@venturekit/runtime 0.0.0-dev.20260312012510 → 0.0.0-dev.20260329102450

package/dist/rate-limit.js

@@ -0,0 +1,15 @@
+/**
+ * @venturekit/runtime/rate-limit
+ *
+ * DynamoDB-backed rate limit stores for production use.
+ * Requires @aws-sdk/client-dynamodb.
+ *
+ * For in-memory stores (local dev), use the core import:
+ *   `import { createMemoryRateLimitStore } from '@venturekit/runtime'`
+ *
+ * Import via: `import { createDynamoDBRateLimitStore } from '@venturekit/runtime/rate-limit'`
+ */
+export { createDynamoDBRateLimitStore, createDefaultRateLimiter, } from './middleware/rate-limit-store.js';
+// Re-export memory store and presets for convenience
+export { createMemoryRateLimitStore, RATE_LIMIT_PRESETS, } from './middleware/rate-limit-store.js';
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,kCAAkC,CAAC;AAM1C,qDAAqD;AACrD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kCAAkC,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @venturekit/runtime/secrets
+ *
+ * SSM Parameter Store and Secrets Manager clients.
+ * Requires @aws-sdk/client-ssm or @aws-sdk/client-secrets-manager.
+ *
+ * Import via: `import { createSecretsClient } from '@venturekit/runtime/secrets'`
+ */
+export { createSecretsClient, createMemorySecretProvider, } from './config/secrets.js';
+export type { SecretStore, SecretProvider, SecretsClientOptions, SecretsClient, } from './config/secrets.js';
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,aAAa,GACd,MAAM,qBAAqB,CAAC"}

package/dist/secrets.js

@@ -0,0 +1,10 @@
+/**
+ * @venturekit/runtime/secrets
+ *
+ * SSM Parameter Store and Secrets Manager clients.
+ * Requires @aws-sdk/client-ssm or @aws-sdk/client-secrets-manager.
+ *
+ * Import via: `import { createSecretsClient } from '@venturekit/runtime/secrets'`
+ */
+export { createSecretsClient, createMemorySecretProvider, } from './config/secrets.js';
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC"}

package/dist/testing/test-utils.d.ts

@@ -0,0 +1,99 @@
+/**
+ * VentureKit Test Utilities
+ *
+ * Helpers for testing VentureKit handlers without Lambda/API Gateway.
+ */
+import type { APIGatewayProxyEventV2, APIGatewayProxyResultV2, Context } from 'aws-lambda';
+import type { RequestContext, UserContext, TenantContext } from '../handler/context.js';
+import { Logger } from '../logging/logger.js';
+/**
+ * Options for creating a test event
+ */
+export interface MockEventOptions {
+    method?: string;
+    path?: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+    queryStringParameters?: Record<string, string>;
+    pathParameters?: Record<string, string>;
+    sourceIp?: string;
+    userAgent?: string;
+    /** JWT claims for authenticated requests */
+    claims?: Record<string, unknown>;
+}
+/**
+ * Create a mock API Gateway V2 event for testing
+ */
+export declare function mockEvent(options?: MockEventOptions): APIGatewayProxyEventV2;
+/**
+ * Create a mock Lambda context
+ */
+export declare function mockLambdaContext(): Context;
+/**
+ * Options for creating a test RequestContext
+ */
+export interface MockContextOptions {
+    requestId?: string;
+    method?: string;
+    path?: string;
+    sourceIp?: string;
+    userAgent?: string;
+    locale?: string;
+    user?: Partial<UserContext> | null;
+    tenant?: Partial<TenantContext> | null;
+    queryParams?: Record<string, string | undefined>;
+    isInternal?: boolean;
+    invokeId?: string;
+}
+/**
+ * Create a mock RequestContext for testing
+ */
+export declare function mockContext(options?: MockContextOptions): RequestContext;
+/**
+ * Log entry captured by mockLogger
+ */
+export interface CapturedLog {
+    level: 'debug' | 'info' | 'warn' | 'error';
+    message: string;
+    data?: Record<string, unknown>;
+}
+/**
+ * Create a mock Logger that captures log entries for assertions.
+ * Extends Logger to be type-compatible but silently captures logs.
+ */
+export declare function mockLogger(): Logger & {
+    logs: CapturedLog[];
+    clear: () => void;
+};
+/**
+ * Options for createTestHandler
+ */
+export interface TestInvokeOptions {
+    method?: string;
+    path?: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+    queryStringParameters?: Record<string, string>;
+    pathParameters?: Record<string, string>;
+    claims?: Record<string, unknown>;
+}
+/**
+ * Create a test wrapper for a VentureKit handler.
+ * Allows invoking the handler without a real Lambda environment.
+ *
+ * @example
+ * ```typescript
+ * import { handler } from '@venturekit/runtime';
+ * import { createTestHandler } from '@venturekit/runtime/test-utils';
+ *
+ * const myHandler = handler(async (body, ctx, log) => {
+ *   return { hello: 'world' };
+ * });
+ *
+ * const invoke = createTestHandler(myHandler);
+ * const res = await invoke({ method: 'GET', path: '/hello' });
+ * expect(res.statusCode).toBe(200);
+ * ```
+ */
+export declare function createTestHandler(lambdaHandler: (event: APIGatewayProxyEventV2, context: Context) => Promise<APIGatewayProxyResultV2>): (options?: TestInvokeOptions) => Promise<APIGatewayProxyResultV2>;
+//# sourceMappingURL=test-utils.d.ts.map

