@eventsdk/sdk 0.0.0-stage → 0.4.0

package/dist/provisioner/manifest/types.d.ts

@@ -0,0 +1,55 @@
+import type { SupportedMessagingProfile } from '@eventsdk/sdk/contracts';
+interface ResourceBase {
+    readonly name: string;
+    readonly owner: string;
+    readonly deploymentDomainRef: string;
+    readonly subjects: readonly string[];
+}
+export interface StreamResourceConfig extends ResourceBase {
+    readonly kind: 'stream';
+    readonly retentionSeconds: number;
+    readonly replicas: number;
+    readonly maxBytes: number;
+}
+export interface ConsumerResourceConfig extends ResourceBase {
+    readonly kind: 'consumer';
+    readonly stream: string;
+    readonly ackWaitSeconds: number;
+    readonly maxAckPending: number;
+}
+export type ResourceConfig = StreamResourceConfig | ConsumerResourceConfig;
+export interface CapabilityManifest {
+    readonly messagingProfile: SupportedMessagingProfile;
+    readonly service: string;
+    readonly emits: readonly {
+        readonly type: string;
+        readonly subject: string;
+    }[];
+    readonly consumes: readonly {
+        readonly fromService: string;
+        readonly type: string;
+        readonly consumerRef: string;
+        readonly subject: string;
+    }[];
+    readonly transport: {
+        readonly kind: 'nats-jetstream';
+        readonly deploymentDomainRef: string;
+    };
+    readonly durability: {
+        readonly outbox: 'owner-domain-transaction' | 'native-event-log' | 'not-applicable';
+        readonly inbox: 'owner-durable' | 'not-applicable';
+    };
+    readonly resources: readonly ResourceConfig[];
+}
+export interface ResourceSnapshot {
+    readonly config: ResourceConfig;
+    readonly nativeConfigDigest?: string;
+    readonly messages?: number;
+    readonly bytes?: number;
+    readonly consumerPending?: number;
+}
+export declare class ProvisionerError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export {};

package/dist/provisioner/manifest/validate.d.ts

@@ -0,0 +1,3 @@
+import type { CapabilityManifest, ResourceConfig } from './types.js';
+export declare function parseResource(value: unknown): ResourceConfig;
+export declare function parseManifest(value: unknown): CapabilityManifest;

package/dist/provisioner/nats/inspector.d.ts

@@ -0,0 +1,13 @@
+import type { JetStreamManager } from '@nats-io/jetstream';
+import type { BrokerReadPort } from '../application/ports.js';
+import type { ResourceSnapshot } from '../manifest/types.js';
+import type { NatsInspectionOptions, NatsInspectionStatus } from './types.js';
+export declare class NatsReadOnlyInspector implements BrokerReadPort {
+    private readonly manager;
+    private readonly options;
+    constructor(manager: JetStreamManager, options: NatsInspectionOptions);
+    read(signal: AbortSignal): Promise<readonly ResourceSnapshot[]>;
+    status(signal: AbortSignal): Promise<NatsInspectionStatus>;
+    private account;
+    private resource;
+}

package/dist/provisioner/nats/types.d.ts

@@ -0,0 +1,38 @@
+export interface InspectResource {
+    readonly kind: 'stream' | 'consumer';
+    readonly name: string;
+    readonly stream?: string;
+}
+export interface NatsInspectionOptions {
+    readonly deploymentDomainRef: string;
+    readonly expectedNatsDomain: string | null;
+    readonly resources: readonly InspectResource[];
+    readonly timeoutMs: number;
+}
+export interface NatsResourceStatus {
+    readonly kind: 'stream' | 'consumer';
+    readonly name: string;
+    readonly stream: string;
+    readonly owner: string | null;
+    readonly deploymentDomainRef: string | null;
+    readonly messages: number;
+    readonly bytes: number;
+    readonly firstSequence: number;
+    readonly lastSequence: number;
+    readonly pending: number;
+    readonly ackPending: number;
+    readonly ackFloor: number | null;
+    readonly nativeConfigDigest: string;
+}
+export interface NatsInspectionStatus {
+    readonly mode: 'LIVE_READ_ONLY';
+    readonly natsDomain: string | null;
+    readonly accountIdentity: 'AUTHENTICATED_CONNECTION_NOT_EXPOSED_BY_JS_API';
+    readonly storageBytes: number;
+    readonly memoryBytes: number;
+    readonly maxStorageBytes: number;
+    readonly maxMemoryBytes: number;
+    readonly streamCount: number;
+    readonly consumerCount: number;
+    readonly resources: readonly NatsResourceStatus[];
+}

