@agilesyndrome/cf-genai-base 5.0.2 → 6.0.0

package/dist/core/circuits/availability.js

@@ -0,0 +1,87 @@
+import { BASE_PACKAGE_NAME, BASE_VERSION } from "../constants.js";
+import { auditLog, eventLog } from "../events/index.js";
+import { secureJson } from "../security/index.js";
+import { getCircuitBreaker } from "./service.js";
+export async function featureCircuit(env, id, who = "system:read") {
+    return getCircuitBreaker(env, id, { who }).catch((error) => {
+        const problem = error instanceof Error ? error : new Error(String(error));
+        eventLog("error", "feature.circuit.read.failed", {
+            breaker: id,
+            errorName: problem.name,
+            errorMessage: problem.message.slice(0, 300),
+        });
+        void env.event?.("feature.circuit.read.failed", "feature", {
+            breaker: id,
+            who,
+            errorName: problem.name,
+        });
+        return null;
+    });
+}
+export async function featureAvailable(env, id, who = "system:read") {
+    return (await featureCircuit(env, id, who))?.state === "on";
+}
+export async function requireFeatureCircuit(env, { feature, breakerId, operation, requestId, who, message = "The requested feature is unavailable.", }) {
+    const actor = who || "system:read";
+    const breaker = await featureCircuit(env, breakerId, actor);
+    if (breaker?.state === "on")
+        return breaker;
+    const details = {
+        feature,
+        breaker: breakerId,
+        state: breaker?.state || "missing",
+        operation,
+        requestId: requestId || null,
+    };
+    eventLog("warn", "feature.request.blocked", details);
+    auditLog({ who: actor, operation: "blocked", resource: `feature:${feature}`, details });
+    await env.event?.("feature.request.blocked", "feature", { ...details, who: actor });
+    throw Object.assign(new Error(message), {
+        status: 503,
+        code: "feature_circuit_unavailable",
+        feature,
+        breakerId,
+        circuitState: breaker?.state || "missing",
+    });
+}
+export function createAvailabilityFeature({ name = "base", breakerId = `${name}:site-available`, displayName = "Site availability", publicPaths = ["/health", "/api/health"], } = {}) {
+    return {
+        name,
+        packageName: BASE_PACKAGE_NAME,
+        version: BASE_VERSION,
+        healthcheck: async () => ({
+            feature: name,
+            component: "site-available",
+            displayName,
+            state: "green",
+            metadata: { endpoint: "/health", expectedStatus: 200 },
+        }),
+        circuitBreakers: [{
+                id: breakerId,
+                name: "site-available",
+                displayName,
+                state: "on",
+                allowSelfHealing: false,
+                healthchecks: [`${name}:site-available`],
+            }],
+        // This is policy middleware: Hono still owns routing and middleware composition.
+        async middleware(request, env, _ctx, next) {
+            const pathname = new URL(request.url).pathname;
+            if (publicPaths.some((path) => pathname === path || pathname.startsWith(`${path}/`))) {
+                return next(request);
+            }
+            const breaker = await featureCircuit(env, breakerId, "system:read");
+            if (breaker?.state === "on")
+                return next(request);
+            await env.event?.("feature.maintenance", "availability", {
+                feature: name,
+                breaker: breakerId,
+                state: breaker?.state || "missing",
+                pathname,
+                method: request.method,
+            });
+            return secureJson({ error: "The site is temporarily unavailable." }, 503);
+        },
+    };
+}
+//# sourceMappingURL=availability.js.map

