@contractspec/integration.runtime 1.57.0 → 1.58.0

package/dist/runtime.js

@@ -1,186 +1,209 @@
-import { performance } from "node:perf_hooks";
+// @bun
+// src/runtime.ts
+import { performance } from "perf_hooks";
+var DEFAULT_MAX_ATTEMPTS = 3;
+var DEFAULT_BACKOFF_MS = 250;
 
-//#region src/runtime.ts
-const DEFAULT_MAX_ATTEMPTS = 3;
-const DEFAULT_BACKOFF_MS = 250;
-var IntegrationCallGuard = class {
-	telemetry;
-	maxAttempts;
-	backoffMs;
-	shouldRetry;
-	sleep;
-	now;
-	constructor(secretProvider, options = {}) {
-		this.secretProvider = secretProvider;
-		this.telemetry = options.telemetry;
-		this.maxAttempts = Math.max(1, options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);
-		this.backoffMs = options.backoffMs ?? DEFAULT_BACKOFF_MS;
-		this.shouldRetry = options.shouldRetry ?? ((error) => typeof error === "object" && error !== null && "retryable" in error && Boolean(error.retryable));
-		this.sleep = options.sleep ?? ((ms) => ms <= 0 ? Promise.resolve() : new Promise((resolve) => setTimeout(resolve, ms)));
-		this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-	}
-	async executeWithGuards(slotId, operation, _input, resolvedConfig, executor) {
-		const integration = this.findIntegration(slotId, resolvedConfig);
-		if (!integration) return this.failure({
-			tenantId: resolvedConfig.tenantId,
-			appId: resolvedConfig.appId,
-			environment: resolvedConfig.environment,
-			blueprintName: resolvedConfig.blueprintName,
-			blueprintVersion: resolvedConfig.blueprintVersion,
-			configVersion: resolvedConfig.configVersion,
-			slotId,
-			operation
-		}, void 0, {
-			code: "SLOT_NOT_BOUND",
-			message: `Integration slot "${slotId}" is not bound for tenant "${resolvedConfig.tenantId}".`,
-			retryable: false
-		}, 0);
-		const status = integration.connection.status;
-		if (status === "disconnected" || status === "error") return this.failure(this.makeContext(slotId, operation, resolvedConfig), integration, {
-			code: "CONNECTION_NOT_READY",
-			message: `Integration connection "${integration.connection.meta.label}" is in status "${status}".`,
-			retryable: false
-		}, 0);
-		const secrets = await this.fetchSecrets(integration.connection);
-		let attempt = 0;
-		const started = performance.now();
-		while (attempt < this.maxAttempts) {
-			attempt += 1;
-			try {
-				const data = await executor(integration.connection, secrets);
-				const duration = performance.now() - started;
-				this.emitTelemetry(this.makeContext(slotId, operation, resolvedConfig), integration, "success", duration);
-				return {
-					success: true,
-					data,
-					metadata: {
-						latencyMs: duration,
-						connectionId: integration.connection.meta.id,
-						ownershipMode: integration.connection.ownershipMode,
-						attempts: attempt
-					}
-				};
-			} catch (error) {
-				const duration = performance.now() - started;
-				this.emitTelemetry(this.makeContext(slotId, operation, resolvedConfig), integration, "error", duration, this.errorCodeFor(error), error instanceof Error ? error.message : String(error));
-				const retryable = this.shouldRetry(error, attempt);
-				if (!retryable || attempt >= this.maxAttempts) return {
-					success: false,
-					error: {
-						code: this.errorCodeFor(error),
-						message: error instanceof Error ? error.message : String(error),
-						retryable,
-						cause: error
-					},
-					metadata: {
-						latencyMs: duration,
-						connectionId: integration.connection.meta.id,
-						ownershipMode: integration.connection.ownershipMode,
-						attempts: attempt
-					}
-				};
-				await this.sleep(this.backoffMs);
-			}
-		}
-		return {
-			success: false,
-			error: {
-				code: "UNKNOWN_ERROR",
-				message: "Integration call failed after retries.",
-				retryable: false
-			},
-			metadata: {
-				latencyMs: performance.now() - started,
-				connectionId: integration.connection.meta.id,
-				ownershipMode: integration.connection.ownershipMode,
-				attempts: this.maxAttempts
-			}
-		};
-	}
-	findIntegration(slotId, config) {
-		return config.integrations.find((integration) => integration.slot.slotId === slotId);
-	}
-	async fetchSecrets(connection) {
-		if (!this.secretProvider.canHandle(connection.secretRef)) throw new Error(`Secret provider "${this.secretProvider.id}" cannot handle reference "${connection.secretRef}".`);
-		const secret = await this.secretProvider.getSecret(connection.secretRef);
-		return this.parseSecret(secret);
-	}
-	parseSecret(secret) {
-		const text = new TextDecoder().decode(secret.data);
-		try {
-			const parsed = JSON.parse(text);
-			if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-				const entries = Object.entries(parsed).filter(([, value]) => typeof value === "string" || typeof value === "number" || typeof value === "boolean");
-				return Object.fromEntries(entries.map(([key, value]) => [key, String(value)]));
-			}
-		} catch {}
-		return { secret: text };
-	}
-	emitTelemetry(context, integration, status, durationMs, errorCode, errorMessage) {
