@crvouga/mockingbird-service-vpi 0.1.0

package/dist/chunk-32KSYN2C.js

@@ -0,0 +1,3210 @@
+// ../core/dist/clock.js
+var createClock = (source = Date.now) => {
+  let offsetMs = 0;
+  let frozenAt;
+  const now = () => frozenAt ?? source() + offsetMs;
+  return {
+    now,
+    set: (epochMs) => {
+      if (frozenAt !== void 0)
+        frozenAt = epochMs;
+      else
+        offsetMs = epochMs - source();
+    },
+    advance: (deltaMs) => {
+      if (frozenAt !== void 0)
+        frozenAt += deltaMs;
+      else
+        offsetMs += deltaMs;
+    },
+    freeze: () => {
+      frozenAt = now();
+    },
+    unfreeze: () => {
+      if (frozenAt === void 0)
+        return;
+      offsetMs = frozenAt - source();
+      frozenAt = void 0;
+    },
+    reset: () => {
+      offsetMs = 0;
+      frozenAt = void 0;
+    },
+    state: () => ({ now: now(), frozen: frozenAt !== void 0, offsetMs })
+  };
+};
+
+// ../core/dist/collection.js
+var Collection = class {
+  sqlite;
+  namespace;
+  name;
+  constructor(sqlite, namespace, name) {
+    this.sqlite = sqlite;
+    this.namespace = namespace;
+    this.name = name;
+  }
+  bumpCollectionSeq() {
+    const row = this.sqlite.prepare("SELECT value FROM mockingbird_sequences WHERE namespace = ? AND name = ? AND kind = 'collection'").get(this.namespace, this.name);
+    const next = (row?.value ?? 0) + 1;
+    this.sqlite.prepare(`INSERT INTO mockingbird_sequences (namespace, name, kind, value) VALUES (?, ?, 'collection', ?)
+         ON CONFLICT(namespace, name, kind) DO UPDATE SET value = excluded.value`).run(this.namespace, this.name, next);
+    return next;
+  }
+  nextSequence() {
+    return this.sqlite.transaction(() => this.bumpCollectionSeq());
+  }
+  get(id) {
+    const row = this.sqlite.prepare("SELECT value FROM mockingbird_records WHERE namespace = ? AND collection = ? AND id = ?").get(this.namespace, this.name, id);
+    if (!row)
+      return void 0;
+    return JSON.parse(row.value).value;
+  }
+  has(id) {
+    const row = this.sqlite.prepare("SELECT 1 AS ok FROM mockingbird_records WHERE namespace = ? AND collection = ? AND id = ?").get(this.namespace, this.name, id);
+    return row !== void 0;
+  }
+  /** Insert a new record, assigning it the next sequence number. */
+  insert(id, value) {
+    return this.sqlite.transaction(() => {
+      const seq = this.bumpCollectionSeq();
+      const stored = { seq, value };
+      this.sqlite.prepare(`INSERT INTO mockingbird_records (namespace, collection, id, seq, value)
+           VALUES (?, ?, ?, ?, ?)
+           ON CONFLICT(namespace, collection, id) DO UPDATE SET seq = excluded.seq, value = excluded.value`).run(this.namespace, this.name, id, seq, JSON.stringify(stored));
+      return stored;
+    });
+  }
+  /** Replace an existing record's value, keeping its position. */
+  update(id, value) {
+    return this.sqlite.transaction(() => {
+      const row = this.sqlite.prepare("SELECT seq, value FROM mockingbird_records WHERE namespace = ? AND collection = ? AND id = ?").get(this.namespace, this.name, id);
+      if (!row)
+        return void 0;
+      const stored = { seq: row.seq, value };
+      this.sqlite.prepare("UPDATE mockingbird_records SET value = ? WHERE namespace = ? AND collection = ? AND id = ?").run(JSON.stringify(stored), this.namespace, this.name, id);
+      return stored;
+    });
+  }
+  delete(id) {
+    const result = this.sqlite.prepare("DELETE FROM mockingbird_records WHERE namespace = ? AND collection = ? AND id = ?").run(this.namespace, this.name, id);
+    return result.changes > 0;
+  }
+  /** How many records the collection holds, without reading them. */
+  count() {
+    const row = this.sqlite.prepare("SELECT COUNT(*) AS n FROM mockingbird_records WHERE namespace = ? AND collection = ?").get(this.namespace, this.name);
+    return Number(row?.n ?? 0);
+  }
+  list(options = {}) {
+    const rows = this.sqlite.prepare("SELECT id, seq, value FROM mockingbird_records WHERE namespace = ? AND collection = ?").all(this.namespace, this.name);
+    const out = [];
+    for (const row of rows) {
+      const stored = JSON.parse(row.value);
+      if (options.where && !options.where(stored.value, stored.seq))
+        continue;
+      out.push({ id: row.id, seq: stored.seq, value: stored.value });
+    }
+    out.sort((a, b) => options.order === "oldest" ? a.seq - b.seq : b.seq - a.seq);
+    return out;
+  }
+};
+
+// ../core/dist/control.js
+var HEALTH_PATH = "/health";
+var ADMIN_PREFIX = "/__admin";
+var ADMIN_KEY_HEADER = "x-mockingbird-admin-key";
+var NAMESPACE_HEADER = "x-mockingbird-namespace";
+var json = (status, body) => new Response(JSON.stringify(body), {
+  status,
+  headers: { "content-type": "application/json" }
+});
+var adminError = (status, message) => json(status, { error: { type: "mockingbird_admin", message } });
+var UNITS = {
+  ms: 1,
+  s: 1e3,
+  m: 6e4,
+  h: 36e5,
+  d: 864e5
+};
+var parseDuration = (value) => {
+  if (typeof value === "number" && Number.isFinite(value))
+    return value;
+  if (typeof value !== "string")
+    return void 0;
+  const match = /^(-?\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/.exec(value.trim());
+  if (!match)
+    return void 0;
+  return Number(match[1]) * UNITS[match[2]];
+};
+var parseInstant = (value) => {
+  if (typeof value === "number" && Number.isFinite(value))
+    return value;
+  if (typeof value !== "string")
+    return void 0;
+  const parsed = Date.parse(value);
+  return Number.isNaN(parsed) ? void 0 : parsed;
+};
+var matchRoute = (pattern, path) => {
+  const want = pattern.split("/").filter(Boolean);
+  const have = path.split("/").filter(Boolean);
+  if (want.length !== have.length)
+    return void 0;
+  const params = {};
+  for (let i = 0; i < want.length; i++) {
+    const segment = want[i];
+    const actual = have[i];
+    if (segment.startsWith(":"))
+      params[segment.slice(1)] = decodeURIComponent(actual);
+    else if (segment !== actual)
+      return void 0;
+  }
+  return params;
+};
+var readJson = async (request) => {
+  const text = await request.text();
+  if (text.trim() === "")
+    return void 0;
+  return JSON.parse(text);
+};
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var createControlPlane = (context) => {
+  const snapshots = /* @__PURE__ */ new Map();
+  let snapshotCounter = 0;
+  const headerNamespace = (request) => request.headers.get(NAMESPACE_HEADER) ?? context.defaultNamespace;
+  const adminNamespace = (request, url) => url.searchParams.get("namespace") ?? headerNamespace(request);
+  const builtin = {
+    "GET /": () => json(200, {
+      service: context.name,
+      routes: [...Object.keys(builtin), ...Object.keys(context.routes)].sort()
+    }),
+    "POST /reset": async ({ url, namespace }) => {
+      const target = url.searchParams.get("all") === "1" ? "*" : namespace;
+      await context.reset(target);
+      return json(200, { status: "ok", reset: target === "*" ? context.namespaces() : [target] });
+    },
+    "GET /namespaces": () => json(200, { default: context.defaultNamespace, namespaces: context.namespaces() }),
+    "GET /clock": () => json(200, context.clock.state()),
+    "POST /clock": ({ body }) => {
+      if (!isRecord(body))
+        return adminError(400, "expected a JSON object");
+      if (body.reset === true)
+        context.clock.reset();
+      if (body.set !== void 0) {
+        const instant = parseInstant(body.set);
+        if (instant === void 0)
+          return adminError(400, "set: expected epoch ms or ISO-8601");
+        context.clock.set(instant);
+      }
+      if (body.advance !== void 0) {
+        const delta = parseDuration(body.advance);
+        if (delta === void 0)
+          return adminError(400, 'advance: expected ms or "15m"-style');
+        context.clock.advance(delta);
+      }
+      if (body.freeze === true)
+        context.clock.freeze();
+      if (body.freeze === false)
+        context.clock.unfreeze();
+      return json(200, context.clock.state());
+    },
+    "GET /faults": () => json(200, { faults: context.faults.list() }),
+    "POST /faults": ({ body, namespace }) => {
+      if (isRecord(body) && typeof body.preset === "string") {
+        if (!context.applyPreset)
+          return adminError(400, `${context.name} has no fault presets`);
+        const { preset, ...overrides } = body;
+        try {
+          return json(201, {
+            preset,
+            rules: context.applyPreset(preset, namespace, overrides)
+          });
+        } catch (error2) {
+          return adminError(404, error2 instanceof Error ? error2.message : String(error2));
+        }
+      }
+      if (!isRecord(body) || typeof body.status !== "number" && typeof body.delayMs !== "number" && typeof body.latencyMs !== "number" && body.drop !== true && typeof body.effect !== "string") {
+        return adminError(400, "a fault needs a numeric status, a delayMs/latencyMs, drop: true, an effect, or a preset");
+      }
+      const rule = {
+        // Scoped to the caller's namespace unless it asks for every one, so one worker's
+        // injected failure never lands on another's request.
+        namespace,
+        ...body,
+        id: typeof body.id === "string" ? body.id : `fault_${context.faults.list().length + 1}`
+      };
+      return json(201, context.faults.add(rule));
+    },
+    "DELETE /faults": ({ url }) => {
+      const id = url.searchParams.get("id");
+      if (id === null) {
+        context.faults.clear();
+        return json(200, { status: "ok" });
+      }
+      return context.faults.remove(id) ? json(200, { status: "ok" }) : adminError(404, `no fault ${id}`);
+    },
+    "POST /snapshots": ({ namespace }) => {
+      const point = context.timeTravel.checkpoint(namespace, "main");
+      context.timeTravel.retain(namespace, point.id);
+      snapshotCounter++;
+      const id = `snap_${snapshotCounter}`;
+      snapshots.set(id, { namespace, checkpoint: point.id });
+      return json(201, { id, namespace, records: point.records ?? 0 });
+    },
+    "POST /snapshots/:id/restore": ({ params, namespace }) => {
+      const alias = snapshots.get(params.id);
+      if (!alias)
+        return adminError(404, `no snapshot ${params.id}`);
+      if (alias.namespace !== namespace) {
+        return adminError(409, `snapshot ${params.id} belongs to namespace ${alias.namespace}`);
+      }
+      context.timeTravel.checkout(alias.checkpoint, { namespace, branch: "main" });
+      return json(200, { status: "ok", id: params.id, namespace });
+    },
+    "DELETE /snapshots/:id": ({ params }) => {
+      const id = params.id;
+      const alias = snapshots.get(id);
+      if (!alias)
+        return adminError(404, `no snapshot ${id}`);
+      snapshots.delete(id);
+      context.timeTravel.release(alias.namespace, alias.checkpoint);
+      return json(200, { status: "ok" });
+    },
+    "GET /timeline": ({ namespace }) => json(200, context.timeTravel.inspect(namespace)),
+    "POST /checkpoints": ({ body, namespace }) => {
+      const branch = isRecord(body) && typeof body.branch === "string" ? body.branch : "main";
+      try {
+        return json(201, context.timeTravel.checkpoint(namespace, branch));
+      } catch (error2) {
+        return adminError(409, error2 instanceof Error ? error2.message : String(error2));
+      }
+    },
+    "POST /branches/:name": ({ params, body, namespace }) => {
+      const at = isRecord(body) && typeof body.at === "string" ? body.at : void 0;
+      try {
+        return json(201, context.timeTravel.branch(params.name, {
+          namespace,
+          ...at !== void 0 ? { at } : {}
+        }));
+      } catch (error2) {
+        return adminError(409, error2 instanceof Error ? error2.message : String(error2));
+      }
+    },
+    "POST /branches/:name/checkout": ({ params, body, namespace }) => {
+      if (!isRecord(body) || typeof body.checkpoint !== "string") {
+        return adminError(400, 'expected {"checkpoint":"cp_..."}');
+      }
+      try {
+        context.timeTravel.checkout(body.checkpoint, {
+          namespace,
+          branch: params.name
+        });
+        return json(200, { status: "ok", branch: params.name, checkpoint: body.checkpoint });
+      } catch (error2) {
+        return adminError(409, error2 instanceof Error ? error2.message : String(error2));
+      }
+    },
+    "GET /requests": ({ url, namespace }) => {
+      const status = url.searchParams.get("status");
+      const since = url.searchParams.get("since");
+      const limit = url.searchParams.get("limit");
+      const sinceMs = since === null ? void 0 : parseInstant(/^\d+$/.test(since) ? Number(since) : since);
+      if (since !== null && sinceMs === void 0) {
+        return adminError(400, "since: expected epoch ms or ISO-8601");
+      }
+      if (status !== null && !/^\d{3}$/.test(status))
+        return adminError(400, "status: expected an HTTP status");
+      if (limit !== null && !/^\d+$/.test(limit))
+        return adminError(400, "limit: expected a count");
+      const operationId = url.searchParams.get("operationId");
+      const everyNamespace = url.searchParams.get("all") === "1";
+      return json(200, {
+        size: context.journal.size,
+        requests: context.journal.list({
+          ...everyNamespace ? {} : { namespace },
+          ...operationId !== null ? { operationId } : {},
+          ...status !== null ? { status: Number(status) } : {},
+          ...sinceMs !== void 0 ? { since: sinceMs } : {},
+          ...limit !== null ? { limit: Number(limit) } : {}
+        })
+      });
+    },
+    "DELETE /requests": ({ url, namespace }) => {
+      context.journal.clear(url.searchParams.get("all") === "1" ? void 0 : namespace);
+      return json(200, { status: "ok" });
+    },
+    "GET /metrics": () => json(200, context.metrics.report()),
+    "DELETE /metrics": () => {
+      context.metrics.reset();
+      return json(200, { status: "ok" });
+    }
+  };
+  const routes = [...Object.entries(context.routes), ...Object.entries(builtin)].map(([key, handler]) => {
+    const space = key.indexOf(" ");
+    return { method: key.slice(0, space), pattern: key.slice(space + 1), handler };
+  });
+  return {
+    namespaceOf: headerNamespace,
+    async handle(request) {
+      const url = new URL(request.url);
+      if (url.pathname === HEALTH_PATH && request.method === "GET") {
+        return json(200, {
+          status: "ok",
+          service: context.name,
+          uptimeMs: context.wallNow() - context.startedAt,
+          clock: context.clock.state(),
+          namespaces: context.namespaces().length,
+          ...context.describe()
+        });
+      }
+      if (url.pathname !== ADMIN_PREFIX && !url.pathname.startsWith(`${ADMIN_PREFIX}/`)) {
+        return void 0;
+      }
+      if (context.adminKey !== void 0 && request.headers.get(ADMIN_KEY_HEADER) !== context.adminKey) {
+        return adminError(401, `missing or wrong ${ADMIN_KEY_HEADER}`);
+      }
+      const path = url.pathname.slice(ADMIN_PREFIX.length) || "/";
+      for (const route of routes) {
+        if (route.method !== request.method)
+          continue;
+        const params = matchRoute(route.pattern, path);
+        if (!params)
+          continue;
+        let body;
+        try {
+          body = await readJson(request);
+        } catch {
+          return adminError(400, "request body is not valid JSON");
+        }
+        return route.handler({
+          request,
+          url,
+          params,
+          namespace: adminNamespace(request, url),
+          body
+        });
+      }
+      return adminError(404, `no admin route ${request.method} ${path}; GET ${ADMIN_PREFIX} lists them`);
+    }
+  };
+};
+
+// ../core/dist/credentials.js
+var bearerToken = (request) => {
+  const header = request.headers.get("authorization");
+  if (!header)
+    return void 0;
+  const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+  return match?.[1]?.trim() || void 0;
+};
+var createCredentialRegistry = () => {
+  const map = /* @__PURE__ */ new Map();
+  return {
+    set: (credential, namespace) => {
+      map.set(credential, namespace);
+    },
+    get: (credential) => map.get(credential),
+    remove: (credential) => map.delete(credential),
+    clear: () => map.clear(),
+    entries: () => [...map].map(([credential, namespace]) => ({ credential, namespace })).sort((a, b) => a.credential.localeCompare(b.credential))
+  };
+};
+var maskCredential = (credential) => credential.length <= 8 ? `${credential.slice(0, 2)}\u2026` : `${credential.slice(0, 6)}\u2026${credential.slice(-2)}`;
+
+// ../core/dist/rng.js
+var seedFrom = (value) => {
+  let hash = 2166136261;
+  for (let i = 0; i < value.length; i++) {
+    hash ^= value.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return hash >>> 0;
+};
+var createRng = (seed = 0) => {
+  const numeric = typeof seed === "string" ? seedFrom(seed) : seed >>> 0;
+  let state = numeric;
+  const next = () => {
+    state = state + 1831565813 >>> 0;
+    let t = state;
+    t = Math.imul(t ^ t >>> 15, t | 1);
+    t ^= t + Math.imul(t ^ t >>> 7, t | 61);
+    return ((t ^ t >>> 14) >>> 0) / 4294967296;
+  };
+  return {
+    next,
+    int: (min, max) => min + Math.floor(next() * (max - min + 1)),
+    reset: () => {
+      state = numeric;
+    },
+    state: () => state,
+    setState: (next2) => {
+      if (!Number.isSafeInteger(next2) || next2 < 0 || next2 > 4294967295) {
+        throw new RangeError("rng state must be an unsigned 32-bit integer");
+      }
+      state = next2 >>> 0;
+    },
+    seed: numeric
+  };
+};
+
+// ../core/dist/faults.js
+var matches = (rule, candidate) => {
+  if (rule.namespace !== void 0 && rule.namespace !== "*" && rule.namespace !== candidate.namespace) {
+    return false;
+  }
+  if (rule.operationId !== void 0 && rule.operationId !== candidate.operationId)
+    return false;
+  if (rule.method !== void 0 && rule.method.toUpperCase() !== candidate.method.toUpperCase()) {
+    return false;
+  }
