@yielded/auth 0.1.0-beta.1

package/dist/http-operation/auth-client.mjs

@@ -0,0 +1,116 @@
+import { OperationHttpError } from "./errors.mjs";
+import { make as make$1, makeAuthenticationCompletion } from "./client.mjs";
+import { Context, Effect, Layer, Scope, Semaphore } from "effect";
+//#region src/http-operation/auth-client.ts
+const AuthClientTypeId = Symbol.for("effect-auth/Client");
+/** Derive one named client from the shared contract. Each operation makes one
+* attempt. Authentication transitions also notify any scoped Atom consumers. */
+const acquire = Effect.fn("Client.make")(function* (contract, options) {
+	const transport = yield* make$1({
+		...options,
+		csrfHeader: options.csrf?.header ?? "x-effect-auth-csrf",
+		csrfValue: options.csrf?.value ?? "1"
+	});
+	const gate = yield* Semaphore.make(1);
+	const listeners = /* @__PURE__ */ new Set();
+	let state = {
+		subject: null,
+		generation: 0
+	};
+	let closed = false;
+	const notify = (event) => Effect.forEach([...listeners], (listener) => listener(event), {
+		concurrency: 1,
+		discard: true
+	});
+	const publish = Effect.fn("Client.publishSubject")(function* (subject, action, origin) {
+		state = {
+			subject,
+			generation: state.generation + 1
+		};
+		yield* notify({
+			_tag: "Transition",
+			state,
+			...action === void 0 ? {} : { action },
+			...origin === void 0 ? {} : { origin }
+		});
+	});
+	const completeAuthentication = makeAuthenticationCompletion(transport, gate, publish);
+	const replaceSubject = Effect.fn("Client.replaceSubject")(function* (subject) {
+		yield* gate.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
+			yield* transport.transition;
+			yield* publish(subject);
+		})));
+	});
+	const call = Effect.fn("Client.call")(function* (name, input, callOptions) {
+		if (closed) return yield* OperationHttpError.make({ reason: "stale-response" });
+		const action = contract.actions[name];
+		const project = action.subject;
+		const started = yield* transport.generation;
+		let transitioned = false;
+		const value = yield* Effect.gen(function* () {
+			if (project !== void 0 && action.mode === "mutation") {
+				const generation = state.generation;
+				const value = yield* makeAuthenticationCompletion(transport, gate, (subject) => publish(subject, String(name), callOptions?.origin))(action.route, input, (success) => project.fromSuccess(success));
+				transitioned = state.generation !== generation;
+				return value;
+			}
+			const value = yield* transport.call(action.route, input);
+			if (project !== void 0) yield* gate.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
+				if ((yield* transport.generation) !== started) return yield* OperationHttpError.make({ reason: "stale-response" });
+				const subject = yield* Effect.try({
+					try: () => project.fromSuccess(value),
+					catch: () => OperationHttpError.make({ reason: "response" })
+				});
+				if (subject !== void 0 && subject !== state.subject) {
+					yield* transport.transition;
+					yield* publish(subject);
+				}
+			})));
+			return value;
+		});
+		if (action.mode === "mutation" && !transitioned && callOptions?.notifyMutation !== false) yield* notify({
+			_tag: "Mutation",
+			name: String(name)
+		});
+		return value;
+	});
+	const controller = {
+		actions: contract.actions,
+		transport,
+		state: Effect.sync(() => state),
+		call,
+		replaceSubject,
+		completeAuthentication,
+		subscribe: (listener) => Effect.acquireRelease(gate.withPermits(1)(Effect.gen(function* () {
+			yield* listener({
+				_tag: "Transition",
+				state
+			});
+			listeners.add(listener);
+		})), () => Effect.sync(() => void listeners.delete(listener)))
+	};
+	yield* Scope.addFinalizer(yield* Effect.scope, gate.withPermits(1)(Effect.gen(function* () {
+		closed = true;
+		yield* transport.transition;
+		listeners.clear();
+	})));
+	const methods = Object.fromEntries(Object.keys(contract.actions).map((name) => [name, (input) => call(name, input)]));
+	Object.defineProperty(methods, AuthClientTypeId, { value: controller });
+	return { auth: Object.freeze(methods) };
+});
+/** Define a yieldable client without acquiring resources. Provide its layer once
+* in the application Scope, or yield its make Effect for direct acquisition.
+* Every instance owns its credential settlement and scoped Atom subscriptions. */
+const make = (contract, options) => {
+	const service = Context.Service()(`${contract.namespace}/client`);
+	const create = acquire(contract, options);
+	return Object.assign(service, {
+		contract,
+		make: create,
+		layer: Layer.effect(service, create)
+	});
+};
+//#endregion
+export { AuthClientTypeId, make };
+
+//# sourceMappingURL=auth-client.mjs.map

