@supatype/cli 0.1.0-alpha.10

package/dist/ensure-binary.js

@@ -0,0 +1,17 @@
+/**
+ * Resolve component binaries, downloading from the CDN when not cached.
+ */
+import { resolveBinary, download, currentPlatform, resolveVersionFor, } from "./binary-cache.js";
+export async function ensureBinary(component, config) {
+    try {
+        return await resolveBinary(component, config);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (!message.includes("not found in cache")) {
+            throw err;
+        }
+    }
+    return download(component, await resolveVersionFor(component, config), currentPlatform());
+}
+//# sourceMappingURL=ensure-binary.js.map

package/dist/ensure-binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-binary.js","sourceRoot":"","sources":["../src/ensure-binary.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,aAAa,EACb,QAAQ,EACR,eAAe,EACf,iBAAiB,GAElB,MAAM,mBAAmB,CAAA;AAG1B,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAoB,EACpB,MAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,SAAS,EAAE,MAAM,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;AAC3F,CAAC"}

package/dist/functions-router-gen.d.ts

@@ -0,0 +1,14 @@
+export interface DiscoveredFunctionRoute {
+    name: string;
+    entrypoint: string;
+}
+/** Discover *.ts handlers and `{name}/index.ts` dirs; skips `_shared`, dotfiles. */
+export declare function discoverTsFunctionsInDir(functionsDir: string): DiscoveredFunctionRoute[];
+/** Router source rooted at routerFilePath (defines import paths). */
+export declare function generateFunctionsRouterSource(routerFilePath: string, fns: DiscoveredFunctionRoute[]): string;
+/**
+ * Writes `.supatype/functions-router.ts` under project cwd. Returns absolute path or null if no handlers.
+ * Pass `routes` when callers already scanned the dir to avoid duplicate I/O.
+ */
+export declare function writeDevFunctionsRouter(cwd: string, functionsDir: string, routes?: DiscoveredFunctionRoute[]): string | null;
+//# sourceMappingURL=functions-router-gen.d.ts.map

package/dist/functions-router-gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions-router-gen.d.ts","sourceRoot":"","sources":["../src/functions-router-gen.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAsBxF;AAQD,qEAAqE;AACrE,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,uBAAuB,EAAE,GAC7B,MAAM,CAsJR;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GACjC,MAAM,GAAG,IAAI,CAUf"}

