@selvajs/server 0.2.0-beta.1

package/dist/definitions/schema-extraction.js

@@ -0,0 +1,89 @@
+// Shared compute-schema extraction. One implementation used by:
+//   - upload routes (validate-and-cache gate — no upload without a valid schema)
+//   - the render path (falls back to live extraction for un-cached or stale
+//     versions; see load-for-render.ts and ADR 0005)
+//   - the temporary solve-time backfill bridge (see the app's specs/SchemaCaching.md)
+//
+// Extraction IS validation: a `.gh` with no valid "Schema" output, or an
+// unreachable compute server, throws here and the caller rejects the upload.
+import { camelcaseKeys } from '@selvajs/compute/core';
+import { UI_SCHEMA_VERSION } from '@selvajs/schemas';
+/** Thrown when compute is reachable but the definition yields no usable schema. */
+export class SchemaExtractionError extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+        this.name = 'SchemaExtractionError';
+    }
+}
+function parseSemver(version) {
+    const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+    return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+/**
+ * Plugin↔app compat gate: reject a schema emitted by a NEWER plugin than this
+ * app was built against — its shape may contain constructs the renderer does
+ * not know. Older (or missing) versions pass: the compute-side C# migrator
+ * always emits its own current version, and an older shape only lacks
+ * optional additions.
+ */
+export function assertSupportedSchemaVersion(schema) {
+    const version = schema.schemaVersion;
+    if (!version)
+        return; // pre-2.12.0 plugin — older than the app, fine
+    const extracted = parseSemver(version);
+    const supported = parseSemver(UI_SCHEMA_VERSION);
+    if (!extracted || !supported)
+        return;
+    const newer = extracted[0] > supported[0] ||
+        (extracted[0] === supported[0] &&
+            (extracted[1] > supported[1] ||
+                (extracted[1] === supported[1] && extracted[2] > supported[2])));
+    if (newer) {
+        throw new SchemaExtractionError('unsupported', `This definition was authored with a newer Selva plugin (schema format ${version}); ` +
+            `this server supports schema format ≤ ${UI_SCHEMA_VERSION}. Update the server, or ` +
+            `re-save the definition with a matching plugin version.`);
+    }
+}
+/**
+ * Fetch the UI schema from Rhino Compute's `/grasshopper/schema` endpoint (no
+ * solve required). Throws `SchemaExtractionError` so callers can map to the
+ * right HTTP status (503 unreachable / 422 invalid or unsupported).
+ */
+export async function fetchSchemaFromCompute(definitionBytes, server) {
+    const schemaUrl = new URL('/grasshopper/schema', server.serverUrl).toString();
+    const formData = new FormData();
+    const blob = new Blob([new Uint8Array(definitionBytes)], { type: 'application/octet-stream' });
+    formData.append('file', blob, 'definition.gh');
+    const headers = {};
+    if (server.apiKey) {
+        headers['RhinoComputeKey'] = server.apiKey;
+    }
+    let response;
+    try {
+        response = await fetch(schemaUrl, { method: 'POST', headers, body: formData });
+    }
+    catch (err) {
+        throw new SchemaExtractionError('unreachable', `Compute server is unreachable: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!response.ok) {
+        throw new SchemaExtractionError('unreachable', `Schema endpoint returned ${response.status}: ${response.statusText}`);
+    }
+    // Compute returns [{ FileName, Schemas }] with PascalCase wrapper keys only.
+    // The schema contents are already camelCase from our C# serializer, so we only
+    // need a shallow camelcase per wrapper to normalize FileName→fileName,
+    // Schemas→schemas (shallow camelcaseKeys is a no-op on arrays, so each
+    // element is normalized individually). deep:true would mangle user-defined
+    // option names (e.g. "Display3d" → "display3d").
