@aphexcms/cms-core 9.5.2 → 9.7.0

package/dist/lib/server/api/routes/jobs.js

@@ -0,0 +1,93 @@
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { authToContext } from '../../../local-api/auth-helpers.js';
+import { hasCapability } from '../../../types/capabilities.js';
+import { cmsLogger } from '../../../utils/logger.js';
+// Read-only history / observability for the durable spine. Gated on `document.read`:
+// the operational log of publish work is visible to anyone who can read content.
+// Mirrors JobStatus (types/events) as a zod enum — the API contract's source of truth.
+const jobStatus = z.enum(['pending', 'leased', 'completed', 'failed', 'cancelled']);
+const listJobsQuery = z.object({
+    status: jobStatus.optional(),
+    type: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(200).optional(),
+    offset: z.coerce.number().int().min(0).optional()
+});
+const listEventsQuery = z.object({
+    type: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(200).optional(),
+    offset: z.coerce.number().int().min(0).optional()
+});
+/** Map an adapter Page into the ApiResponse `pagination` shape the client expects. */
+function toPagination(page) {
+    const pageSize = page.limit || 1;
+    return {
+        total: page.total,
+        page: Math.floor(page.offset / pageSize) + 1,
+        pageSize,
+        totalPages: Math.max(1, Math.ceil(page.total / pageSize)),
+        hasNextPage: page.offset + page.limit < page.total,
+        hasPrevPage: page.offset > 0
+    };
+}
+function requireHistoryAccess(c) {
+    const auth = c.var.auth;
+    if (!auth || auth.type === 'partial_session') {
+        return { error: c.json({ success: false, error: 'Authentication required' }, 401) };
+    }
+    if (!hasCapability(auth, 'document.read')) {
+        return { error: c.json({ success: false, error: 'Insufficient permissions' }, 403) };
+    }
+    return { organizationId: authToContext(auth).organizationId };
+}
+export const jobsRouter = new Hono()
+    .get('/jobs', async (c) => {
+    try {
+        const gate = requireHistoryAccess(c);
+        if ('error' in gate)
+            return gate.error;
+        const parsed = listJobsQuery.safeParse(c.req.query());
+        if (!parsed.success) {
+            return c.json({ success: false, error: 'Invalid query', issues: parsed.error.issues }, 400);
+        }
+        const { status, type, limit, offset } = parsed.data;
+        const { databaseAdapter } = c.var.aphexCMS;
+        const page = await databaseAdapter.listJobs({
+            organizationId: gate.organizationId,
+            status,
+            type,
+            limit,
+            offset
+        });
+        return c.json({ success: true, data: page.items, pagination: toPagination(page) });
+    }
+    catch (error) {
+        cmsLogger.error('Failed to list jobs:', error);
+        return c.json({ success: false, error: 'Failed to list jobs' }, 500);
+    }
+})
+    .get('/events', async (c) => {
+    try {
+        const gate = requireHistoryAccess(c);
+        if ('error' in gate)
+            return gate.error;
+        const parsed = listEventsQuery.safeParse(c.req.query());
+        if (!parsed.success) {
+            return c.json({ success: false, error: 'Invalid query', issues: parsed.error.issues }, 400);
+        }
+        const { type, limit, offset } = parsed.data;
+        const { databaseAdapter } = c.var.aphexCMS;
+        const page = await databaseAdapter.listEvents({
+            organizationId: gate.organizationId,
+            type,
+            limit,
+            offset
+        });
+        return c.json({ success: true, data: page.items, pagination: toPagination(page) });
+    }
+    catch (error) {
+        cmsLogger.error('Failed to list events:', error);
+        return c.json({ success: false, error: 'Failed to list events' }, 500);
+    }
+});
+//# sourceMappingURL=jobs.js.map

package/dist/lib/server/api/routes/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,qFAAqF;AACrF,iFAAiF;AACjF,uFAAuF;AACvF,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,sFAAsF;AACtF,SAAS,YAAY,CAAC,IAAsD;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC5C,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;QACzD,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;QAClD,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;KAC5B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAmC;IAChE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAmB,IAAI,IAAI,EAAY;KAC5D,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzB,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAEvC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEpD,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC;YAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM;YACN,IAAI;YACJ,KAAK;YACL,MAAM;SACN,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;AACF,CAAC,CAAC;KACD,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC3B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAEvC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAE5C,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;YACJ,KAAK;YACL,MAAM;SACN,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;AACF,CAAC,CAAC,CAAC"}