package/dist/core/circuits/availability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability.js","sourceRoot":"","sources":["../../../src/core/circuits/availability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAuBjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAqB,EACrB,EAAU,EACV,GAAG,GAAG,aAAa;IAEnB,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,QAAQ,CAAC,OAAO,EAAE,6BAA6B,EAAE;YAC/C,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,OAAO,CAAC,IAAI;YACvB,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC5C,CAAC,CAAC;QACH,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,6BAA6B,EAAE,SAAS,EAAE;YACzD,OAAO,EAAE,EAAE;YACX,GAAG;YACH,SAAS,EAAE,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAqB,EACrB,EAAU,EACV,GAAG,GAAG,aAAa;IAEnB,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAqB,EACrB,EACE,OAAO,EACP,SAAS,EACT,SAAS,EACT,SAAS,EACT,GAAG,EACH,OAAO,GAAG,uCAAuC,GACjC;IAElB,MAAM,KAAK,GAAG,GAAG,IAAI,aAAa,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,EAAE,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAE5C,MAAM,OAAO,GAAG;QACd,OAAO;QACP,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;QAClC,SAAS;QACT,SAAS,EAAE,SAAS,IAAI,IAAI;KAC7B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,yBAAyB,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpF,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE;QACtC,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,6BAA6B;QACnC,OAAO;QACP,SAAS;QACT,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,EACxC,IAAI,GAAG,MAAM,EACb,SAAS,GAAG,GAAG,IAAI,iBAAiB,EACpC,WAAW,GAAG,mBAAmB,EACjC,WAAW,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,GACzC,GAA+B,EAAE;IAChC,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,gBAAgB;YAC3B,WAAW;YACX,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE;SACvD,CAAC;QACF,eAAe,EAAE,CAAC;gBAChB,EAAE,EAAE,SAAS;gBACb,IAAI,EAAE,gBAAgB;gBACtB,WAAW;gBACX,KAAK,EAAE,IAAI;gBACX,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,CAAC,GAAG,IAAI,iBAAiB,CAAC;aACzC,CAAC;QACF,iFAAiF;QACjF,KAAK,CAAC,UAAU,CACd,OAAgB,EAChB,GAAqB,EACrB,IAAa,EACb,IAAwD;YAExD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC/C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YAElD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,cAAc,EAAE;gBACvD,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;gBAClC,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/circuits/d1.d.ts

@@ -0,0 +1,11 @@
+import { type D1Environment } from "../database/index.js";
+import type { CircuitAccessOptions, CircuitBreaker, NormalizedCircuitBreaker } from "./model.js";
+export declare function saveCircuitBreaker(env: D1Environment, id: string, item: NormalizedCircuitBreaker, { who }?: CircuitAccessOptions): Promise<void>;
+export declare function readCircuitBreaker(env: D1Environment, id: string, { who }?: CircuitAccessOptions): Promise<CircuitBreaker | null>;
+export declare function readCircuitBreakerIds(env: D1Environment, { who }?: CircuitAccessOptions): Promise<string[]>;
+export declare function writeCircuitBreakerState(env: D1Environment, id: string, state: string, { who, reason }?: CircuitAccessOptions & {
+    reason?: string;
+}): Promise<void>;
+export declare function readHealthcheckStates(env: D1Environment, id: string, { who }?: CircuitAccessOptions): Promise<string[]>;
+export declare function readDependencyStates(env: D1Environment, id: string, { who }?: CircuitAccessOptions): Promise<string[]>;
+//# sourceMappingURL=d1.d.ts.map

package/dist/core/circuits/d1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/d1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EAEd,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAOpB,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,wBAAwB,EAC9B,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAmBhC;AAYD,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,aAAa,EAClB,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,EAAE,GAAmB,EAAE,MAAM,EAAE,GAAE,oBAAoB,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/E,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB"}

