@blotout/qinto-cli 0.1.12 → 0.1.13

package/dist/worker-artifact/main/index.js

@@ -19331,6 +19331,7 @@ var adoptAppSpans = /* @__PURE__ */ __name((response) => {
 
 // src/apps/invoke.ts
 var APP_INVOCATION_TIMEOUT_MS = 1e4;
+var APP_HOOK_TIMEOUT_MS = 25e3;
 var MAX_EMIT_DEPTH = 2;
 var HOOK_URL = "https://app/__qinto/hook";
 var invocationContext = /* @__PURE__ */ __name((env) => {
@@ -19475,7 +19476,7 @@ var ingestEmit = /* @__PURE__ */ __name(async (env, { slug, ord, depth, emit, an
   });
   await ingest(env, action);
 }, "ingestEmit");
-var deliverGroupPushes = /* @__PURE__ */ __name(({ slug, group, installs, deliverPush }) => {
+var deliverGroupPushes = /* @__PURE__ */ __name(async ({ slug, group, installs, deliverPush }) => {
   const install = installs.find((entry) => entry.ord === group.ord);
   for (const push of group.pushes) {
     const { topic, data } = push;
@@ -19485,17 +19486,17 @@ var deliverGroupPushes = /* @__PURE__ */ __name(({ slug, group, installs, delive
           addSpanEvent("push rejected: its group matches no invoked install", { level: "warn", attrs: { app: slug, ord: group.ord } });
           break;
         }
-        deliverPush({ slug, installId: install.id, topic, data, scope: "app" });
+        await deliverPush({ slug, installId: install.id, topic, data, scope: "app" });
         break;
       }
       case "app": {
-        deliverPush({ slug, installId: null, topic, data, scope: "app" });
+        await deliverPush({ slug, installId: null, topic, data, scope: "app" });
         break;
       }
       // Whether this app may broadcast site-wide is settled in `deliverAppPush`, the one path every
       // delivery funnels through; re-deciding it here would be a second authority to keep in sync.
       case "site": {
-        deliverPush({ slug, installId: null, topic, data, scope: "site" });
+        await deliverPush({ slug, installId: null, topic, data, scope: "site" });
         break;
       }
     }
@@ -19511,7 +19512,7 @@ var applyEffects = /* @__PURE__ */ __name(async (env, { slug, groups, depth, ano
     await writeContext2(slug, contextWrites);
   }
   for (const group of groups) {
-    deliverGroupPushes({ slug, group, installs, deliverPush });
+    await deliverGroupPushes({ slug, group, installs, deliverPush });
     if (group.emits.length === 0) {
       continue;
     }
@@ -19536,14 +19537,14 @@ var hookResponseBody = /* @__PURE__ */ __name(async (response, slug) => {
   }
   return new TextDecoder().decode(bytes);
 }, "hookResponseBody");
-var runInvokeApp = /* @__PURE__ */ __name(async (env, { target, trigger, snapshot, context, deliverPush, writeAttribution: writeAttribution2, writeContext: writeContext2, budget }) => {
+var runInvokeApp = /* @__PURE__ */ __name(async (env, { target, trigger, snapshot, context, deliverEffects, budget }) => {
   try {
     const key = await deriveAppInternalKey(context.master, context.domainId, target.slug);
     const response = await postHookEnvelope(env, {
       binding: target.app.binding,
       key,
       envelope: buildEnvelope(target, trigger, snapshot, context),
-      timeoutMs: APP_INVOCATION_TIMEOUT_MS
+      timeoutMs: APP_HOOK_TIMEOUT_MS
     });
     if (response === void 0) {
       addSpanEvent("app service binding is missing", { level: "warn", attrs: { app: target.slug, binding: target.app.binding } });
@@ -19570,15 +19571,15 @@ var runInvokeApp = /* @__PURE__ */ __name(async (env, { target, trigger, snapsho
     for (const ord of verdict.effects.rejectedOrds) {
       addSpanEvent("app effects rejected over the per-install caps", { level: "warn", attrs: { app: target.slug, ord } });
     }
-    await applyEffects(env, {
+    if (verdict.effects.accepted.length === 0) {
+      return;
+    }
+    await deliverEffects({
+      anonId: snapshot.anonId,
       slug: target.slug,
       groups: verdict.effects.accepted,
       depth: triggerDepth(trigger),
-      anonId: snapshot.anonId,
       installs: target.installs,
-      deliverPush,
-      writeAttribution: writeAttribution2,
-      writeContext: writeContext2,
       geo: trigger.kind === "event" ? trigger.action.geo : trigger.geo,
       host: trigger.kind === "event" ? trigger.action.host : trigger.host,
       context: trigger.kind === "event" ? trigger.action.context : void 0
@@ -19885,17 +19886,15 @@ var deliverRpcEffects = /* @__PURE__ */ __name(async (env, { body, userId, effec
   for (const ord of effects.rejectedOrds) {
     addSpanEvent("app effects rejected over the per-install caps", { level: "warn", attrs: { app: body.callee, ord } });
   }
-  const pushes = [];
   await applyEffects(env, {
     slug: body.callee,
     groups: effects.accepted,
     depth: body.depth,
     anonId: userId,
     installs: [install],
-    deliverPush: /* @__PURE__ */ __name((push) => {
-      pushes.push(push);
+    deliverPush: /* @__PURE__ */ __name(async (push) => {
+      await anonStub(env, userId).appPush(push, currentTraceContext());
     }, "deliverPush"),
-    // The broker runs outside the user's AnonDO, so this reaches it the same way a push does.
