,CArGiC,CAqGjC,CAAA,CAAA,EAAS,CAAA,MApGX,OAoGW,CAAA;;;;KA/Fd,iCAAiC,eAAe,eAAe,QACnE,cAAc,UACd;;;;KAMI,6BACY,eAAe,mDAGnB,UAAU,QAAQ;QAAmB;IAC9C,SAAS,QAAQ,oBAEb;;;;KAKH,gCAAgC,eAAe,eACnD,iBAAiB,yBACd,oCAEU,iBAAiB,WAAW,oBACrC,aAAa,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCd,sCACI,eAAe,cAAc;;;;;;;;;sBAepC,+BACc,gBAAgB,oBAC5B;;;;;;WAmBF"}

package/dist/SstEnvironmentBuilder.cjs

@@ -1,5 +1,5 @@
 const require_EnvironmentBuilder = require('./EnvironmentBuilder-Djr1VsWM.cjs');
-const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-CMa4wbhI.cjs');
+const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-D-NGrp7U.cjs');
 
 exports.ResourceType = require_SstEnvironmentBuilder.ResourceType;
 exports.SstEnvironmentBuilder = require_SstEnvironmentBuilder.SstEnvironmentBuilder;

package/dist/SstEnvironmentBuilder.d.cts

@@ -1,3 +1,3 @@
 import { EnvRecord, EnvValue, EnvironmentBuilderOptions, environmentCase } from "./EnvironmentBuilder-Xuf2Dd9u.cjs";
-import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-C1XsV9lH.cjs";
+import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-Dc9nOuuK.cjs";
 export { ApiGatewayV2, Bucket, Dynamo, EnvRecord, EnvValue, EnvironmentBuilderOptions, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, environmentCase, sstResolvers };

package/dist/SstEnvironmentBuilder.d.mts

@@ -1,3 +1,3 @@
 import { EnvRecord, EnvValue, EnvironmentBuilderOptions, environmentCase } from "./EnvironmentBuilder-jF-b7WQg.mjs";
-import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-BTJh8Tgo.mjs";
+import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-BRAcRQp2.mjs";
 export { ApiGatewayV2, Bucket, Dynamo, EnvRecord, EnvValue, EnvironmentBuilderOptions, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, environmentCase, sstResolvers };

package/dist/SstEnvironmentBuilder.mjs

@@ -1,4 +1,4 @@
 import { environmentCase } from "./EnvironmentBuilder-BSuHZm0y.mjs";
-import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-COFYmwx6.mjs";
+import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-DOu4dVPL.mjs";
 
 export { ResourceType, SstEnvironmentBuilder, environmentCase, sstResolvers };

package/dist/credentials.cjs

@@ -23,9 +23,13 @@ function decryptCredentials(encrypted, iv, masterKey) {
 /**
 * Credentials object for use with EnvironmentParser.
 *
-* In development mode (no embedded credentials), this returns an empty object.
-* In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
-* environment variable.
+* Resolution order:
+* 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for
+*    credentials injected by the CLI preload script. This approach survives
+*    CJS/ESM module duplication (where mutating the export would only affect one copy).
+* 2. **Production mode**: Decrypts build-time embedded credentials using the
+*    `GKM_MASTER_KEY` environment variable (AES-256-GCM).
+* 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).
 *
 * @example
 * ```typescript
@@ -42,6 +46,8 @@ function decryptCredentials(encrypted, iv, masterKey) {
 * ```
 */
 const Credentials = (() => {
+	const injected = globalThis.__gkm_credentials__;
+	if (injected) return injected;
 	if (typeof __GKM_ENCRYPTED_CREDENTIALS__ === "undefined" || typeof __GKM_CREDENTIALS_IV__ === "undefined") return {};
 	const masterKey = process.env.GKM_MASTER_KEY;
 	if (!masterKey) {

package/dist/credentials.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.cjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * In development mode (no embedded credentials), this returns an empty object.\n * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY\n * environment variable.\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,kCAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBD,MAAaC,cAAsC,CAAC,MAAM;AAEzD,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}
+{"version":3,"file":"credentials.cjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * Resolution order:\n * 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for\n *    credentials injected by the CLI preload script. This approach survives\n *    CJS/ESM module duplication (where mutating the export would only affect one copy).\n * 2. **Production mode**: Decrypts build-time embedded credentials using the\n *    `GKM_MASTER_KEY` environment variable (AES-256-GCM).\n * 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Dev mode: check if gkm exec/dev preload injected credentials via globalThis\n\t// This survives CJS/ESM module duplication where Object.assign on the\n\t// export would only mutate one copy of the module's Credentials object.\n\tconst injected = (globalThis as Record<string, unknown>)\n\t\t.__gkm_credentials__ as Record<string, string> | undefined;\n\tif (injected) {\n\t\treturn injected;\n\t}\n\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,kCAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BD,MAAaC,cAAsC,CAAC,MAAM;CAIzD,MAAM,WAAY,WAChB;AACF,KAAI,SACH,QAAO;AAIR,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}

package/dist/credentials.d.cts

@@ -7,9 +7,13 @@ declare function decryptCredentials(encrypted: string, iv: string, masterKey: st
 /**
  * Credentials object for use with EnvironmentParser.
  *
- * In development mode (no embedded credentials), this returns an empty object.
- * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
- * environment variable.
+ * Resolution order:
+ * 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for
+ *    credentials injected by the CLI preload script. This approach survives
+ *    CJS/ESM module duplication (where mutating the export would only affect one copy).
+ * 2. **Production mode**: Decrypts build-time embedded credentials using the
+ *    `GKM_MASTER_KEY` environment variable (AES-256-GCM).
+ * 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).
  *
  * @example
  * ```typescript

package/dist/credentials.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.cts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AA8CA;;iBA9CgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;cA0CU,aAAa"}
+{"version":3,"file":"credentials.d.cts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AAkDA;;iBAlDgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;;;;;cA8CU,aAAa"}

package/dist/credentials.d.mts

@@ -7,9 +7,13 @@ declare function decryptCredentials(encrypted: string, iv: string, masterKey: st
 /**
  * Credentials object for use with EnvironmentParser.
  *
- * In development mode (no embedded credentials), this returns an empty object.
- * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
- * environment variable.
+ * Resolution order:
+ * 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for
+ *    credentials injected by the CLI preload script. This approach survives
+ *    CJS/ESM module duplication (where mutating the export would only affect one copy).
+ * 2. **Production mode**: Decrypts build-time embedded credentials using the
+ *    `GKM_MASTER_KEY` environment variable (AES-256-GCM).
+ * 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).
  *
  * @example
  * ```typescript

