workerstack 0.1.0-beta.0

package/dist/dev/processes.d.ts

@@ -0,0 +1,37 @@
+export type ProcessSpec = {
+    name: string;
+    cmd: string[];
+    cwd: string;
+    env?: Record<string, string>;
+    /** Rewrites an output line; `undefined` drops it. */
+    filter?: (line: string) => string | undefined;
+};
+export declare function prefixLines(chunk: string, pending: string): {
+    lines: string[];
+    pending: string;
+};
+export declare class ProcessGroup {
+    private write;
+    readonly exited: Promise<{
+        name: string;
+        code: number | null;
+    }>;
+    private children;
+    private resolveExit;
+    private stopping;
+    private width;
+    constructor(write?: (line: string) => void);
+    private label;
+    private names;
+    private labelIndex;
+    /** Writes one line with the name's prefix; the dev command logs here too. */
+    log(name: string, line: string): void;
+    start(spec: ProcessSpec): void;
+    /**
+     * SIGINT to each child's process group, as Ctrl+C in a terminal does, then
+     * SIGKILL to the groups after 3 s. `celld dev` runs a node process that
+     * ignores SIGTERM, so a signal to the leader alone leaves it running.
+     */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=processes.d.ts.map

package/dist/dev/processes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.d.ts","sourceRoot":"","sources":["../../src/dev/processes.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,qDAAqD;IACrD,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAC9C,CAAA;AAID,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAItC;AAED,qBAAa,YAAY;IAQrB,OAAO,CAAC,KAAK;IAPf,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC/D,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,WAAW,CAAyD;IAC5E,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,KAAK,CAAI;gBAGP,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC;IAKrE,OAAO,CAAC,KAAK;IAOb,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,UAAU;IAKlB,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;IAM9B,KAAK,CAAC,IAAI,EAAE,WAAW;IAqCvB;;;;OAIG;IACG,IAAI;CAmBX"}

package/dist/dev/processes.js

@@ -0,0 +1,104 @@
+const COLORS = [36, 35, 33, 32, 34];
+export function prefixLines(chunk, pending) {
+    const parts = (pending + chunk).split(/\r?\n/);
+    const rest = parts.pop() ?? '';
+    return { lines: parts, pending: rest };
+}
+export class ProcessGroup {
+    write;
+    exited;
+    children = [];
+    resolveExit;
+    stopping = false;
+    width = 0;
+    constructor(write = (line) => console.log(line)) {
+        this.write = write;
+        this.exited = new Promise((resolve) => (this.resolveExit = resolve));
+    }
+    label(name) {
+        const text = `[${name}]`.padEnd(this.width + 2);
+        if (!process.stdout.isTTY)
+            return text;
+        const color = COLORS[this.labelIndex(name) % COLORS.length];
+        return `\x1b[${color}m${text}\x1b[0m`;
+    }
+    names = [];
+    labelIndex(name) {
+        if (!this.names.includes(name))
+            this.names.push(name);
+        return this.names.indexOf(name);
+    }
+    /** Writes one line with the name's prefix; the dev command logs here too. */
+    log(name, line) {
+        this.labelIndex(name);
+        this.width = Math.max(this.width, name.length);
+        this.write(`${this.label(name)} ${line}`);
+    }
+    start(spec) {
+        this.width = Math.max(this.width, spec.name.length);
+        const child = Bun.spawn(spec.cmd, {
+            cwd: spec.cwd,
+            env: { ...process.env, ...spec.env },
+            stdin: 'ignore',
+            // Own process group, so stop() reaches the child's children too.
+            detached: true,
+            stdout: 'pipe',
+            stderr: 'pipe',
+        });
+        this.children.push(child);
+        const emit = (line) => {
+            const shown = spec.filter ? spec.filter(line) : line;
+            if (shown !== undefined)
+                this.log(spec.name, shown);
+        };
+        const pump = async (stream) => {
+            let pending = '';
+            const decoder = new TextDecoder();
+            const reader = stream.getReader();
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                const chunk = decoder.decode(value, { stream: true });
+                const result = prefixLines(chunk, pending);
+                pending = result.pending;
+                for (const line of result.lines)
+                    emit(line);
+            }
+            if (pending)
+                emit(pending);
+        };
+        const output = Promise.all([pump(child.stdout), pump(child.stderr)]);
+        void child.exited.then(async (code) => {
+            await output.catch(() => { });
+            if (!this.stopping)
+                this.resolveExit({ name: spec.name, code });
+        });
+    }
+    /**
+     * SIGINT to each child's process group, as Ctrl+C in a terminal does, then
+     * SIGKILL to the groups after 3 s. `celld dev` runs a node process that
+     * ignores SIGTERM, so a signal to the leader alone leaves it running.
+     */
+    async stop() {
+        this.stopping = true;
+        const signal = (sig) => {
+            for (const child of this.children) {
+                try {
+                    process.kill(-child.pid, sig);
+                }
+                catch {
+                    // The group is gone already.
+                }
+            }
+        };
+        signal('SIGINT');
+        await Promise.race([
+            Promise.allSettled(this.children.map((child) => child.exited)),
+            Bun.sleep(3_000),
+        ]);
+        signal('SIGKILL');
+        await Promise.allSettled(this.children.map((child) => child.exited));
+    }
+}
+//# sourceMappingURL=processes.js.map

