@voltro/protocol 0.69.1 → 0.71.0

package/dist/rest.js

@@ -1,74 +1,100 @@
-import { F as e, P as t } from "./scopes-DVtiKKsm.js";
-import { c as n, l as r, o as i, s as a, t as o } from "./serverErrorBus-BTnTpMqj.js";
-import { Effect as s, Schema as c } from "effect";
-import * as l from "effect/SchemaAST";
+import { F as e, I as t } from "./scopes-CW9_LbDO.js";
+import { C as n, S as r, T as i, _ as a, a as o, c as s, d as c, f as l, i as u, l as d, n as f, o as p, r as m, s as h, t as g, u as _, v, w as y } from "./restFormat-ChSVyufA.js";
+import { Effect as b, ParseResult as x, Schema as S } from "effect";
+import * as C from "effect/SchemaAST";
 //#region src/publicApi.ts
-var u = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), d = (e, t) => t.path ?? `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`, f = (e) => {
-	if (l.isUnion(e)) {
-		let t = e.types.filter((e) => !l.isUndefinedKeyword(e));
+var w = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? D("", t, n).method : void 0) ?? (e === "query" ? "GET" : "POST"), T = (e, t, n) => O(t.path ?? (t.resource !== void 0 && n !== void 0 ? D(e, t, n).path : `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`)), ee = (e) => {
+	let t = e.split("/").pop() ?? e;
+	return t.endsWith("ies") ? `${t.slice(0, -3)}y` : t.endsWith("ses") || t.endsWith("xes") ? t.slice(0, -2) : t.endsWith("s") ? t.slice(0, -1) : t;
+}, E = (e, t) => {
+	let n = t != null && (typeof t == "object" || typeof t == "function") && "ast" in t ? z(t) : void 0;
+	if (n === void 0) return;
+	let r = `${ee(e)}Id`;
+	return n.has(r) ? r : n.has("id") ? "id" : void 0;
+}, D = (e, t, n) => {
+	let r = (t.resource ?? "").replace(/^\/+|\/+$/g, ""), i = `/${t.version ?? "v1"}/${r}`, a = E(r, n.input), o = a === void 0 ? i : `${i}/:${a}`, s = e.split(".").pop() ?? e, c = n.target?.op;
+	return n.kind === "query" || n.kind === "stream" ? {
+		method: "GET",
+		path: o
+	} : n.kind === "mutation" && c === "insert" ? {
+		method: "POST",
+		path: i
+	} : n.kind === "mutation" && c === "update" ? {
+		method: a === void 0 ? "POST" : "PATCH",
+		path: o
+	} : n.kind === "mutation" && c === "delete" ? {
+		method: a === void 0 ? "POST" : "DELETE",
+		path: o
+	} : {
+		method: "POST",
+		path: `${o}/${s}`
+	};
+}, O = (e) => e.replace(/\{([A-Za-z0-9_]+)\}/g, ":$1"), k = (e) => [...e.matchAll(/:([A-Za-z0-9_]+)/g)].map((e) => e[1]), A = (e) => {
+	if (C.isUnion(e)) {
+		let t = e.types.filter((e) => !C.isUndefinedKeyword(e));
 		if (t.length === 1) return t[0];
-		if (t.length !== e.types.length) return l.Union.make(t);
+		if (t.length !== e.types.length) return C.Union.make(t);
 	}
 	return e;
-}, p = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, m = (e, t) => {
-	let n = f(t);
-	if (l.isRefinement(n) || l.isTransformation(n)) return m(e, n.from);
-	if (l.isUnion(n)) {
+}, j = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, M = (e, t) => {
+	let n = A(t);
+	if (C.isRefinement(n) || C.isTransformation(n)) return M(e, n.from);
+	if (C.isUnion(n)) {
 		for (let t of n.types) {
-			let n = m(e, t);
+			let n = M(e, t);
 			if (n !== e) return n;
 		}
 		return e;
 	}
-	if (l.isTupleType(n)) {
+	if (C.isTupleType(n)) {
 		let t = Array.isArray(e) ? e : e === void 0 ? void 0 : [e];
 		if (t === void 0) return e;
 		let r = n.rest[0]?.type ?? n.elements[0]?.type;
-		return r === void 0 ? t : t.map((e) => m(e, r));
+		return r === void 0 ? t : t.map((e) => M(e, r));
 	}
 	if (typeof e != "string") return e;
-	if (l.isNumberKeyword(n)) return p.test(e.trim()) ? Number(e) : e;
-	if (l.isBooleanKeyword(n)) return e === "true" || e !== "false" && e;
-	if (l.isLiteral(n)) {
+	if (C.isNumberKeyword(n)) return j.test(e.trim()) ? Number(e) : e;
+	if (C.isBooleanKeyword(n)) return e === "true" || e !== "false" && e;
+	if (C.isLiteral(n)) {
 		let t = n.literal;
-		return typeof t == "number" && p.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
+		return typeof t == "number" && j.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
