@voltro/runtime 0.85.0 → 0.86.0

package/dist/fieldCipher.js

@@ -0,0 +1,61 @@
+import { BOUND_ENCRYPTED_PREFIX as e, ENCRYPTED_PREFIX as t, decodeFieldValue as n, encodeFieldValue as r, isEncrypted as i } from "@voltro/database";
+import { createCipheriv as a, createDecipheriv as o, randomBytes as s, scryptSync as c } from "node:crypto";
+//#region src/fieldCipher.ts
+var l = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : c(e, "voltro:field-encryption:v1", 32), u = (e, t) => {
+	let n = e === "r" ? t?.row : e === "c" ? t?.column : void 0;
+	if (n === void 0) throw Error(e === "r" || e === "c" ? `field cipher: ciphertext is bound to its ${e === "r" ? "row" : "column"} and was read without that binding` : "field cipher: malformed ciphertext");
+	return Buffer.from(n, "utf8");
+}, d = (n) => {
+	if (n.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${n.length}`);
+	return {
+		encrypt: (r, i) => {
+			let o = s(12), c = a("aes-256-gcm", n, o), l = i === void 0 ? void 0 : i.row === void 0 ? "c" : "r";
+			l !== void 0 && c.setAAD(u(l, i));
+			let d = Buffer.concat([c.update(r, "utf8"), c.final()]), f = c.getAuthTag(), p = `${o.toString("base64")}:${f.toString("base64")}:${d.toString("base64")}`;
+			return l === void 0 ? `${t}${p}` : `${e}${l}:${p}`;
+		},
+		decrypt: (r, i) => {
+			let a = r.startsWith(e), s = r.slice(a ? e.length : t.length).split(":"), c = a ? s.shift() ?? "" : void 0, [l, d, f] = s;
+			if (!l || !d || f === void 0) throw Error("field cipher: malformed ciphertext");
+			let p = o("aes-256-gcm", n, Buffer.from(l, "base64"));
+			return c !== void 0 && p.setAAD(u(c, i)), p.setAuthTag(Buffer.from(d, "base64")), Buffer.concat([p.update(Buffer.from(f, "base64")), p.final()]).toString("utf8");
+		}
+	};
+}, f = (e, t = []) => {
+	let n = d(l(e)), r = t.filter((t) => t.trim() !== "" && t !== e).map((e) => d(l(e)));
+	if (r.length === 0) return n;
+	let i = (e, t, n) => {
+		try {
+			return e.decrypt(t, n), !0;
+		} catch {
+			return !1;
+		}
+	};
+	return {
+		encrypt: n.encrypt,
+		decrypt: (e, t) => {
+			try {
+				return n.decrypt(e, t);
+			} catch (n) {
+				for (let n of r) try {
+					return n.decrypt(e, t);
+				} catch {}
+				throw n;
+			}
+		},
+		sealedWithPreviousKey: (e, t) => !i(n, e, t) && r.some((n) => i(n, e, t))
+	};
+}, p, m = (e) => {
+	p = e;
+}, h = () => p, g = "no field cipher registered — set VOLTRO_FIELD_ENCRYPTION_KEY (`voltro secret generate field-encryption`; `voltro dev` mints one), or call setFieldCipher.", _ = (e, t) => {
+	let n = h();
+	if (!n) throw Error(`encryptField: ${g}`);
+	return r(n, e, t);
+}, v = (e, t) => {
+	if (!i(e)) return e;
+	let r = h();
+	if (!r) throw Error(`decryptField: ${g}`);
+	return n(r, e, void 0, t);
+};
+//#endregion
+export { v as decryptField, l as deriveKey, _ as encryptField, h as getFieldCipher, d as makeAesCipher, f as makeFieldCipher, m as setFieldCipher };

package/dist/fingerprint.js

@@ -0,0 +1,21 @@
+import { createHash as e } from "node:crypto";
+//#region src/fingerprint.ts
+var t = (e) => {
+	if (e == null) return null;
+	if (Array.isArray(e)) return e.map(t);
+	if (typeof e == "object") {
+		let n = e, r = Object.keys(n).sort(), i = {};
+		for (let e of r) i[e] = t(n[e]);
+		return i;
+	}
+	return e;
+}, n = (n, r, i) => {
+	let a = t({
+		table: n,
+		predicate: r,
+		indexHint: i ?? null
+	});
+	return e("sha256").update(JSON.stringify(a)).digest("hex").slice(0, 16);
+};
+//#endregion
+export { t as canonicalize, n as fingerprintFor };