package/dist/provisioner/nats/writer-types.d.ts

@@ -0,0 +1,11 @@
+import type { DeploymentAuthorization } from '../application/ports.js';
+import type { NatsInspectionOptions } from './types.js';
+export interface NatsExclusiveAccess {
+    readonly mode: 'exclusive-session';
+    readonly policyRef: string;
+    assertHeld(signal: AbortSignal): Promise<void>;
+}
+export interface NatsWriterOptions extends NatsInspectionOptions {
+    readonly authorization: DeploymentAuthorization;
+    readonly exclusiveAccess: NatsExclusiveAccess;
+}

package/dist/provisioner/nats/writer.d.ts

@@ -0,0 +1,18 @@
+import type { JetStreamManager } from '@nats-io/jetstream';
+import type { BrokerManagementPort, ManagementLease } from '../application/ports.js';
+import type { ResourceConfig, ResourceSnapshot } from '../manifest/types.js';
+import type { NatsWriterOptions } from './writer-types.js';
+import type { NatsInspectionStatus } from './types.js';
+export declare class NatsExclusiveWriter implements BrokerManagementPort {
+    #private;
+    private readonly manager;
+    constructor(manager: JetStreamManager, options: NatsWriterOptions);
+    read(signal: AbortSignal): Promise<readonly ResourceSnapshot[]>;
+    status(signal: AbortSignal): Promise<NatsInspectionStatus>;
+    acquireLease(domain: string, signal: AbortSignal): Promise<ManagementLease>;
+    create(config: ResourceConfig, lease: ManagementLease, signal: AbortSignal): Promise<void>;
+    update(config: ResourceConfig, expectedDigest: string, lease: ManagementLease, signal: AbortSignal): Promise<void>;
+    private mutate;
+    private validateObservation;
+    private authorize;
+}

package/dist/provisioner/planning/digest.d.ts

@@ -0,0 +1 @@
+export declare function digest(value: unknown): string;

package/dist/provisioner/planning/plan.d.ts

@@ -0,0 +1,18 @@
+import type { CapabilityManifest, ResourceConfig, ResourceSnapshot } from '../manifest/types.js';
+export type OperationKind = 'NOOP' | 'CREATE' | 'SAFE_UPDATE' | 'BLOCKED';
+export interface PlanOperation {
+    readonly action: OperationKind;
+    readonly resource: ResourceConfig;
+    readonly beforeDigest: string | null;
+    readonly reason: string;
+}
+export interface ProvisioningPlan {
+    readonly manifestDigest: string;
+    readonly observedConfigDigest: string;
+    readonly planRef: string;
+    readonly operations: readonly PlanOperation[];
+}
+export declare function resourceKey(r: ResourceConfig): string;
+export declare function configurationDigest(observed: readonly ResourceSnapshot[]): string;
+export declare function planProvisioning(input: unknown, observed: readonly ResourceSnapshot[]): ProvisioningPlan;
+export declare function desiredResources(manifest: CapabilityManifest): readonly ResourceConfig[];

package/dist/transport-nats/connection/delivery-session.d.ts

@@ -0,0 +1,10 @@
+import { type VerifiedNatsOptions } from './verified-connection.js';
+import { NatsPublisher, type NatsPublisherOptions } from '../publish/nats-publisher.js';
+import { NatsConsumer, type NatsConsumerOptions } from '../consume/nats-consumer.js';
+export declare function openNatsDeliverySession(options: VerifiedNatsOptions): Promise<{
+    isClosed: () => boolean;
+    close: () => Promise<void>;
+    publisher: (config: NatsPublisherOptions) => NatsPublisher;
+    consumer(stream: string, config: NatsConsumerOptions, signal: AbortSignal): Promise<NatsConsumer>;
+}>;
+export type NatsDeliverySession = Awaited<ReturnType<typeof openNatsDeliverySession>>;

package/dist/transport-nats/connection/verified-connection.d.ts

@@ -0,0 +1,12 @@
+import type { Authenticator, NatsConnection } from '@nats-io/nats-core';
+export interface VerifiedNatsOptions {
+    serverUrl: string;
+    expectedDnsName: string;
+    timeoutMs: number;
+    signal: AbortSignal;
+    caPem?: string;
+    authenticator?: Authenticator;
+}
+export declare function validateVerifiedNatsOptions(options: VerifiedNatsOptions): void;
+export declare function connectVerifiedNats(input: VerifiedNatsOptions): Promise<NatsConnection>;
+export declare function requireTransportPatch(capability: unknown): void;