+  if (rule.pathPrefix !== void 0 && !candidate.path.startsWith(rule.pathPrefix))
+    return false;
+  return true;
+};
+var faultResponse = (rule) => {
+  const status = rule.status ?? 500;
+  const headers = { "content-type": "application/json", ...rule.headers };
+  if (typeof rule.body === "string")
+    return new Response(rule.body, { status, headers });
+  if (rule.body === null)
+    return new Response(null, { status, headers: rule.headers ?? {} });
+  const body = rule.body === void 0 ? { detail: "Injected by Mockingbird" } : rule.body;
+  return new Response(JSON.stringify(body), { status, headers });
+};
+var createFaultRegistry = (rng = createRng(0), sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms))) => {
+  const entries = [];
+  return {
+    add(rule) {
+      const existing = entries.findIndex((e) => e.rule.id === rule.id);
+      const entry = { rule, remaining: rule.count ?? null, hits: 0 };
+      if (existing >= 0)
+        entries[existing] = entry;
+      else
+        entries.push(entry);
+      return rule;
+    },
+    list: () => entries.map((e) => ({ ...e.rule, remaining: e.remaining, hits: e.hits })),
+    remove(id) {
+      const index = entries.findIndex((e) => e.rule.id === id);
+      if (index < 0)
+        return false;
+      entries.splice(index, 1);
+      return true;
+    },
+    clear() {
+      entries.length = 0;
+    },
+    async take(candidate) {
+      const hits = [];
+      for (const entry of entries) {
+        if (entry.remaining === 0)
+          continue;
+        if (!matches(entry.rule, candidate))
+          continue;
+        const rate = entry.rule.rate ?? 1;
+        if (rng.next() >= rate)
+          continue;
+        entry.hits++;
+        if (entry.remaining !== null)
+          entry.remaining--;
+        const delay = entry.rule.delayMs ?? entry.rule.latencyMs;
+        if (delay !== void 0 && delay > 0) {
+          await sleep(delay);
+        }
+        const hit = { id: entry.rule.id };
+        if (entry.rule.effect !== void 0) {
+          hit.effect = { name: entry.rule.effect, params: entry.rule.params ?? {} };
+        }
+        if (entry.rule.drop === true)
+          hit.drop = true;
+        else if (entry.rule.status !== void 0)
+          hit.response = faultResponse(entry.rule);
+        hits.push(hit);
+        if (hit.drop || hit.response)
+          break;
+      }
+      return hits;
+    }
+  };
+};
+
+// ../../openapi/core/dist/refs.js
+var OpenAPIReferenceError = class extends Error {
+  ref;
+  constructor(ref) {
+    super(`unresolvable $ref: ${ref}`);
+    this.ref = ref;
+    this.name = "OpenAPIReferenceError";
+  }
+};
+var unescapePointer = (segment) => segment.replace(/~1/g, "/").replace(/~0/g, "~");
+var isReference = (value) => typeof value === "object" && value !== null && typeof value.$ref === "string";
+var resolveRef = (document2, ref) => {
+  if (!ref.startsWith("#/"))
+    throw new OpenAPIReferenceError(ref);
+  let cursor = document2;
+  for (const raw of ref.slice(2).split("/")) {
+    const segment = unescapePointer(raw);
+    if (typeof cursor !== "object" || cursor === null || !(segment in cursor)) {
+      throw new OpenAPIReferenceError(ref);
+    }
+    cursor = cursor[segment];
+  }
+  if (cursor === void 0)
+    throw new OpenAPIReferenceError(ref);
+  return cursor;
+};
+var deref = (document2, value) => {
+  let current = value;
+  const seen = /* @__PURE__ */ new Set();
+  while (isReference(current)) {
+    if (seen.has(current.$ref))
+      throw new OpenAPIReferenceError(`${current.$ref} (cycle)`);
+    seen.add(current.$ref);
+    current = resolveRef(document2, current.$ref);
+  }
+  return current;
+};
+
+// ../../openapi/core/dist/types.js
+var HTTP_METHODS = [
+  "get",
+  "put",
+  "post",
+  "delete",
+  "options",
+  "head",
+  "patch",
+  "trace"
+];
+
+// ../../openapi/core/dist/document.js
+var mergeParameters = (document2, item, own) => {
+  const merged = /* @__PURE__ */ new Map();
+  for (const raw of item.parameters ?? []) {
+    const parameter = deref(document2, raw);
+    merged.set(`${parameter.in}:${parameter.name}`, parameter);
+  }
+  for (const raw of own ?? []) {
+    const parameter = deref(document2, raw);
+    merged.set(`${parameter.in}:${parameter.name}`, parameter);
+  }
+  return [...merged.values()];
+};
+var listOperations = (document2) => {
+  const operations = [];
+  for (const [path, item] of Object.entries(document2.paths)) {
+    for (const method of HTTP_METHODS) {
+      const operation = item[method];
+      if (operation?.operationId === void 0)
+        continue;
+      const responses = {};
+      for (const [status, response] of Object.entries(operation.responses)) {
+        responses[status] = deref(document2, response);
+      }
+      operations.push({
+        operationId: operation.operationId,
+        method,
+        path,
+        operation,
+        parameters: mergeParameters(document2, item, operation.parameters),
+        requestBody: operation.requestBody === void 0 ? void 0 : deref(document2, operation.requestBody),
+        responses
+      });
+    }
+  }
+  return operations;
+};
+
+// ../../openapi/core/dist/schema.js
+var resolveSchema = (document2, schema) => {
+  let current = schema;
+  const seen = /* @__PURE__ */ new Set();
+  while (typeof current.$ref === "string") {
+    const ref = current.$ref;
+    if (seen.has(ref))
+      break;
+    seen.add(ref);
+    const { $ref: _ignored, ...siblings } = current;
+    const target = resolveRef(document2, ref);
+    current = { ...target, ...siblings };
+  }
+  if (current.nullable === true) {
+    const { nullable: _nullable, ...rest } = current;
+    const types = schemaTypes(rest);
+    if (types.length > 0 && !types.includes("null"))
+      current = { ...rest, type: [...types, "null"] };
+    else
+      current = rest;
+  }
+  return current;
+};
+var schemaTypes = (schema) => {
+  if (Array.isArray(schema.type))
+    return schema.type;
+  if (schema.type !== void 0)
+    return [schema.type];
+  const inferred = [];
+  if (schema.properties || schema.required || schema.additionalProperties !== void 0)
+    inferred.push("object");
+  if (schema.items || schema.prefixItems || schema.minItems !== void 0 || schema.maxItems !== void 0)
+    inferred.push("array");
+  if (schema.minLength !== void 0 || schema.maxLength !== void 0 || schema.pattern !== void 0)
+    inferred.push("string");
+  if (schema.minimum !== void 0 || schema.maximum !== void 0 || schema.multipleOf !== void 0)
+    inferred.push("number");
+  return inferred;
+};
+var jsonTypeOf = (value) => {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  switch (typeof value) {
+    case "string":
+      return "string";
+    case "boolean":
+      return "boolean";
+    case "number":
+      return Number.isInteger(value) ? "integer" : "number";
+    case "object":
+      return "object";
+    default:
+      return "undefined";
+  }
+};
+var deepEqual = (a, b) => {
+  if (a === b)
+    return true;
+  if (typeof a !== typeof b || a === null || b === null)
+    return false;
+  if (Array.isArray(a)) {
+    return Array.isArray(b) && a.length === b.length && a.every((item, i) => deepEqual(item, b[i]));
+  }
+  if (typeof a === "object" && typeof b === "object" && !Array.isArray(b)) {
+    const ka = Object.keys(a);
+    const kb = Object.keys(b);
+    return ka.length === kb.length && ka.every((k) => deepEqual(a[k], b[k]));
+  }
+  return false;
+};
+var FORMAT_PATTERNS = {
+  uuid: /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,
+  date: /^\d{4}-\d{2}-\d{2}$/,
+  "date-time": /^\d{4}-\d{2}-\d{2}[Tt ]\d{2}:\d{2}:\d{2}(\.\d+)?([Zz]|[+-]\d{2}:\d{2})$/,
+  email: /^[^\s@]+@[^\s@]+\.[^\s@]+$/,
+  uri: /^[a-zA-Z][a-zA-Z0-9+.-]*:[^\s]*$/,
+  ipv4: /^(25[0-5]|2[0-4]\d|1?\d?\d)(\.(25[0-5]|2[0-4]\d|1?\d?\d)){3}$/
+};
+var graphemeLength = (value) => [...value].length;
+var validateValue = (document2, schema, value, path = []) => {
+  const errors = [];
+  const s = resolveSchema(document2, schema);
+  const fail = (message) => errors.push({ path, message });
+  const actual = jsonTypeOf(value);
+  if (actual === "undefined") {
+    fail("value is undefined");
+    return errors;
+  }
+  const types = schemaTypes(s);
+  if (types.length > 0) {
+    const ok = types.some((t) => t === actual || t === "number" && actual === "integer");
+    if (!ok) {
+      fail(`expected type ${types.join("|")}, got ${actual}`);
+      return errors;
+    }
+  }
+  if (s.enum && !(value === null && types.includes("null")) && !s.enum.some((candidate) => deepEqual(candidate, value))) {
+    fail("value not in enum");
+  }
+  if (s.const !== void 0 && !deepEqual(s.const, value))
+    fail("value does not equal const");
+  if (typeof value === "string") {
+    const length = graphemeLength(value);
+    if (s.minLength !== void 0 && length < s.minLength)
+      fail(`length ${length} < minLength ${s.minLength}`);
+    if (s.maxLength !== void 0 && length > s.maxLength)
+      fail(`length ${length} > maxLength ${s.maxLength}`);
+    if (s.pattern !== void 0) {
+      try {
+        if (!new RegExp(s.pattern, "u").test(value))
+          fail(`does not match pattern ${s.pattern}`);
+      } catch {
+      }
+    }
+    if (s.format !== void 0) {
+      const pattern = FORMAT_PATTERNS[s.format];
+      if (pattern && !pattern.test(value))
+        fail(`does not match format ${s.format}`);
+    }
+  }
+  if (typeof value === "number") {
+    if (s.minimum !== void 0 && value < s.minimum)
+      fail(`${value} < minimum ${s.minimum}`);
+    if (s.maximum !== void 0 && value > s.maximum)
+      fail(`${value} > maximum ${s.maximum}`);
+    if (s.exclusiveMinimum !== void 0 && value <= s.exclusiveMinimum)
+      fail(`${value} <= exclusiveMinimum ${s.exclusiveMinimum}`);
+    if (s.exclusiveMaximum !== void 0 && value >= s.exclusiveMaximum)
+      fail(`${value} >= exclusiveMaximum ${s.exclusiveMaximum}`);
+    if (s.multipleOf !== void 0 && Math.abs(value / s.multipleOf - Math.round(value / s.multipleOf)) > 1e-9) {
+      fail(`${value} is not a multiple of ${s.multipleOf}`);
+    }
+  }
+  if (Array.isArray(value)) {
+    if (s.minItems !== void 0 && value.length < s.minItems)
+      fail(`${value.length} items < minItems ${s.minItems}`);
+    if (s.maxItems !== void 0 && value.length > s.maxItems)
+      fail(`${value.length} items > maxItems ${s.maxItems}`);
+    if (s.uniqueItems && value.some((item, i) => value.slice(0, i).some((prev) => deepEqual(prev, item))))
+      fail("items are not unique");
+    value.forEach((item, i) => {
+      const itemSchema = s.prefixItems?.[i] ?? s.items;
+      if (itemSchema)
+        errors.push(...validateValue(document2, itemSchema, item, [...path, i]));
+    });
+  }
+  if (actual === "object") {
+    const record2 = value;
+    const keys = Object.keys(record2);
+    for (const name of s.required ?? [])
+      if (!(name in record2))
+        fail(`missing required property ${name}`);
+    if (s.minProperties !== void 0 && keys.length < s.minProperties)
+      fail(`${keys.length} properties < minProperties ${s.minProperties}`);
+    if (s.maxProperties !== void 0 && keys.length > s.maxProperties)
+      fail(`${keys.length} properties > maxProperties ${s.maxProperties}`);
+    for (const key of keys) {
+      const property = s.properties?.[key];
+      if (property) {
+        errors.push(...validateValue(document2, property, record2[key], [...path, key]));
+        continue;
+      }
+      if (s.additionalProperties === false)
+        fail(`unexpected property ${key}`);
+      else if (typeof s.additionalProperties === "object") {
+        errors.push(...validateValue(document2, s.additionalProperties, record2[key], [...path, key]));
+      }
+      if (s.propertyNames) {
+        const nameErrors = validateValue(document2, s.propertyNames, key, [...path, key]);
+        if (nameErrors.length > 0)
+          fail(`property name ${key} is invalid: ${nameErrors[0]?.message}`);
+      }
+    }
+  }
+  if (s.allOf)
+    for (const branch of s.allOf)
+      errors.push(...validateValue(document2, branch, value, path));
+  if (s.anyOf && !s.anyOf.some((branch) => validateValue(document2, branch, value).length === 0))
+    fail("matches no anyOf branch");
+  if (s.oneOf) {
+    const matches2 = s.oneOf.filter((branch) => validateValue(document2, branch, value).length === 0).length;
+    if (matches2 !== 1)
+      fail(`matches ${matches2} oneOf branches, expected exactly 1`);
+  }
+  if (s.not && validateValue(document2, s.not, value).length === 0)
+    fail("matches forbidden `not` schema");
+  return errors;
+};
+
+// ../../http/codec/dist/form.js
+var parsePath = (rawKey) => {
+  const open = rawKey.indexOf("[");
+  if (open === -1)
+    return [rawKey];
+  const path = [rawKey.slice(0, open)];
+  const rest = rawKey.slice(open);
+  const pattern = /\[([^\]]*)\]/g;
+  let match = pattern.exec(rest);
+  let consumed = 0;
+  while (match !== null) {
+    if (match.index !== consumed)
+      return [rawKey];
+    path.push(match[1] ?? "");
+    consumed = match.index + match[0].length;
+    match = pattern.exec(rest);
+  }
+  if (consumed !== rest.length)
+    return [rawKey];
+  return path;
+};
+var isIndex = (segment) => /^(0|[1-9][0-9]*)$/.test(segment);
+var put = (target, key, value) => {
+  if (key === "__proto__") {
+    Object.defineProperty(target, key, {
+      value,
+      enumerable: true,
+      writable: true,
+      configurable: true
+    });
+    return;
+  }
+  ;
+  target[key] = value;
+};
+var assign = (target, path, value) => {
+  let cursor = target;
+  for (let i = 0; i < path.length; i++) {
+    const segment = path[i];
+    const last = i === path.length - 1;
+    if (Array.isArray(cursor)) {
+      const index = segment === "" ? cursor.length : isIndex(segment) ? Number(segment) : void 0;
+      if (index === void 0)
+        return;
+      if (last) {
+        put(cursor, index, value);
+        return;
+      }
+      const next = Object.hasOwn(cursor, index) ? cursor[index] : void 0;
+      if (next === void 0 || typeof next === "string") {
+        const created = path[i + 1] === "" || isIndex(path[i + 1]) ? [] : {};
+        put(cursor, index, created);
+        cursor = created;
+      } else {
+        cursor = next;
+      }
+      continue;
+    }
+    if (typeof cursor === "string")
+      return;
+    if (last) {
+      put(cursor, segment, value);
+      return;
+    }
+    const nextSegment = path[i + 1];
+    const existing = Object.hasOwn(cursor, segment) ? cursor[segment] : void 0;
+    if (existing === void 0 || typeof existing === "string") {
+      const created = nextSegment === "" || isIndex(nextSegment) ? [] : {};
+      put(cursor, segment, created);
+      cursor = created;
+    } else {
+      cursor = existing;
+    }
+  }
+};
+var decodeFormPairs = (pairs) => {
+  const out = {};
+  for (const [rawKey, value] of pairs)
+    assign(out, parsePath(rawKey), value);
+  return densify(out);
+};
+var densify = (value) => {
+  if (typeof value === "string")
+    return value;
+  if (Array.isArray(value))
+    return value.filter((item) => item !== void 0).map(densify);
+  const out = {};
+  for (const [key, item] of Object.entries(value))
+    put(out, key, densify(item));
+  return out;
+};
+var decodeForm = (text) => {
+  const source = text.startsWith("?") ? text.slice(1) : text;
+  return decodeFormPairs(new URLSearchParams(source).entries());
+};
+
+// ../../http/codec/dist/content.js
+var JSON_MEDIA_TYPE = "application/json";
+var FORM_MEDIA_TYPE = "application/x-www-form-urlencoded";
+var mediaTypeOf = (contentType) => {
+  if (!contentType)
+    return void 0;
+  const essence = contentType.split(";")[0]?.trim().toLowerCase();
+  return essence ? essence : void 0;
+};
+var isJsonMediaType = (mediaType) => mediaType === JSON_MEDIA_TYPE || mediaType.endsWith("+json") || mediaType === "text/json";
+var utf8 = new TextDecoder("utf-8", { fatal: false });
+var decodeBody = (contentType, bytes) => {
+  if (bytes.byteLength === 0)
+    return { kind: "empty" };
+  const mediaType = mediaTypeOf(contentType);
+  if (mediaType === void 0)
+    return { kind: "bytes", value: bytes };
+  if (isJsonMediaType(mediaType)) {
+    const text = utf8.decode(bytes);
+    try {
+      return { kind: "json", value: JSON.parse(text) };
+    } catch (error2) {
+      return {
+        kind: "invalid",
+        mediaType,
+        text,
+        error: error2 instanceof Error ? error2.message : String(error2)
+      };
+    }
+  }
+  if (mediaType === FORM_MEDIA_TYPE) {
+    return { kind: "form", value: decodeForm(utf8.decode(bytes)) };
+  }
+  if (mediaType.startsWith("text/"))
+    return { kind: "text", value: utf8.decode(bytes) };
+  return { kind: "bytes", value: bytes };
+};
+var readBody = async (message) => {
+  const bytes = new Uint8Array(await message.arrayBuffer());
+  return decodeBody(message.headers.get("content-type"), bytes);
+};
+
+// ../core/dist/http.js
+var jsonRes = (status, body, headers = {}) => new Response(JSON.stringify(body), {
+  status,
+  headers: { "content-type": JSON_MEDIA_TYPE, ...headers }
+});
+var HttpError = class extends Error {
+  status;
+  body;
+  headers;
+  constructor(status, body, headers = {}) {
+    super(`HTTP ${status}`);
+    this.status = status;
+    this.body = body;
+    this.headers = headers;
+    this.name = "HttpError";
+  }
+  toResponse() {
+    const contentType = this.headers["content-type"]?.split(";", 1)[0]?.trim().toLowerCase();
+    if (contentType === "text/plain") {
+      return new Response(String(this.body), {
+        status: this.status,
+        headers: this.headers
+      });
+    }
+    return jsonRes(this.status, this.body, this.headers);
+  }
+};
+
+// ../core/dist/ids.js
+var ALPHABET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
+var mix = (input) => {
+  let hash = 2166136261;
+  for (let i = 0; i < input.length; i++) {
+    hash ^= input.charCodeAt(i);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  hash ^= hash >>> 16;
+  hash = Math.imul(hash, 2246822507) >>> 0;
+  hash ^= hash >>> 13;
