@neon/config 0.0.0 → 0.9.0

package/dist/lib/patterns.js

@@ -0,0 +1,76 @@
+//#region src/lib/patterns.ts
+/**
+* Branch-name pattern helpers. Patterns are GitHub-branch-protection style globs:
+* `*` matches one or more characters within a name segment. `**` is not supported (branch
+* names cannot contain `/` in Neon).
+*/
+/** Returns `true` when the pattern contains an unescaped wildcard. */
+function isWildcardPattern(pattern) {
+	return pattern.includes("*");
+}
+/**
+* Returns `true` if `branchName` matches `pattern`. Anchors at both ends.
+*/
+function matchPattern(pattern, branchName) {
+	return patternToRegex(pattern).test(branchName);
+}
+/**
+* Substitute every `*` in `pattern` with `replacement`. When the pattern has no `*`, the
+* replacement is appended with a `-` separator so the caller still gets a unique name.
+*
+* Pure function. The returned string is **not** validated — callers compose it from
+* sources that already passed {@link validatePattern} (the pattern) and
+* {@link normalizeGitBranch}-style sanitization (the replacement).
+*
+* @example
+* fillPattern("preview-*", "andre-feature-a1b2c3") // → "preview-andre-feature-a1b2c3"
+* fillPattern("feat-*-staging", "x")               // → "feat-x-staging"
+* fillPattern("specific", "x")                     // → "specific-x"
+*/
+function fillPattern(pattern, replacement) {
+	if (!isWildcardPattern(pattern)) return `${pattern}-${replacement}`;
+	return pattern.replaceAll("*", replacement);
+}
+/**
+* Validate a branch pattern. Pure — returns either `{ ok: true }` or `{ error: string }`.
+*
+* Rules:
+* - Non-empty after trim, no leading/trailing whitespace.
+* - Length <= 256 (Neon branch name max).
+* - May contain `*`, ASCII letters/digits, and the punctuation Neon allows in branch names:
+*   `-`, `_`, `.`, `/`. Whitespace and regex meta-characters other than `*` are rejected.
+*/
+function validatePattern(pattern) {
+	const trimmed = pattern.trim();
+	if (trimmed === "") return { error: "branch pattern is empty" };
+	if (trimmed !== pattern) return { error: `branch pattern has leading or trailing whitespace: ${JSON.stringify(pattern)}` };
+	if (trimmed.length > 256) return { error: `branch pattern exceeds 256 characters: ${trimmed.length} chars` };
+	if (!/^[A-Za-z0-9._\-*/]+$/.test(trimmed)) return { error: `branch pattern contains unsupported characters; allowed: letters, digits, '-', '_', '.', '/', '*' (got ${JSON.stringify(pattern)})` };
+	return { ok: true };
+}
+function patternToRegex(pattern) {
+	let body = "";
+	for (const ch of pattern) if (ch === "*") body += ".*";
+	else if (REGEX_META.has(ch)) body += `\\${ch}`;
+	else body += ch;
+	return new RegExp(`^${body}$`);
+}
+const REGEX_META = /* @__PURE__ */ new Set([
+	".",
+	"+",
+	"?",
+	"^",
+	"$",
+	"(",
+	")",
+	"[",
+	"]",
+	"{",
+	"}",
+	"|",
+	"\\"
+]);
+//#endregion
+export { fillPattern, isWildcardPattern, matchPattern, validatePattern };
+
+//# sourceMappingURL=patterns.js.map

package/dist/lib/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","names":[],"sources":["../../src/lib/patterns.ts"],"sourcesContent":["/**\n * Branch-name pattern helpers. Patterns are GitHub-branch-protection style globs:\n * `*` matches one or more characters within a name segment. `**` is not supported (branch\n * names cannot contain `/` in Neon).\n */\n\n/** Returns `true` when the pattern contains an unescaped wildcard. */\nexport function isWildcardPattern(pattern: string): boolean {\n\treturn pattern.includes(\"*\");\n}\n\n/**\n * Returns `true` if `branchName` matches `pattern`. Anchors at both ends.\n */\nexport function matchPattern(pattern: string, branchName: string): boolean {\n\tconst regex = patternToRegex(pattern);\n\treturn regex.test(branchName);\n}\n\n/**\n * Substitute every `*` in `pattern` with `replacement`. When the pattern has no `*`, the\n * replacement is appended with a `-` separator so the caller still gets a unique name.\n *\n * Pure function. The returned string is **not** validated — callers compose it from\n * sources that already passed {@link validatePattern} (the pattern) and\n * {@link normalizeGitBranch}-style sanitization (the replacement).\n *\n * @example\n * fillPattern(\"preview-*\", \"andre-feature-a1b2c3\") // → \"preview-andre-feature-a1b2c3\"\n * fillPattern(\"feat-*-staging\", \"x\")               // → \"feat-x-staging\"\n * fillPattern(\"specific\", \"x\")                     // → \"specific-x\"\n */\nexport function fillPattern(pattern: string, replacement: string): string {\n\tif (!isWildcardPattern(pattern)) return `${pattern}-${replacement}`;\n\treturn pattern.replaceAll(\"*\", replacement);\n}\n\n/**\n * Validate a branch pattern. Pure — returns either `{ ok: true }` or `{ error: string }`.\n *\n * Rules:\n * - Non-empty after trim, no leading/trailing whitespace.\n * - Length <= 256 (Neon branch name max).\n * - May contain `*`, ASCII letters/digits, and the punctuation Neon allows in branch names:\n *   `-`, `_`, `.`, `/`. Whitespace and regex meta-characters other than `*` are rejected.\n */\nexport function validatePattern(\n\tpattern: string,\n): { ok: true } | { error: string } {\n\tconst trimmed = pattern.trim();\n\tif (trimmed === \"\") return { error: \"branch pattern is empty\" };\n\tif (trimmed !== pattern) {\n\t\treturn {\n\t\t\terror: `branch pattern has leading or trailing whitespace: ${JSON.stringify(pattern)}`,\n\t\t};\n\t}\n\tif (trimmed.length > 256) {\n\t\treturn {\n\t\t\terror: `branch pattern exceeds 256 characters: ${trimmed.length} chars`,\n\t\t};\n\t}\n\tif (!/^[A-Za-z0-9._\\-*/]+$/.test(trimmed)) {\n\t\treturn {\n\t\t\terror: `branch pattern contains unsupported characters; allowed: letters, digits, '-', '_', '.', '/', '*' (got ${JSON.stringify(pattern)})`,\n\t\t};\n\t}\n\treturn { ok: true };\n}\n\nfunction patternToRegex(pattern: string): RegExp {\n\tlet body = \"\";\n\tfor (const ch of pattern) {\n\t\tif (ch === \"*\") {\n\t\t\tbody += \".*\";\n\t\t} else if (REGEX_META.has(ch)) {\n\t\t\tbody += `\\\\${ch}`;\n\t\t} else {\n\t\t\tbody += ch;\n\t\t}\n\t}\n\treturn new RegExp(`^${body}$`);\n}\n\nconst REGEX_META = new Set([\n\t\".\",\n\t\"+\",\n\t\"?\",\n\t\"^\",\n\t\"$\",\n\t\"(\",\n\t\")\",\n\t\"[\",\n\t\"]\",\n\t\"{\",\n\t\"}\",\n\t\"|\",\n\t\"\\\\\",\n]);\n"],"mappings":";;;;;;;AAOA,SAAgB,kBAAkB,SAA0B;CAC3D,OAAO,QAAQ,SAAS,GAAG;AAC5B;;;;AAKA,SAAgB,aAAa,SAAiB,YAA6B;CAE1E,OADc,eAAe,OAClB,CAAC,CAAC,KAAK,UAAU;AAC7B;;;;;;;;;;;;;;AAeA,SAAgB,YAAY,SAAiB,aAA6B;CACzE,IAAI,CAAC,kBAAkB,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;CACtD,OAAO,QAAQ,WAAW,KAAK,WAAW;AAC3C;;;;;;;;;;AAWA,SAAgB,gBACf,SACmC;CACnC,MAAM,UAAU,QAAQ,KAAK;CAC7B,IAAI,YAAY,IAAI,OAAO,EAAE,OAAO,0BAA0B;CAC9D,IAAI,YAAY,SACf,OAAO,EACN,OAAO,sDAAsD,KAAK,UAAU,OAAO,IACpF;CAED,IAAI,QAAQ,SAAS,KACpB,OAAO,EACN,OAAO,0CAA0C,QAAQ,OAAO,QACjE;CAED,IAAI,CAAC,uBAAuB,KAAK,OAAO,GACvC,OAAO,EACN,OAAO,0GAA0G,KAAK,UAAU,OAAO,EAAE,GAC1I;CAED,OAAO,EAAE,IAAI,KAAK;AACnB;AAEA,SAAS,eAAe,SAAyB;CAChD,IAAI,OAAO;CACX,KAAK,MAAM,MAAM,SAChB,IAAI,OAAO,KACV,QAAQ;MACF,IAAI,WAAW,IAAI,EAAE,GAC3B,QAAQ,KAAK;MAEb,QAAQ;CAGV,OAAO,IAAI,OAAO,IAAI,KAAK,EAAE;AAC9B;AAEA,MAAM,6BAAa,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC"}

package/dist/lib/schema.d.ts

@@ -0,0 +1,215 @@
+import { z } from "zod";
+
+//#region src/lib/schema.d.ts
+
+/**
+ * Zod schema for {@link import("./types.js").ComputeSettings}.
