@justscale/core 0.1.0

package/dist/features/env/contribute.js

@@ -0,0 +1,195 @@
+/**
+ * Env contribution helpers for assembling an environment declaratively.
+ *
+ * `buildProviders([...])` partitions contributions into the three
+ * providers `createEnvironment` expects (config, secrets, flags).
+ *
+ * `fromVault(partial, mapping)` builds an async config source that reads
+ * each field from the vault and coerces the raw string using the partial's
+ * zod schema. Fields with `.default()` or `.optional()` are silently
+ * dropped when the vault path is missing; required fields throw at boot.
+ */
+import { z } from 'zod';
+import { AbstractVaultClient } from '../vault/types.js';
+import { createConfig } from '../config/create-config.js';
+import { createSecretProvider } from '../secrets/create-secret-provider.js';
+import { createFeatureFlagProvider } from '../feature-flags/create-feature-flag-provider.js';
+// ============================================================================
+// Contribution kinds
+// ============================================================================
+const CONFIG_CONTRIB = Symbol('env:config-contribution');
+const SECRET_CONTRIB = Symbol('env:secret-contribution');
+const FLAG_CONTRIB = Symbol('env:flag-contribution');
+// ============================================================================
+// Contribution constructors
+// ============================================================================
+/** Contribute values for a config partial. Unset fields fall through to the partial's zod defaults. */
+export function config(partial, source = {}) {
+    return { [CONFIG_CONTRIB]: true, partial, source };
+}
+/** Contribute a factory for a secret partial. Runs with the env's injected vault client. */
+export function secret(partial, factory) {
+    return { [SECRET_CONTRIB]: true, partial, factory };
+}
+/** Contribute values for a feature-flag partial. Unset fields fall through to the partial's zod defaults. */
+export function flag(partial, value = {}) {
+    return { [FLAG_CONTRIB]: true, partial, value };
+}
+// ============================================================================
+// fromVault - schema-aware config source
+// ============================================================================
+/**
+ * Build an async config source that reads mapped fields from the vault.
+ * Each raw string is coerced to the field's zod type before returning.
+ * Required fields throw at boot; optional/defaulted fields are silently skipped.
+ */
+export function fromVault(partial, mapping) {
+    return async ({ vault }) => {
+        const shape = unwrapZodObject(partial.schema).shape;
+        const result = {};
+        for (const [field, path] of Object.entries(mapping)) {
+            if (path === undefined)
+                continue;
+            const zodType = shape[field];
+            if (!zodType) {
+                throw new Error(`fromVault: field '${field}' is not in the '${partial.name}' schema`);
+            }
+            const optional = isOptionalInSchema(zodType);
+            const raw = optional
+                ? await vault.readOptional(path)
+                : await vault.read(path);
+            if (raw === undefined) {
+                if (acceptsNull(zodType) && !acceptsUndefined(zodType)) {
+                    result[field] = null;
+                }
+                continue;
+            }
+            try {
+                result[field] = parseForZod(zodType, raw);
+            }
+            catch (err) {
+                throw new Error(`fromVault: failed to parse '${partial.name}.${field}' from '${path}': ${err.message}`, { cause: err });
+            }
+        }
+        return result;
+    };
+}
+function unwrapZodObject(schema) {
+    let current = schema;
+    while (current instanceof z.ZodDefault ||
+        current instanceof z.ZodOptional ||
+        current instanceof z.ZodNullable) {
+        current = current._def.innerType;
+    }
+    if (!(current instanceof z.ZodObject)) {
+        throw new Error('fromVault: partial schema must be a ZodObject');
+    }
+    return current;
+}
+/** True when a missing value is acceptable (zod handles it without erroring). */
+function isOptionalInSchema(zodType) {
+    return (zodType instanceof z.ZodDefault ||
+        zodType instanceof z.ZodOptional ||
+        zodType instanceof z.ZodNullable);
+}
+/** True when the schema accepts `null`. Walks wrapper layers. */
+function acceptsNull(zodType) {
+    let t = zodType;
+    while (t instanceof z.ZodDefault || t instanceof z.ZodOptional) {
+        t = t._def.innerType;
+    }
+    return t instanceof z.ZodNullable;
+}
+/** True when the schema accepts `undefined`. ZodNullable alone does NOT. */
+function acceptsUndefined(zodType) {
+    let t = zodType;
+    while (t instanceof z.ZodNullable) {
+        t = t._def.innerType;
+    }
+    return t instanceof z.ZodOptional || t instanceof z.ZodDefault;
+}
+function parseForZod(zodType, raw) {
+    let t = zodType;
+    while (t instanceof z.ZodDefault ||
+        t instanceof z.ZodOptional ||
+        t instanceof z.ZodNullable) {
+        t = t._def.innerType;
+    }
+    if (t instanceof z.ZodNumber) {
+        const n = Number(raw);
+        if (Number.isNaN(n))
+            throw new Error(`'${raw}' is not a valid number`);
+        return n;
+    }
+    if (t instanceof z.ZodBoolean) {
+        if (raw === 'true' || raw === '1')
+            return true;
+        if (raw === 'false' || raw === '0')
+            return false;
+        throw new Error(`'${raw}' is not a valid boolean (expected 'true' | 'false' | '1' | '0')`);
+    }
+    if (t instanceof z.ZodBigInt)
+        return BigInt(raw);
+    if (t instanceof z.ZodDate)
+        return new Date(raw);
+    if (t instanceof z.ZodArray ||
+        t instanceof z.ZodObject ||
+        t instanceof z.ZodRecord ||
+        t instanceof z.ZodTuple) {
+        return JSON.parse(raw);
+    }
+    // String, enum, native enum, literal, union-of-strings - passthrough.
+    return raw;
+}
+// ============================================================================
+// Provider assembly
+// ============================================================================
+function isConfigContrib(c) {
+    return CONFIG_CONTRIB in c;
+}
+function isSecretContrib(c) {
+    return SECRET_CONTRIB in c;
+}
+function isFlagContrib(c) {
+    return FLAG_CONTRIB in c;
+}
+/**
+ * Partition contributions by kind and assemble the `[Config, Secrets, Flags]`
+ * provider triple that `createEnvironment({ providers })` expects.
+ */
+export function buildProviders(contributions) {
+    const configs = contributions.filter(isConfigContrib);
+    const secrets = contributions.filter(isSecretContrib);
+    const flags = contributions.filter(isFlagContrib);
+    const Config = createConfig({
+        provides: configs.map((c) => c.partial),
+        inject: { vault: AbstractVaultClient },
+        factory: async (deps) => {
+            const result = {};
+            for (const c of configs) {
+                const value = typeof c.source === 'function'
+                    ? await c.source(deps)
+                    : c.source;
+                result[c.partial.key] = value;
+            }
+            return result;
+        },
+    });
+    const Secrets = createSecretProvider({
+        provides: secrets.map((c) => c.partial),
+        inject: { vault: AbstractVaultClient },
+        factory: async (deps) => {
+            const result = {};
+            for (const c of secrets) {
+                result[c.partial.key] = await c.factory(deps);
+            }
+            return result;
+        },
+    });
+    const Flags = createFeatureFlagProvider({
+        provides: flags.map((c) => c.partial),
+        factory: () => Object.fromEntries(flags.map((c) => [c.partial.key, c.value])),
+    });
+    return [Config, Secrets, Flags];
+}
+//# sourceMappingURL=contribute.js.map

