@geekmidas/constructs 10.0.0-alpha.124 → 10.0.0-alpha.125

package/dist/pattern-QFaUIr77.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-QFaUIr77.cjs","names":["Construct","servicesOf","idsOf"],"sources":["../src/processors/Processor.ts","../src/processors/ProcessorBuilder.ts","../src/processors/pattern.ts"],"sourcesContent":["import type { Logger } from '@geekmidas/logger';\nimport type { InferStandardSchema } from '@geekmidas/schema';\nimport type { Service, ServiceRecord } from '@geekmidas/services';\nimport type { StorageClient } from '@geekmidas/storage';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport { Construct, ConstructType } from '../Construct';\nimport type { ParsedPattern, PatternParams } from './pattern';\n\n/**\n * Where a processor's results are kept, under its file server's bucket.\n *\n * Written through on every result marked `immutable` and read before the\n * handler runs, so a derivative is made once. Exported so the bucket's expiry\n * can name it.\n */\nexport { DERIVED_PREFIX } from '@geekmidas/manifest';\n\n/** How long a response may be kept, by a browser and by the edge. */\nexport type ProcessorCache =\n\t/** Never changes for these parameters and this key: kept for a year. */\n\t| 'immutable'\n\t/** Kept this many seconds. */\n\t| { maxAge: number }\n\t/** Not kept. */\n\t| 'none';\n\n/** What a processor handler returns. */\nexport interface ProcessorResult {\n\tbody: Uint8Array | string;\n\tcontentType: string;\n\t/**\n\t * `immutable` results are also kept in the bucket, so the next request\n\t * for them never runs the handler. Defaults to an hour, kept nowhere.\n\t */\n\tcache?: ProcessorCache;\n}\n\n/** The object a request addresses, read from the bucket on first use. */\nexport interface SourceObject {\n\treadonly key: string;\n\tbytes(): Promise<Uint8Array>;\n\tstream(): Promise<ReadableStream<Uint8Array>>;\n\t/** The type it was stored with. */\n\tcontentType(): Promise<string | undefined>;\n}\n\nexport interface ProcessorContext<\n\tTParams,\n\tTServices extends Service[],\n\tTLogger extends Logger,\n> {\n\tparams: TParams;\n\tkey: string;\n\tobject: SourceObject;\n\tlogger: TLogger;\n\tservices: ServiceRecord<TServices>;\n}\n\nexport type ProcessorHandler<\n\tTParams,\n\tTServices extends Service[],\n\tTLogger extends Logger,\n> = (\n\tcontext: ProcessorContext<TParams, TServices, TLogger>,\n) => Promise<ProcessorResult> | ProcessorResult;\n\n/** What a processor's parameters parse to: its schema's output, or the raw strings. */\nexport type ProcessorParams<\n\tTPattern extends string,\n\tTSchema extends StandardSchemaV1 | undefined,\n> = TSchema extends StandardSchemaV1\n\t? InferStandardSchema<TSchema>\n\t: PatternParams<TPattern>;\n\n/**\n * A processor — a handler behind one path pattern of a file server, which\n * makes a derivative of an open object on read: a thumbnail, a page of a PDF.\n *\n * Built from the file server (`assets.process('/i/:width/*')`), so it carries\n * the bucket it reads and the open paths it may serve. Its parameters' schema\n * is the allowlist: a request outside it is refused before anything runs, so\n * nobody can mint new work — or new cache entries — by varying a number.\n */\nexport class Processor<\n\tTPattern extends string = string,\n\tTSchema extends StandardSchemaV1 | undefined = undefined,\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n> extends Construct<TLogger, undefined, TServices> {\n\t__IS_PROCESSOR__ = true;\n\n\tstatic isProcessor(obj: unknown): obj is Processor<string, any, any, any> {\n\t\treturn Boolean(\n\t\t\tobj &&\n\t\t\t\t(obj as { __IS_PROCESSOR__?: boolean }).__IS_PROCESSOR__ === true &&\n\t\t\t\t(obj as Construct).type === ConstructType.Processor,\n\t\t);\n\t}\n\n\tconstructor(\n\t\treadonly parsed: ParsedPattern,\n\t\treadonly handler: ProcessorHandler<\n\t\t\tProcessorParams<TPattern, TSchema>,\n\t\t\tTServices,\n\t\t\tTLogger\n\t\t>,\n\t\treadonly options: {\n\t\t\t/** The file server's surface id — the unit that runs it. */\n\t\t\tsurfaceId: string;\n\t\t\t/** The bucket it reads from and keeps derivatives in. */\n\t\t\tbucketId: string;\n\t\t\t/** How it reaches that bucket. */\n\t\t\torigin: Service<string, StorageClient>;\n\t\t\t/** Whether a key is one of the file server's open paths. */\n\t\t\tserves: (key: string) => boolean;\n\t\t\tparamsSchema?: TSchema;\n\t\t\t/** Packages with native code, installed for the target. */\n\t\t\tnative: readonly string[];\n\t\t\tlogger: TLogger;\n\t\t\tservices: TServices;\n\t\t\tconstructs: string[];\n\t\t\ttimeout?: number;\n\t\t\tmemorySize?: number;\n\t\t},\n\t) {\n\t\tsuper(\n\t\t\tConstructType.Processor,\n\t\t\toptions.logger,\n\t\t\t// The bucket is reached like any service — which is also how its URL\n\t\t\t// is found by the environment sniffer.\n\t\t\t[options.origin, ...options.services] as unknown as TServices,\n\t\t\t[],\n\t\t\tundefined,\n\t\t\toptions.timeout,\n\t\t\toptions.memorySize,\n\t\t\tundefined,\n\t\t\t// The bucket is an edge of its process, so the unit running it is\n\t\t\t// handed the bucket's address.\n\t\t\t[...new Set([options.bucketId, ...options.constructs])],\n\t\t);\n\t\tthis.owner = options.surfaceId;\n\t}\n\n\t/** The pattern it answers, as written. */\n\tget pattern(): TPattern {\n\t\treturn this.parsed.pattern as TPattern;\n\t}\n\n\t/** The literal path the edge routes to it — `/i/`. */\n\tget prefix(): string {\n\t\treturn this.parsed.prefix;\n\t}\n\n\tget native(): readonly string[] {\n\t\treturn this.options.native;\n\t}\n\n\tget surfaceId(): string {\n\t\treturn this.options.surfaceId;\n\t}\n\n\tget bucketId(): string {\n\t\treturn this.options.bucketId;\n\t}\n}\n","import type { Logger } from '@geekmidas/logger';\nimport type { Service } from '@geekmidas/services';\nimport type { StorageClient } from '@geekmidas/storage';\nimport type { StandardSchemaV1 } from '@standard-schema/spec';\nimport {\n\ttype Consumable,\n\tidsOf,\n\ttype ServicesOf,\n\tservicesOf,\n} from '../construct-interface';\nimport {\n\tProcessor,\n\ttype ProcessorHandler,\n\ttype ProcessorParams,\n} from './Processor';\nimport type { ParsedPattern } from './pattern';\n\n/** A native package named in a way no installer could resolve. */\nexport class ProcessorNativeInvalid extends Error {\n\tconstructor(readonly packageName: string) {\n\t\tsuper(\n\t\t\t`'${packageName}' is not a package name. Name the package with native code ` +\n\t\t\t\t`as it is installed — 'sharp', '@napi-rs/canvas' — and its version ` +\n\t\t\t\t`is taken from the app's package.json.`,\n\t\t);\n\t\tthis.name = 'ProcessorNativeInvalid';\n\t}\n}\n\ninterface ProcessorBuilderState<TLogger extends Logger> {\n\tparsed: ParsedPattern;\n\tsurfaceId: string;\n\tbucketId: string;\n\torigin: Service<string, StorageClient>;\n\tserves: (key: string) => boolean;\n\tlogger: TLogger;\n\tparamsSchema?: StandardSchemaV1;\n\tnative: string[];\n\tservices: Service[];\n\tconstructs: string[];\n\ttimeout?: number;\n\tmemorySize?: number;\n}\n\n/**\n * What `fileServer.process(pattern)` returns: a processor, built up one\n * immutable step at a time and finished by `.handle()`.\n */\nexport class ProcessorBuilder<\n\tTPattern extends string,\n\tTSchema extends StandardSchemaV1 | undefined = undefined,\n\tTServices extends Service[] = [],\n\tTLogger extends Logger = Logger,\n> {\n\tconstructor(private readonly state: ProcessorBuilderState<TLogger>) {}\n\n\t/**\n\t * The parameters' schema — the allowlist. Every request is parsed by it\n\t * before anything runs, and one it refuses is answered 400.