@voltro/runtime 0.86.0 → 0.88.0

package/dist/webSocketGatewayRuntime.js

@@ -1,114 +1,153 @@
-import { Effect as e } from "effect";
-import { GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE as t } from "@voltro/protocol";
-import { Socket as n } from "effect/socket";
-//#region src/webSocketGatewayRuntime.ts
-var r = (r, i, a, o, s, c, l) => e.scoped(e.gen(function* () {
-	let u = yield* r.writer, d = yield* e.context(), f = new AbortController(), p = a.limits?.maxMessageBytes ?? 1048576, m = a.limits?.maxPendingBytes ?? 4194304, h = a.limits?.maxPendingMessages ?? 64, g = [], _ = [], v = 0, y, b = 0, x, S, C, w = !1, T = !1, E = () => {
-		let e = x;
-		x = void 0;
+import { Effect as e, Schema as t } from "effect";
+import { GATEWAY_CREDENTIAL_EXPIRED_CLOSE_CODE as n, Subject as r } from "@voltro/protocol";
+import { Socket as i } from "effect/socket";
+// src/webSocketGatewayRuntime.ts
+var a = (a, o, s, c, l, u, d) => e.scoped(e.gen(function* () {
+	let f = yield* a.writer, p = yield* e.context(), m = new AbortController(), h = s.limits?.maxMessageBytes ?? 1048576, g = s.limits?.maxPendingBytes ?? 4194304, _ = s.limits?.maxPendingMessages ?? 64, v = [], y = s.limits?.maxInboundMessagesPerSecond, b = s.limits?.burst ?? y ?? 0, x = b, S = performance.now(), C = [], w = 0, T, E = 0, D, O, k, A = 0, j, M = s.auth === "token" ? "waiting" : "admitted", N = c, P = !1, F = !1, I = () => {
+		let e = D;
+		D = void 0;
 		try {
 			e?.();
 		} catch (e) {
-			l(e);
+			d(e);
 		}
-	}, D = (e) => {
-		if (!f.signal.aborted) {
-			f.abort(e), S !== void 0 && clearTimeout(S), g.length = 0, y?.reject(e);
-			for (let t = v; t < _.length; t += 1) _[t]?.reject(e);
-			_.length = 0, v = 0, b = 0, E();
+	}, L = (e) => {
+		if (!m.signal.aborted) {
+			m.abort(e), O !== void 0 && clearTimeout(O), k !== void 0 && clearTimeout(k), v.length = 0, T?.reject(e);
+			for (let t = w; t < C.length; t += 1) C[t]?.reject(e);
+			C.length = 0, w = 0, E = 0, I();
 		}
-	}, O = (t = 1e3, r) => {
-		f.signal.aborted || (D(Error(r ?? "gateway closed")), !(T || i.destroyed) && (T = !0, C = setTimeout(() => i.destroy(), 1e3), C.unref(), w ? e.runPromiseWith(d)(u.write(new n.CloseEvent(t, r))).catch(() => i.destroy()) : i.destroy()));
-	}, k = () => new Promise((e, t) => {
-		if (f.signal.aborted || i.destroyed) {
+	}, R = (t = 1e3, n) => {
+		m.signal.aborted || (L(Error(n ?? "gateway closed")), !(F || o.destroyed) && (F = !0, j = setTimeout(() => o.destroy(), 1e3), j.unref(), P ? e.runPromiseWith(p)(f.write(new i.CloseEvent(t, n))).catch(() => o.destroy()) : o.destroy()));
+	}, z = () => new Promise((e, t) => {
+		if (m.signal.aborted || o.destroyed) {
 			t(/* @__PURE__ */ Error("gateway closed"));
 			return;
 		}
 		let n = () => {
 			t(/* @__PURE__ */ Error("gateway closed"));
 		};
-		f.signal.addEventListener("abort", n, { once: !0 }), i.write(/* @__PURE__ */ new Uint8Array(), (r) => {
-			f.signal.removeEventListener("abort", n), r ? t(r) : e();
+		m.signal.addEventListener("abort", n, { once: !0 }), o.write(/* @__PURE__ */ new Uint8Array(), (r) => {
+			m.signal.removeEventListener("abort", n), r ? t(r) : e();
 		});
-	}), A = async () => {
-		if (y !== void 0 || f.signal.aborted) return;
