@intuned/runtime 1.3.17 → 1.3.18-interface.6

package/bin/intuned-interface

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+require("../dist/common/binStartupScript.js");
+const { runAutomationCLI } = require("../dist/commands/interface/run");
+const { tsNodeImport } = require("../dist/commands/common/tsNodeImport");
+
+runAutomationCLI(tsNodeImport);

package/dist/chunk-6ZRJOUQS.mjs

@@ -0,0 +1,16 @@
+// src/common/cleanEnvironmentVariables.ts
+function cleanEnvironmentVariables() {
+  Object.keys(process.env).filter((i) => {
+    if (i.toLocaleLowerCase().startsWith("npm")) {
+      return true;
+    }
+    if (i.toLocaleLowerCase().startsWith("fly") && i !== "FLY_ALLOC_ID") {
+      return true;
+    }
+  }).forEach((i) => delete process.env[i]);
+}
+
+export {
+  cleanEnvironmentVariables
+};
+//# sourceMappingURL=chunk-6ZRJOUQS.mjs.map

package/dist/chunk-6ZRJOUQS.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/common/cleanEnvironmentVariables.ts"],"sourcesContent":["export function cleanEnvironmentVariables() {\n  Object.keys(process.env)\n    .filter((i) => {\n      if (i.toLocaleLowerCase().startsWith(\"npm\")) {\n        return true;\n      }\n\n      if (i.toLocaleLowerCase().startsWith(\"fly\") && i !== \"FLY_ALLOC_ID\") {\n        return true;\n      }\n    })\n    .forEach((i) => delete process.env[i]);\n}\n"],"mappings":";AAAO,SAAS,4BAA4B;AAC1C,SAAO,KAAK,QAAQ,GAAG,EACpB,OAAO,CAAC,MAAM;AACb,QAAI,EAAE,kBAAkB,EAAE,WAAW,KAAK,GAAG;AAC3C,aAAO;AAAA,IACT;AAEA,QAAI,EAAE,kBAAkB,EAAE,WAAW,KAAK,KAAK,MAAM,gBAAgB;AACnE,aAAO;AAAA,IACT;AAAA,EACF,CAAC,EACA,QAAQ,CAAC,MAAM,OAAO,QAAQ,IAAI,CAAC,CAAC;AACzC;","names":[]}

package/dist/chunk-7YL2JUTE.mjs

@@ -0,0 +1,146 @@
+import {
+  API_KEY_ENV_VAR_KEY,
+  API_KEY_HEADER_NAME,
+  AUTH_TOKEN_ENV_VAR_KEY,
+  CLI_ENV_VAR_KEY,
+  PROJECT_ID_ENV_VAR_KEY,
+  WORKSPACE_ID_ENV_VAR_KEY
+} from "./chunk-FGV5T6SI.mjs";
+
+// src/common/jwtTokenManager.ts
+import fetch from "cross-fetch";
+import * as jwt from "jsonwebtoken";
+import { err, ResultAsync } from "neverthrow";
+var JwtTokenManager = class {
+  constructor(refreshTokenPath) {
+    this.refreshTokenPath = refreshTokenPath;
+    this._token = void 0;
+  }
+  get token() {
+    return this._token;
+  }
+  // When the token is set, the schedule for renewal is issued automatically
+  // This is currently being set it two places:
+  // 1. Whenever the runner starts, initializes it from the environment variable (set whenever the api is run from the authoring IDE)
+  // 2. Whenever a published api is called to run (/api/run/*), it is set to the token received in the run request.
