@voltro/protocol 0.69.0 → 0.70.0

package/dist/rest.js

@@ -1,56 +1,257 @@
 import { F as e, P as t } from "./scopes-DVtiKKsm.js";
-import { c as n, l as r, o as i, s as a, t as o } from "./serverErrorBus-BTnTpMqj.js";
-import { Effect as s, Schema as c } from "effect";
+import { _ as n, a as r, b as i, c as a, d as o, f as s, i as c, l, n as u, o as d, r as f, s as p, t as m, u as h, v as g, y as _ } from "./restFormat-Bnngx-zI.js";
+import { Effect as v, ParseResult as y, Schema as b } from "effect";
+import * as x from "effect/SchemaAST";
 //#region src/publicApi.ts
-var l = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), u = (e, t) => t.path ?? `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`, d = (e, t, n) => {
-	let r = e.publicApi;
-	if (r === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
-	let i = l(e.kind, r), a = u(e.name, r), o = i === "GET" ? "query" : "body", s = c.Struct({ [o]: e.input }), d = (r.scopes ?? []).map((e) => m(e)), f = r.stream === "sse" && e.kind === "query" && n !== void 0, p = f ? (e, t) => x((r) => n(e[o], t, (e) => {
-		r(S(String(e._tag ?? "message"), e));
-	})) : (e, n) => t(e[o], n);
-	return b({
-		method: i,
-		path: a,
-		input: s,
-		output: e.output,
-		handler: p,
-		...f ? { streaming: !0 } : {},
-		...d.length > 0 ? { guards: d } : {},
-		...r.summary === void 0 ? {} : { summary: r.summary },
-		...r.description === void 0 ? {} : { description: r.description },
-		...r.deprecated === void 0 ? {} : { deprecated: r.deprecated },
-		...r.sunset === void 0 ? {} : { sunset: r.sunset }
+var S = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), C = (e, t) => w(t.path ?? `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`), w = (e) => e.replace(/\{([A-Za-z0-9_]+)\}/g, ":$1"), T = (e) => [...e.matchAll(/:([A-Za-z0-9_]+)/g)].map((e) => e[1]), E = (e) => {
+	if (x.isUnion(e)) {
+		let t = e.types.filter((e) => !x.isUndefinedKeyword(e));
+		if (t.length === 1) return t[0];
+		if (t.length !== e.types.length) return x.Union.make(t);
+	}
+	return e;
+}, D = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, O = (e, t) => {
+	let n = E(t);
+	if (x.isRefinement(n) || x.isTransformation(n)) return O(e, n.from);
+	if (x.isUnion(n)) {
+		for (let t of n.types) {
+			let n = O(e, t);
+			if (n !== e) return n;
+		}
+		return e;
+	}
+	if (x.isTupleType(n)) {
+		let t = Array.isArray(e) ? e : e === void 0 ? void 0 : [e];
+		if (t === void 0) return e;
+		let r = n.rest[0]?.type ?? n.elements[0]?.type;
+		return r === void 0 ? t : t.map((e) => O(e, r));
+	}
+	if (typeof e != "string") return e;
+	if (x.isNumberKeyword(n)) return D.test(e.trim()) ? Number(e) : e;
+	if (x.isBooleanKeyword(n)) return e === "true" || e !== "false" && e;
+	if (x.isLiteral(n)) {
+		let t = n.literal;
+		return typeof t == "number" && D.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
+	}
+	return e;
+}, k = (e, t) => {
+	if (typeof e != "object" || !e || Array.isArray(e)) return e;
+	let n = E(x.encodedAST(t.ast));
+	if (!x.isTypeLiteral(n)) return e;
+	let r = { ...e };
+	for (let e of n.propertySignatures) {
+		let t = String(e.name);
