@aventara/nest 1.0.0-rc.10 → 1.0.0-rc.11

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @aventara/nest
 
+## 1.0.0-rc.11
+
+### Patch Changes
+
+- e0e89c1: `POST {api}/_all` now streams when the client asks for it: the hosts forward `Accept`, so with
+  `application/x-ndjson` each entry's line is written as it settles (Nest on Express and Fastify writes it to the response,
+  flushed through `compression` when present; Next returns a `ReadableStream`), and plain JSON stays the answer otherwise.
+  When the client disconnects, the set stops: entries not yet started never start.
+- 186bc29: `POST {api}/_all` is mounted with the other protocol routes and answered by the binding's `handleAll`.
+- 33b5f83: The hosts hand the request URL's query to the protocol, so a cached read's `GET` (a read with a `cache({ for, maxAge })` stage)
+  is mounted and answered like every other route in `protocol.surface()`, on Express, Fastify and Next.js.
+- bedab57: A cached read's `Vary` joins the `Vary` the platform already set instead of replacing it. With `enableCors()` on, a
+  `for: "anonymous"` or `"user"` answer carries `Vary: Origin, Authorization, Cookie` on Express and Fastify, where it
+  carried only `Vary: Authorization, Cookie` and dropped CORS's `Vary: Origin`, so a CDN could serve one origin's
+  `Access-Control-Allow-Origin` to another. Each name appears once, compared without case, the platform's first.
+- Updated dependencies [6197c08]
+- Updated dependencies [e0e89c1]
+- Updated dependencies [186bc29]
+- Updated dependencies [33b5f83]
+- Updated dependencies [6d8b589]
+- Updated dependencies [11ece49]
+- Updated dependencies [92fd093]
+- Updated dependencies [e5e98e6]
+- Updated dependencies [a05d970]
+  - @aventara/core@1.0.0-rc.11
+  - @aventara/mcp@1.0.0-rc.11
+
 ## 1.0.0-rc.10
 
 ### Patch Changes

package/README.md

@@ -140,7 +140,7 @@ rest of `<api>/_*`. Nest's `RouterExplorer` does not list platform routes, so th
 own when it mounts them, through Nest's `Logger` (context `AventaraModule`; `logger: false` silences it like any other):
 
 ```text
-[Nest] LOG [AventaraModule] Aventara mounted 10 operations at /api (+ GET /api/_contract, POST /api/_transactions)
+[Nest] LOG [AventaraModule] Aventara mounted 10 operations at /api (+ GET /api/_contract, POST /api/_transactions, POST /api/_all)
 ```
 
 An internal failure (`A3000`–`A3004`, answered as a 500) is logged as one error line through Nest's `Logger`
@@ -245,7 +245,7 @@ It is an optional peer dependency: an application without `mcp` does not need it
 package refuses to start, naming it and the command, with the version filled in:
 
 ```text
-AventaraModule: the configuration has `mcp`, and the package that serves it, @aventara/mcp, is not installed. Install it at @aventara/core's exact version (npm install --save-exact @aventara/mcp@1.0.0-rc.10), or remove `mcp` from the configuration.
+AventaraModule: the configuration has `mcp`, and the package that serves it, @aventara/mcp, is not installed. Install it at @aventara/core's exact version (npm install --save-exact @aventara/mcp@1.0.0-rc.11), or remove `mcp` from the configuration.
 ```
  As for the protocol's routes, the module only mounts: the endpoint's body is read
 raw, the request's URL comes from the platform's `protocol` and `host` (set `trust proxy` on Express or `trustProxy` on

