@nxara/olio-http 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nxara contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,224 @@
-# Temporary Holding Version
+# @nxara/olio-http
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Serve an olio app over HTTP, on any framework: GraphQL over HTTP ([graphql-http](https://github.com/graphql/graphql-http), the reference implementation), with `context`, error masking and per-operation cleanup. Nothing more: subscriptions are yours to serve, with the libraries you choose (below).
+
+```sh
+bun add @nxara/olio-http graphql@16
+```
+
+`graphql` 16 is a peer dependency (not 17, which is about 4× slower on small queries); graphql-http is its only third-party dependency.
+
+## Adapters
+
+| Import | For |
+| --- | --- |
+| `@nxara/olio-http/fetch` | Anything that speaks the Fetch API: Hono, Elysia, Bun.serve, Deno, Cloudflare Workers, Next.js route handlers, SvelteKit, Remix |
+| `@nxara/olio-http/node` | Node's `IncomingMessage` / `ServerResponse`: `node:http`, Express, Connect, Koa (`ctx.req`, `ctx.res`), Fastify (`request.raw`, `reply.raw`) |
+
+Your `context` hook receives the framework's request: a Fetch `Request`, or a Node `IncomingMessage`. Once your app registers a `ctx` type (`interface Olio { ctx: … }`), the hook is required: without it graphql-http passes no context, and every resolver reading `ctx` would fail at runtime. So `fetchHandler(app)` is then a compile error (`Expected 2 arguments`), as is an options object without `context`.
+
+```ts
+import { fetchHandler } from "@nxara/olio-http/fetch";
+
+const graphql = fetchHandler(app, {
+  context: (request) => createContext(request.headers.get("authorization")),
+  onOperationEnd: (ctx) => ctx.di.dispose()
+});
+
+hono.on(["GET", "POST"], "/graphql", (c) => graphql(c.req.raw)); // Hono
+Bun.serve({ fetch: graphql }); // Bun
+```
+
+```ts
+import { nodeHandler } from "@nxara/olio-http/node";
+
+const graphql = nodeHandler(app, {
+  context: (req) => createContext(req.headers.authorization)
+});
+expressApp.all("/graphql", (req, res) => graphql(req, res)); // or: createServer(graphql)
+```
+
+## Subscriptions
+
+Not included, the way Apollo Server leaves them out: install and run the reference libraries yourself, at the versions you want, next to the HTTP handler.
+
+- [graphql-ws](https://github.com/enisdenjo/graphql-ws): subscriptions over WebSocket (`useServer` on a `ws` server, `makeHandler` on Bun).
+- [graphql-sse](https://github.com/enisdenjo/graphql-sse): subscriptions as server-sent events, on the same URL (route `Accept: text/event-stream` to its handler).
+
+Pass them `app.schema`; `errorMasker` hides their unexpected errors the way the HTTP handler does, and `validateOperation` applies its rules. Both, with a context (and DI scope) per subscription, disposed when it ends:
+
+```ts
+import type { SubscriptionContext } from "@nxara/olio";
+import { errorMasker, validateOperation } from "@nxara/olio-http";
+import { createHandler } from "graphql-sse/lib/use/fetch";
+import { useServer } from "graphql-ws/use/ws";
+
+const mask = errorMasker<SubscriptionContext>();
+
+// graphql-sse: route requests with `Accept: text/event-stream` here, GET and
+// POST (what @nxara/olio-client sends; single-connection mode also needs PUT and DELETE).
+export const sseHandler = createHandler({
+  schema: app.schema,
+  context: (req) =>
+    createContext(req.raw.headers.get("authorization")) as never,
+  onSubscribe: (_req, params) => {
+    const errors = validateOperation(app.schema, params, validationRules);
+    return errors.length ? { data: null, errors: [...errors] } : undefined; // needs `data`
+  },
+  onNext: (ctx, _req, result) =>
+    mask.result(result, ctx as unknown as SubscriptionContext),
+  onComplete: (ctx) => (ctx as unknown as SubscriptionContext).di.dispose()
+});
+
+// graphql-ws, on a `ws` server: `context` runs once per subscription, so the
+// scope is per operation; keep it by connection and id to end it.
