typed-settings 0.1.4 → 0.2.1

package/dist/framework/next.cjs

@@ -1,1158 +1,5 @@
-'use strict';
-
-var yaml = require('yaml');
-var smolToml = require('smol-toml');
-
-// src/errors.ts
-var SECRET_RE = /key|secret|token|password|private/i;
-function redactValue(key, value) {
-  if (SECRET_RE.test(key) && typeof value === "string" && value.length > 0) {
-    if (value.length <= 8) return "(redacted)";
-    return `${value.slice(0, 3)}-*** (${value.length} chars)`;
-  }
-  return String(value);
-}
-function byteLengthUtf8(text) {
-  try {
-    const g = globalThis;
-    if (g.TextEncoder) return new g.TextEncoder().encode(text).length;
-    if (g.Buffer) return g.Buffer.byteLength(text, "utf8");
-  } catch {
-  }
-  return text.length;
-}
-var ConfigError = class extends Error {
-  code = "E_INVALID_CONFIG";
-  issues;
-  constructor(issues, code = "E_INVALID_CONFIG") {
-    const lines = issues.map(
-      (i) => `- ${i.path} (from ${i.from}): ${i.message}`
-    );
-    super(`Invalid config (${issues.length} issue${issues.length === 1 ? "" : "s"}):
-${lines.join("\n")}`);
-    this.name = "ConfigError";
-    this.code = code;
-    this.issues = issues;
-  }
-};
-
-// src/formats/env.ts
-function parseEnvText(text) {
-  const out = {};
-  if (text.charCodeAt(0) === 65279) text = text.slice(1);
-  const lines = splitLogicalLines(text);
-  for (const rawLine of lines) {
-    let line = rawLine.trim();
-    if (!line || line.startsWith("#")) continue;
-    if (line.startsWith("export ")) line = line.slice(7).trimStart();
-    const eq = line.indexOf("=");
-    if (eq === -1) {
-      throw new Error(`ParseError: bare key without '=': ${JSON.stringify(line)}`);
-    }
-    const key = line.slice(0, eq).trim();
-    let rest = line.slice(eq + 1).trimStart();
-    if (!key) throw new Error("ParseError: empty key");
-    out[key] = parseValue(rest);
-  }
-  return out;
-}
-function splitLogicalLines(text) {
-  const physical = text.split(/\r?\n/);
-  const out = [];
-  let buf = "";
-  let inDouble = false;
-  for (const pl of physical) {
-    if (!inDouble) {
-      const opens = countUnescapedQuotes(pl);
-      if (opens % 2 === 1 && isValueStartDoubleQuoted(pl)) {
-        buf = pl;
-        inDouble = true;
-      } else {
-        out.push(pl);
-      }
-    } else {
-      buf += "\n" + pl;
-      const opens = countUnescapedQuotes(buf.split("=").slice(1).join("="));
-      if (opens % 2 === 0) {
-        inDouble = false;
-        out.push(buf);
-        buf = "";
-      }
-    }
-  }
-  if (inDouble) throw new Error("ParseError: unterminated double-quoted value");
-  return out;
-}
-function isValueStartDoubleQuoted(line) {
-  const eq = line.indexOf("=");
-  if (eq === -1) return false;
-  const rest = line.slice(eq + 1).trimStart();
-  return rest.startsWith('"') && !rest.endsWith('"');
-}
-function countUnescapedQuotes(s) {
-  let n = 0;
-  for (let i = 0; i < s.length; i++) {
-    if (s[i] === '"' && s[i - 1] !== "\\") n++;
-  }
-  return n;
-}
-function parseValue(rest) {
-  if (!rest) return "";
-  if (rest.startsWith("'")) {
-    const end = rest.indexOf("'", 1);
-    if (end === -1) throw new Error("ParseError: unterminated single-quoted value");
-    return rest.slice(1, end);
-  }
-  if (rest.startsWith('"')) {
-    let i = 1;
-    let val = "";
-    while (i < rest.length) {
-      const c = rest[i];
-      if (c === "\\" && i + 1 < rest.length) {
-        const n = rest[i + 1];
-        if (n === "n") val += "\n";
-        else if (n === "r") val += "\r";
-        else if (n === "t") val += "	";
-        else val += n;
-        i += 2;
-        continue;
-      }
-      if (c === '"') break;
-      val += c;
-      i++;
-    }
-    if (rest[i] !== '"') throw new Error("ParseError: unterminated double-quoted value");
-    return val;
-  }
-  if (rest.startsWith("`")) throw new Error("ParseError: backtick values not supported");
-  const hash = findCommentStart(rest);
-  const v = (hash === -1 ? rest : rest.slice(0, hash)).trim();
-  return v;
-}
-function findCommentStart(s) {
-  for (let i = 0; i < s.length; i++) {
-    if (s[i] === "#" && (i === 0 || /\s/.test(s[i - 1]))) return i;
-  }
-  return -1;
-}
-
-// src/formats/json.ts
-function parseJsonText(text, from = "json") {
-  const stripped = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
-  if (!stripped.trim()) return {};
-  try {
-    return JSON.parse(stripped);
-  } catch (e) {
-    const err = e;
-    throw new Error(`ParseError (${from}): ${err.message}`);
-  }
-}
-function parseYamlText(text, from = "yaml") {
-  const stripped = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
-  if (!stripped.trim()) return {};
-  const docs = yaml.parseAllDocuments(stripped, {
-    version: "1.2",
-    uniqueKeys: true
-  }).filter((d) => {
-    if (d.errors.length > 0) return true;
-    try {
-      const v = d.toJS();
-      return v !== null && v !== void 0;
-    } catch {
-      return true;
-    }
-  });
-  if (docs.length === 0) return {};
-  if (docs.length > 1) {
-    throw new Error(`ParseError (${from}): multi-doc YAML not supported (got ${docs.length} documents)`);
-  }
-  const doc = docs[0];
-  if (doc.errors.length > 0) {
-    const first = doc.errors[0];
-    const line = first.linePos?.[0]?.line ?? "?";
-    throw new Error(`ParseError (${from}:${line}): ${first.message}`);
-  }
-  let value;
-  try {
-    value = doc.toJS();
-  } catch (e) {
-    throw new Error(`ParseError (${from}): ${e.message}`);
-  }
-  return value;
-}
-function parseTomlText(text, from = "toml") {
-  const stripped = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
-  if (!stripped.trim()) return {};
-  try {
-    return smolToml.parse(stripped);
-  } catch (e) {
-    const err = e;
-    throw new Error(`ParseError (${from}): ${err.message}`);
-  }
-}
-
-// src/expand.ts
-var NAME_RE = "[A-Za-z_][A-Za-z0-9_]*";
-function expandValue(input, lookup, opts) {
-  let out = "";
-  let i = 0;
-  while (i < input.length) {
-    const c = input[i];
-    if (c === "$" && input[i + 1] === "$") {
-      out += "$";
-      i += 2;
-      continue;
-    }
-    if (c === "\\" && input[i + 1] === "$") {
-      out += "$";
-      i += 2;
-      continue;
-    }
-    if (c !== "$") {
-      out += c;
-      i++;
-      continue;
-    }
-    const rest = input.slice(i);
-    if (rest.startsWith("${")) {
-      const parsed = parseBraced(input, i);
-      if (!parsed) {
-        out += "$";
-        i++;
-        continue;
-      }
-      const { name: name2, op, def, end } = parsed;
-      if (op && op !== ":-" && op !== "-") {
-        throw new ConfigError([
-          { path: name2, from: opts?.from ?? "env", message: `E_BAD_OP: only :- and - supported, got ${op}` }
-        ], "E_BAD_OP");
-      }
-      const val2 = lookup(name2);
-      const missing = val2 === void 0 || op === ":-" && val2 === "";
-      if (!missing) {
-        out += val2;
-      } else if (def !== void 0) {
-        out += expandValue(def, lookup, opts);
-      } else if (opts?.allowUnresolved) {
-        out += input.slice(i, end);
-      } else {
-        throw new ConfigError([
-          { path: name2, from: opts?.from ?? "env", message: `E_UNRESOLVED: ${name2} missing (expand)` }
-        ], "E_UNRESOLVED");
-      }
-      i = end;
-      continue;
-    }
-    const m = new RegExp(`^\\$(?<name>${NAME_RE})`).exec(rest);
-    if (!m || !m.groups) {
-      out += "$";
-      i++;
-      continue;
-    }
-    const name = m.groups["name"];
-    const val = lookup(name);
-    if (val === void 0) {
-      if (opts?.allowUnresolved) {
-        out += "$" + name;
-      } else {
-        throw new ConfigError([
-          { path: name, from: opts?.from ?? "env", message: `E_UNRESOLVED: ${name} missing (expand)` }
-        ], "E_UNRESOLVED");
-      }
-    } else {
-      out += val;
-    }
-    i += 1 + name.length;
-  }
-  return out;
-}
-function parseBraced(input, start) {
-  let i = start + 2;
-  const nameMatch = new RegExp(`^(?<name>${NAME_RE})`).exec(input.slice(i));
-  if (!nameMatch?.groups) return null;
-  const name = nameMatch.groups["name"];
-  i += name.length;
-  if (input[i] === "}") return { name, end: i + 1 };
-  if (input[i] === ":") {
-    const two = input.slice(i, i + 2);
-    if (two !== ":-") return { name, op: two[0] + (input[i + 1] ?? ""), def: "", end: input.length };
