@iwentsourcing/core 0.1.0

package/dist/management/access/create-access-management.test.js

@@ -0,0 +1,77 @@
+import { describe, it } from 'node:test';
+import { createAccessManagement } from './create-access-management.js';
+import { createRemoteSystems } from '../system/create-remote-systems.js';
+import { createRegistryManagement } from '../registry/create-registry-management.js';
+import { systemRealm } from '../registry/system-realm.js';
+import { createPartitionStorageBuilder } from '../../storage/partition/create-partition-storage-builder.js';
+import { createdStorageBuilder, createStorageFactoryFromBuilder, } from '../../storage/versioned/created-storage-builder.js';
+import { createMigrationStorageBuilder } from '../../storage/versioned/create-migration-storage-builder.js';
+import { createNodeRuntimeFactory } from '../../node/create-node-runtime-factory.js';
+import { createMemoryQueue } from '../../queue/create-memory-queue.js';
+import { createNodeEnv } from '../../node/create-node-env.js';
+import { createMemoryLock } from '../../lock/create-memory-lock.js';
+import { createConsoleTelemetry } from '../../tracer/create-console-telemetry.js';
+import { createMemoryStorageProvider } from '../../storage/memory/create-memory-storage-provider.js';
+import { todoExampleStream } from '../../example/todo-example.js';
+import { createInMemorySystems } from '../system/create-in-memory-systems.js';
+import { createStreamWorker } from '../../worker/create-stream-worker.js';
+import { createBootstrapper } from '../../runner/bootstrapper.js';
+import { createAggregationWorker } from '../../worker/create-aggregation-worker.js';
+describe('create-access-management', () => {
+    it('should access stream', async (test) => {
+        const queue = createMemoryQueue();
+        const env = createNodeEnv();
+        const lock = createMemoryLock();
+        const telemetry = createConsoleTelemetry();
+        const seed = 'test';
+        const storageProvider = createMemoryStorageProvider({
+            telemetry,
+        });
+        const storageBuilder = createdStorageBuilder(storageProvider, env, telemetry, lock, test.signal, { limit: 512 });
+        const runtime = {
+            env,
+            lock,
+            telemetry,
+            seed,
+            partitionBuilder: createPartitionStorageBuilder(createStorageFactoryFromBuilder(storageBuilder)),
+            migrationBuilder: createMigrationStorageBuilder(storageProvider),
+            storageBuilder,
+            queue,
+            runtimeFactory: createNodeRuntimeFactory(),
+        };
+        const remoteSystem = createRemoteSystems({
+            runtime,
+        });
+        const inMemorySystem = createInMemorySystems({ runtime });
+        const registry = createRegistryManagement({
+            runtime,
+            system: remoteSystem,
+            staticRealms: [systemRealm],
+        });
+        const access = createAccessManagement({
+            system: remoteSystem,
+            registry,
+            runtime,
+        });
+        const bootstrapper = createBootstrapper();
+        bootstrapper.attach(createStreamWorker({
+            registry,
+            runtime,
+            system: inMemorySystem,
+        }));
+        bootstrapper.attach(createAggregationWorker({
+            registry,
+            runtime,
+            system: inMemorySystem,
+        }));
+        const r = await bootstrapper.init(test.signal);
+        r.run().catch((e) => console.error(e));
+        const stream = access.getStream('tenant', todoExampleStream, {
+            args: { param: 'param' },
+            signal: test.signal,
+            auth: { sub: 'sub', iss: 'iss', aud: 'aud' },
+        });
+        await stream.push('create-todo', { title: 'title' }, { signal: test.signal });
+    });
+});
+//# sourceMappingURL=create-access-management.test.js.map