 	}
 	return e;
-}, h = (e, t) => {
+}, N = (e, t) => {
 	if (typeof e != "object" || !e || Array.isArray(e)) return e;
-	let n = f(l.encodedAST(t.ast));
-	if (!l.isTypeLiteral(n)) return e;
+	let n = A(C.encodedAST(t.ast));
+	if (!C.isTypeLiteral(n)) return e;
 	let r = { ...e };
 	for (let e of n.propertySignatures) {
 		let t = String(e.name);
-		t in r && (r[t] = m(r[t], e.type));
+		t in r && (r[t] = M(r[t], e.type));
 	}
 	return r;
-}, g = (e) => {
+}, P = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	if (e === void 0) return t;
 	let n = (e) => {
-		if (l.isUnion(e)) {
+		if (C.isUnion(e)) {
 			for (let t of e.types) n(t);
 			return;
 		}
-		if (l.isTransformation(e)) {
+		if (C.isTransformation(e)) {
 			n(e.from), n(e.to);
 			return;
 		}
-		if (l.isRefinement(e)) {
+		if (C.isRefinement(e)) {
 			n(e.from);
 			return;
 		}
-		if (l.isTypeLiteral(e)) {
+		if (C.isTypeLiteral(e)) {
 			let n = e.propertySignatures.find((e) => e.name === "_tag");
-			n !== void 0 && l.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
+			n !== void 0 && C.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
 		}
 	};
 	return n(e.ast), t;
-}, _ = (e, t, n) => {
+}, F = (e, t, n) => {
 	if (n !== void 0) try {
-		let r = c.encodeUnknownSync(n)(e);
+		let r = S.encodeUnknownSync(n)(e);
 		if (typeof r == "object" && r) return {
 			error: t,
 			...r
@@ -77,69 +103,224 @@ var u = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), d = (e, t) => t.
 	let r = { error: t };
 	for (let [t, n] of Object.entries(e)) t !== "stack" && t !== "_tag" && (r[t] = n);
 	return r;
-}, v = (e, t, n) => {
+}, I = (e, t, n, r = []) => {
 	if (typeof e != "object" || !e) return e;
-	let r = e._tag;
-	return typeof r != "string" || r === "ScopeError" || !g(t.error).has(r) ? e : new E(n.errorStatus?.[r] ?? 422, _(e, r, t.error));
-}, y = (e, t, n) => {
-	let r = e.publicApi;
-	if (r === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
-	let i = u(e.kind, r), a = d(e.name, r), o = i === "GET" ? "query" : "body", s = c.Struct({ [o]: e.input }), l = i === "GET" ? c.transform(c.Struct({ query: c.Unknown }), s, {
+	let i = e._tag;
+	if (typeof i != "string" || i === "ScopeError") return e;
+	if (P(t.error).has(i)) return new Y(n.errorStatus?.[i] ?? 422, F(e, i, t.error));
+	let a = r.find((e) => P(e.schema).has(i));
+	if (a === void 0) return e;
+	let o = n.errorStatus?.[i] ?? a.rest?.status ?? 422, s = a.rest?.headers?.(e);
+	return new Y(o, F(e, i, a.schema), s);
+}, te = (e, t, n, r, i, a) => {
+	let o = I(e, t, n, r);
+	if (!(o instanceof Y) || i.errors === "tagged" && i.encodeError === void 0) return o;
+	let { error: s, _tag: c, ...l } = o.body, d = typeof l.message == "string" ? l.message : typeof l.reason == "string" ? l.reason : "", f = u(i, {
+		status: o.status,
+		tag: s,
+		message: d,
+		fields: l
+	}, {
+		...a,
+		status: o.status
+	});
+	return new Y(o.status, f.body, {
+		...o.headers ?? {},
+		...f.headers ?? {}
+	}, f.contentType);
+}, L = (e, t) => {
+	if (e === void 0) return;
+	let n = C.isUnion(e.ast) ? e.ast.types : [e.ast];
+	for (let e of n) {
+		let n = S.make(e);
+		if (P(n).has(t)) return n;
+	}
+}, R = (e) => e.split(".").map((e, t) => t === 0 ? e : e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_"), z = (e) => {
+	let t = A(C.encodedAST(e.ast));
+	return C.isTypeLiteral(t) && t.indexSignatures.length === 0 ? new Set(t.propertySignatures.map((e) => String(e.name))) : void 0;
+}, ne = (e, t) => e === t || JSON.stringify(e) === JSON.stringify(t), re = (e, t) => {
+	let n = A(C.encodedAST(t.ast)), r = {}, i = C.isTypeLiteral(n) ? new Map(n.propertySignatures.map((e) => [String(e.name), e.type])) : /* @__PURE__ */ new Map();
+	for (let [t, n] of Object.entries(e)) {
+		let e = i.get(t);
+		r[t] = e === void 0 ? n : M(n, e);
+	}
+	return r;
+}, B = (e, t) => {
+	if (e !== void 0) {
+		try {
+			return S.encodeUnknownSync(t)(e);
+		} catch {}
+		try {
+			return S.decodeUnknownSync(t)(e), e;
