@vibes.diy/api-svc 4.0.5 → 4.0.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/intern/attempt-backend-fetch.d.ts +1 -0
  2. package/intern/attempt-backend-fetch.js +3 -0
  3. package/intern/attempt-backend-fetch.js.map +1 -1
  4. package/intern/backend-do-addr.d.ts +2 -0
  5. package/intern/backend-do-addr.js +7 -0
  6. package/intern/backend-do-addr.js.map +1 -1
  7. package/package.json +13 -13
package/intern/attempt-backend-fetch.d.ts CHANGED
@@ -19,3 +19,4 @@ export interface AttemptBackendFetchInput {
19
19
  readonly policyVersion?: string;
20
20
  }
21
21
  export declare function attemptBackendFetch(vctx: VibesApiSQLCtx, input: AttemptBackendFetchInput): Promise<BackendFetchOutcome>;
22
+ export declare const STRIPPED_BACKEND_FETCH_HEADERS: ReadonlySet<string>;
package/intern/attempt-backend-fetch.js CHANGED
@@ -38,9 +38,12 @@ export async function attemptBackendFetch(vctx, input) {
38
38
  return { reason: "executor_error", detail: `invoke: ${rRes.Err().message}` };
39
39
  return { reason: "ok", response: rRes.Ok() };
40
40
  }
41
+ export const STRIPPED_BACKEND_FETCH_HEADERS = new Set(["cookie", "authorization"]);
41
42
  async function serializeRequest(req) {
42
43
  const headers = {};
43
44
  req.headers.forEach((value, key) => {
45
+ if (STRIPPED_BACKEND_FETCH_HEADERS.has(key.toLowerCase()))
46
+ return;
44
47
  headers[key] = value;
45
48
  });
46
49
  const method = req.method;
package/intern/attempt-backend-fetch.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"attempt-backend-fetch.js","sourceRoot":"","sources":["../../jsr/intern/attempt-backend-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAwB,MAAM,6CAA6C,CAAC;AAG9H,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAkE9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,KAA+B;IAG7F,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAgC,EAAE,CAC/D,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACzD,MAAM,EAAE,KAAK,CAAC,MAAyC;QACvD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACjE,CAAC,CACH,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;IACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAKlE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAIjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAKrF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE;QACvD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;KAC7B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE;YAC9F,EAAE;YACF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC;AAQD,KAAK,UAAU,gBAAgB,CAC7B,GAAY;IAEZ,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}
1
+ {"version":3,"file":"attempt-backend-fetch.js","sourceRoot":"","sources":["../../jsr/intern/attempt-backend-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAwB,MAAM,6CAA6C,CAAC;AAG9H,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAkE9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB,EAAE,KAA+B;IAG7F,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAgC,EAAE,CAC/D,qBAAqB,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACzD,MAAM,EAAE,KAAK,CAAC,MAAyC;QACvD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACjE,CAAC,CACH,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;IACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAKlE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAIjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAKrF,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE;QACvD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;KAC7B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE;YAC9F,EAAE;YACF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC;AAmBD,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;AAWxG,KAAK,UAAU,gBAAgB,CAC7B,GAAY;IAEZ,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO;QAClE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}
package/intern/backend-do-addr.d.ts CHANGED
@@ -3,6 +3,8 @@ export declare const BACKEND_SLUG_HEADER = "x-vibe-slug";