package/dist/management/access/create-access-management.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-access-management.test.js","sourceRoot":"","sources":["../../../src/management/access/create-access-management.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AAC5G,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC;QACpB,MAAM,eAAe,GAAG,2BAA2B,CAAC;YAClD,SAAS;SACV,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,qBAAqB,CAC1C,eAAe,EACf,GAAG,EACH,SAAS,EACT,IAAI,EACJ,IAAI,CAAC,MAAM,EACX,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,OAAO,GAAmB;YAC9B,GAAG;YACH,IAAI;YACJ,SAAS;YACT,IAAI;YACJ,gBAAgB,EAAE,6BAA6B,CAC7C,+BAA+B,CAAC,cAAc,CAAC,CAChD;YACD,gBAAgB,EAAE,6BAA6B,CAAC,eAAe,CAAC;YAChE,cAAc;YACd,KAAK;YACL,cAAc,EAAE,wBAAwB,EAAE;SAC3C,CAAC;QACF,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACvC,OAAO;SACR,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,wBAAwB,CAAC;YACxC,OAAO;YACP,MAAM,EAAE,YAAY;YACpB,YAAY,EAAE,CAAC,WAAW,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,MAAM,EAAE,YAAY;YACpB,QAAQ;YACR,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;QAE1C,YAAY,CAAC,MAAM,CACjB,kBAAkB,CAAC;YACjB,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,cAAc;SACvB,CAAC,CACH,CAAC;QAEF,YAAY,CAAC,MAAM,CACjB,uBAAuB,CAAC;YACtB,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,cAAc;SACvB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/C,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE;YAC3D,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,IAAI,CACf,aAAa,EACb,EAAE,KAAK,EAAE,OAAO,EAAE,EAClB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/management/access/create-lazy-aggregation-events.d.ts

@@ -0,0 +1,5 @@
+import { AggregationEventDeclaration } from '../../aggregation/aggregation-event-declaration.js';
+import { RuntimeEnv } from '../../environment/runtime-env.js';
+import { Lazy } from '../../lazy/lazy.js';
+import { AggregationSource } from '../../aggregation/event-source.js';
+export declare function createLazyAggregationEvents(events: AggregationEventDeclaration<any>, env: RuntimeEnv): Lazy<Record<string, AggregationSource>>;

package/dist/management/access/create-lazy-aggregation-events.js

@@ -0,0 +1,31 @@
+import { createLazy } from '../../lazy/create-lazy.js';
+import { resolveVersion } from './resolve-version.js';
+export function createLazyAggregationEvents(events, env) {
+    return createLazy(async () => {
+        const record = {};
+        for (const [key, value] of Object.entries(events)) {
+            if ('event' in value) {
+                record[key] = {
+                    event: value.event,
+                    schema: value.type.schema,
+                    stream: {
+                        version: await resolveVersion(value.stream.version, env),
+                        pattern: value.stream.pattern,
+                    },
+                };
+            }
+            else {
+                record[key] = {
+                    output: value.output,
+                    schema: value.type.schema,
+                    stream: {
+                        version: await resolveVersion(value.stream.version, env),
+                        pattern: value.stream.pattern,
+                    },
+                };
+            }
+        }
+        return record;
+    });
+}
+//# sourceMappingURL=create-lazy-aggregation-events.js.map

package/dist/management/access/create-lazy-aggregation-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-lazy-aggregation-events.js","sourceRoot":"","sources":["../../../src/management/access/create-lazy-aggregation-events.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,UAAU,2BAA2B,CACzC,MAAwC,EACxC,GAAe;IAEf,OAAO,UAAU,CAAoC,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAsC,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,GAAG;oBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,MAAM,EAAE;wBACN,OAAO,EAAE,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;wBACxD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;qBAC9B;iBACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG;oBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,MAAM,EAAE;wBACN,OAAO,EAAE,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;wBACxD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;qBAC9B;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/management/access/create-lazy-aggregation.d.ts

@@ -0,0 +1,5 @@
+import { StateDefinitions } from '../../storage/state-declaration.js';
+import { AggregateInterface } from '../../aggregation/aggregate-interface.js';
+import { Lazy } from '../../lazy/lazy.js';
+export declare function createLazyAggregation<State extends StateDefinitions>(lazyAggregation: (signal: AbortSignal) => Lazy<AggregateInterface<State>>, definition: State, sourceSignal: AbortSignal): AggregateInterface<State>;
+export declare function awaitAggregation<State extends StateDefinitions>(aggregation: AggregateInterface<State>, accessEventId: string, signal: AbortSignal): AggregateInterface<State>;

