@forestadmin/agent-bff 1.5.0 → 1.7.0

package/dist/data/response-mappers.d.ts

@@ -0,0 +1,20 @@
+import type { PrimaryKeyField } from '../read-model/read-model';
+export interface ForestRecordMetadata {
+    collection: string;
+    primaryKey: Record<string, string | number>;
+}
+export interface ListResponse {
+    data: Array<Record<string, unknown> & {
+        __forest: ForestRecordMetadata;
+    }>;
+    meta: {
+        countStatus: 'not_requested';
+    };
+}
+export interface CountResponse {
+    count: number | null;
+    countStatus: 'available' | 'deactivated';
+}
+export declare function mapListResponse(collection: string, records: Record<string, unknown>[], primaryKeys: PrimaryKeyField[]): ListResponse;
+export declare function mapCountResponse(raw: unknown): CountResponse;
+//# sourceMappingURL=response-mappers.d.ts.map

package/dist/data/response-mappers.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapListResponse = mapListResponse;
+exports.mapCountResponse = mapCountResponse;
+const pack_id_1 = __importDefault(require("./pack-id"));
+const bff_local_errors_1 = require("../http/bff-local-errors");
+const DEACTIVATED = 'deactivated';
+function mapListResponse(collection, records, primaryKeys) {
+    const data = records.map(record => {
+        if (record.id === undefined || record.id === null) {
+            throw (0, bff_local_errors_1.mappingError)('Agent record is missing its id');
+        }
+        return {
+            ...record,
+            __forest: {
+                collection,
+                primaryKey: (0, pack_id_1.default)(String(record.id), primaryKeys),
+            },
+        };
+    });
+    return { data, meta: { countStatus: 'not_requested' } };
+}
+// meta.count is the only deactivation signal the agent exposes.
+function mapCountResponse(raw) {
+    const body = (typeof raw === 'object' && raw !== null ? raw : {});
+    if (body.meta?.count === DEACTIVATED) {
+        return { count: null, countStatus: 'deactivated' };
+    }
+    if (typeof body.count === 'number' && Number.isFinite(body.count)) {
+        return { count: body.count, countStatus: 'available' };
+    }
+    // Neither schema metadata nor a usable raw payload: never silently report 0.
+    throw (0, bff_local_errors_1.mappingError)('Agent count payload has no numeric count and no deactivated marker');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/http/agent-error-mapper.d.ts

@@ -0,0 +1,18 @@
+import type { Logger } from '../ports/logger-port';
+import { BffHttpError } from './bff-http-error';
+declare const TYPE_INVALID_REQUEST = "invalid_request";
+declare const TYPE_VALIDATION_ERROR = "validation_error";
+declare const TYPE_UNAUTHORIZED = "unauthorized";
+declare const TYPE_FORBIDDEN = "forbidden";
+declare const TYPE_NOT_FOUND = "not_found";
+declare const TYPE_UNPROCESSABLE = "unprocessable_entity";
+declare const TYPE_TOO_MANY_REQUESTS = "too_many_requests";
+declare const TYPE_NETWORK_ERROR = "network_error";
+declare const TYPE_AGENT_UNAVAILABLE = "agent_unavailable";
+type BffErrorType = typeof TYPE_INVALID_REQUEST | typeof TYPE_VALIDATION_ERROR | typeof TYPE_UNAUTHORIZED | typeof TYPE_FORBIDDEN | typeof TYPE_NOT_FOUND | typeof TYPE_UNPROCESSABLE | typeof TYPE_TOO_MANY_REQUESTS | typeof TYPE_NETWORK_ERROR | typeof TYPE_AGENT_UNAVAILABLE;
+export declare const AGENT_ERROR_TYPE_MAP: Record<string, BffErrorType>;
+export declare function mapAgentError(error: unknown, { logger }: {
+    logger: Logger;
+}): BffHttpError;
+export {};
+//# sourceMappingURL=agent-error-mapper.d.ts.map