package/dist/express-protocol.mounter.js

@@ -1,4 +1,4 @@
-import { mcpRequest, NO_BYTES, pathnameOf, protocolRequest, writeAnswer, } from "./node-exchange.translator.js";
+import { disconnectOf, mcpRequest, NO_BYTES, pathnameOf, protocolRequest, writeAnswer, } from "./node-exchange.translator.js";
 import { MCP_ROUTES, PROTOCOL_ROUTES, } from "./protocol-route.table.js";
 import { readRequestBody, unreadBodyAnswer, } from "./request-body.reader.js";
 const REGISTER = { GET: "get", POST: "post", DELETE: "delete" };
@@ -27,7 +27,7 @@ export function createExpressProtocolHost(platform, binding, entrypoint, maxRequ
                 for (const method of route.methods) {
                     platform[REGISTER[method]](literalPath(route.path), exactly(route.path, async (request, response) => {
                         const body = bodyOf(request);
-                        writeAnswer(response, await answer(mcpRequest(request.method, request, request.originalUrl, request, body.kind === "read" ? body.content : NO_BYTES, request.socket.remoteAddress), state === undefined ? undefined : () => state(request)));
+                        await writeAnswer(response, await answer(mcpRequest(request.method, request, request.originalUrl, request, body.kind === "read" ? body.content : NO_BYTES, request.socket.remoteAddress), state === undefined ? undefined : () => state(request)));
                     }));
                 }
             }
@@ -35,8 +35,9 @@ export function createExpressProtocolHost(platform, binding, entrypoint, maxRequ
                 const answer = PROTOCOL_ROUTES[route.kind](binding);
                 platform[REGISTER[route.method]](literalPath(`${entrypoint}${route.path}`), async (request, response) => {
                     const body = bodyOf(request);
-                    writeAnswer(response, body.kind === "read"
-                        ? await answer(translated(request, entrypoint, body.content), state === undefined ? undefined : () => state(request))
+                    const disconnect = disconnectOf(response);
+                    await writeAnswer(response, body.kind === "read"
+                        ? await answer(translated(request, entrypoint, body.content), state === undefined ? undefined : () => state(request), disconnect)
                         : unreadBodyAnswer(binding, body));
                 });
             }
@@ -51,7 +52,7 @@ export function createExpressProtocolHost(platform, binding, entrypoint, maxRequ
                     handOn(next);
                     return;
                 }
-                writeAnswer(response, absent);
+                void writeAnswer(response, absent);
             });
         },
     };

package/dist/fastify-protocol.mounter.js

@@ -1,4 +1,4 @@
-import { mcpRequest, NO_BYTES, pathnameOf, protocolRequest, writeAnswer, } from "./node-exchange.translator.js";
+import { disconnectOf, mcpRequest, NO_BYTES, pathnameOf, protocolRequest, writeAnswer, } from "./node-exchange.translator.js";
 import { MCP_ROUTES, PROTOCOL_ROUTES } from "./protocol-route.table.js";
 import { readRequestBody, unreadBodyAnswer } from "./request-body.reader.js";
 const UNMATCHABLE = /\*|%(?:3A|2B|23|24|26|2C|2F|3B|3D|3F|40)/i;
@@ -37,7 +37,7 @@ export function createFastifyProtocolHost(platform, binding, entrypoint, maxRequ
                     exposeHeadRoute: false,
                     onRequest: async (request, reply) => {
                         const body = await readRequestBody(request.raw, undefined, mcp.maxRequestBytes);
-                        write(reply, await answer(mcpRequest(request.raw.method, request, request.raw.url, request.raw, body.kind === "read" ? body.content : NO_BYTES, request.raw.socket.remoteAddress), state === undefined ? undefined : () => state(request)));
+                        await write(reply, await answer(mcpRequest(request.raw.method, request, request.raw.url, request.raw, body.kind === "read" ? body.content : NO_BYTES, request.raw.socket.remoteAddress), state === undefined ? undefined : () => state(request)));
                         return reply;
                     },
                     handler: () => {
@@ -53,8 +53,9 @@ export function createFastifyProtocolHost(platform, binding, entrypoint, maxRequ
                     exposeHeadRoute: false,
                     onRequest: async (request, reply) => {
                         const body = await readRequestBody(request.raw, request.raw.headersDistinct["content-encoding"], maxRequestBytes);
-                        write(reply, body.kind === "read"
-                            ? await answer(translated(request, body.content), state === undefined ? undefined : () => state(request))
+                        const disconnect = disconnectOf(reply.raw);
+                        await write(reply, body.kind === "read"
+                            ? await answer(translated(request, body.content), state === undefined ? undefined : () => state(request), disconnect)
                             : unreadBodyAnswer(binding, body));
                         return reply;
                     },
@@ -72,7 +73,7 @@ export function createFastifyProtocolHost(platform, binding, entrypoint, maxRequ
                 if (absent === undefined) {
                     return undefined;
                 }
-                write(reply, absent);
+                await write(reply, absent);
                 return reply;
             });
         },
@@ -83,5 +84,5 @@ function literalPath(path) {
 }
 function write(reply, answer) {
     reply.hijack();
-    writeAnswer(reply.raw, answer, reply.getHeaders());
+    return writeAnswer(reply.raw, answer, reply.getHeaders());
 }

