@kubun/plugin-rpc 0.8.1 → 0.9.0

package/lib/handlers.js

@@ -1 +1 @@
-import{consume as a}from"@enkaku/generator";import{stringifyToken as t}from"@enkaku/token";import{DocumentID as e}from"@kubun/id";import{convertPatchInput as r,createMutationOperations as n}from"@kubun/mutation";function i(a){let t={data:a.data};return null!=a.errors&&(t.errors=a.errors.map(a=>a.toJSON())),null!=a.extensions&&(t.extensions=a.extensions),t}function o(a,t){let e=a.message?.payload,r=e?.sub??e?.iss??t;return{id:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:r}}export function createGraphHandlers(s){let{allowDelegatedMutations:u,engine:l,getRandomValues:p,graph:c,defaultDID:m,hlc:d,signingIdentity:g,transactionManager:h}=s;return{"graph/deploy":async a=>await l.deployGraph({clusters:a.param.clusters,id:a.param.id,name:a.param.name,plugins:a.param.plugins}),"graph/list":async()=>await l.listGraphs(),"graph/load":async a=>await l.loadGraph({id:a.param.id}),"graph/mutate":async a=>{let{viewerDID:s}=o(a,m);if(null!=a.param.mutations){let t=a.param.mutations,e=Object.keys(t),r=e.map(a=>t[a]),{results:n}=await c.applyVerifiedMutations({tokens:r,graphID:a.param.id}),o={};for(let a=0;a<e.length;a++)o[e[a]]=n[a].document;return i(await c.execute({graphID:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s,contextExtensions:{executeCreateMutation:async a=>o[a.info.path.key],executeSetMutation:async a=>o[a.info.path.key],executeUpdateMutation:async a=>o[a.info.path.key],executeRemoveMutation:async()=>{}}}))}if(!u)throw Error("Delegated mutations not enabled. Set allowDelegatedMutations: true or provide pre-signed mutations.");if(null==g)throw Error("Delegated mutations require a SigningIdentity on the engine");let y=a.param.transactionID??null;if(null==y)return i(await l.mutateGraph({id:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s}));let w=async a=>{let r=t(await g.signToken(a)),n=h.getTransaction(y);if(null==n)throw Error(`Transaction not found or expired: ${y}`);let i=e.fromString(a.sub),o="change"===a.typ,s={id:a.sub,model:i.model.toString(),owner:a.aud??a.iss,data:o?null:a.data,createdAt:new Date,updatedAt:o?new Date:null};return n.mutations.push({mutation:a,jwt:r,authorDID:a.iss,documentID:s.id,result:s}),s},D=n({issuer:g.id,hlc:d,getRandomValues:p,processSetMutation:async a=>await w(a),processChangeMutation:async a=>await w(a)});return i(await c.execute({graphID:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s,contextExtensions:{executeCreateMutation:async a=>await D.createDocument({modelID:a.modelID,data:a.data}),executeSetMutation:async a=>await D.setDocument({modelID:a.modelID,unique:a.unique,data:a.data}),executeUpdateMutation:async a=>await D.updateDocument({docID:a.input.id,patch:r(a.input.patch)}),executeRemoveMutation:async a=>{await D.removeDocument({docID:a.id})}}}))},"graph/query":async a=>i(await l.queryGraph(o(a,m))),"graph/subscribe":async t=>{let e=await l.subscribeToGraph(o(t,m));if(t.signal.aborted)return null;if("errors"in e)return i(e);let r=t.writable.getWriter();try{await a(e,async a=>{await r.write(i(a))},t.signal)}catch(a){if(!t.signal.aborted)throw a}finally{try{await r.close()}catch{}}return null},"graph/beginTransaction":async a=>{let t=a.message?.payload,e=t?.iss??m;return await l.loadGraph({id:a.param.id}),{transactionID:h.beginTransaction(e,a.param.id).id}},"graph/commitTransaction":async a=>{let t=h.getTransaction(a.param.transactionID);if(null==t)throw Error(`Transaction not found or expired: ${a.param.transactionID}`);if(t.mutations.length>0){let a=t.mutations.map(a=>a.jwt);await c.applyVerifiedMutations({tokens:a,graphID:t.graphID})}return h.markCommitted(a.param.transactionID),{success:!0}},"graph/rollbackTransaction":async a=>(h.rollbackTransaction(a.param.transactionID),{success:!0})}}
