@voltro/runtime 0.86.0 → 0.88.0

package/dist/http-range.js

@@ -0,0 +1,51 @@
+// src/httpRange.ts
+var e = { _tag: "ignored" }, t = { _tag: "unsatisfiable" }, n = /^([!#$%&'*+.^_`|~0-9A-Za-z-]+)=(.*)$/s, r = /^(\d*)-(\d*)$/, i = (e) => {
+	let t = e.replace(/^0+(?=\d)/, "");
+	if (t.length > 16) return;
+	let n = Number(t);
+	return Number.isSafeInteger(n) ? n : void 0;
+}, a = (e, t) => {
+	let n = e.replace(/^0+(?=\d)/, ""), r = t.replace(/^0+(?=\d)/, "");
+	return n.length === r.length ? n < r : n.length < r.length;
+}, o = (o, s) => {
+	if (o === void 0) return e;
+	let c = n.exec(o.trim());
+	if (c === null || c[1].toLowerCase() !== "bytes") return e;
+	let l = c[2].split(",").map((e) => e.trim()).filter((e) => e !== "");
+	if (l.length !== 1) return e;
+	let u = r.exec(l[0]);
+	if (u === null) return e;
+	let [, d = "", f = ""] = u;
+	if (d === "") {
+		if (f === "") return e;
+		let n = i(f);
+		return n === 0 || s === 0 ? t : {
+			_tag: "satisfiable",
+			start: n === void 0 ? 0 : Math.max(0, s - n),
+			end: s - 1
+		};
+	}
+	if (f !== "" && a(f, d)) return e;
+	let p = i(d);
+	if (p === void 0 || p >= s) return t;
+	let m = f === "" ? void 0 : i(f);
+	return {
+		_tag: "satisfiable",
+		start: p,
+		end: m === void 0 ? s - 1 : Math.min(m, s - 1)
+	};
+}, s = /^(W\/)?"[\x21\x23-\x7e\x80-\xff]*"$/, c = /^[A-Za-z]{3}/, l = (e) => {
+	let t = e.trim();
+	if (!c.test(t)) return;
+	let n = Date.parse(/(?:GMT|UTC)$/i.test(t) ? t : `${t} GMT`);
+	return Number.isNaN(n) ? void 0 : n;
+}, u = (e, t, n = Date.now()) => {
+	if (e === void 0) return !0;
+	let r = e.trim();
+	if (r.startsWith("\"") || r.startsWith("W/")) return !s.test(r) || r.startsWith("W/") ? !1 : t.etag !== void 0 && !t.etag.startsWith("W/") && t.etag === r;
+	let i = l(r);
+	if (i === void 0 || t.lastModifiedMs === void 0) return !1;
+	let a = Math.floor(t.lastModifiedMs / 1e3);
+	return a * 1e3 === i && Math.floor(n / 1e3) > a;
+};
+export { u as ifRangeAllowsRange, o as parseByteRange, l as parseHttpDate };

package/dist/httpClientSsrf.js

@@ -1,49 +1,23 @@
 import { Effect as e, Layer as t } from "effect";
-import { HttpClient as n, HttpClientError as r } from "effect/http";
-//#region src/httpClientSsrf.ts
-var i = class extends Error {
+import { ssrfReason as n, ssrfReason as r } from "@voltro/protocol";
+import { HttpClient as i, HttpClientError as a } from "effect/http";
+// src/httpClientSsrf.ts
+var o = class extends Error {
 	url;
 	reason;
 	_tag = "SsrfBlockedError";
 	constructor(e, t) {
 		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
 	}
-}, a = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, o = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), s = (e, t, n) => n.some((n) => {
-	let r = n.trim().toLowerCase();
-	if (r === "") return !1;
-	let i = t === "" ? e : `${e}:${t}`;
-	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
-}), c = (e, t = {}) => {
-	let n;
-	try {
-		n = new URL(e);
-	} catch {
-		return "malformed url";
-	}
-	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
-	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-	if (s(r, n.port, t.allowHosts ?? [])) return null;
-	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
-	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
-	if (i) {
-		let e = Number(i[1]), t = Number(i[2]);
-		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : a(e, t) ? `blocked private/reserved address ${r}` : null;
-	}
-	if (r.includes(":")) {
-		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
-		return e ? c(`${n.protocol}//${e[1]}`, t) : o(r) ? `blocked private/reserved address ${r}` : null;
-	}
-	return null;
-}, l = (a = {}) => t.effect(n.HttpClient, e.map(n.HttpClient, (t) => {
-	let o = n.transform(t, (t, n) => e.suspend(() => {
-		let o = c(n.url, a);
-		return o === null ? t : e.fail(new r.HttpClientError({ reason: new r.TransportError({
-			request: n,
-			cause: new i(n.url, o),
-			description: `SSRF policy: ${o}`
+}, s = (r = {}) => t.effect(i.HttpClient, e.map(i.HttpClient, (t) => {
+	let s = i.transform(t, (t, i) => e.suspend(() => {
+		let s = n(i.url, r);
+		return s === null ? t : e.fail(new a.HttpClientError({ reason: new a.TransportError({
+			request: i,
+			cause: new o(i.url, s),
+			description: `SSRF policy: ${s}`
 		}) }));
 	}));
-	return n.followRedirects(o, a.maxRedirects ?? 5);
+	return i.followRedirects(s, r.maxRedirects ?? 5);
 }));
-//#endregion
-export { i as SsrfBlockedError, l as ssrfGuardHttpClientLayer, c as ssrfReason };
+export { o as SsrfBlockedError, s as ssrfGuardHttpClientLayer, r as ssrfReason };

