@moltzap/router 2026.902.0

package/dist/router/poll.js

@@ -0,0 +1,118 @@
+/** @file Verified polling over the volatile feed, cursor codec, and bounded waiters. */
+import { InternalServerError, OverloadedError, } from "@moltzap/identity";
+import canonicalize from "canonicalize";
+import { Duration, Effect, Option, Schema } from "effect";
+import { RouterPollResult, } from "./contract.js";
+import { entriesAfter } from "./feed.js";
+/**
+ * Builds endpoint-wide bounded polling over one volatile global feed.
+ *
+ * @param input Current process state and finite poll bounds.
+ * @param input.routerInstanceId Current volatile process identity.
+ * @param input.feed Global volatile feed.
+ * @param input.pollWaiters Addressed poll-waiter notifications.
+ * @param input.cursorCodec Caller-bound cursor codec.
+ * @param input.pollMessageLimit Maximum messages in one result.
+ * @param input.pollResponseByteLimit Maximum complete result bytes.
+ * @returns The authenticated poll domain operation.
+ */
+export const makeRouterPoll = (input) => Object.freeze({
+    handle: (request, verifiedRequest) => handlePoll(input, request, verifiedRequest),
+});
+const HOLD_DURATION = Duration.seconds(25);
+const utf8Encoder = new TextEncoder();
+const encodedResultLength = (result) => Schema.encode(RouterPollResult)(result).pipe(Effect.catchTag("ParseError", () => Effect.fail(new InternalServerError())), Effect.flatMap((encoded) => {
+    const jcs = canonicalize(encoded);
+    return jcs === undefined
+        ? Effect.fail(new InternalServerError())
+        : Effect.succeed(utf8Encoder.encode(jcs).byteLength);
+}));
+const addressedDataIsReady = (feed, callerAgentId, order) => feed.snapshot.pipe(Effect.map((snapshot) => order < snapshot.greatestEvictedOrder ||
+    entriesAfter(snapshot, order).some((entry) => entry.recipients.has(callerAgentId))));
+const makeBatch = (input, callerAgentId, signedMessages, lastScannedOrder) => input.cursorCodec.encrypt({ agentId: callerAgentId, lastScannedOrder }).pipe(Effect.catchTag("PollCursorEncryptionError", () => Effect.fail(new InternalServerError())), Effect.map((pollCursor) => ({
+    kind: "batch",
+    routerInstanceId: input.routerInstanceId,
+    signedMessages,
+    pollCursor,
+})));
+const scanEntry = (input, callerAgentId, state, entry) => {
+    if (!entry.recipients.has(callerAgentId)) {
+        return Effect.succeed(Option.some({
+            ...state,
+            lastScannedOrder: entry.order,
+        }));
+    }
+    if (state.selected.length >= input.pollMessageLimit) {
+        return Effect.succeed(Option.none());
+    }
+    const selected = [...state.selected, entry.signedMessage];
+    return makeBatch(input, callerAgentId, selected, entry.order).pipe(Effect.flatMap(encodedResultLength), Effect.map((byteLength) => byteLength <= input.pollResponseByteLimit
+        ? Option.some({
+            selected,
+            lastScannedOrder: entry.order,
+        })
+        : Option.none()));
+};
+const scan = (input, snapshot, callerAgentId, startOrder) => Effect.gen(function* () {
+    let state = {
+        selected: [],
+        lastScannedOrder: startOrder,
+    };
+    let reachedTail = true;
+    for (const entry of entriesAfter(snapshot, startOrder)) {
+        const next = yield* scanEntry(input, callerAgentId, state, entry);
+        if (Option.isNone(next)) {
+            reachedTail = false;
+            break;
+        }
+        state = next.value;
+    }
+    return {
+        result: yield* makeBatch(input, callerAgentId, state.selected, state.lastScannedOrder),
+        reachedTail,
+        lastScannedOrder: state.lastScannedOrder,
+    };
+});
+const feedGap = (routerInstanceId) => ({
+    kind: "feed_gap",
+    routerInstanceId,
+});
+const holdAtTail = (input, callerAgentId, startOrder) => input.pollWaiters
+    .awaitSignal(callerAgentId, addressedDataIsReady(input.feed, callerAgentId, startOrder))
+    .pipe(Effect.raceFirst(Effect.sleep(HOLD_DURATION)), Effect.catchTag("HeldPollCapacityError", () => Effect.fail(new OverloadedError())));
+const continueFromOrder = (input, callerAgentId, startOrder) => Effect.gen(function* () {
+    const snapshot = yield* input.feed.snapshot;
+    if (startOrder > snapshot.tailOrder) {
+        return { kind: "cursor_invalid" };
+    }
+    if (startOrder < snapshot.greatestEvictedOrder) {
+        return feedGap(input.routerInstanceId);
+    }
+    const first = yield* scan(input, snapshot, callerAgentId, startOrder);
+    const hasImmediateResult = first.result.kind !== "batch" ||
+        first.result.signedMessages.length > 0 ||
+        !first.reachedTail;
+    if (hasImmediateResult) {
+        return first.result;
+    }
+    yield* holdAtTail(input, callerAgentId, first.lastScannedOrder);
+    const finalSnapshot = yield* input.feed.snapshot;
+    if (first.lastScannedOrder < finalSnapshot.greatestEvictedOrder) {
+        return feedGap(input.routerInstanceId);
+    }
+    return (yield* scan(input, finalSnapshot, callerAgentId, first.lastScannedOrder)).result;
+});
+const continuePoll = (input, callerAgentId, pollCursor) => input.cursorCodec.decrypt(pollCursor, callerAgentId).pipe(Effect.option, Effect.flatMap(Option.match({
+    onNone: () => Effect.succeed({
+        kind: "cursor_invalid",
+    }),
+    onSome: (order) => continueFromOrder(input, callerAgentId, order),
+})));
+function handlePoll(input, request, verifiedRequest) {
+    const callerAgentId = verifiedRequest.callerAgentId;
+    if (request.pollCursor !== undefined) {
+        return continuePoll(input, callerAgentId, request.pollCursor);
+    }
+    return input.feed.snapshot.pipe(Effect.flatMap((snapshot) => makeBatch(input, callerAgentId, [], snapshot.tailOrder)));
+}
+//# sourceMappingURL=poll.js.map

