@dual-os/box-api 0.0.0-stage → 6.0.3

package/plugin-kv3nv11j.js

@@ -0,0 +1,116 @@
+// @bun
+import {
+  exists,
+  contains,
+  minutes,
+  toMillis,
+  currentTimeMillis,
+  forEach,
+  succeed4,
+  mapError,
+  fn,
+  make3,
+  toEpochMillis,
+  decodeUnknownEffect,
+  optionalKey,
+  Unknown,
+  String3,
+  Struct,
+  Record,
+  StructWithRest,
+  NonEmptyArray,
+  Uint8Array2,
+  Action_exports,
+  Trigger_exports
+} from "./plugin-e5fvbgd9.js";
+import {
+  ItemType2,
+  Triggers2,
+  webhooks_postWebhooks2,
+  webhooks_deleteWebhooksId2
+} from "./plugin-94qyr1nj.js";
+
+// dist/triggers.js
+var tolerance = minutes(10);
+var Event = StructWithRest(Struct({
+  id: String3,
+  trigger: String3
+}), [Record(String3, Unknown)]);
+var SignedDelivery = Struct({
+  headers: Struct({
+    "box-delivery-timestamp": String3,
+    "box-signature-primary": optionalKey(String3),
+    "box-signature-secondary": optionalKey(String3)
+  }),
+  rawBody: Uint8Array2
+});
+var triggers2 = [Trigger_exports.webhook("event", {
+  description: "Triggers when a subscribed event happens to a Box file or folder, such as an upload, a download, a comment or a shared link",
+  name: "Box event",
+  config: Struct({
+    target: Struct({
+      id: String3,
+      type: ItemType2
+    }),
+    triggers: NonEmptyArray(Triggers2)
+  }),
+  output: Event,
+  state: Struct({ webhookId: String3 })
+})];
+var handlers2 = { event: {
+  activate: fn("Box.event.activate")(function* (input, context) {
+    const keys = context.auth.current.value;
+    if (keys.webhookPrimaryKey === undefined && keys.webhookSecondaryKey === undefined)
+      return yield* Action_exports.ActionHandlerError.make({ message: "Configure a Box app webhook signature key before activating webhooks" });
+    const webhook = yield* webhooks_postWebhooks2.run({ payload: {
+      address: input.webhookUrl,
+      target: input.config.target,
+      triggers: input.config.triggers
+    } }, context);
+    if (webhook.id === undefined)
+      return yield* Action_exports.ActionHandlerError.make({ message: "Box did not return the registered webhook ID" });
+    return { state: { webhookId: webhook.id } };
+  }),
+  deactivate: fn("Box.event.deactivate")(function* (input, context) {
+    if (input.state === undefined)
+      return;
+    yield* webhooks_deleteWebhooksId2.run({ webhook_id: input.state.webhookId }, context);
+  }),
+  parse: fn("Box.event.parse")(function* (input) {
+    const payload = yield* decodeUnknownEffect(Event)(input.request.body);
+    return {
+      events: [{
+        key: payload.id,
+        payload
+      }],
+      state: input.state
+    };
+  }),
+  verify: fn("Box.event.verify")(function* (input, context) {
+    const forged = Action_exports.ActionHandlerError.make({
