@pikku/addon-graph 0.12.7 → 0.12.8

package/dist/src/http-requester.service.js

@@ -0,0 +1,59 @@
+import { assertSecretAllowedForHost } from '@pikku/core';
+export class PikkuHttpRequesterService {
+    constructor(secrets, metaService, credentialService, requireAllowedHosts = false) {
+        this.secrets = secrets;
+        this.metaService = metaService;
+        this.credentialService = credentialService;
+        this.requireAllowedHosts = requireAllowedHosts;
+    }
+    async request({ url, method, headers, body, auth, userId, }) {
+        const requestHeaders = { ...headers };
+        if (auth) {
+            if (auth.mode === 'oauth2') {
+                throw new Error('httpRequest auth: OAuth2 is not yet supported (needs provider config + token flow)');
+            }
+            for (const [key, value] of Object.entries(auth.extraHeaders ?? {})) {
+                if (!(key in requestHeaders))
+                    requestHeaders[key] = value;
+            }
+            assertSecretAllowedForHost(auth.credential, url, await this.metaService?.getSecretsMeta(), this.requireAllowedHosts);
+            const value = await this.resolveCredential(auth, userId);
+            switch (auth.mode) {
+                case 'bearer':
+                    requestHeaders['Authorization'] = `Bearer ${value}`;
+                    break;
+                case 'apiKeyHeader':
+                    requestHeaders[auth.headerName ?? 'Authorization'] = value;
+                    break;
+                case 'apiKeyQuery':
+                    url.searchParams.set(auth.queryName ?? 'api_key', value);
+                    break;
+                case 'basic':
+                    requestHeaders['Authorization'] =
+                        `Basic ${Buffer.from(value).toString('base64')}`;
+                    break;
+            }
+        }
+        return await fetch(url, { method, headers: requestHeaders, body });
+    }
+    async resolveCredential(auth, userId) {
+        if (auth.source === 'credential') {
+            if (!this.credentialService) {
+                throw new Error(`httpRequest auth: credential "${auth.credential}" needs a credentialService, which this project does not wire`);
+            }
+            const value = await this.credentialService.get(auth.credential, userId);
+            if (value == null) {
+                throw new Error(`httpRequest auth: could not resolve credential "${auth.credential}" — connect it before running this workflow`);
+            }
+            return value;
+        }
+        try {
+            return await this.secrets.getSecret(auth.credential);
+        }
+        catch (cause) {
+            const reason = cause instanceof Error ? cause.message : String(cause);
+            throw new Error(`httpRequest auth: could not resolve secret "${auth.credential}" — provision it before running this workflow (${reason})`);
+        }
+    }
+}
+//# sourceMappingURL=http-requester.service.js.map

package/dist/src/http-requester.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-requester.service.js","sourceRoot":"","sources":["../../src/http-requester.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAsB,MAAM,aAAa,CAAA;AA2B5E,MAAM,OAAO,yBAAyB;IACpC,YACU,OAAsB,EACtB,WAAyB,EACzB,iBAAqC,EACrC,sBAAsB,KAAK;QAH3B,YAAO,GAAP,OAAO,CAAe;QACtB,gBAAW,GAAX,WAAW,CAAc;QACzB,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,wBAAmB,GAAnB,mBAAmB,CAAQ;IAClC,CAAC;IAEG,KAAK,CAAC,OAAO,CAAC,EACnB,GAAG,EACH,MAAM,EACN,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,MAAM,GACe;QACrB,MAAM,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA;QAErC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAA;YACH,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,CAAC,GAAG,IAAI,cAAc,CAAC;oBAAE,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAC3D,CAAC;YAED,0BAA0B,CACxB,IAAI,CAAC,UAAU,EACf,GAAG,EACH,MAAM,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,EACxC,IAAI,CAAC,mBAAmB,CACzB,CAAA;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,QAAQ;oBACX,cAAc,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAA;oBACnD,MAAK;gBACP,KAAK,cAAc;oBACjB,cAAc,CAAC,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,GAAG,KAAK,CAAA;oBAC1D,MAAK;gBACP,KAAK,aAAa;oBAChB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,KAAK,CAAC,CAAA;oBACxD,MAAK;gBACP,KAAK,OAAO;oBACV,cAAc,CAAC,eAAe,CAAC;wBAC7B,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;oBAClD,MAAK;YACT,CAAC;QACH,CAAC;QAED,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACpE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAqB,EACrB,MAAe;QAEf,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,UAAU,+DAA+D,CAChH,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAC5C,IAAI,CAAC,UAAU,EACf,MAAM,CACP,CAAA;YACD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,UAAU,6CAA6C,CAChH,CAAA;YACH,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACrE,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,UAAU,kDAAkD,MAAM,GAAG,CAC1H,CAAA;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/src/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,0MAInC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,uBAAuB,0MAUnC,CAAA"}

package/dist/src/services.js

@@ -1,5 +1,7 @@
 import { pikkuAddonServices } from '#pikku';
-export const createSingletonServices = pikkuAddonServices(async (_config, { jwt }) => {
-    return { jwt };
+import { PikkuHttpRequesterService } from './http-requester.service.js';
+export const createSingletonServices = pikkuAddonServices(async (config, { jwt, secrets, metaService, credentialService }) => {
+    const httpRequester = new PikkuHttpRequesterService(secrets, metaService, credentialService, config.secrets?.requireAllowedHosts === true);
+    return { jwt, httpRequester };
 });
 //# sourceMappingURL=services.js.map

package/dist/src/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAE3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACzB,OAAO,EAAE,GAAG,EAAE,CAAA;AAChB,CAAC,CACF,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CACvD,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE;IACjE,MAAM,aAAa,GAAG,IAAI,yBAAyB,CACjD,OAAO,EACP,WAAW,EACX,iBAAiB,EACjB,MAAM,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAC7C,CAAA;IACD,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAA;AAC/B,CAAC,CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/addon-graph",
-  "version": "0.12.7",
+  "version": "0.12.8",
   "description": "Graph addon for Pikku — built-in graph:* primitives for workflow graphs",
   "type": "module",
   "imports": {
@@ -32,7 +32,7 @@
     "zod": "^4"
   },
   "devDependencies": {
-    "@pikku/cli": "^0.12.92",
+    "@pikku/cli": "^0.12.95",
     "@pikku/core": "*",
     "typescript": "^6.0.3",
     "zod": "^4"