poe-code 4.0.23 → 4.0.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "poe-code",
-  "version": "4.0.23",
+  "version": "4.0.24",
   "description": "CLI tool to configure Poe API for developer workflows.",
   "license": "MIT",
   "type": "module",

package/packages/toolcraft/dist/http-hosted-oauth.d.ts

@@ -31,6 +31,7 @@ export interface HostedOAuthStorage<TCredential = unknown> {
     capabilities: HostedOAuthStorageCapabilities;
     signingKey(): Promise<OAuthAuthorizationServerSigningKey>;
     resolveSubject(providerName: string, accountId: string): Promise<string>;
+    healthCheck?(): Promise<void>;
     cleanup?(now?: number): Promise<void>;
 }
 export interface HostedOAuthCredentialAccess<TCredential = unknown> {

package/packages/toolcraft/dist/http-hosted-oauth.js

@@ -217,8 +217,21 @@ export async function prepareHostedOAuthRuntime(config) {
     const requestHandler = async (request, response) => {
         const url = new URL(request.url ?? "/", prepared.issuer);
         if (request.method === "GET" && url.pathname === "/healthz") {
-            response.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
-            response.end('{"ok":true}');
+            try {
+                await config.storage.healthCheck?.();
+                response.writeHead(200, {
+                    "content-type": "application/json",
+                    "cache-control": "no-store"
+                });
+                response.end('{"ok":true}');
+            }
+            catch {
+                response.writeHead(503, {
+                    "content-type": "application/json",
+                    "cache-control": "no-store"
+                });
+                response.end('{"ok":false}');
+            }
             return true;
         }
         if (customInteraction?.paths.includes(url.pathname) === true) {
@@ -227,11 +240,11 @@ export async function prepareHostedOAuthRuntime(config) {
                 request: toWebRequest(request, prepared.issuer, body),
                 async complete({ transactionId, accountId, credential }) {
                     const subject = await config.storage.resolveSubject(config.provider.name, accountId);
+                    await config.storage.credentials.set(subject, credential);
                     const completed = await authorizationServer.completeAuthorization({
                         transactionId,
                         subject
                     });
-                    await config.storage.credentials.set(subject, credential);
                     await config.storage.interactions.delete(transactionId);
                     return new Response(null, {
                         status: 303,
@@ -281,11 +294,11 @@ export async function prepareHostedOAuthRuntime(config) {
                 if (connected.accountId.trim().length === 0)
                     throw new Error("Provider returned an empty accountId.");
                 const subject = await config.storage.resolveSubject(config.provider.name, connected.accountId);
+                await config.storage.credentials.set(subject, connected.credential);
                 const completed = await authorizationServer.completeAuthorization({
                     transactionId,
                     subject
                 });
-                await config.storage.credentials.set(subject, connected.credential);
                 await config.storage.interactions.delete(transactionId);
                 response.writeHead(303, {
                     location: completed.redirectUrl.href,