+ *
+ * - CU values must be one of: 0.25, 0.5, 1, 2, 4, 8
+ * - `suspendTimeout` can be:
+ *   - `false` (never suspend)
+ *   - duration string like "5m", "1h" (must be 60s-604800s when parsed)
+ *   - number in seconds (60-604800, or -1/0 for special values)
+ *   - `undefined` (use platform default)
+ *
+ * Cross-field invariants (min <= max) are enforced via `superRefine`.
+ */
+declare const computeSettingsSchema: z.ZodObject<{
+  autoscalingLimitMinCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+  autoscalingLimitMaxCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+  suspendTimeout: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString, z.ZodNumber]>>;
+}, z.core.$strict>;
+/** Object form of a service toggle (`{ enabled?: boolean }`). */
+declare const serviceToggleSchema: z.ZodObject<{
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/** A service toggle as written in a policy: `boolean` or `{ enabled?: boolean }`. */
+declare const serviceToggleInputSchema: z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>]>;
+/**
+ * Reusable Data API runtime settings (camelCase mirror of the Neon API `DataAPISettings`).
+ * `strictObject` so a typo / snake_case key fails loudly instead of being silently dropped.
+ */
+declare const dataApiSettingsSchema: z.ZodObject<{
+  dbAggregatesEnabled: z.ZodOptional<z.ZodBoolean>;
+  dbAnonRole: z.ZodOptional<z.ZodString>;
+  dbExtraSearchPath: z.ZodOptional<z.ZodString>;
+  dbMaxRows: z.ZodOptional<z.ZodNumber>;
+  dbSchemas: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  jwtRoleClaimKey: z.ZodOptional<z.ZodString>;
+  jwtCacheMaxLifetime: z.ZodOptional<z.ZodNumber>;
+  openapiMode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"ignore-privileges">, z.ZodLiteral<"disabled">]>>;
+  serverCorsAllowedOrigins: z.ZodOptional<z.ZodString>;
+  serverTimingEnabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Object form of the `dataApi` toggle. A single `strictObject` plus a `superRefine` (rather
+ * than a discriminated union) so the `"neon"` default works without the discriminator being
+ * present, and so the "external-only field with authProvider neon" error points at the exact
+ * offending key — mirroring the `?: never` type-level guard at runtime.
+ */
+declare const dataApiConfigSchema: z.ZodObject<{
+  enabled: z.ZodOptional<z.ZodBoolean>;
+  authProvider: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"neon">, z.ZodLiteral<"external">]>>;
+  jwksUrl: z.ZodOptional<z.ZodString>;
+  providerName: z.ZodOptional<z.ZodString>;
+  jwtAudience: z.ZodOptional<z.ZodString>;
+  settings: z.ZodOptional<z.ZodObject<{
+    dbAggregatesEnabled: z.ZodOptional<z.ZodBoolean>;
+    dbAnonRole: z.ZodOptional<z.ZodString>;
+    dbExtraSearchPath: z.ZodOptional<z.ZodString>;
+    dbMaxRows: z.ZodOptional<z.ZodNumber>;
+    dbSchemas: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    jwtRoleClaimKey: z.ZodOptional<z.ZodString>;
+    jwtCacheMaxLifetime: z.ZodOptional<z.ZodNumber>;
+    openapiMode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"ignore-privileges">, z.ZodLiteral<"disabled">]>>;
+    serverCorsAllowedOrigins: z.ZodOptional<z.ZodString>;
+    serverTimingEnabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/** A `dataApi` toggle as written in a policy: `boolean` or {@link dataApiConfigSchema}. */
+declare const dataApiInputSchema: z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+  enabled: z.ZodOptional<z.ZodBoolean>;
+  authProvider: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"neon">, z.ZodLiteral<"external">]>>;
+  jwksUrl: z.ZodOptional<z.ZodString>;
+  providerName: z.ZodOptional<z.ZodString>;
+  jwtAudience: z.ZodOptional<z.ZodString>;
+  settings: z.ZodOptional<z.ZodObject<{
+    dbAggregatesEnabled: z.ZodOptional<z.ZodBoolean>;
+    dbAnonRole: z.ZodOptional<z.ZodString>;
+    dbExtraSearchPath: z.ZodOptional<z.ZodString>;
+    dbMaxRows: z.ZodOptional<z.ZodNumber>;
+    dbSchemas: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    jwtRoleClaimKey: z.ZodOptional<z.ZodString>;
+    jwtCacheMaxLifetime: z.ZodOptional<z.ZodNumber>;
+    openapiMode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"ignore-privileges">, z.ZodLiteral<"disabled">]>>;
+    serverCorsAllowedOrigins: z.ZodOptional<z.ZodString>;
+    serverTimingEnabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strict>>;
+}, z.core.$strict>]>;
+declare const postgresConfigSchema: z.ZodObject<{
+  computeSettings: z.ZodOptional<z.ZodObject<{
+    autoscalingLimitMinCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+    autoscalingLimitMaxCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+    suspendTimeout: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString, z.ZodNumber]>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/**
+ * Static definition of a function (existence). The slug is the record key (validated by
+ * {@link functionSlugSchema}), so it is not a field here. Deploy tuning (`runtime`) lives
+ * in the `branch` closure, not here.
+ */
+declare const functionDefSchema: z.ZodObject<{
+  name: z.ZodString;
+  source: z.ZodString;
+  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  dev: z.ZodOptional<z.ZodObject<{
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Static definition of a bucket (existence). Name is the record key. */
+declare const bucketDefSchema: z.ZodObject<{
+  access: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"private">, z.ZodLiteral<"public_read">]>>;
+}, z.core.$strict>;
+/** Static, beta Preview feature set: AI Gateway toggle + functions/buckets records. */
+declare const previewInputSchema: z.ZodObject<{
+  aiGateway: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strict>]>>;
+  functions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+    name: z.ZodString;
+    source: z.ZodString;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    dev: z.ZodOptional<z.ZodObject<{
+      port: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>>;
+  buckets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+    access: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"private">, z.ZodLiteral<"public_read">]>>;
+  }, z.core.$strict>>>;
+}, z.core.$strict>;
+/** Per-function deploy tuning returned by the `branch` closure. */
+declare const functionTuningSchema: z.ZodObject<{
+  runtime: z.ZodOptional<z.ZodLiteral<"nodejs24">>;
+}, z.core.$strict>;
+/**
+ * The object returned by the `branch` closure. Validated on every `resolveConfig` call so
+ * tuning errors point at the concrete branch target that triggered them.
