@elaraai/e3-api-server 1.0.82 → 1.0.84

package/dist/src/middleware/repository.js

@@ -2,12 +2,24 @@
  * Copyright (c) 2025 Elara AI Pty Ltd
  * Licensed under BSL 1.1. See LICENSE for details.
  */
-import { repositoryOpen } from '@elaraai/e3-core';
+import { RepositoryUpgradePendingError, repositoryOpen } from '@elaraai/e3-core';
 import { sendJsonError } from '../errors.js';
+/** How long, in seconds, a client is told to wait before it asks again of a
+ *  repository an upgrade waits on. */
+const UPGRADE_RETRY_AFTER_S = 5;
 /** Whether a request creates or removes a repository. */
 function createsOrRemoves(c) {
     return (c.req.method === 'PUT' || c.req.method === 'DELETE') && /\/repos\/[^/]+$/.test(c.req.path);
 }
+/**
+ * Whether a request stops or polls a workspace's dataflow: what a repository
+ * an upgrade waits on still answers, since the run is what the upgrade waits
+ * for, and both reach only the run's state and its orchestrator.
+ */
+function stopsOrPollsDataflow(c) {
+    const run = /\/repos\/[^/]+\/workspaces\/[^/]+\/dataflow\/(cancel|execution)$/.exec(c.req.path);
+    return run !== null && (run[1] === 'cancel' ? c.req.method === 'POST' : c.req.method === 'GET');
+}
 /**
  * The gate of a host's repositories: the repository exists, is not being
  * removed, and is opened as every way into a repository opens it — upgraded in
@@ -16,12 +28,24 @@ function createsOrRemoves(c) {
  * is not opened. It goes through the storage backend's `RepoStore`, so a host
  * mounts it over its own.
  *
+ * No request waits on an upgrade. The open refuses at once when the repository
+ * owes one and work running in it holds it, and the gate answers 503
+ * `repository_upgrade_pending`, naming the steps and the work, with a
+ * `Retry-After`; the steps apply at the first request that finds the
+ * repository still, or, with `options.applyUpgrades: false`, in the host's
+ * job, and the gate answers so until they have. A running dataflow's cancel
+ * and poll pass the gate all the same, so the run an upgrade waits for can
+ * always be stopped.
+ *
  * @param storage - Storage backend, whose `RepoStore` keeps the repositories
  * @param getRepoPath - A repository's identifier from its name, as the stores
  *   other than the `RepoStore` take it
+ * @param options - Whether a request applies the upgrades a repository owes,
+ *   and what starts the host's job when not
  * @returns The middleware
  */
-export function createRepositoryGate(storage, getRepoPath) {
+export function createRepositoryGate(storage, getRepoPath, options = {}) {
+    const apply = options.applyUpgrades ?? true;
     return async (c, next) => {
         if (createsOrRemoves(c)) {
             await next();
@@ -47,10 +71,24 @@ export function createRepositoryGate(storage, getRepoPath) {
         }
         else {
             try {
-                await repositoryOpen(storage, getRepoPath(repo));
+                await repositoryOpen(storage, getRepoPath(repo), { apply, waitMs: 0 });
             }
             catch (err) {
-                return sendJsonError(err);
+                if (!(err instanceof RepositoryUpgradePendingError))
+                    return sendJsonError(err);
+                if (err.job && options.onUpgradePending !== undefined) {
+                    try {
+                        await options.onUpgradePending(repo, err.upgrades);
+                    }
+                    catch {
+                        // The host's to report; the next request calls it again.
