@geekmidas/constructs 10.0.0-alpha.4 → 10.0.0-alpha.41

package/dist/adaptors/aws.mjs

@@ -1,21 +1,21 @@
-import { __toESM } from "../Construct-BD5neF7w.mjs";
-import "../construct-interface-Z4CpS8tK.mjs";
-import { FunctionBuilder } from "../functions-Ck21Uyq0.mjs";
-import "../clone-DblgEZZa.mjs";
-import { Endpoint, ResponseBuilder, require_lodash } from "../Endpoint-Dij_wOcc.mjs";
-import { envParserFor } from "../surfaceEnv-C3Ktahea.mjs";
-import { createApiGatewayCookies, publishConstructEvents, publishEvents } from "../lazyAccessors-BoJN3SMd.mjs";
-import { createAuditContext, executeWithAuditTransaction } from "../processAudits-Dmts9H_b.mjs";
+import { o as __toESM } from "../Construct-BO1X-kt9.mjs";
+import { a as publishEvents, i as publishConstructEvents, t as FunctionBuilder } from "../functions-DCIfCRR-.mjs";
+import { i as require_lodash_set, n as ResponseBuilder, t as Endpoint } from "../Endpoint-CQAeh1Rh.mjs";
+import { n as envParserFor } from "../surfaceEnv-wMT5QzgZ.mjs";
+import { t as createApiGatewayCookies } from "../lazyAccessors-CFanua0O.mjs";
+import { n as executeWithAuditTransaction, t as createAuditContext } from "../processAudits-BpRlPQMW.mjs";
 import { ForbiddenError, UnprocessableEntityError, wrapError } from "@geekmidas/errors";
+import { withRlsContext } from "@geekmidas/db/rls";
 import { ServiceDiscovery, runWithRequestContext } from "@geekmidas/services";
-import middy from "@middy/core";
+import qs from "qs";
 import { DefaultAuditor } from "@geekmidas/audit";
+import middy from "@middy/core";
 import { withAuditableTransaction } from "@geekmidas/audit/kysely";
-import { withRlsContext } from "@geekmidas/db/rls";
-import qs from "qs";
-
+import { confirmSnsSubscription, toSnsEvent, verifySnsMessage } from "@geekmidas/events/sns";
 //#region src/functions/FunctionExecutionWrapper.ts
 var FunctionExecutionWrapper = class {
+	envParser;
+	fn;
 	constructor(envParser, fn) {
 		this.envParser = envParser;
 		this.fn = fn;
@@ -25,25 +25,22 @@ var FunctionExecutionWrapper = class {
 		return this._logger || this.fn.logger;
 	}
 	get serviceDiscovery() {
-		const serviceDiscovery = ServiceDiscovery.getInstance(this.envParser);
-		return serviceDiscovery;
+		return ServiceDiscovery.getInstance(this.envParser);
 	}
 	getServices() {
 		return this.serviceDiscovery.register(this.fn.services);
 	}
 	async getDatabase() {
-		if (!this.fn.databaseService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.databaseService]);
-		return services[this.fn.databaseService.serviceName];
+		if (!this.fn.databaseService) return;
+		return (await this.serviceDiscovery.register([this.fn.databaseService]))[this.fn.databaseService.serviceName];
 	}
 	/**
 	* Get the audit storage service if configured.
 	* Returns undefined if no auditor storage is configured.
 	*/
 	async getAuditStorage() {
-		if (!this.fn.auditorStorageService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.auditorStorageService]);
-		return services[this.fn.auditorStorageService.serviceName];
+		if (!this.fn.auditorStorageService) return;
+		return (await this.serviceDiscovery.register([this.fn.auditorStorageService]))[this.fn.auditorStorageService.serviceName];
 	}
 	/**
 	* Create an auditor instance for the function.
