@digimuza/saas-core 0.0.2

package/dist/files/service.d.ts

@@ -0,0 +1,92 @@
+import type { FileRecord, FileStatus } from "../db/schema/index.ts";
+import type { CoreDatabase } from "../db/types.ts";
+import type { ObjectBody } from "../storage/provider.ts";
+import type { StorageService, UrlOptions } from "../storage/service.ts";
+import type { WorkspaceContext } from "../workspaces/context.ts";
+/**
+ * Reduce a caller-supplied filename to something safe to store and echo back.
+ *
+ * The filename never becomes part of the storage key — that is derived from the
+ * row id — so this is not a traversal defence. It exists because the value is
+ * displayed, and put in a `Content-Disposition` header: path separators would be
+ * confusing, control characters can break a header, and an unbounded length is a
+ * denial-of-service on every UI that renders it.
+ */
+export declare function sanitizeFilename(filename: string): string;
+export interface CreateUploadInput {
+    readonly filename: string;
+    readonly contentType?: string;
+    /**
+     * Declared size, used to reject an oversized upload before issuing a URL.
+     *
+     * Advisory only — a presigned `PUT` cannot enforce it. The real figure is
+     * checked on {@link FilesService.confirmUpload}.
+     */
+    readonly sizeBytes?: number;
+    readonly metadata?: Record<string, unknown>;
+    readonly expiresInSeconds?: number;
+    /** Overrides the service default. */
+    readonly maxBytes?: number;
+}
+export interface DirectUpload {
+    readonly file: FileRecord;
+    /** Where the browser should `PUT` the bytes. */
+    readonly uploadUrl: string;
+}
+export interface ServerUploadInput {
+    readonly filename: string;
+    readonly body: ObjectBody;
+    readonly contentType?: string;
+    readonly metadata?: Record<string, unknown>;
+    readonly maxBytes?: number;
+}
+export interface ListFilesOptions {
+    readonly status?: FileStatus | readonly FileStatus[];
+    readonly limit?: number;
+    readonly before?: Date;
+}
+export interface FilesService {
+    /**
+     * Reserve a file and hand back a URL the browser can upload to.
+     *
+     * The row is created `pending`. Nothing treats the file as real until
+     * {@link confirmUpload} has verified the object exists.
+     */
+    createUpload(context: WorkspaceContext, input: CreateUploadInput): Promise<DirectUpload>;
+    /**
+     * Verify the object landed, record its true size, and mark the file ready.
+     *
+     * A client saying "done" is not evidence. This asks the store.
+     */
+    confirmUpload(context: WorkspaceContext, fileId: string): Promise<FileRecord>;
+    /** Upload from the server, in one step. The row is `ready` immediately. */
+    upload(context: WorkspaceContext, input: ServerUploadInput): Promise<FileRecord>;
+    get(context: WorkspaceContext, fileId: string): Promise<FileRecord>;
+    list(context: WorkspaceContext, options?: ListFilesOptions): Promise<FileRecord[]>;
+    /** A URL for reading the file, named with its original filename. */
+    getUrl(context: WorkspaceContext, fileId: string, options?: UrlOptions): Promise<string>;
+    /** Remove the object and the row. */
+    delete(context: WorkspaceContext, fileId: string): Promise<void>;
+    /** An existing ready file with the same content, for deduplication. */
+    findByChecksum(context: WorkspaceContext, checksum: string): Promise<FileRecord | undefined>;
+    /**
+     * Delete `pending` rows older than a cutoff, and any object they left behind.
+     *
+     * A presigned URL that is never used leaves a reservation forever. Run this
+     * from a scheduled job.
+     */
+    purgeAbandoned(options?: {
+        olderThan?: Date;
+        limit?: number;
+    }): Promise<number>;
+}
+export interface FilesServiceDeps {
+    readonly db: CoreDatabase;
+    readonly storage: StorageService;
+    readonly maxBytes?: number;
+    readonly now?: () => Date;
+}
+/** Where a file's bytes live. Derived from the row id, never from caller input. */
+export declare function fileStoragePath(fileId: string): string;
+export declare function createFilesService(deps: FilesServiceDeps): FilesService;
+//# sourceMappingURL=service.d.ts.map

