@causa/workspace-google 0.16.0 → 0.17.0

package/README.md

@@ -62,6 +62,14 @@ Backfilling is supported when `google.pubSub` is set as the `events.broker`. Tem
 
 When no source is specified, the default is to fetch events to backfill from the BigQuery dataset configured in `google.pubSub.bigQueryStorage`. A custom BigQuery table can also be set as source using the `bq://<projectId>.<datasetId>.<tableId>` format. It should have the `data` and `attributes` columns.
 
+### Querying
+
+This module implements the `DatabaseQueryRecords`, `ServiceContainerQueryLogs`, and `EventTopicQueryEvents` workspace functions, which expose read-only access to data stored in or emitted by deployed services:
+
+- `DatabaseQueryRecords` is supported for the `google.spanner` and `google.firestore` engines. For Spanner, the function takes a database name and a SQL query, runs it on the configured Spanner instance, and returns the matching rows (capped to 100000). For Firestore, the query is the path to a single document, fetched from the default database (or the specified one). The document data is returned as a single-element array. An empty array is returned when the document does not exist.
+- `ServiceContainerQueryLogs` is supported when `serviceContainer.platform` is `google.cloudRun`. It queries Cloud Logging for log entries emitted by the service's Cloud Run revisions. By default, only the last hour of logs and up to 1 000 entries are returned.
+- `EventTopicQueryEvents` is supported when `events.broker` is `google.pubSub`, `events.format` is `json`, and `google.pubSub.bigQueryStorage.rawEventsDatasetId` is set. It reads events from the topic's BigQuery raw events table. Same defaults as for log queries: last hour and up to 1 000 events.
+
 ### Secrets backend
 
 This module implements the `google.secretManager` secret backend, allowing fetching secrets from the Google Secret Manager service. Here are some example of how secrets with the `google.secretManager` backend should be defined:

package/dist/functions/event-topic/index.d.ts

@@ -7,3 +7,4 @@ export { EventTopicBrokerDeleteTriggerResourceForServiceAccount } from './broker
 export { EventTopicBrokerGetTopicIdForPubSub } from './broker-get-topic-id-pubsub.js';
 export { EventTopicBrokerPublishEventsForGoogle } from './broker-publish-events-google.js';
 export { EventTopicCreateBackfillSourceForBigQuery } from './create-backfill-source-bigquery.js';
+export { EventTopicQueryEventsForBigQuery } from './query-events-bigquery.js';

package/dist/functions/event-topic/index.js

@@ -7,3 +7,4 @@ export { EventTopicBrokerDeleteTriggerResourceForServiceAccount } from './broker
 export { EventTopicBrokerGetTopicIdForPubSub } from './broker-get-topic-id-pubsub.js';
 export { EventTopicBrokerPublishEventsForGoogle } from './broker-publish-events-google.js';
 export { EventTopicCreateBackfillSourceForBigQuery } from './create-backfill-source-bigquery.js';
+export { EventTopicQueryEventsForBigQuery } from './query-events-bigquery.js';

package/dist/functions/event-topic/query-events-bigquery.call.d.ts

@@ -0,0 +1,4 @@
+import type { WorkspaceContext } from '@causa/workspace';
+import type { QueriedEvent } from '@causa/workspace-core';
+import type { EventTopicQueryEventsForBigQuery } from './query-events-bigquery.js';
+export default function call(this: EventTopicQueryEventsForBigQuery, context: WorkspaceContext): Promise<QueriedEvent[]>;