package/dist/finops.js

@@ -0,0 +1,42 @@
+import { Context as e, Effect as t } from "effect";
+//#region src/finops.ts
+var n = /* @__PURE__ */ new Set([
+	"info",
+	"warn",
+	"critical"
+]), r = /* @__PURE__ */ new Set(["observe", "suspend"]), i = (e, t) => /* @__PURE__ */ Error(`defineCostBudget(${JSON.stringify(e)}): ${t}`), a = (e) => {
+	let t = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/.exec(e.trim());
+	if (t === null) return null;
+	let n = Number(t[1]);
+	if (!(Number.isFinite(n) && n > 0)) return null;
+	let r = t[2];
+	return n * (r === "ms" ? 1 : r === "s" ? 1e3 : r === "m" ? 6e4 : r === "h" ? 36e5 : 864e5);
+}, o = (e) => {
+	let t = e.name;
+	if (typeof t != "string" || t.length === 0) throw Error("defineCostBudget: a non-empty `name` is required");
+	if (!(typeof e.limit == "number" && Number.isFinite(e.limit) && e.limit > 0)) throw i(t, "a positive, finite `limit` is required");
+	if (e.unit !== void 0 && (typeof e.unit != "string" || e.unit.length === 0)) throw i(t, "unit, when present, must be a non-empty string");
+	let o = e.warnAt ?? .8;
+	if (!(typeof o == "number" && o >= 0 && o <= 1)) throw i(t, "warnAt, when present, must be in [0, 1]");
+	let s = null;
+	if (e.window !== void 0 && (s = a(e.window), s === null)) throw i(t, `window must be an interval like '1h' / '24h' (got ${JSON.stringify(e.window)})`);
+	let c = e.severity ?? "warn";
+	if (!n.has(c)) throw i(t, `severity must be one of info | warn | critical (got ${JSON.stringify(c)})`);
+	let l = e.onExceeded ?? "observe";
+	if (!r.has(l)) throw i(t, `onExceeded must be observe | suspend (got ${JSON.stringify(e.onExceeded)})`);
+	return {
+		_voltroCostBudget: !0,
+		name: t,
+		limit: e.limit,
+		unit: e.unit ?? null,
+		warnAt: o,
+		windowMs: s,
+		severity: c,
+		onExceeded: l,
+		...e.description === void 0 ? {} : { description: e.description }
+	};
+}, s = (e) => typeof e == "object" && !!e && e._voltroCostBudget === !0, c = class extends e.Service()("@voltro/CostRegistry") {}, l = (e, n) => t.gen(function* () {
+	return (yield* c).budget(e.name, n);
+});
+//#endregion
+export { c as CostRegistry, o as defineCostBudget, s as isCostBudgetDefinition, l as useCostBudget };