-		let t = _[v];
+	}), B = async () => {
+		if (T !== void 0 || m.signal.aborted) return;
+		let t = C[w];
 		if (t) {
-			_[v] = void 0, v += 1, v === _.length ? (_.length = 0, v = 0) : v >= 1024 && v * 2 >= _.length && (_.splice(0, v), v = 0), y = t;
+			C[w] = void 0, w += 1, w === C.length ? (C.length = 0, w = 0) : w >= 1024 && w * 2 >= C.length && (C.splice(0, w), w = 0), T = t;
 			try {
-				if (await e.runPromiseWith(d)(u.write(t.data), { signal: f.signal }), await k(), f.signal.aborted) throw Error("gateway closed");
-				t.resolve();
+				if (await e.runPromiseWith(p)(f.write(t.data), { signal: m.signal }), await z(), m.signal.aborted) throw Error("gateway closed");
+				t.resolve({ queuedBytes: E - t.size });
 			} catch (e) {
-				t.reject(e instanceof Error ? e : /* @__PURE__ */ Error("gateway write failed")), O(1011, "gateway write failed");
+				t.reject(e instanceof Error ? e : /* @__PURE__ */ Error("gateway write failed")), R(1011, "gateway write failed");
 			} finally {
-				f.signal.aborted || (b -= t.size), y = void 0, f.signal.aborted || A();
+				m.signal.aborted || (E -= t.size), T = void 0, m.signal.aborted || B();
 			}
 		}
-	}, j = (e) => {
-		if (f.signal.aborted) return Promise.reject(/* @__PURE__ */ Error("gateway closed"));
+	}, V = (e) => {
+		if (m.signal.aborted) return Promise.reject(/* @__PURE__ */ Error("gateway closed"));
 		let t = typeof e == "string" ? Buffer.byteLength(e) : e.byteLength;
-		if (t > p) return O(1009, "gateway message too large"), Promise.reject(/* @__PURE__ */ Error("gateway message too large"));
-		if (t > m - b || _.length - v + +!!y >= h) return O(1013, "gateway outbound queue exceeded"), Promise.reject(/* @__PURE__ */ Error("gateway outbound queue exceeded"));
-		b += t;
+		if (t > h) return R(1009, "gateway message too large"), Promise.reject(/* @__PURE__ */ Error("gateway message too large"));
+		if (t > g - E || C.length - w + +!!T >= _) return R(1013, "gateway outbound queue exceeded"), Promise.reject(/* @__PURE__ */ Error("gateway outbound queue exceeded"));
+		E += t;
 		let n = new Promise((n, r) => {
-			_.push({
+			C.push({
 				data: typeof e == "string" ? e : e.slice(),
 				size: t,
 				resolve: n,
 				reject: r
 			});
 		});
-		return A(), n;
-	}, M = {
+		return B(), n;
+	}, H = {
 		send: (e) => {
-			j(e).catch(() => {});
+			V(e).catch(() => {});
 		},
-		sendAsync: j,
-		signal: f.signal,
-		close: O,
+		sendAsync: V,
+		get queuedBytes() {
+			return E;
+		},
+		signal: m.signal,
+		close: R,
 		onMessage: (e) => {
-			f.signal.aborted || g.push(e);
+			m.signal.aborted || v.push(e);
+		},
+		get subject() {
+			return N;
 		},
-		subject: o,
-		headers: s,
-		path: a.path
-	}, N = () => D(/* @__PURE__ */ Error("gateway disconnected")), P = () => O(1011, "gateway transport failed");
-	i.once("close", N), i.once("error", P), yield* e.addFinalizer(() => e.sync(() => {
-		D(/* @__PURE__ */ Error("gateway stopped")), C !== void 0 && clearTimeout(C), i.off("close", N), i.off("error", P), i.destroy();
+		headers: l,
+		path: s.path
+	}, U = () => {
+		Promise.resolve().then(() => {
+			if (!m.signal.aborted) return s.onConnection(H);
+		}).then((e) => {
