@positronic/cloudflare 0.0.56 → 0.0.57

package/dist/src/api/users.js

@@ -0,0 +1,582 @@
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+import { Hono } from 'hono';
+var app = new Hono();
+// Validation constants
+var MAX_USERNAME_LENGTH = 64;
+var USERNAME_PATTERN = /^[a-zA-Z0-9_-]+$/;
+/**
+ * Validate a username
+ * @returns null if valid, error message if invalid
+ */ function validateUsername(name) {
+    if (!name || typeof name !== 'string') {
+        return 'Name is required';
+    }
+    if (name.length === 0) {
+        return 'Name cannot be empty';
+    }
+    if (name.length > MAX_USERNAME_LENGTH) {
+        return "Name cannot exceed ".concat(MAX_USERNAME_LENGTH, " characters");
+    }
+    if (!USERNAME_PATTERN.test(name)) {
+        return 'Name can only contain letters, numbers, hyphens, and underscores';
+    }
+    return null;
+}
+// POST /users - Create a new user
+app.post('/', function(c) {
+    return _async_to_generator(function() {
+        var body, validationError, authDoId, authDo, existing, user, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        4,
+                        ,
+                        5
+                    ]);
+                    return [
+                        4,
+                        c.req.json()
+                    ];
+                case 1:
+                    body = _state.sent();
+                    validationError = validateUsername(body.name);
+                    if (validationError) {
+                        return [
+                            2,
+                            c.json({
+                                error: validationError
+                            }, 400)
+                        ];
+                    }
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.getUserByName(body.name)
+                    ];
+                case 2:
+                    existing = _state.sent();
+                    if (existing) {
+                        return [
+                            2,
+                            c.json({
+                                error: "User '".concat(body.name, "' already exists")
+                            }, 409)
+                        ];
+                    }
+                    return [
+                        4,
+                        authDo.createUser(body.name)
+                    ];
+                case 3:
+                    user = _state.sent();
+                    return [
+                        2,
+                        c.json(user, 201)
+                    ];
+                case 4:
+                    error = _state.sent();
+                    console.error('Error creating user:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to create user'
+                        }, 500)
+                    ];
+                case 5:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// GET /users - List all users
+app.get('/', function(c) {
+    return _async_to_generator(function() {
+        var authDoId, authDo, result, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.listUsers()
+                    ];
+                case 1:
+                    result = _state.sent();
+                    return [
+                        2,
+                        c.json(result)
+                    ];
+                case 2:
+                    error = _state.sent();
+                    console.error('Error listing users:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to list users'
+                        }, 500)
+                    ];
+                case 3:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// GET /users/:id - Get a specific user
+app.get('/:id', function(c) {
+    return _async_to_generator(function() {
+        var userId, authDoId, authDo, user, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    userId = c.req.param('id');
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.getUser(userId)
+                    ];
+                case 1:
+                    user = _state.sent();
+                    if (!user) {
+                        return [
+                            2,
+                            c.json({
+                                error: "User '".concat(userId, "' not found")
+                            }, 404)
+                        ];
+                    }
+                    return [
+                        2,
+                        c.json(user)
+                    ];
+                case 2:
+                    error = _state.sent();
+                    console.error('Error getting user:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to get user'
+                        }, 500)
+                    ];
+                case 3:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// DELETE /users/:id - Delete a user
+app.delete('/:id', function(c) {
+    return _async_to_generator(function() {
+        var userId, authDoId, authDo, deleted, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    userId = c.req.param('id');
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.deleteUser(userId)
+                    ];
+                case 1:
+                    deleted = _state.sent();
+                    if (!deleted) {
+                        return [
+                            2,
+                            c.json({
+                                error: "User '".concat(userId, "' not found")
+                            }, 404)
+                        ];
+                    }
+                    return [
+                        2,
+                        c.body(null, 204)
+                    ];
+                case 2:
+                    error = _state.sent();
+                    console.error('Error deleting user:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to delete user'
+                        }, 500)
+                    ];
+                case 3:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// POST /users/:id/keys - Add a key to a user
+app.post('/:id/keys', function(c) {
+    return _async_to_generator(function() {
+        var userId, body, authDoId, authDo, user, existingKey, key, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        5,
+                        ,
+                        6
+                    ]);
+                    userId = c.req.param('id');
+                    return [
+                        4,
+                        c.req.json()
+                    ];
+                case 1:
+                    body = _state.sent();
