narai-primitives 2.0.0-rc.1

package/dist/connectors/aws/lib/aws_client.d.ts

@@ -0,0 +1,140 @@
+interface AwsSdkClient {
+    send(command: {
+        __name__?: string;
+    } & Record<string, unknown>): Promise<unknown>;
+}
+type SdkFactory = (config: {
+    region?: string;
+}) => AwsSdkClient;
+/** Labeled command constructor used by the client to enforce the whitelist. */
+export interface AwsCommand {
+    name: string;
+    input: Record<string, unknown>;
+}
+export interface AwsSdkFactories {
+    rds?: SdkFactory;
+    dynamodb?: SdkFactory;
+    s3?: SdkFactory;
+    cloudwatch?: SdkFactory;
+    lambda?: SdkFactory;
+    sts?: SdkFactory;
+}
+export interface AwsClientOptions {
+    region: string;
+    factories: AwsSdkFactories;
+    rateLimitPerMin?: number;
+    connectTimeoutMs?: number;
+    readTimeoutMs?: number;
+    sleepImpl?: (ms: number) => Promise<void>;
+}
+export interface AwsErrorPayload {
+    ok: false;
+    code: string;
+    message: string;
+    retriable: boolean;
+}
+export interface AwsSuccessPayload<T> {
+    ok: true;
+    data: T;
+}
+export type AwsResult<T> = AwsSuccessPayload<T> | AwsErrorPayload;
+export declare function loadAwsCredentialsOverride(): Promise<{
+    accessKeyId: string;
+    secretAccessKey: string;
+} | null>;
+export declare class AwsClient {
+    private readonly _region;
+    private readonly _factories;
+    private readonly _rateLimitPerMin;
+    private readonly _connectTimeoutMs;
+    private readonly _readTimeoutMs;
+    private readonly _sleep;
+    private _timestamps;
+    private _accountId;
+    constructor(opts: AwsClientOptions);
+    get accountId(): string | null;
+    get region(): string;
+    /**
+     * Best-effort STS GetCallerIdentity call to learn the AWS account id.
+     * Used for tenant scoping: `${accountId}/${region}`. Silent on failure —
+     * if STS is not installed or the call errors, accountId stays null and
+     * scope falls back to the global tier.
+     */
+    init(): Promise<void>;
+    private _throttle;
+    send<T = unknown>(factoryKey: keyof AwsSdkFactories, command: AwsCommand): Promise<AwsResult<T>>;
+    describeDBInstances(filter?: {
+        DBInstanceIdentifier?: string;
+    }): Promise<AwsResult<{
+        DBInstances?: AwsDBInstance[];
+    }>>;
+    listTables(): Promise<AwsResult<{
+        TableNames?: string[];
+    }>>;
+    describeTable(name: string): Promise<AwsResult<{
+        Table?: AwsDynamoTable;
+    }>>;
+    listBuckets(): Promise<AwsResult<{
+        Buckets?: AwsBucket[];
+    }>>;
+    listLambdaFunctions(): Promise<AwsResult<{
+        Functions?: AwsLambdaFunction[];
+    }>>;
+    getMetricStatistics(input: {
+        Namespace: string;
+        MetricName: string;
+        Dimensions?: Array<{
+            Name: string;
+            Value: string;
+        }>;
+        StartTime: Date;
+        EndTime: Date;
+        Period: number;
+        Statistics: string[];
+    }): Promise<AwsResult<{
+        Datapoints?: AwsDatapoint[];
+    }>>;
+}
+export interface AwsDBInstance {
+    DBInstanceIdentifier?: string;
+    Engine?: string;
+    EngineVersion?: string;
+    DBInstanceClass?: string;
+    DBInstanceStatus?: string;
+    Endpoint?: {
+        Address?: string;
+        Port?: number;
+    };
+    AllocatedStorage?: number;
+}
+export interface AwsDynamoTable {
+    TableName?: string;
+    TableStatus?: string;
+    KeySchema?: Array<{
+        AttributeName?: string;
+        KeyType?: string;
+    }>;
+    AttributeDefinitions?: Array<{
+        AttributeName?: string;
+        AttributeType?: string;
+    }>;
+    ItemCount?: number;
+    TableSizeBytes?: number;
+}
+export interface AwsBucket {
+    Name?: string;
+    CreationDate?: Date | string;
+}
+export interface AwsLambdaFunction {
+    FunctionName?: string;
+    Runtime?: string;
+    LastModified?: string;
+}
+export interface AwsDatapoint {
+    Timestamp?: Date | string;
+    Sum?: number;
+    Average?: number;
+    Maximum?: number;
+}
+export {};
+//# sourceMappingURL=aws_client.d.ts.map

