@voltro/runtime 0.86.0 → 0.87.0

package/dist/subscriber.js

@@ -1,5 +1,6 @@
 //#region src/subscriber.ts
 var e = (e) => {
+	if (e.eventTenant !== void 0 && typeof e.eventTenant != "function") throw Error("defineSubscriber: `eventTenant` must be a function");
 	if (e.once !== void 0 && e.eachReplica === !0) throw Error("defineSubscriber: choose either `once` or `eachReplica: true`, not both");
 	return e;
 };

package/dist/tenantScope.js

@@ -1,23 +1,11 @@
-import { and as e, eq as t, isNull as n } from "@voltro/database";
+import { mapSetReadScopes as e } from "./setReadScopes.js";
+import { addReadScopePredicate as t } from "./readScopePredicate.js";
+import { eq as n, gt as r, isNull as i, or as a } from "@voltro/database";
 //#region src/tenantScope.ts
-var r = (n, r, i) => {
-	if (n.crossTenant || !r.has(n.table) || i == null) return n;
-	let a = t("tenantId", i);
-	return {
-		...n,
-		predicate: n.predicate ? e(n.predicate, a) : a
-	};
-}, i = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), a = (e) => e?.type === "user" && e.tenantId === "", o = (t, r) => {
-	if (t.includeDeleted || !r.has(t.table)) return t;
-	let i = n("deletedAt");
-	return {
-		...t,
-		predicate: t.predicate ? e(t.predicate, i) : i
-	};
-}, s = (e) => (t, n) => {
-	e.observe?.beforeScope?.({ ...t }, n);
-	let i = o(r(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
-	return e.observe?.afterScope?.({ ...i }), i;
+var o = (r, i, a) => e(r, (e) => e.crossTenant || !i.has(e.table) || a == null ? e : t(e, (e) => n(e("tenantId"), a))), s = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), c = (e) => e?.type === "user" && e.tenantId === "", l = (n, r) => e(n, (e) => e.includeDeleted || !r.has(e.table) ? e : t(e, (e) => i(e("deletedAt")))), u = (n) => (s, c) => {
+	n.observe?.beforeScope?.({ ...s }, c);
+	let u = l(o(s, n.tenantScopedTables, c.tenantId), n.softDeleteScopedTables), d = /* @__PURE__ */ new Date(), f = n.expiresScopedTables, p = f === void 0 ? u : e(u, (e) => e.includeExpired || !f.has(e.table) ? e : t(e, (e) => a(i(e("expiresAt")), r(e("expiresAt"), d))));
+	return n.observe?.afterScope?.({ ...p }), p;
 };
 //#endregion
-export { o as applySoftDeleteScope, r as applyTenantScope, i as isEmptyTenantScopedRead, a as isOrglessUserSubject, s as makeQueryFinalizer };
+export { l as applySoftDeleteScope, o as applyTenantScope, s as isEmptyTenantScopedRead, c as isOrglessUserSubject, u as makeQueryFinalizer };

package/dist/traceparent.js

@@ -1,34 +1,23 @@
 import { Tracer as e } from "effect";
+import { newTraceId as t } from "@voltro/shared";
 //#region src/traceparent.ts
-var t = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, n = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, r = (e) => {
+var n = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, r = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, i = (e) => {
 	if (typeof e != "string") return null;
-	let n = t.exec(e.trim().toLowerCase());
-	if (n === null) return null;
-	let [, r, i, a] = n;
+	let t = n.exec(e.trim().toLowerCase());
+	if (t === null) return null;
+	let [, r, i, a] = t;
 	return r === "0".repeat(32) || i === "0".repeat(16) ? null : {
 		traceId: r,
 		spanId: i,
 		sampled: (parseInt(a, 16) & 1) == 1
 	};