+		t in r && (r[t] = O(r[t], e.type));
+	}
+	return r;
+}, A = (e) => {
+	let t = /* @__PURE__ */ new Set();
+	if (e === void 0) return t;
+	let n = (e) => {
+		if (x.isUnion(e)) {
+			for (let t of e.types) n(t);
+			return;
+		}
+		if (x.isTransformation(e)) {
+			n(e.from), n(e.to);
+			return;
+		}
+		if (x.isRefinement(e)) {
+			n(e.from);
+			return;
+		}
+		if (x.isTypeLiteral(e)) {
+			let n = e.propertySignatures.find((e) => e.name === "_tag");
+			n !== void 0 && x.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
+		}
+	};
+	return n(e.ast), t;
+}, j = (e, t, n) => {
+	if (n !== void 0) try {
+		let r = b.encodeUnknownSync(n)(e);
+		if (typeof r == "object" && r) return {
+			error: t,
+			...r
+		};
+	} catch {}
+	let r = { error: t };
+	for (let [t, n] of Object.entries(e)) t !== "stack" && t !== "_tag" && (r[t] = n);
+	return r;
+}, M = (e, t, n, r = []) => {
+	if (typeof e != "object" || !e) return e;
+	let i = e._tag;
+	if (typeof i != "string" || i === "ScopeError") return e;
+	if (A(t.error).has(i)) return new H(n.errorStatus?.[i] ?? 422, j(e, i, t.error));
+	let a = r.find((e) => A(e.schema).has(i));
+	if (a === void 0) return e;
+	let o = n.errorStatus?.[i] ?? a.rest?.status ?? 422, s = a.rest?.headers?.(e);
+	return new H(o, j(e, i, a.schema), s);
+}, ee = (e, t, n, r, i, a) => {
+	let o = M(e, t, n, r);
+	if (!(o instanceof H) || i.errors === "tagged" && i.encodeError === void 0) return o;
+	let { error: s, _tag: l, ...u } = o.body, d = typeof u.message == "string" ? u.message : typeof u.reason == "string" ? u.reason : "", f = c(i, {
+		status: o.status,
+		tag: s,
+		message: d,
+		fields: u
+	}, {
+		...a,
+		status: o.status
 	});
-}, f = (e) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => d(e.descriptor, e.invoke, e.subscribe)).sort((e, t) => e.path.localeCompare(t.path)), p = () => (e) => {
+	return new H(o.status, f.body, {
+		...o.headers ?? {},
+		...f.headers ?? {}
+	}, f.contentType);
+}, N = (e, t) => {
+	if (e === void 0) return;
+	let n = x.isUnion(e.ast) ? e.ast.types : [e.ast];
+	for (let e of n) {
+		let n = b.make(e);
+		if (A(n).has(t)) return n;
+	}
+}, P = (e) => e.split(".").map((e, t) => t === 0 ? e : e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_"), te = (e) => {
+	let t = E(x.encodedAST(e.ast));
+	return x.isTypeLiteral(t) ? new Set(t.propertySignatures.map((e) => String(e.name))) : void 0;
+}, ne = (e, t) => e === t || JSON.stringify(e) === JSON.stringify(t), re = (e, t) => {
+	let n = E(x.encodedAST(t.ast)), r = {}, i = x.isTypeLiteral(n) ? new Map(n.propertySignatures.map((e) => [String(e.name), e.type])) : /* @__PURE__ */ new Map();
+	for (let [t, n] of Object.entries(e)) {
+		let e = i.get(t);
+		r[t] = e === void 0 ? n : O(n, e);
+	}
+	return r;
+}, F = (e, t, n, i = {}) => {
+	let a = e.publicApi;
+	if (a === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
+	let s = l(i.profile, a.format), c = i.pluginErrors ?? [], u = S(e.kind, a), d = (e) => s.naming === "snake_case" ? o(e) : e, f = C(e.name, a), p = f.replace(/:([A-Za-z0-9_]+)/g, (e, t) => `:${d(t)}`), m = T(p), g = h(e.input, s), _ = te(g);