-    i += 2;
-    const { value, end } = readUntilCloseBrace(input, i);
-    return { name, op: ":-", def: value, end };
-  }
-  if (input[i] === "-") {
-    i += 1;
-    const { value, end } = readUntilCloseBrace(input, i);
-    return { name, op: "-", def: value, end };
-  }
-  return null;
-}
-function readUntilCloseBrace(input, start) {
-  let depth = 0;
-  let i = start;
-  let val = "";
-  while (i < input.length) {
-    if (input[i] === "\\" && input[i + 1] === "}") {
-      val += "}";
-      i += 2;
-      continue;
-    }
-    if (input[i] === "{") depth++;
-    if (input[i] === "}") {
-      if (depth === 0) return { value: val, end: i + 1 };
-      depth--;
-    }
-    val += input[i];
-    i++;
-  }
-  throw new Error("ParseError: unterminated ${}");
-}
-
-// src/coerce.ts
-function tryParseEnvValue(input) {
-  return tryParse(input, true);
-}
-function tryParse(input, allowSplit) {
-  if (typeof input !== "string") return input;
-  const s = input;
-  if (s === "") return "";
-  const low = s.toLowerCase();
-  if (low === "true" || low === "false") return low === "true";
-  if (low === "null") return null;
-  if (low === "undefined") return void 0;
-  if (/^-?\d+$/.test(s)) {
-    const n = Number(s);
-    if (Number.isSafeInteger(n)) return n;
-    return s;
-  }
-  if (/^-?(\d+\.\d*|\.\d+|\d+)(e[+-]?\d+)?$/i.test(s) && s !== "-" && s !== ".") {
-    const n = Number(s);
-    if (Number.isFinite(n)) return n;
-    return s;
-  }
-  if (["yes", "y", "on"].includes(low)) return true;
-  if (["no", "n", "off"].includes(low)) return false;
-  const t = s.trim();
-  if (t.startsWith("{") && t.endsWith("}") || t.startsWith("[") && t.endsWith("]")) {
-    try {
-      return JSON.parse(t);
-    } catch {
-      return input;
-    }
-  }
-  if (allowSplit && s.includes(",")) {
-    const parts = splitCsv(s);
-    if (parts !== null) return parts.map((p) => tryParse(p, false));
-  }
-  return input;
-}
-function splitCsv(s) {
-  const out = [];
-  let cur = "";
-  let quote = null;
-  for (let i = 0; i < s.length; i++) {
-    const c = s[i];
-    if (quote) {
-      if (c === "\\" && i + 1 < s.length) {
-        cur += c + s[i + 1];
-        i++;
-        continue;
-      }
-      if (c === quote) {
-        quote = null;
-        cur += c;
-        continue;
-      }
-      cur += c;
-      continue;
-    }
-    if (c === '"' || c === "'") {
-      quote = c;
-      cur += c;
-      continue;
-    }
-    if (c === "\\" && s[i + 1] === ",") {
-      cur += ",";
-      i++;
-      continue;
-    }
-    if (c === ",") {
-      out.push(cur.trim());
-      cur = "";
-      continue;
-    }
-    cur += c;
-  }
-  if (quote) return null;
-  out.push(cur.trim());
-  return out.map((p) => {
-    if (p.length >= 2 && p.startsWith("'") && p.endsWith("'")) return p.slice(1, -1).replace(/\\,/g, ",");
-    if (p.length >= 2 && p.startsWith('"') && p.endsWith('"')) return p.slice(1, -1);
-    return p.replace(/\\,/g, ",");
-  });
-}
-function coerceDeep(value) {
-  if (typeof value === "string") return tryParseEnvValue(value);
-  if (Array.isArray(value)) return value.map(coerceDeep);
-  if (value && typeof value === "object") {
-    const o = {};
-    for (const [k, v] of Object.entries(value)) o[k] = coerceDeep(v);
-    return o;
-  }
-  return value;
-}
-
-// src/merge.ts
-var FORBIDDEN = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
-var INDEX_RE = /^(0|[1-9][0-9]*)$/;
-function stripPrefix(key, prefix) {
-  return key;
-}
-function expandKeys(flat, opts) {
-  const out = {};
-  const topKinds = /* @__PURE__ */ new Map();
-  const kindOf = (top) => {
-    let k = topKinds.get(top);
-    if (!k) {
-      k = { indexed: false, named: false, scalar: false };
-      topKinds.set(top, k);
-    }
-    return k;
-  };
-  const lookupEnvMap = (rawKey) => {
-    if (!opts?.envMap) return void 0;
-    for (const cand of [rawKey, rawKey.toLowerCase(), rawKey.toUpperCase()]) {
-      const hit = opts.envMap[cand];
-      if (hit !== void 0) return hit;
-    }
-    return void 0;
-  };
-  for (const [rawKey, value] of Object.entries(flat)) {
-    if (!/^[A-Za-z0-9_]+$/.test(rawKey)) continue;
-    const escaped = lookupEnvMap(rawKey);
-    const effective = escaped ?? rawKey;
-    if (escaped !== void 0) {
-      const k = effective.toLowerCase();
-      if (FORBIDDEN.has(k)) throw new ConfigError([{ path: rawKey, from: "keys", message: "E_PROTO" }], "E_PROTO");
-      out[k] = value;
-      continue;
-    }
-    const stripped = stripPrefix(rawKey);
-    if (stripped === null) continue;
-    const useKey = stripped;
-    if (FORBIDDEN.has(useKey.toLowerCase())) throw new ConfigError([{ path: rawKey, from: "keys", message: "E_PROTO: forbidden key" }], "E_PROTO");
-    const parts = useKey.split("__");
-    const cleanSplit = parts.length > 1 && parts.every((p) => p !== "");
-    if (cleanSplit) {
-      for (const p of parts) {
-        if (FORBIDDEN.has(p.toLowerCase())) throw new ConfigError([{ path: rawKey, from: "keys", message: "E_PROTO: forbidden key" }], "E_PROTO");
-      }
-      const lowered = parts.map((p) => p.toLowerCase());
-      const top = lowered[0];
-      const kind = kindOf(top);
-      const childIsIndex = lowered.length > 1 && INDEX_RE.test(lowered[1]);
-      if (kind.scalar && childIsIndex) {
-        throw new ConfigError(
-          [{ path: rawKey, from: "keys", message: `E_ARRAY_MIX: '${top}' has both scalar/list and indexed (__0) values in the same layer` }],
-          "E_ARRAY_MIX"
-        );
-      }
-      if (childIsIndex) {
-        if (kind.named) {
-          throw new ConfigError(
-            [{ path: rawKey, from: "keys", message: `E_ARRAY_MIX: '${top}' mixes indexed (__0) and named children in the same layer` }],
-            "E_ARRAY_MIX"
-          );
-        }
-        kind.indexed = true;
-      } else if (lowered.length > 1) {
-        if (kind.indexed) {
-          throw new ConfigError(
-            [{ path: rawKey, from: "keys", message: `E_ARRAY_MIX: '${top}' mixes named and indexed (__0) children in the same layer` }],
-            "E_ARRAY_MIX"
-          );
-        }
-        kind.named = true;
-      }
-      setPath(out, lowered, value);
-    } else {
-      const k = useKey.toLowerCase();
-      const kind = kindOf(k);
-      if (kind.indexed) {
-        throw new ConfigError(
-          [{ path: rawKey, from: "keys", message: `E_ARRAY_MIX: '${k}' has both indexed (__0) and scalar/list values in the same layer` }],
-          "E_ARRAY_MIX"
-        );
-      }
-      kind.scalar = true;
-      out[k] = value;
-    }
-  }
-  return out;
-}
-function normalizeIndexedObjects(value, path = "<root>") {
-  if (Array.isArray(value)) return value.map((x, i) => normalizeIndexedObjects(x, `${path}[${i}]`));
-  if (!isPlainObject(value)) return value;
-  const entries = Object.entries(value);
-  const normalized = {};
-  for (const [k, v] of entries) {
-    normalized[k] = normalizeIndexedObjects(v, path === "<root>" ? k : `${path}.${k}`);
-  }
-  if (entries.length > 0 && entries.every(([k]) => INDEX_RE.test(k))) {
-    const idx = entries.map(([k]) => Number(k)).sort((a, b) => a - b);
-    if (idx.length > 1024) {
-      throw new ConfigError([{ path, from: "keys", message: "E_ARRAY_CAP: >1024 elements" }], "E_ARRAY_CAP");
-    }
-    for (let i = 0; i < idx.length; i++) {
-      if (idx[i] !== i) {
-        throw new ConfigError(
-          [{ path, from: "keys", message: `E_SPARSE_ARRAY: indexes [${idx.join(",")}] are not dense 0..${idx.length - 1}` }],
-          "E_SPARSE_ARRAY"
-        );
-      }
-    }
-    return idx.map((_, i) => normalized[String(i)]);
-  }
-  return normalized;
-}
-function setPath(root, parts, value) {
-  let cur = root;
-  for (let i = 0; i < parts.length - 1; i++) {
-    const p = parts[i];
-    const existing = cur[p];
-    if (existing && typeof existing === "object" && !Array.isArray(existing)) {
-      cur = existing;
-    } else {
-      const n = {};
-      cur[p] = n;
-      cur = n;
-    }
-  }
-  cur[parts[parts.length - 1]] = value;
-}
-function isPlainObject(v) {
-  if (!v || typeof v !== "object") return false;
-  const proto = Object.getPrototypeOf(v);
-  return proto === Object.prototype || proto === null;
-}
-function deepMerge(base, override, arrayStrategy = "replace") {
