bunderstack 0.22.1 → 0.23.1

package/dist/blueprint.js.map

@@ -1 +1 @@
-{"version":3,"file":"blueprint.js","sourceRoot":"","sources":["../src/blueprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAIvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AA4B1D,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACnD,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CACzB,QAAQ,EACR,CAAC,CAAC,KAAK,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,EAChE,iDAAiD,CAClD,CACF,CAAA;AACD,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CACzB,QAAQ,EACR,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,IAAI,CAAC;QACH,SAAS,CAAC,KAAK,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,EAAE,uBAAuB,CAAC,CAC5B,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,OAAO,EAAE,QAAQ;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACxC,CAAC;KACH,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,KAAK,EAAE,YAAY;QACnB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KAC9B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrC,mBAAmB,EAAE,YAAY;YACjC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,YAAY,CAAC;gBACb,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;aACpB,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;YACtB,aAAa,EAAE,QAAQ;YACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,YAAY,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;aAC9C,CAAC,CACH;SACF,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACpE,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,CAAC,CAAC,YAAY,CAAC;QACb,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;KACxC,CAAC,CACH;IACD,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,KAAK,CACX,CAAC,CAAC,YAAY,CAAC;YACb,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;SAC3B,CAAC,CACH;QACD,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,CAAC,CAAC,YAAY,CAAC;YACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;YAChC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;SAC3B,CAAC,CACH;KACF,CAAC;CACH,CAAC,CAAA;AAEF,SAAS,MAAM,CAAI,OAAqB,EAAE,GAAyB;IACjE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,MAAyB;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,KAAK,KAAK,GAAG,CAAC,CAAA;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CACtC,eAAe,EACf,KAAK,EACL,WAAW,CACY,CAAA;IACzB,gBAAgB,CACd,yBAAyB,EACzB,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CACvE,CAAA;IACD,gBAAgB,CACd,uBAAuB,EACvB,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CACrE,CAAA;IACD,gBAAgB,CACd,gBAAgB,EAChB,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC/D,CAAA;IACD,gBAAgB,CACd,iBAAiB,EACjB,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAChD,CAAA;IACD,gBAAgB,CACd,gBAAgB,EAChB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACrD,CAAA;IACD,gBAAgB,CACd,iBAAiB,EACjB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACrD,CAAA;IACD,gBAAgB,CACd,wBAAwB,EACxB,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5D,CAAA;IACD,IACE,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CACtE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAA;IACH,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3D,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/D,OAAO,cAAc,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;QAClE,WAAW,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,gBAAgB;YAC7C,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,OAAO;gBACd,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;QACtD,SAAS,EAAE;YACT,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,MAAM,CACZ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAC9B;aACF;YACD,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;gBAClC,CAAC,CAAC,EAAE,CAAC;SACR;QACD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;QACpE,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAClE,WAAW,EAAE,MAAM,CACjB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CACtB;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG;QACd,qBAAqB,EAAE,KAAK;QAC5B,cAAc,EAAE,OAAO;QACvB,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,CAAC;KACJ,CAAA;IACV,MAAM,MAAM,GAAG,SAAS,CACtB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EACjD,OAAO,CACR,CAAA;IACD,OAAO,MAAM,CAAC,OAAO,CACnB,yBAAyB,EACzB,CAAC,MAAM,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAClE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC/C,CAAC,CACF,CAAA;AACH,CAAC","sourcesContent":["import * as v from 'valibot'\nimport { parse, stringify } from 'yaml'\n\nimport type { BunderstackManifest } from './manifest'\n\nimport { parseCron } from './jobs/cron'\nimport { validateStandardSchema } from './standard-schema'\n\nexport type MigrationMode = 'migrations' | 'push'\nexport type ApplicationFramework =\n  | 'tanstack-start'\n  | 'solid'\n  | 'bun-ssr'\n  | 'custom'\n\nexport type BunderstackBlueprint = {\n  version: 1\n  generator: { name: 'bunderstack'; version: string }\n  application: {\n    framework: ApplicationFramework\n    scripts: { build: 'build'; start: 'start'; worker?: 'worker' }\n  }\n  bunderstack: { entry: string; manifestVersion: 3 }\n  resources: {\n    database: BunderstackManifest['database'] & { migrationMode: MigrationMode }\n    storage: BunderstackManifest['storage']\n    realtime?: { required: true }\n  }\n  environment: BunderstackManifest['environment']\n  background: BunderstackManifest['background'] & {\n    worker: { required: boolean }\n  }\n}\n\nconst nonEmpty = v.pipe(v.string(), v.minLength(1))\nconst relativePath = v.pipe(\n  nonEmpty,\n  v.check(\n    (value) =>\n      !value.startsWith('/') &&\n      !value.includes('\\\\') &&\n      value.split('/').every((part) => part !== '' && part !== '..'),\n    'entry must be a relative path without traversal',\n  ),\n)\nconst cronSchedule = v.pipe(\n  nonEmpty,\n  v.check((value) => {\n    try {\n      parseCron(value)\n      return true\n    } catch {\n      return false\n    }\n  }, 'invalid cron schedule'),\n)\n\nconst blueprintSchema = v.strictObject({\n  version: v.literal(1),\n  generator: v.strictObject({\n    name: v.literal('bunderstack'),\n    version: nonEmpty,\n  }),\n  application: v.strictObject({\n    framework: v.picklist(['tanstack-start', 'solid', 'bun-ssr', 'custom']),\n    scripts: v.strictObject({\n      build: v.literal('build'),\n      start: v.literal('start'),\n      worker: v.optional(v.literal('worker')),\n    }),\n  }),\n  bunderstack: v.strictObject({\n    entry: relativePath,\n    manifestVersion: v.literal(3),\n  }),\n  resources: v.strictObject({\n    database: v.strictObject({\n      dialect: v.picklist(['sqlite', 'pg']),\n      migrationsDirectory: relativePath,\n      migrationMode: v.picklist(['migrations', 'push']),\n      tables: v.array(\n        v.strictObject({\n          exportName: nonEmpty,\n          physicalName: nonEmpty,\n          system: v.boolean(),\n        }),\n      ),\n    }),\n    storage: v.strictObject({\n      defaultBucket: nonEmpty,\n      buckets: v.array(\n        v.strictObject({\n          name: nonEmpty,\n          visibility: v.picklist(['public', 'private']),\n        }),\n      ),\n    }),\n    realtime: v.optional(v.strictObject({ required: v.literal(true) })),\n  }),\n  environment: v.array(\n    v.strictObject({\n      key: nonEmpty,\n      required: v.boolean(),\n      scope: v.picklist(['server', 'client']),\n    }),\n  ),\n  background: v.strictObject({\n    worker: v.strictObject({ required: v.boolean() }),\n    jobs: v.array(v.strictObject({ name: nonEmpty })),\n    cron: v.array(\n      v.strictObject({\n        name: nonEmpty,\n        schedule: cronSchedule,\n        timezone: v.literal('UTC'),\n      }),\n    ),\n    maintenance: v.array(\n      v.strictObject({\n        name: v.literal('storage-sweep'),\n        schedule: cronSchedule,\n        timezone: v.literal('UTC'),\n      }),\n    ),\n  }),\n})\n\nfunction sortBy<T>(entries: readonly T[], key: (entry: T) => string): T[] {\n  return [...entries].sort((left, right) => key(left).localeCompare(key(right)))\n}\n\nfunction rejectDuplicates(collection: string, values: readonly string[]): void {\n  const seen = new Set<string>()\n  for (const value of values) {\n    if (seen.has(value))\n      throw new Error(`[bunderstack] duplicate ${collection} \"${value}\"`)\n    seen.add(value)\n  }\n}\n\nexport function parseBlueprint(value: unknown): BunderstackBlueprint {\n  const blueprint = validateStandardSchema(\n    blueprintSchema,\n    value,\n    'blueprint',\n  ) as BunderstackBlueprint\n  rejectDuplicates(\n    'database physical table',\n    blueprint.resources.database.tables.map((entry) => entry.physicalName),\n  )\n  rejectDuplicates(\n    'database export table',\n    blueprint.resources.database.tables.map((entry) => entry.exportName),\n  )\n  rejectDuplicates(\n    'storage bucket',\n    blueprint.resources.storage.buckets.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'environment key',\n    blueprint.environment.map((entry) => entry.key),\n  )\n  rejectDuplicates(\n    'background job',\n    blueprint.background.jobs.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'background cron',\n    blueprint.background.cron.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'background maintenance',\n    blueprint.background.maintenance.map((entry) => entry.name),\n  )\n  if (\n    !blueprint.resources.storage.buckets.some(\n      (bucket) => bucket.name === blueprint.resources.storage.defaultBucket,\n    )\n  ) {\n    throw new Error(\n      '[bunderstack] storage defaultBucket must be declared in storage buckets',\n    )\n  }\n  const workerRequired = blueprint.background.jobs.length > 0\n  if (blueprint.background.worker.required !== workerRequired) {\n    throw new Error(\n      '[bunderstack] background worker.required must match declared queue jobs',\n    )\n  }\n  if (Boolean(blueprint.application.scripts.worker) !== workerRequired) {\n    throw new Error(\n      '[bunderstack] application worker script must match declared queue jobs',\n    )\n  }\n  return blueprint\n}\n\nexport function blueprintFromManifest(args: {\n  manifest: BunderstackManifest\n  generatorVersion: string\n  entry: string\n  migrationMode: MigrationMode\n  framework?: ApplicationFramework\n}): BunderstackBlueprint {\n  const workerRequired = args.manifest.background.jobs.length > 0\n  return parseBlueprint({\n    version: 1,\n    generator: { name: 'bunderstack', version: args.generatorVersion },\n    application: {\n      framework: args.framework ?? 'tanstack-start',\n      scripts: {\n        build: 'build',\n        start: 'start',\n        ...(workerRequired ? { worker: 'worker' } : {}),\n      },\n    },\n    bunderstack: { entry: args.entry, manifestVersion: 3 },\n    resources: {\n      database: {\n        ...args.manifest.database,\n        migrationMode: args.migrationMode,\n        tables: sortBy(\n          args.manifest.database.tables,\n          (entry) => entry.physicalName,\n        ),\n      },\n      storage: {\n        ...args.manifest.storage,\n        buckets: sortBy(args.manifest.storage.buckets, (entry) => entry.name),\n      },\n      ...(args.manifest.realtime.required\n        ? { realtime: { required: true } }\n        : {}),\n    },\n    environment: sortBy(args.manifest.environment, (entry) => entry.key),\n    background: {\n      worker: { required: workerRequired },\n      jobs: sortBy(args.manifest.background.jobs, (entry) => entry.name),\n      cron: sortBy(args.manifest.background.cron, (entry) => entry.name),\n      maintenance: sortBy(\n        args.manifest.background.maintenance,\n        (entry) => entry.name,\n      ),\n    },\n  })\n}\n\nexport function parseBlueprintYaml(source: string): BunderstackBlueprint {\n  return parseBlueprint(parse(source) as unknown)\n}\n\nexport function serializeBlueprint(value: BunderstackBlueprint): string {\n  const blueprint = parseBlueprint(value)\n  const options = {\n    aliasDuplicateObjects: false,\n    defaultKeyType: 'PLAIN',\n    defaultStringType: 'PLAIN',\n    lineWidth: 0,\n  } as const\n  const source = stringify(\n    parseBlueprintYaml(stringify(blueprint, options)),\n    options,\n  )\n  return source.replace(\n    /^(\\s*schedule: )(.+)$/gm,\n    (_match, prefix: string, value: string) => {\n      const schedule = value.startsWith('\"') ? JSON.parse(value) : value\n      return `${prefix}${JSON.stringify(schedule)}`\n    },\n  )\n}\n"]}
