velocious 1.0.576 → 1.0.577

package/build/deployment-api/sanitize.js

@@ -1,114 +0,0 @@
-// @ts-check
-
-const MAX_STRING_LENGTH = 4000
-const MAX_DEPTH = 20
-const REDACTED = "[redacted]"
-
-/**
- * Replaces every occurrence of each configured secret in a string so tokens
- * never leak into persisted run state, audit payloads, or API responses.
- * @param {string} value - Raw string.
- * @param {string[]} secrets - Secret values to redact.
- * @returns {string} - Redacted string.
- */
-function redactString(value, secrets) {
-  let result = value
-
-  for (const secret of secrets) {
-    if (secret.length > 0) result = result.split(secret).join(REDACTED)
-  }
-
-  if (result.length > MAX_STRING_LENGTH) {
-    result = `${result.slice(0, MAX_STRING_LENGTH)}…`
-  }
-
-  return result
-}
-
-/**
- * Converts an integration-owned value (adapter report, live status, audit
- * payload fragment) into a bounded JSON-safe structure: plain objects, arrays,
- * strings, finite numbers, booleans, and null survive; everything else
- * (functions, class instances, undefined) is dropped. String values and object
- * keys are redacted and capped in length; deterministic suffixes preserve every
- * value when redacted keys collide.
- * @param {?} value - Raw value from the integration.
- * @param {string[]} secrets - Secret values to redact.
- * @param {number} [depth] - Current recursion depth.
- * @returns {?} - JSON-safe redacted value, or undefined when the value cannot be represented.
- */
-export function sanitizeAdapterValue(value, secrets, depth = 0) {
-  if (value === null) return null
-  if (depth > MAX_DEPTH) return undefined
-
-  const valueType = typeof value
-
-  if (valueType === "string") return redactString(value, secrets)
-  if (valueType === "number") return Number.isFinite(value) ? value : null
-  if (valueType === "boolean") return value
-
-  if (Array.isArray(value)) {
-    /** @type {Array<?>} */
-    const result = []
-
-    for (const entry of value) {
-      const sanitized = sanitizeAdapterValue(entry, secrets, depth + 1)
-
-      if (sanitized !== undefined) result.push(sanitized)
-    }
-
-    return result
-  }
-
-  if (valueType === "object") {
-    const prototype = Object.getPrototypeOf(value)
-
-    if (prototype !== Object.prototype && prototype !== null) return undefined
-
-    /** @type {Record<string, ?>} */
-    const result = {}
-
-    for (const [key, entry] of Object.entries(value)) {
-      const sanitized = sanitizeAdapterValue(entry, secrets, depth + 1)
-
-      if (sanitized === undefined) continue
-
-      const redactedKey = redactString(key, secrets)
-      let availableKey = redactedKey
-      let collisionNumber = 2
-
-      while (Object.hasOwn(result, availableKey)) {
-        availableKey = `${redactedKey}#${collisionNumber}`
-        collisionNumber++
-      }
-
-      Object.defineProperty(result, availableKey, {
-        configurable: true,
-        enumerable: true,
-        value: sanitized,
-        writable: true
-      })
-    }
-
-    return result
-  }
-
-  return undefined
-}
-
-/**
- * Builds the sanitized failure payload persisted for a failed run. The message
- * is redacted; an integration-provided plain-object `error.recovery` (e.g.
- * Rampway reporting restoration of the previous release) is included after
- * sanitization.
- * @param {?} error - Thrown error from the adapter.
- * @param {string[]} secrets - Secret values to redact.
- * @returns {{message: string, recovery: (? | undefined)}} - Sanitized failure payload.
- */
-export function sanitizeErrorPayload(error, secrets) {
-  const rawMessage = error instanceof Error ? error.message : String(error)
-  const rawRecovery = error instanceof Error ? /** @type {Record<string, ?>} */ (error).recovery : undefined
-  const recovery = sanitizeAdapterValue(rawRecovery, secrets)
-
-  return {message: redactString(rawMessage, secrets), recovery}
-}