+  set token(newToken) {
+    if (this._token != newToken) {
+      this._token = newToken;
+      void this.scheduleTokenRefresh();
+    }
+  }
+  get timeToRefresh() {
+    if (!this._token) return;
+    const payload = jwt.decode(this._token);
+    if (!payload || typeof payload == "string") return;
+    const expiry = payload.expiry;
+    if (!expiry || typeof expiry !== "number") return;
+    const timeWindow = 60 * 1e3;
+    const timeToRefresh = expiry - Date.now() - timeWindow;
+    return Math.max(timeToRefresh, timeWindow);
+  }
+  async scheduleTokenRefresh() {
+    if (process.env.RUN_ENVIRONMENT?.toLowerCase() !== "authoring") return;
+    const timeToRefresh = this.timeToRefresh;
+    if (timeToRefresh === void 0) return;
+    if (this.tokenRefreshTimeout) clearTimeout(this.tokenRefreshTimeout);
+    this.tokenRefreshTimeout = setTimeout(async () => {
+      const result = await this.refreshToken();
+      if (result && result.isErr()) {
+        console.error(`[Internal Error] ${result.error}`);
+        return;
+      }
+      await this.scheduleTokenRefresh();
+    }, timeToRefresh);
+  }
+  async refreshToken() {
+    if (process.env.RUN_ENVIRONMENT?.toLowerCase() !== "authoring") return;
+    const res = await this.fetchWithToken(
+      `${this.backendFunctionsBaseUrl}/${this.refreshTokenPath}`,
+      {
+        method: "GET"
+      }
+    );
+    if (res.status === 401) {
+      return err("Unauthorized");
+    }
+    const jsonResult = await ResultAsync.fromPromise(
+      res.json(),
+      () => "not json"
+    );
+    if (jsonResult.isErr()) return;
+    const newToken = jsonResult.value.token;
+    if (newToken) this._token = newToken;
+  }
+  async fetchWithToken(...[input, init]) {
+    const headers = new Headers(init?.headers);
+    const apiKey = process.env[API_KEY_ENV_VAR_KEY];
+    if (apiKey) {
+      headers.set(API_KEY_HEADER_NAME, apiKey);
+    }
+    const token = process.env[AUTH_TOKEN_ENV_VAR_KEY];
+    if (token) {
+      headers.set("Authorization", `Bearer ${token}`);
+    }
+    if (this.token !== void 0) {
+      headers.set("Authorization", `Bearer ${this.token}`);
+    }
+    const result = await fetch(input, {
+      ...init,
+      headers
+    });
+    if (result.status === 401 && process.env[CLI_ENV_VAR_KEY] === "true") {
+      console.warn(
+        "Unauthorized backend function call - make sure to provision your project to Intuned to set up the correct API credentials.\nRun 'intuned provision' or see https://docs.intunedhq.com/docs/05-references/cli#provision-project for more information."
+      );
+    }
+    return result;
+  }
+  get backendFunctionsBaseUrl() {
+    try {
+      if (!process.env.FUNCTIONS_DOMAIN) {
+        throw new Error(
+          `Cannot call backend function - FUNCTIONS_DOMAIN not set`
+        );
+      }
+      const domain = process.env.FUNCTIONS_DOMAIN;
+      if (!process.env[WORKSPACE_ID_ENV_VAR_KEY]) {
+        throw new Error(
+          `Cannot call backend function - ${WORKSPACE_ID_ENV_VAR_KEY} not set`
+        );
+      }
+      const workspaceId = process.env[WORKSPACE_ID_ENV_VAR_KEY];
+      if (!process.env[PROJECT_ID_ENV_VAR_KEY] && !process.env.INTUNED_INTEGRATION_ID) {
+        throw new Error(
+          `Cannot call backend function - ${PROJECT_ID_ENV_VAR_KEY} or INTUNED_INTEGRATION_ID not set`
+        );
+      }
+      const projectId = process.env.INTUNED_INTEGRATION_ID ?? process.env[PROJECT_ID_ENV_VAR_KEY];
+      return `${domain}/api/${workspaceId}/functions/${projectId}`;
+    } catch (e) {
+      if (process.env[CLI_ENV_VAR_KEY] === "true") {
+        throw new Error(
+          `API credentials not set - make sure to provision your project to Intuned to set up the correct API credentials.
+Run 'intuned provision' or see https://docs.intunedhq.com/docs/05-references/cli#provision-project for more information.