+{"version":3,"file":"blueprint.js","sourceRoot":"","sources":["../src/blueprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAIvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AA0C1D,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACnD,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CACzB,QAAQ,EACR,CAAC,CAAC,KAAK,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,EAChE,iDAAiD,CAClD,CACF,CAAA;AACD,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CACzB,QAAQ,EACR,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,IAAI,CAAC;QACH,SAAS,CAAC,KAAK,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,EAAE,uBAAuB,CAAC,CAC5B,CAAA;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,qDAAqD;AACrD,SAAS,IAAI,CAAmC,OAAiB;IAC/D,OAAO,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,OAAO,EAAE,QAAQ;KAClB,CAAC;IACF,WAAW,EAAE,IAAI,CAAC;QAChB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvE,OAAO,EAAE,IAAI,CAAC;YACZ,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACxC,CAAC;KACH,CAAC;IACF,WAAW,EAAE,IAAI,CAAC;QAChB,KAAK,EAAE,YAAY;QACnB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KAC9B,CAAC;IACF,SAAS,EAAE,IAAI,CAAC;QACd,QAAQ,EAAE,IAAI,CAAC;YACb,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrC,mBAAmB,EAAE,YAAY;YACjC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,IAAI,CAAC;gBACH,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;aACpB,CAAC,CACH;SACF,CAAC;QACF,OAAO,EAAE,IAAI,CAAC;YACZ,aAAa,EAAE,QAAQ;YACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,IAAI,CAAC;gBACH,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;aAC9C,CAAC,CACH;SACF,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAC1D,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,IAAI,CAAC;QACH,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAClC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;KAC5D,CAAC,CACH;IACD,GAAG,EAAE,CAAC,CAAC,QAAQ,CACb,IAAI,CAAC;QACH,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;SACxD,CAAC,CACH;KACF,CAAC,CACH;IACD,UAAU,EAAE,IAAI,CAAC;QACf,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CACX,IAAI,CAAC;YACH,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;SAC3B,CAAC,CACH;QACD,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;YAChC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;SAC3B,CAAC,CACH;KACF,CAAC;CACH,CAAC,CAAA;AAEF,SAAS,MAAM,CAAI,OAAqB,EAAE,GAAyB;IACjE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,MAAyB;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,KAAK,KAAK,GAAG,CAAC,CAAA;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CACtC,eAAe,EACf,KAAK,EACL,WAAW,CACY,CAAA;IACzB,gBAAgB,CACd,yBAAyB,EACzB,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CACvE,CAAA;IACD,gBAAgB,CACd,uBAAuB,EACvB,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CACrE,CAAA;IACD,gBAAgB,CACd,gBAAgB,EAChB,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC/D,CAAA;IACD,gBAAgB,CACd,iBAAiB,EACjB,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAChD,CAAA;IACD,IAAI,SAAS,CAAC,GAAG;QACf,gBAAgB,CACd,eAAe,EACf,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CACtD,CAAA;IACH,gBAAgB,CACd,gBAAgB,EAChB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACrD,CAAA;IACD,gBAAgB,CACd,iBAAiB,EACjB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACrD,CAAA;IACD,gBAAgB,CACd,wBAAwB,EACxB,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5D,CAAA;IACD,IACE,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CACtE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAA;IACH,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3D,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,OAAO,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/D,OAAO,cAAc,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;QAClE,WAAW,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,gBAAgB;YAC7C,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,OAAO;gBACd,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;QACtD,SAAS,EAAE;YACT,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,MAAM,CACZ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAC9B;aACF;YACD,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;gBAClC,CAAC,CAAC,EAAE,CAAC;SACR;QACD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;QACpE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;QACjD,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAClE,WAAW,EAAE,MAAM,CACjB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CACtB;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG;QACd,qBAAqB,EAAE,KAAK;QAC5B,cAAc,EAAE,OAAO;QACvB,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,CAAC;KACJ,CAAA;IACV,MAAM,MAAM,GAAG,SAAS,CACtB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EACjD,OAAO,CACR,CAAA;IACD,OAAO,MAAM,CAAC,OAAO,CACnB,yBAAyB,EACzB,CAAC,MAAM,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAClE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC/C,CAAC,CACF,CAAA;AACH,CAAC","sourcesContent":["import * as v from 'valibot'\nimport { parse, stringify } from 'yaml'\n\nimport type { BunderstackManifest } from './manifest'\n\nimport { parseCron } from './jobs/cron'\nimport { validateStandardSchema } from './standard-schema'\n\nexport type MigrationMode = 'migrations' | 'push'\nexport type ApplicationFramework =\n  | 'tanstack-start'\n  | 'solid'\n  | 'bun-ssr'\n  | 'custom'\n\n/**\n * Blueprint form of an environment key. `sensitive` and `description` are\n * optional because blueprints committed before 0.23.0 do not carry them.\n */\nexport type BlueprintEnvVar = {\n  key: string\n  required: boolean\n  scope: 'server' | 'client'\n  sensitive?: boolean\n  description?: string\n}\n\nexport type BunderstackBlueprint = {\n  version: 1\n  generator: { name: 'bunderstack'; version: string }\n  application: {\n    framework: ApplicationFramework\n    scripts: { build: 'build'; start: 'start'; worker?: 'worker' }\n  }\n  bunderstack: { entry: string; manifestVersion: 3 }\n  resources: {\n    database: BunderstackManifest['database'] & { migrationMode: MigrationMode }\n    storage: BunderstackManifest['storage']\n    realtime?: { required: true }\n  }\n  environment: BlueprintEnvVar[]\n  /** Application-declared procedures. Absent in blueprints written before 0.23.0. */\n  api?: { operations: BunderstackManifest['api']['operations'] }\n  background: BunderstackManifest['background'] & {\n    worker: { required: boolean }\n  }\n}\n\nconst nonEmpty = v.pipe(v.string(), v.minLength(1))\nconst relativePath = v.pipe(\n  nonEmpty,\n  v.check(\n    (value) =>\n      !value.startsWith('/') &&\n      !value.includes('\\\\') &&\n      value.split('/').every((part) => part !== '' && part !== '..'),\n    'entry must be a relative path without traversal',\n  ),\n)\nconst cronSchedule = v.pipe(\n  nonEmpty,\n  v.check((value) => {\n    try {\n      parseCron(value)\n      return true\n    } catch {\n      return false\n    }\n  }, 'invalid cron schedule'),\n)\n\n// Hosts parse blueprints committed by applications that upgrade bunderstack on\n// their own schedule, so a section written by a newer generator has to survive\n// an older parser instead of failing the whole file.\nfunction open<TEntries extends v.ObjectEntries>(entries: TEntries) {\n  return v.objectWithRest(entries, v.unknown())\n}\n\nconst blueprintSchema = open({\n  version: v.literal(1),\n  generator: open({\n    name: v.literal('bunderstack'),\n    version: nonEmpty,\n  }),\n  application: open({\n    framework: v.picklist(['tanstack-start', 'solid', 'bun-ssr', 'custom']),\n    scripts: open({\n      build: v.literal('build'),\n      start: v.literal('start'),\n      worker: v.optional(v.literal('worker')),\n    }),\n  }),\n  bunderstack: open({\n    entry: relativePath,\n    manifestVersion: v.literal(3),\n  }),\n  resources: open({\n    database: open({\n      dialect: v.picklist(['sqlite', 'pg']),\n      migrationsDirectory: relativePath,\n      migrationMode: v.picklist(['migrations', 'push']),\n      tables: v.array(\n        open({\n          exportName: nonEmpty,\n          physicalName: nonEmpty,\n          system: v.boolean(),\n        }),\n      ),\n    }),\n    storage: open({\n      defaultBucket: nonEmpty,\n      buckets: v.array(\n        open({\n          name: nonEmpty,\n          visibility: v.picklist(['public', 'private']),\n        }),\n      ),\n    }),\n    realtime: v.optional(open({ required: v.literal(true) })),\n  }),\n  environment: v.array(\n    open({\n      key: nonEmpty,\n      required: v.boolean(),\n      scope: v.picklist(['server', 'client']),\n      sensitive: v.optional(v.boolean()),\n      description: v.optional(v.pipe(nonEmpty, v.maxLength(200))),\n    }),\n  ),\n  api: v.optional(\n    open({\n      operations: v.array(\n        open({\n          handle: nonEmpty,\n          operationId: nonEmpty,\n          effect: v.picklist(['read', 'mutation', 'unknown']),\n          method: v.optional(nonEmpty),\n          path: v.optional(nonEmpty),\n          summary: v.optional(v.pipe(nonEmpty, v.maxLength(200))),\n        }),\n      ),\n    }),\n  ),\n  background: open({\n    worker: open({ required: v.boolean() }),\n    jobs: v.array(open({ name: nonEmpty })),\n    cron: v.array(\n      open({\n        name: nonEmpty,\n        schedule: cronSchedule,\n        timezone: v.literal('UTC'),\n      }),\n    ),\n    maintenance: v.array(\n      open({\n        name: v.literal('storage-sweep'),\n        schedule: cronSchedule,\n        timezone: v.literal('UTC'),\n      }),\n    ),\n  }),\n})\n\nfunction sortBy<T>(entries: readonly T[], key: (entry: T) => string): T[] {\n  return [...entries].sort((left, right) => key(left).localeCompare(key(right)))\n}\n\nfunction rejectDuplicates(collection: string, values: readonly string[]): void {\n  const seen = new Set<string>()\n  for (const value of values) {\n    if (seen.has(value))\n      throw new Error(`[bunderstack] duplicate ${collection} \"${value}\"`)\n    seen.add(value)\n  }\n}\n\nexport function parseBlueprint(value: unknown): BunderstackBlueprint {\n  const blueprint = validateStandardSchema(\n    blueprintSchema,\n    value,\n    'blueprint',\n  ) as BunderstackBlueprint\n  rejectDuplicates(\n    'database physical table',\n    blueprint.resources.database.tables.map((entry) => entry.physicalName),\n  )\n  rejectDuplicates(\n    'database export table',\n    blueprint.resources.database.tables.map((entry) => entry.exportName),\n  )\n  rejectDuplicates(\n    'storage bucket',\n    blueprint.resources.storage.buckets.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'environment key',\n    blueprint.environment.map((entry) => entry.key),\n  )\n  if (blueprint.api)\n    rejectDuplicates(\n      'api operation',\n      blueprint.api.operations.map((entry) => entry.handle),\n    )\n  rejectDuplicates(\n    'background job',\n    blueprint.background.jobs.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'background cron',\n    blueprint.background.cron.map((entry) => entry.name),\n  )\n  rejectDuplicates(\n    'background maintenance',\n    blueprint.background.maintenance.map((entry) => entry.name),\n  )\n  if (\n    !blueprint.resources.storage.buckets.some(\n      (bucket) => bucket.name === blueprint.resources.storage.defaultBucket,\n    )\n  ) {\n    throw new Error(\n      '[bunderstack] storage defaultBucket must be declared in storage buckets',\n    )\n  }\n  const workerRequired = blueprint.background.jobs.length > 0\n  if (blueprint.background.worker.required !== workerRequired) {\n    throw new Error(\n      '[bunderstack] background worker.required must match declared queue jobs',\n    )\n  }\n  if (Boolean(blueprint.application.scripts.worker) !== workerRequired) {\n    throw new Error(\n      '[bunderstack] application worker script must match declared queue jobs',\n    )\n  }\n  return blueprint\n}\n\n/**\n * Whether a host must treat this key as a secret. A blueprint generated before\n * 0.23.0 has no flag, and server keys are secret by default.\n */\nexport function isSensitiveEnvVar(entry: BlueprintEnvVar): boolean {\n  return entry.sensitive ?? entry.scope === 'server'\n}\n\nexport function blueprintFromManifest(args: {\n  manifest: BunderstackManifest\n  generatorVersion: string\n  entry: string\n  migrationMode: MigrationMode\n  framework?: ApplicationFramework\n}): BunderstackBlueprint {\n  const workerRequired = args.manifest.background.jobs.length > 0\n  return parseBlueprint({\n    version: 1,\n    generator: { name: 'bunderstack', version: args.generatorVersion },\n    application: {\n      framework: args.framework ?? 'tanstack-start',\n      scripts: {\n        build: 'build',\n        start: 'start',\n        ...(workerRequired ? { worker: 'worker' } : {}),\n      },\n    },\n    bunderstack: { entry: args.entry, manifestVersion: 3 },\n    resources: {\n      database: {\n        ...args.manifest.database,\n        migrationMode: args.migrationMode,\n        tables: sortBy(\n          args.manifest.database.tables,\n          (entry) => entry.physicalName,\n        ),\n      },\n      storage: {\n        ...args.manifest.storage,\n        buckets: sortBy(args.manifest.storage.buckets, (entry) => entry.name),\n      },\n      ...(args.manifest.realtime.required\n        ? { realtime: { required: true } }\n        : {}),\n    },\n    environment: sortBy(args.manifest.environment, (entry) => entry.key),\n    api: { operations: args.manifest.api.operations },\n    background: {\n      worker: { required: workerRequired },\n      jobs: sortBy(args.manifest.background.jobs, (entry) => entry.name),\n      cron: sortBy(args.manifest.background.cron, (entry) => entry.name),\n      maintenance: sortBy(\n        args.manifest.background.maintenance,\n        (entry) => entry.name,\n      ),\n    },\n  })\n}\n\nexport function parseBlueprintYaml(source: string): BunderstackBlueprint {\n  return parseBlueprint(parse(source) as unknown)\n}\n\nexport function serializeBlueprint(value: BunderstackBlueprint): string {\n  const blueprint = parseBlueprint(value)\n  const options = {\n    aliasDuplicateObjects: false,\n    defaultKeyType: 'PLAIN',\n    defaultStringType: 'PLAIN',\n    lineWidth: 0,\n  } as const\n  const source = stringify(\n    parseBlueprintYaml(stringify(blueprint, options)),\n    options,\n  )\n  return source.replace(\n    /^(\\s*schedule: )(.+)$/gm,\n    (_match, prefix: string, value: string) => {\n      const schedule = value.startsWith('\"') ? JSON.parse(value) : value\n      return `${prefix}${JSON.stringify(schedule)}`\n    },\n  )\n}\n"]}

