@voltro/protocol 0.84.0 → 0.86.0

package/dist/procedure.js

@@ -0,0 +1,262 @@
+import { subscriptionEvent as e } from "./subscriptionEvent.js";
+import { RequestedTenantRefused as t } from "./tenantSelection.js";
+import { Unauthenticated as n } from "./auth.js";
+import { NoSuchResource as r, ScopeError as i, declaresResourceGuard as a, isOpenAccess as o, openAccessSpec as s, serviceAccessSpec as c } from "./scopes.js";
+import { strictInput as l } from "./strictInput.js";
+import { BusinessRuleViolation as u } from "./businessRule.js";
+import { MutationConnectionRequired as d, MutationInFlight as f } from "./idempotency.js";
+import { ValidationError as p, ValidationErrors as m } from "./validation.js";
+import { ApprovalErrors as h } from "./approval.js";
+import { normalizeSource as g } from "./reactivityChannel.js";
+import { Schema as _ } from "effect";
+import { Rpc as v } from "effect/rpc";
+import { VersionConflict as y } from "@voltro/database/wire";
+//#region src/procedure.ts
+var b = (e) => e.internal !== !0, x = (e) => e.service === void 0 ? "client" : "service", S = (e) => b(e) && e.service === void 0, C = (e) => b(e) && e.service !== void 0, w = /^[a-z][a-z0-9-]{0,55}$/i, T = (e) => {
+	if (D(e), E(e), e.idempotencyScope !== void 0 && e.idempotencyScope !== "subject" && e.idempotencyScope !== "connection") throw Error(`${e.name}: idempotencyScope must be 'subject' or 'connection'`);
+	let t = e.serialize;
+	if (t !== void 0) {
+		if (typeof t.key != "function") throw Error(`${e.name}: serialize.key must be a function of the input`);
+		if (t.maxPending !== void 0 && (!Number.isSafeInteger(t.maxPending) || t.maxPending < 1)) throw Error(`${e.name}: serialize.maxPending must be a positive integer`);
+	}
+	if (e.idempotencyScope === "connection" && (e.internal === !0 || e.publicApi !== void 0 || e.exposeAsTool !== void 0)) throw Error(`${e.name}: connection-scoped mutations require the native WebSocket RPC surface; internal, publicApi and exposeAsTool cannot establish its connection state`);
+	if (Array.isArray(e.guards) && e.guards.length === 0) throw Error(`${e.name}: \`guards: []\` is empty, so it enforces nothing — but it reads\n  at the call site as if this procedure were protected. Omit the field for an
+  unguarded procedure, or list the scopes required to call it.`);
+	let n = typeof e.source == "string" ? [e.source] : Array.isArray(e.source) ? e.source : void 0;
+	if (n !== void 0 && (n.length === 0 || n.some((e) => String(e).trim() === ""))) throw Error(`${e.name}: \`source\` is empty, so this query declares reactivity and\n  subscribes to nothing — it serves one snapshot and never updates again,
+  which is indistinguishable from "nothing changed". Name the table(s) it
+  reads, or omit \`source\` for a non-reactive query.`);
+	if (e.internal !== !0) return e;
+	if (e.openAccess !== void 0) throw Error(`${e.name}: \`internal: true\` cannot be combined with \`openAccess\`.\n  \`internal\` takes the procedure OFF the wire, and \`openAccess\` declares who may
+  call it there — together they describe a decision about a surface that does not
+  exist. Drop \`openAccess\` (an internal procedure needs no wire decision), or drop
+  \`internal: true\` if the procedure really is meant to be callable.`);
+	if (e.overridesPlugin === !0) throw Error(`${e.name}: \`internal: true\` cannot be combined with \`overridesPlugin\`.\n  The override REMOVES the plugin route, and an internal procedure is not
+  wire-reachable — so the plugin's route would vanish with nothing callable
+  in its place, and callers would get a 404 for something that used to work.`);
