@aletheia-dev/core 0.1.0

package/dist/node.d.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import pino from 'pino';
+import { a as Logger } from './logger-DFA8nkvG.js';
+
+declare const EnvSchema: z.ZodObject<{
+    NODE_ENV: z.ZodDefault<z.ZodEnum<{
+        development: "development";
+        test: "test";
+        production: "production";
+    }>>;
+    DATABASE_URL: z.ZodURL;
+    TEMPORAL_ADDRESS: z.ZodDefault<z.ZodString>;
+    TEMPORAL_NAMESPACE: z.ZodDefault<z.ZodString>;
+    TEMPORAL_TASK_QUEUE: z.ZodDefault<z.ZodString>;
+    TEMPORAL_BACKTEST_TASK_QUEUE: z.ZodDefault<z.ZodString>;
+    TEMPORAL_PLUGIN_TASK_QUEUE: z.ZodDefault<z.ZodString>;
+    WEBHOOK_PUBLIC_URL: z.ZodOptional<z.ZodURL>;
+    API_HOST: z.ZodDefault<z.ZodString>;
+    API_PORT: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    API_CORS_ORIGINS: z.ZodDefault<z.ZodString>;
+    LOG_LEVEL: z.ZodDefault<z.ZodEnum<{
+        error: "error";
+        trace: "trace";
+        debug: "debug";
+        info: "info";
+        warn: "warn";
+        fatal: "fatal";
+    }>>;
+    DATABASE_APP_URL: z.ZodOptional<z.ZodURL>;
+    ZITADEL_ISSUER: z.ZodOptional<z.ZodURL>;
+    ZITADEL_PROJECT_ID: z.ZodOptional<z.ZodString>;
+    ZITADEL_API_CLIENT_ID: z.ZodOptional<z.ZodString>;
+    ZITADEL_API_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+    ZITADEL_DIRECTORY_PAT: z.ZodOptional<z.ZodString>;
+    SUBMISSION_TOKEN_SECRET: z.ZodOptional<z.ZodString>;
+    COLLECTION_FLOW_URL: z.ZodOptional<z.ZodURL>;
+    STORAGE_ENDPOINT: z.ZodOptional<z.ZodURL>;
+    STORAGE_PUBLIC_ENDPOINT: z.ZodOptional<z.ZodURL>;
+    STORAGE_REGION: z.ZodDefault<z.ZodString>;
+    STORAGE_BUCKET: z.ZodDefault<z.ZodString>;
+    STORAGE_ACCESS_KEY: z.ZodOptional<z.ZodString>;
+    STORAGE_SECRET_KEY: z.ZodOptional<z.ZodString>;
+    STORAGE_CORS_ORIGINS: z.ZodOptional<z.ZodString>;
+    OTEL_EXPORTER_OTLP_ENDPOINT: z.ZodOptional<z.ZodURL>;
+    OTEL_SERVICE_NAME: z.ZodOptional<z.ZodString>;
+    OTEL_TRACES_SAMPLER: z.ZodOptional<z.ZodString>;
+    OTEL_TRACES_SAMPLER_ARG: z.ZodOptional<z.ZodString>;
+    OTEL_SDK_DISABLED: z.ZodDefault<z.ZodCoercedBoolean<unknown>>;
+    OTEL_PG_STATEMENTS: z.ZodDefault<z.ZodCoercedBoolean<unknown>>;
+    WORKER_HEALTH_PORT: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    SCHEMA_CHECK: z.ZodOptional<z.ZodEnum<{
+        strict: "strict";
+        lenient: "lenient";
+    }>>;
+    METRICS_PORT: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    DOCUMENT_SCANNER: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+    }>>;
+}, z.core.$strip>;
+type Env = z.infer<typeof EnvSchema>;
+/** Validates process.env once at startup so apps fail fast on missing configuration. */
+declare function loadEnv(source?: NodeJS.ProcessEnv): Env;
+
+/**
+ * Keys whose values are never written to logs. Wildcards cover one level of nesting, so
+ * objects logged as `{ input: { token } }` are covered; deeper paths need an explicit entry.