package/dist/env.d.ts

@@ -1,10 +1,26 @@
 import type { StandardSchemaV1 } from '@standard-schema/spec';
 export declare const CLIENT_PREFIX: "PUBLIC_";
+/**
+ * Static, value-free metadata about an environment key. It reaches the manifest
+ * and the committed blueprint, so it must never contain a value or a secret.
+ */
+export type EnvVarMeta = {
+    /**
+     * Whether the value is a secret. Defaults to `true` for server keys and
+     * `false` for client keys. A client key can never be sensitive: `PUBLIC_*`
+     * values are compiled into the browser bundle.
+     */
+    sensitive?: boolean;
+    /** Prose shown to whoever fills this key in. Max 200 characters. */
+    description?: string;
+};
 export type EnvConfigInput = {
     server?: Record<string, StandardSchemaV1>;
     client?: Record<string, StandardSchemaV1>;
     /** Explicit value source for client vars (e.g. Vite's import.meta.env). */
     runtimeEnv?: Record<string, unknown>;
+    /** Value-free metadata per key, keyed by the key's own name. */
+    meta?: Record<string, EnvVarMeta>;
 };
 export type BunderstackRole = 'all' | 'web' | 'worker';
 /** Vars bunderstack itself consumes, always validated. */
@@ -19,6 +35,8 @@ export type BaseEnv = {
     BUNDERSTACK_EMAIL_PROVIDER?: string;
     BUNDERSTACK_EMAIL_FROM?: string;
     BUNDERHOST_ENVIRONMENT_ID?: string;
+    /** Deployed commit SHA, injected by the platform. Reported by readiness. */
+    BUNDERSTACK_REVISION?: string;
     BUNDERSTACK_ROLE: BunderstackRole;
 };
 type InferVars<T> = T extends Record<string, StandardSchemaV1> ? {

