@restatedev/restate-sdk-cloudflare-workers 0.0.0-SNAPSHOT-20241001101403

package/dist/esm/src/endpoint/request_signing/v1.js

@@ -0,0 +1,143 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+import { Buffer } from "node:buffer";
+import { headerValue } from "./validate.js";
+import { importKey, verify } from "./ed25519.js";
+import base from "./basex.js";
+const JWT_HEADER = "x-restate-jwt-v1";
+export const SCHEME_V1 = "v1";
+const BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+const bs58 = base(BASE58_ALPHABET);
+// SubjectPublicKeyInfo SEQUENCE (2 elem)
+//   algorithm AlgorithmIdentifier SEQUENCE (1 elem)
+//     algorithm OBJECT IDENTIFIER 1.3.101.112 curveEd25519 (EdDSA 25519 signature algorithm)
+//   subjectPublicKey BIT STRING (256 bit) <insert 32 bytes after this>
+const asn1Prefix = Buffer.from("MCowBQYDK2VwAyEA", "base64");
+export function parseKeySetV1(keys) {
+    const map = new Map();
+    for (const key of keys) {
+        if (!key.startsWith("publickeyv1_")) {
+            throw new Error("v1 jwt public keys are expected to start with publickeyv1_");
+        }
+        const pubBytes = Buffer.from(bs58.decode(key.slice("publickeyv1_".length)));
+        if (pubBytes.length != 32) {
+            throw new Error("v1 jwt public keys are expected to have 32 bytes of data");
+        }
+        // NB in the webcrypto case (but not node) the key contains a promise that we will only await during verification
+        // and so if this promise is in error state, every verification with that key would fail.
+        // however, any 32 byte slice is a valid ed25519 public key, so failure here should only be in the case where webcrypto
+        // doesn't support ed25519 at all. and deno and cloudflare workers both support it.
+        const publicKey = importKey(key, Buffer.concat([asn1Prefix, pubBytes]));
+        map.set(key, publicKey);
+    }
+    return map;
+}
+export async function validateV1(keySet, path, headers) {
+    const jwt = headerValue(JWT_HEADER, headers);
+    if (!jwt) {
+        throw new Error(`v1 signature scheme expects the following headers: ${[JWT_HEADER]}`);
+    }
+    try {
+        return await jwtVerify(keySet, jwt, normalisedPath(path));
+    }
+    catch (e) {
+        return {
+            valid: false,
+            scheme: SCHEME_V1,
+            error: e,
+        };
+    }
+}
+function normalisedPath(path) {
+    switch (path.type) {
+        case "invoke":
+            return `/invoke/${path.componentName}/${path.handlerName}`;
+        case "discover":
+            return "/discover";
+        case "unknown":
+            return path.path;
+    }
+}
+async function jwtVerify(keySet, jwt, expectedAud) {
+    const { 0: protectedHeader, 1: payload, 2: signature, length, } = jwt.split(".");
+    if (length !== 3) {
+        throw new Error("Invalid Compact JWS; expected 3 parts");
+    }
+    let header = {};
+    try {
+        header = JSON.parse(Buffer.from(protectedHeader, "base64url").toString());
+    }
+    catch (e) {
+        throw new Error("JWT header is invalid");
+    }
+    const { typ, alg, kid } = header;
+    if (typ != "JWT") {
+        throw new Error('JWT must have "typ" header "JWT"');
+    }
+    if (alg != "EdDSA") {
+        throw new Error('JWT must have "alg" header "EdDSA"');
+    }
+    if (typeof kid !== "string" || !alg) {
+        throw new Error('JWT must have "kid" header, which must be a string');
+    }
+    const key = keySet.get(kid);
+    if (!key) {
+        throw new Error(`kid ${header.kid} is not present in keySet`);
+    }
+    let signatureBuf;
+    try {
+        signatureBuf = Buffer.from(signature, "base64url");
+    }
+    catch (e) {
+        throw new Error("JWT header is invalid");
+    }
+    const verified = await verify(key, signatureBuf, Buffer.from(`${protectedHeader}.${payload}`));
+    if (!verified) {
+        throw new Error("JWT signature did not validate");
+    }
+    let payloadData;
+    try {
+        payloadData = JSON.parse(Buffer.from(payload, "base64url").toString());
+    }
+    catch (e) {
+        throw new Error("JWT payload is invalid");
+    }
+    return validateClaims(kid, payloadData, expectedAud);
+}
+function validateClaims(kid, payload, expectedAud) {
+    const { aud, exp, nbf } = payload;
+    if (!aud || !exp || !nbf) {
+        throw new Error("JWT must contain all of the following claims: aud, exp, nbf");
+    }
+    if (typeof aud === "string") {
+        if (aud !== expectedAud) {
+            throw new Error("JWT aud claim is invalid");
+        }
+    }
+    else {
+        throw new Error("JWT aud claim is invalid");
+    }
+    const now = Math.floor(new Date().getTime() / 1000);
+    if (typeof nbf !== "number") {
+        throw new Error("nbf claim must be a number");
+    }
+    if (nbf > now) {
+        throw new Error("nbf claim timestamp check failed");
+    }
+    if (typeof exp !== "number") {
+        throw new Error("exp claim must be a number");
+    }
+    if (exp <= now) {
+        throw new Error("exp claim timestamp check failed");
+    }
+    return { valid: true, validKey: kid, scheme: SCHEME_V1 };
+}
+//# sourceMappingURL=v1.js.map