+ * `callbackUrl` carries no secret and is left readable; merchant `link`s carry tokens.
+ */
+declare const DEFAULT_REDACT_PATHS: readonly string[];
+declare const REDACT_CENSOR = "[redacted]";
+interface CreateLoggerOptions {
+    name: string;
+    level?: string;
+    pretty?: boolean;
+    /** `service`, `version` and `env` base bindings on every line, when given. */
+    service?: string;
+    version?: string;
+    env?: string;
+    /** Extra redaction paths, appended to `DEFAULT_REDACT_PATHS`. */
+    redact?: readonly string[];
+    /** Write destination; defaults to stdout. Tests pass a stream. */
+    destination?: pino.DestinationStream;
+}
+declare function createLogger({ name, level, pretty, service, version, env, redact, destination, }: CreateLoggerOptions): Logger;
+
+export { type CreateLoggerOptions, DEFAULT_REDACT_PATHS, type Env, EnvSchema, REDACT_CENSOR, createLogger, loadEnv };

package/dist/node.js

@@ -0,0 +1,138 @@
+// src/env.ts
+import { z } from "zod";
+var EnvSchema = z.object({
+  NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
+  DATABASE_URL: z.url(),
+  TEMPORAL_ADDRESS: z.string().default("localhost:7233"),
+  TEMPORAL_NAMESPACE: z.string().default("default"),
+  TEMPORAL_TASK_QUEUE: z.string().default("aletheia-workflows"),
+  /** Long-running backtests run on their own queue so they never starve decisions. */
+  TEMPORAL_BACKTEST_TASK_QUEUE: z.string().default("aletheia-backtests"),
+  /** Plugin invocations run on their own queue so vendor latency never starves decisions. */
+  TEMPORAL_PLUGIN_TASK_QUEUE: z.string().default("aletheia-plugins"),
+  /** Public base URL vendors call back on (`<url>/webhooks/plugins/<plugin>`). */
+  WEBHOOK_PUBLIC_URL: z.url().optional(),
+  API_HOST: z.string().default("0.0.0.0"),
+  API_PORT: z.coerce.number().int().positive().default(4e3),
+  /** Browser origins allowed to call the API (the three apps by default); comma-separated. */
+  API_CORS_ORIGINS: z.string().default("http://localhost:5173,http://localhost:5174,http://localhost:5175"),
+  LOG_LEVEL: z.enum(["trace", "debug", "info", "warn", "error", "fatal"]).default("info"),
+  /** Non-owner connection used by the API and worker so row-level security applies. */
+  DATABASE_APP_URL: z.url().optional(),
+  /** Identity provider (Zitadel). The API refuses to start without the required subset. */
+  ZITADEL_ISSUER: z.url().optional(),
+  ZITADEL_PROJECT_ID: z.string().min(1).optional(),
+  ZITADEL_API_CLIENT_ID: z.string().min(1).optional(),
+  ZITADEL_API_CLIENT_SECRET: z.string().min(1).optional(),
+  /** PAT of the read-only machine user the reviewer directory uses; unset disables the directory. */
+  ZITADEL_DIRECTORY_PAT: z.string().min(1).optional(),
+  /** Signs the links end customers use to open a collection flow. */
+  SUBMISSION_TOKEN_SECRET: z.string().min(32).optional(),
+  /** Public base URL of the collection-flow app, used to build those links. */
+  COLLECTION_FLOW_URL: z.url().optional(),
+  /** S3-compatible object storage for documents (Garage in the dev stack). Unset disables documents. */
+  STORAGE_ENDPOINT: z.url().optional(),
+  /** Endpoint browsers reach for direct uploads and downloads; defaults to STORAGE_ENDPOINT. */
+  STORAGE_PUBLIC_ENDPOINT: z.url().optional(),
+  STORAGE_REGION: z.string().default("garage"),
+  STORAGE_BUCKET: z.string().default("aletheia-documents"),
+  STORAGE_ACCESS_KEY: z.string().optional(),
+  STORAGE_SECRET_KEY: z.string().optional(),
+  /** Comma-separated browser origins allowed to upload directly (dev stack: the collection-flow and back-office apps). */
+  STORAGE_CORS_ORIGINS: z.string().optional(),
+  /** OTLP/HTTP collector base URL; unset disables tracing and metric export entirely. */
+  OTEL_EXPORTER_OTLP_ENDPOINT: z.url().optional(),
+  /** Overrides the default service name (`aletheia-api`, `aletheia-worker`). */
+  OTEL_SERVICE_NAME: z.string().min(1).optional(),
+  OTEL_TRACES_SAMPLER: z.string().min(1).optional(),
+  OTEL_TRACES_SAMPLER_ARG: z.string().min(1).optional(),
+  OTEL_SDK_DISABLED: z.coerce.boolean().default(false),
+  /** Include SQL statement text on database spans (postgres.js). */
+  OTEL_PG_STATEMENTS: z.coerce.boolean().default(false),
+  /** The worker's `GET /healthz` port; unset disables the health server. */
+  WORKER_HEALTH_PORT: z.coerce.number().int().positive().optional(),
+  /**
+   * What to do when the database schema is behind the bundled migrations: `strict` refuses to
+   * start (production default), `lenient` logs a warning (development default).