3
3
  export declare const BACKEND_OP_HEADER = "x-backend-op";
4
4
  export declare const BACKEND_OP_ARM = "arm";
5
5
  export declare const BACKEND_OP_ONCHANGE = "onchange";
6
+ export declare const BACKEND_INTERNAL_AUTH_HEADER = "x-backend-internal-auth";
7
+ export declare function isControlPlaneAuthorized(secret: string | undefined, provided: string | null): boolean;
6
8
  interface MutableHeaders {
7
9
  set(name: string, value: string): void;
8
10
  delete(name: string): void;
package/intern/backend-do-addr.js CHANGED
@@ -3,8 +3,15 @@ export const BACKEND_SLUG_HEADER = "x-vibe-slug";
3
3
  export const BACKEND_OP_HEADER = "x-backend-op";
4
4
  export const BACKEND_OP_ARM = "arm";
5
5
  export const BACKEND_OP_ONCHANGE = "onchange";
6
+ export const BACKEND_INTERNAL_AUTH_HEADER = "x-backend-internal-auth";
7
+ export function isControlPlaneAuthorized(secret, provided) {
8
+ if (!secret)
9
+ return true;
10
+ return provided === secret;
11
+ }
6
12
  export function sanitizeBackendApiForwardHeaders(headers, target) {
7
13
  headers.delete(BACKEND_OP_HEADER);
14
+ headers.delete(BACKEND_INTERNAL_AUTH_HEADER);
8
15
  headers.set(BACKEND_OWNER_HEADER, target.ownerHandle);
9
16
  headers.set(BACKEND_SLUG_HEADER, target.appSlug);
10
17
  }
package/intern/backend-do-addr.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"backend-do-addr.js","sourceRoot":"","sources":["../../jsr/intern/backend-do-addr.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAOjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAoB9C,MAAM,UAAU,gCAAgC,CAAC,OAAuB,EAAE,MAAgD;IACxH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAOD,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,OAAe;IAChE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;IAC/C,OAAO,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC"}
1
+ {"version":3,"file":"backend-do-addr.js","sourceRoot":"","sources":["../../jsr/intern/backend-do-addr.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAOjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAChD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAW9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAWtE,MAAM,UAAU,wBAAwB,CAAC,MAA0B,EAAE,QAAuB;IAC1F,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,QAAQ,KAAK,MAAM,CAAC;AAC7B,CAAC;AAsBD,MAAM,UAAU,gCAAgC,CAAC,OAAuB,EAAE,MAAgD;IACxH,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAOD,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,OAAe;IAChE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;IAC/C,OAAO,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vibes.diy/api-svc",
3
- "version": "4.0.5",
3
+ "version": "4.0.7",
4
4
  "type": "module",
5
5
  "main": "./index.js",
6
6
  "scripts": {
@@ -17,20 +17,20 @@
17
17
  "@libsql/client": "~0.17.4",
18
18
  "@neondatabase/serverless": "~1.1.0",
19
19
  "@noble/hashes": "~2.2.0",
20
- "@vibes.diy/api-impl": "4.0.5",
21
- "@vibes.diy/api-pkg": "4.0.5",
22
- "@vibes.diy/api-sql": "4.0.5",
23
- "@vibes.diy/api-types": "4.0.5",
24
- "@vibes.diy/call-ai-v2": "4.0.5",
25
- "@vibes.diy/identity": "4.0.5",
26
- "@vibes.diy/prompts": "4.0.5",
27
- "@vibes.diy/use-vibes-base": "4.0.5",
28
- "@vibes.diy/vibe-db-explorer": "4.0.5",
29
- "@vibes.diy/vibe-runtime": "4.0.5",
30
- "@vibes.diy/vibe-types": "4.0.5",
20
+ "@vibes.diy/api-impl": "4.0.7",
21
+ "@vibes.diy/api-pkg": "4.0.7",
22
+ "@vibes.diy/api-sql": "4.0.7",
23
+ "@vibes.diy/api-types": "4.0.7",
24
+ "@vibes.diy/call-ai-v2": "4.0.7",
25
+ "@vibes.diy/identity": "4.0.7",
26
+ "@vibes.diy/prompts": "4.0.7",
27
+ "@vibes.diy/use-vibes-base": "4.0.7",
28
+ "@vibes.diy/vibe-db-explorer": "4.0.7",
29
+ "@vibes.diy/vibe-runtime": "4.0.7",
30
+ "@vibes.diy/vibe-types": "4.0.7",
31
31
  "acorn": "~8.17.0",
32
32
  "arktype": "~2.2.1",
33
- "call-ai": "4.0.5",
33
+ "call-ai": "4.0.7",
34
34
  "cookie": "~1.1.1",
35
35
  "drizzle-orm": "~0.45.2",
36
36
  "jose": "~6.2.2",