package/dist/esm/src/endpoint/request_signing/v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.js","sourceRoot":"","sources":["../../../../../src/endpoint/request_signing/v1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,IAAI,MAAM,YAAY,CAAC;AAG9B,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAI9B,MAAM,eAAe,GACnB,4DAA4D,CAAC;AAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;AAEnC,yCAAyC;AACzC,oDAAoD;AACpD,6FAA6F;AAC7F,uEAAuE;AACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AAE7D,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,GAAG,GAAa,IAAI,GAAG,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE5E,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,iHAAiH;QACjH,yFAAyF;QACzF,uHAAuH;QACvH,mFAAmF;QACnF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAExE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAgB,EAChB,IAAoB,EACpB,OAA0D;IAE1D,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sDAAsD,CAAC,UAAU,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB;IAC1C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,WAAW,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7D,KAAK,UAAU;YACb,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAgB,EAChB,GAAW,EACX,WAAmB;IAEnB,MAAM,EACJ,CAAC,EAAE,eAAe,EAClB,CAAC,EAAE,OAAO,EACV,CAAC,EAAE,SAAS,EACZ,MAAM,GACP,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,GAAuC,EAAE,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACf,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAEjC,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EACH,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC,CAC7C,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,WAA+C,CAAC;IACpD,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACP,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CACrB,GAAW,EACX,OAAgC,EAChC,WAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAElC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAEpD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC3D,CAAC"}

package/dist/esm/src/endpoint/request_signing/validate.d.ts

@@ -0,0 +1,19 @@
+import type { PathComponents } from "../../types/components.js";
+import type { KeySetV1 } from "./v1.js";
+export type ValidateResponse = ValidateSuccess | {
+    valid: false;
+    error: unknown;
+    scheme: string;
+};
+export type ValidateSuccess = {
+    valid: true;
+    validKey: string;
+    scheme: string;
+};
+export declare function validateRequestSignature(keySet: KeySetV1, path: PathComponents, headers: {
+    [name: string]: string | string[] | undefined;
+}): Promise<ValidateResponse>;
+export declare function headerValue(key: string, headers: {
+    [name: string]: string | string[] | undefined;
+}): string | null;
+//# sourceMappingURL=validate.d.ts.map

package/dist/esm/src/endpoint/request_signing/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../../src/endpoint/request_signing/validate.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKxC,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE;IAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,GACzD,OAAO,CAAC,gBAAgB,CAAC,CAgB3B;AAED,wBAAgB,WAAW,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,GACzD,MAAM,GAAG,IAAI,CAWf"}

