ramosedb 0.0.1 → 0.4.0

package/dist/worker/jwt.js

@@ -0,0 +1,288 @@
+import { DEFAULT_JWT_MAX_TTL } from "../Auth.js";
+import { MAX_COLLECTION_SIZE, MAX_JSON_DEPTH, MAX_JSON_ENCODED_BYTES, MAX_JSON_NODES, MAX_STRING_LENGTH, } from "../internal/authorization/bounds.js";
+import * as Clock from "effect/Clock";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Result from "effect/Result";
+import { createLocalJWKSet, createRemoteJWKSet, customFetch, jwtVerify, } from "jose";
+import { Unauthorized } from "./errors.js";
+import {} from "./auth.js";
+const ALGORITHMS = ["RS256", "ES256", "EdDSA"];
+const CLOCK_TOLERANCE_SECONDS = 5;
+export class JwtVerifier extends Context.Service()("ramose/worker/JwtVerifier") {
+}
+const unauthorized = () => new Unauthorized({});
+const failure = () => Result.fail(unauthorized());
+const nonBlankString = (value) => typeof value === "string" && value.trim().length > 0
+    ? Result.succeed(value)
+    : failure();
+const integer = (value) => typeof value === "number" && Number.isInteger(value)
+    ? Result.succeed(value)
+    : failure();
+export const temporalClaimsHold = (iat, exp, nbf, nowMs) => {
+    const nowSeconds = Math.floor(nowMs / 1_000);
+    return (iat <= nowSeconds + CLOCK_TOLERANCE_SECONDS &&
+        exp + CLOCK_TOLERANCE_SECONDS >= nowSeconds &&
+        (nbf === undefined || nbf <= nowSeconds + CLOCK_TOLERANCE_SECONDS));
+};
+const audience = (value) => {
+    if (typeof value === "string" && value.length > 0)
+        return Result.succeed(value);
+    if (Array.isArray(value) &&
+        value.length > 0 &&
+        value.every((item) => typeof item === "string" && item.length > 0)) {
+        return Result.succeed(Object.freeze([...value]));
+    }
+    return failure();
+};
+const UTF8 = new TextEncoder();
+const encodedNumberBytes = (value) => Object.is(value, -0) || value === 0 ? 1 : String(value).length;
+const attrsWithinBounds = (attrs) => {
+    const stack = [{ value: attrs, depth: 0 }];
+    const seen = new WeakSet();
+    let nodes = 0;
+    let bytes = 0;
+    const charge = (extraNodes, extraBytes) => {
+        nodes += extraNodes;
+        bytes += extraBytes;
+        return nodes <= MAX_JSON_NODES && bytes <= MAX_JSON_ENCODED_BYTES;
+    };
+    while (stack.length > 0) {
+        const { value, depth } = stack.pop();
+        if (typeof value === "string") {
+            if (value.length > MAX_STRING_LENGTH)
+                return false;
+            if (!charge(1, UTF8.encode(JSON.stringify(value)).byteLength))
+                return false;
+            continue;
+        }
+        if (typeof value === "boolean") {
+            if (!charge(1, value ? 4 : 5))
+                return false;
+            continue;
+        }
+        if (typeof value === "number" && Number.isFinite(value)) {
+            if (!charge(1, encodedNumberBytes(value)))
+                return false;
+            continue;
+        }
+        if (typeof value !== "object" || value === null)
+            return false;
+        if (!charge(1, 0))
+            return false;
+        if (depth > MAX_JSON_DEPTH || seen.has(value))
+            return false;
+        seen.add(value);
+        if (Array.isArray(value)) {
+            if (value.length > MAX_COLLECTION_SIZE)
+                return false;
+            for (let index = value.length - 1; index >= 0; index--) {
+                stack.push({ value: value[index], depth: depth + 1 });
+            }
+            continue;
+        }
+        const keys = Object.keys(value);
+        if (keys.length > MAX_COLLECTION_SIZE)
+            return false;
+        for (let index = keys.length - 1; index >= 0; index--) {
+            const key = keys[index];
+            if (key.length > MAX_STRING_LENGTH)
+                return false;
+            if (!charge(1, UTF8.encode(JSON.stringify(key)).byteLength))
+                return false;
+            stack.push({
+                value: value[key],
+                depth: depth + 1,
+            });
+        }
+    }
+    return true;
+};
+const isClaimScalar = (value) => typeof value === "string" ||
+    typeof value === "boolean" ||
+    (typeof value === "number" && Number.isFinite(value));
+const freezeIterative = (root) => {
+    const pending = [root];
+    const ordered = [];
+    const seen = new WeakSet();
+    while (pending.length > 0) {
+        const value = pending.pop();
+        if (seen.has(value))
+            continue;
+        seen.add(value);
+        ordered.push(value);
+        for (const child of Array.isArray(value)
+            ? value
+            : Object.values(value)) {
+            if (typeof child === "object" && child !== null)
+                pending.push(child);
+        }
+    }
+    for (let index = ordered.length - 1; index >= 0; index--) {
+        Object.freeze(ordered[index]);
+    }
+    return root;
+};
+const principalAttrs = (value) => {