-		if (!this.telemetry || !integration) return;
-		this.telemetry.record({
-			tenantId: context.tenantId,
-			appId: context.appId,
-			environment: context.environment,
-			slotId: context.slotId,
-			integrationKey: integration.connection.meta.integrationKey,
-			integrationVersion: integration.connection.meta.integrationVersion,
-			connectionId: integration.connection.meta.id,
-			status,
-			durationMs,
-			errorCode,
-			errorMessage,
-			occurredAt: this.now(),
-			metadata: {
-				blueprint: `${context.blueprintName}.v${context.blueprintVersion}`,
-				configVersion: context.configVersion,
-				operation: context.operation
-			}
-		});
-	}
-	failure(context, integration, error, attempts) {
-		if (integration) this.emitTelemetry(context, integration, "error", 0, error.code, error.message);
-		return {
-			success: false,
-			error,
-			metadata: {
-				latencyMs: 0,
-				connectionId: integration?.connection.meta.id ?? "unknown",
-				ownershipMode: integration?.connection.ownershipMode ?? "managed",
-				attempts
-			}
-		};
-	}
-	makeContext(slotId, operation, config) {
-		return {
-			tenantId: config.tenantId,
-			appId: config.appId,
-			environment: config.environment,
-			blueprintName: config.blueprintName,
-			blueprintVersion: config.blueprintVersion,
-			configVersion: config.configVersion,
-			slotId,
-			operation
-		};
-	}
-	errorCodeFor(error) {
-		if (typeof error === "object" && error !== null && "code" in error && typeof error.code === "string") return error.code;
-		return "PROVIDER_ERROR";
-	}
-};
+class IntegrationCallGuard {
+  secretProvider;
+  telemetry;
+  maxAttempts;
+  backoffMs;
+  shouldRetry;
+  sleep;
+  now;
+  constructor(secretProvider, options = {}) {
+    this.secretProvider = secretProvider;
+    this.telemetry = options.telemetry;
+    this.maxAttempts = Math.max(1, options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);
+    this.backoffMs = options.backoffMs ?? DEFAULT_BACKOFF_MS;
+    this.shouldRetry = options.shouldRetry ?? ((error) => typeof error === "object" && error !== null && ("retryable" in error) && Boolean(error.retryable));
+    this.sleep = options.sleep ?? ((ms) => ms <= 0 ? Promise.resolve() : new Promise((resolve) => setTimeout(resolve, ms)));
+    this.now = options.now ?? (() => new Date);
+  }
+  async executeWithGuards(slotId, operation, _input, resolvedConfig, executor) {
+    const integration = this.findIntegration(slotId, resolvedConfig);
+    if (!integration) {
+      return this.failure({
+        tenantId: resolvedConfig.tenantId,
+        appId: resolvedConfig.appId,
+        environment: resolvedConfig.environment,
+        blueprintName: resolvedConfig.blueprintName,
+        blueprintVersion: resolvedConfig.blueprintVersion,
+        configVersion: resolvedConfig.configVersion,
+        slotId,
+        operation
+      }, undefined, {
+        code: "SLOT_NOT_BOUND",
+        message: `Integration slot "${slotId}" is not bound for tenant "${resolvedConfig.tenantId}".`,
+        retryable: false
+      }, 0);
+    }
+    const status = integration.connection.status;
+    if (status === "disconnected" || status === "error") {
+      return this.failure(this.makeContext(slotId, operation, resolvedConfig), integration, {
+        code: "CONNECTION_NOT_READY",
+        message: `Integration connection "${integration.connection.meta.label}" is in status "${status}".`,
+        retryable: false
+      }, 0);
+    }
+    const secrets = await this.fetchSecrets(integration.connection);
+    let attempt = 0;
+    const started = performance.now();
+    while (attempt < this.maxAttempts) {
+      attempt += 1;
+      try {
+        const data = await executor(integration.connection, secrets);
+        const duration = performance.now() - started;
+        this.emitTelemetry(this.makeContext(slotId, operation, resolvedConfig), integration, "success", duration);
+        return {
+          success: true,
+          data,
+          metadata: {
+            latencyMs: duration,
+            connectionId: integration.connection.meta.id,
+            ownershipMode: integration.connection.ownershipMode,
+            attempts: attempt
+          }
+        };
+      } catch (error) {
+        const duration = performance.now() - started;
+        this.emitTelemetry(this.makeContext(slotId, operation, resolvedConfig), integration, "error", duration, this.errorCodeFor(error), error instanceof Error ? error.message : String(error));
+        const retryable = this.shouldRetry(error, attempt);
+        if (!retryable || attempt >= this.maxAttempts) {
+          return {
+            success: false,
+            error: {
+              code: this.errorCodeFor(error),
+              message: error instanceof Error ? error.message : String(error),
+              retryable,
+              cause: error
+            },
+            metadata: {
+              latencyMs: duration,
+              connectionId: integration.connection.meta.id,
