bunderstack 0.22.1 → 0.23.0

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 All notable changes to `bunderstack` will be documented in this file.
 
+## [0.23.0] - 2026-08-29
+
+### Added
+
+- **Environment metadata.** `env.meta` declares `sensitive` and `description` per
+  key. Server keys default to sensitive and client keys can never be — `PUBLIC_*`
+  values ship to the browser. Both reach the manifest and the blueprint; values
+  never do.
+- **Application operation catalog.** The blueprint gains `api.operations`, listing
+  the procedures an application declared itself with an `effect` of `read`,
+  `mutation`, or `unknown`. Generated CRUD, storage, and realtime routes stay
+  derivable from `resources`.
+- **Readiness endpoint.** `GET /api/readiness` reports database reachability,
+  schema provisioning, and background-queue backlog, and echoes
+  `BUNDERSTACK_REVISION` as `revision`. `GET /api/health` is unchanged.
+- **`isSensitiveEnvVar(entry)`** exported from `bunderstack/blueprint`, encoding
+  the scope-based default for blueprints written before this release.
+
+### Changed
+
+- **Forward-compatible blueprint parsing.** Every object in the blueprint schema
+  now preserves unknown keys instead of rejecting the file, so a host can read a
+  blueprint written by a newer generator. Run `bunderstack blueprint` to
+  regenerate; the new sections only appear after you do.
+- The application router passed as a callback is now resolved once when
+  `bunderstack(config)` is called rather than at `start()`, so the manifest and
+  the running app describe the same router.
+
 ## [0.22.1] - 2026-08-28
 
 ### Added

package/dist/api/catalog.d.ts

@@ -0,0 +1,8 @@
+import type { ApiOperation } from '../manifest.js';
+/**
+ * Describes the procedures an application declared itself. Generated CRUD,
+ * storage, and realtime routes are excluded: a host derives those from the
+ * blueprint's `resources`.
+ */
+export declare function describeApiOperations(router: unknown): ApiOperation[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/api/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/api/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AA2D/C;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,EAAE,CAKrE"}

package/dist/api/catalog.js

@@ -0,0 +1,56 @@
+// src/api/catalog.ts — static description of the application's own procedures.
+import { getOpenAPIMeta } from '@orpc/openapi';
+const READ_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+const MAX_SUMMARY = 200;
+function summaryText(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const collapsed = value.trim().replace(/\s+/g, ' ');
+    if (!collapsed)
+        return undefined;
+    return collapsed.length > MAX_SUMMARY
+        ? `${collapsed.slice(0, MAX_SUMMARY - 1)}…`
+        : collapsed;
+}
+function walk(router, segments) {
+    const operations = [];
+    for (const [key, value] of Object.entries(router)) {
+        if (!value || typeof value !== 'object')
+            continue;
+        const current = [...segments, key];
+        if (!('~orpc' in value)) {
+            operations.push(...walk(value, current));
+            continue;
+        }
+        const meta = (getOpenAPIMeta(value) ?? {});
+        const handle = current.join('.');
+        const method = typeof meta.method === 'string' ? meta.method.toUpperCase() : undefined;
+        const summary = summaryText(meta.summary);
+        operations.push({
+            handle,
+            operationId: typeof meta.operationId === 'string' ? meta.operationId : handle,
+            // A procedure that declares no method could be anything. Calling it a
+            // read would tell a host it is safe to invoke without asking anyone.
+            effect: method === undefined
+                ? 'unknown'
+                : READ_METHODS.has(method)
+                    ? 'read'
+                    : 'mutation',
+            ...(method === undefined ? {} : { method }),
+            ...(typeof meta.path === 'string' ? { path: meta.path } : {}),
+            ...(summary === undefined ? {} : { summary }),
+        });
+    }
+    return operations;
+}
+/**
+ * Describes the procedures an application declared itself. Generated CRUD,
+ * storage, and realtime routes are excluded: a host derives those from the
+ * blueprint's `resources`.
+ */
+export function describeApiOperations(router) {
+    if (!router || typeof router !== 'object')
+        return [];
+    return walk(router, []).sort((left, right) => left.handle.localeCompare(right.handle));
+}
+//# sourceMappingURL=catalog.js.map

package/dist/api/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/api/catalog.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAI9C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AACxD,MAAM,WAAW,GAAG,GAAG,CAAA;AAEvB,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,OAAO,SAAS,CAAC,MAAM,GAAG,WAAW;QACnC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,GAAG;QAC3C,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,IAAI,CACX,MAA+B,EAC/B,QAAkB;IAElB,MAAM,UAAU,GAAmB,EAAE,CAAA;IAErC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACjD,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAA;QAElC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC,CAAA;YACnE,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,KAAc,CAAC,IAAI,EAAE,CAGjD,CAAA;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACzE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEzC,UAAU,CAAC,IAAI,CAAC;YACd,MAAM;YACN,WAAW,EACT,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YAClE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,EACJ,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBACxB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,UAAU;YAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IACpD,OAAO,IAAI,CAAC,MAAiC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CACxC,CAAA;AACH,CAAC","sourcesContent":["// src/api/catalog.ts — static description of the application's own procedures.\nimport { getOpenAPIMeta } from '@orpc/openapi'\n\nimport type { ApiOperation } from '../manifest'\n\nconst READ_METHODS = new Set(['GET', 'HEAD', 'OPTIONS'])\nconst MAX_SUMMARY = 200\n\nfunction summaryText(value: unknown): string | undefined {\n  if (typeof value !== 'string') return undefined\n  const collapsed = value.trim().replace(/\\s+/g, ' ')\n  if (!collapsed) return undefined\n  return collapsed.length > MAX_SUMMARY\n    ? `${collapsed.slice(0, MAX_SUMMARY - 1)}…`\n    : collapsed\n}\n\nfunction walk(\n  router: Record<string, unknown>,\n  segments: string[],\n): ApiOperation[] {\n  const operations: ApiOperation[] = []\n\n  for (const [key, value] of Object.entries(router)) {\n    if (!value || typeof value !== 'object') continue\n    const current = [...segments, key]\n\n    if (!('~orpc' in value)) {\n      operations.push(...walk(value as Record<string, unknown>, current))\n      continue\n    }\n\n    const meta = (getOpenAPIMeta(value as never) ?? {}) as Record<\n      string,\n      unknown\n    >\n    const handle = current.join('.')\n    const method =\n      typeof meta.method === 'string' ? meta.method.toUpperCase() : undefined\n    const summary = summaryText(meta.summary)\n\n    operations.push({\n      handle,\n      operationId:\n        typeof meta.operationId === 'string' ? meta.operationId : handle,\n      // A procedure that declares no method could be anything. Calling it a\n      // read would tell a host it is safe to invoke without asking anyone.\n      effect:\n        method === undefined\n          ? 'unknown'\n          : READ_METHODS.has(method)\n            ? 'read'\n            : 'mutation',\n      ...(method === undefined ? {} : { method }),\n      ...(typeof meta.path === 'string' ? { path: meta.path } : {}),\n      ...(summary === undefined ? {} : { summary }),\n    })\n  }\n\n  return operations\n}\n\n/**\n * Describes the procedures an application declared itself. Generated CRUD,\n * storage, and realtime routes are excluded: a host derives those from the\n * blueprint's `resources`.\n */\nexport function describeApiOperations(router: unknown): ApiOperation[] {\n  if (!router || typeof router !== 'object') return []\n  return walk(router as Record<string, unknown>, []).sort((left, right) =>\n    left.handle.localeCompare(right.handle),\n  )\n}\n"]}

package/dist/api/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/api/registry.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAA;IAChE,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC1C;AAYD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CActE;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,GAAE,MAAM,EAAO,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AAiHD,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,WAAW,CAAC,CAgFtB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/api/registry.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAA;IAChE,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC1C;AAYD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CActE;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqBzB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,GAAE,MAAM,EAAO,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AAiHD,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,WAAW,CAAC,CAgFtB"}

package/dist/api/registry.js

@@ -1,6 +1,7 @@
 import { getOpenAPIMeta } from '@orpc/openapi';
 const RESERVED_EXACT = new Set([
     '/api/health',
+    '/api/readiness',
     '/api/openapi.json',
     '/api/realtime',
     '/api/rpc',