package/dist/testing/test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.d.ts","sourceRoot":"","sources":["../../src/testing/test-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,sBAAsB,CA6DhF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAe3C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,cAAc,CA6B5E;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,GAAG;IAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CAkBhF;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,CAAC,GACnG,CAAC,OAAO,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAMnE"}

package/dist/testing/test-utils.js

@@ -0,0 +1,153 @@
+/**
+ * VentureKit Test Utilities
+ *
+ * Helpers for testing VentureKit handlers without Lambda/API Gateway.
+ */
+import { Logger } from '../logging/logger.js';
+/**
+ * Create a mock API Gateway V2 event for testing
+ */
+export function mockEvent(options = {}) {
+    const { method = 'GET', path = '/test', body, headers = {}, queryStringParameters, pathParameters, sourceIp = '127.0.0.1', userAgent = 'vitest', claims, } = options;
+    const event = {
+        version: '2.0',
+        routeKey: `${method} ${path}`,
+        rawPath: path,
+        rawQueryString: queryStringParameters
+            ? Object.entries(queryStringParameters).map(([k, v]) => `${k}=${v}`).join('&')
+            : '',
+        headers: {
+            'content-type': 'application/json',
+            'user-agent': userAgent,
+            ...headers,
+        },
+        requestContext: {
+            accountId: '123456789012',
+            apiId: 'testapi',
+            domainName: 'localhost',
+            domainPrefix: 'localhost',
+            http: {
+                method,
+                path,
+                protocol: 'HTTP/1.1',
+                sourceIp,
+                userAgent,
+            },
+            requestId: `test-${Date.now()}`,
+            routeKey: `${method} ${path}`,
+            stage: '$default',
+            time: new Date().toISOString(),
+            timeEpoch: Date.now(),
+            ...(claims ? {
+                authorizer: {
+                    jwt: { claims, scopes: [] },
+                },
+            } : {}),
+        },
+        body: body !== undefined ? JSON.stringify(body) : undefined,
+        isBase64Encoded: false,
+    };
+    if (queryStringParameters) {
+        event.queryStringParameters = queryStringParameters;
+    }
+    if (pathParameters) {
+        event.pathParameters = pathParameters;
+    }
+    return event;
+}
+/**
+ * Create a mock Lambda context
+ */
+export function mockLambdaContext() {
+    return {
+        callbackWaitsForEmptyEventLoop: true,
+        functionName: 'test-function',
+        functionVersion: '$LATEST',
+        invokedFunctionArn: 'arn:aws:lambda:us-east-1:123456789012:function:test-function',
+        memoryLimitInMB: '128',
+        awsRequestId: `test-${Date.now()}`,
+        logGroupName: '/aws/lambda/test-function',
+        logStreamName: '2026/01/01/[$LATEST]test',
+        getRemainingTimeInMillis: () => 30000,
+        done: () => { },
+        fail: () => { },
+        succeed: () => { },
+    };
+}
+/**
+ * Create a mock RequestContext for testing
+ */
+export function mockContext(options = {}) {
+    const user = options.user === null ? null : options.user ? {
+        id: options.user.id ?? 'test-user',
+        email: options.user.email,
+        scopes: options.user.scopes ?? [],
+        claims: options.user.claims ?? {},
+    } : null;
+    const tenant = options.tenant === null ? null : options.tenant ? {
+        id: options.tenant.id ?? 'test-tenant',
+        slug: options.tenant.slug,
+        metadata: options.tenant.metadata ?? {},
+    } : null;
+    return {
+        requestId: options.requestId ?? `test-${Date.now()}`,
+        timestamp: new Date(),
+        method: options.method ?? 'GET',
+        path: options.path ?? '/test',
+        sourceIp: options.sourceIp ?? '127.0.0.1',
+        userAgent: options.userAgent ?? 'vitest',
+        user,
+        tenant,
+        locale: options.locale ?? 'en',
+        rawEvent: mockEvent({ method: options.method, path: options.path }),
+        queryParams: options.queryParams,
+        isInternal: options.isInternal ?? false,
+        invokeId: options.invokeId,
+    };
+}
+/**
+ * Create a mock Logger that captures log entries for assertions.
+ * Extends Logger to be type-compatible but silently captures logs.
+ */
+export function mockLogger() {
+    const logs = [];
+    const loggerInstance = new Logger({ minLevel: 'debug' });
+    // Override methods to capture logs silently
+    const capture = (level) => (message, data) => {
+        logs.push({ level, message, data });
+    };
+    loggerInstance.debug = capture('debug');
+    loggerInstance.info = capture('info');
+    loggerInstance.warn = capture('warn');
+    loggerInstance.error = capture('error');
+    return Object.assign(loggerInstance, {
+        logs,
+        clear: () => { logs.length = 0; },
+    });
+}
+/**
+ * Create a test wrapper for a VentureKit handler.
+ * Allows invoking the handler without a real Lambda environment.
+ *
+ * @example
+ * ```typescript
+ * import { handler } from '@venturekit/runtime';
+ * import { createTestHandler } from '@venturekit/runtime/test-utils';
+ *
+ * const myHandler = handler(async (body, ctx, log) => {
+ *   return { hello: 'world' };
+ * });
+ *
+ * const invoke = createTestHandler(myHandler);
+ * const res = await invoke({ method: 'GET', path: '/hello' });
+ * expect(res.statusCode).toBe(200);
+ * ```
+ */
+export function createTestHandler(lambdaHandler) {
+    return async (options = {}) => {
+        const event = mockEvent(options);
+        const context = mockLambdaContext();
+        return lambdaHandler(event, context);
+    };
+}
+//# sourceMappingURL=test-utils.js.map