package/dist/transport-nats/consume/delivery-handler.d.ts

@@ -0,0 +1,34 @@
+import type { JsMsg } from '@nats-io/jetstream';
+export interface NatsDelivery {
+    event: unknown;
+    deliveryRef: string;
+    subject: string;
+    stream: string;
+    streamSequence: number;
+    redelivered: boolean;
+    contentType: string;
+    originProof?: string;
+}
+export interface DurableAcceptance {
+    kind: 'RECEIVED' | 'DUPLICATE' | 'REJECTED' | 'QUARANTINED';
+}
+export type AcceptDelivery = (delivery: NatsDelivery, signal: AbortSignal) => Promise<DurableAcceptance>;
+export interface InvalidWireMetadata {
+    deliveryRef: string;
+    stream: string;
+    streamSequence: number;
+    reason: 'INVALID_WIRE_MESSAGE';
+}
+export type QuarantineInvalidWire = (metadata: InvalidWireMetadata, signal: AbortSignal) => Promise<{
+    kind: 'QUARANTINED';
+}>;
+export interface HandlerOptions {
+    deploymentDomainRef: string;
+    timeoutMs: number;
+    maxPayloadBytes: number;
+    retryDelayMs: number;
+    quarantineInvalidWire?: QuarantineInvalidWire;
+}
+export declare function decodeDelivery(message: JsMsg, maximum: number, deploymentDomainRef: string): NatsDelivery;
+export declare function persistThenAck(message: JsMsg, accept: AcceptDelivery, options: HandlerOptions, signal: AbortSignal): Promise<void>;
+export declare function validateDeploymentDomainRef(value: string): void;

package/dist/transport-nats/consume/nats-consumer.d.ts

@@ -0,0 +1,18 @@
+import { type Consumer } from '@nats-io/jetstream';
+import { type AcceptDelivery, type HandlerOptions } from './delivery-handler.js';
+export interface NatsConsumerOptions extends HandlerOptions {
+    batchSize: number;
+    fetchExpiresMs: number;
+    consumerName: string;
+    expectedStream?: string;
+    expectedSubject?: string;
+}
+export declare class NatsConsumer {
+    private readonly consumer;
+    private readonly options;
+    private consuming;
+    constructor(consumer: Consumer, options: NatsConsumerOptions);
+    verify(signal: AbortSignal): Promise<void>;
+    consumeBatch(accept: AcceptDelivery, signal: AbortSignal): Promise<number>;
+    private processBatch;
+}

package/dist/transport-nats/index.d.ts

@@ -0,0 +1,12 @@
+export { NatsPublisher, natsMessageId, validatePublishSubject } from './publish/nats-publisher.js';
+export type { NatsPublisherOptions } from './publish/nats-publisher.js';
+export { NatsConsumer } from './consume/nats-consumer.js';
+export type { NatsConsumerOptions } from './consume/nats-consumer.js';
+export { decodeDelivery, persistThenAck } from './consume/delivery-handler.js';
+export type { NatsDelivery, DurableAcceptance, AcceptDelivery, HandlerOptions, InvalidWireMetadata, QuarantineInvalidWire, } from './consume/delivery-handler.js';
+export { NatsTransportError } from './transport-error.js';
+export type { NatsTransportCode } from './transport-error.js';
+export { connectVerifiedNats, validateVerifiedNatsOptions, } from './connection/verified-connection.js';
+export type { VerifiedNatsOptions } from './connection/verified-connection.js';
+export { credsAuthenticator, nkeyAuthenticator } from '@nats-io/nats-core';
+export { openNatsDeliverySession, type NatsDeliverySession, } from './connection/delivery-session.js';

