@geekmidas/constructs 10.0.0-alpha.1 → 10.0.0-alpha.100

package/dist/subscribers/index.cjs

@@ -1,109 +1,119 @@
-const require_chunk = require('../chunk-DWy1uDak.cjs');
-const require_construct_interface = require('../construct-interface-BfjcOD_E.cjs');
-const require_Construct = require('../Construct-roId57cU.cjs');
-const require_clone = require('../clone-Dy0cR2SZ.cjs');
-const __geekmidas_logger_console = require_chunk.__toESM(require("@geekmidas/logger/console"));
-
-//#region src/subscribers/Subscriber.ts
-var Subscriber = class extends require_Construct.Construct {
-	__IS_SUBSCRIBER__ = true;
-	static isSubscriber(obj) {
-		return Boolean(obj && obj.__IS_SUBSCRIBER__ === true && obj.type === require_Construct.ConstructType.Subscriber);
-	}
-	constructor(handler, timeout = 3e4, _subscribedEvents, outputSchema, services = [], logger = __geekmidas_logger_console.DEFAULT_LOGGER, publisherService, topicName, constructs = []) {
-		super(require_Construct.ConstructType.Subscriber, logger, services, [], publisherService, outputSchema, timeout, void 0, void 0, constructs);
-		this.handler = handler;
-		this.timeout = timeout;
-		this._subscribedEvents = _subscribedEvents;
-		this.outputSchema = outputSchema;
-		this.services = services;
-		this.logger = logger;
-		this.publisherService = publisherService;
-		this.topicName = topicName;
-	}
-	get subscribedEvents() {
-		return this._subscribedEvents;
-	}
-};
-
-//#endregion
-//#region src/subscribers/SubscriberBuilder.ts
-var SubscriberBuilder = class {
-	_subscribedEvents = [];
-	_timeout;
-	outputSchema;
-	_services = [];
-	/** The construct ids `.dependsOn()` named — what the manifest records. */
-	_constructs = [];
-	_logger = __geekmidas_logger_console.DEFAULT_LOGGER;
-	_publisher;
-	_topicName;
-	constructor() {
-		this._timeout = 3e4;
-	}
-	/**
-	* Bind this subscriber to a {@link Topic} — the preferred way to type and wire
-	* a fan-out consumer. It supplies the subscribable event types (and their
-	* payloads) from the topic's contract and records the binding for the manifest,
-	* so infra wires the SNS subscription.
-	*
-	* Prefer this over typing via a hand-written publisher service: a consumer does
-	* not publish, so binding a topic does *not* require the topic's publisher
-	* connection string (least privilege). Use `.publisher(...)` only when the
-	* subscriber actually publishes follow-up events.
-	*/
-	topic(topic) {
-		return require_clone.cloneWith(this, { _topicName: topic.name });
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_SubscriberBuilder = require("../SubscriberBuilder-D_owVoHo.cjs");
+const require_runSubscriber = require("../runSubscriber-D8nLXIv1.cjs");
+let _geekmidas_events = require("@geekmidas/events");
+let _geekmidas_errors = require("@geekmidas/errors");
+let _geekmidas_services = require("@geekmidas/services");
+let _geekmidas_events_sns = require("@geekmidas/events/sns");
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is read as the Lambda event SNS would have invoked a
+* function with, and run through the same parsing, services and handler as the
+* Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+* server serving this route has no reason to install `@middy/core`.
+*/
+var SnsPushSubscriberAdaptor = class {
+	envParser;
+	subscriber;
+	options;
+	constructor(envParser, subscriber, options) {
+		this.envParser = envParser;
+		this.subscriber = subscriber;
+		this.options = options;
 	}
-	timeout(timeout) {
-		return require_clone.cloneWith(this, { _timeout: timeout });
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await (0, _geekmidas_events_sns.verifySnsMessage)(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				err: error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await (0, _geekmidas_events_sns.confirmSnsSubscription)(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.notify(message);
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
 	}
-	output(schema) {
-		return require_clone.cloneWith(this, { outputSchema: schema });
+	async notify(message) {
+		const requestId = message.MessageId;
+		const logger = this.subscriber.logger.child({ requestId });
+		await (0, _geekmidas_services.runWithRequestContext)({
+			logger,
+			requestId,
+			startTime: Date.now(),
+			operation: `subscriber ${this.subscriber.topicName ?? "sns"}`
+		}, () => (0, _geekmidas_events.consumeTraced)({
+			system: "aws_sns",
+			destination: this.subscriber.topicName ?? message.TopicArn.split(":").pop() ?? message.TopicArn,
+			type: message.MessageAttributes?.type?.Value,
+			messageId: message.MessageId
+		}, (0, _geekmidas_events.carrierFromAttributes)(message.MessageAttributes), () => this.run(message, logger)));
 	}
-	/**
-	* Depend on constructs — a database, a bucket, a mail sender, a queue, a
-	* topic.
-	*
-	* It records the edge and dissolves each construct's client into the
-	* handler's service record under the construct's own id, so
-	* `.dependsOn([uploads])` is what makes `services.uploads` exist and type.
-	*
-	* Constructs only. A `Service` does not match the shape, which is what keeps
-	* env sniffing confined to `.services()` and the explicit lift.
