@classytic/primitives 0.20.0 → 0.22.0

package/dist/approval.d.mts

@@ -83,17 +83,17 @@ interface CreateStepInput {
   readonly requiredApprovals?: number;
   readonly threshold?: ApprovalThreshold;
 }
-type ApprovalErrorCode = 'EMPTY_STEPS' | 'DUPLICATE_STEP_ID' | 'EMPTY_APPROVERS' | 'DUPLICATE_APPROVER_ID' | 'INVALID_QUORUM' | 'UNKNOWN_STEP' | 'UNAUTHORIZED_APPROVER' | 'STEP_NOT_ACTIVE' | 'STEP_ALREADY_DECIDED_BY_APPROVER'
+type ApprovalErrorCode = 'EMPTY_STEPS' | 'DUPLICATE_STEP_ID' | 'EMPTY_APPROVERS' | 'DUPLICATE_APPROVER_ID' | 'INVALID_QUORUM' | 'UNKNOWN_STEP' | 'UNAUTHORIZED_APPROVER' | 'STEP_NOT_ACTIVE' | 'STEP_ALREADY_DECIDED_BY_APPROVER' |
 /** A finalize/commit was attempted while the chain has not reached
  *  `approved` (still `pending`, or `rejected`). The single canonical
  *  "not yet approved" gate — hosts route it through arc-approval's
  *  `rethrowApprovalError` to the `approval.chain_incomplete` wire code. */
-| 'CHAIN_INCOMPLETE'
+'CHAIN_INCOMPLETE' |
 /** A finalize/commit was attempted with NO chain at all. Distinct from
  *  `CHAIN_INCOMPLETE`: the chain is not unfinished, it is absent — the
  *  document never carried one, or a schema that never declared the field
  *  stripped it on write. See {@link assertApproved}. */
-| 'CHAIN_MISSING';
+'CHAIN_MISSING';
 declare class ApprovalError extends Error {
   readonly name = "ApprovalError";
   readonly code: ApprovalErrorCode;

package/dist/bank-transaction.d.mts

@@ -1,5 +1,4 @@
-import { n as Money } from "./money-DPo9fLBi.mjs";
-
+import { n as Money } from "./money-CfAvfNiM.mjs";
 //#region src/money/bank-transaction.d.ts
 /**
  * The other side of a bank transaction. All fields optional — different

package/dist/{brand-LLXqoh5J.d.mts → brand-Lj_75Y_r.d.mts}

@@ -18,19 +18,19 @@ type Brand<T, B extends string> = T & {
   readonly [__brand]: B;
 };
 /** Flattens intersection types for nicer IDE hover output. */
-type Prettify<T> = { [K in keyof T]: T[K] } & {};
+type Prettify<T> = { [K in keyof T]: T[K]; } & {};
 /** Recursive partial — every leaf becomes optional. */
-type DeepPartial<T> = T extends ((...args: readonly unknown[]) => unknown) ? T : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends object ? { [K in keyof T]?: DeepPartial<T[K]> } : T;
+type DeepPartial<T> = T extends ((...args: readonly unknown[]) => unknown) ? T : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends object ? { [K in keyof T]?: DeepPartial<T[K]>; } : T;
 /** Recursive readonly — every leaf becomes immutable. */
-type DeepReadonly<T> = T extends ((...args: readonly unknown[]) => unknown) ? T : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepReadonly<U>> : T extends object ? { readonly [K in keyof T]: DeepReadonly<T[K]> } : T;
+type DeepReadonly<T> = T extends ((...args: readonly unknown[]) => unknown) ? T : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepReadonly<U>> : T extends object ? { readonly [K in keyof T]: DeepReadonly<T[K]>; } : T;
 /** Make specific keys required while leaving the rest as-is. */
-type RequireKeys<T, K extends keyof T> = T & { [P in K]-?: T[P] };
+type RequireKeys<T, K extends keyof T> = T & { [P in K]-?: T[P]; };
 /** Make specific keys optional while leaving the rest as-is. */
-type OptionalKeys<T, K extends keyof T> = Omit<T, K> & { [P in K]?: T[P] };
+type OptionalKeys<T, K extends keyof T> = Omit<T, K> & { [P in K]?: T[P]; };
 /** A value that may be absent in three flavours — `T | null | undefined`. */
 type Nullable<T> = T | null | undefined;
 /** Keys of T whose value type is assignable to V. */
-type KeysMatching<T, V> = { [K in keyof T]-?: T[K] extends V ? K : never }[keyof T];
+type KeysMatching<T, V> = { [K in keyof T]-?: T[K] extends V ? K : never; }[keyof T];
 /** Non-empty array guard type. */
 type NonEmptyArray<T> = readonly [T, ...T[]];
 //#endregion

