@proappstore/sdk 1.16.63 → 1.16.64

package/dist/worker.d.ts

@@ -0,0 +1,105 @@
+/**
+ * `@proappstore/sdk/worker` — write an app worker (ADR-009, #254).
+ *
+ *   // worker/src/app.ts → built to worker/dist/app.js
+ *   import { defineAppWorker } from '@proappstore/sdk/worker';
+ *   export default defineAppWorker({
+ *     async scheduled(event, pas) {
+ *       const key = await pas.secrets.get('GITHUB_TOKEN');
+ *       await pas.actions.batch(repos.map((r) => ({ name: 'upsert_repo', params: r })));
+ *       await pas.log('info', 'synced', { count: repos.length });
+ *     },
+ *   });
+ *
+ * The platform's entry shim has verified the event's signature before this
+ * module is even imported, so there is no verification here. Delivery is
+ * at-least-once: a handler must be idempotent on `event.id`.
+ *
+ * Zero dependencies; runs inside the worker sandbox.
+ */
+/** What the platform delivered (ADR-009 §3). */
+export interface AppWorkerEvent {
+    /** Idempotency key, stable across retries. */
+    id: string;
+    type: 'schedule' | 'hook' | 'http';
+    name?: string;
+    attempt: number;
+    issuedAt: number;
+    payload: unknown;
+}
+export interface PasClient {
+    actions: {
+        /** Run a registered action whose `callers` include "worker", as `system:worker`. */
+        call(name: string, params?: Record<string, unknown>): Promise<unknown>;
+        /** Many invocations in one transaction (≤ 500 statements); counts as one PAS call. */
+        batch(calls: {
+            name: string;
+            params?: Record<string, unknown>;
+        }[]): Promise<{
+            name: string;
+            results: unknown[];
+        }[]>;
+    };
+    secrets: {
+        /** An app secret listed in mcp.json `worker.secrets`; null otherwise. */
+        get(name: string): Promise<string | null>;
+    };
+    storage: {
+        /** Stored under the app's worker namespace, never a user's files. ≤ 10 MB. */
+        put(key: string, body: string | ArrayBuffer | Uint8Array, opts?: {
+            contentType?: string;
+        }): Promise<{
+            key: string;
+            size: number;
+        }>;
+        get(key: string): Promise<{
+            body: ArrayBuffer;
+            contentType: string;
+        } | null>;
+    };
+    /** Append to the app's logs (category `worker`). Resolves false when the app's log quota is spent. */
+    log(level: 'debug' | 'info' | 'warn' | 'error', message: string, fields?: Record<string, unknown>): Promise<boolean>;
+}
+export interface AppWorkerHandlers {
+    scheduled?(event: AppWorkerEvent, pas: PasClient): Promise<void> | void;
+    webhook?(event: AppWorkerEvent, pas: PasClient): Promise<void> | void;
+}
+/** The module shape the platform shim imports as `app.js`. */
+export interface AppWorkerModule {
+    fetch(request: Request, env: AppWorkerEnv, ctx: unknown): Promise<Response>;
+}
+/** The worker's bindings (ADR-009 §2). */
+export interface AppWorkerEnv {
+    PAS?: PasBinding;
+    PAS_WORKER_TOKEN?: string;
+    APP_ID?: string;
+}
+interface CallCtx {
+    token: string;
+    invocation: string;
+}
+interface PasBinding {
+    actions: {
+        call(name: string, params: unknown, ctx: CallCtx): Promise<unknown>;
+        batch(calls: unknown, ctx: CallCtx): Promise<unknown>;
+    };
+    secrets: {
+        get(name: string, ctx: CallCtx): Promise<string | null>;
+    };
+    storage: {
+        put(key: string, body: unknown, opts: unknown, ctx: CallCtx): Promise<unknown>;
+        get(key: string, ctx: CallCtx): Promise<unknown>;
+    };
+    log(level: string, message: string, fields: unknown, ctx: CallCtx): Promise<boolean>;
+}
+/** A `PasClient` bound to one invocation: every call carries the worker token and the invocation id. */
+export declare function pasClient(env: AppWorkerEnv, event: Pick<AppWorkerEvent, 'id' | 'attempt'>): PasClient;
+/**
+ * Dispatch the platform's event envelope to `scheduled` (type `schedule`) or
+ * `webhook` (type `hook`). A handler that returns is a success (200); one that
+ * throws is a failure (500, recorded on the invocation). Browser routes
+ * (type `http`) arrive with #260.
+ */
+export declare function defineAppWorker(handlers: AppWorkerHandlers): AppWorkerModule;
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE;QACP,oFAAoF;QACpF,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,sFAAsF;QACtF,KAAK,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,EAAE,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,CAAA;SAAE,EAAE,CAAC,CAAC;KACrH,CAAC;IACF,OAAO,EAAE;QACP,yEAAyE;QACzE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;KAC3C,CAAC;IACF,OAAO,EAAE;QACP,8EAA8E;QAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,EAAE,IAAI,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACnI,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,WAAW,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;KAC9E,CAAC;IACF,sGAAsG;IACtG,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtH;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,OAAO,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACvE;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7E;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,OAAO;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AACvD,UAAU,UAAU;IAClB,OAAO,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACxI,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;IACrE,OAAO,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAC9I,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtF;AAED,wGAAwG;AACxG,wBAAgB,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,SAAS,CAAC,GAAG,SAAS,CAgBrG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,iBAAiB,GAAG,eAAe,CA2B5E"}