package/dist/http/agent-error-mapper.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_ERROR_TYPE_MAP = void 0;
+exports.mapAgentError = mapAgentError;
+const agent_client_1 = require("@forestadmin/agent-client");
+const bff_http_error_1 = require("./bff-http-error");
+const TYPE_INVALID_REQUEST = 'invalid_request';
+const TYPE_VALIDATION_ERROR = 'validation_error';
+const TYPE_UNAUTHORIZED = 'unauthorized';
+const TYPE_FORBIDDEN = 'forbidden';
+const TYPE_NOT_FOUND = 'not_found';
+const TYPE_UNPROCESSABLE = 'unprocessable_entity';
+const TYPE_TOO_MANY_REQUESTS = 'too_many_requests';
+const TYPE_NETWORK_ERROR = 'network_error';
+const TYPE_AGENT_UNAVAILABLE = 'agent_unavailable';
+const DEFAULT_NETWORK_MESSAGE = 'The agent could not be reached';
+const DEFAULT_UNAVAILABLE_MESSAGE = 'The agent is unavailable';
+const DEFAULT_ERROR_MESSAGE = 'Unexpected error';
+exports.AGENT_ERROR_TYPE_MAP = {
+    ValidationError: TYPE_VALIDATION_ERROR,
+    BadRequestError: TYPE_INVALID_REQUEST,
+    UnauthorizedError: TYPE_UNAUTHORIZED,
+    ForbiddenError: TYPE_FORBIDDEN,
+    NotFoundError: TYPE_NOT_FOUND,
+    UnprocessableError: TYPE_UNPROCESSABLE,
+    TooManyRequestsError: TYPE_TOO_MANY_REQUESTS,
+};
+const FALLBACK_TYPE_BY_STATUS = {
+    400: TYPE_INVALID_REQUEST,
+    401: TYPE_UNAUTHORIZED,
+    403: TYPE_FORBIDDEN,
+    404: TYPE_NOT_FOUND,
+    422: TYPE_UNPROCESSABLE,
+    429: TYPE_TOO_MANY_REQUESTS,
+};
+function coerceStatus(status, fallback) {
+    const parsed = typeof status === 'string' ? Number(status) : status;
+    return typeof parsed === 'number' && Number.isFinite(parsed) ? parsed : fallback;
+}
+function fallbackTypeByStatus(status) {
+    return FALLBACK_TYPE_BY_STATUS[status] ?? TYPE_INVALID_REQUEST;
+}
+function agentUnavailable() {
+    return new bff_http_error_1.BffHttpError(503, TYPE_AGENT_UNAVAILABLE, DEFAULT_UNAVAILABLE_MESSAGE);
+}
+function firstJsonApiError(body) {
+    if (typeof body !== 'object' || body === null)
+        return undefined;
+    const { errors } = body;
+    return Array.isArray(errors) ? errors[0] : undefined;
+}
+function mapJsonApiError(agentError, fallbackStatus, logger) {
+    const bodyStatus = coerceStatus(agentError.status, fallbackStatus);
+    // Never surface an upstream failure as a 2xx/3xx: ignore a non-error body status.
+    const status = bodyStatus >= 400 ? bodyStatus : fallbackStatus;
+    // The wrapped-message path skips the outer AgentHttpError 5xx check, so normalize here too.
+    if (status >= 500)
+        return agentUnavailable();
+    const message = agentError.detail ?? agentError.message ?? DEFAULT_ERROR_MESSAGE;
+    const mappedType = agentError.name ? exports.AGENT_ERROR_TYPE_MAP[agentError.name] : undefined;
+    if (agentError.name && mappedType === undefined) {
+        logger('Warn', 'Unmapped agent error name; using status-derived type', {
+            name: agentError.name,
+            status,
+        });
+    }
+    return new bff_http_error_1.BffHttpError(status, mappedType ?? fallbackTypeByStatus(status), message, agentError.data);
+}
+function parseJsonApiFromMessage(error) {
+    if (!(error instanceof Error))
+        return undefined;
+    try {
+        return firstJsonApiError(JSON.parse(error.message));
+    }
+    catch {
+        return undefined;
+    }
+}
+function mapFlatBody(status, body, responseText) {
+    const flat = (typeof body === 'object' && body !== null ? body : {});
+    const message = (typeof flat.error === 'string' ? flat.error : undefined) ??
+        (typeof flat.message === 'string' ? flat.message : undefined) ??
+        (typeof responseText === 'string' && responseText !== '' ? responseText : undefined) ??
+        DEFAULT_ERROR_MESSAGE;
+    return new bff_http_error_1.BffHttpError(status, fallbackTypeByStatus(status), message);
+}
+function mapAgentError(error, { logger }) {
+    // A BFF-origin error that reached here (e.g. thrown inside a caller's agent-call try/catch) keeps
+    // its own type — it must not be recategorized as a transport/agent error.
+    if (error instanceof bff_http_error_1.BffHttpError)
+        return error;
+    if (!(error instanceof agent_client_1.AgentHttpError)) {
+        const agentError = parseJsonApiFromMessage(error);
+        if (agentError)
+            return mapJsonApiError(agentError, 400, logger);
+        // No HTTP response: treated as a transport failure reaching the agent. Log the real cause but
+        // return a generic message — transport errors embed internal topology (hostnames/IPs) that must
+        // not leak to the client. Semantic agent-client errors (action form validation / approval
+        // outcomes) are NOT transport failures: the action endpoint catches and maps those before this
+        // fallback. Callers must scope their try/catch to the agent call so a local BFF bug surfaces as
+        // a 500 through the error middleware rather than being mislabelled here.
+        logger('Warn', 'Agent transport failure mapped to network_error', {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+        return new bff_http_error_1.BffHttpError(502, TYPE_NETWORK_ERROR, DEFAULT_NETWORK_MESSAGE);
+    }
+    if (error.status >= 500)
+        return agentUnavailable();
+    const agentError = firstJsonApiError(error.body);
+    if (agentError)
+        return mapJsonApiError(agentError, error.status, logger);
+    return mapFlatBody(error.status, error.body, error.responseText);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/http/bff-local-errors.d.ts

