@voltro/runtime 0.85.0 → 0.87.0

package/dist/http-range.js

@@ -0,0 +1,52 @@
+//#region src/httpRange.ts
+var e = { _tag: "ignored" }, t = { _tag: "unsatisfiable" }, n = /^([!#$%&'*+.^_`|~0-9A-Za-z-]+)=(.*)$/s, r = /^(\d*)-(\d*)$/, i = (e) => {
+	let t = e.replace(/^0+(?=\d)/, "");
+	if (t.length > 16) return;
+	let n = Number(t);
+	return Number.isSafeInteger(n) ? n : void 0;
+}, a = (e, t) => {
+	let n = e.replace(/^0+(?=\d)/, ""), r = t.replace(/^0+(?=\d)/, "");
+	return n.length === r.length ? n < r : n.length < r.length;
+}, o = (o, s) => {
+	if (o === void 0) return e;
+	let c = n.exec(o.trim());
+	if (c === null || c[1].toLowerCase() !== "bytes") return e;
+	let l = c[2].split(",").map((e) => e.trim()).filter((e) => e !== "");
+	if (l.length !== 1) return e;
+	let u = r.exec(l[0]);
+	if (u === null) return e;
+	let [, d = "", f = ""] = u;
+	if (d === "") {
+		if (f === "") return e;
+		let n = i(f);
+		return n === 0 || s === 0 ? t : {
+			_tag: "satisfiable",
+			start: n === void 0 ? 0 : Math.max(0, s - n),
+			end: s - 1
+		};
+	}
+	if (f !== "" && a(f, d)) return e;
+	let p = i(d);
+	if (p === void 0 || p >= s) return t;
+	let m = f === "" ? void 0 : i(f);
+	return {
+		_tag: "satisfiable",
+		start: p,
+		end: m === void 0 ? s - 1 : Math.min(m, s - 1)
+	};
+}, s = /^(W\/)?"[\x21\x23-\x7e\x80-\xff]*"$/, c = /^[A-Za-z]{3}/, l = (e) => {
+	let t = e.trim();
+	if (!c.test(t)) return;
+	let n = Date.parse(/(?:GMT|UTC)$/i.test(t) ? t : `${t} GMT`);
+	return Number.isNaN(n) ? void 0 : n;
+}, u = (e, t, n = Date.now()) => {
+	if (e === void 0) return !0;
+	let r = e.trim();
+	if (r.startsWith("\"") || r.startsWith("W/")) return !s.test(r) || r.startsWith("W/") ? !1 : t.etag !== void 0 && !t.etag.startsWith("W/") && t.etag === r;
+	let i = l(r);
+	if (i === void 0 || t.lastModifiedMs === void 0) return !1;
+	let a = Math.floor(t.lastModifiedMs / 1e3);
+	return a * 1e3 === i && Math.floor(n / 1e3) > a;
+};
+//#endregion
+export { u as ifRangeAllowsRange, o as parseByteRange, l as parseHttpDate };

package/dist/httpClientSsrf.js

@@ -0,0 +1,24 @@
+import { Effect as e, Layer as t } from "effect";
+import { ssrfReason as n, ssrfReason as r } from "@voltro/protocol";
+import { HttpClient as i, HttpClientError as a } from "effect/http";
+//#region src/httpClientSsrf.ts
+var o = class extends Error {
+	url;
+	reason;
+	_tag = "SsrfBlockedError";
+	constructor(e, t) {
+		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
+	}
+}, s = (r = {}) => t.effect(i.HttpClient, e.map(i.HttpClient, (t) => {
+	let s = i.transform(t, (t, i) => e.suspend(() => {
+		let s = n(i.url, r);
+		return s === null ? t : e.fail(new a.HttpClientError({ reason: new a.TransportError({
+			request: i,
+			cause: new o(i.url, s),
+			description: `SSRF policy: ${s}`
+		}) }));
+	}));
+	return i.followRedirects(s, r.maxRedirects ?? 5);
+}));
+//#endregion
+export { o as SsrfBlockedError, s as ssrfGuardHttpClientLayer, r as ssrfReason };