+                    }
+                }
+                if (!stopsOrPollsDataflow(c)) {
+                    const refused = sendJsonError(err);
+                    refused.headers.set('Retry-After', String(UPGRADE_RETRY_AFTER_S));
+                    return refused;
+                }
             }
         }
         await next();

package/dist/src/middleware/repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/middleware/repository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,EAAE,cAAc,EAAuB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,WAAqC;IAErC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;QAElC,wEAAwE;QACxE,4BAA4B;QAC5B,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/middleware/repository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,EAAE,6BAA6B,EAAE,cAAc,EAAuB,MAAM,kBAAkB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;sCACsC;AACtC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,CAAU;IACtC,MAAM,GAAG,GAAG,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChG,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAClG,CAAC;AA+BD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,WAAqC,EACrC,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IAC5C,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;QAElC,wEAAwE;QACxE,4BAA4B;QAC5B,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,6BAA6B,CAAC;oBAAE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC/E,IAAI,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBACtD,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACrD,CAAC;oBAAC,MAAM,CAAC;wBACP,yDAAyD;oBAC3D,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;oBACnC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;oBAClE,OAAO,OAAO,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/middleware/repository.spec.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+export {};
+//# sourceMappingURL=repository.spec.d.ts.map

package/dist/src/middleware/repository.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.spec.d.ts","sourceRoot":"","sources":["../../../src/middleware/repository.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/middleware/repository.spec.js

@@ -0,0 +1,118 @@
+/**
+ * Copyright (c) 2025 Elara AI Pty Ltd
+ * Licensed under BSL 1.1. See LICENSE for details.
+ */
+/**
+ * The repository gate: an upgrade a repository owes never makes the work it
+ * waits for impossible to stop, no request is held for the wait, and a host
+ * may leave the upgrade to a job of its own.
+ */
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { Hono } from 'hono';
+import { encodeBeast2For, none, variant } from '@elaraai/east';
+import { repositoryOpen } from '@elaraai/e3-core';
+import { InMemoryStorage } from '@elaraai/e3-core/test';
+import { WorkspaceRecordType } from '@elaraai/e3-types';
+import { createRepositoryGate } from './repository.js';
+describe('the repository gate', () => {
+    it('lets a running dataflow\'s cancel and poll through while an upgrade waits on the run, and holds no request for it', async () => {
+        const storage = new InMemoryStorage();
+        const repo = 'gated';
+        await storage.repos.create(repo);
+        await storage.refs.workspaceWrite(repo, 'main', encodeBeast2For(WorkspaceRecordType)(none));
+        // A dataflow runs in `main`, holding its workspace's dataflow lock, as the
+        // orchestrator does for the whole run.
+        const run = await storage.locks.acquire(repo, 'main#dataflow', variant('dataflow', null));
+        assert.ok(run, 'the run holds its workspace');
+        // The host is upgraded to a release whose backend ships a layout step,
+        // which the repository, created before it, owes.
+        const applied = [];
+        storage.upgrades.push({ name: 'host-layout-2', apply: async () => { applied.push('host-layout-2'); } });
+        const app = new Hono();
+        app.use('/api/repos/:repo/*', createRepositoryGate(storage, (r) => r));
+        app.post('/api/repos/:repo/workspaces/:ws/dataflow/cancel', (c) => c.text('the cancel route ran'));
+        app.get('/api/repos/:repo/workspaces/:ws/dataflow/execution', (c) => c.text('the poll route ran'));
+        app.get('/api/repos/:repo/workspaces/:ws/status', (c) => c.text('the status route ran'));
+        try {
+            for (const [method, path, answer] of [
+                ['POST', 'dataflow/cancel', 'the cancel route ran'],
+                ['GET', 'dataflow/execution', 'the poll route ran'],
+            ]) {
+                const started = Date.now();
+                const response = await app.request(`/api/repos/${repo}/workspaces/main/${path}`, { method });
+                assert.equal(response.status, 200, `${method} ${path}`);
+                assert.equal(await response.text(), answer);
+                assert.ok(Date.now() - started < 5_000, `${method} ${path} waited on the upgrade`);
+            }
+            // Every other request is refused at once, naming the step and the run,
+            // with when to ask again.
+            const started = Date.now();
+            const refused = await app.request(`/api/repos/${repo}/workspaces/main/status`);
+            assert.ok(Date.now() - started < 5_000, 'the refusal waited on the upgrade');
+            assert.equal(refused.status, 503);
+            assert.equal(refused.headers.get('Retry-After'), '5');
+            assert.deepEqual(await refused.json(), {
+                error: {
+                    type: 'repository_upgrade_pending',
+                    message: 'the repository gated owes the upgrade "host-layout-2", which applies once nothing runs in it, '
+                        + 'and a dataflow is running in workspace \'main\' — retry when it finishes, or cancel it',
+                },
+            });
+            assert.deepEqual(applied, []);
+        }
+        finally {
+            await run.release();
+        }
+        // Once the run has let its workspace go, the next request applies the step.