package/dist/functions-router-gen.js

@@ -0,0 +1,199 @@
+/**
+ * Generates a Deno router entrypoint so `deno run` (optionally `deno run --watch` in dev)
+ * can serve multiple handlers (same routing contract as `supatype functions serve`).
+ */
+import { basename, join, relative, dirname, resolve as pathResolve, } from "node:path";
+import { existsSync, readdirSync, statSync, mkdirSync, writeFileSync } from "node:fs";
+/** Discover *.ts handlers and `{name}/index.ts` dirs; skips `_shared`, dotfiles. */
+export function discoverTsFunctionsInDir(functionsDir) {
+    if (!existsSync(functionsDir))
+        return [];
+    const entries = readdirSync(functionsDir);
+    const out = [];
+    for (const entry of entries) {
+        if (entry.startsWith("_") || entry.startsWith("."))
+            continue;
+        const fullPath = join(functionsDir, entry);
+        const st = statSync(fullPath);
+        if (st.isDirectory()) {
+            const indexTs = join(fullPath, "index.ts");
+            if (existsSync(indexTs))
+                out.push({ name: entry, entrypoint: indexTs });
+        }
+        else if (entry.endsWith(".ts") && !entry.endsWith(".d.ts")) {
+            const name = basename(entry, ".ts");
+            out.push({ name, entrypoint: fullPath });
+        }
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+function importSpecFromRouter(routerFilePath, entrypoint) {
+    const rel = relative(dirname(routerFilePath), entrypoint).replace(/\\/g, "/");
+    if (!rel.startsWith("."))
+        return `./${rel}`;
+    return rel;
+}
+/** Router source rooted at routerFilePath (defines import paths). */
+export function generateFunctionsRouterSource(routerFilePath, fns) {
+    const imports = fns.map((fn, i) => `import handler_${i} from "${importSpecFromRouter(routerFilePath, fn.entrypoint)}"`);
+    const routes = fns.map((fn, i) => `  "${fn.name}": handler_${i},`);
+    return `// Auto-generated — do not edit (regenerated by supatype dev / functions serve)
+${imports.join("\n")}
+
+const handlers: Record<string, (req: Request) => Response | Promise<Response>> = {
+${routes.join("\n")}
+}
+
+const port = parseInt(Deno.env.get("PORT") ?? "8001", 10)
+const functionsDir = Deno.env.get("SUPATYPE_DENO_FUNCTIONS_DIR") ?? ""
+const normalizedFunctionsDir = functionsDir.endsWith("/") ? functionsDir.slice(0, -1) : functionsDir
+const sharedEnvPath = Deno.env.get("SUPATYPE_SHARED_ENV_FILE")
+  ?? (normalizedFunctionsDir ? normalizedFunctionsDir + "/.env.local" : "")
+
+let envLock: Promise<void> = Promise.resolve()
+
+async function withEnvLock<T>(run: () => Promise<T>): Promise<T> {
+  const prev = envLock
+  let release: () => void = () => {}
+  envLock = new Promise<void>(resolve => { release = resolve })
+  await prev
+  try {
+    return await run()
+  } finally {
+    release()
+  }
+}
+
+async function readEnvFile(path: string): Promise<Record<string, string>> {
+  if (!path) return {}
+  try {
+    const text = await Deno.readTextFile(path)
+    const out: Record<string, string> = {}
+    for (const line of text.split("\\n")) {
+      const trimmed = line.trim()
+      if (!trimmed || trimmed.startsWith("#")) continue
+      const eq = trimmed.indexOf("=")
+      if (eq <= 0) continue
+      out[trimmed.slice(0, eq)] = trimmed.slice(eq + 1)
+    }
+    return out
+  } catch {
+    return {}
+  }
+}
+
+async function scopedEnvForFunction(fnName: string): Promise<Record<string, string>> {
+  const shared = await readEnvFile(sharedEnvPath)
+  if (!normalizedFunctionsDir) return shared
+  const fnPath = normalizedFunctionsDir + "/.env." + fnName + ".local"
+  const fnVars = await readEnvFile(fnPath)
+  return { ...shared, ...fnVars }
+}
+
+async function runWithScopedEnv<T>(fnName: string, run: () => Promise<T>): Promise<T> {
+  return withEnvLock(async () => {
+    const scoped = await scopedEnvForFunction(fnName)
+    const prev = new Map<string, string | undefined>()
+    for (const [k, v] of Object.entries(scoped)) {
+      prev.set(k, Deno.env.get(k))
+      Deno.env.set(k, v)
+    }
+    try {
+      return await run()
+    } finally {
+      for (const k of Object.keys(scoped)) {
+        const old = prev.get(k)
+        if (old === undefined) Deno.env.delete(k)
+        else Deno.env.set(k, old)
+      }
+    }
+  })
+}
+
+Deno.serve({ port }, async (req: Request): Promise<Response> => {
+  const url = new URL(req.url)
+  const pathParts = url.pathname
+    .replace(/^\\/functions\\/v1\\/?/, "")
+    .split("/")
+    .filter(Boolean)
+  const fnName = pathParts[0] ?? ""
+
+  if (!fnName || !handlers[fnName]) {
+    return new Response(JSON.stringify({
+      error: "not_found",
+      message: fnName ? \`Function "\${fnName}" not found\` : "No function specified",
+      available: Object.keys(handlers),
+    }), { status: 404, headers: { "Content-Type": "application/json" } })
+  }
+
+  try {
+    const start = performance.now()
+    const response = await runWithScopedEnv(fnName, async () => {
+      const prev = new Map<string, string | undefined>()
+      const setScoped = (key: string, value: string | undefined) => {
+        if (value === undefined || value.length === 0) return
+        prev.set(key, Deno.env.get(key))
+        Deno.env.set(key, value)
+      }
+
+      // Supatype runtime defaults available to every invocation.
+      const supatypeUrl = Deno.env.get("SUPATYPE_URL")
+      const supatypeAnon = Deno.env.get("SUPATYPE_ANON_KEY")
+      const supatypeServiceRole = Deno.env.get("SUPATYPE_SERVICE_ROLE_KEY")
+      const supatypeDbUrl = Deno.env.get("SUPATYPE_DB_URL") ?? Deno.env.get("DATABASE_URL")
+      const supatypeJwks = Deno.env.get("SUPATYPE_JWKS")
+
+      setScoped("SUPATYPE_URL", supatypeUrl)
+      setScoped("SUPATYPE_ANON_KEY", supatypeAnon)
+      setScoped("SUPATYPE_SERVICE_ROLE_KEY", supatypeServiceRole)
+      setScoped("SUPATYPE_DB_URL", supatypeDbUrl)
+      setScoped("SUPATYPE_JWKS", supatypeJwks)
+      if (!Deno.env.get("SUPATYPE_PUBLISHABLE_KEYS") && supatypeAnon) {
+        setScoped("SUPATYPE_PUBLISHABLE_KEYS", JSON.stringify({ anon: supatypeAnon }))
+      }
+      if (!Deno.env.get("SUPATYPE_SECRET_KEYS") && supatypeServiceRole) {
+        setScoped("SUPATYPE_SECRET_KEYS", JSON.stringify({ service_role: supatypeServiceRole }))
+      }
+
+      setScoped("SUPATYPE_REGION", Deno.env.get("SUPATYPE_REGION") ?? "local")
+      setScoped("SUPATYPE_EXECUTION_ID", crypto.randomUUID())
+      setScoped("DENO_DEPLOYMENT_ID", Deno.env.get("DENO_DEPLOYMENT_ID") ?? "local-dev")
+
+      try {
+        return await handlers[fnName]!(req)
+      } finally {
+        for (const [key, old] of prev.entries()) {
+          if (old === undefined) Deno.env.delete(key)
+          else Deno.env.set(key, old)
+        }
+      }
+    })
+    const duration = (performance.now() - start).toFixed(1)
+    console.log(\`\${req.method} /functions/v1/\${fnName} → \${response.status} (\${duration}ms)\`)
+    return response
+  } catch (err) {
+    console.error(\`Error in function "\${fnName}":\`, err)
+    return new Response(JSON.stringify({
+      error: "function_error",
+      message: err instanceof Error ? err.message : "Unknown error",
+    }), { status: 500, headers: { "Content-Type": "application/json" } })
+  }
+})
+`;
+}
+/**
+ * Writes `.supatype/functions-router.ts` under project cwd. Returns absolute path or null if no handlers.
+ * Pass `routes` when callers already scanned the dir to avoid duplicate I/O.
+ */
+export function writeDevFunctionsRouter(cwd, functionsDir, routes) {
+    const fns = routes ?? discoverTsFunctionsInDir(functionsDir);
+    if (fns.length === 0)
+        return null;
+    const supatypeDir = pathResolve(cwd, ".supatype");
+    mkdirSync(supatypeDir, { recursive: true });
+    const routerPath = join(supatypeDir, "functions-router.ts");
+    const src = generateFunctionsRouterSource(routerPath, fns);
+    writeFileSync(routerPath, src, "utf8");
+    return routerPath;
+}
+//# sourceMappingURL=functions-router-gen.js.map

