@relkit/runtime-hono 0.4.0 → 0.5.0

package/dist/rpc.js

@@ -1,15 +1,15 @@
 import { ORPCError, os } from "@orpc/server";
 import { RPCHandler } from "@orpc/server/fetch";
-import { normalizeFailure, toPublicEnvelope } from "@relkit/runtime-effect";
 import { getEntry, isRecord } from "./materialize-routes-utils.js";
 import { createRpcMiddlewareContext, runRpcMiddleware as runTracedMiddleware, } from "./rpc-middleware-trace.js";
+import { assertExpectedIdentity, assertRpcSecurity, } from "./rpc-identity.js";
+import { responseError, rpcError, rpcNotFound } from "./rpc-response.js";
+import { realtimeProcedures } from "./realtime-rpc.js";
+import { agentErrorStatuses, agentProcedures } from "./agent-rpc.js";
+import { jobsErrorStatuses, jobsProcedures } from "./jobs/rpc.js";
+import { errorStatuses, isMiddleware, isSchema, routeOperation, rpcOutput, rpcOutputSchema, } from "./rpc-route-types.js";
 export function installRpc(app, options) {
-    const triggers = options.plan.httpTriggers.filter((trigger) => trigger.config.rawHandler !== true);
-    const errorStatusMap = Object.fromEntries(triggers.flatMap((trigger) => errorStatuses(trigger)));
-    const router = Object.fromEntries(triggers.flatMap((trigger) => {
-        const value = procedure(trigger, options);
-        return value === undefined ? [] : [[trigger.id, value]];
-    }));
+    const { router, errorStatusMap } = createRpcRouter(options);
     const handler = new RPCHandler(router, { errorStatusMap });
     const route = async (context) => {
         const auth = options.auth?.contextFor(context.req.raw);
@@ -17,16 +17,42 @@ export function installRpc(app, options) {
             prefix: "/rpc",
             context: { hono: context, auth },
         });
-        return result.matched ? result.response : context.notFound();
+        return result.matched ? result.response : rpcNotFound();
     };
     app.all("/rpc", route);
     app.all("/rpc/*", route);
 }
+export function createRpcRouter(options) {
+    const triggers = options.plan.httpTriggers.filter((trigger) => trigger.config.rawHandler !== true && trigger.config.client !== false);
+    const errorStatusMap = {
+        ...Object.fromEntries(triggers.flatMap((trigger) => errorStatuses(trigger))),
+        ...agentErrorStatuses,
+        ...jobsErrorStatuses,
+        PROVIDER_STATE_LOST: 503,
+        IDENTITY_PRECONDITION_FAILED: 409,
+        IDEMPOTENCY_CONFLICT: 409,
+        IDEMPOTENCY_WINDOW_EXPIRED: 409,
+    };
+    const router = {
+        ...Object.fromEntries(triggers.flatMap((trigger) => {
+            const value = procedure(trigger, options);
+            return value === undefined
+                ? []
+                : [...new Set([trigger.id, `${trigger.config.method} ${trigger.config.path}`])].map((name) => [name, value]);
+        })),
+        ...realtimeProcedures(options),
+        ...agentProcedures(options),
+        ...jobsProcedures(options),
+    };
+    return { router, errorStatusMap };
+}
 function procedure(trigger, options) {
-    const target = getEntry(options.manifest.functions, trigger.targetFunctionId);
+    const target = getEntry(options.manifest.targets ?? {}, trigger.targetFunctionId) ??