+Original error: ${e.message}`
+        );
+      }
+    }
+  }
+};
+var backendFunctionsTokenManager = new JwtTokenManager(
+  `refreshBackendFunctionsToken`
+);
+backendFunctionsTokenManager.token = process.env.INTUNED_AUTHORING_SESSION_BACKEND_FUNCTIONS_TOKEN;
+function callBackendFunctionWithToken(path, init) {
+  return backendFunctionsTokenManager.fetchWithToken(
+    `${backendFunctionsTokenManager.backendFunctionsBaseUrl}/${path}`,
+    init
+  );
+}
+
+export {
+  backendFunctionsTokenManager,
+  callBackendFunctionWithToken
+};
+//# sourceMappingURL=chunk-7YL2JUTE.mjs.map

package/dist/chunk-7YL2JUTE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/common/jwtTokenManager.ts"],"sourcesContent":["import fetch from \"cross-fetch\";\nimport * as jwt from \"jsonwebtoken\";\nimport { err, ResultAsync } from \"neverthrow\";\nimport {\n  API_KEY_ENV_VAR_KEY,\n  API_KEY_HEADER_NAME,\n  PROJECT_ID_ENV_VAR_KEY,\n  CLI_ENV_VAR_KEY,\n  WORKSPACE_ID_ENV_VAR_KEY,\n  AUTH_TOKEN_ENV_VAR_KEY,\n} from \"./constants\";\n\n// Manages JWT token with renewal\nclass JwtTokenManager {\n  private _token: string | undefined;\n  private tokenRefreshTimeout: NodeJS.Timeout | undefined;\n  private refreshTokenPath: string;\n\n  constructor(refreshTokenPath: string) {\n    this.refreshTokenPath = refreshTokenPath;\n    this._token = undefined;\n  }\n\n  public get token() {\n    return this._token;\n  }\n\n  // When the token is set, the schedule for renewal is issued automatically\n  // This is currently being set it two places:\n  // 1. Whenever the runner starts, initializes it from the environment variable (set whenever the api is run from the authoring IDE)\n  // 2. Whenever a published api is called to run (/api/run/*), it is set to the token received in the run request.\n  public set token(newToken: string | undefined) {\n    if (this._token != newToken) {\n      this._token = newToken;\n      void this.scheduleTokenRefresh();\n    }\n  }\n\n  private get timeToRefresh() {\n    if (!this._token) return;\n\n    const payload = jwt.decode(this._token);\n\n    if (!payload || typeof payload == \"string\") return;\n\n    const expiry = payload.expiry;\n    if (!expiry || typeof expiry !== \"number\") return;\n\n    const timeWindow = 60 * 1000; // 1 minute\n\n    const timeToRefresh = expiry - Date.now() - timeWindow;\n    return Math.max(timeToRefresh, timeWindow);\n  }\n\n  private async scheduleTokenRefresh() {\n    if (process.env.RUN_ENVIRONMENT?.toLowerCase() !== \"authoring\") return;\n    const timeToRefresh = this.timeToRefresh;\n    if (timeToRefresh === undefined) return;\n\n    if (this.tokenRefreshTimeout) clearTimeout(this.tokenRefreshTimeout);\n\n    this.tokenRefreshTimeout = setTimeout(async () => {\n      const result = await this.refreshToken();\n      if (result && result.isErr()) {\n        console.error(`[Internal Error] ${result.error}`);\n        return;\n      }\n      await this.scheduleTokenRefresh();\n    }, timeToRefresh);\n  }\n\n  private async refreshToken() {\n    if (process.env.RUN_ENVIRONMENT?.toLowerCase() !