package/dist/brand.d.mts

@@ -1,2 +1,2 @@
-import { a as NonEmptyArray, c as Prettify, i as KeysMatching, l as RequireKeys, n as DeepPartial, o as Nullable, r as DeepReadonly, s as OptionalKeys, t as Brand } from "./brand-LLXqoh5J.mjs";
+import { a as NonEmptyArray, c as Prettify, i as KeysMatching, l as RequireKeys, n as DeepPartial, o as Nullable, r as DeepReadonly, s as OptionalKeys, t as Brand } from "./brand-Lj_75Y_r.mjs";
 export { Brand, DeepPartial, DeepReadonly, KeysMatching, NonEmptyArray, Nullable, OptionalKeys, Prettify, RequireKeys };

package/dist/cadence.d.mts

@@ -1,2 +1,2 @@
-import { a as CronCadence, c as MonthlyCadence, d as nextOccurrence, f as occurrencesBetween, i as CadenceKind, l as WeeklyCadence, n as CadenceError, o as DailyCadence, p as validateCadence, r as CadenceErrorCode, s as IsoWeekday, t as Cadence, u as YearlyCadence } from "./cadence-BFQVC1Qp.mjs";
+import { a as CronCadence, c as MonthlyCadence, d as nextOccurrence, f as occurrencesBetween, i as CadenceKind, l as WeeklyCadence, n as CadenceError, o as DailyCadence, p as validateCadence, r as CadenceErrorCode, s as IsoWeekday, t as Cadence, u as YearlyCadence } from "./cadence-5X6TiD49.mjs";
 export { Cadence, CadenceError, CadenceErrorCode, CadenceKind, CronCadence, DailyCadence, IsoWeekday, MonthlyCadence, WeeklyCadence, YearlyCadence, nextOccurrence, occurrencesBetween, validateCadence };

package/dist/cadence.mjs

@@ -200,7 +200,7 @@ function stepYearlyZoned(c, from, zone) {
 }
 function stepDaily(c, from) {
 	const start = c.startAt;
-	const diffDays = Math.floor((from.getTime() - start.getTime()) / (1440 * 60 * 1e3));
+	const diffDays = Math.floor((from.getTime() - start.getTime()) / 864e5);
 	const nextNthDay = Math.floor(diffDays / c.interval) * c.interval + c.interval;
 	const nextMs = start.getTime() + nextNthDay * 24 * 60 * 60 * 1e3;
 	return new Date(nextMs);
@@ -208,7 +208,7 @@ function stepDaily(c, from) {
 function stepWeekly(c, from) {
 	const anchor = c.startAt;
 	const sortedDays = [...c.daysOfWeek ?? [isoWeekday(anchor)]].sort((a, b) => a - b);
-	const oneDay = 1440 * 60 * 1e3;
+	const oneDay = 864e5;
 	const msPerWeek = 7 * oneDay;
 	let cursor = from.getTime() + oneDay;
 	const maxSteps = Math.max(60, c.interval * 14);

package/dist/calendar.d.mts

@@ -1,2 +1,2 @@
-import { a as isoWeekday, i as addYears, n as addDays, o as startOfDay, r as addMonths, s as startOfMonth, t as UtcOffsetMinutes } from "./calendar-B6fm-FbR.mjs";
+import { a as isoWeekday, i as addYears, n as addDays, o as startOfDay, r as addMonths, s as startOfMonth, t as UtcOffsetMinutes } from "./calendar-DJWSbcgE.mjs";
 export { UtcOffsetMinutes, addDays, addMonths, addYears, isoWeekday, startOfDay, startOfMonth };

package/dist/calendar.mjs

@@ -9,13 +9,13 @@ const DAY_MS = 864e5;
 function startOfDay(instant, offsetMinutes = 0) {
 	const shifted = new Date(instant.getTime() + offsetMinutes * MINUTE_MS);
 	const localMidnightAsUtc = Date.UTC(shifted.getUTCFullYear(), shifted.getUTCMonth(), shifted.getUTCDate());
-	return new Date(localMidnightAsUtc - offsetMinutes * MINUTE_MS);
+	return /* @__PURE__ */ new Date(localMidnightAsUtc - offsetMinutes * MINUTE_MS);
 }
 /** The absolute instant of the first-of-month midnight, in the given offset. */
 function startOfMonth(instant, offsetMinutes = 0) {
 	const shifted = new Date(instant.getTime() + offsetMinutes * MINUTE_MS);
 	const localFirstAsUtc = Date.UTC(shifted.getUTCFullYear(), shifted.getUTCMonth(), 1);
-	return new Date(localFirstAsUtc - offsetMinutes * MINUTE_MS);
+	return /* @__PURE__ */ new Date(localFirstAsUtc - offsetMinutes * MINUTE_MS);
 }
 /** ISO weekday (1 = Monday … 7 = Sunday) of `instant` in the given offset. */
 function isoWeekday(instant, offsetMinutes = 0) {

package/dist/condition.mjs

@@ -83,7 +83,7 @@ var ConditionError = class extends Error {
 		this.code = code;
 	}
 };
-const COMPARATORS = new Set([
+const COMPARATORS = /* @__PURE__ */ new Set([
 	"eq",
 	"neq",
 	"gt",
@@ -98,7 +98,7 @@ const COMPARATORS = new Set([
 	"isNull",
 	"isNotNull"
 ]);
-const UNARY_OPS = new Set(["isNull", "isNotNull"]);
+const UNARY_OPS = /* @__PURE__ */ new Set(["isNull", "isNotNull"]);
 /**
 * Validate a condition shape before persisting. Recurses through composites.
 * Throws `ConditionError` so hosts get a stable code + message in API

package/dist/context.d.mts

@@ -1,5 +1,4 @@
 import { IdLike } from "./reference.mjs";
-
 //#region src/composition/context.d.ts
 /**
  * Operation context threaded through package APIs.