+	if (_ !== void 0) {
+		for (let t of m) if (!_.has(t)) throw Error(`publicApi: descriptor '${e.name}' — path '${f}' binds ':${t}', and the input declares no field of that name` + (_.size > 0 ? ` (fields: ${[..._].join(", ")})` : " (the input declares no fields)"));
+	}
+	let x = h(e.output, s), w = b.Struct({ value: g }), E = b.Struct({
+		query: b.Unknown,
+		params: b.Unknown,
+		body: b.Unknown
+	}), D = b.transformOrFail(E, w, {
+		strict: !1,
+		decode: (e, t, n) => {
+			let r = u === "GET" ? k(e.query, g) : e.body ?? {}, i = typeof e.params == "object" && e.params !== null ? re(e.params, g) : {};
+			if (typeof r != "object" || !r || Array.isArray(r)) return y.succeed({ value: r });
+			let a = r, o = Object.keys(i).filter((e) => e in a && !ne(a[e], i[e]));
+			if (o.length > 0) {
+				let t = u === "GET" ? "query string" : "body";
+				return y.fail(new y.Type(n, e, `${o.map((e) => `'${e}'`).join(", ")} ${o.length === 1 ? "is" : "are"} bound by the path and sent with another value in the ${t}`));
+			}
+			return y.succeed({ value: {
+				...a,
+				...i
+			} });
+		},
+		encode: (e) => y.succeed(e)
+	}), O = [...e.openAccess === void 0 ? [L()] : [], ...(a.scopes ?? []).map((e) => R(e))], j = (() => {
+		let t = e.source;
+		return typeof t == "string" ? t : Array.isArray(t) ? t[0] : void 0;
+	})(), M = (t, n = 200) => ({
+		tag: e.name,
+		method: t.method,
+		path: t.path,
+		query: t.query,
+		source: j,
+		status: n
+	}), F = a.stream === "sse" && e.kind === "query" && n !== void 0, I = b.encodeUnknown(x), z = F ? (e, t) => G((r) => n(e.value, t, (e) => {
+		r(K(String(e._tag ?? "message"), e));
+	})) : async (n, i) => {
+		let o;
+		try {
+			o = await t(n.value, i);
+		} catch (t) {
+			throw ee(t, e, a, c, s, M(i));
+		}
+		let l = await v.runPromise(I(o)), u = r(s, l, M(i));
+		return B(u.body, {
+			...u.headers === void 0 ? {} : { headers: u.headers },
+			...u.contentType === void 0 ? {} : { contentType: u.contentType }
+		});
+	}, V = e.error, H = [...A(V)], U = [];
+	for (let e of H) {
+		let t = N(V, e);
+		t !== void 0 && U.push({
+			status: a.errorStatus?.[e] ?? 422,
+			tag: e,
+			schema: t
+		});
+	}
+	for (let e of c) for (let t of A(e.schema)) {
+		if (H.includes(t)) continue;
+		let n = a.errorStatus?.[t] ?? e.rest?.status;
+		if (n === void 0) continue;
+		let r = N(e.schema, t) ?? e.schema;
+		U.push({
+			status: n,
+			tag: t,
+			schema: r
+		});
+	}
+	let q = a.security === !1 ? "none" : a.security ?? (e.openAccess === void 0 ? "required" : "optional"), J = {
+		tag: e.name,
+		kind: e.kind,
+		version: a.version ?? "v1",
+		security: q,
+		input: g,
+		pathParams: m,
+		output: x,
+		source: j,
+		errorResponses: U,
+		format: s
+	};
+	return W({
+		method: u,
+		path: p,
+		input: D,
+		output: b.Unknown,
+		handler: z,
+		...F ? { streaming: !0 } : {},
+		guards: O,
+		operationId: a.operationId ?? P(e.name),
+		tags: a.tags ?? [e.name.split(".")[0] ?? e.name],
+		projection: J,
+		...s.etag && u === "GET" && !F ? { etag: !0 } : {},
+		...a.example === void 0 ? {} : { example: a.example },
+		...a.summary === void 0 ? {} : { summary: a.summary },