+        const status = await app.request(`/api/repos/${repo}/workspaces/main/status`);
+        assert.equal(await status.text(), 'the status route ran');
+        assert.deepEqual(applied, ['host-layout-2']);
+        assert.deepEqual((await storage.refs.repositoryRead(repo))?.upgrades.map(({ name }) => name), ['host-layout-2']);
+    });
+    it('leaves the upgrade to the host\'s job when told to: no request applies it, each one tells the host, and all pass once the job has', async () => {
+        const storage = new InMemoryStorage();
+        const repo = 'gated';
+        await storage.repos.create(repo);
+        await storage.refs.workspaceWrite(repo, 'main', encodeBeast2For(WorkspaceRecordType)(none));
+        const applied = [];
+        storage.upgrades.push({ name: 'host-layout-2', apply: async () => { applied.push('host-layout-2'); } });
+        // The host starts its job as it is told; the second time, starting it
+        // fails, which the host reports itself.
+        const told = [];
+        const app = new Hono();
+        app.use('/api/repos/:repo/*', createRepositoryGate(storage, (r) => r, {
+            applyUpgrades: false,
+            onUpgradePending: (name, upgrades) => {
+                told.push([name, upgrades]);
+                if (told.length === 2)
+                    throw new Error('the job did not start');
+            },
+        }));
+        app.post('/api/repos/:repo/workspaces/:ws/dataflow/cancel', (c) => c.text('the cancel route ran'));
+        app.get('/api/repos/:repo/workspaces/:ws/status', (c) => c.text('the status route ran'));
+        // Nothing runs in the repository, and still no request applies the step.
+        for (let i = 0; i < 2; i++) {
+            const refused = await app.request(`/api/repos/${repo}/workspaces/main/status`);
+            assert.equal(refused.status, 503);
+            assert.equal(refused.headers.get('Retry-After'), '5');
+            assert.deepEqual(await refused.json(), {
+                error: {
+                    type: 'repository_upgrade_pending',
+                    message: 'the repository gated owes the upgrade "host-layout-2", which a job applies before the repository is read — retry once it has',
+                },
+            });
+        }
+        const cancel = await app.request(`/api/repos/${repo}/workspaces/main/dataflow/cancel`, { method: 'POST' });
+        assert.equal(await cancel.text(), 'the cancel route ran');
+        assert.deepEqual(told, [['gated', ['host-layout-2']], ['gated', ['host-layout-2']], ['gated', ['host-layout-2']]]);
+        assert.deepEqual(applied, []);
+        // The host's job opens the repository, which applies the step.
+        await repositoryOpen(storage, repo);
+        assert.deepEqual(applied, ['host-layout-2']);
+        const status = await app.request(`/api/repos/${repo}/workspaces/main/status`);
+        assert.equal(await status.text(), 'the status route ran');
+        assert.equal(told.length, 3, 'a repository that owes nothing tells the host nothing');
+    });
+});
+//# sourceMappingURL=repository.spec.js.map

package/dist/src/middleware/repository.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.spec.js","sourceRoot":"","sources":["../../../src/middleware/repository.spec.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,mHAAmH,EAAE,KAAK,IAAI,EAAE;QACjI,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,2EAA2E;QAC3E,uCAAuC;QACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC9C,uEAAuE;QACvE,iDAAiD;QACjD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,oDAAoD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAEzF,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACnC,CAAC,MAAM,EAAE,iBAAiB,EAAE,sBAAsB,CAAC;gBACnD,CAAC,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;aAC3C,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,oBAAoB,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,IAAI,wBAAwB,CAAC,CAAC;YACrF,CAAC;YAED,uEAAuE;YACvE,0BAA0B;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;YAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAC7E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE;gBACrC,KAAK,EAAE;oBACL,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,gGAAgG;0BACrG,wFAAwF;iBAC7F;aACF,CAAC,CAAC;YACH,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;QAED,4EAA4E;QAC5E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mIAAmI,EAAE,KAAK,IAAI,EAAE;QACjJ,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExG,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,IAAI,GAAuC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE;YACpE,aAAa,EAAE,KAAK;YACpB,gBAAgB,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACnC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAClE,CAAC;SACF,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAEzF,yEAAyE;QACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;YAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE;gBACrC,KAAK,EAAE;oBACL,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,8HAA8H;iBACxI;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,kCAAkC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3G,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACnH,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAE9B,+DAA+D;QAC/D,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,uDAAuD,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/routes/functions.d.ts

@@ -7,41 +7,122 @@
  *
  * Functions touch no datasets, so they are callable at the package level
  * (imported in a repo, no workspace) and at the workspace level (resolved
- * from the deployed package). Both mount the same handlers.