package/dist/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAO7D,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAA;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAA;AAItD,0DAA0D;AAC1D,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,gBAAgB,EAAE,eAAe,CAAA;CAClC,CAAA;AAED,KAAK,SAAS,CAAC,CAAC,IACd,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACtC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACtD,OAAO,CAAA;AAGb,MAAM,MAAM,YAAY,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,IAAI;IAClE,IAAI;CACL,SAAS,CAAC,cAAc,CAAC,GACtB,OAAO,GACL,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACtC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACxC,OAAO,CAAA;AAEX,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;gBAEb,MAAM,EAAE,MAAM,EAAE;CAK7B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,CAAA;AAqCD,wBAAgB,WAAW,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,EACjE,SAAS,EAAE,IAAI,EACf,OAAO,GAAE,kBAAuB,GAC/B,YAAY,CAAC,IAAI,CAAC,CA4CpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,EACzD,SAAS,EAAE,IAAI,GACd,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAsB3B"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAO7D,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAA;AAE/C;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAA;AAItD,0DAA0D;AAC1D,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,gBAAgB,EAAE,eAAe,CAAA;CAClC,CAAA;AAED,KAAK,SAAS,CAAC,CAAC,IACd,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACtC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACtD,OAAO,CAAA;AAGb,MAAM,MAAM,YAAY,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,IAAI;IAClE,IAAI;CACL,SAAS,CAAC,cAAc,CAAC,GACtB,OAAO,GACL,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACtC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACxC,OAAO,CAAA;AAEX,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;gBAEb,MAAM,EAAE,MAAM,EAAE;CAK7B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,CAAA;AAqCD,wBAAgB,WAAW,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,EACjE,SAAS,EAAE,IAAI,EACf,OAAO,GAAE,kBAAuB,GAC/B,YAAY,CAAC,IAAI,CAAC,CA6CpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,EACzD,SAAS,EAAE,IAAI,GACd,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAsB3B"}

package/dist/env.js

@@ -49,6 +49,7 @@ export function validateEnv(envConfig, options = {}) {
         BUNDERSTACK_EMAIL_PROVIDER: source.BUNDERSTACK_EMAIL_PROVIDER,
         BUNDERSTACK_EMAIL_FROM: source.BUNDERSTACK_EMAIL_FROM,
         BUNDERHOST_ENVIRONMENT_ID: source.BUNDERHOST_ENVIRONMENT_ID,
+        BUNDERSTACK_REVISION: source.BUNDERSTACK_REVISION,
         BUNDERSTACK_ROLE: (source.BUNDERSTACK_ROLE ?? 'all'),
     };
     if (isProduction && !source.AUTH_SECRET) {