@@ -0,0 +1,12 @@
+import { BffHttpError } from './bff-http-error';
+export declare function unknownCollection(message?: string): BffHttpError;
+export declare function unknownRelation(message?: string): BffHttpError;
+export declare function unknownAction(message?: string): BffHttpError;
+export declare function collectionNotAllowed(message?: string): BffHttpError;
+export declare function relationNotAllowed(message?: string): BffHttpError;
+export declare function actionNotAllowed(message?: string): BffHttpError;
+export declare function invalidRequest(message?: string, details?: unknown): BffHttpError;
+export declare function mappingError(message?: string): BffHttpError;
+export declare function schemaUnavailable(message?: string): BffHttpError;
+export declare function unsupportedActionResult(message?: string): BffHttpError;
+//# sourceMappingURL=bff-local-errors.d.ts.map

package/dist/http/bff-local-errors.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unknownCollection = unknownCollection;
+exports.unknownRelation = unknownRelation;
+exports.unknownAction = unknownAction;
+exports.collectionNotAllowed = collectionNotAllowed;
+exports.relationNotAllowed = relationNotAllowed;
+exports.actionNotAllowed = actionNotAllowed;
+exports.invalidRequest = invalidRequest;
+exports.mappingError = mappingError;
+exports.schemaUnavailable = schemaUnavailable;
+exports.unsupportedActionResult = unsupportedActionResult;
+const bff_http_error_1 = require("./bff-http-error");
+function unknownCollection(message = 'Unknown collection') {
+    return new bff_http_error_1.BffHttpError(404, 'unknown_collection', message);
+}
+function unknownRelation(message = 'Unknown relation') {
+    return new bff_http_error_1.BffHttpError(404, 'unknown_relation', message);
+}
+function unknownAction(message = 'Unknown action') {
+    return new bff_http_error_1.BffHttpError(404, 'unknown_action', message);
+}
+function collectionNotAllowed(message = 'Collection is not allowed') {
+    return new bff_http_error_1.BffHttpError(403, 'collection_not_allowed', message);
+}
+function relationNotAllowed(message = 'Relation is not allowed') {
+    return new bff_http_error_1.BffHttpError(403, 'relation_not_allowed', message);
+}
+function actionNotAllowed(message = 'Action is not allowed') {
+    return new bff_http_error_1.BffHttpError(403, 'action_not_allowed', message);
+}
+function invalidRequest(message = 'Invalid request', details) {
+    return new bff_http_error_1.BffHttpError(400, 'invalid_request', message, details);
+}
+function mappingError(message = 'Failed to map the agent response') {
+    return new bff_http_error_1.BffHttpError(500, 'mapping_error', message);
+}
+function schemaUnavailable(message = 'The agent schema is unavailable') {
+    return new bff_http_error_1.BffHttpError(503, 'schema_unavailable', message);
+}
+function unsupportedActionResult(message = 'Unsupported action result') {
+    return new bff_http_error_1.BffHttpError(501, 'unsupported_action_result', message);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/ports/metrics-port.d.ts

