@spacefast/wpcloud-sdk 0.0.23 → 0.0.26

package/dist/runtime.js

@@ -1,12 +1,9 @@
 import { createHash } from "node:crypto";
-import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
-import path from "node:path";
 import { createClient, createConfig } from "./generated/client";
 import { mergeHeaders } from "./generated/client/utils.gen";
 const WP_CLOUD_REQUEST_TIMEOUT_MS = 30_000;
 const WP_CLOUD_METRICS_MAX_ATTEMPTS = 3;
 const OPTIONAL_PATH_SEGMENT_PATTERN = /\[\/([^\]]+)\]/g;
-const SNAPSHOT_VERSION = 1;
 export class WpCloudRequestError extends Error {
     status;
     payload;
@@ -36,19 +33,10 @@ export function parseRetryAfterSeconds(value) {
     }
     return Math.max(0, Math.ceil((date - Date.now()) / 1000));
 }
-let fakeFetchOverride = null;
 let wpCloudCallObserver = null;
 export function setWpCloudCallObserver(fn) {
     wpCloudCallObserver = fn;
 }
-/**
- * Test-only seam: route every wp.cloud call to an in-process fake instead of the network. Set in a
- * suite's `beforeAll`, clear with `null` in `afterAll`. Used when the provider mode is `fake`; with
- * no override installed, `fake` mode falls back to the shared default fake server.
- */
-export function setWpCloudFakeFetch(fn) {
-    fakeFetchOverride = fn;
-}
 export const createClientConfig = (config) => ({
     ...config,
     fetch: wpCloudFetch,
@@ -69,7 +57,19 @@ export function createWpCloudClient(options) {
         auth: options.auth,
     })));
 }
+// An ambient cancellation source consulted per call — the control plane
+// registers its operation-lease signal here (wp-cloud/config.ts) so a fenced
+// executor's in-flight provider calls cancel instead of running to completion.
+let wpCloudCallSignalProvider = null;
+export function setWpCloudCallSignalProvider(fn) {
+    wpCloudCallSignalProvider = fn;
+}
 async function wpCloudFetch(input, init) {
+    const ambient = wpCloudCallSignalProvider?.() ?? null;
+    if (ambient) {
+        const own = init?.signal ?? (input instanceof Request ? input.signal : null);
+        init = { ...init, signal: own ? AbortSignal.any([own, ambient]) : ambient };
+    }
     const request = wpCloudRequestIdentity(input, init);
     const startedAt = performance.now();
     let ok = false;
@@ -93,7 +93,7 @@ async function wpCloudFetch(input, init) {
 async function performWpCloudFetch(input, init, request) {
     const isMetricsRequest = request.method === "POST" &&
         /\/metrics\/(?:site|client)\/[^/]+(?:\/summarize)?\/?$/.test(request.path);
-    const maxAttempts = isMetricsRequest && wpCloudProviderMode() !== "replay" ? WP_CLOUD_METRICS_MAX_ATTEMPTS : 1;
+    const maxAttempts = isMetricsRequest ? WP_CLOUD_METRICS_MAX_ATTEMPTS : 1;
     const failures = [];
     /* eslint-disable no-await-in-loop -- metrics retries must complete sequentially and stop at the first atomic response. */
     for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
@@ -195,6 +195,7 @@ async function validateWpCloudMetricsResponse(response) {
             detail: errorMessage(error),
         });
     }
+    // SAFETY: The envelope condition checks each asserted value for a non-null, non-array object before property access.
     if (!parsed ||
         typeof parsed !== "object" ||
         Array.isArray(parsed) ||
@@ -219,20 +220,7 @@ function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
 export async function wpCloudRawFetch(input, init) {
-    const mode = wpCloudProviderMode();
-    if (mode === "fake") {
-        const fake = fakeFetchOverride ?? (await import("./fake/server.js")).defaultFakeFetch;
-        return await fake(input, init);
-    }
-    const snapshot = await buildWpCloudSnapshotRequest(input, init);
-    if (mode === "replay") {
-        return await replayWpCloudSnapshot(snapshot);
-    }
-    const response = await wpCloudNetworkFetch(input, init);
-    if (mode === "record") {
-        return await recordWpCloudSnapshot(snapshot, response);
-    }
-    return response;
+    return wpCloudNetworkFetch(input, init);
 }
 async function wpCloudNetworkFetch(input, init) {
     const controller = new AbortController();
@@ -250,7 +238,16 @@ async function wpCloudNetworkFetch(input, init) {
     }
     let response;
     try {
-        response = await fetch(input, { ...init, signal: controller.signal });
+        // Atomic API access in development can require the operator's authenticated
+        // HTTPS proxy. Bun does not consistently apply the environment value to
+        // fetch, so pass it explicitly; production without one keeps direct I/O.