package/dist/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAA;AAW/C,MAAM,KAAK,GAA+B,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AA+BlE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAU;IAEzB,YAAY,MAAgB;QAC1B,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAWD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAEnD,SAAS,eAAe,CACtB,OAAqD,EACrD,IAAyB,EACzB,MAA+B,EAC/B,MAAgB,EAChB,GAA4B;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,qCAAqC,aAAa,0BAA0B,CACnF,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,iCAAiC,aAAa,uCAAuC,CAC5F,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAClE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAK,OAAO,CAAC,GAA0C,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAA;IAErD,MAAM,IAAI,GAAY;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EACV,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;QACvE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe;QAClD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAoB;KACxE,CAAA;IACD,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IACD,IACE,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAmC,CAAC,EAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CACT,oCAAoC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAClG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC5D,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAwB,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAe;IAEf,MAAM,MAAM,GACV,SAAS,CAAC,UAAU;QACpB,CAAC,OAAO,OAAO,KAAK,WAAW;YAC7B,CAAC,CAAE,OAAO,CAAC,GAA+B;YAC1C,CAAC,CAAC,EAAE,CAAC,CAAA;IACT,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAE5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iDAAiD,CACzD,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;KACF,CAA8B,CAAA;AACjC,CAAC","sourcesContent":["// src/env.ts — env validation. Browser-safe: type-only Standard Schema import.\nimport type { StandardSchemaV1 } from '@standard-schema/spec'\n\nimport {\n  StandardSchemaValidationError,\n  validateStandardSchema,\n} from './standard-schema'\n\nexport const CLIENT_PREFIX = 'PUBLIC_' as const\n\nexport type EnvConfigInput = {\n  server?: Record<string, StandardSchemaV1>\n  client?: Record<string, StandardSchemaV1>\n  /** Explicit value source for client vars (e.g. Vite's import.meta.env). */\n  runtimeEnv?: Record<string, unknown>\n}\n\nexport type BunderstackRole = 'all' | 'web' | 'worker'\n\nconst ROLES: readonly BunderstackRole[] = ['all', 'web', 'worker']\n\n/** Vars bunderstack itself consumes, always validated. */\nexport type BaseEnv = {\n  NODE_ENV?: string\n  DATABASE_URL: string\n  DATABASE_AUTH_TOKEN?: string\n  AUTH_SECRET: string\n  REDIS_URL?: string\n  RESEND_API_KEY?: string\n  SMTP_URL?: string\n  BUNDERSTACK_EMAIL_PROVIDER?: string\n  BUNDERSTACK_EMAIL_FROM?: string\n  BUNDERHOST_ENVIRONMENT_ID?: string\n  BUNDERSTACK_ROLE: BunderstackRole\n}\n\ntype InferVars<T> =\n  T extends Record<string, StandardSchemaV1>\n    ? { [K in keyof T]: StandardSchemaV1.InferOutput<T[K]> }\n    : unknown\n\n// Non-distributive so `ValidatedEnv<undefined>` is BaseEnv, not `never`.\nexport type ValidatedEnv<TEnv extends EnvConfigInput | undefined> = [\n  TEnv,\n] extends [EnvConfigInput]\n  ? BaseEnv &\n      InferVars<NonNullable<TEnv>['server']> &\n      InferVars<NonNullable<TEnv>['client']>\n  : BaseEnv\n\nexport class BunderstackEnvError extends Error {\n  readonly issues: string[]\n\n  constructor(issues: string[]) {\n    super(`Invalid environment:\\n  - ${issues.join('\\n  - ')}`)\n    this.name = 'BunderstackEnvError'\n    this.issues = issues\n  }\n}\n\nexport type ValidateEnvOptions = {\n  /** String tag of the configured email provider ('resend' | 'smtp'), if any. */\n  emailProvider?: string\n  /** Value source; defaults to process.env. Tests pass this explicitly. */\n  source?: Record<string, string | undefined>\n  /** Dialect-aware DATABASE_URL fallback; bunderstack passes it. */\n  defaultDatabaseUrl?: string\n}\n\nconst DEV_AUTH_SECRET = 'dev-secret-change-in-prod'\n\nfunction validateSection(\n  section: Record<string, StandardSchemaV1> | undefined,\n  kind: 'server' | 'client',\n  source: Record<string, unknown>,\n  issues: string[],\n  out: Record<string, unknown>,\n) {\n  for (const [key, schema] of Object.entries(section ?? {})) {\n    const isPublic = key.startsWith(CLIENT_PREFIX)\n    if (kind === 'server' && isPublic) {\n      issues.push(\n        `${key}: server vars must not start with ${CLIENT_PREFIX} (move it to env.client)`,\n      )\n      continue\n    }\n    if (kind === 'client' && !isPublic) {\n      issues.push(\n        `${key}: client vars must start with ${CLIENT_PREFIX} (rename it or move it to env.server)`,\n      )\n      continue\n    }\n    try {\n      out[key] = validateStandardSchema(schema, source[key], 'env')\n    } catch (error) {\n      if (!(error instanceof StandardSchemaValidationError)) throw error\n      for (const issue of error.issues) {\n        const path = issue.path.map(String).join('.')\n        issues.push(`${key}${path ? `.${path}` : ''}: ${issue.message}`)\n      }\n    }\n  }\n}\n\nexport function validateEnv<TEnv extends EnvConfigInput | undefined>(\n  envConfig: TEnv,\n  options: ValidateEnvOptions = {},\n): ValidatedEnv<TEnv> {\n  const source =\n    options.source ?? (process.env as Record<string, string | undefined>)\n  const issues: string[] = []\n  const isProduction = source.NODE_ENV === 'production'\n\n  const base: BaseEnv = {\n    NODE_ENV: source.NODE_ENV,\n    DATABASE_URL:\n      source.DATABASE_URL ?? options.defaultDatabaseUrl ?? 'file:./data.db',\n    DATABASE_AUTH_TOKEN: source.DATABASE_AUTH_TOKEN,\n    AUTH_SECRET: source.AUTH_SECRET ?? DEV_AUTH_SECRET,\n    REDIS_URL: source.REDIS_URL,\n    RESEND_API_KEY: source.RESEND_API_KEY,\n    SMTP_URL: source.SMTP_URL,\n    BUNDERSTACK_EMAIL_PROVIDER: source.BUNDERSTACK_EMAIL_PROVIDER,\n    BUNDERSTACK_EMAIL_FROM: source.BUNDERSTACK_EMAIL_FROM,\n    BUNDERHOST_ENVIRONMENT_ID: source.BUNDERHOST_ENVIRONMENT_ID,\n    BUNDERSTACK_ROLE: (source.BUNDERSTACK_ROLE ?? 'all') as BunderstackRole,\n  }\n  if (isProduction && !source.AUTH_SECRET) {\n    issues.push('AUTH_SECRET: required in production')\n  }\n  if (\n    source.BUNDERSTACK_ROLE !== undefined &&\n    !ROLES.includes(source.BUNDERSTACK_ROLE as BunderstackRole)\n  ) {\n    issues.push(\n      `BUNDERSTACK_ROLE: must be one of ${ROLES.join(', ')} (got \"${String(source.BUNDERSTACK_ROLE)}\")`,\n    )\n  }\n  if (options.emailProvider === 'resend' && !source.RESEND_API_KEY) {\n    issues.push(\"RESEND_API_KEY: required when email provider is 'resend'\")\n  }\n  if (options.emailProvider === 'smtp' && !source.SMTP_URL) {\n    issues.push(\"SMTP_URL: required when email provider is 'smtp'\")\n  }\n\n  const userVars: Record<string, unknown> = {}\n  validateSection(envConfig?.server, 'server', source, issues, userVars)\n  validateSection(envConfig?.client, 'client', source, issues, userVars)\n\n  if (issues.length > 0) throw new BunderstackEnvError(issues)\n  return { ...base, ...userVars } as ValidatedEnv<TEnv>\n}\n\n/**\n * Browser-side companion (t3-env style): validates ONLY the client section.\n * Server keys exist on the returned object as traps that throw on access, so\n * a leaked import fails loudly instead of silently reading undefined.\n */\nexport function createClientEnv<TEnv extends EnvConfigInput>(\n  envConfig: TEnv,\n): InferVars<TEnv['client']> {\n  const source =\n    envConfig.runtimeEnv ??\n    (typeof process !== 'undefined'\n      ? (process.env as Record<string, unknown>)\n      : {})\n  const issues: string[] = []\n  const values: Record<string, unknown> = {}\n  validateSection(envConfig.client, 'client', source, issues, values)\n  if (issues.length > 0) throw new BunderstackEnvError(issues)\n\n  const serverKeys = new Set(Object.keys(envConfig.server ?? {}))\n  return new Proxy(values, {\n    get(target, prop) {\n      if (typeof prop === 'string' && serverKeys.has(prop)) {\n        throw new Error(\n          `${prop} is server-only and not available in client env`,\n        )\n      }\n      return Reflect.get(target, prop)\n    },\n  }) as InferVars<TEnv['client']>\n}\n"]}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAA;AA4B/C,MAAM,KAAK,GAA+B,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AAiClE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAU;IAEzB,YAAY,MAAgB;QAC1B,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAWD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAEnD,SAAS,eAAe,CACtB,OAAqD,EACrD,IAAyB,EACzB,MAA+B,EAC/B,MAAgB,EAChB,GAA4B;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,qCAAqC,aAAa,0BAA0B,CACnF,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,iCAAiC,aAAa,uCAAuC,CAC5F,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAClE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAK,OAAO,CAAC,GAA0C,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAA;IAErD,MAAM,IAAI,GAAY;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EACV,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;QACvE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe;QAClD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAoB;KACxE,CAAA;IACD,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IACD,IACE,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAmC,CAAC,EAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CACT,oCAAoC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAClG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC5D,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAwB,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAe;IAEf,MAAM,MAAM,GACV,SAAS,CAAC,UAAU;QACpB,CAAC,OAAO,OAAO,KAAK,WAAW;YAC7B,CAAC,CAAE,OAAO,CAAC,GAA+B;YAC1C,CAAC,CAAC,EAAE,CAAC,CAAA;IACT,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAE5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iDAAiD,CACzD,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;KACF,CAA8B,CAAA;AACjC,CAAC","sourcesContent":["// src/env.ts — env validation. Browser-safe: type-only Standard Schema import.\nimport type { StandardSchemaV1 } from '@standard-schema/spec'\n\nimport {\n  StandardSchemaValidationError,\n  validateStandardSchema,\n} from './standard-schema'\n\nexport const CLIENT_PREFIX = 'PUBLIC_' as const\n\n/**\n * Static, value-free metadata about an environment key. It reaches the manifest\n * and the committed blueprint, so it must never contain a value or a secret.\n */\nexport type EnvVarMeta = {\n  /**\n   * Whether the value is a secret. Defaults to `true` for server keys and\n   * `false` for client keys. A client key can never be sensitive: `PUBLIC_*`\n   * values are compiled into the browser bundle.\n   */\n  sensitive?: boolean\n  /** Prose shown to whoever fills this key in. Max 200 characters. */\n  description?: string\n}\n\nexport type EnvConfigInput = {\n  server?: Record<string, StandardSchemaV1>\n  client?: Record<string, StandardSchemaV1>\n  /** Explicit value source for client vars (e.g. Vite's import.meta.env). */\n  runtimeEnv?: Record<string, unknown>\n  /** Value-free metadata per key, keyed by the key's own name. */\n  meta?: Record<string, EnvVarMeta>\n}\n\nexport type BunderstackRole = 'all' | 'web' | 'worker'\n\nconst ROLES: readonly BunderstackRole[] = ['all', 'web', 'worker']\n\n/** Vars bunderstack itself consumes, always validated. */\nexport type BaseEnv = {\n  NODE_ENV?: string\n  DATABASE_URL: string\n  DATABASE_AUTH_TOKEN?: string\n  AUTH_SECRET: string\n  REDIS_URL?: string\n  RESEND_API_KEY?: string\n  SMTP_URL?: string\n  BUNDERSTACK_EMAIL_PROVIDER?: string\n  BUNDERSTACK_EMAIL_FROM?: string\n  BUNDERHOST_ENVIRONMENT_ID?: string\n  /** Deployed commit SHA, injected by the platform. Reported by readiness. */\n  BUNDERSTACK_REVISION?: string\n  BUNDERSTACK_ROLE: BunderstackRole\n}\n\ntype InferVars<T> =\n  T extends Record<string, StandardSchemaV1>\n    ? { [K in keyof T]: StandardSchemaV1.InferOutput<T[K]> }\n    : unknown\n\n// Non-distributive so `ValidatedEnv<undefined>` is BaseEnv, not `never`.\nexport type ValidatedEnv<TEnv extends EnvConfigInput | undefined> = [\n  TEnv,\n] extends [EnvConfigInput]\n  ? BaseEnv &\n      InferVars<NonNullable<TEnv>['server']> &\n      InferVars<NonNullable<TEnv>['client']>\n  : BaseEnv\n\nexport class BunderstackEnvError extends Error {\n  readonly issues: string[]\n\n  constructor(issues: string[]) {\n    super(`Invalid environment:\\n  - ${issues.join('\\n  - ')}`)\n    this.name = 'BunderstackEnvError'\n    this.issues = issues\n  }\n}\n\nexport type ValidateEnvOptions = {\n  /** String tag of the configured email provider ('resend' | 'smtp'), if any. */\n  emailProvider?: string\n  /** Value source; defaults to process.env. Tests pass this explicitly. */\n  source?: Record<string, string | undefined>\n  /** Dialect-aware DATABASE_URL fallback; bunderstack passes it. */\n  defaultDatabaseUrl?: string\n}\n\nconst DEV_AUTH_SECRET = 'dev-secret-change-in-prod'\n\nfunction validateSection(\n  section: Record<string, StandardSchemaV1> | undefined,\n  kind: 'server' | 'client',\n  source: Record<string, unknown>,\n  issues: string[],\n  out: Record<string, unknown>,\n) {\n  for (const [key, schema] of Object.entries(section ?? {})) {\n    const isPublic = key.startsWith(CLIENT_PREFIX)\n    if (kind === 'server' && isPublic) {\n      issues.push(\n        `${key}: server vars must not start with ${CLIENT_PREFIX} (move it to env.client)`,\n      )\n      continue\n    }\n    if (kind === 'client' && !isPublic) {\n      issues.push(\n        `${key}: client vars must start with ${CLIENT_PREFIX} (rename it or move it to env.server)`,\n      )\n      continue\n    }\n    try {\n      out[key] = validateStandardSchema(schema, source[key], 'env')\n    } catch (error) {\n      if (!(error instanceof StandardSchemaValidationError)) throw error\n      for (const issue of error.issues) {\n        const path = issue.path.map(String).join('.')\n        issues.push(`${key}${path ? `.${path}` : ''}: ${issue.message}`)\n      }\n    }\n  }\n}\n\nexport function validateEnv<TEnv extends EnvConfigInput | undefined>(\n  envConfig: TEnv,\n  options: ValidateEnvOptions = {},\n): ValidatedEnv<TEnv> {\n  const source =\n    options.source ?? (process.env as Record<string, string | undefined>)\n  const issues: string[] = []\n  const isProduction = source.NODE_ENV === 'production'\n\n  const base: BaseEnv = {\n    NODE_ENV: source.NODE_ENV,\n    DATABASE_URL:\n      source.DATABASE_URL ?? options.defaultDatabaseUrl ?? 'file:./data.db',\n    DATABASE_AUTH_TOKEN: source.DATABASE_AUTH_TOKEN,\n    AUTH_SECRET: source.AUTH_SECRET ?? DEV_AUTH_SECRET,\n    REDIS_URL: source.REDIS_URL,\n    RESEND_API_KEY: source.RESEND_API_KEY,\n    SMTP_URL: source.SMTP_URL,\n    BUNDERSTACK_EMAIL_PROVIDER: source.BUNDERSTACK_EMAIL_PROVIDER,\n    BUNDERSTACK_EMAIL_FROM: source.BUNDERSTACK_EMAIL_FROM,\n    BUNDERHOST_ENVIRONMENT_ID: source.BUNDERHOST_ENVIRONMENT_ID,\n    BUNDERSTACK_REVISION: source.BUNDERSTACK_REVISION,\n    BUNDERSTACK_ROLE: (source.BUNDERSTACK_ROLE ?? 'all') as BunderstackRole,\n  }\n  if (isProduction && !source.AUTH_SECRET) {\n    issues.push('AUTH_SECRET: required in production')\n  }\n  if (\n    source.BUNDERSTACK_ROLE !== undefined &&\n    !ROLES.includes(source.BUNDERSTACK_ROLE as BunderstackRole)\n  ) {\n    issues.push(\n      `BUNDERSTACK_ROLE: must be one of ${ROLES.join(', ')} (got \"${String(source.BUNDERSTACK_ROLE)}\")`,\n    )\n  }\n  if (options.emailProvider === 'resend' && !source.RESEND_API_KEY) {\n    issues.push(\"RESEND_API_KEY: required when email provider is 'resend'\")\n  }\n  if (options.emailProvider === 'smtp' && !source.SMTP_URL) {\n    issues.push(\"SMTP_URL: required when email provider is 'smtp'\")\n  }\n\n  const userVars: Record<string, unknown> = {}\n  validateSection(envConfig?.server, 'server', source, issues, userVars)\n  validateSection(envConfig?.client, 'client', source, issues, userVars)\n\n  if (issues.length > 0) throw new BunderstackEnvError(issues)\n  return { ...base, ...userVars } as ValidatedEnv<TEnv>\n}\n\n/**\n * Browser-side companion (t3-env style): validates ONLY the client section.\n * Server keys exist on the returned object as traps that throw on access, so\n * a leaked import fails loudly instead of silently reading undefined.\n */\nexport function createClientEnv<TEnv extends EnvConfigInput>(\n  envConfig: TEnv,\n): InferVars<TEnv['client']> {\n  const source =\n    envConfig.runtimeEnv ??\n    (typeof process !== 'undefined'\n      ? (process.env as Record<string, unknown>)\n      : {})\n  const issues: string[] = []\n  const values: Record<string, unknown> = {}\n  validateSection(envConfig.client, 'client', source, issues, values)\n  if (issues.length > 0) throw new BunderstackEnvError(issues)\n\n  const serverKeys = new Set(Object.keys(envConfig.server ?? {}))\n  return new Proxy(values, {\n    get(target, prop) {\n      if (typeof prop === 'string' && serverKeys.has(prop)) {\n        throw new Error(\n          `${prop} is server-only and not available in client env`,\n        )\n      }\n      return Reflect.get(target, prop)\n    },\n  }) as InferVars<TEnv['client']>\n}\n"]}

