@ontemper/sdk 0.1.0-rc.1 → 0.2.0

package/README.md

@@ -89,10 +89,50 @@ The SDK owns three runtime behaviours around every handler:
 
 1. Logs: every `Effect.log*` call becomes one JSON line on stdout with `level`, `message`, `runId`,
    `executionId`, `attempt`, and `traceparent`.
-2. Deadline: when `context.deadline` passes, the handler fiber is interrupted, finalizers run, and the
-   response is `504 { _tag: 'InvocationDeadlineExceeded' }`.
+2. Deadline: two seconds before `context.deadline`, or at once when less time remains, the handler
+   fiber is interrupted, finalizers run, and the SDK answers `504 { _tag: 'InvocationDeadlineExceeded' }`
+   ahead of the host's own timer.
 3. Headers: platform `x-temper-*` request headers are removed before the handler runs.
 
+## Resources and variables
+
+Declare each resource, variable, and resource type that the workflow reads once. The class is both
+the endpoint middleware and the handler's value. Attach it to each endpoint that reads it:
+
+```ts
+import { HttpApiResource, Resource, ResourceType, Trigger, Variable } from '@temper/workflow';
+import { HttpApiEndpoint } from 'effect/unstable/httpapi';
+
+export class CarrierApi extends Resource<CarrierApi>()('carrier', { type: 'http_api', schema: HttpApiResource }) {}
+export class ApiToken extends Variable<ApiToken>()('CARRIER_TOKEN') {}
+export class PartnerApis extends ResourceType<PartnerApis>()('http_api', { schema: HttpApiResource }) {}
+
+HttpApiEndpoint.post('shipmentEvent', '/shipments/events', { payload: ShipmentEvent })
+  .middleware(CarrierApi)
+  .annotate(Trigger, { kind: 'http' });
+```
+
+Read the value in the handler, or in a client method that the handler calls:
+
+```ts
+const carrier = yield* CarrierApi; // decoded value; secret fields stay Redacted
+const token = yield* ApiToken; // Redacted<string>
+const partners = yield* PartnerApis;
+const { key, value } = yield* partners.select({ tenantKey }); // ResourceNotFoundError when no record matches
+```
+
+- The SDK reads a declaration on its first `yield*` in a request and keeps the value for the rest of
+  that request. It caches each read for 30 s, so an edit reaches a running workflow without a redeploy.
+- A read that the platform cannot answer is a defect. The SDK answers `500 {"message":"Internal server error"}`
+  and logs the cause, never the value. `select` keeps its typed errors.
+- A handler that yields a declaration that its endpoint does not declare fails to compile at
+  `workflow({ api, handlers })`.
+- A custom `HttpApiMiddleware` that reads a declaration names it in `requires`. Add the declaration
+  to the endpoint after that middleware, so that it wraps the middleware.
+- `makeManifest` lists the declarations of each endpoint in its `resources`. Deploy fails, with one
+  message for each problem, when a declaration has no binding, a bound resource has a different type,
+  a value breaks the declared schema, or the organization does not have a declared resource type.
+
 ## Invoke in a test
 
 ```ts
@@ -111,42 +151,72 @@ const response = await invoke(workflowModule, {
 
 `testInvocation()` fills every field with a stable default and no deadline.
 
+`testPlatform()` answers declarations in memory through its `resources` option:
+
+```ts
+import { testPlatform } from '@temper/workflow/testing';
+
+const test = testPlatform({
+  resources: {
+    values: { carrier: { baseUrl: 'https://carrier.example.invalid', auth: { type: 'bearer', token: 'token-test' } } },
+    variables: { CARRIER_TOKEN: 'token-test' },
+    select: (type, match) => (type === 'http_api' && match.tenantKey === 'tenant-1' ? 'partner-1' : undefined),
+  },
+});
+const module = workflowModule.withPlatform(test.platform);
+```
+
+Without `resources`, declarations read through the runtime API at `UNNBOUND_API_URL`, answered by the
+`fetch` option. `WorkflowPlatform.resources` replaces the reader outside tests.