package/dist/credentials.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.mts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AA8CA;;iBA9CgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;cA0CU,aAAa"}
+{"version":3,"file":"credentials.d.mts","names":[],"sources":["../src/credentials.ts"],"sourcesContent":[],"mappings":";;AAgBA;AAkDA;;iBAlDgB,kBAAA,oDAIb;;;;;;;;;;;;;;;;;;;;;;;;;;cA8CU,aAAa"}

package/dist/credentials.mjs

@@ -21,9 +21,13 @@ function decryptCredentials(encrypted, iv, masterKey) {
 /**
 * Credentials object for use with EnvironmentParser.
 *
-* In development mode (no embedded credentials), this returns an empty object.
-* In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
-* environment variable.
+* Resolution order:
+* 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for
+*    credentials injected by the CLI preload script. This approach survives
+*    CJS/ESM module duplication (where mutating the export would only affect one copy).
+* 2. **Production mode**: Decrypts build-time embedded credentials using the
+*    `GKM_MASTER_KEY` environment variable (AES-256-GCM).
+* 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).
 *
 * @example
 * ```typescript
@@ -40,6 +44,8 @@ function decryptCredentials(encrypted, iv, masterKey) {
 * ```
 */
 const Credentials = (() => {
+	const injected = globalThis.__gkm_credentials__;
+	if (injected) return injected;
 	if (typeof __GKM_ENCRYPTED_CREDENTIALS__ === "undefined" || typeof __GKM_CREDENTIALS_IV__ === "undefined") return {};
 	const masterKey = process.env.GKM_MASTER_KEY;
 	if (!masterKey) {

package/dist/credentials.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.mjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * In development mode (no embedded credentials), this returns an empty object.\n * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY\n * environment variable.\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,iBAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;AAuBD,MAAaC,cAAsC,CAAC,MAAM;AAEzD,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}
+{"version":3,"file":"credentials.mjs","names":["encrypted: string","iv: string","masterKey: string","Credentials: Record<string, string>"],"sources":["../src/credentials.ts"],"sourcesContent":["import { createDecipheriv } from 'node:crypto';\n\n/**\n * Build-time injected encrypted credentials.\n * These are replaced by tsdown/esbuild --define at build time.\n */\ndeclare const __GKM_ENCRYPTED_CREDENTIALS__: string | undefined;\ndeclare const __GKM_CREDENTIALS_IV__: string | undefined;\n\n/** AES-256-GCM auth tag length */\nconst AUTH_TAG_LENGTH = 16;\n\n/**\n * Decrypt credentials from encrypted payload.\n * Exported for testing purposes.\n */\nexport function decryptCredentials(\n\tencrypted: string,\n\tiv: string,\n\tmasterKey: string,\n): Record<string, string> {\n\tconst key = Buffer.from(masterKey, 'hex');\n\tconst ivBuffer = Buffer.from(iv, 'hex');\n\tconst combined = Buffer.from(encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt using AES-256-GCM\n\tconst decipher = createDecipheriv('aes-256-gcm', key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8'));\n}\n\n/**\n * Credentials object for use with EnvironmentParser.\n *\n * Resolution order:\n * 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for\n *    credentials injected by the CLI preload script. This approach survives\n *    CJS/ESM module duplication (where mutating the export would only affect one copy).\n * 2. **Production mode**: Decrypts build-time embedded credentials using the\n *    `GKM_MASTER_KEY` environment variable (AES-256-GCM).\n * 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).\n *\n * @example\n * ```typescript\n * import { EnvironmentParser } from '@geekmidas/envkit';\n * import { Credentials } from '@geekmidas/envkit/credentials';\n *\n * export const envParser = new EnvironmentParser({...process.env, ...Credentials})\n *   .create((get) => ({\n *     database: {\n *       url: get('DATABASE_URL').string(),\n *     },\n *   }))\n *   .parse();\n * ```\n */\nexport const Credentials: Record<string, string> = (() => {\n\t// Dev mode: check if gkm exec/dev preload injected credentials via globalThis\n\t// This survives CJS/ESM module duplication where Object.assign on the\n\t// export would only mutate one copy of the module's Credentials object.\n\tconst injected = (globalThis as Record<string, unknown>)\n\t\t.__gkm_credentials__ as Record<string, string> | undefined;\n\tif (injected) {\n\t\treturn injected;\n\t}\n\n\t// Development mode - no credentials embedded at build time\n\tif (\n\t\ttypeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||\n\t\ttypeof __GKM_CREDENTIALS_IV__ === 'undefined'\n\t) {\n\t\treturn {};\n\t}\n\n\t// Production mode - decrypt credentials using master key\n\tconst masterKey = process.env.GKM_MASTER_KEY;\n\n\tif (!masterKey) {\n\t\t// Log warning but don't throw - allows graceful fallback to env vars\n\t\tconsole.error(\n\t\t\t'[gkm] GKM_MASTER_KEY environment variable is required to decrypt credentials.',\n\t\t);\n\t\tconsole.error(\n\t\t\t'[gkm] Falling back to environment variables. Some secrets may be missing.',\n\t\t);\n\t\treturn {};\n\t}\n\n\ttry {\n\t\treturn decryptCredentials(\n\t\t\t__GKM_ENCRYPTED_CREDENTIALS__,\n\t\t\t__GKM_CREDENTIALS_IV__,\n\t\t\tmasterKey,\n\t\t);\n\t} catch (error) {\n\t\tconsole.error('[gkm] Failed to decrypt credentials:', error);\n\t\tconsole.error('[gkm] Falling back to environment variables.');\n\t\treturn {};\n\t}\n})();\n\nexport default Credentials;\n"],"mappings":";;;;AAUA,MAAM,kBAAkB;;;;;AAMxB,SAAgB,mBACfA,WACAC,IACAC,WACyB;CACzB,MAAM,MAAM,OAAO,KAAK,WAAW,MAAM;CACzC,MAAM,WAAW,OAAO,KAAK,IAAI,MAAM;CACvC,MAAM,WAAW,OAAO,KAAK,WAAW,SAAS;CAGjD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,iBAAiB,eAAe,KAAK,SAAS;AAC/D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BD,MAAaC,cAAsC,CAAC,MAAM;CAIzD,MAAM,WAAY,WAChB;AACF,KAAI,SACH,QAAO;AAIR,YACQ,kCAAkC,sBAClC,2BAA2B,YAElC,QAAO,CAAE;CAIV,MAAM,YAAY,QAAQ,IAAI;AAE9B,MAAK,WAAW;AAEf,UAAQ,MACP,gFACA;AACD,UAAQ,MACP,4EACA;AACD,SAAO,CAAE;CACT;AAED,KAAI;AACH,SAAO,mBACN,+BACA,wBACA,UACA;CACD,SAAQ,OAAO;AACf,UAAQ,MAAM,wCAAwC,MAAM;AAC5D,UAAQ,MAAM,+CAA+C;AAC7D,SAAO,CAAE;CACT;AACD,IAAG;AAEJ,0BAAe"}

