@ts-cloud/core 0.5.1 → 0.5.3

package/dist/runtime-assets/fastcgi-client.php

@@ -0,0 +1,118 @@
+<?php
+/**
+ * Minimal FastCGI client for the ts-cloud PHP Lambda runtime.
+ *
+ * Speaks just enough of the FastCGI protocol to send one request (params + stdin)
+ * to php-fpm over a unix socket and read the full stdout/stderr response. This is
+ * the bridge between the Lambda Runtime API loop and Laravel's public/index.php
+ * served by php-fpm.
+ */
+
+namespace TsCloud;
+
+final class FastCgiClient
+{
+    const FCGI_VERSION = 1;
+    const BEGIN_REQUEST = 1;
+    const END_REQUEST = 3;
+    const PARAMS = 4;
+    const STDIN = 5;
+    const STDOUT = 6;
+    const STDERR = 7;
+    const RESPONDER = 1;
+
+    private string $socketPath;
+
+    public function __construct(string $socketPath)
+    {
+        $this->socketPath = $socketPath;
+    }
+
+    /**
+     * @param array<string,string> $params FastCGI params (CGI environment)
+     * @return array{stdout:string,stderr:string}
+     */
+    public function request(array $params, string $stdin = ''): array
+    {
+        $conn = @stream_socket_client('unix://' . $this->socketPath, $errno, $errstr, 30);
+        if ($conn === false) {
+            throw new \RuntimeException("FastCGI connect failed: {$errstr} ({$errno})");
+        }
+
+        $requestId = 1;
+
+        // BEGIN_REQUEST (role=RESPONDER, flags=0 -> close connection when done).
+        $beginBody = pack('nCxxxxx', self::RESPONDER, 0);
+        fwrite($conn, $this->record(self::BEGIN_REQUEST, $requestId, $beginBody));
+
+        // PARAMS (name-value pairs), then an empty PARAMS record to terminate.
+        $paramsBody = '';
+        foreach ($params as $name => $value) {
+            $paramsBody .= $this->nameValuePair((string) $name, (string) $value);
+        }
+        if ($paramsBody !== '') {
+            fwrite($conn, $this->record(self::PARAMS, $requestId, $paramsBody));
+        }
+        fwrite($conn, $this->record(self::PARAMS, $requestId, ''));
+
+        // STDIN (body) then an empty STDIN record to terminate.
+        if ($stdin !== '') {
+            foreach (str_split($stdin, 65535) as $chunk) {
+                fwrite($conn, $this->record(self::STDIN, $requestId, $chunk));
+            }
+        }
+        fwrite($conn, $this->record(self::STDIN, $requestId, ''));
+
+        // Read the response records.
+        $stdout = '';
+        $stderr = '';
+        while (!feof($conn)) {
+            $header = fread($conn, 8);
+            if ($header === false || strlen($header) < 8) {
+                break;
+            }
+            $h = unpack('Cversion/Ctype/nrequestId/ncontentLength/CpaddingLength/Creserved', $header);
+            $content = '';
+            $remaining = $h['contentLength'];
+            while ($remaining > 0) {
+                $buf = fread($conn, $remaining);
+                if ($buf === false || $buf === '') {
+                    break;
+                }
+                $content .= $buf;
+                $remaining -= strlen($buf);
+            }
+            if ($h['paddingLength'] > 0) {
+                fread($conn, $h['paddingLength']);
+            }
+
+            if ($h['type'] === self::STDOUT) {
+                $stdout .= $content;
+            } elseif ($h['type'] === self::STDERR) {
+                $stderr .= $content;
+            } elseif ($h['type'] === self::END_REQUEST) {
+                break;
+            }
+        }
+
+        fclose($conn);
+
+        return ['stdout' => $stdout, 'stderr' => $stderr];
+    }
+
+    private function record(int $type, int $requestId, string $content): string
+    {
+        $length = strlen($content);
+        $header = pack('CCnnCx', self::FCGI_VERSION, $type, $requestId, $length, 0);
+        return $header . $content;
+    }
+
+    private function nameValuePair(string $name, string $value): string
+    {
+        $nlen = strlen($name);
+        $vlen = strlen($value);
+        $out = $nlen < 128 ? chr($nlen) : pack('N', $nlen | 0x80000000);
+        $out .= $vlen < 128 ? chr($vlen) : pack('N', $vlen | 0x80000000);
+        return $out . $name . $value;
+    }
+}

package/dist/runtime-assets/octane-runtime.php

@@ -0,0 +1,184 @@
+<?php
+/**
+ * ts-cloud PHP Lambda HTTP runtime — Octane / persistent mode.