@@ -51,7 +48,7 @@ var FunctionExecutionWrapper = class {
 	*/
 	async createAuditor() {
 		const storage = await this.getAuditStorage();
-		if (!storage) return void 0;
+		if (!storage) return;
 		return new DefaultAuditor({
 			actor: {
 				id: "system",
@@ -72,51 +69,44 @@ var FunctionExecutionWrapper = class {
 	async executeWithAudit(handler) {
 		const auditor = await this.createAuditor();
 		const storage = await this.getAuditStorage();
-		if (!auditor || !storage) {
-			const db$1 = await this.getDatabase();
-			return handler({ db: db$1 });
-		}
+		if (!auditor || !storage) return handler({ db: await this.getDatabase() });
 		const storageDb = storage.getDatabase?.();
 		const databaseServiceName = this.fn.databaseService?.serviceName;
 		const auditDbServiceName = this.fn.auditorStorageService?.serviceName;
 		if (storageDb && databaseServiceName && auditDbServiceName) return withAuditableTransaction(storageDb, auditor, async (trx) => {
-			const response$1 = await handler({
+			return await handler({
 				auditor,
 				db: trx
 			});
-			return response$1;
 		});
-		const db = await this.getDatabase();
 		const response = await handler({
 			auditor,
-			db
+			db: await this.getDatabase()
 		});
 		await auditor.flush();
 		return response;
 	}
 	async getFunctionInput(event) {
-		const parsedInput = await FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
-		return parsedInput;
+		return await FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
 	}
 	async publishEvents(response) {
-		await publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response, this.fn.publisherService);
+		await publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response);
 	}
 	async parseComposableStandardSchema(data, schema) {
 		return FunctionBuilder.parseComposableStandardSchema(data, schema);
 	}
 };
-
 //#endregion
 //#region src/functions/AWSLambdaFunction.ts
 var AWSLambdaFunction = class extends FunctionExecutionWrapper {
+	fn;
 	constructor(envParser, fn) {
 		super(envParser, fn);
 		this.fn = fn;
 	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.fn.logger;
-			logger.error(req.error || {}, "Error processing function");
+			(req.event?.logger || this.fn.logger).error(req.error || {}, "Error processing function");
 			throw wrapError(req.error);
 		} };
 	}
@@ -192,8 +182,7 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 			db: event.db,
 			auditor: event.auditor
 		});
-		const output = await this.fn.parseOutput(result);
-		return output;
+		return await this.fn.parseOutput(result);
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
@@ -211,7 +200,6 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/crons/AWSScheduledFunction.ts
 /**
@@ -245,11 +233,11 @@ var AWSScheduledFunction = class extends AWSLambdaFunction {
 		super(envParser, cron);
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayEndpointAdaptor.ts
-var import_lodash = __toESM(require_lodash(), 1);
+var import_lodash_set = /* @__PURE__ */ __toESM(require_lodash_set(), 1);
 var AmazonApiGatewayEndpoint = class {
+	endpoint;
 	options;
 	/**
 	* The parser this adaptor discovers services with.
@@ -287,8 +275,7 @@ var AmazonApiGatewayEndpoint = class {
 	static decodeBody(body, isBase64Encoded, contentType) {
 		if (!body) return void 0;
 		const raw = isBase64Encoded ? Buffer.from(body, "base64").toString("utf-8") : body;
-		const isJson = !contentType || contentType.toLowerCase().includes("application/json");
-		if (isJson) return JSON.parse(raw);
+		if (!contentType || contentType.toLowerCase().includes("application/json")) return JSON.parse(raw);
 		return raw;
 	}
 	getCookies(e) {
@@ -302,11 +289,11 @@ var AmazonApiGatewayEndpoint = class {
 				const headers = req.event.headers;
 				const header = Endpoint.createHeaders(headers);
 				const cookie = this.getCookies(req.event);
-				(0, import_lodash.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
-				(0, import_lodash.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
-				(0, import_lodash.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
-				(0, import_lodash.default)(req.event, "header", header);
-				(0, import_lodash.default)(req.event, "cookie", cookie);
+				(0, import_lodash_set.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
+				(0, import_lodash_set.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
+				(0, import_lodash_set.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
+				(0, import_lodash_set.default)(req.event, "header", header);
+				(0, import_lodash_set.default)(req.event, "cookie", cookie);
 			} catch (error) {
 				if (error && typeof error === "object" && Array.isArray(error)) throw new UnprocessableEntityError("Validation failed", error);
 				throw error;
@@ -325,9 +312,8 @@ var AmazonApiGatewayEndpoint = class {
 	}
 	services() {
 		return { before: async (req) => {
-			const _logger = req.event.logger;
-			const serviceDiscovery = ServiceDiscovery.getInstance(this.envParser);
-			const services = await serviceDiscovery.register(this.endpoint.services);
+			req.event.logger;
