@ontemper/sdk 0.0.0 → 0.2.0

package/dist/Middleware.js

@@ -0,0 +1,287 @@
+import { Cause, Clock, Context, Duration, Effect, Exit, Option, Predicate, Schema } from 'effect';
+import { Headers, HttpRouter, HttpServerError, HttpServerRequest, HttpServerResponse } from 'effect/unstable/http';
+import { bodyOf, formDataFields, safeJsonParse } from './HttpPayload.js';
+import { Invocation } from './Invocation.js';
+import { CurrentLogContext, logSpan, TRACE_HEADER } from './LogContext.js';
+class InvocationDeadlineExceeded extends Schema.TaggedError()('InvocationDeadlineExceeded', { runId: Schema.String, executionId: Schema.String, deadline: Schema.String, message: Schema.String }) {
+}
+/**
+ * Legacy unnbound-events `ServerError` (sdk/events/src/lib/error.ts). It stays a plain `Error` so it
+ * logs as the legacy pino `err`: `{ type, message, stack, status, name }`.
+ */
+class ServerError extends Error {
+    status;
+    constructor(status, message, options) {
+        super(message, options);
+        // `status` before `name`: the order pino serialized the legacy own fields in.
+        this.status = status;
+        this.name = 'ServerError';
+    }
+}
+const MESSAGE_HEADER = 'x-message-id';
+/** Legacy `readBody` ceiling (sdk/events/src/lib/utils.ts:63-106), matched to the ingress limit. */
+const MAX_REQUEST_BODY_BYTES = 100 * 1024 * 1024;
+/** The Run trace id of a W3C `traceparent`, as the gateway records it in `run_events.trace_id`. */
+const traceIdOf = (traceparent) => {
+    const traceId = traceparent === undefined ? undefined : /^00-([0-9a-f]{32})-[0-9a-f]{16}-[0-9a-f]{2}$/.exec(traceparent)?.[1];
+    return traceId === undefined || /^0+$/.test(traceId) ? undefined : traceId;
+};
+const headerOf = (headers, name) => {
+    const value = headers[name];
+    return value === undefined || value === '' ? undefined : value;
+};
+/**
+ * Legacy `readBody`: the whole body, rejected with 413 when its declared or streamed length passes
+ * the ceiling and with 400 when the stream fails. It reads a clone, so the handler still reads the body.
+ */
+const readBody = (source, declaredLength) => {
+    const declared = Number(declaredLength ?? Number.NaN);
+    if (Number.isFinite(declared) && declared > MAX_REQUEST_BODY_BYTES) {
+        return Effect.fail(new ServerError(413, 'Request body too large.'));
+    }
+    const stream = source.clone().body;
+    if (stream === null)
+        return Effect.succeed(new Uint8Array());
+    return Effect.acquireUseRelease(Effect.sync(() => stream.getReader()), (reader) => Effect.gen(function* () {
+        const chunks = [];
+        let total = 0;
+        while (true) {
+            const next = yield* Effect.tryPromise({
+                try: () => reader.read(),
+                catch: (cause) => new ServerError(400, 'Failed to read request body.', { cause }),
+            });
+            if (next.done)
+                break;
+            total += next.value.byteLength;
+            if (total > MAX_REQUEST_BODY_BYTES)
+                return yield* Effect.fail(new ServerError(413, 'Request body too large.'));
+            chunks.push(next.value);
+        }
+        const bytes = new Uint8Array(total);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return bytes;
+    }), (reader, exit) => Effect.sync(() => {
+        if (Exit.isSuccess(exit))
+            return reader.releaseLock();
+        // A tee branch's cancel settles only when the handler's branch is cancelled too, so it is not awaited.
+        reader.cancel().catch(() => undefined);
+    }));
+};
+const decoder = new TextDecoder();
+/** unnbound-events 2.0 `parseBody` by content type; anything else was logged as its `ArrayBuffer`, `{}`. */
+const loggedBodyOf = (bytes, contentType) => {
+    if (contentType.includes('application/json')) {
+        const text = decoder.decode(bytes);
+        // Hono's `req.json()` rejected invalid JSON, and legacy then logged no body.
+        return Effect.try(() => JSON.parse(text)).pipe(Effect.orElseSucceed(() => undefined));
+    }
+    if (contentType.includes('application/x-www-form-urlencoded') || contentType.includes('multipart/form-data')) {
+        return Effect.tryPromise(() => new Response(bytes, { headers: { 'content-type': contentType } }).formData()).pipe(Effect.map(formDataFields), Effect.orElseSucceed(() => undefined));
+    }
+    if (contentType.includes('text/plain'))
+        return Effect.succeed(safeJsonParse(decoder.decode(bytes)));
+    return Effect.succeed({});
+};
+/** unnbound-events 2.0 `buildIncomingPayload` before a response exists (sdk/events/src/lib/utils.ts:278-306). */
+const incomingOf = (request, params) => {
+    const source = request.source;
+    const body = source instanceof Request
+        ? Effect.flatMap(readBody(source, request.headers['content-length']), (bytes) => loggedBodyOf(bytes, headerOf(request.headers, 'content-type') ?? ''))
+        : Effect.succeed(undefined);
+    return Effect.map(body, (body) => {
+        const url = new URL(request.originalUrl, 'https://unnbound.ai');
+        // Hono `query()` keeps the first value of a repeated key.
