@voltro/protocol 0.86.0 → 0.88.0

package/dist/rest.js

@@ -1,24 +1,28 @@
-import { Unauthenticated as e, anonymousSubject as t } from "./auth.js";
-import "./scopes.js";
-import { beginIdempotent as n, failIdempotent as r, finishIdempotent as i, holdIdempotentClaim as a, idempotencyScope as o } from "./idempotency.js";
-import { publishServerError as s } from "./serverErrorBus.js";
-import { JSONAPI_MEDIA_TYPE as c, PROBLEM_JSON as l, REST_PROFILE_NAMES as u, encodeRestError as d, encodeRestSuccess as f, nextLink as p, problemDetails as m, problemTypeOf as h, resolveRestFormat as g, restViewSchema as _, toSnakeCase as v } from "./restFormat.js";
-import { coerceQueryObject as y, coerceQueryValue as b, collectPublicApiRoutes as x, declaredErrorTags as S, derivePublicMethod as C, derivePublicPath as w, deriveResource as T, errorMemberSchema as E, normalizePathParams as D, operationIdOf as O, pathParamNames as k, projectedFailure as ee, publicApiRoute as te, publicSurfaceDigest as ne, resourceIdField as re, wireExample as ie } from "./publicApi.js";
-import { Effect as A, Schema as j } from "effect";
-import * as M from "effect/SchemaAST";
-//#region src/rest.ts
-var ae = () => (e) => {
+import { Unauthenticated as e, anonymousSubject as t, currentSubjectAuthority as n } from "./auth.js";
+import { effectiveScopes as r, hasEffectiveScope as i, recheckGuardsEffect as a } from "./scopes.js";
+import { beginIdempotent as o, failIdempotent as s, finishIdempotent as c, holdIdempotentClaim as l, idempotencyScope as u } from "./idempotency.js";
+import { declaredErrorTags as d, errorMemberSchema as f } from "./errorSchema.js";
+import { prepareIdempotentInput as p } from "./idempotencyInput.js";
+import { validateHttpStreamMaxDuration as m } from "./httpStreamMaxDuration.js";
+import { publishServerError as h } from "./serverErrorBus.js";
+import { JSONAPI_MEDIA_TYPE as g, PROBLEM_JSON as _, REST_PROFILE_NAMES as v, encodeRestError as y, encodeRestSuccess as b, nextLink as x, problemDetails as S, problemTypeOf as C, resolveRestFormat as w, restViewSchema as T, toSnakeCase as E } from "./restFormat.js";
+import { makeRestReceiptCodec as D } from "./restReceipt.js";
+import { coerceQueryObject as O, coerceQueryValue as k, collectPublicApiRoutes as A, derivePublicMethod as j, derivePublicPath as M, deriveResource as N, normalizePathParams as P, operationIdOf as F, pathParamNames as I, projectedFailure as ee, publicApiRoute as te, publicSurfaceDigest as ne, resourceIdField as re, wireExample as ie } from "./publicApi.js";
+import { Effect as L, Schema as R } from "effect";
+import * as ae from "effect/SchemaAST";
+import { newTraceId as oe } from "@voltro/shared";
+// src/rest.ts
+var se = () => (e) => {
 	if (e.subject.type === "anonymous") return {
 		status: 401,
 		message: e.subject.credentialRejected ?? "Authentication required"
 	};
-}, oe = (e) => (t) => {
-	let n = t.subject.scopes;
-	if (!(n && (n.includes(e) || n.includes("admin:full")))) return {
+}, ce = (e) => (t) => {
+	if (!i(t.subject, e)) return {
 		status: 403,
 		message: `Missing required scope: ${e}`
 	};
-}, N = (e) => {
+}, z = (e) => {
 	for (let t of [
 		"includes",
 		"some",
@@ -33,18 +37,18 @@ var ae = () => (e) => {
 		if (n === void 0 || !("value" in n) || typeof n.value != "string") return !1;
 	}
 	return !0;
-}, se = (e) => (t) => {
-	let n = t.subject.scopes;
+}, le = (e) => (t) => {
+	let n = r(t.subject);
 	if (n) {
 		if (n.includes("admin:full")) return;
-		let t = n.length >= 32 && e.length >= 256 && N(n) && N(e) ? new Set(n) : void 0;
+		let t = n.length >= 32 && e.length >= 256 && z(n) && z(e) ? new Set(n) : void 0;
 		if (e.some((e) => t === void 0 ? n.includes(e) : t.has(e))) return;
 	}
 	return {
 		status: 403,
 		message: `Missing required scope: one of ${e.join(", ")}`
 	};
-}, P = (e, t) => {
+}, B = (e, t) => {
 	if (e === void 0) return {};
 	let n = { vary: "Origin" };
 	return t !== void 0 && (e.origins.includes(t) || e.origins.includes("*")) && (n["access-control-allow-origin"] = e.origins.includes("*") ? "*" : t, n["access-control-expose-headers"] = (e.exposeHeaders ?? [
@@ -53,8 +57,8 @@ var ae = () => (e) => {
 		"ratelimit-remaining",
