@voltro/protocol 0.83.1 → 0.85.0

package/dist/rest.js

@@ -1,18 +1,18 @@
-import { H as e, V as t } from "./scopes-Di756ENh.js";
-import { E as n, O as r, T as i, a, c as o, d as s, f as c, i as l, k as u, l as d, n as f, o as p, r as m, s as h, t as g, u as _, v, w as y, y as b } from "./restFormat-EZ8k9ZcQ.js";
-import { Effect as x, ParseResult as S, Schema as C } from "effect";
-import * as w from "effect/SchemaAST";
+import { H as e, V as t } from "./scopes-ClywBij8.js";
+import { E as n, O as r, T as i, a, c as o, d as s, f as c, i as l, k as u, l as d, n as f, o as p, r as m, s as h, t as g, u as _, v, w as y, y as b } from "./restFormat-BlgTLxm1.js";
+import { Effect as x, Schema as S, SchemaGetter as C, SchemaIssue as w } from "effect";
+import * as T from "effect/SchemaAST";
 //#region src/publicApi.ts
-var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("", t, n).method : void 0) ?? (e === "query" ? "GET" : "POST"), E = (e, t, n) => A(t.path ?? (t.resource !== void 0 && n !== void 0 ? k(e, t, n).path : `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`)), D = (e) => {
+var E = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? A("", t, n).method : void 0) ?? (e === "query" ? "GET" : "POST"), D = (e, t, n) => j(t.path ?? (t.resource !== void 0 && n !== void 0 ? A(e, t, n).path : `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`)), O = (e) => {
 	let t = e.split("/").pop() ?? e;
 	return t.endsWith("ies") ? `${t.slice(0, -3)}y` : t.endsWith("ses") || t.endsWith("xes") ? t.slice(0, -2) : t.endsWith("s") ? t.slice(0, -1) : t;
-}, O = (e, t) => {
-	let n = t != null && (typeof t == "object" || typeof t == "function") && "ast" in t ? B(t) : void 0;
+}, k = (e, t) => {
+	let n = t != null && (typeof t == "object" || typeof t == "function") && "ast" in t ? re(t) : void 0;
 	if (n === void 0) return;
-	let r = `${D(e)}Id`;
+	let r = `${O(e)}Id`;
 	return n.has(r) ? r : n.has("id") ? "id" : void 0;
-}, k = (e, t, n) => {
-	let r = (t.resource ?? "").replace(/^\/+|\/+$/g, ""), i = `/${t.version ?? "v1"}/${r}`, a = O(r, n.input), o = a === void 0 ? i : `${i}/:${a}`, s = e.split(".").pop() ?? e, c = n.target?.op;
+}, A = (e, t, n) => {
+	let r = (t.resource ?? "").replace(/^\/+|\/+$/g, ""), i = `/${t.version ?? "v1"}/${r}`, a = k(r, n.input), o = a === void 0 ? i : `${i}/:${a}`, s = e.split(".").pop() ?? e, c = n.target?.op;
 	return n.kind === "query" || n.kind === "stream" ? {
 		method: "GET",
 		path: o
@@ -29,72 +29,91 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		method: "POST",
 		path: `${o}/${s}`
 	};
-}, A = (e) => e.replace(/\{([A-Za-z0-9_]+)\}/g, ":$1"), j = (e) => [...e.matchAll(/:([A-Za-z0-9_]+)/g)].map((e) => e[1]), M = (e) => {
-	if (w.isUnion(e)) {
-		let t = e.types.filter((e) => !w.isUndefinedKeyword(e));
+}, j = (e) => e.replace(/\{([A-Za-z0-9_]+)\}/g, ":$1"), M = (e) => [...e.matchAll(/:([A-Za-z0-9_]+)/g)].map((e) => e[1]), N = (e) => {
+	if (T.isUnion(e)) {
+		let t = e.types.filter((e) => !T.isUndefined(e));
 		if (t.length === 1) return t[0];
-		if (t.length !== e.types.length) return w.Union.make(t);
+		if (t.length !== e.types.length) return new T.Union(t);
 	}
 	return e;
-}, N = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, P = (e, t) => {
-	let n = M(t);
-	if (w.isRefinement(n) || w.isTransformation(n)) return P(e, n.from);
-	if (w.isUnion(n)) {
+}, P = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, F = (e, t) => {
+	let n = N(t);
+	if (n.encoding !== void 0) return F(e, T.toEncoded(n));
+	if (T.isUnion(n)) {
 		for (let t of n.types) {
-			let n = P(e, t);
+			let n = F(e, t);
 			if (n !== e) return n;
 		}
 		return e;
 	}
-	if (w.isTupleType(n)) {
+	if (T.isArrays(n)) {
 		let t = Array.isArray(e) ? e : e === void 0 ? void 0 : [e];
 		if (t === void 0) return e;
-		let r = n.rest[0]?.type ?? n.elements[0]?.type;
-		return r === void 0 ? t : t.map((e) => P(e, r));
+		let r = n.rest[0] ?? n.elements[0];
+		return r === void 0 ? t : t.map((e) => F(e, r));
 	}
 	if (typeof e != "string") return e;
-	if (w.isNumberKeyword(n)) return N.test(e.trim()) ? Number(e) : e;
-	if (w.isBooleanKeyword(n)) return e === "true" || e !== "false" && e;
-	if (w.isLiteral(n)) {
+	if (T.isNumber(n)) return P.test(e.trim()) ? Number(e) : e;
+	if (T.isBoolean(n)) return e === "true" || e !== "false" && e;
+	if (T.isLiteral(n)) {
 		let t = n.literal;
-		return typeof t == "number" && N.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
