@voltro/kv 0.86.0 → 0.88.0

package/dist/connection.js

@@ -1,27 +1,102 @@
 import { KvError as e } from "./errors.js";
-import { Config as t, Context as n, Effect as r, HashMap as i, Layer as a, Option as o, Schedule as s, Scope as c, SynchronizedRef as l } from "effect";
-//#region src/connection.ts
-var u = (e) => ({
-	get: (t) => e.get(t),
-	set: (t, n) => e.set(t, n),
-	psetex: (t, n, r) => e.psetex(t, n, r),
-	del: (t) => t.length === 0 ? Promise.resolve(0) : e.del(...t),
-	exists: (t) => e.exists(t),
-	eval: (t, n, ...r) => e.eval(t, n, ...r),
-	zrange: (t) => e.zrange(t, 0, -1),
-	scan: async (t, n, r) => {
-		let [i, a] = await e.scan(t, "MATCH", n, "COUNT", r);
-		return {
-			cursor: i,
-			keys: a
-		};
+import { withRespKeyPrefix as t } from "./connectionPrefix.js";
+import { dynamicSql as n } from "./connectionSqlConfig.js";
+import { dynamicAnalytics as r } from "./connectionAnalyticsConfig.js";
+import { byTenant as i, connectionDefinitionsProblem as a, connectionMetadataProblem as o, declaredConnectionEnv as s, dynamic as c, dynamicNats as l, env as u, memory as d, redisConnectionName as f, redisTimeoutsProblem as p, roundRobin as m, shardBy as h } from "./connectionDefinitions.js";
+import { missingDriver as g } from "./driverModule.js";
+import { createNativeRedisConnection as _, disconnectNativeRedis as v, nativeRedisTopology as y, scanNativeRedis as b } from "./nativeRedisTopology.js";
+import { connectRedisSubscriber as x } from "./connectionSubscriber.js";
+import { dynamicStorage as S } from "./connectionStorageConfig.js";
+import { withConnectionRegistryConfigProvider as C } from "./connectionConfigProvider.js";
+import { ConnectionRegistry as ee, layerConfiguredConnections as w, makeConnectionRegistry as T } from "./connectionPool.js";
+import { httpRedisReaders as E } from "./redisReadPolicy.js";
+import { nativeRedisReadConfigs as D, openNativeRedisReaders as te } from "./nativeRedisReads.js";
+import { readRedisNodeDiagnostics as ne } from "./redisDiagnostics.js";
+import { CACHE_FENCE_RETENTION_MS as re, CacheAtomicProtocolError as ie, cacheAtomicArray as ae, cacheAtomicComponent as oe, cacheAtomicKeys as se, cacheAtomicMember as ce, cacheAtomicMembership as O, cacheAtomicRoot as k, cacheAtomicScanPage as A, cacheAtomicSnapshot as j, cacheAtomicTtl as M, cacheAtomicValueSnapshots as N, decodeCacheAtomicCommand as P, decodeCacheAtomicPolicy as F, decodeCacheAtomicReply as I, isCacheAtomicRead as L } from "./cacheAtomicProtocol.js";
+import { CACHE_ATOMIC_SCRIPT as R } from "./cacheAtomicScript.js";
+import { Config as z, ConfigProvider as B, Context as V, Effect as H, Layer as U, Option as W, Schedule as G } from "effect";
+// src/connection.ts
+var K = (e) => new z.ConfigError(new B.SourceError({ message: e })), le = (e, t) => {
+	let n = e.client;
+	return {
+		readOnly: {
+			get: async (e) => {
+				let n = await t.select();
+				return await n.ready(), n.client.get(e);
+			},
+			exists: async (e) => {
+				let n = await t.select();
+				return await n.ready(), n.client.exists(e);
+			},
+			zrange: async (e) => {
+				let n = await t.select();
+				return await n.ready(), n.client.zrange(e, 0, "-1");
+			},
+			eval: async (e, n, ...r) => {
+				let i = await t.select();
+				return await i.ready(), i.client.call("eval_ro", [
+					e,
+					n,
+					...r
+				]);
+			}
+		},
+		ping: async () => (await e.ready(), n.ping()),