+	let r = [e.publicApi === void 0 ? void 0 : "publicApi", e.exposeAsTool === void 0 ? void 0 : "exposeAsTool"].filter((e) => e !== void 0);
+	if (r.length === 0) return e;
+	throw Error(`${e.name}: \`internal: true\` cannot be combined with ${r.map((e) => `\`${e}\``).join(" or ")}. \`internal\` takes the procedure OFF the wire; those put it back ON a different one (${r.includes("publicApi") ? "a REST route" : "an agent tool"}), and that surface is projected without consulting the flag — so the procedure would be unreachable from your client and reachable from the internet. Drop \`internal: true\` if the wider surface is intended, or remove the ${r.join(" / ")} annotation if it is not.`);
+}, E = (e) => {
+	let t = e.service;
+	if (t === void 0) return;
+	let n = t.callers;
+	if (!Array.isArray(n) || n.length === 0) throw Error(`${e.name}: \`service.callers\` is empty, so NO app may call this procedure —\n  and no browser either. Name the calling app(s), e.g. \`service: { callers: ['worker'] }\`,
+  or drop \`service:\` if the procedure is meant for this app's own clients.`);
+	let r = n.filter((e) => typeof e != "string" || !w.test(e));
+	if (r.length > 0) throw Error(`${e.name}: \`service.callers\` holds ${r.map((e) => JSON.stringify(e)).join(", ")} — a caller is an\n  app name (letters, digits, dashes; starting with a letter; at most 56 characters), the same name this app
+  lists in \`serviceCallers\` and the caller's credential resolves to.`);
+	if (new Set(n).size !== n.length) throw Error(`${e.name}: \`service.callers\` lists the same app twice`);
+	let i = [
+		e.internal === !0 ? "`internal: true` (it removes the wire surface a service calls over)" : void 0,
+		e.publicApi === void 0 ? void 0 : "`publicApi` (a REST route is for callers that are not the listed apps)",
+		e.exposeAsTool === void 0 ? void 0 : "`exposeAsTool` (an agent tool is not one of the listed apps)",
+		e.requiresApproval === void 0 ? void 0 : "`requiresApproval` (a second HUMAN cannot approve a machine call)",
+		e.overridesPlugin === !0 ? "`overridesPlugin` (a plugin route is a client surface; replacing it with a service-only one breaks its clients)" : void 0,
+		e.idempotencyScope === "connection" ? "`idempotencyScope: 'connection'` (a service call dedups per service, across reconnects)" : void 0
+	].filter((e) => e !== void 0);
+	if (i.length !== 0) throw Error(`${e.name}: \`service:\` cannot be combined with ${i.join("; ")}.\n  A service procedure is callable only by the listed apps of this project, over the
+  socket, with their service credential. Drop the other field, or drop \`service:\`.`);
+}, D = (e) => {
+	let t = e.requiresApproval;
+	if (t !== void 0) {
+		if (!Array.isArray(t.approvers) || t.approvers.length === 0) throw Error(`${e.name}: \`requiresApproval.approvers\` is empty, so NOBODY can approve this\n  procedure and every call would park forever. Name the scope(s) an approver must hold
+  — e.g. \`approvers: [{ scope: 'invoices:approve' }]\`.`);
+		if (e.openAccess !== void 0) throw Error(`${e.name}: \`requiresApproval\` cannot be combined with \`openAccess\`.\n  The self-approval refusal compares subject ids, and an unauthenticated caller has
+  none — so on an open procedure every anonymous caller would count as a DIFFERENT
+  human from every other, and the second-pair-of-eyes control would enforce nothing.
+  Give the procedure a \`guards:\` decision, or drop \`requiresApproval\`.`);
+	}
+}, O = (e) => e.action !== void 0 && e.resourceType !== void 0, k = (e) => e.authenticated === !0, A = (e) => e.openAccess !== void 0 || e.guards !== void 0 && e.guards.length > 0, j = (e, t, n, r) => {