package/dist/http-operation/auth-client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.mjs","names":["makeTransport"],"sources":["../../src/http-operation/auth-client.ts"],"sourcesContent":["import { Context, Effect, Layer, Scope, Semaphore } from \"effect\";\n\nimport type { AnyAuthAction, AuthActions } from \"../operations/actions\";\nimport {\n  makeAuthenticationCompletion,\n  make as makeTransport,\n  type OperationAuthenticationCompletion,\n  type OperationFetchClient,\n  type OperationFetchOptions,\n} from \"./client\";\nimport type { RouteFailure, RouteInput, RouteSuccess } from \"./contract\";\nimport { OperationHttpError } from \"./errors\";\n\nexport type ClientOptions = Omit<OperationFetchOptions, \"csrfHeader\" | \"csrfValue\"> & {\n  readonly csrf?: { readonly header: string; readonly value: string };\n};\n\nexport type ActionDecodeServices<Action extends AnyAuthAction> =\n  | Action[\"route\"][\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n  | Action[\"route\"][\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"];\n\nexport type ActionArguments<Action extends AnyAuthAction> =\n  undefined extends RouteInput<Action[\"route\"]>\n    ? readonly [input?: RouteInput<Action[\"route\"]>]\n    : readonly [input: RouteInput<Action[\"route\"]>];\n\nexport interface AuthClientState {\n  readonly subject: string | null;\n  readonly generation: number;\n}\n\nexport type AuthClientEvent =\n  | {\n      readonly _tag: \"Transition\";\n      readonly state: AuthClientState;\n      readonly action?: string;\n      readonly origin?: object;\n    }\n  | { readonly _tag: \"Mutation\"; readonly name: string };\n\n/** Internal bridge shared with Atom. Subscriptions belong to their host Scope;\n * transition listeners only dispose and publish state, never call the client. */\nexport interface AuthClientController<Actions extends AuthActions> {\n  readonly actions: Actions;\n  readonly transport: OperationFetchClient;\n  readonly state: Effect.Effect<AuthClientState>;\n  readonly subscribe: (\n    listener: (event: AuthClientEvent) => Effect.Effect<void>,\n  ) => Effect.Effect<void, never, Scope.Scope>;\n  readonly replaceSubject: (subject: string | null) => Effect.Effect<void>;\n  readonly completeAuthentication: OperationAuthenticationCompletion;\n  readonly call: <Name extends keyof Actions>(\n    name: Name,\n    input: RouteInput<Actions[Name][\"route\"]>,\n    options?: { readonly notifyMutation?: boolean; readonly origin?: object },\n  ) => Effect.Effect<\n    RouteSuccess<Actions[Name][\"route\"]>,\n    RouteFailure<Actions[Name][\"route\"]> | OperationHttpError,\n    ActionDecodeServices<Actions[Name]>\n  >;\n}\n\nexport const AuthClientTypeId: unique symbol = Symbol.for(\"effect-auth/Client\");\n\n/** Named calls return Effects; request credentials and private reveals remain\n * in the configured transport capabilities, outside operation results. */\nexport type AuthClient<Actions extends AuthActions> = {\n  readonly [Name in keyof Actions]: (\n    ...args: ActionArguments<Actions[Name]>\n  ) => Effect.Effect<\n    RouteSuccess<Actions[Name][\"route\"]>,\n    RouteFailure<Actions[Name][\"route\"]> | OperationHttpError,\n    ActionDecodeServices<Actions[Name]>\n  >;\n} & { readonly [AuthClientTypeId]: AuthClientController<Actions> };\n\n/** Derive one named client from the shared contract. Each operation makes one\n * attempt. Authentication transitions also notify any scoped Atom consumers. */\nconst acquire = Effect.fn(\"Client.make\")(function* <Actions extends AuthActions>(\n  contract: { readonly actions: Actions },\n  options: ClientOptions,\n): Effect.fn.Return<{ readonly auth: AuthClient<Actions> }, OperationHttpError, Scope.Scope> {\n  const transport = yield* makeTransport({\n    ...options,\n    csrfHeader: options.csrf?.header ?? \"x-effect-auth-csrf\",\n    csrfValue: options.csrf?.value ?? \"1\",\n  });\n\n  const gate = yield* Semaphore.make(1);\n  const listeners = new Set<(event: AuthClientEvent) => Effect.Effect<void>>();\n  let state: AuthClientState = { subject: null, generation: 0 };\n  let closed = false;\n\n  const notify = (event: AuthClientEvent) =>\n    Effect.forEach([...listeners], (listener) => listener(event), {\n      concurrency: 1,\n      discard: true,\n    });\n\n  const publish = Effect.fn(\"Client.publishSubject\")(function* (\n    subject: string | null,\n    action?: string,\n    origin?: object,\n  ) {\n    state = { subject, generation: state.generation + 1 };\n    yield* notify({\n      _tag: \"Transition\",\n      state,\n      ...(action === undefined ? {} : { action }),\n      ...(origin === undefined ? {} : { origin }),\n    });\n  });\n\n  const completeAuthentication = makeAuthenticationCompletion(transport, gate, publish);\n\n  const replaceSubject = Effect.fn(\"Client.replaceSubject\")(function* (subject: string | null) {\n    yield* gate.withPermits(1)(\n      Effect.uninterruptible(\n        Effect.gen(function* () {\n          yield* transport.transition;\n          yield* publish(subject);\n        }),\n      ),\n    );\n  });\n\n  const call: AuthClientController<Actions>[\"call\"] = Effect.fn(\"Client.call\")(function* <\n    Name extends keyof Actions,\n  >(\n    name: Name,\n    input: RouteInput<Actions[Name][\"route\"]>,\n    callOptions?: { readonly notifyMutation?: boolean; readonly origin?: object },\n  ) {\n    if (closed) return yield* OperationHttpError.make({ reason: \"stale-response\" });\n\n    const action = contract.actions[name];\n    const project = action.subject;\n    const started = yield* transport.generation;\n    let transitioned = false;\n\n    const execute = Effect.gen(function* () {\n      if (project !== undefined && action.mode === \"mutation\") {\n        const generation = state.generation;\n\n        // Notify within credential settlement: disposing an account registry can\n        // interrupt the atom that dispatched this call before a later success tap.\n        const complete = makeAuthenticationCompletion(transport, gate, (subject) =>\n          publish(subject, String(name), callOptions?.origin),\n        );\n\n        const value = yield* complete<Actions[Name][\"route\"]>(action.route, input, (success) =>\n          project.fromSuccess(success),\n        );\n\n        transitioned = state.generation !== generation;\n\n        return value;\n      }\n\n      const value = yield* transport.call<Actions[Name][\"route\"]>(action.route, input);\n\n      if (project !== undefined) {\n        yield* gate.withPermits(1)(\n          Effect.uninterruptible(\n            Effect.gen(function* () {\n              if ((yield* transport.generation) !== started)\n                return yield* OperationHttpError.make({ reason: \"stale-response\" });\n\n              const subject = yield* Effect.try({\n                try: () => project.fromSuccess(value),\n                catch: () => OperationHttpError.make({ reason: \"response\" }),\n              });\n\n              if (subject !== undefined && subject !== state.subject) {\n                yield* transport.transition;\n                yield* publish(subject);\n              }\n            }),\n          ),\n        );\n      }\n\n      return value;\n    });\n\n    const value = yield* execute;\n\n    if (action.mode === \"mutation\" && !transitioned && callOptions?.notifyMutation !== false)\n      yield* notify({ _tag: \"Mutation\", name: String(name) });\n\n    return value;\n  });\n\n  const controller: AuthClientController<Actions> = {\n    actions: contract.actions,\n    transport,\n    state: Effect.sync(() => state),\n    call,\n    replaceSubject,\n    completeAuthentication,\n    subscribe: (listener) =>\n      Effect.acquireRelease(\n        gate.withPermits(1)(\n          Effect.gen(function* () {\n            yield* listener({ _tag: \"Transition\", state });\n            listeners.add(listener);\n          }),\n        ),\n        () => Effect.sync(() => void listeners.delete(listener)),\n      ),\n  };\n\n  yield* Scope.addFinalizer(\n    yield* Effect.scope,\n    gate.withPermits(1)(\n      Effect.gen(function* () {\n        closed = true;\n        yield* transport.transition;\n        listeners.clear();\n      }),\n    ),\n  );\n\n  const methods = Object.fromEntries(\n    Object.keys(contract.actions).map((name) => [\n      name,\n      (input: RouteInput<Actions[string][\"route\"]>) => call(name, input),\n    ]),\n  );\n\n  Object.defineProperty(methods, AuthClientTypeId, { value: controller });\n\n  // Every property delegates to the same named contract entry. This cast restores\n  // the mapped key/signature relationship after constructing the property table.\n  return { auth: Object.freeze(methods) as AuthClient<Actions> };\n});\n\n/** Identifier for a configured client service, separate from the server service. */\nexport interface ClientService<Id extends string, Actions extends AuthActions> {\n  readonly namespace: Id;\n  readonly actions: Actions;\n  readonly _client: unique symbol;\n}\n\nexport interface ClientDefinition<\n  Id extends string,\n  Actions extends AuthActions,\n> extends Context.Service<ClientService<Id, Actions>, { readonly auth: AuthClient<Actions> }> {\n  readonly contract: { readonly namespace: Id; readonly actions: Actions };\n  readonly make: Effect.Effect<\n    { readonly auth: AuthClient<Actions> },\n    OperationHttpError,\n    Scope.Scope\n  >;\n  readonly layer: Layer.Layer<ClientService<Id, Actions>, OperationHttpError>;\n}\n\n/** Define a yieldable client without acquiring resources. Provide its layer once\n * in the application Scope, or yield its make Effect for direct acquisition.\n * Every instance owns its credential settlement and scoped Atom subscriptions. */\nexport const make = <const Id extends string, Actions extends AuthActions>(\n  contract: { readonly namespace: Id; readonly actions: Actions },\n  options: ClientOptions,\n): ClientDefinition<Id, Actions> => {\n  const service = Context.Service<\n    ClientService<Id, Actions>,\n    { readonly auth: AuthClient<Actions> }\n  >()(`${contract.namespace}/client`);\n\n  const create = acquire(contract, options);\n\n  return Object.assign(service, { contract, make: create, layer: Layer.effect(service, create) });\n};\n"],"mappings":";;;;AA8DA,MAAa,mBAAkC,OAAO,IAAI,oBAAoB;;;AAgB9E,MAAM,UAAU,OAAO,GAAG,aAAa,CAAC,CAAC,WACvC,UACA,SAC2F;CAC3F,MAAM,YAAY,OAAOA,OAAc;EACrC,GAAG;EACH,YAAY,QAAQ,MAAM,UAAU;EACpC,WAAW,QAAQ,MAAM,SAAS;CACpC,CAAC;CAED,MAAM,OAAO,OAAO,UAAU,KAAK,CAAC;CACpC,MAAM,4BAAY,IAAI,IAAqD;CAC3E,IAAI,QAAyB;EAAE,SAAS;EAAM,YAAY;CAAE;CAC5D,IAAI,SAAS;CAEb,MAAM,UAAU,UACd,OAAO,QAAQ,CAAC,GAAG,SAAS,IAAI,aAAa,SAAS,KAAK,GAAG;EAC5D,aAAa;EACb,SAAS;CACX,CAAC;CAEH,MAAM,UAAU,OAAO,GAAG,uBAAuB,CAAC,CAAC,WACjD,SACA,QACA,QACA;EACA,QAAQ;GAAE;GAAS,YAAY,MAAM,aAAa;EAAE;EACpD,OAAO,OAAO;GACZ,MAAM;GACN;GACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;GACzC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EAC3C,CAAC;CACH,CAAC;CAED,MAAM,yBAAyB,6BAA6B,WAAW,MAAM,OAAO;CAEpF,MAAM,iBAAiB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,SAAwB;EAC3F,OAAO,KAAK,YAAY,CAAC,CAAC,CACxB,OAAO,gBACL,OAAO,IAAI,aAAa;GACtB,OAAO,UAAU;GACjB,OAAO,QAAQ,OAAO;EACxB,CAAC,CACH,CACF;CACF,CAAC;CAED,MAAM,OAA8C,OAAO,GAAG,aAAa,CAAC,CAAC,WAG3E,MACA,OACA,aACA;EACA,IAAI,QAAQ,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;EAE9E,MAAM,SAAS,SAAS,QAAQ;EAChC,MAAM,UAAU,OAAO;EACvB,MAAM,UAAU,OAAO,UAAU;EACjC,IAAI,eAAe;EA+CnB,MAAM,QAAQ,OA7CE,OAAO,IAAI,aAAa;GACtC,IAAI,YAAY,KAAA,KAAa,OAAO,SAAS,YAAY;IACvD,MAAM,aAAa,MAAM;IAQzB,MAAM,QAAQ,OAJG,6BAA6B,WAAW,OAAO,YAC9D,QAAQ,SAAS,OAAO,IAAI,GAAG,aAAa,MAAM,CAGxB,CAAC,CAAyB,OAAO,OAAO,QAAQ,YAC1E,QAAQ,YAAY,OAAO,CAC7B;IAEA,eAAe,MAAM,eAAe;IAEpC,OAAO;GACT;GAEA,MAAM,QAAQ,OAAO,UAAU,KAA6B,OAAO,OAAO,KAAK;GAE/E,IAAI,YAAY,KAAA,GACd,OAAO,KAAK,YAAY,CAAC,CAAC,CACxB,OAAO,gBACL,OAAO,IAAI,aAAa;IACtB,KAAK,OAAO,UAAU,gBAAgB,SACpC,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IAEpE,MAAM,UAAU,OAAO,OAAO,IAAI;KAChC,WAAW,QAAQ,YAAY,KAAK;KACpC,aAAa,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC;IAC7D,CAAC;IAED,IAAI,YAAY,KAAA,KAAa,YAAY,MAAM,SAAS;KACtD,OAAO,UAAU;KACjB,OAAO,QAAQ,OAAO;IACxB;GACF,CAAC,CACH,CACF;GAGF,OAAO;EACT,CAE2B;EAE3B,IAAI,OAAO,SAAS,cAAc,CAAC,gBAAgB,aAAa,mBAAmB,OACjF,OAAO,OAAO;GAAE,MAAM;GAAY,MAAM,OAAO,IAAI;EAAE,CAAC;EAExD,OAAO;CACT,CAAC;CAED,MAAM,aAA4C;EAChD,SAAS,SAAS;EAClB;EACA,OAAO,OAAO,WAAW,KAAK;EAC9B;EACA;EACA;EACA,YAAY,aACV,OAAO,eACL,KAAK,YAAY,CAAC,CAAC,CACjB,OAAO,IAAI,aAAa;GACtB,OAAO,SAAS;IAAE,MAAM;IAAc;GAAM,CAAC;GAC7C,UAAU,IAAI,QAAQ;EACxB,CAAC,CACH,SACM,OAAO,WAAW,KAAK,UAAU,OAAO,QAAQ,CAAC,CACzD;CACJ;CAEA,OAAO,MAAM,aACX,OAAO,OAAO,OACd,KAAK,YAAY,CAAC,CAAC,CACjB,OAAO,IAAI,aAAa;EACtB,SAAS;EACT,OAAO,UAAU;EACjB,UAAU,MAAM;CAClB,CAAC,CACH,CACF;CAEA,MAAM,UAAU,OAAO,YACrB,OAAO,KAAK,SAAS,OAAO,CAAC,CAAC,KAAK,SAAS,CAC1C,OACC,UAAgD,KAAK,MAAM,KAAK,CACnE,CAAC,CACH;CAEA,OAAO,eAAe,SAAS,kBAAkB,EAAE,OAAO,WAAW,CAAC;CAItE,OAAO,EAAE,MAAM,OAAO,OAAO,OAAO,EAAyB;AAC/D,CAAC;;;;AAyBD,MAAa,QACX,UACA,YACkC;CAClC,MAAM,UAAU,QAAQ,QAGtB,CAAC,CAAC,GAAG,SAAS,UAAU,QAAQ;CAElC,MAAM,SAAS,QAAQ,UAAU,OAAO;CAExC,OAAO,OAAO,OAAO,SAAS;EAAE;EAAU,MAAM;EAAQ,OAAO,MAAM,OAAO,SAAS,MAAM;CAAE,CAAC;AAChG"}