package/dist/core/circuits/d1.js

@@ -0,0 +1,83 @@
+import { createD1 } from "../database/index.js";
+export async function saveCircuitBreaker(env, id, item, { who = "system:read" } = {}) {
+    const db = createD1(env, { who });
+    await db
+        .prepare("INSERT INTO core_circuit_breakers (id,feature,name,display_name,state,healthcheck_mode,allow_self_healing,metadata_json) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(feature,name) DO UPDATE SET display_name=excluded.display_name,healthcheck_mode=excluded.healthcheck_mode,allow_self_healing=excluded.allow_self_healing,metadata_json=excluded.metadata_json,updated_at=CURRENT_TIMESTAMP")
+        .bind(id, item.feature, item.name, item.displayName, item.state, item.healthcheckMode, item.allowSelfHealing ? 1 : 0, JSON.stringify(item.metadata))
+        .run();
+    // Replace relation rows as a unit so callers never have to reconcile stale declarations.
+    await db.batch([
+        db.prepare("DELETE FROM core_circuit_breaker_healthchecks WHERE circuit_breaker_id=?").bind(id),
+        db.prepare("DELETE FROM core_circuit_breaker_dependencies WHERE circuit_breaker_id=?").bind(id),
+        ...item.healthchecks.map((healthcheckId) => db.prepare("INSERT OR IGNORE INTO core_circuit_breaker_healthchecks (circuit_breaker_id,healthcheck_id) VALUES (?,?)").bind(id, healthcheckId)),
+        ...item.dependsOnCircuitBreakers.map((dependencyId) => db.prepare("INSERT OR IGNORE INTO core_circuit_breaker_dependencies (circuit_breaker_id,dependency_id) VALUES (?,?)").bind(id, dependencyId)),
+    ]);
+}
+export async function readCircuitBreaker(env, id, { who = "system:read" } = {}) {
+    const db = createD1(env, { who });
+    const breaker = await db.prepare("SELECT * FROM core_circuit_breakers WHERE id=?").bind(id).first();
+    if (!breaker)
+        return null;
+    const healthchecks = await db
+        .prepare("SELECT healthcheck_id FROM core_circuit_breaker_healthchecks WHERE circuit_breaker_id=?")
+        .bind(id)
+        .all();
+    const dependencies = await db
+        .prepare("SELECT dependency_id FROM core_circuit_breaker_dependencies WHERE circuit_breaker_id=?")
+        .bind(id)
+        .all();
+    return {
+        ...normalizeCircuitBreakerRow(breaker),
+        healthchecks: (healthchecks.results || []).map((row) => row.healthcheck_id),
+        depends_on_circuit_breakers: (dependencies.results || []).map((row) => row.dependency_id),
+    };
+}
+function normalizeCircuitBreakerRow(row) {
+    const { metadata_json: metadataJson, allow_self_healing: allowSelfHealing, ...breaker } = row;
+    let metadata = {};
+    try {
+        const parsed = JSON.parse(String(metadataJson || "{}"));
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+            metadata = parsed;
+    }
+    catch { /* Invalid legacy metadata is treated as empty. */ }
+    return { ...breaker, allow_self_healing: Boolean(allowSelfHealing), metadata };
+}
+export async function readCircuitBreakerIds(env, { who = "system:read" } = {}) {
+    const result = await createD1(env, { who })
+        .prepare("SELECT * FROM core_circuit_breakers ORDER BY feature,name")
+        .bind()
+        .all();
+    return (result.results || []).map((row) => row.id);
+}
+export async function writeCircuitBreakerState(env, id, state, { who = "system:read", reason } = {}) {
+    const db = createD1(env, { who });
+    const current = await db.prepare("SELECT metadata_json FROM core_circuit_breakers WHERE id=?").bind(id).first();
+    let metadata = {};
+    try {
+        const parsed = JSON.parse(current?.metadata_json || "{}");
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+            metadata = parsed;
+    }
+    catch { }
+    if (reason)
+        metadata.reason = reason;
+    await db.prepare("UPDATE core_circuit_breakers SET state=?,metadata_json=?,updated_at=CURRENT_TIMESTAMP WHERE id=?")
+        .bind(state, JSON.stringify(metadata), id)
+        .run();
+}
+export async function readHealthcheckStates(env, id, { who = "system:read" } = {}) {
+    const result = await createD1(env, { who })
+        .prepare("SELECT h.state FROM core_healthchecks h JOIN core_circuit_breaker_healthchecks b ON b.healthcheck_id=h.id WHERE b.circuit_breaker_id=?")
+        .bind(id)
+        .all();
+    return (result.results || []).map((row) => row.state);
+}
+export async function readDependencyStates(env, id, { who = "system:read" } = {}) {
+    const result = await createD1(env, { who })
+        .prepare("SELECT b.state FROM core_circuit_breakers b JOIN core_circuit_breaker_dependencies d ON d.dependency_id=b.id WHERE d.circuit_breaker_id=?")
+        .bind(id)
+        .all();
+    return (result.results || []).map((row) => row.state);
+}
+//# sourceMappingURL=d1.js.map

package/dist/core/circuits/d1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1.js","sourceRoot":"","sources":["../../../src/core/circuits/d1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAsB,MAAM,sBAAsB,CAAC;AAapE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAkB,EAClB,EAAU,EACV,IAA8B,EAC9B,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE;SACL,OAAO,CACN,0XAA0X,CAC3X;SACA,IAAI,CACH,EAAE,EACF,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC9B;SACA,GAAG,EAAE,CAAC;IAET,yFAAyF;IACzF,MAAM,EAAE,CAAC,KAAK,CAAC;QACb,EAAE,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/F,EAAE,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/F,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CACzC,EAAE,CAAC,OAAO,CAAC,0GAA0G,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAC/I;QACD,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CACpD,EAAE,CAAC,OAAO,CAAC,yGAAyG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAC7I;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAkB,EAClB,EAAU,EACV,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAqB,CAAC;IACvH,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,OAAO,CAAC,yFAAyF,CAAC;SAClG,IAAI,CAAC,EAAE,CAAC;SACR,GAAG,EAAoB,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,OAAO,CAAC,wFAAwF,CAAC;SACjG,IAAI,CAAC,EAAE,CAAC;SACR,GAAG,EAAmB,CAAC;IAE1B,OAAO;QACL,GAAG,0BAA0B,CAAC,OAAO,CAAC;QACtC,YAAY,EAAE,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3E,2BAA2B,EAAE,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAsB;IACxD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;IAC9F,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,QAAQ,GAAG,MAAiC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC;SACxC,OAAO,CAAC,2DAA2D,CAAC;SACpE,IAAI,EAAE;SACN,GAAG,EAAS,CAAC;IAChB,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAkB,EAClB,EAAU,EACV,KAAa,EACb,EAAE,GAAG,GAAG,aAAa,EAAE,MAAM,EAAE,GAA+C,EAAE;IAEhF,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAA8B,CAAC;IAC5I,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,CAAC;QAAC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAClK,IAAI,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,OAAO,CAAC,kGAAkG,CAAC;SACjH,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;SACzC,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,EAAU,EACV,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC;SACxC,OAAO,CAAC,wIAAwI,CAAC;SACjJ,IAAI,CAAC,EAAE,CAAC;SACR,GAAG,EAAY,CAAC;IACnB,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAkB,EAClB,EAAU,EACV,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC;SACxC,OAAO,CAAC,2IAA2I,CAAC;SACpJ,IAAI,CAAC,EAAE,CAAC;SACR,GAAG,EAAY,CAAC;IACnB,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC"}

