@cloud-cli/on 1.2.18 → 1.4.0

package/dist/on.js

@@ -3290,7 +3290,9 @@ var dn = {
 		return this.evaluateExpression(n, t);
 	}
 	static async evaluateCondition(e, t = {}) {
-		return !!await this.evaluateExpression(e, t);
+		typeof e == "string" && (e = [e]);
+		for (let n of e) if (await this.evaluateExpression(n, t)) return !0;
+		return !1;
 	}
 	static async evaluateExpression(e, t = {}) {
 		if (!e || typeof e != "string") return e;
@@ -3401,10 +3403,12 @@ var dn = {
 			r = m.timingSafeEqual(Buffer.from(a), Buffer.from(e));
 		}
 		if (r) {
-			let n = JSON.parse(t.toString("utf-8"));
+			let n = JSON.parse(t.toString("utf-8")), r = e["x-github-event"] || "unknown", a = (n.ref || "").replace("refs/heads/", "").replace("refs/tags/", ""), [o, s] = (n.repository?.full_name || "").split("/");
 			i = {
-				event: e["x-github-event"] || "unknown",
-				branch: (n.ref || "").replace("refs/heads/", "").replace("refs/tags/", ""),
+				event: r,
+				branch: a,
+				owner: o,
+				repo: s,
 				clone_url: n.repository?.clone_url,
 				commit_sha: n.after || n.head_commit?.id,
 				author: n.pusher?.name || n.sender?.login,
@@ -3891,40 +3895,17 @@ var vn, yn, bn, xn = class {
 	}
 	async handleWebhook(e, t, n) {
 		try {
-			let r = [], i = 0;
-			for await (let e of t) {
-				if (i += e.length, i > 5242880) return n.writeHead(413, { "Content-Type": "application/json" }), n.end(JSON.stringify({ error: "Payload size exceeds limit" }));
-				r.push(typeof e == "string" ? Buffer.from(e) : e);
-			}
-			let a = Buffer.concat(r), o = Object.fromEntries(Object.entries(t.headers).map(([e, t]) => [e.toLowerCase(), Array.isArray(t) ? t[0] : t || ""])), s = this.preprocessors.get(e), c = this.secrets.get(`${e.toUpperCase()}_WEBHOOK_SECRET`), l = {}, u = !0;
-			if (s) {
-				let e = s.parse(o, a, c);
-				u = e.isValid, l = e.inputs;
-			} else try {
-				l = JSON.parse(a.toString("utf-8"));
-			} catch {}
-			if (!u) return n.writeHead(401, { "Content-Type": "application/json" }), n.end(JSON.stringify({ error: "Invalid HMAC signature or authentication failed" }));
-			let d = [];
-			for (let t of this.workflows) {
-				if (t.on.provider !== e) continue;
-				if (t.on.if) try {
-					if (!fn.evaluateCondition(t.on.if, { inputs: l })) continue;
-				} catch (e) {
-					console.error(`⚠️ Condition evaluation error in workflow [${t.id}]:`, e.message);
-					continue;
-				}
-				let n;
-				t.concurrency?.group && (n = await fn.evaluateValue(t.concurrency.group, { inputs: l }));
-				let r = {
-					workflowId: t.id,
-					steps: t.steps,
-					inputs: l
-				};
-				await this.queue.enqueue(t.id, r, n), d.push(t.id);
+			let { rawBuffer: r, headers: i } = await this.readRequest(t, n);
+			if (n.headersSent || !r) return;
+			let { isValid: a, inputs: o } = this.preprocess(e, i, r);
+			if (!a) {
+				n.writeHead(401, { "Content-Type": "application/json" }), n.end(JSON.stringify({ error: "Invalid HMAC signature or authentication failed" }));
+				return;
 			}
+			let s = this.matchWorkflows(e, o);
 			n.writeHead(202, { "Content-Type": "application/json" }), n.end(JSON.stringify({
 				message: "Webhook processed",
-				triggeredWorkflows: d