+const live = new WeakMap<object, Map<string, SubscriptionContext>>();
+useServer(
+  {
+    schema: app.schema,
+    context: (ctx, id) => {
+      // A browser can't set WebSocket headers: @nxara/olio-client sends them here.
+      const headers = ctx.connectionParams?.headers as
+        | Record<string, string>
+        | undefined;
+      const value = createContext(headers?.authorization);
+      live.set(ctx, (live.get(ctx) ?? new Map()).set(id, value));
+      return value as never;
+    },
+    onSubscribe: (_ctx, _id, payload) => {
+      const errors = validateOperation(app.schema, payload, validationRules);
+      return errors.length ? errors : undefined;
+    },
+    onNext: (ctx, id, _payload, _args, result) =>
+      mask.result(result, live.get(ctx)?.get(id)),
+    onError: (ctx, id, _payload, errors) =>
+      errors.map((e) => mask.error(e, live.get(ctx)?.get(id)).toJSON()),
+    // Also runs when the socket closes mid-subscription (see the note below).
+    onComplete: async (ctx, id) => {
+      const value = live.get(ctx)?.get(id);
+      live.get(ctx)?.delete(id);
+      await value?.di.dispose();
+    }
+  },
+  new WebSocketServer({ server, path: "/graphql" })
+);
+```
+
+When a socket closes, graphql-ws ends each live subscription and waits for it before `onComplete`. A resolver that's an `async *` waiting inside `for await` can only end at its next event, so until one arrives, nothing is cleaned up. Return the event source's own iterator instead (olio's README, [Subscriptions](../olio/README.md#subscriptions)).
+
+With `@hono/node-server`, `serve()` is typed to return HTTP/2 servers too: pass `server as Server` (from `node:http`) to `WebSocketServer`. [`apps/example-server/src/subscriptions.ts`](../../apps/example-server/src/subscriptions.ts) is all of this, running. For tests, `testClient` from `@nxara/olio-client/test` runs these same options and handler in memory, so export them (the example exports `wsOptions` and `sseHandler`).
+
+## Refusing a bad token
+
+Don't throw from `context`. A throw there refuses the whole request before any field runs, so a client still holding an expired token can't even call `login` to get a new one. Build a context without a user instead, and refuse in middleware; public fields skip it with `@bypass` (olio's README, [Skipping middleware](../olio/README.md#skipping-middleware-bypass)):
+
+```ts
+fetchHandler(app, {
+  // An invalid or expired token gives `userId: undefined`, not an error.
+  context: (request) => ({
+    userId: verify(request.headers.get("authorization"))
+  })
+});
+
+const requireAuth =
+  (): MiddlewareFn =>
+  ({ ctx, bypass }, next) => {
+    if (!ctx.userId && !bypass.has("auth")) throw unauthenticated();
+    return next();
+  };
+```
+
+It's also the only way that gives clients the same `UNAUTHENTICATED` result, at once, on every transport. Over subscriptions, a `context` that throws is a server error to both libraries: graphql-ws closes the socket with 4500 (the error's code is lost), graphql-sse's handler throws (your framework answers 500). Refusing the socket in graphql-ws's `onConnect` closes it with 4403, which graphql-ws's client retries by default ([@nxara/olio-client](../client/README.md#subscriptions)).
+
+## Validation rules
+
+`validationRules` run with graphql's own, before any resolver: a cost or depth limit, say. They're added to graphql's rules, never in their place. Pass a list, or a function of the operation (`{ variables, operationName }`) for rules that need its variables, like [graphql-query-complexity](https://github.com/slicknode/graphql-query-complexity) pricing a page by its size:
+
+```ts
+import {
+  createComplexityRule,
+  fieldExtensionsEstimator,
+  simpleEstimator
+} from "graphql-query-complexity";
+
+fetchHandler(app, {
+  context,
+  validationRules: ({ variables }) => [
+    createComplexityRule({
+      maximumComplexity: 1000,
+      variables,
+      estimators: [
+        fieldExtensionsEstimator(),
+        simpleEstimator({ defaultComplexity: 1 })
+      ]
+    })
+  ]
+});
+```
+
+`fieldExtensionsEstimator` reads each field's `complexity` extension, which olio sets from the resolver's `{ resolve, extensions }`. An operation over the limit gets the rule's error, and nothing runs.