+import{consume as a}from"@enkaku/generator";import{stringifyToken as t}from"@enkaku/token";import{DocumentID as e}from"@kubun/id";import{convertPatchInput as r,createMutationOperations as n}from"@kubun/mutation";function i(a){let t={data:a.data};return null!=a.errors&&(t.errors=a.errors.map(a=>a.toJSON())),null!=a.extensions&&(t.extensions=a.extensions),t}function o(a,t){let e=a.message?.payload,r=e?.sub??e?.iss??t;return{id:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:r}}export function createGraphHandlers(s){let{allowDelegatedMutations:u,engine:l,getRandomValues:p,graph:c,defaultDID:d,hlc:m,signingIdentity:g,transactionManager:h}=s;return{"graph/deploy":async a=>await l.deployGraph({clusters:a.param.clusters,id:a.param.id,name:a.param.name,plugins:a.param.plugins}),"graph/list":async()=>await l.listGraphs(),"graph/load":async a=>await l.loadGraph({id:a.param.id}),"graph/mutate":async a=>{let{viewerDID:s}=o(a,d);if(null!=a.param.mutations){let t=a.param.mutations,e=Object.keys(t),r=e.map(a=>t[a]),{results:n}=await c.applyVerifiedMutations({tokens:r}),o={};for(let a=0;a<e.length;a++){let t=n[a].document;if(null==t)throw Error("Unexpected dropped mutation in pre-signed apply (no gate configured)");o[e[a]]=t}return i(await c.execute({graphID:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s,contextExtensions:{executeCreateMutation:async a=>o[a.info.path.key],executeSetMutation:async a=>o[a.info.path.key],executeUpdateMutation:async a=>o[a.info.path.key],executeRemoveMutation:async()=>{}}}))}if(!u)throw Error("Delegated mutations not enabled. Set allowDelegatedMutations: true or provide pre-signed mutations.");if(null==g)throw Error("Delegated mutations require a SigningIdentity on the engine");let y=a.param.transactionID??null;if(null==y)return i(await l.mutateGraph({id:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s}));let w=async a=>{let r=t(await g.signToken(a)),n=h.getTransaction(y);if(null==n)throw Error(`Transaction not found or expired: ${y}`);let i=e.fromString(a.sub),o="change"===a.typ,s={id:a.sub,model:i.model.toString(),owner:a.aud??a.iss,data:o?null:a.data,createdAt:new Date,updatedAt:o?new Date:null};return n.mutations.push({mutation:a,jwt:r,authorDID:a.iss,documentID:s.id,result:s}),s},f=n({issuer:g.id,hlc:m,getRandomValues:p,processSetMutation:async a=>await w(a),processChangeMutation:async a=>await w(a)});return i(await c.execute({graphID:a.param.id,text:a.param.text,variables:a.param.variables??{},viewerDID:s,contextExtensions:{executeCreateMutation:async a=>await f.createDocument({modelID:a.modelID,data:a.data}),executeSetMutation:async a=>await f.setDocument({modelID:a.modelID,unique:a.unique,data:a.data}),executeUpdateMutation:async a=>await f.updateDocument({docID:a.input.id,patch:r(a.input.patch)}),executeRemoveMutation:async a=>{await f.removeDocument({docID:a.id})}}}))},"graph/query":async a=>i(await l.queryGraph(o(a,d))),"graph/subscribe":async t=>{let e=await l.subscribeToGraph(o(t,d));if(t.signal.aborted)return null;if("errors"in e)return i(e);let r=t.writable.getWriter();try{await a(e,async a=>{await r.write(i(a))},t.signal)}catch(a){if(!t.signal.aborted)throw a}finally{try{await r.close()}catch{}}return null},"graph/beginTransaction":async a=>{let t=a.message?.payload,e=t?.iss??d;return await l.loadGraph({id:a.param.id}),{transactionID:h.beginTransaction(e,a.param.id).id}},"graph/commitTransaction":async a=>{let t=h.getTransaction(a.param.transactionID);if(null==t)throw Error(`Transaction not found or expired: ${a.param.transactionID}`);if(t.mutations.length>0){let a=t.mutations.map(a=>a.jwt);await c.applyVerifiedMutations({tokens:a})}return h.markCommitted(a.param.transactionID),{success:!0}},"graph/rollbackTransaction":async a=>(h.rollbackTransaction(a.param.transactionID),{success:!0})}}

