workerstack 0.1.0-beta.0

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAA;AAsD/C,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAU;IAEzB,YAAY,MAAgB;QAC1B,KAAK,CAAC,6BAA6B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AASD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAEnD,SAAS,eAAe,CACtB,OAAqD,EACrD,IAAyB,EACzB,MAA+B,EAC/B,MAAgB,EAChB,GAA4B;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,qCAAqC,aAAa,0BAA0B,CACnF,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,iCAAiC,aAAa,uCAAuC,CAC5F,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,6BAA6B,CAAC;gBAAE,MAAM,KAAK,CAAA;YAClE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAK,OAAO,CAAC,GAA0C,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAA;IAErD,MAAM,IAAI,GAAY;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EACV,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;QACvE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe;QAClD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,4BAA4B,EAAE,MAAM,CAAC,4BAA4B;QACjE,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;KAClD,CAAA;IACD,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAEtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC5D,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAwB,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAe;IAEf,MAAM,MAAM,GACV,SAAS,CAAC,UAAU;QACpB,CAAC,OAAO,OAAO,KAAK,WAAW;YAC7B,CAAC,CAAE,OAAO,CAAC,GAA+B;YAC1C,CAAC,CAAC,EAAE,CAAC,CAAA;IACT,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAE5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iDAAiD,CACzD,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;KACF,CAA8B,CAAA;AACjC,CAAC","sourcesContent":["// src/env.ts — env validation. Browser-safe: type-only Standard Schema import.\nimport type { StandardSchemaV1 } from '@standard-schema/spec'\n\nimport {\n  StandardSchemaValidationError,\n  validateStandardSchema,\n} from './standard-schema'\n\nexport const CLIENT_PREFIX = 'PUBLIC_' as const\n\n/**\n * Static, value-free metadata about an environment key. It reaches the manifest\n * and the committed blueprint, so it must never contain a value or a secret.\n */\nexport type EnvVarMeta = {\n  /**\n   * Whether the value is a secret. Defaults to `true` for server keys and\n   * `false` for client keys. A client key can never be sensitive: `PUBLIC_*`\n   * values are compiled into the browser bundle.\n   */\n  sensitive?: boolean\n  /** Prose shown to whoever fills this key in. Max 200 characters. */\n  description?: string\n}\n\nexport type EnvConfigInput = {\n  server?: Record<string, StandardSchemaV1>\n  client?: Record<string, StandardSchemaV1>\n  /** Explicit value source for client vars (e.g. Vite's import.meta.env). */\n  runtimeEnv?: Record<string, unknown>\n  /** Value-free metadata per key, keyed by the key's own name. */\n  meta?: Record<string, EnvVarMeta>\n}\n\n/** Vars workerstack itself consumes, always validated. */\nexport type BaseEnv = {\n  NODE_ENV?: string\n  DATABASE_URL: string\n  DATABASE_AUTH_TOKEN?: string\n  AUTH_SECRET: string\n  RESEND_API_KEY?: string\n  WORKERSTACK_MESSAGING_CONFIG?: string\n  WORKERSTACK_BLUEPRINT_PATH?: string\n  BUNDERHOST_ENVIRONMENT_ID?: string\n  /** Deployed commit SHA, injected by the platform. Reported by readiness. */\n  WORKERSTACK_REVISION?: string\n}\n\ntype InferVars<T> =\n  T extends Record<string, StandardSchemaV1>\n    ? { [K in keyof T]: StandardSchemaV1.InferOutput<T[K]> }\n    : unknown\n\n// Non-distributive so `ValidatedEnv<undefined>` is BaseEnv, not `never`.\nexport type ValidatedEnv<TEnv extends EnvConfigInput | undefined> = [\n  TEnv,\n] extends [EnvConfigInput]\n  ? BaseEnv &\n      InferVars<NonNullable<TEnv>['server']> &\n      InferVars<NonNullable<TEnv>['client']>\n  : BaseEnv\n\nexport class WorkerstackEnvError extends Error {\n  readonly issues: string[]\n\n  constructor(issues: string[]) {\n    super(`Invalid environment:\\n  - ${issues.join('\\n  - ')}`)\n    this.name = 'WorkerstackEnvError'\n    this.issues = issues\n  }\n}\n\nexport type ValidateEnvOptions = {\n  /** Value source; defaults to process.env. Tests pass this explicitly. */\n  source?: Record<string, string | undefined>\n  /** Dialect-aware DATABASE_URL fallback; workerstack passes it. */\n  defaultDatabaseUrl?: string\n}\n\nconst DEV_AUTH_SECRET = 'dev-secret-change-in-prod'\n\nfunction validateSection(\n  section: Record<string, StandardSchemaV1> | undefined,\n  kind: 'server' | 'client',\n  source: Record<string, unknown>,\n  issues: string[],\n  out: Record<string, unknown>,\n) {\n  for (const [key, schema] of Object.entries(section ?? {})) {\n    const isPublic = key.startsWith(CLIENT_PREFIX)\n    if (kind === 'server' && isPublic) {\n      issues.push(\n        `${key}: server vars must not start with ${CLIENT_PREFIX} (move it to env.client)`,\n      )\n      continue\n    }\n    if (kind === 'client' && !isPublic) {\n      issues.push(\n        `${key}: client vars must start with ${CLIENT_PREFIX} (rename it or move it to env.server)`,\n      )\n      continue\n    }\n    try {\n      out[key] = validateStandardSchema(schema, source[key], 'env')\n    } catch (error) {\n      if (!(error instanceof StandardSchemaValidationError)) throw error\n      for (const issue of error.issues) {\n        const path = issue.path.map(String).join('.')\n        issues.push(`${key}${path ? `.${path}` : ''}: ${issue.message}`)\n      }\n    }\n  }\n}\n\nexport function validateEnv<TEnv extends EnvConfigInput | undefined>(\n  envConfig: TEnv,\n  options: ValidateEnvOptions = {},\n): ValidatedEnv<TEnv> {\n  const source =\n    options.source ?? (process.env as Record<string, string | undefined>)\n  const issues: string[] = []\n  const isProduction = source.NODE_ENV === 'production'\n\n  const base: BaseEnv = {\n    NODE_ENV: source.NODE_ENV,\n    DATABASE_URL:\n      source.DATABASE_URL ?? options.defaultDatabaseUrl ?? 'file:./data.db',\n    DATABASE_AUTH_TOKEN: source.DATABASE_AUTH_TOKEN,\n    AUTH_SECRET: source.AUTH_SECRET ?? DEV_AUTH_SECRET,\n    RESEND_API_KEY: source.RESEND_API_KEY,\n    WORKERSTACK_MESSAGING_CONFIG: source.WORKERSTACK_MESSAGING_CONFIG,\n    WORKERSTACK_BLUEPRINT_PATH: source.WORKERSTACK_BLUEPRINT_PATH,\n    BUNDERHOST_ENVIRONMENT_ID: source.BUNDERHOST_ENVIRONMENT_ID,\n    WORKERSTACK_REVISION: source.WORKERSTACK_REVISION,\n  }\n  if (isProduction && !source.AUTH_SECRET) {\n    issues.push('AUTH_SECRET: required in production')\n  }\n  const userVars: Record<string, unknown> = {}\n  validateSection(envConfig?.server, 'server', source, issues, userVars)\n  validateSection(envConfig?.client, 'client', source, issues, userVars)\n\n  if (issues.length > 0) throw new WorkerstackEnvError(issues)\n  return { ...base, ...userVars } as ValidatedEnv<TEnv>\n}\n\n/**\n * Browser-side companion (t3-env style): validates ONLY the client section.\n * Server keys exist on the returned object as traps that throw on access, so\n * a leaked import fails loudly instead of silently reading undefined.\n */\nexport function createClientEnv<TEnv extends EnvConfigInput>(\n  envConfig: TEnv,\n): InferVars<TEnv['client']> {\n  const source =\n    envConfig.runtimeEnv ??\n    (typeof process !== 'undefined'\n      ? (process.env as Record<string, unknown>)\n      : {})\n  const issues: string[] = []\n  const values: Record<string, unknown> = {}\n  validateSection(envConfig.client, 'client', source, issues, values)\n  if (issues.length > 0) throw new WorkerstackEnvError(issues)\n\n  const serverKeys = new Set(Object.keys(envConfig.server ?? {}))\n  return new Proxy(values, {\n    get(target, prop) {\n      if (typeof prop === 'string' && serverKeys.has(prop)) {\n        throw new Error(\n          `${prop} is server-only and not available in client env`,\n        )\n      }\n      return Reflect.get(target, prop)\n    },\n  }) as InferVars<TEnv['client']>\n}\n"]}

