@digimuza/saas-core 0.0.2

package/dist/entitlements/service.js

@@ -0,0 +1,158 @@
+import { and, eq, gte, inArray, lt, sql } from "drizzle-orm";
+import { EntitlementRequiredError, InvalidInputError, LimitExceededError } from "../errors.js";
+import { isUniqueViolation } from "../db/errors.js";
+import { ENTITLING_SUBSCRIPTION_STATUSES, entitlements, plans, subscriptions, usageRecords, } from "../db/schema/index.js";
+function startOfUtcMonth(at) {
+    return new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), 1));
+}
+function startOfNextUtcMonth(at) {
+    return new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth() + 1, 1));
+}
+export function createEntitlementsService(deps) {
+    const now = deps.now ?? (() => new Date());
+    async function findLive(workspaceId) {
+        const rows = await deps.db
+            .select({
+            plan: plans,
+            periodStart: subscriptions.currentPeriodStart,
+            periodEnd: subscriptions.currentPeriodEnd,
+        })
+            .from(subscriptions)
+            .innerJoin(plans, eq(plans.id, subscriptions.planId))
+            .where(and(eq(subscriptions.workspaceId, workspaceId), inArray(subscriptions.status, [...ENTITLING_SUBSCRIPTION_STATUSES])))
+            .limit(1);
+        return rows[0];
+    }
+    async function fallbackPlan() {
+        if (deps.fallbackPlanKey === undefined) {
+            return undefined;
+        }
+        const rows = await deps.db
+            .select()
+            .from(plans)
+            .where(eq(plans.key, deps.fallbackPlanKey))
+            .limit(1);
+        return rows[0];
+    }
+    async function resolveWindow(workspaceId) {
+        const live = await findLive(workspaceId);
+        const at = now();
+        if (live?.periodStart != null && live.periodEnd != null) {
+            return { start: live.periodStart, end: live.periodEnd };
+        }
+        return { start: startOfUtcMonth(at), end: startOfNextUtcMonth(at) };
+    }
+    const service = {
+        async resolvePlan(context) {
+            const live = await findLive(context.workspaceId);
+            return live?.plan ?? (await fallbackPlan());
+        },
+        async resolve(context) {
+            const plan = await service.resolvePlan(context);
+            if (plan === undefined) {
+                return { plan: undefined, byKey: new Map() };
+            }
+            const rows = await deps.db
+                .select()
+                .from(entitlements)
+                .where(eq(entitlements.planId, plan.id));
+            return { plan, byKey: new Map(rows.map((row) => [row.key, row])) };
+        },
+        async has(context, key) {
+            const { byKey } = await service.resolve(context);
+            return byKey.has(key);
+        },
+        async require(context, key) {
+            if (!(await service.has(context, key))) {
+                throw new EntitlementRequiredError(key);
+            }
+        },
+        async getLimit(context, key) {
+            const { byKey } = await service.resolve(context);
+            const entitlement = byKey.get(key);
+            /**
+             * Fail closed. A limit the plan does not mention is zero, not unlimited —
+             * a typo in a plan definition must not hand out infinite quota.
+             */
+            if (entitlement === undefined || entitlement.kind !== "limit") {
+                return 0;
+            }
+            return entitlement.limitValue;
+        },
+        async getUsage(context, key) {
+            const window = await resolveWindow(context.workspaceId);
