bunderstack 0.17.0-beta.2 → 0.17.0-beta.3

package/dist/database/pglite.js

@@ -0,0 +1,27 @@
+import { drizzle } from 'drizzle-orm/pglite';
+import { migrate } from 'drizzle-orm/pglite/migrator';
+import { mkdir } from 'node:fs/promises';
+const rawPath = (url) => url.startsWith('file:') ? url.slice('file:'.length) : url;
+export function pglite() {
+    return {
+        dialect: 'pg',
+        driver: 'pglite',
+        async connect(schema, { url }, { introspect }) {
+            if (introspect)
+                return { db: drizzle.mock({ schema }) };
+            if (url.startsWith('postgres://') || url.startsWith('postgresql://')) {
+                throw new Error('[bunderstack] pglite adapter cannot connect to a Postgres URL');
+            }
+            const raw = rawPath(url);
+            const dataDir = raw === ':memory:' ? 'memory://' : raw;
+            if (!dataDir.startsWith('memory://'))
+                await mkdir(dataDir, { recursive: true });
+            const db = drizzle(dataDir, { schema });
+            return { db: db, close: () => db.$client.close() };
+        },
+        async migrate(db, migrationsFolder) {
+            await migrate(db, { migrationsFolder });
+        },
+    };
+}
+//# sourceMappingURL=pglite.js.map

package/dist/database/pglite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pglite.js","sourceRoot":"","sources":["../../src/database/pglite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAIxC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAC9B,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAE3D,MAAM,UAAU,MAAM;IACpB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,QAAQ;QAChB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE;YAC3C,IAAI,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAU,EAAE,CAAA;YAEhE,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,OAAO,GAAG,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAA;YACtD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;gBAClC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACvC,OAAO,EAAE,EAAE,EAAE,EAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,gBAAgB;YAChC,MAAM,OAAO,CAAC,EAAW,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/database/postgres-js.d.ts

@@ -0,0 +1,3 @@
+import type { DatabaseAdapter } from './adapter.js';
+export declare function postgresJs(): DatabaseAdapter;
+//# sourceMappingURL=postgres-js.d.ts.map

package/dist/database/postgres-js.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-js.d.ts","sourceRoot":"","sources":["../../src/database/postgres-js.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EAGhB,MAAM,WAAW,CAAA;AAElB,wBAAgB,UAAU,IAAI,eAAe,CAuB5C"}

package/dist/database/postgres-js.js

@@ -0,0 +1,21 @@
+import { drizzle } from 'drizzle-orm/postgres-js';
+import { migrate } from 'drizzle-orm/postgres-js/migrator';
+export function postgresJs() {
+    return {
+        dialect: 'pg',
+        driver: 'postgres-js',
+        async connect(schema, { url }, { introspect }) {
+            if (introspect)
+                return { db: drizzle.mock({ schema }) };
+            if (!url.startsWith('postgres://') && !url.startsWith('postgresql://')) {
+                throw new Error('[bunderstack] postgresJs adapter requires a Postgres URL');
+            }
+            const db = drizzle({ connection: url, schema });
+            return { db: db, close: () => db.$client.end() };
+        },
+        async migrate(db, migrationsFolder) {
+            await migrate(db, { migrationsFolder });
+        },
+    };
+}
+//# sourceMappingURL=postgres-js.js.map

package/dist/database/postgres-js.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-js.js","sourceRoot":"","sources":["../../src/database/postgres-js.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAA;AAQ1D,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,aAAa;QACrB,KAAK,CAAC,OAAO,CACX,MAAe,EACf,EAAE,GAAG,EAAsB,EAC3B,EAAE,UAAU,EAA0B;YAEtC,IAAI,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAU,EAAE,CAAA;YAEhE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAA;YACH,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAU,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;YACxD,OAAO,EAAE,EAAE,EAAE,EAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAA;QAC3D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,gBAAgB;YAChC,MAAM,OAAO,CAAC,EAAW,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/db.d.ts