\n\t */\n\tparams<T extends StandardSchemaV1>(\n\t\tschema: T,\n\t): ProcessorBuilder<TPattern, T, TServices, TLogger> {\n\t\treturn new ProcessorBuilder({ ...this.state, paramsSchema: schema });\n\t}\n\n\t/** Constructs its handler reaches, as `services.<id>`. */\n\tdependsOn<const T extends readonly Consumable[]>(\n\t\tconstructs: T,\n\t): ProcessorBuilder<\n\t\tTPattern,\n\t\tTSchema,\n\t\t[...TServices, ...ServicesOf<T>],\n\t\tTLogger\n\t> {\n\t\tconst services = servicesOf(constructs) as unknown as Service[];\n\t\treturn new ProcessorBuilder({\n\t\t\t...this.state,\n\t\t\tservices: [\n\t\t\t\t...this.state.services.filter(\n\t\t\t\t\t(service) =>\n\t\t\t\t\t\t!services.some((s) => s.serviceName === service.serviceName),\n\t\t\t\t),\n\t\t\t\t...services,\n\t\t\t],\n\t\t\tconstructs: idsOf(constructs, this.state.constructs),\n\t\t});\n\t}\n\n\t/**\n\t * Packages with native code — `sharp` — installed for the target the\n\t * processor runs on rather than bundled: linux in its image, arm64 on\n\t * Lambda.\n\t */\n\tnative(packages: readonly string[]): this {\n\t\tfor (const name of packages) {\n\t\t\tif (!/^(@[a-z0-9._~-]+\\/)?[a-z0-9._~-]+$/.test(name)) {\n\t\t\t\tthrow new ProcessorNativeInvalid(name);\n\t\t\t}\n\t\t}\n\t\treturn new ProcessorBuilder({\n\t\t\t...this.state,\n\t\t\tnative: [...new Set([...this.state.native, ...packages])],\n\t\t}) as this;\n\t}\n\n\t/** Milliseconds a request may take, where the target bounds it. */\n\ttimeout(ms: number): this {\n\t\treturn new ProcessorBuilder({ ...this.state, timeout: ms }) as this;\n\t}\n\n\t/** Megabytes of memory, where the target sets it. */\n\tmemorySize(mb: number): this {\n\t\treturn new ProcessorBuilder({ ...this.state, memorySize: mb }) as this;\n\t}\n\n\thandle(\n\t\tfn: ProcessorHandler<\n\t\t\tProcessorParams<TPattern, TSchema>,\n\t\t\tTServices,\n\t\t\tTLogger\n\t\t>,\n\t): Processor<TPattern, TSchema, TServices, TLogger> {\n\t\tconst { state } = this;\n\t\treturn new Processor<TPattern, TSchema, TServices, TLogger>(\n\t\t\tstate.parsed,\n\t\t\tfn,\n\t\t\t{\n\t\t\t\tsurfaceId: state.surfaceId,\n\t\t\t\tbucketId: state.bucketId,\n\t\t\t\torigin: state.origin,\n\t\t\t\tserves: state.serves,\n\t\t\t\t...(state.paramsSchema\n\t\t\t\t\t? { paramsSchema: state.paramsSchema as TSchema }\n\t\t\t\t\t: {}),\n\t\t\t\tnative: state.native,\n\t\t\t\tlogger: state.logger,\n\t\t\t\tservices: state.services as TServices,\n\t\t\t\tconstructs: state.constructs,\n\t\t\t\t...(state.timeout !== undefined ? { timeout: state.timeout } : {}),\n\t\t\t\t...(state.memorySize !== undefined\n\t\t\t\t\t? { memorySize: state.memorySize }\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t);\n\t}\n}\n","/**\n * A processor's path pattern: literal segments, `:name` parameters, and a\n * final `*` that is the object's key.\n *\n * ```\n * /i/:width/*        →  /i/256/avatars/7.png   { width: '256' }, 'avatars/7.png'\n * /pdf/:page/:dpi/*  →  /pdf/1/150/doc.pdf     { page: '1', dpi: '150' }, 'doc.pdf'\n * ```\n *\n * It starts with a literal segment because the edge routes on that prefix: a\n * pattern beginning with a parameter would claim every path on the file\n * server, objects included.\n */\n\n/** The parameter names a pattern declares, as a union. */\nexport type PatternParamNames<P extends string> =\n\tP extends `${string}/:${infer Name}/${infer Rest}`\n\t\t? Name | PatternParamNames<`/${Rest}`>\n\t\t: never;\n\n/** The raw parameters a pattern matches, before its schema parses them. */\nexport type PatternParams<P extends string> = {\n\t[K in PatternParamNames<P>]: string;\n};\n\n/** A pattern a processor cannot be served on. */\nexport class ProcessorPatternInvalid extends Error {\n\tconstructor(\n\t\treadonly pattern: string,\n\t\treadonly reason: string,\n\t) {\n\t\tsuper(\n\t\t\t`'${pattern}' is not a processor pattern: ${reason}. A pattern is a ` +\n\t\t\t\t`literal first segment, then any \\`:name\\` parameters, then \\`*\\` ` +\n\t\t\t\t`for the object's key — '/i/:width/*'.`,\n\t\t);\n\t\tthis.name = 'ProcessorPatternInvalid';\n\t}\n}\n\n/** A pattern, parsed once. */\nexport interface ParsedPattern {\n\treadonly pattern: string;\n\t/** Each segment before the key: a literal, or a parameter's name. */\n\treadonly segments: readonly (\n\t\t| { kind: 'literal'; value: string }\n\t\t| { kind: 'param'; name: string }\n\t)[];\n\t/** The parameter names, in the order they appear. */\n\treadonly params: readonly string[];\n\t/** The literal path the edge routes on — `/i/`. */\n\treadonly prefix: string;\n}\n\n/** @throws {ProcessorPatternInvalid} */\nexport function parsePattern(pattern: string): ParsedPattern {\n\tif (!pattern.startsWith('/')) {\n\t\tthrow new ProcessorPatternInvalid(pattern, 'it does not start with /');\n\t}\n\tif (!pattern.endsWith('/*')) {\n\t\tthrow new ProcessorPatternInvalid(\n\t\t\tpattern,\n\t\t\t'it does not end with /* — the key',\n\t\t);\n\t}\n\n\tconst parts = pattern.slice(1, -2).split('/');\n\tconst segments: ParsedPattern['segments'][number][] = [];\n\tconst params: string[] = [];\n\tfor (const part of parts) {\n\t\tif (part === '') {\n\t\t\tthrow new ProcessorPatternInvalid(pattern, 'it has an empty segment');\n\t\t}\n\t\tif (part.includes('*')) {\n\t\t\tthrow new ProcessorPatternInvalid(\n\t\t\t\tpattern,\n\t\t\t\t'only its last segment may be *',\n\t\t\t);\n\t\t}\n\t\tif (part.startsWith(':')) {\n\t\t\tconst name = part.slice(1);\n\t\t\tif (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {\n\t\t\t\tthrow new ProcessorPatternInvalid(\n\t\t\t\t\tpattern,\n\t\t\t\t\t`'${part}' is not a parameter name`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tif (params.includes(name)) {\n\t\t\t\tthrow new ProcessorPatternInvalid(pattern, `'${name}' appears twice`);\n\t\t\t}\n\t\t\tparams.push(name);\n\t\t\tsegments.push({ kind: 'param', name });\n\t\t\tcontinue;\n\t\t}\n\t\tif (!/^[A-Za-z0-9._~-]+$/.test(part)) {\n\t\t\tthrow new ProcessorPatternInvalid(\n\t\t\t\tpattern,\n\t\t\t\t`'${part}' has characters a path segment would escape`,\n\t\t\t);\n\t\t}\n\t\tsegments.push({ kind: 'literal', value: part });\n\t}\n\n\tconst first = segments[0];\n\tif (!first || first.kind !== 'literal') {\n\t\tthrow new ProcessorPatternInvalid(\n\t\t\tpattern,\n\t\t\t'its first segment is a parameter, which would claim every path',\n\t\t);\n\t}\n\n\tconst literals: string[] = [];\n\tfor (const segment of segments) {\n\t\tif (segment.kind !== 'literal') break;\n\t\tliterals.push(segment.value);\n\t}\n\n\treturn { pattern, segments, params, prefix: `/${literals.join('/')}/` };\n}\n\n/** A path the pattern matched: its raw parameters and the key. */\nexport interface PatternMatch {\n\tparams: Record<string, string>;\n\tkey: string;\n}\n\n/**\n * Match a request path, decoding each parameter and each key segment. A path\n * with an empty key, or one that decodes to a `..` segment, matches nothing.\n */\nexport function matchPattern(\n\tparsed: ParsedPattern,\n\tpath: string,\n): PatternMatch | undefined {\n\tconst parts = path.replace(/^\\/+/, '').split('/');\n\tif (parts.length <= parsed.segments.length) return undefined;\n\n\tconst params: Record<string, string> = {};\n\tfor (const [index, segment] of parsed.segments.entries()) {\n\t\tconst part = decode(parts[index] ?? '');\n\t\tif (part === undefined || part === '') return undefined;\n\t\tif (segment.kind === 'literal') {\n\t\t\tif (part !