-}, i = (t) => {
-	let n = r(t);
+}, a = (t) => {
+	let n = i(t);
 	if (n !== null) return e.externalSpan({
 		traceId: n.traceId,
 		spanId: n.spanId,
 		sampled: n.sampled
 	});
-}, a = () => {
-	let e = globalThis.crypto, t = /* @__PURE__ */ new Uint8Array(16);
-	if (e?.getRandomValues !== void 0) e.getRandomValues(t);
-	else {
-		let e = `${Date.now().toString(16)}${Math.random().toString(16).slice(2)}`;
-		for (let n = 0; n < t.length; n += 1) {
-			let r = e.slice(n * 2 % e.length, n * 2 % e.length + 2);
-			t[n] = (parseInt(r, 16) || n + 1) ^ (Math.random() * 256 | 0);
-		}
-	}
-	let n = Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-	return n === "0".repeat(32) ? `${"0".repeat(31)}1` : n;
 };
 //#endregion
-export { i as externalSpanFromTraceparent, n as formatTraceparent, a as newTraceId, r as parseTraceparent };
+export { a as externalSpanFromTraceparent, r as formatTraceparent, t as newTraceId, i as parseTraceparent };

package/dist/webSocketGatewayRuntime.js

@@ -1,114 +1,154 @@
-import { Effect as e } from "effect";
-import { GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE as t } from "@voltro/protocol";
-import { Socket as n } from "effect/socket";
+import { Effect as e, Schema as t } from "effect";
+import { GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE as n, Subject as r } from "@voltro/protocol";
+import { Socket as i } from "effect/socket";
 //#region src/webSocketGatewayRuntime.ts
-var r = (r, i, a, o, s, c, l) => e.scoped(e.gen(function* () {
-	let u = yield* r.writer, d = yield* e.context(), f = new AbortController(), p = a.limits?.maxMessageBytes ?? 1048576, m = a.limits?.maxPendingBytes ?? 4194304, h = a.limits?.maxPendingMessages ?? 64, g = [], _ = [], v = 0, y, b = 0, x, S, C, w = !1, T = !1, E = () => {
-		let e = x;
-		x = void 0;
+var a = (a, o, s, c, l, u, d) => e.scoped(e.gen(function* () {
+	let f = yield* a.writer, p = yield* e.context(), m = new AbortController(), h = s.limits?.maxMessageBytes ?? 1048576, g = s.limits?.maxPendingBytes ?? 4194304, _ = s.limits?.maxPendingMessages ?? 64, v = [], y = s.limits?.maxInboundMessagesPerSecond, b = s.limits?.burst ?? y ?? 0, x = b, S = performance.now(), C = [], w = 0, T, E = 0, D, O, k, A = 0, j, M = s.auth === "token" ? "waiting" : "admitted", N = c, P = !1, F = !1, I = () => {
+		let e = D;
+		D = void 0;
 		try {
 			e?.();
 		} catch (e) {
-			l(e);
+			d(e);
 		}
-	}, D = (e) => {
-		if (!f.signal.aborted) {
-			f.abort(e), S !== void 0 && clearTimeout(S), g.length = 0, y?.reject(e);
-			for (let t = v; t < _.length; t += 1) _[t]?.reject(e);
-			_.length = 0, v = 0, b = 0, E();
+	}, L = (e) => {
+		if (!m.signal.aborted) {
+			m.abort(e), O !== void 0 && clearTimeout(O), k !== void 0 && clearTimeout(k), v.length = 0, T?.reject(e);
+			for (let t = w; t < C.length; t += 1) C[t]?.reject(e);
+			C.length = 0, w = 0, E = 0, I();
 		}
-	}, O = (t = 1e3, r) => {
-		f.signal.aborted || (D(Error(r ?? "gateway closed")), !(T || i.destroyed) && (T = !0, C = setTimeout(() => i.destroy(), 1e3), C.unref(), w ? e.runPromiseWith(d)(u.write(new n.CloseEvent(t, r))).catch(() => i.destroy()) : i.destroy()));
-	}, k = () => new Promise((e, t) => {
-		if (f.signal.aborted || i.destroyed) {
+	}, R = (t = 1e3, n) => {