== \"authoring\") return;\n    const res = await this.fetchWithToken(\n      `${this.backendFunctionsBaseUrl}/${this.refreshTokenPath}`,\n      {\n        method: \"GET\",\n      }\n    );\n\n    if (res.status === 401) {\n      return err(\"Unauthorized\");\n    }\n\n    const jsonResult = await ResultAsync.fromPromise(\n      res.json(),\n      () => \"not json\"\n    );\n\n    if (jsonResult.isErr()) return;\n\n    const newToken = jsonResult.value.token;\n    if (newToken) this._token = newToken;\n  }\n\n  public async fetchWithToken(...[input, init]: Parameters<typeof fetch>) {\n    const headers = new Headers(init?.headers);\n    const apiKey = process.env[API_KEY_ENV_VAR_KEY];\n    if (apiKey) {\n      headers.set(API_KEY_HEADER_NAME, apiKey);\n    }\n    const token = process.env[AUTH_TOKEN_ENV_VAR_KEY];\n    if (token) {\n      headers.set(\"Authorization\", `Bearer ${token}`);\n    }\n    if (this.token !== undefined) {\n      headers.set(\"Authorization\", `Bearer ${this.token}`);\n    }\n    const result = await fetch(input, {\n      ...init,\n      headers,\n    });\n    if (result.status === 401 && process.env[CLI_ENV_VAR_KEY] === \"true\") {\n      console.warn(\n        \"Unauthorized backend function call - make sure to provision your project to Intuned to set up the correct API credentials.\\n\" +\n          \"Run 'intuned provision' or see https://docs.intunedhq.com/docs/05-references/cli#provision-project for more information.\"\n      );\n    }\n    return result;\n  }\n\n  get backendFunctionsBaseUrl() {\n    try {\n      if (!process.env.FUNCTIONS_DOMAIN) {\n        throw new Error(\n          `Cannot call backend function - FUNCTIONS_DOMAIN not set`\n        );\n      }\n      const domain = process.env.FUNCTIONS_DOMAIN;\n      if (!process.env[WORKSPACE_ID_ENV_VAR_KEY]) {\n        throw new Error(\n          `Cannot call backend function - ${WORKSPACE_ID_ENV_VAR_KEY} not set`\n        );\n      }\n      const workspaceId = process.env[WORKSPACE_ID_ENV_VAR_KEY];\n      if (\n        !process.env[PROJECT_ID_ENV_VAR_KEY] &&\n        !process.env.INTUNED_INTEGRATION_ID\n      ) {\n        throw new Error(\n          `Cannot call backend function - ${PROJECT_ID_ENV_VAR_KEY} or INTUNED_INTEGRATION_ID not set`\n        );\n      }\n\n      const projectId =\n        process.env.INTUNED_INTEGRATION_ID ??\n        process.env[PROJECT_ID_ENV_VAR_KEY];\n      return `${domain}/api/${workspaceId}/functions/${projectId}`;\n    } catch (e) {\n      if (process.env[CLI_ENV_VAR_KEY] === \"true\") {\n        throw new Error(\n          `API credentials not set - make sure to provision your project to Intuned to set up the correct API credentials.\\n` +\n            `Run 'intuned provision' or see https://docs.intunedhq.com/docs/05-references/cli#provision-project for more information.