@drawbridge/drawbridge-utils 0.0.41 → 0.0.43

package/dist/ai.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// ai.js
+// lib/ai.js
 var ai_exports = {};
 __export(ai_exports, {
   MARKUP: () => MARKUP,
@@ -31,7 +31,7 @@ __export(ai_exports, {
 module.exports = __toCommonJS(ai_exports);
 var import_genai = require("@google/genai");
 
-// circuit.js
+// lib/circuit.js
 var CLOSED = "CLOSED";
 var OPEN = "OPEN";
 var HALF_OPEN = "HALF_OPEN";
@@ -82,7 +82,7 @@ var circuit = ({
   };
 };
 
-// transactions.js
+// lib/transactions.js
 var import_drawbridge_telemetry = require("@drawbridge/drawbridge-telemetry");
 var insertTransaction = async ({
   db,
@@ -155,7 +155,7 @@ var debit = async ({
   });
 };
 
-// ai.js
+// lib/ai.js
 var google_client = new import_genai.GoogleGenAI({
   apiKey: process.env.GOOGLE_API_KEY
 });

package/dist/ai.js

@@ -1,12 +1,131 @@
-import {
-  debit
-} from "./chunk-JT2PAZAZ.js";
-import {
-  circuit
-} from "./chunk-6HH36OK6.js";
-
-// ai.js
+// lib/ai.js
 import { GoogleGenAI } from "@google/genai";
+
+// lib/circuit.js
+var CLOSED = "CLOSED";
+var OPEN = "OPEN";
+var HALF_OPEN = "HALF_OPEN";
+var circuit = ({
+  name,
+  threshold = 5,
+  timeout = 3e4
+}) => {
+  let state = CLOSED;
+  let failures = 0;
+  let openedAt = null;
+  const trip = () => {
+    state = OPEN;
+    openedAt = Date.now();
+    console.error(`Circuit breaker OPEN: ${name}`);
+  };
+  const reset = () => {
+    state = CLOSED;
+    failures = 0;
+    openedAt = null;
+    console.log(`Circuit breaker CLOSED: ${name}`);
+  };
+  return async (fn) => {
+    if (state === OPEN) {
+      if (Date.now() - openedAt >= timeout) {
+        state = HALF_OPEN;
+      } else {
+        const error = new Error(`${name} is temporarily unavailable`);
+        error.status = 503;
+        throw error;
+      }
+    }
+    try {
+      const result = await fn();
+      if (state === HALF_OPEN) {
+        reset();
+      } else {
+        failures = 0;
+      }
+      return result;
+    } catch (error) {
+      failures++;
+      if (state === HALF_OPEN || failures >= threshold) {
+        trip();
+      }
+      throw error;
+    }
+  };
+};
+
+// lib/transactions.js
+import { currentTraceId } from "@drawbridge/drawbridge-telemetry";
+var insertTransaction = async ({
+  db,
+  user,
+  type,
+  category,
+  source,
+  amount,
+  _id,
+  stripeInvoiceId,
+  stripeEventId,
+  session,
+  ...rest
+}) => {
+  var _a;
+  const beforeRaw = (_a = user == null ? void 0 : user.balance) == null ? void 0 : _a[type];
+  const balance = typeof beforeRaw === "number" ? { before: beforeRaw, after: beforeRaw + amount } : void 0;
+  const trace = currentTraceId();
+  await db.create({
+    authenticated: user,
+    collection: "transaction",
+    data: {
+      ..._id && { _id },
+      user: user == null ? void 0 : user.id,
+      type,
+      category,
+      source,
+      amount,
+      ...balance && { balance },
+      ...trace && { trace },
+      ...rest,
+      ...stripeInvoiceId && { stripeInvoiceId },
+      ...stripeEventId && { stripeEventId }
+    },
+    ...session && { options: { session } }
+  });
+};
+var debit = async ({
+  db,
+  user,
+  amount,
+  type,
+  category,
+  source,
+  stripeInvoiceId,
+  stripeEventId,
+  session,
+  ...rest
+}) => {
+  if (!Number.isInteger(amount) || amount <= 0) {
+    throw new Error(`debit() requires a positive integer amount, got ${amount}`);
+  }
+  if (!type) {
+    throw new Error('debit() requires a type (e.g., "ai")');
+  }
+  if (!source) {
+    throw new Error('debit() requires a source ("system" | "admin" | "user")');
+  }
+  await insertTransaction({
+    db,
+    user,
+    type,
+    category,
+    source,
+    amount: -amount,
+    stripeInvoiceId,
+    stripeEventId,
+    session,
+    ...rest
+  });
+};
+
+// lib/ai.js
 var google_client = new GoogleGenAI({
   apiKey: process.env.GOOGLE_API_KEY
 });