package/dist/httpClientTracing.js

@@ -0,0 +1,14 @@
+import { noteCacheVolatile as e } from "./computedQueryCache.js";
+import { formatTraceparent as t } from "./traceparent.js";
+import { Effect as n, Layer as r } from "effect";
+import { HttpClient as i, HttpClientRequest as a } from "effect/http";
+//#region src/httpClientTracing.ts
+var o = r.effect(i.HttpClient, n.map(i.HttpClient, (r) => r.pipe(i.mapRequestEffect((r) => n.sync(() => {
+	e("HttpClient");
+}).pipe(n.andThen(n.currentSpan), n.map((e) => r.headers.traceparent === void 0 ? a.setHeader(r, "traceparent", t({
+	traceId: e.traceId,
+	spanId: e.spanId,
+	sampled: e.sampled
+})) : r), n.catch(() => n.succeed(r)))))));
+//#endregion
+export { o as tracingHttpClientLayer };

package/dist/httpCompression.js

@@ -0,0 +1,76 @@
+import { brotliCompressSync as e, constants as t, gzipSync as n } from "node:zlib";
+//#region src/httpCompression.ts
+var r = 1024, i = [
+	"text/",
+	"application/json",
+	"application/javascript",
+	"application/xml",
+	"image/svg+xml",
+	"application/rss+xml"
+], a = (e) => {
+	if (e === void 0) return !1;
+	let t = e.split(";")[0].trim().toLowerCase();
+	return i.some((e) => t === e || t.startsWith(e));
+}, o = (e) => {
+	if (e === void 0 || e === "") return;
+	let t = /* @__PURE__ */ new Map();
+	for (let n of e.split(",")) {
+		let [e, ...r] = n.trim().split(";");
+		if (e === void 0 || e === "") continue;
+		let i = 1;
+		for (let e of r) {
+			let [t, n] = e.trim().split("=");
+			t === "q" && n !== void 0 && (i = Number(n));
+		}
+		t.set(e.trim().toLowerCase(), Number.isFinite(i) ? i : 1);
+	}
+	let n = (e) => {
+		let n = t.get(e);
+		if (n !== void 0) return n > 0;
+		let r = t.get("*");
+		return r !== void 0 && r > 0;
+	};
+	if (n("br")) return "br";
+	if (n("gzip")) return "gzip";
+}, s = (r, i) => i === "br" ? new Uint8Array(e(r, { params: {
+	[t.BROTLI_PARAM_QUALITY]: 4,
+	[t.BROTLI_PARAM_SIZE_HINT]: r.length
+} })) : new Uint8Array(n(r, { level: 6 })), c = (e) => {
+	let t = e.options?.enabled ?? !0, n = e.options?.minBytes ?? 1024;
+	if (!(!t || !a(e.contentType) || e.size < n)) return o(e.acceptEncoding);
+}, l = (e) => {
+	let t = a(e.contentType) ? { vary: "Accept-Encoding" } : {}, n = c({
+		...e,
+		size: e.body.length
+	});
+	if (n === void 0) return {
+		bytes: e.body,
+		headers: t,
+		compressed: !1
+	};
+	let r = s(e.body, n);
+	return r.length >= e.body.length ? {
+		bytes: e.body,
+		headers: t,
+		compressed: !1
+	} : {
+		bytes: r,
+		headers: {
+			...t,
+			"content-encoding": n
+		},
+		compressed: !0
+	};
+}, u = (e, t) => {
+	let n = {}, r = [], i = (e) => {
+		for (let t of String(e).split(",")) {
+			let e = t.trim();
+			e !== "" && !r.some((t) => t.toLowerCase() === e.toLowerCase()) && r.push(e);
+		}
+	};
+	for (let [t, r] of Object.entries(e)) t.toLowerCase() === "vary" ? i(Array.isArray(r) ? r.join(",") : r) : n[t] = r;
+	for (let [e, r] of Object.entries(t)) e.toLowerCase() === "vary" ? i(r) : n[e] = r;
+	return r.length > 0 && (n.vary = r.join(", ")), n;
+};
+//#endregion
+export { r as DEFAULT_COMPRESSION_MIN_BYTES, a as isCompressibleContentType, l as maybeCompress, u as mergeCompressionHeaders, o as negotiateEncoding, c as negotiatedCompression };

