@sequenceholdings/managed-functions 0.4.5 → 0.5.1

package/dist/service-directory-roster.d.ts

@@ -1,7 +1,16 @@
-import { type DirectoryRosterQuery, type DirectoryRosterPage } from './directory-roster-contract';
-export declare function createServiceRosterReader({ origin, token, expiresAt, fetchImpl }: {
+import type { DirectoryRosterQuery } from "./directory-roster-contract";
+export declare function createServiceRosterReader({ origin, token, expiresAt, fetchImpl, }: {
     origin: string;
     token: string;
     expiresAt: number;
     fetchImpl: typeof fetch;
-}): (input: DirectoryRosterQuery) => Promise<DirectoryRosterPage>;
+}): (input: DirectoryRosterQuery) => Promise<{
+    members: {
+        id: string;
+        sub: string;
+        name: string;
+        email: string;
+        deactivated: false;
+    }[];
+    nextCursor: string | null;
+}>;

package/dist/service-directory-roster.js

@@ -1,25 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createServiceRosterReader = createServiceRosterReader;
-const zod_1 = require("zod");
+const browser_1 = require("@sequenceholdings/platform/browser");
 const directory_contract_1 = require("./directory-contract");
-const directory_roster_contract_1 = require("./directory-roster-contract");
-function createServiceRosterReader({ origin, token, expiresAt, fetchImpl }) {
+function createServiceRosterReader({ origin, token, expiresAt, fetchImpl, }) {
+    const client = (0, browser_1.createDirectoryClient)({
+        transport: (0, browser_1.createPlatformTransport)({
+            baseUrl: origin,
+            auth: { kind: "invocation-directory", token },
+            fetchImpl,
+        }),
+    });
     return async (input) => {
         if (expiresAt <= Date.now() / 1000)
-            throw new directory_contract_1.DirectoryPrincipalResolveError(401, 'expired_context', 'The directory credential expired; start a new invocation');
-        const query = directory_roster_contract_1.directoryRosterQuerySchema.safeParse(input);
-        if (!query.success)
-            throw new directory_contract_1.DirectoryPrincipalResolveError(400, 'invalid_request', 'Invalid group roster request');
-        const response = await fetchImpl(`${origin}${directory_roster_contract_1.FUNCTION_DIRECTORY_ROSTER_PATH}`, { method: 'POST', headers: { 'content-type': 'application/json', [directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER]: token }, body: JSON.stringify(query.data), redirect: 'error', signal: AbortSignal.timeout(30_000) });
-        const body = await response.json().catch(() => null);
-        if (!response.ok) {
-            const error = zod_1.z.object({ code: zod_1.z.string().max(128).optional(), detail: zod_1.z.string().max(2000).optional() }).safeParse(body);
-            throw new directory_contract_1.DirectoryPrincipalResolveError(response.status, error.success ? error.data.code ?? 'directory_roster_failed' : 'directory_roster_failed', error.success ? error.data.detail ?? 'Group roster read failed' : 'Group roster read failed');
-        }
-        const result = directory_roster_contract_1.directoryRosterPageSchema.safeParse(body);
-        if (!result.success || result.data.members.length > query.data.limit || new Set(result.data.members.map(member => member.id)).size !== result.data.members.length)
-            throw new directory_contract_1.DirectoryPrincipalResolveError(502, 'malformed_response', 'Atlas returned an invalid group roster');
-        return result.data;
+            throw new directory_contract_1.DirectoryPrincipalResolveError(401, "expired_context", "The directory credential expired; start a new invocation");
+        return client.listGroupMembers(input);
     };
 }