package/dist/functions/event-topic/query-events-bigquery.call.js

@@ -0,0 +1,41 @@
+import { BigQueryService } from '../../services/index.js';
+/**
+ * The default duration applied to `from` when it is not set, in milliseconds.
+ */
+const DEFAULT_FROM_OFFSET = 60 * 60 * 1000;
+/**
+ * The default value for `limit` when it is not set.
+ */
+const DEFAULT_LIMIT = 1000;
+export default async function call(context) {
+    const from = this.from ?? new Date(Date.now() - DEFAULT_FROM_OFFSET);
+    const limit = this.limit ?? DEFAULT_LIMIT;
+    const googleConf = context.asConfiguration();
+    const projectId = googleConf.getOrThrow('google.project');
+    const rawEventsDatasetId = googleConf.getOrThrow('google.pubSub.bigQueryStorage.rawEventsDatasetId');
+    const tableName = this.topic.replace(/[-\.]/g, '_');
+    const tableId = `${projectId}.${rawEventsDatasetId}.${tableName}`;
+    const conditions = [`publish_time >= @from`];
+    const params = { from: from.toISOString() };
+    if (this.to) {
+        conditions.push(`publish_time < @to`);
+        params.to = this.to.toISOString();
+    }
+    if (this.filter) {
+        conditions.push(`(${this.filter})`);
+    }
+    const query = `
+    SELECT publish_time, data, attributes
+    FROM \`${tableId}\`
+    WHERE ${conditions.join(' AND ')}
+    ORDER BY publish_time ASC
+    LIMIT ${limit}`;
+    context.logger.debug(`Querying BigQuery for events:\n${query}`);
+    const bigQuery = context.service(BigQueryService).bigQuery;
+    const [rows] = await bigQuery.query({ query, params });
+    return rows.map((row) => ({
+        timestamp: new Date(row.publish_time.value),
+        attributes: row.attributes ? JSON.parse(row.attributes) : {},
+        data: JSON.parse(row.data.toString('utf8')),
+    }));
+}

package/dist/functions/event-topic/query-events-bigquery.d.ts

@@ -0,0 +1,10 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { EventTopicQueryEvents, type QueriedEvent } from '@causa/workspace-core';
+/**
+ * Implements {@link EventTopicQueryEvents} for Pub/Sub topics whose events are stored in BigQuery via a BigQuery
+ * subscription. The events are read from the dataset configured at `google.pubSub.bigQueryStorage.rawEventsDatasetId`.
+ */
+export declare class EventTopicQueryEventsForBigQuery extends EventTopicQueryEvents {
+    _call(context: WorkspaceContext): Promise<QueriedEvent[]>;
+    _supports(context: WorkspaceContext): boolean;
+}

package/dist/functions/event-topic/query-events-bigquery.js

@@ -0,0 +1,17 @@
+import { callDeferred, WorkspaceContext } from '@causa/workspace';
+import { EventTopicQueryEvents, } from '@causa/workspace-core';
+/**
+ * Implements {@link EventTopicQueryEvents} for Pub/Sub topics whose events are stored in BigQuery via a BigQuery
+ * subscription. The events are read from the dataset configured at `google.pubSub.bigQueryStorage.rawEventsDatasetId`.
+ */
+export class EventTopicQueryEventsForBigQuery extends EventTopicQueryEvents {
+    async _call(context) {
+        return await callDeferred(this, context, import.meta.url);
+    }
+    _supports(context) {
+        const conf = context.asConfiguration();
+        return (conf.get('events.broker') === 'google.pubSub' &&
+            conf.get('events.format') === 'json' &&
+            !!conf.get('google.pubSub.bigQueryStorage.rawEventsDatasetId'));
+    }
+}

package/dist/functions/google-firestore/index.d.ts

@@ -1 +1,2 @@
+export { DatabaseQueryRecordsForFirestore } from './query-records.js';
 export { GoogleFirestoreMergeRules } from './merge-rules.js';

package/dist/functions/google-firestore/index.js

@@ -1 +1,2 @@
+export { DatabaseQueryRecordsForFirestore } from './query-records.js';
 export { GoogleFirestoreMergeRules } from './merge-rules.js';

package/dist/functions/google-firestore/query-records.call.d.ts

@@ -0,0 +1,3 @@
+import type { WorkspaceContext } from '@causa/workspace';
+import type { DatabaseQueryRecordsForFirestore } from './query-records.js';
+export default function call(this: DatabaseQueryRecordsForFirestore, context: WorkspaceContext): Promise<any[]>;

