@ontemper/sdk 0.1.0-rc.1 → 0.2.0

package/dist/Contract/RuntimeApi.d.ts

@@ -0,0 +1,143 @@
+/**
+ * Runtime resolution surface for workflow runtimes and sandboxes. The caller presents a deployment-scoped
+ * runtime-resolver JWT (never a user session) and resolves variables, resources, and selectors by key.
+ * The Temper API serves it; the SDK derives its client from it.
+ */
+import { Schema } from 'effect';
+import { HttpApi, HttpApiEndpoint, HttpApiGroup } from 'effect/unstable/httpapi';
+export declare const SelectResourceRuntimeInputSchema: Schema.Struct<{
+    readonly resourceTypeKey: Schema.String;
+    readonly match: Schema.$Record<Schema.String, Schema.String>;
+}>;
+export declare const SelectResourceRuntimeOutputSchema: Schema.Struct<{
+    readonly key: Schema.String;
+}>;
+declare const RuntimeResourcesUnauthorizedError_base: Schema.Class<RuntimeResourcesUnauthorizedError, Schema.TaggedStruct<"RuntimeResourcesUnauthorizedError", {
+    readonly error: Schema.Literal<"Unauthorized">;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesUnauthorizedError extends RuntimeResourcesUnauthorizedError_base {
+}
+declare const RuntimeResourcesForbiddenError_base: Schema.Class<RuntimeResourcesForbiddenError, Schema.TaggedStruct<"RuntimeResourcesForbiddenError", {
+    readonly error: Schema.Literal<"Forbidden">;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesForbiddenError extends RuntimeResourcesForbiddenError_base {
+}
+declare const RuntimeResourcesNotFoundError_base: Schema.Class<RuntimeResourcesNotFoundError, Schema.TaggedStruct<"RuntimeResourcesNotFoundError", {
+    readonly error: Schema.Literal<"Not found">;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesNotFoundError extends RuntimeResourcesNotFoundError_base {
+}
+declare const RuntimeResourcesBadRequestError_base: Schema.Class<RuntimeResourcesBadRequestError, Schema.TaggedStruct<"RuntimeResourcesBadRequestError", {
+    readonly error: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesBadRequestError extends RuntimeResourcesBadRequestError_base {
+}
+declare const RuntimeResourcesConflictError_base: Schema.Class<RuntimeResourcesConflictError, Schema.TaggedStruct<"RuntimeResourcesConflictError", {
+    readonly error: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesConflictError extends RuntimeResourcesConflictError_base {
+}
+declare const RuntimeResourcesUnavailableError_base: Schema.Class<RuntimeResourcesUnavailableError, Schema.TaggedStruct<"RuntimeResourcesUnavailableError", {
+    readonly error: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class RuntimeResourcesUnavailableError extends RuntimeResourcesUnavailableError_base {
+}
+export declare const ResourcesRuntimeApi: HttpApi.HttpApi<"resources-runtime-api", HttpApiGroup.HttpApiGroup<"resourcesRuntime", HttpApiEndpoint.HttpApiEndpoint<"inspectResource", "POST", "/api/v1/runtime/resources/inspect", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly key: Schema.String;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+    readonly authorization: Schema.optionalKey<Schema.String>;
+}>>, Schema.toCodecJson<Schema.Struct<{
+    readonly redactionMasks: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly value: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly organizationId: Schema.String;
+        readonly resourceTypeId: Schema.String;
+        readonly resourceTypeKey: Schema.String;
+        readonly resourceTypeName: Schema.String;
+        readonly projectId: Schema.NullOr<Schema.String>;
+        readonly workflowId: Schema.NullOr<Schema.String>;
+        readonly environment: Schema.NullOr<Schema.Literals<readonly ["sandbox", "production", "staging"]>>;
+        readonly key: Schema.String;
+        readonly label: Schema.NullOr<Schema.String>;
+        readonly value: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly refs: Schema.$Record<Schema.String, Schema.Struct<{
+            readonly key: Schema.String;
+        }>>;
+        readonly description: Schema.NullOr<Schema.String>;
+        readonly metadata: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    }>;
+}>>, Schema.toCodecJson<Schema.decodeTo<typeof RuntimeResourcesUnauthorizedError, Schema.Struct<{
+    readonly error: Schema.Literal<"Unauthorized">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesForbiddenError, Schema.Struct<{
+    readonly error: Schema.Literal<"Forbidden">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesNotFoundError, Schema.Struct<{
+    readonly error: Schema.Literal<"Not found">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesBadRequestError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesConflictError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesUnavailableError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never>>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"resolveResource", "POST", "/api/v1/runtime/resources/resolve", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly key: Schema.String;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+    readonly authorization: Schema.optionalKey<Schema.String>;
+}>>, Schema.toCodecJson<Schema.Struct<{
+    readonly redactionMasks: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly value: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+}>>, Schema.toCodecJson<Schema.decodeTo<typeof RuntimeResourcesUnauthorizedError, Schema.Struct<{
+    readonly error: Schema.Literal<"Unauthorized">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesForbiddenError, Schema.Struct<{
+    readonly error: Schema.Literal<"Forbidden">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesNotFoundError, Schema.Struct<{
+    readonly error: Schema.Literal<"Not found">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesBadRequestError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesConflictError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesUnavailableError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never>>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"resolveVariable", "POST", "/api/v1/runtime/variables/resolve", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly key: Schema.String;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+    readonly authorization: Schema.optionalKey<Schema.String>;
+}>>, Schema.toCodecJson<Schema.Struct<{
+    readonly redactionMasks: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly value: Schema.String;
+}>>, Schema.toCodecJson<Schema.decodeTo<typeof RuntimeResourcesUnauthorizedError, Schema.Struct<{
+    readonly error: Schema.Literal<"Unauthorized">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesForbiddenError, Schema.Struct<{
+    readonly error: Schema.Literal<"Forbidden">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesNotFoundError, Schema.Struct<{
+    readonly error: Schema.Literal<"Not found">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesBadRequestError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesConflictError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesUnavailableError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never>>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"selectResource", "POST", "/api/v1/runtime/resources/select", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly resourceTypeKey: Schema.String;
+    readonly match: Schema.$Record<Schema.String, Schema.String>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+    readonly authorization: Schema.optionalKey<Schema.String>;
+}>>, Schema.toCodecJson<Schema.Struct<{
+    readonly redactionMasks: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly value: Schema.Struct<{
+        readonly key: Schema.String;
+    }>;
+}>>, Schema.toCodecJson<Schema.decodeTo<typeof RuntimeResourcesUnauthorizedError, Schema.Struct<{
+    readonly error: Schema.Literal<"Unauthorized">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesForbiddenError, Schema.Struct<{
+    readonly error: Schema.Literal<"Forbidden">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesNotFoundError, Schema.Struct<{
+    readonly error: Schema.Literal<"Not found">;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesBadRequestError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesConflictError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never> | Schema.decodeTo<typeof RuntimeResourcesUnavailableError, Schema.Struct<{
+    readonly error: Schema.String;
+}>, never, never>>, never, never>, false>>;
+export {};
+//# sourceMappingURL=RuntimeApi.d.ts.map