+                    if (!body.jwk || _type_of(body.jwk) !== 'object') {
+                        return [
+                            2,
+                            c.json({
+                                error: 'JWK is required'
+                            }, 400)
+                        ];
+                    }
+                    if (!body.fingerprint || typeof body.fingerprint !== 'string') {
+                        return [
+                            2,
+                            c.json({
+                                error: 'Fingerprint is required'
+                            }, 400)
+                        ];
+                    }
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.getUser(userId)
+                    ];
+                case 2:
+                    user = _state.sent();
+                    if (!user) {
+                        return [
+                            2,
+                            c.json({
+                                error: "User '".concat(userId, "' not found")
+                            }, 404)
+                        ];
+                    }
+                    return [
+                        4,
+                        authDo.getKeyByFingerprint(body.fingerprint)
+                    ];
+                case 3:
+                    existingKey = _state.sent();
+                    if (existingKey) {
+                        return [
+                            2,
+                            c.json({
+                                error: 'Key already exists'
+                            }, 409)
+                        ];
+                    }
+                    return [
+                        4,
+                        authDo.addKey(userId, body.fingerprint, JSON.stringify(body.jwk), body.label || '')
+                    ];
+                case 4:
+                    key = _state.sent();
+                    // Return key without the jwk for security
+                    return [
+                        2,
+                        c.json({
+                            fingerprint: key.fingerprint,
+                            userId: key.userId,
+                            label: key.label,
+                            addedAt: key.addedAt
+                        }, 201)
+                    ];
+                case 5:
+                    error = _state.sent();
+                    console.error('Error adding key:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to add key'
+                        }, 500)
+                    ];
+                case 6:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// GET /users/:id/keys - List keys for a user
+app.get('/:id/keys', function(c) {
+    return _async_to_generator(function() {
+        var userId, authDoId, authDo, user, result, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        3,
+                        ,
+                        4
+                    ]);
+                    userId = c.req.param('id');
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.getUser(userId)
+                    ];
+                case 1:
+                    user = _state.sent();
+                    if (!user) {
+                        return [
+                            2,
+                            c.json({
+                                error: "User '".concat(userId, "' not found")
+                            }, 404)
+                        ];
+                    }
+                    return [
+                        4,
+                        authDo.listKeys(userId)
+                    ];
+                case 2:
+                    result = _state.sent();
+                    // Return keys without the jwk for security
+                    return [
+                        2,
+                        c.json({
+                            keys: result.keys.map(function(key) {
+                                return {
+                                    fingerprint: key.fingerprint,
+                                    userId: key.userId,
+                                    label: key.label,
+                                    addedAt: key.addedAt
+                                };
+                            }),
+                            count: result.count
+                        })
+                    ];
+                case 3:
+                    error = _state.sent();
+                    console.error('Error listing keys:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to list keys'
+                        }, 500)
+                    ];
+                case 4:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+// DELETE /users/:id/keys/:fingerprint - Remove a key from a user
+app.delete('/:id/keys/:fingerprint', function(c) {
+    return _async_to_generator(function() {
+        var userId, fingerprint, authDoId, authDo, deleted, error;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    _state.trys.push([
+                        0,
+                        2,
+                        ,
+                        3
+                    ]);
+                    userId = c.req.param('id');
+                    fingerprint = decodeURIComponent(c.req.param('fingerprint'));
+                    authDoId = c.env.AUTH_DO.idFromName('auth');
+                    authDo = c.env.AUTH_DO.get(authDoId);
+                    return [
+                        4,
+                        authDo.removeKey(userId, fingerprint)
+                    ];
+                case 1:
+                    deleted = _state.sent();
+                    if (!deleted) {
+                        return [
+                            2,
+                            c.json({
+                                error: "Key not found"
+                            }, 404)
+                        ];
+                    }
+                    return [
+                        2,
+                        c.body(null, 204)
+                    ];
+                case 2:
+                    error = _state.sent();
+                    console.error('Error removing key:', error);
+                    return [
+                        2,
+                        c.json({
+                            error: 'Failed to remove key'
+                        }, 500)
+                    ];
+                case 3:
+                    return [
+                        2
+                    ];
+            }
+        });
+    })();
+});
+export default app;