+		} catch {}
+		return e;
+	}
+}, ie = (e, t, n) => ({
+	...e.request === void 0 ? {} : { request: B(e.request, t) },
+	...e.response === void 0 ? {} : { response: B(e.response, n) }
+}), ae = () => (e) => {
+	if (e.subject.type !== "anonymous") return;
+	let t = e.subject.credentialRejected;
+	return t === void 0 ? void 0 : {
+		status: 401,
+		message: t
+	};
+}, V = (e, t, n, r = {}) => {
+	let i = e.publicApi;
+	if (i === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
+	let a = d(r.profile, i.format), s = r.pluginErrors ?? [], l = {
+		kind: e.kind,
+		input: e.input,
+		target: e.target
+	}, u = w(e.kind, i, l), f = (e) => a.naming === "snake_case" ? c(e) : e, p = T(e.name, i, l), m = p.replace(/:([A-Za-z0-9_]+)/g, (e, t) => `:${f(t)}`), h = k(m), g = _(e.input, a), v = z(g);
+	if (v !== void 0) {
+		for (let t of h) if (!v.has(t)) throw Error(`publicApi: descriptor '${e.name}' — path '${p}' binds ':${t}', and the input declares no field of that name` + (v.size > 0 ? ` (fields: ${[...v].join(", ")})` : " (the input declares no fields)"));
+	}
+	let y = _(e.output, a), C = S.Struct({ value: g }), ee = u !== "GET" && (v === void 0 || [...v].some((e) => !h.includes(e))), E = {
+		query: S.Unknown,
+		params: S.Unknown,
+		form: S.Boolean
+	}, D = ee ? S.Struct({
+		...E,
+		body: S.Unknown
+	}) : S.Struct(E), O = S.transformOrFail(D, C, {
 		strict: !1,
-		decode: (t) => ({ query: h(t.query, e.input) }),
-		encode: (e) => e
-	}) : s, f = [...e.openAccess === void 0 ? [x()] : [], ...(r.scopes ?? []).map((e) => S(e))], p = r.stream === "sse" && e.kind === "query" && n !== void 0, m = p ? (e, t) => k((r) => n(e[o], t, (e) => {
-		r(A(String(e._tag ?? "message"), e));
-	})) : async (n, i) => {
+		decode: (e, t, n) => {
+			let r = "body" in e ? e.body : void 0, i = u === "GET" ? N(e.query, g) : e.form ? N(r ?? {}, g) : r ?? {}, a = typeof e.params == "object" && e.params !== null ? re(e.params, g) : {};
+			if (typeof i != "object" || !i || Array.isArray(i)) return x.succeed({ value: i });
+			let o = i, s = Object.keys(a).filter((e) => e in o && !ne(o[e], a[e]));
+			if (s.length > 0) {
+				let t = u === "GET" ? "query string" : "body";
+				return x.fail(new x.Type(n, e, `${s.map((e) => `'${e}'`).join(", ")} ${s.length === 1 ? "is" : "are"} bound by the path and sent with another value in the ${t}`));
+			}
+			return x.succeed({ value: {
+				...o,
+				...a
+			} });
+		},
+		encode: (e) => x.succeed(e)
+	}), A = [
+		ae(),
+		...e.openAccess === void 0 ? [W()] : [],
+		...(i.scopes ?? []).map((e) => G(e))
+	], j = (() => {
+		let t = e.source;
+		return typeof t == "string" ? t : Array.isArray(t) ? t[0] : void 0;
+	})(), M = (t, n = 200) => ({
+		tag: e.name,
+		method: t.method,
+		path: t.path,
+		query: t.query,
+		source: j,
+		status: n
+	}), F = i.stream === "sse" && e.kind === "query" && n !== void 0, I = S.encodeUnknown(y), B = F ? (e, t) => ce((r) => n(e.value, t, (e) => {
+		r(le(String(e._tag ?? "message"), e));
+	})) : async (n, r) => {
+		let c;
 		try {
-			return await t(n[o], i);
+			c = await t(n.value, r);
 		} catch (t) {
-			throw v(t, e, r);
+			throw te(t, e, i, s, a, M(r));
 		}
+		let l = await b.runPromise(I(c)), u = o(a, l, M(r));
+		return q(u.body, {
+			...u.headers === void 0 ? {} : { headers: u.headers },
+			...u.contentType === void 0 ? {} : { contentType: u.contentType }
+		});
+	}, V = e.error, H = [...P(V)], U = [];
+	for (let e of H) {
+		let t = L(V, e);
+		t !== void 0 && U.push({
+			status: i.errorStatus?.[e] ?? 422,
+			tag: e,
+			schema: t
+		});
+	}
+	for (let e of s) for (let t of P(e.schema)) {
+		if (H.includes(t)) continue;
+		let n = i.errorStatus?.[t] ?? e.rest?.status;
+		if (n === void 0) continue;
+		let r = L(e.schema, t) ?? e.schema;
+		U.push({
+			status: n,
+			tag: t,
+			schema: r
+		});
+	}
+	let K = i.security === !1 ? "none" : i.security ?? (e.openAccess === void 0 ? "required" : "optional"), J = {
+		tag: e.name,
+		kind: e.kind,
+		version: i.version ?? "v1",