package/dist/service-directory.d.ts

@@ -1,14 +1,10 @@
-import type { DirectoryRosterQuery, DirectoryRosterPage } from './directory-roster-contract';
-import { type DirectoryPrincipalResolveRequest, type DirectoryPrincipalResolution } from './directory-contract';
+import { type DirectoryClient } from "@sequenceholdings/platform/browser";
 export interface FunctionServiceDirectoryOptions {
     request: {
-        headers: Pick<Headers, 'get'> | Readonly<Record<string, string | readonly string[] | undefined>>;
+        headers: Pick<Headers, "get"> | Readonly<Record<string, string | readonly string[] | undefined>>;
     };
     baseUrl: string;
     fetchImpl?: typeof globalThis.fetch;
 }
-export interface FunctionServiceDirectoryClient {
-    listGroupMembers(input: DirectoryRosterQuery): Promise<DirectoryRosterPage>;
-    resolve(input: DirectoryPrincipalResolveRequest): Promise<DirectoryPrincipalResolution>;
-}
-export declare function createFunctionServiceDirectoryClient({ request, baseUrl, fetchImpl }: FunctionServiceDirectoryOptions): FunctionServiceDirectoryClient;
+export type FunctionServiceDirectoryClient = DirectoryClient;
+export declare function createFunctionServiceDirectoryClient({ request, baseUrl, fetchImpl, }: FunctionServiceDirectoryOptions): FunctionServiceDirectoryClient;

package/dist/service-directory.js

@@ -1,74 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createFunctionServiceDirectoryClient = createFunctionServiceDirectoryClient;
-const service_directory_roster_1 = require("./service-directory-roster");
-const zod_1 = require("zod");
+const browser_1 = require("@sequenceholdings/platform/browser");
 const directory_contract_1 = require("./directory-contract");
-function credential({ request }) {
+function createFunctionServiceDirectoryClient({ request, baseUrl, fetchImpl, }) {
     const headers = request.headers;
-    const matches = typeof headers.get === 'function' ? [headers.get(directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER)]
-        : Object.entries(headers).filter(([key]) => key.toLowerCase() === directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER).map(([, value]) => value);
+    const matches = typeof headers.get === "function"
+        ? [headers.get(directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER)]
+        : Object.entries(headers)
+            .filter(([key]) => key.toLowerCase() === directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER)
+            .map(([, value]) => value);
     const token = matches[0];
-    const refused = () => new directory_contract_1.DirectoryPrincipalResolveError(401, 'invalid_context', 'This invocation has no valid directory credential');
-    if (matches.length !== 1 || typeof token !== 'string' || token.length > 16_384)
-        throw refused();
-    const envelope = /^([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]{43})$/.exec(token);
-    if (!envelope?.[1])
-        throw refused();
-    let value;
-    try {
-        value = JSON.parse(Buffer.from(envelope[1], 'base64url').toString('utf8'));
-    }
-    catch {
-        throw refused();
-    }
-    const parsed = zod_1.z.object({ audience: zod_1.z.literal('atlas-managed-function-directory-resolve'), sub: zod_1.z.string().startsWith('service-account|'), functionId: zod_1.z.string().min(1), invocationId: zod_1.z.string().min(1), exp: zod_1.z.number() }).safeParse(value);
-    if (!parsed.success)
-        throw refused();
-    return { token, expiresAt: parsed.data.exp };
-}
-function origin(baseUrl) {
-    const refused = () => new directory_contract_1.DirectoryPrincipalResolveError(400, 'invalid_configuration', 'Configure a trusted HTTPS Atlas origin without credentials, path, query or fragment');
-    let url;
-    try {
-        url = new URL(baseUrl);
-    }
-    catch {
-        throw refused();
-    }
-    const loopback = url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
-    if ((!loopback && url.protocol !== 'https:') || url.username || url.password || url.pathname !== '/' || url.search || url.hash)
-        throw refused();
-    return url.origin;
-}
-function completeResolution({ result, query }) {
-    const expected = new Set(query.lookups.map((lookup) => `${lookup.type}:${lookup.value}`));
-    const received = [...result.resolved.map((value) => value.lookup), ...result.unresolved];
-    const actual = new Set(received.map((lookup) => `${lookup.type}:${lookup.value}`));
-    return received.length === expected.size && actual.size === expected.size && [...actual].every((key) => expected.has(key))
-        && result.resolved.every((value) => value.lookup.type !== 'email' || value.email === value.lookup.value);
-}
-function createFunctionServiceDirectoryClient({ request, baseUrl, fetchImpl = globalThis.fetch }) {
-    const url = `${origin(baseUrl)}${directory_contract_1.FUNCTION_DIRECTORY_RESOLVE_PATH}`;
-    const { token, expiresAt } = credential({ request });
-    return {
-        listGroupMembers: (0, service_directory_roster_1.createServiceRosterReader)({ origin: origin(baseUrl), token, expiresAt, fetchImpl }),
-        async resolve(input) {
-            if (expiresAt <= Date.now() / 1000)
-                throw new directory_contract_1.DirectoryPrincipalResolveError(401, 'expired_context', 'The directory credential expired; start a new invocation');
-            const query = directory_contract_1.directoryPrincipalResolveRequestSchema.safeParse(input);
-            if (!query.success)
-                throw new directory_contract_1.DirectoryPrincipalResolveError(400, 'invalid_request', 'Invalid exact directory resolution request');
-            const response = await fetchImpl(url, { method: 'POST', headers: { 'content-type': 'application/json', [directory_contract_1.FUNCTION_DIRECTORY_TOKEN_HEADER]: token }, body: JSON.stringify(query.data), redirect: 'error', signal: AbortSignal.timeout(30_000) });
-            const body = await response.json().catch(() => null);
-            if (!response.ok) {
-                const error = zod_1.z.object({ code: zod_1.z.string().max(128).optional(), detail: zod_1.z.string().max(2000).optional() }).safeParse(body);
-                throw new directory_contract_1.DirectoryPrincipalResolveError(response.status, error.success ? error.data.code ?? 'directory_resolve_failed' : 'directory_resolve_failed', error.success ? error.data.detail ?? 'Directory resolution failed' : 'Directory resolution failed');
-            }
-            const result = directory_contract_1.directoryPrincipalResolutionSchema.safeParse(body);
-            if (!result.success || !completeResolution({ result: result.data, query: query.data }))
-                throw new directory_contract_1.DirectoryPrincipalResolveError(502, 'malformed_response', 'Atlas returned an invalid directory resolution');
-            return result.data;
-        },
-    };
+    if (matches.length !== 1 || typeof token !== "string")
+        throw new directory_contract_1.DirectoryPrincipalResolveError(401, "invalid_context", "This invocation has no valid directory credential");
+    return (0, browser_1.createDirectoryClient)({
+        transport: (0, browser_1.createPlatformTransport)({
+            baseUrl,
+            auth: { kind: "invocation-directory", token },
+            fetchImpl,
+        }),
+    });
 }

