@floegence/floe-webapp-boot 0.40.4 → 0.40.6

package/dist/artifact-source.d.ts

@@ -0,0 +1,18 @@
+import { type ArtifactSource, type JsonObject } from '@floegence/flowersec-core';
+export type ControlplaneArtifactSourceOptions = Readonly<{
+    baseUrl: string;
+    endpointId: string;
+    payload?: JsonObject;
+    correlation?: Readonly<{
+        traceId?: string;
+    }>;
+    entryTicket?: string;
+    allowLoopbackHTTP?: boolean;
+    fetch?: typeof globalThis.fetch;
+}>;
+export declare class ControlplaneRequestError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+export declare function createControlplaneArtifactSource(options: ControlplaneArtifactSourceOptions): ArtifactSource;

package/dist/connection.d.ts

@@ -0,0 +1,10 @@
+import type { ArtifactSource, ConnectionControllerOptions } from '@floegence/flowersec-core';
+export type FlowersecConnectionConfig = Readonly<{
+    source: ArtifactSource;
+    controller?: ConnectionControllerOptions;
+}>;
+export type TunnelArtifactConnectionOptions = FlowersecConnectionConfig;
+export type DirectArtifactConnectionOptions = FlowersecConnectionConfig;
+export declare function createArtifactTunnelConnectionConfig(options: TunnelArtifactConnectionOptions): FlowersecConnectionConfig;
+export declare function createProxyRuntimeTunnelConnectionConfig(options: TunnelArtifactConnectionOptions): FlowersecConnectionConfig;
+export declare function createArtifactDirectConnectionConfig(options: DirectArtifactConnectionOptions): FlowersecConnectionConfig;

package/dist/index.d.ts

@@ -2,10 +2,11 @@ export { base64UrlToBase64, clearLocationHash, parseBase64UrlJsonFromHash, parse
 export type { WaitForMessageOptions } from './messaging';
 export { postMessageToOrigins, waitForMessage } from './messaging';
 export { getSessionStorage, removeSessionStorage, setSessionStorage } from './storage';
-export type { ArtifactAcquireContext, ArtifactSource } from '@floegence/flowersec-core/reconnect';
-export { createControlplaneArtifactSource } from '@floegence/flowersec-core/reconnect';
-export type { DirectArtifactReconnectOptions, TunnelArtifactReconnectOptions } from './reconnect';
-export { createArtifactDirectReconnectConfig, createArtifactTunnelReconnectConfig, createProxyRuntimeTunnelReconnectConfig, } from './reconnect';
+export type { ArtifactSource, ArtifactSourceResult } from '@floegence/flowersec-core';
+export { createControlplaneArtifactSource, ControlplaneRequestError } from './artifact-source';
+export type { ControlplaneArtifactSourceOptions } from './artifact-source';
+export type { DirectArtifactConnectionOptions, TunnelArtifactConnectionOptions, FlowersecConnectionConfig } from './connection';
+export { createArtifactDirectConnectionConfig, createArtifactTunnelConnectionConfig, createProxyRuntimeTunnelConnectionConfig, } from './connection';
 export type { FetchServerSentEventsOptions, ServerSentEvent, ServerSentEventStreamErrorCode, } from './server-sent-events';
 export { fetchServerSentEvents, ServerSentEventStreamError, } from './server-sent-events';
 export type { ScopeEnvelope, ScopeResolver, ScopeResolverMap } from './scope';