package/dist/sst.cjs

@@ -1,5 +1,5 @@
 const require_EnvironmentBuilder = require('./EnvironmentBuilder-Djr1VsWM.cjs');
-const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-CMa4wbhI.cjs');
+const require_SstEnvironmentBuilder = require('./SstEnvironmentBuilder-D-NGrp7U.cjs');
 
 //#region src/sst.ts
 /**

package/dist/sst.d.cts

@@ -1,5 +1,5 @@
 import { EnvRecord, EnvValue, EnvironmentBuilderOptions, environmentCase } from "./EnvironmentBuilder-Xuf2Dd9u.cjs";
-import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-C1XsV9lH.cjs";
+import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-Dc9nOuuK.cjs";
 
 //#region src/sst.d.ts
 

package/dist/sst.d.mts

@@ -1,5 +1,5 @@
 import { EnvRecord, EnvValue, EnvironmentBuilderOptions, environmentCase } from "./EnvironmentBuilder-jF-b7WQg.mjs";
-import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-BTJh8Tgo.mjs";
+import { ApiGatewayV2, Bucket, Dynamo, Function, Postgres, ResourceProcessor, ResourceType, Secret, SnsTopic, SstEnvironmentBuilder, SstResource, Vpc, sstResolvers } from "./SstEnvironmentBuilder-BRAcRQp2.mjs";
 
 //#region src/sst.d.ts
 

package/dist/sst.mjs

@@ -1,5 +1,5 @@
 import { environmentCase } from "./EnvironmentBuilder-BSuHZm0y.mjs";
-import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-COFYmwx6.mjs";
+import { ResourceType, SstEnvironmentBuilder, sstResolvers } from "./SstEnvironmentBuilder-DOu4dVPL.mjs";
 
 //#region src/sst.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/envkit",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "private": false,
   "type": "module",
   "exports": {

package/src/SstEnvironmentBuilder.ts

@@ -19,6 +19,7 @@ export enum ResourceType {
 	Bucket = 'sst.aws.Bucket',
 	Vpc = 'sst.aws.Vpc',
 	Secret = 'sst.sst.Secret',
+	Dynamo = 'sst.aws.Dynamo',
 
 	// Modern format (colon notation)
 	SSTSecret = 'sst:sst:Secret',
@@ -96,7 +97,7 @@ export type SnsTopic = {
  * AWS DynamoDB Table resource type.
  */
 export type Dynamo = {
-	type: ResourceType.SSTDynamo;
+	type: ResourceType.Dynamo | ResourceType.SSTDynamo;
 	name: string;
 };
 
@@ -169,6 +170,7 @@ export const sstResolvers: Resolvers = {
 	[ResourceType.Secret]: secretResolver,
 	[ResourceType.Postgres]: postgresResolver,
 	[ResourceType.Bucket]: bucketResolver,
+	[ResourceType.Dynamo]: dynamoResolver,
 
 	// Modern format
 	[ResourceType.SSTSecret]: secretResolver,

package/src/__tests__/SstEnvironmentBuilder.spec.ts

@@ -161,9 +161,9 @@ describe('SstEnvironmentBuilder', () => {
 	});
 
 	describe('Dynamo resource', () => {
-		it('should process Dynamo resource correctly', () => {
+		it('should process legacy Dynamo resource correctly', () => {
 			const dynamo: Dynamo = {
-				type: ResourceType.SSTDynamo,
+				type: ResourceType.Dynamo,
 				name: 'my-dynamo-table',
 			};
 