+ */
+declare const branchTuningSchema: z.ZodObject<{
+  parent: z.ZodOptional<z.ZodString>;
+  protected: z.ZodOptional<z.ZodBoolean>;
+  ttl: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+  postgres: z.ZodOptional<z.ZodObject<{
+    computeSettings: z.ZodOptional<z.ZodObject<{
+      autoscalingLimitMinCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+      autoscalingLimitMaxCu: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<0.25>, z.ZodLiteral<0.5>, z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<4>, z.ZodLiteral<8>]>>;
+      suspendTimeout: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString, z.ZodNumber]>>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+  preview: z.ZodOptional<z.ZodObject<{
+    functions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+      runtime: z.ZodOptional<z.ZodLiteral<"nodejs24">>;
+    }, z.core.$strict>>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/**
+ * The top-level object accepted by `defineConfig`. The `branch` closure is validated
+ * structurally as a function here; its returned tuning is validated per-evaluation by
+ * {@link branchTuningSchema} inside `resolveConfig`.
+ */
+declare const configInputSchema: z.ZodObject<{
+  auth: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strict>]>>;
+  dataApi: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    authProvider: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"neon">, z.ZodLiteral<"external">]>>;
+    jwksUrl: z.ZodOptional<z.ZodString>;
+    providerName: z.ZodOptional<z.ZodString>;
+    jwtAudience: z.ZodOptional<z.ZodString>;
+    settings: z.ZodOptional<z.ZodObject<{
+      dbAggregatesEnabled: z.ZodOptional<z.ZodBoolean>;
+      dbAnonRole: z.ZodOptional<z.ZodString>;
+      dbExtraSearchPath: z.ZodOptional<z.ZodString>;
+      dbMaxRows: z.ZodOptional<z.ZodNumber>;
+      dbSchemas: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      jwtRoleClaimKey: z.ZodOptional<z.ZodString>;
+      jwtCacheMaxLifetime: z.ZodOptional<z.ZodNumber>;
+      openapiMode: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"ignore-privileges">, z.ZodLiteral<"disabled">]>>;
+      serverCorsAllowedOrigins: z.ZodOptional<z.ZodString>;
+      serverTimingEnabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>]>>;
+  preview: z.ZodOptional<z.ZodObject<{
+    aiGateway: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>]>>;
+    functions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+      name: z.ZodString;
+      source: z.ZodString;
+      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      dev: z.ZodOptional<z.ZodObject<{
+        port: z.ZodOptional<z.ZodNumber>;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    buckets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+      access: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"private">, z.ZodLiteral<"public_read">]>>;
+    }, z.core.$strict>>>;
+  }, z.core.$strict>>;
+  branch: z.ZodOptional<z.ZodCustom<(...args: unknown[]) => unknown, (...args: unknown[]) => unknown>>;
+}, z.core.$strict>;
+/**
+ * Convert the structured {@link z.ZodError} produced by `configSchema.safeParse` into the
+ * `string[]` shape used by {@link import("./errors.js").ConfigValidationError}.
+ *
+ * Issue paths are rendered as dot-separated property accesses (`postgres.computeSettings`)
+ * and unknown-key issues from `strictObject` are normalised so the message contains the
+ * substring "unknown key" — keeping pre-zod assertions in test suites and downstream tools
+ * stable.
+ */
+declare function formatZodIssues(error: z.ZodError): string[];
+//#endregion
+export { branchTuningSchema, bucketDefSchema, computeSettingsSchema, configInputSchema, dataApiConfigSchema, dataApiInputSchema, dataApiSettingsSchema, formatZodIssues, functionDefSchema, functionTuningSchema, postgresConfigSchema, previewInputSchema, serviceToggleInputSchema, serviceToggleSchema };
+//# sourceMappingURL=schema.d.ts.map

package/dist/lib/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","names":[],"sources":["../../src/lib/schema.ts"],"mappings":";;;;;;AAgBA;;;;;;;;;;cAAa,uBAAqB,CAAA,CAAA;;;;;;cAiDrB,qBAAmB,CAAA,CAAA;;;;cAKnB,0BAAwB,CAAA,CAAA,mBAAA,CAAA,CAAA,YAAA,CAAA,CAAA;;;;;AAtDH;AAiDlC;AAEE,cAYW,qBAZX,EAYgC,CAAA,CAAA,SAZhC,CAAA;;;;WAF8B,eAAA,YAAA,CAAA;EAAA,SAAA,eAAA,WAAA,YAAA,CAAA,CAAA;EAKnB,eAAA,eAGX,YAAA,CAAA;EAAA,mBAAA,eAAA,YAAA,CAAA;aAHmC,eAAA,WAAA,CAAA,SAAA,aAAA,CAAA,mBAAA,CAAA,cAAA,CAAA,UAAA,CAAA,CAAA,CAAA,CAAA;;;;;;AAAA;AASrC;;;cA4Ba,qBAAmB,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;cA0BnB,oBAAkB,CAAA,CAAA,mBAAA,CAAA,CAAA,YAAA,CAAA,CAAA;;;SAtDG,eAAA,YAAA,CAAA;EAAA,YAAA,eAAA,YAAA,CAAA;EA4BrB,WAAA,eAuBV,YAAA,CAAA;EAAA,QAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;cAKU,sBAAoB,CAAA,CAAA;;;;;;;;;;;;cA6EpB,mBAAiB,CAAA,CAAA;;;;;;;;;cAQjB,iBAAe,CAAA,CAAA;;;;cAOf,oBAAkB,CAAA,CAAA;;IAxHC,OAAA,eAAA,aAAA,CAAA;EAAA,CAAA,gBAAA,CAAA,CAAA,CAAA,CAAA;EA0BnB,SAAA,eAAgE,YAAA,YAAA,aAAA,CAAA;IAAA,IAAA,aAAA;IAA9C,MAAA,aAAA;;;;;;;;;;;cAqGlB,sBAAoB,CAAA,CAAA;;;;;;;cAapB,oBAAkB,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;AAlHA,cAgJlB,iBAhJkB,EAgJD,CAAA,CAAA,SAhJC,CAAA;MAAA,eAAA,WAAA,CAAA,SAAA,aAAA,aAAA,CAAA;IAAA,OAAA,eAAA,aAAA,CAAA;EAElB,CAAA,gBAAA,CAAA,CAAA,CAAA,CAAA;EAEX,OAAA,eAAA,WAAA,CAAA,SAAA,aAAA,aAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;MAF+B,GAAA,eAAA,YAAA,YAAA,aAAA,CAAA,CAAA;MAAA,GAAA,eAAA,YAAA,CAAA;QA6EpB,IAAA,eAKX,YAAA,CAAA;MAAA,CAAA,gBAAA,CAAA,CAAA;;;;;;;;;;;;;;AAL4B;AAQ9B;;iBA4IgB,eAAA,QAAuB,CAAA,CAAE"}

package/dist/lib/schema.js

@@ -0,0 +1,284 @@
+import { parseBranchTtl, parseSuspendTimeout } from "./duration.js";
+import { isWildcardPattern, validatePattern } from "./patterns.js";
+import { z } from "zod";
+//#region src/lib/schema.ts
+/**
+* Zod schema for {@link import("./types.js").ComputeSettings}.
+*
+* - CU values must be one of: 0.25, 0.5, 1, 2, 4, 8
+* - `suspendTimeout` can be:
+*   - `false` (never suspend)
+*   - duration string like "5m", "1h" (must be 60s-604800s when parsed)
+*   - number in seconds (60-604800, or -1/0 for special values)
+*   - `undefined` (use platform default)
+*
+* Cross-field invariants (min <= max) are enforced via `superRefine`.
+*/
+const computeSettingsSchema = z.strictObject({
+	autoscalingLimitMinCu: z.union([
+		z.literal(.25),
+		z.literal(.5),
+		z.literal(1),
+		z.literal(2),
+		z.literal(4),
+		z.literal(8)
+	]).optional(),
+	autoscalingLimitMaxCu: z.union([
+		z.literal(.25),
+		z.literal(.5),
+		z.literal(1),
+		z.literal(2),
+		z.literal(4),
+		z.literal(8)
+	]).optional(),
+	suspendTimeout: z.union([
+		z.literal(false),
+		z.string(),
+		z.number()
+	]).optional().superRefine((value, ctx) => {
+		if (value === void 0) return;
+		const result = parseSuspendTimeout(value);
+		if ("error" in result) ctx.addIssue({
+			code: "custom",
+			message: result.error
+		});
+	})
+}).superRefine((settings, ctx) => {
+	const { autoscalingLimitMinCu: min, autoscalingLimitMaxCu: max } = settings;
+	if (min !== void 0 && max !== void 0 && min > max) ctx.addIssue({
+		code: "custom",
+		path: ["autoscalingLimitMinCu"],
+		message: `autoscalingLimitMinCu (${min}) must be <= autoscalingLimitMaxCu (${max})`
+	});
+});
+/** Object form of a service toggle (`{ enabled?: boolean }`). */
+const serviceToggleSchema = z.strictObject({ enabled: z.boolean().optional() });
+/** A service toggle as written in a policy: `boolean` or `{ enabled?: boolean }`. */
+const serviceToggleInputSchema = z.union([z.boolean(), serviceToggleSchema]);
+/**
+* Reusable Data API runtime settings (camelCase mirror of the Neon API `DataAPISettings`).