package/dist/index.js

@@ -1,28 +1,29 @@
-import { base64UrlToBase64 as o, clearLocationHash as t, parseBase64UrlJsonFromHash as a, parseHashParam as n } from "./index2.js";
-import { postMessageToOrigins as c, waitForMessage as S } from "./index3.js";
-import { getSessionStorage as f, removeSessionStorage as p, setSessionStorage as m } from "./index4.js";
-import { createControlplaneArtifactSource as R } from "@floegence/flowersec-core/reconnect";
-import { createArtifactDirectReconnectConfig as l, createArtifactTunnelReconnectConfig as x, createProxyRuntimeTunnelReconnectConfig as O } from "./index5.js";
-import { ServerSentEventStreamError as C, fetchServerSentEvents as P } from "./index6.js";
-import { FLOWERSEC_BOOTSTRAP_SCOPE_RESOLVERS as _, PROXY_RUNTIME_SCOPE_NAME as u, createBootstrapScopeResolvers as A, validateProxyRuntimeScopeEntry as h } from "./index7.js";
+import { base64UrlToBase64 as o, clearLocationHash as t, parseBase64UrlJsonFromHash as n, parseHashParam as a } from "./index2.js";
+import { postMessageToOrigins as i, waitForMessage as S } from "./index3.js";
+import { getSessionStorage as p, removeSessionStorage as f, setSessionStorage as m } from "./index4.js";
+import { ControlplaneRequestError as l, createControlplaneArtifactSource as C } from "./index5.js";
+import { createArtifactDirectConnectionConfig as R, createArtifactTunnelConnectionConfig as x, createProxyRuntimeTunnelConnectionConfig as O } from "./index6.js";
+import { ServerSentEventStreamError as P, fetchServerSentEvents as T } from "./index7.js";
+import { FLOWERSEC_BOOTSTRAP_SCOPE_RESOLVERS as _, PROXY_RUNTIME_SCOPE_NAME as A, createBootstrapScopeResolvers as h, validateProxyRuntimeScopeEntry as B } from "./index8.js";
 export {
+  l as ControlplaneRequestError,
   _ as FLOWERSEC_BOOTSTRAP_SCOPE_RESOLVERS,
-  u as PROXY_RUNTIME_SCOPE_NAME,
-  C as ServerSentEventStreamError,
+  A as PROXY_RUNTIME_SCOPE_NAME,
+  P as ServerSentEventStreamError,
   o as base64UrlToBase64,
   t as clearLocationHash,
-  l as createArtifactDirectReconnectConfig,
-  x as createArtifactTunnelReconnectConfig,
-  A as createBootstrapScopeResolvers,
-  R as createControlplaneArtifactSource,
-  O as createProxyRuntimeTunnelReconnectConfig,
-  P as fetchServerSentEvents,
-  f as getSessionStorage,
-  a as parseBase64UrlJsonFromHash,
-  n as parseHashParam,
-  c as postMessageToOrigins,
-  p as removeSessionStorage,
+  R as createArtifactDirectConnectionConfig,
+  x as createArtifactTunnelConnectionConfig,
+  h as createBootstrapScopeResolvers,
+  C as createControlplaneArtifactSource,
+  O as createProxyRuntimeTunnelConnectionConfig,
+  T as fetchServerSentEvents,
+  p as getSessionStorage,
+  n as parseBase64UrlJsonFromHash,
+  a as parseHashParam,
+  i as postMessageToOrigins,
+  f as removeSessionStorage,
   m as setSessionStorage,
-  h as validateProxyRuntimeScopeEntry,
+  B as validateProxyRuntimeScopeEntry,
   S as waitForMessage
 };

