@geekmidas/manifest 10.0.0-alpha.167 → 10.0.0-alpha.169

package/dist/index.cjs

@@ -33,13 +33,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 * this.
 */
 const DEFAULT_POSTGRES_VERSION = 18;
+/** Whether a declaration is built into a public bundle — a site or an app. */
+function isPublicDeclaration(declaration) {
+	return declaration.kind === "site" || declaration.kind === "mobile-app";
+}
 /** A site's subdomain that means every subdomain — see `SiteDeclaration`. */
 const WILDCARD_SUBDOMAIN = "*";
 /**
 * Whether a declaration is a site answering on every subdomain.
 */
 function isWildcardSite(declaration) {
-	return declaration?.kind === "site" && declaration.subdomain === "*";
+	return declaration?.kind === "site" && "subdomain" in declaration && declaration.subdomain === "*";
 }
 /**
 * What a `Telemetry` node provides to each process with an edge to it.
@@ -1008,6 +1012,47 @@ const PUBLIC_PREFIX = {
 	expo: "EXPO_PUBLIC_"
 };
 /**
+* Every public value a site's or a mobile app's edges reach — the one walk of
+* its edges that every target makes, so what a bundle inlines cannot differ
+* between `gkm dev`, a compose build and the AWS target.
+*
+* Each edge's `PUBLIC` roles, and, because a bucket and the file server over
+* it are one construct to a page:
+*
+* - an edge to a bucket (a full-stack site's `.dependsOn([assets.server])`)
+*   also reaches each file server over it — its objects are shown from there;
+* - an edge to a file server also reaches its bucket's public values — where
+*   the bucket signs the links to its private objects.
+*
+* A bucket's connection is never one: `PUBLIC.objects` does not list it.
+*/
+function publicValues(declaration, manifest) {
+	const values = /* @__PURE__ */ new Map();
+	const reach = (id) => {
+		const target = manifest[id];
+		if (!target) return;
+		for (const role of PUBLIC[target.kind] ?? []) {
+			const key = providedKeyFor(id, target.kind, role);
+			values.set(key, {
+				id,
+				kind: target.kind,
+				role,
+				key
+			});
+		}
+	};
+	for (const edge of declaration.dependencies) {
+		const target = manifest[edge.target];
+		if (!target) continue;
+		reach(edge.target);
+		if (target.kind === "objects") {
+			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) reach(id);
+		}
+		if (target.kind === "file-server") reach(target.of);
+	}
+	return [...values.values()];
+}
+/**
 * The keys a site's bundle needs, mapped to the key each value comes from —
 * `{ VITE_API_URL: 'API_URL' }` — its edges' public values, and a site's own
 * address (`{ VITE_WEB_URL: 'WEB_URL' }`).
@@ -1030,31 +1075,14 @@ function publicEnvFor(declaration, manifest) {
 	const prefix = PUBLIC_PREFIX[declaration.variant];
 	const keys = {};
 	if (declaration.kind === "site") {
-		const own = provideKey(declaration.id, "url");
+		const own = providedKeyFor(declaration.id, "site", "url");
 		keys[`${prefix}${own}`] = own;
 	}
 	if (isWildcardSite(declaration)) for (const role of ["domain", "protectedSubdomains"]) {
-		const key = provideKey(declaration.id, role);
+		const key = providedKeyFor(declaration.id, "site", role);
 		keys[`${prefix}${key}`] = key;
 	}
-	const inline = (id, target) => {
-		for (const role of PUBLIC[target.kind] ?? []) {
-			const key = providedKeyFor(id, target.kind, role);
-			keys[`${prefix}${key}`] = key;
-		}
-	};
-	for (const edge of declaration.dependencies) {
-		const target = manifest[edge.target];
-		if (!target) continue;
-		inline(edge.target, target);
-		if (target.kind === "objects") {
-			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) inline(id, other);
-		}
-		if (target.kind === "file-server") {
-			const bucket = manifest[target.of];
-			if (bucket) inline(target.of, bucket);
-		}
-	}
+	for (const { key } of publicValues(declaration, manifest)) keys[`${prefix}${key}`] = key;
 	return keys;
 }
 /**
@@ -1069,25 +1097,11 @@ const IMAGE_ORIGINS_KEY = "GKM_IMAGE_ORIGINS";
 /**
 * The keys whose values are the origins a site's pages load files from: each
 * file server it reaches, and where each bucket it reaches signs its links —
-* by either edge, the same walk {@link publicEnvFor} makes. Sorted, so the
+* by either edge, read off {@link publicValues}. Sorted, so the
 * value composed from them does not churn.