+* `strictObject` so a typo / snake_case key fails loudly instead of being silently dropped.
+*/
+const dataApiSettingsSchema = z.strictObject({
+	dbAggregatesEnabled: z.boolean().optional(),
+	dbAnonRole: z.string().optional(),
+	dbExtraSearchPath: z.string().optional(),
+	dbMaxRows: z.number().int().optional(),
+	dbSchemas: z.array(z.string()).optional(),
+	jwtRoleClaimKey: z.string().optional(),
+	jwtCacheMaxLifetime: z.number().int().optional(),
+	openapiMode: z.union([z.literal("ignore-privileges"), z.literal("disabled")]).optional(),
+	serverCorsAllowedOrigins: z.string().optional(),
+	serverTimingEnabled: z.boolean().optional()
+});
+/** Names of the external-IdP-only fields, forbidden when `authProvider` is `"neon"`. */
+const DATA_API_EXTERNAL_ONLY_KEYS = [
+	"jwksUrl",
+	"providerName",
+	"jwtAudience"
+];
+/**
+* Object form of the `dataApi` toggle. A single `strictObject` plus a `superRefine` (rather
+* than a discriminated union) so the `"neon"` default works without the discriminator being
+* present, and so the "external-only field with authProvider neon" error points at the exact
+* offending key — mirroring the `?: never` type-level guard at runtime.
+*/
+const dataApiConfigSchema = z.strictObject({
+	enabled: z.boolean().optional(),
+	authProvider: z.union([z.literal("neon"), z.literal("external")]).optional(),
+	jwksUrl: z.string().optional(),
+	providerName: z.string().optional(),
+	jwtAudience: z.string().optional(),
+	settings: dataApiSettingsSchema.optional()
+}).superRefine((cfg, ctx) => {
+	if ((cfg.authProvider ?? "neon") !== "neon") return;
+	for (const key of DATA_API_EXTERNAL_ONLY_KEYS) if (cfg[key] !== void 0) ctx.addIssue({
+		code: "custom",
+		path: [key],
+		message: `${key} is only allowed with authProvider: "external" — Neon supplies it for authProvider: "neon".`
+	});
+});
+/** A `dataApi` toggle as written in a policy: `boolean` or {@link dataApiConfigSchema}. */
+const dataApiInputSchema = z.union([z.boolean(), dataApiConfigSchema]);
+const postgresConfigSchema = z.strictObject({ computeSettings: computeSettingsSchema.optional() });
+/**
+* Branch-unique function slug. Mirrors the Neon Functions API path-segment rule
+* (`platform/internal/platform/functions/name.go`): 1–20 lowercase letters and digits.
+* Used as the **key schema** of the `preview.functions` record, so a bad slug fails
+* validation with a path pointing at the offending key and duplicate slugs are impossible
+* by construction (object keys are unique).
+*/
+const functionSlugSchema = z.string().regex(/^[a-z0-9]{1,20}$/, "function slug must be 1-20 lowercase letters and digits (no hyphens or other characters)");
+/** Bucket name: 1–255 chars. Used as the key schema of the `preview.buckets` record. */
+const bucketNameSchema = z.string().min(1).max(255);
+/**
+* A single function environment-variable value. Must be a defined string: a `process.env.X`
+* that is unset evaluates to `undefined`, and the bare `z.string()` message for that case
+* (`Invalid input: expected string, received undefined`) gives no hint that an env var is the
+* culprit. The custom `error` replaces *only* the `undefined` case with a message that names
+* the offending function + env key (read from the issue path) and how to fix it; any other
+* wrong type keeps zod's default (`expected string, received number`, …).
+*/
+const functionEnvValueSchema = z.string({ error: (issue) => {
+	if (issue.input !== void 0) return void 0;
+	const path = issue.path ?? [];
+	const key = path.length > 0 ? String(path[path.length - 1]) : void 0;
+	const functionsIndex = path.indexOf("functions");
+	const slug = functionsIndex >= 0 && functionsIndex + 1 < path.length ? String(path[functionsIndex + 1]) : void 0;
+	return `${slug !== void 0 && key !== void 0 ? `Environment variable "${key}" for function "${slug}"` : key !== void 0 ? `Environment variable "${key}"` : "An environment variable"} is undefined — its value (typically a \`process.env.*\`) is unset. Set it (e.g. add it to your .env) or provide a fallback like \`process.env.X ?? ""\`.`;
+} });
+/**
+* Per-function environment map. Every value must be a defined string (see
+* {@link functionEnvValueSchema}): a `process.env.X` that is unset surfaces as `undefined` and
+* is rejected here (rather than silently shipping `undefined` into the deployment).
+*/
+const functionEnvSchema = z.record(z.string(), functionEnvValueSchema);
+/**
+* TCP port for a function's local dev server. Excludes 0 (which means "any port" to the OS
+* — `neon dev` expresses "pick one for me" by omitting `port`, not by passing 0).
+*/
+const devPortSchema = z.number().int().min(1).max(65535);
+/**
+* Local-dev settings for a function (`neon dev` only; never affects deploy). `port` is bound
+* exactly when set (and `neon dev` fails if it is taken), or a free port is found when omitted.
+*/
+const functionDevConfigSchema = z.strictObject({ port: devPortSchema.optional() });
+const runtimeSchema = z.literal("nodejs24");
+/**
+* Static definition of a function (existence). The slug is the record key (validated by
+* {@link functionSlugSchema}), so it is not a field here. Deploy tuning (`runtime`) lives
+* in the `branch` closure, not here.
+*/
+const functionDefSchema = z.strictObject({
+	name: z.string().min(1).max(255),
+	source: z.string().min(1),
+	env: functionEnvSchema.optional(),
+	dev: functionDevConfigSchema.optional()
+});
+/** Static definition of a bucket (existence). Name is the record key. */
+const bucketDefSchema = z.strictObject({ access: z.union([z.literal("private"), z.literal("public_read")]).optional() });
+/** Static, beta Preview feature set: AI Gateway toggle + functions/buckets records. */
+const previewInputSchema = z.strictObject({
+	aiGateway: serviceToggleInputSchema.optional(),
+	functions: z.record(functionSlugSchema, functionDefSchema).optional(),
+	buckets: z.record(bucketNameSchema, bucketDefSchema).optional()
+});
+/** Per-function deploy tuning returned by the `branch` closure. */
+const functionTuningSchema = z.strictObject({ runtime: runtimeSchema.optional() });
+/** Per-branch Preview tuning. Keys must be slugs declared in the static `preview`. */
+const previewTuningSchema = z.strictObject({ functions: z.record(functionSlugSchema, functionTuningSchema).optional() });
+/**
+* The object returned by the `branch` closure. Validated on every `resolveConfig` call so
+* tuning errors point at the concrete branch target that triggered them.
+*/
+const branchTuningSchema = z.strictObject({
+	parent: z.string().optional(),
+	protected: z.boolean().optional(),
+	ttl: z.union([z.string(), z.number()]).optional().superRefine((value, ctx) => {
+		if (value === void 0) return;
+		const result = parseBranchTtl(value);
+		if ("error" in result) ctx.addIssue({
+			code: "custom",
+			message: result.error
+		});
+	}),
+	postgres: postgresConfigSchema.optional(),
+	preview: previewTuningSchema.optional()
+}).superRefine((cfg, ctx) => {
+	validateParentReference({
+		ctx,
+		path: ["parent"],
+		parent: cfg.parent
+	});
+});
+/**
+* The top-level object accepted by `defineConfig`. The `branch` closure is validated
+* structurally as a function here; its returned tuning is validated per-evaluation by
+* {@link branchTuningSchema} inside `resolveConfig`.