package/dist/api/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/api/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,UAAU;IACV,WAAW;IACX,YAAY;CACb,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;AAEpE,SAAS,2BAA2B,CAAC,IAAY;IAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,+BAA+B,CAAA;IACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACxE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAA;AACvE,CAAC;AA2BD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAe;IAC5D,IAAI,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAA;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAA;QAChE,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YACzE,kCAAkC;QACpC,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAOD,MAAM,UAAU,2BAA2B,CACzC,IAA6B,EAC7B,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,MAAM,GAA4B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAExE,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,eAAe,GAA4B,EAAE,CAAA;QACnD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAChD,MAAM,CAAC,KAAgC,CACxC,EAAE,CAAC;YACF,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACzD,eAAe,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAA;QAC3C,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,eAAe,CAAA;IAChC,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAA;IACzC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,MAAgC,EAChC,SAAmB,EAAE;IAErB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAA;IACjC,MAAM,MAAM,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAA;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,iBAAiB,GACrB,OAAO,SAAS,KAAK,QAAQ;gBAC7B,SAAS,KAAK,IAAI;gBAClB,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;YAEzB,MAAM,iBAAiB,GACrB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAA;YAE9D,IAAI,iBAAiB,IAAI,iBAAiB,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,qBAAqB,CACjC,SAAoC,EACpC,GAA8B,EAC9B,WAAW,CACZ,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,+CAA+C,CACzG,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,CACL,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CACxB,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CACtC,CAAA;IACD,OAAO,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,gBAAgB,CACvB,GAA4B,EAC5B,eAAyB,EAAE;IAE3B,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACjD,MAAM,eAAe,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,CAAA;QAE9C,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,KAAY,CAAC,IAAI,EAAE,CAG/C,CAAA;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,CAAE,IAAI,CAAC,MAAiB,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/D,MAAM,SAAS,GAAI,IAAI,CAAC,IAAe,IAAI,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1E,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;YAElE,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,WAAW;gBACX,MAAM;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,GAAG,gBAAgB,CAAC,KAAgC,EAAE,eAAe,CAAC,CACvE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAwD;IAExD,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,IAAI,OAAgC,CAAA;QACpC,IAAI,MAAM,GAAG,SAAS,CAAA;QAEtB,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,IAAwB,CAAA;YACtC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAA;YAClC,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,EAAE;gBAChD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAA+B,CAAA;YAC/C,MAAM,GAAI,OAAO,CAAC,sBAAsB,CAAY,IAAI,SAAS,CAAA;YACjE,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK;YACjE,SAAQ;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgD,CAAA;QAEtE,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,SAAQ;YAEvD,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;gBAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC;oBAAE,SAAQ;gBAChD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,SAAQ;gBAEzD,MAAM,EAAE,GAAG,SAAoC,CAAA;gBAC/C,MAAM,MAAM,GAAG,WAAW,MAAM,IAAI,eAAe,IAAI,SAAS,EAAE,CAAA;gBAClE,MAAM,WAAW,GACf,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;gBAE9D,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,WAAW;oBACX,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,SAAS;oBACf,MAAM;iBACP,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAmC,EAAE;IAErC,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAQ;QACvC,IAAI,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC5D,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,+BAA+B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,oBAAoB,KAAK,CAAC,MAAM,uBAAuB,MAAM,EAAE,CACzH,CAAA;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAA;IACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,qBAAqB,KAAK,CAAC,MAAM,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,CACrK,CAAA;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,2BAA2B,KAAK,CAAC,WAAW,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CACjJ,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAA;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;QAEpD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CACT,kCAAkC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,uBAAuB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAChK,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,yCAAyC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAC7L,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,MAAM,eAAe;YAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CACpB,CAAA;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC","sourcesContent":["import { getOpenAPIMeta } from '@orpc/openapi'\n\nconst RESERVED_EXACT = new Set([\n  '/api/health',\n  '/api/openapi.json',\n  '/api/realtime',\n  '/api/rpc',\n  '/api/auth',\n  '/api/files',\n])\nconst RESERVED_PREFIXES = ['/api/rpc/', '/api/auth/', '/api/files/']\n\nfunction collisionForBunderstackPath(path: string): string | undefined {\n  if (RESERVED_EXACT.has(path)) return 'it is reserved by bunderstack'\n  const prefix = RESERVED_PREFIXES.find((value) => path.startsWith(value))\n  return prefix ? `\"${prefix}*\" is reserved by bunderstack` : undefined\n}\n\nexport interface ApiRegistryEntry {\n  handle: string\n  operationId: string\n  method: string\n  path: string\n  source: string\n}\n\nexport interface ApiRegistry {\n  entries: ApiRegistryEntry[]\n}\n\nexport interface ForeignSpecEntry {\n  spec: Record<string, unknown>\n  prefix?: string\n  source?: string\n}\n\nexport interface BuildApiRegistryOptions {\n  nativeRouter?: Record<string, unknown>\n  foreignSpecs?: Array<Record<string, unknown> | ForeignSpecEntry>\n  /** Native procedures generated by Bunderstack itself may own reserved paths. */\n  reservedCoreHandles?: ReadonlySet<string>\n}\n\nconst HTTP_METHODS = new Set([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'HEAD',\n  'OPTIONS',\n])\n\nexport function normalizeApiPath(path: string, prefix?: string): string {\n  let cleanPath = path.startsWith('/') ? path : '/' + path\n  if (prefix) {\n    let cleanPrefix = prefix.startsWith('/') ? prefix : '/' + prefix\n    if (cleanPrefix.endsWith('/')) {\n      cleanPrefix = cleanPrefix.slice(0, -1)\n    }\n    if (cleanPath === cleanPrefix || cleanPath.startsWith(cleanPrefix + '/')) {\n      // Path already starts with prefix\n    } else {\n      cleanPath = cleanPrefix + cleanPath\n    }\n  }\n  return cleanPath.replace(/\\/+/g, '/')\n}\n\nexport interface ForeignSpecOptions {\n  prefix?: string\n  source?: string\n}\n\nexport function normalizeForeignOpenAPISpec(\n  spec: Record<string, unknown>,\n  options: ForeignSpecOptions = {},\n): Record<string, unknown> {\n  const prefix = options.prefix\n  const source = options.source\n  const cloned: Record<string, unknown> = JSON.parse(JSON.stringify(spec))\n\n  if (cloned.paths && typeof cloned.paths === 'object') {\n    const normalizedPaths: Record<string, unknown> = {}\n    for (const [routePath, pathItem] of Object.entries(\n      cloned.paths as Record<string, unknown>,\n    )) {\n      const canonicalPath = normalizeApiPath(routePath, prefix)\n      normalizedPaths[canonicalPath] = pathItem\n    }\n    cloned.paths = normalizedPaths\n  }\n\n  if (source) {\n    cloned['x-bunderstack-source'] = source\n  }\n\n  return cloned\n}\n\nexport function mergeApiRoutersStrict(\n  target: Record<string, unknown>,\n  source?: Record<string, unknown>,\n  prefix: string[] = [],\n): Record<string, unknown> {\n  if (!source) return { ...target }\n  const result: Record<string, unknown> = { ...target }\n\n  for (const [key, val] of Object.entries(source)) {\n    const currentPath = [...prefix, key]\n    const handle = currentPath.join('.')\n    const targetVal = result[key]\n\n    if (targetVal !== undefined) {\n      const isTargetNamespace =\n        typeof targetVal === 'object' &&\n        targetVal !== null &&\n        !('~orpc' in targetVal)\n\n      const isSourceNamespace =\n        typeof val === 'object' && val !== null && !('~orpc' in val)\n\n      if (isTargetNamespace && isSourceNamespace) {\n        result[key] = mergeApiRoutersStrict(\n          targetVal as Record<string, unknown>,\n          val as Record<string, unknown>,\n          currentPath,\n        )\n      } else {\n        throw new Error(\n          `[bunderstack] Router merge collision at handle \"${handle}\": duplicate procedure or namespace collision`,\n        )\n      }\n    } else {\n      result[key] = val\n    }\n  }\n\n  return result\n}\n\nfunction normalizePathSegments(path: string): string[] {\n  return path.split('/').filter(Boolean)\n}\n\nfunction isParamSegment(segment: string): boolean {\n  return (\n    (segment.startsWith('{') && segment.endsWith('}')) ||\n    segment.startsWith(':')\n  )\n}\n\nfunction normalizePathForCollision(path: string): string {\n  const segments = normalizePathSegments(path)\n  const normalized = segments.map((seg) =>\n    isParamSegment(seg) ? '{param}' : seg,\n  )\n  return '/' + normalized.join('/')\n}\n\nfunction walkNativeRouter(\n  obj: Record<string, unknown>,\n  pathSegments: string[] = [],\n): ApiRegistryEntry[] {\n  const entries: ApiRegistryEntry[] = []\n\n  for (const [key, value] of Object.entries(obj)) {\n    if (!value || typeof value !== 'object') continue\n    const currentSegments = [...pathSegments, key]\n\n    if ('~orpc' in value) {\n      const meta = (getOpenAPIMeta(value as any) || {}) as Record<\n        string,\n        unknown\n      >\n      const handle = currentSegments.join('.')