package/dist/lib/server/api/routes/workers-run.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AphexEnv } from '../index.js';
+export declare const workersRunRouter: Hono<AphexEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=workers-run.d.ts.map

package/dist/lib/server/api/routes/workers-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workers-run.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/workers-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAezC,eAAO,MAAM,gBAAgB,uDAAuB,CAAC"}

package/dist/lib/server/api/routes/workers-run.js

@@ -0,0 +1,41 @@
+import { Hono } from 'hono';
+import { randomUUID, timingSafeEqual } from 'node:crypto';
+import { runJobsBatch } from '../../../jobs/index.js';
+/**
+ * Constant-time compare of the presented bearer token against the configured secret.
+ * Length is compared first (and short-circuits), which leaks only the secret's length —
+ * acceptable, and unavoidable without hashing both sides.
+ */
+function secretMatches(presented, expected) {
+    const a = Buffer.from(presented);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+export const workersRunRouter = new Hono();
+/**
+ * POST /api/internal/workers/run — drive one bounded batch of due jobs and return counts.
+ *
+ * Machine-to-machine: authorized by a shared secret (`Authorization: Bearer <secret>`),
+ * NOT the user capability system — platform cron (hosted) or a self-hosted worker loop
+ * calls it on a cadence. Disabled (404) unless `jobs.workerSecret` is configured, so it
+ * never exists as an unauthenticated surface by default. Bounded per call (batchSize), so
+ * a single invocation can't run unboundedly; the caller's cadence sets throughput.
+ */
+workersRunRouter.post('/run', async (c) => {
+    const secret = c.var.aphexCMS.config.jobs?.workerSecret;
+    // Not configured → the endpoint doesn't exist. Don't advertise it or hint at auth.
+    if (!secret)
+        return c.json({ success: false, error: 'Not found' }, 404);
+    const header = c.req.header('authorization') ?? '';
+    const presented = header.startsWith('Bearer ') ? header.slice('Bearer '.length) : '';
+    if (!presented || !secretMatches(presented, secret)) {
+        return c.json({ success: false, error: 'Unauthorized' }, 401);
+    }
+    // Shared seam: builds the handler map (built-in + app-registered) and runs one batch.
+    // The embedded poll loop calls the same helper, so the two modes can't drift.
+    const result = await runJobsBatch(c.var.aphexCMS, { workerId: `endpoint-${randomUUID()}` });
+    return c.json({ success: true, result });
+});
+//# sourceMappingURL=workers-run.js.map

package/dist/lib/server/api/routes/workers-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workers-run.js","sourceRoot":"","sources":["../../../../../src/lib/server/api/routes/workers-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;;;GAIG;AACH,SAAS,aAAa,CAAC,SAAiB,EAAE,QAAgB;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,IAAI,EAAY,CAAC;AAErD;;;;;;;;GAQG;AACH,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC;IAExD,mFAAmF;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAE5F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC"}

package/dist/lib/server/index.d.ts

@@ -16,6 +16,7 @@ export { AssetService } from '../services/asset-service.js';
 export { RolesService } from '../services/roles-service.js';
 export { GET as serveAssetCDN } from '../routes/assets-cdn.js';
 export { createAphexApi, mountAphexBuiltins, toHonoHandler, type AphexEnv } from './api/index.js';
+export * from '../jobs/index.js';
 export * from '../schema-utils/index.js';
 export { createHashForPublishing } from '../utils/content-hash.js';
 export { getPreviewPerspective, type PreviewPerspective } from '../preview/perspective.js';

package/dist/lib/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxF,cAAc,wBAAwB,CAAC;AAGvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAKzD,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI5D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG/F,cAAc,uBAAuB,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGxF,OAAO,EACN,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACN,iBAAiB,EACjB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxF,cAAc,wBAAwB,CAAC;AAGvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAKzD,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI5D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG/F,cAAc,eAAe,CAAC;AAG9B,cAAc,uBAAuB,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGxF,OAAO,EACN,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACN,iBAAiB,EACjB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,MAAM,cAAc,CAAC"}