+	if (r !== void 0) {
+		if (n !== void 0 || t !== void 0 && t.length > 0) throw Error(`${e}: \`service:\` is an access decision of its own — only the listed apps may\n  call this procedure — so it cannot sit beside \`guards:\` or \`openAccess:\`. A service
+  holds no scopes, and no user may call a service procedure. Keep exactly one.`);
+		return Array.isArray(r.callers) ? [c(r.callers)] : void 0;
+	}
+	if (n === void 0) return t;
+	if (n.trim() === "") throw Error(`${e}: \`openAccess\` needs a REASON, not an empty string. It is the sentence a\n  reviewer reads to decide whether this procedure should really be callable
+  without an authorization check — e.g. \`openAccess: 'public pricing, no caller data'\`.`);
+	if (t !== void 0 && t.length > 0) throw Error(`${e}: \`openAccess\` and \`guards\` are two different access decisions, so\n  declaring both says the procedure is protected AND open. Keep the guards if a
+  caller must hold a scope; drop them if anyone may call it.`);
+	return [s(n.trim())];
+}, M = (e) => T({
+	kind: "query",
+	name: e.name,
+	input: e.input,
+	output: e.output,
+	error: e.error ?? _.Never,
+	source: g(e.source),
+	cache: e.cache,
+	guards: j(e.name, e.guards, e.openAccess, e.service),
+	openAccess: e.openAccess,
+	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
+	publicApi: e.publicApi,
+	exposeAsTool: e.exposeAsTool,
+	internal: e.internal,
+	overridesPlugin: e.overridesPlugin
+}), N = (e) => T({
+	kind: "mutation",
+	name: e.name,
+	input: e.input,
+	output: e.output,
+	error: e.error ?? _.Never,
+	...e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope },
+	...e.serialize === void 0 ? {} : { serialize: e.serialize },
+	target: e.target,
+	guards: j(e.name, e.guards, e.openAccess, e.service),
+	openAccess: e.openAccess,
+	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
+	publicApi: e.publicApi,
+	exposeAsTool: e.exposeAsTool,
+	requiresApproval: e.requiresApproval,
+	internal: e.internal,
+	overridesPlugin: e.overridesPlugin
+}), P = (e) => T({
+	kind: "action",
+	name: e.name,
+	input: e.input,
+	output: e.output,
+	error: e.error ?? _.Never,
+	guards: j(e.name, e.guards, e.openAccess, e.service),
+	openAccess: e.openAccess,
+	service: e.service === void 0 ? void 0 : { callers: Array.isArray(e.service.callers) ? [...e.service.callers] : e.service.callers },
+	source: e.source,
+	target: e.target,
+	publicApi: e.publicApi,
+	exposeAsTool: e.exposeAsTool,
+	requiresApproval: e.requiresApproval,
+	internal: e.internal,
+	overridesPlugin: e.overridesPlugin
+}), F = (e) => T({
+	kind: "stream",
+	name: e.name,
+	input: e.input,
+	element: e.element,
+	error: e.error ?? _.Never,
+	internal: e.internal,
+	overridesPlugin: e.overridesPlugin,
+	guards: j(e.name, e.guards, e.openAccess),
+	openAccess: e.openAccess
+}), I = (e, t) => t && t.length > 0 ? _.Union([e, ...t]) : e, L = (e) => e !== void 0 && e.some((e) => !o(e)), R = (e) => _.Union([
+	e,
+	i,
+	n,
+	t
+]), z = (e) => _.Union([e, u]), B = (e) => _.Union([
+	e,
+	p,
+	m
+]), V = (e, t) => t === void 0 ? e : _.Union([e, h]), H = (e, t) => a(t) ? _.Union([e, r]) : e, U = (e, t, n) => I(W(e, t), n), W = (e, t) => {
+	let n = H(R(e.error), e.guards);
+	if (t === "stream" || t === "query") return n;
+	let r = t === "mutation" ? _.Union([
+		z(n),
+		f,
+		y
+	]) : n;
+	return V(B(t === "mutation" && e.idempotencyScope === "connection" ? _.Union([r, d]) : r), e.requiresApproval);
+}, G = {
+	query: [
+		i,
+		n,
+		t
+	],
+	stream: [
+		i,