+*/
+const configInputSchema = z.strictObject({
+	auth: serviceToggleInputSchema.optional(),
+	dataApi: dataApiInputSchema.optional(),
+	preview: previewInputSchema.optional(),
+	branch: z.custom((value) => typeof value === "function", { message: "branch must be a function: `branch: (branch) => ({ … })`" }).optional()
+}).superRefine((cfg, ctx) => {
+	if (!isToggleEnabledValue(cfg.dataApi)) return;
+	if (dataApiAuthProviderValue(cfg.dataApi) !== "neon") return;
+	if (!isToggleEnabledValue(cfg.auth)) ctx.addIssue({
+		code: "custom",
+		path: ["auth"],
+		message: "dataApi with authProvider \"neon\" requires Neon Auth — set `auth: true` (or `auth: { enabled: true }`), or use `dataApi.authProvider: \"external\"` with your own `jwksUrl`."
+	});
+});
+/**
+* Whether a parsed `auth` / `dataApi` toggle value is enabled: a present object (or `true`)
+* is on unless `enabled` is explicitly `false`. Mirrors `isServiceEnabled` in
+* `define-config.ts`, operating on the already-validated runtime value.
+*/
+function isToggleEnabledValue(value) {
+	if (value === void 0 || value === null) return false;
+	if (typeof value === "boolean") return value;
+	if (typeof value === "object") return value.enabled !== false;
+	return false;
+}
+/** Read the (defaulted) `authProvider` from a parsed `dataApi` value. */
+function dataApiAuthProviderValue(value) {
+	if (value !== null && typeof value === "object") {
+		if (value.authProvider === "external") return "external";
+	}
+	return "neon";
+}
+function validateParentReference(args) {
+	const { ctx, path, parent } = args;
+	if (parent === void 0) return;
+	const patternCheck = validatePattern(parent);
+	if ("error" in patternCheck) ctx.addIssue({
+		code: "custom",
+		path,
+		message: patternCheck.error
+	});
+	else if (isWildcardPattern(parent)) ctx.addIssue({
+		code: "custom",
+		path,
+		message: `parent must be a concrete branch name (no wildcards), got "${parent}"`
+	});
+}
+/**
+* Convert the structured {@link z.ZodError} produced by `configSchema.safeParse` into the
+* `string[]` shape used by {@link import("./errors.js").ConfigValidationError}.
+*
+* Issue paths are rendered as dot-separated property accesses (`postgres.computeSettings`)
+* and unknown-key issues from `strictObject` are normalised so the message contains the
+* substring "unknown key" — keeping pre-zod assertions in test suites and downstream tools
+* stable.
+*/
+function formatZodIssues(error) {
+	return error.issues.map((issue) => {
+		const path = renderPath(issue.path);
+		const message = normaliseIssueMessage(issue);
+		return path ? `${path}: ${message}` : message;
+	});
+}
+function renderPath(path) {
+	let out = "";
+	for (const segment of path) if (typeof segment === "number") out += `[${segment}]`;
+	else if (out === "") out += String(segment);
+	else out += `.${String(segment)}`;
+	return out;
+}
+function normaliseIssueMessage(issue) {
+	if (issue.code === "unrecognized_keys") {
+		const keys = issue.keys ?? [];
+		const formatted = keys.map((k) => JSON.stringify(k)).join(", ");
+		return `unknown key${keys.length === 1 ? "" : "s"}: ${formatted}`;
+	}
+	if (issue.code === "invalid_key") {
+		const reasons = issue.issues.map((nested) => nested.message).filter((message) => message.length > 0);
+		if (reasons.length > 0) return reasons.join("; ");
+	}
+	return issue.message;
+}
+//#endregion
+export { branchTuningSchema, bucketDefSchema, computeSettingsSchema, configInputSchema, dataApiConfigSchema, dataApiInputSchema, dataApiSettingsSchema, formatZodIssues, functionDefSchema, functionTuningSchema, postgresConfigSchema, previewInputSchema, serviceToggleInputSchema, serviceToggleSchema };
+
+//# sourceMappingURL=schema.js.map

package/dist/lib/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","names":[],"sources":["../../src/lib/schema.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { parseBranchTtl, parseSuspendTimeout } from \"./duration.js\";\nimport { isWildcardPattern, validatePattern } from \"./patterns.js\";\n\n/**\n * Zod schema for {@link import(\"./types.js\").ComputeSettings}.\n *\n * - CU values must be one of: 0.25, 0.5, 1, 2, 4, 8\n * - `suspendTimeout` can be:\n *   - `false` (never suspend)\n *   - duration string like \"5m\", \"1h\" (must be 60s-604800s when parsed)\n *   - number in seconds (60-604800, or -1/0 for special values)\n *   - `undefined` (use platform default)\n *\n * Cross-field invariants (min <= max) are enforced via `superRefine`.\n */\nexport const computeSettingsSchema = z\n\t.strictObject({\n\t\tautoscalingLimitMinCu: z\n\t\t\t.union([\n\t\t\t\tz.literal(0.25),\n\t\t\t\tz.literal(0.5),\n\t\t\t\tz.literal(1),\n\t\t\t\tz.literal(2),\n\t\t\t\tz.literal(4),\n\t\t\t\tz.literal(8),\n\t\t\t])\n\t\t\t.optional(),\n\t\tautoscalingLimitMaxCu: z\n\t\t\t.union([\n\t\t\t\tz.literal(0.25),\n\t\t\t\tz.literal(0.5),\n\t\t\t\tz.literal(1),\n\t\t\t\tz.literal(2),\n\t\t\t\tz.literal(4),\n\t\t\t\tz.literal(8),\n\t\t\t])\n\t\t\t.optional(),\n\t\tsuspendTimeout: z\n\t\t\t.union([z.literal(false), z.string(), z.number()])\n\t\t\t.optional()\n\t\t\t.superRefine((value, ctx) => {\n\t\t\t\tif (value === undefined) return; // undefined is valid (use platform default)\n\t\t\t\tconst result = parseSuspendTimeout(value);\n\t\t\t\tif (\"error\" in result) {\n\t\t\t\t\tctx.addIssue({\n\t\t\t\t\t\tcode: \"custom\",\n\t\t\t\t\t\tmessage: result.error,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}),\n\t})\n\t.superRefine((settings, ctx) => {\n\t\tconst { autoscalingLimitMinCu: min, autoscalingLimitMaxCu: max } =\n\t\t\tsettings;\n\t\tif (min !== undefined && max !== undefined && min > max) {\n\t\t\tctx.addIssue({\n\t\t\t\tcode: \"custom\",\n\t\t\t\tpath: [\"autoscalingLimitMinCu\"],\n\t\t\t\tmessage: `autoscalingLimitMinCu (${min}) must be <= autoscalingLimitMaxCu (${max})`,\n\t\t\t});\n\t\t}\n\t});\n\n/** Object form of a service toggle (`{ enabled?: boolean }`). */\nexport const serviceToggleSchema = z.strictObject({\n\tenabled: z.boolean().optional(),\n});\n\n/** A service toggle as written in a policy: `boolean` or `{ enabled?: boolean }`. */\nexport const serviceToggleInputSchema = z.union([\n\tz.boolean(),\n\tserviceToggleSchema,\n]);\n\n/**\n * Reusable Data API runtime settings (camelCase mirror of the Neon API `DataAPISettings`).