+  return hash >>> 0;
+};
+var opaqueToken = (input, length) => {
+  let out = "";
+  let round = 0;
+  while (out.length < length) {
+    let hash = mix(`${input}:${round++}`);
+    for (let i = 0; i < 5 && out.length < length; i++) {
+      out += ALPHABET.charAt(hash % ALPHABET.length);
+      hash = Math.floor(hash / ALPHABET.length);
+    }
+  }
+  return out;
+};
+
+// ../core/dist/journal.js
+var DEFAULT_JOURNAL_SIZE = 1e3;
+var createJournal = (size = DEFAULT_JOURNAL_SIZE) => {
+  const capacity = Math.max(0, Math.floor(size));
+  const rings = /* @__PURE__ */ new Map();
+  let sequence = 0;
+  const order = /* @__PURE__ */ new WeakMap();
+  const inOrder = (ring) => ring.entries.length < capacity ? ring.entries : [...ring.entries.slice(ring.next), ...ring.entries.slice(0, ring.next)];
+  return {
+    size: capacity,
+    record(entry) {
+      if (capacity === 0)
+        return;
+      order.set(entry, sequence++);
+      let ring = rings.get(entry.namespace);
+      if (!ring) {
+        ring = { entries: [], next: 0 };
+        rings.set(entry.namespace, ring);
+      }
+      if (ring.entries.length < capacity)
+        ring.entries.push(entry);
+      else {
+        ring.entries[ring.next] = entry;
+        ring.next = (ring.next + 1) % capacity;
+      }
+    },
+    list(query = {}) {
+      const source = query.namespace !== void 0 ? inOrder(rings.get(query.namespace) ?? { entries: [], next: 0 }) : [...rings.values()].flatMap(inOrder).sort((a, b) => (order.get(a) ?? 0) - (order.get(b) ?? 0));
+      const matched = source.filter((entry) => (query.operationId === void 0 || entry.operationId === query.operationId) && (query.status === void 0 || entry.status === query.status) && (query.since === void 0 || Date.parse(entry.at) >= query.since));
+      return query.limit !== void 0 ? matched.slice(-Math.max(0, query.limit)) : matched;
+    },
+    clear(namespace) {
+      if (namespace === void 0)
+        rings.clear();
+      else
+        rings.delete(namespace);
+    }
+  };
+};
+var notes = /* @__PURE__ */ new WeakMap();
+var annotateResponse = (response, extra) => {
+  const existing = notes.get(response);
+  notes.set(response, {
+    ...existing,
+    ...extra,
+    ...existing?.ids || extra.ids ? { ids: { ...existing?.ids, ...extra.ids } } : {}
+  });
+  return response;
+};
+var responseNotes = (response) => notes.get(response);
+
+// ../core/dist/metrics.js
+var createMetrics = () => {
+  let requests = 0;
+  let faults = 0;
+  let totalDurationMs = 0;
+  const byOperation = /* @__PURE__ */ new Map();
+  const unmatched = /* @__PURE__ */ new Map();
+  return {
+    record(entry) {
+      requests++;
+      totalDurationMs += entry.durationMs;
+      if (entry.faultId !== void 0)
+        faults++;
+      const key = `${entry.operationId ?? "(unmatched)"} ${entry.status}`;
+      byOperation.set(key, (byOperation.get(key) ?? 0) + 1);
+      if (entry.unmatched) {
+        const route = `${entry.method} ${entry.path}`;
+        unmatched.set(route, (unmatched.get(route) ?? 0) + 1);
+      }
+    },
+    report: () => ({
+      requests,
+      byOperation: Object.fromEntries([...byOperation].sort(([a], [b]) => a.localeCompare(b))),
+      unmatched: [...unmatched].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).map(([route, count]) => {
+        const space = route.indexOf(" ");
+        return { method: route.slice(0, space), path: route.slice(space + 1), count };
+      }),
+      faults,
+      totalDurationMs
+    }),
+    reset() {
+      requests = 0;
+      faults = 0;
+      totalDurationMs = 0;
+      byOperation.clear();
+      unmatched.clear();
+    }
+  };
+};
+
+// ../../core/dist/timeline.js
+var BRANCH_PATTERN = /^[A-Za-z0-9_.-]{1,64}$/;
+var Timeline = class {
+  maxCheckpoints;
+  now;
+  makeId;
+  nodes = /* @__PURE__ */ new Map();
+  heads = /* @__PURE__ */ new Map();
+  /** Unreferenced nodes in the exact order they became collectible. */
+  evictable = /* @__PURE__ */ new Set();
+  /** Branch heads plus explicit retainers. Absent means zero. */
+  references = /* @__PURE__ */ new Map();
+  explicitPins = /* @__PURE__ */ new Map();
+  sequence = 0;
+  constructor(options = {}) {
+    const max = options.maxCheckpoints ?? 1e3;
+    if (!Number.isSafeInteger(max) || max < 1)
+      throw new RangeError("maxCheckpoints must be a positive integer");
+    this.maxCheckpoints = max;
+    this.now = options.now ?? (() => this.sequence);
+    this.makeId = options.id ?? ((sequence) => `cp_${sequence.toString(36).padStart(8, "0")}`);
+  }
+  /** Capture a new immutable value and move `branch` to it. */
+  commit(value, options = {}) {
+    const branch = options.branch ?? "main";
+    this.assertBranch(branch);
+    const parent = options.parent === void 0 ? this.heads.get(branch) ?? null : options.parent;
+    if (parent !== null && !this.nodes.has(parent))
+      throw new RangeError(`no checkpoint ${parent}`);
+    const id = this.makeId(++this.sequence);
+    if (this.nodes.has(id))
+      throw new RangeError(`duplicate checkpoint id ${id}`);
+    const checkpoint = Object.freeze({ id, branch, parent, at: this.now(), value });
+    this.nodes.set(id, checkpoint);
+    this.moveHead(branch, id);
+    this.collect(this.maxCheckpoints);
+    return checkpoint;
+  }
+  /** Create a branch pointer without copying its checkpoint value. */
+  fork(branch, options = {}) {
+    this.assertBranch(branch);
+    if (this.heads.has(branch))
+      throw new RangeError(`branch already exists: ${branch}`);
+    const from = options.from ?? this.heads.get("main");
+    if (from === void 0)
+      return void 0;
+    const checkpoint = this.get(from);
+    this.moveHead(branch, checkpoint.id);
+    return checkpoint;
+  }
+  /** Move a branch pointer to an existing checkpoint. */
+  checkout(branch, id) {
+    this.assertBranch(branch);
+    const checkpoint = this.get(id);
+    this.moveHead(branch, checkpoint.id);
+    return checkpoint;
+  }
+  get(id) {
+    const checkpoint = this.nodes.get(id);
+    if (!checkpoint)
+      throw new RangeError(`no checkpoint ${id}`);
+    return checkpoint;
+  }
+  head(branch = "main") {
+    const id = this.heads.get(branch);
+    return id === void 0 ? void 0 : this.get(id);
+  }
+  hasBranch(branch) {
+    return this.heads.has(branch);
+  }
+  branches() {
+    return Object.freeze(Object.fromEntries([...this.heads].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)));
+  }
+  checkpoints() {
+    return [...this.nodes.values()];
+  }
+  /** Number of retained checkpoints without allocating an array. */
+  get size() {
+    return this.nodes.size;
+  }
+  /** Pin a checkpoint independently of branch heads (used by compatibility snapshot handles). */
+  retain(id) {
+    const checkpoint = this.get(id);
+    this.explicitPins.set(id, (this.explicitPins.get(id) ?? 0) + 1);
+    this.addReference(id);
+    return checkpoint;
+  }
+  /** Release one explicit pin. Branch heads remain pinned until moved or deleted. */
+  release(id) {
+    if (!this.nodes.has(id))
+      return false;
+    const pins = this.explicitPins.get(id) ?? 0;
+    if (pins === 0)
+      return false;
+    if (pins === 1)
+      this.explicitPins.delete(id);
+    else
+      this.explicitPins.set(id, pins - 1);
+    this.removeReference(id);
+    this.collect(this.maxCheckpoints);
+    return true;
+  }
+  deleteBranch(branch) {
+    if (branch === "main")
+      throw new RangeError("cannot delete main branch");
+    const previous = this.heads.get(branch);
+    const deleted = this.heads.delete(branch);
+    if (previous !== void 0)
+      this.removeReference(previous);
+    this.collect(this.maxCheckpoints);
+    return deleted;
+  }
+  /**
+   * Deterministically discard oldest unpinned checkpoints. Collection is O(number removed):
+   * commits never scan pinned nodes or the retained history. Parents are metadata rather than a
+   * storage dependency, so a retained node remains usable after pruning.
+   */
+  gc(max = this.maxCheckpoints) {
+    if (!Number.isSafeInteger(max) || max < 1)
+      throw new RangeError("max must be a positive integer");
+    const removed = [];
+    this.collect(max, removed);
+    return removed;
+  }
+  collect(max, removed) {
+    while (this.nodes.size > max && this.evictable.size > 0) {
+      const id = this.evictable.values().next().value;
+      this.evictable.delete(id);
+      this.nodes.delete(id);
+      removed?.push(id);
+    }
+  }
+  moveHead(branch, id) {
+    const previous = this.heads.get(branch);
+    if (previous === id)
+      return;
+    if (previous !== void 0)
+      this.removeReference(previous);
+    this.heads.set(branch, id);
+    this.addReference(id);
+  }
+  addReference(id) {
+    this.references.set(id, (this.references.get(id) ?? 0) + 1);
+    this.evictable.delete(id);
+  }
+  removeReference(id) {
+    const next = (this.references.get(id) ?? 0) - 1;
+    if (next > 0)
+      this.references.set(id, next);
+    else {
+      this.references.delete(id);
+      if (this.nodes.has(id))
+        this.evictable.add(id);
+    }
+  }
+  assertBranch(branch) {
+    if (!BRANCH_PATTERN.test(branch))
+      throw new RangeError(`branch must match ${BRANCH_PATTERN}`);
+  }
+};
+
+// ../../sqlite/dist/default.js
+import { Database } from "@crvouga/mockingbird-service-sqlite";
+var createDefaultSqlite = () => new Database();
+var resolveSqlite = (sqlite) => sqlite ?? createDefaultSqlite();
+
+// ../../sqlite/dist/migrate.js
+var ensureMigrationsTable = (sqlite) => {
+  sqlite.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      id TEXT PRIMARY KEY NOT NULL,
+      applied_at INTEGER NOT NULL
+    )
+  `);
+};
+var migrate = (sqlite, migrations) => {
+  ensureMigrationsTable(sqlite);
+  const applied = new Set(sqlite.prepare("SELECT id FROM schema_migrations").all().map((row) => row.id));
+  const pending = migrations.filter((migration) => !applied.has(migration.id));
+  if (pending.length === 0)
+    return;
+  const insert = sqlite.prepare("INSERT INTO schema_migrations (id, applied_at) VALUES (?, ?)");
+  const now = Math.floor(Date.now() / 1e3);
+  sqlite.transaction(() => {
+    for (const migration of pending) {
+      sqlite.exec(migration.sql);
+      insert.run(migration.id, now);
+    }
+  });
+};
+
+// ../../sqlite/dist/schema.js
+var CORE_MIGRATIONS = [
+  {
+    id: "20260322_core_records_sequences",
+    sql: `
+      CREATE TABLE IF NOT EXISTS mockingbird_records (
+        namespace TEXT NOT NULL,
+        collection TEXT NOT NULL,
+        id TEXT NOT NULL,
+        seq INTEGER NOT NULL,
+        value TEXT NOT NULL,
+        PRIMARY KEY (namespace, collection, id)
+      );
+      CREATE INDEX IF NOT EXISTS mockingbird_records_seq
+        ON mockingbird_records (namespace, collection, seq);
+      CREATE TABLE IF NOT EXISTS mockingbird_sequences (
+        namespace TEXT NOT NULL,
+        name TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        value INTEGER NOT NULL,
+        PRIMARY KEY (namespace, name, kind)
+      );
+    `
+  }
+];
+var migrateCore = (sqlite) => {
+  migrate(sqlite, CORE_MIGRATIONS);
+};
+var clearNamespace = (sqlite, namespace) => {
+  sqlite.transaction(() => {
+    sqlite.prepare("DELETE FROM mockingbird_records WHERE namespace = ?").run(namespace);
+    sqlite.prepare("DELETE FROM mockingbird_sequences WHERE namespace = ?").run(namespace);
+  });
+};
+
+// ../../openapi/metadata/dist/types.js
+var EXTENSION_KEYS = {
+  operation: "x-mockingbird",
+  resource: "x-mockingbird-resource",
+  resourceRef: "x-mockingbird-resource-ref",
+  volatile: "x-mockingbird-volatile",
+  scope: "x-mockingbird-scope",
+  unsupported: "x-mockingbird-unsupported",
+  parityHeader: "x-mockingbird-parity-header"
+};
+
+// ../../openapi/metadata/dist/read.js
+var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var extensionOf = (holder, key) => holder[key];
+var operationMetadata = (operation) => {
+  const raw = extensionOf(operation, EXTENSION_KEYS.operation);
+  const ext = isRecord2(raw) ? raw : {};
+  const supported = ext.supported ?? true;
+  const parity = ext.parity ?? {};
+  return {
+    supported,
+    reason: typeof ext.reason === "string" ? ext.reason : void 0,
+    parity: {
+      enabled: supported && (parity.enabled ?? true),
+      safe: parity.safe ?? true,
+      reason: typeof parity.reason === "string" ? parity.reason : void 0
+    }
+  };
+};
+
+// ../core/dist/service.js
+import { Hono } from "hono";
+var defineOperations = (handlers) => handlers;
+var OperationRegistryError = class extends Error {
+  problems;
+  constructor(problems) {
+    super(`operation registry is inconsistent:
+${problems.map((p) => `  - ${p}`).join("\n")}`);
+    this.problems = problems;
+    this.name = "OperationRegistryError";
+  }
+};
+var verifyOperations = (document2, handlers) => {
+  const problems = [];
+  const operations = listOperations(document2);
+  const seen = /* @__PURE__ */ new Set();
+  for (const operation of operations) {
+    if (seen.has(operation.operationId))
+      problems.push(`duplicate operationId ${operation.operationId}`);
+    seen.add(operation.operationId);
+    const supported = operationMetadata(operation.operation).supported;
+    const handler = handlers[operation.operationId];
+    if (supported && !handler)
+      problems.push(`supported operation ${operation.operationId} has no handler`);
+    if (!supported && handler)
+      problems.push(`operation ${operation.operationId} is marked unsupported but has a handler`);
+  }
+  for (const id of Object.keys(handlers)) {
+    if (!seen.has(id))
+      problems.push(`handler ${id} has no OpenAPI operation`);
+  }
+  return problems;
+};
+var honoPath = (template) => template.replace(/\{([^}]+)\}/g, ":$1");
+var routeOrder = (a, b) => {
+  const sa = a.path.split("/");
+  const sb = b.path.split("/");
+  for (let i = 0; i < Math.max(sa.length, sb.length); i++) {
+    const x = sa[i] ?? "";
+    const y = sb[i] ?? "";
+    const px = x.startsWith("{");
+    const py = y.startsWith("{");
+    if (px !== py)
+      return px ? 1 : -1;
+    if (x !== y)
+      return x < y ? -1 : 1;
+  }
+  return 0;
+};
+var queryOf = (url) => decodeFormPairs(url.searchParams.entries());
+var bootSqlite = (sqlite) => {
+  const client = resolveSqlite(sqlite);
+  migrateCore(client);
+  return client;
+};
+var createService = (options) => {
+  const problems = verifyOperations(options.document, options.handlers);
+  if (problems.length > 0)
+    throw new OperationRegistryError(problems);
+  migrateCore(options.sqlite);
+  const now = options.now ?? (() => Date.now());
+  const app = new Hono();
+  app.notFound((c) => options.notFound(c.req.raw));
+  app.onError((error2, c) => options.onError(error2, c.req.raw));
+  const operations = [...listOperations(options.document)].sort(routeOrder);
+  for (const operation of operations) {
+    const metadata = operationMetadata(operation.operation);
+    const handler = options.handlers[operation.operationId];
+    const route = async (c) => {
+      const request = c.req.raw;
+      if (!metadata.supported || !handler) {
+        return options.unsupported ? options.unsupported(request, operation) : options.notFound(request);
+      }
+      const url = new URL(request.url);
+      const context = {
+        request,
+        url,
+        params: c.req.param(),
+        query: queryOf(url),
+        body: await readBody(request),
+        sqlite: options.sqlite,
+        namespace: options.namespace,
+        operation,
+        document: options.document,
+        now
+      };
+      const short = await options.before?.(context);
+      if (short)
+        return short;
+      return handler(context);
+    };
+    app.on(operation.method.toUpperCase(), honoPath(operation.path), route);
+  }
+  return {
+    app,
+    sqlite: options.sqlite,
+    namespace: options.namespace,
+    fetch: async (request) => app.fetch(request),
+    reset: async () => {
+      clearNamespace(options.sqlite, options.namespace);
+    }
+  };
+};
+
+// ../core/dist/snapshot.js
+var snapshotNamespace = (sqlite, namespace) => ({
+  namespace,
+  records: sqlite.prepare("SELECT collection, id, seq, value FROM mockingbird_records WHERE namespace = ? ORDER BY collection, seq").all(namespace),
+  sequences: sqlite.prepare("SELECT name, kind, value FROM mockingbird_sequences WHERE namespace = ? ORDER BY name, kind").all(namespace)
+});
+var restoreNamespace = (sqlite, namespace, snapshot) => {
+  sqlite.transaction(() => {
+    sqlite.prepare("DELETE FROM mockingbird_records WHERE namespace = ?").run(namespace);
+    sqlite.prepare("DELETE FROM mockingbird_sequences WHERE namespace = ?").run(namespace);
+    const record2 = sqlite.prepare("INSERT INTO mockingbird_records (namespace, collection, id, seq, value) VALUES (?, ?, ?, ?, ?)");
+    for (const row of snapshot.records) {
+      record2.run(namespace, row.collection, row.id, row.seq, row.value);
+    }
+    const sequence = sqlite.prepare("INSERT INTO mockingbird_sequences (namespace, name, kind, value) VALUES (?, ?, ?, ?)");
+    for (const row of snapshot.sequences) {
+      sequence.run(namespace, row.name, row.kind, row.value);
+    }
+  });
+};
+
+// ../core/dist/version.js
+var PACKAGE_VERSION = true ? "0.1.0" : UNRELEASED_VERSION;
+
+// ../core/dist/signing.js
+var encoder = new TextEncoder();
+var toBase64 = (bytes) => {
+  let binary = "";
+  for (const byte of bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes)) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary);
+};
+var fromBase64 = (value) => Uint8Array.from(atob(value), (char) => char.charCodeAt(0));
+
+// ../core/dist/webhooks.js
+var json2 = (status, body) => new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json" } });
+var adminError2 = (status, message) => json2(status, { error: { type: "mockingbird_admin", message } });
+var isRecord3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var parseEndpoint = (value) => {
+  if (!isRecord3(value) || typeof value.url !== "string")
+    return "each endpoint needs a url";
+  try {