+    if (value === undefined)
+        return Result.succeed(undefined);
+    if (typeof value !== "object" ||
+        value === null ||
+        Array.isArray(value) ||
+        !attrsWithinBounds(value)) {
+        return failure();
+    }
+    const attrs = Object.create(null);
+    for (const key of Object.keys(value)) {
+        const claim = value[key];
+        if (isClaimScalar(claim)) {
+            attrs[key] = claim;
+            continue;
+        }
+        if (!Array.isArray(claim) || !claim.every(isClaimScalar))
+            return failure();
+        attrs[key] = [...claim];
+    }
+    return Result.succeed(freezeIterative(attrs));
+};
+const verifiedPrincipal = (token, payload, protectedHeader, nowMs, maxTtl) => Result.gen(function* () {
+    const kid = yield* nonBlankString(protectedHeader.kid);
+    const sub = yield* nonBlankString(payload.sub);
+    const iss = yield* nonBlankString(payload.iss);
+    const aud = yield* audience(payload.aud);
+    const iat = yield* integer(payload.iat);
+    const exp = yield* integer(payload.exp);
+    const nbf = payload.nbf === undefined ? undefined : yield* integer(payload.nbf);
+    if (!temporalClaimsHold(iat, exp, nbf, nowMs))
+        return yield* failure();
+    const lifetime = exp - iat;
+    if (!Number.isInteger(lifetime) || lifetime <= 0 || lifetime > maxTtl) {
+        return yield* failure();
+    }
+    const ramose = payload.ramose;
+    if (typeof ramose !== "object" || ramose === null || Array.isArray(ramose)) {
+        return yield* failure();
+    }
+    const principalClass = yield* nonBlankString(ramose.class);
+    const attrs = yield* principalAttrs(ramose.attrs);
+    const claims = Object.freeze({
+        sub,
+        iss,
+        aud,
+        exp,
+        ...(attrs === undefined ? {} : { attrs }),
+    });
+    const principal = Object.freeze({
+        kind: "user",
+        class: principalClass,
+        sub,
+        claims,
+    });
+    return Object.freeze({ token, kid, iat, exp, principal });
+});
+export const serviceBindingFetch = (binding) => (url, options) => binding.fetch(url, {
+    headers: options.headers,
+    method: options.method,
+    redirect: options.redirect,
+    signal: options.signal,
+});
+const serviceBinding = (env, name) => {
+    const candidate = env[name];
+    return typeof candidate === "object" &&
+        candidate !== null &&
+        typeof candidate.fetch === "function"
+        ? candidate
+        : undefined;
+};
+const parseIssuers = (value) => value
+    ?.split(",")
+    .map((issuer) => issuer.trim())
+    .filter((issuer) => issuer.length > 0) ?? [];
+const parseMaxTtl = (value) => {
+    if (value === undefined || value.length === 0)
+        return DEFAULT_JWT_MAX_TTL;
+    const parsed = Number(value);
+    return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
+};
+const denyAll = () => ({
+    verify: () => Effect.fail(unauthorized()),
+});
+const makeVerifier = (env) => {
+    try {
+        const url = env.RAMOSE_JWKS_URL;
+        const inline = env.RAMOSE_JWKS_JSON;
+        const serviceName = env.RAMOSE_JWKS_SERVICE;
+        const hasUrl = typeof url === "string" && url.length > 0;
+        const hasInline = typeof inline === "string" && inline.length > 0;
+        const issuers = parseIssuers(env.RAMOSE_JWT_ISS);
+        const aud = env.RAMOSE_JWT_AUD;
+        const maxTtl = parseMaxTtl(env.RAMOSE_JWT_MAX_TTL);
+        if (hasUrl === hasInline ||
+            issuers.length === 0 ||
+            typeof aud !== "string" ||
+            aud.length === 0 ||
+            maxTtl === undefined) {
+            return denyAll();
+        }
+        let resolver;
+        if (hasUrl) {
+            const options = {
+                timeoutDuration: 5_000,
+                cooldownDuration: 30_000,
+                cacheMaxAge: 5 * 60_000,
+            };
+            if (typeof serviceName === "string" && serviceName.length > 0) {
+                const binding = serviceBinding(env, serviceName);
+                if (binding === undefined)
+                    return denyAll();
+                options[customFetch] = serviceBindingFetch(binding);
+            }
+            resolver = createRemoteJWKSet(new URL(url), options);
+        }
+        else {
+            resolver = createLocalJWKSet(JSON.parse(inline));
+        }
+        const verify = Effect.fn("JwtVerifier.verify")(function* (token) {
+            const verifyStartedMs = yield* Clock.currentTimeMillis;
+            const verified = yield* Effect.tryPromise({
+                try: () => jwtVerify(Redacted.value(token), resolver, {
+                    issuer: issuers.length === 1 ? issuers[0] : [...issuers],
+                    audience: aud,
+                    algorithms: [...ALGORITHMS],
+                    clockTolerance: CLOCK_TOLERANCE_SECONDS,
+                    currentDate: new Date(verifyStartedMs),