\n * `strictObject` so a typo / snake_case key fails loudly instead of being silently dropped.\n */\nexport const dataApiSettingsSchema = z.strictObject({\n\tdbAggregatesEnabled: z.boolean().optional(),\n\tdbAnonRole: z.string().optional(),\n\tdbExtraSearchPath: z.string().optional(),\n\tdbMaxRows: z.number().int().optional(),\n\tdbSchemas: z.array(z.string()).optional(),\n\tjwtRoleClaimKey: z.string().optional(),\n\tjwtCacheMaxLifetime: z.number().int().optional(),\n\topenapiMode: z\n\t\t.union([z.literal(\"ignore-privileges\"), z.literal(\"disabled\")])\n\t\t.optional(),\n\tserverCorsAllowedOrigins: z.string().optional(),\n\tserverTimingEnabled: z.boolean().optional(),\n});\n\n/** Names of the external-IdP-only fields, forbidden when `authProvider` is `\"neon\"`. */\nconst DATA_API_EXTERNAL_ONLY_KEYS = [\n\t\"jwksUrl\",\n\t\"providerName\",\n\t\"jwtAudience\",\n] as const;\n\n/**\n * Object form of the `dataApi` toggle. A single `strictObject` plus a `superRefine` (rather\n * than a discriminated union) so the `\"neon\"` default works without the discriminator being\n * present, and so the \"external-only field with authProvider neon\" error points at the exact\n * offending key — mirroring the `?: never` type-level guard at runtime.\n */\nexport const dataApiConfigSchema = z\n\t.strictObject({\n\t\tenabled: z.boolean().optional(),\n\t\tauthProvider: z\n\t\t\t.union([z.literal(\"neon\"), z.literal(\"external\")])\n\t\t\t.optional(),\n\t\tjwksUrl: z.string().optional(),\n\t\tproviderName: z.string().optional(),\n\t\tjwtAudience: z.string().optional(),\n\t\tsettings: dataApiSettingsSchema.optional(),\n\t})\n\t.superRefine((cfg, ctx) => {\n\t\tconst provider = cfg.authProvider ?? \"neon\";\n\t\tif (provider !== \"neon\") return;\n\t\tfor (const key of DATA_API_EXTERNAL_ONLY_KEYS) {\n\t\t\tif (cfg[key] !== undefined) {\n\t\t\t\tctx.addIssue({\n\t\t\t\t\tcode: \"custom\",\n\t\t\t\t\tpath: [key],\n\t\t\t\t\tmessage: `${key} is only allowed with authProvider: \"external\" — Neon supplies it for authProvider: \"neon\".`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t});\n\n/** A `dataApi` toggle as written in a policy: `boolean` or {@link dataApiConfigSchema}. */\nexport const dataApiInputSchema = z.union([z.boolean(), dataApiConfigSchema]);\n\nexport const postgresConfigSchema = z.strictObject({\n\tcomputeSettings: computeSettingsSchema.optional(),\n});\n\n/**\n * Branch-unique function slug. Mirrors the Neon Functions API path-segment rule\n * (`platform/internal/platform/functions/name.go`): 1–20 lowercase letters and digits.\n * Used as the **key schema** of the `preview.functions` record, so a bad slug fails\n * validation with a path pointing at the offending key and duplicate slugs are impossible\n * by construction (object keys are unique).\n */\nconst functionSlugSchema = z\n\t.string()\n\t.regex(\n\t\t/^[a-z0-9]{1,20}$/,\n\t\t\"function slug must be 1-20 lowercase letters and digits (no hyphens or other characters)\",\n\t);\n\n/** Bucket name: 1–255 chars. Used as the key schema of the `preview.buckets` record. */\nconst bucketNameSchema = z.string().min(1).max(255);\n\n/**\n * A single function environment-variable value. Must be a defined string: a `process.env.X`\n * that is unset evaluates to `undefined`, and the bare `z.string()` message for that case\n * (`Invalid input: expected string, received undefined`) gives no hint that an env var is the\n * culprit. The custom `error` replaces *only* the `undefined` case with a message that names\n * the offending function + env key (read from the issue path) and how to fix it; any other\n * wrong type keeps zod's default (`expected string, received number`, …).\n */\nconst functionEnvValueSchema = z.string({\n\terror: (issue) => {\n\t\tif (issue.input !== undefined) return undefined;\n\t\tconst path = issue.path ?? [];\n\t\tconst key = path.length > 0 ? String(path[path.length - 1]) : undefined;\n\t\tconst functionsIndex = path.indexOf(\"functions\");\n\t\tconst slug =\n\t\t\tfunctionsIndex >= 0 && functionsIndex + 1 < path.length\n\t\t\t\t? String(path[functionsIndex + 1])\n\t\t\t\t: undefined;\n\t\tconst subject =\n\t\t\tslug !== undefined && key !== undefined\n\t\t\t\t? `Environment variable \"${key}\" for function \"${slug}\"`\n\t\t\t\t: key !== undefined\n\t\t\t\t\t? `Environment variable \"${key}\"`\n\t\t\t\t\t: \"An environment variable\";\n\t\treturn `${subject} is undefined — its value (typically a \\`process.env.*\\`) is unset. Set it (e.g. add it to your .env) or provide a fallback like \\`process.env.X ?? \"\"\\`.`;\n\t},\n});\n\n/**\n * Per-function environment map. Every value must be a defined string (see\n * {@link functionEnvValueSchema}): a `process.env.X` that is unset surfaces as `undefined` and\n * is rejected here (rather than silently shipping `undefined` into the deployment).\n */\nconst functionEnvSchema = z.record(z.string(), functionEnvValueSchema);\n\n/**\n * TCP port for a function's local dev server. Excludes 0 (which means \"any port\" to the OS\n * — `neon dev` expresses \"pick one for me\" by omitting `port`, not by passing 0).\n */\nconst devPortSchema = z.number().int().min(1).max(65535);\n\n/**\n * Local-dev settings for a function (`neon dev` only; never affects deploy). `port` is bound\n * exactly when set (and `neon dev` fails if it is taken), or a free port is found when omitted.\n */\nconst functionDevConfigSchema = z.strictObject({\n\tport: devPortSchema.optional(),\n});\n\nconst runtimeSchema = z.literal(\"nodejs24\");\n\n/**\n * Static definition of a function (existence). The slug is the record key (validated by\n * {@link functionSlugSchema}), so it is not a field here. Deploy tuning (`runtime`) lives\n * in the `branch` closure, not here.