@teleporthq/teleport-plugin-next-workflows 0.43.67 → 0.43.69

package/dist/cjs/cron-request-verification.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCronRequestVerificationCode = void 0;
+/**
+ * The gate a generated cron route runs before anything else. Without it the
+ * route runs its workflow — sends the emails, writes the rows — for whoever
+ * calls the URL.
+ *
+ * crons-worker signs every scheduled request: `x-teleport-cron-timestamp`
+ * (unix seconds) and `x-teleport-cron-signature: v1=<hex>`, an HMAC-SHA256
+ * keyed with the project's `TELEPORT_CRON_SECRET` (filled in by the deploy)
+ * over `v1:<timestamp>:<projectId>:<cronId>:<executionId>:<pathname>`, from
+ * the request's `x-teleport-project-id` / `x-teleport-cron-id` /
+ * `x-teleport-cron-execution-id` headers and its own URL path. The route
+ * accepts, in order:
+ *   (a) that signature under `TELEPORT_CRON_SECRET`, or under
+ *       `TELEPORT_CRON_SECRET_PREVIOUS` while a key is being rotated, with a
+ *       timestamp within 300 s of the route's clock;
+ *   (b) Vercel Cron's `Authorization: Bearer <CRON_SECRET>`, when `CRON_SECRET`
+ *       is set;
+ *   (c) any request, only when `TELEPORT_CRON_ALLOW_UNSIGNED` is `'true'` — a
+ *       local run with no crons-worker in front of it.
+ * An unset key never verifies: an HMAC keyed with an empty string is one
+ * anybody can compute.
+ */
+const generateCronRequestVerificationCode = () => `
+var __CRON_SIGNATURE_TOLERANCE_SECONDS = 300;
+
+function __cronHeader(req, name) {
+  var value = req.headers && req.headers[name];
+  return typeof value === 'string' ? value : '';
+}
+
+function __cronSecretsEqual(expected, received) {
+  var crypto = require('crypto');
+  var a = Buffer.from(expected);
+  var b = Buffer.from(received);
+  return a.length === b.length && crypto.timingSafeEqual(a, b);
+}
+
+function __cronSignatureMatches(secret, signed, signature) {
+  if (!secret) return false;
+  var crypto = require('crypto');
+  var expected = 'v1=' + crypto.createHmac('sha256', secret).update(signed).digest('hex');
+  return __cronSecretsEqual(expected, signature);
+}
+
+function __verifyCronSignature(req) {
+  var signature = __cronHeader(req, 'x-teleport-cron-signature');
+  var timestamp = __cronHeader(req, 'x-teleport-cron-timestamp');
+  var cronId = __cronHeader(req, 'x-teleport-cron-id');
+  var projectId = __cronHeader(req, 'x-teleport-project-id');
+  var executionId = __cronHeader(req, 'x-teleport-cron-execution-id');
+  if (!signature || !/^\\d+$/.test(timestamp) || !cronId || !projectId || !executionId) {
+    return false;
+  }
+  if (Math.abs(Math.floor(Date.now() / 1000) - Number(timestamp)) > __CRON_SIGNATURE_TOLERANCE_SECONDS) {
+    return false;
+  }
+  var path;
+  try {
+    path = new URL(req.url || '/', 'http://localhost').pathname;
+  } catch (_e) {
+    return false;
+  }
+  var signed = ['v1', timestamp, projectId, cronId, executionId, path].join(':');
+  return (
+    __cronSignatureMatches(process.env.TELEPORT_CRON_SECRET, signed, signature) ||
+    __cronSignatureMatches(process.env.TELEPORT_CRON_SECRET_PREVIOUS, signed, signature)
+  );
+}
+
+function verifyCronRequest(req) {
+  if (__verifyCronSignature(req)) {
+    return true;
+  }
+  var vercelCronSecret = process.env.CRON_SECRET;
+  if (vercelCronSecret && __cronSecretsEqual('Bearer ' + vercelCronSecret, __cronHeader(req, 'authorization'))) {
+    return true;
+  }
+  return process.env.TELEPORT_CRON_ALLOW_UNSIGNED === 'true';
+}`;
+exports.generateCronRequestVerificationCode = generateCronRequestVerificationCode;
+//# sourceMappingURL=cron-request-verification.js.map

package/dist/cjs/cron-request-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-request-verification.js","sourceRoot":"","sources":["../../src/cron-request-verification.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,MAAM,mCAAmC,GAAG,GAAW,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwD/D,CAAA;AAxDW,QAAA,mCAAmC,uCAwD9C"}