+   */
+  SCHEMA_CHECK: z.enum(["strict", "lenient"]).optional(),
+  /** Serves Prometheus `/metrics` on this port when set (API and worker use their own). */
+  METRICS_PORT: z.coerce.number().int().positive().optional(),
+  /** Document scanner engine; `none` marks every document clean (ClamAV is deferred). */
+  DOCUMENT_SCANNER: z.enum(["none"]).default("none")
+});
+function loadEnv(source = process.env) {
+  const result = EnvSchema.safeParse(source);
+  if (!result.success) {
+    const problems = result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+    throw new Error(`Invalid environment: ${problems}`);
+  }
+  return result.data;
+}
+
+// src/pino-logger.ts
+import { hostname } from "os";
+import { trace } from "@opentelemetry/api";
+import pino from "pino";
+var DEFAULT_REDACT_PATHS = [
+  "req.headers.authorization",
+  "headers.authorization",
+  "authorization",
+  "*.authorization",
+  "token",
+  "*.token",
+  "secrets",
+  "*.secrets",
+  "apiKey",
+  "*.apiKey",
+  "secretKey",
+  "*.secretKey",
+  "webhookSecret",
+  "*.webhookSecret",
+  "password",
+  "*.password",
+  "submissionUrl",
+  "*.submissionUrl",
+  "link",
+  "*.link"
+];
+var REDACT_CENSOR = "[redacted]";
+function traceBindings() {
+  const span = trace.getActiveSpan();
+  if (!span || !span.isRecording()) return {};
+  const { traceId, spanId } = span.spanContext();
+  return { trace_id: traceId, span_id: spanId };
+}
+function createLogger({
+  name,
+  level = "info",
+  pretty = false,
+  service,
+  version,
+  env,
+  redact = [],
+  destination
+}) {
+  const base = { pid: process.pid, hostname: hostname() };
+  if (service !== void 0) base.service = service;
+  if (version !== void 0) base.version = version;
+  if (env !== void 0) base.env = env;
+  const options = {
+    name,
+    level,
+    base,
+    mixin: traceBindings,
+    redact: { paths: [...DEFAULT_REDACT_PATHS, ...redact], censor: REDACT_CENSOR },
+    ...pretty ? { transport: { target: "pino-pretty", options: { colorize: true } } } : {}
+  };
+  const logger = destination ? pino(options, destination) : pino(options);
+  return logger;
+}
+export {
+  DEFAULT_REDACT_PATHS,
+  EnvSchema,
+  REDACT_CENSOR,
+  createLogger,
+  loadEnv
+};
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/env.ts","../src/pino-logger.ts"],"sourcesContent":["import { z } from 'zod';\n\nexport const EnvSchema = z.object({\n  NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),\n  DATABASE_URL: z.url(),\n  TEMPORAL_ADDRESS: z.string().default('localhost:7233'),\n  TEMPORAL_NAMESPACE: z.string().default('default'),\n  TEMPORAL_TASK_QUEUE: z.string().default('aletheia-workflows'),\n  /** Long-running backtests run on their own queue so they never starve decisions. */\n  TEMPORAL_BACKTEST_TASK_QUEUE: z.string().default('aletheia-backtests'),\n  /** Plugin invocations run on their own queue so vendor latency never starves decisions. */\n  TEMPORAL_PLUGIN_TASK_QUEUE: z.string().default('aletheia-plugins'),\n  /** Public base URL vendors call back on (`<url>/webhooks/plugins/<plugin>`). */\n  WEBHOOK_PUBLIC_URL: z.url().optional(),\n  API_HOST: z.string().default('0.0.0.0'),\n  API_PORT: z.coerce.number().int().positive().default(4000),\n  /** Browser origins allowed to call the API (the three apps by default); comma-separated. */\n  API_CORS_ORIGINS: z\n    .string()\n    .default('http://localhost:5173,http://localhost:5174,http://localhost:5175'),\n  