package/dist/management/access/create-lazy-aggregation.js

@@ -0,0 +1,33 @@
+import { createLazySnapshotClient } from '../../storage/lazy/create-lazy-snapshot-client.js';
+import { createLazy } from '../../lazy/create-lazy.js';
+import { getOrFail } from '../../utils/get-or-fail.js';
+import { createLazyObservedClient } from '../../storage/lazy/create-lazy-observed-client.js';
+import { combineAbortSignal } from '../../utils/combine-abort-signal.js';
+export function createLazyAggregation(lazyAggregation, definition, sourceSignal) {
+    return {
+        state: definition,
+        snapshot(name) {
+            return createLazySnapshotClient((signal) => createLazy(async () => {
+                const aggregation = await lazyAggregation(combineAbortSignal(signal, sourceSignal)).resolve();
+                return aggregation.snapshot(name);
+            }), getOrFail(definition, name));
+        },
+        observe(name) {
+            return createLazyObservedClient(getOrFail(definition, name), (signal) => createLazy(async () => {
+                const aggregation = await lazyAggregation(combineAbortSignal(signal, sourceSignal)).resolve();
+                return aggregation.observe(name);
+            }));
+        },
+        async ensure(eventId, signal) {
+            const aggregation = await lazyAggregation(combineAbortSignal(signal, sourceSignal)).resolve();
+            await aggregation.ensure(eventId, signal);
+        },
+    };
+}
+export function awaitAggregation(aggregation, accessEventId, signal) {
+    return createLazyAggregation((signal) => createLazy(async () => {
+        await aggregation.ensure(accessEventId, signal);
+        return aggregation;
+    }), aggregation.state, signal);
+}
+//# sourceMappingURL=create-lazy-aggregation.js.map

package/dist/management/access/create-lazy-aggregation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-lazy-aggregation.js","sourceRoot":"","sources":["../../../src/management/access/create-lazy-aggregation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,MAAM,UAAU,qBAAqB,CACnC,eAAyE,EACzE,UAAiB,EACjB,YAAyB;IAEzB,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,QAAQ,CACN,IAAO;YAEP,OAAO,wBAAwB,CAC7B,CAAC,MAAM,EAAE,EAAE,CACT,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CACzC,CAAC,OAAO,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC,EACJ,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAC5B,CAAC;QACJ,CAAC;QACD,OAAO,CAAiC,IAAO;YAC7C,OAAO,wBAAwB,CAC7B,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,EAC3B,CAAC,MAAM,EAAE,EAAE,CACT,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CACzC,CAAC,OAAO,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC,CACL,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,MAAmB;YAC/C,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CACzC,CAAC,OAAO,EAAE,CAAC;YACZ,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAAsC,EACtC,aAAqB,EACrB,MAAmB;IAEnB,OAAO,qBAAqB,CAC1B,CAAC,MAAM,EAAE,EAAE,CACT,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC,EACJ,WAAW,CAAC,KAAK,EACjB,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/management/access/resolve-version.d.ts

@@ -0,0 +1,3 @@
+import { VersionBuilder } from '../../runtime/version-builder.js';
+import { RuntimeEnv } from '../../environment/runtime-env.js';
+export declare function resolveVersion(version: string | VersionBuilder, env: RuntimeEnv): Promise<string>;

package/dist/management/access/resolve-version.js

@@ -0,0 +1,9 @@
+export function resolveVersion(version, env) {
+    if (typeof version === 'string') {
+        return Promise.resolve(version);
+    }
+    else {
+        return version.resolve(env);
+    }
+}
+//# sourceMappingURL=resolve-version.js.map

package/dist/management/access/resolve-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-version.js","sourceRoot":"","sources":["../../../src/management/access/resolve-version.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,cAAc,CAC5B,OAAgC,EAChC,GAAe;IAEf,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/management/access-instance.d.ts