+            const rows = await deps.db
+                .select({ total: sql `coalesce(sum(${usageRecords.quantity}), 0)::int` })
+                .from(usageRecords)
+                .where(and(eq(usageRecords.workspaceId, context.workspaceId), eq(usageRecords.key, key), gte(usageRecords.occurredAt, window.start), lt(usageRecords.occurredAt, window.end)));
+            return rows[0]?.total ?? 0;
+        },
+        async checkLimit(context, key, quantity = 1) {
+            if (!Number.isInteger(quantity) || quantity < 0) {
+                throw new InvalidInputError("Quantity must be a non-negative integer.");
+            }
+            const [limit, used, window] = await Promise.all([
+                service.getLimit(context, key),
+                service.getUsage(context, key),
+                resolveWindow(context.workspaceId),
+            ]);
+            if (limit === null) {
+                return { allowed: true, limit: null, used, remaining: null, window };
+            }
+            const remaining = Math.max(0, limit - used);
+            return { allowed: used + quantity <= limit, limit, used, remaining, window };
+        },
+        async requireLimit(context, key, quantity = 1) {
+            const check = await service.checkLimit(context, key, quantity);
+            if (!check.allowed) {
+                throw new LimitExceededError({
+                    entitlement: key,
+                    limit: check.limit ?? 0,
+                    used: check.used,
+                });
+            }
+            return check;
+        },
+        async recordUsage(context, key, options = {}) {
+            const quantity = options.quantity ?? 1;
+            if (!Number.isInteger(quantity) || quantity <= 0) {
+                throw new InvalidInputError("Usage quantity must be a positive integer.");
+            }
+            try {
+                await deps.db.insert(usageRecords).values({
+                    workspaceId: context.workspaceId,
+                    key,
+                    quantity,
+                    occurredAt: options.occurredAt ?? now(),
+                    idempotencyKey: options.idempotencyKey ?? null,
+                });
+            }
+            catch (error) {
+                /**
+                 * The idempotency key was already used, so this consumption is already
+                 * counted. Swallowing it makes the call safe to retry.
+                 */
+                if (isUniqueViolation(error, "usage_records_idempotency_idx")) {
+                    return;
+                }
+                throw error;
+            }
+        },
+        async consume(context, key, options = {}) {
+            const quantity = options.quantity ?? 1;
+            const check = await service.requireLimit(context, key, quantity);
+            await service.recordUsage(context, key, options);
+            /**
+             * The check and the insert are not one transaction, so concurrent
+             * consumers can together exceed the quota by their in-flight quantity.
+             * That is a deliberate trade: serialising every metered call behind a lock
+             * would make the hot path a contention point, and a small overshoot on a
+             * usage quota is cheaper than that. Wrap `consume` in your own transaction
+             * with `select ... for update` if a hard cap is required.
+             */
+            return { ...check, used: check.used + quantity };
+        },
+    };
+    return service;
+}
+//# sourceMappingURL=service.js.map