-	*/
-	dependsOn(constructs) {
-		const services = require_construct_interface.servicesOf(constructs);
-		return require_clone.cloneWith(this, {
-			_services: [...this._services, ...services],
-			_constructs: require_construct_interface.idsOf(constructs, this._constructs)
-		});
-	}
-	services(services) {
-		return require_clone.cloneWith(this, { _services: [...this._services, ...services] });
-	}
-	logger(logger) {
-		return require_clone.cloneWith(this, { _logger: logger });
-	}
-	publisher(publisher) {
-		return require_clone.cloneWith(this, { _publisher: publisher });
-	}
-	subscribe(event) {
-		const eventsToAdd = Array.isArray(event) ? event : [event];
-		return require_clone.cloneWith(this, { _subscribedEvents: [...this._subscribedEvents, ...eventsToAdd] });
-	}
-	handle(fn) {
-		const subscriber = new Subscriber(fn, this._timeout, this._subscribedEvents, this.outputSchema, this._services, this._logger, this._publisher, this._topicName, this._constructs);
-		return subscriber;
+	async run(message, logger) {
+		try {
+			const { services, db } = await require_runSubscriber.subscriberContext(this.subscriber, this.envParser);
+			const events = require_runSubscriber.subscribedEvents(this.subscriber, (0, _geekmidas_events_sns.toSnsEvent)(message), logger);
+			await require_runSubscriber.runSubscriber(this.subscriber, {
+				events,
+				services,
+				logger,
+				db
+			});
+		} catch (error) {
+			logger.error(error, "Error processing subscriber");
+			throw (0, _geekmidas_errors.wrapError)(error);
+		}
 	}
 };
-
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
 //#endregion
-//#region src/subscribers/index.ts
-const s = new SubscriberBuilder();
+exports.SnsPushSubscriberAdaptor = SnsPushSubscriberAdaptor;
+exports.Subscriber = require_SubscriberBuilder.Subscriber;
+exports.SubscriberBuilder = require_SubscriberBuilder.SubscriberBuilder;
 
-//#endregion
-exports.Subscriber = Subscriber;
-exports.SubscriberBuilder = SubscriberBuilder;
-exports.s = s;
 //# sourceMappingURL=index.cjs.map

package/dist/subscribers/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["Construct","obj: any","ConstructType","handler: SubscriberHandler<\n\t\t\tTEventPublisher,\n\t\t\tTSubscribedEvents,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tOutSchema\n\t\t>","timeout: number","_subscribedEvents?: TSubscribedEvents","outputSchema?: OutSchema","services: TServices","logger: TLogger","DEFAULT_LOGGER","publisherService?: Service<\n\t\t\tTEventPublisherServiceName,\n\t\t\tTEventPublisher\n\t\t>","topicName?: string","constructs: string[]","DEFAULT_LOGGER","topic: Topic<TName, TEvents>","timeout: number","schema: T","constructs: T","services: T","logger: T","publisher: Service<TName, T>","event: TEvent","fn: SubscriberHandler<\n\t\t\tTEventPublisher,\n\t\t\tTSubscribedEvents,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tOutSchema\n\t\t>"],"sources":["../../src/subscribers/Subscriber.ts","../../src/subscribers/SubscriberBuilder.ts","../../src/subscribers/index.ts"],"sourcesContent":["import type {\n\tEventPublisher,\n\tExtractPublisherMessage,\n} from '@geekmidas/events';\nimport type { Logger } from '@geekmidas/logger';\nimport { DEFAULT_LOGGER } from '@geekmidas/logger/console';\nimport type { InferStandardSchema } from '@geekmidas/schema';\nimport type { Service, ServiceRecord } from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport { Construct, ConstructType } from '../Construct';\n\n// Helper type to extract payload types for subscribed events\ntype ExtractEventPayloads<\n\tTPublisher extends EventPublisher<any> | undefined,\n\tTEventTypes extends any[],\n> = TPublisher extends EventPublisher<any>\n\t? Extract<ExtractPublisherMessage<TPublisher>, { type: TEventTypes[number] }>\n\t: never;\n\nexport class Subscriber<\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n\tOutSchema extends StandardSchemaV1 | undefined = undefined,\n\tTEventPublisher extends EventPublisher<any> | undefined = undefined,\n\tTEventPublisherServiceName extends string = string,\n\tTSubscribedEvents extends\n\t\tExtractPublisherMessage<TEventPublisher>['type'][] = ExtractPublisherMessage<TEventPublisher>['type'][],\n> extends Construct<\n\tTLogger,\n\tTEventPublisherServiceName,\n\tTEventPublisher,\n\tOutSchema,\n\tTServices\n> {\n\t__IS_SUBSCRIBER__ = true;\n\n\tstatic isSubscriber(\n\t\tobj: any,\n\t): obj is Subscriber<any, any, any, any, any, any> {\n\t\treturn Boolean(\n\t\t\tobj &&\n\t\t\t\tobj.__IS_SUBSCRIBER__ === true &&\n\t\t\t\tobj.type === ConstructType.Subscriber,\n\t\t);\n\t}\n\n\tconstructor(\n\t\tpublic readonly handler: SubscriberHandler<\n\t\t\tTEventPublisher,\n\t\t\tTSubscribedEvents,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tOutSchema\n\t\t>,\n\t\tpublic override readonly timeout: number = 30000,\n\t\tprotected _subscribedEvents?: TSubscribedEvents,\n\t\tpublic override readonly outputSchema?: OutSchema,\n\t\tpublic override readonly services: TServices = [] as unknown as TServices,\n\t\tpublic override readonly logger: TLogger = DEFAULT_LOGGER as TLogger,\n\t\tpublic override readonly publisherService?: Service<\n\t\t\tTEventPublisherServiceName,\n\t\t\tTEventPublisher\n\t\t>,\n\t\t/**\n\t\t * The name of the {@link Topic} this subscriber binds to (via\n\t\t * `s.topic(topic)`), recorded for the manifest so infra wires the SNS\n\t\t * subscription. Undefined when the subscriber's events are typed from a\n\t\t * (hand-written) publisher instead.\n\t\t */\n\t\tpublic readonly topicName?: string,\n\t\t/**\n\t\t * The construct ids `.dependsOn()` named — last, so no existing positional\n\t\t * argument moves.\n\t\t */\n\t\tconstructs: string[] = [],\n\t) {\n\t\tsuper(\n\t\t\tConstructType.Subscriber,\n\t\t\tlogger,\n\t\t\tservices,\n\t\t\t[],\n\t\t\tpublisherService,\n\t\t\toutputSchema,\n\t\t\ttimeout,\n\t\t\tundefined, // memorySize\n\t\t\tundefined, // auditorStorageService\n\t\t\tconstructs,\n\t\t);\n\t}\n\n\tget subscribedEvents(): TSubscribedEvents | undefined {\n\t\treturn this._subscribedEvents;\n\t}\n}\n\n// Handler type for subscribers that receives an array of events\nexport type SubscriberHandler<\n\tTEventPublisher extends EventPublisher<any> | undefined,\n\tTSubscribedEvents extends ExtractPublisherMessage<TEventPublisher>['type'][],\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n\tOutSchema extends StandardSchemaV1 | undefined = undefined,\n> = (\n\tctx: SubscriberContext<\n\t\tTEventPublisher,\n\t\tTSubscribedEvents,\n\t\tTServices,\n\t\tTLogger\n\t>,\n) => OutSchema extends StandardSchemaV1\n\t? InferStandardSchema<OutSchema> | Promise<InferStandardSchema<OutSchema>>\n\t: any | Promise<any>;\n\n// Context type for subscriber handlers\nexport type SubscriberContext<\n\tTEventPublisher extends EventPublisher<any> | undefined,\n\tTSubscribedEvents extends ExtractPublisherMessage<TEventPublisher>['type'][],\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n> = {\n\tevents: ExtractEventPayloads<TEventPublisher, TSubscribedEvents>[];\n\tservices: ServiceRecord<TServices>;\n\tlogger: TLogger;\n};\n","import type {\n\tEventPublisher,\n\tExtractPublisherMessage,\n} from '@geekmidas/events';\nimport type { Logger } from '@geekmidas/logger';\nimport { DEFAULT_LOGGER } from '@geekmidas/logger/console';\nimport type { Service } from '@geekmidas/services';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport { cloneWith } from '../clone';\nimport {\n\ttype Consumable,\n\tidsOf,\n\ttype ServicesOf,\n\tservicesOf,\n} from '../construct-interface';\nimport type { Topic, TopicEvents, TopicMessage } from '../topic/Topic';\nimport { Subscriber, type SubscriberHandler } from './Subscriber';\n\nexport class SubscriberBuilder<\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n\tOutSchema extends StandardSchemaV1 | undefined = undefined,\n\tTEventPublisher extends EventPublisher<any> | undefined = undefined,\n\tTEventPublisherServiceName extends string = string,\n\tTSubscribedEvents extends any[] = [],\n> {\n\tprivate _subscribedEvents: TSubscribedEvents = [] as any;\n\tprivate _timeout?: number;\n\tprivate outputSchema?: OutSchema;\n\tprivate _services: TServices = [] as Service[] as TServices;\n\t/** The construct ids `.dependsOn()` named — what the manifest records. */\n\tpublic _constructs: string[] = [];\n\tprivate _logger: TLogger = DEFAULT_LOGGER;\n\tprivate _publisher?: Service<TEventPublisherServiceName, TEventPublisher>;\n\tprivate _topicName?: string;\n\n\tconstructor() {\n\t\tthis._timeout = 30000; // Default timeout\n\t}\n\n\t/**\n\t * Bind this subscriber to a {@link Topic} — the preferred way to type and wire\n\t * a fan-out consumer. It supplies the subscribable event types (and their\n\t * payloads) from the topic's contract and records the binding for the manifest,\n\t * so infra wires the SNS subscription.\n\t *\n\t * Prefer this over typing via a hand-written publisher service: a consumer does\n\t * not publish, so binding a topic does *not* require the topic's publisher\n\t * connection string (least privilege). Use `.publisher(...)` only when the\n\t * subscriber actually publishes follow-up events.\n\t */\n\ttopic<TName extends string, TEvents extends TopicEvents>(\n\t\ttopic: Topic<TName, TEvents>,\n\t): SubscriberBuilder<\n\t\tTServices,\n\t\tTLogger,\n\t\tOutSchema,\n\t\tEventPublisher<TopicMessage<TEvents>>,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\treturn cloneWith(this, {\n\t\t\t_topicName: topic.name,\n\t\t}) as unknown as SubscriberBuilder<\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tOutSchema,\n\t\t\tEventPublisher<TopicMessage<TEvents>>,\n\t\t\tTEventPublisherServiceName,\n\t\t\tTSubscribedEvents\n\t\t>;\n\t}\n\n\ttimeout(timeout: number): this {\n\t\treturn cloneWith(this, { _timeout: timeout });\n\t}\n\n\toutput<T extends StandardSchemaV1>(\n\t\tschema: T,\n\t): SubscriberBuilder<\n\t\tTServices,\n\t\tTLogger,\n\t\tT,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\treturn cloneWith(this, {\n\t\t\toutputSchema: schema as unknown as OutSchema,\n\t\t}) as any;\n\t}\n\n\t/**\n\t * Depend on constructs — a database, a bucket, a mail sender, a queue, a\n\t * topic.\n\t *\n\t * It records the edge and dissolves each construct's client into the\n\t * handler's service record under the construct's own id, so\n\t * `.dependsOn([uploads])` is what makes `services.uploads` exist and type.\n\t *\n\t * Constructs only. A `Service` does not match the shape, which is what keeps\n\t * env sniffing confined to `.services()` and the explicit lift.\n\t */\n\tdependsOn<const T extends readonly Consumable[]>(\n\t\tconstructs: T,\n\t): SubscriberBuilder<\n\t\t[...TServices, ...ServicesOf<T>],\n\t\tTLogger,\n\t\tOutSchema,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\t// Both halves of the edge, from one call and one clone: the services the\n\t\t// handler runs with, and the ids the manifest records. Recording them\n\t\t// separately is what let them drift apart.\n\t\t//\n\t\t// `servicesOf` is the half that validates, so it runs first — recording\n\t\t// ids ahead of it left a caught `NotAConstruct` with `undefined` already\n\t\t// on a `string[]`.