 		"ratelimit-reset"
 	]).join(", ")), n;
-}, F = (e, t, n) => {
-	let r = P(e, n.origin), i = e.methods ?? (t === "GET" ? ["GET", "HEAD"] : [t]), a = e.headers ?? ["authorization", "content-type"], o = (n["access-control-request-headers"] ?? "").split(",").map((e) => e.trim().toLowerCase()).filter(Boolean), s = r["access-control-allow-origin"] !== void 0 && i.some((e) => e === n["access-control-request-method"]) && o.every((e) => a.some((t) => t.toLowerCase() === e));
+}, V = (e, t, n) => {
+	let r = B(e, n.origin), i = e.methods ?? (t === "GET" ? ["GET", "HEAD"] : [t]), a = e.headers ?? ["authorization", "content-type"], o = (n["access-control-request-headers"] ?? "").split(",").map((e) => e.trim().toLowerCase()).filter(Boolean), s = r["access-control-allow-origin"] !== void 0 && i.some((e) => e === n["access-control-request-method"]) && o.every((e) => a.some((t) => t.toLowerCase() === e));
 	return {
 		status: s ? 204 : 403,
 		headers: {
@@ -67,13 +71,13 @@ var ae = () => (e) => {
 			} : {}
 		}
 	};
-}, I = (e, t) => e.method === "GET" && e.cache !== void 0 && t.status !== 200 && t.status !== 304 ? {
+}, H = (e, t) => e.method === "GET" && e.cache !== void 0 && t.status !== 200 && t.status !== 304 ? {
 	...t,
 	headers: {
 		...t.headers,
 		"Cache-Control": "private, no-store"
 	}
-} : t, ce = (e, t, n, r, i) => {
+} : t, ue = (e, t, n, r, i) => {
 	if (e === void 0) return {};
 	let a = { Vary: e.audience === void 0 ? "Authorization, Cookie" : "Authorization" };
 	if (t.headers.authorization !== void 0 || e.audience === void 0 && t.headers.cookie !== void 0) return {
@@ -99,13 +103,13 @@ var ae = () => (e) => {
 			"Surrogate-Key": c.join(" ")
 		} : {}
 	};
-}, L = (e, t = {}) => ({
+}, U = (e, t = {}) => ({
 	__voltroRestResponse: !0,
 	status: t.status ?? 200,
 	body: e,
 	...t.headers === void 0 ? {} : { headers: t.headers },
 	...t.contentType === void 0 ? {} : { contentType: t.contentType }
-}), R = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, z = class extends Error {
+}), W = (e) => typeof e == "object" && !!e && e.__voltroRestResponse === !0, G = class extends Error {
 	status;
 	body;
 	headers;
@@ -113,7 +117,7 @@ var ae = () => (e) => {
 	constructor(e, t, n, r) {
 		super(`REST ${e}`), this.name = "RestRouteError", this.status = e, this.body = t, this.headers = n, this.contentType = r;
 	}
-}, B = (e, t, n) => new z(e, t, n), V = (e) => {
+}, de = (e, t, n) => new G(e, t, n), fe = (e) => {
 	if (e.version === void 0) return e;
 	if (!/^v\d+$/.test(e.version)) throw Error(`defineRestRoute(${e.method} ${e.path}): version "${e.version}" must be 'v' followed by digits — 'v1', 'v2', …`);
 	if ((/* @__PURE__ */ RegExp("^/v\\d+(/|$)")).test(e.path)) throw Error(`defineRestRoute(${e.method} ${e.path}): the path already starts with a version segment AND declares version: '${e.version}'. Pick one spelling — either bake the version into the path, or declare version: and keep the path bare ('/customers'). Both would mount '/${e.version}${e.path}', which is never what the author meant.`);
@@ -121,13 +125,17 @@ var ae = () => (e) => {
 		...e,
 		path: `/${e.version}${e.path}`
 	};
-}, H = (e, t = {}) => ({
-	__voltroRestStream: !0,
-	stream: {
-		subscribe: e,
-		...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs }
-	}
-}), U = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, W = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, le = (e, t = {}) => ({
+}, pe = (e, t = {}) => {
+	let n = m(t.maxDurationMs);
+	return {
+		__voltroRestStream: !0,
+		stream: {
+			subscribe: e,
+			...t.keepAliveMs === void 0 ? {} : { keepAliveMs: t.keepAliveMs },
+			...n === void 0 ? {} : { maxDurationMs: n }
+		}
+	};
+}, me = (e, t) => `event: ${e}\n${(typeof t == "string" ? t : JSON.stringify(t)).split("\n").map((e) => `data: ${e}`).join("\n")}\n\n`, K = (e) => typeof e == "object" && !!e && e.__voltroRestStream === !0, he = (e, t = {}) => ({
 	__voltroRestBytes: !0,
 	byteStream: {
 		stream: e,
@@ -137,18 +145,18 @@ var ae = () => (e) => {
 	...t.contentType === void 0 ? {} : { contentType: t.contentType },
 	...t.status === void 0 ? {} : { status: t.status },
 	...t.headers === void 0 ? {} : { headers: t.headers }