package/dist/transport-nats/index.js

@@ -0,0 +1,3 @@
+/*! Includes NATS transport modified for bounded initial socket cleanup; see NOTICE and licenses/NATS-LICENSE. */
+import { createRequire as eventSdkCreateRequire } from "node:module"; const require = eventSdkCreateRequire(import.meta.url);
+var J=Object.create;var A=Object.defineProperty;var $=Object.getOwnPropertyDescriptor;var Q=Object.getOwnPropertyNames;var K=Object.getPrototypeOf,Y=Object.prototype.hasOwnProperty;var a=(r,e)=>A(r,"name",{value:e,configurable:!0}),N=(r=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(r,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):r)(function(r){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+r+'" is not supported')});var E=(r,e)=>()=>{try{return e||r((e={exports:{}}).exports,e),e.exports}catch(t){throw e=0,t}};var X=(r,e,t,i)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of Q(e))!Y.call(r,o)&&o!==t&&A(r,o,{get:()=>e[o],enumerable:!(i=$(e,o))||i.enumerable});return r};var Z=(r,e,t)=>(t=r!=null?J(K(r)):{},X(e||!r||!r.__esModule?A(t,"default",{value:r,enumerable:!0}):t,r));var b=E(y=>{"use strict";var de=y&&y.__createBinding||(Object.create?(function(r,e,t,i){i===void 0&&(i=t);var o=Object.getOwnPropertyDescriptor(e,t);(!o||("get"in o?!e.__esModule:o.writable||o.configurable))&&(o={enumerable:!0,get:a(function(){return e[t]},"get")}),Object.defineProperty(r,i,o)}):(function(r,e,t,i){i===void 0&&(i=t),r[i]=e[t]})),ue=y&&y.__exportStar||function(r,e){for(var t in r)t!=="default"&&!Object.prototype.hasOwnProperty.call(e,t)&&de(e,r,t)};Object.defineProperty(y,"__esModule",{value:!0});ue(N("@nats-io/nats-core/internal"),y)});var j=E(I=>{"use strict";Object.defineProperty(I,"__esModule",{value:!0});I.version=void 0;I.version="3.4.0"});var U=E(p=>{"use strict";var he=p&&p.__importDefault||function(r){return r&&r.__esModule?r:{default:r}};Object.defineProperty(p,"__esModule",{value:!0});p.NodeTransport=p.VERSION=void 0;p.nodeResolveHost=Ee;var l=b(),fe=N("node:net"),O=N("node:tls"),pe=N("node:path"),L=N("node:fs"),me=he(N("node:dns")),ye=j();p.VERSION=ye.version;var Ne="nats.js",S=class{static{a(this,"NodeTransport")}socket;version;lang;yields=[];signal=(0,l.deferred)();closedNotification=(0,l.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=Ne,this.version=p.VERSION}async connect(e,t){if(this.done)throw this.closeError||new l.errors.ConnectionError("connection closed during initialization");this.tlsName=e.tlsName,this.options=t;let{tls:i}=this.options,{handshakeFirst:o}=i||{};try{if(o===!0?this.socket=await this.tlsFirst(e):this.socket=await this.dial(e),this.done)throw this.socket?.destroy(),this.closeError||new l.errors.ConnectionError("connection closed during initialization");let s=await this.peekInfo();(0,l.checkOptions)(s,t);let{tls_required:n,tls_available:d}=s,u=d===!0&&t.tls!==null;if(!o&&(n||u)&&(this.socket=await this.startTLS()),this.done)throw this.socket?.destroy(),this.closeError||new l.errors.ConnectionError("connection closed during initialization");if(n&&this.socket.encrypted!==!0)throw l.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(s){let n=s;n||(n=new l.errors.ConnectionError("error connecting - node provided an undefined error"));let{code:d}=n,u=d==="ECONNREFUSED"?new l.errors.ConnectionError("connection refused",{cause:n}):n;throw this.socket?.destroy(),u}}dial(e){let t=(0,l.deferred)(),i,o=(0,fe.createConnection)(e.port,e.hostname,()=>{t.resolve(o),o.removeAllListeners()});return this.socket=o,o.on("error",s=>{i=s}),o.on("close",()=>{o.removeAllListeners(),t.reject(i)}),o.setNoDelay(!0),t}get isClosed(){return this.done}close(e){return this._closed(e,!1)}peekInfo(){let e=(0,l.deferred)(),t;return this.socket.on("data",i=>{this.yields.push(i);let o=l.DataBuffer.concat(...this.yields),s=(0,l.extractProtocolMessage)(o);if(s!