+				triggeredWorkflows: s
 			}));
 		} catch (e) {
 			console.error("❌ Webhook Ingress Error:", e), n.writeHead(500, { "Content-Type": "application/json" }), n.end(JSON.stringify({
@@ -3933,6 +3914,62 @@ var vn, yn, bn, xn = class {
 			}));
 		}
 	}
+	async readRequest(e, t) {
+		let n = [], r = 0;
+		for await (let i of e) {
+			if (r += i.length, r > 5242880) return t.writeHead(413, { "Content-Type": "application/json" }), t.end(JSON.stringify({ error: "Payload size exceeds limit" })), {
+				rawBuffer: null,
+				headers: {}
+			};
+			n.push(typeof i == "string" ? Buffer.from(i) : i);
+		}
+		return {
+			rawBuffer: Buffer.concat(n),
+			headers: Object.fromEntries(Object.entries(e.headers).map(([e, t]) => [e.toLowerCase(), Array.isArray(t) ? t[0] : t || ""]))
+		};
+	}
+	preprocess(e, t, n) {
+		let r = this.secrets.get(`${e.toUpperCase()}_WEBHOOK_SECRET`), i = this.preprocessors.get(e);
+		try {
+			if (i) {
+				let { inputs: e, isValid: a } = i.parse(t, n, r);
+				return {
+					inputs: e,
+					isValid: a
+				};
+			}
+			return {
+				isValid: !0,
+				inputs: JSON.parse(n.toString("utf-8"))
+			};
+		} catch {
+			return {
+				isValid: !1,
+				inputs: null
+			};
+		}
+	}
+	async matchWorkflows(e, t) {
+		let n = [];
+		for (let r of this.workflows) {
+			if (r.on.provider !== e) continue;
+			if (r.on.if) try {
+				if (!fn.evaluateCondition(r.on.if, { inputs: t })) continue;
+			} catch (e) {
+				console.error(`⚠️ Condition evaluation error in workflow [${r.id}]:`, e.message);
+				continue;
+			}
+			let i;
+			r.concurrency?.group && (i = await fn.evaluateValue(r.concurrency.group, { inputs: t }));
+			let a = {
+				workflowId: r.id,
+				steps: r.steps,
+				inputs: t
+			};
+			await this.queue.enqueue(r.id, a, i), n.push(r.id);
+		}
+		return n;
+	}
 	async handleSecretReload(e, t) {
 		if (e.headers.authorization !== `Bearer ${this.adminToken}`) return t.writeHead(403, { "Content-Type": "application/json" }), t.end(JSON.stringify({ error: "Unauthorized" }));
 		this.secrets.reload(), console.log("🔄 SecretStore reloaded successfully without downtime!"), t.writeHead(200, { "Content-Type": "application/json" }), t.end(JSON.stringify({ message: "Secrets reloaded successfully" }));
@@ -8360,16 +8397,23 @@ var wo = class e {
 		let n = [];
 		try {
 			let r = Co(t.resolve(e));
-			for (let e of r) n.push({
-				id: (e.id || e.name)?.toLowerCase().replace(/[^a-z0-9]/g, "-") ?? h(),
-				name: e.name,
-				on: {
-					provider: Object.keys(e.on || {})[0] || "generic",
-					if: e.on?.[Object.keys(e.on || {})[0]]?.if
-				},
-				concurrency: e.concurrency,
-				steps: e.steps
-			});
+			for (let t of r) {
+				if (typeof t.on != "object") {
+					console.error(`on: not defined in ${e}! Ignoring this workflow.`);
+					continue;
+				}
+				let r = Object.keys(t.on)[0] || "generic";
+				n.push({
+					id: (t.id || t.name)?.toLowerCase().replace(/[^a-z0-9]/g, "-") ?? h(),
+					name: t.name,
+					on: {
+						provider: r,
+						if: t.on[r]?.if
+					},
+					concurrency: t.concurrency,
+					steps: t.steps
+				});
+			}
 		} catch (t) {
 			return console.error(`❌ Error parsing workflow '${e}':`, t.message), [];
 		}