package/dist/http-operation/client.d.mts

@@ -0,0 +1,50 @@
+import { AuthRevealCommandCollector } from "../operations/reveals.mjs";
+import { AuthCredentialCommand, CredentialSlot } from "../operations/credentials.mjs";
+import { AnyRoute, RouteFailure, RouteInput, RouteSuccess } from "./contract.mjs";
+import { OperationHttpError } from "./errors.mjs";
+import { HttpCredentials } from "./models.mjs";
+import { Effect, Semaphore } from "effect";
+//#region src/http-operation/client.d.ts
+interface OperationFetchOptions {
+  readonly baseUrl: string;
+  readonly csrfHeader: string;
+  readonly csrfValue: string;
+  readonly maximumResponseBytes?: number;
+  readonly fetch?: typeof globalThis.fetch;
+  readonly privateOutput?: AuthRevealCommandCollector & {
+    readonly clear: Effect.Effect<void>;
+  };
+  readonly native?: {
+    readonly modeHeader: string;
+    readonly requestHeaders: Readonly<Record<CredentialSlot, string>>;
+    readonly responseHeaders: Readonly<Record<CredentialSlot, string>>;
+    readonly read: Effect.Effect<HttpCredentials, OperationHttpError>;
+    readonly accept: (commands: ReadonlyArray<AuthCredentialCommand>) => Effect.Effect<void, OperationHttpError>;
+  };
+}
+interface OperationCallOptions<Success = unknown> {
+  readonly replaceSubject?: boolean | ((success: Success) => boolean);
+  /** Runs inside credential admission after fencing old responses. The callback
+   * must not call this client's transition or start another credential call. */
+  readonly onTransition?: Effect.Effect<void>;
+}
+interface OperationFetchClient {
+  readonly call: <R extends AnyRoute>(route: R, input: RouteInput<R>, options?: OperationCallOptions<RouteSuccess<R>>) => Effect.Effect<RouteSuccess<R>, RouteFailure<R> | OperationHttpError, R["operation"]["rpc"]["successSchema"]["DecodingServices"] | R["operation"]["rpc"]["errorSchema"]["DecodingServices"]>;
+  /** Wait for admitted credential responses, then fence old queries and clear reveals.
+   * All authenticated subject changes for this client must pass this boundary. */
+  readonly transition: Effect.Effect<void>;
+  readonly generation: Effect.Effect<number>;
+}
+/** Complete an authentication operation and publish its subject while its
+ * credential response remains admitted. Undefined preserves a pending flow. */
+interface OperationAuthenticationCompletion {
+  <R extends AnyRoute>(route: R, input: RouteInput<R>, fromSuccess: (success: RouteSuccess<R>) => string | null | undefined, options?: {
+    readonly onTransition?: Effect.Effect<void>;
+  }): Effect.Effect<RouteSuccess<R>, RouteFailure<R> | OperationHttpError, R["operation"]["rpc"]["successSchema"]["DecodingServices"] | R["operation"]["rpc"]["errorSchema"]["DecodingServices"]>;
+}
+/** One instance owns credential ordering and stale-result fencing. Share it within
+ * a browser authentication lifetime; mutations are never automatically retried. */
+declare const make: (options: OperationFetchOptions) => Effect.Effect<OperationFetchClient, OperationHttpError, never>;
+//#endregion
+export { OperationAuthenticationCompletion, OperationCallOptions, OperationFetchClient, OperationFetchOptions, make };
+//# sourceMappingURL=client.d.mts.map

package/dist/http-operation/client.mjs

@@ -0,0 +1,188 @@
+import { snapshotRevealCommands } from "../operations/reveals.mjs";
+import { OperationHttpError } from "./errors.mjs";
+import { credentialSlots } from "./models.mjs";
+import { CredentialWire, RevealWire, decodeRevealWire } from "./private.mjs";
+import { headerName } from "./configuration-schema.mjs";
+import { HttpRequestBody } from "./contract.mjs";
+import { DateTime, Effect, Redacted, Schema, Semaphore } from "effect";
+//#region src/http-operation/client.ts
+/** The caller owns the lifecycle gate and publisher. Publishers must not call
+* the transport: they run under credential admission, before reveal acceptance. */
+const makeAuthenticationCompletion = (client, gate, publishSubject) => Effect.fn("OperationHttpClient.completeAuthentication")(function* (route, input, fromSuccess, options) {
+	const started = yield* client.generation;
+	return yield* gate.withPermits(1)(Effect.gen(function* () {
+		if ((yield* client.generation) !== started) return yield* OperationHttpError.make({ reason: "stale-response" });
+		return yield* Effect.uninterruptible(Effect.gen(function* () {
+			let nextSubject;
+			return yield* client.call(route, input, {
+				replaceSubject: (value) => {
+					nextSubject = fromSuccess(value);
+					return nextSubject !== void 0;
+				},
+				onTransition: Effect.suspend(() => nextSubject === void 0 ? Effect.void : publishSubject(nextSubject).pipe(Effect.andThen(options?.onTransition ?? Effect.void)))
+			});
+		}).pipe(Effect.onError(() => Effect.gen(function* () {
+			yield* client.transition;
+			yield* publishSubject(null);
+			yield* options?.onTransition ?? Effect.void;
+		}))));
+	}));
+});
+const responseCodec = Schema.fromJsonString(Schema.Union([
+	Schema.TaggedStruct("Success", {
+		value: Schema.optionalKey(Schema.Json),
+		private: Schema.optionalKey(Schema.Array(RevealWire))
+	}),
+	Schema.TaggedStruct("Failure", { error: Schema.Json }),
+	Schema.TaggedStruct("TransportFailure", { reason: Schema.String })
+]));
+const credentialCodec = Schema.fromJsonString(CredentialWire);
+const requestCodec = Schema.fromJsonString(HttpRequestBody);
+const readBody = (response, maximum) => Effect.tryPromise({
+	try: async (signal) => {
+		if (response.body === null) return "";
+		const reader = response.body.getReader();
+		const chunks = [];
+		let size = 0;
+		const abort = () => {
+			reader.cancel();
+		};
+		signal.addEventListener("abort", abort, { once: true });
+		try {
+			while (true) {
+				const part = await reader.read();
+				if (part.done) break;
+				size += part.value.length;
+				if (size > maximum) {
+					await reader.cancel();
+					throw new Error();
+				}
+				chunks.push(part.value);
+			}
+			const bytes = new Uint8Array(size);
+			let offset = 0;
+			for (const chunk of chunks) {
+				bytes.set(chunk, offset);
+				offset += chunk.length;
+			}
+			return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+		} finally {
+			signal.removeEventListener("abort", abort);
+			reader.releaseLock();
+		}
+	},
+	catch: () => OperationHttpError.make({ reason: "response" })
+});
+/** One instance owns credential ordering and stale-result fencing. Share it within
+* a browser authentication lifetime; mutations are never automatically retried. */
+const make = Effect.fn("OperationHttpClient.make")(function* (options) {
+	const base = yield* Effect.try({
+		try: () => new URL(options.baseUrl),
+		catch: () => OperationHttpError.make({ reason: "request" })
+	});
+	if (!Number.isSafeInteger(options.maximumResponseBytes ?? 1048576) || (options.maximumResponseBytes ?? 1048576) < 1 || (options.maximumResponseBytes ?? 1048576) > 1048576 || !/^x-[a-z0-9-]{1,61}$/.test(options.csrfHeader) || options.csrfValue.length < 1 || options.csrfValue.length > 128 || !["https:", "http:"].includes(base.protocol) || base.username !== "" || base.password !== "" || base.search !== "" || base.hash !== "") return yield* OperationHttpError.make({ reason: "request" });
+	if (options.native !== void 0) {
+		const names = [options.native.modeHeader, ...credentialSlots.map((slot) => options.native.requestHeaders[slot])];
+		const response = credentialSlots.map((slot) => options.native.responseHeaders[slot]);
+		if ([...names, ...response].some((name) => !Schema.is(headerName)(name)) || new Set(names).size !== names.length || new Set(response).size !== response.length || names.includes(options.csrfHeader)) return yield* OperationHttpError.make({ reason: "request" });
+	}
+	const gate = yield* Semaphore.make(1);
+	let generation = 0;
+	const advance = Effect.gen(function* () {
+		generation++;
+		if (options.privateOutput !== void 0) yield* options.privateOutput.clear;
+	});
+	return {
+		call: Effect.fn("OperationHttpClient.call")(function* (route, input, callOptions) {
+			const started = generation;
+			const services = yield* Effect.context();
+			const successSchema = route.operation.rpc.successSchema;
+			const errorSchema = route.operation.rpc.errorSchema;
+			if (route.operation.reveals.some((kind) => options.privateOutput === void 0 || !options.privateOutput.supportedKinds.includes(kind) || !route.reveals.includes(kind))) return yield* OperationHttpError.make({ reason: "private-output" });
+			const work = Effect.gen(function* () {
+				if (started !== generation) return yield* OperationHttpError.make({ reason: "stale-response" });
+				const payload = input === void 0 ? void 0 : yield* Schema.decodeUnknownEffect(Schema.Json)(input).pipe(Effect.mapError(() => OperationHttpError.make({ reason: "request" })));
+				const body = yield* Schema.encodeEffect(requestCodec)(payload === void 0 ? {} : { payload }).pipe(Effect.mapError(() => OperationHttpError.make({ reason: "request" })));
+				if (route.method === "GET" && input !== void 0) return yield* OperationHttpError.make({ reason: "request" });
+				const headers = new Headers(route.method === "GET" ? {} : {
+					"content-type": "application/json",
+					[options.csrfHeader]: options.csrfValue
+				});
+				if (options.native !== void 0) {
+					headers.set(options.native.modeHeader, "native");
+					const credentials = yield* options.native.read;
+					for (const slot of credentialSlots) if (credentials[slot] !== void 0) headers.set(options.native.requestHeaders[slot], Redacted.value(credentials[slot]));
+				}
+				const destination = new URL(route.path, base);
+				const response = yield* Effect.tryPromise({
+					try: (signal) => {
+						if (started !== generation) throw OperationHttpError.make({ reason: "stale-response" });
+						return (options.fetch ?? globalThis.fetch)(destination, {
+							method: route.method,
+							headers,
+							...route.method === "GET" ? {} : { body },
+							credentials: options.native === void 0 ? "include" : "omit",
+							redirect: "error",
+							signal
+						});
+					},
+					catch: (error) => Schema.is(OperationHttpError)(error) ? error : OperationHttpError.make({ reason: "network" })
+				});
+				if (response.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() !== "application/json") return yield* OperationHttpError.make({ reason: "response" });
+				const envelope = yield* Schema.decodeEffect(responseCodec)(yield* readBody(response, options.maximumResponseBytes ?? 1048576)).pipe(Effect.mapError(() => OperationHttpError.make({ reason: "response" })));
+				if (started !== generation) return yield* OperationHttpError.make({ reason: "stale-response" });
+				if (envelope._tag === "TransportFailure") return yield* OperationHttpError.make({ reason: envelope.reason === "origin" || envelope.reason === "csrf" || envelope.reason === "credentials" || envelope.reason === "private-output" ? envelope.reason : "response" });
+				if (envelope._tag === "Failure") {
+					const failure = yield* Schema.decodeEffect(errorSchema)(envelope.error).pipe(Effect.provide(services), Effect.mapError(() => OperationHttpError.make({ reason: "response" })));
+					return yield* Effect.fail(failure);
+				}
+				if (!response.ok) return yield* OperationHttpError.make({ reason: "response" });
+				const value = yield* Schema.decodeEffect(successSchema)(envelope.value).pipe(Effect.provide(services), Effect.mapError(() => OperationHttpError.make({ reason: "response" })));
+				if (started !== generation) return yield* OperationHttpError.make({ reason: "stale-response" });
+				const privateCommands = yield* Effect.try({
+					try: () => snapshotRevealCommands((envelope.private ?? []).map(decodeRevealWire), route.reveals),
+					catch: () => OperationHttpError.make({ reason: "private-output" })
+				});
+				const now = DateTime.toEpochMillis(yield* DateTime.now);
+				if (privateCommands.some((command) => command.expiresAtMillis <= now || command.expiresAtMillis > now + 3e5)) return yield* OperationHttpError.make({ reason: "private-output" });
+				if (privateCommands.length > 0 && options.privateOutput === void 0) return yield* OperationHttpError.make({ reason: "private-output" });
+				if (options.native !== void 0) {
+					const commands = [];
+					for (const slot of credentialSlots) {
+						const raw = response.headers.get(options.native.responseHeaders[slot]);
+						if (raw === null) continue;
+						if (!route.operation.credentials) return yield* OperationHttpError.make({ reason: "credentials" });
+						const command = yield* Schema.decodeEffect(credentialCodec)(raw).pipe(Effect.mapError(() => OperationHttpError.make({ reason: "response" })));
+						if (command._tag === "Issue" && command.expiresAtMillis <= now) return yield* OperationHttpError.make({ reason: "credentials" });
+						commands.push(command._tag === "Clear" ? {
+							_tag: "Clear",
+							slot
+						} : {
+							...command,
+							slot,
+							credential: Redacted.make(command.credential)
+						});
+					}
+					if (commands.length > 0) yield* options.native.accept(commands);
+				}
+				const projectSubject = callOptions?.replaceSubject;
+				if (typeof projectSubject === "function" ? yield* Effect.try({
+					try: () => projectSubject(value),
+					catch: () => OperationHttpError.make({ reason: "response" })
+				}) : projectSubject === true) {
+					yield* advance;
+					if (callOptions?.onTransition !== void 0) yield* callOptions.onTransition;
+				}
+				if (privateCommands.length > 0) yield* options.privateOutput.accept(privateCommands);
+				return value;
+			});
+			return yield* route.operation.credentials || route.operation.reveals.length > 0 || callOptions?.replaceSubject !== void 0 && callOptions.replaceSubject !== false ? gate.withPermits(1)(Effect.uninterruptible(work)) : work;
+		}),
+		transition: gate.withPermits(1)(advance),
+		generation: Effect.sync(() => generation)
+	};
+});
+//#endregion
+export { make, makeAuthenticationCompletion };
+
+//# sourceMappingURL=client.mjs.map

