@evident-ai/runner-cdk 3.5.2-dev.1c27282 → 3.5.2-dev.2f7c636
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -49799,9 +49799,9 @@ var MICROVM_MAX_RUN_SECONDS = 28800;
|
|
|
49799
49799
|
// src/microvm/controller/handle-doorbell.ts
|
|
49800
49800
|
var import_node_crypto12 = require("node:crypto");
|
|
49801
49801
|
|
|
49802
|
-
//
|
|
49802
|
+
// ../../sdk/src/signature.ts
|
|
49803
49803
|
var import_node_crypto11 = require("node:crypto");
|
|
49804
|
-
function
|
|
49804
|
+
function verifyEvidentSignature(rawBody, signatureHeader, secret) {
|
|
49805
49805
|
if (!signatureHeader || !secret) {
|
|
49806
49806
|
return false;
|
|
49807
49807
|
}
|
|
@@ -50042,7 +50042,7 @@ async function handleDoorbell({
|
|
|
50042
50042
|
sleep: sleep4,
|
|
50043
50043
|
random
|
|
50044
50044
|
}) {
|
|
50045
|
-
if (!
|
|
50045
|
+
if (!verifyEvidentSignature(rawBody, signatureHeader, doorbellSecret)) {
|
|
50046
50046
|
return decide({
|
|
50047
50047
|
statusCode: 401,
|
|
50048
50048
|
action: "rejected",
|
|
@@ -50470,7 +50470,7 @@ function createRuntimeMicrovm(executionRoleArn) {
|
|
|
50470
50470
|
// runner is outbound-only (it dials the Cloudflare relay), so AWS sees
|
|
50471
50471
|
// an idle endpoint no matter how busy the agent is. Idle is instead
|
|
50472
50472
|
// decided IN the VM by `evident run --idle-timeout`
|
|
50473
|
-
// (
|
|
50473
|
+
// (runner/docker-images/microvm/hooks/common.sh's `IDLE_TIMEOUT_SECONDS`), whose
|
|
50474
50474
|
// clean exit is what drives the controller's own `suspend()` below via
|
|
50475
50475
|
// the `runner.suspend_requested` doorbell. See `idle-policy.test.ts`
|
|
50476
50476
|
// in this directory, which scans this file's source for the key and
|
|
@@ -468,7 +468,6 @@ kill_litestream() {
|
|
|
468
468
|
rm -f "${LITESTREAM_PID_FILE}"
|
|
469
469
|
log "litestream stop signalled (no wait)"
|
|
470
470
|
}
|
|
471
|
-
# --- litestream replicate (end) ----------------------------------------------
|
|
472
471
|
|
|
473
472
|
# --- flush_session_db (#812 WI-4) -------------------------------------------
|
|
474
473
|
#
|
|
@@ -27,9 +27,9 @@ module.exports = __toCommonJS(handler_exports);
|
|
|
27
27
|
var import_client_ecs = require("@aws-sdk/client-ecs");
|
|
28
28
|
var import_client_secrets_manager = require("@aws-sdk/client-secrets-manager");
|
|
29
29
|
|
|
30
|
-
//
|
|
30
|
+
// ../../sdk/src/signature.ts
|
|
31
31
|
var import_node_crypto = require("node:crypto");
|
|
32
|
-
function
|
|
32
|
+
function verifyEvidentSignature(rawBody, signatureHeader, secret) {
|
|
33
33
|
if (!signatureHeader || !secret) {
|
|
34
34
|
return false;
|
|
35
35
|
}
|
|
@@ -64,7 +64,7 @@ async function handleWake({
|
|
|
64
64
|
service,
|
|
65
65
|
ecs
|
|
66
66
|
}) {
|
|
67
|
-
if (!
|
|
67
|
+
if (!verifyEvidentSignature(rawBody, signatureHeader, wakeSecret)) {
|
|
68
68
|
const { statusCode: statusCode2, body: body2 } = jsonResponse(401, "invalid signature");
|
|
69
69
|
return { statusCode: statusCode2, body: body2, calledUpdateService: false };
|
|
70
70
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@evident-ai/runner-cdk",
|
|
3
|
-
"version": "3.5.2-dev.
|
|
3
|
+
"version": "3.5.2-dev.2f7c636",
|
|
4
4
|
"description": "Reusable CDK constructs for an Evident agent runner: a single scale-to-zero Fargate runner (task + service + per-agent self-stop role + waker Lambda), or a per-session AWS Lambda MicroVM that boots on demand and suspends between messages. Instantiate once per agent from your own stack.",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|