@@ -0,0 +1,18 @@
+import type { LibSQLDatabase } from 'drizzle-orm/libsql';
+import type { PgDatabase, PgQueryResultHKT, PgTable } from 'drizzle-orm/pg-core';
+import type { DatabaseAdapter, DatabaseConnection, DatabaseConnectionResult } from './database/adapter.js';
+import type { Dialect } from './dialect.js';
+export type Driver = 'libsql' | 'pglite' | 'bun-sql' | 'postgres-js';
+/** Per-dialect public db type, computed from the schema's table brands. */
+export type DbFor<TSchema extends Record<string, unknown>> = [
+    Extract<TSchema[keyof TSchema], PgTable>
+] extends [never] ? LibSQLDatabase<TSchema> : PgDatabase<PgQueryResultHKT, TSchema>;
+export declare function validateDatabaseUrl(url: string, dialect: Dialect): void;
+export declare function createDb<TSchema extends Record<string, unknown>>(schema: TSchema, cfg: DatabaseConnection & {
+    adapter: DatabaseAdapter;
+    dialect: Dialect;
+    introspect?: boolean;
+}): Promise<DatabaseConnectionResult<TSchema> & {
+    driver: Driver;
+}>;
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAEhF,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExC,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAA;AAEpE,2EAA2E;AAC3E,MAAM,MAAM,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IAC3D,OAAO,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC;CACzC,SAAS,CAAC,KAAK,CAAC,GACb,cAAc,CAAC,OAAO,CAAC,GACvB,UAAU,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;AAKzC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,QAgBhE;AAED,wBAAsB,QAAQ,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpE,MAAM,EAAE,OAAO,EACf,GAAG,EAAE,kBAAkB,GAAG;IACxB,OAAO,EAAE,eAAe,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,GACA,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAajE"}

package/dist/db.js

@@ -0,0 +1,26 @@
+const PG_SERVER_RE = /^postgres(ql)?:\/\//;
+const LIBSQL_REMOTE_RE = /^(libsql|wss?|https?):\/\//;
+export function validateDatabaseUrl(url, dialect) {
+    if (dialect === 'sqlite') {
+        if (PG_SERVER_RE.test(url)) {
+            throw new Error('[bunderstack] DATABASE_URL is a Postgres URL but the schema uses sqliteTable. ' +
+                'Define the schema with drizzle-orm/pg-core, or point DATABASE_URL at a SQLite database.');
+        }
+    }
+    else if (dialect === 'pg') {
+        if (LIBSQL_REMOTE_RE.test(url)) {
+            throw new Error('[bunderstack] DATABASE_URL looks like a libsql/Turso URL but the schema uses pgTable. ' +
+                'Set DATABASE_URL=postgres://… (or leave it unset for local PGlite).');
+        }
+    }
+}
+export async function createDb(schema, cfg) {
+    if (cfg.adapter.dialect !== cfg.dialect) {
+        throw new Error(`[bunderstack] database adapter dialect ${cfg.adapter.dialect} does not match ${cfg.dialect} schema`);
+    }
+    if (!cfg.introspect)
+        validateDatabaseUrl(cfg.url, cfg.dialect);
+    const result = await cfg.adapter.connect(schema, { url: cfg.url, authToken: cfg.authToken }, { introspect: cfg.introspect ?? false });
+    return { ...result, driver: cfg.adapter.driver };
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAmBA,MAAM,YAAY,GAAG,qBAAqB,CAAA;AAC1C,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AAErD,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAAgB;IAC/D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,gFAAgF;gBAC9E,yFAAyF,CAC5F,CAAA;QACH,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,wFAAwF;gBACtF,qEAAqE,CACxE,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAe,EACf,GAIC;IAED,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,CAAC,OAAO,CAAC,OAAO,mBAAmB,GAAG,CAAC,OAAO,SAAS,CACrG,CAAA;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CACtC,MAAM,EACN,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAC1C,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,KAAK,EAAE,CACxC,CAAA;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;AAClD,CAAC"}

