@govplane/runtime-sdk 0.2.4 → 0.5.0

package/dist/index.cjs

@@ -30,19 +30,16 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/client/RuntimeClient.ts
-var import_undici = require("undici");
-
 // src/engine/context.ts
 var DEFAULT_CONTEXT_POLICY = {
   allowedKeys: [
-    "ctx.plan",
-    "ctx.country",
-    "ctx.requestTier",
-    "ctx.feature",
-    "ctx.amount",
-    "ctx.isAuthenticated",
-    "ctx.role"
+    "plan",
+    "country",
+    "requestTier",
+    "feature",
+    "amount",
+    "isAuthenticated",
+    "role"
   ],
   maxStringLen: 64,
   maxArrayLen: 10,
@@ -70,19 +67,18 @@ var DEFAULT_POLICY = {
   blockLikelyPiiKeys: true
 };
 function validateContext(ctx, policy) {
-  const allowed = new Set(policy.allowedKeys);
+  const allowed = new Set(policy.allowedKeys.map((k) => k.startsWith("ctx.") ? k.slice(4) : k));
   const maxStringLen = policy.maxStringLen ?? DEFAULT_POLICY.maxStringLen;
   const maxArrayLen = policy.maxArrayLen ?? DEFAULT_POLICY.maxArrayLen;
   const blockLikelyPiiKeys = policy.blockLikelyPiiKeys ?? DEFAULT_POLICY.blockLikelyPiiKeys;
   for (const [k, v] of Object.entries(ctx)) {
-    const path = `ctx.${k}`;
-    if (!allowed.has(path)) {
-      throw new Error(`Context key not allowed: ${path}`);
+    if (!allowed.has(k)) {
+      throw new Error(`Context key not allowed: ${k}`);
     }
     if (blockLikelyPiiKeys) {
       for (const re of PII_KEY_PATTERNS) {
         if (re.test(k)) {
-          throw new Error(`Context key looks like PII and is blocked: ${path}`);
+          throw new Error(`Context key looks like PII and is blocked: ${k}`);
         }
       }
     }
@@ -90,25 +86,26 @@ function validateContext(ctx, policy) {
     const t = typeof v;
     if (t === "boolean" || t === "number") continue;
     if (t === "string") {
-      if (v.length > maxStringLen) throw new Error(`Context value too long: ${path}`);
+      if (v.length > maxStringLen) throw new Error(`Context value too long: ${k}`);
       continue;
     }
     if (Array.isArray(v)) {
-      if (v.length > maxArrayLen) throw new Error(`Context array too long: ${path}`);
+      if (v.length > maxArrayLen) throw new Error(`Context array too long: ${k}`);
       for (const it of v) {
-        if (typeof it !== "string") throw new Error(`Invalid array value type: ${path}`);
-        if (it.length > maxStringLen) throw new Error(`Invalid array value length: ${path}`);
+        if (typeof it !== "string") throw new Error(`Invalid array value type: ${k}`);
+        if (it.length > maxStringLen) throw new Error(`Invalid array value length: ${k}`);
       }
       continue;
     }
-    throw new Error(`Invalid context type for ${path}`);
+    throw new Error(`Invalid context type for ${k}`);
   }
 }
 
 // src/engine/when.ts
-function getPath(obj, path) {
-  const parts = path.split(".");
-  let cur = obj;
+function getPath(ctx, path) {
+  const normalizedPath = path.startsWith("ctx.") ? path.slice(4) : path;
+  const parts = normalizedPath.split(".");
+  let cur = ctx;
   for (const p of parts) {
     if (!cur || typeof cur !== "object") return void 0;
     cur = cur[p];
@@ -117,30 +114,40 @@ function getPath(obj, path) {
 }
 function evalWhen(node, ctx) {
   switch (node.op) {
-    case "and":
-      return node.args.every((n) => evalWhen(n, ctx));
-    case "or":
-      return node.args.some((n) => evalWhen(n, ctx));
-    case "not":
-      return !evalWhen(node.arg, ctx);
-    case "exists":
-      return getPath({ ctx }, node.path) !== void 0;
+    case "and": {
+      const children = node.conditions ?? node.args ?? [];
+      return children.every((n) => evalWhen(n, ctx));
+    }
+    case "or": {
+      const children = node.conditions ?? node.args ?? [];
+      return children.some((n) => evalWhen(n, ctx));
+    }
+    case "not": {
+      const child = node.condition ?? node.arg;