+        const proxy = process.env.HTTPS_PROXY?.trim() || process.env.https_proxy?.trim();
+        const requestInit = {
+            ...init,
+            signal: controller.signal,
+            ...(proxy ? { proxy } : {}),
+        };
+        response = await fetch(input, requestInit);
     }
     catch (error) {
         if (didTimeout) {
@@ -264,293 +261,6 @@ async function wpCloudNetworkFetch(input, init) {
     }
     return response;
 }
-let manifestWriteQueue = Promise.resolve();
-function wpCloudProviderMode() {
-    const mode = (process.env.E2E_PROVIDER_MODE ??
-        process.env.WP_CLOUD_PROVIDER_MODE ??
-        "live").toLowerCase();
-    if (mode === "record" || mode === "replay" || mode === "fake") {
-        return mode;
-    }
-    return "live";
-}
-function wpCloudSnapshotDir() {
-    const baseDir = process.env.E2E_WPCLOUD_SNAPSHOT_DIR ?? process.env.WP_CLOUD_SNAPSHOT_DIR;
-    if (!baseDir) {
-        return undefined;
-    }
-    const snapshotCase = snapshotCaseName();
-    return snapshotCase ? path.join(baseDir, snapshotCase) : baseDir;
-}
-function requireWpCloudSnapshotDir() {
-    const dir = wpCloudSnapshotDir();
-    if (!dir) {
-        throw new WpCloudRequestError(599, "wp_cloud_snapshot_dir_required", null);
-    }
-    return dir;
-}
-async function buildWpCloudSnapshotRequest(input, init) {
-    const url = canonicalWpCloudSnapshotUrl(input);
-    const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
-    const bodySha256 = sha256(await requestBodyForSnapshot(init?.body));
-    const key = sha256(`${method}\n${url}\n${bodySha256}`);
-    return {
-        key,
-        method,
-        url,
-        bodySha256,
-    };
-}
-function canonicalWpCloudSnapshotUrl(input) {
-    const rawUrl = input instanceof Request ? input.url : String(input);
-    const url = new URL(rawUrl);
-    url.searchParams.sort();
-    return url.toString();
-}
-async function requestBodyForSnapshot(body) {
-    if (body === undefined || body === null) {
-        return "";
-    }
-    if (typeof body === "string") {
-        return body;
-    }
-    if (body instanceof URLSearchParams) {
-        return body.toString();
-    }
-    if (body instanceof Blob) {
-        return await body.text();
-    }
-    if (body instanceof ArrayBuffer) {
-        return Buffer.from(body).toString("base64");
-    }
-    if (ArrayBuffer.isView(body)) {
-        return Buffer.from(body.buffer, body.byteOffset, body.byteLength).toString("base64");
-    }
-    return `[${body.constructor.name}]`;
-}
-async function replayWpCloudSnapshot(request) {
-    const snapshot = await readWpCloudSnapshot(request);
-    if (!snapshot) {
-        throw new WpCloudRequestError(599, `wp_cloud_snapshot_missing:${request.key}`, {
-            method: request.method,
-            url: request.url,
-            bodySha256: request.bodySha256,
-        });
-    }
-    assertSnapshotMatches(request, snapshot);
-    return new Response(Buffer.from(snapshot.response.bodyBase64, "base64"), {
-        status: snapshot.response.status,
-        statusText: snapshot.response.statusText,
-        headers: snapshot.response.headers,
-    });
-}
-async function recordWpCloudSnapshot(request, response) {
-    const body = Buffer.from(await response.arrayBuffer());
-    // The live caller gets the untouched body (it may need real values, e.g. an SFTP password to
-    // SSH in during the same run). Only what we PERSIST is scrubbed: create-site and friends return
-    // secrets in their JSON bodies, and these snapshots are committed as fixtures.
-    const storedBody = redactSnapshotResponseBody(body);
-    const bodyBase64 = storedBody.toString("base64");
-    const recordedAt = new Date().toISOString();
-    const headers = redactedResponseHeaders(response.headers);
-    const snapshot = {
-        version: SNAPSHOT_VERSION,
-        recordedAt,
-        ...request,
-        response: {
-            status: response.status,
-            statusText: response.statusText,
-            headers,
-            bodyBase64,
-        },
-    };
-    const destination = wpCloudSnapshotWritePath(request);
-    await mkdir(path.dirname(destination), { recursive: true });
-    await writeJsonAtomic(destination, snapshot);
-    await writeWpCloudSnapshotManifest({
-        ...request,
-        redactedUrl: redactedSnapshotUrl(request.url),
-        recordedAt,
-        response: {
-            status: response.status,
-            statusText: response.statusText,