package/dist/dialect.d.ts

@@ -0,0 +1,17 @@
+export type Dialect = 'sqlite' | 'pg';
+/**
+ * Minimal structural view of a drizzle db shared by both dialects. Internal
+ * modules run dynamic tables (Record<string, unknown> schemas) where drizzle's
+ * generics add no safety, so they accept this instead of a per-dialect union.
+ * The public surface (`app.db`, API context) keeps full per-dialect typing via
+ * `DbFor` in db.ts.
+ */
+export type AnyDb = {
+    select: (...args: any[]) => any;
+    insert: (...args: any[]) => any;
+    update: (...args: any[]) => any;
+    delete: (...args: any[]) => any;
+};
+/** Classify a schema by its table brands. Mixed dialects are a config error. */
+export declare function detectDialect(schema: Record<string, unknown>): Dialect;
+//# sourceMappingURL=dialect.d.ts.map

package/dist/dialect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../src/dialect.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAA;AAErC;;;;;;GAMG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAChC,CAAA;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CActE"}

package/dist/dialect.js

@@ -0,0 +1,22 @@
+// src/dialect.ts — schema-driven dialect detection. Imports only dialect-core
+// drizzle entrypoints (no drivers), safe in every module graph.
+import { is } from 'drizzle-orm';
+import { PgTable } from 'drizzle-orm/pg-core';
+import { SQLiteTable } from 'drizzle-orm/sqlite-core';
+/** Classify a schema by its table brands. Mixed dialects are a config error. */
+export function detectDialect(schema) {
+    let pgKey;
+    let sqliteKey;
+    for (const [key, value] of Object.entries(schema)) {
+        if (is(value, PgTable))
+            pgKey ??= key;
+        else if (is(value, SQLiteTable))
+            sqliteKey ??= key;
+    }
+    if (pgKey !== undefined && sqliteKey !== undefined) {
+        throw new Error(`[bunderstack] schema mixes dialects: "${pgKey}" is a Postgres table while "${sqliteKey}" is a SQLite table. ` +
+            'Define every table with the same dialect (drizzle-orm/pg-core or drizzle-orm/sqlite-core).');
+    }
+    return pgKey !== undefined ? 'pg' : 'sqlite';
+}
+//# sourceMappingURL=dialect.js.map

package/dist/dialect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.js","sourceRoot":"","sources":["../src/dialect.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gEAAgE;AAChE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAkBrD,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,MAA+B;IAC3D,IAAI,KAAyB,CAAA;IAC7B,IAAI,SAA6B,CAAA;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,KAAK,KAAK,GAAG,CAAA;aAChC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;YAAE,SAAS,KAAK,GAAG,CAAA;IACpD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,gCAAgC,SAAS,uBAAuB;YAC5G,4FAA4F,CAC/F,CAAA;IACH,CAAC;IACD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9C,CAAC"}

package/dist/email/smtp.d.ts

@@ -0,0 +1,14 @@
+import type { EmailAdapter } from '../email.js';
+type SmtpTransport = {
+    sendMail(message: Record<string, unknown>): Promise<{
+        messageId?: string;
+    }>;
+};
+export declare function createSmtpAdapter(options: {
+    url: string;
+}, createTransport?: (url: string) => SmtpTransport): EmailAdapter;
+export declare const smtp: (options: {
+    url: string;
+}) => EmailAdapter;
+export {};
+//# sourceMappingURL=smtp.d.ts.map

package/dist/email/smtp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.d.ts","sourceRoot":"","sources":["../../src/email/smtp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5E,CAAA;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EACxB,eAAe,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aACgB,GACjD,YAAY,CA6Bd;AAED,eAAO,MAAM,IAAI,GAAI,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,KAAG,YACpB,CAAA"}

package/dist/email/smtp.js

@@ -0,0 +1,27 @@
+import nodemailer from 'nodemailer';
+export function createSmtpAdapter(options, createTransport = (url) => nodemailer.createTransport(url)) {
+    const toArray = (v) => v === undefined ? undefined : Array.isArray(v) ? v : [v];
+    let transportPromise = null;
+    const getTransport = () => {
+        transportPromise ??= Promise.resolve(createTransport(options.url));
+        return transportPromise;
+    };
+    return {
+        async send(msg) {
+            const transport = await getTransport();
+            const info = await transport.sendMail({
+                from: msg.from,
+                to: toArray(msg.to).join(', '),
+                subject: msg.subject,
+                html: msg.html,
+                text: msg.text,
+                replyTo: msg.replyTo,
+                cc: toArray(msg.cc)?.join(', '),
+                bcc: toArray(msg.bcc)?.join(', '),
+            });
+            return { id: info.messageId };
+        },
+    };
+}
+export const smtp = (options) => createSmtpAdapter(options);
+//# sourceMappingURL=smtp.js.map