package/dist/router/poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/router/poll.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAEL,mBAAmB,EACnB,eAAe,GAEhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,YAAY,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAG1D,OAAO,EAIL,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAsC,MAAM,WAAW,CAAC;AAyB7E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAuB,EAAc,EAAE,CACpE,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,EAAE,CAAC,OAA0B,EAAE,eAA+B,EAAE,EAAE,CACtE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC;CAC9C,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAatC,MAAM,mBAAmB,GAAG,CAC1B,MAA6B,EACe,EAAE,CAC9C,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC,EAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,GAAG,KAAK,SAAS;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;AACzD,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAC3B,IAAgB,EAChB,aAAsB,EACtB,KAAa,EACW,EAAE,CAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,MAAM,CAAC,GAAG,CACR,CAAC,QAAQ,EAAE,EAAE,CACX,KAAK,GAAG,QAAQ,CAAC,oBAAoB;IACrC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CACpC,CACJ,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,CAChB,KAAuB,EACvB,aAAsB,EACtB,cAAwC,EACxC,gBAAwB,EACmC,EAAE,CAC7D,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CACvC,EACD,MAAM,CAAC,GAAG,CACR,CAAC,UAAU,EAAyB,EAAE,CAAC,CAAC;IACtC,IAAI,EAAE,OAAO;IACb,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;IACxC,cAAc;IACd,UAAU;CACX,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,CAChB,KAAuB,EACvB,aAAsB,EACtB,KAAgB,EAChB,KAAsC,EACwB,EAAE;IAChE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,OAAO,CACnB,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,KAAK;YACR,gBAAgB,EAAE,KAAK,CAAC,KAAK;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EACnC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACxB,UAAU,IAAI,KAAK,CAAC,qBAAqB;QACvC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ;YACR,gBAAgB,EAAE,KAAK,CAAC,KAAK;SAC9B,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAClB,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CACX,KAAuB,EACvB,QAAsB,EACtB,aAAsB,EACtB,UAAkB,EAC8B,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,GAAc;QACrB,QAAQ,EAAE,EAAE;QACZ,gBAAgB,EAAE,UAAU;KAC7B,CAAC;IACF,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,WAAW,GAAG,KAAK,CAAC;YACpB,MAAM;QACR,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,CAAC,SAAS,CACtB,KAAK,EACL,aAAa,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,gBAAgB,CACvB;QACD,WAAW;QACX,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,CACd,gBAAkC,EACX,EAAE,CAAC,CAAC;IAC3B,IAAI,EAAE,UAAU;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CACjB,KAAuB,EACvB,aAAsB,EACtB,UAAkB,EACoB,EAAE,CACxC,KAAK,CAAC,WAAW;KACd,WAAW,CACV,aAAa,EACb,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,CAC5D;KACA,IAAI,CACH,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAC7C,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CACnC,CACF,CAAC;AAEN,MAAM,iBAAiB,GAAG,CACxB,KAAuB,EACvB,aAAsB,EACtB,UAAkB,EACiC,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5C,IAAI,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACtE,MAAM,kBAAkB,GACtB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAC7B,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,KAAK,CAAC,WAAW,CAAC;IACrB,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;IACjD,IAAI,KAAK,CAAC,gBAAgB,GAAG,aAAa,CAAC,oBAAoB,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACjB,KAAK,EACL,aAAa,EACb,aAAa,EACb,KAAK,CAAC,gBAAgB,CACvB,CAAC,CAAC,MAAM,CAAC;AACZ,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,KAAuB,EACvB,aAAsB,EACtB,UAAsB,EAC6B,EAAE,CACrD,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,KAAK,CAAC;IACX,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,OAAO,CAAwB;QACpC,IAAI,EAAE,gBAAgB;KACvB,CAAC;IACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC;CAClE,CAAC,CACH,CACF,CAAC;AAEJ,SAAS,UAAU,CACjB,KAAuB,EACvB,OAA0B,EAC1B,eAA+B;IAE/B,MAAM,aAAa,GAAG,eAAe,CAAC,aAAa,CAAC;IACpD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CACxD,CACF,CAAC;AACJ,CAAC"}