+      message: "Invalid Box webhook signature",
+      status: 401
+    });
+    const delivery = yield* mapError(decodeUnknownEffect(SignedDelivery)({
+      ...input.request,
+      headers: input.request.headers ?? {}
+    }), () => forged);
+    const timestamp = delivery.headers["box-delivery-timestamp"];
+    const now = yield* currentTimeMillis;
+    const fresh = exists(make3(timestamp), (sent) => Math.abs(now - toEpochMillis(sent)) <= toMillis(tolerance));
+    const keys = context.auth.current.value;
+    const results = yield* forEach([[keys.webhookPrimaryKey, delivery.headers["box-signature-primary"]], [keys.webhookSecondaryKey, delivery.headers["box-signature-secondary"]]], (pair) => pair[0] === undefined || pair[1] === undefined ? succeed4(false) : Trigger_exports.verifyHmac({
+      algorithm: "sha256",
+      encoding: "base64",
+      message: [delivery.rawBody, timestamp],
+      secret: pair[0],
+      signature: pair[1]
+    }));
+    if (!fresh || !contains(results, true))
+      return yield* forged;
+  })
+} };
+export { triggers2, handlers2 };
+
+//# debugId=8C93891FC3C2C5F364756E2164756E21
+//# sourceMappingURL=plugin-kv3nv11j.js.map

package/plugin-kv3nv11j.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../bundle-input/dist/triggers.js"],
+  "sourcesContent": [
+    "import { ItemType, Triggers, webhooks_deleteWebhooksId, webhooks_postWebhooks } from \"./generated/operations.js\";\nimport { Array, Clock, DateTime, Duration, Effect, Option, Schema } from \"effect\";\nimport { Action, Trigger } from \"@dual-os/sdk\";\n//#region src/triggers.ts\nconst tolerance = Duration.minutes(10);\nconst Event = Schema.StructWithRest(Schema.Struct({\n\tid: Schema.String,\n\ttrigger: Schema.String\n}), [Schema.Record(Schema.String, Schema.Unknown)]);\nconst SignedDelivery = Schema.Struct({\n\theaders: Schema.Struct({\n\t\t\"box-delivery-timestamp\": Schema.String,\n\t\t\"box-signature-primary\": Schema.optionalKey(Schema.String),\n\t\t\"box-signature-secondary\": Schema.optionalKey(Schema.String)\n\t}),\n\trawBody: Schema.Uint8Array\n});\nconst triggers = [Trigger.webhook(\"event\", {\n\tdescription: \"Triggers when a subscribed event happens to a Box file or folder, such as an upload, a download, a comment or a shared link\",\n\tname: \"Box event\",\n\tconfig: Schema.Struct({\n\t\ttarget: Schema.Struct({\n\t\t\tid: Schema.String,\n\t\t\ttype: ItemType\n\t\t}),\n\t\ttriggers: Schema.NonEmptyArray(Triggers)\n\t}),\n\toutput: Event,\n\tstate: Schema.Struct({ webhookId: Schema.String })\n})];\nconst handlers = { event: {\n\tactivate: Effect.fn(\"Box.event.activate\")(function* (input, context) {\n\t\tconst keys = context.auth.current.value;\n\t\tif (keys.webhookPrimaryKey === void 0 && keys.webhookSecondaryKey === void 0) return yield* Action.ActionHandlerError.make({ message: \"Configure a Box app webhook signature key before activating webhooks\" });\n\t\tconst webhook = yield* webhooks_postWebhooks.run({ payload: {\n\t\t\taddress: input.webhookUrl,\n\t\t\ttarget: input.config.target,\n\t\t\ttriggers: input.config.triggers\n\t\t} }, context);\n\t\tif (webhook.id === void 0) return yield* Action.ActionHandlerError.make({ message: \"Box did not return the registered webhook ID\" });\n\t\treturn { state: { webhookId: webhook.id } };\n\t}),\n\tdeactivate: Effect.fn(\"Box.event.deactivate\")(function* (input, context) {\n\t\tif (input.state === void 0) return;\n\t\tyield* webhooks_deleteWebhooksId.run({ webhook_id: input.state.webhookId }, context);\n\t}),\n\tparse: Effect.fn(\"Box.event.parse\")(function* (input) {\n\t\tconst payload = yield* Schema.decodeUnknownEffect(Event)(input.request.body);\n\t\treturn {\n\t\t\tevents: [{\n\t\t\t\tkey: payload.id,\n\t\t\t\tpayload\n\t\t\t}],\n\t\t\tstate: input.state\n\t\t};\n\t}),\n\tverify: Effect.fn(\"Box.event.verify\")(function* (input, context) {\n\t\tconst forged = Action.ActionHandlerError.make({\n\t\t\tmessage: \"Invalid Box webhook signature\",\n\t\t\tstatus: 401\n\t\t});\n\t\tconst delivery = yield* Effect.mapError(Schema.decodeUnknownEffect(SignedDelivery)({\n\t\t\t...input.request,\n\t\t\theaders: input.request.headers ?? {}\n\t\t}), () => forged);\n\t\tconst timestamp = delivery.headers[\"box-delivery-timestamp\"];\n\t\tconst now = yield* Clock.currentTimeMillis;\n\t\tconst fresh = Option.exists(DateTime.make(timestamp), (sent) => Math.abs(now - DateTime.toEpochMillis(sent)) <= Duration.toMillis(tolerance));\n\t\tconst keys = context.auth.current.value;\n\t\tconst results = yield* Effect.forEach([[keys.webhookPrimaryKey, delivery.headers[\"box-signature-primary\"]], [keys.webhookSecondaryKey, delivery.headers[\"box-signature-secondary\"]]], (pair) => pair[0] === void 0 || pair[1] === void 0 ? Effect.succeed(false) : Trigger.verifyHmac({\n\t\t\talgorithm: \"sha256\",\n\t\t\tencoding: \"base64\",\n\t\t\tmessage: [delivery.rawBody, timestamp],\n\t\t\tsecret: pair[0],\n\t\t\tsignature: pair[1]\n\t\t}));\n\t\tif (!fresh || !Array.contains(results, true)) return yield* forged;\n\t})\n} };\n//#endregion\nexport { handlers, triggers };\n\n//# sourceMappingURL=triggers.js.map"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,IAAM,YAAY,QAAiB,EAAE;AACrC,IAAM,QAAQ,eAAsB,OAAc;AAAA,EACjD,IAAI;AAAA,EACJ,SAAS;AACV,CAAC,GAAG,CAAC,OAAc,SAAe,OAAc,CAAC,CAAC;AAClD,IAAM,iBAAiB,OAAc;AAAA,EACpC,SAAS,OAAc;AAAA,IACtB,0BAA0B;AAAA,IAC1B,yBAAyB,YAAmB,OAAa;AAAA,IACzD,2BAA2B,YAAmB,OAAa;AAAA,EAC5D,CAAC;AAAA,EACD,SAAS;AACV,CAAC;AACD,IAAM,YAAW,CAAC,gBAAQ,QAAQ,SAAS;AAAA,EAC1C,aAAa;AAAA,EACb,MAAM;AAAA,EACN,QAAQ,OAAc;AAAA,IACrB,QAAQ,OAAc;AAAA,MACrB,IAAI;AAAA,MACJ,MAAM;AAAA,IACP,CAAC;AAAA,IACD,UAAU,cAAqB,SAAQ;AAAA,EACxC,CAAC;AAAA,EACD,QAAQ;AAAA,EACR,OAAO,OAAc,EAAE,WAAW,QAAc,CAAC;AAClD,CAAC,CAAC;AACF,IAAM,YAAW,EAAE,OAAO;AAAA,EACzB,UAAU,GAAU,oBAAoB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IACpE,MAAM,OAAO,QAAQ,KAAK,QAAQ;AAAA,IAClC,IAAI,KAAK,sBAA2B,aAAK,KAAK,wBAA6B;AAAA,MAAG,OAAO,OAAO,eAAO,mBAAmB,KAAK,EAAE,SAAS,uEAAuE,CAAC;AAAA,IAC9M,MAAM,UAAU,OAAO,uBAAsB,IAAI,EAAE,SAAS;AAAA,MAC3D,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM,OAAO;AAAA,MACrB,UAAU,MAAM,OAAO;AAAA,IACxB,EAAE,GAAG,OAAO;AAAA,IACZ,IAAI,QAAQ,OAAY;AAAA,MAAG,OAAO,OAAO,eAAO,mBAAmB,KAAK,EAAE,SAAS,+CAA+C,CAAC;AAAA,IACnI,OAAO,EAAE,OAAO,EAAE,WAAW,QAAQ,GAAG,EAAE;AAAA,GAC1C;AAAA,EACD,YAAY,GAAU,sBAAsB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IACxE,IAAI,MAAM,UAAe;AAAA,MAAG;AAAA,IAC5B,OAAO,2BAA0B,IAAI,EAAE,YAAY,MAAM,MAAM,UAAU,GAAG,OAAO;AAAA,GACnF;AAAA,EACD,OAAO,GAAU,iBAAiB,EAAE,UAAU,CAAC,OAAO;AAAA,IACrD,MAAM,UAAU,OAAO,oBAA2B,KAAK,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC3E,OAAO;AAAA,MACN,QAAQ,CAAC;AAAA,QACR,KAAK,QAAQ;AAAA,QACb;AAAA,MACD,CAAC;AAAA,MACD,OAAO,MAAM;AAAA,IACd;AAAA,GACA;AAAA,EACD,QAAQ,GAAU,kBAAkB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IAChE,MAAM,SAAS,eAAO,mBAAmB,KAAK;AAAA,MAC7C,SAAS;AAAA,MACT,QAAQ;AAAA,IACT,CAAC;AAAA,IACD,MAAM,WAAW,OAAO,SAAgB,oBAA2B,cAAc,EAAE;AAAA,SAC/E,MAAM;AAAA,MACT,SAAS,MAAM,QAAQ,WAAW,CAAC;AAAA,IACpC,CAAC,GAAG,MAAM,MAAM;AAAA,IAChB,MAAM,YAAY,SAAS,QAAQ;AAAA,IACnC,MAAM,MAAM,OAAO;AAAA,IACnB,MAAM,QAAQ,OAAc,MAAc,SAAS,GAAG,CAAC,SAAS,KAAK,IAAI,MAAM,cAAuB,IAAI,CAAC,KAAK,SAAkB,SAAS,CAAC;AAAA,IAC5I,MAAM,OAAO,QAAQ,KAAK,QAAQ;AAAA,IAClC,MAAM,UAAU,OAAO,QAAe,CAAC,CAAC,KAAK,mBAAmB,SAAS,QAAQ,wBAAwB,GAAG,CAAC,KAAK,qBAAqB,SAAS,QAAQ,0BAA0B,CAAC,GAAG,CAAC,SAAS,KAAK,OAAY,aAAK,KAAK,OAAY,YAAI,SAAe,KAAK,IAAI,gBAAQ,WAAW;AAAA,MACrR,WAAW;AAAA,MACX,UAAU;AAAA,MACV,SAAS,CAAC,SAAS,SAAS,SAAS;AAAA,MACrC,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,IACjB,CAAC,CAAC;AAAA,IACF,IAAI,CAAC,SAAS,CAAC,SAAe,SAAS,IAAI;AAAA,MAAG,OAAO,OAAO;AAAA,GAC5D;AACF,EAAE;",
+  "debugId": "8C93891FC3C2C5F364756E2164756E21",
+  "names": []
+}

package/plugin-m8p6n5tk.js

@@ -0,0 +1,62 @@
+// @bun
+import {
+  __exportAll2
+} from "./plugin-2jdfj02n.js";
+import {
+  Http_exports,
+  File3,
+  FileFromBase642,
+  FileFromBase64Url2,
+  Base64FromFile2,
+  Base64UrlFromFile2,
+  FileFromDataUri2,
+  DataUriFromFile2,
+  DateTimeFromUnixSeconds2,
+  UnixSecondsFromDateTime2,
+  DateTimeFromRfc28222,
+  Rfc2822FromDateTime2,
+  decoded2,
+  path2,
+  literal2,
+  segments2,
+  params2,
+  form2,
+  continuation2,
+  preauthenticated2,
+  auth_exports2
+} from "./plugin-7y7ve5yq.js";
+
