@geekmidas/constructs 10.0.0-alpha.52 → 10.0.0-alpha.53

package/dist/runSubscriber-BYEY_bfA.mjs

@@ -0,0 +1,109 @@
+import { ServiceDiscovery } from "@geekmidas/services";
+//#region src/subscribers/runSubscriber.ts
+/** The subscriber's output did not match its `.output()` schema. */
+var SubscriberOutputInvalid = class extends Error {
+	issues;
+	constructor(issues) {
+		super("Subscriber output validation failed: the handler's result does not match its .output() schema.");
+		this.issues = issues;
+		this.name = "SubscriberOutputInvalid";
+	}
+};
+/** The events in an SQS or SNS batch (a Lambda event's `Records`) that `subscriber` subscribed to. */
+function subscribedEvents(subscriber, rawEvent, logger) {
+	const events = [];
+	const records = rawEvent.Records ?? [];
+	const first = records[0];
+	const parse = first?.eventSource === "aws:sqs" ? (record) => parseSQSRecord(record) : first?.EventSource === "aws:sns" ? (record) => parseSNSRecord(record) : void 0;
+	if (!parse) return events;
+	for (const record of records) try {
+		const event = parse(record);
+		if (isSubscribed(subscriber, event)) events.push(event);
+	} catch (error) {
+		logger.error({
+			error,
+			record
+		}, "Failed to parse record");
+	}
+	return events;
+}
+/** The subscriber's services and database, registered as functions do. */
+async function subscriberContext(subscriber, envParser) {
+	const discovery = ServiceDiscovery.getInstance(envParser);
+	const services = subscriber.services.length > 0 ? await discovery.register(subscriber.services) : {};
+	const service = subscriber.databaseService;
+	return {
+		services,
+		db: service ? (await discovery.register([service]))[service.serviceName] : void 0
+	};
+}
+/** Runs the handler on `events`, and checks its output against its schema. */
+async function runSubscriber(subscriber, context) {
+	if (context.events.length === 0) {
+		context.logger.info("No subscribed events to process");
+		return { batchItemFailures: [] };
+	}
+	const { events, services, db, logger } = context;
+	const result = await subscriber.handler({
+		events,
+		services,
+		logger,
+		db
+	});
+	if (subscriber.outputSchema && result) {
+		const validation = await subscriber.outputSchema["~standard"].validate(result);
+		if (validation.issues) {
+			context.logger.error({ issues: validation.issues }, "Subscriber output validation failed");
+			throw new SubscriberOutputInvalid(validation.issues);
+		}
+		return validation.value;
+	}
+	return result;
+}
+function isSubscribed(subscriber, event) {
+	if (typeof event !== "object" || !event?.type) return true;
+	if (!subscriber.subscribedEvents) return true;
+	return subscriber.subscribedEvents.includes(event.type);
+}
+function parseSNSRecord(record) {
+	const message = safeJsonParse(record.Sns.Message);
+	const messageType = record.Sns.MessageAttributes?.type?.Value;
+	if (message === null) return messageType ? {
+		type: messageType,
+		payload: record.Sns.Message
+	} : record.Sns.Message;
+	if (message.type) return message;
+	return messageType ? {
+		type: messageType,
+		payload: message
+	} : message;
+}
+function parseSQSRecord(record) {
+	const body = safeJsonParse(record.body);
+	if (body === null) return record.body;
+	if (body.Type === "Notification" && body.Message) {
+		const snsMessage = safeJsonParse(body.Message);
+		const messageType = body.MessageAttributes?.type?.Value;
+		if (snsMessage === null) return messageType ? {
+			type: messageType,
+			payload: body.Message
+		} : body.Message;
+		if (snsMessage.type) return snsMessage;
+		return messageType ? {
+			type: messageType,
+			payload: snsMessage
+		} : snsMessage;
+	}
+	return body;
+}
+function safeJsonParse(value) {
+	try {
+		return JSON.parse(value);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { subscribedEvents as n, subscriberContext as r, runSubscriber as t };
+
+//# sourceMappingURL=runSubscriber-BYEY_bfA.mjs.map