package/dist/features/env/contribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contribute.js","sourceRoot":"","sources":["../../../src/features/env/contribute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAoB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAK7F,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,cAAc,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAgCrD,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,uGAAuG;AACvG,MAAM,UAAU,MAAM,CACpB,OAAkD,EAClD,SAAmC,EAAE;IAErC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,MAAM,CACpB,OAAyB,EACzB,OAAyC;IAEzC,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,IAAI,CAClB,OAAuD,EACvD,QAA6B,EAAE;IAE/B,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,OAAyB,EACzB,OAAkD;IAElD,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAqC,CAAC;QACpF,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,qBAAqB,KAAK,oBAAoB,OAAO,CAAC,IAAI,UAAU,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ;gBAClB,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,IAAc,CAAC;gBAC1C,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;YAErC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;gBACvB,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,EACjG,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,MAAoB,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,OAAO,GAAiB,MAAM,CAAC;IACnC,OACE,OAAO,YAAY,CAAC,CAAC,UAAU;QAC/B,OAAO,YAAY,CAAC,CAAC,WAAW;QAChC,OAAO,YAAY,CAAC,CAAC,WAAW,EAChC,CAAC;QACD,OAAO,GAAI,OAA4D,CAAC,IAAI,CAAC,SAAS,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,OAAqB;IAC/C,OAAO,CACL,OAAO,YAAY,CAAC,CAAC,UAAU;QAC/B,OAAO,YAAY,CAAC,CAAC,WAAW;QAChC,OAAO,YAAY,CAAC,CAAC,WAAW,CACjC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,OAAqB;IACxC,IAAI,CAAC,GAAiB,OAAO,CAAC;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,CAAC,GAAI,CAAsD,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC;AACpC,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,OAAqB;IAC7C,IAAI,CAAC,GAAiB,OAAO,CAAC;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAClC,CAAC,GAAI,CAAsD,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,OAAqB,EAAE,GAAW;IACrD,IAAI,CAAC,GAAiB,OAAO,CAAC;IAC9B,OACE,CAAC,YAAY,CAAC,CAAC,UAAU;QACzB,CAAC,YAAY,CAAC,CAAC,WAAW;QAC1B,CAAC,YAAY,CAAC,CAAC,WAAW,EAC1B,CAAC;QACD,CAAC,GAAI,CAAsD,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,yBAAyB,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,kEAAkE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,IACE,CAAC,YAAY,CAAC,CAAC,QAAQ;QACvB,CAAC,YAAY,CAAC,CAAC,SAAS;QACxB,CAAC,YAAY,CAAC,CAAC,SAAS;QACxB,CAAC,YAAY,CAAC,CAAC,QAAQ,EACvB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,sEAAsE;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,SAAS,eAAe,CAAC,CAAkB;IACzC,OAAO,cAAc,IAAI,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,eAAe,CAAC,CAAkB;IACzC,OAAO,cAAc,IAAI,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,aAAa,CAAC,CAAkB;IACvC,OAAO,YAAY,IAAI,CAAC,CAAC;AAC3B,CAAC;AA0BD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAgB;IAMhB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACvC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACtC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,KAAK,GACT,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU;oBAC5B,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAiB,CAAC;oBACnC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACf,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAChC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACvC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACtC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,IAAiB,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,yBAAyB,CAAC;QACtC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;KAC9E,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAI7B,CAAC;AACJ,CAAC"}