+// dist/generated/http.js
+var http_exports = /* @__PURE__ */ __exportAll2({
+  Base64FromFile: () => Base64FromFile2,
+  Base64UrlFromFile: () => Base64UrlFromFile2,
+  DataUriFromFile: () => DataUriFromFile2,
+  DateTimeFromRfc2822: () => DateTimeFromRfc28222,
+  DateTimeFromUnixSeconds: () => DateTimeFromUnixSeconds2,
+  File: () => File3,
+  FileFromBase64: () => FileFromBase642,
+  FileFromBase64Url: () => FileFromBase64Url2,
+  FileFromDataUri: () => FileFromDataUri2,
+  Http: () => http_exports,
+  Rfc2822FromDateTime: () => Rfc2822FromDateTime2,
+  UnixSecondsFromDateTime: () => UnixSecondsFromDateTime2,
+  continuation: () => continuation2,
+  decoded: () => decoded2,
+  endpoint: () => endpoint2,
+  execute: () => execute2,
+  form: () => form2,
+  googleUpload: () => googleUpload2,
+  graphql: () => graphql2,
+  literal: () => literal2,
+  mcp: () => mcp2,
+  params: () => params2,
+  path: () => path2,
+  preauthenticated: () => preauthenticated2,
+  segments: () => segments2,
+  variants: () => variants2
+});
+var { endpoint: endpoint2, execute: execute2, googleUpload: googleUpload2, graphql: graphql2, mcp: mcp2, variants: variants2 } = Http_exports.make(auth_exports2);
+export { http_exports, endpoint2, execute2, googleUpload2, graphql2, mcp2, variants2 };
+
+//# debugId=AC2368573B53FEA864756E2164756E21
+//# sourceMappingURL=plugin-m8p6n5tk.js.map

package/plugin-m8p6n5tk.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../bundle-input/dist/generated/http.js"],
+  "sourcesContent": [
+    "import { __exportAll } from \"../_virtual/_rolldown/runtime.js\";\nimport { auth_exports } from \"../auth.js\";\nimport \"./http.js\";\nimport { Http } from \"@dual-os/sdk\";\nimport { Base64FromFile, Base64UrlFromFile, DataUriFromFile, DateTimeFromRfc2822, DateTimeFromUnixSeconds, File, FileFromBase64, FileFromBase64Url, FileFromDataUri, Rfc2822FromDateTime, UnixSecondsFromDateTime, continuation, decoded, form, literal, params, path, preauthenticated, segments } from \"@dual-os/sdk/Http\";\n//#region src/generated/http.ts\nvar http_exports = /* @__PURE__ */ __exportAll({\n\tBase64FromFile: () => Base64FromFile,\n\tBase64UrlFromFile: () => Base64UrlFromFile,\n\tDataUriFromFile: () => DataUriFromFile,\n\tDateTimeFromRfc2822: () => DateTimeFromRfc2822,\n\tDateTimeFromUnixSeconds: () => DateTimeFromUnixSeconds,\n\tFile: () => File,\n\tFileFromBase64: () => FileFromBase64,\n\tFileFromBase64Url: () => FileFromBase64Url,\n\tFileFromDataUri: () => FileFromDataUri,\n\tHttp: () => http_exports,\n\tRfc2822FromDateTime: () => Rfc2822FromDateTime,\n\tUnixSecondsFromDateTime: () => UnixSecondsFromDateTime,\n\tcontinuation: () => continuation,\n\tdecoded: () => decoded,\n\tendpoint: () => endpoint,\n\texecute: () => execute,\n\tform: () => form,\n\tgoogleUpload: () => googleUpload,\n\tgraphql: () => graphql,\n\tliteral: () => literal,\n\tmcp: () => mcp,\n\tparams: () => params,\n\tpath: () => path,\n\tpreauthenticated: () => preauthenticated,\n\tsegments: () => segments,\n\tvariants: () => variants\n});\nconst { endpoint, execute, googleUpload, graphql, mcp, variants } = Http.make(auth_exports);\n//#endregion\nexport { Base64FromFile, Base64UrlFromFile, DataUriFromFile, DateTimeFromRfc2822, DateTimeFromUnixSeconds, File, FileFromBase64, FileFromBase64Url, FileFromDataUri, http_exports as Http, Rfc2822FromDateTime, UnixSecondsFromDateTime, continuation, decoded, endpoint, execute, form, googleUpload, graphql, literal, mcp, params, path, preauthenticated, segments, variants };\n\n//# sourceMappingURL=http.js.map"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,IAAI,+BAA+B,aAAY;AAAA,EAC9C,gBAAgB,MAAM;AAAA,EACtB,mBAAmB,MAAM;AAAA,EACzB,iBAAiB,MAAM;AAAA,EACvB,qBAAqB,MAAM;AAAA,EAC3B,yBAAyB,MAAM;AAAA,EAC/B,MAAM,MAAM;AAAA,EACZ,gBAAgB,MAAM;AAAA,EACtB,mBAAmB,MAAM;AAAA,EACzB,iBAAiB,MAAM;AAAA,EACvB,MAAM,MAAM;AAAA,EACZ,qBAAqB,MAAM;AAAA,EAC3B,yBAAyB,MAAM;AAAA,EAC/B,cAAc,MAAM;AAAA,EACpB,SAAS,MAAM;AAAA,EACf,UAAU,MAAM;AAAA,EAChB,SAAS,MAAM;AAAA,EACf,MAAM,MAAM;AAAA,EACZ,cAAc,MAAM;AAAA,EACpB,SAAS,MAAM;AAAA,EACf,SAAS,MAAM;AAAA,EACf,KAAK,MAAM;AAAA,EACX,QAAQ,MAAM;AAAA,EACd,MAAM,MAAM;AAAA,EACZ,kBAAkB,MAAM;AAAA,EACxB,UAAU,MAAM;AAAA,EAChB,UAAU,MAAM;AACjB,CAAC;AACD,MAAQ,qBAAU,mBAAS,6BAAc,mBAAS,WAAK,wBAAa,aAAK,KAAK,aAAY;",
+  "debugId": "AC2368573B53FEA864756E2164756E21",
+  "names": []
+}

package/plugin.json

@@ -0,0 +1,29 @@
+{
+  "exports": {
+    "definition": { "export": "boxApiPluginBase", "subpath": "./definition" },
+    "executable": { "export": "boxApiPlugin", "subpath": "./executable" }
+  },
+  "identity": { "package": "@dual-os/box-api", "plugin": "box-api" },
+  "openapi": {
+    "metadata": { "description": "Box integration for the Dual SDK" },
+    "provider": {
+      "metadata": {
+        "categories": ["data_storage", "docs_productivity"],
+        "description": "Box files, folders, collaborations, metadata, search, shared links, tasks, retention, legal holds and Box Sign",
+        "docsUrl": "https://developer.box.com/reference",
+        "homepageUrl": "https://www.box.com",
+        "iconUrl": "https://www.box.com/apple-touch-icon.png"
+      },
+      "name": "Box",
+      "specs": [
+        {
+          "exclude": ["/authorize", "/oauth2/**"],
+          "kind": "document",
+          "source": "https://raw.githubusercontent.com/box/box-openapi/5b055e333a802b10b8ca90fcc513643836dd92b4/openapi.json"
+        }
+      ]
+    },
+    "target": "internal"
+  },
+  "schemaVersion": 1
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.