+		security: K,
+		idempotent: i.idempotent === !0,
+		input: g,
+		pathParams: h,
+		output: y,
+		source: j,
+		errorResponses: U,
+		format: a
 	};
-	return O({
-		method: i,
-		path: a,
-		input: l,
-		output: e.output,
-		handler: m,
-		...p ? { streaming: !0 } : {},
-		guards: f,
-		...r.summary === void 0 ? {} : { summary: r.summary },
-		...r.description === void 0 ? {} : { description: r.description },
-		...r.deprecated === void 0 ? {} : { deprecated: r.deprecated },
-		...r.sunset === void 0 ? {} : { sunset: r.sunset }
+	return se({
+		method: u,
+		path: m,
+		input: O,
+		output: S.Unknown,
+		handler: B,
+		...F ? { streaming: !0 } : {},
+		guards: A,
+		operationId: i.operationId ?? R(e.name),
+		tags: i.tags ?? [e.name.split(".")[0] ?? e.name],
+		projection: J,
+		...a.etag && u === "GET" && !F ? { etag: !0 } : {},
+		...i.example === void 0 ? {} : { example: ie(i.example, g, y) },
+		...i.summary === void 0 ? {} : { summary: i.summary },
+		...i.description === void 0 ? {} : { description: i.description },
+		...i.deprecated === void 0 ? {} : { deprecated: i.deprecated },
+		...i.sunset === void 0 ? {} : { sunset: i.sunset }
 	});
-}, b = (e) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => y(e.descriptor, e.invoke, e.subscribe)).sort((e, t) => e.path.localeCompare(t.path)), x = () => (e) => {
+}, H = (e, t = {}) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => V(e.descriptor, e.invoke, e.subscribe, t)).sort((e, t) => e.path.localeCompare(t.path)), U = (e) => v(e.filter((e) => e.projection !== void 0).map((e) => {
+	let t = e.projection, n = {
+		tag: t.tag,
+		method: e.method,
+		path: e.path,
+		pathParams: t.pathParams,
+		version: t.version,
+		security: t.security,
+		errors: [...t.errorResponses].map((e) => `${e.status}:${e.tag}`).sort()
+	};
+	return `${JSON.stringify(n)} ${a(t.input.ast)} ${a(t.output.ast)}`;
+}).sort().join("\n")), W = () => (e) => {
 	if (e.subject.type === "anonymous") return {
 		status: 401,
 		message: e.subject.credentialRejected ?? "Authentication required"
 	};
-}, S = (e) => (t) => {
+}, G = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes(e) || n.includes("admin:full")))) return {
 		status: 403,
 		message: `Missing required scope: ${e}`
 	};
-}, C = (e) => (t) => {
+}, K = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes("admin:full") || e.some((e) => n.includes(e))))) return {
 		status: 403,
 		message: `Missing required scope: one of ${e.join(", ")}`
 	};
-}, w = (e, t = {}) => ({
+}, q = (e, t = {}) => ({
 	__voltroRestResponse: !0,
 	status: t.status ?? 200,
 	body: e,
-	...t.headers === void 0 ? {} : { headers: t.headers }
-}), T = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, E = class extends Error {
+	...t.headers === void 0 ? {} : { headers: t.headers },
+	...t.contentType === void 0 ? {} : { contentType: t.contentType }
+}), J = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, Y = class extends Error {
 	status;
 	body;
 	headers;
-	constructor(e, t, n) {
-		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n;
+	contentType;
+	constructor(e, t, n, r) {
+		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n, this.contentType = r;
 	}
-}, D = (e, t, n) => new E(e, t, n), O = (e) => {
+}, oe = (e, t, n) => new Y(e, t, n), se = (e) => {
 	if (e.version === void 0) return e;
 	if (!/^v\d+$/.test(e.version)) throw Error(`defineRestRoute(${e.method} ${e.path}): version "${e.version}" must be 'v' followed by digits — 'v1', 'v2', …`);
 	if ((/* @__PURE__ */ RegExp("^/v\\d+(/|$)")).test(e.path)) throw Error(`defineRestRoute(${e.method} ${e.path}): the path already starts with a version segment AND declares version: '${e.version}'. Pick one spelling — either bake the version into the path, or declare version: and keep the path bare ('/customers'). Both would mount '/${e.version}${e.path}', which is never what the author meant.`);
@@ -147,13 +328,13 @@ var u = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), d = (e, t) => t.