-  if (override === void 0) return base;
-  if (base === void 0) return override;
-  if (override === null) return null;
-  if (Array.isArray(base) && Array.isArray(override)) {
-    if (arrayStrategy === "replace") return override;
-    if (arrayStrategy === "concat") return [...base, ...override];
-    const len = Math.max(base.length, override.length);
-    if (len > 1024) throw new ConfigError([{ path: "<array>", from: "merge", message: "E_ARRAY_CAP: >1024" }], "E_ARRAY_CAP");
-    const out = [];
-    for (let i = 0; i < len; i++) {
-      if (i in override) {
-        out[i] = i in base ? deepMerge(base[i], override[i], arrayStrategy) : override[i];
-      } else if (i in base) {
-        out[i] = base[i];
-      }
-    }
-    for (let i = 0; i < len; i++) {
-      if (!(i in out)) {
-        throw new ConfigError(
-          [{ path: `<array>[${i}]`, from: "merge", message: "E_SPARSE_ARRAY: hole at index " + i }],
-          "E_SPARSE_ARRAY"
-        );
-      }
-    }
-    return out;
-  }
-  if (isPlainObject(base) && isPlainObject(override)) {
-    const out = { ...base };
-    for (const [k, v] of Object.entries(override)) {
-      if (FORBIDDEN.has(k)) throw new ConfigError([{ path: k, from: "merge", message: "E_PROTO" }], "E_PROTO");
-      out[k] = k in out ? deepMerge(out[k], v, arrayStrategy) : v;
-    }
-    return out;
-  }
-  return override;
-}
-
-// src/adapter.ts
-function normalizePath(path) {
-  if (!path || path.length === 0) return "<root>";
-  const parts = [];
-  for (const seg of path) {
-    if (seg !== null && typeof seg === "object" && "key" in seg) {
-      parts.push(String(seg.key));
-    } else {
-      parts.push(String(seg));
-    }
-  }
-  return parts.join(".");
-}
-function validateStandard(schema, input) {
-  let r;
-  try {
-    r = schema["~standard"].validate(input);
-  } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
-    return { issues: [{ path: "<root>", message: msg }], async: false };
-  }
-  if (typeof r?.then === "function") {
-    const p = r.then(
-      (resolved) => normalizeResult(resolved),
-      (e) => ({ ok: false, issues: [{ path: "<root>", message: e instanceof Error ? e.message : String(e) }] })
-    );
-    return { promise: p };
-  }
-  const n = normalizeResult(r);
-  if (!n.ok) return { issues: n.issues, async: false };
-  return { value: n.value };
-}
-function normalizeResult(r) {
-  if (!r.issues || r.issues.length === 0) {
-    return { ok: true, value: r.value };
-  }
-  return {
-    ok: false,
-    issues: r.issues.map((i) => ({ path: normalizePath(i.path), message: i.message }))
-  };
-}
-
-// src/index.ts
-function getEnvSnapshot(injected) {
-  if (injected) return injected;
-  const g = globalThis;
-  if (g.process?.env) return { ...g.process.env };
-  return {};
-}
-function isSecretKey(key) {
-  return /key|secret|token|password|private/i.test(key);
-}
-function pickPublic(cfg, keys) {
-  const out = {};
-  for (const k of keys) if (k in cfg) out[k] = cfg[k];
-  return out;
-}
-function readFileSyncSafe(path, maxBytes = 2 * 1024 * 1024) {
-  const getFs = () => {
-    const injected = globalThis.__typedSettingsFs;
-    if (injected) return injected;
-    const g = globalThis;
-    if (g.process) {
-      const fn = new Function('return typeof require !== "undefined" ? require("node:fs") : null')();
-      if (!fn) {
-        throw new ConfigError(
-          [{ path, from: path, message: "E_NO_FS: file sources need `typed-settings/node` under ESM (or pass { text }/{ map })" }],
-          "E_NO_FS"
-        );
-      }
-      return fn;
-    }
-    return null;
-  };
-  try {
-    const fs = getFs();
-    if (!fs) return void 0;
-    const text = fs.readFileSync(path, "utf8");
-    if (byteLengthUtf8(text) > maxBytes) {
-      throw new ConfigError(
-        [{ path, from: path, message: `E_FILE_TOO_LARGE: >${maxBytes} bytes` }],
-        "E_FILE_TOO_LARGE"
-      );
-    }
-    return text;
-  } catch (e) {
-    if (e instanceof ConfigError) throw e;
-    const err = e;
-    if (err?.code === "ENOENT") return void 0;
-    throw e;
-  }
-}
-function parseStructuredFile(path, text) {
-  const lower = path.toLowerCase();
-  try {
-    if (lower.endsWith(".json")) return parseJsonText(text, path);
-    if (lower.endsWith(".yaml") || lower.endsWith(".yml")) return parseYamlText(text, path);
-    return parseTomlText(text, path);
-  } catch (e) {
-    const err = e;
-    throw new ConfigError([{ path, from: path, message: err.message }], "E_PARSE");
-  }
-}
-function stripFlatKey(key, effPrefix) {
-  if (!effPrefix) return key;
-  if (key.length <= effPrefix.length) return null;
-  if (key.slice(0, effPrefix.length).toLowerCase() !== effPrefix.toLowerCase()) return null;
-  return key.slice(effPrefix.length);
-}
-function assertAcyclic(value, label) {
-  const visiting = /* @__PURE__ */ new Set();
-  const visit = (v, path) => {
-    if (!v || typeof v !== "object") return;
-    if (visiting.has(v)) {
-      throw new ConfigError(
-        [{ path, from: label, message: `E_CYCLE: cyclic value at ${path} (from ${label})` }],
-        "E_CYCLE"
-      );
-    }
-    visiting.add(v);
-    try {
-      for (const [k, child] of Object.entries(v)) visit(child, path ? `${path}.${k}` : k);
-    } finally {
-      visiting.delete(v);
-    }
-  };
-  visit(value, "");
-}
-function flatToLayer(m, label, srcPrefix, globalPrefix, opts, skipExpand) {
-  assertAcyclic(m, label);
-  const effPrefix = srcPrefix ?? globalPrefix;
-  const stripped = {};
-  for (const [k, v] of Object.entries(m)) {
-    const s = stripFlatKey(k, effPrefix);
-    if (s === null) continue;
-    stripped[s] = v;
-  }
-  const node = normalizeIndexedObjects(
-    expandKeys(stripped, { envMap: opts.envMap })
-  );
-  return { node, label, skipExpand };
-}
-function structuredToLayer(value, label, prefix) {
-  assertAcyclic(value, label);
-  if (!isPlainObject(value)) return { node: value ?? {}, label, skipExpand: false };
-  const out = {};
-  for (const [k, v] of Object.entries(value)) {
-    if (["__proto__", "constructor", "prototype"].includes(k)) {
-      throw new ConfigError([{ path: k, from: label, message: "E_PROTO: forbidden key" }], "E_PROTO");
-    }
-    if (prefix) {
-      const s = stripFlatKey(k, prefix);
-      if (s === null) continue;
-      out[s] = v;
-    } else {
-      out[k] = v;
-    }
-  }
-  return { node: out, label, skipExpand: false };
-}
-function recordLayerFrom(fromMap, layer) {
-  const node = layer.node;
-  if (node && typeof node === "object" && !Array.isArray(node)) {
-    for (const k of Object.keys(node)) fromMap.set(k.toLowerCase(), layer.label);
-  }
-}
-function isThenable(v) {
-  return !!v && (typeof v === "object" || typeof v === "function") && typeof v.then === "function";
-}
-function asProvider(src) {
-  if (!("provider" in src || "load" in src)) return null;
-  const prov = "provider" in src ? src.provider : src;
-  if (!prov || typeof prov.load !== "function") return null;
-  return { load: prov.load, name: typeof prov.name === "string" ? prov.name : "<provider>" };
-}
-function timeoutError(name) {
-  return new ConfigError([{ path: name, from: name, message: "E_TIMEOUT: provider load timed out" }], "E_TIMEOUT");
-}
-function collectSources(opts, envSnapshot) {
-  const sources = opts.sources ?? [".env", "env"];
-  const prefix = opts.prefix;
-  const layers = [];
-  const fromMap = /* @__PURE__ */ new Map();
-  const maxBytes = opts.maxBytes ?? 2 * 1024 * 1024;
-  const push = (layer) => {
-    layers.push(layer);
-    recordLayerFrom(fromMap, layer);
-  };
-  const parseEnv = (text, label) => {
-    try {
-      return parseEnvText(text);
-    } catch (e) {
-      const err = e;
-      throw new ConfigError([{ path: label, from: label, message: err.message }], "E_PARSE");
-    }
-  };
-  for (const src of sources) {
-    if (src === "env") {
-      push(flatToLayer({ ...envSnapshot }, "env", void 0, prefix, opts, false));
-    } else if (src === ".env" || src === ".env.local") {
-      const text = readFileSyncSafe(src, maxBytes);
-      if (text === void 0) continue;
-      push(flatToLayer(parseEnv(text, src), src, void 0, prefix, opts, false));
-    } else if (typeof src === "string") {
-      const text = readFileSyncSafe(src, maxBytes);
-      if (text === void 0) continue;
