tapimo 0.0.0 → 0.0.2

package/dist/Webhooks.js

@@ -0,0 +1,107 @@
+import * as AppWebhooks from './apps/webhooks.js';
+import * as MetricSink from './internal/MetricSink.js';
+import * as Tidx from './internal/Tidx.js';
+import * as Viem from './internal/Viem.js';
+// Re-export the runtime-agnostic primitives (subscriptions, signing, delivery,
+// `deliverAndRecord`, cursors, …) so consumers reach everything through one
+// `Webhooks` namespace. The apps-layer poller stays private behind
+// `createPoller` below.
+export * from './internal/Webhooks.js';
+// Re-export the webhook resource's zod schemas so consumers can validate and
+// type delivery bodies: `Webhooks.schema.Envelope` (a discriminated union on
+// `type`), plus the per-event `TransferEvent` / `TransactionEvent` / `PingEvent`
+// payloads. Infer a type with `z.infer<typeof Webhooks.schema.Envelope>`.
+export { eventTypes, schema } from './apps/webhooks.js';
+/**
+ * Builds a scheduled webhook poller bound to a state store and chain config.
+ *
+ * This is the entry point a host runtime drives on a timer (a Cloudflare
+ * `scheduled` cron handler, a self-host `setInterval`, …). Each {@link
+ * Poller.tick} scans active subscriptions from their cursors up to `head -
+ * confirmations` and dispatches matching events.
+ *
+ * The monitoring event types (`log:emitted`, `block:created`,
+ * `transaction:included`) scan a confirmed window directly over JSON-RPC, so the
+ * poller builds memoized viem clients (via {@link Viem.getClient}); the legacy
+ * `token:transfer` type still reads from TIDX, so it
+ * also builds memoized TIDX clients (via {@link Tidx.createGetClient}) when a
+ * `tidx` config is supplied. The poller keeps `App.create` a pure Hono app: it
+ * constructs its own clients instead of reaching into app internals, and owns no
+ * request state.
+ */
+export function createPoller(options) {
+    const { store } = options.webhook;
+    const getTidx = options.tidx
+        ? Tidx.createGetClient({ defaultChainId: options.defaultChainId, tidx: options.tidx })
+        : undefined;
+    const clients = new Map();
+    const getClient = (chainId) => {
+        let client = clients.get(chainId);
+        if (!client) {
+            client = Viem.getClient({ chainId, rpc: options.rpc });
+            clients.set(chainId, client);
+        }
+        return client;
+    };
+    const metrics = options.metrics ? MetricSink.webhooks(options.metrics) : undefined;
+    return {
+        async tick(input = {}) {
+            const chainId = input.chainId ?? options.defaultChainId ?? Viem.defaultChainId;
+            // Wrap the transport so each enqueue (or inline delivery) emits a timed
+            // `webhook:enqueue` metric. The wrapper preserves the dispatch contract: it
+            // returns the underlying result unchanged and is a no-op when no metrics
+            // backend is configured.
+            const inner = input.dispatch ?? options.dispatch;
+            const dispatch = metrics && inner
+                ? async (dispatchable) => {
+                    const start = Date.now();
+                    const result = await inner(dispatchable);
+                    metrics.record({
+                        chainId: dispatchable.envelope.chainId,
+                        durationMs: Date.now() - start,
+                        eventType: dispatchable.envelope.type,
+                        ok: result.ok,
+                        type: 'webhook:enqueue',
+                    });
+                    return result;
+                }
+                : inner;
+            const start = Date.now();
+            try {
+                const result = await AppWebhooks.poll({
+                    batchSize: input.batchSize ?? options.batchSize,
+                    chainId,
+                    client: getClient(chainId),
+                    confirmations: input.confirmations ?? options.confirmations,
+                    dispatch,
+                    eventTypes: input.eventTypes ?? options.eventTypes,
+                    ...(input.headBlockNumber === undefined
+                        ? {}
+                        : { headBlockNumber: input.headBlockNumber }),
+                    maxBlocks: input.maxBlocks ?? options.maxBlocks,
+                    now: input.now ?? options.now,
+                    store,
+                    ...(getTidx ? { tidx: getTidx(chainId) } : {}),
+                });
+                metrics?.record({
+                    meta: { durationMs: Date.now() - start, outcome: 'ok' },
+                    result,
+                    type: 'webhook:tick',
+                });
+                return result;
+            }
+            catch (error) {
+                metrics?.record({
+                    meta: { chainId, durationMs: Date.now() - start, outcome: 'error' },
+                    result: undefined,
+                    type: 'webhook:tick',
+                });
+                throw error;
+            }
+            finally {
+                metrics?.flush();
+            }
+        },
+    };
+}
+//# sourceMappingURL=Webhooks.js.map