package/dist/index.d.ts

@@ -11,7 +11,9 @@ export type { AuthConfigContext, AuthConfigFactory, AuthConfigInput, BetterAuthC
 export { validateEnv, createClientEnv, BunderstackEnvError } from './env.js';
 export type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env.js';
 export { buildManifest, parseManifest } from './manifest.js';
-export type { BunderstackManifest, ManifestEnvVar } from './manifest.js';
+export type { ApiOperation, ApiOperationEffect, BunderstackManifest, ManifestEnvVar, } from './manifest.js';
+export { buildReadinessReport, readinessReportSchema } from './readiness.js';
+export type { ReadinessCheck, ReadinessCheckName, ReadinessCode, ReadinessReport, ReadinessStatus, } from './readiness.js';
 export { createEmail } from './email.js';
 export type { EmailMessage, EmailAdapter, EmailConfigInput, EmailFacade, } from './email.js';
 export { createJobsBuilder } from './jobs/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACZ,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACzE,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,YAAY,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACZ,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -5,6 +5,7 @@ export { BunderstackError } from './errors.js';
 export { resolveConfig, resolveAuthConfig, defineAuth } from './config.js';
 export { validateEnv, createClientEnv, BunderstackEnvError } from './env.js';
 export { buildManifest, parseManifest } from './manifest.js';
+export { buildReadinessReport, readinessReportSchema } from './readiness.js';
 export { createEmail } from './email.js';
 export { createJobsBuilder } from './jobs/index.js';
 export { defineAccess, validateAndResolveAccess, checkAccess, AUTH_TABLE_NAMES, } from './access.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AASzB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEzD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAOrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAoBhD,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAOjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AAejB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAMxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAU3D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export * from './backend'\nexport type {\n  AppRunWorkerOptions,\n  AppStartWorkerOptions,\n  AuthInstance,\n  BucketNamesOf,\n  BunderstackApp,\n  StorageFacade,\n} from './runtime'\nexport { listSpec } from './api/list-spec'\nexport type { ListSpecOptions } from './api/list-spec'\nexport type { BunderstackDb, BunderstackTx } from './db'\nexport { MAX_LIST_LIMIT } from './list-query'\nexport { BunderstackError } from './errors'\nexport type { BunderstackErrorCode } from './errors'\nexport { resolveConfig, resolveAuthConfig, defineAuth } from './config'\nexport type {\n  AuthConfigContext,\n  AuthConfigFactory,\n  AuthConfigInput,\n  BetterAuthConfig,\n  BunderstackConfig,\n  ResolvedConfig,\n} from './config'\nexport { validateEnv, createClientEnv, BunderstackEnvError } from './env'\nexport type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env'\nexport { buildManifest, parseManifest } from './manifest'\nexport type { BunderstackManifest, ManifestEnvVar } from './manifest'\nexport { createEmail } from './email'\nexport type {\n  EmailMessage,\n  EmailAdapter,\n  EmailConfigInput,\n  EmailFacade,\n} from './email'\nexport { createJobsBuilder } from './jobs/index'\nexport type {\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  BackgroundDefinition,\n  BackgroundDefs,\n  CronDefinition,\n  CronInvocation,\n  EnqueueOptions,\n  JobContext,\n  JobDefinition,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n  QueueJobDefinition,\n  QueueJobKeys,\n  RunWorkerOptions,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nexport {\n  defineAccess,\n  validateAndResolveAccess,\n  checkAccess,\n  AUTH_TABLE_NAMES,\n} from './access'\nexport type {\n  TableAccessInput,\n  OperationRule,\n  AccessContext,\n  AccessUser,\n} from './access'\nexport {\n  typeid,\n  generate as generateTypeId,\n  parse as parseTypeId,\n  asTypeId,\n} from './typeid'\nexport type { TypeId } from './typeid'\nexport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\nexport type { StorageAdapter } from './storage/index'\nexport type {\n  StorageConfigInput,\n  BucketConfigInput,\n  ResolvedBucket,\n} from './storage/buckets'\nexport type { TransformSpec } from './storage/thumbnails'\nexport type { RealtimeAction } from './realtime/publisher'\nexport { createRealtimeFacade } from './realtime/facade'\nexport type {\n  RealtimeFacade,\n  RealtimeTransport,\n  SchemaTable,\n} from './realtime/facade'\nexport { createApiBuilder, defineApi } from './api/builder'\nexport type { BunderstackApiBuilder, ApiFactory } from './api/builder'\nexport type { ApiContext } from './api/context'\nexport type {\n  CrudApiRouterFor,\n  ExposedApiTables,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nexport type { TableCrudProcedures } from './api/crud-router'\nexport {\n  buildApiRegistry,\n  mergeApiRoutersStrict,\n  normalizeApiPath,\n  normalizeForeignOpenAPISpec,\n} from './api/registry'\nexport { mergeOpenAPISpecs } from './api/openapi'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AASzB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAOzD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAQzE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAOrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAoBhD,OAAO,EACL,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAOjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AAejB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAMxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAU3D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export * from './backend'\nexport type {\n  AppRunWorkerOptions,\n  AppStartWorkerOptions,\n  AuthInstance,\n  BucketNamesOf,\n  BunderstackApp,\n  StorageFacade,\n} from './runtime'\nexport { listSpec } from './api/list-spec'\nexport type { ListSpecOptions } from './api/list-spec'\nexport type { BunderstackDb, BunderstackTx } from './db'\nexport { MAX_LIST_LIMIT } from './list-query'\nexport { BunderstackError } from './errors'\nexport type { BunderstackErrorCode } from './errors'\nexport { resolveConfig, resolveAuthConfig, defineAuth } from './config'\nexport type {\n  AuthConfigContext,\n  AuthConfigFactory,\n  AuthConfigInput,\n  BetterAuthConfig,\n  BunderstackConfig,\n  ResolvedConfig,\n} from './config'\nexport { validateEnv, createClientEnv, BunderstackEnvError } from './env'\nexport type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env'\nexport { buildManifest, parseManifest } from './manifest'\nexport type {\n  ApiOperation,\n  ApiOperationEffect,\n  BunderstackManifest,\n  ManifestEnvVar,\n} from './manifest'\nexport { buildReadinessReport, readinessReportSchema } from './readiness'\nexport type {\n  ReadinessCheck,\n  ReadinessCheckName,\n  ReadinessCode,\n  ReadinessReport,\n  ReadinessStatus,\n} from './readiness'\nexport { createEmail } from './email'\nexport type {\n  EmailMessage,\n  EmailAdapter,\n  EmailConfigInput,\n  EmailFacade,\n} from './email'\nexport { createJobsBuilder } from './jobs/index'\nexport type {\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  BackgroundDefinition,\n  BackgroundDefs,\n  CronDefinition,\n  CronInvocation,\n  EnqueueOptions,\n  JobContext,\n  JobDefinition,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n  QueueJobDefinition,\n  QueueJobKeys,\n  RunWorkerOptions,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nexport {\n  defineAccess,\n  validateAndResolveAccess,\n  checkAccess,\n  AUTH_TABLE_NAMES,\n} from './access'\nexport type {\n  TableAccessInput,\n  OperationRule,\n  AccessContext,\n  AccessUser,\n} from './access'\nexport {\n  typeid,\n  generate as generateTypeId,\n  parse as parseTypeId,\n  asTypeId,\n} from './typeid'\nexport type { TypeId } from './typeid'\nexport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\nexport type { StorageAdapter } from './storage/index'\nexport type {\n  StorageConfigInput,\n  BucketConfigInput,\n  ResolvedBucket,\n} from './storage/buckets'\nexport type { TransformSpec } from './storage/thumbnails'\nexport type { RealtimeAction } from './realtime/publisher'\nexport { createRealtimeFacade } from './realtime/facade'\nexport type {\n  RealtimeFacade,\n  RealtimeTransport,\n  SchemaTable,\n} from './realtime/facade'\nexport { createApiBuilder, defineApi } from './api/builder'\nexport type { BunderstackApiBuilder, ApiFactory } from './api/builder'\nexport type { ApiContext } from './api/context'\nexport type {\n  CrudApiRouterFor,\n  ExposedApiTables,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nexport type { TableCrudProcedures } from './api/crud-router'\nexport {\n  buildApiRegistry,\n  mergeApiRoutersStrict,\n  normalizeApiPath,\n  normalizeForeignOpenAPISpec,\n} from './api/registry'\nexport { mergeOpenAPISpecs } from './api/openapi'\n"]}