 */
 function imageOriginSources(declaration, manifest) {
-	const sources = /* @__PURE__ */ new Set();
-	const bucket = (id) => sources.add(providedKeyFor(id, "objects", "signedOrigin"));
-	const server = (id) => sources.add(providedKeyFor(id, "file-server", "url"));
-	for (const edge of declaration.dependencies) {
-		const target = manifest[edge.target];
-		if (target?.kind === "objects") {
-			bucket(edge.target);
-			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) server(id);
-		}
-		if (target?.kind === "file-server") {
-			server(edge.target);
-			if (manifest[target.of]?.kind === "objects") bucket(target.of);
-		}
-	}
-	return [...sources].sort();
+	return publicValues(declaration, manifest).filter(({ kind, role }) => kind === "file-server" && role === "url" || kind === "objects" && role === "signedOrigin").map(({ key }) => key).sort();
 }
 /**
 * {@link IMAGE_ORIGINS_KEY}'s value: the origin of each source that resolved,
@@ -1123,6 +1137,14 @@ function bucketExpiry(manifest, bucketId) {
 	return Object.keys(expire).length > 0 ? expire : void 0;
 }
 //#endregion
+//#region src/email.ts
+/** The local part mail is sent from when the construct names none. */
+const DEFAULT_SENDER = "noreply";
+/** `<local part>@<domain>` — `info@shop.example.com`, else `noreply@…`. */
+function senderAddress(email, domain) {
+	return `${email.from ?? "noreply"}@${domain}`;
+}
+//#endregion
 //#region src/encryption.ts
 /**
 * The `kms://` URL an `Encryption` construct reads on AWS.
@@ -1219,6 +1241,81 @@ const EDGE_TOKEN_HEADER = "x-gkm-edge-token";
 /** Where a stack's processes read the token {@link EDGE_TOKEN_HEADER} carries. */
 const EDGE_TOKEN_KEY = "GKM_EDGE_TOKEN";
 //#endregion
+//#region src/hosts.ts
+/** Whether a declaration answers on a host of its own: a surface or a site. */
+function isHostedDeclaration(declaration) {
+	return declaration?.kind === "rest-api" || declaration?.kind === "websocket-api" || declaration?.kind === "site";
+}
+/**
+* The one derivation of a construct's labels: its primary label, its
+* aliases and its redirects, in declared order.
+*/
+function hostLabels(source) {
+	return {
+		primary: source.subdomain ?? kebabCase(source.id),
+		aliases: [...source.aliases ?? []],
+		redirects: [...source.redirects ?? []]
+	};
+}
+/** One label of a DNS name: lowercase letters, digits and inner hyphens. */
+const LABEL$1 = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+/** An alias or redirect that cannot be a label of its own under the domain. */
+var InvalidHostLabel = class extends Error {
+	id;
+	label;
+	field;
+	constructor(id, label, field) {
+		super(`'${id}' lists '${label}' in ${field}, which is not a host label it can add: each entry is one lowercase label under the stage's domain ('rest', 'www') — no '*', no dots — listed once, and not the construct's own label. Fix or remove the entry.`);
+		this.id = id;
+		this.label = label;
+		this.field = field;
+		this.name = "InvalidHostLabel";
+	}
+};
+/** A wildcard site with aliases or redirects. */
+var WildcardSiteCannotHaveAliases = class extends Error {
+	id;
+	constructor(id) {
+		super(`'${id}' answers on every subdomain, so it has no single host for an alias to repeat or a redirect to point at. Drop \`aliases\` and \`redirects\`, or give the site a subdomain of its own.`);
+		this.id = id;
+		this.name = "WildcardSiteCannotHaveAliases";
+	}
+};
+/** One label listed as both an alias and a redirect. */
+var HostLabelBothAliasAndRedirect = class extends Error {
+	id;
+	label;
+	constructor(id, label) {
+		super(`'${id}' lists '${label}' in both aliases and redirects, but a host either serves the site or sends the browser elsewhere. Keep it in one of the two.`);
+		this.id = id;
+		this.label = label;
+		this.name = "HostLabelBothAliasAndRedirect";
+	}
+};
+/**
+* What a construct's aliases and redirects have to be, checked where it is
+* constructed.