package/dist/functions/google-firestore/query-records.call.js

@@ -0,0 +1,50 @@
+import { deleteApp, initializeApp } from 'firebase-admin/app';
+import { DocumentReference, GeoPoint, getFirestore, Timestamp, } from 'firebase-admin/firestore';
+import { randomUUID } from 'node:crypto';
+export default async function call(context) {
+    if (!this.query) {
+        throw new Error(`The 'query' input is required for the 'google.firestore' engine.`);
+    }
+    const googleConf = context.asConfiguration();
+    const projectId = googleConf.getOrThrow('google.project');
+    const database = this.database ?? '(default)';
+    context.logger.debug(`🗃️ Fetching Firestore document '${this.query}' from database '${database}' in project '${projectId}'.`);
+    const app = initializeApp({ projectId }, randomUUID());
+    try {
+        const firestore = getFirestore(app, database);
+        const snapshot = await firestore.doc(this.query).get();
+        return snapshot.exists ? [toJson(snapshot.data())] : [];
+    }
+    finally {
+        await deleteApp(app);
+    }
+}
+/**
+ * Recursively converts Firestore-specific types to JSON-friendly equivalents:
+ * - {@link Timestamp} → {@link Date}
+ * - {@link GeoPoint} → `{ latitude, longitude }`
+ * - {@link DocumentReference} → its `path`
+ *
+ * Other values (including `Buffer`) are returned as-is.
+ */
+function toJson(value) {
+    if (value === null || typeof value !== 'object') {
+        return value;
+    }
+    if (value instanceof Timestamp) {
+        return value.toDate();
+    }
+    if (value instanceof GeoPoint) {
+        return { latitude: value.latitude, longitude: value.longitude };
+    }
+    if (value instanceof DocumentReference) {
+        return value.path;
+    }
+    if (Buffer.isBuffer(value)) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map(toJson);
+    }
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, toJson(v)]));
+}

package/dist/functions/google-firestore/query-records.d.ts

@@ -0,0 +1,18 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { DatabaseQueryRecords } from '@causa/workspace-core';
+/**
+ * The engine identifier handled by this implementation.
+ */
+export declare const FIRESTORE_ENGINE = "google.firestore";
+/**
+ * Implements {@link DatabaseQueryRecords} for Firestore.
+ *
+ * The `database` input is optional and defaults to the default Firestore database. The `query` input is the path to a
+ * single document (e.g. `users/abc`).
+ *
+ * Returns an array containing a single document's data, or an empty array if the document does not exist.
+ */
+export declare class DatabaseQueryRecordsForFirestore extends DatabaseQueryRecords {
+    _call(context: WorkspaceContext): Promise<any[]>;
+    _supports(): boolean;
+}

package/dist/functions/google-firestore/query-records.js

@@ -0,0 +1,22 @@
+import { callDeferred, WorkspaceContext } from '@causa/workspace';
+import { DatabaseQueryRecords } from '@causa/workspace-core';
+/**
+ * The engine identifier handled by this implementation.
+ */
+export const FIRESTORE_ENGINE = 'google.firestore';
+/**
+ * Implements {@link DatabaseQueryRecords} for Firestore.
+ *
+ * The `database` input is optional and defaults to the default Firestore database. The `query` input is the path to a
+ * single document (e.g. `users/abc`).
+ *
+ * Returns an array containing a single document's data, or an empty array if the document does not exist.
+ */
+export class DatabaseQueryRecordsForFirestore extends DatabaseQueryRecords {
+    async _call(context) {
+        return await callDeferred(this, context, import.meta.url);
+    }
+    _supports() {
+        return this.engine === FIRESTORE_ENGINE;
+    }
+}

package/dist/functions/google-spanner/index.d.ts

@@ -1,2 +1,3 @@
 export { GoogleSpannerListDatabases } from './list-databases.js';
+export { DatabaseQueryRecordsForSpanner } from './query-records.js';
 export { GoogleSpannerWriteDatabases } from './write-databases.js';

package/dist/functions/google-spanner/index.js

@@ -1,2 +1,3 @@
 export { GoogleSpannerListDatabases } from './list-databases.js';
+export { DatabaseQueryRecordsForSpanner } from './query-records.js';
 export { GoogleSpannerWriteDatabases } from './write-databases.js';

package/dist/functions/google-spanner/query-records.call.d.ts

@@ -0,0 +1,3 @@
+import type { WorkspaceContext } from '@causa/workspace';
+import { type DatabaseQueryRecordsForSpanner } from './query-records.js';
+export default function call(this: DatabaseQueryRecordsForSpanner, context: WorkspaceContext): Promise<any[]>;