+    new URL(value.url);
+  } catch {
+    return `not a URL: ${value.url}`;
+  }
+  const endpoint = { url: value.url };
+  if (typeof value.id === "string")
+    endpoint.id = value.id;
+  if (typeof value.secret === "string")
+    endpoint.secret = value.secret;
+  if (typeof value.signUrl === "string")
+    endpoint.signUrl = value.signUrl;
+  const events = value.events ?? value.enabledEvents;
+  if (Array.isArray(events))
+    endpoint.events = events.map(String);
+  if (isRecord3(value.tags)) {
+    endpoint.tags = Object.fromEntries(Object.entries(value.tags).map(([k, v]) => [k, String(v)]));
+  }
+  if (typeof value.account === "string")
+    endpoint.tags = { ...endpoint.tags, account: value.account };
+  if (isRecord3(value.headers)) {
+    endpoint.headers = Object.fromEntries(Object.entries(value.headers).map(([k, v]) => [k, String(v)]));
+  }
+  return endpoint;
+};
+var webhookAdminRoutes = (hub) => ({
+  "GET /webhooks": ({ url, namespace }) => json2(200, {
+    deliveries: hub.deliveries(url.searchParams.get("all") === "1" ? void 0 : namespace).filter((d) => {
+      const type = url.searchParams.get("type");
+      return type === null || d.type === type;
+    })
+  }),
+  "GET /webhooks/events": ({ url, namespace }) => {
+    const type = url.searchParams.get("type");
+    return json2(200, {
+      events: hub.messages(url.searchParams.get("all") === "1" ? void 0 : namespace).filter((m) => type === null || m.type === type).map((m) => ({ ...m, payload: parsePayload(m) }))
+    });
+  },
+  "POST /webhooks/:id/replay": async ({ params }) => {
+    const replayed = await hub.replay(params.id);
+    return replayed ? json2(200, replayed) : adminError2(404, `no delivery ${params.id}`);
+  },
+  "POST /webhooks/flush": async () => {
+    await hub.flush();
+    return json2(200, { status: "ok" });
+  },
+  "POST /webhooks/faults": ({ body, namespace }) => {
+    if (!isRecord3(body) || !["duplicate", "reorder", "drop"].includes(String(body.mode))) {
+      return adminError2(400, "mode must be duplicate, reorder or drop");
+    }
+    const fault = { mode: body.mode };
+    if (typeof body.count === "number")
+      fault.count = body.count;
+    hub.fault(namespace, fault);
+    return json2(201, { namespace, ...fault });
+  },
+  "GET /webhook-endpoints": ({ namespace }) => json2(200, {
+    endpoints: hub.endpoints(namespace).map(({ secret, ...rest }) => ({
+      ...rest,
+      secret: secret ? "(set)" : null
+    }))
+  }),
+  "PUT /webhook-endpoints": ({ body, namespace }) => {
+    const list = Array.isArray(body) ? body : isRecord3(body) ? body.endpoints : void 0;
+    if (!Array.isArray(list))
+      return adminError2(400, "expected [{url, secret?, events?}]");
+    const parsed = [];
+    for (const each of list) {
+      const endpoint = parseEndpoint(each);
+      if (typeof endpoint === "string")
+        return adminError2(400, endpoint);
+      parsed.push(endpoint);
+    }
+    const set = hub.setEndpoints(namespace, parsed);
+    return json2(200, { endpoints: set.map((e) => ({ ...e, secret: e.secret ? "(set)" : null })) });
+  },
+  "DELETE /webhook-endpoints": ({ namespace }) => {
+    hub.setEndpoints(namespace, []);
+    return json2(200, { status: "ok" });
+  }
+});
+var parsePayload = (message) => {
+  if (message.contentType.startsWith("application/json")) {
+    try {
+      return JSON.parse(message.body);
+    } catch {
+      return message.body;
+    }
+  }
+  if (message.contentType.startsWith("application/x-www-form-urlencoded")) {
+    return Object.fromEntries(new URLSearchParams(message.body));
+  }
+  return message.body;
+};
+
+// ../core/dist/runtime.js
+var MOCKINGBIRD_HEADER = "x-mockingbird";
+var BRANCH_HEADER = "x-mockingbird-branch";
+var AT_HEADER = "x-mockingbird-at";
+var CHECKPOINT_HEADER = "x-mockingbird-checkpoint";
+var DEFAULT_NAMESPACE = "default";
+var NAMESPACE_PATTERN = /^[A-Za-z0-9_.-]{1,64}$/;
+var PATH_PREFIX = /^\/ns\/([^/]+)(\/.*)?$/;
+var BRANCH_PATTERN2 = /^[A-Za-z0-9_.-]{1,64}$/;
+var MUTATING_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+var effects = /* @__PURE__ */ new WeakMap();
+var reuseSorted = (fresh, previous, compare, equal) => {
+  if (!previous || previous.length === 0)
+    return fresh.map((row) => Object.freeze(row));
+  const result = new Array(fresh.length);
+  let unchanged = fresh.length === previous.length;
+  let oldIndex = 0;
+  for (let index = 0; index < fresh.length; index++) {
+    const row = fresh[index];
+    while (oldIndex < previous.length && compare(previous[oldIndex], row) < 0) {
+      oldIndex++;
+    }
+    const old = previous[oldIndex];
+    result[index] = old !== void 0 && compare(old, row) === 0 && equal(old, row) ? old : Object.freeze(row);
+    if (result[index] !== previous[index])
+      unchanged = false;
+  }
+  return unchanged ? previous : result;
+};
+var faultEffects = (request) => (effects.get(request) ?? []).filter((e) => e !== void 0);
+var faultEffect = (request, name) => faultEffects(request).find((e) => e.name === name)?.params;
+var DroppedConnectionError = class extends TypeError {
+  code = "MOCKINGBIRD_DROP";
+  constructor() {
+    super("fetch failed: connection dropped by Mockingbird fault");
+    this.name = "TypeError";
+  }
+};
+var operationMatcher = (document2) => {
+  const matchers = listOperations(document2).map((operation) => ({
+    operationId: operation.operationId,
+    method: operation.method.toUpperCase(),
+    pattern: new RegExp(`^${operation.path.split("/").map((segment) => segment.startsWith("{") ? "[^/]+" : segment.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("/")}/?$`),
+    params: (operation.path.match(/\{/g) ?? []).length
+  })).sort((a, b) => a.params - b.params);
+  return (request, path) => matchers.find((m) => m.method === request.method && m.pattern.test(path))?.operationId;
+};
+var createRuntime = (options) => {
+  const sqlite = bootSqlite(options.sqlite);
+  const clock = options.clock ?? createClock();
+  const rng = createRng(options.seed ?? 0);
+  const wallNow = options.io?.wallNow ?? Date.now;
+  const monotonicNow = options.io?.monotonicNow ?? (() => performance.now());
+  const sleep = options.io?.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const faults = createFaultRegistry(createRng(options.seed ?? 0), sleep);
+  const metrics = createMetrics();
+  const journal = createJournal(options.journalSize ?? DEFAULT_JOURNAL_SIZE);
+  const version = options.version ?? PACKAGE_VERSION;
+  const instances = /* @__PURE__ */ new Map();
+  const publicNamespaces = /* @__PURE__ */ new Set();
+  const branchRngs = /* @__PURE__ */ new Map();
+  const timelines = /* @__PURE__ */ new Map();
+  const branchStorage = /* @__PURE__ */ new Map();
+  const captured = /* @__PURE__ */ new Map();
+  const credentials = createCredentialRegistry();
+  const operationIdFor = options.document ? operationMatcher(options.document) : () => void 0;
+  const storageNamespace = (name) => name === DEFAULT_NAMESPACE ? options.name : `${options.name}:${name}`;
+  const instanceFor = (key, publicNamespace = key, isolatedRng) => {
+    const existing = instances.get(key);
+    if (existing)
+      return existing;
+    if (!NAMESPACE_PATTERN.test(key) || !NAMESPACE_PATTERN.test(publicNamespace)) {
+      throw new RangeError(`namespace must match ${NAMESPACE_PATTERN}: ${JSON.stringify(publicNamespace)}`);
+    }
+    const created = options.create({
+      namespace: storageNamespace(key),
+      publicNamespace,
+      sqlite,
+      clock,
+      rng: isolatedRng ?? rng
+    });
+    instances.set(key, created);
+    publicNamespaces.add(publicNamespace);
+    if (isolatedRng)
+      branchRngs.set(key, isolatedRng);
+    return created;
+  };
+  const instance = (name = DEFAULT_NAMESPACE) => instanceFor(name);
+  const capture = (storage) => {
+    const fresh = snapshotNamespace(sqlite, storageNamespace(storage));
+    const previous = captured.get(storage);
+    const snapshot2 = {
+      namespace: fresh.namespace,
+      records: reuseSorted(fresh.records, previous?.records, (left, right) => left.collection < right.collection ? -1 : left.collection > right.collection ? 1 : left.seq - right.seq, (left, right) => left.id === right.id && left.value === right.value),
+      sequences: reuseSorted(fresh.sequences, previous?.sequences, (left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : left.kind < right.kind ? -1 : left.kind > right.kind ? 1 : 0, (left, right) => left.value === right.value)
+    };
+    Object.freeze(snapshot2.records);
+    Object.freeze(snapshot2.sequences);
+    Object.freeze(snapshot2);
+    captured.set(storage, snapshot2);
+    return Object.freeze({
+      snapshot: snapshot2,
+      clock: Object.freeze(clock.state()),
+      rngState: (branchRngs.get(storage) ?? rng).state()
+    });
+  };
+  const timeline = (name = DEFAULT_NAMESPACE) => {
+    let found = timelines.get(name);
+    if (found)
+      return found;
+    instance(name);
+    found = new Timeline({
+      now: clock.now,
+      ...options.maxCheckpoints !== void 0 ? { maxCheckpoints: options.maxCheckpoints } : {}
+    });
+    found.commit(capture(name));
+    timelines.set(name, found);
+    return found;
+  };
+  const physicalBranch = (namespace, branch2) => {
+    if (branch2 === "main")
+      return namespace;
+    const mapKey = `${namespace}\0${branch2}`;
+    const existing = branchStorage.get(mapKey);
+    if (existing)
+      return existing;
+    const key = `branch_${seedFrom(`${options.name}\0${namespace}\0${branch2}`).toString(36)}`;
+    branchStorage.set(mapKey, key);
+    return key;
+  };
+  const ensureBranch = (namespace, branch2, at) => {
+    if (!BRANCH_PATTERN2.test(branch2))
+      throw new RangeError(`branch must match ${BRANCH_PATTERN2}`);
+    const history = timeline(namespace);
+    if (branch2 === "main") {
+      if (at !== void 0) {
+        const point = history.checkout("main", at);
+        restoreNamespace(sqlite, storageNamespace(namespace), point.value.snapshot);
+        captured.set(namespace, point.value.snapshot);
+        rng.setState(point.value.rngState);
+        clock.set(point.value.clock.now);
+        if (point.value.clock.frozen)
+          clock.freeze();
+        else
+          clock.unfreeze();
+      }
+      return namespace;
+    }
+    const storage = physicalBranch(namespace, branch2);
+    if (!history.hasBranch(branch2)) {
+      if (at === void 0)
+        history.commit(capture(namespace));
+      const point = history.fork(branch2, at === void 0 ? {} : { from: at });
+      const branchRng = createRng(options.seed ?? 0);
+      if (point)
+        branchRng.setState(point.value.rngState);
+      instanceFor(storage, namespace, branchRng);
+      if (point)
+        restoreNamespace(sqlite, storageNamespace(storage), point.value.snapshot);
+      if (point)
+        captured.set(storage, point.value.snapshot);
+    } else if (at !== void 0 && history.head(branch2)?.id !== at) {
+      const point = history.checkout(branch2, at);
+      if (!instances.has(storage)) {
+        const branchRng = createRng(options.seed ?? 0);
+        branchRng.setState(point.value.rngState);
+        instanceFor(storage, namespace, branchRng);
+      }
+      branchRngs.get(storage)?.setState(point.value.rngState);
+      restoreNamespace(sqlite, storageNamespace(storage), point.value.snapshot);
+      captured.set(storage, point.value.snapshot);
+    } else {
+      if (!instances.has(storage)) {
+        const point = history.head(branch2);
+        const branchRng = createRng(options.seed ?? 0);
+        if (point)
+          branchRng.setState(point.value.rngState);
+        instanceFor(storage, namespace, branchRng);
+      }
+    }
+    return storage;
+  };
+  const checkpoint = (namespace = DEFAULT_NAMESPACE, branch2 = "main") => {
+    const storage = ensureBranch(namespace, branch2);
+    return timeline(namespace).commit(capture(storage), { branch: branch2 });
+  };
+  const branch = (name, branchOptions = {}) => {
+    const namespace = branchOptions.namespace ?? DEFAULT_NAMESPACE;
+    ensureBranch(namespace, name, branchOptions.at);
+    const head = timeline(namespace).head(name);
+    if (!head)
+      throw new RangeError(`branch ${name} has no checkpoint`);
+    return head;
+  };
+  const checkout = (checkpointId, checkoutOptions = {}) => {
+    const namespace = checkoutOptions.namespace ?? DEFAULT_NAMESPACE;
+    const branchName = checkoutOptions.branch ?? "main";
+    const history = timeline(namespace);
+    const point = history.checkout(branchName, checkpointId);
+    const storage = ensureBranch(namespace, branchName);
+    restoreNamespace(sqlite, storageNamespace(storage), point.value.snapshot);
+    captured.set(storage, point.value.snapshot);
+    clock.set(point.value.clock.now);
+    if (point.value.clock.frozen)
+      clock.freeze();
+    else
+      clock.unfreeze();
+    (branchRngs.get(storage) ?? rng).setState(point.value.rngState);
+  };
+  const reset = async (name = DEFAULT_NAMESPACE) => {
+    if (name === "*") {
+      options.webhooks?.clear();
+      for (const each of instances.values())
+        await each.reset();
+      timelines.clear();
+      branchStorage.clear();
+      branchRngs.clear();
+      captured.clear();
+      return;
+    }
+    options.webhooks?.clear(name);
+    const target = instances.get(name);
+    if (target)
+      await target.reset();
+    else
+      clearNamespace(sqlite, storageNamespace(name));
+    for (const [mapping, storage] of branchStorage) {
+      if (!mapping.startsWith(`${name}\0`))
+        continue;
+      const branchInstance = instances.get(storage);
+      if (branchInstance)
+        await branchInstance.reset();
+      else
+        clearNamespace(sqlite, storageNamespace(storage));
+      branchStorage.delete(mapping);
+      branchRngs.delete(storage);
+      captured.delete(storage);
+    }
+    timelines.delete(name);
+    captured.delete(name);
+  };
+  const snapshot = (name = DEFAULT_NAMESPACE) => {
+    return checkpoint(name, "main").value.snapshot;
+  };
+  const restore = (from, name = DEFAULT_NAMESPACE) => {
+    instance(name);
+    restoreNamespace(sqlite, storageNamespace(name), from);
+    captured.set(name, from);
+    const history = timelines.get(name);
+    if (history)
+      history.commit(capture(name), { branch: "main" });
+    else
+      timeline(name);
+  };
+  const runtime = {
+    name: options.name,
+    sqlite,
+    clock,
+    faults,
+    metrics,
+    journal,
+    rng,
+    credentials,
+    webhooks: options.webhooks,
+    applyPreset: (name, namespace = DEFAULT_NAMESPACE, overrides = {}) => {
+      const preset = options.presets?.[name];
+      if (!preset)
+        throw new RangeError(`no fault preset ${JSON.stringify(name)}`);
+      const added = (preset.rules ?? []).map((rule, index) => faults.add({
+        namespace,
+        ...rule,
+        ...overrides,
+        preset: name,
+        id: `${overrides.id ?? name}${(preset.rules ?? []).length > 1 ? `_${index + 1}` : ""}`
+      }));
+      if (preset.webhook && options.webhooks) {
+        options.webhooks.fault(namespace, {
+          ...preset.webhook,
+          ...overrides.count !== void 0 ? { count: overrides.count } : {}
+        });
+      }
+      return added;
+    },
+    instance,
+    namespaces: () => [...publicNamespaces].sort(),
+    reset,
+    snapshot,
+    restore,
+    checkpoint,
+    branch,
+    checkout,
+    timeline,
+    fetch: async (incoming) => {
+      let request = incoming;
+      const prefixed = PATH_PREFIX.exec(new URL(request.url).pathname);
+      if (prefixed) {
+        const url2 = new URL(request.url);
+        url2.pathname = prefixed[2] ?? "/";
+        const headers = new Headers(request.headers);
+        if (!headers.has(NAMESPACE_HEADER)) {
+          headers.set(NAMESPACE_HEADER, decodeURIComponent(prefixed[1]));
+        }
+        const hasBody = request.method !== "GET" && request.method !== "HEAD";
+        request = new Request(url2, {
+          method: request.method,
+          headers,
+          ...hasBody ? { body: await request.arrayBuffer() } : {},
+          signal: request.signal
+        });
+      }
+      let namespace = control.namespaceOf(request);
+      if (!request.headers.has(NAMESPACE_HEADER) && options.credential) {
+        const credential = options.credential(request);
+        const mapped = credential !== void 0 ? credentials.get(credential) : void 0;
+        if (mapped !== void 0)
+          namespace = mapped;
+      }
+      const selectedBranch = request.headers.get(BRANCH_HEADER) ?? "main";
+      const at = request.headers.get(AT_HEADER) ?? void 0;
+      const stamp = (response2) => {
+        const value = NAMESPACE_PATTERN.test(namespace) ? `${options.name}@${version}; ns=${namespace}` : `${options.name}@${version}`;
+        try {
+          response2.headers.set(MOCKINGBIRD_HEADER, value);
+          return response2;
+        } catch {
+          const copy = new Response(response2.body, response2);
+          copy.headers.set(MOCKINGBIRD_HEADER, value);
+          return copy;
+        }
+      };
+      const handled = await control.handle(request);
+      if (handled)
+        return stamp(handled);
+      const started = monotonicNow();
+      const url = new URL(request.url);
+      const operationId = operationIdFor(request, url.pathname);
+      const log = (status, faultId, response2) => {
+        const noted = response2 ? responseNotes(response2) : void 0;
+        const entry = {
+          service: options.name,
+          namespace,
+          operationId,
+          method: request.method,
+          path: url.pathname,
+          status,
+          durationMs: Math.round((monotonicNow() - started) * 100) / 100,
+          unmatched: options.document !== void 0 && operationId === void 0,
+          ...faultId !== void 0 ? { faultId } : {},
+          ...noted?.ids && Object.keys(noted.ids).length > 0 ? { ids: noted.ids } : {},
+          ...noted?.adopted ? { adopted: true } : {}
+        };
+        metrics.record(entry);