+
+Subscription servers take the same rules through `validateOperation(schema, operation, rules)` in their `onSubscribe`; it returns the errors (none when the operation is valid):
+
+```ts
+import { validateOperation } from "@nxara/olio-http";
+
+// graphql-ws
+onSubscribe: (_ctx, _id, payload) => {
+  const errors = validateOperation(app.schema, payload, validationRules);
+  return errors.length ? errors : undefined;
+};
+// graphql-sse: a result needs `data` to be read as one
+onSubscribe: (_req, params) => {
+  const errors = validateOperation(app.schema, params, validationRules);
+  return errors.length ? { data: null, errors: [...errors] } : undefined;
+};
+```
+
+## Errors
+
+Only `GraphQLError`s reach clients. Anything else that's thrown, such as a failing database or a bug, is replaced by `"Unexpected error."` and passed to `onUnexpectedError` (default: `console.error`), so it isn't lost. That includes a `context` hook that throws: a `GraphQLError` from it (say, `BAD_REQUEST` for a malformed header) reaches the client as a normal GraphQL error with status 200; anything else is a 500 with "Unexpected error.". It refuses the whole request, so a bad token belongs in middleware instead ([Refusing a bad token](#refusing-a-bad-token)).
+
+```ts
+throw new GraphQLError("Forbidden", { extensions: { code: "FORBIDDEN" } }); // the client sees this
+throw new Error("connection refused"); // the client sees "Unexpected error."
+```
+
+`onUnexpectedError(error, { ctx, request })` gets what the error happened in, so logs can tie it to a request: `ctx` is the operation's context (`undefined` when the `context` hook itself failed), `request` the adapter's (a Fetch `Request`, or Node's `IncomingMessage`).
+
+```ts
+fetchHandler(app, {
+  context,
+  onUnexpectedError: (error, { ctx, request }) =>
+    log.error({ error, requestId: ctx?.requestId, url: request.url })
+});
+```
+
+`errorMasker(options?)`, from `@nxara/olio-http`, is the same masking for your own subscription servers. It takes the handlers' `maskErrors` and `onUnexpectedError` (both optional), and gives the functions below. Each takes the operation's context as a last argument, which `onUnexpectedError` receives as `ctx` (`request` is `undefined` there); type it with `errorMasker<SubscriptionContext>()`:
+
+|  |  |
+| --- | --- |
+| `mask.result(result, ctx?)` | The result with its errors masked, any shape: graphql's `ExecutionResult`, or what graphql-sse's and graphql-ws's `onNext` hand you |
+| `mask.error(error, ctx?)` | One error, or any caught value: a `GraphQLError` passes (unless it wraps an unexpected error), anything else becomes "Unexpected error." and is reported |
+| `mask.report(error, ctx?)` | Sends an error to `onUnexpectedError` |
+
+```ts
+import { errorMasker } from "@nxara/olio-http";
+
+const mask = errorMasker<SubscriptionContext>();
+createHandler({
+  schema: app.schema,
+  onNext: (ctx, _req, result) => mask.result(result, ctx)
+}); // graphql-sse
+```
+
+## Options
+
+| Option | Default |  |
+| --- | --- | --- |
+| `context` | none | Builds `ctx` from the request. Required once the app registers a `ctx` type |
+| `validationRules` | none | Rules run with graphql's own before execution: a list, or `({ variables, operationName }) => rules`. See [Validation rules](#validation-rules) |
+| `onOperationEnd` | none | Called once per operation, after the response is built. Release per-operation resources here, e.g. `(ctx) => ctx.di.dispose()`. A failure in it goes to `onUnexpectedError` |
+| `maskErrors` | `true` | Hide errors that aren't `GraphQLError`s. Turn off only while developing |