package/dist/http-operation/client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/http-operation/client.ts"],"sourcesContent":["import { DateTime, Effect, Redacted, Schema, Semaphore } from \"effect\";\n\nimport type { AuthCredentialCommand, CredentialSlot } from \"../operations/credentials\";\nimport { snapshotRevealCommands, type AuthRevealCommandCollector } from \"../operations/reveals\";\nimport { headerName } from \"./configuration-schema\";\nimport {\n  type AnyRoute,\n  HttpRequestBody,\n  type RouteFailure,\n  type RouteInput,\n  type RouteSuccess,\n} from \"./contract\";\nimport { OperationHttpError } from \"./errors\";\nimport type { HttpCredentials } from \"./models\";\nimport { CredentialWire, RevealWire, credentialSlots, decodeRevealWire } from \"./private\";\n\nexport interface OperationFetchOptions {\n  readonly baseUrl: string;\n  readonly csrfHeader: string;\n  readonly csrfValue: string;\n  readonly maximumResponseBytes?: number;\n  readonly fetch?: typeof globalThis.fetch;\n  readonly privateOutput?: AuthRevealCommandCollector & { readonly clear: Effect.Effect<void> };\n  readonly native?: {\n    readonly modeHeader: string;\n    readonly requestHeaders: Readonly<Record<CredentialSlot, string>>;\n    readonly responseHeaders: Readonly<Record<CredentialSlot, string>>;\n    readonly read: Effect.Effect<HttpCredentials, OperationHttpError>;\n    readonly accept: (\n      commands: ReadonlyArray<AuthCredentialCommand>,\n    ) => Effect.Effect<void, OperationHttpError>;\n  };\n}\n\nexport interface OperationCallOptions<Success = unknown> {\n  readonly replaceSubject?: boolean | ((success: Success) => boolean);\n  /** Runs inside credential admission after fencing old responses. The callback\n   * must not call this client's transition or start another credential call. */\n  readonly onTransition?: Effect.Effect<void>;\n}\n\nexport interface OperationFetchClient {\n  readonly call: <R extends AnyRoute>(\n    route: R,\n    input: RouteInput<R>,\n    options?: OperationCallOptions<RouteSuccess<R>>,\n  ) => Effect.Effect<\n    RouteSuccess<R>,\n    RouteFailure<R> | OperationHttpError,\n    | R[\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n    | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"]\n  >;\n  /** Wait for admitted credential responses, then fence old queries and clear reveals.\n   * All authenticated subject changes for this client must pass this boundary. */\n  readonly transition: Effect.Effect<void>;\n  readonly generation: Effect.Effect<number>;\n}\n\n/** Complete an authentication operation and publish its subject while its\n * credential response remains admitted. Undefined preserves a pending flow. */\nexport interface OperationAuthenticationCompletion {\n  <R extends AnyRoute>(\n    route: R,\n    input: RouteInput<R>,\n    fromSuccess: (success: RouteSuccess<R>) => string | null | undefined,\n    options?: { readonly onTransition?: Effect.Effect<void> },\n  ): Effect.Effect<\n    RouteSuccess<R>,\n    RouteFailure<R> | OperationHttpError,\n    | R[\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n    | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"]\n  >;\n}\n\n/** The caller owns the lifecycle gate and publisher. Publishers must not call\n * the transport: they run under credential admission, before reveal acceptance. */\nexport const makeAuthenticationCompletion = (\n  client: OperationFetchClient,\n  gate: Semaphore.Semaphore,\n  publishSubject: (subject: string | null) => Effect.Effect<void>,\n): OperationAuthenticationCompletion =>\n  Effect.fn(\"OperationHttpClient.completeAuthentication\")(function* <R extends AnyRoute>(\n    route: R,\n    input: RouteInput<R>,\n    fromSuccess: (success: RouteSuccess<R>) => string | null | undefined,\n    options?: { readonly onTransition?: Effect.Effect<void> },\n  ) {\n    const started = yield* client.generation;\n\n    return yield* gate.withPermits(1)(\n      Effect.gen(function* () {\n        if ((yield* client.generation) !== started)\n          return yield* OperationHttpError.make({ reason: \"stale-response\" });\n\n        return yield* Effect.uninterruptible(\n          Effect.gen(function* () {\n            let nextSubject: string | null | undefined;\n\n            return yield* client.call(route, input, {\n              replaceSubject: (value) => {\n                nextSubject = fromSuccess(value);\n\n                return nextSubject !== undefined;\n              },\n              onTransition: Effect.suspend(() =>\n                nextSubject === undefined\n                  ? Effect.void\n                  : publishSubject(nextSubject).pipe(\n                      Effect.andThen(options?.onTransition ?? Effect.void),\n                    ),\n              ),\n            });\n          }).pipe(\n            // A failed response can follow a cookie already accepted by the\n            // browser. Remove the old account state without replaying the call.\n            Effect.onError(() =>\n              Effect.gen(function* () {\n                yield* client.transition;\n                yield* publishSubject(null);\n                yield* options?.onTransition ?? Effect.void;\n              }),\n            ),\n          ),\n        );\n      }),\n    );\n  });\n\nconst responseCodec = Schema.fromJsonString(\n  Schema.Union([\n    Schema.TaggedStruct(\"Success\", {\n      value: Schema.optionalKey(Schema.Json),\n      private: Schema.optionalKey(Schema.Array(RevealWire)),\n    }),\n    Schema.TaggedStruct(\"Failure\", { error: Schema.Json }),\n    Schema.TaggedStruct(\"TransportFailure\", { reason: Schema.String }),\n  ]),\n);\n\nconst credentialCodec = Schema.fromJsonString(CredentialWire);\nconst requestCodec = Schema.fromJsonString(HttpRequestBody);\n\nconst readBody = (response: Response, maximum: number) =>\n  Effect.tryPromise({\n    try: async (signal) => {\n      if (response.body === null) return \"\";\n      const reader = response.body.getReader();\n      const chunks: Uint8Array[] = [];\n      let size = 0;\n\n      const abort = () => {\n        void reader.cancel();\n      };\n\n      signal.addEventListener(\"abort\", abort, { once: true });\n      try {\n        while (true) {\n          const part = await reader.read();\n\n          if (part.done) break;\n          size += part.value.length;\n          if (size > maximum) {\n            await reader.cancel();\n            throw new Error();\n          }\n          chunks.push(part.value);\n        }\n        const bytes = new Uint8Array(size);\n        let offset = 0;\n\n        for (const chunk of chunks) {\n          bytes.set(chunk, offset);\n          offset += chunk.length;\n        }\n\n        return new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n      } finally {\n        signal.removeEventListener(\"abort\", abort);\n        reader.releaseLock();\n      }\n    },\n    catch: () => OperationHttpError.make({ reason: \"response\" }),\n  });\n\n/** One instance owns credential ordering and stale-result fencing. Share it within\n * a browser authentication lifetime; mutations are never automatically retried. */\nexport const make = Effect.fn(\"OperationHttpClient.make\")(function* (\n  options: OperationFetchOptions,\n): Effect.fn.Return<OperationFetchClient, OperationHttpError> {\n  const base = yield* Effect.try({\n    try: () => new URL(options.baseUrl),\n    catch: () => OperationHttpError.make({ reason: \"request\" }),\n  });\n\n  if (\n    !Number.isSafeInteger(options.maximumResponseBytes ?? 1048576) ||\n    (options.maximumResponseBytes ?? 1048576) < 1 ||\n    (options.maximumResponseBytes ?? 1048576) > 1048576 ||\n    !/^x-[a-z0-9-]{1,61}$/.test(options.csrfHeader) ||\n    options.csrfValue.length < 1 ||\n    options.csrfValue.length > 128 ||\n    ![\"https:\", \"http:\"].includes(base.protocol) ||\n    base.username !== \"\" ||\n    base.password !== \"\" ||\n    base.search !== \"\" ||\n    base.hash !== \"\"\n  )\n    return yield* OperationHttpError.make({ reason: \"request\" });\n  if (options.native !== undefined) {\n    const names = [\n      options.native.modeHeader,\n      ...credentialSlots.map((slot) => options.native!.requestHeaders[slot]),\n    ];\n\n    const response = credentialSlots.map((slot) => options.native!.responseHeaders[slot]);\n\n    if (\n      [...names, ...response].some((name) => !Schema.is(headerName)(name)) ||\n      new Set(names).size !