package/dist/finopsAccountant.js

@@ -0,0 +1,216 @@
+//#region src/finopsAccountant.ts
+var e = class {
+	total = 0;
+	byUnit = /* @__PURE__ */ new Map();
+	bySubscription = /* @__PURE__ */ new Map();
+	lastUpdatedAt = null;
+	add(e, t, n) {
+		this.total += t, this.byUnit.set(e.unit, (this.byUnit.get(e.unit) ?? 0) + t);
+		let r = e.subscriptionId;
+		r != null && r.length > 0 && this.bySubscription.set(r, (this.bySubscription.get(r) ?? 0) + t), this.lastUpdatedAt = e.at ?? n;
+	}
+	state(e) {
+		return {
+			tenantId: e,
+			total: this.total,
+			byUnit: Object.fromEntries(this.byUnit),
+			bySubscription: Object.fromEntries(this.bySubscription),
+			lastUpdatedAt: this.lastUpdatedAt
+		};
+	}
+}, t = {
+	ok: 0,
+	warn: 1,
+	exceeded: 2
+}, n = class {
+	def;
+	tenantId;
+	spent = 0;
+	windowStart = null;
+	status = "ok";
+	since = null;
+	lastUpdatedAt = null;
+	lastCause = null;
+	constructor(e, t) {
+		this.def = e, this.tenantId = t;
+	}
+	get warnThreshold() {
+		return this.def.warnAt * this.def.limit;
+	}
+	statusOf(e) {
+		return e >= this.def.limit ? "exceeded" : e >= this.warnThreshold ? "warn" : "ok";
+	}
+	rollWindow(e) {
+		if (this.def.windowMs === null) return null;
+		if (this.windowStart === null) return this.windowStart = e, null;
+		let t = e - this.windowStart;
+		return t < this.def.windowMs ? null : (this.windowStart = e - t % this.def.windowMs, this.spent = 0, this.settle("ok", e, null));
+	}
+	settle(e, n, r) {
+		let i = this.status;
+		return e === i ? null : (this.status = e, this.since = n, t[e] > t[i] ? (this.lastCause = r, {
+			kind: e === "exceeded" ? "exceeded" : "warn",
+			state: this.state(),
+			cause: r
+		}) : {
+			kind: "recovered",
+			state: this.state(),
+			cause: null
+		});
+	}
+	apply(e, t, n) {
+		let i = [], a = this.rollWindow(n);
+		a !== null && i.push(a), this.spent += t, this.lastUpdatedAt = e.at ?? n;
+		let o = this.settle(this.statusOf(this.spent), n, r(e));
+		return o !== null && i.push(o), i;
+	}
+	tick(e) {
+		return this.rollWindow(e);
+	}
+	reset(e) {
+		return this.spent = 0, this.windowStart = this.def.windowMs === null ? null : e, this.lastUpdatedAt = e, this.settle("ok", e, null);
+	}
+	state() {
+		return {
+			budget: this.def.name,
+			tenantId: this.tenantId,
+			status: this.status,
+			severity: this.def.severity,
+			onExceeded: this.def.onExceeded,
+			spent: this.spent,
+			limit: this.def.limit,
+			warnThreshold: this.warnThreshold,
+			unit: this.def.unit,
+			windowStartedAt: this.windowStart,
+			since: this.since,
+			lastUpdatedAt: this.lastUpdatedAt,
+			lastCause: this.lastCause,
+			...this.def.description === void 0 ? {} : { description: this.def.description }
+		};
+	}
+}, r = (e) => ({
+	unit: e.unit,
+	subscriptionId: e.subscriptionId ?? null,
+	procedure: e.procedure ?? null,
+	traceId: e.traceId ?? null
+}), i = (e) => Number.isFinite(e) && e > 0 ? e : 0, a = class {
+	now;
+	attribution = /* @__PURE__ */ new Map();
+	counters = /* @__PURE__ */ new Map();
+	budgetsByName = /* @__PURE__ */ new Map();
+	totalBudgets = [];
+	unitBudgets = /* @__PURE__ */ new Map();
+	constructor(e, t = {}) {
+		this.now = t.now ?? Date.now;
+		for (let t of e) {
+			if (this.budgetsByName.has(t.name)) throw Error(`cost budget: duplicate name '${t.name}' — names must be unique across all cost budgets`);