 		...e,
 		path: `/${e.version}${e.path}`
 	};
-}, k = (e, t = {}) => ({
+}, ce = (e, t = {}) => ({
 	__voltroRestStream: !0,
 	stream: {
 		subscribe: e,
 		...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs }
 	}
-}), A = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, j = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, M = (e, t = {}) => ({
+}), le = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, ue = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, de = (e, t = {}) => ({
 	__voltroRestBytes: !0,
 	byteStream: {
 		stream: e,
@@ -163,26 +344,60 @@ var u = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), d = (e, t) => t.
 	...t.contentType === void 0 ? {} : { contentType: t.contentType },
 	...t.status === void 0 ? {} : { status: t.status },
 	...t.headers === void 0 ? {} : { headers: t.headers }
-}), N = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, P = async (e) => {
+}), X = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, fe = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(e));
 	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
-}, F = (e, t, n) => ({
+}, Z = (e, t, n, r = "application/json; charset=utf-8") => ({
 	status: e,
-	contentType: "application/json; charset=utf-8",
+	contentType: r,
 	body: JSON.stringify(t),
 	...n ? { headers: n } : {}
-}), I = (e) => {
+}), Q = (e, t, n, r, i, a, o) => {
+	let s = e.projection;
+	if (s === void 0) return Z(n, {
+		error: i,
+		...a
+	}, o);
+	let c = {
+		tag: s.tag,
+		method: t.method,
+		path: t.path,
+		query: t.query,
+		source: s.source,
+		status: n
+	}, l = u(s.format, {
+		status: n,
+		tag: r,
+		message: i,
+		fields: a
+	}, c);
+	return Z(n, l.body, {
+		...o,
+		...l.headers ?? {}
+	}, l.contentType);
+}, pe = (e) => (e.headers["content-type"] ?? "application/json").split(";")[0].trim().toLowerCase(), me = (e, t) => {
 	if (e.length === 0) return;
-	let t = new TextDecoder().decode(e);
-	if (t.trim() !== "") return JSON.parse(t);
-}, L = (e) => {
-	let t = {};
-	for (let [n, r] of new URLSearchParams(e)) {
-		let e = t[n];
-		e === void 0 ? t[n] = r : Array.isArray(e) ? e.push(r) : t[n] = [e, r];
+	let n = t === "application/x-www-form-urlencoded";
+	if (!n && t !== "application/json" && !/^application\/[^/;\s]+\+json$/.test(t)) return;
+	let r = new TextDecoder("utf-8", { fatal: !0 }).decode(e);
+	if (r.trim() !== "") {
+		if (n) {
+			let e = (e) => decodeURIComponent(e.replace(/\+/g, " "));
+			return ge(r.split("&").filter(Boolean).map((t) => {
+				let n = t.indexOf("=");
+				return n < 0 ? [e(t), ""] : [e(t.slice(0, n)), e(t.slice(n + 1))];
+			}));
+		}
+		return JSON.parse(r);
+	}
+}, he = (e) => ge(new URLSearchParams(e)), ge = (e) => {
+	let t = /* @__PURE__ */ new Map();
+	for (let [n, r] of e) {
+		let e = t.get(n);
+		e === void 0 ? t.set(n, r) : Array.isArray(e) ? e.push(r) : t.set(n, [e, r]);
 	}
-	return t;
-}, R = (e, t) => {
+	return Object.fromEntries(t);
+}, _e = (e, t) => {
 	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0), i = {};
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e];
@@ -196,163 +411,182 @@ var u = (e, t) => t.method ?? (e === "query" ? "GET" : "POST"), d = (e, t) => t.
