@digimuza/saas-core 0.0.2

package/dist/logger/redact.js

@@ -0,0 +1,178 @@
+/**
+ * Redaction.
+ *
+ * The core handles API keys, session cookies, invitation tokens and webhook
+ * signing secrets. A logger that faithfully serialises whatever it is handed is
+ * the easiest way to move all of them into a log aggregator that a wider audience
+ * can read — so redaction is on by default, and errs toward over-redacting.
+ *
+ * Two independent passes, because either alone has a hole:
+ *
+ * - **By key.** `{ apiKey: "..." }` is redacted whatever the value looks like.
+ * - **By value.** A credential under an innocent key — `{ input: "dgk_..." }` —
+ *   is caught by its shape.
+ */
+export const REDACTED = "[redacted]";
+/**
+ * Field names whose values are never logged.
+ *
+ * Matched as case-insensitive substrings of the key, so `workosCookiePassword`
+ * and `cookie_password` are both caught without enumerating spellings.
+ */
+export const DEFAULT_REDACT_KEYS = [
+    "password",
+    "passwd",
+    "secret",
+    "token",
+    "apikey",
+    "api_key",
+    "authorization",
+    "cookie",
+    "credential",
+    "privatekey",
+    "private_key",
+    "signature",
+    "keyhash",
+    "key_hash",
+    "sessiondata",
+    "bearer",
+    "otp",
+    "mfa",
+];
+/**
+ * Value shapes that are credentials wherever they appear.
+ *
+ * Deliberately anchored on the *prefixes this system and its providers issue*
+ * rather than on generic entropy heuristics: "looks random" would redact ids,
+ * hashes and slugs, and a log with every identifier removed is not useful.
+ */
+const CREDENTIAL_PATTERNS = [
+    // This package's API keys: <prefix>_<32 hex>_<64 hex>.
+    /\b[a-z][a-z0-9]{1,15}_[0-9a-f]{32}_[0-9a-f]{64}\b/,
+    // Webhook signing secrets, ours and Revolut's.
+    /\bwhsec_[A-Za-z0-9_-]{20,}\b/,
+    /\bwsk_[A-Za-z0-9_-]{16,}\b/,
+    // Provider secret/publishable/restricted keys — Stripe, Resend, WorkOS shapes.
+    /\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{10,}\b/,
+    /\bre_[A-Za-z0-9_-]{16,}\b/,
+    // JSON Web Tokens, including the sealed session cookie.
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/,
+    // An Authorization header value that arrived as a plain string.
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/i,
+];
+/** Bounds, so one pathological object cannot stall the process or fill a disk. */
+const MAX_DEPTH = 6;
+const MAX_ARRAY_ITEMS = 100;
+const MAX_STRING_LENGTH = 8192;
+export function createRedactor(options = {}) {
+    const keys = [
+        ...(options.keys ?? DEFAULT_REDACT_KEYS),
+        ...(options.additionalKeys ?? []),
+    ].map((key) => key.toLowerCase());
+    const scanValues = options.disableValueScanning !== true;
+    function isSensitiveKey(key) {
+        const lower = key.toLowerCase();
+        return keys.some((needle) => lower.includes(needle));
+    }
+    function redactString(value) {
+        if (scanValues && CREDENTIAL_PATTERNS.some((pattern) => pattern.test(value))) {
+            return REDACTED;
+        }
+        return value.length > MAX_STRING_LENGTH
+            ? `${value.slice(0, MAX_STRING_LENGTH)}…[truncated]`
+            : value;
+    }
+    function walk(value, depth, seen) {
+        if (value === null || value === undefined) {
+            return value;
+        }
+        if (typeof value === "string") {
+            return redactString(value);
+        }
+        if (typeof value === "number" || typeof value === "boolean") {
+            return value;
+        }
+        if (typeof value === "bigint") {
+            return value.toString();
+        }
+        // Never serialise a function; its source can embed a literal secret.
+        if (typeof value === "function") {
+            return "[function]";
+        }
+        if (typeof value === "symbol") {
+            return value.toString();
+        }
+        if (value instanceof Date) {
+            return value.toISOString();
+        }
+        if (value instanceof Error) {
+            return serializeError(value, depth, seen, walk);
+        }
+        if (depth >= MAX_DEPTH) {
+            return "[max depth]";
+        }
+        if (typeof value === "object") {
+            // A cyclic structure would otherwise recurse until the stack gives out.
+            if (seen.has(value)) {
+                return "[circular]";
+            }
+            seen.add(value);
+            if (Array.isArray(value)) {
+                const items = value.slice(0, MAX_ARRAY_ITEMS).map((item) => walk(item, depth + 1, seen));
+                return value.length > MAX_ARRAY_ITEMS
+                    ? [...items, `[${value.length - MAX_ARRAY_ITEMS} more]`]
+                    : items;
+            }
+            if (value instanceof Map) {
+                return walk(Object.fromEntries(value), depth, seen);
+            }
+            if (value instanceof Set) {
+                return walk([...value], depth, seen);
+            }
+            const result = {};
+            for (const [key, entry] of Object.entries(value)) {
+                result[key] = isSensitiveKey(key) ? REDACTED : walk(entry, depth + 1, seen);
+            }
+            return result;
+        }
+        return String(value);
+    }
+    return (value) => walk(value, 0, new WeakSet());
+}
+/** Error depth limit, so a long `cause` chain cannot blow the stack. */
+const MAX_CAUSE_DEPTH = 4;
+function serializeError(error, depth, seen, walk) {
+    const serialized = {
+        name: error.name,
+        /**
+         * The message is passed through value scanning. The core never puts a secret
+         * in one, but a caller's error might — and a message is the likeliest place
+         * for a token to end up by accident.
+         */
+        message: walk(error.message, depth + 1, seen),
+    };
+    if (typeof error.stack === "string") {
+        serialized.stack = error.stack.split("\n").slice(0, 20).join("\n");
+    }
+    /**
+     * `AggregateError.errors` and `cause` both carry the detail that makes a
+     * failure diagnosable — dropping them would leave "Invalid configuration" with
+     * no indication of which section.
+     */
+    if (error instanceof AggregateError && Array.isArray(error.errors)) {
+        serialized.errors = error.errors
+            .slice(0, MAX_ARRAY_ITEMS)
+            .map((inner) => walk(inner, depth + 1, seen));
+    }
+    const cause = error.cause;
+    if (cause !== undefined && depth < MAX_CAUSE_DEPTH) {
+        serialized.cause = walk(cause, depth + 1, seen);
+    }
+    // Domain errors carry a machine-readable code; keep it for filtering.
+    const code = error.code;
+    if (typeof code === "string" || typeof code === "number") {
+        serialized.code = code;
+    }
+    return serialized;
+}
+//# sourceMappingURL=redact.js.map