package/dist/Webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Webhooks.js","sourceRoot":"","sources":["../src/Webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,UAAU,MAAM,0BAA0B,CAAA;AAGtD,OAAO,KAAK,IAAI,MAAM,oBAAoB,CAAA;AAC1C,OAAO,KAAK,IAAI,MAAM,oBAAoB,CAAA;AAE1C,+EAA+E;AAC/E,4EAA4E;AAC5E,mEAAmE;AACnE,wBAAwB;AACxB,cAAc,wBAAwB,CAAA;AAEtC,6EAA6E;AAC7E,6EAA6E;AAC7E,iFAAiF;AACjF,0EAA0E;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI;QAC1B,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACtF,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqC,CAAA;IAC5D,MAAM,SAAS,GAAG,CAAC,OAAqB,EAAE,EAAE;QAC1C,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YACtD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAElF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAA;YAE9E,wEAAwE;YACxE,4EAA4E;YAC5E,yEAAyE;YACzE,yBAAyB;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;YAChD,MAAM,QAAQ,GACZ,OAAO,IAAI,KAAK;gBACd,CAAC,CAAC,KAAK,EAAE,YAA2C,EAAE,EAAE;oBACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBACxB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;oBACxC,OAAO,CAAC,MAAM,CAAC;wBACb,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO;wBACtC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC9B,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI;wBACrC,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,IAAI,EAAE,iBAAiB;qBACxB,CAAC,CAAA;oBACF,OAAO,MAAM,CAAA;gBACf,CAAC;gBACH,CAAC,CAAC,KAAK,CAAA;YAEX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;oBACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;oBAC/C,OAAO;oBACP,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;oBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa;oBAC3D,QAAQ;oBACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;oBAClD,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC/C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;oBAC/C,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;oBAC7B,KAAK;oBACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/C,CAAC,CAAA;gBACF,OAAO,EAAE,MAAM,CAAC;oBACd,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;oBACvD,MAAM;oBACN,IAAI,EAAE,cAAc;iBACrB,CAAC,CAAA;gBACF,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,CAAC;oBACd,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;oBACnE,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,cAAc;iBACrB,CAAC,CAAA;gBACF,MAAM,KAAK,CAAA;YACb,CAAC;oBAAS,CAAC;gBACT,OAAO,EAAE,KAAK,EAAE,CAAA;YAClB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/admin/Access.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The default {@link App.create.Options.identify} hook: verifies a Cloudflare
+ * Access JWT in-worker, so a request sent directly to the worker URL (bypassing
+ * the edge gate) still can't reach the admin routes (defense in depth).
+ *
+ * The only admin module that imports `jose`, keeping that dependency out of the
+ * IdP-agnostic core. Self-hosters not on Access supply their own `identify`.
+ */
+import type * as App from './App.js';
+/**
+ * Builds an {@link App.create.Options.identify} hook that verifies the Cloudflare
+ * Access JWT against the team-domain JWKS (fetched lazily, cached by `jose`). Any
+ * verification failure resolves to `null` (deny) rather than throwing.
+ *
+ * Verifies the signature and issuer (the team domain). The audience (`aud`) is
+ * not checked, so any token minted for any app in the team's org is accepted —
+ * fine when everyone with org access is trusted.
+ *
+ * @example
+ * ```ts
+ * import { App, Access } from 'tapimo/admin'
+ *
+ * const source = {} as App.create.Options['apiKey']['source']
+ *
+ * App.create({
+ *   apiKey: { source },
+ *   identify: Access.cloudflareAccess({
+ *     teamDomain: 'https://tempo.cloudflareaccess.com',
+ *   }),
+ * })
+ * ```
+ */
+export declare function cloudflareAccess(options: cloudflareAccess.Options): (request: Request) => Promise<App.Identity | null>;
+export declare namespace cloudflareAccess {
+    /** Options for {@link cloudflareAccess}. */
+    type Options = {
+        /** Team domain (e.g. `https://<team>.cloudflareaccess.com`); the token issuer and JWKS host. */
+        teamDomain: string;
+    };
+}
+//# sourceMappingURL=Access.d.ts.map