+        journal.record({ ...entry, at: new Date(clock.now()).toISOString() });
+        options.onLog?.(entry);
+      };
+      if (!NAMESPACE_PATTERN.test(namespace)) {
+        log(400);
+        return stamp(new Response(JSON.stringify({
+          error: {
+            type: "mockingbird_admin",
+            message: `${NAMESPACE_HEADER} must match ${NAMESPACE_PATTERN}`
+          }
+        }), { status: 400, headers: { "content-type": "application/json" } }));
+      }
+      if (!BRANCH_PATTERN2.test(selectedBranch)) {
+        log(400);
+        return stamp(adminFail(400, `${BRANCH_HEADER} must match ${BRANCH_PATTERN2}`));
+      }
+      let storage;
+      try {
+        if (at !== void 0 && selectedBranch === "main" && !MUTATING_METHODS.has(request.method)) {
+          const point = timeline(namespace).get(at);
+          storage = physicalBranch(namespace, `at_${at}`);
+          let viewRng = branchRngs.get(storage);
+          if (!viewRng) {
+            viewRng = createRng(options.seed ?? 0);
+            instanceFor(storage, namespace, viewRng);
+          }
+          viewRng.setState(point.value.rngState);
+          restoreNamespace(sqlite, storageNamespace(storage), point.value.snapshot);
+          captured.set(storage, point.value.snapshot);
+        } else {
+          storage = ensureBranch(namespace, selectedBranch, at);
+        }
+      } catch (error2) {
+        log(409);
+        return stamp(adminFail(409, error2 instanceof Error ? error2.message : String(error2)));
+      }
+      const hits = await faults.take({
+        operationId,
+        method: request.method,
+        path: url.pathname,
+        namespace
+      });
+      const final = hits.find((hit) => hit.drop || hit.response);
+      if (final?.drop) {
+        log(0, final.id);
+        throw new DroppedConnectionError();
+      }
+      if (final?.response) {
+        log(final.response.status, final.id);
+        return stamp(final.response);
+      }
+      const fired = hits.filter((hit) => hit.effect !== void 0);
+      if (fired.length > 0)
+        effects.set(request, fired.map((hit) => hit.effect));
+      let response = await instanceFor(storage, namespace).fetch(request);
+      if (MUTATING_METHODS.has(request.method) && response.status >= 200 && response.status < 400) {
+        const point = timeline(namespace).commit(capture(storage), { branch: selectedBranch });
+        response = mutableResponse(response);
+        response.headers.set(CHECKPOINT_HEADER, point.id);
+      }
+      if (selectedBranch !== "main") {
+        response = mutableResponse(response);
+        response.headers.set(BRANCH_HEADER, selectedBranch);
+      }
+      if (at !== void 0) {
+        response = mutableResponse(response);
+        response.headers.set(AT_HEADER, at);
+      }
+      log(response.status, fired[0]?.id, response);
+      return stamp(response);
+    }
+  };
+  const control = createControlPlane({
+    name: options.name,
+    startedAt: wallNow(),
+    wallNow,
+    clock,
+    faults,
+    metrics,
+    journal,
+    defaultNamespace: DEFAULT_NAMESPACE,
+    namespaces: runtime.namespaces,
+    reset,
+    timeTravel: {
+      checkpoint: (name, branchName) => {
+        const point = checkpoint(name, branchName);
+        return {
+          id: point.id,
+          branch: point.branch,
+          parent: point.parent,
+          at: point.at,
+          records: point.value.snapshot.records.length
+        };
+      },
+      branch: (branchName, branchOptions) => {
+        const point = branch(branchName, branchOptions);
+        return { id: point.id, branch: point.branch, parent: point.parent, at: point.at };
+      },
+      checkout: (checkpointId, checkoutOptions) => checkout(checkpointId, checkoutOptions),
+      retain: (name, checkpointId) => {
+        timeline(name).retain(checkpointId);
+      },
+      release: (name, checkpointId) => timeline(name).release(checkpointId),
+      inspect: (name) => {
+        const history = timeline(name);
+        return {
+          branches: history.branches(),
+          checkpoints: history.checkpoints().map(({ id, branch: branchName, parent, at }) => ({
+            id,
+            branch: branchName,
+            parent,
+            at
+          }))
+        };
+      }
+    },
+    describe: options.describe ?? (() => ({})),
+    ...options.presets ? {
+      applyPreset: (name, namespace, overrides) => runtime.applyPreset(name, namespace, overrides)
+    } : {},
+    routes: {
+      ...credentialRoutes(credentials),
+      ...options.presets ? presetRoutes(options.presets, runtime) : {},
+      ...options.webhooks ? webhookAdminRoutes(options.webhooks) : {},
+      ...options.admin?.(runtime) ?? {}
+    },
+    adminKey: options.adminKey
+  });
+  return runtime;
+};
+var mutableResponse = (response) => {
+  try {
+    response.headers.set("x-mockingbird-mutable-probe", "1");
+    response.headers.delete("x-mockingbird-mutable-probe");
+    return response;
+  } catch {
+    return new Response(response.body, response);
+  }
+};
+var adminJson = (status, body) => new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json" } });
+var adminFail = (status, message) => adminJson(status, { error: { type: "mockingbird_admin", message } });
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var credentialRoutes = (registry) => ({
+  "GET /credentials": () => adminJson(200, {
+    credentials: registry.entries().map(({ credential, namespace }) => ({
+      credential: maskCredential(credential),
+      namespace
+    }))
+  }),
+  "PUT /credentials": ({ body, namespace }) => {
+    const pairs = [];
+    const list = Array.isArray(body) ? body : isObject(body) ? body.credentials : void 0;
+    if (Array.isArray(list)) {
+      for (const each of list) {
+        if (typeof each === "string")
+          pairs.push([each, namespace]);
+        else if (isObject(each) && typeof each.credential === "string") {
+          pairs.push([
+            each.credential,
+            typeof each.namespace === "string" ? each.namespace : namespace
+          ]);
+        } else
+          return adminFail(400, "each entry is a credential string or {credential, namespace}");
+      }
+    } else if (isObject(list)) {
+      for (const [credential, target] of Object.entries(list)) {
+        if (typeof target !== "string")
+          return adminFail(400, `namespace for ${credential} must be a string`);
+        pairs.push([credential, target]);
+      }
+    } else if (isObject(body) && typeof body.credential === "string") {
+      pairs.push([body.credential, typeof body.namespace === "string" ? body.namespace : namespace]);
+    } else {
+      return adminFail(400, 'expected {"credentials": {"<credential>": "<namespace>"}}');
+    }
+    for (const [credential, target] of pairs) {
+      if (!NAMESPACE_PATTERN.test(target))
+        return adminFail(400, `bad namespace ${JSON.stringify(target)}`);
+      registry.set(credential, target);
+    }
+    return adminJson(200, { mapped: pairs.length });
+  },
+  "DELETE /credentials": ({ url }) => {
+    const credential = url.searchParams.get("credential");
+    if (credential === null)
+      registry.clear();
+    else
+      registry.remove(credential);
+    return adminJson(200, { status: "ok" });
+  }
+});
+var presetRoutes = (presets, runtime) => ({
+  "GET /faults/presets": () => adminJson(200, {
+    presets: Object.entries(presets).map(([name, preset]) => ({ name, ...preset }))
+  }),
+  "POST /faults/presets/:name": ({ params, body, namespace }) => {
+    const name = params.name;
+    if (!presets[name])
+      return adminFail(404, `no fault preset ${name}; GET /__admin/faults/presets`);
+    const overrides = isObject(body) ? body : {};
+    return adminJson(201, { preset: name, rules: runtime.applyPreset(name, namespace, overrides) });
+  }
+});
+
+// ../core/dist/validation.js
+var bodyIssues = (context, contentType = "application/json") => {
+  const requestBody = context.operation.operation.requestBody;
+  if (!requestBody)
+    return [];
+  const resolved = deref(context.document, requestBody);
+  const schema = resolved.content?.[contentType]?.schema;
+  if (!schema)
+    return [];
+  const value = context.body.kind === "json" || context.body.kind === "form" ? context.body.value : void 0;
+  if (context.body.kind === "invalid") {
+    return [{ path: "", message: `request body is not valid ${context.body.mediaType}` }];
+  }
+  if (value === void 0) {
+    return resolved.required ? [{ path: "", message: "request body is required" }] : [];
+  }
+  return validateValue(context.document, resolveSchema(context.document, schema), value).map((issue) => ({ path: issue.path.join("."), message: issue.message }));
+};
+
+// src/catalog.ts
+var DEFAULT_USER_ID = "65a1c0de00000000000000a1";
+var DEFAULT_CLINIC_ID = "65a1c0de00000000000000c1";
+var DEFAULT_CLINIC_LOCATION_ID = "65a1c0de00000000000000d1";
+var DEFAULT_PROVIDER_ID = "65a1c0de00000000000000e1";
+var DEFAULT_PATIENT_ID = "65a1c0de00000000000000f1";
+var REASONS = [
+  "Product Discontinued - commercial product no longer available or in shortage",
+  "Dosage Form Change - patient needs a different dosage form",
+  "Different Strength - patient needs a strength not commercially available",
+  "Excipient Allergy - patient is allergic to an inactive ingredient",
+  "Other - reason not otherwise listed"
+];
+var DEFAULT_PRODUCTS = [
+  {
+    id: "64f1c2a9e4b0a1b2c3d4e5f6",
+    productId: "2185_INJ",
+    name: "Testosterone Cypionate",
+    unitPrice: 45.5,
+    family: "Hormone Restoration",
+    subCategory1: "Testosterone",
+    subCategory2: "Injectables",
+    commonName: "Testosterone Cypionate",
+    sigOptions: ["Inject 0.5 mL intramuscularly once weekly"],
+    productSize: "10mL",
+    medicalAccessories: "0",
+    coldShipped: "0",
+    controlledSubstance: "0",
+    dispenseType: "Vial",
+    reasonForCompoundedMedication: REASONS,
+    isReasonForCompoundedMedicationNeeded: true,
+    productType: "S",
+    patientPayAmount: 62.5,
+    ndc: 12345678901,
+    discountedPercentage: 10
+  },
+  {
+    id: "64f1c2a9e4b0a1b2c3d4e5f7",
+    productId: "3097_POW",
+    name: "Semaglutide / B6 Troche",
+    unitPrice: 7.5,
+    family: "Weight Management",
+    subCategory1: "GLP-1",
+    subCategory2: "Troches",
+    commonName: "Semaglutide",
+    sigOptions: ["Dissolve 1 troche under the tongue daily"],
+    productSize: "30ea",
+    medicalAccessories: "0",
+    coldShipped: "1",
+    controlledSubstance: "0",
+    dispenseType: "Troche",
+    reasonForCompoundedMedication: REASONS,
+    isReasonForCompoundedMedicationNeeded: true,
+    productType: "NS",
+    patientPayAmount: 30,
+    ndc: null,
+    discountedPercentage: 0
+  },
+  {
+    id: "64f1c2a9e4b0a1b2c3d4e5f8",
+    productId: "4410_CAP",
+    name: "Enclomiphene Citrate 25 mg",
+    unitPrice: 1.2,
+    family: "Hormone Restoration",
+    subCategory1: "Testosterone",
+    subCategory2: "Capsules",
+    commonName: "Enclomiphene",
+    sigOptions: ["Take 1 capsule by mouth daily"],
+    productSize: "30ea",
+    medicalAccessories: "0",
+    coldShipped: "0",
+    controlledSubstance: "0",
+    dispenseType: "Capsule",
+    reasonForCompoundedMedication: null,
+    isReasonForCompoundedMedicationNeeded: false,
+    productType: "NS",
+    patientPayAmount: 40,
+    ndc: null,
+    discountedPercentage: 5
+  },
+  {
+    id: "64f1c2a9e4b0a1b2c3d4e5f9",
+    productId: "5120_INJ",
+    name: "Nandrolone Decanoate",
+    unitPrice: 55,
+    family: "Hormone Restoration",
+    subCategory1: "Testosterone",
+    subCategory2: "Injectables",
+    commonName: "Nandrolone",
+    sigOptions: [],
+    productSize: "5mL",
+    medicalAccessories: "0",
+    coldShipped: "0",
+    controlledSubstance: "1",
+    dispenseType: "Vial",
+    reasonForCompoundedMedication: REASONS,
+    isReasonForCompoundedMedicationNeeded: true,
+    productType: "S",
+    patientPayAmount: 80,
+    ndc: null,
+    discountedPercentage: 0
+  }
+];
+var DEFAULT_CLINIC_LOCATION = {
+  id: DEFAULT_CLINIC_LOCATION_ID,
+  clinicId: DEFAULT_CLINIC_ID,
+  locationName: "Geviti Main",
+  email: "pharmacy@example.com",
+  fax: "5555550100",
+  addressLine1: "100 Clinic Way",
+  addressLine2: null,
+  city: "Phoenix",
+  zipcode: "85004",
+  state: "AZ"
+};
+var DEFAULT_PROVIDERS = [
+  {
+    id: DEFAULT_PROVIDER_ID,
+    firstName: "Grace",
+    lastName: "Hopper",
+    npi: "1234567893",
+    clinicLocationId: DEFAULT_CLINIC_LOCATION_ID
+  },
+  {
+    id: "65a1c0de00000000000000e2",
+    firstName: "Alan",
+    lastName: "Turing",
+    npi: "1987654320",
+    clinicLocationId: DEFAULT_CLINIC_LOCATION_ID
+  }
+];
+var DEFAULT_PATIENTS = [
+  {
+    id: DEFAULT_PATIENT_ID,
+    clinicId: DEFAULT_CLINIC_ID,
+    firstName: "Ada",
+    lastName: "Lovelace",
+    dateOfBirth: "1985-02-14",
+    email: "ada@example.com",
+    phoneNumber: "6025550142",
+    cellPhone: null,
+    addresses: [
+      {
+        id: "65a1c0de0000000000000af1",
+        addressLine1: "1 Main St",
+        addressLine2: null,
+        city: "Phoenix",
+        state: "AZ",
+        zipcode: "85004"
+      }
+    ]
+  }
+];
+var SHIPPING_STATES = [
+  "Alabama",
+  "Alaska",
+  "Arizona",
+  "Arkansas",
+  "California",
+  "Colorado",
+  "Connecticut",
+  "Delaware",
+  "Florida",
+  "Georgia",
+  "Hawaii",
+  "Idaho",
+  "Illinois",
+  "Indiana",
+  "Iowa",
+  "Kansas",
+  "Kentucky",
+  "Louisiana",
+  "Maine",
+  "Maryland",
+  "Massachusetts",
+  "Michigan",
+  "Minnesota",
+  "Mississippi",
+  "Missouri",
+  "Montana",
+  "Nebraska",
+  "Nevada",
+  "New Hampshire",
+  "New Jersey",
+  "New Mexico",
+  "New York",
+  "North Carolina",
+  "North Dakota",
+  "Ohio",
+  "Oklahoma",
+  "Oregon",
+  "Pennsylvania",
+  "Rhode Island",
+  "South Carolina",
+  "South Dakota",
+  "Tennessee",
+  "Texas",
+  "Utah",
+  "Vermont",
+  "Virginia",
+  "Washington",
+  "West Virginia",
+  "Wisconsin",
+  "Wyoming",
+  "District of Columbia"
+].map((name) => ({
+  name,
+  booleanCheck: name !== "District of Columbia",
+  nonSterile: true,
+  sterile: name !== "Alabama" && name !== "District of Columbia"
+}));
+var STATE_CODES = {
+  Alabama: "AL",
+  Alaska: "AK",
+  Arizona: "AZ",
+  Arkansas: "AR",
+  California: "CA",
+  Colorado: "CO",
+  Connecticut: "CT",
+  Delaware: "DE",
+  Florida: "FL",
+  Georgia: "GA",
+  Hawaii: "HI",
+  Idaho: "ID",
+  Illinois: "IL",
+  Indiana: "IN",
+  Iowa: "IA",
+  Kansas: "KS",
+  Kentucky: "KY",
+  Louisiana: "LA",
+  Maine: "ME",
+  Maryland: "MD",
+  Massachusetts: "MA",
+  Michigan: "MI",
+  Minnesota: "MN",
+  Mississippi: "MS",
+  Missouri: "MO",
+  Montana: "MT",
+  Nebraska: "NE",
+  Nevada: "NV",
+  "New Hampshire": "NH",
+  "New Jersey": "NJ",
+  "New Mexico": "NM",
+  "New York": "NY",
+  "North Carolina": "NC",
+  "North Dakota": "ND",
+  Ohio: "OH",
+  Oklahoma: "OK",
+  Oregon: "OR",
+  Pennsylvania: "PA",
+  "Rhode Island": "RI",
+  "South Carolina": "SC",
+  "South Dakota": "SD",
+  Tennessee: "TN",
+  Texas: "TX",
+  Utah: "UT",
+  Vermont: "VT",
+  Virginia: "VA",
+  Washington: "WA",
+  "West Virginia": "WV",
+  Wisconsin: "WI",
+  Wyoming: "WY",
+  "District of Columbia": "DC",
+  "American Samoa": "AS",
+  Guam: "GU",
+  "Northern Mariana Islands": "MP",
+  "Puerto Rico": "PR",
+  "U.S. Virgin Islands": "VI"
+};
+
+// src/generated/openapi.ts