+			typeof e == "function" && (D = e), m.signal.aborted && I();
+		}, (e) => {
+			d(e), R(1011, "gateway setup failed");
+		});
+	}, W = (e) => {
+		if (m.signal.aborted) return !1;
+		let t = e - Date.now();
+		return t <= 0 ? (R(n, "credential expired"), !1) : (O = setTimeout(() => {
+			W(e);
+		}, Math.min(t, 2147483647)), O.unref(), !0);
+	}, G = (e, n) => {
+		M = "verifying";
+		let i = Uint8Array.from(e);
+		Promise.resolve().then(() => m.signal.aborted ? null : s.verify(i, {
+			signal: m.signal,
+			headers: l,
+			path: s.path,
+			receivedAt: n
+		})).then((e) => {
+			if (!m.signal.aborted) {
+				if (performance.now() >= A) R(1008, "gateway token verification timed out");
+				else if (e === null) R(1008, "gateway token rejected");
+				else {
+					if (!e || !t.is(r)(e.subject) || e.credentialExpiresAt !== void 0 && (!Number.isFinite(e.credentialExpiresAt) || !Number.isSafeInteger(Math.ceil(e.credentialExpiresAt * 1e3)))) throw Error("gateway token verifier returned an invalid SubjectResolution");
+					N = e.subject, k !== void 0 && clearTimeout(k), (e.credentialExpiresAt === void 0 || W(e.credentialExpiresAt * 1e3)) && (M = "admitted", U());
+				}
+			}
+		}).catch((e) => {
+			m.signal.aborted || (d(e), R(1011, "gateway token verification failed"));
+		});
+	}, K = () => L(/* @__PURE__ */ Error("gateway disconnected")), q = () => R(1011, "gateway transport failed");
+	o.once("close", K), o.once("error", q), yield* e.addFinalizer(() => e.sync(() => {
+		L(/* @__PURE__ */ Error("gateway stopped")), j !== void 0 && clearTimeout(j), o.off("close", K), o.off("error", q), o.destroy();
 	}));
-	let F = (e) => {
-		if (!f.signal.aborted) {
-			if (e.byteLength > p) O(1009, "gateway message too large");
+	let J = (e) => {
+		if (m.signal.aborted) return;
+		let t = performance.now();
+		if (e.byteLength > h) R(1009, "gateway message too large");
+		else {
+			if (y !== void 0) {
+				if (x = Math.min(b, x + Math.max(0, t - S) * y / 1e3), S = t, x < 1) {
+					R(1008, "gateway inbound rate exceeded");
+					return;
+				}
+				x--;
+			}
+			if (M !== "admitted" && t >= A) R(1008, "gateway token verification timed out");
+			else if (M === "waiting") G(e, t);
+			else if (M === "verifying") R(1008, "gateway token verification pending");
 			else try {
-				for (let t of g) t(e);
+				for (let n of v) n(e, t);
 			} catch (e) {
-				l(e), O(1011, "gateway message handler failed");
-			}
-		}
-	}, I = e.sync(() => {
-		if (w = !0, c !== void 0) {
-			let e = c - Date.now();
-			if (e <= 0) {
-				O(t, "credential expired");
-				return;
+				d(e), R(1011, "gateway message handler failed");
 			}
-			S = setTimeout(() => O(t, "credential expired"), e), S.unref();
 		}
-		Promise.resolve().then(() => {
-			if (!f.signal.aborted) return a.onConnection(M);
-		}).then((e) => {
-			typeof e == "function" && (x = e), f.signal.aborted && E();
-		}, (e) => {
-			l(e), O(1011, "gateway setup failed");
-		});
+	}, Y = e.sync(() => {
+		if (P = !0, s.auth === "token") {
+			let e = s.verificationTimeoutMs ?? 5e3;
+			A = performance.now() + e, k = setTimeout(() => R(1008, "gateway token verification timed out"), e), k.unref();
+		} else (u === void 0 || W(u)) && U();
 	});