package/dist/runSubscriber-BYEY_bfA.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runSubscriber-BYEY_bfA.mjs","names":[],"sources":["../src/subscribers/runSubscriber.ts"],"sourcesContent":["/**\n * What a subscriber does with a batch of records, however they arrived: parse\n * them into events, keep the ones it subscribed to, and run its handler with\n * its services and database.\n *\n * Shared by the Lambda adaptor, which wraps it in middy, and the SNS push\n * adaptor, which a server runs and which must not need middy to load.\n */\n\nimport type { EnvironmentParser } from '@geekmidas/envkit';\nimport type { Logger } from '@geekmidas/logger';\nimport { ServiceDiscovery } from '@geekmidas/services';\nimport type { SNSEvent, SNSEventRecord, SQSEvent, SQSRecord } from 'aws-lambda';\nimport type { Subscriber } from './Subscriber';\n\ntype AnySubscriber = Subscriber<any, any, any, any, any, any, any>;\n\n/** The subscriber's output did not match its `.output()` schema. */\nexport class SubscriberOutputInvalid extends Error {\n\tconstructor(readonly issues: ReadonlyArray<unknown>) {\n\t\tsuper(\n\t\t\t\"Subscriber output validation failed: the handler's result does not match its .output() schema.\",\n\t\t);\n\t\tthis.name = 'SubscriberOutputInvalid';\n\t}\n}\n\n/** The events in an SQS or SNS batch (a Lambda event's `Records`) that `subscriber` subscribed to. */\nexport function subscribedEvents(\n\tsubscriber: AnySubscriber,\n\trawEvent: { Records?: readonly unknown[] },\n\tlogger: Logger,\n): any[] {\n\tconst events: any[] = [];\n\tconst records = rawEvent.Records ?? [];\n\tconst first = records[0] as any;\n\tconst parse =\n\t\tfirst?.eventSource === 'aws:sqs'\n\t\t\t? (record: any) => parseSQSRecord(record)\n\t\t\t: first?.EventSource === 'aws:sns'\n\t\t\t\t? (record: any) => parseSNSRecord(record)\n\t\t\t\t: undefined;\n\tif (!parse) return events;\n\n\tfor (const record of records) {\n\t\ttry {\n\t\t\tconst event = parse(record);\n\t\t\tif (isSubscribed(subscriber, event)) events.push(event);\n\t\t} catch (error) {\n\t\t\tlogger.error({ error, record }, 'Failed to parse record');\n\t\t}\n\t}\n\treturn events;\n}\n\n/** The subscriber's services and database, registered as functions do. */\nexport async function subscriberContext(\n\tsubscriber: AnySubscriber,\n\tenvParser: EnvironmentParser<{}>,\n): Promise<{ services: Record<string, unknown>; db: unknown }> {\n\tconst discovery = ServiceDiscovery.getInstance(envParser);\n\tconst services =\n\t\tsubscriber.services.length > 0\n\t\t\t? await discovery.register(subscriber.services)\n\t\t\t: {};\n\tconst service = subscriber.databaseService;\n\tconst db = service\n\t\t? (await discovery.register([service]))[service.serviceName]\n\t\t: undefined;\n\treturn { services, db };\n}\n\n/** Runs the handler on `events`, and checks its output against its schema. */\nexport async function runSubscriber(\n\tsubscriber: AnySubscriber,\n\tcontext: {\n\t\tevents: any[];\n\t\tservices: Record<string, unknown>;\n\t\tdb: unknown;\n\t\tlogger: Logger;\n\t},\n): Promise<unknown> {\n\tif (context.events.length === 0) {\n\t\tcontext.logger.info('No subscribed events to process');\n\t\treturn { batchItemFailures: [] };\n\t}\n\n\tconst { events, services, db, logger } = context;\n\tconst result = await subscriber.handler({\n\t\tevents,\n\t\tservices,\n\t\tlogger,\n\t\tdb,\n\t} as any);\n\n\tif (subscriber.outputSchema && result) {\n\t\tconst validation =\n\t\t\tawait subscriber.outputSchema['~standard'].validate(result);\n\t\tif (validation.issues) {\n\t\t\tcontext.logger.error(\n\t\t\t\t{ issues: validation.issues },\n\t\t\t\t'Subscriber output validation failed',\n\t\t\t);\n\t\t\tthrow new SubscriberOutputInvalid(validation.issues);\n\t\t}\n\t\treturn validation.value;\n\t}\n\n\treturn result;\n}\n\nfunction isSubscribed(subscriber: AnySubscriber, event: any): boolean {\n\t// No event type (raw string/non-object) — always include\n\tif (typeof event !== 'object' || !event?.type) return true;\n\t// No filter configured — accept all\n\tif (!subscriber.subscribedEvents) return true;\n\treturn subscriber.subscribedEvents.includes(event.type);\n}\n\nfunction parseSNSRecord(record: SNSEventRecord): any {\n\tconst message = safeJsonParse(record.Sns.Message);\n\tconst messageType = record.Sns.MessageAttributes?.type?.Value;\n\n\t// Not JSON — wrap raw string with type from MessageAttributes if available\n\tif (message === null) {\n\t\treturn messageType\n\t\t\t? { type: messageType, payload: record.Sns.Message }\n\t\t\t: record.Sns.Message;\n\t}\n\n\tif (message.type) {\n\t\treturn message; // Full event format: { type, payload }\n\t}\n\n\t// Payload-only format: type is in MessageAttributes\n\treturn messageType ? { type: messageType, payload: message } : message;\n}\n\nfunction parseSQSRecord(record: SQSRecord): any {\n\tconst body = safeJsonParse(record.body);\n\n\t// Not JSON — return raw body as-is\n\tif (body === null) {\n\t\treturn record.body;\n\t}\n\n\t// Check if this is an SNS message wrapped in SQS\n\tif (body.Type === 'Notification' && body.Message) {\n\t\tconst snsMessage = safeJsonParse(body.Message);\n\t\tconst messageType = body.MessageAttributes?.type?.Value;\n\n\t\t// SNS Message not JSON — wrap with type from MessageAttributes if available\n\t\tif (snsMessage === null) {\n\t\t\treturn messageType\n\t\t\t\t? { type: messageType, payload: body.Message }\n\t\t\t\t: body.Message;\n\t\t}\n\n\t\tif (snsMessage.type) {\n\t\t\treturn snsMessage; // Full event format: { type, payload }\n\t\t}\n\n\t\t// Payload-only format: type is in MessageAttributes\n\t\treturn messageType\n\t\t\t? { type: messageType, payload: snsMessage }\n\t\t\t: snsMessage;\n\t}\n\n\t// Direct SQS message\n\treturn body;\n}\n\nfunction safeJsonParse(value: string): any | null {\n\ttry {\n\t\treturn JSON.parse(value);\n\t} catch {\n\t\treturn null;\n\t}\n}\n"],"mappings":";;;AAkBA,IAAa,0BAAb,cAA6C,MAAM;CAC7B;CAArB,YAAY,QAAyC;EACpD,MACC,gGACD;EAHoB,KAAA,SAAA;EAIpB,KAAK,OAAO;CACb;AACD;;AAGA,SAAgB,iBACf,YACA,UACA,QACQ;CACR,MAAM,SAAgB,CAAC;CACvB,MAAM,UAAU,SAAS,WAAW,CAAC;CACrC,MAAM,QAAQ,QAAQ;CACtB,MAAM,QACL,OAAO,gBAAgB,aACnB,WAAgB,eAAe,MAAM,IACtC,OAAO,gBAAgB,aACrB,WAAgB,eAAe,MAAM,IACtC,KAAA;CACL,IAAI,CAAC,OAAO,OAAO;CAEnB,KAAK,MAAM,UAAU,SACpB,IAAI;EACH,MAAM,QAAQ,MAAM,MAAM;EAC1B,IAAI,aAAa,YAAY,KAAK,GAAG,OAAO,KAAK,KAAK;CACvD,SAAS,OAAO;EACf,OAAO,MAAM;GAAE;GAAO;EAAO,GAAG,wBAAwB;CACzD;CAED,OAAO;AACR;;AAGA,eAAsB,kBACrB,YACA,WAC8D;CAC9D,MAAM,YAAY,iBAAiB,YAAY,SAAS;CACxD,MAAM,WACL,WAAW,SAAS,SAAS,IAC1B,MAAM,UAAU,SAAS,WAAW,QAAQ,IAC5C,CAAC;CACL,MAAM,UAAU,WAAW;CAI3B,OAAO;EAAE;EAAU,IAHR,WACP,MAAM,UAAU,SAAS,CAAC,OAAO,CAAC,EAAA,CAAG,QAAQ,eAC9C,KAAA;CACmB;AACvB;;AAGA,eAAsB,cACrB,YACA,SAMmB;CACnB,IAAI,QAAQ,OAAO,WAAW,GAAG;EAChC,QAAQ,OAAO,KAAK,iCAAiC;EACrD,OAAO,EAAE,mBAAmB,CAAC,EAAE;CAChC;CAEA,MAAM,EAAE,QAAQ,UAAU,IAAI,WAAW;CACzC,MAAM,SAAS,MAAM,WAAW,QAAQ;EACvC;EACA;EACA;EACA;CACD,CAAQ;CAER,IAAI,WAAW,gBAAgB,QAAQ;EACtC,MAAM,aACL,MAAM,WAAW,aAAa,YAAY,CAAC,SAAS,MAAM;EAC3D,IAAI,WAAW,QAAQ;GACtB,QAAQ,OAAO,MACd,EAAE,QAAQ,WAAW,OAAO,GAC5B,qCACD;GACA,MAAM,IAAI,wBAAwB,WAAW,MAAM;EACpD;EACA,OAAO,WAAW;CACnB;CAEA,OAAO;AACR;AAEA,SAAS,aAAa,YAA2B,OAAqB;CAErE,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,MAAM,OAAO;CAEtD,IAAI,CAAC,WAAW,kBAAkB,OAAO;CACzC,OAAO,WAAW,iBAAiB,SAAS,MAAM,IAAI;AACvD;AAEA,SAAS,eAAe,QAA6B;CACpD,MAAM,UAAU,cAAc,OAAO,IAAI,OAAO;CAChD,MAAM,cAAc,OAAO,IAAI,mBAAmB,MAAM;CAGxD,IAAI,YAAY,MACf,OAAO,cACJ;EAAE,MAAM;EAAa,SAAS,OAAO,IAAI;CAAQ,IACjD,OAAO,IAAI;CAGf,IAAI,QAAQ,MACX,OAAO;CAIR,OAAO,cAAc;EAAE,MAAM;EAAa,SAAS;CAAQ,IAAI;AAChE;AAEA,SAAS,eAAe,QAAwB;CAC/C,MAAM,OAAO,cAAc,OAAO,IAAI;CAGtC,IAAI,SAAS,MACZ,OAAO,OAAO;CAIf,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS;EACjD,MAAM,aAAa,cAAc,KAAK,OAAO;EAC7C,MAAM,cAAc,KAAK,mBAAmB,MAAM;EAGlD,IAAI,eAAe,MAClB,OAAO,cACJ;GAAE,MAAM;GAAa,SAAS,KAAK;EAAQ,IAC3C,KAAK;EAGT,IAAI,WAAW,MACd,OAAO;EAIR,OAAO,cACJ;GAAE,MAAM;GAAa,SAAS;EAAW,IACzC;CACJ;CAGA,OAAO;AACR;AAEA,SAAS,cAAc,OAA2B;CACjD,IAAI;EACH,OAAO,KAAK,MAAM,KAAK;CACxB,QAAQ;EACP,OAAO;CACR;AACD"}

