@supacloud/elysia 0.7.0 → 0.8.0

package/README.md

@@ -116,6 +116,15 @@ once is rejected.
 Executes a compiler-emitted Job descriptor with its static aspect list and
 compiler-generated job scope.
 
+### `assertFeatureTransition(spec, state, event)`
+
+Checks a declared feature transition against an authoritative state and returns
+the destination state. Unknown events, stale/illegal states and inherited object
+members fail with HTTP 409 / `FEATURE_TRANSITION_CONFLICT`; malformed destinations
+fail with `FEATURE_SPEC_INVALID`. The helper is a matrix assertion, not a workflow
+engine, persistence or authorization layer. Call it inside the application's
+transaction and persist with a row lock or expected-version check.
+
 ### `ApplicationError`
 
 Lightweight error class carrying HTTP `status`, machine-readable `code`, and
@@ -134,3 +143,10 @@ adapters. The memory harness is limited to deterministic HTTP, key-value
 transaction and object-storage contract tests.
 `policy` supplies explicit permission grants/revocations and idempotency claims;
 `storage.failNext()` makes storage failure paths deterministic.
+
+Set `memoryGovernance: true` to enable test-only authorization, transaction,
+idempotency and audit adapters; permissions still require explicit grants.
+HTTP receipt fingerprints include route, body, params, query and business
+headers, not mutable request scopes/services or identity/tracing transport.
+Authorization runs again on a replay. Use durable application-owned adapters
+for production receipts, transactions and audits.

package/dist/feature.d.ts

@@ -0,0 +1,15 @@
+/** Structural contract: the runtime does not import the compiler or discover metadata. */
+export interface FeatureTransitionSpec {
+    name: string;
+    states: readonly string[];
+    transitions: Readonly<Record<string, {
+        from: string;
+        to: string;
+    }>>;
+}
+/**
+ * Check a declared transition against an authoritative state read by the caller.
+ * This is a matrix assertion, not persistence, authorization, or an FSM engine.
+ * Call inside the application's transaction and persist with a version check.
+ */
+export declare function assertFeatureTransition<Spec extends FeatureTransitionSpec>(spec: Spec, state: string, event: string): Spec["states"][number];

package/dist/index.d.ts

@@ -90,6 +90,8 @@ export interface CommandInvocation {
     services: Record<string, unknown>;
 }
 export type CommandExecutor = (invocation: CommandInvocation, next: () => unknown | Promise<unknown>) => unknown | Promise<unknown>;
+export { assertFeatureTransition } from "./feature";
+export type { FeatureTransitionSpec } from "./feature";
 export interface ApplicationAspectContext {
     kind: "route" | "command" | "job";
     name: string;

package/dist/index.js

@@ -1,6 +1,22 @@
 // src/index.ts
 import { Elysia } from "elysia";
 
+// src/feature.ts
+function assertFeatureTransition(spec, state, event) {
+  const transition = Object.hasOwn(spec.transitions, event) ? spec.transitions[event] : undefined;
+  if (!transition || !spec.states.includes(state) || transition.from !== state) {
+    throw new ApplicationError("Feature transition is not allowed", {
+      status: 409,
+      code: "FEATURE_TRANSITION_CONFLICT"
+    });
+  }
+  if (!spec.states.includes(transition.to)) {
+    throw new ApplicationError("Feature transition references an undeclared state", {
+      code: "FEATURE_SPEC_INVALID"
+    });
+  }
+  return transition.to;
+}
 // src/memory.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 
@@ -240,7 +256,7 @@ function createMemorySandbox(options = {}) {
       }
     },
     idempotency(invocation, next) {
-      return policy.runOnce(policy.subject(invocation.requestContext), invocation.command.name, requireIdempotencyKey(invocation), invocation.input, next);
+      return policy.runOnce(policy.subject(invocation.requestContext), invocation.command.name, requireIdempotencyKey(invocation), memoryCommandInput(invocation), next);
     },
     transaction(_invocation, next) {
       const count = audit.length;
@@ -297,6 +313,21 @@ function createMemorySandbox(options = {}) {
     }
   };
 }
+function memoryCommandInput(invocation) {
+  const input = invocation.input;
+  if (typeof input !== "object" || input === null)
+    return input;
+  const ignoredHeaders = new Set(["authorization", "idempotency-key", "x-request-id", "traceparent", "tracestate"]);
+  const headers = Object.fromEntries([...invocation.request.headers.entries()].filter(([name]) => !ignoredHeaders.has(name)));
+  return {
+    method: invocation.request.method,
+    path: new URL(invocation.request.url).pathname,
+    body: "body" in input ? input.body : undefined,
+    params: "params" in input ? input.params : undefined,
+    query: "query" in input ? input.query : undefined,
+    headers
+  };
+}
 function storageKey(bucket, key) {
   return JSON.stringify([bucket, key]);
 }
@@ -756,6 +787,7 @@ export {
   EXECUTION_ID_HEADER,
   IDEMPOTENCY_KEY_HEADER,
   VERIFIED_JWT_SUBJECT_HEADER,
+  assertFeatureTransition,
   composeAspects,
   composeCommandExecutors,
   createApplication,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/elysia",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Elysia runtime adapter for SupaCloud compiled modules: application/request scopes, route registration and validation",
   "type": "module",
   "main": "./dist/index.js",