+		return typeof t == "number" && P.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
 	}
 	return e;
-}, F = (e, t) => {
+}, I = (e, t) => {
 	if (typeof e != "object" || !e || Array.isArray(e)) return e;
-	let n = M(w.encodedAST(t.ast));
-	if (!w.isTypeLiteral(n)) return e;
+	let n = N(T.toEncoded(t.ast));
+	if (!T.isObjects(n)) return e;
 	let r = { ...e };
 	for (let e of n.propertySignatures) {
 		let t = String(e.name);
-		t in r && (r[t] = P(r[t], e.type));
+		t in r && (r[t] = F(r[t], e.type));
 	}
 	return r;
-}, I = (e) => {
+}, ee = (e) => {
+	let t = N(T.toEncoded(e.ast));
+	if (!T.isObjects(t)) return (e) => e;
+	let n = t.propertySignatures, r = /* @__PURE__ */ new Map(), i = n.length >= 32 && n.every((e, t) => typeof e.name != "string" || e.name in Object.prototype || r.has(e.name) ? !1 : (r.set(e.name, {
+		type: e.type,
+		order: t
+	}), !0));
+	return (e) => {
+		if (typeof e != "object" || !e || Array.isArray(e)) return e;
+		let t = { ...e }, a = i ? Object.keys(t) : void 0;
+		if (a !== void 0 && a.length * 4 < n.length) {
+			let e = [];
+			for (let t of a) {
+				let n = r.get(t);
+				n !== void 0 && e.push({
+					key: t,
+					...n
+				});
+			}
+			e.sort((e, t) => e.order - t.order);
+			for (let { key: n, type: r } of e) t[n] = F(t[n], r);
+		} else for (let e of n) {
+			let n = String(e.name);
+			n in t && (t[n] = F(t[n], e.type));
+		}
+		return t;
+	};
+}, L = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	if (e === void 0) return t;
 	let n = (e) => {
-		if (w.isUnion(e)) {
+		if (T.isUnion(e)) {
 			for (let t of e.types) n(t);
 			return;
 		}
-		if (w.isTransformation(e)) {
-			n(e.from), n(e.to);
-			return;
-		}
-		if (w.isRefinement(e)) {
-			n(e.from);
-			return;
-		}
-		if (w.isTypeLiteral(e)) {
+		if (e.encoding !== void 0 && n(T.toEncoded(e)), T.isObjects(e)) {
 			let n = e.propertySignatures.find((e) => e.name === "_tag");
-			n !== void 0 && w.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
+			n !== void 0 && T.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
 		}
 	};
 	return n(e.ast), t;
-}, L = (e, t, n) => {
+}, R = (e, t, n) => {
 	if (n !== void 0) try {
-		let r = C.encodeUnknownSync(n)(e);
+		let r = S.encodeUnknownSync(n)(e);
 		if (typeof r == "object" && r) return {
 			error: t,
 			...r
@@ -103,62 +122,65 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 	let r = { error: t };
 	for (let [t, n] of Object.entries(e)) t !== "stack" && t !== "_tag" && (r[t] = n);
 	return r;
-}, R = (e, t, n, r = []) => {
+}, z = (e, t, n, r = []) => B(e, t, n, r, L), B = (e, t, n, r, i) => {
 	if (typeof e != "object" || !e) return e;
-	let i = e._tag;
-	if (typeof i != "string" || i === "ScopeError" || i === "NoSuchResource") return e;
-	if (I(t.error).has(i)) return new Y(n.errorStatus?.[i] ?? 422, L(e, i, t.error));
-	let a = r.find((e) => I(e.schema).has(i));
-	if (a === void 0) return e;
-	let o = n.errorStatus?.[i] ?? a.rest?.status ?? 422, s = a.rest?.headers?.(e);
-	return new Y(o, L(e, i, a.schema), s);
-}, ee = (e, t, n, r, i, a) => {
-	let o = R(e, t, n, r);
-	if (!(o instanceof Y) || i.errors === "tagged" && i.encodeError === void 0) return o;
-	let { error: s, _tag: c, ...u } = o.body, d = typeof u.message == "string" ? u.message : typeof u.reason == "string" ? u.reason : "", f = l(i, {
-		status: o.status,
-		tag: s,
-		message: d,
-		fields: u
+	let a = e._tag;
+	if (typeof a != "string" || a === "ScopeError" || a === "NoSuchResource") return e;
+	if (i(t.error).has(a)) return new Y(n.errorStatus?.[a] ?? 422, R(e, a, t.error));
+	let o = r.find((e) => i(e.schema).has(a));
+	if (o === void 0) return e;
+	let s = n.errorStatus?.[a] ?? o.rest?.status ?? 422, c = o.rest?.headers?.(e);
+	return new Y(s, R(e, a, o.schema), c);
+}, te = (e, t, n, r, i, a, o) => {
+	let s = B(e, t, n, r, o);
+	if (!(s instanceof Y) || i.errors === "tagged" && i.encodeError === void 0) return s;
+	let { error: c, _tag: u, ...d } = s.body, f = typeof d.message == "string" ? d.message : typeof d.reason == "string" ? d.reason : "", p = l(i, {
+		status: s.status,
+		tag: c,
+		message: f,
+		fields: d
 	}, {
 		...a,
-		status: o.status
+		status: s.status
 	});
-	return new Y(o.status, f.body, {
-		...o.headers ?? {},
-		...f.headers ?? {}
-	}, f.contentType);
-}, z = (e, t) => {
+	return new Y(s.status, p.body, {
+		...s.headers ?? {},
+		...p.headers ?? {}
