@blotout/qinto-cli 0.1.16 → 0.1.17

package/dist/worker-artifact/app-runtime/index.js

@@ -18115,10 +18115,10 @@ var stringbool = (...args) => _stringbool({
   String: ZodString
 }, ...args);
 function json(params) {
-  const jsonSchema = lazy(() => {
-    return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record(string2(), jsonSchema)]);
+  const jsonSchema2 = lazy(() => {
+    return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema2), record(string2(), jsonSchema2)]);
   });
-  return jsonSchema;
+  return jsonSchema2;
 }
 function preprocess(fn, schema) {
   return new ZodPreprocess({
@@ -18945,6 +18945,7 @@ function date4(params) {
 var IDENTIFIER = /^[a-z][a-z0-9-]*$/;
 var VARIABLE_NAME = /^[A-Z][A-Z0-9_]*$/;
 var APP_SLUG_PATTERN = /^[a-z][a-z0-9-]{2,29}$/;
+var FUNCTION_NAME = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
 var identifierField = external_exports.string().min(1).max(64).regex(IDENTIFIER);
 var httpsUrl = (field2) => {
   return external_exports.url().max(2048).refine((value) => value.startsWith("https://"), `${field2} must be an HTTPS URL`);
@@ -19345,7 +19346,6 @@ var MAX_MANIFEST_MIGRATION_BYTES = 1024 * 1024;
 var BINDING_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var CLASS_NAME = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
 var MIGRATION_ID = /^[a-z0-9][a-z0-9-]*$/;
-var FUNCTION_NAME = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
 var EVENT_TOPIC = /^[a-z][a-z0-9:_-]*$/;
 var QUERY_PARAM_NAME = /^[A-Za-z0-9_.-]+$/;
 var COOKIE_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
@@ -19383,6 +19383,7 @@ var PLATFORM_APP_RESOURCE_IDENTIFIERS = {
 };
 var PLATFORM_APP_VARIABLE_IDENTIFIER_PREFIX = "var-";
 var PLATFORM_APP_SCOPE_VARIABLE_IDENTIFIER_PREFIX = "appvar-";
+var STORAGE_LINK_BINDING_PREFIX = "QINTO_LINK_";
 var legalUrl = (field2) => {
   return httpsUrl(field2).refine((value) => {
     const host = new URL(value).hostname;
@@ -19653,7 +19654,7 @@ var validateBindings = (manifest, ctx) => {
     "variable name"
   );
   for (const [index, resource] of manifest.resources.entries()) {
-    if (reserved.has(resource.binding) || resource.binding.startsWith("VAR_") || resource.binding.startsWith("APPVAR_") || resource.binding.startsWith(PLATFORM_APP_OAUTH_BINDING_PREFIX)) {
+    if (reserved.has(resource.binding) || resource.binding.startsWith("VAR_") || resource.binding.startsWith("APPVAR_") || resource.binding.startsWith(PLATFORM_APP_OAUTH_BINDING_PREFIX) || resource.binding.startsWith(STORAGE_LINK_BINDING_PREFIX)) {
       ctx.addIssue({ code: "custom", path: ["resources", index, "binding"], message: `Binding ${resource.binding} is reserved` });
     }
     if (reservedIdentifiers.has(resource.identifier) || resource.identifier.startsWith(PLATFORM_APP_VARIABLE_IDENTIFIER_PREFIX) || resource.identifier.startsWith(PLATFORM_APP_SCOPE_VARIABLE_IDENTIFIER_PREFIX)) {
@@ -19956,8 +19957,17 @@ var appManifestSchema = baseSchema.superRefine((manifest, ctx) => {
 var MAX_VENDOR_BODY_BYTES = 64 * 1024;
 var MAX_EXPIRES_IN_SECONDS = 365 * 24 * 60 * 60;
 