+| `onUnexpectedError` | `console.error` of the error | `(error, { ctx, request }) => void`: receives each hidden error, with the context and request it happened in (`ctx` is `undefined` when the `context` hook failed) |
+| graphql-http's own | its defaults | `execute`, `parse`, `validate`, `getOperationAST`, `rootValue`, `formatError` (runs after masking) and `parseRequestParams` (e.g. persisted queries: map an id to its stored query) go to [graphql-http](https://github.com/graphql/graphql-http) as they are. Not `onSubscribe`: operation args returned from it would skip `context` and every validation rule |

package/dist/core.d.ts

@@ -0,0 +1,66 @@
+import type { Context } from "@nxara/olio-core";
+import { GraphQLError, type GraphQLSchema, type ValidationRule } from "graphql";
+import type { Response as HttpResponse } from "graphql-http";
+type MaybePromise<T> = T | Promise<T>;
+export interface Servable {
+    readonly schema: GraphQLSchema;
+}
+export interface ErrorInfo<Request = undefined, Ctx = Context> {
+    readonly ctx: Ctx | undefined;
+    readonly request: Request;
+}
+export interface ErrorOptions<Request = undefined, Ctx = Context> {
+    maskErrors?: boolean;
+    onUnexpectedError?: (error: unknown, info: ErrorInfo<Request, Ctx>) => void;
+}
+type ContextHook<Request> = (request: Request) => MaybePromise<Context>;
+type ContextOption<Request> = undefined extends Context ? {
+    context?: ContextHook<Request>;
+} : {
+    context: ContextHook<Request>;
+};
+export interface OperationInfo {
+    readonly variables: Readonly<Record<string, unknown>>;
+    readonly operationName: string | null | undefined;
+}
+export type ValidationRules = readonly ValidationRule[] | ((operation: OperationInfo) => readonly ValidationRule[]);
+export type GraphQLHttpOptions<Options> = Omit<Options, "schema" | "context" | "validationRules" | "onOperation" | "onSubscribe">;
+export type HttpOptions<Request, Passed = unknown> = ErrorOptions<Request> & ContextOption<Request> & Passed & {
+    validationRules?: ValidationRules;
+    onOperationEnd?: (ctx: Context) => MaybePromise<void>;
+};
+export type OptionsArgs<Request, Passed = unknown> = undefined extends Context ? [options?: HttpOptions<Request, Passed>] : [options: HttpOptions<Request, Passed>];
+export interface ErrorMasker<Ctx = Context> {
+    error: (error: unknown, ctx?: Ctx) => GraphQLError;
+    result: <R extends {
+        readonly errors?: readonly GraphQLError[];
+    }>(result: R, ctx?: Ctx) => R;
+    report: (error: unknown, ctx?: Ctx) => void;
+}
+export interface Masking<Info> {
+    error: (error: unknown, info: Info) => GraphQLError;
+    result: <R extends {
+        readonly errors?: readonly GraphQLError[];
+    }>(result: R, info: Info) => R;
+    report: (error: unknown, info: Info) => void;
+}
+export declare function masking<Info>(options: {
+    maskErrors?: boolean;
+    onUnexpectedError?: (error: unknown, info: Info) => void;
+}): Masking<Info>;
+export declare function errorMasker<Ctx = Context>(options?: ErrorOptions<undefined, Ctx>): ErrorMasker<Ctx>;
+export declare function contextFailure<Request>(mask: Masking<ErrorInfo<Request>>, error: unknown, request: Request): HttpResponse;
+interface Operation {
+    readonly variables?: Readonly<Record<string, unknown>> | null;
+    readonly operationName?: string | null;
+}
+export declare function validateOperation(schema: GraphQLSchema, operation: Operation & {
+    readonly query: string;
+}, rules: ValidationRules): readonly GraphQLError[];
+export declare const handlerRules: (rules: ValidationRules | undefined) => ((req: unknown, args: {
+    readonly variableValues?: Readonly<Record<string, unknown>> | null;
+    readonly operationName?: string | null;
+}) => readonly ValidationRule[]) | undefined;