+                    requiredClaims: ["sub", "iat", "exp"],
+                }),
+                catch: () => unauthorized(),
+            });
+            const nowMs = yield* Clock.currentTimeMillis;
+            return yield* Effect.fromResult(verifiedPrincipal(token, verified.payload, verified.protectedHeader, nowMs, maxTtl));
+        });
+        return { verify };
+    }
+    catch {
+        return denyAll();
+    }
+};
+const verifierCache = new Map();
+export const resetJwtVerifier = () => {
+    verifierCache.clear();
+};
+export const fromEnv = (env) => {
+    const key = JSON.stringify([
+        env.RAMOSE_JWKS_URL,
+        env.RAMOSE_JWKS_JSON,
+        env.RAMOSE_JWKS_SERVICE,
+        env.RAMOSE_JWT_ISS,
+        env.RAMOSE_JWT_AUD,
+        env.RAMOSE_JWT_MAX_TTL,
+    ]);
+    const cached = verifierCache.get(key);
+    if (cached !== undefined)
+        return cached;
+    const verifier = makeVerifier(env);
+    verifierCache.set(key, verifier);
+    return verifier;
+};
+//# sourceMappingURL=jwt.js.map

package/dist/worker/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/worker/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,SAAS,GAMV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAKN,MAAM,WAAW,CAAC;AAEnB,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACxD,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAsBlC,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAAkC,CAChF,2BAA2B,CAC5B;CAAG;AAEJ,MAAM,YAAY,GAAG,GAAiB,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAE9D,MAAM,OAAO,GAAG,GAA8C,EAAE,CAC9D,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;AAE9B,MAAM,cAAc,GAAG,CAAC,KAAc,EAAuC,EAAE,CAC7E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,OAAO,EAAE,CAAC;AAEhB,MAAM,OAAO,GAAG,CAAC,KAAc,EAAuC,EAAE,CACtE,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,OAAO,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,GAAW,EACX,GAAW,EACX,GAAuB,EACvB,KAAa,EACJ,EAAE;IACX,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC7C,OAAO,CACL,GAAG,IAAI,UAAU,GAAG,uBAAuB;QAC3C,GAAG,GAAG,uBAAuB,IAAI,UAAU;QAC3C,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,UAAU,GAAG,uBAAuB,CAAC,CACnE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CACf,KAAc,EAC2C,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChF,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAClE,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC,CAAC;AAOF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAU,EAAE,CACnD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AAEjE,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAW,EAAE;IACpD,MAAM,KAAK,GAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,UAAkB,EAAW,EAAE;QACjE,KAAK,IAAI,UAAU,CAAC;QACpB,KAAK,IAAI,UAAU,CAAC;QACpB,OAAO,KAAK,IAAI,cAAc,IAAI,KAAK,IAAI,sBAAsB,CAAC;IACpE,CAAC,CAAC;IAEF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB;gBAAE,OAAO,KAAK,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,KAAK,GAAG,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;gBAAE,OAAO,KAAK,CAAC;YACrD,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACpD,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;YACzB,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB;gBAAE,OAAO,KAAK,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK,EAAG,KAAiC,CAAC,GAAG,CAAC;gBAC9C,KAAK,EAAE,KAAK,GAAG,CAAC;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAiC,EAAE,CACtE,OAAO,KAAK,KAAK,QAAQ;IACzB,OAAO,KAAK,KAAK,SAAS;IAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAExD,MAAM,eAAe,GAAG,CAAmB,IAAO,EAAK,EAAE;IACvD,MAAM,OAAO,GAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,KAAc,EAC2C,EAAE;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,iBAAiB,CAAC,KAAK,CAAC,EACzB,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,CAAC,IAAI,CAGjB,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QAC3E,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,KAAgC,EAChC,OAAmB,EACnB,eAA2C,EAC3C,KAAa,EACb,MAAc,EACkC,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEtE,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CACzC,MAAkC,CAAC,KAAK,CAC1C,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAChC,MAAkC,CAAC,KAAK,CAC1C,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,SAAS,GAAc,MAAM,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,cAAc;QACrB,GAAG;QACH,MAAM;KACP,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAA2B,EACN,EAAE,CACvB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;IACjB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;CACvB,CAAC,CAAC;AAEP,MAAM,cAAc,GAAG,CACrB,GAAmB,EACnB,IAAY,EACoB,EAAE;IAClC,MAAM,SAAS,GAAI,GAA0C,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,OAAO,SAAS,KAAK,QAAQ;QAClC,SAAS,KAAK,IAAI;QAClB,OAAQ,SAA0C,CAAC,KAAK,KAAK,UAAU;QACvE,CAAC,CAAE,SAAgC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAyB,EAAqB,EAAE,CACpE,KAAK;IACH,EAAE,KAAK,CAAC,GAAG,CAAC;KACX,