@substrat-run/vertical-host 0.163.0 → 0.164.0

package/dist/mail-in.d.ts

@@ -0,0 +1,49 @@
+import type { MailInAddress, MailInRelayRequest } from '@substrat-run/contracts';
+/**
+ * This scope's inbound mail address, from a VERTICAL's worker (#2611).
+ *
+ * A scope that declares a mail-in landing can have an address on the platform's receiving
+ * subdomain — mail sent to it lands through the declared operation, attachment bytes included.
+ * This is how the vertical asks for one, reads it to show its users, rotates it when it leaks, and
+ * gives it up. The same shape as {@link requestConnectUrl}: the operation decides, the harness
+ * effects.
+ *
+ * ```ts
+ * // module.ts — the authorizing act
+ * const manageMailIn: OperationHandler = async (ctx) => {
+ *   assertAllowed(await ctx.check(PERM.manageMailIn));
+ *   return { principal: ctx.principal };
+ * };
+ *
+ * // worker.ts — the effect
+ * const { principal } = await scope.invoke('docs/manage-mail-in', {});
+ * const address = await mailInAddress({
+ *   controlPlaneUrl: env.CONTROL_PLANE_URL,
+ *   platformSecret: env.PLATFORM_SECRET,
+ *   tenantId, scopeId,
+ *   action: 'request',
+ *   createdBy: principal,
+ *   allowlist: ['me@example.com'],
+ * });
+ * ```
+ *
+ * Call it from the worker, never from inside a Durable Object: the platform requires a PROVEN
+ * caller for every action, since an address delivers into the scope it names. Which operation and
+ * key the address lands through is read from the manifest the scope runs, never from this call.
+ */
+export type MailInAddressRequest = MailInRelayRequest & {
+    /** The control plane's origin, injected into the vertical as `CONTROL_PLANE_URL`. */
+    controlPlaneUrl: string;
+    /** The `PLATFORM_SECRET` injected into this dispatch script. */
+    platformSecret: string;
+    /** `fetch` seam for tests; defaults to the runtime's, bound (see `lint:bound-fetch`). */
+    fetchImpl?: typeof fetch;
+};
+/** The relay refused, or could not be reached. Carries the status so a caller can map it. */
+export declare class MailInAddressError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+/** The scope's address after the action — `null` when it has none (or just gave it up). */
+export declare function mailInAddress(request: MailInAddressRequest): Promise<MailInAddress | null>;
+//# sourceMappingURL=mail-in.d.ts.map

package/dist/mail-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-in.d.ts","sourceRoot":"","sources":["../src/mail-in.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GAAG;IACtD,qFAAqF;IACrF,eAAe,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF,6FAA6F;AAC7F,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAFzB,YACE,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EAIxB;CACF;AAED,2FAA2F;AAC3F,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAmBhG"}

package/dist/mail-in.js

@@ -0,0 +1,32 @@
+import { PLATFORM_SECRET_HEADER, mailInRelayResult } from '@substrat-run/contracts';
+/** The relay refused, or could not be reached. Carries the status so a caller can map it. */
+export class MailInAddressError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'MailInAddressError';
+    }
+}
+/** The scope's address after the action — `null` when it has none (or just gave it up). */
+export async function mailInAddress(request) {
+    const fetchImpl = request.fetchImpl ?? globalThis.fetch.bind(globalThis);
+    const base = request.controlPlaneUrl.replace(/\/+$/, '');
+    const res = await fetchImpl(`${base}/internal/mail-in/address`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', [PLATFORM_SECRET_HEADER]: request.platformSecret },
+        body: JSON.stringify({
+            tenantId: request.tenantId,
+            scopeId: request.scopeId,
+            action: request.action,
+            ...(request.createdBy ? { createdBy: request.createdBy } : {}),
+            ...(request.allowlist ? { allowlist: request.allowlist } : {}),
+        }),
+    });
+    const body = (await res.json().catch(() => ({})));
+    if (!res.ok) {
+        throw new MailInAddressError(`the platform refused the mail-in ${request.action} (${res.status}): ${body.error ?? 'unknown error'}`, res.status);
+    }
+    return mailInRelayResult.parse(body).address;
+}
+//# sourceMappingURL=mail-in.js.map

package/dist/mail-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-in.js","sourceRoot":"","sources":["../src/mail-in.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AA4CpF,6FAA6F;AAC7F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC,MAAM;IAFjB,YACE,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;sBAFN,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,2BAA2B,EAAE;QAC9D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE;QACjG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;KACH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAuB,CAAC;IACxE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnJ,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/vertical-host",
-  "version": "0.163.0",
+  "version": "0.164.0",
   "description": "The platform's /internal/* surface + error envelope, authored once — mount it in a vertical worker instead of re-copying the control-plane contract",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -20,28 +20,32 @@
     "./model": {
       "types": "./dist/model.d.ts",
       "default": "./dist/model.js"
+    },
+    "./connectors": {
+      "types": "./dist/connectors.d.ts",
+      "default": "./dist/connectors.js"
     }
   },
   "files": [
     "dist"
   ],
   "dependencies": {
-    "ai": "7.0.142",
+    "ai": "7.0.152",
     "hono": "^4.13.13",
     "workers-ai-provider": "^4.0.0",
-    "@substrat-run/contracts": "^0.163.0",
-    "@substrat-run/model-providers": "^0.5.53",
-    "@substrat-run/kernel": "^0.163.0"
+    "@substrat-run/contracts": "^0.164.0",
+    "@substrat-run/model-providers": "^0.5.54",
+    "@substrat-run/kernel": "^0.164.0"
   },
   "devDependencies": {
-    "@scalar/api-reference": "1.75.0",
+    "@scalar/api-reference": "1.76.0",
     "@types/better-sqlite3": "^9.6.0",
     "better-sqlite3": "^13.0.3",
     "typescript": "^7.0.0",
     "vitest": "^5.0.5",
-    "@substrat-run/vertical-auth": "^0.28.3",
-    "@substrat-run/adapter-sqlite": "^0.163.0",
-    "@substrat-run/contract-tests": "^0.163.0"
+    "@substrat-run/adapter-sqlite": "^0.164.0",
+    "@substrat-run/contract-tests": "^0.164.0",
+    "@substrat-run/vertical-auth": "^0.28.4"
   },
   "publishConfig": {
     "access": "public"