@amerged/ohmyhost-runtime 0.1.10

package/dist/storage.js

@@ -0,0 +1,217 @@
+import { CustomerRuntimeGatewayError } from "./errors.js";
+import { exactRecord, fetchWithTimeout, invalidResponse, postGatewayJson, validateGatewayConnection, } from "./http.js";
+export function createPrivateStorageClient(configuration) {
+    const connection = validateGatewayConnection(configuration);
+    if (typeof configuration.capabilityFetch !== "function") {
+        throw new CustomerRuntimeGatewayError("gateway_configuration_invalid", null, false);
+    }
+    const capabilityFetch = configuration.capabilityFetch;
+    const projectId = requireUlid(configuration.projectId);
+    const environmentId = requireUlid(configuration.environmentId);
+    const authenticatedBody = Object.freeze({ projectId, environmentId });
+    async function reserveUpload(input) {
+        validateStorageMutation(input.idempotencyKey, input.objectKey);
+        if (!Number.isSafeInteger(input.contentLength) ||
+            input.contentLength < 0 ||
+            input.contentLength > 1_073_741_824 ||
+            !validContentType(input.contentType)) {
+            invalidRequest();
+        }
+        const response = await postGatewayJson(connection, "/v1/uploads", { ...authenticatedBody, ...input }, 8 * 1024, input.idempotencyKey);
+        if (response.status !== 200)
+            throwStorageError(response.status, response.body);
+        const record = response.body;
+        if (record?.["state"] === "completed") {
+            const completed = exactRecord(response.body, ["state", "transfer_id"]);
+            return Object.freeze({
+                state: "completed",
+                transferId: requireUlid(completed["transfer_id"]),
+            });
+        }
+        const ready = exactRecord(response.body, ["state", "transfer_id", "capability"]);
+        if (ready["state"] !== "ready")
+            invalidResponse();
+        return Object.freeze({
+            state: "ready",
+            transferId: requireUlid(ready["transfer_id"]),
+            capability: parseCapability(ready["capability"], "PUT", input.objectKey),
+        });
+    }
+    async function completeUpload(transferId) {
+        const response = await postGatewayJson(connection, "/v1/uploads/complete", {
+            ...authenticatedBody,
+            transferId: requireUlid(transferId),
+        }, 8 * 1024);
+        if (response.status !== 200 && response.status !== 202) {
+            throwStorageError(response.status, response.body);
+        }
+        const record = exactRecord(response.body, ["state", "transfer_id"]);
+        if (record["state"] !== "completed" && record["state"] !== "pending")
+            invalidResponse();
+        return Object.freeze({
+            state: record["state"],
+            transferId: requireUlid(record["transfer_id"]),
+        });
+    }
+    async function createSignedRead(objectKey) {
+        validateObjectKey(objectKey);
+        const response = await postGatewayJson(connection, "/v1/downloads", {
+            ...authenticatedBody,
+            objectKey,
+        }, 8 * 1024);
+        if (response.status !== 200)
+            throwStorageError(response.status, response.body);
+        const record = exactRecord(response.body, ["state", "capability"]);
+        if (record["state"] !== "ready")
+            invalidResponse();
+        return parseCapability(record["capability"], "GET", objectKey);
+    }
+    async function deleteObject(input) {
+        validateStorageMutation(input.idempotencyKey, input.objectKey);
+        const response = await postGatewayJson(connection, "/v1/deletions", { ...authenticatedBody, objectKey: input.objectKey }, 8 * 1024, input.idempotencyKey);
+        if (response.status !== 200)
+            throwStorageError(response.status, response.body);
+        const record = exactRecord(response.body, ["state", "deletion_id"]);
+        if (record["state"] !== "completed")
+            invalidResponse();
+        return Object.freeze({
+            state: "completed",
+            deletionId: requireUlid(record["deletion_id"]),
+        });
+    }
+    async function upload(input) {
+        const bytes = Uint8Array.from(input.bytes);
+        const reservation = await reserveUpload({
+            idempotencyKey: input.idempotencyKey,
+            objectKey: input.objectKey,