+		m.signal.aborted || (L(Error(n ?? "gateway closed")), !(F || o.destroyed) && (F = !0, j = setTimeout(() => o.destroy(), 1e3), j.unref(), P ? e.runPromiseWith(p)(f.write(new i.CloseEvent(t, n))).catch(() => o.destroy()) : o.destroy()));
+	}, z = () => new Promise((e, t) => {
+		if (m.signal.aborted || o.destroyed) {
 			t(/* @__PURE__ */ Error("gateway closed"));
 			return;
 		}
 		let n = () => {
 			t(/* @__PURE__ */ Error("gateway closed"));
 		};
-		f.signal.addEventListener("abort", n, { once: !0 }), i.write(/* @__PURE__ */ new Uint8Array(), (r) => {
-			f.signal.removeEventListener("abort", n), r ? t(r) : e();
+		m.signal.addEventListener("abort", n, { once: !0 }), o.write(/* @__PURE__ */ new Uint8Array(), (r) => {
+			m.signal.removeEventListener("abort", n), r ? t(r) : e();
 		});
-	}), A = async () => {
-		if (y !== void 0 || f.signal.aborted) return;
-		let t = _[v];
+	}), B = async () => {
+		if (T !== void 0 || m.signal.aborted) return;
+		let t = C[w];
 		if (t) {
-			_[v] = void 0, v += 1, v === _.length ? (_.length = 0, v = 0) : v >= 1024 && v * 2 >= _.length && (_.splice(0, v), v = 0), y = t;
+			C[w] = void 0, w += 1, w === C.length ? (C.length = 0, w = 0) : w >= 1024 && w * 2 >= C.length && (C.splice(0, w), w = 0), T = t;
 			try {
-				if (await e.runPromiseWith(d)(u.write(t.data), { signal: f.signal }), await k(), f.signal.aborted) throw Error("gateway closed");
-				t.resolve();
+				if (await e.runPromiseWith(p)(f.write(t.data), { signal: m.signal }), await z(), m.signal.aborted) throw Error("gateway closed");
+				t.resolve({ queuedBytes: E - t.size });
 			} catch (e) {
-				t.reject(e instanceof Error ? e : /* @__PURE__ */ Error("gateway write failed")), O(1011, "gateway write failed");
+				t.reject(e instanceof Error ? e : /* @__PURE__ */ Error("gateway write failed")), R(1011, "gateway write failed");
 			} finally {
-				f.signal.aborted || (b -= t.size), y = void 0, f.signal.aborted || A();
+				m.signal.aborted || (E -= t.size), T = void 0, m.signal.aborted || B();
 			}
 		}
-	}, j = (e) => {
-		if (f.signal.aborted) return Promise.reject(/* @__PURE__ */ Error("gateway closed"));
+	}, V = (e) => {
+		if (m.signal.aborted) return Promise.reject(/* @__PURE__ */ Error("gateway closed"));
 		let t = typeof e == "string" ? Buffer.byteLength(e) : e.byteLength;
-		if (t > p) return O(1009, "gateway message too large"), Promise.reject(/* @__PURE__ */ Error("gateway message too large"));
-		if (t > m - b || _.length - v + +!!y >= h) return O(1013, "gateway outbound queue exceeded"), Promise.reject(/* @__PURE__ */ Error("gateway outbound queue exceeded"));
-		b += t;
+		if (t > h) return R(1009, "gateway message too large"), Promise.reject(/* @__PURE__ */ Error("gateway message too large"));
+		if (t > g - E || C.length - w + +!!T >= _) return R(1013, "gateway outbound queue exceeded"), Promise.reject(/* @__PURE__ */ Error("gateway outbound queue exceeded"));
+		E += t;
 		let n = new Promise((n, r) => {
-			_.push({
+			C.push({
 				data: typeof e == "string" ? e : e.slice(),
 				size: t,
 				resolve: n,
 				reject: r
 			});
 		});
-		return A(), n;
-	}, M = {
+		return B(), n;
+	}, H = {
 		send: (e) => {
-			j(e).catch(() => {});
+			V(e).catch(() => {});
 		},