+		diagnostics: async () => {
+			await e.ready();
+			let t = e.kind === "cluster" ? n.nodes("master") : [n];
+			return { nodes: await Promise.all(t.map((e) => ne({
+				info: (t) => e.info(t),
+				config: (t, n) => e.config(t, n)
+			}))) };
+		},
+		onReconnect: (t) => {
+			let r = () => {
+				e.ready().then(t).catch(() => {});
+			};
+			return n.on("ready", r), () => {
+				n.off("ready", r);
+			};
+		},
+		get: async (t) => (await e.ready(), n.get(t)),
+		set: async (t, r) => (await e.ready(), n.set(t, r)),
+		psetex: async (t, r, i) => (await e.ready(), n.psetex(t, r, i)),
+		del: async (t) => {
+			if (t.length === 0) return 0;
+			if (await e.ready(), e.kind !== "cluster") return n.del(...t);
+			let r = 0;
+			for (let e of t) r += await n.del(e);
+			return r;
+		},
+		exists: async (t) => (await e.ready(), n.exists(t)),
+		eval: async (t, r, ...i) => (await e.ready(), n.eval(t, r, ...i)),
+		zrange: async (t) => (await e.ready(), n.zrange(t, 0, "-1")),
+		scan: async (t, n, r) => (await e.ready(), b(e, t, n, r)),
+		close: async () => {
+			let r, i = () => {
+				try {
+					n.disconnect();
+				} catch {}
+			};
+			try {
+				await Promise.race([n.quit().then(() => void 0).catch(i), new Promise((e) => {
+					r = setTimeout(() => {
+						i(), e();
+					}, 1e3);
+				})]);
+			} finally {
+				r !== void 0 && clearTimeout(r), await Promise.all([t.close(), v(e)]).then(() => void 0);
+			}
+		}
+	};
+}, q = (e) => ({
+	readOnly: {
+		get: (t) => e.get(t),
+		exists: (t) => e.exists(t),
+		zrange: (t) => e.zrange(t, 0, -1),
+		eval: (t, n, ...r) => e.evalRo === void 0 ? Promise.reject(/* @__PURE__ */ Error("HTTP read-only Lua is unavailable")) : e.evalRo(t, r.slice(0, n), r.slice(n))
 	},
-	close: () => e.quit().then(() => void 0).catch(() => {
-		try {
-			e.disconnect();
-		} catch {}
-	})
-}), d = (e) => ({
+	ping: () => e.ping(),
 	get: (t) => e.get(t),
 	set: (t, n) => e.set(t, n),
 	psetex: (t, n, r) => e.psetex(t, n, r),
@@ -40,42 +115,251 @@ var u = (e) => ({
 		};
 	},
 	close: () => Promise.resolve()
-}), f = (e) => e.toUpperCase().replace(/[^A-Z0-9]+/g, "_"), p = ["resp", "http"], m = (e) => r.gen(function* () {
-	let n = f(e), r = yield* t.String(`${n}_REDIS_URL`).pipe(t.orElse(() => t.String("REDIS_URL"))), i = yield* t.Literals(p, `${n}_REDIS_DRIVER`).pipe(t.option), a = o.isSome(i) ? i.value : yield* t.Literals(p, "REDIS_DRIVER").pipe(t.withDefault("resp")), s = yield* t.String(`${n}_REDIS_TOKEN`).pipe(t.orElse(() => t.String("REDIS_TOKEN")), t.orElse(() => t.String("UPSTASH_REDIS_REST_TOKEN")), t.option), c = yield* t.String(`${n}_REDIS_KEY_PREFIX`).pipe(t.option);
+}), J = (e) => e.toUpperCase().replace(/[^A-Z0-9]+/g, "_"), Y = (e) => {
+	if (![
+		"resp",
+		"http",
+		"memory"
+	].includes(e.driver)) return "Redis driver must be resp, http or memory";
+	if (typeof e.url != "string" || !e.url.trim()) return "Redis URL must be a nonempty string";
+	let t = o(e);
+	if (t) return t;
+	let n = p(e, e.driver);
+	if (n) return n;
+	if (e.token !== void 0 && (typeof e.token != "string" || !e.token)) return "Redis token must be a nonempty string";
+	if (e.cluster !== void 0 && typeof e.cluster != "boolean") return "Redis cluster must be a boolean";
+	if (e.readFrom !== void 0 && ![
+		"primary",
+		"replica",
+		"nearest"
+	].includes(e.readFrom)) return "Redis readFrom must be primary, replica or nearest";