package/dist/worker.js

@@ -0,0 +1,76 @@
+/**
+ * `@proappstore/sdk/worker` — write an app worker (ADR-009, #254).
+ *
+ *   // worker/src/app.ts → built to worker/dist/app.js
+ *   import { defineAppWorker } from '@proappstore/sdk/worker';
+ *   export default defineAppWorker({
+ *     async scheduled(event, pas) {
+ *       const key = await pas.secrets.get('GITHUB_TOKEN');
+ *       await pas.actions.batch(repos.map((r) => ({ name: 'upsert_repo', params: r })));
+ *       await pas.log('info', 'synced', { count: repos.length });
+ *     },
+ *   });
+ *
+ * The platform's entry shim has verified the event's signature before this
+ * module is even imported, so there is no verification here. Delivery is
+ * at-least-once: a handler must be idempotent on `event.id`.
+ *
+ * Zero dependencies; runs inside the worker sandbox.
+ */
+/** A `PasClient` bound to one invocation: every call carries the worker token and the invocation id. */
+export function pasClient(env, event) {
+    const pas = env.PAS;
+    if (!pas)
+        throw new Error('this worker has no PAS binding');
+    const ctx = { token: env.PAS_WORKER_TOKEN ?? '', invocation: `${event.id}:${event.attempt}` };
+    return {
+        actions: {
+            call: (name, params) => pas.actions.call(name, params ?? {}, ctx),
+            batch: (calls) => pas.actions.batch(calls, ctx),
+        },
+        secrets: { get: (name) => pas.secrets.get(name, ctx) },
+        storage: {
+            put: (key, body, opts) => pas.storage.put(key, body, opts ?? {}, ctx),
+            get: (key) => pas.storage.get(key, ctx),
+        },
+        log: (level, message, fields) => pas.log(level, message, fields, ctx),
+    };
+}
+/**
+ * Dispatch the platform's event envelope to `scheduled` (type `schedule`) or
+ * `webhook` (type `hook`). A handler that returns is a success (200); one that
+ * throws is a failure (500, recorded on the invocation). Browser routes
+ * (type `http`) arrive with #260.
+ */
+export function defineAppWorker(handlers) {
+    return {
+        async fetch(request, env) {
+            let envelope;
+            try {
+                envelope = await request.json();
+            }
+            catch {
+                return new Response('invalid envelope', { status: 400 });
+            }
+            const event = {
+                id: String(envelope.id ?? ''),
+                type: envelope.type,
+                ...(typeof envelope.name === 'string' ? { name: envelope.name } : {}),
+                attempt: Number(envelope.attempt ?? 1),
+                issuedAt: Number(envelope.issued_at ?? 0),
+                payload: envelope.payload,
+            };
+            const handler = event.type === 'schedule' ? handlers.scheduled : event.type === 'hook' ? handlers.webhook : undefined;
+            if (!handler)
+                return new Response(`no handler for ${String(event.type)} events`, { status: 501 });
+            try {
+                await handler(event, pasClient(env, event));
+                return Response.json({ ok: true });
+            }
+            catch (e) {
+                return new Response(e instanceof Error ? e.message : String(e), { status: 500 });
+            }
+        },
+    };
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA0DH,wGAAwG;AACxG,MAAM,UAAU,SAAS,CAAC,GAAiB,EAAE,KAA6C;IACxF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAY,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACvG,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC;YACjE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAoD;SACnG;QACD,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;QACtD,OAAO,EAAE;YACP,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,GAAG,CAA2C;YAC/G,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAA+D;SACtG;QACD,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC;KACtE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAA2B;IACzD,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG;YACtB,IAAI,QAAqH,CAAC;YAC1H,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,KAAK,GAAmB;gBAC5B,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC7B,IAAI,EAAE,QAAQ,CAAC,IAA8B;gBAC7C,GAAG,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;gBACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,QAAQ,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAClG,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proappstore/sdk",
-  "version": "1.16.63",
+  "version": "1.16.64",
   "description": "Browser SDK for paid apps on proappstore.online — subscriptions, license keys, premium modules.",
   "license": "MIT",
   "type": "module",
@@ -23,6 +23,10 @@
       "types": "./dist/ui.d.ts",
       "import": "./dist/ui.js"
     },
+    "./worker": {
+      "types": "./dist/worker.d.ts",
+      "import": "./dist/worker.js"
+    },
     "./shell.css": "./dist/shell.css"
   },
   "repository": {