\n      const method = ((meta.method as string) || 'GET').toUpperCase()\n      const routePath = (meta.path as string) || '/' + currentSegments.join('/')\n      const operationId =\n        typeof meta.operationId === 'string' ? meta.operationId : handle\n\n      entries.push({\n        handle,\n        operationId,\n        method,\n        path: routePath,\n        source: 'native',\n      })\n    } else {\n      entries.push(\n        ...walkNativeRouter(value as Record<string, unknown>, currentSegments),\n      )\n    }\n  }\n\n  return entries\n}\n\nfunction extractForeignEntries(\n  specs: Array<Record<string, unknown> | ForeignSpecEntry>,\n): ApiRegistryEntry[] {\n  const entries: ApiRegistryEntry[] = []\n\n  for (const item of specs) {\n    if (!item) continue\n    let specObj: Record<string, unknown>\n    let source = 'foreign'\n\n    if ('spec' in item && typeof item.spec === 'object' && item.spec !== null) {\n      const entry = item as ForeignSpecEntry\n      source = entry.source || 'foreign'\n      specObj = normalizeForeignOpenAPISpec(entry.spec, {\n        prefix: entry.prefix,\n        source,\n      })\n    } else {\n      const rawSpec = item as Record<string, unknown>\n      source = (rawSpec['x-bunderstack-source'] as string) || 'foreign'\n      specObj = normalizeForeignOpenAPISpec(rawSpec, { source })\n    }\n\n    if (!specObj || typeof specObj.paths !== 'object' || !specObj.paths)\n      continue\n    const paths = specObj.paths as Record<string, Record<string, unknown>>\n\n    for (const [routePath, pathItem] of Object.entries(paths)) {\n      if (!pathItem || typeof pathItem !== 'object') continue\n\n      for (const [methodKey, operation] of Object.entries(pathItem)) {\n        const uppercaseMethod = methodKey.toUpperCase()\n        if (!HTTP_METHODS.has(uppercaseMethod)) continue\n        if (!operation || typeof operation !== 'object') continue\n\n        const op = operation as Record<string, unknown>\n        const handle = `foreign:${source}:${uppercaseMethod}:${routePath}`\n        const operationId =\n          typeof op.operationId === 'string' ? op.operationId : handle\n\n        entries.push({\n          handle,\n          operationId,\n          method: uppercaseMethod,\n          path: routePath,\n          source,\n        })\n      }\n    }\n  }\n\n  return entries\n}\n\nexport async function buildApiRegistry(\n  options: BuildApiRegistryOptions = {},\n): Promise<ApiRegistry> {\n  const entries: ApiRegistryEntry[] = []\n\n  if (options.nativeRouter) {\n    entries.push(...walkNativeRouter(options.nativeRouter))\n  }\n\n  if (options.foreignSpecs) {\n    entries.push(...extractForeignEntries(options.foreignSpecs))\n  }\n\n  const errors: string[] = []\n\n  for (const entry of entries) {\n    if (entry.source !== 'native') continue\n    if (options.reservedCoreHandles?.has(entry.handle)) continue\n    const reason = collisionForBunderstackPath(entry.path)\n    if (reason) {\n      errors.push(\n        `Reserved route collision on ${entry.method} ${entry.path}: native handle \"${entry.handle}\" conflicts because ${reason}`,\n      )\n    }\n  }\n\n  // Check duplicate handles\n  const handleMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const existing = handleMap.get(entry.handle)\n    if (existing) {\n      errors.push(\n        `Duplicate handle \"${entry.handle}\": collision between ${existing.source} (${existing.method} ${existing.path}) and ${entry.source} (${entry.method} ${entry.path})`,\n      )\n    } else {\n      handleMap.set(entry.handle, entry)\n    }\n  }\n\n  // Check duplicate operation IDs\n  const opIdMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const existing = opIdMap.get(entry.operationId)\n    if (existing) {\n      errors.push(\n        `Duplicate operation ID \"${entry.operationId}\": collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n      )\n    } else {\n      opIdMap.set(entry.operationId, entry)\n    }\n  }\n\n  // Check method/path collisions (exact and parameter ambiguity)\n  const routePatternMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const normalizedPath = normalizePathForCollision(entry.path)\n    const routeKey = `${entry.method} ${normalizedPath}`\n\n    const existing = routePatternMap.get(routeKey)\n    if (existing) {\n      if (existing.path === entry.path) {\n        errors.push(\n          `Exact method/path collision on ${entry.method} ${entry.path}: collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n        )\n      } else {\n        errors.push(\n          `Ambiguous parameter path collision on ${entry.method} (${existing.path} vs ${entry.path}): collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n        )\n      }\n    } else {\n      routePatternMap.set(routeKey, entry)\n    }\n  }\n\n  if (errors.length > 0) {\n    throw new Error(\n      `[bunderstack] Route registry validation failed (${errors.length} error(s)):\\n` +\n        errors.join('\\n'),\n    )\n  }\n\n  return { entries }\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/api/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,UAAU;IACV,WAAW;IACX,YAAY;CACb,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;AAEpE,SAAS,2BAA2B,CAAC,IAAY;IAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,+BAA+B,CAAA;IACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACxE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAA;AACvE,CAAC;AA2BD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAe;IAC5D,IAAI,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAA;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAA;QAChE,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YACzE,kCAAkC;QACpC,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAOD,MAAM,UAAU,2BAA2B,CACzC,IAA6B,EAC7B,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,MAAM,GAA4B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAExE,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,eAAe,GAA4B,EAAE,CAAA;QACnD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAChD,MAAM,CAAC,KAAgC,CACxC,EAAE,CAAC;YACF,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACzD,eAAe,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAA;QAC3C,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,eAAe,CAAA;IAChC,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAA;IACzC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,MAAgC,EAChC,SAAmB,EAAE;IAErB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAA;IACjC,MAAM,MAAM,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAA;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QAE7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,iBAAiB,GACrB,OAAO,SAAS,KAAK,QAAQ;gBAC7B,SAAS,KAAK,IAAI;gBAClB,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;YAEzB,MAAM,iBAAiB,GACrB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAA;YAE9D,IAAI,iBAAiB,IAAI,iBAAiB,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,qBAAqB,CACjC,SAAoC,EACpC,GAA8B,EAC9B,WAAW,CACZ,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,+CAA+C,CACzG,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,CACL,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CACxB,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CACtC,CAAA;IACD,OAAO,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,gBAAgB,CACvB,GAA4B,EAC5B,eAAyB,EAAE;IAE3B,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACjD,MAAM,eAAe,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,CAAA;QAE9C,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,KAAY,CAAC,IAAI,EAAE,CAG/C,CAAA;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,CAAE,IAAI,CAAC,MAAiB,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/D,MAAM,SAAS,GAAI,IAAI,CAAC,IAAe,IAAI,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1E,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;YAElE,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,WAAW;gBACX,MAAM;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,GAAG,gBAAgB,CAAC,KAAgC,EAAE,eAAe,CAAC,CACvE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAwD;IAExD,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,IAAI,OAAgC,CAAA;QACpC,IAAI,MAAM,GAAG,SAAS,CAAA;QAEtB,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,IAAwB,CAAA;YACtC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAA;YAClC,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,EAAE;gBAChD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAA+B,CAAA;YAC/C,MAAM,GAAI,OAAO,CAAC,sBAAsB,CAAY,IAAI,SAAS,CAAA;YACjE,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5D,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK;YACjE,SAAQ;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgD,CAAA;QAEtE,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,SAAQ;YAEvD,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;gBAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC;oBAAE,SAAQ;gBAChD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,SAAQ;gBAEzD,MAAM,EAAE,GAAG,SAAoC,CAAA;gBAC/C,MAAM,MAAM,GAAG,WAAW,MAAM,IAAI,eAAe,IAAI,SAAS,EAAE,CAAA;gBAClE,MAAM,WAAW,GACf,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;gBAE9D,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,WAAW;oBACX,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,SAAS;oBACf,MAAM;iBACP,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAmC,EAAE;IAErC,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAQ;QACvC,IAAI,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC5D,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,+BAA+B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,oBAAoB,KAAK,CAAC,MAAM,uBAAuB,MAAM,EAAE,CACzH,CAAA;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAA;IACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,qBAAqB,KAAK,CAAC,MAAM,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,CACrK,CAAA;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,2BAA2B,KAAK,CAAC,WAAW,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CACjJ,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAA;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;QAEpD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CACT,kCAAkC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,uBAAuB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAChK,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,yCAAyC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,wBAAwB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAC7L,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,MAAM,eAAe;YAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CACpB,CAAA;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC","sourcesContent":["import { getOpenAPIMeta } from '@orpc/openapi'\n\nconst RESERVED_EXACT = new Set([\n  '/api/health',\n  '/api/readiness',\n  '/api/openapi.json',\n  '/api/realtime',\n  '/api/rpc',\n  '/api/auth',\n  '/api/files',\n])\nconst RESERVED_PREFIXES = ['/api/rpc/', '/api/auth/', '/api/files/']\n\nfunction collisionForBunderstackPath(path: string): string | undefined {\n  if (RESERVED_EXACT.has(path)) return 'it is reserved by bunderstack'\n  const prefix = RESERVED_PREFIXES.find((value) => path.startsWith(value))\n  return prefix ? `\"${prefix}*\" is reserved by bunderstack` : undefined\n}\n\nexport interface ApiRegistryEntry {\n  handle: string\n  operationId: string\n  method: string\n  path: string\n  source: string\n}\n\nexport interface ApiRegistry {\n  entries: ApiRegistryEntry[]\n}\n\nexport interface ForeignSpecEntry {\n  spec: Record<string, unknown>\n  prefix?: string\n  source?: string\n}\n\nexport interface BuildApiRegistryOptions {\n  nativeRouter?: Record<string, unknown>\n  foreignSpecs?: Array<Record<string, unknown> | ForeignSpecEntry>\n  /** Native procedures generated by Bunderstack itself may own reserved paths. */\n  reservedCoreHandles?: ReadonlySet<string>\n}\n\nconst HTTP_METHODS = new Set([\n  'GET',\n  'POST',\n  'PUT',\n  'PATCH',\n  'DELETE',\n  'HEAD',\n  'OPTIONS',\n])\n\nexport function normalizeApiPath(path: string, prefix?: string): string {\n  let cleanPath = path.startsWith('/') ? path : '/' + path\n  if (prefix) {\n    let cleanPrefix = prefix.startsWith('/') ? prefix : '/' + prefix\n    if (cleanPrefix.endsWith('/')) {\n      cleanPrefix = cleanPrefix.slice(0, -1)\n    }\n    if (cleanPath === cleanPrefix || cleanPath.startsWith(cleanPrefix + '/')) {\n      // Path already starts with prefix\n    } else {\n      cleanPath = cleanPrefix + cleanPath\n    }\n  }\n  return cleanPath.replace(/\\/+/g, '/')\n}\n\nexport interface ForeignSpecOptions {\n  prefix?: string\n  source?: string\n}\n\nexport function normalizeForeignOpenAPISpec(\n  spec: Record<string, unknown>,\n  options: ForeignSpecOptions = {},\n): Record<string, unknown> {\n  const prefix = options.prefix\n  const source = options.source\n  const cloned: Record<string, unknown> = JSON.parse(JSON.stringify(spec))\n\n  if (cloned.paths && typeof cloned.paths === 'object') {\n    const normalizedPaths: Record<string, unknown> = {}\n    for (const [routePath, pathItem] of Object.entries(\n      cloned.paths as Record<string, unknown>,\n    )) {\n      const canonicalPath = normalizeApiPath(routePath, prefix)\n      normalizedPaths[canonicalPath] = pathItem\n    }\n    cloned.paths = normalizedPaths\n  }\n\n  if (source) {\n    cloned['x-bunderstack-source'] = source\n  }\n\n  return cloned\n}\n\nexport function mergeApiRoutersStrict(\n  target: Record<string, unknown>,\n  source?: Record<string, unknown>,\n  prefix: string[] = [],\n): Record<string, unknown> {\n  if (!source) return { ...target }\n  const result: Record<string, unknown> = { ...target }\n\n  for (const [key, val] of Object.entries(source)) {\n    const currentPath = [...prefix, key]\n    const handle = currentPath.join('.')\n    const targetVal = result[key]\n\n    if (targetVal !== undefined) {\n      const isTargetNamespace =\n        typeof targetVal === 'object' &&\n        targetVal !== null &&\n        !('~orpc' in targetVal)\n\n      const isSourceNamespace =\n        typeof val === 'object' && val !== null && !('~orpc' in val)\n\n      if (isTargetNamespace && isSourceNamespace) {\n        result[key] = mergeApiRoutersStrict(\n          targetVal as Record<string, unknown>,\n          val as Record<string, unknown>,\n          currentPath,\n        )\n      } else {\n        throw new Error(\n          `[bunderstack] Router merge collision at handle \"${handle}\": duplicate procedure or namespace collision`,\n        )\n      }\n    } else {\n      result[key] = val\n    }\n  }\n\n  return result\n}\n\nfunction normalizePathSegments(path: string): string[] {\n  return path.split('/').filter(Boolean)\n}\n\nfunction isParamSegment(segment: string): boolean {\n  return (\n    (segment.startsWith('{') && segment.endsWith('}')) ||\n    segment.startsWith(':')\n  )\n}\n\nfunction normalizePathForCollision(path: string): string {\n  const segments = normalizePathSegments(path)\n  const normalized = segments.map((seg) =>\n    isParamSegment(seg) ? '{param}' : seg,\n  )\n  return '/' + normalized.join('/')\n}\n\nfunction walkNativeRouter(\n  obj: Record<string, unknown>,\n  pathSegments: string[] = [],\n): ApiRegistryEntry[] {\n  const entries: ApiRegistryEntry[] = []\n\n  for (const [key, value] of Object.entries(obj)) {\n    if (!value || typeof value !== 'object') continue\n    const currentSegments = [...pathSegments, key]\n\n    if ('~orpc' in value) {\n      const meta = (getOpenAPIMeta(value as any) || {}) as Record<\n        string,\n        unknown\n      >\n      const handle = currentSegments.join('.')\n      const method = ((meta.method as string) || 'GET').toUpperCase()\n      const routePath = (meta.path as string) || '/' + currentSegments.join('/')\n      const operationId =\n        typeof meta.operationId === 'string' ? meta.operationId : handle\n\n      entries.push({\n        handle,\n        operationId,\n        method,\n        path: routePath,\n        source: 'native',\n      })\n    } else {\n      entries.push(\n        ...walkNativeRouter(value as Record<string, unknown>, currentSegments),\n      )\n    }\n  }\n\n  return entries\n}\n\nfunction extractForeignEntries(\n  specs: Array<Record<string, unknown> | ForeignSpecEntry>,\n): ApiRegistryEntry[] {\n  const entries: ApiRegistryEntry[] = []\n\n  for (const item of specs) {\n    if (!item) continue\n    let specObj: Record<string, unknown>\n    let source = 'foreign'\n\n    if ('spec' in item && typeof item.spec === 'object' && item.spec !== null) {\n      const entry = item as ForeignSpecEntry\n      source = entry.source || 'foreign'\n      specObj = normalizeForeignOpenAPISpec(entry.spec, {\n        prefix: entry.prefix,\n        source,\n      })\n    } else {\n      const rawSpec = item as Record<string, unknown>\n      source = (rawSpec['x-bunderstack-source'] as string) || 'foreign'\n      specObj = normalizeForeignOpenAPISpec(rawSpec, { source })\n    }\n\n    if (!specObj || typeof specObj.paths !== 'object' || !specObj.paths)\n      continue\n    const paths = specObj.paths as Record<string, Record<string, unknown>>\n\n    for (const [routePath, pathItem] of Object.entries(paths)) {\n      if (!pathItem || typeof pathItem !== 'object') continue\n\n      for (const [methodKey, operation] of Object.entries(pathItem)) {\n        const uppercaseMethod = methodKey.toUpperCase()\n        if (!HTTP_METHODS.has(uppercaseMethod)) continue\n        if (!operation || typeof operation !== 'object') continue\n\n        const op = operation as Record<string, unknown>\n        const handle = `foreign:${source}:${uppercaseMethod}:${routePath}`\n        const operationId =\n          typeof op.operationId === 'string' ? op.operationId : handle\n\n        entries.push({\n          handle,\n          operationId,\n          method: uppercaseMethod,\n          path: routePath,\n          source,\n        })\n      }\n    }\n  }\n\n  return entries\n}\n\nexport async function buildApiRegistry(\n  options: BuildApiRegistryOptions = {},\n): Promise<ApiRegistry> {\n  const entries: ApiRegistryEntry[] = []\n\n  if (options.nativeRouter) {\n    entries.push(...walkNativeRouter(options.nativeRouter))\n  }\n\n  if (options.foreignSpecs) {\n    entries.push(...extractForeignEntries(options.foreignSpecs))\n  }\n\n  const errors: string[] = []\n\n  for (const entry of entries) {\n    if (entry.source !== 'native') continue\n    if (options.reservedCoreHandles?.has(entry.handle)) continue\n    const reason = collisionForBunderstackPath(entry.path)\n    if (reason) {\n      errors.push(\n        `Reserved route collision on ${entry.method} ${entry.path}: native handle \"${entry.handle}\" conflicts because ${reason}`,\n      )\n    }\n  }\n\n  // Check duplicate handles\n  const handleMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const existing = handleMap.get(entry.handle)\n    if (existing) {\n      errors.push(\n        `Duplicate handle \"${entry.handle}\": collision between ${existing.source} (${existing.method} ${existing.path}) and ${entry.source} (${entry.method} ${entry.path})`,\n      )\n    } else {\n      handleMap.set(entry.handle, entry)\n    }\n  }\n\n  // Check duplicate operation IDs\n  const opIdMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const existing = opIdMap.get(entry.operationId)\n    if (existing) {\n      errors.push(\n        `Duplicate operation ID \"${entry.operationId}\": collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n      )\n    } else {\n      opIdMap.set(entry.operationId, entry)\n    }\n  }\n\n  // Check method/path collisions (exact and parameter ambiguity)\n  const routePatternMap = new Map<string, ApiRegistryEntry>()\n  for (const entry of entries) {\n    const normalizedPath = normalizePathForCollision(entry.path)\n    const routeKey = `${entry.method} ${normalizedPath}`\n\n    const existing = routePatternMap.get(routeKey)\n    if (existing) {\n      if (existing.path === entry.path) {\n        errors.push(\n          `Exact method/path collision on ${entry.method} ${entry.path}: collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n        )\n      } else {\n        errors.push(\n          `Ambiguous parameter path collision on ${entry.method} (${existing.path} vs ${entry.path}): collision between ${existing.source} (${existing.handle}) and ${entry.source} (${entry.handle})`,\n        )\n      }\n    } else {\n      routePatternMap.set(routeKey, entry)\n    }\n  }\n\n  if (errors.length > 0) {\n    throw new Error(\n      `[bunderstack] Route registry validation failed (${errors.length} error(s)):\\n` +\n        errors.join('\\n'),\n    )\n  }\n\n  return { entries }\n}\n"]}

