@cursor/bdk 0.2.9 → 0.2.11

package/dist/channels/origin/origin-webhook.js

@@ -1,12 +1,3 @@
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 /**
  * Origin webhook verification (Standard Webhooks `v1ed`).
  *
@@ -44,7 +35,6 @@ export function buildV1edSignedContentDigest(args) {
  * window, and Ed25519 verification against any provided key.
  */
 export function verifyV1edWebhookPayload(args) {
-    var _a;
     const webhookId = args.headers["webhook-id"];
     const webhookTimestamp = args.headers["webhook-timestamp"];
     const signatureHeader = args.headers["webhook-signature"];
@@ -55,7 +45,7 @@ export function verifyV1edWebhookPayload(args) {
     if (Number.isNaN(timestampSeconds)) {
         return false;
     }
-    const nowSeconds = Math.floor(((_a = args.nowMs) !== null && _a !== void 0 ? _a : Date.now()) / 1000);
+    const nowSeconds = Math.floor((args.nowMs ?? Date.now()) / 1000);
     if (Math.abs(nowSeconds - timestampSeconds) > V1ED_TIMESTAMP_TOLERANCE_SECONDS) {
         return false;
     }
@@ -80,7 +70,7 @@ export function verifyV1edWebhookPayload(args) {
                 format: "jwk",
             });
         }
-        catch (_b) {
+        catch {
             continue;
         }
         for (const candidate of candidateSignatures) {
@@ -90,7 +80,7 @@ export function verifyV1edWebhookPayload(args) {
                     return true;
                 }
             }
-            catch (_c) {
+            catch {
                 // Malformed signature bytes or a non-Ed25519 key: try the next pair.
             }
         }
@@ -130,50 +120,47 @@ let jwksCache;
  * while `stale-if-error` still applies; otherwise it throws (including a
  * cold-cache miss).
  */
-export function fetchOriginJwks(apiBaseUrl_1) {
-    return __awaiter(this, arguments, void 0, function* (apiBaseUrl, fetchImpl = fetch, options) {
-        var _a, _b;
-        const now = Date.now();
-        if ((options === null || options === void 0 ? void 0 : options.force) !== true &&
-            jwksCache !== undefined &&
-            jwksCache.apiBaseUrl === apiBaseUrl &&
-            now < jwksCache.freshUntilMs) {
-            return jwksCache.keys;
+export async function fetchOriginJwks(apiBaseUrl, fetchImpl = fetch, options) {
+    const now = Date.now();
+    if (options?.force !== true &&
+        jwksCache !== undefined &&
+        jwksCache.apiBaseUrl === apiBaseUrl &&
+        now < jwksCache.freshUntilMs) {
+        return jwksCache.keys;
+    }
+    try {
+        const response = await fetchImpl(`${apiBaseUrl.replace(/\/+$/, "")}/v1/origin/keys`);
+        if (!response.ok) {
+            throw new Error(`Origin JWKS fetch failed: status=${response.status}`);
         }
-        try {
-            const response = yield fetchImpl(`${apiBaseUrl.replace(/\/+$/, "")}/v1/origin/keys`);
-            if (!response.ok) {
-                throw new Error(`Origin JWKS fetch failed: status=${response.status}`);
-            }
-            const body = yield response.json().catch(() => undefined);
-            const keys = typeof body === "object" &&
-                body !== null &&
-                Array.isArray(body.keys)
-                ? body.keys
-                : [];
-            if (keys.length === 0) {
-                throw new Error("Origin JWKS fetch returned no keys");
-            }
-            const cacheControl = response.headers.get("cache-control");
-            const maxAgeMs = (_a = cacheControlMaxAgeMs(cacheControl)) !== null && _a !== void 0 ? _a : 0;
-            const staleIfErrorMs = (_b = cacheControlStaleIfErrorMs(cacheControl)) !== null && _b !== void 0 ? _b : 0;
-            jwksCache = {
-                apiBaseUrl,
-                keys,
-                freshUntilMs: now + maxAgeMs,
-                staleUntilMs: now + maxAgeMs + staleIfErrorMs,
-            };
-            return keys;
+        const body = await response.json().catch(() => undefined);
+        const keys = typeof body === "object" &&
+            body !== null &&
+            Array.isArray(body.keys)
+            ? body.keys
+            : [];
+        if (keys.length === 0) {
+            throw new Error("Origin JWKS fetch returned no keys");
         }
-        catch (error) {
-            if (jwksCache !== undefined &&
-                jwksCache.apiBaseUrl === apiBaseUrl &&
-                now < jwksCache.staleUntilMs) {
-                return jwksCache.keys;
-            }
-            throw error;
+        const cacheControl = response.headers.get("cache-control");
+        const maxAgeMs = cacheControlMaxAgeMs(cacheControl) ?? 0;
+        const staleIfErrorMs = cacheControlStaleIfErrorMs(cacheControl) ?? 0;
+        jwksCache = {
+            apiBaseUrl,
+            keys,
+            freshUntilMs: now + maxAgeMs,
+            staleUntilMs: now + maxAgeMs + staleIfErrorMs,
+        };
+        return keys;
+    }
+    catch (error) {
+        if (jwksCache !== undefined &&
+            jwksCache.apiBaseUrl === apiBaseUrl &&
+            now < jwksCache.staleUntilMs) {
+            return jwksCache.keys;
         }
-    });
+        throw error;
+    }
 }
 /**
  * The signing JWKS could not be fetched (and no cached copy applies), so
@@ -183,47 +170,42 @@ export function fetchOriginJwks(apiBaseUrl_1) {
  */
 export class OriginJwksUnavailableError extends Error {
 }
-function fetchJwksOrUnavailable(apiBaseUrl, fetchImpl, options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            return yield fetchOriginJwks(apiBaseUrl, fetchImpl, options);
-        }
-        catch (error) {
-            throw new OriginJwksUnavailableError(`Origin JWKS unavailable: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    });
+async function fetchJwksOrUnavailable(apiBaseUrl, fetchImpl, options) {
+    try {
+        return await fetchOriginJwks(apiBaseUrl, fetchImpl, options);
+    }
+    catch (error) {
+        throw new OriginJwksUnavailableError(`Origin JWKS unavailable: ${error instanceof Error ? error.message : String(error)}`);
+    }
 }
 /**
  * Verify a Standard-Webhooks v1ed Origin payload. Throws
  * {@link OriginJwksUnavailableError} when the keys cannot be fetched, and a
  * plain error when the signature does not verify against them.
  */
-export function verifyOriginWebhook(body, headers, options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
-        const apiBaseUrl = (_a = options === null || options === void 0 ? void 0 : options.apiBaseUrl) !== null && _a !== void 0 ? _a : DEFAULT_ORIGIN_API_BASE_URL;
-        const fetchImpl = (_b = options === null || options === void 0 ? void 0 : options.fetchImpl) !== null && _b !== void 0 ? _b : fetch;
-        const keys = yield fetchJwksOrUnavailable(apiBaseUrl, fetchImpl);
-        if (verifyV1edWebhookPayload({
-            publicJwks: keys,
-            body,
-            headers,
-            nowMs: options === null || options === void 0 ? void 0 : options.nowMs,
-        })) {
-            return;
-        }
-        const refreshed = yield fetchJwksOrUnavailable(apiBaseUrl, fetchImpl, {
-            force: true,
-        });
-        if (!verifyV1edWebhookPayload({
-            publicJwks: refreshed,
-            body,
-            headers,
-            nowMs: options === null || options === void 0 ? void 0 : options.nowMs,
-        })) {
-            throw new Error("Origin webhook signature verification failed");
-        }
+export async function verifyOriginWebhook(body, headers, options) {
+    const apiBaseUrl = options?.apiBaseUrl ?? DEFAULT_ORIGIN_API_BASE_URL;
+    const fetchImpl = options?.fetchImpl ?? fetch;
+    const keys = await fetchJwksOrUnavailable(apiBaseUrl, fetchImpl);
+    if (verifyV1edWebhookPayload({
+        publicJwks: keys,
+        body,
+        headers,
+        nowMs: options?.nowMs,
+    })) {
+        return;
+    }
+    const refreshed = await fetchJwksOrUnavailable(apiBaseUrl, fetchImpl, {
+        force: true,
     });
+    if (!verifyV1edWebhookPayload({
+        publicJwks: refreshed,
+        body,
+        headers,
+        nowMs: options?.nowMs,
+    })) {
+        throw new Error("Origin webhook signature verification failed");
+    }
 }
 /** Test helper: drop the in-process JWKS cache. */
 export function resetOriginWebhookKeysCache() {