+		n,
+		t
+	],
+	action: [
+		i,
+		n,
+		t,
+		p,
+		m
+	],
+	mutation: [
+		i,
+		n,
+		t,
+		u,
+		f,
+		y,
+		p,
+		m
+	]
+}, K = (e, t) => I(H(R(e.errorSchema), e.guards), t), q = (e, t) => ({
+	...e,
+	name: t
+}), J = (t, n) => v.make(t.name, {
+	payload: l(t.input, t.name, L(t.guards)),
+	success: e(t.output),
+	error: U(t, "query", n),
+	stream: !0
+}), Y = (e, t) => v.make(e.name, {
+	payload: l(e.input, e.name, L(e.guards)),
+	success: e.output,
+	error: U(e, "mutation", t)
+}), X = (e, t) => v.make(e.name, {
+	payload: l(e.input, e.name, L(e.guards)),
+	success: e.output,
+	error: U(e, "action", t)
+}), Z = (e, t) => v.make(e.name, {
+	payload: l(e.input, e.name, L(e.guards)),
+	success: e.element,
+	error: U(e, "stream", t),
+	stream: !0
+}), Q = (e) => {
+	switch (e.kind) {
+		case "query": return J(e);
+		case "mutation": return Y(e);
+		case "action": return X(e);
+		case "stream": return Z(e);
+	}
+}, $ = (e) => {
+	let t = e.input, n = t === void 0 ? {} : { input: t }, r = e.output, i = r === void 0 ? {} : { output: r };
+	if (e.kind === "query") return {
+		kind: "query",
+		source: e.source,
+		...n,
+		...i
+	};
+	if (e.kind === "action") return {
+		kind: "action",
+		...n,
+		...i
+	};
+	if (e.kind === "stream") return {
+		kind: "stream",
+		...n,
+		...i
+	};
+	let a = e.target, o = e.idempotencyScope === void 0 ? {} : { idempotencyScope: e.idempotencyScope }, s = e.serialize === void 0 ? {} : { serialize: e.serialize };
+	if (a === void 0) return {
+		kind: "mutation",
+		...n,
+		...i,
+		...o,
+		...s
+	};
+	let c = Array.isArray(a) ? a : [a];
+	return {
+		kind: "mutation",
+		...n,
+		...i,
+		...o,
+		...s,
+		targets: c.map((e) => ({
+			table: e.table,
+			op: e.op,
+			..."order" in e && e.order !== void 0 ? { order: e.order } : {},
+			..."shape" in e && e.shape !== void 0 ? { shape: e.shape } : {},
+			..."identify" in e && e.identify !== void 0 ? { identify: e.identify } : {},
+			..."path" in e && e.path !== void 0 ? { path: e.path } : {},
+			..."by" in e && e.by !== void 0 ? { by: e.by } : {},
+			..."match" in e && e.match !== void 0 ? { match: e.match } : {},
+			..."shapeItem" in e && e.shapeItem !== void 0 ? { shapeItem: e.shapeItem } : {},
+			..."relations" in e && e.relations !== void 0 ? { relations: e.relations } : {}
+		}))
+	};
+};
+//#endregion
+export { G as FRAMEWORK_WIRE_ERRORS, w as SERVICE_NAME_PATTERN, X as actionToRpc, P as defineAction, N as defineMutation, M as defineQuery, F as defineStream, A as hasAccessDecision, L as hasEnforcedGuard, k as isAuthenticatedGuard, S as isClientReachable, O as isPolicyGuard, C as isServiceReachable, b as isWireReachable, Y as mutationToRpc, $ as normalizeDescriptor, J as queryToRpc, Z as streamToRpc, Q as toRpc, x as wireAudienceOf, U as wireErrorUnion, q as withRpcTag, K as workflowWireErrorUnion };

package/dist/publicApi.js

@@ -0,0 +1,344 @@
+import { schemaShape as e, shapeDigest as t } from "./schemaShape.js";
+import { encodeRestError as n, encodeRestSuccess as r, resolveRestFormat as i, restViewSchema as a, toSnakeCase as o } from "./restFormat.js";
+import { RestRouteError as s, defineRestRoute as c, requireAuthenticated as l, requireScope as u, response as ee, sse as d, sseFrame as f } from "./rest.js";
+import { Effect as p, Schema as m, SchemaGetter as h, SchemaIssue as g } from "effect";
+import * as _ from "effect/SchemaAST";
+//#region src/publicApi.ts
+var v = (e, t, n) => t.method ?? (t.resource !== void 0 && n !== void 0 ? S("", t, n).method : void 0) ?? (e === "query" ? "GET" : "POST"), y = (e, t, n) => C(t.path ?? (t.resource !== void 0 && n !== void 0 ? S(e, t, n).path : `/${t.version ?? "v1"}/${e.replace(/\./g, "/")}`)), b = (e) => {