@@ -0,0 +1,6 @@
+export type MetricTags = Record<string, string | number>;
+export interface Metrics {
+    increment(name: string, tags?: MetricTags): void;
+    gauge(name: string, value: number, tags?: MetricTags): void;
+}
+//# sourceMappingURL=metrics-port.d.ts.map

package/dist/ports/metrics-port.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWV0cmljcy1wb3J0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3BvcnRzL21ldHJpY3MtcG9ydC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiIn0=

package/dist/read-model/action-endpoint-resolver.d.ts

@@ -0,0 +1,23 @@
+import type ReadModel from './read-model';
+import type { Metrics } from '../ports/metrics-port';
+import type { ActionEndpointsByCollection } from '@forestadmin/agent-client';
+export declare const ACTION_ENDPOINT_MISS = "action_endpoint_miss";
+export declare const ACTION_ENDPOINT_ERROR = "action_endpoint_error";
+export type ActionEndpointInfo = ActionEndpointsByCollection[string][string];
+export type ReadModelProvider = () => Promise<ReadModel>;
+export interface ResolveActionContext {
+    rendering: string | number;
+}
+/**
+ * Resolves an action to its endpoint against the current read-model. Never throws: an absent
+ * mapping emits the miss counter, a failure to obtain the read-model emits the error counter.
+ * Both counters carry `rendering`, `collection`, and `action` tags. In normal flow the action
+ * allow-list already excludes endpoint-less actions, so the miss path is a defensive guard.
+ */
+export default class ActionEndpointResolver {
+    private readonly getReadModel;
+    private readonly metrics;
+    constructor(getReadModel: ReadModelProvider, metrics: Metrics);
+    resolve(collection: string, action: string, { rendering }: ResolveActionContext): Promise<ActionEndpointInfo | undefined>;
+}
+//# sourceMappingURL=action-endpoint-resolver.d.ts.map

package/dist/read-model/action-endpoint-resolver.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACTION_ENDPOINT_ERROR = exports.ACTION_ENDPOINT_MISS = void 0;
+exports.ACTION_ENDPOINT_MISS = 'action_endpoint_miss';
+exports.ACTION_ENDPOINT_ERROR = 'action_endpoint_error';
+/**
+ * Resolves an action to its endpoint against the current read-model. Never throws: an absent
+ * mapping emits the miss counter, a failure to obtain the read-model emits the error counter.
+ * Both counters carry `rendering`, `collection`, and `action` tags. In normal flow the action
+ * allow-list already excludes endpoint-less actions, so the miss path is a defensive guard.
+ */
+class ActionEndpointResolver {
+    constructor(getReadModel, metrics) {
+        this.getReadModel = getReadModel;
+        this.metrics = metrics;
+    }
+    async resolve(collection, action, { rendering }) {
+        const tags = { rendering, collection, action };
+        let readModel;
+        try {
+            readModel = await this.getReadModel();
+        }
+        catch {
+            this.metrics.increment(exports.ACTION_ENDPOINT_ERROR, tags);
+            return undefined;
+        }
+        const info = readModel.getActionEndpoints()[collection]?.[action];
+        if (!info) {
+            this.metrics.increment(exports.ACTION_ENDPOINT_MISS, tags);
+            return undefined;
+        }
+        return info;
+    }
+}
+exports.default = ActionEndpointResolver;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYWN0aW9uLWVuZHBvaW50LXJlc29sdmVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3JlYWQtbW9kZWwvYWN0aW9uLWVuZHBvaW50LXJlc29sdmVyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlhLFFBQUEsb0JBQW9CLEdBQUcsc0JBQXNCLENBQUM7QUFDOUMsUUFBQSxxQkFBcUIsR0FBRyx1QkFBdUIsQ0FBQztBQVU3RDs7Ozs7R0FLRztBQUNILE1BQXFCLHNCQUFzQjtJQUN6QyxZQUNtQixZQUErQixFQUMvQixPQUFnQjtRQURoQixpQkFBWSxHQUFaLFlBQVksQ0FBbUI7UUFDL0IsWUFBTyxHQUFQLE9BQU8sQ0FBUztJQUNoQyxDQUFDO0lBRUosS0FBSyxDQUFDLE9BQU8sQ0FDWCxVQUFrQixFQUNsQixNQUFjLEVBQ2QsRUFBRSxTQUFTLEVBQXdCO1FBRW5DLE1BQU0sSUFBSSxHQUFHLEVBQUUsU0FBUyxFQUFFLFVBQVUsRUFBRSxNQUFNLEVBQUUsQ0FBQztRQUUvQyxJQUFJLFNBQW9CLENBQUM7UUFFekIsSUFBSSxDQUFDO1lBQ0gsU0FBUyxHQUFHLE1BQU0sSUFBSSxDQUFDLFlBQVksRUFBRSxDQUFDO1FBQ3hDLENBQUM7UUFBQyxNQUFNLENBQUM7WUFDUCxJQUFJLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyw2QkFBcUIsRUFBRSxJQUFJLENBQUMsQ0FBQztZQUVwRCxPQUFPLFNBQVMsQ0FBQztRQUNuQixDQUFDO1FBRUQsTUFBTSxJQUFJLEdBQUcsU0FBUyxDQUFDLGtCQUFrQixFQUFFLENBQUMsVUFBVSxDQUFDLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQztRQUVsRSxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDVixJQUFJLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyw0QkFBb0IsRUFBRSxJQUFJLENBQUMsQ0FBQztZQUVuRCxPQUFPLFNBQVMsQ0FBQztRQUNuQixDQUFDO1FBRUQsT0FBTyxJQUFJLENBQUM7SUFDZCxDQUFDO0NBQ0Y7QUFqQ0QseUNBaUNDIn0=