+	}, p.contentType);
+}, V = (e, t) => {
 	if (e === void 0) return;
-	let n = w.isUnion(e.ast) ? e.ast.types : [e.ast];
+	let n = T.isUnion(e.ast) ? e.ast.types : [e.ast];
 	for (let e of n) {
-		let n = C.make(e);
-		if (I(n).has(t)) return n;
-	}
-}, te = (e) => e.split(".").map((e, t) => t === 0 ? e : e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_"), B = (e) => {
-	let t = M(w.encodedAST(e.ast));
-	return w.isTypeLiteral(t) && t.indexSignatures.length === 0 ? new Set(t.propertySignatures.map((e) => String(e.name))) : void 0;
-}, ne = (e, t) => e === t || JSON.stringify(e) === JSON.stringify(t), re = (e, t) => {
-	let n = M(w.encodedAST(t.ast)), r = {}, i = w.isTypeLiteral(n) ? new Map(n.propertySignatures.map((e) => [String(e.name), e.type])) : /* @__PURE__ */ new Map();
-	for (let [t, n] of Object.entries(e)) {
-		let e = i.get(t);
-		r[t] = e === void 0 ? n : P(n, e);
+		let n = S.make(e);
+		if (L(n).has(t)) return n;
 	}
-	return r;
-}, V = (e, t) => {
+}, ne = (e) => e.split(".").map((e, t) => t === 0 ? e : e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_"), re = (e) => {
+	let t = N(T.toEncoded(e.ast));
+	return T.isObjects(t) && t.indexSignatures.length === 0 ? new Set(t.propertySignatures.map((e) => String(e.name))) : void 0;
+}, ie = (e, t) => e === t || JSON.stringify(e) === JSON.stringify(t), ae = (e) => {
+	let t = N(T.toEncoded(e.ast)), n = T.isObjects(t) ? new Map(t.propertySignatures.map((e) => [String(e.name), e.type])) : /* @__PURE__ */ new Map();
+	return (e) => {
+		let t = {};
+		for (let [r, i] of Object.entries(e)) {
+			let e = n.get(r);
+			t[r] = e === void 0 ? i : F(i, e);
+		}
+		return t;
+	};
+}, H = (e, t) => {
 	if (e !== void 0) {
 		try {
-			return C.encodeUnknownSync(t)(e);
+			return S.encodeUnknownSync(t)(e);
 		} catch {}
 		try {
-			return C.decodeUnknownSync(t)(e), e;
+			return S.decodeUnknownSync(t)(e), e;
 		} catch {}
 		return e;
 	}
-}, H = (e, t, n) => ({
-	...e.request === void 0 ? {} : { request: V(e.request, t) },
-	...e.response === void 0 ? {} : { response: V(e.response, n) }
-}), ie = () => (e) => {
+}, oe = (e, t, n) => ({
+	...e.request === void 0 ? {} : { request: H(e.request, t) },
+	...e.response === void 0 ? {} : { response: H(e.response, n) }
+}), se = () => (e) => {
 	if (e.subject.type !== "anonymous") return;
 	let t = e.subject.credentialRejected;
 	return t === void 0 ? void 0 : {
@@ -168,118 +190,144 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 }, U = (e, t, n, r = {}) => {
 	let i = e.publicApi;
 	if (i === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
-	let o = d(r.profile, i.format), c = r.pluginErrors ?? [], l = {
+	let o = d(r.profile, i.format), c = r.pluginErrors ?? [], l = /* @__PURE__ */ new WeakMap(), u = (e) => {
+		if (e === void 0) return /* @__PURE__ */ new Set();
+		let t = l.get(e.ast);
+		if (t !== void 0) return t;
+		let n = L(e);
+		return l.set(e.ast, n), n;
+	}, f = /* @__PURE__ */ new WeakMap(), p = (e, t) => {
+		if (e === void 0) return;
+		let n = f.get(e.ast);
+		if (n === void 0) {
+			let t = /* @__PURE__ */ new Map();
+			for (let n of T.isUnion(e.ast) ? e.ast.types : [e.ast]) {
+				let e = S.make(n);
+				for (let n of u(e)) t.has(n) || t.set(n, e);
+			}
+			n = t, f.set(e.ast, n);
+		}
+		return n.get(t);
+	}, m = {
 		kind: e.kind,
 		input: e.input,
 		target: e.target
-	}, u = T(e.kind, i, l), f = (e) => o.naming === "snake_case" ? s(e) : e, p = E(e.name, i, l), m = p.replace(/:([A-Za-z0-9_]+)/g, (e, t) => `:${f(t)}`), h = j(m), g = _(e.input, o), v = B(g);
-	if (v !== void 0) {
-		for (let t of h) if (!v.has(t)) throw Error(`publicApi: descriptor '${e.name}' — path '${p}' binds ':${t}', and the input declares no field of that name` + (v.size > 0 ? ` (fields: ${[...v].join(", ")})` : " (the input declares no fields)"));
+	}, h = E(e.kind, i, m), g = (e) => o.naming === "snake_case" ? s(e) : e, v = D(e.name, i, m), y = v.replace(/:([A-Za-z0-9_]+)/g, (e, t) => `:${g(t)}`), b = M(y), O = _(e.input, o), k = ee(O), A = ae(O), j = re(O);
+	if (j !== void 0) {
+		for (let t of b) if (!j.has(t)) throw Error(`publicApi: descriptor '${e.name}' — path '${v}' binds ':${t}', and the input declares no field of that name` + (j.size > 0 ? ` (fields: ${[...j].join(", ")})` : " (the input declares no fields)"));
+	}
+	let N = _(e.output, o), P = S.Struct({ value: O }), F = h !== "GET" && j === void 0;
+	if (h !== "GET" && j !== void 0) {