@@ -0,0 +1,15 @@
+import type { AccessEvents } from './access/access-events.js';
+import { AggregationInfo, StreamInfo } from '../realm/create-realm-registry.js';
+import { SequencerPartition } from '../sequencer/sequencer-partition.js';
+import { AccessState } from './access/access-state.js';
+import { StreamInterface } from '../stream/stream-interface.js';
+import { UserContext } from './user-context.js';
+export interface AccessOptions {
+    managementStream: StreamInterface<AccessState, AccessEvents>;
+    context: UserContext;
+    registration: StreamInfo | AggregationInfo;
+}
+export declare function accessInstance(opts: AccessOptions, signal: AbortSignal): Promise<{
+    partition: SequencerPartition;
+    accessEventId: string | undefined;
+}>;

package/dist/management/access-instance.js

@@ -0,0 +1,197 @@
+import { failNever } from '../utils/fail-never.js';
+import { CustomError } from '../error/custom-error.js';
+import { generateId } from '../random/generate-id.js';
+export async function accessInstance(opts, signal) {
+    const accessEventId = generateId();
+    if (opts.registration.type === 'stream') {
+        // Fast path: a registered stream whose run already matches its
+        // definition needs no reconciliation. Pushing `access-stream` would
+        // only re-emit `stream-run-created` and re-materialize permissions,
+        // turning every read into a write. Derive the partition from the
+        // management snapshot instead and skip the push entirely.
+        const [existingDefinition, existingStream] = await Promise.all([
+            opts.managementStream.snapshot('streamDefinition').get({
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+            }, { signal }),
+            opts.managementStream.snapshot('streams').get({
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+                name: opts.context.name,
+            }, { signal }),
+        ]);
+        if (existingDefinition &&
+            existingStream &&
+            existingStream.data.currentRun === existingDefinition.data.currentRun &&
+            existingStream.data.authId === opts.context.authId) {
+            return {
+                partition: {
+                    run: existingStream.data.currentRun,
+                    name: existingStream.data.name,
+                    version: existingStream.data.version,
+                    pattern: existingStream.data.pattern,
+                    realm: opts.registration.identifier.realm,
+                    tenant: opts.registration.identifier.tenant,
+                },
+                accessEventId: undefined,
+            };
+        }
+        await opts.managementStream.push('access-stream', {
+            events: opts.registration.events,
+            state: opts.registration.state,
+            realm: opts.registration.identifier.realm,
+            version: opts.registration.identifier.version,
+            pattern: opts.registration.identifier.pattern,
+            args: opts.context.args,
+            auth: opts.context.auth,
+            name: opts.context.name,
+            stateGrant: opts.registration.stateGrant,
+            eventGrant: opts.registration.eventGrant,
+        }, {
+            signal: signal,
+            await: true,
+            id: accessEventId,
+        });
+        const res = await opts.managementStream.result(accessEventId, { signal });
+        if (res && !res.success) {
+            throw new CustomError('access-stream failed', {
+                error: res.error,
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+                name: opts.context.name,
+            });
+        }
+        const runOutputId = res?.success
+            ? res.outputs.find((o) => o.type === 'stream-run-created')?.id
+            : '';
+        const stream = await opts.managementStream.snapshot('streams').get({
+            version: opts.registration.identifier.version,
+            name: opts.context.name,
+            pattern: opts.registration.identifier.pattern,
+            realm: opts.registration.identifier.realm,
+        }, { signal });
+        if (!stream) {
+            throw new CustomError('unable to get stream', {
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+                name: opts.context.name,
+            });
+        }
+        return {
+            partition: {
+                run: stream.data.currentRun,
+                name: stream.data.name,
+                version: stream.data.version,
+                pattern: stream.data.pattern,
+                realm: opts.registration.identifier.realm,
+                tenant: opts.registration.identifier.tenant,
+            },
+            accessEventId: runOutputId,
+        };
+    }
+    else if (opts.registration.type === 'aggregation') {
+        // Fast path: a registered aggregation whose run is already
+        // materialized needs no reconciliation — skip the `access-aggregation`
+        // push and derive the partition from the management snapshot.
+        const [existingDefinition, existingAggregation] = await Promise.all([
+            opts.managementStream.snapshot('aggregationDefinition').get({
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+            }, { signal }),
+            opts.managementStream.snapshot('aggregations').get({
+                version: opts.registration.identifier.version,
+                name: opts.context.name,
+            }, { signal }),
+        ]);
+        if (existingDefinition &&
+            existingAggregation &&
+            existingAggregation.data.currentRun ===
+                existingDefinition.data.currentRun &&
+            existingAggregation.data.authId === opts.context.authId) {
+            const existingRun = await opts.managementStream
+                .snapshot('aggregationRuns')
+                .get({
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                name: opts.context.name,
+                run: existingDefinition.data.currentRun,
+            }, { signal });
+            if (existingRun) {
+                return {
+                    partition: {
+                        run: existingAggregation.data.currentRun,
+                        name: existingAggregation.data.name,
+                        version: existingAggregation.data.version,
+                        pattern: existingAggregation.data.pattern,
+                        realm: opts.registration.identifier.realm,
+                        tenant: opts.registration.identifier.tenant,
+                    },
+                    accessEventId: undefined,
+                };
+            }
+        }
+        await opts.managementStream.push('access-aggregation', {
+            events: opts.registration.events,
+            state: opts.registration.state,
+            realm: opts.registration.identifier.realm,
+            version: opts.registration.identifier.version,
+            pattern: opts.registration.identifier.pattern,
+            args: opts.context.args,
+            auth: opts.context.auth,
+            name: opts.context.name,
+            stateGrant: opts.registration.stateGrant,
+            eventGrant: opts.registration.eventGrant,
+        }, {
+            signal: signal,
+            await: true,
+            id: accessEventId,
+        });
+        const res = await opts.managementStream.result(accessEventId, { signal });
+        if (res && !res.success) {
+            throw new CustomError('access-aggregation failed', {
+                error: res.error,
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+                name: opts.context.name,
+            });
+        }
+        const runOutputId = res?.success
+            ? res.outputs.find((o) => o.type === 'aggregation-run-created')?.id
+            : '';
+        const aggregation = await opts.managementStream
+            .snapshot('aggregations')
+            .get({
+            version: opts.registration.identifier.version,
+            name: opts.context.name,
+        }, { signal });
+        if (!aggregation) {
+            throw new CustomError('unable to get aggregation', {
+                realm: opts.registration.identifier.realm,
+                version: opts.registration.identifier.version,
+                pattern: opts.registration.identifier.pattern,
+                name: opts.context.name,
+            });
+        }
+        return {
+            partition: {
+                run: aggregation.data.currentRun,
+                name: aggregation.data.name,
+                version: aggregation.data.version,
+                pattern: aggregation.data.pattern,
+                realm: opts.registration.identifier.realm,
+                tenant: opts.registration.identifier.tenant,
+            },
+            accessEventId: runOutputId,
+        };
+    }
+    else {
+        failNever(opts.registration, 'unknown id');
+    }
+}
+//# sourceMappingURL=access-instance.js.map