package/dist/errors.d.ts

@@ -0,0 +1,153 @@
+import * as v from 'valibot';
+/**
+ * Every code we raise is one oRPC already knows, so handlers derive the HTTP
+ * status from `COMMON_ERROR_STATUS_MAP` on their own and clients can use the
+ * standard `isDefinedError` helpers. Do not add a code oRPC has no status for —
+ * it would silently answer 500.
+ */
+export declare const WORKERSTACK_ERROR_CODES: readonly ["BAD_REQUEST", "UNAUTHORIZED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "PAYLOAD_TOO_LARGE", "TOO_MANY_REQUESTS"];
+export type WorkerstackErrorCode = (typeof WORKERSTACK_ERROR_CODES)[number];
+export declare const WORKERSTACK_ERRORS: {
+    readonly BAD_REQUEST: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"BAD_REQUEST", undefined>, "BAD_REQUEST">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "BAD_REQUEST";
+        }>;
+    };
+    readonly UNAUTHORIZED: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"UNAUTHORIZED", undefined>, "UNAUTHORIZED">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "UNAUTHORIZED";
+        }>;
+    };
+    readonly FORBIDDEN: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"FORBIDDEN", undefined>, "FORBIDDEN">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "FORBIDDEN";
+        }>;
+    };
+    readonly NOT_FOUND: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"NOT_FOUND", undefined>, "NOT_FOUND">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "NOT_FOUND";
+        }>;
+    };
+    readonly CONFLICT: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"CONFLICT", undefined>, "CONFLICT">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "CONFLICT";
+        }>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"PAYLOAD_TOO_LARGE", undefined>, "PAYLOAD_TOO_LARGE">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "PAYLOAD_TOO_LARGE";
+        }>;
+    };
+    readonly TOO_MANY_REQUESTS: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"TOO_MANY_REQUESTS", undefined>, "TOO_MANY_REQUESTS">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "TOO_MANY_REQUESTS";
+        }>;
+    };
+};
+export declare class WorkerstackError extends Error {
+    readonly code: WorkerstackErrorCode;
+    readonly details?: unknown | undefined;
+    readonly status: number;
+    constructor(code: WorkerstackErrorCode, message: string, details?: unknown | undefined, options?: ErrorOptions);
+}
+export declare const mapWorkerstackErrors: import("@orpc/server").DecoratedMiddleware<import("@orpc/server").DefaultInitialContext & object, object, unknown, any, {
+    readonly BAD_REQUEST: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"BAD_REQUEST", undefined>, "BAD_REQUEST">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "BAD_REQUEST";
+        }>;
+    };
+    readonly UNAUTHORIZED: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"UNAUTHORIZED", undefined>, "UNAUTHORIZED">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "UNAUTHORIZED";
+        }>;
+    };
+    readonly FORBIDDEN: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"FORBIDDEN", undefined>, "FORBIDDEN">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "FORBIDDEN";
+        }>;
+    };
+    readonly NOT_FOUND: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"NOT_FOUND", undefined>, "NOT_FOUND">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "NOT_FOUND";
+        }>;
+    };
+    readonly CONFLICT: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"CONFLICT", undefined>, "CONFLICT">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "CONFLICT";
+        }>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"PAYLOAD_TOO_LARGE", undefined>, "PAYLOAD_TOO_LARGE">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "PAYLOAD_TOO_LARGE";
+        }>;
+    };
+    readonly TOO_MANY_REQUESTS: {
+        readonly data: v.OptionalSchema<v.StrictObjectSchema<{
+            readonly code: v.OptionalSchema<v.LiteralSchema<"TOO_MANY_REQUESTS", undefined>, "TOO_MANY_REQUESTS">;
+            readonly details: v.OptionalSchema<v.UnknownSchema, undefined>;
+        }, undefined>, {
+            readonly code: "TOO_MANY_REQUESTS";
+        }>;
+    };
+}>;
+/**
+ * Sub-codes carried in `data.details.code` when the oRPC code alone loses
+ * information the client may want to branch on. Codes that duplicate an oRPC
+ * code are suppressed as redundant, see {@link CrudOperationError}.
+ */
+export declare const ErrorCode: {
+    readonly BAD_REQUEST: "BAD_REQUEST";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NOT_FOUND: "NOT_FOUND";
+    readonly CONFLICT: "CONFLICT";
+    readonly INVALID_CURSOR: "INVALID_CURSOR";
+    readonly TOO_MANY_REQUESTS: "TOO_MANY_REQUESTS";
+    readonly IDEMPOTENCY_REPLAY: "IDEMPOTENCY_REPLAY";
+    readonly IDEMPOTENCY_CONFLICT: "IDEMPOTENCY_CONFLICT";
+};
+export type ErrorCodeValue = (typeof ErrorCode)[keyof typeof ErrorCode];
+export declare class ListQueryError extends Error {
+    readonly code: ErrorCodeValue;
+    readonly details?: unknown;
+    constructor(message: string, code?: ErrorCodeValue, details?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAO5B;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,0HAQkC,CAAA;AAEtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAqB3E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQF,CAAA;AAE7B,qBAAa,gBAAiB,SAAQ,KAAK;IAIvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IAEnC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO;IAL5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAGZ,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,OAAO,YAAA,EAC1B,OAAO,CAAC,EAAE,YAAY;CAMzB;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgC7B,CAAA;AAEJ;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;CASZ,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAEvE,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;gBAGxB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,cAAsC,EAC5C,OAAO,CAAC,EAAE,OAAO;CAOpB"}

