@smithers-orchestrator/server 0.16.9 → 0.18.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithers-orchestrator/server",
-  "version": "0.16.9",
+  "version": "0.18.0",
   "description": "HTTP, WebSocket, gateway, cron, webhook, and metrics servers for Smithers",
   "type": "module",
   "sideEffects": false,
@@ -22,25 +22,32 @@
   "dependencies": {
     "@effect/workflow": "^0.18.0",
     "cron-parser": "^5.5.0",
+    "drizzle-orm": "^0.45.2",
     "effect": "^3.21.1",
     "hono": "^4.12.14",
     "ws": "^8.20.0",
-    "@smithers-orchestrator/driver": "0.16.9",
-    "@smithers-orchestrator/db": "0.16.9",
-    "@smithers-orchestrator/engine": "0.16.9",
-    "@smithers-orchestrator/errors": "0.16.9",
-    "@smithers-orchestrator/components": "0.16.9",
-    "@smithers-orchestrator/scheduler": "0.16.9",
-    "@smithers-orchestrator/observability": "0.16.9",
-    "@smithers-orchestrator/time-travel": "0.16.9"
+    "@smithers-orchestrator/db": "0.18.0",
+    "@smithers-orchestrator/devtools": "0.18.0",
+    "@smithers-orchestrator/engine": "0.18.0",
+    "@smithers-orchestrator/errors": "0.18.0",
+    "@smithers-orchestrator/components": "0.18.0",
+    "@smithers-orchestrator/driver": "0.18.0",
+    "@smithers-orchestrator/observability": "0.18.0",
+    "@smithers-orchestrator/gateway": "0.18.0",
+    "@smithers-orchestrator/protocol": "0.18.0",
+    "@smithers-orchestrator/scheduler": "0.18.0",
+    "@smithers-orchestrator/time-travel": "0.18.0"
   },
   "devDependencies": {
     "@types/bun": "latest",
-    "typescript": "~5.9.3"
+    "react": "^19.2.5",
+    "typescript": "~5.9.3",
+    "zod": "^4.3.6",
+    "@smithers-orchestrator/graph": "0.18.0"
   },
   "scripts": {
     "test": "bun test tests",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "tsup --dts-only"
+    "build": "rm -f src/index.d.ts && node ../../node_modules/tsup/dist/cli-default.js --dts-only"
   }
 }

package/src/EventFrame.ts

@@ -4,4 +4,5 @@ export type EventFrame = {
   payload?: unknown;
   seq: number;
   stateVersion: number;
+  apiVersion?: "v1";
 };

package/src/GatewayOptions.ts

@@ -1,13 +1,32 @@
 import type { GatewayAuthConfig } from "./GatewayAuthConfig.js";
 import type { GatewayDefaults } from "./GatewayDefaults.js";
+import type { GatewayUiConfig } from "./GatewayUiConfig.js";
 
 export type GatewayOptions = {
   protocol?: number;
   features?: string[];
   heartbeatMs?: number;
   auth?: GatewayAuthConfig;
+  ui?: GatewayUiConfig;
   defaults?: GatewayDefaults;
   maxBodyBytes?: number;
   maxPayload?: number;
   maxConnections?: number;
+  /**
+   * Per-run replay window for Gateway run event streams.
+   * @default 10000
+   */
+  eventWindowSize?: number;
+  /**
+   * Maximum time (in milliseconds) allowed for the HTTP parser to receive the
+   * complete headers of a single request. Helps mitigate slowloris attacks.
+   * @default 30000
+   */
+  headersTimeout?: number;
+  /**
+   * Maximum time (in milliseconds) allowed for a single request to be received
+   * and parsed, including the body. Helps mitigate slowloris attacks.
+   * @default 60000
+   */
+  requestTimeout?: number;
 };

package/src/GatewayRegisterOptions.ts

@@ -0,0 +1,8 @@
+import type { GatewayWebhookConfig } from "./GatewayWebhookConfig.js";
+import type { GatewayUiConfig } from "./GatewayUiConfig.js";
+
+export type GatewayRegisterOptions = {
+  schedule?: string;
+  webhook?: GatewayWebhookConfig;
+  ui?: GatewayUiConfig;
+};

package/src/GatewayTokenGrant.ts

@@ -2,4 +2,8 @@ export type GatewayTokenGrant = {
   role: string;
   scopes: string[];
   userId?: string;
+  tokenId?: string;
+  issuedAtMs?: number;
+  expiresAtMs?: number;
+  revokedAtMs?: number;
 };

package/src/GatewayUiConfig.ts

@@ -0,0 +1,20 @@
+export type GatewayUiConfig = {
+  /**
+   * Browser entry module for the React app. Smithers bundles this with Bun and
+   * serves it from the Gateway origin.
+   */
+  entry: string;
+  /**
+   * URL path where the UI is mounted. Gateway-level UI defaults to `/`;
+   * workflow-level UI defaults to `/workflows/<workflowKey>`.
+   */
+  path?: string;
+  /**
+   * Document title for the generated HTML shell.
+   */
+  title?: string;
+  /**
+   * JSON-serializable boot data exposed to the browser.
+   */
+  props?: Record<string, unknown>;
+};

package/src/ResponseFrame.ts

@@ -2,9 +2,14 @@ export type ResponseFrame = {
   type: "res";
   id: string;
   ok: boolean;
+  apiVersion?: "v1";
   payload?: unknown;
   error?: {
+    version?: "v1";
     code: string;
     message: string;
+    requiredScope?: string;
+    refresh?: string;
+    details?: unknown;
   };
 };

package/src/ServerOptions.ts

@@ -5,4 +5,16 @@ export type ServerOptions = {
   maxBodyBytes?: number;
   rootDir?: string;
   allowNetwork?: boolean;
+  /**
+   * Maximum time (in milliseconds) allowed for the HTTP parser to receive the
+   * complete headers of a single request. Helps mitigate slowloris attacks.
+   * @default 30000
+   */
+  headersTimeout?: number;
+  /**
+   * Maximum time (in milliseconds) allowed for a single request to be received
+   * and parsed, including the body. Helps mitigate slowloris attacks.
+   * @default 60000
+   */
+  requestTimeout?: number;
 };