     writeAttribution: /* @__PURE__ */ __name(async (slug, writes) => {
       await anonStub(env, userId).appAttribution({ slug, writes }, currentTraceContext());
     }, "writeAttribution"),
@@ -19903,9 +19902,6 @@ var deliverRpcEffects = /* @__PURE__ */ __name(async (env, { body, userId, effec
       await anonStub(env, userId).appContext({ slug, writes }, currentTraceContext());
     }, "writeContext")
   });
-  for (const push of pushes) {
-    await anonStub(env, userId).appPush(push, currentTraceContext());
-  }
 }, "deliverRpcEffects");
 var runRelayRpc = /* @__PURE__ */ __name(async (env, { context, body, callee, install }) => {
   let raw2;
@@ -24767,6 +24763,94 @@ var track = createApiRouter().openapi(definition8, async (c) => {
   }
 });
 
+// src/apps/fan-out-entrypoint.ts
+import { WorkerEntrypoint as WorkerEntrypoint2 } from "cloudflare:workers";
+
+// src/apps/eligibility.ts
+var wantsTrigger = /* @__PURE__ */ __name((app2, trigger) => {
+  if (trigger.kind === "connect") {
+    return app2.hooks.onConnect;
+  }
+  return app2.hooks.onEvent.includes(trigger.action.type);
+}, "wantsTrigger");
+var gatePasses = /* @__PURE__ */ __name((entry, trigger, consent2, enforced) => {
+  if (trigger.kind === "event" && trigger.action.origin?.app === entry.slug) {
+    return false;
+  }
+  if (trigger.kind === "event" && trigger.action.type === "consent") {
+    return true;
+  }
+  return consentAllows(consent2, entry.slug, entry.app.consent.category, enforced);
+}, "gatePasses");
+var eligibleApps = /* @__PURE__ */ __name((registry3, trigger, consent2, enforced) => {
+  const targets = [];
+  for (const slug of registry3.order) {
+    const app2 = registry3.apps[slug];
+    if (app2 === void 0 || !wantsTrigger(app2, trigger) || !gatePasses({ slug, app: app2 }, trigger, consent2, enforced)) {
+      continue;
+    }
+    const installs = app2.installs.filter((install) => install.active).map(({ id, ord, label }) => ({ id, ord, label }));
+    if (installs.length === 0) {
+      continue;
+    }
+    targets.push({ slug, app: app2, installs });
+  }
+  return targets;
+}, "eligibleApps");
+
+// src/apps/fan-out.ts
+var MAX_APPS_PER_DOMAIN = 50;
+var fanOutToApps = /* @__PURE__ */ __name(async (env, { trigger, snapshot, trace }, { deliverEffects }) => {
+  const { registry: registry3, error: error51 } = siteRegistry();
+  const targets = eligibleApps(registry3, trigger, snapshot.consent, consentEnforced(env));
+  if (error51 === void 0 && targets.length === 0) {
+    return;
+  }
+  await runInvocation({ name: "app.fan_out", trace, attrs: { "fan_out.kind": trigger.kind, "fan_out.apps": targets.length } }, async () => {
+    if (error51 !== void 0) {
+      addSpanEvent("apps registry is malformed; apps are off", { level: "error", attrs: { error: error51 } });
+      return;
+    }
+    const context = invocationContext(env);
+    if (context === void 0) {
+      addSpanEvent("apps skipped: APPS_KEY_MASTER or QINTO_DOMAIN_ID is missing", { level: "warn" });
+      return;
+    }
+    const capped = targets.slice(0, MAX_APPS_PER_DOMAIN);
+    if (capped.length < targets.length) {
+      addSpanEvent("eligible apps exceed the per-event budget", {
+        level: "warn",
+        attrs: { eligible: targets.length, cap: MAX_APPS_PER_DOMAIN }
+      });
+    }
+    const budget = createDataPointBudget();
+    await Promise.allSettled(
+      capped.map((target) => {
+        return invokeApp(env, { target, trigger, snapshot, context, deliverEffects, budget });
+      })
+    );
+  });
+}, "fanOutToApps");
+
+// src/apps/fan-out-entrypoint.ts
+var anonEffectsDelivery = /* @__PURE__ */ __name((env, anonId) => {
+  return (effects) => {