+	let t = e.split("/").pop() ?? e;
+	return t.endsWith("ies") ? `${t.slice(0, -3)}y` : t.endsWith("ses") || t.endsWith("xes") ? t.slice(0, -2) : t.endsWith("s") ? t.slice(0, -1) : t;
+}, x = (e, t) => {
+	let n = t != null && (typeof t == "object" || typeof t == "function") && "ast" in t ? L(t) : void 0;
+	if (n === void 0) return;
+	let r = `${b(e)}Id`;
+	return n.has(r) ? r : n.has("id") ? "id" : void 0;
+}, S = (e, t, n) => {
+	let r = (t.resource ?? "").replace(/^\/+|\/+$/g, ""), i = `/${t.version ?? "v1"}/${r}`, a = x(r, n.input), o = a === void 0 ? i : `${i}/:${a}`, s = e.split(".").pop() ?? e, c = n.target?.op;
+	return n.kind === "query" || n.kind === "stream" ? {
+		method: "GET",
+		path: o
+	} : n.kind === "mutation" && c === "insert" ? {
+		method: "POST",
+		path: i
+	} : n.kind === "mutation" && c === "update" ? {
+		method: a === void 0 ? "POST" : "PATCH",
+		path: o
+	} : n.kind === "mutation" && c === "delete" ? {
+		method: a === void 0 ? "POST" : "DELETE",
+		path: o
+	} : {
+		method: "POST",
+		path: `${o}/${s}`
+	};
+}, C = (e) => e.replace(/\{([A-Za-z0-9_]+)\}/g, ":$1"), w = (e) => [...e.matchAll(/:([A-Za-z0-9_]+)/g)].map((e) => e[1]), T = (e) => {
+	if (_.isUnion(e)) {
+		let t = e.types.filter((e) => !_.isUndefined(e));
+		if (t.length === 1) return t[0];
+		if (t.length !== e.types.length) return new _.Union(t);
+	}
+	return e;
+}, E = /^-?(\d+\.?\d*|\.\d+)(e[+-]?\d+)?$/i, D = (e, t) => {
+	let n = T(t);
+	if (n.encoding !== void 0) return D(e, _.toEncoded(n));
+	if (_.isUnion(n)) {
+		for (let t of n.types) {
+			let n = D(e, t);
+			if (n !== e) return n;
+		}
+		return e;
+	}
+	if (_.isArrays(n)) {
+		let t = Array.isArray(e) ? e : e === void 0 ? void 0 : [e];
+		if (t === void 0) return e;
+		let r = n.rest[0] ?? n.elements[0];
+		return r === void 0 ? t : t.map((e) => D(e, r));
+	}
+	if (typeof e != "string") return e;
+	if (_.isNumber(n)) return E.test(e.trim()) ? Number(e) : e;
+	if (_.isBoolean(n)) return e === "true" || e !== "false" && e;
+	if (_.isLiteral(n)) {
+		let t = n.literal;
+		return typeof t == "number" && E.test(e.trim()) && Number(e) === t || typeof t == "boolean" && String(t) === e ? t : e;
+	}
+	return e;
+}, O = (e, t) => {
+	if (typeof e != "object" || !e || Array.isArray(e)) return e;
+	let n = T(_.toEncoded(t.ast));
+	if (!_.isObjects(n)) return e;
+	let r = { ...e };
+	for (let e of n.propertySignatures) {
+		let t = String(e.name);
+		t in r && (r[t] = D(r[t], e.type));
+	}
+	return r;
+}, k = (e) => {
+	let t = T(_.toEncoded(e.ast));
+	if (!_.isObjects(t)) return (e) => e;
+	let n = t.propertySignatures, r = /* @__PURE__ */ new Map(), i = n.length >= 32 && n.every((e, t) => typeof e.name != "string" || e.name in Object.prototype || r.has(e.name) ? !1 : (r.set(e.name, {
+		type: e.type,
+		order: t
+	}), !0));
+	return (e) => {
+		if (typeof e != "object" || !e || Array.isArray(e)) return e;
+		let t = { ...e }, a = i ? Object.keys(t) : void 0;
+		if (a !== void 0 && a.length * 4 < n.length) {
+			let e = [];
+			for (let t of a) {
+				let n = r.get(t);
+				n !== void 0 && e.push({
+					key: t,
+					...n
+				});
+			}
+			e.sort((e, t) => e.order - t.order);
+			for (let { key: n, type: r } of e) t[n] = D(t[n], r);
+		} else for (let e of n) {
+			let n = String(e.name);
+			n in t && (t[n] = D(t[n], e.type));
+		}
+		return t;
+	};
+}, A = (e) => {
+	let t = /* @__PURE__ */ new Set();
+	if (e === void 0) return t;
+	let n = (e) => {