package/dist/entitlements/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/entitlements/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACL,+BAA+B,EAC/B,YAAY,EACZ,KAAK,EACL,aAAa,EACb,YAAY,GACb,MAAM,uBAAuB,CAAC;AAkG/B,SAAS,eAAe,CAAC,EAAQ;IAC/B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAQ;IACnC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA6B;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,KAAK,UAAU,QAAQ,CACrB,WAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,aAAa,CAAC,kBAAkB;YAC7C,SAAS,EAAE,aAAa,CAAC,gBAAgB;SAC1C,CAAC;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;aACpD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,+BAA+B,CAAC,CAAC,CACpE,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,YAAY;QACzB,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;aAC1C,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,WAAmB;QAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QAEjB,IAAI,IAAI,EAAE,WAAW,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAwB;QACnC,KAAK,CAAC,WAAW,CAAC,OAAO;YACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAE3C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG;YACpB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG;YACxB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG;YACzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEnC;;;eAGG;YACH,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9D,OAAO,CAAC,CAAC;YACX,CAAC;YAED,OAAO,WAAW,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG;YACzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAExD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,YAAY,CAAC,QAAQ,YAAY,EAAE,CAAC;iBAC/E,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EACjD,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,EACzB,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAC1C,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CACxC,CACF,CAAC;YAEJ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;gBAC9B,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;YAEH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACvE,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,QAAQ,IAAI,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC/E,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,kBAAkB,CAAC;oBAC3B,WAAW,EAAE,GAAG;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;oBACvB,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,EAAE;YAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,iBAAiB,CAAC,4CAA4C,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;oBACxC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,GAAG;oBACH,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE;oBACvC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;iBAC/C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf;;;mBAGG;gBACH,IAAI,iBAAiB,CAAC,KAAK,EAAE,+BAA+B,CAAC,EAAE,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACjE,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD;;;;;;;eAOG;YACH,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QACnD,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Domain errors shared across the core.
+ *
+ * Each carries a stable machine-readable `code` so route handlers can map errors
+ * to HTTP status codes without matching on message text.
+ */
+export type SaasCoreErrorCode = "unauthorized" | "forbidden" | "not_found" | "conflict" | "invalid_input" | "payment_required" | "limit_exceeded";
+export declare abstract class SaasCoreError extends Error {
+    abstract readonly code: SaasCoreErrorCode;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/** No authenticated user. Maps to HTTP 401. */
+export declare class UnauthorizedError extends SaasCoreError {
+    readonly code = "unauthorized";
+    constructor(message?: string);
+}
+/**
+ * Authenticated, but not permitted. Maps to HTTP 403.
+ *
+ * Use this only when the caller is already known to belong to the workspace.
+ * When they are not a member, raise {@link NotFoundError} instead — see below.
+ */
+export declare class ForbiddenError extends SaasCoreError {
+    readonly code = "forbidden";
+    /** The permission that was required, when the check was permission-based. */
+    readonly permission?: string;
+    constructor(message?: string, options?: {
+        permission?: string;
+    });
+}
+/**
+ * The resource does not exist, or the caller has no way to know that it does.
+ *
+ * Tenant isolation deliberately reports "not found" rather than "forbidden" for
+ * workspaces the caller is not a member of. A 403 would confirm that a given
+ * workspace id or slug exists, letting an attacker enumerate other tenants.
+ */
+export declare class NotFoundError extends SaasCoreError {
+    readonly code = "not_found";
+    constructor(message?: string);
+}
+/** The write conflicts with existing state. Maps to HTTP 409. */
+export declare class ConflictError extends SaasCoreError {
+    readonly code = "conflict";
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
+}
+/** The input is structurally invalid. Maps to HTTP 400. */
+export declare class InvalidInputError extends SaasCoreError {
+    readonly code = "invalid_input";
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * The workspace's plan does not include a required feature. Maps to HTTP 402.
+ *
+ * Distinct from {@link ForbiddenError}: the caller may well have permission, but
+ * the workspace has not paid for the capability. The two answer different
+ * questions and a client shows different UI for each — an upsell rather than an
+ * access error.
+ */
+export declare class EntitlementRequiredError extends SaasCoreError {
+    readonly code = "payment_required";
+    /** The entitlement key that was missing. */
+    readonly entitlement: string;
+    constructor(entitlement: string, message?: string);
+}
+/** A metered quota is exhausted. Maps to HTTP 429 or 402 depending on product. */
+export declare class LimitExceededError extends SaasCoreError {
+    readonly code = "limit_exceeded";
+    readonly entitlement: string;
+    readonly limit: number;
+    readonly used: number;
+    constructor(input: {
+        entitlement: string;
+        limit: number;
+        used: number;
+        message?: string;
+    });
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,WAAW,GACX,WAAW,GACX,UAAU,GACV,eAAe,GACf,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,8BAAsB,aAAc,SAAQ,KAAK;IAC/C,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAE1C,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED,+CAA+C;AAC/C,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,SAAkB,IAAI,kBAAkB;IAExC,YAAY,OAAO,SAA6B,EAE/C;CACF;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAkB,IAAI,eAAe;IAErC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,YAAY,OAAO,SAAuB,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,EAK5E;CACF;AAED;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,aAAa;IAC9C,SAAkB,IAAI,eAAe;IAErC,YAAY,OAAO,SAAe,EAEjC;CACF;AAED,iEAAiE;AACjE,qBAAa,aAAc,SAAQ,aAAa;IAC9C,SAAkB,IAAI,cAAc;IAEpC,YAAY,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAE/D;CACF;AAED,2DAA2D;AAC3D,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,SAAkB,IAAI,mBAAmB;IAEzC,YAAY,OAAO,SAAmB,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAEpE;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAyB,SAAQ,aAAa;IACzD,SAAkB,IAAI,sBAAsB;IAE5C,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,YAAY,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAGhD;CACF;AAED,kFAAkF;AAClF,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,SAAkB,IAAI,oBAAoB;IAE1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAQxF;CACF"}