+
 ## Versions
 
 CI publishes every version to npm as `@ontemper/sdk`; nobody publishes by hand. Workflow code keeps
-importing `@temper/workflow` through an npm alias. `sdk/workflow/package.json` holds a plain
-`x.y.z` base, and CI adds the suffix: `x.y.z-pr.<N>.<sha>` previews under `pr-<N>`, `x.y.z-rc.<N>`
-release candidates under `next`, and `x.y.z` under `latest`. Pin one exact version:
+importing `@temper/workflow` through an npm alias. `sdk/workflow/package.json` holds the exact
+version that CI publishes. CI adds no suffix. Pin one exact version:
 
 ```sh
 npm install --save-exact @temper/workflow@npm:@ontemper/sdk@<version>
 ```
 
-A published version never changes. Until the first release candidate exists, the workflow template
-and the examples install a vendored canary tarball.
+A published version never changes. The workflow template and the examples pin one exact
+version; `pnpm sdk:pin` moves them all together.
+
+The package has three entry points: `@temper/workflow`, `@temper/workflow/testing`, and
+`@temper/workflow/contract`. `@temper/workflow/contract` holds the runtime Resources HttpApi and the
+manifest, trigger, and invocation schemas that the platform imports. Workflow code rarely needs it.
 
 ## Develop and release
 
-Work locally first; a pull request preview is for a dev stack only.
+Work locally first. Then open one pull request into `stg` that carries the SDK change, its
+version, and the new pins.
+
+| Loop                              | Command                                                                                                                                             |
+| --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Unit tests                        | `pnpm --filter @temper/workflow test`                                                                                                               |
+| Every example against your change | `pnpm --dir sdk/workflow pack --pack-destination /tmp/sdk`, then `WORKFLOW_SDK_TARBALL=/tmp/sdk/<file>.tgz bash scripts/check-workflow-examples.sh` |
+| Another workflow repository       | `npm install @temper/workflow@file:/tmp/sdk/<file>.tgz`                                                                                             |
+| A dev stack                       | After CI publishes your version, deploy it with `scripts/seed-example-workflow.ts --sdk-version <version>`                                          |
+
+Every SDK source change needs a new version. Release it in the same pull request:
 
-| Loop                              | Command                                                                                                                                                         |
-| --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Unit tests                        | `pnpm --filter @temper/workflow test`                                                                                                                           |
-| Every example against your change | `pnpm --dir sdk/workflow pack --pack-destination /tmp/sdk`, then `WORKFLOW_SDK_TARBALL=/tmp/sdk/<file>.tgz bash scripts/check-workflow-examples.sh`             |
-| Another workflow repository       | `npm install @temper/workflow@file:/tmp/sdk/<file>.tgz`                                                                                                         |
-| A dev stack                       | Open a pull request into `stg`; CI publishes `x.y.z-pr.<N>.<sha>` in about 5 minutes. Deploy it with `scripts/seed-example-workflow.ts --sdk-version <version>` |
+1. Set a new version in `package.json` and the same version in `SDK_VERSION` in
+   `src/Manifest.ts`. `scripts/check-sdk-consistency.ts` fails if they differ.
+2. Push. CI publishes that exact version under the dist-tag `pr-<N>` in about 5 minutes.
+3. Run `pnpm sdk:pin`. It waits for npm, moves the template and every example to the new
+   version, and regenerates their lockfiles. `--version <version>` pins another version.
+4. Commit and push the pins. The Quality Gate step "Check the workflow SDK pins against npm" passes.
+5. Get a review, then merge.
 
-Before the change merges, raise the base version in `package.json` and `SDK_VERSION` in `src/Manifest.ts`
-to the same `x.y.z`; `scripts/check-sdk-consistency.ts` fails if they differ. CI refuses to release a
-base that is already stable on npm.