+export declare function operationEnd<Request>(mask: Masking<ErrorInfo<Request>>, hook: ((ctx: Context) => MaybePromise<void>) | undefined): (ctx: Context | undefined, request: Request) => Promise<void>;
+export {};
+//# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,YAAY,EAIZ,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,cAAc,CAAC;AAE7D,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAGtC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAGD,MAAM,WAAW,SAAS,CAAC,OAAO,GAAG,SAAS,EAAE,GAAG,GAAG,OAAO;IAE3D,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC;IAE9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY,CAAC,OAAO,GAAG,SAAS,EAAE,GAAG,GAAG,OAAO;IAM9D,UAAU,CAAC,EAAE,OAAO,CAAC;IAKrB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;CAC7E;AAED,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;AAIxE,KAAK,aAAa,CAAC,OAAO,IAAI,SAAS,SAAS,OAAO,GACnD;IAAE,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;CAAE,GAClC;IAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC;AAGtC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,MAAM,eAAe,GACvB,SAAS,cAAc,EAAE,GACzB,CAAC,CAAC,SAAS,EAAE,aAAa,KAAK,SAAS,cAAc,EAAE,CAAC,CAAC;AAS9D,MAAM,MAAM,kBAAkB,CAAC,OAAO,IAAI,IAAI,CAC5C,OAAO,EACP,QAAQ,GAAG,SAAS,GAAG,iBAAiB,GAAG,aAAa,GAAG,aAAa,CACzE,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,GACxE,aAAa,CAAC,OAAO,CAAC,GACtB,MAAM,GAAG;IAKP,eAAe,CAAC,EAAE,eAAe,CAAC;IAKlC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;CACvD,CAAC;AAGJ,MAAM,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,IAAI,SAAS,SAAS,OAAO,GAC1E,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GACxC,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5C,MAAM,WAAW,WAAW,CAAC,GAAG,GAAG,OAAO;IAMxC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC;IAEnD,MAAM,EAAE,CAAC,CAAC,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;KAAE,EAC9D,MAAM,EAAE,CAAC,EACT,GAAG,CAAC,EAAE,GAAG,KACN,CAAC,CAAC;IAEP,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;CAC7C;AAGD,MAAM,WAAW,OAAO,CAAC,IAAI;IAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;KAAE,EAC9D,MAAM,EAAE,CAAC,EACT,IAAI,EAAE,IAAI,KACP,CAAC,CAAC;IACP,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC9C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC1D,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAOD,wBAAgB,WAAW,CAAC,GAAG,GAAG,OAAO,EACvC,OAAO,GAAE,YAAY,CAAC,SAAS,EAAE,GAAG,CAAM,GACzC,WAAW,CAAC,GAAG,CAAC,CAWlB;AAOD,wBAAgB,cAAc,CAAC,OAAO,EACpC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACjC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,OAAO,GACf,YAAY,CAWd;AAED,UAAU,SAAS;IACjB,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAsBD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACjD,KAAK,EAAE,eAAe,GACrB,SAAS,YAAY,EAAE,CAQzB;AAGD,eAAO,MAAM,YAAY,UAChB,eAAe,GAAG,SAAS,KAEhC,CAAC,CACC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE;IACJ,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC,KACE,SAAS,cAAc,EAAE,CAAC,GAC/B,SAMG,CAAC;AAGR,wBAAgB,YAAY,CAAC,OAAO,EAClC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACjC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,GACvD,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAc/D"}

package/dist/core.js

@@ -0,0 +1,96 @@
+import { GraphQLError, parse, specifiedRules, validate } from "graphql";
+export function masking(options) {
+    const { maskErrors = true, onUnexpectedError = (error) => console.error(error) } = options;
+    const error = (thrown, info) => {
+        if (!(thrown instanceof GraphQLError)) {
+            onUnexpectedError(thrown, info);
+            return new GraphQLError(maskErrors || !(thrown instanceof Error)
+                ? "Unexpected error."