+		...a.description === void 0 ? {} : { description: a.description },
+		...a.deprecated === void 0 ? {} : { deprecated: a.deprecated },
+		...a.sunset === void 0 ? {} : { sunset: a.sunset }
+	});
+}, I = (e, t = {}) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => F(e.descriptor, e.invoke, e.subscribe, t)).sort((e, t) => e.path.localeCompare(t.path)), L = () => (e) => {
 	if (e.subject.type === "anonymous") return {
 		status: 401,
 		message: e.subject.credentialRejected ?? "Authentication required"
 	};
-}, m = (e) => (t) => {
+}, R = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes(e) || n.includes("admin:full")))) return {
 		status: 403,
 		message: `Missing required scope: ${e}`
 	};
-}, h = (e) => (t) => {
+}, z = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes("admin:full") || e.some((e) => n.includes(e))))) return {
 		status: 403,
 		message: `Missing required scope: one of ${e.join(", ")}`
 	};
-}, g = (e, t = {}) => ({
+}, B = (e, t = {}) => ({
 	__voltroRestResponse: !0,
 	status: t.status ?? 200,
 	body: e,
-	...t.headers === void 0 ? {} : { headers: t.headers }
-}), _ = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, v = class extends Error {
+	...t.headers === void 0 ? {} : { headers: t.headers },
+	...t.contentType === void 0 ? {} : { contentType: t.contentType }
+}), V = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, H = class extends Error {
 	status;
 	body;
 	headers;
-	constructor(e, t, n) {
-		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n;
+	contentType;
+	constructor(e, t, n, r) {
+		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n, this.contentType = r;
 	}
-}, y = (e, t, n) => new v(e, t, n), b = (e) => {
+}, U = (e, t, n) => new H(e, t, n), W = (e) => {
 	if (e.version === void 0) return e;
 	if (!/^v\d+$/.test(e.version)) throw Error(`defineRestRoute(${e.method} ${e.path}): version "${e.version}" must be 'v' followed by digits — 'v1', 'v2', …`);
 	if ((/* @__PURE__ */ RegExp("^/v\\d+(/|$)")).test(e.path)) throw Error(`defineRestRoute(${e.method} ${e.path}): the path already starts with a version segment AND declares version: '${e.version}'. Pick one spelling — either bake the version into the path, or declare version: and keep the path bare ('/customers'). Both would mount '/${e.version}${e.path}', which is never what the author meant.`);
@@ -58,13 +259,13 @@ var l = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), u = (e, t) => t.
 		...e,
 		path: `/${e.version}${e.path}`
 	};
-}, x = (e, t = {}) => ({
+}, G = (e, t = {}) => ({
 	__voltroRestStream: !0,
 	stream: {
 		subscribe: e,
 		...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs }
 	}
-}), S = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, C = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, w = (e, t = {}) => ({
+}), K = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, q = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, J = (e, t = {}) => ({
 	__voltroRestBytes: !0,
 	byteStream: {
 		stream: e,
@@ -74,23 +275,49 @@ var l = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), u = (e, t) => t.