package/dist/dev/processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.js","sourceRoot":"","sources":["../../src/dev/processes.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAEnC,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACxC,CAAC;AAED,MAAM,OAAO,YAAY;IAQb;IAPD,MAAM,CAAgD;IACvD,QAAQ,GAAiB,EAAE,CAAA;IAC3B,WAAW,CAAyD;IACpE,QAAQ,GAAG,KAAK,CAAA;IAChB,KAAK,GAAG,CAAC,CAAA;IAEjB,YACU,QAAgC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAA3D,UAAK,GAAL,KAAK,CAAsD;QAEnE,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAA;IACtE,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3D,OAAO,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAA;IACvC,CAAC;IAEO,KAAK,GAAa,EAAE,CAAA;IACpB,UAAU,CAAC,IAAY;QAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,IAAY,EAAE,IAAY;QAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,IAAiB;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YAChC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,QAAQ;YACf,iEAAiE;YACjE,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,KAAK,EAAE,MAAkC,EAAE,EAAE;YACxD,IAAI,OAAO,GAAG,EAAE,CAAA;YAChB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YACjC,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;gBAC1C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;gBACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7C,CAAC;YACD,IAAI,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpE,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACpC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,MAAM,MAAM,GAAG,CAAC,GAAmB,EAAE,EAAE;YACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChB,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;SACjB,CAAC,CAAA;QACF,MAAM,CAAC,SAAS,CAAC,CAAA;QACjB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,CAAC;CACF","sourcesContent":["// The child processes of `workerstack dev`: one log with a prefix per process,\n// and one stop for all of them.\nimport type { Subprocess } from 'bun'\n\nexport type ProcessSpec = {\n  name: string\n  cmd: string[]\n  cwd: string\n  env?: Record<string, string>\n  /** Rewrites an output line; `undefined` drops it. */\n  filter?: (line: string) => string | undefined\n}\n\nconst COLORS = [36, 35, 33, 32, 34]\n\nexport function prefixLines(\n  chunk: string,\n  pending: string,\n): { lines: string[]; pending: string } {\n  const parts = (pending + chunk).split(/\\r?\\n/)\n  const rest = parts.pop() ?? ''\n  return { lines: parts, pending: rest }\n}\n\nexport class ProcessGroup {\n  readonly exited: Promise<{ name: string; code: number | null }>\n  private children: Subprocess[] = []\n  private resolveExit!: (value: { name: string; code: number | null }) => void\n  private stopping = false\n  private width = 0\n\n  constructor(\n    private write: (line: string) => void = (line) => console.log(line),\n  ) {\n    this.exited = new Promise((resolve) => (this.resolveExit = resolve))\n  }\n\n  private label(name: string) {\n    const text = `[${name}]`.padEnd(this.width + 2)\n    if (!process.stdout.isTTY) return text\n    const color = COLORS[this.labelIndex(name) % COLORS.length]\n    return `\\x1b[${color}m${text}\\x1b[0m`\n  }\n\n  private names: string[] = []\n  private labelIndex(name: string) {\n    if (!this.names.includes(name)) this.names.push(name)\n    return this.names.indexOf(name)\n  }\n\n  /** Writes one line with the name's prefix; the dev command logs here too. */\n  log(name: string, line: string) {\n    this.labelIndex(name)\n    this.width = Math.max(this.width, name.length)\n    this.write(`${this.label(name)} ${line}`)\n  }\n\n  start(spec: ProcessSpec) {\n    this.width = Math.max(this.width, spec.name.length)\n    const child = Bun.spawn(spec.cmd, {\n      cwd: spec.cwd,\n      env: { ...process.env, ...spec.env },\n      stdin: 'ignore',\n      // Own process group, so stop() reaches the child's children too.\n      detached: true,\n      stdout: 'pipe',\n      stderr: 'pipe',\n    })\n    this.children.push(child)\n    const emit = (line: string) => {\n      const shown = spec.filter ? spec.filter(line) : line\n      if (shown !== undefined) this.log(spec.name, shown)\n    }\n    const pump = async (stream: ReadableStream<Uint8Array>) => {\n      let pending = ''\n      const decoder = new TextDecoder()\n      const reader = stream.getReader()\n      for (;;) {\n        const { done, value } = await reader.read()\n        if (done) break\n        const chunk = decoder.decode(value, { stream: true })\n        const result = prefixLines(chunk, pending)\n        pending = result.pending\n        for (const line of result.lines) emit(line)\n      }\n      if (pending) emit(pending)\n    }\n    const output = Promise.all([pump(child.stdout), pump(child.stderr)])\n    void child.exited.then(async (code) => {\n      await output.catch(() => {})\n      if (!this.stopping) this.resolveExit({ name: spec.name, code })\n    })\n  }\n\n  /**\n   * SIGINT to each child's process group, as Ctrl+C in a terminal does, then\n   * SIGKILL to the groups after 3 s. `celld dev` runs a node process that\n   * ignores SIGTERM, so a signal to the leader alone leaves it running.\n   */\n  async stop() {\n    this.stopping = true\n    const signal = (sig: NodeJS.Signals) => {\n      for (const child of this.children) {\n        try {\n          process.kill(-child.pid, sig)\n        } catch {\n          // The group is gone already.\n        }\n      }\n    }\n    signal('SIGINT')\n    await Promise.race([\n      Promise.allSettled(this.children.map((child) => child.exited)),\n      Bun.sleep(3_000),\n    ])\n    signal('SIGKILL')\n    await Promise.allSettled(this.children.map((child) => child.exited))\n  }\n}\n"]}

