@webpieces/cloudtasks-client 0.3.353 → 0.3.355

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/cloudtasks-client",
-  "version": "0.3.353",
+  "version": "0.3.355",
   "description": "Cloud Tasks enqueue client generated from a shared @PubSub API contract (twin of http-client)",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -23,9 +23,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@webpieces/core-context": "0.3.353",
-    "@webpieces/core-util": "0.3.353",
-    "@webpieces/gcp-identity": "0.3.353",
+    "@webpieces/core-context": "0.3.355",
+    "@webpieces/core-util": "0.3.355",
+    "@webpieces/gcp-identity": "0.3.355",
     "@google-cloud/tasks": "5.5.2",
     "inversify": "7.10.4",
     "reflect-metadata": "0.2.2"

package/src/InMemoryTaskInvoker.d.ts

@@ -1,3 +1,4 @@
+import { GcpOidc } from '@webpieces/gcp-identity';
 import { Secrets } from '@webpieces/core-util';
 import { TaskInvoker, TaskRequest, JobReference } from './TaskTypes';
 /**
@@ -17,11 +18,12 @@ import { TaskInvoker, TaskRequest, JobReference } from './TaskTypes';
  *   bind(TaskInvoker).to(InMemoryTaskInvoker)
  */
 export declare class InMemoryTaskInvoker extends TaskInvoker {
+    private readonly gcpOidc;
     private readonly secrets?;
     private counter;
     /** Scheduled (not-yet-delivered) jobs, so delete() can cancel them. */
     private readonly pending;
-    constructor(secrets?: Secrets | undefined);
+    constructor(gcpOidc: GcpOidc, secrets?: Secrets | undefined);
     enqueue(request: TaskRequest): Promise<JobReference>;
     delete(ref: JobReference): Promise<void>;
     /** ms until the scheduled run time (0 = as soon as possible / already due). */

package/src/InMemoryTaskInvoker.js

@@ -25,13 +25,14 @@ const log = core_util_1.LogManager.getLogger('InMemoryTaskInvoker');
  *   bind(TaskInvoker).to(InMemoryTaskInvoker)
  */
 let InMemoryTaskInvoker = class InMemoryTaskInvoker extends TaskTypes_1.TaskInvoker {
+    gcpOidc;
     secrets;
     counter = 0;
     /** Scheduled (not-yet-delivered) jobs, so delete() can cancel them. */
     pending = new Map();
-    // @optional: only @AuthSharedSecret task endpoints need it; the client sends its bound value.
-    constructor(secrets) {
+    constructor(gcpOidc, secrets) {
         super();
+        this.gcpOidc = gcpOidc;
         this.secrets = secrets;
     }
     async enqueue(request) {
@@ -101,7 +102,7 @@ let InMemoryTaskInvoker = class InMemoryTaskInvoker extends TaskTypes_1.TaskInvo
     async attachAuth(request, headers) {
         const mode = request.authMode;
         if (mode.kind === 'oidc') {
-            headers['authorization'] = `Bearer ${await (0, gcp_identity_1.mintIdToken)(request.targetUrl)}`;
+            headers['authorization'] = `Bearer ${await this.gcpOidc.mintIdToken(request.targetUrl)}`;
             return;
         }
         if (mode.kind === 'shared-secret') {
@@ -118,8 +119,10 @@ exports.InMemoryTaskInvoker = InMemoryTaskInvoker;
 exports.InMemoryTaskInvoker = InMemoryTaskInvoker = tslib_1.__decorate([
     (0, core_context_1.provideFrameworkSingleton)(),
     (0, inversify_1.injectable)(),
-    tslib_1.__param(0, (0, inversify_1.optional)()),
-    tslib_1.__param(0, (0, inversify_1.inject)(core_util_1.Secrets)),
-    tslib_1.__metadata("design:paramtypes", [core_util_1.Secrets])
+    tslib_1.__param(0, (0, inversify_1.inject)(gcp_identity_1.GcpOidc)),
+    tslib_1.__param(1, (0, inversify_1.optional)()),
+    tslib_1.__param(1, (0, inversify_1.inject)(core_util_1.Secrets)),
+    tslib_1.__metadata("design:paramtypes", [gcp_identity_1.GcpOidc,
+        core_util_1.Secrets])
 ], InMemoryTaskInvoker);
 //# sourceMappingURL=InMemoryTaskInvoker.js.map

package/src/InMemoryTaskInvoker.js.map

@@ -1 +1 @@