package/dist/currency.d.mts

@@ -1,2 +1,2 @@
-import { A as convertWithSnapshot, C as CURRENCY_PATTERN, D as FxSnapshot, E as FxRounding, F as minorUnitFactor, I as reverseWithSnapshot, L as toCurrencyCode, M as isCurrencyCode, N as isFxSnapshot, O as InvalidCurrencyCodeError, P as isKnownCurrency, S as CURRENCIES, T as CurrencyMismatchError, j as currencyCode, k as MINOR_UNIT_FACTOR, w as CurrencyCode } from "./money-DPo9fLBi.mjs";
+import { A as convertWithSnapshot, C as CURRENCY_PATTERN, D as FxSnapshot, E as FxRounding, F as minorUnitFactor, I as reverseWithSnapshot, L as toCurrencyCode, M as isCurrencyCode, N as isFxSnapshot, O as InvalidCurrencyCodeError, P as isKnownCurrency, S as CURRENCIES, T as CurrencyMismatchError, j as currencyCode, k as MINOR_UNIT_FACTOR, w as CurrencyCode } from "./money-CfAvfNiM.mjs";
 export { CURRENCIES, CURRENCY_PATTERN, CurrencyCode, CurrencyMismatchError, FxRounding, FxSnapshot, InvalidCurrencyCodeError, MINOR_UNIT_FACTOR, convertWithSnapshot, currencyCode, isCurrencyCode, isFxSnapshot, isKnownCurrency, minorUnitFactor, reverseWithSnapshot, toCurrencyCode };

package/dist/environment.d.mts

@@ -0,0 +1,90 @@
+//#region src/composition/environment.d.ts
+/**
+ * `NODE_ENV` classification — the ONE answer to "which environment is this?".
+ *
+ * ## Why this is a primitive and not four copies
+ *
+ * `NODE_ENV` has two accepted spellings per bucket in practice — `production` OR `prod`, `test` OR
+ * `qa` — so a local comparison against one literal is wrong for the other, and it is wrong in the
+ * expensive direction. Almost every call site computes a NEGATIVE (`!== 'production'`,
+ * `isProduction === false`), so a missed spelling does not close a gate, it OPENS one.
+ *
+ * That is not hypothetical. Every item below was found in shipped code, and **not one of them
+ * threw**:
+ *
+ * | site | what `NODE_ENV=prod` did |
+ * |---|---|
+ * | `arc/plugins/errorHandler.ts` | returned the RAW thrown message of a 500 to the client |
+ * | `arc/auth/sessionManager.ts` | issued session cookies **without `Secure`** |
+ * | gym: pos / revenue / membership / order / catalog / attendance | permitted NON-TRANSACTIONAL money writes in production |
+ * | gym `app.ts` | selected arc's DEVELOPMENT preset in production |
+ * | be-prod `media.engine.ts` | enabled the in-memory media driver fallback — uploads 200, files gone on restart |
+ * | be-prod `contract.ports.ts`, `crm.module.ts` | non-atomic receivable / lead-conversion writes |
+ * | be-prod `logger.ts` | pino's pretty TRANSPORT in production |
+ * | be-prod `guest-order.resource.ts` | rate limiter armed under `qa` and nowhere else |
+ *
+ * `qa` had the mirror problem: classified as development by one host and test by another, so
+ * multi-boot support silently vanished on a QA run.
+ *
+ * **This logic already existed four times** — be-prod `classifyEnv`, gym `businessMode()`, arc's own
+ * CLI config template (as a `z.preprocess`), and implicitly in arc's four raw comparison sites. All
+ * four agreed on the spellings and the buckets, which is exactly why collapsing them is mechanical
+ * rather than a behaviour change. A fifth copy was one new vertical away.
+ *
+ * ## Why primitives owns it
+ *
+ * arc's own ownership rule: *primitives owns pure cross-package contracts, arc owns runtime.* This
+ * is a pure total function with no dependencies, and its consumers are not all arc apps — kernels,
+ * workers, CLIs and the spine need the same answer without pulling in a web framework. primitives
+ * is already a required peer of arc, so every arc host has it at no additional cost.
+ *
+ * ## Prefer an EXPLICIT signal where one exists
+ *
+ * If a caller already has a declared environment — arc's `preset`, a `deployment.config`, an
+ * injected flag — **use that instead**. It is a specific instruction, and this function reads an
+ * ambient default. A specific setting must never be overridden by a general one.
+ */
+/** The three buckets everything downstream reasons about. Mutually exclusive and total. */
+type EnvClass = 'development' | 'test' | 'production';
+/**
+ * Classify a raw `NODE_ENV` value.
+ *
+ * Total by construction — every input yields exactly one bucket, so a caller can never observe a
+ * fourth state or `undefined`.
+ *
+ * ## Whitespace IS trimmed, and that is a deliberate divergence from the four copies
+ *
+ * None of the previous implementations trimmed. A value carrying a trailing space or newline —
+ * routine from a `.env` file, a Docker `ENV` line, or a CI variable pasted with a line ending —
+ * therefore matched nothing and fell through to `development`. That is the dangerous direction: a
+ * genuine production deployment classified as development, which is precisely the failure this
+ * function exists to prevent. Trimming can only ever move a value TOWARD the bucket its author
+ * plainly intended.
+ *
+ * ## An unrecognised value falls back to `development`
+ *
+ * Preserved from all four prior implementations, so adopting this changes no existing behaviour.
+ *
+ * Be aware of what it costs: a typo (`prodction`) classifies as development and therefore OPENS the
+ * gates a production deployment wanted shut. The stricter alternative — normalise known aliases and
+ * THROW on anything else — is more defensible ("an input you do not understand must fail, not
+ * widen"), but it is a breaking operational change for any deployment currently running an
+ * unrecognised value and belongs in its own release with its own test. Do not change it here
+ * silently.
+ */
+declare function classifyEnv(env: string | undefined | null): EnvClass;
+/**
+ * `true` when the value classifies as production.
+ *
+ * A named predicate rather than a `classifyEnv(x) === 'production'` at each call site: a literal
+ * comparison against an env string is the exact shape that caused every defect listed above, so
+ * this module should not contain one — even a correct one — for the next reader to copy.
+ *
+ * Deliberately the ONLY predicate. `isTest` / `isDevelopment` were added and removed the same day:
+ * they had zero importers, because consumers that need all three buckets build their own triple
+ * from `classifyEnv` (be-prod's `config.*`, gym's `businessMode()`). Speculative surface on a
+ * published package is not free — it has to be supported, and it invited a needless version bump.
+ */
+declare function isProductionEnv(env: string | undefined | null): boolean;
+//#endregion
+export { EnvClass, classifyEnv, isProductionEnv };