-		sendAsync: j,
-		signal: f.signal,
-		close: O,
+		sendAsync: V,
+		get queuedBytes() {
+			return E;
+		},
+		signal: m.signal,
+		close: R,
 		onMessage: (e) => {
-			f.signal.aborted || g.push(e);
+			m.signal.aborted || v.push(e);
+		},
+		get subject() {
+			return N;
 		},
-		subject: o,
-		headers: s,
-		path: a.path
-	}, N = () => D(/* @__PURE__ */ Error("gateway disconnected")), P = () => O(1011, "gateway transport failed");
-	i.once("close", N), i.once("error", P), yield* e.addFinalizer(() => e.sync(() => {
-		D(/* @__PURE__ */ Error("gateway stopped")), C !== void 0 && clearTimeout(C), i.off("close", N), i.off("error", P), i.destroy();
+		headers: l,
+		path: s.path
+	}, U = () => {
+		Promise.resolve().then(() => {
+			if (!m.signal.aborted) return s.onConnection(H);
+		}).then((e) => {
+			typeof e == "function" && (D = e), m.signal.aborted && I();
+		}, (e) => {
+			d(e), R(1011, "gateway setup failed");
+		});
+	}, W = (e) => {
+		if (m.signal.aborted) return !1;
+		let t = e - Date.now();
+		return t <= 0 ? (R(n, "credential expired"), !1) : (O = setTimeout(() => {
+			W(e);
+		}, Math.min(t, 2147483647)), O.unref(), !0);
+	}, G = (e, n) => {
+		M = "verifying";
+		let i = Uint8Array.from(e);
+		Promise.resolve().then(() => m.signal.aborted ? null : s.verify(i, {
+			signal: m.signal,
+			headers: l,
+			path: s.path,
+			receivedAt: n
+		})).then((e) => {
+			if (!m.signal.aborted) {
+				if (performance.now() >= A) R(1008, "gateway token verification timed out");
+				else if (e === null) R(1008, "gateway token rejected");
+				else {
+					if (!e || !t.is(r)(e.subject) || e.credentialExpiresAt !== void 0 && (!Number.isFinite(e.credentialExpiresAt) || !Number.isSafeInteger(Math.ceil(e.credentialExpiresAt * 1e3)))) throw Error("gateway token verifier returned an invalid SubjectResolution");
+					N = e.subject, k !== void 0 && clearTimeout(k), (e.credentialExpiresAt === void 0 || W(e.credentialExpiresAt * 1e3)) && (M = "admitted", U());
+				}
+			}
+		}).catch((e) => {
+			m.signal.aborted || (d(e), R(1011, "gateway token verification failed"));
+		});
+	}, K = () => L(/* @__PURE__ */ Error("gateway disconnected")), q = () => R(1011, "gateway transport failed");
+	o.once("close", K), o.once("error", q), yield* e.addFinalizer(() => e.sync(() => {
+		L(/* @__PURE__ */ Error("gateway stopped")), j !== void 0 && clearTimeout(j), o.off("close", K), o.off("error", q), o.destroy();
 	}));
-	let F = (e) => {
-		if (!f.signal.aborted) {
-			if (e.byteLength > p) O(1009, "gateway message too large");
+	let J = (e) => {
+		if (m.signal.aborted) return;
+		let t = performance.now();
+		if (e.byteLength > h) R(1009, "gateway message too large");
+		else {
+			if (y !== void 0) {
+				if (x = Math.min(b, x + Math.max(0, t - S) * y / 1e3), S = t, x < 1) {
+					R(1008, "gateway inbound rate exceeded");
+					return;
+				}
+				x--;
+			}
+			if (M !== "admitted" && t >= A) R(1008, "gateway token verification timed out");
+			else if (M === "waiting") G(e, t);
+			else if (M === "verifying") R(1008, "gateway token verification pending");
 			else try {
-				for (let t of g) t(e);
+				for (let n of v) n(e, t);
 			} catch (e) {
-				l(e), O(1011, "gateway message handler failed");
-			}
-		}