LOG_LEVEL: z.enum(['trace', 'debug', 'info', 'warn', 'error', 'fatal']).default('info'),\n  /** Non-owner connection used by the API and worker so row-level security applies. */\n  DATABASE_APP_URL: z.url().optional(),\n  /** Identity provider (Zitadel). The API refuses to start without the required subset. */\n  ZITADEL_ISSUER: z.url().optional(),\n  ZITADEL_PROJECT_ID: z.string().min(1).optional(),\n  ZITADEL_API_CLIENT_ID: z.string().min(1).optional(),\n  ZITADEL_API_CLIENT_SECRET: z.string().min(1).optional(),\n  /** PAT of the read-only machine user the reviewer directory uses; unset disables the directory. */\n  ZITADEL_DIRECTORY_PAT: z.string().min(1).optional(),\n  /** Signs the links end customers use to open a collection flow. */\n  SUBMISSION_TOKEN_SECRET: z.string().min(32).optional(),\n  /** Public base URL of the collection-flow app, used to build those links. */\n  COLLECTION_FLOW_URL: z.url().optional(),\n  /** S3-compatible object storage for documents (Garage in the dev stack). Unset disables documents. */\n  STORAGE_ENDPOINT: z.url().optional(),\n  /** Endpoint browsers reach for direct uploads and downloads; defaults to STORAGE_ENDPOINT. */\n  STORAGE_PUBLIC_ENDPOINT: z.url().optional(),\n  STORAGE_REGION: z.string().default('garage'),\n  STORAGE_BUCKET: z.string().default('aletheia-documents'),\n  STORAGE_ACCESS_KEY: z.string().optional(),\n  STORAGE_SECRET_KEY: z.string().optional(),\n  /** Comma-separated browser origins allowed to upload directly (dev stack: the collection-flow and back-office apps). */\n  STORAGE_CORS_ORIGINS: z.string().optional(),\n  /** OTLP/HTTP collector base URL; unset disables tracing and metric export entirely. */\n  OTEL_EXPORTER_OTLP_ENDPOINT: z.url().optional(),\n  /** Overrides the default service name (`aletheia-api`, `aletheia-worker`). */\n  OTEL_SERVICE_NAME: z.string().min(1).optional(),\n  OTEL_TRACES_SAMPLER: z.string().min(1).optional(),\n  OTEL_TRACES_SAMPLER_ARG: z.string().min(1).optional(),\n  OTEL_SDK_DISABLED: z.coerce.boolean().default(false),\n  /** Include SQL statement text on database spans (postgres.js). */\n  OTEL_PG_STATEMENTS: z.coerce.boolean().default(false),\n  /** The worker's `GET /healthz` port; unset disables the health server. */\n  WORKER_HEALTH_PORT: z.coerce.number().int().positive().optional(),\n  /**\n   * What to do when the database schema is behind the bundled migrations: `strict` refuses to\n   * start (production default), `lenient` logs a warning (development default).\n   */\n  SCHEMA_CHECK: z.enum(['strict', 'lenient']).optional(),\n  /** Serves Prometheus `/metrics` on this port when set (API and worker use their own). */\n  METRICS_PORT: z.coerce.number().int().positive().optional(),\n  /** Document scanner engine; `none` marks every document clean (ClamAV is deferred). */\n  DOCUMENT_SCANNER: z.enum(['none']).default('none'),\n});\nexport type Env = z.infer<typeof EnvSchema>;\n\n/** Validates process.env once at startup so apps fail fast on missing configuration. */\nexport function loadEnv(source: NodeJS.ProcessEnv = process.env): Env {\n  const result = EnvSchema.safeParse(source);\n  if (!result.success) {\n    const problems = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ');\n    throw new Error(`Invalid environment: ${problems}`);\n  }\n  return result.data;\n}\n","import { hostname } from 'node:os';\nimport { trace } from '@opentelemetry/api';\nimport pino from 'pino';\nimport type { Logger } from './logger.js';\n\n/**\n * Keys whose values are never written to logs. Wildcards cover one level of nesting, so\n * objects logged as `{ input: { token } }` are covered; deeper paths need an explicit entry.