+    return anonStub(env, anonId).appEffects(effects, currentTraceContext());
+  };
+}, "anonEffectsDelivery");
+var FanOut = class extends WorkerEntrypoint2 {
+  static {
+    __name(this, "FanOut");
+  }
+  run(job) {
+    this.ctx.waitUntil(
+      fanOutToApps(this.env, job, { deliverEffects: anonEffectsDelivery(this.env, job.snapshot.anonId) }).catch((error51) => {
+        console.warn("app fan-out failed", { error: error51 });
+      })
+    );
+  }
+};
+
 // src/id-graph/alias/do.ts
 import { DurableObject } from "cloudflare:workers";
 var ASSIGNMENT_KEY = "assignment";
@@ -24999,87 +25083,6 @@ var acceptedCaptures = /* @__PURE__ */ __name((registry3, consent2, apps, enforc
   return accepted;
 }, "acceptedCaptures");
 
-// src/apps/eligibility.ts
-var wantsTrigger = /* @__PURE__ */ __name((app2, trigger) => {
-  if (trigger.kind === "connect") {
-    return app2.hooks.onConnect;
-  }
-  return app2.hooks.onEvent.includes(trigger.action.type);
-}, "wantsTrigger");
-var gatePasses = /* @__PURE__ */ __name((entry, trigger, consent2, enforced) => {
-  if (trigger.kind === "event" && trigger.action.origin?.app === entry.slug) {
-    return false;
-  }
-  if (trigger.kind === "event" && trigger.action.type === "consent") {
-    return true;
-  }
-  return consentAllows(consent2, entry.slug, entry.app.consent.category, enforced);
-}, "gatePasses");
-var eligibleApps = /* @__PURE__ */ __name((registry3, trigger, consent2, enforced) => {
-  const targets = [];
-  for (const slug of registry3.order) {
-    const app2 = registry3.apps[slug];
-    if (app2 === void 0 || !wantsTrigger(app2, trigger) || !gatePasses({ slug, app: app2 }, trigger, consent2, enforced)) {
-      continue;
-    }
-    const installs = app2.installs.filter((install) => install.active).map(({ id, ord, label }) => ({ id, ord, label }));
-    if (installs.length === 0) {
-      continue;
-    }
-    targets.push({ slug, app: app2, installs });
-  }
-  return targets;
-}, "eligibleApps");
-
-// src/apps/fan-out.ts
-var MAX_APPS_PER_DOMAIN = 50;
-var FAN_OUT_CONCURRENCY = 6;
-var runPool = /* @__PURE__ */ __name(async (limit, tasks) => {
-  const running = /* @__PURE__ */ new Set();
-  for (const task of tasks) {
-    const invocation = task().finally(() => running.delete(invocation));
-    running.add(invocation);
-    if (running.size >= limit) {
-      await Promise.race(running);
-    }
-  }
-  await Promise.all(running);
-}, "runPool");
-var fanOutToApps = /* @__PURE__ */ __name(async (env, trigger, snapshot, { deliverPush, writeAttribution: writeAttribution2, writeContext: writeContext2, budget, trace }) => {
-  const { registry: registry3, error: error51 } = siteRegistry();
-  const targets = eligibleApps(registry3, trigger, snapshot.consent, consentEnforced(env));
-  if (error51 === void 0 && targets.length === 0) {
-    return;
-  }
-  await runInvocation(
-    { name: "do.anon.app_fan_out", trace, attrs: { "fan_out.kind": trigger.kind, "fan_out.apps": targets.length } },
-    async () => {
-      if (error51 !== void 0) {
-        addSpanEvent("apps registry is malformed; apps are off", { level: "error", attrs: { error: error51 } });
-        return;
-      }
-      const context = invocationContext(env);
-      if (context === void 0) {
-        addSpanEvent("apps skipped: APPS_KEY_MASTER or QINTO_DOMAIN_ID is missing", { level: "warn" });
-        return;
-      }
-      const capped = targets.slice(0, MAX_APPS_PER_DOMAIN);
-      if (capped.length < targets.length) {
-        addSpanEvent("eligible apps exceed the per-event budget", {
-          level: "warn",
-          attrs: { eligible: targets.length, cap: MAX_APPS_PER_DOMAIN }
-        });