package/dist/dev/push.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=push.d.ts.map

package/dist/dev/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/dev/push.ts"],"names":[],"mappings":""}

package/dist/dev/push.js

@@ -0,0 +1,30 @@
+// Subprocess of `workerstack dev`: `bun push.ts <app directory>`. A fresh
+// process sees the current app code on each run. It regenerates
+// workerstack.blueprint.yaml and wrangler.json from it, and pushes the schema
+// (or applies committed migrations) to the dev database.
+import { generateBlueprint } from '../blueprint-generator.js';
+import { loadBackend, runWranglerCommand } from '../workers/wrangler.js';
+const directory = process.argv[2];
+if (!directory)
+    throw new Error('usage: push.ts <app directory>');
+const blueprint = await generateBlueprint({ directory });
+if (blueprint.changed)
+    console.log('workerstack.blueprint.yaml updated');
+const wrangler = await runWranglerCommand({ directory });
+if (wrangler.changed)
+    console.log('wrangler.json updated');
+const { backend } = await loadBackend(directory);
+// Resolve from the app, so provision sees the same workerstack instance as
+// the backend it provisions.
+const { provision } = (await import(Bun.resolveSync('workerstack/provision-schema', directory)));
+const app = (await backend.start({
+    env: process.env,
+}));
+try {
+    await provision(app);
+    console.log('schema is current');
+}
+finally {
+    await app.close();
+}
+//# sourceMappingURL=push.js.map

package/dist/dev/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/dev/push.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,gEAAgE;AAChE,8EAA8E;AAC9E,yDAAyD;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAErE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjC,IAAI,CAAC,SAAS;IAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;AAEjE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACxD,IAAI,SAAS,CAAC,OAAO;IAAE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;AAExE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACxD,IAAI,QAAQ,CAAC,OAAO;IAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;AAE1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;AAChD,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,MAAM,CACjC,GAAG,CAAC,WAAW,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAC3D,CAAyC,CAAA;AAC1C,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC;IAC/B,GAAG,EAAE,OAAO,CAAC,GAAyC;CACvD,CAAC,CAA+B,CAAA;AACjC,IAAI,CAAC;IACH,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;IACpB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAClC,CAAC;QAAS,CAAC;IACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;AACnB,CAAC","sourcesContent":["// Subprocess of `workerstack dev`: `bun push.ts <app directory>`. A fresh\n// process sees the current app code on each run. It regenerates\n// workerstack.blueprint.yaml and wrangler.json from it, and pushes the schema\n// (or applies committed migrations) to the dev database.\nimport { generateBlueprint } from '../blueprint-generator'\nimport { loadBackend, runWranglerCommand } from '../workers/wrangler'\n\nconst directory = process.argv[2]\nif (!directory) throw new Error('usage: push.ts <app directory>')\n\nconst blueprint = await generateBlueprint({ directory })\nif (blueprint.changed) console.log('workerstack.blueprint.yaml updated')\n\nconst wrangler = await runWranglerCommand({ directory })\nif (wrangler.changed) console.log('wrangler.json updated')\n\nconst { backend } = await loadBackend(directory)\n// Resolve from the app, so provision sees the same workerstack instance as\n// the backend it provisions.\nconst { provision } = (await import(\n  Bun.resolveSync('workerstack/provision-schema', directory)\n)) as typeof import('../provision-schema')\nconst app = (await backend.start({\n  env: process.env as Record<string, string | undefined>,\n})) as { close(): Promise<void> }\ntry {\n  await provision(app)\n  console.log('schema is current')\n} finally {\n  await app.close()\n}\n"]}

package/dist/dialect.d.ts

@@ -0,0 +1,17 @@
+/** The only dialect: SQLite (libsql, Turso). Kept in the blueprint schema. */
+export type Dialect = 'sqlite';
+/**
+ * Minimal structural view of a drizzle db. Internal modules run dynamic
+ * tables (Record<string, unknown> schemas) where drizzle's generics add no
+ * safety, so they accept this instead. The public surface (`app.db`, API
+ * context) keeps full typing via `DbFor` in db.ts.
+ */
+export type AnyDb = {
+    select: (...args: any[]) => any;
+    insert: (...args: any[]) => any;
+    update: (...args: any[]) => any;
+    delete: (...args: any[]) => any;
+};
+/** Every table must be a SQLite table. */
+export declare function assertSqliteSchema(schema: Record<string, unknown>): void;
+//# sourceMappingURL=dialect.d.ts.map