\n * `callbackUrl` carries no secret and is left readable; merchant `link`s carry tokens.\n */\nexport const DEFAULT_REDACT_PATHS: readonly string[] = [\n  'req.headers.authorization',\n  'headers.authorization',\n  'authorization',\n  '*.authorization',\n  'token',\n  '*.token',\n  'secrets',\n  '*.secrets',\n  'apiKey',\n  '*.apiKey',\n  'secretKey',\n  '*.secretKey',\n  'webhookSecret',\n  '*.webhookSecret',\n  'password',\n  '*.password',\n  'submissionUrl',\n  '*.submissionUrl',\n  'link',\n  '*.link',\n];\n\nexport const REDACT_CENSOR = '[redacted]';\n\nexport interface CreateLoggerOptions {\n  name: string;\n  level?: string;\n  pretty?: boolean;\n  /** `service`, `version` and `env` base bindings on every line, when given. */\n  service?: string;\n  version?: string;\n  env?: string;\n  /** Extra redaction paths, appended to `DEFAULT_REDACT_PATHS`. */\n  redact?: readonly string[];\n  /** Write destination; defaults to stdout. Tests pass a stream. */\n  destination?: pino.DestinationStream;\n}\n\n/** `trace_id` / `span_id` of the active recording span, for log correlation. */\nfunction traceBindings(): Record<string, string> {\n  const span = trace.getActiveSpan();\n  if (!span || !span.isRecording()) return {};\n  const { traceId, spanId } = span.spanContext();\n  return { trace_id: traceId, span_id: spanId };\n}\n\nexport function createLogger({\n  name,\n  level = 'info',\n  pretty = false,\n  service,\n  version,\n  env,\n  redact = [],\n  destination,\n}: CreateLoggerOptions): Logger {\n  // pino's own defaults, kept when adding our bindings (setting `base` replaces them).\n  const base: Record<string, unknown> = { pid: process.pid, hostname: hostname() };\n  if (service !== undefined) base.service = service;\n  if (version !== undefined) base.version = version;\n  if (env !== undefined) base.env = env;\n  const options: pino.LoggerOptions = {\n    name,\n    level,\n    base,\n    mixin: traceBindings,\n    redact: { paths: [...DEFAULT_REDACT_PATHS, ...redact], censor: REDACT_CENSOR },\n    ...(pretty ? { transport: { target: 'pino-pretty', options: { colorize: true } } } : {}),\n  };\n  const logger = destination ? pino(options, destination) : pino(options);\n  return logger as unknown as Logger;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAEX,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,KAAK,CAAC,eAAe,QAAQ,YAAY,CAAC,EAAE,QAAQ,aAAa;AAAA,EAC7E,cAAc,EAAE,IAAI;AAAA,EACpB,kBAAkB,EAAE,OAAO,EAAE,QAAQ,gBAAgB;AAAA,EACrD,oBAAoB,EAAE,OAAO,EAAE,QAAQ,SAAS;AAAA,EAChD,qBAAqB,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAE5D,8BAA8B,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErE,4BAA4B,EAAE,OAAO,EAAE,QAAQ,kBAAkB;AAAA;AAAA,EAEjE,oBAAoB,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,UAAU,EAAE,OAAO,EAAE,QAAQ,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAI;AAAA;AAAA,EAEzD,kBAAkB,EACf,OAAO,EACP,QAAQ,mEAAmE;AAAA,EAC9E,WAAW,EAAE,KAAK,CAAC,SAAS,SAAS,QAAQ,QAAQ,SAAS,OAAO,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAEtF,kBAAkB,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,gBAAgB,EAAE,IAAI,EAAE,SAAS;AAAA,EACjC,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC/C,uBAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAClD,2BAA