@@ -175,6 +175,21 @@ describe('SstEnvironmentBuilder', () => {
 				USERS_TABLE_NAME: 'my-dynamo-table',
 			});
 		});
+
+		it('should process SSTDynamo resource correctly', () => {
+			const dynamo: Dynamo = {
+				type: ResourceType.SSTDynamo,
+				name: 'sessions-table-prod',
+			};
+
+			const env = new SstEnvironmentBuilder({
+				sessionsTable: dynamo,
+			}).build();
+
+			expect(env).toEqual({
+				SESSIONS_TABLE_NAME: 'sessions-table-prod',
+			});
+		});
 	});
 
 	describe('noop resources', () => {

package/src/credentials.ts

@@ -42,9 +42,13 @@ export function decryptCredentials(
 /**
  * Credentials object for use with EnvironmentParser.
  *
- * In development mode (no embedded credentials), this returns an empty object.
- * In production mode, it decrypts embedded credentials using the GKM_MASTER_KEY
- * environment variable.
+ * Resolution order:
+ * 1. **Dev mode (gkm dev/exec)**: Checks `globalThis.__gkm_credentials__` for
+ *    credentials injected by the CLI preload script. This approach survives
+ *    CJS/ESM module duplication (where mutating the export would only affect one copy).
+ * 2. **Production mode**: Decrypts build-time embedded credentials using the
+ *    `GKM_MASTER_KEY` environment variable (AES-256-GCM).
+ * 3. **Fallback**: Returns empty object (allows graceful fallback to process.env).
  *
  * @example
  * ```typescript
@@ -61,6 +65,15 @@ export function decryptCredentials(
  * ```
  */
 export const Credentials: Record<string, string> = (() => {
+	// Dev mode: check if gkm exec/dev preload injected credentials via globalThis
+	// This survives CJS/ESM module duplication where Object.assign on the
+	// export would only mutate one copy of the module's Credentials object.
+	const injected = (globalThis as Record<string, unknown>)
+		.__gkm_credentials__ as Record<string, string> | undefined;
+	if (injected) {
+		return injected;
+	}
+
 	// Development mode - no credentials embedded at build time
 	if (
 		typeof __GKM_ENCRYPTED_CREDENTIALS__ === 'undefined' ||

package/dist/SstEnvironmentBuilder-BTJh8Tgo.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-BTJh8Tgo.d.mts","names":[],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":[],"mappings":";;;;;;AAaA;AAuBA;AAAwB,aAvBZ,YAAA;EAuBY,YACjB,GAAA,sBAAa;EAAY,QAAG,GAAA,kBAAa;EAAe,QAAA,GAAA,kBAAA;EAQnD,MAAA,GAAA,gBAAQ;EAAA,GAAA,GAAA,aAAA;EAAA,MACb,GAAA,gBAAa;EAAQ,SAAG,GAAA,gBAAa;EAAW,WAAA,GAAA,kBAAA;EAW3C,eAAQ,GAAA,sBAAA;EAAA,WAAA,GAAA,kBAAA;EAAA,SACb,GAAA,gBAAa;EAAQ,QAAG,GAAA,kBAAa;EAAW,SAAA,GAAA,gBAAA;AAOvD;;;;AACmD;AAOvC,KArCA,YAAA,GAsCL;EAOK,IAAA,EA5CL,YAAA,CAAa,YA4CF,GA5CiB,YAAA,CAAa,eA4C9B;EAAA,GAAA,EAAA,MAAA;CAAA;;AACiC;AAOnD;AAQA;AAQY,KA5DA,QAAA,GA4DW;EAAA,IAAA,EA3DhB,YAAA,CAAa,QA2DG,GA3DQ,YAAA,CAAa,WA2DrB;EAAA,QACpB,EAAA,MAAA;EAAY,IACZ,EAAA,MAAA;EAAQ,QACR,EAAA,MAAA;EAAQ,IACR,EAAA,MAAA;EAAM,QACN,EAAA,MAAA;CAAG;;;AAGG;AAiBG,KAzEA,QAAA,GAyEA;EAAiB,IAAA,EAxEtB,YAAA,CAAa,QAwES,GAxEE,YAAA,CAAa,WAwEf;EAAA,IAA4B,EAAA,MAAA;CAAC;AAAc;AAiCxE;AAiBE;AAUG,KA7HO,MAAA,GA6HI;EAAA,IAAA,EA5HT,YAAA,CAAa,MA4HJ,GA5Ha,YAAA,CAAa,SA4H1B;EAAA,IAAM,EAAA,MAAA;CAAC;AAA6C;AAAA;;AAKjD,KA1HP,GAAA,GA0HO;EAAC,IAAiC,EAzH9C,YAAA,CAAa,GAyHiC;EAAC,OAAN,EAAA,MAAA;AAAI,CAAA;AAAA;;;AAKjB,KAvHvB,MAAA,GAuHuB;EAAM,IAC5B,EAvHN,YAAA,CAAa,MAuHP,GAvHgB,YAAA,CAAa,SAuH7B;EAAO,KAAe,EAAA,MAAA;CAAO;;;AAC3B;AAKV,KAtHO,QAAA,GAsHS;EAAA,IAAA,EArHd,YAAA,CAAa,QAqHC;EAAA,GAAgC,EAAA,MAAA;CAAU;;;;AAAK,KA9GxD,MAAA,GA8GwD;EAAO,IAAA,EA7GpE,YAAA,CAAa,SA6GuD;EAQtE,IAAA,EAAA,MAAA;CAAY;;;;AAIM,KAlHX,WAAA,GACT,YAiHoB,GAhHpB,QAgHoB,GA/GpB,QA+GoB,GA9GpB,MA8GoB,GA7GpB,GA6GoB,GA5GpB,MA4GoB,GA3GpB,QA2GoB,GA1GpB,MA0GoB;;;;;;;AAGR;AAAA;AAKK,KAjGR,iBAiGQ,CAAA,CAAA,CAAA,GAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,EAjGqC,CAiGrC,EAAA,GAjG2C,SAiG3C;;;;AACnB,cAjEY,YAiEZ,EAjE0B,SAiE1B;;;;KA3CI,qBAAA,GA+Ca,GA/Cc,YA+Cd,EAAA;;;;AAD2C,KAzCxD,WAyCwD,CAAA,CAAA,CAAA,GAzCvC,CAyCuC,SAAA;EAkChD,IAAA,EAAA,KAAA,WAAA,MAAqB;CAAA,GA3EiC,CA2EjC,GAAA,KAAA;;;;KAtE7B,QAsFK,CAAA,CAAA,CAAA,GAtFS,CAsFT,SAAA;EAAO,IACuB,EAAA,MAAA;CAAO,GAvFC,IAuFxB,CAvF6B,CAuF7B,EAAA,MAAA,CAAA,GAAA,KAAA;;;AAoBL;KAtGd,8BAA8B,eAAe,6BACrC,UAAU,YAAY,QAAQ,YACnC;;;;KAKH,iCAAiC,eAAe,eAAe,QACnE,cAAc,UACd;;;;KAMI,6BACY,eAAe,mDAGnB,UAAU,QAAQ;QAAmB;IAC9C,SAAS,QAAQ,oBAEb;;;;KAKH,gCAAgC,eAAe,eACnD,iBAAiB,yBACd,oCAEU,iBAAiB,WAAW,oBACrC,aAAa,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCd,sCACI,eAAe,cAAc;;;;;;;;;sBAepC,+BACc,gBAAgB,oBAC5B;;;;;;WAmBF"}