\\n` +\n            `Original error: ${e.message}`\n        );\n      }\n    }\n  }\n}\n\nexport const backendFunctionsTokenManager = new JwtTokenManager(\n  `refreshBackendFunctionsToken`\n);\nbackendFunctionsTokenManager.token =\n  process.env.INTUNED_AUTHORING_SESSION_BACKEND_FUNCTIONS_TOKEN;\n\nexport function callBackendFunctionWithToken(\n  path: string,\n  init?: Parameters<typeof fetch>[1]\n) {\n  return backendFunctionsTokenManager.fetchWithToken(\n    `${backendFunctionsTokenManager.backendFunctionsBaseUrl}/${path}`,\n    init\n  );\n}\n"],"mappings":";;;;;;;;;;AAAA,OAAO,WAAW;AAClB,YAAY,SAAS;AACrB,SAAS,KAAK,mBAAmB;AAWjC,IAAM,kBAAN,MAAsB;AAAA,EAKpB,YAAY,kBAA0B;AACpC,SAAK,mBAAmB;AACxB,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAW,QAAQ;AACjB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAW,MAAM,UAA8B;AAC7C,QAAI,KAAK,UAAU,UAAU;AAC3B,WAAK,SAAS;AACd,WAAK,KAAK,qBAAqB;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,IAAY,gBAAgB;AAC1B,QAAI,CAAC,KAAK,OAAQ;AAElB,UAAM,UAAc,WAAO,KAAK,MAAM;AAEtC,QAAI,CAAC,WAAW,OAAO,WAAW,SAAU;AAE5C,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAE3C,UAAM,aAAa,KAAK;AAExB,UAAM,gBAAgB,SAAS,KAAK,IAAI,IAAI;AAC5C,WAAO,KAAK,IAAI,eAAe,UAAU;AAAA,EAC3C;AAAA,EAEA,MAAc,uBAAuB;AACnC,QAAI,QAAQ,IAAI,iBAAiB,YAAY,MAAM,YAAa;AAChE,UAAM,gBAAgB,KAAK;AAC3B,QAAI,kBAAkB,OAAW;AAEjC,QAAI,KAAK,oBAAqB,cAAa,KAAK,mBAAmB;AAEnE,SAAK,sBAAsB,WAAW,YAAY;AAChD,YAAM,SAAS,MAAM,KAAK,aAAa;AACvC,UAAI,UAAU,OAAO,MAAM,GAAG;AAC5B,gBAAQ,MAAM,oBAAoB,OAAO,KAAK,EAAE;AAChD;AAAA,MACF;AACA,YAAM,KAAK,qBAAqB;AAAA,IAClC,GAAG,aAAa;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe;AAC3B,QAAI,QAAQ,IAAI,iBAAiB,YAAY,MAAM,YAAa;AAChE,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB,GAAG,KAAK,uBAAuB,IAAI,KAAK,gBAAgB;AAAA,MACxD;AAAA,QACE,QAAQ;AAAA,MACV;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,KAAK;AACtB,aAAO,IAAI,cAAc;AAAA,IAC3B;AAEA,UAAM,aAAa,MAAM,YAAY;AAAA,MACnC,IAAI,KAAK;AAAA,MACT,MAAM;AAAA,IACR;AAEA,QAAI,WAAW,MAAM,EAAG;AAExB,UAAM,WAAW,WAAW,MAAM;AAClC,QAAI,SAAU,MAAK,SAAS;AAAA,EAC9B;AAAA,EAEA,MAAa,kBAAkB,CAAC,OAAO,IAAI,GAA6B;AACtE,UAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,UAAM,SAAS,QAAQ,IAAI,mBAAmB;AAC9C,QAAI,QAAQ;AACV,cAAQ,IAAI,qBAAqB,MAAM;AAAA,IACzC;AACA,UAAM,QAAQ,QAAQ,IAAI,sBAAsB;AAChD,QAAI,OAAO;AACT,cAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAAA,IAChD;AACA,QAAI,KAAK,UAAU,QAAW;AAC5B,cAAQ,IAAI,iBAAiB,UAAU,KAAK,KAAK,EAAE;AAAA,IACrD;AACA,UAAM,SAAS,MAAM,MAAM,OAAO;AAAA,MAChC,GAAG;AAAA,MACH;AAAA,IACF,CAAC;AACD,QAAI,OAAO,WAAW,OAAO,QAAQ,IAAI,eAAe,MAAM,QAAQ;AACpE,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,0BAA0B;AAC5B,QAAI;AACF,UAAI,CAAC,QAAQ,IAAI,kBAAkB;AACjC,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,YAAM,SAAS,QAAQ,IAAI;AAC3B,UAAI,CAAC,QAAQ,IAAI,wBAAwB,GAAG;AAC1C,cAAM,IAAI;AAAA,UACR,kCAAkC,wBAAwB;AAAA,QAC5D;AAAA,MACF;AACA,YAAM,cAAc,QAAQ,IAAI,wBAAwB;AACxD,UACE,CAAC,QAAQ,IAAI,sBAAsB,KACnC,CAAC,QAAQ,IAAI,wBACb;AACA,cAAM,IAAI;AAAA,UACR,kCAAkC,sBAAsB;AAAA,QAC1D;AAAA,MACF;AAEA,YAAM,YACJ,QAAQ,IAAI,0BACZ,QAAQ,IAAI,sBAAsB;AACpC,aAAO,GAAG,MAAM,QAAQ,WAAW,cAAc,SAAS;AAAA,IAC5D,SAAS,GAAG;AACV,UAAI,QAAQ,IAAI,eAAe,MAAM,QAAQ;AAC3C,cAAM,IAAI;AAAA,UACR;AAAA;AAAA,kBAEqB,EAAE,OAAO;AAAA,QAChC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,IAAM,+BAA+B,IAAI;AAAA,EAC9C;AACF;AACA,6BAA6B,QAC3B,QAAQ,IAAI;AAEP,SAAS,6BACd,MACA,MACA;AACA,SAAO,6BAA6B;AAAA,IAClC,GAAG,6BAA6B,uBAAuB,IAAI,IAAI;AAAA,IAC/D;AAAA,EACF;AACF;","names":[]}