@patchstack/connect 0.3.23 → 0.3.25

package/dist/index.cjs

@@ -47,6 +47,7 @@ __export(src_exports, {
   findSourceShell: () => findSourceShell,
   isEmptyStack: () => isEmptyStack,
   persistApiKey: () => persistApiKey,
+  persistPulseAuth: () => persistPulseAuth,
   persistSiteUuid: () => persistSiteUuid,
   postManifest: () => postManifest,
   resolveConfig: () => resolveConfig,
@@ -965,6 +966,88 @@ function compareSegments(a, b) {
   return 0;
 }
 
+// src/pulse-token.ts
+var TOKEN_SKEW_MS = 6e4;
+function buildTokenUrl(manifestEndpoint) {
+  const url = new URL(manifestEndpoint);
+  const path8 = url.pathname.replace(/\/$/, "");
+  url.pathname = path8.endsWith("/manifest") ? `${path8.slice(0, -"/manifest".length)}/token` : "/monitor/pulse/token";
+  url.search = "";
+  url.hash = "";
+  return url.toString();
+}
+function parsePulseAuth(credential) {
+  const index = credential.lastIndexOf("-");
+  if (index <= 0 || index === credential.length - 1) return null;
+  const clientId = credential.slice(index + 1);
+  if (!/^\d+$/.test(clientId)) return null;
+  return { clientId, clientSecret: credential.slice(0, index) };
+}
+var cached = null;
+var inflight = null;
+function clearPulseToken() {
+  cached = null;
+}
+async function getPulseToken(config, fetchImpl = fetch) {
+  if (typeof config.pulseAuth !== "string" || config.pulseAuth.length === 0) return null;
+  if (cached !== null && Date.now() < cached.expiresAt - TOKEN_SKEW_MS) {
+    return cached.token;
+  }
+  if (inflight !== null) return inflight;
+  const credentials = parsePulseAuth(config.pulseAuth);
+  if (credentials === null) return null;
+  inflight = (async () => {
+    try {
+      const response = await fetchImpl(buildTokenUrl(config.endpoint), {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Accept: "application/json",
+          "User-Agent": "@patchstack/connect"
+        },
+        body: JSON.stringify({
+          grant_type: "client_credentials",
+          client_id: credentials.clientId,
+          client_secret: credentials.clientSecret
+        }),
+        signal: AbortSignal.timeout(config.timeoutMs)
+      });
+      if (!response.ok) return null;
+      const body = await response.json();
+      if (typeof body.access_token !== "string" || body.access_token.length === 0) return null;
+      const expiresIn = Number(body.expires_in);
+      const ttlMs = Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn * 1e3 : 36e5;
+      cached = { token: body.access_token, expiresAt: Date.now() + ttlMs };
+      return body.access_token;
+    } catch {
+      return null;
+    } finally {
+      inflight = null;
+    }
+  })();
+  return inflight;
+}
+async function pulseAuthHeader(config, fetchImpl = fetch) {
+  const token = await getPulseToken(config, fetchImpl);
+  return token === null ? {} : { Authorization: `Bearer ${token}` };
+}
+async function pulseFetch(config, url, init, fetchImpl = fetch) {
+  const send = async () => {
+    const auth = await pulseAuthHeader(config, fetchImpl);
+    const response = await fetchImpl(url, {
+      ...init,
+      headers: { ...init.headers, ...auth }
+    });
+    return { response, authenticated: auth.Authorization !== void 0 };
+  };
+  const first = await send();
+  if (first.response.status === 401 && first.authenticated) {
+    clearPulseToken();
+    return (await send()).response;
+  }
+  return first.response;
+}
+
 // src/client.ts
 var DEFAULT_ENDPOINT = "https://api.patchstack.com/monitor/pulse/manifest";
 var DEFAULT_TIMEOUT_MS = 3e4;
@@ -981,7 +1064,7 @@ async function postManifest(config, payload) {
   const timeoutMs = config.timeoutMs;
   let response;
   try {
-    response = await fetch(url, {
+    response = await pulseFetch(config, url, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -1074,9 +1157,11 @@ async function resolveConfig(options) {
     );
   }
   const apiKeyRaw = fromEnv.apiKey ?? fromFile.apiKey ?? null;
+  const pulseAuthRaw = fromEnv.pulseAuth ?? fromFile.pulseAuth ?? apiKeyRaw;
   return {
     siteUuid: siteUuid === null || siteUuid.length === 0 ? null : siteUuid,
     apiKey: apiKeyRaw === null || apiKeyRaw.length === 0 ? null : apiKeyRaw,
+    pulseAuth: pulseAuthRaw === null || pulseAuthRaw.length === 0 ? null : pulseAuthRaw,
     endpoint,
     timeoutMs,
     environment,
@@ -1097,6 +1182,10 @@ async function persistApiKey(cwd, apiKey) {
   const existing = await readConfigFile(cwd);
   return writeConfigFile(cwd, { ...existing, apiKey });
 }
+async function persistPulseAuth(cwd, pulseAuth) {
+  const existing = await readConfigFile(cwd);
+  return writeConfigFile(cwd, { ...existing, pulseAuth });
+}
 async function readConfigFile(cwd) {
   const target = import_node_path6.default.join(cwd, CONFIG_FILENAME);
   let raw;
@@ -1139,6 +1228,7 @@ function readEnv() {
   return {
     siteUuid: process.env.PATCHSTACK_SITE_UUID ?? void 0,
     apiKey: process.env.PATCHSTACK_API_KEY ?? void 0,
+    pulseAuth: process.env.PATCHSTACK_PULSE_AUTH ?? void 0,
     endpoint: process.env.PATCHSTACK_ENDPOINT ?? void 0,
     timeoutMs,
     environment: environmentRaw !== void 0 && environmentRaw.length > 0 ? environmentRaw : void 0
@@ -1309,6 +1399,7 @@ async function scanAndReport(options = {}) {
   }
   if (typeof response.api_key === "string" && response.api_key.length > 0) {
     await persistApiKey(cwd, response.api_key);
+    await persistPulseAuth(cwd, response.api_key);
   }
   return {
     manifest,
@@ -1337,6 +1428,7 @@ async function scanAndReport(options = {}) {
   findSourceShell,
   isEmptyStack,
   persistApiKey,
+  persistPulseAuth,
   persistSiteUuid,
   postManifest,
   resolveConfig,