package/dist/connectors/aws/lib/aws_client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_client.d.ts","sourceRoot":"","sources":["../../../../src/connectors/aws/lib/aws_client.ts"],"names":[],"mappings":"AA2BA,UAAU,YAAY;IACpB,IAAI,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClF;AAED,KAAK,UAAU,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,YAAY,CAAC;AAEhE,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,eAAe,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AACD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AACD,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;AAElE,wBAAsB,0BAA0B,IAAI,OAAO,CACzD;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CACxD,CAWA;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,UAAU,CAAuB;gBAE7B,IAAI,EAAE,gBAAgB;IAWlC,IAAW,SAAS,IAAI,MAAM,GAAG,IAAI,CAEpC;IAED,IAAW,MAAM,IAAI,MAAM,CAE1B;IAED;;;;;OAKG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA6BpB,SAAS;IAeV,IAAI,CAAC,CAAC,GAAG,OAAO,EAC3B,UAAU,EAAE,MAAM,eAAe,EACjC,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IA6CX,mBAAmB,CAC9B,MAAM,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,OAAO,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC,CAAC;IAO3C,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAO3D,aAAa,CACxB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,SAAS,CAAC;QAAE,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAOpC,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC,CAAC;IAO5D,mBAAmB,IAAI,OAAO,CACzC,SAAS,CAAC;QAAE,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC,CAC/C;IAOY,mBAAmB,CAAC,KAAK,EAAE;QACtC,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpD,SAAS,EAAE,IAAI,CAAC;QAChB,OAAO,EAAE,IAAI,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,GAAG,OAAO,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;CAMxD;AAED,MAAM,WAAW,aAAa;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,oBAAoB,CAAC,EAAE,KAAK,CAAC;QAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/connectors/aws/lib/aws_client.js