package/dist/errors.js

@@ -0,0 +1,95 @@
+/**
+ * Domain errors shared across the core.
+ *
+ * Each carries a stable machine-readable `code` so route handlers can map errors
+ * to HTTP status codes without matching on message text.
+ */
+export class SaasCoreError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = new.target.name;
+    }
+}
+/** No authenticated user. Maps to HTTP 401. */
+export class UnauthorizedError extends SaasCoreError {
+    code = "unauthorized";
+    constructor(message = "Authentication required.") {
+        super(message);
+    }
+}
+/**
+ * Authenticated, but not permitted. Maps to HTTP 403.
+ *
+ * Use this only when the caller is already known to belong to the workspace.
+ * When they are not a member, raise {@link NotFoundError} instead — see below.
+ */
+export class ForbiddenError extends SaasCoreError {
+    code = "forbidden";
+    /** The permission that was required, when the check was permission-based. */
+    permission;
+    constructor(message = "Permission denied.", options) {
+        super(message);
+        if (options?.permission !== undefined) {
+            this.permission = options.permission;
+        }
+    }
+}
+/**
+ * The resource does not exist, or the caller has no way to know that it does.
+ *
+ * Tenant isolation deliberately reports "not found" rather than "forbidden" for
+ * workspaces the caller is not a member of. A 403 would confirm that a given
+ * workspace id or slug exists, letting an attacker enumerate other tenants.
+ */
+export class NotFoundError extends SaasCoreError {
+    code = "not_found";
+    constructor(message = "Not found.") {
+        super(message);
+    }
+}
+/** The write conflicts with existing state. Maps to HTTP 409. */
+export class ConflictError extends SaasCoreError {
+    code = "conflict";
+    constructor(message = "Conflict.", options) {
+        super(message, options);
+    }
+}
+/** The input is structurally invalid. Maps to HTTP 400. */
+export class InvalidInputError extends SaasCoreError {
+    code = "invalid_input";
+    constructor(message = "Invalid input.", options) {
+        super(message, options);
+    }
+}
+/**
+ * The workspace's plan does not include a required feature. Maps to HTTP 402.
+ *
+ * Distinct from {@link ForbiddenError}: the caller may well have permission, but
+ * the workspace has not paid for the capability. The two answer different
+ * questions and a client shows different UI for each — an upsell rather than an
+ * access error.
+ */
+export class EntitlementRequiredError extends SaasCoreError {
+    code = "payment_required";
+    /** The entitlement key that was missing. */
+    entitlement;
+    constructor(entitlement, message) {
+        super(message ?? `This workspace's plan does not include "${entitlement}".`);
+        this.entitlement = entitlement;
+    }
+}
+/** A metered quota is exhausted. Maps to HTTP 429 or 402 depending on product. */
+export class LimitExceededError extends SaasCoreError {
+    code = "limit_exceeded";
+    entitlement;
+    limit;
+    used;
+    constructor(input) {
+        super(input.message ??
+            `Quota for "${input.entitlement}" exhausted (${input.used} of ${input.limit} used).`);
+        this.entitlement = input.entitlement;
+        this.limit = input.limit;
+        this.used = input.used;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,OAAgB,aAAc,SAAQ,KAAK;IAG/C,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,OAAO,iBAAkB,SAAQ,aAAa;IAChC,IAAI,GAAG,cAAc,CAAC;IAExC,YAAY,OAAO,GAAG,0BAA0B;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAa;IAC7B,IAAI,GAAG,WAAW,CAAC;IAErC,6EAA6E;IACpE,UAAU,CAAU;IAE7B,YAAY,OAAO,GAAG,oBAAoB,EAAE,OAAiC;QAC3E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,aAAc,SAAQ,aAAa;IAC5B,IAAI,GAAG,WAAW,CAAC;IAErC,YAAY,OAAO,GAAG,YAAY;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,OAAO,aAAc,SAAQ,aAAa;IAC5B,IAAI,GAAG,UAAU,CAAC;IAEpC,YAAY,OAAO,GAAG,WAAW,EAAE,OAA6B;QAC9D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,OAAO,iBAAkB,SAAQ,aAAa;IAChC,IAAI,GAAG,eAAe,CAAC;IAEzC,YAAY,OAAO,GAAG,gBAAgB,EAAE,OAA6B;QACnE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAyB,SAAQ,aAAa;IACvC,IAAI,GAAG,kBAAkB,CAAC;IAE5C,4CAA4C;IACnC,WAAW,CAAS;IAE7B,YAAY,WAAmB,EAAE,OAAgB;QAC/C,KAAK,CAAC,OAAO,IAAI,2CAA2C,WAAW,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACjC,IAAI,GAAG,gBAAgB,CAAC;IAEjC,WAAW,CAAS;IACpB,KAAK,CAAS;IACd,IAAI,CAAS;IAEtB,YAAY,KAA6E;QACvF,KAAK,CACH,KAAK,CAAC,OAAO;YACX,cAAc,KAAK,CAAC,WAAW,gBAAgB,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,SAAS,CACvF,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}