+			if (this.budgetsByName.set(t.name, t), this.counters.set(t.name, /* @__PURE__ */ new Map()), t.unit === null) this.totalBudgets.push(t);
+			else {
+				let e = this.unitBudgets.get(t.unit) ?? [];
+				e.push(t), this.unitBudgets.set(t.unit, e);
+			}
+		}
+	}
+	counterFor(e, t) {
+		let r = this.counters.get(e.name), i = r.get(t);
+		return i === void 0 && (i = new n(e, t), r.set(t, i)), i;
+	}
+	record(t) {
+		let n = i(t.amount);
+		if (n === 0) return [];
+		let r = t.at ?? this.now(), a = this.attribution.get(t.tenantId);
+		a === void 0 && (a = new e(), this.attribution.set(t.tenantId, a)), a.add(t, n, r);
+		let o = this.unitBudgets.get(t.unit);
+		if (this.totalBudgets.length === 0 && o === void 0) return [];
+		let s = [];
+		for (let e of this.totalBudgets) s.push(...this.counterFor(e, t.tenantId).apply(t, n, r));
+		if (o !== void 0) for (let e of o) s.push(...this.counterFor(e, t.tenantId).apply(t, n, r));
+		return s;
+	}
+	tick() {
+		let e = this.now(), t = [];
+		for (let n of this.budgetsByName.values()) if (n.windowMs !== null) for (let r of this.counters.get(n.name).values()) {
+			let n = r.tick(e);
+			n !== null && t.push(n);
+		}
+		return t;
+	}
+	reset(e) {
+		let t = this.now(), n = [], r = (e) => {
+			this.attribution.delete(e);
+			for (let r of this.counters.values()) {
+				let i = r.get(e);
+				if (i !== void 0) {
+					let e = i.reset(t);
+					e !== null && n.push(e);
+				}
+			}
+		};
+		if (e === void 0) for (let e of /* @__PURE__ */ new Set([...this.attribution.keys(), ...this.allCounterTenants()])) r(e);
+		else r(e);
+		return n;
+	}
+	allCounterTenants() {
+		let e = /* @__PURE__ */ new Set();
+		for (let t of this.counters.values()) for (let n of t.keys()) e.add(n);
+		return e;
+	}
+	attributionSnapshot() {
+		let e = Array(this.attribution.size), t = 0;
+		return this.attribution.forEach((n, r) => {
+			e[t++] = n.state(r);
+		}), e;
+	}
+	tenantState(e) {
+		return this.attribution.get(e)?.state(e) ?? null;
+	}
+	budgetStates() {
+		let e = [];
+		for (let t of this.counters.values()) for (let n of t.values()) e.push(n.state());
+		return e;
+	}
+	budgetState(e, t) {
+		return this.counters.get(e)?.get(t)?.state() ?? null;
+	}
+	breaches() {
+		return this.budgetStates().filter((e) => e.status !== "ok");
+	}
+}, o = (e) => {
+	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = e.discovered.map((e) => e.definition), o = new a(i, {
+		now: t,
+		...n === void 0 ? {} : { log: n }
+	}), s = i.some((e) => e.windowMs !== null), c = (e) => {
+		for (let t of e) for (let e of r) try {
+			e(t);
+		} catch (e) {
+			n.warn("finops: budget signal listener threw", { budget: t.state.budget }, e);
+		}
+	}, l = (e) => {
+		try {
+			c(o.record(e));
+		} catch (t) {
+			n.warn("finops: cost record failed", { unit: e.unit }, t);
+		}
+	}, u = () => {
+		s && c(o.tick());
+	}, d = null;
+	return s && (d = setInterval(u, e.tickIntervalMs ?? 3e4), d.unref?.()), {
+		registry: {
+			attribution: () => o.attributionSnapshot(),
+			tenant: (e) => o.tenantState(e),
+			budgets: () => o.budgetStates(),
+			budget: (e, t) => o.budgetState(e, t),
+			breaches: () => o.breaches(),
+			subscribe: (e) => (r.add(e), () => r.delete(e))
+		},
+		record: l,
+		reset: (e) => c(o.reset(e)),
+		detach: () => {
+			d !== null && clearInterval(d), r.clear();
+		},
+		registered: i.map((e) => e.name),
+		runTick: u
+	};
+};
+//#endregion
+export { a as CostAccountant, o as attachFinops };