package/dist/axios.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// axios.js
+// lib/axios.js
 var axios_exports = {};
 __export(axios_exports, {
   axios: () => axios,

package/dist/axios.js

@@ -1,4 +1,4 @@
-// axios.js
+// lib/axios.js
 import axiosLib from "axios";
 import dns from "dns";
 import https from "https";

package/dist/cdn.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// cdn.js
+// lib/cdn.js
 var cdn_exports = {};
 __export(cdn_exports, {
   cdnShopify: () => cdnShopify,

package/dist/cdn.js

@@ -1,4 +1,4 @@
-// cdn.js
+// lib/cdn.js
 var cdnSrc = (asset, size, timestamp) => {
   var _a;
   const src = (_a = asset == null ? void 0 : asset.sizes) == null ? void 0 : _a[size];

package/dist/circuit.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// circuit.js
+// lib/circuit.js
 var circuit_exports = {};
 __export(circuit_exports, {
   circuit: () => circuit

package/dist/circuit.js

@@ -1,6 +1,53 @@
-import {
-  circuit
-} from "./chunk-6HH36OK6.js";
+// lib/circuit.js
+var CLOSED = "CLOSED";
+var OPEN = "OPEN";
+var HALF_OPEN = "HALF_OPEN";
+var circuit = ({
+  name,
+  threshold = 5,
+  timeout = 3e4
+}) => {
+  let state = CLOSED;
+  let failures = 0;
+  let openedAt = null;
+  const trip = () => {
+    state = OPEN;
+    openedAt = Date.now();
+    console.error(`Circuit breaker OPEN: ${name}`);
+  };
+  const reset = () => {
+    state = CLOSED;
+    failures = 0;
+    openedAt = null;
+    console.log(`Circuit breaker CLOSED: ${name}`);
+  };
+  return async (fn) => {
+    if (state === OPEN) {
+      if (Date.now() - openedAt >= timeout) {
+        state = HALF_OPEN;
+      } else {
+        const error = new Error(`${name} is temporarily unavailable`);
+        error.status = 503;
+        throw error;
+      }
+    }
+    try {
+      const result = await fn();
+      if (state === HALF_OPEN) {
+        reset();
+      } else {
+        failures = 0;
+      }
+      return result;
+    } catch (error) {
+      failures++;
+      if (state === HALF_OPEN || failures >= threshold) {
+        trip();
+      }
+      throw error;
+    }
+  };
+};
 export {
   circuit
 };

package/dist/encrypt.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// encrypt.js
+// lib/encrypt.js
 var encrypt_exports = {};
 __export(encrypt_exports, {
   decrypt: () => decrypt,
@@ -35,14 +35,14 @@ __export(encrypt_exports, {
 module.exports = __toCommonJS(encrypt_exports);
 var import_crypto2 = __toESM(require("crypto"), 1);
 
-// token.js
+// lib/token.js
 var import_crypto = __toESM(require("crypto"), 1);
 var generate = (bytes = 32, encoding = "base64url") => {
   const buf = import_crypto.default.randomBytes(bytes);
   return encoding ? buf.toString(encoding) : buf;
 };
 
