deepline 0.2.48 → 0.2.50

package/dist/plays/bundle-play-file.mjs

@@ -21,7 +21,9 @@ import {
   extname,
   isAbsolute,
   join,
-  resolve
+  relative,
+  resolve,
+  sep
 } from "path";
 import { builtinModules } from "module";
 import { Parser } from "acorn";
@@ -2806,6 +2808,76 @@ var PLAY_AUTHORING_FIELD_REGISTRY = {
     description: "HTTP header containing the webhook signature.",
     errorMessage: "bindings.webhook.hmac.header must be a non-empty static string."
   },
+  "bindings.webhook.auth.type": {
+    schema: Type.Literal("standard-webhooks"),
+    fixtures: {
+      valid: "standard-webhooks",
+      invalid: "svix",
+      absent: void 0,
+      unresolved: { expression: "type" },
+      edition1: void 0
+    },
+    referenceType: "'standard-webhooks'",
+    // auth itself is optional; once present, the AST adapter requires this
+    // field together with headerFamily and signingSecrets.
+    required: false,
+    resolution: "static-required",
+    issueCode: "play_authoring_standard_webhooks_invalid",
+    description: "Uses the Standard Webhooks v1 symmetric signing scheme.",
+    errorMessage: 'bindings.webhook.auth.type must be the static literal "standard-webhooks".'
+  },
+  "bindings.webhook.auth.headerFamily": {
+    schema: Type.Union([Type.Literal("standard"), Type.Literal("svix")]),
+    fixtures: {
+      valid: "svix",
+      invalid: "webhook",
+      absent: void 0,
+      unresolved: { expression: "headerFamily" },
+      edition1: void 0
+    },
+    referenceType: "'standard' | 'svix'",
+    // auth itself is optional; once present, the AST adapter requires this
+    // field together with type and signingSecrets.
+    required: false,
+    resolution: "static-required",
+    issueCode: "play_authoring_standard_webhooks_invalid",
+    description: "Header namespace expected from the webhook provider.",
+    errorMessage: 'bindings.webhook.auth.headerFamily must be the static literal "standard" or "svix".'
+  },
+  "bindings.webhook.auth.signingSecrets[]": {
+    schema: SecretEnvironmentNameSchema,
+    fixtures: {
+      valid: "VECTOR_WEBHOOK_SECRET",
+      invalid: "vector_webhook_secret",
+      absent: void 0,
+      unresolved: { expression: "secret" },
+      edition1: void 0
+    },
+    referenceType: "string",
+    // auth itself is optional; once present, the AST adapter requires this
+    // field together with type and headerFamily.
+    required: false,
+    resolution: "static-required",
+    issueCode: "play_authoring_standard_webhooks_invalid",
+    description: "Deepline Secret name used to verify Standard Webhooks.",
+    errorMessage: "bindings.webhook.auth.signingSecrets entries must be uppercase Deepline Secret names beginning with a letter."
+  },
+  "bindings.webhook.auth.toleranceSeconds": {
+    schema: Type.Integer({ minimum: 1, maximum: 3600 }),
+    fixtures: {
+      valid: 300,
+      invalid: 0,
+      absent: void 0,
+      unresolved: { expression: "toleranceSeconds" },
+      edition1: void 0
+    },
+    referenceType: "number",
+    required: false,
+    resolution: "static-required",
+    issueCode: "play_authoring_standard_webhooks_invalid",
+    description: "Accepted delivery timestamp skew in seconds, from 1 through 3600.",
+    errorMessage: "bindings.webhook.auth.toleranceSeconds must be a static whole number from 1 through 3600."