+CI fails when npm already has the version from other SDK source: raise the version. A rerun with
+the same SDK source publishes nothing. To retry a failed publish, choose "Re-run failed jobs".
 
-| Change                                      | Base version             |
+| Change                                      | Version                  |
 | ------------------------------------------- | ------------------------ |
-| Bug fix                                     | patch: `0.2.0` → `0.2.1` |
+| Bug fix or any other SDK change             | patch: `0.2.0` → `0.2.1` |
 | New feature or breaking change (before 1.0) | minor: `0.2.1` → `0.3.0` |
 
 Raise `RUNTIME_API_VERSION` only when the SDK needs a changed platform runtime protocol.
 
-Merging to `stg` publishes a release candidate and opens a pin pull request for the template and
-examples. Promoting to `prod` publishes the stable version after an approval in the `sdk-stable`
-environment.
+Nothing more happens for prod. The template pin travels with the `stg` → `prod` release pull
+request, and customers get the version that the template pins on `prod`.

package/dist/AxiosError.d.ts

@@ -0,0 +1,46 @@
+import { Context } from 'effect';
+import type { HttpClientError } from 'effect/unstable/http';
+/**
+ * The error axios 1.13 and later raised for a failed request, logged as legacy pino's `err`
+ * serializer wrote it: `type`, `message`, and `stack`, then `name`, `isAxiosError`, `code`, and
+ * `status`. Legacy also wrote axios's `request` and `response`, which carried credentials in plain
+ * text; those are left out.
+ */
+export declare class AxiosError extends Error {
+    readonly isAxiosError: true;
+    readonly code?: string;
+    readonly status?: number;
+    constructor(message: string, fields: {
+        readonly name: string;
+        readonly code?: string | undefined;
+        readonly status?: number | undefined;
+        readonly cause?: Error | undefined;
+    });
+}
+/** Which legacy axios the SDK's failed-call lines follow: `'class'` for 1.13 and later, `'toJSON'` before. */
+export type AxiosErrorFormat = 'class' | 'toJSON';
+/**
+ * Which axios the SDK `HttpClient` follows on `Outgoing HTTP request failed.`: `'class'` logs
+ * `toAxiosError` and the response that axios 1.16 kept on its error, and `'toJSON'` logs
+ * `toAxiosErrorJson` as axios before 1.13 did. A workflow whose legacy pinned axios before 1.13
+ * provides `'toJSON'` to its handler layer.
+ */
+export declare const LegacyAxiosErrorFormat: Context.Reference<AxiosErrorFormat>;
+/**
+ * axios's message for a response body that ended before it was complete. The SDK `HttpClient` fails
+ * such a read with a `DecodeError` that carries it as the description.
+ */
+export declare const STREAM_ABORTED = "stream has been aborted";
+/**
+ * The error axios 1.13 and later raised where the SDK `HttpClient` failed: `settle`'s for a rejected
+ * status, the aborted-stream error for a body that ended early (with the status axios 1.16 kept on it),
+ * else `AxiosError.from` over the innermost error behind the failure, which keeps its name, message,
+ * and code, chains it as the cause, and carries the status of a response it came after.
+ */
+export declare const toAxiosError: (error: HttpClientError.HttpClientError) => AxiosError;
+/**
+ * The error axios before 1.13 raised where the SDK `HttpClient` failed. It logs as legacy logged it,
+ * as its `toJSON()`: `{ message, name, stack, code, status }` in that order, without undefined keys.