package/dist/subscribers/index.cjs

@@ -1,4 +1,111 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_SubscriberBuilder = require("../SubscriberBuilder-C2PwqwIl.cjs");
+const require_runSubscriber = require("../runSubscriber-BRp9a_qi.cjs");
+let _geekmidas_errors = require("@geekmidas/errors");
+let _geekmidas_services = require("@geekmidas/services");
+let _geekmidas_events_sns = require("@geekmidas/events/sns");
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is read as the Lambda event SNS would have invoked a
+* function with, and run through the same parsing, services and handler as the
+* Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+* server serving this route has no reason to install `@middy/core`.
+*/
+var SnsPushSubscriberAdaptor = class {
+	envParser;
+	subscriber;
+	options;
+	constructor(envParser, subscriber, options) {
+		this.envParser = envParser;
+		this.subscriber = subscriber;
+		this.options = options;
+	}
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await (0, _geekmidas_events_sns.verifySnsMessage)(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await (0, _geekmidas_events_sns.confirmSnsSubscription)(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.notify(message);
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
+	}
+	async notify(message) {
+		const requestId = message.MessageId;
+		const logger = this.subscriber.logger.child({ requestId });
+		await (0, _geekmidas_services.runWithRequestContext)({
+			logger,
+			requestId,
+			startTime: Date.now()
+		}, async () => {
+			try {
+				const { services, db } = await require_runSubscriber.subscriberContext(this.subscriber, this.envParser);
+				const events = require_runSubscriber.subscribedEvents(this.subscriber, (0, _geekmidas_events_sns.toSnsEvent)(message), logger);
+				await require_runSubscriber.runSubscriber(this.subscriber, {
+					events,
+					services,
+					logger,
+					db
+				});
+			} catch (error) {
+				logger.error(error, "Error processing subscriber");
+				throw (0, _geekmidas_errors.wrapError)(error);
+			}
+		});
+	}
+};
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
+//#endregion
+exports.SnsPushSubscriberAdaptor = SnsPushSubscriberAdaptor;
 exports.Subscriber = require_SubscriberBuilder.Subscriber;
 exports.SubscriberBuilder = require_SubscriberBuilder.SubscriberBuilder;
+
+//# sourceMappingURL=index.cjs.map