+                : thrown.message);
+        }
+        const cause = thrown.originalError;
+        if (!cause || cause instanceof GraphQLError)
+            return thrown;
+        onUnexpectedError(cause, info);
+        return maskErrors
+            ? new GraphQLError("Unexpected error.", {
+                nodes: thrown.nodes,
+                path: thrown.path
+            })
+            : thrown;
+    };
+    return {
+        error,
+        result: (result, info) => result.errors
+            ? { ...result, errors: result.errors.map((e) => error(e, info)) }
+            : result,
+        report: onUnexpectedError
+    };
+}
+export function errorMasker(options = {}) {
+    const mask = masking(options);
+    const info = (ctx) => ({
+        ctx,
+        request: undefined
+    });
+    return {
+        error: (error, ctx) => mask.error(error, info(ctx)),
+        result: (result, ctx) => mask.result(result, info(ctx)),
+        report: (error, ctx) => mask.report(error, info(ctx))
+    };
+}
+export function contextFailure(mask, error, request) {
+    const deliberate = error instanceof GraphQLError;
+    const graphqlError = mask.error(error, { ctx: undefined, request });
+    return [
+        JSON.stringify({ errors: [graphqlError.toJSON()] }),
+        {
+            status: deliberate ? 200 : 500,
+            statusText: deliberate ? "OK" : "Internal Server Error",
+            headers: { "content-type": "application/json; charset=utf-8" }
+        }
+    ];
+}
+function ruleSet(rules, operation) {
+    const custom = typeof rules === "function"
+        ? rules({
+            variables: operation.variables ?? {},
+            operationName: operation.operationName
+        })
+        : rules;
+    return [...specifiedRules, ...custom];
+}
+export function validateOperation(schema, operation, rules) {
+    let document;
+    try {
+        document = parse(operation.query);
+    }
+    catch (error) {
+        return [error];
+    }
+    return validate(schema, document, ruleSet(rules, operation));
+}
+export const handlerRules = (rules) => rules &&
+    ((_req, args) => ruleSet(rules, {
+        variables: args.variableValues,
+        operationName: args.operationName
+    }));
+export function operationEnd(mask, hook) {
+    const ended = new WeakSet();
+    return async (ctx, request) => {
+        if (!hook || ctx === undefined)
+            return;
+        if (typeof ctx === "object" && ctx !== null) {
+            if (ended.has(ctx))
+                return;
+            ended.add(ctx);
+        }
+        try {
+            await hook(ctx);
+        }
+        catch (error) {
+            mask.report(error, { ctx, request });
+        }
+    };
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,KAAK,EACL,cAAc,EACd,QAAQ,EAGT,MAAM,SAAS,CAAC;AA4GjB,MAAM,UAAU,OAAO,CAAO,OAG7B;IACC,MAAM,EACJ,UAAU,GAAG,IAAI,EAEjB,iBAAiB,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EACnE,GAAG,OAAO,CAAC;IACZ,MAAM,KAAK,GAAG,CAAC,MAAe,EAAE,IAAU,EAAgB,EAAE;QAC1D,IAAI,CAAC,CAAC,MAAM,YAAY,YAAY,CAAC,EAAE,CAAC;YACtC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,YAAY,CACrB,UAAU,IAAI,CAAC,CAAC,MAAM,YAAY,KAAK,CAAC;gBACtC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,YAAY,YAAY;YAAE,OAAO,MAAM,CAAC;QAC3D,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,UAAU;YACf,CAAC,CAAC,IAAI,YAAY,CAAC,mBAAmB,EAAE;gBACpC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC;IACb,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CACvB,MAAM,CAAC,MAAM;YACX,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE;YACjE,CAAC,CAAC,MAAM;QACZ,MAAM,EAAE,iBAAiB;KAC1B,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,WAAW,CACzB,OAAO,GAAiC,EAAE;IAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAS,EAA6B,EAAE,CAAC,CAAC;QACtD,GAAG;QACH,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,cAAc,CAC5B,IAAiC,EACjC,KAAc,EACd,OAAgB;IAEhB,MAAM,UAAU,GAAG,KAAK,YAAY,YAAY,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,OAAO;QACL,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACnD;YACE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC9B,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;YACvD,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