package/dist/index5.js

@@ -1,34 +1,75 @@
-import { createBootstrapScopeResolvers as n } from "./index7.js";
-function r(e) {
-  return {
-    source: e.source,
-    ...e.observer === void 0 ? {} : { observer: e.observer },
-    ...e.autoReconnect === void 0 ? {} : { autoReconnect: e.autoReconnect },
-    ...e.connect === void 0 ? {} : { connect: e.connect }
-  };
+import { parseArtifact as d, createArtifactLease as f } from "@floegence/flowersec-core";
+class a extends Error {
+  status;
+  code;
+  constructor(e, r, c) {
+    super(c), this.name = "ControlplaneRequestError", this.status = e, this.code = r;
+  }
 }
-function t(e) {
-  const c = e.connect;
-  return r({
-    ...e,
-    connect: {
-      ...c ?? {},
-      scopeResolvers: n(
-        c?.scopeResolvers
-      )
-    }
-  });
+function p(t) {
+  const e = t.toLowerCase();
+  return e === "localhost" || e === "::1" || e === "127.0.0.1" || e.startsWith("127.");
+}
+function u(t, e) {
+  const r = new URL(t);
+  if (r.protocol !== "https:" && !(e && r.protocol === "http:" && p(r.hostname)))
+    throw new a(0, "transport_policy_denied", "controlplane transport policy denied");
+  return r.pathname = r.pathname.replace(/\/+$/u, ""), r;
 }
-function u(e) {
+function h(t, e) {
+  const r = e === void 0 ? "/v1/connect/artifact" : "/v1/connect/artifact/entry";
+  return new URL(`${t.pathname}${r}`, t).toString();
+}
+function y(t) {
+  if (!t || typeof t != "object" || !("connect_artifact" in t))
+    throw new a(200, "invalid_request", "Invalid controlplane response: missing `connect_artifact`");
+  return JSON.stringify(t.connect_artifact);
+}
+function k(t) {
+  const e = t.fetch ?? globalThis.fetch, r = u(t.baseUrl, t.allowLoopbackHTTP === !0), c = h(r, t.entryTicket);
   return {
-    source: e.source,
-    ...e.observer === void 0 ? {} : { observer: e.observer },
-    ...e.autoReconnect === void 0 ? {} : { autoReconnect: e.autoReconnect },
-    ...e.connect === void 0 ? {} : { connect: e.connect }
+    acquire: async ({ signal: s }) => {
+      try {
+        const o = {
+          endpoint_id: t.endpointId,
+          ...t.payload === void 0 ? {} : { payload: t.payload },
+          ...t.entryTicket === void 0 && t.correlation !== void 0 ? { correlation: { trace_id: t.correlation.traceId } } : {}
+        }, n = await e(c, {
+          method: "POST",
+          headers: {
+            accept: "application/json",
+            "content-type": "application/json",
+            ...t.entryTicket === void 0 ? {} : { authorization: `Bearer ${t.entryTicket}` }
+          },
+          body: JSON.stringify(o),
+          credentials: "omit",
+          redirect: "error",
+          signal: s
+        });
+        if (!n.ok) {
+          let i = "request_failed";
+          try {
+            i = (await n.json()).error?.code ?? i;
+          } catch {
+          }
+          throw new a(n.status, i, `controlplane request failed: ${n.status}`);
+        }
+        const l = d(y(await n.json()));
+        return {
+          kind: "lease",
+          lease: f(l, async () => {
+          })
+        };
+      } catch (o) {
+        if (o instanceof DOMException && o.name === "AbortError") throw o;
+        if (o instanceof a)
+          return { kind: "failure", code: o.code, disposition: { kind: "retryable" } };
+        throw o;
+      }
+    }
   };
 }
 export {
-  u as createArtifactDirectReconnectConfig,
-  r as createArtifactTunnelReconnectConfig,
-  t as createProxyRuntimeTunnelReconnectConfig
+  a as ControlplaneRequestError,
+  k as createControlplaneArtifactSource
 };