package/dist/esm/src/endpoint/request_signing/validate.js

@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+import { SCHEME_V1, validateV1 } from "./v1.js";
+const SIGNATURE_SCHEME_HEADER = "x-restate-signature-scheme";
+export async function validateRequestSignature(keySet, path, headers) {
+    const scheme = headerValue(SIGNATURE_SCHEME_HEADER, headers) ?? "unsigned";
+    switch (scheme) {
+        case "unsigned":
+            return {
+                valid: false,
+                scheme: "unsigned",
+                error: new Error("request has no identity"),
+            };
+        case SCHEME_V1:
+            return await validateV1(keySet, path, headers);
+        default:
+            throw new Error("Unexpected signature scheme: known schemes are 'unsigned', 'v1'");
+    }
+}
+export function headerValue(key, headers) {
+    if (!headers[key]) {
+        return null;
+    }
+    if (typeof headers[key] !== "string") {
+        throw new Error(`Unexpected multi-valued header ${key}`);
+    }
+    if (!headers[key]?.length) {
+        throw new Error(`Unexpected empty valued header ${key}`);
+    }
+    return headers[key];
+}
+//# sourceMappingURL=validate.js.map

package/dist/esm/src/endpoint/request_signing/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../../../src/endpoint/request_signing/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEhD,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAQ7D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAgB,EAChB,IAAoB,EACpB,OAA0D;IAE1D,MAAM,MAAM,GAAG,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC;IAC3E,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,IAAI,KAAK,CAAC,yBAAyB,CAAC;aAC5C,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD;YACE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,GAAW,EACX,OAA0D;IAE1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAW,CAAC;AAChC,CAAC"}