+      return !evalWhen(child, ctx);
+    }
+    case "exists": {
+      const v = getPath(ctx, node.path);
+      return v !== void 0 && v !== null;
+    }
     case "in": {
-      const v = getPath({ ctx }, node.path);
+      const v = getPath(ctx, node.path);
       return node.values.some((x) => x === v);
     }
     case "eq":
-      return getPath({ ctx }, node.path) === node.value;
+      return getPath(ctx, node.path) === node.value;
+    // `neq` is the canonical spelling; `ne` is kept for legacy bundles
+    case "neq":
     case "ne":
-      return getPath({ ctx }, node.path) !== node.value;
+      return getPath(ctx, node.path) !== node.value;
     case "gt":
-      return Number(getPath({ ctx }, node.path)) > Number(node.value);
+      return Number(getPath(ctx, node.path)) > Number(node.value);
     case "gte":
-      return Number(getPath({ ctx }, node.path)) >= Number(node.value);
+      return Number(getPath(ctx, node.path)) >= Number(node.value);
     case "lt":
-      return Number(getPath({ ctx }, node.path)) < Number(node.value);
+      return Number(getPath(ctx, node.path)) < Number(node.value);
     case "lte":
-      return Number(getPath({ ctx }, node.path)) <= Number(node.value);
+      return Number(getPath(ctx, node.path)) <= Number(node.value);
     default:
       return false;
   }
@@ -350,7 +357,7 @@ function createPolicyEngine(opts) {
         policiesSeen: 0,
         rulesSeen: 0,
         matched: 0,
-        considered: { kill_switch: 0, deny: 0, throttle: 0, allow: 0 }
+        considered: { kill_switch: 0, deny: 0, throttle: 0, allow: 0, custom: 0 }
       },
       rules: []
     } : null;
@@ -369,23 +376,24 @@ function createPolicyEngine(opts) {
     const denies = [];
     const throttles = [];
     const allows = [];
+    const customs = [];
     const policies = bundle.policies ?? [];
     if (wantTrace) traceBase.summary.policiesSeen = policies.length;
     for (const p of policies) {
       const policyKey = String(p.policyKey ?? "");
       const rules = p.rules ?? [];
+      let policyHadMatch = false;
       for (const r of rules) {
         if (wantTrace) traceBase.summary.rulesSeen += 1;
         const ruleId = String(r?.id ?? "");
         const priority = Number(r?.priority ?? 0);
-        const effectType = safeEffectType(r?.effect);
         if (r?.status !== "active") {
           if (wantTrace) {
             traceBase.rules.push({
               policyKey,
               ruleId,
               priority,
-              effectType,
+              effectType: safeEffectType(r?.effect),
               matched: false,
               discardedReason: "disabled"
             });
@@ -398,26 +406,39 @@ function createPolicyEngine(opts) {
               policyKey,
               ruleId,
               priority,
-              effectType,
+              effectType: safeEffectType(r?.effect),
               matched: false,
               discardedReason: "target_mismatch"
             });
           }
           continue;
         }
-        if (r.when && !evalWhen(r.when, ctx)) {
-          if (wantTrace) {
-            traceBase.rules.push({
-              policyKey,
-              ruleId,
-              priority,
-              effectType,
-              matched: false,
-              discardedReason: "when_false"
-            });
+        let resolvedEffect;
+        if (r.when !== void 0) {
+          const whenResult = evalWhen(r.when, ctx);
+          if (whenResult) {
+            resolvedEffect = r.thenEffect ?? r.effect;
+          } else {
+            if (r.elseEffect) {
+              resolvedEffect = r.elseEffect;
+            } else {
+              if (wantTrace) {
+                traceBase.rules.push({
+                  policyKey,
+                  ruleId,
+                  priority,
+                  effectType: safeEffectType(r?.effect),