package/dist/functions-router-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions-router-gen.js","sourceRoot":"","sources":["../src/functions-router-gen.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,OAAO,IAAI,WAAW,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAOrF,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAA;IAExC,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACzC,MAAM,GAAG,GAA8B,EAAE,CAAA;IAEzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAE5D,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAE7B,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;YAC1C,IAAI,UAAU,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;QACzE,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACnC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,oBAAoB,CAAC,cAAsB,EAAE,UAAkB;IACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,GAAG,EAAE,CAAA;IAC3C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,6BAA6B,CAC3C,cAAsB,EACtB,GAA8B;IAE9B,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CACrB,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CACR,kBAAkB,CAAC,UAAU,oBAAoB,CAAC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CACtF,CAAA;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAA;IAElE,OAAO;EACP,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;EAGlB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0IlB,CAAA;AACD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,YAAoB,EACpB,MAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,CAAA;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACjD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAG,6BAA6B,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC1D,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IACtC,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @supatype/cli — programmatic API for invoking the engine.
+ *
+ * For CLI usage: use the `supatype` binary.
+ */
+export { ensureEngine, engineRequest, engineHealth, EngineError } from "./engine-client.js";
+export type { EngineResult, DiffResult, Operation, IntrospectResult } from "./engine-client.js";
+export { defineConfig, loadConfig, loadSchemaAst } from "./config.js";
+export type { SupatypeConfig, SupatypeProjectConfig } from "./config.js";
+export { schemaPathFromProject, localDSN, connectionString, serverBaseUrl } from "./project-config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC3F,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC/F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACrE,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * @supatype/cli — programmatic API for invoking the engine.
+ *
+ * For CLI usage: use the `supatype` binary.
+ */
+export { ensureEngine, engineRequest, engineHealth, EngineError } from "./engine-client.js";
+export { defineConfig, loadConfig, loadSchemaAst } from "./config.js";
+export { schemaPathFromProject, localDSN, connectionString, serverBaseUrl } from "./project-config.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE3F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/jwt.d.ts