package/dist/Contract/RuntimeApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeApi.d.ts","sourceRoot":"","sources":["../../src/Contract/RuntimeApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAgB,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAA0B,MAAM,yBAAyB,CAAC;AAUzG,eAAO,MAAM,gCAAgC;;;EAK3C,CAAC;AAoDH,eAAO,MAAM,iCAAiC;;EAE5C,CAAC;;;;AAaH,qBAAa,iCAAkC,SAAQ,sCAGtD;CAAG;;;;AAEJ,qBAAa,8BAA+B,SAAQ,mCAGnD;CAAG;;;;AAEJ,qBAAa,6BAA8B,SAAQ,kCAGlD;CAAG;;;;AAEJ,qBAAa,+BAAgC,SAAQ,oCAGpD;CAAG;;;;AAEJ,qBAAa,6BAA8B,SAAQ,kCAGlD;CAAG;;;;AACJ,qBAAa,gCAAiC,SAAQ,qCAGrD;CAAG;AAmGJ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CAA0E,CAAC"}

package/dist/Contract/RuntimeApi.js

@@ -0,0 +1,148 @@
+/**
+ * Runtime resolution surface for workflow runtimes and sandboxes. The caller presents a deployment-scoped
+ * runtime-resolver JWT (never a user session) and resolves variables, resources, and selectors by key.
+ * The Temper API serves it; the SDK derives its client from it.
+ */
+import { Schema, SchemaGetter } from 'effect';
+import { HttpApi, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, OpenApi } from 'effect/unstable/httpapi';
+const AuthorizationHeadersSchema = Schema.Struct({
+    authorization: Schema.optionalKey(Schema.String),
+});
+const ResolveKeyInputSchema = Schema.Struct({
+    key: Schema.String.annotate({ description: 'Variable or resource key.' }),
+});
+export const SelectResourceRuntimeInputSchema = Schema.Struct({
+    resourceTypeKey: Schema.String,
+    match: Schema.Record(Schema.String, Schema.String).annotate({
+        description: 'Exactly one selectable field to match on (enforced by the service).',
+    }),
+});
+/** Masks ride along so the caller can redact log output that embeds secret material. */
+const redactionMasksField = {
+    redactionMasks: Schema.optionalKey(Schema.Array(Schema.String)),
+};
+const VariableValueOutputSchema = Schema.Struct({
+    value: Schema.String,
+    ...redactionMasksField,
+});
+const ResolvedResourceOutputSchema = Schema.Struct({
+    value: Schema.Json,
+    ...redactionMasksField,
+});
+const JsonObjectSchema = Schema.Record(Schema.String, Schema.Json).annotate({ description: 'JSON object.' });
+/** A record without its secret fields: a field that points at a Variable sits in `refs`, and only a resolve fills it. */
+const RuntimeInspectedResourceSchema = Schema.Struct({
+    id: Schema.String.annotate({ description: 'The immutable resource UUID.' }),
+    organizationId: Schema.String,
+    resourceTypeId: Schema.String.annotate({ description: 'The immutable resource-type UUID.' }),
+    resourceTypeKey: Schema.String.check(Schema.isMinLength(1)).annotate({
+        description: 'Editable resource-type key used for display, filtering, and runtime selection.',
+    }),
+    resourceTypeName: Schema.String,
+    projectId: Schema.NullOr(Schema.String),
+    workflowId: Schema.NullOr(Schema.String),
+    environment: Schema.NullOr(Schema.Literals(['sandbox', 'production', 'staging'])),
+    key: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_.-]{1,128}$/, {
+        message: 'Key may contain letters, digits, `_`, `.`, and `-` (1-128 characters)',
+    })).annotate({
+        description: 'The name workflow code uses to read this record. Unique within its scope and environment.',
+    }),
+    label: Schema.NullOr(Schema.String),
+    value: JsonObjectSchema.annotate({
+        description: 'Literal fields. A field that points at a Variable is absent here.',
+    }),
+    refs: Schema.Record(Schema.String, Schema.Struct({ key: Schema.String })),
+    description: Schema.NullOr(Schema.String),
+    metadata: JsonObjectSchema,
+});
+const InspectedResourceOutputSchema = Schema.Struct({
+    value: RuntimeInspectedResourceSchema,
+    ...redactionMasksField,
+});
+export const SelectResourceRuntimeOutputSchema = Schema.Struct({
+    key: Schema.String,
+});
+const SelectResourceRuntimeResponseSchema = Schema.Struct({
+    value: SelectResourceRuntimeOutputSchema,
+    ...redactionMasksField,
+});
+const UnauthorizedBodySchema = Schema.Struct({ error: Schema.Literal('Unauthorized') });
+const ForbiddenBodySchema = Schema.Struct({ error: Schema.Literal('Forbidden') });