package/dist/router/rpc.d.ts

@@ -0,0 +1,37 @@
+import { AuthenticationFailedError, InternalServerError, OverloadedError, type VerifiedAgentRequest } from "@moltzap/identity";
+import { Effect, type Scope } from "effect";
+import type { RouterPoll } from "./poll.js";
+import type { RouterSend } from "./send.js";
+import { type RawRouterSendRequest as RawRouterSendRequestValue, type RouterPollRequest as RouterPollRequestValue, type RouterPollResult as RouterPollResultValue, type RouterSendResult as RouterSendResultValue } from "./contract.js";
+type RouterHandlerError = AuthenticationFailedError | OverloadedError | InternalServerError;
+/** Typed package-private client used by the HTTP adapter. */
+export interface RouterRpcClient {
+    readonly send: (input: {
+        readonly request: RawRouterSendRequestValue;
+    }) => Effect.Effect<RouterSendResultValue, RouterHandlerError>;
+    readonly poll: (input: {
+        readonly request: RouterPollRequestValue;
+    }) => Effect.Effect<RouterPollResultValue, RouterHandlerError>;
+}
+/**
+ * Connects private typed operations directly to their handlers.
+ *
+ * @param input Domain handlers for both correlated operations.
+ * @param input.send Send domain handler.
+ * @param input.poll Poll domain handler.
+ * @returns A scoped in-process client with typed failures.
+ */
+export declare const makeRouterRpcClient: (input: {
+    readonly send: RouterSend;
+    readonly poll: RouterPoll;
+}) => Effect.Effect<RouterRpcClient, never, Scope.Scope>;
+/**
+ * Limits one verified request proof to the dynamic extent of one RPC call.
+ *
+ * @param verifiedRequest Authentication proof for the current HTTP request.
+ * @param effect Correlated private RPC call.
+ * @returns The call with the proof installed only for its dynamic extent.
+ */
+export declare const withVerifiedRouterRequest: <A, E, R>(verifiedRequest: VerifiedAgentRequest, effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+export {};
+//# sourceMappingURL=rpc.d.ts.map

package/dist/router/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/router/rpc.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,EACf,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAGL,MAAM,EAKN,KAAK,KAAK,EACX,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAEL,KAAK,oBAAoB,IAAI,yBAAyB,EAEtD,KAAK,iBAAiB,IAAI,sBAAsB,EAEhD,KAAK,gBAAgB,IAAI,qBAAqB,EAE9C,KAAK,gBAAgB,IAAI,qBAAqB,EAC/C,MAAM,eAAe,CAAC;AAEvB,KAAK,kBAAkB,GACnB,yBAAyB,GACzB,eAAe,GACf,mBAAmB,CAAC;AAExB,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;KAC7C,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;IAC/D,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;KAC1C,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;CAChE;AA6CD;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,UAAW;IACzC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B,KAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CA6BpD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,mBAC9B,oBAAoB,UAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CACsD,CAAC"}

package/dist/router/rpc.js

@@ -0,0 +1,75 @@
+/** @file Private correlated RPC between authenticated HTTP and Router operations. */
+import { Rpc, RpcClient, RpcGroup, RpcMiddleware, RpcServer, } from "@effect/rpc";
+import { AuthenticationFailedError, InternalServerError, OverloadedError, } from "@moltzap/identity";
+import { Context, Deferred, Effect, FiberRef, Layer, Option, Schema, } from "effect";
+import { RawRouterSendRequest, RouterPollRequest, RouterPollResult, RouterSendResult, } from "./contract.js";
+const currentVerifiedRequest = FiberRef.unsafeMake(Option.none());
+/** Private RPC service containing the current verified HTTP request. */
+class VerifiedRouterRequest extends Context.Tag("@moltzap/router/VerifiedRouterRequest")() {
+}
+/** Required private RPC middleware for registered-agent operations. */
+class RegisteredAgentRequest extends RpcMiddleware.Tag()("@moltzap/router/RegisteredAgentRequest", {
+    failure: AuthenticationFailedError,
+    provides: VerifiedRouterRequest,
+}) {
+}
+const registeredAgentRequestLayer = Layer.succeed(RegisteredAgentRequest, () => FiberRef.get(currentVerifiedRequest).pipe(Effect.flatMap(Option.match({
+    onNone: () => Effect.fail(new AuthenticationFailedError()),
+    onSome: Effect.succeed,
+}))));
+const handlerErrors = Schema.Union(OverloadedError, InternalServerError);
+const sendRpc = Rpc.make("send", {
+    payload: { request: RawRouterSendRequest },
+    success: RouterSendResult,
+    error: handlerErrors,
+}).middleware(RegisteredAgentRequest);
+const pollRpc = Rpc.make("poll", {
+    payload: { request: RouterPollRequest },
+    success: RouterPollResult,
+    error: handlerErrors,
+}).middleware(RegisteredAgentRequest);
+const routerRpcGroup = RpcGroup.make(sendRpc, pollRpc);
+/**
+ * Connects private typed operations directly to their handlers.
+ *
+ * @param input Domain handlers for both correlated operations.
+ * @param input.send Send domain handler.
+ * @param input.poll Poll domain handler.
+ * @returns A scoped in-process client with typed failures.
+ */
+export const makeRouterRpcClient = (input) => {
+    const handlerLayer = makeRouterRpcHandlersLayer(input);
+    return Effect.gen(function* () {
+        const clientReady = yield* Deferred.make();
+        const server = yield* RpcServer.makeNoSerialization(routerRpcGroup, {
+            onFromServer: (message) => Deferred.await(clientReady).pipe(Effect.flatMap((client) => client.write(message))),
+        });
+        const client = yield* RpcClient.makeNoSerialization(routerRpcGroup, {
+            supportsAck: true,
+            onFromClient: ({ message }) => server.write(0, message),
+        });
+        yield* Deferred.succeed(clientReady, client);
+        return client.client;
+    }).pipe(Effect.provide(handlerLayer), Effect.provide(registeredAgentRequestLayer), Effect.withSpan("makeRouterRpcClient"));
+};
+/**
+ * Limits one verified request proof to the dynamic extent of one RPC call.
+ *
+ * @param verifiedRequest Authentication proof for the current HTTP request.
+ * @param effect Correlated private RPC call.
+ * @returns The call with the proof installed only for its dynamic extent.
+ */
+export const withVerifiedRouterRequest = (verifiedRequest, effect) => Effect.locally(currentVerifiedRequest, Option.some(verifiedRequest))(effect);
+function makeRouterRpcHandlersLayer(input) {
+    return routerRpcGroup.toLayer({
+        send: ({ request }) => Effect.gen(function* () {
+            const verifiedRequest = yield* VerifiedRouterRequest;
+            return yield* input.send.handle(request, verifiedRequest);
+        }),
+        poll: ({ request }) => Effect.gen(function* () {
+            const verifiedRequest = yield* VerifiedRouterRequest;
+            return yield* input.poll.handle(request, verifiedRequest);
+        }),
+    });
+}
+//# sourceMappingURL=rpc.js.map