package/dist/core/circuits/domain.d.ts

@@ -0,0 +1,7 @@
+import { AppDomain } from "../../domain/index.js";
+import type { D1Environment } from "../database/index.js";
+export declare class CircuitBreakersDomain extends AppDomain<unknown, D1Environment, unknown> {
+    constructor();
+}
+export declare const coreCircuitBreakers: CircuitBreakersDomain;
+//# sourceMappingURL=domain.d.ts.map

package/dist/core/circuits/domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA6B,MAAM,uBAAuB,CAAC;AAE7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D,qBAAa,qBAAsB,SAAQ,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC;IACnF,cAWC;CACF;AAsBD,eAAO,MAAM,mBAAmB,uBAA8B,CAAC"}

package/dist/core/circuits/domain.js

@@ -0,0 +1,36 @@
+import { AppDomain } from "../../domain/index.js";
+import { badRequest, notFound, readJsonObject, stringField } from "../../api/http.js";
+import { getCircuitBreaker, listCircuitBreakers, setCircuitBreaker } from "./service.js";
+export class CircuitBreakersDomain extends AppDomain {
+    constructor() {
+        super({ name: "core.circuit-breakers", basePath: "/api/admin/circuit-breakers", auth: "user", scopes: "operations:read" });
+        this.route({
+            method: "GET",
+            handler: ({ env, identity }) => listCircuitBreakers(env, { who: identity.who }).then((circuitBreakers) => Response.json({ circuit_breakers: circuitBreakers })),
+        });
+        this.route({ method: "GET", path: "/:circuitId", handler: get });
+        this.route({ method: "PUT", path: "/:circuitId", csrf: true, scopes: "operations:manage", handler: set });
+    }
+}
+async function get({ env, identity, params }) {
+    const circuit = await getCircuitBreaker(env, params.circuitId, { who: identity.who });
+    return circuit
+        ? Response.json({ circuit_breaker: circuit })
+        : notFound("Circuit breaker not found");
+}
+async function set({ request, env, identity, params }) {
+    try {
+        const state = stringField(await readJsonObject(request), "state");
+        if (!state)
+            return badRequest("state is required");
+        const circuit = await setCircuitBreaker(env, params.circuitId, state, { who: identity.who });
+        return circuit
+            ? Response.json({ circuit_breaker: circuit })
+            : notFound("Circuit breaker not found");
+    }
+    catch (error) {
+        return badRequest(error instanceof Error ? error.message : "Invalid circuit breaker state");
+    }
+}
+export const coreCircuitBreakers = new CircuitBreakersDomain();
+//# sourceMappingURL=domain.js.map

package/dist/core/circuits/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../../../src/core/circuits/domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA6B,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGzF,MAAM,OAAO,qBAAsB,SAAQ,SAA0C;IACnF;QACE,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,6BAA6B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3H,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC7B,mBAAmB,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CACrD;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5G,CAAC;CACF;AAED,KAAK,UAAU,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAW;IACnD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,OAAO,OAAO;QACZ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;QAC7C,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAW;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7F,OAAO,OAAO;YACZ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAC7C,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,EAAE,CAAC"}

package/dist/core/circuits/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./availability.js";
+export * from "./model.js";
+export * from "./validation.js";
+export * from "./service.js";
+export * from "./domain.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/circuits/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/core/circuits/index.js

@@ -0,0 +1,6 @@
+export * from "./availability.js";
+export * from "./model.js";
+export * from "./validation.js";
+export * from "./service.js";
+export * from "./domain.js";
+//# sourceMappingURL=index.js.map

package/dist/core/circuits/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/circuits/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/core/circuits/model.d.ts