 		}
 	}
 	return i;
-}, z = (e, t) => ({
-	query: L(e.query),
+}, ve = (e, t) => {
+	let n = e.path.split("/"), r = n[n.length - 1] === "*", i = r ? n.slice(0, -1) : n, a = t.split("/");
+	if (a.length < i.length) return !1;
+	for (let e = 0; e < i.length; e++) {
+		let t = i[e], n = a[e];
+		if (t.startsWith(":")) {
+			if (n.length === 0) return !1;
+		} else if (t !== n) return !1;
+	}
+	return a.length === i.length ? !0 : e.match === "exact" && !r ? !1 : a.slice(i.length).some((e) => e.length > 0);
+}, ye = (e, t, n) => ({
+	query: he(e.query),
 	params: t,
-	body: I(e.rawBody)
-}), B = /* @__PURE__ */ new Set([
+	body: n ? me(e.rawBody, pe(e)) : void 0,
+	form: pe(e) === "application/x-www-form-urlencoded"
+}), $ = /* @__PURE__ */ new Set([
 	"POST",
 	"PUT",
 	"PATCH",
 	"DELETE"
-]), V = (e, n, r, i) => {
-	if (e instanceof E) return F(e.status, e.body, {
+]), be = (t, n, r, i, a) => {
+	if (t instanceof Y) return Z(t.status, t.body, {
 		...i,
-		...e.headers
-	});
-	if (typeof e == "object" && e) {
-		let r = e;
-		if (typeof r.status == "number") return F(r.status, { error: typeof r.message == "string" ? r.message : "Error" }, i);
-		if (r._tag === "Unauthenticated" || e instanceof t) return F(401, { error: typeof r.reason == "string" ? r.reason : "Authentication required" }, i);
-		if (r._tag === "ScopeError") return F(n.type === "anonymous" ? 401 : 403, { error: typeof r.message == "string" ? r.message : "Forbidden" }, i);
+		...t.headers
+	}, t.contentType);
+	if (typeof t == "object" && t) {
+		let o = t;
+		if (typeof o.status == "number") return Q(r, a, o.status, typeof o._tag == "string" ? o._tag : "Error", typeof o.message == "string" ? o.message : "Error", {}, { ...i });
+		if (o._tag === "Unauthenticated" || t instanceof e) return Q(r, a, 401, "Unauthorized", typeof o.reason == "string" ? o.reason : "Authentication required", {}, { ...i });
+		if (o._tag === "ScopeError") {
+			let e = n.type === "anonymous" ? 401 : 403;
+			return Q(r, a, e, e === 401 ? "Unauthorized" : "Forbidden", typeof o.message == "string" ? o.message : "Forbidden", {}, { ...i });
+		}
 	}
-	return o({
-		error: e,
+	return l({
+		error: t,
 		source: "rest",
 		name: `${r.method} ${r.path}`,
 		fields: { status: 500 }
-	}), F(500, { error: "Internal Server Error" }, i);
-}, H = (o, l) => {
-	let u = o.input ? c.decodeUnknown(o.input) : void 0, d = c.encode(o.output), f = {}, p = (e) => e.replace(/\/$/, "").split("/").length, m = p(o.path);
-	return o.deprecated !== void 0 && (f.Deprecation = "true"), o.sunset !== void 0 && (f.Sunset = o.sunset), {
+	}), {
+		...Q(r, a, 500, "InternalServerError", "Internal Server Error", {}, { ...i }),
+		cause: t
+	};
+}, xe = (a, o) => {
+	let s = a.input ? S.decodeUnknown(a.input) : void 0, c = S.encode(a.output), l = a.input === void 0 ? void 0 : C.encodedAST(a.input.ast), u = l !== void 0 && (!C.isTypeLiteral(l) || l.indexSignatures.length > 0 || l.propertySignatures.some((e) => e.name === "body")), d = {};
+	a.projection !== void 0 && (d["x-voltro-rest-profile"] = a.projection.format.name);
+	let f = (e) => e.replace(/\/$/, "").split("/").length, p = f(a.path);
+	return a.deprecated !== void 0 && (d.Deprecation = "true"), a.sunset !== void 0 && (d.Sunset = a.sunset), {
 		method: "*",
-		path: o.path,
-		...o.maxBodyBytes === void 0 ? {} : { maxBodyBytes: o.maxBodyBytes },
-		handle: async (c) => {
-			if (!o.path.endsWith("/*") && p(c.path) !== m) return F(404, { error: "Not Found" }, f);
-			let h = c.method.toUpperCase();
-			if (!(h === o.method || h === "HEAD" && o.method === "GET")) return F(405, {
-				error: "Method Not Allowed",
-				allow: o.method
-			}, {
-				...f,
-				Allow: o.method
+		path: a.path,
+		match: a.path.endsWith("/*") ? "prefix" : "exact",
+		...a.maxBodyBytes === void 0 ? {} : { maxBodyBytes: a.maxBodyBytes },
+		handle: async (l) => {
+			if (!a.path.endsWith("/*") && f(l.path) !== p) return Q(a, l, 404, "NotFound", "Not Found", {}, { ...d });
+			let m = l.method.toUpperCase();
+			if (!(m === a.method || m === "HEAD" && a.method === "GET")) return Q(a, l, 405, "MethodNotAllowed", "Method Not Allowed", { allow: a.method }, {
+				...d,
+				Allow: a.method
 			});
-			if (o.sunset !== void 0) {
-				let e = Date.parse(o.sunset);
