@forklaunch/core 0.17.3 → 0.18.1

package/lib/http/index.d.mts

@@ -3,8 +3,8 @@ export { ParsedQs } from 'qs';
 import { Prettify, SanitizePathSlashes, PrettyCamelCase, TypeSafeFunction, UnionToIntersection, EmptyObject } from '@forklaunch/common';
 import { AnySchemaValidator } from '@forklaunch/validator';
 import { ServerOptions, IncomingMessage, ServerResponse } from 'node:http';
-import { M as Method, P as PathParamHttpContractDetails, H as HttpContractDetails, E as ExpressLikeRouterOptions, a as SessionObject, b as ParamsObject, R as ResponsesObject, B as Body, Q as QueryObject, c as HeadersObject, V as VersionSchema, d as SchemaAuthMethods, e as ExpressLikeSchemaHandler, f as ResolvedSessionObject, C as ContractDetails, g as PathMatch, L as LiveTypeFunction, h as LiveSdkFunction, A as AuthMethodsBase, O as OpenTelemetryCollector, i as MetricsDefinition, j as ExpressLikeApplicationOptions, k as ParamsDictionary, l as VersionedRequests, m as AuthMethods, D as DecodeResource, n as BasicAuthMethods, F as ForklaunchRequest, o as MiddlewareContractDetails, p as ExpressLikeSchemaAuthMapper, q as ForklaunchNextFunction, r as ForklaunchResponse, s as ForklaunchResHeaders, t as ForklaunchStatusResponse, u as ForklaunchSendableData, T as TelemetryOptions, v as LoggerMeta, w as LogFn } from '../contractDetails.types-BKkaBgAN.mjs';
-export { x as BodyObject, y as DocsConfiguration, z as ErrorContainer, G as ExpressLikeAuthMapper, I as ExpressLikeGlobalAuthOptions, J as ExpressLikeHandler, K as ExpressLikeSchemaGlobalAuthOptions, N as ExtractBody, U as ExtractContentType, W as ExtractResponseBody, X as ExtractedParamsObject, Y as FileBody, Z as ForklaunchBaseRequest, _ as ForklaunchResErrors, $ as HmacMethods, a0 as HttpMethod, a1 as JsonBody, a2 as JwtAuthMethods, a3 as LiveTypeFunctionRequestInit, a4 as MapParamsSchema, a5 as MapReqBodySchema, a6 as MapReqHeadersSchema, a7 as MapReqQuerySchema, a8 as MapResBodyMapSchema, a9 as MapResHeadersSchema, aa as MapSchema, ab as MapSessionSchema, ac as MapVersionedReqsSchema, ad as MapVersionedRespsSchema, ae as MetricType, af as MultipartForm, ag as NumberOnlyObject, ah as PathParamMethod, ai as RawTypedResponseBody, aj as RequestContext, ak as ResolvedForklaunchAuthRequest, al as ResolvedForklaunchRequest, am as ResolvedForklaunchResponse, an as ResponseBody, ao as ResponseCompiledSchema, ap as ResponseShape, aq as ServerSentEventBody, S as StringOnlyObject, ar as TextBody, as as TypedBody, at as TypedRequestBody, au as TypedResponseBody, av as UnknownBody, aw as UnknownResponseBody, ax as UrlEncodedForm, ay as VersionedResponses, az as httpRequestsTotalCounter, aA as httpServerDurationHistogram } from '../contractDetails.types-BKkaBgAN.mjs';