-}), G = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, ue = async (e) => {
+}), q = (e) => typeof e == "object" && !!e && e.__voltroRestBytes === !0, ge = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(e)), n = "";
 	for (let e of new Uint8Array(t)) n += e.toString(16).padStart(2, "0");
 	return n;
-}, K = (e, t, n, r = "application/json; charset=utf-8") => ({
+}, J = (e, t, n, r = "application/json; charset=utf-8") => ({
 	status: e,
 	contentType: r,
 	body: JSON.stringify(t),
 	...n ? { headers: n } : {}
-}), q = (e, t, n, r, i, a, o) => {
+}), Y = (e, t, n, r, i, a, o) => {
 	let s = e.projection;
-	if (s === void 0) return K(n, {
+	if (s === void 0) return J(n, {
 		error: i,
 		...a
 	}, o);
@@ -159,17 +167,17 @@ var ae = () => (e) => {
 		query: t.query,
 		source: s.source,
 		status: n
-	}, l = d(s.format, {
+	}, l = y(s.format, {
 		status: n,
 		tag: r,
 		message: i,
 		fields: a
 	}, c);
-	return K(n, l.body, {
+	return J(n, l.body, {
 		...o,
 		...l.headers ?? {}
 	}, l.contentType);
-}, J = (e) => (e.headers["content-type"] ?? "application/json").split(";")[0].trim().toLowerCase(), Y = (e, t) => {
+}, X = (e) => (e.headers["content-type"] ?? "application/json").split(";")[0].trim().toLowerCase(), _e = (e, t) => {
 	if (e.length === 0) return;
 	let n = t === "application/x-www-form-urlencoded";
 	if (!n && t !== "application/json" && !/^application\/[^/;\s]+\+json$/.test(t)) return;
@@ -177,21 +185,21 @@ var ae = () => (e) => {
 	if (r.trim() !== "") {
 		if (n) {
 			let e = (e) => decodeURIComponent(e.replace(/\+/g, " "));
-			return X((r.match(/[^&]+/g) ?? []).map((t) => {
+			return Z((r.match(/[^&]+/g) ?? []).map((t) => {
 				let n = t.indexOf("=");
 				return n < 0 ? [e(t), ""] : [e(t.slice(0, n)), e(t.slice(n + 1))];
 			}));
 		}
 		return JSON.parse(r);
 	}
-}, de = (e) => X(new URLSearchParams(e)), X = (e) => {
+}, ve = (e) => Z(new URLSearchParams(e)), Z = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of e) {
 		let e = t.get(n);
 		e === void 0 ? t.set(n, r) : Array.isArray(e) ? e.push(r) : t.set(n, [e, r]);
 	}
 	return Object.fromEntries(t);
-}, Z = (e, t) => {
+}, ye = (e, t) => {
 	let n = e.match(/[^/]+/g) ?? [], r = t.match(/[^/]+/g) ?? [], i = {};
 	for (let e = 0; e < n.length; e++) {
 		let t = n[e];
@@ -205,7 +213,7 @@ var ae = () => (e) => {
 		}
 	}
 	return i;
-}, fe = (e, t) => {
+}, be = (e, t) => {
 	let n = e.path.split("/"), r = n[n.length - 1] === "*", i = r ? n.slice(0, -1) : n, a = t.split("/");
 	if (a.length < i.length) return !1;
 	for (let e = 0; e < i.length; e++) {
@@ -215,225 +223,317 @@ var ae = () => (e) => {
 		} else if (t !== n) return !1;
 	}
 	return a.length === i.length ? !0 : e.match === "exact" && !r ? !1 : a.slice(i.length).some((e) => e.length > 0);
-}, pe = (e, t, n) => ({
-	query: de(e.query),
+}, xe = (e, t, n) => ({
+	query: ve(e.query),
 	params: t,
-	body: n ? Y(e.rawBody, J(e)) : void 0,
-	form: J(e) === "application/x-www-form-urlencoded"
+	body: n ? _e(e.rawBody, X(e)) : void 0,
+	form: X(e) === "application/x-www-form-urlencoded"
 }), Q = /* @__PURE__ */ new Set([
 	"POST",
 	"PUT",
 	"PATCH",
 	"DELETE"
 ]), $ = (t, n, r, i, a) => {
-	if (t instanceof z) return K(t.status, t.body, {
+	if (r.mapFailure !== void 0) try {
+		let e = r.mapFailure(t, {
+			method: a.method,
+			path: a.path,
+			query: a.query
+		});
+		if (e instanceof Promise) throw e.catch(() => void 0), Error("REST failure mapping must complete synchronously");
+		if (L.isEffect(e) && !(e instanceof Error)) throw Error("REST failure mapping must be pure");
+		e !== void 0 && (t = e);
+	} catch {
+		t = /* @__PURE__ */ Error("REST failure mapping could not be applied");
+	}
+	if (t instanceof G) return J(t.status, t.body, {
 		...i,
 		...t.headers
 	}, t.contentType);
 	if (typeof t == "object" && t) {
 		let o = t;
-		if (typeof o.status == "number") return q(r, a, o.status, typeof o._tag == "string" ? o._tag : "Error", typeof o.message == "string" ? o.message : "Error", {}, { ...i });
-		if (o._tag === "Unauthenticated" || t instanceof e) return q(r, a, 401, "Unauthorized", typeof o.reason == "string" ? o.reason : "Authentication required", {}, { ...i });
