@geekmidas/manifest 10.0.0-alpha.166 → 10.0.0-alpha.168

package/dist/index.cjs

@@ -33,13 +33,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 * this.
 */
 const DEFAULT_POSTGRES_VERSION = 18;
+/** Whether a declaration is built into a public bundle — a site or an app. */
+function isPublicDeclaration(declaration) {
+	return declaration.kind === "site" || declaration.kind === "mobile-app";
+}
 /** A site's subdomain that means every subdomain — see `SiteDeclaration`. */
 const WILDCARD_SUBDOMAIN = "*";
 /**
 * Whether a declaration is a site answering on every subdomain.
 */
 function isWildcardSite(declaration) {
-	return declaration?.kind === "site" && declaration.subdomain === "*";
+	return declaration?.kind === "site" && "subdomain" in declaration && declaration.subdomain === "*";
 }
 /**
 * What a `Telemetry` node provides to each process with an edge to it.
@@ -76,7 +80,7 @@ const DERIVES_FROM = {
 * can legitimately use any of them. A bucket's `url` presigns and stays private.
 */
 const PUBLIC = {
-	objects: [],
+	objects: ["signedOrigin"],
 	"file-server": ["url"],
 	email: ["inboxUrl"],
 	inbox: [],
@@ -875,8 +879,32 @@ function cookieDomain(urls) {
 function providedKeyFor(id, kind, role) {
 	if (kind === "secret") return environmentCase(id);
 	if (kind === "telemetry") return "OTEL_EXPORTER_OTLP_ENDPOINT";
+	if (kind === "file-server") return provideKey(fileServerName(id), role);
 	return provideKey(id, role);
 }
+/**
+* What a file server's surface node adds to the construct's id. The bucket
+* keeps the plain id, so serving a bucket you already have adds a node rather
+* than renaming the one holding the data.
+*/
+const FILE_SERVER_SUFFIX = "Server";
+/**
+* A file server's surface node id, from the construct's id.
+*
+* @example fileServerSurfaceId('Assets') // 'AssetsServer'
+*/
+function fileServerSurfaceId(id) {
+	return `${id}${FILE_SERVER_SUFFIX}`;
+}
+/**
+* The construct's id, from its surface node's: what its key and its host are
+* named after.
+*
+* @example fileServerName('AssetsServer') // 'Assets'
+*/
+function fileServerName(surfaceId) {
+	return surfaceId.endsWith("Server") && surfaceId.length > 6 ? surfaceId.slice(0, -6) : surfaceId;
+}
 //#endregion
 //#region src/derive.ts
 /** Whether a declaration names a parent. */
@@ -984,6 +1012,47 @@ const PUBLIC_PREFIX = {
 	expo: "EXPO_PUBLIC_"
 };
 /**
+* Every public value a site's or a mobile app's edges reach — the one walk of
+* its edges that every target makes, so what a bundle inlines cannot differ
+* between `gkm dev`, a compose build and the AWS target.
+*
+* Each edge's `PUBLIC` roles, and, because a bucket and the file server over
+* it are one construct to a page:
+*
+* - an edge to a bucket (a full-stack site's `.dependsOn([assets.server])`)
+*   also reaches each file server over it — its objects are shown from there;
+* - an edge to a file server also reaches its bucket's public values — where
+*   the bucket signs the links to its private objects.
+*
+* A bucket's connection is never one: `PUBLIC.objects` does not list it.
+*/
+function publicValues(declaration, manifest) {
+	const values = /* @__PURE__ */ new Map();
+	const reach = (id) => {
+		const target = manifest[id];
+		if (!target) return;
+		for (const role of PUBLIC[target.kind] ?? []) {
+			const key = providedKeyFor(id, target.kind, role);
+			values.set(key, {
+				id,
+				kind: target.kind,
+				role,
+				key
+			});
+		}
+	};
+	for (const edge of declaration.dependencies) {
+		const target = manifest[edge.target];
+		if (!target) continue;
+		reach(edge.target);
+		if (target.kind === "objects") {
+			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) reach(id);
+		}
+		if (target.kind === "file-server") reach(target.of);
+	}
+	return [...values.values()];
+}
+/**
 * The keys a site's bundle needs, mapped to the key each value comes from —
 * `{ VITE_API_URL: 'API_URL' }` — its edges' public values, and a site's own
 * address (`{ VITE_WEB_URL: 'WEB_URL' }`).