package/dist/esm/src/endpoint.d.ts

@@ -0,0 +1,132 @@
+/// <reference types="node" resolution-mode="require"/>
+import type { Http2ServerRequest, Http2ServerResponse } from "http2";
+import type { VirtualObjectDefinition, ServiceDefinition, WorkflowDefinition } from "@restatedev/restate-sdk-core";
+import type { Logger } from "./logger.js";
+/**
+ * Utility interface for a bundle of one or more services belonging together
+ * and being registered together.
+ *
+ * @deprecated Service bundle is unused and will be removed.
+ */
+export interface ServiceBundle {
+    /**
+     * Called to register the services at the endpoint.
+     *
+     * @deprecated Service bundle is unused and will be removed.
+     */
+    registerServices(endpoint: RestateEndpoint): void;
+}
+export interface RestateEndpointBase<E> {
+    /**
+     * Binds a new durable service / virtual object / workflow.
+     *
+     * see restate.service, restate.object, and restate.workflow for more details.
+     **/
+    bind<P extends string, M>(service: ServiceDefinition<P, M> | VirtualObjectDefinition<P, M> | WorkflowDefinition<P, M>): E;
+    /**
+     * Adds one or more services to this endpoint. This will call the
+     * {@link ServiceBundle.registerServices} function to register all services at this endpoint.
+     *
+     * @deprecated service bundle is deprecated
+     */
+    bindBundle(services: ServiceBundle): E;
+    /**
+     * Provide a list of v1 request identity public keys eg `publickeyv1_2G8dCQhArfvGpzPw5Vx2ALciR4xCLHfS5YaT93XjNxX9` to validate
+     * incoming requests against, limiting requests to Restate clusters with the corresponding private keys. This public key format is
+     * logged by the Restate process at startup if a request identity private key is provided.
+     *
+     * If this function is called, all incoming requests irrelevant of endpoint type will be expected to have
+     * `x-restate-signature-scheme: v1` and `x-restate-jwt-v1: <valid jwt signed with one of these keys>`. If not called,
+     *
+     */
+    withIdentityV1(...keys: string[]): E;
+    /**
+     * Replace the default console-based {@link Logger}
+     * @param logger
+     * @example
+     * Using console:
+     * ```ts
+     *     restate.setLogger((params, message, ...o) => {console.log(`${params.level}: `, message, ...o)})
+     *  ```
+     * @example
+     * Using winston:
+     * ```ts
+     *     const logger = createLogger({ ... })
+     *     restate.setLogger((params, message, ...o) => {logger.log(params.level, {invocationId: params.context?.invocationId}, [message, ...o].join(' '))})
+     *  ```
+     * @example
+     * Using pino:
+     * ```ts
+     *     const logger = pino()
+     *     restate.setLogger((params, message, ...o) => {logger[params.level]({invocationId: params.context?.invocationId}, [message, ...o].join(' '))})
+     *  ```
+     */
+    setLogger(logger: Logger): E;
+}
+/**
+ * RestateEndpoint encapsulates all the Restate services served by this endpoint.
+ *
+ * A RestateEndpoint can either be served either as HTTP2 server, using the methods {@link listen} or {@link http2Handler},
+ * or as Lambda, using the method {@link lambdaHandler}.
+ *
+ * @example
+ * A typical endpoint served as HTTP server would look like this:
+ * ```
+ * import * as restate from "@restatedev/restate-sdk";
+ *
+ * restate
+ *   .endpoint()
+ *   .bind(myService)
+ *   .listen(8000);
+ * ```
+ * @example
+ * A typical endpoint served as AWS Lambda would look like this:
+ * ```
+ * import * as restate from "@restatedev/restate-sdk/lambda";
+ *
+ * export const handler = restate
+ *   .endpoint()
+ *   .bind(myService)
+ *   .handler();
+ * ```
+ */
+export interface RestateEndpoint extends RestateEndpointBase<RestateEndpoint> {
+    /**
+     * Creates the invocation handler function to be called by AWS Lambda.
+     *
+     * The returned type of this function is `(event: APIGatewayProxyEvent | APIGatewayProxyEventV2) => Promise<APIGatewayProxyResult | APIGatewayProxyResultV2>`.
+     * We use `any` types here to avoid a dependency on the `@types/aws-lambda` dependency for consumers of this API.
+     *
+     * @returns The invocation handler function for to be called by AWS Lambda.
+     * @deprecated import "@restatedev/restate-sdk/lambda" instead
+     */
+    lambdaHandler(): (event: any, ctx: any) => Promise<any>;
+    /**
+     * Serve this Restate Endpoint as HTTP2 server, listening to the given port.
+     *
+     * If the port is undefined, this method will use the port set in the `PORT`
+     * environment variable. If that variable is undefined as well, the method will
+     * default to port 9080.
+     *
+     * This method's result promise never completes.
+     *
+     * This method is a shorthand for:
+     *
+     * @example
+     * ```
+     * const httpServer = http2.createServer(endpoint.http2Handler());
+     * httpServer.listen(port);
+     * ```
+     *
+     * If you need to manually control the server lifecycle, we suggest to manually instantiate the http2 server and use {@link http2Handler}.
+     *
+     * @param port The port to listen at. May be undefined (see above).
+     * @returns a Promise that resolves with the bound port, or rejects with a failure otherwise.
+     */
+    listen(port?: number): Promise<number>;
+    /**
+     * Returns an http2 server handler. See {@link listen} for more details.
+     */
+    http2Handler(): (request: Http2ServerRequest, response: Http2ServerResponse) => void;
+}
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/esm/src/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../../src/endpoint.ts"],"names":[],"mappings":";AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAC;AACrE,OAAO,KAAK,EACV,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC;;;;QAII;IACJ,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EACtB,OAAO,EACH,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,GACvB,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,GAC7B,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,GAC3B,CAAC,CAAC;IAEL;;;;;OAKG;IACH,UAAU,CAAC,QAAQ,EAAE,aAAa,GAAG,CAAC,CAAC;IAEvC;;;;;;;;OAQG;IACH,cAAc,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAErC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAgB,SAAQ,mBAAmB,CAAC,eAAe,CAAC;IAC3E;;;;;;;;OAQG;IAEH,aAAa,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAExD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvC;;OAEG;IACH,YAAY,IAAI,CACd,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,mBAAmB,KAC1B,IAAI,CAAC;CACX"}

package/dist/esm/src/endpoint.js

@@ -0,0 +1,12 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+export {};
+//# sourceMappingURL=endpoint.js.map

package/dist/esm/src/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../../../src/endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/esm/src/fetch.d.ts