+ * from the deployed package). Both mount the same handlers. A function runs
+ * on its author's runner for any caller the routes admit; a runner a call
+ * names instead is held to the caller's grant, which the routes take as the
+ * one-shot routes do.
  *
- * One-shot is workspace-scoped, caller-supplied IR — RCE with the server's
- * authority — and is gated: when the server has authentication configured,
- * only callers with an elevated role (admin/owner) may use it. A local
- * server without auth is single-tenant (author = operator) and one-shot is
- * allowed.
+ * One-shot is workspace-scoped, caller-supplied IR. Who may run what is the
+ * host's to say, since only its auth knows who the caller is: the route takes
+ * a {@link OneShotAccess}, which gives each request's caller a grant — `any`,
+ * `platform_free` or `none` — and e3-core's `oneShotExecute` runs the request
+ * under it. A caller who may read a workspace may run a platform-free
+ * one-shot, which can only compute over its arguments. A split call — a
+ * caller's program over a dataset's pieces — is launched under the same grant,
+ * and runs as a job the client polls.
  */
 import { Hono } from 'hono';
-import type { StorageBackend, TaskRunner } from '@elaraai/e3-core';
+import type { Context } from 'hono';
+import type { ExecuteCeilings, OneShotGrant, StorageBackend, TaskRunner, TransferBackend } from '@elaraai/e3-core';
 import type { Identity } from '../middleware/auth.js';
 /**
  * Per-repo TaskRunner accessor — the runner is injected (the local server
  * passes LocalTaskRunner), mirroring the orchestrator runner-injection seam.
  */
 export type GetRunner = (repoPath: string) => TaskRunner;
+/**
+ * Gives each request's caller a one-shot grant. Only the host's auth knows who
+ * the caller is, so every host that mounts the one-shot routes decides.
+ */
+export type OneShotAccess = (c: Context) => OneShotGrant | Promise<OneShotGrant>;
+/** Options for {@link createOneShotRoutes}. */
+export interface OneShotRoutesOptions {
+    /** Who may run what. Required, so every host decides. */
+    access: OneShotAccess;
+    /** A sync call's deadline, under the host's request timeout (default
+     *  120 000 ms). */
+    syncDeadlineMs?: number;
+    /** The most a request may ask for, where a host's response limits are
+     *  tighter than a server's default. */
+    ceilings?: ExecuteCeilings;
+}
+/** Options for the named function routes. */
+export interface FunctionRoutesOptions {
+    /** A sync call's deadline, under the host's request timeout (default
+     *  120 000 ms). */
+    syncDeadlineMs?: number;
+    /**
+     * The grant each request's caller holds, as the one-shot routes' `access`
+     * gives it, which decides whether a call may give the function a platform
+     * package its own runner does not load: only `any` may. A call that names no
+     * runner, or one on a stock runtime with no package the function's does not
+     * load, runs for any caller; the `custom` runtime is refused every caller.
+     * Absent, no caller may add a package.
+     */
+    access?: OneShotAccess;
+}
+/**
+ * The one-shot grant of a caller by the roles its token carries: `any` for an
+ * identity holding one of `elevated`, `platform_free` for any other identity,
+ * and `none` for a request with none.