 	yield* e.gen(function* () {
-		let e = yield* r.reader;
-		for (yield* I;;) {
+		let e = yield* a.reader;
+		for (yield* Y;;) {
 			let t = yield* e.pull;
-			for (let e of t) F(typeof e == "string" ? new TextEncoder().encode(e) : e);
+			for (let e of t) J(typeof e == "string" ? new TextEncoder().encode(e) : e);
 		}
 	}).pipe(e.ignore);
 }));
-//#endregion
-export { r as runWebSocketGateway };
+export { a as runWebSocketGateway };

package/dist/webhookVerification.js

@@ -1,4 +1,4 @@
-//#region src/webhookVerification.ts
+// src/webhookVerification.ts
 var e = "voltroWebhookVerification", t = (e) => e === "signature" || e === "provider" || e === "none", n = (n) => {
 	if (typeof n != "function" && (typeof n != "object" || !n)) return;
 	let r = n[e];
@@ -14,5 +14,4 @@ var e = "voltroWebhookVerification", t = (e) => e === "signature" || e === "prov
 		for (let [t, i] of e) if (n(i.handle) === void 0) throw new r(t);
 	}
 };
-//#endregion
 export { r as UnverifiedWebhookRoute, e as WEBHOOK_VERIFICATION_PROPERTY, i as assertWebhookRoutesDeclareVerification, n as webhookVerificationOf };

package/dist/wireColumnStrip.js

@@ -1,7 +1,7 @@
 import { getTable as e, readableByColumns as t, serverOnlyColumns as n } from "@voltro/database";
 import { ADMIN_SCOPE as r, effectiveScopes as i, hasEffectiveScope as a } from "@voltro/protocol";
 import { types as o } from "node:util";
-//#region src/wireColumnStrip.ts
+// src/wireColumnStrip.ts
 var s = Array.prototype.includes, c = (e) => !o.isProxy(e) && Object.getPrototypeOf(e) === Array.prototype && Object.getOwnPropertyDescriptor(Array.prototype, "includes")?.value === s && Reflect.ownKeys(e).every((t) => {
 	if (typeof t != "string" || t !== "length" && !/^(0|[1-9][0-9]*)$/.test(t)) return !1;
 	let n = Object.getOwnPropertyDescriptor(e, t);
@@ -80,5 +80,4 @@ var s = Array.prototype.includes, c = (e) => !o.isProxy(e) && Object.getPrototyp
 		};
 	};
 };
-//#endregion
 export { g as createDispatchWireStrip, p as forbiddenColumnsForSubject, u as serverOnlyColumnNames, d as stripColumnsFromRows, m as stripForbiddenForWire, f as stripServerOnlyForWire };

package/dist/workflowReadBuiltins.js

@@ -1,7 +1,7 @@
 import { and as e, eq as t } from "@voltro/database";
 import { ADMIN_SCOPE as n, hasEffectiveScope as r } from "@voltro/protocol";
 import { openWorkflowRow as i } from "@voltro/workflow";
-//#region src/workflowReadBuiltins.ts
+// src/workflowReadBuiltins.ts
 var a = (e) => e.request?.subject ?? null, o = (e, t) => {
 	if (typeof e != "object" || !e) return null;
 	let n = e[t];
@@ -83,5 +83,4 @@ var a = (e) => e.request?.subject ?? null, o = (e, t) => {
 		projection: void 0
 	});
 };
-//#endregion
 export { _ as workflowDomainEventsExecutor, v as workflowEventDeliveriesExecutor, s as workflowRowVisibleTo, h as workflowRunEventsExecutor, f as workflowRunExecutor, m as workflowRunStepsExecutor, p as workflowRunsExecutor };

package/dist/workflowRuntime.js

@@ -4,9 +4,9 @@ import { makeEffectStoreLayer as r } from "./effectStore.js";
 import { Cause as i, Effect as a, Exit as o, Layer as s, Option as c, Schema as l, SchemaIssue as u } from "effect";