@@ -0,0 +1,8 @@
+export * from "./common_api.js";
+import { type FetchEndpoint } from "./endpoint/fetch_endpoint.js";
+/**
+ * Create a new {@link RestateEndpoint} in request response protocol mode.
+ * Bidirectional mode (must be served over http2) can be enabled with .enableHttp2()
+ */
+export declare function endpoint(): FetchEndpoint;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/esm/src/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/fetch.ts"],"names":[],"mappings":"AAWA,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,8BAA8B,CAAC;AAGtC;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,aAAa,CAExC"}

package/dist/esm/src/fetch.js

@@ -0,0 +1,23 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+export * from "./common_api.js";
+import { FetchEndpointImpl, } from "./endpoint/fetch_endpoint.js";
+import { ProtocolMode } from "./types/discovery.js";
+import { cloudflareWorkersBundlerPatch } from "./endpoint/handlers/vm/sdk_shared_core_wasm_bindings.js"
+/**
+ * Create a new {@link RestateEndpoint} in request response protocol mode.
+ * Bidirectional mode (must be served over http2) can be enabled with .enableHttp2()
+ */
+export function endpoint() {
+    cloudflareWorkersBundlerPatch()
+    return new FetchEndpointImpl(ProtocolMode.REQUEST_RESPONSE);
+}
+//# sourceMappingURL=fetch.js.map

package/dist/esm/src/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../src/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EAEL,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,IAAI,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAC9D,CAAC"}

package/dist/esm/src/generated/version.d.ts

@@ -0,0 +1,2 @@
+export declare const SDK_VERSION = "1.3.1";
+//# sourceMappingURL=version.d.ts.map

package/dist/esm/src/generated/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../../src/generated/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,UAAU,CAAC"}

package/dist/esm/src/generated/version.js

@@ -0,0 +1,2 @@
+export const SDK_VERSION = '1.3.1';
+//# sourceMappingURL=version.js.map

package/dist/esm/src/generated/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../../src/generated/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC"}

package/dist/esm/src/lambda.d.ts

@@ -0,0 +1,7 @@
+export * from "./common_api.js";
+import { type LambdaEndpoint } from "./endpoint/lambda_endpoint.js";
+/**
+ * Create a new {@link RestateEndpoint}.
+ */
+export declare function endpoint(): LambdaEndpoint;
+//# sourceMappingURL=lambda.d.ts.map

package/dist/esm/src/lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.d.ts","sourceRoot":"","sources":["../../../src/lambda.ts"],"names":[],"mappings":"AAWA,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAEvC;;GAEG;AACH,wBAAgB,QAAQ,IAAI,cAAc,CAEzC"}

package/dist/esm/src/lambda.js

@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+export * from "./common_api.js";
+import { LambdaEndpointImpl, } from "./endpoint/lambda_endpoint.js";
+/**
+ * Create a new {@link RestateEndpoint}.
+ */
+export function endpoint() {
+    return new LambdaEndpointImpl();
+}
+//# sourceMappingURL=lambda.js.map

package/dist/esm/src/lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../src/lambda.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EACL,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AAEvC;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,IAAI,kBAAkB,EAAE,CAAC;AAClC,CAAC"}