-      const lower = src.toLowerCase();
-      if (lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml")) {
-        push(structuredToLayer(parseStructuredFile(src, text), src, prefix));
-      } else {
-        push(flatToLayer(parseEnv(text, src), src, void 0, prefix, opts, false));
-      }
-    } else if (src && typeof src === "object" && "text" in src) {
-      push(flatToLayer(parseEnv(src.text, "text"), "text", void 0, prefix, opts, false));
-    } else if (src && typeof src === "object" && "map" in src) {
-      const m = src;
-      push(flatToLayer(m.map ?? {}, "overrides", m.prefix, prefix, opts, false));
-    } else if (src && typeof src === "object" && "file" in src) {
-      const p = src.file;
-      const text = readFileSyncSafe(p, maxBytes);
-      if (text === void 0) continue;
-      const lower = p.toLowerCase();
-      if (lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml")) {
-        push(structuredToLayer(parseStructuredFile(p, text), p, prefix));
-      } else {
-        push(flatToLayer(parseEnv(text, p), p, void 0, prefix, opts, false));
-      }
-    } else if (src && typeof src === "object" && "dir" in src) {
-      continue;
-    } else if (src && typeof src === "object") {
-      const prov = asProvider(src);
-      if (prov) {
-        const srcPrefix = "prefix" in src ? src.prefix : void 0;
-        const loaded = prov.load();
-        if (isThenable(loaded)) {
-          throw new ConfigError(
-            [{ path: "<provider>", from: prov.name, message: "USE_ASYNC: provider is async, use settingsAsync()" }],
-            "USE_ASYNC"
-          );
-        }
-        push(flatToLayer(loaded ?? {}, prov.name, srcPrefix, prefix, opts, !opts.expandSecrets));
-      } else {
-        push(flatToLayer(src, "overrides", void 0, prefix, opts, false));
-      }
-    }
-  }
-  return { layers, fromMap };
-}
-async function collectSourcesAsync(opts, envSnapshot) {
-  const timeoutMs = opts.timeoutMs ?? 5e3;
-  const needsAsync = (opts.sources ?? []).some((s) => s && typeof s === "object" && asProvider(s) !== null);
-  if (!needsAsync) return collectSources(opts, envSnapshot);
-  const sources = opts.sources;
-  const prefix = opts.prefix;
-  const layers = [];
-  const fromMap = /* @__PURE__ */ new Map();
-  const maxBytes = opts.maxBytes ?? 2 * 1024 * 1024;
-  const push = (layer) => {
-    layers.push(layer);
-    recordLayerFrom(fromMap, layer);
-  };
-  const parseEnv = (text, label) => {
-    try {
-      return parseEnvText(text);
-    } catch (e) {
-      const err = e;
-      throw new ConfigError([{ path: label, from: label, message: err.message }], "E_PARSE");
-    }
-  };
-  const withTimeout = async (name, fn) => {
-    let t;
-    const timeout = new Promise((_, rej) => {
-      t = setTimeout(() => rej(timeoutError(name)), timeoutMs);
-    });
-    const winner = await Promise.race([Promise.resolve().then(fn), timeout]).catch((e) => {
-      clearTimeout(t);
-      if (e instanceof ConfigError) throw e;
-      const err = e;
-      throw new ConfigError(
-        [{ path: name, from: name, message: `E_PROVIDER: ${err?.message ?? String(e)}` }],
-        "E_PROVIDER"
-      );
-    });
-    clearTimeout(t);
-    return winner;
-  };
-  for (const src of sources) {
-    if (src === "env") {
-      push(flatToLayer({ ...envSnapshot }, "env", void 0, prefix, opts, false));
-    } else if (src === ".env" || src === ".env.local") {
-      const text = readFileSyncSafe(src, maxBytes);
-      if (text === void 0) continue;
-      push(flatToLayer(parseEnv(text, src), src, void 0, prefix, opts, false));
-    } else if (typeof src === "string") {
-      const text = readFileSyncSafe(src, maxBytes);
-      if (text === void 0) continue;
-      const lower = src.toLowerCase();
-      if (lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml")) {
-        push(structuredToLayer(parseStructuredFile(src, text), src, prefix));
-      } else {
-        push(flatToLayer(parseEnv(text, src), src, void 0, prefix, opts, false));
-      }
-    } else if (src && typeof src === "object" && "text" in src) {
-      push(flatToLayer(parseEnv(src.text, "text"), "text", void 0, prefix, opts, false));
-    } else if (src && typeof src === "object" && "map" in src) {
-      const m = src;
-      push(flatToLayer(m.map ?? {}, "overrides", m.prefix, prefix, opts, false));
-    } else if (src && typeof src === "object" && "file" in src) {
-      const p = src.file;
-      const text = readFileSyncSafe(p, maxBytes);
-      if (text === void 0) continue;
-      const lower = p.toLowerCase();
-      if (lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml")) {
-        push(structuredToLayer(parseStructuredFile(p, text), p, prefix));
-      } else {
-        push(flatToLayer(parseEnv(text, p), p, void 0, prefix, opts, false));
-      }
-    } else if (src && typeof src === "object" && "dir" in src) {
-      continue;
-    } else if (src && typeof src === "object") {
-      const prov = asProvider(src);
-      if (prov) {
-        const srcPrefix = "prefix" in src ? src.prefix : void 0;
-        const loaded = await withTimeout(prov.name, () => prov.load());
-        push(flatToLayer(loaded ?? {}, prov.name, srcPrefix, prefix, opts, !opts.expandSecrets));
-      } else {
-        push(flatToLayer(src, "overrides", void 0, prefix, opts, false));
-      }
-    }
-  }
-  return { layers, fromMap };
-}
-function buildConfigObject(opts, envSnapshot) {
-  const { layers, fromMap } = collectSources(opts, envSnapshot);
-  const arrayStrategy = opts.arrayStrategy ?? "replace";
-  let merged = {};
-  for (const layer of layers) {
-    merged = deepMerge(merged, layer.node, arrayStrategy);
-  }
-  const skipTops = new Set(
-    layers.filter((l) => l.skipExpand).flatMap((l) => Object.keys(l.node)).map((k) => k.toLowerCase())
-  );
-  if (opts.expand !== false) {
-    merged = expandDeepStrings(merged, makeLookup(merged, envSnapshot), {
-      allowUnresolved: opts.allowUnresolved,
-      fromMap,
-      skipTops
-    });
-  }
-  if (opts.coerce !== false) {
-    merged = coerceDeep(merged);
-  }
-  const fromFor = (path) => {
-    const top = path.split(".")[0].toLowerCase();
-    if (top === "<root>") return "schema";
-    return fromMap.get(top) ?? "defaults";
-  };
-  return { input: merged, fromFor };
-}
-function makeLookup(merged, envSnapshot) {
-  const rec = merged && typeof merged === "object" && !Array.isArray(merged) ? merged : {};
-  const ciKeys = new Map(Object.keys(rec).map((k) => [k.toLowerCase(), k]));
-  return (name) => {
-    const hit = ciKeys.get(name.toLowerCase());
-    if (hit !== void 0) {
-      const direct = rec[hit];
-      if (typeof direct === "string") return direct;
-      if (direct !== void 0 && direct !== null) return String(direct);
-    }
-    return envSnapshot[name] ?? envSnapshot[name.toUpperCase()] ?? envSnapshot[name.toLowerCase()];
-  };
-}
-function expandDeepStrings(obj, lookup, ctx, path = []) {
-  if (typeof obj === "string") {
-    const top = (path[0] ?? "<root>").toLowerCase();
-    const from = ctx.fromMap.get(top) ?? "config";
-    try {
-      return expandLeaf(obj, lookup, { ...ctx, from }, path.map((p) => p.toLowerCase()));
-    } catch (e) {
-      if (from === "env") return obj;
-      throw e;
-    }
-  }
-  if (Array.isArray(obj)) return obj.map((x, i) => expandDeepStrings(x, lookup, ctx, [...path, String(i)]));
-  if (obj && typeof obj === "object") {
-    if (path.length === 0) {
-      const o2 = {};
-      for (const [k, v] of Object.entries(obj)) {
-        o2[k] = ctx.skipTops.has(k.toLowerCase()) ? v : expandDeepStrings(v, lookup, ctx, [k]);
-      }
-      return o2;
-    }
-    const o = {};
-    for (const [k, v] of Object.entries(obj)) o[k] = expandDeepStrings(v, lookup, ctx, [...path, k]);
-    return o;
-  }
-  return obj;
-}
-function expandLeaf(value, lookup, ctx, stack) {
-  return expandValue(
-    value,
-    (name) => {
-      const lower = name.toLowerCase();
-      if (stack.includes(lower)) {
-        throw new ConfigError(
-          [{ path: name, from: ctx.from, message: `E_CIRCULAR: $${[...stack, name].join("->$")}` }],
-          "E_CIRCULAR"
-        );
-      }
-      const raw = lookup(name);
-      if (raw === void 0) return void 0;
-      if (raw.includes("$")) return expandLeaf(raw, lookup, ctx, [...stack, lower]);