package/dist/handlerBody.js

@@ -0,0 +1,8 @@
+import { Effect as e } from "effect";
+//#region src/handlerBody.ts
+function t(t, n) {
+	if (e.isEffect(t)) return n ? n(t) : e.runPromise(t);
+	if (t instanceof Promise) return t;
+}
+//#endregion
+export { t as settleHandlerBody };

package/dist/healthProbes.js

@@ -0,0 +1,55 @@
+//#region src/healthProbes.ts
+var e = "/internal", t = (t, n) => ({
+	path: (t?.path ?? e).replace(/\/+$/, "") || e,
+	liveness: t?.liveness ?? (() => !0),
+	readiness: t?.readiness ?? n
+}), n = (e, t) => {
+	if (!t.startsWith(`${e.path}/`)) return;
+	let n = t.slice(e.path.length + 1);
+	return n === "liveness" || n === "readiness" || n === "startup" ? n : void 0;
+}, r = async (e, t, n) => {
+	if (t === "liveness") try {
+		return await e.liveness() ? {
+			status: 200,
+			body: "ok",
+			contentType: "text/plain"
+		} : {
+			status: 503,
+			body: "not-live",
+			contentType: "text/plain"
+		};
+	} catch {
+		return {
+			status: 503,
+			body: "not-live",
+			contentType: "text/plain"
+		};
+	}
+	if (t === "startup" && n !== void 0) {
+		let e = n();
+		return {
+			status: e.ready ? 200 : 503,
+			body: JSON.stringify(e),
+			contentType: "application/json"
+		};
+	}
+	try {
+		return await e.readiness() ? {
+			status: 200,
+			body: "ready",
+			contentType: "text/plain"
+		} : {
+			status: 503,
+			body: "not-ready",
+			contentType: "text/plain"
+		};
+	} catch {
+		return {
+			status: 503,
+			body: "not-ready",
+			contentType: "text/plain"
+		};
+	}
+};
+//#endregion
+export { r as answerProbe, n as probeFor, t as resolveHealth };

package/dist/httpClientSsrf.js

@@ -0,0 +1,49 @@
+import { Effect as e, Layer as t } from "effect";
+import { HttpClient as n, HttpClientError as r } from "effect/http";
+//#region src/httpClientSsrf.ts
+var i = class extends Error {
+	url;
+	reason;
+	_tag = "SsrfBlockedError";
+	constructor(e, t) {
+		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
+	}
+}, a = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, o = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), s = (e, t, n) => n.some((n) => {
+	let r = n.trim().toLowerCase();
+	if (r === "") return !1;
+	let i = t === "" ? e : `${e}:${t}`;
+	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
+}), c = (e, t = {}) => {
+	let n;
+	try {
+		n = new URL(e);
+	} catch {
+		return "malformed url";
+	}
+	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
+	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+	if (s(r, n.port, t.allowHosts ?? [])) return null;
+	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
+	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
+	if (i) {
+		let e = Number(i[1]), t = Number(i[2]);
+		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : a(e, t) ? `blocked private/reserved address ${r}` : null;
+	}
+	if (r.includes(":")) {
+		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
+		return e ? c(`${n.protocol}//${e[1]}`, t) : o(r) ? `blocked private/reserved address ${r}` : null;
+	}
+	return null;
+}, l = (a = {}) => t.effect(n.HttpClient, e.map(n.HttpClient, (t) => {
+	let o = n.transform(t, (t, n) => e.suspend(() => {
+		let o = c(n.url, a);
+		return o === null ? t : e.fail(new r.HttpClientError({ reason: new r.TransportError({
+			request: n,
+			cause: new i(n.url, o),
+			description: `SSRF policy: ${o}`
+		}) }));
+	}));
+	return n.followRedirects(o, a.maxRedirects ?? 5);
+}));
+//#endregion
+export { i as SsrfBlockedError, l as ssrfGuardHttpClientLayer, c as ssrfReason };

package/dist/httpClientTracing.js

@@ -0,0 +1,11 @@
+import { formatTraceparent as e } from "./traceparent.js";
+import { Effect as t, Layer as n } from "effect";
+import { HttpClient as r, HttpClientRequest as i } from "effect/http";
+//#region src/httpClientTracing.ts
+var a = n.effect(r.HttpClient, t.map(r.HttpClient, (n) => n.pipe(r.mapRequestEffect((n) => t.currentSpan.pipe(t.map((t) => n.headers.traceparent === void 0 ? i.setHeader(n, "traceparent", e({
+	traceId: t.traceId,
+	spanId: t.spanId,
+	sampled: t.sampled
+})) : n), t.catch(() => t.succeed(n)))))));
+//#endregion
+export { a as tracingHttpClientLayer };