package/dist/subscribers/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["verifySnsMessage","confirmSnsSubscription","runWithRequestContext","subscriberContext","subscribedEvents","toSnsEvent","runSubscriber","wrapError"],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"sourcesContent":["import type { EnvironmentParser } from '@geekmidas/envkit';\nimport { wrapError } from '@geekmidas/errors';\nimport {\n\tconfirmSnsSubscription,\n\ttype SnsHttpMessage,\n\ttoSnsEvent,\n\tverifySnsMessage,\n} from '@geekmidas/events/sns';\nimport { runWithRequestContext } from '@geekmidas/services';\nimport {\n\trunSubscriber,\n\tsubscribedEvents,\n\tsubscriberContext,\n} from './runSubscriber';\nimport type { Subscriber } from './Subscriber';\n\nexport interface SnsPushOptions {\n\t/** The topic this subscriber is subscribed to. Anything else is refused. */\n\ttopicArn: string;\n\t/**\n\t * Verify each message's signature. Off only against an emulator, which\n\t * signs nothing — decided by the connection string's endpoint, never by\n\t * anything the request says about itself.\n\t */\n\tverify: boolean;\n\t/**\n\t * The emulator's address, as this server was configured with it. An\n\t * emulator names itself in `SubscribeURL` by the port it listens on inside\n\t * its container, which is not the port published to the host — so against\n\t * one, the confirmation is sent here instead. From configuration, never\n\t * from the request.\n\t */\n\temulatorEndpoint?: string;\n}\n\n/** What to answer SNS with. A non-2xx tells SNS to retry. */\nexport interface SnsPushResponse {\n\tstatus: 200 | 400 | 403 | 500;\n\tbody: { status: string; error?: string };\n}\n\n/**\n * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a\n * poller.\n *\n * The notification is read as the Lambda event SNS would have invoked a\n * function with, and run through the same parsing, services and handler as the\n * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a\n * server serving this route has no reason to install `@middy/core`.\n */\nexport class SnsPushSubscriberAdaptor {\n\tconstructor(\n\t\tprivate readonly envParser: EnvironmentParser<{}>,\n\t\treadonly subscriber: Subscriber<any, any, any, any, any, any, any>,\n\t\tprivate readonly options: SnsPushOptions,\n\t) {}\n\n\tasync handle(body: unknown): Promise<SnsPushResponse> {\n\t\tconst message = body as SnsHttpMessage;\n\t\tif (typeof message?.Type !== 'string' || !message.TopicArn) {\n\t\t\treturn refuse(400, 'not an SNS message');\n\t\t}\n\t\t// Checked before the signature: a genuine message for another topic is\n\t\t// still not this subscriber's to confirm or to handle.\n\t\tif (message.TopicArn !== this.options.topicArn) {\n\t\t\treturn refuse(403, `not subscribed to ${message.TopicArn}`);\n\t\t}\n\n\t\tif (this.options.verify) {\n\t\t\ttry {\n\t\t\t\tawait verifySnsMessage(message);\n\t\t\t} catch (error) {\n\t\t\t\tthis.subscriber.logger.warn(\n\t\t\t\t\t{ error, topicArn: message.TopicArn },\n\t\t\t\t\t'Refused an SNS message that did not verify',\n\t\t\t\t);\n\t\t\t\treturn refuse(403, (error as Error).name);\n\t\t\t}\n\t\t}\n\n\t\tswitch (message.Type) {\n\t\t\tcase 'SubscriptionConfirmation':\n\t\t\t\tawait confirmSnsSubscription(\n\t\t\t\t\tthis.options.emulatorEndpoint && message.SubscribeURL\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t...message,\n\t\t\t\t\t\t\t\tSubscribeURL: throughEndpoint(\n\t\t\t\t\t\t\t\t\tmessage.SubscribeURL,\n\t\t\t\t\t\t\t\t\tthis.options.emulatorEndpoint,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: message,\n\t\t\t\t);\n\t\t\t\tthis.subscriber.logger.info(\n\t\t\t\t\t{ topicArn: message.TopicArn },\n\t\t\t\t\t'Confirmed SNS subscription',\n\t\t\t\t);\n\t\t\t\treturn { status: 200, body: { status: 'confirmed' } };\n\t\t\tcase 'Notification':\n\t\t\t\ttry {\n\t\t\t\t\tawait this.notify(message);\n\t\t\t\t\treturn { status: 200, body: { status: 'ok' } };\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Already logged. A 500 makes SNS retry, which is the point of\n\t\t\t\t\t// answering at all.\n\t\t\t\t\treturn refuse(500, (error as Error).name);\n\t\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn { status: 200, body: { status: 'ignored' } };\n\t\t}\n\t}\n\n\tprivate async notify(message: SnsHttpMessage): Promise<void> {\n\t\tconst requestId = message.MessageId;\n\t\tconst logger = this.subscriber.logger.child({ requestId });\n\n\t\tawait runWithRequestContext(\n\t\t\t{ logger, requestId, startTime: Date.now() },\n\t\t\tasync () => {\n\t\t\t\ttry {\n\t\t\t\t\tconst { services, db } = await subscriberContext(\n\t\t\t\t\t\tthis.subscriber,\n\t\t\t\t\t\tthis.envParser,\n\t\t\t\t\t);\n\t\t\t\t\tconst events = subscribedEvents(\n\t\t\t\t\t\tthis.subscriber,\n\t\t\t\t\t\ttoSnsEvent(message),\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t);\n\t\t\t\t\tawait runSubscriber(this.subscriber, {\n\t\t\t\t\t\tevents,\n\t\t\t\t\t\tservices,\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t\tdb,\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\tlogger.error(error as object, 'Error processing subscriber');\n\t\t\t\t\tthrow wrapError(error);\n\t\t\t\t}\n\t\t\t},\n\t\t);\n\t}\n}\n\n/** `url`, sent to `endpoint`'s origin instead of its own. */\nfunction throughEndpoint(url: string, endpoint: string): string {\n\tconst target = new URL(url);\n\tconst origin = new URL(endpoint);\n\ttarget.protocol = origin.protocol;\n\ttarget.host = origin.host;\n\treturn target.toString();\n}\n\nfunction refuse(\n\tstatus: SnsPushResponse['status'],\n\terror: string,\n): SnsPushResponse {\n\treturn { status, body: { status: 'refused', error } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkDA,IAAa,2BAAb,MAAsC;CAEnB;CACR;CACQ;CAHlB,YACC,WACA,YACA,SACC;EAHgB,KAAA,YAAA;EACR,KAAA,aAAA;EACQ,KAAA,UAAA;CACf;CAEH,MAAM,OAAO,MAAyC;EACrD,MAAM,UAAU;EAChB,IAAI,OAAO,SAAS,SAAS,YAAY,CAAC,QAAQ,UACjD,OAAO,OAAO,KAAK,oBAAoB;EAIxC,IAAI,QAAQ,aAAa,KAAK,QAAQ,UACrC,OAAO,OAAO,KAAK,qBAAqB,QAAQ,UAAU;EAG3D,IAAI,KAAK,QAAQ,QAChB,IAAI;GACH,OAAA,GAAMA,sBAAAA,iBAAAA,CAAiB,OAAO;EAC/B,SAAS,OAAO;GACf,KAAK,WAAW,OAAO,KACtB;IAAE;IAAO,UAAU,QAAQ;GAAS,GACpC,4CACD;GACA,OAAO,OAAO,KAAM,MAAgB,IAAI;EACzC;EAGD,QAAQ,QAAQ,MAAhB;GACC,KAAK;IACJ,OAAA,GAAMC,sBAAAA,uBAAAA,CACL,KAAK,QAAQ,oBAAoB,QAAQ,eACtC;KACA,GAAG;KACH,cAAc,gBACb,QAAQ,cACR,KAAK,QAAQ,gBACd;IACD,IACC,OACJ;IACA,KAAK,WAAW,OAAO,KACtB,EAAE,UAAU,QAAQ,SAAS,GAC7B,4BACD;IACA,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,YAAY;IAAE;GACrD,KAAK,gBACJ,IAAI;IACH,MAAM,KAAK,OAAO,OAAO;IACzB,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,KAAK;IAAE;GAC9C,SAAS,OAAO;IAGf,OAAO,OAAO,KAAM,MAAgB,IAAI;GACzC;GACD,SACC,OAAO;IAAE,QAAQ;IAAK,MAAM,EAAE,QAAQ,UAAU;GAAE;EACpD;CACD;CAEA,MAAc,OAAO,SAAwC;EAC5D,MAAM,YAAY,QAAQ;EAC1B,MAAM,SAAS,KAAK,WAAW,OAAO,MAAM,EAAE,UAAU,CAAC;EAEzD,OAAA,GAAMC,oBAAAA,sBAAAA,CACL;GAAE;GAAQ;GAAW,WAAW,KAAK,IAAI;EAAE,GAC3C,YAAY;GACX,IAAI;IACH,MAAM,EAAE,UAAU,OAAO,MAAMC,sBAAAA,kBAC9B,KAAK,YACL,KAAK,SACN;IACA,MAAM,SAASC,sBAAAA,iBACd,KAAK,aAAA,GACLC,sBAAAA,WAAAA,CAAW,OAAO,GAClB,MACD;IACA,MAAMC,sBAAAA,cAAc,KAAK,YAAY;KACpC;KACA;KACA;KACA;IACD,CAAC;GACF,SAAS,OAAO;IACf,OAAO,MAAM,OAAiB,6BAA6B;IAC3D,OAAA,GAAMC,kBAAAA,UAAAA,CAAU,KAAK;GACtB;EACD,CACD;CACD;AACD;;AAGA,SAAS,gBAAgB,KAAa,UAA0B;CAC/D,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,MAAM,SAAS,IAAI,IAAI,QAAQ;CAC/B,OAAO,WAAW,OAAO;CACzB,OAAO,OAAO,OAAO;CACrB,OAAO,OAAO,SAAS;AACxB;AAEA,SAAS,OACR,QACA,OACkB;CAClB,OAAO;EAAE;EAAQ,MAAM;GAAE,QAAQ;GAAW;EAAM;CAAE;AACrD"}