+        const query = {};
+        for (const [key, value] of url.searchParams)
+            query[key] ??= value;
+        const ip = headerOf(request.headers, 'cf-connecting-ip') ??
+            headerOf(request.headers, 'x-forwarded-for') ??
+            headerOf(request.headers, 'x-real-ip');
+        return {
+            type: 'http',
+            source: 'http',
+            http: {
+                url: url.toString(),
+                method: request.method.toLowerCase(),
+                query,
+                params,
+                // Legacy `normalizeIp`: an IPv4-mapped IPv6 address logs as IPv4.
+                ip: ip?.startsWith('::ffff:') ? ip.slice(7) : ip,
+                incoming: true,
+                request: { headers: { ...request.headers }, body },
+            },
+        };
+    });
+};
+/**
+ * Legacy logged the declared response headers, with a JSON content type only over a body
+ * (sdk/events/src/lib/utils.ts:238-260); 204, 205, and 304 log no body. Effect derives
+ * `content-type` and `content-length` from the body, so those are not declared.
+ */
+const responseOf = ({ body, headers, status }) => {
+    const logged = status === 204 || status === 205 || status === 304 ? undefined : bodyOf(body);
+    const declared = { ...Headers.removeMany(headers, ['content-type', 'content-length']) };
+    if (!Predicate.isTruthy(logged))
+        return { status, headers: declared, body: undefined };
+    const contentType = headerOf(headers, 'content-type');
+    return {
+        status,
+        headers: {
+            'content-type': contentType === undefined || contentType.startsWith('application/json')
+                ? 'application/json; charset=utf-8'
+                : contentType,
+            ...declared,
+        },
+        body: logged,
+    };
+};
+const isRouteNotFound = (cause) => {
+    const error = Cause.squash(cause);
+    return HttpServerError.isHttpServerError(error) && error.reason._tag === 'RouteNotFound';
+};
+const deadlineOutcome = (error) => {
+    const body = {
+        _tag: error._tag,
+        runId: error.runId,
+        executionId: error.executionId,
+        deadline: error.deadline,
+    };
+    return {
+        response: HttpServerResponse.jsonUnsafe(body, { status: 504 }),
+        failure: { error, message: 'workflow.invocation_deadline_exceeded' },
+    };
+};
+/** Legacy `onError` for a `ServerError`: its status and `{ message }`, logged as its cause when it has one. */
+const serverErrorOutcome = (error) => ({
+    response: HttpServerResponse.jsonUnsafe({ message: error.message }, { status: error.status }),
+    failure: { error: error.cause instanceof Error ? error.cause : error, message: error.message, untraced: true },
+});
+/**
+ * Legacy unnbound-events `onError`: a response Effect derives from the cause (declared HTTP errors)
+ * is kept, anything else answers `500 {"message":"Internal server error"}`.
+ */
+const failureOutcome = (cause) => {
+    // Nobody awaits an interrupted request; the interruption propagates.
+    if (Cause.hasInterruptsOnly(cause))
+        return Effect.failCause(Cause.fromReasons(cause.reasons.filter(Cause.isInterruptReason)));
+    const error = Cause.squash(cause);
+    if (error instanceof InvocationDeadlineExceeded)
+        return Effect.succeed(deadlineOutcome(error));
+    if (isRouteNotFound(cause))
+        return Effect.succeed(serverErrorOutcome(new ServerError(404, 'Endpoint not found.')));
+    return Effect.map(HttpServerError.causeResponse(cause), ([response]) => response.status === 500 && response.body._tag === 'Empty'
+        ? {
+            response: HttpServerResponse.jsonUnsafe({ message: 'Internal server error' }, { status: 500 }),
+            failure: { error, message: 'Internal server error' },
+        }
+        : {
+            response,
+            failure: {
+                error,
+                message: Predicate.hasProperty(error, 'message') && Predicate.isString(error.message)
+                    ? error.message
+                    : String(error),
+            },
+        });
+};
+/**
+ * The SDK ends a request this long before `InvocationContext.deadline`, so its finalizers run and its
+ * 504 is written before the host's own timer, which stays only the backstop.
+ */
+const DEADLINE_MARGIN_MS = 2_000;
+/** The fiber is interrupted, finalizers included, at the deadline less the margin; at once when less remains. */
+const withDeadline = (invocation) => (effect) => {
+    if (!Number.isFinite(invocation.deadline))
+        return effect;
+    const exceeded = () => Effect.fail(new InvocationDeadlineExceeded({
+        runId: invocation.runId,
+        executionId: invocation.executionId,
+        deadline: new Date(invocation.deadline).toISOString(),
+        message: 'Invocation deadline exceeded.',
+    }));
+    return Effect.flatMap(Clock.currentTimeMillis, (now) => {
+        const remaining = invocation.deadline - DEADLINE_MARGIN_MS - now;
+        return remaining > 0
+            ? Effect.timeoutOrElse(effect, { duration: Duration.millis(remaining), orElse: exceeded })
+            : exceeded();
+    });
+};
+/**
+ * One request as legacy unnbound-events served it (sdk/events/src/lib/routing/endpoint.ts): the
+ * body read under the invocation deadline and the 100 MiB ceiling, an `Event request` span under the
+ * caller's trace, the `onError` line for a failed handler, and the trace and message ids echoed on the
+ * response (routing/response.ts:31-41) unless the message id is empty or the request never reached a route.