+ *
+ * @param elevated - The roles that run any one-shot (default `admin` and
+ *   `owner`)
+ * @returns The access a host with role-bearing tokens mounts
+ */
+export declare function oneShotAccessByRoles(elevated?: readonly string[]): OneShotAccess;
 /**
  * Package-scoped function routes, mounted at
  * `/api/repos/:repo/packages/:pkg/:version/functions`.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param getRunner - Each repository's task runner
+ * @param options - The host's sync deadline, and the grant a runner a call
+ *   names is held to
+ * @returns The routes
  */
-export declare function createPackageFunctionRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, getRunner: GetRunner): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export declare function createPackageFunctionRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, getRunner: GetRunner, options?: FunctionRoutesOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 /**
  * Workspace-scoped function routes, mounted at
  * `/api/repos/:repo/workspaces/:ws/functions`. The package is resolved from
  * what's deployed in the workspace; the handlers are identical.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param getRunner - Each repository's task runner
+ * @param options - The host's sync deadline, and the grant a runner a call
+ *   names is held to
+ * @returns The routes
  */
-export declare function createWorkspaceFunctionRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, getRunner: GetRunner): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export declare function createWorkspaceFunctionRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, getRunner: GetRunner, options?: FunctionRoutesOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 /**
  * One-shot routes, mounted at `/api/repos/:repo/workspaces/:ws/one-shot`.
  *
- * Gated by role: with auth configured, the caller's JWT must carry an
- * elevated role (admin/owner). Without auth the server is single-tenant
- * local and the gate is open.
+ * - `POST /` takes the caller's grant from `options.access`, and runs the
+ *   request under it through e3-core's `oneShotExecute`, stopped when the
+ *   caller hangs up.
+ * - `POST /split` launches a split call under the same grant and answers its
+ *   job's id; with `?explain=1` its job plans the call's pieces instead, and
+ *   runs no unit.
+ * - `GET /split/:id` answers a split call's status: how far it has got, its
+ *   result, the pieces an explain planned, or why e3 could not run it.
+ *
+ * A caller refused is answered `permission_denied` (`path` `one-shot`), and
+ * nothing runs. A caller whose grant is `none` polls no split call, and one
+ * whose grant is `platform_free` only a platform-free one, or one such a
+ * caller launched.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param transferBackend - Files and dispatches the jobs split calls run as,
+ *   which outlast a request, on the runner the backend was given
+ * @param getRunner - Each repository's task runner
+ * @param options - Who may run what, the host's sync deadline and the most a
+ *   request may ask for
+ * @returns The routes
  */
-export declare function createOneShotRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, getRunner: GetRunner): Hono<{
+export declare function createOneShotRoutes(storage: StorageBackend, getRepoPath: (repo: string) => string, transferBackend: TransferBackend, getRunner: GetRunner, options: OneShotRoutesOptions): Hono<{
     Variables: {
         identity?: Identity;
     };

package/dist/src/routes/functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/routes/functions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAgBtD;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC;AAGzD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,SAAS,EAAE,SAAS,8EA4BrB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,SAAS,EAAE,SAAS,8EAwCrB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,SAAS,EAAE,SAAS;eAEc;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAA;KAAE;0CAsB1D"}
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/routes/functions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAiBtD;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC;AAEzD;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,OAAO,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAEjF,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,MAAM,EAAE,aAAa,CAAC;IACtB;uBACmB;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;2CACuC;IACvC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC;uBACmB;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAOD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,GAAE,SAAS,MAAM,EAAuB,GAAG,aAAa,CAMpG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,SAAS,EAAE,SAAS,EACpB,OAAO,GAAE,qBAA0B,8EA6BpC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,SAAS,EAAE,SAAS,EACpB,OAAO,GAAE,qBAA0B,8EAyCpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EACrC,eAAe,EAAE,eAAe,EAChC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,oBAAoB;eAEK;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAA;KAAE;0CAgD1D"}

package/dist/src/routes/functions.js

@@ -7,28 +7,59 @@
  *
  * Functions touch no datasets, so they are callable at the package level
  * (imported in a repo, no workspace) and at the workspace level (resolved
- * from the deployed package). Both mount the same handlers.
+ * from the deployed package). Both mount the same handlers. A function runs
+ * on its author's runner for any caller the routes admit; a runner a call
+ * names instead is held to the caller's grant, which the routes take as the
+ * one-shot routes do.