package/dist/storage.d.ts

@@ -1,7 +1,8 @@
-export declare function createFunctionStorageClient({ baseUrl, headers, mode, }: {
+export declare function createFunctionStorageClient({ baseUrl, headers, mode, fetchImpl, }: {
     baseUrl: string;
-    headers: Record<string, string | string[] | undefined>;
-    mode?: 'user' | 'service';
+    headers: Pick<Headers, "get"> | Readonly<Record<string, string | readonly string[] | undefined>>;
+    mode?: "user" | "service";
+    fetchImpl?: typeof globalThis.fetch;
 }): {
     capabilities: () => Promise<{
         canProvision: boolean;
@@ -16,7 +17,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             max: number;
         };
     }>;
-    list: (options?: import("@sequenceholdings/storage").StorageListOptions) => Promise<{
+    list: (options?: import("@sequenceholdings/platform/storage").StorageListOptions) => Promise<{
         items: {
             id: string;
             name: string;
@@ -32,7 +33,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
         }[];
         nextCursor: string | null;
     }>;
-    shared: (options?: import("@sequenceholdings/storage").StorageListOptions & {
+    shared: (options?: import("@sequenceholdings/platform/storage").StorageListOptions & {
         trash?: boolean;
     }) => Promise<{
         items: {
@@ -54,7 +55,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
         }[];
         nextCursor: string | null;
     }>;
-    apply: (manifest: import("@sequenceholdings/storage").WorkspaceManifest) => Promise<{
+    apply: (manifest: import("@sequenceholdings/platform/storage").WorkspaceManifest) => Promise<{
         id: string;
         name: string;
         description: string;
@@ -86,7 +87,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             workspaceId: string;
             targetId: string | null;
             kind: "purge" | "delete_version";
-            status: "queued" | "running" | "succeeded" | "failed";
+            status: "running" | "failed" | "queued" | "succeeded";
             completed: number;
             total: number;
             error: string | null;
@@ -94,7 +95,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             updatedAt: string;
             canRetry: boolean;
         }>;
-        list: (options?: import("@sequenceholdings/storage").StorageListOptions & {
+        list: (options?: import("@sequenceholdings/platform/storage").StorageListOptions & {
             parentId?: string | null;
             trash?: boolean;
         }) => Promise<{
@@ -187,7 +188,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             size: number | null;
             contentType: string | null;
         }>;
-        update: (id: string, input: import("zod").input<typeof import("@sequenceholdings/storage").updateNodeSchema>) => Promise<{
+        update: (id: string, input: import("zod").input<typeof import("@sequenceholdings/platform/storage").updateNodeSchema>) => Promise<{
             id: string;
             workspaceId: string;
             parentId: string | null;
@@ -243,7 +244,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             workspaceId: string;
             targetId: string | null;
             kind: "purge" | "delete_version";
-            status: "queued" | "running" | "succeeded" | "failed";
+            status: "running" | "failed" | "queued" | "succeeded";
             completed: number;
             total: number;
             error: string | null;
@@ -292,7 +293,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             workspaceId: string;
             targetId: string | null;
             kind: "purge" | "delete_version";
-            status: "queued" | "running" | "succeeded" | "failed";
+            status: "running" | "failed" | "queued" | "succeeded";
             completed: number;
             total: number;
             error: string | null;
@@ -304,7 +305,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             revision: number;
             restricted: boolean;
             grants: {
-                type: "user" | "group" | "organization" | "service_account";
+                type: "user" | "service_account" | "group" | "organization";
                 id: string;
                 role: "viewer" | "editor" | "admin";
             }[];
@@ -313,11 +314,11 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             workspaceAdminOverride: true;
             displayNames: Record<string, string>;
         }>;
-        setAccess: (input: import("zod").input<typeof import("@sequenceholdings/storage").updateStorageAccessSchema>, id?: string) => Promise<{
+        setAccess: (input: import("zod").input<typeof import("@sequenceholdings/platform/storage").updateStorageAccessSchema>, id?: string) => Promise<{
             revision: number;
             restricted: boolean;
             grants: {
-                type: "user" | "group" | "organization" | "service_account";
+                type: "user" | "service_account" | "group" | "organization";
                 id: string;
                 role: "viewer" | "editor" | "admin";
             }[];
@@ -333,7 +334,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             revision: number;
             restricted: boolean;
             grants: {
-                type: "user" | "group" | "organization" | "service_account";
+                type: "user" | "service_account" | "group" | "organization";
                 id: string;
                 role: "viewer" | "editor" | "admin";
             }[];
@@ -345,14 +346,14 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
         operations: (options?: {
             before?: string;
             limit?: number;
-            scope?: import("@sequenceholdings/storage").StorageOperationScope;
+            scope?: import("@sequenceholdings/platform/storage").StorageOperationScope;