+    const raw = await response.json();
+    const results = (Array.isArray(raw) ? raw : [raw]).map((r) => camelcaseKeys(r));
+    const schemas = results.flatMap((r) => r.schemas ?? []);
+    if (schemas.length === 0) {
+        throw new SchemaExtractionError('invalid', 'No schemas found in definition.\n\n' +
+            'In Grasshopper, verify a Context Bake component with the output name "Schema" is present and wired to the solver.');
+    }
+    assertSupportedSchemaVersion(schemas[0]);
+    return schemas[0];
+}
+//# sourceMappingURL=schema-extraction.js.map

package/dist/definitions/schema-extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-extraction.js","sourceRoot":"","sources":["../../src/definitions/schema-extraction.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,iFAAiF;AACjF,4EAA4E;AAC5E,qDAAqD;AACrD,sFAAsF;AACtF,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAE7E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAiB,MAAM,kBAAkB,CAAC;AAGpE,mFAAmF;AACnF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAE9B;IADjB,YACiB,IAA+C,EAC/D,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA2C;QAI/D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACrC,CAAC;CACD;AAED,SAAS,WAAW,CAAC,OAAe;IACnC,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAgB;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,+CAA+C;IACrE,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;QAAE,OAAO;IACrC,MAAM,KAAK,GACV,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC3B,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;YAC7B,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;gBAC3B,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAC9B,aAAa,EACb,yEAAyE,OAAO,KAAK;YACpF,wCAAwC,iBAAiB,0BAA0B;YACnF,wDAAwD,CACzD,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,eAA2B,EAC3B,MAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;IAE9E,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC/F,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAE/C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,qBAAqB,CAC9B,aAAa,EACb,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,qBAAqB,CAC9B,aAAa,EACb,4BAA4B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CACrE,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,uEAAuE;IACvE,uEAAuE;IACvE,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAE3E,CAAC;IACJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,qBAAqB,CAC9B,SAAS,EACT,qCAAqC;YACpC,mHAAmH,CACpH,CAAC;IACH,CAAC;IAED,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `@selvajs/server` — transport-agnostic compute/solve server building blocks
+ * for apps built on the Selva engine.
+ *
+ * The compute stack (limits, per-key rate limiting, SSRF guard, input
+ * transform) that used to live inside the `@selvajs/selva` app, extracted so a
+ * consuming app can reuse it instead of copying it. Everything here is
+ * env-injected (no ambient `$env` / `process.env`) and framework-agnostic.
+ *
+ * The full compute subsurface is also available at `@selvajs/server/compute`,
+ * the definitions slice (DefinitionService, schema extraction/validation,
+ * render loader) at `@selvajs/server/definitions`, and the provider wiring
+ * (registry-driven `createSelvaProviders`) at `@selvajs/server/providers`.
+ */
+export * from './compute/index.js';
+export * from './definitions/index.js';
+export * from './providers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,18 @@
+/**
+ * `@selvajs/server` — transport-agnostic compute/solve server building blocks
+ * for apps built on the Selva engine.
+ *
+ * The compute stack (limits, per-key rate limiting, SSRF guard, input
+ * transform) that used to live inside the `@selvajs/selva` app, extracted so a
+ * consuming app can reuse it instead of copying it. Everything here is
+ * env-injected (no ambient `$env` / `process.env`) and framework-agnostic.
+ *
+ * The full compute subsurface is also available at `@selvajs/server/compute`,
+ * the definitions slice (DefinitionService, schema extraction/validation,
+ * render loader) at `@selvajs/server/definitions`, and the provider wiring
+ * (registry-driven `createSelvaProviders`) at `@selvajs/server/providers`.
+ */
+export * from './compute/index.js';
+export * from './definitions/index.js';
+export * from './providers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/providers/__tests__/create-selva-providers.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Tests for `createSelvaProviders` (K5) — registry-driven provider selection,
+ * lazy memoized instantiation, config parsing (flags/branding/tenancy), the
+ * solve-metrics duck-type pick, and the external config-path override.