package/dist/dialect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../src/dialect.ts"],"names":[],"mappings":"AAIA,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAA;AAE9B;;;;;GAKG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;IAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAChC,CAAA;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQxE"}

package/dist/dialect.js

@@ -0,0 +1,12 @@
+// src/dialect.ts — the database is SQLite (libsql locally and on Turso).
+import { is, isTable } from 'drizzle-orm';
+import { SQLiteTable } from 'drizzle-orm/sqlite-core';
+/** Every table must be a SQLite table. */
+export function assertSqliteSchema(schema) {
+    for (const [key, value] of Object.entries(schema)) {
+        if (isTable(value) && !is(value, SQLiteTable)) {
+            throw new Error(`[workerstack] "${key}" is not a SQLite table. Define every table with drizzle-orm/sqlite-core.`);
+        }
+    }
+}
+//# sourceMappingURL=dialect.js.map

package/dist/dialect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.js","sourceRoot":"","sources":["../src/dialect.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAkBrD,0CAA0C;AAC1C,MAAM,UAAU,kBAAkB,CAAC,MAA+B;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,kBAAkB,GAAG,2EAA2E,CACjG,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["// src/dialect.ts — the database is SQLite (libsql locally and on Turso).\nimport { is, isTable } from 'drizzle-orm'\nimport { SQLiteTable } from 'drizzle-orm/sqlite-core'\n\n/** The only dialect: SQLite (libsql, Turso). Kept in the blueprint schema. */\nexport type Dialect = 'sqlite'\n\n/**\n * Minimal structural view of a drizzle db. Internal modules run dynamic\n * tables (Record<string, unknown> schemas) where drizzle's generics add no\n * safety, so they accept this instead. The public surface (`app.db`, API\n * context) keeps full typing via `DbFor` in db.ts.\n */\nexport type AnyDb = {\n  select: (...args: any[]) => any\n  insert: (...args: any[]) => any\n  update: (...args: any[]) => any\n  delete: (...args: any[]) => any\n}\n\n/** Every table must be a SQLite table. */\nexport function assertSqliteSchema(schema: Record<string, unknown>): void {\n  for (const [key, value] of Object.entries(schema)) {\n    if (isTable(value) && !is(value, SQLiteTable)) {\n      throw new Error(\n        `[workerstack] \"${key}\" is not a SQLite table. Define every table with drizzle-orm/sqlite-core.`,\n      )\n    }\n  }\n}\n"]}

package/dist/email/smtp.d.ts

@@ -0,0 +1,20 @@
+import type { EmailAdapter } from '../email.js';
+import type { EmailMessage, SentEmail } from '../email.js';
+import type { MessagingDescriptor } from '../messaging/types.js';
+type SmtpTransport = {
+    sendMail(message: Record<string, unknown>): Promise<{
+        messageId?: string;
+    }>;
+};
+export declare function createSmtpAdapter(options: {
+    url: string;
+}, createTransport?: (url: string) => SmtpTransport): EmailAdapter;
+export declare const smtp: (options: {
+    url: string;
+    from?: string;
+}) => MessagingDescriptor<"email", "smtp", EmailMessage, SentEmail, {
+    adapter: EmailAdapter;
+    from?: string;
+}>;
+export {};
+//# sourceMappingURL=smtp.d.ts.map

package/dist/email/smtp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.d.ts","sourceRoot":"","sources":["../../src/email/smtp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAI7D,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5E,CAAA;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EACxB,eAAe,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,aACgB,GACjD,YAAY,CA6Bd;AAED,eAAO,MAAM,IAAI,GAAI,SAAS;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,KAAG,mBAAmB,CACrB,OAAO,EACP,MAAM,EACN,YAAY,EACZ,SAAS,EACT;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAKtC,CAAA"}

package/dist/email/smtp.js

@@ -0,0 +1,31 @@
+import nodemailer from 'nodemailer';
+import { descriptor } from '../messaging/types.js';
+export function createSmtpAdapter(options, createTransport = (url) => nodemailer.createTransport(url)) {
+    const toArray = (v) => v === undefined ? undefined : Array.isArray(v) ? v : [v];
+    let transportPromise = null;
+    const getTransport = () => {
+        transportPromise ??= Promise.resolve(createTransport(options.url));
+        return transportPromise;
+    };
+    return {
+        async send(msg) {
+            const transport = await getTransport();
+            const info = await transport.sendMail({
+                from: msg.from,
+                to: toArray(msg.to).join(', '),
+                subject: msg.subject,
+                html: msg.html,
+                text: msg.text,
+                replyTo: msg.replyTo,
+                cc: toArray(msg.cc)?.join(', '),
+                bcc: toArray(msg.bcc)?.join(', '),
+            });
+            return { id: info.messageId };
+        },
+    };
+}
+export const smtp = (options) => descriptor('email', 'smtp', {
+    adapter: createSmtpAdapter(options),
+    from: options.from,
+});
+//# sourceMappingURL=smtp.js.map