+                  matched: false,
+                  discardedReason: "when_false"
+                });
+              }
+              continue;
+            }
           }
-          continue;
+        } else {
+          resolvedEffect = r.effect;
         }
+        const effectType = safeEffectType(resolvedEffect);
         if (!effectType) {
           if (wantTrace) {
             traceBase.rules.push({
@@ -431,6 +452,7 @@ function createPolicyEngine(opts) {
           }
           continue;
         }
+        policyHadMatch = true;
         if (wantTrace) {
           traceBase.summary.matched += 1;
           traceBase.rules.push({
@@ -441,7 +463,7 @@ function createPolicyEngine(opts) {
             matched: true
           });
         }
-        const m = { policyKey, ruleId, priority, effect: r.effect };
+        const m = { policyKey, ruleId, priority, effect: resolvedEffect };
         if (effectType === "kill_switch") {
           kills.push(m);
           if (wantTrace) traceBase.summary.considered.kill_switch += 1;
@@ -454,16 +476,55 @@ function createPolicyEngine(opts) {
         } else if (effectType === "allow") {
           allows.push(m);
           if (wantTrace) traceBase.summary.considered.allow += 1;
+        } else if (effectType === "custom") {
+          customs.push(m);
+          if (wantTrace) traceBase.summary.considered.custom += 1;
+        }
+      }
+      if (!policyHadMatch) {
+        const defaults = p.defaults;
+        if (defaults?.effect) {
+          const defEffectType = String(defaults.effect);
+          let syntheticEffect;
+          if (defEffectType === "custom") {
+            syntheticEffect = { type: "custom", value: String(defaults.customEffect ?? "") };
+          } else if (defEffectType === "throttle" && defaults.throttle) {
+            syntheticEffect = { type: "throttle", throttle: defaults.throttle };
+          } else if (defEffectType === "kill_switch" && defaults.killSwitch) {
+            syntheticEffect = { type: "kill_switch", killSwitch: defaults.killSwitch };
+          } else if (defEffectType === "allow" || defEffectType === "deny") {
+            syntheticEffect = { type: defEffectType };
+          }
+          if (syntheticEffect) {
+            const dm = { policyKey, ruleId: "__default__", priority: -1, effect: syntheticEffect };
+            if (defEffectType === "kill_switch") {
+              kills.push(dm);
+              if (wantTrace) traceBase.summary.considered.kill_switch += 1;
+            } else if (defEffectType === "deny") {
+              denies.push(dm);
+              if (wantTrace) traceBase.summary.considered.deny += 1;
+            } else if (defEffectType === "throttle") {
+              throttles.push(dm);
+              if (wantTrace) traceBase.summary.considered.throttle += 1;
+            } else if (defEffectType === "allow") {
+              allows.push(dm);
+              if (wantTrace) traceBase.summary.considered.allow += 1;
+            } else if (defEffectType === "custom") {
+              customs.push(dm);
+              if (wantTrace) traceBase.summary.considered.custom += 1;
+            }
+          }
         }
       }
     }
     if (kills.length) {
       const w = kills.sort(byRuleOrder)[0];
+      const isDefault = w.ruleId === "__default__";
       const decision2 = {
         decision: "kill_switch",
-        reason: "rule",
+        reason: isDefault ? "default" : "rule",
         policyKey: w.policyKey,
-        ruleId: w.ruleId,
+        ruleId: isDefault ? void 0 : w.ruleId,
         killSwitch: w.effect.killSwitch
       };
       if (!wantTrace) return decision2;
@@ -477,11 +538,12 @@ function createPolicyEngine(opts) {
     }
     if (denies.length) {
       const w = denies.sort(byRuleOrder)[0];
+      const isDefault = w.ruleId === "__default__";