package/dist/api/router.d.ts

@@ -1,5 +1,6 @@
 import '@orpc/openapi/extensions/route';
 import type { AnyMiddleware } from '@orpc/server';
+import type { ReadinessReport } from '../readiness.js';
 export interface BuildApiRouterOptions {
     crud: Record<string, unknown>;
     storage: Record<string, unknown>;
@@ -7,6 +8,8 @@ export interface BuildApiRouterOptions {
     custom?: Record<string, unknown>;
     /** Applied to every procedure in the graph, outermost first. */
     middleware?: AnyMiddleware[];
+    /** Deployment readiness probe. Always answers 200; read `status` in the body. */
+    readiness: () => Promise<ReadinessReport>;
 }
 export declare function buildApiRouter(options: BuildApiRouterOptions): Record<string, unknown>;
 //# sourceMappingURL=router.d.ts.map

package/dist/api/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAOjD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,gEAAgE;IAChE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;CAC7B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,2BAiC5D"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAIjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAMnD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,gEAAgE;IAChE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,iFAAiF;IACjF,SAAS,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;CAC1C;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,2BAsC5D"}

package/dist/api/router.js

@@ -1,5 +1,6 @@
 import '@orpc/openapi/extensions/route';
 import * as v from 'valibot';
+import { readinessReportSchema } from '../readiness.js';
 import { createApiBuilder } from './builder.js';
 import { mergeApiRoutersStrict } from './registry.js';
 export function buildApiRouter(options) {
@@ -8,8 +9,12 @@ export function buildApiRouter(options) {
         .route({ method: 'GET', path: '/api/health', tags: ['system'] })
         .output(v.strictObject({ status: v.literal('ok') }))
         .handler(() => ({ status: 'ok' }));
+    const readiness = builder.public
+        .route({ method: 'GET', path: '/api/readiness', tags: ['system'] })
+        .output(readinessReportSchema)
+        .handler(() => options.readiness());
     const merged = [
-        { health },
+        { health, readiness },
         options.crud,
         options.storage,
         options.realtime,
@@ -19,7 +24,7 @@ export function buildApiRouter(options) {
     if (middleware.length === 0)
         return merged;
     // `.router()` applies the builder's middleware to every procedure inside, so
-    // one list covers CRUD, storage, realtime, health, and custom procedures
+    // one list covers CRUD, storage, realtime, health, readiness, and custom procedures
     // instead of only the bases an application happens to declare.
     const withMiddleware = middleware.reduce((acc, mw) => acc.use(mw), builder.public);
     return withMiddleware.router(merged);

package/dist/api/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,gCAAgC,CAAA;AAGvC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAWlD,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,OAAO,GAAG,gBAAgB,EAG7B,CAAA;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;SAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACnD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC,CAAC,CAAA;IAE7C,MAAM,MAAM,GAAG;QACb,EAAE,MAAM,EAAE;QACV,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,MAAM;KACf,CAAC,MAAM,CACN,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC7D,EAAE,CACH,CAAA;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAE1C,6EAA6E;IAC7E,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC,EACjC,OAAO,CAAC,MAAM,CACf,CAAA;IAED,OAAO,cAAc,CAAC,MAAM,CAAC,MAAe,CAA4B,CAAA;AAC1E,CAAC","sourcesContent":["import '@orpc/openapi/extensions/route'\nimport type { AnyMiddleware } from '@orpc/server'\n\nimport * as v from 'valibot'\n\nimport { createApiBuilder } from './builder'\nimport { mergeApiRoutersStrict } from './registry'\n\nexport interface BuildApiRouterOptions {\n  crud: Record<string, unknown>\n  storage: Record<string, unknown>\n  realtime?: Record<string, unknown>\n  custom?: Record<string, unknown>\n  /** Applied to every procedure in the graph, outermost first. */\n  middleware?: AnyMiddleware[]\n}\n\nexport function buildApiRouter(options: BuildApiRouterOptions) {\n  const builder = createApiBuilder<\n    Record<string, unknown>,\n    Record<string, unknown>\n  >()\n  const health = builder.public\n    .route({ method: 'GET', path: '/api/health', tags: ['system'] })\n    .output(v.strictObject({ status: v.literal('ok') }))\n    .handler(() => ({ status: 'ok' as const }))\n\n  const merged = [\n    { health },\n    options.crud,\n    options.storage,\n    options.realtime,\n    options.custom,\n  ].reduce<Record<string, unknown>>(\n    (router, addition) => mergeApiRoutersStrict(router, addition),\n    {},\n  )\n\n  const middleware = options.middleware ?? []\n  if (middleware.length === 0) return merged\n\n  // `.router()` applies the builder's middleware to every procedure inside, so\n  // one list covers CRUD, storage, realtime, health, and custom procedures\n  // instead of only the bases an application happens to declare.\n  const withMiddleware = middleware.reduce(\n    (acc, mw) => acc.use(mw as never),\n    builder.public,\n  )\n\n  return withMiddleware.router(merged as never) as Record<string, unknown>\n}\n"]}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,gCAAgC,CAAA;AAGvC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAalD,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,OAAO,GAAG,gBAAgB,EAG7B,CAAA;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;SAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACnD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC,CAAC,CAAA;IAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM;SAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SAClE,MAAM,CAAC,qBAAqB,CAAC;SAC7B,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG;QACb,EAAE,MAAM,EAAE,SAAS,EAAE;QACrB,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,MAAM;KACf,CAAC,MAAM,CACN,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC7D,EAAE,CACH,CAAA;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAE1C,6EAA6E;IAC7E,oFAAoF;IACpF,+DAA+D;IAC/D,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAW,CAAC,EACjC,OAAO,CAAC,MAAM,CACf,CAAA;IAED,OAAO,cAAc,CAAC,MAAM,CAAC,MAAe,CAA4B,CAAA;AAC1E,CAAC","sourcesContent":["import '@orpc/openapi/extensions/route'\nimport type { AnyMiddleware } from '@orpc/server'\n\nimport * as v from 'valibot'\n\nimport type { ReadinessReport } from '../readiness'\n\nimport { readinessReportSchema } from '../readiness'\nimport { createApiBuilder } from './builder'\nimport { mergeApiRoutersStrict } from './registry'\n\nexport interface BuildApiRouterOptions {\n  crud: Record<string, unknown>\n  storage: Record<string, unknown>\n  realtime?: Record<string, unknown>\n  custom?: Record<string, unknown>\n  /** Applied to every procedure in the graph, outermost first. */\n  middleware?: AnyMiddleware[]\n  /** Deployment readiness probe. Always answers 200; read `status` in the body. */\n  readiness: () => Promise<ReadinessReport>\n}\n\nexport function buildApiRouter(options: BuildApiRouterOptions) {\n  const builder = createApiBuilder<\n    Record<string, unknown>,\n    Record<string, unknown>\n  >()\n  const health = builder.public\n    .route({ method: 'GET', path: '/api/health', tags: ['system'] })\n    .output(v.strictObject({ status: v.literal('ok') }))\n    .handler(() => ({ status: 'ok' as const }))\n\n  const readiness = builder.public\n    .route({ method: 'GET', path: '/api/readiness', tags: ['system'] })\n    .output(readinessReportSchema)\n    .handler(() => options.readiness())\n\n  const merged = [\n    { health, readiness },\n    options.crud,\n    options.storage,\n    options.realtime,\n    options.custom,\n  ].reduce<Record<string, unknown>>(\n    (router, addition) => mergeApiRoutersStrict(router, addition),\n    {},\n  )\n\n  const middleware = options.middleware ?? []\n  if (middleware.length === 0) return merged\n\n  // `.router()` applies the builder's middleware to every procedure inside, so\n  // one list covers CRUD, storage, realtime, health, readiness, and custom procedures\n  // instead of only the bases an application happens to declare.\n  const withMiddleware = middleware.reduce(\n    (acc, mw) => acc.use(mw as never),\n    builder.public,\n  )\n\n  return withMiddleware.router(merged as never) as Record<string, unknown>\n}\n"]}

