@opengeni/api-router 2.8.1-canary.0 → 2.10.0-canary.1

package/dist/codemode.d.ts

@@ -1,5 +1,8 @@
 import { type AccessGrant, type AttemptToolCatalog, type CodemodeCallSubmission as CodemodeCallSubmissionValue, type CodemodeOperation } from "@opengeni/contracts";
 import type { ApiRouteDeps } from "@opengeni/core";
+/** Reuse normal REST handlers, including their resource/command authorization.
+ * The exact attempt is checked before issuing this internal-only credential. */
+export declare function codemodeSessionRequest(deps: ApiRouteDeps, grant: AccessGrant, request: Request, path: string): Promise<Request>;
 export type CodemodeGrantAuthority = {
     accountId: string;
     workspaceId: string;
@@ -19,6 +22,10 @@ export declare class CodemodeCatalogNotReadyError extends Error {
     readonly code = "codemode_catalog_not_ready";
     constructor();
 }
+export declare class CodemodeCatalogStaleError extends Error {
+    readonly code = "codemode_catalog_stale";
+    constructor();
+}
 export declare function codemodeAuthorityForGrant(grant: AccessGrant): CodemodeGrantAuthority | null;
 export declare function isCodemodeGrant(grant: AccessGrant): boolean;
 export declare function requireMatchingCodemodeCatalog(authority: CodemodeGrantAuthority, catalog: AttemptToolCatalog | null): AttemptToolCatalog;
@@ -27,4 +34,6 @@ export declare function requireActiveCodemodeCatalog(deps: ApiRouteDeps, grant:
     catalog: AttemptToolCatalog;
 }>;
 export declare function submitAndDispatchCodemodeCall(deps: ApiRouteDeps, grant: AccessGrant, rawRequest: unknown): Promise<CodemodeCallSubmissionValue>;
+export declare function codemodeOperationNeedsDispatch(operation: CodemodeOperation): boolean;
 export declare function readCodemodeOperation(deps: ApiRouteDeps, grant: AccessGrant, operationId: string): Promise<CodemodeOperation | null>;
+export declare function refreshAdmittedCodemodeOperation(admitted: CodemodeOperation, read: () => Promise<CodemodeOperation | null>): Promise<CodemodeOperation>;

package/dist/http/request-source.d.ts

@@ -0,0 +1,14 @@
+import type { Context } from "hono";
+declare const TRANSPORT_PEER_ADDRESS_BINDING = "opengeniTransportPeerAddress";
+type ApiRequestBindings = {
+    [TRANSPORT_PEER_ADDRESS_BINDING]?: string | null;
+};
+export declare function apiRequestBindingsForTransportPeer(address: string | null | undefined): ApiRequestBindings;
+/**
+ * Resolve a quota/audit source from the server-owned transport peer. Forwarded
+ * values are considered only when the operator declares an exact trusted proxy
+ * hop count; the chain is then walked from the server side so caller-prepended
+ * values cannot replace the address inserted by the trusted edge.
+ */
+export declare function trustedRequestSourceAddress(c: Context, trustedProxyHops: number): string;
+export {};

package/dist/index.js

@@ -1,12 +1,13 @@
 import {
   InteractionFrameProxyTransport,
   SlackBotProviderError,
+  apiRequestBindingsForTransportPeer,
   cleanupScheduledTaskConnectorAuthorization,
   createAppComposition,
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-HHKQMVY7.js";
+} from "./chunk-3VUEFGWS.js";
 
 // src/index.ts
 import {
@@ -2998,7 +2999,10 @@ async function startApi(options = {}) {
       if (artifactWebSockets.handles(request)) {
         return artifactWebSockets.upgrade(request, bunServer);
       }
-      return app.fetch(request);
+      return app.fetch(
+        request,
+        apiRequestBindingsForTransportPeer(bunServer.requestIP(request)?.address)
+      );
     },
     websocket: {
       maxPayloadLength: EDITABLE_ARTIFACT_LIVE_WEBSOCKET_MAX_MESSAGE_BYTES,