package/dist/jobs/index.d.ts

@@ -3,7 +3,7 @@ export type { AnyJobDefinition, BackgroundDefinition, BackgroundDefs, Bunderstac
 export { enqueueJob } from './queue.js';
 export { createJobRunner } from './worker.js';
 export { startJobWorker } from './runtime.js';
-export type { StartWorkerOptions, RunWorkerOptions, WorkerHandle, } from './runtime.js';
+export type { StartWorkerOptions, RunWorkerOptions, WorkerCycleResult, WorkerHandle, } from './runtime.js';
 export { parseCron, cronMatches } from './cron.js';
 export { slotsDue, floorSlot, CRON_PREFIX, SLOT_MS } from './slots.js';
 export type { CatchUp } from './slots.js';

package/dist/jobs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1C,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,GACb,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACnE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1C,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACb,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACnE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA"}

package/dist/jobs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAkBjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAM1C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA","sourcesContent":["// src/jobs/index.ts — module surface consumed by bunderstack.\nexport {\n  createJobsBuilder,\n  validateBackgroundDefs,\n  validateJobsDefs,\n  DEFAULT_RETRIES,\n  DEFAULT_TIMEOUT_MS,\n} from './define'\nexport type {\n  AnyJobDefinition,\n  BackgroundDefinition,\n  BackgroundDefs,\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  EnqueueOptions,\n  JobContext,\n  JobDefinition,\n  QueueJobDefinition,\n  CronDefinition,\n  CronInvocation,\n  QueueJobKeys,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n} from './define'\nexport { enqueueJob } from './queue'\nexport { createJobRunner } from './worker'\nexport { startJobWorker } from './runtime'\nexport type {\n  StartWorkerOptions,\n  RunWorkerOptions,\n  WorkerHandle,\n} from './runtime'\nexport { parseCron, cronMatches } from './cron'\nexport { slotsDue, floorSlot, CRON_PREFIX, SLOT_MS } from './slots'\nexport type { CatchUp } from './slots'\nexport type { TickResult } from './define'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAkBjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAO1C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA","sourcesContent":["// src/jobs/index.ts — module surface consumed by bunderstack.\nexport {\n  createJobsBuilder,\n  validateBackgroundDefs,\n  validateJobsDefs,\n  DEFAULT_RETRIES,\n  DEFAULT_TIMEOUT_MS,\n} from './define'\nexport type {\n  AnyJobDefinition,\n  BackgroundDefinition,\n  BackgroundDefs,\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  EnqueueOptions,\n  JobContext,\n  JobDefinition,\n  QueueJobDefinition,\n  CronDefinition,\n  CronInvocation,\n  QueueJobKeys,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n} from './define'\nexport { enqueueJob } from './queue'\nexport { createJobRunner } from './worker'\nexport { startJobWorker } from './runtime'\nexport type {\n  StartWorkerOptions,\n  RunWorkerOptions,\n  WorkerCycleResult,\n  WorkerHandle,\n} from './runtime'\nexport { parseCron, cronMatches } from './cron'\nexport { slotsDue, floorSlot, CRON_PREFIX, SLOT_MS } from './slots'\nexport type { CatchUp } from './slots'\nexport type { TickResult } from './define'\n"]}

package/dist/jobs/runtime.d.ts

@@ -2,10 +2,14 @@ export type WorkerHandle = {
     readonly closed: Promise<void>;
     close(): Promise<void>;
 };
+export type WorkerCycleResult = {
+    wake?: Promise<void>;
+};
 export type StartWorkerOptions = {
     signal?: AbortSignal;
     pollIntervalMs?: number;
-    tick: (now: number) => Promise<void>;
+    tick: (now: number) => Promise<void | WorkerCycleResult>;
+    drain?: () => Promise<void>;
     onError?: (error: Error) => void;
 };
 export type RunWorkerOptions = StartWorkerOptions;

package/dist/jobs/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/jobs/runtime.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAmBjD,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,YAAY,CA0BxE"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/jobs/runtime.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAA;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAA;IACxD,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AA+BjD,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,YAAY,CAiCxE"}

package/dist/jobs/runtime.js

@@ -1,17 +1,25 @@
 function toError(error) {
     return error instanceof Error ? error : new Error(String(error));
 }
-function wait(ms, signal) {
+function waitForNext(ms, signal, wake, onError) {
     return new Promise((resolve) => {
-        if (signal.aborted)
-            return resolve();
+        let settled = false;
         const timer = setTimeout(done, ms);
         function done() {
+            if (settled)
+                return;
+            settled = true;
             clearTimeout(timer);
             signal.removeEventListener('abort', done);
             resolve();
         }
         signal.addEventListener('abort', done, { once: true });
+        void wake?.then(done, (error) => {
+            onError?.(toError(error));
+            done();
+        });
+        if (signal.aborted)
+            done();
     });
 }
 export function startJobWorker(options) {
@@ -24,17 +32,19 @@ export function startJobWorker(options) {
     const closed = (async () => {
         try {
             while (!controller.signal.aborted) {
+                let cycle = undefined;
                 try {
-                    await options.tick(Date.now());
+                    cycle = await options.tick(Date.now());
                 }
                 catch (error) {
                     options.onError?.(toError(error));
                 }
-                await wait(pollIntervalMs, controller.signal);
+                await waitForNext(pollIntervalMs, controller.signal, cycle?.wake, options.onError);
             }
         }
         finally {
             options.signal?.removeEventListener('abort', abort);
+            await options.drain?.();
         }
     })();
     const close = () => {

package/dist/jobs/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/jobs/runtime.ts"],"names":[],"mappings":"AAcA,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,EAAU,EAAE,MAAmB;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,EAAE,CAAA;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAClC,SAAS,IAAI;YACX,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA2B;IACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAA;IACtD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAA;IAEpC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;gBAChC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;gBACnC,CAAC;gBACD,MAAM,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,UAAU,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC","sourcesContent":["export type WorkerHandle = {\n  readonly closed: Promise<void>\n  close(): Promise<void>\n}\n\nexport type StartWorkerOptions = {\n  signal?: AbortSignal\n  pollIntervalMs?: number\n  tick: (now: number) => Promise<void>\n  onError?: (error: Error) => void\n}\n\nexport type RunWorkerOptions = StartWorkerOptions\n\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n\nfunction wait(ms: number, signal: AbortSignal): Promise<void> {\n  return new Promise((resolve) => {\n    if (signal.aborted) return resolve()\n    const timer = setTimeout(done, ms)\n    function done() {\n      clearTimeout(timer)\n      signal.removeEventListener('abort', done)\n      resolve()\n    }\n    signal.addEventListener('abort', done, { once: true })\n  })\n}\n\nexport function startJobWorker(options: StartWorkerOptions): WorkerHandle {\n  const controller = new AbortController()\n  const pollIntervalMs = options.pollIntervalMs ?? 1_000\n  const abort = () => controller.abort()\n  options.signal?.addEventListener('abort', abort, { once: true })\n  if (options.signal?.aborted) abort()\n\n  const closed = (async () => {\n    try {\n      while (!controller.signal.aborted) {\n        try {\n          await options.tick(Date.now())\n        } catch (error) {\n          options.onError?.(toError(error))\n        }\n        await wait(pollIntervalMs, controller.signal)\n      }\n    } finally {\n      options.signal?.removeEventListener('abort', abort)\n    }\n  })()\n  const close = () => {\n    controller.abort()\n    return closed\n  }\n  return { closed, close }\n}\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/jobs/runtime.ts"],"names":[],"mappings":"AAiBA,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,WAAW,CAClB,EAAU,EACV,MAAmB,EACnB,IAA+B,EAC/B,OAA6C;IAE7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAClC,SAAS,IAAI;YACX,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,KAAK,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9B,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;YACzB,IAAI,EAAE,CAAA;QACR,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA2B;IACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAA;IACtD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAA;IAEpC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,KAAK,GAA6B,SAAS,CAAA;gBAC/C,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;gBACxC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;gBACnC,CAAC;gBACD,MAAM,WAAW,CACf,cAAc,EACd,UAAU,CAAC,MAAM,EACjB,KAAK,EAAE,IAAI,EACX,OAAO,CAAC,OAAO,CAChB,CAAA;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;QACzB,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,UAAU,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC","sourcesContent":["export type WorkerHandle = {\n  readonly closed: Promise<void>\n  close(): Promise<void>\n}\n\nexport type WorkerCycleResult = { wake?: Promise<void> }\n\nexport type StartWorkerOptions = {\n  signal?: AbortSignal\n  pollIntervalMs?: number\n  tick: (now: number) => Promise<void | WorkerCycleResult>\n  drain?: () => Promise<void>\n  onError?: (error: Error) => void\n}\n\nexport type RunWorkerOptions = StartWorkerOptions\n\nfunction toError(error: unknown): Error {\n  return error instanceof Error ? error : new Error(String(error))\n}\n\nfunction waitForNext(\n  ms: number,\n  signal: AbortSignal,\n  wake: Promise<void> | undefined,\n  onError: ((error: Error) => void) | undefined,\n): Promise<void> {\n  return new Promise((resolve) => {\n    let settled = false\n    const timer = setTimeout(done, ms)\n    function done() {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      signal.removeEventListener('abort', done)\n      resolve()\n    }\n    signal.addEventListener('abort', done, { once: true })\n    void wake?.then(done, (error) => {\n      onError?.(toError(error))\n      done()\n    })\n    if (signal.aborted) done()\n  })\n}\n\nexport function startJobWorker(options: StartWorkerOptions): WorkerHandle {\n  const controller = new AbortController()\n  const pollIntervalMs = options.pollIntervalMs ?? 1_000\n  const abort = () => controller.abort()\n  options.signal?.addEventListener('abort', abort, { once: true })\n  if (options.signal?.aborted) abort()\n\n  const closed = (async () => {\n    try {\n      while (!controller.signal.aborted) {\n        let cycle: void | WorkerCycleResult = undefined\n        try {\n          cycle = await options.tick(Date.now())\n        } catch (error) {\n          options.onError?.(toError(error))\n        }\n        await waitForNext(\n          pollIntervalMs,\n          controller.signal,\n          cycle?.wake,\n          options.onError,\n        )\n      }\n    } finally {\n      options.signal?.removeEventListener('abort', abort)\n      await options.drain?.()\n    }\n  })()\n  const close = () => {\n    controller.abort()\n    return closed\n  }\n  return { closed, close }\n}\n"]}