-{"version":3,"file":"InMemoryTaskInvoker.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/InMemoryTaskInvoker.ts"],"names":[],"mappings":";;;;AAAA,yCAAyD;AACzD,0DAAoE;AACpE,0DAAsD;AACtD,oDAAoE;AACpE,2CAAqE;AAErE,MAAM,GAAG,GAAG,sBAAU,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,uBAAW;IAMU;IALlD,OAAO,GAAG,CAAC,CAAC;IACpB,uEAAuE;IACtD,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,8FAA8F;IAC9F,YAA0D,OAAiB;QACvE,KAAK,EAAE,CAAC;QAD8C,YAAO,GAAP,OAAO,CAAU;IAE3E,CAAC;IAEQ,KAAK,CAAC,OAAO,CAAC,OAAoB;QACvC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,SAAS,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAEzE,+EAA+E;QAC/E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,4DAA4D;QAC5D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhC,GAAG,CAAC,KAAK,CAAC,qBAAqB,MAAM,OAAO,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,WAAW,OAAO,KAAK,CAAC,CAAC;QACrG,OAAO,IAAI,wBAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,GAAiB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,+EAA+E;IACvE,cAAc,CAAC,cAAuB;QAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,oFAAoF;IAC5E,KAAK,CAAC,OAAO,CAAC,OAAoB,EAAE,MAAc;QACtD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QACzD,iIAAiI;QACjI,IAAI,CAAC;YACD,0HAA0H;YAC1H,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,gBAAgB,GAAG,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrF,OAAO;YACX,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,gBAAgB,GAAG,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,YAAY,CAAC,OAAoB;QAC3C,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,UAAU,CAAC,OAAoB,EAAE,OAA+B;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,IAAA,0BAAW,EAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBACT,2FAA2F;gBAC3F,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,MAAM,EAAE,CAAC;YACrD,CAAC;QACL,CAAC;QACD,uDAAuD;IAC3D,CAAC;CACJ,CAAA;AA/FY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,wCAAyB,GAAE;IAC3B,IAAA,sBAAU,GAAE;IAOI,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,kBAAM,EAAC,mBAAO,CAAC,CAAA;6CAA4B,mBAAO;GANlE,mBAAmB,CA+F/B","sourcesContent":["import { injectable, inject, optional } from 'inversify';\nimport { provideFrameworkSingleton } from '@webpieces/core-context';\nimport { mintIdToken } from '@webpieces/gcp-identity';\nimport { LogManager, toError, Secrets } from '@webpieces/core-util';\nimport { TaskInvoker, TaskRequest, JobReference } from './TaskTypes';\n\nconst log = LogManager.getLogger('InMemoryTaskInvoker');\n\n/**\n * TaskInvoker for tests + local dev — the in-memory-queue twin of GcpTaskInvoker\n * (a TypeScript port of webpieces-java's LocalRemoteInvoker).\n *\n * Instead of enqueuing to Google Cloud Tasks, it drops the delivery onto an in-process\n * timer queue and returns IMMEDIATELY (breaking from the caller, exactly like handing a\n * task to Cloud Tasks). The queued job then delivers the task the SAME way real Cloud\n * Tasks does: a plain HTTP POST to `targetUrl + path` with the JSON body and the\n * synthesized delivery auth (OIDC bearer / shared-secret). It does NOT invoke the server\n * in-process — the target may be a different process entirely — so the request travels\n * over real HTTP (e.g. http://localhost:{port}/queue/path) and is served by the target's\n * real routing + filter chain, giving production parity without GCP.\n *\n * Bind it (via appOverrides) in place of GcpTaskInvoker:\n *   bind(TaskInvoker).to(InMemoryTaskInvoker)\n */\n@provideFrameworkSingleton()\n@injectable()\nexport class InMemoryTaskInvoker extends TaskInvoker {\n    private counter = 0;\n    /** Scheduled (not-yet-delivered) jobs, so delete() can cancel them. */\n    private readonly pending = new Map<string, ReturnType<typeof setTimeout>>();\n\n    // @optional: only @AuthSharedSecret task endpoints need it; the client sends its bound value.\n    constructor(@optional() @inject(Secrets) private readonly secrets?: Secrets) {\n        super();\n    }\n\n    override async enqueue(request: TaskRequest): Promise<JobReference> {\n        this.counter += 1;\n        const taskId = request.scheduleInfo.dedupName ?? `inmem-${request.queueName}-${this.counter}`;\n        const delayMs = this.computeDelayMs(request.scheduleInfo.epochMsToRunAt);\n\n        // Break from the caller: queue the HTTP delivery and return the reference NOW.