+		if (_.isUnion(e)) for (let t of e.types) n(t);
+		else if (e.encoding !== void 0 && n(_.toEncoded(e)), _.isObjects(e)) {
+			let n = e.propertySignatures.find((e) => e.name === "_tag");
+			n !== void 0 && _.isLiteral(n.type) && typeof n.type.literal == "string" && t.add(n.type.literal);
+		}
+	};
+	return n(e.ast), t;
+}, j = (e, t, n) => {
+	if (n !== void 0) try {
+		let r = m.encodeUnknownSync(n)(e);
+		if (typeof r == "object" && r) return {
+			error: t,
+			...r
+		};
+	} catch {}
+	let r = { error: t };
+	for (let [t, n] of Object.entries(e)) t !== "stack" && t !== "_tag" && (r[t] = n);
+	return r;
+}, M = (e, t, n, r = []) => N(e, t, n, r, A), N = (e, t, n, r, i) => {
+	if (typeof e != "object" || !e) return e;
+	let a = e._tag;
+	if (typeof a != "string" || a === "ScopeError" || a === "NoSuchResource") return e;
+	if (i(t.error).has(a)) {
+		let r = n.errorStatus?.[a] ?? 422;
+		return new s(r, j(e, a, t.error));
+	}
+	let o = r.find((e) => i(e.schema).has(a));
+	if (o === void 0) return e;
+	let c = n.errorStatus?.[a] ?? o.rest?.status ?? 422, l = o.rest?.headers?.(e);
+	return new s(c, j(e, a, o.schema), l);
+}, P = (e, t, r, i, a, o, c) => {
+	let l = N(e, t, r, i, c);
+	if (!(l instanceof s) || a.errors === "tagged" && a.encodeError === void 0) return l;
+	let { error: u, _tag: ee, ...d } = l.body, f = typeof d.message == "string" ? d.message : typeof d.reason == "string" ? d.reason : "", p = n(a, {
+		status: l.status,
+		tag: u,
+		message: f,
+		fields: d
+	}, {
+		...o,
+		status: l.status
+	});
+	return new s(l.status, p.body, {
+		...l.headers ?? {},
+		...p.headers ?? {}
+	}, p.contentType);
+}, F = (e, t) => {
+	if (e === void 0) return;
+	let n = _.isUnion(e.ast) ? e.ast.types : [e.ast];
+	for (let e of n) {
+		let n = m.make(e);
+		if (A(n).has(t)) return n;
+	}
+}, I = (e) => e.split(".").map((e, t) => t === 0 ? e : e.charAt(0).toUpperCase() + e.slice(1)).join("").replace(/[^A-Za-z0-9_]/g, "_"), L = (e) => {
+	let t = T(_.toEncoded(e.ast));
+	return _.isObjects(t) && t.indexSignatures.length === 0 ? new Set(t.propertySignatures.map((e) => String(e.name))) : void 0;
+}, R = (e, t) => e === t || JSON.stringify(e) === JSON.stringify(t), te = (e) => {
+	let t = T(_.toEncoded(e.ast)), n = _.isObjects(t) ? new Map(t.propertySignatures.map((e) => [String(e.name), e.type])) : /* @__PURE__ */ new Map();
+	return (e) => {
+		let t = {};
+		for (let [r, i] of Object.entries(e)) {
+			let e = n.get(r);
+			t[r] = e === void 0 ? i : D(i, e);
+		}
+		return t;
+	};
+}, z = (e, t) => {
+	if (e !== void 0) {
+		try {
+			return m.encodeUnknownSync(t)(e);
+		} catch {}
+		try {
+			return m.decodeUnknownSync(t)(e), e;
+		} catch {}
+		return e;
+	}
+}, B = (e, t, n) => ({
+	...e.request === void 0 ? {} : { request: z(e.request, t) },
+	...e.response === void 0 ? {} : { response: z(e.response, n) }
+}), ne = () => (e) => {
+	if (e.subject.type !== "anonymous") return;
+	let t = e.subject.credentialRejected;
+	return t === void 0 ? void 0 : {
+		status: 401,
+		message: t
+	};
+}, V = (e, t, n, s = {}) => {
+	let b = e.publicApi;
+	if (b === void 0) throw Error(`publicApiRoute: descriptor '${e.name}' has no publicApi annotation`);
+	let x = i(s.profile, b.format), S = s.pluginErrors ?? [], C = /* @__PURE__ */ new WeakMap(), T = (e) => {
+		if (e === void 0) return /* @__PURE__ */ new Set();
+		let t = C.get(e.ast);
+		if (t !== void 0) return t;
+		let n = A(e);
+		return C.set(e.ast, n), n;
+	}, E = /* @__PURE__ */ new WeakMap(), D = (e, t) => {
+		if (e === void 0) return;
+		let n = E.get(e.ast);
+		if (n === void 0) {