package/dist/lib/server/index.js

@@ -32,6 +32,8 @@ export { GET as serveAssetCDN } from '../routes/assets-cdn.js';
 // Hono API app — exposed so user apps (and tests) can construct or extend
 // the same router the SK catch-all forwards to.
 export { createAphexApi, mountAphexBuiltins, toHonoHandler } from './api/index.js';
+// Job execution — the DB-backed job runner (claim → run handler → complete/retry/fail).
+export * from '../jobs/index.js';
 // Schema utilities
 export * from '../schema-utils/index.js';
 // Content hash utilities (server-side)

package/dist/lib/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,+DAA+D;AAE/D,sDAAsD;AACtD,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,gBAAgB,CAAC;AAE/B,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAsB,MAAM,qBAAqB,CAAC;AAEpE,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,SAAS,EAAe,MAAM,iBAAiB,CAAC;AAEpE,aAAa;AACb,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,6CAA6C;AAC7C,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAqB,MAAM,UAAU,CAAC;AAExF,qFAAqF;AACrF,cAAc,wBAAwB,CAAC;AAEvC,kCAAkC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAE7C,iDAAiD;AACjD,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,4EAA4E;AAC5E,wEAAwE;AACxE,oEAAoE;AACpE,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5D,0EAA0E;AAC1E,gDAAgD;AAChD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAC;AAE/F,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uCAAuC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,oBAAoB;AACpB,OAAO,EAAE,qBAAqB,EAA2B,MAAM,wBAAwB,CAAC;AAExF,yCAAyC;AACzC,OAAO,EACN,oBAAoB,EAIpB,MAAM,kBAAkB,CAAC;AAE1B,uCAAuC;AACvC,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,aAAa,EAMb,MAAM,oBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,uEAAuE;AACvE,OAAO,EACN,iBAAiB,EAIjB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,+DAA+D;AAE/D,sDAAsD;AACtD,cAAc,gBAAgB,CAAC;AAE/B,cAAc,kBAAkB,CAAC;AAEjC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,gBAAgB,CAAC;AAE/B,wBAAwB;AACxB,OAAO,EAAE,SAAS,EAAsB,MAAM,qBAAqB,CAAC;AAEpE,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,SAAS,EAAe,MAAM,iBAAiB,CAAC;AAEpE,aAAa;AACb,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,6CAA6C;AAC7C,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAqB,MAAM,UAAU,CAAC;AAExF,qFAAqF;AACrF,cAAc,wBAAwB,CAAC;AAEvC,kCAAkC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAE7C,iDAAiD;AACjD,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,4EAA4E;AAC5E,wEAAwE;AACxE,oEAAoE;AACpE,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5D,0EAA0E;AAC1E,gDAAgD;AAChD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAC;AAE/F,wFAAwF;AACxF,cAAc,eAAe,CAAC;AAE9B,mBAAmB;AACnB,cAAc,uBAAuB,CAAC;AAEtC,uCAAuC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,oBAAoB;AACpB,OAAO,EAAE,qBAAqB,EAA2B,MAAM,wBAAwB,CAAC;AAExF,yCAAyC;AACzC,OAAO,EACN,oBAAoB,EAIpB,MAAM,kBAAkB,CAAC;AAE1B,uCAAuC;AACvC,OAAO,EACN,QAAQ,EACR,cAAc,EACd,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,WAAW,EACX,aAAa,EAMb,MAAM,oBAAoB,CAAC;AAE5B,4EAA4E;AAC5E,uEAAuE;AACvE,OAAO,EACN,iBAAiB,EAIjB,MAAM,cAAc,CAAC"}

package/dist/lib/services/version-service.d.ts

@@ -17,6 +17,22 @@ export declare class VersionService {
      * Create a version snapshot and enforce rolling retention.
      */
     createVersion(db: DatabaseAdapter, organizationId: string, documentId: string, eventType: 'draft' | 'publish', data: any, userId?: string | null): Promise<DocumentVersion | null>;
+    /**
+     * Write a version snapshot on an already-transactional adapter. The caller owns
+     * the transaction boundary and retention (call `enforceRetentionFor` post-commit).
+     * No-op when the adapter has no versioning support.
+     */
+    snapshotTx(tx: DatabaseAdapter, organizationId: string, documentId: string, eventType: 'draft' | 'publish', data: any, userId?: string | null): Promise<void>;
+    /**
+     * Publish + snapshot on an already-transactional adapter. Caller owns the tx
+     * and retention. Returns the published document (or null if publish was a no-op).
+     */
+    publishTx(tx: DatabaseAdapter, organizationId: string, documentId: string): Promise<Document | null>;
+    /**
+     * Public retention trigger for callers that manage their own transaction and
+     * therefore can't rely on `saveWithVersion`/`publishWithVersion` to run it.
+     */
+    enforceRetentionFor(db: DatabaseAdapter, organizationId: string, documentId: string): Promise<void>;
     /**
      * Save draft and create version atomically using adapter transaction.
      */