package/dist/functions/google-spanner/query-records.call.js

@@ -0,0 +1,66 @@
+import { Numeric, PGNumeric, Spanner, SpannerDate, } from '@google-cloud/spanner';
+import { SPANNER_QUERY_RECORDS_LIMIT, } from './query-records.js';
+export default async function call(context) {
+    if (!this.database) {
+        throw new Error(`The 'database' input is required for the 'google.spanner' engine.`);
+    }
+    if (!this.query) {
+        throw new Error(`The 'query' input is required for the 'google.spanner' engine.`);
+    }
+    const googleConf = context.asConfiguration();
+    const projectId = googleConf.getOrThrow('google.project');
+    const instanceName = googleConf.getOrThrow('google.spanner.instance.name');
+    context.logger.debug(`🗃️ Querying Spanner database '${this.database}' in instance '${instanceName}' (project '${projectId}').`);
+    const spanner = new Spanner({ projectId });
+    let database;
+    try {
+        database = spanner.instance(instanceName).database(this.database);
+        const rows = [];
+        const stream = database.runStream({
+            sql: this.query,
+            json: true,
+            jsonOptions: { wrapNumbers: false, wrapStructs: false },
+        });
+        for await (const row of stream) {
+            if (rows.length >= SPANNER_QUERY_RECORDS_LIMIT) {
+                context.logger.warn(`⚠️ Spanner query exceeded the hard limit of ${SPANNER_QUERY_RECORDS_LIMIT} rows. Results were truncated.`);
+                break;
+            }
+            rows.push(toJson(row));
+        }
+        return rows;
+    }
+    finally {
+        await database?.close();
+        spanner.close();
+    }
+}
+/**
+ * Recursively converts Spanner-specific types in a row to JSON-friendly equivalents:
+ * - {@link Numeric} / {@link PGNumeric} (NUMERIC / PG_NUMERIC) → their string value.
+ * - {@link SpannerDate} (DATE) → `YYYY-MM-DD` string.
+ * - Other `Date` subclasses such as `PreciseDate` (TIMESTAMP) → plain {@link Date} instances.
+ *
+ * `Buffer` values are returned as-is.
+ */
+function toJson(value) {
+    if (value === null || typeof value !== 'object') {
+        return value;
+    }
+    if (value instanceof Numeric || value instanceof PGNumeric) {
+        return value.value;
+    }
+    if (value instanceof SpannerDate) {
+        return value.toJSON();
+    }
+    if (value instanceof Date) {
+        return new Date(value.getTime());
+    }
+    if (Buffer.isBuffer(value)) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map(toJson);
+    }
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, toJson(v)]));
+}

package/dist/functions/google-spanner/query-records.d.ts

@@ -0,0 +1,23 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { DatabaseQueryRecords } from '@causa/workspace-core';
+/**
+ * The engine identifier handled by this implementation.
+ */
+export declare const SPANNER_ENGINE = "google.spanner";
+/**
+ * The maximum number of rows that will be returned by a single query.
+ * Acts as a safety mechanism to avoid loading huge result sets in memory.
+ */
+export declare const SPANNER_QUERY_RECORDS_LIMIT = 100000;
+/**
+ * Implements {@link DatabaseQueryRecords} for Spanner databases.
+ *
+ * The Spanner instance and GCP project are read from the workspace configuration. The `database` input is the name of
+ * the database within the instance, and `query` is a regular SQL statement.
+ *
+ * Results are streamed and capped to {@link SPANNER_QUERY_RECORDS_LIMIT} rows.
+ */
+export declare class DatabaseQueryRecordsForSpanner extends DatabaseQueryRecords {
+    _call(context: WorkspaceContext): Promise<any[]>;
+    _supports(): boolean;
+}