package/dist/node-exchange.translator.d.ts

@@ -1,11 +1,28 @@
-import type { AvProtocolRequest, AvProtocolResponse } from "@aventara/core/protocol";
+import type { AvProtocolRequest } from "@aventara/core/protocol";
 import type { McpRequest } from "./mcp-binding.loader.js";
+import type { RouteResponse } from "./protocol-route.table.js";
 export type NodeIncoming = AsyncIterable<Uint8Array> & {
     readonly headersDistinct: Readonly<Record<string, readonly string[]>>;
 };
 export type NodeOutgoing = {
     writeHead(status: number, headers: Readonly<Record<string, string | number | readonly string[]>>): unknown;
-    end(body: string): unknown;
+    end(body?: string): unknown;
+    /** A header already set on the response (Express's middleware sets its own here). */
+    getHeader(name: string): string | number | readonly string[] | undefined;
+    /** `false` when the socket's buffer is full: wait for `drain`. */
+    write(chunk: string): boolean;
+    once(event: "close" | "drain", listener: () => void): unknown;
+    removeListener(event: "close" | "drain", listener: () => void): unknown;
+    destroy(): unknown;
+    /** Sends the status line and headers now, before any body is written. */
+    flushHeaders(): void;
+    /** Whether the whole answer was handed to the socket. */
+    readonly writableFinished: boolean;
+    /** Whether the response was ended or the socket went away. */
+    readonly writableEnded: boolean;
+    readonly destroyed: boolean;
+    /** The `compression` middleware's: sends what it has compressed so far. */
+    flush?(): void;
 };
 /** Headers a platform's own hooks set on the reply before the protocol answered. */
 export type PlatformHeaders = Readonly<Record<string, string | number | readonly string[] | undefined>>;
@@ -13,16 +30,23 @@ export type PlatformHeaders = Readonly<Record<string, string | number | readonly
 export declare const NO_BYTES: Uint8Array<ArrayBuffer>;
 /** A request URL's raw pathname: the query is dropped and nothing is URL-decoded. */
 export declare function pathnameOf(url: string): string;
-/** The request as the protocol reads it: path relative to the entrypoint, distinct headers, raw body. */
+/** The request as the protocol reads it: path relative to the entrypoint, raw query, distinct headers, raw body. */
 export declare function protocolRequest(method: string, url: string, incoming: NodeIncoming, entrypoint: string, content: Uint8Array): AvProtocolRequest;
 /** The request as `@aventara/mcp` reads it: absolute URL, distinct headers, raw body, peer address. */
 export declare function mcpRequest(method: string, origin: {
     readonly protocol: string;
     readonly host: string;
 }, url: string, incoming: NodeIncoming, content: Uint8Array, remoteAddress: string | undefined): McpRequest;
+/** Aborted when the client goes away before the answer was written. */
+export declare function disconnectOf(response: NodeOutgoing): AbortSignal;
 /**
  * Writes the protocol's answer as it is. Headers the platform's hooks already
  * set (CORS, say) go beneath it; a protocol header of the same name, in any
- * case, wins.
+ * case, wins, except `Vary`: the protocol's names join the platform's
+ * (`mergedVary`), which Express holds on the response and Fastify hands in
+ * `beneath`. A streamed body (`/_all` under NDJSON) is piped: each line
+ * written as core yields it, and flushed through `compression` when that
+ * middleware wraps the response. Writing stops when the client goes away,
+ * and the lines are no longer pulled (`return()`).
  */
-export declare function writeAnswer(response: NodeOutgoing, answer: AvProtocolResponse, beneath?: PlatformHeaders): void;
+export declare function writeAnswer(response: NodeOutgoing, answer: RouteResponse, beneath?: PlatformHeaders): Promise<void>;

package/dist/node-exchange.translator.js

@@ -3,10 +3,15 @@ export function pathnameOf(url) {
     const query = url.indexOf("?");
     return query === -1 ? url : url.slice(0, query);
 }
+function queryOf(url) {
+    const query = url.indexOf("?");
+    return query === -1 ? "" : url.slice(query + 1);
+}
 export function protocolRequest(method, url, incoming, entrypoint, content) {
     return {
         method,
         path: pathnameOf(url).slice(entrypoint.length),
+        query: queryOf(url),
         headers: incoming.headersDistinct,
         body: { kind: "raw", content },
     };
@@ -20,7 +25,35 @@ export function mcpRequest(method, origin, url, incoming, content, remoteAddress
         remoteAddress,
     };
 }
-export function writeAnswer(response, answer, beneath = {}) {
+export function disconnectOf(response) {
+    const disconnect = new AbortController();
+    response.once("close", () => {
+        if (!response.writableFinished) {
+            disconnect.abort();
+        }
+    });
+    return disconnect.signal;
+}
+function textOf(value) {
+    return value === undefined
+        ? ""
+        : typeof value === "object"
+            ? value.join(", ")
+            : String(value);
+}
+function mergedVary(lists) {
+    const names = new Map();
+    for (const list of lists) {
+        for (const name of list.split(",")) {
+            const trimmed = name.trim();
+            if (trimmed !== "" && !names.has(trimmed.toLowerCase())) {
+                names.set(trimmed.toLowerCase(), trimmed);
+            }
+        }
+    }
+    return names.has("*") ? "*" : [...names.values()].join(", ");
+}
+export async function writeAnswer(response, answer, beneath = {}) {
     const own = new Set(Object.keys(answer.headers).map((name) => name.toLowerCase()));
     const headers = {};
     for (const [name, value] of Object.entries(beneath)) {
@@ -28,6 +61,52 @@ export function writeAnswer(response, answer, beneath = {}) {
             headers[name] = value;
         }
     }
-    response.writeHead(answer.status, { ...headers, ...answer.headers });
-    response.end(answer.body);
+    const written = {
+        ...headers,
+        ...answer.headers,
+    };
+    const vary = Object.keys(answer.headers).find((name) => name.toLowerCase() === "vary");
+    if (vary !== undefined) {
+        const platform = Object.entries(beneath).flatMap(([name, value]) => name.toLowerCase() === "vary" ? [textOf(value)] : []);
+        written[vary] = mergedVary([
+            textOf(response.getHeader("vary")),
+            ...platform,
+            textOf(answer.headers[vary]),
+        ]);
+    }
+    response.writeHead(answer.status, written);
+    if (typeof answer.body === "string") {
+        response.end(answer.body);
+        return;
+    }
+    response.flushHeaders();
+    try {
+        for await (const line of answer.body) {
+            if (response.destroyed || response.writableEnded) {
+                break;
+            }
+            if (!response.write(line)) {
+                await drained(response);
+            }
+            response.flush?.();
+        }
+    }
+    catch {
+        response.destroy();
+        return;
+    }
+    if (!response.destroyed) {
+        response.end();
+    }
+}
+function drained(response) {
+    return new Promise((resolve) => {
+        const done = () => {
+            response.removeListener("drain", done);
+            response.removeListener("close", done);
+            resolve();
+        };
+        response.once("drain", done);
+        response.once("close", done);
+    });
 }