+const NotFoundBodySchema = Schema.Struct({ error: Schema.Literal('Not found') });
+const ErrorBodySchema = Schema.Struct({ error: Schema.String });
+export class RuntimeResourcesUnauthorizedError extends Schema.TaggedError()('RuntimeResourcesUnauthorizedError', { error: Schema.Literal('Unauthorized') }) {
+}
+export class RuntimeResourcesForbiddenError extends Schema.TaggedError()('RuntimeResourcesForbiddenError', { error: Schema.Literal('Forbidden') }) {
+}
+export class RuntimeResourcesNotFoundError extends Schema.TaggedError()('RuntimeResourcesNotFoundError', { error: Schema.Literal('Not found') }) {
+}
+export class RuntimeResourcesBadRequestError extends Schema.TaggedError()('RuntimeResourcesBadRequestError', { error: Schema.String }) {
+}
+export class RuntimeResourcesConflictError extends Schema.TaggedError()('RuntimeResourcesConflictError', { error: Schema.String }) {
+}
+export class RuntimeResourcesUnavailableError extends Schema.TaggedError()('RuntimeResourcesUnavailableError', { error: Schema.String }) {
+}
+const unauthorizedError = UnauthorizedBodySchema.pipe(Schema.decodeTo(RuntimeResourcesUnauthorizedError, {
+    decode: SchemaGetter.transform(() => new RuntimeResourcesUnauthorizedError({ error: 'Unauthorized' })),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(401));
+const forbiddenError = ForbiddenBodySchema.pipe(Schema.decodeTo(RuntimeResourcesForbiddenError, {
+    decode: SchemaGetter.transform(() => new RuntimeResourcesForbiddenError({ error: 'Forbidden' })),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(403));
+const notFoundError = NotFoundBodySchema.pipe(Schema.decodeTo(RuntimeResourcesNotFoundError, {
+    decode: SchemaGetter.transform(() => new RuntimeResourcesNotFoundError({ error: 'Not found' })),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(404));
+const badRequestError = ErrorBodySchema.pipe(Schema.decodeTo(RuntimeResourcesBadRequestError, {
+    decode: SchemaGetter.transform((body) => new RuntimeResourcesBadRequestError(body)),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(400));
+const conflictError = ErrorBodySchema.pipe(Schema.decodeTo(RuntimeResourcesConflictError, {
+    decode: SchemaGetter.transform((body) => new RuntimeResourcesConflictError(body)),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(409));
+const unavailableError = ErrorBodySchema.pipe(Schema.decodeTo(RuntimeResourcesUnavailableError, {
+    decode: SchemaGetter.transform((body) => new RuntimeResourcesUnavailableError(body)),
+    encode: SchemaGetter.transform((error) => ({ error: error.error })),
+}), HttpApiSchema.status(503));
+const runtimeErrors = [
+    unauthorizedError,
+    forbiddenError,
+    notFoundError,
+    badRequestError,
+    conflictError,
+    unavailableError,
+];
+const ResourcesRuntimeHttpApiGroup = HttpApiGroup.make('resourcesRuntime')
+    .add(HttpApiEndpoint.post('resolveVariable', '/variables/resolve', {
+    headers: AuthorizationHeadersSchema,
+    payload: ResolveKeyInputSchema,
+    success: VariableValueOutputSchema,
+    error: runtimeErrors,
+}))
+    .add(HttpApiEndpoint.post('inspectResource', '/resources/inspect', {
+    headers: AuthorizationHeadersSchema,
+    payload: ResolveKeyInputSchema,
+    success: InspectedResourceOutputSchema,
+    error: runtimeErrors,
+}))
+    .add(HttpApiEndpoint.post('resolveResource', '/resources/resolve', {
+    headers: AuthorizationHeadersSchema,
+    payload: ResolveKeyInputSchema,
+    success: ResolvedResourceOutputSchema,
+    error: runtimeErrors,
+}))
+    .add(HttpApiEndpoint.post('selectResource', '/resources/select', {
+    headers: AuthorizationHeadersSchema,
+    payload: SelectResourceRuntimeInputSchema,
+    success: SelectResourceRuntimeResponseSchema,
+    error: runtimeErrors,
+}))
+    .prefix('/api/v1/runtime')
+    .annotateMerge(OpenApi.annotations({
+    title: 'Resources runtime',
+    description: 'Runtime-token-authenticated variable and resource resolution for workflow runtimes.',
+}));
+export const ResourcesRuntimeApi = HttpApi.make('resources-runtime-api').add(ResourcesRuntimeHttpApiGroup);
+//# sourceMappingURL=RuntimeApi.js.map