-      return raw;
-    },
-    { allowUnresolved: ctx.allowUnresolved, from: ctx.from }
-  );
-}
-function collectLeafPaths(v, prefix = "") {
-  if (Array.isArray(v)) {
-    const out = [];
-    v.forEach((x, i) => out.push(...collectLeafPaths(x, prefix ? `${prefix}.${i}` : `${i}`)));
-    return out;
-  }
-  if (isPlainObject(v)) {
-    const out = [];
-    for (const [k, val] of Object.entries(v)) {
-      const p = prefix ? `${prefix}.${k.toLowerCase()}` : k.toLowerCase();
-      if (isPlainObject(val) || Array.isArray(val)) out.push(...collectLeafPaths(val, p));
-      else out.push(p);
-    }
-    return out;
-  }
-  return prefix ? [prefix.toLowerCase()] : [];
-}
-function applyUnknownKeys(input, value, mode) {
-  if (mode === "strip" || mode === void 0) return value;
-  if (mode === "preserve") {
-    if (isPlainObject(input) && isPlainObject(value)) return deepMerge(input, value, "replace");
-    return value;
-  }
-  const inputPaths = new Set(collectLeafPaths(input));
-  const valuePaths = new Set(collectLeafPaths(value));
-  const unknown = [...inputPaths].filter((p) => !valuePaths.has(p));
-  if (unknown.length > 0) {
-    throw new ConfigError(
-      unknown.map((p) => ({ path: p, from: "schema", message: "E_UNKNOWN_KEY: unknown key (unknownKeys=reject)" })),
-      "E_UNKNOWN_KEY"
-    );
-  }
-  return value;
-}
-function freezeDeep(v) {
-  if (Array.isArray(v)) {
-    for (const x of v) freezeDeep(x);
-    return Object.freeze(v);
-  }
-  if (v && typeof v === "object") {
-    for (const k of Object.keys(v)) freezeDeep(v[k]);
-    return Object.freeze(v);
-  }
-  return v;
-}
-function settings(opts) {
-  const envSnapshot = getEnvSnapshot(opts.env);
-  const { input, fromFor } = buildConfigObject(opts, envSnapshot);
-  const r = validateStandard(opts.schema, input);
-  if ("promise" in r) {
-    throw new ConfigError(
-      [{ path: "<root>", from: "schema", message: "USE_ASYNC: schema is async, use settingsAsync()" }],
-      "USE_ASYNC"
-    );
-  }
-  if ("issues" in r) {
-    throw new ConfigError(
-      r.issues.map((i) => ({ path: i.path, from: fromFor(i.path), message: maskIfSecret(i.path, i.message, input) }))
-    );
-  }
-  const value = r.value;
-  const final = applyUnknownKeys(input, value, opts.unknownKeys ?? "strip");
-  return opts.freeze === false ? final : freezeDeep(final);
-}
-async function settingsAsync(opts) {
-  const timeoutMs = opts.timeoutMs ?? 5e3;
-  const envSnapshot = getEnvSnapshot(opts.env);
-  const { input, fromFor } = await buildConfigObjectAsync(opts, envSnapshot);
-  const r = validateStandard(opts.schema, input);
-  if ("promise" in r) {
-    const raced = await Promise.race([
-      r.promise,
-      new Promise((_, rej) => setTimeout(() => rej(new ConfigError([{ path: "<root>", from: "schema", message: "E_TIMEOUT" }], "E_TIMEOUT")), timeoutMs))
-    ]);
-    if (!raced.ok) {
-      throw new ConfigError(raced.issues.map((i) => ({ path: i.path, from: fromFor(i.path), message: maskIfSecret(i.path, i.message, input) })));
-    }
-    const value2 = raced.value;
-    const final2 = applyUnknownKeys(input, value2, opts.unknownKeys ?? "strip");
-    return opts.freeze === false ? final2 : freezeDeep(final2);
-  }
-  if ("issues" in r) {
-    throw new ConfigError(r.issues.map((i) => ({ path: i.path, from: fromFor(i.path), message: maskIfSecret(i.path, i.message, input) })));
-  }
-  const value = r.value;
-  const final = applyUnknownKeys(input, value, opts.unknownKeys ?? "strip");
-  return opts.freeze === false ? final : freezeDeep(final);
-}
-async function buildConfigObjectAsync(opts, envSnapshot) {
-  const { layers, fromMap } = await collectSourcesAsync(opts, envSnapshot);
-  const arrayStrategy = opts.arrayStrategy ?? "replace";
-  let merged = {};
-  for (const layer of layers) {
-    merged = deepMerge(merged, layer.node, arrayStrategy);
-  }
-  const skipTops = new Set(
-    layers.filter((l) => l.skipExpand).flatMap((l) => Object.keys(l.node)).map((k) => k.toLowerCase())
-  );
-  if (opts.expand !== false) {
-    merged = expandDeepStrings(merged, makeLookup(merged, envSnapshot), {
-      allowUnresolved: opts.allowUnresolved,
-      fromMap,
-      skipTops
-    });
-  }
-  if (opts.coerce !== false) merged = coerceDeep(merged);
-  const fromFor = (path) => {
-    const top = path.split(".")[0].toLowerCase();
-    if (top === "<root>") return "schema";
-    return fromMap.get(top) ?? "defaults";
-  };
-  return { input: merged, fromFor };
-}
-function getLeafByPath(input, path) {
-  const parts = path.split(".");
-  let cur = input;
-  for (const part of parts) {
-    if (cur === null || typeof cur !== "object") return void 0;
-    if (Array.isArray(cur)) {
-      const m = /\[(\d+)\]/.exec(part);
-      const idx = m ? Number(m[1]) : Number(part);
-      if (!Number.isInteger(idx)) return void 0;
-      cur = cur[idx];
-      continue;
-    }
-    const rec = cur;
-    const found = Object.keys(rec).find((k) => k.toLowerCase() === part.toLowerCase());
-    if (!found) return void 0;
-    cur = rec[found];
-  }
-  return cur;
-}
-function base64Of(s) {
-  try {
-    const g = globalThis;
-    if (g.btoa) return g.btoa(s);
-    if (g.Buffer) return g.Buffer.from(s, "utf8").toString("base64");
-  } catch {
-  }
-  return null;
-}
-function maskIfSecret(path, message, input) {
-  if (!isSecretKey(path)) return message;
-  let out = message;
-  const leaf = getLeafByPath(input, path);
-  if (typeof leaf === "string" && leaf.length > 0) {
-    const redacted = redactValue(path, leaf);
-    out = out.split(leaf).join(redacted);
-    const b64 = base64Of(leaf);
-    if (b64 && b64.length > 8) out = out.split(b64).join(redacted);
-  }
-  return `${out} (redacted)`;
-}
-
-// src/framework/next.ts
-function publicSettings(cfg, keys) {
-  const out = {};
-  for (const k of keys) if (k in cfg) out[k] = cfg[k];
-  return out;
-}
-
-exports.ConfigError = ConfigError;
-exports.pickPublic = pickPublic;
-exports.publicSettings = publicSettings;
-exports.settings = settings;
-exports.settingsAsync = settingsAsync;
+'use strict';var yaml=require('yaml'),smolToml=require('smol-toml');var we=/key|secret|token|password|private/i;function C(e,n){if(we.test(e))return  true;if(n){for(let t of n)if(typeof t=="string"){if(t&&e.toLowerCase().includes(t.toLowerCase()))return  true}else if(t instanceof RegExp){if(t.lastIndex=0,t.test(e))return  true}else if(t!==null&&typeof t=="object"&&typeof t.test=="function"&&t.test(e))return  true}return  false}function q(e,n,t){return C(e,t)&&typeof n=="string"&&n.length>0?n.length<=8?"(redacted)":`(redacted: ${n.length} chars)`:String(n)}function G(e){try{let n=globalThis;if(n.TextEncoder)return new n.TextEncoder().encode(e).length;if(n.Buffer)return n.Buffer.byteLength(e,"utf8")}catch{}return e.length}var l=class extends Error{code="E_INVALID_CONFIG";issues;static[Symbol.hasInstance](n){return typeof n=="object"&&n!==null&&n.name==="ConfigError"&&typeof n.code=="string"&&Array.isArray(n.issues)}constructor(n=[],t="E_INVALID_CONFIG"){let s=n.map(r=>`- ${r.path} (from ${r.from}): ${r.message}`);super(n.length===0?"Invalid config: unknown error (no issues attached)":`Invalid config (${n.length} issue${n.length===1?"":"s"}):
+${s.join(`
+`)}`),this.name="ConfigError",this.code=t,this.issues=n;}};function F(e){let n={};e.charCodeAt(0)===65279&&(e=e.slice(1));let t=Se(e);for(let s of t){let r=s.trim();if(!r||r.startsWith("#"))continue;r.startsWith("export ")&&(r=r.slice(7).trimStart());let o=r.indexOf("=");if(o===-1)throw new Error(`ParseError: bare key without '=': ${JSON.stringify(r)}`);let i=r.slice(0,o).trim(),a=r.slice(o+1).trimStart();if(!i)throw new Error("ParseError: empty key");let{value:f,quoted:c}=_e(a,r);n[i]=c&&!ye(f)?Ee(f):f;}return n}function ye(e){let n=e.trim();return n.startsWith("{")&&n.endsWith("}")||n.startsWith("[")&&n.endsWith("]")}function Ee(e){let n="";for(let t=0;t<e.length;t++){let s=e[t];if(s==="\\"&&t+1<e.length){n+=s+e[t+1],t++;continue}if(s===","){n+="\\,";continue}n+=s;}return n}function Se(e){let n=e.split(/\r?\n/),t=[],s="",r=false;for(let o of n)r?(s+=`