\n        const timer = setTimeout(() => {\n            this.pending.delete(taskId);\n            void this.deliver(request, taskId);\n        }, delayMs);\n        // A queued task must not keep the process alive on its own.\n        timer.unref?.();\n        this.pending.set(taskId, timer);\n\n        log.debug(`queued local task ${taskId} -> ${request.targetUrl}${request.path} (delay ${delayMs}ms)`);\n        return new JobReference(taskId);\n    }\n\n    override async delete(ref: JobReference): Promise<void> {\n        const timer = this.pending.get(ref.taskId);\n        if (timer) {\n            clearTimeout(timer);\n            this.pending.delete(ref.taskId);\n        }\n    }\n\n    /** ms until the scheduled run time (0 = as soon as possible / already due). */\n    private computeDelayMs(epochMsToRunAt?: number): number {\n        if (epochMsToRunAt === undefined) {\n            return 0;\n        }\n        const delay = epochMsToRunAt - Date.now();\n        return delay > 0 ? delay : 0;\n    }\n\n    /** Deliver the queued task over real HTTP, mirroring Cloud Tasks' HTTP callback. */\n    private async deliver(request: TaskRequest, taskId: string): Promise<void> {\n        const url = `${request.targetUrl}${request.path}`;\n        const headers = await this.buildHeaders(request);\n        log.info(`delivering local task ${taskId}: POST ${url}`);\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- detached queue job: log delivery failure, never crash the queue\n        try {\n            // webpieces-disable no-fetch -- in-memory queue delivers over real HTTP like Cloud Tasks (no server to invoke in-process)\n            const response = await fetch(url, {\n                method: 'POST',\n                headers: headers,\n                body: JSON.stringify(request.body ?? {}),\n            });\n            if (!response.ok) {\n                log.error(`local task ${taskId} delivery to ${url} failed: HTTP ${response.status}`);\n                return;\n            }\n            log.debug(`local task ${taskId} delivered: HTTP ${response.status}`);\n        } catch (err: unknown) {\n            const error = toError(err);\n            log.error(`local task ${taskId} delivery to ${url} threw: ${error.message}`);\n        }\n    }\n\n    /** content-type + propagated context headers + synthesized delivery credential. */\n    private async buildHeaders(request: TaskRequest): Promise<Record<string, string>> {\n        const headers: Record<string, string> = { 'content-type': 'application/json' };\n        for (const entry of request.contextHeaders.entries()) {\n            headers[entry[0]] = entry[1];\n        }\n        await this.attachAuth(request, headers);\n        return headers;\n    }\n\n    /** Synthesize the delivery credential Cloud Tasks would attach, per the auth mode. */\n    private async attachAuth(request: TaskRequest, headers: Record<string, string>): Promise<void> {\n        const mode = request.authMode;\n        if (mode.kind === 'oidc') {\n            headers['authorization'] = `Bearer ${await mintIdToken(request.targetUrl)}`;\n            return;\n        }\n        if (mode.kind === 'shared-secret') {\n            const secret = this.secrets?.get(mode.secretKey);\n            if (secret) {\n                // One credential header; the 'Webpieces' scheme says a shared secret follows, not a token.\n                headers['authorization'] = `Webpieces ${secret}`;\n            }\n        }\n        // public / jwt → no service credential is synthesized.\n    }\n}\n"]}
