ramosedb 0.0.1 → 0.4.0

package/dist/worker/authorized-read.d.ts

@@ -0,0 +1,32 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { CatalogId, CatalogUnitHash, DatabaseId, type DatabaseRouteDerivation, type ResolvedDatabaseRoute, type AuthorizedRequestView, type OneShotRead } from "../internal/authorization/index.ts";
+import type { EntityRef } from "../internal/core/db.ts";
+import type { Db } from "../internal/core/db.ts";
+import { type Basis } from "../internal/replica/basis.ts";
+import type { RamoseEnv } from "../RamoseEnv.ts";
+import { BadRequest, Unauthorized, type RamoseError } from "./errors.ts";
+export type ParsedOneShotRead = {
+    readonly read: OneShotRead;
+    readonly view: AuthorizedRequestView;
+    readonly catalogKey: CatalogId;
+    readonly unitHash: CatalogUnitHash;
+};
+export declare const parseCatalogProof: (body: Record<string, unknown> | undefined, headers: Headers) => Result.Result<{
+    catalogKey: CatalogId;
+    unitHash: CatalogUnitHash;
+}, Unauthorized>;
+export declare const rejectNestedDatabaseSelector: (body: Record<string, unknown> | undefined, search: URLSearchParams) => Result.Result<void, BadRequest>;
+export declare const carriesCatalogProof: (body: Record<string, unknown> | undefined, headers: Headers) => boolean;
+export declare const refuseCatalogProof: (body: Record<string, unknown> | undefined, headers: Headers) => Result.Result<void, Unauthorized>;
+export declare const isEntityRef: (value: unknown) => value is EntityRef;
+export declare const readJsonObject: (request: Request) => Effect.Effect<Record<string, unknown>, BadRequest>;
+export declare const parseOneShotReadRequest: (request: Request<unknown, CfProperties<unknown>>, rest: string) => Effect.Effect<ParsedOneShotRead, BadRequest | Unauthorized, never>;
+export declare const acquireCurrentDb: (env: RamoseEnv, request: Request, options?: {
+    readonly bypassBasisCache?: boolean;
+    readonly authoritativeBasisFence?: boolean;
+}) => ((database: DatabaseId) => Effect.Effect<Db, RamoseError>);
+export declare const provisionResolvedDatabase: (env: RamoseEnv, route: ResolvedDatabaseRoute, derivation: DatabaseRouteDerivation) => Effect.Effect<void, RamoseError>;
+export declare const acquireWatchedDb: (env: RamoseEnv, currentBasis: () => Basis | undefined) => ((database: DatabaseId) => Effect.Effect<Db, RamoseError>);
+export declare const queryMaxCells: (env: RamoseEnv) => number;
+//# sourceMappingURL=authorized-read.d.ts.map

package/dist/worker/authorized-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-read.d.ts","sourceRoot":"","sources":["../../src/worker/authorized-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EACL,SAAS,EACT,eAAe,EACf,UAAU,EACV,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAEjD,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAGvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAc,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AASrF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC,CAAC;AAmBF,eAAO,MAAM,iBAAiB,SACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,WAChC,OAAO,KACf,MAAM,CAAC,MAAM,CAAC;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,EAAE,YAAY,CAQlF,CAAC;AAEF,eAAO,MAAM,4BAA4B,SACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,UACjC,eAAe,KACtB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAShC,CAAC;AAEF,eAAO,MAAM,mBAAmB,SACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,WAChC,OAAO,KACf,OAG2D,CAAC;AAE/D,eAAO,MAAM,kBAAkB,SACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,WAChC,OAAO,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAGJ,CAAC;AAsBhC,eAAO,MAAM,WAAW,UAAW,OAAO,KAAG,KAAK,IAAI,SASrD,CAAC;AA+DF,eAAO,MAAM,cAAc,YAChB,OAAO,KACf,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAWoB,CAAC;AAEzE,eAAO,MAAM,uBAAuB,wIAclC,CAAC;AAEH,eAAO,MAAM,gBAAgB,QACtB,SAAS,WACL,OAAO,YACP;IACP,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C,KACA,CAAC,CAAC,QAAQ,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAWtD,CAAC;AAEP,eAAO,MAAM,yBAAyB,QAC/B,SAAS,SACP,qBAAqB,cAChB,uBAAuB,KAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAsB9B,CAAC;AAEL,eAAO,MAAM,gBAAgB,QACtB,SAAS,gBACA,MAAM,KAAK,GAAG,SAAS,KACpC,CAAC,CAAC,QAAQ,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAWtD,CAAC;AAEP,eAAO,MAAM,aAAa,QAAS,SAAS,KAAG,MACc,CAAC"}