package/dist/management/access-instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-instance.js","sourceRoot":"","sources":["../../src/management/access-instance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAInD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAQtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAmB,EACnB,MAAmB;IAKnB,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,0DAA0D;QAC1D,MAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,GAAG,CACpD;gBACE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;aAC9C,EACD,EAAE,MAAM,EAAE,CACX;YACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAC3C;gBACE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,EACD,EAAE,MAAM,EAAE,CACX;SACF,CAAC,CAAC;QACH,IACE,kBAAkB;YAClB,cAAc;YACd,cAAc,CAAC,IAAI,CAAC,UAAU,KAAK,kBAAkB,CAAC,IAAI,CAAC,UAAU;YACrE,cAAc,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAClD,CAAC;YACD,OAAO;gBACL,SAAS,EAAE;oBACT,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU;oBACnC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI;oBAC9B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO;oBACpC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO;oBACpC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;oBACzC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM;iBAC5C;gBACD,aAAa,EAAE,SAAS;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9B,eAAe,EACf;YACE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;YAChC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAE9B,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;YACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAE7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;YACxC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;SACzC,EACD;YACE,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,IAAI;YACX,EAAE,EAAE,aAAa;SAClB,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,EAAE,OAAO;YAC9B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAChE;YACE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAC7C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;SAC1C,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,SAAS,EAAE;gBACT,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM;aAC5C;YACD,aAAa,EAAE,WAAW;SAC3B,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpD,2DAA2D;QAC3D,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,GAAG,CACzD;gBACE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;aAC9C,EACD,EAAE,MAAM,EAAE,CACX;YACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,GAAG,CAChD;gBACE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,EACD,EAAE,MAAM,EAAE,CACX;SACF,CAAC,CAAC;QACH,IACE,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB,CAAC,IAAI,CAAC,UAAU;gBACjC,kBAAkB,CAAC,IAAI,CAAC,UAAU;YACpC,mBAAmB,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EACvD,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB;iBAC5C,QAAQ,CAAC,iBAAiB,CAAC;iBAC3B,GAAG,CACF;gBACE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACvB,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,UAAU;aACxC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;YACJ,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;oBACL,SAAS,EAAE;wBACT,GAAG,EAAE,mBAAmB,CAAC,IAAI,CAAC,UAAU;wBACxC,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI;wBACnC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,OAAO;wBACzC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,OAAO;wBACzC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;wBACzC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM;qBAC5C;oBACD,aAAa,EAAE,SAAS;iBACzB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9B,oBAAoB,EACpB;YACE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;YAChC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YAE9B,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;YACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAE7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;YACxC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU;SACzC,EACD;YACE,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,IAAI;YACX,EAAE,EAAE,aAAa;SAClB,CACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,WAAW,CAAC,2BAA2B,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,EAAE,OAAO;YAC9B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,EAAE,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB;aAC5C,QAAQ,CAAC,cAAc,CAAC;aACxB,GAAG,CACF;YACE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;YAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SACxB,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,WAAW,CAAC,2BAA2B,EAAE;gBACjD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;gBAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,SAAS,EAAE;gBACT,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI;gBAC3B,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;gBACjC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;gBACjC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK;gBACzC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM;aAC5C;YACD,aAAa,EAAE,WAAW;SAC3B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/management/access-management.d.ts