package/dist/subscribers/index.d.cts

@@ -1,3 +1,50 @@
 import { t as Subscriber } from "../Subscriber-Bpp02cGr.cjs";
 import { t as SubscriberBuilder } from "../SubscriberBuilder-g3fAVWgs.cjs";
-export { Subscriber, SubscriberBuilder };
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
+  /**
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
+   */
+  verify: boolean;
+  /**
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
+   */
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+}
+//#endregion
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
+//# sourceMappingURL=index.d.cts.map

package/dist/subscribers/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAgBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB"}

package/dist/subscribers/index.d.mts

@@ -1,3 +1,50 @@
 import { t as Subscriber } from "../Subscriber-CtN9R48-.mjs";
 import { t as SubscriberBuilder } from "../SubscriberBuilder-CuCMFpYW.mjs";
-export { Subscriber, SubscriberBuilder };
+import { EnvironmentParser } from "@geekmidas/envkit";
+//#region src/subscribers/SnsPushSubscriberAdaptor.d.ts
+interface SnsPushOptions {
+  /** The topic this subscriber is subscribed to. Anything else is refused. */
+  topicArn: string;
+  /**
+   * Verify each message's signature. Off only against an emulator, which
+   * signs nothing — decided by the connection string's endpoint, never by
+   * anything the request says about itself.
+   */
+  verify: boolean;
+  /**
+   * The emulator's address, as this server was configured with it. An
+   * emulator names itself in `SubscribeURL` by the port it listens on inside
+   * its container, which is not the port published to the host — so against
+   * one, the confirmation is sent here instead. From configuration, never
+   * from the request.
+   */
+  emulatorEndpoint?: string;
+}
+/** What to answer SNS with. A non-2xx tells SNS to retry. */
+interface SnsPushResponse {
+  status: 200 | 400 | 403 | 500;
+  body: {
+    status: string;
+    error?: string;
+  };
+}
+/**
+ * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+ * poller.
+ *
+ * The notification is read as the Lambda event SNS would have invoked a
+ * function with, and run through the same parsing, services and handler as the
+ * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+ * server serving this route has no reason to install `@middy/core`.
+ */
+export declare class SnsPushSubscriberAdaptor {
+  private readonly envParser;
+  readonly subscriber: Subscriber<any, any, any, any, any, any, any>;
+  private readonly options;
+  constructor(envParser: EnvironmentParser<{}>, subscriber: Subscriber<any, any, any, any, any, any, any>, options: SnsPushOptions);
+  handle(body: unknown): Promise<SnsPushResponse>;
+  private notify;
+}
+//#endregion
+export { type SnsPushOptions, type SnsPushResponse, Subscriber, SubscriberBuilder };
+//# sourceMappingURL=index.d.mts.map

package/dist/subscribers/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"mappings":";;;;UAgBiB;;EAEhB;;;;;;EAMA;;;;;;;;EAQA;;;UAIgB;EAChB;EACA;IAAQ;IAAgB;;;;;;;;;;;;qBAYZ;mBAEM;WACR,YAAY;mBACJ;EAHlB,YACkB,WAAW,uBACnB,YAAY,+CACJ,SAAS;EAGrB,OAAO,gBAAgB,QAAQ;UAuDvB"}