package/dist/files/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/files/service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAWjE;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBzD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzF;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9E,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjF,GAAG,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAEnF,oEAAoE;IACpE,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzF,qCAAqC;IACrC,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE,uEAAuE;IACvE,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAE7F;;;;;OAKG;IACH,cAAc,CAAC,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY,CA8TvE"}

package/dist/files/service.js

@@ -0,0 +1,303 @@
+import { createHash } from "node:crypto";
+import { and, desc, eq, inArray, lt } from "drizzle-orm";
+import { files } from "../db/schema/index.js";
+import { ConflictError, InvalidInputError, NotFoundError } from "../errors.js";
+/** Control characters, built from escapes so none is ever a literal. */
+const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/g;
+const MAX_FILENAME_LENGTH = 255;
+const DEFAULT_UPLOAD_URL_SECONDS = 900;
+const DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
+const DEFAULT_LIST_LIMIT = 50;
+const MAX_LIST_LIMIT = 200;
+/**
+ * Reduce a caller-supplied filename to something safe to store and echo back.
+ *
+ * The filename never becomes part of the storage key — that is derived from the
+ * row id — so this is not a traversal defence. It exists because the value is
+ * displayed, and put in a `Content-Disposition` header: path separators would be
+ * confusing, control characters can break a header, and an unbounded length is a
+ * denial-of-service on every UI that renders it.
+ */
+export function sanitizeFilename(filename) {
+    const cleaned = filename
+        .replace(CONTROL_CHARACTERS, "")
+        // Collapse any path the browser included; only the leaf is meaningful.
+        .split(/[/\\]/)
+        .pop()
+        .replace(/^\.+/, "")
+        .trim();
+    if (cleaned.length === 0) {
+        throw new InvalidInputError("A filename is required.");
+    }
+    return cleaned.length > MAX_FILENAME_LENGTH
+        ? cleaned.slice(0, MAX_FILENAME_LENGTH)
+        : cleaned;
+}
+/** Where a file's bytes live. Derived from the row id, never from caller input. */
+export function fileStoragePath(fileId) {
+    return `files/${fileId}`;
+}
+export function createFilesService(deps) {
+    const now = deps.now ?? (() => new Date());
+    const maxBytes = deps.maxBytes ?? DEFAULT_MAX_BYTES;
+    async function requireOwn(context, fileId) {
+        const rows = await deps.db
+            .select()
+            .from(files)
+            .where(and(eq(files.id, fileId), 
+        // Scoped, so another tenant's file id is simply not found.
+        eq(files.workspaceId, context.workspaceId)))
+            .limit(1);
+        const file = rows[0];
+        if (file === undefined) {
+            throw new NotFoundError("File not found.");
+        }
+        return file;
+    }
+    const service = {
+        async createUpload(context, input) {
+            const filename = sanitizeFilename(input.filename);
+            const limit = input.maxBytes ?? maxBytes;
+            if (input.sizeBytes !== undefined) {
+                if (!Number.isInteger(input.sizeBytes) || input.sizeBytes < 0) {
+                    throw new InvalidInputError("sizeBytes must be a non-negative integer.");
+                }
+                if (input.sizeBytes > limit) {
+                    // Rejected before a URL is issued, so the bytes never travel.
+                    throw new InvalidInputError(`Upload exceeds the ${limit} byte limit.`);
+                }
+            }
+            const scoped = deps.storage.forWorkspace(context);
+            /**
+             * The row is inserted first so its id can seed the storage key. That makes
+             * the key entirely server-derived: a filename may contain anything at all
+             * without ever becoming part of a path.
+             */
+            const [reserved] = await deps.db
+                .insert(files)
+                .values({
+                workspaceId: context.workspaceId,
+                // Replaced immediately below; a placeholder keeps the column not-null.
+                storageKey: `pending:${crypto.randomUUID()}`,
+                filename,
+                contentType: input.contentType ?? null,
+                sizeBytes: input.sizeBytes ?? null,
+                uploadedByUserId: context.userId,
+                status: "pending",
+                metadata: (input.metadata ?? null),
+            })
+                .returning();
+            const storageKey = scoped.keyFor(fileStoragePath(reserved.id));
+            const [file] = await deps.db