+var document = JSON.parse(`{"openapi":"3.1.0","info":{"title":"VPI compounding pharmacy API (Mockingbird subset)","description":"Stateful mock subset of the VPI (vpicompounding.net) clinic API our backend drives as a\\ndraft-only eRx rail: JWT authentication, product taxonomy/details/discounts, day supply,\\nshipping states and rates, clinic location, providers, patients, the provider-signature\\nduplicate check, saveNewPrescription, and the three paged prescription status lists.\\nHand-derived from the consumer's zod contracts (the vendor publishes no spec).\\n","version":"1","x-mockingbird-upstream":{"note":"Hand-derived from apps/backend/src/modules/erx/clients/vpi-api.contracts.ts and the client-local schemas in vpi-api.client.ts (request bodies are exactly what the client sends; responses are what its zod schemas accept)."}},"servers":[{"url":"https://api.vpicompounding.net"}],"security":[{"bearerAuth":[]}],"paths":{"/accounts/authenticate":{"post":{"operationId":"Authenticate","security":[],"x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["email","password"],"properties":{"email":{"type":"string","minLength":1,"maxLength":120},"password":{"type":"string","minLength":1,"maxLength":120},"isPatientLogin":{"type":"boolean"}}}}}},"responses":{"200":{"description":"JWT and refresh token","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AuthTokens"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"}}}},"/products/getAllFamiliesAndCategories":{"get":{"operationId":"GetAllFamiliesAndCategories","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"responses":{"200":{"description":"Product families and their categories (subCategory1)","content":{"application/json":{"schema":{"type":"array","items":{"type":"object","required":["family","categories"],"properties":{"family":{"type":"string"},"categories":{"type":"array","items":{"type":"string"}}}}}}}},"401":{"$ref":"#/components/responses/Unauthorized"}}}},"/products/getProductsByCategory":{"post":{"operationId":"GetProductsByCategory","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["category","subCategory1"],"examples":[{"category":"Hormone Restoration","subCategory1":"Testosterone"},{"category":"Weight Management","subCategory1":"GLP-1"}],"properties":{"category":{"type":"string","minLength":1,"maxLength":80,"examples":["Hormone Restoration","Weight Management"]},"subCategory1":{"type":"string","minLength":1,"maxLength":80,"examples":["Testosterone","GLP-1"]}}}}}},"responses":{"200":{"description":"Products grouped by subCategory2, then common name","content":{"application/json":{"schema":{"type":"array","items":{"type":"object","required":["subCategory2_item","commonNames"],"properties":{"subCategory2_item":{"type":"string"},"commonNames":{"type":"array","items":{"type":"object","required":["commonName","products"],"properties":{"commonName":{"type":"string"},"products":{"type":"array","items":{"$ref":"#/components/schemas/ProductSummary"}}}}}}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"}}}},"/products/getProductDetailsByProductId/{productId}":{"parameters":[{"name":"productId","in":"path","required":true,"description":"The product's Mongo id (\`id\`), not its catalog code.","schema":{"type":"string","x-mockingbird-resource-ref":{"type":"product","missing":0}}}],"get":{"operationId":"GetProductDetailsByProductId","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"responses":{"200":{"description":"Product details","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ProductDetails"}}}},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/products/getProductDiscountByProductIds":{"post":{"operationId":"GetProductDiscountByProductIds","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicId","productIds"],"properties":{"clinicId":{"$ref":"#/components/schemas/ClinicId"},"productIds":{"type":"array","minItems":1,"maxItems":5,"items":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"product","missing":0}}}}}}}},"responses":{"200":{"description":"The clinic's discount for each known product","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/ProductDiscount"}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/products/calculateDaySupply":{"post":{"operationId":"CalculateDaySupply","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["productId","quantity","sig"],"properties":{"productId":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"product","missing":0}},"quantity":{"type":"number","exclusiveMinimum":0,"maximum":1000},"sig":{"type":"string","minLength":1,"maxLength":500}}}}}},"responses":{"200":{"description":"Day supply","content":{"application/json":{"schema":{"type":"object","required":["daySupply"],"properties":{"daySupply":{"type":"integer","minimum":1},"daySupplyReason":{"type":["string","null"]}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/admin/rxOrdering/getShippingStates":{"get":{"operationId":"GetShippingStates","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"responses":{"200":{"description":"States VPI ships to, by full name","content":{"application/json":{"schema":{"type":"object","required":["data"],"properties":{"data":{"type":"array","items":{"type":"object","required":["states"],"properties":{"states":{"type":"array","items":{"type":"object","required":["name","booleanCheck","nonSterile","sterile"],"properties":{"name":{"type":"string"},"booleanCheck":{"type":"boolean"},"nonSterile":{"type":"boolean"},"sterile":{"type":"boolean"}}}}}}}}}}}},"401":{"$ref":"#/components/responses/Unauthorized"}}}},"/portal/getShippingRate":{"post":{"operationId":"GetShippingRate","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicId","clinicLocationId","patientId","productIds","shippingState","isRushOrder"],"properties":{"clinicId":{"$ref":"#/components/schemas/ClinicId"},"clinicLocationId":{"$ref":"#/components/schemas/ClinicLocationId"},"patientId":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"patient","missing":0}},"productIds":{"type":"array","minItems":1,"maxItems":5,"items":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"product","missing":0}}},"shippingState":{"type":"string","pattern":"^[A-Za-z]{2}$","examples":["AZ","TX","NY"]},"isRushOrder":{"type":"boolean"}}}}}},"responses":{"200":{"description":"Shipping method and rush cost","content":{"application/json":{"schema":{"type":"object","required":["shippingMethod","rushOrderCost","rushOrderMethod","isSignatureRequired"],"properties":{"shippingMethod":{"type":"string"},"rushOrderCost":{"type":"number","minimum":0},"rushOrderMethod":{"type":"string"},"isSignatureRequired":{"type":"boolean"}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/clinic/rxOrdering/checkProviderSignatureNeededDuplicate":{"post":{"operationId":"CheckProviderSignatureNeededDuplicate","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicId","patientIds","productIds","clinicLocationIds"],"properties":{"clinicId":{"$ref":"#/components/schemas/ClinicId"},"patientIds":{"type":"array","minItems":1,"maxItems":3,"items":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"patient","missing":0}}},"productIds":{"type":"array","minItems":1,"maxItems":3,"items":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"product","missing":0}}},"clinicLocationIds":{"type":"array","minItems":1,"maxItems":3,"items":{"$ref":"#/components/schemas/ClinicLocationId"}}}}}}},"responses":{"200":{"description":"Duplicate and provider-signature flags","content":{"application/json":{"schema":{"type":"object","required":["isDuplicate","isProviderSignatureNeeded"],"properties":{"isDuplicate":{"type":"boolean"},"isProviderSignatureNeeded":{"type":"boolean"}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"}}}},"/clinic/rxOrdering/saveNewPrescription":{"post":{"operationId":"SaveNewPrescription","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":false}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SavePrescriptionBody"}}}},"responses":{"200":{"description":"Draft saved (awaiting provider signature)","content":{"application/json":{"schema":{"type":"object","required":["message","prescriptionId","isRefillRequest","refillFromPrescriptionId"],"properties":{"message":{"type":"string"},"prescriptionId":{"type":"string","x-mockingbird-resource":{"type":"prescription","identity":true},"x-mockingbird-volatile":{"kind":"id"}},"isRefillRequest":{"type":"boolean"},"refillFromPrescriptionId":{"type":["string","null"]}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"},"409":{"$ref":"#/components/responses/Conflict"},"429":{"$ref":"#/components/responses/Conflict"}}}},"/patients/getPatientByPatientId":{"post":{"operationId":"GetPatientByPatientId","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PatientLookupBody"}}}},"responses":{"200":{"description":"Patient","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Patient"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/patients/getPatientAddressesByPatientId":{"post":{"operationId":"GetPatientAddressesByPatientId","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PatientLookupBody"}}}},"responses":{"200":{"description":"The patient's addresses","content":{"application/json":{"schema":{"type":"object","required":["addresses"],"properties":{"addresses":{"type":"array","items":{"$ref":"#/components/schemas/Address"}}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/patients/getPatientsInClinic":{"post":{"operationId":"GetPatientsInClinic","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicId","userId","limit","currentPage"],"examples":[{"clinicId":"65a1c0de00000000000000c1","userId":"65a1c0de00000000000000a1","limit":100,"currentPage":1}],"properties":{"clinicId":{"$ref":"#/components/schemas/ClinicId"},"userId":{"$ref":"#/components/schemas/UserId"},"limit":{"type":"integer","minimum":1,"maximum":100},"currentPage":{"type":"integer","minimum":1,"maximum":50}}}}}},"responses":{"200":{"description":"One page of the clinic's patient roster","content":{"application/json":{"schema":{"type":"object","required":["pagination","patients"],"properties":{"pagination":{"type":"object","required":["hasNextPage"],"properties":{"hasNextPage":{"type":"boolean"},"currentPage":{"type":"integer"},"limit":{"type":"integer"},"totalCount":{"type":"integer"}}},"patients":{"type":"array","items":{"$ref":"#/components/schemas/Patient"}}}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/staffs/getAllProvidersByClinicLocationId":{"post":{"operationId":"GetAllProvidersByClinicLocationId","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicLocationId","clinicId"],"properties":{"clinicLocationId":{"$ref":"#/components/schemas/ClinicLocationId"},"clinicId":{"$ref":"#/components/schemas/ClinicId"}}}}}},"responses":{"200":{"description":"Providers at the location","content":{"application/json":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Provider"}}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/clinicLocations/getClinicLocationByClinicLocationId":{"post":{"operationId":"GetClinicLocationByClinicLocationId","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["clinicLocationId"],"properties":{"clinicLocationId":{"$ref":"#/components/schemas/ClinicLocationId"}}}}}},"responses":{"200":{"description":"Clinic location","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ClinicLocation"}}}},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/clinic/rxOrdering/getIncompleteSavedPrescriptionsInClinicLocation":{"post":{"operationId":"GetIncompleteSavedPrescriptionsInClinicLocation","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrescriptionPageBody"}}}},"responses":{"200":{"$ref":"#/components/responses/PrescriptionRows"},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/clinic/rxOrdering/getSubmittedPrescriptionsInClinicLocation":{"post":{"operationId":"GetSubmittedPrescriptionsInClinicLocation","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrescriptionPageBody"}}}},"responses":{"200":{"$ref":"#/components/responses/PrescriptionRows"},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}},"/clinic/rxOrdering/getArchivedPrescriptionsInClinic":{"post":{"operationId":"GetArchivedPrescriptionsInClinic","x-mockingbird":{"supported":true,"parity":{"enabled":true,"safe":true}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/PrescriptionPageBody"}}}},"responses":{"200":{"$ref":"#/components/responses/PrescriptionRows"},"400":{"$ref":"#/components/responses/BadRequest"},"401":{"$ref":"#/components/responses/Unauthorized"},"404":{"$ref":"#/components/responses/NotFound"}}}}},"components":{"securitySchemes":{"bearerAuth":{"type":"http","scheme":"bearer","bearerFormat":"JWT"}},"responses":{"BadRequest":{"description":"Invalid request body","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorBody"}}}},"Unauthorized":{"description":"Missing, invalid or expired JWT (or bad credentials)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorBody"}}}},"NotFound":{"description":"Unknown clinic, location, patient, product or provider","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorBody"}}}},"Conflict":{"description":"The request could not be completed right now","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorBody"}}}},"PrescriptionRows":{"description":"One page of prescription status rows, in one of the four envelopes our client accepts (bare array, {prescriptions}, {message: [...]}, {message: {prescriptions}}).","content":{"application/json":{"schema":{"anyOf":[{"type":"array","items":{"$ref":"#/components/schemas/PrescriptionRow"}},{"type":"object","required":["prescriptions"],"properties":{"prescriptions":{"type":"array","items":{"$ref":"#/components/schemas/PrescriptionRow"}}}},{"type":"object","required":["message"],"properties":{"message":{"anyOf":[{"type":"array","items":{"$ref":"#/components/schemas/PrescriptionRow"}},{"type":"object","required":["prescriptions"],"properties":{"prescriptions":{"type":"array","items":{"$ref":"#/components/schemas/PrescriptionRow"}}}}]}}}]}}}}},"schemas":{"ErrorBody":{"type":"object","required":["message"],"properties":{"message":{"type":"string"},"errors":{"type":"array","items":{"type":"object","required":["path","message"],"properties":{"path":{"type":"string"},"message":{"type":"string"}}}}}},"ClinicId":{"type":"string","minLength":1,"maxLength":64,"examples":["65a1c0de00000000000000c1"]},"ClinicLocationId":{"type":"string","minLength":1,"maxLength":64,"examples":["65a1c0de00000000000000d1"]},"UserId":{"type":"string","minLength":1,"maxLength":64,"examples":["65a1c0de00000000000000a1"]},"AuthTokens":{"type":"object","required":["id","jwtToken","refreshToken"],"properties":{"id":{"type":"string"},"jwtToken":{"type":"string","x-mockingbird-volatile":{"kind":"token"}},"refreshToken":{"type":"string","x-mockingbird-volatile":{"kind":"token"}}}},"ProductSummary":{"type":"object","required":["id","name","unitPrice","productId","productSize","medicalAccessories","coldShipped","controlledSubstance","dispenseType","productType","isReasonForCompoundedMedicationNeeded"],"properties":{"id":{"type":"string","x-mockingbird-resource":{"type":"product","identity":true}},"name":{"type":"string"},"unitPrice":{"type":"number","minimum":0},"productId":{"type":"string"},"productSize":{"type":"string"},"medicalAccessories":{"type":"string","enum":["0","1"]},"coldShipped":{"type":"string","enum":["0","1"]},"controlledSubstance":{"type":"string","enum":["0","1"]},"dispenseType":{"type":"string"},"productType":{"type":"string","enum":["S","NS"]},"isReasonForCompoundedMedicationNeeded":{"type":"boolean"}}},"ProductDetails":{"type":"object","required":["id","productId","name","unitPrice","family","subCategory1","subCategory2","commonName","sigOptions","productSize","medicalAccessories","coldShipped","controlledSubstance","dispenseType","isReasonForCompoundedMedicationNeeded","productType"],"properties":{"id":{"type":"string"},"productId":{"type":"string"},"name":{"type":"string"},"unitPrice":{"type":"number","minimum":0},"family":{"type":"string"},"subCategory1":{"type":"string"},"subCategory2":{"type":"string"},"commonName":{"type":"string"},"sigOptions":{"type":"array","items":{"type":"string"}},"productSize":{"type":"string"},"medicalAccessories":{"type":"string","enum":["0","1"]},"coldShipped":{"type":"string","enum":["0","1"]},"controlledSubstance":{"type":"string","enum":["0","1"]},"dispenseType":{"type":"string"},"reasonForCompoundedMedication":{"type":["array","null"],"items":{"type":"string"}},"isReasonForCompoundedMedicationNeeded":{"type":"boolean"},"productType":{"type":"string","enum":["S","NS"]},"patientPayAmount":{"type":["number","null"]},"ndc":{"type":["number","null"]},"isActive":{"type":"boolean"},"isAvailable":{"type":"boolean"}}},"ProductDiscount":{"type":"object","required":["id","productId","discountedPrice","unitPrice","discountedPercentage","controlledSubstance"],"properties":{"id":{"type":"string"},"productId":{"type":"string"},"discountedPrice":{"type":"number","minimum":0},"unitPrice":{"type":"number","minimum":0},"discountedPercentage":{"type":"number","minimum":0,"maximum":100},"controlledSubstance":{"type":"string","enum":["0","1"]}}},"Patient":{"type":"object","required":["id","firstName","lastName","dateOfBirth"],"properties":{"id":{"type":"string","x-mockingbird-resource":{"type":"patient","identity":true}},"firstName":{"type":"string"},"lastName":{"type":"string"},"dateOfBirth":{"type":"string"},"email":{"type":["string","null"]},"phoneNumber":{"type":["string","null"]},"cellPhone":{"type":["string","null"]}}},"Address":{"type":"object","required":["id","addressLine1","addressLine2","city","state","zipcode"],"properties":{"id":{"type":"string"},"addressLine1":{"type":"string"},"addressLine2":{"type":["string","null"]},"city":{"type":"string"},"state":{"type":"string"},"zipcode":{"type":"string"}}},"Provider":{"type":"object","required":["id","firstName","lastName","npi"],"properties":{"id":{"type":"string"},"firstName":{"type":"string"},"lastName":{"type":"string"},"npi":{"type":["string","null"]},"deaInfo":{"type":"array","items":{"type":"object"}},"providerLicenses":{"type":"array","items":{"type":"object"}},"allowExostar":{"type":"boolean"},"isSuperUserSameAsProvider":{"type":"boolean"}}},"ClinicLocation":{"type":"object","required":["id","clinicId","locationName"],"properties":{"id":{"type":"string"},"clinicId":{"type":"string"},"locationName":{"type":"string"},"email":{"type":["string","null"]},"fax":{"type":["string","null"]},"addressLine1":{"type":["string","null"]},"addressLine2":{"type":["string","null"]},"city":{"type":["string","null"]},"zipcode":{"type":["string","null"]},"state":{"type":["string","null"]}}},"PatientLookupBody":{"type":"object","required":["patientId","userId"],"properties":{"patientId":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"patient","missing":0}},"userId":{"$ref":"#/components/schemas/UserId"}}},"PrescriptionPageBody":{"type":"object","required":["clinicLocationId","userId","limit","currentPage"],"properties":{"clinicLocationId":{"$ref":"#/components/schemas/ClinicLocationId"},"userId":{"$ref":"#/components/schemas/UserId"},"limit":{"type":"integer","minimum":1,"maximum":100},"currentPage":{"type":"integer","minimum":1,"maximum":50}}},"PrescriptionRow":{"type":"object","required":["prescriptionStatus"],"properties":{"prescriptionId":{"type":"string","x-mockingbird-volatile":{"kind":"id"}},"id":{"type":"string","x-mockingbird-volatile":{"kind":"id"}},"prescriptionStatus":{"type":"string"},"trackingNumber":{"type":["string","null"]},"patientId":{"type":"string"},"createdAt":{"type":"string","x-mockingbird-volatile":{"kind":"timestamp"}}}},"SavePrescriptionProduct":{"type":"object","required":["id","productId","name","unitPrice","family","subCategory1","subCategory2","commonName","sigOptions","productSize","medicalAccessories","coldShipped","controlledSubstance","dispenseType","reasonForCompoundedMedication","isReasonForCompoundedMedicationNeeded","productType","patientPay","ndc","quantity","sig","daySupply","daySupplyReason","refills","isCustomSig","discountedPercentage","discountedPrice","displayedGeneratedSig"],"properties":{"id":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"product","missing":0}},"productId":{"type":"string","minLength":1,"maxLength":40},"name":{"type":"string","minLength":1,"maxLength":120},"unitPrice":{"type":"number","minimum":0,"maximum":10000},"family":{"type":"string","minLength":1,"maxLength":80},"subCategory1":{"type":"string","minLength":1,"maxLength":80},"subCategory2":{"type":"string","minLength":1,"maxLength":80},"commonName":{"type":"string","minLength":1,"maxLength":120},"sigOptions":{"type":"array","maxItems":3,"items":{"type":"string","minLength":1,"maxLength":120}},"productSize":{"type":"string","minLength":1,"maxLength":40},"medicalAccessories":{"type":"array","maxItems":2,"items":{"type":"object"}},"coldShipped":{"type":"string","enum":["0","1"]},"controlledSubstance":{"description":"VPI's