package/dist/SstEnvironmentBuilder-C1XsV9lH.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-C1XsV9lH.d.cts","names":[],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":[],"mappings":";;;;;;AAaA;AAuBA;AAAwB,aAvBZ,YAAA;EAuBY,YACjB,GAAA,sBAAa;EAAY,QAAG,GAAA,kBAAa;EAAe,QAAA,GAAA,kBAAA;EAQnD,MAAA,GAAA,gBAAQ;EAAA,GAAA,GAAA,aAAA;EAAA,MACb,GAAA,gBAAa;EAAQ,SAAG,GAAA,gBAAa;EAAW,WAAA,GAAA,kBAAA;EAW3C,eAAQ,GAAA,sBAAA;EAAA,WAAA,GAAA,kBAAA;EAAA,SACb,GAAA,gBAAa;EAAQ,QAAG,GAAA,kBAAa;EAAW,SAAA,GAAA,gBAAA;AAOvD;;;;AACmD;AAOvC,KArCA,YAAA,GAsCL;EAOK,IAAA,EA5CL,YAAA,CAAa,YA4CF,GA5CiB,YAAA,CAAa,eA4C9B;EAAA,GAAA,EAAA,MAAA;CAAA;;AACiC;AAOnD;AAQA;AAQY,KA5DA,QAAA,GA4DW;EAAA,IAAA,EA3DhB,YAAA,CAAa,QA2DG,GA3DQ,YAAA,CAAa,WA2DrB;EAAA,QACpB,EAAA,MAAA;EAAY,IACZ,EAAA,MAAA;EAAQ,QACR,EAAA,MAAA;EAAQ,IACR,EAAA,MAAA;EAAM,QACN,EAAA,MAAA;CAAG;;;AAGG;AAiBG,KAzEA,QAAA,GAyEA;EAAiB,IAAA,EAxEtB,YAAA,CAAa,QAwES,GAxEE,YAAA,CAAa,WAwEf;EAAA,IAA4B,EAAA,MAAA;CAAC;AAAc;AAiCxE;AAiBE;AAUG,KA7HO,MAAA,GA6HI;EAAA,IAAA,EA5HT,YAAA,CAAa,MA4HJ,GA5Ha,YAAA,CAAa,SA4H1B;EAAA,IAAM,EAAA,MAAA;CAAC;AAA6C;AAAA;;AAKjD,KA1HP,GAAA,GA0HO;EAAC,IAAiC,EAzH9C,YAAA,CAAa,GAyHiC;EAAC,OAAN,EAAA,MAAA;AAAI,CAAA;AAAA;;;AAKjB,KAvHvB,MAAA,GAuHuB;EAAM,IAC5B,EAvHN,YAAA,CAAa,MAuHP,GAvHgB,YAAA,CAAa,SAuH7B;EAAO,KAAe,EAAA,MAAA;CAAO;;;AAC3B;AAKV,KAtHO,QAAA,GAsHS;EAAA,IAAA,EArHd,YAAA,CAAa,QAqHC;EAAA,GAAgC,EAAA,MAAA;CAAU;;;;AAAK,KA9GxD,MAAA,GA8GwD;EAAO,IAAA,EA7GpE,YAAA,CAAa,SA6GuD;EAQtE,IAAA,EAAA,MAAA;CAAY;;;;AAIM,KAlHX,WAAA,GACT,YAiHoB,GAhHpB,QAgHoB,GA/GpB,QA+GoB,GA9GpB,MA8GoB,GA7GpB,GA6GoB,GA5GpB,MA4GoB,GA3GpB,QA2GoB,GA1GpB,MA0GoB;;;;;;;AAGR;AAAA;AAKK,KAjGR,iBAiGQ,CAAA,CAAA,CAAA,GAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,EAjGqC,CAiGrC,EAAA,GAjG2C,SAiG3C;;;;AACnB,cAjEY,YAiEZ,EAjE0B,SAiE1B;;;;KA3CI,qBAAA,GA+Ca,GA/Cc,YA+Cd,EAAA;;;;AAD2C,KAzCxD,WAyCwD,CAAA,CAAA,CAAA,GAzCvC,CAyCuC,SAAA;EAkChD,IAAA,EAAA,KAAA,WAAA,MAAqB;CAAA,GA3EiC,CA2EjC,GAAA,KAAA;;;;KAtE7B,QAsFK,CAAA,CAAA,CAAA,GAtFS,CAsFT,SAAA;EAAO,IACuB,EAAA,MAAA;CAAO,GAvFC,IAuFxB,CAvF6B,CAuF7B,EAAA,MAAA,CAAA,GAAA,KAAA;;;AAoBL;KAtGd,8BAA8B,eAAe,6BACrC,UAAU,YAAY,QAAQ,YACnC;;;;KAKH,iCAAiC,eAAe,eAAe,QACnE,cAAc,UACd;;;;KAMI,6BACY,eAAe,mDAGnB,UAAU,QAAQ;QAAmB;IAC9C,SAAS,QAAQ,oBAEb;;;;KAKH,gCAAgC,eAAe,eACnD,iBAAiB,yBACd,oCAEU,iBAAiB,WAAW,oBACrC,aAAa,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCd,sCACI,eAAe,cAAc;;;;;;;;;sBAepC,+BACc,gBAAgB,oBAC5B;;;;;;WAmBF"}