+	if (e.replicas !== void 0 && (!Array.isArray(e.replicas) || e.replicas.some((e) => typeof e != "string" || !e.trim()))) return "Redis replicas must be nonempty URL strings";
+	if (e.driver === "memory" && ((e.replicas?.length ?? 0) > 0 || e.readFrom !== void 0 && e.readFrom !== "primary")) return "Local memory does not declare network readers";
+	if (e.driver === "http") {
+		if (e.cluster === !0) return "HTTP Redis does not declare native Cluster topology";
+		if (e.readFrom === "replica" && !e.replicas?.length) return "HTTP replica reads require replica endpoints";
+		try {
+			for (let t of [e.url, ...e.replicas ?? []]) {
+				let n = new URL(t);
+				if (!["http:", "https:"].includes(n.protocol) || n.username || n.password || n.hash || t !== t.trim() || e.tls === "required" && n.protocol !== "https:") return "HTTP Redis endpoints require admitted HTTP URLs and TLS policy";
+			}
+		} catch {
+			return "HTTP Redis endpoint is invalid";
+		}
+	}
+	if (e.persistence !== void 0 && ![
+		"required",
+		"optional",
+		"none"
+	].includes(e.persistence)) return "Connection persistence must be required, optional or none";
+	if (e.maxmemoryPolicyHint !== void 0 && typeof e.maxmemoryPolicyHint != "string") return "Redis maxmemoryPolicyHint must be a string";
+}, X = (e) => {
+	let t = Y(e);
+	return t ? H.fail(K(t)) : e.driver === "resp" ? H.try({
+		try: () => {
+			let t = y(e);
+			if (D(e), e.readFrom === "replica" && t.kind === "standalone" && !e.replicas?.length) throw Error("Standalone replica reads require replica endpoints");
+			return t.kind === "cluster" && e.cluster === void 0 ? {
+				...e,
+				cluster: !0
+			} : e;
+		},
+		catch: () => K("Invalid native Redis topology declaration")
+	}) : H.succeed(e);
+}, Z = ["resp", "http"], ue = (e, t = {}) => H.gen(function* () {
+	let n = J(e), r = t.url ?? (yield* z.String(`${n}_REDIS_URL`).pipe(z.orElse(() => z.String("REDIS_URL")))), i = t.driver === void 0 ? yield* z.Literals(Z, `${n}_REDIS_DRIVER`).pipe(z.option) : W.none(), a = t.driver ?? (W.isSome(i) ? i.value : yield* z.Literals(Z, "REDIS_DRIVER").pipe(z.withDefault("resp"))), o = t.token === void 0 ? yield* z.String(`${n}_REDIS_TOKEN`).pipe(z.orElse(() => z.String("REDIS_TOKEN")), z.orElse(() => z.String("UPSTASH_REDIS_REST_TOKEN")), z.option) : W.some(t.token), s = t.keyPrefix === void 0 ? yield* z.String(`${n}_REDIS_KEY_PREFIX`).pipe(z.option) : W.some(t.keyPrefix);
 	return {
 		url: r,
 		driver: a,
-		...o.isSome(s) ? { token: s.value } : {},
-		...o.isSome(c) ? { keyPrefix: c.value } : {}
+		...W.isSome(o) ? { token: o.value } : {},
+		...W.isSome(s) ? { keyPrefix: s.value } : {},
+		...t.source === void 0 ? {} : { source: t.source },
+		...t.connectTimeoutMs === void 0 ? {} : { connectTimeoutMs: t.connectTimeoutMs },
+		...t.commandTimeoutMs === void 0 ? {} : { commandTimeoutMs: t.commandTimeoutMs }
 	};
-}), h = (t) => r.tryPromise({
-	try: async () => {
-		if (t.driver === "http") {
-			let e = await import("@upstash/redis"), n = typeof e.default == "function" ? e.default : e.default?.Redis, r = e.Redis ?? n;
-			if (!r) throw Error("@upstash/redis: Redis constructor not found in module");
-			return d(new r({
-				url: t.url,
-				token: t.token,
-				automaticDeserialization: !1
-			}));
+}).pipe(H.flatMap(X));
+function Q(e, t, n) {
+	let r = n === void 0 ? void 0 : Object.freeze({ tenantId: n.tenantId });