+ */
+const serveEventRequest = (handler) => Effect.withFiber((fiber) => {
+    // The SDK installs both services on every request context before routing.
+    const request = Context.getUnsafe(fiber.context, HttpServerRequest.HttpServerRequest);
+    const invocation = Context.getUnsafe(fiber.context, Invocation);
+    const routeParams = Context.getOrUndefined(fiber.context, HttpRouter.RouteContext)?.params ?? {};
+    // Hono's `:param` never matched an empty segment, so such a request met legacy `notFound`.
+    const unmatched = Object.values(routeParams).includes('');
+    const run = unmatched
+        ? Effect.fail(new HttpServerError.HttpServerError({ reason: new HttpServerError.RouteNotFound({ request }) }))
+        : handler;
+    // An empty trace header counts as absent (`||`), an empty message id as present (`??`), as in legacy.
+    const traceId = headerOf(request.headers, TRACE_HEADER) ??
+        traceIdOf(headerOf(request.headers, 'traceparent')) ??
+        traceIdOf(headerOf(request.headers, 'x-traceparent')) ??
+        crypto.randomUUID();
+    const inboundMessageId = request.headers[MESSAGE_HEADER];
+    const messageId = inboundMessageId ?? crypto.randomUUID();
+    // Legacy echoed both ids only when both were non-empty.
+    const echo = (response) => messageId === ''
+        ? response
+        : HttpServerResponse.setHeaders(response, {
+            [TRACE_HEADER]: response.headers[TRACE_HEADER] ?? traceId,
+            [MESSAGE_HEADER]: response.headers[MESSAGE_HEADER] ?? messageId,
+        });
+    // Hono's compose ran `notFound`, and the body read, outside its try, so `onError` caught them past the trace middleware.
+    const untracedFailure = (outcome) => outcome.failure === undefined
+        ? Effect.succeed(outcome.response)
+        : Effect.logError(outcome.failure.message, { err: outcome.failure.error }).pipe(Effect.provideService(CurrentLogContext, undefined), Effect.as(outcome.response));
+    return Effect.gen(function* () {
+        const incoming = yield* incomingOf(request, unmatched ? {} : routeParams).pipe(withDeadline(invocation));
+        const outcome = yield* run.pipe(withDeadline(invocation), Effect.matchCauseEffect({
+            onFailure: failureOutcome,
+            onSuccess: (response) => Effect.succeed({ response }),
+        }), logSpan('Event request', {
+            fields: (exit) => exit === undefined || Exit.isFailure(exit)
+                ? incoming
+                : { ...incoming, http: { ...incoming.http, response: responseOf(exit.value.response) } },
+            failure: (exit) => {
+                if (Exit.isFailure(exit))
+                    return Option.some(Cause.squash(exit.cause));
+                return exit.value.failure === undefined ? Option.none() : Option.some(exit.value.failure.error);
+            },
+        }));
+        const failure = outcome.failure;
+        if (failure?.untraced === true)
+            return yield* untracedFailure(outcome);
+        if (failure !== undefined)
+            yield* Effect.logError(failure.message, { err: failure.error });
+        return echo(outcome.response);
+    }).pipe(Effect.catch((error) => error instanceof InvocationDeadlineExceeded
+        ? Effect.logError('workflow.invocation_deadline_exceeded', { err: error }).pipe(Effect.as(echo(deadlineOutcome(error).response)))
+        : untracedFailure(serverErrorOutcome(error))), Effect.provideService(CurrentLogContext, {
+        traceId,
+        messageId,
+        messageIdMinted: inboundMessageId === undefined,
+        source: 'http',
+    }), Effect.annotateLogs({
+        runId: invocation.runId,
+        executionId: invocation.executionId,
+        attempt: invocation.attempt,
+        triggerKind: invocation.triggerKind,
+        traceparent: headerOf(request.headers, 'traceparent'),
+    }));
+});
+/** Serves every API route as an `Event request`; provide it to the routes it wraps. */
+export const EventRequestMiddleware = HttpRouter.middleware((effect) => serveEventRequest(effect)).layer;
+/** An unmatched route answers like legacy `notFound`: `404 {"message":"Endpoint not found."}` in its own span, with no id headers. */
+export const UnmatchedRequestMiddleware = HttpRouter.middleware((effect) => Effect.catchCause(effect, (cause) => isRouteNotFound(cause) ? serveEventRequest(Effect.failCause(cause)) : Effect.failCause(cause)), { global: true });
+//# sourceMappingURL=Middleware.js.map

package/dist/Middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Middleware.js","sourceRoot":"","sources":["../src/Middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAC9G,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEnH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAgC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAUzG,MAAM,0BAA2B,SAAQ,MAAM,CAAC,WAAW,EAA8B,CACvF,4BAA4B,EAC5B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CACtG;CAAG;AAEJ;;;GAGG;AACH,MAAM,WAAY,SAAQ,KAAK;IACpB,MAAM,CAAS;IACxB,YAAY,MAAc,EAAE,OAAe,EAAE,OAAsB;QACjE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,8EAA8E;QAC9E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,mGAAmG;AACnG,MAAM,SAAS,GAAG,CAAC,WAA+B,EAAsB,EAAE;IACxE,MAAM,OAAO,GACX,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8CAA8C,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,OAAwB,EAAE,IAAY,EAAsB,EAAE;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,QAAQ,GAAG,CACf,MAAe,EACf,cAAkC,EACmB,EAAE;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,sBAAsB,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,iBAAiB,CAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EACrC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACpC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC;aAClF,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,sBAAsB;gBAChC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,EACJ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;QACtD,uGAAuG;QACvG,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,4GAA4G;AAC5G,MAAM,YAAY,GAAG,CAAC,KAA8B,EAAE,WAAmB,EAA0B,EAAE;IACnG,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,6EAA6E;QAC7E,