package/dist/src/api/webhooks/coordination.js

@@ -164,12 +164,16 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
+import { isSignalValid, brainMachineDefinition } from '@positronic/core';
 /**
- * Find a brain waiting for a webhook and resume it if found.
+ * Find a brain waiting for a webhook, queue the WEBHOOK_RESPONSE signal, and wake it up.
  * Returns a JSON response object suitable for returning from a webhook endpoint.
- */ export function findAndResumeBrain(context, slug, identifier, response) {
+ *
+ * This is the signal-based approach: webhook response data flows through the signal queue
+ * rather than being passed directly to the resume method.
+ */ export function queueWebhookAndWakeUp(context, slug, identifier, response) {
     return _async_to_generator(function() {
-        var monitorId, monitorStub, brainRunId, namespace, doId, stub;
+        var monitorId, monitorStub, brainRunId, run, validation, namespace, doId, stub;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -183,17 +187,48 @@ function _ts_generator(thisArg, body) {
                     brainRunId = _state.sent();
                     if (!brainRunId) return [
                         3,
-                        3
+                        5
                     ];
-                    // Found a brain waiting - resume it
+                    return [
+                        4,
+                        monitorStub.getRun(brainRunId)
+                    ];
+                case 2:
+                    run = _state.sent();
+                    if (run) {
+                        validation = isSignalValid(brainMachineDefinition, run.status, 'WEBHOOK_RESPONSE');
+                        if (!validation.valid) {
+                            return [
+                                2,
+                                {
+                                    received: true,
+                                    action: 'ignored',
+                                    identifier: identifier,
+                                    brainRunId: brainRunId,
+                                    reason: validation.reason
+                                }
+                            ];
+                        }
+                    }
+                    // Queue WEBHOOK_RESPONSE signal and wake up the brain
                     namespace = context.env.BRAIN_RUNNER_DO;
                     doId = namespace.idFromName(brainRunId);
                     stub = namespace.get(doId);
+                    // Queue the signal first, then wake up the brain
                     return [
                         4,
-                        stub.resume(brainRunId, response)
+                        stub.queueSignal({
+                            type: 'WEBHOOK_RESPONSE',
+                            response: response
+                        })
                     ];
-                case 2:
+                case 3:
+                    _state.sent();
+                    return [
+                        4,
+                        stub.wakeUp(brainRunId)
+                    ];
+                case 4:
                     _state.sent();
                     return [
                         2,
@@ -204,7 +239,7 @@ function _ts_generator(thisArg, body) {
                             brainRunId: brainRunId
                         }
                     ];
-                case 3:
+                case 5:
                     // No brain waiting for this webhook
                     return [
                         2,

package/dist/src/api/webhooks/index.js

@@ -166,7 +166,7 @@ function _ts_generator(thisArg, body) {
 }
 import { Hono } from 'hono';
 import { getWebhookManifest } from '../../brain-runner-do.js';
-import { findAndResumeBrain } from './coordination.js';
+import { queueWebhookAndWakeUp } from './coordination.js';
 import system from './system.js';
 var webhooks = new Hono();
 // Mount system webhooks at /webhooks/system/*
@@ -237,7 +237,7 @@ webhooks.post('/:slug', function(context) {
                     }
                     return [
                         4,
-                        findAndResumeBrain(context, slug, handlerResult.identifier, handlerResult.response)
+                        queueWebhookAndWakeUp(context, slug, handlerResult.identifier, handlerResult.response)
                     ];
                 case 3:
                     result = _state.sent();

package/dist/src/api/webhooks/system.js

@@ -171,7 +171,7 @@ function _ts_generator(thisArg, body) {
     }
 }
 import { Hono } from 'hono';
-import { findAndResumeBrain, parseFormData } from './coordination.js';
+import { queueWebhookAndWakeUp, parseFormData } from './coordination.js';
 var system = new Hono();
 /**
  * Built-in webhook for UI form submissions.
@@ -211,7 +211,7 @@ var system = new Hono();
                     response = parseFormData(formData);
                     return [
                         4,
-                        findAndResumeBrain(context, 'ui-form', identifier, response)
+                        queueWebhookAndWakeUp(context, 'ui-form', identifier, response)
                     ];
                 case 3:
                     result = _state.sent();