@@ -0,0 +1,50 @@
+import type { CircuitBreakerState, HealthcheckMode } from "../constants.js";
+export interface CircuitBreakerInput {
+    id?: string;
+    feature?: string;
+    name?: string;
+    displayName?: string;
+    state?: string;
+    healthcheckMode?: string;
+    allowSelfHealing?: boolean;
+    healthchecks?: readonly unknown[];
+    dependsOnCircuitBreakers?: readonly unknown[];
+    metadata?: Record<string, unknown>;
+}
+export interface NormalizedCircuitBreaker {
+    feature: string;
+    name: string;
+    displayName: string;
+    state: CircuitBreakerState;
+    healthcheckMode: HealthcheckMode;
+    allowSelfHealing: boolean;
+    healthchecks: string[];
+    dependsOnCircuitBreakers: string[];
+    metadata: Record<string, unknown>;
+}
+export interface CircuitBreakerRow {
+    id: string;
+    feature: string;
+    name: string;
+    display_name: string;
+    state: CircuitBreakerState;
+    healthcheck_mode: HealthcheckMode;
+    allow_self_healing: number | boolean;
+    metadata_json?: string;
+    created_at?: string;
+    updated_at?: string;
+}
+export interface CircuitBreaker extends Omit<CircuitBreakerRow, "allow_self_healing" | "metadata_json"> {
+    allow_self_healing: boolean;
+    metadata: Record<string, unknown>;
+    healthchecks: string[];
+    depends_on_circuit_breakers: string[];
+}
+export interface CircuitAccessOptions {
+    who?: string;
+}
+export interface CircuitUpdateOptions extends CircuitAccessOptions {
+    automated?: boolean;
+    reason?: string;
+}
+//# sourceMappingURL=model.d.ts.map

package/dist/core/circuits/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,wBAAwB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,gBAAgB,EAAE,eAAe,CAAC;IAClC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,GAAG,eAAe,CAAC;IACrG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2BAA2B,EAAE,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/core/circuits/model.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=model.js.map

package/dist/core/circuits/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/core/circuits/model.ts"],"names":[],"mappings":""}

package/dist/core/circuits/service.d.ts

@@ -0,0 +1,9 @@
+import type { D1Environment } from "../database/index.js";
+import { readCircuitBreaker } from "./d1.js";
+import type { CircuitAccessOptions, CircuitBreaker, CircuitBreakerInput, CircuitUpdateOptions } from "./model.js";
+export declare function registerCircuitBreaker(env: D1Environment, input: CircuitBreakerInput, options?: CircuitAccessOptions): Promise<CircuitBreaker | null>;
+export declare const getCircuitBreaker: typeof readCircuitBreaker;
+export declare function listCircuitBreakers(env: D1Environment, options?: CircuitAccessOptions): Promise<CircuitBreaker[]>;
+export declare function setCircuitBreaker(env: D1Environment, id: string, state: unknown, { who, automated, reason }?: CircuitUpdateOptions): Promise<CircuitBreaker | null>;
+export declare function evaluateCircuitBreaker(env: D1Environment, id: string, { who }?: CircuitAccessOptions): Promise<CircuitBreaker | null>;
+//# sourceMappingURL=service.d.ts.map

package/dist/core/circuits/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EACL,kBAAkB,EAMnB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAGpB,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAKhC;AAED,eAAO,MAAM,iBAAiB,2BAAqB,CAAC;AAEpD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,aAAa,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CAI3B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,EACd,EAAE,GAAmB,EAAE,SAAiB,EAAE,MAAM,EAAE,GAAE,oBAAyB,GAC5E,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqBhC;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,MAAM,EACV,EAAE,GAAmB,EAAE,GAAE,oBAAyB,GACjD,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqBhC"}