package/dist/environment.mjs

@@ -0,0 +1,53 @@
+//#region src/composition/environment.ts
+/**
+* Classify a raw `NODE_ENV` value.
+*
+* Total by construction — every input yields exactly one bucket, so a caller can never observe a
+* fourth state or `undefined`.
+*
+* ## Whitespace IS trimmed, and that is a deliberate divergence from the four copies
+*
+* None of the previous implementations trimmed. A value carrying a trailing space or newline —
+* routine from a `.env` file, a Docker `ENV` line, or a CI variable pasted with a line ending —
+* therefore matched nothing and fell through to `development`. That is the dangerous direction: a
+* genuine production deployment classified as development, which is precisely the failure this
+* function exists to prevent. Trimming can only ever move a value TOWARD the bucket its author
+* plainly intended.
+*
+* ## An unrecognised value falls back to `development`
+*
+* Preserved from all four prior implementations, so adopting this changes no existing behaviour.
+*
+* Be aware of what it costs: a typo (`prodction`) classifies as development and therefore OPENS the
+* gates a production deployment wanted shut. The stricter alternative — normalise known aliases and
+* THROW on anything else — is more defensible ("an input you do not understand must fail, not
+* widen"), but it is a breaking operational change for any deployment currently running an
+* unrecognised value and belongs in its own release with its own test. Do not change it here
+* silently.
+*/
+function classifyEnv(env) {
+	switch ((env ?? "").trim().toLowerCase()) {
+		case "production":
+		case "prod": return "production";
+		case "test":
+		case "qa": return "test";
+		default: return "development";
+	}
+}
+/**
+* `true` when the value classifies as production.
+*
+* A named predicate rather than a `classifyEnv(x) === 'production'` at each call site: a literal
+* comparison against an env string is the exact shape that caused every defect listed above, so
+* this module should not contain one — even a correct one — for the next reader to copy.
+*
+* Deliberately the ONLY predicate. `isTest` / `isDevelopment` were added and removed the same day:
+* they had zero importers, because consumers that need all three buckets build their own triple
+* from `classifyEnv` (be-prod's `config.*`, gym's `businessMode()`). Speculative surface on a
+* published package is not free — it has to be supported, and it invited a needless version bump.
+*/
+function isProductionEnv(env) {
+	return classifyEnv(env) === "production";
+}
+//#endregion
+export { classifyEnv, isProductionEnv };