package/dist/index6.js

@@ -1,150 +1,14 @@
-class i extends Error {
-  code;
-  status;
-  retryAfter;
-  constructor(d, m, c = {}) {
-    super(m, c), this.name = "ServerSentEventStreamError", this.code = d, c.status !== void 0 && (this.status = c.status), c.retryAfter !== void 0 && (this.retryAfter = c.retryAfter);
-  }
-}
-const U = 1024 * 1024, N = 2 * 1024 * 1024;
-function T(n, d) {
-  if (n === void 0) return d;
-  if (!Number.isSafeInteger(n) || n <= 0)
-    throw new TypeError("server-sent event byte limits must be positive safe integers");
+function t(n) {
   return n;
 }
-function R(n) {
-  return n.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() === "text/event-stream";
-}
-async function A(n) {
-  try {
-    await n.body?.cancel();
-  } catch {
-  }
+function e(n) {
+  return n;
 }
-async function* O(n, d = {}) {
-  const {
-    fetch: m = globalThis.fetch,
-    maxFrameBytes: c,
-    maxBufferBytes: F,
-    onActivity: x,
-    signal: L,
-    ...k
-  } = d, M = T(c, U), D = T(F, N);
-  let a;
-  try {
-    a = await m(n, { ...k, signal: L });
-  } catch (e) {
-    throw new i("transport", "failed to open server-sent event stream", { cause: e });
-  }
-  if (!a.ok) {
-    const e = a.headers.get("retry-after") ?? void 0;
-    throw await A(a), new i(
-      "unexpected_status",
-      `server-sent event request returned HTTP ${a.status}`,
-      { status: a.status, retryAfter: e }
-    );
-  }
-  if (!R(a))
-    throw await A(a), new i(
-      "unsupported_content_type",
-      "server-sent event response must use text/event-stream"
-    );
-  if (a.body === null)
-    throw new i("malformed_frame", "server-sent event response has no body");
-  const y = a.body.getReader(), B = new TextDecoder("utf-8", { fatal: !0 }), E = new TextEncoder();
-  let s = "", h = 0, w = [], l, b, u, p = !1, g = !1;
-  const _ = () => {
-    h = 0, w = [], l = void 0, u = void 0, p = !1;
-  }, I = (e, o) => {
-    if (h += E.encode(e).byteLength + o, h > M)
-      throw new i("oversized_frame", "server-sent event frame exceeds its byte limit");
-    if (e === "") {
-      if (!p) {
-        _();
-        return;
-      }
-      const f = {
-        data: w.join(`
-`),
-        ...l === void 0 ? {} : { event: l },
-        ...b === void 0 ? {} : { id: b },
-        ...u === void 0 ? {} : { retry: u }
-      };
-      return _(), f;
-    }
-    if (e.startsWith(":")) {
-      x?.();
-      return;
-    }
-    const r = e.indexOf(":"), v = r < 0 ? e : e.slice(0, r);
-    let t = r < 0 ? "" : e.slice(r + 1);
-    switch (t.startsWith(" ") && (t = t.slice(1)), v) {
-      case "data":
-        p = !0, w.push(t);
-        break;
-      case "event":
-        l = t;
-        break;
-      case "id":
-        t.includes("\0") || (b = t);
-        break;
-      case "retry":
-        if (/^[0-9]+$/u.test(t)) {
-          const f = Number(t);
-          Number.isSafeInteger(f) && (u = f);
-        }
-        break;
-    }
-  };
-  try {
-    for (; ; ) {
-      let e;
-      try {
-        e = await y.read();
-      } catch (r) {
-        throw new i("transport", "failed while reading server-sent event stream", { cause: r });
-      }
-      if (e.value !== void 0) {
-        x?.();
-        try {
-          s += B.decode(e.value, { stream: !e.done });
-        } catch (r) {
-          throw new i("malformed_frame", "server-sent event stream is not valid UTF-8", { cause: r });
-        }
-      } else if (e.done)
-        try {
-          s += B.decode();
-        } catch (r) {
-          throw new i("malformed_frame", "server-sent event stream ends with invalid UTF-8", { cause: r });
-        }
-      let o = 0;
-      for (; o < s.length; ) {
-        const r = s.indexOf(`
-`, o), v = s.indexOf("\r", o);
-        let t = -1;
-        if (r >= 0 && v >= 0 ? t = Math.min(r, v) : t = Math.max(r, v), t < 0 || s[t] === "\r" && t + 1 === s.length && !e.done) break;
-        const f = s[t] === "\r" && s[t + 1] === `
-` ? 2 : 1, S = I(s.slice(o, t), f);
-        o = t + f, S !== void 0 && (yield S);
-      }
-      if (s = s.slice(o), E.encode(s).byteLength > D)
-        throw new i("oversized_buffer", "server-sent event pending buffer exceeds its byte limit");
-      if (e.done) {
-        g = !0;
-        return;
-      }
-    }
-  } finally {
-    if (!g)
-      try {
-        await y.cancel();
-      } catch {
-      }
-    y.releaseLock();
-  }
+function o(n) {
+  return n;
 }
 export {
-  i as ServerSentEventStreamError,
-  O as fetchServerSentEvents
+  o as createArtifactDirectConnectionConfig,
+  t as createArtifactTunnelConnectionConfig,
+  e as createProxyRuntimeTunnelConnectionConfig
 };