package/dist/cjs/custom-node-modules.d.ts

@@ -0,0 +1,30 @@
+import { UIDLCustomWorkflowNode, UIDLWorkflowNode } from '@teleporthq/teleport-types';
+/**
+ * Which client module a custom node is emitted into.
+ *
+ * Every custom node lands in `utils/workflows/custom-nodes.js`, and every page
+ * or component whose workflows call ANY custom node imports that whole module.
+ * A node only the admin pages call (marked `clientModule: 'admin'` by the
+ * GUI) would then ship to every storefront page with an add-to-cart button.
+ * Those nodes go to `utils/workflows/custom-nodes-admin.js` instead, which
+ * only the pages and components that call them import.
+ *
+ * A marked node that an unmarked node calls, directly or through other nodes,
+ * stays in the shared module: a shared node resolves its nested calls from the
+ * shared module's registry alone. A project without marked nodes gets exactly
+ * the one shared module it always had.
+ */
+export declare const ADMIN_CUSTOM_NODES_MODULE = "custom-nodes-admin";
+type CustomNodes = Record<string, UIDLCustomWorkflowNode> | undefined;
+/** The ids of the custom nodes emitted into `custom-nodes-admin.js` (empty: no such module). */
+export declare const collectAdminModuleCustomNodeIds: (customNodes: CustomNodes) => Set<string>;
+/** Whether `nodes` call one of `targetIds`, directly or through the custom nodes they call. */
+export declare const callsCustomNodeTransitively: (nodes: UIDLWorkflowNode[] | undefined, targetIds: Set<string>, customNodes: CustomNodes, visited?: Set<string>) => boolean;
+/**
+ * What a server route (cron, webhook) adds after requiring the shared module
+ * when its nodes call a node of the admin module: that module's registry,
+ * merged in. Empty for every other route. `rootPrefix` leads to the app root.
+ */
+export declare const adminCustomNodesRequireLine: (nodes: UIDLWorkflowNode[], customNodes: CustomNodes, rootPrefix: string) => string;
+export {};
+//# sourceMappingURL=custom-node-modules.d.ts.map

package/dist/cjs/custom-node-modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-node-modules.d.ts","sourceRoot":"","sources":["../../src/custom-node-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAErF;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,yBAAyB,uBAAuB,CAAA;AAE7D,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,GAAG,SAAS,CAAA;AAkBrE,gGAAgG;AAChG,eAAO,MAAM,+BAA+B,gBAAiB,WAAW,KAAG,IAAI,MAAM,CAmBpF,CAAA;AAED,+FAA+F;AAC/F,eAAO,MAAM,2BAA2B,UAC/B,gBAAgB,EAAE,GAAG,SAAS,aAC1B,IAAI,MAAM,CAAC,eACT,WAAW,YACf,IAAI,MAAM,CAAC,KACnB,OAkBF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,UAC/B,gBAAgB,EAAE,eACZ,WAAW,cACZ,MAAM,KACjB,MAMF,CAAA"}