+`+o,H(s.split("=").slice(1).join("="))%2===0&&(r=false,t.push(s),s="")):H(o)%2===1&&ke(o)?(s=o,r=true):t.push(o);if(r)throw new Error("ParseError: unterminated double-quoted value");return t}function ke(e){let n=e.indexOf("=");if(n===-1)return  false;let t=e.slice(n+1).trimStart();return t.startsWith('"')&&!t.endsWith('"')}function H(e){let n=0;for(let t=0;t<e.length;t++)e[t]==='"'&&e[t-1]!=="\\"&&n++;return n}function _e(e,n){if(!e)return {value:"",quoted:false};if(e.startsWith("'")){let r=e.indexOf("'",1);if(r===-1)throw new Error("ParseError: unterminated single-quoted value");return J(e.slice(r+1),n),{value:e.slice(1,r),quoted:true}}if(e.startsWith('"')){let r=1,o="";for(;r<e.length;){let i=e[r];if(i==="\\"&&r+1<e.length){let a=e[r+1];a==="n"?o+=`
+`:a==="r"?o+="\r":a==="t"?o+="	":o+=a,r+=2;continue}if(i==='"')break;o+=i,r++;}if(e[r]!=='"')throw new Error("ParseError: unterminated double-quoted value");return J(e.slice(r+1),n),{value:o,quoted:true}}if(e.startsWith("`"))throw new Error("ParseError: backtick values not supported");let t=Re(e);return {value:(t===-1?e:e.slice(0,t)).trim(),quoted:false}}function J(e,n){if(!/^\s*(#.*)?$/.test(e))throw new Error(`ParseError: trailing characters after quoted value: ${JSON.stringify(n)}`)}function Re(e){for(let n=0;n<e.length;n++)if(e[n]==="#"&&(n===0||/\s/.test(e[n-1])))return n;return  -1}function Z(e,n="json"){let t=e.charCodeAt(0)===65279?e.slice(1):e;if(!t.trim())return {};try{return JSON.parse(t)}catch(s){let r=s;throw new Error(`ParseError (${n}): ${r.message}`)}}function Q(e,n="yaml"){let t=e.charCodeAt(0)===65279?e.slice(1):e;if(!t.trim())return {};let s=yaml.parseAllDocuments(t,{version:"1.2",uniqueKeys:true,maxAliasCount:100}).filter(i=>{if(i.errors.length>0)return  true;try{let a=i.toJS();return a!=null}catch{return  true}});if(s.length===0)return {};if(s.length>1)throw new Error(`ParseError (${n}): multi-doc YAML not supported (got ${s.length} documents)`);let r=s[0];if(r.errors.length>0){let i=r.errors[0],a=i.linePos?.[0]?.line??"?";throw new Error(`ParseError (${n}:${a}): ${i.message}`)}let o;try{o=r.toJS();}catch(i){throw new Error(`ParseError (${n}): ${i.message}`)}return o}function ee(e,n="toml"){let t=e.charCodeAt(0)===65279?e.slice(1):e;if(!t.trim())return {};try{return smolToml.parse(t)}catch(s){let r=s;throw new Error(`ParseError (${n}): ${r.message}`)}}var re="[A-Za-z_][A-Za-z0-9_]*",Oe=new RegExp(`^\\$(?<name>${re})`),xe=new RegExp(`^(?<name>${re})`),ne=50;function U(e,n,t,s=0){if(s>ne)throw new l([{path:t?.leafPath??"<expand>",from:t?.from??"config",message:`E_DEPTH: \${} nesting too deep (>${ne})`}],"E_DEPTH");let r="",o=0;for(;o<e.length;){let i=e[o];if(i==="$"&&e[o+1]==="$"){r+="$",o+=2;continue}if(i==="\\"&&e[o+1]==="$"){r+="\\$",o+=2;continue}if(i!=="$"){r+=i,o++;continue}let a=e.slice(o);if(a.startsWith("${")){let p=Pe(e,o,t);if(!p){r+="$",o++;continue}let{name:h,op:u,def:m,end:g}=p,w=t?.leafPath??h,S=t?.from??"config";if(u&&u!==":-"&&u!=="-")throw new l([{path:w,from:S,message:`E_BAD_OP: only :- and - supported, got ${u}`}],"E_BAD_OP");let _=n(h);if(!(_===void 0||u===":-"&&_===""))r+=_;else if(m!==void 0)r+=U(m,n,t,s+1);else if(t?.allowUnresolved)r+=e.slice(o,g);else throw new l([{path:w,from:S,message:`E_UNRESOLVED: ${h} missing (expand)`}],"E_UNRESOLVED");o=g;continue}let f=Oe.exec(a);if(!f||!f.groups){r+="$",o++;continue}let c=f.groups.name,d=n(c);if(d===void 0)if(t?.allowUnresolved)r+="$"+c;else throw new l([{path:t?.leafPath??c,from:t?.from??"config",message:`E_UNRESOLVED: ${c} missing (expand)`}],"E_UNRESOLVED");else r+=d;o+=1+c.length;}return r}function Pe(e,n,t){let s=n+2,r=xe.exec(e.slice(s));if(!r?.groups)return null;let o=r.groups.name;if(s+=o.length,e[s]==="}")return {name:o,end:s+1};if(s>=e.length)throw new l([{path:t?.leafPath??o,from:t?.from??"config",message:"E_EXPAND: unterminated ${}"}],"E_EXPAND");if(e[s]===":"){if(e.slice(s,s+2)!==":-"){let c=e.slice(s).split("}")[0].slice(0,12);return {name:o,op:c,def:"",end:e.length}}s+=2;let{value:a,end:f}=te(e,s);return {name:o,op:":-",def:a,end:f}}if(e[s]==="-"){s+=1;let{value:i,end:a}=te(e,s);return {name:o,op:"-",def:i,end:a}}return null}function te(e,n){let t=0,s=n,r="";for(;s<e.length;){if(e[s]==="\\"&&e[s+1]==="}"){r+="}",s+=2;continue}if(e[s]==="{"&&t++,e[s]==="}"){if(t===0)return {value:r,end:s+1};t--;}r+=e[s],s++;}throw new l([{path:"<expand>",from:"expand",message:"E_EXPAND: unterminated ${}"}],"E_EXPAND")}var W=/^(0|[1-9][0-9]*)$/;function R(e){return e.toLowerCase()==="__proto__"}function Te(e,n){return e;}function oe(e,n){let t={},s=new Map,r=f=>{let c=s.get(f);return c||(c={indexed:false,named:false},s.set(f,c)),c},o=new Map,i=f=>{if(!n?.envMap)return;let c=f.toLowerCase();for(let[d,p]of Object.entries(n.envMap))if(d.toLowerCase()===c)return p},a=(f,c,d)=>{throw new l([{path:f,from:"keys",message:`E_COLLISION: '${f}' ${d} (already claimed by '${o.get(c)}')`}],"E_COLLISION")};for(let[f,c]of Object.entries(e)){let d=i(f);if(d!==void 0){let g=d.toLowerCase();if(R(g))throw new l([{path:f,from:"keys",message:"E_PROTO: forbidden key"}],"E_PROTO");t[g]=c;continue}if(!/^[A-Za-z0-9_]+$/.test(f)){if(n?.tolerantKeys)continue;throw new l([{path:f,from:"keys",message:`E_BAD_KEY: '${f}' cannot be a config key (allowed: A-Z a-z 0-9 _, nesting with __) \u2014 bridge it with envMap`}],"E_BAD_KEY")}let p=Te(f);if(p===null)continue;let h=p;if(R(h))throw new l([{path:f,from:"keys",message:"E_PROTO: forbidden key"}],"E_PROTO");let u=h.split("__");if(u.length>1&&u.every(g=>g!=="")){let g=u.map(O=>O.toLowerCase()),w=g.join("."),S=g.slice(0,-1).join("."),_=g[0];if(o.get(w)!==void 0&&a(f,w,"duplicates a claimed path"),g.length===2&&o.has(_)&&W.test(g[1]))throw new l([{path:f,from:"keys",message:`E_ARRAY_MIX: '${_}' has both scalar/list and indexed (__0) values in the same layer`}],"E_ARRAY_MIX");for(let[O]of o)(O.startsWith(`${w}.`)||w.startsWith(`${O}.`))&&a(f,O,"collides with a conflicting value at");let k=r(S);if(W.test(g[g.length-1])){if(k.named)throw new l([{path:f,from:"keys",message:`E_ARRAY_MIX: '${S}' mixes indexed (__0) and named children in the same layer`}],"E_ARRAY_MIX");k.indexed=true;}else {if(k.indexed)throw new l([{path:f,from:"keys",message:`E_ARRAY_MIX: '${S}' mixes named and indexed (__0) children in the same layer`}],"E_ARRAY_MIX");k.named=true;}o.set(w,f),$e(t,g,c);}else {let g=h.toLowerCase();if(s.get(g)?.indexed)throw new l([{path:f,from:"keys",message:`E_ARRAY_MIX: '${g}' has both indexed (__0) and scalar/list values in the same layer`}],"E_ARRAY_MIX");o.get(g)!==void 0&&a(f,g,"duplicates a claimed path");for(let[S]of o)S.startsWith(`${g}.`)&&a(f,S,"collides with a conflicting value at");o.set(g,f),t[g]=c;}}return t}function x(e,n="<root>"){if(Array.isArray(e))return e.map((r,o)=>x(r,`${n}[${o}]`));if(!E(e))return e;let t=Object.entries(e),s={};for(let[r,o]of t)s[r]=x(o,n==="<root>"?r:`${n}.${r}`);if(t.length>0&&t.every(([r])=>W.test(r))){let r=t.map(([o])=>Number(o)).sort((o,i)=>o-i);if(r.length>1024)throw new l([{path:n,from:"keys",message:"E_ARRAY_CAP: >1024 elements"}],"E_ARRAY_CAP");for(let o=0;o<r.length;o++)if(r[o]!==o)throw new l([{path:n,from:"keys",message:`E_SPARSE_ARRAY: indexes [${r.join(",")}] are not dense 0..${r[r.length-1]}`}],"E_SPARSE_ARRAY");return r.map((o,i)=>s[String(i)])}return s}function $e(e,n,t){let s=e;for(let r=0;r<n.length-1;r++){let o=n[r],i=s[o];if(i&&typeof i=="object"&&!Array.isArray(i))s=i;else {let a={};s[o]=a,s=a;}}s[n[n.length-1]]=t;}function E(e){if(!e||typeof e!="object")return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function L(e,n,t="replace"){return K(n),D(e,n,t)}function D(e,n,t){if(n===void 0)return e;if(e===void 0)return n;if(n===null)return null;if(Array.isArray(e)!==Array.isArray(n)&&(E(e)||E(n))){let s=r=>r!=null&&typeof r=="object"&&(Array.isArray(r)?r.length===0:E(r)&&Object.keys(r).length===0);if(!s(e)&&!s(n))throw new l([{path:"<array>",from:"merge",message:`E_ARRAY_MIX: cannot merge object with array across layers (arrayStrategy '${t}' only merges arrays with arrays) \u2014 use matching shapes`}],"E_ARRAY_MIX")}if(Array.isArray(e)&&Array.isArray(n)){if(t==="replace")return n;if(t==="concat"){if(e.length+n.length>1024)throw new l([{path:"<array>",from:"merge",message:"E_ARRAY_CAP: concat would exceed 1024 elements"}],"E_ARRAY_CAP");return [...e,...n]}let s=Math.max(e.length,n.length);if(s>1024)throw new l([{path:"<array>",from:"merge",message:"E_ARRAY_CAP: >1024"}],"E_ARRAY_CAP");let r=[];for(let o=0;o<s;o++)o in n?r[o]=o in e?D(e[o],n[o],t):n[o]:o in e&&(r[o]=e[o]);for(let o=0;o<s;o++)if(!