+		let e = b.length >= 32 ? new Set(b) : void 0;
+		for (let t of j) if (!(e?.has(t) ?? b.includes(t))) {
+			F = !0;
+			break;
+		}
 	}
-	let y = _(e.output, o), b = C.Struct({ value: g }), w = u !== "GET" && (v === void 0 || [...v].some((e) => !h.includes(e))), D = {
-		query: C.Unknown,
-		params: C.Unknown,
-		form: C.Boolean
-	}, O = w ? C.Struct({
-		...D,
-		body: C.Unknown
-	}) : C.Struct(D), k = C.transformOrFail(O, b, {
-		strict: !1,
-		decode: (e, t, n) => {
-			let r = "body" in e ? e.body : void 0, i = u === "GET" ? F(e.query, g) : e.form ? F(r ?? {}, g) : r ?? {}, a = typeof e.params == "object" && e.params !== null ? re(e.params, g) : {};
-			if (typeof i != "object" || !i || Array.isArray(i)) return S.succeed({ value: i });
-			let o = i, s = Object.keys(a).filter((e) => e in o && !ne(o[e], a[e]));
-			if (s.length > 0) {
-				let t = u === "GET" ? "query string" : "body";
-				return S.fail(new S.Type(n, e, `${s.map((e) => `'${e}'`).join(", ")} ${s.length === 1 ? "is" : "are"} bound by the path and sent with another value in the ${t}`));
+	let I = {
+		query: S.Unknown,
+		params: S.Unknown,
+		form: S.Boolean
+	}, R = (F ? S.Struct({
+		...I,
+		body: S.Unknown
+	}) : S.Struct(I)).pipe(S.decodeTo(P, {
+		decode: C.transformEffect((e) => {
+			let t = "body" in e ? e.body : void 0, n = h === "GET" ? k(e.query) : e.form ? k(t ?? {}) : t ?? {}, r = typeof e.params == "object" && e.params !== null ? A(e.params) : {};
+			if (typeof n != "object" || !n || Array.isArray(n)) return x.succeed({ value: n });
+			let i = n, a = Object.keys(r), o = 0;
+			for (let e of a) e in i && !ie(i[e], r[e]) && (a[o++] = e);
+			if (a.length = o, a.length > 0) {
+				let t = h === "GET" ? "query string" : "body";
+				return x.fail(new w.InvalidValue({ message: `${a.map((e) => `'${e}'`).join(", ")} ${a.length === 1 ? "is" : "are"} bound by the path and sent with another value in the ${t}` }, e));
 			}
-			return S.succeed({ value: {
-				...o,
-				...a
+			return x.succeed({ value: {
+				...i,
+				...r
 			} });
-		},
-		encode: (e) => S.succeed(e)
-	}), A = [
-		ie(),
-		...e.openAccess === void 0 ? [K()] : [],
-		...(i.scopes ?? []).map((e) => q(e))
-	], M = (() => {
+		}),
+		encode: C.transform((e) => e)
+	})), z = [
+		se(),
+		...e.openAccess === void 0 ? [le()] : [],
+		...(i.scopes ?? []).map((e) => ue(e))
+	], B = (() => {
 		let t = e.source;
 		return typeof t == "string" ? t : Array.isArray(t) ? t[0] : void 0;
-	})(), N = (t, n = 200) => ({
+	})(), V = (t, n = 200) => ({
 		tag: e.name,
 		method: t.method,
 		path: t.path,
 		query: t.query,
-		source: M,
+		source: B,
 		status: n
-	}), P = i.stream === "sse" && e.kind === "query" && n !== void 0, L = C.encodeUnknown(y), R = P ? (e, t) => ue((r) => n(e.value, t, (e) => {
-		r(de(String(e._tag ?? "message"), e));
+	}), H = i.stream === "sse" && e.kind === "query" && n !== void 0, U = S.encodeUnknownEffect(N), ce = H ? (e, t) => he((r) => n(e.value, t, (e) => {
+		r(ge(String(e._tag ?? "message"), e));
 	})) : async (n, r) => {
 		let s;
 		try {
 			s = await t(n.value, r);
 		} catch (t) {
-			throw ee(t, e, i, c, o, N(r));
+			throw te(t, e, i, c, o, V(r), u);
 		}
-		let l = await x.runPromise(L(s)), u = a(o, l, N(r));
-		return J(u.body, {
-			...u.headers === void 0 ? {} : { headers: u.headers },
-			...u.contentType === void 0 ? {} : { contentType: u.contentType }
+		let l = await x.runPromise(U(s)), d = a(o, l, V(r));
+		return q(d.body, {
+			...d.headers === void 0 ? {} : { headers: d.headers },
+			...d.contentType === void 0 ? {} : { contentType: d.contentType }
 		});
-	}, V = e.error, U = [...I(V)], W = [];
-	for (let e of U) {
-		let t = z(V, e);
-		t !== void 0 && W.push({
+	}, W = e.error, G = u(W), de = [...G], K = [];
+	for (let e of de) {
+		let t = p(W, e);
+		t !== void 0 && K.push({
 			status: i.errorStatus?.[e] ?? 422,
 			tag: e,
 			schema: t
 		});
 	}
-	for (let e of c) for (let t of I(e.schema)) {
-		if (U.includes(t)) continue;
+	for (let e of c) for (let t of u(e.schema)) {
+		if (G.has(t)) continue;
 		let n = i.errorStatus?.[t] ?? e.rest?.status;
 		if (n === void 0) continue;
-		let r = z(e.schema, t) ?? e.schema;
-		W.push({
+		let r = p(e.schema, t) ?? e.schema;
+		K.push({
 			status: n,
 			tag: t,
 			schema: r
 		});
 	}
-	let G = i.security === !1 ? "none" : i.security ?? (e.openAccess === void 0 ? "required" : "optional"), ae = {