package/dist/logger/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/logger/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,WAAW;IACX,SAAS;IACT,UAAU;IACV,aAAa;IACb,QAAQ;IACR,KAAK;IACL,KAAK;CACN,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAsB;IAC7C,uDAAuD;IACvD,mDAAmD;IACnD,+CAA+C;IAC/C,8BAA8B;IAC9B,4BAA4B;IAC5B,+EAA+E;IAC/E,iDAAiD;IACjD,2BAA2B;IAC3B,wDAAwD;IACxD,gEAAgE;IAChE,gEAAgE;IAChE,qCAAqC;CACtC,CAAC;AAgBF,kFAAkF;AAClF,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAM/B,MAAM,UAAU,cAAc,CAAC,OAAO,GAAkB,EAAE;IACxD,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC;QACxC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;KAClC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC;IAEzD,SAAS,cAAc,CAAC,GAAW;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,YAAY,CAAC,KAAa;QACjC,IAAI,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,GAAG,iBAAiB;YACrC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,cAAc;YACpD,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;QAChE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,qEAAqE;QACrE,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YACvB,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,wEAAwE;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzF,OAAO,KAAK,CAAC,MAAM,GAAG,eAAe;oBACnC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,QAAQ,CAAC;oBACxD,CAAC,CAAC,KAAK,CAAC;YACZ,CAAC;YAED,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,wEAAwE;AACxE,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,SAAS,cAAc,CACrB,KAAY,EACZ,KAAa,EACb,IAAqB,EACrB,IAAuE;IAEvE,MAAM,UAAU,GAA4B;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB;;;;WAIG;QACH,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC;KAC9C,CAAC;IAEF,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;aAC7B,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;aACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;QACnD,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,sEAAsE;IACtE,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzD,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/logger/service.d.ts