package/dist/event-infra.d.mts

@@ -1,5 +1,4 @@
 import { DomainEvent, EventHandler, EventTransport, PublishManyResult } from "./events.mjs";
-
 //#region src/events/event-infra.d.ts
 /** Minimal error-only logger — assignable from `console`, pino, fastify.log. */
 interface ErrorLogger {
@@ -85,5 +84,23 @@ declare class InProcessEventBus implements EventTransport {
 }
 /** Factory form of {@link InProcessEventBus} for hosts that prefer functions. */
 declare function createInProcessBus(options?: InProcessEventBusOptions): InProcessEventBus;
+/**
+ * `MemoryOutboxStore` does NOT live here. It is exported from exactly one
+ * place: `@classytic/primitives/memory-outbox`.
+ *
+ * This module used to also export it — first as a second, MINIMAL
+ * implementation (save / getPending / acknowledge / purge, no leases, no
+ * retry, no dead-lettering, no dedupe, no validation), then briefly as a
+ * back-compat re-export. Both are gone.
+ *
+ * The re-export was tempting: seven kernels imported it from here, and one
+ * line would have spared seven rebuilds. It was still the wrong call. Two live
+ * import paths for one class means new code picks either, the migration stays
+ * permanently half-done, and the next person has to learn which path is
+ * "real". The cost of the move is seven rebuilds; paying it once is cheaper
+ * than carrying a shim forever.
+ *
+ * This subpath is the in-process BUS. The outbox is its own subpath.
+ */
 //#endregion
 export { ErrorLogger, InProcessEventBus, InProcessEventBusOptions, createInProcessBus };

package/dist/idempotency.d.mts

@@ -121,7 +121,17 @@ interface IdempotencyClaim<TValue = unknown> {
   /** Monotonic attempt counter — each successful takeover increments it. */
   readonly attempts: number;
 }
-type IdempotencyErrorCode = /** Same key, different request body. Never a retry — two commands sharing one key. */'FINGERPRINT_MISMATCH' /** A terminal claim carrying no stored result. Unreplayable; must not answer "ok". */ | 'MISSING_REPLAY' /** The attempt no longer owns the lease — another attempt took over. */ | 'LEASE_LOST' /** Completing / renewing a claim that already reached a terminal state. */ | 'ALREADY_TERMINAL' /** Malformed input (empty key, non-positive lease, invalid instant). */ | 'INVALID_CLAIM';
+type IdempotencyErrorCode =
+/** Same key, different request body. Never a retry — two commands sharing one key. */
+'FINGERPRINT_MISMATCH' |
+/** A terminal claim carrying no stored result. Unreplayable; must not answer "ok". */
+'MISSING_REPLAY' |
+/** The attempt no longer owns the lease — another attempt took over. */
+'LEASE_LOST' |
+/** Completing / renewing a claim that already reached a terminal state. */
+'ALREADY_TERMINAL' |
+/** Malformed input (empty key, non-positive lease, invalid instant). */
+'INVALID_CLAIM';
 declare class IdempotencyError extends Error {
   readonly name = "IdempotencyError";
   readonly code: IdempotencyErrorCode;

package/dist/identity-verification.d.mts

@@ -1,5 +1,4 @@
 import { PersonName } from "./person.mjs";
-
 //#region src/identity/identity-verification.d.ts
 /**
  * Government / institutional identity documents. `trade_license` and

package/dist/memory-outbox.d.mts

@@ -1,10 +1,9 @@
 import { DeadLetteredEvent, DomainEvent } from "./events.mjs";
 import { OutboxAcknowledgeOptions, OutboxClaimOptions, OutboxErrorInfo, OutboxFailOptions, OutboxStatus, OutboxStore, OutboxWriteOptions } from "./outbox.mjs";
-
 //#region src/events/memory-outbox.d.ts
 interface MemoryEntry {
   event: DomainEvent;
-  status: "pending" | "delivered" | "dead_letter";
+  status: 'pending' | 'delivered' | 'dead_letter';
   attempts: number;
   visibleAt: number;
   leaseOwner: string | null;

package/dist/memory-outbox.mjs

@@ -1,13 +1,5 @@
 import { InvalidOutboxEventError, OutboxOwnershipError } from "./outbox.mjs";
 //#region src/events/memory-outbox.ts
-/**
-* In-memory outbox store — reference implementation for dev / testing.
-*
-* Supports the full `OutboxStore` capability set (claim/lease, fail/retry,
-* dedupe, visibleAt). Production deployments should pass a `repository` to
-* `EventOutbox` instead of using this; the memory store exists for unit
-* tests and single-process dev where durable persistence is noise.
-*/
 const DEFAULT_LEASE_MS = 3e4;
 var MemoryOutboxStore = class {
 	entries = [];

package/dist/mixin.d.mts

@@ -45,7 +45,7 @@ interface Mixinable {
  * mixin payload through a well-typed accessor.
  */
 type WithMixin<T, K extends string, M> = T & {
-  readonly mixins: Readonly<Record<string, unknown>> & { readonly [P in K]: M };
+  readonly mixins: Readonly<Record<string, unknown>> & { readonly [P in K]: M; };
 };
 /**
  * Attach (or overwrite) a mixin on a base entity. Returns a NEW object —

package/dist/monetization.d.mts

@@ -1,5 +1,4 @@
-import { n as Money } from "./money-DPo9fLBi.mjs";
-
+import { n as Money } from "./money-CfAvfNiM.mjs";
 //#region src/money/monetization.d.ts
 /**
  * A map of currency code → {@link Money} for explicit per-currency pricing.