package/dist/router/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/router/rpc.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EACL,GAAG,EACH,SAAS,EACT,QAAQ,EACR,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,GAEhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,MAAM,GAEP,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACL,oBAAoB,EAEpB,iBAAiB,EAEjB,gBAAgB,EAEhB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAiBvB,MAAM,sBAAsB,GAAG,QAAQ,CAAC,UAAU,CAChD,MAAM,CAAC,IAAI,EAAwB,CACpC,CAAC;AAEF,wEAAwE;AACxE,MAAM,qBAAsB,SAAQ,OAAO,CAAC,GAAG,CAC7C,uCAAuC,CACxC,EAA+C;CAAG;AAEnD,uEAAuE;AACvE,MAAM,sBAAuB,SAAQ,aAAa,CAAC,GAAG,EAA0B,CAC9E,wCAAwC,EACxC;IACE,OAAO,EAAE,yBAAyB;IAClC,QAAQ,EAAE,qBAAqB;CAChC,CACF;CAAG;AAEJ,MAAM,2BAA2B,GAAG,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAC7E,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,KAAK,CAAC;IACX,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,yBAAyB,EAAE,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC,OAAO;CACvB,CAAC,CACH,CACF,CACF,CAAC;AAEF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;AACzE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE;IAC1C,OAAO,EAAE,gBAAgB;IACzB,KAAK,EAAE,aAAa;CACrB,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AACtC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;IAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;IACvC,OAAO,EAAE,gBAAgB;IACzB,KAAK,EAAE,aAAa;CACrB,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AAEtC,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAGnC,EAAsD,EAAE;IACvD,MAAM,YAAY,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QASzB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAoB,CAAC;QAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,cAAc,EAAE;YAClE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CACxB,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAClD;SACJ,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,cAAc,EAAE;YAClE,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;SACxD,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAC5B,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAC3C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CACvC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,eAAqC,EACrC,MAA8B,EACN,EAAE,CAC1B,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,SAAS,0BAA0B,CAAC,KAGnC;IACC,OAAO,cAAc,CAAC,OAAO,CAAC;QAC5B,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;YACrD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;YACrD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC"}

package/dist/router/send.d.ts

@@ -0,0 +1,27 @@
+/** @file Verified opaque-message acceptance into the volatile feed. */
+import { InternalServerError, OverloadedError, type VerifiedAgentRequest } from "@moltzap/identity";
+import { Effect } from "effect";
+import type { RouterFeed } from "./feed.js";
+import type { PollWaiters } from "./poll-waiters.js";
+import { type RawRouterSendRequest, type RouterInstanceId, type RouterSendResult } from "./contract.js";
+/** Send domain operation after HTTP authentication. */
+export interface RouterSend {
+    readonly handle: (request: RawRouterSendRequest, verifiedRequest: VerifiedAgentRequest) => Effect.Effect<RouterSendResult, OverloadedError | InternalServerError>;
+}
+interface SendDependencies {
+    readonly routerInstanceId: RouterInstanceId;
+    readonly feed: RouterFeed;
+    readonly pollWaiters: PollWaiters;
+}
+/**
+ * Builds send precedence over one current Router instance and feed.
+ *
+ * @param input Current process identity and state capabilities.
+ * @param input.routerInstanceId Current volatile process identity.
+ * @param input.feed Global volatile feed.
+ * @param input.pollWaiters Addressed poll-waiter notifications.
+ * @returns The authenticated send domain operation.
+ */
+export declare const makeRouterSend: (input: SendDependencies) => RouterSend;
+export {};
+//# sourceMappingURL=send.d.ts.map

package/dist/router/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/router/send.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EACL,mBAAmB,EACnB,eAAe,EAGf,KAAK,oBAAoB,EAE1B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAoB,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAEvB,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,CACf,OAAO,EAAE,oBAAoB,EAC7B,eAAe,EAAE,oBAAoB,KAClC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,eAAe,GAAG,mBAAmB,CAAC,CAAC;CAC7E;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,UAAW,gBAAgB,KAAG,UAMrD,CAAC"}