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;KAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAEjD,MAAM,WAAW,GAAG,CAAC,KAAyB,EAAsB,EAAE;IACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,GAAsB,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,GAAmB,EAAqB,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACpC,MAAM,WAAW,GAAG,GAAG,CAAC,mBAAmB,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACnD,IACE,MAAM,KAAK,SAAS;YACpB,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,MAAM,KAAK,CAAC;YAChB,MAAM,KAAK,SAAS,EACpB,CAAC;YACD,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,QAEqC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAwB;gBACnC,eAAe,EAAE,KAAK;gBACtB,gBAAgB,EAAE,MAAM;gBACxB,WAAW,EAAE,CAAC,GAAG,MAAM;aACxB,CAAC;YACF,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;gBACjD,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC5C,OAAO,CAAC,WAAW,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC;YACD,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAO,CAAkB,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EACtD,KAAgC;YAEhC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACxC,GAAG,EAAE,GAAG,EAAE,CACR,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE;oBACzC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;oBACxD,QAAQ,EAAE,GAAG;oBACb,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;oBAC3B,cAAc,EAAE,uBAAuB;oBACvC,WAAW,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC;oBACtC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;iBACtC,CAAC;gBACJ,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;aAC5B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,iBAAiB,CACf,KAAK,EACL,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,eAAe,EACxB,KAAK,EACL,MAAM,CACP,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;AAE3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAS,EAAE;IACzC,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAqB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,mBAAmB;QACvB,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,kBAAkB;KACvB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/worker/mcp.d.ts

@@ -0,0 +1,17 @@
+import * as Effect from "effect/Effect";
+import { type AuthenticatedCaller, type ResolvedDatabaseRoute, type DatabaseCatalogBindings } from "../internal/authorization/index.ts";
+import type { RamoseEnv } from "../RamoseEnv.ts";
+import type { RuntimeBoundaries } from "../internal/runtime-boundaries.ts";
+import { Internal } from "./errors.ts";
+export type McpRouteInput = {
+    readonly requiresApproval?: boolean;
+    readonly env: RamoseEnv;
+    readonly request: Request;
+    readonly bindings: DatabaseCatalogBindings;
+    readonly root: ResolvedDatabaseRoute;
+    readonly caller: AuthenticatedCaller;
+    readonly headers: Record<string, string>;
+    readonly boundaries?: RuntimeBoundaries;
+};
+export declare const mcpResponse: (input: McpRouteInput) => Effect.Effect<Response, Internal>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/worker/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/worker/mcp.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAEL,KAAK,mBAAmB,EAGxB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,oCAAoC,CAAC;AAS5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAG3E,OAAO,EAAiC,QAAQ,EAAkD,MAAM,aAAa,CAAC;AAEtH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC,CAAC;AAoJF,eAAO,MAAM,WAAW,UACf,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAmB/B,CAAC"}

package/dist/worker/mcp.js

@@ -0,0 +1,151 @@
+import * as Result from "effect/Result";
+import { resolveBoundCatalogDefinition } from "../internal/authorization/database-bindings.js";
+import { operationGrantAllows } from "../internal/authorization/operation-grant.js";
+import { encodeOperationVersionToken } from "../mcp/contract.js";
+import { requestChangeset } from "./changesets.js";
+import * as Effect from "effect/Effect";
+import { constructAuthorizedResolvedRequestContext, } from "../internal/authorization/index.js";
+import { decodeOperationVersionToken, parseMutateArgs, parseQueryDocument, requireArgs, toolFailure, } from "../mcp/contract.js";
+import { describeDatabase, publicMutateResult, runQueryDocument } from "../mcp/kernel.js";
+import { acquireCurrentDb, queryMaxCells } from "./authorized-read.js";
+import { invokeAuthoritativeOperation } from "./authorized-operation.js";
+import { BadRequest, ChangesetRejected, Internal, OperationRejected, UpstreamError, Unauthorized } from "./errors.js";
+const inaccessible = () => toolFailure("inaccessible", "nothing addressable is available there");
+const withAuthorizedDatabase = async (input, use) => {
+    let context;
+    try {
+        context = await Effect.runPromise(constructAuthorizedResolvedRequestContext({
+            authenticate: Effect.succeed(input.caller),
+            bindings: input.bindings,
+            route: input.root,
