ignotum 0.0.12 → 0.0.13

package/src/dev-runtime/id.ts

@@ -0,0 +1,175 @@
+import { Context, Effect, FileSystem, Layer, Path, Schema, Semaphore } from "effect";
+import {
+  DevelopmentUsername,
+  developmentSelectionKey,
+  ProfileFields,
+  SessionRequest,
+  User,
+  UserId,
+  type SessionState,
+} from "@ignotum/contracts/id";
+import * as Versioned from "@ignotum/contracts/versioned";
+
+const Profile = Schema.Struct({ user: User, share: ProfileFields, revision: Schema.Natural });
+const ProfilesV1 = Schema.Struct({
+  formatVersion: Schema.Literal(1),
+  profiles: Schema.Record(Schema.String, Profile),
+});
+const Profiles = Versioned.initial(ProfilesV1);
+const ProfilesJson = Schema.fromJsonString(Profiles);
+
+export const localIdPath = "/_ignotum/v1/id";
+export const LocalCompletion = Schema.Struct({
+  request: SessionRequest,
+  username: DevelopmentUsername,
+  name: Schema.String,
+  email: Schema.String,
+  image: Schema.String,
+  share: ProfileFields,
+  manage: Schema.optional(Schema.Boolean),
+});
+
+const projection = (user: User, share: ReadonlyArray<string>): User => ({
+  id: user.id,
+  name: share.includes("name") ? user.name : undefined,
+  email: share.includes("email") ? user.email : undefined,
+  image: share.includes("image") ? user.image : undefined,
+});
+
+export class LocalId extends Context.Service<
+  LocalId,
+  {
+    readonly profile: (username: string) => Effect.Effect<typeof Profile.Type | undefined>;
+    readonly session: (username: string | null, epoch: string) => Effect.Effect<SessionState>;
+    readonly complete: (input: typeof LocalCompletion.Type) => Effect.Effect<void>;
+  }
+>()("ignotum/dev-runtime/id/LocalId") {
+  static readonly layer = (directory: string) =>
+    Layer.effect(
+      LocalId,
+      Effect.gen(function* () {
+        const fs = yield* FileSystem.FileSystem;
+        const path = yield* Path.Path;
+        const file = path.join(directory, ".ignotum", "id.json");
+        const lock = yield* Semaphore.make(1);
+        const load = Effect.fn("LocalId.load")(function* () {
+          if (!(yield* fs.exists(file))) return Profiles.make({ formatVersion: 1, profiles: {} });
+          return yield* fs
+            .readFileString(file)
+            .pipe(Effect.flatMap(Schema.decodeEffect(ProfilesJson)));
+        });
+        return LocalId.of({
+          profile: Effect.fn("LocalId.profile")(function* (username) {
+            return (yield* load().pipe(Effect.orDie)).profiles[username];
+          }),
+          session: Effect.fn("LocalId.session")(function* (username, epoch) {
+            if (username === null)
+              return {
+                sessionEpoch: epoch,
+                viewRevision: 0,
+                user: null,
+                validUntil: Number.MAX_SAFE_INTEGER,
+              };
+            const id = yield* Schema.decodeEffect(UserId)(username).pipe(Effect.orDie);
+            const profile = (yield* load().pipe(Effect.orDie)).profiles[id];
+            const user: User = projection(profile?.user ?? { id }, profile?.share ?? []);
+            return {
+              sessionEpoch: epoch,
+              viewRevision: profile?.revision ?? 0,
+              user,
+              validUntil: Number.MAX_SAFE_INTEGER,
+            };
+          }),
+          complete: Effect.fn("LocalId.complete")(function* (input) {
+            yield* lock
+              .withPermits(1)(
+                Effect.gen(function* () {
+                  const stored = yield* load();
+                  const previous = stored.profiles[input.username];
+                  const user = User.make({
+                    id: UserId.make(input.username),
+                    name: input.name === "" ? undefined : input.name,
+                    email: input.email === "" ? undefined : input.email,
+                    image: input.image === "" ? undefined : input.image,
+                  });
+                  const share =
+                    input.manage === true
+                      ? input.share
+                      : [
+                          ...new Set([
+                            ...(previous?.share ?? []),
+                            ...input.share.filter((field) => input.request.profile.includes(field)),
+                          ]),
+                        ];
+                  const updated = Profiles.make({
+                    formatVersion: 1,
+                    profiles: {
+                      ...stored.profiles,
+                      [input.username]: {
+                        user,
+                        share,
+                        revision:
+                          (previous?.revision ?? 0) +
+                          Number(
+                            JSON.stringify(
+                              projection(previous?.user ?? { id: user.id }, previous?.share ?? []),
+                            ) !== JSON.stringify(projection(user, share)),
+                          ),
+                      },
+                    },
+                  });
+                  yield* fs.makeDirectory(path.dirname(file), { recursive: true });
+                  yield* Effect.scoped(
+                    Effect.gen(function* () {
+                      const temporary = yield* fs.makeTempFileScoped({
+                        directory: path.dirname(file),
+                        prefix: ".id-",
+                      });
+                      yield* fs.writeFileString(
+                        temporary,
+                        yield* Schema.encodeEffect(ProfilesJson)(updated),
+                      );
+                      yield* fs.rename(temporary, file);
+                    }),
+                  );
+                }),
+              )
+              .pipe(Effect.orDie);
+          }),
+        });
+      }),
+    );
+}
+
+const escapeHtml = (text: string) =>
+  text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll('"', "&quot;");
+
+export const localIdPage = (request: typeof SessionRequest.Type): string => {
+  const encoded = JSON.stringify(request).replaceAll("<", "\\u003c");
+  return `<!doctype html><html><head><meta charset="utf-8"><title>Ignotum ID · Development</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1"><style>
+  body{font:16px system-ui;background:#f7f7f5;color:#20211f;max-width:420px;margin:8vh auto;padding:24px}
+  label{display:block;margin:16px 0}input:not([type=checkbox]){box-sizing:border-box;width:100%;padding:10px;border:1px solid #bbb;border-radius:6px}
+  button{padding:12px 18px;border:0;border-radius:6px;background:#222;color:white;cursor:pointer;margin-right:8px}
+  p{line-height:1.5}small{color:#666}</style></head><body><h1>Ignotum ID</h1><p>Choose a local username to try your app.</p>
+  <form id="form"><label>Username<input name="username" required pattern="[a-z][a-z0-9_-]{0,63}" placeholder="john"></label>
+  <label>Name<input name="name"></label><label>Email<input name="email" type="email"></label><label>Image URL<input name="image" type="url"></label>
+  ${["name", "email", "image"].map((field) => `<label><input type="checkbox" name="share" value="${escapeHtml(field)}"> Share ${escapeHtml(field)}</label>`).join("")}
+  <label><input type="checkbox" name="manage"> Replace existing sharing choices</label>
+  <p><small>Profile sharing is optional. No password or account is needed in development.</small></p>
+  <button>Continue</button><button type="button" id="cancel">Cancel</button><p id="error"></p></form>
+  <script type="module">
+  const request=${encoded};const form=document.querySelector('#form');
+  const previous=JSON.parse(sessionStorage.getItem('${developmentSelectionKey}')||'null');
+  if(previous?.username)form.elements.username.value=previous.username;
+  if(request.intent==='requestProfile')form.elements.username.readOnly=true;
+  let loading=false;const loadProfile=async()=>{loading=true;try{const response=await fetch('${localIdPath}/profile?username='+encodeURIComponent(form.elements.username.value),{headers:{'x-ignotum-request':'1'}});if(!response.ok)throw new Error('Could not load the local profile.');const profile=await response.json();for(const field of ['name','email','image']){form.elements[field].value=profile?.user[field]??'';form.querySelector('input[name=share][value='+field+']').checked=profile?.share.includes(field)??false;}}finally{loading=false;}};form.elements.username.onchange=loadProfile;if(previous?.username)await loadProfile();
+  document.querySelector('#cancel').onclick=()=>{sessionStorage.setItem('ignotum.id.outcome','Cancelled');location.replace(request.returnTo)};
+  form.onsubmit=async(e)=>{e.preventDefault();if(loading)return;const data=new FormData(form);
+    try{const response=await fetch('${localIdPath}',{method:'POST',headers:{'content-type':'application/json','x-ignotum-request':'1'},body:JSON.stringify({request,username:data.get('username'),name:data.get('name'),email:data.get('email'),image:data.get('image'),share:data.getAll('share'),manage:data.get('manage')==='on'})});
+    if(!response.ok)throw new Error('Could not update your local ID.');
+    sessionStorage.setItem('${developmentSelectionKey}',JSON.stringify({formatVersion:1,username:data.get('username'),epoch:request.intent==='requestProfile'?previous.epoch:'dev:'+crypto.randomUUID()}));
+    sessionStorage.setItem('ignotum.id.outcome',request.intent==='requestProfile'?'ProfileUpdated':'SignedIn');location.replace(request.returnTo);
+    }catch(error){document.querySelector('#error').textContent=error.message}}
+  </script></body></html>`;
+};