\n\t\tconst services = servicesOf(constructs) as unknown as Service[];\n\n\t\treturn cloneWith(this, {\n\t\t\t_services: [...this._services, ...services],\n\t\t\t_constructs: idsOf(constructs, this._constructs),\n\t\t}) as unknown as SubscriberBuilder<\n\t\t\t[...TServices, ...ServicesOf<T>],\n\t\t\tTLogger,\n\t\t\tOutSchema,\n\t\t\tTEventPublisher,\n\t\t\tTEventPublisherServiceName,\n\t\t\tTSubscribedEvents\n\t\t>;\n\t}\n\n\tservices<T extends Service[]>(\n\t\tservices: T,\n\t): SubscriberBuilder<\n\t\t[...TServices, ...T],\n\t\tTLogger,\n\t\tOutSchema,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\treturn cloneWith(this, {\n\t\t\t_services: [...this._services, ...services] as any,\n\t\t}) as any;\n\t}\n\n\tlogger<T extends Logger>(\n\t\tlogger: T,\n\t): SubscriberBuilder<\n\t\tTServices,\n\t\tT,\n\t\tOutSchema,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\treturn cloneWith(this, { _logger: logger as unknown as TLogger }) as any;\n\t}\n\n\tpublisher<T extends EventPublisher<any>, TName extends string>(\n\t\tpublisher: Service<TName, T>,\n\t): SubscriberBuilder<\n\t\tTServices,\n\t\tTLogger,\n\t\tOutSchema,\n\t\tT,\n\t\tTName,\n\t\tTSubscribedEvents\n\t> {\n\t\treturn cloneWith(this, { _publisher: publisher as any }) as any;\n\t}\n\n\tsubscribe<\n\t\tTEvent extends TEventPublisher extends EventPublisher<any>\n\t\t\t?\n\t\t\t\t\t| ExtractPublisherMessage<TEventPublisher>['type']\n\t\t\t\t\t| ExtractPublisherMessage<TEventPublisher>['type'][]\n\t\t\t: never,\n\t>(\n\t\tevent: TEvent,\n\t): SubscriberBuilder<\n\t\tTServices,\n\t\tTLogger,\n\t\tOutSchema,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTEvent extends any[]\n\t\t\t? [...TSubscribedEvents, ...TEvent]\n\t\t\t: [...TSubscribedEvents, TEvent]\n\t> {\n\t\tconst eventsToAdd = Array.isArray(event) ? event : [event];\n\t\treturn cloneWith(this, {\n\t\t\t_subscribedEvents: [...this._subscribedEvents, ...eventsToAdd] as any,\n\t\t}) as any;\n\t}\n\n\thandle(\n\t\tfn: SubscriberHandler<\n\t\t\tTEventPublisher,\n\t\t\tTSubscribedEvents,\n\t\t\tTServices,\n\t\t\tTLogger,\n\t\t\tOutSchema\n\t\t>,\n\t): Subscriber<\n\t\tTServices,\n\t\tTLogger,\n\t\tOutSchema,\n\t\tTEventPublisher,\n\t\tTEventPublisherServiceName,\n\t\tTSubscribedEvents\n\t> {\n\t\tconst subscriber = new Subscriber(\n\t\t\tfn,\n\t\t\tthis._timeout,\n\t\t\tthis._subscribedEvents,\n\t\t\tthis.outputSchema,\n\t\t\tthis._services,\n\t\t\tthis._logger,\n\t\t\tthis._publisher,\n\t\t\tthis._topicName,\n\t\t\tthis._constructs,\n\t\t);\n\n\t\t// No reset: `.handle()` reads this builder and leaves it alone, so a\n\t\t// configured base stays usable for the next subscriber.\n\t\treturn subscriber;\n\t}\n}\n","import { SubscriberBuilder } from './SubscriberBuilder';\n\nexport { Subscriber } from './Subscriber';\nexport { SubscriberBuilder };\n\nexport const s = new SubscriberBuilder();\n"],"mappings":";;;;;;;AAmBA,IAAa,aAAb,cAQUA,4BAMR;CACD,oBAAoB;CAEpB,OAAO,aACNC,KACkD;AAClD,SAAO,QACN,OACC,IAAI,sBAAsB,QAC1B,IAAI,SAASC,gCAAc,WAC5B;CACD;CAED,YACiBC,SAOSC,UAAkB,KACjCC,mBACeC,cACAC,WAAsB,CAAE,GACxBC,SAAkBC,2CAClBC,kBAUTC,WAKhBC,aAAuB,CAAE,GACxB;AACD,QACCV,gCAAc,YACd,QACA,UACA,CAAE,GACF,kBACA,cACA,yBAGA,WACA;EAxCe;EAOS;EACf;EACe;EACA;EACA;EACA;EAUT;CAmBhB;CAED,IAAI,mBAAkD;AACrD,SAAO,KAAK;CACZ;AACD;;;;AC3ED,IAAa,oBAAb,MAOE;CACD,AAAQ,oBAAuC,CAAE;CACjD,AAAQ;CACR,AAAQ;CACR,AAAQ,YAAuB,CAAE;;CAEjC,AAAO,cAAwB,CAAE;CACjC,AAAQ,UAAmBW;CAC3B,AAAQ;CACR,AAAQ;CAER,cAAc;AACb,OAAK,WAAW;CAChB;;;;;;;;;;;;CAaD,MACCC,OAQC;AACD,SAAO,wBAAU,MAAM,EACtB,YAAY,MAAM,KAClB,EAAC;CAQF;CAED,QAAQC,SAAuB;AAC9B,SAAO,wBAAU,MAAM,EAAE,UAAU,QAAS,EAAC;CAC7C;CAED,OACCC,QAQC;AACD,SAAO,wBAAU,MAAM,EACtB,cAAc,OACd,EAAC;CACF;;;;;;;;;;;;CAaD,UACCC,YAQC;EAQD,MAAM,WAAW,uCAAW,WAAW;AAEvC,SAAO,wBAAU,MAAM;GACtB,WAAW,CAAC,GAAG,KAAK,WAAW,GAAG,QAAS;GAC3C,aAAa,kCAAM,YAAY,KAAK,YAAY;EAChD,EAAC;CAQF;CAED,SACCC,UAQC;AACD,SAAO,wBAAU,MAAM,EACtB,WAAW,CAAC,GAAG,KAAK,WAAW,GAAG,QAAS,EAC3C,EAAC;CACF;CAED,OACCC,QAQC;AACD,SAAO,wBAAU,MAAM,EAAE,SAAS,OAA8B,EAAC;CACjE;CAED,UACCC,WAQC;AACD,SAAO,wBAAU,MAAM,EAAE,YAAY,UAAkB,EAAC;CACxD;CAED,UAOCC,OAUC;EACD,MAAM,cAAc,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,KAAM;AAC1D,SAAO,wBAAU,MAAM,EACtB,mBAAmB,CAAC,GAAG,KAAK,mBAAmB,GAAG,WAAY,EAC9D,EAAC;CACF;CAED,OACCC,IAcC;EACD,MAAM,aAAa,IAAI,WACtB,IACA,KAAK,UACL,KAAK,mBACL,KAAK,cACL,KAAK,WACL,KAAK,SACL,KAAK,YACL,KAAK,YACL,KAAK;AAKN,SAAO;CACP;AACD;;;;ACnOD,MAAa,IAAI,IAAI"}
+{"version":3,"file":"index.cjs","names":["verifySnsMessage","confirmSnsSubscription","runWithRequestContext","consumeTraced","carrierFromAttributes","subscriberContext","subscribedEvents","toSnsEvent","runSubscriber","wrapError"],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"sourcesContent":["import type { EnvironmentParser } from '@geekmidas/envkit';\nimport { wrapError } from '@geekmidas/errors';\nimport { carrierFromAttributes, consumeTraced } from '@geekmidas/events';\nimport {\n\tconfirmSnsSubscription,\n\ttype SnsHttpMessage,\n\ttoSnsEvent,\n\tverifySnsMessage,\n} from '@geekmidas/events/sns';\nimport { runWithRequestContext } from '@geekmidas/services';\nimport {\n\trunSubscriber,\n\tsubscribedEvents,\n\tsubscriberContext,\n} from './runSubscriber';\nimport type { Subscriber } from './Subscriber';\n\nexport interface SnsPushOptions {\n\t/** The topic this subscriber is subscribed to. Anything else is refused. */\n\ttopicArn: string;\n\t/**\n\t * Verify each message's signature. Off only against an emulator, which\n\t * signs nothing — decided by the connection string's endpoint, never by\n\t * anything the request says about itself.