OAAO,MAAM,CAAC,GAAG,CAAC,GAAY,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC7G,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC/G,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAC1B,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,iHAAiH;AACjH,MAAM,UAAU,GAAG,CACjB,OAA4C,EAC5C,MAAoD,EACpD,EAAE;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,IAAI,GACR,MAAM,YAAY,OAAO;QACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5E,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CACrE;QACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAChE,0DAA0D;QAC1D,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;QAClE,MAAM,EAAE,GACN,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC;YAC7C,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;YAC5C,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACpC,KAAK;gBACL,MAAM;gBACN,kEAAkE;gBAClE,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBAChD,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE;aACnD;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAyC,EAAE,EAAE;IACtF,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACtD,OAAO;QACL,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EACZ,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACrE,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,WAAW;YACjB,GAAG,QAAQ;SACZ;QACD,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC,CAAC;AAeF,MAAM,eAAe,GAAG,CAAC,KAA2B,EAAW,EAAE;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAiC,EAAW,EAAE;IACrE,MAAM,IAAI,GAAyB;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE;KACrE,CAAC;AACJ,CAAC,CAAC;AAEF,+GAA+G;AAC/G,MAAM,kBAAkB,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,CAAC;IAC3D,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7F,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC/G,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,KAA2B,EAA0B,EAAE;IAC7E,qEAAqE;IACrE,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAChC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CACrE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;QACvD,CAAC,CAAC;YACE,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC9F,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;SACrD;QACH,CAAC,CAAC;YACE,QAAQ;YACR,OAAO,EAAE;gBACP,KAAK;gBACL,OAAO,EACL,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC1E,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACpB;SACF,CACN,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,iHAAiH;AACjH,MAAM,YAAY,GAChB,CAAC,UAA6B,EAAE,EAAE,CAClC,CAAO,MAA2B,EAAoD,EAAE;IACtF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACzD,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,MAAM,CAAC,IAAI,CACT,IAAI,0BAA0B,CAAC;QAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,QAAQ,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QACrD,OAAO,EAAE,+BAA+B;KACzC,CAAC,CACH,CAAC;IACJ,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,GAAG,kBAAkB,GAAG,GAAG,CAAC;QACjE,OAAO,SAAS,GAAG,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC1F,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CACxB,OAAgE,EACV,EAAE,CACxD,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;IACzB,0EAA0E;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;IACjG,2FAA2F;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAA8F,SAAS;QAC9G,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC,OAAO,CAAC;IACZ,sGAAsG;IACtG,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC;QACvC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,CAAC,UAAU,EAAE,CAAC;IACtB,MAAM,gBAAgB,GAAuB,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,gBAAgB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1D,wDAAwD;IACxD,MAAM,IAAI,GAAG,CAAC,QAA+C,EAAE,EAAE,CAC/D,SAAS,KAAK,EAAE;QACd,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,QAAQ,EAAE;YACtC,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO;YACzD,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,SAAS;SAChE,CAAC,CAAC;IACT,yHAAyH;IACzH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAE,EAAE,CAC3C,OAAO,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC,EACnD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAC5B,CAAC;IACR,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAC7B,YAAY,CAAC,UAAU,CAAC,EACxB,MAAM,CAAC,gBAAgB,CAAC;YACtB,SAAS,EAAE,cAAc;YACzB,SAAS,EAAE,CAAC,QAAQ,EAA0B,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;SAC9E,CAAC,EACF,OAAO,CAAC,eAAe,EAAE;YACvB,MAAM,EAAE,CAAC,IAAI,EAAa,EAAE,CAC1B,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBACxC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC5F,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClG,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,KAAK,YAAY,0BAA0B;QACzC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,uCAAuC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CACjD;QACH,CAAC,CAAC,eAAe,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAC/C,EACD,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE;QACvC,OAAO;QACP,SAAS;QACT,eAAe,EAAE,gBAAgB,KAAK,SAAS;QAC/C,MAAM,EAAE,MAAM;KACf,CAAC,EACF,MAAM,CAAC,YAAY,CAAC;QAClB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC;KACtD,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC,UAAU,CACzD,CAAC,MAAM,EAAyE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAC7G,CAAC,KAAK,CAAC;AAER,sIAAsI;AACtI,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC,UAAU,CAC7D,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAClC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAC9F,EACH,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC"}

package/dist/Redaction.d.ts

@@ -0,0 +1,27 @@
+import { Context, type Effect } from 'effect';
+import type { LogJson } from './LogContext.js';
+/** Replaces a secret wherever it appears in a logged string (legacy `applyRedactionMasks`). */
+export declare const REDACTED = "[Redacted]";
+/**
+ * Legacy pino `redact` paths, widened: credential headers are removed, `err` loses every `config`, and
+ * a secret body key's value becomes `[Redacted]` at any depth and in form-encoded bodies, because a
+ * credential a partner returns (an OAuth token response) is logged before the caller can register it.