package/src/dev-runtime/query-cache.ts

@@ -0,0 +1,105 @@
+import { Context, Deferred, Effect, Exit, Layer, Semaphore } from "effect";
+import { idViewKey, type SessionState } from "@ignotum/contracts/id";
+import type {
+  RuntimeInvocationResult,
+  RuntimeQueryResult,
+} from "@ignotum/contracts/runtime/hosted";
+import { makeDependencyIndex, type QueryInvalidationEvent } from "@ignotum/runtime/sync";
+
+export class LocalQueryCache extends Context.Service<
+  LocalQueryCache,
+  {
+    readonly execute: (
+      base: string,
+      identity: SessionState,
+      minimumRevision: number,
+      execute: Effect.Effect<RuntimeInvocationResult>,
+    ) => Effect.Effect<RuntimeInvocationResult>;
+    readonly invalidate: (event: QueryInvalidationEvent) => void;
+  }
+>()("ignotum/dev-runtime/query-cache/LocalQueryCache") {
+  static readonly layer = Layer.effect(
+    LocalQueryCache,
+    Effect.sync(() => {
+      const results = new Map<string, RuntimeQueryResult>();
+      const dependencies = makeDependencyIndex<string>();
+      const flights = new Map<string, Deferred.Deferred<RuntimeInvocationResult>>();
+      const publicQueries = new Set<string>();
+      const locks = new Map<string, Semaphore.Semaphore>();
+      let generation = 0;
+      const save = (key: string, result: RuntimeQueryResult) => {
+        results.delete(key);
+        results.set(key, result);
+        dependencies.record(key, result.dependencies);
+        while (results.size > 128) {
+          const oldest = results.keys().next().value;
+          if (oldest === undefined) break;
+          results.delete(oldest);
+          dependencies.remove(oldest);
+          publicQueries.delete(oldest);
+        }
+      };
+      return LocalQueryCache.of({
+        invalidate: (event) => {
+          generation++;
+          const keys =
+            event.type === "All"
+              ? [...results.keys()]
+              : [...dependencies.affected(event.invalidations)];
+          for (const key of keys) {
+            results.delete(key);
+            dependencies.remove(key);
+          }
+          if (event.type === "All") publicQueries.clear();
+        },
+        execute: Effect.fn("LocalQueryCache.execute")(
+          function* (base, identity, minimumRevision, execute) {
+            const admitted = generation;
+            const scoped = `${base}:id:${idViewKey(identity)}`;
+            const cached = results.get(base) ?? results.get(scoped);
+            if (cached !== undefined && cached.observedRevision >= minimumRevision) return cached;
+            const key = `${scoped}:${admitted}`;
+            const pending = flights.get(key);
+            if (pending !== undefined) return yield* Deferred.await(pending);
+            const done = yield* Deferred.make<RuntimeInvocationResult>();
+            flights.set(key, done);
+            const evaluate = Effect.gen(function* () {
+              const shared = results.get(base);
+              if (shared !== undefined && shared.observedRevision >= minimumRevision) return shared;
+              const result = yield* execute;
+              if (result.type === "Query" && generation === admitted) {
+                const readsId = result.dependencies.some((dependency) => dependency.type === "Id");
+                save(scoped, result);
+                if (!readsId) {
+                  publicQueries.add(base);
+                  save(base, result);
+                }
+              }
+              return result;
+            });
+            const lockKey = `${base}:${admitted}`;
+            let lock = locks.get(lockKey);
+            if (publicQueries.has(base) && lock === undefined) {
+              lock = Semaphore.makeUnsafe(1);
+              locks.set(lockKey, lock);
+            }
+            return yield* Effect.uninterruptibleMask((restore) =>
+              Effect.gen(function* () {
+                const exit = yield* restore(
+                  lock === undefined ? evaluate : lock.withPermits(1)(evaluate),
+                ).pipe(Effect.exit);
+                Deferred.doneUnsafe(
+                  done,
+                  Exit.isSuccess(exit) ? Effect.succeed(exit.value) : Effect.failCause(exit.cause),
+                );
+                flights.delete(key);
+                locks.delete(lockKey);
+                return yield* exit;
+              }),
+            );
+          },
+        ),
+      });
+    }),
+  );
+}