package/dist/subscribers/index.mjs

@@ -1,2 +1,108 @@
 import { n as Subscriber, t as SubscriberBuilder } from "../SubscriberBuilder-DMFk_Ap1.mjs";
-export { Subscriber, SubscriberBuilder };
+import { n as subscribedEvents, r as subscriberContext, t as runSubscriber } from "../runSubscriber-BYEY_bfA.mjs";
+import { wrapError } from "@geekmidas/errors";
+import { runWithRequestContext } from "@geekmidas/services";
+import { confirmSnsSubscription, toSnsEvent, verifySnsMessage } from "@geekmidas/events/sns";
+//#region src/subscribers/SnsPushSubscriberAdaptor.ts
+/**
+* A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a
+* poller.
+*
+* The notification is read as the Lambda event SNS would have invoked a
+* function with, and run through the same parsing, services and handler as the
+* Lambda adaptor — without its middy wrapper, which is Lambda's alone: a
+* server serving this route has no reason to install `@middy/core`.
+*/
+var SnsPushSubscriberAdaptor = class {
+	envParser;
+	subscriber;
+	options;
+	constructor(envParser, subscriber, options) {
+		this.envParser = envParser;
+		this.subscriber = subscriber;
+		this.options = options;
+	}
+	async handle(body) {
+		const message = body;
+		if (typeof message?.Type !== "string" || !message.TopicArn) return refuse(400, "not an SNS message");
+		if (message.TopicArn !== this.options.topicArn) return refuse(403, `not subscribed to ${message.TopicArn}`);
+		if (this.options.verify) try {
+			await verifySnsMessage(message);
+		} catch (error) {
+			this.subscriber.logger.warn({
+				error,
+				topicArn: message.TopicArn
+			}, "Refused an SNS message that did not verify");
+			return refuse(403, error.name);
+		}
+		switch (message.Type) {
+			case "SubscriptionConfirmation":
+				await confirmSnsSubscription(this.options.emulatorEndpoint && message.SubscribeURL ? {
+					...message,
+					SubscribeURL: throughEndpoint(message.SubscribeURL, this.options.emulatorEndpoint)
+				} : message);
+				this.subscriber.logger.info({ topicArn: message.TopicArn }, "Confirmed SNS subscription");
+				return {
+					status: 200,
+					body: { status: "confirmed" }
+				};
+			case "Notification": try {
+				await this.notify(message);
+				return {
+					status: 200,
+					body: { status: "ok" }
+				};
+			} catch (error) {
+				return refuse(500, error.name);
+			}
+			default: return {
+				status: 200,
+				body: { status: "ignored" }
+			};
+		}
+	}
+	async notify(message) {
+		const requestId = message.MessageId;
+		const logger = this.subscriber.logger.child({ requestId });
+		await runWithRequestContext({
+			logger,
+			requestId,
+			startTime: Date.now()
+		}, async () => {
+			try {
+				const { services, db } = await subscriberContext(this.subscriber, this.envParser);
+				const events = subscribedEvents(this.subscriber, toSnsEvent(message), logger);
+				await runSubscriber(this.subscriber, {
+					events,
+					services,
+					logger,
+					db
+				});
+			} catch (error) {
+				logger.error(error, "Error processing subscriber");
+				throw wrapError(error);
+			}
+		});
+	}
+};
+/** `url`, sent to `endpoint`'s origin instead of its own. */
+function throughEndpoint(url, endpoint) {
+	const target = new URL(url);
+	const origin = new URL(endpoint);
+	target.protocol = origin.protocol;
+	target.host = origin.host;
+	return target.toString();
+}
+function refuse(status, error) {
+	return {
+		status,
+		body: {
+			status: "refused",
+			error
+		}
+	};
+}
+//#endregion
+export { SnsPushSubscriberAdaptor, Subscriber, SubscriberBuilder };
+
+//# sourceMappingURL=index.mjs.map