== segment.value) return undefined;\n\t\t\tcontinue;\n\t\t}\n\t\tparams[segment.name] = part;\n\t}\n\n\tconst keyParts = parts.slice(parsed.segments.length).map(decode);\n\tif (keyParts.some((part) => part === undefined || part === '..')) {\n\t\treturn undefined;\n\t}\n\tconst key = keyParts.join('/');\n\tif (key === '' || keyParts.includes('')) return undefined;\n\n\treturn { params, key };\n}\n\n/** The path that addresses `key` through the pattern with these parameters. */\nexport function fillPattern(\n\tparsed: ParsedPattern,\n\tparams: Readonly<Record<string, string | number>>,\n\tkey: string,\n): string {\n\tconst head = parsed.segments.map((segment) => {\n\t\tif (segment.kind === 'literal') return segment.value;\n\t\tconst value = params[segment.name];\n\t\tif (value === undefined || `${value}` === '') {\n\t\t\tthrow new ProcessorParamMissing(parsed.pattern, segment.name);\n\t\t}\n\t\treturn encodeURIComponent(`${value}`);\n\t});\n\tconst tail = key\n\t\t.replace(/^\\/+/, '')\n\t\t.split('/')\n\t\t.map((part) => encodeURIComponent(part));\n\n\treturn `/${[...head, ...tail].join('/')}`;\n}\n\n/** A processed URL was asked for without one of the pattern's parameters. */\nexport class ProcessorParamMissing extends Error {\n\tconstructor(\n\t\treadonly pattern: string,\n\t\treadonly param: string,\n\t) {\n\t\tsuper(\n\t\t\t`'${pattern}' needs '${param}' to address an object, and it was not given.`,\n\t\t);\n\t\tthis.name = 'ProcessorParamMissing';\n\t}\n}\n\nfunction decode(part: string): string | undefined {\n\ttry {\n\t\treturn decodeURIComponent(part);\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;AAmFA,IAAa,YAAb,cAKUA,kBAAAA,UAAyC;CAYxC;CACA;CAKA;CAjBV,mBAAmB;CAEnB,OAAO,YAAY,KAAuD;EACzE,OAAO,QACN,OACE,IAAuC,qBAAqB,QAC5D,IAAkB,SAAA,kCACrB;CACD;CAEA,YACC,QACA,SAKA,SAkBC;EACD,MAAA,oCAEC,QAAQ,QAGR,CAAC,QAAQ,QAAQ,GAAG,QAAQ,QAAQ,GACpC,CAAC,GACD,KAAA,GACA,QAAQ,SACR,QAAQ,YACR,KAAA,GAGA,CAAC,mBAAG,IAAI,IAAI,CAAC,QAAQ,UAAU,GAAG,QAAQ,UAAU,CAAC,CAAC,CACvD;EAvCS,KAAA,SAAA;EACA,KAAA,UAAA;EAKA,KAAA,UAAA;EAkCT,KAAK,QAAQ,QAAQ;CACtB;;CAGA,IAAI,UAAoB;EACvB,OAAO,KAAK,OAAO;CACpB;;CAGA,IAAI,SAAiB;EACpB,OAAO,KAAK,OAAO;CACpB;CAEA,IAAI,SAA4B;EAC/B,OAAO,KAAK,QAAQ;CACrB;CAEA,IAAI,YAAoB;EACvB,OAAO,KAAK,QAAQ;CACrB;CAEA,IAAI,WAAmB;EACtB,OAAO,KAAK,QAAQ;CACrB;AACD;;;;AClJA,IAAa,yBAAb,cAA4C,MAAM;CAC5B;CAArB,YAAY,aAA8B;EACzC,MACC,IAAI,YAAY,mKAGjB;EALoB,KAAA,cAAA;EAMpB,KAAK,OAAO;CACb;AACD;;;;;AAqBA,IAAa,mBAAb,MAAa,iBAKX;CAC4B;CAA7B,YAAY,OAAwD;EAAvC,KAAA,QAAA;CAAwC;;;;;CAMrE,OACC,QACoD;EACpD,OAAO,IAAI,iBAAiB;GAAE,GAAG,KAAK;GAAO,cAAc;EAAO,CAAC;CACpE;;CAGA,UACC,YAMC;EACD,MAAM,WAAWC,4BAAAA,WAAW,UAAU;EACtC,OAAO,IAAI,iBAAiB;GAC3B,GAAG,KAAK;GACR,UAAU,CACT,GAAG,KAAK,MAAM,SAAS,QACrB,YACA,CAAC,SAAS,MAAM,MAAM,EAAE,gBAAgB,QAAQ,WAAW,CAC7D,GACA,GAAG,QACJ;GACA,YAAYC,4BAAAA,MAAM,YAAY,KAAK,MAAM,UAAU;EACpD,CAAC;CACF;;;;;;CAOA,OAAO,UAAmC;EACzC,KAAK,MAAM,QAAQ,UAClB,IAAI,CAAC,qCAAqC,KAAK,IAAI,GAClD,MAAM,IAAI,uBAAuB,IAAI;EAGvC,OAAO,IAAI,iBAAiB;GAC3B,GAAG,KAAK;GACR,QAAQ,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC;EACzD,CAAC;CACF;;CAGA,QAAQ,IAAkB;EACzB,OAAO,IAAI,iBAAiB;GAAE,GAAG,KAAK;GAAO,SAAS;EAAG,CAAC;CAC3D;;CAGA,WAAW,IAAkB;EAC5B,OAAO,IAAI,iBAAiB;GAAE,GAAG,KAAK;GAAO,YAAY;EAAG,CAAC;CAC9D;CAEA,OACC,IAKmD;EACnD,MAAM,EAAE,UAAU;EAClB,OAAO,IAAI,UACV,MAAM,QACN,IACA;GACC,WAAW,MAAM;GACjB,UAAU,MAAM;GAChB,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,GAAI,MAAM,eACP,EAAE,cAAc,MAAM,aAAwB,IAC9C,CAAC;GACJ,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,UAAU,MAAM;GAChB,YAAY,MAAM;GAClB,GAAI,MAAM,YAAY,KAAA,IAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;GAChE,GAAI,MAAM,eAAe,KAAA,IACtB,EAAE,YAAY,MAAM,WAAW,IAC/B,CAAC;EACL,CACD;CACD;AACD;;;;ACxHA,IAAa,0BAAb,cAA6C,MAAM;CAExC;CACA;CAFV,YACC,SACA,QACC;EACD,MACC,IAAI,QAAQ,gCAAgC,OAAO,wHAGpD;EAPS,KAAA,UAAA;EACA,KAAA,SAAA;EAOT,KAAK,OAAO;CACb;AACD;;AAiBA,SAAgB,aAAa,SAAgC;CAC5D,IAAI,CAAC,QAAQ,WAAW,GAAG,GAC1B,MAAM,IAAI,wBAAwB,SAAS,0BAA0B;CAEtE,IAAI,CAAC,QAAQ,SAAS,IAAI,GACzB,MAAM,IAAI,wBACT,SACA,mCACD;CAGD,MAAM,QAAQ,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM,GAAG;CAC5C,MAAM,WAAgD,CAAC;CACvD,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACzB,IAAI,SAAS,IACZ,MAAM,IAAI,wBAAwB,SAAS,yBAAyB;EAErE,IAAI,KAAK,SAAS,GAAG,GACpB,MAAM,IAAI,wBACT,SACA,gCACD;EAED,IAAI,KAAK,WAAW,GAAG,GAAG;GACzB,MAAM,OAAO,KAAK,MAAM,CAAC;GACzB,IAAI,CAAC,2BAA2B,KAAK,IAAI,GACxC,MAAM,IAAI,wBACT,SACA,IAAI,KAAK,0BACV;GAED,IAAI,OAAO,SAAS,IAAI,GACvB,MAAM,IAAI,wBAAwB,SAAS,IAAI,KAAK,gBAAgB;GAErE,OAAO,KAAK,IAAI;GAChB,SAAS,KAAK;IAAE,MAAM;IAAS;GAAK,CAAC;GACrC;EACD;EACA,IAAI,CAAC,qBAAqB,KAAK,IAAI,GAClC,MAAM,IAAI,wBACT,SACA,IAAI,KAAK,6CACV;EAED,SAAS,KAAK;GAAE,MAAM;GAAW,OAAO;EAAK,CAAC;CAC/C;CAEA,MAAM,QAAQ,SAAS;CACvB,IAAI,CAAC,SAAS,MAAM,SAAS,WAC5B,MAAM,IAAI,wBACT,SACA,gEACD;CAGD,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,WAAW,UAAU;EAC/B,IAAI,QAAQ,SAAS,WAAW;EAChC,SAAS,KAAK,QAAQ,KAAK;CAC5B;CAEA,OAAO;EAAE;EAAS;EAAU;EAAQ,QAAQ,IAAI,SAAS,KAAK,GAAG,EAAE;CAAG;AACvE;;;;;AAYA,SAAgB,aACf,QACA,MAC2B;CAC3B,MAAM,QAAQ,KAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,MAAM,GAAG;CAChD,IAAI,MAAM,UAAU,OAAO,SAAS,QAAQ,OAAO,KAAA;CAEnD,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,OAAO,YAAY,OAAO,SAAS,QAAQ,GAAG;EACzD,MAAM,OAAO,OAAO,MAAM,UAAU,EAAE;EACtC,IAAI,SAAS,KAAA,KAAa,SAAS,IAAI,OAAO,KAAA;EAC9C,IAAI,QAAQ,SAAS,WAAW;GAC/B,IAAI,SAAS,QAAQ,OAAO,OAAO,KAAA;GACnC;EACD;EACA,OAAO,QAAQ,QAAQ;CACxB;CAEA,MAAM,WAAW,MAAM,MAAM,OAAO,SAAS,MAAM,CAAC,CAAC,IAAI,MAAM;CAC/D,IAAI,SAAS,MAAM,SAAS,SAAS,KAAA,KAAa,SAAS,IAAI,GAC9D;CAED,MAAM,MAAM,SAAS,KAAK,GAAG;CAC7B,IAAI,QAAQ,MAAM,SAAS,SAAS,EAAE,GAAG,OAAO,KAAA;CAEhD,OAAO;EAAE;EAAQ;CAAI;AACtB;;AAGA,SAAgB,YACf,QACA,QACA,KACS;CACT,MAAM,OAAO,OAAO,SAAS,KAAK,YAAY;EAC7C,IAAI,QAAQ,SAAS,WAAW,OAAO,QAAQ;EAC/C,MAAM,QAAQ,OAAO,QAAQ;EAC7B,IAAI,UAAU,KAAA,KAAa,GAAG,YAAY,IACzC,MAAM,IAAI,sBAAsB,OAAO,SAAS,QAAQ,IAAI;EAE7D,OAAO,mBAAmB,GAAG,OAAO;CACrC,CAAC;CACD,MAAM,OAAO,IACX,QAAQ,QAAQ,EAAE,CAAC,CACnB,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,mBAAmB,IAAI,CAAC;CAExC,OAAO,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACvC;;AAGA,IAAa,wBAAb,cAA2C,MAAM;CAEtC;CACA;CAFV,YACC,SACA,OACC;EACD,MACC,IAAI,QAAQ,WAAW,MAAM,8CAC9B;EALS,KAAA,UAAA;EACA,KAAA,QAAA;EAKT,KAAK,OAAO;CACb;AACD;AAEA,SAAS,OAAO,MAAkC;CACjD,IAAI;EACH,OAAO,mBAAmB,IAAI;CAC/B,QAAQ;EACP;CACD;AACD"}

package/dist/processors/index.cjs

@@ -0,0 +1,214 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_pattern = require("../pattern-QFaUIr77.cjs");
+const require_surfaceEnv = require("../surfaceEnv-CNimK76p.cjs");
+let _geekmidas_services = require("@geekmidas/services");
+let _geekmidas_manifest = require("@geekmidas/manifest");
+//#region src/processors/runProcessor.ts
+/** The object a request addressed is not in the bucket. */
+var ProcessorSourceMissing = class extends Error {
+	key;
+	constructor(key) {
+		super(`'${key}' is not in the bucket, so there is nothing to process.`);
+		this.key = key;
+		this.name = "ProcessorSourceMissing";
+	}
+};
+/** What a refusal or a miss may be kept for: long enough to absorb a burst. */
+const SHORT = "public, max-age=60";
+/** The header a response carries, by how long it may be kept. */
+function cacheControl(cache) {
+	if (cache === "immutable") return "public, max-age=31536000, immutable";
+	if (cache === "none") return "no-store";
+	return `public, max-age=${cache?.maxAge ?? 3600}`;
+}
+/** Where a processor keeps the derivative for one request. */
+function derivedKey(processor, params, key) {
+	return `${_geekmidas_manifest.DERIVED_PREFIX}${require_pattern.fillPattern(processor.parsed, params, key).slice(1)}`;
+}
+/**
+* Answer one request with the first processor whose pattern matches it, or
+* `undefined` when none does.