package/dist/Contract/RuntimeApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeApi.js","sourceRoot":"","sources":["../../src/Contract/RuntimeApi.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEzG,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,eAAe,EAAE,MAAM,CAAC,MAAM;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1D,WAAW,EAAE,qEAAqE;KACnF,CAAC;CACH,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,mBAAmB,GAAG;IAC1B,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAChE,CAAC;AAEF,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,GAAG,mBAAmB;CACvB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC,IAAI;IAClB,GAAG,mBAAmB;CACvB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;AAE7G,yHAAyH;AACzH,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IAC3E,cAAc,EAAE,MAAM,CAAC,MAAM;IAC7B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;IAC5F,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,WAAW,EAAE,gFAAgF;KAC9F,CAAC;IACF,gBAAgB,EAAE,MAAM,CAAC,MAAM;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACjF,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CACtB,MAAM,CAAC,SAAS,CAAC,yBAAyB,EAAE;QAC1C,OAAO,EAAE,uEAAuE;KACjF,CAAC,CACH,CAAC,QAAQ,CAAC;QACT,WAAW,EAAE,2FAA2F;KACzG,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QAC/B,WAAW,EAAE,mEAAmE;KACjF,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,gBAAgB;CAC3B,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,8BAA8B;IACrC,GAAG,mBAAmB;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,GAAG,EAAE,MAAM,CAAC,MAAM;CACnB,CAAC,CAAC;AAEH,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,iCAAiC;IACxC,GAAG,mBAAmB;CACvB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AACxF,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAClF,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACjF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAGhE,MAAM,OAAO,iCAAkC,SAAQ,MAAM,CAAC,WAAW,EAAqC,CAC5G,mCAAmC,EACnC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAC1C;CAAG;AAEJ,MAAM,OAAO,8BAA+B,SAAQ,MAAM,CAAC,WAAW,EAAkC,CACtG,gCAAgC,EAChC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CACvC;CAAG;AAEJ,MAAM,OAAO,6BAA8B,SAAQ,MAAM,CAAC,WAAW,EAAiC,CACpG,+BAA+B,EAC/B,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CACvC;CAAG;AAEJ,MAAM,OAAO,+BAAgC,SAAQ,MAAM,CAAC,WAAW,EAAmC,CACxG,iCAAiC,EACjC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,OAAO,6BAA8B,SAAQ,MAAM,CAAC,WAAW,EAAiC,CACpG,+BAA+B,EAC/B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AACJ,MAAM,OAAO,gCAAiC,SAAQ,MAAM,CAAC,WAAW,EAAoC,CAC1G,kCAAkC,EAClC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CACzB;CAAG;AAEJ,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE;IACjD,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,iCAAiC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACtG,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AAEF,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE;IAC9C,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,8BAA8B,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChG,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AAEF,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE;IAC7C,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,6BAA6B,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/F,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AAEF,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE;IAC/C,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC9F,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AAEF,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CACxC,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE;IAC7C,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAC5F,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AACF,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,gCAAgC,EAAE;IAChD,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC;IAC/F,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;CACpE,CAAC,EACF,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAC1B,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,eAAe;IACf,aAAa;IACb,gBAAgB;CACjB,CAAC;AAEF,MAAM,4BAA4B,GAAG,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACvE,GAAG,CACF,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE;IAC5D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,yBAAyB;IAClC,KAAK,EAAE,aAAa;CACrB,CAAC,CACH;KACA,GAAG,CACF,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE;IAC5D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,6BAA6B;IACtC,KAAK,EAAE,aAAa;CACrB,CAAC,CACH;KACA,GAAG,CACF,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE;IAC5D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,4BAA4B;IACrC,KAAK,EAAE,aAAa;CACrB,CAAC,CACH;KACA,GAAG,CACF,eAAe,CAAC,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE;IAC1D,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,gCAAgC;IACzC,OAAO,EAAE,mCAAmC;IAC5C,KAAK,EAAE,aAAa;CACrB,CAAC,CACH;KACA,MAAM,CAAC,iBAAiB,CAAC;KACzB,aAAa,CACZ,OAAO,CAAC,WAAW,CAAC;IAClB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,qFAAqF;CACnG,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC"}