package/dist/email/smtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../src/email/smtp.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAA;AAMnC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAM/C,MAAM,UAAU,iBAAiB,CAC/B,OAAwB,EACxB,kBAAkD,CAAC,GAAG,EAAE,EAAE,CACxD,UAAU,CAAC,eAAe,CAAC,GAAG,CAAkB;IAElD,MAAM,OAAO,GAAG,CAAC,CAAgC,EAAE,EAAE,CACnD,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE1D,IAAI,gBAAgB,GAER,IAAI,CAAA;IAEhB,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAClE,OAAO,gBAAgB,CAAA;IACzB,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAA;YACtC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAGpB,EAMC,EAAE,CACF,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE;IAC1B,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC;IACnC,IAAI,EAAE,OAAO,CAAC,IAAI;CACnB,CAAC,CAAA","sourcesContent":["import nodemailer from 'nodemailer'\n\nimport type { EmailAdapter } from '../email'\nimport type { EmailMessage, SentEmail } from '../email'\nimport type { MessagingDescriptor } from '../messaging/types'\n\nimport { descriptor } from '../messaging/types'\n\ntype SmtpTransport = {\n  sendMail(message: Record<string, unknown>): Promise<{ messageId?: string }>\n}\n\nexport function createSmtpAdapter(\n  options: { url: string },\n  createTransport: (url: string) => SmtpTransport = (url) =>\n    nodemailer.createTransport(url) as SmtpTransport,\n): EmailAdapter {\n  const toArray = (v: string | string[] | undefined) =>\n    v === undefined ? undefined : Array.isArray(v) ? v : [v]\n\n  let transportPromise: Promise<{\n    sendMail(opts: Record<string, unknown>): Promise<{ messageId?: string }>\n  }> | null = null\n\n  const getTransport = () => {\n    transportPromise ??= Promise.resolve(createTransport(options.url))\n    return transportPromise\n  }\n\n  return {\n    async send(msg) {\n      const transport = await getTransport()\n      const info = await transport.sendMail({\n        from: msg.from,\n        to: toArray(msg.to)!.join(', '),\n        subject: msg.subject,\n        html: msg.html,\n        text: msg.text,\n        replyTo: msg.replyTo,\n        cc: toArray(msg.cc)?.join(', '),\n        bcc: toArray(msg.bcc)?.join(', '),\n      })\n      return { id: info.messageId }\n    },\n  }\n}\n\nexport const smtp = (options: {\n  url: string\n  from?: string\n}): MessagingDescriptor<\n  'email',\n  'smtp',\n  EmailMessage,\n  SentEmail,\n  { adapter: EmailAdapter; from?: string }\n> =>\n  descriptor('email', 'smtp', {\n    adapter: createSmtpAdapter(options),\n    from: options.from,\n  })\n"]}

package/dist/email.d.ts

@@ -0,0 +1,26 @@
+export type EmailMessage = {
+    to: string | string[];
+    subject: string;
+    html?: string;
+    text?: string;
+    from?: string;
+    replyTo?: string;
+    cc?: string | string[];
+    bcc?: string | string[];
+};
+export type SentEmail = {
+    id?: string;
+    providerId?: string;
+};
+/** Adapters receive the message with `from` already resolved. */
+export type EmailAdapter = {
+    send(msg: EmailMessage & {
+        from: string;
+    }): Promise<{
+        id?: string;
+    }>;
+};
+export type EmailFacade = {
+    send(msg: EmailMessage): Promise<SentEmail>;
+};
+//# sourceMappingURL=email.d.ts.map

package/dist/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,iEAAiE;AACjE,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACrE,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;CAC5C,CAAA"}

package/dist/email.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=email.js.map

package/dist/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"","sourcesContent":["export type EmailMessage = {\n  to: string | string[]\n  subject: string\n  html?: string\n  text?: string\n  from?: string\n  replyTo?: string\n  cc?: string | string[]\n  bcc?: string | string[]\n}\n\nexport type SentEmail = { id?: string; providerId?: string }\n\n/** Adapters receive the message with `from` already resolved. */\nexport type EmailAdapter = {\n  send(msg: EmailMessage & { from: string }): Promise<{ id?: string }>\n}\n\nexport type EmailFacade = {\n  send(msg: EmailMessage): Promise<SentEmail>\n}\n"]}

package/dist/env-probe.d.ts

@@ -0,0 +1,9 @@
+import type { EnvConfigInput } from './env.js';
+export declare class BlueprintProbeError extends Error {
+    constructor(key: string);
+}
+export declare function createEnvProbeSources(envSchema: EnvConfigInput | undefined, configured: Record<string, string | undefined>): readonly [
+    Record<string, string | undefined>,
+    Record<string, string | undefined>
+];
+//# sourceMappingURL=env-probe.d.ts.map