+            currentDb: acquireCurrentDb(input.env, input.request, {
+                bypassBasisCache: true,
+                authoritativeBasisFence: true,
+            }),
+        }, input.caller));
+    }
+    catch {
+        throw inaccessible();
+    }
+    return use({
+        context,
+        route: input.root,
+        derivation: { rootDatabase: input.root.database },
+    });
+};
+const mutateTransportFailure = (cause) => {
+    if (cause instanceof BadRequest)
+        throw toolFailure("invalid_input", "invalid changeset request");
+    if (cause instanceof ChangesetRejected) {
+        throw toolFailure("operation_rejected", cause.code);
+    }
+    if (cause instanceof OperationRejected) {
+        throw toolFailure("operation_rejected", cause.message);
+    }
+    if (cause instanceof Unauthorized)
+        throw inaccessible();
+    if (cause instanceof UpstreamError) {
+        if (cause.status === 401 || cause.status === 403)
+            throw inaccessible();
+        if (cause.status === 400) {
+            throw toolFailure("invalid_input", "the operation refused this input");
+        }
+        if (cause.status === 409) {
+            throw toolFailure("operation_rejected", "the operation refused the request");
+        }
+    }
+    throw toolFailure("internal_error", "the operation could not be invoked");
+};
+const mcpTools = (input) => ({
+    changeset: async (raw) => {
+        const args = requireArgs(raw);
+        if (args.action === "describe")
+            return withAuthorizedDatabase(input, async (target) => {
+                const deployed = Result.getOrThrow(resolveBoundCatalogDefinition(input.bindings, target.route));
+                const available = deployed.definition.operations.filter((binding) => operationGrantAllows(target.context.unit, binding.descriptor, input.caller, target.context.principal.subject));
+                return { truncated: available.length > 100, operations: available.slice(0, 100).map((binding) => ({
+                        owner: binding.descriptor.id.owner, name: binding.descriptor.id.localName,
+                        version: encodeOperationVersionToken(binding.descriptor.version),
+                        target: binding.descriptor.id.target, input: binding.descriptor.input,
+                        description: binding.descriptor.doc,
+                    })) };
+            });
+        if (args.action !== "list" && args.action !== "append" && args.action !== "query" && args.action !== "prepare" && args.action !== "inspect" && args.action !== "discard") {
+            throw toolFailure("invalid_input", "agents can describe, query, prepare, inspect, or discard proposals; approval belongs in the application");
+        }
+        const operations = Array.isArray(args.operations) ? args.operations.map((raw) => {
+            const parsed = parseMutateArgs({ ...requireArgs(raw), invocationId: "changeset" });
+            return { operation: { owner: parsed.operation.owner, localName: parsed.operation.name },
+                operationVersion: decodeOperationVersionToken(parsed.operation.version), input: parsed.input,
+                ...(requireArgs(raw).target === undefined ? {} : { target: requireArgs(raw).target }) };
+        }) : undefined;
+        return withAuthorizedDatabase(input, async (target) => requestChangeset(input.env, new URL(input.request.url).origin, target.route.database, target.route.deployed.catalogKey, target.route.deployed.unitHash, input.caller, { ...args, operations })).catch(mutateTransportFailure);
+    },
+    describe: (raw) => {
+        requireArgs(raw ?? {});
+        return withAuthorizedDatabase(input, (target) => describeDatabase(target.context, input.caller));
+    },
+    query: (raw) => {
+        const args = requireArgs(raw);
+        const document = parseQueryDocument(args.query);
+        return withAuthorizedDatabase(input, (target) => runQueryDocument(target.context, input.caller, document, {
+            maxCells: queryMaxCells(input.env),
+        }));
+    },
+    mutate: async (raw) => {
+        if (input.requiresApproval)
+            throw inaccessible();
+        const args = parseMutateArgs(raw);
+        const operationVersion = decodeOperationVersionToken(args.operation.version);
+        const resolved = await withAuthorizedDatabase(input, (target) => {
+            const descriptor = target.context.unit.catalog.operations.find((candidate) => candidate.id.owner.kind === args.operation.owner.kind &&
+                candidate.id.owner.name === args.operation.owner.name &&
+                candidate.id.localName === args.operation.name);
+            if (descriptor === undefined)
+                throw inaccessible();
+            return Promise.resolve({
+                output: descriptor.output,
+                route: target.route,
+                derivation: target.derivation,
+            });