+        getEntry(options.manifest.functions, trigger.targetFunctionId);
     if (!isRecord(target) || !isSchema(target.input) || !isSchema(target.output)) {
         return undefined;
     }
+    const outputSchema = target.output;
     const errorMap = Object.fromEntries((Array.isArray(target.errors) ? target.errors : []).flatMap((error) => isRecord(error) && typeof error.id === "string"
         ? [
             [
@@ -42,24 +68,30 @@ function procedure(trigger, options) {
         .$context()
         .errors(errorMap)
         .input(target.input)
-        .output(target.output)
+        .output(rpcOutputSchema(outputSchema))
         .handler(async ({ input, context, signal }) => {
         if (options.auth?.protects(trigger.config.path) &&
             (await context.auth?.getSession()) == null) {
             throw new ORPCError("UNAUTHORIZED", { message: "Authentication required" });
         }
+        if (routeOperation(trigger) === "mutation" && options.clientIdentity !== undefined) {
+            await assertExpectedIdentity(context, options.clientIdentity);
+        }
+        if (routeOperation(trigger) === "mutation" && options.transportSecurity !== undefined) {
+            await assertRpcSecurity(context, options.transportSecurity);
+        }
         const invoke = () => options.engine.invoke({
             functionId: trigger.targetFunctionId,
             input,
             source: "http",
             ...(signal === undefined ? {} : { signal }),
-            ...(trigger.config.timeoutMs === undefined
-                ? {}
-                : { timeoutMs: trigger.config.timeoutMs }),
+            ...(typeof trigger.config.timeoutMs === "number"
+                ? { timeoutMs: trigger.config.timeoutMs }
+                : {}),
             ...(context.auth === undefined ? {} : { auth: context.auth }),
         });
         try {
-            return await runMiddleware(trigger, context.hono, options, invoke);
+            return rpcOutput(outputSchema, await runMiddleware(trigger, context.hono, options, invoke));
         }
         catch (error) {
             throw rpcError(error, signal);
@@ -95,49 +127,4 @@ async function runMiddleware(trigger, context, options, invoke) {
     };
     return run(0);
 }
-function rpcError(cause, signal) {
-    if (cause instanceof ORPCError)
-        return cause;
-    const failure = normalizeFailure(cause, signal === undefined ? {} : { signal });
-    if (failure.kind === "application") {
-        const envelope = toPublicEnvelope(failure);
-        return envelope.data === undefined
-            ? new ORPCError(failure.id, { message: failure.message })
-            : new ORPCError(failure.id, { message: failure.message, data: envelope.data });
-    }
-    const code = failure.kind === "provider"
-        ? "BAD_GATEWAY"
-        : failure.kind === "timeout"
-            ? "GATEWAY_TIMEOUT"
-            : failure.kind === "cancellation"
-                ? "CLIENT_CLOSED_REQUEST"
-                : "INTERNAL_SERVER_ERROR";
-    return new ORPCError(code);
-}
-async function responseError(response) {
-    const code = response.status === 401
-        ? "UNAUTHORIZED"
-        : response.status === 429
-            ? "TOO_MANY_REQUESTS"
-            : "INTERNAL_SERVER_ERROR";
-    return new ORPCError(code, {
-        data: await response
-            .clone()
-            .json()
-            .catch(() => undefined),
-    });
-}
-function errorStatuses(trigger) {
-    return Array.isArray(trigger.config.responses)
-        ? trigger.config.responses.flatMap((entry) => isRecord(entry) && typeof entry.errorId === "string" && typeof entry.status === "number"
-            ? [[entry.errorId, entry.status]]
-            : [])
-        : [];
-}
-function isSchema(value) {
-    return isRecord(value) && isRecord(value["~standard"]) && value["~standard"].version === 1;
-}
-function isMiddleware(value) {
-    return isRecord(value) && typeof value.handler === "function";
-}
 //# sourceMappingURL=rpc.js.map

package/dist/rpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,EAAE,EAAiD,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,IAAI,mBAAmB,GACxC,MAAM,2BAA2B,CAAC;AAMnC,MAAM,UAAU,UAAU,CAAC,GAAS,EAAE,OAAoC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAC/C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAChD,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CACmB,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAa,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,EAAE,OAAgB,EAAqB,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC/D,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,SAAS,CAChB,OAAgC,EAChC,OAAoC;IAEpC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACpE,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC7C,CAAC,CAAC;YACE;gBACE,KAAK,CAAC,EAAE;gBACR;oBACE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE;aACF;SACF;QACH,CAAC,CAAC,EAAE,CACP,CACU,CAAC;IACd,OAAO,EAAE;SACN,QAAQ,EAAc;SACtB,MAAM,CAAC,QAAQ,CAAC;SAChB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;SACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5C,IACE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC3C,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,IAAI,