+            contentType: input.contentType,
+            contentLength: bytes.byteLength,
+        });
+        if (reservation.state === "completed")
+            return reservation;
+        const uploaded = await fetchWithTimeout(capabilityFetch, new Request(reservation.capability.url, {
+            method: "PUT",
+            headers: reservation.capability.requiredHeaders,
+            body: bytes,
+        }), connection.timeoutMilliseconds);
+        if (uploaded.status < 200 || uploaded.status >= 300) {
+            throw new CustomerRuntimeGatewayError("storage_upload_rejected", uploaded.status, false);
+        }
+        return completeUpload(reservation.transferId);
+    }
+    return Object.freeze({ reserveUpload, completeUpload, createSignedRead, deleteObject, upload });
+}
+function parseCapability(value, operation, objectKey) {
+    const record = exactRecord(value, [
+        "operation",
+        "objectKey",
+        "url",
+        "expiresAt",
+        "expectedContentLength",
+        "requiredHeaders",
+    ]);
+    const headers = exactHeaders(record["requiredHeaders"]);
+    if (record["operation"] !== operation ||
+        record["objectKey"] !== objectKey ||
+        typeof record["url"] !== "string" ||
+        !validSignedUrl(record["url"]) ||
+        typeof record["expiresAt"] !== "string" ||
+        !Number.isFinite(Date.parse(record["expiresAt"])) ||
+        (record["expectedContentLength"] !== null &&
+            (!Number.isSafeInteger(record["expectedContentLength"]) ||
+                Number(record["expectedContentLength"]) < 0 ||
+                Number(record["expectedContentLength"]) > 1_073_741_824))) {
+        invalidResponse();
+    }
+    return Object.freeze({
+        operation,
+        objectKey,
+        url: record["url"],
+        expiresAt: record["expiresAt"],
+        expectedContentLength: record["expectedContentLength"] === null ? null : Number(record["expectedContentLength"]),
+        requiredHeaders: headers,
+    });
+}
+function exactHeaders(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        invalidResponse();
+    const entries = Object.entries(value);
+    if (entries.length > 16 ||
+        entries.some(([name, header]) => !/^[a-z0-9-]{1,64}$/u.test(name) ||
+            /^(authorization|cookie|set-cookie)$/u.test(name) ||
+            typeof header !== "string" ||
+            header.length > 1_024 ||
+            /[\r\n]/u.test(header))) {
+        invalidResponse();
+    }
+    return Object.freeze(Object.fromEntries(entries));
+}
+function throwStorageError(status, body) {
+    const record = exactRecord(body, typeof body === "object" && body !== null && "transfer_id" in body
+        ? ["code", "transfer_id"]
+        : ["code"]);
+    const code = record["code"];
+    if (status === 401 && code === "unauthorized") {
+        throw new CustomerRuntimeGatewayError("unauthorized", status, false);
+    }
+    if (status === 404 && code === "object_not_found") {
+        throw new CustomerRuntimeGatewayError("storage_object_not_found", status, false);
+    }
+    if (status === 409 && code === "upload_expired") {
+        requireUlid(record["transfer_id"]);
+        throw new CustomerRuntimeGatewayError("storage_upload_expired", status, false);
+    }
+    if (status === 409 && typeof code === "string") {
+        throw new CustomerRuntimeGatewayError("storage_conflict", status, false);
+    }
+    if (status === 413 && typeof code === "string") {
+        throw new CustomerRuntimeGatewayError("storage_quota_exceeded", status, false);
+    }
+    if (status === 503 && code === "storage_gateway_unavailable") {
+        throw new CustomerRuntimeGatewayError("gateway_unavailable", status, true);
+    }
+    return invalidResponse();
+}
+function validateStorageMutation(idempotencyKey, objectKey) {
+    if (!/^[A-Za-z0-9._:-]{1,128}$/u.test(idempotencyKey))
+        invalidRequest();
+    validateObjectKey(objectKey);
+}
+function validateObjectKey(value) {
+    const bytes = new TextEncoder().encode(value).byteLength;
+    if (bytes < 1 ||
+        bytes > 512 ||
+        value.startsWith("/") ||
+        value.endsWith("/") ||
+        value.includes("//") ||
+        !value
+            .split("/")
+            .every((segment) => /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,126}[A-Za-z0-9])?$/u.test(segment))) {
+        invalidRequest();
+    }