\n\t */\n\tverify: boolean;\n\t/**\n\t * The emulator's address, as this server was configured with it. An\n\t * emulator names itself in `SubscribeURL` by the port it listens on inside\n\t * its container, which is not the port published to the host — so against\n\t * one, the confirmation is sent here instead. From configuration, never\n\t * from the request.\n\t */\n\temulatorEndpoint?: string;\n}\n\n/** What to answer SNS with. A non-2xx tells SNS to retry. */\nexport interface SnsPushResponse {\n\tstatus: 200 | 400 | 403 | 500;\n\tbody: { status: string; error?: string };\n}\n\n/**\n * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a\n * poller.\n *\n * The notification is read as the Lambda event SNS would have invoked a\n * function with, and run through the same parsing, services and handler as the\n * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a\n * server serving this route has no reason to install `@middy/core`.\n */\nexport class SnsPushSubscriberAdaptor {\n\tconstructor(\n\t\tprivate readonly envParser: EnvironmentParser<{}>,\n\t\treadonly subscriber: Subscriber<any, any, any, any, any, any, any>,\n\t\tprivate readonly options: SnsPushOptions,\n\t) {}\n\n\tasync handle(body: unknown): Promise<SnsPushResponse> {\n\t\tconst message = body as SnsHttpMessage;\n\t\tif (typeof message?.Type !== 'string' || !message.TopicArn) {\n\t\t\treturn refuse(400, 'not an SNS message');\n\t\t}\n\t\t// Checked before the signature: a genuine message for another topic is\n\t\t// still not this subscriber's to confirm or to handle.\n\t\tif (message.TopicArn !== this.options.topicArn) {\n\t\t\treturn refuse(403, `not subscribed to ${message.TopicArn}`);\n\t\t}\n\n\t\tif (this.options.verify) {\n\t\t\ttry {\n\t\t\t\tawait verifySnsMessage(message);\n\t\t\t} catch (error) {\n\t\t\t\tthis.subscriber.logger.warn(\n\t\t\t\t\t{ err: error, topicArn: message.TopicArn },\n\t\t\t\t\t'Refused an SNS message that did not verify',\n\t\t\t\t);\n\t\t\t\treturn refuse(403, (error as Error).name);\n\t\t\t}\n\t\t}\n\n\t\tswitch (message.Type) {\n\t\t\tcase 'SubscriptionConfirmation':\n\t\t\t\tawait confirmSnsSubscription(\n\t\t\t\t\tthis.options.emulatorEndpoint && message.SubscribeURL\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t...message,\n\t\t\t\t\t\t\t\tSubscribeURL: throughEndpoint(\n\t\t\t\t\t\t\t\t\tmessage.SubscribeURL,\n\t\t\t\t\t\t\t\t\tthis.options.emulatorEndpoint,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: message,\n\t\t\t\t);\n\t\t\t\tthis.subscriber.logger.info(\n\t\t\t\t\t{ topicArn: message.TopicArn },\n\t\t\t\t\t'Confirmed SNS subscription',\n\t\t\t\t);\n\t\t\t\treturn { status: 200, body: { status: 'confirmed' } };\n\t\t\tcase 'Notification':\n\t\t\t\ttry {\n\t\t\t\t\tawait this.notify(message);\n\t\t\t\t\treturn { status: 200, body: { status: 'ok' } };\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Already logged. A 500 makes SNS retry, which is the point of\n\t\t\t\t\t// answering at all.\n\t\t\t\t\treturn refuse(500, (error as Error).name);\n\t\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn { status: 200, body: { status: 'ignored' } };\n\t\t}\n\t}\n\n\tprivate async notify(message: SnsHttpMessage): Promise<void> {\n\t\tconst requestId = message.MessageId;\n\t\tconst logger = this.subscriber.logger.child({ requestId });\n\n\t\tawait runWithRequestContext(\n\t\t\t{\n\t\t\t\tlogger,\n\t\t\t\trequestId,\n\t\t\t\tstartTime: Date.now(),\n\t\t\t\toperation: `subscriber ${this.subscriber.topicName ?? 'sns'}`,\n\t\t\t},\n\t\t\t// A CONSUMER span, child of the publisher's: SNS hands the trace\n\t\t\t// context on in the message attributes it was published with.\n\t\t\t() =>\n\t\t\t\tconsumeTraced(\n\t\t\t\t\t{\n\t\t\t\t\t\tsystem: 'aws_sns',\n\t\t\t\t\t\tdestination:\n\t\t\t\t\t\t\tthis.subscriber.topicName ??\n\t\t\t\t\t\t\tmessage.TopicArn.split(':').pop() ??\n\t\t\t\t\t\t\tmessage.TopicArn,\n\t\t\t\t\t\ttype: message.MessageAttributes?.type?.Value,\n\t\t\t\t\t\tmessageId: message.MessageId,\n\t\t\t\t\t},\n\t\t\t\t\tcarrierFromAttributes(message.MessageAttributes),\n\t\t\t\t\t() => this.run(message, logger),\n\t\t\t\t),\n\t\t);\n\t}\n\n\tprivate async run(\n\t\tmessage: SnsHttpMessage,\n\t\tlogger: Subscriber<any, any, any, any, any, any, any>['logger'],\n\t): Promise<void> {\n\t\ttry {\n\t\t\tconst { services, db } = await subscriberContext(\n\t\t\t\tthis.subscriber,\n\t\t\t\tthis.envParser,\n\t\t\t);\n\t\t\tconst events = subscribedEvents(\n\t\t\t\tthis.subscriber,\n\t\t\t\ttoSnsEvent(message),\n\t\t\t\tlogger,\n\t\t\t);\n\t\t\tawait runSubscriber(this.subscriber, {\n\t\t\t\tevents,\n\t\t\t\tservices,\n\t\t\t\tlogger,\n\t\t\t\tdb,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tlogger.error(error as object, 'Error processing subscriber');\n\t\t\tthrow wrapError(error);\n\t\t}\n\t}\n}\n\n/** `url`, sent to `endpoint`'s origin instead of its own. */\nfunction throughEndpoint(url: string, endpoint: string): string {\n\tconst target = new URL(url);\n\tconst origin = new URL(endpoint);\n\ttarget.protocol = origin.protocol;\n\ttarget.host = origin.host;\n\treturn target.toString();\n}\n\nfunction refuse(\n\tstatus: SnsPushResponse['status'],\n\terror: string,\n): SnsPushResponse {\n\treturn { status, body: { status: 'refused', error } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAmDA,IAAa,2BAAb,MAAsC;CAEnB;CACR;CACQ;CAHlB,YACC,WACA,YACA,SACC;EAHgB,KAAA,YAAA;EACR,KAAA,aAAA;EACQ,KAAA,UAAA;CACf;CAEH,MAAM,OAAO,MAAyC;EACrD,MAAM,UAAU;EAChB,IAAI,OAAO,SAAS,SAAS,YAAY,CAAC,QAAQ,UACjD,OAAO,OAAO,KAAK,oBAAoB;EAIxC,IAAI,QAAQ,aAAa,KAAK,QAAQ,UACrC,OAAO,OAAO,KAAK,qBAAqB,QAAQ,UAAU;EAG3D,IAAI,KAAK,QAAQ,QAChB,IAAI;GACH,OAAA,GAAMA,sBAAAA,iBAAAA,CAAiB,OAAO;EAC/B,SAAS,OAAO;GACf,KAAK,WAAW,OAAO,KACtB;IAAE,KAAK;IAAO,UAAU,QAAQ;GAAS,GACzC,4CACD;GACA,OAAO,OAAO,KAAM,MAAgB,IAAI;EACzC;EAGD,QAAQ,QAAQ,MAAhB;GACC,KAAK;IACJ,OAAA,GAAMC,sBAAAA,uBAAAA,CACL,KAAK,QAAQ,oBAAoB,QAAQ,eACtC;KACA,GAAG;KACH,cAAc,gBACb,QAAQ,cACR,KAAK,QAAQ,gBACd;IACD,IACC,OACJ;IACA,KAAK,WAAW,OAAO,KACtB,EAAE,UAAU,QAAQ,SAAS,GAC7B,4BACD;IACA,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,YAAY;IAAE;GACrD,KAAK,gBACJ,IAAI;IACH,MAAM,KAAK,OAAO,OAAO;IACzB,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,KAAK;IAAE;GAC9C,SAAS,OAAO;IAGf,OAAO,OAAO,KAAM,MAAgB,IAAI;GACzC;GACD,SACC,OAAO;IAAE,QAAQ;IAAK,MAAM,EAAE,QAAQ,UAAU;GAAE;EACpD;CACD;CAEA,MAAc,OAAO,SAAwC;EAC5D,MAAM,YAAY,QAAQ;EAC1B,MAAM,SAAS,KAAK,WAAW,OAAO,MAAM,EAAE,UAAU,CAAC;EAEzD,OAAA,GAAMC,oBAAAA,sBAAAA,CACL;GACC;GACA;GACA,WAAW,KAAK,IAAI;GACpB,WAAW,cAAc,KAAK,WAAW,aAAa;EACvD,UAAA,GAICC,kBAAAA,cAAAA,CACC;GACC,QAAQ;GACR,aACC,KAAK,WAAW,aAChB,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC,IAAI,KAChC,QAAQ;GACT,MAAM,QAAQ,mBAAmB,MAAM;GACvC,WAAW,QAAQ;EACpB,IAAA,GACAC,kBAAAA,sBAAAA,CAAsB,QAAQ,iBAAiB,SACzC,KAAK,IAAI,SAAS,MAAM,CAC/B,CACF;CACD;CAEA,MAAc,IACb,SACA,QACgB;EAChB,IAAI;GACH,MAAM,EAAE,UAAU,OAAO,MAAMC,sBAAAA,kBAC9B,KAAK,YACL,KAAK,SACN;GACA,MAAM,SAASC,sBAAAA,iBACd,KAAK,aAAA,GACLC,sBAAAA,WAAAA,CAAW,OAAO,GAClB,MACD;GACA,MAAMC,sBAAAA,cAAc,KAAK,YAAY;IACpC;IACA;IACA;IACA;GACD,CAAC;EACF,SAAS,OAAO;GACf,OAAO,MAAM,OAAiB,6BAA6B;GAC3D,OAAA,GAAMC,kBAAAA,UAAAA,CAAU,KAAK;EACtB;CACD;AACD;;AAGA,SAAS,gBAAgB,KAAa,UAA0B;CAC/D,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,MAAM,SAAS,IAAI,IAAI,QAAQ;CAC/B,OAAO,WAAW,OAAO;CACzB,OAAO,OAAO,OAAO;CACrB,OAAO,OAAO,SAAS;AACxB;AAEA,SAAS,OACR,QACA,OACkB;CAClB,OAAO;EAAE;EAAQ,MAAM;GAAE,QAAQ;GAAW;EAAM;CAAE;AACrD"}

package/dist/subscribers/index.d.cts

@@ -1,63 +1,51 @@
-import "../Construct-WhCXIOPV.cjs";
-import { Consumable, ServicesOf } from "../construct-interface-D2nNkHUN.cjs";
-import { Subscriber, SubscriberHandler } from "../Subscriber-DVQowdyj.cjs";
-import { Topic, TopicEvents, TopicMessage } from "../Topic-Ohx9dvWr.cjs";
-import { EventPublisher, ExtractPublisherMessage } from "@geekmidas/events";
-import * as _geekmidas_logger19 from "@geekmidas/logger";
-import { Logger } from "@geekmidas/logger";
-import { Service } from "@geekmidas/services";
-import { StandardSchemaV1 } from "@standard-schema/spec";
-
-//#region src/subscribers/SubscriberBuilder.d.ts
-declare class SubscriberBuilder<TServices extends Service[] = [], TLogger extends Logger = Logger, OutSchema extends StandardSchemaV1 | undefined = undefined, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TSubscribedEvents extends any[] = []> {
-  private _subscribedEvents;
-  private _timeout?;
-  private outputSchema?;
-  private _services;
-  /** The construct ids `.dependsOn()` named — what the manifest records. */
-  _constructs: string[];
-  private _logger;
-  private _publisher?;
-  private _topicName?;
-  constructor();
+import { t as Subscriber } from "../Subscriber-Bpp02cGr.cjs";
+import { t as SubscriberBuilder } from "../SubscriberBuilder-g3fAVWgs.cjs";
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
   /**
-   * Bind this subscriber to a {@link Topic} — the preferred way to type and wire
-   * a fan-out consumer. It supplies the subscribable event types (and their
-   * payloads) from the topic's contract and records the binding for the manifest,
-   * so infra wires the SNS subscription.
-   *
-   * Prefer this over typing via a hand-written publisher service: a consumer does
-   * not publish, so binding a topic does *not* require the topic's publisher
-   * connection string (least privilege). Use `.publisher(...)` only when the
-   * subscriber actually publishes follow-up events.
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
    */
-  topic<TName extends string, TEvents extends TopicEvents>(topic: Topic<TName, TEvents>): SubscriberBuilder<TServices, TLogger, OutSchema, EventPublisher<TopicMessage<TEvents>>, TEventPublisherServiceName, TSubscribedEvents>;
-  timeout(timeout: number): this;
-  output<T extends StandardSchemaV1>(schema: T): SubscriberBuilder<TServices, TLogger, T, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
+  verify: boolean;
   /**
-   * Depend on constructs — a database, a bucket, a mail sender, a queue, a
-   * topic.
-   *
-   * It records the edge and dissolves each construct's client into the
-   * handler's service record under the construct's own id, so
-   * `.dependsOn([uploads])` is what makes `services.uploads` exist and type.
-   *
-   * Constructs only. A `Service` does not match the shape, which is what keeps
-   * env sniffing confined to `.services()` and the explicit lift.
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
    */
-  dependsOn<const T extends readonly Consumable[]>(constructs: T): SubscriberBuilder<[...TServices, ...ServicesOf<T>], TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  services<T extends Service[]>(services: T): SubscriberBuilder<[...TServices, ...T], TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  logger<T extends Logger>(logger: T): SubscriberBuilder<TServices, T, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  publisher<T extends EventPublisher<any>, TName extends string>(publisher: Service<TName, T>): SubscriberBuilder<TServices, TLogger, OutSchema, T, TName, TSubscribedEvents>;
-  subscribe<TEvent extends (TEventPublisher extends EventPublisher<any> ? ExtractPublisherMessage<TEventPublisher>['type'] | ExtractPublisherMessage<TEventPublisher>['type'][] : never)>(event: TEvent): SubscriberBuilder<TServices, TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TEvent extends any[] ? [...TSubscribedEvents, ...TEvent] : [...TSubscribedEvents, TEvent]>;