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,gBAAgB;YACpC,KAAK;YACL,MAAM,EAAE,MAAM;YACd,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC9D,CAAC,CAAC;QACL,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AACD,KAAK,UAAU,aAAa,CAC1B,OAAgC,EAChC,OAAgB,EAChB,OAAoC,EACpC,MAA8B;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU;SAClC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC/C,CAAC,CAAC,CAAC;IACL,MAAM,GAAG,GAAG,KAAK,EAAE,KAAa,EAAoB,EAAE;QACpD,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,MAAM,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAAe,CAAC;QACpB,MAAM,IAAI,GAAS,KAAK,IAAI,EAAE;YAC5B,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,EACP,IAAI,EACJ,0BAA0B,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAC3D,CAAC;QACF,IAAI,QAAQ,YAAY,QAAQ;YAAE,MAAM,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,MAA+B;IAC/D,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS;YAChC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACzD,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,UAAU;QACzB,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc;gBAC/B,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,uBAAuB,CAAC;IAClC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,MAAM,IAAI,GACR,QAAQ,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,uBAAuB,CAAC;IAChC,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,QAAQ;aACjB,KAAK,EAAE;aACP,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KAC1B,CAAC,CAAC;AACL,CAAC;AACD,SAAS,aAAa,CAAC,OAAgC;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YACtF,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,EAAE,CACP;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;AAC7F,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC;AAChE,CAAC"}
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,EAAE,EAAiD,MAAM,cAAc,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,IAAI,mBAAmB,GACxC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,SAAS,EACT,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,UAAU,CAAC,GAAS,EAAE,OAAoC;IACxE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,UAAU,CAAa,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,EAAE,OAAgB,EAAqB,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAoC;IAIlE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAC/C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CACnF,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,GAAG,kBAAkB;QACrB,GAAG,iBAAiB;QACpB,mBAAmB,EAAE,GAAG;QACxB,4BAA4B,EAAE,GAAG;QACjC,oBAAoB,EAAE,GAAG;QACzB,0BAA0B,EAAE,GAAG;KAChC,CAAC;IACF,MAAM,MAAM,GAAG;QACb,GAAG,MAAM,CAAC,WAAW,CACnB,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAC/E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CACxB,CAAC;QACR,CAAC,CAAC,CACH;QACD,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,GAAG,cAAc,CAAC,OAAO,CAAC;KACL,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACpC,CAAC;AACD,SAAS,SAAS,CAChB,OAAgC,EAChC,OAAoC;IAEpC,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,gBAAgB,CAAC;QAClE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACpE,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC7C,CAAC,CAAC;YACE;gBACE,KAAK,CAAC,EAAE;gBACR;oBACE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE;aACF;SACF;QACH,CAAC,CAAC,EAAE,CACP,CACU,CAAC;IACd,OAAO,EAAE;SACN,QAAQ,EAAc;SACtB,MAAM,CAAC,QAAQ,CAAC;SAChB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;SACnB,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;SACrC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5C,IACE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC3C,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,IAAI,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACnF,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACtF,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,gBAAgB;YACpC,KAAK;YACL,MAAM,EAAE,MAAM;YACd,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC9C,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC9D,CAAC,CAAC;QACL,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,YAAY,EAAE,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AACD,KAAK,UAAU,aAAa,CAC1B,OAAgC,EAChC,OAAgB,EAChB,OAAoC,EACpC,MAA8B;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU;SAClC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IAC/C,CAAC,CAAC,CAAC;IACL,MAAM,GAAG,GAAG,KAAK,EAAE,KAAa,EAAoB,EAAE;QACpD,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,MAAM,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAAe,CAAC;QACpB,MAAM,IAAI,GAAS,KAAK,IAAI,EAAE;YAC5B,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,UAAU,EACV,YAAY,EACZ,OAAO,EACP,IAAI,EACJ,0BAA0B,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAC3D,CAAC;QACF,IAAI,QAAQ,YAAY,QAAQ;YAAE,MAAM,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/transport-security.d.ts

@@ -0,0 +1,19 @@
+import { type MaybePromise } from "@relkit/contracts";
+import type { Hono } from "hono";
+export interface TransportSecurityOptions {
+    readonly allowedOrigins: readonly string[];
+    readonly allowedMethods?: readonly string[];
+    readonly allowedHeaders?: readonly string[];
+    readonly csrfHeader?: string;
+    readonly validateCsrf?: (request: Request, token: string) => MaybePromise<boolean>;