+}
+function validContentType(value) {
+    return /^[a-z0-9][a-z0-9!#$&^_.+-]{0,63}\/[a-z0-9][a-z0-9!#$&^_.+-]{0,63}$/u.test(value);
+}
+function validSignedUrl(value) {
+    try {
+        const url = new URL(value);
+        return (url.protocol === "https:" &&
+            url.username === "" &&
+            url.password === "" &&
+            url.hash === "" &&
+            value.length <= 8_192);
+    }
+    catch {
+        return false;
+    }
+}
+function requireUlid(value) {
+    if (typeof value !== "string" || !/^[0-9A-HJKMNP-TV-Z]{26}$/u.test(value))
+        invalidResponse();
+    return value;
+}
+function invalidRequest() {
+    throw new CustomerRuntimeGatewayError("gateway_request_invalid", null, false);
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,GAE1B,MAAM,WAAW,CAAC;AAkBnB,MAAM,UAAU,0BAA0B,CACxC,aAIC;IAED,MAAM,UAAU,GAAG,yBAAyB,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,OAAO,aAAa,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;IACtD,MAAM,SAAS,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IAEtE,KAAK,UAAU,aAAa,CAC1B,KAAoE;QAEpE,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/D,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;YAC1C,KAAK,CAAC,aAAa,GAAG,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,aAAa;YACnC,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,EACpC,CAAC;YACD,cAAc,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,UAAU,EACV,aAAa,EACb,EAAE,GAAG,iBAAiB,EAAE,GAAG,KAAK,EAAE,EAClC,CAAC,GAAG,IAAI,EACR,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAA+B,CAAC;QACxD,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,WAAW,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,WAAoB;gBAC3B,UAAU,EAAE,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,eAAe,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,OAAgB;YACvB,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,UAAkB;QAC9C,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,UAAU,EACV,sBAAsB,EACtB;YACE,GAAG,iBAAiB;YACpB,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC;SACpC,EACD,CAAC,GAAG,IAAI,CACT,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,eAAe,EAAE,CAAC;QACxF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;YACtB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;QAC/C,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,UAAU,EACV,eAAe,EACf;YACE,GAAG,iBAAiB;YACpB,SAAS;SACV,EACD,CAAC,GAAG,IAAI,CACT,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO;YAAE,eAAe,EAAE,CAAC;QACnD,OAAO,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,KAAoD;QAC9E,uBAAuB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,UAAU,EACV,eAAe,EACf,EAAE,GAAG,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EACpD,CAAC,GAAG,IAAI,EACR,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,WAAW;YAAE,eAAe,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,WAAoB;YAC3B,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,KAAyB;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,eAAe,EACf,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,eAAe;YAC/C,IAAI,EAAE,KAAK;SACZ,CAAC,EACF,UAAU,CAAC,mBAAmB,CAC/B,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,IAAI,2BAA2B,CAAC,yBAAyB,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,SAAwB,EAAE,SAAiB;IAClF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE;QAChC,WAAW;QACX,WAAW;QACX,KAAK;QACL,WAAW;QACX,uBAAuB;QACvB,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxD,IACE,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS;QACjC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS;QACjC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;QACjC,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ;QACvC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACjD,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,IAAI;YACvC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBACrD,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,EAC7D,CAAC;QACD,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS;QACT,SAAS;QACT,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9B,qBAAqB,EACnB,MAAM,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC3F,eAAe,EAAE,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,eAAe,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;IACjE,IACE,OAAO,CAAC,MAAM,GAAG,EAAE;QACnB,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CACjB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