 	...t.contentType === void 0 ? {} : { contentType: t.contentType },
 	...t.status === void 0 ? {} : { status: t.status },
 	...t.headers === void 0 ? {} : { headers: t.headers }
-}), T = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, E = async (e) => {
+}), Y = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, ie = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(e));
 	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
-}, D = (e, t, n) => ({
+}, X = (e, t, n, r = "application/json; charset=utf-8") => ({
 	status: e,
-	contentType: "application/json; charset=utf-8",
+	contentType: r,
 	body: JSON.stringify(t),
 	...n ? { headers: n } : {}
-}), O = (e) => {
+}), Z = (e, t, n, r, i, a, o) => {
+	let s = e.projection;
+	if (s === void 0) return X(n, {
+		error: i,
+		...a
+	}, o);
+	let l = {
+		tag: s.tag,
+		method: t.method,
+		path: t.path,
+		query: t.query,
+		source: s.source,
+		status: n
+	}, u = c(s.format, {
+		status: n,
+		tag: r,
+		message: i,
+		fields: a
+	}, l);
+	return X(n, u.body, {
+		...o,
+		...u.headers ?? {}
+	}, u.contentType);
+}, ae = (e) => {
 	if (e.length === 0) return;
 	let t = new TextDecoder().decode(e);
 	if (t.trim() !== "") return JSON.parse(t);
-}, k = (e) => {
+}, oe = (e) => {
 	let t = {};
-	for (let [n, r] of new URLSearchParams(e)) t[n] = r;
+	for (let [n, r] of new URLSearchParams(e)) {
+		let e = t[n];
+		e === void 0 ? t[n] = r : Array.isArray(e) ? e.push(r) : t[n] = [e, r];
+	}
 	return t;
-}, A = (e, t) => {
+}, Q = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0), i = {};
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e];
@@ -104,153 +331,173 @@ var l = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), u = (e, t) => t.
 		}
 	}
 	return i;
-}, j = (e, t) => ({
-	query: k(e.query),
+}, se = (e, t) => {
+	let n = e.path.split("/"), r = n[n.length - 1] === "*", i = r ? n.slice(0, -1) : n, a = t.split("/");
+	if (a.length < i.length) return !1;
+	for (let e = 0; e < i.length; e++) {
+		let t = i[e], n = a[e];
+		if (t.startsWith(":")) {
+			if (n.length === 0) return !1;
+		} else if (t !== n) return !1;
+	}
+	return a.length === i.length ? !0 : e.match === "exact" && !r ? !1 : a.slice(i.length).some((e) => e.length > 0);
+}, ce = (e, t) => ({
+	query: oe(e.query),
 	params: t,
-	body: O(e.rawBody)
-}), M = /* @__PURE__ */ new Set([
+	body: ae(e.rawBody)
+}), $ = /* @__PURE__ */ new Set([
 	"POST",
 	"PUT",
 	"PATCH",
 	"DELETE"
-]), N = (l, u) => {
-	let d = l.input ? c.decodeUnknown(l.input) : void 0, f = c.encode(l.output), p = {}, m = (e) => e.replace(/\/$/, "").split("/").length, h = m(l.path);
-	return l.deprecated !== void 0 && (p.Deprecation = "true"), l.sunset !== void 0 && (p.Sunset = l.sunset), {
+]), le = (e, n, r, i, a) => {
+	if (e instanceof H) return X(e.status, e.body, {
+		...i,
+		...e.headers
+	}, e.contentType);
+	if (typeof e == "object" && e) {
+		let o = e;
+		if (typeof o.status == "number") return Z(r, a, o.status, typeof o._tag == "string" ? o._tag : "Error", typeof o.message == "string" ? o.message : "Error", {}, { ...i });
+		if (o._tag === "Unauthenticated" || e instanceof t) return Z(r, a, 401, "Unauthorized", typeof o.reason == "string" ? o.reason : "Authentication required", {}, { ...i });
+		if (o._tag === "ScopeError") {
+			let e = n.type === "anonymous" ? 401 : 403;