+	let fe = i.security === !1 ? "none" : i.security ?? (e.openAccess === void 0 ? "required" : "optional"), J = {
 		tag: e.name,
 		kind: e.kind,
 		version: i.version ?? "v1",
-		security: G,
+		security: fe,
 		idempotent: i.idempotent === !0,
-		input: g,
-		pathParams: h,
-		output: y,
-		source: M,
-		errorResponses: W,
+		input: O,
+		pathParams: b,
+		output: N,
+		source: B,
+		errorResponses: K,
 		format: o
 	};
-	return le({
-		method: u,
-		path: m,
-		input: k,
-		output: C.Unknown,
-		handler: R,
-		...P ? { streaming: !0 } : {},
-		guards: A,
-		operationId: i.operationId ?? te(e.name),
+	return me({
+		method: h,
+		path: y,
+		input: R,
+		output: S.Unknown,
+		handler: ce,
+		...H ? { streaming: !0 } : {},
+		guards: z,
+		operationId: i.operationId ?? ne(e.name),
 		tags: i.tags ?? [e.name.split(".")[0] ?? e.name],
-		projection: ae,
-		...o.etag && u === "GET" && !P ? { etag: !0 } : {},
-		...i.cache !== void 0 && u === "GET" && !P ? { cache: i.cache } : {},
-		...i.example === void 0 ? {} : { example: H(i.example, g, y) },
+		projection: J,
+		...o.etag && h === "GET" && !H ? { etag: !0 } : {},
+		...i.cache !== void 0 && h === "GET" && !H ? { cache: i.cache } : {},
+		...i.example === void 0 ? {} : { example: oe(i.example, O, N) },
 		...i.summary === void 0 ? {} : { summary: i.summary },
 		...i.description === void 0 ? {} : { description: i.description },
 		...i.deprecated === void 0 ? {} : { deprecated: i.deprecated },
 		...i.sunset === void 0 ? {} : { sunset: i.sunset }
 	});
-}, W = (e, t = {}) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => U(e.descriptor, e.invoke, e.subscribe, t)).sort((e, t) => e.path.localeCompare(t.path)), G = (e) => b(e.filter((e) => e.projection !== void 0).map((e) => {
+}, ce = (e, t = {}) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => U(e.descriptor, e.invoke, e.subscribe, t)).sort((e, t) => e.path.localeCompare(t.path)), W = (e) => b(e.filter((e) => e.projection !== void 0).map((e) => {
 	let t = e.projection, n = {
 		tag: t.tag,
 		method: e.method,
@@ -290,52 +338,82 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		errors: [...t.errorResponses].map((e) => `${e.status}:${e.tag}`).sort()
 	};
 	return `${JSON.stringify(n)} ${v(t.input.ast)} ${v(t.output.ast)}`;
-}).sort().join("\n")), K = () => (e) => {
+}).sort().join("\n")), le = () => (e) => {
 	if (e.subject.type === "anonymous") return {
 		status: 401,
 		message: e.subject.credentialRejected ?? "Authentication required"
 	};
-}, q = (e) => (t) => {
+}, ue = (e) => (t) => {
 	let n = t.subject.scopes;
 	if (!(n && (n.includes(e) || n.includes("admin:full")))) return {
 		status: 403,
 		message: `Missing required scope: ${e}`
 	};
-}, ae = (e) => (t) => {
+}, G = (e) => {
+	for (let t of [
+		"includes",
+		"some",
+		Symbol.iterator
+	]) {
+		let n = Object.getOwnPropertyDescriptor(e, t);
+		if (n !== void 0 && !("value" in n)) return !1;
+	}
+	if (Object.getPrototypeOf(e) !== Array.prototype || e.includes !== Array.prototype.includes || e.some !== Array.prototype.some || e[Symbol.iterator] !== Array.prototype[Symbol.iterator]) return !1;
+	for (let t = 0; t < e.length; t++) {
+		let n = Object.getOwnPropertyDescriptor(e, t);
+		if (n === void 0 || !("value" in n) || typeof n.value != "string") return !1;
+	}
+	return !0;
+}, de = (e) => (t) => {
 	let n = t.subject.scopes;
-	if (!(n && (n.includes("admin:full") || e.some((e) => n.includes(e))))) return {
+	if (n) {
+		if (n.includes("admin:full")) return;
+		let t = n.length >= 32 && e.length >= 256 && G(n) && G(e) ? new Set(n) : void 0;
+		if (e.some((e) => t === void 0 ? n.includes(e) : t.has(e))) return;
+	}
+	return {
 		status: 403,
 		message: `Missing required scope: one of ${e.join(", ")}`
 	};
-}, oe = (e, t, n, r) => {
+}, K = (e, t) => e.method === "GET" && e.cache !== void 0 && t.status !== 200 && t.status !== 304 ? {
+	...t,
+	headers: {
+		...t.headers,
+		"Cache-Control": "private, no-store"
+	}
+} : t, fe = (e, t, n, r, i) => {
 	if (e === void 0) return {};
-	let i = { Vary: "Authorization, Cookie" };
-	if (t.headers.authorization !== void 0 || t.headers.cookie !== void 0) return {
+	let a = { Vary: e.audience === void 0 ? "Authorization, Cookie" : "Authorization" };
+	if (t.headers.authorization !== void 0 || e.audience === void 0 && t.headers.cookie !== void 0) return {
 		"Cache-Control": "private, no-cache",
-		...i
+		...a
+	};