@@ -0,0 +1,3 @@
+export declare function signJwt(payload: Record<string, unknown>, secret: string): string;
+export declare function base64url(str: string): string;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAEA,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOhF;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/jwt.js

@@ -0,0 +1,13 @@
+import { createHmac } from "node:crypto";
+export function signJwt(payload, secret) {
+    const header = base64url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
+    const body = base64url(JSON.stringify(payload));
+    const sig = createHmac("sha256", secret)
+        .update(`${header}.${body}`)
+        .digest("base64url");
+    return `${header}.${body}.${sig}`;
+}
+export function base64url(str) {
+    return Buffer.from(str, "utf8").toString("base64url");
+}
+//# sourceMappingURL=jwt.js.map

package/dist/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,UAAU,OAAO,CAAC,OAAgC,EAAE,MAAc;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SACrC,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,WAAW,CAAC,CAAA;IACtB,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACvD,CAAC"}

package/dist/kong-config.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Kong declarative config for local dev and self-hosted production.
+ * When `engineGatewayKey` is set, `/studio-config` and `/sql` require `apikey` (key-auth).
+ */
+export interface KongDeclarativeOptions {
+    /**
+     * When non-empty, Kong `key-auth` is enabled on engine routes; clients must send
+     * header `apikey: <key>` (same convention as PostgREST). Omit for open local dev.
+     */
+    engineGatewayKey?: string | undefined;
+    appUpstream?: string | undefined;
+    staticAppServiceUrl?: string | undefined;
+    functionsServiceUrl?: string | undefined;
+    /** Self-host: route API paths through supatype-server (see runtime-routes). */
+    unifiedGateway?: boolean | undefined;
+    /** Studio UI upstream (default: in-compose `studio:3002`). */
+    studioServiceUrl?: string | undefined;
+    /** See {@link RuntimeRouteOptions.studioStripPath}. */
+    studioStripPath?: boolean | undefined;
+}
+/**
+ * Build full `kong.yml` content. Single source of truth for CLI `dev` and `self-host setup`.
+ */
+export declare function buildKongDeclarative(opts?: KongDeclarativeOptions): string;
+//# sourceMappingURL=kong-config.d.ts.map

package/dist/kong-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kong-config.d.ts","sourceRoot":"","sources":["../src/kong-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACpC,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,uDAAuD;IACvD,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CACtC;AASD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,sBAA2B,GAAG,MAAM,CA4D9E"}

package/dist/kong-config.js

@@ -0,0 +1,71 @@
+/**
+ * Kong declarative config for local dev and self-hosted production.
+ * When `engineGatewayKey` is set, `/studio-config` and `/sql` require `apikey` (key-auth).
+ */
+/** Escape a string for use inside YAML double quotes. */
+function yamlQuotedString(s) {
+    return JSON.stringify(s);
+}
+import { runtimeRouteSpec } from "./runtime-routes.js";
+/**
+ * Build full `kong.yml` content. Single source of truth for CLI `dev` and `self-host setup`.
+ */
+export function buildKongDeclarative(opts = {}) {
+    const gatewayKey = opts.engineGatewayKey?.trim();
+    const secured = Boolean(gatewayKey);
+    const routes = runtimeRouteSpec({
+        ...(opts.unifiedGateway === true && { unifiedGateway: true }),
+        ...(opts.unifiedGateway !== true && opts.appUpstream !== undefined && { appUpstream: opts.appUpstream }),
+        ...(opts.unifiedGateway !== true &&
+            opts.staticAppServiceUrl !== undefined && { staticAppServiceUrl: opts.staticAppServiceUrl }),
+        ...(opts.functionsServiceUrl !== undefined && { functionsServiceUrl: opts.functionsServiceUrl }),
+        ...(opts.studioServiceUrl !== undefined && { studioServiceUrl: opts.studioServiceUrl }),
+        ...(opts.studioStripPath === false && { studioStripPath: false }),
+    });
+    const consumersBlock = secured
+        ? `
+consumers:
+  - username: studio-engine-gateway
+    keyauth_credentials:
+      - key: ${yamlQuotedString(gatewayKey)}
+`
+        : "";
+    const servicesBlock = routes.map((route) => {
+        const routePlugins = route.engineProtected && secured
+            ? `        plugins:
+          - name: key-auth
+            config:
+              key_names:
+                - apikey
+              hide_credentials: true
+`
+            : "";
+        const protocols = route.protocols && route.protocols.length > 0
+            ? `        protocols:\n${route.protocols.map((p) => `          - ${p}`).join("\n")}\n`
+            : "";
+        const stripPath = route.stripPath ?? false;
+        const graphqlPlugins = route.graphqlPostgrest
+            ? `        plugins:
+          - name: request-transformer
+            config:
+              add:
+                headers:
+                  - Content-Profile:graphql_public
+`
+            : "";
+        return `  - name: ${route.serviceName}
+    url: ${route.serviceUrl}
+    routes:
+      - name: ${route.name}
+        strip_path: ${stripPath}
+        paths:
+${route.paths.map((path) => `          - ${path}`).join("\n")}
+${protocols}${routePlugins}${graphqlPlugins}`;
+    }).join("\n");
+    return `_format_version: "3.0"
+${consumersBlock}
+services:
+${servicesBlock}
+`;
+}
+//# sourceMappingURL=kong-config.js.map