package/dist/core/circuits/service.js

@@ -0,0 +1,63 @@
+import { auditLog } from "../events/index.js";
+import { createD1 } from "../database/index.js";
+import { readCircuitBreaker, readCircuitBreakerIds, readDependencyStates, readHealthcheckStates, saveCircuitBreaker, writeCircuitBreakerState, } from "./d1.js";
+import { circuitBreakerState, normalizeCircuitBreaker } from "./validation.js";
+export async function registerCircuitBreaker(env, input, options = {}) {
+    const item = normalizeCircuitBreaker(input);
+    const id = String(input.id || `${item.feature}:${item.name}`);
+    await saveCircuitBreaker(env, id, item, options);
+    return getCircuitBreaker(env, id, options);
+}
+export const getCircuitBreaker = readCircuitBreaker;
+export async function listCircuitBreakers(env, options = {}) {
+    const ids = await readCircuitBreakerIds(env, options);
+    const breakers = await Promise.all(ids.map((id) => getCircuitBreaker(env, id, options)));
+    return breakers.filter((breaker) => breaker !== null);
+}
+export async function setCircuitBreaker(env, id, state, { who = "system:read", automated = false, reason } = {}) {
+    const next = circuitBreakerState(state);
+    const current = await getCircuitBreaker(env, id, { who });
+    if (!current)
+        return null;
+    const mayHeal = current.state === "tripped" && next === "on" && Boolean(current.allow_self_healing);
+    const mayTrip = current.state === "on" && next === "tripped";
+    if (!automated && next === "tripped")
+        throw new TypeError("Circuit breakers can only be tripped by automation.");
+    if (automated && !(mayTrip || mayHeal))
+        return current;
+    if (automated && next === "off")
+        return current;
+    const transitionReason = reason || (automated ? "Automated health evaluation changed the circuit state." : `Administrator selected state '${next}'.`);
+    await writeCircuitBreakerState(env, id, next, { who, reason: transitionReason });
+    auditLog({
+        who,
+        operation: "update",
+        resource: `feature:${current.feature} circuit-breaker:${current.name}`,
+        details: { state: next, reason: transitionReason, automated },
+    });
+    if (env.DB)
+        await createD1(env, { who }).prepare("INSERT INTO core_audit_log (id,who,operation,resource,details_json) VALUES (?,?,?,?,?)").bind(crypto.randomUUID(), who, "state", `circuit-breaker:${current.feature}`, JSON.stringify({ circuit: current.name, state: next, reason: transitionReason, automated })).run();
+    return getCircuitBreaker(env, id, { who });
+}
+export async function evaluateCircuitBreaker(env, id, { who = "system:read" } = {}) {
+    const breaker = await getCircuitBreaker(env, id, { who });
+    if (!breaker)
+        return null;
+    const [healthcheckStates, dependencyStates] = await Promise.all([
+        readHealthcheckStates(env, id, { who }),
+        readDependencyStates(env, id, { who }),
+    ]);
+    const failing = healthcheckStates.map((state) => state === "red");
+    const dependencyFailed = dependencyStates.some((state) => state === "tripped");
+    const healthcheckFailed = failing.length > 0 &&
+        (breaker.healthcheck_mode === "all" ? failing.every(Boolean) : failing.some(Boolean));
+    const shouldTrip = dependencyFailed || healthcheckFailed;
+    if (breaker.state === "on" && shouldTrip) {
+        return setCircuitBreaker(env, id, "tripped", { who, automated: true, reason: `Breaker tripped because ${dependencyFailed ? "a dependent circuit breaker is tripped" : "healthcheck evaluation failed"}.` });
+    }
+    if (breaker.state === "tripped" && !shouldTrip && breaker.allow_self_healing) {
+        return setCircuitBreaker(env, id, "on", { who, automated: true, reason: "All monitored dependencies and healthchecks have recovered." });
+    }
+    return breaker;
+}
+//# sourceMappingURL=service.js.map

package/dist/core/circuits/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/core/circuits/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,SAAS,CAAC;AAOjB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAkB,EAClB,KAA0B,EAC1B,OAAO,GAAyB,EAAE;IAElC,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,OAAO,GAAyB,EAAE;IAElC,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAA6B,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAkB,EAClB,EAAU,EACV,KAAc,EACd,EAAE,GAAG,GAAG,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,EAAE,GAAyB,EAAE;IAE7E,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC;IAC7D,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IACjH,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvD,IAAI,SAAS,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,iCAAiC,IAAI,IAAI,CAAC,CAAC;IACtJ,MAAM,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,QAAQ,CAAC;QACP,GAAG;QACH,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,WAAW,OAAO,CAAC,OAAO,oBAAoB,OAAO,CAAC,IAAI,EAAE;QACtE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE;KAC9D,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5T,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAkB,EAClB,EAAU,EACV,EAAE,GAAG,GAAG,aAAa,EAAE,GAAyB,EAAE;IAElD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9D,qBAAqB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACvC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC/E,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QAC1C,CAAC,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,gBAAgB,IAAI,iBAAiB,CAAC;IAEzD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;QACzC,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,gBAAgB,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IAC9M,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7E,OAAO,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/circuits/validation.d.ts