== names.length ||\n      new Set(response).size !== response.length ||\n      names.includes(options.csrfHeader)\n    )\n      return yield* OperationHttpError.make({ reason: \"request\" });\n  }\n  const gate = yield* Semaphore.make(1);\n  let generation = 0;\n\n  const advance = Effect.gen(function* () {\n    generation++;\n    if (options.privateOutput !== undefined) yield* options.privateOutput.clear;\n  });\n\n  const call = Effect.fn(\"OperationHttpClient.call\")(function* <R extends AnyRoute>(\n    route: R,\n    input: RouteInput<R>,\n    callOptions?: OperationCallOptions<RouteSuccess<R>>,\n  ): Effect.fn.Return<\n    RouteSuccess<R>,\n    RouteFailure<R> | OperationHttpError,\n    | R[\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n    | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"]\n  > {\n    const started = generation;\n\n    const services = yield* Effect.context<\n      | R[\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n      | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"]\n    >();\n\n    type DecoderServices =\n      | R[\"operation\"][\"rpc\"][\"successSchema\"][\"DecodingServices\"]\n      | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"DecodingServices\"];\n\n    // The route generic retains the exact schemas while heterogeneous property\n    // access widens them to Rpc.AnyWithProps. Restore that relationship locally.\n    const successSchema = route.operation.rpc.successSchema as Schema.Codec<\n      RouteSuccess<R>,\n      unknown,\n      DecoderServices,\n      unknown\n    >;\n\n    const errorSchema = route.operation.rpc.errorSchema as Schema.Codec<\n      RouteFailure<R>,\n      unknown,\n      DecoderServices,\n      unknown\n    >;\n\n    if (\n      route.operation.reveals.some(\n        (kind) =>\n          options.privateOutput === undefined ||\n          !options.privateOutput.supportedKinds.includes(kind) ||\n          !route.reveals.includes(kind),\n      )\n    )\n      return yield* OperationHttpError.make({ reason: \"private-output\" });\n\n    const work = Effect.gen(function* () {\n      if (started !== generation)\n        return yield* OperationHttpError.make({ reason: \"stale-response\" });\n\n      const payload =\n        input === undefined\n          ? undefined\n          : // oxlint-disable-next-line no-restricted-properties -- untyped input is validated for JSON transport compatibility.\n            yield* Schema.decodeUnknownEffect(Schema.Json)(input).pipe(\n              Effect.mapError(() => OperationHttpError.make({ reason: \"request\" })),\n            );\n\n      const body = yield* Schema.encodeEffect(requestCodec)(\n        payload === undefined ? {} : { payload },\n      ).pipe(Effect.mapError(() => OperationHttpError.make({ reason: \"request\" })));\n\n      if (route.method === \"GET\" && input !== undefined)\n        return yield* OperationHttpError.make({ reason: \"request\" });\n\n      const headers = new Headers(\n        route.method === \"GET\"\n          ? {}\n          : {\n              \"content-type\": \"application/json\",\n              [options.csrfHeader]: options.csrfValue,\n            },\n      );\n\n      if (options.native !== undefined) {\n        headers.set(options.native.modeHeader, \"native\");\n        const credentials = yield* options.native.read;\n\n        for (const slot of credentialSlots)\n          if (credentials[slot] !== undefined)\n            headers.set(options.native.requestHeaders[slot], Redacted.value(credentials[slot]!));\n      }\n      const destination = new URL(route.path, base);\n\n      const response = yield* Effect.tryPromise({\n        try: (signal) => {\n          // Native credential reads and schema services may suspend. Admission\n          // and fetch dispatch share this synchronous check so an old workflow\n          // cannot send a write with a newly installed subject's credentials.\n          if (started !== generation) throw OperationHttpError.make({ reason: \"stale-response\" });\n\n          return (options.fetch ?? globalThis.fetch)(destination, {\n            method: route.method,\n            headers,\n            ...(route.method === \"GET\" ? {} : { body }),\n            credentials: options.native === undefined ? \"include\" : \"omit\",\n            redirect: \"error\",\n            signal,\n          });\n        },\n        catch: (error) =>\n          Schema.is(OperationHttpError)(error)\n            ? error\n            : OperationHttpError.make({ reason: \"network\" }),\n      });\n\n      if (\n        response.headers.get(\"content-type\")?.split(\";\")[0]?.trim().toLowerCase() !==\n        \"application/json\"\n      )\n        return yield* OperationHttpError.make({ reason: \"response\" });\n\n      const envelope = yield* Schema.decodeEffect(responseCodec)(\n        yield* readBody(response, options.maximumResponseBytes ?? 1048576),\n      ).pipe(Effect.mapError(() => OperationHttpError.make({ reason: \"response\" })));\n\n      if (started !== generation)\n        return yield* OperationHttpError.make({ reason: \"stale-response\" });\n      if (envelope._tag === \"TransportFailure\")\n        return yield* OperationHttpError.make({\n          reason:\n            envelope.reason === \"origin\" ||\n            envelope.reason === \"csrf\" ||\n            envelope.reason === \"credentials\" ||\n            envelope.reason === \"private-output\"\n              ? envelope.reason\n              : \"response\",\n        });\n      if (envelope._tag === \"Failure\") {\n        const failure = yield* Schema.decodeEffect(errorSchema)(envelope.error).pipe(\n          Effect.provide(services),\n          Effect.mapError(() => OperationHttpError.make({ reason: \"response\" })),\n        );\n\n        return yield* Effect.fail(failure as RouteFailure<R>);\n      }\n      if (!response.ok) return yield* OperationHttpError.make({ reason: \"response\" });\n\n      const value = yield* Schema.decodeEffect(successSchema)(envelope.value).pipe(\n        Effect.provide(services),\n        Effect.mapError(() => OperationHttpError.make({ reason: \"response\" })),\n      );\n\n      if (started !== generation)\n        return yield* OperationHttpError.make({ reason: \"stale-response\" });\n\n      const privateCommands = yield* Effect.try({\n        try: () =>\n          snapshotRevealCommands((envelope.private ?? []).map(decodeRevealWire), route.reveals),\n        catch: () => OperationHttpError.make({ reason: \"private-output\" }),\n      });\n\n      const now = DateTime.toEpochMillis(yield* DateTime.now);\n\n      if (\n        privateCommands.some(\n          (command) => command.expiresAtMillis <= now || command.expiresAtMillis > now + 300_000,\n        )\n      )\n        return yield* OperationHttpError.make({ reason: \"private-output\" });\n      if (privateCommands.length > 0 && options.privateOutput === undefined)\n        return yield* OperationHttpError.make({ reason: \"private-output\" });\n      if (options.native !== undefined) {\n        const commands: AuthCredentialCommand[] = [];\n\n        for (const slot of credentialSlots) {\n          const raw = response.headers.get(options.native.responseHeaders[slot]);\n\n          if (raw === null) continue;\n          if (!route.operation.credentials)\n            return yield* OperationHttpError.make({ reason: \"credentials\" });\n\n          const command = yield* Schema.decodeEffect(credentialCodec)(raw).pipe(\n            Effect.mapError(() => OperationHttpError.make({ reason: \"response\" })),\n          );\n\n          if (command._tag === \"Issue\" && command.expiresAtMillis <= now)\n            return yield* OperationHttpError.make({ reason: \"credentials\" });\n          commands.push(\n            command._tag === \"Clear\"\n              ? { _tag: \"Clear\", slot }\n              : { ...command, slot, credential: Redacted.make(command.credential) },\n          );\n        }\n        if (commands.length > 0) yield* options.native.accept(commands);\n      }\n      const projectSubject = callOptions?.replaceSubject;\n\n      const replaceSubject =\n        typeof projectSubject === \"function\"\n          ? yield* Effect.try({\n              try: () => projectSubject(value as RouteSuccess<R>),\n              catch: () => OperationHttpError.make({ reason: \"response\" }),\n            })\n          : projectSubject === true;\n\n      if (replaceSubject) {\n        yield* advance;\n        if (callOptions?.onTransition !