@@ -0,0 +1,196 @@
+/**
+ * aws_client.ts — read-only AWS SDK v3 facade.
+ *
+ * Rather than hard-depend on `@aws-sdk/client-rds` / `-s3` / `-dynamodb` at
+ * import time (the packages are optional for this package), the client accepts
+ * dependency-injected `sdkFactory` callables that produce
+ * { send: async (cmd) => … } shapes — matching the runtime contract of
+ * every modular SDK v3 client. Tests inject fake sdkFactories; production
+ * callers import the real SDK modules and pass them in.
+ *
+ * Only whitelisted read-only *Command types are exposed here.
+ */
+import { resolveSecret } from "@narai/credential-providers";
+const DEFAULT_CONNECT_TIMEOUT_MS = 10_000;
+const DEFAULT_READ_TIMEOUT_MS = 30_000;
+const DEFAULT_RATE_LIMIT_PER_MIN = 60;
+const ALLOWED_COMMANDS = new Set([
+    "DescribeDBInstancesCommand",
+    "ListTablesCommand",
+    "DescribeTableCommand",
+    "ListBucketsCommand",
+    "GetMetricStatisticsCommand",
+    "ListFunctionsCommand",
+]);
+export async function loadAwsCredentialsOverride() {
+    const accessKeyId = (await resolveSecret("AWS_ACCESS_KEY_ID")) ??
+        process.env["AWS_ACCESS_KEY_ID"] ??
+        null;
+    const secretAccessKey = (await resolveSecret("AWS_SECRET_ACCESS_KEY")) ??
+        process.env["AWS_SECRET_ACCESS_KEY"] ??
+        null;
+    if (!accessKeyId || !secretAccessKey)
+        return null;
+    return { accessKeyId, secretAccessKey };
+}
+export class AwsClient {
+    _region;
+    _factories;
+    _rateLimitPerMin;
+    _connectTimeoutMs;
+    _readTimeoutMs;
+    _sleep;
+    _timestamps = [];
+    _accountId = null;
+    constructor(opts) {
+        this._region = opts.region;
+        this._factories = opts.factories;
+        this._rateLimitPerMin = opts.rateLimitPerMin ?? DEFAULT_RATE_LIMIT_PER_MIN;
+        this._connectTimeoutMs = opts.connectTimeoutMs ?? DEFAULT_CONNECT_TIMEOUT_MS;
+        this._readTimeoutMs = opts.readTimeoutMs ?? DEFAULT_READ_TIMEOUT_MS;
+        this._sleep =
+            opts.sleepImpl ??
+                ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    }
+    get accountId() {
+        return this._accountId;
+    }
+    get region() {
+        return this._region;
+    }
+    /**
+     * Best-effort STS GetCallerIdentity call to learn the AWS account id.
+     * Used for tenant scoping: `${accountId}/${region}`. Silent on failure —
+     * if STS is not installed or the call errors, accountId stays null and
+     * scope falls back to the global tier.
+     */
+    async init() {
+        try {
+            const factory = this._factories.sts;
+            if (!factory)
+                return;
+            const sdk = factory({ region: this._region });
+            // Try to use the real GetCallerIdentityCommand when the SDK is present
+            // so production calls actually dispatch. Tests inject a `send` that
+            // ignores the cmd and returns `{ Account: "…" }` directly, so this
+            // import failing is not a problem in test environments.
+            const stsModule = (await import("@aws-sdk/client-sts").catch(() => null));
+            const Command = stsModule?.GetCallerIdentityCommand;
+            const cmd = Command
+                ? new Command({})
+                : { __name__: "GetCallerIdentityCommand", input: {} };
+            const response = await sdk.send(cmd);
+            const account = response?.Account;
+            this._accountId = account ?? null;
+        }
+        catch (err) {
+            process.stderr.write(`[aws] init: GetCallerIdentity failed (${err instanceof Error ? err.message : String(err)})\n`);
+            this._accountId = null;
+        }
+    }
+    async _throttle() {
+        const now = Date.now();
+        const cutoff = now - 60_000;
+        this._timestamps = this._timestamps.filter((t) => t > cutoff);
+        if (this._timestamps.length >= this._rateLimitPerMin) {
+            const oldest = this._timestamps[0] ?? now;
+            const waitMs = Math.max(0, 60_000 - (now - oldest));
+            if (waitMs > 0)
+                await this._sleep(waitMs);
+            this._timestamps = this._timestamps.filter((t) => t > Date.now() - 60_000);
+        }
+        this._timestamps.push(Date.now());
+    }
+    async send(factoryKey, command) {
+        if (!ALLOWED_COMMANDS.has(command.name)) {
+            return {
+                ok: false,
+                code: "METHOD_NOT_ALLOWED",
+                message: `Command ${command.name} is not on the read-only whitelist`,
+                retriable: false,
+            };
+        }
+        const factory = this._factories[factoryKey];
+        if (!factory) {
+            return {
+                ok: false,
+                code: "SDK_UNAVAILABLE",
+                message: `AWS SDK client missing for ${factoryKey}`,
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        try {
+            const sdk = factory({ region: this._region });
+            const wrapped = {
+                ...command.input,
+                __name__: command.name,
+            };
+            const timeoutMs = this._connectTimeoutMs + this._readTimeoutMs;
+            const race = await Promise.race([
+                sdk.send(wrapped),
+                new Promise((_resolve, reject) => setTimeout(() => reject(new Error("Request timed out")), timeoutMs)),
+            ]);
+            return { ok: true, data: race };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            const timeout = /timed out/i.test(message);
+            return {
+                ok: false,
+                code: timeout ? "TIMEOUT" : classifyAwsError(err),
+                message,
+                retriable: /timeout|Throttl|ECONNRESET/i.test(message),
+            };
+        }
+    }
+    async describeDBInstances(filter) {
+        return this.send("rds", {
+            name: "DescribeDBInstancesCommand",
+            input: filter ?? {},
+        });
+    }
+    async listTables() {
+        return this.send("dynamodb", {
+            name: "ListTablesCommand",
+            input: {},
+        });
+    }
+    async describeTable(name) {
+        return this.send("dynamodb", {
+            name: "DescribeTableCommand",
+            input: { TableName: name },
+        });
+    }
+    async listBuckets() {
+        return this.send("s3", {
+            name: "ListBucketsCommand",
+            input: {},
+        });
+    }
+    async listLambdaFunctions() {
+        return this.send("lambda", {
+            name: "ListFunctionsCommand",
+            input: {},
+        });
+    }
+    async getMetricStatistics(input) {
+        return this.send("cloudwatch", {
+            name: "GetMetricStatisticsCommand",
+            input,
+        });
+    }
+}
+function classifyAwsError(err) {
+    if (err && typeof err === "object" && "name" in err) {
+        const name = String(err.name ?? "");
+        if (/NotFound|NoSuch/.test(name))
+            return "NOT_FOUND";
+        if (/Unauthorized|InvalidSignature|Credentials/i.test(name))
+            return "AUTH_ERROR";
+        if (/Throttl|Rate/i.test(name))
+            return "RATE_LIMITED";
+    }
+    return "SDK_ERROR";
+}
+//# sourceMappingURL=aws_client.js.map