+                .update(files)
+                .set({ storageKey, updatedAt: now() })
+                .where(eq(files.id, reserved.id))
+                .returning();
+            const uploadUrl = await scoped.createUploadUrl(fileStoragePath(reserved.id), {
+                expiresInSeconds: input.expiresInSeconds ?? DEFAULT_UPLOAD_URL_SECONDS,
+                ...(input.contentType !== undefined ? { contentType: input.contentType } : {}),
+            });
+            return { file: file, uploadUrl };
+        },
+        async confirmUpload(context, fileId) {
+            const file = await requireOwn(context, fileId);
+            if (file.status === "ready") {
+                // Idempotent: a client retrying confirmation is not an error.
+                return file;
+            }
+            const provider = deps.storage.provider;
+            const at = now();
+            /**
+             * Ask the store. A client reporting success is not evidence — without this
+             * a caller could mark a file ready that was never uploaded, and every
+             * consumer downstream would then fail on a missing object.
+             */
+            const stat = provider.stat !== undefined
+                ? await provider.stat(file.storageKey)
+                : (await provider.exists(file.storageKey))
+                    ? { size: file.sizeBytes ?? 0 }
+                    : undefined;
+            if (stat === undefined) {
+                const [failed] = await deps.db
+                    .update(files)
+                    .set({ status: "failed", updatedAt: at })
+                    .where(eq(files.id, file.id))
+                    .returning();
+                throw new ConflictError("No uploaded object found for this file.", {
+                    cause: new Error(`storage key ${failed.storageKey} is absent`),
+                });
+            }
+            /**
+             * A presigned PUT cannot cap the body, so this is where an oversized upload
+             * is caught. The object is removed rather than left billable.
+             */
+            if (stat.size > maxBytes) {
+                await provider.delete(file.storageKey);
+                await deps.db
+                    .update(files)
+                    .set({ status: "failed", sizeBytes: stat.size, updatedAt: at })
+                    .where(eq(files.id, file.id));
+                throw new InvalidInputError(`Uploaded object exceeds the ${maxBytes} byte limit.`);
+            }
+            const [ready] = await deps.db
+                .update(files)
+                .set({
+                status: "ready",
+                // The store's figure, not the client's claim.
+                sizeBytes: stat.size,
+                ...(file.contentType === null && stat.contentType !== undefined
+                    ? { contentType: stat.contentType }
+                    : {}),
+                confirmedAt: at,
+                updatedAt: at,
+            })
+                .where(eq(files.id, file.id))
+                .returning();
+            return ready;
+        },
+        async upload(context, input) {
+            const filename = sanitizeFilename(input.filename);
+            const limit = input.maxBytes ?? maxBytes;
+            const bytes = typeof input.body === "string" ? new TextEncoder().encode(input.body) : input.body;
+            if (bytes.byteLength > limit) {
+                throw new InvalidInputError(`Upload exceeds the ${limit} byte limit.`);
+            }
+            const at = now();
+            const scoped = deps.storage.forWorkspace(context);
+            const [reserved] = await deps.db
+                .insert(files)
+                .values({
+                workspaceId: context.workspaceId,
+                storageKey: `pending:${crypto.randomUUID()}`,
+                filename,
+                contentType: input.contentType ?? null,
+                sizeBytes: bytes.byteLength,
+                uploadedByUserId: context.userId,
+                status: "pending",
+                metadata: (input.metadata ?? null),
+            })
+                .returning();
+            const path = fileStoragePath(reserved.id);
+            const storageKey = scoped.keyFor(path);
+            try {
+                await scoped.upload({
+                    path,
+                    body: bytes,
+                    ...(input.contentType !== undefined ? { contentType: input.contentType } : {}),
+                    maxBytes: limit,
+                });
+            }
+            catch (error) {
+                /**
+                 * The row is removed rather than left `pending`. A server-side upload that
+                 * failed has no object to collect later, so a reservation would be pure
+                 * noise in the sweep.
+                 */
+                await deps.db.delete(files).where(eq(files.id, reserved.id));