+*
+* In order: the parameters are parsed by the processor's schema (400 when it
+* refuses them); the key must be one of the file server's open paths (404
+* otherwise, as an unsigned read of it would be); a derivative already in the
+* bucket is answered without running anything; and only then is the handler
+* run, its `immutable` result written through for next time.
+*/
+async function handleProcessorRequest(processors, request, options) {
+	const method = request.method.toUpperCase();
+	for (const processor of processors) {
+		const match = require_pattern.matchPattern(processor.parsed, request.path);
+		if (!match) continue;
+		if (method !== "GET" && method !== "HEAD") return text(405, "Method Not Allowed", "no-store", { allow: "GET, HEAD" });
+		return (0, _geekmidas_services.runWithRequestContext)({
+			logger: processor.logger,
+			requestId: `processor-${Date.now()}`,
+			startTime: Date.now(),
+			operation: `processor ${processor.pattern}`
+		}, () => run(processor, match, options));
+	}
+}
+/**
+* A request handler for a set of processors — what a generated entry serves
+* — with its services discovered from the default environment parser: the
+* process's environment and the credentials `gkm` injected.
+*/
+function processorServer(processors, envParser = require_surfaceEnv.defaultEnvParser()) {
+	const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(envParser);
+	return (request) => handleProcessorRequest(processors, request, { serviceDiscovery });
+}
+async function run(processor, match, options) {
+	const logger = processor.logger;
+	const fetcher = options.fetch ?? fetch;
+	const { key } = match;
+	const schema = processor.options.paramsSchema;
+	let params = match.params;
+	if (schema) {
+		const parsed = await schema["~standard"].validate(match.params);
+		if (parsed.issues) return text(400, "Bad Request", SHORT);
+		params = parsed.value;
+	}
+	if (key.startsWith(_geekmidas_manifest.DERIVED_PREFIX) || !processor.options.serves(key)) return text(404, "Not Found", SHORT);
+	const services = await options.serviceDiscovery.register(processor.services);
+	const storage = services[processor.options.origin.serviceName];
+	const derived = derivedKey(processor, match.params, key);
+	const kept = await read(storage, derived, fetcher);
+	if (kept) return {
+		status: 200,
+		headers: {
+			"content-type": kept.contentType ?? "application/octet-stream",
+			"cache-control": cacheControl("immutable"),
+			"x-gkm-processor": "kept"
+		},
+		body: new Uint8Array(await kept.response.arrayBuffer())
+	};
+	let source;
+	const load = async () => {
+		if (source) return source;
+		const found = await read(storage, key, fetcher);
+		if (!found) throw new ProcessorSourceMissing(key);
+		source = found.response;
+		return source;
+	};
+	const object = {
+		key,
+		bytes: async () => new Uint8Array(await (await load()).arrayBuffer()),
+		stream: async () => {
+			const body = (await load()).body;
+			if (!body) throw new ProcessorSourceMissing(key);
+			return body;
+		},
+		contentType: async () => (await load()).headers.get("content-type") ?? void 0
+	};
+	let result;
+	try {
+		result = await processor.handler({
+			params,
+			key,
+			object,
+			logger,
+			services
+		});
+	} catch (error) {
+		if (error instanceof ProcessorSourceMissing) return text(404, "Not Found", SHORT);
+		logger.error({
+			err: error,
+			key
+		}, "Processor failed");
+		return text(500, "Internal Server Error", "no-store");
+	}
+	const body = typeof result.body === "string" ? new TextEncoder().encode(result.body) : result.body;
+	if (result.cache === "immutable") await storage.upload(derived, Buffer.from(body), result.contentType).catch((error) => logger.warn({
+		err: error,
+		key: derived
+	}, "Could not keep derivative"));
+	return {
+		status: 200,
+		headers: {
+			"content-type": result.contentType,
+			"cache-control": cacheControl(result.cache),
+			"x-gkm-processor": "made"
+		},
+		body
+	};
+}
+/** An object through a presigned address, or nothing when it is not there. */
+async function read(storage, key, fetcher) {
+	const response = await fetcher(await storage.getDownloadURL({ path: key }));
+	if (!response.ok) {
+		await response.body?.cancel().catch(() => void 0);
+		return;
+	}
+	const contentType = response.headers.get("content-type") ?? void 0;
+	return {
+		response,
+		...contentType ? { contentType } : {}
+	};
+}
+function text(status, body, cache, extra = {}) {
+	return {
+		status,
+		headers: {
+			"content-type": "text/plain; charset=utf-8",
+			"cache-control": cache,
+			...extra
+		},
+		body
+	};
+}
+//#endregion
+//#region src/processors/AWSLambdaProcessor.ts
+/**
+* A processor as a Lambda behind a function URL — the CDN's origin for its
+* pattern on AWS. The URL takes IAM auth and the CDN signs each request, so
+* the function cannot be called around the cache.