package/dist/Contract/index.d.ts

@@ -0,0 +1,4 @@
+export type { InvocationContext, InvocationTriggerKind } from './Invocation.js';
+export { ManifestResource, ResponsePolicy, TriggerKind, TriggerMetadata, WorkflowManifest, WorkflowManifestEndpoint, } from './Manifest.js';
+export { ResourcesRuntimeApi, RuntimeResourcesBadRequestError, RuntimeResourcesConflictError, RuntimeResourcesForbiddenError, RuntimeResourcesNotFoundError, RuntimeResourcesUnauthorizedError, RuntimeResourcesUnavailableError, SelectResourceRuntimeInputSchema, SelectResourceRuntimeOutputSchema, } from './RuntimeApi.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/Contract/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/Contract/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iBAAiB,CAAC"}

package/dist/Contract/index.js

@@ -0,0 +1,3 @@
+export { ManifestResource, ResponsePolicy, TriggerKind, TriggerMetadata, WorkflowManifest, WorkflowManifestEndpoint, } from './Manifest.js';
+export { ResourcesRuntimeApi, RuntimeResourcesBadRequestError, RuntimeResourcesConflictError, RuntimeResourcesForbiddenError, RuntimeResourcesNotFoundError, RuntimeResourcesUnauthorizedError, RuntimeResourcesUnavailableError, SelectResourceRuntimeInputSchema, SelectResourceRuntimeOutputSchema, } from './RuntimeApi.js';
+//# sourceMappingURL=index.js.map