package/dist/connectors/aws/lib/aws_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_client.js","sourceRoot":"","sources":["../../../../src/connectors/aws/lib/aws_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,4BAA4B;IAC5B,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,4BAA4B;IAC5B,sBAAsB;CACvB,CAAC,CAAC;AA4CH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAG9C,MAAM,WAAW,GACf,CAAC,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAChC,IAAI,CAAC;IACP,MAAM,eAAe,GACnB,CAAC,MAAM,aAAa,CAAC,uBAAuB,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACpC,IAAI,CAAC;IACP,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,OAAO,SAAS;IACH,OAAO,CAAS;IAChB,UAAU,CAAkB;IAC5B,gBAAgB,CAAS;IACzB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,MAAM,CAAgC;IAC/C,WAAW,GAAa,EAAE,CAAC;IAC3B,UAAU,GAAkB,IAAI,CAAC;IAEzC,YAAY,IAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,IAAI,0BAA0B,CAAC;QAC3E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACpE,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,SAAS;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,IAAI;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpC,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,wDAAwD;YACxD,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAC1D,GAAG,EAAE,CAAC,IAAI,CACX,CAAyE,CAAC;YAC3E,MAAM,OAAO,GAAG,SAAS,EAAE,wBAAwB,CAAC;YACpD,MAAM,GAAG,GAAG,OAAO;gBACjB,CAAC,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;gBACjB,CAAC,CAAC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAC7B,GAAsD,CACvD,CAAC;YACF,MAAM,OAAO,GAAI,QAAwC,EAAE,OAAO,CAAC;YACnE,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,IAAI,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAC/F,CAAC;YACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,CAAC;IAEM,KAAK,CAAC,IAAI,CACf,UAAiC,EACjC,OAAmB;QAEnB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,WAAW,OAAO,CAAC,IAAI,oCAAoC;gBACpE,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,8BAA8B,UAAU,EAAE;gBACnD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG;gBACd,GAAG,OAAO,CAAC,KAAK;gBAChB,QAAQ,EAAE,OAAO,CAAC,IAAI;aACvB,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjB,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACtC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,EAAE,SAAS,CAAC,CACpE;aACF,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC;gBACjD,OAAO;gBACP,SAAS,EAAE,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAC9B,MAA0C;QAE1C,OAAO,IAAI,CAAC,IAAI,CAAoC,KAAK,EAAE;YACzD,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,MAAM,IAAI,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,OAAO,IAAI,CAAC,IAAI,CAA4B,UAAU,EAAE;YACtD,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,IAAY;QAEZ,OAAO,IAAI,CAAC,IAAI,CAA6B,UAAU,EAAE;YACvD,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,OAAO,IAAI,CAAC,IAAI,CAA4B,IAAI,EAAE;YAChD,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAG9B,OAAO,IAAI,CAAC,IAAI,CAAsC,QAAQ,EAAE;YAC9D,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,KAQhC;QACC,OAAO,IAAI,CAAC,IAAI,CAAkC,YAAY,EAAE;YAC9D,IAAI,EAAE,4BAA4B;YAClC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;CACF;AA0CD,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAE,GAAyB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC;QACrD,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC;YACzD,OAAO,YAAY,CAAC;QACtB,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,cAAc,CAAC;IACxD,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/connectors/aws/lib/aws_error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Bridges AwsClient's `{ok: false, code, ...}` result shape to the
+ * handler-throws-an-Error contract the factory expects.
+ */
+export declare class AwsSdkError extends Error {
+    readonly code: string;
+    readonly retriable: boolean;
+    constructor(code: string, message: string, retriable: boolean);
+}
+//# sourceMappingURL=aws_error.d.ts.map