+			return Z(r, a, e, e === 401 ? "Unauthorized" : "Forbidden", typeof o.message == "string" ? o.message : "Forbidden", {}, { ...i });
+		}
+	}
+	return s({
+		error: e,
+		source: "rest",
+		name: `${r.method} ${r.path}`,
+		fields: { status: 500 }
+	}), {
+		...Z(r, a, 500, "InternalServerError", "Internal Server Error", {}, { ...i }),
+		cause: e
+	};
+}, ue = (r, a) => {
+	let o = r.input ? b.decodeUnknown(r.input) : void 0, s = b.encode(r.output), c = {}, l = (e) => e.replace(/\/$/, "").split("/").length, u = l(r.path);
+	return r.deprecated !== void 0 && (c.Deprecation = "true"), r.sunset !== void 0 && (c.Sunset = r.sunset), {
 		method: "*",
-		path: l.path,
-		...l.maxBodyBytes === void 0 ? {} : { maxBodyBytes: l.maxBodyBytes },
-		handle: async (c) => {
-			if (!l.path.endsWith("/*") && m(c.path) !== h) return D(404, { error: "Not Found" }, p);
-			let y = c.method.toUpperCase();
-			if (!(y === l.method || y === "HEAD" && l.method === "GET")) return D(405, {
-				error: "Method Not Allowed",
-				allow: l.method
-			}, {
-				...p,
-				Allow: l.method
+		path: r.path,
+		match: r.path.endsWith("/*") ? "prefix" : "exact",
+		...r.maxBodyBytes === void 0 ? {} : { maxBodyBytes: r.maxBodyBytes },
+		handle: async (d) => {
+			if (!r.path.endsWith("/*") && l(d.path) !== u) return Z(r, d, 404, "NotFound", "Not Found", {}, { ...c });
+			let f = d.method.toUpperCase();
+			if (!(f === r.method || f === "HEAD" && r.method === "GET")) return Z(r, d, 405, "MethodNotAllowed", "Method Not Allowed", { allow: r.method }, {
+				...c,
+				Allow: r.method
 			});
-			if (l.sunset !== void 0) {
-				let e = Date.parse(l.sunset);
-				if (!Number.isNaN(e) && Date.now() >= e) return D(410, {
-					error: "Gone",
-					...l.version === void 0 ? {} : { version: l.version },
-					...l.deprecated === void 0 ? {} : { replacement: l.deprecated }
-				}, p);
+			if (r.sunset !== void 0) {
+				let e = Date.parse(r.sunset);
+				if (!Number.isNaN(e) && Date.now() >= e) return Z(r, d, 410, "Gone", "Gone", {
+					...r.version === void 0 ? {} : { version: r.version },
+					...r.deprecated === void 0 ? {} : { replacement: r.deprecated }
+				}, { ...c });
 			}
-			let b;
-			if (d) {
-				let e = j(c, A(l.path, c.path)), t = await s.runPromise(d(e).pipe(s.map((e) => ({
+			let p;
+			if (o) {
+				let e = ce(d, Q(r.path, d.path)), t = await v.runPromise(o(e).pipe(v.map((e) => ({
 					ok: !0,
 					value: e
-				})), s.catchAll((e) => s.succeed({
+				})), v.catchAll((e) => v.succeed({
 					ok: !1,
 					cause: e
 				}))));
-				if (!t.ok) return D(400, {
-					error: "Invalid request",
-					detail: String(t.cause)
-				}, p);
-				b = t.value;
+				if (!t.ok) return Z(r, d, 400, "InvalidRequest", "Invalid request", { detail: String(t.cause) }, { ...c });
+				p = t.value;
 			}
-			let x;
+			let m;
 			try {
-				x = u.resolveSubject ? await u.resolveSubject(c.headers) : e(c.headers["x-tenant"] ?? null);
+				m = a.resolveSubject ? await a.resolveSubject(d.headers) : e(d.headers["x-tenant"] ?? null);
 			} catch (e) {
 				if (e instanceof t || typeof e == "object" && e && e._tag === "Unauthenticated") {
 					let t = e.reason;
-					return D(401, { error: t ?? "Authentication required" }, p);
+					return Z(r, d, 401, "Unauthorized", t ?? "Authentication required", {}, { ...c });
 				}
 				throw e;
 			}
-			let S = u.buildContext ? await u.buildContext(x, c.headers) : void 0, w = typeof S == "object" && S && "store" in S ? S.store : u.store, O = {
-				subject: x,
-				headers: c.headers,
-				store: w,
-				method: y,
-				path: c.path,
-				query: c.query,
-				rawBody: c.rawBody,
-				...S === void 0 ? {} : { app: S }
+			let h;
+			try {
+				h = a.buildContext ? await a.buildContext(m, d.headers) : void 0;
+			} catch (e) {
+				return le(e, m, r, c, d);
+			}
+			let y = typeof h == "object" && h && "store" in h ? h.store : a.store, b = {
+				subject: m,
+				headers: d.headers,
+				store: y,
+				method: f,
+				path: d.path,
+				query: d.query,
+				rawBody: d.rawBody,
+				...h === void 0 ? {} : { app: h }
 			};
-			if (l.guards) for (let e of l.guards) {
-				let t = await e(O);
-				if (t) return D(t.status, { error: t.message }, p);
+			if (r.guards) for (let e of r.guards) {
+				let t = await e(b);
+				if (t) return Z(r, d, t.status, t.status === 401 ? "Unauthorized" : t.status === 403 ? "Forbidden" : "GuardRejected", t.message, {}, { ...c });
 			}
-			let k = u.idempotency, N = k && M.has(l.method) ? c.headers[k.header.toLowerCase()] : void 0, P = k && N ? r(x.tenantId, l.method, l.path) : "";
-			if (k && N) {
-				let e = await i(k.store, P, N, k.ttlMs, Date.now());
-				if (e.kind === "replay") return D(e.response.status, e.response.body, {
-					...p,
+			let x = a.idempotency, S = x && $.has(r.method) ? d.headers[x.header.toLowerCase()] : void 0, C = x && S ? i(m.tenantId, r.method, r.path) : "";
+			if (x && S) {
+				let e = await n(x.store, C, S, x.ttlMs, Date.now());
+				if (e.kind === "replay") return X(e.response.status, e.response.body, {
+					...c,
 					"Idempotency-Replayed": "true"
 				});
-				if (e.kind === "conflict") return D(409, { error: "A request with this Idempotency-Key is already being processed" }, p);
+				if (e.kind === "conflict") return Z(r, d, 409, "Conflict", "A request with this Idempotency-Key is already being processed", {}, { ...c });
 			}
 			try {
-				let e = await l.handler(b, O);
-				if (C(e) || T(e)) return k && N && await a(k.store, P, N), T(e) ? {
+				let e = await r.handler(p, b);
+				if (q(e) || Y(e)) return x && S && await g(x.store, C, S), Y(e) ? {
 					status: e.status ?? 200,
 					headers: {
-						...p,
+						...c,
 						...e.headers
 					},
 					byteStream: e.byteStream,
 					...e.contentType === void 0 ? {} : { contentType: e.contentType }
 				} : {
 					status: 200,
-					headers: p,
+					headers: c,
 					stream: e.stream
 				};
-				let t = _(e) ? e : g(e), r = await s.runPromise(f(t.body)), i = {
-					...p,
+				let t = V(e) ? e : B(e), n = await v.runPromise(s(t.body)), i = {
+					...c,
 					...t.headers
 				};
-				if (k && N && await n(k.store, P, N, {
+				if (x && S && await _(x.store, C, S, {
 					status: t.status,
-					body: r
-				}, Date.now()), l.etag === !0 && l.method === "GET") {
-					let e = `W/"${await E(JSON.stringify(r))}"`, n = c.headers["if-none-match"];
-					return n !== void 0 && n.split(",").some((t) => t.trim() === e) ? {
+					body: n
+				}, Date.now()), r.etag === !0 && r.method === "GET") {
+					let e = `W/"${await ie(JSON.stringify(n))}"`, r = d.headers["if-none-match"];
+					return r !== void 0 && r.split(",").some((t) => t.trim() === e) ? {
 						status: 304,
 						headers: {
-							...p,
+							...c,
 							ETag: e
 						}
-					} : D(t.status, r, {
+					} : X(t.status, n, {
 						...i,
 						ETag: e
-					});
+					}, t.contentType);
 				}
 				return t.status === 204 || t.status === 304 ? {
 					status: t.status,
 					headers: i
-				} : D(t.status, r, i);
+				} : X(t.status, n, i, t.contentType);
 			} catch (e) {
-				if (k && N && await a(k.store, P, N), e instanceof v) return D(e.status, e.body, {
-					...p,
-					...e.headers
-				});
-				if (typeof e == "object" && e && typeof e.status == "number") {
-					let t = e;
-					return D(t.status, { error: t.message ?? "Error" }, p);
-				}
-				return o({
-					error: e,
-					source: "rest",
-					name: `${l.method} ${l.path}`,
-					fields: { status: 500 }
-				}), D(500, { error: "Internal Server Error" }, p);
+				return x && S && await g(x.store, C, S), le(e, m, r, c, d);
 			}
 		}
 	};
-}, P = (e, t = {}) => {
+}, de = (e, t = {}) => {
 	if (t.idempotency !== void 0) {
-		for (let t of e) if (t.streaming === !0 && M.has(t.method)) throw Error(`REST route ${t.method} ${t.path} declares \`streaming: true\` on a method the idempotency binding claims (${[...M].join("/")}). A stream cannot complete an idempotency claim — there is no replayable body to cache — so a retried request would 409 until the claim's TTL. Either serve the stream on GET, or scope the idempotency binding away from this app's streaming routes.`);
+		for (let t of e) if (t.streaming === !0 && $.has(t.method)) throw Error(`REST route ${t.method} ${t.path} declares \`streaming: true\` on a method the idempotency binding claims (${[...$].join("/")}). A stream cannot complete an idempotency claim — there is no replayable body to cache — so a retried request would 409 until the claim's TTL. Either serve the stream on GET, or scope the idempotency binding away from this app's streaming routes.`);
 	}
-	return e.map((e) => N(e, t));
-}, F = async (e, t) => {
+	return e.map((e) => ue(e, t));
+}, fe = async (e, t) => {
 	let n = await e[0].handle(t);
 	for (let r = 1; r < e.length && n.status === 405; r++) n = await e[r].handle(t);
 	return n;
 };
 //#endregion
-export { v as RestRouteError, w as bytes, f as collectPublicApiRoutes, b as defineRestRoute, l as derivePublicMethod, u as derivePublicPath, F as dispatchSharedPath, T as isRestByteResponse, _ as isRestResponse, C as isRestStreamResponse, A as matchPathParams, d as publicApiRoute, h as requireAnyScope, p as requireAuthenticated, m as requireScope, g as response, y as restError, P as restRoutesToHttpRoutes, x as sse, S as sseFrame };
+export { m as JSONAPI_MEDIA_TYPE, u as PROBLEM_JSON, f as REST_PROFILE_NAMES, H as RestRouteError, J as bytes, k as coerceQueryObject, O as coerceQueryValue, I as collectPublicApiRoutes, A as declaredErrorTags, W as defineRestRoute, S as derivePublicMethod, C as derivePublicPath, fe as dispatchSharedPath, c as encodeRestError, r as encodeRestSuccess, N as errorMemberSchema, Y as isRestByteResponse, V as isRestResponse, q as isRestStreamResponse, Q as matchPathParams, d as nextLink, w as normalizePathParams, P as operationIdOf, T as pathParamNames, p as problemDetails, a as problemTypeOf, M as projectedFailure, F as publicApiRoute, z as requireAnyScope, L as requireAuthenticated, R as requireScope, l as resolveRestFormat, B as response, U as restError, de as restRoutesToHttpRoutes, h as restViewSchema, se as routeAcceptsPath, G as sse, K as sseFrame, o as toSnakeCase };