+ * `line` is the logger's own JSON copy.
+ */
+export declare const redactLine: (line: {
+    [key: string]: LogJson;
+}) => void;
+/** Secret values masked out of every string a workflow logs. */
+export interface SecretMasks {
+    readonly register: (values: Iterable<string>) => void;
+    readonly mask: (text: string) => string;
+}
+export declare const makeSecretMasks: () => SecretMasks;
+/** `workflow()` installs one registry per module, so a secret seen by one request stays masked in every later one. */
+export declare const SecretMasks: Context.Reference<SecretMasks>;
+/**
+ * Masks each non-empty value, and its `encodeURIComponent` and form-urlencoded forms, as `[Redacted]`
+ * in every later log line of this workflow.
+ */
+export declare const registerSecrets: (values: Iterable<string>) => Effect.Effect<void>;
+//# sourceMappingURL=Redaction.d.ts.map

package/dist/Redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Redaction.d.ts","sourceRoot":"","sources":["../src/Redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/C,+FAA+F;AAC/F,eAAO,MAAM,QAAQ,eAAe,CAAC;AAmErC;;;;;GAKG;AACH,eAAO,MAAM,UAAU,SAAU;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,KAAG,IAsB7D,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC;AAaD,eAAO,MAAM,eAAe,QAAO,WAoClC,CAAC;AAEF,sHAAsH;AACtH,eAAO,MAAM,WAAW,gCAEtB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe,WAAY,QAAQ,CAAC,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CACrB,CAAC"}

package/dist/Redaction.js

@@ -0,0 +1,149 @@
+import { Context, Predicate } from 'effect';
+/** Replaces a secret wherever it appears in a logged string (legacy `applyRedactionMasks`). */
+export const REDACTED = '[Redacted]';
+/**
+ * Credential headers removed from every logged `http` request and response: the legacy logger redact
+ * paths and the unnbound-events trace list (sdk/events/src/lib/utils.ts:190-198).
+ */
+const secretHeaderNames = {
+    authorization: true,
+    'proxy-authorization': true,
+    cookie: true,
+    'set-cookie': true,
+    'x-service-token': true,
+    'x-api-key': true,
+    'x-auth-token': true,
+    'ocp-apim-subscription-key': true,
+};
+/** Body keys whose values are credentials, compared lowercase without `_` and `-`, so `accessToken` matches too. */
+const secretBodyKeys = {
+    accesstoken: true,
+    refreshtoken: true,
+    idtoken: true,
+    clientsecret: true,
+    password: true,
+    apikey: true,
+    secret: true,
+    token: true,
+};
+const isSecretBodyKey = (name) => Object.hasOwn(secretBodyKeys, name.toLowerCase().replace(/[-_]/g, ''));
+const maskSecretFields = (value) => {
+    if (Array.isArray(value))
+        return value.map(maskSecretFields);
+    if (!Predicate.isObject(value))
+        return value;
+    const masked = {};
+    for (const [key, item] of Object.entries(value))
+        masked[key] = isSecretBodyKey(key) ? REDACTED : maskSecretFields(item);
+    return masked;
+};
+const maskSecretFormFields = (body) => body
+    .split('&')
+    .map((field) => {
+    const separator = field.indexOf('=');
+    if (separator === -1)
+        return field;
+    const name = field.slice(0, separator);
+    let decoded = name;
+    try {
+        decoded = decodeURIComponent(name.replaceAll('+', ' '));
+    }
+    catch {
+        // An undecodable name is compared as sent.
+    }
+    return isSecretBodyKey(decoded) ? `${name}=${REDACTED}` : field;
+})
+    .join('&');
+/** Legacy pino removed `err.config`; an HTTP error's request config (headers, body, URL) goes at any depth. */
+const withoutConfig = (value) => {
+    if (Array.isArray(value))
+        return value.map(withoutConfig);
+    if (!Predicate.isObject(value))
+        return value;
+    const kept = {};
+    for (const [key, item] of Object.entries(value))
+        if (key !== 'config')
+            kept[key] = withoutConfig(item);
+    return kept;
+};
+/**
+ * Legacy pino `redact` paths, widened: credential headers are removed, `err` loses every `config`, and
+ * a secret body key's value becomes `[Redacted]` at any depth and in form-encoded bodies, because a
+ * credential a partner returns (an OAuth token response) is logged before the caller can register it.
+ * `line` is the logger's own JSON copy.