;SAC/D;KACF,CAAC;AACJ,CAAC;AASD,SAAS,OAAO,CACd,KAAsB,EACtB,SAAoB;IAEpB,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,UAAU;QACzB,CAAC,CAAC,KAAK,CAAC;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE;YACpC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC,CAAC;QACJ,CAAC,CAAC,KAAK,CAAC;IACZ,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,CAAC;AACxC,CAAC;AAMD,MAAM,UAAU,iBAAiB,CAC/B,MAAqB,EACrB,SAAiD,EACjD,KAAsB;IAEtB,IAAI,QAAkC,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAqB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/D,CAAC;AAGD,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAkC,EAStB,EAAE,CACd,KAAK;IACL,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACd,OAAO,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,IAAI,CAAC,cAAc;QAC9B,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC,CAAC;AAGR,MAAM,UAAU,YAAY,CAC1B,IAAiC,EACjC,IAAwD;IAExD,MAAM,KAAK,GAAG,IAAI,OAAO,EAAU,CAAC;IACpC,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAC3B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/fetch.d.ts

@@ -0,0 +1,7 @@
+import type { OperationContext } from "graphql-http";
+import { type HandlerOptions } from "graphql-http/lib/use/fetch";
+import { type GraphQLHttpOptions, type OptionsArgs, type Servable } from "./core.js";
+type Passed = GraphQLHttpOptions<HandlerOptions<OperationContext>>;
+export declare function fetchHandler(app: Servable, ...[options]: OptionsArgs<Request, Passed>): (request: Request) => Promise<Response>;
+export {};
+//# sourceMappingURL=fetch.d.ts.map

package/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EAML,KAAK,kBAAkB,EAEvB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AAEnB,KAAK,MAAM,GAAG,kBAAkB,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGnE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,QAAQ,EACb,GAAG,CAAC,OAA4C,CAAC,EAAE,WAAW,CAC5D,OAAO,EACP,MAAM,CACP,GACA,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6BzC"}

package/dist/fetch.js

@@ -0,0 +1,32 @@
+import { createHandler } from "graphql-http/lib/use/fetch";
+import { contextFailure, masking, operationEnd, handlerRules } from "./core.js";
+export function fetchHandler(app, ...[options = {}]) {
+    const mask = masking(options);
+    const { context } = options;
+    const end = operationEnd(mask, options.onOperationEnd);
+    const contexts = new WeakMap();
+    const http = createHandler({
+        ...options,
+        schema: app.schema,
+        context: context
+            ? async (req) => {
+                try {
+                    const ctx = await context(req.raw);
+                    contexts.set(req.raw, ctx);
+                    return ctx;
+                }
+                catch (error) {
+                    return contextFailure(mask, error, req.raw);
+                }
+            }
+            : undefined,
+        validationRules: handlerRules(options.validationRules),
+        onOperation: (req, _args, result) => mask.result(result, { ctx: contexts.get(req.raw), request: req.raw })
+    });
+    return async (request) => {
+        const response = await http(request);
+        await end(contexts.get(request), request);
+        return response;
+    };
+}
+//# sourceMappingURL=fetch.js.map

package/dist/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAuB,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EACL,cAAc,EACd,OAAO,EACP,YAAY,EACZ,YAAY,EAMb,MAAM,WAAW,CAAC;AAKnB,MAAM,UAAU,YAAY,CAC1B,GAAa,EACb,GAAG,CAAC,OAAO,GAAG,EAAkC,CAG/C;IAED,MAAM,IAAI,GAAG,OAAO,CAAqB,OAAO,CAAC,CAAC;IAClD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAoB,CAAC;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,GAAG,OAAO;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,OAAO;YACd,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACZ,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC3B,OAAO,GAAY,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACH,CAAC,CAAC,SAAS;QACb,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC;QACtD,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { errorMasker, validateOperation } from "./core.js";