package/dist/read-model/agent-capabilities-fetcher.d.ts

@@ -0,0 +1,11 @@
+import type { CapabilitiesFetcher } from './capabilities-cache';
+export interface AgentCapabilitiesFetcherOptions {
+    agentUrl: string;
+    token: string;
+}
+/**
+ * Builds a capabilities fetcher bound to a request's agent token. The cache calls it only on a
+ * miss, so the token of whichever request first populates a collection is the one used.
+ */
+export default function createAgentCapabilitiesFetcher({ agentUrl, token, }: AgentCapabilitiesFetcherOptions): CapabilitiesFetcher;
+//# sourceMappingURL=agent-capabilities-fetcher.d.ts.map

package/dist/read-model/agent-capabilities-fetcher.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = createAgentCapabilitiesFetcher;
+const agent_client_1 = require("@forestadmin/agent-client");
+/**
+ * Builds a capabilities fetcher bound to a request's agent token. The cache calls it only on a
+ * miss, so the token of whichever request first populates a collection is the one used.
+ */
+function createAgentCapabilitiesFetcher({ agentUrl, token, }) {
+    const client = (0, agent_client_1.createRemoteAgentClient)({ url: agentUrl, token });
+    return collection => client.collection(collection).capabilities();
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/read-model/capabilities-cache.d.ts

@@ -0,0 +1,27 @@
+export interface CapabilitiesResult {
+    fields: {
+        name: string;
+        type: string;
+        operators: string[];
+    }[];
+}
+export type CapabilitiesFetcher = (collection: string) => Promise<CapabilitiesResult>;
+export interface CapabilitiesCacheOptions {
+    now?: () => number;
+    ttlMs?: number;
+}
+/**
+ * Per-collection capabilities cache (24h). The fetcher is passed per call so it can be bound to
+ * the caller's request token. Invalidated together with the schema via `clear()`.
+ */
+export default class CapabilitiesCache {
+    private readonly now;
+    private readonly ttlMs;
+    private readonly entries;
+    private readonly inFlight;
+    private generation;
+    constructor({ now, ttlMs }?: CapabilitiesCacheOptions);
+    get(collection: string, fetcher: CapabilitiesFetcher): Promise<CapabilitiesResult>;
+    clear(): void;
+}
+//# sourceMappingURL=capabilities-cache.d.ts.map

package/dist/read-model/capabilities-cache.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const schema_cache_1 = require("./schema-cache");
+/**
+ * Per-collection capabilities cache (24h). The fetcher is passed per call so it can be bound to
+ * the caller's request token. Invalidated together with the schema via `clear()`.
+ */
+class CapabilitiesCache {
+    constructor({ now = Date.now, ttlMs = schema_cache_1.ONE_DAY_MS } = {}) {
+        this.entries = new Map();
+        this.inFlight = new Map();
+        this.generation = 0;
+        this.now = now;
+        this.ttlMs = ttlMs;
+    }
+    async get(collection, fetcher) {
+        const entry = this.entries.get(collection);
+        if (entry && this.now() - entry.fetchedAt < this.ttlMs)
+            return entry.result;
+        const pending = this.inFlight.get(collection);
+        if (pending)
+            return pending;
+        const { generation } = this;
+        const fetch = fetcher(collection)
+            .then(result => {
+            // Skip the write if a clear() (schema refresh) happened while this fetch was in flight —
+            // its result belongs to the old schema generation and must not repopulate the cache.
+            if (this.generation === generation) {
+                this.entries.set(collection, { result, fetchedAt: this.now() });
+            }
+            return result;
+        })
+            .finally(() => {
+            if (this.inFlight.get(collection) === fetch)
+                this.inFlight.delete(collection);
+        });
+        this.inFlight.set(collection, fetch);
+        return fetch;
+    }
+    clear() {
+        this.generation += 1;
+        this.entries.clear();
+        this.inFlight.clear();
+    }
+}
+exports.default = CapabilitiesCache;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/read-model/create-read-model.d.ts