package/dist/subscribers/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/subscribers/SnsPushSubscriberAdaptor.ts"],"sourcesContent":["import type { EnvironmentParser } from '@geekmidas/envkit';\nimport { wrapError } from '@geekmidas/errors';\nimport {\n\tconfirmSnsSubscription,\n\ttype SnsHttpMessage,\n\ttoSnsEvent,\n\tverifySnsMessage,\n} from '@geekmidas/events/sns';\nimport { runWithRequestContext } from '@geekmidas/services';\nimport {\n\trunSubscriber,\n\tsubscribedEvents,\n\tsubscriberContext,\n} from './runSubscriber';\nimport type { Subscriber } from './Subscriber';\n\nexport interface SnsPushOptions {\n\t/** The topic this subscriber is subscribed to. Anything else is refused. */\n\ttopicArn: string;\n\t/**\n\t * Verify each message's signature. Off only against an emulator, which\n\t * signs nothing — decided by the connection string's endpoint, never by\n\t * anything the request says about itself.\n\t */\n\tverify: boolean;\n\t/**\n\t * The emulator's address, as this server was configured with it. An\n\t * emulator names itself in `SubscribeURL` by the port it listens on inside\n\t * its container, which is not the port published to the host — so against\n\t * one, the confirmation is sent here instead. From configuration, never\n\t * from the request.\n\t */\n\temulatorEndpoint?: string;\n}\n\n/** What to answer SNS with. A non-2xx tells SNS to retry. */\nexport interface SnsPushResponse {\n\tstatus: 200 | 400 | 403 | 500;\n\tbody: { status: string; error?: string };\n}\n\n/**\n * A topic subscriber run by SNS pushing to an HTTP endpoint, rather than by a\n * poller.\n *\n * The notification is read as the Lambda event SNS would have invoked a\n * function with, and run through the same parsing, services and handler as the\n * Lambda adaptor — without its middy wrapper, which is Lambda's alone: a\n * server serving this route has no reason to install `@middy/core`.\n */\nexport class SnsPushSubscriberAdaptor {\n\tconstructor(\n\t\tprivate readonly envParser: EnvironmentParser<{}>,\n\t\treadonly subscriber: Subscriber<any, any, any, any, any, any, any>,\n\t\tprivate readonly options: SnsPushOptions,\n\t) {}\n\n\tasync handle(body: unknown): Promise<SnsPushResponse> {\n\t\tconst message = body as SnsHttpMessage;\n\t\tif (typeof message?.Type !== 'string' || !message.TopicArn) {\n\t\t\treturn refuse(400, 'not an SNS message');\n\t\t}\n\t\t// Checked before the signature: a genuine message for another topic is\n\t\t// still not this subscriber's to confirm or to handle.\n\t\tif (message.TopicArn !== this.options.topicArn) {\n\t\t\treturn refuse(403, `not subscribed to ${message.TopicArn}`);\n\t\t}\n\n\t\tif (this.options.verify) {\n\t\t\ttry {\n\t\t\t\tawait verifySnsMessage(message);\n\t\t\t} catch (error) {\n\t\t\t\tthis.subscriber.logger.warn(\n\t\t\t\t\t{ error, topicArn: message.TopicArn },\n\t\t\t\t\t'Refused an SNS message that did not verify',\n\t\t\t\t);\n\t\t\t\treturn refuse(403, (error as Error).name);\n\t\t\t}\n\t\t}\n\n\t\tswitch (message.Type) {\n\t\t\tcase 'SubscriptionConfirmation':\n\t\t\t\tawait confirmSnsSubscription(\n\t\t\t\t\tthis.options.emulatorEndpoint && message.SubscribeURL\n\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t...message,\n\t\t\t\t\t\t\t\tSubscribeURL: throughEndpoint(\n\t\t\t\t\t\t\t\t\tmessage.SubscribeURL,\n\t\t\t\t\t\t\t\t\tthis.options.emulatorEndpoint,\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t: message,\n\t\t\t\t);\n\t\t\t\tthis.subscriber.logger.info(\n\t\t\t\t\t{ topicArn: message.TopicArn },\n\t\t\t\t\t'Confirmed SNS subscription',\n\t\t\t\t);\n\t\t\t\treturn { status: 200, body: { status: 'confirmed' } };\n\t\t\tcase 'Notification':\n\t\t\t\ttry {\n\t\t\t\t\tawait this.notify(message);\n\t\t\t\t\treturn { status: 200, body: { status: 'ok' } };\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Already logged. A 500 makes SNS retry, which is the point of\n\t\t\t\t\t// answering at all.\n\t\t\t\t\treturn refuse(500, (error as Error).name);\n\t\t\t\t}\n\t\t\tdefault:\n\t\t\t\treturn { status: 200, body: { status: 'ignored' } };\n\t\t}\n\t}\n\n\tprivate async notify(message: SnsHttpMessage): Promise<void> {\n\t\tconst requestId = message.MessageId;\n\t\tconst logger = this.subscriber.logger.child({ requestId });\n\n\t\tawait runWithRequestContext(\n\t\t\t{ logger, requestId, startTime: Date.now() },\n\t\t\tasync () => {\n\t\t\t\ttry {\n\t\t\t\t\tconst { services, db } = await subscriberContext(\n\t\t\t\t\t\tthis.subscriber,\n\t\t\t\t\t\tthis.envParser,\n\t\t\t\t\t);\n\t\t\t\t\tconst events = subscribedEvents(\n\t\t\t\t\t\tthis.subscriber,\n\t\t\t\t\t\ttoSnsEvent(message),\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t);\n\t\t\t\t\tawait runSubscriber(this.subscriber, {\n\t\t\t\t\t\tevents,\n\t\t\t\t\t\tservices,\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t\tdb,\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\tlogger.error(error as object, 'Error processing subscriber');\n\t\t\t\t\tthrow wrapError(error);\n\t\t\t\t}\n\t\t\t},\n\t\t);\n\t}\n}\n\n/** `url`, sent to `endpoint`'s origin instead of its own. */\nfunction throughEndpoint(url: string, endpoint: string): string {\n\tconst target = new URL(url);\n\tconst origin = new URL(endpoint);\n\ttarget.protocol = origin.protocol;\n\ttarget.host = origin.host;\n\treturn