+                throw error;
+            }
+            const [ready] = await deps.db
+                .update(files)
+                .set({
+                storageKey,
+                status: "ready",
+                // The server saw the bytes, so the checksum is trustworthy here.
+                checksum: createHash("sha256").update(bytes).digest("hex"),
+                confirmedAt: at,
+                updatedAt: at,
+            })
+                .where(eq(files.id, reserved.id))
+                .returning();
+            return ready;
+        },
+        async get(context, fileId) {
+            return requireOwn(context, fileId);
+        },
+        async list(context, options = {}) {
+            const clauses = [eq(files.workspaceId, context.workspaceId)];
+            if (options.status !== undefined) {
+                const statuses = Array.isArray(options.status) ? options.status : [options.status];
+                clauses.push(inArray(files.status, [...statuses]));
+            }
+            if (options.before !== undefined) {
+                clauses.push(lt(files.createdAt, options.before));
+            }
+            return deps.db
+                .select()
+                .from(files)
+                .where(and(...clauses))
+                // Tie-broken on id so keyset pagination cannot loop on equal timestamps.
+                .orderBy(desc(files.createdAt), desc(files.id))
+                .limit(Math.min(options.limit ?? DEFAULT_LIST_LIMIT, MAX_LIST_LIMIT));
+        },
+        async getUrl(context, fileId, options = {}) {
+            const file = await requireOwn(context, fileId);
+            if (file.status !== "ready") {
+                // A pending file has no object behind it; a URL would 404.
+                throw new ConflictError("File is not ready.");
+            }
+            return deps.storage.forWorkspace(context).urlForKey(file.storageKey, {
+                ...options,
+                /**
+                 * Defaults to the stored filename, so a download is named sensibly and
+                 * served as an attachment — which is what makes user uploads safe to hand
+                 * back. Pass `downloadFilename: undefined` explicitly to opt out.
+                 */
+                downloadFilename: options.downloadFilename ?? file.filename,
+            });
+        },
+        async delete(context, fileId) {
+            const file = await requireOwn(context, fileId);
+            /**
+             * Object first. If the row went first and the delete failed, the object
+             * would be orphaned with nothing left pointing at it — unreachable and
+             * still billed.
+             */
+            await deps.storage.forWorkspace(context).deleteKey(file.storageKey);
+            await deps.db.delete(files).where(eq(files.id, file.id));
+        },
+        async findByChecksum(context, checksum) {
+            const rows = await deps.db
+                .select()
+                .from(files)
+                .where(and(eq(files.workspaceId, context.workspaceId), eq(files.checksum, checksum), eq(files.status, "ready")))
+                .limit(1);
+            return rows[0];
+        },
+        async purgeAbandoned(options = {}) {
+            /**
+             * Default cutoff is a day, comfortably beyond any upload URL's lifetime.
+             *
+             * Note the two clocks: this is computed from the injected `now`, while
+             * `created_at` defaults to PostgreSQL's. A day of slack makes any realistic
+             * skew between an application server and the database irrelevant — but pass
+             * `olderThan` if you need the cutoff to be exact.
+             */
+            const cutoff = options.olderThan ?? new Date(now().getTime() - 24 * 60 * 60 * 1000);
+            const abandoned = await deps.db
+                .select()
+                .from(files)
+                .where(and(eq(files.status, "pending"), lt(files.createdAt, cutoff)))
+                .limit(options.limit ?? 100);
+            let removed = 0;
+            for (const file of abandoned) {
+                /**
+                 * A reservation may have a half-finished object behind it, so the store is
+                 * asked to delete unconditionally — a missing key is not an error.
+                 */
+                try {
+                    await deps.storage.provider.delete(file.storageKey);
+                }
+                catch {
+                    // Leave the row so the next sweep retries rather than losing the record.
+                    continue;
+                }
+                await deps.db.delete(files).where(eq(files.id, file.id));
+                removed += 1;
+            }
+            return removed;
+        },
+    };
+    return service;
+}
+//# sourceMappingURL=service.js.map