+ */
+export {};
+//# sourceMappingURL=create-selva-providers.test.d.ts.map

package/dist/providers/__tests__/create-selva-providers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-selva-providers.test.d.ts","sourceRoot":"","sources":["../../../src/providers/__tests__/create-selva-providers.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/providers/__tests__/create-selva-providers.test.js

@@ -0,0 +1,135 @@
+/**
+ * Tests for `createSelvaProviders` (K5) — registry-driven provider selection,
+ * lazy memoized instantiation, config parsing (flags/branding/tenancy), the
+ * solve-metrics duck-type pick, and the external config-path override.
+ */
+import { describe, it, expect, vi } from 'vitest';
+import { fileURLToPath } from 'node:url';
+import { createSelvaProviders } from '../create-selva-providers.js';
+class FakeData {
+}
+class FakeStorage {
+}
+function makeRegistry() {
+    const authLocal = vi.fn(() => ({ name: 'local-auth' }));
+    const authSupabase = vi.fn(() => ({ name: 'supabase-auth' }));
+    const dataLocal = vi.fn(() => new FakeData());
+    const dataSupabase = vi.fn(() => new FakeData());
+    const storageLocal = vi.fn(() => new FakeStorage());
+    const registry = {
+        auth: { local: authLocal, supabase: authSupabase },
+        data: { local: dataLocal, supabase: dataSupabase },
+        storage: { local: storageLocal }
+    };
+    return { registry, authLocal, authSupabase, dataLocal, dataSupabase, storageLocal };
+}
+const noBoot = { onBoot: () => { } };
+describe('registry selection', () => {
+    it('falls back to "local" for every slot when env is empty', async () => {
+        const { registry, authLocal, dataLocal, storageLocal } = makeRegistry();
+        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
+        runtime.resolve();
+        expect(authLocal).toHaveBeenCalledTimes(1);
+        expect(dataLocal).toHaveBeenCalledTimes(1);
+        expect(storageLocal).toHaveBeenCalledTimes(1);
+    });
+    it('honors SELVA_*_PROVIDER env choices, case-insensitively', async () => {
+        const { registry, authSupabase, dataSupabase } = makeRegistry();
+        const runtime = await createSelvaProviders({ SELVA_AUTH_PROVIDER: 'Supabase', SELVA_DATA_PROVIDER: 'SUPABASE' }, { registry, ...noBoot });
+        runtime.resolve();
+        expect(authSupabase).toHaveBeenCalledTimes(1);
+        expect(dataSupabase).toHaveBeenCalledTimes(1);
+    });
+    it('honors the defaults option over the built-in "local"', async () => {
+        const { registry, authSupabase } = makeRegistry();
+        const runtime = await createSelvaProviders({}, { registry, defaults: { auth: 'supabase' }, ...noBoot });
+        runtime.resolve();
+        expect(authSupabase).toHaveBeenCalledTimes(1);
+    });
+    it('rejects an unknown choice, listing the registered names', async () => {
+        const { registry } = makeRegistry();
+        const runtime = await createSelvaProviders({ SELVA_AUTH_PROVIDER: 'okta' }, { registry, ...noBoot });
+        expect(() => runtime.resolve()).toThrow(/SELVA_AUTH_PROVIDER="okta".*local \| supabase/);
+    });
+});
+describe('laziness and memoization', () => {
+    it('does not instantiate providers until resolve() is called', async () => {
+        const { registry, authLocal } = makeRegistry();
+        await createSelvaProviders({}, { registry, ...noBoot });
+        expect(authLocal).not.toHaveBeenCalled();
+    });
+    it('instantiates once and logs the boot summary once across repeated resolves', async () => {
+        const { registry, authLocal } = makeRegistry();
+        const onBoot = vi.fn();