@@ -0,0 +1,14 @@
+import { type RedactOptions } from "./redact.ts";
+import { type LogFields, type Logger, type LogLevel, type LogSink } from "./types.ts";
+export interface CreateLoggerOptions {
+    /** Records below this are dropped before any serialisation. Default `"info"`. */
+    readonly level?: LogLevel;
+    readonly sink?: LogSink;
+    /** Context bound to every record. */
+    readonly base?: LogFields;
+    readonly redact?: RedactOptions;
+    /** Injectable clock, for deterministic tests. */
+    readonly now?: () => Date;
+}
+export declare function createLogger(options?: CreateLoggerOptions): Logger;
+//# sourceMappingURL=service.d.ts.map

package/dist/logger/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/logger/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,aAAa,EAAiB,MAAM,aAAa,CAAC;AAEhF,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAEtG,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,iDAAiD;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAMtE"}

package/dist/logger/service.js

@@ -0,0 +1,56 @@
+import { createRedactor } from "./redact.js";
+import { createJsonSink } from "./sinks.js";
+import { LOG_LEVEL_RANK } from "./types.js";
+export function createLogger(options = {}) {
+    const sink = options.sink ?? createJsonSink();
+    const redactor = createRedactor(options.redact ?? {});
+    const now = options.now ?? (() => new Date());
+    return build(options.level ?? "info", options.base ?? {}, sink, redactor, now);
+}
+function build(level, base, sink, redact, now) {
+    const threshold = LOG_LEVEL_RANK[level];
+    function isEnabled(candidate) {
+        return LOG_LEVEL_RANK[candidate] >= threshold;
+    }
+    function emit(candidate, message, fields) {
+        /**
+         * The level check happens *before* anything is merged or redacted. A `debug`
+         * call on an `info` logger must cost nothing beyond a comparison — otherwise
+         * debug logging becomes something you strip out for performance, which
+         * defeats the point of having levels.
+         */
+        if (!isEnabled(candidate)) {
+            return;
+        }
+        const merged = fields === undefined ? base : { ...base, ...fields };
+        /**
+         * A failure here must not propagate. Logging is diagnostic: a broken sink or
+         * an unserialisable field is never a reason for the operation being logged to
+         * fail.
+         */
+        try {
+            sink.write({
+                level: candidate,
+                time: now().toISOString(),
+                message,
+                fields: redact(merged),
+            });
+        }
+        catch {
+            // Deliberately silent. There is nowhere left to report it.
+        }
+    }
+    return {
+        level,
+        isEnabled,
+        debug: (message, fields) => emit("debug", message, fields),
+        info: (message, fields) => emit("info", message, fields),
+        warn: (message, fields) => emit("warn", message, fields),
+        error: (message, fields) => emit("error", message, fields),
+        child(fields) {
+            // Shares the sink and redactor; only the bound context differs.
+            return build(level, { ...base, ...fields }, sink, redact, now);
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/logger/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/logger/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAqC,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,cAAc,EAA4D,MAAM,YAAY,CAAC;AAatG,MAAM,UAAU,YAAY,CAAC,OAAO,GAAwB,EAAE;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE9C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,KAAK,CACZ,KAAe,EACf,IAAe,EACf,IAAa,EACb,MAAgB,EAChB,GAAe;IAEf,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAExC,SAAS,SAAS,CAAC,SAAmB;QACpC,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;IAChD,CAAC;IAED,SAAS,IAAI,CAAC,SAAmB,EAAE,OAAe,EAAE,MAAkB;QACpE;;;;;WAKG;QACH,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;QAEpE;;;;WAIG;QACH,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC;gBACT,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACzB,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM,CAA4B;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,SAAS;QACT,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAE1D,KAAK,CAAC,MAAM;YACV,gEAAgE;YAChE,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/logger/sinks.d.ts