package/dist/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAoB,MAAM,WAAW,CAAA;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,mBAAmB,CAAA;AAEhE,OAAO,EAAE,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAY9E,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,kBAAkB,CAAC,IAAI,IAAI;IACrC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;CACrD,CAAA;AAED,MAAM,MAAM,2BAA2B,CACrC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAAG,SAAS,EACxE,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EAC3D,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACnD,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EAClD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,SAAS,GAAG,SAAS,IACnB,IAAI,CACN,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC,EACrE,UAAU,CACX,GAAG;IACF,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,IAAI,CAAC,EACD,SAAS,GACT,CAAC,CACC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,KACzD,SAAS,CAAC,CAAA;CACpB,CAAA;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAItC;AAED,wBAAgB,WAAW,CACzB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAChE,SAAS,EACX,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACjE,KAAK,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACzD,KAAK,CAAC,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EACxD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,KAAK,CAAC,SAAS,SAAS,iBAAiB,CACvC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,CACjB,CAAC,UAAU,CAAC,GAAG,SAAS,EAEzB,MAAM,EAAE,2BAA2B,CACjC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,CACV,GACA,kBAAkB,CACnB,cAAc,CACZ,OAAO,EACP,OAAO,EACP,aAAa,CAAC,QAAQ,CAAC,EACvB,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,CACV,CACF,CAmEA"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEhD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAoB,MAAM,WAAW,CAAA;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,mBAAmB,CAAA;AAIhE,OAAO,EAAE,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAY9E,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,kBAAkB,CAAC,IAAI,IAAI;IACrC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;CACrD,CAAA;AAED,MAAM,MAAM,2BAA2B,CACrC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAAG,SAAS,EACxE,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EAC3D,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACnD,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EAClD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,SAAS,GAAG,SAAS,IACnB,IAAI,CACN,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC,EACrE,UAAU,CACX,GAAG;IACF,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,IAAI,CAAC,EACD,SAAS,GACT,CAAC,CACC,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,KACzD,SAAS,CAAC,CAAA;CACpB,CAAA;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAItC;AAED,wBAAgB,WAAW,CACzB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAChE,SAAS,EACX,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACjE,KAAK,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACzD,KAAK,CAAC,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EACxD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,KAAK,CAAC,SAAS,SAAS,iBAAiB,CACvC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,CACjB,CAAC,UAAU,CAAC,GAAG,SAAS,EAEzB,MAAM,EAAE,2BAA2B,CACjC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,CACV,GACA,kBAAkB,CACnB,cAAc,CACZ,OAAO,EACP,OAAO,EACP,aAAa,CAAC,QAAQ,CAAC,EACvB,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,CACV,CACF,CA+EA"}

package/dist/backend.js

@@ -1,3 +1,5 @@
+import { createApiBuilder } from './api/builder.js';
+import { describeApiOperations } from './api/catalog.js';
 import { BACKEND_INTERNALS } from './backend-internals.js';
 import { detectDialect } from './dialect.js';
 import { emailProviderTag } from './email.js';
@@ -18,6 +20,11 @@ export function bunderstack(config) {
         : undefined;
     if (jobsDefs)
         validateJobsDefs(jobsDefs);
+    // Resolved here rather than at start: the manifest has to describe the same
+    // router the runtime will serve, and `bunderstack blueprint` never starts.
+    const customApiRouter = typeof config.api === 'function'
+        ? config.api(createApiBuilder())
+        : config.api;
     const manifest = buildManifest({
         schema: config.schema,
         dialect,
@@ -26,6 +33,7 @@ export function bunderstack(config) {
         envConfig: config.env,
         emailProvider: emailProviderTag(config.email),
         realtime: Boolean(config.realtime),
+        api: describeApiOperations(customApiRouter),
         jobs: config.storage
             ? {
                 ...jobsDefs,
@@ -37,7 +45,7 @@ export function bunderstack(config) {
             }
             : jobsDefs,
     });
-    const start = (source, overrides = {}) => materializeBunderstack({ ...config, jobs: jobsDefs }, source, overrides);
+    const start = (source, overrides = {}) => materializeBunderstack({ ...config, jobs: jobsDefs, api: customApiRouter }, source, overrides);
     let backend;
     const test = (async (options) => {
         const testing = await import('./testing.js');