package/dist/testing/test-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-utils.js","sourceRoot":"","sources":["../../src/testing/test-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAkB9C;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACtD,MAAM,EACJ,MAAM,GAAG,KAAK,EACd,IAAI,GAAG,OAAO,EACd,IAAI,EACJ,OAAO,GAAG,EAAE,EACZ,qBAAqB,EACrB,cAAc,EACd,QAAQ,GAAG,WAAW,EACtB,SAAS,GAAG,QAAQ,EACpB,MAAM,GACP,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAA2B;QACpC,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;QAC7B,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,qBAAqB;YACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9E,CAAC,CAAC,EAAE;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,SAAS;YACvB,GAAG,OAAO;SACX;QACD,cAAc,EAAE;YACd,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,WAAW;YACvB,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE;gBACJ,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,UAAU;gBACpB,QAAQ;gBACR,SAAS;aACV;YACD,SAAS,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;YAC/B,QAAQ,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;YAC7B,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBACX,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;iBAC5B;aACF,CAAC,CAAC,CAAC,EAAE,CAAC;SACD;QACR,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3D,eAAe,EAAE,KAAK;KACvB,CAAC;IAEF,IAAI,qBAAqB,EAAE,CAAC;QAC1B,KAAK,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACtD,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,8BAA8B,EAAE,IAAI;QACpC,YAAY,EAAE,eAAe;QAC7B,eAAe,EAAE,SAAS;QAC1B,kBAAkB,EAAE,8DAA8D;QAClF,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;QAClC,YAAY,EAAE,2BAA2B;QACzC,aAAa,EAAE,0BAA0B;QACzC,wBAAwB,EAAE,GAAG,EAAE,CAAC,KAAK;QACrC,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;KAClB,CAAC;AACJ,CAAC;AAmBD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW;QAClC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;QACjC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;KAClC,CAAC,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,aAAa;QACtC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QACzB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;KACxC,CAAC,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;QACpD,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,WAAW;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ;QACxC,IAAI;QACJ,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACnE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAEzD,4CAA4C;IAC5C,MAAM,OAAO,GAAG,CAAC,KAA2B,EAAE,EAAE,CAAC,CAAC,OAAe,EAAE,IAA8B,EAAE,EAAE;QACnG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,cAAc,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,cAAc,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,cAAc,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExC,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;QACnC,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAoG;IAEpG,OAAO,KAAK,EAAE,UAA6B,EAAE,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC"}