package/dist/Contract/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/Contract/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,iBAAiB,CAAC"}

package/dist/Correlation.d.ts

@@ -0,0 +1,33 @@
+import { Effect } from 'effect';
+import { Invocation } from './Invocation.js';
+/** The ids legacy code read from `storage.getStore()`; each is `undefined` outside a request or span. */
+export interface Correlation {
+    readonly traceId: string | undefined;
+    readonly messageId: string | undefined;
+    readonly spanId: string | undefined;
+}
+/** The current correlation, e.g. the `x-unnbound-trace-id` and `x-message-id` a child enqueue sends. */
+export declare const currentCorrelation: Effect.Effect<Correlation>;
+/**
+ * Legacy `withTrace(callback, extra)` (sdk/logger/src/trace.ts:9-15): the effect's lines, and the
+ * `x-unnbound-trace-id` of its SDK `HttpClient` calls, carry the given ids, else the enclosing ones,
+ * else fresh UUIDs. The enclosing span chain stays, as the legacy store merged the previous one.
+ */
+export declare const withCorrelation: (ids: Partial<Pick<Correlation, 'traceId' | 'messageId'>>) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+/** Legacy `withTrace(callback, { traceId: getTraceId() })`: each run of the effect gets a new trace id. */
+export declare const withFreshTrace: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+/** The child request a message id is derived from, exactly as it will be sent. */
+export interface ChildRequest {
+    readonly method: string;
+    readonly path: string;
+    readonly body: string;
+}
+/**
+ * The `x-message-id` for one child Run. The gateway keys durable admission on it
+ * (apps/workflow-gateway/src/async_delivery.rs:228-233, 347-351), and legacy enqueue reused the
+ * parent's for every child, collapsing them into one Run (T-2601). The id is SHA-256 in UUID v5 layout
+ * over the parent's stable id (the caller's message id, else the Run id, else the execution id; never
+ * an SDK-minted one) and the child request: a replayed parent resends it, distinct children differ.
+ */
+export declare const childMessageId: (child: ChildRequest) => Effect.Effect<string, never, Invocation>;
+//# sourceMappingURL=Correlation.d.ts.map

package/dist/Correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Correlation.d.ts","sourceRoot":"","sources":["../src/Correlation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,yGAAyG;AACzG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,wGAAwG;AACxG,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAIvD,CAAC;AAEJ;;;;GAIG;AACH,eAAO,MAAM,eAAe,QACpB,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,WAAW,CAAC,CAAC,MACxD,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAW5D,CAAC;AAEP,2GAA2G;AAC3G,eAAO,MAAM,cAAc,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CACb,CAAC;AAElF,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,UAAW,YAAY,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAsBxF,CAAC"}