package/dist/events/core-events.d.ts

@@ -0,0 +1,120 @@
+import { z } from "zod";
+/**
+ * Events the core itself emits.
+ *
+ * Deliberately limited to what the core actually does today. Notification and
+ * realtime events belong to the phases that introduce them — declaring them now
+ * would ship a catalogue of types nothing publishes, which is worse than no type
+ * at all because consumers would write handlers that never fire.
+ *
+ * Payloads carry identifiers, not whole records. A consumer that needs the
+ * current state should read it; embedding a snapshot would go stale between
+ * publication and delivery, and would put mutable user data in an append-only
+ * table.
+ */
+export declare const coreEvents: import("./registry.ts").EventRegistry<{
+    readonly "user.created": z.ZodObject<{
+        userId: z.ZodUUID;
+        workosUserId: z.ZodString;
+    }, z.core.$strip>;
+    readonly "workspace.created": z.ZodObject<{
+        workspaceId: z.ZodUUID;
+        slug: z.ZodString;
+    }, z.core.$strip>;
+    readonly "workspace.updated": z.ZodObject<{
+        workspaceId: z.ZodUUID;
+        changed: z.ZodArray<z.ZodEnum<{
+            name: "name";
+            slug: "slug";
+        }>>;
+    }, z.core.$strip>;
+    readonly "workspace.deleted": z.ZodObject<{
+        workspaceId: z.ZodUUID;
+        slug: z.ZodString;
+    }, z.core.$strip>;
+    readonly "workspace.member.created": z.ZodObject<{
+        userId: z.ZodUUID;
+        roleIds: z.ZodArray<z.ZodUUID>;
+    }, z.core.$strip>;
+    readonly "workspace.member.removed": z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly "workspace.member.role.updated": z.ZodObject<{
+        userId: z.ZodUUID;
+        roleId: z.ZodUUID;
+        action: z.ZodEnum<{
+            assigned: "assigned";
+            unassigned: "unassigned";
+        }>;
+    }, z.core.$strip>;
+    readonly "workspace.invitation.created": z.ZodObject<{
+        invitationId: z.ZodUUID;
+        email: z.ZodEmail;
+        roleId: z.ZodNullable<z.ZodUUID>;
+    }, z.core.$strip>;
+    readonly "workspace.invitation.accepted": z.ZodObject<{
+        invitationId: z.ZodUUID;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly "workspace.invitation.revoked": z.ZodObject<{
+        invitationId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly "billing.subscription.updated": z.ZodObject<{
+        subscriptionId: z.ZodUUID;
+        planKey: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            canceled: "canceled";
+            incomplete: "incomplete";
+            past_due: "past_due";
+            paused: "paused";
+            trialing: "trialing";
+        }>;
+        previousStatus: z.ZodOptional<z.ZodEnum<{
+            active: "active";
+            canceled: "canceled";
+            incomplete: "incomplete";
+            past_due: "past_due";
+            paused: "paused";
+            trialing: "trialing";
+        }>>;
+    }, z.core.$strip>;
+    /**
+     * Job lifecycle, reported from inside a Trigger.dev task.
+     *
+     * Trigger.dev owns run state — these events exist so the *application* can
+     * react and so a browser can watch progress, not as a second source of truth.
+     * `runId` is Trigger.dev's, which is what makes a run traceable across both
+     * systems.
+     */
+    readonly "job.started": z.ZodObject<{
+        runId: z.ZodString;
+        taskId: z.ZodString;
+    }, z.core.$strip>;
+    readonly "job.progress": z.ZodObject<{
+        runId: z.ZodString;
+        taskId: z.ZodString;
+        percent: z.ZodOptional<z.ZodNumber>;
+        message: z.ZodOptional<z.ZodString>;
+        step: z.ZodOptional<z.ZodNumber>;
+        totalSteps: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly "job.completed": z.ZodObject<{
+        runId: z.ZodString;
+        taskId: z.ZodString;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly "job.failed": z.ZodObject<{
+        runId: z.ZodString;
+        taskId: z.ZodString;
+        error: z.ZodString;
+        attempt: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly "billing.subscription.canceled": z.ZodObject<{
+        subscriptionId: z.ZodUUID;
+        planKey: z.ZodString;
+        atPeriodEnd: z.ZodBoolean;
+    }, z.core.$strip>;
+}>;
+export type CoreEventSchemas = (typeof coreEvents)["schemas"];
+//# sourceMappingURL=core-events.d.ts.map