  *
- * One-shot is workspace-scoped, caller-supplied IR — RCE with the server's
- * authority — and is gated: when the server has authentication configured,
- * only callers with an elevated role (admin/owner) may use it. A local
- * server without auth is single-tenant (author = operator) and one-shot is
- * allowed.
+ * One-shot is workspace-scoped, caller-supplied IR. Who may run what is the
+ * host's to say, since only its auth knows who the caller is: the route takes
+ * a {@link OneShotAccess}, which gives each request's caller a grant — `any`,
+ * `platform_free` or `none` — and e3-core's `oneShotExecute` runs the request
+ * under it. A caller who may read a workspace may run a platform-free
+ * one-shot, which can only compute over its arguments. A split call — a
+ * caller's program over a dataset's pieces — is launched under the same grant,
+ * and runs as a job the client polls.
  */
 import { Hono } from 'hono';
-import { variant } from '@elaraai/east';
-import { workspaceGetPackage } from '@elaraai/e3-core';
-import { decodeBody, sendError } from '../beast2.js';
+import { oneShotExecute, workspaceGetPackage } from '@elaraai/e3-core';
+import { decodeBody, sendError, sendSuccess } from '../beast2.js';
 import { errorToVariant } from '../errors.js';
-import { FunctionCallRequestType, OneShotRequestType, ExecuteResultType, } from '../types.js';
-import { listPackageFunctions, describePackageFunction, callFunctionSync, callOneShotSync, } from '../handlers/functions.js';
-/** Roles allowed to use one-shot execution when auth is configured. */
-const ONE_SHOT_ROLES = ['admin', 'owner'];
+import { FunctionCallRequestType, OneShotRequestType, ExecuteResultType, PackageJobResponseType, SplitCallRequestType, SplitCallStatusType, } from '../types.js';
+import { listPackageFunctions, describePackageFunction, callFunctionSync, getSplitCallStatus, startSplitCall, } from '../handlers/functions.js';
+/** The grant of a function call's caller, by the routes' options. */
+async function functionGrant(c, options) {
+    return options.access === undefined ? 'platform_free' : options.access(c);
+}
+/**
+ * The one-shot grant of a caller by the roles its token carries: `any` for an
+ * identity holding one of `elevated`, `platform_free` for any other identity,
+ * and `none` for a request with none.
+ *
+ * @param elevated - The roles that run any one-shot (default `admin` and
+ *   `owner`)
+ * @returns The access a host with role-bearing tokens mounts
+ */
+export function oneShotAccessByRoles(elevated = ['admin', 'owner']) {
+    return (c) => {
+        const identity = c.get('identity');
+        if (identity === undefined)
+            return 'none';
+        return (identity.roles ?? []).some((role) => elevated.includes(role)) ? 'any' : 'platform_free';
+    };
+}
 /**
  * Package-scoped function routes, mounted at
  * `/api/repos/:repo/packages/:pkg/:version/functions`.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param getRunner - Each repository's task runner
+ * @param options - The host's sync deadline, and the grant a runner a call
+ *   names is held to
+ * @returns The routes
  */
-export function createPackageFunctionRoutes(storage, getRepoPath, getRunner) {
+export function createPackageFunctionRoutes(storage, getRepoPath, getRunner, options = {}) {
     const app = new Hono();
     // GET / - List functions with signatures
     app.get('/', async (c) => {
@@ -44,8 +75,9 @@ export function createPackageFunctionRoutes(storage, getRepoPath, getRunner) {
     app.post('/:fn', async (c) => {
         const repoPath = getRepoPath(c.req.param('repo'));
         try {
+            const grant = await functionGrant(c, options);
             const req = await decodeBody(c, FunctionCallRequestType);
-            return await callFunctionSync(storage, repoPath, getRunner(repoPath), c.req.param('pkg'), c.req.param('version'), c.req.param('fn'), req, c.req.query('verbose') === '1');