package/dist/parser/yaml-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"yaml-loader.d.ts","sourceRoot":"","sources":["../../src/parser/yaml-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,qBAAa,UAAU;WACR,IAAI,CAAC,IAAI,EAAE,MAAM;IAiB9B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,uBAAuB;CA6BhE"}
+{"version":3,"file":"yaml-loader.d.ts","sourceRoot":"","sources":["../../src/parser/yaml-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,qBAAa,UAAU;WACR,IAAI,CAAC,IAAI,EAAE,MAAM;IAiB9B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,uBAAuB;CAmChE"}

package/dist/preprocessors/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/preprocessors/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE5E,qBAAa,kBAAmB,YAAW,mBAAmB;IAC5D,IAAI,SAAY;IAEhB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;CAmCpG"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/preprocessors/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE5E,qBAAa,kBAAmB,YAAW,mBAAmB;IAC5D,IAAI,SAAY;IAEhB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;CAuCpG"}

package/dist/safe-eval.d.ts

@@ -12,7 +12,7 @@ export declare class SafeExpressionEvaluator {
      * Strictly parses code as a JavaScript expression and coerces result to boolean.
      * Throws an explicit AST Parse Error on invalid syntax (fails fast and loud).
      */
-    static evaluateCondition(code: string, context?: Record<string, any>): Promise<boolean>;
+    static evaluateCondition(code: string | string[], context?: Record<string, any>): Promise<boolean>;
     /**
      * Evaluates direct JS code (Used for `eval:` steps or internal expression resolution).
      */

package/dist/safe-eval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safe-eval.d.ts","sourceRoot":"","sources":["../src/safe-eval.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAQ/C,CAAC;AAEF,qBAAa,uBAAuB;IAClC;;;;;OAKG;WACU,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAerF;;;;OAIG;WACU,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjG;;OAEG;WACU,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAoB9F;;OAEG;WACU,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIzF;;OAEG;mBACkB,aAAa;CAgKnC"}
+{"version":3,"file":"safe-eval.d.ts","sourceRoot":"","sources":["../src/safe-eval.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAQ/C,CAAC;AAEF,qBAAa,uBAAuB;IAClC;;;;;OAKG;WACU,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAerF;;;;OAIG;WACU,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB5G;;OAEG;WACU,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAoB9F;;OAEG;WACU,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIzF;;OAEG;mBACkB,aAAa;CAgKnC"}

package/dist/server.d.ts

@@ -16,6 +16,9 @@ export declare class WebhookServer {
      * Processes incoming HTTP webhooks
      */
     private handleWebhook;
+    private readRequest;
+    private preprocess;
+    private matchWorkflows;
     /**
      * Handles Zero-Downtime Secret Reload
      */

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA+C,MAAM,YAAY,CAAC;AAGpH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,UAAU,CAAS;WAEd,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAWzC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IA6B3B;;OAEG;YACW,aAAa;IA+F3B;;OAEG;YACW,kBAAkB;IAehC;;OAEG;YACW,eAAe;IA2E7B;;OAEG;YAGW,gBAAgB;IA2B9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAStC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA+C,MAAM,YAAY,CAAC;AAGpH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,UAAU,CAAS;WAEd,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAWzC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IA6B3B;;OAEG;YACW,aAAa;YA8Bb,WAAW;IAwBzB,OAAO,CAAC,UAAU;YAiBJ,cAAc;IAqC5B;;OAEG;YACW,kBAAkB;IAehC;;OAEG;YACW,eAAe;IA2E7B;;OAEG;YAGW,gBAAgB;IA2B9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAStC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-cli/on",
-  "version": "1.2.18",
+  "version": "1.4.0",
   "description": "CLI entry point for the on plugin ecosystem.",
   "type": "module",
   "packageManager": "pnpm@10.30.3",