package/dist/events/core-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-events.d.ts","sourceRoot":"","sources":["../../src/events/core-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuDrB;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCH,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC"}

package/dist/events/core-events.js

@@ -0,0 +1,109 @@
+import { z } from "zod";
+import { defineEvents } from "./registry.js";
+const uuid = z.uuid();
+/**
+ * Events the core itself emits.
+ *
+ * Deliberately limited to what the core actually does today. Notification and
+ * realtime events belong to the phases that introduce them — declaring them now
+ * would ship a catalogue of types nothing publishes, which is worse than no type
+ * at all because consumers would write handlers that never fire.
+ *
+ * Payloads carry identifiers, not whole records. A consumer that needs the
+ * current state should read it; embedding a snapshot would go stale between
+ * publication and delivery, and would put mutable user data in an append-only
+ * table.
+ */
+export const coreEvents = defineEvents({
+    "user.created": z.object({
+        userId: uuid,
+        workosUserId: z.string().min(1),
+    }),
+    "workspace.created": z.object({
+        workspaceId: uuid,
+        slug: z.string().min(1),
+    }),
+    "workspace.updated": z.object({
+        workspaceId: uuid,
+        /** Which fields changed, so a consumer can skip work it does not care about. */
+        changed: z.array(z.enum(["name", "slug"])),
+    }),
+    "workspace.deleted": z.object({
+        workspaceId: uuid,
+        slug: z.string().min(1),
+    }),
+    "workspace.member.created": z.object({
+        userId: uuid,
+        roleIds: z.array(uuid),
+    }),
+    "workspace.member.removed": z.object({
+        userId: uuid,
+    }),
+    "workspace.member.role.updated": z.object({
+        userId: uuid,
+        roleId: uuid,
+        action: z.enum(["assigned", "unassigned"]),
+    }),
+    "workspace.invitation.created": z.object({
+        invitationId: uuid,
+        email: z.email(),
+        roleId: uuid.nullable(),
+    }),
+    "workspace.invitation.accepted": z.object({
+        invitationId: uuid,
+        userId: uuid,
+    }),
+    "workspace.invitation.revoked": z.object({
+        invitationId: uuid,
+    }),
+    "billing.subscription.updated": z.object({
+        subscriptionId: uuid,
+        planKey: z.string().min(1),
+        status: z.enum(["trialing", "active", "past_due", "paused", "canceled", "incomplete"]),
+        /** Absent on the first observation of a subscription. */
+        previousStatus: z
+            .enum(["trialing", "active", "past_due", "paused", "canceled", "incomplete"])
+            .optional(),
+    }),
+    /**
+     * Job lifecycle, reported from inside a Trigger.dev task.
+     *
+     * Trigger.dev owns run state — these events exist so the *application* can
+     * react and so a browser can watch progress, not as a second source of truth.
+     * `runId` is Trigger.dev's, which is what makes a run traceable across both
+     * systems.
+     */
+    "job.started": z.object({
+        runId: z.string().min(1),
+        taskId: z.string().min(1),
+    }),
+    "job.progress": z.object({
+        runId: z.string().min(1),
+        taskId: z.string().min(1),
+        /** 0-100 where the task can estimate it. */
+        percent: z.number().min(0).max(100).optional(),
+        message: z.string().max(500).optional(),
+        step: z.number().int().nonnegative().optional(),
+        totalSteps: z.number().int().positive().optional(),
+    }),
+    "job.completed": z.object({
+        runId: z.string().min(1),
+        taskId: z.string().min(1),
+        durationMs: z.number().int().nonnegative().optional(),
+    }),
+    "job.failed": z.object({
+        runId: z.string().min(1),
+        taskId: z.string().min(1),
+        /** Truncated failure message. Never put a secret in a task error. */
+        error: z.string().max(2000),
+        /** Trigger.dev attempt number, so a retry is distinguishable from a give-up. */
+        attempt: z.number().int().positive().optional(),
+    }),
+    "billing.subscription.canceled": z.object({
+        subscriptionId: uuid,
+        planKey: z.string().min(1),
+        /** False when access ended immediately. */
+        atPeriodEnd: z.boolean(),
+    }),
+});
+//# sourceMappingURL=core-events.js.map