+export type { ErrorInfo, ErrorMasker, ErrorOptions, HttpOptions, OperationInfo, OptionsArgs, Servable, ValidationRules } from "./core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC3D,YAAY,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,EACb,WAAW,EACX,QAAQ,EACR,eAAe,EAChB,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { errorMasker, validateOperation } from "./core.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/node.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { OperationContext } from "graphql-http";
+import { type HandlerOptions } from "graphql-http/lib/use/http";
+import { type GraphQLHttpOptions, type OptionsArgs, type Servable } from "./core.js";
+type Passed = GraphQLHttpOptions<HandlerOptions<OperationContext>>;
+export declare function nodeHandler(app: Servable, ...[options]: OptionsArgs<IncomingMessage, Passed>): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+export {};
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE/E,OAAO,EAML,KAAK,kBAAkB,EAEvB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AAEnB,KAAK,MAAM,GAAG,kBAAkB,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGnE,wBAAgB,WAAW,CACzB,GAAG,EAAE,QAAQ,EACb,GAAG,CAAC,OAAoD,CAAC,EAAE,WAAW,CACpE,eAAe,EACf,MAAM,CACP,GACA,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CA4B9D"}

package/dist/node.js

@@ -0,0 +1,31 @@
+import { createHandler } from "graphql-http/lib/use/http";
+import { contextFailure, masking, operationEnd, handlerRules } from "./core.js";
+export function nodeHandler(app, ...[options = {}]) {
+    const mask = masking(options);
+    const { context } = options;
+    const end = operationEnd(mask, options.onOperationEnd);
+    const contexts = new WeakMap();
+    const http = createHandler({
+        ...options,
+        schema: app.schema,
+        context: context
+            ? async (req) => {
+                try {
+                    const ctx = await context(req.raw);
+                    contexts.set(req.raw, ctx);
+                    return ctx;
+                }
+                catch (error) {
+                    return contextFailure(mask, error, req.raw);
+                }
+            }
+            : undefined,
+        validationRules: handlerRules(options.validationRules),
+        onOperation: (req, _args, result) => mask.result(result, { ctx: contexts.get(req.raw), request: req.raw })
+    });
+    return async (req, res) => {
+        await http(req, res);
+        await end(contexts.get(req), req);
+    };
+}
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAuB,MAAM,2BAA2B,CAAC;AAE/E,OAAO,EACL,cAAc,EACd,OAAO,EACP,YAAY,EACZ,YAAY,EAMb,MAAM,WAAW,CAAC;AAKnB,MAAM,UAAU,WAAW,CACzB,GAAa,EACb,GAAG,CAAC,OAAO,GAAG,EAA0C,CAGvD;IAED,MAAM,IAAI,GAAG,OAAO,CAA6B,OAAO,CAAC,CAAC;IAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA4B,CAAC;IACzD,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,GAAG,OAAO;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,OAAO;YACd,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACZ,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAC3B,OAAO,GAAY,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACH,CAAC,CAAC,SAAS;QACb,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC;QACtD,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrB,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@nxara/olio-http",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Serve an olio app over HTTP, on any framework: GraphQL over HTTP with context, error masking and per-operation cleanup.",
+  "keywords": [
+    "graphql",
+    "graphql-http",
+    "http",
+    "nxara"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nxara-hub/olio.git",
+    "directory": "packages/http"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./fetch": {
+      "types": "./dist/fetch.d.ts",
+      "default": "./dist/fetch.js"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "default": "./dist/node.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "bun test",
+    "check-types": "tsc -p tsconfig.test.json"
+  },
+  "dependencies": {
+    "@nxara/olio-core": "0.1.0",
+    "graphql-http": "^1.23.1"
+  },
+  "devDependencies": {
+    "@nxara/olio": "0.1.0",
+    "graphql": "^16.14.2"
+  },
+  "peerDependencies": {
+    "graphql": "^16.13.0"
+  }
+}