+    readonly trustedService?: (request: Request) => MaybePromise<boolean>;
+}
+export declare class TransportSecurityError extends Error {
+    readonly code: "ORIGIN_DENIED" | "CSRF_DENIED";
+    constructor(code: "ORIGIN_DENIED" | "CSRF_DENIED", message: string);
+}
+export declare function installTransportSecurity(app: Hono, options: TransportSecurityOptions | undefined): void;
+export declare function assertStateChangingRequest(request: Request, options: TransportSecurityOptions): Promise<void>;
+export declare function assertWebSocketOrigin(request: Request, options: TransportSecurityOptions): void;
+export declare function assertWebSocketRequest(request: Request, options: TransportSecurityOptions): Promise<void>;
+//# sourceMappingURL=transport-security.d.ts.map

package/dist/transport-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-security.d.ts","sourceRoot":"","sources":["../src/transport-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IACnF,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;CACvE;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa;gBAArC,IAAI,EAAE,eAAe,GAAG,aAAa,EAC9C,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,IAAI,EACT,OAAO,EAAE,wBAAwB,GAAG,SAAS,GAC5C,IAAI,CAmCN;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAS/F;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/transport-security.js

@@ -0,0 +1,124 @@
+import { AGENT_CAPABILITY_HEADER } from "@relkit/contracts";
+export class TransportSecurityError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "TransportSecurityError";
+    }
+}
+export function installTransportSecurity(app, options) {
+    if (options === undefined)
+        return;
+    const origins = allowedOrigins(options.allowedOrigins);
+    app.use("*", async (context, next) => {
+        const request = context.req.raw;
+        const origin = request.headers.get("origin");
+        if (request.method === "OPTIONS" && origin !== null) {
+            if (origin !== new URL(request.url).origin && !origins.has(origin)) {
+                return denied(context, "ORIGIN_DENIED");
+            }
+            const method = request.headers.get("access-control-request-method") ?? "";
+            const methods = allowedMethods(options.allowedMethods);
+            const requestedHeaders = request.headers.get("access-control-request-headers");
+            if (!methods.has(method.toUpperCase()) ||
+                !headersAllowed(requestedHeaders, options.allowedHeaders)) {
+                return denied(context, "ORIGIN_DENIED");
+            }
+            cors(context, origin, methods, requestedHeaders);
+            return context.body(null, 204);
+        }
+        if (isStateChanging(request.method) && !context.req.path.startsWith("/rpc")) {
+            try {
+                await assertStateChangingRequest(request, options);
+            }
+            catch (error) {
+                return denied(context, error instanceof TransportSecurityError ? error.code : "CSRF_DENIED");
+            }
+        }
+        await next();
+        if (origin !== null && origins.has(origin))
+            cors(context, origin);
+    });
+}
+export async function assertStateChangingRequest(request, options) {
+    if (await options.trustedService?.(request))
+        return;
+    const origin = request.headers.get("origin") ?? refererOrigin(request.headers.get("referer"));
+    if (origin === new URL(request.url).origin)
+        return;
+    if (origin === null || !allowedOrigins(options.allowedOrigins).has(origin)) {
+        throw new TransportSecurityError("ORIGIN_DENIED", "Request origin is not allowed.");
+    }
+    const token = request.headers.get(options.csrfHeader ?? "x-relkit-csrf");
+    if (token === null || !(await options.validateCsrf?.(request, token))) {
+        throw new TransportSecurityError("CSRF_DENIED", "CSRF validation failed.");
+    }
+}
+export function assertWebSocketOrigin(request, options) {
+    const origin = request.headers.get("origin");
+    if (origin === null ||
+        origin === "null" ||
+        (origin !== new URL(request.url).origin && !allowedOrigins(options.allowedOrigins).has(origin))) {
+        throw new TransportSecurityError("ORIGIN_DENIED", "WebSocket origin is not allowed.");
+    }
+}
+export async function assertWebSocketRequest(request, options) {
+    if (await options.trustedService?.(request))
+        return;
+    assertWebSocketOrigin(request, options);
+}
+function cors(context, origin, methods, headers) {
+    context.header("Access-Control-Allow-Origin", origin);
+    context.header("Access-Control-Allow-Credentials", "true");
+    context.header("Vary", "Origin", { append: true });
+    if (methods !== undefined)
+        context.header("Access-Control-Allow-Methods", [...methods].join(", "));
+    if (headers)
+        context.header("Access-Control-Allow-Headers", headers);
+}
+const DEFAULT_METHODS = ["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"];
+const DEFAULT_HEADERS = [
+    "accept",
+    "authorization",
+    "content-type",
+    "last-event-id",
+    "x-relkit-csrf",
+    "x-relkit-identity-scope",
+    "x-relkit-operation-id",
+    "x-relkit-public-fingerprint",
+    "x-relkit-session-epoch",
+    "x-relkit-agent-observe",