== undefined) yield* callOptions.onTransition;\n      }\n      if (privateCommands.length > 0) yield* options.privateOutput!.accept(privateCommands);\n\n      return value as RouteSuccess<R>;\n    });\n\n    // Once a credential response is admitted it must settle before the lifetime\n    // advances: browsers apply Set-Cookie before JavaScript can inspect a response.\n    return yield* route.operation.credentials ||\n    route.operation.reveals.length > 0 ||\n    (callOptions?.replaceSubject !== undefined && callOptions.replaceSubject !== false)\n      ? gate.withPermits(1)(Effect.uninterruptible(work))\n      : work;\n  });\n\n  return {\n    call,\n    transition: gate.withPermits(1)(advance),\n    generation: Effect.sync(() => generation),\n  };\n});\n"],"mappings":";;;;;;;;;;AA4EA,MAAa,gCACX,QACA,MACA,mBAEA,OAAO,GAAG,4CAA4C,CAAC,CAAC,WACtD,OACA,OACA,aACA,SACA;CACA,MAAM,UAAU,OAAO,OAAO;CAE9B,OAAO,OAAO,KAAK,YAAY,CAAC,CAAC,CAC/B,OAAO,IAAI,aAAa;EACtB,KAAK,OAAO,OAAO,gBAAgB,SACjC,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;EAEpE,OAAO,OAAO,OAAO,gBACnB,OAAO,IAAI,aAAa;GACtB,IAAI;GAEJ,OAAO,OAAO,OAAO,KAAK,OAAO,OAAO;IACtC,iBAAiB,UAAU;KACzB,cAAc,YAAY,KAAK;KAE/B,OAAO,gBAAgB,KAAA;IACzB;IACA,cAAc,OAAO,cACnB,gBAAgB,KAAA,IACZ,OAAO,OACP,eAAe,WAAW,CAAC,CAAC,KAC1B,OAAO,QAAQ,SAAS,gBAAgB,OAAO,IAAI,CACrD,CACN;GACF,CAAC;EACH,CAAC,CAAC,CAAC,KAGD,OAAO,cACL,OAAO,IAAI,aAAa;GACtB,OAAO,OAAO;GACd,OAAO,eAAe,IAAI;GAC1B,OAAO,SAAS,gBAAgB,OAAO;EACzC,CAAC,CACH,CACF,CACF;CACF,CAAC,CACH;AACF,CAAC;AAEH,MAAM,gBAAgB,OAAO,eAC3B,OAAO,MAAM;CACX,OAAO,aAAa,WAAW;EAC7B,OAAO,OAAO,YAAY,OAAO,IAAI;EACrC,SAAS,OAAO,YAAY,OAAO,MAAM,UAAU,CAAC;CACtD,CAAC;CACD,OAAO,aAAa,WAAW,EAAE,OAAO,OAAO,KAAK,CAAC;CACrD,OAAO,aAAa,oBAAoB,EAAE,QAAQ,OAAO,OAAO,CAAC;AACnE,CAAC,CACH;AAEA,MAAM,kBAAkB,OAAO,eAAe,cAAc;AAC5D,MAAM,eAAe,OAAO,eAAe,eAAe;AAE1D,MAAM,YAAY,UAAoB,YACpC,OAAO,WAAW;CAChB,KAAK,OAAO,WAAW;EACrB,IAAI,SAAS,SAAS,MAAM,OAAO;EACnC,MAAM,SAAS,SAAS,KAAK,UAAU;EACvC,MAAM,SAAuB,CAAC;EAC9B,IAAI,OAAO;EAEX,MAAM,cAAc;GAClB,OAAY,OAAO;EACrB;EAEA,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;EACtD,IAAI;GACF,OAAO,MAAM;IACX,MAAM,OAAO,MAAM,OAAO,KAAK;IAE/B,IAAI,KAAK,MAAM;IACf,QAAQ,KAAK,MAAM;IACnB,IAAI,OAAO,SAAS;KAClB,MAAM,OAAO,OAAO;KACpB,MAAM,IAAI,MAAM;IAClB;IACA,OAAO,KAAK,KAAK,KAAK;GACxB;GACA,MAAM,QAAQ,IAAI,WAAW,IAAI;GACjC,IAAI,SAAS;GAEb,KAAK,MAAM,SAAS,QAAQ;IAC1B,MAAM,IAAI,OAAO,MAAM;IACvB,UAAU,MAAM;GAClB;GAEA,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;EAC/D,UAAU;GACR,OAAO,oBAAoB,SAAS,KAAK;GACzC,OAAO,YAAY;EACrB;CACF;CACA,aAAa,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC;AAC7D,CAAC;;;AAIH,MAAa,OAAO,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACxD,SAC4D;CAC5D,MAAM,OAAO,OAAO,OAAO,IAAI;EAC7B,WAAW,IAAI,IAAI,QAAQ,OAAO;EAClC,aAAa,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC;CAC5D,CAAC;CAED,IACE,CAAC,OAAO,cAAc,QAAQ,wBAAwB,OAAO,MAC5D,QAAQ,wBAAwB,WAAW,MAC3C,QAAQ,wBAAwB,WAAW,WAC5C,CAAC,sBAAsB,KAAK,QAAQ,UAAU,KAC9C,QAAQ,UAAU,SAAS,KAC3B,QAAQ,UAAU,SAAS,OAC3B,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,KAC3C,KAAK,aAAa,MAClB,KAAK,aAAa,MAClB,KAAK,WAAW,MAChB,KAAK,SAAS,IAEd,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC;CAC7D,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,MAAM,QAAQ,CACZ,QAAQ,OAAO,YACf,GAAG,gBAAgB,KAAK,SAAS,QAAQ,OAAQ,eAAe,KAAK,CACvE;EAEA,MAAM,WAAW,gBAAgB,KAAK,SAAS,QAAQ,OAAQ,gBAAgB,KAAK;EAEpF,IACE,CAAC,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,KACnE,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,UAC9B,IAAI,IAAI,QAAQ,CAAC,CAAC,SAAS,SAAS,UACpC,MAAM,SAAS,QAAQ,UAAU,GAEjC,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC;CAC/D;CACA,MAAM,OAAO,OAAO,UAAU,KAAK,CAAC;CACpC,IAAI,aAAa;CAEjB,MAAM,UAAU,OAAO,IAAI,aAAa;EACtC;EACA,IAAI,QAAQ,kBAAkB,KAAA,GAAW,OAAO,QAAQ,cAAc;CACxE,CAAC;CAyND,OAAO;EACL,MAxNW,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACjD,OACA,OACA,aAMA;GACA,MAAM,UAAU;GAEhB,MAAM,WAAW,OAAO,OAAO,QAG7B;GAQF,MAAM,gBAAgB,MAAM,UAAU,IAAI;GAO1C,MAAM,cAAc,MAAM,UAAU,IAAI;GAOxC,IACE,MAAM,UAAU,QAAQ,MACrB,SACC,QAAQ,kBAAkB,KAAA,KAC1B,CAAC,QAAQ,cAAc,eAAe,SAAS,IAAI,KACnD,CAAC,MAAM,QAAQ,SAAS,IAAI,CAChC,GAEA,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;GAEpE,MAAM,OAAO,OAAO,IAAI,aAAa;IACnC,IAAI,YAAY,YACd,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IAEpE,MAAM,UACJ,UAAU,KAAA,IACN,KAAA,IAEA,OAAO,OAAO,oBAAoB,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KACpD,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CACtE;IAEN,MAAM,OAAO,OAAO,OAAO,aAAa,YAAY,CAAC,CACnD,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,CACzC,CAAC,CAAC,KAAK,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC;IAE5E,IAAI,MAAM,WAAW,SAAS,UAAU,KAAA,GACtC,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC;IAE7D,MAAM,UAAU,IAAI,QAClB,MAAM,WAAW,QACb,CAAC,IACD;KACE,gBAAgB;MACf,QAAQ,aAAa,QAAQ;IAChC,CACN;IAEA,IAAI,QAAQ,WAAW,KAAA,GAAW;KAChC,QAAQ,IAAI,QAAQ,OAAO,YAAY,QAAQ;KAC/C,MAAM,cAAc,OAAO,QAAQ,OAAO;KAE1C,KAAK,MAAM,QAAQ,iBACjB,IAAI,YAAY,UAAU,KAAA,GACxB,QAAQ,IAAI,QAAQ,OAAO,eAAe,OAAO,SAAS,MAAM,YAAY,KAAM,CAAC;IACzF;IACA,MAAM,cAAc,IAAI,IAAI,MAAM,MAAM,IAAI;IAE5C,MAAM,WAAW,OAAO,OAAO,WAAW;KACxC,MAAM,WAAW;MAIf,IAAI,YAAY,YAAY,MAAM,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;MAEtF,QAAQ,QAAQ,SAAS,WAAW,MAAA,CAAO,aAAa;OACtD,QAAQ,MAAM;OACd;OACA,GAAI,MAAM,WAAW,QAAQ,CAAC,IAAI,EAAE,KAAK;OACzC,aAAa,QAAQ,WAAW,KAAA,IAAY,YAAY;OACxD,UAAU;OACV;MACF,CAAC;KACH;KACA,QAAQ,UACN,OAAO,GAAG,kBAAkB,CAAC,CAAC,KAAK,IAC/B,QACA,mBAAmB,KAAK,EAAE,QAAQ,UAAU,CAAC;IACrD,CAAC;IAED,IACE,SAAS,QAAQ,IAAI,cAAc,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MACxE,oBAEA,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC;IAE9D,MAAM,WAAW,OAAO,OAAO,aAAa,aAAa,CAAC,CACxD,OAAO,SAAS,UAAU,QAAQ,wBAAwB,OAAO,CACnE,CAAC,CAAC,KAAK,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CAAC;IAE7E,IAAI,YAAY,YACd,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IACpE,IAAI,SAAS,SAAS,oBACpB,OAAO,OAAO,mBAAmB,KAAK,EACpC,QACE,SAAS,WAAW,YACpB,SAAS,WAAW,UACpB,SAAS,WAAW,iBACpB,SAAS,WAAW,mBAChB,SAAS,SACT,WACR,CAAC;IACH,IAAI,SAAS,SAAS,WAAW;KAC/B,MAAM,UAAU,OAAO,OAAO,aAAa,WAAW,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,KACtE,OAAO,QAAQ,QAAQ,GACvB,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACvE;KAEA,OAAO,OAAO,OAAO,KAAK,OAA0B;IACtD;IACA,IAAI,CAAC,SAAS,IAAI,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC;IAE9E,MAAM,QAAQ,OAAO,OAAO,aAAa,aAAa,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,KACtE,OAAO,QAAQ,QAAQ,GACvB,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACvE;IAEA,IAAI,YAAY,YACd,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IAEpE,MAAM,kBAAkB,OAAO,OAAO,IAAI;KACxC,WACE,wBAAwB,SAAS,WAAW,CAAC,EAAA,CAAG,IAAI,gBAAgB,GAAG,MAAM,OAAO;KACtF,aAAa,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,SAAS,cAAc,OAAO,SAAS,GAAG;IAEtD,IACE,gBAAgB,MACb,YAAY,QAAQ,mBAAmB,OAAO,QAAQ,kBAAkB,MAAM,GACjF,GAEA,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IACpE,IAAI,gBAAgB,SAAS,KAAK,QAAQ,kBAAkB,KAAA,GAC1D,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,iBAAiB,CAAC;IACpE,IAAI,QAAQ,WAAW,KAAA,GAAW;KAChC,MAAM,WAAoC,CAAC;KAE3C,KAAK,MAAM,QAAQ,iBAAiB;MAClC,MAAM,MAAM,SAAS,QAAQ,IAAI,QAAQ,OAAO,gBAAgB,KAAK;MAErE,IAAI,QAAQ,MAAM;MAClB,IAAI,CAAC,MAAM,UAAU,aACnB,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,cAAc,CAAC;MAEjE,MAAM,UAAU,OAAO,OAAO,aAAa,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,KAC/D,OAAO,eAAe,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACvE;MAEA,IAAI,QAAQ,SAAS,WAAW,QAAQ,mBAAmB,KACzD,OAAO,OAAO,mBAAmB,KAAK,EAAE,QAAQ,cAAc,CAAC;MACjE,SAAS,KACP,QAAQ,SAAS,UACb;OAAE,MAAM;OAAS;MAAK,IACtB;OAAE,GAAG;OAAS;OAAM,YAAY,SAAS,KAAK,QAAQ,UAAU;MAAE,CACxE;KACF;KACA,IAAI,SAAS,SAAS,GAAG,OAAO,QAAQ,OAAO,OAAO,QAAQ;IAChE;IACA,MAAM,iBAAiB,aAAa;IAUpC,IAPE,OAAO,mBAAmB,aACtB,OAAO,OAAO,IAAI;KAChB,WAAW,eAAe,KAAwB;KAClD,aAAa,mBAAmB,KAAK,EAAE,QAAQ,WAAW,CAAC;IAC7D,CAAC,IACD,mBAAmB,MAEL;KAClB,OAAO;KACP,IAAI,aAAa,iBAAiB,KAAA,GAAW,OAAO,YAAY;IAClE;IACA,IAAI,gBAAgB,SAAS,GAAG,OAAO,QAAQ,cAAe,OAAO,eAAe;IAEpF,OAAO;GACT,CAAC;GAID,OAAO,OAAO,MAAM,UAAU,eAC9B,MAAM,UAAU,QAAQ,SAAS,KAChC,aAAa,mBAAmB,KAAA,KAAa,YAAY,mBAAmB,QACzE,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,gBAAgB,IAAI,CAAC,IAChD;EACN,CAGK;EACH,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO;EACvC,YAAY,OAAO,WAAW,UAAU;CAC1C;AACF,CAAC"}