package/dist/lib/services/version-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version-service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/version-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE7E;;;;;;GAMG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAI9C;;OAEG;IACG,aAAa,CAClB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,GAAG,SAAS,EAC9B,IAAI,EAAE,GAAG,EACT,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAelC;;OAEG;IACG,eAAe,CACpB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,GAAG,EACT,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA2B3B;;OAEG;IACG,kBAAkB,CACvB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgB3B;;OAEG;IACG,cAAc,CACnB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAqCrB,YAAY,CACjB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,mBAAmB,CAAC;IAKzB,UAAU,CACf,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAKpB,gBAAgB;CAuB9B"}
+{"version":3,"file":"version-service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/version-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG7E;;;;;;GAMG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAI9C;;OAEG;IACG,aAAa,CAClB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,GAAG,SAAS,EAC9B,IAAI,EAAE,GAAG,EACT,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAelC;;;;OAIG;IACG,UAAU,CACf,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,GAAG,SAAS,EAC9B,IAAI,EAAE,GAAG,EACT,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACG,SAAS,CACd,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAoB3B;;;OAGG;IACG,mBAAmB,CACxB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAIhB;;OAEG;IACG,eAAe,CACpB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,GAAG,EACT,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgB3B;;OAEG;IACG,kBAAkB,CACvB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAiB3B;;OAEG;IACG,cAAc,CACnB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA0BrB,YAAY,CACjB,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,mBAAmB,CAAC;IAKzB,UAAU,CACf,EAAE,EAAE,eAAe,EACnB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAKpB,gBAAgB;CAuB9B"}