+ */
+export declare const toAxiosErrorJson: (error: HttpClientError.HttpClientError) => AxiosError;
+//# sourceMappingURL=AxiosError.d.ts.map

package/dist/AxiosError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AxiosError.d.ts","sourceRoot":"","sources":["../src/AxiosError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAa,MAAM,QAAQ,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D;;;;;GAKG;AACH,qBAAa,UAAW,SAAQ,KAAK;IAEnC,SAAiB,YAAY,EAAE,IAAI,CAAC;IACpC,SAAiB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAiB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEjC,YACE,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;QACN,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;KACpC,EAQF;CACF;AAgBD,8GAA8G;AAC9G,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,qCAEjC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,cAAc,4BAA4B,CAAC;AA2BxD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,UAAW,eAAe,CAAC,eAAe,KAAG,UAiBrE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,UAAW,eAAe,CAAC,eAAe,KAAG,UAuBzE,CAAC"}

package/dist/AxiosError.js

@@ -0,0 +1,118 @@
+import { Context, Predicate } from 'effect';
+/**
+ * The error axios 1.13 and later raised for a failed request, logged as legacy pino's `err`
+ * serializer wrote it: `type`, `message`, and `stack`, then `name`, `isAxiosError`, `code`, and
+ * `status`. Legacy also wrote axios's `request` and `response`, which carried credentials in plain
+ * text; those are left out.
+ */
+export class AxiosError extends Error {
+    constructor(message, fields) {
+        super(message, fields.cause === undefined ? undefined : { cause: fields.cause });
+        // Assigned in axios's order, which is the order they log in.
+        this.name = fields.name;
+        this.isAxiosError = true;
+        if (fields.code !== undefined)
+            this.code = fields.code;
+        if (fields.status !== undefined)
+            this.status = fields.status;
+    }
+}
+/**
+ * An error axios before 1.13 raised. `utils.inherits` left its `toJSON` enumerable, so legacy pino's
+ * `err` serializer copied it like any field, and `JSON.stringify` wrote what it returned for the
+ * serialized error: `message` and `stack` with their causes, `name`, `code`, and `status`, and no
+ * `type`, `isAxiosError`, `request`, or `response`.
+ */
+class AxiosErrorBefore113 extends AxiosError {
+    // axios's `toJSON` also returned keys that were never set on these errors or that pino redacted.
+    toJSON() {
+        return { message: this.message, name: this.name, stack: this.stack, code: this.code, status: this.status };
+    }
+}
+Object.defineProperty(AxiosErrorBefore113.prototype, 'toJSON', { enumerable: true });
+/**
+ * Which axios the SDK `HttpClient` follows on `Outgoing HTTP request failed.`: `'class'` logs
+ * `toAxiosError` and the response that axios 1.16 kept on its error, and `'toJSON'` logs
+ * `toAxiosErrorJson` as axios before 1.13 did. A workflow whose legacy pinned axios before 1.13
+ * provides `'toJSON'` to its handler layer.
+ */
+export const LegacyAxiosErrorFormat = Context.Reference('@temper/workflow/LegacyAxiosErrorFormat', {
+    defaultValue: () => 'class',
+});
+/**
+ * axios's message for a response body that ended before it was complete. The SDK `HttpClient` fails
+ * such a read with a `DecodeError` that carries it as the description.
+ */
+export const STREAM_ABORTED = 'stream has been aborted';
+const isAbortedBody = (reason) => reason._tag === 'DecodeError' && reason.description === STREAM_ABORTED;
+/** axios 1.16 `settle`'s error for a rejected status: a 4xx is a bad request, any other a bad response. */
+const statusError = (status) => new AxiosError(`Request failed with status code ${status}`, {
+    name: 'AxiosError',
+    code: status >= 400 && status < 500 ? 'ERR_BAD_REQUEST' : 'ERR_BAD_RESPONSE',
+    status,
+});
+/** The error at the bottom of a cause chain, such as the socket error behind a failed `fetch`. */
+const innermost = (error) => {
+    const seen = new Set([error]);
+    let current = error;
+    while (current.cause instanceof Error && !seen.has(current.cause)) {
+        current = current.cause;
+        seen.add(current);
+    }
+    return current;
+};
+const codeOf = (error) => Predicate.hasProperty(error, 'code') && Predicate.isString(error.code) ? error.code : undefined;
+/**
+ * The error axios 1.13 and later raised where the SDK `HttpClient` failed: `settle`'s for a rejected
+ * status, the aborted-stream error for a body that ended early (with the status axios 1.16 kept on it),
+ * else `AxiosError.from` over the innermost error behind the failure, which keeps its name, message,
+ * and code, chains it as the cause, and carries the status of a response it came after.