package/dist/errors.js

@@ -0,0 +1,106 @@
+import { COMMON_ERROR_STATUS_MAP, ORPCError, os, } from '@orpc/server';
+import * as v from 'valibot';
+import { consoleLogger } from './logging.js';
+import { StandardSchemaValidationError } from './standard-schema.js';
+/**
+ * Every code we raise is one oRPC already knows, so handlers derive the HTTP
+ * status from `COMMON_ERROR_STATUS_MAP` on their own and clients can use the
+ * standard `isDefinedError` helpers. Do not add a code oRPC has no status for —
+ * it would silently answer 500.
+ */
+export const WORKERSTACK_ERROR_CODES = [
+    'BAD_REQUEST',
+    'UNAUTHORIZED',
+    'FORBIDDEN',
+    'NOT_FOUND',
+    'CONFLICT',
+    'PAYLOAD_TOO_LARGE',
+    'TOO_MANY_REQUESTS',
+];
+/**
+ * `data` and its `code` both default, so an application raises a declared
+ * error with a message alone: `errors.NOT_FOUND({ message })`. The code is
+ * already the name of the constructor, and repeating it at every call site is
+ * the reason applications fall back to a raw `ORPCError`. Clients still read a
+ * populated `data.code`, because the default fills it.
+ */
+function errorDataSchema(code) {
+    return v.optional(v.strictObject({
+        code: v.optional(v.literal(code), code),
+        details: v.optional(v.unknown()),
+    }), { code });
+}
+export const WORKERSTACK_ERRORS = {
+    BAD_REQUEST: { data: errorDataSchema('BAD_REQUEST') },
+    UNAUTHORIZED: { data: errorDataSchema('UNAUTHORIZED') },
+    FORBIDDEN: { data: errorDataSchema('FORBIDDEN') },
+    NOT_FOUND: { data: errorDataSchema('NOT_FOUND') },
+    CONFLICT: { data: errorDataSchema('CONFLICT') },
+    PAYLOAD_TOO_LARGE: { data: errorDataSchema('PAYLOAD_TOO_LARGE') },
+    TOO_MANY_REQUESTS: { data: errorDataSchema('TOO_MANY_REQUESTS') },
+};
+export class WorkerstackError extends Error {
+    code;
+    details;
+    status;
+    constructor(code, message, details, options) {
+        super(message, options);
+        this.code = code;
+        this.details = details;
+        this.name = 'WorkerstackError';
+        this.status = COMMON_ERROR_STATUS_MAP[code];
+    }
+}
+export const mapWorkerstackErrors = os
+    .errors(WORKERSTACK_ERRORS)
+    .middleware(async ({ next, path, context }) => {
+    try {
+        return await next();
+    }
+    catch (error) {
+        const mapped = error instanceof StandardSchemaValidationError
+            ? new WorkerstackError('BAD_REQUEST', error.message, error.issues, {
+                cause: error,
+            })
+            : error;
+        if (!(mapped instanceof WorkerstackError)) {
+            const procName = path?.length ? path.join('.') : 'unknown';
+            const logger = context.logger ?? consoleLogger;
+            logger.error(`[workerstack-api] Unhandled error in procedure "${procName}":`, error);
+            throw error;
+        }
+        throw new ORPCError(mapped.code, {
+            message: mapped.message,
+            data: mapped.details === undefined
+                ? { code: mapped.code }
+                : { code: mapped.code, details: mapped.details },
+            cause: mapped,
+        });
+    }
+});
+/**
+ * Sub-codes carried in `data.details.code` when the oRPC code alone loses
+ * information the client may want to branch on. Codes that duplicate an oRPC
+ * code are suppressed as redundant, see {@link CrudOperationError}.
+ */
+export const ErrorCode = {
+    BAD_REQUEST: 'BAD_REQUEST',
+    FORBIDDEN: 'FORBIDDEN',
+    NOT_FOUND: 'NOT_FOUND',
+    CONFLICT: 'CONFLICT',
+    INVALID_CURSOR: 'INVALID_CURSOR',
+    TOO_MANY_REQUESTS: 'TOO_MANY_REQUESTS',
+    IDEMPOTENCY_REPLAY: 'IDEMPOTENCY_REPLAY',
+    IDEMPOTENCY_CONFLICT: 'IDEMPOTENCY_CONFLICT',
+};
+export class ListQueryError extends Error {
+    code;
+    details;
+    constructor(message, code = ErrorCode.BAD_REQUEST, details) {
+        super(message);
+        this.name = 'ListQueryError';
+        this.code = code;
+        this.details = details;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,EAAE,GAEH,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,mBAAmB;CACiD,CAAA;AAItE;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,IAAW;IAEX,OAAO,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KACjC,CAAC,EACF,EAAE,IAAI,EAAE,CACT,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC,EAAE;IACrD,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,cAAc,CAAC,EAAE;IACvD,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE;IACjD,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE;IACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE;IAC/C,iBAAiB,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE;IACjE,iBAAiB,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE;CACtC,CAAA;AAE7B,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAI9B;IAEA;IALF,MAAM,CAAQ;IAEvB,YACW,IAA0B,EACnC,OAAe,EACN,OAAiB,EAC1B,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QALd,SAAI,GAAJ,IAAI,CAAsB;QAE1B,YAAO,GAAP,OAAO,CAAU;QAI1B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;QAC9B,IAAI,CAAC,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE;KACnC,MAAM,CAAC,kBAAkB,CAAC;KAC1B,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,6BAA6B;YAC5C,CAAC,CAAC,IAAI,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE;gBAC/D,KAAK,EAAE,KAAK;aACb,CAAC;YACJ,CAAC,CAAC,KAAK,CAAA;QACX,IAAI,CAAC,CAAC,MAAM,YAAY,gBAAgB,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAC1D,MAAM,MAAM,GACT,OAA0C,CAAC,MAAM,IAAI,aAAa,CAAA;YACrE,MAAM,CAAC,KAAK,CACV,mDAAmD,QAAQ,IAAI,EAC/D,KAAK,CACN,CAAA;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EACF,MAAM,CAAC,OAAO,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;YACpD,KAAK,EAAE,MAAM;SACd,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;CACpC,CAAA;AAIV,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAgB;IACpB,OAAO,CAAU;IAE1B,YACE,OAAe,EACf,OAAuB,SAAS,CAAC,WAAW,EAC5C,OAAiB;QAEjB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF","sourcesContent":["import {\n  COMMON_ERROR_STATUS_MAP,\n  ORPCError,\n  os,\n  type ErrorMap,\n} from '@orpc/server'\nimport * as v from 'valibot'\n\nimport type { WorkerstackLogger } from './logging'\n\nimport { consoleLogger } from './logging'\nimport { StandardSchemaValidationError } from './standard-schema'\n\n/**\n * Every code we raise is one oRPC already knows, so handlers derive the HTTP\n * status from `COMMON_ERROR_STATUS_MAP` on their own and clients can use the\n * standard `isDefinedError` helpers. Do not add a code oRPC has no status for —\n * it would silently answer 500.\n */\nexport const WORKERSTACK_ERROR_CODES = [\n  'BAD_REQUEST',\n  'UNAUTHORIZED',\n  'FORBIDDEN',\n  'NOT_FOUND',\n  'CONFLICT',\n  'PAYLOAD_TOO_LARGE',\n  'TOO_MANY_REQUESTS',\n] as const satisfies readonly (keyof typeof COMMON_ERROR_STATUS_MAP)[]\n\nexport type WorkerstackErrorCode = (typeof WORKERSTACK_ERROR_CODES)[number]\n\n/**\n * `data` and its `code` both default, so an application raises a declared\n * error with a message alone: `errors.NOT_FOUND({ message })`. The code is\n * already the name of the constructor, and repeating it at every call site is\n * the reason applications fall back to a raw `ORPCError`. Clients still read a\n * populated `data.code`, because the default fills it.\n */\nfunction errorDataSchema<const TCode extends WorkerstackErrorCode>(\n  code: TCode,\n) {\n  return v.optional(\n    v.strictObject({\n      code: v.optional(v.literal(code), code),\n      details: v.optional(v.unknown()),\n    }),\n    { code },\n  )\n}\n\nexport const WORKERSTACK_ERRORS = {\n  BAD_REQUEST: { data: errorDataSchema('BAD_REQUEST') },\n  UNAUTHORIZED: { data: errorDataSchema('UNAUTHORIZED') },\n  FORBIDDEN: { data: errorDataSchema('FORBIDDEN') },\n  NOT_FOUND: { data: errorDataSchema('NOT_FOUND') },\n  CONFLICT: { data: errorDataSchema('CONFLICT') },\n  PAYLOAD_TOO_LARGE: { data: errorDataSchema('PAYLOAD_TOO_LARGE') },\n  TOO_MANY_REQUESTS: { data: errorDataSchema('TOO_MANY_REQUESTS') },\n} as const satisfies ErrorMap\n\nexport class WorkerstackError extends Error {\n  readonly status: number\n\n  constructor(\n    readonly code: WorkerstackErrorCode,\n    message: string,\n    readonly details?: unknown,\n    options?: ErrorOptions,\n  ) {\n    super(message, options)\n    this.name = 'WorkerstackError'\n    this.status = COMMON_ERROR_STATUS_MAP[code]\n  }\n}\n\nexport const mapWorkerstackErrors = os\n  .errors(WORKERSTACK_ERRORS)\n  .middleware(async ({ next, path, context }) => {\n    try {\n      return await next()\n    } catch (error) {\n      const mapped =\n        error instanceof StandardSchemaValidationError\n          ? new WorkerstackError('BAD_REQUEST', error.message, error.issues, {\n              cause: error,\n            })\n          : error\n      if (!(mapped instanceof WorkerstackError)) {\n        const procName = path?.length ? path.join('.') : 'unknown'\n        const logger =\n          (context as { logger?: WorkerstackLogger }).logger ?? consoleLogger\n        logger.error(\n          `[workerstack-api] Unhandled error in procedure \"${procName}\":`,\n          error,\n        )\n        throw error\n      }\n\n      throw new ORPCError(mapped.code, {\n        message: mapped.message,\n        data:\n          mapped.details === undefined\n            ? { code: mapped.code }\n            : { code: mapped.code, details: mapped.details },\n        cause: mapped,\n      })\n    }\n  })\n\n/**\n * Sub-codes carried in `data.details.code` when the oRPC code alone loses\n * information the client may want to branch on. Codes that duplicate an oRPC\n * code are suppressed as redundant, see {@link CrudOperationError}.\n */\nexport const ErrorCode = {\n  BAD_REQUEST: 'BAD_REQUEST',\n  FORBIDDEN: 'FORBIDDEN',\n  NOT_FOUND: 'NOT_FOUND',\n  CONFLICT: 'CONFLICT',\n  INVALID_CURSOR: 'INVALID_CURSOR',\n  TOO_MANY_REQUESTS: 'TOO_MANY_REQUESTS',\n  IDEMPOTENCY_REPLAY: 'IDEMPOTENCY_REPLAY',\n  IDEMPOTENCY_CONFLICT: 'IDEMPOTENCY_CONFLICT',\n} as const\n\nexport type ErrorCodeValue = (typeof ErrorCode)[keyof typeof ErrorCode]\n\nexport class ListQueryError extends Error {\n  readonly code: ErrorCodeValue\n  readonly details?: unknown\n\n  constructor(\n    message: string,\n    code: ErrorCodeValue = ErrorCode.BAD_REQUEST,\n    details?: unknown,\n  ) {\n    super(message)\n    this.name = 'ListQueryError'\n    this.code = code\n    this.details = details\n  }\n}\n"]}

package/dist/handler.d.ts

@@ -0,0 +1,11 @@
+import type { RateLimitStore } from './platform.js';
+import { type RateLimitConfig } from './rate-limit.js';
+interface HandlerParts {
+    authHandler?: (req: Request) => Promise<Response>;
+    apiHandler?: (req: Request) => Promise<Response | null>;
+    rateLimit?: boolean | RateLimitConfig;
+    rateLimitStore?: RateLimitStore;
+}
+export declare function buildHandler(parts: HandlerParts): (req: Request) => Promise<Response>;
+export {};
+//# sourceMappingURL=handler.d.ts.map