+  },
   "bindings.cron.schedule": {
     schema: Type.String({ minLength: 1 }),
     fixtures: {
@@ -3830,7 +3902,7 @@ var PLAY_AUTHORING_CLOUD_TYPE_DECLARATIONS = [
   `  inline?: ${cloudReferenceType("inline")};`,
   `  billing?: { maxCreditsPerRun?: ${cloudReferenceType("billing.maxCreditsPerRun")} };`,
   `  runtime?: { timeout?: ${cloudReferenceType("runtime.timeout")}; size?: ${cloudReferenceType("runtime.size")} };`,
-  `  webhook?: { hmac?: { algorithm?: ${cloudReferenceType("bindings.webhook.hmac.algorithm")}; header?: ${cloudReferenceType("bindings.webhook.hmac.header")}; secretEnv: ${cloudReferenceType("bindings.webhook.hmac.secretEnv")} } };`,
+  `  webhook?: { hmac?: { algorithm?: ${cloudReferenceType("bindings.webhook.hmac.algorithm")}; header?: ${cloudReferenceType("bindings.webhook.hmac.header")}; secretEnv: ${cloudReferenceType("bindings.webhook.hmac.secretEnv")} }; auth?: { type: ${cloudReferenceType("bindings.webhook.auth.type")}; headerFamily: ${cloudReferenceType("bindings.webhook.auth.headerFamily")}; signingSecrets: readonly ${cloudReferenceType("bindings.webhook.auth.signingSecrets[]")}[]; toleranceSeconds?: ${cloudReferenceType("bindings.webhook.auth.toleranceSeconds")} } };`,
   `  cron?: { schedule: ${cloudReferenceType("bindings.cron.schedule")}; timezone?: ${cloudReferenceType("bindings.cron.timezone")} };`,
   "  sqlListeners?: readonly SqlListenerDeclaration[];",
   `  secrets?: readonly ${cloudReferenceType("bindings.secrets[]")}[];`,
@@ -3990,6 +4062,15 @@ function assertValidExportName(exportName) {
 function sha256(value) {
   return createHash("sha256").update(value).digest("hex");
 }
+function sourceIdentityPath(filePath, adapter) {
+  if (!adapter.sourceIdentityRoot) return filePath;
+  const identityRoot = resolve(adapter.sourceIdentityRoot);
+  const logicalPath = relative(identityRoot, resolve(filePath));
+  if (!logicalPath || logicalPath === ".." || logicalPath.startsWith(`..${sep}`) || isAbsolute(logicalPath)) {
+    return filePath;
+  }
+  return logicalPath.split(/[\\/]+/).join("/");
+}
 function formatEsbuildMessage(message) {
   const location = message.location ? `${message.location.file}:${message.location.line}:${message.location.column}` : null;
   return location ? `${location} ${message.text}` : message.text;
@@ -4910,12 +4991,15 @@ async function analyzeSourceGraph(entryFile, adapter, exportName) {
   const sourceHash = sha256(sourceCode);
   const graphHash = sha256(
     JSON.stringify({
-      entryFile: absoluteEntryFile,
-      localFiles: [...localFiles.entries()].map(([filePath, contents]) => ({ filePath, hash: sha256(contents) })).sort((left, right) => left.filePath.localeCompare(right.filePath)),
+      entryFile: sourceIdentityPath(absoluteEntryFile, adapter),
+      localFiles: [...localFiles.entries()].map(([filePath, contents]) => ({
+        filePath: sourceIdentityPath(filePath, adapter),
+        hash: sha256(contents)
+      })).sort((left, right) => left.filePath.localeCompare(right.filePath)),
       nodeBuiltins: [...nodeBuiltins].sort(),
       packages: [...packages.entries()].map(([name, version]) => ({ name, version })).sort((left, right) => left.name.localeCompare(right.name)),
       importedPlayDependencies: [...importedPlayDependencies.values()].map((dependency) => ({
-        filePath: dependency.filePath,
+        filePath: sourceIdentityPath(dependency.filePath, adapter),
         playName: dependency.playName
       })).sort((left, right) => left.filePath.localeCompare(right.filePath))
     })
@@ -4954,6 +5038,7 @@ async function analyzeSourceGraph(entryFile, adapter, exportName) {
 }
 function artifactCachePath(graphHash, artifactKind, adapter) {
   return join(
+    /* turbopackIgnore: true */
     adapter.cacheDir ?? PLAY_ARTIFACT_CACHE_DIR,
     `${graphHash}.${artifactKind}.json`
   );
@@ -4961,7 +5046,12 @@ function artifactCachePath(graphHash, artifactKind, adapter) {
 async function readArtifactCache(graphHash, artifactKind, adapter) {
   try {
     const serialized = await readFile(
-      artifactCachePath(graphHash, artifactKind, adapter),
+      /* turbopackIgnore: true */
+      artifactCachePath(
+        graphHash,
+        artifactKind,
+        adapter
+      ),
       "utf-8"
     );
     return JSON.parse(serialized);
@@ -4971,8 +5061,13 @@ async function readArtifactCache(graphHash, artifactKind, adapter) {
 }
 async function writeArtifactCache(artifact, adapter) {
   const cacheDir = adapter.cacheDir ?? PLAY_ARTIFACT_CACHE_DIR;
-  await mkdir(cacheDir, { recursive: true });
+  await mkdir(
+    /* turbopackIgnore: true */
+    cacheDir,
+    { recursive: true }
+  );
   await writeFile(
+    /* turbopackIgnore: true */
     artifactCachePath(
       artifact.graphHash,
       artifact.artifactKind ?? PLAY_ARTIFACT_KINDS.cjsNode20,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.2.48",
+  "version": "0.2.50",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {