@voltro/protocol 0.11.3 → 0.12.0

package/dist/rest.js

@@ -1,43 +1,58 @@
-import { a as e, i as t, o as n, r, t as i } from "./serverErrorBus-B3hDwGoL.js";
-import { s as a } from "./auth-DCE6m7Bo.js";
+import { a as e, i as t, o as n, r, t as i } from "./serverErrorBus-DhIVDkCi.js";
+import { s as a } from "./auth-S3cnL6Tz.js";
 import { Effect as o, Schema as s } from "effect";
 //#region src/publicApi.ts
-var c = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), l = (e, t) => t.path ?? `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`, u = (e, t) => {
-	let n = e.publicApi;
-	if (n === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
-	let r = c(e.kind, n), i = l(e.name, n), a = r === "GET" ? "query" : "body", o = s.Struct({ [a]: e.input }), u = (n.scopes ?? []).map((e) => f(e));
-	return p({
-		method: r,
-		path: i,
-		input: o,
+var c = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), l = (e, t) => t.path ?? `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`, u = (e, t, n) => {
+	let r = e.publicApi;
+	if (r === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
+	let i = c(e.kind, r), a = l(e.name, r), o = i === "GET" ? "query" : "body", u = s.Struct({ [o]: e.input }), d = (r.scopes ?? []).map((e) => f(e)), p = r.stream === "sse" && e.kind === "query" && n !== void 0, _ = p ? (e, t) => h((r) => n(e[o], t, (e) => {
+		r(g(String(e._tag ?? "message"), e));
+	})) : (e, n) => t(e[o], n);
+	return m({
+		method: i,
+		path: a,
+		input: u,
 		output: e.output,
-		handler: (e, n) => t(e[a], n),
-		...u.length > 0 ? { guards: u } : {},
-		...n.summary === void 0 ? {} : { summary: n.summary },
-		...n.description === void 0 ? {} : { description: n.description },
-		...n.deprecated === void 0 ? {} : { deprecated: n.deprecated },
-		...n.sunset === void 0 ? {} : { sunset: n.sunset }
+		handler: _,
+		...p ? { streaming: !0 } : {},
+		...d.length > 0 ? { guards: d } : {},
+		...r.summary === void 0 ? {} : { summary: r.summary },
+		...r.description === void 0 ? {} : { description: r.description },
+		...r.deprecated === void 0 ? {} : { deprecated: r.deprecated },
+		...r.sunset === void 0 ? {} : { sunset: r.sunset }
 	});
-}, d = (e) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => u(e.descriptor, e.invoke)).sort((e, t) => e.path.localeCompare(t.path)), f = (e) => (t) => {
+}, d = (e) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => u(e.descriptor, e.invoke, e.subscribe)).sort((e, t) => e.path.localeCompare(t.path)), f = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes(e) || n.includes("admin:full")))) return {
 		status: 403,
 		message: `Missing required scope: ${e}`
 	};
-}, p = (e) => e, m = (e, t, n) => ({
+}, p = (e) => (t) => {
+	let n = t.subject.scopes;
+	if (!(n && (n.includes("admin:full") || e.some((e) => n.includes(e))))) return {
+		status: 403,
+		message: `Missing required scope: one of ${e.join(", ")}`
+	};
+}, m = (e) => e, h = (e, t = {}) => ({
+	__voltroRestStream: !0,
+	stream: {
+		subscribe: e,
+		...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs }
+	}
+}), g = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, _ = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, v = (e, t, n) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t),
 	...n ? { headers: n } : {}
-}), h = (e) => {
+}), y = (e) => {
 	if (e.length === 0) return;
 	let t = new TextDecoder().decode(e);
 	if (t.trim() !== "") return JSON.parse(t);
-}, g = (e) => {
+}, b = (e) => {
 	let t = {};
 	for (let [n, r] of new URLSearchParams(e)) t[n] = r;
 	return t;
-}, _ = (e, t) => {
+}, x = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0), i = {};
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e];
@@ -51,22 +66,22 @@ var c = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), l = (e, t) => t.
 		}
 	}
 	return i;
-}, v = (e, t) => ({
-	query: g(e.query),
+}, S = (e, t) => ({
+	query: b(e.query),
 	params: t,
-	body: h(e.rawBody)
-}), y = /* @__PURE__ */ new Set([
+	body: y(e.rawBody)
+}), C = /* @__PURE__ */ new Set([
 	"POST",
 	"PUT",
 	"PATCH",
 	"DELETE"
-]), b = (c, l) => {
+]), w = (c, l) => {
 	let u = c.input ? s.decodeUnknown(c.input) : void 0, d = s.encode(c.output), f = {};
 	return c.deprecated !== void 0 && (f.Deprecation = "true"), c.sunset !== void 0 && (f.Sunset = c.sunset), {
 		method: "*",
 		path: c.path,
 		handle: async (s) => {
-			if (s.method.toUpperCase() !== c.method) return m(405, {
+			if (s.method.toUpperCase() !== c.method) return v(405, {
 				error: "Method Not Allowed",
 				allow: c.method
 			}, {
@@ -75,68 +90,74 @@ var c = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), l = (e, t) => t.
 			});
 			if (c.sunset !== void 0) {
 				let e = Date.parse(c.sunset);
-				if (!Number.isNaN(e) && Date.now() >= e) return m(410, {
+				if (!Number.isNaN(e) && Date.now() >= e) return v(410, {
 					error: "Gone",
 					...c.deprecated === void 0 ? {} : { replacement: c.deprecated }
 				}, f);
 			}
 			let p;
 			if (u) {
-				let e = v(s, _(c.path, s.path)), t = await o.runPromise(u(e).pipe(o.map((e) => ({
+				let e = S(s, x(c.path, s.path)), t = await o.runPromise(u(e).pipe(o.map((e) => ({
 					ok: !0,
 					value: e
 				})), o.catchAll((e) => o.succeed({
 					ok: !1,
 					cause: e
 				}))));
-				if (!t.ok) return m(400, {
+				if (!t.ok) return v(400, {
 					error: "Invalid request",
 					detail: String(t.cause)
 				}, f);
 				p = t.value;
 			}
-			let h = l.resolveSubject ? await l.resolveSubject(s.headers) : a(s.headers["x-tenant"] ?? null), g = {
-				subject: h,
+			let m = l.resolveSubject ? await l.resolveSubject(s.headers) : a(s.headers["x-tenant"] ?? null), h = {
+				subject: m,
 				headers: s.headers,
 				store: l.store
 			};
 			if (c.guards) for (let e of c.guards) {
-				let t = await e(g);
-				if (t) return m(t.status, { error: t.message }, f);
+				let t = await e(h);
+				if (t) return v(t.status, { error: t.message }, f);
 			}
-			let b = l.idempotency, x = b && y.has(c.method) ? s.headers[b.header.toLowerCase()] : void 0, S = b && x ? n(h.tenantId, c.method, c.path) : "";
-			if (b && x) {
-				let e = await r(b.store, S, x, b.ttlMs, Date.now());
-				if (e.kind === "replay") return m(e.response.status, e.response.body, {
+			let g = l.idempotency, y = g && C.has(c.method) ? s.headers[g.header.toLowerCase()] : void 0, b = g && y ? n(m.tenantId, c.method, c.path) : "";
+			if (g && y) {
+				let e = await r(g.store, b, y, g.ttlMs, Date.now());
+				if (e.kind === "replay") return v(e.response.status, e.response.body, {
 					...f,
 					"Idempotency-Replayed": "true"
 				});
-				if (e.kind === "conflict") return m(409, { error: "A request with this Idempotency-Key is already being processed" }, f);
+				if (e.kind === "conflict") return v(409, { error: "A request with this Idempotency-Key is already being processed" }, f);
 			}
 			try {
-				let t = await c.handler(p, g), n = await o.runPromise(d(t));
-				return b && x && await e(b.store, S, x, {
+				let t = await c.handler(p, h);
+				if (_(t)) return {
+					status: 200,
+					headers: f,
+					stream: t.stream
+				};
+				let n = await o.runPromise(d(t));
+				return g && y && await e(g.store, b, y, {
 					status: 200,
 					body: n
-				}, Date.now()), m(200, n, f);
+				}, Date.now()), v(200, n, f);
 			} catch (e) {
-				if (b && x && await t(b.store, S, x), typeof e == "object" && e && typeof e.status == "number") {
+				if (g && y && await t(g.store, b, y), typeof e == "object" && e && typeof e.status == "number") {
 					let t = e;
-					return m(t.status, { error: t.message ?? "Error" }, f);
+					return v(t.status, { error: t.message ?? "Error" }, f);
 				}
 				return i({
 					error: e,
 					source: "rest",
 					name: `${c.method} ${c.path}`,
 					fields: { status: 500 }
-				}), m(500, { error: "Internal Server Error" }, f);
+				}), v(500, { error: "Internal Server Error" }, f);
 			}
 		}
 	};
-}, x = (e, t = {}) => e.map((e) => b(e, t)), S = async (e, t) => {
+}, T = (e, t = {}) => e.map((e) => w(e, t)), E = async (e, t) => {
 	let n = await e[0].handle(t);
 	for (let r = 1; r < e.length && n.status === 405; r++) n = await e[r].handle(t);
 	return n;
 };
 //#endregion
-export { d as collectPublicApiRoutes, p as defineRestRoute, c as derivePublicMethod, l as derivePublicPath, S as dispatchSharedPath, _ as matchPathParams, u as publicApiRoute, f as requireScope, x as restRoutesToHttpRoutes };
+export { d as collectPublicApiRoutes, m as defineRestRoute, c as derivePublicMethod, l as derivePublicPath, E as dispatchSharedPath, _ as isRestStreamResponse, x as matchPathParams, u as publicApiRoute, p as requireAnyScope, f as requireScope, T as restRoutesToHttpRoutes, h as sse, g as sseFrame };

package/dist/session.js

@@ -1,4 +1,4 @@
-import { i as e } from "./auth-DCE6m7Bo.js";
+import { i as e } from "./auth-S3cnL6Tz.js";
 import { Schema as t } from "effect";
 import { createHmac as n, timingSafeEqual as r } from "node:crypto";
 //#region src/session.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/protocol",
-  "version": "0.11.3",
+  "version": "0.12.0",
   "description": "The Voltro wire + plugin contract — defineQuery/Mutation/Action/Stream, definePlugin, sessions / JWT / API-keys, and the RPC protocol.",
   "keywords": [
     "voltro",
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@effect/sql": "^0.51.1",
-    "@voltro/database": "0.11.3",
+    "@voltro/database": "0.12.0",
     "jose": "^6.2.3"
   },
   "peerDependencies": {