+// ../../../libs/app-manifest/src/rpc-contract.ts
+var MAX_RPC_CONTRACT_BYTES = 256 * 1024;
+var jsonSchema = external_exports.record(external_exports.string(), external_exports.unknown());
+var rpcFunctionContractSchema = external_exports.object({ visibility: external_exports.enum(["public", "private"]), input: jsonSchema, output: jsonSchema }).strict();
+var appRpcContractSchema = external_exports.record(external_exports.string().regex(FUNCTION_NAME).max(64), rpcFunctionContractSchema).refine((contract) => Object.keys(contract).length <= 32, "An RPC contract carries at most 32 functions").refine((contract) => {
+  return new TextEncoder().encode(JSON.stringify(contract)).length <= MAX_RPC_CONTRACT_BYTES;
+}, "The RPC contract exceeds the size cap");
+
 // ../../../libs/app-envelope/src/envelope.ts
 var ENVELOPE_VERSION = 2;
+var ENVELOPE_ERROR_CODES = ["invalid_arguments"];
 var MAX_INSTALLS_PER_APP = 15;
 var MAX_EMITS_PER_INSTALL = 10;
 var MAX_PUSHES_PER_INSTALL = 10;
@@ -20056,13 +20066,14 @@ var envelopeResponseSchema = external_exports.object({
   rpc: external_exports.object({ result: external_exports.unknown() }).strict().refine((rpc) => {
     return new TextEncoder().encode(JSON.stringify(rpc.result ?? null)).length <= MAX_RPC_BYTES;
   }, "RPC result exceeds the size cap").optional(),
-  error: external_exports.object({ message: external_exports.string().max(2048) }).strict().optional()
+  error: external_exports.object({ message: external_exports.string().max(2048), code: external_exports.enum(ENVELOPE_ERROR_CODES).optional() }).strict().optional()
 }).strict();
 
 // ../../../libs/app-envelope/src/control.ts
 var CONTROL_ENVELOPE_VERSION = 1;
 var MAX_CONTROL_BYTES = 256 * 1024;
 var MAX_MIGRATION_CHECKPOINT_BYTES = 16 * 1024;
+var MIGRATION_DATABASE_LINK_CHANGED = "migration_database_link_changed";
 var MAX_TOOL_ARGUMENTS_BYTES = 32 * 1024;
 var MAX_TOOL_RESULT_BYTES = 64 * 1024;
 var MAX_TOOL_DATA_DEPTH = 8;
@@ -20868,6 +20879,10 @@ var siteChannel = (env) => {
 var channelFetch = (env, init) => {
   return siteChannel(env).fetch(BROKER_URL, init);
 };
+var brokerFailure = (answer, status) => {
+  const error61 = answer.error ?? `the broker answered ${status}`;
+  return answer.message === void 0 ? error61 : `${error61}: ${answer.message}`;
+};
 var askBroker = async (env, name, body) => {
   return traced(name, {}, async () => {
     const headers = { "content-type": "application/json" };
@@ -20891,7 +20906,7 @@ var askBroker = async (env, name, body) => {
     }
     const answer = parsed;
     if (answer.error !== void 0 || !response.ok) {
-      throw new Error(answer.error ?? `the broker answered ${response.status}`);
+      throw new Error(brokerFailure(answer, response.status));
     }
     return answer;
   });
@@ -21273,6 +21288,10 @@ var contextKindsOf = (env) => {
   const context = JSON.parse(env.APP_CONTEXT);
   return { variableKinds: context.variableKinds ?? {}, appVariableKinds: context.appVariableKinds ?? {} };
 };
+var linkedDatabasesOf = (env) => {
+  const context = JSON.parse(env.APP_CONTEXT);
+  return context.linkedDatabases ?? [];
+};
 var projectAppValues = (env, kinds) => {
   const appVariables = {};
   const appSecrets = {};
@@ -21759,6 +21778,11 @@ var dispatchSchedule = async (envelope, bundle, env) => {
           data: message.data,
           broadcast: message.broadcast
         });
+      },
+      context: (userId) => {
+        return asyncContext(env, () => {
+          return userId;
+        });
       }
     };
     try {
@@ -21998,6 +22022,9 @@ var dispatchLifecycle = async (envelope, bundle, env) => {
 };
 var dispatchMigration = async (envelope, bundle, env) => {
   const migration = envelope.migration;
+  if (linkedDatabasesOf(env).includes(migration.resource)) {
+    return json2(200, { v: CONTROL_ENVELOPE_VERSION, ok: false, error: { message: MIGRATION_DATABASE_LINK_CHANGED } });
+  }
   try {
     if (migration.phase !== "backfill") {
       await runStatementMigration(env, migration);
@@ -22108,8 +22135,8 @@ var buildContext3 = ({
     geo,
     params,
     install: { id: install.id, label: install.label },
-    // An endpoint has no visitor, so a workflow it starts cannot push. `push` below is the
-    // exception: it names its subject rather than inheriting one.
+    // An endpoint has no visitor, so a workflow it starts cannot push or touch context. `push` and
+    // `context` below are the exceptions: they name their subject rather than inheriting one.
     startWorkflow: buildStartWorkflow({ ord: install.ord, installId: install.id, installLabel: install.label, anonId: null }),
     oauth: buildOauth(env, install.ord),
     variables,
@@ -22128,6 +22155,11 @@ var buildContext3 = ({
         broadcast: message.broadcast
       });
     },
+    context: (userId) => {
+      return asyncContext(env, () => {
+        return userId;
+      });
+    },
     skip: () => {
       return { kind: "skip" };
     }
@@ -22300,6 +22332,42 @@ var withPipelineRetry = (env, bindings) => {
   return wrapped;
 };
 