+*
+* @throws {WildcardSiteCannotHaveAliases} on a wildcard site with either
+* @throws {HostLabelBothAliasAndRedirect} when a label is in both lists
+* @throws {InvalidHostLabel} for `'*'`, a dot, a repeat, or its own label
+*/
+function assertHostLabels(source) {
+	const { primary, aliases, redirects } = hostLabels(source);
+	if (aliases.length === 0 && redirects.length === 0) return;
+	if (primary === "*") throw new WildcardSiteCannotHaveAliases(source.id);
+	for (const label of aliases) if (redirects.includes(label)) throw new HostLabelBothAliasAndRedirect(source.id, label);
+	const seen = /* @__PURE__ */ new Set([primary]);
+	const check = (labels, field) => {
+		for (const label of labels) {
+			if (!LABEL$1.test(label) || seen.has(label)) throw new InvalidHostLabel(source.id, label, field);
+			seen.add(label);
+		}
+	};
+	check(aliases, "aliases");
+	check(redirects, "redirects");
+}
+//#endregion
 //#region src/inbox.ts
 /** The event type a received message is announced as on its inbox's topic. */
 const INBOX_EVENT = "email.received";
@@ -1528,18 +1625,21 @@ exports.CLIENT_IP_HEADER = CLIENT_IP_HEADER;
 exports.DATABASE_FOLDERS = DATABASE_FOLDERS;
 exports.DEFAULT_DERIVED_DAYS = DEFAULT_DERIVED_DAYS;
 exports.DEFAULT_POSTGRES_VERSION = DEFAULT_POSTGRES_VERSION;
+exports.DEFAULT_SENDER = DEFAULT_SENDER;
 exports.DEFAULT_STAGE_URL = DEFAULT_STAGE_URL;
 exports.DERIVED_PREFIX = DERIVED_PREFIX;
 exports.DERIVES_FROM = DERIVES_FROM;
 exports.EDGE_TOKEN_HEADER = EDGE_TOKEN_HEADER;
 exports.EDGE_TOKEN_KEY = EDGE_TOKEN_KEY;
 exports.FILE_SERVER_SUFFIX = FILE_SERVER_SUFFIX;
+exports.HostLabelBothAliasAndRedirect = HostLabelBothAliasAndRedirect;
 exports.IMAGE_ORIGINS_KEY = IMAGE_ORIGINS_KEY;
 exports.INBOX_EVENT = INBOX_EVENT;
 exports.INBOX_MESSAGES_PREFIX = INBOX_MESSAGES_PREFIX;
 exports.IllegalDerivation = IllegalDerivation;
 exports.InvalidApiGatewayWebSocketUrl = InvalidApiGatewayWebSocketUrl;
 exports.InvalidConstructId = InvalidConstructId;
+exports.InvalidHostLabel = InvalidHostLabel;
 exports.KMS_SCHEME = KMS_SCHEME;
 exports.MIGRATIONS_ROOT = MIGRATIONS_ROOT;
 exports.NoUrlForStage = NoUrlForStage;
@@ -1550,8 +1650,10 @@ exports.SECRET_SYMBOLS = SECRET_SYMBOLS;
 exports.TELEMETRY_KEYS = TELEMETRY_KEYS;
 exports.UnknownParent = UnknownParent;
 exports.WILDCARD_SUBDOMAIN = WILDCARD_SUBDOMAIN;
+exports.WildcardSiteCannotHaveAliases = WildcardSiteCannotHaveAliases;
 exports.apiGatewayWebSocketUrl = apiGatewayWebSocketUrl;
 exports.assertDerivations = assertDerivations;
+exports.assertHostLabels = assertHostLabels;
 exports.bucketExpiry = bucketExpiry;
 exports.cacheTable = cacheTable;
 exports.canonicalId = canonicalId;
@@ -1565,10 +1667,13 @@ exports.environmentCase = environmentCase;
 exports.externalApiUrl = externalApiUrl;
 exports.fileServerName = fileServerName;
 exports.fileServerSurfaceId = fileServerSurfaceId;
+exports.hostLabels = hostLabels;
 exports.imageOriginSources = imageOriginSources;
 exports.imageOrigins = imageOrigins;
 exports.inboxRecipient = inboxRecipient;
 exports.isDerived = isDerived;
+exports.isHostedDeclaration = isHostedDeclaration;
+exports.isPublicDeclaration = isPublicDeclaration;
 exports.isWebOrigin = isWebOrigin;
 exports.isWildcardSite = isWildcardSite;
 exports.kebabCase = kebabCase;
@@ -1577,14 +1682,15 @@ exports.migrationFolder = migrationFolder;
 exports.migrationTargets = migrationTargets;
 exports.mobileOrigins = mobileOrigins;
 exports.parseApiGatewayWebSocketUrl = parseApiGatewayWebSocketUrl;
-exports.provideKey = provideKey;
 exports.providedKeyFor = providedKeyFor;
 exports.provisionOrder = provisionOrder;
 exports.publicEnvFor = publicEnvFor;
+exports.publicValues = publicValues;
 exports.receiptRecipients = receiptRecipients;
 exports.schemeBase = schemeBase;
 exports.scopedName = scopedName;
 exports.seedFolder = seedFolder;
+exports.senderAddress = senderAddress;
 exports.serviceKey = serviceKey;
 exports.trustsOrigin = trustsOrigin;
 exports.wildcardDomainOf = wildcardDomainOf;