package/dist/env-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-probe.d.ts","sourceRoot":"","sources":["../src/env-probe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAwB3C,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,GAAG,EAAE,MAAM;CAOxB;AAmCD,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,cAAc,GAAG,SAAS,EACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC7C,SAAS;IACV,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,CAUA"}

package/dist/env-probe.js

@@ -0,0 +1,72 @@
+import { validateStandardSchema } from './standard-schema.js';
+const CANDIDATES = [
+    undefined,
+    '',
+    'probe',
+    'true',
+    'false',
+    '0',
+    '1',
+    'https://example.invalid',
+    'file:./workerstack-probe.db',
+    'probe@example.invalid',
+    '00000000-0000-4000-8000-000000000000',
+];
+const BASE_SOURCE = {
+    NODE_ENV: 'production',
+    AUTH_SECRET: 'workerstack-blueprint-probe-secret',
+    DATABASE_URL: 'file:./workerstack-blueprint-probe.db',
+};
+export class BlueprintProbeError extends Error {
+    constructor(key) {
+        super(`[workerstack] cannot synthesize a valid blueprint probe for env key ${key}; ` +
+            'provide a valid value while generating the blueprint');
+        this.name = 'BlueprintProbeError';
+    }
+}
+function identity(value) {
+    if (value === undefined)
+        return 'undefined';
+    if (typeof value === 'number' && Number.isNaN(value))
+        return 'number:NaN';
+    try {
+        return `${typeof value}:${JSON.stringify(value)}`;
+    }
+    catch {
+        return `${typeof value}:${String(value)}`;
+    }
+}
+function acceptedValues(key, schema, configured) {
+    const accepted = [];
+    const outputs = new Set();
+    for (const candidate of [configured, ...CANDIDATES]) {
+        try {
+            const output = validateStandardSchema(schema, candidate, 'env');
+            const id = identity(output);
+            if (outputs.has(id))
+                continue;
+            outputs.add(id);
+            accepted.push(candidate);
+            if (accepted.length === 2)
+                return accepted;
+        }
+        catch {
+            // Candidate failures are expected. The eventual error names only the key.
+        }
+    }
+    if (accepted.length === 0)
+        throw new BlueprintProbeError(key);
+    return accepted;
+}
+export function createEnvProbeSources(envSchema, configured) {
+    const first = { ...BASE_SOURCE };
+    const second = { ...BASE_SOURCE };
+    const variables = { ...envSchema?.server, ...envSchema?.client };
+    for (const [key, schema] of Object.entries(variables)) {
+        const values = acceptedValues(key, schema, configured[key]);
+        first[key] = values[0];
+        second[key] = values[1] ?? values[0];
+    }
+    return [first, second];
+}
+//# sourceMappingURL=env-probe.js.map

package/dist/env-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-probe.js","sourceRoot":"","sources":["../src/env-probe.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,MAAM,UAAU,GAAoC;IAClD,SAAS;IACT,EAAE;IACF,OAAO;IACP,MAAM;IACN,OAAO;IACP,GAAG;IACH,GAAG;IACH,yBAAyB;IACzB,6BAA6B;IAC7B,uBAAuB;IACvB,sCAAsC;CACvC,CAAA;AAED,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,YAAY;IACtB,WAAW,EAAE,oCAAoC;IACjD,YAAY,EAAE,uCAAuC;CACT,CAAA;AAE9C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,GAAW;QACrB,KAAK,CACH,uEAAuE,GAAG,IAAI;YAC5E,sDAAsD,CACzD,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IACzE,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,GAAW,EACX,MAAwB,EACxB,UAA8B;IAE9B,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,SAAS,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;YAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAQ;YAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAC7D,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAqC,EACrC,UAA8C;IAK9C,MAAM,KAAK,GAAuC,EAAE,GAAG,WAAW,EAAE,CAAA;IACpE,MAAM,MAAM,GAAuC,EAAE,GAAG,WAAW,EAAE,CAAA;IACrE,MAAM,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,CAAA;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3D,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AACxB,CAAC","sourcesContent":["import type { StandardSchemaV1 } from '@standard-schema/spec'\n\nimport type { EnvConfigInput } from './env'\n\nimport { validateStandardSchema } from './standard-schema'\n\nconst CANDIDATES: readonly (string | undefined)[] = [\n  undefined,\n  '',\n  'probe',\n  'true',\n  'false',\n  '0',\n  '1',\n  'https://example.invalid',\n  'file:./workerstack-probe.db',\n  'probe@example.invalid',\n  '00000000-0000-4000-8000-000000000000',\n]\n\nconst BASE_SOURCE = {\n  NODE_ENV: 'production',\n  AUTH_SECRET: 'workerstack-blueprint-probe-secret',\n  DATABASE_URL: 'file:./workerstack-blueprint-probe.db',\n} satisfies Record<string, string | undefined>\n\nexport class BlueprintProbeError extends Error {\n  constructor(key: string) {\n    super(\n      `[workerstack] cannot synthesize a valid blueprint probe for env key ${key}; ` +\n        'provide a valid value while generating the blueprint',\n    )\n    this.name = 'BlueprintProbeError'\n  }\n}\n\nfunction identity(value: unknown): string {\n  if (value === undefined) return 'undefined'\n  if (typeof value === 'number' && Number.isNaN(value)) return 'number:NaN'\n  try {\n    return `${typeof value}:${JSON.stringify(value)}`\n  } catch {\n    return `${typeof value}:${String(value)}`\n  }\n}\n\nfunction acceptedValues(\n  key: string,\n  schema: StandardSchemaV1,\n  configured: string | undefined,\n): (string | undefined)[] {\n  const accepted: (string | undefined)[] = []\n  const outputs = new Set<string>()\n  for (const candidate of [configured, ...CANDIDATES]) {\n    try {\n      const output = validateStandardSchema(schema, candidate, 'env')\n      const id = identity(output)\n      if (outputs.has(id)) continue\n      outputs.add(id)\n      accepted.push(candidate)\n      if (accepted.length === 2) return accepted\n    } catch {\n      // Candidate failures are expected. The eventual error names only the key.\n    }\n  }\n  if (accepted.length === 0) throw new BlueprintProbeError(key)\n  return accepted\n}\n\nexport function createEnvProbeSources(\n  envSchema: EnvConfigInput | undefined,\n  configured: Record<string, string | undefined>,\n): readonly [\n  Record<string, string | undefined>,\n  Record<string, string | undefined>,\n] {\n  const first: Record<string, string | undefined> = { ...BASE_SOURCE }\n  const second: Record<string, string | undefined> = { ...BASE_SOURCE }\n  const variables = { ...envSchema?.server, ...envSchema?.client }\n  for (const [key, schema] of Object.entries(variables)) {\n    const values = acceptedValues(key, schema, configured[key])\n    first[key] = values[0]\n    second[key] = values[1] ?? values[0]\n  }\n  return [first, second]\n}\n"]}