,MAAM,GAAG,KAAK;YACrB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CACzB,EACD,CAAC;QACD,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAA2B,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAa;IACtD,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,EACJ,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,aAAa,IAAI,IAAI;QAChE,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC;QACzB,CAAC,CAAC,CAAC,MAAM,CAAC,CACb,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAClD,MAAM,IAAI,2BAA2B,CAAC,0BAA0B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAChD,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,wBAAwB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,IAAI,2BAA2B,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,IAAI,2BAA2B,CAAC,wBAAwB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC7D,MAAM,IAAI,2BAA2B,CAAC,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,uBAAuB,CAAC,cAAsB,EAAE,SAAiB;IACxE,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,cAAc,EAAE,CAAC;IACxE,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;IACzD,IACE,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,GAAG;QACX,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,CAAC,KAAK;aACH,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAC1F,CAAC;QACD,cAAc,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,qEAAqE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,KAAK,CAAC,MAAM,IAAI,KAAK,CACtB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,eAAe,EAAE,CAAC;IAC7F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,2BAA2B,CAAC,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAChF,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@amerged/ohmyhost-runtime",
+  "version": "0.1.10",
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "files": [
+    "dist",
+    "src",
+    "LICENSE",
+    "NOTICE",
+    "README.md",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./mail": {
+      "types": "./dist/mail.d.ts",
+      "import": "./dist/mail.js"
+    },
+    "./database": {
+      "types": "./dist/database.d.ts",
+      "import": "./dist/database.js"
+    },
+    "./storage": {
+      "types": "./dist/storage.d.ts",
+      "import": "./dist/storage.js"
+    }
+  },
+  "license": "Apache-2.0",
+  "homepage": "https://docs.ohmyho.st/",
+  "description": "ohmyho.st runtime client",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}

package/src/packages/customer-runtime/database.ts

@@ -0,0 +1,413 @@
+import { CustomerDatabaseError, CustomerRuntimeError } from "./errors.js";
+
+const MAX_QUERY_BYTES = 64 * 1024;
+const MAX_PARAMETERS = 100;
+const MAX_PARAMETER_BYTES = 1024 * 1024;
+const MAX_TRANSACTION_QUERIES = 25;
+const MAX_RESULT_ROWS = 1_000;
+const MAX_RESULT_NODES = 10_000;
+const MAX_RESULT_BYTES = 1024 * 1024;
+const MAX_VALUE_DEPTH = 8;
+
+export type CustomerDatabaseJson =
+  | string
+  | number
+  | boolean
+  | null
+  | readonly CustomerDatabaseJson[]
+  | Readonly<{ [key: string]: CustomerDatabaseJson }>;
+
+export type CustomerDatabaseParameter = CustomerDatabaseJson | Date | Uint8Array;
+
+export interface CustomerDatabaseQuery {
+  readonly text: string;
+  readonly values: readonly CustomerDatabaseParameter[];
+}
+
+export interface CustomerDatabaseQueryResult {
+  readonly command: string;
+  readonly rows: readonly Readonly<Record<string, unknown>>[];
+  readonly rowCount: number | null;
+}
+
+export interface CustomerDatabaseBinding {
+  query(input: unknown): Promise<unknown>;
+  transaction(input: unknown): Promise<unknown>;
+  open?(): Promise<CustomerDatabaseConnectionStub>;
+}
+
+/** The server-side held connection, reached through a stub. Never handed to customer code raw. */
+export interface CustomerDatabaseConnectionStub {
+  query(input: unknown): Promise<unknown>;
+  close(): Promise<void>;
+}
+
+/** What a callback may do inside a held connection: one statement at a time, including BEGIN. */
+export interface CustomerDatabaseConnection {
+  query(input: CustomerDatabaseQuery): Promise<CustomerDatabaseQueryResult>;
+}
+
+export interface CustomerDatabaseClient {
+  /**
+   * Run a read, a decision and a write on one connection. The callback shape is deliberate: the
+   * connection is always released, including when the callback throws, so a customer cannot leak
+   * one and pin a database connection their whole project shares.