+		if (typeof o.status == "number") return Y(r, a, o.status, typeof o._tag == "string" ? o._tag : "Error", typeof o.message == "string" ? o.message : "Error", {}, { ...i });
+		if (o._tag === "Unauthenticated" || t instanceof e) return Y(r, a, 401, "Unauthorized", typeof o.reason == "string" ? o.reason : "Authentication required", {}, { ...i });
 		if (o._tag === "ScopeError") {
 			let e = n.type === "anonymous" ? 401 : 403;
-			return q(r, a, e, e === 401 ? "Unauthorized" : "Forbidden", typeof o.message == "string" ? o.message : "Forbidden", {}, { ...i });
+			return Y(r, a, e, e === 401 ? "Unauthorized" : "Forbidden", typeof o.message == "string" ? o.message : "Forbidden", {}, { ...i });
 		}
 		if (o._tag === "NoSuchResource") {
 			let e = t;
-			return q(r, a, 404, "NoSuchResource", typeof o.message == "string" ? o.message : "Not Found", {
+			return Y(r, a, 404, "NoSuchResource", typeof o.message == "string" ? o.message : "Not Found", {
 				resourceType: typeof e.resourceType == "string" ? e.resourceType : null,
 				resourceId: typeof e.resourceId == "string" ? e.resourceId : null
 			}, { ...i });
 		}
 	}
-	return s({
+	return h({
 		error: t,
 		source: "rest",
 		name: `${r.method} ${r.path}`,
 		fields: { status: 500 }
 	}), {
-		...q(r, a, 500, "InternalServerError", "Internal Server Error", {}, { ...i }),
+		...Y(r, a, 500, "InternalServerError", "Internal Server Error", {}, { ...i }),
 		cause: t
 	};
-}, me = (s, c, l) => {
-	let u = s.input ? j.decodeUnknownEffect(s.input) : void 0, d = j.encodeEffect(s.output), f = s.input === void 0 ? void 0 : M.toEncoded(s.input.ast), p = f !== void 0 && (!M.isObjects(f) || f.indexSignatures.length > 0 || f.propertySignatures.some((e) => e.name === "body")), m = {};
-	s.projection !== void 0 && (m["x-voltro-rest-profile"] = s.projection.format.name);
-	let h = (e) => e.replace(/\/$/, "").split("/").length, g = h(s.path);
-	s.deprecated !== void 0 && (m.Deprecation = "true"), s.sunset !== void 0 && (m.Sunset = s.sunset);
-	let _ = {
-		method: s.method,
+}, Se = (e, r, i) => {
+	let d = e.input ? R.decodeUnknownEffect(e.input) : void 0, f = R.encodeEffect(e.output), m = D(e.projection === void 0 ? e.output : e.publicApiDescriptor?.output ?? e.output, e.projection === void 0 ? "raw" : "projection"), h = (t, n, r) => {
+		if (!Number.isInteger(t.status) || t.status < 200 || t.status > 599) throw Error("Invalid final REST response status");
+		let i = e.projection;
+		if (i === void 0) return {
+			...t,
+			body: n
+		};
+		let a = b(i.format, n, {
+			tag: i.tag,
+			method: r.method,
+			path: r.path,
+			query: r.query,
+			source: i.source,
+			status: t.status
+		});
+		return U(a.body, {
+			status: t.status,
+			headers: {
+				...t.headers,
+				...a.headers
+			},
+			...(a.contentType ?? t.contentType) === void 0 ? {} : { contentType: a.contentType ?? t.contentType }
+		});
+	}, g = e.input === void 0 ? void 0 : ae.toEncoded(e.input.ast), _ = g !== void 0 && (!ae.isObjects(g) || g.indexSignatures.length > 0 || g.propertySignatures.some((e) => e.name === "body")), v = {};
+	e.projection !== void 0 && (v["x-voltro-rest-profile"] = e.projection.format.name);
+	let y = (e) => e.replace(/\/$/, "").split("/").length, x = y(e.path);
+	e.deprecated !== void 0 && (v.Deprecation = "true"), e.sunset !== void 0 && (v.Sunset = e.sunset);
+	let S = {
+		method: e.method,
+		...e.publicApiDescriptor === void 0 ? {} : { restContract: e },
 		answersOtherMethods: !0,
-		path: s.path,
-		match: s.path.endsWith("/*") ? "prefix" : "exact",
-		...s.maxBodyBytes === void 0 ? {} : { maxBodyBytes: s.maxBodyBytes },
-		...s.cors === void 0 ? {} : { cors: s.cors },
-		...s.credentials === void 0 ? {} : { credentials: s.credentials },
-		handle: async (f) => {
-			if (!s.path.endsWith("/*") && h(f.path) !== g) return q(s, f, 404, "NotFound", "Not Found", {}, { ...m });
-			let _ = f.method.toUpperCase();
-			if (!(_ === s.method || _ === "HEAD" && s.method === "GET")) return q(s, f, 405, "MethodNotAllowed", "Method Not Allowed", { allow: l }, {
-				...m,
-				Allow: l
+		path: e.path,
+		match: e.path.endsWith("/*") ? "prefix" : "exact",