package/dist/SstEnvironmentBuilder-CMa4wbhI.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-CMa4wbhI.cjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","value: DynamoValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers","EnvironmentBuilder"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n\tEnvironmentBuilder,\n\ttype EnvironmentBuilderOptions,\n\ttype EnvironmentResolver,\n\ttype EnvRecord,\n\ttype InputValue,\n\ttype Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n\t// Legacy format (dot notation)\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tBucket = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\n\t// Modern format (colon notation)\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTBucket = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n\tSSTDynamo = 'sst:aws:Dynamo',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\tusername: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n\tname: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n\ttype: ResourceType.Bucket | ResourceType.SSTBucket;\n\tname: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n\ttype: ResourceType.Vpc;\n\tbastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n\ttype: ResourceType.SnsTopic;\n\tarn: string;\n};\n\n/**\n * AWS DynamoDB Table resource type.\n */\nexport type Dynamo = {\n\ttype: ResourceType.SSTDynamo;\n\tname: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| Vpc\n\t| Secret\n\t| SnsTopic\n\t| Dynamo;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\ntype DynamoValue = Omit<Dynamo, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n\t[name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n\t[`${key}Name`]: value.database,\n\t[`${key}Host`]: value.host,\n\t[`${key}Password`]: value.password,\n\t[`${key}Port`]: value.port,\n\t[`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n\t[`${name}Arn`]: value.arn,\n});\n\nconst dynamoResolver = (name: string, value: DynamoValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n\t// Legacy format\n\t[ResourceType.ApiGatewayV2]: noopResolver,\n\t[ResourceType.Function]: noopResolver,\n\t[ResourceType.Vpc]: noopResolver,\n\t[ResourceType.Secret]: secretResolver,\n\t[ResourceType.Postgres]: postgresResolver,\n\t[ResourceType.Bucket]: bucketResolver,\n\n\t// Modern format\n\t[ResourceType.SSTSecret]: secretResolver,\n\t[ResourceType.SSTBucket]: bucketResolver,\n\t[ResourceType.SSTFunction]: noopResolver,\n\t[ResourceType.SSTPostgres]: postgresResolver,\n\t[ResourceType.SSTApiGatewayV2]: noopResolver,\n\t[ResourceType.SnsTopic]: topicResolver,\n\t[ResourceType.SSTDynamo]: dynamoResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n\t[K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n\tAllTypeValues<TRecord>,\n\tSstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n\tTRecord extends Record<string, InputValue>,\n\tTType extends string,\n> = {\n\t[K in keyof TRecord]: TRecord[K] extends { type: TType }\n\t\t? OmitType<TRecord[K]>\n\t\t: never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n\tCustomTypeValues<TRecord> extends never\n\t\t? Resolvers | undefined\n\t\t: {\n\t\t\t\t[TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n\t\t\t\t\tValueForType<TRecord, TType>\n\t\t\t\t>;\n\t\t\t};\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n\tTRecord extends Record<string, SstResource | InputValue | string>,\n> {\n\tprivate readonly builder: EnvironmentBuilder<\n\t\tRecord<string, InputValue>,\n\t\tResolvers\n\t>;\n\n\t/**\n\t * Create a new SST environment builder.\n\t *\n\t * @param record - Object containing SST resources, custom resources, and/or string values\n\t * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n\t * @param options - Optional configuration options\n\t */\n\tconstructor(\n\t\trecord: TRecord,\n\t\tadditionalResolvers?: CustomResolvers<TRecord>,\n\t\toptions?: EnvironmentBuilderOptions,\n\t) {\n\t\t// Merge resolvers with custom ones taking precedence\n\t\tconst mergedResolvers: Resolvers = additionalResolvers\n\t\t\t? { ...sstResolvers, ...additionalResolvers }\n\t\t\t: sstResolvers;\n\n\t\tthis.builder = new EnvironmentBuilder(\n\t\t\trecord as Record<string, InputValue>,\n\t\t\tmergedResolvers,\n\t\t\toptions,\n\t\t);\n\t}\n\n\t/**\n\t * Build environment variables from the input record.\n\t *\n\t * @returns A record of environment variables\n\t */\n\tbuild(): EnvRecord {\n\t\treturn this.builder.build();\n\t}\n}\n\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEN;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;;AACA;AAwGD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC5D,OAAO,MAAM,MACd;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC9D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC1B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC5D,EAAE,KAAK,OAAO,MAAM,IACtB;AAED,MAAM,iBAAiB,CAACL,MAAcM,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAErC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;EACxB,aAAa,YAAY;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACD,AAAiB;;;;;;;;CAYjB,YACCC,QACAC,qBACAC,SACC;EAED,MAAMC,kBAA6B,sBAChC;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEH,OAAK,UAAU,IAAIC,8CAClB,QACA,iBACA;CAED;;;;;;CAOD,QAAmB;AAClB,SAAO,KAAK,QAAQ,OAAO;CAC3B;AACD"}