+*/
+var AWSLambdaProcessor = class {
+	serve;
+	constructor(processor, envParser = require_surfaceEnv.defaultEnvParser()) {
+		this.serve = processorServer([processor], envParser);
+	}
+	handler = async (event) => {
+		const response = await this.serve({
+			method: event.requestContext.http.method,
+			path: event.rawPath
+		});
+		if (!response) return {
+			statusCode: 404,
+			headers: { "cache-control": "public, max-age=60" },
+			body: "",
+			isBase64Encoded: false
+		};
+		const body = response.body ?? "";
+		return {
+			statusCode: response.status,
+			headers: response.headers,
+			body: typeof body === "string" ? body : Buffer.from(body).toString("base64"),
+			isBase64Encoded: typeof body !== "string"
+		};
+	};
+};
+//#endregion
+exports.AWSLambdaProcessor = AWSLambdaProcessor;
+Object.defineProperty(exports, "DERIVED_PREFIX", {
+	enumerable: true,
+	get: function() {
+		return _geekmidas_manifest.DERIVED_PREFIX;
+	}
+});
+exports.Processor = require_pattern.Processor;
+exports.ProcessorBuilder = require_pattern.ProcessorBuilder;
+exports.ProcessorNativeInvalid = require_pattern.ProcessorNativeInvalid;
+exports.ProcessorParamMissing = require_pattern.ProcessorParamMissing;
+exports.ProcessorPatternInvalid = require_pattern.ProcessorPatternInvalid;
+exports.ProcessorSourceMissing = ProcessorSourceMissing;
+exports.cacheControl = cacheControl;
+exports.derivedKey = derivedKey;
+exports.fillPattern = require_pattern.fillPattern;
+exports.handleProcessorRequest = handleProcessorRequest;
+exports.matchPattern = require_pattern.matchPattern;
+exports.parsePattern = require_pattern.parsePattern;
+exports.processorServer = processorServer;
+
+//# sourceMappingURL=index.cjs.map

package/dist/processors/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["DERIVED_PREFIX","fillPattern","matchPattern","runWithRequestContext","defaultEnvParser","ServiceDiscovery","defaultEnvParser"],"sources":["../../src/processors/runProcessor.ts","../../src/processors/AWSLambdaProcessor.ts"],"sourcesContent":["import type { EnvironmentParser } from '@geekmidas/envkit';\nimport type { Logger } from '@geekmidas/logger';\nimport { runWithRequestContext, ServiceDiscovery } from '@geekmidas/services';\nimport type { StorageClient } from '@geekmidas/storage';\nimport { defaultEnvParser } from '../endpoints/surfaceEnv';\nimport {\n\tDERIVED_PREFIX,\n\ttype Processor,\n\ttype ProcessorCache,\n\ttype SourceObject,\n} from './Processor';\nimport { fillPattern, matchPattern } from './pattern';\n\n/** What a processor answers, for whichever server or function carries it. */\nexport interface ProcessorResponse {\n\tstatus: number;\n\theaders: Record<string, string>;\n\tbody?: Uint8Array | string;\n}\n\n/** The object a request addressed is not in the bucket. */\nexport class ProcessorSourceMissing extends Error {\n\tconstructor(readonly key: string) {\n\t\tsuper(`'${key}' is not in the bucket, so there is nothing to process.`);\n\t\tthis.name = 'ProcessorSourceMissing';\n\t}\n}\n\n/** What a refusal or a miss may be kept for: long enough to absorb a burst. */\nconst SHORT = 'public, max-age=60';\n\n/** The header a response carries, by how long it may be kept. */\nexport function cacheControl(cache: ProcessorCache | undefined): string {\n\tif (cache === 'immutable') return 'public, max-age=31536000, immutable';\n\tif (cache === 'none') return 'no-store';\n\treturn `public, max-age=${cache?.maxAge ?? 3600}`;\n}\n\n/** Where a processor keeps the derivative for one request. */\nexport function derivedKey(\n\tprocessor: Processor<string, any, any, any>,\n\tparams: Readonly<Record<string, string>>,\n\tkey: string,\n): string {\n\treturn `${DERIVED_PREFIX}${fillPattern(processor.parsed, params, key).slice(1)}`;\n}\n\nexport interface ProcessorRequestOptions {\n\tserviceDiscovery: ServiceDiscovery<any>;\n\t/** How the bucket is read through a presigned address. */\n\tfetch?: typeof fetch;\n}\n\n/**\n * Answer one request with the first processor whose pattern matches it, or\n * `undefined` when none does.\n *\n * In order: the parameters are parsed by the processor's schema (400 when it\n * refuses them); the key must be one of the file server's open paths (404\n * otherwise, as an unsigned read of it would be); a derivative already in the\n * bucket is answered without running anything; and only then is the handler\n * run, its `immutable` result written through for next time.\n */\nexport async function handleProcessorRequest(\n\tprocessors: readonly Processor<string, any, any, any>[],\n\trequest: { method: string; path: string },\n\toptions: ProcessorRequestOptions,\n): Promise<ProcessorResponse | undefined> {\n\tconst method = request.method.toUpperCase();\n\n\tfor (const processor of processors) {\n\t\tconst match = matchPattern(processor.parsed, request.path);\n\t\tif (!match) continue;\n\n\t\tif (method !== 'GET' && method !== 'HEAD') {\n\t\t\treturn text(405, 'Method Not Allowed', 'no-store', {\n\t\t\t\tallow: 'GET, HEAD',\n\t\t\t});\n\t\t}\n\n\t\treturn runWithRequestContext(\n\t\t\t{\n\t\t\t\tlogger: processor.logger,\n\t\t\t\trequestId: `processor-${Date.now()}`,\n\t\t\t\tstartTime: Date.now(),\n\t\t\t\toperation: `processor ${processor.pattern}`,\n\t\t\t},\n\t\t\t() => run(processor, match, options),\n\t\t);\n\t}\n\n\treturn undefined;\n}\n\n/**\n * A request handler for a set of processors — what a generated entry serves\n * — with its services discovered from the default environment parser: the\n * process's environment and the credentials `gkm` injected.\n */\nexport function processorServer(\n\tprocessors: readonly Processor<string, any, any, any>[],\n\tenvParser: EnvironmentParser<{}> = defaultEnvParser(),\n): (request: {\n\tmethod: string;\n\tpath: string;\n}) => Promise<ProcessorResponse | undefined> {\n\tconst serviceDiscovery = ServiceDiscovery.getInstance(envParser);\n\treturn (request) =>\n\t\thandleProcessorRequest(processors, request, { serviceDiscovery });\n}\n\nasync function run(\n\tprocessor: Processor<string, any, any, any>,\n\tmatch: { params: Record<string, string>; key: string },\n\toptions: ProcessorRequestOptions,\n): Promise<ProcessorResponse> {\n\tconst logger = processor.logger as Logger;\n\tconst fetcher = options.fetch ?? fetch;\n\tconst { key } = match;\n\n\tconst schema = processor.options.paramsSchema;\n\tlet params: unknown = match.params;\n\tif (schema) {\n\t\tconst parsed = await schema['~standard'].validate(match.params);\n\t\tif (parsed.issues) return text(400, 'Bad Request', SHORT);\n\t\tparams = parsed.value;\n\t}\n\n\t// A derivative is never itself a source, and a private object is never\n\t// processed: a processor serves exactly what an unsigned read would.\n\tif (key.startsWith(DERIVED_PREFIX) || !processor.options.serves(key)) {\n\t\treturn text(404, 'Not Found', SHORT);\n\t}\n\n\tconst services: Record<string, unknown> =\n\t\tawait options.serviceDiscovery.register(processor.services);\n\tconst storage = services[\n\t\tprocessor.options.origin.serviceName\n\t] as StorageClient;\n\n\tconst derived = derivedKey(processor, match.params, key);\n\tconst kept = await read(storage, derived, fetcher);\n\tif (kept) {\n\t\treturn {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t'content-type': kept.contentType ?? 'application/octet-stream',\n\t\t\t\t'cache-control': cacheControl('immutable'),\n\t\t\t\t'x-gkm-processor': 'kept',\n\t\t\t},\n\t\t\tbody: new Uint8Array(await kept.response.arrayBuffer()),\n\t\t};\n\t}\n\n\tlet source: Response | undefined;\n\tconst load = async (): Promise<Response> => {\n\t\tif (source) return source;\n\t\tconst found = await read(storage, key, fetcher);\n\t\tif (!found) throw new ProcessorSourceMissing(key);\n\t\tsource = found.response;\n\t\treturn source;\n\t};\n\tconst object: SourceObject = {\n\t\tkey,\n\t\tbytes: async () => new Uint8Array(await (await load()).arrayBuffer()),\n\t\tstream: async () => {\n\t\t\tconst body = (await load()).body;\n\t\t\tif (!body) throw new ProcessorSourceMissing(key);\n\t\t\treturn body;\n\t\t},\n\t\tcontentType: async () =>\n\t\t\t(await load()).headers.get('content-type') ?? undefined,\n\t};\n\n\tlet result: Awaited<ReturnType<typeof processor.handler>>;\n\ttry {\n\t\tresult = await processor.handler({\n\t\t\tparams,\n\t\t\tkey,\n\t\t\tobject,\n\t\t\tlogger,\n\t\t\tservices,\n\t\t} as never);\n\t} catch (error) {\n\t\tif (error instanceof ProcessorSourceMissing) {\n\t\t\treturn text(404, 'Not Found', SHORT);\n\t\t}\n\t\tlogger.error({ err: error, key }, 'Processor failed');\n\t\treturn text(500, 'Internal Server Error', 'no-store');\n\t}\n\n\tconst body =\n\t\ttypeof result.body === 'string'\n\t\t\t? new TextEncoder().encode(result.body)\n\t\t\t: result.body;\n\n\t// Kept only when it can never change: anything else would be served from\n\t// the bucket long after its handler would have answered differently.