package/dist/features/environment/create-environment.d.ts

@@ -0,0 +1,58 @@
+import type { Component } from '../../builder/index.js';
+import { type Environment, type EnvironmentType, type ServiceCompatibleWithEnv, type VaultPolicy } from './types.js';
+interface CreateEnvironmentOptions<T extends EnvironmentType, S extends readonly Component[], P extends readonly Component[]> {
+    name: string;
+    type: T;
+    /**
+     * Non-secret environment values (site URL, log level, public API keys, etc.)
+     * Stored on the Environment for runtime introspection. For typed injection,
+     * prefer a `createConfig(...)` in `providers`.
+     */
+    public?: Record<string, unknown>;
+    /**
+     * Raw services (vault clients, flag SDK clients) that providers depend on.
+     * Services carrying a `VaultAllowedIn<E>` brand are checked against the
+     * environment type at compile time - incompatible combos are a TS error.
+     */
+    services?: {
+        [K in keyof S]: ServiceCompatibleWithEnv<S[K], T>;
+    };
+    /**
+     * Config/secret/flag providers that load values at boot.
+     */
+    providers?: P;
+    /**
+     * Override the default vault policy for this environment.
+     * The `extend` key merges additional rules into the default - it does
+     * not replace the defaults.
+     */
+    vaultPolicy?: VaultPolicy;
+}
+/**
+ * Create an Environment - a declarative description of one deployment
+ * target. Added to the builder with `.add(env)`, which expands into the
+ * underlying services and providers while enforcing the vault policy.
+ *
+ * **Typed form** (recommended): pass `<E>` where `E = EnvContract<...>`
+ * from your shared `env-contract.ts`. The return type becomes `E` so
+ * `defineApp<E>` and `loadEnvironment<E>` carry full provides info through
+ * the builder.
+ *
+ * @example
+ * ```ts
+ * // Typed
+ * export default createEnvironment<AppEnv>({
+ *   name: 'production',
+ *   type: 'production',
+ *   services: [KubernetesVault({ namespace: 'prod' })],
+ *   providers: [ProdSecrets, ProdFlags, EnvConfig],
+ * });
+ *
+ * // Untyped (legacy)
+ * export default createEnvironment({ name: '...', type: 'production', ... });
+ * ```
+ */
+export declare function createEnvironment<E extends Environment<any, any>, T extends EnvironmentType = EnvironmentType, const S extends readonly Component[] = readonly Component[]>(options: CreateEnvironmentOptions<T, S, readonly Component[]>): E;
+export declare function createEnvironment<T extends EnvironmentType, const S extends readonly Component[] = readonly [], const P extends readonly Component[] = readonly []>(options: CreateEnvironmentOptions<T, S, P>): Environment<S, P>;
+export {};
+//# sourceMappingURL=create-environment.d.ts.map