package/dist/files/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/files/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAG9C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAK/E,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAEpD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,OAAO,GAAG,QAAQ;SACrB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAChC,uEAAuE;SACtE,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,EAAG;SACN,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,IAAI,EAAE,CAAC;IAEV,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,GAAG,mBAAmB;QACzC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;QACvC,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAqFD,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,SAAS,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEpD,KAAK,UAAU,UAAU,CAAC,OAAyB,EAAE,MAAc;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,2DAA2D;QAC3D,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAC3C,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAiB;QAC5B,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK;YAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAEzC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,IAAI,iBAAiB,CAAC,2CAA2C,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;oBAC5B,8DAA8D;oBAC9D,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,KAAK,cAAc,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD;;;;eAIG;YACH,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC7B,MAAM,CAAC,KAAK,CAAC;iBACb,MAAM,CAAC;gBACN,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,uEAAuE;gBACvE,UAAU,EAAE,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE;gBAC5C,QAAQ;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,gBAAgB,EAAE,OAAO,CAAC,MAAM;gBAChC,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAU;aAC5C,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAEhE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;iBACrC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAS,CAAC,EAAE,CAAC,CAAC;iBACjC,SAAS,EAAE,CAAC;YAEf,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,QAAS,CAAC,EAAE,CAAC,EAAE;gBAC5E,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,0BAA0B;gBACtE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,IAAK,EAAE,SAAS,EAAE,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM;YACjC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,8DAA8D;gBAC9D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YAEjB;;;;eAIG;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS;gBACtC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;gBACtC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACxC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE;oBAC/B,CAAC,CAAC,SAAS,CAAC;YAEhB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;qBAC3B,MAAM,CAAC,KAAK,CAAC;qBACb,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBACxC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;qBAC5B,SAAS,EAAE,CAAC;gBAEf,MAAM,IAAI,aAAa,CAAC,yCAAyC,EAAE;oBACjE,KAAK,EAAE,IAAI,KAAK,CAAC,eAAe,MAAO,CAAC,UAAU,YAAY,CAAC;iBAChE,CAAC,CAAC;YACL,CAAC;YAED;;;eAGG;YACH,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,EAAE;qBACV,MAAM,CAAC,KAAK,CAAC;qBACb,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBAC9D,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAEhC,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,QAAQ,cAAc,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC1B,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC;gBACH,MAAM,EAAE,OAAO;gBACf,8CAA8C;gBAC9C,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;oBAC7D,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;oBACnC,CAAC,CAAC,EAAE,CAAC;gBACP,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,EAAE;aACd,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;iBAC5B,SAAS,EAAE,CAAC;YAEf,OAAO,KAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK;YACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAEzC,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAErF,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,EAAE,CAAC;gBAC7B,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,KAAK,cAAc,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC7B,MAAM,CAAC,KAAK,CAAC;iBACb,MAAM,CAAC;gBACN,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE;gBAC5C,QAAQ;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,OAAO,CAAC,MAAM;gBAChC,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAU;aAC5C,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,MAAM,IAAI,GAAG,eAAe,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC;oBAClB,IAAI;oBACJ,IAAI,EAAE,KAAK;oBACX,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9E,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf;;;;mBAIG;gBACH,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC1B,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC;gBACH,UAAU;gBACV,MAAM,EAAE,OAAO;gBACf,iEAAiE;gBACjE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC1D,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,EAAE;aACd,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAS,CAAC,EAAE,CAAC,CAAC;iBACjC,SAAS,EAAE,CAAC;YAEf,OAAO,KAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,OAAO,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE;YAC9B,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;YAE7D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC;YAED,OAAO,IAAI,CAAC,EAAE;iBACX,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;gBACvB,yEAAyE;iBACxE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;iBAC9C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,2DAA2D;gBAC3D,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE;gBACnE,GAAG,OAAO;gBACV;;;;mBAIG;gBACH,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,QAAQ;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM;YAC1B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE/C;;;;eAIG;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ;YACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EAC1C,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC5B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAC1B,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,OAAO,GAAG,EAAE;YAC/B;;;;;;;eAOG;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAEpF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC5B,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;iBACpE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;YAE/B,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B;;;mBAGG;gBACH,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,yEAAyE;oBACzE,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @digimuza/saas-core
+ *
+ * The root entry point is intentionally almost empty. Import from a subpath so
+ * that server-only code (configuration, database, auth) is never reachable from
+ * a client bundle through a barrel file:
+ *
+ * ```ts
+ * import { config }        from "@digimuza/saas-core/config";
+ * import { clientConfig }  from "@digimuza/saas-core/config/client";
+ * import { getDatabase }   from "@digimuza/saas-core/db";
+ * import { users }         from "@digimuza/saas-core/db/schema";
+ * import { auth }          from "@digimuza/saas-core/auth";
+ * import { workspaces }    from "@digimuza/saas-core/workspaces";
+ * import { authorization } from "@digimuza/saas-core/authorization";
+ * import { billing }       from "@digimuza/saas-core/billing";
+ * import { entitlements }  from "@digimuza/saas-core/entitlements";
+ * import { events }        from "@digimuza/saas-core/events";
+ * import { jobs }          from "@digimuza/saas-core/jobs";
+ * import { realtime }      from "@digimuza/saas-core/realtime";
+ * import { fromEvents }    from "@digimuza/saas-core/streams";
+ * import { email }         from "@digimuza/saas-core/email";
+ * import { notifications } from "@digimuza/saas-core/notifications";
+ * import { audit }         from "@digimuza/saas-core/audit";
+ * ```
+ *
+ * Domain errors are re-exported here as well as from `/errors`, because route
+ * handlers map them to status codes and would otherwise need a second import
+ * just for the error classes.
+ */
+export declare const VERSION = "0.14.0";
+export { ConflictError, EntitlementRequiredError, ForbiddenError, InvalidInputError, LimitExceededError, NotFoundError, SaasCoreError, UnauthorizedError, type SaasCoreErrorCode, } from "./errors.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,eAAO,MAAM,OAAO,WAAW,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,33 @@
+/**
+ * @digimuza/saas-core
+ *
+ * The root entry point is intentionally almost empty. Import from a subpath so
+ * that server-only code (configuration, database, auth) is never reachable from
+ * a client bundle through a barrel file:
+ *
+ * ```ts
+ * import { config }        from "@digimuza/saas-core/config";
+ * import { clientConfig }  from "@digimuza/saas-core/config/client";
+ * import { getDatabase }   from "@digimuza/saas-core/db";
+ * import { users }         from "@digimuza/saas-core/db/schema";
+ * import { auth }          from "@digimuza/saas-core/auth";
+ * import { workspaces }    from "@digimuza/saas-core/workspaces";
+ * import { authorization } from "@digimuza/saas-core/authorization";
+ * import { billing }       from "@digimuza/saas-core/billing";
+ * import { entitlements }  from "@digimuza/saas-core/entitlements";
+ * import { events }        from "@digimuza/saas-core/events";
+ * import { jobs }          from "@digimuza/saas-core/jobs";
+ * import { realtime }      from "@digimuza/saas-core/realtime";
+ * import { fromEvents }    from "@digimuza/saas-core/streams";
+ * import { email }         from "@digimuza/saas-core/email";
+ * import { notifications } from "@digimuza/saas-core/notifications";
+ * import { audit }         from "@digimuza/saas-core/audit";
+ * ```
+ *
+ * Domain errors are re-exported here as well as from `/errors`, because route
+ * handlers map them to status codes and would otherwise need a second import
+ * just for the error classes.
+ */
+export const VERSION = "0.14.0";
+export { ConflictError, EntitlementRequiredError, ForbiddenError, InvalidInputError, LimitExceededError, NotFoundError, SaasCoreError, UnauthorizedError, } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,iBAAiB,GAElB,MAAM,aAAa,CAAC"}