package/dist/worker/authorized-read.js

@@ -0,0 +1,194 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import * as Schema from "effect/Schema";
+import { CatalogId, CatalogUnitHash, DatabaseId, } from "../internal/authorization/index.js";
+import { parseJson } from "../internal/core/json.js";
+import { dbFromBasis } from "../internal/replica/basis.js";
+import { envInt } from "../internal/transactor/env.js";
+import { DEFAULT_QUERY_MAX_CELLS } from "../internal/core/query/engine.js";
+import { BadRequest, Unauthorized, fromThrown } from "./errors.js";
+import { internalHeaders } from "../internal/transactor/index.js";
+import { fetchBasis, invalidateBasis, segmentSource } from "./peer.js";
+const deny = () => new Unauthorized({});
+const CATALOG_HEADER = "x-ramose-catalog";
+const UNIT_HASH_HEADER = "x-ramose-unit-hash";
+const asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value)
+    ? Result.succeed(value)
+    : Result.fail(new BadRequest({ message: "body must be a JSON object" }));
+const decodeCatalogId = (value) => {
+    const decoded = Schema.decodeUnknownResult(CatalogId)(value);
+    return Result.isSuccess(decoded) && decoded.success.trim().length > 0
+        ? Result.succeed(decoded.success)
+        : Result.fail(deny());
+};
+const decodeUnitHash = (value) => {
+    const decoded = Schema.decodeUnknownResult(CatalogUnitHash)(value);
+    return Result.isSuccess(decoded) ? Result.succeed(decoded.success) : Result.fail(deny());
+};
+export const parseCatalogProof = (body, headers) => {
+    const catalog = body?.catalog ?? headers.get(CATALOG_HEADER);
+    const unitHash = body?.unitHash ?? headers.get(UNIT_HASH_HEADER);
+    const catalogKey = decodeCatalogId(catalog);
+    if (Result.isFailure(catalogKey))
+        return Result.fail(catalogKey.failure);
+    const hash = decodeUnitHash(unitHash);
+    if (Result.isFailure(hash))
+        return Result.fail(hash.failure);
+    return Result.succeed({ catalogKey: catalogKey.success, unitHash: hash.success });
+};
+export const rejectNestedDatabaseSelector = (body, search) => {
+    const queryPath = search.getAll("at");
+    const bodyPath = body?.at;
+    if (bodyPath !== undefined || queryPath.length > 0) {
+        return Result.fail(new BadRequest({
+            message: "database selector 'at' is not supported",
+        }));
+    }
+    return Result.succeed(undefined);
+};
+export const carriesCatalogProof = (body, headers) => (body !== undefined &&
+    (Object.hasOwn(body, "catalog") || Object.hasOwn(body, "unitHash"))) ||
+    headers.has(CATALOG_HEADER) || headers.has(UNIT_HASH_HEADER);
+export const refuseCatalogProof = (body, headers) => carriesCatalogProof(body, headers)
+    ? Result.fail(deny())
+    : Result.succeed(undefined);
+const viewOf = (body, search) => {
+    const asOfRaw = body?.asOf ?? search.get("asOf");
+    const asOf = typeof asOfRaw === "number"
+        ? asOfRaw
+        : typeof asOfRaw === "string" && asOfRaw.length > 0
+            ? Number(asOfRaw)
+            : undefined;
+    const historyRaw = body?.history ?? search.get("history");
+    const history = historyRaw === true || historyRaw === "true" ? true : historyRaw === false || historyRaw === "false" ? false : undefined;
+    return {
+        ...(typeof asOf === "number" && Number.isFinite(asOf) ? { asOf } : {}),
+        ...(history === undefined ? {} : { history }),
+    };
+};
+export const isEntityRef = (value) => {
+    if (typeof value === "number" && Number.isInteger(value) && value >= 0)
+        return true;
+    if (typeof value === "string" && value.length > 0)
+        return true;
+    return (Array.isArray(value) &&
+        value.length === 2 &&
+        typeof value[0] === "string" &&
+        value[0].length > 0);
+};
+const readFromBody = (rest, method, body) => {
+    if ((rest === "/query" || rest === "/live") && method === "POST") {
+        if (body?.query !== undefined && body.query !== null) {
+            return Result.succeed({
+                kind: "query",
+                query: body.query,
+                ...(Array.isArray(body.inputs) ? { inputs: body.inputs } : {}),
+            });
+        }
+        const pullBody = body?.pull;
+        if (pullBody !== null && typeof pullBody === "object" && !Array.isArray(pullBody)) {
+            const pull = pullBody;
+            if (!isEntityRef(pull.eid) || pull.pattern === undefined || pull.pattern === null) {
+                return Result.fail(new BadRequest({ message: "pull needs eid and pattern" }));
+            }
+            return Result.succeed({