@@ -1006,23 +1075,50 @@ function publicEnvFor(declaration, manifest) {
 	const prefix = PUBLIC_PREFIX[declaration.variant];
 	const keys = {};
 	if (declaration.kind === "site") {
-		const own = provideKey(declaration.id, "url");
+		const own = providedKeyFor(declaration.id, "site", "url");
 		keys[`${prefix}${own}`] = own;
 	}
 	if (isWildcardSite(declaration)) for (const role of ["domain", "protectedSubdomains"]) {
-		const key = provideKey(declaration.id, role);
+		const key = providedKeyFor(declaration.id, "site", role);
 		keys[`${prefix}${key}`] = key;
 	}
-	for (const edge of declaration.dependencies) {
-		const target = manifest[edge.target];
-		if (!target) continue;
-		for (const role of PUBLIC[target.kind] ?? []) {
-			const key = provideKey(edge.target, role);
-			keys[`${prefix}${key}`] = key;
-		}
-	}
+	for (const { key } of publicValues(declaration, manifest)) keys[`${prefix}${key}`] = key;
 	return keys;
 }
+/**
+* The key, under a site's public prefix, that lists every origin its pages
+* load files from: `NEXT_PUBLIC_GKM_IMAGE_ORIGINS`. Comma-separated.
+*
+* One composed key rather than a rule over names, because a file server's
+* `<ID>_URL` and an API's look the same: which of a bundle's addresses serve
+* files is a fact about the graph, so the graph says it.
+*/
+const IMAGE_ORIGINS_KEY = "GKM_IMAGE_ORIGINS";
+/**
+* The keys whose values are the origins a site's pages load files from: each
+* file server it reaches, and where each bucket it reaches signs its links —
+* by either edge, read off {@link publicValues}. Sorted, so the
+* value composed from them does not churn.
+*/
+function imageOriginSources(declaration, manifest) {
+	return publicValues(declaration, manifest).filter(({ kind, role }) => kind === "file-server" && role === "url" || kind === "objects" && role === "signedOrigin").map(({ key }) => key).sort();
+}
+/**
+* {@link IMAGE_ORIGINS_KEY}'s value: the origin of each source that resolved,
+* de-duplicated and comma-separated. `undefined` when none did, so a site
+* that shows no files is built without the key at all.
+*/
+function imageOrigins(sources, resolve) {
+	const origins = /* @__PURE__ */ new Set();
+	for (const source of sources) {
+		const value = resolve(source);
+		if (!value) continue;
+		try {
+			origins.add(new URL(value).origin);
+		} catch {}
+	}
+	return origins.size > 0 ? [...origins].sort().join(",") : void 0;
+}
 //#endregion
 //#region src/derived.ts
 /** Where a processor keeps what it made, in the bucket it reads. */
@@ -1451,6 +1547,8 @@ exports.DERIVED_PREFIX = DERIVED_PREFIX;
 exports.DERIVES_FROM = DERIVES_FROM;
 exports.EDGE_TOKEN_HEADER = EDGE_TOKEN_HEADER;
 exports.EDGE_TOKEN_KEY = EDGE_TOKEN_KEY;
+exports.FILE_SERVER_SUFFIX = FILE_SERVER_SUFFIX;
+exports.IMAGE_ORIGINS_KEY = IMAGE_ORIGINS_KEY;
 exports.INBOX_EVENT = INBOX_EVENT;
 exports.INBOX_MESSAGES_PREFIX = INBOX_MESSAGES_PREFIX;
 exports.IllegalDerivation = IllegalDerivation;
@@ -1479,8 +1577,13 @@ exports.dependentsOf = dependentsOf;
 exports.drawSecret = drawSecret;
 exports.environmentCase = environmentCase;
 exports.externalApiUrl = externalApiUrl;
+exports.fileServerName = fileServerName;
+exports.fileServerSurfaceId = fileServerSurfaceId;
+exports.imageOriginSources = imageOriginSources;
+exports.imageOrigins = imageOrigins;
 exports.inboxRecipient = inboxRecipient;
 exports.isDerived = isDerived;
+exports.isPublicDeclaration = isPublicDeclaration;
 exports.isWebOrigin = isWebOrigin;
 exports.isWildcardSite = isWildcardSite;
 exports.kebabCase = kebabCase;
@@ -1489,10 +1592,10 @@ exports.migrationFolder = migrationFolder;
 exports.migrationTargets = migrationTargets;
 exports.mobileOrigins = mobileOrigins;
 exports.parseApiGatewayWebSocketUrl = parseApiGatewayWebSocketUrl;
-exports.provideKey = provideKey;
 exports.providedKeyFor = providedKeyFor;
 exports.provisionOrder = provisionOrder;
 exports.publicEnvFor = publicEnvFor;
+exports.publicValues = publicValues;
 exports.receiptRecipients = receiptRecipients;
 exports.schemeBase = schemeBase;
 exports.scopedName = scopedName;