@@ -0,0 +1,17 @@
+import { StateDeclarations } from '../storage/state-declaration.js';
+import { EventDeclarations } from '../event-store/event-declarations.js';
+import { AggregateHostRuntime, StreamHostRuntime } from '../runtime/host-runtime.js';
+import { StreamInstanceOptions } from '../stream/stream-instance-options.js';
+import { StreamInterface } from '../stream/stream-interface.js';
+import { AggregateInterface } from '../aggregation/aggregate-interface.js';
+import { RealmDefinition } from '../realm/realm-definition.js';
+import { AuthProviders } from '../authentication/auth-providers.js';
+import { AggregationRegistration } from '../registry/aggregation-registration.js';
+import { StreamRegistration } from '../registry/stream-registration.js';
+import { OutputDeclarations } from '../stream/output-declarations.js';
+export interface AccessManagement {
+    getStream<TState extends StateDeclarations, TEvent extends EventDeclarations>(tenant: string, stream: StreamHostRuntime<TState, TEvent, OutputDeclarations, RealmDefinition<AuthProviders>>, options: StreamInstanceOptions): StreamInterface<TState, TEvent>;
+    getAggregation<TState extends StateDeclarations>(tenant: string, aggregation: AggregateHostRuntime<TState, RealmDefinition<AuthProviders>>, options: StreamInstanceOptions): AggregateInterface<TState>;
+    getStreamFromRegistration(tenant: string, stream: StreamRegistration, options: StreamInstanceOptions): StreamInterface<any, any>;
+    getAggregationFromRegistration(tenant: string, stream: AggregationRegistration, options: StreamInstanceOptions): AggregateInterface<any>;
+}

package/dist/management/access-management.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access-management.js.map

package/dist/management/access-management.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-management.js","sourceRoot":"","sources":["../../src/management/access-management.ts"],"names":[],"mappings":""}

package/dist/management/aggregation-access.d.ts

@@ -0,0 +1,8 @@
+import { StateDefinitions } from '../storage/state-declaration.js';
+import { Reader } from '../sequencer/reader.js';
+import { RemoteSequencer } from '../sequencer/create-remote-sequencer.js';
+import { InMemorySequencer } from '../sequencer/in-memory-sequencer.js';
+export interface AggregationAccess<TState extends StateDefinitions> {
+    reader: Reader<TState>;
+    sequencer: RemoteSequencer | InMemorySequencer;
+}

package/dist/management/aggregation-access.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=aggregation-access.js.map