package/dist/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAEtE,UAAU,YAAY;IACpB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACvD,SAAS,CAAC,EAAE,OAAO,GAAG,eAAe,CAAA;IACrC,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,YAAY,GAClB,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuBrC"}

package/dist/handler.js

@@ -0,0 +1,21 @@
+import { createRateLimiter } from './rate-limit.js';
+export function buildHandler(parts) {
+    const checkRateLimit = createRateLimiter(parts.rateLimit, parts.rateLimitStore);
+    return async (req) => {
+        const limited = await checkRateLimit(req);
+        if (limited)
+            return limited;
+        const pathname = new URL(req.url).pathname;
+        if (parts.authHandler &&
+            (pathname === '/api/auth' || pathname.startsWith('/api/auth/'))) {
+            return parts.authHandler(req);
+        }
+        if (parts.apiHandler) {
+            const apiRes = await parts.apiHandler(req);
+            if (apiRes)
+                return apiRes;
+        }
+        return new Response('Not Found', { status: 404 });
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAA;AAStE,MAAM,UAAU,YAAY,CAC1B,KAAmB;IAEnB,MAAM,cAAc,GAAG,iBAAiB,CACtC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAA;IAED,OAAO,KAAK,EAAE,GAAY,EAAqB,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;QAC1C,IACE,KAAK,CAAC,WAAW;YACjB,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAC/D,CAAC;YACD,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;YAC1C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAA;QAC3B,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC,CAAA;AACH,CAAC","sourcesContent":["// src/handler.ts\nimport type { RateLimitStore } from './platform'\n\nimport { createRateLimiter, type RateLimitConfig } from './rate-limit'\n\ninterface HandlerParts {\n  authHandler?: (req: Request) => Promise<Response>\n  apiHandler?: (req: Request) => Promise<Response | null>\n  rateLimit?: boolean | RateLimitConfig\n  rateLimitStore?: RateLimitStore\n}\n\nexport function buildHandler(\n  parts: HandlerParts,\n): (req: Request) => Promise<Response> {\n  const checkRateLimit = createRateLimiter(\n    parts.rateLimit,\n    parts.rateLimitStore,\n  )\n\n  return async (req: Request): Promise<Response> => {\n    const limited = await checkRateLimit(req)\n    if (limited) return limited\n\n    const pathname = new URL(req.url).pathname\n    if (\n      parts.authHandler &&\n      (pathname === '/api/auth' || pathname.startsWith('/api/auth/'))\n    ) {\n      return parts.authHandler(req)\n    }\n    if (parts.apiHandler) {\n      const apiRes = await parts.apiHandler(req)\n      if (apiRes) return apiRes\n    }\n    return new Response('Not Found', { status: 404 })\n  }\n}\n"]}

package/dist/hosted-contract.d.ts

@@ -0,0 +1,11 @@
+import type { WorkerstackManifest } from './manifest.js';
+export declare class HostedBlueprintMismatchError extends Error {
+    constructor(paths: readonly {
+        kind: string;
+        path: string;
+    }[]);
+}
+export declare function manifestFromBlueprint(source: string): WorkerstackManifest;
+export declare function assertManifestMatchesBlueprint(manifest: WorkerstackManifest, source: string): void;
+export declare function assertHostedBlueprintFile(manifest: WorkerstackManifest, path: string): Promise<void>;
+//# sourceMappingURL=hosted-contract.d.ts.map

package/dist/hosted-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-contract.d.ts","sourceRoot":"","sources":["../src/hosted-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAKrD,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,KAAK,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE;CAO7D;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAuBzE;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,MAAM,GACb,IAAI,CAIN;AAED,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/hosted-contract.js

@@ -0,0 +1,50 @@
+import { readFile } from 'node:fs/promises';
+import { parseBlueprintYaml } from './blueprint.js';
+import { diffManifests } from './manifest-diff.js';
+export class HostedBlueprintMismatchError extends Error {
+    constructor(paths) {
+        super('[workerstack] runtime declaration does not match the committed blueprint:\n' +
+            paths.map(({ kind, path }) => `  - ${kind}: ${path}`).join('\n'));
+        this.name = 'HostedBlueprintMismatchError';
+    }
+}
+export function manifestFromBlueprint(source) {
+    const blueprint = parseBlueprintYaml(source);
+    return {
+        version: blueprint.workerstack.manifestVersion,
+        database: {
+            dialect: blueprint.resources.database.dialect,
+            migrationsDirectory: blueprint.resources.database.migrationsDirectory,
+            tables: blueprint.resources.database.tables,
+        },
+        storage: blueprint.resources.storage,
+        realtime: blueprint.resources.realtime ?? { required: false },
+        messaging: blueprint.resources.messaging,
+        environment: blueprint.environment.map((entry) => ({
+            ...entry,
+            sensitive: entry.sensitive ?? entry.scope === 'server',
+        })),
+        api: blueprint.api ?? { operations: [] },
+        background: {
+            jobs: blueprint.background.jobs,
+            cron: blueprint.background.cron,
+            maintenance: blueprint.background.maintenance,
+        },
+    };
+}
+export function assertManifestMatchesBlueprint(manifest, source) {
+    const differences = diffManifests(manifestFromBlueprint(source), manifest);
+    if (differences.length > 0)
+        throw new HostedBlueprintMismatchError(differences);
+}
+export async function assertHostedBlueprintFile(manifest, path) {
+    let source;
+    try {
+        source = await readFile(path, 'utf8');
+    }
+    catch {
+        throw new Error(`[workerstack] hosted blueprint does not exist: ${path}`);
+    }
+    assertManifestMatchesBlueprint(manifest, source);
+}
+//# sourceMappingURL=hosted-contract.js.map