+   */
+  withConnection<Result>(
+    run: (connection: CustomerDatabaseConnection) => Promise<Result>,
+  ): Promise<Result>;
+  query(input: CustomerDatabaseQuery): Promise<CustomerDatabaseQueryResult>;
+  transaction(
+    queries: readonly CustomerDatabaseQuery[],
+  ): Promise<readonly CustomerDatabaseQueryResult[]>;
+}
+
+export function createPrivateDatabaseClient(
+  binding: CustomerDatabaseBinding,
+): CustomerDatabaseClient {
+  if (
+    typeof binding !== "object" ||
+    binding === null ||
+    typeof binding.query !== "function" ||
+    typeof binding.transaction !== "function"
+  ) {
+    throw new CustomerRuntimeError("database_query_invalid", false);
+  }
+  return Object.freeze({
+    async withConnection<Result>(
+      run: (connection: CustomerDatabaseConnection) => Promise<Result>,
+    ): Promise<Result> {
+      if (typeof binding.open !== "function") throw unavailable();
+      let stub: CustomerDatabaseConnectionStub;
+      try {
+        stub = await binding.open();
+      } catch {
+        throw unavailable();
+      }
+      try {
+        return await run(
+          Object.freeze({
+            async query(input: CustomerDatabaseQuery) {
+              const parsed = validateQuery(input, undefined, true);
+              let raw: unknown;
+              try {
+                raw = await stub.query(parsed);
+              } catch {
+                throw unavailable();
+              }
+              throwStatementFailure(raw);
+              return validateResult(raw);
+            },
+          }),
+        );
+      } finally {
+        // Ending the connection rolls back anything uncommitted and frees the project's slot.
+        await stub.close().catch(() => undefined);
+      }
+    },
+    async query(input: CustomerDatabaseQuery) {
+      const parsed = validateQuery(input);
+      let raw: unknown;
+      try {
+        raw = await binding.query(parsed);
+      } catch {
+        throw unavailable();
+      }
+      throwStatementFailure(raw);
+      return validateResult(raw);
+    },
+    async transaction(queries: readonly CustomerDatabaseQuery[]) {
+      const parsed = validateTransaction(queries);
+      let raw: unknown;
+      try {
+        raw = await binding.transaction(parsed);
+      } catch {
+        throw unavailable();
+      }
+      throwStatementFailure(raw);
+      if (!Array.isArray(raw) || raw.length !== parsed.length) invalidResponse();
+      return Object.freeze(raw.map(validateResult));
+    },
+  });
+}
+
+function throwStatementFailure(value: unknown): void {
+  if (!isRecord(value) || value["type"] !== "ohmyhost.database-error/v1") return;
+  const sqlstate = value["sqlstate"];
+  if (
+    Object.keys(value).sort().join(",") !== "sqlstate,type" ||
+    typeof sqlstate !== "string" ||
+    !/^[0-9A-Z]{5}$/u.test(sqlstate)
+  )
+    invalidResponse();
+  throw new CustomerDatabaseError(sqlstate);
+}
+
+function validateQuery(
+  value: unknown,
+  aggregateBudget?: { nodes: number; bytes: number },
+  inConnection = false,
+): CustomerDatabaseQuery {
+  if (!isRecord(value) || Object.keys(value).sort().join(",") !== "text,values") invalidQuery();
+  const text = value["text"];
+  const values = value["values"];
+  if (
+    typeof text !== "string" ||
+    text.trim().length === 0 ||
+    new TextEncoder().encode(text).byteLength > MAX_QUERY_BYTES ||
+    !Array.isArray(values) ||
+    values.length > MAX_PARAMETERS
+  ) {
+    invalidQuery();
+  }
+  validateSql(text, inConnection);
+  const budget = aggregateBudget ?? { nodes: 1, bytes: 2 };
+  const parsedValues = values.map((parameter, index) => {
+    if (index > 0) consume(budget, 1, MAX_PARAMETER_BYTES, invalidQuery);
+    return validateStructured(parameter, budget, 0, MAX_PARAMETER_BYTES, invalidQuery);
+  });
+  return Object.freeze({
+    text,
+    values: Object.freeze(parsedValues as CustomerDatabaseParameter[]),
+  });
+}
+
+function validateTransaction(value: unknown): readonly CustomerDatabaseQuery[] {
+  if (!Array.isArray(value) || value.length === 0 || value.length > MAX_TRANSACTION_QUERIES) {
+    invalidQuery();
+  }
+  const budget = { nodes: 1, bytes: 2 };
+  const queries = value.map((query, index) => {