         }) => Promise<{
             items: {
                 id: string;
                 workspaceId: string;
                 targetId: string | null;
                 kind: "purge" | "delete_version";
-                status: "queued" | "running" | "succeeded" | "failed";
+                status: "running" | "failed" | "queued" | "succeeded";
                 completed: number;
                 total: number;
                 error: string | null;
@@ -367,7 +368,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             workspaceId: string;
             targetId: string | null;
             kind: "purge" | "delete_version";
-            status: "queued" | "running" | "succeeded" | "failed";
+            status: "running" | "failed" | "queued" | "succeeded";
             completed: number;
             total: number;
             error: string | null;
@@ -376,12 +377,12 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
             canRetry: boolean;
         }>;
         uploads: {
-            start: (input: import("@sequenceholdings/storage").StartStorageUpload) => Promise<{
+            start: (input: import("@sequenceholdings/platform/storage").StartStorageUpload) => Promise<{
                 id: string;
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;
@@ -390,16 +391,16 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;
-            complete: (id: string, input?: import("@sequenceholdings/storage").CompleteStorageUpload) => Promise<{
+            complete: (id: string, input?: import("@sequenceholdings/platform/storage").CompleteStorageUpload) => Promise<{
                 id: string;
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;
@@ -408,17 +409,17 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;
-            startBatch: (items: import("@sequenceholdings/storage").StartStorageUpload[]) => Promise<{
+            startBatch: (items: import("@sequenceholdings/platform/storage").StartStorageUpload[]) => Promise<{
                 items: {
                     id: string;
                     fileId: string;
                     uploadUrl: string | null;
                     expiresAt: string;
-                    state: "pending" | "complete" | "aborted";
+                    state: "aborted" | "pending" | "complete";
                     versionId: string | null;
                     maxBytes: number;
                 }[];
@@ -428,7 +429,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                     id: string;
                     fileId: string;
                     name: string;
-                    state: "pending" | "complete" | "aborted";
+                    state: "aborted" | "pending" | "complete";
                     expiresAt: string;
                     maxBytes: number;
                     expectedSize: number | null;
@@ -446,7 +447,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                     id: string;
                     fileId: string;
                     name: string;
-                    state: "pending" | "complete" | "aborted";
+                    state: "aborted" | "pending" | "complete";
                     expiresAt: string;
                     maxBytes: number;
                     expectedSize: number | null;
@@ -458,7 +459,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                     id: string;
                     fileId: string;
                     name: string;
-                    state: "pending" | "complete" | "aborted";
+                    state: "aborted" | "pending" | "complete";
                     expiresAt: string;
                     maxBytes: number;
                     expectedSize: number | null;
@@ -470,7 +471,7 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                     id: string;
                     fileId: string;
                     name: string;
-                    state: "pending" | "complete" | "aborted";
+                    state: "aborted" | "pending" | "complete";
                     expiresAt: string;
                     maxBytes: number;
                     expectedSize: number | null;
@@ -479,27 +480,27 @@ export declare function createFunctionStorageClient({ baseUrl, headers, mode, }:
                     message: string;
                 }[];
             }>;
-            resume(id: string, source: import("@sequenceholdings/storage").StorageUploadSource, options?: import("@sequenceholdings/storage").StorageTransferOptions & {
+            resume(id: string, source: import("@sequenceholdings/platform/storage").StorageUploadSource, options?: import("@sequenceholdings/platform/storage").StorageTransferOptions & {
                 size?: number;
             }): Promise<{
                 id: string;
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;
-            put(input: Omit<import("@sequenceholdings/storage").StartStorageUpload, "idempotencyKey"> & {
+            put(input: Omit<import("@sequenceholdings/platform/storage").StartStorageUpload, "idempotencyKey"> & {
                 idempotencyKey?: string;
-            }, source: import("@sequenceholdings/storage").StorageUploadSource, { keepSessionOnFailure, ...options }?: import("@sequenceholdings/storage").StorageTransferOptions & {
+            }, source: import("@sequenceholdings/platform/storage").StorageUploadSource, { keepSessionOnFailure, ...options }?: import("@sequenceholdings/platform/storage").StorageTransferOptions & {
                 keepSessionOnFailure?: boolean;
             }): Promise<{
                 id: string;
                 fileId: string;
                 uploadUrl: string | null;
                 expiresAt: string;
-                state: "pending" | "complete" | "aborted";
+                state: "aborted" | "pending" | "complete";
                 versionId: string | null;
                 maxBytes: number;
             }>;