2B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAEtD,uBAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAElD,yBAAyB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErD,qBAAqB,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA,EAEtC,kBAAkB,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,yBAAyB,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1C,gBAAgB,EAAE,OAAO,EAAE,QAAQ,QAAQ;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA,EACvD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE1C,6BAA6B,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA,EAE9C,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChD,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpD,mBAAmB,EAAE,OAAO,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEnD,oBAAoB,EAAE,OAAO,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEpD,oBAAoB,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhE,cAAc,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC,EAAE,SAAS;AAAA;AAAA,EAErD,cAAc,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA,EAE1D,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,MAAM;AACnD,CAAC;AAIM,SAAS,QAAQ,SAA4B,QAAQ,KAAU;AACpE,QAAM,SAAS,UAAU,UAAU,MAAM;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,WAAW,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAC9F,UAAM,IAAI,MAAM,wBAAwB,QAAQ,EAAE;AAAA,EACpD;AACA,SAAO,OAAO;AAChB;;;AC3EA,SAAS,gBAAgB;AACzB,SAAS,aAAa;AACtB,OAAO,UAAU;AAQV,IAAM,uBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,gBAAgB;AAiB7B,SAAS,gBAAwC;AAC/C,QAAM,OAAO,MAAM,cAAc;AACjC,MAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,EAAG,QAAO,CAAC;AAC1C,QAAM,EAAE,SAAS,OAAO,IAAI,KAAK,YAAY;AAC7C,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;AAEO,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA,QAAQ;AAAA,EACR,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS,CAAC;AAAA,EACV;AACF,GAAgC;AAE9B,QAAM,OAAgC,EAAE,KAAK,QAAQ,KAAK,UAAU,SAAS,EAAE;AAC/E,MAAI,YAAY,OAAW,MAAK,UAAU;AAC1C,MAAI,YAAY,OAAW,MAAK,UAAU;AAC1C,MAAI,QAAQ,OAAW,MAAK,MAAM;AAClC,QAAM,UAA8B;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,CAAC,GAAG,sBAAsB,GAAG,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC7E,GAAI,SAAS,EAAE,WAAW,EAAE,QAAQ,eAAe,SAAS,EAAE,UAAU,KAAK,EAAE,EAAE,IAAI,CAAC;AAAA,EACxF;AACA,QAAM,SAAS,cAAc,KAAK,SAAS,WAAW,IAAI,KAAK,OAAO;AACtE,SAAO;AACT;","names":[]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@aletheia-dev/core",
+  "version": "0.1.0",
+  "description": "Aletheia platform types and zod schemas: subjects, cases, decisions, rules, workflows and collection flows. Platform types with no stability promise before 1.0.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/akhiljames/aletheia.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://github.com/akhiljames/aletheia/tree/main/packages/core#readme",
+  "bugs": "https://github.com/akhiljames/aletheia/issues",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.js",
+      "require": "./dist/node.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@opentelemetry/api": "^1.9.1",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {
+    "@opentelemetry/context-async-hooks": "^2.11.0",
+    "@opentelemetry/sdk-trace-node": "^2.11.0",
+    "@types/node": "^22.20.4",
+    "eslint": "^10.11.0",
+    "tsup": "^8.5.1",
+    "typescript": "5.9.3",
+    "vitest": "^5.0.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "eslint .",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  }
+}