+import { M as Method, P as PathParamHttpContractDetails, H as HttpContractDetails, E as ExpressLikeRouterOptions, a as SessionObject, b as ParamsObject, R as ResponsesObject, B as Body, Q as QueryObject, c as HeadersObject, V as VersionSchema, d as SchemaAuthMethods, e as ExpressLikeSchemaHandler, f as ResolvedSessionObject, C as ContractDetails, g as PathMatch, L as LiveTypeFunction, h as LiveSdkFunction, A as AuthMethodsBase, O as OpenTelemetryCollector, i as MetricsDefinition, j as ExpressLikeApplicationOptions, k as ParamsDictionary, l as VersionedRequests, m as AuthMethods, D as DecodeResource, n as BasicAuthMethods, F as ForklaunchRequest, o as MiddlewareContractDetails, p as ExpressLikeSchemaAuthMapper, q as ForklaunchNextFunction, r as ForklaunchResponse, s as ForklaunchResHeaders, t as ForklaunchStatusResponse, u as ForklaunchSendableData, T as TelemetryOptions, v as LoggerMeta, w as LogFn } from '../apiDefinition.types-DnUkFmfT.mjs';
+export { x as BodyObject, y as DefaultSubscriptionData, z as DocsConfiguration, G as ErrorContainer, I as ExpressLikeAuthMapper, J as ExpressLikeGlobalAuthOptions, K as ExpressLikeHandler, N as ExpressLikeSchemaGlobalAuthOptions, U as ExtractBody, W as ExtractContentType, X as ExtractResponseBody, Y as ExtractedParamsObject, Z as FileBody, _ as ForklaunchBaseRequest, $ as ForklaunchResErrors, a0 as HmacMethods, a1 as HttpMethod, a2 as JsonBody, a3 as JwtAuthMethods, a4 as LiveTypeFunctionRequestInit, a5 as MapParamsSchema, a6 as MapReqBodySchema, a7 as MapReqHeadersSchema, a8 as MapReqQuerySchema, a9 as MapResBodyMapSchema, aa as MapResHeadersSchema, ab as MapSchema, ac as MapSessionSchema, ad as MapVersionedReqsSchema, ae as MapVersionedRespsSchema, af as MetricType, ag as MultipartForm, ah as NumberOnlyObject, ai as PathParamMethod, aj as RawTypedResponseBody, ak as RequestContext, al as ResolvedForklaunchAuthRequest, am as ResolvedForklaunchRequest, an as ResolvedForklaunchResponse, ao as ResponseBody, ap as ResponseCompiledSchema, aq as ResponseShape, ar as ServerSentEventBody, S as StringOnlyObject, as as TextBody, at as TypedBody, au as TypedRequestBody, av as TypedResponseBody, aw as UnknownBody, ax as UnknownResponseBody, ay as UrlEncodedForm, az as VersionedResponses, aA as httpRequestsTotalCounter, aB as httpServerDurationHistogram } from '../apiDefinition.types-DnUkFmfT.mjs';
 import { JWTPayload, JWK } from 'jose';
 import { ZodSchemaValidator } from '@forklaunch/validator/zod';
 import { FastMCP } from 'fastmcp';