package/dist/testing.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @venturekit/runtime/testing
+ *
+ * Test utilities for VentureKit handlers.
+ *
+ * Import via: `import { mockEvent, mockContext } from '@venturekit/runtime/testing'`
+ */
+export { mockEvent, mockLambdaContext, mockContext, mockLogger, createTestHandler, } from './testing/test-utils.js';
+export type { MockEventOptions, MockContextOptions, TestInvokeOptions, CapturedLog, } from './testing/test-utils.js';
+//# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,GACZ,MAAM,yBAAyB,CAAC"}

package/dist/testing.js

@@ -0,0 +1,9 @@
+/**
+ * @venturekit/runtime/testing
+ *
+ * Test utilities for VentureKit handlers.
+ *
+ * Import via: `import { mockEvent, mockContext } from '@venturekit/runtime/testing'`
+ */
+export { mockEvent, mockLambdaContext, mockContext, mockLogger, createTestHandler, } from './testing/test-utils.js';
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,iBAAiB,GAClB,MAAM,yBAAyB,CAAC"}

package/dist/ws/ws.d.ts

@@ -0,0 +1,139 @@
+/**
+ * WebSocket Connection Store
+ *
+ * DynamoDB-backed connection management for API Gateway WebSocket APIs.
+ *
+ * Authentication:
+ *   Two-phase auth — the client connects without credentials, then sends
+ *   an { action: "auth", token: "<jwt>" } message over the encrypted channel.
+ *   The connection is stored as unauthenticated on $connect and upgraded
+ *   to authenticated via connectionStore.authenticate().
+ *   This avoids leaking JWTs in query strings, server logs, and access logs.
+ *
+ * Multi-tenancy:
+ *   If enabled, each connection stores a tenantId alongside userId.
+ *   Use sendToTenant() to broadcast within a tenant boundary.
+ *
+ * API:
+ *   connectionStore.save(connectionId)                        — $connect (unauthenticated)
+ *   connectionStore.authenticate(connectionId, metadata)      — after JWT verification
+ *   connectionStore.remove(connectionId)                      — $disconnect
+ *   connectionStore.get(connectionId)                         — single connection
+ *   connectionStore.getAll()                                  — all connections
+ *   connectionStore.getByUser(userId)                         — by user (GSI)
+ *   connectionStore.getByTenant(tenantId)                     — by tenant (GSI)
+ *   connectionStore.postToConnection(domain, stage, id, data) — send to one
+ *   connectionStore.sendToUser(domain, stage, userId, data)   — send to all user sessions
+ *   connectionStore.sendToTenant(domain, stage, tenantId, data) — broadcast within tenant
+ *   connectionStore.broadcast(domain, stage, data)            — broadcast to all
+ *
+ * Environment variables:
+ *   CONNECTIONS_TABLE — DynamoDB table name (required)
+ *
+ * DynamoDB table schema:
+ *   Partition key: connectionId (String)
+ *   TTL attribute: ttl
+ *   GSI: userId-index  (partition key: userId)
+ *   GSI: tenantId-index (partition key: tenantId) — only if multi-tenancy enabled
+ */
+export interface ConnectionRecord {
+    connectionId: string;
+    authenticated: boolean;
+    userId?: string;
+    tenantId?: string;
+    email?: string;
+    connectedAt: number;
+    authenticatedAt?: number;
+    ttl: number;
+    [key: string]: unknown;
+}
+export interface ConnectionMetadata {
+    userId: string;
+    tenantId?: string;
+    email?: string;
+    [key: string]: unknown;
+}
+/**
+ * WebSocket connection store backed by DynamoDB.
+ *
+ * Two-phase authentication flow:
+ *
+ * 1. $connect handler:
+ * ```typescript
+ * await connectionStore.save(connectionId);
+ * // Connection is unauthenticated, TTL = 30s
+ * ```
+ *
+ * 2. Client sends auth message over the encrypted WebSocket:
+ * ```json
+ * { "action": "auth", "token": "<jwt>" }
+ * ```
+ *
+ * 3. $default handler verifies JWT, then:
+ * ```typescript
+ * await connectionStore.authenticate(connectionId, { userId, tenantId, email });
