@supacloud/compiler 0.27.3 → 0.28.0

package/dist/release-evidence-cli.d.ts

@@ -0,0 +1,2 @@
+/** This artifact-only entry never loads source, project configuration or credentials. */
+export declare function runReleaseEvidenceCommand(args: readonly string[]): Promise<void>;

package/dist/release-evidence.d.ts

@@ -0,0 +1,54 @@
+import type { DeliveryObject } from "./delivery-build-schema";
+/** Build evidence only; this does not attest deployment, health or rollback safety. */
+export declare const RELEASE_EVIDENCE_SCHEMA = "supacloud.release-evidence.v1";
+export type ReleaseEvidenceErrorCode = "RELEASE_EVIDENCE_INVALID" | "RELEASE_EVIDENCE_TARGET_NOT_FOUND";
+export declare class ReleaseEvidenceError extends Error {
+    readonly code: ReleaseEvidenceErrorCode;
+    constructor(code: ReleaseEvidenceErrorCode);
+}
+export interface ReleaseEvidence {
+    schema: typeof RELEASE_EVIDENCE_SCHEMA;
+    correlation: "verified-build-snapshot";
+    deploymentVerified: false;
+    target: string;
+    build: {
+        producer: string;
+        deploymentReady: false;
+        manifestSha256: string;
+        objectId: string;
+        entryKind: DeliveryObject["entryKind"];
+        entrypoint: "bundle/index.js";
+        files: number;
+        bytes: number;
+    };
+    contract: {
+        status: "present" | "absent";
+        schema: string | null;
+        resources: number;
+        diagnostics: {
+            errors: number;
+            warnings: number;
+        };
+    };
+    migrations: {
+        status: "present" | "absent";
+        count: number;
+        latestVersion: string | null;
+        executionPerformed: false;
+        compatibility: "not-proven";
+        dataRecovery: "separate-required";
+    };
+    rollback: {
+        application: string;
+        database: string;
+        storage: string;
+    };
+    notes: string[];
+}
+/**
+ * Read one bounded manifest, verify its selected object, and correlate every
+ * secondary reader to that exact object. Missing optional metadata is different
+ * from invalid metadata: any integrity, schema, UTF-8 or target failure is fatal.
+ */
+export declare function createReleaseEvidence(manifestPath: string, target: string): Promise<ReleaseEvidence>;
+export declare function formatReleaseEvidence(evidence: ReleaseEvidence): string;

package/dist/types.d.ts

@@ -9,6 +9,37 @@ export type JobIdempotency = "required" | "none";
 export type JobSchemaKind = "opaque" | "declared";
 export type ProviderKind = "class" | "value" | "factory" | "existing";
 export type TokenKind = "injection-token" | "class";
+export type InfraResourceKind = "database" | "bucket" | "queue" | "config" | "secret";
+export type InfraResourceOperation = "read" | "write" | "publish" | "consume";
+/**
+ * A logical infrastructure resource declared with `@InfraResource`. It carries
+ * no credentials and is never provisioned by the compiler; it only names what
+ * the application requires. Environment bindings resolve the name per target.
+ */
+export interface InfraResourceNode {
+    /** Stable logical name shared across environments. */
+    name: string;
+    kind: InfraResourceKind;
+    className: string;
+    file: string;
+    line: number;
+    /** Relative module path of the declaring class (for import generation). */
+    importPath: string;
+}
+export interface InfraResourceUseRef {
+    /** Logical resource name. */
+    resource: string;
+    operations: InfraResourceOperation[];
+}
+/** One module/command/job resource use, kept for inspection and validation. */
+export interface ResourceUseNode extends InfraResourceUseRef {
+    module: string;
+    /** Command name when the use is declared on a command. */
+    command?: string;
+    /** Job name when the use is declared on a Job. */
+    job?: string;
+    resourceClass: string;
+}
 export interface FunctionalInjectNode {
     /** Logical token name used by the application graph. */
     token: string;
@@ -240,6 +271,8 @@ export interface CommandNode {
     idempotency: "required" | "none";
     /** Automatically registered without manual module declaration. */
     standalone?: boolean;
+    /** Infrastructure resources this command uses, with the declared operations. */
+    uses?: InfraResourceUseRef[];
     /** Explicit aspects applied around this command. */
     aspects?: AspectRefNode[];
 }
@@ -264,6 +297,8 @@ export interface JobNode {
     maxAttempts?: number;
     /** Adapter-owned idempotency requirement. */
     idempotency?: JobIdempotency;
+    /** Infrastructure resources this job uses, with the declared operations. */
+    uses?: InfraResourceUseRef[];
     aspects?: AspectRefNode[];
 }
 export interface QueryNode {
@@ -303,6 +338,8 @@ export interface ModuleNode {
     commands: CommandNode[];
     jobs?: JobNode[];
     queries: QueryNode[];
+    /** Logical infrastructure resource names this module requires. */
+    resources?: string[];
     /** Explicit aspects applied to all routes and commands in this module. */
     aspects?: AspectRefNode[];
     /** Exported token names. */
@@ -312,6 +349,10 @@ export interface ModuleNode {
 export interface ApplicationGraph {
     /** Handler declaration files by module, for inspection only; omitted from app.manifest.json. */
     moduleHandlerFiles?: Record<string, string[]>;
+    /** Declared logical infrastructure resources, deduplicated by name. */
+    resources?: InfraResourceNode[];
+    /** Module/command/job resource uses, sorted deterministically. */
+    resourceUses?: ResourceUseNode[];
     /** Offline query inventory for AI context. Kept in graphql.manifest.json, not app.manifest.json. */
     graphql?: GraphqlContractSummary;
     modules: ModuleNode[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/compiler",
-  "version": "0.27.3",
+  "version": "0.28.0",
   "description": "Static compiler for @supacloud/app metadata: builds the application graph from AST, validates it, and generates reflection-free factory code",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,6 +17,8 @@
     }
   },
   "files": [
+    "NOTICE",
+    "LICENSE-APACHE-2.0.txt",
     "dist",
     "README.md",
     "DELIVERY.md"
@@ -40,14 +42,14 @@
     "codegen",
     "elysia"
   ],
-  "license": "MIT",
+  "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",
     "url": "https://github.com/vibeunion/supacloud.git",
     "directory": "packages/compiler"
   },
   "dependencies": {
-    "@supacloud/delivery": "0.2.0",
+    "@supacloud/delivery": "0.3.0",
     "typebox": "1.3.34",
     "@graphql-codegen/core": "^6.2.0",
     "@graphql-codegen/typed-document-node": "^7.1.0",