package/dist/functions/google-spanner/query-records.js

@@ -0,0 +1,27 @@
+import { callDeferred, WorkspaceContext } from '@causa/workspace';
+import { DatabaseQueryRecords } from '@causa/workspace-core';
+/**
+ * The engine identifier handled by this implementation.
+ */
+export const SPANNER_ENGINE = 'google.spanner';
+/**
+ * The maximum number of rows that will be returned by a single query.
+ * Acts as a safety mechanism to avoid loading huge result sets in memory.
+ */
+export const SPANNER_QUERY_RECORDS_LIMIT = 100_000;
+/**
+ * Implements {@link DatabaseQueryRecords} for Spanner databases.
+ *
+ * The Spanner instance and GCP project are read from the workspace configuration. The `database` input is the name of
+ * the database within the instance, and `query` is a regular SQL statement.
+ *
+ * Results are streamed and capped to {@link SPANNER_QUERY_RECORDS_LIMIT} rows.
+ */
+export class DatabaseQueryRecordsForSpanner extends DatabaseQueryRecords {
+    async _call(context) {
+        return await callDeferred(this, context, import.meta.url);
+    }
+    _supports() {
+        return this.engine === SPANNER_ENGINE;
+    }
+}

package/dist/functions/index.js

@@ -1,16 +1,17 @@
 import { CausaListConfigurationSchemasForGoogle } from './causa/index.js';
 import { EmulatorStartForFirebaseStorage, EmulatorStartForFirestore, EmulatorStartForIdentityPlatform, EmulatorStartForPubSub, EmulatorStartForSpanner, EmulatorStopForFirebaseStorage, EmulatorStopForFirestore, EmulatorStopForIdentityPlatform, EmulatorStopForPubSub, EmulatorStopForSpanner, } from './emulator/index.js';
-import { EventTopicBrokerCreateTopicForPubSub, EventTopicBrokerCreateTriggerForCloudRun, EventTopicBrokerDeleteTopicForPubSub, EventTopicBrokerDeleteTriggerResourceForCloudRunInvokerRole, EventTopicBrokerDeleteTriggerResourceForPubSubSubscription, EventTopicBrokerDeleteTriggerResourceForServiceAccount, EventTopicBrokerGetTopicIdForPubSub, EventTopicBrokerPublishEventsForGoogle, EventTopicCreateBackfillSourceForBigQuery, } from './event-topic/index.js';
+import { EventTopicBrokerCreateTopicForPubSub, EventTopicBrokerCreateTriggerForCloudRun, EventTopicBrokerDeleteTopicForPubSub, EventTopicBrokerDeleteTriggerResourceForCloudRunInvokerRole, EventTopicBrokerDeleteTriggerResourceForPubSubSubscription, EventTopicBrokerDeleteTriggerResourceForServiceAccount, EventTopicBrokerGetTopicIdForPubSub, EventTopicBrokerPublishEventsForGoogle, EventTopicCreateBackfillSourceForBigQuery, EventTopicQueryEventsForBigQuery, } from './event-topic/index.js';
 import { GoogleAppCheckGenerateToken } from './google-app-check/index.js';
 import { GoogleFirebaseStorageMergeRules } from './google-firebase-storage/index.js';
-import { GoogleFirestoreMergeRules } from './google-firestore/index.js';
+import { DatabaseQueryRecordsForFirestore, GoogleFirestoreMergeRules, } from './google-firestore/index.js';
 import { GoogleIdentityPlatformGenerateCustomToken, GoogleIdentityPlatformGenerateToken, } from './google-identity-platform/index.js';
 import { GooglePubSubWriteTopics } from './google-pubsub/index.js';
 import { GoogleServicesEnable } from './google-services/index.js';
-import { GoogleSpannerListDatabases, GoogleSpannerWriteDatabases, } from './google-spanner/index.js';
+import { DatabaseQueryRecordsForSpanner, GoogleSpannerListDatabases, GoogleSpannerWriteDatabases, } from './google-spanner/index.js';
 import { ProjectGetArtefactDestinationForCloudFunctions, ProjectGetArtefactDestinationForCloudRun, ProjectPushArtefactForCloudFunctions, } from './project/index.js';