target.toString();\n}\n\nfunction refuse(\n\tstatus: SnsPushResponse['status'],\n\terror: string,\n): SnsPushResponse {\n\treturn { status, body: { status: 'refused', error } };\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkDA,IAAa,2BAAb,MAAsC;CAEnB;CACR;CACQ;CAHlB,YACC,WACA,YACA,SACC;EAHgB,KAAA,YAAA;EACR,KAAA,aAAA;EACQ,KAAA,UAAA;CACf;CAEH,MAAM,OAAO,MAAyC;EACrD,MAAM,UAAU;EAChB,IAAI,OAAO,SAAS,SAAS,YAAY,CAAC,QAAQ,UACjD,OAAO,OAAO,KAAK,oBAAoB;EAIxC,IAAI,QAAQ,aAAa,KAAK,QAAQ,UACrC,OAAO,OAAO,KAAK,qBAAqB,QAAQ,UAAU;EAG3D,IAAI,KAAK,QAAQ,QAChB,IAAI;GACH,MAAM,iBAAiB,OAAO;EAC/B,SAAS,OAAO;GACf,KAAK,WAAW,OAAO,KACtB;IAAE;IAAO,UAAU,QAAQ;GAAS,GACpC,4CACD;GACA,OAAO,OAAO,KAAM,MAAgB,IAAI;EACzC;EAGD,QAAQ,QAAQ,MAAhB;GACC,KAAK;IACJ,MAAM,uBACL,KAAK,QAAQ,oBAAoB,QAAQ,eACtC;KACA,GAAG;KACH,cAAc,gBACb,QAAQ,cACR,KAAK,QAAQ,gBACd;IACD,IACC,OACJ;IACA,KAAK,WAAW,OAAO,KACtB,EAAE,UAAU,QAAQ,SAAS,GAC7B,4BACD;IACA,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,YAAY;IAAE;GACrD,KAAK,gBACJ,IAAI;IACH,MAAM,KAAK,OAAO,OAAO;IACzB,OAAO;KAAE,QAAQ;KAAK,MAAM,EAAE,QAAQ,KAAK;IAAE;GAC9C,SAAS,OAAO;IAGf,OAAO,OAAO,KAAM,MAAgB,IAAI;GACzC;GACD,SACC,OAAO;IAAE,QAAQ;IAAK,MAAM,EAAE,QAAQ,UAAU;GAAE;EACpD;CACD;CAEA,MAAc,OAAO,SAAwC;EAC5D,MAAM,YAAY,QAAQ;EAC1B,MAAM,SAAS,KAAK,WAAW,OAAO,MAAM,EAAE,UAAU,CAAC;EAEzD,MAAM,sBACL;GAAE;GAAQ;GAAW,WAAW,KAAK,IAAI;EAAE,GAC3C,YAAY;GACX,IAAI;IACH,MAAM,EAAE,UAAU,OAAO,MAAM,kBAC9B,KAAK,YACL,KAAK,SACN;IACA,MAAM,SAAS,iBACd,KAAK,YACL,WAAW,OAAO,GAClB,MACD;IACA,MAAM,cAAc,KAAK,YAAY;KACpC;KACA;KACA;KACA;IACD,CAAC;GACF,SAAS,OAAO;IACf,OAAO,MAAM,OAAiB,6BAA6B;IAC3D,MAAM,UAAU,KAAK;GACtB;EACD,CACD;CACD;AACD;;AAGA,SAAS,gBAAgB,KAAa,UAA0B;CAC/D,MAAM,SAAS,IAAI,IAAI,GAAG;CAC1B,MAAM,SAAS,IAAI,IAAI,QAAQ;CAC/B,OAAO,WAAW,OAAO;CACzB,OAAO,OAAO,OAAO;CACrB,OAAO,OAAO,SAAS;AACxB;AAEA,SAAS,OACR,QACA,OACkB;CAClB,OAAO;EAAE;EAAQ,MAAM;GAAE,QAAQ;GAAW;EAAM;CAAE;AACrD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/constructs",
-  "version": "10.0.0-alpha.52",
+  "version": "10.0.0-alpha.53",
   "private": false,
   "type": "module",
   "exports": {
@@ -276,13 +276,13 @@
     "lodash.uniqby": "~4.7.0",
     "openapi-types": "~12.1.3",
     "qs": "~6.16.0",
-    "@geekmidas/envkit": "^10.0.0-alpha.52",
-    "@geekmidas/errors": "^10.0.0-alpha.52",
-    "@geekmidas/events": "^10.0.0-alpha.52",
-    "@geekmidas/logger": "^10.0.0-alpha.52",
-    "@geekmidas/manifest": "^10.0.0-alpha.52",
-    "@geekmidas/schema": "^10.0.0-alpha.52",
-    "@geekmidas/services": "^10.0.0-alpha.52"
+    "@geekmidas/envkit": "^10.0.0-alpha.53",
+    "@geekmidas/errors": "^10.0.0-alpha.53",
+    "@geekmidas/events": "^10.0.0-alpha.53",
+    "@geekmidas/logger": "^10.0.0-alpha.53",
+    "@geekmidas/manifest": "^10.0.0-alpha.53",
+    "@geekmidas/schema": "^10.0.0-alpha.53",
+    "@geekmidas/services": "^10.0.0-alpha.53"
   },
   "devDependencies": {
     "@aws-sdk/client-kms": "~3.1136.0",
@@ -299,20 +299,20 @@
     "msw": "~2.15.0",
     "pg": "~8.23.0",
     "zod": "~4.6.5",
-    "@geekmidas/audit": "^10.0.0-alpha.52",
-    "@geekmidas/auth": "10.0.0-alpha.52",
-    "@geekmidas/cache": "^10.0.0-alpha.52",
-    "@geekmidas/db": "^10.0.0-alpha.52",
-    "@geekmidas/emailkit": "^10.0.0-alpha.52",
-    "@geekmidas/envkit": "^10.0.0-alpha.52",
-    "@geekmidas/errors": "^10.0.0-alpha.52",
-    "@geekmidas/events": "^10.0.0-alpha.52",
-    "@geekmidas/logger": "^10.0.0-alpha.52",
-    "@geekmidas/rate-limit": "^10.0.0-alpha.52",
-    "@geekmidas/schema": "^10.0.0-alpha.52",
-    "@geekmidas/services": "^10.0.0-alpha.52",
-    "@geekmidas/telescope": "10.0.0-alpha.52",
-    "@geekmidas/testkit": "^10.0.0-alpha.52"
+    "@geekmidas/audit": "^10.0.0-alpha.53",
+    "@geekmidas/auth": "10.0.0-alpha.53",
+    "@geekmidas/cache": "^10.0.0-alpha.53",
+    "@geekmidas/db": "^10.0.0-alpha.53",
+    "@geekmidas/emailkit": "^10.0.0-alpha.53",
+    "@geekmidas/envkit": "^10.0.0-alpha.53",
+    "@geekmidas/errors": "^10.0.0-alpha.53",
+    "@geekmidas/events": "^10.0.0-alpha.53",
+    "@geekmidas/logger": "^10.0.0-alpha.53",
+    "@geekmidas/rate-limit": "^10.0.0-alpha.53",
+    "@geekmidas/schema": "^10.0.0-alpha.53",
+    "@geekmidas/services": "^10.0.0-alpha.53",
+    "@geekmidas/telescope": "10.0.0-alpha.53",
+    "@geekmidas/testkit": "^10.0.0-alpha.53"
   },
   "peerDependencies": {
     "@aws-sdk/client-kms": ">=3.1136.0",
@@ -323,15 +323,15 @@
     "kysely": "~0.29.6",
     "msw": ">=2.15.0",
     "pg": ">=8.23.0",
-    "@geekmidas/audit": "^10.0.0-alpha.52",
-    "@geekmidas/auth": "10.0.0-alpha.52",
-    "@geekmidas/cache": "^10.0.0-alpha.52",
-    "@geekmidas/db": "^10.0.0-alpha.52",
-    "@geekmidas/emailkit": "^10.0.0-alpha.52",
-    "@geekmidas/rate-limit": "^10.0.0-alpha.52",
-    "@geekmidas/storage": "^10.0.0-alpha.52",
-    "@geekmidas/telescope": "10.0.0-alpha.52",
-    "@geekmidas/testkit": "^10.0.0-alpha.52"
+    "@geekmidas/audit": "^10.0.0-alpha.53",
+    "@geekmidas/auth": "10.0.0-alpha.53",
+    "@geekmidas/cache": "^10.0.0-alpha.53",
+    "@geekmidas/db": "^10.0.0-alpha.53",
+    "@geekmidas/emailkit": "^10.0.0-alpha.53",
+    "@geekmidas/rate-limit": "^10.0.0-alpha.53",
+    "@geekmidas/storage": "^10.0.0-alpha.53",
+    "@geekmidas/telescope": "10.0.0-alpha.53",
+    "@geekmidas/testkit": "^10.0.0-alpha.53"
   },
   "peerDependenciesMeta": {
     "@aws-sdk/client-kms": {