package/dist/router/send.js

@@ -0,0 +1,91 @@
+/** @file Verified opaque-message acceptance into the volatile feed. */
+import { InternalServerError, OverloadedError, SignedMessage, } from "@moltzap/identity";
+import canonicalize from "canonicalize";
+import { Effect, Encoding, Schema } from "effect";
+import { SignedMessageDigest, } from "./contract.js";
+/**
+ * Builds send precedence over one current Router instance and feed.
+ *
+ * @param input Current process identity and state capabilities.
+ * @param input.routerInstanceId Current volatile process identity.
+ * @param input.feed Global volatile feed.
+ * @param input.pollWaiters Addressed poll-waiter notifications.
+ * @returns The authenticated send domain operation.
+ */
+export const makeRouterSend = (input) => Object.freeze({
+    handle: (request, verifiedRequest) => handleSend(input, request, verifiedRequest),
+});
+const messageInvalid = { kind: "message_invalid" };
+const utf8Encoder = new TextEncoder();
+const encodedLengthIsValid = (message, encodedMessageJcs) => {
+    const encodedByteLength = SignedMessage.encodedByteLength(message);
+    return (encodedByteLength === utf8Encoder.encode(encodedMessageJcs).byteLength &&
+        encodedByteLength <= SignedMessage.maximumEncodedByteLength);
+};
+const retainMessage = (input, mode, message) => Effect.gen(function* () {
+    const encodedMessageJcs = yield* encodeMessage(message);
+    if (!encodedLengthIsValid(message, encodedMessageJcs)) {
+        return messageInvalid;
+    }
+    const signedMessageDigest = yield* digestMessage(encodedMessageJcs);
+    const recipients = new Set(message.recipientAgentIds);
+    const accepted = yield* input.feed.accept({
+        mode,
+        signedMessage: message,
+        encodedMessageJcs,
+        encodedByteLength: SignedMessage.encodedByteLength(message),
+        recipients,
+        senderAgentId: message.senderAgentId,
+        messageId: message.messageId,
+        signedMessageDigest,
+    });
+    if (accepted.kind === "overloaded") {
+        return yield* Effect.fail(new OverloadedError());
+    }
+    if (accepted.acceptedRecipients !== undefined) {
+        yield* input.pollWaiters.notify(accepted.acceptedRecipients);
+    }
+    return accepted.result;
+});
+const handleDecodedMessage = (input, request, verifiedRequest, signedMessage) => {
+    if (signedMessage.senderAgentId !== verifiedRequest.callerAgentId) {
+        return Effect.succeed(messageInvalid);
+    }
+    return SignedMessage.verify({
+        signedMessage,
+        agentCard: verifiedRequest.agentCard,
+    }).pipe(Effect.matchEffect({
+        onFailure: () => Effect.succeed(messageInvalid),
+        onSuccess: (message) => retainMessage(input, request.mode, message),
+    }));
+};
+const handleCurrentInstance = (input, request, verifiedRequest) => Schema.decodeUnknown(SignedMessage)(request.signedMessage, {
+    exact: true,
+    onExcessProperty: "error",
+}).pipe(Effect.matchEffect({
+    onFailure: () => Effect.succeed(messageInvalid),
+    onSuccess: (signedMessage) => handleDecodedMessage(input, request, verifiedRequest, signedMessage),
+}));
+function handleSend(input, request, verifiedRequest) {
+    return request.expectedRouterInstanceId !== input.routerInstanceId
+        ? Effect.succeed({
+            kind: "router_restarted",
+            routerInstanceId: input.routerInstanceId,
+        })
+        : handleCurrentInstance(input, request, verifiedRequest);
+}
+function encodeMessage(signedMessage) {
+    return Schema.encode(SignedMessage)(signedMessage).pipe(Effect.catchTag("ParseError", () => Effect.fail(new InternalServerError())), Effect.flatMap((encoded) => {
+        const jcs = canonicalize(encoded);
+        return jcs === undefined
+            ? Effect.fail(new InternalServerError())
+            : Effect.succeed(jcs);
+    }));
+}
+function digestMessage(encodedMessageJcs) {
+    return Effect.tryPromise({
+        try: () => globalThis.crypto.subtle.digest("SHA-256", utf8Encoder.encode(encodedMessageJcs)),
+        catch: () => new InternalServerError(),
+    }).pipe(Effect.map((digest) => `smd_${Encoding.encodeBase64Url(new Uint8Array(digest))}`), Effect.flatMap(Schema.decodeUnknown(SignedMessageDigest)), Effect.catchTag("ParseError", () => Effect.fail(new InternalServerError())));
+}
+//# sourceMappingURL=send.js.map