package/dist/management/aggregation-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregation-access.js","sourceRoot":"","sources":["../../src/management/aggregation-access.ts"],"names":[],"mappings":""}

package/dist/management/aggregation-interface-options.d.ts

@@ -0,0 +1,9 @@
+import { StateDefinitions } from '../storage/state-declaration.js';
+import { Lazy } from '../lazy/lazy.js';
+import { AggregationAccess } from './aggregation-access.js';
+import { Telemetry } from '../tracer/telemetry.js';
+export interface AggregationInterfaceOptions<TState extends StateDefinitions> {
+    lazyAccess: (signal: AbortSignal) => Lazy<AggregationAccess<TState>>;
+    state: TState;
+    telemetry: Telemetry;
+}

package/dist/management/aggregation-interface-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=aggregation-interface-options.js.map

package/dist/management/aggregation-interface-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregation-interface-options.js","sourceRoot":"","sources":["../../src/management/aggregation-interface-options.ts"],"names":[],"mappings":""}

package/dist/management/apply-runtime-result-to-instance.d.ts

@@ -0,0 +1,7 @@
+import { StoredEvent } from '../event-store/stored-event.js';
+import { StateDefinitions } from '../storage/state-declaration.js';
+import { ProcessorStorage } from '../sequencer/create-sequencer-storage.js';
+import { RuntimeOptions } from './runtime-options.js';
+import { HostRuntimeContext, HostRuntimeExecution } from '../runtime/host-runtime.js';
+import { RuntimeResult } from '../runtime/runtime-result.js';
+export declare function applyRuntimeResultToInstance<TState extends StateDefinitions>(context: HostRuntimeContext, storage: ProcessorStorage<TState>, state: TState, host: HostRuntimeExecution<TState>, evt: StoredEvent, runtime: RuntimeOptions, signal: AbortSignal): Promise<RuntimeResult>;

package/dist/management/apply-runtime-result-to-instance.js

@@ -0,0 +1,80 @@
+import { sha1 } from '../authentication/sha1.js';
+import { UnsuccessfulExecutionError } from '../error/unsuccessful-execution-error.js';
+import { createTrackedTransactionClient } from '../storage/tracker/create-tracked-transaction-client.js';
+import { createLogger } from '../logger/logger.js';
+const logger = createLogger('sequencer');
+export async function applyRuntimeResultToInstance(context, storage, state, host, evt, runtime, signal) {
+    const random = await sha1(runtime.env, runtime.seed + evt.id); // TODO check seed security
+    try {
+        const result = await storage.transaction(async function (trx) {
+            const stateClient = trx.storage('state');
+            const trackedState = createTrackedTransactionClient(stateClient, storage.storageName, state, runtime.queue, signal);
+            const result = await host.execute(context, trackedState, evt, {
+                text: random,
+            }, runtime.env, runtime.telemetry, signal);
+            if (!result.success) {
+                throw new UnsuccessfulExecutionError(result);
+            }
+            const outputs = result.outputs.map((o) => ({
+                id: o.id,
+                type: o.type,
+            }));
+            const operation = {
+                eventId: evt.id,
+                result: {
+                    eventId: evt.id,
+                    success: true,
+                    outputs: outputs,
+                },
+                appliedAt: new Date(),
+                eventAt: evt.storedAt,
+            };
+            await trx.storage('processor').state('operations').upsert(operation);
+            for (let i = 0; i < result.outputs.length; i++) {
+                const op = result.operation[i];
+                if (!op) {
+                    continue;
+                }
+                await trx.storage('processor').state('stateOperations').upsert({
+                    transaction: op,
+                    sourceEventDate: evt.storedAt,
+                    eventId: evt.id,
+                    transactionIndex: i,
+                });
+            }
+            await trx.storage('processor').state('eventSequence').upsert({
+                eventId: evt.id,
+                appliedAt: new Date(),
+                error: undefined,
+            });
+            return result;
+        }, signal);
+        logger.debug('processed success', { id: evt.id });
+        return result;
+    }
+    catch (e) {
+        if (e instanceof UnsuccessfulExecutionError) {
+            const operation = {
+                eventId: evt.id,
+                result: {
+                    eventId: evt.id,
+                    success: false,
+                    error: e.result.error,
+                    stacktrace: e.result.stacktrace,
+                },
+                appliedAt: new Date(),
+                eventAt: evt.storedAt,
+            };
+            await storage
+                .storage('processor')
+                .state('operations')
+                .upsert(operation, signal);
+            logger.warn('processed failed', { id: evt.id });
+            return e.result;
+        }
+        else {
+            throw e;
+        }
+    }
+}
+//# sourceMappingURL=apply-runtime-result-to-instance.js.map