package/dist/esm/src/logger.d.ts

@@ -0,0 +1,35 @@
+/// <reference types="node" resolution-mode="require"/>
+export declare enum RestateLogLevel {
+    TRACE = "trace",
+    DEBUG = "debug",
+    INFO = "info",
+    WARN = "warn",
+    ERROR = "error"
+}
+export declare function logLevel(level: RestateLogLevel): number;
+export type LogParams = {
+    source: LogSource;
+    level: RestateLogLevel;
+    replaying: boolean;
+    context?: LoggerContext;
+};
+export type Logger = (params: LogParams, message?: any, ...optionalParams: any[]) => void;
+export declare const DEFAULT_LOGGER_LOG_LEVEL: RestateLogLevel;
+export declare const defaultLogger: Logger;
+export declare class LoggerContext {
+    readonly invocationId: string;
+    readonly additionalContext?: {
+        [name: string]: string;
+    } | undefined;
+    readonly fqMethodName: string;
+    constructor(invocationId: string, packageName: string, serviceName: string, handlerName: string, additionalContext?: {
+        [name: string]: string;
+    } | undefined);
+}
+export declare enum LogSource {
+    SYSTEM = "SYSTEM",
+    JOURNAL = "JOURNAL",
+    USER = "USER"
+}
+export declare function createRestateConsole(logger: Logger, source: LogSource, context?: LoggerContext, isReplaying?: () => boolean): Console;
+//# sourceMappingURL=logger.d.ts.map

package/dist/esm/src/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/logger.ts"],"names":[],"mappings":";AAeA,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAavD;AAuBD,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,CACnB,MAAM,EAAE,SAAS,EACjB,OAAO,CAAC,EAAE,GAAG,EACb,GAAG,cAAc,EAAE,GAAG,EAAE,KACrB,IAAI,CAAC;AAKV,eAAO,MAAM,wBAAwB,iBAAwB,CAAC;AAE9D,eAAO,MAAM,aAAa,EAAE,MA4B3B,CAAC;AAWF,qBAAa,aAAa;IAItB,QAAQ,CAAC,YAAY,EAAE,MAAM;IAI7B,QAAQ,CAAC,iBAAiB,CAAC;;;IAP7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAGnB,YAAY,EAAE,MAAM,EAC7B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACV,iBAAiB,CAAC;;iBAA4B;CAM1D;AAkCD,oBAAY,SAAS;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,EACjB,OAAO,CAAC,EAAE,aAAa,EACvB,WAAW,GAAE,MAAM,OAAqB,GACvC,OAAO,CAwCT"}