@@ -0,0 +1,37 @@
+import type { LogRecord, LogSink } from "./types.ts";
+export interface StreamSinkOptions {
+    /** Defaults to `process.stdout.write`. */
+    readonly write?: (line: string) => void;
+}
+/**
+ * One JSON object per line.
+ *
+ * The production default. Every log collector parses it, and a structured record
+ * survives the trip to an aggregator with its fields intact — which is the only
+ * reason to have bound context at all.
+ *
+ * Everything goes to **stdout**, including errors. Many collectors treat anything
+ * on stderr as an error regardless of the record's own level, which would
+ * double-count warnings and mislabel info.
+ */
+export declare function createJsonSink(options?: StreamSinkOptions): LogSink;
+/**
+ * Human-readable, for a terminal.
+ *
+ * Development only. It is lossy by design — fields are flattened for scanning
+ * rather than preserved for querying.
+ */
+export declare function createPrettySink(options?: StreamSinkOptions): LogSink;
+/** Collects records. For tests. */
+export interface MemorySink extends LogSink {
+    readonly records: LogRecord[];
+    /** Records at one level. */
+    at(level: LogRecord["level"]): LogRecord[];
+    clear(): void;
+}
+export declare function createMemorySink(): MemorySink;
+/** Discards everything. For tests that assert on something else. */
+export declare function createNoopSink(): LogSink;
+/** Writes to several sinks. Useful for stdout plus an aggregator. */
+export declare function createMultiSink(sinks: readonly LogSink[]): LogSink;
+//# sourceMappingURL=sinks.d.ts.map

package/dist/logger/sinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/logger/sinks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAwBvE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAkCzE;AAED,mCAAmC;AACnC,MAAM,WAAW,UAAW,SAAQ,OAAO;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,4BAA4B;IAC5B,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,EAAE,CAAC;IAC3C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,gBAAgB,IAAI,UAAU,CAgB7C;AAED,oEAAoE;AACpE,wBAAgB,cAAc,IAAI,OAAO,CAExC;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAiBlE"}

package/dist/logger/sinks.js

@@ -0,0 +1,135 @@
+/**
+ * One JSON object per line.
+ *
+ * The production default. Every log collector parses it, and a structured record
+ * survives the trip to an aggregator with its fields intact — which is the only
+ * reason to have bound context at all.
+ *
+ * Everything goes to **stdout**, including errors. Many collectors treat anything
+ * on stderr as an error regardless of the record's own level, which would
+ * double-count warnings and mislabel info.
+ */
+export function createJsonSink(options = {}) {
+    const write = options.write ??
+        ((line) => {
+            process.stdout.write(line);
+        });
+    return {
+        name: "json",
+        write(record) {
+            /**
+             * Fields are spread *under* the reserved keys, so a caller cannot shadow
+             * `level` or `time` and make a record lie about itself.
+             */
+            const line = safeStringify({
+                ...record.fields,
+                level: record.level,
+                time: record.time,
+                message: record.message,
+            });
+            write(`${line}\n`);
+        },
+    };
+}
+/**
+ * Human-readable, for a terminal.
+ *
+ * Development only. It is lossy by design — fields are flattened for scanning
+ * rather than preserved for querying.
+ */
+export function createPrettySink(options = {}) {
+    const write = options.write ??
+        ((line) => {
+            process.stdout.write(line);
+        });
+    const label = {
+        debug: "DEBUG",
+        info: " INFO",
+        warn: " WARN",
+        error: "ERROR",
+    };
+    return {
+        name: "pretty",
+        write(record) {
+            const time = record.time.slice(11, 23);
+            const entries = Object.entries(record.fields).filter(([key]) => key !== "error");
+            const suffix = entries.length === 0
+                ? ""
+                : ` ${entries.map(([key, value]) => `${key}=${format(value)}`).join(" ")}`;
+            write(`${time} ${label[record.level] ?? record.level} ${record.message}${suffix}\n`);
+            // The error goes on its own lines; a stack is unreadable inline.
+            const error = record.fields.error;
+            if (error !== undefined) {
+                write(`${indent(safeStringify(error, 2))}\n`);
+            }
+        },
+    };
+}
+export function createMemorySink() {
+    const records = [];
+    return {
+        name: "memory",
+        records,
+        write(record) {
+            records.push(record);
+        },
+        at(level) {
+            return records.filter((record) => record.level === level);
+        },
+        clear() {
+            records.length = 0;
+        },
+    };
+}
+/** Discards everything. For tests that assert on something else. */
+export function createNoopSink() {
+    return { name: "noop", write: () => undefined };
+}
+/** Writes to several sinks. Useful for stdout plus an aggregator. */
+export function createMultiSink(sinks) {
+    return {
+        name: `multi(${sinks.map((sink) => sink.name).join(",")})`,
+        write(record) {
+            for (const sink of sinks) {
+                /**
+                 * A sink that throws must not take the others down with it, or lose the
+                 * record. Logging is never the reason a request fails.
+                 */
+                try {
+                    sink.write(record);
+                }
+                catch {
+                    // Nowhere left to report it; the remaining sinks still get the record.
+                }
+            }
+        },
+    };
+}
+function format(value) {
+    return typeof value === "string" ? value : safeStringify(value);
+}
+function indent(text) {
+    return text
+        .split("\n")
+        .map((line) => `    ${line}`)
+        .join("\n");
+}
+/**
+ * `JSON.stringify` that cannot throw.
+ *
+ * The redactor already removes cycles and BigInts, but a sink is the last thing
+ * between a record and the operator reading it — a throw here would lose the
+ * line entirely, which is worse than losing its shape.
+ */
+function safeStringify(value, space) {
+    try {
+        return JSON.stringify(value, undefined, space) ?? "undefined";
+    }
+    catch (error) {
+        return JSON.stringify({
+            message: "[unserializable log record]",
+            reason: error instanceof Error ? error.message : "unknown",
+        });
+    }
+}
+//# sourceMappingURL=sinks.js.map