+        const runtime = await createSelvaProviders({}, { registry, onBoot });
+        runtime.resolve();
+        runtime.resolve();
+        runtime.flag('ENABLE_SHARING');
+        expect(authLocal).toHaveBeenCalledTimes(1);
+        expect(onBoot).toHaveBeenCalledTimes(1);
+        expect(onBoot.mock.calls[0][0]).toContain('auth=local-auth');
+        expect(onBoot.mock.calls[0][0]).toContain('data=FakeData');
+        expect(onBoot.mock.calls[0][0]).toContain('tenancy=single');
+    });
+});
+describe('config parsing', () => {
+    it('parses flags from SELVA_FLAG_* (omitted → false)', async () => {
+        const { registry } = makeRegistry();
+        const runtime = await createSelvaProviders({ SELVA_FLAG_ENABLE_SHARING: 'true', SELVA_FLAG_ALLOW_ORG_CREATION: 'no' }, { registry, ...noBoot });
+        expect(runtime.flag('ENABLE_SHARING')).toBe(true);
+        expect(runtime.flag('ALLOW_ORG_CREATION')).toBe(false);
+        expect(runtime.flag('ALLOW_CROSS_ORG_PUBLIC')).toBe(false);
+    });
+    it('parses tenancy and rejects unknown values', async () => {
+        const { registry } = makeRegistry();
+        const multi = await createSelvaProviders({ SELVA_TENANCY: 'multi' }, { registry, ...noBoot });
+        expect(multi.tenancy()).toBe('multi');
+        const bad = await createSelvaProviders({ SELVA_TENANCY: 'galactic' }, { registry, ...noBoot });
+        expect(() => bad.tenancy()).toThrow(/SELVA_TENANCY="galactic"/);
+    });
+    it('brands with defaults; copyright falls back to the overridden name', async () => {
+        const { registry } = makeRegistry();
+        const plain = await createSelvaProviders({}, { registry, ...noBoot });
+        expect(plain.branding().name).toBe('Selva');
+        expect(plain.branding().copyrightName).toBe('Selva');
+        expect(plain.branding().tagline).toBeTruthy();
+        const branded = await createSelvaProviders({ SELVA_BRAND_NAME: '  Acme  ' }, { registry, ...noBoot });
+        expect(branded.branding().name).toBe('Acme');
+        expect(branded.branding().copyrightName).toBe('Acme');
+        expect(branded.branding().description).toContain('Acme');
+    });
+});
+describe('solve metric sink', () => {
+    it('falls back to a noop sink when the data provider has no solveMetrics', async () => {
+        const { registry } = makeRegistry();
+        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
+        const sink = runtime.solveMetricSink();
+        expect(typeof sink.record).toBe('function');
+        expect(runtime.solveMetricSink()).toBe(sink); // memoized
+    });
+    it('reuses a duck-typed solveMetrics sink carried by the data provider', async () => {
+        const { registry } = makeRegistry();
+        const carried = { record: vi.fn() };
+        registry.data.local = vi.fn(() => ({ solveMetrics: carried }));
+        const runtime = await createSelvaProviders({}, { registry, ...noBoot });
+        expect(runtime.solveMetricSink()).toBe(carried);
+    });
+});
+describe('config-path override', () => {
+    it('loads the module default export and hands it the env', async () => {
+        const { registry, authLocal } = makeRegistry();
+        const configPath = fileURLToPath(new URL('./fixtures/override-config.mjs', import.meta.url));
+        const runtime = await createSelvaProviders({ OVERRIDE_MARKER: 'hello' }, { registry, configPath, ...noBoot });
+        const config = runtime.resolve();
+        expect(config.auth.name).toBe('override-auth');
+        expect(config.data.marker).toBe('hello');
+        expect(runtime.tenancy()).toBe('multi');
+        // The registry is bypassed entirely.