package/dist/hosted-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-contract.js","sourceRoot":"","sources":["../src/hosted-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAI3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,KAAgD;QAC1D,KAAK,CACH,6EAA6E;YAC3E,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnE,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,eAAe;QAC9C,QAAQ,EAAE;YACR,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO;YAC7C,mBAAmB,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB;YACrE,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM;SAC5C;QACD,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,OAAO;QACpC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC7D,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;QACxC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,KAAK;YACR,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;SACvD,CAAC,CAAC;QACH,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;QACxC,UAAU,EAAE;YACV,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI;YAC/B,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI;YAC/B,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW;SAC9C;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAA6B,EAC7B,MAAc;IAEd,MAAM,WAAW,GAAG,aAAa,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC1E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,IAAI,4BAA4B,CAAC,WAAW,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAA6B,EAC7B,IAAY;IAEZ,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAClD,CAAC","sourcesContent":["import { readFile } from 'node:fs/promises'\n\nimport type { WorkerstackManifest } from './manifest'\n\nimport { parseBlueprintYaml } from './blueprint'\nimport { diffManifests } from './manifest-diff'\n\nexport class HostedBlueprintMismatchError extends Error {\n  constructor(paths: readonly { kind: string; path: string }[]) {\n    super(\n      '[workerstack] runtime declaration does not match the committed blueprint:\\n' +\n        paths.map(({ kind, path }) => `  - ${kind}: ${path}`).join('\\n'),\n    )\n    this.name = 'HostedBlueprintMismatchError'\n  }\n}\n\nexport function manifestFromBlueprint(source: string): WorkerstackManifest {\n  const blueprint = parseBlueprintYaml(source)\n  return {\n    version: blueprint.workerstack.manifestVersion,\n    database: {\n      dialect: blueprint.resources.database.dialect,\n      migrationsDirectory: blueprint.resources.database.migrationsDirectory,\n      tables: blueprint.resources.database.tables,\n    },\n    storage: blueprint.resources.storage,\n    realtime: blueprint.resources.realtime ?? { required: false },\n    messaging: blueprint.resources.messaging,\n    environment: blueprint.environment.map((entry) => ({\n      ...entry,\n      sensitive: entry.sensitive ?? entry.scope === 'server',\n    })),\n    api: blueprint.api ?? { operations: [] },\n    background: {\n      jobs: blueprint.background.jobs,\n      cron: blueprint.background.cron,\n      maintenance: blueprint.background.maintenance,\n    },\n  }\n}\n\nexport function assertManifestMatchesBlueprint(\n  manifest: WorkerstackManifest,\n  source: string,\n): void {\n  const differences = diffManifests(manifestFromBlueprint(source), manifest)\n  if (differences.length > 0)\n    throw new HostedBlueprintMismatchError(differences)\n}\n\nexport async function assertHostedBlueprintFile(\n  manifest: WorkerstackManifest,\n  path: string,\n): Promise<void> {\n  let source: string\n  try {\n    source = await readFile(path, 'utf8')\n  } catch {\n    throw new Error(`[workerstack] hosted blueprint does not exist: ${path}`)\n  }\n  assertManifestMatchesBlueprint(manifest, source)\n}\n"]}

package/dist/idempotency.d.ts

@@ -0,0 +1,17 @@
+import type { AnyDb } from './dialect.js';
+export type IdempotencyConfig = {
+    ttlMs?: number;
+};
+export type IdempotencyLookup = {
+    type: 'replay';
+    status: number;
+    response: string;
+} | {
+    type: 'conflict';
+} | {
+    type: 'proceed';
+};
+export declare function lookupIdempotency(db: AnyDb, tableName: string, key: string, body: string): Promise<IdempotencyLookup>;
+export declare function storeIdempotency(db: AnyDb, tableName: string, key: string, body: string, status: number, response: unknown, config: IdempotencyConfig): Promise<void>;
+export declare function resolveIdempotencyConfig(config: boolean | IdempotencyConfig | undefined): IdempotencyConfig | null;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAItC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAQD,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEvB,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,KAAK,EACT,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,CAAC,CA6B5B;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,KAAK,EACT,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS,GAC9C,iBAAiB,GAAG,IAAI,CAI1B"}