 import { SubjectService as d, WorkflowControlResultSchema as f, WorkflowQueuedCancellationResultSchema as p, WorkflowRestartCommandSchema as m, WorkflowRestartObservationSchema as h, WorkflowRestartResultSchema as g, WorkflowRestartTargetSchema as _, WorkflowRetryCommandSchema as v, WorkflowRetryObservationSchema as y, WorkflowRetryTargetSchema as b } from "@voltro/protocol";
 import { createLogger as x } from "@voltro/logger";
-import * as S from "effect/SchemaAST";
-import { executePreparedWorkflow as C, getCurrentWorkflowExecutionId as w, hasPreparedWorkflowExecution as T } from "@voltro/workflow";
-//#region src/workflowRuntime.ts
+import { executePreparedWorkflow as S, getCurrentWorkflowExecutionId as C, hasPreparedWorkflowExecution as w } from "@voltro/workflow";
+import * as T from "effect/SchemaAST";
+// src/workflowRuntime.ts
 var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	workflowName: l.String,
 	handleId: l.String,
@@ -135,9 +135,9 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	}
 }, H = (e, t) => {
 	let n = e.ast, r = [], i = [];
-	return S.isObjects(n) && n.propertySignatures.forEach((e) => {
+	return T.isObjects(n) && n.propertySignatures.forEach((e) => {
 		let n = e.name;
-		typeof n == "string" && (S.isOptional(e.type) ? t && i.push(n) : r.push(n));
+		typeof n == "string" && (T.isOptional(e.type) ? t && i.push(n) : r.push(n));
 	}), {
 		required: r,
 		optional: i
@@ -151,7 +151,7 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 		}
 		return n;
 	}, i = (e, t, n = e.payloadSchema) => {
-		let r = l.decodeUnknownResult(l.make(S.toType(n.ast)))(t);
+		let r = l.decodeUnknownResult(l.make(T.toType(n.ast)))(t);
 		if (r._tag === "Success") return;
 		let i = new Set(typeof t == "object" && t ? Object.keys(t) : []), a = W(n).filter((e) => !i.has(e));
 		throw new V(e.name, a, u.makeFormatterDefault()(r.failure.issue));
@@ -161,7 +161,7 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 	}, d = async (t, n) => {
 		let i = r(t);
 		return z(t, n, c.getOrUndefined(await e.runEffect(i.poll(n))));
-	}, x = async () => e.runEffect(w()), L = async (t, n, r) => {
+	}, x = async () => e.runEffect(C()), L = async (t, n, r) => {
 		if (e.resolveQueuedStart === void 0) throw Error(`Workflow '${t}' remains queued under receipt '${n}'; no receipt resolver is configured`);
 		let i = await e.resolveQueuedStart({
 			workflowName: t,
@@ -353,9 +353,9 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 		}
 		let m;
 		(e.rememberStartContext !== void 0 || i?.callerContext !== void 0) && (m = c ?? await e.runEffect(u.executionId(p)), await e.rememberStartContext?.(t, m, i?.callerContext ?? { subject: n }));
-		let h = c ?? (m !== void 0 && T(u) ? m : void 0);
-		if (d) return h === void 0 ? await e.runEffect(u.execute(p)) : await e.runEffect(C(u, p, h, { discard: !1 })), e.onEnqueue?.(), M(t, h ?? await e.runEffect(u.executionId(p)), "succeeded");
-		let g = await e.runEffect(h === void 0 ? u.execute(p, { discard: !0 }) : C(u, p, h));
+		let h = c ?? (m !== void 0 && w(u) ? m : void 0);
+		if (d) return h === void 0 ? await e.runEffect(u.execute(p)) : await e.runEffect(S(u, p, h, { discard: !1 })), e.onEnqueue?.(), M(t, h ?? await e.runEffect(u.executionId(p)), "succeeded");