package/src/dev-runtime/sync.ts

@@ -1,3 +1,12 @@
+import { LocalQueryCache } from "./query-cache.js";
+import {
+  SessionRequest,
+  idViewKey,
+  sessionPath,
+  sessionRequestsPath,
+  type SessionState,
+} from "@ignotum/contracts/id";
+import { LocalId, LocalCompletion, localIdPage, localIdPath } from "./id.js";
 // @effect-diagnostics-next-line nodeBuiltinImport:off Vite exposes its HTTP server through Node's adapter types.
 import type { IncomingMessage, ServerResponse } from "node:http";
 
@@ -25,6 +34,7 @@ import {
 } from "@ignotum/contracts/runtime/sync";
 import {
   Effect,
+  Clock,
   Context,
   FileSystem,
   Function,
@@ -95,12 +105,14 @@ const reloadEnvironmentAndInvalidate = <Error, Requirements>(
 export const queryInvalidationLayer = Layer.effect(
   QueryInvalidation,
   Effect.gen(function* () {
+    const cache = yield* LocalQueryCache;
     const pubsub = yield* PubSub.unbounded<QueryInvalidationEvent>();
     const latestRevision = yield* Ref.make(AppStateRevision.make(0));
     return QueryInvalidation.of({
       latestRevision: Ref.get(latestRevision),
       publish: (event) =>
         Effect.gen(function* () {
+          cache.invalidate(event);
           if (event.type === "Dependencies") {
             yield* Ref.update(latestRevision, (current) =>
               AppStateRevision.make(Math.max(current, event.committedRevision)),
@@ -111,7 +123,7 @@ export const queryInvalidationLayer = Layer.effect(
       subscribe: PubSub.subscribe(pubsub),
     });
   }),
-);
+).pipe(Layer.provideMerge(LocalQueryCache.layer));
 
 class InvocationIdConflict extends Schema.TaggedError<InvocationIdConflict>()(
   "InvocationIdConflict",
@@ -198,10 +210,21 @@ const syncError = (code: ErrorCode, message: string, operation?: Operation): Ser
   return { type: "Error", code, message, operation };
 };
 
-export const runSession = Effect.fn("SyncServer.runSession")(function* (socket: Socket.Socket) {
+export const runSession = Effect.fn("SyncServer.runSession")(function* (
+  socket: Socket.Socket,
+  initialIdentity?: SessionState,
+  refreshIdentity?: Effect.Effect<SessionState>,
+) {
+  let identity = initialIdentity ?? {
+    sessionEpoch: "dev:anonymous",
+    user: null,
+    viewRevision: 0,
+    validUntil: Number.MAX_SAFE_INTEGER,
+  };
   const runtime = yield* FunctionRuntime;
   const invalidation = yield* QueryInvalidation;
   const mutationReplay = yield* MutationReplay;
+  const queryCache = yield* LocalQueryCache;
   const files = yield* LocalApplicationFiles;
   const subscriptions = yield* Ref.make(HashMap.empty<SubscriptionId, QuerySubscription>());
   const dependencyIndex = makeDependencyIndex<SubscriptionId>();
@@ -211,8 +234,12 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
   const write = yield* socket.writer;
 
   const send = Effect.fn("SyncServer.send")(function* (message: ServerMessage) {
+    const bound =
+      message.type === "Result" || message.type === "Preparation" || message.type === "Error"
+        ? { ...message, sessionEpoch: identity.sessionEpoch }
+        : message;
     yield* writeSemaphore.withPermits(1)(
-      Schema.encodeEffect(ServerMessageJson)(message).pipe(Effect.flatMap(write)),
+      Schema.encodeEffect(ServerMessageJson)(bound).pipe(Effect.flatMap(write)),
     );
   });
 
@@ -261,7 +288,7 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
     while (yield* isActive(subscriptionId, subscription)) {
       if (prepared === undefined) {
         const resolved = yield* runtime
-          .prepare(subscription.function, "Query", subscription.args)
+          .prepare(subscription.function, "Query", subscription.args, identity)
           .pipe(
             Effect.catchTags({
               FunctionUnavailable: (error) => sendResolutionError(operation, error, deliver),
@@ -274,7 +301,12 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
         prepared = resolved;
       }
 