+			const services = await ServiceDiscovery.getInstance(this.envParser).register(this.endpoint.services);
 			req.event.services = services;
 		} };
 	}
@@ -338,7 +324,7 @@ var AmazonApiGatewayEndpoint = class {
 			const header = req.event.header;
 			const cookie = req.event.cookie;
 			const session = req.event.session;
-			const isAuthorized = await this.endpoint.authorize({
+			if (!await this.endpoint.authorize({
 				header,
 				cookie,
 				services,
@@ -348,8 +334,7 @@ var AmazonApiGatewayEndpoint = class {
 				body: req.event.body,
 				query: req.event.query,
 				params: req.event.params
-			});
-			if (!isAuthorized) {
+			})) {
 				logger.warn("Forbidden access attempt");
 				throw new ForbiddenError("Forbidden access to the endpoint", "You do not have permission to access this resource.");
 			}
@@ -358,9 +343,8 @@ var AmazonApiGatewayEndpoint = class {
 	database() {
 		return { before: async (req) => {
 			if (!this.endpoint.databaseService) return;
-			const _logger = req.event.logger;
-			const serviceDiscovery = ServiceDiscovery.getInstance(this.envParser);
-			const db = await serviceDiscovery.register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
+			req.event.logger;
+			const db = await ServiceDiscovery.getInstance(this.envParser).register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
 			req.event.db = db;
 		} };
 	}
@@ -411,9 +395,8 @@ var AmazonApiGatewayEndpoint = class {
 			cookie: event.cookie,
 			logger
 		}) : void 0;
-		const result = await executeWithAuditTransaction(auditContext, async (auditor) => {
-			const sameDatabase = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName;
-			const baseDb = sameDatabase ? auditor?.getTransaction?.() ?? rawDb : rawDb;
+		const { output, metadata } = await executeWithAuditTransaction(auditContext, async (auditor) => {
+			const baseDb = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName ? auditor?.getTransaction?.() ?? rawDb : rawDb;
 			const executeHandler = async (db) => {
 				const responseBuilder = new ResponseBuilder();
 				const response = await this.endpoint.handler({
@@ -427,33 +410,31 @@ var AmazonApiGatewayEndpoint = class {
 					...input
 				}, responseBuilder);
 				let data = response;
-				let metadata$1 = responseBuilder.getMetadata();
+				let metadata = responseBuilder.getMetadata();
 				if (Endpoint.hasMetadata(response)) {
 					data = response.data;
-					metadata$1 = response.metadata;
+					metadata = response.metadata;
 				}
-				const output$1 = this.endpoint.outputSchema ? await this.endpoint.parseOutput(data) : void 0;
 				return {
-					output: output$1,
-					metadata: metadata$1,
+					output: this.endpoint.outputSchema ? await this.endpoint.parseOutput(data) : void 0,
+					metadata,
 					responseBuilder
 				};
 			};
 			if (rlsActive && rlsContext && baseDb) return withRlsContext(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: this.endpoint.rlsConfig?.prefix });
 			return executeHandler(baseDb);
-		}, async (result$1, auditor) => {
+		}, async (result, auditor) => {
 			if (!audits?.length) return;
 			for (const audit of audits) {
-				if (audit.when && !audit.when(result$1.output)) continue;
-				const payload = audit.payload(result$1.output);
-				const entityId = audit.entityId?.(result$1.output);
+				if (audit.when && !audit.when(result.output)) continue;
+				const payload = audit.payload(result.output);
+				const entityId = audit.entityId?.(result.output);
 				auditor.audit(audit.type, payload, {
 					table: audit.table,
 					entityId
 				});
 			}
 		}, { db: rawDb });
-		const { output, metadata } = result;
 		const isJsonResponse = this.endpoint.responseType === "application/json";
 		const body = output === void 0 ? void 0 : isJsonResponse ? JSON.stringify(output) : typeof output === "string" ? output : String(output);
 		event.__response = output;
@@ -521,7 +502,6 @@ var AmazonApiGatewayEndpoint = class {
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/endpoints/parseQueryParams.ts
 /**
@@ -542,10 +522,10 @@ function parseQueryParams(queryParams) {
 	}
 	return qs.parse(parts.join("&"));
 }
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV1EndpointAdaptor.ts
 var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
+	endpoint;
 	getInput(e) {
 		const multiValueParams = e.multiValueQueryStringParameters || {};
 		const singleValueParams = e.queryStringParameters || {};
@@ -578,17 +558,16 @@ var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV2EndpointAdaptor.ts
 var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
+	endpoint;
 	getCookies(e) {
 		return createApiGatewayCookies(e.cookies, e.headers?.cookie);
 	}
 	getInput(e) {
-		const raw = AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]);
 		return {
-			body: raw,
+			body: AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]),
 			query: qs.parse(e.rawQueryString),
 			params: e.pathParameters || {}
 		};
@@ -613,7 +592,6 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/queue/AWSLambdaQueueAdaptor.ts
 /**
@@ -628,6 +606,8 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 * retries only those records.