API rail excludes controlled substances.","type":"string","enum":["0"]},"dispenseType":{"type":"string","minLength":1,"maxLength":40},"reasonForCompoundedMedication":{"type":"string","maxLength":200},"isReasonForCompoundedMedicationNeeded":{"type":"boolean"},"productType":{"type":"string","enum":["S","NS"]},"patientPay":{"type":"number","minimum":0,"maximum":10000},"ndc":{"type":"string","maxLength":11},"quantity":{"type":"number","exclusiveMinimum":0,"maximum":1000},"sig":{"type":"string","minLength":1,"maxLength":500},"daySupply":{"type":"integer","minimum":1,"maximum":365},"daySupplyReason":{"type":"string","maxLength":200},"refills":{"type":"integer","minimum":0,"maximum":12},"isCustomSig":{"type":"boolean"},"discountedPercentage":{"type":"number","minimum":0,"maximum":100},"discountedPrice":{"type":"number","minimum":0,"maximum":10000},"displayedGeneratedSig":{"type":"string","minLength":1,"maxLength":500}}},"SavePrescriptionBody":{"type":"object","required":["patientIds","clinicLocationId","providerId","clinicId","userId","products","rxPadProducts","shippingInfo","patientNotificationRecipients"],"properties":{"patientIds":{"type":"array","minItems":1,"maxItems":1,"items":{"type":"string","minLength":1,"x-mockingbird-resource-ref":{"type":"patient","missing":0}}},"clinicLocationId":{"$ref":"#/components/schemas/ClinicLocationId"},"providerId":{"type":"string","minLength":1,"maxLength":64,"examples":["65a1c0de00000000000000e1"]},"clinicId":{"$ref":"#/components/schemas/ClinicId"},"userId":{"$ref":"#/components/schemas/UserId"},"products":{"type":"array","minItems":1,"maxItems":2,"items":{"$ref":"#/components/schemas/SavePrescriptionProduct"}},"rxPadProducts":{"type":"array","maxItems":2,"items":{"type":"object"}},"shippingInfo":{"type":"object","required":["isRushOrder","isSignatureRequired","orderNotes","shipTo","isNewAddressUsed","shippingMethod","shippingAddress","rushOrderCost","rushOrderMethod"],"properties":{"isRushOrder":{"type":"boolean"},"isSignatureRequired":{"type":"boolean"},"orderNotes":{"type":"string","maxLength":500},"shipTo":{"type":"string","minLength":1,"maxLength":40},"isNewAddressUsed":{"type":"boolean"},"shippingMethod":{"type":"string","minLength":1,"maxLength":40},"shippingAddress":{"type":"object","required":["addressLine1","addressLine2","city","state","zipcode"],"properties":{"addressLine1":{"type":"string","minLength":1,"maxLength":80},"addressLine2":{"type":"string","maxLength":80},"city":{"type":"string","minLength":1,"maxLength":40},"state":{"description":"The canonical full state name (never the 2-letter code).","type":"string","enum":["Alabama","Alaska","Arizona","Arkansas","California","Colorado","Connecticut","Delaware","Florida","Georgia","Hawaii","Idaho","Illinois","Indiana","Iowa","Kansas","Kentucky","Louisiana","Maine","Maryland","Massachusetts","Michigan","Minnesota","Mississippi","Missouri","Montana","Nebraska","Nevada","New Hampshire","New Jersey","New Mexico","New York","North Carolina","North Dakota","Ohio","Oklahoma","Oregon","Pennsylvania","Rhode Island","South Carolina","South Dakota","Tennessee","Texas","Utah","Vermont","Virginia","Washington","West Virginia","Wisconsin","Wyoming","District of Columbia","American Samoa","Guam","Northern Mariana Islands","Puerto Rico","U.S. Virgin Islands"]},"zipcode":{"type":"string","minLength":1,"maxLength":10}}},"rushOrderCost":{"type":"number","minimum":0,"maximum":1000},"rushOrderMethod":{"type":"string","maxLength":40}}},"creditRequested":{"type":"boolean"},"encryptedBillingInfo":{"type":"string","minLength":1,"maxLength":2000},"patientNotificationRecipients":{"type":"array","maxItems":2,"items":{"type":"object"}}}}}}}`);
+var operationIds = ["Authenticate", "GetAllFamiliesAndCategories", "GetProductsByCategory", "GetProductDetailsByProductId", "GetProductDiscountByProductIds", "CalculateDaySupply", "GetShippingStates", "GetShippingRate", "CheckProviderSignatureNeededDuplicate", "SaveNewPrescription", "GetPatientByPatientId", "GetPatientAddressesByPatientId", "GetPatientsInClinic", "GetAllProvidersByClinicLocationId", "GetClinicLocationByClinicLocationId", "GetIncompleteSavedPrescriptionsInClinicLocation", "GetSubmittedPrescriptionsInClinicLocation", "GetArchivedPrescriptionsInClinic"];
+var supportedOperationIds = ["Authenticate", "GetAllFamiliesAndCategories", "GetProductsByCategory", "GetProductDetailsByProductId", "GetProductDiscountByProductIds", "CalculateDaySupply", "GetShippingStates", "GetShippingRate", "CheckProviderSignatureNeededDuplicate", "SaveNewPrescription", "GetPatientByPatientId", "GetPatientAddressesByPatientId", "GetPatientsInClinic", "GetAllProvidersByClinicLocationId", "GetClinicLocationByClinicLocationId", "GetIncompleteSavedPrescriptionsInClinicLocation", "GetSubmittedPrescriptionsInClinicLocation", "GetArchivedPrescriptionsInClinic"];
+
+// src/state.ts
+var DEFAULT_SETTINGS = {
+  tokenTtlSeconds: 3600,
+  accounts: [],
+  statusEnvelope: "vendor",
+  isProviderSignatureNeeded: true
+};
+var VpiState = class {
+  constructor(sqlite, namespace, seed) {
+    this.seed = seed;
+    this.products = new Collection(sqlite, namespace, "products");
+    this.providers = new Collection(sqlite, namespace, "providers");
+    this.locations = new Collection(sqlite, namespace, "clinic_locations");
+    this.patients = new Collection(sqlite, namespace, "patients");
+    this.prescriptions = new Collection(sqlite, namespace, "prescriptions");
+    this.settings = new Collection(sqlite, namespace, "settings");
+    this.ensureSeeded();
+  }
+  seed;
+  products;
+  providers;
+  locations;
+  patients;
+  prescriptions;
+  settings;
+  /** Re-apply the seed after a reset. */
+  ensureSeeded() {
+    const { data } = this.seed;
+    if (this.products.count() === 0) {
+      for (const p of data.products ?? DEFAULT_PRODUCTS) this.products.insert(p.id, p);
+    }
+    if (this.providers.count() === 0) {
+      for (const p of data.providers ?? DEFAULT_PROVIDERS) this.providers.insert(p.id, p);
+    }
+    if (this.locations.count() === 0) {
+      for (const l of data.clinicLocations ?? [DEFAULT_CLINIC_LOCATION]) {
+        this.locations.insert(l.id, l);
+      }
+    }
+    if (this.patients.count() === 0) {
+      for (const p of data.patients ?? DEFAULT_PATIENTS) this.patients.insert(p.id, p);
+    }
+    if (!this.settings.has("settings")) {
+      this.settings.insert("settings", { ...DEFAULT_SETTINGS, ...this.seed.settings });
+    }
+  }
+  current() {
+    return this.settings.get("settings") ?? DEFAULT_SETTINGS;
+  }
+  update(patch) {
+    const next = { ...this.current(), ...patch };
+    this.settings.insert("settings", next);
+    return next;
+  }
+  /** Clinic ids that exist (every location's clinic). */
+  hasClinic(clinicId) {
+    return this.locations.list().some((row) => row.value.clinicId === clinicId);
+  }
+  /** A Mongo-looking prescription id, deterministic per namespace history. */
+  nextPrescriptionId() {
+    return `66b2${this.prescriptions.nextSequence().toString(16).padStart(20, "0")}`;
+  }
+  /** A patient id for seeded patients that omit one. */
+  nextPatientId() {
+    return `66b4${this.patients.nextSequence().toString(16).padStart(20, "0")}`;
+  }
+  /** A patient-address id for seeded addresses that omit one. */
+  nextAddressId() {
+    return `66b3${this.patients.nextSequence().toString(16).padStart(20, "0")}`;
+  }
+  /**
+   * A list's rows, newest first. The incomplete and submitted lists are per clinic location;
+   * the archived list is per clinic (`getArchivedPrescriptionsInClinic`).
+   */
+  list(list, location) {
+    return this.prescriptions.list({
+      where: (row) => row.list === list && (list === "archived" ? row.clinicId === location.clinicId : row.clinicLocationId === location.id)
+    }).map((row) => row.value);
+  }
+};
+
+// src/statuses.ts
+var DRAFT_STATUS = "Provider Signature Needed";
+var CANONICAL = {
+  "provider signature needed": { status: "Provider Signature Needed", list: "incomplete" },
+  "signature needed": { status: "Signature Needed", list: "incomplete" },
+  "new formula pending": { status: "New Formula Pending", list: "incomplete" },
+  received: { status: "Received", list: "submitted" },
+  "order received": { status: "Order Received", list: "submitted" },
+  "in process": { status: "In Process", list: "submitted" },
+  "order in process": { status: "Order In Process", list: "submitted" },
+  "prescriptions in process": { status: "Prescriptions In Process", list: "submitted" },
+  "on hold": { status: "On Hold", list: "submitted" },
+  "order on hold": { status: "Order On Hold", list: "submitted" },
+  completed: { status: "Completed", list: "submitted" },
+  "order complete": { status: "Order Complete", list: "submitted" },
+  "order completed": { status: "Order Completed", list: "submitted" },
+  cancelled: { status: "Cancelled", list: "archived" },
+  "order cancelled": { status: "Order Cancelled", list: "archived" },
+  archived: { status: "Archived", list: "archived" }
+};
+var resolveStatus = (to) => CANONICAL[to.trim().toLowerCase()] ?? { status: to.trim(), list: "submitted" };
+var isCompleted = (status) => /complete/i.test(status);
+var isActive = (list) => list !== "archived";
+
+// src/runtime.ts
+var AUTHORIZED_OPERATIONS = supportedOperationIds.filter((id) => id !== "Authenticate");
+var everyAuthorized = (rule) => AUTHORIZED_OPERATIONS.map((operationId) => ({ operationId, ...rule }));
+var VPI_PRESETS = {
+  token_expired: {
+    description: 'Authorized calls answer 401 "jwt expired" before exp; with count 1 our client re-authenticates once and the retry succeeds',
+    rules: everyAuthorized({ status: 401, body: { message: "jwt expired" } })
+  },
+  unauthorized_twice: {
+    description: "Authorized calls answer 401 twice: the single re-auth retry fails too (VpiApiHttpError 401)",
+    rules: everyAuthorized({ status: 401, body: { message: "Unauthorized" }, count: 2 })
+  },
+  auth_rejected: {
+    description: "POST /accounts/authenticate answers 401 (bad credentials)",
+    rules: [
+      {
+        operationId: "Authenticate",
+        status: 401,
+        body: { message: "Email or password is incorrect" }
+      }
+    ]
+  },
+  server_error: {
+    description: "Every call answers 500",
+    rules: [{ status: 500, body: { message: "Internal Server Error" } }]
+  },
+  duplicate_prescription: {
+    description: "checkProviderSignatureNeededDuplicate reports isDuplicate: true",
+    rules: [
+      { operationId: "CheckProviderSignatureNeededDuplicate", effect: "duplicate_prescription" }
+    ]
+  },
+  save_ambiguous_409: {
+    description: "saveNewPrescription saves the draft, then answers 409: the draft state is unknown (needs_review)",
+    rules: [{ operationId: "SaveNewPrescription", effect: "save_ambiguous_409" }]
+  },
+  save_rate_limited: {
+    description: "saveNewPrescription answers 429 without saving (ambiguous: needs_review)",
+    rules: [
+      { operationId: "SaveNewPrescription", status: 429, body: { message: "Too Many Requests" } }
+    ]
+  },
+  save_400: {
+    description: "saveNewPrescription answers 400 without saving (definitive: retry via the browser agent)",
+    rules: [{ operationId: "SaveNewPrescription", status: 400, body: { message: "Bad Request" } }]
+  },
+  response_drift: {
+    description: "Taxonomy answers categories as a string and product details unitPrice as a string: our zod parse fails closed",
+    rules: [
+      { operationId: "GetAllFamiliesAndCategories", effect: "response_drift" },
+      { operationId: "GetProductDetailsByProductId", effect: "response_drift" }
+    ]
+  }
+};
+var json3 = (status, body) => new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json" } });
+var adminError3 = (status, message) => json3(status, { error: { type: "mockingbird_admin", message } });
+var isRecord4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isString = (value) => typeof value === "string" && value.trim().length > 0;
+var ENVELOPES = [
+  "vendor",
+  "array",
+  "prescriptions",
+  "message",
+  "message.prescriptions"
+];
+var LISTS = ["incomplete", "submitted", "archived"];
+var parsePatient = (body) => {
+  if (!isRecord4(body)) return "expected a JSON object";
+  for (const key of ["firstName", "lastName", "dateOfBirth"]) {
+    if (!isString(body[key])) return `${key}: non-empty string`;
+  }
+  const addresses = body.addresses ?? [];
+  if (!Array.isArray(addresses)) return "addresses: [{addressLine1, city, state, zipcode}]";
+  for (const a of addresses) {
+    if (!isRecord4(a) || !["addressLine1", "city", "state", "zipcode"].every((k) => isString(a[k])))
+      return "addresses: [{addressLine1, addressLine2?, city, state, zipcode}]";
+  }
+  const optional = (key) => typeof body[key] === "string" || body[key] === null ? { [key]: body[key] } : {};
+  return {
+    firstName: body.firstName,
+    lastName: body.lastName,
+    dateOfBirth: body.dateOfBirth,
+    ...optional("id"),
+    ...optional("clinicId"),
+    ...optional("email"),
+    ...optional("phoneNumber"),
+    ...optional("cellPhone"),
+    addresses: addresses.map((a) => ({
+      addressLine1: a.addressLine1,
+      city: a.city,
+      state: a.state,
+      zipcode: a.zipcode,
+      ...typeof a.id === "string" ? { id: a.id } : {},
+      ...typeof a.addressLine2 === "string" || a.addressLine2 === null ? { addressLine2: a.addressLine2 } : {}
+    }))
+  };
+};
+var adminRoutes = (runtime) => ({
+  "GET /prescriptions": ({ namespace }) => json3(200, { prescriptions: runtime.instance(namespace).prescriptions() }),
+  "POST /prescriptions/:id/transition": ({ params, body, namespace }) => {
+    if (!isRecord4(body) || !isString(body.to)) {
+      return adminError3(400, 'expected {"to": "<VPI status>", "trackingNumber"?, "list"?}');
+    }
+    if (body.list !== void 0 && !LISTS.includes(body.list)) {
+      return adminError3(400, `list: one of ${LISTS.join(", ")}`);
+    }
+    const updated = runtime.instance(namespace).transition(params.id, {
+      to: body.to,
+      ...typeof body.trackingNumber === "string" ? { trackingNumber: body.trackingNumber } : {},
+      ...body.list !== void 0 ? { list: body.list } : {}
+    });
+    return updated ? json3(200, updated) : adminError3(404, `no prescription ${params.id}`);
+  },
+  "GET /patients": ({ namespace }) => json3(200, {
+    patients: runtime.instance(namespace).state.patients.list({ order: "oldest" }).map((row) => row.value)
+  }),
+  "POST /patients": ({ body, namespace }) => {
+    const parsed = parsePatient(body);
+    if (typeof parsed === "string") return adminError3(400, parsed);
+    return json3(201, runtime.instance(namespace).addPatient(parsed));
+  },
+  "GET /catalog": ({ namespace }) => {
+    const state = runtime.instance(namespace).state;
+    return json3(200, {
+      products: state.products.list({ order: "oldest" }).map((row) => row.value),
+      providers: state.providers.list({ order: "oldest" }).map((row) => row.value),
+      clinicLocations: state.locations.list({ order: "oldest" }).map((row) => row.value)
+    });
+  },
+  "GET /settings": ({ namespace }) => json3(200, runtime.instance(namespace).state.current()),
+  "PUT /settings": ({ body, namespace }) => {
+    if (!isRecord4(body)) return adminError3(400, "expected a JSON object");
+    const patch = {};
+    if (body.tokenTtlSeconds !== void 0) {
+      if (typeof body.tokenTtlSeconds !== "number" || body.tokenTtlSeconds <= 0)
+        return adminError3(400, "tokenTtlSeconds: positive number");
+      patch.tokenTtlSeconds = body.tokenTtlSeconds;
+    }
+    if (body.accounts !== void 0) {
+      if (!Array.isArray(body.accounts) || !body.accounts.every(isRecord4))
+        return adminError3(400, "accounts: [{email, password, id}]");
+      patch.accounts = body.accounts.map(
+        (a) => ({
+          email: String(a.email),
+          password: String(a.password),
+          id: String(a.id ?? "")
+        })
+      );
+    }
+    if (body.statusEnvelope !== void 0) {
+      if (!ENVELOPES.includes(body.statusEnvelope))
+        return adminError3(400, `statusEnvelope: one of ${ENVELOPES.join(", ")}`);
+      patch.statusEnvelope = body.statusEnvelope;
+    }
+    if (body.isProviderSignatureNeeded !== void 0) {
+      if (typeof body.isProviderSignatureNeeded !== "boolean")
+        return adminError3(400, "isProviderSignatureNeeded: boolean");
+      patch.isProviderSignatureNeeded = body.isProviderSignatureNeeded;
+    }
+    return json3(200, runtime.instance(namespace).state.update(patch));
+  }
+});
+var createRuntime2 = (options = {}) => createRuntime({
+  name: VPI_NAMESPACE,
+  document,
+  ...options.sqlite ? { sqlite: options.sqlite } : {},
+  ...options.clock ? { clock: options.clock } : {},
+  ...options.seed !== void 0 ? { seed: options.seed } : {},
+  ...options.adminKey !== void 0 ? { adminKey: options.adminKey } : {},
+  ...options.onLog ? { onLog: options.onLog } : {},
+  credential: tokenCredential,
+  presets: VPI_PRESETS,
+  create: ({ sqlite, namespace, clock }) => new VpiAPI({
+    sqlite,
+    namespace,
+    now: clock.now,
+    ...options.data ? { seed: options.data } : {},
+    ...options.settings ? { settings: options.settings } : {}
+  }),
+  admin: adminRoutes
+});
+
+// src/index.ts
+var VPI_NAMESPACE = "vpi";
+var base64url = (value) => toBase64(new TextEncoder().encode(value)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+var fromBase64url = (value) => {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(
+      fromBase64(value.replace(/-/g, "+").replace(/_/g, "/"))
+    );
+  } catch {
+    return void 0;
+  }
+};
+var JWT_HEADER = base64url(JSON.stringify({ alg: "HS256", typ: "JWT" }));
+var signJwt = (unsigned) => opaqueToken(`vpi-jwt:${unsigned}`, 43);
+var issueJwt = (claims) => {
+  const unsigned = `${JWT_HEADER}.${base64url(JSON.stringify(claims))}`;
+  return `${unsigned}.${signJwt(unsigned)}`;
+};
+var readClaims = (token) => {
+  const [header, payload, signature] = token.split(".");