package/lib/index.d.ts

@@ -1,5 +1,5 @@
 import type { ServerTransportOf } from '@enkaku/protocol';
-import { type Server } from '@enkaku/server';
+import { type AccessRules, type Server } from '@enkaku/server';
 import type { KubunPlugin, PluginFactoryParams } from '@kubun/engine';
 import type { GraphProtocol } from '@kubun/protocol';
 import { type TransactionManagerOptions } from './transaction-manager.js';
@@ -9,8 +9,11 @@ export type ServerTransport = ServerTransportOf<GraphProtocol>;
  * Options for the RPC plugin.
  */
 export type RPCPluginOptions = {
-    /** Enkaku protocol access control. Default: true. */
-    accessControl?: false | true | Record<string, boolean | Array<string>>;
+    /**
+     * Enkaku access rules. `false` disables auth entirely. Default: `{}`
+     * (auth required, no procedures publicly accessible — server-only access).
+     */
+    accessRules?: false | AccessRules;
     /** Allow the engine to sign mutations on behalf of clients (delegated mode). Default: false. */
     allowDelegatedMutations?: boolean;
     /** Configuration for the transaction manager. */

package/lib/index.js

@@ -1 +1 @@
-import{serve as e}from"@enkaku/server";import{isSigningIdentity as t}from"@enkaku/token";import{createGraphHandlers as n}from"./handlers.js";import{TransactionManager as i}from"./transaction-manager.js";export function createRPCPlugin(r){return o=>{let a=[],s=t(o.identity)?o.identity:null,g=new i({getRandomID:o.runtime.getRandomID,...r?.transactionConfig}),d=n({allowDelegatedMutations:r?.allowDelegatedMutations??!1,defaultDID:o.identity.id,engine:o.engine,getRandomValues:o.runtime.getRandomValues,graph:o.graph,signingIdentity:s,hlc:o.hlc,transactionManager:g});return{name:"rpc",api:{serve:(t,n)=>{let i=r?.accessControl??!0,s=e({accessControl:i,getRandomID:o.runtime.getRandomID,handlers:d,identity:!1!==i?o.identity:void 0,logger:o.getLogger("rpc-server"),signal:n,transport:t});return a.push(s),s}},dispose:async()=>{for(let e of(g.dispose(),a))await e.dispose()}}}}
+import{serve as e}from"@enkaku/server";import{isSigningIdentity as t}from"@enkaku/token";import{createGraphHandlers as n}from"./handlers.js";import{TransactionManager as i}from"./transaction-manager.js";export function createRPCPlugin(r){return a=>{let o=[],s=t(a.identity)?a.identity:null,g=new i({getRandomID:a.runtime.getRandomID,...r?.transactionConfig}),l=n({allowDelegatedMutations:r?.allowDelegatedMutations??!1,defaultDID:a.identity.id,engine:a.engine,getRandomValues:a.runtime.getRandomValues,graph:a.graph,signingIdentity:s,hlc:a.hlc,transactionManager:g});return{name:"rpc",api:{serve:(t,n)=>{let i=r?.accessRules,s={getRandomID:a.runtime.getRandomID,handlers:l,logger:a.getLogger("rpc-server"),signal:n,transport:t},g=e(!1===i?s:{...s,identity:a.identity,accessRules:i??{}});return o.push(g),g}},dispose:async()=>{for(let e of(g.dispose(),o))await e.dispose()}}}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/plugin-rpc",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "license": "see LICENSE.md",
   "type": "module",
   "main": "lib/index.js",
@@ -14,24 +14,24 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@enkaku/generator": "^0.14.0",
-    "@enkaku/runtime": "^0.14.0",
-    "@enkaku/server": "^0.14.3",
-    "@enkaku/token": "0.14.1",
+    "@enkaku/generator": "^0.15.0",
+    "@enkaku/runtime": "^0.15.0",
+    "@enkaku/server": "^0.15.0",
+    "@enkaku/token": "^0.15.0",
     "graphql": "^16.13.2",
-    "@kubun/db": "^0.8.1",
-    "@kubun/engine": "^0.8.1",
-    "@kubun/graphql": "^0.8.1",
-    "@kubun/hlc": "^0.8.0",
-    "@kubun/protocol": "^0.8.0",
-    "@kubun/mutation": "^0.8.1"
+    "@kubun/db": "^0.9.0",
+    "@kubun/engine": "^0.9.0",
+    "@kubun/graphql": "^0.9.0",
+    "@kubun/hlc": "^0.9.0",
+    "@kubun/mutation": "^0.9.0",
+    "@kubun/protocol": "^0.9.0"
   },
   "devDependencies": {
-    "@enkaku/transport": "0.14.0",
-    "@kubun/client": "^0.8.0",
-    "@kubun/id": "^0.8.0",
-    "@kubun/store-graph": "^0.8.0",
-    "@kubun/test-utils": "^0.8.0"
+    "@enkaku/transport": "^0.15.0",
+    "@kubun/client": "^0.9.0",
+    "@kubun/test-utils": "^0.9.0",
+    "@kubun/store-graph": "^0.9.0",
+    "@kubun/id": "^0.9.0"
   },
   "scripts": {
     "build:clean": "del lib",