+        });
+        const result = await invokeAuthoritativeOperation(input.env, resolved.route.database, new URL(input.request.url).origin, {
+            catalogKey: resolved.route.deployed.catalogKey,
+            unitHash: resolved.route.deployed.unitHash,
+            owner: args.operation.owner,
+            localName: args.operation.name,
+            invocationId: args.invocationId,
+            operationVersion,
+            input: args.input,
+        }, input.caller).catch(mutateTransportFailure);
+        await input.boundaries?.checkpoint("operation.response");
+        if (!Number.isSafeInteger(input.caller.exp) ||
+            input.caller.exp * 1_000 <= Date.now()) {
+            throw toolFailure("invocation_indeterminate", "authorization expired before this result could be returned; " +
+                "reauthenticate and retry with the same invocationId");
+        }
+        const projected = publicMutateResult(result, resolved.output);
+        if ("code" in projected)
+            throw toolFailure(projected.code, projected.message);
+        return projected;
+    },
+});
+export const mcpResponse = (input) => Effect.tryPromise({
+    try: async () => {
+        const { handleMcpRequest } = await import("../mcp/server.js");
+        const tools = mcpTools(input);
+        const response = await handleMcpRequest(input.request, {
+            describe: tools.describe, query: tools.query, changeset: tools.changeset,
+            ...(input.requiresApproval ? {} : { mutate: tools.mutate }),
+        });
+        const headers = new Headers(response.headers);
+        for (const [name, value] of Object.entries(input.headers)) {
+            headers.set(name, value);
+        }
+        return new Response(response.body, { status: response.status, headers });
+    },
+    catch: (cause) => new Internal({
+        message: cause instanceof Error ? cause.message : String(cause),
+    }),
+});
+//# sourceMappingURL=mcp.js.map

package/dist/worker/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/worker/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,yCAAyC,GAM1C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAG1F,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAatH,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,WAAW,CAAC,cAAc,EAAE,wCAAwC,CAAC,CAAC;AAQxE,MAAM,sBAAsB,GAAG,KAAK,EAClC,KAAoB,EACpB,GAA+C,EACnC,EAAE;IACd,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,yCAAyC,CAAC;YAC1E,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;gBACpD,gBAAgB,EAAE,IAAI;gBACtB,uBAAuB,EAAE,IAAI;aAC9B,CAAC;SACH,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;QACT,OAAO;QACP,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,UAAU,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;KAClD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAS,EAAE;IACvD,IAAI,KAAK,YAAY,UAAU;QAAE,MAAM,WAAW,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IACjG,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,MAAM,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,MAAM,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,YAAY,YAAY;QAAE,MAAM,YAAY,EAAE,CAAC;IACxD,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,YAAY,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,MAAM,WAAW,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,MAAM,WAAW,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,WAAW,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC;IAC1C,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChG,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;gBACpL,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC9F,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS;wBACzE,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;wBAChE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;wBACrE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG;qBACpC,CAAC,CAAC,EAAE,CAAC;YACV,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzK,MAAM,WAAW,CAAC,eAAe,EAAE,yGAAyG,CAAC,CAAC;QAChJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;gBACrF,gBAAgB,EAAE,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;gBAC5F,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5F,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACf,OAAO,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,CACrE,KAAK,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAC9E,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CACxB,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnC,CAAC;IACD,QAAQ,EAAE,CAAC,GAAY,EAAE,EAAE;QACzB,WAAW,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACvB,OAAO,sBAAsB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAC9C,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,EAAE,CAAC,GAAY,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,sBAAsB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAC9C,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE;YACvD,