package/dist/httpClientTracing.js

@@ -1,11 +1,13 @@
-import { formatTraceparent as e } from "./traceparent.js";
-import { Effect as t, Layer as n } from "effect";
-import { HttpClient as r, HttpClientRequest as i } from "effect/http";
-//#region src/httpClientTracing.ts
-var a = n.effect(r.HttpClient, t.map(r.HttpClient, (n) => n.pipe(r.mapRequestEffect((n) => t.currentSpan.pipe(t.map((t) => n.headers.traceparent === void 0 ? i.setHeader(n, "traceparent", e({
-	traceId: t.traceId,
-	spanId: t.spanId,
-	sampled: t.sampled
-})) : n), t.catch(() => t.succeed(n)))))));
-//#endregion
-export { a as tracingHttpClientLayer };
+import { noteCacheVolatile as e } from "./computedQueryCache.js";
+import { formatTraceparent as t } from "./traceparent.js";
+import { Effect as n, Layer as r } from "effect";
+import { HttpClient as i, HttpClientRequest as a } from "effect/http";
+// src/httpClientTracing.ts
+var o = r.effect(i.HttpClient, n.map(i.HttpClient, (r) => r.pipe(i.mapRequestEffect((r) => n.sync(() => {
+	e("HttpClient");
+}).pipe(n.andThen(n.currentSpan), n.map((e) => r.headers.traceparent === void 0 ? a.setHeader(r, "traceparent", t({
+	traceId: e.traceId,
+	spanId: e.spanId,
+	sampled: e.sampled
+})) : r), n.catch(() => n.succeed(r)))))));
+export { o as tracingHttpClientLayer };

package/dist/httpCompression.js

@@ -1,5 +1,5 @@
 import { brotliCompressSync as e, constants as t, gzipSync as n } from "node:zlib";
-//#region src/httpCompression.ts
+// src/httpCompression.ts
 var r = 1024, i = [
 	"text/",
 	"application/json",
@@ -36,32 +36,32 @@ var r = 1024, i = [
 	[t.BROTLI_PARAM_QUALITY]: 4,
 	[t.BROTLI_PARAM_SIZE_HINT]: r.length
 } })) : new Uint8Array(n(r, { level: 6 })), c = (e) => {
-	let t = e.options?.enabled ?? !0, n = e.options?.minBytes ?? 1024, r = a(e.contentType), i = r ? { vary: "Accept-Encoding" } : {};
-	if (!t || !r || e.body.length < n) return {
+	let t = e.options?.enabled ?? !0, n = e.options?.minBytes ?? 1024;
+	if (!(!t || !a(e.contentType) || e.size < n)) return o(e.acceptEncoding);
+}, l = (e) => {
+	let t = a(e.contentType) ? { vary: "Accept-Encoding" } : {}, n = c({
+		...e,
+		size: e.body.length
+	});
+	if (n === void 0) return {
 		bytes: e.body,
-		headers: i,
+		headers: t,
 		compressed: !1
 	};
-	let c = o(e.acceptEncoding);
-	if (c === void 0) return {
+	let r = s(e.body, n);
+	return r.length >= e.body.length ? {
 		bytes: e.body,
-		headers: i,
-		compressed: !1
-	};
-	let l = s(e.body, c);
-	return l.length >= e.body.length ? {
-		bytes: e.body,
-		headers: i,
+		headers: t,
 		compressed: !1
 	} : {
-		bytes: l,
+		bytes: r,
 		headers: {
-			...i,
-			"content-encoding": c
+			...t,
+			"content-encoding": n
 		},
 		compressed: !0
 	};
-}, l = (e, t) => {
+}, u = (e, t) => {
 	let n = {}, r = [], i = (e) => {
 		for (let t of String(e).split(",")) {
 			let e = t.trim();
@@ -72,5 +72,4 @@ var r = 1024, i = [
 	for (let [e, r] of Object.entries(t)) e.toLowerCase() === "vary" ? i(r) : n[e] = r;
 	return r.length > 0 && (n.vary = r.join(", ")), n;
 };
-//#endregion
-export { r as DEFAULT_COMPRESSION_MIN_BYTES, a as isCompressibleContentType, c as maybeCompress, l as mergeCompressionHeaders, o as negotiateEncoding };
+export { r as DEFAULT_COMPRESSION_MIN_BYTES, a as isCompressibleContentType, l as maybeCompress, u as mergeCompressionHeaders, o as negotiateEncoding, c as negotiatedCompression };