package/dist/http-operation/configuration-schema.mjs

@@ -0,0 +1,19 @@
+import { Schema } from "effect";
+//#region src/http-operation/configuration-schema.ts
+const headerName = Schema.String.check(Schema.isPattern(/^x-[a-z0-9-]{1,61}$/));
+const origin = Schema.String.check(Schema.makeFilter((value) => {
+	try {
+		const url = new URL(value);
+		return url.origin === value && (url.protocol === "https:" || url.protocol === "http:" && [
+			"localhost",
+			"127.0.0.1",
+			"[::1]"
+		].includes(url.hostname));
+	} catch {
+		return false;
+	}
+}));
+//#endregion
+export { headerName, origin };
+
+//# sourceMappingURL=configuration-schema.mjs.map

package/dist/http-operation/configuration-schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-schema.mjs","names":[],"sources":["../../src/http-operation/configuration-schema.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nexport const headerName = Schema.String.check(Schema.isPattern(/^x-[a-z0-9-]{1,61}$/));\n\nexport const origin = Schema.String.check(\n  Schema.makeFilter((value) => {\n    try {\n      const url = new URL(value);\n\n      return (\n        url.origin === value &&\n        (url.protocol === \"https:\" ||\n          (url.protocol === \"http:\" && [\"localhost\", \"127.0.0.1\", \"[::1]\"].includes(url.hostname)))\n      );\n    } catch {\n      return false;\n    }\n  }),\n);\n"],"mappings":";;AAEA,MAAa,aAAa,OAAO,OAAO,MAAM,OAAO,UAAU,qBAAqB,CAAC;AAErF,MAAa,SAAS,OAAO,OAAO,MAClC,OAAO,YAAY,UAAU;CAC3B,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EAEzB,OACE,IAAI,WAAW,UACd,IAAI,aAAa,YACf,IAAI,aAAa,WAAW;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,IAAI,QAAQ;CAE5F,QAAQ;EACN,OAAO;CACT;AACF,CAAC,CACH"}

package/dist/http-operation/contract.d.mts

@@ -0,0 +1,40 @@
+import { AuthInvocation } from "../operations/context.mjs";
+import { AuthRevealKind } from "../operations/reveals.mjs";
+import { CredentialSlot } from "../operations/credentials.mjs";
+import { OperationExposure, OperationReplay } from "../operations/operation.mjs";
+import { Effect, Schema } from "effect";
+import { Rpc } from "effect/unstable/rpc";
+//#region src/http-operation/contract.d.ts
+interface HttpOperation {
+  readonly rpc: Rpc.AnyWithProps;
+  readonly exposure: OperationExposure;
+  readonly replay: OperationReplay;
+  readonly credentials: boolean;
+  readonly reveals: ReadonlyArray<AuthRevealKind>;
+  readonly invokeUnknown: (invocation: AuthInvocation, input: unknown) => Effect.Effect<unknown, unknown, unknown>;
+}
+type CredentialFields<O extends HttpOperation> = Readonly<Partial<Record<Extract<keyof O["rpc"]["payloadSchema"]["Encoded"], string>, CredentialSlot>>>;
+interface OperationHttpRoute<O extends HttpOperation, Fields extends Readonly<Record<string, CredentialSlot>> = Record<never, never>, Method extends "POST" | "GET" = "POST"> {
+  readonly operation: O;
+  readonly path: string;
+  readonly method: Method;
+  readonly credentials: Fields;
+  readonly reveals: ReadonlyArray<AuthRevealKind>;
+}
+declare const route: <O extends HttpOperation, const Fields extends Readonly<Record<string, CredentialSlot>> = Record<never, never>>(operation: O, options: {
+  readonly path: string;
+  readonly credentials?: Fields & Record<Exclude<keyof Fields, Extract<keyof O["rpc"]["payloadSchema"]["Encoded"], string>>, never>;
+  readonly allowInternal?: true;
+  readonly reveals?: ReadonlyArray<AuthRevealKind>;
+}) => OperationHttpRoute<O, NoInfer<Fields>>;
+type AnyRoute = OperationHttpRoute<HttpOperation, Readonly<Record<string, CredentialSlot>>, "POST" | "GET">;
+type RouteInput<R extends AnyRoute> = keyof R["credentials"] extends never ? R["operation"]["rpc"]["payloadSchema"]["Encoded"] : Omit<R["operation"]["rpc"]["payloadSchema"]["Encoded"], keyof R["credentials"]>;
+type RouteSuccess<R extends AnyRoute> = R["operation"]["rpc"]["successSchema"]["Type"];
+type RouteFailure<R extends AnyRoute> = R["operation"]["rpc"]["errorSchema"]["Type"];
+type RouteRequirements<R extends AnyRoute> = Effect.Services<ReturnType<R["operation"]["invokeUnknown"]>> | R["operation"]["rpc"]["successSchema"]["EncodingServices"] | R["operation"]["rpc"]["errorSchema"]["EncodingServices"];
+declare const make: <const Routes extends Readonly<Record<string, AnyRoute>>>(routes: Routes) => Readonly<{
+  routes: Routes;
+}>;
+//#endregion
+export { AnyRoute, CredentialFields, HttpOperation, OperationHttpRoute, RouteFailure, RouteInput, RouteRequirements, RouteSuccess, make, route };
+//# sourceMappingURL=contract.d.mts.map

package/dist/http-operation/contract.mjs

@@ -0,0 +1,37 @@
+import { OperationHttpConfigurationError } from "./errors.mjs";
+import { Schema } from "effect";
+//#region src/http-operation/contract.ts
+const route = (operation, options) => {
+	if (!Schema.is(Schema.String.check(Schema.isPattern(/^\/(?:[A-Za-z0-9_-]+\/?)*$/)))(options.path)) throw OperationHttpConfigurationError.make({ reason: "route" });
+	if (operation.exposure !== "public" && options.allowInternal !== true) throw OperationHttpConfigurationError.make({ reason: "internal-operation" });
+	const reveals = [...options.reveals ?? []];
+	if (new Set(reveals).size !== reveals.length || reveals.some((kind) => !operation.reveals.includes(kind))) throw OperationHttpConfigurationError.make({ reason: "credentials" });
+	return Object.freeze({
+		operation,
+		path: options.path,
+		method: "POST",
+		credentials: Object.freeze({ ...options.credentials }),
+		reveals: Object.freeze(reveals)
+	});
+};
+const make = (routes) => {
+	const paths = /* @__PURE__ */ new Set();
+	const tags = /* @__PURE__ */ new Set();
+	for (const value of Object.values(routes)) {
+		if (paths.has(value.path)) throw OperationHttpConfigurationError.make({ reason: "duplicate-route" });
+		if (tags.has(value.operation.rpc._tag)) throw OperationHttpConfigurationError.make({ reason: "duplicate-operation" });
+		paths.add(value.path);
+		tags.add(value.operation.rpc._tag);
+	}
+	return Object.freeze({ routes: Object.freeze({ ...routes }) });
+};
+const HttpRequestBody = Schema.Struct({ payload: Schema.optionalKey(Schema.Json) });
+Schema.Union([
+	Schema.TaggedStruct("Success", { value: Schema.optionalKey(Schema.Json) }),
+	Schema.TaggedStruct("Failure", { error: Schema.Json }),
+	Schema.TaggedStruct("TransportFailure", { reason: Schema.String })
+]);
+//#endregion
+export { HttpRequestBody, make, route };
+
+//# sourceMappingURL=contract.mjs.map