-      }
-      await runPool(
-        FAN_OUT_CONCURRENCY,
-        capped.map((target) => {
-          return () => invokeApp(env, { target, trigger, snapshot, context, deliverPush, writeAttribution: writeAttribution2, writeContext: writeContext2, budget });
-        })
-      );
-    }
-  );
-}, "fanOutToApps");
-
 // src/apps/transform.ts
 var TRANSFORM_TIMEOUT_MS = 500;
 var TRANSFORM_CHAIN_BUDGET_MS = 1e3;
@@ -26273,11 +26276,7 @@ var AnonDO = class extends DurableObject2 {
       const attachment = connectionAttachment(request, geo);
       server.serializeAttachment(attachment);
       this.deliverSharedContext(server);
-      this.appFanOut(
-        { kind: "connect", ...attachment.cf === void 0 ? {} : { geo: attachment.cf }, host: attachment.host },
-        userId,
-        createDataPointBudget()
-      );
+      this.appFanOut({ kind: "connect", ...attachment.cf === void 0 ? {} : { geo: attachment.cf }, host: attachment.host }, userId);
       return new Response(null, { status: 101, webSocket: client });
     });
   }
@@ -26416,6 +26415,21 @@ var AnonDO = class extends DurableObject2 {
       });
     });
   }
+  // Returns without awaiting the chain: the fan-out worker must not wait on this object's queue. The
+  // chain runs outside the queue turn on purpose — applyEffects awaits attributionDelivery and
+  // contextDelivery, which enqueue, so a queued task would wait on work chained behind itself.
+  appEffects(input, trace) {
+    const run = runInvocation({ name: "do.anon.app_effects", trace, attrs: { "app.slug": input.slug } }, () => {
+      return applyEffects(this.env, {
+        ...input,
+        deliverPush: this.pushDelivery,
+        writeAttribution: this.attributionDelivery,
+        writeContext: this.contextDelivery
+      });
+    });
+    this.ctx.waitUntil(run.catch((error51) => console.warn("app effects failed", { app: input.slug, error: error51 })));
+    return Promise.resolve();
+  }
   // Returns what storage now holds, not what policy allowed: the browser memoes exactly these pairs,
   // so a value the caps refused must never be reported as stored.
   capture(input, trace) {
@@ -26632,7 +26646,7 @@ var AnonDO = class extends DurableObject2 {
   consentReply(ref, userId) {
     return { t: "consentState", ref, ...userId === null ? {} : { anonId: userId }, ...consentState2(this.kv) };
   }
-  pushDelivery = /* @__PURE__ */ __name((push) => {
+  pushDelivery = /* @__PURE__ */ __name(async (push) => {
     this.deliverAppPush(push);
   }, "pushDelivery");
   // Calls the public method directly: it enqueues internally, and both effect paths already run
@@ -26657,13 +26671,12 @@ var AnonDO = class extends DurableObject2 {
       if (isNoopAction(action)) {
         return;
       }
-      const dataPoints = createDataPointBudget();
-      const transformed = await this.transformAction(action, dataPoints);
+      const transformed = await this.transformAction(action, createDataPointBudget());
       if (transformed === null) {
         return;
       }
       recorded = transformed.action;
-      await this.runAction(transformed.action, transformed.releaseEmissions, dataPoints);
+      await this.runAction(transformed.action, transformed.releaseEmissions);
     } finally {
       this.recordActionBlocks(recorded);
     }
@@ -26673,9 +26686,9 @@ var AnonDO = class extends DurableObject2 {
       actionBlocks(action, this.appsSnapshot(action.userId), this.wiped ? [] : allIdentifiers(this.sql, this.identifiersMirror))
     );
   }
-  async runAction(current, releaseEmissions, dataPoints) {
+  async runAction(current, releaseEmissions) {
     if (current.type !== "alias" && isDeliveryOnlyAction(current)) {