package/dist/router/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../src/router/send.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,GAId,MAAM,mBAAmB,CAAC;AAC3B,OAAO,YAAY,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGlD,OAAO,EAIL,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAgBvB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAuB,EAAc,EAAE,CACpE,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,EAAE,CACN,OAA6B,EAC7B,eAAqC,EACrC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC;CACjD,CAAC,CAAC;AAEL,MAAM,cAAc,GAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACrE,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,oBAAoB,GAAG,CAC3B,OAA8B,EAC9B,iBAAyB,EAChB,EAAE;IACX,MAAM,iBAAiB,GAAG,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,CACL,iBAAiB,KAAK,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,UAAU;QACtE,iBAAiB,IAAI,aAAa,CAAC,wBAAwB,CAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,KAAuB,EACvB,IAAkC,EAClC,OAA8B,EAC0C,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACtD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QACxC,IAAI;QACJ,aAAa,EAAE,OAAO;QACtB,iBAAiB;QACjB,iBAAiB,EAAE,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC3D,UAAU;QACV,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAAG,CAC3B,KAAuB,EACvB,OAA6B,EAC7B,eAAqC,EACrC,aAAiC,EACuC,EAAE;IAC1E,IAAI,aAAa,CAAC,aAAa,KAAK,eAAe,CAAC,aAAa,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC;QAC1B,aAAa;QACb,SAAS,EAAE,eAAe,CAAC,SAAS;KACrC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,WAAW,CAAC;QACjB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/C,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACpE,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,KAAuB,EACvB,OAA6B,EAC7B,eAAqC,EACmC,EAAE,CAC1E,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE;IACzD,KAAK,EAAE,IAAI;IACX,gBAAgB,EAAE,OAAO;CAC1B,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,WAAW,CAAC;IACjB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/C,SAAS,EAAE,CAAC,aAAa,EAAE,EAAE,CAC3B,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC;CACvE,CAAC,CACH,CAAC;AAEJ,SAAS,UAAU,CACjB,KAAuB,EACvB,OAA6B,EAC7B,eAAqC;IAErC,OAAO,OAAO,CAAC,wBAAwB,KAAK,KAAK,CAAC,gBAAgB;QAChE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACb,IAAI,EAAE,kBAAkB;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC;QACJ,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CACpB,aAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC,EAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,GAAG,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACxC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,iBAAyB;IAEzB,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CACR,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC7B,SAAS,EACT,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,CACtC;QACH,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,EAAE;KACvC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CACR,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CACtE,EACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,EACzD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC"}

package/dist/router.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @file Public Router capability, its authenticated HTTP implementation, and
+ * the private process configuration consumed by the Router server.
+ */
+import { HttpClient } from "@effect/platform";
+import { type AgentId, type AgentSigningAuthority, type Ed25519PublicKey as Ed25519PublicKeyValue } from "@moltzap/identity";
+import { Context, Duration, Effect, Layer } from "effect";
+import { type RouterClientError, RouterPollRequest, RouterPollResult, RouterSendRequest, RouterSendResult } from "./router/contract.js";
+interface RouterClientService {
+    readonly send: (input: {
+        readonly request: RouterSendRequest;
+        readonly callerAgentId: AgentId;
+        readonly signingAuthority: AgentSigningAuthority;
+    }) => Effect.Effect<RouterSendResult, RouterClientError>;
+    readonly poll: (input: {
+        readonly request: RouterPollRequest;
+        readonly callerAgentId: AgentId;
+        readonly signingAuthority: AgentSigningAuthority;
+    }) => Effect.Effect<RouterPollResult, RouterClientError>;
+}
+declare const Router_base: Context.TagClass<Router, "@moltzap/router/Router", RouterClientService>;
+/** Opaque message acceptance and endpoint-wide bounded polling. */
+export declare class Router extends Router_base {
+    static readonly send: (input: {
+        readonly request: RouterSendRequest;
+        readonly callerAgentId: AgentId;
+        readonly signingAuthority: AgentSigningAuthority;
+    }) => Effect.Effect<RouterSendResult, RouterClientError, Router>;
+    static readonly poll: (input: {
+        readonly request: RouterPollRequest;
+        readonly callerAgentId: AgentId;
+        readonly signingAuthority: AgentSigningAuthority;
+    }) => Effect.Effect<RouterPollResult, RouterClientError, Router>;
+    static readonly layer: (input: {
+        readonly origin: URL;
+        readonly sendTimeout: Duration.Duration;
+        readonly pollTimeout: Duration.Duration;
+    }) => Layer.Layer<Router, never, HttpClient.HttpClient>;
+}
+/** Complete validated private process configuration. */
+export interface RouterConfiguration {
+    readonly host: string;
+    readonly port: number;
+    readonly registryOrigin: URL;
+    readonly registrySignerPublicKey: Ed25519PublicKeyValue;
+    readonly retainedMessageCapacity: number;
+    readonly retainedMessageByteCapacity: number;
+    readonly pollMessageLimit: number;
+    readonly pollResponseByteLimit: number;
+    readonly requestConcurrencyLimit: number;
+    readonly heldPollCapacity: number;
+    readonly liveNonceCapacity: number;
+    readonly agentCardCacheCapacity: number;
+    readonly registryLookupConcurrencyLimit: number;
+    readonly registryLookupTimeoutMs: number;
+}
+/** Loads and cross-validates the complete private Router process configuration. */
+export declare const loadRouterConfiguration: Effect.Effect<RouterConfiguration, import("effect/ConfigError").ConfigError, never>;
+export {};
+//# sourceMappingURL=router.d.ts.map

package/dist/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EAGX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,qBAAqB,EAI1B,KAAK,gBAAgB,IAAI,qBAAqB,EAE/C,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,KAAK,EAGN,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,KAAK,iBAAiB,EAOtB,iBAAiB,EACjB,gBAAgB,EAIhB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAE9B,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAClD,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAClD,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;CAC1D;;AAQD,mEAAmE;AACnE,qBAAa,MAAO,SAAQ,WAGzB;IACD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAClD,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,CAAC,CACE;IAElE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;KAClD,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,CAAC,CACE;IAElE,MAAM,CAAC,QAAQ,CAAC,KAAK,UAAW;QAC9B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;QACrB,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACxC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;KACzC,KAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CACL;CACjD;AA2QD,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC;IAC7B,QAAQ,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;IACxD,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AA0BD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,qFAGe,CAAC"}