package/dist/email/smtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../src/email/smtp.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAA;AAQnC,MAAM,UAAU,iBAAiB,CAC/B,OAAwB,EACxB,kBAAkD,CAAC,GAAG,EAAE,EAAE,CACxD,UAAU,CAAC,eAAe,CAAC,GAAG,CAAkB;IAElD,MAAM,OAAO,GAAG,CAAC,CAAgC,EAAE,EAAE,CACnD,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE1D,IAAI,gBAAgB,GAER,IAAI,CAAA;IAEhB,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAClE,OAAO,gBAAgB,CAAA;IACzB,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAA;YACtC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAwB,EAAgB,EAAE,CAC7D,iBAAiB,CAAC,OAAO,CAAC,CAAA"}

package/dist/email.d.ts

@@ -0,0 +1,39 @@
+export type EmailMessage = {
+    to: string | string[];
+    subject: string;
+    html?: string;
+    text?: string;
+    from?: string;
+    replyTo?: string;
+    cc?: string | string[];
+    bcc?: string | string[];
+};
+export type SentEmail = {
+    id?: string;
+};
+/** Adapters receive the message with `from` already resolved. */
+export type EmailAdapter = {
+    send(msg: EmailMessage & {
+        from: string;
+    }): Promise<SentEmail>;
+};
+export type EmailConfigInput = {
+    from: string;
+    provider?: 'resend' | 'console' | EmailAdapter | EmailAdapter['send'];
+};
+export type EmailFacade = {
+    send(msg: EmailMessage): Promise<SentEmail>;
+};
+export type CreateEmailOptions = {
+    env: {
+        RESEND_API_KEY?: string;
+        SMTP_URL?: string;
+        NODE_ENV?: string;
+    };
+    /** Test seam for the resend adapter. */
+    fetchFn?: typeof fetch;
+};
+/** Root string provider tag ('resend' | 'console') or undefined. */
+export declare function emailProviderTag(config: EmailConfigInput | undefined): string | undefined;
+export declare function createEmail(config: EmailConfigInput | undefined, opts: CreateEmailOptions): EmailFacade;
+//# sourceMappingURL=email.d.ts.map

package/dist/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,iEAAiE;AACjE,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;CAC/D,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;CACtE,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtE,wCAAwC;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CACvB,CAAA;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,MAAM,GAAG,SAAS,CAEpB;AA0FD,wBAAgB,WAAW,CACzB,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,kBAAkB,GACvB,WAAW,CAmBb"}