=="")try{let n=l.INFO.exec(s);if(!n)throw new Error("unexpected response from server");let d=JSON.parse(n[1]);e.resolve(d)}catch(n){e.reject(n)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",i=>{t=i}),this.socket.on("close",()=>{this.socket.removeAllListeners(),e.reject(t)}),e}loadFile(e){if(!e)return Promise.resolve();let t=(0,l.deferred)();try{e=(0,pe.resolve)(e),(0,L.existsSync)(e)||t.reject(new Error(`${e} doesn't exist`)),(0,L.readFile)(e,(i,o)=>{if(i)return t.reject(i);t.resolve(o)})}catch(i){t.reject(i)}return t}async loadClientCerts(){let e={},{certFile:t,cert:i,caFile:o,ca:s,keyFile:n,key:d}=this.options.tls;try{if(t){let u=await this.loadFile(t);u&&(e.cert=u)}else i&&(e.cert=i);if(n){let u=await this.loadFile(n);u&&(e.key=u)}else d&&(e.key=d);if(o){let u=await this.loadFile(o);u&&(e.ca=[u])}else s&&(e.ca=s);return Promise.resolve(e)}catch(u){return Promise.reject(u)}}async tlsFirst(e){let t,i={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket&&(i.socket=this.socket),typeof this.options.tls=="object")try{let s=await this.loadClientCerts()||{};i=(0,l.extend)(i,this.options.tls,s)}catch(s){return Promise.reject(new l.errors.ConnectionError(s.message,{cause:s}))}let o=(0,l.deferred)();try{if(this.done)throw this.closeError||new l.errors.ConnectionError("connection closed during initialization");let s=(0,O.connect)(e.port,e.hostname,i,()=>{s.removeAllListeners(),o.resolve(s)});this.socket=s,s.on("error",n=>{t=n}),s.on("secureConnect",()=>{if(i.rejectUnauthorized!==!1&&!s.authorized)throw s.authorizationError}),s.on("close",()=>{o.reject(t),s.removeAllListeners()}),s.setNoDelay(!0)}catch(s){o.reject(new l.errors.ConnectionError(s.message,{cause:s}))}return o}async startTLS(){let e,t={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls=="object")try{let o=await this.loadClientCerts()||{};t=(0,l.extend)(t,this.options.tls,o)}catch(o){return Promise.reject(new l.errors.ConnectionError(o.message,{cause:o}))}let i=(0,l.deferred)();try{if(this.done)throw this.closeError||new l.errors.ConnectionError("connection closed during initialization");let o=(0,O.connect)(t,()=>{o.removeAllListeners(),i.resolve(o)});this.socket=o,o.on("error",s=>{e=s}),o.on("secureConnect",()=>{if(t.rejectUnauthorized!==!1&&!o.authorized)throw o.authorizationError}),o.on("close",()=>{i.reject(e),o.removeAllListeners()})}catch(o){i.reject(new l.errors.ConnectionError(o.message,{cause:o}))}return i}setupHandlers(){let e;this.socket.on("data",t=>(this.yields.push(t),this.signal.resolve())),this.socket.on("error",t=>{e=t}),this.socket.on("end",()=>{this.socket?.destroyed||this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed(e,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){for(;;){this.yields.length===0&&await this.signal;let e=this.yields;this.yields=[];for(let t=0;t<e.length;t++)this.options.debug&&console.info(`> ${(0,l.render)(e[t])}`),yield e[t];if(this.done)break;this.yields.length===0&&(e.length=0,this.yields=e,this.signal=(0,l.deferred)())}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof O.TLSSocket}_send(e){if(this.isClosed||this.socket===void 0)return Promise.resolve();this.options.debug&&console.info(`< ${(0,l.render)(e)}`);let t=(0,l.deferred)();try{this.socket.write(e,i=>i?(this.options.debug&&console.error(`!!! ${(0,l.render)(e)}: ${i}`),t.reject(i)):t.resolve())}catch(i){this.options.debug&&console.error(`!!! ${(0,l.render)(e)}: ${i}`),t.reject(i)}return t}send(e){this._send(e).catch(i=>{})}async _closed(e,t=!0){if(!this.connected){this.done=!0,this.closeError=e,this.socket?.destroy(),this.closedNotification.resolve(e);return}if(this.done){this.socket?.destroy();return}if(this.closeError=e,!e&&this.socket&&t)try{await this._send(new TextEncoder().encode(""))}catch(i){this.options.debug&&console.log("transport close terminated with an error",i)}try{this.socket&&(this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0)}catch(i){console.log(i)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}};p.NodeTransport=S;function Ee(r){let e=(0,l.deferred)();return me.default.lookup(r,{all:!0},(t,i)=>{if(t){e.reject(t);return}let o=[];for(let s of i)o.push(s.address);o.length===0&&o.push(r),e.resolve(o)}),e}a(Ee,"nodeResolveHost")});var G=E(P=>{"use strict";Object.defineProperty(P,"__esModule",{value:!0});P.connect=ve;var F=U(),V=b(),q=b();function ve(r={}){return(0,q.hasWsProtocol)(r)?Promise.reject(q.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead")):((0,V.setTransportFactory)({factory:a(()=>new F.NodeTransport,"factory"),dnsResolveFn:F.nodeResolveHost}),V.NatsConnectionImpl.connect(r))}a(ve,"connect")});var B=E(m=>{"use strict";var _e=m&&m.__createBinding||(Object.create?(function(r,e,t,i){i===void 0&&(i=t);var o=Object.getOwnPropertyDescriptor(e,t);(!o||("get"in o?!e.