+        expect(authLocal).not.toHaveBeenCalled();
+    });
+    it('rejects at load time when the path does not exist', async () => {
+        const { registry } = makeRegistry();
+        await expect(createSelvaProviders({}, { registry, configPath: './does-not-exist.js', ...noBoot })).rejects.toThrow(/does-not-exist\.js/);
+    });
+});
+//# sourceMappingURL=create-selva-providers.test.js.map

package/dist/providers/__tests__/create-selva-providers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-selva-providers.test.js","sourceRoot":"","sources":["../../../src/providers/__tests__/create-selva-providers.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAyB,MAAM,8BAA8B,CAAC;AAE3F,MAAM,QAAQ;CAAG;AACjB,MAAM,WAAW;CAAG;AAEpB,SAAS,YAAY;IACpB,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAA6B,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAA6B,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,EAA8B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,EAA8B,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,WAAW,EAAiC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAqB;QAClC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE;QAClD,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE;QAClD,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;KAChC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AAEpC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,mBAAmB,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,EACpE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,EACF,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,CACvD,CAAC;QACF,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAC/B,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,yBAAyB,EAAE,MAAM,EAAE,6BAA6B,EAAE,IAAI,EAAE,EAC1E,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAChC,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAA6B,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACzC,EAAE,eAAe,EAAE,OAAO,EAAE,EAC5B,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CACnC,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAE,MAAM,CAAC,IAAsC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,qCAAqC;QACrC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,MAAM,CACX,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/providers/create-selva-providers.d.ts

@@ -0,0 +1,53 @@
+import type { IAuthProvider, IDataProvider, IStorageProvider, ISolveMetricSink, SelvaBranding, SelvaConfig, SelvaFlags, TenancyMode } from '@selvajs/platform';
+import { type EnvRecord } from '../compute/limits.js';
+export type ProviderFactory<T> = (env: EnvRecord) => T;
+/**
+ * The provider implementations available to this deployment, keyed by the
+ * (lowercase) choice name used in `SELVA_AUTH_PROVIDER` / `SELVA_DATA_PROVIDER`
+ * / `SELVA_STORAGE_PROVIDER`.
+ */
+export interface ProviderRegistry {
+    auth: Record<string, ProviderFactory<IAuthProvider>>;
+    data: Record<string, ProviderFactory<IDataProvider>>;
+    storage: Record<string, ProviderFactory<IStorageProvider>>;
+}
+export interface CreateSelvaProvidersOptions {
+    registry: ProviderRegistry;
+    /** Fallback choice per slot when the env var is unset. Default: `'local'`. */
+    defaults?: Partial<Record<'auth' | 'data' | 'storage', string>>;
+    /**
+     * Path to an external `selva.config.js` override (absolute or CWD-relative).
+     * Pass `env.SELVA_CONFIG_PATH` through; when set, the module's default
+     * export (a `SelvaConfig` or factory) replaces the env-driven wiring.
+     */
+    configPath?: string;
+    /** Boot-summary sink, called once on first `resolve()`. Default: `console.info`. */
+    onBoot?: (summary: string) => void;
+}
+export interface SelvaProviderRuntime {
+    /**
+     * Memoized provider wiring. The first call instantiates providers from env
+     * (and may throw if required secrets are missing); subsequent calls return
+     * the cached config. Never call at build time — provider `fromEnv`
+     * factories validate required secrets.
+     */
+    resolve(): SelvaConfig;
+    tenancy(): TenancyMode;
+    /** Resolved branding — every field defaulted so the UI never null-checks. */
+    branding(): Required<SelvaBranding>;
+    /** Safe flag accessor — omitted flags resolve to false. */
+    flag(name: keyof SelvaFlags): boolean;
+    /** Per-solve timing sink; `NoopSolveMetricSink` when the config omits one. */
+    solveMetricSink(): ISolveMetricSink;
+}
+/**
+ * Build the provider runtime. Loading the *config source* (default factory,
+ * or the `configPath` override module) happens here and is cheap and
+ * secret-free — a factory is just a function. The factory is NOT invoked:
+ * that runs the registry's `fromEnv` factories, which validate required
+ * secrets, and doing it at import/build time would make merely building the
+ * app require a full runtime env. Provider instantiation is deferred to the
+ * first `resolve()`.