package/dist/cjs/custom-node-modules.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminCustomNodesRequireLine = exports.callsCustomNodeTransitively = exports.collectAdminModuleCustomNodeIds = exports.ADMIN_CUSTOM_NODES_MODULE = void 0;
+/**
+ * Which client module a custom node is emitted into.
+ *
+ * Every custom node lands in `utils/workflows/custom-nodes.js`, and every page
+ * or component whose workflows call ANY custom node imports that whole module.
+ * A node only the admin pages call (marked `clientModule: 'admin'` by the
+ * GUI) would then ship to every storefront page with an add-to-cart button.
+ * Those nodes go to `utils/workflows/custom-nodes-admin.js` instead, which
+ * only the pages and components that call them import.
+ *
+ * A marked node that an unmarked node calls, directly or through other nodes,
+ * stays in the shared module: a shared node resolves its nested calls from the
+ * shared module's registry alone. A project without marked nodes gets exactly
+ * the one shared module it always had.
+ */
+exports.ADMIN_CUSTOM_NODES_MODULE = 'custom-nodes-admin';
+const calledCustomNodeIds = (nodes) => {
+    const ids = [];
+    for (const node of Array.isArray(nodes) ? nodes : []) {
+        if (node && node.type === 'general-custom-node') {
+            const customNodeId = (node.config || {}).customNodeId;
+            if (typeof customNodeId === 'string' && customNodeId) {
+                ids.push(customNodeId);
+            }
+        }
+    }
+    return ids;
+};
+const isMarkedAdmin = (customNode) => !!customNode && customNode.clientModule === 'admin';
+/** The ids of the custom nodes emitted into `custom-nodes-admin.js` (empty: no such module). */
+const collectAdminModuleCustomNodeIds = (customNodes) => {
+    var _a;
+    const all = customNodes || {};
+    const marked = Object.keys(all).filter((id) => isMarkedAdmin(all[id]));
+    if (marked.length === 0) {
+        return new Set();
+    }
+    // Everything an unmarked node reaches stays in the shared module.
+    const reachedFromShared = new Set();
+    const pending = Object.keys(all).filter((id) => !isMarkedAdmin(all[id]));
+    while (pending.length > 0) {
+        const id = pending.pop();
+        for (const calledId of calledCustomNodeIds((_a = all[id]) === null || _a === void 0 ? void 0 : _a.nodes)) {
+            if (all[calledId] && !reachedFromShared.has(calledId)) {
+                reachedFromShared.add(calledId);
+                pending.push(calledId);
+            }
+        }
+    }
+    return new Set(marked.filter((id) => !reachedFromShared.has(id)));
+};
+exports.collectAdminModuleCustomNodeIds = collectAdminModuleCustomNodeIds;
+/** Whether `nodes` call one of `targetIds`, directly or through the custom nodes they call. */
+const callsCustomNodeTransitively = (nodes, targetIds, customNodes, visited = new Set()) => {
+    if (targetIds.size === 0) {
+        return false;
+    }
+    for (const calledId of calledCustomNodeIds(nodes)) {
+        if (targetIds.has(calledId)) {
+            return true;
+        }
+        if (visited.has(calledId)) {
+            continue;
+        }
+        visited.add(calledId);
+        const called = customNodes ? customNodes[calledId] : undefined;
+        if (called && (0, exports.callsCustomNodeTransitively)(called.nodes, targetIds, customNodes, visited)) {
+            return true;
+        }
+    }
+    return false;
+};
+exports.callsCustomNodeTransitively = callsCustomNodeTransitively;
+/**
+ * What a server route (cron, webhook) adds after requiring the shared module
+ * when its nodes call a node of the admin module: that module's registry,
+ * merged in. Empty for every other route. `rootPrefix` leads to the app root.
+ */
+const adminCustomNodesRequireLine = (nodes, customNodes, rootPrefix) => {
+    const adminIds = (0, exports.collectAdminModuleCustomNodeIds)(customNodes);
+    if (!(0, exports.callsCustomNodeTransitively)(nodes, adminIds, customNodes)) {
+        return '';
+    }
+    return `try { __customNodes = Object.assign({}, __customNodes, require('${rootPrefix}/utils/workflows/${exports.ADMIN_CUSTOM_NODES_MODULE}')); } catch (_e) {}\n`;
+};
+exports.adminCustomNodesRequireLine = adminCustomNodesRequireLine;
+//# sourceMappingURL=custom-node-modules.js.map