-	}, I = e.sync(() => {
-		if (w = !0, c !== void 0) {
-			let e = c - Date.now();
-			if (e <= 0) {
-				O(t, "credential expired");
-				return;
+				d(e), R(1011, "gateway message handler failed");
 			}
-			S = setTimeout(() => O(t, "credential expired"), e), S.unref();
 		}
-		Promise.resolve().then(() => {
-			if (!f.signal.aborted) return a.onConnection(M);
-		}).then((e) => {
-			typeof e == "function" && (x = e), f.signal.aborted && E();
-		}, (e) => {
-			l(e), O(1011, "gateway setup failed");
-		});
+	}, Y = e.sync(() => {
+		if (P = !0, s.auth === "token") {
+			let e = s.verificationTimeoutMs ?? 5e3;
+			A = performance.now() + e, k = setTimeout(() => R(1008, "gateway token verification timed out"), e), k.unref();
+		} else (u === void 0 || W(u)) && U();
 	});
 	yield* e.gen(function* () {
-		let e = yield* r.reader;
-		for (yield* I;;) {
+		let e = yield* a.reader;
+		for (yield* Y;;) {
 			let t = yield* e.pull;
-			for (let e of t) F(typeof e == "string" ? new TextEncoder().encode(e) : e);
+			for (let e of t) J(typeof e == "string" ? new TextEncoder().encode(e) : e);
 		}
 	}).pipe(e.ignore);
 }));
 //#endregion
-export { r as runWebSocketGateway };
+export { a as runWebSocketGateway };

package/dist/workflowRuntime.js

@@ -4,8 +4,8 @@ import { makeEffectStoreLayer as r } from "./effectStore.js";
 import { Cause as i, Effect as a, Exit as o, Layer as s, Option as c, Schema as l, SchemaIssue as u } from "effect";
 import { SubjectService as d, WorkflowControlResultSchema as f, WorkflowQueuedCancellationResultSchema as p, WorkflowRestartCommandSchema as m, WorkflowRestartObservationSchema as h, WorkflowRestartResultSchema as g, WorkflowRestartTargetSchema as _, WorkflowRetryCommandSchema as v, WorkflowRetryObservationSchema as y, WorkflowRetryTargetSchema as b } from "@voltro/protocol";
 import { createLogger as x } from "@voltro/logger";
-import * as S from "effect/SchemaAST";
-import { executePreparedWorkflow as C, getCurrentWorkflowExecutionId as w, hasPreparedWorkflowExecution as T } from "@voltro/workflow";
+import { executePreparedWorkflow as S, getCurrentWorkflowExecutionId as C, hasPreparedWorkflowExecution as w } from "@voltro/workflow";
+import * as T from "effect/SchemaAST";
 //#region src/workflowRuntime.ts
 var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	workflowName: l.String,
@@ -135,9 +135,9 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	}
 }, H = (e, t) => {
 	let n = e.ast, r = [], i = [];
-	return S.isObjects(n) && n.propertySignatures.forEach((e) => {
+	return T.isObjects(n) && n.propertySignatures.forEach((e) => {
 		let n = e.name;
-		typeof n == "string" && (S.isOptional(e.type) ? t && i.push(n) : r.push(n));
+		typeof n == "string" && (T.isOptional(e.type) ? t && i.push(n) : r.push(n));
 	}), {
 		required: r,
 		optional: i
@@ -151,7 +151,7 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 		}
 		return n;
 	}, i = (e, t, n = e.payloadSchema) => {
-		let r = l.decodeUnknownResult(l.make(S.toType(n.ast)))(t);
+		let r = l.decodeUnknownResult(l.make(T.toType(n.ast)))(t);
 		if (r._tag === "Success") return;
 		let i = new Set(typeof t == "object" && t ? Object.keys(t) : []), a = W(n).filter((e) => !i.has(e));
 		throw new V(e.name, a, u.makeFormatterDefault()(r.failure.issue));