+            return await callFunctionSync(storage, repoPath, getRunner(repoPath), c.req.param('pkg'), c.req.param('version'), c.req.param('fn'), req, c.req.query('verbose') === '1', options.syncDeadlineMs, grant);
         }
         catch (err) {
             return sendError(ExecuteResultType, errorToVariant(err));
@@ -57,8 +89,15 @@ export function createPackageFunctionRoutes(storage, getRepoPath, getRunner) {
  * Workspace-scoped function routes, mounted at
  * `/api/repos/:repo/workspaces/:ws/functions`. The package is resolved from
  * what's deployed in the workspace; the handlers are identical.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param getRunner - Each repository's task runner
+ * @param options - The host's sync deadline, and the grant a runner a call
+ *   names is held to
+ * @returns The routes
  */
-export function createWorkspaceFunctionRoutes(storage, getRepoPath, getRunner) {
+export function createWorkspaceFunctionRoutes(storage, getRepoPath, getRunner, options = {}) {
     const app = new Hono();
     const deployed = async (c) => {
         const repoPath = getRepoPath(c.req.param('repo'));
@@ -87,8 +126,9 @@ export function createWorkspaceFunctionRoutes(storage, getRepoPath, getRunner) {
     app.post('/:fn', async (c) => {
         try {
             const { repoPath, name, version } = await deployed(c);
+            const grant = await functionGrant(c, options);
             const req = await decodeBody(c, FunctionCallRequestType);
-            return await callFunctionSync(storage, repoPath, getRunner(repoPath), name, version, c.req.param('fn'), req, c.req.query('verbose') === '1');
+            return await callFunctionSync(storage, repoPath, getRunner(repoPath), name, version, c.req.param('fn'), req, c.req.query('verbose') === '1', options.syncDeadlineMs, grant);
         }
         catch (err) {
             return sendError(ExecuteResultType, errorToVariant(err));
@@ -99,30 +139,76 @@ export function createWorkspaceFunctionRoutes(storage, getRepoPath, getRunner) {
 /**
  * One-shot routes, mounted at `/api/repos/:repo/workspaces/:ws/one-shot`.
  *
- * Gated by role: with auth configured, the caller's JWT must carry an
- * elevated role (admin/owner). Without auth the server is single-tenant
- * local and the gate is open.
+ * - `POST /` takes the caller's grant from `options.access`, and runs the
+ *   request under it through e3-core's `oneShotExecute`, stopped when the
+ *   caller hangs up.
+ * - `POST /split` launches a split call under the same grant and answers its
+ *   job's id; with `?explain=1` its job plans the call's pieces instead, and
+ *   runs no unit.
+ * - `GET /split/:id` answers a split call's status: how far it has got, its
+ *   result, the pieces an explain planned, or why e3 could not run it.
+ *
+ * A caller refused is answered `permission_denied` (`path` `one-shot`), and
+ * nothing runs. A caller whose grant is `none` polls no split call, and one
+ * whose grant is `platform_free` only a platform-free one, or one such a
+ * caller launched.
+ *
+ * @param storage - Storage backend
+ * @param getRepoPath - A repository's identifier from its name
+ * @param transferBackend - Files and dispatches the jobs split calls run as,
+ *   which outlast a request, on the runner the backend was given
+ * @param getRunner - Each repository's task runner
+ * @param options - Who may run what, the host's sync deadline and the most a
+ *   request may ask for
+ * @returns The routes
  */
-export function createOneShotRoutes(storage, getRepoPath, getRunner) {
+export function createOneShotRoutes(storage, getRepoPath, transferBackend, getRunner, options) {
     const app = new Hono();
-    // Role gate: identity is set by the auth middleware when configured.