package/lib/http/index.d.ts

@@ -3,8 +3,8 @@ export { ParsedQs } from 'qs';
 import { Prettify, SanitizePathSlashes, PrettyCamelCase, TypeSafeFunction, UnionToIntersection, EmptyObject } from '@forklaunch/common';
 import { AnySchemaValidator } from '@forklaunch/validator';
 import { ServerOptions, IncomingMessage, ServerResponse } from 'node:http';
-import { M as Method, P as PathParamHttpContractDetails, H as HttpContractDetails, E as ExpressLikeRouterOptions, a as SessionObject, b as ParamsObject, R as ResponsesObject, B as Body, Q as QueryObject, c as HeadersObject, V as VersionSchema, d as SchemaAuthMethods, e as ExpressLikeSchemaHandler, f as ResolvedSessionObject, C as ContractDetails, g as PathMatch, L as LiveTypeFunction, h as LiveSdkFunction, A as AuthMethodsBase, O as OpenTelemetryCollector, i as MetricsDefinition, j as ExpressLikeApplicationOptions, k as ParamsDictionary, l as VersionedRequests, m as AuthMethods, D as DecodeResource, n as BasicAuthMethods, F as ForklaunchRequest, o as MiddlewareContractDetails, p as ExpressLikeSchemaAuthMapper, q as ForklaunchNextFunction, r as ForklaunchResponse, s as ForklaunchResHeaders, t as ForklaunchStatusResponse, u as ForklaunchSendableData, T as TelemetryOptions, v as LoggerMeta, w as LogFn } from '../contractDetails.types-BKkaBgAN.js';
-export { x as BodyObject, y as DocsConfiguration, z as ErrorContainer, G as ExpressLikeAuthMapper, I as ExpressLikeGlobalAuthOptions, J as ExpressLikeHandler, K as ExpressLikeSchemaGlobalAuthOptions, N as ExtractBody, U as ExtractContentType, W as ExtractResponseBody, X as ExtractedParamsObject, Y as FileBody, Z as ForklaunchBaseRequest, _ as ForklaunchResErrors, $ as HmacMethods, a0 as HttpMethod, a1 as JsonBody, a2 as JwtAuthMethods, a3 as LiveTypeFunctionRequestInit, a4 as MapParamsSchema, a5 as MapReqBodySchema, a6 as MapReqHeadersSchema, a7 as MapReqQuerySchema, a8 as MapResBodyMapSchema, a9 as MapResHeadersSchema, aa as MapSchema, ab as MapSessionSchema, ac as MapVersionedReqsSchema, ad as MapVersionedRespsSchema, ae as MetricType, af as MultipartForm, ag as NumberOnlyObject, ah as PathParamMethod, ai as RawTypedResponseBody, aj as RequestContext, ak as ResolvedForklaunchAuthRequest, al as ResolvedForklaunchRequest, am as ResolvedForklaunchResponse, an as ResponseBody, ao as ResponseCompiledSchema, ap as ResponseShape, aq as ServerSentEventBody, S as StringOnlyObject, ar as TextBody, as as TypedBody, at as TypedRequestBody, au as TypedResponseBody, av as UnknownBody, aw as UnknownResponseBody, ax as UrlEncodedForm, ay as VersionedResponses, az as httpRequestsTotalCounter, aA as httpServerDurationHistogram } from '../contractDetails.types-BKkaBgAN.js';
+import { M as Method, P as PathParamHttpContractDetails, H as HttpContractDetails, E as ExpressLikeRouterOptions, a as SessionObject, b as ParamsObject, R as ResponsesObject, B as Body, Q as QueryObject, c as HeadersObject, V as VersionSchema, d as SchemaAuthMethods, e as ExpressLikeSchemaHandler, f as ResolvedSessionObject, C as ContractDetails, g as PathMatch, L as LiveTypeFunction, h as LiveSdkFunction, A as AuthMethodsBase, O as OpenTelemetryCollector, i as MetricsDefinition, j as ExpressLikeApplicationOptions, k as ParamsDictionary, l as VersionedRequests, m as AuthMethods, D as DecodeResource, n as BasicAuthMethods, F as ForklaunchRequest, o as MiddlewareContractDetails, p as ExpressLikeSchemaAuthMapper, q as ForklaunchNextFunction, r as ForklaunchResponse, s as ForklaunchResHeaders, t as ForklaunchStatusResponse, u as ForklaunchSendableData, T as TelemetryOptions, v as LoggerMeta, w as LogFn } from '../apiDefinition.types-DnUkFmfT.js';
+export { x as BodyObject, y as DefaultSubscriptionData, z as DocsConfiguration, G as ErrorContainer, I as ExpressLikeAuthMapper, J as ExpressLikeGlobalAuthOptions, K as ExpressLikeHandler, N as ExpressLikeSchemaGlobalAuthOptions, U as ExtractBody, W as ExtractContentType, X as ExtractResponseBody, Y as ExtractedParamsObject, Z as FileBody, _ as ForklaunchBaseRequest, $ as ForklaunchResErrors, a0 as HmacMethods, a1 as HttpMethod, a2 as JsonBody, a3 as JwtAuthMethods, a4 as LiveTypeFunctionRequestInit, a5 as MapParamsSchema, a6 as MapReqBodySchema, a7 as MapReqHeadersSchema, a8 as MapReqQuerySchema, a9 as MapResBodyMapSchema, aa as MapResHeadersSchema, ab as MapSchema, ac as MapSessionSchema, ad as MapVersionedReqsSchema, ae as MapVersionedRespsSchema, af as MetricType, ag as MultipartForm, ah as NumberOnlyObject, ai as PathParamMethod, aj as RawTypedResponseBody, ak as RequestContext, al as ResolvedForklaunchAuthRequest, am as ResolvedForklaunchRequest, an as ResolvedForklaunchResponse, ao as ResponseBody, ap as ResponseCompiledSchema, aq as ResponseShape, ar as ServerSentEventBody, S as StringOnlyObject, as as TextBody, at as TypedBody, au as TypedRequestBody, av as TypedResponseBody, aw as UnknownBody, ax as UnknownResponseBody, ay as UrlEncodedForm, az as VersionedResponses, aA as httpRequestsTotalCounter, aB as httpServerDurationHistogram } from '../apiDefinition.types-DnUkFmfT.js';
 import { JWTPayload, JWK } from 'jose';
 import { ZodSchemaValidator } from '@forklaunch/validator/zod';
 import { FastMCP } from 'fastmcp';