+	return H.gen(function* () {
+		let n = a(t ?? {});
+		if (n) return yield* H.fail(K(n));
+		let i = e.includes(":"), o = i ? e.slice(e.indexOf(":") + 1) : e;
+		if (i && !e.startsWith("redis:")) return yield* H.fail(K("A Redis consumer requires a redis:name connection reference"));
+		if (i && o && !/^[A-Za-z][A-Za-z0-9_-]*$/.test(o)) return yield* H.fail(K("Malformed Redis connection reference"));
+		let s = t?.redis ?? {}, c = Object.keys(s), l = f(o, t ?? {}), u = Object.hasOwn(s, l) ? s[l] : void 0;
+		if (!u && c.length > 0) return yield* H.fail(K(`Unknown Redis connection ${l || "(default)"}. Known names: ${c.sort().join(", ") || "(none)"}`));
+		let d = `CONNECTIONS_REDIS_${J(l)}`, p = yield* z.String(`${d}_URL`).pipe(z.option), m = yield* z.Literals(["resp", "http"], `${d}_DRIVER`).pipe(z.option), h = yield* z.String(`${d}_TOKEN`).pipe(z.option), g = yield* z.String(`${d}_KEY_PREFIX`).pipe(z.option), _ = {
+			...W.isSome(p) ? { url: p.value } : {},
+			...W.isSome(m) ? { driver: m.value } : {},
+			...W.isSome(h) ? { token: h.value } : {},
+			...W.isSome(g) ? { keyPrefix: g.value } : {},
+			...[
+				p,
+				m,
+				h,
+				g
+			].some(W.isSome) ? { source: "override" } : {}
+		};
+		if (u && "_tag" in u && u._tag === "MemoryRedisConnection") return [
+			p,
+			m,
+			h,
+			g
+		].some(W.isSome) ? yield* H.fail(K("A local memory connection cannot be redirected by transport environment overrides")) : {
+			url: `memory:${l}`,
+			driver: "memory",
+			source: "config",
+			...u.now === void 0 ? {} : { memoryClock: u.now }
+		};
+		if (u && "_tag" in u) {
+			if (!r?.tenantId) return yield* H.fail(K("A dynamic Redis connection requires tenantId"));
+			let e = {
+				...yield* u.resolve(r),
+				..._
+			}, t = Y(e);
+			return t ? yield* H.fail(K(t)) : e.driver === "memory" ? yield* H.fail(K("Local memory connections require a memory() declaration, not a tenant credential resolver")) : e.keyPrefix !== void 0 && typeof e.keyPrefix != "string" ? yield* H.fail(K("Connection keyPrefix must be a string")) : e.allowSharedNamespace !== void 0 && typeof e.allowSharedNamespace != "boolean" ? yield* H.fail(K("Connection allowSharedNamespace must be a boolean")) : e.driver === "http" && !e.token ? yield* H.fail(K("An HTTP Redis connection requires a declared token")) : e.tls === "required" && !/^rediss(?:\+cluster|\+sentinel)?:\/\//i.test(e.url) && !(e.driver === "http" && /^https:\/\//i.test(e.url)) ? yield* H.fail(K("A Redis connection with tls: required needs a secure Redis scheme or HTTPS")) : yield* X(e);
+		}
+		if (!u) return yield* ue(l || e, _);
+		let v = W.isSome(p) ? p.value : yield* z.String(u.url.name), y = W.isSome(m) ? m.value : u.driver ?? "resp", b = W.isSome(h) ? W.some(h.value) : u.token ? W.some(yield* z.String(u.token.name)) : W.none();
+		if (y === "http" && W.isNone(b)) return yield* H.fail(K("An HTTP Redis connection requires a declared token"));
+		let x = W.isSome(g) ? g.value : u.keyPrefix, S = u.cluster ?? /^rediss?\+cluster:\/\//i.test(v);
+		if (u.tls === "required" && !/^rediss(?:\+cluster|\+sentinel)?:\/\//i.test(v) && !(y === "http" && /^https:\/\//i.test(v))) return yield* H.fail(K("A Redis connection with tls: required needs a secure Redis scheme or HTTPS"));
+		let C = yield* H.forEach(u.replicas ?? [], (e) => z.String(e.name));
+		return yield* X({
+			url: v,
+			driver: y,
+			cluster: S,
+			source: [
+				p,