\n */\nexport const functionDefSchema = z.strictObject({\n\tname: z.string().min(1).max(255),\n\tsource: z.string().min(1),\n\tenv: functionEnvSchema.optional(),\n\tdev: functionDevConfigSchema.optional(),\n});\n\n/** Static definition of a bucket (existence). Name is the record key. */\nexport const bucketDefSchema = z.strictObject({\n\taccess: z\n\t\t.union([z.literal(\"private\"), z.literal(\"public_read\")])\n\t\t.optional(),\n});\n\n/** Static, beta Preview feature set: AI Gateway toggle + functions/buckets records. */\nexport const previewInputSchema = z.strictObject({\n\taiGateway: serviceToggleInputSchema.optional(),\n\tfunctions: z.record(functionSlugSchema, functionDefSchema).optional(),\n\tbuckets: z.record(bucketNameSchema, bucketDefSchema).optional(),\n});\n\n/** Per-function deploy tuning returned by the `branch` closure. */\nexport const functionTuningSchema = z.strictObject({\n\truntime: runtimeSchema.optional(),\n});\n\n/** Per-branch Preview tuning. Keys must be slugs declared in the static `preview`. */\nconst previewTuningSchema = z.strictObject({\n\tfunctions: z.record(functionSlugSchema, functionTuningSchema).optional(),\n});\n\n/**\n * The object returned by the `branch` closure. Validated on every `resolveConfig` call so\n * tuning errors point at the concrete branch target that triggered them.\n */\nexport const branchTuningSchema = z\n\t.strictObject({\n\t\tparent: z.string().optional(),\n\t\tprotected: z.boolean().optional(),\n\t\tttl: z\n\t\t\t.union([z.string(), z.number()])\n\t\t\t.optional()\n\t\t\t.superRefine((value, ctx) => {\n\t\t\t\tif (value === undefined) return;\n\t\t\t\tconst result = parseBranchTtl(value);\n\t\t\t\tif (\"error\" in result) {\n\t\t\t\t\tctx.addIssue({ code: \"custom\", message: result.error });\n\t\t\t\t}\n\t\t\t}),\n\t\tpostgres: postgresConfigSchema.optional(),\n\t\tpreview: previewTuningSchema.optional(),\n\t})\n\t.superRefine((cfg, ctx) => {\n\t\tvalidateParentReference({\n\t\t\tctx,\n\t\t\tpath: [\"parent\"],\n\t\t\tparent: cfg.parent,\n\t\t});\n\t});\n\n/**\n * The top-level object accepted by `defineConfig`. The `branch` closure is validated\n * structurally as a function here; its returned tuning is validated per-evaluation by\n * {@link branchTuningSchema} inside `resolveConfig`.\n */\nexport const configInputSchema = z\n\t.strictObject({\n\t\tauth: serviceToggleInputSchema.optional(),\n\t\tdataApi: dataApiInputSchema.optional(),\n\t\tpreview: previewInputSchema.optional(),\n\t\tbranch: z\n\t\t\t.custom<(...args: unknown[]) => unknown>(\n\t\t\t\t(value) => typeof value === \"function\",\n\t\t\t\t{\n\t\t\t\t\tmessage:\n\t\t\t\t\t\t\"branch must be a function: `branch: (branch) => ({ … })`\",\n\t\t\t\t},\n\t\t\t)\n\t\t\t.optional(),\n\t})\n\t.superRefine((cfg, ctx) => {\n\t\t// A Data API verified by Neon Auth (`authProvider: \"neon\"`, the default) needs Neon\n\t\t// Auth enabled on the same branch so the tokens it verifies actually exist. Enforce\n\t\t// the same invariant the `defineConfig` type-level check expresses, at runtime.\n\t\tif (!isToggleEnabledValue(cfg.dataApi)) return;\n\t\tif (dataApiAuthProviderValue(cfg.dataApi) !== \"neon\") return;\n\t\tif (!isToggleEnabledValue(cfg.auth)) {\n\t\t\tctx.addIssue({\n\t\t\t\tcode: \"custom\",\n\t\t\t\tpath: [\"auth\"],\n\t\t\t\tmessage:\n\t\t\t\t\t'dataApi with authProvider \"neon\" requires Neon Auth — set `auth: true` (or `auth: { enabled: true }`), or use `dataApi.authProvider: \"external\"` with your own `jwksUrl`.',\n\t\t\t});\n\t\t}\n\t});\n\n/**\n * Whether a parsed `auth` / `dataApi` toggle value is enabled: a present object (or `true`)\n * is on unless `enabled` is explicitly `false`. Mirrors `isServiceEnabled` in\n * `define-config.ts`, operating on the already-validated runtime value.\n */\nfunction isToggleEnabledValue(value: unknown): boolean {\n\tif (value === undefined || value === null) return false;\n\tif (typeof value === \"boolean\") return value;\n\tif (typeof value === \"object\") {\n\t\treturn (value as { enabled?: unknown }).enabled !== false;\n\t}\n\treturn false;\n}\n\n/** Read the (defaulted) `authProvider` from a parsed `dataApi` value. */\nfunction dataApiAuthProviderValue(value: unknown): \"neon\" | \"external\" {\n\tif (value !== null && typeof value === \"object\") {\n\t\tconst provider = (value as { authProvider?: unknown }).authProvider;\n\t\tif (provider === \"external\") return \"external\";\n\t}\n\treturn \"neon\";\n}\n\nfunction validateParentReference(args: {\n\tctx: z.RefinementCtx;\n\tpath: (string | number)[];\n\tparent: string | undefined;\n}): void {\n\tconst { ctx, path, parent } = args;\n\tif (parent === undefined) return;\n\n\tconst patternCheck = validatePattern(parent);\n\tif (\"error\" in patternCheck) {\n\t\tctx.addIssue({ code: \"custom\", path, message: patternCheck.error });\n\t} else if (isWildcardPattern(parent)) {\n\t\tctx.addIssue({\n\t\t\tcode: \"custom\",\n\t\t\tpath,\n\t\t\tmessage: `parent must be a concrete branch name (no wildcards), got \"${parent}\"`,\n\t\t});\n\t}\n}\n\n/**\n * Convert the structured {@link z.ZodError} produced by `configSchema.safeParse` into the\n * `string[]` shape used by {@link import(\"./errors.js\").ConfigValidationError}.\n *\n * Issue paths are rendered as dot-separated property accesses (`postgres.computeSettings`)\n * and unknown-key issues from `strictObject` are normalised so the message contains the\n * substring \"unknown key\" — keeping pre-zod assertions in test suites and downstream tools\n * stable.\n */\nexport function formatZodIssues(error: z.ZodError): string[] {\n\treturn error.issues.map((issue) => {\n\t\tconst path = renderPath(issue.path);\n\t\tconst message = normaliseIssueMessage(issue);\n\t\treturn path ? `${path}: ${message}` : message;\n\t});\n}\n\nfunction renderPath(path: ReadonlyArray<PropertyKey>): string {\n\tlet out = \"\";\n\tfor (const segment of path) {\n\t\tif (typeof segment === \"number\") out += `[${segment}]`;\n\t\telse if (out === \"\") out += String(segment);\n\t\telse out += `.${String(segment)}`;\n\t}\n\treturn out;\n}\n\nfunction normaliseIssueMessage(issue: z.core.$ZodIssue): string {\n\tif (issue.code === \"unrecognized_keys\") {\n\t\tconst keys = issue.keys ?? [];\n\t\tconst formatted = keys.map((k) => JSON.stringify(k)).join(\", \");\n\t\treturn `unknown key${keys.length === 1 ? \"\" : \"s\"}: ${formatted}`;\n\t}\n\tif (issue.code === \"invalid_key\") {\n\t\t// A record *key* that fails its key schema (e.g. a bad function slug) surfaces in\n\t\t// zod as a single `invalid_key` issue whose own `message` is the generic, useless\n\t\t// \"Invalid key in record\". The actual reason — the function-slug regex rule, say —\n\t\t// lives in the nested key-schema `issues`. Hoist those so the user sees *why* the\n\t\t// key was rejected (the offending key itself is already in the issue `path`).