package/dist/connectors/aws/lib/aws_error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_error.d.ts","sourceRoot":"","sources":["../../../../src/connectors/aws/lib/aws_error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;CAM9D"}

package/dist/connectors/aws/lib/aws_error.js

@@ -0,0 +1,15 @@
+/**
+ * Bridges AwsClient's `{ok: false, code, ...}` result shape to the
+ * handler-throws-an-Error contract the factory expects.
+ */
+export class AwsSdkError extends Error {
+    code;
+    retriable;
+    constructor(code, message, retriable) {
+        super(message);
+        this.name = "AwsSdkError";
+        this.code = code;
+        this.retriable = retriable;
+    }
+}
+//# sourceMappingURL=aws_error.js.map

package/dist/connectors/aws/lib/aws_error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_error.js","sourceRoot":"","sources":["../../../../src/connectors/aws/lib/aws_error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACb,SAAS,CAAU;IAE5B,YAAY,IAAY,EAAE,OAAe,EAAE,SAAkB;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}

package/dist/connectors/confluence/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/connectors/confluence/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/connectors/confluence/cli.ts"],"names":[],"mappings":""}

package/dist/connectors/confluence/cli.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+/**
+ * Thin bin entry. Library code lives in index.ts.
+ *
+ * Reads `~/.connectors/config.yaml` (or `NARAI_CONFIG_BLOB`, when injected
+ * by `@narai/connector-hub`) before `main()` runs and applies any configured
+ * Confluence site / email / api token to `process.env`. Existing exports
+ * win — the bootstrap only fills in undefined entries.
+ */
+import { loadConnectorEnvironment } from "narai-primitives/config";
+import connector from "./index.js";
+const CONFLUENCE_ENV_MAPPING = {
+    site_url: "CONFLUENCE_SITE_URL",
+    email: "CONFLUENCE_EMAIL",
+    api_token: "CONFLUENCE_API_TOKEN",
+};
+async function run() {
+    await loadConnectorEnvironment("confluence", { envMapping: CONFLUENCE_ENV_MAPPING });
+    return connector.main(process.argv.slice(2));
+}
+void run().then((code) => {
+    process.exit(code);
+});
+//# sourceMappingURL=cli.js.map

package/dist/connectors/confluence/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/connectors/confluence/cli.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,sBAAsB,GAA2B;IACrD,QAAQ,EAAE,qBAAqB;IAC/B,KAAK,EAAE,kBAAkB;IACzB,SAAS,EAAE,sBAAsB;CAClC,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,wBAAwB,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACrF,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/connectors/confluence/index.d.ts

@@ -0,0 +1,15 @@
+import { type Connector } from "narai-primitives/toolkit";
+import { ConfluenceClient } from "./lib/confluence_client.js";
+export interface BuildOptions {
+    /** Inject a custom Confluence client (tests). */
+    sdk?: () => Promise<ConfluenceClient>;
+    /** Override credentials loader (tests). */
+    credentials?: () => Promise<Record<string, unknown>>;
+}
+export declare function buildConfluenceConnector(overrides?: BuildOptions): Connector;
+declare const connector: Connector;
+export default connector;
+export declare const main: (argv: readonly string[]) => Promise<number>, fetch: (action: string, params: unknown) => Promise<import("narai-primitives/toolkit").Envelope>, validActions: ReadonlySet<string>;
+export { ConfluenceClient, loadConfluenceCredentials, type ConfluenceClientOptions, type ConfluenceResult, } from "./lib/confluence_client.js";
+export { ConfluenceError } from "./lib/confluence_error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/confluence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/confluence/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,gBAAgB,EAGjB,MAAM,4BAA4B,CAAC;AA2FpC,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED,wBAAgB,wBAAwB,CACtC,SAAS,GAAE,YAAiB,GAC3B,SAAS,CAqOX;AAGD,QAAA,MAAM,SAAS,WAA6B,CAAC;AAC7C,eAAe,SAAS,CAAC;AACzB,eAAO,MAAQ,IAAI,gDAAE,KAAK,6FAAE,YAAY,qBAAc,CAAC;AAGvD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC"}