package/dist/features/environment/create-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-environment.d.ts","sourceRoot":"","sources":["../../../src/features/environment/create-environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,WAAW,EAEjB,MAAM,YAAY,CAAC;AAEpB,UAAU,wBAAwB,CAChC,CAAC,SAAS,eAAe,EACzB,CAAC,SAAS,SAAS,SAAS,EAAE,EAC9B,CAAC,SAAS,SAAS,SAAS,EAAE;IAE9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,CAAC,CAAA;IACP;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAAE,CAAA;IAChE;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,CAAA;IACb;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AASD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAC/B,CAAC,SAAS,eAAe,GAAG,eAAe,EAC3C,KAAK,CAAC,CAAC,SAAS,SAAS,SAAS,EAAE,GAAG,SAAS,SAAS,EAAE,EAC3D,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;AACpE,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,eAAe,EACzB,KAAK,CAAC,CAAC,SAAS,SAAS,SAAS,EAAE,GAAG,SAAS,EAAE,EAClD,KAAK,CAAC,CAAC,SAAS,SAAS,SAAS,EAAE,GAAG,SAAS,EAAE,EAClD,OAAO,EAAE,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC"}

package/dist/features/environment/create-environment.js

@@ -0,0 +1,22 @@
+import { DEFAULT_VAULT_POLICY, ENVIRONMENT, } from './types.js';
+function mergeRules(a, b) {
+    return {
+        disallow: [...(a.disallow ?? []), ...(b.disallow ?? [])],
+        warn: [...(a.warn ?? []), ...(b.warn ?? [])],
+    };
+}
+export function createEnvironment(options) {
+    const baseRules = DEFAULT_VAULT_POLICY[options.type];
+    const extendRules = options.vaultPolicy?.extend ?? {};
+    const policy = mergeRules(baseRules, extendRules);
+    return {
+        [ENVIRONMENT]: true,
+        name: options.name,
+        type: options.type,
+        public: options.public ?? {},
+        services: (options.services?.slice() ?? []),
+        providers: (options.providers ?? []),
+        vaultPolicy: policy,
+    };
+}
+//# sourceMappingURL=create-environment.js.map

package/dist/features/environment/create-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-environment.js","sourceRoot":"","sources":["../../../src/features/environment/create-environment.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,WAAW,GAMZ,MAAM,YAAY,CAAC;AAiCpB,SAAS,UAAU,CAAC,CAAmB,EAAE,CAAmB;IAC1D,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAoCD,MAAM,UAAU,iBAAiB,CAAC,OAAgD;IAChF,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAuB,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAElD,OAAO;QACL,CAAC,WAAW,CAAC,EAAE,IAAI;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,QAAQ,EAAE,CAAE,OAAO,CAAC,QAA6C,EAAE,KAAK,EAAE,IAAI,EAAE,CAAoC;QACpH,SAAS,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAoC;QACvE,WAAW,EAAE,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/features/environment/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @justscale/core/environment
+ *
+ * Declarative environment primitive - name + type + services + providers.
+ * Enforces vault policy per environment type.
+ */
+export { ENVIRONMENT, ENVIRONMENT_TYPES, DEFAULT_VAULT_POLICY, isEnvironment, } from './types.js';
+export type { Environment, EnvironmentType, EnvContract, Env, RegisteredConfigPartials, RegisteredSecretPartials, RegisteredFlagPartials, VaultPolicy, VaultPolicyRules, VaultAllowedIn, ServiceCompatibleWithEnv, } from './types.js';
+export { createEnvironment } from './create-environment.js';
+export { loadEnvironment, detectEnvironmentName, isEnvironmentType, __registerStaticEnvironment, } from './load.js';
+export type { LoadEnvironmentOptions } from './load.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/features/environment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/features/environment/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,GAAG,EACH,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC"}