package/dist/http-operation/contract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.mjs","names":[],"sources":["../../src/http-operation/contract.ts"],"sourcesContent":["import type { Effect } from \"effect\";\nimport { Schema } from \"effect\";\nimport type { Rpc } from \"effect/unstable/rpc\";\n\nimport type { AuthInvocation } from \"../operations/context\";\nimport type { CredentialSlot } from \"../operations/credentials\";\nimport type { OperationExposure, OperationReplay } from \"../operations/operation\";\nimport type { AuthRevealKind } from \"../operations/reveals\";\nimport { OperationHttpConfigurationError } from \"./errors\";\n\nexport interface HttpOperation {\n  readonly rpc: Rpc.AnyWithProps;\n  readonly exposure: OperationExposure;\n  readonly replay: OperationReplay;\n  readonly credentials: boolean;\n  readonly reveals: ReadonlyArray<AuthRevealKind>;\n  readonly invokeUnknown: (\n    invocation: AuthInvocation,\n    input: unknown,\n  ) => Effect.Effect<unknown, unknown, unknown>;\n}\n\nexport type CredentialFields<O extends HttpOperation> = Readonly<\n  Partial<Record<Extract<keyof O[\"rpc\"][\"payloadSchema\"][\"Encoded\"], string>, CredentialSlot>>\n>;\n\nexport interface OperationHttpRoute<\n  O extends HttpOperation,\n  Fields extends Readonly<Record<string, CredentialSlot>> = Record<never, never>,\n  Method extends \"POST\" | \"GET\" = \"POST\",\n> {\n  readonly operation: O;\n  readonly path: string;\n  readonly method: Method;\n  readonly credentials: Fields;\n  readonly reveals: ReadonlyArray<AuthRevealKind>;\n}\n\nexport const route = <\n  O extends HttpOperation,\n  const Fields extends Readonly<Record<string, CredentialSlot>> = Record<never, never>,\n>(\n  operation: O,\n  options: {\n    readonly path: string;\n    readonly credentials?: Fields &\n      Record<\n        Exclude<keyof Fields, Extract<keyof O[\"rpc\"][\"payloadSchema\"][\"Encoded\"], string>>,\n        never\n      >;\n    readonly allowInternal?: true;\n    readonly reveals?: ReadonlyArray<AuthRevealKind>;\n  },\n): OperationHttpRoute<O, NoInfer<Fields>> => {\n  if (!Schema.is(Schema.String.check(Schema.isPattern(/^\\/(?:[A-Za-z0-9_-]+\\/?)*$/)))(options.path))\n    throw OperationHttpConfigurationError.make({ reason: \"route\" });\n  if (operation.exposure !== \"public\" && options.allowInternal !== true)\n    throw OperationHttpConfigurationError.make({ reason: \"internal-operation\" });\n  const reveals = [...(options.reveals ?? [])];\n\n  if (\n    new Set(reveals).size !== reveals.length ||\n    reveals.some((kind) => !operation.reveals.includes(kind))\n  )\n    throw OperationHttpConfigurationError.make({ reason: \"credentials\" });\n\n  return Object.freeze({\n    operation,\n    path: options.path,\n    method: \"POST\",\n    credentials: Object.freeze({ ...options.credentials }) as Fields,\n    reveals: Object.freeze(reveals),\n  });\n};\n\nexport type AnyRoute = OperationHttpRoute<\n  HttpOperation,\n  Readonly<Record<string, CredentialSlot>>,\n  \"POST\" | \"GET\"\n>;\n\nexport type RouteInput<R extends AnyRoute> = keyof R[\"credentials\"] extends never\n  ? R[\"operation\"][\"rpc\"][\"payloadSchema\"][\"Encoded\"]\n  : Omit<R[\"operation\"][\"rpc\"][\"payloadSchema\"][\"Encoded\"], keyof R[\"credentials\"]>;\n\nexport type RouteSuccess<R extends AnyRoute> = R[\"operation\"][\"rpc\"][\"successSchema\"][\"Type\"];\nexport type RouteFailure<R extends AnyRoute> = R[\"operation\"][\"rpc\"][\"errorSchema\"][\"Type\"];\n\nexport type RouteRequirements<R extends AnyRoute> =\n  | Effect.Services<ReturnType<R[\"operation\"][\"invokeUnknown\"]>>\n  | R[\"operation\"][\"rpc\"][\"successSchema\"][\"EncodingServices\"]\n  | R[\"operation\"][\"rpc\"][\"errorSchema\"][\"EncodingServices\"];\n\nexport const make = <const Routes extends Readonly<Record<string, AnyRoute>>>(routes: Routes) => {\n  const paths = new Set<string>();\n  const tags = new Set<string>();\n\n  for (const value of Object.values(routes)) {\n    if (paths.has(value.path))\n      throw OperationHttpConfigurationError.make({ reason: \"duplicate-route\" });\n    if (tags.has(value.operation.rpc._tag))\n      throw OperationHttpConfigurationError.make({ reason: \"duplicate-operation\" });\n    paths.add(value.path);\n    tags.add(value.operation.rpc._tag);\n  }\n\n  return Object.freeze({ routes: Object.freeze({ ...routes }) as Routes });\n};\n\nexport const HttpRequestBody = Schema.Struct({ payload: Schema.optionalKey(Schema.Json) });\n\nexport const HttpResponseBody = Schema.Union([\n  Schema.TaggedStruct(\"Success\", { value: Schema.optionalKey(Schema.Json) }),\n  Schema.TaggedStruct(\"Failure\", { error: Schema.Json }),\n  Schema.TaggedStruct(\"TransportFailure\", { reason: Schema.String }),\n]);\n"],"mappings":";;;AAsCA,MAAa,SAIX,WACA,YAU2C;CAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,OAAO,MAAM,OAAO,UAAU,4BAA4B,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAC9F,MAAM,gCAAgC,KAAK,EAAE,QAAQ,QAAQ,CAAC;CAChE,IAAI,UAAU,aAAa,YAAY,QAAQ,kBAAkB,MAC/D,MAAM,gCAAgC,KAAK,EAAE,QAAQ,qBAAqB,CAAC;CAC7E,MAAM,UAAU,CAAC,GAAI,QAAQ,WAAW,CAAC,CAAE;CAE3C,IACE,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,QAAQ,UAClC,QAAQ,MAAM,SAAS,CAAC,UAAU,QAAQ,SAAS,IAAI,CAAC,GAExD,MAAM,gCAAgC,KAAK,EAAE,QAAQ,cAAc,CAAC;CAEtE,OAAO,OAAO,OAAO;EACnB;EACA,MAAM,QAAQ;EACd,QAAQ;EACR,aAAa,OAAO,OAAO,EAAE,GAAG,QAAQ,YAAY,CAAC;EACrD,SAAS,OAAO,OAAO,OAAO;CAChC,CAAC;AACH;AAoBA,MAAa,QAAiE,WAAmB;CAC/F,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,SAAS,OAAO,OAAO,MAAM,GAAG;EACzC,IAAI,MAAM,IAAI,MAAM,IAAI,GACtB,MAAM,gCAAgC,KAAK,EAAE,QAAQ,kBAAkB,CAAC;EAC1E,IAAI,KAAK,IAAI,MAAM,UAAU,IAAI,IAAI,GACnC,MAAM,gCAAgC,KAAK,EAAE,QAAQ,sBAAsB,CAAC;EAC9E,MAAM,IAAI,MAAM,IAAI;EACpB,KAAK,IAAI,MAAM,UAAU,IAAI,IAAI;CACnC;CAEA,OAAO,OAAO,OAAO,EAAE,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC,EAAY,CAAC;AACzE;AAEA,MAAa,kBAAkB,OAAO,OAAO,EAAE,SAAS,OAAO,YAAY,OAAO,IAAI,EAAE,CAAC;AAEzD,OAAO,MAAM;CAC3C,OAAO,aAAa,WAAW,EAAE,OAAO,OAAO,YAAY,OAAO,IAAI,EAAE,CAAC;CACzE,OAAO,aAAa,WAAW,EAAE,OAAO,OAAO,KAAK,CAAC;CACrD,OAAO,aAAa,oBAAoB,EAAE,QAAQ,OAAO,OAAO,CAAC;AACnE,CAAC"}

package/dist/http-operation/errors.d.mts

@@ -0,0 +1,13 @@
+import { Schema } from "effect";
+//#region src/http-operation/errors.d.ts
+declare const OperationHttpConfigurationError_base: Schema.Class<OperationHttpConfigurationError, Schema.TaggedStruct<"OperationHttpConfigurationError", {
+  readonly reason: Schema.Literals<readonly ["route", "duplicate-route", "duplicate-operation", "internal-operation", "credentials", "cookies", "origin", "callback", "redirect"]>;
+}>, import("effect/Cause").YieldableError>;
+declare class OperationHttpConfigurationError extends OperationHttpConfigurationError_base {}
+declare const OperationHttpError_base: Schema.Class<OperationHttpError, Schema.TaggedStruct<"OperationHttpError", {
+  readonly reason: Schema.Literals<readonly ["request", "not-found", "method", "origin", "csrf", "credentials", "too-large", "response", "network", "stale-response", "private-output", "unavailable"]>;
+}>, import("effect/Cause").YieldableError>;
+declare class OperationHttpError extends OperationHttpError_base {}
+//#endregion
+export { OperationHttpConfigurationError, OperationHttpError };
+//# sourceMappingURL=errors.d.mts.map

package/dist/http-operation/errors.mjs

@@ -0,0 +1,31 @@
+import { Schema } from "effect";
+//#region src/http-operation/errors.ts
+var OperationHttpConfigurationError = class extends Schema.TaggedError()("OperationHttpConfigurationError", { reason: Schema.Literals([
+	"route",
+	"duplicate-route",
+	"duplicate-operation",
+	"internal-operation",
+	"credentials",
+	"cookies",
+	"origin",
+	"callback",
+	"redirect"
+]) }) {};
+var OperationHttpError = class extends Schema.TaggedError()("OperationHttpError", { reason: Schema.Literals([
+	"request",
+	"not-found",
+	"method",
+	"origin",
+	"csrf",
+	"credentials",
+	"too-large",
+	"response",
+	"network",
+	"stale-response",
+	"private-output",
+	"unavailable"
+]) }) {};
+//#endregion
+export { OperationHttpConfigurationError, OperationHttpError };
+
+//# sourceMappingURL=errors.mjs.map

package/dist/http-operation/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/http-operation/errors.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nexport class OperationHttpConfigurationError extends Schema.TaggedError<OperationHttpConfigurationError>()(\n  \"OperationHttpConfigurationError\",\n  {\n    reason: Schema.Literals([\n      \"route\",\n      \"duplicate-route\",\n      \"duplicate-operation\",\n      \"internal-operation\",\n      \"credentials\",\n      \"cookies\",\n      \"origin\",\n      \"callback\",\n      \"redirect\",\n    ]),\n  },\n) {}\n\nexport class OperationHttpError extends Schema.TaggedError<OperationHttpError>()(\n  \"OperationHttpError\",\n  {\n    reason: Schema.Literals([\n      \"request\",\n      \"not-found\",\n      \"method\",\n      \"origin\",\n      \"csrf\",\n      \"credentials\",\n      \"too-large\",\n      \"response\",\n      \"network\",\n      \"stale-response\",\n      \"private-output\",\n      \"unavailable\",\n    ]),\n  },\n) {}\n"],"mappings":";;AAEA,IAAa,kCAAb,cAAqD,OAAO,YAA6C,CAAC,CACxG,mCACA,EACE,QAAQ,OAAO,SAAS;CACtB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,EACH,CACF,CAAC,CAAC,CAAC;AAEH,IAAa,qBAAb,cAAwC,OAAO,YAAgC,CAAC,CAC9E,sBACA,EACE,QAAQ,OAAO,SAAS;CACtB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,EACH,CACF,CAAC,CAAC,CAAC"}