package/dist/env.d.ts

@@ -0,0 +1,62 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+export declare const CLIENT_PREFIX: "PUBLIC_";
+/**
+ * Static, value-free metadata about an environment key. It reaches the manifest
+ * and the committed blueprint, so it must never contain a value or a secret.
+ */
+export type EnvVarMeta = {
+    /**
+     * Whether the value is a secret. Defaults to `true` for server keys and
+     * `false` for client keys. A client key can never be sensitive: `PUBLIC_*`
+     * values are compiled into the browser bundle.
+     */
+    sensitive?: boolean;
+    /** Prose shown to whoever fills this key in. Max 200 characters. */
+    description?: string;
+};
+export type EnvConfigInput = {
+    server?: Record<string, StandardSchemaV1>;
+    client?: Record<string, StandardSchemaV1>;
+    /** Explicit value source for client vars (e.g. Vite's import.meta.env). */
+    runtimeEnv?: Record<string, unknown>;
+    /** Value-free metadata per key, keyed by the key's own name. */
+    meta?: Record<string, EnvVarMeta>;
+};
+/** Vars workerstack itself consumes, always validated. */
+export type BaseEnv = {
+    NODE_ENV?: string;
+    DATABASE_URL: string;
+    DATABASE_AUTH_TOKEN?: string;
+    AUTH_SECRET: string;
+    RESEND_API_KEY?: string;
+    WORKERSTACK_MESSAGING_CONFIG?: string;
+    WORKERSTACK_BLUEPRINT_PATH?: string;
+    BUNDERHOST_ENVIRONMENT_ID?: string;
+    /** Deployed commit SHA, injected by the platform. Reported by readiness. */
+    WORKERSTACK_REVISION?: string;
+};
+type InferVars<T> = T extends Record<string, StandardSchemaV1> ? {
+    [K in keyof T]: StandardSchemaV1.InferOutput<T[K]>;
+} : unknown;
+export type ValidatedEnv<TEnv extends EnvConfigInput | undefined> = [
+    TEnv
+] extends [EnvConfigInput] ? BaseEnv & InferVars<NonNullable<TEnv>['server']> & InferVars<NonNullable<TEnv>['client']> : BaseEnv;
+export declare class WorkerstackEnvError extends Error {
+    readonly issues: string[];
+    constructor(issues: string[]);
+}
+export type ValidateEnvOptions = {
+    /** Value source; defaults to process.env. Tests pass this explicitly. */
+    source?: Record<string, string | undefined>;
+    /** Dialect-aware DATABASE_URL fallback; workerstack passes it. */
+    defaultDatabaseUrl?: string;
+};
+export declare function validateEnv<TEnv extends EnvConfigInput | undefined>(envConfig: TEnv, options?: ValidateEnvOptions): ValidatedEnv<TEnv>;
+/**
+ * Browser-side companion (t3-env style): validates ONLY the client section.
+ * Server keys exist on the returned object as traps that throw on access, so
+ * a leaked import fails loudly instead of silently reading undefined.
+ */
+export declare function createClientEnv<TEnv extends EnvConfigInput>(envConfig: TEnv): InferVars<TEnv['client']>;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAO7D,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAA;AAE/C;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACzC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CAClC,CAAA;AAED,0DAA0D;AAC1D,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,KAAK,SAAS,CAAC,CAAC,IACd,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACtC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACtD,OAAO,CAAA;AAGb,MAAM,MAAM,YAAY,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,IAAI;IAClE,IAAI;CACL,SAAS,CAAC,cAAc,CAAC,GACtB,OAAO,GACL,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACtC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GACxC,OAAO,CAAA;AAEX,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;gBAEb,MAAM,EAAE,MAAM,EAAE;CAK7B;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,CAAA;AAqCD,wBAAgB,WAAW,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,EACjE,SAAS,EAAE,IAAI,EACf,OAAO,GAAE,kBAAuB,GAC/B,YAAY,CAAC,IAAI,CAAC,CA2BpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,SAAS,cAAc,EACzD,SAAS,EAAE,IAAI,GACd,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAsB3B"}