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;SACnC,CAAC,CAAC,CAAC;IACR,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,gBAAgB;YAAE,MAAM,YAAY,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAC5D,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI;gBACrD,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI;gBACrD,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CACjD,CAAC;YACF,IAAI,UAAU,KAAK,SAAS;gBAAE,MAAM,YAAY,EAAE,CAAC;YACnD,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,KAAK,CAAC,GAAG,EACT,QAAQ,CAAC,KAAK,CAAC,QAAQ,EACvB,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EACjC;YACE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU;YAC9C,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;YAC1C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB;YAChB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,EACD,KAAK,CAAC,MAAM,CACb,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACzD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YACvC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EACtC,CAAC;YACD,MAAM,WAAW,CACf,0BAA0B,EAC1B,8DAA8D;gBAC5D,qDAAqD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,MAAM,IAAI,SAAS;YAAE,MAAM,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,KAAoB,EACe,EAAE,CACrC,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE;YACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;YACxE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,QAAQ,CAAC;QACX,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAChE,CAAC;CACL,CAAC,CAAC"}

package/dist/worker/operation-catalogs.d.ts

@@ -0,0 +1,38 @@
+import * as Effect from "effect/Effect";
+import type { AnySchemaDefinition } from "../db/Schema.ts";
+import { type DeployedCatalogDefinitions } from "../internal/authorization/definitions.ts";
+import { type DatabaseCatalogBindings } from "../internal/authorization/database-bindings.ts";
+import { CatalogId, type CatalogUnitHash } from "../internal/authorization/identities.ts";
+declare const OperationCatalogsTypeId: unique symbol;
+export interface OperationCatalogProof {
+    readonly catalog: string;
+    readonly unitHash: string;
+}
+export interface OperationCatalogs {
+    readonly [OperationCatalogsTypeId]: typeof OperationCatalogsTypeId;
+    readonly proof: (database: string) => OperationCatalogProof | undefined;
+}
+export interface OperationCatalogDeployment {
+    readonly database: string;
+    readonly catalogKey?: string;
+}
+export interface DeployOperationCatalogsInput {
+    readonly root: AnySchemaDefinition;
+    readonly deployments: readonly OperationCatalogDeployment[];
+}
+declare const OperationCatalogDeploymentError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OperationCatalogDeploymentError";
+} & Readonly<A>;
+export declare class OperationCatalogDeploymentError extends OperationCatalogDeploymentError_base<{
+    readonly message: string;
+}> {
+}
+export declare const deployedCatalogProof: (operationCatalogs: OperationCatalogs, database: string) => {
+    readonly catalogKey: CatalogId;
+    readonly unitHash: CatalogUnitHash;
+} | undefined;
+export declare const deployedOperationCatalogs: (operationCatalogs: OperationCatalogs) => DeployedCatalogDefinitions;
+export declare const deployedDatabaseCatalogBindings: (operationCatalogs: OperationCatalogs) => DatabaseCatalogBindings;
+export declare const deployOperationCatalogsForVersion: (input: DeployOperationCatalogsInput, versionMetadata: unknown) => Effect.Effect<OperationCatalogs, OperationCatalogDeploymentError, never>;
+export {};
+//# sourceMappingURL=operation-catalogs.d.ts.map

package/dist/worker/operation-catalogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-catalogs.d.ts","sourceRoot":"","sources":["../../src/worker/operation-catalogs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,gDAAgD,CAAC;AAExD,OAAO,EACL,SAAS,EAET,KAAK,eAAe,EAErB,MAAM,yCAAyC,CAAC;AAGjD,QAAA,MAAM,uBAAuB,eAAgD,CAAC;AAE9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,CAAC,uBAAuB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACnE,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,qBAAqB,GAAG,SAAS,CAAC;CACzE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC7D;;;;AAED,qBAAa,+BAAgC,SAAQ,qCAEnD;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;CAAG;AAuFlC,eAAO,MAAM,oBAAoB,sBACZ,iBAAiB,YAC1B,MAAM,KACf;IACD,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC,GAAG,SAUH,CAAC;AAEF,eAAO,MAAM,yBAAyB,sBACjB,iBAAiB,KACnC,0BAMF,CAAC;AAEF,eAAO,MAAM,+BAA+B,sBACvB,iBAAiB,KACnC,uBAMF,CAAC;AAEF,eAAO,MAAM,iCAAiC,6IA0BV,CAAC"}

package/dist/worker/operation-catalogs.js

@@ -0,0 +1,114 @@
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { assembleCatalogDefinitions, deployCatalogDefinitions, } from "../internal/authorization/definitions.js";
+import { deployDatabaseCatalogBindings, unavailableDatabaseCatalogBindings, } from "../internal/authorization/database-bindings.js";