-  handle(fn: SubscriberHandler<TEventPublisher, TSubscribedEvents, TServices, TLogger, OutSchema>): Subscriber<TServices, TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+  private run;
 }
-//# sourceMappingURL=SubscriberBuilder.d.ts.map
-//#endregion
-//#region src/subscribers/index.d.ts
-declare const s: SubscriberBuilder<[], _geekmidas_logger19.Logger, undefined, undefined, string, []>;
-//# sourceMappingURL=index.d.ts.map
-
 //#endregion
-export { Subscriber, SubscriberBuilder, s };
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
 //# sourceMappingURL=index.d.cts.map

package/dist/subscribers/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/subscribers/SubscriberBuilder.ts","../../src/subscribers/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;cAkBa,oCACM,gCACF,SAAS,0BACP,kEACM;;;;EAJZ,QAAA,SAAA;EAAiB;EAAA,WACX,EAAA,MAAA,EAAA;EAAO,QACT,OAAA;EAAM,QAAG,UAAA;EAAM,QACb,UAAA;EAAgB,WACV,CAAA;EAAc;;;;;;;;;;;EAoCX,KAC1B,CAAA,cAAA,MAAA,EAAA,gBAR2C,WAQ3C,CAAA,CAAA,KAAA,EAPO,KAOP,CAPa,KAOb,EAPoB,OAOpB,CAAA,CAAA,EANE,iBAMF,CALA,SAKA,EAJA,OAIA,EAHA,SAGA,EAFA,cAEA,CAFe,YAEf,CAF4B,OAE5B,CAAA,CAAA,EADA,0BACA,EAAA,iBAAA,CAAA;EAAiB,OANf,CAAA,OAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAiB,MAwBH,CAAA,UAAA,gBAAA,CAAA,CAAA,MAAA,EACR,CADQ,CAAA,EAEd,iBAFc,CAGhB,SAHgB,EAIhB,OAJgB,EAKhB,CALgB,EAMhB,eANgB,EAOhB,0BAPgB,EAQhB,iBARgB,CAAA;EAAgB;;;;;;;;;;;EA6BnB,SAAgB,CAAA,gBAAA,SAHK,UAGL,EAAA,CAAA,CAAA,UAAA,EAFjB,CAEiB,CAAA,EAD3B,iBAC2B,CAAA,CAAX,GAAd,SAAc,EAClB,GADkB,UAClB,CAD6B,CAC7B,CAAA,CAAO,EAAP,OACA,EAAA,SAAA,EACA,eADA,EAEA,0BAFA,EAGA,iBAHA,CAAA;EAAS,QACT,CAAA,UA0BkB,OA1BlB,EAAA,CAAA,CAAA,QAAA,EA2BU,CA3BV,CAAA,EA4BE,iBA5BF,CAAA,CACA,GA4BI,SA5BJ,EACA,GA2BkB,CA3BlB,CAAiB,EA4BjB,OAlCE,EAmCF,SAnCE,EAoCF,eApCE,EAqCF,0BArCE,EAsCF,iBAtCE,CAAA;EAAiB,MA8BD,CAAA,UAeF,MAfE,CAAA,CAAA,MAAA,EAgBV,CAhBU,CAAA,EAiBhB,iBAjBgB,CAkBlB,SAlBkB,EAmBlB,CAnBkB,EAoBlB,SApBkB,EAqBlB,eArBkB,EAsBlB,0BAtBkB,EAuBlB,iBAvBkB,CAAA;EAAO,SACf,CAAA,UA2BS,cA3BT,CAAA,GAAA,CAAA,EAAA,cAAA,MAAA,CAAA,CAAA,SAAA,EA4BC,OA5BD,CA4BS,KA5BT,EA4BgB,CA5BhB,CAAA,CAAA,EA6BR,iBA7BQ,CA8BV,SA9BU,EA+BV,OA/BU,EAgCV,SAhCU,EAiCV,CAjCU,EAkCV,KAlCU,EAmCV,iBAnCU,CAAA;EAAC,SAEP,CAAA,gBAuCW,eAvCX,SAuCmC,cAvCnC,CAAA,GAAA,CAAA,GAyCC,uBAzCD,CAyCyB,eAzCzB,CAAA,CAAA,MAAA,CAAA,GA0CC,uBA1CD,CA0CyB,eA1CzB,CAAA,CAAA,MAAA,CAAA,EAAA,GAAA,KAAA,EAAA,CAAA,KAAA,EA6CG,MA7CH,CAAA,EA8CF,iBA9CE,CA+CJ,SA/CI,EAgDJ,OAhDI,EAiDJ,SAjDI,EAkDJ,eAlDI,EAmDJ,0BAnDI,EAoDJ,MApDI,SAAA,GAAA,EAAA,GAAA,CAAA,GAqDG,iBArDH,EAAA,GAqDyB,MArDzB,CAAA,GAAA,CAAA,GAsDG,iBAtDH,EAsDsB,MAtDtB,CAAA,CAAA;EAAS,MAAK,CAAA,EAAA,EA+Dd,iBA/Dc,CAgEjB,eAhEiB,EAiEjB,iBAjEiB,EAkEjB,SAlEiB,EAmEjB,OAnEiB,EAoEjB,SApEiB,CAAA,CAAA,EAsEhB,UAtEgB,CAuElB,SAvEkB,EAwElB,OAxEkB,EAyElB,SAzEkB,EA0ElB,eA1EkB,EA2ElB,0BA3EkB,EA4ElB,iBA5EkB,CAAA;;;;;cCrIP,GAAC,sBAA0B,mBAAA,CAA1B,MAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAiBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB;UA8BA"}

package/dist/subscribers/index.d.mts

@@ -1,63 +1,51 @@
-import "../Construct-B-xc0SE9.mjs";
-import { Consumable, ServicesOf } from "../construct-interface-BqwRNYA2.mjs";
-import { Subscriber, SubscriberHandler } from "../Subscriber-4rBJgDKI.mjs";
-import { Topic, TopicEvents, TopicMessage } from "../Topic-cmy2jOUy.mjs";
-import { Service } from "@geekmidas/services";
-import { EventPublisher, ExtractPublisherMessage } from "@geekmidas/events";
-import * as _geekmidas_logger19 from "@geekmidas/logger";
-import { Logger } from "@geekmidas/logger";
-import { StandardSchemaV1 } from "@standard-schema/spec";
-
-//#region src/subscribers/SubscriberBuilder.d.ts
-declare class SubscriberBuilder<TServices extends Service[] = [], TLogger extends Logger = Logger, OutSchema extends StandardSchemaV1 | undefined = undefined, TEventPublisher extends EventPublisher<any> | undefined = undefined, TEventPublisherServiceName extends string = string, TSubscribedEvents extends any[] = []> {
-  private _subscribedEvents;
-  private _timeout?;
-  private outputSchema?;
-  private _services;
-  /** The construct ids `.dependsOn()` named — what the manifest records. */
-  _constructs: string[];
-  private _logger;
-  private _publisher?;
-  private _topicName?;
-  constructor();
+import { t as Subscriber } from "../Subscriber-CtN9R48-.mjs";
+import { t as SubscriberBuilder } from "../SubscriberBuilder-CuCMFpYW.mjs";
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
   /**
-   * Bind this subscriber to a {@link Topic} — the preferred way to type and wire
-   * a fan-out consumer. It supplies the subscribable event types (and their
-   * payloads) from the topic's contract and records the binding for the manifest,
-   * so infra wires the SNS subscription.
-   *
-   * Prefer this over typing via a hand-written publisher service: a consumer does
-   * not publish, so binding a topic does *not* require the topic's publisher
-   * connection string (least privilege). Use `.publisher(...)` only when the
-   * subscriber actually publishes follow-up events.
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
    */
-  topic<TName extends string, TEvents extends TopicEvents>(topic: Topic<TName, TEvents>): SubscriberBuilder<TServices, TLogger, OutSchema, EventPublisher<TopicMessage<TEvents>>, TEventPublisherServiceName, TSubscribedEvents>;
-  timeout(timeout: number): this;
-  output<T extends StandardSchemaV1>(schema: T): SubscriberBuilder<TServices, TLogger, T, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
+  verify: boolean;
   /**
-   * Depend on constructs — a database, a bucket, a mail sender, a queue, a
-   * topic.