package/dist/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,iBAAiB,EAAyB,MAAM,qBAAqB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAiClD,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,IAAI,KAAK,CAC1E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAgBzB,MAQC;IAYD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI;QAC1B,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;YACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAA+B,CAAC;YAC/D,CAAC,CAAC,MAAM,CAAC,IAAI;QACf,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,QAAQ;QAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAExC,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,cAAc;QACjE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7C,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,OAAO;YAClB,CAAC,CAAC;gBACE,GAAG,QAAQ;gBACX,CAAC,sBAAsB,CAAC,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,sBAAsB;oBAChC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;iBAClB;aACF;YACH,CAAC,CAAC,QAAQ;KACb,CAAC,CAAA;IAYF,MAAM,KAAK,GAAG,CACZ,MAA0C,EAC1C,YAA8B,EAAE,EAClB,EAAE,CAChB,sBAAsB,CACpB,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAW,EACtC,MAAM,EACN,SAAS,CACM,CAAA;IAEnB,IAAI,OAAgC,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC,CAAoB,CAAA;IACrB,IAAI,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE,CAC3B,CAAC,KAAK,EAAE,YAAyB,EAAE,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9D,CAAC,CAAU,CAAA;IACb,OAAO,GAAG;QACR,QAAQ;QACR,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,GAAG,IAAK,OAAO,CAAC,GAA0C,CAAC;QACnE,IAAI;QACJ,CAAC,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE;KAClE,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC","sourcesContent":["import type { AnyRouter as AnyORPCRouter } from '@orpc/server'\n\nimport type { TableAccessInput } from './access'\nimport type { BunderstackConfig } from './config'\nimport type { EnvConfigInput, ValidatedEnv } from './env'\nimport type { BunderstackJobsBuilder, JobsDefs } from './jobs'\nimport type { BunderstackManifest } from './manifest'\nimport type { BunderstackApp, BucketNamesOf, RuntimeOverrides } from './runtime'\nimport type { StorageConfigInput } from './storage/buckets'\nimport type { TestMethod, TestOptions } from './testing/fixture'\n\nimport { BACKEND_INTERNALS, type BackendInternals } from './backend-internals'\nimport { detectDialect } from './dialect'\nimport { emailProviderTag } from './email'\nimport { createJobsBuilder, validateJobsDefs } from './jobs'\nimport { buildManifest } from './manifest'\nimport { materializeBunderstack } from './runtime'\nimport {\n  STORAGE_SWEEP_JOB_NAME,\n  STORAGE_SWEEP_SCHEDULE,\n} from './storage/background'\nimport { resolveBuckets } from './storage/buckets'\n\nexport type StartOptions = {\n  env?: Record<string, string | undefined>\n}\n\nexport type BunderstackBackend<TApp> = {\n  readonly manifest: BunderstackManifest\n  start(options?: StartOptions): Promise<TApp>\n  test: TestMethod<TApp>\n  readonly [BACKEND_INTERNALS]: BackendInternals<TApp>\n}\n\nexport type BunderstackDefinitionConfig<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined = undefined,\n  TStorage extends StorageConfigInput | undefined = undefined,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  TRealtime = undefined,\n> = Omit<\n  BunderstackConfig<TSchema, TAccess, TStorage, TEnv, TCustomApiRouter>,\n  'realtime'\n> & {\n  realtime?: TRealtime\n  jobs?:\n    | TJobsDefs\n    | ((\n        builder: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>>,\n      ) => TJobsDefs)\n}\n\nexport function isBunderstackBackend(\n  value: unknown,\n): value is BunderstackBackend<unknown> {\n  return (\n    typeof value === 'object' && value !== null && BACKEND_INTERNALS in value\n  )\n}\n\nexport function bunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  const TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n>(\n  config: BunderstackDefinitionConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >,\n): BunderstackBackend<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >\n> {\n  const dialect = detectDialect(config.schema)\n  const jobsDefs = config.jobs\n    ? typeof config.jobs === 'function'\n      ? config.jobs(createJobsBuilder<TSchema, ValidatedEnv<TEnv>>())\n      : config.jobs\n    : undefined\n  if (jobsDefs) validateJobsDefs(jobsDefs)\n\n  const manifest = buildManifest({\n    schema: config.schema,\n    dialect,\n    migrationsDirectory: config.database.migrations ?? './migrations',\n    storage: resolveBuckets(config.storage, {}),\n    envConfig: config.env,\n    emailProvider: emailProviderTag(config.email),\n    realtime: Boolean(config.realtime),\n    jobs: config.storage\n      ? {\n          ...jobsDefs,\n          [STORAGE_SWEEP_JOB_NAME]: {\n            kind: 'cron',\n            schedule: STORAGE_SWEEP_SCHEDULE,\n            handler: () => {},\n          },\n        }\n      : jobsDefs,\n  })\n\n  type App = BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >\n\n  const start = (\n    source: Record<string, string | undefined>,\n    overrides: RuntimeOverrides = {},\n  ): Promise<App> =>\n    materializeBunderstack(\n      { ...config, jobs: jobsDefs } as never,\n      source,\n      overrides,\n    ) as Promise<App>\n\n  let backend: BunderstackBackend<App>\n  const test = (async (options) => {\n    const testing = await import('./testing')\n    return testing.createTestApp(backend, options)\n  }) as TestMethod<App>\n  test.configure = (options) =>\n    (async (overrides: TestOptions = {}) => {\n      const testing = await import('./testing')\n      return testing.configureTestApp(backend, options)(overrides)\n    }) as never\n  backend = {\n    manifest,\n    start: ({ env } = {}) =>\n      start(env ?? (process.env as Record<string, string | undefined>)),\n    test,\n    [BACKEND_INTERNALS]: { declaration: { config, jobsDefs }, start },\n  }\n  return backend\n}\n"]}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAyB,MAAM,qBAAqB,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAiClD,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,IAAI,KAAK,CAC1E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAgBzB,MAQC;IAYD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI;QAC1B,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;YACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAA+B,CAAC;YAC/D,CAAC,CAAC,MAAM,CAAC,IAAI;QACf,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,QAAQ;QAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAExC,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,eAAe,GACnB,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU;QAC9B,CAAC,CACG,MAAM,CAAC,GAGR,CAAC,gBAAgB,EAA+B,CAAC;QACpD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAEhB,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,cAAc;QACjE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7C,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,GAAG,EAAE,qBAAqB,CAAC,eAAe,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC,OAAO;YAClB,CAAC,CAAC;gBACE,GAAG,QAAQ;gBACX,CAAC,sBAAsB,CAAC,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,sBAAsB;oBAChC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;iBAClB;aACF;YACH,CAAC,CAAC,QAAQ;KACb,CAAC,CAAA;IAYF,MAAM,KAAK,GAAG,CACZ,MAA0C,EAC1C,YAA8B,EAAE,EAClB,EAAE,CAChB,sBAAsB,CACpB,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAW,EAC5D,MAAM,EACN,SAAS,CACM,CAAA;IAEnB,IAAI,OAAgC,CAAA;IACpC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC,CAAoB,CAAA;IACrB,IAAI,CAAC,SAAS,GAAG,CAAC,OAAO,EAAE,EAAE,CAC3B,CAAC,KAAK,EAAE,YAAyB,EAAE,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9D,CAAC,CAAU,CAAA;IACb,OAAO,GAAG;QACR,QAAQ;QACR,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,GAAG,IAAK,OAAO,CAAC,GAA0C,CAAC;QACnE,IAAI;QACJ,CAAC,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE;KAClE,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC","sourcesContent":["import type { AnyRouter as AnyORPCRouter } from '@orpc/server'\n\nimport type { TableAccessInput } from './access'\nimport type { BunderstackApiBuilder } from './api/builder'\nimport type { BunderstackConfig } from './config'\nimport type { EnvConfigInput, ValidatedEnv } from './env'\nimport type { BunderstackJobsBuilder, JobsDefs } from './jobs'\nimport type { BunderstackManifest } from './manifest'\nimport type { BunderstackApp, BucketNamesOf, RuntimeOverrides } from './runtime'\nimport type { StorageConfigInput } from './storage/buckets'\nimport type { TestMethod, TestOptions } from './testing/fixture'\n\nimport { createApiBuilder } from './api/builder'\nimport { describeApiOperations } from './api/catalog'\nimport { BACKEND_INTERNALS, type BackendInternals } from './backend-internals'\nimport { detectDialect } from './dialect'\nimport { emailProviderTag } from './email'\nimport { createJobsBuilder, validateJobsDefs } from './jobs'\nimport { buildManifest } from './manifest'\nimport { materializeBunderstack } from './runtime'\nimport {\n  STORAGE_SWEEP_JOB_NAME,\n  STORAGE_SWEEP_SCHEDULE,\n} from './storage/background'\nimport { resolveBuckets } from './storage/buckets'\n\nexport type StartOptions = {\n  env?: Record<string, string | undefined>\n}\n\nexport type BunderstackBackend<TApp> = {\n  readonly manifest: BunderstackManifest\n  start(options?: StartOptions): Promise<TApp>\n  test: TestMethod<TApp>\n  readonly [BACKEND_INTERNALS]: BackendInternals<TApp>\n}\n\nexport type BunderstackDefinitionConfig<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined = undefined,\n  TStorage extends StorageConfigInput | undefined = undefined,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  TRealtime = undefined,\n> = Omit<\n  BunderstackConfig<TSchema, TAccess, TStorage, TEnv, TCustomApiRouter>,\n  'realtime'\n> & {\n  realtime?: TRealtime\n  jobs?:\n    | TJobsDefs\n    | ((\n        builder: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>>,\n      ) => TJobsDefs)\n}\n\nexport function isBunderstackBackend(\n  value: unknown,\n): value is BunderstackBackend<unknown> {\n  return (\n    typeof value === 'object' && value !== null && BACKEND_INTERNALS in value\n  )\n}\n\nexport function bunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  const TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n>(\n  config: BunderstackDefinitionConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >,\n): BunderstackBackend<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >\n> {\n  const dialect = detectDialect(config.schema)\n  const jobsDefs = config.jobs\n    ? typeof config.jobs === 'function'\n      ? config.jobs(createJobsBuilder<TSchema, ValidatedEnv<TEnv>>())\n      : config.jobs\n    : undefined\n  if (jobsDefs) validateJobsDefs(jobsDefs)\n\n  // Resolved here rather than at start: the manifest has to describe the same\n  // router the runtime will serve, and `bunderstack blueprint` never starts.\n  const customApiRouter =\n    typeof config.api === 'function'\n      ? (\n          config.api as (\n            builder: BunderstackApiBuilder<TSchema, ValidatedEnv<TEnv>>,\n          ) => TCustomApiRouter\n        )(createApiBuilder<TSchema, ValidatedEnv<TEnv>>())\n      : config.api\n\n  const manifest = buildManifest({\n    schema: config.schema,\n    dialect,\n    migrationsDirectory: config.database.migrations ?? './migrations',\n    storage: resolveBuckets(config.storage, {}),\n    envConfig: config.env,\n    emailProvider: emailProviderTag(config.email),\n    realtime: Boolean(config.realtime),\n    api: describeApiOperations(customApiRouter),\n    jobs: config.storage\n      ? {\n          ...jobsDefs,\n          [STORAGE_SWEEP_JOB_NAME]: {\n            kind: 'cron',\n            schedule: STORAGE_SWEEP_SCHEDULE,\n            handler: () => {},\n          },\n        }\n      : jobsDefs,\n  })\n\n  type App = BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime\n  >\n\n  const start = (\n    source: Record<string, string | undefined>,\n    overrides: RuntimeOverrides = {},\n  ): Promise<App> =>\n    materializeBunderstack(\n      { ...config, jobs: jobsDefs, api: customApiRouter } as never,\n      source,\n      overrides,\n    ) as Promise<App>\n\n  let backend: BunderstackBackend<App>\n  const test = (async (options) => {\n    const testing = await import('./testing')\n    return testing.createTestApp(backend, options)\n  }) as TestMethod<App>\n  test.configure = (options) =>\n    (async (overrides: TestOptions = {}) => {\n      const testing = await import('./testing')\n      return testing.configureTestApp(backend, options)(overrides)\n    }) as never\n  backend = {\n    manifest,\n    start: ({ env } = {}) =>\n      start(env ?? (process.env as Record<string, string | undefined>)),\n    test,\n    [BACKEND_INTERNALS]: { declaration: { config, jobsDefs }, start },\n  }\n  return backend\n}\n"]}