package/dist/email.js

@@ -0,0 +1,97 @@
+// src/email.ts — email sending: console / resend / custom adapters.
+// SMTP is provided by the static `bunderstack/email/smtp` factory subpath.
+/** Root string provider tag ('resend' | 'console') or undefined. */
+export function emailProviderTag(config) {
+    return typeof config?.provider === 'string' ? config.provider : undefined;
+}
+const toArray = (v) => v === undefined ? undefined : Array.isArray(v) ? v : [v];
+function createConsoleAdapter() {
+    return {
+        async send(msg) {
+            const line = '─'.repeat(60);
+            console.log([
+                line,
+                '📧 email (console provider — not sent)',
+                `from:    ${msg.from}`,
+                `to:      ${toArray(msg.to).join(', ')}`,
+                `subject: ${msg.subject}`,
+                line,
+                msg.text ?? msg.html ?? '',
+                line,
+            ].join('\n'));
+            return {};
+        },
+    };
+}
+function createResendAdapter(apiKey, fetchFn) {
+    return {
+        async send(msg) {
+            const res = await fetchFn('https://api.resend.com/emails', {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${apiKey}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    from: msg.from,
+                    to: toArray(msg.to),
+                    subject: msg.subject,
+                    html: msg.html,
+                    text: msg.text,
+                    reply_to: msg.replyTo,
+                    cc: toArray(msg.cc),
+                    bcc: toArray(msg.bcc),
+                }),
+            });
+            if (!res.ok) {
+                throw new Error(`resend API error (${res.status}): ${await res.text()}`);
+            }
+            const data = (await res.json());
+            return { id: data.id };
+        },
+    };
+}
+function resolveAdapter(config, opts) {
+    const provider = config.provider;
+    if (typeof provider === 'function')
+        return { send: provider };
+    if (typeof provider === 'object')
+        return provider;
+    const fetchFn = opts.fetchFn ?? globalThis.fetch.bind(globalThis);
+    switch (provider) {
+        case 'resend':
+            return createResendAdapter(opts.env.RESEND_API_KEY ?? '', fetchFn);
+        case 'console':
+            return createConsoleAdapter();
+        case undefined:
+            if (opts.env.NODE_ENV === 'production') {
+                throw new Error('email is configured without a provider — set email.provider ' +
+                    "('resend' | a custom adapter) for production");
+            }
+            return createConsoleAdapter();
+        default:
+            if (provider === 'smtp') {
+                throw new Error("email provider 'smtp' was removed. Import `smtp` from 'bunderstack/email/smtp' instead.");
+            }
+            return createConsoleAdapter();
+    }
+}
+export function createEmail(config, opts) {
+    if (!config) {
+        return {
+            async send() {
+                throw new Error('email is not configured — add an email key to your bunderstack config');
+            },
+        };
+    }
+    const adapter = resolveAdapter(config, opts);
+    return {
+        async send(msg) {
+            if (!msg.html && !msg.text) {
+                throw new Error('email message needs html or text content');
+            }
+            return adapter.send({ ...msg, from: msg.from ?? config.from });
+        },
+    };
+}
+//# sourceMappingURL=email.js.map

package/dist/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,2EAA2E;AAmC3E,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAC9B,MAAoC;IAEpC,OAAO,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3E,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAgC,EAAE,EAAE,CACnD,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE1D,SAAS,oBAAoB;IAC3B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC3B,OAAO,CAAC,GAAG,CACT;gBACE,IAAI;gBACJ,wCAAwC;gBACxC,YAAY,GAAG,CAAC,IAAI,EAAE;gBACtB,YAAY,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzC,YAAY,GAAG,CAAC,OAAO,EAAE;gBACzB,IAAI;gBACJ,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE;gBAC1B,IAAI;aACL,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;YACD,OAAO,EAAE,CAAA;QACX,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAc,EACd,OAAqB;IAErB,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,+BAA+B,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ,EAAE,GAAG,CAAC,OAAO;oBACrB,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;iBACtB,CAAC;aACH,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC1E,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAA;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAA;QACxB,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAAwB,EACxB,IAAwB;IAExB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;QAEpE,KAAK,SAAS;YACZ,OAAO,oBAAoB,EAAE,CAAA;QAC/B,KAAK,SAAS;YACZ,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,8DAA8D;oBAC5D,8CAA8C,CACjD,CAAA;YACH,CAAC;YACD,OAAO,oBAAoB,EAAE,CAAA;QAC/B;YACE,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;YACH,CAAC;YACD,OAAO,oBAAoB,EAAE,CAAA;IACjC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAoC,EACpC,IAAwB;IAExB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAA;YACH,CAAC;SACF,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;YAC7D,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1,47 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+export declare const CLIENT_PREFIX: "PUBLIC_";
+export type EnvConfigInput = {
+    server?: Record<string, StandardSchemaV1>;
+    client?: Record<string, StandardSchemaV1>;
+    /** Explicit value source for client vars (e.g. Vite's import.meta.env). */
+    runtimeEnv?: Record<string, unknown>;
+};
+export type BunderstackRole = 'all' | 'web' | 'worker';
+/** Vars bunderstack itself consumes, always validated. */
+export type BaseEnv = {
+    NODE_ENV?: string;
+    DATABASE_URL: string;
+    DATABASE_AUTH_TOKEN?: string;
+    AUTH_SECRET: string;
+    REDIS_URL?: string;
+    RESEND_API_KEY?: string;
+    SMTP_URL?: string;
+    BUNDERSTACK_ROLE: BunderstackRole;
+};
+type InferVars<T> = T extends Record<string, StandardSchemaV1> ? {
+    [K in keyof T]: StandardSchemaV1.InferOutput<T[K]>;
+} : unknown;
+export type ValidatedEnv<TEnv extends EnvConfigInput | undefined> = [
+    TEnv
+] extends [EnvConfigInput] ? BaseEnv & InferVars<NonNullable<TEnv>['server']> & InferVars<NonNullable<TEnv>['client']> : BaseEnv;
+export declare class BunderstackEnvError extends Error {
+    readonly issues: string[];
+    constructor(issues: string[]);
+}
+export type ValidateEnvOptions = {
+    /** String tag of the configured email provider ('resend' | 'smtp'), if any. */
+    emailProvider?: string;
+    /** Value source; defaults to process.env. Tests pass this explicitly. */
+    source?: Record<string, string | undefined>;
+    /** Dialect-aware DATABASE_URL fallback; createBunderstack passes it. */
+    defaultDatabaseUrl?: string;
+};
+export declare function validateEnv<TEnv extends EnvConfigInput | undefined>(envConfig: TEnv, options?: ValidateEnvOptions): ValidatedEnv<TEnv>;
+/**
+ * Browser-side companion (t3-env style): validates ONLY the client section.
+ * Server keys exist on the returned object as traps that throw on access, so
+ * a leaked import fails loudly instead of silently reading undefined.
+ */
+export declare function createClientEnv<TEnv extends EnvConfigInput>(envConfig: TEnv): InferVars<TEnv['client']>;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAO7D,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAA;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAA;AAItD,0DAA0D;AAC1D,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,eAAe,CAAA;CAClC,CAAA;AAED,KAAK,SAAS,CAAC,CAAC,IACd,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACtC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACtD,OAAO,CAAA;AAGb,MAAM,MAAM,YAAY,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,IAAI;IAClE,IAAI;CACL,SAAS,CAAC,cAAc,CAAC,GACtB,OAAO,GACL,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACtC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACxC,OAAO,CAAA;AAEX,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;gBAEb,MAAM,EAAE,MAAM,EAAE;CAK7B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,CAAA;AAqCD,wBAAgB,WAAW,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,EACjE,SAAS,EAAE,IAAI,EACf,OAAO,GAAE,kBAAuB,GAC/B,YAAY,CAAC,IAAI,CAAC,CA4CpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,EACzD,SAAS,EAAE,IAAI,GACd,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAsB3B"}