+    if (index > 0) consume(budget, 1, MAX_PARAMETER_BYTES, invalidQuery);
+    budget.nodes += 1;
+    if (budget.nodes > MAX_RESULT_NODES) invalidQuery();
+    consume(budget, 2, MAX_PARAMETER_BYTES, invalidQuery);
+    return validateQuery(query, budget);
+  });
+  return Object.freeze(queries);
+}
+
+function validateSql(text: string, inConnection = false): void {
+  let visible = "";
+  let index = 0;
+  while (index < text.length) {
+    const character = text[index] as string;
+    const next = text[index + 1];
+    if (character === "'") {
+      const consumed = quotedEnd(text, index, "'");
+      visible += " ".repeat(consumed - index);
+      index = consumed;
+      continue;
+    }
+    if (character === '"') {
+      const consumed = quotedEnd(text, index, '"');
+      visible += " ".repeat(consumed - index);
+      index = consumed;
+      continue;
+    }
+    if (character === "-" && next === "-") {
+      const end = text.indexOf("\n", index + 2);
+      const consumed = end === -1 ? text.length : end;
+      visible += " ".repeat(consumed - index);
+      index = consumed;
+      continue;
+    }
+    if (character === "/" && next === "*") {
+      let depth = 1;
+      let cursor = index + 2;
+      while (cursor < text.length && depth > 0) {
+        if (text.slice(cursor, cursor + 2) === "/*") {
+          depth += 1;
+          cursor += 2;
+        } else if (text.slice(cursor, cursor + 2) === "*/") {
+          depth -= 1;
+          cursor += 2;
+        } else cursor += 1;
+      }
+      if (depth !== 0) invalidQuery();
+      visible += " ".repeat(cursor - index);
+      index = cursor;
+      continue;
+    }
+    if (character === "$") {
+      const match = /^\$(?:[A-Za-z_][A-Za-z0-9_]*)?\$/u.exec(text.slice(index));
+      if (match !== null) {
+        const tag = match[0];
+        const end = text.indexOf(tag, index + tag.length);
+        if (end === -1) invalidQuery();
+        const consumed = end + tag.length;
+        visible += " ".repeat(consumed - index);
+        index = consumed;
+        continue;
+      }
+    }
+    visible += character;
+    index += 1;
+  }
+  const statements = visible
+    .split(";")
+    .map((statement) => statement.trim())
+    .filter((statement) => statement.length > 0);
+  const semicolonCount = [...visible].filter((character) => character === ";").length;
+  if (
+    statements.length !== 1 ||
+    semicolonCount > 1 ||
+    (inConnection
+      ? // Transaction control is the whole point of holding a connection; session-wide state is not.
+        /^(?:set|reset|discard|prepare\s+transaction)\b/iu.test(statements[0] as string)
+      : /^(?:begin|start(?:\s+transaction)?|commit|end|abort|rollback|savepoint|release|set|reset|discard|prepare\s+transaction)\b/iu.test(
+          statements[0] as string,
+        ))
+  ) {
+    invalidQuery();
+  }
+}
+
+function quotedEnd(text: string, start: number, quote: "'" | '"'): number {
+  const escapedString =
+    quote === "'" &&
+    (text[start - 1] === "E" || text[start - 1] === "e") &&
+    (start < 2 || !/[A-Za-z0-9_$]/u.test(text[start - 2] as string));
+  let index = start + 1;
+  while (index < text.length) {
+    if (escapedString && text[index] === "\\") {
+      index += 2;
+      continue;
+    }
+    if (text[index] !== quote) {
+      index += 1;
+      continue;
+    }
+    if (text[index + 1] === quote) {
+      index += 2;
+      continue;
+    }
+    return index + 1;
+  }
+  return invalidQuery();
+}
+
+function validateResult(value: unknown): CustomerDatabaseQueryResult {
+  if (!isRecord(value) || Object.keys(value).sort().join(",") !== "command,rowCount,rows") {
+    return invalidResponse();
+  }
+  const command = value["command"];
+  const rowCount = value["rowCount"];
+  const rows = value["rows"];
+  if (
+    typeof command !== "string" ||
+    !/^[A-Z][A-Z ]{0,31}$/u.test(command) ||
+    (rowCount !== null && (!Number.isSafeInteger(rowCount) || Number(rowCount) < 0)) ||
+    !Array.isArray(rows) ||
+    rows.length > MAX_RESULT_ROWS ||
+    rows.some((row) => !isRecord(row))
+  )
+    return invalidResponse();
+  const budget = { nodes: 0, bytes: 0 };
+  // Count the complete envelope, but start each row's value depth at zero like the server.
