@dual-os/box-api 0.0.0-stage → 6.0.4

package/plugin-p1a27j0f.js

@@ -0,0 +1,116 @@
+// @bun
+import {
+  exists,
+  contains,
+  minutes,
+  toMillis,
+  currentTimeMillis,
+  forEach,
+  succeed4,
+  mapError,
+  fn,
+  make3,
+  toEpochMillis,
+  decodeUnknownEffect,
+  optionalKey,
+  Unknown,
+  String3,
+  Struct,
+  Record,
+  StructWithRest,
+  NonEmptyArray,
+  Uint8Array2,
+  Action_exports,
+  Trigger_exports
+} from "./plugin-q33ks0q6.js";
+import {
+  ItemType2,
+  Triggers2,
+  webhooks_postWebhooks2,
+  webhooks_deleteWebhooksId2
+} from "./plugin-by2fjv4r.js";
+
+// dist/triggers.js
+var tolerance = minutes(10);
+var Event = StructWithRest(Struct({
+  id: String3,
+  trigger: String3
+}), [Record(String3, Unknown)]);
+var SignedDelivery = Struct({
+  headers: Struct({
+    "box-delivery-timestamp": String3,
+    "box-signature-primary": optionalKey(String3),
+    "box-signature-secondary": optionalKey(String3)
+  }),
+  rawBody: Uint8Array2
+});
+var triggers2 = [Trigger_exports.webhook("event", {
+  description: "Triggers when a subscribed event happens to a Box file or folder, such as an upload, a download, a comment or a shared link",
+  name: "Box event",
+  config: Struct({
+    target: Struct({
+      id: String3,
+      type: ItemType2
+    }),
+    triggers: NonEmptyArray(Triggers2)
+  }),
+  output: Event,
+  state: Struct({ webhookId: String3 })
+})];
+var handlers2 = { event: {
+  activate: fn("Box.event.activate")(function* (input, context) {
+    const keys = context.auth.current.value;
+    if (keys.webhookPrimaryKey === undefined && keys.webhookSecondaryKey === undefined)
+      return yield* Action_exports.ActionHandlerError.make({ message: "Configure a Box app webhook signature key before activating webhooks" });
+    const webhook = yield* webhooks_postWebhooks2.run({ payload: {
+      address: input.webhookUrl,
+      target: input.config.target,
+      triggers: input.config.triggers
+    } }, context);
+    if (webhook.id === undefined)
+      return yield* Action_exports.ActionHandlerError.make({ message: "Box did not return the registered webhook ID" });
+    return { state: { webhookId: webhook.id } };
+  }),
+  deactivate: fn("Box.event.deactivate")(function* (input, context) {
+    if (input.state === undefined)
+      return;
+    yield* webhooks_deleteWebhooksId2.run({ webhook_id: input.state.webhookId }, context);
+  }),
+  parse: fn("Box.event.parse")(function* (input) {
+    const payload = yield* decodeUnknownEffect(Event)(input.request.body);
+    return {
+      events: [{
+        key: payload.id,
+        payload
+      }],
+      state: input.state
+    };
+  }),
+  verify: fn("Box.event.verify")(function* (input, context) {
+    const forged = Action_exports.ActionHandlerError.make({
+      message: "Invalid Box webhook signature",
+      status: 401
+    });
+    const delivery = yield* mapError(decodeUnknownEffect(SignedDelivery)({
+      ...input.request,
+      headers: input.request.headers ?? {}
+    }), () => forged);
+    const timestamp = delivery.headers["box-delivery-timestamp"];
+    const now = yield* currentTimeMillis;
+    const fresh = exists(make3(timestamp), (sent) => Math.abs(now - toEpochMillis(sent)) <= toMillis(tolerance));
+    const keys = context.auth.current.value;
+    const results = yield* forEach([[keys.webhookPrimaryKey, delivery.headers["box-signature-primary"]], [keys.webhookSecondaryKey, delivery.headers["box-signature-secondary"]]], (pair) => pair[0] === undefined || pair[1] === undefined ? succeed4(false) : Trigger_exports.verifyHmac({