package/dist/management/apply-runtime-result-to-instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-runtime-result-to-instance.js","sourceRoot":"","sources":["../../src/management/apply-runtime-result-to-instance.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAOtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yDAAyD,CAAC;AAEzG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAGhD,OAA2B,EAC3B,OAAiC,EACjC,KAAa,EACb,IAAkC,EAClC,GAAgB,EAChB,OAAuB,EACvB,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B;IAE1F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,WAAW,GAAG;YAC1D,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,8BAA8B,CACjD,WAAW,EACX,OAAO,CAAC,WAAW,EACnB,KAAK,EACL,OAAO,CAAC,KAAK,EACb,MAAM,CACP,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,OAAO,EACP,YAAY,EACZ,GAAG,EACH;gBACE,IAAI,EAAE,MAAM;aACb,EACD,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,EACjB,MAAM,CACP,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC,CAAC;YACJ,MAAM,SAAS,GAA4B;gBACzC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACf,MAAM,EAAE;oBACN,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,OAAO;iBACjB;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;YACF,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAErE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;oBAC7D,WAAW,EAAE,EAAE;oBACf,eAAe,EAAE,GAAG,CAAC,QAAQ;oBAC7B,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,gBAAgB,EAAE,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;gBAC3D,OAAO,EAAE,GAAG,CAAC,EAAE;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,0BAA0B,EAAE,CAAC;YAC5C,MAAM,SAAS,GAA4B;gBACzC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACf,MAAM,EAAE;oBACN,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;oBACrB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;iBAChC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC;YACF,MAAM,OAAO;iBACV,OAAO,CAAC,WAAW,CAAC;iBACpB,KAAK,CAAC,YAAY,CAAC;iBACnB,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAE7B,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,MAAM,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/management/assert-state-permission.d.ts

@@ -0,0 +1,11 @@
+import { Lazy } from '../lazy/lazy.js';
+import { UserContext } from './user-context.js';
+import { SequencerPartition } from '../sequencer/sequencer-partition.js';
+import { PermissionState } from './permission/permission-aggregation.js';
+import { AggregateInterface } from '../aggregation/aggregate-interface.js';
+export declare function assertStatePermission(opts: {
+    stateName: string;
+    lazyContext: Lazy<UserContext>;
+    lazyPartition: Lazy<SequencerPartition>;
+    permission: AggregateInterface<PermissionState>;
+}, signal: AbortSignal): Promise<void>;

package/dist/management/assert-state-permission.js

@@ -0,0 +1,25 @@
+import { PermissionError } from './permission-error.js';
+export async function assertStatePermission(opts, signal) {
+    const partition = await opts.lazyPartition.resolve();
+    const context = await opts.lazyContext.resolve();
+    const permission = await opts.permission.snapshot('permissions').get({
+        streamVersion: partition.version,
+        streamName: partition.name,
+        type: `state`,
+        identifier: opts.stateName,
+        authId: context.authId,
+        run: partition.run,
+        realm: partition.realm,
+    }, { signal: signal });
+    if (!permission || !permission.data.read) {
+        throw new PermissionError({
+            context,
+            partition,
+            detail: {
+                kind: 'state-read',
+                stateName: opts.stateName,
+            },
+        });
+    }
+}
+//# sourceMappingURL=assert-state-permission.js.map

package/dist/management/assert-state-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-state-permission.js","sourceRoot":"","sources":["../../src/management/assert-state-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAKC,EACD,MAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,GAAG,CAClE;QACE,aAAa,EAAE,SAAS,CAAC,OAAO;QAChC,UAAU,EAAE,SAAS,CAAC,IAAI;QAC1B,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;IACF,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC;YACxB,OAAO;YACP,SAAS;YACT,MAAM,EAAE;gBACN,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}