 import { SecretFetchForGoogleAccessToken, SecretFetchForGoogleSecretManager, } from './secret/index.js';
+import { ServiceContainerQueryLogsForCloudRun } from './service-container/index.js';
 import { TypeScriptGetDecoratorRendererForGoogleFirestore, TypeScriptGetDecoratorRendererForGoogleSpanner, } from './typescript/index.js';
 export function registerFunctions(context) {
-    context.registerFunctionImplementations(CausaListConfigurationSchemasForGoogle, EmulatorStartForFirebaseStorage, EmulatorStartForFirestore, EmulatorStartForIdentityPlatform, EmulatorStartForPubSub, EmulatorStartForSpanner, EmulatorStopForFirebaseStorage, EmulatorStopForFirestore, EmulatorStopForIdentityPlatform, EmulatorStopForPubSub, EmulatorStopForSpanner, EventTopicBrokerCreateTopicForPubSub, EventTopicBrokerCreateTriggerForCloudRun, EventTopicBrokerDeleteTopicForPubSub, EventTopicBrokerDeleteTriggerResourceForCloudRunInvokerRole, EventTopicBrokerDeleteTriggerResourceForPubSubSubscription, EventTopicBrokerDeleteTriggerResourceForServiceAccount, EventTopicBrokerGetTopicIdForPubSub, EventTopicBrokerPublishEventsForGoogle, EventTopicCreateBackfillSourceForBigQuery, GoogleAppCheckGenerateToken, GoogleFirebaseStorageMergeRules, GoogleFirestoreMergeRules, GoogleIdentityPlatformGenerateCustomToken, GoogleIdentityPlatformGenerateToken, GooglePubSubWriteTopics, GoogleServicesEnable, GoogleSpannerListDatabases, GoogleSpannerWriteDatabases, ProjectGetArtefactDestinationForCloudFunctions, ProjectGetArtefactDestinationForCloudRun, ProjectPushArtefactForCloudFunctions, SecretFetchForGoogleAccessToken, SecretFetchForGoogleSecretManager, TypeScriptGetDecoratorRendererForGoogleFirestore, TypeScriptGetDecoratorRendererForGoogleSpanner);
+    context.registerFunctionImplementations(CausaListConfigurationSchemasForGoogle, DatabaseQueryRecordsForFirestore, DatabaseQueryRecordsForSpanner, EmulatorStartForFirebaseStorage, EmulatorStartForFirestore, EmulatorStartForIdentityPlatform, EmulatorStartForPubSub, EmulatorStartForSpanner, EmulatorStopForFirebaseStorage, EmulatorStopForFirestore, EmulatorStopForIdentityPlatform, EmulatorStopForPubSub, EmulatorStopForSpanner, EventTopicBrokerCreateTopicForPubSub, EventTopicBrokerCreateTriggerForCloudRun, EventTopicBrokerDeleteTopicForPubSub, EventTopicBrokerDeleteTriggerResourceForCloudRunInvokerRole, EventTopicBrokerDeleteTriggerResourceForPubSubSubscription, EventTopicBrokerDeleteTriggerResourceForServiceAccount, EventTopicBrokerGetTopicIdForPubSub, EventTopicBrokerPublishEventsForGoogle, EventTopicCreateBackfillSourceForBigQuery, EventTopicQueryEventsForBigQuery, GoogleAppCheckGenerateToken, GoogleFirebaseStorageMergeRules, GoogleFirestoreMergeRules, GoogleIdentityPlatformGenerateCustomToken, GoogleIdentityPlatformGenerateToken, GooglePubSubWriteTopics, GoogleServicesEnable, GoogleSpannerListDatabases, GoogleSpannerWriteDatabases, ProjectGetArtefactDestinationForCloudFunctions, ProjectGetArtefactDestinationForCloudRun, ProjectPushArtefactForCloudFunctions, SecretFetchForGoogleAccessToken, SecretFetchForGoogleSecretManager, ServiceContainerQueryLogsForCloudRun, TypeScriptGetDecoratorRendererForGoogleFirestore, TypeScriptGetDecoratorRendererForGoogleSpanner);
 }

package/dist/functions/service-container/index.d.ts

@@ -0,0 +1 @@
+export { ServiceContainerQueryLogsForCloudRun } from './query-logs-cloud-run.js';

package/dist/functions/service-container/index.js

@@ -0,0 +1 @@
+export { ServiceContainerQueryLogsForCloudRun } from './query-logs-cloud-run.js';