package/dist/httpCompression.js

@@ -0,0 +1,76 @@
+import { brotliCompressSync as e, constants as t, gzipSync as n } from "node:zlib";
+//#region src/httpCompression.ts
+var r = 1024, i = [
+	"text/",
+	"application/json",
+	"application/javascript",
+	"application/xml",
+	"image/svg+xml",
+	"application/rss+xml"
+], a = (e) => {
+	if (e === void 0) return !1;
+	let t = e.split(";")[0].trim().toLowerCase();
+	return i.some((e) => t === e || t.startsWith(e));
+}, o = (e) => {
+	if (e === void 0 || e === "") return;
+	let t = /* @__PURE__ */ new Map();
+	for (let n of e.split(",")) {
+		let [e, ...r] = n.trim().split(";");
+		if (e === void 0 || e === "") continue;
+		let i = 1;
+		for (let e of r) {
+			let [t, n] = e.trim().split("=");
+			t === "q" && n !== void 0 && (i = Number(n));
+		}
+		t.set(e.trim().toLowerCase(), Number.isFinite(i) ? i : 1);
+	}
+	let n = (e) => {
+		let n = t.get(e);
+		if (n !== void 0) return n > 0;
+		let r = t.get("*");
+		return r !== void 0 && r > 0;
+	};
+	if (n("br")) return "br";
+	if (n("gzip")) return "gzip";
+}, s = (r, i) => i === "br" ? new Uint8Array(e(r, { params: {
+	[t.BROTLI_PARAM_QUALITY]: 4,
+	[t.BROTLI_PARAM_SIZE_HINT]: r.length
+} })) : new Uint8Array(n(r, { level: 6 })), c = (e) => {
+	let t = e.options?.enabled ?? !0, n = e.options?.minBytes ?? 1024, r = a(e.contentType), i = r ? { vary: "Accept-Encoding" } : {};
+	if (!t || !r || e.body.length < n) return {
+		bytes: e.body,
+		headers: i,
+		compressed: !1
+	};
+	let c = o(e.acceptEncoding);
+	if (c === void 0) return {
+		bytes: e.body,
+		headers: i,
+		compressed: !1
+	};
+	let l = s(e.body, c);
+	return l.length >= e.body.length ? {
+		bytes: e.body,
+		headers: i,
+		compressed: !1
+	} : {
+		bytes: l,
+		headers: {
+			...i,
+			"content-encoding": c
+		},
+		compressed: !0
+	};
+}, l = (e, t) => {
+	let n = {}, r = [], i = (e) => {
+		for (let t of String(e).split(",")) {
+			let e = t.trim();
+			e !== "" && !r.some((t) => t.toLowerCase() === e.toLowerCase()) && r.push(e);
+		}
+	};
+	for (let [t, r] of Object.entries(e)) t.toLowerCase() === "vary" ? i(Array.isArray(r) ? r.join(",") : r) : n[t] = r;
+	for (let [e, r] of Object.entries(t)) e.toLowerCase() === "vary" ? i(r) : n[e] = r;
+	return r.length > 0 && (n.vary = r.join(", ")), n;
+};
+//#endregion
+export { r as DEFAULT_COMPRESSION_MIN_BYTES, a as isCompressibleContentType, c as maybeCompress, l as mergeCompressionHeaders, o as negotiateEncoding };

package/dist/httpKeepAlive.js

@@ -0,0 +1,12 @@
+//#region src/httpKeepAlive.ts
+var e = 72e3, t = 5e3, n = (e) => typeof e == "number" && Number.isFinite(e) && e > 0 ? Math.floor(e) : void 0, r = (e) => {
+	let r = n(e?.http?.keepAliveTimeoutMs) ?? 72e3, i = n(e?.http?.headersTimeoutMs);
+	return {
+		keepAliveTimeoutMs: r,
+		headersTimeoutMs: i !== void 0 && i > r ? i : r + t
+	};
+}, i = (e, t) => {
+	e.keepAliveTimeout = t.keepAliveTimeoutMs, e.headersTimeout = t.headersTimeoutMs;
+};
+//#endregion
+export { e as DEFAULT_KEEP_ALIVE_MS, t as HEADERS_TIMEOUT_MARGIN_MS, i as applyKeepAlive, r as resolveKeepAlive };