+ */
+export declare function createSelvaProviders(env: EnvRecord, options: CreateSelvaProvidersOptions): Promise<SelvaProviderRuntime>;
+//# sourceMappingURL=create-selva-providers.d.ts.map

package/dist/providers/create-selva-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-selva-providers.d.ts","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EAEX,UAAU,EACV,WAAW,EACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,KAAK,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,OAAO,IAAI,WAAW,CAAC;IACvB,OAAO,IAAI,WAAW,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,2DAA2D;IAC3D,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;IACtC,8EAA8E;IAC9E,eAAe,IAAI,gBAAgB,CAAC;CACpC;AAkGD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAkD/B"}

package/dist/providers/create-selva-providers.js

@@ -0,0 +1,152 @@
+// Configurable provider wiring (K5) — the reusable core of the app's
+// composition root, extracted so any app built on the engine gets the same
+// env-driven provider selection, `selva.config.js` override hook, and lazy
+// instantiation without copying it.
+//
+// The provider IMPLEMENTATIONS are not bundled: the caller passes a
+// `ProviderRegistry` mapping choice names (the `SELVA_*_PROVIDER` env values)
+// to `fromEnv`-style factories. That keeps this package free of dependencies
+// on `@selvajs/local-provider` / `@selvajs/supabase-provider` — a consuming
+// app registers exactly the providers it ships.
+//
+// Two wiring modes (unchanged from the app):
+//
+//   Default — providers are picked from env vars (SELVA_AUTH_PROVIDER etc.)
+//   via the registry. New deployments need only a .env file.
+//
+//   Override — pass `configPath` (e.g. env.SELVA_CONFIG_PATH) pointing at an
+//   external `selva.config.js` (absolute or CWD-relative). It is loaded
+//   dynamically at boot and replaces the env-driven wiring entirely. The path
+//   must resolve to an actual `.js` file — there's no TS compiler at runtime.
+import { pathToFileURL } from 'node:url';
+import { resolve as resolvePath } from 'node:path';
+import { existsSync } from 'node:fs';
+import { isFlagEnabled, NoopSolveMetricSink } from '@selvajs/platform';
+import { readBool } from '../compute/limits.js';
+// Every SelvaFlags key, mapped from `SELVA_FLAG_<KEY>`. The `satisfies` +
+// exhaustiveness check below make adding a platform flag without listing it
+// here a compile error.
+const FLAG_KEYS = [
+    'ALLOW_CROSS_ORG_PUBLIC',
+    'ALLOW_ORG_COMPUTE_OVERRIDE',
+    'ALLOW_ORG_CREATION',
+    'ENABLE_PLATFORM_PROJECTS',
+    'ENABLE_SHARING'
+];
+const _allFlagsListed = true;
+function pick(env, envVar, slot, fallback) {
+    const choice = (env[envVar] ?? fallback).toLowerCase();
+    const factory = slot[choice];
+    if (!factory) {
+        throw new Error(`Unknown ${envVar}="${choice}". Expected: ${Object.keys(slot).join(' | ')}.`);
+    }
+    return factory(env);
+}
+function pickTenancy(env) {
+    const choice = (env.SELVA_TENANCY ?? 'single').toLowerCase();
+    if (choice !== 'single' && choice !== 'multi') {
+        throw new Error(`Unknown SELVA_TENANCY="${choice}". Expected: single | multi.`);
+    }
+    return choice;
+}
+/**
+ * Per-solve metric sink. Supabase's data provider carries a `solveMetrics`
+ * sink built from its own client bundle — reuse it so timings persist
+ * automatically. Backends without a metrics table leave it undefined, which
+ * falls back to `NoopSolveMetricSink` in `solveMetricSink()`.