+			let t = /* @__PURE__ */ new Map();
+			for (let n of _.isUnion(e.ast) ? e.ast.types : [e.ast]) {
+				let e = m.make(n);
+				for (let n of T(e)) t.has(n) || t.set(n, e);
+			}
+			n = t, E.set(e.ast, n);
+		}
+		return n.get(t);
+	}, O = {
+		kind: e.kind,
+		input: e.input,
+		target: e.target
+	}, j = v(e.kind, b, O), M = (e) => x.naming === "snake_case" ? o(e) : e, N = y(e.name, b, O), F = N.replace(/:([A-Za-z0-9_]+)/g, (e, t) => `:${M(t)}`), z = w(F), V = a(e.input, x), H = k(V), U = te(V), W = L(V);
+	if (W !== void 0) {
+		for (let t of z) if (!W.has(t)) throw Error(`publicApi: descriptor '${e.name}' — path '${N}' binds ':${t}', and the input declares no field of that name` + (W.size > 0 ? ` (fields: ${[...W].join(", ")})` : " (the input declares no fields)"));
+	}
+	let G = a(e.output, x), re = m.Struct({ value: V }), K = j !== "GET" && W === void 0;
+	if (j !== "GET" && W !== void 0) {
+		let e = z.length >= 32 ? new Set(z) : void 0;
+		for (let t of W) if (!(e?.has(t) ?? z.includes(t))) {
+			K = !0;
+			break;
+		}
+	}
+	let q = {
+		query: m.Unknown,
+		params: m.Unknown,
+		form: m.Boolean
+	}, ie = (K ? m.Struct({
+		...q,
+		body: m.Unknown
+	}) : m.Struct(q)).pipe(m.decodeTo(re, {
+		decode: h.transformEffect((e) => {
+			let t = "body" in e ? e.body : void 0, n = j === "GET" ? H(e.query) : e.form ? H(t ?? {}) : t ?? {}, r = typeof e.params == "object" && e.params !== null ? U(e.params) : {};
+			if (typeof n != "object" || !n || Array.isArray(n)) return p.succeed({ value: n });
+			let i = n, a = Object.keys(r), o = 0;
+			for (let e of a) e in i && !R(i[e], r[e]) && (a[o++] = e);
+			if (a.length = o, a.length > 0) {
+				let t = j === "GET" ? "query string" : "body";
+				return p.fail(new g.InvalidValue({ message: `${a.map((e) => `'${e}'`).join(", ")} ${a.length === 1 ? "is" : "are"} bound by the path and sent with another value in the ${t}` }, e));
+			}
+			return p.succeed({ value: {
+				...i,
+				...r
+			} });
+		}),
+		encode: h.transform((e) => e)
+	})), ae = [
+		ne(),
+		...e.openAccess === void 0 ? [l()] : [],
+		...(b.scopes ?? []).map((e) => u(e))
+	], J = (() => {
+		let t = e.source;
+		return typeof t == "string" ? t : Array.isArray(t) ? t[0] : void 0;
+	})(), Y = (t, n = 200) => ({
+		tag: e.name,
+		method: t.method,
+		path: t.path,
+		query: t.query,
+		source: J,
+		status: n
+	}), X = b.stream === "sse" && e.kind === "query" && n !== void 0, oe = m.encodeUnknownEffect(G), se = X ? (e, t) => d((r) => n(e.value, t, (e) => {
+		r(f(String(e._tag ?? "message"), e));
+	})) : async (n, i) => {
+		let a;
+		try {
+			a = await t(n.value, i);
+		} catch (t) {
+			throw P(t, e, b, S, x, Y(i), T);
+		}
+		let o = await p.runPromise(oe(a)), s = r(x, o, Y(i));
+		return ee(s.body, {
+			...s.headers === void 0 ? {} : { headers: s.headers },
+			...s.contentType === void 0 ? {} : { contentType: s.contentType }
+		});
+	}, Z = e.error, Q = T(Z), ce = [...Q], $ = [];
+	for (let e of ce) {
+		let t = D(Z, e);
+		t !== void 0 && $.push({
+			status: b.errorStatus?.[e] ?? 422,
+			tag: e,
+			schema: t
+		});
+	}
+	for (let e of S) for (let t of T(e.schema)) {
+		if (Q.has(t)) continue;
+		let n = b.errorStatus?.[t] ?? e.rest?.status;
+		if (n === void 0) continue;
+		let r = D(e.schema, t) ?? e.schema;
+		$.push({
+			status: n,
+			tag: t,
+			schema: r
+		});
+	}
+	let le = b.security === !1 ? "none" : b.security ?? (e.openAccess === void 0 ? "required" : "optional"), ue = {
+		tag: e.name,
+		kind: e.kind,
+		version: b.version ?? "v1",
+		security: le,
+		idempotent: b.idempotent === !0,
+		input: V,
+		pathParams: z,