-   *
-   * It records the edge and dissolves each construct's client into the
-   * handler's service record under the construct's own id, so
-   * `.dependsOn([uploads])` is what makes `services.uploads` exist and type.
-   *
-   * Constructs only. A `Service` does not match the shape, which is what keeps
-   * env sniffing confined to `.services()` and the explicit lift.
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
    */
-  dependsOn<const T extends readonly Consumable[]>(constructs: T): SubscriberBuilder<[...TServices, ...ServicesOf<T>], TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  services<T extends Service[]>(services: T): SubscriberBuilder<[...TServices, ...T], TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  logger<T extends Logger>(logger: T): SubscriberBuilder<TServices, T, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
-  publisher<T extends EventPublisher<any>, TName extends string>(publisher: Service<TName, T>): SubscriberBuilder<TServices, TLogger, OutSchema, T, TName, TSubscribedEvents>;
-  subscribe<TEvent extends (TEventPublisher extends EventPublisher<any> ? ExtractPublisherMessage<TEventPublisher>['type'] | ExtractPublisherMessage<TEventPublisher>['type'][] : never)>(event: TEvent): SubscriberBuilder<TServices, TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TEvent extends any[] ? [...TSubscribedEvents, ...TEvent] : [...TSubscribedEvents, TEvent]>;
-  handle(fn: SubscriberHandler<TEventPublisher, TSubscribedEvents, TServices, TLogger, OutSchema>): Subscriber<TServices, TLogger, OutSchema, TEventPublisher, TEventPublisherServiceName, TSubscribedEvents>;
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+  private run;
 }
-//# sourceMappingURL=SubscriberBuilder.d.ts.map
-//#endregion
-//#region src/subscribers/index.d.ts
-declare const s: SubscriberBuilder<[], _geekmidas_logger19.Logger, undefined, undefined, string, []>;
-//# sourceMappingURL=index.d.ts.map
-
 //#endregion
-export { Subscriber, SubscriberBuilder, s };
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
 //# sourceMappingURL=index.d.mts.map

package/dist/subscribers/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/subscribers/SubscriberBuilder.ts","../../src/subscribers/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;cAkBa,oCACM,gCACF,SAAS,0BACP,kEACM;;;;EAJZ,QAAA,SAAA;EAAiB;EAAA,WACX,EAAA,MAAA,EAAA;EAAO,QACT,OAAA;EAAM,QAAG,UAAA;EAAM,QACb,UAAA;EAAgB,WACV,CAAA;EAAc;;;;;;;;;;;EAoCX,KAC1B,CAAA,cAAA,MAAA,EAAA,gBAR2C,WAQ3C,CAAA,CAAA,KAAA,EAPO,KAOP,CAPa,KAOb,EAPoB,OAOpB,CAAA,CAAA,EANE,iBAMF,CALA,SAKA,EAJA,OAIA,EAHA,SAGA,EAFA,cAEA,CAFe,YAEf,CAF4B,OAE5B,CAAA,CAAA,EADA,0BACA,EAAA,iBAAA,CAAA;EAAiB,OANf,CAAA,OAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAiB,MAwBH,CAAA,UAAA,gBAAA,CAAA,CAAA,MAAA,EACR,CADQ,CAAA,EAEd,iBAFc,CAGhB,SAHgB,EAIhB,OAJgB,EAKhB,CALgB,EAMhB,eANgB,EAOhB,0BAPgB,EAQhB,iBARgB,CAAA;EAAgB;;;;;;;;;;;EA6BnB,SAAgB,CAAA,gBAAA,SAHK,UAGL,EAAA,CAAA,CAAA,UAAA,EAFjB,CAEiB,CAAA,EAD3B,iBAC2B,CAAA,CAAX,GAAd,SAAc,EAClB,GADkB,UAClB,CAD6B,CAC7B,CAAA,CAAO,EAAP,OACA,EAAA,SAAA,EACA,eADA,EAEA,0BAFA,EAGA,iBAHA,CAAA;EAAS,QACT,CAAA,UA0BkB,OA1BlB,EAAA,CAAA,CAAA,QAAA,EA2BU,CA3BV,CAAA,EA4BE,iBA5BF,CAAA,CACA,GA4BI,SA5BJ,EACA,GA2BkB,CA3BlB,CAAiB,EA4BjB,OAlCE,EAmCF,SAnCE,EAoCF,eApCE,EAqCF,0BArCE,EAsCF,iBAtCE,CAAA;EAAiB,MA8BD,CAAA,UAeF,MAfE,CAAA,CAAA,MAAA,EAgBV,CAhBU,CAAA,EAiBhB,iBAjBgB,CAkBlB,SAlBkB,EAmBlB,CAnBkB,EAoBlB,SApBkB,EAqBlB,eArBkB,EAsBlB,0BAtBkB,EAuBlB,iBAvBkB,CAAA;EAAO,SACf,CAAA,UA2BS,cA3BT,CAAA,GAAA,CAAA,EAAA,cAAA,MAAA,CAAA,CAAA,SAAA,EA4BC,OA5BD,CA4BS,KA5BT,EA4BgB,CA5BhB,CAAA,CAAA,EA6BR,iBA7BQ,CA8BV,SA9BU,EA+BV,OA/BU,EAgCV,SAhCU,EAiCV,CAjCU,EAkCV,KAlCU,EAmCV,iBAnCU,CAAA;EAAC,SAEP,CAAA,gBAuCW,eAvCX,SAuCmC,cAvCnC,CAAA,GAAA,CAAA,GAyCC,uBAzCD,CAyCyB,eAzCzB,CAAA,CAAA,MAAA,CAAA,GA0CC,uBA1CD,CA0CyB,eA1CzB,CAAA,CAAA,MAAA,CAAA,EAAA,GAAA,KAAA,EAAA,CAAA,KAAA,EA6CG,MA7CH,CAAA,EA8CF,iBA9CE,CA+CJ,SA/CI,EAgDJ,OAhDI,EAiDJ,SAjDI,EAkDJ,eAlDI,EAmDJ,0BAnDI,EAoDJ,MApDI,SAAA,GAAA,EAAA,GAAA,CAAA,GAqDG,iBArDH,EAAA,GAqDyB,MArDzB,CAAA,GAAA,CAAA,GAsDG,iBAtDH,EAsDsB,MAtDtB,CAAA,CAAA;EAAS,MAAK,CAAA,EAAA,EA+Dd,iBA/Dc,CAgEjB,eAhEiB,EAiEjB,iBAjEiB,EAkEjB,SAlEiB,EAmEjB,OAnEiB,EAoEjB,SApEiB,CAAA,CAAA,EAsEhB,UAtEgB,CAuElB,SAvEkB,EAwElB,OAxEkB,EAyElB,SAzEkB,EA0ElB,eA1EkB,EA2ElB,0BA3EkB,EA4ElB,iBA5EkB,CAAA;;;;;cCrIP,GAAC,sBAA0B,mBAAA,CAA1B,MAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAiBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB;UA8BA"}