package/dist/idempotency.js

@@ -0,0 +1,65 @@
+import { and, eq, lt } from 'drizzle-orm';
+import { createHash } from 'node:crypto';
+import { workerstackIdempotency } from './internal-tables.js';
+const DEFAULT_TTL_MS = 24 * 60 * 60 * 1000;
+function hashBody(body) {
+    return createHash('sha256').update(body).digest('hex');
+}
+export async function lookupIdempotency(db, tableName, key, body) {
+    const t = workerstackIdempotency;
+    const now = Date.now();
+    // TTL sweep: drop expired rows before reading.
+    await db.delete(t).where(lt(t.expiresAt, now));
+    const bodyHash = hashBody(body);
+    const rows = await db
+        .select({
+        bodyHash: t.bodyHash,
+        status: t.status,
+        response: t.response,
+        expiresAt: t.expiresAt,
+    })
+        .from(t)
+        .where(and(eq(t.key, key), eq(t.tableName, tableName)))
+        .limit(1);
+    const row = rows[0];
+    if (!row)
+        return { type: 'proceed' };
+    if (Number(row.expiresAt) < now)
+        return { type: 'proceed' };
+    if (row.bodyHash !== bodyHash)
+        return { type: 'conflict' };
+    return {
+        type: 'replay',
+        status: Number(row.status),
+        response: String(row.response),
+    };
+}
+export async function storeIdempotency(db, tableName, key, body, status, response, config) {
+    const t = workerstackIdempotency;
+    const ttlMs = config.ttlMs ?? DEFAULT_TTL_MS;
+    const expiresAt = Date.now() + ttlMs;
+    const bodyHash = hashBody(body);
+    const responseText = JSON.stringify(response);
+    await db
+        .insert(t)
+        .values({
+        key,
+        tableName,
+        bodyHash,
+        status,
+        response: responseText,
+        expiresAt,
+    })
+        .onConflictDoUpdate({
+        target: [t.key, t.tableName],
+        set: { bodyHash, status, response: responseText, expiresAt },
+    });
+}
+export function resolveIdempotencyConfig(config) {
+    if (!config)
+        return null;
+    if (config === true)
+        return {};
+    return config;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAM1D,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE1C,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAS,EACT,SAAiB,EACjB,GAAW,EACX,IAAY;IAEZ,MAAM,CAAC,GAAG,sBAAsB,CAAA;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,+CAA+C;IAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;IAE9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;SACD,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;SACtD,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAEnB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACpC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IAC1D,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;KAC/B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAS,EACT,SAAiB,EACjB,GAAW,EACX,IAAY,EACZ,MAAc,EACd,QAAiB,EACjB,MAAyB;IAEzB,MAAM,CAAC,GAAG,sBAAsB,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAA;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAE7C,MAAM,EAAE;SACL,MAAM,CAAC,CAAC,CAAC;SACT,MAAM,CAAC;QACN,GAAG;QACH,SAAS;QACT,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,YAAY;QACtB,SAAS;KACV,CAAC;SACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;QAC5B,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE;KAC7D,CAAC,CAAA;AACN,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAA+C;IAE/C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { and, eq, lt } from 'drizzle-orm'\nimport { createHash } from 'node:crypto'\n\nimport type { AnyDb } from './dialect'\n\nimport { workerstackIdempotency } from './internal-tables'\n\nexport type IdempotencyConfig = {\n  ttlMs?: number\n}\n\nconst DEFAULT_TTL_MS = 24 * 60 * 60 * 1000\n\nfunction hashBody(body: string): string {\n  return createHash('sha256').update(body).digest('hex')\n}\n\nexport type IdempotencyLookup =\n  | { type: 'replay'; status: number; response: string }\n  | { type: 'conflict' }\n  | { type: 'proceed' }\n\nexport async function lookupIdempotency(\n  db: AnyDb,\n  tableName: string,\n  key: string,\n  body: string,\n): Promise<IdempotencyLookup> {\n  const t = workerstackIdempotency\n  const now = Date.now()\n\n  // TTL sweep: drop expired rows before reading.\n  await db.delete(t).where(lt(t.expiresAt, now))\n\n  const bodyHash = hashBody(body)\n  const rows = await db\n    .select({\n      bodyHash: t.bodyHash,\n      status: t.status,\n      response: t.response,\n      expiresAt: t.expiresAt,\n    })\n    .from(t)\n    .where(and(eq(t.key, key), eq(t.tableName, tableName)))\n    .limit(1)\n\n  const row = rows[0]\n\n  if (!row) return { type: 'proceed' }\n  if (Number(row.expiresAt) < now) return { type: 'proceed' }\n  if (row.bodyHash !== bodyHash) return { type: 'conflict' }\n  return {\n    type: 'replay',\n    status: Number(row.status),\n    response: String(row.response),\n  }\n}\n\nexport async function storeIdempotency(\n  db: AnyDb,\n  tableName: string,\n  key: string,\n  body: string,\n  status: number,\n  response: unknown,\n  config: IdempotencyConfig,\n): Promise<void> {\n  const t = workerstackIdempotency\n  const ttlMs = config.ttlMs ?? DEFAULT_TTL_MS\n  const expiresAt = Date.now() + ttlMs\n  const bodyHash = hashBody(body)\n  const responseText = JSON.stringify(response)\n\n  await db\n    .insert(t)\n    .values({\n      key,\n      tableName,\n      bodyHash,\n      status,\n      response: responseText,\n      expiresAt,\n    })\n    .onConflictDoUpdate({\n      target: [t.key, t.tableName],\n      set: { bodyHash, status, response: responseText, expiresAt },\n    })\n}\n\nexport function resolveIdempotencyConfig(\n  config: boolean | IdempotencyConfig | undefined,\n): IdempotencyConfig | null {\n  if (!config) return null\n  if (config === true) return {}\n  return config\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,41 @@
+export * from './backend.js';
+export { createMessaging, resend, customEmail, telegram } from './messaging/index.js';
+export type { MessagingConfig, MessagingDescriptor, MessagingFacade, MessagingFacades, TelegramMessage, } from './messaging/index.js';
+export type { AuthInstance, BucketNamesOf, WorkerstackApp, StorageFacade, } from './runtime.js';
+export type { JobsPlatform, Platform, RateLimitHit, RateLimitStore, StorageAdapterFactory, } from './platform.js';
+export { createMemoryRateLimitStore, resolvePlatform } from './platform.js';
+export { listSpec } from './api/list-spec.js';
+export type { ListSpecOptions } from './api/list-spec.js';
+export type { WorkerstackDb, WorkerstackTx } from './db.js';
+export { MAX_LIST_LIMIT } from './list-query.js';
+export { WorkerstackError } from './errors.js';
+export type { WorkerstackErrorCode } from './errors.js';
+export { resolveConfig, resolveAuthConfig, defineAuth } from './config.js';
+export type { AuthConfigContext, AuthConfigFactory, AuthConfigInput, BetterAuthConfig, WorkerstackConfig, ResolvedConfig, } from './config.js';
+export { validateEnv, createClientEnv, WorkerstackEnvError } from './env.js';
+export type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env.js';
+export { buildManifest, parseManifest } from './manifest.js';
+export type { ApiOperation, ApiOperationEffect, WorkerstackManifest, ManifestEnvVar, } from './manifest.js';
+export { buildReadinessReport, readinessReportSchema } from './readiness.js';
+export type { ReadinessCheck, ReadinessCheckName, ReadinessCode, ReadinessReport, ReadinessStatus, } from './readiness.js';
+export type { EmailMessage, EmailAdapter } from './email.js';
+export { createJobsBuilder } from './jobs/index.js';
+export type { WorkerstackJobContext, WorkerstackJobsBuilder, BackgroundDefinition, BackgroundDefs, CronDefinition, CronInvocation, DedupeUntil, EnqueueOptions, EnqueueTransaction, JobContext, JobDefinition, JobsDefs, JobsFacade, JobsRuntimeFacade, QueueJobDefinition, QueueJobKeys, TypedEnqueueOptions, } from './jobs/index.js';