-      const result = yield* prepared.execute;
+      const result = yield* queryCache.execute(
+        subscription.queryKey,
+        identity,
+        yield* invalidation.latestRevision,
+        prepared.execute,
+      );
       prepared = undefined;
       if (result.type !== "Query") return;
       if (
@@ -291,6 +323,11 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
         id: subscriptionId,
         result: result.result,
         revision: result.observedRevision,
+        identity: {
+          sessionEpoch: identity.sessionEpoch,
+          viewRevision: identity.viewRevision,
+          dependsOnId: result.dependencies.some((dependency) => dependency.type === "Id"),
+        },
       } as const;
       yield* deliver(granted.length === 0 ? snapshot : { ...snapshot, files: granted });
       return;
@@ -315,6 +352,19 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
   };
 
   const refreshAll = Effect.fn("SyncServer.refreshAll")(function* () {
+    if (refreshIdentity !== undefined) {
+      const next = yield* refreshIdentity;
+      const changed =
+        idViewKey(identity) !== idViewKey(next) || identity.validUntil !== next.validUntil;
+      identity = next;
+      if (changed)
+        yield* send({
+          type: "Session",
+          event: "Updated",
+          session: identity,
+          serverTime: yield* Clock.currentTimeMillis,
+        });
+    }
     const current = yield* Ref.get(subscriptions);
     yield* Effect.forEach(HashMap.toEntries(current), ([subscriptionId, subscription]) =>
       scheduleQuery(subscriptionId, subscription),
@@ -359,7 +409,7 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
       return;
     }
 
-    const prepared = yield* runtime.prepare(message.function, "Query", message.args).pipe(
+    const prepared = yield* runtime.prepare(message.function, "Query", message.args, identity).pipe(
       Effect.catchTags({
         FunctionUnavailable: (error) => sendResolutionError(operation, error),
         InvalidArguments: (error) => sendResolutionError(operation, error),
@@ -402,14 +452,16 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
       yield* files.releasePreparation(message.id);
       return;
     }
-    const prepared = yield* runtime.prepare(message.function, "Mutation", message.args).pipe(
-      Effect.catchTags({
-        FunctionUnavailable: (error) => sendResolutionError(operation, error),
-        InvalidArguments: (error) => sendResolutionError(operation, error),
-        UnknownFunction: (error) => sendResolutionError(operation, error),
-        WrongFunctionKind: (error) => sendResolutionError(operation, error),
-      }),
-    );
+    const prepared = yield* runtime
+      .prepare(message.function, "Mutation", message.args, identity)
+      .pipe(
+        Effect.catchTags({
+          FunctionUnavailable: (error) => sendResolutionError(operation, error),
+          InvalidArguments: (error) => sendResolutionError(operation, error),
+          UnknownFunction: (error) => sendResolutionError(operation, error),
+          WrongFunctionKind: (error) => sendResolutionError(operation, error),
+        }),
+      );
 
     if (prepared === undefined) {
       yield* files.releasePreparation(message.id);
@@ -421,6 +473,7 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
       "Mutation",
       message.function,
       message.args,
+      identity.sessionEpoch,
     );
     yield* mutationReplay
       .execute(
@@ -525,7 +578,12 @@ export const runSession = Effect.fn("SyncServer.runSession")(function* (socket:
 