package/dist/{money-DPo9fLBi.d.mts → money-CfAvfNiM.d.mts}

@@ -1,5 +1,4 @@
-import { t as Brand } from "./brand-LLXqoh5J.mjs";
-
+import { t as Brand } from "./brand-Lj_75Y_r.mjs";
 //#region src/money/currency.d.ts
 /**
  * ISO 4217 currency code (3 uppercase letters).

package/dist/money.d.mts

@@ -1,2 +1,2 @@
-import { T as CurrencyMismatchError, _ as negateMoney, a as compareMoney, b as sumMoney, c as fromMajor, d as isPositiveMoney, f as isZeroMoney, g as multiplyMoney, h as money, i as addMoney, l as isMoney, m as minorUnitsToMajor, n as Money, o as equalsMoney, p as majorToMinorUnits, r as absMoney, s as formatMinorUnits, t as MinorUnits, u as isNegativeMoney, v as percentOfMinor, x as toMajor, y as subtractMoney } from "./money-DPo9fLBi.mjs";
+import { T as CurrencyMismatchError, _ as negateMoney, a as compareMoney, b as sumMoney, c as fromMajor, d as isPositiveMoney, f as isZeroMoney, g as multiplyMoney, h as money, i as addMoney, l as isMoney, m as minorUnitsToMajor, n as Money, o as equalsMoney, p as majorToMinorUnits, r as absMoney, s as formatMinorUnits, t as MinorUnits, u as isNegativeMoney, v as percentOfMinor, x as toMajor, y as subtractMoney } from "./money-CfAvfNiM.mjs";
 export { CurrencyMismatchError, MinorUnits, Money, absMoney, addMoney, compareMoney, equalsMoney, formatMinorUnits, fromMajor, isMoney, isNegativeMoney, isPositiveMoney, isZeroMoney, majorToMinorUnits, minorUnitsToMajor, money, multiplyMoney, negateMoney, percentOfMinor, subtractMoney, sumMoney, toMajor };

package/dist/otp.mjs

@@ -26,7 +26,7 @@ import { createHmac, randomInt, timingSafeEqual } from "node:crypto";
 * modeled here so the verify primitive stays stateless between attempts.
 */
 const DEFAULT_LENGTH = 6;
-const DEFAULT_TTL_MS = 300 * 1e3;
+const DEFAULT_TTL_MS = 3e5;
 const DEFAULT_MAX_ATTEMPTS = 5;
 function hmac(code, secret) {
 	return createHmac("sha256", secret).update(code).digest("hex");

package/dist/outbox.d.mts

@@ -1,5 +1,4 @@
 import { DeadLetteredEvent, DomainEvent } from "./events.mjs";
-
 //#region src/events/outbox.d.ts
 /**
  * Options passed to {@link OutboxStore.save} for richer write semantics.

package/dist/payment-allocation-status.d.mts

@@ -20,8 +20,11 @@
  * Zero runtime, zero deps.
  */
 declare const PAYMENT_ALLOCATION_STATUS: {
-  /** No portion of the payment has been applied to any obligation yet. */readonly UNALLOCATED: "unallocated"; /** Some of the payment is applied; remainder is available credit. */
-  readonly PARTIAL: "partial"; /** Fully applied — `sum(allocations) === payment.totalAmount`. */
+  /** No portion of the payment has been applied to any obligation yet. */
+  readonly UNALLOCATED: "unallocated";
+  /** Some of the payment is applied; remainder is available credit. */
+  readonly PARTIAL: "partial";
+  /** Fully applied — `sum(allocations) === payment.totalAmount`. */
   readonly ALLOCATED: "allocated";
   /**
    * Sum of allocations exceeds the payment total — invariant violation
@@ -31,8 +34,11 @@ declare const PAYMENT_ALLOCATION_STATUS: {
 };
 type PaymentAllocationStatus = (typeof PAYMENT_ALLOCATION_STATUS)[keyof typeof PAYMENT_ALLOCATION_STATUS];
 declare const RECONCILIATION_STATUS: {
-  /** No bank statement line / settlement record has been linked yet. */readonly UNRECONCILED: "unreconciled"; /** Auto-matched to a `BankTransaction` by amount + date + reference. */
-  readonly MATCHED: "matched"; /** Operator-confirmed match (auto-match failed or was overridden). */
+  /** No bank statement line / settlement record has been linked yet. */
+  readonly UNRECONCILED: "unreconciled";
+  /** Auto-matched to a `BankTransaction` by amount + date + reference. */
+  readonly MATCHED: "matched";
+  /** Operator-confirmed match (auto-match failed or was overridden). */
   readonly MANUAL: "manual";
   /**
    * Match was contested — amount mismatch, duplicate claim, chargeback