+ */
+function pickSolveMetrics(data) {
+    const candidate = data.solveMetrics;
+    if (candidate && typeof candidate.record === 'function') {
+        return candidate;
+    }
+    return undefined;
+}
+function buildDefaultFactory(options) {
+    const { registry, defaults } = options;
+    return (env) => {
+        const data = pick(env, 'SELVA_DATA_PROVIDER', registry.data, defaults?.data ?? 'local');
+        return {
+            tenancy: pickTenancy(env),
+            flags: Object.fromEntries(FLAG_KEYS.map((key) => [key, readBool(env, `SELVA_FLAG_${key}`, false)])),
+            branding: {
+                name: env.SELVA_BRAND_NAME,
+                copyrightName: env.SELVA_BRAND_COPYRIGHT_NAME,
+                tagline: env.SELVA_BRAND_TAGLINE,
+                description: env.SELVA_BRAND_DESCRIPTION
+            },
+            auth: pick(env, 'SELVA_AUTH_PROVIDER', registry.auth, defaults?.auth ?? 'local'),
+            data,
+            storage: pick(env, 'SELVA_STORAGE_PROVIDER', registry.storage, defaults?.storage ?? 'local'),
+            solveMetrics: pickSolveMetrics(data)
+        };
+    };
+}
+async function loadConfigSource(options) {
+    if (!options.configPath) {
+        return buildDefaultFactory(options);
+    }
+    const abs = resolvePath(process.cwd(), options.configPath);
+    if (!existsSync(abs)) {
+        throw new Error(`Config override path ${options.configPath} resolved to ${abs} which does not exist.`);
+    }
+    // Dynamic specifier — a bundler must not pre-resolve this at build time,
+    // hence @vite-ignore. pathToFileURL keeps Windows absolute paths valid as
+    // ESM specifiers.
+    const mod = (await import(/* @vite-ignore */ pathToFileURL(abs).href));
+    return mod.default;
+}
+/**
+ * Build the provider runtime. Loading the *config source* (default factory,
+ * or the `configPath` override module) happens here and is cheap and
+ * secret-free — a factory is just a function. The factory is NOT invoked:
+ * that runs the registry's `fromEnv` factories, which validate required
+ * secrets, and doing it at import/build time would make merely building the
+ * app require a full runtime env. Provider instantiation is deferred to the
+ * first `resolve()`.
+ */
+export async function createSelvaProviders(env, options) {
+    const raw = await loadConfigSource(options);
+    const onBoot = options.onBoot ?? console.info;
+    let config;
+    let solveMetricSink;
+    function resolve() {
+        if (config)
+            return config;
+        config = typeof raw === 'function' ? raw(env) : raw;
+        // One-line boot summary so operators can confirm at a glance what got
+        // wired without grepping env vars or reading the config file. Provider
+        // names come from the IAuthProvider.name field; data/storage adapters
+        // don't expose a name, so we infer from the constructor.
