@stim-cli/cache 1.21.0 → 1.23.0

package/README.md

@@ -59,6 +59,9 @@ export async function createCacheProvider({ projectRoot, options }) {
 }
 ```
 
+The factory may also receive `env`, a captured caller environment. Use it for
+authentication instead of reading or changing `process.env` when it is present.
+
 A provider implements one or more capabilities. It owns transport,
 serialization, archive format, authentication, and remote retention. Stim owns
 fingerprints, cache keys, and local artifact paths.
@@ -89,6 +92,10 @@ and `overwrite: true` must replace it.
 
 Every call receives an `AbortSignal`. A provider must honor it: Stim abandons
 the call at the deadline and keeps building or bundling with the local tier.
+Factories and callbacks run as trusted host code in programmatic clients and the
+server. They must keep the event loop responsive and settle when cancelled.
+Deadlines are cooperative; they do not sandbox a module that blocks JavaScript
+or terminates its host.
 
 `stim gc` never deletes provider data, and the contract has no delete
 operation, so shared team or CI data is never removed by a local command.

package/dist/index.d.mts

@@ -110,6 +110,7 @@ interface CacheProviderModule {
   createCacheProvider(input: {
     projectRoot: string;
     options: Record<string, unknown>;
+    env?: NodeJS.ProcessEnv;
   }): CacheProvider | Promise<CacheProvider>;
 }
 interface LoadCacheProviderResult {
@@ -124,9 +125,10 @@ interface ProviderCallResult<T> {
   timedOut?: true;
 }
 type WarnOnce = (code: string, message: string) => void;
-declare function loadCacheProvider({ projectRoot, config, timeoutMs }: {
+declare function loadCacheProvider({ projectRoot, config, env, timeoutMs }: {
   projectRoot: string;
   config?: CacheProviderConfig | null;
+  env?: NodeJS.ProcessEnv;
   timeoutMs?: number;
 }): Promise<LoadCacheProviderResult>;
 declare function callWithTimeout<T>(call: (signal: AbortSignal) => T | Promise<T>, timeoutMs: number, signal?: AbortSignal): Promise<ProviderCallResult<T>>;

package/dist/index.mjs

@@ -42,13 +42,15 @@ function capabilityError(provider) {
 	if (metro === void 0 && builds === void 0 && files === void 0) return "the provider advertises no files, metro or builds capability";
 	return null;
 }
-async function loadCacheProvider({ projectRoot, config, timeoutMs = timeoutFromEnv(PROVIDER_LOAD_TIMEOUT_ENV, PROVIDER_LOAD_TIMEOUT_MS) }) {
+async function loadCacheProvider({ projectRoot, config, env, timeoutMs = timeoutFromEnv(PROVIDER_LOAD_TIMEOUT_ENV, PROVIDER_LOAD_TIMEOUT_MS) }) {
 	const reference = typeof config?.provider === "string" ? config.provider.trim() : "";
 	if (!config || reference === "") return { none: true };
+	const environment = env === void 0 ? void 0 : { ...env };
 	const outcome = await callWithTimeout(() => importCacheProvider({
 		projectRoot,
 		config,
-		reference
+		reference,
+		env: environment
 	}), timeoutMs);
 	if (outcome.timedOut) return {
 		name: reference,
@@ -63,7 +65,7 @@ async function loadCacheProvider({ projectRoot, config, timeoutMs = timeoutFromE
 		unavailable: "the module produced no provider"
 	};
 }
-async function importCacheProvider({ projectRoot, config, reference }) {
+async function importCacheProvider({ projectRoot, config, reference, env }) {
 	const options = isRecord(config.options) ? config.options : {};
 	const baseDir = typeof config.baseDir === "string" && config.baseDir !== "" ? config.baseDir : projectRoot;
 	let namespace;
@@ -89,7 +91,8 @@ async function importCacheProvider({ projectRoot, config, reference }) {
 	try {
 		provider = await candidate.createCacheProvider({
 			projectRoot,
-			options
+			options,
+			...env === void 0 ? {} : { env: { ...env } }
 		});
 	} catch (error) {
 		return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stim-cli/cache",
-  "version": "1.21.0",
+  "version": "1.23.0",
   "description": "Cache provider contract and tier coordination for Stim.",
   "license": "MIT",
   "repository": {