package/dist/functions/service-container/query-logs-cloud-run.call.d.ts

@@ -0,0 +1,4 @@
+import type { WorkspaceContext } from '@causa/workspace';
+import type { QueriedLogEntry } from '@causa/workspace-core';
+import type { ServiceContainerQueryLogsForCloudRun } from './query-logs-cloud-run.js';
+export default function call(this: ServiceContainerQueryLogsForCloudRun, context: WorkspaceContext): Promise<QueriedLogEntry[]>;

package/dist/functions/service-container/query-logs-cloud-run.call.js

@@ -0,0 +1,36 @@
+import { LoggingService } from '../../services/index.js';
+/**
+ * The default duration applied to `from` when it is not set, in milliseconds.
+ */
+const DEFAULT_FROM_OFFSET = 60 * 60 * 1000;
+/**
+ * The default value for `limit` when it is not set.
+ */
+const DEFAULT_LIMIT = 1000;
+export default async function call(context) {
+    const from = this.from ?? new Date(Date.now() - DEFAULT_FROM_OFFSET);
+    const limit = this.limit ?? DEFAULT_LIMIT;
+    const filterParts = [
+        `resource.type="cloud_run_revision"`,
+        `resource.labels.service_name=~"${this.service}"`,
+        `timestamp>="${from.toISOString()}"`,
+    ];
+    if (this.to) {
+        filterParts.push(`timestamp<"${this.to.toISOString()}"`);
+    }
+    if (this.filter) {
+        filterParts.push(this.filter);
+    }
+    const filter = filterParts.join('\n');
+    const loggingService = context.service(LoggingService);
+    context.logger.debug(`Querying Cloud Logging for service '${this.service}' in project '${loggingService.projectId}' with filter:\n${filter}`);
+    const [pageEntries] = await loggingService.logging.getEntries({
+        filter,
+        orderBy: 'timestamp asc',
+        maxResults: limit,
+    });
+    return pageEntries.map((entry) => ({
+        timestamp: entry.metadata.timestamp,
+        message: entry.toStructuredJSON(),
+    }));
+}

package/dist/functions/service-container/query-logs-cloud-run.d.ts

@@ -0,0 +1,12 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { type QueriedLogEntry, ServiceContainerQueryLogs } from '@causa/workspace-core';
+/**
+ * Implements {@link ServiceContainerQueryLogs} for services deployed on Cloud Run.
+ *
+ * Queries the Cloud Logging API for entries emitted by `cloud_run_revision` resources whose `service_name` label
+ * matches the input `service`. The optional `from` / `to` time range, `filter`, and `limit` are forwarded to the API.
+ */
+export declare class ServiceContainerQueryLogsForCloudRun extends ServiceContainerQueryLogs {
+    _call(context: WorkspaceContext): Promise<QueriedLogEntry[]>;
+    _supports(context: WorkspaceContext): boolean;
+}

package/dist/functions/service-container/query-logs-cloud-run.js

@@ -0,0 +1,18 @@
+import { callDeferred, WorkspaceContext } from '@causa/workspace';
+import { ServiceContainerQueryLogs, } from '@causa/workspace-core';
+/**
+ * Implements {@link ServiceContainerQueryLogs} for services deployed on Cloud Run.
+ *
+ * Queries the Cloud Logging API for entries emitted by `cloud_run_revision` resources whose `service_name` label
+ * matches the input `service`. The optional `from` / `to` time range, `filter`, and `limit` are forwarded to the API.
+ */
+export class ServiceContainerQueryLogsForCloudRun extends ServiceContainerQueryLogs {
+    async _call(context) {
+        return await callDeferred(this, context, import.meta.url);
+    }
+    _supports(context) {
+        return (context
+            .asConfiguration()
+            .get('serviceContainer.platform') === 'google.cloudRun');
+    }
+}

package/dist/services/index.d.ts

@@ -8,6 +8,7 @@ export { FirebaseEmulatorService } from './firebase-emulator.js';
 export { GcloudEmulatorService } from './gcloud-emulator.js';
 export { GoogleApisService } from './google-apis.js';
 export { IamService } from './iam.js';
+export { LoggingService } from './logging.js';
 export { PubSubService } from './pubsub.js';
 export { ResourceManagerService } from './resource-manager.js';
 export { GoogleSecretManagerService } from './secret-manager.js';