+              ownershipMode: integration.connection.ownershipMode,
+              attempts: attempt
+            }
+          };
+        }
+        await this.sleep(this.backoffMs);
+      }
+    }
+    return {
+      success: false,
+      error: {
+        code: "UNKNOWN_ERROR",
+        message: "Integration call failed after retries.",
+        retryable: false
+      },
+      metadata: {
+        latencyMs: performance.now() - started,
+        connectionId: integration.connection.meta.id,
+        ownershipMode: integration.connection.ownershipMode,
+        attempts: this.maxAttempts
+      }
+    };
+  }
+  findIntegration(slotId, config) {
+    return config.integrations.find((integration) => integration.slot.slotId === slotId);
+  }
+  async fetchSecrets(connection) {
+    if (!this.secretProvider.canHandle(connection.secretRef)) {
+      throw new Error(`Secret provider "${this.secretProvider.id}" cannot handle reference "${connection.secretRef}".`);
+    }
+    const secret = await this.secretProvider.getSecret(connection.secretRef);
+    return this.parseSecret(secret);
+  }
+  parseSecret(secret) {
+    const text = new TextDecoder().decode(secret.data);
+    try {
+      const parsed = JSON.parse(text);
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        const entries = Object.entries(parsed).filter(([, value]) => typeof value === "string" || typeof value === "number" || typeof value === "boolean");
+        return Object.fromEntries(entries.map(([key, value]) => [key, String(value)]));
+      }
+    } catch {}
+    return { secret: text };
+  }
+  emitTelemetry(context, integration, status, durationMs, errorCode, errorMessage) {
+    if (!this.telemetry || !integration)
+      return;
+    this.telemetry.record({
+      tenantId: context.tenantId,
+      appId: context.appId,
+      environment: context.environment,
+      slotId: context.slotId,
+      integrationKey: integration.connection.meta.integrationKey,
+      integrationVersion: integration.connection.meta.integrationVersion,
+      connectionId: integration.connection.meta.id,
+      status,
+      durationMs,
+      errorCode,
+      errorMessage,
+      occurredAt: this.now(),
+      metadata: {
+        blueprint: `${context.blueprintName}.v${context.blueprintVersion}`,
+        configVersion: context.configVersion,
+        operation: context.operation
+      }
+    });
+  }
+  failure(context, integration, error, attempts) {
+    if (integration) {
+      this.emitTelemetry(context, integration, "error", 0, error.code, error.message);
+    }
+    return {
+      success: false,
+      error,
+      metadata: {
+        latencyMs: 0,
+        connectionId: integration?.connection.meta.id ?? "unknown",
+        ownershipMode: integration?.connection.ownershipMode ?? "managed",
+        attempts
+      }
+    };
+  }
+  makeContext(slotId, operation, config) {
+    return {
+      tenantId: config.tenantId,
+      appId: config.appId,
+      environment: config.environment,
+      blueprintName: config.blueprintName,
+      blueprintVersion: config.blueprintVersion,
+      configVersion: config.configVersion,
+      slotId,
+      operation
+    };
+  }
+  errorCodeFor(error) {
+    if (typeof error === "object" && error !== null && "code" in error && typeof error.code === "string") {
+      return error.code;
+    }
+    return "PROVIDER_ERROR";
+  }
+}
 function ensureConnectionReady(integration) {
-	const status = integration.connection.status;
-	if (status === "disconnected" || status === "error") throw new Error(`Integration connection "${integration.connection.meta.label}" is in status "${status}".`);
+  const status = integration.connection.status;
+  if (status === "disconnected" || status === "error") {
+    throw new Error(`Integration connection "${integration.connection.meta.label}" is in status "${status}".`);
+  }
 }
 function connectionStatusLabel(status) {
-	switch (status) {
-		case "connected": return "connected";
-		case "disconnected": return "disconnected";
-		case "error": return "error";
-		default: return "unknown";
-	}
+  switch (status) {
+    case "connected":
+      return "connected";
+    case "disconnected":
+      return "disconnected";
+    case "error":
+      return "error";
+    case "unknown":
+    default:
+      return "unknown";
+  }
 }
-
-//#endregion
-export { IntegrationCallGuard, connectionStatusLabel, ensureConnectionReady };
-//# sourceMappingURL=runtime.js.map
+export {
+  ensureConnectionReady,
+  connectionStatusLabel,
+  IntegrationCallGuard
+};

package/dist/secrets/env-secret-provider.d.ts

@@ -1,32 +1,29 @@
-import { SecretProvider, SecretReference, SecretRotationResult, SecretValue, SecretWritePayload } from "./provider.js";
-
-//#region src/secrets/env-secret-provider.d.ts
+import type { SecretProvider, SecretReference, SecretRotationResult, SecretValue, SecretWritePayload } from './provider';
 interface EnvSecretProviderOptions {
-  /**
-   * Optional map to alias secret references to environment variable names.