package/dist/index7.js

@@ -1,22 +1,150 @@
-import { assertProxyRuntimeScopeV1 as t } from "@floegence/flowersec-core/proxy";
-const o = "proxy.runtime";
-function r(e) {
-  if (e.scope_version !== 1)
-    throw new Error(`unsupported ${o} scope_version: ${e.scope_version}`);
-  t(e.payload);
+class i extends Error {
+  code;
+  status;
+  retryAfter;
+  constructor(d, m, c = {}) {
+    super(m, c), this.name = "ServerSentEventStreamError", this.code = d, c.status !== void 0 && (this.status = c.status), c.retryAfter !== void 0 && (this.retryAfter = c.retryAfter);
+  }
 }
-const n = Object.freeze({
-  [o]: r
-});
-function c(e) {
-  return e ? Object.freeze({
-    ...e,
-    [o]: r
-  }) : n;
+const U = 1024 * 1024, N = 2 * 1024 * 1024;
+function T(n, d) {
+  if (n === void 0) return d;
+  if (!Number.isSafeInteger(n) || n <= 0)
+    throw new TypeError("server-sent event byte limits must be positive safe integers");
+  return n;
+}
+function R(n) {
+  return n.headers.get("content-type")?.split(";", 1)[0]?.trim().toLowerCase() === "text/event-stream";
+}
+async function A(n) {
+  try {
+    await n.body?.cancel();
+  } catch {
+  }
+}
+async function* O(n, d = {}) {
+  const {
+    fetch: m = globalThis.fetch,
+    maxFrameBytes: c,
+    maxBufferBytes: F,
+    onActivity: x,
+    signal: L,
+    ...k
+  } = d, M = T(c, U), D = T(F, N);
+  let a;
+  try {
+    a = await m(n, { ...k, signal: L });
+  } catch (e) {
+    throw new i("transport", "failed to open server-sent event stream", { cause: e });
+  }
+  if (!a.ok) {
+    const e = a.headers.get("retry-after") ?? void 0;
+    throw await A(a), new i(
+      "unexpected_status",
+      `server-sent event request returned HTTP ${a.status}`,
+      { status: a.status, retryAfter: e }
+    );
+  }
+  if (!R(a))
+    throw await A(a), new i(
+      "unsupported_content_type",
+      "server-sent event response must use text/event-stream"
+    );
+  if (a.body === null)
+    throw new i("malformed_frame", "server-sent event response has no body");
+  const y = a.body.getReader(), B = new TextDecoder("utf-8", { fatal: !0 }), E = new TextEncoder();
+  let s = "", h = 0, w = [], l, b, u, p = !1, g = !1;
+  const _ = () => {
+    h = 0, w = [], l = void 0, u = void 0, p = !1;
+  }, I = (e, o) => {
+    if (h += E.encode(e).byteLength + o, h > M)
+      throw new i("oversized_frame", "server-sent event frame exceeds its byte limit");
+    if (e === "") {
+      if (!p) {
+        _();
+        return;
+      }
+      const f = {
+        data: w.join(`
+`),
+        ...l === void 0 ? {} : { event: l },
+        ...b === void 0 ? {} : { id: b },
+        ...u === void 0 ? {} : { retry: u }
+      };
+      return _(), f;
+    }
+    if (e.startsWith(":")) {
+      x?.();
+      return;
+    }
+    const r = e.indexOf(":"), v = r < 0 ? e : e.slice(0, r);
+    let t = r < 0 ? "" : e.slice(r + 1);
+    switch (t.startsWith(" ") && (t = t.slice(1)), v) {
+      case "data":
+        p = !0, w.push(t);
+        break;
+      case "event":
+        l = t;
+        break;
+      case "id":
+        t.includes("\0") || (b = t);
+        break;
+      case "retry":
+        if (/^[0-9]+$/u.test(t)) {
+          const f = Number(t);
+          Number.isSafeInteger(f) && (u = f);
+        }
+        break;
+    }
+  };
+  try {
+    for (; ; ) {
+      let e;
+      try {
+        e = await y.read();
+      } catch (r) {
+        throw new i("transport", "failed while reading server-sent event stream", { cause: r });
+      }
+      if (e.value !== void 0) {
+        x?.();
+        try {
+          s += B.decode(e.value, { stream: !e.done });
+        } catch (r) {
+          throw new i("malformed_frame", "server-sent event stream is not valid UTF-8", { cause: r });
+        }
+      } else if (e.done)
+        try {
+          s += B.decode();
+        } catch (r) {
+          throw new i("malformed_frame", "server-sent event stream ends with invalid UTF-8", { cause: r });
+        }
+      let o = 0;
+      for (; o < s.length; ) {
+        const r = s.indexOf(`
+`, o), v = s.indexOf("\r", o);
+        let t = -1;
+        if (r >= 0 && v >= 0 ? t = Math.min(r, v) : t = Math.max(r, v), t < 0 || s[t] === "\r" && t + 1 === s.length && !e.done) break;
+        const f = s[t] === "\r" && s[t + 1] === `
+` ? 2 : 1, S = I(s.slice(o, t), f);
+        o = t + f, S !== void 0 && (yield S);
+      }
+      if (s = s.slice(o), E.encode(s).byteLength > D)
+        throw new i("oversized_buffer", "server-sent event pending buffer exceeds its byte limit");
+      if (e.done) {
+        g = !0;
+        return;
+      }
+    }
+  } finally {
+    if (!g)
+      try {
+        await y.cancel();
+      } catch {
+      }
+    y.releaseLock();
+  }
 }
 export {
-  n as FLOWERSEC_BOOTSTRAP_SCOPE_RESOLVERS,
-  o as PROXY_RUNTIME_SCOPE_NAME,
-  c as createBootstrapScopeResolvers,
-  r as validateProxyRuntimeScopeEntry
+  i as ServerSentEventStreamError,
+  O as fetchServerSentEvents
 };