+ *
+ * Boots the Laravel application ONCE per cold start and serves each invocation
+ * in-process through the HTTP kernel (no php-fpm, no FastCGI hop), then resets
+ * request-scoped state between invocations. Lower latency than the FPM bridge at
+ * the cost of requiring an Octane-safe app. Selected when TSCLOUD_OCTANE=1.
+ */
+
+$runtimeApi = getenv('AWS_LAMBDA_RUNTIME_API');
+$taskRoot = getenv('LAMBDA_TASK_ROOT') ?: '/var/task';
+
+require $taskRoot . '/vendor/autoload.php';
+
+// Boot the application + HTTP kernel once.
+$app = require $taskRoot . '/bootstrap/app.php';
+$kernel = $app->make(\Illuminate\Contracts\Http\Kernel::class);
+
+$maintenance = getenv('MAINTENANCE_MODE') === '1';
+$bypassSecret = getenv('MAINTENANCE_BYPASS_SECRET') ?: '';
+
+while (true) {
+    $ctx = nextInvocation($runtimeApi);
+    if ($ctx === null) {
+        continue;
+    }
+    [$requestId, $event] = $ctx;
+
+    try {
+        $response = handle($event, $kernel, $maintenance, $bypassSecret);
+        postResponse($runtimeApi, $requestId, $response);
+    } catch (\Throwable $e) {
+        postError($runtimeApi, $requestId, $e);
+    }
+}
+
+function handle(array $event, $kernel, bool $maintenance, string $bypassSecret): array
+{
+    if (($event['warmer'] ?? false) === true) {
+        return ['statusCode' => 200, 'headers' => ['content-type' => 'text/plain'], 'body' => 'warm', 'isBase64Encoded' => false];
+    }
+
+    $http = $event['requestContext']['http'] ?? [];
+    $headers = $event['headers'] ?? [];
+
+    if ($maintenance) {
+        $bypass = $headers['x-maintenance-bypass'] ?? '';
+        if ($bypassSecret === '' || $bypass !== $bypassSecret) {
+            return ['statusCode' => 503, 'headers' => ['content-type' => 'text/plain', 'retry-after' => '120'], 'body' => 'Service temporarily unavailable (maintenance mode)', 'isBase64Encoded' => false];
+        }
+    }
+
+    $body = $event['body'] ?? '';
+    if (($event['isBase64Encoded'] ?? false) === true) {
+        $body = base64_decode($body);
+    }
+
+    $method = $http['method'] ?? 'GET';
+    $rawPath = $event['rawPath'] ?? '/';
+    $rawQuery = $event['rawQueryString'] ?? '';
+
+    // Build server vars + an Illuminate request.
+    $server = [
+        'REQUEST_METHOD' => $method,
+        'REQUEST_URI' => $rawQuery !== '' ? $rawPath . '?' . $rawQuery : $rawPath,
+        'QUERY_STRING' => $rawQuery,
+        'SERVER_NAME' => $event['requestContext']['domainName'] ?? 'localhost',
+        'SERVER_PORT' => '443',
+        'HTTPS' => 'on',
+        'REMOTE_ADDR' => $http['sourceIp'] ?? '127.0.0.1',
+    ];
+    foreach ($headers as $name => $value) {
+        $server['HTTP_' . strtoupper(str_replace('-', '_', $name))] = $value;
+        if (strtolower($name) === 'content-type') {
+            $server['CONTENT_TYPE'] = $value;
+        }
+    }
+
+    parse_str($rawQuery, $query);
+    $cookies = [];
+    foreach ($event['cookies'] ?? [] as $cookie) {
+        $parts = explode('=', $cookie, 2);
+        if (count($parts) === 2) {
+            $cookies[$parts[0]] = urldecode($parts[1]);
+        }
+    }
+
+    $request = new \Illuminate\Http\Request(
+        $query,
+        [],
+        [],
+        $cookies,
+        [],
+        $server,
+        $body
+    );
+    $request->setMethod($method);
+
+    $response = $kernel->handle($request);
+    $result = marshalResponse($response);
+    $kernel->terminate($request, $response);
+
+    return $result;
+}
+
+function marshalResponse($response): array
+{
+    $content = $response->getContent();
+    $headers = [];
+    $cookies = [];
+    foreach ($response->headers->allPreserveCase() as $name => $values) {
+        if (strtolower($name) === 'set-cookie') {
+            foreach ($values as $v) {
+                $cookies[] = $v;
+            }
+        } else {
+            $headers[$name] = implode(', ', $values);
+        }
+    }
+
+    $contentType = $headers['Content-Type'] ?? ($headers['content-type'] ?? 'text/html');
+    $isText = (bool) preg_match('#^(text/|application/(json|xml|javascript|x-www-form-urlencoded)|image/svg)#i', $contentType);
+
+    $out = [