       const decision2 = {
         decision: "deny",
-        reason: "rule",
+        reason: isDefault ? "default" : "rule",
         policyKey: w.policyKey,
-        ruleId: w.ruleId
+        ruleId: isDefault ? void 0 : w.ruleId
       };
       if (!wantTrace) return decision2;
       return {
@@ -501,11 +563,12 @@ function createPolicyEngine(opts) {
         if (A.windowSeconds !== B.windowSeconds) return A.windowSeconds - B.windowSeconds;
         return byRuleOrder(a, b);
       })[0];
+      const isDefault = w.ruleId === "__default__";
       const decision2 = {
         decision: "throttle",
-        reason: "rule",
+        reason: isDefault ? "default" : "rule",
         policyKey: w.policyKey,
-        ruleId: w.ruleId,
+        ruleId: isDefault ? void 0 : w.ruleId,
         throttle: w.effect.throttle
       };
       if (!wantTrace) return decision2;
@@ -519,11 +582,12 @@ function createPolicyEngine(opts) {
     }
     if (allows.length) {
       const w = allows.sort(byRuleOrder)[0];
+      const isDefault = w.ruleId === "__default__";
       const decision2 = {
         decision: "allow",
-        reason: "rule",
+        reason: isDefault ? "default" : "rule",
         policyKey: w.policyKey,
-        ruleId: w.ruleId
+        ruleId: isDefault ? void 0 : w.ruleId
       };
       if (!wantTrace) return decision2;
       return {
@@ -534,6 +598,34 @@ function createPolicyEngine(opts) {
         }
       };
     }
+    if (customs.length) {
+      const w = customs.sort(byRuleOrder)[0];
+      const isDefault = w.ruleId === "__default__";
+      const rawValue = String(w.effect.value ?? "");
+      let parsedValue;
+      if (opts.parseCustomEffect) {
+        try {
+          parsedValue = JSON.parse(rawValue);
+        } catch {
+        }
+      }
+      const decision2 = {
+        decision: "custom",
+        reason: isDefault ? "default" : "rule",
+        policyKey: w.policyKey,
+        ruleId: isDefault ? void 0 : w.ruleId,
+        value: rawValue,
+        ...parsedValue !== void 0 ? { parsedValue } : {}
+      };
+      if (!wantTrace) return decision2;
+      return {
+        ...decision2,
+        trace: {
+          ...traceBase,
+          winner: { policyKey: w.policyKey, ruleId: w.ruleId, effectType: "custom", priority: w.priority }
+        }
+      };
+    }
     const decision = { decision: "deny", reason: "default" };
     if (!wantTrace) return decision;
     return {
@@ -637,6 +729,7 @@ var RuntimeClient = class {
   installedSignalHandler = false;
   sigHandler;
   constructor(config) {
+    console.log("[RuntimeClient] initializing with config");
     this.cfg = {
       ...config,
       pollMs: config.pollMs ?? 5e3,
@@ -655,6 +748,7 @@ var RuntimeClient = class {
       getBundle: () => this.cache.bundle,
       validateContext: config.engine?.validateContext !== false,
       contextPolicy: config.engine?.contextPolicy,
+      parseCustomEffect: config.engine?.parseCustomEffect,
       traceDefaults: config.trace?.defaults,
       traceSink: config.trace?.onDecisionTrace,
       traceSinkAsync: config.trace?.onDecisionTraceAsync,
@@ -851,34 +945,38 @@ var RuntimeClient = class {
   }
   bundleUrl() {
     const u = new URL(this.cfg.baseUrl);
-    u.pathname = "/v1/runtime/bundle";
-    u.searchParams.set("projectId", this.cfg.projectId);
-    u.searchParams.set("env", this.cfg.env);
     return u.toString();
   }
   commonHeaders(extra) {
     return {
-      Authorization: `Bearer ${this.cfg.runtimeKey}`,
+      Authorization: this.cfg.runtimeKey,
       "User-Agent": this.cfg.userAgent ?? "govplane-runtime-sdk/0.x",
       ...extra
     };
   }
+  async fetchWithTimeout(url, init) {
+    const ac = new AbortController();
+    const t = setTimeout(() => ac.abort(), this.cfg.timeoutMs);
+    try {
+      return await fetch(url, { ...init, signal: ac.signal });