+				m,
+				h,
+				g
+			].some(W.isSome) ? "override" : "config",
+			...W.isSome(b) ? { token: b.value } : {},
+			...x === void 0 ? {} : { keyPrefix: x },
+			...u.allowSharedNamespace === void 0 ? {} : { allowSharedNamespace: u.allowSharedNamespace },
+			...u.tls === void 0 ? {} : { tls: u.tls },
+			...u.persistence === void 0 ? {} : { persistence: u.persistence },
+			...u.region === void 0 ? {} : { region: u.region },
+			...u.label === void 0 ? {} : { label: u.label },
+			...u.acl === void 0 ? {} : { acl: u.acl },
+			...u.readFrom === void 0 ? {} : { readFrom: u.readFrom },
+			...u.connectTimeoutMs === void 0 ? {} : { connectTimeoutMs: u.connectTimeoutMs },
+			...u.commandTimeoutMs === void 0 ? {} : { commandTimeoutMs: u.commandTimeoutMs },
+			...C.length > 0 ? { replicas: C } : {},
+			...u.maxmemoryPolicyHint === void 0 ? {} : { maxmemoryPolicyHint: u.maxmemoryPolicyHint }
+		});
+	});
+}
+var de = (n) => H.tryPromise({
+	try: async (e) => {
+		e.throwIfAborted();
+		let t = Y(n);
+		if (t) throw Error(t);
+		if (n.driver === "resp" && D(n), n.driver === "memory") {
+			let { makeMemoryConnectionState: e } = await import("./connectionMemory.js"), t = e(n.memoryClock), r = t.command();
+			return {
+				...r,
+				close: async () => {
+					await r.close(), t.dispose();
+				}
+			};
+		}
+		if (n.driver === "http") {
+			let t = await import("@upstash/redis").catch(g("@upstash/redis", "An Upstash HTTP connection"));
+			e.throwIfAborted();
+			let r = typeof t.default == "function" ? t.default : t.default?.Redis, i = t.Redis ?? r;
+			if (!i) throw Error("@upstash/redis: Redis constructor not found in module");
+			let a = async (t) => {
+				let r = new AbortController(), a = () => {
+					r.abort();
+				};
+				e.addEventListener("abort", a, { once: !0 });
+				try {
+					e.throwIfAborted();
+					let a = new i({
+						url: t,
+						token: n.token,
+						automaticDeserialization: !1,
+						retry: !1,
+						signal: r.signal
+					});
+					if (await a.ping() !== "PONG") throw Error("HTTP reader readiness failed");
+					let o = q(a);
+					if (Number(await o.readOnly.eval("return 1", 0)) !== 1) throw Error("HTTP read-only Lua readiness failed");
+					return e.throwIfAborted(), {
+						...o,
+						close: async () => {
+							r.abort();
+						}
+					};
+				} catch (e) {
+					throw r.abort(), e;
+				} finally {
+					e.removeEventListener("abort", a);
+				}
+			}, o = new AbortController(), s = () => {
+				o.abort();
+			};
+			e.addEventListener("abort", s, { once: !0 });
+			try {
+				e.throwIfAborted();
+				let t = new i({
+					url: n.url,
+					token: n.token,
+					automaticDeserialization: !1,
+					retry: !1,
+					signal: o.signal
+				});
+				if (await t.ping() !== "PONG") throw Error("HTTP primary readiness failed");
+				e.throwIfAborted();
+				let r = {
+					...q(t),
+					close: async () => {
+						o.abort();
+					}
+				}, s = [];
+				try {
+					if (n.readFrom !== void 0 && n.readFrom !== "primary") for (let e of n.replicas ?? []) s.push(await a(e));
+					let t = E(r, s, n.readFrom);
+					return (n.readFrom === "replica" || n.readFrom === "nearest") && await t.readOnly.eval("return 1", 0), e.throwIfAborted(), t;
+				} catch (e) {
+					throw await Promise.all([r, ...s].map((e) => e.close())), e;
+				}
+			} catch (e) {
+				throw o.abort(), e;
+			} finally {
+				e.removeEventListener("abort", s);