package/dist/features/environment/index.js

@@ -0,0 +1,10 @@
+/**
+ * @justscale/core/environment
+ *
+ * Declarative environment primitive - name + type + services + providers.
+ * Enforces vault policy per environment type.
+ */
+export { ENVIRONMENT, ENVIRONMENT_TYPES, DEFAULT_VAULT_POLICY, isEnvironment, } from './types.js';
+export { createEnvironment } from './create-environment.js';
+export { loadEnvironment, detectEnvironmentName, isEnvironmentType, __registerStaticEnvironment, } from './load.js';
+//# sourceMappingURL=index.js.map

package/dist/features/environment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/features/environment/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,GACd,MAAM,YAAY,CAAC;AAepB,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,WAAW,CAAC"}

package/dist/features/environment/load.d.ts

@@ -0,0 +1,59 @@
+import { type Environment, type EnvironmentType } from './types.js';
+/**
+ * Detect which environment should be active, in order of precedence:
+ *
+ * 1. `JUSTSCALE_ENV` env var (set by `just --env=<name>` or explicitly).
+ * 2. If running under a test runner (detected via NODE_ENV=test or
+ *    node:test module loaded), default to `'test'`.
+ * 3. If `NODE_ENV=production`, default to `'production'`.
+ * 4. Otherwise default to `'development'`.
+ *
+ * Returns the resolved environment NAME (not type - the name can be
+ * anything the user's env files define; the type comes from the loaded
+ * Environment object).
+ */
+export declare function detectEnvironmentName(): string;
+export declare function __registerStaticEnvironment(name: string, env: Environment): void;
+export interface LoadEnvironmentOptions {
+    /**
+     * Anchor for resolving `env/`. Pass `import.meta` so the loader walks up
+     * from the caller's file to the nearest `package.json` and looks for an
+     * `env/` directory there. This is the recommended form - it makes the
+     * env resolution independent of `process.cwd()`, which is the workspace
+     * root when run via `just run`.
+     */
+    from?: ImportMeta | {
+        url: string;
+    };
+    /**
+     * Directory containing env/*.ts files. Takes precedence over `from`.
+     * Falls back to `process.cwd()/env` if neither is provided.
+     */
+    envDir?: string;
+    /**
+     * Override the detected environment name.
+     */
+    name?: string;
+    /**
+     * File extensions to try, in order. Defaults to `['.ts', '.js', '.mjs']`.
+     */
+    extensions?: readonly string[];
+}
+/**
+ * Load the active environment by dynamic-importing `{envDir}/{name}.{ext}`.
+ *
+ * @example
+ * ```typescript
+ * const env = await loadEnvironment({ from: import.meta })
+ * const app = JustScale().add(env).add(MyFeature).build()
+ * ```
+ *
+ * @throws if the resolved env file cannot be found or does not export an Environment.
+ */
+export declare function loadEnvironment<E extends Environment = Environment>(options?: LoadEnvironmentOptions): Promise<E>;
+/**
+ * Whitelist guard for environment type names. Useful for code that wants
+ * to validate an arbitrary string is a known EnvironmentType.
+ */
+export declare function isEnvironmentType(value: string): value is EnvironmentType;
+//# sourceMappingURL=load.d.ts.map

package/dist/features/environment/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../../src/features/environment/load.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoC,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtG;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAW9C;AAkBD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAEhF;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC/B;AAkCD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACvE,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,CAAC,CAAC,CAgCZ;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE"}