+{"version":3,"file":"InMemoryTaskInvoker.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/InMemoryTaskInvoker.ts"],"names":[],"mappings":";;;;AAAA,yCAAyD;AACzD,0DAAoE;AACpE,0DAAkD;AAClD,oDAAoE;AACpE,2CAAqE;AAErE,MAAM,GAAG,GAAG,sBAAU,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;AAExD;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,uBAAW;IAOV;IAGY;IAT1C,OAAO,GAAG,CAAC,CAAC;IACpB,uEAAuE;IACtD,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,YAEsC,OAAgB,EAGJ,OAAiB;QAE/D,KAAK,EAAE,CAAC;QAL0B,YAAO,GAAP,OAAO,CAAS;QAGJ,YAAO,GAAP,OAAO,CAAU;IAGnE,CAAC;IAEQ,KAAK,CAAC,OAAO,CAAC,OAAoB;QACvC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,SAAS,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAEzE,+EAA+E;QAC/E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,4DAA4D;QAC5D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhC,GAAG,CAAC,KAAK,CAAC,qBAAqB,MAAM,OAAO,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,WAAW,OAAO,KAAK,CAAC,CAAC;QACrG,OAAO,IAAI,wBAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,GAAiB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,+EAA+E;IACvE,cAAc,CAAC,cAAuB;QAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,oFAAoF;IAC5E,KAAK,CAAC,OAAO,CAAC,OAAoB,EAAE,MAAc;QACtD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC;QACzD,iIAAiI;QACjI,IAAI,CAAC;YACD,0HAA0H;YAC1H,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,gBAAgB,GAAG,iBAAiB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrF,OAAO;YACX,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,gBAAgB,GAAG,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,YAAY,CAAC,OAAoB;QAC3C,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,UAAU,CAAC,OAAoB,EAAE,OAA+B;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACzF,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC;gBACT,2FAA2F;gBAC3F,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,MAAM,EAAE,CAAC;YACrD,CAAC;QACL,CAAC;QACD,uDAAuD;IAC3D,CAAC;CACJ,CAAA;AApGY,kDAAmB;8BAAnB,mBAAmB;IAF/B,IAAA,wCAAyB,GAAE;IAC3B,IAAA,sBAAU,GAAE;IAQJ,mBAAA,IAAA,kBAAM,EAAC,sBAAO,CAAC,CAAA;IAGf,mBAAA,IAAA,oBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,kBAAM,EAAC,mBAAO,CAAC,CAAA;6CAHe,sBAAO;QAGM,mBAAO;GAV1D,mBAAmB,CAoG/B","sourcesContent":["import { injectable, inject, optional } from 'inversify';\nimport { provideFrameworkSingleton } from '@webpieces/core-context';\nimport { GcpOidc } from '@webpieces/gcp-identity';\nimport { LogManager, toError, Secrets } from '@webpieces/core-util';\nimport { TaskInvoker, TaskRequest, JobReference } from './TaskTypes';\n\nconst log = LogManager.getLogger('InMemoryTaskInvoker');\n\n/**\n * TaskInvoker for tests + local dev — the in-memory-queue twin of GcpTaskInvoker\n * (a TypeScript port of webpieces-java's LocalRemoteInvoker).\n *\n * Instead of enqueuing to Google Cloud Tasks, it drops the delivery onto an in-process\n * timer queue and returns IMMEDIATELY (breaking from the caller, exactly like handing a\n * task to Cloud Tasks). The queued job then delivers the task the SAME way real Cloud\n * Tasks does: a plain HTTP POST to `targetUrl + path` with the JSON body and the\n * synthesized delivery auth (OIDC bearer / shared-secret). It does NOT invoke the server\n * in-process — the target may be a different process entirely — so the request travels\n * over real HTTP (e.g. http://localhost:{port}/queue/path) and is served by the target's\n * real routing + filter chain, giving production parity without GCP.\n *\n * Bind it (via appOverrides) in place of GcpTaskInvoker:\n *   bind(TaskInvoker).to(InMemoryTaskInvoker)\n */\n@provideFrameworkSingleton()\n@injectable()\nexport class InMemoryTaskInvoker extends TaskInvoker {\n    private counter = 0;\n    /** Scheduled (not-yet-delivered) jobs, so delete() can cancel them. */\n    private readonly pending = new Map<string, ReturnType<typeof setTimeout>>();\n\n    constructor(\n        // webpieces-disable inject-annotation-not-needed-for-concrete-class -- DI-resolved param; the esbuild/vitest path elides type-only imports (no design:paramtypes), so the explicit token is required\n        @inject(GcpOidc) private readonly gcpOidc: GcpOidc,\n        // @optional: only @AuthSharedSecret task endpoints need it; the client sends its bound value.