+		output: G,
+		source: J,
+		errorResponses: $,
+		format: x
+	};
+	return c({
+		method: j,
+		path: F,
+		input: ie,
+		output: m.Unknown,
+		handler: se,
+		...X ? { streaming: !0 } : {},
+		guards: ae,
+		operationId: b.operationId ?? I(e.name),
+		tags: b.tags ?? [e.name.split(".")[0] ?? e.name],
+		projection: ue,
+		...x.etag && j === "GET" && !X ? { etag: !0 } : {},
+		...b.cache !== void 0 && j === "GET" && !X ? { cache: b.cache } : {},
+		...b.example === void 0 ? {} : { example: B(b.example, V, G) },
+		...b.summary === void 0 ? {} : { summary: b.summary },
+		...b.description === void 0 ? {} : { description: b.description },
+		...b.deprecated === void 0 ? {} : { deprecated: b.deprecated },
+		...b.sunset === void 0 ? {} : { sunset: b.sunset }
+	});
+}, H = (e, t = {}) => e.filter((e) => e.descriptor.publicApi !== void 0).map((e) => V(e.descriptor, e.invoke, e.subscribe, t)).sort((e, t) => e.path.localeCompare(t.path)), U = (n) => t(n.filter((e) => e.projection !== void 0).map((t) => {
+	let n = t.projection, r = {
+		tag: n.tag,
+		method: t.method,
+		path: t.path,
+		pathParams: n.pathParams,
+		version: n.version,
+		security: n.security,
+		errors: [...n.errorResponses].map((e) => `${e.status}:${e.tag}`).sort()
+	};
+	return `${JSON.stringify(r)} ${e(n.input.ast)} ${e(n.output.ast)}`;
+}).sort().join("\n"));
+//#endregion
+export { O as coerceQueryObject, D as coerceQueryValue, H as collectPublicApiRoutes, A as declaredErrorTags, v as derivePublicMethod, y as derivePublicPath, S as deriveResource, F as errorMemberSchema, C as normalizePathParams, I as operationIdOf, w as pathParamNames, M as projectedFailure, V as publicApiRoute, U as publicSurfaceDigest, x as resourceIdField, B as wireExample };

package/dist/reactivityChannel.js

@@ -0,0 +1,34 @@
+//#region src/reactivityChannel.ts
+var e = "channel:", t = Symbol.for("@voltro/protocol/reactivityChannels"), n = globalThis, r = n[t] ?? (n[t] = /* @__PURE__ */ new Map()), i = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)*$/, a = (t) => {
+	if (!i.test(t)) throw Error(`reactivityChannel('${t}'): invalid channel name.\n  Use lowercase kebab segments separated by dots — \`presence\`, \`job-queue\`,
+  \`billing.usage\`. A \`:\` is refused because it is the namespace separator in
+  the routing key (\`${e}<name>\`), and an uppercase letter is\n  refused because a key that differs only by case reads as one channel and
+  routes as two.`);
+	let n = r.get(t);
+	if (n !== void 0) return n;
+	let a = `${e}${t}`, o = Object.freeze({
+		kind: "reactivity-channel",
+		name: t,
+		key: a,
+		toString: () => a
+	});
+	return r.set(t, o), o;
+}, o = (e) => typeof e == "object" && !!e && e.kind === "reactivity-channel", s = (t) => t.startsWith(e), c = () => new Set([...r.values()].map((e) => e.key)), l = (e) => o(e) ? e.key : e, u = (e) => e === void 0 ? [] : Array.isArray(e) ? e.map(l) : [l(e)], d = (e) => e === void 0 ? void 0 : Array.isArray(e) ? e.map(l) : l(e), f = (e) => {
+	let t = c(), n = [];
+	for (let r of e) for (let e of u(r.source)) s(e) && !t.has(e) && n.push({
+		procedure: r.name,
+		key: e
+	});
+	return n;
+}, p = (e, t) => {
+	let n = e?.injectExternalChange;
+	return n !== void 0 && (n.call(e, {
+		table: t.key,
+		op: "update",
+		new: {},
+		old: {},
+		origin: "inline"
+	}), !0);
+};
+//#endregion
+export { e as REACTIVITY_CHANNEL_PREFIX, c as declaredReactivityChannelKeys, o as isReactivityChannel, s as isReactivityChannelKey, d as normalizeSource, p as publishReactivity, a as reactivityChannel, u as sourceKeys, f as undeclaredChannelKeys };