+ */
+export const toAxiosError = (error) => {
+    const { reason } = error;
+    if (reason._tag === 'StatusCodeError')
+        return statusError(reason.response.status);
+    if (isAbortedBody(reason)) {
+        return new AxiosError(STREAM_ABORTED, {
+            name: 'AxiosError',
+            code: 'ERR_BAD_RESPONSE',
+            status: reason.response.status,
+        });
+    }
+    const source = innermost(error);
+    return new AxiosError(source.message, {
+        name: source.name,
+        code: codeOf(source),
+        status: error.response?.status,
+        cause: source,
+    });
+};
+/**
+ * The error axios before 1.13 raised where the SDK `HttpClient` failed. It logs as legacy logged it,
+ * as its `toJSON()`: `{ message, name, stack, code, status }` in that order, without undefined keys.
+ */
+export const toAxiosErrorJson = (error) => {
+    const { reason } = error;
+    // Before 1.13, the aborted-stream error kept no response, so it has no status.
+    if (isAbortedBody(reason))
+        return new AxiosErrorBefore113(STREAM_ABORTED, { name: 'AxiosError', code: 'ERR_BAD_RESPONSE' });
+    if (reason._tag !== 'StatusCodeError') {
+        // `AxiosError.from` named an error without a name or a message `'Error'`.
+        const source = innermost(error);
+        return new AxiosErrorBefore113(source.message || 'Error', {
+            name: source.name || 'Error',
+            code: codeOf(source),
+            status: error.response?.status,
+            cause: source,
+        });
+    }
+    const { status } = reason.response;
+    // `settle` read the code at `Math.floor(status / 100) - 4`, so only a 4xx or a 5xx had one.
+    const hundreds = Math.floor(status / 100);
+    return new AxiosErrorBefore113(`Request failed with status code ${status}`, {
+        name: 'AxiosError',
+        code: hundreds === 4 ? 'ERR_BAD_REQUEST' : hundreds === 5 ? 'ERR_BAD_RESPONSE' : undefined,
+        status,
+    });
+};
+//# sourceMappingURL=AxiosError.js.map

package/dist/AxiosError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AxiosError.js","sourceRoot":"","sources":["../src/AxiosError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAI5C;;;;;GAKG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAMnC,YACE,OAAe,EACf,MAKC;QAED,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,6DAA6D;QAC7D,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,mBAAoB,SAAQ,UAAU;IAC1C,iGAAiG;IACjG,MAAM;QACJ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7G,CAAC;CACF;AACD,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAKrF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,SAAS,CAAmB,yCAAyC,EAAE;IACnH,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO;CAC5B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAExD,MAAM,aAAa,GAAG,CAAC,MAA6C,EAAyC,EAAE,CAC7G,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,WAAW,KAAK,cAAc,CAAC;AAEzE,2GAA2G;AAC3G,MAAM,WAAW,GAAG,CAAC,MAAc,EAAc,EAAE,CACjD,IAAI,UAAU,CAAC,mCAAmC,MAAM,EAAE,EAAE;IAC1D,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB;IAC5E,MAAM;CACP,CAAC,CAAC;AAEL,kGAAkG;AAClG,MAAM,SAAS,GAAG,CAAC,KAAY,EAAS,EAAE;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAY,EAAsB,EAAE,CAClD,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAElG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAsC,EAAc,EAAE;IACjF,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,UAAU,CAAC,cAAc,EAAE;YACpC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QAC9B,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAsC,EAAc,EAAE;IACrF,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,+EAA+E;IAC/E,IAAI,aAAa,CAAC,MAAM,CAAC;QACvB,OAAO,IAAI,mBAAmB,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,0EAA0E;QAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE;YACxD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,OAAO;YAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;YAC9B,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnC,4FAA4F;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,mBAAmB,CAAC,mCAAmC,MAAM,EAAE,EAAE;QAC1E,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;QAC1F,MAAM;KACP,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/Contract/Invocation.d.ts

@@ -0,0 +1,21 @@
+/** Who admitted this invocation. Mirrors the platform `RunTriggerKind`; `http` is the guest default. */
+export type InvocationTriggerKind = 'http' | 'schedule' | 'manual' | 'agent' | 'as2' | 'sftp' | 'kafka' | 'child';
+/**
+ * The exact object the Firecracker guest passes as the second `fetch` argument.