+                kind: "pull",
+                eid: pull.eid,
+                pattern: pull.pattern,
+            });
+        }
+        if (body?.entity !== undefined) {
+            if (!isEntityRef(body.entity)) {
+                return Result.fail(new BadRequest({ message: "entity must be an eid, ident, or lookup ref" }));
+            }
+            return Result.succeed({ kind: "entity", ref: body.entity });
+        }
+        if (Array.isArray(body?.lookup) && isEntityRef(body.lookup)) {
+            const lookup = body.lookup;
+            if (!Array.isArray(lookup) || lookup.length !== 2 || typeof lookup[0] !== "string") {
+                return Result.fail(new BadRequest({ message: "lookup must be [attr, value]" }));
+            }
+            return Result.succeed({ kind: "lookup", ref: [lookup[0], lookup[1]] });
+        }
+        return Result.fail(new BadRequest({ message: "body must be { query, inputs? } | { pull } | { entity } | { lookup }" }));
+    }
+    if (rest === "/pull" && method === "POST") {
+        if (body === undefined || !isEntityRef(body.eid) || body.pattern === undefined || body.pattern === null) {
+            return Result.fail(new BadRequest({ message: "body must be { eid, pattern }" }));
+        }
+        return Result.succeed({
+            kind: "pull",
+            eid: body.eid,
+            pattern: body.pattern,
+        });
+    }
+    return Result.fail(deny());
+};
+const entityFromPath = (rest) => {
+    const match = /^\/entity\/(\d+)$/.exec(rest);
+    if (match === null)
+        return Result.fail(deny());
+    return Result.succeed({ kind: "entity", ref: Number(match[1]) });
+};
+export const readJsonObject = (request) => Effect.tryPromise({
+    try: async () => {
+        const text = await request.text();
+        if (text.trim().length === 0) {
+            throw new BadRequest({ message: "body must be a JSON object" });
+        }
+        return parseJson(text);
+    },
+    catch: (cause) => cause instanceof BadRequest ? cause : new BadRequest({ message: "body must be a JSON object" }),
+}).pipe(Effect.flatMap((value) => Effect.fromResult(asRecord(value))));
+export const parseOneShotReadRequest = Effect.fn("parseOneShotReadRequest")(function* (request, rest) {
+    const url = new URL(request.url);
+    const method = request.method;
+    const body = method === "GET" ? undefined : yield* readJsonObject(request);
+    yield* Effect.fromResult(rejectNestedDatabaseSelector(body, url.searchParams));
+    const proof = yield* Effect.fromResult(parseCatalogProof(body, request.headers));
+    const read = method === "GET"
+        ? yield* Effect.fromResult(entityFromPath(rest))
+        : yield* Effect.fromResult(readFromBody(rest, method, body));
+    return { read, view: viewOf(body, url.searchParams), ...proof };
+});
+export const acquireCurrentDb = (env, request, options = {}) => (database) => Effect.tryPromise({
+    try: async () => {
+        const basis = await fetchBasis(env, database, request, {
+            bypassCache: options.bypassBasisCache === true,
+            authoritativeFence: options.authoritativeBasisFence === true,
+        });
+        return dbFromBasis(segmentSource(env, database), basis);
+    },
+    catch: (cause) => fromThrown(cause),
+});
+export const provisionResolvedDatabase = (env, route, derivation) => Effect.tryPromise({
+    try: async () => {
+        const database = route.database;
+        const stub = env.TRANSACTOR.get(env.TRANSACTOR.idFromName(database));
+        const response = await stub.fetch(`https://transactor/provision-catalog?db=${encodeURIComponent(database)}`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                ...internalHeaders(env),
+            },
+            body: JSON.stringify({ derivation }),
+        });
+        if (!response.ok) {
+            throw new Error(`dynamic database provisioning failed (${response.status})`);
+        }
+        invalidateBasis(database);
+    },
+    catch: (cause) => fromThrown(cause),
+});
+export const acquireWatchedDb = (env, currentBasis) => (database) => Effect.tryPromise({
+    try: async () => {
+        const basis = currentBasis();
+        if (basis === undefined || basis.db !== database) {
+            throw new Error("live basis unavailable");
+        }
+        return dbFromBasis(segmentSource(env, database), basis);
+    },
+    catch: (cause) => fromThrown(cause),
+});
+export const queryMaxCells = (env) => envInt(env.RAMOSE_QUERY_MAX_CELLS, DEFAULT_QUERY_MAX_CELLS);
+//# sourceMappingURL=authorized-read.js.map