+			}
+		}
+		let r = await _(n), i = r.client;
+		i.on("error", () => {});
+		let a = () => {
+			i.disconnect();
+		};
+		e.addEventListener("abort", a, { once: !0 });
+		try {
+			e.throwIfAborted(), await i.connect(), await r.ready(), e.throwIfAborted();
+		} catch (e) {
+			throw await v(r), e;
+		} finally {
+			e.removeEventListener("abort", a);
+		}
+		try {
+			let t = await te(n, r, e);
+			try {
+				return e.throwIfAborted(), le(r, t);
+			} catch (e) {
+				throw await t.close(), e;
+			}
+		} catch (e) {
+			throw await v(r), e;
 		}
-		let e = (await import("ioredis")).default, n = new e(t.url);
-		return n.on("error", () => {}), u(n);
 	},
-	catch: (t) => new e({
+	catch: () => new e({
 		operation: "connect",
 		key: "",
-		cause: String(t)
+		cause: n.keyPrefix !== void 0 && typeof n.keyPrefix != "string" ? "Connection keyPrefix must be a string" : "Redis connection could not be opened"
 	})
-}), g = s.max([s.exponential("10 millis"), s.recurs(2)]), _ = class extends n.Service()("@voltro/RedisConnections") {}, v = a.effect(_, r.gen(function* () {
-	let e = yield* r.scope, t = yield* l.make(i.empty()), n = (e) => m(e);
-	return {
-		client: (a) => l.modifyEffect(t, (t) => {
-			let s = i.get(t, a);
-			return o.isSome(s) ? r.succeed([s.value, t]) : n(a).pipe(r.flatMap(h), r.tap((t) => c.addFinalizer(e, r.promise(() => t.close().catch(() => void 0)))), r.map((e) => [e, i.set(t, a, e)]));
-		}),
-		config: n
-	};
-}));
-//#endregion
-export { _ as RedisConnections, g as commandRetry, h as connect, m as connectionConfig, v as layerConnections };
+}).pipe(H.map((e) => t(e, n.keyPrefix))), fe = G.max([G.exponential("10 millis"), G.recurs(2)]), $ = class extends V.Service()("@voltro/RedisConnections") {}, pe = U.effect($, H.suspend(() => T()).pipe(H.orDie, H.map((e) => e.redis)));
+export { R as CACHE_ATOMIC_SCRIPT, re as CACHE_FENCE_RETENTION_MS, ie as CacheAtomicProtocolError, ee as ConnectionRegistry, $ as RedisConnections, i as byTenant, ae as cacheAtomicArray, oe as cacheAtomicComponent, se as cacheAtomicKeys, ce as cacheAtomicMember, O as cacheAtomicMembership, k as cacheAtomicRoot, A as cacheAtomicScanPage, j as cacheAtomicSnapshot, M as cacheAtomicTtl, N as cacheAtomicValueSnapshots, fe as commandRetry, de as connect, x as connectRedisSubscriber, Q as connectionConfig, a as connectionDefinitionsProblem, s as declaredConnectionEnv, P as decodeCacheAtomicCommand, F as decodeCacheAtomicPolicy, I as decodeCacheAtomicReply, c as dynamic, r as dynamicAnalytics, l as dynamicNats, n as dynamicSql, S as dynamicStorage, u as env, L as isCacheAtomicRead, w as layerConfiguredConnections, pe as layerConnections, T as makeConnectionRegistry, d as memory, m as roundRobin, h as shardBy, C as withConnectionRegistryConfigProvider };

package/dist/connectionAnalyticsConfig.js

@@ -0,0 +1,152 @@
+import { connectionDefinitionsProblem as e, connectionMetadataProblem as t } from "./connectionDefinitions.js";
+import { Config as n, ConfigProvider as r, Effect as i, Option as a } from "effect";
+// src/connectionAnalyticsConfig.ts
+var o = (e, t = {}) => {
+	let n = t.ttlMs ?? 6e4;
+	if (typeof e != "function" || !Number.isSafeInteger(n) || n <= 0) throw Error("Dynamic analytics requires a resolver and positive ttlMs");
+	return Object.freeze({
+		_tag: "DynamicAnalyticsConnection",
+		resolve: e,
+		ttlMs: n
+	});
+}, s = [
+	"url",