\n\t\tconst reasons = issue.issues\n\t\t\t.map((nested) => nested.message)\n\t\t\t.filter((message) => message.length > 0);\n\t\tif (reasons.length > 0) return reasons.join(\"; \");\n\t}\n\treturn issue.message;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,wBAAwB,EACnC,aAAa;CACb,uBAAuB,EACrB,MAAM;EACN,EAAE,QAAQ,GAAI;EACd,EAAE,QAAQ,EAAG;EACb,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;CACZ,CAAC,CAAC,CACD,SAAS;CACX,uBAAuB,EACrB,MAAM;EACN,EAAE,QAAQ,GAAI;EACd,EAAE,QAAQ,EAAG;EACb,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;EACX,EAAE,QAAQ,CAAC;CACZ,CAAC,CAAC,CACD,SAAS;CACX,gBAAgB,EACd,MAAM;EAAC,EAAE,QAAQ,KAAK;EAAG,EAAE,OAAO;EAAG,EAAE,OAAO;CAAC,CAAC,CAAC,CACjD,SAAS,CAAC,CACV,aAAa,OAAO,QAAQ;EAC5B,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,SAAS,oBAAoB,KAAK;EACxC,IAAI,WAAW,QACd,IAAI,SAAS;GACZ,MAAM;GACN,SAAS,OAAO;EACjB,CAAC;CAEH,CAAC;AACH,CAAC,CAAC,CACD,aAAa,UAAU,QAAQ;CAC/B,MAAM,EAAE,uBAAuB,KAAK,uBAAuB,QAC1D;CACD,IAAI,QAAQ,KAAA,KAAa,QAAQ,KAAA,KAAa,MAAM,KACnD,IAAI,SAAS;EACZ,MAAM;EACN,MAAM,CAAC,uBAAuB;EAC9B,SAAS,0BAA0B,IAAI,sCAAsC,IAAI;CAClF,CAAC;AAEH,CAAC;;AAGF,MAAa,sBAAsB,EAAE,aAAa,EACjD,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,EAC/B,CAAC;;AAGD,MAAa,2BAA2B,EAAE,MAAM,CAC/C,EAAE,QAAQ,GACV,mBACD,CAAC;;;;;AAMD,MAAa,wBAAwB,EAAE,aAAa;CACnD,qBAAqB,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC1C,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS;CACvC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACrC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACxC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,qBAAqB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAC/C,aAAa,EACX,MAAM,CAAC,EAAE,QAAQ,mBAAmB,GAAG,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC,CAC9D,SAAS;CACX,0BAA0B,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9C,qBAAqB,EAAE,QAAQ,CAAC,CAAC,SAAS;AAC3C,CAAC;;AAGD,MAAM,8BAA8B;CACnC;CACA;CACA;AACD;;;;;;;AAQA,MAAa,sBAAsB,EACjC,aAAa;CACb,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC9B,cAAc,EACZ,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC,CACjD,SAAS;CACX,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,UAAU,sBAAsB,SAAS;AAC1C,CAAC,CAAC,CACD,aAAa,KAAK,QAAQ;CAE1B,KADiB,IAAI,gBAAgB,YACpB,QAAQ;CACzB,KAAK,MAAM,OAAO,6BACjB,IAAI,IAAI,SAAS,KAAA,GAChB,IAAI,SAAS;EACZ,MAAM;EACN,MAAM,CAAC,GAAG;EACV,SAAS,GAAG,IAAI;CACjB,CAAC;AAGJ,CAAC;;AAGF,MAAa,qBAAqB,EAAE,MAAM,CAAC,EAAE,QAAQ,GAAG,mBAAmB,CAAC;AAE5E,MAAa,uBAAuB,EAAE,aAAa,EAClD,iBAAiB,sBAAsB,SAAS,EACjD,CAAC;;;;;;;;AASD,MAAM,qBAAqB,EACzB,OAAO,CAAC,CACR,MACA,oBACA,0FACD;;AAGD,MAAM,mBAAmB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;;;;;;;;;AAUlD,MAAM,yBAAyB,EAAE,OAAO,EACvC,QAAQ,UAAU;CACjB,IAAI,MAAM,UAAU,KAAA,GAAW,OAAO,KAAA;CACtC,MAAM,OAAO,MAAM,QAAQ,CAAC;CAC5B,MAAM,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,IAAI,KAAA;CAC9D,MAAM,iBAAiB,KAAK,QAAQ,WAAW;CAC/C,MAAM,OACL,kBAAkB,KAAK,iBAAiB,IAAI,KAAK,SAC9C,OAAO,KAAK,iBAAiB,EAAE,IAC/B,KAAA;CAOJ,OAAO,GALN,SAAS,KAAA,KAAa,QAAQ,KAAA,IAC3B,yBAAyB,IAAI,kBAAkB,KAAK,KACpD,QAAQ,KAAA,IACP,yBAAyB,IAAI,KAC7B,0BACa;AACnB,EACD,CAAC;;;;;;AAOD,MAAM,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,sBAAsB;;;;;AAMrE,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK;;;;;AAMvD,MAAM,0BAA0B,EAAE,aAAa,EAC9C,MAAM,cAAc,SAAS,EAC9B,CAAC;AAED,MAAM,gBAAgB,EAAE,QAAQ,UAAU;;;;;;AAO1C,MAAa,oBAAoB,EAAE,aAAa;CAC/C,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC/B,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,KAAK,kBAAkB,SAAS;CAChC,KAAK,wBAAwB,SAAS;AACvC,CAAC;;AAGD,MAAa,kBAAkB,EAAE,aAAa,EAC7C,QAAQ,EACN,MAAM,CAAC,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,aAAa,CAAC,CAAC,CAAC,CACvD,SAAS,EACZ,CAAC;;AAGD,MAAa,qBAAqB,EAAE,aAAa;CAChD,WAAW,yBAAyB,SAAS;CAC7C,WAAW,EAAE,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,SAAS;CACpE,SAAS,EAAE,OAAO,kBAAkB,eAAe,CAAC,CAAC,SAAS;AAC/D,CAAC;;AAGD,MAAa,uBAAuB,EAAE,aAAa,EAClD,SAAS,cAAc,SAAS,EACjC,CAAC;;AAGD,MAAM,sBAAsB,EAAE,aAAa,EAC1C,WAAW,EAAE,OAAO,oBAAoB,oBAAoB,CAAC,CAAC,SAAS,EACxE,CAAC;;;;;AAMD,MAAa,qBAAqB,EAChC,aAAa;CACb,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,KAAK,EACH,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAC/B,SAAS,CAAC,CACV,aAAa,OAAO,QAAQ;EAC5B,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,SAAS,eAAe,KAAK;EACnC,IAAI,WAAW,QACd,IAAI,SAAS;GAAE,MAAM;GAAU,SAAS,OAAO;EAAM,CAAC;CAExD,CAAC;CACF,UAAU,qBAAqB,SAAS;CACxC,SAAS,oBAAoB,SAAS;AACvC,CAAC,CAAC,CACD,aAAa,KAAK,QAAQ;CAC1B,wBAAwB;EACvB;EACA,MAAM,CAAC,QAAQ;EACf,QAAQ,IAAI;CACb,CAAC;AACF,CAAC;;;;;;AAOF,MAAa,oBAAoB,EAC/B,aAAa;CACb,MAAM,yBAAyB,SAAS;CACxC,SAAS,mBAAmB,SAAS;CACrC,SAAS,mBAAmB,SAAS;CACrC,QAAQ,EACN,QACC,UAAU,OAAO,UAAU,YAC5B,EACC,SACC,2DACF,CACD,CAAC,CACA,SAAS;AACZ,CAAC,CAAC,CACD,aAAa,KAAK,QAAQ;CAI1B,IAAI,CAAC,qBAAqB,IAAI,OAAO,GAAG;CACxC,IAAI,yBAAyB,IAAI,OAAO,MAAM,QAAQ;CACtD,IAAI,CAAC,qBAAqB,IAAI,IAAI,GACjC,IAAI,SAAS;EACZ,MAAM;EACN,MAAM,CAAC,MAAM;EACb,SACC;CACF,CAAC;AAEH,CAAC;;;;;;AAOF,SAAS,qBAAqB,OAAyB;CACtD,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO;CAClD,IAAI,OAAO,UAAU,WAAW,OAAO;CACvC,IAAI,OAAO,UAAU,UACpB,OAAQ,MAAgC,YAAY;CAErD,OAAO;AACR;;AAGA,SAAS,yBAAyB,OAAqC;CACtE,IAAI,UAAU,QAAQ,OAAO,UAAU;MACpB,MAAqC,iBACtC,YAAY,OAAO;CAAA;CAErC,OAAO;AACR;AAEA,SAAS,wBAAwB,MAIxB;CACR,MAAM,EAAE,KAAK,MAAM,WAAW;CAC9B,IAAI,WAAW,KAAA,GAAW;CAE1B,MAAM,eAAe,gBAAgB,MAAM;CAC3C,IAAI,WAAW,cACd,IAAI,SAAS;EAAE,MAAM;EAAU;EAAM,SAAS,aAAa;CAAM,CAAC;MAC5D,IAAI,kBAAkB,MAAM,GAClC,IAAI,SAAS;EACZ,MAAM;EACN;EACA,SAAS,8DAA8D,OAAO;CAC/E,CAAC;AAEH;;;;;;;;;;AAWA,SAAgB,gBAAgB,OAA6B;CAC5D,OAAO,MAAM,OAAO,KAAK,UAAU;EAClC,MAAM,OAAO,WAAW,MAAM,IAAI;EAClC,MAAM,UAAU,sBAAsB,KAAK;EAC3C,OAAO,OAAO,GAAG,KAAK,IAAI,YAAY;CACvC,CAAC;AACF;AAEA,SAAS,WAAW,MAA0C;CAC7D,IAAI,MAAM;CACV,KAAK,MAAM,WAAW,MACrB,IAAI,OAAO,YAAY,UAAU,OAAO,IAAI,QAAQ;MAC/C,IAAI,QAAQ,IAAI,OAAO,OAAO,OAAO;MACrC,OAAO,IAAI,OAAO,OAAO;CAE/B,OAAO;AACR;AAEA,SAAS,sBAAsB,OAAiC;CAC/D,IAAI,MAAM,SAAS,qBAAqB;EACvC,MAAM,OAAO,MAAM,QAAQ,CAAC;EAC5B,MAAM,YAAY,KAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;EAC9D,OAAO,cAAc,KAAK,WAAW,IAAI,KAAK,IAAI,IAAI;CACvD;CACA,IAAI,MAAM,SAAS,eAAe;EAMjC,MAAM,UAAU,MAAM,OACpB,KAAK,WAAW,OAAO,OAAO,CAAC,CAC/B,QAAQ,YAAY,QAAQ,SAAS,CAAC;EACxC,IAAI,QAAQ,SAAS,GAAG,OAAO,QAAQ,KAAK,IAAI;CACjD;CACA,OAAO,MAAM;AACd"}