package/dist/channels/origin/reactions.js

@@ -14,15 +14,6 @@
  * session (hosted v2 forks). Origin rejects reactions on comments that
  * belong to an unsubmitted review. API failures throw `OriginApiError`.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 /** Connect unary route backing {@link setOriginCommentReaction}. */
 export const SET_ORIGIN_COMMENT_REACTION_PATH = "/origin.v1.OriginService/SetCommentReaction";
 /**
@@ -42,17 +33,14 @@ export const ORIGIN_COMMENT_REACTIONS = ["👍", "👎", "😄", "🎉", "😕",
  * });
  * ```
  */
-export function setOriginCommentReaction(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        yield input.origin.request({
-            method: "POST",
-            path: SET_ORIGIN_COMMENT_REACTION_PATH,
-            body: {
-                commentId: input.commentId,
-                emoji: input.emoji,
-                active: (_a = input.active) !== null && _a !== void 0 ? _a : true,
-            },
-        });
+export async function setOriginCommentReaction(input) {
+    await input.origin.request({
+        method: "POST",
+        path: SET_ORIGIN_COMMENT_REACTION_PATH,
+        body: {
+            commentId: input.commentId,
+            emoji: input.emoji,
+            active: input.active ?? true,
+        },
     });
 }

package/dist/channels/origin/state.js

@@ -6,18 +6,26 @@
  * rebuild a repo-bound Origin handle without re-parsing the webhook.
  */
 export function emptyOriginChannelState(overrides = {}) {
-    return Object.assign({ owner: "", repo: "", pullRequestNumber: null, installationId: null, triggeringCommentId: null, deliveryId: null, eventType: null }, overrides);
+    return {
+        owner: "",
+        repo: "",
+        pullRequestNumber: null,
+        installationId: null,
+        triggeringCommentId: null,
+        deliveryId: null,
+        eventType: null,
+        ...overrides,
+    };
 }
 /** Build the per-turn channel state from a dispatched event's context. */
 export function originChannelStateForEvent(input) {
-    var _a, _b, _c;
     return emptyOriginChannelState({
         owner: input.repository.owner,
         repo: input.repository.name,
         pullRequestNumber: input.pullRequestNumber,
-        installationId: (_a = input.installationId) !== null && _a !== void 0 ? _a : null,
-        triggeringCommentId: (_b = input.triggeringCommentId) !== null && _b !== void 0 ? _b : null,
-        deliveryId: (_c = input.deliveryId) !== null && _c !== void 0 ? _c : null,
+        installationId: input.installationId ?? null,
+        triggeringCommentId: input.triggeringCommentId ?? null,
+        deliveryId: input.deliveryId ?? null,
         eventType: input.eventType,
     });
 }