package/lib/http/index.js

@@ -502,6 +502,11 @@ async function discriminateAuthMethod(auth, openTelemetryCollector) {
   return authMethod;
 }
 
+// src/http/guards/hasFeatureChecks.ts
+function hasFeatureChecks(maybeFeatureAuth) {
+  return typeof maybeFeatureAuth === "object" && maybeFeatureAuth !== null && "requiredFeatures" in maybeFeatureAuth && Array.isArray(maybeFeatureAuth.requiredFeatures) && maybeFeatureAuth.requiredFeatures.length > 0;
+}
+
 // src/http/guards/hasPermissionChecks.ts
 function hasPermissionChecks(maybePermissionedAuth) {
   return typeof maybePermissionedAuth === "object" && maybePermissionedAuth !== null && ("allowedPermissions" in maybePermissionedAuth || "forbiddenPermissions" in maybePermissionedAuth);
@@ -517,6 +522,11 @@ function hasScopeChecks(maybePermissionedAuth) {
   return typeof maybePermissionedAuth === "object" && maybePermissionedAuth !== null && "requiredScope" in maybePermissionedAuth && maybePermissionedAuth.requiredScope != null;
 }
 
+// src/http/guards/hasSubscriptionChecks.ts
+function hasSubscriptionChecks(maybeSubscriptionAuth) {
+  return typeof maybeSubscriptionAuth === "object" && maybeSubscriptionAuth !== null && "requireActiveSubscription" in maybeSubscriptionAuth && maybeSubscriptionAuth.requireActiveSubscription === true;
+}
+
 // src/http/telemetry/pinoLogger.ts
 var import_common5 = require("@forklaunch/common");
 var import_api2 = require("@opentelemetry/api");
@@ -699,6 +709,14 @@ var invalidAuthorizationTokenRoles = [
   403,
   "Invalid Authorization roles."
 ];
+var invalidAuthorizationTokenFeatures = [
+  403,
+  "Required features not available."
+];
+var invalidAuthorizationSubscription = [
+  403,
+  "Active subscription required."
+];
 var invalidAuthorizationToken = [
   403,
   "Invalid Authorization token."
@@ -906,6 +924,34 @@ async function checkAuthorizationToken(req, authorizationMethod, authorizationTo
   } else {
     return invalidAuthorizationMethod;
   }
+  if (hasSubscriptionChecks(collapsedAuthorizationMethod)) {
+    if (!collapsedAuthorizationMethod.surfaceSubscription) {
+      return [500, "No subscription surfacing function provided."];
+    }
+    const subscription = await collapsedAuthorizationMethod.surfaceSubscription(
+      sessionPayload,
+      req
+    );
+    if (!subscription) {
+      return invalidAuthorizationSubscription;
+    }
+  }
+  if (hasFeatureChecks(collapsedAuthorizationMethod)) {
+    if (!collapsedAuthorizationMethod.surfaceFeatures) {
+      return [500, "No features surfacing function provided."];
+    }
+    const availableFeatures = await collapsedAuthorizationMethod.surfaceFeatures(
+      sessionPayload,
+      req
+    );
+    const requiredFeatures = collapsedAuthorizationMethod.requiredFeatures ?? [];
+    const missingFeatures = requiredFeatures.filter(
+      (feature) => !availableFeatures.has(feature)
+    );
+    if (missingFeatures.length > 0) {
+      return invalidAuthorizationTokenFeatures;
+    }
+  }
 }
 async function parseRequestAuth(req, res, next) {
   const auth = req.contractDetails.auth;