+ * Fields are additive only: the platform may append, never rename or remove.
+ */
+export interface InvocationContext {
+    readonly workflowId: string;
+    readonly deploymentId: string;
+    readonly executionId: string;
+    /** Durable Run identity. Empty when a host predates unified Run admission. */
+    readonly runId: string;
+    /** 1-based attempt counter for this Run. */
+    readonly attempt: number;
+    readonly triggerKind: InvocationTriggerKind;
+    /** Absolute epoch milliseconds. The SDK interrupts the request 2 s before it, ahead of the host's own timer. */
+    readonly deadline: number;
+    /** Run-scoped platform token for AS2, EDI, and Resource calls. Empty outside a platform host. */
+    readonly token: string;
+}
+//# sourceMappingURL=Invocation.d.ts.map

package/dist/Contract/Invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Invocation.d.ts","sourceRoot":"","sources":["../../src/Contract/Invocation.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAElH;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,gHAAgH;IAChH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB"}

package/dist/Contract/Invocation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Invocation.js.map

package/dist/Contract/Invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Invocation.js","sourceRoot":"","sources":["../../src/Contract/Invocation.ts"],"names":[],"mappings":""}

package/dist/Contract/Manifest.d.ts

@@ -0,0 +1,125 @@
+import { Schema } from 'effect';
+export declare const TriggerKind: Schema.Literals<readonly ["http", "schedule", "manual", "internal"]>;
+export type TriggerKind = typeof TriggerKind.Type;
+export declare const ResponsePolicy: Schema.Literals<readonly ["wait", "ack"]>;
+export type ResponsePolicy = typeof ResponsePolicy.Type;
+/**
+ * How the platform invokes one route. `kind` is the contract; the other fields are DEFAULTS that
+ * deploy seeds into the stored Trigger and Schedule records when none exist. A stored record edited
+ * through the product or the Temper agent always wins afterwards; deploy reports the drift.
+ */
+export declare const TriggerMetadata: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"http">;
+    /** Default response policy for the stored Trigger: `wait` returns the handler response, `ack` returns 202. */
+    readonly response: Schema.optional<Schema.Literals<readonly ["wait", "ack"]>>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"schedule">;
+    /** Default cadence for the stored Schedule; five-field cron. Without it deploy warns until a Schedule exists. */
+    readonly cron: Schema.optional<Schema.String>;
+    /** IANA timezone for `cron`; the platform default is UTC. */
+    readonly timezone: Schema.optional<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"manual">;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"internal">;
+}>]>;
+export type TriggerMetadata = typeof TriggerMetadata.Type;
+/** A draft 2020-12 JSON Schema of a value's encoded form: the JSON the resolver must answer. */
+export declare const JsonSchemaObject: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+/**
+ * One thing an endpoint reads from Temper configuration. Deploy fails unless each one is bound in the
+ * workflow's reach: a `resource` by key (and by type when it names one), a `variable` by key, and a
+ * `resourceType` that exists, because the handler selects its record at run time.