+	"username",
+	"password",
+	"token",
+	"apiUrl",
+	"apiKey",
+	"host"
+], c = {
+	duckdb: [
+		"path",
+		"mirrorTables",
+		"mirrorPrimaryKey"
+	],
+	clickhouse: [
+		"url",
+		"username",
+		"password",
+		"database",
+		"table",
+		"batch",
+		"mirrorTables",
+		"mirrorPrimaryKey"
+	],
+	tinybird: [
+		"token",
+		"apiUrl",
+		"region",
+		"datasource",
+		"pipes"
+	],
+	posthog: [
+		"apiKey",
+		"host",
+		"batch"
+	]
+}, l = [
+	"provider",
+	"tls",
+	"persistence",
+	"keyPrefix",
+	"allowSharedNamespace",
+	"region",
+	"label",
+	"acl",
+	"source"
+], u = (e) => typeof e == "object" && !!e && !Array.isArray(e), d = (e) => u(e) && e._tag === "ConnectionEnv" && typeof e.name == "string" && /^[A-Z][A-Z0-9_]*$/.test(e.name), f = (e) => typeof e == "string" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(e), p = (e) => {
+	let n = e.provider;
+	if (typeof n != "string" || !Object.hasOwn(c, n)) return "Analytics requires an implemented provider";
+	let r = c[n];
+	if (Object.keys(e).some((e) => !r.includes(e) && !l.includes(e))) return "Analytics options must belong to the selected provider";
+	let i = t(e);
+	if (i) return i;
+	if (e.persistence !== void 0 && ![
+		"required",
+		"optional",
+		"none"
+	].includes(String(e.persistence))) return "Analytics persistence must be required, optional or none";
+	for (let t of [
+		"database",
+		"table",
+		"datasource",
+		"mirrorPrimaryKey"
+	]) if (e[t] !== void 0 && !f(e[t])) return "Analytics SQL and datasource names must be identifiers";
+	if (e.mirrorTables !== void 0 && (!Array.isArray(e.mirrorTables) || !e.mirrorTables.every(f))) return "Analytics mirror tables must be identifiers";
+	if (e.pipes !== void 0) {
+		let t = e.pipes;
+		if (!u(t) || Object.keys(t).some((e) => ![
+			"aggregate",
+			"timeseries",
+			"topN"
+		].includes(e)) || Object.values(t).some((e) => e !== void 0 && !f(e))) return "Tinybird pipes must name implemented read capabilities";
+	}
+	let a = e.batch;
+	if (a !== void 0 && a !== !1 && (!u(a) || Object.keys(a).some((e) => !["maxSize", "flushIntervalMs"].includes(e)) || Object.values(a).some((e) => e !== void 0 && (typeof e != "number" || !Number.isSafeInteger(e) || e <= 0)))) return "Analytics batch limits must be positive safe integers";
+	if (a === !1 && n !== "clickhouse") return "Only ClickHouse accepts batch false";
+	if (e.source !== void 0 && ![
+		"config",
+		"environment",
+		"override"
+	].includes(String(e.source))) return "Analytics source metadata is invalid";
+}, m = (e) => {
+	if (!u(e)) return "Analytics declarations must be named objects";
+	if ("_tag" in e) return e._tag === "DynamicAnalyticsConnection" && typeof e.resolve == "function" && typeof e.ttlMs == "number" && Number.isSafeInteger(e.ttlMs) && e.ttlMs > 0 ? void 0 : "Dynamic analytics requires a resolver and positive ttlMs";
+	let t = p(e);
+	if (t) return t;
+	for (let t of s) if (e[t] !== void 0 && !d(e[t])) return "Analytics endpoints and credentials must use env() declarations";
+	if (e.path !== void 0 && typeof e.path != "string" && !d(e.path)) return "DuckDB path must be a string or env() declaration";
+	if (e.provider === "clickhouse" && !d(e.url)) return "ClickHouse requires a declared URL";
+	if (e.provider === "tinybird" && !d(e.token)) return "Tinybird requires a declared token";
+	if (e.provider === "posthog" && !d(e.apiKey)) return "PostHog requires a declared API key";