package/dist/router.js

@@ -0,0 +1,177 @@
+/**
+ * @file Public Router capability, its authenticated HTTP implementation, and
+ * the private process configuration consumed by the Router server.
+ */
+import { HttpClient, HttpClientRequest, } from "@effect/platform";
+import { AgentSigningError, AuthenticatedHttp, Ed25519PublicKey, SignedMessage, } from "@moltzap/identity";
+import canonicalize from "canonicalize";
+import { Config, Context, Duration, Effect, Layer, Option, Schema, } from "effect";
+import { RouterConnectionError, routerHttpErrorFromResponse, RouterInvalidResponseError, routerJsonContentType, routerPollPath, RouterPollRequest, RouterPollResult, routerRepresentationLimits, RouterRequestTimeoutError, routerSendPath, RouterSendRequest, RouterSendResult, } from "./router/contract.js";
+/** Opaque message acceptance and endpoint-wide bounded polling. */
+export class Router extends Context.Tag("@moltzap/router/Router")() {
+    static send = Effect.serviceFunctionEffect(Router, (service) => service.send);
+    static poll = Effect.serviceFunctionEffect(Router, (service) => service.poll);
+    static layer = (input) => Layer.effect(Router, makeRouterClient(input));
+}
+function makeRouterClient(input) {
+    const settings = Object.freeze({
+        origin: new URL(input.origin.href),
+        sendTimeout: snapshotDuration(input.sendTimeout),
+        pollTimeout: snapshotDuration(input.pollTimeout),
+    });
+    return HttpClient.HttpClient.pipe(Effect.map((client) => makeClientService(client, settings)), Effect.withSpan("makeRouterClient"));
+}
+const invalidResponse = () => new RouterInvalidResponseError();
+const utf8Decoder = new TextDecoder("utf-8", {
+    fatal: true,
+    ignoreBOM: true,
+});
+const utf8Encoder = new TextEncoder();
+const sameBytes = (left, right) => {
+    if (left.byteLength !== right.byteLength) {
+        return false;
+    }
+    for (let index = 0; index < left.byteLength; index += 1) {
+        if (left[index] !== right[index]) {
+            return false;
+        }
+    }
+    return true;
+};
+const decodeUtf8 = (bytes) => Effect.try({
+    try: () => utf8Decoder.decode(bytes),
+    catch: invalidResponse,
+});
+const decodeCanonicalResult = (schema, bytes) => Effect.gen(function* () {
+    const text = yield* decodeUtf8(bytes);
+    const result = yield* Schema.decodeUnknown(Schema.parseJson(schema))(text, {
+        exact: true,
+        onExcessProperty: "error",
+    }).pipe(Effect.mapError(invalidResponse));
+    const encoded = yield* Schema.encode(schema)(result).pipe(Effect.mapError(invalidResponse));
+    const canonical = canonicalize(encoded);
+    if (canonical === undefined ||
+        !sameBytes(bytes, utf8Encoder.encode(canonical))) {
+        return yield* Effect.fail(invalidResponse());
+    }
+    return result;
+});
+const decodeResponse = (schema, response) => Effect.gen(function* () {
+    const bytes = yield* response.arrayBuffer.pipe(Effect.catchTag("ResponseError", () => Effect.fail(new RouterConnectionError())), Effect.map((buffer) => new Uint8Array(buffer)));
+    if (response.headers["content-type"] !== routerJsonContentType) {
+        return yield* Effect.fail(invalidResponse());
+    }
+    if (response.status === 200) {
+        return yield* decodeCanonicalResult(schema, bytes);
+    }
+    const text = yield* decodeUtf8(bytes);
+    const recognized = routerHttpErrorFromResponse(response.status, text);
+    if (Option.isNone(recognized) ||
+        !sameBytes(bytes, utf8Encoder.encode(text))) {
+        return yield* Effect.fail(invalidResponse());
+    }
+    return yield* Effect.fail(recognized.value);
+});
+const execute = (input) => Effect.gen(function* () {
+    const request = HttpClientRequest.post(new URL(input.path, input.origin));
+    const encodedRequest = yield* Schema.encode(input.requestSchema)(input.request).pipe(Effect.catchTag("ParseError", () => Effect.fail(new AgentSigningError())));
+    const signedRequest = yield* AuthenticatedHttp.signAgentRequest({
+        httpRequest: request,
+        callerAgentId: input.callerAgentId,
+        encodedRequest,
+        signingAuthority: input.signingAuthority,
+    });
+    const response = yield* input.client.execute(signedRequest).pipe(Effect.catchTags({
+        RequestError: () => Effect.fail(new RouterConnectionError()),
+        ResponseError: () => Effect.fail(new RouterConnectionError()),
+    }));
+    return yield* decodeResponse(input.schema, response);
+}).pipe(Effect.timeoutFail({
+    duration: input.timeout,
+    onTimeout: () => new RouterRequestTimeoutError(),
+}));
+function snapshotDuration(duration) {
+    return Duration.match(duration, {
+        onMillis: Duration.millis,
+        onNanos: Duration.nanos,
+    });
+}