-            headers,
-            bodySha256: sha256(bodyBase64),
-            bodyBytes: storedBody.byteLength,
-        },
-    });
-    return new Response(body, {
-        status: response.status,
-        statusText: response.statusText,
-        headers: response.headers,
-    });
-}
-/** Keys whose values are secrets WP.Cloud returns in response bodies (create-site, sftp users, db). */
-const SENSITIVE_BODY_KEY = /pass(word)?|secret|private[_-]?key|privatekey|credential|sftp_pass|db_pass|one[_-]?time|onetime|otp|nonce|api[_-]?key|access[_-]?token/i;
-/**
- * Scrub secrets from a recorded response body before it is written to a committed fixture, while
- * preserving the JSON SHAPE (keys + types) that the fake provider keys off. Masks values under
- * sensitive keys; runs the existing text scrub over remaining string leaves and non-JSON bodies.
- */
-function redactSnapshotResponseBody(body) {
-    if (body.byteLength === 0) {
-        return body;
-    }
-    const text = body.toString("utf8");
-    let parsed;
-    try {
-        parsed = JSON.parse(text);
-    }
-    catch {
-        return Buffer.from(redactSensitiveText(text), "utf8");
-    }
-    return Buffer.from(JSON.stringify(maskSecretValues(parsed)), "utf8");
-}
-function maskSecretValues(value) {
-    if (Array.isArray(value)) {
-        return value.map(maskSecretValues);
-    }
-    if (value && typeof value === "object") {
-        const out = {};
-        for (const [key, child] of Object.entries(value)) {
-            out[key] =
-                SENSITIVE_BODY_KEY.test(key) && (typeof child === "string" || typeof child === "number")
-                    ? "[REDACTED]"
-                    : maskSecretValues(child);
-        }
-        return out;
-    }
-    if (typeof value === "string") {
-        return redactSensitiveText(value);
-    }
-    return value;
-}
-async function writeWpCloudSnapshotManifest(entry) {
-    manifestWriteQueue = manifestWriteQueue.then(async () => {
-        const manifestPath = wpCloudSnapshotManifestPath();
-        const manifest = await readWpCloudSnapshotManifest();
-        const entries = manifest.entries.filter((existing) => existing.key !== entry.key);
-        entries.push(entry);
-        entries.sort((left, right) => `${left.method} ${left.redactedUrl} ${left.bodySha256}`.localeCompare(`${right.method} ${right.redactedUrl} ${right.bodySha256}`));
-        const next = {
-            version: SNAPSHOT_VERSION,
-            case: snapshotCaseName(),
-            entries,
-        };
-        await mkdir(path.dirname(manifestPath), { recursive: true });
-        await writeJsonAtomic(manifestPath, next);
-    });
-    await manifestWriteQueue;
-}
-async function readWpCloudSnapshotManifest() {
-    try {
-        const parsed = JSON.parse(await readFile(wpCloudSnapshotManifestPath(), "utf8"));
-        return {
-            version: SNAPSHOT_VERSION,
-            case: typeof parsed?.case === "string" ? parsed.case : snapshotCaseName(),
-            entries: Array.isArray(parsed?.entries) ? parsed.entries : [],
-        };
-    }
-    catch (error) {
-        if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
-            return {
-                version: SNAPSHOT_VERSION,
-                case: snapshotCaseName(),
-                entries: [],
-            };
-        }
-        throw error;
-    }
-}
-async function readWpCloudSnapshot(request) {
-    const results = await Promise.allSettled(wpCloudSnapshotReadPaths(request).map(async (snapshotPath) => JSON.parse(await readFile(snapshotPath, "utf8"))));
-    for (const result of results) {
-        if (result.status === "fulfilled") {
-            return result.value;
-        }
-        const error = result.reason;
-        if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT")) {
-            throw error;
-        }
-    }
-    return null;
-}
-function wpCloudSnapshotWritePath(request) {
-    return path.join(requireWpCloudSnapshotDir(), `${request.key}.json`);
-}
-function wpCloudSnapshotReadPaths(request) {
-    const dir = requireWpCloudSnapshotDir();
-    const paths = [path.join(dir, `${request.key}.json`)];
-    const baseDir = wpCloudSnapshotBaseDir();
-    if (baseDir && baseDir !== dir) {
-        paths.push(path.join(baseDir, `${request.key}.json`));
-    }
-    return paths;
-}
-function wpCloudSnapshotBaseDir() {
-    return process.env.E2E_WPCLOUD_SNAPSHOT_DIR ?? process.env.WP_CLOUD_SNAPSHOT_DIR;
-}
-function wpCloudSnapshotManifestPath() {