+        'statusCode' => $response->getStatusCode(),
+        'headers' => $headers,
+        'isBase64Encoded' => !$isText,
+        'body' => $isText ? $content : base64_encode($content),
+    ];
+    if (!empty($cookies)) {
+        $out['cookies'] = $cookies;
+    }
+    return $out;
+}
+
+/**
+ * @return array{0:string,1:array}|null
+ */
+function nextInvocation(string $api): ?array
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/next");
+    $headers = [];
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_HEADERFUNCTION, function ($c, $h) use (&$headers) {
+        $parts = explode(':', $h, 2);
+        if (count($parts) === 2) {
+            $headers[strtolower(trim($parts[0]))] = trim($parts[1]);
+        }
+        return strlen($h);
+    });
+    $body = curl_exec($ch);
+    curl_close($ch);
+    if ($body === false) {
+        return null;
+    }
+    $requestId = $headers['lambda-runtime-aws-request-id'] ?? '';
+    $event = json_decode($body, true) ?: [];
+    return [$requestId, $event];
+}
+
+function postResponse(string $api, string $requestId, array $response): void
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/{$requestId}/response");
+    curl_setopt($ch, CURLOPT_POST, true);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($response));
+    curl_exec($ch);
+    curl_close($ch);
+}
+
+function postError(string $api, string $requestId, \Throwable $e): void
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/{$requestId}/error");
+    curl_setopt($ch, CURLOPT_POST, true);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
+    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+        'errorType' => get_class($e),
+        'errorMessage' => $e->getMessage(),
+    ]));
+    curl_exec($ch);
+    curl_close($ch);
+}

package/dist/runtime-assets/runtime.php

@@ -0,0 +1,207 @@
+<?php
+/**
+ * ts-cloud PHP Lambda HTTP runtime (FPM mode).
+ *
+ * Implements the AWS Lambda Runtime API loop for the HTTP function: long-poll for
+ * the next invocation (an API Gateway v2 payload-format-2.0 event), bridge it to
+ * php-fpm over FastCGI (running Laravel's public/index.php), and post the response
+ * back in API Gateway v2 response shape.
+ */
+
+require __DIR__ . '/fastcgi-client.php';
+
+use TsCloud\FastCgiClient;
+
+$runtimeApi = getenv('AWS_LAMBDA_RUNTIME_API');
+$taskRoot = getenv('LAMBDA_TASK_ROOT') ?: '/var/task';
+$docRoot = $taskRoot . '/public';
+$socketPath = '/tmp/.tscloud-fpm.sock';
+
+$fpm = new FastCgiClient($socketPath);
+
+// Wait for php-fpm to create its socket (bounded).
+for ($i = 0; $i < 50 && !file_exists($socketPath); $i++) {
+    usleep(100000); // 100ms
+}
+
+$maintenance = getenv('MAINTENANCE_MODE') === '1';
+$bypassSecret = getenv('MAINTENANCE_BYPASS_SECRET') ?: '';
+
+while (true) {
+    // 1. Get the next invocation.
+    $ctx = nextInvocation($runtimeApi);
+    if ($ctx === null) {
+        continue;
+    }
+    [$requestId, $event] = $ctx;
+
+    try {
+        $response = handle($event, $fpm, $docRoot, $maintenance, $bypassSecret);
+        postResponse($runtimeApi, $requestId, $response);
+    } catch (\Throwable $e) {
+        postError($runtimeApi, $requestId, $e);
+    }
+}
+
+/**
+ * @return array{0:string,1:array}|null
+ */
+function nextInvocation(string $api): ?array
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/next");
+    $headers = [];
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_HEADERFUNCTION, function ($c, $h) use (&$headers) {
+        $parts = explode(':', $h, 2);
+        if (count($parts) === 2) {
+            $headers[strtolower(trim($parts[0]))] = trim($parts[1]);
+        }
+        return strlen($h);
+    });
+    $body = curl_exec($ch);
+    curl_close($ch);
+    if ($body === false) {
+        return null;
+    }
+    $requestId = $headers['lambda-runtime-aws-request-id'] ?? '';
+    $event = json_decode($body, true) ?: [];
+    return [$requestId, $event];
+}
+
+function handle(array $event, FastCgiClient $fpm, string $docRoot, bool $maintenance, string $bypassSecret): array
+{
+    // Warmer ping (scheduled keep-warm rule): keep the container alive, return fast.