+export { defineSessionUser, defineAccess, validateAndResolveAccess, checkAccess, AUTH_TABLE_NAMES, } from './access.js';
+export type { TableAccessInput, OperationRule, AccessContext, AccessUser, AccessUserBase, SessionUserConfig, SessionUserExtraOf, SessionUserSource, } from './access.js';
+export { typeid, generate as generateTypeId, parse as parseTypeId, asTypeId, } from './typeid.js';
+export type { TypeId } from './typeid.js';
+export type { DatabaseAdapter, DatabaseConnection, DatabaseConnectionResult, } from './database/adapter.js';
+export type { StorageAdapter } from './storage/index.js';
+export type { StorageConfigInput, BucketConfigInput, ResolvedBucket, } from './storage/buckets.js';
+export type { RealtimeAction } from './realtime/publisher.js';
+export { createRealtimeFacade } from './realtime/facade.js';
+export type { RealtimeFacade, RealtimeTransport, SchemaTable, } from './realtime/facade.js';
+export { createApiBuilder, defineApi } from './api/builder.js';
+export type { WorkerstackApiBuilder, ApiFactory } from './api/builder.js';
+export type { ApiContext } from './api/context.js';
+export type { CrudApiRouterFor, ExposedApiTables, MergeApiRouterTypes, UnifiedApiRouter, } from './api/types.js';
+export type { TableCrudProcedures } from './api/crud-router.js';
+export { buildApiRegistry, mergeApiRoutersStrict, normalizeApiPath, normalizeForeignOpenAPISpec, } from './api/registry.js';
+export { mergeOpenAPISpecs } from './api/openapi.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC5E,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,qBAAqB,GACtB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACzE,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,GACpB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,18 @@
+export * from './backend.js';
+export { createMessaging, resend, customEmail, telegram } from './messaging/index.js';
+export { createMemoryRateLimitStore, resolvePlatform } from './platform.js';
+export { listSpec } from './api/list-spec.js';
+export { MAX_LIST_LIMIT } from './list-query.js';
+export { WorkerstackError } from './errors.js';
+export { resolveConfig, resolveAuthConfig, defineAuth } from './config.js';
+export { validateEnv, createClientEnv, WorkerstackEnvError } from './env.js';
+export { buildManifest, parseManifest } from './manifest.js';
+export { buildReadinessReport, readinessReportSchema } from './readiness.js';
+export { createJobsBuilder } from './jobs/index.js';
+export { defineSessionUser, defineAccess, validateAndResolveAccess, checkAccess, AUTH_TABLE_NAMES, } from './access.js';
+export { typeid, generate as generateTypeId, parse as parseTypeId, asTypeId, } from './typeid.js';
+export { createRealtimeFacade } from './realtime/facade.js';
+export { createApiBuilder, defineApi } from './api/builder.js';
+export { buildApiRegistry, mergeApiRoutersStrict, normalizeApiPath, normalizeForeignOpenAPISpec, } from './api/registry.js';
+export { mergeOpenAPISpecs } from './api/openapi.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAqB5E,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAOzD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AASzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAoBhD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAWjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AAcjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAMxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAU3D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["export * from './backend'\nexport { createMessaging, resend, customEmail, telegram } from './messaging'\nexport type {\n  MessagingConfig,\n  MessagingDescriptor,\n  MessagingFacade,\n  MessagingFacades,\n  TelegramMessage,\n} from './messaging'\nexport type {\n  AuthInstance,\n  BucketNamesOf,\n  WorkerstackApp,\n  StorageFacade,\n} from './runtime'\nexport type {\n  JobsPlatform,\n  Platform,\n  RateLimitHit,\n  RateLimitStore,\n  StorageAdapterFactory,\n} from './platform'\nexport { createMemoryRateLimitStore, resolvePlatform } from './platform'\nexport { listSpec } from './api/list-spec'\nexport type { ListSpecOptions } from './api/list-spec'\nexport type { WorkerstackDb, WorkerstackTx } from './db'\nexport { MAX_LIST_LIMIT } from './list-query'\nexport { WorkerstackError } from './errors'\nexport type { WorkerstackErrorCode } from './errors'\nexport { resolveConfig, resolveAuthConfig, defineAuth } from './config'\nexport type {\n  AuthConfigContext,\n  AuthConfigFactory,\n  AuthConfigInput,\n  BetterAuthConfig,\n  WorkerstackConfig,\n  ResolvedConfig,\n} from './config'\nexport { validateEnv, createClientEnv, WorkerstackEnvError } from './env'\nexport type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env'\nexport { buildManifest, parseManifest } from './manifest'\nexport type {\n  ApiOperation,\n  ApiOperationEffect,\n  WorkerstackManifest,\n  ManifestEnvVar,\n} from './manifest'\nexport { buildReadinessReport, readinessReportSchema } from './readiness'\nexport type {\n  ReadinessCheck,\n  ReadinessCheckName,\n  ReadinessCode,\n  ReadinessReport,\n  ReadinessStatus,\n} from './readiness'\nexport type { EmailMessage, EmailAdapter } from './email'\nexport { createJobsBuilder } from './jobs/index'\nexport type {\n  WorkerstackJobContext,\n  WorkerstackJobsBuilder,\n  BackgroundDefinition,\n  BackgroundDefs,\n  CronDefinition,\n  CronInvocation,\n  DedupeUntil,\n  EnqueueOptions,\n  EnqueueTransaction,\n  JobContext,\n  JobDefinition,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n  QueueJobDefinition,\n  QueueJobKeys,\n  TypedEnqueueOptions,\n} from './jobs/index'\nexport {\n  defineSessionUser,\n  defineAccess,\n  validateAndResolveAccess,\n  checkAccess,\n  AUTH_TABLE_NAMES,\n} from './access'\nexport type {\n  TableAccessInput,\n  OperationRule,\n  AccessContext,\n  AccessUser,\n  AccessUserBase,\n  SessionUserConfig,\n  SessionUserExtraOf,\n  SessionUserSource,\n} from './access'\nexport {\n  typeid,\n  generate as generateTypeId,\n  parse as parseTypeId,\n  asTypeId,\n} from './typeid'\nexport type { TypeId } from './typeid'\nexport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\nexport type { StorageAdapter } from './storage/index'\nexport type {\n  StorageConfigInput,\n  BucketConfigInput,\n  ResolvedBucket,\n} from './storage/buckets'\nexport type { RealtimeAction } from './realtime/publisher'\nexport { createRealtimeFacade } from './realtime/facade'\nexport type {\n  RealtimeFacade,\n  RealtimeTransport,\n  SchemaTable,\n} from './realtime/facade'\nexport { createApiBuilder, defineApi } from './api/builder'\nexport type { WorkerstackApiBuilder, ApiFactory } from './api/builder'\nexport type { ApiContext } from './api/context'\nexport type {\n  CrudApiRouterFor,\n  ExposedApiTables,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nexport type { TableCrudProcedures } from './api/crud-router'\nexport {\n  buildApiRegistry,\n  mergeApiRoutersStrict,\n  normalizeApiPath,\n  normalizeForeignOpenAPISpec,\n} from './api/registry'\nexport { mergeOpenAPISpecs } from './api/openapi'\n"]}

package/dist/inspect.d.ts

@@ -0,0 +1,15 @@
+import type { AnyRouter } from '@orpc/server';
+import type { WorkerstackDefinitionConfig } from './backend.js';
+import type { BaseEnv, EnvConfigInput } from './env.js';
+import type { JobsDefs } from './jobs/index.js';
+import type { WorkerstackManifest } from './manifest.js';
+export type AnyDefinitionConfig = WorkerstackDefinitionConfig<Record<string, unknown>, any, any, any, any, any, any, any>;
+export type InspectedDefinition = {
+    readonly config: AnyDefinitionConfig;
+    readonly jobsDefs: JobsDefs | undefined;
+    readonly customApiRouter: AnyRouter | undefined;
+    readonly manifest: WorkerstackManifest;
+    readonly env: BaseEnv;
+};
+export declare function inspectConfig(input: AnyDefinitionConfig, envConfig: EnvConfigInput | undefined, env: BaseEnv): InspectedDefinition;
+//# sourceMappingURL=inspect.d.ts.map