__esModule:o.writable||o.configurable))&&(o={enumerable:!0,get:a(function(){return e[t]},"get")}),Object.defineProperty(r,i,o)}):(function(r,e,t,i){i===void 0&&(i=t),r[i]=e[t]})),be=m&&m.__exportStar||function(r,e){for(var t in r)t!=="default"&&!Object.prototype.hasOwnProperty.call(e,t)&&_e(e,r,t)};Object.defineProperty(m,"__esModule",{value:!0});m.eventSdkInitialClosePatch="eventsdk-initial-close-v1";m.connect=void 0;var we=G();Object.defineProperty(m,"connect",{enumerable:!0,get:a(function(){return we.connect},"get")});be(b(),m)});var z=E((at,W)=>{"use strict";W.exports=B()});import{createHash as R}from"node:crypto";import{headers as ee}from"@nats-io/nats-core";import{assertDeliveryIdentity as te}from"@eventsdk/sdk/core";import{canonicalJson as re,parseCloudEvent as oe,EVENTSDK_ORIGIN_PROOF_HEADER as ie,isEventOriginProofWireForm as se}from"@eventsdk/sdk/contracts";var c=class extends Error{constructor(t){super(t);this.code=t;this.name="NatsTransportError"}code;static{a(this,"NatsTransportError")}};function h(r,e=Number.MAX_SAFE_INTEGER){if(!Number.isSafeInteger(r)||r<1||r>e)throw new c("INVALID_TRANSPORT_CONFIG")}a(h,"positiveInteger");async function f(r,e,t){e.throwIfAborted(),h(t);let i,o,s=new Promise((n,d)=>{o=a(()=>d(new c("TRANSPORT_ABORTED")),"abort"),e.addEventListener("abort",o,{once:!0}),i=setTimeout(()=>d(new c("TRANSPORT_TIMEOUT")),t)});try{return await Promise.race([r,s])}finally{i!==void 0&&clearTimeout(i),o!==void 0&&e.removeEventListener("abort",o)}}a(f,"bounded");function D(r){let e=r.deliveryid===void 0?`${r.source}\0${r.id}`:re(["eventsdk-delivery-message/1",r.source,r.id,r.deliveryid]);return R("sha256").update(e).digest("hex")}a(D,"natsMessageId");function k(r){if(!/^[^\s.*>]+(?:\.[^\s.*>]+)*$/u.test(r)||[...r].some(e=>e.charCodeAt(0)<32))throw new c("INVALID_TRANSPORT_CONFIG")}a(k,"validatePublishSubject");var v=class{constructor(e,t){this.client=e;if(this.options={...t},t.replicationMode==="mirror"&&t.expectedStream!==void 0)throw new c("UNSUPPORTED_TOPOLOGY_COMBINATION");k(t.subject),h(t.timeoutMs),h(t.maxPayloadBytes)}client;static{a(this,"NatsPublisher")}options;async publish(e,t){e=structuredClone(e),t={...t},t.signal.throwIfAborted(),oe(e),await te(e,{sha256:a(async n=>R("sha256").update(n).digest("hex"),"sha256")}),t.signal.throwIfAborted();let i=D(e);if(t.messageId!==i)throw new c("INVALID_TRANSPORT_CONFIG");let o=new TextEncoder().encode(JSON.stringify(e));if(o.byteLength>this.options.maxPayloadBytes)throw new c("INVALID_WIRE_MESSAGE");let s=ee();if(s.set("Content-Type","application/cloudevents+json"),this.options.originProof){let n=AbortSignal.any([t.signal,AbortSignal.timeout(this.options.timeoutMs)]),d=await f(this.options.originProof(structuredClone(e),n),n,this.options.timeoutMs);if(!se(d))throw new c("INVALID_WIRE_MESSAGE");s.set(ie,d),t.signal.throwIfAborted()}try{let n=await f(this.client.publish(this.options.subject,o,{msgID:i,headers:s,timeout:this.options.timeoutMs,retries:0,...this.options.expectedStream?{expect:{streamName:this.options.expectedStream}}:{}}),t.signal,this.options.timeoutMs);if(this.options.expectedStream!==void 0&&n.stream!==this.options.expectedStream)throw new c("PUBLISH_UNKNOWN");return{stream:n.stream,sequence:n.seq,duplicate:n.duplicate}}catch{throw new c("PUBLISH_UNKNOWN")}}};import{AckPolicy as le}from"@nats-io/jetstream";import{decodeCloudEvent as ne,EVENTSDK_ORIGIN_PROOF_HEADER as x,isEventOriginProofWireForm as ae}from"@eventsdk/sdk/contracts";function M(r,e,t){w(t);let i=r.headers?.get("Content-Type")??"",o=r.headers?.get(x);if((r.headers?.values(x).length??0)>1)throw new c("INVALID_WIRE_MESSAGE");if(o&&!ae(o))throw new c("INVALID_WIRE_MESSAGE");if(i!=="application/cloudevents+json"||r.data.byteLength>e)throw new c("INVALID_WIRE_MESSAGE");let s;try{s=ne(r.data)}catch{throw new c("INVALID_WIRE_MESSAGE")}return{event:s,contentType:i,subject:r.subject,stream:r.info.stream,streamSequence:r.info.streamSequence,deliveryRef:JSON.stringify([t,r.info.domain,r.info.stream,r.info.streamSequence]),redelivered:r.redelivered,...o?{originProof:o}:{}}}a(M,"decodeDelivery");async function g(r,e,t,i){i.throwIfAborted(),w(t.deploymentDomainRef);let o=AbortSignal.timeout(t.timeoutMs),s=AbortSignal.any([i,o]);try{let n=await f(ce(r,e,t,s),s,t.timeoutMs);if(!