@@ -0,0 +1,4 @@
+import type { CircuitBreakerInput, NormalizedCircuitBreaker } from "./model.js";
+export declare function normalizeCircuitBreaker(input?: CircuitBreakerInput): NormalizedCircuitBreaker;
+export declare function circuitBreakerState(value: unknown): NormalizedCircuitBreaker["state"];
+//# sourceMappingURL=validation.d.ts.map

package/dist/core/circuits/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/core/circuits/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,uBAAuB,CACrC,KAAK,GAAE,mBAAwB,GAC9B,wBAAwB,CA2B1B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAMrF"}

package/dist/core/circuits/validation.js

@@ -0,0 +1,35 @@
+import { CIRCUIT_BREAKER_STATES, HEALTHCHECK_MODES } from "../constants.js";
+export function normalizeCircuitBreaker(input = {}) {
+    const state = String(input.state || "off").toLowerCase();
+    const healthcheckMode = String(input.healthcheckMode || "any").toLowerCase();
+    if (!CIRCUIT_BREAKER_STATES.includes(state)) {
+        throw new Error("Circuit breaker state must be off, tripped, or on");
+    }
+    if (!HEALTHCHECK_MODES.includes(healthcheckMode)) {
+        throw new Error("Circuit breaker healthcheckMode must be any or all");
+    }
+    if (!input.feature || !input.name || !input.displayName) {
+        throw new Error("Circuit breakers require feature, name, and displayName");
+    }
+    return {
+        feature: String(input.feature),
+        name: String(input.name),
+        displayName: String(input.displayName),
+        state: state,
+        healthcheckMode: healthcheckMode,
+        allowSelfHealing: Boolean(input.allowSelfHealing),
+        healthchecks: Array.isArray(input.healthchecks) ? input.healthchecks.map(String) : [],
+        dependsOnCircuitBreakers: Array.isArray(input.dependsOnCircuitBreakers)
+            ? input.dependsOnCircuitBreakers.map(String)
+            : [],
+        metadata: input.metadata || {},
+    };
+}
+export function circuitBreakerState(value) {
+    const state = String(value).toLowerCase();
+    if (!CIRCUIT_BREAKER_STATES.includes(state)) {
+        throw new Error("Circuit breaker state must be off, tripped, or on");
+    }
+    return state;
+}
+//# sourceMappingURL=validation.js.map

package/dist/core/circuits/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/core/circuits/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAM5E,MAAM,UAAU,uBAAuB,CACrC,KAAK,GAAwB,EAAE;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7E,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,eAAwB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QACtC,KAAK,EAAE,KAA0C;QACjD,eAAe,EAAE,eAA8D;QAC/E,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACjD,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACrF,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC;YACrE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,EAAE;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAA0C,CAAC;AACpD,CAAC"}

package/dist/core/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const HEALTHCHECK_STATES: readonly ["red", "yellow", "green"];
+export declare const CIRCUIT_BREAKER_STATES: readonly ["off", "tripped", "on"];
+export declare const HEALTHCHECK_MODES: readonly ["any", "all"];
+export declare const BASE_PACKAGE_NAME = "@agilesyndrome/cf-genai-base";
+export declare const BASE_VERSION = "5.0.3";
+export type HealthcheckState = (typeof HEALTHCHECK_STATES)[number];
+export type CircuitBreakerState = (typeof CIRCUIT_BREAKER_STATES)[number];
+export type HealthcheckMode = (typeof HEALTHCHECK_MODES)[number];
+//# sourceMappingURL=constants.d.ts.map

package/dist/core/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/core/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,YAAI,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACtE,eAAO,MAAM,sBAAsB,YAAI,KAAK,EAAE,SAAS,EAAE,IAAI,CAAU,CAAC;AACxE,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,KAAK,CAAU,CAAC;AACzD,eAAO,MAAM,iBAAiB,iCAAiC,CAAC;AAChE,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/{src → dist}/core/constants.js

@@ -2,4 +2,5 @@ export const HEALTHCHECK_STATES = ["red", "yellow", "green"];
 export const CIRCUIT_BREAKER_STATES = ["off", "tripped", "on"];
 export const HEALTHCHECK_MODES = ["any", "all"];
 export const BASE_PACKAGE_NAME = "@agilesyndrome/cf-genai-base";
-export const BASE_VERSION = "4.1.3";
+export const BASE_VERSION = "5.0.3";
+//# sourceMappingURL=constants.js.map

package/dist/core/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/core/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC"}

package/dist/core/database/index.d.ts

@@ -0,0 +1,14 @@
+export interface D1Environment {
+    DB?: D1Database;
+}
+export declare function hasD1Binding(value: unknown): value is D1Environment & {
+    DB: D1Database;
+};
+export interface D1AuditOptions {
+    who?: string;
+}
+/** Return the environment's D1 binding with audit logging around executing methods. */
+export declare function createD1(env: unknown, { who }?: D1AuditOptions): D1Database;
+export declare function auditedD1(db: D1Database, who?: string): D1Database;
+export declare function auditedEnv<Env extends D1Environment>(env: Env, who?: string): Env;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/database/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,UAAU,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,GAAG;IAAE,EAAE,EAAE,UAAU,CAAA;CAAE,CAKxF;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,uFAAuF;AACvF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAmB,EAAE,GAAE,cAAmB,GAAG,UAAU,CAG/F;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,SAAgB,GAAG,UAAU,CAmBzE;AAED,wBAAgB,UAAU,CAAC,GAAG,SAAS,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAgB,GAAG,GAAG,CAKxF"}