package/dist/events/core-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-events.js","sourceRoot":"","sources":["../../src/events/core-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAEtB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAChC,CAAC;IAEF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,gFAAgF;QAChF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC3C,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC;IAEF,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;KACvB,CAAC;IACF,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,IAAI;KACb,CAAC;IACF,+BAA+B,EAAE,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;KAC3C,CAAC;IAEF,8BAA8B,EAAE,CAAC,CAAC,MAAM,CAAC;QACvC,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;KACxB,CAAC;IACF,+BAA+B,EAAE,CAAC,CAAC,MAAM,CAAC;QACxC,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,IAAI;KACb,CAAC;IACF,8BAA8B,EAAE,CAAC,CAAC,MAAM,CAAC;QACvC,YAAY,EAAE,IAAI;KACnB,CAAC;IAEF,8BAA8B,EAAE,CAAC,CAAC,MAAM,CAAC;QACvC,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACtF,yDAAyD;QACzD,cAAc,EAAE,CAAC;aACd,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;aAC5E,QAAQ,EAAE;KACd,CAAC;IACF;;;;;;;OAOG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,4CAA4C;QAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACnD,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KACtD,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,qEAAqE;QACrE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3B,gFAAgF;QAChF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChD,CAAC;IAEF,+BAA+B,EAAE,CAAC,CAAC,MAAM,CAAC;QACxC,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,2CAA2C;QAC3C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;KACzB,CAAC;CACH,CAAC,CAAC"}

package/dist/events/index.d.ts

@@ -0,0 +1,15 @@
+import { type CoreEventSchemas } from "./core-events.ts";
+import { type EventsService } from "./service.ts";
+export { coreEvents, type CoreEventSchemas } from "./core-events.ts";
+export { defineEvents, mergeEventRegistries, type AnyEventHandler, type EventDataOf, type EventHandler, type EventRegistry, type EventSchemaMap, type EventTypeOf, type PublishInput, type SaasEvent, type SaasEventOf, type Unsubscribe, } from "./registry.ts";
+export { createEventsService, type EventsService, type EventsServiceDeps, type ListEventsOptions, type RecordResult, type ScopedPublisher, } from "./service.ts";
+/**
+ * Default service over the core catalogue only.
+ *
+ * An application with its own events should build its own service from a merged
+ * registry — this one cannot publish types it does not know about. It exists so
+ * the core's own services have somewhere to emit without every consumer having
+ * to wire a registry first.
+ */
+export declare const events: EventsService<CoreEventSchemas>;
+//# sourceMappingURL=index.d.ts.map

package/dist/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAEtB;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAKjD,CAAC"}