+ */
+export declare const ManifestResource: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"resource">;
+    readonly key: Schema.String;
+    readonly type: Schema.optionalKey<Schema.String>;
+    readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"variable">;
+    readonly key: Schema.String;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"resourceType">;
+    readonly type: Schema.String;
+    readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+}>]>;
+export type ManifestResource = typeof ManifestResource.Type;
+export declare const WorkflowManifestEndpoint: Schema.Struct<{
+    readonly group: Schema.String;
+    readonly name: Schema.String;
+    readonly method: Schema.String;
+    readonly path: Schema.String;
+    readonly trigger: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"http">;
+        /** Default response policy for the stored Trigger: `wait` returns the handler response, `ack` returns 202. */
+        readonly response: Schema.optional<Schema.Literals<readonly ["wait", "ack"]>>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"schedule">;
+        /** Default cadence for the stored Schedule; five-field cron. Without it deploy warns until a Schedule exists. */
+        readonly cron: Schema.optional<Schema.String>;
+        /** IANA timezone for `cron`; the platform default is UTC. */
+        readonly timezone: Schema.optional<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"manual">;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"internal">;
+    }>]>;
+    readonly resources: Schema.withDecodingDefaultKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"resource">;
+        readonly key: Schema.String;
+        readonly type: Schema.optionalKey<Schema.String>;
+        readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"variable">;
+        readonly key: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"resourceType">;
+        readonly type: Schema.String;
+        readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    }>]>>, never>;
+}>;
+export type WorkflowManifestEndpoint = typeof WorkflowManifestEndpoint.Type;
+/** What `makeManifest` writes next to the bundle and deploy reads to seed Triggers and check bindings. */
+export declare const WorkflowManifest: Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly sdkVersion: Schema.String;
+    readonly runtimeApiVersion: Schema.Number;
+    readonly apiId: Schema.String;
+    readonly endpoints: Schema.$Array<Schema.Struct<{
+        readonly group: Schema.String;
+        readonly name: Schema.String;
+        readonly method: Schema.String;
+        readonly path: Schema.String;
+        readonly trigger: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"http">;
+            /** Default response policy for the stored Trigger: `wait` returns the handler response, `ack` returns 202. */
+            readonly response: Schema.optional<Schema.Literals<readonly ["wait", "ack"]>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"schedule">;
+            /** Default cadence for the stored Schedule; five-field cron. Without it deploy warns until a Schedule exists. */
+            readonly cron: Schema.optional<Schema.String>;
+            /** IANA timezone for `cron`; the platform default is UTC. */
+            readonly timezone: Schema.optional<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"manual">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"internal">;
+        }>]>;
+        readonly resources: Schema.withDecodingDefaultKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"resource">;
+            readonly key: Schema.String;
+            readonly type: Schema.optionalKey<Schema.String>;
+            readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"variable">;
+            readonly key: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"resourceType">;
+            readonly type: Schema.String;
+            readonly schema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        }>]>>, never>;
+    }>>;
+}>;
+export type WorkflowManifest = typeof WorkflowManifest.Type;
+//# sourceMappingURL=Manifest.d.ts.map

package/dist/Contract/Manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Manifest.d.ts","sourceRoot":"","sources":["../../src/Contract/Manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,eAAO,MAAM,WAAW,sEAA8D,CAAC;AACvF,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAC;AAElD,eAAO,MAAM,cAAc,2CAAmC,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;IAGxB,8GAA8G;;;;IAK9G,iHAAiH;;IAEjH,6DAA6D;;;;;;IAK/D,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,qFAA4C,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;IAS3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;AAE5D,eAAO,MAAM,wBAAwB;;;;;;;QAnCjC,8GAA8G;;;;QAK9G,iHAAiH;;QAEjH,6DAA6D;;;;;;;;;;;;;;;;;;;;EAoC/D,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAC;AAE5E,0GAA0G;AAC1G,eAAO,MAAM,gBAAgB;;;;;;;;;;;;YA/CzB,8GAA8G;;;;YAK9G,iHAAiH;;YAEjH,6DAA6D;;;;;;;;;;;;;;;;;;;;;EA8C/D,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC"}

package/dist/Contract/Manifest.js

@@ -0,0 +1,59 @@
+import { Effect, Schema } from 'effect';
+export const TriggerKind = Schema.Literals(['http', 'schedule', 'manual', 'internal']);
+export const ResponsePolicy = Schema.Literals(['wait', 'ack']);
+/**
+ * How the platform invokes one route. `kind` is the contract; the other fields are DEFAULTS that
+ * deploy seeds into the stored Trigger and Schedule records when none exist. A stored record edited
+ * through the product or the Temper agent always wins afterwards; deploy reports the drift.