+	if (e.audience !== void 0 && e.audience(n, r, i) === "private") return {
+		"Cache-Control": "private, no-store",
+		...a
 	};
-	let a = Math.max(0, Math.floor(e.maxAge)), o = [
+	let o = Math.max(0, Math.floor(e.maxAge)), s = [
 		"public",
-		`max-age=${a}`,
-		`s-maxage=${a}`
+		`max-age=${o}`,
+		`s-maxage=${o}`
 	];
-	e.staleWhileRevalidate !== void 0 && o.push(`stale-while-revalidate=${Math.max(0, Math.floor(e.staleWhileRevalidate))}`);
-	let s = [...new Set((e.tags?.(n, r) ?? []).filter((e) => e !== "" && !/[\s,]/.test(e)))];
+	e.staleWhileRevalidate !== void 0 && s.push(`stale-while-revalidate=${Math.max(0, Math.floor(e.staleWhileRevalidate))}`);
+	let c = [...new Set((e.tags?.(n, r) ?? []).filter((e) => e !== "" && !/[\s,]/.test(e)))];
 	return {
-		"Cache-Control": o.join(", "),
-		...i,
-		...s.length > 0 ? {
-			"Cache-Tag": s.join(","),
-			"Surrogate-Key": s.join(" ")
+		"Cache-Control": s.join(", "),
+		...a,
+		...c.length > 0 ? {
+			"Cache-Tag": c.join(","),
+			"Surrogate-Key": c.join(" ")
 		} : {}
 	};
-}, J = (e, t = {}) => ({
+}, q = (e, t = {}) => ({
 	__voltroRestResponse: !0,
 	status: t.status ?? 200,
 	body: e,
 	...t.headers === void 0 ? {} : { headers: t.headers },
 	...t.contentType === void 0 ? {} : { contentType: t.contentType }
-}), se = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, Y = class extends Error {
+}), J = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, Y = class extends Error {
 	status;
 	body;
 	headers;
@@ -343,7 +421,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 	constructor(e, t, n, r) {
 		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n, this.contentType = r;
 	}
-}, ce = (e, t, n) => new Y(e, t, n), le = (e) => {
+}, pe = (e, t, n) => new Y(e, t, n), me = (e) => {
 	if (e.version === void 0) return e;
 	if (!/^v\d+$/.test(e.version)) throw Error(`defineRestRoute(${e.method} ${e.path}): version "${e.version}" must be 'v' followed by digits — 'v1', 'v2', …`);
 	if ((/* @__PURE__ */ RegExp("^/v\\d+(/|$)")).test(e.path)) throw Error(`defineRestRoute(${e.method} ${e.path}): the path already starts with a version segment AND declares version: '${e.version}'. Pick one spelling — either bake the version into the path, or declare version: and keep the path bare ('/customers'). Both would mount '/${e.version}${e.path}', which is never what the author meant.`);
@@ -351,13 +429,13 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		...e,
 		path: `/${e.version}${e.path}`
 	};
-}, ue = (e, t = {}) => ({
+}, he = (e, t = {}) => ({
 	__voltroRestStream: !0,
 	stream: {
 		subscribe: e,
 		...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs }
 	}
-}), de = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, fe = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, pe = (e, t = {}) => ({
+}), ge = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, _e = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, ve = (e, t = {}) => ({
 	__voltroRestBytes: !0,
 	byteStream: {
 		stream: e,
@@ -367,9 +445,10 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 	...t.contentType === void 0 ? {} : { contentType: t.contentType },
 	...t.status === void 0 ? {} : { status: t.status },
 	...t.headers === void 0 ? {} : { headers: t.headers }
-}), X = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, me = async (e) => {
-	let t = await globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(e));
-	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}), X = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, ye = async (e) => {
+	let t = await globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(e)), n = "";
+	for (let e of new Uint8Array(t)) n += e.toString(16).padStart(2, "0");
+	return n;
 }, Z = (e, t, n, r = "application/json; charset=utf-8") => ({
 	status: e,
 	contentType: r,
@@ -398,7 +477,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		...o,
 		...u.headers ?? {}
 	}, u.contentType);
-}, he = (e) => (e.headers["content-type"] ?? "application/json").split(";")[0].trim().toLowerCase(), ge = (e, t) => {
+}, be = (e) => (e.headers["content-type"] ?? "application/json").split(";")[0].trim().toLowerCase(), xe = (e, t) => {
 	if (e.length === 0) return;
 	let n = t === "application/x-www-form-urlencoded";
 	if (!n && t !== "application/json" && !/^application\/[^/;\s]+\+json$/.test(t)) return;
@@ -406,22 +485,22 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 	if (r.trim() !== "") {