+ */
+export const redactLine = (line) => {
+    if (line.err !== undefined)
+        line.err = withoutConfig(line.err);
+    const http = line.http;
+    if (!Predicate.isObject(http))
+        return;
+    for (const part of [http.request, http.response]) {
+        if (!Predicate.isObject(part))
+            continue;
+        const headers = Predicate.isObject(part.headers) ? part.headers : undefined;
+        if (headers !== undefined) {
+            part.headers = Object.fromEntries(Object.entries(headers).filter(([name]) => !Object.hasOwn(secretHeaderNames, name.toLowerCase())));
+        }
+        // Header names are case-insensitive, and a caller may log its own `http` payload.
+        const contentType = Object.entries(headers ?? {}).find(([name]) => name.toLowerCase() === 'content-type')?.[1];
+        if (!Predicate.isString(part.body))
+            part.body = maskSecretFields(part.body);
+        else if (Predicate.isString(contentType) &&
+            contentType.toLowerCase().startsWith('application/x-www-form-urlencoded')) {
+            part.body = maskSecretFormFields(part.body);
+        }
+    }
+};
+/** A secret also reaches logs percent-encoded: in URLs, form bodies, and the errors that quote them. */
+const encodingsOf = (value) => {
+    const form = new URLSearchParams([['', value]]).toString().slice(1);
+    try {
+        return [value, encodeURIComponent(value), form];
+    }
+    catch {
+        // A lone surrogate has no percent-encoding; the form serializer sends U+FFFD instead.
+        return [value, form];
+    }
+};
+export const makeSecretMasks = () => {
+    const values = new Set();
+    // Alternation tries the longest secret first at each position, as the legacy scanner did.
+    let pattern;
+    return {
+        register: (candidates) => {
+            for (const candidate of candidates) {
+                if (candidate.length === 0)
+                    continue;
+                for (const value of encodingsOf(candidate)) {
+                    if (values.has(value))
+                        continue;
+                    values.add(value);
+                    pattern = undefined;
+                }
+            }
+        },
+        mask: (text) => {
+            if (values.size === 0)
+                return text;
+            pattern ??= new RegExp([...values]
+                .sort((left, right) => right.length - left.length)
+                .map((value) => value
+                .replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+                // Percent-escapes are case-insensitive on their hex digits: `%2F` and `%2f` are one byte.
+                .replace(/%([0-9A-Fa-f])([0-9A-Fa-f])/g, (_escape, high, low) => `%${[high, low].map((digit) => (/[0-9]/.test(digit) ? digit : `[${digit.toUpperCase()}${digit.toLowerCase()}]`)).join('')}`))
+                .join('|'), 'g');
+            return text.replace(pattern, REDACTED);
+        },
+    };
+};
+/** `workflow()` installs one registry per module, so a secret seen by one request stays masked in every later one. */
+export const SecretMasks = Context.Reference('@temper/workflow/SecretMasks', {
+    defaultValue: makeSecretMasks,
+});
+/**
+ * Masks each non-empty value, and its `encodeURIComponent` and form-urlencoded forms, as `[Redacted]`
+ * in every later log line of this workflow.
+ */
+export const registerSecrets = (values) => SecretMasks.useSync((masks) => masks.register(values));
+//# sourceMappingURL=Redaction.js.map

package/dist/Redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Redaction.js","sourceRoot":"","sources":["../src/Redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGzD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;GAGG;AACH,MAAM,iBAAiB,GAAG;IACxB,aAAa,EAAE,IAAI;IACnB,qBAAqB,EAAE,IAAI;IAC3B,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;IACvB,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE,IAAI;IACpB,2BAA2B,EAAE,IAAI;CACM,CAAC;AAE1C,oHAAoH;AACpH,MAAM,cAAc,GAAG;IACrB,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,IAAI;IAClB,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;CAC4B,CAAC;AAE1C,MAAM,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CAChD,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEzE,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAW,EAAE;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAU,EAAE,CACpD,IAAI;KACD,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACb,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAClE,CAAC,CAAC;KACD,IAAI,CAAC,GAAG,CAAC,CAAC;AAEf,+GAA+G;AAC/G,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,IAAI,GAA+B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvG,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAgC,EAAQ,EAAE;IACnE,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAClG,CAAC;QACJ,CAAC;QACD,kFAAkF;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/G,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACvE,IACH,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,mCAAmC,CAAC,EACzE,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAQF,wGAAwG;AACxG,MAAM,WAAW,GAAG,CAAC,KAAa,EAAyB,EAAE;IAC3D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;QACtF,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAgB,EAAE;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,0FAA0F;IAC1F,IAAI,OAA2B,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE;YACvB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACrC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,SAAS;oBAChC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAClB,OAAO,GAAG,SAAS,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,KAAK,IAAI,MAAM,CACpB,CAAC,GAAG,MAAM,CAAC;iBACR,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;iBACjD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK;iBACF,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;gBACvC,0FAA0F;iBACzF,OAAO,CACN,8BAA8B,EAC9B,CAAC,OAAO,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CACrC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAC9H,CACJ;iBACA,IAAI,CAAC,GAAG,CAAC,EACZ,GAAG,CACJ,CAAC;YACF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAc,8BAA8B,EAAE;IACxF,YAAY,EAAE,eAAe;CAC9B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAwB,EAAuB,EAAE,CAC/E,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC"}

package/dist/Resource.d.ts

@@ -0,0 +1,66 @@
+import { Context, Effect, Layer, type Redacted, Schema } from 'effect';
+import { HttpApiMiddleware } from 'effect/unstable/httpapi';
+import { type ManifestResource } from './Contract/Manifest.js';
+import { InvalidResourceError, type ResourceNotSelectableError } from './ResourcesErrors.js';
+import { type ReadError, RuntimeResources, type ResourceReader } from './RuntimeResources.js';
+type Kind = ManifestResource['kind'];
+type DeclarationId<K extends Kind, Name extends string> = `@temper/workflow/Declaration/${K}/${Name}`;
+/** The middleware identity every declaration carries; `workflow()` supplies each one an endpoint names. */
+export interface AnyDeclaration {
+    readonly key: DeclarationId<Kind, string>;
+}
+/**
+ * One resource, variable, or resource type a workflow reads, declared once. The class is both the
+ * endpoint middleware (`.middleware(ErpCredentials)`) and the handler's value (`yield* ErpCredentials`);
+ * a handler that yields it on an endpoint without it fails to compile.