+  if (!header || !payload || !signature) return void 0;
+  if (signature !== signJwt(`${header}.${payload}`)) return void 0;
+  const json4 = fromBase64url(payload);
+  if (!json4) return void 0;
+  try {
+    const claims = JSON.parse(json4);
+    return typeof claims.exp === "number" && typeof claims.email === "string" ? claims : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var tokenCredential = (request) => {
+  const token = bearerToken(request);
+  if (!token) return void 0;
+  const payload = token.split(".")[1];
+  if (!payload) return void 0;
+  const json4 = fromBase64url(payload);
+  if (!json4) return void 0;
+  try {
+    const email = JSON.parse(json4).email;
+    return typeof email === "string" ? email : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var error = (status, message, errors) => jsonRes(status, errors ? { message, errors } : { message });
+var notFound = (what) => {
+  throw new HttpError(404, { message: `${what} not found` });
+};
+var record = (context) => {
+  const issues = bodyIssues(context);
+  if (issues.length > 0) {
+    throw new HttpError(400, { message: "Validation failed", errors: issues });
+  }
+  return context.body.kind === "json" ? context.body.value : {};
+};
+var round2 = (value) => Math.round(value * 100) / 100;
+var patientBody = (patient) => ({
+  id: patient.id,
+  firstName: patient.firstName,
+  lastName: patient.lastName,
+  dateOfBirth: patient.dateOfBirth,
+  email: patient.email,
+  phoneNumber: patient.phoneNumber,
+  cellPhone: patient.cellPhone
+});
+var productSummary = (p) => ({
+  id: p.id,
+  name: p.name,
+  unitPrice: p.unitPrice,
+  productId: p.productId,
+  productSize: p.productSize,
+  medicalAccessories: p.medicalAccessories,
+  coldShipped: p.coldShipped,
+  controlledSubstance: p.controlledSubstance,
+  dispenseType: p.dispenseType,
+  productType: p.productType,
+  isReasonForCompoundedMedicationNeeded: p.isReasonForCompoundedMedicationNeeded
+});
+var productDetails = (p) => ({
+  id: p.id,
+  productId: p.productId,
+  name: p.name,
+  unitPrice: p.unitPrice,
+  family: p.family,
+  subCategory1: p.subCategory1,
+  subCategory2: p.subCategory2,
+  commonName: p.commonName,
+  sigOptions: p.sigOptions,
+  productSize: p.productSize,
+  medicalAccessories: p.medicalAccessories,
+  coldShipped: p.coldShipped,
+  controlledSubstance: p.controlledSubstance,
+  dispenseType: p.dispenseType,
+  reasonForCompoundedMedication: p.reasonForCompoundedMedication,
+  isReasonForCompoundedMedicationNeeded: p.isReasonForCompoundedMedicationNeeded,
+  productType: p.productType,
+  patientPayAmount: p.patientPayAmount,
+  ndc: p.ndc,
+  isActive: true,
+  isAvailable: true
+});
+var VpiAPI = class {
+  app;
+  sqlite;
+  state;
+  service;
+  now;
+  constructor(options = {}) {
+    const sqlite = bootSqlite(options.sqlite);
+    const namespace = options.namespace ?? VPI_NAMESPACE;
+    this.now = options.now ?? (() => Date.now());
+    this.state = new VpiState(sqlite, namespace, {
+      data: options.seed ?? {},
+      settings: options.settings ?? {}
+    });
+    const handlers = defineOperations({
+      Authenticate: (context) => this.authenticate(context),
+      GetAllFamiliesAndCategories: (context) => this.taxonomy(context),
+      GetProductsByCategory: (context) => this.productsByCategory(context),
+      GetProductDetailsByProductId: (context) => this.productDetails(context),
+      GetProductDiscountByProductIds: (context) => this.discounts(context),
+      CalculateDaySupply: (context) => this.daySupply(context),
+      GetShippingStates: () => jsonRes(200, { data: [{ states: SHIPPING_STATES }] }),
+      GetShippingRate: (context) => this.shippingRate(context),
+      CheckProviderSignatureNeededDuplicate: (context) => this.duplicateCheck(context),
+      SaveNewPrescription: (context) => this.savePrescription(context),
+      GetPatientByPatientId: (context) => {
+        const body = record(context);
+        const patient = this.patient(String(body.patientId));
+        return annotateResponse(jsonRes(200, patientBody(patient)), {
+          ids: { patientId: patient.id }
+        });
+      },
+      GetPatientAddressesByPatientId: (context) => {
+        const body = record(context);
+        const patient = this.patient(String(body.patientId));
+        return annotateResponse(jsonRes(200, { addresses: patient.addresses }), {
+          ids: { patientId: patient.id }
+        });
+      },
+      GetPatientsInClinic: (context) => this.roster(context),
+      GetAllProvidersByClinicLocationId: (context) => {
+        const body = record(context);
+        const location = this.location(String(body.clinicLocationId));
+        if (location.clinicId !== body.clinicId) notFound("Clinic location");
+        return jsonRes(
+          200,
+          this.state.providers.list({ order: "oldest", where: (p) => p.clinicLocationId === location.id }).map(({ value: p }) => ({
+            id: p.id,
+            firstName: p.firstName,
+            lastName: p.lastName,
+            npi: p.npi,
+            deaInfo: [],
+            providerLicenses: [],
+            allowExostar: false,
+            isSuperUserSameAsProvider: false
+          }))
+        );
+      },
+      GetClinicLocationByClinicLocationId: (context) => {
+        const body = record(context);
+        return jsonRes(200, this.location(String(body.clinicLocationId)));
+      },
+      GetIncompleteSavedPrescriptionsInClinicLocation: (context) => this.prescriptionPage(context, "incomplete"),
+      GetSubmittedPrescriptionsInClinicLocation: (context) => this.prescriptionPage(context, "submitted"),
+      GetArchivedPrescriptionsInClinic: (context) => this.prescriptionPage(context, "archived")
+    });
+    this.service = createService({
+      document,
+      handlers,
+      sqlite,
+      namespace,
+      now: this.now,
+      notFound: () => jsonRes(404, { message: "Cannot find the requested route" }),
+      onError: (thrown) => {
+        if (thrown instanceof HttpError) return thrown.toResponse();
+        throw thrown;
+      },
+      before: (context) => {
+        if (context.operation.operationId === "Authenticate") return void 0;
+        const token = bearerToken(context.request);
+        if (!token) return error(401, "Unauthorized");
+        const claims = readClaims(token);
+        if (!claims) return error(401, "Unauthorized");
+        if (this.now() / 1e3 >= claims.exp) return error(401, "jwt expired");
+        return void 0;
+      }
+    });
+    this.app = this.service.app;
+    this.sqlite = this.service.sqlite;
+  }
+  fetch(request) {
+    return this.service.fetch(request);
+  }
+  async reset() {
+    await this.service.reset();
+    this.state.ensureSeeded();
+  }
+  iso() {
+    return new Date(this.now()).toISOString();
+  }
+  authenticate(context) {
+    const body = record(context);
+    const email = String(body.email).trim();
+    const settings = this.state.current();
+    let userId = DEFAULT_USER_ID;
+    if (settings.accounts.length > 0) {
+      const account = settings.accounts.find(
+        (a) => a.email.toLowerCase() === email.toLowerCase() && a.password === body.password
+      );
+      if (!account) return error(401, "Email or password is incorrect");
+      userId = account.id;
+    }
+    if (body.isPatientLogin === true) return error(401, "Email or password is incorrect");
+    const iat = Math.floor(this.now() / 1e3);
+    const jwtToken = issueJwt({ sub: userId, email, iat, exp: iat + settings.tokenTtlSeconds });
+    return jsonRes(200, {
+      id: userId,
+      jwtToken,
+      refreshToken: opaqueToken(`vpi-refresh:${jwtToken}`, 80)
+    });
+  }
+  product(id) {
+    return this.state.products.get(id) ?? notFound("Product");
+  }
+  patient(id) {
+    return this.state.patients.get(id) ?? notFound("Patient");
+  }
+  location(id) {
+    return this.state.locations.get(id) ?? notFound("Clinic location");
+  }
+  clinic(id) {
+    if (!this.state.hasClinic(id)) notFound("Clinic");
+  }
+  taxonomy(context) {
+    const families = /* @__PURE__ */ new Map();
+    for (const { value: p } of this.state.products.list({ order: "oldest" })) {
+      const categories = families.get(p.family) ?? [];
+      if (!categories.includes(p.subCategory1)) categories.push(p.subCategory1);
+      families.set(p.family, categories);
+    }
+    const drift = faultEffect(context.request, "response_drift") !== void 0;
+    return jsonRes(
+      200,
+      [...families].map(([family, categories]) => ({
+        family,
+        categories: drift ? categories.join(",") : categories
+      }))
+    );
+  }
+  productsByCategory(context) {
+    const body = record(context);
+    const groups = /* @__PURE__ */ new Map();
+    for (const { value: p } of this.state.products.list({ order: "oldest" })) {
+      if (p.family !== body.category || p.subCategory1 !== body.subCategory1) continue;
+      const byName = groups.get(p.subCategory2) ?? /* @__PURE__ */ new Map();
+      byName.set(p.commonName, [...byName.get(p.commonName) ?? [], p]);
+      groups.set(p.subCategory2, byName);
+    }
+    return jsonRes(
+      200,
+      [...groups].map(([subCategory2, byName]) => ({
+        subCategory2_item: subCategory2,
+        commonNames: [...byName].map(([commonName, products]) => ({
+          commonName,
+          products: products.map(productSummary)
+        }))
+      }))
+    );
+  }
+  productDetails(context) {
+    const product = this.product(context.params.productId ?? "");
+    const body = productDetails(product);
+    if (faultEffect(context.request, "response_drift") !== void 0) {
+      return jsonRes(200, { ...body, unitPrice: String(body.unitPrice) });
+    }
+    return jsonRes(200, body);
+  }
+  discounts(context) {
+    const body = record(context);
+    this.clinic(String(body.clinicId));
+    const rows = body.productIds.map((id) => this.state.products.get(id)).filter((p) => p !== void 0).map((p) => ({
+      id: p.id,
+      productId: p.productId,
+      discountedPrice: round2(p.unitPrice * (1 - p.discountedPercentage / 100)),
+      unitPrice: p.unitPrice,
+      discountedPercentage: p.discountedPercentage,
+      controlledSubstance: p.controlledSubstance
+    }));
+    return jsonRes(200, rows);
+  }
+  daySupply(context) {
+    const body = record(context);
+    const product = this.product(String(body.productId));
+    const quantity = Number(body.quantity);
+    const perUnit = /ea$/i.test(product.productSize);
+    const daySupply = perUnit ? Math.max(1, Math.round(quantity)) : 30;
+    return jsonRes(200, {
+      daySupply,
+      daySupplyReason: perUnit ? "Calculated from quantity (1 per day)" : "Default 30-day supply"
+    });
+  }
+  shippingRate(context) {
+    const body = record(context);
+    this.clinic(String(body.clinicId));
+    this.location(String(body.clinicLocationId));
+    this.patient(String(body.patientId));
+    const products = body.productIds.map((id) => this.product(id));
+    const code = String(body.shippingState).toUpperCase();
+    const state = SHIPPING_STATES.find((s) => STATE_CODES[s.name] === code);
+    if (!state) return error(400, `VPI does not ship to ${code}`);
+    if (products.some((p) => p.productType === "S") && !state.sterile) {
+      return error(400, `VPI does not ship sterile products to ${state.name}`);
+    }
+    const cold = products.some((p) => p.coldShipped === "1");
+    const rush = body.isRushOrder === true;
+    return jsonRes(200, {
+      shippingMethod: cold ? "FedEx Priority Overnight" : "UPS Ground",
+      rushOrderCost: rush ? 35 : 0,
+      rushOrderMethod: rush ? "FedEx Standard Overnight" : "",
+      isSignatureRequired: products.some((p) => p.productType === "S")
+    });
+  }
+  duplicateCheck(context) {
+    const body = record(context);
+    const patients = body.patientIds;
+    const products = body.productIds;
+    const duplicate = faultEffect(context.request, "duplicate_prescription") !== void 0 || this.state.prescriptions.list().some(
+      ({ value: rx }) => isActive(rx.list) && patients.includes(rx.patientId) && rx.productIds.some((id) => products.includes(id))
+    );
+    return jsonRes(200, {
+      isDuplicate: duplicate,
+      isProviderSignatureNeeded: this.state.current().isProviderSignatureNeeded
+    });
+  }
+  savePrescription(context) {
+    const body = record(context);
+    const location = this.location(String(body.clinicLocationId));
+    if (location.clinicId !== body.clinicId) notFound("Clinic location");
+    const provider = this.state.providers.get(String(body.providerId));
+    if (!provider || provider.clinicLocationId !== location.id) notFound("Provider");
+    const patientId = body.patientIds[0];
+    const patient = this.patient(patientId);
+    if (patient.clinicId !== location.clinicId) notFound("Patient");
+    const lines = body.products;
+    for (const line of lines) {
+      const product = this.product(line.id);
+      if (product.productId !== line.productId) {
+        return error(400, `Product ${line.id} does not match product code ${line.productId}`);
+      }
+      if (product.controlledSubstance === "1") {
+        return error(400, "Controlled substances cannot be prescribed through this endpoint");
+      }
+    }
+    const now = this.iso();
+    const created = {
+      prescriptionId: this.state.nextPrescriptionId(),
+      clinicId: location.clinicId,
+      clinicLocationId: location.id,
+      patientId,
+      providerId: provider?.id ?? "",
+      productIds: lines.map((line) => line.id),
+      prescriptionStatus: DRAFT_STATUS,
+      list: "incomplete",
+      trackingNumber: null,
+      createdAt: now,
+      updatedAt: now
+    };
+    this.state.prescriptions.insert(created.prescriptionId, created);
+    const ids = { prescriptionId: created.prescriptionId, patientId };
+    if (faultEffect(context.request, "save_ambiguous_409") !== void 0) {
+      return annotateResponse(error(409, "Request conflicted with a concurrent save"), { ids });
+    }
+    return annotateResponse(
+      jsonRes(200, {
+        message: "Prescription saved successfully",
+        prescriptionId: created.prescriptionId,
+        isRefillRequest: false,
+        refillFromPrescriptionId: null
+      }),
+      { ids }
+    );
+  }
+  roster(context) {
+    const body = record(context);
+    this.clinic(String(body.clinicId));
+    const limit = Number(body.limit);
+    const page = Number(body.currentPage);
+    const all = this.state.patients.list({ order: "oldest", where: (p) => p.clinicId === body.clinicId }).map((row) => row.value);
+    const rows = all.slice((page - 1) * limit, page * limit);
+    return jsonRes(200, {
+      pagination: {
+        hasNextPage: page * limit < all.length,
+        currentPage: page,
+        limit,
+        totalCount: all.length
+      },
+      patients: rows.map(patientBody)
+    });
+  }
+  prescriptionPage(context, list) {
+    const body = record(context);
+    const location = this.location(String(body.clinicLocationId));
+    const limit = Number(body.limit);
+    const page = Number(body.currentPage);
+    const rows = this.state.list(list, location).slice((page - 1) * limit, page * limit);
+    const envelope = this.state.current().statusEnvelope;
+    const useId = envelope === "vendor" && list === "archived";
+    const shaped = rows.map((rx) => ({
+      ...useId ? { id: rx.prescriptionId } : { prescriptionId: rx.prescriptionId },
+      prescriptionStatus: rx.prescriptionStatus,
+      trackingNumber: rx.trackingNumber,
+      patientId: rx.patientId,
+      createdAt: rx.createdAt
+    }));
+    const kind = envelope !== "vendor" ? envelope : list === "submitted" ? "message.prescriptions" : list === "archived" ? "message" : "array";
+    const payload = kind === "array" ? shaped : kind === "prescriptions" ? { prescriptions: shaped } : kind === "message" ? { message: shaped } : { message: { prescriptions: shaped } };
+    return jsonRes(200, payload);
+  }
+  /** Move a prescription to a VPI status (and its list); completion adds a tracking number. */
+  transition(id, input) {
+    const rx = this.state.prescriptions.get(id);
+    if (!rx) return void 0;
+    const resolved = resolveStatus(input.to);
+    const next = {
+      ...rx,
+      prescriptionStatus: resolved.status,
+      list: input.list ?? resolved.list,
+      trackingNumber: input.trackingNumber ?? rx.trackingNumber ?? (isCompleted(resolved.status) ? `1Z${opaqueToken(id, 16).toUpperCase()}` : null),
+      updatedAt: this.iso()
+    };
+    this.state.prescriptions.update(id, next);
+    return next;
+  }
+  /** Seed a clinic patient (VPI patient creation is not part of our client's contract). */
+  addPatient(input) {
+    const patient = {
+      id: input.id ?? this.state.nextPatientId(),
+      clinicId: input.clinicId ?? this.state.locations.list({ order: "oldest" })[0]?.value.clinicId ?? "",
+      firstName: input.firstName,
+      lastName: input.lastName,
+      dateOfBirth: input.dateOfBirth,
+      email: input.email ?? null,
+      phoneNumber: input.phoneNumber ?? null,
+      cellPhone: input.cellPhone ?? null,
+      addresses: (input.addresses ?? []).map((a) => ({
+        id: a.id ?? this.state.nextAddressId(),
+        addressLine1: a.addressLine1,
+        addressLine2: a.addressLine2 ?? null,
+        city: a.city,
+        state: a.state,
+        zipcode: a.zipcode
+      }))
+    };
+    this.state.patients.insert(patient.id, patient);
+    return patient;
+  }
+  prescriptions() {
+    return this.state.prescriptions.list({ order: "oldest" }).map((row) => row.value);
+  }
+};
+
+export {
+  DEFAULT_USER_ID,
+  DEFAULT_CLINIC_ID,
+  DEFAULT_CLINIC_LOCATION_ID,
+  DEFAULT_PROVIDER_ID,
+  DEFAULT_PATIENT_ID,
+  DEFAULT_PRODUCTS,
+  DEFAULT_CLINIC_LOCATION,
+  DEFAULT_PROVIDERS,
+  DEFAULT_PATIENTS,
+  SHIPPING_STATES,
+  document,
+  operationIds,
+  supportedOperationIds,
+  VPI_PRESETS,
+  createRuntime2 as createRuntime,
+  VPI_NAMESPACE,
+  issueJwt,
+  tokenCredential,
+  VpiAPI
+};
+//# sourceMappingURL=chunk-32KSYN2C.js.map