package/dist/lib/services/version-service.js

@@ -1,3 +1,4 @@
+import { emitDocumentPublished } from '../events/emit.js';
 /**
  * VersionService — orchestrates document versioning with rolling retention.
  *
@@ -26,43 +27,77 @@ export class VersionService {
         await this.enforceRetention(db, documentId, organizationId);
         return version;
     }
+    /**
+     * Write a version snapshot on an already-transactional adapter. The caller owns
+     * the transaction boundary and retention (call `enforceRetentionFor` post-commit).
+     * No-op when the adapter has no versioning support.
+     */
+    async snapshotTx(tx, organizationId, documentId, eventType, data, userId) {
+        if (!tx.createDocumentVersion)
+            return;
+        await tx.createDocumentVersion({
+            documentId,
+            organizationId,
+            eventType,
+            data,
+            createdBy: userId
+        });
+    }
+    /**
+     * Publish + snapshot on an already-transactional adapter. Caller owns the tx
+     * and retention. Returns the published document (or null if publish was a no-op).
+     */
+    async publishTx(tx, organizationId, documentId) {
+        const result = await tx.publishDoc(organizationId, documentId);
+        if (result) {
+            await this.snapshotTx(tx, organizationId, documentId, 'publish', result.publishedData, result.updatedBy);
+            // Transactional outbox: record the durable fact in the same tx as the publish, so
+            // the event and the state change commit (or roll back) together — a consumer can
+            // never see a publish that didn't happen, nor miss one that did. The non-versioned
+            // publish path (collection-api) emits the same event via the same helper.
+            await emitDocumentPublished(tx, organizationId, result);
+        }
+        return result;
+    }
+    /**
+     * Public retention trigger for callers that manage their own transaction and
+     * therefore can't rely on `saveWithVersion`/`publishWithVersion` to run it.
+     */
+    async enforceRetentionFor(db, organizationId, documentId) {
+        await this.enforceRetention(db, documentId, organizationId);
+    }
     /**
      * Save draft and create version atomically using adapter transaction.
      */
     async saveWithVersion(db, organizationId, documentId, data, userId) {
-        if (db.withTransaction && db.createDocumentVersion) {
-            const updated = await db.withTransaction(async (txAdapter) => {
-                const result = await txAdapter.updateDocDraft(organizationId, documentId, data, userId);
-                if (result) {
-                    await txAdapter.createDocumentVersion({
-                        documentId,
-                        organizationId,
-                        eventType: 'draft',
-                        data,
-                        createdBy: userId
-                    });
-                }
-                return result;
-            });
-            if (updated)
-                await this.enforceRetention(db, documentId, organizationId);
-            return updated;
-        }
-        // Fallback: non-atomic
-        const updated = await db.updateDocDraft(organizationId, documentId, data, userId);
-        if (updated) {
-            await this.createVersion(db, organizationId, documentId, 'draft', data, userId);
+        // No versioning support: a single write, atomic on its own.
+        if (!db.createDocumentVersion) {
+            return db.updateDocDraft(organizationId, documentId, data, userId);
         }
+        const updated = await db.withTransaction(async (txAdapter) => {
+            const result = await txAdapter.updateDocDraft(organizationId, documentId, data, userId);
+            if (result)
+                await this.snapshotTx(txAdapter, organizationId, documentId, 'draft', data, userId);
+            return result;
+        });
+        if (updated)
+            await this.enforceRetention(db, documentId, organizationId);
         return updated;
     }
     /**
      * Publish and create version.
      */
     async publishWithVersion(db, organizationId, documentId) {
-        const published = await db.publishDoc(organizationId, documentId);
-        if (!published)
-            return null;
-        await this.createVersion(db, organizationId, documentId, 'publish', published.publishedData, published.updatedBy);
+        // Publish + version snapshot must commit together: a crash between them
+        // would leave a published document with no 'publish' version row. Mirror
+        // saveWithVersion / restoreVersion and run both writes in one transaction.
+        // No versioning support: a single write, atomic on its own.
+        if (!db.createDocumentVersion) {
+            return db.publishDoc(organizationId, documentId);
+        }
+        const published = await db.withTransaction((txAdapter) => this.publishTx(txAdapter, organizationId, documentId));
+        if (published)
+            await this.enforceRetention(db, documentId, organizationId);
         return published;
     }
     /**
@@ -74,29 +109,18 @@ export class VersionService {
         const version = await db.getDocumentVersion(organizationId, documentId, versionNumber);
         if (!version)
             return null;
-        if (db.withTransaction && db.createDocumentVersion) {
-            const restored = await db.withTransaction(async (txAdapter) => {
-                const result = await txAdapter.updateDocDraft(organizationId, documentId, version.data, userId);
-                if (result) {
-                    await txAdapter.createDocumentVersion({
-                        documentId,
-                        organizationId,
-                        eventType: 'draft',
-                        data: version.data,
-                        createdBy: userId
-                    });
-                }
-                return result;
-            });
-            if (restored)
-                await this.enforceRetention(db, documentId, organizationId);
-            return restored;
-        }
-        // Fallback: non-atomic
-        const restored = await db.updateDocDraft(organizationId, documentId, version.data, userId);
-        if (restored) {
-            await this.createVersion(db, organizationId, documentId, 'draft', version.data, userId);
+        // No versioning support: a single write, atomic on its own.
+        if (!db.createDocumentVersion) {
+            return db.updateDocDraft(organizationId, documentId, version.data, userId);
         }
+        const restored = await db.withTransaction(async (txAdapter) => {
+            const result = await txAdapter.updateDocDraft(organizationId, documentId, version.data, userId);
+            if (result)
+                await this.snapshotTx(txAdapter, organizationId, documentId, 'draft', version.data, userId);
+            return result;
+        });
+        if (restored)
+            await this.enforceRetention(db, documentId, organizationId);
         return restored;
     }
     async listVersions(db, organizationId, documentId, options) {