["RECEIVED","DUPLICATE","REJECTED","QUARANTINED"].includes(n.kind))throw new c("DURABLE_ACCEPTANCE_REQUIRED");s.throwIfAborted(),r.ack()}catch(n){throw r.nak(t.retryDelayMs),n}}a(g,"persistThenAck");async function ce(r,e,t,i){let o;try{o=M(r,t.maxPayloadBytes,t.deploymentDomainRef)}catch(s){if(!t.quarantineInvalidWire)throw s;return t.quarantineInvalidWire({deliveryRef:JSON.stringify([t.deploymentDomainRef,r.info.domain,r.info.stream,r.info.streamSequence]),stream:r.info.stream,streamSequence:r.info.streamSequence,reason:"INVALID_WIRE_MESSAGE"},i)}return e(o,i)}a(ce,"resolveAcceptance");function w(r){if(typeof r!="string"||r.trim()!==r||r.length<1||r.length>256)throw new c("INVALID_TRANSPORT_CONFIG")}a(w,"validateDeploymentDomainRef");var _=class{constructor(e,t){this.consumer=e;if(this.options={...t},w(t.deploymentDomainRef),h(t.batchSize,1e3),h(t.fetchExpiresMs),h(t.timeoutMs),h(t.maxPayloadBytes),h(t.retryDelayMs),!t.consumerName)throw new c("INVALID_CONSUMER_CONFIG")}consumer;static{a(this,"NatsConsumer")}options;consuming=!1;async verify(e){e.throwIfAborted();let t=await f(this.consumer.info(!1),e,this.options.timeoutMs);if(t.config.durable_name!==this.options.consumerName||t.config.ack_policy!==le.Explicit||t.config.deliver_subject!==void 0||this.options.expectedStream!==void 0&&t.stream_name!==this.options.expectedStream||this.options.expectedSubject!==void 0&&(t.config.filter_subject!==this.options.expectedSubject||(t.config.filter_subjects?.length??0)>0)||(t.config.ack_wait??0)<=this.options.timeoutMs*this.options.batchSize*1e6||(t.config.max_ack_pending??0)<this.options.batchSize)throw new c("INVALID_CONSUMER_CONFIG")}async consumeBatch(e,t){if(this.consuming)throw new c("INVALID_CONSUMER_CONFIG");this.consuming=!0;try{await this.verify(t),t.throwIfAborted();let i=this.consumer.fetch({max_messages:this.options.batchSize,expires:this.options.fetchExpiresMs}),o;try{o=await f(i,t,this.options.timeoutMs)}catch(s){throw i.then(n=>n.close(),()=>{}),s}return await this.processBatch(o,e,t)}finally{this.consuming=!1}}async processBatch(e,t,i){let o=a(()=>{e.close()},"stop");i.addEventListener("abort",o,{once:!0});let s=0;try{i.throwIfAborted();for await(let n of e)await g(n,t,this.options,i),s+=1;return i.throwIfAborted(),s}finally{i.removeEventListener("abort",o),await e.close()}}};var T=Z(z(),1);import{isIP as Ie}from"node:net";function H(r){h(r.timeoutMs,6e4);let e;try{e=new URL(r.serverUrl)}catch{throw new c("TLS_CONFIGURATION_REJECTED")}let t=r.expectedDnsName;if(typeof t!="string")throw new c("TLS_CONFIGURATION_REJECTED");let i=t.split(".");if(e.protocol!=="tls:"||e.username||e.password||e.search||e.hash||e.pathname!==""&&e.pathname!=="/"||Ie(e.hostname.replace(/^\[|\]$/gu,""))||t!==t.toLowerCase()||t!==e.hostname||t.length>253||i.some(o=>!/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(o))||r.caPem!==void 0&&!r.caPem.includes("-----BEGIN CERTIFICATE-----"))throw new c("TLS_CONFIGURATION_REJECTED")}a(H,"validateVerifiedNatsOptions");async function C(r){let e={...r};H(e),e.signal.throwIfAborted(),Ae(T.eventSdkInitialClosePatch);let i=T.connect({servers:e.serverUrl,tls:{rejectUnauthorized:!0,...e.caPem?{ca:e.caPem}:{}},timeout:e.timeoutMs,ignoreClusterUpdates:!0,reconnect:!1,resolve:!1,...e.authenticator?{authenticator:e.authenticator}:{}});try{let o=await f(i,e.signal,e.timeoutMs);if(e.signal.aborted)throw await o.close(),new c("TRANSPORT_ABORTED");return o}catch(o){throw i.then(s=>s.close(),()=>{}),o instanceof c?o:new c("TLS_CONNECTION_FAILED")}}a(C,"connectVerifiedNats");function Ae(r){if(r!=="eventsdk-initial-close-v1")throw new c("TRANSPORT_PATCH_REQUIRED")}a(Ae,"requireTransportPatch");import{credsAuthenticator as St,nkeyAuthenticator as Pt}from"@nats-io/nats-core";import{jetstream as ge}from"@nats-io/jetstream";async function Oe(r){let e=await C(r),t=ge(e);return{isClosed:a(()=>e.isClosed(),"isClosed"),close:a(()=>e.close(),"close"),publisher:a(i=>new v(t,i),"publisher"),async consumer(i,o,s){let n=new _(await f(t.consumers.get(i,o.consumerName),s,o.timeoutMs),o);return await n.verify(s),n}}}a(Oe,"openNatsDeliverySession");export{_ as NatsConsumer,v as NatsPublisher,c as NatsTransportError,C as connectVerifiedNats,St as credsAuthenticator,M as decodeDelivery,D as natsMessageId,Pt as nkeyAuthenticator,Oe as openNatsDeliverySession,g as persistThenAck,k as validatePublishSubject,H as validateVerifiedNatsOptions};