+        onBoot(`[selva] providers wired: ` +
+            `auth=${config.auth.name} ` +
+            `data=${config.data.constructor.name} ` +
+            `storage=${config.storage.constructor.name} ` +
+            `tenancy=${config.tenancy ?? 'single'}` +
+            (options.configPath ? ` config=${options.configPath}` : ''));
+        return config;
+    }
+    return {
+        resolve,
+        tenancy: () => resolve().tenancy ?? 'single',
+        branding: () => {
+            const brand = resolve().branding ?? {};
+            const name = brand.name?.trim() || 'Selva';
+            return {
+                name,
+                copyrightName: brand.copyrightName?.trim() || name,
+                tagline: brand.tagline?.trim() || 'Turn Grasshopper definitions into tools anyone can use.',
+                description: brand.description?.trim() ||
+                    `Build and deploy interactive web applications powered by Grasshopper definitions with ${name}.`
+            };
+        },
+        flag: (name) => isFlagEnabled(resolve(), name),
+        solveMetricSink: () => {
+            if (!solveMetricSink) {
+                solveMetricSink = resolve().solveMetrics ?? new NoopSolveMetricSink();
+            }
+            return solveMetricSink;
+        }
+    };
+}
+//# sourceMappingURL=create-selva-providers.js.map

package/dist/providers/create-selva-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-selva-providers.js","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gDAAgD;AAChD,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYrC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AA8ChE,0EAA0E;AAC1E,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,SAAS,GAAG;IACjB,wBAAwB;IACxB,4BAA4B;IAC5B,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;CACiC,CAAC;AAKnD,MAAM,eAAe,GAAmB,IAAI,CAAC;AAE7C,SAAS,IAAI,CACZ,GAAc,EACd,MAAc,EACd,IAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC5C,MAAM,SAAS,GAAI,IAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,SAAS,IAAI,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,SAA6B,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAChE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACxF,OAAO;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CACxE;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,OAAO,EAAE,GAAG,CAAC,mBAAmB;gBAChC,WAAW,EAAE,GAAG,CAAC,uBAAuB;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC;YAChF,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC;YAC5F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;SACpC,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,OAAO,CAAC,UAAU,gBAAgB,GAAG,wBAAwB,CACrF,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAEpE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAc,EACd,OAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAE9C,IAAI,MAA+B,CAAC;IACpC,IAAI,eAA6C,CAAC;IAElD,SAAS,OAAO;QACf,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEpD,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,CACL,2BAA2B;YAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG;YAC3B,QAAQ,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG;YACvC,WAAW,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG;YAC7C,WAAW,MAAM,CAAC,OAAO,IAAI,QAAQ,EAAE;YACvC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,QAAQ;QAC5C,QAAQ,EAAE,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAC3C,OAAO;gBACN,IAAI;gBACJ,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,yDAAyD;gBAC3F,WAAW,EACV,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;oBACzB,yFAAyF,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;QAC9C,eAAe,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,OAAO,EAAE,CAAC,YAAY,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/providers/index.d.ts

@@ -0,0 +1,2 @@
+export { createSelvaProviders, type CreateSelvaProvidersOptions, type ProviderFactory, type ProviderRegistry, type SelvaProviderRuntime } from './create-selva-providers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,MAAM,6BAA6B,CAAC"}

package/dist/providers/index.js

@@ -0,0 +1,6 @@
+// Configurable provider wiring — env-driven provider selection over a
+// caller-supplied registry, `selva.config.js` override hook, lazy memoized
+// instantiation. The app keeps its own getters (services, error reporting) as
+// its composition root; this is the reusable core underneath.
+export { createSelvaProviders } from './create-selva-providers.js';
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2EAA2E;AAC3E,8EAA8E;AAC9E,8DAA8D;AAE9D,OAAO,EACN,oBAAoB,EAKpB,MAAM,6BAA6B,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@selvajs/server",
+  "version": "0.2.0-beta.1",
+  "description": "Transport-agnostic compute/solve/definitions server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, input transform, solve pipeline, definition service + render loader)",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/VektorNode/selva.git",
+    "directory": "packages/server"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./compute": {
+      "source": "./src/compute/index.ts",
+      "types": "./dist/compute/index.d.ts",
+      "import": "./dist/compute/index.js"
+    },
+    "./definitions": {
+      "source": "./src/definitions/index.ts",
+      "types": "./dist/definitions/index.d.ts",
+      "import": "./dist/definitions/index.js"
+    },
+    "./providers": {
+      "source": "./src/providers/index.ts",
+      "types": "./dist/providers/index.d.ts",
+      "import": "./dist/providers/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "dependencies": {
+    "@selvajs/compute": "^3.1.0-beta.3",
+    "@selvajs/platform": "0.14.3-beta.0",
+    "@selvajs/schemas": "4.7.0-beta.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.17",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.6"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}