   yield* socket
     .runString((text) => messageSemaphore.withPermits(1)(handleMessage(text)), {
-      onOpen: send({ type: "Handshake", ...localSyncIdentity }).pipe(Effect.orDie),
+      onOpen: send({
+        type: "Handshake",
+        ...localSyncIdentity,
+        session: identity,
+        serverTime: yield* Clock.currentTimeMillis,
+      }).pipe(Effect.orDie),
     })
     .pipe(
       Effect.ensuring(
@@ -583,6 +641,7 @@ const makeHandlersLayer = (server: ViteDevServer, appDirectory: string, database
     queryInvalidationLayer,
     persistenceLayer,
     NodeServices.layer,
+    LocalId.layer(appDirectory).pipe(Layer.provide(NodeServices.layer)),
     localApplicationFilesLayer(appDirectory).pipe(
       Layer.provideMerge(DevelopmentDatabase.layer),
       Layer.provide(Layer.mergeAll(IdGenerator.layer, sqliteLayer, NodeServices.layer)),
@@ -592,6 +651,7 @@ const makeHandlersLayer = (server: ViteDevServer, appDirectory: string, database
   return Layer.effect(
     SyncHandlers,
     Effect.gen(function* () {
+      const localId = yield* LocalId;
       const invalidation = yield* QueryInvalidation;
       const environment = yield* DevelopmentEnvironment;
       const fileSystem = yield* FileSystem.FileSystem;
@@ -609,7 +669,72 @@ const makeHandlersLayer = (server: ViteDevServer, appDirectory: string, database
       );
       const httpApp = Effect.gen(function* () {
         const request = yield* HttpServerRequest.HttpServerRequest;
-        const pathname = new URL(request.url, "http://ignotum.local").pathname;
+        const url = new URL(request.url, `http://${request.headers.host ?? "ignotum.local"}`);
+        const pathname = url.pathname;
+        if (pathname === sessionPath && request.method === "GET") {
+          const session = yield* localId.session(
+            url.searchParams.get("username"),
+            url.searchParams.get("epoch") ?? "dev:anonymous",
+          );
+          return yield* HttpServerResponse.json(
+            {
+              ...session,
+              serverTime: yield* Clock.currentTimeMillis,
+              expiresAt: session.validUntil,
+              development: true,
+            },
+            { headers: { "cache-control": "no-store" } },
+          );
+        }
+        if (pathname === sessionRequestsPath && request.method === "POST") {
+          if (request.headers.origin !== url.origin || request.headers["x-ignotum-request"] !== "1")
+            return HttpServerResponse.empty({ status: 403 });
+          const input = yield* request.json.pipe(
+            Effect.flatMap(Schema.decodeUnknownEffect(SessionRequest)),
+            Effect.option,
+          );
+          if (Option.isNone(input)) return HttpServerResponse.empty({ status: 400 });
+          return yield* HttpServerResponse.json(
+            {
+              redirectUrl: `${localIdPath}?request=${encodeURIComponent(JSON.stringify(input.value))}`,
+              expiresAt: (yield* Clock.currentTimeMillis) + 600_000,
+            },
+            { status: 201, headers: { "cache-control": "no-store" } },
+          );
+        }
+        if (pathname === `${localIdPath}/profile` && request.method === "GET") {
+          if (request.headers["x-ignotum-request"] !== "1")
+            return HttpServerResponse.empty({ status: 403 });
+          return yield* HttpServerResponse.json(
+            (yield* localId.profile(url.searchParams.get("username") ?? "")) ?? null,
+            { headers: { "cache-control": "no-store" } },
+          );
+        }
+        if (pathname === localIdPath && request.method === "GET") {
+          const input = yield* Schema.decodeEffect(Schema.fromJsonString(SessionRequest))(
+            url.searchParams.get("request") ?? "",
+          ).pipe(Effect.option);
+          return Option.isNone(input)
+            ? HttpServerResponse.empty({ status: 400 })
+            : HttpServerResponse.html(localIdPage(input.value));
+        }
+        if (pathname === localIdPath && request.method === "POST") {
+          if (request.headers.origin !== url.origin || request.headers["x-ignotum-request"] !== "1")
+            return HttpServerResponse.empty({ status: 403 });
+          const input = yield* request.json.pipe(
+            Effect.flatMap(Schema.decodeUnknownEffect(LocalCompletion)),
+            Effect.option,
+          );
+          if (Option.isNone(input)) return HttpServerResponse.empty({ status: 400 });
+          yield* localId.complete(input.value);
+          yield* invalidation.publish({ type: "All" });
+          return HttpServerResponse.empty({ status: 204 });
+        }
+        if (pathname === sessionPath && request.method === "DELETE") {
+          if (request.headers.origin !== url.origin || request.headers["x-ignotum-request"] !== "1")
+            return HttpServerResponse.empty({ status: 403 });
+          return HttpServerResponse.empty({ status: 204 });
+        }
         if (pathname.startsWith(fileUploadUrlPrefix)) {
           if (request.method !== "PUT")
             return HttpServerResponse.text("Method Not Allowed", { status: 405 });
@@ -661,8 +786,15 @@ const makeHandlersLayer = (server: ViteDevServer, appDirectory: string, database
       });
       const socketApp = Effect.gen(function* () {
         const request = yield* HttpServerRequest.HttpServerRequest;
+        const url = new URL(request.url, `http://${request.headers.host ?? "ignotum.local"}`);
+        if (request.headers.origin !== url.origin) return HttpServerResponse.empty({ status: 403 });
+        const refresh = localId.session(
+          url.searchParams.get("username"),
+          url.searchParams.get("epoch") ?? "dev:anonymous",
+        );
+        const identity = yield* refresh;
         const socket = yield* request.upgrade;
-        yield* runSession(socket);
+        yield* runSession(socket, identity, refresh);
         return HttpServerResponse.empty();
       });
       const http = yield* NodeHttpServer.makeHandler(httpApp, { scope });

package/src/server/index.ts

@@ -23,3 +23,5 @@ export type {
   FileValue,
   SchemaAuthoring,
 } from "@ignotum/contracts/schema";
+
+export type { User, UserId } from "@ignotum/contracts/id";