package/dist/cjs/custom-node-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-node-modules.js","sourceRoot":"","sources":["../../src/custom-node-modules.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;GAcG;AAEU,QAAA,yBAAyB,GAAG,oBAAoB,CAAA;AAI7D,MAAM,mBAAmB,GAAG,CAAC,KAAqC,EAAY,EAAE;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE;YAC/C,MAAM,YAAY,GAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA6B,CAAC,YAAY,CAAA;YAClF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,EAAE;gBACpD,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;aACvB;SACF;KACF;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,UAA8C,EAAW,EAAE,CAChF,CAAC,CAAC,UAAU,IAAK,UAAyC,CAAC,YAAY,KAAK,OAAO,CAAA;AAErF,gGAAgG;AACzF,MAAM,+BAA+B,GAAG,CAAC,WAAwB,EAAe,EAAE;;IACvF,MAAM,GAAG,GAAG,WAAW,IAAI,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;QACvB,OAAO,IAAI,GAAG,EAAU,CAAA;KACzB;IACD,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACxE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACzB,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAY,CAAA;QAClC,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,MAAA,GAAG,CAAC,EAAE,CAAC,0CAAE,KAAK,CAAC,EAAE;YAC1D,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBACrD,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;aACvB;SACF;KACF;IACD,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACnE,CAAC,CAAA;AAnBY,QAAA,+BAA+B,mCAmB3C;AAED,+FAA+F;AACxF,MAAM,2BAA2B,GAAG,CACzC,KAAqC,EACrC,SAAsB,EACtB,WAAwB,EACxB,UAAuB,IAAI,GAAG,EAAU,EAC/B,EAAE;IACX,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE;QACxB,OAAO,KAAK,CAAA;KACb;IACD,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE;QACjD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YAC3B,OAAO,IAAI,CAAA;SACZ;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACzB,SAAQ;SACT;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9D,IAAI,MAAM,IAAI,IAAA,mCAA2B,EAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;YACxF,OAAO,IAAI,CAAA;SACZ;KACF;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAvBY,QAAA,2BAA2B,+BAuBvC;AAED;;;;GAIG;AACI,MAAM,2BAA2B,GAAG,CACzC,KAAyB,EACzB,WAAwB,EACxB,UAAkB,EACV,EAAE;IACV,MAAM,QAAQ,GAAG,IAAA,uCAA+B,EAAC,WAAW,CAAC,CAAA;IAC7D,IAAI,CAAC,IAAA,mCAA2B,EAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;QAC9D,OAAO,EAAE,CAAA;KACV;IACD,OAAO,mEAAmE,UAAU,oBAAoB,iCAAyB,wBAAwB,CAAA;AAC3J,CAAC,CAAA;AAVY,QAAA,2BAA2B,+BAUvC"}

package/dist/cjs/data-api-route-generator.d.ts

@@ -16,5 +16,32 @@ export interface DataAPIRouteOptions {
     lowStockAlertsEnabled?: boolean;
     lowStockThreshold?: number;
 }
+/**
+ * The only tables a BROWSER reads through this route, in an app whose server
+ * code identifies itself with the app secret (see `__taBrowserIsReadOnly`).
+ *
+ * Every workflow data node runs server-side and presents the secret, so the
+ * browser's reads here are the storefront's own: the cart re-reading its
+ * products, the discount feed, the regional-pricing tables. Anything else a
+ * browser names — a merchant's own table, the AI assistant's conversations and
+ * knowledge base, `information_schema`, a `pg_*` catalog or statistics view —
+ * is refused, rather than refused only when a list of dangerous names
+ * remembered it. (An app without a secret cannot tell its server calls from a
+ * browser's; there `assertNoSystemCatalogRead` still keeps the catalogs out, and
+ * the shared protected set — `TableAccess.PROTECTED_TABLES`, the AI assistant's
+ * tables among them — the store's private tables.)
+ */
+export declare const BROWSER_READABLE_TABLES: ReadonlyArray<string>;
+/**
+ * What a browser is served of the readable tables whose unpublished rows sit
+ * beside the public ones — the same policy the per-table read routes apply
+ * (teleport-plugin-next-data-source `browser-row-policy.ts`, which this mirrors;
+ * keep the two in step). A browser may not filter or sort by a hidden column:
+ * a filter is an oracle for a column it never returns.
+ */
+export declare const BROWSER_ROW_POLICIES: Readonly<Record<string, {
+    predicate: string;
+    hiddenColumns: ReadonlyArray<string>;
+}>>;
 export declare const generateDataAPIRoute: (options?: DataAPIRouteOptions) => string;
 //# sourceMappingURL=data-api-route-generator.d.ts.map

package/dist/cjs/data-api-route-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-api-route-generator.d.ts","sourceRoot":"","sources":["../../src/data-api-route-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkBH,eAAO,MAAM,iBAAiB,kBAAmB,IAAI,MAAM,CAAC,KAAG,OAO9D,CAAA;AAED,MAAM,WAAW,mBAAmB;IAIlC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAQ3B,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAI/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,eAAO,MAAM,oBAAoB,aAAa,mBAAmB,KAAQ,MA03BxE,CAAA"}
+{"version":3,"file":"data-api-route-generator.d.ts","sourceRoot":"","sources":["../../src/data-api-route-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmBH,eAAO,MAAM,iBAAiB,kBAAmB,IAAI,MAAM,CAAC,KAAG,OAO9D,CAAA;AAED,MAAM,WAAW,mBAAmB;IAIlC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAQ3B,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAI/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,EAAE,aAAa,CAAC,MAAM,CASzD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC,MAAM,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAU5E,CAAA;AAED,eAAO,MAAM,oBAAoB,aAAa,mBAAmB,KAAQ,MAiqCxE,CAAA"}