package/dist/SstEnvironmentBuilder-COFYmwx6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"SstEnvironmentBuilder-COFYmwx6.mjs","names":["name: string","value: SecretValue","key: string","value: PostgresValue","value: BucketValue","value: SnsTopicValue","value: DynamoValue","sstResolvers: Resolvers","record: TRecord","additionalResolvers?: CustomResolvers<TRecord>","options?: EnvironmentBuilderOptions","mergedResolvers: Resolvers"],"sources":["../src/SstEnvironmentBuilder.ts"],"sourcesContent":["import {\n\tEnvironmentBuilder,\n\ttype EnvironmentBuilderOptions,\n\ttype EnvironmentResolver,\n\ttype EnvRecord,\n\ttype InputValue,\n\ttype Resolvers,\n} from './EnvironmentBuilder';\n\n/**\n * Enumeration of supported SST (Serverless Stack Toolkit) resource types.\n * Used to identify and process different AWS and SST resources.\n */\nexport enum ResourceType {\n\t// Legacy format (dot notation)\n\tApiGatewayV2 = 'sst.aws.ApiGatewayV2',\n\tPostgres = 'sst.aws.Postgres',\n\tFunction = 'sst.aws.Function',\n\tBucket = 'sst.aws.Bucket',\n\tVpc = 'sst.aws.Vpc',\n\tSecret = 'sst.sst.Secret',\n\n\t// Modern format (colon notation)\n\tSSTSecret = 'sst:sst:Secret',\n\tSSTFunction = 'sst:sst:Function',\n\tSSTApiGatewayV2 = 'sst:aws:ApiGatewayV2',\n\tSSTPostgres = 'sst:aws:Postgres',\n\tSSTBucket = 'sst:aws:Bucket',\n\tSnsTopic = 'sst:aws:SnsTopic',\n\tSSTDynamo = 'sst:aws:Dynamo',\n}\n\n/**\n * AWS API Gateway V2 resource type.\n * Represents an HTTP/WebSocket API.\n */\nexport type ApiGatewayV2 = {\n\ttype: ResourceType.ApiGatewayV2 | ResourceType.SSTApiGatewayV2;\n\turl: string;\n};\n\n/**\n * PostgreSQL database resource type.\n * Contains all connection details needed to connect to the database.\n */\nexport type Postgres = {\n\ttype: ResourceType.Postgres | ResourceType.SSTPostgres;\n\tdatabase: string;\n\thost: string;\n\tpassword: string;\n\tport: number;\n\tusername: string;\n};\n\n/**\n * AWS Lambda Function resource type.\n */\nexport type Function = {\n\ttype: ResourceType.Function | ResourceType.SSTFunction;\n\tname: string;\n};\n\n/**\n * AWS S3 Bucket resource type.\n */\nexport type Bucket = {\n\ttype: ResourceType.Bucket | ResourceType.SSTBucket;\n\tname: string;\n};\n\n/**\n * AWS VPC (Virtual Private Cloud) resource type.\n */\nexport type Vpc = {\n\ttype: ResourceType.Vpc;\n\tbastion: string;\n};\n\n/**\n * Secret resource type for storing sensitive values.\n */\nexport type Secret = {\n\ttype: ResourceType.Secret | ResourceType.SSTSecret;\n\tvalue: string;\n};\n\n/**\n * AWS SNS Topic resource type.\n */\nexport type SnsTopic = {\n\ttype: ResourceType.SnsTopic;\n\tarn: string;\n};\n\n/**\n * AWS DynamoDB Table resource type.\n */\nexport type Dynamo = {\n\ttype: ResourceType.SSTDynamo;\n\tname: string;\n};\n\n/**\n * Union type of all supported SST resource types.\n */\nexport type SstResource =\n\t| ApiGatewayV2\n\t| Postgres\n\t| Function\n\t| Bucket\n\t| Vpc\n\t| Secret\n\t| SnsTopic\n\t| Dynamo;\n\n// Value types without the `type` key (for resolver parameters)\ntype SecretValue = Omit<Secret, 'type'>;\ntype PostgresValue = Omit<Postgres, 'type'>;\ntype BucketValue = Omit<Bucket, 'type'>;\ntype SnsTopicValue = Omit<SnsTopic, 'type'>;\ntype DynamoValue = Omit<Dynamo, 'type'>;\n\n/**\n * Function type for processing a specific resource type into environment variables.\n *\n * @template K - The specific resource type (without `type` key)\n * @param name - The resource name\n * @param value - The resource value (without `type` key)\n * @returns Object mapping environment variable names to values\n */\nexport type ResourceProcessor<K> = (name: string, value: K) => EnvRecord;\n\n// SST Resource Resolvers (receive values without `type` key)\n\nconst secretResolver = (name: string, value: SecretValue) => ({\n\t[name]: value.value,\n});\n\nconst postgresResolver = (key: string, value: PostgresValue) => ({\n\t[`${key}Name`]: value.database,\n\t[`${key}Host`]: value.host,\n\t[`${key}Password`]: value.password,\n\t[`${key}Port`]: value.port,\n\t[`${key}Username`]: value.username,\n});\n\nconst bucketResolver = (name: string, value: BucketValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst topicResolver = (name: string, value: SnsTopicValue) => ({\n\t[`${name}Arn`]: value.arn,\n});\n\nconst dynamoResolver = (name: string, value: DynamoValue) => ({\n\t[`${name}Name`]: value.name,\n});\n\nconst noopResolver = () => ({});\n\n/**\n * Pre-configured resolvers for all SST resource types.\n */\nexport const sstResolvers: Resolvers = {\n\t// Legacy format\n\t[ResourceType.ApiGatewayV2]: noopResolver,\n\t[ResourceType.Function]: noopResolver,\n\t[ResourceType.Vpc]: noopResolver,\n\t[ResourceType.Secret]: secretResolver,\n\t[ResourceType.Postgres]: postgresResolver,\n\t[ResourceType.Bucket]: bucketResolver,\n\n\t// Modern format\n\t[ResourceType.SSTSecret]: secretResolver,\n\t[ResourceType.SSTBucket]: bucketResolver,\n\t[ResourceType.SSTFunction]: noopResolver,\n\t[ResourceType.SSTPostgres]: postgresResolver,\n\t[ResourceType.SSTApiGatewayV2]: noopResolver,\n\t[ResourceType.SnsTopic]: topicResolver,\n\t[ResourceType.SSTDynamo]: dynamoResolver,\n};\n\n/**\n * All known SST resource type strings.