package/dist/features/environment/load.js

@@ -0,0 +1,117 @@
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { ENVIRONMENT_TYPES, isEnvironment } from './types.js';
+/**
+ * Detect which environment should be active, in order of precedence:
+ *
+ * 1. `JUSTSCALE_ENV` env var (set by `just --env=<name>` or explicitly).
+ * 2. If running under a test runner (detected via NODE_ENV=test or
+ *    node:test module loaded), default to `'test'`.
+ * 3. If `NODE_ENV=production`, default to `'production'`.
+ * 4. Otherwise default to `'development'`.
+ *
+ * Returns the resolved environment NAME (not type - the name can be
+ * anything the user's env files define; the type comes from the loaded
+ * Environment object).
+ */
+export function detectEnvironmentName() {
+    if (process.env.JUSTSCALE_ENV) {
+        return process.env.JUSTSCALE_ENV;
+    }
+    if (process.env.NODE_ENV === 'test' || isTestRunnerDetected()) {
+        return 'test';
+    }
+    if (process.env.NODE_ENV === 'production') {
+        return 'production';
+    }
+    return 'development';
+}
+function isTestRunnerDetected() {
+    // Vitest sets this global on its worker threads.
+    return typeof globalThis.__VITEST_WORKER__ !== 'undefined';
+}
+// ============================================================================
+// Static env registry (bundle-time injection)
+// ============================================================================
+/**
+ * Environments registered at bundle time by `just build --env <name>`.
+ * Allows bundled deploy artifacts to skip filesystem lookup.
+ * @internal
+ */
+const STATIC_ENVS = new Map();
+export function __registerStaticEnvironment(name, env) {
+    STATIC_ENVS.set(name, env);
+}
+/**
+ * Walk up from `startDir` until a `package.json` is found. Returns the
+ * directory containing it, or `null` if no package.json is found.
+ */
+function findPackageRoot(startDir) {
+    let dir = startDir;
+    // Prevent infinite loops on malformed paths.
+    for (let i = 0; i < 64; i++) {
+        if (existsSync(join(dir, 'package.json')))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+    return null;
+}
+/**
+ * Given an ImportMeta-like anchor, return `{packageRoot}/env`.
+ * Walks up from the anchor's file URL to the nearest package.json.
+ */
+function resolveEnvDirFromAnchor(anchor) {
+    const filePath = fileURLToPath(anchor.url);
+    const pkgRoot = findPackageRoot(dirname(filePath));
+    if (!pkgRoot) {
+        throw new Error(`loadEnvironment: could not find a package.json above '${filePath}'. ` +
+            'Pass { envDir } explicitly instead of { from }.');
+    }
+    return join(pkgRoot, 'env');
+}
+/**
+ * Load the active environment by dynamic-importing `{envDir}/{name}.{ext}`.
+ *
+ * @example
+ * ```typescript
+ * const env = await loadEnvironment({ from: import.meta })
+ * const app = JustScale().add(env).add(MyFeature).build()
+ * ```
+ *
+ * @throws if the resolved env file cannot be found or does not export an Environment.
+ */
+export async function loadEnvironment(options = {}) {
+    const name = options.name ?? detectEnvironmentName();
+    if (!options.envDir) {
+        const staticEnv = STATIC_ENVS.get(name);
+        if (staticEnv)
+            return staticEnv;
+    }
+    const envDir = options.envDir
+        ?? (options.from ? resolveEnvDirFromAnchor(options.from) : join(process.cwd(), 'env'));
+    const extensions = options.extensions ?? ['.ts', '.js', '.mjs'];
+    const candidates = extensions.map((ext) => join(envDir, `${name}${ext}`));
+    const match = candidates.find((path) => existsSync(path));
+    if (!match) {
+        throw new Error(`loadEnvironment: no env file found for '${name}'. Looked in: ${candidates.join(', ')}. ` +
+            'Set $JUSTSCALE_ENV or pass { name } to select a different environment, or create the file.');
+    }
+    const module = await import(pathToFileURL(match).href);
+    const value = module.default;
+    if (!isEnvironment(value)) {
+        throw new Error(`loadEnvironment: '${match}' must export default createEnvironment({...}) - got ${typeof value}`);
+    }
+    return value;
+}
+/**
+ * Whitelist guard for environment type names. Useful for code that wants
+ * to validate an arbitrary string is a known EnvironmentType.
+ */
+export function isEnvironmentType(value) {
+    return ENVIRONMENT_TYPES.includes(value);
+}
+//# sourceMappingURL=load.js.map

package/dist/features/environment/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../../src/features/environment/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAA0C,MAAM,YAAY,CAAC;AAEtG;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,oBAAoB,EAAE,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB;IAC3B,iDAAiD;IACjD,OAAO,OAAQ,UAA8C,CAAC,iBAAiB,KAAK,WAAW,CAAC;AAClG,CAAC;AAED,+EAA+E;AAC/E,8CAA8C;AAC9C,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEnD,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,GAAgB;IACxE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AA0BD;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,6CAA6C;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,MAAuB;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yDAAyD,QAAQ,KAAK;YACtE,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAErD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,SAAS;YAAE,OAAO,SAAc,CAAC;IACvC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;WACxB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACzF,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAA0B,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IAE7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,qBAAqB,KAAK,wDAAwD,OAAO,KAAK,EAAE,CACjG,CAAC;IACJ,CAAC;IAED,OAAO,KAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}