+		...e.maxBodyBytes === void 0 ? {} : { maxBodyBytes: e.maxBodyBytes },
+		...e.cors === void 0 ? {} : { cors: e.cors },
+		...e.credentials === void 0 ? {} : { credentials: e.credentials },
+		handle: async (g) => {
+			if (!e.path.endsWith("/*") && y(g.path) !== x) return Y(e, g, 404, "NotFound", "Not Found", {}, { ...v });
+			let b = g.method.toUpperCase();
+			if (!(b === e.method || b === "HEAD" && e.method === "GET")) return Y(e, g, 405, "MethodNotAllowed", "Method Not Allowed", { allow: i }, {
+				...v,
+				Allow: i
 			});
-			if (s.sunset !== void 0) {
-				let e = Date.parse(s.sunset);
-				if (!Number.isNaN(e) && Date.now() >= e) return q(s, f, 410, "Gone", "Gone", {
-					...s.version === void 0 ? {} : { version: s.version },
-					...s.deprecated === void 0 ? {} : { replacement: s.deprecated }
-				}, { ...m });
+			if (e.sunset !== void 0) {
+				let t = Date.parse(e.sunset);
+				if (!Number.isNaN(t) && Date.now() >= t) return Y(e, g, 410, "Gone", "Gone", {
+					...e.version === void 0 ? {} : { version: e.version },
+					...e.deprecated === void 0 ? {} : { replacement: e.deprecated }
+				}, { ...v });
 			}
-			let v;
-			if (u) {
-				let e;
+			let S;
+			if (d) {
+				let t;
 				try {
-					e = pe(f, Z(s.path, f.path), p);
+					t = xe(g, ye(e.path, g.path), _);
 				} catch {
-					return q(s, f, 400, "InvalidRequest", "Malformed request body", {}, { ...m });
+					return Y(e, g, 400, "InvalidRequest", "Malformed request body", {}, { ...v });
 				}
-				let t = await A.runPromise(u(e).pipe(A.map((e) => ({
+				let n = await L.runPromise(d(t).pipe(L.map((e) => ({
 					ok: !0,
 					value: e
-				})), A.catch((e) => A.succeed({
+				})), L.catch((e) => L.succeed({
 					ok: !1,
 					cause: e
 				}))));
-				if (!t.ok) return q(s, f, 400, "InvalidRequest", "Invalid request", { detail: String(t.cause) }, { ...m });
-				v = t.value;
+				if (!n.ok) return Y(e, g, 400, "InvalidRequest", "Invalid request", { detail: String(n.cause) }, { ...v });
+				S = n.value;
 			}
-			let y;
+			let C;
 			try {
-				y = c.resolveSubject ? await c.resolveSubject(f.headers) : t(f.headers["x-tenant"] ?? null);
-			} catch (t) {
-				if (t instanceof e || typeof t == "object" && t && t._tag === "Unauthenticated") {
-					let e = t.reason;
-					return q(s, f, 401, "Unauthorized", e ?? "Authentication required", {}, { ...m });
-				}
-				throw t;
+				C = r.resolveSubject ? await r.resolveSubject(g.headers, {
+					path: g.path,
+					query: g.query
+				}) : t(g.headers["x-tenant"] ?? null);
+			} catch (n) {
+				return H(e, $(n, t(null), e, v, g));
 			}
-			if (s.credentials === "bearer" && y.type === "anonymous") return q(s, f, 401, "Unauthorized", y.credentialRejected ?? "Authentication required", {}, { ...m });
-			let b;
-			try {
-				b = c.buildContext ? await c.buildContext(y, f.headers) : void 0;
-			} catch (e) {
-				return I(s, $(e, y, s, m, f));
+			if (e.credentials === "bearer" && C.type === "anonymous") return Y(e, g, 401, "Unauthorized", C.credentialRejected ?? "Authentication required", {}, { ...v });
+			let w = C, T = r.traceId?.() ?? oe(), E = {
+				traceId: T,
+				...g.remoteAddr === void 0 ? {} : { remoteAddr: g.remoteAddr }
+			}, D = r.idempotency, O = D && Q.has(e.method) ? g.headers[D.header.toLowerCase()] : void 0, k = D && O ? u(C.tenantId, e.method, e.path) : "", A = e.projection === void 0 ? void 0 : e.publicApiDescriptor, j;
+			if (D && O) try {
+				let t = await p(A?.input ?? e.input ?? R.Unknown, A === void 0 ? S : S.value, C, {
+					path: g.path,
+					...A === void 0 && e.input === void 0 ? {
+						query: g.query,
+						rawBody: g.rawBody
+					} : {}
+				});
+				S = A === void 0 ? t.input : { value: t.input }, j = t.fingerprint;
+			} catch {
+				return Y(e, g, 503, "IdempotencyUnavailable", "This request input cannot be safely retained for replay.", {}, { ...v });
 			}
-			let x = typeof b == "object" && b && "store" in b ? b.store : c.store, S = {
-				subject: y,
-				headers: f.headers,
-				store: x,
-				method: _,
-				path: f.path,
-				query: f.query,
-				rawBody: f.rawBody,
-				...b === void 0 ? {} : { app: b },
-				...f.remoteAddr === void 0 ? {} : { remoteAddr: f.remoteAddr }
