@floegence/floe-webapp-boot 0.41.0 → 0.41.1

package/dist/acquisition.js

@@ -94,25 +94,25 @@ async function te(e) {
   } catch {
     throw new n("invalid_isolated_handoff");
   }
-  const _ = P(a, e.validationContext), p = await x(_.acquisition, {
+  const _ = P(a, e.validationContext), u = await x(_.acquisition, {
     commitSpend: e.commitSpend,
     expectedConsumer: "isolated",
     validateSpendBinding: (d) => (k(_, d, e.validationContext), e.validationContext.validateTargetBinding(d.targetBinding), `${d.artifactDigestB64u}.${d.projectionDigestB64u}`)
   });
-  if (p.scope.appBasePath !== _.app_path) throw new n("isolated_app_path_mismatch");
-  if (p.scope.mode === "controller_bridge") {
-    const d = p.scope.controllerBridge.allowedOrigins;
+  if (u.scope.appBasePath !== _.app_path) throw new n("isolated_app_path_mismatch");
+  if (u.scope.mode === "controller_bridge") {
+    const d = u.scope.controllerBridge.allowedOrigins;
     if (d.length !== 1 || d[0] !== _.app_origin)
       throw new n("isolated_allowed_origins_mismatch");
   }
   let s;
-  const l = D(p, e.commitSpend, (d) => {
+  const l = D(u, e.commitSpend, (d) => {
     s = d;
   }, () => {
   });
   if (s === void 0 || s.lease !== l) throw new n("isolated_materialization_failed");
-  const u = m.create();
-  return z.set(u, { pending: s, state: "ready" }), u;
+  const p = m.create();
+  return z.set(p, { pending: s, state: "ready" }), p;
 }
 async function ie(e, i = {}) {
   m.assertAuthentic(e);
@@ -150,9 +150,9 @@ async function x(e, i) {
   const _ = w(a, ["scope", "scope_version", "critical", "payload"], "invalid_critical_scope_projection");
   if (_.scope !== "proxy.runtime" || _.scope_version !== 2 || _.critical !== !0)
     throw new n("invalid_critical_scope_projection");
-  let p;
+  let u;
   try {
-    p = C(_.payload);
+    u = C(_.payload);
   } catch {
     throw new n("invalid_proxy_runtime_scope");
   }
@@ -162,30 +162,30 @@ async function x(e, i) {
   } catch {
     throw new n("invalid_connect_artifact");
   }
-  const l = N(r), u = i.validateSpendBinding(l);
-  if (u !== void 0 && (u.trim() === "" || u !== u.trim()))
+  const l = N(r), p = i.validateSpendBinding(l);
+  if (p !== void 0 && (typeof p != "string" || p.trim() === "" || p !== p.trim()))
     throw new n("invalid_spend_binding_identity");
   return Object.freeze({
     artifact: s,
-    scope: p,
+    scope: u,
     binding: l,
-    bindingIdentity: u ?? `${l.artifactDigestB64u}.${l.projectionDigestB64u}`,
+    bindingIdentity: p ?? `${l.artifactDigestB64u}.${l.projectionDigestB64u}`,
     receipt: r.receipt
   });
 }
 function D(e, i, t, r) {
   const c = e.artifact, o = e.scope, a = e.binding, _ = e.bindingIdentity;
-  let p = e.receipt, s;
-  const l = $(c, async (u) => {
-    const d = p;
-    if (p = void 0, d === void 0) throw new n("spend_binding_consumed");
+  let u = e.receipt, s;
+  const l = $(c, async (p) => {
+    const d = u;
+    if (u = void 0, d === void 0) throw new n("spend_binding_consumed");
     const T = Object.freeze({
       ...a,
       attemptId: J(),
       receipt: d
     });
     try {
-      await i(T, u), s.committed = !0;
+      await i(T, p), s.committed = !0;
     } catch (E) {
       throw r(s), E;
     }