package/dist/httpInputStream.js

@@ -0,0 +1,82 @@
+//#region src/httpInputStream.ts
+var e = async (e, t, n, r, i) => {
+	let a = new AbortController(), o, s = !1, c = e.readableEnded, l = e.destroyed && !c, u = !1, d = 0, f = !1, p = !1, m = () => {
+		o?.();
+	}, h = () => {
+		l = !0, a.abort(), m();
+	}, g = () => {
+		c = !0, m();
+	}, _ = () => {
+		e.complete || h();
+	};
+	e.once("end", g), e.once("error", h), e.once("aborted", h), e.once("close", _), i.addEventListener("abort", h, { once: !0 }), (i.aborted || l) && h();
+	let v = { [Symbol.asyncIterator]() {
+		if (f) throw Error("HTTP input can only be consumed once");
+		return f = !0, {
+			async next() {
+				if (p) throw Error("Concurrent HTTP input reads are not supported");
+				p = !0;
+				try {
+					for (;;) {
+						if (l || a.signal.aborted) throw Error("HTTP input aborted");
+						if (u) throw Error("HTTP input exceeds its byte limit");
+						if (s) return {
+							done: !0,
+							value: void 0
+						};
+						let n = e.read();
+						if (n !== null) {
+							if (d += n.byteLength, d > t) throw u = !0, Error("HTTP input exceeds its byte limit");
+							return {
+								done: !1,
+								value: n
+							};
+						}
+						if (c) return {
+							done: !0,
+							value: void 0
+						};
+						await new Promise((t) => {
+							let n = () => {
+								e.off("readable", n), o = void 0, t();
+							};
+							o = n, e.once("readable", n);
+						});
+					}
+				} finally {
+					p = !1;
+				}
+			},
+			async return() {
+				return s = !0, m(), {
+					done: !0,
+					value: void 0
+				};
+			}
+		};
+	} }, y = () => ({
+		status: 413,
+		body: "payload too large",
+		contentType: "text/plain"
+	}), b;
+	try {
+		let e = new Promise((e, t) => {
+			b = () => t(/* @__PURE__ */ Error("HTTP input aborted")), a.signal.addEventListener("abort", b, { once: !0 }), a.signal.aborted && b();
+		}), t = await Promise.race([e, Promise.resolve().then(() => {
+			if (a.signal.aborted) throw Error("HTTP input aborted");
+			return r({
+				...n,
+				body: v,
+				signal: a.signal
+			});
+		})]);
+		return u ? y() : t;
+	} catch (e) {
+		if (u) return y();
+		throw e;
+	} finally {
+		s = !0, b !== void 0 && a.signal.removeEventListener("abort", b), a.abort(), m(), e.off("end", g), e.off("error", h), e.off("aborted", h), e.off("close", _), i.removeEventListener("abort", h), !e.destroyed && !e.readableEnded && e.resume();
+	}
+};
+//#endregion
+export { e as dispatchHttpInputStream };

package/dist/httpKeepAlive.js

@@ -0,0 +1,12 @@
+//#region src/httpKeepAlive.ts
+var e = 72e3, t = 5e3, n = (e) => typeof e == "number" && Number.isFinite(e) && e > 0 ? Math.floor(e) : void 0, r = (e) => {
+	let r = n(e?.http?.keepAliveTimeoutMs) ?? 72e3, i = n(e?.http?.headersTimeoutMs);
+	return {
+		keepAliveTimeoutMs: r,
+		headersTimeoutMs: i !== void 0 && i > r ? i : r + t
+	};
+}, i = (e, t) => {
+	e.keepAliveTimeout = t.keepAliveTimeoutMs, e.headersTimeout = t.headersTimeoutMs;
+};
+//#endregion
+export { e as DEFAULT_KEEP_ALIVE_MS, t as HEADERS_TIMEOUT_MARGIN_MS, i as applyKeepAlive, r as resolveKeepAlive };