package/dist/admin/Access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Access.d.ts","sourceRoot":"","sources":["../../src/admin/Access.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,KAAK,GAAG,MAAM,UAAU,CAAA;AAOpC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,CAAC,OAAO,GAChC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,CAmBpD;AAED,MAAM,CAAC,OAAO,WAAW,gBAAgB,CAAC;IACxC,4CAA4C;IAC5C,KAAK,OAAO,GAAG;QACb,gGAAgG;QAChG,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;CACF"}

package/dist/admin/Access.js

@@ -0,0 +1,75 @@
+/**
+ * The default {@link App.create.Options.identify} hook: verifies a Cloudflare
+ * Access JWT in-worker, so a request sent directly to the worker URL (bypassing
+ * the edge gate) still can't reach the admin routes (defense in depth).
+ *
+ * The only admin module that imports `jose`, keeping that dependency out of the
+ * IdP-agnostic core. Self-hosters not on Access supply their own `identify`.
+ */
+import * as jose from 'jose';
+/** Header Cloudflare Access sets with the signed identity assertion (a JWT). */
+const headerName = 'cf-access-jwt-assertion';
+/** Cookie Cloudflare Access sets as a fallback carrier for the same JWT. */
+const cookieName = 'CF_Authorization';
+/**
+ * Builds an {@link App.create.Options.identify} hook that verifies the Cloudflare
+ * Access JWT against the team-domain JWKS (fetched lazily, cached by `jose`). Any
+ * verification failure resolves to `null` (deny) rather than throwing.
+ *
+ * Verifies the signature and issuer (the team domain). The audience (`aud`) is
+ * not checked, so any token minted for any app in the team's org is accepted —
+ * fine when everyone with org access is trusted.
+ *
+ * @example
+ * ```ts
+ * import { App, Access } from 'tapimo/admin'
+ *
+ * const source = {} as App.create.Options['apiKey']['source']
+ *
+ * App.create({
+ *   apiKey: { source },
+ *   identify: Access.cloudflareAccess({
+ *     teamDomain: 'https://tempo.cloudflareaccess.com',
+ *   }),
+ * })
+ * ```
+ */
+export function cloudflareAccess(options) {
+    const { teamDomain } = options;
+    // Created once and reused: `jose` caches keys and refetches on unknown `kid`.
+    const issuer = teamDomain.replace(/\/+$/, '');
+    const jwks = jose.createRemoteJWKSet(new URL(`${issuer}/cdn-cgi/access/certs`));
+    return async (request) => {
+        const token = readToken(request);
+        if (!token)
+            return null;
+        try {
+            const { payload } = await jose.jwtVerify(token, jwks, { issuer });
+            const email = payload['email'];
+            return typeof email === 'string' && email ? { email } : null;
+        }
+        catch {
+            // Any verification failure is a denial, not an error to surface.
+            return null;
+        }
+    };
+}
+/**
+ * Extracts the Access JWT: the `Cf-Access-Jwt-Assertion` header, falling back to
+ * the `CF_Authorization` cookie. Returns `undefined` when neither is present.
+ */
+function readToken(request) {
+    const header = request.headers.get(headerName);
+    if (header)
+        return header;
+    const cookie = request.headers.get('cookie');
+    if (!cookie)
+        return undefined;
+    for (const part of cookie.split(';')) {
+        const [name, ...rest] = part.trim().split('=');
+        if (name === cookieName && rest.length)
+            return rest.join('=');
+    }
+    return undefined;
+}
+//# sourceMappingURL=Access.js.map

package/dist/admin/Access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Access.js","sourceRoot":"","sources":["../../src/admin/Access.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAI5B,gFAAgF;AAChF,MAAM,UAAU,GAAG,yBAAyB,CAAA;AAC5C,4EAA4E;AAC5E,MAAM,UAAU,GAAG,kBAAkB,CAAA;AAErC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAiC;IAEjC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAE9B,8EAA8E;IAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAA;IAE/E,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;YAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAUD;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}