package/dist/payment-allocation-status.mjs

@@ -20,15 +20,29 @@
 * Zero runtime, zero deps.
 */
 const PAYMENT_ALLOCATION_STATUS = {
+	/** No portion of the payment has been applied to any obligation yet. */
 	UNALLOCATED: "unallocated",
+	/** Some of the payment is applied; remainder is available credit. */
 	PARTIAL: "partial",
+	/** Fully applied — `sum(allocations) === payment.totalAmount`. */
 	ALLOCATED: "allocated",
+	/**
+	* Sum of allocations exceeds the payment total — invariant violation
+	* that should be flagged for operator review, never silently accepted.
+	*/
 	OVER_ALLOCATED: "over_allocated"
 };
 const RECONCILIATION_STATUS = {
+	/** No bank statement line / settlement record has been linked yet. */
 	UNRECONCILED: "unreconciled",
+	/** Auto-matched to a `BankTransaction` by amount + date + reference. */
 	MATCHED: "matched",
+	/** Operator-confirmed match (auto-match failed or was overridden). */
 	MANUAL: "manual",
+	/**
+	* Match was contested — amount mismatch, duplicate claim, chargeback
+	* in flight. Halts further automated processing until resolved.
+	*/
 	DISPUTED: "disputed"
 };
 const ALLOCATION_VALUES = new Set(Object.values(PAYMENT_ALLOCATION_STATUS));

package/dist/payment-events.d.mts

@@ -1,7 +1,6 @@
-import { n as Money } from "./money-DPo9fLBi.mjs";
+import { n as Money } from "./money-CfAvfNiM.mjs";
 import { PaymentMethodKind } from "./payment-method-kind.mjs";
 import { ProviderUnknownCause } from "./payment-gateway.mjs";
-
 //#region src/events/payment-events.d.ts
 /**
  * Canonical event-name constants. Packages SHOULD publish events
@@ -378,7 +377,7 @@ type _NoStrayMapKeys = Assert<keyof PaymentEventPayloadMap extends PaymentEventT
 /** Each payload's own `eventType` literal matches the key it is filed under. */
 type _DiscriminantMatchesKey = Assert<{ [K in keyof PaymentEventPayloadMap]: PaymentEventPayloadMap[K] extends {
   eventType: K;
-} ? true : false }[keyof PaymentEventPayloadMap] extends true ? true : false>;
+} ? true : false; }[keyof PaymentEventPayloadMap] extends true ? true : false>;
 type PaymentEventContractGuards = [_EveryTypeMapped, _NoStrayMapKeys, _DiscriminantMatchesKey];
 /**
  * Narrow a payload by event type at RUNTIME, with the compile-time narrowing

package/dist/payment-events.mjs

@@ -18,6 +18,18 @@ const PAYMENT_EVENT_TYPE = {
 	DISPUTE_WON: "payment.dispute_won",
 	DISPUTE_LOST: "payment.dispute_lost",
 	SETTLED: "payment.settled",
+	/**
+	* The provider command produced NO observable outcome — timeout, abort,
+	* network fault, or a provider that holds no record and refuses to guess.
+	*
+	* This member exists because the port contract (`ProviderCommandResult` in
+	* `/payment-gateway`) is three-valued — `confirmed | declined | unknown` —
+	* while this catalogue was two-valued. An adapter that hit the third case had
+	* nowhere to publish it, so the only shapes on the bus were SUCCEEDED and
+	* FAILED, and an unobserved outcome had to be forced into one of them.
+	* Forcing it into FAILED is the one that double-charges: it licenses a retry
+	* for a command that may already have moved money.
+	*/
 	UNKNOWN: "payment.unknown"
 };
 /**

package/dist/payment-gateway.d.mts

@@ -1,6 +1,5 @@
-import { n as Money } from "./money-DPo9fLBi.mjs";
+import { n as Money } from "./money-CfAvfNiM.mjs";
 import { PaymentMethodKind } from "./payment-method-kind.mjs";
-
 //#region src/money/payment-gateway.d.ts
 /**
  * Static capability declaration — providers expose this so the engine
@@ -363,7 +362,8 @@ type ProviderCommandResult<T> = {
   outcome: 'declined';
   error: PaymentDecline;
 } | {
-  outcome: 'unknown'; /** Whatever handle we have for asking again later. */
+  outcome: 'unknown';
+  /** Whatever handle we have for asking again later. */
   providerReference?: string;
   /**
    * NORMALIZED reason we do not know — never a raw exception message.

package/dist/payment-method-kind.d.mts

@@ -23,23 +23,35 @@
  * "what kind of payment was this" needs to be typed.
  */
 declare const PAYMENT_METHOD_KIND: {
-  /** Credit / debit card — Visa, Mastercard, Amex, RuPay, UnionPay, … */readonly CARD: "card"; /** Standard bank transfer — ACH credit, SEPA credit, IMPS, NEFT, RTGS, wire. */
-  readonly BANK_TRANSFER: "bank_transfer"; /** Real-time bank rails — UPI, Pix, FedNow, PromptPay, FPX, GrabPay rails. */
-  readonly INSTANT_BANK_TRANSFER: "instant_bank_transfer"; /** Mandate-based bank pull — SEPA Direct Debit, ACH Debit, BACS Direct Debit, AU BECS. */
-  readonly DIRECT_DEBIT: "direct_debit"; /** Digital wallet — Apple Pay, Google Pay, Link, PayPal, Cashapp, Alipay, WeChat Pay, Revolut Pay. */
-  readonly WALLET: "wallet"; /** Cash-in/out wallet infrastructure in unbanked markets — bKash, Nagad, M-Pesa, MoMo, GCash. */
-  readonly MOBILE_MONEY: "mobile_money"; /** Buy now pay later — Klarna, Afterpay, Affirm, Tabby, Tamara. */
-  readonly BNPL: "bnpl"; /** Customer-purchased prepaid credit / voucher. */
-  readonly GIFT_CARD: "gift_card"; /** Physical cash. */
-  readonly CASH: "cash"; /** Paper cheque. */
-  readonly CHEQUE: "cheque"; /** Cryptocurrency settlement. */
+  /** Credit / debit card — Visa, Mastercard, Amex, RuPay, UnionPay, … */
+  readonly CARD: "card";
+  /** Standard bank transfer — ACH credit, SEPA credit, IMPS, NEFT, RTGS, wire. */
+  readonly BANK_TRANSFER: "bank_transfer";
+  /** Real-time bank rails — UPI, Pix, FedNow, PromptPay, FPX, GrabPay rails. */
+  readonly INSTANT_BANK_TRANSFER: "instant_bank_transfer";
+  /** Mandate-based bank pull — SEPA Direct Debit, ACH Debit, BACS Direct Debit, AU BECS. */
+  readonly DIRECT_DEBIT: "direct_debit";
+  /** Digital wallet — Apple Pay, Google Pay, Link, PayPal, Cashapp, Alipay, WeChat Pay, Revolut Pay. */
+  readonly WALLET: "wallet";
+  /** Cash-in/out wallet infrastructure in unbanked markets — bKash, Nagad, M-Pesa, MoMo, GCash. */
+  readonly MOBILE_MONEY: "mobile_money";
+  /** Buy now pay later — Klarna, Afterpay, Affirm, Tabby, Tamara. */
+  readonly BNPL: "bnpl";
+  /** Customer-purchased prepaid credit / voucher. */
+  readonly GIFT_CARD: "gift_card";
+  /** Physical cash. */
+  readonly CASH: "cash";
+  /** Paper cheque. */
+  readonly CHEQUE: "cheque";
+  /** Cryptocurrency settlement. */
   readonly CRYPTO: "cryptocurrency";
   /**
    * Operator-recorded settlement that doesn't fit any other kind — e.g.
    * an offline bank deposit confirmed by phone, an in-kind exchange, a
    * manual write-off. Always-valid escape hatch.
    */
-  readonly MANUAL: "manual"; /** Unknown or vendor-specific kind — last resort. Prefer a specific kind. */
+  readonly MANUAL: "manual";
+  /** Unknown or vendor-specific kind — last resort. Prefer a specific kind. */
   readonly OTHER: "other";
 };
 type PaymentMethodKind = (typeof PAYMENT_METHOD_KIND)[keyof typeof PAYMENT_METHOD_KIND];

package/dist/payment-method-kind.mjs

@@ -23,18 +23,35 @@
 * "what kind of payment was this" needs to be typed.
 */
 const PAYMENT_METHOD_KIND = {
+	/** Credit / debit card — Visa, Mastercard, Amex, RuPay, UnionPay, … */
 	CARD: "card",
+	/** Standard bank transfer — ACH credit, SEPA credit, IMPS, NEFT, RTGS, wire. */
 	BANK_TRANSFER: "bank_transfer",
+	/** Real-time bank rails — UPI, Pix, FedNow, PromptPay, FPX, GrabPay rails. */
 	INSTANT_BANK_TRANSFER: "instant_bank_transfer",
+	/** Mandate-based bank pull — SEPA Direct Debit, ACH Debit, BACS Direct Debit, AU BECS. */
 	DIRECT_DEBIT: "direct_debit",
+	/** Digital wallet — Apple Pay, Google Pay, Link, PayPal, Cashapp, Alipay, WeChat Pay, Revolut Pay. */
 	WALLET: "wallet",
+	/** Cash-in/out wallet infrastructure in unbanked markets — bKash, Nagad, M-Pesa, MoMo, GCash. */
 	MOBILE_MONEY: "mobile_money",
+	/** Buy now pay later — Klarna, Afterpay, Affirm, Tabby, Tamara. */
 	BNPL: "bnpl",
+	/** Customer-purchased prepaid credit / voucher. */
 	GIFT_CARD: "gift_card",
+	/** Physical cash. */
 	CASH: "cash",
+	/** Paper cheque. */
 	CHEQUE: "cheque",
+	/** Cryptocurrency settlement. */
 	CRYPTO: "cryptocurrency",
+	/**
+	* Operator-recorded settlement that doesn't fit any other kind — e.g.
+	* an offline bank deposit confirmed by phone, an in-kind exchange, a
+	* manual write-off. Always-valid escape hatch.
+	*/
 	MANUAL: "manual",
+	/** Unknown or vendor-specific kind — last resort. Prefer a specific kind. */
 	OTHER: "other"
 };
 const KIND_VALUES = new Set(Object.values(PAYMENT_METHOD_KIND));