package/dist/index8.js

@@ -0,0 +1,22 @@
+import { PROXY_RUNTIME_SCOPE as t, assertProxyRuntimeScope as n } from "@floegence/flowersec-core/proxy";
+const o = "proxy.runtime";
+function r(e) {
+  if (e.scope_version !== t.version)
+    throw new Error(`unsupported ${o} scope_version: ${e.scope_version}`);
+  n(e.payload);
+}
+const s = Object.freeze({
+  [o]: r
+});
+function i(e) {
+  return e ? Object.freeze({
+    ...e,
+    [o]: r
+  }) : s;
+}
+export {
+  s as FLOWERSEC_BOOTSTRAP_SCOPE_RESOLVERS,
+  o as PROXY_RUNTIME_SCOPE_NAME,
+  i as createBootstrapScopeResolvers,
+  r as validateProxyRuntimeScopeEntry
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/floe-webapp-boot",
-  "version": "0.40.4",
+  "version": "0.40.6",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -30,7 +30,7 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@floegence/flowersec-core": "^0.27.0"
+    "@floegence/flowersec-core": "2.0.0"
   },
   "devDependencies": {
     "typescript": "^5.9.3",

package/dist/reconnect.d.ts

@@ -1,20 +0,0 @@
-import type { DirectBrowserReconnectConfig, DirectConnectBrowserOptions, TunnelBrowserReconnectConfig, TunnelConnectBrowserOptions } from '@floegence/flowersec-core/browser';
-import type { ClientObserverLike } from '@floegence/flowersec-core/observability';
-import type { ArtifactSource, AutoReconnectConfig } from '@floegence/flowersec-core/reconnect';
-type SharedArtifactReconnectOptions = Readonly<{
-    source: ArtifactSource;
-    observer?: ClientObserverLike;
-    autoReconnect?: AutoReconnectConfig;
-}>;
-type TunnelArtifactConnectOptions = Omit<TunnelConnectBrowserOptions, 'observer' | 'signal'>;
-type DirectArtifactConnectOptions = Omit<DirectConnectBrowserOptions, 'observer' | 'signal'>;
-export type TunnelArtifactReconnectOptions = SharedArtifactReconnectOptions & Readonly<{
-    connect?: TunnelArtifactConnectOptions;
-}>;
-export type DirectArtifactReconnectOptions = SharedArtifactReconnectOptions & Readonly<{
-    connect?: DirectArtifactConnectOptions;
-}>;
-export declare function createArtifactTunnelReconnectConfig(options: TunnelArtifactReconnectOptions): TunnelBrowserReconnectConfig;
-export declare function createProxyRuntimeTunnelReconnectConfig(options: TunnelArtifactReconnectOptions): TunnelBrowserReconnectConfig;
-export declare function createArtifactDirectReconnectConfig(options: DirectArtifactReconnectOptions): DirectBrowserReconnectConfig;
-export {};