\n\tif (result.cache === 'immutable') {\n\t\tawait storage\n\t\t\t.upload(derived, Buffer.from(body), result.contentType)\n\t\t\t.catch((error: unknown) =>\n\t\t\t\tlogger.warn({ err: error, key: derived }, 'Could not keep derivative'),\n\t\t\t);\n\t}\n\n\treturn {\n\t\tstatus: 200,\n\t\theaders: {\n\t\t\t'content-type': result.contentType,\n\t\t\t'cache-control': cacheControl(result.cache),\n\t\t\t'x-gkm-processor': 'made',\n\t\t},\n\t\tbody,\n\t};\n}\n\n/** An object through a presigned address, or nothing when it is not there. */\nasync function read(\n\tstorage: StorageClient,\n\tkey: string,\n\tfetcher: typeof fetch,\n): Promise<{ response: Response; contentType?: string } | undefined> {\n\tconst url = await storage.getDownloadURL({ path: key });\n\tconst response = await fetcher(url);\n\tif (!response.ok) {\n\t\tawait response.body?.cancel().catch(() => undefined);\n\t\treturn undefined;\n\t}\n\tconst contentType = response.headers.get('content-type') ?? undefined;\n\treturn { response, ...(contentType ? { contentType } : {}) };\n}\n\nfunction text(\n\tstatus: number,\n\tbody: string,\n\tcache: string,\n\textra: Record<string, string> = {},\n): ProcessorResponse {\n\treturn {\n\t\tstatus,\n\t\theaders: {\n\t\t\t'content-type': 'text/plain; charset=utf-8',\n\t\t\t'cache-control': cache,\n\t\t\t...extra,\n\t\t},\n\t\tbody,\n\t};\n}\n","import type { EnvironmentParser } from '@geekmidas/envkit';\nimport { defaultEnvParser } from '../endpoints/surfaceEnv';\nimport type { Processor } from './Processor';\nimport { processorServer } from './runProcessor';\n\n/** The parts of a Lambda function URL event a processor reads. */\nexport interface FunctionUrlEvent {\n\trawPath: string;\n\trequestContext: { http: { method: string } };\n}\n\n/** What a function URL answers with. */\nexport interface FunctionUrlResult {\n\tstatusCode: number;\n\theaders: Record<string, string>;\n\tbody: string;\n\tisBase64Encoded: boolean;\n}\n\n/**\n * A processor as a Lambda behind a function URL — the CDN's origin for its\n * pattern on AWS. The URL takes IAM auth and the CDN signs each request, so\n * the function cannot be called around the cache.\n */\nexport class AWSLambdaProcessor {\n\tprivate readonly serve: ReturnType<typeof processorServer>;\n\n\tconstructor(\n\t\tprocessor: Processor<string, any, any, any>,\n\t\tenvParser: EnvironmentParser<{}> = defaultEnvParser(),\n\t) {\n\t\tthis.serve = processorServer([processor], envParser);\n\t}\n\n\thandler = async (event: FunctionUrlEvent): Promise<FunctionUrlResult> => {\n\t\tconst response = await this.serve({\n\t\t\tmethod: event.requestContext.http.method,\n\t\t\tpath: event.rawPath,\n\t\t});\n\t\tif (!response) {\n\t\t\treturn {\n\t\t\t\tstatusCode: 404,\n\t\t\t\theaders: { 'cache-control': 'public, max-age=60' },\n\t\t\t\tbody: '',\n\t\t\t\tisBase64Encoded: false,\n\t\t\t};\n\t\t}\n\t\tconst body = response.body ?? '';\n\t\treturn {\n\t\t\tstatusCode: response.status,\n\t\t\theaders: response.headers,\n\t\t\tbody:\n\t\t\t\ttypeof body === 'string' ? body : Buffer.from(body).toString('base64'),\n\t\t\tisBase64Encoded: typeof body !== 'string',\n\t\t};\n\t};\n}\n"],"mappings":";;;;;;;AAqBA,IAAa,yBAAb,cAA4C,MAAM;CAC5B;CAArB,YAAY,KAAsB;EACjC,MAAM,IAAI,IAAI,wDAAwD;EADlD,KAAA,MAAA;EAEpB,KAAK,OAAO;CACb;AACD;;AAGA,MAAM,QAAQ;;AAGd,SAAgB,aAAa,OAA2C;CACvE,IAAI,UAAU,aAAa,OAAO;CAClC,IAAI,UAAU,QAAQ,OAAO;CAC7B,OAAO,mBAAmB,OAAO,UAAU;AAC5C;;AAGA,SAAgB,WACf,WACA,QACA,KACS;CACT,OAAO,GAAGA,oBAAAA,iBAAiBC,gBAAAA,YAAY,UAAU,QAAQ,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9E;;;;;;;;;;;AAkBA,eAAsB,uBACrB,YACA,SACA,SACyC;CACzC,MAAM,SAAS,QAAQ,OAAO,YAAY;CAE1C,KAAK,MAAM,aAAa,YAAY;EACnC,MAAM,QAAQC,gBAAAA,aAAa,UAAU,QAAQ,QAAQ,IAAI;EACzD,IAAI,CAAC,OAAO;EAEZ,IAAI,WAAW,SAAS,WAAW,QAClC,OAAO,KAAK,KAAK,sBAAsB,YAAY,EAClD,OAAO,YACR,CAAC;EAGF,QAAA,GAAOC,oBAAAA,sBAAAA,CACN;GACC,QAAQ,UAAU;GAClB,WAAW,aAAa,KAAK,IAAI;GACjC,WAAW,KAAK,IAAI;GACpB,WAAW,aAAa,UAAU;EACnC,SACM,IAAI,WAAW,OAAO,OAAO,CACpC;CACD;AAGD;;;;;;AAOA,SAAgB,gBACf,YACA,YAAmCC,mBAAAA,iBAAiB,GAIR;CAC5C,MAAM,mBAAmBC,oBAAAA,iBAAiB,YAAY,SAAS;CAC/D,QAAQ,YACP,uBAAuB,YAAY,SAAS,EAAE,iBAAiB,CAAC;AAClE;AAEA,eAAe,IACd,WACA,OACA,SAC6B;CAC7B,MAAM,SAAS,UAAU;CACzB,MAAM,UAAU,QAAQ,SAAS;CACjC,MAAM,EAAE,QAAQ;CAEhB,MAAM,SAAS,UAAU,QAAQ;CACjC,IAAI,SAAkB,MAAM;CAC5B,IAAI,QAAQ;EACX,MAAM,SAAS,MAAM,OAAO,YAAY,CAAC,SAAS,MAAM,MAAM;EAC9D,IAAI,OAAO,QAAQ,OAAO,KAAK,KAAK,eAAe,KAAK;EACxD,SAAS,OAAO;CACjB;CAIA,IAAI,IAAI,WAAWL,oBAAAA,cAAc,KAAK,CAAC,UAAU,QAAQ,OAAO,GAAG,GAClE,OAAO,KAAK,KAAK,aAAa,KAAK;CAGpC,MAAM,WACL,MAAM,QAAQ,iBAAiB,SAAS,UAAU,QAAQ;CAC3D,MAAM,UAAU,SACf,UAAU,QAAQ,OAAO;CAG1B,MAAM,UAAU,WAAW,WAAW,MAAM,QAAQ,GAAG;CACvD,MAAM,OAAO,MAAM,KAAK,SAAS,SAAS,OAAO;CACjD,IAAI,MACH,OAAO;EACN,QAAQ;EACR,SAAS;GACR,gBAAgB,KAAK,eAAe;GACpC,iBAAiB,aAAa,WAAW;GACzC,mBAAmB;EACpB;EACA,MAAM,IAAI,WAAW,MAAM,KAAK,SAAS,YAAY,CAAC;CACvD;CAGD,IAAI;CACJ,MAAM,OAAO,YAA+B;EAC3C,IAAI,QAAQ,OAAO;EACnB,MAAM,QAAQ,MAAM,KAAK,SAAS,KAAK,OAAO;EAC9C,IAAI,CAAC,OAAO,MAAM,IAAI,uBAAuB,GAAG;EAChD,SAAS,MAAM;EACf,OAAO;CACR;CACA,MAAM,SAAuB;EAC5B;EACA,OAAO,YAAY,IAAI,WAAW,OAAO,MAAM,KAAK,EAAA,CAAG,YAAY,CAAC;EACpE,QAAQ,YAAY;GACnB,MAAM,QAAQ,MAAM,KAAK,EAAA,CAAG;GAC5B,IAAI,CAAC,MAAM,MAAM,IAAI,uBAAuB,GAAG;GAC/C,OAAO;EACR;EACA,aAAa,aACX,MAAM,KAAK,EAAA,CAAG,QAAQ,IAAI,cAAc,KAAK,KAAA;CAChD;CAEA,IAAI;CACJ,IAAI;EACH,SAAS,MAAM,UAAU,QAAQ;GAChC;GACA;GACA;GACA;GACA;EACD,CAAU;CACX,SAAS,OAAO;EACf,IAAI,iBAAiB,wBACpB,OAAO,KAAK,KAAK,aAAa,KAAK;EAEpC,OAAO,MAAM;GAAE,KAAK;GAAO;EAAI,GAAG,kBAAkB;EACpD,OAAO,KAAK,KAAK,yBAAyB,UAAU;CACrD;CAEA,MAAM,OACL,OAAO,OAAO,SAAS,WACpB,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO,IAAI,IACpC,OAAO;CAIX,IAAI,OAAO,UAAU,aACpB,MAAM,QACJ,OAAO,SAAS,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,CAAC,CACtD,OAAO,UACP,OAAO,KAAK;EAAE,KAAK;EAAO,KAAK;CAAQ,GAAG,2BAA2B,CACtE;CAGF,OAAO;EACN,QAAQ;EACR,SAAS;GACR,gBAAgB,OAAO;GACvB,iBAAiB,aAAa,OAAO,KAAK;GAC1C,mBAAmB;EACpB;EACA;CACD;AACD;;AAGA,eAAe,KACd,SACA,KACA,SACoE;CAEpE,MAAM,WAAW,MAAM,QAAQ,MADb,QAAQ,eAAe,EAAE,MAAM,IAAI,CAAC,CACpB;CAClC,IAAI,CAAC,SAAS,IAAI;EACjB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EACnD;CACD;CACA,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;CAC5D,OAAO;EAAE;EAAU,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;CAAG;AAC5D;AAEA,SAAS,KACR,QACA,MACA,OACA,QAAgC,CAAC,GACb;CACpB,OAAO;EACN;EACA,SAAS;GACR,gBAAgB;GAChB,iBAAiB;GACjB,GAAG;EACJ;EACA;CACD;AACD;;;;;;;;AChOA,IAAa,qBAAb,MAAgC;CAC/B;CAEA,YACC,WACA,YAAmCM,mBAAAA,iBAAiB,GACnD;EACD,KAAK,QAAQ,gBAAgB,CAAC,SAAS,GAAG,SAAS;CACpD;CAEA,UAAU,OAAO,UAAwD;EACxE,MAAM,WAAW,MAAM,KAAK,MAAM;GACjC,QAAQ,MAAM,eAAe,KAAK;GAClC,MAAM,MAAM;EACb,CAAC;EACD,IAAI,CAAC,UACJ,OAAO;GACN,YAAY;GACZ,SAAS,EAAE,iBAAiB,qBAAqB;GACjD,MAAM;GACN,iBAAiB;EAClB;EAED,MAAM,OAAO,SAAS,QAAQ;EAC9B,OAAO;GACN,YAAY,SAAS;GACrB,SAAS,SAAS;GAClB,MACC,OAAO,SAAS,WAAW,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,QAAQ;GACtE,iBAAiB,OAAO,SAAS;EAClC;CACD;AACD"}

package/dist/processors/index.d.cts

@@ -0,0 +1,78 @@
+import { _ as parsePattern, a as ProcessorCache, c as ProcessorParams, d as ParsedPattern, f as PatternParams, g as matchPattern, h as fillPattern, i as Processor, l as ProcessorResult, m as ProcessorPatternInvalid, n as ProcessorNativeInvalid, o as ProcessorContext, p as ProcessorParamMissing, r as DERIVED_PREFIX, s as ProcessorHandler, t as ProcessorBuilder, u as SourceObject } from "../ProcessorBuilder-C62bIOwj.cjs";
+import { EnvironmentParser } from "@geekmidas/envkit";
+import { ServiceDiscovery } from "@geekmidas/services";
+//#region src/processors/AWSLambdaProcessor.d.ts
+/** The parts of a Lambda function URL event a processor reads. */
+interface FunctionUrlEvent {
+  rawPath: string;
+  requestContext: {
+    http: {
+      method: string;
+    };
+  };
+}
+/** What a function URL answers with. */
+interface FunctionUrlResult {
+  statusCode: number;
+  headers: Record<string, string>;
+  body: string;
+  isBase64Encoded: boolean;
+}
+/**
+ * A processor as a Lambda behind a function URL — the CDN's origin for its
+ * pattern on AWS. The URL takes IAM auth and the CDN signs each request, so
+ * the function cannot be called around the cache.