package/dist/jobs/backend.d.ts

@@ -0,0 +1,23 @@
+import type { JobTriggerOptions } from "./types.ts";
+/**
+ * The slice of Trigger.dev the core calls.
+ *
+ * Narrow and injectable so the service is testable without a Trigger.dev
+ * account: the real backend is a thin adapter over `tasks.trigger`, and tests
+ * pass a recorder. It also keeps the SDK out of the service's imports, so the
+ * dependency stays in one file.
+ */
+export interface JobBackend {
+    trigger(taskId: string, payload: unknown, options: JobTriggerOptions): Promise<{
+        readonly id: string;
+    }>;
+}
+/**
+ * Adapt the Trigger.dev SDK to {@link JobBackend}.
+ *
+ * The SDK is imported dynamically so that merely importing
+ * `@digimuza/saas-core/jobs` does not load it — a module that only needs the
+ * `JobPayload` type should not pull in the whole client.
+ */
+export declare function createTriggerDevBackend(): JobBackend;
+//# sourceMappingURL=backend.d.ts.map

package/dist/jobs/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/jobs/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CACL,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,UAAU,CAmBpD"}

package/dist/jobs/backend.js

@@ -0,0 +1,23 @@
+/**
+ * Adapt the Trigger.dev SDK to {@link JobBackend}.
+ *
+ * The SDK is imported dynamically so that merely importing
+ * `@digimuza/saas-core/jobs` does not load it — a module that only needs the
+ * `JobPayload` type should not pull in the whole client.
+ */
+export function createTriggerDevBackend() {
+    return {
+        async trigger(taskId, payload, options) {
+            const { tasks } = await import("@trigger.dev/sdk");
+            const handle = await tasks.trigger(taskId, payload, 
+            /**
+             * Cast at the boundary: `JobTriggerOptions` mirrors Trigger.dev's own
+             * option names, but restating its full type here would couple the core's
+             * public surface to the SDK's internal generics.
+             */
+            options);
+            return { id: handle.id };
+        },
+    };
+}
+//# sourceMappingURL=backend.js.map

package/dist/jobs/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/jobs/backend.ts"],"names":[],"mappings":"AAkBA;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO;YACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAChC,MAAM,EACN,OAAgB;YAChB;;;;eAIG;YACH,OAAgB,CACjB,CAAC;YAEF,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/jobs/index.d.ts

@@ -0,0 +1,29 @@
+import { type JobsService } from "./service.ts";
+export { createTriggerDevBackend, type JobBackend } from "./backend.ts";
+export { createJobsService, describeJobError, type JobProgress, type JobReporter, type JobsService, type JobsServiceDeps, } from "./service.ts";
+export { ACTOR_TAG_PREFIX, WORKSPACE_TAG_PREFIX, type JobHandle, type JobPayload, type JobTenant, type JobTriggerOptions, type SystemJobPayload, type TriggerJobOptions, } from "./types.ts";
+/**
+ * The Trigger.dev SDK, re-exported unchanged.
+ *
+ * Deliberate: the spec is explicit that advanced applications must be able to
+ * reach Trigger.dev's own capabilities. Wrapping `task`, `schedules` or `wait`
+ * would mean re-documenting and re-typing a mature API for no gain, and would
+ * lag behind it.
+ */
+export { batch, configure as configureTriggerClient, idempotencyKeys, logger, metadata, queue, queues, retry, runs, schedules, schemaTask, tags, task, tasks, timeout, usage, wait, } from "@trigger.dev/sdk";
+/**
+ * Point the Trigger.dev SDK at the configured credentials.
+ *
+ * Idempotent; call it from application startup and from the Trigger.dev config
+ * file. Reads the `jobs` configuration section, so it throws `ConfigError` if
+ * Trigger.dev is not configured.
+ */
+export declare function configureJobs(): Promise<void>;
+/**
+ * Default service, wired to Trigger.dev and the core event registry.
+ *
+ * The backend is built eagerly but imports the SDK lazily, so this module stays
+ * importable in a process that never queues anything.
+ */
+export declare const jobs: JobsService;
+//# sourceMappingURL=index.d.ts.map

package/dist/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AA0EA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,EACL,SAAS,IAAI,sBAAsB,EACnC,eAAe,EACf,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,UAAU,EACV,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,KAAK,EACL,IAAI,GACL,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD;AAED;;;;;GAKG;AACH,eAAO,MAAM,IAAI,EAAE,WAGjB,CAAC"}