package/dist/kong-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kong-config.js","sourceRoot":"","sources":["../src/kong-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAC1B,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEtD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA+B,EAAE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAA;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxG,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI;YAC9B,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9F,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvF,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,KAAK,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;KAClE,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC;;;;eAIS,gBAAgB,CAAC,UAAW,CAAC;CAC3C;QACG,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,IAAI,OAAO;YACnD,CAAC,CAAC;;;;;;CAMP;YACK,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAC7D,CAAC,CAAC,uBAAuB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACtF,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;QAC1C,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB;YAC3C,CAAC,CAAC;;;;;;CAMP;YACK,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,aAAa,KAAK,CAAC,WAAW;WAC9B,KAAK,CAAC,UAAU;;gBAEX,KAAK,CAAC,IAAI;sBACJ,SAAS;;EAE7B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EAC3D,SAAS,GAAG,YAAY,GAAG,cAAc,EAAE,CAAA;IAC3C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO;EACP,cAAc;;EAEd,aAAa;CACd,CAAA;AACD,CAAC"}

package/dist/local-gateway.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Host port published for Kong in local Docker Compose. Kong still listens on
+ * 8000 inside the container; this avoids clashing with other tools on :8000.
+ */
+export declare const LOCAL_KONG_HOST_PORT = 18473;
+export declare function localKongBaseUrl(): string;
+//# sourceMappingURL=local-gateway.d.ts.map

package/dist/local-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-gateway.d.ts","sourceRoot":"","sources":["../src/local-gateway.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAA;AAEzC,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/local-gateway.js

@@ -0,0 +1,9 @@
+/**
+ * Host port published for Kong in local Docker Compose. Kong still listens on
+ * 8000 inside the container; this avoids clashing with other tools on :8000.
+ */
+export const LOCAL_KONG_HOST_PORT = 18473;
+export function localKongBaseUrl() {
+    return `http://localhost:${LOCAL_KONG_HOST_PORT}`;
+}
+//# sourceMappingURL=local-gateway.js.map

package/dist/local-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-gateway.js","sourceRoot":"","sources":["../src/local-gateway.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAA;AAEzC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,oBAAoB,oBAAoB,EAAE,CAAA;AACnD,CAAC"}

package/dist/local-storage.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Returns env vars that configure supatype-server to use local-disk storage.
+ * Spread into the server process env when config.storage?.provider !== "s3".
+ *
+ * @param stateDir  Per-project state directory (e.g. ~/.supatype/projects/{name}/)
+ */
+export declare function localStorageEnv(stateDir: string): Record<string, string>;
+//# sourceMappingURL=local-storage.d.ts.map

package/dist/local-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-storage.d.ts","sourceRoot":"","sources":["../src/local-storage.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxE"}

package/dist/local-storage.js

@@ -0,0 +1,14 @@
+import { join } from "node:path";
+/**
+ * Returns env vars that configure supatype-server to use local-disk storage.
+ * Spread into the server process env when config.storage?.provider !== "s3".
+ *
+ * @param stateDir  Per-project state directory (e.g. ~/.supatype/projects/{name}/)
+ */
+export function localStorageEnv(stateDir) {
+    return {
+        STORAGE_PROVIDER: "local",
+        STORAGE_PATH: join(stateDir, "storage"),
+    };
+}
+//# sourceMappingURL=local-storage.js.map