+ */
+export declare class AWSLambdaProcessor {
+  private readonly serve;
+  constructor(processor: Processor<string, any, any, any>, envParser?: EnvironmentParser<{}>);
+  handler: (event: FunctionUrlEvent) => Promise<FunctionUrlResult>;
+}
+//#endregion
+//#region src/processors/runProcessor.d.ts
+/** What a processor answers, for whichever server or function carries it. */
+interface ProcessorResponse {
+  status: number;
+  headers: Record<string, string>;
+  body?: Uint8Array | string;
+}
+/** The object a request addressed is not in the bucket. */
+export declare class ProcessorSourceMissing extends Error {
+  readonly key: string;
+  constructor(key: string);
+}
+/** The header a response carries, by how long it may be kept. */
+export declare function cacheControl(cache: ProcessorCache | undefined): string;
+/** Where a processor keeps the derivative for one request. */
+export declare function derivedKey(processor: Processor<string, any, any, any>, params: Readonly<Record<string, string>>, key: string): string;
+interface ProcessorRequestOptions {
+  serviceDiscovery: ServiceDiscovery<any>;
+  /** How the bucket is read through a presigned address. */
+  fetch?: typeof fetch;
+}
+/**
+ * Answer one request with the first processor whose pattern matches it, or
+ * `undefined` when none does.
+ *
+ * In order: the parameters are parsed by the processor's schema (400 when it
+ * refuses them); the key must be one of the file server's open paths (404
+ * otherwise, as an unsigned read of it would be); a derivative already in the
+ * bucket is answered without running anything; and only then is the handler
+ * run, its `immutable` result written through for next time.
+ */
+export declare function handleProcessorRequest(processors: readonly Processor<string, any, any, any>[], request: {
+  method: string;
+  path: string;
+}, options: ProcessorRequestOptions): Promise<ProcessorResponse | undefined>;
+/**
+ * A request handler for a set of processors — what a generated entry serves
+ * — with its services discovered from the default environment parser: the
+ * process's environment and the credentials `gkm` injected.
+ */
+export declare function processorServer(processors: readonly Processor<string, any, any, any>[], envParser?: EnvironmentParser<{}>): (request: {
+  method: string;
+  path: string;
+}) => Promise<ProcessorResponse | undefined>;
+//#endregion
+export { DERIVED_PREFIX, type ParsedPattern, type PatternParams, Processor, ProcessorBuilder, type ProcessorCache, type ProcessorContext, type ProcessorHandler, ProcessorNativeInvalid, ProcessorParamMissing, type ProcessorParams, ProcessorPatternInvalid, type ProcessorRequestOptions, type ProcessorResponse, type ProcessorResult, type SourceObject, fillPattern, matchPattern, parsePattern };
+//# sourceMappingURL=index.d.cts.map

package/dist/processors/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/processors/AWSLambdaProcessor.ts","../../src/processors/runProcessor.ts"],"mappings":";;;;;UAMiB;EAChB;EACA;IAAkB;MAAQ;;;;;UAIV;EAChB;EACA,SAAS;EACT;EACA;;;;;;;qBAQY;mBACK;EAEjB,YACC,WAAW,kCACX,YAAW;EAKZ,UAAO,OAAiB,qBAAmB,QAAQ;;;;;UCpBnC;EAChB;EACA,SAAS;EACT,OAAO;;;qBAIK,+BAA+B;WACtB;EAArB,YAAqB;;;wBAUN,aAAa,OAAO;;wBAOpB,WACf,WAAW,kCACX,QAAQ,SAAS,yBACjB;UAKgB;EAChB,kBAAkB;;EAElB,eAAe;;;;;;;;;;;;wBAaM,uBACrB,qBAAqB,oCACrB;EAAW;EAAgB;GAC3B,SAAS,0BACP,QAAQ;;;;;;wBAgCK,gBACf,qBAAqB,oCACrB,YAAW,yBACR;EACH;EACA;MACK,QAAQ"}

package/dist/processors/index.d.mts

@@ -0,0 +1,78 @@
+import { _ as parsePattern, a as ProcessorCache, c as ProcessorParams, d as ParsedPattern, f as PatternParams, g as matchPattern, h as fillPattern, i as Processor, l as ProcessorResult, m as ProcessorPatternInvalid, n as ProcessorNativeInvalid, o as ProcessorContext, p as ProcessorParamMissing, r as DERIVED_PREFIX, s as ProcessorHandler, t as ProcessorBuilder, u as SourceObject } from "../ProcessorBuilder-B2_stA8f.mjs";
+import { ServiceDiscovery } from "@geekmidas/services";
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/processors/AWSLambdaProcessor.d.ts
+/** The parts of a Lambda function URL event a processor reads. */
+interface FunctionUrlEvent {
+  rawPath: string;
+  requestContext: {
+    http: {
+      method: string;
+    };
+  };
+}
+/** What a function URL answers with. */
+interface FunctionUrlResult {
+  statusCode: number;
+  headers: Record<string, string>;
+  body: string;
+  isBase64Encoded: boolean;
+}
+/**
+ * A processor as a Lambda behind a function URL — the CDN's origin for its
+ * pattern on AWS. The URL takes IAM auth and the CDN signs each request, so
+ * the function cannot be called around the cache.
+ */
+export declare class AWSLambdaProcessor {
+  private readonly serve;
+  constructor(processor: Processor<string, any, any, any>, envParser?: EnvironmentParser<{}>);
+  handler: (event: FunctionUrlEvent) => Promise<FunctionUrlResult>;
+}
+//#endregion
+//#region src/processors/runProcessor.d.ts
+/** What a processor answers, for whichever server or function carries it. */
+interface ProcessorResponse {
+  status: number;
+  headers: Record<string, string>;
+  body?: Uint8Array | string;
+}
+/** The object a request addressed is not in the bucket. */
+export declare class ProcessorSourceMissing extends Error {
+  readonly key: string;
+  constructor(key: string);
+}
+/** The header a response carries, by how long it may be kept. */
+export declare function cacheControl(cache: ProcessorCache | undefined): string;
+/** Where a processor keeps the derivative for one request. */
+export declare function derivedKey(processor: Processor<string, any, any, any>, params: Readonly<Record<string, string>>, key: string): string;
+interface ProcessorRequestOptions {
+  serviceDiscovery: ServiceDiscovery<any>;
+  /** How the bucket is read through a presigned address. */
+  fetch?: typeof fetch;
+}
+/**
+ * Answer one request with the first processor whose pattern matches it, or
+ * `undefined` when none does.
+ *
+ * In order: the parameters are parsed by the processor's schema (400 when it
+ * refuses them); the key must be one of the file server's open paths (404
+ * otherwise, as an unsigned read of it would be); a derivative already in the
+ * bucket is answered without running anything; and only then is the handler
+ * run, its `immutable` result written through for next time.
+ */
+export declare function handleProcessorRequest(processors: readonly Processor<string, any, any, any>[], request: {
+  method: string;
+  path: string;
+}, options: ProcessorRequestOptions): Promise<ProcessorResponse | undefined>;
+/**
+ * A request handler for a set of processors — what a generated entry serves
+ * — with its services discovered from the default environment parser: the
+ * process's environment and the credentials `gkm` injected.