+    } finally {
+      clearTimeout(t);
+    }
+  }
   async headBundle() {
     const url = this.bundleUrl();
-    const { statusCode, headers, body } = await (0, import_undici.request)(url, {
+    const res = await this.fetchWithTimeout(url, {
       method: "HEAD",
-      headers: this.commonHeaders(),
-      bodyTimeout: this.cfg.timeoutMs,
-      headersTimeout: this.cfg.timeoutMs
+      headers: this.commonHeaders()
     });
-    await body.text().catch(() => void 0);
-    if (statusCode === 401 || statusCode === 403) throw new Error(`Unauthorized (${statusCode})`);
-    if (statusCode >= 500) throw new Error(`Runtime server error (${statusCode})`);
-    if (statusCode !== 200 && statusCode !== 304) return this.cache.meta;
-    const etag = headers["etag"] ?? "";
+    console.log(`[RuntimeClient] HEAD bundle status=${res.status}`);
+    if (res.status === 401 || res.status === 403) throw new Error(`Unauthorized (${res.status})`);
+    if (res.status >= 500) throw new Error(`Runtime server error (${res.status})`);
+    if (res.status !== 200 && res.status !== 304) return this.cache.meta;
+    const etag = res.headers.get("etag") ?? "";
     if (!etag) return this.cache.meta;
-    const bundleVersionRaw = headers["x-gp-bundle-version"];
-    const updatedAt = headers["x-gp-updated-at"];
+    const bundleVersionRaw = res.headers.get("x-gp-bundle-version") ?? void 0;
+    const updatedAt = res.headers.get("x-gp-updated-at") ?? void 0;
     return {
       etag,
       bundleVersion: bundleVersionRaw ? Number(bundleVersionRaw) : void 0,
@@ -888,26 +986,24 @@ var RuntimeClient = class {
   async getBundle() {
     const url = this.bundleUrl();
     const ifNoneMatch = this.cache.meta?.etag;
-    const { statusCode, headers, body } = await (0, import_undici.request)(url, {
+    const res = await this.fetchWithTimeout(url, {
       method: "GET",
-      headers: this.commonHeaders(ifNoneMatch ? { "If-None-Match": ifNoneMatch } : void 0),
-      bodyTimeout: this.cfg.timeoutMs,
-      headersTimeout: this.cfg.timeoutMs
+      headers: this.commonHeaders(ifNoneMatch ? { "If-None-Match": ifNoneMatch } : void 0)
     });
-    const txt = await body.text();
-    if (statusCode === 304) {
-      const etag2 = headers["etag"] ?? ifNoneMatch ?? "";
-      const bundleVersionRaw2 = headers["x-gp-bundle-version"];
-      const updatedAt2 = headers["x-gp-updated-at"];
+    const txt = await res.text();
+    if (res.status === 304) {
+      const etag2 = res.headers.get("etag") ?? ifNoneMatch ?? "";
+      const bundleVersionRaw2 = res.headers.get("x-gp-bundle-version") ?? void 0;
+      const updatedAt2 = res.headers.get("x-gp-updated-at") ?? void 0;
       const meta2 = etag2 ? { etag: etag2, bundleVersion: bundleVersionRaw2 ? Number(bundleVersionRaw2) : void 0, updatedAt: updatedAt2 } : this.cache.meta;
       if (meta2) this.cache.meta = meta2;
       return { changed: false, meta: meta2 };
     }
-    if (statusCode === 401 || statusCode === 403) throw new Error(`Unauthorized (${statusCode})`);
-    if (statusCode >= 400) throw new Error(`Runtime HTTP error (${statusCode}): ${txt.slice(0, 200)}`);
-    const etag = headers["etag"] ?? "";
-    const bundleVersionRaw = headers["x-gp-bundle-version"];
-    const updatedAt = headers["x-gp-updated-at"];
+    if (res.status === 401 || res.status === 403) throw new Error(`Unauthorized (${res.status})`);
+    if (res.status >= 400) throw new Error(`Runtime HTTP error (${res.status}): ${txt.slice(0, 200)}`);
+    const etag = res.headers.get("etag") ?? "";
+    const bundleVersionRaw = res.headers.get("x-gp-bundle-version") ?? void 0;
+    const updatedAt = res.headers.get("x-gp-updated-at") ?? void 0;
     const meta = {
       etag: etag || (ifNoneMatch ?? ""),
       bundleVersion: bundleVersionRaw ? Number(bundleVersionRaw) : void 0,