+      algorithm: "sha256",
+      encoding: "base64",
+      message: [delivery.rawBody, timestamp],
+      secret: pair[0],
+      signature: pair[1]
+    }));
+    if (!fresh || !contains(results, true))
+      return yield* forged;
+  })
+} };
+export { triggers2, handlers2 };
+
+//# debugId=8C93891FC3C2C5F364756E2164756E21
+//# sourceMappingURL=plugin-p1a27j0f.js.map

package/plugin-p1a27j0f.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../bundle-input/dist/triggers.js"],
+  "sourcesContent": [
+    "import { ItemType, Triggers, webhooks_deleteWebhooksId, webhooks_postWebhooks } from \"./generated/operations.js\";\nimport { Array, Clock, DateTime, Duration, Effect, Option, Schema } from \"effect\";\nimport { Action, Trigger } from \"@dual-os/sdk\";\n//#region src/triggers.ts\nconst tolerance = Duration.minutes(10);\nconst Event = Schema.StructWithRest(Schema.Struct({\n\tid: Schema.String,\n\ttrigger: Schema.String\n}), [Schema.Record(Schema.String, Schema.Unknown)]);\nconst SignedDelivery = Schema.Struct({\n\theaders: Schema.Struct({\n\t\t\"box-delivery-timestamp\": Schema.String,\n\t\t\"box-signature-primary\": Schema.optionalKey(Schema.String),\n\t\t\"box-signature-secondary\": Schema.optionalKey(Schema.String)\n\t}),\n\trawBody: Schema.Uint8Array\n});\nconst triggers = [Trigger.webhook(\"event\", {\n\tdescription: \"Triggers when a subscribed event happens to a Box file or folder, such as an upload, a download, a comment or a shared link\",\n\tname: \"Box event\",\n\tconfig: Schema.Struct({\n\t\ttarget: Schema.Struct({\n\t\t\tid: Schema.String,\n\t\t\ttype: ItemType\n\t\t}),\n\t\ttriggers: Schema.NonEmptyArray(Triggers)\n\t}),\n\toutput: Event,\n\tstate: Schema.Struct({ webhookId: Schema.String })\n})];\nconst handlers = { event: {\n\tactivate: Effect.fn(\"Box.event.activate\")(function* (input, context) {\n\t\tconst keys = context.auth.current.value;\n\t\tif (keys.webhookPrimaryKey === void 0 && keys.webhookSecondaryKey === void 0) return yield* Action.ActionHandlerError.make({ message: \"Configure a Box app webhook signature key before activating webhooks\" });\n\t\tconst webhook = yield* webhooks_postWebhooks.run({ payload: {\n\t\t\taddress: input.webhookUrl,\n\t\t\ttarget: input.config.target,\n\t\t\ttriggers: input.config.triggers\n\t\t} }, context);\n\t\tif (webhook.id === void 0) return yield* Action.ActionHandlerError.make({ message: \"Box did not return the registered webhook ID\" });\n\t\treturn { state: { webhookId: webhook.id } };\n\t}),\n\tdeactivate: Effect.fn(\"Box.event.deactivate\")(function* (input, context) {\n\t\tif (input.state === void 0) return;\n\t\tyield* webhooks_deleteWebhooksId.run({ webhook_id: input.state.webhookId }, context);\n\t}),\n\tparse: Effect.fn(\"Box.event.parse\")(function* (input) {\n\t\tconst payload = yield* Schema.decodeUnknownEffect(Event)(input.request.body);\n\t\treturn {\n\t\t\tevents: [{\n\t\t\t\tkey: payload.id,\n\t\t\t\tpayload\n\t\t\t}],\n\t\t\tstate: input.state\n\t\t};\n\t}),\n\tverify: Effect.fn(\"Box.event.verify\")(function* (input, context) {\n\t\tconst forged = Action.ActionHandlerError.make({\n\t\t\tmessage: \"Invalid Box webhook signature\",\n\t\t\tstatus: 401\n\t\t});\n\t\tconst delivery = yield* Effect.mapError(Schema.decodeUnknownEffect(SignedDelivery)({\n\t\t\t...input.request,\n\t\t\theaders: input.request.headers ?? {}\n\t\t}), () => forged);\n\t\tconst timestamp = delivery.headers[\"box-delivery-timestamp\"];\n\t\tconst now = yield* Clock.currentTimeMillis;\n\t\tconst fresh = Option.exists(DateTime.make(timestamp), (sent) => Math.abs(now - DateTime.toEpochMillis(sent)) <= Duration.toMillis(tolerance));\n\t\tconst keys = context.auth.current.value;\n\t\tconst results = yield* Effect.forEach([[keys.webhookPrimaryKey, delivery.headers[\"box-signature-primary\"]], [keys.webhookSecondaryKey, delivery.headers[\"box-signature-secondary\"]]], (pair) => pair[0] === void 0 || pair[1] === void 0 ? Effect.succeed(false) : Trigger.verifyHmac({\n\t\t\talgorithm: \"sha256\",\n\t\t\tencoding: \"base64\",\n\t\t\tmessage: [delivery.rawBody, timestamp],\n\t\t\tsecret: pair[0],\n\t\t\tsignature: pair[1]\n\t\t}));\n\t\tif (!fresh || !Array.contains(results, true)) return yield* forged;\n\t})\n} };\n//#endregion\nexport { handlers, triggers };\n\n//# sourceMappingURL=triggers.js.map"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,IAAM,YAAY,QAAiB,EAAE;AACrC,IAAM,QAAQ,eAAsB,OAAc;AAAA,EACjD,IAAI;AAAA,EACJ,SAAS;AACV,CAAC,GAAG,CAAC,OAAc,SAAe,OAAc,CAAC,CAAC;AAClD,IAAM,iBAAiB,OAAc;AAAA,EACpC,SAAS,OAAc;AAAA,IACtB,0BAA0B;AAAA,IAC1B,yBAAyB,YAAmB,OAAa;AAAA,IACzD,2BAA2B,YAAmB,OAAa;AAAA,EAC5D,CAAC;AAAA,EACD,SAAS;AACV,CAAC;AACD,IAAM,YAAW,CAAC,gBAAQ,QAAQ,SAAS;AAAA,EAC1C,aAAa;AAAA,EACb,MAAM;AAAA,EACN,QAAQ,OAAc;AAAA,IACrB,QAAQ,OAAc;AAAA,MACrB,IAAI;AAAA,MACJ,MAAM;AAAA,IACP,CAAC;AAAA,IACD,UAAU,cAAqB,SAAQ;AAAA,EACxC,CAAC;AAAA,EACD,QAAQ;AAAA,EACR,OAAO,OAAc,EAAE,WAAW,QAAc,CAAC;AAClD,CAAC,CAAC;AACF,IAAM,YAAW,EAAE,OAAO;AAAA,EACzB,UAAU,GAAU,oBAAoB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IACpE,MAAM,OAAO,QAAQ,KAAK,QAAQ;AAAA,IAClC,IAAI,KAAK,sBAA2B,aAAK,KAAK,wBAA6B;AAAA,MAAG,OAAO,OAAO,eAAO,mBAAmB,KAAK,EAAE,SAAS,uEAAuE,CAAC;AAAA,IAC9M,MAAM,UAAU,OAAO,uBAAsB,IAAI,EAAE,SAAS;AAAA,MAC3D,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM,OAAO;AAAA,MACrB,UAAU,MAAM,OAAO;AAAA,IACxB,EAAE,GAAG,OAAO;AAAA,IACZ,IAAI,QAAQ,OAAY;AAAA,MAAG,OAAO,OAAO,eAAO,mBAAmB,KAAK,EAAE,SAAS,+CAA+C,CAAC;AAAA,IACnI,OAAO,EAAE,OAAO,EAAE,WAAW,QAAQ,GAAG,EAAE;AAAA,GAC1C;AAAA,EACD,YAAY,GAAU,sBAAsB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IACxE,IAAI,MAAM,UAAe;AAAA,MAAG;AAAA,IAC5B,OAAO,2BAA0B,IAAI,EAAE,YAAY,MAAM,MAAM,UAAU,GAAG,OAAO;AAAA,GACnF;AAAA,EACD,OAAO,GAAU,iBAAiB,EAAE,UAAU,CAAC,OAAO;AAAA,IACrD,MAAM,UAAU,OAAO,oBAA2B,KAAK,EAAE,MAAM,QAAQ,IAAI;AAAA,IAC3E,OAAO;AAAA,MACN,QAAQ,CAAC;AAAA,QACR,KAAK,QAAQ;AAAA,QACb;AAAA,MACD,CAAC;AAAA,MACD,OAAO,MAAM;AAAA,IACd;AAAA,GACA;AAAA,EACD,QAAQ,GAAU,kBAAkB,EAAE,UAAU,CAAC,OAAO,SAAS;AAAA,IAChE,MAAM,SAAS,eAAO,mBAAmB,KAAK;AAAA,MAC7C,SAAS;AAAA,MACT,QAAQ;AAAA,IACT,CAAC;AAAA,IACD,MAAM,WAAW,OAAO,SAAgB,oBAA2B,cAAc,EAAE;AAAA,SAC/E,MAAM;AAAA,MACT,SAAS,MAAM,QAAQ,WAAW,CAAC;AAAA,IACpC,CAAC,GAAG,MAAM,MAAM;AAAA,IAChB,MAAM,YAAY,SAAS,QAAQ;AAAA,IACnC,MAAM,MAAM,OAAO;AAAA,IACnB,MAAM,QAAQ,OAAc,MAAc,SAAS,GAAG,CAAC,SAAS,KAAK,IAAI,MAAM,cAAuB,IAAI,CAAC,KAAK,SAAkB,SAAS,CAAC;AAAA,IAC5I,MAAM,OAAO,QAAQ,KAAK,QAAQ;AAAA,IAClC,MAAM,UAAU,OAAO,QAAe,CAAC,CAAC,KAAK,mBAAmB,SAAS,QAAQ,wBAAwB,GAAG,CAAC,KAAK,qBAAqB,SAAS,QAAQ,0BAA0B,CAAC,GAAG,CAAC,SAAS,KAAK,OAAY,aAAK,KAAK,OAAY,YAAI,SAAe,KAAK,IAAI,gBAAQ,WAAW;AAAA,MACrR,WAAW;AAAA,MACX,UAAU;AAAA,MACV,SAAS,CAAC,SAAS,SAAS,SAAS;AAAA,MACrC,QAAQ,KAAK;AAAA,MACb,WAAW,KAAK;AAAA,IACjB,CAAC,CAAC;AAAA,IACF,IAAI,CAAC,SAAS,CAAC,SAAe,SAAS,IAAI;AAAA,MAAG,OAAO,OAAO;AAAA,GAC5D;AACF,EAAE;",
+  "debugId": "8C93891FC3C2C5F364756E2164756E21",
+  "names": []
+}