package/dist/protocol-route.table.d.ts

@@ -5,8 +5,12 @@ import type { McpBinding, McpRequest, McpRoute } from "./mcp-binding.loader.js";
 export type SurfaceRoute = ReturnType<AvProtocolBinding["surface"]>[number];
 /** The developer's `state` option over one platform request: seeds its `ctx.$state`. */
 type StateSeed = () => AvState | Promise<AvState>;
+/** An answer a route writes: the protocol's, its body text or, for a streamed `/_all`, lines as they settle. */
+export type RouteResponse = Awaited<ReturnType<AvProtocolBinding["handleAll"]>>;
 /** What a mounted route answers its request with: a bound protocol member. */
-export type RouteAnswer = (request: AvProtocolRequest, state: StateSeed | undefined) => AvProtocolResponse | Promise<AvProtocolResponse>;
+export type RouteAnswer = (request: AvProtocolRequest, state: StateSeed | undefined, 
+/** Aborted when the client goes away; only `/_all` reads it. */
+disconnect: AbortSignal) => RouteResponse | Promise<RouteResponse>;
 /** The bound member each kind of surface route is answered by. */
 export type ProtocolRouteTable = {
     readonly [K in SurfaceRoute["kind"]]: (binding: AvProtocolBinding) => RouteAnswer;

package/dist/protocol-route.table.js

@@ -3,6 +3,9 @@ export const PROTOCOL_ROUTES = {
     contract: (binding) => (request) => binding.encodeContract(request),
     transactions: (binding) => (request, state) => binding.handleTransaction(request, state === undefined ? {} : { state }),
     can: (binding) => (request, state) => binding.handleCan(request, state === undefined ? {} : { state }),
+    all: (binding) => (request, state, disconnect) => binding.handleAll(request, state === undefined
+        ? { signal: disconnect }
+        : { state, signal: disconnect }),
 };
 export const MCP_ROUTES = {
     endpoint: (binding) => (request, state) => binding.handleEndpoint(request, state === undefined ? {} : { state }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aventara/nest",
-  "version": "1.0.0-rc.10",
+  "version": "1.0.0-rc.11",
   "license": "SEE LICENSE IN LICENSE",
   "description": "NestJS host integration for Aventara.",
   "type": "module",
@@ -22,10 +22,10 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@aventara/core": "1.0.0-rc.10"
+    "@aventara/core": "1.0.0-rc.11"
   },
   "peerDependencies": {
-    "@aventara/mcp": "1.0.0-rc.10",
+    "@aventara/mcp": "1.0.0-rc.11",
     "@nestjs/common": "^12.0.0",
     "@nestjs/core": "^12.0.0"
   },
@@ -50,9 +50,9 @@
     "access": "public"
   },
   "devDependencies": {
-    "@aventara/mcp": "1.0.0-rc.10",
-    "@aventara/prisma7-adapter": "1.0.0-rc.10",
-    "@aventara/testing": "1.0.0-rc.10",
+    "@aventara/mcp": "1.0.0-rc.11",
+    "@aventara/prisma7-adapter": "1.0.0-rc.11",
+    "@aventara/testing": "1.0.0-rc.11",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@nestjs/common": "^12.2.0",
     "@nestjs/core": "^12.2.0",