 		if (n) {
 			let e = (e) => decodeURIComponent(e.replace(/\+/g, " "));
-			return ve(r.split("&").filter(Boolean).map((t) => {
+			return Ce((r.match(/[^&]+/g) ?? []).map((t) => {
 				let n = t.indexOf("=");
 				return n < 0 ? [e(t), ""] : [e(t.slice(0, n)), e(t.slice(n + 1))];
 			}));
 		}
 		return JSON.parse(r);
 	}
-}, _e = (e) => ve(new URLSearchParams(e)), ve = (e) => {
+}, Se = (e) => Ce(new URLSearchParams(e)), Ce = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of e) {
 		let e = t.get(n);
 		e === void 0 ? t.set(n, r) : Array.isArray(e) ? e.push(r) : t.set(n, [e, r]);
 	}
 	return Object.fromEntries(t);
-}, ye = (e, t) => {
-	let n = e.split("/").filter((e) => e.length > 0), r = t.split("/").filter((e) => e.length > 0), i = {};
+}, we = (e, t) => {
+	let n = e.match(/[^/]+/g) ?? [], r = t.match(/[^/]+/g) ?? [], i = {};
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e];
 		if (t !== void 0 && t.startsWith(":")) {
@@ -434,7 +513,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		}
 	}
 	return i;
-}, be = (e, t) => {
+}, Te = (e, t) => {
 	let n = e.path.split("/"), r = n[n.length - 1] === "*", i = r ? n.slice(0, -1) : n, a = t.split("/");
 	if (a.length < i.length) return !1;
 	for (let e = 0; e < i.length; e++) {
@@ -444,17 +523,17 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		} else if (t !== n) return !1;
 	}
 	return a.length === i.length ? !0 : e.match === "exact" && !r ? !1 : a.slice(i.length).some((e) => e.length > 0);
-}, xe = (e, t, n) => ({
-	query: _e(e.query),
+}, Ee = (e, t, n) => ({
+	query: Se(e.query),
 	params: t,
-	body: n ? ge(e.rawBody, he(e)) : void 0,
-	form: he(e) === "application/x-www-form-urlencoded"
+	body: n ? xe(e.rawBody, be(e)) : void 0,
+	form: be(e) === "application/x-www-form-urlencoded"
 }), $ = /* @__PURE__ */ new Set([
 	"POST",
 	"PUT",
 	"PATCH",
 	"DELETE"
-]), Se = (e, n, r, i, a) => {
+]), De = (e, n, r, i, a) => {
 	if (e instanceof Y) return Z(e.status, e.body, {
 		...i,
 		...e.headers
@@ -484,8 +563,8 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		...Q(r, a, 500, "InternalServerError", "Internal Server Error", {}, { ...i }),
 		cause: e
 	};
-}, Ce = (a, o, s) => {
-	let c = a.input ? C.decodeUnknown(a.input) : void 0, l = C.encode(a.output), d = a.input === void 0 ? void 0 : w.encodedAST(a.input.ast), f = d !== void 0 && (!w.isTypeLiteral(d) || d.indexSignatures.length > 0 || d.propertySignatures.some((e) => e.name === "body")), p = {};
+}, Oe = (a, o, s) => {
+	let c = a.input ? S.decodeUnknownEffect(a.input) : void 0, l = S.encodeEffect(a.output), d = a.input === void 0 ? void 0 : T.toEncoded(a.input.ast), f = d !== void 0 && (!T.isObjects(d) || d.indexSignatures.length > 0 || d.propertySignatures.some((e) => e.name === "body")), p = {};
 	a.projection !== void 0 && (p["x-voltro-rest-profile"] = a.projection.format.name);
 	let m = (e) => e.replace(/\/$/, "").split("/").length, h = m(a.path);
 	return a.deprecated !== void 0 && (p.Deprecation = "true"), a.sunset !== void 0 && (p.Sunset = a.sunset), {
@@ -512,14 +591,14 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 			if (c) {
 				let e;
 				try {
-					e = xe(d, ye(a.path, d.path), f);
+					e = Ee(d, we(a.path, d.path), f);
 				} catch {
 					return Q(a, d, 400, "InvalidRequest", "Malformed request body", {}, { ...p });
 				}
 				let t = await x.runPromise(c(e).pipe(x.map((e) => ({
 					ok: !0,
 					value: e
-				})), x.catchAll((e) => x.succeed({
+				})), x.catch((e) => x.succeed({
 					ok: !1,
 					cause: e
 				}))));
@@ -540,7 +619,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 			try {
 				b = o.buildContext ? await o.buildContext(v, d.headers) : void 0;
 			} catch (e) {
-				return Se(e, v, a, p, d);
+				return K(a, De(e, v, a, p, d));
 			}
 			let S = typeof b == "object" && b && "store" in b ? b.store : o.store, C = {
 				subject: v,
@@ -569,7 +648,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 			}
 			try {
 				let e = await a.handler(_, C);
-				if (fe(e) || X(e)) return w && T && await i(w.store, E, T), X(e) ? {
+				if (_e(e) || X(e)) return w && T && await i(w.store, E, T), X(e) ? {
 					status: e.status ?? 200,
 					headers: {
 						...p,
@@ -582,7 +661,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 					headers: p,
 					stream: e.stream
 				};