 */
 var AWSLambdaQueue = class {
+	envParser;
+	queue;
 	_services;
 	constructor(envParser, queue) {
 		this.envParser = envParser;
@@ -704,7 +684,7 @@ var AWSLambdaQueue = class {
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		return async (event, context) => {
+		return (async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.queue.logger.child({ requestId });
@@ -713,13 +693,14 @@ var AWSLambdaQueue = class {
 				requestId,
 				startTime
 			}, () => handler(event, context));
-		};
+		});
 	}
 };
-
 //#endregion
 //#region src/subscribers/AWSLambdaSubscriberAdaptor.ts
 var AWSLambdaSubscriber = class {
+	envParser;
+	subscriber;
 	_logger;
 	_services;
 	constructor(envParser, subscriber) {
@@ -741,8 +722,7 @@ var AWSLambdaSubscriber = class {
 	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.subscriber.logger;
-			logger.error(req.error || {}, "Error processing subscriber");
+			(req.event?.logger || this.subscriber.logger).error(req.error || {}, "Error processing subscriber");
 			throw wrapError(req.error);
 		} };
 	}
@@ -766,7 +746,7 @@ var AWSLambdaSubscriber = class {
 	}
 	parseEvents() {
 		return { before: async (req) => {
-			const { logger,...e } = req.event;
+			const { logger, ...e } = req.event;
 			const rawEvent = e;
 			logger.info({ rawEvent });
 			const events = [];
@@ -882,7 +862,87 @@ var AWSLambdaSubscriber = class {
 		return wrappedHandler;
 	}
 };
-
 //#endregion
-export { AWSLambdaFunction, AWSLambdaQueue, AWSLambdaSubscriber, AWSScheduledFunction, AmazonApiGatewayV1Endpoint, AmazonApiGatewayV2Endpoint };
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is handed to {@link AWSLambdaSubscriber} as the Lambda
+* event SNS would have invoked a function with, so the parsing, the services
+* and the error handling are the ones that run deployed on Lambda — the
+* endpoint is only a different way for the event to arrive.
+*/
+var SnsPushSubscriberAdaptor = class {
+	subscriber;
+	options;
+	lambda;
+	constructor(envParser, subscriber, options) {
+		this.subscriber = subscriber;
+		this.options = options;
+		this.lambda = new AWSLambdaSubscriber(envParser, subscriber);
+	}
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await verifySnsMessage(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await confirmSnsSubscription(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.lambda.handler(toSnsEvent(message), {
+					awsRequestId: message.MessageId,
+					functionName: this.subscriber.topicName ?? "subscriber"
+				}, () => {});
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
+	}
+};
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
+//#endregion
+export { AWSLambdaFunction, AWSLambdaQueue, AWSLambdaSubscriber, AWSScheduledFunction, AmazonApiGatewayV1Endpoint, AmazonApiGatewayV2Endpoint, SnsPushSubscriberAdaptor };
+
 //# sourceMappingURL=aws.mjs.map