-			};
-			try {
-				if (s.guards) for (let e of s.guards) {
-					let t = await e(S);
-					if (t) return q(s, f, t.status, t.status === 401 ? "Unauthorized" : t.status === 403 ? "Forbidden" : "GuardRejected", t.message, {}, { ...m });
+			let M, N = async () => {
+				let t = r.bindReplayAuthority?.({
+					subject: w,
+					traceId: T,
+					tag: A?.name ?? e.operationId ?? `${e.method} ${e.path}`,
+					kind: A?.kind ?? "rest",
+					input: A === void 0 ? S : S.value,
+					surface: "rest",
+					...A?.publicApi === void 0 ? {} : { publicApi: A.publicApi },
+					...g.remoteAddr === void 0 ? {} : { remoteAddr: g.remoteAddr }
+				});
+				if (t !== void 0) throw t instanceof Promise && t.catch(() => void 0), Error("Replay authority bindings must complete synchronously");
+				let i = await L.runPromise(a(w, void 0, S));
+				if (i) throw i;
+				C = n(w);
+				let o = r.buildContext ? await r.buildContext(C, g.headers, E) : void 0, s = typeof o == "object" && o && "store" in o ? o.store : r.store;
+				M = {
+					...E,
+					subject: C,
+					headers: g.headers,
+					store: s,
+					method: b,
+					path: g.path,
+					query: g.query,
+					rawBody: g.rawBody,
+					...o === void 0 ? {} : { app: o }
+				};
+				for (let t of e.guards ?? []) {
+					let n = await t(M, {
+						input: S,
+						defaultDeny: r.defaultDeny === !0
+					});
+					if (n) return Y(e, g, n.status, n.status === 401 ? "Unauthorized" : n.status === 403 ? "Forbidden" : "GuardRejected", n.message, {}, { ...v });
 				}
-				if (s.rateLimit !== void 0 && c.rateLimit !== void 0) {
-					let e = await A.runPromise(c.rateLimit(s.rateLimit, S, s).pipe(A.as({ allowed: !0 }), A.catch((e) => A.succeed({
+			}, P, F, I = !1;
+			try {
+				let t = await N();
+				if (t) return t;
+				if (e.rateLimit !== void 0 && r.rateLimit !== void 0) {
+					let t = await L.runPromise(r.rateLimit(e.rateLimit, M, e).pipe(L.as({ allowed: !0 }), L.catch((e) => L.succeed({
 						allowed: !1,
 						error: e
 					}))));
-					if (!e.allowed) return $(e.error, y, s, m, f);
+					if (!t.allowed) return $(t.error, C, e, v, g);
+					let n = await N();
+					if (n) return n;
 				}
-			} catch (e) {
-				return $(e, y, s, m, f);
-			}
-			let C = c.idempotency, w = C && Q.has(s.method) ? f.headers[C.header.toLowerCase()] : void 0, T = C && w ? o(y.tenantId, s.method, s.path) : "", E;
-			if (C && w) {
-				let e = await n(C.store, T, w, C.ttlMs, Date.now());
-				if (e.kind === "replay") return K(e.response.status, e.response.body, {
-					...m,
-					"Idempotency-Replayed": "true"
-				});
-				if (e.kind === "conflict") return q(s, f, 409, "Conflict", "A request with this Idempotency-Key is already being processed", {}, { ...m });
-				E = a(C.store, T, w);
-			}
-			try {
-				let e = await s.handler(v, S);
-				if (W(e) || G(e)) return C && w && await r(C.store, T, w), G(e) ? {
-					status: e.status ?? 200,
+				if (D && O) {
+					if (j === void 0) throw Error("Missing captured REST input identity");
+					let t = await o(D.store, k, O, j, D.ttlMs, Date.now());
+					t.kind === "fresh" && (F = t.claim, P = l(D.store, F));
+					let n = await N();
+					if (n) return n;
+					if (t.kind === "input-conflict" || t.kind === "input-unbound") return Y(e, g, 409, "IdempotencyInputRefused", "Check the original operation before starting another action; this request cannot be matched safely.", {}, { ...v });
+					if (t.kind === "replay") try {
+						let n = t.response.status;
+						if (!Number.isInteger(n) || n < 200 || n > 599 || e.projection !== void 0 && n !== 200) throw Error("Invalid retained REST response status");
+						let r = await m.read(t.response), i = await L.runPromise(f(r.body)), a = h(U(r.body, {
+							status: n,
+							...r.headers === void 0 ? {} : { headers: r.headers },
+							...r.contentType === void 0 ? {} : { contentType: r.contentType }
+						}), i, g), o = {
+							...v,
+							...a.headers,
+							"Idempotency-Replayed": "true"
+						};
+						return H(e, n === 204 || n === 304 ? {
+							status: n,
+							headers: o
+						} : J(n, a.body, o, a.contentType));
+					} catch {