-    app.use('*', async (c, next) => {
-        const identity = c.get('identity');
-        if (identity && !(identity.roles ?? []).some((r) => ONE_SHOT_ROLES.includes(r))) {
-            return sendError(ExecuteResultType, variant('permission_denied', { path: 'one-shot' }));
-        }
-        await next();
-    });
     app.post('/', async (c) => {
         const repoPath = getRepoPath(c.req.param('repo'));
         try {
+            const grant = await options.access(c);
             const req = await decodeBody(c, OneShotRequestType);
-            return await callOneShotSync(storage, repoPath, getRunner(repoPath), c.req.param('ws'), req, c.req.query('verbose') === '1');
+            const result = await oneShotExecute(storage, getRunner(repoPath), repoPath, c.req.param('ws'), req, {
+                grant,
+                signal: c.req.raw.signal,
+                verbose: c.req.query('verbose') === '1',
+                ...(options.syncDeadlineMs !== undefined && { syncDeadlineMs: options.syncDeadlineMs }),
+                ...(options.ceilings !== undefined && { ceilings: options.ceilings }),
+            });
+            return sendSuccess(ExecuteResultType, result);
         }
         catch (err) {
             return sendError(ExecuteResultType, errorToVariant(err));
         }
     });
+    // POST /split - Launch a split call (or, with ?explain=1, a job that plans
+    // its pieces)
+    app.post('/split', async (c) => {
+        const repo = c.req.param('repo');
+        try {
+            const grant = await options.access(c);
+            const req = await decodeBody(c, SplitCallRequestType);
+            return await startSplitCall(storage, getRepoPath(repo), repo, c.req.param('ws'), req, grant, transferBackend.splitCall, {
+                ...(options.ceilings !== undefined && { ceilings: options.ceilings }),
+                explain: c.req.query('explain') === '1',
+            });
+        }
+        catch (err) {
+            return sendError(PackageJobResponseType, errorToVariant(err));
+        }
+    });
+    // GET /split/:id - Poll a split call
+    app.get('/split/:id', async (c) => {
+        const repo = c.req.param('repo');
+        try {
+            const grant = await options.access(c);
+            return await getSplitCallStatus(storage, getRepoPath(repo), transferBackend.splitCall, repo, c.req.param('ws'), c.req.param('id'), grant);
+        }
+        catch (err) {
+            return sendError(SplitCallStatusType, errorToVariant(err));
+        }
+    });
     return app;
 }
 //# sourceMappingURL=functions.js.map

package/dist/src/routes/functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../src/routes/functions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,uEAAuE;AACvE,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAS1C;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAuB,EACvB,WAAqC,EACrC,SAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,OAAO,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,OAAO,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACzD,OAAO,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;QAC/K,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuB,EACvB,WAAqC,EACrC,SAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAU,EAAgE,EAAE;QAClG,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACzD,OAAO,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;QAChJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,WAAqC,EACrC,SAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAA0C,CAAC;IAE/D,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACpD,OAAO,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;QAChI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../src/routes/functions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,0BAA0B,CAAC;AA0ClC,qEAAqE;AACrE,KAAK,UAAU,aAAa,CAAC,CAAU,EAAE,OAA8B;IACrE,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAA8B,CAAC,OAAO,EAAE,OAAO,CAAC;IACnF,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,MAAM,QAAQ,GAAI,CAAqD,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;IAClG,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAuB,EACvB,WAAqC,EACrC,SAAoB,EACpB,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,OAAO,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,OAAO,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACzD,OAAO,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9M,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAuB,EACvB,WAAqC,EACrC,SAAoB,EACpB,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAU,EAAgE,EAAE;QAClG,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACzD,OAAO,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC/K,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,WAAqC,EACrC,eAAgC,EAChC,SAAoB,EACpB,OAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAA0C,CAAC;IAE/D,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE;gBACnG,KAAK;gBACL,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM;gBACxB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG;gBACvC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;gBACvF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,cAAc;IACd,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;YACtD,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,SAAS,EAAE;gBACvH,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG;aACxC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,sBAAsB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO,MAAM,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7I,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,mBAAmB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/routes/index.d.ts

@@ -13,6 +13,6 @@ export { createObjectRoutes } from './objects.js';
 export { createTransferRoutes, type TransferRouteOptions } from './transfer.js';
 export { createPackageTransferRoutes } from './package-transfer.js';
 export { createDataEndpoints } from './data.js';
-export { createPackageFunctionRoutes, createWorkspaceFunctionRoutes, createOneShotRoutes, type GetRunner } from './functions.js';
+export { createPackageFunctionRoutes, createWorkspaceFunctionRoutes, createOneShotRoutes, oneShotAccessByRoles, type GetRunner, type OneShotAccess, type OneShotRoutesOptions, type FunctionRoutesOptions, } from './functions.js';
 export { createWorkspaceRecordRoutes } from './records.js';
 //# sourceMappingURL=index.d.ts.map