package/dist/httpInputStream.js

@@ -0,0 +1,81 @@
+// src/httpInputStream.ts
+var e = async (e, t, n, r, i) => {
+	let a = new AbortController(), o, s = !1, c = e.readableEnded, l = e.destroyed && !c, u = !1, d = 0, f = !1, p = !1, m = () => {
+		o?.();
+	}, h = () => {
+		l = !0, a.abort(), m();
+	}, g = () => {
+		c = !0, m();
+	}, _ = () => {
+		e.complete || h();
+	};
+	e.once("end", g), e.once("error", h), e.once("aborted", h), e.once("close", _), i.addEventListener("abort", h, { once: !0 }), (i.aborted || l) && h();
+	let v = { [Symbol.asyncIterator]() {
+		if (f) throw Error("HTTP input can only be consumed once");
+		return f = !0, {
+			async next() {
+				if (p) throw Error("Concurrent HTTP input reads are not supported");
+				p = !0;
+				try {
+					for (;;) {
+						if (l || a.signal.aborted) throw Error("HTTP input aborted");
+						if (u) throw Error("HTTP input exceeds its byte limit");
+						if (s) return {
+							done: !0,
+							value: void 0
+						};
+						let n = e.read();
+						if (n !== null) {
+							if (d += n.byteLength, d > t) throw u = !0, Error("HTTP input exceeds its byte limit");
+							return {
+								done: !1,
+								value: n
+							};
+						}
+						if (c) return {
+							done: !0,
+							value: void 0
+						};
+						await new Promise((t) => {
+							let n = () => {
+								e.off("readable", n), o = void 0, t();
+							};
+							o = n, e.once("readable", n);
+						});
+					}
+				} finally {
+					p = !1;
+				}
+			},
+			async return() {
+				return s = !0, m(), {
+					done: !0,
+					value: void 0
+				};
+			}
+		};
+	} }, y = () => ({
+		status: 413,
+		body: "payload too large",
+		contentType: "text/plain"
+	}), b;
+	try {
+		let e = new Promise((e, t) => {
+			b = () => t(/* @__PURE__ */ Error("HTTP input aborted")), a.signal.addEventListener("abort", b, { once: !0 }), a.signal.aborted && b();
+		}), t = await Promise.race([e, Promise.resolve().then(() => {
+			if (a.signal.aborted) throw Error("HTTP input aborted");
+			return r({
+				...n,
+				body: v,
+				signal: a.signal
+			});
+		})]);
+		return u ? y() : t;
+	} catch (e) {
+		if (u) return y();
+		throw e;
+	} finally {
+		s = !0, b !== void 0 && a.signal.removeEventListener("abort", b), a.abort(), m(), e.off("end", g), e.off("error", h), e.off("aborted", h), e.off("close", _), i.removeEventListener("abort", h), !e.destroyed && !e.readableEnded && e.resume();
+	}
+};
+export { e as dispatchHttpInputStream };

package/dist/httpKeepAlive.js

@@ -1,4 +1,4 @@
-//#region src/httpKeepAlive.ts
+// src/httpKeepAlive.ts
 var e = 72e3, t = 5e3, n = (e) => typeof e == "number" && Number.isFinite(e) && e > 0 ? Math.floor(e) : void 0, r = (e) => {
 	let r = n(e?.http?.keepAliveTimeoutMs) ?? 72e3, i = n(e?.http?.headersTimeoutMs);
 	return {
@@ -8,5 +8,4 @@ var e = 72e3, t = 5e3, n = (e) => typeof e == "number" && Number.isFinite(e) &&
 }, i = (e, t) => {
 	e.keepAliveTimeout = t.keepAliveTimeoutMs, e.headersTimeout = t.headersTimeoutMs;
 };
-//#endregion
 export { e as DEFAULT_KEEP_ALIVE_MS, t as HEADERS_TIMEOUT_MARGIN_MS, i as applyKeepAlive, r as resolveKeepAlive };