+						throw Error("Stored REST response is incompatible with the current output contract");
+					}
+					if (t.kind === "conflict") return Y(e, g, 409, "Conflict", "A request with this Idempotency-Key is already being processed", {}, { ...v });
+				}
+				let n = await e.handler(S, M);
+				if (I = !0, K(n) || q(n)) return D && F && await s(D.store, F), q(n) ? {
+					status: n.status ?? 200,
 					headers: {
-						...m,
-						...e.headers
+						...v,
+						...n.headers
 					},
-					byteStream: e.byteStream,
-					...e.contentType === void 0 ? {} : { contentType: e.contentType }
+					byteStream: n.byteStream,
+					...n.contentType === void 0 ? {} : { contentType: n.contentType }
 				} : {
 					status: 200,
-					headers: m,
-					stream: e.stream
+					headers: v,
+					stream: n.stream
 				};
-				let t = R(e) ? e : L(e), n = await A.runPromise(d(t.body)), a = s.method === "GET" && t.status === 200 ? ce(s.cache, f, n, v, y) : {}, o = {
-					...m,
-					...t.headers,
-					...a
+				let i = W(n) ? n : U(n), a = await L.runPromise(f(i.body)), u = h(i, a, g), d = u.body, p = e.method === "GET" && u.status === 200 ? ue(e.cache, g, d, S, C) : {}, _ = {
+					...v,
+					...u.headers,
+					...p
 				};
-				if (C && w && await i(C.store, T, w, {
-					status: t.status,
-					body: n
-				}, Date.now()), s.etag === !0 && s.method === "GET") {
-					let e = `W/"${await ue(JSON.stringify(n))}"`, r = f.headers["if-none-match"];
-					return r !== void 0 && r.split(",").some((t) => t.trim() === e) ? {
+				if (D && F && !await c(D.store, F, {
+					status: u.status,
+					...await m.capture(i.body, i)
+				}, Date.now())) throw Error("Original idempotent response claim is no longer owned");
+				if (e.etag === !0 && e.method === "GET") {
+					let t = `W/"${await ge(JSON.stringify(d))}"`, n = g.headers["if-none-match"];
+					return n !== void 0 && n.split(",").some((e) => e.trim() === t) ? {
 						status: 304,
 						headers: {
-							...m,
-							...a,
-							ETag: e
+							...v,
+							...p,
+							ETag: t
 						}
-					} : I(s, K(t.status, n, {
-						...o,
-						ETag: e
-					}, t.contentType));
+					} : H(e, J(u.status, d, {
+						..._,
+						ETag: t
+					}, u.contentType));
 				}
-				return t.status === 204 || t.status === 304 ? I(s, {
-					status: t.status,
-					headers: o
-				}) : I(s, K(t.status, n, o, t.contentType));
-			} catch (e) {
-				return C && w && await r(C.store, T, w), I(s, $(e, y, s, m, f));
+				return u.status === 204 || u.status === 304 ? H(e, {
+					status: u.status,
+					headers: _
+				}) : H(e, J(u.status, d, _, u.contentType));
+			} catch (t) {
+				if (D && F && I) try {
+					await c(D.store, F, {
+						status: 500,
+						body: null
+					}, Date.now());
+				} catch {}
+				return H(e, $(I && F ? /* @__PURE__ */ Error("Idempotent response could not be retained") : t, C, e, v, g));
 			} finally {
-				E?.();
+				if (P?.(), D && F && !I) try {
+					await s(D.store, F);
+				} catch {}
 			}
 		}
 	};
 	return {
-		..._,
-		handle: async (e) => {
-			let n = P(s.cors, e.headers.origin), r;
-			if (s.cors !== void 0 && e.method === "OPTIONS" && e.headers["access-control-request-method"] !== void 0 && e.headers["access-control-request-method"] === s.method) return F(s.cors, s.method, e.headers);
-			let i = e;
-			if (s.credentials === "bearer" && (e.method === s.method || e.method === "HEAD" && s.method === "GET")) {
-				let t = Object.fromEntries(Object.entries(e.headers).filter(([e]) => e.toLowerCase() !== "cookie"));
-				if (i = {
-					...e,
+		...S,
+		handle: async (n) => {
+			let r = B(e.cors, n.headers.origin), i;
+			if (e.cors !== void 0 && n.method === "OPTIONS" && n.headers["access-control-request-method"] !== void 0 && n.headers["access-control-request-method"] === e.method) return V(e.cors, e.method, n.headers);
+			let a = n;
+			if (e.credentials === "bearer" && (n.method === e.method || n.method === "HEAD" && e.method === "GET")) {
+				let t = Object.fromEntries(Object.entries(n.headers).filter(([e]) => e.toLowerCase() !== "cookie"));
+				if (a = {
+					...n,
 					headers: t
-				}, !/^Bearer\s+\S+$/i.test(t.authorization ?? "")) return q(s, i, 401, "Unauthorized", "Bearer authentication required", {}, n);