package/dist/worker/authorized-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-read.js","sourceRoot":"","sources":["../../src/worker/authorized-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,SAAS,EACT,eAAe,EACf,UAAU,GAKX,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAc,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAoB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEvE,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAEtD,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAS9C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAsD,EAAE,CACtF,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAClE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;AAE7E,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0C,EAAE;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACnE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAgD,EAAE;IACtF,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAyC,EACzC,OAAgB,EACmE,EAAE;IACrF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACpF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,IAAyC,EACzC,MAAuB,EACU,EAAE;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,EAAE,EAAE,CAAC;IAC1B,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;YAChC,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAAyC,EACzC,OAAgB,EACP,EAAE,CACX,CAAC,IAAI,KAAK,SAAS;IACjB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,IAAyC,EACzC,OAAgB,EACmB,EAAE,CACrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC;IAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAEhC,MAAM,MAAM,GAAG,CACb,IAAyC,EACzC,MAAuB,EACA,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,UAAU,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GACX,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3H,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAsB,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC5B,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAAY,EACZ,MAAc,EACd,IAAyC,EACc,EAAE;IACzD,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACjE,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,OAAO,CAAC;gBACpB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,IAAI,CAAC,KAAwB;gBACpC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,EAAE,IAAI,CAAC;QAC5B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,QAAmC,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAClF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC;gBACpB,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,OAAO,EAAE,IAAI,CAAC,OAA6B;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,sEAAsE,EAAE,CAAC,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACxG,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;YACpB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAA6B;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAY,EAA4C,EAAE;IAChF,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAgB,EACoC,EAAE,CACtD,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;CAClG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EACnF,OAAgB,EAChB,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3E,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GACR,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,GAAc,EACd,OAAgB,EAChB,OAAO,GAGH,EAAE,EACsD,EAAE,CAC9D,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE;YACrD,WAAW,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI;YAC9C,kBAAkB,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI;SAC7D,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,GAAc,EACd,KAA4B,EAC5B,UAAmC,EACD,EAAE,CACpC,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,2CAA2C,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACzE;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,eAAe,CAAC,GAAG,CAAC;aACxB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC;SACrC,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,GAAc,EACd,YAAqC,EACuB,EAAE,CAC9D,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAc,EAAU,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC"}

package/dist/worker/authorized-replication.d.ts

@@ -0,0 +1,21 @@
+import * as Effect from "effect/Effect";
+import type { RamoseEnv } from "../RamoseEnv.ts";
+import { type AuthenticatedCaller, type AuthorizedDatabaseTarget, type DatabaseCatalogBindings, type ResolvedDatabaseRoute } from "../internal/authorization/index.ts";
+import type { RuntimeBoundaries } from "../internal/runtime-boundaries.ts";
+import { type ActivationRequest } from "../internal/replication/index.ts";
+import { JwtVerifier } from "./jwt.ts";
+export type AuthorizedReplicationInput = {
+    readonly activation: ActivationRequest;
+    readonly env: RamoseEnv;
+    readonly request: Request;
+    readonly bindings: DatabaseCatalogBindings;
+    readonly root: ResolvedDatabaseRoute;
+    readonly initialCaller: AuthenticatedCaller;
+    readonly initialTarget: AuthorizedDatabaseTarget;
+    readonly headers: Record<string, string>;
+    readonly boundaries?: RuntimeBoundaries;
+};
+export declare const authorizedReplicationResponse: (input: AuthorizedReplicationInput) => Effect.Effect<Response, unknown, JwtVerifier>;
+export declare const incompatibleReplicationResponse: (headers: Record<string, string>) => Response;
+export declare const updateRequiredReplicationResponse: (headers: Record<string, string>) => Response;
+//# sourceMappingURL=authorized-replication.d.ts.map

package/dist/worker/authorized-replication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-replication.d.ts","sourceRoot":"","sources":["../../src/worker/authorized-replication.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAE5B,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAkBL,KAAK,iBAAiB,EAOvB,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAyCvC,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC,CAAC;AAssBF,eAAO,MAAM,6BAA6B,UACjC,0BAA0B,KAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CA8D3C,CAAC;AAEL,eAAO,MAAM,+BAA+B,YACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC9B,QAcF,CAAC;AAEF,eAAO,MAAM,iCAAiC,YACnC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC9B,QAcF,CAAC"}