package/build/src/deployment-api/controller.d.ts

@@ -1,117 +0,0 @@
-/**
- * Authenticated HTTP API for callable deployments. Mounted by
- * {@link import("./index.js").default} as a route-resolver hook so it can ship
- * inside the velocious package. Every action is gated by a bearer-token check
- * against the configured access tokens; the API exposes only allowlisted
- * project/stage pairs and full immutable revisions, and delegates all
- * execution to the configured adapter. It never accepts commands, paths,
- * arbitrary refs, environment variables, or raw log output.
- */
-export default class VelociousDeploymentApiController extends Controller {
-    /**
-     * Runs mount options.
-     * @returns {import("./registry.js").DeploymentMountOptions} - Options for the mount that matched this request.
-     */
-    _mountOptions(): import("./registry.js").DeploymentMountOptions;
-    /**
-     * Runs store.
-     * @returns {DeploymentRunStore} - Run store scoped to the mount's database.
-     */
-    _store(): DeploymentRunStore;
-    _deploymentRunStore: DeploymentRunStore | undefined;
-    /**
-     * Reports one internally consumed framework failure on both documented
-     * error channels so framework-specific and unified reporters see the same
-     * payload.
-     * @param {object} args - Options.
-     * @param {string} args.context - Deployment API failure context.
-     * @param {?} args.error - Consumed error.
-     * @returns {void} - No return value.
-     */
-    _emitFrameworkError({ context, error }: {
-        context: string;
-        error: unknown;
-    }): void;
-    /**
-     * Authorizes the request with a constant-time bearer-token comparison and
-     * runs the action body only when authorized. Renders a 401 otherwise. The
-     * base controller has no before-action halting, so authorization is enforced
-     * here per action. Tokens are only accepted through the Authorization header
-     * — never through URLs — and are never rendered back.
-     * @param {() => Promise<void>} actionFn - Action body.
-     * @returns {Promise<void>} - Resolves when complete.
-     */
-    _respond(actionFn: () => Promise<void>): Promise<void>;
-    /**
-     * Creates a deployment run for an allowlisted project/stage and a full
-     * immutable revision reachable from the approved release branch. Idempotent:
-     * a retried idempotency key reads the original run, a reused key with a
-     * different payload conflicts, and an active run for the same project/stage
-     * returns a bounded conflict.
-     * @returns {Promise<void>} - Resolves when complete.
-     */
-    create(): Promise<void>;
-    /**
-     * Renders a previously created run for an idempotency-key hit: a replay when
-     * the payload matches, a bounded conflict when it doesn't.
-     * @param {object} args - Options.
-     * @param {import("./run-store.js").DeploymentRunRow} args.existingRun - The stored run.
-     * @param {string} args.project - Requested project.
-     * @param {string} args.revision - Requested revision.
-     * @param {string} args.stage - Requested stage.
-     * @returns {Promise<void>} - Resolves when complete.
-     */
-    _renderExistingRun({ existingRun, project, revision, stage }: {
-        existingRun: import("./run-store.js").DeploymentRunRow;
-        project: string;
-        revision: string;
-        stage: string;
-    }): Promise<void>;
-    /**
-     * Returns the bounded state of a single run, enriched with the adapter's
-     * live status when the integration provides one.
-     * @returns {Promise<void>} - Resolves when complete.
-     */
-    show(): Promise<void>;
-    /**
-     * Executes a created run asynchronously: registers it as active in this
-     * process, marks it running, heartbeats its ownership lease while the
-     * adapter deploys, and records the sanitized outcome. A deployment failure
-     * is an expected operational result — it is persisted with its sanitized
-     * recovery information instead of being raised, so it stays visible through
-     * readback and audit rather than crashing the worker.
-     * @param {object} args - Options.
-     * @param {import("./registry.js").DeploymentMountOptions} args.options - Mount options.
-     * @param {import("./run-store.js").DeploymentRunRow} args.run - The created run.
-     * @returns {Promise<void>} - Resolves when the outcome is recorded.
-     */
-    _executeRun({ options, run }: {
-        options: import("./registry.js").DeploymentMountOptions;
-        run: import("./run-store.js").DeploymentRunRow;
-    }): Promise<void>;
-    /**
-     * Records a sanitized audit event. Audit persistence must never strand or
-     * suppress a deployment, so a failure here is reported on the
-     * framework-error and unified all-error channels (where process-level bug
-     * reporters capture it), and execution continues.
-     * @param {object} args - Options.
-     * @param {string} args.event - Event name.
-     * @param {Record<string, ?>} args.payload - Payload; sanitized and redacted before persistence.
-     * @param {string | null} args.runId - Owning run id.
-     * @returns {Promise<void>} - Resolves when recorded or reported.
-     */
-    _audit({ event, payload, runId }: {
-        event: string;
-        payload: Record<string, unknown>;
-        runId: string | null;
-    }): Promise<void>;
-    /**
-     * Serializes a run for the API.
-     * @param {import("./run-store.js").DeploymentRunRow} run - Run row.
-     * @returns {Record<string, ?>} - Serialized run.
-     */
-    _serializeRun(run: import("./run-store.js").DeploymentRunRow): Record<string, unknown>;
-}
-import Controller from "../controller.js";
-import DeploymentRunStore from "./run-store.js";
-//# sourceMappingURL=controller.d.ts.map