package/dist/local-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-storage.js","sourceRoot":"","sources":["../src/local-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO;QACL,gBAAgB,EAAE,OAAO;QACzB,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;KACxC,CAAA;AACH,CAAC"}

package/dist/pgbouncer-userlist.d.ts

@@ -0,0 +1,5 @@
+/** PgBouncer md5 auth: "md5" + md5(password + username) — same as supatype-cloud / self-host. */
+export declare function pgbouncerMd5Hash(password: string, username: string): string;
+/** Two roles used by local compose: superuser pools (GoTrue, engine) and PostgREST. */
+export declare function pgbouncerUserlistContent(pgPassword: string): string;
+//# sourceMappingURL=pgbouncer-userlist.d.ts.map

package/dist/pgbouncer-userlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pgbouncer-userlist.d.ts","sourceRoot":"","sources":["../src/pgbouncer-userlist.ts"],"names":[],"mappings":"AAEA,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,uFAAuF;AACvF,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAMnE"}

package/dist/pgbouncer-userlist.js

@@ -0,0 +1,14 @@
+import { createHash } from "node:crypto";
+/** PgBouncer md5 auth: "md5" + md5(password + username) — same as supatype-cloud / self-host. */
+export function pgbouncerMd5Hash(password, username) {
+    return "md5" + createHash("md5").update(password + username).digest("hex");
+}
+/** Two roles used by local compose: superuser pools (GoTrue, engine) and PostgREST. */
+export function pgbouncerUserlistContent(pgPassword) {
+    return `# PgBouncer md5 userlist — matches supatype-cloud transaction pool (auth_type = md5).
+# Regenerated by supatype dev --local / init from POSTGRES_PASSWORD.
+"supatype_admin" "${pgbouncerMd5Hash(pgPassword, "supatype_admin")}"
+"authenticator" "${pgbouncerMd5Hash(pgPassword, "authenticator")}"
+`;
+}
+//# sourceMappingURL=pgbouncer-userlist.js.map

package/dist/pgbouncer-userlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pgbouncer-userlist.js","sourceRoot":"","sources":["../src/pgbouncer-userlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,QAAgB;IACjE,OAAO,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,OAAO;;oBAEW,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC;mBAC/C,gBAAgB,CAAC,UAAU,EAAE,eAAe,CAAC;CAC/D,CAAA;AACD,CAAC"}

package/dist/postgres-ctl.d.ts

@@ -0,0 +1,44 @@
+/**
+ * postgres-ctl — wrappers around pg_ctl, initdb, and pg_isready for managing
+ * a native Postgres installation.
+ */
+export interface PgOptions {
+    /** Absolute path to the directory containing pg_ctl, initdb, psql, etc. */
+    pgBinDir: string;
+    /** Absolute path to the Postgres data directory (PGDATA). */
+    dataDir: string;
+    /** Port Postgres should listen on. */
+    port: number;
+    /** Path to write the postgres log file. */
+    logPath?: string;
+}
+/**
+ * Native Postgres bundles are built with prefix /usr/local/supatype-pg; dyld/ld
+ * must load libpq and friends from the extracted lib/ next to bin/.
+ */
+export declare function pgSpawnEnv(pgBinDir: string, platform?: NodeJS.Platform): NodeJS.ProcessEnv;
+/**
+ * Initialise a Postgres data directory.
+ * Does nothing if the data directory already contains a PG_VERSION file.
+ */
+export declare function initdb(opts: PgOptions): void;
+/**
+ * Start Postgres using pg_ctl.
+ * Returns immediately once pg_ctl has handed off to the server process.
+ */
+export declare function start(opts: PgOptions): void;
+/**
+ * Stop Postgres using pg_ctl (fast mode).
+ */
+export declare function stop(opts: PgOptions): void;
+/**
+ * Wait until Postgres is accepting connections.
+ * Polls pg_isready every 200ms up to timeoutMs.
+ * Throws if the timeout is exceeded.
+ */
+export declare function waitReady(opts: PgOptions, timeoutMs?: number): Promise<void>;
+/**
+ * Returns true if a TCP listener is already bound to port on 127.0.0.1.
+ */
+export declare function isPortInUse(port: number): Promise<boolean>;
+//# sourceMappingURL=postgres-ctl.d.ts.map

package/dist/postgres-ctl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-ctl.d.ts","sourceRoot":"","sources":["../src/postgres-ctl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAAC,UAAU,CAWnB;AAMD;;;GAGG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAgB5C;AAMD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAoB3C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAS1C;AAMD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBlF;AAMD;;GAEG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYhE"}