+// src/rpc-definition.ts
+var isSchema = (candidate) => {
+  return typeof candidate === "object" && candidate !== null && "~standard" in candidate;
+};
+var rpcDefinitionOf = (candidate) => {
+  if (typeof candidate !== "object" || candidate === null || !("__qintoRpc" in candidate)) {
+    return void 0;
+  }
+  const marker = candidate.__qintoRpc;
+  if (typeof marker !== "object" || marker === null || !("handler" in marker) || typeof marker.handler !== "function") {
+    return void 0;
+  }
+  const definition = { handler: marker.handler };
+  if ("input" in marker && isSchema(marker.input)) {
+    definition.input = marker.input;
+  }
+  if ("output" in marker && isSchema(marker.output)) {
+    definition.output = marker.output;
+  }
+  return definition;
+};
+var checkAgainst = async (schema, value) => {
+  if (schema === void 0) {
+    return { ok: true, value };
+  }
+  const result = await schema["~standard"].validate(value);
+  if (result.issues === void 0) {
+    return { ok: true, value: result.value };
+  }
+  const message = result.issues.map((issue2) => {
+    const path = (issue2.path ?? []).map((segment) => String(typeof segment === "object" ? segment.key : segment)).join(".");
+    return path === "" ? issue2.message : `${path}: ${issue2.message}`;
+  }).join("; ");
+  return { ok: false, message };
+};
+
 // src/traced-fetch.ts
 var MAX_BODY_CHARS = 65536;
 var TOO_LARGE = `[not recorded: the body is over ${MAX_BODY_CHARS} characters]`;
@@ -22660,10 +22728,14 @@ var dispatchRpc = async (envelope, bundle, env) => {
   if (rpc === void 0) {
     return jsonError(400, "rpc envelope carries no rpc call");
   }
-  const handler = toHandler(bundle?.rpc?.[rpc.fn]);
-  if (handler === void 0) {
+  const definition = rpcDefinitionOf(bundle?.rpc?.[rpc.fn]);
+  if (definition === void 0) {
     return jsonError(200, `missing handler: rpc.${rpc.fn}`);
   }
+  const args = await checkAgainst(definition.input, rpc.args);
+  if (!args.ok) {
+    return json2(200, { v: ENVELOPE_VERSION, error: { code: "invalid_arguments", message: failureMessage(args.message) } });
+  }
   const install = envelope.installs[0];
   const emits = [];
   const pushes = [];
@@ -22686,14 +22758,18 @@ var dispatchRpc = async (envelope, bundle, env) => {
   let value;
   try {
     value = await installSpan(install, () => {
-      return handler(rpc.args, ctx);
+      return definition.handler(args.value, ctx);
     });
   } catch (error61) {
     const message = failureMessage(error61);
     console.warn(`rpc failed for install ${install.id}: ${message}`);
     return json2(200, { v: ENVELOPE_VERSION, error: { message } });
   }
-  const result = value === void 0 ? null : value;
+  const checked = await checkAgainst(definition.output, value);
+  if (!checked.ok) {
+    return jsonError(200, failureMessage(`rpc result does not match the output schema: ${checked.message}`));
+  }
+  const result = checked.value === void 0 ? null : checked.value;
   if (new TextEncoder().encode(JSON.stringify(result)).length > MAX_RPC_BYTES) {
     return jsonError(200, "rpc result exceeds the size cap");
   }