package/dist/httpRouteMounts.js

@@ -0,0 +1,47 @@
+import { FindMyWay as e } from "effect/http";
+import { routeAcceptsPath as t } from "@voltro/protocol/rest";
+//#region src/httpRouteMounts.ts
+var n = (e) => e.split("/").map((e) => e.startsWith(":") ? ":param" : e).join("/"), r = (e) => {
+	if (e.some((e) => e.method === "*")) return ["*"];
+	let t = /* @__PURE__ */ new Set();
+	for (let n of e) t.add(n.method === "HEAD" ? "GET" : n.method);
+	return [...t];
+}, i = (e) => {
+	let t = /* @__PURE__ */ new Map();
+	for (let r of e) {
+		let e = n(r.path), i = t.get(e);
+		i ? i.push(r) : t.set(e, [r]);
+	}
+	let i = [];
+	t.forEach((e, t) => {
+		i.push({
+			mountPath: t,
+			routes: e,
+			methods: r(e)
+		});
+	});
+	let a = /* @__PURE__ */ new Set();
+	for (let e of i) e.methods.includes("*") && e.routes.some((e) => e.method === "*" && e.match !== "exact") && a.add(e.mountPath);
+	let o = (e) => {
+		if (e !== "/" && a.has("/")) return !0;
+		for (let t = e.indexOf("/"); t !== -1; t = e.indexOf("/", t + 1)) if (a.has(e.slice(0, t))) return !0;
+		return !1;
+	};
+	for (let e = 0; e < i.length; e++) {
+		let t = i[e];
+		!t.methods.includes("*") && o(t.mountPath) && (i[e] = {
+			...t,
+			methods: ["*"]
+		});
+	}
+	return i;
+}, a = (n) => {
+	let r = e.make(), i = /* @__PURE__ */ new Set();
+	for (let e of n) for (let t of [e.mountPath, `${e.mountPath}/*`]) i.has(t.toLowerCase()) || (i.add(t.toLowerCase()), r.on("GET", t, e));
+	return (e) => {
+		let n = r.find("GET", e)?.handler;
+		return n !== void 0 && n.routes.some((n) => t(n, e)) ? n : void 0;
+	};
+}, o = (e) => a(e.filter((e) => !e.methods.includes("*") && (e.routes.length > 1 || e.routes[0]?.answersOtherMethods === !0)));
+//#endregion
+export { a as makeHttpRouteGroupFinder, o as makeUnmatchedGroupFinder, i as planHttpRouteMounts };

package/dist/idempotencyStore.js

@@ -0,0 +1,70 @@
+import { and as e, eq as t, generateId as n, lte as r } from "@voltro/database";
+import { freshFor as i, tsMs as a } from "@voltro/protocol";
+//#region src/idempotencyStore.ts
+var o = "_voltro_idempotency", s = (e) => {
+	if (e == null) return null;
+	let t = typeof e == "string" ? JSON.parse(e) : e;
+	return t && typeof t == "object" && "status" in t ? t : null;
+}, c = (e) => ({
+	scope: e.scope,
+	key: e.key,
+	status: e.status === "completed" ? "completed" : "in_flight",
+	response: s(e.response),
+	createdAt: a(e.createdAt)
+}), l = async (n, r, i) => (await n.query({
+	table: o,
+	predicate: e(t("scope", r), t("key", i)),
+	order: [],
+	take: 1,
+	skip: void 0,
+	projection: void 0
+}))[0] ?? null, u = (a) => ({
+	get: async (e, t) => {
+		let n = await l(a, e, t);
+		return n ? c(n) : null;
+	},
+	claim: async (s, u, d, f, p) => {
+		for (let l = 0; l < 2; l++) {
+			let l = n({
+				kind: "typeid",
+				prefix: "idem"
+			}, o), m = await a.insertIgnore(o, {
+				id: l,
+				scope: s,
+				key: u,
+				status: "in_flight",
+				response: null,
+				createdAt: new Date(d)
+			}, { conflictColumns: ["scope", "key"] });
+			if (m.id === l) return "claimed";
+			let h = c(m), g = i(h.status, f, p);
+			if (d - h.createdAt < g) return h;
+			await a.deleteMany(o, { where: e(t("id", m.id), r("createdAt", new Date(d - g))) });
+		}
+		let m = await l(a, s, u);
+		return m ? c(m) : {
+			scope: s,
+			key: u,
+			status: "in_flight",
+			response: null,
+			createdAt: d
+		};
+	},
+	complete: async (e, t, n, r) => {
+		let i = await l(a, e, t);
+		i && await a.update(o, i.id, {
+			status: "completed",
+			response: n
+		});
+	},
+	renew: async (e, t, n) => {
+		let r = await l(a, e, t);
+		r !== null && r.status === "in_flight" && await a.update(o, r.id, { createdAt: new Date(n) });
+	},
+	release: async (e, t) => {
+		let n = await l(a, e, t);
+		n && await a.delete(o, n.id);
+	}
+});
+//#endregion
+export { u as dataStoreIdempotencyStore };