\n        // webpieces-disable inject-annotation-not-needed-for-concrete-class -- DI-resolved param; the esbuild/vitest path elides type-only imports (no design:paramtypes), so the explicit token is required\n        @optional() @inject(Secrets) private readonly secrets?: Secrets,\n    ) {\n        super();\n    }\n\n    override async enqueue(request: TaskRequest): Promise<JobReference> {\n        this.counter += 1;\n        const taskId = request.scheduleInfo.dedupName ?? `inmem-${request.queueName}-${this.counter}`;\n        const delayMs = this.computeDelayMs(request.scheduleInfo.epochMsToRunAt);\n\n        // Break from the caller: queue the HTTP delivery and return the reference NOW.\n        const timer = setTimeout(() => {\n            this.pending.delete(taskId);\n            void this.deliver(request, taskId);\n        }, delayMs);\n        // A queued task must not keep the process alive on its own.\n        timer.unref?.();\n        this.pending.set(taskId, timer);\n\n        log.debug(`queued local task ${taskId} -> ${request.targetUrl}${request.path} (delay ${delayMs}ms)`);\n        return new JobReference(taskId);\n    }\n\n    override async delete(ref: JobReference): Promise<void> {\n        const timer = this.pending.get(ref.taskId);\n        if (timer) {\n            clearTimeout(timer);\n            this.pending.delete(ref.taskId);\n        }\n    }\n\n    /** ms until the scheduled run time (0 = as soon as possible / already due). */\n    private computeDelayMs(epochMsToRunAt?: number): number {\n        if (epochMsToRunAt === undefined) {\n            return 0;\n        }\n        const delay = epochMsToRunAt - Date.now();\n        return delay > 0 ? delay : 0;\n    }\n\n    /** Deliver the queued task over real HTTP, mirroring Cloud Tasks' HTTP callback. */\n    private async deliver(request: TaskRequest, taskId: string): Promise<void> {\n        const url = `${request.targetUrl}${request.path}`;\n        const headers = await this.buildHeaders(request);\n        log.info(`delivering local task ${taskId}: POST ${url}`);\n        // eslint-disable-next-line @webpieces/no-unmanaged-exceptions -- detached queue job: log delivery failure, never crash the queue\n        try {\n            // webpieces-disable no-fetch -- in-memory queue delivers over real HTTP like Cloud Tasks (no server to invoke in-process)\n            const response = await fetch(url, {\n                method: 'POST',\n                headers: headers,\n                body: JSON.stringify(request.body ?? {}),\n            });\n            if (!response.ok) {\n                log.error(`local task ${taskId} delivery to ${url} failed: HTTP ${response.status}`);\n                return;\n            }\n            log.debug(`local task ${taskId} delivered: HTTP ${response.status}`);\n        } catch (err: unknown) {\n            const error = toError(err);\n            log.error(`local task ${taskId} delivery to ${url} threw: ${error.message}`);\n        }\n    }\n\n    /** content-type + propagated context headers + synthesized delivery credential. */\n    private async buildHeaders(request: TaskRequest): Promise<Record<string, string>> {\n        const headers: Record<string, string> = { 'content-type': 'application/json' };\n        for (const entry of request.contextHeaders.entries()) {\n            headers[entry[0]] = entry[1];\n        }\n        await this.attachAuth(request, headers);\n        return headers;\n    }\n\n    /** Synthesize the delivery credential Cloud Tasks would attach, per the auth mode. */\n    private async attachAuth(request: TaskRequest, headers: Record<string, string>): Promise<void> {\n        const mode = request.authMode;\n        if (mode.kind === 'oidc') {\n            headers['authorization'] = `Bearer ${await this.gcpOidc.mintIdToken(request.targetUrl)}`;\n            return;\n        }\n        if (mode.kind === 'shared-secret') {\n            const secret = this.secrets?.get(mode.secretKey);\n            if (secret) {\n                // One credential header; the 'Webpieces' scheme says a shared secret follows, not a token.\n                headers['authorization'] = `Webpieces ${secret}`;\n            }\n        }\n        // public / jwt → no service credential is synthesized.\n    }\n}\n"]}