package/dist/runtime/api-DzcR7spt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-DzcR7spt.js","names":[],"sources":["../../../contracts/dist/runtime/identity.js","../../../contracts/dist/runtime/sync.js","../../src/internal/api.ts"],"sourcesContent":["import { AppId, AuthAccountId, AuthDeviceCodeId, AuthInternalId, AuthInvitationId, AuthMemberId, AuthSessionId, AuthVerificationId, ConnectionId, DeploymentId, DevDatabaseLockId, InvocationId, PlatformPrincipalId, RequestId, RuntimeRequestNonce, SubscriptionId, TableId, TeamId } from \"./id.js\";\nimport { Schema } from \"effect\";\n//#region src/runtime/identity.ts\nconst InvocationKey = Schema.String.pipe(Schema.brand(\"ignotum/hosted/InvocationKey\"));\nconst DeploymentGeneration = Schema.Natural.pipe(Schema.brand(\"ignotum/hosted/DeploymentGeneration\"));\nconst AppStateRevision = Schema.Natural.pipe(Schema.brand(\"ignotum/hosted/AppStateRevision\"));\n//#endregion\nexport { AppId, AppStateRevision, AuthAccountId, AuthDeviceCodeId, AuthInternalId, AuthInvitationId, AuthMemberId, AuthSessionId, AuthVerificationId, ConnectionId, DeploymentGeneration, DeploymentId, DevDatabaseLockId, InvocationId, InvocationKey, PlatformPrincipalId, RequestId, RuntimeRequestNonce, SubscriptionId, TableId, TeamId };\n\n//# sourceMappingURL=identity.js.map","import { AppId, DeploymentId, InvocationId, SubscriptionId } from \"./id.js\";\nimport { AppStateRevision, DeploymentGeneration } from \"./identity.js\";\nimport { FileId } from \"../schema/file.js\";\nimport { TransportValueSchema, datePathsOf, datePathsOfObject, decodeTransportObject, decodeTransportValue, encodeTransportObject, encodeTransportValue } from \"./value.js\";\nimport { Schema } from \"effect\";\n//#region src/runtime/sync.ts\nconst FunctionNamePart = Schema.String.check(Schema.isPattern(/^[A-Za-z_$][A-Za-z0-9_$]*$/));\nconst ApiFunctionAddressParts = Schema.TemplateLiteralParser([\n\t\"api.\",\n\tFunctionNamePart,\n\t\".\",\n\tFunctionNamePart\n]);\nconst FunctionAddress = Schema.TemplateLiteral([\n\t\"api.\",\n\tFunctionNamePart,\n\t\".\",\n\tFunctionNamePart\n]);\nconst apiFunctionParts = (address) => {\n\tconst [, moduleName, , functionName] = Schema.decodeSync(ApiFunctionAddressParts)(address);\n\treturn {\n\t\tfunctionName,\n\t\tmoduleName\n\t};\n};\nconst Subscribe = Schema.Struct({\n\ttype: Schema.Literal(\"Subscribe\"),\n\tid: SubscriptionId,\n\tfunction: FunctionAddress,\n\targs: Schema.Json\n});\nconst Unsubscribe = Schema.Struct({\n\ttype: Schema.Literal(\"Unsubscribe\"),\n\tid: SubscriptionId\n});\nconst Invoke = Schema.Struct({\n\ttype: Schema.Literal(\"Invoke\"),\n\tid: InvocationId,\n\tkind: Schema.Literal(\"Mutation\"),\n\tfunction: FunctionAddress,\n\targs: Schema.Json\n});\nconst Prepare = Schema.Struct({\n\ttype: Schema.Literal(\"Prepare\"),\n\tid: InvocationId,\n\tkind: Schema.Literal(\"Mutation\"),\n\tfunction: FunctionAddress,\n\targs: Schema.Json,\n\tfiles: Schema.Array(FileId)\n});\nconst ClientMessage = Schema.Union([\n\tSubscribe,\n\tUnsubscribe,\n\tPrepare,\n\tInvoke\n]);\nconst SubscriptionOperation = Schema.Struct({\n\ttype: Schema.Literal(\"Subscription\"),\n\tid: SubscriptionId\n});\nconst InvocationOperation = Schema.Struct({\n\ttype: Schema.Literal(\"Invocation\"),\n\tid: InvocationId\n});\nconst Operation = Schema.Union([SubscriptionOperation, InvocationOperation]);\nconst DatePath = Schema.Array(Schema.Union([Schema.String, Schema.Natural]));\nconst DatePaths = Schema.Array(DatePath);\nconst WireSuccess = Schema.Struct({\n\ttype: Schema.Literal(\"Success\"),\n\tvalue: Schema.optional(Schema.Json),\n\tdates: Schema.optional(DatePaths)\n});\nconst WireFailure = Schema.Struct({\n\ttype: Schema.Literal(\"Failure\"),\n\terror: Schema.Json,\n\tdates: Schema.optional(DatePaths)\n});\nconst WireResult = Schema.Union([WireSuccess, WireFailure]);\nconst SyncHandshake = Schema.Struct({\n\ttype: Schema.Literal(\"Handshake\"),\n\tappId: AppId,\n\tdeploymentId: DeploymentId,\n\tgeneration: DeploymentGeneration\n});\nconst Snapshot = Schema.Struct({\n\ttype: Schema.Literal(\"Snapshot\"),\n\tid: SubscriptionId,\n\tresult: WireResult,\n\trevision: AppStateRevision,\n\tfiles: Schema.optional(Schema.Array(Schema.Struct({\n\t\tid: FileId,\n\t\turl: Schema.String\n\t})))\n});\nconst Preparation = Schema.Struct({\n\ttype: Schema.Literal(\"Preparation\"),\n\tid: InvocationId,\n\tkind: Schema.Literal(\"Mutation\"),\n\tuploads: Schema.Array(Schema.Struct({\n\t\tid: FileId,\n\t\turl: Schema.optional(Schema.String)\n\t}))\n});\nconst SyncResultSuccess = Schema.Struct({\n\ttype: Schema.Literal(\"Result\"),\n\tid: InvocationId,\n\tresult: WireSuccess,\n\tcommittedRevision: AppStateRevision\n});\nconst