package/dist/httpRouteMounts.js

@@ -1,6 +1,6 @@
 import { FindMyWay as e } from "effect/http";
 import { routeAcceptsPath as t } from "@voltro/protocol/rest";
-//#region src/httpRouteMounts.ts
+// src/httpRouteMounts.ts
 var n = (e) => e.split("/").map((e) => e.startsWith(":") ? ":param" : e).join("/"), r = (e) => {
 	if (e.some((e) => e.method === "*")) return ["*"];
 	let t = /* @__PURE__ */ new Set();
@@ -14,6 +14,7 @@ var n = (e) => e.split("/").map((e) => e.startsWith(":") ? ":param" : e).join("/
 	}
 	let i = [];
 	t.forEach((e, t) => {
+		if (e.some((e) => e.handleStream !== void 0) && (e.length !== 1 || e[0].match !== "exact" || e[0].path.endsWith("/*"))) throw Error("A streamed HTTP input requires an exclusive exact route path");
 		i.push({
 			mountPath: t,
 			routes: e,
@@ -43,5 +44,4 @@ var n = (e) => e.split("/").map((e) => e.startsWith(":") ? ":param" : e).join("/
 		return n !== void 0 && n.routes.some((n) => t(n, e)) ? n : void 0;
 	};
 }, o = (e) => a(e.filter((e) => !e.methods.includes("*") && (e.routes.length > 1 || e.routes[0]?.answersOtherMethods === !0)));
-//#endregion
 export { a as makeHttpRouteGroupFinder, o as makeUnmatchedGroupFinder, i as planHttpRouteMounts };