+    if (($event['warmer'] ?? false) === true) {
+        return ['statusCode' => 200, 'headers' => ['content-type' => 'text/plain'], 'body' => 'warm', 'isBase64Encoded' => false];
+    }
+
+    $http = $event['requestContext']['http'] ?? [];
+    $method = $http['method'] ?? 'GET';
+    $rawPath = $event['rawPath'] ?? '/';
+    $rawQuery = $event['rawQueryString'] ?? '';
+    $headers = $event['headers'] ?? [];
+    $cookies = $event['cookies'] ?? [];
+
+    // Maintenance mode: 503 unless the bypass secret is presented.
+    if ($maintenance) {
+        $bypass = $headers['x-maintenance-bypass'] ?? '';
+        if ($bypassSecret === '' || $bypass !== $bypassSecret) {
+            return [
+                'statusCode' => 503,
+                'headers' => ['content-type' => 'text/plain', 'retry-after' => '120'],
+                'body' => 'Service temporarily unavailable (maintenance mode)',
+                'isBase64Encoded' => false,
+            ];
+        }
+    }
+
+    $body = $event['body'] ?? '';
+    if (($event['isBase64Encoded'] ?? false) === true) {
+        $body = base64_decode($body);
+    }
+
+    $params = [
+        'GATEWAY_INTERFACE' => 'CGI/1.1',
+        'REQUEST_METHOD' => $method,
+        'SCRIPT_FILENAME' => $docRoot . '/index.php',
+        'SCRIPT_NAME' => '/index.php',
+        'PATH_INFO' => $rawPath,
+        'REQUEST_URI' => $rawQuery !== '' ? $rawPath . '?' . $rawQuery : $rawPath,
+        'QUERY_STRING' => $rawQuery,
+        'DOCUMENT_ROOT' => $docRoot,
+        'SERVER_PROTOCOL' => $http['protocol'] ?? 'HTTP/1.1',
+        'SERVER_SOFTWARE' => 'ts-cloud-lambda',
+        'REMOTE_ADDR' => $http['sourceIp'] ?? '127.0.0.1',
+        'SERVER_NAME' => $event['requestContext']['domainName'] ?? 'localhost',
+        'SERVER_PORT' => '443',
+        'HTTPS' => 'on',
+        'CONTENT_LENGTH' => (string) strlen($body),
+    ];
+    if (isset($headers['content-type'])) {
+        $params['CONTENT_TYPE'] = $headers['content-type'];
+    }
+    if (!empty($cookies)) {
+        $headers['cookie'] = implode('; ', $cookies);
+    }
+    foreach ($headers as $name => $value) {
+        $key = 'HTTP_' . strtoupper(str_replace('-', '_', $name));
+        $params[$key] = $value;
+    }
+
+    $result = $fpm->request($params, $body);
+    return parseFpmResponse($result['stdout']);
+}
+
+function parseFpmResponse(string $raw): array
+{
+    // Split headers from body.