@@ -0,0 +1,17 @@
+import type { Logger } from '../ports/logger-port';
+import type { Metrics } from '../ports/metrics-port';
+import ActionEndpointResolver from './action-endpoint-resolver';
+import ReadModelStore from './read-model-store';
+export interface CreateReadModelOptions {
+    forestServerUrl: string;
+    envSecret: string;
+    metrics?: Metrics;
+    logger?: Logger;
+    now?: () => number;
+}
+export interface ReadModelBundle {
+    store: ReadModelStore;
+    actionEndpointResolver: ActionEndpointResolver;
+}
+export default function createReadModel({ forestServerUrl, envSecret, metrics, logger, now, }: CreateReadModelOptions): ReadModelBundle;
+//# sourceMappingURL=create-read-model.d.ts.map

package/dist/read-model/create-read-model.js

@@ -0,0 +1,24 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = createReadModel;
+const action_endpoint_resolver_1 = __importDefault(require("./action-endpoint-resolver"));
+const capabilities_cache_1 = __importDefault(require("./capabilities-cache"));
+const forest_schema_client_1 = __importDefault(require("./forest-schema-client"));
+const read_model_store_1 = __importDefault(require("./read-model-store"));
+const schema_cache_1 = __importDefault(require("./schema-cache"));
+const console_metrics_1 = __importDefault(require("../adapters/console-metrics"));
+const safe_metrics_1 = __importDefault(require("../adapters/safe-metrics"));
+function createReadModel({ forestServerUrl, envSecret, metrics, logger, now, }) {
+    // Wrap once so a throwing metrics backend can never break business logic anywhere in the bundle.
+    const resolvedMetrics = (0, safe_metrics_1.default)(metrics ?? (0, console_metrics_1.default)(logger));
+    const fetcher = new forest_schema_client_1.default({ forestServerUrl, envSecret });
+    const schemaCache = new schema_cache_1.default({ fetcher, metrics: resolvedMetrics, now });
+    const capabilitiesCache = new capabilities_cache_1.default({ now });
+    const store = new read_model_store_1.default(schemaCache, capabilitiesCache);
+    const actionEndpointResolver = new action_endpoint_resolver_1.default(() => store.getReadModel(), resolvedMetrics);
+    return { store, actionEndpointResolver };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY3JlYXRlLXJlYWQtbW9kZWwuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvcmVhZC1tb2RlbC9jcmVhdGUtcmVhZC1tb2RlbC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQXdCQSxrQ0FtQkM7QUF4Q0QsMEZBQWdFO0FBQ2hFLDhFQUFxRDtBQUNyRCxrRkFBd0Q7QUFDeEQsMEVBQWdEO0FBQ2hELGtFQUF5QztBQUN6QyxrRkFBK0Q7QUFDL0QsNEVBQW1EO0FBZW5ELFNBQXdCLGVBQWUsQ0FBQyxFQUN0QyxlQUFlLEVBQ2YsU0FBUyxFQUNULE9BQU8sRUFDUCxNQUFNLEVBQ04sR0FBRyxHQUNvQjtJQUN2QixpR0FBaUc7SUFDakcsTUFBTSxlQUFlLEdBQUcsSUFBQSxzQkFBVyxFQUFDLE9BQU8sSUFBSSxJQUFBLHlCQUFvQixFQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUM7SUFDN0UsTUFBTSxPQUFPLEdBQUcsSUFBSSw4QkFBa0IsQ0FBQyxFQUFFLGVBQWUsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDO0lBQ3ZFLE1BQU0sV0FBVyxHQUFHLElBQUksc0JBQVcsQ0FBQyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsZUFBZSxFQUFFLEdBQUcsRUFBRSxDQUFDLENBQUM7SUFDaEYsTUFBTSxpQkFBaUIsR0FBRyxJQUFJLDRCQUFpQixDQUFDLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztJQUN6RCxNQUFNLEtBQUssR0FBRyxJQUFJLDBCQUFjLENBQUMsV0FBVyxFQUFFLGlCQUFpQixDQUFDLENBQUM7SUFDakUsTUFBTSxzQkFBc0IsR0FBRyxJQUFJLGtDQUFzQixDQUN2RCxHQUFHLEVBQUUsQ0FBQyxLQUFLLENBQUMsWUFBWSxFQUFFLEVBQzFCLGVBQWUsQ0FDaEIsQ0FBQztJQUVGLE9BQU8sRUFBRSxLQUFLLEVBQUUsc0JBQXNCLEVBQUUsQ0FBQztBQUMzQyxDQUFDIn0=