package/dist/logger/sinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sinks.js","sourceRoot":"","sources":["../../src/logger/sinks.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,OAAO,GAAsB,EAAE;IAC5D,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,IAAY,EAAE,EAAE;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,CAAC,MAAM;YACV;;;eAGG;YACH,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,GAAG,MAAM,CAAC,MAAM;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YAEH,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAsB,EAAE;IAC9D,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,IAAY,EAAE,EAAE;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IAEL,MAAM,KAAK,GAA2B;QACpC,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;KACf,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;YAEjF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,CAAC;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAE/E,KAAK,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC;YAErF,iEAAiE;YACjE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,KAAK,CAAC,MAAM;YACV,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,EAAE,CAAC,KAAK;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK;YACH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAyB;IACvD,OAAO;QACL,IAAI,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC1D,KAAK,CAAC,MAAM;YACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB;;;mBAGG;gBACH,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,uEAAuE;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc,EAAE,KAAc;IACnD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/logger/types.d.ts

@@ -0,0 +1,47 @@
+/** Ordered from most to least verbose. */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+/** Numeric ranks, so a level check is a comparison rather than a lookup. */
+export declare const LOG_LEVEL_RANK: Readonly<Record<LogLevel, number>>;
+export interface LogFields {
+    readonly [key: string]: unknown;
+}
+/** What a sink receives. Already levelled, timestamped and redacted. */
+export interface LogRecord {
+    readonly level: LogLevel;
+    readonly time: string;
+    readonly message: string;
+    /** Merged bound context and per-call fields, after redaction. */
+    readonly fields: Readonly<Record<string, unknown>>;
+}
+/**
+ * Where records go.
+ *
+ * One method, because that is the whole job. Sampling, buffering and shipping
+ * belong to whatever you plug in here — wrapping them would mean maintaining a
+ * lowest common denominator of every logging backend.
+ */
+export interface LogSink {
+    readonly name: string;
+    write(record: LogRecord): void;
+}
+export interface Logger {
+    readonly level: LogLevel;
+    debug(message: string, fields?: LogFields): void;
+    info(message: string, fields?: LogFields): void;
+    warn(message: string, fields?: LogFields): void;
+    /** `error` accepts a throwable, serialised with its `cause` chain. */
+    error(message: string, fields?: LogFields & {
+        readonly error?: unknown;
+    }): void;
+    /**
+     * A logger with extra context bound to every record it writes.
+     *
+     * The point of the whole module: bind `requestId`, `workspaceId` and `userId`
+     * once at the edge and every line beneath it is attributable, without threading
+     * them through call signatures.
+     */
+    child(fields: LogFields): Logger;
+    /** Whether a level would be emitted. Guard expensive field construction. */
+    isEnabled(level: LogLevel): boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/logger/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/logger/types.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,4EAA4E;AAC5E,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAK7D,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAEzB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,sEAAsE;IACtE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAEhF;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAEjC,4EAA4E;IAC5E,SAAS,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;CACrC"}