\n */\ntype SstResourceTypeString = `${ResourceType}`;\n\n/**\n * Extracts the `type` string value from an input value.\n */\ntype ExtractType<T> = T extends { type: infer U extends string } ? U : never;\n\n/**\n * Removes the `type` key from an object type.\n */\ntype OmitType<T> = T extends { type: string } ? Omit<T, 'type'> : never;\n\n/**\n * Extracts all unique `type` values from a record (excluding plain strings).\n */\ntype AllTypeValues<TRecord extends Record<string, InputValue>> = {\n\t[K in keyof TRecord]: ExtractType<TRecord[K]>;\n}[keyof TRecord];\n\n/**\n * Extracts only the custom (non-SST) type values from a record.\n */\ntype CustomTypeValues<TRecord extends Record<string, InputValue>> = Exclude<\n\tAllTypeValues<TRecord>,\n\tSstResourceTypeString\n>;\n\n/**\n * For a given type value, finds the corresponding value type (without `type` key).\n */\ntype ValueForType<\n\tTRecord extends Record<string, InputValue>,\n\tTType extends string,\n> = {\n\t[K in keyof TRecord]: TRecord[K] extends { type: TType }\n\t\t? OmitType<TRecord[K]>\n\t\t: never;\n}[keyof TRecord];\n\n/**\n * Generates typed resolvers for custom (non-SST) types in the input record.\n */\ntype CustomResolvers<TRecord extends Record<string, InputValue>> =\n\tCustomTypeValues<TRecord> extends never\n\t\t? Resolvers | undefined\n\t\t: {\n\t\t\t\t[TType in CustomTypeValues<TRecord>]: EnvironmentResolver<\n\t\t\t\t\tValueForType<TRecord, TType>\n\t\t\t\t>;\n\t\t\t};\n\n/**\n * SST-specific environment builder with built-in resolvers for all known\n * SST resource types.\n *\n * Wraps the generic EnvironmentBuilder with pre-configured SST resolvers.\n *\n * @template TRecord - The input record type for type inference\n *\n * @example\n * ```typescript\n * const env = new SstEnvironmentBuilder({\n *   database: { type: 'sst:aws:Postgres', host: '...', ... },\n *   apiKey: { type: 'sst:sst:Secret', value: 'secret' },\n *   appName: 'my-app',\n * }).build();\n *\n * // With custom resolvers (typed based on input)\n * const env = new SstEnvironmentBuilder(\n *   {\n *     database: postgresResource,\n *     custom: { type: 'my-custom' as const, data: 'foo' },\n *   },\n *   {\n *     // TypeScript requires 'my-custom' resolver with typed value\n *     'my-custom': (key, value) => ({ [`${key}Data`]: value.data }),\n *   }\n * ).build();\n * ```\n */\nexport class SstEnvironmentBuilder<\n\tTRecord extends Record<string, SstResource | InputValue | string>,\n> {\n\tprivate readonly builder: EnvironmentBuilder<\n\t\tRecord<string, InputValue>,\n\t\tResolvers\n\t>;\n\n\t/**\n\t * Create a new SST environment builder.\n\t *\n\t * @param record - Object containing SST resources, custom resources, and/or string values\n\t * @param additionalResolvers - Optional custom resolvers (typed based on custom types in record)\n\t * @param options - Optional configuration options\n\t */\n\tconstructor(\n\t\trecord: TRecord,\n\t\tadditionalResolvers?: CustomResolvers<TRecord>,\n\t\toptions?: EnvironmentBuilderOptions,\n\t) {\n\t\t// Merge resolvers with custom ones taking precedence\n\t\tconst mergedResolvers: Resolvers = additionalResolvers\n\t\t\t? { ...sstResolvers, ...additionalResolvers }\n\t\t\t: sstResolvers;\n\n\t\tthis.builder = new EnvironmentBuilder(\n\t\t\trecord as Record<string, InputValue>,\n\t\t\tmergedResolvers,\n\t\t\toptions,\n\t\t);\n\t}\n\n\t/**\n\t * Build environment variables from the input record.\n\t *\n\t * @returns A record of environment variables\n\t */\n\tbuild(): EnvRecord {\n\t\treturn this.builder.build();\n\t}\n}\n\nexport type {\n\tEnvironmentBuilderOptions,\n\tEnvRecord,\n\tEnvValue,\n} from './EnvironmentBuilder';\n// Re-export useful types\nexport { environmentCase } from './EnvironmentBuilder';\n"],"mappings":";;;;;;;AAaA,IAAY,wDAAL;AAEN;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;;AACA;AAwGD,MAAM,iBAAiB,CAACA,MAAcC,WAAwB,GAC5D,OAAO,MAAM,MACd;AAED,MAAM,mBAAmB,CAACC,KAAaC,WAA0B;GAC9D,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;GACxB,EAAE,IAAI,QAAQ,MAAM;GACpB,EAAE,IAAI,YAAY,MAAM;AAC1B;AAED,MAAM,iBAAiB,CAACH,MAAcI,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,gBAAgB,CAACJ,MAAcK,WAA0B,IAC5D,EAAE,KAAK,OAAO,MAAM,IACtB;AAED,MAAM,iBAAiB,CAACL,MAAcM,WAAwB,IAC3D,EAAE,KAAK,QAAQ,MAAM,KACvB;AAED,MAAM,eAAe,OAAO,CAAE;;;;AAK9B,MAAaC,eAA0B;EAErC,aAAa,eAAe;EAC5B,aAAa,WAAW;EACxB,aAAa,MAAM;EACnB,aAAa,SAAS;EACtB,aAAa,WAAW;EACxB,aAAa,SAAS;EAGtB,aAAa,YAAY;EACzB,aAAa,YAAY;EACzB,aAAa,cAAc;EAC3B,aAAa,cAAc;EAC3B,aAAa,kBAAkB;EAC/B,aAAa,WAAW;EACxB,aAAa,YAAY;AAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqFD,IAAa,wBAAb,MAEE;CACD,AAAiB;;;;;;;;CAYjB,YACCC,QACAC,qBACAC,SACC;EAED,MAAMC,kBAA6B,sBAChC;GAAE,GAAG;GAAc,GAAG;EAAqB,IAC3C;AAEH,OAAK,UAAU,IAAI,mBAClB,QACA,iBACA;CAED;;;;;;CAOD,QAAmB;AAClB,SAAO,KAAK,QAAQ,OAAO;CAC3B;AACD"}