(o in r))throw new l([{path:`<array>[${o}]`,from:"merge",message:"E_SPARSE_ARRAY: hole at index "+o}],"E_SPARSE_ARRAY");return r}if(E(e)&&E(n)){let s={...e};for(let[r,o]of Object.entries(n))s[r]=r in s?D(s[r],o,t):o;return s}return n}function K(e){if(Array.isArray(e)){for(let n of e)K(n);return}if(e!==null&&typeof e=="object")for(let[n,t]of Object.entries(e)){if(R(n))throw new l([{path:n,from:"merge",message:"E_PROTO"}],"E_PROTO");K(t);}}var ve=/^-?\d+$/,Ce=/^-?(\d+\.\d*|\.\d+|\d+)(e[+-]?\d+)?$/i;function Le(e){return se(e,true)}function se(e,n){if(typeof e!="string")return e;let t=e;if(t==="")return "";let s=t.toLowerCase();if(s==="true"||s==="false")return s==="true";if(s==="null")return null;if(ve.test(t)){let o=Number(t);return Number.isSafeInteger(o)?o:t}if(Ce.test(t)&&t!=="-"&&t!=="."){let o=Number(t);return Number.isFinite(o)?o:t}let r=t.trim();if(r.startsWith("{")&&r.endsWith("}")||r.startsWith("[")&&r.endsWith("]"))try{return JSON.parse(r)}catch{return e}if(n&&t.includes(",")){if(!je(t))return t.replace(/\\,/g,",");let o=Ie(t);if(o!==null)return o.map(i=>se(i,false))}return e}function je(e){let n=null;for(let t=0;t<e.length;t++){let s=e[t];if(n){if(s==="\\"&&t+1<e.length){t++;continue}s===n&&(n=null);continue}if(s==='"'||s==="'"){n=s;continue}if(s==="\\"&&e[t+1]===","){t++;continue}if(s===",")return  true}return  false}function Ie(e){let n=[],t="",s=null;for(let r=0;r<e.length;r++){let o=e[r];if(s){if(o==="\\"&&r+1<e.length){t+=o+e[r+1],r++;continue}if(o===s){s=null,t+=o;continue}t+=o;continue}if(o==='"'||o==="'"){s=o,t+=o;continue}if(o==="\\"&&e[r+1]===","){t+=",",r++;continue}if(o===","){n.push(t.trim()),t="";continue}t+=o;}return s?null:(n.push(t.trim()),n.map(r=>r.length>=2&&r.startsWith("'")&&r.endsWith("'")?r.slice(1,-1).replace(/\\,/g,","):r.length>=2&&r.startsWith('"')&&r.endsWith('"')?r.slice(1,-1):r.replace(/\\,/g,",")))}function P(e){if(typeof e=="string")return Le(e);if(Array.isArray(e))return e.map(P);if(e&&typeof e=="object"){let n=Object.getPrototypeOf(e);if(n!==Object.prototype&&n!==null)return e;let t={};for(let[s,r]of Object.entries(e)){if(R(s))throw new l([{path:s,from:"coerce",message:"E_PROTO: forbidden key"}],"E_PROTO");t[s]=P(r);}return t}return e}function Me(e){if(!e||e.length===0)return "<root>";let n=[];for(let t of e)t!==null&&typeof t=="object"&&"key"in t?n.push(String(t.key)):n.push(String(t));return n.join(".")}function j(e,n){let t;try{t=e["~standard"].validate(n);}catch(r){return {issues:[{path:"<root>",message:r instanceof Error?r.message:String(r)}],async:false}}if(typeof t?.then=="function")return {promise:t.then(o=>ie(o),o=>({ok:false,issues:[{path:"<root>",message:o instanceof Error?o.message:String(o)}]}))};let s=ie(t);return s.ok?{value:s.value}:{issues:s.issues,async:false}}function ie(e){return !e.issues||e.issues.length===0?{ok:true,value:e.value}:{ok:false,issues:e.issues.map(n=>({path:Me(n.path),message:n.message}))}}var ae=50;function ce(e){if(e)return {...e};let n=globalThis;return n.process?.env?{...n.process.env}:{}}function Ne(e,n){let t={};for(let s of n){let r=String(s);r==="__proto__"||r==="constructor"||r==="prototype"||Object.hasOwn(e,s)&&(t[s]=e[s]);}return t}function b(e,n=2*1024*1024,t){let s=()=>{if(t)return t;let r=globalThis.__typedSettingsFs;if(r)return r;if(globalThis.process){let i;try{i=new Function('return typeof require !== "undefined" ? require("node:fs") : null')();}catch{i=null;}if(!i)throw new l([{path:"<root>",from:e,message:`E_NO_FS: cannot read '${e}' under ESM \u2014 import 'typed-settings/node', pass opts.fs, or use { text }/{ map }`}],"E_NO_FS");return i}return null};try{let r=s();if(!r)return;if(r.statSync)try{if(r.statSync(e).size>n)throw new l([{path:"<root>",from:e,message:`E_FILE_TOO_LARGE: '${e}' >${n} bytes \u2014 raise maxBytes or shrink the file`}],"E_FILE_TOO_LARGE")}catch(i){if(i instanceof l)throw i}let o=r.readFileSync(e,"utf8");if(G(o)>n)throw new l([{path:"<root>",from:e,message:`E_FILE_TOO_LARGE: '${e}' >${n} bytes \u2014 raise maxBytes or shrink the file`}],"E_FILE_TOO_LARGE");return o}catch(r){if(r instanceof l)throw r;if(r?.code==="ENOENT")return;throw r}}function fe(e){if(e.maxBytes!==void 0&&(!Number.isFinite(e.maxBytes)||e.maxBytes<=0))throw new l([{path:"maxBytes",from:"options",message:"E_USAGE: maxBytes must be a positive finite number"}],"E_USAGE");if(e.timeoutMs!==void 0&&(!Number.isFinite(e.timeoutMs)||e.timeoutMs<=0))throw new l([{path:"timeoutMs",from:"options",message:"E_USAGE: timeoutMs must be a positive finite number"}],"E_USAGE")}function A(e,n){try{return n()}catch(t){throw t instanceof l?t:t instanceof RangeError&&/call stack|recursion|too much/i.test(t.message)?new l([{path:"<root>",from:e,message:"E_DEPTH: nesting too deep (possible hostile input)"}],"E_DEPTH"):t}}function I(e,n){let t=e.toLowerCase();try{return t.endsWith(".json")?Z(n,e):t.endsWith(".yaml")||t.endsWith(".yml")?Q(n,e):ee(n,e)}catch(s){let r=s;throw new l([{path:"<root>",from:e,message:r.message}],"E_PARSE")}}function ue(e,n){if(!n)return e;if(e.length<=n.length||e.slice(0,n.length).toLowerCase()!==n.toLowerCase())return null;let t=e.slice(n.length);return /[A-Za-z0-9]$/.test(n)&&/^[A-Za-z0-9]/.test(t)?null:t}function le(e,n){let t=new Set,s=(r,o)=>{if(!(!r||typeof r!="object")){if(t.has(r))throw new l([{path:o,from:n,message:`E_CIRCULAR: cyclic value at '${o}' \u2014 remove the self-reference (shared DAG refs are fine, true cycles are not)`}],"E_CIRCULAR");t.add(r);try{for(let[i,a]of Object.entries(r))s(a,o?`${o}.${i}`:i);}finally{t.delete(r);}}};s(e,"");}function y(e,n,t,s,r,o,i=false){le(e,n);let a=t??s,f={};for(let[d,p]of Object.entries(e)){let h=ue(d,a);if(h!==null){if(R(h))throw new l([{path:d,from:n,message:"E_PROTO: forbidden key"}],"E_PROTO");f[h]=p;}}return {node:x(oe(f,{envMap:r.envMap,tolerantKeys:i})),label:n,skipExpand:o}}function M(e,n,t){if(le(e,n),Y(e,n),!E(e))return {node:e??{},label:n,skipExpand:false};let s={};for(let[r,o]of Object.entries(e))if(t){let i=ue(r,t);if(i===null)continue;if(R(i))throw new l([{path:r,from:n,message:"E_PROTO: forbidden key"}],"E_PROTO");s[i]=o;}else s[r]=o;return {node:x(s,n),label:n,skipExpand:false}}function Y(e,n){if(Array.isArray(e)){for(let t of e)Y(t,n);return}if(e&&typeof e=="object")for(let[t,s]of Object.entries(e)){if(R(t))throw new l([{path:t,from:n,message:"E_PROTO: forbidden key"}],"E_PROTO");Y(s,n);}}function de(e,n){let t=n.node;if(t&&typeof t=="object"&&!Array.isArray(t))for(let s of Object.keys(t))e.set(s.toLowerCase(),n.label);}function Ve(e){return !!e&&(typeof e=="object"||typeof e=="function")&&typeof e.then=="function"}function z(e){if(!("provider"in e||"load"in e))return null;let n="provider"in e?e.provider:e;return !n||typeof n.load!="function"?null:{load:n.load,name:typeof n.name=="string"?n.name:"<provider>"}}function Fe(e,n){return new l([{path:"<root>",from:e,message:`E_TIMEOUT: provider '${e}' load outran timeoutMs (${n}ms) \u2014 raise timeoutMs or fix the backend`}],"E_TIMEOUT")}function ge(e,n){let t=e.sources??[".env","env"],s=e.prefix,r=[],o=new Map,i=e.maxBytes??2*1024*1024,a=c=>{r.push(c),de(o,c);},f=(c,d)=>{try{return F(c)}catch(p){let h=p;throw new l([{path:"<root>",from:d,message:h.message}],"E_PARSE")}};for(let c of t)if(c==="env")a(y({...n},"env",void 0,s,e,false,true));else if(c===".env"||c===".env.local"){let d=b(c,i,e.fs);if(d===void 0)continue;a(y(f(d,c),c,void 0,s,e,false));}else if(typeof c=="string"){let d=b(c,i,e.fs);if(d===void 0)continue;let p=c.toLowerCase();p.endsWith(".json")||p.endsWith(".yaml")||p.endsWith(".yml")||p.endsWith(".toml")?a(M(I(c,d),c,s)):a(y(f(d,c),c,void 0,s,e,false));}else if(c&&typeof c=="object"&&"text"in c)a(y(f(c.text,"text"),"text",void 0,s,e,false));else if(c&&typeof c=="object"&&"map"in c){let d=c;a(y(d.map??{},"overrides",d.prefix,s,e,false));}else if(c&&typeof c=="object"&&"file"in c){let d=c.file,p=b(d,i,e.fs);if(p===void 0)continue;let h=d.toLowerCase();h.endsWith(".json")||h.endsWith(".yaml")||h.endsWith(".yml")||h.endsWith(".toml")?a(M(I(d,p),d,s)):a(y(f(p,d),d,void 0,s,e,false));}else {if(c&&typeof c=="object"&&"dir"in c)throw new l([{path:c.dir,from:"config",message:"E_USAGE: { dir } sources need loadSecretsDir() from typed-settings/node, passed back as { map }"}],"E_USAGE");if(c&&typeof c=="object"){let d=z(c);if(d){let p="prefix"in c?c.prefix:void 0,h;try{h=d.load();}catch(u){if(u instanceof l)throw u;let m=u;throw new l([{path:d.name,from:d.name,message:`E_PROVIDER: ${m?.message??String(u)}`}],"E_PROVIDER")}if(Ve(h))throw new l([{path:"<root>",from:d.name,message:`USE_ASYNC: provider '${d.name}' is async \u2014 switch to settingsAsync()`}],"USE_ASYNC");a(y(h??