+    AGENT_CAPABILITY_HEADER,
+];
+function allowedMethods(values) {
+    return new Set((values ?? DEFAULT_METHODS).map((value) => value.toUpperCase()));
+}
+function headersAllowed(value, configured) {
+    if (value === null || value.trim() === "")
+        return true;
+    const allowed = new Set((configured ?? DEFAULT_HEADERS).map((header) => header.toLowerCase()));
+    return value.split(",").every((header) => allowed.has(header.trim().toLowerCase()));
+}
+function allowedOrigins(values) {
+    if (values.includes("*"))
+        throw new TypeError("Credentialed CORS cannot use a wildcard origin.");
+    return new Set(values.map((value) => new URL(value).origin));
+}
+function refererOrigin(value) {
+    if (value === null)
+        return null;
+    try {
+        return new URL(value).origin;
+    }
+    catch {
+        return null;
+    }
+}
+function isStateChanging(method) {
+    return !["GET", "HEAD", "OPTIONS"].includes(method);
+}
+function denied(context, code) {
+    return context.json({ error: { id: code, message: "Request rejected." } }, 403);
+}
+//# sourceMappingURL=transport-security.js.map

package/dist/transport-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-security.js","sourceRoot":"","sources":["../src/transport-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAqB,MAAM,mBAAmB,CAAC;AAY/E,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAEpC;IADX,YACW,IAAqC,EAC9C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAiC;QAI9C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAS,EACT,OAA6C;IAE7C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,IAAI,EAAE,CAAC;YAC1E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC/E,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAClC,CAAC,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,EACzD,CAAC;gBACD,OAAO,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACjD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC;gBACH,MAAM,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,MAAM,CACX,OAAO,EACP,KAAK,YAAY,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;QACb,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,OAAiC;IAEjC,IAAI,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC;QAAE,OAAO;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9F,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO;IACnD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,sBAAsB,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,sBAAsB,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,OAAiC;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,MAAM,KAAK,IAAI;QACf,MAAM,KAAK,MAAM;QACjB,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAC/F,CAAC;QACD,MAAM,IAAI,sBAAsB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,OAAiC;IAEjC,IAAI,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC;QAAE,OAAO;IACpD,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,IAAI,CACX,OAAsF,EACtF,MAAc,EACd,OAA6B,EAC7B,OAAuB;IAEvB,OAAO,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACnF,MAAM,eAAe,GAAG;IACtB,QAAQ;IACR,eAAe;IACf,cAAc;IACd,eAAe;IACf,eAAe;IACf,yBAAyB;IACzB,uBAAuB;IACvB,6BAA6B;IAC7B,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;CACf,CAAC;AAEX,SAAS,cAAc,CAAC,MAAqC;IAC3D,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB,EAAE,UAAyC;IACrF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACjG,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,MAAM,CAAC,OAAwD,EAAE,IAAY;IACpF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAClF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relkit/runtime-hono",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Unsupported internal Hono runtime for RELKIT; use @relkit/app.",
   "license": "MIT",
   "repository": {
@@ -26,27 +26,41 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./bun": {
+      "types": "./dist/bun.d.ts",
+      "import": "./dist/bun.js"
     }
   },
   "dependencies": {
     "@modelcontextprotocol/server": "2.0.0",
+    "@ag-ui/core": "0.0.59",
     "@orpc/contract": "2.0.0-beta.31",
     "@orpc/server": "2.0.0-beta.31",
     "@scalar/hono-api-reference": "0.11.16",
-    "@relkit/contracts": "0.4.0",
-    "@relkit/engine": "0.4.0",
-    "@relkit/graph": "0.4.0",
-    "@relkit/invocation": "0.4.0",
-    "@relkit/observability": "0.4.0",
-    "@relkit/openapi": "0.4.0",
-    "@relkit/runtime-effect": "0.4.0",
-    "@relkit/routes": "0.4.0",
-    "@relkit/schema": "0.4.0",
+    "@relkit/contracts": "0.5.0",
+    "@relkit/agents": "0.5.0",
+    "@relkit/engine": "0.5.0",
+    "@relkit/graph": "0.5.0",
+    "@relkit/invocation": "0.5.0",
+    "@relkit/jobs": "0.5.0",
+    "@relkit/observability": "0.5.0",
+    "@relkit/openapi": "0.5.0",
+    "@relkit/runtime-effect": "0.5.0",
+    "@relkit/routes": "0.5.0",
+    "@relkit/realtime": "0.5.0",
+    "@relkit/schema": "0.5.0",
     "hono": "4.13.5",
     "hono-rate-limiter": "0.5.3"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "2.0.0"
+    "@langchain/core": "1.2.9",
+    "@langchain/langgraph": "1.4.14",
+    "@modelcontextprotocol/client": "2.0.0",
+    "@orpc/client": "2.0.0-beta.31",
+    "@relkit/client": "0.5.0",
+    "@relkit/providers-local": "0.5.0",
+    "langchain": "1.5.10"
   },
   "scripts": {
     "build": "tsc -b",