package/dist/esm/src/logger.js

@@ -0,0 +1,144 @@
+/*
+ * Copyright (c) 2023-2024 - Restate Software, Inc., Restate GmbH
+ *
+ * This file is part of the Restate SDK for Node.js/TypeScript,
+ * which is released under the MIT license.
+ *
+ * You can find a copy of the license in file LICENSE in the root
+ * directory of this repository or package, or at
+ * https://github.com/restatedev/sdk-typescript/blob/main/LICENSE
+ */
+/* eslint-disable @typescript-eslint/no-explicit-any */
+/* eslint-disable no-console */
+/* eslint-disable @typescript-eslint/no-unsafe-argument */
+export var RestateLogLevel;
+(function (RestateLogLevel) {
+    RestateLogLevel["TRACE"] = "trace";
+    RestateLogLevel["DEBUG"] = "debug";
+    RestateLogLevel["INFO"] = "info";
+    RestateLogLevel["WARN"] = "warn";
+    RestateLogLevel["ERROR"] = "error";
+})(RestateLogLevel || (RestateLogLevel = {}));
+export function logLevel(level) {
+    switch (level) {
+        case RestateLogLevel.TRACE:
+            return 1;
+        case RestateLogLevel.DEBUG:
+            return 2;
+        case RestateLogLevel.INFO:
+            return 3;
+        case RestateLogLevel.WARN:
+            return 4;
+        case RestateLogLevel.ERROR:
+            return 5;
+    }
+}
+function logLevelFromName(name) {
+    if (!name) {
+        return null;
+    }
+    const n = name.toUpperCase();
+    switch (n) {
+        case "TRACE":
+            return RestateLogLevel.TRACE;
+        case "DEBUG":
+            return RestateLogLevel.DEBUG;
+        case "INFO":
+            return RestateLogLevel.INFO;
+        case "WARN":
+            return RestateLogLevel.WARN;
+        case "ERROR":
+            return RestateLogLevel.ERROR;
+        default:
+            throw new TypeError(`unknown name ${name}`);
+    }
+}
+// this is the log level as provided by the environment variable RESTATE_LOG_LEVEL,
+// but it only affects the default logger - custom loggers get all log events and
+// should use their own filtering mechanism
+export const DEFAULT_LOGGER_LOG_LEVEL = readRestateLogLevel();
+export const defaultLogger = (params, message, ...optionalParams) => {
+    if (params.replaying) {
+        return;
+    }
+    if (logLevel(params.level) < logLevel(DEFAULT_LOGGER_LOG_LEVEL)) {
+        return;
+    }
+    const p = `${formatLogPrefix(params.context)}[${new Date().toISOString()}] ${params.level.toUpperCase()}: `;
+    switch (params.level) {
+        case RestateLogLevel.TRACE:
+            return console.trace(p, message, ...optionalParams);
+        case RestateLogLevel.DEBUG:
+            return console.debug(p, message, ...optionalParams);
+        case RestateLogLevel.INFO:
+            return console.info(p, message, ...optionalParams);
+        case RestateLogLevel.WARN:
+            return console.warn(p, message, ...optionalParams);
+        case RestateLogLevel.ERROR:
+            return console.error(p, message, ...optionalParams);
+        default:
+            throw new TypeError(`unset or unknown log level ${params.level}`);
+    }
+};
+function readRestateLogLevel() {
+    const env = globalThis.process?.env?.RESTATE_LOGGING;
+    const level = logLevelFromName(env);
+    if (level != null) {
+        return level;
+    }
+    return RestateLogLevel.INFO;
+}
+export class LoggerContext {
+    invocationId;
+    additionalContext;
+    fqMethodName;
+    constructor(invocationId, packageName, serviceName, handlerName, additionalContext) {
+        this.invocationId = invocationId;
+        this.additionalContext = additionalContext;
+        this.fqMethodName = packageName
+            ? `${packageName}.${serviceName}/${handlerName}`
+            : `${serviceName}/${handlerName}`;
+    }
+}
+function formatLogPrefix(context) {
+    if (context === undefined) {
+        return "[restate] ";
+    }
+    let prefix = `[restate] [${context.fqMethodName}][${context.invocationId}]`;
+    if (context.additionalContext !== undefined) {
+        for (const [k, v] of Object.entries(context.additionalContext)) {
+            prefix = prefix + `[${k}: ${v}]`;
+        }
+    }
+    return prefix;
+}
+function loggerForLevel(logger, source, level, isReplaying, context) {
+    return {
+        get: () => {
+            return logger.bind(null, {
+                source,
+                level,
+                replaying: isReplaying(),
+                context,
+            });
+        },
+    };
+}
+export var LogSource;
+(function (LogSource) {
+    LogSource["SYSTEM"] = "SYSTEM";
+    LogSource["JOURNAL"] = "JOURNAL";
+    LogSource["USER"] = "USER";
+})(LogSource || (LogSource = {}));
+export function createRestateConsole(logger, source, context, isReplaying = () => false) {
+    const info = loggerForLevel(logger, source, RestateLogLevel.INFO, isReplaying, context);
+    return Object.create(console, {
+        trace: loggerForLevel(logger, source, RestateLogLevel.TRACE, isReplaying, context),
+        debug: loggerForLevel(logger, source, RestateLogLevel.DEBUG, isReplaying, context),
+        info,
+        log: info,
+        warn: loggerForLevel(logger, source, RestateLogLevel.WARN, isReplaying, context),
+        error: loggerForLevel(logger, source, RestateLogLevel.ERROR, isReplaying, context),
+    });
+}
+//# sourceMappingURL=logger.js.map