SyncResultFailure = Schema.Struct({\n\ttype: Schema.Literal(\"Result\"),\n\tid: InvocationId,\n\tresult: WireFailure\n});\nconst ErrorCode = Schema.Literals([\n\t\"DuplicateOperationId\",\n\t\"FunctionUnavailable\",\n\t\"InvalidArguments\",\n\t\"InvalidMessage\",\n\t\"InvocationIdConflict\",\n\t\"ResourceLimitExceeded\",\n\t\"UnknownFunction\",\n\t\"WrongFunctionKind\"\n]);\nconst SyncError = Schema.Struct({\n\ttype: Schema.Literal(\"Error\"),\n\toperation: Schema.optional(Operation),\n\tcode: ErrorCode,\n\tmessage: Schema.String\n});\nconst Deployment = Schema.Struct({\n\ttype: Schema.Literal(\"Deployment\"),\n\tdeploymentId: DeploymentId,\n\tgeneration: DeploymentGeneration\n});\nconst DeploymentCloseCode = 4409;\nconst ServerMessage = Schema.Union([\n\tSyncHandshake,\n\tSnapshot,\n\tPreparation,\n\tSyncResultSuccess,\n\tSyncResultFailure,\n\tSyncError,\n\tDeployment\n]);\nconst ClientMessageJson = Schema.fromJsonString(ClientMessage);\nconst ServerMessageJson = Schema.fromJsonString(ServerMessage);\n//#endregion\nexport { ClientMessage, ClientMessageJson, DatePath, Deployment, DeploymentCloseCode, ErrorCode, FunctionAddress, FunctionNamePart, InvocationId, Operation, ServerMessage, ServerMessageJson, SubscriptionId, SyncHandshake, TransportValueSchema, WireFailure, WireResult, WireSuccess, apiFunctionParts, datePathsOf, datePathsOfObject, decodeTransportObject, decodeTransportValue, encodeTransportObject, encodeTransportValue };\n\n//# sourceMappingURL=sync.js.map","import { Predicate } from \"effect\";\nimport type { Effect } from \"effect\";\n\nimport type { ErrorValue, InternalServerError } from \"@ignotum/contracts/runtime/result\";\nimport { FunctionAddress } from \"@ignotum/contracts/runtime/sync\";\nimport type { FileValue } from \"@ignotum/contracts/schema/file\";\n\nconst FunctionReferenceTypeId: unique symbol = Symbol.for(\"ignotum/internal/api/FunctionReference\");\ndeclare const FunctionReferenceTypesTypeId: unique symbol;\n\ntype FunctionKind = \"Mutation\" | \"Query\";\n\nexport type MutationInput<Value> = Value extends FileValue\n  ? Value | File\n  : Value extends Date\n    ? Value\n    : Value extends ReadonlyArray<infer Item>\n      ? ReadonlyArray<MutationInput<Item>>\n      : Value extends object\n        ? { readonly [Key in keyof Value]: MutationInput<Value[Key]> }\n        : Value;\n\nexport interface FunctionReference<\n  Kind extends FunctionKind,\n  Args,\n  Success,\n  Failure extends ErrorValue,\n> {\n  readonly [FunctionReferenceTypeId]: FunctionAddress;\n  readonly [FunctionReferenceTypesTypeId]?: {\n    readonly kind: Kind;\n    readonly args: Args;\n    readonly value: Success;\n    readonly error: Failure;\n  };\n}\n\ntype ReferenceTypes<Reference> = Reference extends {\n  readonly [FunctionReferenceTypesTypeId]?: infer Types;\n}\n  ? Exclude<Types, undefined>\n  : never;\n\nexport declare namespace FunctionReference {\n  type Args<Reference> =\n    ReferenceTypes<Reference> extends { readonly args: infer Args } ? Args : never;\n  type Failure<Reference> =\n    ReferenceTypes<Reference> extends {\n      readonly error: infer Failure;\n    }\n      ? Failure\n      : never;\n  type Kind<Reference> =\n    ReferenceTypes<Reference> extends { readonly kind: infer Kind } ? Kind : never;\n  type Success<Reference> =\n    ReferenceTypes<Reference> extends {\n      readonly value: infer Success;\n    }\n      ? Success\n      : never;\n}\n\ntype ReferenceOf<Definition> = Definition extends {\n  readonly _tag: infer Kind extends FunctionKind;\n  readonly handler: (\n    ...arguments_: infer HandlerArguments\n  ) => Generator<infer Yielded, infer Success, never>;\n}\n  ? HandlerArguments extends readonly [infer _Context, ...infer Rest]\n    ? FunctionReference<\n        Kind,\n        Rest extends readonly [infer Args, ...ReadonlyArray<unknown>]\n          ? Kind extends \"Mutation\"\n            ? MutationInput<Args>\n            : Args\n          : void,\n        Success,\n        | (Yielded extends Effect.Effect<unknown, infer Failure extends ErrorValue, never>\n            ? Failure\n            : never)\n        | InternalServerError\n      >\n    : never\n  : never;\n\ntype ApiModule<Module> = {\n  readonly [FunctionName in keyof Module as FunctionName extends string\n    ? ReferenceOf<Module[FunctionName]> extends never\n      ? never\n      : FunctionName\n    : never]: ReferenceOf<Module[FunctionName]>;\n};\n\nexport type Api<Modules> = {\n  readonly [ModuleName in keyof Modules]: ApiModule<Modules[ModuleName]>;\n};\n\nexport const functionPathOf = <\n  Kind extends FunctionKind,\n  Args,\n  Success,\n  Failure extends ErrorValue,\n>(\n  reference: FunctionReference<Kind, Args, Success, Failure>,\n) => reference[FunctionReferenceTypeId];\n\nconst makeModuleReference = (moduleName: string) => {\n  const references = new Map<string, object>();\n\n  return new Proxy(\n    {},\n    {\n      get: (_target, functionName) => {\n        if (!Predicate.isString(functionName)) {\n          return undefined;\n        }\n\n        const existing = references.get(functionName);\n        if (existing !