package/dist/jobs/worker.d.ts

@@ -1,6 +1,9 @@
 import type { AnyDb } from '../dialect.js';
 import type { BunderstackLogger } from '../logging.js';
 import type { JobsDefs, JobsRuntimeFacade, TickResult } from './define.js';
+type PumpResult = {
+    wake?: Promise<void>;
+};
 export declare function createJobRunner(deps: {
     db: AnyDb;
     defs: JobsDefs;
@@ -9,6 +12,8 @@ export declare function createJobRunner(deps: {
     logger?: BunderstackLogger;
 }): {
     tick(now?: number): Promise<TickResult>;
+    pump: (now?: number) => Promise<PumpResult>;
+    drain: () => Promise<void>;
     inspect(now: number): Promise<{
         runnable: any;
         failed: {
@@ -30,4 +35,5 @@ export declare function createJobRunner(deps: {
     }>;
     setJobsFacade(f: JobsRuntimeFacade): void;
 };
+export {};
 //# sourceMappingURL=worker.d.ts.map

package/dist/jobs/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/jobs/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACnD,OAAO,KAAK,EAEV,QAAQ,EACR,iBAAiB,EACjB,UAAU,EACX,MAAM,UAAU,CAAA;AAiDjB,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,EAAE,EAAE,KAAK,CAAA;IACT,IAAI,EAAE,QAAQ,CAAA;IACd,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;eA+SmB,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;iBAStC,MAAM;;;;;;;;;;;;oBAiEb,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ;;;;;;;qBAQH,iBAAiB;EAIrC"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/jobs/worker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACnD,OAAO,KAAK,EAEV,QAAQ,EACR,iBAAiB,EACjB,UAAU,EACX,MAAM,UAAU,CAAA;AA4BjB,KAAK,UAAU,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAA;AAmC1C,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,EAAE,EAAE,KAAK,CAAA;IACT,IAAI,EAAE,QAAQ,CAAA;IACd,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;eA4WmB,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;iBAnBlC,MAAM,KAAgB,OAAO,CAAC,UAAU,CAAC;iBAa1C,OAAO,CAAC,IAAI,CAAC;iBAYhB,MAAM;;;;;;;;;;;;oBAiEb,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ;;;;;;;qBAQH,iBAAiB;EAIrC"}

package/dist/jobs/worker.js

@@ -12,6 +12,11 @@ import { CRON_PREFIX, floorSlot, slotsDue, SLOT_MS } from './slots.js';
 const CLAIM_BATCH = 10;
 const SUCCEEDED_RETENTION_MS = 24 * 60 * 60 * 1000;
 const REAP_INTERVAL_MS = 60 * 60_000;
+function capacityFor(def) {
+    return def.kind === 'job' && def.concurrency !== undefined
+        ? def.concurrency
+        : CLAIM_BATCH;
+}
 function toError(err) {
     return err instanceof Error ? err : new Error(String(err));
 }
@@ -38,6 +43,7 @@ export function createJobRunner(deps) {
     const t = jobsTableFor(db);
     const ctx = { ...deps.ctx };
     let lastReapAt = 0;
+    const active = new Map();
     /** Cron rows carry no payload — their handler input is the slot itself. */
     function resolveInput(def, row) {
         if (def.kind === 'cron') {
@@ -184,6 +190,27 @@ export function createJobRunner(deps) {
         });
         return rows;
     }
+    async function claimAvailable(type, def, now) {
+        const runningRows = await db
+            .select({ id: t.id })
+            .from(t)
+            .where(and(eq(t.type, type), eq(t.status, 'running')));
+        let available = capacityFor(def) - runningRows.length;
+        if (available <= 0)
+            return [];
+        const leaseUntil = now + (def.timeout ?? DEFAULT_TIMEOUT_MS);
+        const work = [];
+        while (available > 0) {
+            const limit = Math.min(CLAIM_BATCH, available);
+            const rows = await claim(type, limit, now, leaseUntil);
+            for (const row of rows)
+                work.push({ row, def, leaseUntil });
+            available -= rows.length;
+            if (rows.length < limit)
+                break;
+        }
+        return work;
+    }
     // `now` is the tick's injected clock: retry runAt math uses it so tests can
     // drive backoff deterministically. finishedAt uses the real clock (a handler
     // may run long past the tick's start).
@@ -267,22 +294,9 @@ export function createJobRunner(deps) {
         let totalClaimed = 0;
         for (const [name, def] of Object.entries(defs)) {
             const type = def.kind === 'cron' ? `${CRON_PREFIX}${name}` : name;
-            let limit = CLAIM_BATCH;
-            if (def.kind === 'job' && def.concurrency !== undefined) {
-                const runningRows = await db
-                    .select({ id: t.id })
-                    .from(t)
-                    .where(and(eq(t.type, type), eq(t.status, 'running')));
-                const capacity = def.concurrency - runningRows.length;
-                if (capacity <= 0)
-                    continue;
-                limit = Math.min(limit, capacity);
-            }
-            const leaseUntil = now + (def.timeout ?? DEFAULT_TIMEOUT_MS);
-            const claimed = await claim(type, limit, now, leaseUntil);
+            const claimed = await claimAvailable(type, def, now);
             totalClaimed += claimed.length;
-            for (const row of claimed)
-                claimedWork.push({ row, def, leaseUntil });
+            claimedWork.push(...claimed);
         }
         // Claim the whole tick snapshot before starting any handler. Work enqueued
         // by a handler therefore belongs to the next tick, regardless of the
@@ -298,16 +312,58 @@ export function createJobRunner(deps) {
         }
         return { claimed: totalClaimed, ran, failed };
     }
+    async function maintain(now) {
+        await materializeCronSlots(now);
+        await recoverExpiredLeases(now);
+        if (now - lastReapAt >= REAP_INTERVAL_MS) {
+            lastReapAt = now;
+            await reapSucceeded(now);
+        }
+    }
+    function startWork(type, work, claimedAt) {
+        let tasks = active.get(type);
+        if (!tasks) {
+            tasks = new Set();
+            active.set(type, tasks);
+        }
+        let task;
+        task = runJob(work.row, work.def, claimedAt, work.leaseUntil)
+            .then(() => undefined)
+            .catch((error) => {
+            logger.error('[bunderstack] background job execution failed:', error);
+        })
+            .finally(() => {
+            tasks.delete(task);
+            if (tasks.size === 0)
+                active.delete(type);
+        });
+        tasks.add(task);
+        return task;
+    }
+    async function pump(now = Date.now()) {
+        await maintain(now);
+        for (const [name, def] of Object.entries(defs)) {
+            const type = def.kind === 'cron' ? `${CRON_PREFIX}${name}` : name;
+            const work = await claimAvailable(type, def, now);
+            for (const item of work)
+                startWork(type, item, now);
+        }
+        const snapshot = [...active.values()].flatMap((tasks) => [...tasks]);
+        return snapshot.length === 0
+            ? {}
+            : { wake: Promise.race(snapshot).then(() => undefined) };
+    }
+    async function drain() {
+        const snapshot = [...active.values()].flatMap((tasks) => [...tasks]);
+        await Promise.allSettled(snapshot);
+    }
     return {
         async tick(now = Date.now()) {
-            await materializeCronSlots(now);
-            await recoverExpiredLeases(now);
-            if (now - lastReapAt >= REAP_INTERVAL_MS) {
-                lastReapAt = now;
-                await reapSucceeded(now);
-            }
+            await maintain(now);
             return runClaimable(now);
         },
+        pump,
+        drain,
         async inspect(now) {
             const runnableRows = await db
                 .select({ id: t.id })