package/build/src/deployment-api/controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/deployment-api/controller.js"],"names":[],"mappings":"AA+BA;;;;;;;;GAQG;AACH;IACE;;;OAGG;IACH,iBAFa,OAAO,eAAe,EAAE,sBAAsB,CAS1D;IAED;;;OAGG;IACH,UAFa,kBAAkB,CAa9B;IATG,oDAKE;IAMN;;;;;;;;OAQG;IACH,wCAJG;QAAqB,OAAO,EAApB,MAAM;QACE,KAAK,EAAb,OAAC;KACT,GAAU,IAAI,CAQhB;IAED;;;;;;;;OAQG;IACH,mBAHW,MAAM,OAAO,CAAC,IAAI,CAAC,GACjB,OAAO,CAAC,IAAI,CAAC,CAqBzB;IAED;;;;;;;OAOG;IACH,UAFa,OAAO,CAAC,IAAI,CAAC,CAsGzB;IAED;;;;;;;;;OASG;IACH,8DANG;QAAwD,WAAW,EAA3D,OAAO,gBAAgB,EAAE,gBAAgB;QAC5B,OAAO,EAApB,MAAM;QACO,QAAQ,EAArB,MAAM;QACO,KAAK,EAAlB,MAAM;KACd,GAAU,OAAO,CAAC,IAAI,CAAC,CAWzB;IAED;;;;OAIG;IACH,QAFa,OAAO,CAAC,IAAI,CAAC,CA2BzB;IAED;;;;;;;;;;;OAWG;IACH,8BAJG;QAA6D,OAAO,EAA5D,OAAO,eAAe,EAAE,sBAAsB;QACE,GAAG,EAAnD,OAAO,gBAAgB,EAAE,gBAAgB;KACjD,GAAU,OAAO,CAAC,IAAI,CAAC,CAsGzB;IAED;;;;;;;;;;OAUG;IACH,kCALG;QAAqB,KAAK,EAAlB,MAAM;QACkB,OAAO,EAA/B,MAAM,CAAC,MAAM,EAAE,OAAC,CAAC;QACG,KAAK,EAAzB,MAAM,GAAG,IAAI;KACrB,GAAU,OAAO,CAAC,IAAI,CAAC,CAUzB;IAED;;;;OAIG;IACH,mBAHW,OAAO,gBAAgB,EAAE,gBAAgB,GACvC,MAAM,CAAC,MAAM,EAAE,OAAC,CAAC,CAgB7B;CACF;uBAlbsB,kBAAkB;+BACoD,gBAAgB"}