+import { CatalogId, DatabaseId, } from "../internal/authorization/identities.js";
+import { sha256Hex } from "../internal/core/bytes.js";
+const OperationCatalogsTypeId = Symbol.for("ramose/worker/OperationCatalogs");
+export class OperationCatalogDeploymentError extends Data.TaggedError("OperationCatalogDeploymentError") {
+}
+const registries = new WeakMap();
+const deploymentError = (cause) => new OperationCatalogDeploymentError({
+    message: cause instanceof Error ? cause.message : String(cause),
+});
+const DEPLOYMENT_ID_DOMAIN = "ramose:worker-deployment:v1\0";
+const textEncoder = new TextEncoder();
+const UNAVAILABLE_MESSAGE = "ramose: this Worker instance started without a deployment version " +
+    "(CF_VERSION_METADATA.id was empty — Cloudflare's upload-validation " +
+    "instance); it cannot serve catalog-bound requests";
+const startedWithoutDeploymentVersion = (metadata) => {
+    if (typeof metadata !== "object" || metadata === null)
+        return false;
+    const id = metadata.id;
+    return id === "" || id === undefined;
+};
+const unavailable = () => {
+    throw new OperationCatalogDeploymentError({ message: UNAVAILABLE_MESSAGE });
+};
+const unavailableState = () => {
+    const catalogs = Object.freeze({
+        requireDatabase: unavailable,
+        databases: unavailable,
+    });
+    return {
+        deployed: Object.freeze({
+            catalogs,
+            requireDatabase: unavailable,
+            databases: unavailable,
+        }),
+        bindings: unavailableDatabaseCatalogBindings(unavailable),
+    };
+};
+const artifactHashForDeployment = (metadata) => {
+    const id = typeof metadata === "object" && metadata !== null
+        ? metadata.id
+        : undefined;
+    if (typeof id !== "string" || !/^[\x21-\x7e]{1,256}$/.test(id)) {
+        return Effect.fail(new OperationCatalogDeploymentError({
+            message: "CF_VERSION_METADATA.id must be a non-empty deployment version string",
+        }));
+    }
+    return Effect.tryPromise({
+        try: () => sha256Hex(textEncoder.encode(`${DEPLOYMENT_ID_DOMAIN}${id}`)),
+        catch: deploymentError,
+    }).pipe(Effect.map((digest) => digest));
+};
+const wrapOperationCatalogs = (deployed, bindings) => {
+    const operationCatalogs = Object.freeze({
+        [OperationCatalogsTypeId]: OperationCatalogsTypeId,
+        proof: (database) => {
+            const bound = Result.getOrUndefined(deployed.requireDatabase(DatabaseId.make(database)));
+            return bound === undefined
+                ? undefined
+                : Object.freeze({
+                    catalog: bound.definition.catalogKey,
+                    unitHash: bound.definition.unitHash,
+                });
+        },
+    });
+    registries.set(operationCatalogs, { deployed, bindings });
+    return operationCatalogs;
+};
+export const deployedCatalogProof = (operationCatalogs, database) => {
+    const state = registries.get(operationCatalogs);
+    if (state === undefined)
+        return undefined;
+    const bound = Result.getOrUndefined(state.deployed.requireDatabase(DatabaseId.make(database)));
+    return bound === undefined ? undefined : Object.freeze({
+        catalogKey: bound.definition.catalogKey,
+        unitHash: bound.definition.unitHash,
+    });
+};
+export const deployedOperationCatalogs = (operationCatalogs) => {
+    const state = registries.get(operationCatalogs);
+    if (state === undefined) {
+        throw new Error("operation catalogs were not created by deployOperationCatalogs");
+    }
+    return state.deployed;
+};
+export const deployedDatabaseCatalogBindings = (operationCatalogs) => {
+    const state = registries.get(operationCatalogs);
+    if (state === undefined) {
+        throw new Error("operation catalogs were not created by deployOperationCatalogs");
+    }
+    return state.bindings;
+};
+export const deployOperationCatalogsForVersion = Effect.fn("Worker.deployOperationCatalogs")(function* (input, versionMetadata) {
+    if (startedWithoutDeploymentVersion(versionMetadata)) {
+        const state = unavailableState();
+        return wrapOperationCatalogs(state.deployed, state.bindings);
+    }
+    const artifactHash = yield* artifactHashForDeployment(versionMetadata);
+    const definitions = yield* assembleCatalogDefinitions({
+        root: input.root,
+        artifactHash,
+    });
+    const deployed = yield* Effect.fromResult(deployCatalogDefinitions(definitions, input.deployments.map((deployment) => ({
+        database: DatabaseId.make(deployment.database),
+        catalogKey: CatalogId.make(deployment.catalogKey ?? input.root.key),
+    }))));
+    const bindings = yield* Effect.fromResult(deployDatabaseCatalogBindings(definitions, deployed));
+    return wrapOperationCatalogs(deployed, bindings);
+}, Effect.mapError(deploymentError));
+//# sourceMappingURL=operation-catalogs.js.map