-				if (!Number.isNaN(e) && Date.now() >= e) return F(410, {
-					error: "Gone",
-					...o.version === void 0 ? {} : { version: o.version },
-					...o.deprecated === void 0 ? {} : { replacement: o.deprecated }
-				}, f);
+			if (a.sunset !== void 0) {
+				let e = Date.parse(a.sunset);
+				if (!Number.isNaN(e) && Date.now() >= e) return Q(a, l, 410, "Gone", "Gone", {
+					...a.version === void 0 ? {} : { version: a.version },
+					...a.deprecated === void 0 ? {} : { replacement: a.deprecated }
+				}, { ...d });
 			}
-			let g;
-			if (u) {
-				let e = z(c, R(o.path, c.path)), t = await s.runPromise(u(e).pipe(s.map((e) => ({
+			let h;
+			if (s) {
+				let e;
+				try {
+					e = ye(l, _e(a.path, l.path), u);
+				} catch {
+					return Q(a, l, 400, "InvalidRequest", "Malformed request body", {}, { ...d });
+				}
+				let t = await b.runPromise(s(e).pipe(b.map((e) => ({
 					ok: !0,
 					value: e
-				})), s.catchAll((e) => s.succeed({
+				})), b.catchAll((e) => b.succeed({
 					ok: !1,
 					cause: e
 				}))));
-				if (!t.ok) return F(400, {
-					error: "Invalid request",
-					detail: String(t.cause)
-				}, f);
-				g = t.value;
+				if (!t.ok) return Q(a, l, 400, "InvalidRequest", "Invalid request", { detail: String(t.cause) }, { ...d });
+				h = t.value;
 			}
-			let _;
+			let g;
 			try {
-				_ = l.resolveSubject ? await l.resolveSubject(c.headers) : e(c.headers["x-tenant"] ?? null);
-			} catch (e) {
-				if (e instanceof t || typeof e == "object" && e && e._tag === "Unauthenticated") {
-					let t = e.reason;
-					return F(401, { error: t ?? "Authentication required" }, f);
+				g = o.resolveSubject ? await o.resolveSubject(l.headers) : t(l.headers["x-tenant"] ?? null);
+			} catch (t) {
+				if (t instanceof e || typeof t == "object" && t && t._tag === "Unauthenticated") {
+					let e = t.reason;
+					return Q(a, l, 401, "Unauthorized", e ?? "Authentication required", {}, { ...d });
 				}
-				throw e;
+				throw t;
 			}
-			let v;
+			let _;
 			try {
-				v = l.buildContext ? await l.buildContext(_, c.headers) : void 0;
+				_ = o.buildContext ? await o.buildContext(g, l.headers) : void 0;
 			} catch (e) {
-				return V(e, _, o, f);
+				return be(e, g, a, d, l);
 			}
-			let y = typeof v == "object" && v && "store" in v ? v.store : l.store, b = {
-				subject: _,
-				headers: c.headers,
-				store: y,
-				method: h,
-				path: c.path,
-				query: c.query,
-				rawBody: c.rawBody,
-				...v === void 0 ? {} : { app: v }
+			let v = typeof _ == "object" && _ && "store" in _ ? _.store : o.store, x = {
+				subject: g,
+				headers: l.headers,
+				store: v,
+				method: m,
+				path: l.path,
+				query: l.query,
+				rawBody: l.rawBody,
+				..._ === void 0 ? {} : { app: _ }
 			};
-			if (o.guards) for (let e of o.guards) {
-				let t = await e(b);
-				if (t) return F(t.status, { error: t.message }, f);
+			if (a.guards) for (let e of a.guards) {
+				let t = await e(x);
+				if (t) return Q(a, l, t.status, t.status === 401 ? "Unauthorized" : t.status === 403 ? "Forbidden" : "GuardRejected", t.message, {}, { ...d });
 			}
-			let x = l.idempotency, S = x && B.has(o.method) ? c.headers[x.header.toLowerCase()] : void 0, C = x && S ? r(_.tenantId, o.method, o.path) : "";
-			if (x && S) {
-				let e = await i(x.store, C, S, x.ttlMs, Date.now());
-				if (e.kind === "replay") return F(e.response.status, e.response.body, {
-					...f,
+			let S = o.idempotency, C = S && $.has(a.method) ? l.headers[S.header.toLowerCase()] : void 0, w = S && C ? i(g.tenantId, a.method, a.path) : "";
+			if (S && C) {
+				let e = await r(S.store, w, C, S.ttlMs, Date.now());
+				if (e.kind === "replay") return Z(e.response.status, e.response.body, {
+					...d,
 					"Idempotency-Replayed": "true"
 				});
-				if (e.kind === "conflict") return F(409, { error: "A request with this Idempotency-Key is already being processed" }, f);
+				if (e.kind === "conflict") return Q(a, l, 409, "Conflict", "A request with this Idempotency-Key is already being processed", {}, { ...d });
 			}
 			try {
-				let e = await o.handler(g, b);
-				if (j(e) || N(e)) return x && S && await a(x.store, C, S), N(e) ? {
+				let e = await a.handler(h, x);
+				if (ue(e) || X(e)) return S && C && await n(S.store, w, C), X(e) ? {