package/dist/core/database/index.js

@@ -0,0 +1,65 @@
+import { auditLog, eventLog } from "../events/index.js";
+export function hasD1Binding(value) {
+    return value !== null
+        && typeof value === "object"
+        && "DB" in value
+        && Boolean(Reflect.get(value, "DB"));
+}
+/** Return the environment's D1 binding with audit logging around executing methods. */
+export function createD1(env, { who = "system:read" } = {}) {
+    if (!hasD1Binding(env))
+        throw new Error("A DB binding is required");
+    return auditedD1(env.DB, who);
+}
+export function auditedD1(db, who = "system:read") {
+    return new Proxy(db, {
+        get(target, property, receiver) {
+            const value = Reflect.get(target, property, receiver);
+            if (property === "prepare") {
+                return (sql) => auditedStatement(target.prepare(sql), who, sql);
+            }
+            if (property === "batch") {
+                return (statements) => {
+                    auditD1(who, "BATCH");
+                    const batch = Reflect.get(target, "batch");
+                    return typeof batch === "function"
+                        ? batch.call(target, statements)
+                        : Promise.all(statements.map((statement) => statement.run()));
+                };
+            }
+            return typeof value === "function" ? value.bind(target) : value;
+        },
+    });
+}
+export function auditedEnv(env, who = "system:read") {
+    if (!env.DB)
+        return env;
+    const result = Object.create(env);
+    result.DB = auditedD1(env.DB, who);
+    return result;
+}
+function auditedStatement(statement, who, sql) {
+    return new Proxy(statement, {
+        get(target, property, receiver) {
+            const value = Reflect.get(target, property, receiver);
+            if (property === "bind" && typeof value === "function") {
+                return (...args) => auditedStatement(Reflect.apply(value, target, args), who, sql);
+            }
+            if (typeof property === "string"
+                && ["run", "first", "all", "raw"].includes(property)
+                && typeof value === "function") {
+                return (...args) => {
+                    auditD1(who, sql);
+                    return value.apply(target, args);
+                };
+            }
+            return typeof value === "function" ? value.bind(target) : value;
+        },
+    });
+}
+function auditD1(who, sql) {
+    const operation = String(sql).trim().match(/^(SELECT|INSERT|UPDATE|DELETE|REPLACE|WITH)/i)?.[1]?.toLowerCase() ?? "execute";
+    eventLog("debug", "d1.operation", { who, operation });
+    auditLog({ who, operation, resource: "d1" });
+}
+//# sourceMappingURL=index.js.map

package/dist/core/database/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/database/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAMxD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI;WAChB,OAAO,KAAK,KAAK,QAAQ;WACzB,IAAI,IAAI,KAAK;WACb,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAMD,uFAAuF;AACvF,MAAM,UAAU,QAAQ,CAAC,GAAY,EAAE,EAAE,GAAG,GAAG,aAAa,EAAE,GAAmB,EAAE;IACjF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAc,EAAE,GAAG,GAAG,aAAa;IAC3D,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,OAAO,CAAC,UAAiC,EAAE,EAAE;oBAC3C,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAoC,CAAC;oBAC9E,OAAO,OAAO,KAAK,KAAK,UAAU;wBAChC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;wBAChC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAClE,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAA4B,GAAQ,EAAE,GAAG,GAAG,aAAa;IACjF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA8B,EAAE,GAAW,EAAE,GAAW;IAChF,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE;QAC1B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,gBAAgB,CAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAwB,EACzD,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IACE,OAAO,QAAQ,KAAK,QAAQ;mBACzB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;mBACjD,OAAO,KAAK,KAAK,UAAU,EAC9B,CAAC;gBACD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBAClB,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnC,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,SAAS,CAAC;IAC5H,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/core/domains.d.ts

@@ -0,0 +1,2 @@
+export declare const CORE_DOMAINS: readonly [import("./healthchecks/domain.js").HealthchecksDomain, import("./circuits/domain.js").CircuitBreakersDomain, import("./jobs/domain.js").JobsDomain, import("./events/domain.js").LiveEventsDomain, import("./events/audit.js").AuditLogDomain];
+//# sourceMappingURL=domains.d.ts.map