package/dist/read-model/errors.d.ts

@@ -0,0 +1,5 @@
+export default class SchemaUnavailableError extends Error {
+    readonly cause?: unknown;
+    constructor(cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/read-model/errors.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+class SchemaUnavailableError extends Error {
+    constructor(cause) {
+        super('The agent schema is unavailable');
+        this.name = 'SchemaUnavailableError';
+        this.cause = cause;
+    }
+}
+exports.default = SchemaUnavailableError;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZXJyb3JzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3JlYWQtbW9kZWwvZXJyb3JzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsTUFBcUIsc0JBQXVCLFNBQVEsS0FBSztJQUd2RCxZQUFZLEtBQWU7UUFDekIsS0FBSyxDQUFDLGlDQUFpQyxDQUFDLENBQUM7UUFDekMsSUFBSSxDQUFDLElBQUksR0FBRyx3QkFBd0IsQ0FBQztRQUNyQyxJQUFJLENBQUMsS0FBSyxHQUFHLEtBQUssQ0FBQztJQUNyQixDQUFDO0NBQ0Y7QUFSRCx5Q0FRQyJ9

package/dist/read-model/forest-schema-client.d.ts

@@ -0,0 +1,14 @@
+import type { ForestSchemaCollection } from '@forestadmin/forestadmin-client';
+export interface ForestSchemaClientOptions {
+    forestServerUrl: string;
+    envSecret: string;
+}
+export interface SchemaFetcher {
+    fetchSchema(): Promise<ForestSchemaCollection[]>;
+}
+export default class ForestSchemaClient implements SchemaFetcher {
+    private readonly schemaService;
+    constructor({ forestServerUrl, envSecret }: ForestSchemaClientOptions);
+    fetchSchema(): Promise<ForestSchemaCollection[]>;
+}
+//# sourceMappingURL=forest-schema-client.d.ts.map

package/dist/read-model/forest-schema-client.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const forestadmin_client_1 = require("@forestadmin/forestadmin-client");
+class ForestSchemaClient {
+    constructor({ forestServerUrl, envSecret }) {
+        this.schemaService = new forestadmin_client_1.SchemaService(new forestadmin_client_1.ForestHttpApi(), { forestServerUrl, envSecret });
+    }
+    async fetchSchema() {
+        return this.schemaService.getSchema();
+    }
+}
+exports.default = ForestSchemaClient;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/read-model/read-model-store.d.ts

@@ -0,0 +1,20 @@
+import type CapabilitiesCache from './capabilities-cache';
+import type { CapabilitiesFetcher, CapabilitiesResult } from './capabilities-cache';
+import type SchemaCache from './schema-cache';
+import ReadModel from './read-model';
+/**
+ * Single owner of the coupled schema + capabilities lifecycle. A successful schema refresh (a bump
+ * of the cache `revision`) rebuilds the read-model and clears capabilities atomically, so the
+ * allow-list and capabilities never split-brain across schema generations.
+ */
+export default class ReadModelStore {
+    private readonly schemaCache;
+    private readonly capabilitiesCache;
+    private builtRevision;
+    private readModel;
+    constructor(schemaCache: SchemaCache, capabilitiesCache: CapabilitiesCache);
+    getReadModel(): Promise<ReadModel>;
+    getCapabilities(collection: string, fetcher: CapabilitiesFetcher): Promise<CapabilitiesResult>;
+    ageSeconds(): number | undefined;
+}
+//# sourceMappingURL=read-model-store.d.ts.map