+ */
+export type Declaration<Self, K extends Kind, Name extends string, A> = HttpApiMiddleware.ServiceClass<Self, DeclarationId<K, Name>, {
+    requires: never;
+    provides: Self;
+    error: never;
+    clientError: never;
+    requiredForClient: false;
+    security: never;
+}, A>;
+/** Decodable without services, so a value decodes where the handler yields it. */
+type ValueSchema = Schema.Top & {
+    readonly DecodingServices: never;
+};
+/** Finds, at run time, the one record of a declared resource type that a request names. */
+export interface ResourceSelection<A> {
+    /** The one record of this type whose `x-selectable` field equals the match; `ResourceNotFoundError` when none does. */
+    readonly select: (match: Readonly<Record<string, string>>) => Effect.Effect<{
+        readonly key: string;
+        readonly value: A;
+    }, ReadError | ResourceNotSelectableError | InvalidResourceError>;
+}
+/** What `makeManifest` writes and `workflow()` runs for one declaration. */
+export interface DeclarationRuntime {
+    readonly manifest: ManifestResource;
+    /** The per-request value: read on first use, then kept for the rest of the request. */
+    readonly read: (resources: ResourceReader) => Effect.Effect<unknown>;
+    readonly value: Context.Key<never, Effect.Effect<unknown>>;
+}
+/** The declaration an endpoint middleware carries, if it is one. */
+export declare const declarationOf: (middleware: HttpApiMiddleware.AnyService) => DeclarationRuntime | undefined;
+/**
+ * A resource read by key. Declare secret fields `Redacted` (see `HttpApiResource`); name `type` to have
+ * deploy check the bound record's resource type too. A read the platform cannot answer is a defect.
+ */
+export declare const Resource: <Self>() => <const Name extends string, S extends ValueSchema>(key: Name, options: {
+    readonly schema: S;
+    readonly type?: string;
+}) => Declaration<Self, 'resource', Name, S['Type']>;
+/** A Variable read by key; it arrives `Redacted` because the platform decides what is secret. */
+export declare const Variable: <Self>() => <const Name extends string>(key: Name) => Declaration<Self, 'variable', Name, Redacted.Redacted<string>>;
+/**
+ * A resource type whose record the handler selects at run time, for example the tenant a request
+ * names. Deploy checks that the type exists; `select` finds the record and decodes it with `schema`.
+ */
+export declare const ResourceType: <Self>() => <const Name extends string, S extends ValueSchema>(type: Name, options: {
+    readonly schema: S;
+}) => Declaration<Self, 'resourceType', Name, ResourceSelection<S['Type']>>;
+/** The middleware one declaration needs: its value, read through `RuntimeResources` on first use in a request. */
+export declare const declarationLayer: (middleware: HttpApiMiddleware.AnyService, runtime: DeclarationRuntime) => Layer.Layer<any, never, RuntimeResources>;
+export {};
+//# sourceMappingURL=Resource.d.ts.map

package/dist/Resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Resource.d.ts","sourceRoot":"","sources":["../src/Resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAc,KAAK,EAAE,KAAK,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,KAAK,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE9F,KAAK,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACrC,KAAK,aAAa,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,SAAS,MAAM,IAAI,gCAAgC,CAAC,IAAI,IAAI,EAAE,CAAC;AAEtG,2GAA2G;AAC3G,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,IAAI,SAAS,MAAM,EAAE,CAAC,IAAI,iBAAiB,CAAC,YAAY,CACpG,IAAI,EACJ,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,EACtB;IACE,QAAQ,EAAE,KAAK,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,KAAK,CAAC;IACnB,iBAAiB,EAAE,KAAK,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC;CACjB,EACD,CAAC,CACF,CAAC;AAEF,kFAAkF;AAClF,KAAK,WAAW,GAAG,MAAM,CAAC,GAAG,GAAG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;CAAE,CAAC;AAErE,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,uHAAuH;IACvH,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KACpC,MAAM,CAAC,MAAM,CAChB;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;KAAE,EAC3C,SAAS,GAAG,0BAA0B,GAAG,oBAAoB,CAC9D,CAAC;CACH;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5D;AAKD,oEAAoE;AACpE,eAAO,MAAM,aAAa,eAAgB,iBAAiB,CAAC,UAAU,KAAG,kBAAkB,GAAG,SACjB,CAAC;AA6C9E;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAClB,IAAI,QACJ,KAAK,CAAC,IAAI,SAAS,MAAM,EAAE,CAAC,SAAS,WAAW,OAC1C,IAAI,WACA;IAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACtD,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAQ7C,CAAC;AAEN,iGAAiG;AACjG,eAAO,MAAM,QAAQ,GAClB,IAAI,QACJ,KAAK,CAAC,IAAI,SAAS,MAAM,OAAO,IAAI,KAAG,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CACM,CAAC;AAE9G;;;GAGG;AACH,eAAO,MAAM,YAAY,GACtB,IAAI,QACJ,KAAK,CAAC,IAAI,SAAS,MAAM,EAAE,CAAC,SAAS,WAAW,QACzC,IAAI,WACD;IAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;CAAE,KAC9B,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAUpE,CAAC;AAEN,kHAAkH;AAClH,eAAO,MAAM,gBAAgB,eAAgB,iBAAiB,CAAC,UAAU,WAAW,kBAAkB,8CAYnG,CAAC"}