package/dist/logger/types.js

@@ -0,0 +1,8 @@
+/** Numeric ranks, so a level check is a comparison rather than a lookup. */
+export const LOG_LEVEL_RANK = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+//# sourceMappingURL=types.js.map

package/dist/logger/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/logger/types.ts"],"names":[],"mappings":"AAGA,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAuC;IAChE,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC"}

package/dist/notifications/index.d.ts

@@ -0,0 +1,8 @@
+import { type NotificationsService } from "./service.ts";
+export { createNotificationsService, type CreateNotificationInput, type ListNotificationsOptions, type NotificationsService, type NotificationsServiceDeps, } from "./service.ts";
+/**
+ * Default service, bound to the database and to membership verification — so a
+ * notification cannot be addressed to someone outside the workspace it names.
+ */
+export declare const notifications: NotificationsService;
+//# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AA2DA,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAErF,OAAO,EACL,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,oBAK1B,CAAC"}

package/dist/notifications/index.js

@@ -0,0 +1,72 @@
+/**
+ * Public notifications surface: `@digimuza/saas-core/notifications`. Server-only.
+ *
+ * In-app notifications, addressed to a person. `workspace_id` only records which
+ * tenant a notification concerns — the row belongs to its recipient, and every
+ * read filters on `user_id`, so one user's notifications can never surface in
+ * another's list.
+ *
+ * ```ts
+ * import { notifications } from "@digimuza/saas-core/notifications";
+ *
+ * await notifications.create({
+ *   userId: member.id,
+ *   workspaceId: context.workspaceId,
+ *   type: "project.shared",
+ *   title: "Apollo was shared with you",
+ *   url: `/w/${slug}/projects/${projectId}`,
+ *   dedupeKey: `project.shared:${projectId}:${member.id}`,
+ * });
+ *
+ * // The bell icon.
+ * const unread = await notifications.countUnread(user.id);
+ * const inbox = await notifications.list(user.id, { unreadOnly: true });
+ * ```
+ *
+ * ## Email notifications
+ *
+ * Deliberately not automatic. Which notifications also warrant an email is a
+ * product decision — and per-user preferences, digests and quiet hours are
+ * product features, not core ones. Compose the two explicitly:
+ *
+ * ```ts
+ * const notification = await notifications.create({ ... });
+ * if (await wantsEmail(member.id, notification.type)) {
+ *   await email.sendTemplate({ to: profile.email, template: "...", data: { ... } });
+ * }
+ * ```
+ *
+ * ## Consuming events
+ *
+ * ```ts
+ * events.on("workspace.member.created", async (event) => {
+ *   await notifications.create({
+ *     userId: event.data.userId,
+ *     workspaceId: event.workspaceId,
+ *     type: "workspace.joined",
+ *     title: "Welcome to the workspace",
+ *     // Handlers can run twice; the key makes that harmless.
+ *     dedupeKey: event.id,
+ *   });
+ * });
+ * ```
+ *
+ * Note that a handler is **not durable** — a crash between the commit and the
+ * handler loses the notification. For anything that must not be missed, create it
+ * in the same transaction as the change, or from a Trigger.dev task.
+ */
+import { getDatabase } from "../db/client.js";
+import { workspaces } from "../workspaces/index.js";
+import { createNotificationsService } from "./service.js";
+export { createNotificationsService, } from "./service.js";
+/**
+ * Default service, bound to the database and to membership verification — so a
+ * notification cannot be addressed to someone outside the workspace it names.
+ */
+export const notifications = createNotificationsService({
+    get db() {
+        return getDatabase();
+    },
+    workspaces,
+});
+//# sourceMappingURL=index.js.map

package/dist/notifications/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAA6B,MAAM,cAAc,CAAC;AAErF,OAAO,EACL,0BAA0B,GAK3B,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAyB,0BAA0B,CAAC;IAC5E,IAAI,EAAE;QACJ,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,UAAU;CACX,CAAC,CAAC"}