package/dist/storage.js

@@ -1,13 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createFunctionStorageClient = createFunctionStorageClient;
-const storage_1 = require("@sequenceholdings/storage");
-function createFunctionStorageClient({ baseUrl, headers, mode = 'user', }) {
-    const token = headers[mode === 'service' ? storage_1.STORAGE_SERVICE_TOKEN_HEADER : storage_1.STORAGE_TOKEN_HEADER];
-    if (typeof token !== 'string' || !token)
-        throw new Error('Storage access is not declared for this function invocation');
+const storage_1 = require("@sequenceholdings/platform/storage");
+function createFunctionStorageClient({ baseUrl, headers, mode = "user", fetchImpl, }) {
+    const name = mode === "service" ? storage_1.STORAGE_SERVICE_TOKEN_HEADER : storage_1.STORAGE_TOKEN_HEADER;
+    const values = typeof headers.get === "function"
+        ? [headers.get(name)]
+        : Object.entries(headers)
+            .filter(([key]) => key.toLowerCase() === name)
+            .map(([, value]) => value);
+    const token = values.length === 1 ? values[0] : undefined;
+    if (typeof token !== "string" || !token)
+        throw new Error("Storage access is not declared for this function invocation");
     return (0, storage_1.createStorageClient)({
         baseUrl,
+        fetch: fetchImpl,
         getHeaders: () => ({ [storage_1.STORAGE_TOKEN_HEADER]: token }),
     });
 }