package/dist/lib/services/version-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-service.js","sourceRoot":"","sources":["../../../src/lib/services/version-service.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAClB,WAAW,CAAS;IAE5B,YAAY,OAAkC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAClB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,SAA8B,EAC9B,IAAS,EACT,MAAsB;QAEtB,IAAI,CAAC,EAAE,CAAC,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,qBAAqB,CAAC;YAC9C,UAAU;YACV,cAAc;YACd,SAAS;YACT,IAAI;YACJ,SAAS,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACpB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,IAAS,EACT,MAAe;QAEf,IAAI,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxF,IAAI,MAAM,EAAE,CAAC;oBACZ,MAAM,SAAS,CAAC,qBAAsB,CAAC;wBACtC,UAAU;wBACV,cAAc;wBACd,SAAS,EAAE,OAAO;wBAClB,IAAI;wBACJ,SAAS,EAAE,MAAM;qBACjB,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACzE,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClF,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACvB,EAAmB,EACnB,cAAsB,EACtB,UAAkB;QAElB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,IAAI,CAAC,aAAa,CACvB,EAAE,EACF,cAAc,EACd,UAAU,EACV,SAAS,EACT,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,SAAS,CACnB,CAAC;QAEF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CACnB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,aAAqB,EACrB,MAAe;QAEf,IAAI,CAAC,EAAE,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,IAAI,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAC5C,cAAc,EACd,UAAU,EACV,OAAO,CAAC,IAAI,EACZ,MAAM,CACN,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACZ,MAAM,SAAS,CAAC,qBAAsB,CAAC;wBACtC,UAAU;wBACV,cAAc;wBACd,SAAS,EAAE,OAAO;wBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,SAAS,EAAE,MAAM;qBACjB,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAC1E,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3F,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,OAA6C;QAE7C,IAAI,CAAC,EAAE,CAAC,oBAAoB;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,UAAU,CACf,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,aAAqB;QAErB,IAAI,CAAC,EAAE,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,EAAmB,EACnB,UAAkB,EAClB,cAAsB;QAEtB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,EAAE,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC,sBAAsB;YAAE,OAAO;QAEnE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE;YACrF,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,IAAI,KAAK,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAEtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,sBAAsB,CAC9B,UAAU,EACV,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzB,CAAC;QACH,CAAC;IACF,CAAC;CACD"}
+{"version":3,"file":"version-service.js","sourceRoot":"","sources":["../../../src/lib/services/version-service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAClB,WAAW,CAAS;IAE5B,YAAY,OAAkC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAClB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,SAA8B,EAC9B,IAAS,EACT,MAAsB;QAEtB,IAAI,CAAC,EAAE,CAAC,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,qBAAqB,CAAC;YAC9C,UAAU;YACV,cAAc;YACd,SAAS;YACT,IAAI;YACJ,SAAS,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACf,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,SAA8B,EAC9B,IAAS,EACT,MAAsB;QAEtB,IAAI,CAAC,EAAE,CAAC,qBAAqB;YAAE,OAAO;QACtC,MAAM,EAAE,CAAC,qBAAqB,CAAC;YAC9B,UAAU;YACV,cAAc;YACd,SAAS;YACT,IAAI;YACJ,SAAS,EAAE,MAAM;SACjB,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACd,EAAmB,EACnB,cAAsB,EACtB,UAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CACpB,EAAE,EACF,cAAc,EACd,UAAU,EACV,SAAS,EACT,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,SAAS,CAChB,CAAC;YACF,kFAAkF;YAClF,iFAAiF;YACjF,mFAAmF;YACnF,0EAA0E;YAC1E,MAAM,qBAAqB,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CACxB,EAAmB,EACnB,cAAsB,EACtB,UAAkB;QAElB,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACpB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,IAAS,EACT,MAAe;QAEf,4DAA4D;QAC5D,IAAI,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,MAAM;gBACT,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACrF,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACvB,EAAmB,EACnB,cAAsB,EACtB,UAAkB;QAElB,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAE3E,4DAA4D;QAC5D,IAAI,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,EAAE,CACxD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CACrD,CAAC;QACF,IAAI,SAAS;YAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CACnB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,aAAqB,EACrB,MAAe;QAEf,IAAI,CAAC,EAAE,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,4DAA4D;QAC5D,IAAI,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAC5C,cAAc,EACd,UAAU,EACV,OAAO,CAAC,IAAI,EACZ,MAAM,CACN,CAAC;YACF,IAAI,MAAM;gBACT,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7F,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,OAA6C;QAE7C,IAAI,CAAC,EAAE,CAAC,oBAAoB;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,UAAU,CACf,EAAmB,EACnB,cAAsB,EACtB,UAAkB,EAClB,aAAqB;QAErB,IAAI,CAAC,EAAE,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,EAAmB,EACnB,UAAkB,EAClB,cAAsB;QAEtB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,EAAE,CAAC,oBAAoB,IAAI,CAAC,EAAE,CAAC,sBAAsB;YAAE,OAAO;QAEnE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE;YACrF,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,CAAC;SACT,CAAC,CAAC;QAEH,IAAI,KAAK,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAEtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,sBAAsB,CAC9B,UAAU,EACV,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzB,CAAC;QACH,CAAC;IACF,CAAC;CACD"}