package/dist/httpRouteMounts.js

@@ -0,0 +1,48 @@
+import { FindMyWay as e } from "effect/http";
+import { routeAcceptsPath as t } from "@voltro/protocol/rest";
+//#region src/httpRouteMounts.ts
+var n = (e) => e.split("/").map((e) => e.startsWith(":") ? ":param" : e).join("/"), r = (e) => {
+	if (e.some((e) => e.method === "*")) return ["*"];
+	let t = /* @__PURE__ */ new Set();
+	for (let n of e) t.add(n.method === "HEAD" ? "GET" : n.method);
+	return [...t];
+}, i = (e) => {
+	let t = /* @__PURE__ */ new Map();
+	for (let r of e) {
+		let e = n(r.path), i = t.get(e);
+		i ? i.push(r) : t.set(e, [r]);
+	}
+	let i = [];
+	t.forEach((e, t) => {
+		if (e.some((e) => e.handleStream !== void 0) && (e.length !== 1 || e[0].match !== "exact" || e[0].path.endsWith("/*"))) throw Error("A streamed HTTP input requires an exclusive exact route path");
+		i.push({
+			mountPath: t,
+			routes: e,
+			methods: r(e)
+		});
+	});
+	let a = /* @__PURE__ */ new Set();
+	for (let e of i) e.methods.includes("*") && e.routes.some((e) => e.method === "*" && e.match !== "exact") && a.add(e.mountPath);
+	let o = (e) => {
+		if (e !== "/" && a.has("/")) return !0;
+		for (let t = e.indexOf("/"); t !== -1; t = e.indexOf("/", t + 1)) if (a.has(e.slice(0, t))) return !0;
+		return !1;
+	};
+	for (let e = 0; e < i.length; e++) {
+		let t = i[e];
+		!t.methods.includes("*") && o(t.mountPath) && (i[e] = {
+			...t,
+			methods: ["*"]
+		});
+	}
+	return i;
+}, a = (n) => {
+	let r = e.make(), i = /* @__PURE__ */ new Set();
+	for (let e of n) for (let t of [e.mountPath, `${e.mountPath}/*`]) i.has(t.toLowerCase()) || (i.add(t.toLowerCase()), r.on("GET", t, e));
+	return (e) => {
+		let n = r.find("GET", e)?.handler;
+		return n !== void 0 && n.routes.some((n) => t(n, e)) ? n : void 0;
+	};
+}, o = (e) => a(e.filter((e) => !e.methods.includes("*") && (e.routes.length > 1 || e.routes[0]?.answersOtherMethods === !0)));
+//#endregion
+export { a as makeHttpRouteGroupFinder, o as makeUnmatchedGroupFinder, i as planHttpRouteMounts };