+ * // Connection is now authenticated, TTL extended to 2h
+ * ```
+ */
+export declare const connectionStore: {
+    /**
+     * Save a new connection on $connect.
+     * The connection is unauthenticated with a short TTL.
+     * The client must send an auth message to upgrade.
+     */
+    save(connectionId: string): Promise<void>;
+    /**
+     * Authenticate a connection after JWT verification.
+     * Updates the record with user metadata and extends the TTL.
+     *
+     * @param connectionId — the connection to authenticate
+     * @param metadata — must include userId, optionally tenantId, email, etc.
+     */
+    authenticate(connectionId: string, metadata: ConnectionMetadata): Promise<void>;
+    /**
+     * Remove a connection on $disconnect.
+     */
+    remove(connectionId: string): Promise<void>;
+    /**
+     * Get a single connection record.
+     */
+    get(connectionId: string): Promise<ConnectionRecord | null>;
+    /**
+     * Get all authenticated connections.
+     * For large-scale apps, prefer getByUser() or getByTenant().
+     */
+    getAll(): Promise<ConnectionRecord[]>;
+    /**
+     * Get all connections for a specific user.
+     * A user can have multiple active connections (e.g. multiple tabs/devices).
+     * Requires GSI: userId-index (partition key: userId).
+     */
+    getByUser(userId: string): Promise<ConnectionRecord[]>;
+    /**
+     * Get all connections for a specific tenant.
+     * Requires GSI: tenantId-index (partition key: tenantId).
+     */
+    getByTenant(tenantId: string): Promise<ConnectionRecord[]>;
+    /**
+     * Send data to a specific connection via API Gateway Management API.
+     * Automatically cleans up stale connections (GoneException).
+     * Returns true if sent, false if the connection was stale and removed.
+     */
+    postToConnection(domainName: string, stage: string, connectionId: string, data: unknown): Promise<boolean>;
+    /**
+     * Send data to all connections belonging to a specific user.
+     * Returns the number of connections that received the message.
+     */
+    sendToUser(domainName: string, stage: string, userId: string, data: unknown): Promise<number>;
+    /**
+     * Send data to all connections within a specific tenant.
+     * Returns the number of connections that received the message.
+     */
+    sendToTenant(domainName: string, stage: string, tenantId: string, data: unknown): Promise<number>;
+    /**
+     * Broadcast data to all authenticated connections.
+     * Returns the number of clients that received the message.
+     */
+    broadcast(domainName: string, stage: string, data: unknown): Promise<number>;
+};
+//# sourceMappingURL=ws.d.ts.map

package/dist/ws/ws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../../src/ws/ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAKH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA4DD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,eAAe;IAC1B;;;;OAIG;uBACsB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C;;;;;;OAMG;+BAC8B,MAAM,YAAY,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDrF;;OAEG;yBACwB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjD;;OAEG;sBACqB,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAUjE;;;OAGG;cACa,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAW3C;;;;OAIG;sBACqB,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAY5D;;;OAGG;0BACyB,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAYhE;;;;OAIG;iCAEW,MAAM,SACX,MAAM,gBACC,MAAM,QACd,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;OAGG;2BAEW,MAAM,SACX,MAAM,UACL,MAAM,QACR,OAAO,GACZ,OAAO,CAAC,MAAM,CAAC;IAKlB;;;OAGG;6BAEW,MAAM,SACX,MAAM,YACH,MAAM,QACV,OAAO,GACZ,OAAO,CAAC,MAAM,CAAC;IAKlB;;;OAGG;0BACyB,MAAM,SAAS,MAAM,QAAQ,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;CAInF,CAAC"}