package/dist/Correlation.js

@@ -0,0 +1,57 @@
+import { createHash } from 'node:crypto';
+import { Effect } from 'effect';
+import { Invocation } from './Invocation.js';
+import { CurrentLogContext } from './LogContext.js';
+/** The current correlation, e.g. the `x-unnbound-trace-id` and `x-message-id` a child enqueue sends. */
+export const currentCorrelation = CurrentLogContext.useSync((context) => ({
+    traceId: context?.traceId,
+    messageId: context?.messageId,
+    spanId: context?.spanId,
+}));
+/**
+ * Legacy `withTrace(callback, extra)` (sdk/logger/src/trace.ts:9-15): the effect's lines, and the
+ * `x-unnbound-trace-id` of its SDK `HttpClient` calls, carry the given ids, else the enclosing ones,
+ * else fresh UUIDs. The enclosing span chain stays, as the legacy store merged the previous one.
+ */
+export const withCorrelation = (ids) => (effect) => Effect.withFiber((fiber) => {
+    const enclosing = fiber.getRef(CurrentLogContext);
+    const messageId = ids.messageId ?? enclosing?.messageId;
+    return Effect.provideService(effect, CurrentLogContext, {
+        ...enclosing,
+        traceId: ids.traceId ?? enclosing?.traceId ?? crypto.randomUUID(),
+        messageId: messageId ?? crypto.randomUUID(),
+        messageIdMinted: ids.messageId === undefined && (messageId === undefined || enclosing?.messageIdMinted === true),
+    });
+});
+/** Legacy `withTrace(callback, { traceId: getTraceId() })`: each run of the effect gets a new trace id. */
+export const withFreshTrace = (effect) => Effect.suspend(() => withCorrelation({ traceId: crypto.randomUUID() })(effect));
+/**
+ * The `x-message-id` for one child Run. The gateway keys durable admission on it
+ * (apps/workflow-gateway/src/async_delivery.rs:228-233, 347-351), and legacy enqueue reused the
+ * parent's for every child, collapsing them into one Run (T-2601). The id is SHA-256 in UUID v5 layout
+ * over the parent's stable id (the caller's message id, else the Run id, else the execution id; never
+ * an SDK-minted one) and the child request: a replayed parent resends it, distinct children differ.
+ */
+export const childMessageId = (child) => Effect.gen(function* () {
+    const invocation = yield* Invocation;
+    const context = yield* CurrentLogContext;
+    const parent = 
+    // An empty caller id is no id: the gateway ignores it (async_delivery.rs:1043), so every Run would share it.
+    context !== undefined &&
+        context.messageIdMinted !== true &&
+        context.messageId !== undefined &&
+        context.messageId !== ''
+        ? context.messageId
+        : invocation.runId !== ''
+            ? invocation.runId
+            : invocation.executionId;
+    const bytes = createHash('sha256')
+        .update(JSON.stringify([parent, child.method, child.path, child.body]))
+        .digest()
+        .subarray(0, 16);
+    bytes[6] = (bytes[6] & 0x0f) | 0x50;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = bytes.toString('hex');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+});
+//# sourceMappingURL=Correlation.js.map

package/dist/Correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Correlation.js","sourceRoot":"","sources":["../src/Correlation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AASpD,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAA+B,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,EAAE,OAAO,EAAE,OAAO;IACzB,SAAS,EAAE,OAAO,EAAE,SAAS;IAC7B,MAAM,EAAE,OAAO,EAAE,MAAM;CACxB,CAAC,CAAC,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,CAAC,GAAwD,EAAE,EAAE,CAC7D,CAAU,MAA8B,EAA0B,EAAE,CAClE,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,SAAS,EAAE,SAAS,CAAC;IACxD,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE;QACtD,GAAG,SAAS;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE;QACjE,SAAS,EAAE,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;QAC3C,eAAe,EACb,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,EAAE,eAAe,KAAK,IAAI,CAAC;KAClG,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEP,2GAA2G;AAC3G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,MAA8B,EAA0B,EAAE,CAChG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AASlF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAmB,EAA4C,EAAE,CAC9F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACzC,MAAM,MAAM;IACV,6GAA6G;IAC7G,OAAO,KAAK,SAAS;QACrB,OAAO,CAAC,eAAe,KAAK,IAAI;QAChC,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,OAAO,CAAC,SAAS,KAAK,EAAE;QACtB,CAAC,CAAC,OAAO,CAAC,SAAS;QACnB,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE;YACvB,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;SACtE,MAAM,EAAE;SACR,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC,CAAC,CAAC"}

package/dist/HttpApiResource.d.ts

@@ -0,0 +1,32 @@
+import { Schema } from 'effect';
+/** The resolved value of the `http_api` system type, with the defaults its schema declares. */
+export declare const HttpApiResource: Schema.Struct<{
+    readonly baseUrl: Schema.String;
+    readonly headers: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.String>, never>;
+    readonly auth: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"basic">;
+        readonly username: Schema.String;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"bearer">;
+        readonly token: Schema.RedactedFromValue<Schema.String>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"api_key">;
+        readonly apiKey: Schema.RedactedFromValue<Schema.String>;
+        readonly placement: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["authorization_bearer", "header", "query"]>, never>;
+        readonly name: Schema.withDecodingDefaultKey<Schema.String, never>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"oauth2_client_credentials">;
+        readonly tokenUrl: Schema.String;
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+        readonly scope: Schema.optionalKey<Schema.String>;
+        readonly audience: Schema.optionalKey<Schema.String>;
+        readonly extraParams: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+    }>]>, never>;
+    readonly tenantKey: Schema.optionalKey<Schema.RedactedFromValue<Schema.String>>;
+}>;
+export type HttpApiResource = typeof HttpApiResource.Type;
+//# sourceMappingURL=HttpApiResource.d.ts.map