package/dist/lib/types/config.d.ts

@@ -11,6 +11,7 @@ import type { Logger } from '../utils/logger.js';
 import type { CMSPlugin } from '../plugins/types.js';
 import type { Auth } from './auth.js';
 import type { PreviewPerspective } from '../preview/perspective.js';
+import type { JobHandlerMap } from '../jobs/types.js';
 export type { GraphQLConfig };
 export interface CMSConfig {
     schemaTypes: SchemaType[];
@@ -77,6 +78,48 @@ export interface CMSConfig {
     versioning?: {
         maxVersions?: number;
     };
+    /**
+     * Background job execution (the DB-backed job queue). Jobs are scheduled via the
+     * database adapter (`scheduleJob`) and driven by `runDueJobs`, which the protected
+     * worker endpoint (`POST /api/internal/workers/run`) and any self-hosted worker loop
+     * both call. Events and scheduling work without this; only *executing* jobs needs it.
+     */
+    jobs?: {
+        /**
+         * Map of job `type` → handler. A claimed job whose type has no handler is
+         * dead-lettered (an unknown type can never become runnable).
+         */
+        handlers?: JobHandlerMap;
+        /**
+         * Shared secret authorizing `POST /api/internal/workers/run`
+         * (`Authorization: Bearer <secret>`). Machine-to-machine — platform cron or a
+         * self-hosted worker loop, NOT the user capability system. When unset the endpoint
+         * is disabled (404), so it's never an unauthenticated surface by default; jobs can
+         * still be scheduled, they just won't run until a secret (and a driver) exist.
+         */
+        workerSecret?: string;
+        /** Max jobs claimed per worker run. Default 10. */
+        batchSize?: number;
+        /** Lease duration (ms) per claimed job before it's reclaimable. Default 30000. */
+        leaseMs?: number;
+        /**
+         * Max outbox rows the relay drains per worker run (events fanned out to consumer
+         * delivery jobs). Runs at the top of the same tick as job execution. Default 100 —
+         * fan-out is cheap (a few inserts), so it can clear more per pass than it executes.
+         */
+        relayBatchSize?: number;
+        /**
+         * Run an in-process job loop inside the app itself — no separate worker process, no
+         * `workerSecret`, no cron. It calls `runJobsBatch` directly on `embeddedIntervalMs`, so
+         * scheduled publishes and event consumers "just work" the moment the app is running. Ideal
+         * for local dev and single-instance self-hosting; for horizontally-scaled prod prefer the
+         * dedicated worker loop / platform cron so N app replicas don't each run a loop. Ticks never
+         * overlap (a slow tick is skipped, not stacked). Default off.
+         */
+        embedded?: boolean;
+        /** Interval (ms) between embedded loop ticks when `embedded` is on. Default 3000. */
+        embeddedIntervalMs?: number;
+    };
     /**
      * Live preview configuration.
      * - `stega`: Enable stega encoding in preview data pushes so field overlays work

package/dist/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/types/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,WAAW,SAAS;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE;YACV,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC/B,CAAC;KACF,CAAC;IACF;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QACN,QAAQ,EAAE,YAAY,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;OAKG;IACH,IAAI,CAAC,EAAE;QACN;;;WAGG;QACH,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB;;;;;;WAMG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mDAAmD;QACnD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kFAAkF;QAClF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,qFAAqF;QACrF,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,EAAE,IAAI,CAAC;YAAC,GAAG,EAAE,GAAG,CAAA;SAAE,KAAK,kBAAkB,CAAC;KAC7E,CAAC;IACF,QAAQ,CAAC,EAAE;QACV;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;WAMG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACpC"}