-   * Useful when referencing secrets from other providers (e.g. gcp://...)
-   * while still allowing local overrides.
-   */
-  aliases?: Record<string, string>;
+    /**
+     * Optional map to alias secret references to environment variable names.
+     * Useful when referencing secrets from other providers (e.g. gcp://...)
+     * while still allowing local overrides.
+     */
+    aliases?: Record<string, string>;
 }
 /**
  * Environment-variable backed secret provider. Read-only by design.
  * Allows overriding other secret providers by deriving environment variable
  * names from secret references (or by using explicit aliases).
  */
-declare class EnvSecretProvider implements SecretProvider {
-  readonly id = "env";
-  private readonly aliases;
-  constructor(options?: EnvSecretProviderOptions);
-  canHandle(reference: SecretReference): boolean;
-  getSecret(reference: SecretReference): Promise<SecretValue>;
-  setSecret(reference: SecretReference, _payload: SecretWritePayload): Promise<SecretRotationResult>;
-  rotateSecret(reference: SecretReference, _payload: SecretWritePayload): Promise<SecretRotationResult>;
-  deleteSecret(reference: SecretReference): Promise<void>;
-  private resolveEnvKey;
-  private deriveEnvKey;
-  private forbiddenError;
+export declare class EnvSecretProvider implements SecretProvider {
+    readonly id = "env";
+    private readonly aliases;
+    constructor(options?: EnvSecretProviderOptions);
+    canHandle(reference: SecretReference): boolean;
+    getSecret(reference: SecretReference): Promise<SecretValue>;
+    setSecret(reference: SecretReference, _payload: SecretWritePayload): Promise<SecretRotationResult>;
+    rotateSecret(reference: SecretReference, _payload: SecretWritePayload): Promise<SecretRotationResult>;
+    deleteSecret(reference: SecretReference): Promise<void>;
+    private resolveEnvKey;
+    private deriveEnvKey;
+    private forbiddenError;
 }
-//#endregion
-export { EnvSecretProvider };
+export {};
 //# sourceMappingURL=env-secret-provider.d.ts.map

package/dist/secrets/env-secret-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-secret-provider.d.ts","names":[],"sources":["../../src/secrets/env-secret-provider.ts"],"mappings":";;;UASU,wBAAA;;AAHU;;;;EASlB,OAAA,GAAU,MAAA;AAAA;;;;;;cAQC,iBAAA,YAA6B,cAAA;EAAA,SAC/B,EAAA;EAAA,iBAEQ,OAAA;cAEL,OAAA,GAAS,wBAAA;EAIrB,SAAA,CAAU,SAAA,EAAW,eAAA;EAKf,SAAA,CAAU,SAAA,EAAW,eAAA,GAAkB,OAAA,CAAQ,WAAA;EAgC/C,SAAA,CACJ,SAAA,EAAW,eAAA,EACX,QAAA,EAAU,kBAAA,GACT,OAAA,CAAQ,oBAAA;EAIL,YAAA,CACJ,SAAA,EAAW,eAAA,EACX,QAAA,EAAU,kBAAA,GACT,OAAA,CAAQ,oBAAA;EAIL,YAAA,CAAa,SAAA,EAAW,eAAA,GAAkB,OAAA;EAAA,QAIxC,aAAA;EAAA,QA6BA,YAAA;EAAA,QAcA,cAAA;AAAA"}
+{"version":3,"file":"env-secret-provider.d.ts","sourceRoot":"","sources":["../../src/secrets/env-secret-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAGpB,UAAU,wBAAwB;IAChC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,EAAE,SAAS;IAEpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,OAAO,GAAE,wBAA6B;IAIlD,SAAS,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO;IAKxC,SAAS,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAgC3D,SAAS,CACb,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAI1B,YAAY,CAChB,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAI1B,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,OAAO,CAAC,aAAa;IA6BrB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,cAAc;CAWvB"}