== undefined) {\n          return existing;\n        }\n\n        const reference = {\n          [FunctionReferenceTypeId]: FunctionAddress.make(`api.${moduleName}.${functionName}`),\n        };\n        references.set(functionName, reference);\n        return reference;\n      },\n    },\n  );\n};\n\nexport function createApi<Modules>(): Api<Modules>;\nexport function createApi() {\n  const modules = new Map<string, object>();\n\n  return new Proxy(\n    {},\n    {\n      get: (_target, moduleName) => {\n        if (!Predicate.isString(moduleName)) {\n          return undefined;\n        }\n\n        const existing = modules.get(moduleName);\n        if (existing !== undefined) {\n          return existing;\n        }\n\n        const moduleReference = makeModuleReference(moduleName);\n        modules.set(moduleName, moduleReference);\n        return moduleReference;\n      },\n    },\n  );\n}\n"],"mappings":";;;AAGA,MAAM,gBAAgB,OAAO,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACrF,MAAM,uBAAuB,OAAO,QAAQ,KAAK,OAAO,MAAM,qCAAqC,CAAC;AACpG,MAAM,mBAAmB,OAAO,QAAQ,KAAK,OAAO,MAAM,iCAAiC,CAAC;;;ACC5F,MAAM,mBAAmB,OAAO,OAAO,MAAM,OAAO,UAAU,4BAA4B,CAAC;AAC3D,OAAO,sBAAsB;CAC5D;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,kBAAkB,OAAO,gBAAgB;CAC9C;CACA;CACA;CACA;AACD,CAAC;AAQD,MAAM,YAAY,OAAO,OAAO;CAC/B,MAAM,OAAO,QAAQ,WAAW;CAChC,IAAI;CACJ,UAAU;CACV,MAAM,OAAO;AACd,CAAC;AACD,MAAM,cAAc,OAAO,OAAO;CACjC,MAAM,OAAO,QAAQ,aAAa;CAClC,IAAI;AACL,CAAC;AACD,MAAM,SAAS,OAAO,OAAO;CAC5B,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI;CACJ,MAAM,OAAO,QAAQ,UAAU;CAC/B,UAAU;CACV,MAAM,OAAO;AACd,CAAC;AACD,MAAM,UAAU,OAAO,OAAO;CAC7B,MAAM,OAAO,QAAQ,SAAS;CAC9B,IAAI;CACJ,MAAM,OAAO,QAAQ,UAAU;CAC/B,UAAU;CACV,MAAM,OAAO;CACb,OAAO,OAAO,MAAM,MAAM;AAC3B,CAAC;AACD,MAAM,gBAAgB,OAAO,MAAM;CAClC;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,wBAAwB,OAAO,OAAO;CAC3C,MAAM,OAAO,QAAQ,cAAc;CACnC,IAAI;AACL,CAAC;AACD,MAAM,sBAAsB,OAAO,OAAO;CACzC,MAAM,OAAO,QAAQ,YAAY;CACjC,IAAI;AACL,CAAC;AACD,MAAM,YAAY,OAAO,MAAM,CAAC,uBAAuB,mBAAmB,CAAC;AAC3E,MAAM,WAAW,OAAO,MAAM,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,OAAO,CAAC,CAAC;AAC3E,MAAM,YAAY,OAAO,MAAM,QAAQ;AACvC,MAAM,cAAc,OAAO,OAAO;CACjC,MAAM,OAAO,QAAQ,SAAS;CAC9B,OAAO,OAAO,SAAS,OAAO,IAAI;CAClC,OAAO,OAAO,SAAS,SAAS;AACjC,CAAC;AACD,MAAM,cAAc,OAAO,OAAO;CACjC,MAAM,OAAO,QAAQ,SAAS;CAC9B,OAAO,OAAO;CACd,OAAO,OAAO,SAAS,SAAS;AACjC,CAAC;AACD,MAAM,aAAa,OAAO,MAAM,CAAC,aAAa,WAAW,CAAC;AAC1D,MAAM,gBAAgB,OAAO,OAAO;CACnC,MAAM,OAAO,QAAQ,WAAW;CAChC,OAAO;CACP,cAAc;CACd,YAAY;AACb,CAAC;AACD,MAAM,WAAW,OAAO,OAAO;CAC9B,MAAM,OAAO,QAAQ,UAAU;CAC/B,IAAI;CACJ,QAAQ;CACR,UAAU;CACV,OAAO,OAAO,SAAS,OAAO,MAAM,OAAO,OAAO;EACjD,IAAI;EACJ,KAAK,OAAO;CACb,CAAC,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,cAAc,OAAO,OAAO;CACjC,MAAM,OAAO,QAAQ,aAAa;CAClC,IAAI;CACJ,MAAM,OAAO,QAAQ,UAAU;CAC/B,SAAS,OAAO,MAAM,OAAO,OAAO;EACnC,IAAI;EACJ,KAAK,OAAO,SAAS,OAAO,MAAM;CACnC,CAAC,CAAC;AACH,CAAC;AACD,MAAM,oBAAoB,OAAO,OAAO;CACvC,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI;CACJ,QAAQ;CACR,mBAAmB;AACpB,CAAC;AACD,MAAM,oBAAoB,OAAO,OAAO;CACvC,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI;CACJ,QAAQ;AACT,CAAC;AACD,MAAM,YAAY,OAAO,SAAS;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,YAAY,OAAO,OAAO;CAC/B,MAAM,OAAO,QAAQ,OAAO;CAC5B,WAAW,OAAO,SAAS,SAAS;CACpC,MAAM;CACN,SAAS,OAAO;AACjB,CAAC;AACD,MAAM,aAAa,OAAO,OAAO;CAChC,MAAM,OAAO,QAAQ,YAAY;CACjC,cAAc;CACd,YAAY;AACb,CAAC;AACD,MAAM,sBAAsB;AAC5B,MAAM,gBAAgB,OAAO,MAAM;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;AACD,CAAC;AACD,MAAM,oBAAoB,OAAO,eAAe,aAAa;AAC7D,MAAM,oBAAoB,OAAO,eAAe,aAAa;;;AC5I7D,MAAM,0BAAyC,OAAO,IAAI,wCAAwC;AA0FlG,MAAa,kBAMX,cACG,UAAU;AAEf,MAAM,uBAAuB,eAAuB;CAClD,MAAM,6BAAa,IAAI,IAAoB;CAE3C,OAAO,IAAI,MACT,CAAC,GACD,EACE,MAAM,SAAS,iBAAiB;EAC9B,IAAI,CAAC,UAAU,SAAS,YAAY,GAClC;EAGF,MAAM,WAAW,WAAW,IAAI,YAAY;EAC5C,IAAI,aAAa,KAAA,GACf,OAAO;EAGT,MAAM,YAAY,GACf,0BAA0B,gBAAgB,KAAK,OAAO,WAAW,GAAG,cAAc,EACrF;EACA,WAAW,IAAI,cAAc,SAAS;EACtC,OAAO;CACT,EACF,CACF;AACF;AAGA,SAAgB,YAAY;CAC1B,MAAM,0BAAU,IAAI,IAAoB;CAExC,OAAO,IAAI,MACT,CAAC,GACD,EACE,MAAM,SAAS,eAAe;EAC5B,IAAI,CAAC,UAAU,SAAS,UAAU,GAChC;EAGF,MAAM,WAAW,QAAQ,IAAI,UAAU;EACvC,IAAI,aAAa,KAAA,GACf,OAAO;EAGT,MAAM,kBAAkB,oBAAoB,UAAU;EACtD,QAAQ,IAAI,YAAY,eAAe;EACvC,OAAO;CACT,EACF,CACF;AACF"}