package/dist/env.js

@@ -0,0 +1,99 @@
+import { StandardSchemaValidationError, validateStandardSchema, } from './standard-schema.js';
+export const CLIENT_PREFIX = 'PUBLIC_';
+const ROLES = ['all', 'web', 'worker'];
+export class BunderstackEnvError extends Error {
+    issues;
+    constructor(issues) {
+        super(`Invalid environment:\n  - ${issues.join('\n  - ')}`);
+        this.name = 'BunderstackEnvError';
+        this.issues = issues;
+    }
+}
+const DEV_AUTH_SECRET = 'dev-secret-change-in-prod';
+function validateSection(section, kind, source, issues, out) {
+    for (const [key, schema] of Object.entries(section ?? {})) {
+        const isPublic = key.startsWith(CLIENT_PREFIX);
+        if (kind === 'server' && isPublic) {
+            issues.push(`${key}: server vars must not start with ${CLIENT_PREFIX} (move it to env.client)`);
+            continue;
+        }
+        if (kind === 'client' && !isPublic) {
+            issues.push(`${key}: client vars must start with ${CLIENT_PREFIX} (rename it or move it to env.server)`);
+            continue;
+        }
+        try {
+            out[key] = validateStandardSchema(schema, source[key], 'env');
+        }
+        catch (error) {
+            if (!(error instanceof StandardSchemaValidationError))
+                throw error;
+            for (const issue of error.issues) {
+                const path = issue.path.map(String).join('.');
+                issues.push(`${key}${path ? `.${path}` : ''}: ${issue.message}`);
+            }
+        }
+    }
+}
+export function validateEnv(envConfig, options = {}) {
+    const source = options.source ?? process.env;
+    const issues = [];
+    const isProduction = source.NODE_ENV === 'production';
+    const base = {
+        NODE_ENV: source.NODE_ENV,
+        DATABASE_URL: source.DATABASE_URL ?? options.defaultDatabaseUrl ?? 'file:./data.db',
+        DATABASE_AUTH_TOKEN: source.DATABASE_AUTH_TOKEN,
+        AUTH_SECRET: source.AUTH_SECRET ?? DEV_AUTH_SECRET,
+        REDIS_URL: source.REDIS_URL,
+        RESEND_API_KEY: source.RESEND_API_KEY,
+        SMTP_URL: source.SMTP_URL,
+        BUNDERSTACK_ROLE: (source.BUNDERSTACK_ROLE ?? 'all'),
+    };
+    if (isProduction && !source.AUTH_SECRET) {
+        issues.push('AUTH_SECRET: required in production');
+    }
+    if (source.BUNDERSTACK_ROLE !== undefined &&
+        !ROLES.includes(source.BUNDERSTACK_ROLE)) {
+        issues.push(`BUNDERSTACK_ROLE: must be one of ${ROLES.join(', ')} (got "${String(source.BUNDERSTACK_ROLE)}")`);
+    }
+    if (options.emailProvider === 'resend' && !source.RESEND_API_KEY) {
+        issues.push("RESEND_API_KEY: required when email provider is 'resend'");
+    }
+    if (options.emailProvider === 'smtp' && !source.SMTP_URL) {
+        issues.push("SMTP_URL: required when email provider is 'smtp'");
+    }
+    const userVars = {};
+    validateSection(envConfig?.server, 'server', source, issues, userVars);
+    validateSection(envConfig?.client, 'client', source, issues, userVars);
+    // Introspection (Bunderhost builder) imports the app declaration to read
+    // its manifest; missing user env must not kill the boot there.
+    const lenient = source.BUNDERSTACK_INTROSPECT === '1';
+    if (issues.length > 0 && !lenient)
+        throw new BunderstackEnvError(issues);
+    return { ...base, ...userVars };
+}
+/**
+ * Browser-side companion (t3-env style): validates ONLY the client section.
+ * Server keys exist on the returned object as traps that throw on access, so
+ * a leaked import fails loudly instead of silently reading undefined.
+ */
+export function createClientEnv(envConfig) {
+    const source = envConfig.runtimeEnv ??
+        (typeof process !== 'undefined'
+            ? process.env
+            : {});
+    const issues = [];
+    const values = {};
+    validateSection(envConfig.client, 'client', source, issues, values);
+    if (issues.length > 0)
+        throw new BunderstackEnvError(issues);
+    const serverKeys = new Set(Object.keys(envConfig.server ?? {}));
+    return new Proxy(values, {
+        get(target, prop) {
+            if (typeof prop === 'string' && serverKeys.has(prop)) {
+                throw new Error(`${prop} is server-only and not available in client env`);
+            }
+            return Reflect.get(target, prop);
+        },
+    });
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAA;AAW/C,MAAM,KAAK,GAA+B,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AA4BlE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAU;IAEzB,YAAY,MAAgB;QAC1B,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAWD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAEnD,SAAS,eAAe,CACtB,OAAqD,EACrD,IAAyB,EACzB,MAA+B,EAC/B,MAAgB,EAChB,GAA4B;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,qCAAqC,aAAa,0BAA0B,CACnF,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,iCAAiC,aAAa,uCAAuC,CAC5F,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAClE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAK,OAAO,CAAC,GAA0C,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAA;IAErD,MAAM,IAAI,GAAY;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EACV,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;QACvE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe;QAClD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAoB;KACxE,CAAA;IACD,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IACD,IACE,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAmC,CAAC,EAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CACT,oCAAoC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAClG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEtE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,sBAAsB,KAAK,GAAG,CAAA;IACrD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IACxE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAwB,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAe;IAEf,MAAM,MAAM,GACV,SAAS,CAAC,UAAU;QACpB,CAAC,OAAO,OAAO,KAAK,WAAW;YAC7B,CAAC,CAAE,OAAO,CAAC,GAA+B;YAC1C,CAAC,CAAC,EAAE,CAAC,CAAA;IACT,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAE5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iDAAiD,CACzD,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;KACF,CAA8B,CAAA;AACjC,CAAC"}