+    $pos = strpos($raw, "\r\n\r\n");
+    if ($pos === false) {
+        $pos = strpos($raw, "\n\n");
+        $headerBlock = $pos === false ? '' : substr($raw, 0, $pos);
+        $body = $pos === false ? $raw : substr($raw, $pos + 2);
+    } else {
+        $headerBlock = substr($raw, 0, $pos);
+        $body = substr($raw, $pos + 4);
+    }
+
+    $statusCode = 200;
+    $headers = [];
+    $cookies = [];
+    foreach (preg_split('/\r\n|\n/', $headerBlock) as $line) {
+        if (trim($line) === '') {
+            continue;
+        }
+        $parts = explode(':', $line, 2);
+        if (count($parts) !== 2) {
+            continue;
+        }
+        $name = strtolower(trim($parts[0]));
+        $value = trim($parts[1]);
+        if ($name === 'status') {
+            $statusCode = (int) substr($value, 0, 3);
+        } elseif ($name === 'set-cookie') {
+            $cookies[] = $value;
+        } else {
+            $headers[$name] = $value;
+        }
+    }
+
+    $contentType = $headers['content-type'] ?? 'text/html';
+    $isText = (bool) preg_match('#^(text/|application/(json|xml|javascript|x-www-form-urlencoded)|image/svg)#i', $contentType);
+
+    $response = [
+        'statusCode' => $statusCode,
+        'headers' => $headers,
+        'isBase64Encoded' => !$isText,
+        'body' => $isText ? $body : base64_encode($body),
+    ];
+    if (!empty($cookies)) {
+        $response['cookies'] = $cookies;
+    }
+    return $response;
+}
+
+function postResponse(string $api, string $requestId, array $response): void
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/{$requestId}/response");
+    curl_setopt($ch, CURLOPT_POST, true);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($response));
+    curl_exec($ch);
+    curl_close($ch);
+}
+
+function postError(string $api, string $requestId, \Throwable $e): void
+{
+    $ch = curl_init("http://{$api}/2018-06-01/runtime/invocation/{$requestId}/error");
+    curl_setopt($ch, CURLOPT_POST, true);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
+    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+        'errorType' => get_class($e),
+        'errorMessage' => $e->getMessage(),
+    ]));
+    curl_exec($ch);
+    curl_close($ch);
+}

package/dist/runtime.mjs

@@ -0,0 +1,95 @@
+/**
+ * ts-cloud JS Lambda custom-runtime loop (provided.al2023).
+ *
+ * Shared by both the Node and Bun custom runtimes — it is plain ESM that runs
+ * under either `node /opt/runtime.mjs` or `bun /opt/runtime.mjs`. It implements
+ * the AWS Lambda Runtime API event loop and delegates each invocation to the
+ * handler exported by the deployment artifact (the ts-cloud serverless adapter
+ * already bundled `http`/`queue`/`cli` into `index.mjs`).
+ *
+ * The function's configured Handler (e.g. `index.http`) arrives as `_HANDLER`,
+ * so the same artifact + layer serve all three functions; only `_HANDLER`
+ * differs per function.
+ */
+
+const RUNTIME_API = process.env.AWS_LAMBDA_RUNTIME_API
+const BASE = `http://${RUNTIME_API}/2018-06-01/runtime`
+const TASK_ROOT = process.env.LAMBDA_TASK_ROOT ?? '/var/task'
+const HANDLER = process.env._HANDLER ?? 'index.http'
+
+async function resolveHandler() {
+  const lastDot = HANDLER.lastIndexOf('.')
+  const file = lastDot === -1 ? HANDLER : HANDLER.slice(0, lastDot)
+  const exportName = lastDot === -1 ? 'http' : HANDLER.slice(lastDot + 1)
+
+  let mod
+  for (const ext of ['.mjs', '.js', '.cjs', '']) {
+    try {
+      mod = await import(`${TASK_ROOT}/${file}${ext}`)
+      break
+    }
+    catch {
+      // try the next extension
+    }
+  }
+  if (!mod)
+    throw new Error(`Cannot load handler module "${file}" from ${TASK_ROOT}`)
+
+  const fn = mod[exportName] ?? mod.default?.[exportName] ?? mod.default
+  if (typeof fn !== 'function')
+    throw new TypeError(`Handler "${HANDLER}" did not resolve to a function`)
+  return fn
+}
+
+async function postInitError(err) {
+  await fetch(`${BASE}/init/error`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ errorType: err?.name ?? 'InitError', errorMessage: String(err?.message ?? err) }),
+  }).catch(() => {})
+}
+
+async function main() {
+  let handler
+  try {
+    handler = await resolveHandler()
+  }
+  catch (err) {
+    await postInitError(err)
+    process.exit(1)
+    return
+  }
+
+  // The Runtime API event loop: long-poll for the next invocation, run the
+  // handler, post the response (or error), repeat.
+  for (;;) {
+    const next = await fetch(`${BASE}/invocation/next`)
+    const requestId = next.headers.get('lambda-runtime-aws-request-id')
+    if (!requestId) continue
+
+    let event
+    try {
+      event = await next.json()
+    }
+    catch {
+      event = {}
+    }
+
+    try {
+      const result = await handler(event)
+      await fetch(`${BASE}/invocation/${requestId}/response`, {
+        method: 'POST',
+        body: result === undefined ? '' : JSON.stringify(result),
+      })
+    }
+    catch (err) {
+      await fetch(`${BASE}/invocation/${requestId}/error`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ errorType: err?.name ?? 'Error', errorMessage: String(err?.message ?? err) }),
+      }).catch(() => {})
+    }
+  }
+}
+
+main()