package/dist/lib/types/events.d.ts

@@ -0,0 +1,134 @@
+/**
+ * A durable business fact. Append-only: written once (typically inside the same
+ * transaction as the state change that caused it) and never mutated. Payload carries
+ * identifiers + intentional metadata only — never secrets or full document copies.
+ */
+export interface DomainEvent {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+}
+/** Input to append a domain event. */
+export interface AppendEventInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+export type JobStatus = 'pending' | 'leased' | 'completed' | 'failed' | 'cancelled';
+/** A command to run now or later. Lifecycle: pending → leased → completed/failed/cancelled. */
+export interface Job {
+    id: string;
+    organizationId: string;
+    type: string;
+    payload: Record<string, unknown>;
+    status: JobStatus;
+    runAt: Date;
+    attempts: number;
+    maxAttempts: number;
+    leaseOwner: string | null;
+    leaseExpiresAt: Date | null;
+    lastError: string | null;
+    idempotencyKey: string | null;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    completedAt: Date | null;
+}
+/** Input to schedule a job. `idempotencyKey` (unique per org) makes enqueue safe to retry. */
+export interface ScheduleJobInput {
+    organizationId: string;
+    type: string;
+    payload?: Record<string, unknown>;
+    runAt?: Date;
+    maxAttempts?: number;
+    idempotencyKey?: string | null;
+    correlationId?: string | null;
+    causationId?: string | null;
+    createdBy?: string | null;
+}
+/**
+ * Options for claiming due jobs with a lease. Omit `organizationId` to claim across all
+ * orgs (worker context — runs with override access); provide it to scope to one tenant.
+ */
+export interface ClaimJobsOptions {
+    organizationId?: string;
+    limit: number;
+    workerId: string;
+    leaseMs: number;
+    now?: Date;
+}
+/**
+ * An outbox worklist row — the relay's unit of work. Written in the SAME transaction as
+ * the `domain_events` row it mirrors (so it can never exist without its event, nor be
+ * missed if the event committed), then drained by the relay: for each subscribed consumer
+ * it enqueues one delivery job, then stamps `processedAt`.
+ *
+ * Kept SEPARATE from `cms_domain_events` on purpose. The event log is an immutable ledger;
+ * this is a mutable, prunable worklist. And the relay claims rows by `processedAt IS NULL`
+ * (status), never by log position — so an event whose transaction commits late (with an
+ * early timestamp) is still picked up, which a cursor-scan over the append-only log would
+ * silently skip. `eventType`/`payload` are denormalized here so the relay fans out from a
+ * single-table read with no join back to the event log.
+ */
+export interface OutboxRow {
+    id: string;
+    organizationId: string;
+    /** The `cms_domain_events` row this mirrors (FK; the canonical, immutable copy). */
+    eventId: string;
+    eventType: string;
+    payload: Record<string, unknown>;
+    correlationId: string | null;
+    causationId: string | null;
+    createdBy: string | null;
+    createdAt: Date;
+    /** Null until the relay has fanned this event out to every subscriber. */
+    processedAt: Date | null;
+}
+/**
+ * Options for reading the relay's pending work. Omit `organizationId` to read across all
+ * orgs (worker context — runs with override access), mirroring `claimDueJobs`. No lease:
+ * the relay's only side effect is idempotent job enqueue (keyed per event×consumer), so two
+ * workers processing the same row can't double-deliver — the job's unique idempotency key
+ * absorbs the duplicate. Oldest-first, so events relay in roughly causal order.
+ */
+export interface ListUnprocessedOutboxOptions {
+    organizationId?: string;
+    /** Max rows returned per relay pass. */
+    limit: number;
+}
+/** A page of rows plus the unfiltered total, for offset pagination in the admin history views. */
+export interface Page<T> {
+    items: T[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** Query for the read-only event history. Newest first. */
+export interface ListEventsOptions {
+    organizationId: string;
+    /** Filter by exact event type (e.g. `document.published`). */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+/** Query for the read-only job history. Newest first. */
+export interface ListJobsOptions {
+    organizationId: string;
+    /** Filter by one status or several (e.g. only `failed`). */
+    status?: JobStatus | JobStatus[];
+    /** Filter by exact job type. */
+    type?: string;
+    limit?: number;
+    offset?: number;
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/lib/types/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpF,+FAA+F;AAC/F,MAAM,WAAW,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,IAAI,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,0EAA0E;IAC1E,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,kGAAkG;AAClG,MAAM,WAAW,IAAI,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;IACjC,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/lib/types/events.js

@@ -0,0 +1,4 @@
+// Universal event + job types — dialect-agnostic shapes the adapters map their rows to.
+// These mirror the `cms_domain_events` and `cms_jobs` tables but never depend on Drizzle.
+export {};
+//# sourceMappingURL=events.js.map

package/dist/lib/types/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/lib/types/events.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F"}