package/dist/env.js

@@ -0,0 +1,86 @@
+import { StandardSchemaValidationError, validateStandardSchema, } from './standard-schema.js';
+export const CLIENT_PREFIX = 'PUBLIC_';
+export class WorkerstackEnvError extends Error {
+    issues;
+    constructor(issues) {
+        super(`Invalid environment:\n  - ${issues.join('\n  - ')}`);
+        this.name = 'WorkerstackEnvError';
+        this.issues = issues;
+    }
+}
+const DEV_AUTH_SECRET = 'dev-secret-change-in-prod';
+function validateSection(section, kind, source, issues, out) {
+    for (const [key, schema] of Object.entries(section ?? {})) {
+        const isPublic = key.startsWith(CLIENT_PREFIX);
+        if (kind === 'server' && isPublic) {
+            issues.push(`${key}: server vars must not start with ${CLIENT_PREFIX} (move it to env.client)`);
+            continue;
+        }
+        if (kind === 'client' && !isPublic) {
+            issues.push(`${key}: client vars must start with ${CLIENT_PREFIX} (rename it or move it to env.server)`);
+            continue;
+        }
+        try {
+            out[key] = validateStandardSchema(schema, source[key], 'env');
+        }
+        catch (error) {
+            if (!(error instanceof StandardSchemaValidationError))
+                throw error;
+            for (const issue of error.issues) {
+                const path = issue.path.map(String).join('.');
+                issues.push(`${key}${path ? `.${path}` : ''}: ${issue.message}`);
+            }
+        }
+    }
+}
+export function validateEnv(envConfig, options = {}) {
+    const source = options.source ?? process.env;
+    const issues = [];
+    const isProduction = source.NODE_ENV === 'production';
+    const base = {
+        NODE_ENV: source.NODE_ENV,
+        DATABASE_URL: source.DATABASE_URL ?? options.defaultDatabaseUrl ?? 'file:./data.db',
+        DATABASE_AUTH_TOKEN: source.DATABASE_AUTH_TOKEN,
+        AUTH_SECRET: source.AUTH_SECRET ?? DEV_AUTH_SECRET,
+        RESEND_API_KEY: source.RESEND_API_KEY,
+        WORKERSTACK_MESSAGING_CONFIG: source.WORKERSTACK_MESSAGING_CONFIG,
+        WORKERSTACK_BLUEPRINT_PATH: source.WORKERSTACK_BLUEPRINT_PATH,
+        BUNDERHOST_ENVIRONMENT_ID: source.BUNDERHOST_ENVIRONMENT_ID,
+        WORKERSTACK_REVISION: source.WORKERSTACK_REVISION,
+    };
+    if (isProduction && !source.AUTH_SECRET) {
+        issues.push('AUTH_SECRET: required in production');
+    }
+    const userVars = {};
+    validateSection(envConfig?.server, 'server', source, issues, userVars);
+    validateSection(envConfig?.client, 'client', source, issues, userVars);
+    if (issues.length > 0)
+        throw new WorkerstackEnvError(issues);
+    return { ...base, ...userVars };
+}
+/**
+ * Browser-side companion (t3-env style): validates ONLY the client section.
+ * Server keys exist on the returned object as traps that throw on access, so
+ * a leaked import fails loudly instead of silently reading undefined.
+ */
+export function createClientEnv(envConfig) {
+    const source = envConfig.runtimeEnv ??
+        (typeof process !== 'undefined'
+            ? process.env
+            : {});
+    const issues = [];
+    const values = {};
+    validateSection(envConfig.client, 'client', source, issues, values);
+    if (issues.length > 0)
+        throw new WorkerstackEnvError(issues);
+    const serverKeys = new Set(Object.keys(envConfig.server ?? {}));
+    return new Proxy(values, {
+        get(target, prop) {
+            if (typeof prop === 'string' && serverKeys.has(prop)) {
+                throw new Error(`${prop} is server-only and not available in client env`);
+            }
+            return Reflect.get(target, prop);
+        },
+    });
+}
+//# sourceMappingURL=env.js.map