-				let t = se(e) ? e : J(e), r = await x.runPromise(l(t.body)), o = a.method === "GET" && t.status === 200 ? oe(a.cache, d, r, _) : {}, s = {
+				let t = J(e) ? e : q(e), r = await x.runPromise(l(t.body)), o = a.method === "GET" && t.status === 200 ? fe(a.cache, d, r, _, v) : {}, s = {
 					...p,
 					...t.headers,
 					...o
@@ -591,7 +670,7 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 					status: t.status,
 					body: r
 				}, Date.now()), a.etag === !0 && a.method === "GET") {
-					let e = `W/"${await me(JSON.stringify(r))}"`, n = d.headers["if-none-match"];
+					let e = `W/"${await ye(JSON.stringify(r))}"`, n = d.headers["if-none-match"];
 					return n !== void 0 && n.split(",").some((t) => t.trim() === e) ? {
 						status: 304,
 						headers: {
@@ -599,23 +678,23 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 							...o,
 							ETag: e
 						}
-					} : Z(t.status, r, {
+					} : K(a, Z(t.status, r, {
 						...s,
 						ETag: e
-					}, t.contentType);
+					}, t.contentType));
 				}
-				return t.status === 204 || t.status === 304 ? {
+				return t.status === 204 || t.status === 304 ? K(a, {
 					status: t.status,
 					headers: s
-				} : Z(t.status, r, s, t.contentType);
+				}) : K(a, Z(t.status, r, s, t.contentType));
 			} catch (e) {
-				return w && T && await i(w.store, E, T), Se(e, v, a, p, d);
+				return w && T && await i(w.store, E, T), K(a, De(e, v, a, p, d));
 			} finally {
 				D?.();
 			}
 		}
 	};
-}, we = (e, t = {}) => {
+}, ke = (e, t = {}) => {
 	if (t.idempotency !== void 0) {
 		for (let t of e) if (t.streaming === !0 && $.has(t.method)) throw Error(`REST route ${t.method} ${t.path} declares \`streaming: true\` on a method the idempotency binding claims (${[...$].join("/")}). A stream cannot complete an idempotency claim — there is no replayable body to cache — so a retried request would 409 until the claim's TTL. Either serve the stream on GET, or scope the idempotency binding away from this app's streaming routes.`);
 	}
@@ -624,11 +703,11 @@ var T = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? k("",
 		let e = r.get(n(t.path)) ?? [];
 		e.includes(t.method) || e.push(t.method), r.set(n(t.path), e);
 	}
-	return e.map((e) => Ce(e, t, r.get(n(e.path)).join(", ")));
-}, Te = async (e, t) => {
+	return e.map((e) => Oe(e, t, r.get(n(e.path)).join(", ")));
+}, Ae = async (e, t) => {
 	let n = await e[0].handle(t);
 	for (let r = 1; r < e.length && n.status === 405; r++) n = await e[r].handle(t);
 	return n;
 };
 //#endregion
-export { g as JSONAPI_MEDIA_TYPE, f as PROBLEM_JSON, m as REST_PROFILE_NAMES, Y as RestRouteError, pe as bytes, F as coerceQueryObject, P as coerceQueryValue, W as collectPublicApiRoutes, I as declaredErrorTags, le as defineRestRoute, T as derivePublicMethod, E as derivePublicPath, k as deriveResource, Te as dispatchSharedPath, l as encodeRestError, a as encodeRestSuccess, z as errorMemberSchema, X as isRestByteResponse, se as isRestResponse, fe as isRestStreamResponse, ye as matchPathParams, p as nextLink, A as normalizePathParams, te as operationIdOf, j as pathParamNames, h as problemDetails, o as problemTypeOf, R as projectedFailure, U as publicApiRoute, G as publicSurfaceDigest, ae as requireAnyScope, K as requireAuthenticated, q as requireScope, d as resolveRestFormat, O as resourceIdField, J as response, ce as restError, we as restRoutesToHttpRoutes, _ as restViewSchema, be as routeAcceptsPath, ue as sse, de as sseFrame, s as toSnakeCase, H as wireExample };
+export { g as JSONAPI_MEDIA_TYPE, f as PROBLEM_JSON, m as REST_PROFILE_NAMES, Y as RestRouteError, ve as bytes, I as coerceQueryObject, F as coerceQueryValue, ce as collectPublicApiRoutes, L as declaredErrorTags, me as defineRestRoute, E as derivePublicMethod, D as derivePublicPath, A as deriveResource, Ae as dispatchSharedPath, l as encodeRestError, a as encodeRestSuccess, V as errorMemberSchema, X as isRestByteResponse, J as isRestResponse, _e as isRestStreamResponse, we as matchPathParams, p as nextLink, j as normalizePathParams, ne as operationIdOf, M as pathParamNames, h as problemDetails, o as problemTypeOf, z as projectedFailure, U as publicApiRoute, W as publicSurfaceDigest, de as requireAnyScope, le as requireAuthenticated, ue as requireScope, d as resolveRestFormat, k as resourceIdField, q as response, pe as restError, ke as restRoutesToHttpRoutes, _ as restViewSchema, Te as routeAcceptsPath, he as sse, ge as sseFrame, s as toSnakeCase, oe as wireExample };