package/dist/services/index.js

@@ -7,6 +7,7 @@ export { FirebaseEmulatorService } from './firebase-emulator.js';
 export { GcloudEmulatorService } from './gcloud-emulator.js';
 export { GoogleApisService } from './google-apis.js';
 export { IamService } from './iam.js';
+export { LoggingService } from './logging.js';
 export { PubSubService } from './pubsub.js';
 export { ResourceManagerService } from './resource-manager.js';
 export { GoogleSecretManagerService } from './secret-manager.js';

package/dist/services/logging.d.ts

@@ -0,0 +1,16 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { Logging } from '@google-cloud/logging';
+/**
+ * A service that provides access to Cloud Logging.
+ */
+export declare class LoggingService {
+    /**
+     * The Cloud Logging client configured with the GCP project ID.
+     */
+    readonly logging: Logging;
+    /**
+     * The GCP project ID.
+     */
+    readonly projectId: string;
+    constructor(context: WorkspaceContext);
+}

package/dist/services/logging.js

@@ -0,0 +1,20 @@
+import { WorkspaceContext } from '@causa/workspace';
+import { Logging } from '@google-cloud/logging';
+/**
+ * A service that provides access to Cloud Logging.
+ */
+export class LoggingService {
+    /**
+     * The Cloud Logging client configured with the GCP project ID.
+     */
+    logging;
+    /**
+     * The GCP project ID.
+     */
+    projectId;
+    constructor(context) {
+        const googleConf = context.asConfiguration();
+        this.projectId = googleConf.getOrThrow('google.project');
+        this.logging = new Logging({ projectId: this.projectId });
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@causa/workspace-google",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "The Causa workspace module providing many functionalities related to GCP and its services.",
   "repository": {
     "type": "git",
@@ -36,18 +36,19 @@
   },
   "dependencies": {
     "@causa/cli": ">= 0.7.0 < 1.0.0",
-    "@causa/workspace": ">= 0.24.0 < 1.0.0",
-    "@causa/workspace-core": ">= 0.32.0 < 1.0.0",
+    "@causa/workspace": ">= 0.24.1 < 1.0.0",
+    "@causa/workspace-core": ">= 0.34.0 < 1.0.0",
     "@causa/workspace-typescript": ">= 0.22.0 < 1.0.0",
-    "@google-cloud/apikeys": "^2.2.1",
-    "@google-cloud/bigquery": "^8.1.1",
-    "@google-cloud/iam-credentials": "^4.2.1",
+    "@google-cloud/apikeys": "^2.2.2",
+    "@google-cloud/bigquery": "^8.3.0",
+    "@google-cloud/iam-credentials": "^4.2.2",
+    "@google-cloud/logging": "^11.2.1",
     "@google-cloud/pubsub": "^5.3.0",
-    "@google-cloud/resource-manager": "^6.2.1",
-    "@google-cloud/run": "^3.2.0",
-    "@google-cloud/secret-manager": "^6.1.1",
-    "@google-cloud/service-usage": "^4.2.1",
-    "@google-cloud/spanner": "^8.6.0",
+    "@google-cloud/resource-manager": "^6.2.2",
+    "@google-cloud/run": "^3.2.1",
+    "@google-cloud/secret-manager": "^6.1.2",
+    "@google-cloud/service-usage": "^4.2.2",
+    "@google-cloud/spanner": "^8.7.0",
     "@google-cloud/storage": "^7.19.0",
     "class-validator": "^0.15.1",
     "firebase": "^12.12.1",
@@ -61,20 +62,20 @@
     "quicktype-core": "^23.2.6"
   },
   "devDependencies": {
-    "@swc/core": "^1.15.30",
+    "@swc/core": "^1.15.33",
     "@swc/jest": "^0.2.39",
     "@tsconfig/node22": "^22.0.5",
     "@types/jest": "^30.0.0",
     "@types/micromatch": "^4.0.10",
     "@types/node": "^20.19.39",
     "copyfiles": "^2.4.1",
-    "eslint": "^10.2.1",
+    "eslint": "^10.3.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "jest": "^30.3.0",
     "jest-extended": "^7.0.0",
     "rimraf": "^6.1.3",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.59.0"
+    "typescript-eslint": "^8.59.1"
   }
 }