package/dist/HttpApiResource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpApiResource.d.ts","sourceRoot":"","sources":["../src/HttpApiResource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AA4BxC,+FAA+F;AAC/F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC"}

package/dist/HttpApiResource.js

@@ -0,0 +1,35 @@
+import { Effect, Schema } from 'effect';
+/** An `x-secret` field: the value arrives `Redacted`, so logging the record never prints it. */
+const Secret = Schema.RedactedFromValue(Schema.String);
+const HttpApiAuth = Schema.Union([
+    Schema.Struct({ type: Schema.Literal('none') }),
+    Schema.Struct({ type: Schema.Literal('basic'), username: Schema.String, password: Secret }),
+    Schema.Struct({ type: Schema.Literal('bearer'), token: Secret }),
+    Schema.Struct({
+        type: Schema.Literal('api_key'),
+        apiKey: Secret,
+        placement: Schema.Literals(['authorization_bearer', 'header', 'query']).pipe(Schema.withDecodingDefaultKey(Effect.succeed('header'))),
+        name: Schema.String.check(Schema.isMinLength(1)).pipe(Schema.withDecodingDefaultKey(Effect.succeed('x-api-key'))),
+    }),
+    Schema.Struct({
+        type: Schema.Literal('oauth2_client_credentials'),
+        tokenUrl: Schema.String.check(Schema.isMinLength(1)),
+        clientId: Schema.String,
+        clientSecret: Secret,
+        scope: Schema.optionalKey(Schema.String),
+        audience: Schema.optionalKey(Schema.String),
+        extraParams: Schema.optionalKey(Schema.Record(Schema.String, Schema.String)),
+    }),
+]);
+/** The resolved value of the `http_api` system type, with the defaults its schema declares. */
+export const HttpApiResource = Schema.Struct({
+    // Requests join paths onto `baseUrl`, so a relative or non-http base would fail every call.
+    baseUrl: Schema.String.check(
+    // Carried into the manifest's JSON Schema, so deploy rejects a non-http base before a run does.
+    Schema.isPattern(/^https?:\/\//i), Schema.makeFilter((url) => (URL.canParse(url) && ['http:', 'https:'].includes(new URL(url).protocol)) ||
+        'Expected an absolute http(s) URL')),
+    headers: Schema.Record(Schema.String, Schema.String).pipe(Schema.withDecodingDefaultKey(Effect.succeed({}))),
+    auth: HttpApiAuth.pipe(Schema.withDecodingDefaultKey(Effect.succeed({ type: 'none' }))),
+    tenantKey: Schema.optionalKey(Secret),
+});
+//# sourceMappingURL=HttpApiResource.js.map

package/dist/HttpApiResource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpApiResource.js","sourceRoot":"","sources":["../src/HttpApiResource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,gGAAgG;AAChG,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/C,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC3F,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAiB,CAAC,CAAC,CACjE;QACD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;KAClH,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,YAAY,EAAE,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;KAC7E,CAAC;CACH,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;IAC1B,gGAAgG;IAChG,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,EACjC,MAAM,CAAC,UAAU,CACf,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1E,kCAAkC,CACrC,CACF;IACD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5G,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;IAChG,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;CACtC,CAAC,CAAC"}

package/dist/HttpClient.d.ts

@@ -0,0 +1,10 @@
+import { Layer } from 'effect';
+import { HttpClient } from 'effect/unstable/http';
+/** Sends one outbound request: the global `fetch` in production, a fake in tests. */
+export type OutboundFetch = (url: URL, init: RequestInit) => Promise<Response>;
+/**
+ * The workflow's `HttpClient`: every call carries the request trace and logs legacy
+ * `Outgoing HTTP request` lines, unless `HttpClient.TracerDisabledWhen` holds for the request.
+ */
+export declare const httpClientLayer: (outboundFetch: OutboundFetch) => Layer.Layer<HttpClient.HttpClient>;
+//# sourceMappingURL=HttpClient.d.ts.map

package/dist/HttpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpClient.d.ts","sourceRoot":"","sources":["../src/HttpClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,EAAkB,MAAM,QAAQ,CAAC;AACpE,OAAO,EAEL,UAAU,EAIX,MAAM,sBAAsB,CAAC;AAmB9B,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AA8J/E;;;GAGG;AACH,eAAO,MAAM,eAAe,kBAAmB,aAAa,KAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CA+C7F,CAAC"}