+ */
+export declare function processorServer(processors: readonly Processor<string, any, any, any>[], envParser?: EnvironmentParser<{}>): (request: {
+  method: string;
+  path: string;
+}) => Promise<ProcessorResponse | undefined>;
+//#endregion
+export { DERIVED_PREFIX, type ParsedPattern, type PatternParams, Processor, ProcessorBuilder, type ProcessorCache, type ProcessorContext, type ProcessorHandler, ProcessorNativeInvalid, ProcessorParamMissing, type ProcessorParams, ProcessorPatternInvalid, type ProcessorRequestOptions, type ProcessorResponse, type ProcessorResult, type SourceObject, fillPattern, matchPattern, parsePattern };
+//# sourceMappingURL=index.d.mts.map

package/dist/processors/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/processors/AWSLambdaProcessor.ts","../../src/processors/runProcessor.ts"],"mappings":";;;;;UAMiB;EAChB;EACA;IAAkB;MAAQ;;;;;UAIV;EAChB;EACA,SAAS;EACT;EACA;;;;;;;qBAQY;mBACK;EAEjB,YACC,WAAW,kCACX,YAAW;EAKZ,UAAO,OAAiB,qBAAmB,QAAQ;;;;;UCpBnC;EAChB;EACA,SAAS;EACT,OAAO;;;qBAIK,+BAA+B;WACtB;EAArB,YAAqB;;;wBAUN,aAAa,OAAO;;wBAOpB,WACf,WAAW,kCACX,QAAQ,SAAS,yBACjB;UAKgB;EAChB,kBAAkB;;EAElB,eAAe;;;;;;;;;;;;wBAaM,uBACrB,qBAAqB,oCACrB;EAAW;EAAgB;GAC3B,SAAS,0BACP,QAAQ;;;;;;wBAgCK,gBACf,qBAAqB,oCACrB,YAAW,yBACR;EACH;EACA;MACK,QAAQ"}

package/dist/processors/index.mjs

@@ -0,0 +1,193 @@
+import { a as parsePattern, c as DERIVED_PREFIX, i as matchPattern, l as Processor, n as ProcessorPatternInvalid, o as ProcessorBuilder, r as fillPattern, s as ProcessorNativeInvalid, t as ProcessorParamMissing } from "../pattern-C1CEcglD.mjs";
+import { t as defaultEnvParser } from "../surfaceEnv-wMT5QzgZ.mjs";
+import { ServiceDiscovery, runWithRequestContext } from "@geekmidas/services";
+//#region src/processors/runProcessor.ts
+/** The object a request addressed is not in the bucket. */
+var ProcessorSourceMissing = class extends Error {
+	key;
+	constructor(key) {
+		super(`'${key}' is not in the bucket, so there is nothing to process.`);
+		this.key = key;
+		this.name = "ProcessorSourceMissing";
+	}
+};
+/** What a refusal or a miss may be kept for: long enough to absorb a burst. */
+const SHORT = "public, max-age=60";
+/** The header a response carries, by how long it may be kept. */
+function cacheControl(cache) {
+	if (cache === "immutable") return "public, max-age=31536000, immutable";
+	if (cache === "none") return "no-store";
+	return `public, max-age=${cache?.maxAge ?? 3600}`;
+}
+/** Where a processor keeps the derivative for one request. */
+function derivedKey(processor, params, key) {
+	return `${DERIVED_PREFIX}${fillPattern(processor.parsed, params, key).slice(1)}`;
+}
+/**
+* Answer one request with the first processor whose pattern matches it, or
+* `undefined` when none does.
+*
+* In order: the parameters are parsed by the processor's schema (400 when it
+* refuses them); the key must be one of the file server's open paths (404
+* otherwise, as an unsigned read of it would be); a derivative already in the
+* bucket is answered without running anything; and only then is the handler
+* run, its `immutable` result written through for next time.
+*/
+async function handleProcessorRequest(processors, request, options) {
+	const method = request.method.toUpperCase();
+	for (const processor of processors) {
+		const match = matchPattern(processor.parsed, request.path);
+		if (!match) continue;
+		if (method !== "GET" && method !== "HEAD") return text(405, "Method Not Allowed", "no-store", { allow: "GET, HEAD" });
+		return runWithRequestContext({
+			logger: processor.logger,
+			requestId: `processor-${Date.now()}`,
+			startTime: Date.now(),
+			operation: `processor ${processor.pattern}`
+		}, () => run(processor, match, options));
+	}
+}
+/**
+* A request handler for a set of processors — what a generated entry serves
+* — with its services discovered from the default environment parser: the
+* process's environment and the credentials `gkm` injected.
+*/
+function processorServer(processors, envParser = defaultEnvParser()) {
+	const serviceDiscovery = ServiceDiscovery.getInstance(envParser);
+	return (request) => handleProcessorRequest(processors, request, { serviceDiscovery });
+}
+async function run(processor, match, options) {
+	const logger = processor.logger;
+	const fetcher = options.fetch ?? fetch;
+	const { key } = match;
+	const schema = processor.options.paramsSchema;
+	let params = match.params;
+	if (schema) {
+		const parsed = await schema["~standard"].validate(match.params);
+		if (parsed.issues) return text(400, "Bad Request", SHORT);
+		params = parsed.value;
+	}
+	if (key.startsWith(DERIVED_PREFIX) || !processor.options.serves(key)) return text(404, "Not Found", SHORT);
+	const services = await options.serviceDiscovery.register(processor.services);
+	const storage = services[processor.options.origin.serviceName];
+	const derived = derivedKey(processor, match.params, key);
+	const kept = await read(storage, derived, fetcher);
+	if (kept) return {
+		status: 200,
+		headers: {
+			"content-type": kept.contentType ?? "application/octet-stream",
+			"cache-control": cacheControl("immutable"),
+			"x-gkm-processor": "kept"
+		},
+		body: new Uint8Array(await kept.response.arrayBuffer())
+	};
+	let source;
+	const load = async () => {
+		if (source) return source;
+		const found = await read(storage, key, fetcher);
+		if (!found) throw new ProcessorSourceMissing(key);
+		source = found.response;
+		return source;
+	};
+	const object = {
+		key,
+		bytes: async () => new Uint8Array(await (await load()).arrayBuffer()),
+		stream: async () => {
+			const body = (await load()).body;
+			if (!body) throw new ProcessorSourceMissing(key);
+			return body;
+		},
+		contentType: async () => (await load()).headers.get("content-type") ?? void 0
+	};
+	let result;
+	try {
+		result = await processor.handler({
+			params,
+			key,
+			object,
+			logger,
+			services
+		});
+	} catch (error) {
+		if (error instanceof ProcessorSourceMissing) return text(404, "Not Found", SHORT);
+		logger.error({
+			err: error,
+			key
+		}, "Processor failed");
+		return text(500, "Internal Server Error", "no-store");
+	}
+	const body = typeof result.body === "string" ? new TextEncoder().encode(result.body) : result.body;
+	if (result.cache === "immutable") await storage.upload(derived, Buffer.from(body), result.contentType).catch((error) => logger.warn({
+		err: error,
+		key: derived
+	}, "Could not keep derivative"));
+	return {
+		status: 200,
+		headers: {
+			"content-type": result.contentType,
+			"cache-control": cacheControl(result.cache),
+			"x-gkm-processor": "made"
+		},
+		body
+	};
+}
+/** An object through a presigned address, or nothing when it is not there. */
+async function read(storage, key, fetcher) {
+	const response = await fetcher(await storage.getDownloadURL({ path: key }));
+	if (!response.ok) {
+		await response.body?.cancel().catch(() => void 0);
+		return;
+	}
+	const contentType = response.headers.get("content-type") ?? void 0;
+	return {
+		response,
+		...contentType ? { contentType } : {}
+	};
+}
+function text(status, body, cache, extra = {}) {
+	return {
+		status,
+		headers: {
+			"content-type": "text/plain; charset=utf-8",
+			"cache-control": cache,
+			...extra
+		},
+		body
+	};
+}
+//#endregion
+//#region src/processors/AWSLambdaProcessor.ts
+/**
+* A processor as a Lambda behind a function URL — the CDN's origin for its
+* pattern on AWS. The URL takes IAM auth and the CDN signs each request, so
+* the function cannot be called around the cache.
+*/
+var AWSLambdaProcessor = class {
+	serve;
+	constructor(processor, envParser = defaultEnvParser()) {
+		this.serve = processorServer([processor], envParser);
+	}
+	handler = async (event) => {
+		const response = await this.serve({
+			method: event.requestContext.http.method,
+			path: event.rawPath
+		});
+		if (!response) return {
+			statusCode: 404,
+			headers: { "cache-control": "public, max-age=60" },
+			body: "",
+			isBase64Encoded: false
+		};
+		const body = response.body ?? "";
+		return {
+			statusCode: response.status,
+			headers: response.headers,
+			body: typeof body === "string" ? body : Buffer.from(body).toString("base64"),
+			isBase64Encoded: typeof body !== "string"
+		};
+	};
+};
+//#endregion
+export { AWSLambdaProcessor, DERIVED_PREFIX, Processor, ProcessorBuilder, ProcessorNativeInvalid, ProcessorParamMissing, ProcessorPatternInvalid, ProcessorSourceMissing, cacheControl, derivedKey, fillPattern, handleProcessorRequest, matchPattern, parsePattern, processorServer };
+
+//# sourceMappingURL=index.mjs.map