+  // Rows still share the envelope's byte/node budgets, including their separating commas.
+  validateStructured({ command, rows: [], rowCount }, budget, 0, MAX_RESULT_BYTES, invalidResponse);
+  const clonedRows: Readonly<Record<string, unknown>>[] = [];
+  for (const [index, row] of rows.entries()) {
+    if (index > 0) consume(budget, 1, MAX_RESULT_BYTES, invalidResponse);
+    const cloned = validateStructured(row, budget, 0, MAX_RESULT_BYTES, invalidResponse);
+    if (!isRecord(cloned)) return invalidResponse();
+    clonedRows.push(cloned);
+  }
+  return Object.freeze({
+    command,
+    rows: Object.freeze(clonedRows),
+    rowCount: rowCount === null ? null : Number(rowCount),
+  });
+}
+
+function validateStructured(
+  value: unknown,
+  budget: { nodes: number; bytes: number },
+  depth: number,
+  maximumBytes: number,
+  invalid: () => never,
+): unknown {
+  budget.nodes += 1;
+  if (budget.nodes > MAX_RESULT_NODES || depth > MAX_VALUE_DEPTH) invalid();
+  if (value === null || typeof value === "boolean") {
+    consume(budget, value === null ? 4 : value ? 4 : 5, maximumBytes, invalid);
+    return value;
+  }
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) invalid();
+    consume(budget, new TextEncoder().encode(String(value)).byteLength, maximumBytes, invalid);
+    return value;
+  }
+  if (typeof value === "string") {
+    consume(budget, jsonStringBytes(value), maximumBytes, invalid);
+    return value;
+  }
+  if (value instanceof Date) {
+    if (!Number.isFinite(value.getTime())) invalid();
+    consume(budget, jsonStringBytes(value.toISOString()), maximumBytes, invalid);
+    return new Date(value.getTime());
+  }
+  if (value instanceof Uint8Array) {
+    consume(budget, value.byteLength + 2, maximumBytes, invalid);
+    return Uint8Array.from(value);
+  }
+  if (Array.isArray(value)) {
+    consume(budget, 2, maximumBytes, invalid);
+    return Object.freeze(
+      value.map((item, index) => {
+        if (index > 0) consume(budget, 1, maximumBytes, invalid);
+        return validateStructured(item, budget, depth + 1, maximumBytes, invalid);
+      }),
+    );
+  }
+  if (!isRecord(value)) return invalid();
+  consume(budget, 2, maximumBytes, invalid);
+  // RPC rejects null-prototype objects. The forbidden keys below keep a normal object safe
+  // while allowing JSON parameters to cross a real Worker Service Binding.
+  const output: Record<string, unknown> = {};
+  for (const [index, [key, item]] of Object.entries(value).entries()) {
+    if (
+      !/^[A-Za-z_?][A-Za-z0-9_?$ -]{0,127}$/u.test(key) ||
+      key === "__proto__" ||
+      key === "constructor" ||
+      key === "prototype"
+    ) {
+      invalid();
+    }
+    if (index > 0) consume(budget, 1, maximumBytes, invalid);
+    consume(budget, jsonStringBytes(key) + 1, maximumBytes, invalid);
+    output[key] = validateStructured(item, budget, depth + 1, maximumBytes, invalid);
+  }
+  return Object.freeze(output);
+}
+
+function unavailable(): CustomerRuntimeError {
+  return new CustomerRuntimeError("database_unavailable", true);
+}
+
+function consume(
+  budget: { bytes: number },
+  bytes: number,
+  maximum: number,
+  invalid: () => never,
+): void {
+  budget.bytes += bytes;
+  if (budget.bytes > maximum) invalid();
+}
+
+function jsonStringBytes(value: string): number {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+
+function invalidQuery(): never {
+  throw new CustomerRuntimeError("database_query_invalid", false);
+}
+
+function invalidResponse(): never {
+  throw new CustomerRuntimeError("database_response_invalid", false);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}