+		let g = await e.runEffect(h === void 0 ? u.execute(p, { discard: !0 }) : S(u, p, h));
 		return e.onEnqueue?.(), M(t, g, "running");
 	};
 	return {
@@ -704,5 +704,4 @@ var E = class extends l.TaggedError()("WorkflowStartNotExecuted", {
 		return a.provide(m, h);
 	}));
 })));
-//#endregion
 export { V as WorkflowPayloadError, P as WorkflowRateLimitedError, F as WorkflowSingletonHeldError, E as WorkflowStartNotExecuted, Y as makeLazyWorkflowFacade, q as makeTransactionalWorkflowFacade, G as makeWorkflowFacade, J as makeWorkflowFacadeWithCallerContext, X as makeWorkflowHandlers, Z as makeWorkflowLayers, L as makeWorkflowRunHandle, U as payloadPropertyNames };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/runtime",
-  "version": "0.86.0",
+  "version": "0.88.0",
   "description": "The Voltro server runtime — AppContext assembly, the dispatcher, handler layers, API keys, coordinated scheduling, and analytics composition.",
   "keywords": [
     "voltro",
@@ -18,11 +18,26 @@
   },
   "type": "module",
   "exports": {
+    "./hot": {
+      "types": "./dist/hot.d.ts",
+      "import": "./dist/hot.js",
+      "default": "./dist/hot.js"
+    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./http-range": {
+      "types": "./dist/http-range.d.ts",
+      "import": "./dist/http-range.js",
+      "default": "./dist/http-range.js"
+    },
+    "./boot-refusal": {
+      "types": "./dist/boot-refusal.d.ts",
+      "import": "./dist/boot-refusal.js",
+      "default": "./dist/boot-refusal.js"
+    },
     "./package.json": "./package.json"
   },
   "main": "./dist/index.js",
@@ -33,26 +48,30 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@effect/platform-node": "4.0.1",
-    "@opentelemetry/api": "^1.9.1",
+    "@effect/platform-node": "4.1.0",
+    "@effect/platform-node-shared": "4.1.0",
+    "@nats-io/transport-node": "^3.4.0",
+    "@opentelemetry/api": "~1.9.1",
     "@opentelemetry/exporter-metrics-otlp-http": "^0.222.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
-    "@opentelemetry/resources": "^2.11.0",
-    "@opentelemetry/sdk-metrics": "^2.11.0",
-    "@opentelemetry/sdk-trace-base": "^2.11.0",
-    "@opentelemetry/sdk-trace-node": "^2.11.0",
-    "@opentelemetry/semantic-conventions": "^1.43.0",
-    "@voltro/database": "0.86.0",
-    "@voltro/kv": "0.86.0",
-    "@voltro/local-first": "0.86.0",
-    "@voltro/logger": "0.86.0",
-    "@voltro/protocol": "0.86.0",
-    "@voltro/workflow": "0.86.0",
-    "ioredis": "^5.11.1"
+    "@opentelemetry/resources": "^2.12.0",
+    "@opentelemetry/sdk-metrics": "^2.12.0",
+    "@opentelemetry/sdk-trace-base": "^2.12.0",
+    "@opentelemetry/sdk-trace-node": "^2.12.0",
+    "@opentelemetry/semantic-conventions": "^1.44.0",
+    "@upstash/redis": "^1.40.0",
+    "@voltro/database": "0.88.0",
+    "@voltro/kv": "0.88.0",
+    "@voltro/local-first": "0.88.0",
+    "@voltro/logger": "0.88.0",
+    "@voltro/protocol": "0.88.0",
+    "@voltro/shared": "0.88.0",
+    "@voltro/workflow": "0.88.0",
+    "ioredis": "^6.0.0"
   },
   "peerDependencies": {
-    "@effect/opentelemetry": "4.0.1",
-    "effect": "4.0.1"
+    "@effect/opentelemetry": "4.1.0",
+    "effect": "4.1.0"
   },
   "peerDependenciesMeta": {
     "@effect/opentelemetry": {