package/dist/idempotencyStore.js

@@ -0,0 +1,110 @@
+import { and as e, eq as t, generateId as n, lte as r } from "@voltro/database";
+import { freshFor as i } from "@voltro/protocol";
+//#region src/idempotencyStore.ts
+var a = "_voltro_idempotency", o = () => /* @__PURE__ */ Error("Stored idempotency receipt is invalid"), s = (e) => {
+	if (e === null) return null;
+	try {
+		let t = typeof e == "string" ? JSON.parse(e) : e;
+		if (t === null) return null;
+		if (typeof t != "object") throw o();
+		let n = Object.getPrototypeOf(t);
+		if (n !== Object.prototype && n !== null) throw o();
+		let r = Object.getOwnPropertyDescriptor(t, "status"), i = r && "value" in r ? r.value : void 0;
+		if (typeof i != "number" || !Number.isInteger(i) || i < 100 || i > 999) throw o();
+		let a = Object.getOwnPropertyDescriptor(t, "body");
+		if (a && !("value" in a)) throw o();
+		let s = a?.value, c = Object.getOwnPropertyDescriptor(t, "rest");
+		if (c && !("value" in c)) throw o();
+		return {
+			status: i,
+			body: s,
+			...c ? { rest: c.value } : {}
+		};
+	} catch {
+		throw o();
+	}
+}, c = (e) => {
+	try {
+		let t = e instanceof Date ? Date.prototype.getTime.call(e) : typeof e == "number" || typeof e == "string" ? new Date(e).getTime() : NaN;
+		if (!Number.isFinite(t) || typeof e == "number" && t !== e) throw o();
+		return t;
+	} catch {
+		throw o();
+	}
+}, l = (e) => {
+	if (typeof e.id != "string" || e.id.length === 0 || typeof e.scope != "string" || typeof e.key != "string" || e.status !== "in_flight" && e.status !== "completed" || e.inputHash != null && (typeof e.inputHash != "string" || !/^[0-9a-f]{64}$/.test(e.inputHash))) throw o();
+	let t = c(e.createdAt), n = s(e.response);
+	if (e.status === "in_flight" != (n === null)) throw o();
+	return {
+		scope: e.scope,
+		key: e.key,
+		inputHash: e.inputHash ?? null,
+		status: e.status,
+		response: n,
+		createdAt: t
+	};
+}, u = async (n, r, i) => (await n.query({
+	table: a,
+	predicate: e(t("scope", r), t("key", i)),
+	order: [],
+	take: 1,
+	skip: void 0,
+	projection: void 0
+}))[0] ?? null, d = (n) => e(t("id", n.id), t("scope", n.scope), t("key", n.key), t("inputHash", n.inputHash), t("status", "in_flight")), f = (o) => ({
+	get: async (e, t) => {
+		let n = await u(o, e, t);
+		return n ? l(n) : null;
+	},
+	claim: async (s, c, d, f, p, m) => {
+		for (let u = 0; u < 2; u++) {
+			let u = n({
+				kind: "typeid",
+				prefix: "idem"
+			}, a), h = await o.insertIgnore(a, {
+				id: u,
+				scope: s,
+				key: c,
+				inputHash: d,
+				status: "in_flight",
+				response: null,
+				createdAt: new Date(f)
+			}, { conflictColumns: ["scope", "key"] }), g = l(h);
+			if (h.id === u) {
+				if (g.scope !== s || g.key !== c || g.inputHash !== d || g.status !== "in_flight" || g.response !== null) throw Error("Idempotency acquisition did not retain the expected input witness");
+				return {
+					kind: "claimed",
+					claim: Object.freeze({
+						scope: s,
+						key: c,
+						id: u,
+						inputHash: d
+					})
+				};
+			}
+			if (g.inputHash !== d) return {
+				kind: "existing",
+				record: g
+			};
+			let _ = i(g.status, p, m);
+			if (f - g.createdAt < _) return {
+				kind: "existing",
+				record: g
+			};
+			await o.deleteMany(a, { where: e(t("id", h.id), t("scope", s), t("key", c), t("inputHash", d), t("status", h.status), r("createdAt", new Date(f - _))) });
+		}
+		let h = await u(o, s, c);
+		return h ? {
+			kind: "existing",
+			record: l(h)
+		} : { kind: "conflict" };
+	},
+	complete: async (e, t, n) => await o.updateMany(a, {
+		status: "completed",
+		response: t,
+		createdAt: new Date(n)
+	}, { where: d(e) }) === 1,
+	renew: async (e, t) => await o.updateMany(a, { createdAt: new Date(t) }, { where: d(e) }) === 1,
+	release: async (e) => await o.deleteMany(a, { where: d(e) }) === 1
+});
+//#endregion
+export { f as dataStoreIdempotencyStore };

package/dist/idleDetector.js

@@ -0,0 +1,21 @@
+import { nextWakeup as e } from "./wakeRegistry.js";
+//#region src/idleDetector.ts
+var t = async (t) => {
+	if (t.signals.connectedClients() > 0 || t.signals.inFlightRequests() > 0 || t.signals.activeWorkflowExecutions() > 0) return !1;
+	let n = (t.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (t.wakeLookaheadMs ?? 3e4), r = await e(t.store);
+	return !(r !== null && r.wakeAt.getTime() <= n);
+}, n = (e, t = Date.now) => {
+	let n;
+	return {
+		update: (r) => {
+			if (!r) return n = void 0, !1;
+			let i = t();
+			return n === void 0 && (n = i), i - n >= e;
+		},
+		reset: () => {
+			n = void 0;
+		}
+	};
+};
+//#endregion
+export { t as isIdleNow, n as makeIdleGate };