-      this.appFanOut({ kind: "event", action: current }, current.userId, dataPoints);
+      this.appFanOut({ kind: "event", action: current }, current.userId);
       this.releaseTransformEmissions(releaseEmissions);
       return;
     }
@@ -26711,7 +26724,7 @@ var AnonDO = class extends DurableObject2 {
       } else {
         await this.ingestConsent(current);
       }
-      this.appFanOut({ kind: "event", action: current }, current.userId, dataPoints);
+      this.appFanOut({ kind: "event", action: current }, current.userId);
       this.releaseTransformEmissions(releaseEmissions);
     } finally {
       if (novelIdentifier) {
@@ -26766,16 +26779,16 @@ var AnonDO = class extends DurableObject2 {
     }
     this.ctx.waitUntil(release().catch((error51) => console.warn("transform emission release failed", { error: error51 })));
   }
-  appFanOut(trigger, anonId, dataPoints) {
-    const snapshot = this.appsSnapshot(anonId);
+  appFanOut(trigger, anonId) {
+    const { registry: registry3, error: error51 } = siteRegistry();
+    if (error51 === void 0 && eligibleApps(registry3, trigger, consentState2(this.kv), consentEnforced(this.env)).length === 0) {
+      return;
+    }
+    const job = { trigger, snapshot: this.appsSnapshot(anonId), trace: currentTraceContext() };
     this.ctx.waitUntil(
-      fanOutToApps(this.env, trigger, snapshot, {
-        deliverPush: this.pushDelivery,
-        writeAttribution: this.attributionDelivery,
-        writeContext: this.contextDelivery,
-        budget: dataPoints,
-        trace: currentTraceContext()
-      }).catch((error51) => console.warn("app fan-out failed", { error: error51 }))
+      traced("rpc fan_out.run", {}, () => {
+        return this.ctx.exports.FanOut.run(job);
+      }).catch((error52) => console.warn("app fan-out hand-off failed", { error: error52 }))
     );
   }
   getProperties(trace) {
@@ -27122,6 +27135,19 @@ var AnonDO = class extends DurableObject2 {
 // src/id-graph/global/do.ts
 import { DurableObject as DurableObject3 } from "cloudflare:workers";
 
+// src/helpers/run-pool.ts
+var runPool = /* @__PURE__ */ __name(async (limit, tasks) => {
+  const running = /* @__PURE__ */ new Set();
+  for (const task of tasks) {
+    const invocation = task().finally(() => running.delete(invocation));
+    running.add(invocation);
+    if (running.size >= limit) {
+      await Promise.race(running);
+    }
+  }
+  await Promise.all(running);
+}, "runPool");
+
 // src/id-graph/global/facts.ts
 var FACT_KINDS2 = [...PROJECTION_KINDS, "identifier", "conversion", "anon"];
 var FACT_COLUMNS = "kind, scope, key, value, source, amount, currency, event_id, data_json, first_at, observed_at";
@@ -27476,6 +27502,7 @@ export {
   AliasDO,
   AnonDO,
   Broker,
+  FanOut,
   GlobalDO,
   app,
   index_default as default

package/dist/worker-artifact/version.json

@@ -1,8 +1,8 @@
 {
   "main": {
     "version": "0.1.0",
-    "gitSha": "539e97d61a67ca9c5c6580b94350354e917fcf99",
-    "builtAt": "2026-08-31T10:11:02.141Z",
+    "gitSha": "d2c28f81511d0b1e69a222d04905c6cbea53bb89",
+    "builtAt": "2026-09-01T16:47:48.958Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotout/qinto-cli",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "type": "module",
   "description": "Qinto CLI: authenticate against the Qinto platform and operate it from the terminal or from an agent.",
   "repository": {
@@ -40,8 +40,8 @@
     "typescript": "6.0.3",
     "vite": "^8.0.0",
     "vitest": "4.1.10",
-    "@qinto/app-manifest": "0.0.0",
     "@qinto/app-dev": "0.0.0",
+    "@qinto/app-manifest": "0.0.0",
     "@qinto/app-build": "0.0.0",
     "@qinto/oauth-grammar": "0.0.0"
   },