package/dist/transport-nats/publish/nats-publisher.d.ts

@@ -0,0 +1,24 @@
+import type { JetStreamClient } from '@nats-io/jetstream';
+import { type CloudEvent } from '@eventsdk/sdk/contracts';
+import type { PublishPort, PublishAck } from '@eventsdk/sdk/core';
+export interface NatsPublisherOptions {
+    subject: string;
+    timeoutMs: number;
+    maxPayloadBytes: number;
+    expectedStream?: string;
+    replicationMode?: 'direct' | 'source' | 'mirror';
+    originProof?: (event: CloudEvent, signal: AbortSignal) => Promise<string>;
+}
+export declare function natsMessageId(event: Pick<CloudEvent, 'source' | 'id'> & {
+    readonly deliveryid?: string;
+}): string;
+export declare function validatePublishSubject(subject: string): void;
+export declare class NatsPublisher implements PublishPort {
+    private readonly client;
+    private readonly options;
+    constructor(client: Pick<JetStreamClient, 'publish'>, options: NatsPublisherOptions);
+    publish(event: CloudEvent, context: {
+        messageId: string;
+        signal: AbortSignal;
+    }): Promise<PublishAck>;
+}

package/dist/transport-nats/transport-error.d.ts

@@ -0,0 +1,5 @@
+export type NatsTransportCode = 'INVALID_TRANSPORT_CONFIG' | 'TRANSPORT_PATCH_REQUIRED' | 'TLS_CONFIGURATION_REJECTED' | 'TLS_CONNECTION_FAILED' | 'UNSUPPORTED_TOPOLOGY_COMBINATION' | 'TRANSPORT_ABORTED' | 'TRANSPORT_TIMEOUT' | 'PUBLISH_UNKNOWN' | 'INVALID_WIRE_MESSAGE' | 'DURABLE_ACCEPTANCE_REQUIRED' | 'INVALID_CONSUMER_CONFIG';
+export declare class NatsTransportError extends Error {
+    readonly code: NatsTransportCode;
+    constructor(code: NatsTransportCode);
+}

package/licenses/NATS-LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2013-2018 The NATS Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/package.json

@@ -1,6 +1,82 @@
 {
   "name": "@eventsdk/sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.4.0",
+  "private": false,
+  "type": "module",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=24 <25"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./contracts": {
+      "types": "./dist/contracts/index.d.ts",
+      "import": "./dist/contracts/index.js"
+    },
+    "./identity-contracts": {
+      "types": "./dist/identity-contracts/index.d.ts",
+      "import": "./dist/identity-contracts/index.js"
+    },
+    "./core": {
+      "types": "./dist/core/index.d.ts",
+      "import": "./dist/core/index.js"
+    },
+    "./transport-nats": {
+      "types": "./dist/transport-nats/index.d.ts",
+      "import": "./dist/transport-nats/index.js"
+    },
+    "./identity-verifier": {
+      "types": "./dist/identity-verifier/index.d.ts",
+      "import": "./dist/identity-verifier/index.js"
+    },
+    "./compatibility-http": {
+      "types": "./dist/compatibility-http/index.d.ts",
+      "import": "./dist/compatibility-http/index.js"
+    },
+    "./provisioner": {
+      "types": "./dist/provisioner/index.d.ts",
+      "import": "./dist/provisioner/index.js"
+    },
+    "./conformance": {
+      "types": "./dist/conformance/index.d.ts",
+      "import": "./dist/conformance/index.js"
+    },
+    "./node-config": {
+      "types": "./dist/node-config/index.d.ts",
+      "import": "./dist/node-config/index.js"
+    },
+    "./node-worker": {
+      "types": "./dist/node-worker/index.d.ts",
+      "import": "./dist/node-worker/index.js"
+    },
+    "./event-link": {
+      "types": "./dist/event-link/index.d.ts",
+      "import": "./dist/event-link/index.js"
+    }
+  },
+  "bin": {
+    "eventsdk-provisioner": "./dist/provisioner/cli/main.js",
+    "eventsdk-config": "./dist/node-config/main.js"
+  },
+  "files": [
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "LICENSE",
+    "NOTICE",
+    "licenses/*"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "ajv": "8.20.0",
+    "ajv-formats": "3.0.1",
+    "@nats-io/jetstream": "3.4.0",
+    "@nats-io/nats-core": "3.4.0",
+    "jose": "6.2.15"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.