+}, h = (e) => {
+	if (!u(e)) return "Analytics configuration must be a named object";
+	let t = p(e);
+	if (t) return t;
+	for (let t of [...s, "path"]) if (e[t] !== void 0 && (typeof e[t] != "string" || !e[t].trim())) return "Analytics endpoints, credentials and paths must be nonempty strings";
+	for (let t of [
+		"url",
+		"apiUrl",
+		"host"
+	]) if (e[t] !== void 0) try {
+		let n = new URL(String(e[t]));
+		if (!["http:", "https:"].includes(n.protocol) || n.username || n.password || n.search || n.hash) return "Analytics endpoints require HTTP(S) without credentials or query";
+		if (e.tls === "required" && n.protocol !== "https:") return "Analytics TLS policy requires HTTPS";
+	} catch {
+		return "Analytics endpoints must be valid HTTP(S) URLs";
+	}
+	if (e.provider === "clickhouse" && !e.url) return "ClickHouse requires a resolved URL";
+	if (e.provider === "tinybird" && !e.token) return "Tinybird requires a resolved token";
+	if (e.provider === "posthog" && !e.apiKey) return "PostHog requires a resolved API key";
+}, g = (e, t) => {
+	let n = e.replace(/^analytics:/, ""), r = Object.keys(t.analytics ?? {});
+	return n || t.defaults?.analytics || (r.length === 1 ? r[0] : "");
+}, _ = (t, o, c) => i.gen(function* () {
+	let l = e(o);
+	if (l) return yield* i.fail(new n.ConfigError(new r.SourceError({ message: l })));
+	if (t !== "analytics:" && !/^analytics:[A-Za-z][A-Za-z0-9_-]*$/.test(t)) return yield* i.fail(new n.ConfigError(new r.SourceError({ message: "Analytics requires an analytics:name reference" })));
+	let u = g(t, o), f = o.analytics ?? {}, p = Object.hasOwn(f, u) ? f[u] : void 0;
+	if (p === void 0) return yield* i.fail(new n.ConfigError(new r.SourceError({ message: `Unknown analytics connection ${u || "(default)"}. Known names: ${Object.keys(f).sort().join(", ")}` })));
+	let m;
+	if ("_tag" in p) {
+		if (!c?.tenantId) return yield* i.fail(new n.ConfigError(new r.SourceError({ message: "Dynamic analytics requires tenantId" })));
+		m = { ...yield* p.resolve(Object.freeze({ tenantId: c.tenantId })) };
+	} else m = { ...p };
+	let _ = !1, v = `CONNECTIONS_ANALYTICS_${u.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}`;
+	for (let e of [
+		...s,
+		"path",
+		"keyPrefix",
+		"region"
+	]) {
+		let t = e.replace(/[A-Z]/g, (e) => `_${e}`).toUpperCase(), r = yield* n.String(`${v}_${t}`).pipe(n.option);
+		a.isSome(r) ? (_ = !0, m[e] = r.value) : d(m[e]) && (m[e] = yield* n.String(m[e].name));
+	}
+	let y = h(m);
+	return y ? yield* i.fail(new n.ConfigError(new r.SourceError({ message: y }))) : {
+		...m,
+		source: _ ? "override" : "config"
+	};
+});
+export { h as analyticsConfigProblem, _ as analyticsConnectionConfig, g as analyticsConnectionName, m as analyticsDefinitionProblem, o as dynamicAnalytics };

package/dist/connectionConfigError.js

@@ -0,0 +1,10 @@
+import { Config as e, ConfigProvider as t } from "effect";
+// src/connectionConfigError.ts
+var n = {
+	redis: "Dynamic connection credentials could not be resolved",
+	nats: "Dynamic connection credentials could not be resolved",
+	storage: "Dynamic storage credentials could not be resolved",
+	analytics: "Dynamic analytics credentials could not be resolved",
+	sql: "Dynamic SQL credentials could not be resolved"
+}, r = (r, i) => r._tag === "ConfigError" ? r : new e.ConfigError(new t.SourceError({ message: n[i] }));
+export { r as connectionConfigError };