@@ -161,7 +161,7 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	}, d = async (t, n) => {
 		let i = r(t);
 		return z(t, n, c.getOrUndefined(await e.runEffect(i.poll(n))));
-	}, x = async () => e.runEffect(w()), L = async (t, n, r) => {
+	}, x = async () => e.runEffect(C()), L = async (t, n, r) => {
 		if (e.resolveQueuedStart === void 0) throw Error(`Workflow '${t}' remains queued under receipt '${n}'; no receipt resolver is configured`);
 		let i = await e.resolveQueuedStart({
 			workflowName: t,
@@ -353,9 +353,9 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 		}
 		let m;
 		(e.rememberStartContext !== void 0 || i?.callerContext !== void 0) && (m = c ?? await e.runEffect(u.executionId(p)), await e.rememberStartContext?.(t, m, i?.callerContext ?? { subject: n }));
-		let h = c ?? (m !== void 0 && T(u) ? m : void 0);
-		if (d) return h === void 0 ? await e.runEffect(u.execute(p)) : await e.runEffect(C(u, p, h, { discard: !1 })), e.onEnqueue?.(), M(t, h ?? await e.runEffect(u.executionId(p)), "succeeded");
-		let g = await e.runEffect(h === void 0 ? u.execute(p, { discard: !0 }) : C(u, p, h));
+		let h = c ?? (m !== void 0 && w(u) ? m : void 0);
+		if (d) return h === void 0 ? await e.runEffect(u.execute(p)) : await e.runEffect(S(u, p, h, { discard: !1 })), e.onEnqueue?.(), M(t, h ?? await e.runEffect(u.executionId(p)), "succeeded");
+		let g = await e.runEffect(h === void 0 ? u.execute(p, { discard: !0 }) : S(u, p, h));
 		return e.onEnqueue?.(), M(t, g, "running");
 	};
 	return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/runtime",
-  "version": "0.86.0",
+  "version": "0.87.0",
   "description": "The Voltro server runtime — AppContext assembly, the dispatcher, handler layers, API keys, coordinated scheduling, and analytics composition.",
   "keywords": [
     "voltro",
@@ -18,11 +18,21 @@
   },
   "type": "module",
   "exports": {
+    "./hot": {
+      "types": "./dist/hot.d.ts",
+      "import": "./dist/hot.js",
+      "default": "./dist/hot.js"
+    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./http-range": {
+      "types": "./dist/http-range.d.ts",
+      "import": "./dist/http-range.js",
+      "default": "./dist/http-range.js"
+    },
     "./package.json": "./package.json"
   },
   "main": "./dist/index.js",
@@ -34,6 +44,7 @@
   },
   "dependencies": {
     "@effect/platform-node": "4.0.1",
+    "@effect/platform-node-shared": "4.0.1",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-metrics-otlp-http": "^0.222.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
@@ -42,12 +53,13 @@
     "@opentelemetry/sdk-trace-base": "^2.11.0",
     "@opentelemetry/sdk-trace-node": "^2.11.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
-    "@voltro/database": "0.86.0",
-    "@voltro/kv": "0.86.0",
-    "@voltro/local-first": "0.86.0",
-    "@voltro/logger": "0.86.0",
-    "@voltro/protocol": "0.86.0",
-    "@voltro/workflow": "0.86.0",
+    "@voltro/database": "0.87.0",
+    "@voltro/kv": "0.87.0",
+    "@voltro/local-first": "0.87.0",
+    "@voltro/logger": "0.87.0",
+    "@voltro/protocol": "0.87.0",
+    "@voltro/shared": "0.87.0",
+    "@voltro/workflow": "0.87.0",
     "ioredis": "^5.11.1"
   },
   "peerDependencies": {