+ */
+export const TriggerMetadata = Schema.Union([
+    Schema.Struct({
+        kind: Schema.Literal('http'),
+        /** Default response policy for the stored Trigger: `wait` returns the handler response, `ack` returns 202. */
+        response: Schema.optional(ResponsePolicy),
+    }),
+    Schema.Struct({
+        kind: Schema.Literal('schedule'),
+        /** Default cadence for the stored Schedule; five-field cron. Without it deploy warns until a Schedule exists. */
+        cron: Schema.optional(Schema.String),
+        /** IANA timezone for `cron`; the platform default is UTC. */
+        timezone: Schema.optional(Schema.String),
+    }),
+    Schema.Struct({ kind: Schema.Literal('manual') }),
+    Schema.Struct({ kind: Schema.Literal('internal') }),
+]);
+/** A draft 2020-12 JSON Schema of a value's encoded form: the JSON the resolver must answer. */
+export const JsonSchemaObject = Schema.Record(Schema.String, Schema.Json);
+/**
+ * One thing an endpoint reads from Temper configuration. Deploy fails unless each one is bound in the
+ * workflow's reach: a `resource` by key (and by type when it names one), a `variable` by key, and a
+ * `resourceType` that exists, because the handler selects its record at run time.
+ */
+export const ManifestResource = Schema.Union([
+    Schema.Struct({
+        kind: Schema.Literal('resource'),
+        key: Schema.String,
+        type: Schema.optionalKey(Schema.String),
+        schema: JsonSchemaObject,
+    }),
+    Schema.Struct({ kind: Schema.Literal('variable'), key: Schema.String }),
+    Schema.Struct({ kind: Schema.Literal('resourceType'), type: Schema.String, schema: JsonSchemaObject }),
+]);
+export const WorkflowManifestEndpoint = Schema.Struct({
+    group: Schema.String,
+    name: Schema.String,
+    method: Schema.String,
+    path: Schema.String,
+    trigger: TriggerMetadata,
+    // Manifests written before endpoints declared resources carry none.
+    resources: Schema.Array(ManifestResource).pipe(Schema.withDecodingDefaultKey(Effect.succeed([]))),
+});
+/** What `makeManifest` writes next to the bundle and deploy reads to seed Triggers and check bindings. */
+export const WorkflowManifest = Schema.Struct({
+    version: Schema.Literal(1),
+    sdkVersion: Schema.String,
+    runtimeApiVersion: Schema.Number,
+    apiId: Schema.String,
+    endpoints: Schema.Array(WorkflowManifestEndpoint),
+});
+//# sourceMappingURL=Manifest.js.map

package/dist/Contract/Manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Manifest.js","sourceRoot":"","sources":["../../src/Contract/Manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAGvF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAG/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC;IAC1C,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5B,8GAA8G;QAC9G,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;KAC1C,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAChC,iHAAiH;QACjH,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,6DAA6D;QAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;KACzC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAGH,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAChC,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACvE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CACvG,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,OAAO,EAAE,eAAe;IACxB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;CAClG,CAAC,CAAC;AAGH,0GAA0G;AAC1G,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,iBAAiB,EAAE,MAAM,CAAC,MAAM;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAClD,CAAC,CAAC"}