-// encrypt.js
+// lib/encrypt.js
 var ALGORITHM = "aes-256-gcm";
 var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
 var encrypt = (value) => {

package/dist/encrypt.js

@@ -1,8 +1,41 @@
-import {
-  decrypt,
-  encrypt
-} from "./chunk-2DRAIKGZ.js";
-import "./chunk-OS2AHUWX.js";
+// lib/encrypt.js
+import crypto2 from "crypto";
+
+// lib/token.js
+import crypto from "crypto";
+var generate = (bytes = 32, encoding = "base64url") => {
+  const buf = crypto.randomBytes(bytes);
+  return encoding ? buf.toString(encoding) : buf;
+};
+
+// lib/encrypt.js
+var ALGORITHM = "aes-256-gcm";
+var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
+var encrypt = (value) => {
+  const iv = generate(12, null);
+  const cipher = crypto2.createCipheriv(ALGORITHM, getKey(), iv);
+  const data = Buffer.concat([
+    cipher.update(JSON.stringify(value), "utf8"),
+    cipher.final()
+  ]);
+  const tag = cipher.getAuthTag();
+  return [iv, tag, data].map((b) => b.toString("hex")).join(":");
+};
+var decrypt = (value) => {
+  if (typeof value !== "string") return value;
+  const [ivHex, tagHex, dataHex] = value.split(":");
+  const decipher = crypto2.createDecipheriv(
+    ALGORITHM,
+    getKey(),
+    Buffer.from(ivHex, "hex")
+  );
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  const result = Buffer.concat([
+    decipher.update(Buffer.from(dataHex, "hex")),
+    decipher.final()
+  ]);
+  return JSON.parse(result.toString("utf8"));
+};
 export {
   decrypt,
   encrypt

package/dist/fetch.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// fetch.js
+// lib/fetch.js
 var fetch_exports = {};
 __export(fetch_exports, {
   queryString: () => queryString,

package/dist/fetch.js

@@ -1,4 +1,4 @@
-// fetch.js
+// lib/fetch.js
 import qs from "qs";
 var queryString = qs;
 var memoryToken = null;

package/dist/http.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// http.js
+// lib/http.js
 var http_exports = {};
 __export(http_exports, {
   request: () => request

package/dist/http.js

@@ -1,4 +1,4 @@
-// http.js
+// lib/http.js
 var DEFAULT_TIMEOUT_MS = 15e3;
 var request = async ({
   body,

package/dist/nanoid.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// nanoid.js
+// lib/nanoid.js
 var nanoid_exports = {};
 __export(nanoid_exports, {
   nanoid: () => nanoid,

package/dist/nanoid.js

@@ -1,4 +1,4 @@
-// nanoid.js
+// lib/nanoid.js
 import { customAlphabet } from "nanoid";
 var nanoid = customAlphabet("0123456789abcdefghijklmnopqrstuvwxyz", 8);
 var DEFAULT_MAX_RETRIES = 5;