-    return path.join(requireWpCloudSnapshotDir(), "_manifest.json");
-}
-function snapshotCaseName() {
-    return sanitizeSnapshotCase(process.env.E2E_WPCLOUD_SNAPSHOT_CASE ?? process.env.WP_CLOUD_SNAPSHOT_CASE ?? "");
-}
-function sanitizeSnapshotCase(value) {
-    return value
-        .trim()
-        .toLowerCase()
-        .replaceAll(/[^a-z0-9._-]+/g, "-")
-        .replaceAll(/^-+|-+$/g, "");
-}
-function redactedSnapshotUrl(value) {
-    const url = new URL(value);
-    for (const [name, current] of Array.from(url.searchParams.entries())) {
-        if (/token|secret|key|password|private|certificate|auth|cookie/i.test(name)) {
-            url.searchParams.set(name, "[REDACTED]");
-        }
-        else {
-            url.searchParams.set(name, redactSensitiveText(current));
-        }
-    }
-    return url.toString();
-}
-async function writeJsonAtomic(destination, value) {
-    const tempPath = `${destination}.${process.pid}.${Date.now()}.${Math.random()
-        .toString(16)
-        .slice(2)}.tmp`;
-    await writeFile(tempPath, `${JSON.stringify(value, null, 2)}\n`, "utf8");
-    await rename(tempPath, destination);
-}
-function assertSnapshotMatches(request, snapshot) {
-    if (snapshot.version !== SNAPSHOT_VERSION ||
-        snapshot.method !== request.method ||
-        snapshot.url !== request.url ||
-        snapshot.bodySha256 !== request.bodySha256) {
-        throw new WpCloudRequestError(599, `wp_cloud_snapshot_mismatch:${request.key}`, {
-            method: request.method,
-            url: request.url,
-            bodySha256: request.bodySha256,
-        });
-    }
-}
-function redactedResponseHeaders(headers) {
-    const out = {};
-    for (const [name, value] of headers) {
-        const lowerName = name.toLowerCase();
-        if (lowerName === "set-cookie" || lowerName === "authorization" || lowerName === "auth") {
-            continue;
-        }
-        out[lowerName] = redactSensitiveText(value);
-    }
-    return out;
-}
-function redactSensitiveText(value) {
-    return value
-        .replace(/Bearer\s+[A-Za-z0-9._~+/-]+=*/gi, "Bearer [REDACTED]")
-        .replace(/Auth[=:]\s*[A-Za-z0-9._~+/-]+=*/gi, "Auth=[REDACTED]")
-        .replace(/token[=:]\s*["']?[A-Za-z0-9._~+/-]+=*["']?/gi, "token=[REDACTED]");
-}
 function sha256(value) {
     return createHash("sha256").update(value).digest("hex");
 }
@@ -580,6 +290,7 @@ async function readErrorPayload(response) {
     }
 }
 async function validateAndExtractWpCloudData(value) {
+    // SAFETY: The condition checks that value is a non-null, non-array object before reading its message property.
     if (!value ||
         typeof value !== "object" ||
         Array.isArray(value) ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spacefast/wpcloud-sdk",
-  "version": "0.0.23",
+  "version": "0.0.26",
   "license": "MIT",
   "description": "Generated TypeScript client for the WP.Cloud API.",
   "repository": {
@@ -29,11 +29,6 @@
       "types": "./dist/runtime.d.ts",
       "import": "./dist/runtime.js",
       "default": "./dist/runtime.js"
-    },
-    "./fake": {
-      "types": "./dist/fake/index.d.ts",
-      "import": "./dist/fake/index.js",
-      "default": "./dist/fake/index.js"
     }
   }
 }

package/dist/fake/index.d.ts

@@ -1,2 +0,0 @@
-export { makeFakeAtomic, makeFakeAtomicWithStore } from "./server.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/fake/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fake/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/fake/index.js

@@ -1 +0,0 @@
-export { makeFakeAtomic, makeFakeAtomicWithStore } from "./server.js";

package/dist/fake/router.d.ts

@@ -1,13 +0,0 @@
-import { FakeAtomicStore } from "./store.js";
-export type FakeResult = {
-    status: number;
-    body: unknown;
-    headers?: Record<string, string>;
-};
-/**
- * @param path  the path after `/api/v1.0/`, e.g. `create-site/minipage` or `site-meta/151/_data/get`
- *              (segments still URL-encoded; this fn decodes the ones it needs)
- * @param body  the nested-decoded request body (form-urlencoded → object)
- */
-export declare function routeFakeRequest(store: FakeAtomicStore, method: string, path: string, body: Record<string, unknown>): FakeResult;
-//# sourceMappingURL=router.d.ts.map

package/dist/fake/router.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/fake/router.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAiD7F;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CA0RZ"}