package/dist/read-model/read-model-store.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const read_model_1 = __importDefault(require("./read-model"));
+/**
+ * Single owner of the coupled schema + capabilities lifecycle. A successful schema refresh (a bump
+ * of the cache `revision`) rebuilds the read-model and clears capabilities atomically, so the
+ * allow-list and capabilities never split-brain across schema generations.
+ */
+class ReadModelStore {
+    constructor(schemaCache, capabilitiesCache) {
+        this.builtRevision = -1;
+        this.readModel = null;
+        this.schemaCache = schemaCache;
+        this.capabilitiesCache = capabilitiesCache;
+    }
+    async getReadModel() {
+        const collections = await this.schemaCache.get();
+        if (this.schemaCache.revision !== this.builtRevision || !this.readModel) {
+            this.readModel = new read_model_1.default(collections);
+            this.builtRevision = this.schemaCache.revision;
+            this.capabilitiesCache.clear();
+        }
+        return this.readModel;
+    }
+    async getCapabilities(collection, fetcher) {
+        // Ensure any pending schema refresh (and its capabilities invalidation) runs first.
+        await this.getReadModel();
+        // TODO(wiring): possible TOCTOU once this is called from request handling. A concurrent schema
+        // refresh can clear capabilities while this fetch is in flight, so the caller could receive
+        // capabilities from the previous schema generation alongside the new allow-list. When wiring
+        // the data endpoints, re-check `schemaCache.revision` after the fetch resolves and retry on a
+        // mismatch so capabilities and schema stay atomically coupled.
+        return this.capabilitiesCache.get(collection, fetcher);
+    }
+    ageSeconds() {
+        return this.schemaCache.ageSeconds();
+    }
+}
+exports.default = ReadModelStore;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVhZC1tb2RlbC1zdG9yZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9yZWFkLW1vZGVsL3JlYWQtbW9kZWwtc3RvcmUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFJQSw4REFBcUM7QUFFckM7Ozs7R0FJRztBQUNILE1BQXFCLGNBQWM7SUFPakMsWUFBWSxXQUF3QixFQUFFLGlCQUFvQztRQUhsRSxrQkFBYSxHQUFHLENBQUMsQ0FBQyxDQUFDO1FBQ25CLGNBQVMsR0FBcUIsSUFBSSxDQUFDO1FBR3pDLElBQUksQ0FBQyxXQUFXLEdBQUcsV0FBVyxDQUFDO1FBQy9CLElBQUksQ0FBQyxpQkFBaUIsR0FBRyxpQkFBaUIsQ0FBQztJQUM3QyxDQUFDO0lBRUQsS0FBSyxDQUFDLFlBQVk7UUFDaEIsTUFBTSxXQUFXLEdBQUcsTUFBTSxJQUFJLENBQUMsV0FBVyxDQUFDLEdBQUcsRUFBRSxDQUFDO1FBRWpELElBQUksSUFBSSxDQUFDLFdBQVcsQ0FBQyxRQUFRLEtBQUssSUFBSSxDQUFDLGFBQWEsSUFBSSxDQUFDLElBQUksQ0FBQyxTQUFTLEVBQUUsQ0FBQztZQUN4RSxJQUFJLENBQUMsU0FBUyxHQUFHLElBQUksb0JBQVMsQ0FBQyxXQUFXLENBQUMsQ0FBQztZQUM1QyxJQUFJLENBQUMsYUFBYSxHQUFHLElBQUksQ0FBQyxXQUFXLENBQUMsUUFBUSxDQUFDO1lBQy9DLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxLQUFLLEVBQUUsQ0FBQztRQUNqQyxDQUFDO1FBRUQsT0FBTyxJQUFJLENBQUMsU0FBUyxDQUFDO0lBQ3hCLENBQUM7SUFFRCxLQUFLLENBQUMsZUFBZSxDQUNuQixVQUFrQixFQUNsQixPQUE0QjtRQUU1QixvRkFBb0Y7UUFDcEYsTUFBTSxJQUFJLENBQUMsWUFBWSxFQUFFLENBQUM7UUFFMUIsK0ZBQStGO1FBQy9GLDRGQUE0RjtRQUM1Riw2RkFBNkY7UUFDN0YsOEZBQThGO1FBQzlGLCtEQUErRDtRQUMvRCxPQUFPLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxHQUFHLENBQUMsVUFBVSxFQUFFLE9BQU8sQ0FBQyxDQUFDO0lBQ3pELENBQUM7SUFFRCxVQUFVO1FBQ1IsT0FBTyxJQUFJLENBQUMsV0FBVyxDQUFDLFVBQVUsRUFBRSxDQUFDO0lBQ3ZDLENBQUM7Q0FDRjtBQTFDRCxpQ0EwQ0MifQ==