package/dist/blueprint.d.ts

@@ -1,6 +1,17 @@
 import type { BunderstackManifest } from './manifest.js';
 export type MigrationMode = 'migrations' | 'push';
 export type ApplicationFramework = 'tanstack-start' | 'solid' | 'bun-ssr' | 'custom';
+/**
+ * Blueprint form of an environment key. `sensitive` and `description` are
+ * optional because blueprints committed before 0.23.0 do not carry them.
+ */
+export type BlueprintEnvVar = {
+    key: string;
+    required: boolean;
+    scope: 'server' | 'client';
+    sensitive?: boolean;
+    description?: string;
+};
 export type BunderstackBlueprint = {
     version: 1;
     generator: {
@@ -28,7 +39,11 @@ export type BunderstackBlueprint = {
             required: true;
         };
     };
-    environment: BunderstackManifest['environment'];
+    environment: BlueprintEnvVar[];
+    /** Application-declared procedures. Absent in blueprints written before 0.23.0. */
+    api?: {
+        operations: BunderstackManifest['api']['operations'];
+    };
     background: BunderstackManifest['background'] & {
         worker: {
             required: boolean;
@@ -36,6 +51,11 @@ export type BunderstackBlueprint = {
     };
 };
 export declare function parseBlueprint(value: unknown): BunderstackBlueprint;
+/**
+ * Whether a host must treat this key as a secret. A blueprint generated before
+ * 0.23.0 has no flag, and server keys are secret by default.
+ */
+export declare function isSensitiveEnvVar(entry: BlueprintEnvVar): boolean;
 export declare function blueprintFromManifest(args: {
     manifest: BunderstackManifest;
     generatorVersion: string;

package/dist/blueprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blueprint.d.ts","sourceRoot":"","sources":["../src/blueprint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAKrD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,MAAM,CAAA;AACjD,MAAM,MAAM,oBAAoB,GAC5B,gBAAgB,GAChB,OAAO,GACP,SAAS,GACT,QAAQ,CAAA;AAEZ,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,CAAC,CAAA;IACV,SAAS,EAAE;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACnD,WAAW,EAAE;QACX,SAAS,EAAE,oBAAoB,CAAA;QAC/B,OAAO,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;SAAE,CAAA;KAC/D,CAAA;IACD,WAAW,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,CAAC,CAAA;KAAE,CAAA;IAClD,SAAS,EAAE;QACT,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,GAAG;YAAE,aAAa,EAAE,aAAa,CAAA;SAAE,CAAA;QAC5E,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACvC,QAAQ,CAAC,EAAE;YAAE,QAAQ,EAAE,IAAI,CAAA;SAAE,CAAA;KAC9B,CAAA;IACD,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAA;IAC/C,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,GAAG;QAC9C,MAAM,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAA;KAC9B,CAAA;CACF,CAAA;AA2GD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAuDnE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,aAAa,CAAA;IAC5B,SAAS,CAAC,EAAE,oBAAoB,CAAA;CACjC,GAAG,oBAAoB,CA0CvB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAmBtE"}
+{"version":3,"file":"blueprint.d.ts","sourceRoot":"","sources":["../src/blueprint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAKrD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,MAAM,CAAA;AACjD,MAAM,MAAM,oBAAoB,GAC5B,gBAAgB,GAChB,OAAO,GACP,SAAS,GACT,QAAQ,CAAA;AAEZ;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,CAAC,CAAA;IACV,SAAS,EAAE;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACnD,WAAW,EAAE;QACX,SAAS,EAAE,oBAAoB,CAAA;QAC/B,OAAO,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;SAAE,CAAA;KAC/D,CAAA;IACD,WAAW,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,CAAC,CAAA;KAAE,CAAA;IAClD,SAAS,EAAE;QACT,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,GAAG;YAAE,aAAa,EAAE,aAAa,CAAA;SAAE,CAAA;QAC5E,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAA;QACvC,QAAQ,CAAC,EAAE;YAAE,QAAQ,EAAE,IAAI,CAAA;SAAE,CAAA;KAC9B,CAAA;IACD,WAAW,EAAE,eAAe,EAAE,CAAA;IAC9B,mFAAmF;IACnF,GAAG,CAAC,EAAE;QAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAA;KAAE,CAAA;IAC9D,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,GAAG;QAC9C,MAAM,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAA;KAC9B,CAAA;CACF,CAAA;AAkID,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CA4DnE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAEjE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,aAAa,CAAA;IAC5B,SAAS,CAAC,EAAE,oBAAoB,CAAA;CACjC,GAAG,oBAAoB,CA2CvB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAmBtE"}

package/dist/blueprint.js

@@ -15,58 +15,76 @@ const cronSchedule = v.pipe(nonEmpty, v.check((value) => {
         return false;
     }
 }, 'invalid cron schedule'));
-const blueprintSchema = v.strictObject({
+// Hosts parse blueprints committed by applications that upgrade bunderstack on
+// their own schedule, so a section written by a newer generator has to survive
+// an older parser instead of failing the whole file.
+function open(entries) {
+    return v.objectWithRest(entries, v.unknown());
+}
+const blueprintSchema = open({
     version: v.literal(1),
-    generator: v.strictObject({
+    generator: open({
         name: v.literal('bunderstack'),
         version: nonEmpty,
     }),
-    application: v.strictObject({
+    application: open({
         framework: v.picklist(['tanstack-start', 'solid', 'bun-ssr', 'custom']),
-        scripts: v.strictObject({
+        scripts: open({
             build: v.literal('build'),
             start: v.literal('start'),
             worker: v.optional(v.literal('worker')),
         }),
     }),
-    bunderstack: v.strictObject({
+    bunderstack: open({
         entry: relativePath,
         manifestVersion: v.literal(3),
     }),
-    resources: v.strictObject({
-        database: v.strictObject({
+    resources: open({
+        database: open({
             dialect: v.picklist(['sqlite', 'pg']),
             migrationsDirectory: relativePath,
             migrationMode: v.picklist(['migrations', 'push']),
-            tables: v.array(v.strictObject({
+            tables: v.array(open({
                 exportName: nonEmpty,
                 physicalName: nonEmpty,
                 system: v.boolean(),
             })),
         }),
-        storage: v.strictObject({
+        storage: open({
             defaultBucket: nonEmpty,
-            buckets: v.array(v.strictObject({
+            buckets: v.array(open({
                 name: nonEmpty,
                 visibility: v.picklist(['public', 'private']),
             })),
         }),
-        realtime: v.optional(v.strictObject({ required: v.literal(true) })),
+        realtime: v.optional(open({ required: v.literal(true) })),
     }),
-    environment: v.array(v.strictObject({
+    environment: v.array(open({
         key: nonEmpty,
         required: v.boolean(),
         scope: v.picklist(['server', 'client']),
+        sensitive: v.optional(v.boolean()),
+        description: v.optional(v.pipe(nonEmpty, v.maxLength(200))),
+    })),
+    api: v.optional(open({
+        operations: v.array(open({
+            handle: nonEmpty,
+            operationId: nonEmpty,
+            effect: v.picklist(['read', 'mutation', 'unknown']),
+            method: v.optional(nonEmpty),
+            path: v.optional(nonEmpty),
+            summary: v.optional(v.pipe(nonEmpty, v.maxLength(200))),
+        })),
     })),
-    background: v.strictObject({
-        worker: v.strictObject({ required: v.boolean() }),
-        jobs: v.array(v.strictObject({ name: nonEmpty })),
-        cron: v.array(v.strictObject({
+    background: open({
+        worker: open({ required: v.boolean() }),
+        jobs: v.array(open({ name: nonEmpty })),
+        cron: v.array(open({
             name: nonEmpty,
             schedule: cronSchedule,
             timezone: v.literal('UTC'),
         })),
-        maintenance: v.array(v.strictObject({
+        maintenance: v.array(open({
             name: v.literal('storage-sweep'),
             schedule: cronSchedule,
             timezone: v.literal('UTC'),
@@ -90,6 +108,8 @@ export function parseBlueprint(value) {
     rejectDuplicates('database export table', blueprint.resources.database.tables.map((entry) => entry.exportName));
     rejectDuplicates('storage bucket', blueprint.resources.storage.buckets.map((entry) => entry.name));
     rejectDuplicates('environment key', blueprint.environment.map((entry) => entry.key));
+    if (blueprint.api)
+        rejectDuplicates('api operation', blueprint.api.operations.map((entry) => entry.handle));
     rejectDuplicates('background job', blueprint.background.jobs.map((entry) => entry.name));
     rejectDuplicates('background cron', blueprint.background.cron.map((entry) => entry.name));
     rejectDuplicates('background maintenance', blueprint.background.maintenance.map((entry) => entry.name));
@@ -105,6 +125,13 @@ export function parseBlueprint(value) {
     }
     return blueprint;
 }
+/**
+ * Whether a host must treat this key as a secret. A blueprint generated before
+ * 0.23.0 has no flag, and server keys are secret by default.
+ */
+export function isSensitiveEnvVar(entry) {
+    return entry.sensitive ?? entry.scope === 'server';
+}
 export function blueprintFromManifest(args) {
     const workerRequired = args.manifest.background.jobs.length > 0;
     return parseBlueprint({
@@ -134,6 +161,7 @@ export function blueprintFromManifest(args) {
                 : {}),
         },
         environment: sortBy(args.manifest.environment, (entry) => entry.key),
+        api: { operations: args.manifest.api.operations },
         background: {
             worker: { required: workerRequired },
             jobs: sortBy(args.manifest.background.jobs, (entry) => entry.name),