+function makeClientService(client, settings) {
+    return {
+        send: (call) => execute({
+            client,
+            origin: settings.origin,
+            path: routerSendPath,
+            request: call.request,
+            requestSchema: RouterSendRequest,
+            schema: RouterSendResult,
+            callerAgentId: call.callerAgentId,
+            signingAuthority: call.signingAuthority,
+            timeout: settings.sendTimeout,
+        }),
+        poll: (call) => execute({
+            client,
+            origin: settings.origin,
+            path: routerPollPath,
+            request: call.request,
+            requestSchema: RouterPollRequest,
+            schema: RouterPollResult,
+            callerAgentId: call.callerAgentId,
+            signingAuthority: call.signingAuthority,
+            timeout: settings.pollTimeout,
+        }),
+    };
+}
+const MAXIMUM_PROCESS_INTEGER = 2_147_483_647;
+const canonicalUnsignedDecimal = Schema.String.pipe(Schema.pattern(/^(?:0|[1-9]\d*)$/));
+const processInteger = canonicalUnsignedDecimal.pipe(Schema.compose(Schema.NumberFromString), Schema.int(), Schema.between(1, MAXIMUM_PROCESS_INTEGER));
+const port = canonicalUnsignedDecimal.pipe(Schema.compose(Schema.NumberFromString), Schema.int(), Schema.between(1, 65_535));
+const bindHost = Schema.String.pipe(Schema.minLength(1));
+const isSerializedRegistryOrigin = (value) => {
+    if (!URL.canParse(value)) {
+        return false;
+    }
+    const parsed = new URL(value);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        return false;
+    }
+    return value === parsed.origin;
+};
+const registryOriginText = Schema.String.pipe(Schema.filter(isSerializedRegistryOrigin));
+const registryOrigin = registryOriginText.pipe(Schema.compose(Schema.URL));
+const compactPublicKeyJson = Schema.String.pipe(Schema.pattern(/^\{"crv":"Ed25519","kty":"OKP","x":"[A-Za-z0-9_-]{43}"\}$/), Schema.compose(Schema.parseJson(Ed25519PublicKey)));
+const configuredValues = Config.all({
+    host: Schema.Config("MOLTZAP_ROUTER_HOST", bindHost).pipe(Config.withDefault("127.0.0.1")),
+    port: Schema.Config("MOLTZAP_ROUTER_PORT", port),
+    registryOrigin: Schema.Config("MOLTZAP_ROUTER_REGISTRY_ORIGIN", registryOrigin),
+    registrySignerPublicKey: Schema.Config("MOLTZAP_ROUTER_REGISTRY_SIGNER_PUBLIC_KEY", compactPublicKeyJson),
+    retainedMessageCapacity: Schema.Config("MOLTZAP_ROUTER_RETAINED_MESSAGE_CAPACITY", processInteger).pipe(Config.withDefault(4_096)),
+    retainedMessageByteCapacity: Schema.Config("MOLTZAP_ROUTER_RETAINED_MESSAGE_BYTE_CAPACITY", processInteger).pipe(Config.withDefault(67_108_864)),
+    pollMessageLimit: Schema.Config("MOLTZAP_ROUTER_POLL_MESSAGE_LIMIT", processInteger).pipe(Config.withDefault(128)),
+    pollResponseByteLimit: Schema.Config("MOLTZAP_ROUTER_POLL_RESPONSE_BYTE_LIMIT", processInteger).pipe(Config.withDefault(1_048_576)),
+    requestConcurrencyLimit: Schema.Config("MOLTZAP_ROUTER_REQUEST_CONCURRENCY_LIMIT", processInteger).pipe(Config.withDefault(512)),
+    heldPollCapacity: Schema.Config("MOLTZAP_ROUTER_HELD_POLL_CAPACITY", processInteger).pipe(Config.withDefault(256)),
+    liveNonceCapacity: Schema.Config("MOLTZAP_ROUTER_LIVE_NONCE_CAPACITY", processInteger).pipe(Config.withDefault(100_000)),
+    agentCardCacheCapacity: Schema.Config("MOLTZAP_ROUTER_AGENT_CARD_CACHE_CAPACITY", processInteger).pipe(Config.withDefault(10_000)),
+    registryLookupConcurrencyLimit: Schema.Config("MOLTZAP_ROUTER_REGISTRY_LOOKUP_CONCURRENCY_LIMIT", processInteger).pipe(Config.withDefault(32)),
+    registryLookupTimeoutMs: Schema.Config("MOLTZAP_ROUTER_REGISTRY_LOOKUP_TIMEOUT_MS", processInteger).pipe(Config.withDefault(5_000)),
+});
+const retentionFits = (candidate) => candidate.retainedMessageCapacity >= 1 &&
+    candidate.retainedMessageByteCapacity >=
+        SignedMessage.maximumEncodedByteLength;
+const pollBatchFits = (candidate) => candidate.pollMessageLimit >= 1 &&
+    candidate.pollResponseByteLimit >=
+        routerRepresentationLimits.oneMessageBatchBytes;
+const heldPollsFit = (candidate) => candidate.heldPollCapacity < candidate.requestConcurrencyLimit;
+const validatedConfiguration = configuredValues.pipe(Config.validate({
+    message: "Router resource bounds do not satisfy the representation fit laws",
+    validation: (candidate) => retentionFits(candidate) &&
+        pollBatchFits(candidate) &&
+        heldPollsFit(candidate),
+}));
+/** Loads and cross-validates the complete private Router process configuration. */
+export const loadRouterConfiguration = Effect.gen(function* () {
+    const configuration = yield* validatedConfiguration;
+    return configuration;
+}).pipe(Effect.withSpan("loadRouterConfiguration"));
+//# sourceMappingURL=router.js.map