package/dist/oauth/index.cjs

@@ -0,0 +1,196 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// lib/oauth/index.js
+var oauth_exports = {};
+__export(oauth_exports, {
+  compare: () => compare,
+  createOAuthClient: () => createOAuthClient,
+  developer: () => developer,
+  generateToken: () => generateToken,
+  hashToken: () => hashToken,
+  intersect: () => intersect,
+  isDeveloperAllowed: () => isDeveloperAllowed,
+  parse: () => parse,
+  scopes: () => scopes,
+  validate: () => validate
+});
+module.exports = __toCommonJS(oauth_exports);
+
+// lib/token.js
+var import_crypto = __toESM(require("crypto"), 1);
+var generate = (bytes = 32, encoding = "base64url") => {
+  const buf = import_crypto.default.randomBytes(bytes);
+  return encoding ? buf.toString(encoding) : buf;
+};
+var hash = (value, key) => {
+  if (!value) return null;
+  if (key) {
+    return import_crypto.default.createHmac("sha256", key).update(String(value)).digest("base64url");
+  }
+  return import_crypto.default.createHash("sha256").update(String(value)).digest("base64url");
+};
+var compare = (a, b) => {
+  if (typeof a !== "string" || typeof b !== "string") return false;
+  if (a.length !== b.length) return false;
+  return import_crypto.default.timingSafeEqual(
+    Buffer.from(a),
+    Buffer.from(b)
+  );
+};
+
+// lib/oauth/index.js
+var scopes = [
+  "profile:read",
+  "profile:write",
+  "organization:read",
+  "organization:write",
+  "campaigns:read",
+  "campaigns:write",
+  "contacts:read",
+  "contacts:write",
+  "workflows:read",
+  "workflows:write",
+  "connections:read",
+  "connections:write",
+  "billing:read",
+  "billing:write",
+  "admin"
+];
+var developer = [
+  "profile:read",
+  "organization:read",
+  "campaigns:read",
+  "campaigns:write",
+  "contacts:read",
+  "contacts:write",
+  "workflows:read",
+  "workflows:write",
+  "connections:read",
+  "connections:write"
+];
+var parse = (raw) => {
+  if (!raw) return [];
+  if (Array.isArray(raw)) return raw;
+  return String(raw).split(/\s+/).filter(Boolean);
+};
+var validate = (scopes2) => {
+  const parsed = parse(scopes2);
+  const invalid = parsed.filter((scope) => !scopes2.includes(scope));
+  return {
+    invalid,
+    valid: invalid.length === 0
+  };
+};
+var intersect = (requested, allowed) => {
+  const r = parse(requested);
+  const a = parse(allowed);
+  return r.filter((scope) => a.includes(scope));
+};
+var isDeveloperAllowed = (scope) => developer.includes(scope);
+var hashToken = (raw) => hash(raw, process.env.OAUTH_TOKEN_HMAC_KEY);
+var generateToken = () => generate(32, "base64url");
+var REFRESH_LEAD_SECONDS = 60;
+var createOAuthClient = ({
+  clientId,
+  clientSecret,
+  scopes: scopes2 = [],
+  tokenUri
+}) => {
+  if (!clientId) throw new Error("createOAuthClient: clientId required");
+  if (!clientSecret) throw new Error("createOAuthClient: clientSecret required");
+  if (!tokenUri) throw new Error("createOAuthClient: tokenUri required");
+  let cached = null;
+  let pending = null;
+  const isFresh = () => {
+    if (!cached) return false;
+    const now = Math.floor(Date.now() / 1e3);
+    return cached.expiresAt - REFRESH_LEAD_SECONDS > now;
+  };
+  const fetchToken = async () => {
+    const params = new URLSearchParams();
+    params.set("grant_type", "client_credentials");
+    if (scopes2.length > 0) {
+      params.set("scope", scopes2.join(" "));
+    }
+    const basic = Buffer.from(clientId + ":" + clientSecret).toString("base64");
+    const response = await fetch(
+      tokenUri,
+      {
+        body: params.toString(),
+        headers: {
+          "authorization": "Basic " + basic,
+          "content-type": "application/x-www-form-urlencoded"
+        },
+        method: "POST"
+      }
+    );
+    if (!response.ok) {
+      const text = await response.text();
+      throw new Error("createOAuthClient: token fetch failed (" + response.status + "): " + text);
+    }
+    const body = await response.json();
+    cached = {
+      accessToken: body.access_token,
+      expiresAt: Math.floor(Date.now() / 1e3) + Number(body.expires_in || 3600),
+      scope: body.scope
+    };
+    return cached.accessToken;
+  };
+  const refresh = () => {
+    if (pending) return pending;
+    pending = fetchToken().finally(() => {
+      pending = null;
+    });
+    return pending;
+  };
+  return {
+    token: async () => {
+      if (isFresh()) return cached.accessToken;
+      return refresh();
+    },
+    // Force a refresh on the next call. Use this when a request returns 401
+    // before the cached token's expiry — the server may have revoked it.
+    invalidate: () => {
+      cached = null;
+    }
+  };
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  compare,
+  createOAuthClient,
+  developer,
+  generateToken,
+  hashToken,
+  intersect,
+  isDeveloperAllowed,
+  parse,
+  scopes,
+  validate
+});