+				}, !/^Bearer\s+\S+$/i.test(t.authorization ?? "")) return Y(e, a, 401, "Unauthorized", "Bearer authentication required", {}, r);
 			}
 			try {
-				r = await _.handle(i);
-			} catch (e) {
-				r = $(e, t(null), s, m, i);
+				i = await S.handle(a);
+			} catch (n) {
+				i = $(n, t(null), e, v, a);
 			}
-			let a = {
-				...r.headers,
-				...n
-			}, o = Object.entries(r.headers ?? {}).find(([e]) => e.toLowerCase() === "vary")?.[1];
-			if (o !== void 0 && s.cors !== void 0) {
-				for (let e of Object.keys(a)) e.toLowerCase() === "vary" && delete a[e];
-				a.vary = [...new Set(`${Array.isArray(o) ? o.join(", ") : o}, Origin`.split(",").map((e) => e.trim()))].join(", ");
+			let o = {
+				...i.headers,
+				...r
+			}, s = Object.entries(i.headers ?? {}).find(([e]) => e.toLowerCase() === "vary")?.[1];
+			if (s !== void 0 && e.cors !== void 0) {
+				for (let e of Object.keys(o)) e.toLowerCase() === "vary" && delete o[e];
+				o.vary = [...new Set(`${Array.isArray(s) ? s.join(", ") : s}, Origin`.split(",").map((e) => e.trim()))].join(", ");
 			}
-			return I(s, {
-				...r,
-				headers: a
+			return H(e, {
+				...i,
+				headers: o
 			});
 		}
 	};
-}, he = (e, t = {}) => {
+}, Ce = (e, t = {}) => {
 	for (let n of e) {
 		if (n.rateLimit !== void 0 && t.rateLimit === void 0) throw Error(`REST route ${n.method} ${n.path} declares rateLimit but no rate-limit plugin is mounted`);
 		if (n.rateLimit !== void 0 && (!Number.isInteger(n.rateLimit.limit) || n.rateLimit.limit <= 0)) throw Error(`REST route ${n.method} ${n.path} rateLimit.limit must be a positive integer`);
@@ -446,11 +546,13 @@ var ae = () => (e) => {
 		let e = r.get(n(t.path)) ?? [];
 		e.includes(t.method) || e.push(t.method), r.set(n(t.path), e);
 	}
-	return e.map((e) => me(e, t, r.get(n(e.path)).join(", ")));
-}, ge = async (e, t) => {
+	return e.map((e) => ({
+		...Se(e, t, r.get(n(e.path)).join(", ")),
+		workload: "rest"
+	}));
+}, we = async (e, t) => {
 	let n = await e[0].handle(t);
 	for (let r = 1; r < e.length && n.status === 405; r++) n = await e[r].handle(t);
 	return n;
 };
-//#endregion
-export { c as JSONAPI_MEDIA_TYPE, l as PROBLEM_JSON, u as REST_PROFILE_NAMES, z as RestRouteError, le as bytes, y as coerceQueryObject, b as coerceQueryValue, x as collectPublicApiRoutes, S as declaredErrorTags, V as defineRestRoute, C as derivePublicMethod, w as derivePublicPath, T as deriveResource, ge as dispatchSharedPath, d as encodeRestError, f as encodeRestSuccess, E as errorMemberSchema, G as isRestByteResponse, R as isRestResponse, W as isRestStreamResponse, Z as matchPathParams, p as nextLink, D as normalizePathParams, O as operationIdOf, k as pathParamNames, m as problemDetails, h as problemTypeOf, ee as projectedFailure, te as publicApiRoute, ne as publicSurfaceDigest, se as requireAnyScope, ae as requireAuthenticated, oe as requireScope, g as resolveRestFormat, re as resourceIdField, L as response, P as restCorsHeaders, F as restCorsPreflight, B as restError, he as restRoutesToHttpRoutes, _ as restViewSchema, fe as routeAcceptsPath, H as sse, U as sseFrame, v as toSnakeCase, ie as wireExample };
+export { g as JSONAPI_MEDIA_TYPE, _ as PROBLEM_JSON, v as REST_PROFILE_NAMES, G as RestRouteError, he as bytes, O as coerceQueryObject, k as coerceQueryValue, A as collectPublicApiRoutes, d as declaredErrorTags, fe as defineRestRoute, j as derivePublicMethod, M as derivePublicPath, N as deriveResource, we as dispatchSharedPath, y as encodeRestError, b as encodeRestSuccess, f as errorMemberSchema, q as isRestByteResponse, W as isRestResponse, K as isRestStreamResponse, ye as matchPathParams, x as nextLink, P as normalizePathParams, F as operationIdOf, I as pathParamNames, S as problemDetails, C as problemTypeOf, ee as projectedFailure, te as publicApiRoute, ne as publicSurfaceDigest, le as requireAnyScope, se as requireAuthenticated, ce as requireScope, w as resolveRestFormat, re as resourceIdField, U as response, B as restCorsHeaders, V as restCorsPreflight, de as restError, Ce as restRoutesToHttpRoutes, T as restViewSchema, be as routeAcceptsPath, pe as sse, me as sseFrame, E as toSnakeCase, ie as wireExample };