package/dist/idempotencyStore.js

@@ -1,70 +1,109 @@
 import { and as e, eq as t, generateId as n, lte as r } from "@voltro/database";
-import { freshFor as i, tsMs as a } from "@voltro/protocol";
-//#region src/idempotencyStore.ts
-var o = "_voltro_idempotency", s = (e) => {
-	if (e == null) return null;
-	let t = typeof e == "string" ? JSON.parse(e) : e;
-	return t && typeof t == "object" && "status" in t ? t : null;
-}, c = (e) => ({
-	scope: e.scope,
-	key: e.key,
-	status: e.status === "completed" ? "completed" : "in_flight",
-	response: s(e.response),
-	createdAt: a(e.createdAt)
-}), l = async (n, r, i) => (await n.query({
-	table: o,
+import { freshFor as i } from "@voltro/protocol";
+// src/idempotencyStore.ts
+var a = "_voltro_idempotency", o = () => /* @__PURE__ */ Error("Stored idempotency receipt is invalid"), s = (e) => {
+	if (e === null) return null;
+	try {
+		let t = typeof e == "string" ? JSON.parse(e) : e;
+		if (t === null) return null;
+		if (typeof t != "object") throw o();
+		let n = Object.getPrototypeOf(t);
+		if (n !== Object.prototype && n !== null) throw o();
+		let r = Object.getOwnPropertyDescriptor(t, "status"), i = r && "value" in r ? r.value : void 0;
+		if (typeof i != "number" || !Number.isInteger(i) || i < 100 || i > 999) throw o();
+		let a = Object.getOwnPropertyDescriptor(t, "body");
+		if (a && !("value" in a)) throw o();
+		let s = a?.value, c = Object.getOwnPropertyDescriptor(t, "rest");
+		if (c && !("value" in c)) throw o();
+		return {
+			status: i,
+			body: s,
+			...c ? { rest: c.value } : {}
+		};
+	} catch {
+		throw o();
+	}
+}, c = (e) => {
+	try {
+		let t = e instanceof Date ? Date.prototype.getTime.call(e) : typeof e == "number" || typeof e == "string" ? new Date(e).getTime() : NaN;
+		if (!Number.isFinite(t) || typeof e == "number" && t !== e) throw o();
+		return t;
+	} catch {
+		throw o();
+	}
+}, l = (e) => {
+	if (typeof e.id != "string" || e.id.length === 0 || typeof e.scope != "string" || typeof e.key != "string" || e.status !== "in_flight" && e.status !== "completed" || e.inputHash != null && (typeof e.inputHash != "string" || !/^[0-9a-f]{64}$/.test(e.inputHash))) throw o();
+	let t = c(e.createdAt), n = s(e.response);
+	if (e.status === "in_flight" != (n === null)) throw o();
+	return {
+		scope: e.scope,
+		key: e.key,
+		inputHash: e.inputHash ?? null,
+		status: e.status,
+		response: n,
+		createdAt: t
+	};
+}, u = async (n, r, i) => (await n.query({
+	table: a,
 	predicate: e(t("scope", r), t("key", i)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, u = (a) => ({
+}))[0] ?? null, d = (n) => e(t("id", n.id), t("scope", n.scope), t("key", n.key), t("inputHash", n.inputHash), t("status", "in_flight")), f = (o) => ({
 	get: async (e, t) => {
-		let n = await l(a, e, t);
-		return n ? c(n) : null;
+		let n = await u(o, e, t);
+		return n ? l(n) : null;
 	},
-	claim: async (s, u, d, f, p) => {
-		for (let l = 0; l < 2; l++) {
-			let l = n({
+	claim: async (s, c, d, f, p, m) => {
+		for (let u = 0; u < 2; u++) {
+			let u = n({
 				kind: "typeid",
 				prefix: "idem"
-			}, o), m = await a.insertIgnore(o, {
-				id: l,
+			}, a), h = await o.insertIgnore(a, {
+				id: u,
 				scope: s,
-				key: u,
+				key: c,
+				inputHash: d,
 				status: "in_flight",
 				response: null,
-				createdAt: new Date(d)
-			}, { conflictColumns: ["scope", "key"] });
-			if (m.id === l) return "claimed";
-			let h = c(m), g = i(h.status, f, p);
-			if (d - h.createdAt < g) return h;
-			await a.deleteMany(o, { where: e(t("id", m.id), r("createdAt", new Date(d - g))) });
+				createdAt: new Date(f)
+			}, { conflictColumns: ["scope", "key"] }), g = l(h);
+			if (h.id === u) {
+				if (g.scope !== s || g.key !== c || g.inputHash !== d || g.status !== "in_flight" || g.response !== null) throw Error("Idempotency acquisition did not retain the expected input witness");
+				return {
+					kind: "claimed",
+					claim: Object.freeze({
+						scope: s,
+						key: c,
+						id: u,
+						inputHash: d
+					})
+				};
+			}
+			if (g.inputHash !== d) return {
+				kind: "existing",
+				record: g
+			};
+			let _ = i(g.status, p, m);
+			if (f - g.createdAt < _) return {
+				kind: "existing",
+				record: g
+			};
+			await o.deleteMany(a, { where: e(t("id", h.id), t("scope", s), t("key", c), t("inputHash", d), t("status", h.status), r("createdAt", new Date(f - _))) });
 		}
-		let m = await l(a, s, u);
-		return m ? c(m) : {
-			scope: s,
-			key: u,
-			status: "in_flight",
-			response: null,
-			createdAt: d
-		};
+		let h = await u(o, s, c);
+		return h ? {
+			kind: "existing",
+			record: l(h)
+		} : { kind: "conflict" };
 	},
-	complete: async (e, t, n, r) => {
-		let i = await l(a, e, t);
-		i && await a.update(o, i.id, {
-			status: "completed",
-			response: n
-		});
-	},
-	renew: async (e, t, n) => {
-		let r = await l(a, e, t);
-		r !== null && r.status === "in_flight" && await a.update(o, r.id, { createdAt: new Date(n) });
-	},
-	release: async (e, t) => {
-		let n = await l(a, e, t);
-		n && await a.delete(o, n.id);
-	}
+	complete: async (e, t, n) => await o.updateMany(a, {
+		status: "completed",
+		response: t,
+		createdAt: new Date(n)
+	}, { where: d(e) }) === 1,
+	renew: async (e, t) => await o.updateMany(a, { createdAt: new Date(t) }, { where: d(e) }) === 1,
+	release: async (e) => await o.deleteMany(a, { where: d(e) }) === 1
 });
-//#endregion
-export { u as dataStoreIdempotencyStore };
+export { f as dataStoreIdempotencyStore };

package/dist/idleDetector.js

@@ -1,5 +1,5 @@
 import { nextWakeup as e } from "./wakeRegistry.js";
-//#region src/idleDetector.ts
+// src/idleDetector.ts
 var t = async (t) => {
 	if (t.signals.connectedClients() > 0 || t.signals.inFlightRequests() > 0 || t.signals.activeWorkflowExecutions() > 0) return !1;
 	let n = (t.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (t.wakeLookaheadMs ?? 3e4), r = await e(t.store);
@@ -17,5 +17,4 @@ var t = async (t) => {
 		}
 	};
 };
-//#endregion
 export { t as isIdleNow, n as makeIdleGate };