package/dist/Resource.js

@@ -0,0 +1,57 @@
+import { Context, Effect, Effectable, Layer, Schema } from 'effect';
+import { HttpApiMiddleware } from 'effect/unstable/httpapi';
+import { JsonSchemaObject } from './Contract/Manifest.js';
+import { InvalidResourceError } from './ResourcesErrors.js';
+import { RuntimeResources } from './RuntimeResources.js';
+// Keyed by the class `declare` builds; an author's `class X extends Resource<X>()(…)` inherits from it.
+const runtimes = new WeakMap();
+/** The declaration an endpoint middleware carries, if it is one. */
+export const declarationOf = (middleware) => runtimes.get(middleware) ?? runtimes.get(Object.getPrototypeOf(middleware));
+/** The encoded form's JSON Schema: what deploy validates the bound value against. */
+const jsonSchemaOf = (schema) => {
+    const document = Schema.toJsonSchemaDocument(schema);
+    const json = Object.keys(document.definitions).length === 0
+        ? document.schema
+        : { ...document.schema, $defs: document.definitions };
+    return Schema.decodeUnknownSync(JsonSchemaObject)(json);
+};
+const decodeAs = (key, schema) => (value) => Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError((error) => new InvalidResourceError({
+    target: `key ${key}`,
+    message: `Resource ${key} does not match the expected schema: ${error.message}`,
+})));
+const declare = (kind, name, manifest, read) => {
+    const id = `@temper/workflow/Declaration/${kind}/${name}`;
+    const middleware = HttpApiMiddleware.Service()(id);
+    // The middleware reads the value into this key on first use; yielding the declaration yields that read.
+    const value = Context.Service(`${id}/value`);
+    Object.assign(middleware, Effectable.Prototype({ label: 'Declaration', evaluate: () => Effect.flatten(value) }));
+    runtimes.set(middleware, { manifest, read, value });
+    const declared = middleware;
+    // SAFETY: yielding the class now evaluates to the declared value, which is the `A` this type names.
+    return declared;
+};
+/**
+ * A resource read by key. Declare secret fields `Redacted` (see `HttpApiResource`); name `type` to have
+ * deploy check the bound record's resource type too. A read the platform cannot answer is a defect.
+ */
+export const Resource = () => (key, options) => declare('resource', key, options.type === undefined
+    ? { kind: 'resource', key, schema: jsonSchemaOf(options.schema) }
+    : { kind: 'resource', key, type: options.type, schema: jsonSchemaOf(options.schema) }, (resources) => resources.resolve(key).pipe(Effect.flatMap(decodeAs(key, options.schema)), Effect.orDie));
+/** A Variable read by key; it arrives `Redacted` because the platform decides what is secret. */
+export const Variable = () => (key) => declare('variable', key, { kind: 'variable', key }, (resources) => Effect.orDie(resources.variable(key)));
+/**
+ * A resource type whose record the handler selects at run time, for example the tenant a request
+ * names. Deploy checks that the type exists; `select` finds the record and decodes it with `schema`.
+ */
+export const ResourceType = () => (type, options) => declare('resourceType', type, { kind: 'resourceType', type, schema: jsonSchemaOf(options.schema) }, (resources) => Effect.succeed({
+    select: (match) => Effect.gen(function* () {
+        const key = yield* resources.select({ resourceTypeKey: type, match });
+        const value = yield* resources.resolve(key).pipe(Effect.flatMap(decodeAs(key, options.schema)));
+        return { key, value };
+    }),
+}));
+/** The middleware one declaration needs: its value, read through `RuntimeResources` on first use in a request. */
+export const declarationLayer = (middleware, runtime) => Layer.effect(
+// The key's declared service is the handler's value; its context slot holds this middleware function.
+middleware, Effect.map(RuntimeResources, (resources) => (httpEffect) => Effect.flatMap(Effect.cached(runtime.read(resources)), (read) => Effect.provideService(httpEffect, runtime.value, read))));
+//# sourceMappingURL=Resource.js.map