 					status: e.status ?? 200,
 					headers: {
-						...f,
+						...d,
 						...e.headers
 					},
 					byteStream: e.byteStream,
 					...e.contentType === void 0 ? {} : { contentType: e.contentType }
 				} : {
 					status: 200,
-					headers: f,
+					headers: d,
 					stream: e.stream
 				};
-				let t = T(e) ? e : w(e), r = await s.runPromise(d(t.body)), i = {
-					...f,
+				let t = J(e) ? e : q(e), r = await b.runPromise(c(t.body)), i = {
+					...d,
 					...t.headers
 				};
-				if (x && S && await n(x.store, C, S, {
+				if (S && C && await y(S.store, w, C, {
 					status: t.status,
 					body: r
-				}, Date.now()), o.etag === !0 && o.method === "GET") {
-					let e = `W/"${await P(JSON.stringify(r))}"`, n = c.headers["if-none-match"];
+				}, Date.now()), a.etag === !0 && a.method === "GET") {
+					let e = `W/"${await fe(JSON.stringify(r))}"`, n = l.headers["if-none-match"];
 					return n !== void 0 && n.split(",").some((t) => t.trim() === e) ? {
 						status: 304,
 						headers: {
-							...f,
+							...d,
 							ETag: e
 						}
-					} : F(t.status, r, {
+					} : Z(t.status, r, {
 						...i,
 						ETag: e
-					});
+					}, t.contentType);
 				}
 				return t.status === 204 || t.status === 304 ? {
 					status: t.status,
 					headers: i
-				} : F(t.status, r, i);
+				} : Z(t.status, r, i, t.contentType);
 			} catch (e) {
-				return x && S && await a(x.store, C, S), V(e, _, o, f);
+				return S && C && await n(S.store, w, C), be(e, g, a, d, l);
 			}
 		}
 	};
-}, U = (e, t = {}) => {
+}, Se = (e, t = {}) => {
 	if (t.idempotency !== void 0) {
-		for (let t of e) if (t.streaming === !0 && B.has(t.method)) throw Error(`REST route ${t.method} ${t.path} declares \`streaming: true\` on a method the idempotency binding claims (${[...B].join("/")}). A stream cannot complete an idempotency claim — there is no replayable body to cache — so a retried request would 409 until the claim's TTL. Either serve the stream on GET, or scope the idempotency binding away from this app's streaming routes.`);
+		for (let t of e) if (t.streaming === !0 && $.has(t.method)) throw Error(`REST route ${t.method} ${t.path} declares \`streaming: true\` on a method the idempotency binding claims (${[...$].join("/")}). A stream cannot complete an idempotency claim — there is no replayable body to cache — so a retried request would 409 until the claim's TTL. Either serve the stream on GET, or scope the idempotency binding away from this app's streaming routes.`);
 	}
-	return e.map((e) => H(e, t));
-}, W = async (e, t) => {
+	return e.map((e) => xe(e, t));
+}, Ce = async (e, t) => {
 	let n = await e[0].handle(t);
 	for (let r = 1; r < e.length && n.status === 405; r++) n = await e[r].handle(t);
 	return n;
 };
 //#endregion
-export { E as RestRouteError, M as bytes, h as coerceQueryObject, m as coerceQueryValue, b as collectPublicApiRoutes, g as declaredErrorTags, O as defineRestRoute, u as derivePublicMethod, d as derivePublicPath, W as dispatchSharedPath, N as isRestByteResponse, T as isRestResponse, j as isRestStreamResponse, R as matchPathParams, v as projectedFailure, y as publicApiRoute, C as requireAnyScope, x as requireAuthenticated, S as requireScope, w as response, D as restError, U as restRoutesToHttpRoutes, k as sse, A as sseFrame };
+export { g as JSONAPI_MEDIA_TYPE, f as PROBLEM_JSON, m as REST_PROFILE_NAMES, Y as RestRouteError, de as bytes, N as coerceQueryObject, M as coerceQueryValue, H as collectPublicApiRoutes, P as declaredErrorTags, se as defineRestRoute, w as derivePublicMethod, T as derivePublicPath, D as deriveResource, Ce as dispatchSharedPath, u as encodeRestError, o as encodeRestSuccess, L as errorMemberSchema, X as isRestByteResponse, J as isRestResponse, ue as isRestStreamResponse, _e as matchPathParams, p as nextLink, O as normalizePathParams, R as operationIdOf, k as pathParamNames, h as problemDetails, s as problemTypeOf, I as projectedFailure, V as publicApiRoute, U as publicSurfaceDigest, K as requireAnyScope, W as requireAuthenticated, G as requireScope, d as resolveRestFormat, E as resourceIdField, q as response, oe as restError, Se as restRoutesToHttpRoutes, _ as restViewSchema, ve as routeAcceptsPath, ce as sse, le as sseFrame, c as toSnakeCase, ie as wireExample };