{},d.name,p,s,e,!e.expandSecrets));}else a(y(c,"overrides",void 0,s,e,false));}}return {layers:r,fromMap:o}}async function Ue(e,n){let t=e.timeoutMs??5e3;if(!(e.sources??[]).some(u=>u&&typeof u=="object"&&z(u)!==null))return ge(e,n);let r=Date.now()+t,o=e.sources,i=e.prefix,a=[],f=new Map,c=e.maxBytes??2*1024*1024,d=u=>{a.push(u),de(f,u);},p=(u,m)=>{try{return F(u)}catch(g){let w=g;throw new l([{path:"<root>",from:m,message:w.message}],"E_PARSE")}},h=async(u,m)=>{let g=Math.max(1,r-Date.now()),w,S=new Promise((k,v)=>{w=setTimeout(()=>v(Fe(u,t)),g);}),_=Promise.resolve().then(m);_.catch(()=>{});let V=await Promise.race([_,S]).catch(k=>{if(clearTimeout(w),k instanceof l)throw k;let v=k;throw new l([{path:u,from:u,message:`E_PROVIDER: ${v?.message??String(k)}`}],"E_PROVIDER")});return clearTimeout(w),V};for(let u of o)if(u==="env")d(y({...n},"env",void 0,i,e,false,true));else if(u===".env"||u===".env.local"){let m=b(u,c,e.fs);if(m===void 0)continue;d(y(p(m,u),u,void 0,i,e,false));}else if(typeof u=="string"){let m=b(u,c,e.fs);if(m===void 0)continue;let g=u.toLowerCase();g.endsWith(".json")||g.endsWith(".yaml")||g.endsWith(".yml")||g.endsWith(".toml")?d(M(I(u,m),u,i)):d(y(p(m,u),u,void 0,i,e,false));}else if(u&&typeof u=="object"&&"text"in u)d(y(p(u.text,"text"),"text",void 0,i,e,false));else if(u&&typeof u=="object"&&"map"in u){let m=u;d(y(m.map??{},"overrides",m.prefix,i,e,false));}else if(u&&typeof u=="object"&&"file"in u){let m=u.file,g=b(m,c,e.fs);if(g===void 0)continue;let w=m.toLowerCase();w.endsWith(".json")||w.endsWith(".yaml")||w.endsWith(".yml")||w.endsWith(".toml")?d(M(I(m,g),m,i)):d(y(p(g,m),m,void 0,i,e,false));}else {if(u&&typeof u=="object"&&"dir"in u)throw new l([{path:u.dir,from:"config",message:"E_USAGE: { dir } sources need loadSecretsDir() from typed-settings/node, passed back as { map }"}],"E_USAGE");if(u&&typeof u=="object"){let m=z(u);if(m){let g="prefix"in u?u.prefix:void 0,w=await h(m.name,()=>m.load());d(y(w??{},m.name,g,i,e,!e.expandSecrets));}else d(y(u,"overrides",void 0,i,e,false));}}return {layers:a,fromMap:f}}function me(e){return new Set(e.filter(n=>n.skipExpand).flatMap(n=>Object.keys(n.node)).map(n=>n.toLowerCase()))}function We(e,n){let{layers:t,fromMap:s}=ge(e,n),r=e.arrayStrategy??"replace",o={};for(let f of t)o=L(o,f.node,r);let i=me(t);return e.expand!==false&&(o=T(o,pe(o,n),{allowUnresolved:e.allowUnresolved,fromMap:s,skipTops:i})),e.coerce!==false&&(o=P(o)),{input:o,fromFor:f=>{let c=f.split(".")[0].toLowerCase();return c==="<root>"?"schema":s.get(c)??"defaults"}}}function pe(e,n){let t=e&&typeof e=="object"&&!Array.isArray(e)?e:{},s=new Map(Object.keys(t).map(o=>[o.toLowerCase(),o])),r=new Map;for(let[o,i]of Object.entries(n))r.set(o.toLowerCase(),i);return o=>{let i=s.get(o.toLowerCase());if(i!==void 0){let a=t[i];return typeof a=="string"?a:typeof a=="number"||typeof a=="boolean"||typeof a=="bigint"?String(a):a==null?n[o]??r.get(o.toLowerCase()):void 0}return n[o]??r.get(o.toLowerCase())}}function T(e,n,t,s=[]){if(typeof e=="string"){if(!e.includes("$"))return e;let r=(s[0]??"<root>").toLowerCase(),o=t.fromMap.get(r)??"config",i=s.map(a=>String(a).toLowerCase()).join(".")||"<root>";try{return he(e,n,{...t,from:o},[],i)}catch(a){if(o==="env"&&a instanceof l&&a.code==="E_UNRESOLVED")return e;throw a}}if(Array.isArray(e))return e.map((r,o)=>T(r,n,t,[...s,String(o)]));if(e&&typeof e=="object"){if(s.length===0){let o={};for(let[i,a]of Object.entries(e))o[i]=t.skipTops.has(i.toLowerCase())?a:T(a,n,t,[i]);return o}let r={};for(let[o,i]of Object.entries(e))r[o]=T(i,n,t,[...s,o]);return r}return e}function he(e,n,t,s,r){return U(e,o=>{let i=o.toLowerCase();if(s.includes(i))throw new l([{path:r,from:t.from,message:`E_CIRCULAR: $${[...s,o].join("->$")} reachable from '${r}' \u2014 unwind the $VAR references`}],"E_CIRCULAR");if(s.length>=ae)throw new l([{path:r,from:t.from,message:`E_CIRCULAR: $VAR chain from '${r}' exceeded ${ae} links \u2014 flatten the indirection`}],"E_CIRCULAR");let a=n(o);if(a!==void 0)return a.includes("$")?he(a,n,t,[...s,i],r):a},{allowUnresolved:t.allowUnresolved,from:t.from,leafPath:r})}function N(e,n=""){if(Array.isArray(e)){let t=[];return e.forEach((s,r)=>t.push(...N(s,n?`${n}.${r}`:`${r}`))),t}if(E(e)){let t=[];for(let[s,r]of Object.entries(e)){let o=n?`${n}.${s.toLowerCase()}`:s.toLowerCase();E(r)||Array.isArray(r)?t.push(...N(r,o)):t.push(o);}return t}return n?[n.toLowerCase()]:[]}function B(e,n,t,s){if(t==="strip"||t===void 0)return n;if(t==="preserve")return E(e)&&E(n)?L(e,n,"replace"):n;let r=new Set(N(e)),o=new Set(N(n)),i=[...r].filter(a=>!o.has(a));if(i.length>0)throw new l(i.map(a=>({path:a,from:s(a),message:`E_UNKNOWN_KEY: '${a}' is not in the schema \u2014 remove it, or use unknownKeys 'strip'/'preserve'`})),"E_UNKNOWN_KEY");return n}function $(e){if(Array.isArray(e)){for(let n of e)$(n);return Object.freeze(e)}if(e&&typeof e=="object"){for(let n of Object.keys(e))$(e[n]);return Object.freeze(e)}return e}function De(e){fe(e);let n=e.secretKeys,t=ce(e.env),{input:s,fromFor:r}=A("config",()=>We(e,t)),o=A("schema",()=>j(e.schema,s));if("promise"in o)throw new l([{path:"<root>",from:"schema",message:"USE_ASYNC: schema is async, use settingsAsync()"}],"USE_ASYNC");if("issues"in o)throw new l(o.issues.map(f=>({path:f.path,from:r(f.path),message:X(f.path,f.message,s,n)})));let i=o.value,a=A("config",()=>B(s,i,e.unknownKeys??"strip",r));return e.freeze===false?a:A("config",()=>$(a))}async function Ke(e){let n=e.timeoutMs??5e3;fe(e);let t=e.secretKeys,s=ce(e.env),{input:r,fromFor:o}=await Ye(e,s).catch(c=>{throw c instanceof l?c:c instanceof RangeError?new l([{path:"<root>",from:"config",message:"E_DEPTH: nesting too deep (possible hostile input)"}],"E_DEPTH"):c}),i=j(e.schema,r);if("promise"in i){i.promise.catch(()=>{});let c,d=new Promise((m,g)=>{c=setTimeout(()=>g(new l([{path:"<root>",from:"schema",message:`E_TIMEOUT: async validation outran timeoutMs (${n}ms) \u2014 raise timeoutMs or fix the validator`}],"E_TIMEOUT")),n);}),p;try{p=await Promise.race([i.promise,d]);}finally{c&&clearTimeout(c);}if(!p.ok)throw new l(p.issues.map(m=>({path:m.path,from:o(m.path),message:X(m.path,m.message,r,t)})));let h=p.value,u=A("config",()=>B(r,h,e.unknownKeys??"strip",o));return e.freeze===false?u:A("config",()=>$(u))}if("issues"in i)throw new l(i.issues.map(c=>({path:c.path,from:o(c.path),message:X(c.path,c.message,r,t)})));let a=i.value,f=A("config",()=>B(r,a,e.unknownKeys??"strip",o));return e.freeze===false?f:A("config",()=>$(f))}async function Ye(e,n){let{layers:t,fromMap:s}=await Ue(e,n),r=e.arrayStrategy??"replace",o={};for(let f of t)o=L(o,f.node,r);let i=me(t);return e.expand!==false&&(o=T(o,pe(o,n),{allowUnresolved:e.allowUnresolved,fromMap:s,skipTops:i})),e.coerce!==false&&(o=P(o)),{input:o,fromFor:f=>{let c=f.split(".")[0].toLowerCase();return c==="<root>"?"schema":s.get(c)??"defaults"}}}function ze(e,n){let t=[];for(let r of n.split(".")){let o=/^([^\[\]]+)\[(\d+)\]$/.exec(r);o?t.push(o[1],Number(o[2])):t.push(r);}let s=e;for(let r of t){if(s===null||typeof s!="object")return;if(Array.isArray(s)){let a=typeof r=="number"?r:Number(r);if(!Number.isInteger(a))return;s=s[a];continue}let o=s,i=Object.keys(o).find(a=>a.toLowerCase()===String(r).toLowerCase());if(!i)return;s=o[i];}return s}function Be(e){let n=globalThis;if(n.btoa)try{return n.btoa(e)}catch{}try{if(n.Buffer)return n.Buffer.from(e,"utf8").toString("base64")}catch{}return null}function X(e,n,t,s){if(!C(e,s))return n;let r=n,o=ze(t,e),i=typeof o=="string"?o:typeof o=="number"||typeof o=="boolean"||typeof o=="bigint"?String(o):void 0;if(i!==void 0&&i.length>=4){let a=q(e,i,s);r=r.split(i).join(a);let f=Be(i);f&&f.length>8&&(r=r.split(f).join(a));}return `${r} (redacted)`}function _n(e,n){let t={};for(let s of n){let r=String(s);r==="__proto__"||r==="constructor"||r==="prototype"||Object.hasOwn(e,s)&&(t[s]=e[s]);}return t}exports.ConfigError=l;exports.pickPublic=Ne;exports.publicSettings=_n;exports.settings=De;exports.settingsAsync=Ke;