package/dist/artifact-source.js

@@ -1,11 +1,11 @@
-import { registerAcquisitionSource as p, materializeAcquisitionForSource as b, AcquisitionError as m } from "./acquisition.js";
-const l = /^[a-z][a-z0-9_]{0,63}$/u;
-class d extends Error {
+import { registerAcquisitionSource as b, materializeAcquisitionForSource as h, AcquisitionError as u } from "./acquisition.js";
+const y = /^[a-z][a-z0-9_]{0,63}$/u;
+class f extends Error {
   constructor(t, r) {
     super(`Floe controlplane request failed (code=${r})`), this.status = t, this.code = r, this.name = "ControlplaneRequestError";
   }
 }
-function h(e) {
+function m(e) {
   const t = e.toLowerCase();
   return t === "localhost" || t === "::1" || t === "127.0.0.1" || t.startsWith("127.");
 }
@@ -14,23 +14,23 @@ function w(e, t) {
   try {
     r = new URL(e);
   } catch {
-    throw new d(0, "transport_policy_denied");
+    throw new f(0, "transport_policy_denied");
   }
-  if (r.protocol !== "https:" && !(t && r.protocol === "http:" && h(r.hostname)))
-    throw new d(0, "transport_policy_denied");
+  if (r.protocol !== "https:" && !(t && r.protocol === "http:" && m(r.hostname)))
+    throw new f(0, "transport_policy_denied");
   return r.pathname = r.pathname.replace(/\/+$/u, ""), r;
 }
 function j(e, t) {
   const r = t === void 0 ? "/v1/connect/artifact" : "/v1/connect/artifact/entry";
   return new URL(`${e.pathname}${r}`, e).toString();
 }
-function z(e) {
-  if (!l.test(e.code))
+function v(e) {
+  if (!y.test(e.code))
     return Object.freeze({ code: "invalid_error_code", disposition: Object.freeze({ kind: "terminal" }) });
   if (new Set(e.retryableBusinessCodes ?? []).has(e.code))
     return Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "retryable" }) });
   if (e.status === 429) {
-    const r = S(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
+    const r = O(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
     return Object.freeze({
       code: e.code,
       disposition: Object.freeze(r === void 0 ? { kind: "retryable" } : { kind: "retry_after", notBeforeUnixMilliseconds: r })
@@ -63,30 +63,36 @@ function _(e) {
           signal: i
         });
         if (!a.ok) {
-          const y = await O(a);
-          return { kind: "failure", ...z({
+          const s = await z(a);
+          return { kind: "failure", ...v({
             status: a.status,
-            code: y,
+            code: s,
             retryAfter: a.headers.get("retry-after"),
             retryableBusinessCodes: e.retryableBusinessCodes
           }) };
         }
-        let f;
+        let l;
         try {
-          f = await a.json();
+          l = await a.json();
         } catch {
-          return s("invalid_controlplane_response");
+          return d("invalid_controlplane_response");
         }
-        const u = await b(c, f, {
+        const p = await h(c, l, {
           commitSpend: e.commitSpend,
-          validateSpendBinding: e.validateSpendBinding,
+          validateSpendBinding: (s) => {
+            try {
+              return e.validateSpendBinding(s);
+            } catch {
+              throw new u("invalid_spend_binding");
+            }
+          },
           expectedConsumer: "trusted"
         });
-        return Object.freeze({ kind: "lease", lease: u });
+        return Object.freeze({ kind: "lease", lease: p });
       } catch (o) {
         if (i.aborted) throw i.reason ?? new DOMException("Aborted", "AbortError");
         if (o instanceof DOMException && o.name === "AbortError") throw o;
-        return o instanceof m || o instanceof d ? s(o.code) : Object.freeze({
+        return o instanceof u || o instanceof f ? d(o.code) : Object.freeze({
           kind: "failure",
           code: "network_error",
           disposition: Object.freeze({ kind: "retryable" })
@@ -94,9 +100,9 @@ function _(e) {
       }
     }
   };
-  return p(c), c;
+  return b(c), c;
 }
-async function O(e) {
+async function z(e) {
   try {
     const t = await e.json();
     if (t !== null && typeof t == "object" && !Array.isArray(t)) {
@@ -110,7 +116,7 @@ async function O(e) {
   }
   return "request_failed";
 }
-function S(e, t) {
+function O(e, t) {
   if (e == null) return;
   const r = e.trim();
   if (/^\d+$/u.test(r)) {
@@ -122,15 +128,15 @@ function S(e, t) {
   const n = Date.parse(r);
   return Number.isSafeInteger(n) && n > t ? n : void 0;
 }
-function s(e) {
+function d(e) {
   return Object.freeze({
     kind: "failure",
-    code: l.test(e) ? e : "invalid_error_code",
+    code: y.test(e) ? e : "invalid_error_code",
     disposition: Object.freeze({ kind: "terminal" })
   });
 }
 export {
-  d as ControlplaneRequestError,
-  z as classifyControlplaneFailure,
+  f as ControlplaneRequestError,
+  v as classifyControlplaneFailure,
   _ as createControlplaneArtifactSource
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/floe-webapp-boot",
-  "version": "0.41.0",
+  "version": "0.41.1",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -34,7 +34,7 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@floegence/flowersec-core": "2.5.0"
+    "@floegence/flowersec-core": "2.5.1"
   },
   "devDependencies": {
     "typescript": "^5.9.3",